- WHATS NEW IN Samba 3.0 alphaX
- =============================
-
-Changes in alpha20
- - Rework the 'guest account gets RID 501' code again...
- - Change to use NT-based session key negotiated for Win2k SPNEGO
- - Support printer data registry keys other than the default
- PrinterDriverData
- - Moved internal printerdata to REGISTRY_VALUE object
- - Corrected bug in dependentfiles list of DRIVER_INFO_3
- - fixed logic bug in blocking locks code
- - Updated registry api code to work with new printer data key
- support
- - Added vfstest tool
- - round lock timeouts in lockingX upwards to multiples of 1 second
- - Fixed bugs in Printer Change Notify code
- - added a 'net ads lookup' command that does a CLDAP NetLogon
- query to a win2000 server
- - Added script to find undocumented smb.conf parameters
- - Added missing parameters to smb.conf(5)
- - receive & parse main CLDAP reply from win2k server
- - removed "admin log" & "alternate permissions" parameters from smb.conf
- - added a generic print_guid utility, and get the byte order handing
- - fixed memory corruption in cli_full_connection()
- - remove unused 'max packet' and 'packet size' options
- - add support for the "value,OID" format described in MSDN for Printer
- Data values
- - moves NT_TOKEN generation into our authentication code
- - Update documentation build system
- - Several fixes for IRIX compiler
- - Correctly handle "max data count" value in smb transacts
- - Fix for permissions error when adding/modifying using a Print
- server handle
- - Fix pam_smbpass to always check the return value of pdb_getsampwnam()
- - Use the 'init' flag to determine if the UID is set, rather than testing
- the uid for -1
- - Cope with non-unix accounts - we just won't get the groups for those users
- - Add 'net rpc getsid' to fetch the PDC's SID into the local secrets.tdb.
- Print domain SID on 'net rpc info'
- - don't use lp_passwd_file() to retrieve NIS domain name, but use location
- instead
- - Various POSIX compatibility fixes
- - Show only non-default values in testparm
- - Fix longstanding bug in Win2k clients by clearing the shortname
- buffer before returning ascii short name.
- - Add example backtrace script
- - Added NETLOGON NetServerAuthenticate3 include and parser file
- - fix for difference in strsep and strtok semantics in nmbd
- - Ensure we don't change to a user that we can't get an NT_TOKEN for
- - Put back in BDC support in set_server_role()
- - added a 'net rpc samdump' command for dumping the whole sam via
- samsync operations (as a BDC)
- - don't use spnego in the client unless enabled in smb.conf
- - Added some new delta types discovered by Ronnie from ethereal
- - Cope with negative cache dns entries better
- - do not expose special files, only files, directories and links
- - attempts to simplify Samba's external lib dependencies
- - support non-root-mode systems without getgrouplist()
- - Some fixes for SMB signing
- - Pass the object name down to the enum_printers client rpc
- - add the netatalk VFS module
- - Ensure we have at least smb_size bytes before processing a packet
- - Allow us to "lock" printer tdb entries in memory to stop them being
- re-used as cache
- - fix 2 byte alignment/offset bug that prevented Win2k/XP clients
- from receiving all the printer data in EnumPrinterDataEx()
- - Add option to compile new sam system can be enabled with the
- configure option --with-sam
- - Added SGML/DocBook version of developer oriented docs to build process
- - Return correct FILE_SUPERSEDED response
- - Added example sam module (skeleton)
- - Add plugin support for the sam system (based on passdb code)
- - show builtin groups in samdump
- - Adding samtest utility used to test sam backends
- - fix connecting to a BDC when the PDC is down but in WINS and no bcast
- can be used to find a BDC
- - convert the LDAP/SASL code to use GSS-SPNEGO if possible
- - added cli_net_auth_3 client code
- - merge of phant0m key fix from APP_HEAD
- - allow rpcclient's samlogon command to use cli_net_3()
- - Added attribute specific OPEN tests
- - Fix bug with stat mode open being done on read-only open with
- truncate
- - Add lots of const casts to function parameters
- - Implemented some more client side spoolss functions
- - usrmgr expects unicode as ProductType
- - Change JOB_INFO_CTR to return a pointer to an array rather than array of
- pointers in client code
- - Various NTLMSSP fixes
- - fixed crash bug in cli_connection code
- - DeletePrinterDriver[Ex]() fixes from APP_HEAD
- - remove some inet_aton() calls for portability
- - Set default ACB attributes on 'unixsam' accounts
- - Add bcast_msg_flags to connection struct
- - aggregate change notify events in the smbd sender and when transmitting
- - Added better error code on out of space in printer spool directory
- - Removed total jobs check - not applicable any more
- - fixed bug in share enumeration RPC code
- - extend the ADS_STATUS system to include NTSTATUS
- - commit trusted domain patch n+3
- - remove block VFS module
- - restrict readline headers to readline.c
- - merge of various recycle bin VFS patches
- - Winbind client-side cleanups
- - change parametric option name to vfs_recycle_bin it is more
- sane and do not pollute standard options namespace too much
- - added --enable-python configure option for building the samba-python
- unit tests
- - correct trans2 bugs in client for enumerating files/directories
- - Re-add OS/2 EA error codes
- - Added patch for required attributes in directory listings to reply code
- - Fix browse synchronization bug by noticing that W2K DMB's return empty
- NetServerEnum2 on port 445, but not on port 139
- - Fix semantics of AbortPrinter() spoolss call in server code
- - Ensure we've failed a lock with a lock denied message before automatically
- pushing it onto the blocking queue
- - Added experimental sendfile code
- - Initialize user_rid value in WINBIND_USERINFO structure returned by
- the rpc version of query_user()
- - added gencache implementation
- - Merge the cli_shutdown change from 2_2
- - Fixes for DeletePrinterDriverEx()
- - Fixed alignment error in spoolss code
- - Changed Major/Minor version info reported to Server Manager to 4.9
- - Applied new display mode FLAGS for SWAT
- - Update to add DEVELOPER option to more parameters
- - Added --with-ads option, defaults to yes
- - Added --with-ldap option to configure
- - Add clock skew handling to our kerberos code
- - correct race condition in password change code for out machine account
- when a member of a domain
- - First implementation for 'net rpc vampire'
- - store current handle's Device Mode with print job
- - Move functionality to check whether entries for lp_workgroup() and
- "BUILTIN" exist and add them if necessary from check_correct_backend_entries
- into sam_context_check_default_backends
- - allow --with-krb5 to override the location of the kerberos libs on
- redhat
- - unlink spool file after submitting print job when using CUPS api
- - Add framework for samtest commands
- - Add the ability to view/set the current local domain SIDs to net command
- - When creating a group you have to take care of the fact that the
- underlying unix might not like the group name
- - Don't uppercase the username and domain in a session setup
- - Merge of "profile acls" code from SAMBA_2_2
- - Check for existing of security descriptor in PRINTER_INFO_2 structure
- in rpc client code
- - Move to common user token debugging, and ensure we always print both the
- NT_TOKEN and the unix credentials
- - If adding a user to ldap, make sure we have the 'account' structural class,
- or else we can't add to OpenLDAP 2.1
- - Kill of Get_Pwnam_Modify and smb_getpwnam()
- - add a 'ldap passwd sync' option to smb.conf
- - Whenever we deal with adding machine/trusted domain accounts, always reset
- the flag to what we expect
- - Fix the circular dependency that was preventing 'domain master = auto' (the
- default) from working
- - move all the passdb internal interface to NTSTATUS
- - to expand % values (ie we go \\%L\%U -> \\server\user, we don't want to
- store \\server\user back) and to correctly notice 'not set' compared to 'null
- string' etc.
- - get some more of our access control bits right on the SAMR pipe
- - Add -r parameter to smbgroupedit. With -r you can manually choose
- a rid
+ WHATS NEW IN Samba 3.0 alpha21
+ 26th November 2002
+ ===============================
-Changes in alpha19
- - Virtual registry framework with printing hooks (jerry)
- - Heavy registry updates (jerry)
- - Use 850 as the default DOS character set in smb.conf (tpot)
- - printer fixes - removed encoding of queueid in job number (jra)
- - A lot of small fixes (jra)
- - Don't crash on setfileinfo on printer fsp(jra)
- - fixed line buffer mode in XFILE(jra)
- - update samba.schema from 2.2 (jerry,idra)
- - Fix problem with oplock breaks and win2k -
- noticed by Lev Iserovich <lev@ciprico.com> (jra)
- - Update smbgroupedit to document -d - thanks to metze (abartlet)
- - Support weird behaviour used by win9x pass-through auth (abartlet,tpot)
- - Support for duplicating stderr in log files (abartlet)
- - Move startup time initialisation to server.c (abartlet)
- - *A lot* of fixes and cleanups (abartlet)
- - Fix up compiler warnings (abartlet)
- - Few small fixes (tpot)
- - Renamed new_cli_netlogon_* -> cli_netlogon_* (tpot)
- - Fixed segfault in net time when host is unavailable (tridge)
- - Ensure to be root when opening printer backend tdb (jra)
- - Merges from APPLIANCE_HEAD (tpot,jerry)
- - configure updates (tridge)
- - getgrouplist() updates (tridge)
- - Support for pdbedit to query account policy values (abartlet)
- - Allow one to create trusting domain account using smbpasswd (mimir,abartlet)
- - 'Net rpc trustdom list' (mimir, abartlet)
- - Fix fallback to anonymous connection (mimir, abartlet)
- - Fix for pdb_ldap and OpenLDAP 2.1
- - Added support in swat to determine whether winbind is running (idra)
- - Add 'hide unwritable' option (idra)
- - Correct pickup of [homes] share after subsequent session setups (abartlet)
- - Update rebind code in pdb_ldap (abartlet)
- - Add some info levels to RPC srvsvc code -
- thanks to Nigel Williams" <nigel@veritas.com> (abartlet)
- - Small doc fixes (tridge)
- - good security patch from Timothy.Sell@unisys.com (tridge)
- - fix minor nits in nmbd from adtam@cup.hp.com (tridge)
- - make sure async dns nmbd child dies (tridge)
- - interim fix for nmbd not registering DOMAIN#1b (tridge)
- - fix for smbtar filename matching (tridge)
- - Better quote handling in smb.conf (abartlet)
- - Support browsers setting multiple languages in swat (idra)
- - Changed str_list_make to be able to use a different separator string (idra)
- - Samsync support to insert account info into the pdb (tpot)
- - Don't hide unwritable dirs when 'hide unwritable' is enabled -
- suggested by Alexander Oswald <oswald@is.haw-hamburg.de> (idra)
- - Fix for handling sparse files in smbd (tridge)
- - Merges from 2_2 (jerry)
- - Minor printer fixes (jerry)
- - Add some checks to SID lookup code (abartlet)
- - Cascaded VFS (Alexander Bokovoy, idra)
- - Some netbios-less connections support in ADS mode (tridge)
- - ADS tweaks (tridge)
- - Fix plaintext passwords with win2k (tridge)
- - 'net ads info' reports IP of LDAP server (tridge)
- - Add some more RPC functions (jmcd)
- - Add 'smb ports = ' option (tridge)
- - Various small fixes (tridge)
- - Passdb security checks (abartlet)
- - Large winbind updates (abartlet)
- - Moved rpc client routines from libsmb to rpc_client (tpot)
- - Few nmbd fixes (jmcd)
- - Fix swat to handle new debug level code (idra)
- - Fix name length bug in namequeries (tridge)
- - Don't have client binaries depend on libs they don't use -
- patch from Steve Langasek <vorlon@netexpress.net> (abartlet)
- - Printing change notification (merged from HEAD_APPLIANCE) (jerry)
- - fix delete printer driver (from HEAD_APPLIANCE) (jerry)
- - Added pdb_xml and pdb_mysql (jelmer)
- - Update pdb_test (jelmer)
- - Fix security issues with %m (abartlet)
- - Support for service joins from win2k AND use SPNEGO (jmcd)
- - pdbedit -i and -e fix, add -b (idra)
- - textdocs converted to sgml (jelmer, jerry)
- - Merge netbios namecache code from APPLIANCE_HEAD (tpot)
- - Fix segs in new NTLMSSP code (abartlet)
- - Always make guest rid 501 (abartlet)
-
-Changes in alpha18
- - huge number of changes! really too many to list ... (and its 1am
- here, and I'm too tired)
- See the cvs tree at http://build.samba.org/
-
-
-Changes in alpha17
-- OpenLinux packaging updates (jht)
-- Locking updates - fix zero timeout (tridge, jra)
-- Default ACL support (jra, based on code from Olaf Frczyk <olaf@cbk.poznan.pl>)
-- printing updates - spoolss stuff (tpot)
-- 'make install' directory creation fixes (abartlet)
-- Lots of fixes for SID handling, local v domain sids etc
-- better mangle debugging (abartlet)
-- fixes to allow 'net' to return more than 1000 users from ADS (jmcd)
- - winbind support to come very shortly
-- lock some more tdbs to allow concurrent access for backups
-- 'net' help cleanups (jmcd)
-- 'net join' automatic transport detection
-
-Changes in alpha16
-- LDAP schema updates (jerry)
-- initial ADS LDAP printer advertising (jmcd)
-- spoolss and printing updates (tpot, jerry)
- (the is the major update in this alpha, and work continues)
-- Winbindd connection cache improvements (abartlet)
-- spnego segfault fixes (abartlet)
-- net ads segfault fixes ( Alexander Bokovoy <a.bokovoy@sam-solutions.net>)
-- header cleanups (tpot)
-- Serialise domain auth requests - win2k bug (tridge)
-- fix winbind talloced memory leak (dleducq@arkoon.net, tridge)
-- call unmangle in don_unmangle (abartlet)
-- UTF8 Charset functions - for ADS LDAP calls (Hasch@t-online.de)
-- Fix security tab for mapped drives on unicode clients (tridge)
-- Better configure tests for snprintf and immidiate structures (abartlet)
-- allow 'passdb backend = plugin : /path/to/plugin.so : plguin args'
- (loads a passdb module) (Jelmer Vernooij <jelmer@nl.linux.org>)
-- change the way we store our domain join info - you will need to
-rejoin the domain (tridge)
-- xcopy /o fixes (tridge)
-- fix the 'convert_string' level 0 debugs.
-- Patch for Domain users not showing up from "Ivan Zhakov" <vunny@mail.ru>
-- tdb backup support
-- The beginning of trusted and trusting domain support - net commands
- (Rafal Szczesniak <mimir@diament.ists.pwr.wroc.pl>)
-- nmbd signal processing fixes (jra)
-- lseek-on-pipe support (jra)
-- Allow Samba to trust NT4 Domains (abartlet)
-- LDAPsam updates (abartlet):
- - Now runtime selectable (when configured)
- - ldap user suffix and ldap group suffix support.
- - non unix account support
- - select with 'passdb backend = ldapsam' or 'passdb backend =
- ldapsam_nua'
-- start to allow NT4 domains to trust Samba, netlogon fixes (abartlet)
-- make default unix charset UTF8 (tridge)
-- Fix SIGSEGV on error message when trying to add a user to smbpasswd
-file without a unix account (jmcd)
-- better detection of dead ADS connections, so we have some chance of
-reconnecting (tridge)
-- removed bogus prepend_domain() call which was screwing up getpwuid()
-with the new default domain code
-- Domain/workstation SID fixes.
-- patch from Alexey Kotovich <a.kotovich@sam-solutions.net> that adds
- the security decsriptor code for ADS workstation accounts.
- (allow self password change, self remove)
- (after much review and disscussion with abartlet and tridge)
-
-Changes in alpha15
-- Improvements in pam_winbind/winbindd_pam.c: (abartlet)
- - Much better error reporting
- - Password changing is now stackable
- - now returns multiple PAM errors based on the NTSTATUS
- that winbind got.
- - returns an error string the client can use in their own logs.
-- Print form updates (tpot)
-- added 'wbinfo --sequence' to show sequence numbers of
- all domains (tridge)
-- better winbind memory mangement (tridge)
-- make signal processing work correctly in winbindd
- Michael Steffens <michael_steffens@hp.com>
-- Inital ADS printer publishing work. (jmcd)
-- Debian packaging
-- large debian packaging checking from Eloy. (merge by jerry)
-- Make smbgroupedit a little easier on the user (select groups
- by name rather than by sid) (abartlet)
-- rework parts of smbtorture (tridge)
-
-Changes in alpha14
-- 'Winbind Default Domain' support:
- This allows winbind to supply usernames without a 'DOMAIN\'
- prefix. Particularly handy for shell and e-mail servers,
- as well as Unix workstations in NT domains.
-- Associated cleanups in winbindd and smbd.
- (Alexander Bokovoy <a.bokovoy@sam-solutions.net> and
- abartlet)
-- Winbind protocol changes for better Squid intergration
- (current version is 3) (abartlet)
-- pam_winbind password changing
- (Samuel Ziegler <sam@xpedion.com>, tpot)
-- runtime selectable pluggable passdb interface.
- (abartlet)
-- 'non unix account' support (abartlet)
- (This allows machines and even users not to exist
- in /etc/passwd)
-- Inital implementation of the WINS replication deamon
- (jfm)
-- Changes for better winbind PDC/BDC failover support
- (tpot)
-- Various Winbind/ADS mode stabilty and flexablity fixes
- (tridge)
-- Mangle names like .bashrc properly (trige)
-- CIFS UNIX extensions (client and server) (jra)
-- Universal group support outside smbd (via a cache)
- (Alexander Bokovoy <a.bokovoy@sam-solutions.net>)
-- Write cache fixes (jra)
-
-Changes in alpha13
-- updates to try to get more out-of-the-box compiles
- (mostly kerberos and ldap stuff) (various)
-- 'net rpc shutdown' remote shutdown of servers
- (abartlet, original code from idra)
-- authentication subsystem rework, including move to
- new RPC client code (abartlet)
-- winbind changes:
- - use new client code (abartlet)
- - change winbind_auth_pam_crap interface for squid's
- benifit. (abartlet)
- - new interface versioning functionality (abartlet)
- - cope better when inteface does change (tpot)
- - better winbind trusted domain code (tpot)
-- doc updates (jerry)
-- new NTSTAUS -> DOS error map (abartlet)
-- large user list (> 1500) enumeration (jra)
-- dmalloc support (mbp)
-- spoolss changes (tpot)
-- talloc accounting (mbp)
-- rename fixes (jra)
-- smbmount trivial fixup (abartlet)
-- start of new unix extenions to CIFS (jra)
-
-Changes in alpha12
-- doc updates (jerry)
-- store domain sid on ADS join (tridge)
-- allow a winbind username on ADS connection (tridge)
-
-Changes in alpha11
-- fixed fallback to "ads server" option (tridge)
-- fix ACL failure on HP HFS (jra)
-- net ads password and net ads chostpass commands (Remus Koos)
-- fixed valid char array generation (tridge)
-- fixed QFS_INFO for win98 long filenames (tridge)
-- added net lookup command (tridge)
-- fixed map to guest with spnego (tridge)
-- fixed irix warnings (tridge)
-
-
-Changes in alpha10
-- hide unreadable fix using acl fns (jra)
-- lsa_open_policy cleanup (jfm)
-- mangled directories fix (jra)
-- fix error return on bad pipe (jra)
-- fix homes share with no home dir (tpot)
-- fixed handling of dead or empty domains in winbindd (tridge)
-- added talloc torture program (mbp)
-- talloc debug code (mbp)
-- added trusted domains to winbindd/ADS (tridge)
-- fix trusted domains in auth code (tridge)
-- new gss error handling code (a.bokovoy@sam-solutions.net & tridge)
-- support mixed ADS/NT4 domains (tridge)
-
-Changes in alpha9
-- nicer net error messages (tpot)
-- trust account patches (mimir)
-- solaris link option update (davecb)
-- added lsa_query_secobj() server fn (jfm)
-- spoolss changeid fix (jerry)
-- domain auth error fix (jmcd)
-- HPUX acl code (jra)
-- set filetime on close fix (jra)
-- allow select of org unit in ads join (tridge)
-
-Changes in alpha8
-- fixed compile of wb_client.c (tridge)
-- fixed net time to use localtime (tridge)
-- net help cleanups (jmcd)
-- debug level fix (tpot)
-- utmp string length fixes (monyo)
-
-
-Changes in alpha7
-
-- added "net ads info" to probe basic into on your ads server without
- any authentication
-- improved some error handling
-
-Changes in alpha6
-
-- added "net time zone" command (tridge)
-- pam_smbpass updates (a.bokovoy@sam-solutions.net)
-- irix updates (herb)
-- net rpc join handles existing machine acct (tridge)
-
-Changes in alpha5
-
-- added "net time" command (tridge)
-- allow client tools to specify a hostname of form HOST#xx (tridge)
-- added wbinfo --set-auth-user (tpot)
-- added lsaquerysecobj to rpcclient (tpot)
-
-Changes in alpha4
-
-- fixed nexus/win9x user list (jfm)
-- fixed large user/group lists in winbindd (tridge)
-- fixed gssapi headers in redhat (jmcd)
-- fixed rap error code handling (jra)
-- more usermanager rpc calls (jfm)
-- re-added RAP calls at top level to net command (tridge)
-
-Changes in alpha3
-
-- fixed a silly tdb bug in alpha2 that affected internal databases
-
-Changes in alpha2
-
-- we no longer use cyrus-sasl for LDAP SASL/gssapi. This makes our ADS
- code much more robust.
-- winbindd cache code rewritten to be much more efficient. It also
- copes much better with server outages.
-- jfm implemented full group mapping and smb.conf option 'domain admin
- group' is now gone. Consult the GROUP-MAPPING-HOWTO.txt to know how
- to gain back administrator rights.
-- docs update started
-- numerous small bugfixes
-
-Changes in alpha1
-
- - winbindd now uses LDAP and works correctly with an ADS server in
- native mode
- - XFS quotas code on Linux
- - group mapping code from JFM
- - "net rpc join" command replaces smbpasswd -j
- - fixed winbind initgroups
-
---------------
-
-This is a pre-release of Samba 3.0 alpha0. This is NOT a stable
-release. Use at your own risk.
+This is a pre-release of Samba 3.0. This is NOT a stable release.
+Use at your own risk.
The purpose of this alpha release is to get wider testing of the major
-new pieces of code in the current Samba 3.0 development tree. We are
-planning on ceasing development on the 2.2.x release of Samba very
-shortly and after that we will be concentrating on Samba 3.0. To
-reduce the time before the final Samba 3.0 release we need as many
-poeple as possible to start testing these alpha releases, and
-hopefully giving us some high quality feedback on what needs fixing.
-
-Note that Samba 3.0 is not anywhere near feature complete yet. There
-is a lot more coding we have planned, but unless we get what we have
-done already more widely tested we will have a hard time doing a
-stable release in a reasonable time frame.
-
-This release is also missing major pieces of documentation, and there
-are many parts of the docs that have not been updated to reflect the
-new options and features in 3.0.
+new pieces of code in the current Samba 3.0 development tree. We have
+officially ceased development on the 2.2.x release of Samba and are
+concentrating on Samba 3.0. To reduce the time before the final Samba 3.0
+release we need as many people as possible to start testing these alpha
+releases, and hopefully giving us some high quality feedback on what needs
+fixing.
+
+Note that Samba 3.0 is not feature complete yet. There is a more
+coding we have planned, but unless we get what we have done already more
+widely tested we will have a hard time doing a stable release in a
+reasonable time frame.
Major new features:
-------------------
- Active Directory support. This release is able to join a ADS realm
- as a member server and authenticate users using
- LDAP/kerberos. Please read ADS-HOWTO.txt in the release for a very
- rough guide on how to set this up.
+ as a member server and authenticate users using LDAP/kerberos.
-- Unicode support. Samba will now negotiate unicode on the wire and
- interally there is now a much better infrastructure for multi-byte
- and unicode character sets. You may need the "dos charset", "unix
- charset" and "display charset" options. The unicode support is not
- yet documented.
+- Unicode support. Samba will now negotiate UNICODE on the wire and
+ internally there is now a much better infrastructure for multi-byte
+ and UNICODE character sets.
- New authentication system. The internal authentication system has
been almost completely rewritten. Most of the changes are internal,
- but the new auth system is also very configurable. Not documented
- yet.
+ but the new auth system is also very configurable.
- new filename mangling system. The filename mangling system has been
completely rewritten. An internal database now stores mangling maps
- persistantly. This needs lots of testing.
+ persistently. This needs lots of testing.
- new "net" command. A new "net" command has been added. It is
somewhat similar to the "net" command in windows. Eventually we plan
improves error handling a lot.
- better w2k printing support. The support for printing from win2000
- clients has improved greatly.
+ clients has improved greatly.
Plus lots of other changes!
-Note that many new features are not documented. Don't let this stop
-you from using Samba 3.0. It is particularly important that the basic
-file/print serving abilities of Samba 3.0 are widely tested to ensure
-that we have not broken any of the basic functionality. As we do more
-alpha releases we will start to document the new features.
-
Reporting bugs & Development Discussion
---------------------------------------
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.
+
+Removed Parameters
+------------------
+
+ * postscript
+ * printer driver
+ * printer driver location
+ * printer driver file
+
+Added Parameters
+---------------
+
+ * ldap trust ids
+ * acl compatibility
+ * mangle prefix
+
+
+Modified Parameters
+-------------------
+
+ * restrict anonymous
+ * password server
+
+
+Changes in alpha21:
+
+ See cvs log for SAMBA_3_0 for complete details. There are many
+ smaller numerous changes that would clutter the release notes.
+
+1) Numerous documentation updates including new Samba FAQ
+2) Fixed logic error in checking wins server lists
+3) Added more Solaris sendfile checks
+4) Added --with-ldapsam for compatibility with 2.2.x Samba/LDAP setups
+5) Add new client side support the Win2k LSARPC UUID in rpcbinds
+ Detect a native mode Win2k DC when in "security = domain"
+6) Include Domain Local Groups in listing when a member of a native
+ mode Win2k domain
+7) Fix ACL inheritance problem
+8) Register <0x1c> name on unicast subnet
+9) Removed stat() call in lp_add_home()
+10) Change default of max_xmit to match W2K. Ensure NT negprot uses it
+11) Merge the new ACL mapping code from Andreas Gruenbacher
+12) Removed make_printerdef tool from build
+13) Fix fd leak on printer queue tdb's
+14) Better error/status loggin in both the pam_winbind client and
+ winbindd_pam
+15) Fix fd leak with kernel change notify
+16) Fix slowdown because of enumerating all print queues on every smbd startup
+17) Fix --set-auth-user command to delete entries from the secrets file
+ when an empty username/password is passed on the command line
+18) Added --get-auth-user to wbinfo for displaying account information
+ used to enumerate users and groups
+19) Numerous updates for 'net rpc vampire' to migrate from an NT 4.0 Domain
+20) Merge of scalable printing code from APP_HEAD
+21) Numerous changes the passdb layer
+22) More work on printer publishing in Active Directory
+23) Enable "make modules" to build VFS libraries
+24) Enable print notify messages on printer attributes from smbcontrol
+25) Enable auto lookup of domain controllers when adding '*' to
+ "password server" parameter. Allows to have preferred list
+ of DC's, but not authoritative (e.g. password server = DC1 DC2 *)
+
+
+
+ ===============================
+
+Changes in older alpha releases follow:
+
+---------------------------------------------------------------------
+
+Changes in alpha20:
+
+1) Rework the 'guest account gets RID 501' code again...
+2) Change to use NT-based session key negotiated for Win2k SPNEGO
+3) Support printer data registry keys other than the default
+ PrinterDriverData
+4) Moved internal printerdata to REGISTRY_VALUE object
+5) Corrected bug in dependentfiles list of DRIVER_INFO_3
+6) fixed logic bug in blocking locks code
+7) Updated registry api code to work with new printer data key
+ support
+8) Added vfstest tool
+9) round lock timeouts in lockingX upwards to multiples of 1 second
+10) Fixed bugs in Printer Change Notify code
+11) added a 'net ads lookup' command that does a CLDAP NetLogon
+ query to a win2000 server
+12) Added script to find undocumented smb.conf parameters
+13) Added missing parameters to smb.conf(5)
+14) receive & parse main CLDAP reply from win2k server
+15) removed "admin log" & "alternate permissions" parameters from smb.conf
+16) added a generic print_guid utility, and get the byte order handing
+17) fixed memory corruption in cli_full_connection()
+18) remove unused 'max packet' and 'packet size' options
+19) add support for the "value,OID" format described in MSDN for Printer
+ Data values
+20) moves NT_TOKEN generation into our authentication code
+21) Update documentation build system
+22) Several fixes for IRIX compiler
+23) Correctly handle "max data count" value in smb transacts
+24) Fix for permissions error when adding/modifying using a Print
+ server handle
+25) Fix pam_smbpass to always check the return value of pdb_getsampwnam()
+26) Use the 'init' flag to determine if the UID is set, rather than testing
+ the uid for -1
+27) Cope with non-unix accounts ) we just won't get the groups for those users
+28) Add 'net rpc getsid' to fetch the PDC's SID into the local secrets.tdb.
+ Print domain SID on 'net rpc info'
+29) don't use lp_passwd_file() to retrieve NIS domain name, but use location
+ instead
+30) Various POSIX compatibility fixes
+31) Show only non-default values in testparm
+32) Fix longstanding bug in Win2k clients by clearing the shortname
+ buffer before returning ascii short name.
+33) Add example backtrace script
+34) Added NETLOGON NetServerAuthenticate3 include and parser file
+35) fix for difference in strsep and strtok semantics in nmbd
+36) Ensure we don't change to a user that we can't get an NT_TOKEN for
+37) Put back in BDC support in set_server_role()
+38) added a 'net rpc samdump' command for dumping the whole sam via
+ samsync operations (as a BDC)
+39) don't use spnego in the client unless enabled in smb.conf
+40) Added some new delta types discovered by Ronnie from ethereal
+41) Cope with negative cache dns entries better
+42) do not expose special files, only files, directories and links
+43) attempts to simplify Samba's external lib dependencies
+44) support non-root-mode systems without getgrouplist()
+45) Some fixes for SMB signing
+46) Pass the object name down to the enum_printers client rpc
+47) add the netatalk VFS module
+48) Ensure we have at least smb_size bytes before processing a packet
+49) Allow us to "lock" printer tdb entries in memory to stop them being
+ re-used as cache
+50) fix 2 byte alignment/offset bug that prevented Win2k/XP clients
+ from receiving all the printer data in EnumPrinterDataEx()
+51) Add option to compile new sam system can be enabled with the
+ configure option --with-sam
+52) Added SGML/DocBook version of developer oriented docs to build process
+53) Return correct FILE_SUPERSEDED response
+54) Added example sam module (skeleton)
+55) Add plugin support for the sam system (based on passdb code)
+56) show builtin groups in samdump
+57) Adding samtest utility used to test sam backends
+58) fix connecting to a BDC when the PDC is down but in WINS and no bcast
+ can be used to find a BDC
+58) convert the LDAP/SASL code to use GSS-SPNEGO if possible
+59) added cli_net_auth_3 client code
+60) merge of phant0m key fix from APP_HEAD
+61) allow rpcclient's samlogon command to use cli_net_3()
+62) Added attribute specific OPEN tests
+63) Fix bug with stat mode open being done on read-only open with
+ truncate
+64) Add lots of const casts to function parameters
+65) Implemented some more client side spoolss functions
+66) usrmgr expects UNICODE as ProductType
+67) Change JOB_INFO_CTR to return a pointer to an array rather than array of
+ pointers in client code
+68) Various NTLMSSP fixes
+69) fixed crash bug in cli_connection code
+70) DeletePrinterDriver[Ex]() fixes from APP_HEAD
+71) remove some inet_aton() calls for portability
+72) Set default ACB attributes on 'unixsam' accounts
+73) Add bcast_msg_flags to connection struct
+74) aggregate change notify events in the smbd sender and when transmitting
+75) Added better error code on out of space in printer spool directory
+76) Removed total jobs check ) not applicable any more
+77) fixed bug in share enumeration RPC code
+78) extend the ADS_STATUS system to include NTSTATUS
+79) commit trusted domain patch n+3
+80) remove block VFS module
+81) restrict readline headers to readline.c
+82) merge of various recycle bin VFS patches
+83) Winbind client-side cleanups
+84) change parametric option name to vfs_recycle_bin it is more
+ sane and do not pollute standard options namespace too much
+85) added --enable-python configure option for building the samba-python
+ unit tests
+86) correct trans2 bugs in client for enumerating files/directories
+87) Re-add OS/2 EA error codes
+88) Added patch for required attributes in directory listings to reply code
+89) Fix browse synchronization bug by noticing that W2K DMB's return empty
+ NetServerEnum2 on port 445, but not on port 139
+90) Fix semantics of AbortPrinter() spoolss call in server code
+91) Ensure we've failed a lock with a lock denied message before automatically
+ pushing it onto the blocking queue
+92) Added experimental sendfile code
+93) Initialize user_rid value in WINBIND_USERINFO structure returned by
+ the rpc version of query_user()
+94) added gencache implementation
+95) Merge the cli_shutdown change from 2_2
+96) Fixes for DeletePrinterDriverEx()
+97) Fixed alignment error in spoolss code
+98) Changed Major/Minor version info reported to Server Manager to 4.9
+99) Applied new display mode FLAGS for SWAT
+100) Update to add DEVELOPER option to more parameters
+101) Added --with-ads option, defaults to yes
+102) Added --with-ldap option to configure
+103) Add clock skew handling to our kerberos code
+104) correct race condition in password change code for out machine account
+ when a member of a domain
+105) First implementation for 'net rpc vampire'
+106) store current handle's Device Mode with print job
+107) Move functionality to check whether entries for lp_workgroup() and
+ "BUILTIN" exist and add them if necessary from check_correct_backend_entries
+ into sam_context_check_default_backends
+108) allow --with-krb5 to override the location of the kerberos libs on
+ redhat
+109) unlink spool file after submitting print job when using CUPS api
+110) Add framework for samtest commands
+111) Add the ability to view/set the current local domain SIDs to net command
+112) When creating a group you have to take care of the fact that the
+ underlying unix might not like the group name
+113) Don't uppercase the username and domain in a session setup
+114) Merge of "profile acls" code from SAMBA_2_2
+115) Check for existing of security descriptor in PRINTER_INFO_2 structure
+ in rpc client code
+116) Move to common user token debugging, and ensure we always print both the
+ NT_TOKEN and the unix credentials
+117) If adding a user to ldap, make sure we have the 'account' structural class,
+ or else we can't add to OpenLDAP 2.1
+118) Kill of Get_Pwnam_Modify and smb_getpwnam()
+119) add a 'ldap passwd sync' option to smb.conf
+120) Whenever we deal with adding machine/trusted domain accounts, always reset
+ the flag to what we expect
+121) Fix the circular dependency that was preventing 'domain master = auto' (the
+ default) from working
+122) move all the passdb internal interface to NTSTATUS
+123) to expand % values (ie we go \\%L\%U -> \\server\user, we don't want to
+ store \\server\user back) and to correctly notice 'not set' compared to 'null
+ string' etc.
+124) get some more of our access control bits right on the SAMR pipe
+125) Add -r parameter to smbgroupedit. With -r you can manually choose
+ a rid
+
+Changes in alpha19
+1) Virtual registry framework with printing hooks (jerry)
+2) Heavy registry updates (jerry)
+3) Use 850 as the default DOS character set in smb.conf (tpot)
+4) printer fixes ) removed encoding of queueid in job number (jra)
+5) A lot of small fixes (jra)
+6) Don't crash on setfileinfo on printer fsp(jra)
+7) fixed line buffer mode in XFILE(jra)
+8) update samba.schema from 2.2 (jerry,idra)
+9) Fix problem with oplock breaks and win2k )
+ noticed by Lev Iserovich <lev@ciprico.com> (jra)
+10) Update smbgroupedit to document -d ) thanks to metze (abartlet)
+11) Support weird behaviour used by win9x pass-through auth (abartlet,tpot)
+12) Support for duplicating stderr in log files (abartlet)
+13) Move startup time initialisation to server.c (abartlet)
+14) *A lot* of fixes and cleanups (abartlet)
+15) Fix up compiler warnings (abartlet)
+16) Few small fixes (tpot)
+17) Renamed new_cli_netlogon_* -> cli_netlogon_* (tpot)
+18) Fixed segfault in net time when host is unavailable (tridge)
+19) Ensure to be root when opening printer backend tdb (jra)
+20) Merges from APPLIANCE_HEAD (tpot,jerry)
+21) configure updates (tridge)
+22) getgrouplist() updates (tridge)
+23) Support for pdbedit to query account policy values (abartlet)
+24) Allow one to create trusting domain account using smbpasswd (mimir,abartlet)
+25) 'Net rpc trustdom list' (mimir, abartlet)
+26) Fix fallback to anonymous connection (mimir, abartlet)
+27) Fix for pdb_ldap and OpenLDAP 2.1
+28) Added support in swat to determine whether winbind is running (idra)
+29) Add 'hide unwritable' option (idra)
+30) Correct pickup of [homes] share after subsequent session setups (abartlet)
+31) Update rebind code in pdb_ldap (abartlet)
+32) Add some info levels to RPC srvsvc code )
+ thanks to Nigel Williams" <nigel@veritas.com> (abartlet)
+33) Small doc fixes (tridge)
+34) good security patch from Timothy.Sell@unisys.com (tridge)
+35) fix minor nits in nmbd from adtam@cup.hp.com (tridge)
+36) make sure async dns nmbd child dies (tridge)
+37) interim fix for nmbd not registering DOMAIN#1b (tridge)
+38) fix for smbtar filename matching (tridge)
+39) Better quote handling in smb.conf (abartlet)
+40) Support browsers setting multiple languages in swat (idra)
+41) Changed str_list_make to be able to use a different separator string (idra)
+42) Samsync support to insert account info into the pdb (tpot)
+43) Don't hide unwritable dirs when 'hide unwritable' is enabled )
+ suggested by Alexander Oswald <oswald@is.haw-hamburg.de> (idra)
+44) Fix for handling sparse files in smbd (tridge)
+45) Merges from 2_2 (jerry)
+46) Minor printer fixes (jerry)
+47) Add some checks to SID lookup code (abartlet)
+48) Cascaded VFS (Alexander Bokovoy, idra)
+49) Some netbios-less connections support in ADS mode (tridge)
+50) ADS tweaks (tridge)
+51) Fix plaintext passwords with win2k (tridge)
+52) 'net ads info' reports IP of LDAP server (tridge)
+53) Add some more RPC functions (jmcd)
+54) Add 'smb ports = ' option (tridge)
+55) Various small fixes (tridge)
+56) Passdb security checks (abartlet)
+57) Large winbind updates (abartlet)
+58) Moved rpc client routines from libsmb to rpc_client (tpot)
+59) Few nmbd fixes (jmcd)
+60) Fix swat to handle new debug level code (idra)
+61) Fix name length bug in namequeries (tridge)
+62) Don't have client binaries depend on libs they don't use )
+ patch from Steve Langasek <vorlon@netexpress.net> (abartlet)
+63) Printing change notification (merged from HEAD_APPLIANCE) (jerry)
+64) fix delete printer driver (from HEAD_APPLIANCE) (jerry)
+65) Added pdb_xml and pdb_mysql (jelmer)
+66) Update pdb_test (jelmer)
+67) Fix security issues with %m (abartlet)
+68) Support for service joins from win2k AND use SPNEGO (jmcd)
+69) pdbedit -i and -e fix, add -b (idra)
+70) textdocs converted to sgml (jelmer, jerry)
+71) Merge netbios namecache code from APPLIANCE_HEAD (tpot)
+72) Fix segs in new NTLMSSP code (abartlet)
+73) Always make guest rid 501 (abartlet)
+
+
+
+
%PDF-1.3
%âãÏÓ
-1 0 obj<</Producer(htmldoc 1.8.22 Copyright 1997-2002 Easy Software Products, All Rights Reserved.)/CreationDate(D:20021105230851-0100)/Title(SAMBA Developers Guide)/Creator(Modular DocBook HTML Stylesheet Version 1.77)>>endobj
+1 0 obj<</Producer(htmldoc 1.8.22 Copyright 1997-2002 Easy Software Products, All Rights Reserved.)/CreationDate(D:20020930200402+0500)/Title(SAMBA Developers Guide)/Creator(Modular DocBook HTML Stylesheet Version 1.76b+)>>endobj
2 0 obj<</Type/Encoding/Differences[ 32/space/exclam/quotedbl/numbersign/dollar/percent/ampersand/quotesingle/parenleft/parenright/asterisk/plus/comma/minus/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/grave/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde 128/Euro 130/quotesinglbase/florin/quotedblbase/ellipsis/dagger/daggerdbl/circumflex/perthousand/Scaron/guilsinglleft/OE 145/quoteleft/quoteright/quotedblleft/quotedblright/bullet/endash/emdash/tilde/trademark/scaron/guilsinglright/oe 159/Ydieresis/space/exclamdown/cent/sterling/currency/yen/brokenbar/section/dieresis/copyright/ordfeminine/guillemotleft/logicalnot/hyphen/registered/macron/degree/plusminus/twosuperior/threesuperior/acute/mu/paragraph/periodcentered/cedilla/onesuperior/ordmasculine/guillemotright/onequarter/onehalf/threequarters/questiondown/Agrave/Aacute/Acircumflex/Atilde/Adieresis/Aring/AE/Ccedilla/Egrave/Eacute/Ecircumflex/Edieresis/Igrave/Iacute/Icircumflex/Idieresis/Eth/Ntilde/Ograve/Oacute/Ocircumflex/Otilde/Odieresis/multiply/Oslash/Ugrave/Uacute/Ucircumflex/Udieresis/Yacute/Thorn/germandbls/agrave/aacute/acircumflex/atilde/adieresis/aring/ae/ccedilla/egrave/eacute/ecircumflex/edieresis/igrave/iacute/icircumflex/idieresis/eth/ntilde/ograve/oacute/ocircumflex/otilde/odieresis/divide/oslash/ugrave/uacute/ucircumflex/udieresis/yacute/thorn/ydieresis]>>endobj
3 0 obj<</Type/Font/Subtype/Type1/BaseFont/Courier/Encoding 2 0 R>>endobj
-4 0 obj<</Type/Font/Subtype/Type1/BaseFont/Courier-Bold/Encoding 2 0 R>>endobj
-5 0 obj<</Type/Font/Subtype/Type1/BaseFont/Courier-Oblique/Encoding 2 0 R>>endobj
-6 0 obj<</Type/Font/Subtype/Type1/BaseFont/Times-Roman/Encoding 2 0 R>>endobj
-7 0 obj<</Type/Font/Subtype/Type1/BaseFont/Times-Bold/Encoding 2 0 R>>endobj
-8 0 obj<</Type/Font/Subtype/Type1/BaseFont/Times-Italic/Encoding 2 0 R>>endobj
-9 0 obj<</Type/Font/Subtype/Type1/BaseFont/Times-BoldItalic/Encoding 2 0 R>>endobj
-10 0 obj<</Type/Font/Subtype/Type1/BaseFont/Helvetica/Encoding 2 0 R>>endobj
-11 0 obj<</Type/Font/Subtype/Type1/BaseFont/Helvetica-Bold/Encoding 2 0 R>>endobj
-12 0 obj<</Type/Font/Subtype/Type1/BaseFont/Symbol>>endobj
-13 0 obj<</Subtype/Link/Rect[72.0 684.0 197.9 697.0]/Border[0 0 0]/Dest[524 0 R/XYZ 0 734 0]>>endobj
-14 0 obj<</Subtype/Link/Rect[108.0 670.8 174.9 683.8]/Border[0 0 0]/Dest[524 0 R/XYZ 0 696 0]>>endobj
-15 0 obj<</Subtype/Link/Rect[72.0 644.4 112.9 657.4]/Border[0 0 0]/Dest[526 0 R/XYZ 0 734 0]>>endobj
-16 0 obj<</Subtype/Link/Rect[72.0 618.0 409.3 631.0]/Border[0 0 0]/Dest[532 0 R/XYZ 0 734 0]>>endobj
-17 0 obj<</Subtype/Link/Rect[108.0 604.8 173.7 617.8]/Border[0 0 0]/Dest[532 0 R/XYZ 0 672 0]>>endobj
-18 0 obj<</Subtype/Link/Rect[108.0 591.6 237.6 604.6]/Border[0 0 0]/Dest[532 0 R/XYZ 0 201 0]>>endobj
-19 0 obj<</Subtype/Link/Rect[108.0 578.4 200.3 591.4]/Border[0 0 0]/Dest[534 0 R/XYZ 0 705 0]>>endobj
-20 0 obj<</Subtype/Link/Rect[72.0 552.0 219.9 565.0]/Border[0 0 0]/Dest[536 0 R/XYZ 0 734 0]>>endobj
-21 0 obj<</Subtype/Link/Rect[108.0 538.8 181.6 551.8]/Border[0 0 0]/Dest[536 0 R/XYZ 0 696 0]>>endobj
-22 0 obj<</Subtype/Link/Rect[108.0 525.6 244.6 538.6]/Border[0 0 0]/Dest[536 0 R/XYZ 0 529 0]>>endobj
-23 0 obj<</Subtype/Link/Rect[108.0 512.4 199.0 525.4]/Border[0 0 0]/Dest[536 0 R/XYZ 0 335 0]>>endobj
-24 0 obj<</Subtype/Link/Rect[108.0 499.2 200.3 512.2]/Border[0 0 0]/Dest[538 0 R/XYZ 0 734 0]>>endobj
-25 0 obj<</Subtype/Link/Rect[108.0 486.0 186.2 499.0]/Border[0 0 0]/Dest[538 0 R/XYZ 0 434 0]>>endobj
-26 0 obj<</Subtype/Link/Rect[72.0 459.6 252.9 472.6]/Border[0 0 0]/Dest[540 0 R/XYZ 0 734 0]>>endobj
-27 0 obj<</Subtype/Link/Rect[108.0 446.4 214.6 459.4]/Border[0 0 0]/Dest[540 0 R/XYZ 0 696 0]>>endobj
-28 0 obj<</Subtype/Link/Rect[108.0 433.2 223.8 446.2]/Border[0 0 0]/Dest[542 0 R/XYZ 0 734 0]>>endobj
-29 0 obj<</Subtype/Link/Rect[108.0 420.0 247.6 433.0]/Border[0 0 0]/Dest[544 0 R/XYZ 0 734 0]>>endobj
-30 0 obj<</Subtype/Link/Rect[108.0 406.8 245.2 419.8]/Border[0 0 0]/Dest[544 0 R/XYZ 0 514 0]>>endobj
-31 0 obj<</Subtype/Link/Rect[108.0 393.6 194.2 406.6]/Border[0 0 0]/Dest[546 0 R/XYZ 0 734 0]>>endobj
-32 0 obj<</Subtype/Link/Rect[126.0 380.4 193.8 393.4]/Border[0 0 0]/Dest[546 0 R/XYZ 0 700 0]>>endobj
-33 0 obj<</Subtype/Link/Rect[126.0 367.2 192.0 380.2]/Border[0 0 0]/Dest[546 0 R/XYZ 0 602 0]>>endobj
-34 0 obj<</Subtype/Link/Rect[126.0 354.0 244.5 367.0]/Border[0 0 0]/Dest[546 0 R/XYZ 0 491 0]>>endobj
-35 0 obj<</Subtype/Link/Rect[72.0 327.6 216.8 340.6]/Border[0 0 0]/Dest[548 0 R/XYZ 0 734 0]>>endobj
-36 0 obj<</Subtype/Link/Rect[72.0 301.2 202.8 314.2]/Border[0 0 0]/Dest[552 0 R/XYZ 0 734 0]>>endobj
-37 0 obj<</Subtype/Link/Rect[108.0 288.0 213.7 301.0]/Border[0 0 0]/Dest[552 0 R/XYZ 0 696 0]>>endobj
-38 0 obj<</Subtype/Link/Rect[108.0 274.8 209.1 287.8]/Border[0 0 0]/Dest[552 0 R/XYZ 0 568 0]>>endobj
-39 0 obj<</Subtype/Link/Rect[108.0 261.6 224.7 274.6]/Border[0 0 0]/Dest[554 0 R/XYZ 0 705 0]>>endobj
-40 0 obj<</Subtype/Link/Rect[126.0 248.4 223.5 261.4]/Border[0 0 0]/Dest[554 0 R/XYZ 0 630 0]>>endobj
-41 0 obj<</Subtype/Link/Rect[126.0 235.2 222.2 248.2]/Border[0 0 0]/Dest[554 0 R/XYZ 0 571 0]>>endobj
-42 0 obj<</Subtype/Link/Rect[126.0 222.0 245.8 235.0]/Border[0 0 0]/Dest[554 0 R/XYZ 0 513 0]>>endobj
-43 0 obj<</Subtype/Link/Rect[126.0 208.8 222.2 221.8]/Border[0 0 0]/Dest[554 0 R/XYZ 0 455 0]>>endobj
-44 0 obj<</Subtype/Link/Rect[126.0 195.6 219.8 208.6]/Border[0 0 0]/Dest[554 0 R/XYZ 0 383 0]>>endobj
-45 0 obj<</Subtype/Link/Rect[126.0 182.4 228.4 195.4]/Border[0 0 0]/Dest[554 0 R/XYZ 0 325 0]>>endobj
-46 0 obj<</Subtype/Link/Rect[126.0 169.2 225.9 182.2]/Border[0 0 0]/Dest[554 0 R/XYZ 0 266 0]>>endobj
-47 0 obj<</Subtype/Link/Rect[126.0 156.0 244.5 169.0]/Border[0 0 0]/Dest[554 0 R/XYZ 0 208 0]>>endobj
-48 0 obj<</Subtype/Link/Rect[126.0 142.8 242.1 155.8]/Border[0 0 0]/Dest[554 0 R/XYZ 0 149 0]>>endobj
-49 0 obj<</Subtype/Link/Rect[126.0 129.6 256.2 142.6]/Border[0 0 0]/Dest[556 0 R/XYZ 0 734 0]>>endobj
-50 0 obj<</Subtype/Link/Rect[126.0 116.4 253.7 129.4]/Border[0 0 0]/Dest[556 0 R/XYZ 0 675 0]>>endobj
-51 0 obj<</Subtype/Link/Rect[126.0 103.2 235.1 116.2]/Border[0 0 0]/Dest[556 0 R/XYZ 0 617 0]>>endobj
-52 0 obj<</Subtype/Link/Rect[126.0 90.0 232.6 103.0]/Border[0 0 0]/Dest[556 0 R/XYZ 0 558 0]>>endobj
-53 0 obj<</Subtype/Link/Rect[126.0 76.8 257.4 89.8]/Border[0 0 0]/Dest[556 0 R/XYZ 0 500 0]>>endobj
-54 0 obj<</Subtype/Link/Rect[126.0 63.6 254.9 76.6]/Border[0 0 0]/Dest[556 0 R/XYZ 0 428 0]>>endobj
-55 0 obj[13 0 R
+4 0 obj<</Type/Font/Subtype/Type1/BaseFont/Courier-Oblique/Encoding 2 0 R>>endobj
+5 0 obj<</Type/Font/Subtype/Type1/BaseFont/Times-Roman/Encoding 2 0 R>>endobj
+6 0 obj<</Type/Font/Subtype/Type1/BaseFont/Times-Bold/Encoding 2 0 R>>endobj
+7 0 obj<</Type/Font/Subtype/Type1/BaseFont/Times-Italic/Encoding 2 0 R>>endobj
+8 0 obj<</Type/Font/Subtype/Type1/BaseFont/Times-BoldItalic/Encoding 2 0 R>>endobj
+9 0 obj<</Type/Font/Subtype/Type1/BaseFont/Helvetica/Encoding 2 0 R>>endobj
+10 0 obj<</Type/Font/Subtype/Type1/BaseFont/Helvetica-Bold/Encoding 2 0 R>>endobj
+11 0 obj<</Type/Font/Subtype/Type1/BaseFont/Symbol>>endobj
+12 0 obj<</Subtype/Link/Rect[72.0 684.0 197.9 697.0]/Border[0 0 0]/Dest[467 0 R/XYZ 0 734 0]>>endobj
+13 0 obj<</Subtype/Link/Rect[108.0 670.8 174.9 683.8]/Border[0 0 0]/Dest[467 0 R/XYZ 0 696 0]>>endobj
+14 0 obj<</Subtype/Link/Rect[72.0 644.4 112.9 657.4]/Border[0 0 0]/Dest[467 0 R/XYZ 0 734 0]>>endobj
+15 0 obj<</Subtype/Link/Rect[72.0 618.0 356.5 631.0]/Border[0 0 0]/Dest[475 0 R/XYZ 0 734 0]>>endobj
+16 0 obj<</Subtype/Link/Rect[108.0 604.8 154.4 617.8]/Border[0 0 0]/Dest[475 0 R/XYZ 0 672 0]>>endobj
+17 0 obj<</Subtype/Link/Rect[108.0 591.6 218.3 604.6]/Border[0 0 0]/Dest[475 0 R/XYZ 0 201 0]>>endobj
+18 0 obj<</Subtype/Link/Rect[108.0 578.4 181.0 591.4]/Border[0 0 0]/Dest[477 0 R/XYZ 0 705 0]>>endobj
+19 0 obj<</Subtype/Link/Rect[72.0 552.0 167.0 565.0]/Border[0 0 0]/Dest[479 0 R/XYZ 0 734 0]>>endobj
+20 0 obj<</Subtype/Link/Rect[108.0 538.8 162.4 551.8]/Border[0 0 0]/Dest[479 0 R/XYZ 0 696 0]>>endobj
+21 0 obj<</Subtype/Link/Rect[108.0 525.6 225.3 538.6]/Border[0 0 0]/Dest[479 0 R/XYZ 0 529 0]>>endobj
+22 0 obj<</Subtype/Link/Rect[108.0 512.4 179.8 525.4]/Border[0 0 0]/Dest[479 0 R/XYZ 0 335 0]>>endobj
+23 0 obj<</Subtype/Link/Rect[108.0 499.2 181.0 512.2]/Border[0 0 0]/Dest[481 0 R/XYZ 0 734 0]>>endobj
+24 0 obj<</Subtype/Link/Rect[108.0 486.0 167.0 499.0]/Border[0 0 0]/Dest[481 0 R/XYZ 0 434 0]>>endobj
+25 0 obj<</Subtype/Link/Rect[72.0 459.6 200.0 472.6]/Border[0 0 0]/Dest[483 0 R/XYZ 0 734 0]>>endobj
+26 0 obj<</Subtype/Link/Rect[108.0 446.4 195.4 459.4]/Border[0 0 0]/Dest[483 0 R/XYZ 0 696 0]>>endobj
+27 0 obj<</Subtype/Link/Rect[108.0 433.2 204.5 446.2]/Border[0 0 0]/Dest[485 0 R/XYZ 0 718 0]>>endobj
+28 0 obj<</Subtype/Link/Rect[108.0 420.0 228.4 433.0]/Border[0 0 0]/Dest[487 0 R/XYZ 0 718 0]>>endobj
+29 0 obj<</Subtype/Link/Rect[108.0 406.8 225.9 419.8]/Border[0 0 0]/Dest[487 0 R/XYZ 0 493 0]>>endobj
+30 0 obj<</Subtype/Link/Rect[108.0 393.6 174.9 406.6]/Border[0 0 0]/Dest[489 0 R/XYZ 0 734 0]>>endobj
+31 0 obj<</Subtype/Link/Rect[126.0 380.4 166.3 393.4]/Border[0 0 0]/Dest[489 0 R/XYZ 0 700 0]>>endobj
+32 0 obj<</Subtype/Link/Rect[126.0 367.2 164.5 380.2]/Border[0 0 0]/Dest[489 0 R/XYZ 0 602 0]>>endobj
+33 0 obj<</Subtype/Link/Rect[126.0 354.0 217.0 367.0]/Border[0 0 0]/Dest[489 0 R/XYZ 0 491 0]>>endobj
+34 0 obj<</Subtype/Link/Rect[72.0 327.6 164.0 340.6]/Border[0 0 0]/Dest[491 0 R/XYZ 0 734 0]>>endobj
+35 0 obj<</Subtype/Link/Rect[72.0 301.2 149.9 314.2]/Border[0 0 0]/Dest[495 0 R/XYZ 0 734 0]>>endobj
+36 0 obj<</Subtype/Link/Rect[108.0 288.0 194.4 301.0]/Border[0 0 0]/Dest[495 0 R/XYZ 0 696 0]>>endobj
+37 0 obj<</Subtype/Link/Rect[108.0 274.8 189.9 287.8]/Border[0 0 0]/Dest[495 0 R/XYZ 0 568 0]>>endobj
+38 0 obj<</Subtype/Link/Rect[108.0 261.6 205.4 274.6]/Border[0 0 0]/Dest[497 0 R/XYZ 0 705 0]>>endobj
+39 0 obj<</Subtype/Link/Rect[126.0 248.4 196.0 261.4]/Border[0 0 0]/Dest[497 0 R/XYZ 0 630 0]>>endobj
+40 0 obj<</Subtype/Link/Rect[126.0 235.2 194.7 248.2]/Border[0 0 0]/Dest[497 0 R/XYZ 0 571 0]>>endobj
+41 0 obj<</Subtype/Link/Rect[126.0 222.0 218.3 235.0]/Border[0 0 0]/Dest[497 0 R/XYZ 0 513 0]>>endobj
+42 0 obj<</Subtype/Link/Rect[126.0 208.8 194.7 221.8]/Border[0 0 0]/Dest[497 0 R/XYZ 0 455 0]>>endobj
+43 0 obj<</Subtype/Link/Rect[126.0 195.6 192.3 208.6]/Border[0 0 0]/Dest[497 0 R/XYZ 0 383 0]>>endobj
+44 0 obj<</Subtype/Link/Rect[126.0 182.4 200.9 195.4]/Border[0 0 0]/Dest[497 0 R/XYZ 0 325 0]>>endobj
+45 0 obj<</Subtype/Link/Rect[126.0 169.2 198.4 182.2]/Border[0 0 0]/Dest[497 0 R/XYZ 0 266 0]>>endobj
+46 0 obj<</Subtype/Link/Rect[126.0 156.0 217.0 169.0]/Border[0 0 0]/Dest[497 0 R/XYZ 0 208 0]>>endobj
+47 0 obj<</Subtype/Link/Rect[126.0 142.8 214.6 155.8]/Border[0 0 0]/Dest[497 0 R/XYZ 0 149 0]>>endobj
+48 0 obj<</Subtype/Link/Rect[126.0 129.6 223.2 142.6]/Border[0 0 0]/Dest[499 0 R/XYZ 0 734 0]>>endobj
+49 0 obj<</Subtype/Link/Rect[126.0 116.4 220.7 129.4]/Border[0 0 0]/Dest[499 0 R/XYZ 0 675 0]>>endobj
+50 0 obj<</Subtype/Link/Rect[126.0 103.2 202.1 116.2]/Border[0 0 0]/Dest[499 0 R/XYZ 0 617 0]>>endobj
+51 0 obj<</Subtype/Link/Rect[126.0 90.0 199.6 103.0]/Border[0 0 0]/Dest[499 0 R/XYZ 0 558 0]>>endobj
+52 0 obj<</Subtype/Link/Rect[126.0 76.8 224.4 89.8]/Border[0 0 0]/Dest[499 0 R/XYZ 0 500 0]>>endobj
+53 0 obj<</Subtype/Link/Rect[126.0 63.6 221.9 76.6]/Border[0 0 0]/Dest[499 0 R/XYZ 0 428 0]>>endobj
+54 0 obj[12 0 R
+13 0 R
14 0 R
15 0 R
16 0 R
50 0 R
51 0 R
52 0 R
-53 0 R
-54 0 R]endobj
-56 0 obj<</Subtype/Link/Rect[72.0 684.0 202.8 697.0]/Border[0 0 0]/Dest[552 0 R/XYZ 0 734 0]>>endobj
-57 0 obj<</Subtype/Link/Rect[108.0 670.8 244.9 683.8]/Border[0 0 0]/Dest[556 0 R/XYZ 0 370 0]>>endobj
-58 0 obj<</Subtype/Link/Rect[126.0 657.6 202.4 670.6]/Border[0 0 0]/Dest[556 0 R/XYZ 0 220 0]>>endobj
-59 0 obj<</Subtype/Link/Rect[126.0 644.4 210.0 657.4]/Border[0 0 0]/Dest[558 0 R/XYZ 0 441 0]>>endobj
-60 0 obj<</Subtype/Link/Rect[108.0 631.2 217.7 644.2]/Border[0 0 0]/Dest[560 0 R/XYZ 0 734 0]>>endobj
-61 0 obj<</Subtype/Link/Rect[72.0 604.8 205.8 617.8]/Border[0 0 0]/Dest[562 0 R/XYZ 0 734 0]>>endobj
-62 0 obj<</Subtype/Link/Rect[108.0 591.6 201.5 604.6]/Border[0 0 0]/Dest[562 0 R/XYZ 0 696 0]>>endobj
-63 0 obj<</Subtype/Link/Rect[126.0 578.4 260.4 591.4]/Border[0 0 0]/Dest[562 0 R/XYZ 0 423 0]>>endobj
-64 0 obj<</Subtype/Link/Rect[126.0 565.2 289.5 578.2]/Border[0 0 0]/Dest[562 0 R/XYZ 0 259 0]>>endobj
-65 0 obj<</Subtype/Link/Rect[126.0 552.0 266.6 565.0]/Border[0 0 0]/Dest[564 0 R/XYZ 0 652 0]>>endobj
-66 0 obj<</Subtype/Link/Rect[108.0 538.8 157.8 551.8]/Border[0 0 0]/Dest[564 0 R/XYZ 0 240 0]>>endobj
-67 0 obj<</Subtype/Link/Rect[126.0 525.6 223.2 538.6]/Border[0 0 0]/Dest[566 0 R/XYZ 0 665 0]>>endobj
-68 0 obj<</Subtype/Link/Rect[72.0 499.2 246.5 512.2]/Border[0 0 0]/Dest[568 0 R/XYZ 0 734 0]>>endobj
-69 0 obj<</Subtype/Link/Rect[108.0 486.0 181.6 499.0]/Border[0 0 0]/Dest[568 0 R/XYZ 0 696 0]>>endobj
-70 0 obj<</Subtype/Link/Rect[108.0 472.8 176.1 485.8]/Border[0 0 0]/Dest[568 0 R/XYZ 0 595 0]>>endobj
-71 0 obj<</Subtype/Link/Rect[108.0 459.6 195.4 472.6]/Border[0 0 0]/Dest[568 0 R/XYZ 0 216 0]>>endobj
-72 0 obj<</Subtype/Link/Rect[108.0 446.4 173.7 459.4]/Border[0 0 0]/Dest[570 0 R/XYZ 0 692 0]>>endobj
-73 0 obj<</Subtype/Link/Rect[108.0 433.2 163.9 446.2]/Border[0 0 0]/Dest[570 0 R/XYZ 0 458 0]>>endobj
-74 0 obj<</Subtype/Link/Rect[108.0 420.0 183.8 433.0]/Border[0 0 0]/Dest[572 0 R/XYZ 0 734 0]>>endobj
-75 0 obj<</Subtype/Link/Rect[108.0 406.8 194.8 419.8]/Border[0 0 0]/Dest[572 0 R/XYZ 0 566 0]>>endobj
-76 0 obj<</Subtype/Link/Rect[108.0 393.6 186.2 406.6]/Border[0 0 0]/Dest[572 0 R/XYZ 0 438 0]>>endobj
-77 0 obj<</Subtype/Link/Rect[108.0 380.4 219.2 393.4]/Border[0 0 0]/Dest[572 0 R/XYZ 0 178 0]>>endobj
-78 0 obj<</Subtype/Link/Rect[72.0 354.0 253.5 367.0]/Border[0 0 0]/Dest[576 0 R/XYZ 0 734 0]>>endobj
-79 0 obj<</Subtype/Link/Rect[72.0 327.6 212.9 340.6]/Border[0 0 0]/Dest[580 0 R/XYZ 0 734 0]>>endobj
-80 0 obj<</Subtype/Link/Rect[108.0 314.4 181.6 327.4]/Border[0 0 0]/Dest[580 0 R/XYZ 0 696 0]>>endobj
-81 0 obj<</Subtype/Link/Rect[126.0 301.2 188.3 314.2]/Border[0 0 0]/Dest[582 0 R/XYZ 0 626 0]>>endobj
-82 0 obj<</Subtype/Link/Rect[126.0 288.0 185.3 301.0]/Border[0 0 0]/Dest[582 0 R/XYZ 0 516 0]>>endobj
-83 0 obj<</Subtype/Link/Rect[108.0 274.8 218.9 287.8]/Border[0 0 0]/Dest[582 0 R/XYZ 0 394 0]>>endobj
-84 0 obj<</Subtype/Link/Rect[126.0 261.6 179.2 274.6]/Border[0 0 0]/Dest[582 0 R/XYZ 0 360 0]>>endobj
-85 0 obj<</Subtype/Link/Rect[126.0 248.4 214.6 261.4]/Border[0 0 0]/Dest[584 0 R/XYZ 0 718 0]>>endobj
-86 0 obj<</Subtype/Link/Rect[126.0 235.2 198.1 248.2]/Border[0 0 0]/Dest[584 0 R/XYZ 0 235 0]>>endobj
-87 0 obj<</Subtype/Link/Rect[108.0 222.0 283.7 235.0]/Border[0 0 0]/Dest[604 0 R/XYZ 0 428 0]>>endobj
-88 0 obj<</Subtype/Link/Rect[126.0 208.8 216.8 221.8]/Border[0 0 0]/Dest[604 0 R/XYZ 0 366 0]>>endobj
-89 0 obj<</Subtype/Link/Rect[126.0 195.6 185.3 208.6]/Border[0 0 0]/Dest[606 0 R/XYZ 0 567 0]>>endobj
-90 0 obj<</Subtype/Link/Rect[126.0 182.4 171.2 195.4]/Border[0 0 0]/Dest[614 0 R/XYZ 0 531 0]>>endobj
-91 0 obj<</Subtype/Link/Rect[126.0 169.2 249.5 182.2]/Border[0 0 0]/Dest[614 0 R/XYZ 0 407 0]>>endobj
-92 0 obj<</Subtype/Link/Rect[126.0 156.0 286.4 169.0]/Border[0 0 0]/Dest[616 0 R/XYZ 0 548 0]>>endobj
-93 0 obj<</Subtype/Link/Rect[126.0 142.8 231.7 155.8]/Border[0 0 0]/Dest[616 0 R/XYZ 0 140 0]>>endobj
-94 0 obj<</Subtype/Link/Rect[126.0 129.6 256.5 142.6]/Border[0 0 0]/Dest[618 0 R/XYZ 0 492 0]>>endobj
-95 0 obj<</Subtype/Link/Rect[126.0 116.4 303.5 129.4]/Border[0 0 0]/Dest[618 0 R/XYZ 0 145 0]>>endobj
-96 0 obj<</Subtype/Link/Rect[126.0 103.2 231.1 116.2]/Border[0 0 0]/Dest[620 0 R/XYZ 0 586 0]>>endobj
-97 0 obj<</Subtype/Link/Rect[126.0 90.0 207.6 103.0]/Border[0 0 0]/Dest[620 0 R/XYZ 0 301 0]>>endobj
-98 0 obj<</Subtype/Link/Rect[126.0 76.8 243.3 89.8]/Border[0 0 0]/Dest[622 0 R/XYZ 0 734 0]>>endobj
-99 0 obj<</Subtype/Link/Rect[126.0 63.6 250.0 76.6]/Border[0 0 0]/Dest[622 0 R/XYZ 0 249 0]>>endobj
-100 0 obj[56 0 R
+53 0 R]endobj
+55 0 obj<</Subtype/Link/Rect[72.0 684.0 149.9 697.0]/Border[0 0 0]/Dest[495 0 R/XYZ 0 734 0]>>endobj
+56 0 obj<</Subtype/Link/Rect[108.0 670.8 225.6 683.8]/Border[0 0 0]/Dest[499 0 R/XYZ 0 370 0]>>endobj
+57 0 obj<</Subtype/Link/Rect[126.0 657.6 174.9 670.6]/Border[0 0 0]/Dest[499 0 R/XYZ 0 217 0]>>endobj
+58 0 obj<</Subtype/Link/Rect[126.0 644.4 182.5 657.4]/Border[0 0 0]/Dest[501 0 R/XYZ 0 428 0]>>endobj
+59 0 obj<</Subtype/Link/Rect[108.0 631.2 198.4 644.2]/Border[0 0 0]/Dest[503 0 R/XYZ 0 734 0]>>endobj
+60 0 obj<</Subtype/Link/Rect[72.0 604.8 153.0 617.8]/Border[0 0 0]/Dest[505 0 R/XYZ 0 734 0]>>endobj
+61 0 obj<</Subtype/Link/Rect[108.0 591.6 182.2 604.6]/Border[0 0 0]/Dest[505 0 R/XYZ 0 696 0]>>endobj
+62 0 obj<</Subtype/Link/Rect[126.0 578.4 232.9 591.4]/Border[0 0 0]/Dest[505 0 R/XYZ 0 423 0]>>endobj
+63 0 obj<</Subtype/Link/Rect[126.0 565.2 262.0 578.2]/Border[0 0 0]/Dest[505 0 R/XYZ 0 259 0]>>endobj
+64 0 obj<</Subtype/Link/Rect[126.0 552.0 239.1 565.0]/Border[0 0 0]/Dest[507 0 R/XYZ 0 652 0]>>endobj
+65 0 obj<</Subtype/Link/Rect[108.0 538.8 138.6 551.8]/Border[0 0 0]/Dest[507 0 R/XYZ 0 223 0]>>endobj
+66 0 obj<</Subtype/Link/Rect[126.0 525.6 195.7 538.6]/Border[0 0 0]/Dest[509 0 R/XYZ 0 652 0]>>endobj
+67 0 obj<</Subtype/Link/Rect[72.0 499.2 193.6 512.2]/Border[0 0 0]/Dest[511 0 R/XYZ 0 734 0]>>endobj
+68 0 obj<</Subtype/Link/Rect[108.0 486.0 162.4 499.0]/Border[0 0 0]/Dest[511 0 R/XYZ 0 696 0]>>endobj
+69 0 obj<</Subtype/Link/Rect[108.0 472.8 156.9 485.8]/Border[0 0 0]/Dest[511 0 R/XYZ 0 595 0]>>endobj
+70 0 obj<</Subtype/Link/Rect[108.0 459.6 176.1 472.6]/Border[0 0 0]/Dest[511 0 R/XYZ 0 216 0]>>endobj
+71 0 obj<</Subtype/Link/Rect[108.0 446.4 154.4 459.4]/Border[0 0 0]/Dest[513 0 R/XYZ 0 692 0]>>endobj
+72 0 obj<</Subtype/Link/Rect[108.0 433.2 144.7 446.2]/Border[0 0 0]/Dest[513 0 R/XYZ 0 458 0]>>endobj
+73 0 obj<</Subtype/Link/Rect[108.0 420.0 164.5 433.0]/Border[0 0 0]/Dest[513 0 R/XYZ 0 145 0]>>endobj
+74 0 obj<</Subtype/Link/Rect[108.0 406.8 175.5 419.8]/Border[0 0 0]/Dest[515 0 R/XYZ 0 665 0]>>endobj
+75 0 obj<</Subtype/Link/Rect[108.0 393.6 167.0 406.6]/Border[0 0 0]/Dest[515 0 R/XYZ 0 537 0]>>endobj
+76 0 obj<</Subtype/Link/Rect[108.0 380.4 200.0 393.4]/Border[0 0 0]/Dest[515 0 R/XYZ 0 277 0]>>endobj
+77 0 obj<</Subtype/Link/Rect[72.0 354.0 200.6 367.0]/Border[0 0 0]/Dest[519 0 R/XYZ 0 734 0]>>endobj
+78 0 obj<</Subtype/Link/Rect[72.0 327.6 160.0 340.6]/Border[0 0 0]/Dest[523 0 R/XYZ 0 734 0]>>endobj
+79 0 obj<</Subtype/Link/Rect[108.0 314.4 162.4 327.4]/Border[0 0 0]/Dest[523 0 R/XYZ 0 696 0]>>endobj
+80 0 obj<</Subtype/Link/Rect[126.0 301.2 160.8 314.2]/Border[0 0 0]/Dest[525 0 R/XYZ 0 626 0]>>endobj
+81 0 obj<</Subtype/Link/Rect[126.0 288.0 157.8 301.0]/Border[0 0 0]/Dest[525 0 R/XYZ 0 516 0]>>endobj
+82 0 obj<</Subtype/Link/Rect[108.0 274.8 199.7 287.8]/Border[0 0 0]/Dest[525 0 R/XYZ 0 394 0]>>endobj
+83 0 obj<</Subtype/Link/Rect[126.0 261.6 151.7 274.6]/Border[0 0 0]/Dest[525 0 R/XYZ 0 360 0]>>endobj
+84 0 obj<</Subtype/Link/Rect[126.0 248.4 187.1 261.4]/Border[0 0 0]/Dest[527 0 R/XYZ 0 718 0]>>endobj
+85 0 obj<</Subtype/Link/Rect[126.0 235.2 170.6 248.2]/Border[0 0 0]/Dest[527 0 R/XYZ 0 235 0]>>endobj
+86 0 obj<</Subtype/Link/Rect[108.0 222.0 264.4 235.0]/Border[0 0 0]/Dest[547 0 R/XYZ 0 428 0]>>endobj
+87 0 obj<</Subtype/Link/Rect[126.0 208.8 189.3 221.8]/Border[0 0 0]/Dest[547 0 R/XYZ 0 366 0]>>endobj
+88 0 obj<</Subtype/Link/Rect[126.0 195.6 157.8 208.6]/Border[0 0 0]/Dest[549 0 R/XYZ 0 564 0]>>endobj
+89 0 obj<</Subtype/Link/Rect[126.0 182.4 143.7 195.4]/Border[0 0 0]/Dest[557 0 R/XYZ 0 518 0]>>endobj
+90 0 obj<</Subtype/Link/Rect[126.0 169.2 222.0 182.2]/Border[0 0 0]/Dest[557 0 R/XYZ 0 394 0]>>endobj
+91 0 obj<</Subtype/Link/Rect[126.0 156.0 258.9 169.0]/Border[0 0 0]/Dest[559 0 R/XYZ 0 522 0]>>endobj
+92 0 obj<</Subtype/Link/Rect[126.0 142.8 204.2 155.8]/Border[0 0 0]/Dest[561 0 R/XYZ 0 734 0]>>endobj
+93 0 obj<</Subtype/Link/Rect[126.0 129.6 229.0 142.6]/Border[0 0 0]/Dest[561 0 R/XYZ 0 433 0]>>endobj
+94 0 obj<</Subtype/Link/Rect[126.0 116.4 276.0 129.4]/Border[0 0 0]/Dest[563 0 R/XYZ 0 734 0]>>endobj
+95 0 obj<</Subtype/Link/Rect[126.0 103.2 203.6 116.2]/Border[0 0 0]/Dest[563 0 R/XYZ 0 501 0]>>endobj
+96 0 obj<</Subtype/Link/Rect[126.0 90.0 174.6 103.0]/Border[0 0 0]/Dest[563 0 R/XYZ 0 217 0]>>endobj
+97 0 obj<</Subtype/Link/Rect[126.0 76.8 210.3 89.8]/Border[0 0 0]/Dest[565 0 R/XYZ 0 639 0]>>endobj
+98 0 obj<</Subtype/Link/Rect[126.0 63.6 217.0 76.6]/Border[0 0 0]/Dest[565 0 R/XYZ 0 154 0]>>endobj
+99 0 obj[55 0 R
+56 0 R
57 0 R
58 0 R
59 0 R
95 0 R
96 0 R
97 0 R
-98 0 R
-99 0 R]endobj
-101 0 obj<</Subtype/Link/Rect[72.0 684.0 212.9 697.0]/Border[0 0 0]/Dest[580 0 R/XYZ 0 734 0]>>endobj
-102 0 obj<</Subtype/Link/Rect[108.0 670.8 301.4 683.8]/Border[0 0 0]/Dest[624 0 R/XYZ 0 413 0]>>endobj
-103 0 obj<</Subtype/Link/Rect[126.0 657.6 259.8 670.6]/Border[0 0 0]/Dest[626 0 R/XYZ 0 665 0]>>endobj
-104 0 obj<</Subtype/Link/Rect[126.0 644.4 241.5 657.4]/Border[0 0 0]/Dest[626 0 R/XYZ 0 273 0]>>endobj
-105 0 obj<</Subtype/Link/Rect[126.0 631.2 267.5 644.2]/Border[0 0 0]/Dest[628 0 R/XYZ 0 531 0]>>endobj
-106 0 obj<</Subtype/Link/Rect[126.0 618.0 232.3 631.0]/Border[0 0 0]/Dest[628 0 R/XYZ 0 165 0]>>endobj
-107 0 obj<</Subtype/Link/Rect[126.0 604.8 234.2 617.8]/Border[0 0 0]/Dest[630 0 R/XYZ 0 353 0]>>endobj
-108 0 obj<</Subtype/Link/Rect[108.0 591.6 269.6 604.6]/Border[0 0 0]/Dest[632 0 R/XYZ 0 734 0]>>endobj
-109 0 obj<</Subtype/Link/Rect[126.0 578.4 220.7 591.4]/Border[0 0 0]/Dest[632 0 R/XYZ 0 658 0]>>endobj
-110 0 obj<</Subtype/Link/Rect[126.0 565.2 208.8 578.2]/Border[0 0 0]/Dest[634 0 R/XYZ 0 734 0]>>endobj
-111 0 obj<</Subtype/Link/Rect[108.0 552.0 267.5 565.0]/Border[0 0 0]/Dest[636 0 R/XYZ 0 705 0]>>endobj
-112 0 obj<</Subtype/Link/Rect[126.0 538.8 226.2 551.8]/Border[0 0 0]/Dest[636 0 R/XYZ 0 577 0]>>endobj
-113 0 obj<</Subtype/Link/Rect[126.0 525.6 240.6 538.6]/Border[0 0 0]/Dest[638 0 R/XYZ 0 734 0]>>endobj
-114 0 obj<</Subtype/Link/Rect[108.0 512.4 346.9 525.4]/Border[0 0 0]/Dest[638 0 R/XYZ 0 433 0]>>endobj
-115 0 obj<</Subtype/Link/Rect[126.0 499.2 203.0 512.2]/Border[0 0 0]/Dest[638 0 R/XYZ 0 400 0]>>endobj
-116 0 obj<</Subtype/Link/Rect[126.0 486.0 190.8 499.0]/Border[0 0 0]/Dest[640 0 R/XYZ 0 734 0]>>endobj
-117 0 obj<</Subtype/Link/Rect[126.0 472.8 201.2 485.8]/Border[0 0 0]/Dest[640 0 R/XYZ 0 385 0]>>endobj
-118 0 obj<</Subtype/Link/Rect[108.0 459.6 193.9 472.6]/Border[0 0 0]/Dest[640 0 R/XYZ 0 128 0]>>endobj
-119 0 obj<</Subtype/Link/Rect[126.0 446.4 235.8 459.4]/Border[0 0 0]/Dest[642 0 R/XYZ 0 633 0]>>endobj
-120 0 obj<</Subtype/Link/Rect[126.0 433.2 238.8 446.2]/Border[0 0 0]/Dest[644 0 R/XYZ 0 665 0]>>endobj
-121 0 obj<</Subtype/Link/Rect[72.0 406.8 250.1 419.8]/Border[0 0 0]/Dest[648 0 R/XYZ 0 734 0]>>endobj
-122 0 obj<</Subtype/Link/Rect[108.0 393.6 170.0 406.6]/Border[0 0 0]/Dest[648 0 R/XYZ 0 696 0]>>endobj
-123 0 obj<</Subtype/Link/Rect[108.0 380.4 307.2 393.4]/Border[0 0 0]/Dest[648 0 R/XYZ 0 621 0]>>endobj
-124 0 obj<</Subtype/Link/Rect[108.0 367.2 216.6 380.2]/Border[0 0 0]/Dest[648 0 R/XYZ 0 361 0]>>endobj
-125 0 obj<</Subtype/Link/Rect[108.0 354.0 358.2 367.0]/Border[0 0 0]/Dest[652 0 R/XYZ 0 692 0]>>endobj
-126 0 obj<</Subtype/Link/Rect[108.0 340.8 309.3 353.8]/Border[0 0 0]/Dest[652 0 R/XYZ 0 630 0]>>endobj
-127 0 obj<</Subtype/Link/Rect[72.0 314.4 240.4 327.4]/Border[0 0 0]/Dest[658 0 R/XYZ 0 734 0]>>endobj
-128 0 obj<</Subtype/Link/Rect[108.0 301.2 200.3 314.2]/Border[0 0 0]/Dest[658 0 R/XYZ 0 696 0]>>endobj
-129 0 obj<</Subtype/Link/Rect[72.0 274.8 263.3 287.8]/Border[0 0 0]/Dest[660 0 R/XYZ 0 734 0]>>endobj
-130 0 obj<</Subtype/Link/Rect[108.0 261.6 248.5 274.6]/Border[0 0 0]/Dest[660 0 R/XYZ 0 696 0]>>endobj
-131 0 obj<</Subtype/Link/Rect[108.0 248.4 236.0 261.4]/Border[0 0 0]/Dest[662 0 R/XYZ 0 639 0]>>endobj
-132 0 obj<</Subtype/Link/Rect[108.0 235.2 291.6 248.2]/Border[0 0 0]/Dest[662 0 R/XYZ 0 498 0]>>endobj
-133 0 obj<</Subtype/Link/Rect[108.0 222.0 162.7 235.0]/Border[0 0 0]/Dest[662 0 R/XYZ 0 198 0]>>endobj
-134 0 obj<</Subtype/Link/Rect[126.0 208.8 210.9 221.8]/Border[0 0 0]/Dest[662 0 R/XYZ 0 165 0]>>endobj
-135 0 obj<</Subtype/Link/Rect[126.0 195.6 224.7 208.6]/Border[0 0 0]/Dest[664 0 R/XYZ 0 734 0]>>endobj
-136 0 obj<</Subtype/Link/Rect[126.0 182.4 224.1 195.4]/Border[0 0 0]/Dest[664 0 R/XYZ 0 596 0]>>endobj
-137 0 obj<</Subtype/Link/Rect[108.0 169.2 197.8 182.2]/Border[0 0 0]/Dest[664 0 R/XYZ 0 485 0]>>endobj
-138 0 obj<</Subtype/Link/Rect[126.0 156.0 287.3 169.0]/Border[0 0 0]/Dest[664 0 R/XYZ 0 451 0]>>endobj
-139 0 obj<</Subtype/Link/Rect[126.0 142.8 196.9 155.8]/Border[0 0 0]/Dest[664 0 R/XYZ 0 366 0]>>endobj
-140 0 obj<</Subtype/Link/Rect[108.0 129.6 230.8 142.6]/Border[0 0 0]/Dest[664 0 R/XYZ 0 229 0]>>endobj
-141 0 obj<</Subtype/Link/Rect[108.0 116.4 165.8 129.4]/Border[0 0 0]/Dest[666 0 R/XYZ 0 489 0]>>endobj
-142 0 obj<</Subtype/Link/Rect[72.0 90.0 313.7 103.0]/Border[0 0 0]/Dest[668 0 R/XYZ 0 734 0]>>endobj
-143 0 obj<</Subtype/Link/Rect[108.0 76.8 187.1 89.8]/Border[0 0 0]/Dest[668 0 R/XYZ 0 696 0]>>endobj
-144 0 obj<</Subtype/Link/Rect[108.0 63.6 216.2 76.6]/Border[0 0 0]/Dest[668 0 R/XYZ 0 568 0]>>endobj
-145 0 obj[101 0 R
+98 0 R]endobj
+100 0 obj<</Subtype/Link/Rect[72.0 684.0 160.0 697.0]/Border[0 0 0]/Dest[523 0 R/XYZ 0 734 0]>>endobj
+101 0 obj<</Subtype/Link/Rect[108.0 670.8 282.1 683.8]/Border[0 0 0]/Dest[567 0 R/XYZ 0 281 0]>>endobj
+102 0 obj<</Subtype/Link/Rect[126.0 657.6 232.3 670.6]/Border[0 0 0]/Dest[569 0 R/XYZ 0 533 0]>>endobj
+103 0 obj<</Subtype/Link/Rect[126.0 644.4 214.0 657.4]/Border[0 0 0]/Dest[569 0 R/XYZ 0 141 0]>>endobj
+104 0 obj<</Subtype/Link/Rect[126.0 631.2 240.0 644.2]/Border[0 0 0]/Dest[571 0 R/XYZ 0 424 0]>>endobj
+105 0 obj<</Subtype/Link/Rect[126.0 618.0 204.8 631.0]/Border[0 0 0]/Dest[573 0 R/XYZ 0 734 0]>>endobj
+106 0 obj<</Subtype/Link/Rect[126.0 604.8 206.7 617.8]/Border[0 0 0]/Dest[573 0 R/XYZ 0 291 0]>>endobj
+107 0 obj<</Subtype/Link/Rect[108.0 591.6 250.4 604.6]/Border[0 0 0]/Dest[575 0 R/XYZ 0 705 0]>>endobj
+108 0 obj<</Subtype/Link/Rect[126.0 578.4 193.2 591.4]/Border[0 0 0]/Dest[575 0 R/XYZ 0 630 0]>>endobj
+109 0 obj<</Subtype/Link/Rect[126.0 565.2 181.3 578.2]/Border[0 0 0]/Dest[577 0 R/XYZ 0 734 0]>>endobj
+110 0 obj<</Subtype/Link/Rect[108.0 552.0 248.2 565.0]/Border[0 0 0]/Dest[579 0 R/XYZ 0 705 0]>>endobj
+111 0 obj<</Subtype/Link/Rect[126.0 538.8 198.7 551.8]/Border[0 0 0]/Dest[579 0 R/XYZ 0 577 0]>>endobj
+112 0 obj<</Subtype/Link/Rect[126.0 525.6 213.1 538.6]/Border[0 0 0]/Dest[581 0 R/XYZ 0 734 0]>>endobj
+113 0 obj<</Subtype/Link/Rect[108.0 512.4 327.7 525.4]/Border[0 0 0]/Dest[581 0 R/XYZ 0 433 0]>>endobj
+114 0 obj<</Subtype/Link/Rect[126.0 499.2 175.5 512.2]/Border[0 0 0]/Dest[581 0 R/XYZ 0 400 0]>>endobj
+115 0 obj<</Subtype/Link/Rect[126.0 486.0 163.3 499.0]/Border[0 0 0]/Dest[583 0 R/XYZ 0 734 0]>>endobj
+116 0 obj<</Subtype/Link/Rect[126.0 472.8 173.7 485.8]/Border[0 0 0]/Dest[583 0 R/XYZ 0 385 0]>>endobj
+117 0 obj<</Subtype/Link/Rect[108.0 459.6 174.6 472.6]/Border[0 0 0]/Dest[583 0 R/XYZ 0 128 0]>>endobj
+118 0 obj<</Subtype/Link/Rect[126.0 446.4 208.3 459.4]/Border[0 0 0]/Dest[585 0 R/XYZ 0 633 0]>>endobj
+119 0 obj<</Subtype/Link/Rect[126.0 433.2 211.3 446.2]/Border[0 0 0]/Dest[587 0 R/XYZ 0 665 0]>>endobj
+120 0 obj<</Subtype/Link/Rect[72.0 406.8 191.8 419.8]/Border[0 0 0]/Dest[591 0 R/XYZ 0 734 0]>>endobj
+121 0 obj<</Subtype/Link/Rect[108.0 393.6 145.3 406.6]/Border[0 0 0]/Dest[591 0 R/XYZ 0 696 0]>>endobj
+122 0 obj<</Subtype/Link/Rect[108.0 380.4 282.4 393.4]/Border[0 0 0]/Dest[591 0 R/XYZ 0 621 0]>>endobj
+123 0 obj<</Subtype/Link/Rect[108.0 367.2 191.9 380.2]/Border[0 0 0]/Dest[591 0 R/XYZ 0 361 0]>>endobj
+124 0 obj<</Subtype/Link/Rect[108.0 354.0 333.5 367.0]/Border[0 0 0]/Dest[595 0 R/XYZ 0 692 0]>>endobj
+125 0 obj<</Subtype/Link/Rect[108.0 340.8 284.6 353.8]/Border[0 0 0]/Dest[595 0 R/XYZ 0 630 0]>>endobj
+126 0 obj<</Subtype/Link/Rect[72.0 314.4 182.0 327.4]/Border[0 0 0]/Dest[601 0 R/XYZ 0 734 0]>>endobj
+127 0 obj<</Subtype/Link/Rect[108.0 301.2 175.5 314.2]/Border[0 0 0]/Dest[601 0 R/XYZ 0 696 0]>>endobj
+128 0 obj[100 0 R
+101 0 R
102 0 R
103 0 R
104 0 R
124 0 R
125 0 R
126 0 R
-127 0 R
-128 0 R
-129 0 R
-130 0 R
-131 0 R
+127 0 R]endobj
+129 0 obj<</S/URI/URI(http://devel.samba.org/)>>endobj
+130 0 obj<</Subtype/Link/Rect[139.5 617.8 243.7 630.8]/Border[0 0 0]/A 129 0 R>>endobj
+131 0 obj<</S/URI/URI(mailto:jelmer@samba.org)>>endobj
+132 0 obj<</Subtype/Link/Rect[347.9 617.8 434.4 630.8]/Border[0 0 0]/A 131 0 R>>endobj
+133 0 obj<</S/URI/URI(http://www.fsf.org/licenses/gpl.txt)>>endobj
+134 0 obj<</Subtype/Link/Rect[72.0 565.0 223.3 578.0]/Border[0 0 0]/A 133 0 R>>endobj
+135 0 obj<</Subtype/Link/Rect[72.0 525.4 340.6 538.4]/Border[0 0 0]/Dest[475 0 R/XYZ 0 734 0]>>endobj
+136 0 obj<</Subtype/Link/Rect[108.0 512.2 152.0 525.2]/Border[0 0 0]/Dest[475 0 R/XYZ 0 672 0]>>endobj
+137 0 obj<</Subtype/Link/Rect[108.0 499.0 211.6 512.0]/Border[0 0 0]/Dest[475 0 R/XYZ 0 201 0]>>endobj
+138 0 obj<</Subtype/Link/Rect[108.0 485.8 176.8 498.8]/Border[0 0 0]/Dest[477 0 R/XYZ 0 705 0]>>endobj
+139 0 obj<</Subtype/Link/Rect[72.0 472.6 159.7 485.6]/Border[0 0 0]/Dest[479 0 R/XYZ 0 734 0]>>endobj
+140 0 obj<</Subtype/Link/Rect[108.0 459.4 163.0 472.4]/Border[0 0 0]/Dest[479 0 R/XYZ 0 696 0]>>endobj
+141 0 obj<</Subtype/Link/Rect[108.0 446.2 226.6 459.2]/Border[0 0 0]/Dest[479 0 R/XYZ 0 529 0]>>endobj
+142 0 obj<</Subtype/Link/Rect[108.0 433.0 179.8 446.0]/Border[0 0 0]/Dest[479 0 R/XYZ 0 335 0]>>endobj
+143 0 obj<</Subtype/Link/Rect[108.0 419.8 181.0 432.8]/Border[0 0 0]/Dest[481 0 R/XYZ 0 734 0]>>endobj
+144 0 obj<</Subtype/Link/Rect[108.0 406.6 166.4 419.6]/Border[0 0 0]/Dest[481 0 R/XYZ 0 434 0]>>endobj
+145 0 obj<</Subtype/Link/Rect[72.0 393.4 192.1 406.4]/Border[0 0 0]/Dest[483 0 R/XYZ 0 734 0]>>endobj
+146 0 obj<</Subtype/Link/Rect[108.0 380.2 192.9 393.2]/Border[0 0 0]/Dest[483 0 R/XYZ 0 696 0]>>endobj
+147 0 obj<</Subtype/Link/Rect[108.0 367.0 203.9 380.0]/Border[0 0 0]/Dest[485 0 R/XYZ 0 718 0]>>endobj
+148 0 obj<</Subtype/Link/Rect[108.0 353.8 226.5 366.8]/Border[0 0 0]/Dest[487 0 R/XYZ 0 718 0]>>endobj
+149 0 obj<</Subtype/Link/Rect[108.0 340.6 222.9 353.6]/Border[0 0 0]/Dest[487 0 R/XYZ 0 493 0]>>endobj
+150 0 obj<</Subtype/Link/Rect[108.0 327.4 174.3 340.4]/Border[0 0 0]/Dest[489 0 R/XYZ 0 734 0]>>endobj
+151 0 obj<</Subtype/Link/Rect[144.0 314.2 183.7 327.2]/Border[0 0 0]/Dest[489 0 R/XYZ 0 700 0]>>endobj
+152 0 obj<</Subtype/Link/Rect[144.0 301.0 183.1 314.0]/Border[0 0 0]/Dest[489 0 R/XYZ 0 602 0]>>endobj
+153 0 obj<</Subtype/Link/Rect[144.0 287.8 234.4 300.8]/Border[0 0 0]/Dest[489 0 R/XYZ 0 491 0]>>endobj
+154 0 obj<</Subtype/Link/Rect[72.0 274.6 159.7 287.6]/Border[0 0 0]/Dest[491 0 R/XYZ 0 734 0]>>endobj
+155 0 obj<</Subtype/Link/Rect[72.0 261.4 144.4 274.4]/Border[0 0 0]/Dest[495 0 R/XYZ 0 734 0]>>endobj
+156 0 obj<</Subtype/Link/Rect[108.0 248.2 197.5 261.2]/Border[0 0 0]/Dest[495 0 R/XYZ 0 696 0]>>endobj
+157 0 obj<</Subtype/Link/Rect[108.0 235.0 188.1 248.0]/Border[0 0 0]/Dest[495 0 R/XYZ 0 568 0]>>endobj
+158 0 obj<</Subtype/Link/Rect[108.0 221.8 206.7 234.8]/Border[0 0 0]/Dest[497 0 R/XYZ 0 705 0]>>endobj
+159 0 obj<</Subtype/Link/Rect[144.0 208.6 210.3 221.6]/Border[0 0 0]/Dest[497 0 R/XYZ 0 630 0]>>endobj
+160 0 obj<</Subtype/Link/Rect[144.0 195.4 209.7 208.4]/Border[0 0 0]/Dest[497 0 R/XYZ 0 571 0]>>endobj
+161 0 obj<</Subtype/Link/Rect[144.0 182.2 232.0 195.2]/Border[0 0 0]/Dest[497 0 R/XYZ 0 513 0]>>endobj
+162 0 obj<</Subtype/Link/Rect[144.0 169.0 208.5 182.0]/Border[0 0 0]/Dest[497 0 R/XYZ 0 455 0]>>endobj
+163 0 obj<</Subtype/Link/Rect[144.0 155.8 206.6 168.8]/Border[0 0 0]/Dest[497 0 R/XYZ 0 383 0]>>endobj
+164 0 obj<</Subtype/Link/Rect[144.0 142.6 214.0 155.6]/Border[0 0 0]/Dest[497 0 R/XYZ 0 325 0]>>endobj
+165 0 obj<</Subtype/Link/Rect[144.0 129.4 212.1 142.4]/Border[0 0 0]/Dest[497 0 R/XYZ 0 266 0]>>endobj
+166 0 obj<</Subtype/Link/Rect[144.0 116.2 230.2 129.2]/Border[0 0 0]/Dest[497 0 R/XYZ 0 208 0]>>endobj
+167 0 obj<</Subtype/Link/Rect[144.0 103.0 228.3 116.0]/Border[0 0 0]/Dest[497 0 R/XYZ 0 149 0]>>endobj
+168 0 obj<</Subtype/Link/Rect[144.0 89.8 235.7 102.8]/Border[0 0 0]/Dest[499 0 R/XYZ 0 734 0]>>endobj
+169 0 obj<</Subtype/Link/Rect[144.0 76.6 233.8 89.6]/Border[0 0 0]/Dest[499 0 R/XYZ 0 675 0]>>endobj
+170 0 obj<</Subtype/Link/Rect[144.0 63.4 215.2 76.4]/Border[0 0 0]/Dest[499 0 R/XYZ 0 617 0]>>endobj
+171 0 obj[130 0 R
132 0 R
-133 0 R
134 0 R
135 0 R
136 0 R
141 0 R
142 0 R
143 0 R
-144 0 R]endobj
-146 0 obj<</Subtype/Link/Rect[72.0 684.0 313.7 697.0]/Border[0 0 0]/Dest[668 0 R/XYZ 0 734 0]>>endobj
-147 0 obj<</Subtype/Link/Rect[108.0 670.8 220.7 683.8]/Border[0 0 0]/Dest[670 0 R/XYZ 0 718 0]>>endobj
-148 0 obj[146 0 R
-147 0 R]endobj
-149 0 obj<</S/URI/URI(http://devel.samba.org/)>>endobj
-150 0 obj<</Subtype/Link/Rect[139.5 617.8 243.7 630.8]/Border[0 0 0]/A 149 0 R>>endobj
-151 0 obj<</S/URI/URI(mailto:jelmer@samba.org)>>endobj
-152 0 obj<</Subtype/Link/Rect[347.9 617.8 434.4 630.8]/Border[0 0 0]/A 151 0 R>>endobj
-153 0 obj<</S/URI/URI(http://www.fsf.org/licenses/gpl.txt)>>endobj
-154 0 obj<</Subtype/Link/Rect[72.0 565.0 223.3 578.0]/Border[0 0 0]/A 153 0 R>>endobj
-155 0 obj<</Subtype/Link/Rect[80.2 525.4 351.6 538.4]/Border[0 0 0]/Dest[532 0 R/XYZ 0 734 0]>>endobj
-156 0 obj<</Subtype/Link/Rect[124.5 512.2 171.2 525.2]/Border[0 0 0]/Dest[532 0 R/XYZ 0 672 0]>>endobj
-157 0 obj<</Subtype/Link/Rect[124.5 499.0 230.8 512.0]/Border[0 0 0]/Dest[532 0 R/XYZ 0 201 0]>>endobj
-158 0 obj<</Subtype/Link/Rect[124.5 485.8 196.0 498.8]/Border[0 0 0]/Dest[534 0 R/XYZ 0 705 0]>>endobj
-159 0 obj<</Subtype/Link/Rect[80.2 472.6 170.7 485.6]/Border[0 0 0]/Dest[536 0 R/XYZ 0 734 0]>>endobj
-160 0 obj<</Subtype/Link/Rect[124.5 459.4 182.2 472.4]/Border[0 0 0]/Dest[536 0 R/XYZ 0 696 0]>>endobj
-161 0 obj<</Subtype/Link/Rect[124.5 446.2 245.8 459.2]/Border[0 0 0]/Dest[536 0 R/XYZ 0 529 0]>>endobj
-162 0 obj<</Subtype/Link/Rect[124.5 433.0 199.1 446.0]/Border[0 0 0]/Dest[536 0 R/XYZ 0 335 0]>>endobj
-163 0 obj<</Subtype/Link/Rect[124.5 419.8 200.3 432.8]/Border[0 0 0]/Dest[538 0 R/XYZ 0 734 0]>>endobj
-164 0 obj<</Subtype/Link/Rect[124.5 406.6 185.6 419.6]/Border[0 0 0]/Dest[538 0 R/XYZ 0 434 0]>>endobj
-165 0 obj<</Subtype/Link/Rect[80.2 393.4 203.1 406.4]/Border[0 0 0]/Dest[540 0 R/XYZ 0 734 0]>>endobj
-166 0 obj<</Subtype/Link/Rect[124.5 380.2 212.2 393.2]/Border[0 0 0]/Dest[540 0 R/XYZ 0 696 0]>>endobj
-167 0 obj<</Subtype/Link/Rect[124.5 367.0 223.2 380.0]/Border[0 0 0]/Dest[542 0 R/XYZ 0 734 0]>>endobj
-168 0 obj<</Subtype/Link/Rect[124.5 353.8 245.8 366.8]/Border[0 0 0]/Dest[544 0 R/XYZ 0 734 0]>>endobj
-169 0 obj<</Subtype/Link/Rect[124.5 340.6 242.1 353.6]/Border[0 0 0]/Dest[544 0 R/XYZ 0 514 0]>>endobj
-170 0 obj<</Subtype/Link/Rect[124.5 327.4 193.6 340.4]/Border[0 0 0]/Dest[546 0 R/XYZ 0 734 0]>>endobj
-171 0 obj<</Subtype/Link/Rect[168.8 314.2 211.2 327.2]/Border[0 0 0]/Dest[546 0 R/XYZ 0 700 0]>>endobj
-172 0 obj<</Subtype/Link/Rect[168.8 301.0 210.6 314.0]/Border[0 0 0]/Dest[546 0 R/XYZ 0 602 0]>>endobj
-173 0 obj<</Subtype/Link/Rect[168.8 287.8 261.9 300.8]/Border[0 0 0]/Dest[546 0 R/XYZ 0 491 0]>>endobj
-174 0 obj<</Subtype/Link/Rect[80.2 274.6 170.7 287.6]/Border[0 0 0]/Dest[548 0 R/XYZ 0 734 0]>>endobj
-175 0 obj<</Subtype/Link/Rect[80.2 261.4 155.4 274.4]/Border[0 0 0]/Dest[552 0 R/XYZ 0 734 0]>>endobj
-176 0 obj<</Subtype/Link/Rect[124.5 248.2 216.8 261.2]/Border[0 0 0]/Dest[552 0 R/XYZ 0 696 0]>>endobj
-177 0 obj<</Subtype/Link/Rect[124.5 235.0 207.3 248.0]/Border[0 0 0]/Dest[552 0 R/XYZ 0 568 0]>>endobj
-178 0 obj<</Subtype/Link/Rect[124.5 221.8 225.9 234.8]/Border[0 0 0]/Dest[554 0 R/XYZ 0 705 0]>>endobj
-179 0 obj<</Subtype/Link/Rect[168.8 208.6 237.8 221.6]/Border[0 0 0]/Dest[554 0 R/XYZ 0 630 0]>>endobj
-180 0 obj<</Subtype/Link/Rect[168.8 195.4 237.2 208.4]/Border[0 0 0]/Dest[554 0 R/XYZ 0 571 0]>>endobj
-181 0 obj<</Subtype/Link/Rect[168.8 182.2 259.5 195.2]/Border[0 0 0]/Dest[554 0 R/XYZ 0 513 0]>>endobj
-182 0 obj<</Subtype/Link/Rect[168.8 169.0 236.0 182.0]/Border[0 0 0]/Dest[554 0 R/XYZ 0 455 0]>>endobj
-183 0 obj<</Subtype/Link/Rect[168.8 155.8 234.1 168.8]/Border[0 0 0]/Dest[554 0 R/XYZ 0 383 0]>>endobj
-184 0 obj<</Subtype/Link/Rect[168.8 142.6 241.5 155.6]/Border[0 0 0]/Dest[554 0 R/XYZ 0 325 0]>>endobj
-185 0 obj<</Subtype/Link/Rect[168.8 129.4 239.6 142.4]/Border[0 0 0]/Dest[554 0 R/XYZ 0 266 0]>>endobj
-186 0 obj<</Subtype/Link/Rect[168.8 116.2 257.7 129.2]/Border[0 0 0]/Dest[554 0 R/XYZ 0 208 0]>>endobj
-187 0 obj<</Subtype/Link/Rect[168.8 103.0 255.8 116.0]/Border[0 0 0]/Dest[554 0 R/XYZ 0 149 0]>>endobj
-188 0 obj<</Subtype/Link/Rect[174.2 89.8 268.7 102.8]/Border[0 0 0]/Dest[556 0 R/XYZ 0 734 0]>>endobj
-189 0 obj<</Subtype/Link/Rect[174.2 76.6 266.8 89.6]/Border[0 0 0]/Dest[556 0 R/XYZ 0 675 0]>>endobj
-190 0 obj<</Subtype/Link/Rect[174.2 63.4 248.2 76.4]/Border[0 0 0]/Dest[556 0 R/XYZ 0 617 0]>>endobj
-191 0 obj[150 0 R
+144 0 R
+145 0 R
+146 0 R
+147 0 R
+148 0 R
+149 0 R
+150 0 R
+151 0 R
152 0 R
+153 0 R
154 0 R
155 0 R
156 0 R
167 0 R
168 0 R
169 0 R
-170 0 R
-171 0 R
-172 0 R
+170 0 R]endobj
+172 0 obj<</Subtype/Link/Rect[144.0 721.0 213.4 734.0]/Border[0 0 0]/Dest[499 0 R/XYZ 0 558 0]>>endobj
+173 0 obj<</Subtype/Link/Rect[144.0 707.8 236.9 720.8]/Border[0 0 0]/Dest[499 0 R/XYZ 0 500 0]>>endobj
+174 0 obj<</Subtype/Link/Rect[144.0 694.6 235.0 707.6]/Border[0 0 0]/Dest[499 0 R/XYZ 0 428 0]>>endobj
+175 0 obj<</Subtype/Link/Rect[108.0 681.4 223.8 694.4]/Border[0 0 0]/Dest[499 0 R/XYZ 0 370 0]>>endobj
+176 0 obj<</Subtype/Link/Rect[144.0 668.2 195.3 681.2]/Border[0 0 0]/Dest[499 0 R/XYZ 0 217 0]>>endobj
+177 0 obj<</Subtype/Link/Rect[144.0 655.0 200.5 668.0]/Border[0 0 0]/Dest[501 0 R/XYZ 0 428 0]>>endobj
+178 0 obj<</Subtype/Link/Rect[108.0 641.8 201.5 654.8]/Border[0 0 0]/Dest[503 0 R/XYZ 0 734 0]>>endobj
+179 0 obj<</Subtype/Link/Rect[72.0 628.6 147.5 641.6]/Border[0 0 0]/Dest[505 0 R/XYZ 0 734 0]>>endobj
+180 0 obj<</Subtype/Link/Rect[108.0 615.4 180.4 628.4]/Border[0 0 0]/Dest[505 0 R/XYZ 0 696 0]>>endobj
+181 0 obj<</Subtype/Link/Rect[144.0 602.2 250.3 615.2]/Border[0 0 0]/Dest[505 0 R/XYZ 0 423 0]>>endobj
+182 0 obj<</Subtype/Link/Rect[144.0 589.0 280.0 602.0]/Border[0 0 0]/Dest[505 0 R/XYZ 0 259 0]>>endobj
+183 0 obj<</Subtype/Link/Rect[144.0 575.8 257.1 588.8]/Border[0 0 0]/Dest[507 0 R/XYZ 0 652 0]>>endobj
+184 0 obj<</Subtype/Link/Rect[108.0 562.6 137.3 575.6]/Border[0 0 0]/Dest[507 0 R/XYZ 0 223 0]>>endobj
+185 0 obj<</Subtype/Link/Rect[144.0 549.4 213.7 562.4]/Border[0 0 0]/Dest[509 0 R/XYZ 0 652 0]>>endobj
+186 0 obj<</Subtype/Link/Rect[72.0 536.2 185.0 549.2]/Border[0 0 0]/Dest[511 0 R/XYZ 0 734 0]>>endobj
+187 0 obj<</Subtype/Link/Rect[108.0 523.0 163.0 536.0]/Border[0 0 0]/Dest[511 0 R/XYZ 0 696 0]>>endobj
+188 0 obj<</Subtype/Link/Rect[108.0 509.8 157.5 522.8]/Border[0 0 0]/Dest[511 0 R/XYZ 0 595 0]>>endobj
+189 0 obj<</Subtype/Link/Rect[108.0 496.6 176.8 509.6]/Border[0 0 0]/Dest[511 0 R/XYZ 0 216 0]>>endobj
+190 0 obj<</Subtype/Link/Rect[108.0 483.4 155.7 496.4]/Border[0 0 0]/Dest[513 0 R/XYZ 0 692 0]>>endobj
+191 0 obj<</Subtype/Link/Rect[108.0 470.2 143.4 483.2]/Border[0 0 0]/Dest[513 0 R/XYZ 0 458 0]>>endobj
+192 0 obj<</Subtype/Link/Rect[108.0 457.0 163.3 470.0]/Border[0 0 0]/Dest[513 0 R/XYZ 0 145 0]>>endobj
+193 0 obj<</Subtype/Link/Rect[108.0 443.8 176.8 456.8]/Border[0 0 0]/Dest[515 0 R/XYZ 0 665 0]>>endobj
+194 0 obj<</Subtype/Link/Rect[108.0 430.6 168.2 443.6]/Border[0 0 0]/Dest[515 0 R/XYZ 0 537 0]>>endobj
+195 0 obj<</Subtype/Link/Rect[108.0 417.4 199.4 430.4]/Border[0 0 0]/Dest[515 0 R/XYZ 0 277 0]>>endobj
+196 0 obj<</Subtype/Link/Rect[72.0 404.2 193.9 417.2]/Border[0 0 0]/Dest[519 0 R/XYZ 0 734 0]>>endobj
+197 0 obj<</Subtype/Link/Rect[72.0 391.0 153.8 404.0]/Border[0 0 0]/Dest[523 0 R/XYZ 0 734 0]>>endobj
+198 0 obj<</Subtype/Link/Rect[108.0 377.8 163.0 390.8]/Border[0 0 0]/Dest[523 0 R/XYZ 0 696 0]>>endobj
+199 0 obj<</Subtype/Link/Rect[144.0 364.6 178.8 377.6]/Border[0 0 0]/Dest[525 0 R/XYZ 0 626 0]>>endobj
+200 0 obj<</Subtype/Link/Rect[144.0 351.4 176.4 364.4]/Border[0 0 0]/Dest[525 0 R/XYZ 0 516 0]>>endobj
+201 0 obj<</Subtype/Link/Rect[108.0 338.2 200.3 351.2]/Border[0 0 0]/Dest[525 0 R/XYZ 0 394 0]>>endobj
+202 0 obj<</Subtype/Link/Rect[144.0 325.0 169.1 338.0]/Border[0 0 0]/Dest[525 0 R/XYZ 0 360 0]>>endobj
+203 0 obj<</Subtype/Link/Rect[144.0 311.8 205.7 324.8]/Border[0 0 0]/Dest[527 0 R/XYZ 0 718 0]>>endobj
+204 0 obj<</Subtype/Link/Rect[144.0 298.6 189.2 311.6]/Border[0 0 0]/Dest[527 0 R/XYZ 0 235 0]>>endobj
+205 0 obj<</Subtype/Link/Rect[108.0 285.4 264.4 298.4]/Border[0 0 0]/Dest[547 0 R/XYZ 0 428 0]>>endobj
+206 0 obj<</Subtype/Link/Rect[144.0 272.2 206.6 285.2]/Border[0 0 0]/Dest[547 0 R/XYZ 0 366 0]>>endobj
+207 0 obj<</Subtype/Link/Rect[144.0 259.0 177.0 272.0]/Border[0 0 0]/Dest[549 0 R/XYZ 0 564 0]>>endobj
+208 0 obj<</Subtype/Link/Rect[144.0 245.8 161.7 258.8]/Border[0 0 0]/Dest[557 0 R/XYZ 0 518 0]>>endobj
+209 0 obj<</Subtype/Link/Rect[144.0 232.6 236.9 245.6]/Border[0 0 0]/Dest[557 0 R/XYZ 0 394 0]>>endobj
+210 0 obj<</Subtype/Link/Rect[144.0 219.4 274.5 232.4]/Border[0 0 0]/Dest[559 0 R/XYZ 0 522 0]>>endobj
+211 0 obj<</Subtype/Link/Rect[144.0 206.2 219.8 219.2]/Border[0 0 0]/Dest[561 0 R/XYZ 0 734 0]>>endobj
+212 0 obj<</Subtype/Link/Rect[144.0 193.0 243.9 206.0]/Border[0 0 0]/Dest[561 0 R/XYZ 0 433 0]>>endobj
+213 0 obj<</Subtype/Link/Rect[144.0 179.8 292.2 192.8]/Border[0 0 0]/Dest[563 0 R/XYZ 0 734 0]>>endobj
+214 0 obj<</Subtype/Link/Rect[144.0 166.6 219.2 179.6]/Border[0 0 0]/Dest[563 0 R/XYZ 0 501 0]>>endobj
+215 0 obj<</Subtype/Link/Rect[144.0 153.4 190.1 166.4]/Border[0 0 0]/Dest[563 0 R/XYZ 0 217 0]>>endobj
+216 0 obj<</Subtype/Link/Rect[144.0 140.2 223.4 153.2]/Border[0 0 0]/Dest[565 0 R/XYZ 0 639 0]>>endobj
+217 0 obj<</Subtype/Link/Rect[144.0 127.0 230.8 140.0]/Border[0 0 0]/Dest[565 0 R/XYZ 0 154 0]>>endobj
+218 0 obj<</Subtype/Link/Rect[108.0 113.8 281.6 126.8]/Border[0 0 0]/Dest[567 0 R/XYZ 0 281 0]>>endobj
+219 0 obj<</Subtype/Link/Rect[144.0 100.6 247.9 113.6]/Border[0 0 0]/Dest[569 0 R/XYZ 0 533 0]>>endobj
+220 0 obj<</Subtype/Link/Rect[144.0 87.4 228.9 100.4]/Border[0 0 0]/Dest[569 0 R/XYZ 0 141 0]>>endobj
+221 0 obj<</Subtype/Link/Rect[144.0 74.2 256.1 87.2]/Border[0 0 0]/Dest[571 0 R/XYZ 0 424 0]>>endobj
+222 0 obj<</Subtype/Link/Rect[144.0 61.0 217.3 74.0]/Border[0 0 0]/Dest[573 0 R/XYZ 0 734 0]>>endobj
+223 0 obj[172 0 R
173 0 R
174 0 R
175 0 R
187 0 R
188 0 R
189 0 R
-190 0 R]endobj
-192 0 obj<</Subtype/Link/Rect[174.2 721.0 246.4 734.0]/Border[0 0 0]/Dest[556 0 R/XYZ 0 558 0]>>endobj
-193 0 obj<</Subtype/Link/Rect[174.2 707.8 269.9 720.8]/Border[0 0 0]/Dest[556 0 R/XYZ 0 500 0]>>endobj
-194 0 obj<</Subtype/Link/Rect[174.2 694.6 268.0 707.6]/Border[0 0 0]/Dest[556 0 R/XYZ 0 428 0]>>endobj
-195 0 obj<</Subtype/Link/Rect[124.5 681.4 243.0 694.4]/Border[0 0 0]/Dest[556 0 R/XYZ 0 370 0]>>endobj
-196 0 obj<</Subtype/Link/Rect[168.8 668.2 222.8 681.2]/Border[0 0 0]/Dest[556 0 R/XYZ 0 220 0]>>endobj
-197 0 obj<</Subtype/Link/Rect[168.8 655.0 228.0 668.0]/Border[0 0 0]/Dest[558 0 R/XYZ 0 441 0]>>endobj
-198 0 obj<</Subtype/Link/Rect[124.5 641.8 220.7 654.8]/Border[0 0 0]/Dest[560 0 R/XYZ 0 734 0]>>endobj
-199 0 obj<</Subtype/Link/Rect[80.2 628.6 158.5 641.6]/Border[0 0 0]/Dest[562 0 R/XYZ 0 734 0]>>endobj
-200 0 obj<</Subtype/Link/Rect[124.5 615.4 199.7 628.4]/Border[0 0 0]/Dest[562 0 R/XYZ 0 696 0]>>endobj
-201 0 obj<</Subtype/Link/Rect[168.8 602.2 277.8 615.2]/Border[0 0 0]/Dest[562 0 R/XYZ 0 423 0]>>endobj
-202 0 obj<</Subtype/Link/Rect[168.8 589.0 307.5 602.0]/Border[0 0 0]/Dest[562 0 R/XYZ 0 259 0]>>endobj
-203 0 obj<</Subtype/Link/Rect[168.8 575.8 284.6 588.8]/Border[0 0 0]/Dest[564 0 R/XYZ 0 652 0]>>endobj
-204 0 obj<</Subtype/Link/Rect[124.5 562.6 156.6 575.6]/Border[0 0 0]/Dest[564 0 R/XYZ 0 240 0]>>endobj
-205 0 obj<</Subtype/Link/Rect[168.8 549.4 241.2 562.4]/Border[0 0 0]/Dest[566 0 R/XYZ 0 665 0]>>endobj
-206 0 obj<</Subtype/Link/Rect[80.2 536.2 196.0 549.2]/Border[0 0 0]/Dest[568 0 R/XYZ 0 734 0]>>endobj
-207 0 obj<</Subtype/Link/Rect[124.5 523.0 182.2 536.0]/Border[0 0 0]/Dest[568 0 R/XYZ 0 696 0]>>endobj
-208 0 obj<</Subtype/Link/Rect[124.5 509.8 176.7 522.8]/Border[0 0 0]/Dest[568 0 R/XYZ 0 595 0]>>endobj
-209 0 obj<</Subtype/Link/Rect[124.5 496.6 196.0 509.6]/Border[0 0 0]/Dest[568 0 R/XYZ 0 216 0]>>endobj
-210 0 obj<</Subtype/Link/Rect[124.5 483.4 174.9 496.4]/Border[0 0 0]/Dest[570 0 R/XYZ 0 692 0]>>endobj
-211 0 obj<</Subtype/Link/Rect[124.5 470.2 162.7 483.2]/Border[0 0 0]/Dest[570 0 R/XYZ 0 458 0]>>endobj
-212 0 obj<</Subtype/Link/Rect[124.5 457.0 182.5 470.0]/Border[0 0 0]/Dest[572 0 R/XYZ 0 734 0]>>endobj
-213 0 obj<</Subtype/Link/Rect[124.5 443.8 196.0 456.8]/Border[0 0 0]/Dest[572 0 R/XYZ 0 566 0]>>endobj
-214 0 obj<</Subtype/Link/Rect[124.5 430.6 187.4 443.6]/Border[0 0 0]/Dest[572 0 R/XYZ 0 438 0]>>endobj
-215 0 obj<</Subtype/Link/Rect[124.5 417.4 218.6 430.4]/Border[0 0 0]/Dest[572 0 R/XYZ 0 178 0]>>endobj
-216 0 obj<</Subtype/Link/Rect[80.2 404.2 204.9 417.2]/Border[0 0 0]/Dest[576 0 R/XYZ 0 734 0]>>endobj
-217 0 obj<</Subtype/Link/Rect[80.2 391.0 164.8 404.0]/Border[0 0 0]/Dest[580 0 R/XYZ 0 734 0]>>endobj
-218 0 obj<</Subtype/Link/Rect[124.5 377.8 182.2 390.8]/Border[0 0 0]/Dest[580 0 R/XYZ 0 696 0]>>endobj
-219 0 obj<</Subtype/Link/Rect[168.8 364.6 206.3 377.6]/Border[0 0 0]/Dest[582 0 R/XYZ 0 626 0]>>endobj
-220 0 obj<</Subtype/Link/Rect[168.8 351.4 203.9 364.4]/Border[0 0 0]/Dest[582 0 R/XYZ 0 516 0]>>endobj
-221 0 obj<</Subtype/Link/Rect[124.5 338.2 219.5 351.2]/Border[0 0 0]/Dest[582 0 R/XYZ 0 394 0]>>endobj
-222 0 obj<</Subtype/Link/Rect[168.8 325.0 196.6 338.0]/Border[0 0 0]/Dest[582 0 R/XYZ 0 360 0]>>endobj
-223 0 obj<</Subtype/Link/Rect[168.8 311.8 233.2 324.8]/Border[0 0 0]/Dest[584 0 R/XYZ 0 718 0]>>endobj
-224 0 obj<</Subtype/Link/Rect[168.8 298.6 216.7 311.6]/Border[0 0 0]/Dest[584 0 R/XYZ 0 235 0]>>endobj
-225 0 obj<</Subtype/Link/Rect[124.5 285.4 283.7 298.4]/Border[0 0 0]/Dest[604 0 R/XYZ 0 428 0]>>endobj
-226 0 obj<</Subtype/Link/Rect[168.8 272.2 234.1 285.2]/Border[0 0 0]/Dest[604 0 R/XYZ 0 366 0]>>endobj
-227 0 obj<</Subtype/Link/Rect[168.8 259.0 204.5 272.0]/Border[0 0 0]/Dest[606 0 R/XYZ 0 567 0]>>endobj
-228 0 obj<</Subtype/Link/Rect[168.8 245.8 189.2 258.8]/Border[0 0 0]/Dest[614 0 R/XYZ 0 531 0]>>endobj
-229 0 obj<</Subtype/Link/Rect[168.8 232.6 264.4 245.6]/Border[0 0 0]/Dest[614 0 R/XYZ 0 407 0]>>endobj
-230 0 obj<</Subtype/Link/Rect[168.8 219.4 302.0 232.4]/Border[0 0 0]/Dest[616 0 R/XYZ 0 548 0]>>endobj
-231 0 obj<</Subtype/Link/Rect[168.8 206.2 247.3 219.2]/Border[0 0 0]/Dest[616 0 R/XYZ 0 140 0]>>endobj
-232 0 obj<</Subtype/Link/Rect[168.8 193.0 271.4 206.0]/Border[0 0 0]/Dest[618 0 R/XYZ 0 492 0]>>endobj
-233 0 obj<</Subtype/Link/Rect[168.8 179.8 319.7 192.8]/Border[0 0 0]/Dest[618 0 R/XYZ 0 145 0]>>endobj
-234 0 obj<</Subtype/Link/Rect[168.8 166.6 246.7 179.6]/Border[0 0 0]/Dest[620 0 R/XYZ 0 586 0]>>endobj
-235 0 obj<</Subtype/Link/Rect[174.2 153.4 223.1 166.4]/Border[0 0 0]/Dest[620 0 R/XYZ 0 301 0]>>endobj
-236 0 obj<</Subtype/Link/Rect[174.2 140.2 256.4 153.2]/Border[0 0 0]/Dest[622 0 R/XYZ 0 734 0]>>endobj
-237 0 obj<</Subtype/Link/Rect[174.2 127.0 263.8 140.0]/Border[0 0 0]/Dest[622 0 R/XYZ 0 249 0]>>endobj
-238 0 obj<</Subtype/Link/Rect[124.5 113.8 300.8 126.8]/Border[0 0 0]/Dest[624 0 R/XYZ 0 413 0]>>endobj
-239 0 obj<</Subtype/Link/Rect[168.8 100.6 275.4 113.6]/Border[0 0 0]/Dest[626 0 R/XYZ 0 665 0]>>endobj
-240 0 obj<</Subtype/Link/Rect[168.8 87.4 256.4 100.4]/Border[0 0 0]/Dest[626 0 R/XYZ 0 273 0]>>endobj
-241 0 obj<</Subtype/Link/Rect[168.8 74.2 283.6 87.2]/Border[0 0 0]/Dest[628 0 R/XYZ 0 531 0]>>endobj
-242 0 obj<</Subtype/Link/Rect[168.8 61.0 244.8 74.0]/Border[0 0 0]/Dest[628 0 R/XYZ 0 165 0]>>endobj
-243 0 obj[192 0 R
+190 0 R
+191 0 R
+192 0 R
193 0 R
194 0 R
195 0 R
219 0 R
220 0 R
221 0 R
-222 0 R
-223 0 R
-224 0 R
+222 0 R]endobj
+224 0 obj<</Subtype/Link/Rect[144.0 721.0 218.0 734.0]/Border[0 0 0]/Dest[573 0 R/XYZ 0 291 0]>>endobj
+225 0 obj<</Subtype/Link/Rect[108.0 707.8 242.5 720.8]/Border[0 0 0]/Dest[575 0 R/XYZ 0 705 0]>>endobj
+226 0 obj<</Subtype/Link/Rect[144.0 694.6 211.8 707.6]/Border[0 0 0]/Dest[575 0 R/XYZ 0 630 0]>>endobj
+227 0 obj<</Subtype/Link/Rect[144.0 681.4 196.2 694.4]/Border[0 0 0]/Dest[577 0 R/XYZ 0 734 0]>>endobj
+228 0 obj<</Subtype/Link/Rect[108.0 668.2 245.2 681.2]/Border[0 0 0]/Dest[579 0 R/XYZ 0 705 0]>>endobj
+229 0 obj<</Subtype/Link/Rect[144.0 655.0 216.1 668.0]/Border[0 0 0]/Dest[579 0 R/XYZ 0 577 0]>>endobj
+230 0 obj<</Subtype/Link/Rect[144.0 641.8 229.8 654.8]/Border[0 0 0]/Dest[581 0 R/XYZ 0 734 0]>>endobj
+231 0 obj<</Subtype/Link/Rect[108.0 628.6 326.5 641.6]/Border[0 0 0]/Dest[581 0 R/XYZ 0 433 0]>>endobj
+232 0 obj<</Subtype/Link/Rect[144.0 615.4 192.9 628.4]/Border[0 0 0]/Dest[581 0 R/XYZ 0 400 0]>>endobj
+233 0 obj<</Subtype/Link/Rect[144.0 602.2 182.5 615.2]/Border[0 0 0]/Dest[583 0 R/XYZ 0 734 0]>>endobj
+234 0 obj<</Subtype/Link/Rect[144.0 589.0 190.4 602.0]/Border[0 0 0]/Dest[583 0 R/XYZ 0 385 0]>>endobj
+235 0 obj<</Subtype/Link/Rect[108.0 575.8 174.0 588.8]/Border[0 0 0]/Dest[583 0 R/XYZ 0 128 0]>>endobj
+236 0 obj<</Subtype/Link/Rect[144.0 562.6 224.4 575.6]/Border[0 0 0]/Dest[585 0 R/XYZ 0 633 0]>>endobj
+237 0 obj<</Subtype/Link/Rect[144.0 549.4 226.9 562.4]/Border[0 0 0]/Dest[587 0 R/XYZ 0 665 0]>>endobj
+238 0 obj<</Subtype/Link/Rect[72.0 536.2 183.8 549.2]/Border[0 0 0]/Dest[591 0 R/XYZ 0 734 0]>>endobj
+239 0 obj<</Subtype/Link/Rect[108.0 523.0 145.3 536.0]/Border[0 0 0]/Dest[591 0 R/XYZ 0 696 0]>>endobj
+240 0 obj<</Subtype/Link/Rect[108.0 509.8 283.7 522.8]/Border[0 0 0]/Dest[591 0 R/XYZ 0 621 0]>>endobj
+241 0 obj<</Subtype/Link/Rect[108.0 496.6 192.2 509.6]/Border[0 0 0]/Dest[591 0 R/XYZ 0 361 0]>>endobj
+242 0 obj<</Subtype/Link/Rect[108.0 483.4 336.0 496.4]/Border[0 0 0]/Dest[595 0 R/XYZ 0 692 0]>>endobj
+243 0 obj<</Subtype/Link/Rect[108.0 470.2 281.6 483.2]/Border[0 0 0]/Dest[595 0 R/XYZ 0 630 0]>>endobj
+244 0 obj<</Subtype/Link/Rect[72.0 457.0 172.8 470.0]/Border[0 0 0]/Dest[601 0 R/XYZ 0 734 0]>>endobj
+245 0 obj<</Subtype/Link/Rect[108.0 443.8 174.3 456.8]/Border[0 0 0]/Dest[601 0 R/XYZ 0 696 0]>>endobj
+246 0 obj[224 0 R
225 0 R
226 0 R
227 0 R
239 0 R
240 0 R
241 0 R
-242 0 R]endobj
-244 0 obj<</Subtype/Link/Rect[168.8 721.0 245.5 734.0]/Border[0 0 0]/Dest[630 0 R/XYZ 0 353 0]>>endobj
-245 0 obj<</Subtype/Link/Rect[124.5 707.8 261.7 720.8]/Border[0 0 0]/Dest[632 0 R/XYZ 0 734 0]>>endobj
-246 0 obj<</Subtype/Link/Rect[168.8 694.6 239.3 707.6]/Border[0 0 0]/Dest[632 0 R/XYZ 0 658 0]>>endobj
-247 0 obj<</Subtype/Link/Rect[168.8 681.4 223.8 694.4]/Border[0 0 0]/Dest[634 0 R/XYZ 0 734 0]>>endobj
-248 0 obj<</Subtype/Link/Rect[124.5 668.2 264.4 681.2]/Border[0 0 0]/Dest[636 0 R/XYZ 0 705 0]>>endobj
-249 0 obj<</Subtype/Link/Rect[168.8 655.0 243.6 668.0]/Border[0 0 0]/Dest[636 0 R/XYZ 0 577 0]>>endobj
-250 0 obj<</Subtype/Link/Rect[168.8 641.8 257.3 654.8]/Border[0 0 0]/Dest[638 0 R/XYZ 0 734 0]>>endobj
-251 0 obj<</Subtype/Link/Rect[124.5 628.6 345.7 641.6]/Border[0 0 0]/Dest[638 0 R/XYZ 0 433 0]>>endobj
-252 0 obj<</Subtype/Link/Rect[168.8 615.4 220.4 628.4]/Border[0 0 0]/Dest[638 0 R/XYZ 0 400 0]>>endobj
-253 0 obj<</Subtype/Link/Rect[168.8 602.2 210.0 615.2]/Border[0 0 0]/Dest[640 0 R/XYZ 0 734 0]>>endobj
-254 0 obj<</Subtype/Link/Rect[168.8 589.0 217.9 602.0]/Border[0 0 0]/Dest[640 0 R/XYZ 0 385 0]>>endobj
-255 0 obj<</Subtype/Link/Rect[124.5 575.8 193.2 588.8]/Border[0 0 0]/Dest[640 0 R/XYZ 0 128 0]>>endobj
-256 0 obj<</Subtype/Link/Rect[168.8 562.6 251.9 575.6]/Border[0 0 0]/Dest[642 0 R/XYZ 0 633 0]>>endobj
-257 0 obj<</Subtype/Link/Rect[168.8 549.4 254.4 562.4]/Border[0 0 0]/Dest[644 0 R/XYZ 0 665 0]>>endobj
-258 0 obj<</Subtype/Link/Rect[85.8 536.2 200.3 549.2]/Border[0 0 0]/Dest[648 0 R/XYZ 0 734 0]>>endobj
-259 0 obj<</Subtype/Link/Rect[130.0 523.0 170.0 536.0]/Border[0 0 0]/Dest[648 0 R/XYZ 0 696 0]>>endobj
-260 0 obj<</Subtype/Link/Rect[130.0 509.8 308.4 522.8]/Border[0 0 0]/Dest[648 0 R/XYZ 0 621 0]>>endobj
-261 0 obj<</Subtype/Link/Rect[130.0 496.6 217.0 509.6]/Border[0 0 0]/Dest[648 0 R/XYZ 0 361 0]>>endobj
-262 0 obj<</Subtype/Link/Rect[130.0 483.4 360.7 496.4]/Border[0 0 0]/Dest[652 0 R/XYZ 0 692 0]>>endobj
-263 0 obj<</Subtype/Link/Rect[130.0 470.2 306.3 483.2]/Border[0 0 0]/Dest[652 0 R/XYZ 0 630 0]>>endobj
-264 0 obj<</Subtype/Link/Rect[85.8 457.0 189.3 470.0]/Border[0 0 0]/Dest[658 0 R/XYZ 0 734 0]>>endobj
-265 0 obj<</Subtype/Link/Rect[130.0 443.8 199.0 456.8]/Border[0 0 0]/Dest[658 0 R/XYZ 0 696 0]>>endobj
-266 0 obj<</Subtype/Link/Rect[85.8 430.6 211.0 443.6]/Border[0 0 0]/Dest[660 0 R/XYZ 0 734 0]>>endobj
-267 0 obj<</Subtype/Link/Rect[130.0 417.4 245.6 430.4]/Border[0 0 0]/Dest[660 0 R/XYZ 0 696 0]>>endobj
-268 0 obj<</Subtype/Link/Rect[130.0 404.2 234.2 417.2]/Border[0 0 0]/Dest[662 0 R/XYZ 0 639 0]>>endobj
-269 0 obj<</Subtype/Link/Rect[130.0 391.0 289.8 404.0]/Border[0 0 0]/Dest[662 0 R/XYZ 0 498 0]>>endobj
-270 0 obj<</Subtype/Link/Rect[130.0 377.8 162.7 390.8]/Border[0 0 0]/Dest[662 0 R/XYZ 0 198 0]>>endobj
-271 0 obj<</Subtype/Link/Rect[174.2 364.6 228.3 377.6]/Border[0 0 0]/Dest[662 0 R/XYZ 0 165 0]>>endobj
-272 0 obj<</Subtype/Link/Rect[174.2 351.4 240.8 364.4]/Border[0 0 0]/Dest[664 0 R/XYZ 0 734 0]>>endobj
-273 0 obj<</Subtype/Link/Rect[174.2 338.2 239.0 351.2]/Border[0 0 0]/Dest[664 0 R/XYZ 0 596 0]>>endobj
-274 0 obj<</Subtype/Link/Rect[130.0 325.0 194.8 338.0]/Border[0 0 0]/Dest[664 0 R/XYZ 0 485 0]>>endobj
-275 0 obj<</Subtype/Link/Rect[174.2 311.8 305.9 324.8]/Border[0 0 0]/Dest[664 0 R/XYZ 0 451 0]>>endobj
-276 0 obj<</Subtype/Link/Rect[174.2 298.6 215.5 311.6]/Border[0 0 0]/Dest[664 0 R/XYZ 0 366 0]>>endobj
-277 0 obj<</Subtype/Link/Rect[130.0 285.4 229.6 298.4]/Border[0 0 0]/Dest[664 0 R/XYZ 0 229 0]>>endobj
-278 0 obj<</Subtype/Link/Rect[130.0 272.2 165.1 285.2]/Border[0 0 0]/Dest[666 0 R/XYZ 0 489 0]>>endobj
-279 0 obj<</Subtype/Link/Rect[85.8 259.0 259.0 272.0]/Border[0 0 0]/Dest[668 0 R/XYZ 0 734 0]>>endobj
-280 0 obj<</Subtype/Link/Rect[130.0 245.8 187.8 258.8]/Border[0 0 0]/Dest[668 0 R/XYZ 0 696 0]>>endobj
-281 0 obj<</Subtype/Link/Rect[130.0 232.6 215.6 245.6]/Border[0 0 0]/Dest[668 0 R/XYZ 0 568 0]>>endobj
-282 0 obj<</Subtype/Link/Rect[130.0 219.4 218.9 221.4]/Border[0 0 0]/Dest[670 0 R/XYZ 0 718 0]>>endobj
-283 0 obj[244 0 R
-245 0 R
-246 0 R
-247 0 R
-248 0 R
-249 0 R
-250 0 R
-251 0 R
-252 0 R
-253 0 R
-254 0 R
+242 0 R
+243 0 R
+244 0 R
+245 0 R]endobj
+247 0 obj<</S/URI/URI(http://lxr.linux.no/source/Documentation/CodingStyle)>>endobj
+248 0 obj<</Subtype/Link/Rect[72.0 499.0 310.3 512.0]/Border[0 0 0]/A 247 0 R>>endobj
+249 0 obj<</S/URI/URI(http://www.fsf.org/prep/standards_toc.html)>>endobj
+250 0 obj<</Subtype/Link/Rect[72.0 472.6 263.0 485.6]/Border[0 0 0]/A 249 0 R>>endobj
+251 0 obj[248 0 R
+250 0 R]endobj
+252 0 obj<</S/URI/URI(http://mailhost.cb1.com/~lkcl/cifsntdomain.txt)>>endobj
+253 0 obj<</Subtype/Link/Rect[226.0 637.0 433.6 650.0]/Border[0 0 0]/A 252 0 R>>endobj
+254 0 obj<</S/URI/URI(http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708;L=ntbugtraq;O=A;P=2935)>>endobj
+255 0 obj<</Subtype/Link/Rect[72.0 386.2 451.3 399.2]/Border[0 0 0]/A 254 0 R>>endobj
+256 0 obj<</S/URI/URI(http://mailhost.cb1.com/~lkcl/crypt.html)>>endobj
+257 0 obj<</Subtype/Link/Rect[72.0 359.8 250.6 372.8]/Border[0 0 0]/A 256 0 R>>endobj
+258 0 obj<</S/URI/URI(mailto:linus@incolumitas.se)>>endobj
+259 0 obj<</Subtype/Link/Rect[244.7 333.4 317.4 346.4]/Border[0 0 0]/A 258 0 R>>endobj
+260 0 obj<</S/URI/URI(http://samba.org/cgi-bin/mfs/01/digest/1997/97aug/0391.html)>>endobj
+261 0 obj<</Subtype/Link/Rect[72.0 307.0 346.5 320.0]/Border[0 0 0]/A 260 0 R>>endobj
+262 0 obj<</S/URI/URI(http://mailhost.cb1.com/~lkcl/crypt.txt)>>endobj
+263 0 obj<</Subtype/Link/Rect[72.0 280.6 242.0 293.6]/Border[0 0 0]/A 262 0 R>>endobj
+264 0 obj[253 0 R
255 0 R
-256 0 R
257 0 R
-258 0 R
259 0 R
-260 0 R
261 0 R
-262 0 R
-263 0 R
-264 0 R
-265 0 R
-266 0 R
-267 0 R
-268 0 R
-269 0 R
-270 0 R
-271 0 R
-272 0 R
-273 0 R
-274 0 R
-275 0 R
-276 0 R
-277 0 R
-278 0 R
-279 0 R
-280 0 R
-281 0 R
-282 0 R]endobj
-284 0 obj<</S/URI/URI(http://lxr.linux.no/source/Documentation/CodingStyle)>>endobj
-285 0 obj<</Subtype/Link/Rect[72.0 499.0 310.3 512.0]/Border[0 0 0]/A 284 0 R>>endobj
-286 0 obj<</S/URI/URI(http://www.fsf.org/prep/standards_toc.html)>>endobj
-287 0 obj<</Subtype/Link/Rect[72.0 472.6 263.0 485.6]/Border[0 0 0]/A 286 0 R>>endobj
-288 0 obj[285 0 R
-287 0 R]endobj
-289 0 obj<</S/URI/URI(http://mailhost.cb1.com/~lkcl/cifsntdomain.txt)>>endobj
-290 0 obj<</Subtype/Link/Rect[226.0 637.0 433.6 650.0]/Border[0 0 0]/A 289 0 R>>endobj
-291 0 obj<</S/URI/URI(http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708;L=ntbugtraq;O=A;P=2935)>>endobj
-292 0 obj<</Subtype/Link/Rect[72.0 386.2 451.3 399.2]/Border[0 0 0]/A 291 0 R>>endobj
-293 0 obj<</S/URI/URI(http://mailhost.cb1.com/~lkcl/crypt.html)>>endobj
-294 0 obj<</Subtype/Link/Rect[72.0 359.8 250.6 372.8]/Border[0 0 0]/A 293 0 R>>endobj
-295 0 obj<</S/URI/URI(mailto:linus@incolumitas.se)>>endobj
-296 0 obj<</Subtype/Link/Rect[244.7 333.4 317.4 346.4]/Border[0 0 0]/A 295 0 R>>endobj
-297 0 obj<</S/URI/URI(http://samba.org/cgi-bin/mfs/01/digest/1997/97aug/0391.html)>>endobj
-298 0 obj<</Subtype/Link/Rect[72.0 307.0 346.5 320.0]/Border[0 0 0]/A 297 0 R>>endobj
-299 0 obj<</S/URI/URI(http://mailhost.cb1.com/~lkcl/crypt.txt)>>endobj
-300 0 obj<</Subtype/Link/Rect[72.0 280.6 242.0 293.6]/Border[0 0 0]/A 299 0 R>>endobj
-301 0 obj[290 0 R
-292 0 R
-294 0 R
-296 0 R
-298 0 R
-300 0 R]endobj
-302 0 obj<</Dests 303 0 R>>endobj
-303 0 obj<</Kids[304 0 R]>>endobj
-304 0 obj<</Limits[(aen1008)(wins)]/Names[(aen1008)305 0 R(aen1019)306 0 R(aen103)307 0 R(aen1040)308 0 R(aen1053)309 0 R(aen1100)310 0 R(aen1127)311 0 R(aen1138)312 0 R(aen1177)313 0 R(aen1208)314 0 R(aen128)315 0 R(aen1365)316 0 R(aen1388)317 0 R(aen1399)318 0 R(aen1445)319 0 R(aen151)320 0 R(aen1571)321 0 R(aen1574)322 0 R(aen1588)323 0 R(aen159)324 0 R(aen1649)325 0 R(aen1688)326 0 R(aen1693)327 0 R(aen1704)328 0 R(aen1744)329 0 R(aen1755)330 0 R(aen179)331 0 R(aen1799)332 0 R(aen181)333 0 R(aen1819)334 0 R(aen184)335 0 R(aen1842)336 0 R(aen1854)337 0 R(aen188)338 0 R(aen1898)339 0 R(aen1939)340 0 R(aen1943)341 0 R(aen1962)342 0 R(aen1973)343 0 R(aen1977)344 0 R(aen1988)345 0 R(aen2001)346 0 R(aen2003)347 0 R(aen2006)348 0 R(aen2025)349 0 R(aen2027)350 0 R(aen2030)351 0 R(aen2054)352 0 R(aen2056)353 0 R(aen2063)354 0 R(aen2071)355 0 R(aen2075)356 0 R(aen2102)357 0 R(aen2130)358 0 R(aen2134)359 0 R(aen2165)360 0 R(aen2193)361 0 R(aen2232)362 0 R(aen2240)363 0 R(aen2259)364 0 R(aen2267)365 0 R(aen2275)366 0 R(aen2294)367 0 R(aen2306)368 0 R(aen2316)369 0 R(aen2327)370 0 R(aen2335)371 0 R(aen2339)372 0 R(aen2346)373 0 R(aen2359)374 0 R(aen2363)375 0 R(aen2370)376 0 R(aen2382)377 0 R(aen2386)378 0 R(aen2390)379 0 R(aen24)380 0 R(aen2425)381 0 R(aen2460)382 0 R(aen2468)383 0 R(aen2519)384 0 R(aen2550)385 0 R(aen2562)386 0 R(aen2568)387 0 R(aen2603)388 0 R(aen2623)389 0 R(aen2627)390 0 R(aen2638)391 0 R(aen2654)392 0 R(aen2656)393 0 R(aen2699)394 0 R(aen2709)395 0 R(aen2716)396 0 R(aen2724)397 0 R(aen2726)398 0 R(aen2761)399 0 R(aen2812)400 0 R(aen2815)401 0 R(aen2829)402 0 R(aen284)403 0 R(aen2847)404 0 R(aen288)405 0 R(aen2896)406 0 R(aen2899)407 0 R(aen2925)408 0 R(aen2959)409 0 R(aen2962)410 0 R(aen3033)411 0 R(aen3054)412 0 R(aen3071)413 0 R(aen3075)414 0 R(aen3086)415 0 R(aen3088)416 0 R(aen3091)417 0 R(aen3095)418 0 R(aen3098)419 0 R(aen3100)420 0 R(aen3103)421 0 R(aen3107)422 0 R(aen3121)423 0 R(aen3147)424 0 R(aen3151)425 0 R(aen3162)426 0 R(aen317)427 0 R(aen320)428 0 R(aen323)429 0 R(aen326)430 0 R(aen329)431 0 R(aen332)432 0 R(aen335)433 0 R(aen338)434 0 R(aen341)435 0 R(aen344)436 0 R(aen347)437 0 R(aen35)438 0 R(aen350)439 0 R(aen353)440 0 R(aen356)441 0 R(aen359)442 0 R(aen362)443 0 R(aen365)444 0 R(aen371)445 0 R(aen39)446 0 R(aen4)447 0 R(aen406)448 0 R(aen420)449 0 R(aen451)450 0 R(aen472)451 0 R(aen484)452 0 R(aen495)453 0 R(aen515)454 0 R(aen530)455 0 R(aen54)456 0 R(aen540)457 0 R(aen544)458 0 R(aen552)459 0 R(aen557)460 0 R(aen563)461 0 R(aen571)462 0 R(aen575)463 0 R(aen579)464 0 R(aen584)465 0 R(aen65)466 0 R(aen652)467 0 R(aen688)468 0 R(aen695)469 0 R(aen70)470 0 R(aen702)471 0 R(aen704)472 0 R(aen717)473 0 R(aen719)474 0 R(aen739)475 0 R(aen775)476 0 R(aen777)477 0 R(aen780)478 0 R(aen783)479 0 R(aen786)480 0 R(aen789)481 0 R(aen8)482 0 R(aen814)483 0 R(aen817)484 0 R(aen832)485 0 R(aen843)486 0 R(aen850)487 0 R(aen86)488 0 R(aen861)489 0 R(aen884)490 0 R(aen911)491 0 R(aen918)492 0 R(aen92)493 0 R(aen941)494 0 R(aen960)495 0 R(aen987)496 0 R(architecture)497 0 R(codingsuggestions)498 0 R(debug)499 0 R(internals)500 0 R(netbios)501 0 R(ntdomain)502 0 R(parsing)503 0 R(printing)504 0 R(pwencrypt)505 0 R(sam)506 0 R(samba-developers-guide)507 0 R(samba-developers-guide.html)508 0 R(smbpasswdfileformat)509 0 R(tracing)510 0 R(unix-smb)511 0 R(wins)512 0 R]>>endobj
-305 0 obj<</D[592 0 R/XYZ 0 734 0]>>endobj
-306 0 obj<</D[592 0 R/XYZ 0 639 0]>>endobj
-307 0 obj<</D[540 0 R/XYZ 0 696 0]>>endobj
-308 0 obj<</D[592 0 R/XYZ 0 439 0]>>endobj
-309 0 obj<</D[592 0 R/XYZ 0 292 0]>>endobj
-310 0 obj<</D[594 0 R/XYZ 0 626 0]>>endobj
-311 0 obj<</D[594 0 R/XYZ 0 345 0]>>endobj
-312 0 obj<</D[594 0 R/XYZ 0 251 0]>>endobj
-313 0 obj<</D[596 0 R/XYZ 0 639 0]>>endobj
-314 0 obj<</D[596 0 R/XYZ 0 413 0]>>endobj
-315 0 obj<</D[542 0 R/XYZ 0 734 0]>>endobj
-316 0 obj<</D[600 0 R/XYZ 0 679 0]>>endobj
-317 0 obj<</D[600 0 R/XYZ 0 438 0]>>endobj
-318 0 obj<</D[600 0 R/XYZ 0 344 0]>>endobj
-319 0 obj<</D[602 0 R/XYZ 0 639 0]>>endobj
-320 0 obj<</D[544 0 R/XYZ 0 734 0]>>endobj
-321 0 obj<</D[604 0 R/XYZ 0 428 0]>>endobj
-322 0 obj<</D[604 0 R/XYZ 0 366 0]>>endobj
-323 0 obj<</D[606 0 R/XYZ 0 567 0]>>endobj
-324 0 obj<</D[544 0 R/XYZ 0 514 0]>>endobj
-325 0 obj<</D[610 0 R/XYZ 0 734 0]>>endobj
-326 0 obj<</D[610 0 R/XYZ 0 467 0]>>endobj
-327 0 obj<</D[610 0 R/XYZ 0 378 0]>>endobj
-328 0 obj<</D[610 0 R/XYZ 0 283 0]>>endobj
-329 0 obj<</D[612 0 R/XYZ 0 639 0]>>endobj
-330 0 obj<</D[612 0 R/XYZ 0 545 0]>>endobj
-331 0 obj<</D[546 0 R/XYZ 0 734 0]>>endobj
-332 0 obj<</D[612 0 R/XYZ 0 213 0]>>endobj
-333 0 obj<</D[546 0 R/XYZ 0 700 0]>>endobj
-334 0 obj<</D[614 0 R/XYZ 0 705 0]>>endobj
-335 0 obj<</D[546 0 R/XYZ 0 602 0]>>endobj
-336 0 obj<</D[614 0 R/XYZ 0 531 0]>>endobj
-337 0 obj<</D[614 0 R/XYZ 0 407 0]>>endobj
-338 0 obj<</D[546 0 R/XYZ 0 491 0]>>endobj
-339 0 obj<</D[616 0 R/XYZ 0 548 0]>>endobj
-340 0 obj<</D[616 0 R/XYZ 0 140 0]>>endobj
-341 0 obj<</D[618 0 R/XYZ 0 734 0]>>endobj
-342 0 obj<</D[618 0 R/XYZ 0 586 0]>>endobj
-343 0 obj<</D[618 0 R/XYZ 0 492 0]>>endobj
-344 0 obj<</D[618 0 R/XYZ 0 433 0]>>endobj
-345 0 obj<</D[618 0 R/XYZ 0 339 0]>>endobj
-346 0 obj<</D[618 0 R/XYZ 0 145 0]>>endobj
-347 0 obj<</D[618 0 R/XYZ 0 115 0]>>endobj
-348 0 obj<</D[620 0 R/XYZ 0 734 0]>>endobj
-349 0 obj<</D[620 0 R/XYZ 0 586 0]>>endobj
-350 0 obj<</D[620 0 R/XYZ 0 556 0]>>endobj
-351 0 obj<</D[620 0 R/XYZ 0 501 0]>>endobj
-352 0 obj<</D[620 0 R/XYZ 0 301 0]>>endobj
-353 0 obj<</D[620 0 R/XYZ 0 271 0]>>endobj
-354 0 obj<</D[620 0 R/XYZ 0 203 0]>>endobj
-355 0 obj<</D[622 0 R/XYZ 0 734 0]>>endobj
-356 0 obj<</D[622 0 R/XYZ 0 675 0]>>endobj
-357 0 obj<</D[622 0 R/XYZ 0 475 0]>>endobj
-358 0 obj<</D[622 0 R/XYZ 0 249 0]>>endobj
-359 0 obj<</D[622 0 R/XYZ 0 190 0]>>endobj
-360 0 obj<</D[624 0 R/XYZ 0 639 0]>>endobj
-361 0 obj<</D[624 0 R/XYZ 0 413 0]>>endobj
-362 0 obj<</D[626 0 R/XYZ 0 665 0]>>endobj
-363 0 obj<</D[626 0 R/XYZ 0 515 0]>>endobj
-364 0 obj<</D[626 0 R/XYZ 0 367 0]>>endobj
-365 0 obj<</D[626 0 R/XYZ 0 273 0]>>endobj
-366 0 obj<</D[626 0 R/XYZ 0 135 0]>>endobj
-367 0 obj<</D[628 0 R/XYZ 0 652 0]>>endobj
-368 0 obj<</D[628 0 R/XYZ 0 531 0]>>endobj
-369 0 obj<</D[628 0 R/XYZ 0 354 0]>>endobj
-370 0 obj<</D[628 0 R/XYZ 0 260 0]>>endobj
-371 0 obj<</D[628 0 R/XYZ 0 165 0]>>endobj
-372 0 obj<</D[630 0 R/XYZ 0 734 0]>>endobj
-373 0 obj<</D[630 0 R/XYZ 0 665 0]>>endobj
-374 0 obj<</D[630 0 R/XYZ 0 353 0]>>endobj
-375 0 obj<</D[630 0 R/XYZ 0 281 0]>>endobj
-376 0 obj<</D[630 0 R/XYZ 0 213 0]>>endobj
-377 0 obj<</D[632 0 R/XYZ 0 734 0]>>endobj
-378 0 obj<</D[632 0 R/XYZ 0 658 0]>>endobj
-379 0 obj<</D[632 0 R/XYZ 0 600 0]>>endobj
-380 0 obj<</D[532 0 R/XYZ 0 672 0]>>endobj
-381 0 obj<</D[632 0 R/XYZ 0 347 0]>>endobj
-382 0 obj<</D[634 0 R/XYZ 0 734 0]>>endobj
-383 0 obj<</D[634 0 R/XYZ 0 622 0]>>endobj
-384 0 obj<</D[634 0 R/XYZ 0 264 0]>>endobj
-385 0 obj<</D[636 0 R/XYZ 0 705 0]>>endobj
-386 0 obj<</D[636 0 R/XYZ 0 577 0]>>endobj
-387 0 obj<</D[636 0 R/XYZ 0 492 0]>>endobj
-388 0 obj<</D[636 0 R/XYZ 0 239 0]>>endobj
-389 0 obj<</D[638 0 R/XYZ 0 734 0]>>endobj
-390 0 obj<</D[638 0 R/XYZ 0 675 0]>>endobj
-391 0 obj<</D[638 0 R/XYZ 0 581 0]>>endobj
-392 0 obj<</D[638 0 R/XYZ 0 433 0]>>endobj
-393 0 obj<</D[638 0 R/XYZ 0 400 0]>>endobj
-394 0 obj<</D[640 0 R/XYZ 0 734 0]>>endobj
-395 0 obj<</D[640 0 R/XYZ 0 385 0]>>endobj
-396 0 obj<</D[640 0 R/XYZ 0 128 0]>>endobj
-397 0 obj<</D[642 0 R/XYZ 0 633 0]>>endobj
-398 0 obj<</D[642 0 R/XYZ 0 603 0]>>endobj
-399 0 obj<</D[642 0 R/XYZ 0 351 0]>>endobj
-400 0 obj<</D[644 0 R/XYZ 0 665 0]>>endobj
-401 0 obj<</D[644 0 R/XYZ 0 594 0]>>endobj
-402 0 obj<</D[644 0 R/XYZ 0 407 0]>>endobj
-403 0 obj<</D[552 0 R/XYZ 0 696 0]>>endobj
-404 0 obj<</D[644 0 R/XYZ 0 141 0]>>endobj
-405 0 obj<</D[552 0 R/XYZ 0 568 0]>>endobj
-406 0 obj<</D[648 0 R/XYZ 0 696 0]>>endobj
-407 0 obj<</D[648 0 R/XYZ 0 621 0]>>endobj
-408 0 obj<</D[648 0 R/XYZ 0 361 0]>>endobj
-409 0 obj<</D[652 0 R/XYZ 0 692 0]>>endobj
-410 0 obj<</D[652 0 R/XYZ 0 630 0]>>endobj
-411 0 obj<</D[658 0 R/XYZ 0 696 0]>>endobj
-412 0 obj<</D[660 0 R/XYZ 0 696 0]>>endobj
-413 0 obj<</D[662 0 R/XYZ 0 639 0]>>endobj
-414 0 obj<</D[662 0 R/XYZ 0 498 0]>>endobj
-415 0 obj<</D[662 0 R/XYZ 0 198 0]>>endobj
-416 0 obj<</D[662 0 R/XYZ 0 165 0]>>endobj
-417 0 obj<</D[664 0 R/XYZ 0 734 0]>>endobj
-418 0 obj<</D[664 0 R/XYZ 0 596 0]>>endobj
-419 0 obj<</D[664 0 R/XYZ 0 485 0]>>endobj
-420 0 obj<</D[664 0 R/XYZ 0 451 0]>>endobj
-421 0 obj<</D[664 0 R/XYZ 0 366 0]>>endobj
-422 0 obj<</D[664 0 R/XYZ 0 229 0]>>endobj
-423 0 obj<</D[666 0 R/XYZ 0 489 0]>>endobj
-424 0 obj<</D[668 0 R/XYZ 0 696 0]>>endobj
-425 0 obj<</D[668 0 R/XYZ 0 568 0]>>endobj
-426 0 obj<</D[670 0 R/XYZ 0 718 0]>>endobj
-427 0 obj<</D[554 0 R/XYZ 0 705 0]>>endobj
-428 0 obj<</D[554 0 R/XYZ 0 630 0]>>endobj
-429 0 obj<</D[554 0 R/XYZ 0 571 0]>>endobj
-430 0 obj<</D[554 0 R/XYZ 0 513 0]>>endobj
-431 0 obj<</D[554 0 R/XYZ 0 455 0]>>endobj
-432 0 obj<</D[554 0 R/XYZ 0 383 0]>>endobj
-433 0 obj<</D[554 0 R/XYZ 0 325 0]>>endobj
-434 0 obj<</D[554 0 R/XYZ 0 266 0]>>endobj
-435 0 obj<</D[554 0 R/XYZ 0 208 0]>>endobj
-436 0 obj<</D[554 0 R/XYZ 0 149 0]>>endobj
-437 0 obj<</D[556 0 R/XYZ 0 734 0]>>endobj
-438 0 obj<</D[532 0 R/XYZ 0 201 0]>>endobj
-439 0 obj<</D[556 0 R/XYZ 0 675 0]>>endobj
-440 0 obj<</D[556 0 R/XYZ 0 617 0]>>endobj
-441 0 obj<</D[556 0 R/XYZ 0 558 0]>>endobj
-442 0 obj<</D[556 0 R/XYZ 0 500 0]>>endobj
-443 0 obj<</D[556 0 R/XYZ 0 428 0]>>endobj
-444 0 obj<</D[556 0 R/XYZ 0 370 0]>>endobj
-445 0 obj<</D[556 0 R/XYZ 0 220 0]>>endobj
-446 0 obj<</D[534 0 R/XYZ 0 705 0]>>endobj
-447 0 obj<</D[524 0 R/XYZ 0 696 0]>>endobj
-448 0 obj<</D[558 0 R/XYZ 0 441 0]>>endobj
-449 0 obj<</D[560 0 R/XYZ 0 734 0]>>endobj
-450 0 obj<</D[562 0 R/XYZ 0 696 0]>>endobj
-451 0 obj<</D[562 0 R/XYZ 0 423 0]>>endobj
-452 0 obj<</D[562 0 R/XYZ 0 259 0]>>endobj
-453 0 obj<</D[564 0 R/XYZ 0 652 0]>>endobj
-454 0 obj<</D[564 0 R/XYZ 0 240 0]>>endobj
-455 0 obj<</D[566 0 R/XYZ 0 665 0]>>endobj
-456 0 obj<</D[536 0 R/XYZ 0 696 0]>>endobj
-457 0 obj<</D[568 0 R/XYZ 0 696 0]>>endobj
-458 0 obj<</D[568 0 R/XYZ 0 595 0]>>endobj
-459 0 obj<</D[568 0 R/XYZ 0 216 0]>>endobj
-460 0 obj<</D[570 0 R/XYZ 0 692 0]>>endobj
-461 0 obj<</D[570 0 R/XYZ 0 458 0]>>endobj
-462 0 obj<</D[572 0 R/XYZ 0 734 0]>>endobj
-463 0 obj<</D[572 0 R/XYZ 0 566 0]>>endobj
-464 0 obj<</D[572 0 R/XYZ 0 438 0]>>endobj
-465 0 obj<</D[572 0 R/XYZ 0 178 0]>>endobj
-466 0 obj<</D[536 0 R/XYZ 0 529 0]>>endobj
-467 0 obj<</D[580 0 R/XYZ 0 696 0]>>endobj
-468 0 obj<</D[582 0 R/XYZ 0 626 0]>>endobj
-469 0 obj<</D[582 0 R/XYZ 0 516 0]>>endobj
-470 0 obj<</D[536 0 R/XYZ 0 335 0]>>endobj
-471 0 obj<</D[582 0 R/XYZ 0 394 0]>>endobj
-472 0 obj<</D[582 0 R/XYZ 0 360 0]>>endobj
-473 0 obj<</D[584 0 R/XYZ 0 718 0]>>endobj
-474 0 obj<</D[584 0 R/XYZ 0 688 0]>>endobj
-475 0 obj<</D[584 0 R/XYZ 0 515 0]>>endobj
-476 0 obj<</D[584 0 R/XYZ 0 235 0]>>endobj
-477 0 obj<</D[584 0 R/XYZ 0 205 0]>>endobj
-478 0 obj<</D[584 0 R/XYZ 0 151 0]>>endobj
-479 0 obj<</D[586 0 R/XYZ 0 734 0]>>endobj
-480 0 obj<</D[586 0 R/XYZ 0 665 0]>>endobj
-481 0 obj<</D[586 0 R/XYZ 0 611 0]>>endobj
-482 0 obj<</D[526 0 R/XYZ 0 734 0]>>endobj
-483 0 obj<</D[586 0 R/XYZ 0 411 0]>>endobj
-484 0 obj<</D[586 0 R/XYZ 0 356 0]>>endobj
-485 0 obj<</D[586 0 R/XYZ 0 235 0]>>endobj
-486 0 obj<</D[586 0 R/XYZ 0 141 0]>>endobj
-487 0 obj<</D[588 0 R/XYZ 0 734 0]>>endobj
-488 0 obj<</D[538 0 R/XYZ 0 734 0]>>endobj
-489 0 obj<</D[588 0 R/XYZ 0 639 0]>>endobj
-490 0 obj<</D[588 0 R/XYZ 0 465 0]>>endobj
-491 0 obj<</D[588 0 R/XYZ 0 265 0]>>endobj
-492 0 obj<</D[588 0 R/XYZ 0 197 0]>>endobj
-493 0 obj<</D[538 0 R/XYZ 0 434 0]>>endobj
-494 0 obj<</D[590 0 R/XYZ 0 665 0]>>endobj
-495 0 obj<</D[590 0 R/XYZ 0 518 0]>>endobj
-496 0 obj<</D[590 0 R/XYZ 0 279 0]>>endobj
-497 0 obj<</D[536 0 R/XYZ 0 734 0]>>endobj
-498 0 obj<</D[548 0 R/XYZ 0 734 0]>>endobj
-499 0 obj<</D[540 0 R/XYZ 0 734 0]>>endobj
-500 0 obj<</D[552 0 R/XYZ 0 734 0]>>endobj
-501 0 obj<</D[532 0 R/XYZ 0 734 0]>>endobj
-502 0 obj<</D[580 0 R/XYZ 0 734 0]>>endobj
-503 0 obj<</D[562 0 R/XYZ 0 734 0]>>endobj
-504 0 obj<</D[648 0 R/XYZ 0 734 0]>>endobj
-505 0 obj<</D[668 0 R/XYZ 0 734 0]>>endobj
-506 0 obj<</D[660 0 R/XYZ 0 734 0]>>endobj
-507 0 obj<</D[524 0 R/XYZ 0 734 0]>>endobj
-508 0 obj<</D[524 0 R/XYZ 0 734 0]>>endobj
-509 0 obj<</D[670 0 R/XYZ 0 718 0]>>endobj
-510 0 obj<</D[576 0 R/XYZ 0 734 0]>>endobj
-511 0 obj<</D[568 0 R/XYZ 0 734 0]>>endobj
-512 0 obj<</D[658 0 R/XYZ 0 734 0]>>endobj
-513 0 obj<</Type/Pages/Count 80/Kids[514 0 R
-516 0 R
-518 0 R
-520 0 R
-522 0 R
-524 0 R
-526 0 R
-528 0 R
-530 0 R
-532 0 R
-534 0 R
-536 0 R
-538 0 R
-540 0 R
-542 0 R
-544 0 R
-546 0 R
-548 0 R
-550 0 R
-552 0 R
-554 0 R
-556 0 R
-558 0 R
-560 0 R
-562 0 R
-564 0 R
-566 0 R
-568 0 R
-570 0 R
-572 0 R
-574 0 R
-576 0 R
-578 0 R
-580 0 R
-582 0 R
-584 0 R
-586 0 R
-588 0 R
-590 0 R
-592 0 R
-594 0 R
-596 0 R
-598 0 R
-600 0 R
-602 0 R
-604 0 R
-606 0 R
-608 0 R
-610 0 R
-612 0 R
-614 0 R
-616 0 R
-618 0 R
-620 0 R
-622 0 R
-624 0 R
-626 0 R
-628 0 R
-630 0 R
-632 0 R
-634 0 R
-636 0 R
-638 0 R
-640 0 R
-642 0 R
-644 0 R
-646 0 R
-648 0 R
-650 0 R
-652 0 R
-654 0 R
-656 0 R
-658 0 R
-660 0 R
-662 0 R
-664 0 R
-666 0 R
-668 0 R
-670 0 R
-672 0 R
+263 0 R]endobj
+265 0 obj<</Dests 266 0 R>>endobj
+266 0 obj<</Kids[267 0 R]>>endobj
+267 0 obj<</Limits[(aen1007)(wins)]/Names[(aen1007)268 0 R(aen1018)269 0 R(aen103)270 0 R(aen1039)271 0 R(aen1052)272 0 R(aen1099)273 0 R(aen1126)274 0 R(aen1137)275 0 R(aen1176)276 0 R(aen1207)277 0 R(aen128)278 0 R(aen1364)279 0 R(aen1387)280 0 R(aen1398)281 0 R(aen1444)282 0 R(aen151)283 0 R(aen1570)284 0 R(aen1573)285 0 R(aen1587)286 0 R(aen159)287 0 R(aen1648)288 0 R(aen1687)289 0 R(aen1692)290 0 R(aen1703)291 0 R(aen1743)292 0 R(aen1754)293 0 R(aen179)294 0 R(aen1798)295 0 R(aen181)296 0 R(aen1818)297 0 R(aen184)298 0 R(aen1841)299 0 R(aen1853)300 0 R(aen188)301 0 R(aen1897)302 0 R(aen1938)303 0 R(aen1942)304 0 R(aen1961)305 0 R(aen1972)306 0 R(aen1976)307 0 R(aen1987)308 0 R(aen2000)309 0 R(aen2002)310 0 R(aen2005)311 0 R(aen2024)312 0 R(aen2026)313 0 R(aen2029)314 0 R(aen2053)315 0 R(aen2055)316 0 R(aen2062)317 0 R(aen2070)318 0 R(aen2074)319 0 R(aen2101)320 0 R(aen2129)321 0 R(aen2133)322 0 R(aen2164)323 0 R(aen2192)324 0 R(aen2231)325 0 R(aen2239)326 0 R(aen2258)327 0 R(aen2266)328 0 R(aen2274)329 0 R(aen2293)330 0 R(aen2305)331 0 R(aen2315)332 0 R(aen2326)333 0 R(aen2334)334 0 R(aen2338)335 0 R(aen2345)336 0 R(aen2358)337 0 R(aen2362)338 0 R(aen2369)339 0 R(aen2381)340 0 R(aen2385)341 0 R(aen2389)342 0 R(aen24)343 0 R(aen2424)344 0 R(aen2459)345 0 R(aen2467)346 0 R(aen2518)347 0 R(aen2549)348 0 R(aen2561)349 0 R(aen2567)350 0 R(aen2602)351 0 R(aen2622)352 0 R(aen2626)353 0 R(aen2637)354 0 R(aen2653)355 0 R(aen2655)356 0 R(aen2698)357 0 R(aen2708)358 0 R(aen2715)359 0 R(aen2723)360 0 R(aen2725)361 0 R(aen2760)362 0 R(aen2811)363 0 R(aen2814)364 0 R(aen2828)365 0 R(aen284)366 0 R(aen2846)367 0 R(aen288)368 0 R(aen2895)369 0 R(aen2898)370 0 R(aen2924)371 0 R(aen2958)372 0 R(aen2961)373 0 R(aen3032)374 0 R(aen317)375 0 R(aen320)376 0 R(aen323)377 0 R(aen326)378 0 R(aen329)379 0 R(aen332)380 0 R(aen335)381 0 R(aen338)382 0 R(aen341)383 0 R(aen344)384 0 R(aen347)385 0 R(aen35)386 0 R(aen350)387 0 R(aen353)388 0 R(aen356)389 0 R(aen359)390 0 R(aen362)391 0 R(aen365)392 0 R(aen371)393 0 R(aen39)394 0 R(aen4)395 0 R(aen406)396 0 R(aen420)397 0 R(aen451)398 0 R(aen472)399 0 R(aen484)400 0 R(aen495)401 0 R(aen515)402 0 R(aen530)403 0 R(aen54)404 0 R(aen540)405 0 R(aen544)406 0 R(aen552)407 0 R(aen557)408 0 R(aen563)409 0 R(aen570)410 0 R(aen574)411 0 R(aen578)412 0 R(aen583)413 0 R(aen65)414 0 R(aen651)415 0 R(aen687)416 0 R(aen694)417 0 R(aen70)418 0 R(aen701)419 0 R(aen703)420 0 R(aen716)421 0 R(aen718)422 0 R(aen738)423 0 R(aen774)424 0 R(aen776)425 0 R(aen779)426 0 R(aen782)427 0 R(aen785)428 0 R(aen788)429 0 R(aen8)430 0 R(aen813)431 0 R(aen816)432 0 R(aen831)433 0 R(aen842)434 0 R(aen849)435 0 R(aen86)436 0 R(aen860)437 0 R(aen883)438 0 R(aen910)439 0 R(aen917)440 0 R(aen92)441 0 R(aen940)442 0 R(aen959)443 0 R(aen986)444 0 R(architecture)445 0 R(codingsuggestions)446 0 R(debug)447 0 R(internals)448 0 R(netbios)449 0 R(ntdomain)450 0 R(parsing)451 0 R(printing)452 0 R(samba-developer-documentation)453 0 R(samba-developers-guide.html)454 0 R(tracing)455 0 R(unix-smb)456 0 R(wins)457 0 R]>>endobj
+268 0 obj<</D[535 0 R/XYZ 0 734 0]>>endobj
+269 0 obj<</D[535 0 R/XYZ 0 639 0]>>endobj
+270 0 obj<</D[483 0 R/XYZ 0 696 0]>>endobj
+271 0 obj<</D[535 0 R/XYZ 0 439 0]>>endobj
+272 0 obj<</D[535 0 R/XYZ 0 292 0]>>endobj
+273 0 obj<</D[537 0 R/XYZ 0 626 0]>>endobj
+274 0 obj<</D[537 0 R/XYZ 0 343 0]>>endobj
+275 0 obj<</D[537 0 R/XYZ 0 248 0]>>endobj
+276 0 obj<</D[539 0 R/XYZ 0 639 0]>>endobj
+277 0 obj<</D[539 0 R/XYZ 0 413 0]>>endobj
+278 0 obj<</D[485 0 R/XYZ 0 718 0]>>endobj
+279 0 obj<</D[543 0 R/XYZ 0 679 0]>>endobj
+280 0 obj<</D[543 0 R/XYZ 0 438 0]>>endobj
+281 0 obj<</D[543 0 R/XYZ 0 344 0]>>endobj
+282 0 obj<</D[545 0 R/XYZ 0 639 0]>>endobj
+283 0 obj<</D[487 0 R/XYZ 0 718 0]>>endobj
+284 0 obj<</D[547 0 R/XYZ 0 428 0]>>endobj
+285 0 obj<</D[547 0 R/XYZ 0 366 0]>>endobj
+286 0 obj<</D[549 0 R/XYZ 0 564 0]>>endobj
+287 0 obj<</D[487 0 R/XYZ 0 493 0]>>endobj
+288 0 obj<</D[553 0 R/XYZ 0 734 0]>>endobj
+289 0 obj<</D[553 0 R/XYZ 0 467 0]>>endobj
+290 0 obj<</D[553 0 R/XYZ 0 375 0]>>endobj
+291 0 obj<</D[553 0 R/XYZ 0 281 0]>>endobj
+292 0 obj<</D[555 0 R/XYZ 0 626 0]>>endobj
+293 0 obj<</D[555 0 R/XYZ 0 531 0]>>endobj
+294 0 obj<</D[489 0 R/XYZ 0 734 0]>>endobj
+295 0 obj<</D[555 0 R/XYZ 0 199 0]>>endobj
+296 0 obj<</D[489 0 R/XYZ 0 700 0]>>endobj
+297 0 obj<</D[557 0 R/XYZ 0 692 0]>>endobj
+298 0 obj<</D[489 0 R/XYZ 0 602 0]>>endobj
+299 0 obj<</D[557 0 R/XYZ 0 518 0]>>endobj
+300 0 obj<</D[557 0 R/XYZ 0 394 0]>>endobj
+301 0 obj<</D[489 0 R/XYZ 0 491 0]>>endobj
+302 0 obj<</D[559 0 R/XYZ 0 522 0]>>endobj
+303 0 obj<</D[561 0 R/XYZ 0 734 0]>>endobj
+304 0 obj<</D[561 0 R/XYZ 0 675 0]>>endobj
+305 0 obj<</D[561 0 R/XYZ 0 528 0]>>endobj
+306 0 obj<</D[561 0 R/XYZ 0 433 0]>>endobj
+307 0 obj<</D[561 0 R/XYZ 0 375 0]>>endobj
+308 0 obj<</D[561 0 R/XYZ 0 281 0]>>endobj
+309 0 obj<</D[563 0 R/XYZ 0 734 0]>>endobj
+310 0 obj<</D[563 0 R/XYZ 0 704 0]>>endobj
+311 0 obj<</D[563 0 R/XYZ 0 649 0]>>endobj
+312 0 obj<</D[563 0 R/XYZ 0 501 0]>>endobj
+313 0 obj<</D[563 0 R/XYZ 0 471 0]>>endobj
+314 0 obj<</D[563 0 R/XYZ 0 417 0]>>endobj
+315 0 obj<</D[563 0 R/XYZ 0 217 0]>>endobj
+316 0 obj<</D[563 0 R/XYZ 0 187 0]>>endobj
+317 0 obj<</D[565 0 R/XYZ 0 734 0]>>endobj
+318 0 obj<</D[565 0 R/XYZ 0 639 0]>>endobj
+319 0 obj<</D[565 0 R/XYZ 0 581 0]>>endobj
+320 0 obj<</D[565 0 R/XYZ 0 381 0]>>endobj
+321 0 obj<</D[565 0 R/XYZ 0 154 0]>>endobj
+322 0 obj<</D[567 0 R/XYZ 0 734 0]>>endobj
+323 0 obj<</D[567 0 R/XYZ 0 507 0]>>endobj
+324 0 obj<</D[567 0 R/XYZ 0 281 0]>>endobj
+325 0 obj<</D[569 0 R/XYZ 0 533 0]>>endobj
+326 0 obj<</D[569 0 R/XYZ 0 383 0]>>endobj
+327 0 obj<</D[569 0 R/XYZ 0 235 0]>>endobj
+328 0 obj<</D[569 0 R/XYZ 0 141 0]>>endobj
+329 0 obj<</D[571 0 R/XYZ 0 692 0]>>endobj
+330 0 obj<</D[571 0 R/XYZ 0 545 0]>>endobj
+331 0 obj<</D[571 0 R/XYZ 0 424 0]>>endobj
+332 0 obj<</D[571 0 R/XYZ 0 247 0]>>endobj
+333 0 obj<</D[571 0 R/XYZ 0 152 0]>>endobj
+334 0 obj<</D[573 0 R/XYZ 0 734 0]>>endobj
+335 0 obj<</D[573 0 R/XYZ 0 675 0]>>endobj
+336 0 obj<</D[573 0 R/XYZ 0 607 0]>>endobj
+337 0 obj<</D[573 0 R/XYZ 0 291 0]>>endobj
+338 0 obj<</D[573 0 R/XYZ 0 220 0]>>endobj
+339 0 obj<</D[573 0 R/XYZ 0 152 0]>>endobj
+340 0 obj<</D[575 0 R/XYZ 0 705 0]>>endobj
+341 0 obj<</D[575 0 R/XYZ 0 630 0]>>endobj
+342 0 obj<</D[575 0 R/XYZ 0 571 0]>>endobj
+343 0 obj<</D[475 0 R/XYZ 0 672 0]>>endobj
+344 0 obj<</D[575 0 R/XYZ 0 319 0]>>endobj
+345 0 obj<</D[577 0 R/XYZ 0 734 0]>>endobj
+346 0 obj<</D[577 0 R/XYZ 0 622 0]>>endobj
+347 0 obj<</D[577 0 R/XYZ 0 264 0]>>endobj
+348 0 obj<</D[579 0 R/XYZ 0 705 0]>>endobj
+349 0 obj<</D[579 0 R/XYZ 0 577 0]>>endobj
+350 0 obj<</D[579 0 R/XYZ 0 492 0]>>endobj
+351 0 obj<</D[579 0 R/XYZ 0 239 0]>>endobj
+352 0 obj<</D[581 0 R/XYZ 0 734 0]>>endobj
+353 0 obj<</D[581 0 R/XYZ 0 675 0]>>endobj
+354 0 obj<</D[581 0 R/XYZ 0 581 0]>>endobj
+355 0 obj<</D[581 0 R/XYZ 0 433 0]>>endobj
+356 0 obj<</D[581 0 R/XYZ 0 400 0]>>endobj
+357 0 obj<</D[583 0 R/XYZ 0 734 0]>>endobj
+358 0 obj<</D[583 0 R/XYZ 0 385 0]>>endobj
+359 0 obj<</D[583 0 R/XYZ 0 128 0]>>endobj
+360 0 obj<</D[585 0 R/XYZ 0 633 0]>>endobj
+361 0 obj<</D[585 0 R/XYZ 0 603 0]>>endobj
+362 0 obj<</D[585 0 R/XYZ 0 351 0]>>endobj
+363 0 obj<</D[587 0 R/XYZ 0 665 0]>>endobj
+364 0 obj<</D[587 0 R/XYZ 0 594 0]>>endobj
+365 0 obj<</D[587 0 R/XYZ 0 407 0]>>endobj
+366 0 obj<</D[495 0 R/XYZ 0 696 0]>>endobj
+367 0 obj<</D[587 0 R/XYZ 0 141 0]>>endobj
+368 0 obj<</D[495 0 R/XYZ 0 568 0]>>endobj
+369 0 obj<</D[591 0 R/XYZ 0 696 0]>>endobj
+370 0 obj<</D[591 0 R/XYZ 0 621 0]>>endobj
+371 0 obj<</D[591 0 R/XYZ 0 361 0]>>endobj
+372 0 obj<</D[595 0 R/XYZ 0 692 0]>>endobj
+373 0 obj<</D[595 0 R/XYZ 0 630 0]>>endobj
+374 0 obj<</D[601 0 R/XYZ 0 696 0]>>endobj
+375 0 obj<</D[497 0 R/XYZ 0 705 0]>>endobj
+376 0 obj<</D[497 0 R/XYZ 0 630 0]>>endobj
+377 0 obj<</D[497 0 R/XYZ 0 571 0]>>endobj
+378 0 obj<</D[497 0 R/XYZ 0 513 0]>>endobj
+379 0 obj<</D[497 0 R/XYZ 0 455 0]>>endobj
+380 0 obj<</D[497 0 R/XYZ 0 383 0]>>endobj
+381 0 obj<</D[497 0 R/XYZ 0 325 0]>>endobj
+382 0 obj<</D[497 0 R/XYZ 0 266 0]>>endobj
+383 0 obj<</D[497 0 R/XYZ 0 208 0]>>endobj
+384 0 obj<</D[497 0 R/XYZ 0 149 0]>>endobj
+385 0 obj<</D[499 0 R/XYZ 0 734 0]>>endobj
+386 0 obj<</D[475 0 R/XYZ 0 201 0]>>endobj
+387 0 obj<</D[499 0 R/XYZ 0 675 0]>>endobj
+388 0 obj<</D[499 0 R/XYZ 0 617 0]>>endobj
+389 0 obj<</D[499 0 R/XYZ 0 558 0]>>endobj
+390 0 obj<</D[499 0 R/XYZ 0 500 0]>>endobj
+391 0 obj<</D[499 0 R/XYZ 0 428 0]>>endobj
+392 0 obj<</D[499 0 R/XYZ 0 370 0]>>endobj
+393 0 obj<</D[499 0 R/XYZ 0 217 0]>>endobj
+394 0 obj<</D[477 0 R/XYZ 0 705 0]>>endobj
+395 0 obj<</D[467 0 R/XYZ 0 696 0]>>endobj
+396 0 obj<</D[501 0 R/XYZ 0 428 0]>>endobj
+397 0 obj<</D[503 0 R/XYZ 0 734 0]>>endobj
+398 0 obj<</D[505 0 R/XYZ 0 696 0]>>endobj
+399 0 obj<</D[505 0 R/XYZ 0 423 0]>>endobj
+400 0 obj<</D[505 0 R/XYZ 0 259 0]>>endobj
+401 0 obj<</D[507 0 R/XYZ 0 652 0]>>endobj
+402 0 obj<</D[507 0 R/XYZ 0 223 0]>>endobj
+403 0 obj<</D[509 0 R/XYZ 0 652 0]>>endobj
+404 0 obj<</D[479 0 R/XYZ 0 696 0]>>endobj
+405 0 obj<</D[511 0 R/XYZ 0 696 0]>>endobj
+406 0 obj<</D[511 0 R/XYZ 0 595 0]>>endobj
+407 0 obj<</D[511 0 R/XYZ 0 216 0]>>endobj
+408 0 obj<</D[513 0 R/XYZ 0 692 0]>>endobj
+409 0 obj<</D[513 0 R/XYZ 0 458 0]>>endobj
+410 0 obj<</D[513 0 R/XYZ 0 145 0]>>endobj
+411 0 obj<</D[515 0 R/XYZ 0 665 0]>>endobj
+412 0 obj<</D[515 0 R/XYZ 0 537 0]>>endobj
+413 0 obj<</D[515 0 R/XYZ 0 277 0]>>endobj
+414 0 obj<</D[479 0 R/XYZ 0 529 0]>>endobj
+415 0 obj<</D[523 0 R/XYZ 0 696 0]>>endobj
+416 0 obj<</D[525 0 R/XYZ 0 626 0]>>endobj
+417 0 obj<</D[525 0 R/XYZ 0 516 0]>>endobj
+418 0 obj<</D[479 0 R/XYZ 0 335 0]>>endobj
+419 0 obj<</D[525 0 R/XYZ 0 394 0]>>endobj
+420 0 obj<</D[525 0 R/XYZ 0 360 0]>>endobj
+421 0 obj<</D[527 0 R/XYZ 0 718 0]>>endobj
+422 0 obj<</D[527 0 R/XYZ 0 688 0]>>endobj
+423 0 obj<</D[527 0 R/XYZ 0 515 0]>>endobj
+424 0 obj<</D[527 0 R/XYZ 0 235 0]>>endobj
+425 0 obj<</D[527 0 R/XYZ 0 205 0]>>endobj
+426 0 obj<</D[527 0 R/XYZ 0 151 0]>>endobj
+427 0 obj<</D[529 0 R/XYZ 0 734 0]>>endobj
+428 0 obj<</D[529 0 R/XYZ 0 665 0]>>endobj
+429 0 obj<</D[529 0 R/XYZ 0 611 0]>>endobj
+430 0 obj<</D[469 0 R/XYZ 0 734 0]>>endobj
+431 0 obj<</D[529 0 R/XYZ 0 411 0]>>endobj
+432 0 obj<</D[529 0 R/XYZ 0 356 0]>>endobj
+433 0 obj<</D[529 0 R/XYZ 0 235 0]>>endobj
+434 0 obj<</D[529 0 R/XYZ 0 141 0]>>endobj
+435 0 obj<</D[531 0 R/XYZ 0 734 0]>>endobj
+436 0 obj<</D[481 0 R/XYZ 0 734 0]>>endobj
+437 0 obj<</D[531 0 R/XYZ 0 639 0]>>endobj
+438 0 obj<</D[531 0 R/XYZ 0 465 0]>>endobj
+439 0 obj<</D[531 0 R/XYZ 0 265 0]>>endobj
+440 0 obj<</D[531 0 R/XYZ 0 197 0]>>endobj
+441 0 obj<</D[481 0 R/XYZ 0 434 0]>>endobj
+442 0 obj<</D[533 0 R/XYZ 0 665 0]>>endobj
+443 0 obj<</D[533 0 R/XYZ 0 518 0]>>endobj
+444 0 obj<</D[533 0 R/XYZ 0 279 0]>>endobj
+445 0 obj<</D[479 0 R/XYZ 0 734 0]>>endobj
+446 0 obj<</D[491 0 R/XYZ 0 734 0]>>endobj
+447 0 obj<</D[483 0 R/XYZ 0 734 0]>>endobj
+448 0 obj<</D[495 0 R/XYZ 0 734 0]>>endobj
+449 0 obj<</D[475 0 R/XYZ 0 734 0]>>endobj
+450 0 obj<</D[523 0 R/XYZ 0 734 0]>>endobj
+451 0 obj<</D[505 0 R/XYZ 0 734 0]>>endobj
+452 0 obj<</D[591 0 R/XYZ 0 734 0]>>endobj
+453 0 obj<</D[467 0 R/XYZ 0 734 0]>>endobj
+454 0 obj<</D[467 0 R/XYZ 0 734 0]>>endobj
+455 0 obj<</D[519 0 R/XYZ 0 734 0]>>endobj
+456 0 obj<</D[511 0 R/XYZ 0 734 0]>>endobj
+457 0 obj<</D[601 0 R/XYZ 0 734 0]>>endobj
+458 0 obj<</Type/Pages/Count 72/Kids[459 0 R
+461 0 R
+463 0 R
+465 0 R
+467 0 R
+469 0 R
+471 0 R
+473 0 R
+475 0 R
+477 0 R
+479 0 R
+481 0 R
+483 0 R
+485 0 R
+487 0 R
+489 0 R
+491 0 R
+493 0 R
+495 0 R
+497 0 R
+499 0 R
+501 0 R
+503 0 R
+505 0 R
+507 0 R
+509 0 R
+511 0 R
+513 0 R
+515 0 R
+517 0 R
+519 0 R
+521 0 R
+523 0 R
+525 0 R
+527 0 R
+529 0 R
+531 0 R
+533 0 R
+535 0 R
+537 0 R
+539 0 R
+541 0 R
+543 0 R
+545 0 R
+547 0 R
+549 0 R
+551 0 R
+553 0 R
+555 0 R
+557 0 R
+559 0 R
+561 0 R
+563 0 R
+565 0 R
+567 0 R
+569 0 R
+571 0 R
+573 0 R
+575 0 R
+577 0 R
+579 0 R
+581 0 R
+583 0 R
+585 0 R
+587 0 R
+589 0 R
+591 0 R
+593 0 R
+595 0 R
+597 0 R
+599 0 R
+601 0 R
]>>endobj
-514 0 obj<</Type/Page/Parent 513 0 R/Contents 515 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-515 0 obj<</Filter/FlateDecode/Length 93 >>stream
+459 0 obj<</Type/Page/Parent 458 0 R/Contents 460 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+460 0 obj<</Filter/FlateDecode/Length 93 >>stream
x\ 1+ä2T0\0BC\ 5s#\ 5c3\85ä\.§\10.}7K\ 5#\ 3\85\904\ 5CCK=\ 3c\ 5cS\13=3\85\90\14\ 5\ 3=\ 3\ 3 D²F°£¯\93£\82KjYjN~AjQ±\82{ifJªfH\16\97k\bW \17\0SÙ\15?endstream
endobj
-516 0 obj<</Type/Page/Parent 513 0 R/Contents 517 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F5 7 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>/Annots 55 0 R>>endobj
-517 0 obj<</Filter/FlateDecode/Length 2528 >>stream
-x\ 1Õ[mo\eG\ eþî_±\1fS Úììû~ôK\92\vÐ$=K×O\ 5
-ÙZÛ:XRN\96zÍ¿ïCrfÈ]%H\81ÃyÝ\14HõèYÎ\90\1c\ eÉ\99Uþsæ\92\fÿ¹¤É\93¢Nn7gY\9aá\9bø×õ;ú&©Ë\ e\7fo\92¢K\e\ f\1e\93ù\99\81\9b¤+ÓÒp\ 6n\12\97WigÈ¢¦A\8b*m1hS¥Î\ 3\1aÔ@\bf9 ò\93D²2Y\87\996I\99\11Å PU[\ 4=]"Àë\19à&©2L§\9c\81°¡Ã\90Ê\19\bU\9c\83ºJZ\f¶j \94a\r\ 6\8b\91\ 6²\ 6o\92<ÏÒÂÈZ\f\16\1aV\965\18+\92\15\83y-\ 6[4\83\91ÙïUMÊÀ\119\8dË\80\9cd ùÝa¥\95\14ÁªNë(È@\ 5=çrG.\8c¤Å\18¶®0\82²2lI&\ 4}\18è°\9ekK\92\8b\9c\81\184oÉÈHR\8cT®1\81À@\ 3Ás²ò\913p\93´U\9aûAHÎ@ÌW6db\14\14#°\ eêT\ 6j\84ç\1cb\15VD\92\ 5Ë.S§
-\88\82\81#'\16\89\92\16C\1flÃβ\ 6\83mr\8c¯²2iCÑê]^2ÐI=ç2\8a;%-&§\93\83\95\95aë\12n\vÃ2Ða=ç\87\89¤Å4,e\19Y\19¶r¼\98\1c¡%\ 3\1dÖs-m!å\fÄ \8eÔR\92\ 2¤Ì)¢8£9\ fhL¸.@\98A\99B\1eäù\14"i9\1a\92\a!Î@Ì\97\95ä¹HZ\f¶¬á{Ã\1a\f\16\9ac1£¬8\0©G\97\8b\81:Às\r¥Ô2r\ 6\92B\1dy'\92\16\93B\1c!\91å)\8b®Õ¥\14\10§\f\1c"«DI \aÙ\a
-1(ç4%-\ 6\8bUk\8d¨L\89]FE\86\97¹` SzN¦\8c\9c\81dG\89õRA\8bÁ¢®Ô\86\95)±nq×\16\ftJÏÉ\1c\913\90¦¤4©\82\16Ó\94\ 5\£¬LYµºß\v\ 6:¥çxñ\943\10\83æ9\rª\82%\9cV\94\15\aHÓ\92[\19ð\8a($Aöy$+\16,h4\843?É@\ 5=GK\87)")\82N:\ 2\11d \82\9e£ÔS%E$i\98¼£`óûN\0Éñ¾\v\1cï;å\fDbn°ÆÊ\19H«QÂ|%y¾ºf\ 3e\ 2\ 6:\9fçd\82È\19è\vA\1e9D^\9e\bÄ|EFóE\92×7¯¤\ 5á(\16@\13\1a\886£%Oð\83Ä\19HFPH))\83Bý\18§9\ 3\1dÔs\1c\98Ê\19\88 ©Â*g YÁ.\8d\83Ê\84¹)õ9\ 3\9dÐs-m|å\fäFª2\1cÚ\9d\01!|\ 1\vuP
-ÄÜI\13Àñ$\80&4\90\ 4\1d\rÃO²6,\882\15#8g \82\9esXR¨\1aI\8e`\87Ø¡tÃS\b\88\82\81£\1dÜ"'Ó\93qFù2\bò\13*È\90T¥\19åI\15¬¥ÔË\8c\fTÐsÔ\`ÆH\8aªø\92ò¿\b2PAÏ9´\%¢\87\9eÔ\19\v)È"È@\ 5=ç\10\87\1d¢\80\9eTA$\vu\ e\ 3\15ô\9cloJ+Ö9\19é\1fTe \82\9es\rUR\17I¶\11ç\ 5Ê\vèìr:JÔ¬\8b"¸TAT³\95ºÈ\f\7f&F\11 Ñn\8a\14ÏTKeãÇøs\14ò\8c«\vè\17)\16ª¤6±\10\7f\8eB\9e\91%\8b\14\va+\93/X\88?G!Ï8ä\13ô\ 2ô\18Q,\84\ e(:\82?G!ϸ\96ÎD\91ºX\9c½~\v\9c%\8b;Ä\1dÒr\95ÔM\99,V|\8eÃ×·¯\16Ë\9bÇ>ÙÝ%\97»í¡ß\1e\9e~Xü\eR\15Z#\92\9ay±YNb¯æç\1f.Îé ä\84&§#"¾L®úßûÇÝç~ÏÂPµn\ 3õî¸^õ$\90c\9fw\b¤Sÿqb$6\85\18Ù¶0\94*òÈDçjoâ¢_nØ\8c:mÛò\85\98\11ÜèÍÑ5Ëòd\86$ÊKv~ótØ/o\ f¼jmÚT/Lù`Äèÿ9é;+XáhËåÃòó¡ß³)hÇ\11Î\12\80.¥¯°\98!\1eïÖÛõa½ÛÒ׸ h3\1fy\bty2í\á\9fþØ\1f.Þ\7f\9aó£UZå\9dÿþçýî°»Ý=2\81\ 66\84Âr»¢¯Ðú\94m\1eÆXn8ÊQöQKý\97×ýÓîñ\18Ô@ikë0Æ\87ݪçÍ\82Ö©(ÿ\87mQ\91*¯ßÆHÎQO±Ä1\9a]ê}S£>\8aw>¾YD{ë\17\18\ flÒ\f\896\1fØ\91Ë\1a«\1d\17×\9fί.Ïç\vr\ 1î*\8aè]»¢EZL·_Å\14\87Ü7´¥\18Ûòñâ#\a Â!k\9b°P&0ó\14¥G¾\1fm\94g\87µ\84\9cf\ed\1a
-¹\90p¾µIý\ 2\86M:_nn\964\14nð\\19\82ó|\7fû°>ô·\87ã\9e7\14º\9dÉ3V3ÚcÎeºÁ°0ãÅ|¿=ìw«ãmÜù/+å²93\9cZÍöÂQolÅ\87ããa}xØ÷ËÕz{Ï{L«Gâ\93 CGRør\98è\8aâð\136ãs\87§XG=«M\83Ȳcû\16Ö4ôÆ]ÈÍO\9b\eIð8\1eúTþÜF\8cç\13£p\1d8´©üË6m_\9eM-\85ÔìĦjlÓöf#Ë\81ÓC,ãWýÓú~ËÙ\ 3\97\ 6\9d/Ãc·M\82Ù.Û@£ÑønnôÑ\19rãâAzf\9c\9fb5x\8aù\12%M\1dñæâ_ïÈ\ ftR\b{.yúòtè¹_EA\89\eôYÝÑ\91R¦1q%Ü\10zl\1c¢ÆËü±ÿ/IäEZ¹Ð¬}:\1e>\1f¥qµ6Ï¿l\ fË?xñÑÞà<Ã}ͳZ7\9c\8cm\9dÉ]®±ñ$¥úeÅW[\85\82wE\vøë«_\7fàE4ièÃòv¿\vF¶S\96\10\97\91\1a3çÐ\1dÛ5üJJå°=µïüê*\98\88ºÓ´!ÕF\eÑ!\15Õ\14ÉÖñÙ \8bÖ\fmûJjý\86m?ýòS°\8d\9aÐ2TCk[Vù\9d=\8c\9bÿ7\8aÆ\r\8b!¶Ø_Ù}o\8f[naø\9c\82»á¼x!iÖÉÙ°n\ 6]5Y%Y\ 5oHBÏ\98¬nî\ fý\1f\87°Bx\9f1åN2\vþm#$m\8c\8cxXí\83\rtõòB\8cH\83\15ôVËd¾Ê·[Ö\88»Ý~³<ü¶êo\8e÷¿Ù5\99¦z\8bæ¶Nãê\91Ú«ï\1dc|f\b¥úr\17ÚcÜ\8ewñB`~¼¿ï\9fè\ 4ÀÛ\a7°\93\9fß\!i\1coÃé4ú=;}\8e\bvjso\8fk8êôûíòQr\ 4.h_B`ºñ¥\b^j\98ð\fiÂéU\ 2\8e¬tE&7KHuU\16ÎàÿÀAçÑ\9f\7f\90<ÊnêC¸\187n6\90\9dÇ)ýkÍÆÖ7Yè+\9bP\83ï\ 6i\1e§Âz\8a:l2#>z#»N\93JH)fÕ¸Âräá
-¡\89×nk>\17à\9dµvÉ7_\ eýn¿ê÷é\ 3í\ 1¼,êª)\17Òñ\1dʬ\e4\1ddái\ 1»üå\1cýÅÍñîÇÏ»'é\12\eúa\16nª\87>{.\14t\1fö\14¤üiáúù4³¶`Í\a®ÿñ÷壸\1f¯ &©¿Þñ\ eíõ \9báí(ïý\81î\7f\1fÇK\9d±Ê¿?U^z½ £\1eå\9b«'\9a\95ØçPÌ×_uý|¼céä4\99ö!pè%÷(r\9a\13õÉù'êãü\84úGß\9f¤ËöDýùÜ\ 6\8fÙ´\93\9c]\82çQ´¨µ\f×\1f\148Ý©ê\83¸WÕ[~{0EôDõË¡î.cåée\97\ f\8b\84ý®q£Ús\8d{få\9d¿\ 4Æ\ f\11ÇnG[@ûx ú0ä\8dê\93$ú¨ü(`\9c\94W«ùõ Ø}s\80\9f0LµW\83êY;®P\88ü±Û¯\aáî\95\9f0OFåÑK\8e]/\ 5vèú\81ï5hèG«Ï¾\0Awh8V]ÊëPõ\81çUõé¶êë·øa\93ü\14\ 3?\91ÃeYÝÐ\ fùï1Ì\ fL\92ø\83\92"ÿ\11À\9dá¬É:zrM\ 1öfqöϳ?\ 1æ\9añ'endstream
-endobj
-518 0 obj<</Type/Page/Parent 513 0 R/Contents 519 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F5 7 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>/Annots 100 0 R>>endobj
-519 0 obj<</Filter/FlateDecode/Length 3031 >>stream
-x\ 1Í[Ms\e9\ e½ûWôm³\a)Ýìï£ãLf\å8N¤Ô\9eeY\99h#©½úÈLþý>\0$\81nyÖ»[\15É3U\89\9e\9e@\ 2\ 4\b\80ìο.²$ÅÿYR»$¯\92ùú"\1d§ø&þñéWú&©\8a\16\7f®\93¼\1dg\1e¬\92É\85\81ë¤L{\9c\81ë¤)ÇÎÈ\19¸N²<\1d7\86Ì+\9a0/ñ%\ 6uãÒ\ 3\9aÐÀuR×ãÖp\ 6bЬ\1d×\86´\18,Æ),k0ØÚõ\ 6.\vRȹq\ 5\85ê\86\94e@
-\19(\96`ØH\8a`Úb® È@\ 5=\97e\19é\13I\8biØ\86\14\88,/PÙVXR¿@\ 2â\ 2\ 5\ eÊ\95\89r\ 6bP\97õH\8bÁ\16%\96OE)\ 6ʪe\97°Ó\ 5Ð\8c\ 6ú\18P\8ec ÈÕ\19\14VÎ@Ì\97UX\0%-¦\ 5È1³²²\0eÅ\ eá\90(\19è\ 2x®ihÊÈ\19H\vÐÒ\ 2D\92\9dU\16¹:K@tVà2ø\17ºò/\89´\98t-ú¬Á`¡\82\95\95I±\ 1È\95\1cK%\ 3\9dÔs~\92HZ\1c'UV&\r²e=Î\13\1d83x\9d¸¬¦u\88²¢\12¾¤ý.*1P\95<\97¥\19ÅH$-\86JU\86MdX\83Á¶\ 5\9c§¬x4%7\87\90f@\93\8a\83=\87Ì\81HP\8e¶fѦº5\ 5De\ 3\97a÷\84_\12i1Ô))6U\94½¨
-ö
-Ç·\0\124Ð\87»r\1cîA®-¡\94r\ 6b¾´î\91\16\83ÍÈH\15µ\18lÁº²vl\89Á`ë\ 2ÞTY^Ø\ 2æ\917y%\ 5\90¤\81¤RK*ñ/ÙNÊÂE^«G\ 4¨ ç²´@ÞWRftäß0#\ 3\15ô\1c²l\91\14\913\10Ú8Ú\87JÊ \9c%à \ftPÏI\10\16\91dÁ¼¥<à\ 5\ 5DÁÀµ\14®Ê\89\1c¢-®[Î@å<WSETÎ@X\ 15\1aCÊ H|1Ês\ 6:¨ç8·+g -\8d£A£ \fZ6ºÞ9\ 3\1dÔsu\8e\9f(g iJÁ®¤\f\8a"@\95\8bã$g \83z®¥ú¬\9c\81\18´¨iÐ(H»*G]\8e\8d\84\0\1a\93wUàx\e)gà:ÁVÇró $g \f\ 5\8d\92\16\83Å2\84ùIÔb°\r\95C\95%]\1d¬¡ få\ 4D]\ 3ÇÊ)gà:©\1aèª\9c\81\98/¥\90TÒb°E\8ahT\96Ýá\10[Ñ\1d\ 2H\1döNàd\17\e\92ò£«¤Uàd.\80\ 4\rÄ\8c(À¹ÿ%\8fÊ\82eÎÎ\92_2PAÏeYN\82\91\14U±d1Æ\1d\ 3UÕs\r\9b\189\ 3áe*Í*g MEk\13\ 5¹^9'Í\80hÊ@5õ\1c%Y,y$E\10êÇîÌ1PAÏe\ 5Å\81\92"\98\9a¢í\18¨ ç2Ì\85\b\88$¯MÖHie¿ \88k\138NFÊ\19H\9e¢ª¤Å`¡\kY\83Á6\14BFÖ`ê\ 4¨ +ËvfÈ\13äJ^Y\ 1ÑÎÀe\19\ 5³\92\16\93Ã
-\8c ¬\f[\99\9a\9d1Ða='¡¥¤\b"©D\87Q\86)\12\15ô\1câ\ 5êDNäÐ\12Å&\8b\9a4gä<\97¥\ e±¬¤Å°\ 3ÞÄâEQ\8bÁæ\8e&UÖ`°h3{²\ 6\83ÅÑ¥4²¢0\1aôØ\82Qw\9e\1a\85=G»\16Þ\8e¤Å4)u\19\865\18,²[fY\83)\16¨\8dUYQ ;Hc\81\81®½çü\9aEÒbLê\1aRXY\83Ia:´)Ë\93r§èã\8f?Ç)=#3DÊ@\8c\b/\94\89r
-i6*\88Ê)\ 4×P\e\159V\ 4\15"\ 6\1e\7f\8e\8axFf\8e\94\814\99\83iÊ)¤É¨&*§\10~È©.E\8e\15A!\89\91Ì\9f£"\9e\91\99#e &ã\15WN!)ÉÇ{\1a\9e\86äÉJi\81°\1et\92òA¨\bBìÌH\19\b\ e§x´ùA\8c\aD»J1ÄCðg\9aJQ\180R2 \97\92\¢\1c§\96À¡%Ê\93Èñd°\8e*8\ fÏ\9fãd\9e\91Ñ#e \14áÑ\95S\b\ eù\10\95\95\86§!ßL/^¿CUJ\93é\17^Æ\14·\16u\91L\1fø.\ 5_Ï_Mg÷«EÒ}I®ºÍ~±Ùïþ>ý'¤°ñ3\92\1aÑêCläHìÕÕ×Ùã~±¥ß Ôe 0Èë¤\1cÓW\10\118\99ïgü£r\8cC»ÿö\1a\13l7³\95\9f\ 2\eY¦À-\8eÃ\f¨k\8e\ 6C{'£U\881\19ïæò\96Fså8/Ãwïg\9bÙï¢
-nQ\1cÍ\8dúØ:ÿíåÝ5kØ`\84V¾\e\9fô¿¬¦ùG\94\vë\81±\19\9b\8b#\a\b±÷n¶\9d\17X-^*´o\819©ÊÃɼ u ¿ô¼å\8e\fø´Ø\1f¶\e\8e\0ë\85ï³ÕaÁ\9eD_\976çð\835*kÄ'teÐ3É\87³\ 6àU÷ z\97ã¶\ eQ>ÿ
-7ÍývÀÅKZ\86\18ÜÓ¦b;12b\9b½jg>åç¬%Mì\96\86®´á¸sø\ f\9bºb·ÆM=ý\1aLJ\9bÚ\aên}?\9ew\9b/4\ 3NTÎ\85µù²\94\ 5 K\83Üÿú\94F\ fçr©,BL:tz5>GK,ÖªÏo\16\7f.ç³\15É¡`Ô¹O\eÉ%RØ\8fÝ\92·&î@Ë°@Ã)O\8bÅÀ\11î+l(\93YÇéå·ÙæaµÜüÎ^C»\11³dÇ\8eDÃÝf¹÷ð?¾.÷\8bÝãlÎÎG\83д'\8ego\19]·\ e=v\9cxþ\17Ón\96\e\89h\¬G{©\f.7\87Ù~ÙqþBwZ4¾\8aü\\8f\ 6;qÎ\18º0çØ´\15â¿Ò\1d#¹48òãa¹ý&A\8b'\e\8dOU?פ0ºË(ÔÐKô\8b\1f¶àpÓM~lö³?yÏyÅÃ\18/âoo\b·¿±\ 4\92\19Ç\9bìò¾;ìÙ\10x!\14öG*ì»ñ\9c¿Ç±âÄ[©¿\86Î\91\1a½ÂÐpè=W\18jñZÈõ·\8bý\9bë\ f\13\1a\f5 t!Q.y\ 3Q6Aó(\8d\r7\85èäÃz|Þ,ÙÙÔÙUUH9ÝvõÀ+\84\83¯óßöUÿÉÈå²2±Zd¸V6Õ¢>®\16hn·ÝÃa\1eóÆY];X\1f±g\84£HÏ\88£Ý÷yG\rúzÁi\ 2mùK²a<öV NâÖÃ#¤a\ 6y\17:\ f\öÅ\90úðÇ\ 6Íô×å#\a)\1e\96\9e6ÿ\rÜa · ×ö¶¶¡æ\fͺ\9bív\7ftÛ\aq\rçѳv\95Æ\ 6þè
-ZÚQÕ/ÒØ5CCnºù7ß{P÷${~8Ú\19±7\ 4çL\13e¾\15Öæðíbó\83\fFª,ë\90¸Þã\94ÀþA}À#¯\97c\9a+Ù9x
-×\8f2\9fÈÕ¬évöøÐu|ÀÇ)¡jB\8eÿ|ý\96-C¢N«³\1c \8fCÂ[u´w\9aaÈÝu[®Ät#\19\8f.\9bÃúÞ\1f°q\95Q\84\ 6ðx\9a\93\7f\13¼UÛ\bl\8f\8cÚvûnÞñù\ 4\ ffÒXv¯ºõã
-g\97=\a(î\ f\8bpb=¹%2¡ØÓë3\90Â\9fk2¼\17C\0"2çáÈbÝÅ«&<ñ W
-ÉîÇn¿XSÐãê»ÌüMC\82ã\9cÜ>Q$\9c~\7f:\7f\aT·Ï\9bïý\1dÌ¿\9d\921x¢¡~~ÛgÒbõÜÿéîêo\92\84Ð=\9dýèíüå\83vRx0oR+.\11\87\81ý²;)¶g\84]50âø\00é\ eÛ¹¯\a/à\ 6DöbÎ÷ #¼öbÏ\98ä\85ã³ôÕvñ°\94\vaz\80ôrJµ7¢6 \12WÈÃ8ºípqÁ5\1ao7\85ô\9eàêÃï¤*\ f§\92É~\8bÆý°õ}/\1e\8a\95ç=|z\ 3q/\13{\102ð8ÆÔÆs\1c\93þ²\9exýåâºgÂq\94ý\82B¼Øò}\v{KBó¼½m.÷\15\r5F=õ\8f/b\ 6±Ã}üy\95÷\eÝ\9bÐX\ 3\8e\ eKï'(\17\&Ñ\ 2å~\87'Ýwy®\82wz\\e®zQ\807;\wÓ¯Qp*\17.\96nq`\94ãº-µwËG¾\ÃK1\r6êI\96¤\b×LýÓT\8bCâñÖyÚtR[\eÝ3§<o\ f\9e¼Ú¶\9dÌ9ÞF¿-f\ fþÁÜ\8bÊÕ\ 5_2\8dðÐÍl$´j\9cí\8dæt¶ä^\16on\9e÷Zì\89¬VT\14õ#¼qÓË\ah\8fÌðû /}ŧAo\96Rs`>\f}M#âáHlY\9füÕåü\eý\8e6Qu\92Kè¾ñÞnz¹o\18\81r®·\ e¼\9dÞL.I[\1cëñ\1a\87¿ÌûÿÓF\9b\9d&m\14¾+/\a©RÎüÖBo\1fù6\9e¶><.6dtï"à®[-çr?\80µ\b\ fÀûk{\12\14lÃS\80Þö\93\83ÿs¶}<,¶l\ 5½\86\1d\9f\7f]o¾tl1ÎPñê£oqyòn¤ð\8fr\1dg\8f\9er\90|ÎÖÐ\86Èc®t\¤\1aÁ\a\1c&¥Âá±u|\ 1AÎ_\,\90\18ðjÒÏ-rÁB¼\955Ü\8brV|ÎÂ'#u²\98o\17r9ræH\95\83U6\8cÔ,å\14K\11\18Ú\93§¶áÕªÛÉÃ<,Ox
-}\92-öô$\85\98\83û³^,âa\bgÈg¬¹éºo\a¾«ÆË\99úÂÁäúíDrÍÏ\rµ§M*åè8|\83\85»+éG\9esÒ_\98E\r$o#~¬v\92NÑZ(v½~\87·Aù}$ü\ 3\80\ 2ÿ\82\8bßkÆÛ\11\93Ë÷o.\93·\8bï\8bU÷\88\vÃä×ÃR^\ 6Éñ\ f>
-\14©Q\9d¶ôâÒrIÎùezññâßû\88)\8fendstream
-endobj
-520 0 obj<</Type/Page/Parent 513 0 R/Contents 521 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F5 7 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>/Annots 145 0 R>>endobj
-521 0 obj<</Filter/FlateDecode/Length 3462 >>stream
-x\ 1Í[Ûr\13I\12}÷WôÓÂ>Xôý²/\13Æ\ 6ƱÆ0H\ 3ó@ÄF#·±\16Ií\91å!øû=\99Y\95\95-Ùà\98E¶\99\bÐéÓuÉKeeeõü¹\97D1þK¢*\8d²2\9a.öâQ\8c'ú×»Wô$*ó\ 6\7f/¢¬\19%\ eÌ£ñ\9e\81\8b¨\88\a\9c\81\8b¨¬\a\9c\81\8b(\89ëQj:µ\18l\1e\8f\1aÃf%M'+F5¦S¤£Â\ 1\9a\8e\81h\98\144&¿I¤Å`³\84º\r¬Á`«aÇ\16/¢4®\ 6=[\f6mF¹é¹ÈiÂi:*1áªÆ¼\ 5Ð\9c\fÄ q:Ê\fi1Xè\ 1²r?,\8eÁ`ëjб\f\1aÓLü \f \8es\83(i1º-\132M`\r&¶¡))Ë\83\16M\89&nP\ 1:¨çd\90@Z\8cn³lTE\865\18,t6`\r\ 6Û\14\98Rh+Sª3v^ÖvÁ LÉqn
-JZ\8cnÓ\1aÞ\12\9aZ\f¶\8ca¸ÀÊ P\ e¹¨\fÊ \fê87\88\92\16ë \81\95Iø¶e
-=\17Êòº(\8a\92Ý\8c\17\82\0\1aÔ@RQ\85w\fIþYäYp\15\ 1a¶\8eK`hÿ&\91\16Ólsê\96ßeÖ`°9[MYQQ\16\eWa\10\ 6u\\12\17¤[%-F·\90º6¬(!©ØÜ"5\ 3êÖÀEÔÔ$\8ar\ 6R§<W%-\ 6[e¤÷À\1a\fVüOY\913Î\8c+0\br:\ eFÉ\11AéEâ\fD§iAC*i1X\8caY\1e2oâ\10o\ 4è\90\9eã1\ 2g \rI\81*\90\16\83Í+¬2Ã\1a\f\16ѽ4,\e%¯H@\17±\ 5¨Q<\97$<(¿I¤Åè\16\9bM\16\85¦\16\83-(R\19Ö`\9dRèY¦èæ\94ÆäE¡Å\88çU\8eµ\1fXÑoIJw«;g\10ôë8Úbâ(\90Ò\10ó¢\8d\94ÃBÎ 4t\9c\93[Ii\98Q\84÷\r\19\84\86\8eK°õ@ J\8aæy!zÍ3 \86¼\1crÇA\11h§\9c\81X*\ 5\89¯\9c\81ÐkJ»h e¦I\12bIÎ ÌÔqd<èFI\8bÉ\´\ e\ 2ËÝfX¤ªr\ 1Úç¤\9b@ZLÝ\92\9d\ 3K\89MV%¬VÎd\ 4P¯\ 6Bs\ 5ü9p\ 6B;1uÉ\9dP;\ 31^F\9b~ -\ 6\v\17H\fËÆÊ
-Z;\18\92â\93\0êÖ@\17»\ 2'íòB\96\17·c\10Ú9\8e7æL9\ 3iªÃ\86\16\83Eö\97E¡©Å`ë\12N`X\83±|\12Êj\ 2k1X$`È<uR"\fôF\96\16©\19\ 4a\1cW§¤<å\fÄ\84\92\8cô®¤Å$\fmT\81\95!\13ÉoeH\ 6aHÇ%\b\130\8a\92\16Ó \15É\19X\83iPÖQ`\r\ 6\v\8d\rÚ\1a\f\96\1dßôl0i\90òãÀZ\f\16=A¿:®\b\8b=\95³g¶9\83 ¬ã(\15A·JZ\8c)¡\1f¸}`\r\ 6\8b¤¤°¬Á\98\12ZÙ\9e-&qX\8dÚ3Ñ´\92<\96\17¥\0\9a¯\81n\8d\ 6\8eרoÇ\8b2p\ 6b®H¨k7\ 2uj1IRcY\85¦¬¾\14aDÝS\80ªÏs5å\8b\813\90\86¬aí@²\88\10\86L"21\b":NdRÎ@ì
-%\92âT9\ 3i¼j@Z\f\16Á\15SÕ¦\16\83m\12\9a«²¢\80Ôe\99ä?)\83 \0Çq6\118\ 3Ñ)\ e|\986´\98¦Ë\13
-¬Á`\91HÚA-\ 6\vÁ\vÓ³L\17á\80S\ fnÉ L×q\94Ë\96\88Uô&\91\16£[\9c@à$\815\18,ö{LIY\194\96Ü\96\ 3JÊ \fê8D`ôª\9c\81è\14§Wx\9e\92\16\83E\f\e°\ 6\83\85kØ\8e-\ 6\8bÍ
-\ 6\ f=\e\f¶¡³\92a\rÆêD \81\9a´-\8bJgOJiXT\ 1*ªç°æ*>¤Æ¬^ÞÐ)\93&\9f¯)\95\12@í\fÄt°/5\86\94\868oÑ&)o2\b\r\1d\97$´1Óɬ\14\83\1aL\1aJi>ÊJ·ÈbÉO¤[\ 6¡[ǹn\95´XºM`\1cê\87\9a\8az2I\15E=\f\883\90\87,!+½è\86ô\10\9d"û\87$JÊ\\91x\91Îe®\fÂ\\1d\97ÀX9\9aÓ\9bDZLsÝ`\r&CÓ±+´\95AQ÷\b\ 6c\10\ 6u\9c¬ÞDIVAC;®s\10þMÍX\ 1\8eÁ\8eVFÊ\ 4DÓ¤3\81RÜ]-ù%wÀ¿µ;ÇÀgëH\19\8a¯X\11Z¾âßÔ\ 4Q-ñ\fGSe\ 2BºE¹\8f2\ 1anP0N\9fÔ5ug 8NÂ\ 3\17 ¸\9a,\1a¸\0¡ø<\81g*Çòâ\91n×ü[åu\8c\94¶\94âFØdTçü[\e9\86S&e\ 2Âü°û"\ 6P\a,W\80$sFÑC¹\0Á!
-¥\81{>Ù{ö\92"M49gw\8bQ,ªòhrÆõE<\9e>\9d´\9fæ]Ô\9fG\87ýrÝ-×Wÿ\9cü\17
-\8cCöÉKÑl?¥fO\ f/ÚËu·¢wÈv ÐÉÙÓ¨\19Ñ#4\11x:a\88p\9f6îÑQ¿hgKz\8c²Yxüîíá\137$V\8a\f\89Ò\1fÎ\1f\18\9aÎùè\1dËDº§Å\rðbròæÕ\9bSê\ fe\982Í\1c±º\9còÐØ\8d\9bÊ=\9b¬ÚåU;]»ÁÃ˧í¢;£§XÚER»×ßÎ.;z\88e\9bgnú£]ý)\12\1aj?Á\11\17J¶\12',3¶ÞÊ\v}2>àye£BÕú®ûóº»bÑ\10¨\93&uBÀPóy·üÌ\92 Õª]K²¡¡"\15Á°Q§\e\92¥w\92ìàz}\ 1\7f\9cMÛ5\v\81`Ó\94N:î\eB\95Îá6ÆÞ5ô²%ùÐdÙ\9d\ 4\ew«¿Ü\12\82\87y\91Þ¶WW_û\15»#Vq\93x\8f\1ewlÝ\ 4)Nã\t×òIÿEæ,\88\qÃ\82²\1e\7fä\9bã\83×ì¯X¶µ_\8b'ýç~IOqhªë\ìy?òØQ¼l\b¬\9b²\15w3â-²\9d\9f?\ 2ár1\\8a*þÀp"Z\12ÂèGüy}p|2>y3ùøñô\ 5ý\15\ 2k\92;\1f´\9aÛÙï¢\90Yc\13Ý\98ôv$üíº[}s\8aÆÑÈE\85ó\9e7&$NE¥Ëêè\90ÞãXîâèÎ$ø~ÇN>Dh\13æQ{Ùr·ï.\eÔ\17Kì\8d¼\v~\7f¼\9d²EÉÆj\1a+LÉ¢\18÷\1a¿{?~ÏúGy©p\8b=ú\9bÛ1R=ܵܧäE%\1eI·\11\ 3\97,GÛ.yêÂ4ò²ÌK:¾hW\92Jàü¯éÈ\8båõ\82}\12%§ä^\ 5Úp '\1f*\ 3\eÒmûä\8dÒݸ\8f½ºA\ fÇËó\9e%Æ\ 5jê2\94\8d¹ì\1a\16µ³å`ùU\9b\1e{¸úv¹î?¯ÚË\8b\19'\92TiRË]ÍÎÄ\9cñ(¯|®ÛsÄG\1d=lÙ.ýÅ!Twñ\90þ\ eÒ4\93äÌd_,±#!¯ø¹\vÜI\9fâzg`jÜ¢o\85\9f£î|¶\9c1\1dÎËñ\11\ 1\9cÿçNçï\18Û\89PÑí² ¸6Ù\92àíª_÷Ó~N\16Ç)åQL\9fD.\1aöA\14«6DØÎ\e\ fûÅÂ\1fÆò{Íún³\8d\9b<\95\91\ 6³¯7\97Ðøø\88\1dÇf\87í\92óZ¸_\b\8eïü{¨s\94n»¾mðûzî-\ 4¯Ú\10r{\9d|èæóý/Ëþë\92¬\8aBVê\ f\90ª\ 1Ô2]Þ{_\ 2è8e,ñ\ e\85Þ\rI¶×Ëí\92ÀFcê\a¥à\a\8aÛ£\92\ fȶ \81\bIÖÁ\9c¾[\92@¹\91¦nÓ\91vñ©¥g¸òJr\7fª~»\9aá\94¹üL\ 4\15p¼/FǨ\87¬\96í\9c½\19ßM¨ëª\92ïáG\99Ѽ\9e½Ôâ\b}\85d\9d\13b:ßôGÿ\83OWë\95+w`³y\fÁÛ*J$ÚÇ\821\8e )\9c_z)¬Y E\1aûó0\9bå¼\9dJe\ 3\ 6Ë<³æ$\ 3;q\16û¥ø¾]Íúk¶ ê\7fáXð¼\9d~!Å¢²\9b\15Þ\13ºå\19¿\89ÃB\ 5\15ïrÏsJÀÅbØÌ \ 3·\11\ftÀÓÌ\8dÃâðsÍÂãë\ 6-\1fL\8e\9eK\1d\8d\ e\bÞ·Úïó·\97\ e5è\rWu\85\ 3/ ªT(Q\1d\1fñÚ«B}ç\1fô``ÈÃù\fû!ëÂ\b\18\1d¶Ó\v·v±Ó\87të\86¤\8c\1dÊÕ]P1ÔJ\19%§«EK \ fuO_eüÔcF)çÚ\14w\12C\87w\85\ 6¯\8b\ f³åYÿU\82\8dÿ\9cN\9e¥ÿ¦\99¡\92\16RÌÛ¤\11\8dòë8^¨k\9föëÙ¹?1×ÕNw%\11ØDì\14åpJ\1a~\18±%\90ý0b\7f8>\1d³\84é(ÖÂÒ0Z#À?Ð)¹ä\83\86\rØ\999rÀ§7¢µ
-\83z\98\9aëe;\9b÷¾H\88+\9ff·Ñè\8e±Á\8b\16î\ 6`Ñ;\19Vb»1ìäB\ eR¸\19S\vþ~9í\17n1Ó\97WZãö\ 5\11\9cVtÕ\8e¿];>Fc3×>î(ÈÿûZÉ\89¼µ1\8a\ez(Áç6\e6\1ewÓëÕl-ëÏ\86)¹\10\19\ 4:\14½É·¡« ì\93e÷\95\1e¢ \17\17¾²\ 5<á\87Ø\1cë\a¨\83\8b\12ö·ò\11|9Ä\89\97O\18£ñ\1aé\7f;ï\97,\18,«\89Tt¾ê¥\14\82ýM«&¿\9f\1eÿá\ 4«°vv¹\rßî\b\95Ë\9fáá6jãKª¡p¿B¶y' \ 6ÊDZ*¸ñÄ\83¤E\12\f\©éuÓ\1d}À»\0\16\86\167ýÂÀ§\b÷rÈõJÁÅîP)\eÛúIû[\89N8Y}\18\13ÞnÜ\91\13\84nô7\ 5\91¥K_;û´ðàòrN·P>AÀõÛ\ 39¥Jäæ\8foåía\1c\81\a\ 2±\7fÚù{/±×0Ã$\1a\9fh<Ðn)\12Ur :,D²4²Ú~$ÍëþìÚ-B\9c\8e\1e\85,ôAÀе6Ò½\9b¬bä°Ù¬\9aýa~8ëTñ`\8bC\86µíi\97ÝtÖJÝ\r¼Ft\91ë_\14Ô\a\97ÿWíâ?\97¸÷<ûD\14>¹È²\9df¦^\7fN"úúhcýøû\18ëq4ËVN\86\8f§\9aèD¨íù\11§\9aáæôº[ôrOFË"\98£]¶\9f;ª/²Úñ-¤¯yx\ 5Ýã¿Þ\16i2p/©Ìk\ e1Á7\ eþ\9cÇW¶\8flK©ø\8b\ 4sæÁ\aPwÊ\8c%À\99Ìø¤]¾n\97¼TÐ\85V=\>\91âæ¡ö'Æ\e¾²\19|E\80\ 3µÞR¼XNéj#ìa\9eÙ\89©«\8c\ 40 2Ê7\83p\98m¦ÈØ\90V\88âS\9dá\83ﱪ\18\11f\1f\87æ\90âã£\96áRûµ\97\fÝ&²g½K÷ð!·^\ 4ÍxÑá\93:¿æ"|õñå\17Ò\17J7÷\14\0U¶\1fÞrøÞ\91?ÆÂé*Ïñ¿iò\aàø\16\vÛÖó\83è¨û«\9b÷\97Hò¢W×îR,Ã7©\rù|\157ôÕÖl6#¡^Lö~Ûû\1f\8c8\1dÇendstream
-endobj
-522 0 obj<</Type/Page/Parent 513 0 R/Contents 523 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F5 7 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>/Annots 148 0 R>>endobj
-523 0 obj<</Filter/FlateDecode/Length 385 >>stream
-x\ 1ÅSËr\82@\10¼ó\15s4\aÇ}²ìQ\8dz\89©$ò\ 3¨X\9a\120bLåï3³"µ~A
-ª»çÙ,_\89\ 4A·\ 4§@§°©\12\81\82\98þñ±`\ 6RãéY\81ö(;p\84U\12Á
-¬Å4Ò"X\81÷¨#-\82\15Hé1\8bÄ\18\93ªÝ£\1aaR3û¨F¸\ 2e$º¨²Ny\15Í)4nÖ\ 3^%\82\158\87¾\vd-\82<\90ä]B\15\16cLªÉ¸e¯Nòd4÷ \ 4ä;\90\96\´\90:\ 3ù6\98Lôf\90\17ëc Í\ e¦M})ëKû\94\7fR\96%g8kØ¥\r\15§\r¦ûât)Ï\1cÃöS=*²\1dÐ\È\9cLñμ\14õ²¨\994\1a\9dÐ]`Qo\99S\ 2M¦:î5\ f¹d\89ò\1dõV´íOs\ e±\86üp|T¸Ñ¬Þ\9c\7fO\97C\13J\8fæ¦\9f\93\ e\89ó4¯FÅ\91ô¾Í¤îmò}\19úÐ\a·÷)Ûj}âV¡\91ÕhúF»Ãñ\16n\90-\vÝñ\7f.gxîÑ<ëvÕ
-Sï鯹mº\1a/'cx.¯å±9\95ç\16\16ß\87m\98]\v\81Ú\92)NxöäpåB³<yOþ\09\0ÄPendstream
-endobj
-524 0 obj<</Type/Page/Parent 513 0 R/Contents 525 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-525 0 obj<</Filter/FlateDecode/Length 155 >>stream
+461 0 obj<</Type/Page/Parent 458 0 R/Contents 462 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F5 6 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>/Annots 54 0 R>>endobj
+462 0 obj<</Filter/FlateDecode/Length 2062 >>stream
+x\ 1ÕZÛnÔH\10}ÏWø\11$ƸÝn_\1es!,\12 lf\96'$4\17'\99Õ\Ø\19\ f\v\7f¿§ªoå\0R\96\8c4\ 3HI\8e\8f«\U]]]Ýö?'*Éð_%U\9eè2\99.O²4Ã\95ðãæ5]IÊ¢ÁÏe¢\9b´r`\91\fO\ 4\&M\91\16\82\13p\99¨Ü¤\8d uIJµIk(Lª\1c ¥\ 2B0ËI\90ï$\92\8dÉ\1a<i\99\14\19Q\f<ejÍv\16\15TZ@\94\80ËÄ\90+\91\13\90\1eW¤F\90\12\83\85\1e)*1ز\82YQ±Ä`\9b
+¡\13¬ÀË$7Yï¹\12\83ûVqôLÙpôê\9c\9eÊ\80\µ\9c)Ó\12\11¢è\95\89aD¤ÄäN\99jÁZÑBspKC\1c\ 3\92\14\90Ôr\b\ 3I\83b\14Å\ 6\19Âæ0`s"D\86\98pc45ÓìF\93\91\e\f\ 2Wà¢w#K,"\92Üð\18Öät\97`\ 5\ 6k4\1c\89,;YT4TˤVi\9eX@z\ 5$'+\18\16I+X\16\90ð\82\f¢ ãlt\8a@ZA£8<¥Bb\16\fHP@\17\9eÈQT\8b¼°\11¨É \ 6\1c\80\b\91Ï\8aÜ\ f\9c\80P©\91V\91\13\90âV\87'\90Rk§R\1c\19¤\f\9cg@\9c\80P\9a\91\ f\81\13\90\94RúD\92\95ê¦æ¨a(\14J\b\ 1V\1a!\85\9b"\13I\89Á"\8c`Ú\9aò \ 1`=\f¢ZÇ)Ä¥It %\86ZøU\bÖª\14g¤UË ªu\9cÊ)¯u %&µ\9a\1e\1aX«ÖÔ<\94\1cJÍ DÖB
+\ 2U;A\16pP\17\86\87\ 4\ 5U;À\82Ì!.\94\8f\r\87\87Aä\94Ù
+òÐÂ\88HÊ«\1c\ 24³4¥³\ 5D È:ý\8dA¬,ùq<És\ 6,FÁ°\10Õ¼\82\v\82£J\9f# 4RU\8dÈZ@r\ 2Âw\ ei$9h9V\18Z"x,, A\ 1¡\94}à\eYi\84P\8aB\ 4k\ 2i\95æ¶:¢fÂ4\ 6$( &x\86`GN@(Õ\94ã\9144\12¹²u\93\12Ì#6\95a\96qÜÈÇ*É\19\ 5RÕ¶rÚrlQ$+[\1e¤b\14ÉÒÕGT<\8dõ\87P$±XQ\8d£iÞðÒU\b\92G\9aH\9a\0\8aQ\94Ìm²\89£\18E\92Ë"$\vÊ [$\ 3\89\14åz\8d\1a\94S? ÌAmek\8a\1a\11`\10¤J[\1d\94¦ºÂ PÆÎp\95WÐÅ P\85\9d¥ÊPò1\b\14<f3д`ð \10u6:yy \9c%£[LQ\f¾IʪHF3îwpyúl4\9e,Úd}\9b\9c¯W]»ê¶ÏG\7fCÊ \91HjàÄ\ 69\89=\e\9e^\9d\9dÒ\1dÔ\aåÔJábrÑ~i\17ëÏí\86\85\91\1ceí©×»ù¬%\81¼IMS[\81ôÐÿ\94u\12y`\9d¬k8ª1\82\ f\Tªt.\8eÚñ\92ÝÀ*Q\17Gâ\86\ f£s'\8eY\96'\ 3Îsøs:Ùv\9bñ´ãQC*\9a#3Þ;ñàwNö\ e4\e\1c|¹hoç«y7_¯\88¥ÞÔ¸\94B\ 6Ó%,Ñ\8dÒnÌ®ÛîìÍ»!ßjR\937îúûͺ[O×\v&0\97ü\18\8fW3º\84ÒRÔ¹×1^rúb¦¢¦º\8b7ív½Øy30\1dëÒë¸ZÏZ\9e\ 5X0\1aã,yàÚ¯BCÖ½¼\fY\9b#\0&&îõ«Qp÷Ø2Ô»Ì.\f\8a"Z}vóîôâüt8"ç°¾\96aÊÉáCG{ðYgmW*\8bÆ_\9f]sz¡¸i]ù\94\11i\97§ªÜo\12øHþêïÒ&\91¨\15\9cD¾Z\fÇËÉ\98nAþêÆÕ\8aät3½\9fwí´Ûmx6 \89×æ\b\vIõ`\86\18ì@Å\fy³ê6ëÙn*fn~\84^¤)û1@a\81yaaºÚ-ºyw¿idzùêÎN\17\97r®r),üÚMý$\8ed\16ëÓ¯fÍ\13å¬?J¡
+G\7fFÒ\15tì¡\9dØ.'¶\10£õv%÷\89Ïß\97¸õ\ 3»\9cǸ±:Z7jJ\9eAß\8dÕdi\83\8eþ3,ª\17ív~Çk-ÊAÙ¸Eq_ÑÜ\87\1evE´«ØïÓ\8c÷åltÏõ
+\13#Öçm(qXU2ß?\¼:ûë5Å\85\1aë°\9co¿m»\96\e?ì\80B\ 3°\ fÃ\9f¢£yPæp\1e!ËÜuû/Ý\80>¦*½{ïvÝç\9dí\ 1¥×Ão«nü\95îÖ8\8cÀÖ\80\eú§Ø¶\1fYöp\803\fY\0ý`â¤\13\e\19·õ aûøìãs\1e:l}C#6\9enÖÞ±ú\bª¼ÊÈ\9aA\83¢Ö«\1e6A¿óéôâ»\85\89ZÕßùE=\879`yT¼ë\18(ÌG9ôöÃ[ï\10Î\1d4z@;\82W~ àPfܾq?Yô?µ\ 4\8fzËÔ\8ffÓånÅM\ 4wú´téã*\8dÊî\9e
+±\9dMîºökç\87\80öïG0)ú#ä̶¶\85¾\a\96ßÏ6Áp×f÷%\ f\8a¼ÙUìmn×\9bå¸û4k'»»O2îuC³å UÖ\9a+ÖL\85×\1a4\85ý¢y¾ö\r&\9d\92ùÔN\86»»»vK½3§=NuÃòrÐð÷\1f®´-³*ú\13;a¹§Áf ݬÆ\v;\87\8b´>Æ\r\rù¦\1eîûÑ¡È\8a{~?¦ó\9dvÃK \8e[\8dß\89þ\81}ÁÂí\15pxY4G²\15µ\1e=fy_¹V\ 6dz\95_\ 1o{Å\17½xyÀUðAòÙ3\82\8a\8bk(`¼Âq\9aÑ¡PíO\91æÜXãÄ*6¡\93o]»ÞÌÚMzO\83\89Cå}\9f!õí}$R|h0ÀË\8b^Þ}8Å\8a>Ùݾø¼ÞÚ\ 6\fï\83\ f]ݼKÎfkQ\18\8a÷¿¡ÍÃsiô\8b/ã\85\rö\81·c.À°"Dw(\rýM2âÍ\ fl¦o\ f\ eºDû$Æé!¯fx³.ö\f\14æá\83\99WQÝ?\ 6£}`{BfP\94¿3\99¾ÃÁ\v\8aàìaþð\ 6\8bcÝa/\91ã\8c;\86æÍ&\84µ$\84wØËbapyðLváÉ\92ho?\85£Áx\83zØ4Vö\88ÏÚ\11íí篰÷°û>o¨Á7½ÜµE\18ß\97\1dCmpÖ²5!´7½Ôuö\1eM1s\a¾ýbvó³ú\80\ fÜ\ e\19g\9f\r½·\827?«\rG2Õ^^Öî-<Î\7f\9a\ 2\9f7¢{\8eß\1a\88o\v\92ð-\81Îð\19%ξ\ 6UÖÐ
+2§EòÕèäÏ\93ÿ\0\87í\7f\8aendstream
+endobj
+463 0 obj<</Type/Page/Parent 458 0 R/Contents 464 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F5 6 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>/Annots 99 0 R>>endobj
+464 0 obj<</Filter/FlateDecode/Length 2547 >>stream
+x\ 1ÕZÛr\e7\12}×WÌÛf\1f8\1e`0·GY\8a\13UɲlÒµÏ\145\8a¹&9Z^\9cøïsNãJ\89.U¥\12\91kWÙ<ÓÓ@ßÐh4æ\7fg*+ðWe\8dÎÊ:\9b-Ï\8a¼À\93ðϧ_ø$«M\87\7f\97Y©sãÀ"\e\9f%p\995MÞ¥´\9a|e\95·à«Ú¼v\80| \fª(8¨¼Ib\8aA-Ë\¥Ô\ 4\83Z\95û\ 3\eNª5\1er`M\89\ 4ɬB,:̶ÌÚ\924\ 1¤%\10\8cªÈ«\84XR\95ª«sMU:üg\81\f\1a¡\9d±L\88\94ÀcPu\8d©#+\r[Õ\9d\18Hµ|Q\80Ø Â%\94\87:\91\96@¨¡Â ä³\92Vµè\8fÑ0\81\0Ò\12hU\84\1a\81XÑ6\95)Å6\9d\81m, c\ 2©b½GL1¨u±GµÃ\96\85XÎ\8e# \ eëhn\98@L1-G+U\91\9a`P;±d ÚIU\ 3\8d\10\95\86î\12ÀI\13\bÆÒÐ!\81\98bêÒ ò"ÕÚ¶(Å_5M\ à°2¥\81\1c\8c;ø¤Ê, -\81Ô¤Ì\9b\84HÉMM\19\97\99Ñ\18Ú\ 2ò%\10QgÈ&/ºù<\94øð\83\90\86øð\10²0\90"_\ 2)\8b\82¼\91(
+\9a\8a\11µÌ \8bÉ,à \96V6¢|Ëø0\ 2"M\eQ\1e\vRA\13\ 2\114BLX\98=¢\1dT) º\96©Å\b\b\83\96]+\96i4´· ÒÚJ\ 4Åzl³R\80L\18!\94ÐðD¤É|e£D\89\86ql\ 1ù\12HAK2Ê\9bqBÉZâ\8a2+\ 5È\84\ 6\16¶\10\13R¦H³\13\9aJ\14lJ¾(@&\8c\90®hÉ\18\88\f\8bR¹\9cÛ\90O\80È\12!¢\9b\11\17i ¤\12\15¬\1d\89)¶3¦¬\9cQÃ^\928+Ìh\ 1gT\11Bû\bDû\b%Øü ")Ó¦nl¾\95x²@ø\98o4V\11\ 3\1fQÙ:\10i\b$Æ!\1c\v\9a\808fi\93f\10\16Z\0i \ 4_A\1d\ 2-\81Ô½Ùc\94Õ«\91\9d©<äÅ \ 2¢0Ê&F\ 5S¨L\v\8aDì_Ô\ 2±ZgZ@\90Tµ.\v1\80- MâÙÓ$f"-\81\90\14»b\9d0¦\18Tø[¥Ô\ 4\83
+o\9a\84*Z*D!7d¸\ 3\ 2 @ \ 4#\12b\99\10-#2»$7ú\83iÞoúQ\99ÆF8ýaA°\ es*\83Ä\v>\ 1b\81\bÅr]B\83!=\840È\19\1840¦\18T¬\eÿ.\87M1¨\15£:òZE\90õ$°\18\97L\81\85$ª6B0b/\81a\ 31Å "\rÃ)\91\9a`P[&\96Hµ\93\166sZ+\b\88Vp4U0\11ª@L1EÒ°c¤Ê°ØQ%diLù\1d\ 6u\14®ù"\92\12\88\11\11ã*¡E\bZŸ\rCÊdØÇX8\89
+ò;Læ(JW\101\90\12\88\ 1±8«\84\16á\12k\86A\14ød²Ú%~j&¿Ãd\8eb\13H ¤¸±\ 5\9a\f\88¼åÊ\ 1\14\12ü\1d\ 6t\14ÖjØÒ=I\98\8cÛ*(\85ü\ eL\8e¢°_%¤\ 4R
+Ù{ù\ 2Ùd@\84kp\98ü\ e\ 3:\8a\1d!\90\12\88\ 1±= ir\b²½\9d\9c½y×ÁzÙä\ 1\ eÃf\81\9aµ1Ùä^êw<\9eý4\99Þ-úlxÈ.\86Õ¶_m7ÿ\9eü\17\\15Ö8¹F\8em¤ÉöÓxº¼\9bò\rÄZÙU8\18àav\ 5Îõjºp¼\bQáEQ\8a GÈ\85\9a¯]\9fß\90\93Å6\1e[Î÷ÓÕô·~Íç´\971îy:OÝi÷ôüö\8ao²\12®:û,?Æ\1fÕP\8cQ× `\83z·ÓõtÙÃ\10b\ 5Ó\1eQ¾ç6q\12Cª ï§~»[¯Ä#]Þ\19oãoÓÅ®\97§u^\16'¤\85jÅè,Ï\13«_\f÷VZ\ 4\99æQ\95ñ8û\ 2_Ìà
+ràÄRT>®¶\8cvÑ\ e\e\11Æ\91÷\9f\9bëU\9f¨\8e\ 2¥K\ ekm\84\++nòEäeÌ\97\8dÓo³¼ËgÃêAÔCF\r\8a?Ìv
+ÌÞ£¯ªËË\93éÂjë\93Ä\bk>ÄäuÿÇ|6]ð\r$\98®u\8b<;Grù¾\99ËÊBά\90_NÁsV[«Ñ\b\ 5h\12\97¿NW÷\8bùê7q\11N¼Þ\eÈ´|\84M¡S¥sç\7f¾Ì·ýæq:\13OW8ãùÌú²9ÿî7\9c2,\ 3\9a¿¨Îõ|e\97\18<\18täî2_í¦Ûù 9\aÕ\83i]Îù»uøÑx^7ô\87Ò\14\12äEEW{\9f<\95\17å¬.<ñãn¾þj\83±ÈÛÖ%\97\1fMûO=×\8a\914bç#Ugü}µ\9dþ!K\b2\9fF\8a;h\82 ÿ\9eøçwÃnKéq\ 2óUÂ#·ÖM>\13¥pø:\11¥´¦@{\89[\89.>wßôÛ·W\1fÆ|\v\9a¦ñél.K\809\0\99ÞnYRT¡¢õ*\7f^ÍÅ\87(\98˺ö\89bX/îÅ\bXZå\89ä@]Z+\84\84\8eóx\1a\8f(\ e×Ãýn\16V>N)'âÀ4,\1a#dßTøÏ\e\16¶Ë^\16»©O&ôRÉóÜÉnå\v\9bé;_\f I©|\b}ø}\85
+õËüQ\82\12]\95ce¯}\r\ 2rª ä\83\1e·ÓÍæ÷a}o}p¤d\e\ 4<üC\eÚs¿\96\19f_]\ 1\80\16Í©ä¬çâ;Ñ\8cÁè\97ýê;UB3ºÕ>xÞ£Ø\16/àô¬p\8e<\9d\1a̪åT©\92Âe²\9e>Þ\ f\83= \ eóY3û|u)ª Á\16õ1\ f\93\a<RI0í\81a-\9bâÞ1`µ[Þ¹ã&º\98Æ×ZÏ\a<Ö\13m\15A\97Ö\92·ëa;Ì\ 6[å79:¾n{»\18\96\8f\v\9c\0¶\12y¨§Ms\12{\9cUco\9f\97\9d \9eÑpÚôK=Uh\13º%èäû³t¶ù¾ÙöKº\18-ËJ¹#v\86s\8fm kX\9b\93Ø!µís°\rH\a\86²fBáÑè\8e®»\1c\96S[Õ\184Tµ÷è§Û\8b\7fÙ\84\81ÚÚ·q\8e\15\8d\açÕîð\1dª\17\c'éãÿ¥x\11-Fl\81'Â\8f\87Ýzæ\12¶PN-_cQH¦{"÷ź¿\9fÛF$6\9a\93X ObÇɽ\1f+7\ 3NñÔ\a[J\1d\ e\92è\ 3ÈjAO¶ôÅþx»F=¼[\87²ÒTîhùd\9eW\86N-Þ=%a\14õ\92sóÉ\ 5\11\8dä$Gµ\92.\80\9f±Cöké9\88c\8eÚ4Þ÷ei\ fï\90(\94\O¢\82\17Ó§ek'3Z!It¼\1f#É3Âq\93]·Näløf\9b¯höëη-Q\8b6èËòml\13µöý\94\e\9c°ì¹6Ý\10oç\8f¶õ\89«ÜÆ\8d±oÄ\7f\f\19×ZÁ\aOÁ=\87\15¥\90~Ñ\17õÉxÌ)ÀûîÄW¿öÓ{ë\97\13Í«F:*#\91.\18~2\9dK¨NƺÏâÎÔ\8ciÜ\95Åpq«Bã\16ÝWCoçv/À§/¸¨sEï\erâÆ<\94\87\aß:\9f}å{øÄ£_¹kº¯¬Ó\14÷¾i`ÝL®Çç\14\10§Èpñ\90ýõõÞ©×]ï9\8e\1aÖ\83¸ÖO\9cè´¢\13\83\17?<öö֬ΫÆ\9f\8co\87Å|f\ fÌmtî¾é^\19\19w_V½¤ÐÇ]¿\16Ñùy\é\83õjõ0Ð$ü\86á\ajVNûWVL¦sÚñKÐtÇ?ä0_\ 5ØÛ\15|´Vø»ÎÉz\87£\98ÝypÛ\89¾\81l¸\99=ÍHZGßV«Wët\18[Ç+\14\96éò:¤ÕÁ0\1c÷³u/û+¾\ 1\b9æ\18þ s:\95\9a\17Ãðb1lì½\11\8eÐþF3\fsÜ\1fN\89ôúü\90O®\87áëN:«(\86:ß¼ÈÆW\97cYJG\/Ö~\95=oáSæ\97Âë\aª°R\93uqü\ 2Âêòæ\1d¾\19³_\9bpëÁ\aÛò5!?U9\7fÿö<»ì¿õ\8bá\11m²ì\97ÝÜ~+PâÛM\83\1dfÔ\14\1d¿\17\98Ïé\9d\9f'g\1fÏþ\ 4$\a\85\ 4endstream
+endobj
+465 0 obj<</Type/Page/Parent 458 0 R/Contents 466 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F5 6 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>/Annots 128 0 R>>endobj
+466 0 obj<</Filter/FlateDecode/Length 2020 >>stream
+x\ 1ÍYMsÓH\10½çWè´Ë\1e"4\1a\8d>\8e\89\ 3©Ô\86\10b\17\¸\bGN´ØVP\9c¥ø÷ûºç«\r ¡¶*\ el\15ËÓ\9bîéîééé\19\7fÙSI\86ÿTRå\89.\93ùj/K3| \7f]\1cÓ\97¤,\1aü½J\94Iµ\ 3Ëdº'à*1Û\9c\80«¤®\83\12\92Ó%AmÒ\1a:\e\936\ e\10' æSyZ Rb²F\939¬Ç\9a\131غ\82~Á
+¼Jr\95¥J°¦ \93ò<-aRU\90$\ 3Ò+ \99¤ÃH\9eT`°eF&\ 5Q«6kÒ"¨e\10Õ:NiM\9e\ 6Rb¨-r\9a4°¬Ö4e\9a{µ\16\ 4µ\9eS\19\8d\89¤ÄPkÔ6+0ùB«\16eí¤5¹ïBd\18ÄI\1d§2\ 5\7f#)1Ôê\1cÑ\8d¬U[6\9c\f\1cjà ªu\9cS\13H\89Im\81\0FQÎ1cJ^PUÕd\11#Òkç,4/KR\93\18\ 6Ä \88ä¬\90%\91\13\103æ\1c½ h\95êÌ.
+%\9faÀ\8eD\bA¬£\16¤5UU6°5 2`Á\b!¨(\91")1Xl\87F²\ 2\838\13\82bkm¦9ì\88)$\19Ф\ 2r\b\10×À!\ 4\1eBi^\ 6D\82¬´h2\ e:k± (õ\1c\9dN")1©¥¢#X\81Á\16
+\8b\12Y\ e_QU¼\98M\83Å´\80&\150¨å\91Dºi\9c¤Ò
+A\88¢\12Ó¤´f\82\15\18,j\8b\9cVbÔ\1aÔÂJÈÚ(\95\ 5'\8aBd!Ê(\86\10\e\91vYÃQb\109M¹\849\11BheD¤\rC^pì\rmÝ\82\ 1\vF\88K{"r\ 2\92Rª\80\91´¦*ÚÏ ñ\7f\98Ê\88´J\f\16\ 6 B\81eQÝÔÖK\16µ(\8a\ 6VSp#K«¯+Ån¢Z\14\ e°\97\11r\11\82\18\ f$\ eÅÃC2\96*J$9<\1aqá\ 2O\a\85\ 5¬\94Î#]\18ö\12ê\8c\ 3¬4BRÊ\82<\92H\89Ár¼\1ef\ 5\ 6[æ\b\85`\ 5\ 6Ë\19$X\81íi\85(\84y3\b\rÕ\7fC\99¯\19Ь\ 2òÁÛ\b\ eç°\87ä\fíú(h\95â#e\1eª \8ce@J\ 5DVæ\14¡À H1`/\ 3)1Å@!þQTb°\15m\ 5Á
+\8c\18ðQ\16Y\89ÁB³\94µÎd¶Å@õ\873\fÈ\19\ 1)
+9ªI$%\ 6[P+ X\81Á",[²\ 2Ó¢Ñ^\8a²\94Õye[\ 1Îj\vÈ"\ 1Wè¯àIä\ 4$k£\16\16¤ÌÍKÛ\b`¤r\808\ 1!ÈeÆ\8e$òp¶÷òu\83 &³\ 5N\ e,ºIʪHf\97ÜýáóüŬý´ì\92a\91L\86õ¦[onÿ\9aý\ 3)\ 3+Hjß\89íç$öâlF4ZB\98\8e\9e\12_\92£aÕökú\ÀìÜ\7f¾8\9füét\15A\17*@VC§ÆR\91¶W³Ó·ÇoÏH\18ÖÕ\95v:Ç\9b9Ï\83\83§©Ü·ÙØ®oÛùÆÍTæ~ðY»ê.é+\9a\ 3£j7ü¼¿éè#ÎïB;£Ò'þc\14Í\88\90!>&ºy:=`K²´
+Q»è¾Üu·ì\8c®SÕäÎìÉu»\vë+¶½\80ÿ^â\89M¿G½É7ØRÕ#Þ\1cÜm®\91;ý¼Ý°á¨ÀMé<b-p¤¤k\b\16ý\9e\99vóÉùS\97Øy!\ 5ï[\9bi7þÛ\8dä<º\85ÂûqÞÞÞ~\1dFÎ4\14\88Fùü\9bv¼\8c
+\97\8bÆeßn\1c\8a³\18m\97
+\aðc\897=xÃÉ\88(Ô~k\9d\ eW\ 3ï`´²u]<ó:Á-S°?TÃ\1f[«\aÜY,xý~/\7fè.'üù\88?o\ eNN§§og\1f?¢\18â¯X\10\15Ê)Fï|Ï\18cs\89Îxaì»»nüÆ\99\83N¤öU~1ð>Á\81`ª°Q\8e&<\8e
+ï3Ø\1fw\85ø\97s\8a\8fÙ°÷ýVÀõHÿ°\15ò&-K·Å\85¢çû§)y]¸s\8d.\¼\9f¾çpãñÀ\1f\15Éÿ<*ÑÏáj½û\8cCîØ\94#\ 3bi>su\15í\9d¯IÉôº\1dí±\8e\ejh\r^ïV\9cr¸\9c¨çpàǬp.UÙ#þÜ{Ô\1c;Ïq\8fÑ®\1a''ëÅÀ>f©É]·ðã´;úbj»`\19u±!\19'ã·\9bÍp5¶7×=÷o%ZýÂï¬ÛþÒ®\\96\16\95ë\ 5Ðw\92"\1c[ñ8u-&ªL8ac\8b¹Õ+\89®£·çW\89VE=Ñùå}Æk\83¬\8bGÝ¢_÷\e\18ÀÝnñL\1dÀ\ 3\vï\8c\86Ua\95ÎÇa3Ì\87%\ 5Þ\97½\a¤\9fã³i8µ`Y°x2¬Vþf\82Ûñs\1c\8a?\8b\84³\18É.óbzrÄ á÷jÒ®¹uTrS_øAxV/Ýùù³©vÈ9¯dæ|è\96ËýÏëá+÷\8ax\820¡\ 5ö~à±Õí÷\1d\9aúýTeÆ)T«\98B\ f\9b\8e%\98Òp<rú¥ú^ßîpÉ\17HyûÆË\1f]¾`\1dß¿§íêSË;7Ou㺫ä|ìqùZ_\11\81wÓÚ§\12\ e\8dM7®Û¥-Mx\8bÜÕMøÑ\90\95\9a\8c}ù:¼\rÔôÞ\14¶üÁ§ÛÍè.ûøé\a!Øy\1fü¨\v<Àú±om\fæË\ 5\ 1U\84\8dÂ\v²hçöz\8f¥Ò~\vmøtÇIH/$öeå};öÃ\1d¯\1dÒ 6Ø\87íü3§,ª\86ñ9Ð/y$Þ;ª]UHç<=éÉÒÇÞ³\81ð&$).\10w춼TÏ\8e\ eí+\11µÛÅï²Êίí\94ÄË\f\9eeN\8ex\93á\14ò-Ì\1fôakÝ&Ë\1eÇ\15\a@x\95LÚùµÛ¤x
+\8fÝÍ==\10GÐ=Aà}1¼\ eQ\138®Zê6H½Á\9ey\9a\86½´\97À\1c\97@ùöó¡__\ e_m5Á\8bª¿\1f%g³\97ùßd\11~à\8c\9dÜC^ØHòp4ì!\83Ï\86M¿à+&=CT»9G¬£¢ââA÷±rûáälÊÖã÷Úð\86²]jñû©\7f\89üµ:òÄ£JnØE¹Ý¾Fz\8fr<Eâ\8dØ\96\9f×m¿\1cüC\18~\8eò;ù\89MýUõÞ¥Ú½.ÓO\\r~Û£\ 3\90Þ\19q»?<H\8eº\7f»åpÓ\8d·Éñ\9d»\81è,K\eJë*khdß÷´\9c¯f{ïöþ\ 3±dÕÔendstream
+endobj
+467 0 obj<</Type/Page/Parent 458 0 R/Contents 468 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+468 0 obj<</Filter/FlateDecode/Length 155 >>stream
x\ 1}\8e»\ eÂ0\fE÷|Å\1da ØiHÃØ\8aÇÄ\80ð\ f 6\95\8a¨\80"ø~\Ú\89\ 1Y\96,ßã#?\f\83´\18¹C\16Pu\86,!d+ëác®³Óî\13\9a1pdÝoP\8aYîÖp\ 4iÔ\15ò\b©¡\1eÒM5;\15\87²À&½ÓõvOý\13ûW[§¹\¾WìÇ«EÆj\96zÂ%\9d»\11\89`\9e\90à\83\1dÜ\7f\94>\92\8dÑë\e\8añ`Ø\8a9\9a\ fÒ°7~endstream
endobj
-526 0 obj<</Type/Page/Parent 513 0 R/Contents 527 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F7 9 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>/Annots 191 0 R>>endobj
-527 0 obj<</Filter/FlateDecode/Length 1735 >>stream
-x\ 1\8dWÛnÛF\10}÷WÌ[\1d ¦ER¼ÈOõ%q\rØ\8ek)y
-\10PÒJbJrUriÇ\7fß3³\14¹\92Ò¤0`ûèÌ\9c¹ìì\90úçħ\11~|J\ 2
-cZ\94'#o\84Oú_Ï·'qâE\14¥\81\97RI~â{I\87
-\9a\9e\ 4IäMz6\8c\ 3oì°Ð¡(äßð\8c|/ì\10{¦^@ãÉ\bö%E\91\17w\80)\a\96\14Ç\b`\r\99s 4G)²\1aH\17sD\8eì°\ e\ 6\eO\90\8fÃ:\18ì$A\9d\ eëà\92\821÷d`]\f6\99ì\97\13°q\92 à\92&\13®[\80\94*\<¶-ò\13NX\10\93¾\83¹\1c)¶g#qEM|.8\1e\9fÆ\ 2ØÓ\81p\fXÞ!9\830A\8e%\8dGÜ]\ 1ìç@¤\9ar\vzÎÆ\83\16\9f\98ï\8fXEÐP\87ïK\8d~೪ ©ÃÁp\1dû\9cëÀ:\18l\12ò\91ö¬D\r\91\8aÌÐ\88]-\12a\as\9dÉ\1ek]Ó±\1d\k*ÈqݱA\8aa\b{ÖºbÖ¹G8Î\84B\ 1ìé@îC\b\9b\81ä©\ eqPÜ#¤\13u\80ý\1c\88\89\9f kÈ\9c\ 3eD\\ e\13³\83\88\17J\a$\828ò\10\84ãHú\9ep©\16H¢\ 3\84#®
-Z'\96Lº\18,\ e\1e\89÷¬?\f¤ë¨\1c²\ 2Dv\80\ÿ\84e{ÒÅ`qç!Û³VÖç9F[EGÀ Ûq<#èyOº\18²2#\ 3keG¼Dv²\ 2\ 6Ù\8eóC\9e£°']̲#®¥gE6\98ðJ\83,7Ó\ 2\91\1d \1c1ß±CNb¶Å\9cð\85÷Cþk\11{Z\12kL\ 6\1a ÁSÐ@"°ìÚt\82k\14\bb\92g+\80\9aÜÛ\10YYÀÔx\80ݽ\1d8q\vb©Bîw @Üøö[\88\15"\1a=g«ÇxK\11£\11æ,\10Ä\8e¾\83QâXºÑ³Ö\15&\¢\1cs \80=\1d\88L\ 3.©ç\1cÈ}\8bp%\aRDý\94[\8b\S$n\ 1\8b:\10\8eÐ\v\1cÒÅ`£pÏU\8e\83\a\8a»êÇ\11ä-b]KÆö!Å$t\ 5\r$\9e\ 4Ò \94/»/h Ãn¯ËÎö\ 5\rd`7·\8fg¦\8f\11b4\90#»\9eù!\ 5YA=9éV0\1eÌ1 è©´[Ài\84ë# §ân\85â\98S\12À\94?â#\88øüP>êÅÃ\9dÁÀá&Jk\10\88÷2ÀÀakÊà \89!"\80¹«ÙÉù\aÌÕ\88f+¼\ÄIJ³¥¼Sà\93Åéå¼1u¶0ïfß`\17c\85X»3\b\ 4°<½Ï\1aC\9f¶ËÌ(k3îlNé\82\1etESµÅ5ÅQ^\ 4áE\14ÒõÍ\8c\a%`ë\11\9dÉ\bCg¶É\e\9aký7áoF\v]\14jar\bè\15-õ¢-Ue\1a2\9bÌP\99¯7\86æ\8aÚFÚ\82Vº¦ÒÛBÑR½¨BoójMMVÎ3\ 2e6ºQ\94WFÕª1j\89\7f»àr \10|©ÅA{tg~k¨ÒfÃ\1f\94ºV\1c±úIB¯un\8cªhþÖ\ 5ì2P5Ê\98ëÖ@ \v^eE\83j\ eb¿du®Û\86¶Y\8dúP¬Í;«\96â9}¸¢m\8dFGºô\1a\93\17\ 5\8aXè\12%\eåÑ\f!J\8d\83¨Õ\ 2m¢\17DïZ\87J\9a¾\7f\a¡\17¨\f]\é\16ÁÐ×\8d1Û\8bós©À\934<]¯Ï=z*T\86\166
-v\9c5NBÓ7U\94ªþ£·ô~t¦»³Ëä09\99\1c#\95Ï[> \ 4V|@\8an\1f?ѪT\9d\15ôÔÎ\8b|A÷9\8aAØ/§·O÷_ÞõU\ 5\1e]b@¶oÜ-ø\1eT\ 5WqC(ô¨h\97\88ó\9a\9b\8dm§\fE£Ûz\81aÙe\82^õ\9a{MÑÕY\91W
-Í9\bÒµêõõÕ[5+iS\17·9_o\vÏ|ï®Lâ\\19^ë<êÙ\1c\93\8aܯ5f\12SÍÚ{\97k7\97¾G7j\95Wùî"<*su÷qJOÝD\10\8fÉcV*zV\8d.Z±{ÐK%\9aø\92p6HAìñý\8cÝ\ fjÁ\1aòèêùãåÍõåtF]\8c#£\10þW\8fS\97?s#@d*ݽ¬\17\9bÜàö¶µ\9c;\11Ò¸«L\97\o\ es\86=°Ë\13\eΣ\87¶08±ZeK¾\87\¤H\1fä\14xÈiÖ\9b5å|yd1v-ª\1fYD\1eUór\89N7ùZ6Ã^Y\12\ 2³/¥Ý¼¿útKÍ\eÖHÉ¡ÜÒB\8f;¬^éck¶¸÷Ó·Êdß\ f\12Â\13Ú^WQúr\8a±~È\16µ>2ëÂ\8aÙåÍÍO,¥BEbyÿùþ'\96¨\94óûÐVÒú£\19 ½\88kXÎ×F}7,t\94\16\9eªb°YÖ;Þ==V@æXÈef¾.Õ¼]\7fuµÎðÕµ?j$~å\80§íz\8dÕ\8ck(99ã\80\94íPafTÍ\eô°í\92òõ&ã§\14vÉ\9f\18\16\ÙõAæ\927¯É
-\rX¹\rØ\v\86Üå8xu`¥\e¥k,(os\1cTNûúó%ú=oW¿ousÔ-n\ 5ºõôK#D\9dîIýþ\92\15?\94C˦Çrî pP4íîØê ÐØJM\ fò?ÔJ¬Ö¯ÌR¨íeö\9f%L`¹\97Ý`y\18\e_[ê\10}0>(\aßAîÿ±Å©<ïek\9b}þ\ 1ï\93ò\82#s\1aLì¾vß\81Æ)^ýÒ1Þ\94°Èå\1dæýìä¯\93\7f\ 1\85\98V¸endstream
-endobj
-528 0 obj<</Type/Page/Parent 513 0 R/Contents 529 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 8 0 R/F8 10 0 R>>/XObject<<>>>>/Annots 243 0 R>>endobj
-529 0 obj<</Filter/FlateDecode/Length 2009 >>stream
-x\ 1uXÛrÓH\10}ÏWÌÛB\15\bÝ/\8f&\6U¹\81ÍòÂ\8b"+\896¶ä\95e \7f¿çôX\9a¶\1d\8a*¨Ãé{÷ô\8cüßY`|ü L\16\9a(5ÕúÌ÷|üÏô××Ïg\81\1fz¡IóÔóÍÚ\ 4YìÅ{´2ó\91ÍB/'[d^aRA\8aM
-/\15\966RAd\93ÐKL\1a§0¸6YB»\ 2È)\b³A>I\8aY\85Á&\ 1\ 3\9cT5fÀ\ 1\9dNl\91"Ò4\8a BU\7fB4lÉ\10ù\93\f\v\86$H¼*LUIfbm2>#\19\89W\80$ã ÍÆ\fh"5\ 6\eç^¦Ø\1cq&E$õ\v3TÁ\ 2ZUpmÒ\ 2j\8eSpmÐ:'\91&¹/eÏ3\98¶\806\15d¤\19\8d\8a$I©N\92f¶tqà\ 5Æ"\92\81¬N\bó\8aUxmB?A\99\1ck\r'¬\v+ \86\ 5)Ã#k\r9Vaèb:\11±c\15\86Û(a!&Öº\8d9\ 2P\r
-æ#HÜ*LÃ\ 5\ 6[±
-Ãp\10²\8a\93.b\82\1fT\8fS\9fÇä\ 4¸"\ 6<E0\eJ!\ 4\89S\85Á¢\8bèþÄÊ,ø\1cöµÁà"Z\ 1TT\10³\10°ö\13§à8'\8e\93±ÙÛÄ\98¡+\13§ #ew\1c))Æyn[\16ø\bÊ"\89\86ùǨ½\14ÖgO,r$\82bq²\b\ 6b\ 1ä\14\1c]:ÒºÄù\90Êa+\15&\16䬢Á,NáÓ£\0Ç\85¡Ä*G3\16 \1ey4-\84Gä1"§èç\92\aV[lb\ 1ä\14\9cB\9dH 5*\12\9b#ë`\81xt\90\1e¹ö\1ci\15s\1e\1e¤Á~D\ 2Ä£\83PÄBK\15ÉÙ\88d^Ö&æPY@=\ 5QðÌ\8b\14§ lú\xNQc°\11+îXñ(K\10\a FÝ"\ 1ô¨ &\8egÃq
-"C^\e\8e³ÙÇû»D\86*\12$ésµFØÁr\95D1ó\10äÈÀ^%A\140RA$Yß®|l3(
- § ¡qÇ)È\82sû*\92á\84\984{Uð\90[4\85\13fö2\b0Þ¡±È\91©ÝéAÌÓ\11
-\9ab\rq\9ce\08Ç\16\88¢\83\88'àÑq¤Æ`±ä
-Í*\f\16ç\16Á\8b\17\1aÖ\98Û,8t+\99Fûµ\8fÂð QU\18\86ÑÝ@±²aCY\1d 1@\89±HÒ\11»è²]¿´\1f
-\9aH>'¤Û¸e#y\¤F\9c*\f»1\ f\86\95\15Va²lªf\1d\ 6\8b\8d\13hVa°\98ÏX±\92N\80\85.\e\bS\86 \ 4\89[\85áP³0<b\94ØÏèvÒÕ\18lÄ©r¬u\8bw\8c<Y\82\8cÙ
-\12·
-3[\ 6§X\85\19TÂ\90']k8\19\97¸\18\16¤\f\8f,6-"v¬Â0\9cr\8d*Va°8H\bjÒµn\11ÙØxä#H¹\1dY\18*4«0ËÈ}ït5\ 6\8b\13\9b)ÖºE\97d¤lÙ\ 4)·#kËæX\85YF\9eYn\99ý8Ê\v\99\8fT\99\8b0b\91\ 5\89e\85¡\8bÇ*êèX«+\89\80µ²\82\94îÈâå\f]Ç*\f]\99&Å\8aeL°]P\fJ\80³;rbÆq\ eÂh\11 K\13'\9b\147¨m\\88*\b°\ 5\9c Ô0Áø¨ p\ e\82Ã×\81¯8\amC\vDZ\9f{\b.¤¹É¦t3µ7l Í\14`Cá$\8f\"\1f\16\14\14ÎAº\8bвIOL"Eé¢\98\14àL\8e\1c\16;Þe\14\14ÎÁ±\v\13'&#>ã@\89I\ 1ÎäÈaKáZ¢ p\ eB\ fï\b¾\11FÎAd\80]\8d+käÄ]¸ÿR\13w\ 2\9c»\91Ã\8aË\83\82ÖÝ\ 4m\7fp9\8cÜûÅÙ»OX \81YÜó31Í3³XÊ'¢o\16Õ+l\14\ fW\91ùzñÏìòÇ«»Ýý\9bM·ýñúõâß³·¾y\v.\84\82\95\8b!7\9fkÁ7?ËÕ\1f\84\13
-\1fXUÂøZU¦a÷rvm®Ê¶|¨{3/×w¥\99Ý^0\88cÉÀ3·e_®ë¡î·\148\b2öB¸\87]ß\1a\84¶«%\8fC\e\bì¼[Ö¦z\84\9d
-fÌPÞN%SÏ,\1ek³]ßyU×Þ\9bûÆ
-ik©\87x.ëßMU®Ì¬-WÏÛF¢:\16\82Øße»\5í\83éîÍ÷Çf¨·\9b²\12·*\ 5\1aD
-Zö²ikDÜ\ eM»+\87¦k\8f²¦
-:x"f¾ì\9aþI¢y{\18\ e\1cÌ\9fÛ¡ü}\`\1c\f&4»ëv\83Ù°Ì[¯\92\12bt¦\86e\9e¹®\87÷\177sÓ´¦4ßÚæ·ùÞõ«å±=\\93\9e¹h\87¾[îª\17BÇ£Á3߶uߢ¡ÇÝÄS×3\9fPtsó«E³\1f\9bÍQæxÒs\1a¶Û_]¿<UG£/»ê %?ÑCo?Ôí³¹Â \9c*"ÁE_n\96]×\9bo\17\1fN\ 5r¸íúÁ´»õÝé\18âG\14ð}7tU·BçÖ\9b\15&dx\96BêNÀ\füT\9c\89Ìüöy;Ôk\83aZ\1d;\85Éë\85ùÐKÔüëíù_" áv9-ö±\0DæÝ®¯N²¦6\9aqÞ×Ëf\10Û\aC\83\15\85\0:\fÁ\18\9bùУ¡»Þ\9a9t"#$¢Ge§\rXù\88ªÕ½Lòi\92!\9b~hý(\ eðWs\14Àt?qtQ¿v\8bSl®1AKsÛläD\1dF\84\157*QàÔ+\96\1cÎ\].ëþ$fܼhSÙ¬¤}ê¨båsþ\18Êû\ 65ygÿ\99UO/ØÀ,^/.ç³?\ 5¬w-\rc@)}³©[\8cÚª©dz\8e¼cN)ôeW÷Ï8f÷Ý\9fE1j\14\1dk_#\8e\1dfm¹\9f(Ûð#ó\18¹)\86y]õõðBbxò\8bÔùªÛÚ\1dzd\ 5W\9c\b\vÝÓncæ\17\1fæ/\99A\ 3èl/ÅnÚ\98\ e;\89z_\7f\\Þ|¾¹6ý¦úS5\8f\95ö!|ÿÛÕÛÁ\9c?â\80ÕíÃñòÅ;\97\83À8f»á±ÆÊÊ¡6áIÀø|µróºç\18\8eKÈÌ_(\12Þô{áÙ\15\12|°\eüÝ'¼\9båZ\ eðcbZà\87×\®Úùìêý\fëég½ê6Ø.æó®YÚÒ\ 6x?Qòmæ\17¼\95gwÛ\81w\18ã\8bñ-\9cç1~\ f\ 6\11ñ\7f>.ξ\9cý\ fì¤ó§endstream
-endobj
-530 0 obj<</Type/Page/Parent 513 0 R/Contents 531 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 8 0 R/F8 10 0 R>>/XObject<<>>>>/Annots 283 0 R>>endobj
-531 0 obj<</Filter/FlateDecode/Length 1844 >>stream
-x\ 1}XËrÛF\10¼ó+ö\14;\aÁx\ 3Ì%¥\87¨BѲIÛ9¸*\ 5\91 \84\98\0\18\90´J\7f\9fîY\12;\10U±«$µzÞ3;»Ô¿£Àøø\1f\98,4Qj\16õÈ÷|ü¦ÿòùz4N½Ü¤yêù¦6A\90õhmf#\8dÁÆ!¤¬¬°
-\83Í"/Ql\12\12f!\f\82ÌÇ^v@Tµ^\93±\97\92\f3Ú\15$v\15¶^SÍÂë\11\83M3/R¬5\1c§^,\86}olRAÖ°ÃPM\ 2&Û³6à(òB¨\8e#r\ 2$^\a¡\18%\8c '5fDc&îX\85Á\8eC\84æX\eo\88\960Þ ¦WA\12¯Â`c\86¦X\85Áf\ 1\83êua\9fÝí\r\vR\86\8f,J\0Ã\8eU\18ºiÌ":Va°yÂú÷¬\141Aõlc\99\97EÇú\1f1Tc\1f\85R¬Â`¥;\8aU\98AåCË
-×&D8¡²¬1X\fj¦X©T\92ûvdâ\1cß-\92Ƴ\80 \86\8cC\11DâU\90#\93Ø6/NP§D\10I[ äÄ\ 6d)
-\92\b § FMôzNAx\f\ 3fâH \açCÊ\9b$\fN\10\ 6
-C5\e3\9e\9eµib¢ädXQAJõÈæ\1cÒı\9cþÄg(µ\91ób\ 15\15¬\r\86\ 1.E\90\9c\82L%Ǥ82a-ã\9c_Q\ 3\a¨h¹\8c§\ 1\\86`b\ 1ä\14dG\98¤#5\ 6\8b\99 5«0XøÎ5«0¦$à:s\965\ 6\eqÃ8Ö\ 6\9cò\b¢
-\119\ 1R\ 5\aá\14E\85Ó\9eÔ\18,f\bEéYkVF\12$¦:5± ÚÕ\98\863V±
-ÓpÆl\1c«0Ø\9c\ 3¥X\85Á¢9\ 3Ë
-³\12\92^oYc°¨i¦,Û\84°?å8aP\ 2\13\v² 9\f·²A\15«0X\1cB\18vº
-Ã\1f\ fX\8d\19r\8cITº\1cï8äåv\18o\v\18\93\8c÷\91Ã\f¢\10"HNA\ 4\84zÃhOÚL}\8e\18&B¦E\0\15\15\84¢ÜvqObîr\13a\vp\94\90³\7f\0TT\10F9mVP\8c:\b£~\82\ 28Rc°85Ú¬Ä\1aÉ¡Çqã\8a±\80f\15¤Ù\1c\1ds¤ÆÌ\84uU¬Â`1r\ 3]\85Áb)#\e\89\81nmH¸:eP\ 2\1fß#A$\ 3\85¡\8aª bÇ*\f6\r\aºÖpbß;²K"\ 1\92+7\8d\85P\fR\96°'5\ 6\8b\93:`\15\ 6\9bðE£t\15\ 6\8b\\91\8e³¬0X\\9e\ 3Ë
-cvå\85ætm:x\12ɦô©)@ÊäKêáá\95\ 5\7fè\8e Å"KûTâ÷H\90°¡Ã\88 ×+JìXkÙ·o¥ÀÊ
-RºG\16'\13µèY\898\1cÛ\17\ fú\1d\18\v¨© \9câ,å\8a\fÄi\88»\93¹\ 6\11\9be\918U\18lö\82U\98\v ÂAVºÖrzxµà]\95\98P\10-Û\80\13û>\90\89 \ 5\90S\10NÑåÔ8Ò*".Î0º\88L\ 5Øp\99\e\ e\bwNÂ\ 1¶@\1c:\88\97\ 37\80ã\14Ä\ 6àñp\9c\82¬OÂú\88\aëÐa°ØðÚ¬\r\15ÇJJ\eð]\11
-\92xx9\aHU.·\0ű\80\1c\96Ð\11Â*Ön¬H\8dÁb³E\9aU\18,ª\9e*V"
-rû\A÷BÄL@§
-B1òQYGjL³)ZíX\8e]\80Å\8dëÎ\96\0¸+Íjt1\1f½û\80\0\ 23_ñóR\9agf¾\94ÏJ¾\99/Þ\8e½ØK<3\99\9d\9bÙù\99´\ fíjõëü\9fÑ\19>Y\9d!\95\10â\90\82Ìwü»=¿\99Ì&\1fçß¿OßóË|òñúã\94ò/Å\ 3Ï|Ú\97ݳYµ\9d¹»º\14\9bþÐdèõN\9bW|¦ ?\7f\9d}½4ó®h¶Åbg¦E].Í]µ)O}¦\1e|NË\9d\99=\16Èý}³¯O\9dâ\ 5}\10*»\9feg®!\7fÓ¬ÚWÜg\9e¹ì\9e7»ö¡+6\8fÕÂl«eiÚ\95\99ÎÍU[\17UcÎ÷»Ç²ÙU\8bbWµ\92°\f¸\1a<sU®ª¦¢À\96^\ 65À\0xæ®kwí¢]¿ÂF\88¡kø\10Ý\17MÉQ \9b«)\9a¥ù\8c\1fh`\18\0î5Ï|+×ë³\1fMûÔ\88ø\89\9b\9cA(!\98\9aQè\fóÒ\8f\0\8e\8d\99\15õ}\81p+¤Ü< n»²k\8aõ\89_ÈÂíùývסibJe\rV\92ÖVVÅ¢4»Ö|-ºªÝoÍE±øaÊfi³\1e*£&\12\ 2çk_\9aùÕÅ\e\11\eJŨÜcÑ<\947Wæ\17s¹®PCsY,\1e\199\9a(&0\0l~W÷ý;\eZÁØ\7f«\9aeû´E×ß\85\7föjÖ¶\99¶»jõ,\19êÂ\aHß\16ëÛÍtö?\85ÂË\10\1e(ó¡¨Ö-&òÔ\16\8a5\7f,Í\97Í¢\19<Ïéìy»+e¼\anqíÀq¹ØwÕîÙ`@1\9eæMS>Qé\rMëôp\8dBz\87é)Öm\83mѵµù2½ùë¤c¡\87¢ÿ\ 1Áuy\986ôk{tp°\7fj\1e=\98\14Ïew: ø &#²Ù¬Õá\19\ 6\17KxHVæ\8c\13ò\9a\a\ 4Æ\82ܶË=\82\93È_\94\ 4=|!q"ÀªmÊEU¬\ f\86~3Û¢þ{Sl·ËûS¯xç{"P\1c\ 6ô\85A,®Û²n±ün\8b¦x(y~O`¿ÌË-OÒiÔÈjR4Ð\96³\8d\85s\87P\9eÚn\89µ¶àRzeÝ`Y#\ f\14«C-\16G ]Sls´±}2Ë\96ÝÛ\19XüñûËÈp\9dyüÝ[\19»m}Ï2<-ͪZK\aÞ}È\ f÷ ÿr\96\8eùi\9c\97\1cî Ôùâ\1c\vïg¹n7軹ÞcgJzA\96\8bìYæ\8f)ª·C\8c¿Räy\8c¿é\81\88)þ~>ú4ú\ f_êr£endstream
-endobj
-532 0 obj<</Type/Page/Parent 513 0 R/Contents 533 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-533 0 obj<</Filter/FlateDecode/Length 1571 >>stream
-x\ 1\95WÛRÛH\10}ç+ú\8d¤Ê\96-c°!O@`ËU,8±©¤*Ù\87±4²'H\1aef\84ãýú==º ´Ùl¥r\ 1[ӷӧϴ¾\1f\854Æ\9f\90f\13:9£(;\1a\aø8\9b\ 4\13\9aÎgø}\82\7fFRrtµ>\1aÝ\9eÓdLë\ 4&g³9cÂñ1¾\89Þ\ïDᤡ0 ÷2Q¹rJç¤\13º\97îjñ°¢¥ÑNG:%\91Ço×ß\8eÆ4\9cLáâͽÈ$}\94V§¥·ùSÇÒò \ e\17ΪpÃ\93)RÂé0@\84û\9b5û¬\ eM)\fëC\93Ypæ]Ö1M\99[ÒÏHËíP\83NS½Wù\96\9c\11y¡\8d³\17´¾^\8e\16Ëw>Í\9bÇ\ 5gG\8båçÑjù9 \95È6\82t\9e\1e¨´Ò¶µ°Ëº\86ð¤Ê«ò\13Ð6\14K'T\8aȹ\8f[=j\8dWÒZÆf%ͳ\8adûý{áÄÖ\88¬y0ð¹Ôðõ¢1fv@VJ2I\14\8eÇaà~8oP}\9eðç ¶\9a\9c\ 5\15Ò\80\85kT\96\ 4\19±oC'\b+©h:¤²"\95\99Ì\9dð\rq;\ 1×\8cÝ\v\ 2q\9d¬%§i#\91IîH\97®\97g\8býñ^\19yL2ÛÈ8\961í\95Û©\9cîî®É\a·hêKv¹v Ý÷\1268º\939àç¾5\òn+X{\ 1\9b\1aP!\1a©\1c×Z\18\99H#6)°~XsÂ*·\ e\ 5½\84Løh$r.E<k\85\14ûàÕ¤ðà¥VÓoäXuòÿ\92\ 1E{Å4!\99®\96ùJe\9e\82=tÐ% Le\8d
-à@1\16|\92\ 6@^:O;|8P*\85u\83\1a\b##\9d¡¯Ü\0ßTö\13ûRz\91\e\80\8e_!^çsÜ\87æË'nQmÃ}ú¤ò\98Ùr~:ð¹î\15ò\83(Ôa\9bNwfÍ\97S{@v\ 2¼ÂÄÆ2\11eêZfÚ&r;u;ô\17\7f72\12\98P6:xWlm=\8f-ÐÐ\94\89\lå\ 5ºÖI\8e\87Ú\f#\9d'j[\9a\8aìpÖ0ï¯&Zw~XÊDQ¤*òç-}}cËhÇ\19[V\8b¯o!z \e§¢\8co
-\86\9c\8f%P\ 6ùCðl\rhõç\15\0\ 1#\19\83Â(L\8fÝ üܲ\83\9cD¯!M\1fr\fj@k.3+QZ\94
-\95!\16ÒæG\8dääÒíµy\ 2.\88
-\1c5wÅjoÙN\11\14Í\v\11\13\87\85\88»Ô\v\8b"\90K\14É\ 2¡t\9eË\88\15¡U¶\ e\10ÇÜ\84\9dH\13TZë^7ç*Qtvsð\9díX~}\vÊöâ6¦M\8a\eÔ#\91
-·µcêÑãï¢T±\0ñ\ 4û\94+\9eGò¿:ÈXY®È*\80\88[*<¥\bø\8b\bw\18\14#-Y"\8fÝ¡\80hµ\ f\18¾\8ao \96J\85Á`åì\85ñ\190Í\10\7f±$\11Ç\ 6ØöjâN\v¾oÈ\8fr^B\vá\ 1'\v\86\153|\0\10Mw\86bÏ\13Þ-\96iA;\8d\84ý<U4\8b\15³\8d\8b¯ÛØ\ f[bÜq%µÇ\1ah=]¸@Ü#ß\98J`ð¯Ü×·X\13\85\99öâ\94+ê\95[Õ×Nl\7f\86ª\ ex\ eCs=\8dÁ\ e_bMÞJ5\9b\13\90\ 2/\\15\85yÖ;»Eå\fÉ\80N/\ f[*çµßûæk\ 4SgË\r¢¼CÁw:\12)]\1a)\18y?4\98S\ 1\95\88嫯\7fM%î\95Ä\9d\ 6¨\1fï\17\1f\1eo\b^þøøð¸\fè\81÷\a\9d¿n&Sµ\1a^ÑXt;Ó+¢\8bK?\915\82Â7þ!}z\82Êb>_ö®{\96\ 5\90¬^¯.èÊh\11G¸\16üô,!\rnèôÐÿâ}÷÷.¿;\84Á$ «\8f\ f\97ï¯/Wë\86¥\9cæèö'\eص\1fH\8cX[¦ïQÕS\86©\12¦\8aÃ]NAL!\976)S\80ÖТ¶\ 5
-0UýÕkÓ\144T¨R8ð¨ê/C\ fY\13\90\1cM[é\9a¬ÛQé\887\9cì\99\1c\17xØ¿\87\13W\ 4\99\8a\8c¶:q\ 1´e\14\9bí(\96\18Y]\98Ñõâv5b{\9e\aÞ»À+Ìz#ñ£WòîýS¤\12;å£P{æ\1cË3÷¸×ö»Ë{æÑ'ü\0¹ý5ö$ùF5d°l±TAß!\14P\16Ü°-\10T\88èI:<5:«W\¯:\96Â\93Ù\0ÿÍ}\8aáÉù¿Ù¤ \b;½Gu¬o¸Wü2Ön\ e\ 1-\12\7f©ïÄ3hG\90Á¤\97L\7fzã[Íw\93·3^Âú*\ 5\r\ 4dç§TH\13ù]2©zMNÁ4\96"e\8cxmì\94\89Å(IT\14Ð\97nNÍÚ\ 4@=T\9dÜzøòþÓÛMüU\8aªE
-I\88\ f\84×\1a¤æ\89!jX\ 1\9dH\ f\7fcÔ½\ 5X\90q]nw ,Ã\ 6¾íe
-t2\95£KÀs\vg^\98F·óÎëʼz]ùw'ò\ 3ý³÷¥é|\1cÌçS¼\9cá=é\94K½Y\1f}8ú\a3l\81lendstream
-endobj
-534 0 obj<</Type/Page/Parent 513 0 R/Contents 535 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-535 0 obj<</Filter/FlateDecode/Length 1468 >>stream
-x\ 1\85V]oÛ6\14}ϯ¸{J\ 28²åx¶³\r\ 5\92nÝ\ 2¬n\a\e\b\ 6d\bh\8a\8a¸H¢FRvýïw.)9\8eÚa(âÔ\91x?Î9÷\þs\96Ò\ 4ÿRZLézN²:\9b$\13\9a/æÉ\94fË\ 5þ?Å\8fU\94\87\aÓÉ÷ø:xp·9\e\7f\98Q\9aÒ&G¬ùrA\9b\8c\10g2¡\8d¼p{á\våÈä´µFdR8OÞ\8a<×ò»¿\92ËÍß8~C)Nññ«ëY2C\80\8b4¹Nhu·ZÓJù»ûOëøæk¢«é"\99ó\9b6\97éd\92&þ\8b§L9iõV¹\11\89ÊÔÏÈe\90Þ\92/4¾\8dð[\91®\9aRUªöÂkS\93¨3j\9dB\858Dç]:Z\89JÑZÙ\9d\96ê<Ô\89êÒk \83\9c«Íøv\8d\13¹²\8eÎ\1ft\9d\99½£ûÚ+[+ÿö,í\v-\vÒ\8eò¶,\ fÔÕ;\9e\924¨D\8bÚ\8fhÛz*\84ÃOFÞ\90\17/\8a\e>Ié\1a%5@#!CÙ{í\v\92Êz¡ë\1e#ªQ´#üÁØ\8c»6T!\12iÏ\1d"}B\8f\17¹±¤¾\b\ 6aÄO2%JG!\1cÐ\19dµêY;Ð\15R\82Ã\9fRù\ e\1f\19\7f¨w]>Q\96\9c3Ó\8c\ap¥½8¸\84î¡\1c´\b¤Ñ\13p·Jd`\81¥À_?ji\8d3¹§\87ûU ÷¤[\ 6\1e\rü¦Ê\86r]¢).\9b\ 1D½h¹t\8f\97=)Óy\94Ì\ 6A#\91à\91c\92\8bQdë\1d\81!ÀR\9f¨\10Lí\8d}éÕ\182ôì3\90(Ø\99²åÖÑLäçk\84\14\9a\96\90YN\rªãþ\18\ enðUï\1aq\84W\19¹v\8b¬\ eÄ<+¼b\ 1\e8\12äp®TG\1a\9d4\rÈ\11\f\90£\83i-ý~»\ 2©\ 3v\1enW#\96\17\8e\8a\9dÑ\ 1]ÎÜ¡°yÿy|ÿù¤\8eFÈ\17¤\1f\ 2÷P¨\9a³@};Dz\83\1d\10ëó\8fâ\ 3YjpÌ\8aA\9f[¼¿Ezt!\r&
-Hp\ 1§èãQ\0r7ÔÖ)Ö\90ËÊxÄ)\ 4°¬1&¾0\18Ê\10¨Ï\18\1e\86\1a£,!¶ì(\rLÙiâ®À\ 1f;í4*Nh3¨óI\8aú)BàØ\1aä\91\ e´k5$(²\f Ñ\8ff= /¶\ 2%>^´®\ 5ç\87 §dkµ?\f²BûÎÔ\81KªôsÁ3\82A\89°9ÍÃÚ´Þ³|\ 2Ü\99©x®\19SkÊ\92m\ 6ú\8f^\ 6ÿ2\18{\1c\8fúFa\8ebÉ\83¬]áÑ^\98`W\98¶Ì¨6\1e\9c b°\vg\f\ 1BZèTQ¥\ 4*\85 û^\1e/c\ 4\1eAf·2ðÕFXøÖ\e\ e\aÙ\ 5\16Ç QÙ\ 1C¥%#5\14à\86kh¬Ù\ 1\b´b@$:Ï[ÇþÌYK\ 3ÄyÄ\94 ¶Å\9e\8d#\18_\98 [9^dì0Rê\a(øÎÂ\8f£}ó\909Z}Ú\90\18Ô\17´\12\8dfDj\87\19ÐÁ\99p\90\81\85ï\ 3\18ôpÜ\17 \1f\9c0\ 2Ak¢\81{Ë`\8d Ý\ er>ÕJeîéÛI;_Ú*)xT¿Qo7\84QùaÆã
-y\ 2uO¯%\84µ\16·(̳7Â÷Ý\84BÐ$K¡«èÓ0\94èÄV\ 1S^x°ë×V\ 1µk%\9avqO\85\93h9ì\94Q\94\8aÒC\v:\9aÜÕÀä\12úT+Þ\ 4,r¸ÝQ*Gl\1f/\90¯`ñ"È\9e-ð\aT3t\89Ü7 d\13WE\82}2Îìó8\ 3_¥iìøýý\87õ\98Ïóöá;À\8f¡ËõÇ»°7Æ\8d\85ÅB÷\ 2¿c|Â\1aus~õñ\92\15ôÂÂAóCyDÇ%x,\v\bM\84U\1aÆÄ\9a\16\9b>줽°Ypü#\10\98\8cà²\94[SQçÁ<±\8eÒëÅ\b\1fËPbz}ÓÏA\7fø\13#\1a\+Ç\8dbD\85Ù£M\8b-\9d\a{Îp1àIáb©\14öYuk\81=\9bWA0ÈP!¶LØmx;Ü2\94çqÇe¬jT6\98\83íáÈ\r\v¤'£ïãD}ûâ\10\1dv\ fÒ:
-¢#VºÖ\95\86\96y:jÅ*\82 òÈ\1eq\19díî\80=\ 4½vÃPö\ 2F°N«'2\8e¸r\9e\13³Ç\82\8e·\8a\93¿1-|-ë\15ó×{ÑWL³ÂãÕ0ÎÛ9ü"^:¡G4Â\93\11\r\81x¤\10\ f7\89¯\86'Pá |.üíî
-´òÉ\ 1\fÿ¿5An_M\88Î\ 1Æ\1f\96Ý\8d;],\93ùÍ\rÍnº«éúöãÝ-ý\1cç\83Eúk\vWåCWý»W\8bÉÍ\7fÞ±gËI²\Îp\17Ç=wÎç~Ù\9cýqö/M5øþendstream
-endobj
-536 0 obj<</Type/Page/Parent 513 0 R/Contents 537 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-537 0 obj<</Filter/FlateDecode/Length 1660 >>stream
-x\ 1\85W]oÛ8\10|ϯطK\80Du\1cçë^\8a¶¸\ 2yhÑC|ÈK\80\82\96(\8b\17\89TIʪï×ß\f%Ù\8eÓáHaÅ"wwfvvóãäRføw)·s¹º\91¼9\99e3YÜßgw²¸»Åç9~¼\962}q5»þõ\17×÷<öúÀÇåÉ»Ï÷2\9fɲD\8c\9bÛ;Y\16\82ûgøM~ú©RmÔ\1e\ 1äQ5+%\1f|^\99¨óØy}¶ü;\1d¾¼\1d\ e_\-²9\8e\9fγËL\1elô®èòh\9c\1dÞ\Èååøæü6»á\9bËÊ\ 4)\Þ5ÚFY\9b\8d\ e¢döª\16·Ñ~ct/®\94Êõc
-½ó/A\8cE^VÕõ6\93e¥Çï\96Z5R© Ñ\e]Ht\92»&%:\93\8bË«!½®\95ÞÄ
-\81\1aWèZúÊä\95 \91\88{V:Di]\bfUk\9en½kLà\17±×Ú\8a®õZÙ\\9fã-\1fÕÊÔ&nÏ%è¼óø$Ê"nu\1c3w6D¯\905Rop?²[mSD\14¹\95F\87°\95Ç/\1fÓùO\ f\9f\1f\ 5\81£Ë]\9d\11=¤?¿É\16Äì!\8aª\83K%"g\87\13¡\aG\ 1\95\12)VQzý£\ 3¤5ò /\88\85§@&\82\84\ eŪð;o\85\9aö×\86\11ÃT\89\ 6*(ÖwÖ\1a»\16gå/k~¾OPÿÜþ#mbé|ó^\9e*\85\84V®\8b)²w\ eøy0Y\9b5Ø4!tú=\83]\80}\88ª8\858ø\8cÇ\1d%ß¼\ 3ñ@\8e8±\88¦«#8òZ\15\8co¬l\947®\vÒ*\ f\fñJ\12ä«\8b¡Òã\8b\9fªXdT©\8d\ 6áAã¸\8a\9aàæ\80\P\83X\ 5à¼\ e®î\bѹ<=|}<O鬼ë\ 3\12x]ÀÕ\10\87\8d3hÿb~-T\7fâg\9e!\8f/¯ógi»|ß}þE'|Ó®\85àHb4P\ 3\88M\88\12\ 1@öè¬!äàtí\1cE\86Ä\92øA2º?éÈ\9a\\13-\88Àx²\84Ç\15.â\v?:t.\ 1:è\ 5cU\v,@\18Q!\1a¡Y\15\99XüÏ\96P\0¯\82¸\1a\15Ño\ 3(\89\9b\8b\ 3r¢ô®«!è\83$\8eU»\84*C\85\8ea\9e\ 10\ f\r\aí0 \1fHÓ\ 1íº\18¢©:5z\84¢@\9fçiT\87sQ½h\82\80$Y\82\82¬;[ W*õ¨ÌçÓQöò¸µQýÄÕ\83\\895ÅÔ£w\ 1çó\19ú£,qIô\1a\9eT$ÅiOÜÙôÒjxN4´)PJTkÊÈ»U\17â\ e¶£è¬l\80\v\9d¨!k"IVRö(`¥sÕÁcL\9c\80Ø9\10ú»pü\ 2.\ 5}¼hݲ!r8Wj\16\13"\93Ù\f~T\1fS¬r4W\90«k\ 1»\8dCÊSó\86L\9eG\vöª_©üep\16àY³DÄÞ³\9ctñ|6\966\99\11i\9d]\ 3±\91W¶<\8e\rø"ØN\9aI´\90s`\8b§¾#áê\85å$\r\1cêJC\83©\87ö:;\ 2u\90\9cÂ$â\10àEÓ\10hèp¡v0Åó\81\9e\90«ZÁÏÇÇ ¨\84Zzû\15\89¬©ÄÅC\15ý1\9e$ê?\9cDS\84°0\8b\ 19JÜÙ¤¯Ôü¿\81i³\86+\82¯b£ D|N\8d²·\12ôæÞH`4Ë\9d\a\12#bðKûø %æ$Ú\0U6#þ#B\9eÓ«Ä\14CÖ;\15&ÀAÍÛ1\10\91%\ 5ë,På\0\ 5e°\86á$ç.\ 4§
-öÌè¡:\fbÞº\ eý\8bÚrR>L\ 4P\93\8c\9bàãl\1aNÛdÆGl"\10Üc\b"¡Õ¹)M\ eub¨úa\8e¡k¶{\9fY×n¥êç³\84\1e'Ë4Ü\ f\86ˤQ\84%\vãå\ 5\95ý|ªa\9ddq\rªáÕh|\ 4°Ð\7f½+\15ofò\846S0«¦Ñ\ 5=\92 T\98
-cË[vÿ8û\8eJê\rì£\7f\93àÁ\90\9a\12\84µl (2\90°\ 5¾\rbÖu\90^\ fº& «Úåì\95L¾:{1= æ¼Ù¨\1a\18\rs\93W\r\87yh0\9b£ÄÈ®Ú(\93Z\82¦\90øê_zå\v C+a÷\10\12'P;v?7Ú\ f\12J\919b\ e0%j9,\83Iಣx½JÞ\8a\95°Qk\ 3&FBBÅÀôï\14O¾bé)ar#\ 4Ì\83\88¤\ 1\94î\ 5U!\9e\13\95Þ "ìY°Ë1Wà \17\a\93í0§ddÀ¶Õ0`\0\8dH;^®î\87Ut\1cêÜJ®çX ±¨PÑ ÿ·È=h\98Á\85át ãv\ 6SËÊþ\17c\87°eQS£±\96¥TÓhLû\aÒ\bØ<9¨Lñn\8d\v\86Õø0íï\9asü{Z\ 5[8²ÆTÁÆ·\e°\18¡\bϹ\ 4%²ô]!S\a,ö[Ð$0ÂØ¢Ç\8eM(K¡CîM\e!\80Ú4\9c0)S&\ eÜáßÀ9O¿JV\10º\96¾ ²ÒÛ\0ÒvÍ
-\97ºò\88ïQ o\12»~\9bØ\14\82\18ÓW\ f:`\94û$fz\1aGMê\ 1zlÔ?aR¥\949ÖÜçS¨5)i,ñ<yØdx»TÒþy3owã\1f$i}»á\9fS ý\7fÿäYÜͲ»»Å°ËÞ²ö?\96'\7f\9eü\v\ f)l(endstream
-endobj
-538 0 obj<</Type/Page/Parent 513 0 R/Contents 539 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-539 0 obj<</Filter/FlateDecode/Length 1662 >>stream
-x\ 1uWÛnÛF\10}÷W\fú\12\e°XÉql¹/\85\92ôâ"MRXAú` X\92#i#r\97Ù]ZÑß÷Ì,©\18D\8b ²MîÎåÌ\993£¯g\v\9aãß\82n¯èå\rUíÙ¼\98Óõü\95|.oñy\85ÿ\81i£/\16ËëâfúâõúìÇ_ïhqKë\rlÝ,\17´® væsZWçWÅuAë]`S[·%×\96õÅú\v®\Ó\ 2'åÊìê\16f×õùzg#\1d|ßÔT2Ù\9aMsIe\9fhË)RìÝ\9eÊ#u>$SÚƦ#BûÚÛÀ-»\14\v±+Ön\8ak±¶ruà\ 3¥`¹¦äé\10lb2\948&J\1aQ¤Æ\96Á\84#m|ÐØðÂ$ê#®x×\1cɸhgo¨ò.¦ÐW\bãñ¼\8f\92Iäô¥íp@ó\81ßÅËâJü6Þmñæñ¢ O\ evSïLbØ\8a¾eúðÀ\91jÞ0Ü$É\17\19\ 5D\14l\95Äìp[\ 2®LÓÈ#S#\91\18qO\833¨GÜá\9d?p\18r\1e}ã\80Ã)¦ª\ f\ 1 \8cw\91\8c>\8eÉT{¤`º\ ef\BT«û¿©öjÜF Z«Ð\9a=\1e\ 1¬ÐãL\86¼aØ\90B\9e`\9bx·mçc´eÃ\ 5=xI!ö\9dÜ%DK¾\ f§°ºÆ$@Ó¢Ü<T|g\9e`\1fYû\9as)J\9fvt°ø\0Èú\8bïÓÄå\10Ð¥\1e1\82\10\ 3NÓ\90±-ùÍ)`\0\rÛ\92\95\1eQ'UÃ\0!|\ fÁùD\1aÆÖX\a\ 6\18wD\89ܶ\0b6\11l\98\89û\16\a`Pk\99\91\19\àV¤\8d\89\89C1\ 4!¥\84\89Æ"\86À(P´Þ]\12\fW(Úó{\1a\98\12_Ò\89\ 6´Ñ8&Îå\9ai\ eæ\b\121jèЧêQ8¥d\ 3\80ȯå´óõãÅp}ì\8f7» ¨\8cí\11;®P#Ô
-íæ8\0Ã\9a£Ý
-q\90_nKS\82©¦\1aûGRzBg2Ø\ 4\8eS\17|\95\99úx\8eçê~\12t\ e&þüx¡%\e+Ò\92©äª\90Gðòýv\97s\18\83Y}¼\1f¸)lu/$¤\0AàÊ ]s\81\82IÓ\1a¡W\82\ 4ú\+Æã\b8ùÊ7(p\87Î\10\99±¹S6}êÑh5wìT¹ÐAã\11ç\ f\97Ä©*\90Ä*\11h\14Ó%¢FÛ\81¼\93\843p9V {\92·'\86ìTMßÆcfo ´\81¸ÚAoì\1fÏa>\1d;¦\16V\9bá¦c\Ì©#¢OÎ~\13vÞëµ0õ\r\82|xÈõ\ 3Í\9eE"Ä\e%\ f¥\980c%ï²\7f0¤Ú±é²\ eK\8384\r$A\9f\12;-\14Z«ö¢1\12Ü\91>½ý8`\95}\9b\10ì\13Ç\82~7OR \ 3A\ 1æ~3\81ê;}àv\94\12í\ 3üí\0òQ\9a\18§¶Á´À\8e\8dHtÝ«n\bü\b'´¾G\9fâ\13ê\a\ 1\90ê£\95\85\17ÒÅ\ e%j»\86¿M\guGÅ!\81àT:0g\1e\9cb*è3êk\84xAÔ\²5Õ\8eF)\13åÈÉ\r.[n=À\88G\88@«Ãéù\9c\9c½¼ÎcêªxU\90+Û\9aÞj»I`ÿ9\1d?\ 4»µ\ eJ
-ÍΣMÇÔIJTomÛCZeÌá\97dgY\1f\ 1\0»'\e¼\93IyI\87\9dEäÒ6*0:\14Fì\9aã\ 4\1a\11ßÖ@\94\850¢R}ï6y\fÖ\ö[Ä%\ 3\11í\8b9Yл\1e\12÷\8eív\97\80\12\860º\fó\1cªáÕ©¡¯=÷zGÁQ\96L¼î\99;(K\92d¬\8cÑÖ$Xÿ\ e»¶«(\ 2\ 2³\ 1#\1dÔ\13ÿyx\e\92!\r-9\15vHú\80!¡¸A#e*\ 1\80\89ç±áÕ7²Yå\96´Î&k\1a\e\878d¶\80\96Ïìò\8a°X®U3LØöº\9b Ã\87Æî\1dæ¼G\19±¾L\1c×è\9eÆw\ëPآ׺À ¤o\81ìQFª¾\90\f\ 2\83v\15Ê\9aÇ#í\805\87\99\ f5Äa3øÈ3\11\8dd\1dÆ\90\80?\95F\0\11fXFtÚ\r|-\e_í\a¥\8d}]³ô\98Ö_gP\ 4±À\9d\88Yßpø\89\1aä\88yÝ·%à\97\86\e½C8\86Mn\92¦Ú\12pm\95\85\ fò\ 6Òb\18q=ø\ 5®JL\99|\1dÄ»²p&\10jåÐÄï×/"í98Æ\86(\ 4E'ZÀ÷ì\1eo6\M×\ 5\82\ eê,h0ubÊÐéÓ5\12\ 4sô\acÉ\94E-SY¶ØL½<\12²¼À\98¼À\90×é\84©\89 AHIå\80-µ {ybÈÙJ» \94ÆK| _\11Î PÈÞ\19\9d\87*z:\1eÑg²\10ÇdÁÝÜ#b^ve\ 1ßPmñ\ e\1c\e\ 4\18¬a¦\1f2K\87gÿä¿~\90Qçà\ 4$x*v\12Ý$\80\1dà\1az\ 4\830\19Û¨s'\9b\86îVøá 1<\93ô\94¦C\ 1e¬c\94"3YâU9²\À%"Ü\13¤$ómV\1aÔ}âXÔZ\9ec\85ÂÁ2ø\83®ÜRèÏ÷ï\1fƵr\10ÕåðMbq»,nîîè\15¶aý>ñ°úóõ
+469 0 obj<</Type/Page/Parent 458 0 R/Contents 470 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F7 8 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>/Annots 171 0 R>>endobj
+470 0 obj<</Filter/FlateDecode/Length 1633 >>stream
+x\ 1\85WÛNÛX\14}ÏWì·¡Ò`âK\9c\84§ ¤e\90\802$íS¥Ê\89O\12wl\9f\8c}\fåïgí}\1cû$ô¢J\94åµï7\9bÿ\ 6>\rñϧq@aLëb0ô\86xÒýxº\19ÄcoD£IàM¨ \7fì{ã\16å´\18\ 4ã\917íØ0\ e¼Èaa\87F!ÿ\84æÈ÷Â\16±&?\8d¦CÈ\17\14E^Ü\ 2¦\1cXÐ\88\1dXAæ\1cXÐt\8c zÎ\81ð\17N;\ f¬èb\8ef\82hzU\17\83\9dÄÈÒa\1d\P\10ƨHϺ\18l<9J\ 6ÂHt<ö\ 2$:\91¬\ 5pL\96\8b#)\10¢\87O\ 1Ì9Ð&\83
+u¤U\1c\r¥'(:*$\80\15\1d\bÅaÄ%êHñ\1f\8e\11!"\9d²\9e\0Ös \ 2\95`:Îú\v"éÖÔç\8c\ 4ôIø¾$è\ f\ 3Î^\10\93.F4\81Ï.{ÖÁ`G2\ 6\1d+NÃéDª3ñ\91\87\ 5l×\81\9c$ÏAOZÅ g\8eLDQ@¯Ørþ\90g$ìH«\88\11çòÄ<\9b¡\0Vt \ 6\8f+Ñs\Õ\10\13ųìópX \ 5è!æ\9csé9\a"ÎcÎ\81\·¡ç;\8a6Îh$%ÇFÄ\14
+`\87\ e\14£S\87\83Ñ\ 3´F\ f\88\15Ñ0\90r\8f\ 2ÎB\80\18í!\92\9frµ;Î\810\1ar\87{Ò\1aõ'Ò
+kT@o´åü\80OGØ\91.\86Y\8c\ 6âéXkvÈ\99ãBHp\ 2z³-ç\8bJØ\91.f³C\8e¶cÅl0åHäðÄØ\11\ 6b\96\9d\1d8\1eëÐ!Ç\µ`<µ;\80 \1e·\885-\19ó\1d\80K\90>\8e\ 4£\9eD
+r]å~\ 6\82\98ä¹
+pÇ8KÔ;j\ 1S\ el·Õ
+vjA,YÈV\a\ 2\98r`\81£Ï&;Îfï\87öRñ>\a\ 2X\ f[t\80È!\18¡\e=i\15\87\1cmÛ\8d@\0+Js,\84Ã\90\13ê8\arab.LG\8aQ>Ä\\98\98k`\ 1\eu \92ç\1eö\9c\ 3a4\8cÐ\8a\9e\94VøðË\15õC~\aXÄV-){Î$_@_POFö\8cóc¼5\ 5õ$|I\87\11ùH<;\1dæ\r\96\ eC\b\99\bê5q¿$ \88Ç\88¯YÜÏ\86\9c\1aÄ\13ñ \10ÐéIS@áò\ 4|ç\82^\v/!ûÒ\8d\91¢\80N\v«dg-D\82\ 2:*²\97Ï\8fùf
+è¨ ½n\11\8f\87\0¦®\96\83\8b\ fSt\8d\96\e|GÄã -Sù|À\93õÙlU\9b*Y\9bwËo\90CÞ¾\95;\87\81\0\92gwImèÓ>M\8c²2Q+sF\97t¯KZ¨=ö\13)^\ 6áå(¤ëù\92g$`é!\9dËìÂÎr\97Õ´Òú_Âÿ u\9e«µÉ`@o(Õë¦P¥©Éì\12CE¶Ý\19Z)jjµirÚè\8aöJïsE©zV¹Þgå\96ê¤X%\ 4Êìt(+\8dªTmT\8a_[ç²\1cp\9ejQÐ\1eÝ\9a?j*µÙñ\83BW\8a=\96¿\bè¥Ê\8cQ%^[\87m\ 4ªB\1a+Ý\18\18h\9d\97I^#\9b\13ßÏI\95馦}R!?$kãNÊT4\17÷W´¯´Ñ¨H\e^m²<G\12k] e£<ZÂE¡Ñ\88JQ&z\86÷¶tȤîêwâz\8dÌPÅ\8dnà\fuÝ\19³¿¼¸\90\f< ÃÓÕö£Ç\%(a ×H¯Ñ MßT^¨ê¯NÒûQO\ f½K¤\99\1cL\86\91ÊV\rw\ 2\8e\157HÑÍÃ'ºQ¥ª\92\9c\1e\9bU\9eé.C2pûåìæñîË».«À£\19\ 6dÿÊÕ\82îIVP\155¸B\8dò&\85\9f\97Ììl9e(jÝTk\fË!\12Ôª³yT\14]\9eçY©P\9c\13'm©^^^¼M½\912µ~ë\8bí>÷Ì÷vep\81º\95á{Σ\9e¬0©\88ýZc&1Õlûh¹\ es9W\9b¬Ì\ e[ð ÌÕíÇ\ 5=¶ã@<#\ fI¡èIÕ:oDî^§J\fâ\8f\81ó\83\9d\87÷KÖ<Éáêéãl~=[,©µÌü9v²S»zX\1cq®Í\85TrVw\99Á¦6\95ôÁ\95¸-M¥ÓF¶øÄõ}\93\e´¤RIÊ\8bÆ\89\88½\13±e'Q\17«ô4¼\9e-[Ö\89½\\15)ÍU\9dmeÙÏÝÀx]dhiþþêÓ\rÕ¯8\v\ 5\9bw¥\1eÔ\v}lÌ\1e+¼x-MòýMpÊê\7f9ÃpÞ'ëJÿLb6\9fÿ^èîóÝO\858\96\ fM)¥|ÓÝtµ5ê»aå\93\0ÀìÒê\a\ 4.f\91\98¯©Z5Û¯®ò9þ\8cìú\7f¥;\8bf»ÅáÄ\92\88k§Èv\ 6ÐgUñq;àõ.áw\a6üot\18\8b´=\89\8f\eQ"µ\8d\9b\9ac_\8aÊk\8cój\94®p,¼Ý\e/\9fg(ܪÙü¹×õ\9b\12<þ\92]\»ô\9fÏIþÆÀÂ\95°¬»#·oi'\ 1V^\9c\ 4wªý+~qäýÇñ\1dEÐ\8b¸nÄLï§\17rCe;¿\91y:
+Ç\16ãâä=q2;ø<\95#ç~8Dø¢\9bL"|^àúÉ\8bÿýrðÏà\7fp\90-¦endstream
+endobj
+471 0 obj<</Type/Page/Parent 458 0 R/Contents 472 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 7 0 R/F8 9 0 R>>/XObject<<>>>>/Annots 223 0 R>>endobj
+472 0 obj<</Filter/FlateDecode/Length 1857 >>stream
+x\ 1uXËRÛJ\10Ýó\15³»IUp¬·´t \ fª\b\10ìÜl²\11²\bºØ\92#ËIøû{N\8f<Ó(IQ\85}83ý8ÝÓ#ñý$0sü\ 4&\vM\94\9aj{2\9fÍñ\17÷ëöýI\16Îæ&ÍSüÞ\9a \ efñ\886f9\92X\92\93LãYaRA\9eL\8aY*dD;\82HF4\98Æ)ÌmM\92ÎÂ\11\90Spk\8ab\16)\ eð¸\14\1e£\80\1eÅ
+7j\f6 \10\97gm&Q\ 4\ 3 Ã\88v\ 5ù`C¤Nr.v\ 5\89]\85¹5\9f%&u¬Me\9e\8a\bH\10ñ \90T<¤Ùx\96)Rc\9a-hÖme(I\11\8dê\81²@âI\1d\84x9\8czNÁÉ\12·\90û$Ò$\9f\8bèi\8e\ f\vÈ)ÈH\9f\93"]\92fVº\80AY$Ñ(Ì4Ø\ 5\8aU\18l\96CvÏZÃIle·\86\ 4)ÃGÖ\1aò¬Â0\1c3¸Ä³
+oM\88| ¦cÛx.%+\ 2¦#\80^\15\84Ù$¤J\8eÔ\18l\9eÌ\ 2ÅZ}ÃLj\96&ÌT\0ÍZ\97A,Ú\17¢\82\0qé!3 XPGJ\1f \ 1ÙµQA\7f\ 2¸OAô\ 1Ëê9\ 5\8f=âöÙ\1e\19mæ<½~\9f\82\88\ 5\15\81nn£$\18ç\14\13'3À\87\ 5\12\fOt\9cÅ¢)\84IFà¹\94B#\98\bùÅ\ 2È)\b\878"¹"Ã\98ݸ5¹l\14à\8dF\89(\93q0Å\ 2<\17rvÁ!\ fa,@\1cz(ID\8a³þÐ-\1chèUì\13À}
+Ú@\91\85#ecT$6C~X \ e=\84CÎ:ÏÙ}\10\9d B¼ÄD\ 2Ä¡\87p\88N\8a\15ɶ\88R¦\82¶ h\16p\9f\82[\93¦hCÏ)\88X¨«ç\14¤?Î@O\8a?Lf\99\8f\11ã\14@\7fh\92#\84Ø,²ç\14D\ 19\90=gs\8fíí!Ý\14 \90ÜYº\b#Q.\ f\19\8a\16y2°\97\a[\ 6Y\b\92ì\19c4·c\1e]\16\8c\80\9c\82\88fNed!9\ 5\99=\8f¤'åô\86\ 5E\80l\19\8cZࢠ3;ÿ\ 3Ü(\99±È\93é8Æ\ 3\ e©P\10I\11 \94\93\8aâ³\83-\90\8d\1e£\18\95\85ä\14D¨húTmÔ\18,Z$ѬÂ`\v6\9erJÕÃh\9cósv\9cEô\1a(L·1ÝÊZ\89W¶b&K\83Ì\13\1a\12äÉÀÎÛ¼ B\ 2\1c\17@SV\1añä\88\8a\80\9c\82ð\88\12G\8aÔ\18,Îw Y\85ÁÆ\14É\eÖ\18¬<¹xVª\1dävV\aè\10Ä$\881il\rg\9a\85£#\ 6\9b±\81Õ^\85y+\85¨\8dg[ô\ 1Ï4z\rÉ
+\10%<\84Y(Q(Rc\86\941`·Õ\9aÅÌ\97Þ\15;\ 2¼Ù\91\vðH\83h\1d©1ÍrÞ+VafÊqáYë4¶·\81ÍE\80w:rö\912p¤Æ4\9bQNÏ*\f\ 1\11p¨Xë\14\ f\85ÒJ\92©\0ïtäFÁ\1c©±\15\10f\1dkÍ\ 6ö\12²¹\bðfG.À'zÐ\91v#Î\82/¨\0¿qä\820åFGj\8cx0DcÅ\8aY\1c\rWOùî\8c\8e\8cµá(\ 5i\917\9cãd\ eázã¥\87Ù\92ðæËí\ 1t\b\9bpd\vO)H\83!êä¶)\b\ e/\ f©â<ä\11à\ 1qû$3<8¹úÉw\97ÙÈð*Äc?\97\91R\10ÎðÈ«81(Ïpã\89\92ïÎàÈ\ 4x¦À#\17g¡\18ô\90\99ñ¬9N\fâ¹ËUT¾;\83#ÃË\137\1d\97Ù\b\1d\84A<Fãbu\9c\87\94*F\1f8N\9c¡5\¡å»s62\ 1\1e\151â¹L\9cy\b\83\18G\91çÞ¬N^¿Ã\11\ fÌê\9e/}i\9e\99ÕZ^øæfU½¸½øwqùõÅÝáþÕ®Û\7f}ùrõßÉéÜ\9câ\86\ f±ðÅír©\17¼úQnþ´è\99\15µ\bï\98ÎÔåâÊ|,Ûò[Ý\9be¹½+Íâæ\82þô¢\9b²/·õP÷{2:\90z8ô\81ÿC-Aê]gݺ6Õ\ 3öVØj\86ònóû¢ÕCmöÛ»YÕµ÷æ¾±+´\95ËúWS\95\e³hËÍÓ¾\91\b4ÿ¡l×\9b¦ýfº{óå¡\19êý®¬¬\1f\15¨^uÙ´µ9ëÚ¡i\ fåÐtí$©ßxóéÐô\8fâùT»^>µCùk*Öâ®;\ffGÉö³JTA\89\9dàWõðæâzi\9aÖ\94æsÛü2_º~³\9eZ¹h\87¾[\1fªc|ºü\9f÷uߢ Ój¼\83|æúg\8b:=4»IV7å~ÿ³ë×ÓM\97]õ\bù$N%ØyÝ>\99\8f¨àtýª/wë®ëÍç\8bó)wÓõ\83i\ fÛ»ß;å¦ï\86®ê6\10~»Û ¦Ã\93¸ÔzÂtÅJî¥\ f÷Oû¡Þ\1aÔ~3õsµ2çݶ\84\84·7gÿ\b«íLµÓܲ;ôÕoI\9dõõº\19Äг
+_uè'\83\ e3Ë¡G1\ e½Ýª-Ê\9a\89Øo!BÝKsY£JÙç\96\9e¹û¸D>¦û\81Ó\ 2-Ú=\ e\8e¹B¡×æ¦ÙIOkÇv5\99©>\1fêr]÷\93\98Ve³\99ü\89ÞÞ4ÈîµýXT\8fR\14\15íÕêr¹ø[4j\1dW]ïêÖÜt\9b¦\92ÚNØO\87º\7f2\17í}§Ö趦\89£p5\\1ePÿõXèi\86Îݲ®úz\98äEölÓíE²I\18\97]÷xØ\99åÅùr\9a+·\8d4U·\95Ó\8a_½]]^¿¿¾2ý®ú\9b&z=\rÞÖß\ fõ~0g\ fhäºýö§\98\16\87á¡Æ<ªÊ¡6á\1f\92YÖ=\9bâx\86Íò\8f)/\17\1f\11ÿ7;Ð^¿Ãç\0\ 1^ÛÒ\ 2·q.\97\aV½Y\98óúG½év8¨æý¡YÛ\81É\7f\vqåi6/xÏ,îö\ 3§7#\8añb\96ç1þO "â_Þ®N>\9dü\ f½\ 5°\1eendstream
+endobj
+473 0 obj<</Type/Page/Parent 458 0 R/Contents 474 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 7 0 R/F8 9 0 R>>/XObject<<>>>>/Annots 246 0 R>>endobj
+474 0 obj<</Filter/FlateDecode/Length 1094 >>stream
+x\ 1uVMSÛX\10¼ûWÌi\93=`ô-ùhl ¨%\86`\15\¸(¶\fJ,\89\95í¤ø÷Û=\ f¤ÁÔ&U\86¦ßôÌôÌ\93üïÈ\17\ fÿ}I\ 3 \13YÕ#oìá/ýÇÝå(\rÆ\9e$Y\82ÏZ&Þ8|\ 3[Y\8e\f¬Å÷£qlH\8bÁFTp:\f\r\15B<\83¬\9fz\fUDÒå\8c'ã\849'ä\14hÎ\ 12g<ö\ri1Øp\ 2ù!ÔÉ¢\90\88²!~$
+Tv\80\b\f"öÙ\93®Ø0\1c\a\bLµM\ 5Zë\0Y\ fÅ\93\9e´\18l¬ö\r¬Á`Sê\ f±®Ú\0Ã@Ò,eA
+\98Ô@&\8dÇ©!-\ 6\eE´¨\ fu²^¢Æ;\1d\ 5\83ì\eçû\19e{ÒbÈ\86);\1dX\83ÁÆ)\9dïY50\86å\1c¨ïy \1dbV\8bÁ\ 6>l0¬ÁL\e@ð\ 6\83\8d²\8fÊ\ 6\83E·\9e\8d5¸\96 æ \aeõ)Î<]\16\1föMÄ!\1d:/E\9c¤º\10¾Ïíuh !ÇÁѵHbE$\9d\13\11\1d¨\ 5.\81S@Î@¬YÂF{Î@\88z\9a\7f \15\ 6©³7È°+±"ªú\ 6#4\ e\98³g]\9b¸º¼\13oG\15\99Ðw\16MÀ\84\9eåfÆ\1e§\ 5÷&¤\140ÐÀZ\92 3ö\9c\81´ÇçÄzRí\89²L½Ã\85\bÅ\ 1\8a:\ e×\8fÖ¡îT"\ 5ä\f¤(\9f
+\ 3i1\9bä\1d5¬Á`\13ÎÍ°\ 6\83Ee\99e\r\86 hÆ\16å
+N|\1dK\9cáG¤\80\ 5\e¨\8fUÔÛsx¬¾C\96ëÁá\81t¢Xl\ e,£{\91\ 2\8a\1a¨\ f8¨ô\1c.ß;¤(\1f¼\ 3i1=8b\r\ 6\vÓß\95\98Ôbxài\9f}Z\8bÁ:7{Ö5\13ƺCXq\8c[\81\8et\80H
+Y\f'-\ 6\e\85\1cÚÀ\1aÌ\82¹\9c\865\98\ 5ó53°Üê\böðòê\1a;À\8a\fÄÝÕ\82ô 9\ 3Y-ï÷\10èÚD\vÜ\\8c\19K¢\80\81\ 620 \a=ÉbB¼\0Q\92>¬XVWÊft\96\8fN/\12lºä\e¾½\93,\95|onOòÕ×ëåT\96ÓorÝ>µ\9bÍßùÏÑ ^ð'>_1ùúë#þ}\9b^]/¯oòÇÇÅ9?òë\9bË\9b\ 5\8fÚ\93ß\ fe÷*\9b¶\93Ûù\8c¤7¨¼'h>é/ïî\97÷3É»¢Ù\15«½,\8aº\ËmõR\1eë/ʽ,\9f\v4uÞ\1cê£\ 4J\96Ýï²\93K\9c»j6í§T³îõeß>uÅËsµ\92]µ.¥ÝÈ"\97y[\17U#ÓÃþ¹löÕªØWVjÛ\9b\97\9bª©Èì\8erßví¾]µÛ£?ÏÚº\86\9c\9eþ`éòj¾\93¢YË\1d~a\90MóPn·'¿\9aöO#<w¤iX\ 4/É\9e`¦ý´\96Eý£\90Û®B\eÍ\13lØ\97]Sl?e\99þØí;Ø\ 2fN\1f#7Ū\94}+÷EWµ\87\9d\9c\15«_R6ëãª4J0ÿC)ùüìË1?{.\9a§òj.\7fÉl[Á\13\99\15«g\16\bÿ5\18cãȺº·Þ\14õP5ëöÏ\ e\93:\rþéÏ;QY´ûjóª}X\e\9d\11\ fW\8båÿ\9b ìEQm[¬\r\15N/²·{âGøò0\99àZOÜ5À\ 2\9fMe^þ.·íKÙíäò\80ýÑ´~\8aç\18Î\9e¤Þ\847Æz\eá[A\96Eøæ\f"âñó|ô}ô\1f(¬\8e$endstream
+endobj
+475 0 obj<</Type/Page/Parent 458 0 R/Contents 476 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+476 0 obj<</Filter/FlateDecode/Length 1556 >>stream
+x\ 1\95W[SÛ8\14~çW\9c7Ú\19â\\b\10è\13PØÉ\f\vi\13¦\9di÷A±åDÅ\96\I&Íþúý\8e|Áx»ÝÝá\92\8btnßùÎ'ùûÁ\98Fø\19ÓÙ\84\8eO)Î\ fF\11>\9eM¢ Mggx?Á\9f\95\94\1e\\ e\86·ç4\19Ñ*\85ÉéÙ\8cV aû\bßÄoÞËTiå\95ÑdRº\97þjþ°¤\855ÞÄ&#¡\13º\17¹|»úv0¢Ád
+ã7\1f¥3Y\19l~7\89t¼È1ÆgU\8cÁñ\14y`ãýÍ\8aÝUëS\1a\8fëõÉYt\1aÖëp¶Ô\8e̳´ä·ÈÙd\99Ù)½!o\85.\8cõî\82V×\8bá|ñ.dxó8\ f\89Í\17\9f\87ËÅç\88\96"_\v2:ÛSé¤kË`\97uæãã*¥ÊOD·ÆR"½P\19"ë\10·Zj\8d\97Ò9\86e)í³\8aeûý{áÅÆ\8a¼Y8ª@ªJéEcèÜ\119)ɦñx4\1aGþ\87\ f\ 6Õç \7f\8ej«Éi\14ðå.p\8dÊ\91 +vmè\14a%\15MsT^d2\97Ú\8bÐ\v¿\15pÍؽ \90ÔÉ:ò\86Ö\12\99hO¦ô½<[ì\ fwÊÊC\92ùZ&\89Lh§üViº»»¦\10ÜE!\99:;m<Hö½\84\r¶n¥\ 6üÜ·\86FÁm\ 5k/`S\ 3*\ 4Ã\94çZ\v+SiÅ:\ 3Ö\ f+NXiçQÐKÈ\94·ÆBs)âÙ(¤Ø\a¯&E\0/s\86þG\8eU'ÿ-\19P´WL\13\92éê\98¯Tê\f졽)I`
+kT\0\a\8aqà\93´\0òÒ\aÚáÃ\9e2)\9c?ª\81°269úÊ\r\bMe?I(¥\17¹\ 1èð\15âu>\87}h¾|â\16Õ6ܧOJ'Ì\96ó\93£\90ëN!?èA\1d¶á!·¨©\91Ë©= ;\ 1^ab\13\99\8a2ó-3]\13¹\9dº-ú\8bßµ\8c\ 5&\94\8dö\ 1\19¶v\81Ç\ eh\18Ê\85\16\ey\81®u\92㡶\83ØèTmJ[\91\1dÎ\1aæýÑDëÎ\ f«\98(\8aLÅa¿£¯o\\19o9cÇjñõ-ô\ etãT\94\rMÁ\90ó¶\14Ê \7f\b\9e#Zþ~\ 5@ÀHÆ °
+Óã¶\ 2¯\ev Iô\1aÒôAcP#Zq\99y\89ÒâL¨\1c±\906/5\92£¥ß\19û\ 4\\10\158\1aî\8a3Á²\9d"(Z\10"&\ e\v\11w©\17\16E \978\96\ 5B\19eÌ\8aÐ*[\a\88CnÂVd)*u¯\9bs\95(:»Þ\87Îv,¿¾\ 5e{q\eÓ&Å5ê\91H\85ÛÚ1\rèñwq¦X\80x\82CÊ\15ÏcùO\1dd¬\1cWä\14@Ä\ 15>¡\18ø\8bØc\84¨ÈJ\96ÈC¿/ Zí\ 2ÃWñ\rÔR\99°\18,Í^\18\9f#¦\19âÏ\17$\92Ä\ 2Û^MÜiÁç\r\85QÖ%´\10\1e°³`X1Ã{\0Ñtg v<\12Ýb\99\16´5H8ÌSE³D1Û¸øº\8dý°%Æ\1dGR»\816Ð\85\vÄ9ò\8d©\ 4\ 6ÿÊ}}\8a5Q\98i/N¹¢^¹U}íÄög¨ê@à047Ð\18ì\b%ÖäT³Ù\ 1)\bÂUQ\98g½s¨\9c¡59ÐéåáJå\83ö\aß|\8c`ê\¹F\94w(øÎÄ"£K+\ 5#\1f\86\ 6s* \12\89|õõ¯©Ä½\928Ó\0õãýüÃã\rÁËo\1f\1f\1e\17\11=ðýÁè×ÍdªVÃ+\1a\8bngzEtqé'²BPøÆ\1fÒ§'¨,æóåÊuϲ\0\92Õ7«\vº²F$1\8e\850=\vH\83\1fx3\bo\82ïþ\95+Ü\1d®>>\¾¿¾\®\1a\82r\86ÃÛ\9f\¾®Ã,bºÚ
+C{ªv2B\95&UôíÒ :
+¥ti\99\ 1¯\86\11µ-\0\80©êߺÖM-\ 3\85\ 2\85\a\85ªÖ2êP4\ 1µ1´\91¾Éº\9d\92\8enÃÉ\8eyq\81Åþ\11\9cú"ÊUl\8d3©\8f +ÃÄn\86\89Ä´\9aÂ\ e¯ç·Ë!Ûó(ð\95\v\94Â\987ê>|¥ìÁ?Å*uSÞ
+¡gº±2s{{\1d¿»¼g
+}Â\vx\1dN°'É\87©%\8b{\16«\14¤\1d\1a\ 1QÁáÚ\ 2A\85\88\9f¤Çª5y}»\r\82ãh||v\84\7f³\90âøøüïDRÐ\82Ù¡:\966\1c)á\1eÖ^\1a"\9a§á<ß\8ag0\8e \80\eI/\99þô°w\86\8f¥`g\83zõ\ 5
+ò\aÈÎO¨\906\ e×È´ê5y\ 5ÓD\8a\8c1â\ec§LÜ\89ÒTÅ\11}éæÔÜ&\0h\80ª\93[\ f_¾úô®%á\14EÕ"\83\1a${ÚB|¥\ eÄ\105¬\80Ndû?1åÁÖ\ 1,(¸)7[P\96a\ 3ßv2\ 3:¹Òè\12ðÜÀYФáí¬ó¤2«\9eTþãc\12ýìÑh:\eE³Ù\14\ f_x$:áúnV\a\1f\ eþ\ 2@\0xãendstream
+endobj
+477 0 obj<</Type/Page/Parent 458 0 R/Contents 478 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+478 0 obj<</Filter/FlateDecode/Length 1463 >>stream
+x\ 1\85VkOãF\14ýί¸ý\ 4HÁy\90&a[\ 4´´HÝìV\89\84*Q¡Éx\8c§Ø\1ewf\9clþ}Ï\9d±C0HÕ\8a°Á\9eû8çÜsçß\931\8dðoLó ]ÎH\96'£dD³ù,\99Ðt1Çÿ'ø±\8a²ð`2ú\11_{\ fnÖ'û)\8dÇ´Î\10k¶\98Ó:%Ä\19\8dh-ÏÜNø\92\19m¬\11©\14Î\93·"Ë´üáïä|ý\ f\8e_Ñ\18§øøÅå4\99"ÀÙòf¹¢¥ò7÷_Wñ¥×\1c\17\93y2ã\97l&Ç£Ñ8ñß=¥ÊI«7Ê\rH\94¦zF\1a\83Ì\96|®ñm\80ß\8atY\17ªT\95\17^\9b\8aD\95Rã\14\8aÃ!:mÓÑR\94\8aVÊnµT§¡D\146¾\ 4(\Øzx½Â\89LYG§\ fºJÍÎÑ}å\95\94\7f{\96v¹\969iGYS\14{jë\1dNH\1aT¢Eå\a´i<åÂá'%oÈ\8b\17Å\r\1f¥tµ\92\1ax\91\90¡ì\9dö9Ie½ÐU\87\11U(Ú\11þ`lÊ]\e*\11\89´ç\ e\91>¡Ç³ÌXRß\ 5\830à'©\12\85£\10\ eèô²Zõ¬\1d\98
+)AßÏcù\19\1f)\7f¨Ïm>Q\14\9c3Õ\8c\ap¥\9dØ»\84î!\1a´\b¤Ñ\13p·J¤`\81UÀ_¿hi\8d3\99§\87ûe ÷¨[\ 6\1e\rü®\8a\9a2] ).\9b\ 1D½h¹p\8fç\1d)\93YTË\1aA#\91à\91c\92\8bQdã\1d\81!ÀR\1d \10Lí\8c}é\84\182tì3\90(Ø\99¢áÖÑLäç=B
+MKÈ,£\1aÕq\7f\f\a7ø*u\8d8«\94\³AV\ab\9e\15^±\80\r\1c r8W¨\ 3\8dN\9a\1aä\b\ 6ÈÑÞ4\96þ¸^\82Ô\1e;\ f×Ë\ 1Ë\vGÅÖè\80.gnQXß~\eÞ\7f;ª£\16ò\ 5éûÀ=äªâ,Pß\16\91Þ`\aĺü\83ø@\16\1a\1c³bÐç\ 6ïo\90\1e]H\83\89\ 2\12\À1úx\14\80Üöµu\8c5ä²4\1eqr\ 1,+\8c\89Ï\r\862\ 4ê2\86\87¡Æ(K\88-=\b\97\1cSv\9c¸-°\87ÙV;\8d\8a\13Z÷ê|\92¢z\8a\108¶\ 6y \ 3íZ\r \8a4EBô£YOÂ\8b\8d@\89\8fg\8dkÀù>\bÈ)ÙXí÷½¬Ð¾3Uà\92Jý\9có\8c`P"lNó°Ö\8d÷,\9f\0wjJ\9ekÆÔ\9a¢`\9b\81þ£\97Á¿\fÆ\1eÇ£¾Q\98£Xr/k[x´\17&Øå¦)Rª\8c\a'¨\18ìÂ\19C\80\90\16:UT*\81J!è®\97Çó\18\81G\90Ù-\r|µ\16\16¾õ\86Ã^v\81\9dqDTºÇPiÉHõ\ 5¸æ\1ajk¶\0\ 2\18\10\89γƱ?sÖÂ\0q\1e1e\82m±gã\bÆ\17&ÈV\8e\17\19;\8c\94ú\ 4\ 5ßXøq´o\1e2G˯k\12½ú\82V¢Ñ\fHm1\ 3:8\13\ e2°ð}\0\83\1e\ eû\ 2ä\83\13F hMÔpo\19¬1¡ë^ΧJ©Ô=}\9c´õ¥\8d\92\82Gõ\83zÛ!\8cÊ\ f3\1eWÈ\13¨{z-!¬µ¸@a\9e\9d\11Þ¶\13
+A\93,\84.£OÃP¢\13[\ 5LyáÁ®_[\ 5Ô®\91hÚÅ=\15N¢å°S\ 6Q*J÷-è`r\17=\93Kèk¥x\13°Èáv\a©\1c°}<C¾\9cÅ\8b ;¶ÀO¨¦ï\12\99¯\13È&®\8a\ 4ûd\98Úça
+¾
+SÛáíýÝjÈçyûð\1dà§ÐåêËMØ\eÃÚÂb¡{\81ß1>a\8dº\19¿úxÎ
+zaá ù¾<¢ã\12<\96\ 5\84&Â*\rcbM\83M\1fvÒNØ48þ\ 1\bLFpYʬ)©õ`\9eXGãËù\0\1f\8bPâøòª\9b\83îZñ\17F4¸V\86\eÅ\80r³C\9b\16[:\vö\9câbÀ\93ÂÅR!ì³j×\ 2{6¯\82`\90¡Bl\99°Ûðv¸e(Ïã\8e{XY«´7\a\9bý\81\e\16HGF×Ç\91úvù>:ì\ e¤µ\14DG,u¥K\r-ótT\8aU\ 4\13ä\91=àÒËÚ^ÿ:\b:í\86¡ì\ 4\8c`V\8fd\1cqå<Gf\8f\ 5\1do\15G\7fcZøZ\86WKæ¯ó¢wL³ÂãÕ0ÎÛ)ü"^:¡G4Â\93\11\r\81x¤\10\ f7\89wÃ\13¨áPP>\17þvw\ 5Zùd\ f\86ÿß\9a ·«&Dç\0ûE{Ù\1eÏ\17Éìê\8a¦WíÕtuýåæ\9a~\89óÁ"ý\81«ò¡\8bîÝ\8bùèê£ëõt1J\16\8b)nà¸âÎøȯë\93?Oþ\ 3¬j÷>endstream
+endobj
+479 0 obj<</Type/Page/Parent 458 0 R/Contents 480 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+480 0 obj<</Filter/FlateDecode/Length 1643 >>stream
+x\ 1uW]oÛ8\10|ϯطK\80Äu\1cçë^\8aöp\ 5òТ\87ø\90\97\0\ 5-Q\16/\12é\92\94\15߯¿\19R²\1d§\87"\85e\91ÜÝ\99ÙYúçÉ¥LñïRngru#E{2\9dLe~\7f?¹\93ùÝ->ÏðçµTéÅÕôú×/®ï¹íí\86Ï\8b\93\ f_îe6\95E\85\187·w²(\ 5çOñMqú¨Ú¥\92O¾¨MÔEì¼>[ü\93v\Þæ\1d\17WóÉ\f{N\1flô®ì\8ah\9cÍ\8bæry9,\9aÝNn¸hQ\9b ¥+ºVÛ(+³ÑA\94¬´Õ^5â6Úo\8cîÅUR»^rôÞù\97 ÆFíj\9aíD\16µ\1eÞ-´j¥VA¢7º\94è¤pmÊq*\17\97W9³n-½\895\ 2µ®Ô\8dôµ)jA"\11ç,u\88²v!\98e£¹{í]k\ 2_Ä^k+ºÑ+e\v}\8eU>ª¥iLÜ\9eKÐEçñI\94EÜú8fál\88^!k¤Þâ|d·Ü¦\88(r+\ ea+\8f_?§ý\7f<|y\14\ 4\8e®pÍ\84è!ýÙÍd\9e\80\8d¢\9aàR\89ÈÙaGèµ\97\80J\89\14«¨¼þÙ\ 1Ò\ 6ù\84\17ÄÂS \13AB\87bUø\9d§B=ûcÃ\80aªD\ 3\15\14ë;k\8d]\89³ò·5¯\1f\13Ô¯Û\7feݨX9ß~\94§Z!¡¥ëb\8aì\9d\ 3~\1eL6f\ 56M\b\9dþÈ`\17`\1f"*O/'Âg<î(ùî\1d\88\arÄ\89E´]\13Á\91תd|ce£¼q]\90µòÀ\10K\92\1aÞ\1c<{\7fðS½\15\8b\8cjµÑ <hlWQ\13Ü\ 2\90\vj\10«\0\9c×Á5\1d!:\97§\87o\8fç)\9d¥w}@\ 2o\v¸ÊqØ(Yö\17³k¡ð\13?_ߦΪv©~øò\8b&ø®Ý\1aZ#\7fÑ@\bà4\81Éâ\81
+;¢³\86h\83Î\95sÔ\17rJº\a¿hô$!k
+M À¿ñ$\b\8fK\1cÄ\ 5?;ô+±:h\ 3cÕ\1a0\80+\ 2B B»,'bñ?»A\ 1·\1aºjUD«e<\12-\17\a¼Dé]×@Ë\aI\1c\vv\ 1A\86\1aÍÂ<\ 3\10ν\ 6Ù0 \1fÈÐ\ 1ãºÌÑT\93z<BL`Îs7ªÃ¾¨^4A@\92,AAÑ\9d-\91+EzTæóé xyÜÚ¨^qtV*±¦\8ez´-à|>CkT\15\ e\89^Ã\8eÊ$6í\89;û]Ö\1av\13\r\1d
+\94\12Õ\86
+ònÙ\85¸\83í(:+Ëp¡ 5\14M$ÉJÊ\1e\ 5,u¡:Ø\8b\89#\10;óAk\97\8e/`PÐÇ\8bÖköB\ 1ÓJ}bB¤k2\9blEÍ1Ū@_\ 5¹º\16°Û:¤<öm\98Èóà¾^õKU¼dS\ 1\9e\rKDì=ËI\17ÏgCi£\ f\91ÖÆÙ\15\10\exe·c[Æ\17ÁvÒL¢\85\9c\ 3»;µ\1c W/,'iàPW\1a\1aL=´×Ù\11¨Yr
+ó\87þÏ\83Fÿoin¡qðÃóLO(T£`åÃã\bTB-~C"kªpp®¢?Æ\93Dý\8f\89h\8a\10îe1\16\a\89;\9bô\95\9aÿ70mV0DðUn\14\84\88Ï©Qö.\82Þ\1c=d±s>ÂÃò\7fé\1c\9f¤ÂtD\a Àv\80~\0ÇsfU\98]Hx'À\845Xyoþ\11 R«Î\ 2P\8eM°\ 5WÈ;9m¡5U²]\ 6çÔ!ëxë:´.Ê*Èv\9e\ 3`%Ù5qÇÞ4\92¶É\82\8f\88D \18G\ e"a\vS\99\ 2ÂÄ(õyz¡a¶{\8bY5n©\9aç³\ 4\1cçÉ8Ò\ fFÊ(O\84%\ 1Ãá%Eý|ªá\9a$p\ 5\96aÓèy\ 4°\90~³+\15+'ò\84\ eSð©¶Õ%í\91 Ô\98\ 5C·[6þ0ñ\8eJê\r\9c£\7f\97àÁh\1a\13\84«l (2\90°\ 5¾-b6M\90^gI\13Ðeã
+¶ÉD¾9{1> ¦»Ù¨\ 6\18åiÉ£òfnÊ>s\94\18ÙU\eeR7Ð\ f\12_ýK¯| dè"l\1cBâ\ 4B\9fÈ£\e\9c\a ¥È\9c.\a\98\12µ\ 2nÁ$pØQ¼^%[\9dÈC«V\ 6L\f\84\84\9a\81iÝ)\9e|ÃU§\82¿\r\100\ f"\92fO:\17T\85xNTz\83\88pfÁ\r\8e¹\ 2\17\ 6½8\18j\879%\ f\ 3¶k\rï\ 5Ð\88´ãåê>_@\87QλÈõ\f×d\O¨h\90ÿ[äí'\8fßÒp0Ðl;\83\81eeÿÅÐ!\1cƨ©Õ¸\8c¥TÓTL·\ e¤\11pßä\8c2å\87\15\ eÈ\17âô\7fh\8eð\1fé\ 2¸\86\19k\f\94\87\83Ù\8aé\89ð\1cIP"Kß\152vÀ|\7f÷\19\ 5F\18×pç¡c\13ÊRêPx³\8e\10@cZ\ e\97\94)\13\aî°nà\¤¯\92\15\84nMË\ 4Yi5\80´]»Ä¡®:â{P»Įß'6\86 Æ´Ô\83\ e\18ä>\8a\99\9eÆ)\93z\80ö\1aõ+Lª\92ªÀåöù\14jMJ\1aJ<O\1e6\1aÞ.\95të¼\19/mwÃÏ\90ti»á\8f&\90\9e\7fZ\1cÿ°\99ßM'wwó|m½eÁ\7f.Nþ:ù\ f\95Nbºendstream
+endobj
+481 0 obj<</Type/Page/Parent 458 0 R/Contents 482 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+482 0 obj<</Filter/FlateDecode/Length 1656 >>stream
+x\ 1mWÛnÛF\10}÷W\fò\12\e°XÉql¹/\85\92ôâ"MRXAú` X\92#i#r\97Ù]ZÑß÷Ì,©\18D\11D¶Éݹ\9c9sfôílAsü[Ðí\15½º¡ª=\9b\17sº\9e¿\96Ïå->¯ð?0môÅby]ÜL_¼Y\9fýôÛ\1d-ni½\81\9bå\82Ö5ÁÎ|Nëê|½\vljë¶äÚ²¾X\7fÅékZà\90\9c\9e]ÝÂâºÆ1\eéàû¦¦\92ÉÖl\9aK*ûD[N\91bïöT\1e©ó!\99Ò66\1d\11Õ·Þ\ 6nÙ¥X\88]±vS\\8bµ\95«\ 3\1f(\ 5Ë5%O\87`\13\93¡Ä1QÒ\88"5¶\f&\1ciã\83Æ\86\17&Q\1fqÅ»æHÆE;{K\95w1\85¾B\18\8fç}\94L"§¯m\87\ 3\9a\ fü.^\15Wâ·ñn\8b7\8f\17\ 5}v°\9bzg\12ÃVô-ÓÇ\a\8eTó\86á&I¾È( ¢`«$f\87Û\12pe\9aF\1e\99\1a\89Ä\88{\1a\9cA)â\ eïü\81Ã\90óè\e\a\1cN1U}\b\0e¼\8bdôqL¦Ú#\ 5Óu0ã\12¢ZÝÿCµWã6JÐZ\85Öìñ\b`\85\1eg2ä\rÃ\86\14ò\ 4ÛÄ»m;\1f£-\e.èÁK
+±ïä.!Zò}8\85Õ5&\ 1\9a\16åæ¡â;ó\ 4ûÈÚ×\9cKQú´£\83Å\a@Ö_|\9f&.\87\80.õ\88\11\84\18p\9a\86\8cmÉoN\ 1\ 3hØ\96¬ô\88:©\1a\ 6\báG\bÎ'Ò0¶Æ:0À¸#Jä¶\ 5\10³\89`ÃLÜ·8\0\83ZË\8cÌà\ 2·"mLL\1c\8a!\b)%L4\161\ 4F\81¢õî\92`¸BÑ\9eßÓÀ\94ø\92N4 \8dÆ1q.×Ls0G\90\88QC\87\16U\8fÂ)%\e\0D~-§\9d¯\1f/\86ëc\7f¼Ý\ 5Ael\8fØq\85\1a¡Vh7Ç\ 1\18Ö\1cíV\88\83ür[\9a\12L5ÕØ?\92Ò\13:\93Á&p\9cºà«ÌÔÇs<W÷\93 s0ñ\97Ç\v-ÙX\91\96L%W\85<\82\97ï·»\9cÃ\18ÌêÓýÀMa«{)!\ 5\b\ 2W\ 6í\9ak\r\14L\9aÖ\b½\12$ÐçZ1\1eGÀÉW¾A\81;t\86È\8cÍ\9d²éS\8fF«¹c§Ê\85\ e\1a\8f8\7f¸$NU\81$V\89@£\98.\115Ú\ eä\9d$\9c\81˱\ 2Ý\93¼=1d§jú6\1e3{K \rÄÕ\ ezcÿx\ eóéØ1µ°Ú\f7\1dãbN\1d\11}vö»°ó^¯\85©o\10äãC®\1fhö,\12!Þ(y(Å\84\19+y\97ý\83!Õ\8eM\97uX\1aÄ¡i ú\94Øi¡ÐZµ\17\8d\91à\8eôùݧ\ 1«ìÛ\84`\9f8\16ô\87y\92J\18\b
+0÷\9b T?è\ 3·£\94h\1fào\a\90\8fÒÄ8µ\r¦\ 5vlD¢ë^uCàG8¡õ=ú\14\9fP?\b\80T\1f,¼\90.v(QÛ5ü}â:«;*\ e \ 4§Ò\819óà\14SA_P_#Ä\v¢æ\92©v4J\99(GNnpÙrë\ 1F<B\ 4Z\1dNÏGäìÕu\1eS®lkz§\9d&1ýï`ü\18ìÖ:\88(ä:O5\9dP'\15Q©µm\ fU\95 \87_\92\9deiDîì\9elðN\86ä%\1dv\16AKǨ¶è<\18ak\8e\13TDw[\ 3=\16®\88¬Já½Ûä XsÙo\11\97ÌBt.FdAï{¨Û{¶Û]\ 2@\98¿h0\8cr\b\86W§\86¾õÜë\1dÅE 2ñºgî *I\92±2A[\93`ý\aâÚ©"\ 6\bÌ\ 6Ls°Nüç¹mHæ3däTÓ!é\ 3æ\83â\ 6y\94\81\ 4\0&\9eÇ^WßÈf\95»Ñ:\9b¬il\1câ\90±\ 2F>³\ f˪¿b¹V¹0aÛëZ\82æ\1ezºw\18ñ\1eeÄæ2q\£q\1aßqó`\8b6ë\ 2'ð½\ 5²G\99¦úB2\b\fÆU(k\9e\8c´\ 3Ö\1cf>ÔÐ\85Íà#\8fCô\90u\98@\ 2þT\15\ 1D\98a\ fÑA7Pµl|µ\1fD6öuÍÒ^Z\7f\1d?\11Ä\ 2w"Æ|Ãágj\90#Fuß\96\80_zmô\ eÍ\18\96¸I\9ajKÀµUÖ<(\eH\8b9Äõà\17¸*1eèuÐíÊÂ\99@¨\95Cÿ~X¿\8c´çà\18Ë¡\10\14Mh\ 1ß³{¼Ùp5Ý\14´
+:£³\96ÁÔ\89)C\93O7H\10ÌÑ\9f\8cýRv´LeY`3õò4ÈÊ\ 2cò\ 2ó]\a\13\ 6&\82\ 4!%\95\ 3\16Ô\82îå\89!g+í&P\1a/ñ\81|E3'@!{gt\14ªÞédD\9fÉ.\1c\93\ 5ws\8f\88yY\93\ 5|CµÅ;plÐ^°\86\99^d\96\ eÏþÍ\7f½\90)çà\ 4$x*v\12Ý$\80\1dà\1az\ 430\19Û¨s'K\86®Uøá 1<\93ô\94¦C\ 1e¢c\8a"3ÙßU9²\À%"Ü\13¤$ómV\1aÔ}âX\84Z\9ec{ÂÁ2ø\83nÛRè/÷\1f\1eÆ\8drÐÓåð%bq»,nîîè5\16aý*ñ°úëÍ
²\9aÛ
-ôüG<âk6\9e\9dÝÎïdiÿ\9f¯)×Ëy±\^ãK
-Î,åæ/볿Îþ\ 5\90lQendstream
-endobj
-540 0 obj<</Type/Page/Parent 513 0 R/Contents 541 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-541 0 obj<</Filter/FlateDecode/Length 1191 >>stream
-x\ 1\9dVmoã6\fþ\9e_ÁoN\81Ä\8d\9d÷ 7àÚKo\ 1z9\fç\e\ 64E!ÛJ¢Í\96<Ki\9a\eößGJvÞÚ\fÃú\86F¦\1e\92\ f\1f\92þ³\11@\a¿\ 3\18\86Ð\1d@\927:~\aº\81?\82Þh\88ÿ\86ø[rX6n£Æõý\18Â\ eDK¼1\18\8e J\ 1;x\924ïÖ¬0¼\84®\ fÑ\9a\83fyÌàÓôöûgÐ;mx~\15ýn\ 1\82¡\ 3hw{~\88\10Í®\1fø0ç[øº1ÅÆÀ·\9d4ìÕ\99÷ \b*ópè\ fÈÜ¢[\13PK`\90òx³Z ¹\82L`)2\ eBcÈEÉ5\97\86§ÀôÄ¡u`\\83õü\1e\81\ 1üdïÓµ\e\98|ø\0\7fU'¹^ÝÀßt¯\ 3í0p¾ksûÐ\9a»ëë´¼\ 1o±\90^uÛðWssá²5¶\97½G\ f¢Ù\97)x-\ f\1e¦¿N\1fÀ{òà~ö\80G\13\ f\1eï¿Ïï¢Ù×ù\13\827Ñd6Ç\a\8b+ï\ 2²õz\92E&$æu)\r÷\94²\8e¦¿E.\ 1ÇÔ1ï\8eu2@^\19hS\12ÙÈ}²f%K°è\1aøk\92mR:7X|É·\ 4}0ðë\80\a\8ev\97+Â\91µ\13IÆ_xF¨t\94sÙ\8aâÉ$\b,â
-\95%¤}V2\89O:¾\1ft\16WçÀ\96M\e¦\11\bbX^\9c\9bXv+×\92å¼öi\95³,U\ eÛµHÖÖ\97ÕÆ>\9a-Ó°â\92\97\fUõ\ 6¶*\15\91D),721BIøÿ\90¶Ü\15\9cåSnò\18\89¨HrÁa\8eØ\(tôÊÌ!>\eDÅãy¬·L\8b\84eÙ®\85¹â%{\13?c¦LjÌÀö\v\8e\83vX\15ìã\856ËYÊaSPH'\ië²\8dÍ\8bÃ!mb\83\93\ 2ðc;躮\9f2äøä\ e1w\84Ç`Í\11½\ 4&S e»ÁR\1d¢æ\ 5ê\8f\1aÜRL¤\93\19Ä;`ä\8d\8d[{«\14¹\8fª>\ f\ f\81Õ©F\88S9\899Î\15\r[a\9c\1cö\9a²1¹àßÕ-\97I¦4F\86\9a\8d±GþàFÛð«>¨Ý\93æH\83½\Z\16ú¸ÚX\9f\83 ëÆ8\91",U\96©ã§\86D6Ï\9ca£æBZÂ\88"HT¦¤ów"XÛ\14$»\13{2A¾Qhk®ñ©\8b)Q8««Æ¤ ßðn\15ëÃ'^piçæÀ\9e °Då\ 5¦_¶ì§}»Xï9ÛA\8cc@hM3eÑ\14\86Ô±o>ª1b\9c%øü\ÏËçgTRR*Ò7õ2Þ\95ÊÀF\8a\17\9cV¤|\10y\91Ù¾ái\vR\9c)ÂTã\84TÛ\ fq\ 1ÚÝ´\17î`¿}ê"Xµ!ô\91h\7fðR\81*!W¸3\89\10Ý\ 2NJ?%\93Õ#r/HÛ&=§ÆvØ?tÞϼä\1e\8a]á¤â¯8Ïp¿)»(ÿe©\ 1<\ 6ãñèº\83?]\bÂI¿? û-\b\9e@æqê'\93EsÐ\1f/®j\ 6;.]°_snb¡\902T¦æ%R\ 6D\e\r³À\1fûÁ¸\8d»\95eÅ\9a\96\ 1+\8f\86ap\82s§\8a])Vk\ 3\1feZâ\82\8fJ\91®8Î\19\f®×Æ?Ãwü¿\1fy÷ ×;KQ\81¹\8d~8è^\88~&\85\11,\13?H9«LÅ,#áb.´©Èáõý\9bõ6W\ 6§\aÍÂJÌ,V/\aÂI¯'
-ÅE\88\ 5&Me\ 2_nR¨D]\r\ eª<µ#3Xº\98'l£ þ\°u=\9d³Ó\9eF@Ü}ß>Ï`&S\1cÔv
-b\18tR·\ e¤\8aké\19Ð\9b¢P%\rr\ eÇ]PÓ[Í\Û\13Vr×÷£Ã\9bU/to7ÿé\15®7Â\1a\8fzn®\8fÉÁ4jüÒø\agæ"Òendstream
-endobj
-542 0 obj<</Type/Page/Parent 513 0 R/Contents 543 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-543 0 obj<</Filter/FlateDecode/Length 1137 >>stream
-x\ 1¥V]oã6\10|÷¯X\18(â\1c\12Er\1c\7f¤O .¹\ 6½´(êë=Ô} $ÊæY\12u"\19\9fÿ}g)Ég'u\90Có\ 1Ø"¹;;;;â×^D!~#\9a\férLIÑ\v\83\90F\93`D£é\ 4\1f\87ø¯%e½Ûyïâ~FÑ\84æ\19N\8c§\11ÍSÂî0¤y2¸\f\86\ 1ÍW\92ÞßÝ~ú°\18,NéQ$µ>\9d\7fÁ¹\11EØÎçÎ\87\93`\8c\93\83OF\92ÎÈ\1e\1c)ø\b)C®LV¢\Ê4Ø\vhÅZ\1a²\eM\95¨E!¬M\934Sµ±|\8eÃ\15Ò\18±\94\94Ë'\99\9fñ#\ 6\81Ô\11@rj#\13]¦ÝöX§[F"(CV«tI\89Ès²º\ 1'c·\8c|AÝzÐÆ\e\8eA\13âÍWÂ\9e\18BÐÌ\19U.\9f¯ÿ"k\89uQ\92ü&\8a*\97´Y©dE\85ØÒJæ\15RÇÊ\ 6ô\90ÑV;Úh\97§´©\95õÀ/îC\9auä\8d\9a\8cUJ\9b-\ 6Ô\9f¯P5þ\ 4ýdºÊ\83Å¢ì\9fQ?eè}Z\9cþü²\v¾\a(ÑH0Á¬ig+g¹jcS|ñÄ\95o\ 5Ôv\9dÂ3z3ª\1f\ 6Æ0}M\94©\\ 6t\83.µ\12*u]\88\9c:^ ¾\8c\9fX\8bv\904\89¨ \9c\8d®×Ï{ó\9b¶\12õ\v¨§ô<\88X?É]£8¥¯ã¶Q\153n¤g+\fè±\11\1c\9a`Ûå\90D¾\11[Ó\0êrvú»\15F±Ä¶g¤\9a 8\90,\aÏ\11\92a\95¤k\92_\1djkõ¸Ìu\8coO"w-´\8fw\7fÝ}lÛµÃû\òVXYÈÒ\ fIUë\ 4ñ1\/\84¼ÓAËë!\e\8d2cIFcúVÌm®Öòº\91×K\99\12~þ\8ef³éE8¹¸\84Í\8c¯Ãðú*:£ð\9f¦\87Éu7T\8bA4\9c.N;Üa0åÑâ\b\ 4_éDÞ´¿¥ËÃ?4\17/ë;\81áêfø»\1f%µ\ 4 <*¥Ü`ðD*kzçJæúÝþ\f\80\9fÔ%2¥xë\1fWµ|RÚaÂ[_ØÅìжÆ\92ª\94Jm\89gj£ì
-©N0\8b'\ 1ý¾\9b®C\11s¯+Á½@¦Z»%\9fÙ\93nì²\f(\e¿ÀÞ,wf\85Í°¶zû,»U\85l\8aËU)9²,\13íJØ$û(Ü\85s·\11±ê\91\16\95Ý"¼,÷|\16k\©L½¨<[ªdsÀ\82Q0°ç\99EU¡ä\97z
-\82 fOiü\11ôCóôÅÁª\ 5ý\9a»t\89!~°´\11 \81Ã\97Tå"\ 1F\99\b\87÷Ã\8egZaK,\81\12\8fA\95nì\91ß\ 3Va\1a¸`Ó©¹\e³Îv\eÌ\12Æ\94º"\865t.Üj|Ð.ÿ\99\ 5ýpR\90\159\1e. êwöUu·\b\eß\83\19ÃK$Ê«¥uu ¤ì¾\9dÏñ\ehOÖ\8aý\9bwûwË\11å·ñ½öçµ\93ý£ñdnv/º½4Ô±Øĸ\17Øv<ÈA>ÿ\1eù\9eï?&í3D\ e\8a¼°\1aÕ¶új\94\83%îëb\0\85»\82\19ÝÕ»cÈ¢(äh¬%×zí-\ 5\11\95y\95ù·ûÊðj|\84Ý\17ýê&j\8f¿\1fÉsÔ¿Pãÿ\v=\8e\8e\94pÌ\ 3?û\e\862å\89¥ÂÁ\ f18í]É¿\18;\1fXû1\84\19\7fã«\15û,Ü/ÎeÑ\ 6\9e¶7·h2\rƳ\19\8d¯Znþ¼y¼½¡÷|ÇÒ\15.bôÁ©ÔWyÞí=\9f\84¸¸¤¯Þ\rG\93Q0\19Oq3ÄÆ(d\96îæ½?zÿ\ 2\r\83!;endstream
-endobj
-544 0 obj<</Type/Page/Parent 513 0 R/Contents 545 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-545 0 obj<</Filter/FlateDecode/Length 1174 >>stream
-x\ 1\95V\7fkãF\10ý?\9fb\b\1c8`+\92åøG
-\aI\93\1e\a9ÚR÷ ÔŬ¤\95¬FÚõ¤8¦ô»÷Íʲå\9cîì&ØزôföÍ{3óåÂ#\17ÿ\1eM\86ä\8f)Ì/\Ç¥ÑôÆ\19á}\82ÏC¼\8c¤Øþp3uÆo¯ßÏ/®\7f\9a\917¡y\f¨ñÔ£yD\80q]\9a\87=ßñ\1d\9a¯$=<ÞÿþáîáaÑ[\Ñ'\11\1a}5ÿ\e\8f\8eÈÃ\13üè`8\ 1ü<ê}T$¢(-S¨ÔTâéç¬\8a\12¹¥BgUûz`ô³T\94¥JÒÚè \939E²\bM\1aÈ\88D _d\9f\ 1p\84´ Aa&\85Ú£ØÌ8\r\ 4÷|gÈÁ\8fòÌ9ORòE\1aJ¤\92F\94\92aVRDÒ8ô±¤M\9ae$Ök©"ܸ¡R¾\96MÖae\8cT%2
-ª\84rY\14"\91\ 44Eiü&.\9f2Ö&\17%\ 5U\1c# \12\96ùºÜÖü\15[U\8aWÒ±å£#KÜÎ\18\85È% þ\f¤öÝLü\9b\98öxN]\a\97fM\19F¨>\98 üÙ8\8b\1e¹}Zô.ç+\ 4ÙÅ\89SS\94\96xg±P\97\84ª.®~h\ 2¸Îô\bÂ\16¾\ 3¥\90¡\ 6q\?\86i\a(W©9üÒ\ ep,\1a+\99_\8c\8eªP\16ß;Ë\9fÞl6½v'×>\14?¾uÝÛ\e¯Oî_\14§\99tÂÛ¸R!kkÑ»ñ\86\a®ZG!(¹\93\81\8ec\1fßÛ>çÉ\9b['¯Ïs°×À·¥ñ\9dQËUO\9f\9fÎpÕÏ°ÈN\ f;§\14\10o¹:èÉ\82Ô\92ß4
-Ú \0Õå\1aAVÐ9\9c\ 5[&²\84\13\82\14"Ð*qèG\8a\14®\0^jëÐ2\95|\15ù:\83À\8dÎIåA´,\80#\94Òà\9c¹ÿvÝv ø}è\8f\1fZf:\14Ù2\17E)Ͳ\81Èa³[*·kIï^ÙG¤Ø\aï
-B\ f)ª@!Y|á\1f6Ú<'FWk\`åö;ëÁâ'\vا$Ó\ 1\87Ü2f\9fá\8c\f\aïkØe}\91Q\aïù}iÁ\17W;7t\88\95+qÜÈv¢Ò\ 4dñLà4Ò\eEU\91ª¤ñ J `\95¶óûlôXg\99Þ\14§)$\9fML'Yl[\8dk¸7À!t\ 3ÕEø%\1a.êð\86¶oõ\87¯1\8f
-\ 6°\ eºÏ\aë,¸\95@»X-¼\8erÝQ\91æi&L\1f\9d\19\9a7I%\82lK*\r¡v´~£E¸²}Q£dò`¨Æ\98u\9f\9bGí/#Ëʨ\82æ¦Âd²=½\91án\ e5Ó"øÈ\18<Ãøà®®\b"\96_*\915c¦Ög\8c§ÇÏ\8fOô"²\8a\95ª¿£\8a4\86\18,ý6Mòk\16\9a4öU'ú§ãZ\14$<éÎÕS×`hAü/\1d\9dÀ:O?'@ÎÖM\17οÌW\87\90\16½9\ 6ôþØ0t3rì¬\7f]g\ 2=6¢@ÂÐÎ~\ 2\rÇõ<ÆÃXc\ 4¿(Ʀ!¢\17\81\9d á®Ì[\124R\84+\99K[t¬s\83Ö\93hÜ\18׸e-\r\ e\97#\8cV\10±æþËù\ e°\86ac\8bz\9eCü\1d_÷;Ñ\1fº¢\10Â\13è4!V èˤð\0"ë8n¦JQ\8að\99\15º[\8a,~ Ù\12\91\9d4)Ö9\10pÐ\1c\18\b\80ø|\9cÀðë\ 40Þ1Üm7´ø8\87E7\12ö\0 L@½déª\ä\9c-Bc¹(kNyÒ\9d\19\1f\vk]Àén5õn|g<\9bÑØ\9fÕ\vêow\9fîïè\81\9d©ÁgA\1f*L¾\9aÅ vdÜ;\98¸Ø§¢Sûïh2r&ãé\8ey\8f!\1eç\17¿^ü\aK¯mÕendstream
-endobj
-546 0 obj<</Type/Page/Parent 513 0 R/Contents 547 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-547 0 obj<</Filter/FlateDecode/Length 836 >>stream
-x\ 1\85UËnÛ0\10¼û+ö\98\0 kÙ\8eå\1c\13äÑ\0i\81¢j{ \10P"e3\95IW¤âúï;KÊy(i\vò,\92;»3³«_£\8cÆød\94Oh:§j=\1a\8b1\9däS\g\8b\1c× ¾¦:.Ìæ\99X¼·0=\19\8bùpá¼\18}¸:¥,§¢\ 6È|\91Q¡\b\0ã1\15ÕÁT\9c\bú¬·tÕÙ*\18gýañ\90NÌÒ\89ã)G-TÜ\9a Rå2èßáîàî0m\9dQ\86\98\1cüx\ 2\14uP¬\8c§º\8fG\9bÖØàIé²[ÒZ{/\97\9a8\ 2\ 5Ga¥û\95Ú4\9aî\ e¤U´qÞ\9b²Ùñ\ 6¿ó\8d[Þ\1dÒ£\91qwíÚµ\fTvu[AÅJs\16ÀΦbÂèOÀ\9d×\9e$=ÊÖÈ\12Áe»ìÖÚ\ 6j\8c\ fôÐáÒ\98\9f:%Xs=äZºà<3þ\17\83\93±\9b.\10
-\8auh\85\aHKö Pç\8d]rb\83,\1e}\13\ f¤¸û\9c\8e\88ëÃnK\eé=¢!Vªè>\12t¿§VÐMM;×\ 1@ÓÅåù·ëÛï·1G~¸5M\83\84\\89Âv\ 3ä\b\e©*\9dÚ\91«ãý\9eø\94ï\v\rE\12\11\ eyÒ;\13¸MzO¢Þ+ÕþOn\10ÄZî\vÅ\1f\88´mM\88\1a¼\16\7f¥¥bí>Æ_h\ 4k[\17¸
-þ\0+\7f\11û¬ñnP-ÎÁM\ffR¡¯üÁºqd½Þ\84\1dȧJ\828p\ e\ 2ú¢\12\97=¼ê*øÄ\82µ.@vA_5G×T¹5[ÇCýA\ 2/"\ 1\9aÖ\ eÅ\18[»È+·Ä<±y\13MÄ8l:67'\1d^µJ\94µ\ 4\1a²\ 4\vÊ´º
-Í\ e^\88\87a\ 5Eå.Ù!z\81Ý\14Íqvq\11-ûO1§â}¯¥Cï·1\b\94ä\83\f¦z\16×ØÔ´¢\8a©ù\80¢\93þ\89·ÔÞL\as÷\9e\r\11á¹\85l0\r\990 VÛÊu6è\963°zÛ\18«\ 5ýàÞá¨ý\13ªV²\95\15¶±Ö5N¨£\84\1a\a\ 4?d\17\ 6>õfÜô6\e\0?O\80§\8a\9fúvßö\b\8b\925\1c\12\87\1dôr[\8f^e\10©b\8bÃ\ 5
-\96\ 1s\ eÅ²Ô B/\8dµ<1Ð\96ZV+\98Á\ eGÇ c\99¾\84/a\7fÒÖw\89í>fOù\8bBe\8cÊ\98\18\99fÍcu»2\0«\1a--ÒÜôcuPx\8a\84Á\97\f±èçz\96/Äüô\94¦³<½\b¾\9e}:?à |Ô\8dÛ°>×\9dQ±\8aãýÞã||º\9f!o_/³|&òù\ 2o\f\8c\99lÂp\97ÅèËè\ f\91;6Iendstream
-endobj
-548 0 obj<</Type/Page/Parent 513 0 R/Contents 549 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>/Annots 288 0 R>>endobj
-549 0 obj<</Filter/FlateDecode/Length 1887 >>stream
-x\ 1\85W]oã6\10|ϯX´\ fõ\15\89\1c'i>îí.MÚ<´¹ÆnÑ\16\ 1\ 2Z¢,6\14©#)ûÜ_ßYR\92m¥hq¸Àú wwvf\96ú|4£Sü\9bÑÕ\19\9d_R^\1f\9df§¸3üyú\81ïÐÅå\ 5þÖtv~\9d\9dwW\9aæéÙùUv\89g³\9b\19¿\19¯øÙÇÅÑôþ\86ÎNiQ"ÆåÕ5-\8a¸5îä\93ÛJ4A:ºÈèÖ\16ʬhÞ®VÒ\ae\8d\7f·ø\v\8b/h6K\8bOή³3,\9fÌ-mmK\ea\ 2\ 5K¢((·\85äßsQ/\ 5eYÆ\8bOéäì2»à%\8fF\92-)T\92
-Ñ\9aÀ¡\82ð¯\9eJ\91ó\85 ÆÙ\95\13u\8dtD\b²nÒK\966N\ 5\99"\94Öu!\94§Ö\14Òù LL\1c[w1gç)͵pʶ\9eWr\84Ü\9aµDdTF\97\ 5-·ÈÇzIµõ\81D\1eÔZ\9221I$ó\97ÌCF\8bJâ\8dýµ\eéÒ\12½\1d\ 5l\r§\1a¤!äD\95Ô\r¢¨\1a{ac©\90¡K\9b[\17ÄRi\15¶Ç\84\ 2ÒOBm\88ã\95Ç\ eù¶\87\8b\91å4Ppaó¶F ´QZ\8fbw\90q\ f\86×\ 4\95rÓïS[¤\8dd86¶è@i\1c×\9dË\ e\12\81\86r¤ jô+A\91Zº\ fÈ(ô\9b\ 4"É/\rðCýH(¯\84YIòZª QÙ\9a\81@\88ã\b\94D[øµ\95³\e\12\1eíàL=i)\9cÁ\ ebiÛ@véóÖ\8d{\1cËéð\8bà\81\12"ö\18\98m,Ò\0\9cÜý\1e\14O\9cýô\1ez\8b´\9exfìÔÛÖårª\fÔ`\84ö\19ÞO/öü\9fp®\87kÁï\9ek\a»\b\97W l\1e\90ï¿mÄ\84PÐ\v\84£8W¡A;P»\8e\99\8f¥\ 3\ 6\92¶à)\90sR\v\ 6õs\9b4ÊÍíà÷a«#l\0wK\r\94\117f&Æ\96ö\0\0 tÛX0>©\8c¡G&Nú¨ø½¢B\ 5>øvÉJ8\ 6\94¹l¢à½`åàÙ\ 3U\ 2ÔFk¤[s¯ù¦ä.sÏ\99ZÜh±ô䥬9ÐRBç²\94Îáuh-\91+¡ß\17ÞcúPF\9ba6ž ä´\bBÂ^\8dÊÇå\1fS@Ïm\19N>·\96_î\8bö\84]Þw¼í=©
-¡y?\9dê/.ÓÊ´_2c{\1e|ß)-6dz\e\rdÎ\0ÿû\16\9bÍ&+}\99Y·\9a¢¼f\1a]I¸Â¿\ 4\9bgU¨{¹ö±?\82Ñè\ 1ê`È\ e[Ø£Âþ\85V\15mtV.º\16fK\85*\81\1fÛ\0xÔ9¦§MeS3 \82àÔ²Eù= }Ð{«µÝD·\ 5¦ÞBã\87\9a\89xûʶº`\8bĦìe`)\ 4d`%Èsçò\19Ý+Øo\940È+ÙE;xú\ e⦬\97ÑõD\18Ãÿiç\82¬v\1e\0ª\16àîANL\92.\83²5ð*kà\1a\9eW\18\89n»W¼_7bpÑ\r|\96\90&æJ°ÌÚd\0ÇoR\83ê°\1c\95Þ>Üϧó\9f>²;jdlÂà plÈ\14ÿµ\r\9eÙÖ@\7f¬TX$7.ÑwÙ*]à±\ 1¦\11·\´\9chÄo\14·«EP.´\8eÒ#\96\8eëîëK[s\81\10©2kû\9ahß\97ÒEåfdôA#æ\8eI<cRÆÌ\95QìÏ-\ fÒ\1d\7fPó\94\8b§\+T}P\138\ 4îA±¾mØd\8f\93e g °©T^Q\19é\84l%Í\7f~ø\10q\1cE\ȼ2
-¥Ò\13\8b\1esMÒó\ 4\83\8e\17ÁÞ\11×ÑO*wÖCµ°·þ¥\9dp»\97\7f\9f>6 ãÒÚ×a0¡es\1eÿ\10Úó»Qd\18` ÛÒÛ±\b~ì\ 1\8aü·\f\18j\1c\ e=\91¥8\85\r'\17ÖAñ\ 2n\9aP¢\eð QD&¤;|")\94\a/à\89ò\v× à¼ïI\1a±\84!\83 ö\ 4\1e\8a)\14\12)ø\18ä\84ñÉÉ5Fc+V½±ôÊḢ\13L©þÞ,\8b³\vw\ e\92\9b\7f¸¿{¹\7fº»ÛÏ®tR\ e©Àk[\0\8f¨Í`'¦E+\e\e\8d5ú>GÂ\99°\98\9cíÂô\91\vk¾ \91ÙË¿¥K\1c\87²½\ 4-Pÿ\9fwO\8f/óÅÓ¯·\8bè\ 6{×\9fàYÜÝ!\17æô§ÇùÃï}u1æù\7fÅôÁåÍ6î\8c\9f\1a,x\9epW¼(åË·$AëµÀíà\9fß\rqx¨ÂLÚ¯zÙ²wÆ\ 3\88kÓ w¨\eg`Î\89á}[÷Jbà\84\17mÍê8\ 2ÑàrP,ì¨#Fßý½sÉA¡ß½\r\82\93\92V¹â\83\11Ì!º_À\80\17Z\95PG´\95F¸\9a\1aá=\e1\f±w
-¶}¦s|\ eÃP¦á\93\92ÁVÏ\13æ÷\ 6&Åñ÷\86z\9c\ f|\ 2ó
-²Ä\9cè"æ\ 2ê\92ôu!K\15O]\e±MªÚçàå.ÿ~ªÄ!Ñ''h-^4,\97=\1a;
-\a¼@\11Î}e8}\8b/\ 1n\ e\88ÀÒ\83ã
-ô\92ûÉ\9eðÛ\87\97ÛÇO\7f<OÐÊÈ\9cQö=¾Ñk1¿\ 6?>\1e\ 2ÇY\ 2¢´9\1ffaÒu\8btP\9a28m\ 1Ö¿;;\15ìaÝLÁ\17\v\ 30¿ûá7Rå((\7fìD D/a8úÚ¯vp\9cßà\ 3\fò\81\19ä8LBÒ±(V{\85¬1\1fúÜ÷¸\816á° \93\85ZǧÆ\1døQ"×»P\87ôÜã\8f2¹n1ûxVW\88 |K¥áãàÌm÷ó$=í®ºa\1fÑ\89kãgQ7¤Ð\90z\ 4\85e\aGûºH>«\86²âØNß.¼h\9f57»Ü{ä\92¥ìå\ eÃÃÑ{h\88\a4\88\ fMð<\83\89®¤á£=z\87ﶯjñÊ'I\eìWÈ\ 5 ÅßYµs\80Qâo²»Ì¾Û9ëiJpz\7fÝ}\16\9cÌnðüäâ,5õ\7f¿\93/®.²«Ëëä ³s\ e~·8úåè\1fñ\7f4ëendstream
-endobj
-550 0 obj<</Type/Page/Parent 513 0 R/Contents 551 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R>>/XObject<<>>>>>>endobj
-551 0 obj<</Filter/FlateDecode/Length 1703 >>stream
-x\ 1mWasÚ8\10ý\9e_±ß.MÁ\ 1J ¹o\84¤\9dÎ5moBç¾d&#l\81uÈ\92O\92!¾_\7foel\bÇt2M\8c¬Ý}ûÞÛå\9f\8b!\rðoHÓ\11}\9aPZ\\f\92\ 1\8dÆ\83dBãÛ)ÿ\8e\1f'iuq¿¸¸þ<¦á\90\16+>;¹\9dÒ"#\9c\1f\fh\91^V^\924\99\12\86¼XI*D꬧].\rU¦\14éF\995=?Ý{z¹ôRÒ²\ eÒºLº$'a2R&Hg\84öIfÓ\97\ f\88*¼5¿\93±áÃâï\8b\ 1õ\87\9f\92\11b^Êtµ5\92\10ÓÓW¼§ùD\7f8In¨=4\1c&ÄOãÃþh\92\8cùÕï6HúeTj3Iª(µJEPÖx²+Jsá¼\f\94#\1dÍÙ6\89\9e$\96Ð3²/+_¯bâeåóæ×\93<Sk\90ixõÁñm«Ê¤1VÒÕƹ£f~*´ú7þr¦\94ѹR\1e¬ù-\90ð¾*$=\9aµV>'ktÝÝÎy\8a¥ÝÊÃ\95hUv \88\8e i\ 1[¸\9a\82%±µ*\ 3²\9c±2׶
-T
-'
-\89L¹u]\15\14r\11\10+TÎP&\82@¯U\8a\14PóΩ\80Ö(S¾{ýåà Bm\8fç`M*\98B>\88¥Ò*ÔT:»Ô²ð\87äÛL\87ããüÛÖ>\1a_\81©©-k§Öy`â¨\14Y\88øÔ9\99\86\1ee\rje ®Ò©l-\7fódP\1f\17\1fi\11ëÊ%e*c\84c- }]Qm«\93üq\84Ã4g\0\b\87Ïd\ fäß \14N'^¦\ 2ªC\85V¾)\8fÓ*äñ°\93ø\vÄã\17\9fE±\14ôåç7\99ÅK\923uß\9c«{\ eö*È\b=\13kÉ×=Ì\16³×ûo? µ\95u¤¥Y# /eªV
-׳òúܱ\ 3\11;Ø\ fQ\eªL\8eC¶\rXpy"Û
-\13ö!C¶l\82ñµK\81Fj\853-Y:JB\12\1e\10H\93Ö§\91¦ç"íI\9e¢\8f¾\81iöô:\9bÏ\7füú¾\0W\\95\82~Ü*î®®{|¦&\9fÛJ£N$\19ßDÍ[%¨Ì\96¯k\19\92$y¹\84Á@å'íä\ 30\80ö@\9b½?\83S\ fM:SJ\8bÐðö¸\9a\96¢M5i.Ó\r!\1dhw\a\aì²'±\16Ê\80\12Ì\aþ4[öHè\9d¨=[]|\1c_~m_\8duD\7fZ\89T6\9492ÊV^ÚBÌÐoA¥®Öë½Â\ e\rè²¾;\97õÞ\188\ 3áKXYX\91\13ÈÑ!#кlü\rB\83¤Ví\1f0~4¦´Þ+Èø\10+Òj48\ eÔ\86ÿ\85\bƺBh\9a\ 3Þ¢\90&xº¦+\18 8#2&÷üãǣϮ\e\9e\85\¡I3\1dÐøu££s¬\82B\9cN\11åÙØ:ýÍïîØ|L&\Ö#oa\bV³¬¶p
-¨(fT*Í.\98Ù¨z&W\19H\853Z\1d\9d\1d?{(£¥à\96\14Ö\r ±ýG¥Î~~í$ÓÀÙQÜ\93|+5èÁ¾\1cùaÑ\88Ö<\1a×áÇ Ë ©a>\a= \89¨\8e\e%\ftÂ\96\0´AåLíÇ \83V}¥\ 3ð|\12nñÐ\96hY\ 2)Whf\1f8¹¶ \f\1aP¼\8e\1d>âÞÕ\15@d\82D:×Ñ\0!ÈR¥\eȱ*áBô`ßêµ4H\88g\ 5\ e£'+@|\84g+\9dÑ»\19øé\ e\v
-&Ù\1fR\96\11\r\ fÛ\ay\84sv\97Ð\82/*¤ÀX\87\13¿\9b½×[á\94@\11\9e\13Ç\80\88\e
-o\14\1dW\13ú\v\8eÂsâ\ 4É\1dü\8elåâ¸ðXi\98ßZWAf =
-̾Âf\95\86ó7þ\93\8b-$C\ 5\9aÆ\9c6U±D\18pX¾5«\ efõVuú8\ 2¯s\1e\ 2óº\8cÏÁòn\94·°°\90Ú+\90b4\bا¥\rãµ1v§%\ 6\1f/\aÍ|\ 6\ e\95FOK%yb"ÅfAòV\vTÇÍá}\v\ 4\84Ë\0\9e\13`\9a¡\1aáa[sï®ãÛÚd°ä`²#\110\ 1V\12%\8d\fâªèI[È\1d§c\18Oý\86=<Kãl9 ºrb\r®ôâºÆw\16PGÀOÌ\1d\ 3»ñ\f\8c|éÕÚ\80ð(\ 3¸³SF\ 5°¡aX1\15 \0~ó\98)\1dn'a\11\88÷FÉÊmgjú¾À=\ 1÷\ 6Ó@\8bVã5ëà0!j\9dý\8du\18s\ 2\14¼^\1d5¸måèÝ®s3Jn\99÷ ¸Ù@RN®°\87ÖûFîXl\90ûNiÍ\b7#\18\fb7ãþIÍ%cÇ˲ø\1fÂw a¹aMgè/V\1dõ?î·\13\15;2\þÌ¥ÝMp\f,\84\80 \8dÅrÄs\ 2®tT[ë÷£ý>Ó\1fÞaqï·%/`c\1ec
-ËQÜÌã
-\e·8ÏÈ\83?¨\13\16}8Ò£%X\84H@³ñzvÔBÔ\94K]2{\9d̪´µN\aÖ+sJb'1\8c7,|8¿!#w{88\1f4(\952ã\e°g\ 3åèÇØ9 \ e\0\8ao\ e\ 6zÚ_Ì\rÁN\89\v|UrÏÛ\ f¢§\9fðiÿ=\89\97T´\ 5NÂ\9f_\7f¾Ý\7fÓ\1aNo\93 FÓøfÚXÞóìé~F\ fp,\rËÃ0úRaûã\97úíÙþtpÇ,\99ç¢\ 4\b\14\9aÛ\98ûó\ 13~c<\1d'ÓÉ-¾\ 1ò·\821?z\\üyñ\1fxD\89Âendstream
-endobj
-552 0 obj<</Type/Page/Parent 513 0 R/Contents 553 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-553 0 obj<</Filter/FlateDecode/Length 1908 >>stream
-x\ 1}X]OÜ8\14}çW\ñD+&0\1f0t߶´h\91ºv\19\1eVBBNâL¼$v\1a;\fóï÷Üë$3\flUª\92Äö½÷\9cs?Ü\9fGS:Ç\9f)-g4¿¤¬>:OÎébþ)YÐâj\89ßgøÛj*\8e>¯\8eÎn>Ñì\9cV\ 5¶\.¯h\95\13\96\9fãMvr]ª&è\96.\12ºSuªèÖâѪÊ\7fXý+;§Ë¸s2_$3ì=¹H¦ a_«2Þù\87²yeì:®_ÐtÚ¯\9f-\93K^¿*\8d'¯³`\9c¥\û¬5©ö\94\8d'x\1d¨ìO!c£#§¤<\99º©táR>~ 9BÃjR©{Ölõ\9c&³KD\ e[·\96B©©Q>ôñ\94*§gÝnIå\93Òeÿc\16Ñg* \1c\18
-eëºuéº ge.×´Á\17²]ñ ®«*â\ 3ËÓyDeS\9a¬¤ÌY\18cw\eÕ\ 6\93u\95jÉ\87\16øx
-î¬h]M_~Üaa®\eµÖ>¡\15;ܺ\14\91\12\90
-¥\12Ã0¸\ 1\ 4Öá\9f-¹\82\82®\18g2E\1fô`Zí\ecX?ò9\02wðµ7D®¥Î\9a\97ñ\ 5\eƲ\8a#v¤È\9au\19j\ 5³°%AGOZ\13Wd®\81G&\94\aÖ÷\ 2Í\94\a±¼\86Á\e(\8d0®µÕª\80\9d×IÔÊ'Ú×\96ðw\91Ì" Vo¨è¬\88¦\97â»Ò\ 2+Xé·>\0½\8dk\9f\10\91yÒ@ÑøßØ\fÒcT\ah\13þ?\8e\94\18ë\rè\8dÒçØ\8f\19£ãá»øâ5ñ\97º«\82\99¤Û \87¯\91*þ\ 6¬Yv\8c=Ä|\0P®\vc\81aº\95EbaXzL®\91¼À ¾N\13è§\10t&H£\81_¤\e\1f\897c$°ÆfE\1e\1e¢¨\90êæ\ 5F^gU1\90ÞKð\94R\10£ìö`\9d0\8dÓ:\8f#r\a\12fÖË!¿\ 6W
-WUnÃ*\84b\e(Ýè·0×\1d²Ïº\0\15Ù \10Ù÷ûoß<é\97L7\81Ø'$Zm¬âÈ9²Éô<\99_-P\9e\90ª\8f6¾\1aóK\ eM5-'©á\93ë\ 6Û\913"7º\1e89%ïz^ؼ\ fÊ\86þ\egÀ\ e\1e¸u\8d½PDz\18$s<\81\9b\91lèÃ"\93!]¤ ³¬\7fvæYUx;\1c<ÒＶ{6 \857d¦oÉÜ\94صu\1du\r å\ 4aW\81sÿ F;¡'\aئ\1a\18h¬²k\14a\10\18%èZ³\ 6²U¿å\rºÙ¯ÑU\8c(âÌ\Û¢bW[*]\85RÛ'\8eTü¾DÁaàY\19ÆAp亹!\14/#\19À
-\16Bóhr2»ØUË\e\ 4¨_\14\97÷Sº_ÝL®XÌ\9c'¨û¨íµ\83\84ö2Ny\83\0wì\ 1Y/Y\19·°ªï¯ïfð»\83»¬½7¬\8a¶\ f\13\82\9b\f8E>ôRµ\1dJû\8e´éUÂýò\ 4UiHÁé\ºàHZÌ\14G\rgÖÈ\94\95\9a\9avE\11Ùé1\82\80!\91@è\84,¥\8di\110°`öå ½\13H {{=æUü\9cHµ´
-\86\9c\výë\94àó#=øöª×âKÔÛà: \81ë\rB\7f\843\87V\9bÎ\97\8fc1îû\95¬\1d\v´ìÝE/]NIt(8\ 2\81\89\80<\9cìH}ø\10\eR¬M\82ù^¬+¸ÿÚ²\97ç\9d\15iÐܹ\18ÅÞÎÈ\1cF!\19>æ;â.f\91K\ 6&l\1cÕ\\9abÐ,¹Cc#%`²³¹n¹\96 \15`K6E·E²µ\ f\83Û¹\97\8a2Ù\8bf\87TPèN\8aRÎòÆ\ 1\96A\1f\1eM\13Ú\95w\9cEì&L¶\10\vz?\1eîþü\8cF\9f=aZ\1af\84QnÜî\85\19&ï]»\92¢Y©³'9¬¨\14&\92Âh\98\94ò\ 5\ 5\r\87\ 3Ó.8h\8b«\1eJ@®c½FÃ\89\9eô\v±\ 5óÂ\13\1a\85\92\16½gW1µ2Dĵ1«\11Å6Ö\8a¬t¨\95\84$Â;\94/@\8cÇa\ fg)7ð!<\ 6+\8f9\ 3`Øõ\84þqÝA¬5Æ$Ì\8e\13#\8b\13\0\Ï\8cç¹³ã.\19a\ýýxÿýöúÇ\97¯\9cywxüýîúöVÎÅ8v\83\97ì\fPAGÎÏ\98á\ 3K\95Iñé\8c\8f\83\1aX\11\9bVqí\1e³\ 4)W\19(âQôáÛgù]hcLÅ\11QÑÙ¡ìxzâÏ\a&q<\1ank\14Æ\8fÂ@\8b0»Æ<jû\ e\ 3ì\87\19\18È\80\97\1e\8b×Ö\94Ï\8c\81I$z\97ù\19Ç/ö\87÷Hty¿\93+\18çDx²(íâ¾\14¥=¦÷Æ¿>#À\9b\9cǧ÷\8c\8a4{¨\84"\8c\9b]\9d\ 20hÛ\89\ 4P\80\9fµE7\ 1u{æí\ 1\ e\É2û\9cdÑ\9b×á½\ fæÎCh\19U²\86\1c\ 6ð<æ\85\ es{\14ð~Æ
-H\12Çc\13\ 3{8yøÀÞÈh¶À¤Ê\8da±«/Ó\8b«x Y!YS³ÆpÏ\99*ºs¸\8cÕZ"\ 6<\ 2¤¤>wê\87\13\9e9Q\r£\19\99Üã@Ê,2ðCsÚÕÎwP\89½\99\91æ¼ÔÊza.S\96Û¡ò\1ejéA\eºAl¡ªÂ\ 5Ãã2)³-\ f\14 ý(\ 2z\84ä \1cu`O\ 2`]HU)Õs?4Èåg\8c\83³\9aUÆe3Eá"µæ\92\8b\1f×¢\9erÖç\ eó\1aüz8ñZc$\W[\ 6Bî}\876\95\7f\8aÙÙ\ f\ e\9eÅS².å\9cX0ô¾zä&\0T³²}¬\99¾\84n\a)\ 3$üÈÍÐcÔ\8a\ 5jó¦pK\80\1aÊ\f\9dÔBßð`\8c ´kd\96ƸUò°»Á\15\11\175´öèG@Û\ 3o2EÉ<RàJ:v§¡\15áÖÍQòd\7f)í\8akCÕìº-\ fø\eh't-j\18_ßz\91Ä6\«µÉè\18\17Êc)_\#!wUsÅ\96\0×ÎÆëÖ8\8e]F\9bg7WýU]\ 63\14\ fÑóõ/ÿ?`±\$ËË«8×M/Ø÷¯«£¿\8eþ\ 3)ÄrÉendstream
-endobj
-554 0 obj<</Type/Page/Parent 513 0 R/Contents 555 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-555 0 obj<</Filter/FlateDecode/Length 662 >>stream
-x\ 1µUMsÚ0\10½ó+vr)\99\89\15Ë6þ8\92¦i;ÓL?p{â"ì5V\v2\95d\12þ}W\81Ð qHHé0ÆöH»ûÞÛ'ïï\1e\a\9f~\1c\92\0Â\18\8ayÏg>ÄIÌ\ 2\88Ò\84\9e\ 3º4Bµ^ð9½v,\f¢\80Å]\vQ\1au§\8a\82\ 1K»"ÂÁ\13\11AöDD\10&,êJÅ\93¬\e.\ fün¸qð\18íEÞ;¿\8a\80sÈ+'R\9c&\90\97@Bù>äE_Ìf°¬\fT*¬l\94\ 1+~!´JÞ\82±Zª©apÙ¨7\16\8aF-Q[¸©QÁB\18C\8b`\e°5ÎOó\9f=\8f\8aPβ\9f0pïçW\19pªV\81\17\fÀ\v#âI«\ 3\162¸\16\85n\fH\ 5\93\95ÅF\97¨Y½\ eº\aëSXBD)$¯¥\ 1\83w\0¡DSh9ABZ#Ì×\89J¬¤Âr'!\83¼F³Ý$È
-¡]xkQ\19¹ÄÙÊE¸<#1\9f\b\a\80Êò\90t¤²ES"Û2!ð\15ñóBþ\97\agðöÇðÓ¸?i«³EcƧ\1d\1c\*\8d¶ÕN\*å\18\83°ÐT\95A\v\14\ 67ÒÖN\8b¶ªP»\e\b\ 3BQ\e\8c\9c:^E-´(,©´\17OÀàËÁx\96bÖ"¡Ù¥\ 2\850ö®Á«\85sÄ\ 6\8aT\16§Ï\ 1¡\16\8f\1e(sFU\9eT\87d8@\1a²Ü\1a2ýï\97#"\14¯\97ÃõjËÚÔ\rY\7fÜç1L¤\1d\9fÂLZ;C\ fU)©Q\eQ\9ek+\83ávï\8eÙH\7fò\0ÉàÄvvoæhå\9cl®\91LA\1e Þä\8a\93ï£\ f\9f¿å'û\99\ f\18|<\12ó0p\8c_Éw¯[ãu{F\87\1d\9f]]\7f6\9e<Rwö¢¥¯\9a\93ô\bhÿ\9f¢))úÀñ/;vGv¹sê\vOhF\80\1f\18õ@Àÿ"åfv=\82\9an¦%OR\16g\19Ä46é\13>\1a^_\fá\12ij4\vÔ\ 6Þ·²Dg\19ï~§\97ø\99Ûº\7fÄEIÄ\928]ÏJ\1e»\fïòÞ×Þ\1fÑ.\92ëendstream
-endobj
-556 0 obj<</Type/Page/Parent 513 0 R/Contents 557 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-557 0 obj<</Filter/FlateDecode/Length 968 >>stream
-x\ 1µVÛr\9bH\10}×WtåIv\19\ 2\ 2\83ä}\92\93Í®«âÄkió¤ªÔ\0\834»0h\87!\8eÿ>g\ 6°îÎuå\92\f\fÓ}út÷éùoà\93\87?\9fâ\11\ 5\11¥åÀs=\8aÂÈ\1dQ8\8eq=ÂWqÊíÂ%\1e\8d\8f.\8c&nxl!\8c}\188b*\98\9cØ\11\84'vø\13ÿÐÇõ|ðòÍ\84ü\90æ9\ 2\89ƸÈ\bAx\1eÍÓá¥\e¸¾çÒlöaúv¶\18&M~±®ê\8bO¬X\9c\9dÍÿÁæ\90|¿Ýì\8cbl\1eÖ\פW\9cêU¥4-\86~D\89Ð\8b3ªÅRò\8c
-¡uÁ\1d.3Á$ ©ù\92+b\9aª<Çf\82\ 3z\10z%$Á_\8e5ü#]Y£ðÜp¯ۺß`w\ 2\13\1f\0XÐ>@ßü\bè\16c02\98¿\ 3êò'°\8e\º7\ 4?ñ{\92[Åu£dKoËD\ 5fÀu#;r\ fHOÄò;©þ
-³\ 1Ð\1af\7f\ 5Ú\8eæ_\8e14\8cîPúm%û¿qjÊw·t=rü\02\81\82U\1cE\8eÆÀ;¬¦\17\7fÏþ|\7f?\7fñ\954\\9a\10wòð3!þp"\ e\ 3³z\ 2%0zâ\ 4aß\93HÉÛé;ºe\92\99v\9f±2a4½»9¢"ndX\99¯DM5Oµ¨$e¼N\95Hx[úy#íã\9a$oy+Ù¿\9cØ\8e\87û»W\94²¢pÉZ\122¯Tɬµ\15Ë(á\\1aß[y¨\12Í\84Q¨ä\91øgV
-)äÒ¶W\8b628\91H\14:n;\18#ò\b\85²*mJ.µõâÒ\8d6\1aØ\14\19ÉJÃá\9e»´BÓf6óØ#\14/\1e1*
-Á\92\82wÉ÷hÒkkG¤\89è#[\8bÅ\10ÂIk\95J}a4\94²Íe¹õ¸ì\9e÷¾=\f \90KÝ']1Eçk¦XyAíMÆ4ë¯ÏÕÎÒ¹2\8b\8b³ß\ e\93¶IY\9f\1cBú2\9e[B!åi!\10¥\9bZZ\9a\1a\99\84øÏn¯I+&kÖ¦\19\1d`\ 2D&\15/+\r¶×â¹>\b]èü\9dAÏ5Wõ!,;\91æH\97\8dþD\fó\18}\96WEQ=ÔWf\13f·3\8aÚRµä]Ù\1c˦LP«ÐØäQ\ 31.¶ì$|\89¸j\13\95±á`\ ebhfC@2÷¸}êp\9b\84\936\r©(\8fãÖ0\1cöµùmÍ\95ì³(\9b\92\9e\87ú°\12éª/Æ\84\83]3Gx¶\83\eÂ~ài\vø3\9el\0ßä\ 3*°ïÃ2z\85\94¯+s\16Pý¤ßb\1ae\ 1Ð\87LC\ 3÷\19(G\8cY\84§ÌD\87fÚºß3´\81ØÆú Pª\16\986 -þ\1e}Ïp[0¦8\8d\ eq[Þ¶¤\fð-íÙô5\ eJeS£¡9:¡J\19º\0g¡\9aJt\84z|*µ~xÄ-ø\97oÆÝAÌ¿\fÜh2¡(îz}6½½\9eÒkþ\89\17Õ\1a@è\8f\ 6²cü;~<¶ï:±\a¡é\8eNÏ\9d÷Â8tãhÜ\15zl\8cü>\1fü5ø\ 2I\90MOendstream
-endobj
-558 0 obj<</Type/Page/Parent 513 0 R/Contents 559 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-559 0 obj<</Filter/FlateDecode/Length 1561 >>stream
-x\ 1\95W]oÛF\10|÷¯Xø¥6`1\92,KrÞ\94¶)\f$AZ\v-Z\180\8eäѺ\84¼Sy¤Uå×wö>(\8aV\8c\16\81\ 3Jº\8fÝÙ\99Ùåßg\13\1aãß\84\16Sº\9eSV\9d\8d\931Í&ÓdJ³å\ 2ÏSüÕ\92
-÷ÃÍøå÷ïÖgoÞÏh2¡uÁgÌ\97\vZç\84sÆcZg\17u.\1añ\96\ 4m\8dÒ\8d¬©1½\ f»\8dÊ6´SeI©$+\eþÙä\87f#qyÓÖZæÄç$´ÆW\99(K\1cd
-÷ô(¶êáâáòrýålL£É5b\ç\17Uk\eÊ%\96\9aL4\12g)K\95¬L½Oxé\b\11ǵË\84ÜWÓ\e\1a]ß&sÞ\8f\8b¬$\81Ü9\8a¨E%\11¾%\1fòÞ´dÚ§\8d\vØJ\9d_\91Òn©©s\1f\1cö©\9aÄv+±Yg2.è΢\14±}}ËW\ 3¸Ñt\9eÌøæ\95¦V[õÄIOæ\94ª\ 6;\eù\84SW\9fïH·U*ë\84þD\ 4vcÚ2÷¸q~Ï¢l%àl6t\7fÿûê\ 3ã\92Ð\1då\86´iè«6»\ 1L»\8dô)"Y\7f²uIçÒfµJeþ\ 2¬\89\a\vðõ#^Ýÿxw÷\17Ù¦Vú ¸»Ýü8@/T\95\13)Z\9d5Êh\12\16\e
-Åù\ 6\f?¬>ÑG¡\ 5r\1eÄ\9b\9b¬¤n\ 4ïôt(T\8dRw¨^\85
-\ 1\ e¾ÛÊú\19Èi\94\ f%²dªJ5H\vL§\10/\9eRaq\7f»Ý\1a=¸\92Oy\19o\80'F\ Ý\8aòÊÁÌ\e\98\87@DÖà×r\8f(-®é0\8d%\9f\1e0\8dü\ 3\v^ÅÔ]\80ð[\1c\8d
-zVv\8c\84\98¢pºË ÇüâúpSdÿJs\\ 3~{ÚÆìºR±ô®^/\18c5@ð¨hØ^8\1f\0Jç÷®:ç$4cï¼\ 1OJge\9bGö\9c·\1fä³,Ï{Av9Å\1cf\87´"¦¯ÈÈ\83õ¤\9eeà\88úæÔ\99î\e|\ 3_á
-¦mQ\808;Ö\13ì©\85@@ÞZf\12ûx\ 5'9ê9N\ 4\1cú©Å\9e\8f9®\91Mès-m[\89\14Lp~\14ô\8bjñ\8d\16\1cel«¼Ît\13\18ê%Ý-\1c Ë\8e9\90»\v\vê\8c8Ü\1c ù/ܲmÚ±*\9a]wû\81TtW\80ët¼\1a¤)÷W.µa\9cÞ\17X\7f\ 5}\93µ¡Rê§fó¢\90s\1fíh`Å\94\99Ü\95(+\15Ô\9fd$Ê\9dØ[×\ 1üÿ±\ fx<\10\9bo\18wpO\vCÍJØ0d"á7\88\\8fzQøBù\82\ f\ 2ß9\83u½ ×ò\8foÞßÒ\ 4F] q\8e®'Þ³o\92Y\ 2\11ÿæ\9a\95·a¿6vF¬\9drcä¾Ò¡Øc4=\ø\ 6\993ËÒ=ÕN\92\ f\97±¯ \95t\9d¥×SÐ þO\ 3ñÌÏ\f\fTiOþ¾µý`Cl\ eïÓ\fÄ
-\91sr}î{\ eÆ\8eã~íõ×Ó-Cä_УÙÌ\83{5²,}L¢2-¾\ 6\f>à0;ØèG\9dÔ¼Â|\17D\91ü\91ÑÝ\87A\ e¤ä\12 ê\89\91Ó;a\15\9b\9c£1\1f\98C²\9d'ØFÔM4\88ã N²'\bg#¼cô
-\1f\86!\1f\12nAïAÝÑêÙ a\ 6\9aÂ&\907ÄݦM\8dF\82\95Em*^\8bné8Á\89ö\8c\b\a\99\94\vì\%kk\98\16G]°[`\9481X\ 5·ëä\18\9d¢×\98n¦ÉÒ\8d'à\ 6\17'ؤ\1f\1aø\93,%\17³+Rg\83=?\89\98a(qº\14¥åyÏZ\95\96l\82\ 2ó\94\eÔÄ~\90\945\98¿T\ 5\7f\ eny¸ØÛvwô\90}¡å\1dYÊ\1f\8c0×¹s\r¿Ý^\ 5áù!\14l\1c\80uh\94ýáC¹\96\81\ e\81j±\93³Í\97M\10\112å\ e2È\aY8\aò[Ý\80ÁñÀQ3)A\87#ñA\bXÏÂó|=÷Ã\9d÷\88«ñÃ幫\1c\9bL\18"Ùf¬\84Ðó\83ÉP\85¶\14ÏA\9f9>eʧIJÄÁ3\90Æ«Pé\1cÚà\16¹ó\85B\93ÄÔ4Hl \99X\96¾ÇÒ\ e·;+\ 6\89ù9m\15àÂ(Èàù\89Í\85rh<h¿N!\99ñl\ e\8e0¸;\95\85Á0\84ŧð8\19Ê\91\17v\94=^z pB\9f\8c{\99\0Q¹Z\9d1¹×\r`\e\1dèû\81¹W\98n *Ô?\8fÙFÔ\8fÛ¦æi\9d5Ýõ¸Lh®\97Ë\1d\89yilÛ\1a\829\99 ¤S÷ëýpá\v÷jÝg¨;îÝ \fNc\e7w¡}\1aϵPõ0\8d\rò
-F\1dg\9d\ e6\ 4\eTÍ\93\ e`ñ\86\1e×\856äÓë6A
-Ró\b\eg/»\15üÚd\87\97â\9dn\17¦è7ï\97áÝs²X&óÛ[\9aÏ\9cMݯ>¾[ÑO<9\9a-¿·ýÒªÜÏlqåh1¾eGûNó\9e-fÉb¾D\9bÇ\9aÉ\92\83øy}öëÙ¿U^æjendstream
-endobj
-560 0 obj<</Type/Page/Parent 513 0 R/Contents 561 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-561 0 obj<</Filter/FlateDecode/Length 550 >>stream
-x\ 1\95TMoÛ0\f½ûWð\98\1e¬Ú\8eã\8f]\82$]\87\ 2Y\81¡\1evéE¶éX\83#e\92ܬýõ£\9c klXaÄ\90\12ò½Gò1¿¼\10\ 2zBH#\98'Pí½\80\ 5\10g1\8bè\9dÒ9¢\8fFh¼uá]ßæ\10¦P4\94\92d!\145Px\10@QÍ\16lÁ`£j\84ªå\9aW\165X^vxUü¤Ä\18B\8aw\89~\94²\84Rg\eÔ\96\v 5·\1c\8cÕ}e{\8d\ 68ÑÕh*-J¬¡|\86=ri@5°zØÜݽ¸X!w\ 6*%\1d\0\9déø\96Ø0(Z48@Ùv\90@Äá\9cª"âwÁ\9f\9cB*Þ\8f\12\16»ß\7f\0\aû|@â¶\b\9d°¶C\1fe-¸\84^\1a±\93¤KH\8b;Ô.קҨ\aõ,dàît½pÝ\13V¥zi\9d~Ó\97oê<¶¢j¡Q]§\8e#\98h
-sC0\8dêõ\87%ͧXkÂ\1a*{\9c\1d\85mA\1d¬P\92wg\9døû@S0T"7`5\17\9dkðÐz¨ÅNXóx5\92\eO)^FrUÓ\18´`\15}{ÿ}»\ 5òÆ^Hn\89ã4Ë\11\1eùè}\17»¿àI%ý\13\ 2ô\86\fç¬4ÂJ¦X%Ð\18_%\rî;wâ4¨\ f7 \9d\92h8(ç\10Ú\ 1EëCÆv\9e\19¸Ê¾iP/\97Ë\91Ðl\8a±\85\ eå\8e\ 6D;âæ5¬Àÿ`åS¬\16d¿/I\ e¹ð\82%d£ô\9e»é\ 3\7f¢A»u½\bKØâìêà\84w}\9b\9d\978\ä,Ìs\88Âa_\1eV_×+¸Á'ìÔ\ 1µ\81/½¨\87¥óÃ4c Eúi\90»\rùç¿D\9cÆ,M²3kîúó¹ð¾y\7f\0d\11`\1aendstream
-endobj
-562 0 obj<</Type/Page/Parent 513 0 R/Contents 563 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-563 0 obj<</Filter/FlateDecode/Length 1256 >>stream
-x\ 1\8dVËnã6\14Ýç+.Ð\85m Rüª\9dL1\8b\99 A\aÈ¢E\rÌ¢ÚÐ2m³\91H\8fH%ñ|}Ͻ\94,?\92\99&ÈÃ\12y\1fç\9esÈoW#\1aâ{Dó1Mf\94\97WÃtH\93»i:¦éí\1cÿ\8fñSiZË\8bñdxùâóâêæá\8eÆCZ¬\11k6¿¥Å\8a\10g\88'yÿ~«vAW4Ki±ÕäËe\9a;»¦µ)ô`ñ¯ì\1dÍãÞdÂ\89\17«þ,\1d¥ô¨_M®
-údU±÷ÆÇÕS\1a\8d\9aÕãy:ãÕ\9f\95ç\85Åþ\9a\ 2Rpd2\9ev\95˵÷zEÎ\92¢ÂXMË}ó\17[¼T\84æ\147èê\8aÂ~§=¹µ¬ñ\b¦\82¼¬tî6Ö|G(\ 4@\ e.eHÉh\12Ë-\9aJ\15Wú\1dÍfý\9dªTéÓ<\e|àÅ\07\19ÏÒ©\94[(ûÔ¤Hè\11ey\ 2$A\19kì\ 6Å\16{zÙ\9a ýNå:åí z\ 6\9a«>`áÏøxH~ïÊRÛp\16p©7ÆJ¼\17\13¶¤ñ\vu)òº4Iî
-@âøóÎÕvEÞl,\8aîýÖ㧽_zÙà4ïø2ïß:\ f\ 6a¶Z\10\9aáõÔös\96^!ÛN[òßj\ 6{Y©üI\aÎøÏEªÉeª?\19LÍ,úI\96=9é3ßbG\8e\r)r,À\89\95^«º\88 É\98Ólp\ 2ì4fMÆ¿v\83â\8dkSù@áÅ \11¶Ê®
-°@¿æEíͳƨ"#è\9c\ 3×<Ã|K@ÖU@\ 6u\95Q\ 2\85
-Ü
-Ç\14NFÖ\ 1\17.è\88U>WÖ"ÙÚUüæ\98B µè[\0#Êø\11E\12ê\10¼ÜðÆl\8f7<«¢>KÑ\8cè\1c,\1f¥\84N#\89\83{Ò\16:T"ÂàD\9d"\8c8K'ÄÉú\ 5þÁã\92Õ\92\9e\97J\80\9cb\r<\823\8cVæÙ¬\18£Ê\95H\8a\ 2ld\0¦\ 2Òið\10v\7f ÞÇ\9ep\9aÍj\ 4!²Y%\93QÔ$\e\ e´õ\aÏWD¸¦¯\a rÎ\9b\87\13ãa-v\vØmÀ0(`EÊ\13¬\88\ e\fô°Ï3÷Àr\91vÖÏ\ 6´®mÔQÖ÷ZSÎlÈú\93ûl\80\97à\99Þ\ 5fÀ\e®cõ\8bðç\90\8aõ\94e\16\8a\12«mߣ8á+ã´Ô¹ª1'\13\b¸Ù`Ö&r\934`\86óñð8ª@uL9\16Ã9Ç\89)*\ 3\ eѱHú"Ø&ÇéL\0\81£\ 1\9fºÊ\enÖò\9a§ÞQEHK¥Ú·FIÆBC°Ûã¼)}\ 2ò\9du\12[\9faïçý@\9d\a\99\1c),wå\ eÚä#\ 2ì\849bô8;b\13\aX\ f5·v\7f$\98ÖÓ¿\9c\94\13\ 3\1c²w}\b\8f\99-O<Ög]-U0¥Ô)\88Åy³«\ 2±\U\95Q\e\r\ 2\85º²gÌ?\94çãØ+\8cýZ¨\87ÑzØj+]ºg½ºèáÈeÛ\1e\1eaäÌ}\86>TÊ\88\10\8eÐDÙM´(·8\94N\9e\87\1crR5\86Ú©MÜâXo\80ñXo\8f`\1dÝã\1c4¶\ 6*N\1a~Cv\8f\ e5úÓÃç\94-Ì_/lYjP?\80Ú,̼r\1e\8fq\f\98\1d¦\1cWÁ'X\ f\ró\978\97|¡üö=°#ÖYƧ\96\1cÝBȶb\9elô{qmZÊIÏÅ\81iÝ!-@\81\86-ð_\1aÙ)\9c4Yß:\9bt¨CË\87Iw|>k\1fö\0Êà0?9'¹\1aE\87\96ärdßô\91×æ`|1Ð\ f0cKÞÄ+\15çw6WÁY\15\80¢Ü&XÜy]Uíµã½30¥\a\94¦_U Àå\1etó0¤»öú6\8dÞKÍ\97T\1f¥úñ¨\95¨\19\1f*æf\96µ\93\19¦|Ïì·\9b¥.\1eéÉ@\ 4éS\ eÉ\8dñ««\v6C\10Z±esÐ÷Jû?eq\15?¬à¶»µN\9b;îýO.ÆÓù4\9dÏnã½o<ä\12\7f_\ýuõ\1f¤õ¨\1fendstream
-endobj
-564 0 obj<</Type/Page/Parent 513 0 R/Contents 565 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-565 0 obj<</Filter/FlateDecode/Length 1000 >>stream
-x\ 1µV]oâF\14}çWÜ7\93\b¼ØPC¶\9bH¤MV\95²Y\96Vª\96<\fö\0nì\19ê±Ãf«þ÷\9e;c\e\b\8b\9a>\94(\89±ïǹçÞsÇ\7fv\ 2\1aà' qHÃ\88â¼3ð\a\14\85C\7fD£É\18×!~\vIKû \f\ 2|}ñàzÖys;¢ Ù\12±¢É\98f !Î`@³¸{¯KIåZ\94ø#\11Ip´ôI\92Ù\88X\1aZê,ÓÛTø9mu\91\90gÊ\ 27¼\1e2o
-i¤*\9bçZÕ\8e´\90åVJÕ\1a\93Pð\9cãã\9dÍþè\f¨\1f\fý\10Pº©²¡K½¡,U²G\9b¬2öÖRW\ 5!C,eÒdp\b¶i¹ö¨ö42Ö\bÎÎ>Í»¿KÓ£_¼\9cb]í\90¥*\ 1NQ¦Zùó³\1aB\18\81H@¸\83+ÌÙº²&\14¯E!âR\16Æ2\92®\94.dBZÑ"\13êÑ&Ã#¤uÌ\91Ä¥^"H\9e#\8fñi¶\96ÏÖ÷\«ìùüEÑ(J¯Tú\r1¹\16T\82*\18\9c\8d¹Aò\"»Ëã³ó\9bÛ\v
-\80\96\9bØ\1f\ 6\ exä\aþÐ'\8bÿ§}ü\9fª´x4Îo×ü~ÈÍoz\8eF·Í\95_E¾Éä[ç1 \8b:Q8r\89¨þXd¤\80\8e.i\aóId\15:oç\82æó¦Ø\81?á|ìûÝ\9b\º-ñ\80üºÜ}Ø\11\87\ 1£\94§I\92Iç\93\1a:Wº<g\1c\ 6D
-4d¯=\18ÁXTFRZ\12L\97iaJÎ\13\8bR+QÖÌ\1fÌ\9eí\1a¦ÚT\19û\9c"ã5$4\84ý÷\12\r\93\vÀe\ 1J\97ºhfê`\16þ\87\ e1â\1fÛd§û%\1a\9bÓ}\ 2z\90¯siN\ eÔk9Ü!b|\96Í\7f\ 5ð\11*jõ´\96"©\85Ô³Í\8e3mx\9b, ðGYbcx\ fÞü\8c)Çt\98\14Ö<L\ 4ùå)\ 6\85mÛuгúäU\88))Yñ|Í«§\99ùf«\19ª\97\86\e*699P\\1a\7f¾´¨Éiì\81V¢X\88\95ü¾~\1c\89Î\14z´*tC{$\1eÞë\ 5¨\80JN\8dµÃ\0\14Í*b\99?4uíiù w{I± °_Ü\82²{5òC\9f>?cï~=\865ö[U\ekÒ°iò\85\8fN,!YH\1dm\81°Ý¦:=NDïØúª©\81ÿ¿½¼$ú\8bÞÕå\Ñßtóñö¨\9eÝóÆÙ:6·É\rÐ\15G²\85·{\19\ 1O\ 6k½\1c
-ï\8bG÷Ó\ f7\84Q;öy\19Öù8ûK\8f~\9bÞýzC÷wÇ\14Z\ 2¯\85Ic\91eÏ<Þ`+\97Bñù)JvÀkC¿9æDËh\ eMPµaÆ¿ÉB\13¶L\8e\ 3®\19?\1c |´!X#\ 2(b\81ãL1\83PÌVÒ£\92[\9be~f\17A\1fo\18x£Hº\81O\9c\18_Û#~Ú\ 4æ\90{¹\8fTêÚì\92\1d\0;¤È\1cfÄ\909n&õkNðÃÐ\8f..(\1a\anÈ>O?\Oégù$3½áCý}\ 5\9d³S?\18O¬m\7f<À¡\97t_q¤\8eÆ#\7f\1cM\¹aÀanf\9dO\9d\7f\0\81±Ý\99endstream
-endobj
-566 0 obj<</Type/Page/Parent 513 0 R/Contents 567 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-567 0 obj<</Filter/FlateDecode/Length 527 >>stream
-x\ 1}SÁ\8eÚ0\14¼ó\15s[X\817 !\81C\ fAe{Ù]©jº§\\8cã\80Û`³±CËß÷Ù\ 1í\96JU\14)ØïÍ\9b\997¼\8dbDôÄÈ\13Ì3\88Ã(b\11²yÆ2¤Ë\9c¾\13z;\89&\,²\ 5ý¼¹X\97£\87Ç\14q\8c²ñ Ù2GY\83\80¢\b¥\18\17°R8e4ö\92ײ\83²PµÔN5JÖØ\9eÁ5ÌQj¥wØv\ü\94\8e\8ej8Ù\1d\94æn(r{ Ñ\1aû¡\8a¡ÜËIùc\14a\16ÏYBcÇRû"jy)\9e7ïs,|ÿ\85\bó=3"|m\9a3ø#:\99%\19K=N\81#ïøA\12 ´JKϺV'"^CigÀ\87 \9e(Çkñô}\13èà¾Q\9du÷\90o=oaÕ\8eÄé0=ÀXéq\9d´7¼=½@¹éÌ!\94\7fÀ\f\9f\9eÁß\96phù+ \8a=\81
-ϵ\1a¿<á\13îªJßU\93\7f\94¦\83Ò\87Ç\15bÒÙ\90à\ 5fiJû&Ñ\19KXÌPlMï\ 6ý\96 Oô}Áduâ÷;&ë}IØ\87i\ 2cat£vhT\eìâØ*\87^÷Ö;¡\1a\9cM\ fNaêý~ÈÂVþ\9eâÌ\85\98R¥5z
-é\ 4ÃÚ¸½¿S\82Ú¸æíÙª[»ª±\15\ûÈT\93\10\96+\15\8f\7f\94]cºÃ\90\9b°F\92ÁðÊÛ^ÚÀ 5\94Ä\1a'ÅACÚ-\85\8eÌ%FtN\r\a*\1fd//¹\8eó%ËVdÚü\92³oÅóºÀgy\92-e·³øÒS6|ÓìZ;Ë£Õ\7f]Mó\94åÙ\92þ\80äg\92øæM9ú:ú\ 3q\1c\11\1aendstream
-endobj
-568 0 obj<</Type/Page/Parent 513 0 R/Contents 569 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-569 0 obj<</Filter/FlateDecode/Length 1712 >>stream
-x\ 1\8dW]oÛ6\14}ϯ¸00Ì\ 5\%vÒ8\ 3¶\ 1kÑ\0\ 1¶¥[\ôÅ/´DYl$Q#);þ÷;÷\8a´]µ\1d\86¦@"\91÷ã\9cs?ôÏÅ\9c®ðoNË\ 5]ßRÞ\\eWôæöMvG7wKü¾À\7f§©\94\17sy4zñvuqyÿ\13-®hUÂÖíò\8eV\ 5ÁÎ\15\9eäÓw\95ê\82v´ÌèO\1dÞ><>\91iIÑÇÖ¼Ð'ëêâÕê³X\98/\a\v¯¯o²\ 5lL\97Ù<£\8768[ôy0¶\1dNÞÐ|\1eO.\96Ù-\9f\UÆ\13~\14ùʺ@\85ÍûF·\81B¥ð\97ö¹3\eíÉÛF\93-ñXã¸ïñHNä¶-\9dÅyEO\7f¼%Ótµæû\8a½\12~zD;#ÕJ°Wôz~=\84XÙ==©f£(·\1d¬íM¨Øz\93ѪÒ\ajÔ\81*]wÔi\v\9b´¯,)àY[ûlÚ-!:6ýóë_?¼\ 3.\0
-f\9cÚ\98Ú\84CÆùÂÙâ6»á,\1f\ 2í\15|8\13\82n)ØÁ´í9n\ó\b\94\1d¤Câ\80:\85W)\a¾\ 4OÈ·Õ\80t\97¼0\83çø\8b¿e¶Èè£×®U\8döÿ\ 1¾\16Ô:g\83ÍmM\15\82´m}@TÈÓkê£\rö\9bë.dô^9¼g¬Ó-Oë©ïó\8apùÝãßï¿\ 16?þðûǧõ+¸ØijíW\96\19PU×p°\ 3B\10ZX|''ymÀ+â+\19B\ 5 \9b.\90\80Î\K\96gü®§\9drÁä}-\ 1wN8:;\8fX\98sæ 4Î\aÚ©Ú\14Ð\r\93{
-\ fÌ°æ\80ÃN»1¯R
-^ç=\88=°\8c7Êë\ 2:±}[\1cm\vÊû½u\ 5\18\85§\8c~\13éÐƾ°êûº\0 \92=4\99Ò\ 4Ý\ 5\14×\1e¢\94\92n}¿ñAµP\0ê\81\15'BO\99H\99x.$ÔJJȶ㸡pFv\83Z¡Æú\0F\eÕ\9aR{\0l\82×u =²Rq\90e\1eóç\14AÍÄWR
-z§ë ^Åü\e[h®\9e¡¢ùj¡KÕ×a\94\ 2\9fc±ð U\83å\16I \9d «\8dêoX\ 5\94=Äq Òº\1cÅ\8a¢\155pQÄ\8aà_Ùà@T2ï¡ÿ\91wq\ 2;¤\154\eo\834Éi\86´\r\1eK\9ex\a-²ê8i\0t o\82öc4\1f¾\8b\b\a\14#mk$\85-Rå\f\8e¥\ 5Û|nâµ÷Ü´¼\ e}79*\7fF\eH´°¸\ 4\95\8c\92ñ}×q¹¢ òÜ6\1dbdý&ÁI/K\11ÀI\9bò\ 5ø\16ÓÁÛ^ðì=ß\92(\82Ó\88yè2gA\8cü¢\9f\92ø6\92Ë\97þ\92²\0¢ôh¶+¨ÇZB\e\v\aî¹é\ 5w)î\1aò Ù\ 2æ#§\85)Kí\98\ eÄ\17ôKð3\88SíY\8bÉÑ\81Z\r2\91Ý\16z°[\r\1fNþd\85\ 1$\80Ì\7f²ëXÓÜïÏØ\187\92#q|Ŷì*¦ÃI\14,\8dT*\a\9aÔv»ÅCÄg'r\12É®§\81k\ 2M\0£ÍÓ'Ó\16vïYË<F\9f·è\16\9d_¿J²J\95Îa\9dÀ\18Ð\8aþ\ f\94WÜ\9eÅq$K\18\1c\12+\8c\7f&X\8fM/\19NÓ(å\e[)LÁ\16K2Ø \12=\ 1}\14)\a\8bÄ\rêÓn\912Ê7>¢Â1´)
-4\ez\94\16\8dãPfíí\88Æ=º\17S\10É89\13C\8c\13\9d\9e¥\0Ð5%ì³^ÄDÇÅ`\8fa\8d\86W`,¶Iɹu\ e\93rä<Ùã\0P0\e\ 3BeôK7Hp\8f\11\e\16\85àXí\1cùÎ\1a\16+HMZ\1f*È£w9US\ 3ÙÙb\88\194a:æ¬ÊXé;\85iÓ¨ÏV¦\ 6âÎ15\86ãh£\1d\Ìë\1eMó\18}£:\88\1f\b\8b\88M®\7fàWä\ fØ|°îÈ\v\ 50¶\fË\17\8dåhc P¦ìÈëin\1c\8b²Ð 9îTÃ\12v\f\ 5ëWs\1e I5¯§\1aÃ\15!\15\86Y@\8f\82\80v\ 6\1a\8bÕó\v¦\17\8f®¨ûï¬1×\19Ý\el_\8fû\16[Re:\ eõòþ\9b\8b$k°id}ApÅhGI{G\94\8aWÒ('\aÛ\ 3þöGî°\88\rKÈFç
-÷\89ß\14\96ßØýСKD2IÒ8«R,\8aXjfLo©ò0ãõ\ 6åÀû\12ÃÏ×ØÆ\90@Ús"æ§\9a\84\986XR¶\9eú\8e7!¬¼NÖ\1dØÅ\8cÄhf:£Þ \96{\0ª_\14/¼<µÐÛ%\17Ûñö&>Y©Ãô\96Ê\92-Xðç·#Îá\1d\e
-6\11ÞQµÂf c\87Ã.hÃ\13Æ
-\9d"3æP<ì\râ\fNµ\1e\8d\199KÅ\81k\9eXò\ eÜkî\ e|c\8f=}KØ°ô×\18Â=ç\1f¡\17\8d\ 4Óèõ\14[ZÎ``\9f\82\aYE\84áXR§.$\03Ü)¸\19+ÎY\v>P\95X)O¯àk\94þ(÷\ 1Ýãbã´Â\86îã÷\82\8cb\8ei 6í`Ò¸Øy,\1fàÆ`±\1aB\8cÃK{\1e¹î\8f\89\96ÊÔÒ\ 6\0\ 54I>ôeÉj\90Õ¤À6\85}ËvòyT\18T\15\1a\b÷méB[§\1aOµyÆ&Ѩg=\19\b`ç\18\82Q\10\80tä]\96\ 6g$=g¶U\10n.ïïN\9fj×WÃ\17Óÿû\1e¼YÞdËÛ;|Oâ»gqÍîÞ¯.þºø\17uªìÀendstream
-endobj
-570 0 obj<</Type/Page/Parent 513 0 R/Contents 571 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-571 0 obj<</Filter/FlateDecode/Length 1643 >>stream
-x\ 1}WÛnÛ8\10}ÏW\fò²i\91(¶ãµ\93Ç^ÒE\80&éÖî\16\ 5òBI\94Å\96"U\92²ë¿ï\19Rr¼Ú`\118H$r.gÎ\9c\19ÿ<\99Ò\ 4?SZÎèjAEs2É&´X\á÷üz\89ß3|\9c¤*¾\98Ïn²ùK/n&ÙlüüíúäòÃ\9c¦SZWð±¸^Òº$Ø\9fLh]\9ck »\ 2\1f/·Ò Mõ^å\1a\ f¬î\82²ÆS°\14jå©u\16/\9asR¦Ð]©Ì\86:/\9d\11\8d¤F´-\1e\9c\930%UÖ\15üV\90oe¡*U¼Z\7f?\99ÐÅô
-\11®Ë³Ã5\9c¤V¸ \8aN\vG¾F(>ãÓ\97\1fnh\8a`9ê\8b«92ƽe6Ïè\93ð~g]éÓ±çä.fËlÁÇî\85ÙÓêþ-\15ZI\13<um+]!¼\84³þ2å\12Î9o\133 µl2º£Zl%\19Kª\94\82võ\1e©Ë=\95 \ 2\1c0\ 1\88ù\80ôô~\94Õ×ê+\10\19\\ 1·úÙ\1fY£÷¤ªø\10 \ 1l\ 2¤®3&!\ 5p\83-¬¦\8d\93\ 2>pP\18z÷øùöÓÇ/«s\94cäÍæ[e;ÏV\ 3L\99?\ 2}ï|\88\ eJ\11\ 4!s·'gQE#9\1a\11b¥QÎ\£f\11f\80;[$p¿\18õë\b\1f&E\84\f\by\15ÔVf´\ 2.U,:0\ 5\9a\8dú%Ëtê\19Ø\b\18ßV\86\ 2Ü\833cW+Ñä\ 2÷ø\0\10¶TØVÒN\85\1aa\ 2\96|O\12ÿ\0\85Î3<\8cäéà\814¨ªOɶLOÔH\155l!\1eOÉ0\13\96íÖr\8cYU¡zå!Ëä²k\13ÅA\86DW\9c0]\93ýRv\ 5\8a±\91þ\9cÀW\ 4÷RT©¨CX#Ç)H¡µÝ\1d\ 5 V)°s+´BÅ8\99\12è \eSoDQ£rôt\16ö*py\8f\8eúªÌÃ\1a¬e\ 6=½z\19X\ f\12Z\aË\8cÛ\ 16i
-·O\9852Ô¶ä\12\96\9cÎQ«dô`\83ÄE\90\85os\95\ 1Â`d\94Ö\91I\14û^\15Îz[\ 522 C\7fpé´\14e\94\90Á\ 4:Ì×Ç|<mµ`ªÈ_\81äÏN\ 1\ eP÷4£5S¡\91\82%\bñ\8c|GÖÓë\7fn?\7f{Mªá\84\85AÐ\16Ä÷\1dèwÈ!\91Â7y\f\ 1ò¤ o\855\ 1n{v\1d)Ã\10\1f|sÏ\8e¼¢9KÁò\bØ\18\1fgm`\90\1c\9aC²O (º\ 6\19¤\8aÞ>¼ûüíÓúîñ!\vH\90\ 5¯aÝ)%ÜëÿÕº?3úh\vF\91\838\96ñ\83Ò Å ml§Y6\83LÄ?\ f\ 4HL\ 2\7f\08ʨ\939\12\9evRë\1eb/\8bH>θ\v`¢,ǼZ#¯á23Ñ\93Ø"ü\88DgJt\8a ÷\8f«K°³d\8aK³UÎ\1a\86!jNÓ¡G\1d\1au\106ð\ f\98?\e\ 1\ 1:èÏàw\18\14G\14\10ñ@Ï|4\85V?dê÷§WTÔÖ&¥°\91²\\a\ f>\94¡Þ\85 úé\fÇr\8c\0Ð\9e\85îßÙ\84±º\82P\18u\1c>7Çp\18Ôe\82ᥳ[Å P®Â\10ô ¤\8fhÚF|çÑ\96&&+}dci}´å£öåQ"\ 5]ÍØ
-Rê ´\e#KDêXo2\8a\9a<xï\81\ayÒ\rÈQÞE|G$MVÎi£¶Ìï8zàf\1aÝ\1c,\83\8a¡3¨6tåñãíìyZ"1\ 60Ø6Þ@Æ^j\90\ 4é\ e±D+Q@F¾\99à°\86\eX j0=Qühά-±8\80\17\16Ô\81' 3\0\95Zµ°\0Xz\16t\8e£Ç'¹T\ 6á¤Tâ\9cÀÞálë\14ò\88ÁúZU<\9d\13·GÁy)\9bXÁ\18\0\83\aß\90Û8íÑ\ ew\ 6)V]`ù\80¾z\96d,1\12+
-Û\1f¨P¢¼{,\10$Ê\12|B@Çók<túÜÆ,¹\ 3\9cÚ[È\85\8cû\96\1as\88u·áõå@Ò\92J!\eÞÃx¦"*xî6\eÌ\ 2\80W8\88)õZíµÚÔ\ 1Ë Ã¹µE\14 ÆA\8eUÌX×Äy²±P#\1fÀ\80ÎÄi\80>ì\eí¸\85s\19ç+Ur\97\ 2\83\83\8d\13À\92çC¾\a6©:==¢Ó1ö\81KÊ*Tw\e¬XqÀ\1eT ëíÏ\ e¡{ª\9cm\0\8a¿ÜõZ2,q¼.üPZGN$L@m,FX?ýÞ\a\94v\8c1RGõ õ\±ÿ4$v
-\e\a%°ÆFW\fä>\1d\82IÓ1:è\83\0E*\0\94þ\e\8eÅEôh»}Ñ(GmÒª\ 6ù\8d£\91¹Ý¯\82 \10h¨ª´ÌÁ\85Ù[¨\88ÔÜ\8aNq#0Sb²h\98ØÔ\11\aèý\98o<Þ°\87\87~3
-
-ø°«>è\1dCèÁ_lri\86ò\136 \17P\fÌü6®%\Ë^\81X÷°\13û¨\8a´Ãe[\8dÊ{\10Ì\18ÜK°¦ï\ 6Eç\1cd\15\8cK½>\98N+K\9c\8f½¢^~¸î¿·L\97×Ùâæ\86\16\93k^ïWoîß¾¡÷¼\ 5bmt\9eþê°s<\17ÃÉ\8båäæå/\fóå<[.®ñ\ 2\96fs¾u»>ùûä7BP\7f\85endstream
-endobj
-572 0 obj<</Type/Page/Parent 513 0 R/Contents 573 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-573 0 obj<</Filter/FlateDecode/Length 1775 >>stream
-x\ 1}W]O\e;\10}çW\8còR*AJ MàåJ|^U*Ð\96TèJ\95®\9c]oÖe×ÞÚ^Bþý=3Þ\84°ÀUÕ*õÚ\9e\993gÎ\8cÿì\8cè\0\7fF4=¤£ eõÎÁð\80>\1fMñïø\98ÿ=Ä_¯©\90\ fã\83\93·?\8cÆo|8\9bí|º:¡Ñ\94f\ 5\8cL\8eG4Ë \ 6\ e\ eh\96íN\87\93!]h»¢k\97ëðqö\eÛÇ4Â.Þ¾\7f\88\r8°{_jK\8aî®Ï(«\8c¶\91\£mÀRa*M&\92
-\ f\81
-ç±Ô(\1fMÖVÊÓ ç»kÜ= èh®©©T¦sr\96b\89\90pzH³R\a-»Ä\ 3Ø\1d\1d\r\ fÙî¯Ý\8bË\9b\7fþ½¹½¹Ü#ùùãòô¢ûyÿãËl½|úõk·zu~FÊæi÷Åíݯ\8f\14\1a\9d\99bEËRE\ eqË\80Ê¢q\b$\94®rvPU\95[ÂÃù
-׬\9cÕ¤+x·,\1dEotà8Z,¬Ý'\15åwP5\16M\8dx¾\14Ͼ\92 ]Ì=Ë[\bì púIÕM¥÷ø6\80\rÜT\8cºnp½\13¸\9fM2Î^«ÜØÅÚóB\99jØ\998\9c\fÇ\8cÞOk\9e¨T\81¬#ý§5\8fªâÔYÇ1\ 3vG\86-Ö¼\18K8z§ê¹âè\ 2i\ 37<U.{\90,\ 5\9a«ð2q\81\8cEf\19í^l]\92\rs&hðAE\9d®Ê\8d×Yt~EB\95P*\8fKk]óÒÆ\eÕ9\b\86l\1cÀ¦Xº\9cñ̪¶\ e\9c\9e¾Ý\f©lkxßx\97é\10\18\1fæ\82\90ÔëàZ\8feA\18¸½o\9a\8d<ª\10«\15nÒ\85f\1fù\1e,ÇÖ[\81¡\172è\92ëBµU\94dÂUp$¬\ 22\88C \1e\85¶i\9c\8f(\16ÉÓvYî\1f\8dSƦÃ)òâU\93;àóóËÅû%y*Õ\88T\ 5$\932eÉ·\96\96H\e \7fÔ^UÔ\9a<¬+\8d\89\1c\90L\1d¹Þ\10H©\1a)áe*m$Ý\13ð³H\8fp<.]¨_\93b"7\ 5Ã\ 2âðA\vî\a!T\ 6]HN\b¡¸HZf!6Á'²ZÃ%ð9à\96¬L\1eò\85
-ïe/»Ü\réÖö0\ e\ e%Æ×!ÿvC\8b\v@î»ó[Ô¸\98CX 75\ e Ì\93²`©Ö
-\15.9\90¢ãÌt·°ÍNа\11\fA\89g\11ù\85\8bªo\1dl\82Ö\ 1Ô~\9dÝ8Ð[î_¹VR¡ªàh¡\932\fâ:¡8;\80;!¨\ 5´\ f\19vRd(å\0æ\ eé[\85_È\93Nòruú]vå:¢ºÃÿÑæ\18\87\99\¶çÚ¿Ï\9a\19\8a\1azÍÊ\8dd?"\81Ì\1eñ=á \84ID ¢s¥Y\944hmãÍ£©à8B\10\1ew¦\90\89¿Fh'È\ 1\97HG!\0Ø\87O\18 ×C`iðÞ}\1d=ᢶ\80\88\9b\ 5È!R&Jf÷½C\8e\99vP\ 2e?¤^ÄJ#ôfÄz¦+\832´,\ 6\88õ\85ï\15rÁÑ[â\10úy½v!Ò·óNù\9e\9bß6ûî\8bû¤1÷ÆÞÌ\0BîØ¥Âq\eÁÕ\88c\vè̱àF]8Lô<eú$Gã\ 44\90 vL£bâÜ8ð\9aK\f\10vQ´y\93"\19aN \eî=\7fZ\r\rõ\10zÐ\98bð®\16dXøÒ\ 1W\90\9c\99Áµ\1eNB\v\94\1fJ§FÃC\17\12>»znP\97ðIJ\9f½Âå5°, æK4Lv*ꬴ\ 6Æ \16¸
-¥\91ò\17c±\9d\7f4\8aõ§o\15÷0TÛyé8°U¸0\8aÂXS4¥=\ 5¬^A\ 4\9d\11NÃ\13\1có\14\f\9a\14\9cRl§\17²XM\9dm\1dL\9f\ 53Ä»\ 6\ 5\b¡Sq\85BÍ:¡Ûd\88{a\88*¶Ar\81Y\ 1£À\87G®ô\16\95!EÆtÙ#påä³\94\8b°æh\88ÿTUÏ5¨Qãø\9c{\8eðµ\89\r¥\91Tîó5\ f\r^F\1dáOêy Ý%
-¨\13Ú\8e& è\9eá¥ó\98åæ:.5(P«\fêÌs\ f71ôL\9a\ 3VÔ\9fd\945\a\96÷hÞrgë´ÖÄ\ f/\95Xd\f\93\ 5·\ 2é4\b*\7f-±2Nt\10v\1e\8a\12c\16Bþ\12\anïàKk»ÊÕ\18\ 3à\12Z\9fÔ7\ 2duHÅ\ 5Õ_\ 2
-.\ 4\9e^²\87\8d\97\v\97fÝA\10\ e \17\18ÆeiÐZ`nËáD¹¤$À\1c\99µÀ\19\95\ 6\180&ty\1cÑ\ 2Ì\97ª÷ÐÍHû\fJÐ\16]o+¸\1eà)Ó<u±\97\1c1ÛÞÎ\/k|þ\9dùá\ 4\8dÀ»è2Wѹ¨Í\93\89«tà\8dÁ\1eä\ 6|\faÍ\13'T¹;[\81áU\18¬ùÂâ·þ\86Ø9¦Í`£Á\10\99|ÁÓ%\15\95\99ZU°KL9\95çÒQ{Q+º6\99wÁ\15¢à\98\11\99Qid\92\11\r©M'\ 1ÆÖøº6 \æê\87v¼ðºã
-ÏG=\93\9b}\80x \9f\90@\v7\ 3?N`\83oÊT£æ\ 6®sõv§×ã4+æf\98\10MH0c\15j\0ð0;\94\83=\98Çhı\b¤KµBÓ+@w^\12¬d\1cÅ Ä!Ë þ|ñk\9fÓä\ 4ú`tbjà\89\ 2F£\8b<\89\80à\95µà'\aë-f\8e$\99àÜÚ)\1eÔø1&¯\88Z=ÈdQ£\\17h\ e:\9dÄ^\16ìßm\90çѧ«ãî\ 58\9a\1e\ f'''4\99NÓ{ìîôúì\14\ fFp\83ý\ fô7F\1aÍ8í¯÷îO\ fNøññÆÓr<\1d\ f§\93c<,ñýð3\1f»\9cí|ßù\ fÝ^èúendstream
-endobj
-574 0 obj<</Type/Page/Parent 513 0 R/Contents 575 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R>>/XObject<<>>>>>>endobj
-575 0 obj<</Filter/FlateDecode/Length 1041 >>stream
-x\ 1mUÁnã6\10½û+\ 6¾4\ 1lÅv\1cÛ9&»I\11`½íÂ\ 6ÚC.\944\8aØH¤JR6¼_ß7\94ìÍj\8b \89M\ e9oÞ¼yüw4§\19~æ´^Ðí\8a²z4Kf´\9c/\92\ 5-7k|^à×1\15£ÇýèæyIó9í\v\1cYmÖ´Ï á³\19í³«\9dªSE¡T\81|[\14ì<\15ÎÖXÑ\9e\1agÓ\8aë ÙP²#Ïî \ 1¾ÍJR\9eþÒæë\9erk~\93ÃMc] FÄ\89\ eÊi\15´5d\8b~)SUu½ÿg4£éü\160÷ù\9529é@%®RUm} \8c]PÚT'J\99\r)*Yå*+Q\88u´ÝQ\8eû+Û\b\8a`/I\81\8eê\13Ræ\92o·}$É\86\10)K9\1eæ=(])T\96ô\e\8bU²\14@{TÉr\80TjÛ@«;\1a\aÛP%YÇ$ycU\9e´Áå\1cS\81¤`3[Ñë\15H3o\9e*ý\1e·\1cÀ\93\14 DG§\ 3¿^'´³5\ 3å\0\12.ó\8c[³ªÍ\99ÊÖä\8es/Õø6\9d\16É\84M\8f\1c¸+8\85\8f\91¶\0l
-ÄÍ\17³\9f#'\1d\8aÏÖÿé´ ß\1eò\be\90ö+\87\1d{\8f«\9fL[\v¼\87ª\92¬À\ 3\r(Ôᥣ
-\8bM\87 r\9a)CY©Ì\eG\1a\8eê$ÿOt´î=¡2ø.\87sû\9d\ 1õ\97r\e\8b¤h\0\8dµAgëN+\91f?ÆUhÛ\87ë}pm\16ZÇ}G\rs.íO\19\12Ǻá\1c¼F!÷2\14AU\94¢\85\8b_\93Kã>¶õÂnB/\17!\ 3´Èp\ 3ƽ¥B¹×ë\9e\17éf×\81\9fZ\93ÐÓ\ 1\92\8d\ 3ÁþÃH\f(\8fÌ\ 2ÝP{\1dþ¬u\8eM@æK%m#µFиüË\16³;_\8ce6£ì&t,5æ\11ã*1Ö0¶\18\83\f\ 1Qz\92!½¿\13\15\ epÄá½Mî\12úÒfï\1a\19Ï#ß©96£\13\19\8d3Õ¨TW:hF\7f
-ÍUÞ§õ\rg\1a\vþü½Å\90Lsù;Hhø8- \99
-¸~\88I\ 4&®"õÂ?|B{q\9e\92«&\8ex-2\92ÂtÝÀ\8aÀÍÅWþ\ fo\rk\1aäÅ|hvCº÷qÔ\91IUè¯:[\1d\1du(c>q\91X\Ö\8d<\14\86\159@\7fßüÑ Õ²;\89"\13|ýbjí»DA1ÑH\a`tΪ\9aDS(`B±ÄÌJýµ\f\r\8a\ 4 Ê\ 4\á[ö\98bV\a\98
-Iag\1dèZ½i\13aaØt欷EÀ,d\9dt Uó°á\ 2RJ8\v\87>½<ï ïO¶®aÔ/&0&)гÆ\îN>0\f!"-Õ\ 1¢jÓJû\12ÍC#;f
-}á\ 6t¿Ä9Qø ft\96\9d\86\7f÷2¶\10OÏVn³VzêÏ4ööë\83ÆüÂ\ 5û}dí\1c]Ü´`\15Í \97J¯À\ e
-x\edWpN¸·¼(£8\94\bÐÈl¨\8e\83\ f\8fJ\8d¦H\18JÅÃ\84' ±\bìH.BTÑÍó¦\7fNçëM²º¿§Åf%ÏÇîaûø@\9f\7f<Q¿·è·à\99\9e#§ëÙ½\84®\93U\82H´|ks\8e\98\97ëe²^mðFc\7f±\92cOûÑ·Ñ\7f¤Ñ\9cÕendstream
-endobj
-576 0 obj<</Type/Page/Parent 513 0 R/Contents 577 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F5 7 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-577 0 obj<</Filter/FlateDecode/Length 1533 >>stream
-x\ 1\9dWkoÛ6\14ý\9e_qç\ f\8d\v8®íºNZ`\ 5Öu\ 5\f\14M·x\1d\ 6ø\v%Q6\e\89ÔH*\8eÿýÎ%)?\94\ 6\18Ö\a\12Hä}\9dsϽúçbJ\13ü\9dÒõ\8c^/(¯/>¬.^}zK³ J¼Y\ßЪ Éx2Á\93|øëV4^Zº\19ÓÊ\8a\é\r9Qg\82ÜÞyYS.ªÊ½\}\87\919M§ÑÈÕìf<\83\99áj«\1c\95ª\92TH\97[\95IG[³#o¨0tf\84<ÌK2\9aî\82}\1cÙ\19{O¦õ´Û
-OÊ;\â\0vÖè\râaãø§\8d§ÒX\ ebBWÓ×ѵßJ*\85Ò\9eLI[)¬\1fQ\ 6[ª¤½iIXIV\8a\82íy6\84óúð¦±&\13Yµç°\ei\85\97ãd~¶\18Ï9³_rß"õ}\b\8b#\10\8e2Qð\ föÌÿEf\1e$Õâ\1eI+Oδº\18Ñ÷Öyä¡/=ÉÇFæ>\9cE\96\r\82CÒ\99¤\ai÷ÔXéý\9eÞ]_ö\ßÞ\8f``§ÃéÖ)-\9d\eÓFñÊ`,S\e\12Å\83Ð^là\eO[\1e\13b¡d\9e\v\8a\18÷¤Q\19d\81T(7µ¤\9dòÛ\ 30ý\92\ 6\84Z¯*\85È\82\rÜ3;\17ê\86Øk£\9576X;åG:\8b\9cÌÆ\8a\9aACYPú#\88òÑ[YK\84Â\19m~\0h!³v³áwB£Î\953\80µj\1cØ\ 1ä¼Ý\a(ÏX³GÑk xq >\1db\ 5\95\11xD:Ö\7fL\7f\83\ f9\9eµNö2NI05Ù\ 6\17\87ù(4,\ 3;%BÕ\1aU ¯À\Óð\ f×çÊ
-d8±$©+!bâþ\91\ 5\15ª,¥\95`k\88\16 é\93gñr\0\99>+Ý\9e`\89¦H&\h Îw×\ 6\7fê\ 2)ßµúö\8eæ\81¬éx<Méý·?æäü\1e\8d\9a|Ñz¨t^µ¡A\9c©\84UnýòÜ@˼\8b\ 6j\94¤W»\ fw\1f\ fƸw\93ßû³0»vâ\12\95Ê¢5"ZÜ¢\ eµ®P\1aÃØq¯â\1d÷\93¦\ 6¼f\860ï,i\14\1f\8d\96*Ìn¢\96Ø1-A\fÜ)\94Ë\11,C\94I\90 \17éò\12W\84s-ø\7f\12i,(wtú\ra°5£ÁÒÆX\ f\858¸\rYY®\1aR\15\ f\ 2\94à·\1cdieü\85\8b\14Z±çßï\eÉÅe^\87ëÌí\r4\85ÙÛ5µV¹DyJ)|kå\13\8e}A\ 3\8d¸\vRÿ¤\90\91q0âTÝ \1c´8\82(\0Û'\ 4&\1f\ 5?\1dq8¯>½Iò=ìÒíëú\90¢Èþà¨Ì·¡\e+\13mu£`ØѱÃ\19ÆÅ\86`"\1dT3è:ëBÑ"=\bÏçÛ\15g\1cõ\10\0B°Q\7fÌ\fî?f\ 5# ì\ 6XiT\1a¢#\83\\9e¡\9fÔWæN}¢"s±Ù\16jÙV~LßXt!l\1eeÂÌk¤\86RjDÔ];4ÿ\19Ó\80\14Gµ\91\9e*\83\80\8e±÷¼§Ì\83n\95*8\7f\92<,°\81\ 1´\1f3°\92\ 3@Ñ\96å!\7f\8e·2qhá\9cÛb\8a\15\b:³hO\94Oú\1c%ÛhcûB\16FÜzØê
-Ã"\90ls\1c¥?=\191§ì8r¾Â¨\89\98!>\9e}µðØ\rB\9d\10Ú34z\96\e d\0ü.^\9dÐÛn\7f\98Ç)»³ÊËõp:¢\ 1´¾2ëµ\1e\8ch\81^yòçgZD+\1d÷°\vÌ\16<ª\83 D¤\ 3\9bÂ\ 4v\98®L©¶a\ eÙ6
-EºÏZ\9e¸\1ak\v\90¾ÄÞP\8a\1a#PØ8,\93îÒÊð\0Am\8f;\f3CK@\ 4\17©!\ 3åZÙ·«3È\9b\90\18\9b<\bû\98íÄ\9e\96ä%¸\ 2^$Û¬A&Iee0\ e!/¦¦zO\7f\81T<\8b¿þÊ'ØO\¤\9c´è\10h\ 3\8fI¶\ 2·ÎCE\92%]ô\98ºÛª|Ë´GG:Z~\8c\90ç\95âñ\ 4ÿ\0]äÛ\90U²
-\89´\ 61.!Öϰડ¯Ë\8fç\b\r9Ðh-\86\8c\86HnAã^T u\1dH\aÊ+ÛíMÎc¼Ù\8eI¡\14\81êIè\82\83¸\80²\12cLc\18b¡k\9d¨Î5\90÷Âåe\9dÔSô\9cçn\v\0Ãxd\1e&¾v\8a\19\98\16 \9bP¾* ¿¾Á\96ýþE\82~\fM;Ïÿä\1e\82ë6¯ÿïéÄ\11ÍÞ¿\98>ëí\8bñqE\1d\\95\83´µ\1cW±0ß\8e#ì0BÂÂïFiý:ÝûÂð\v{xè-æ^ÞZ^gzuLèÆM\9c§a¾UU\81\83Ü6@è\1e\93i\95Öú\rD&<\ 4~:¬!\8dÅ:Ï\8d\ 33PÇ\9aw
-\10º \8c·QɺÉû~Â~Ðó\9dI¾\1a¿\1dben\8e\1f,oÒ\aË\7fþÜ\99_ÏÇ×\8b\e|1Aaf×lð·ÕÅï\17ÿ\ 2¥\\8cendstream
-endobj
-578 0 obj<</Type/Page/Parent 513 0 R/Contents 579 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R>>/XObject<<>>>>>>endobj
-579 0 obj<</Filter/FlateDecode/Length 815 >>stream
-x\ 1\8dTÑnÛ8\10|÷W,òä\0±l«\86\148\1c\924)\ 2´\9761P\14\97Ã\81\91V1/\14©\92T|þûÎRV\9aú¥\85aX\16¹³³³³ûm4§\19>sZåôfIe3\9ae3Z,O³\82\16Å
-Ï9¾\9e©\1e\9d¯GÓ«\ 5Íç´®\11²,V´®\b×g3Z\97ã\e[2í\G
-·U\8cªÜp\95^Ä\r[*\95¥ÊÑv£"?³'\1dI\ar\96pJ¥Ñl#\1eUz[ª.hûHw\ f\86\9b@ÊöH[mÌñú¿Ñ\8c&ó7Y\8eüãRµ±\93\8cÆ$¨°\v\91\e¤3&ô\80¡y¨¨QO\1c²}l¾Ì\16\12{çhã¶BKxk\eÙ·\9e\85\a£äÐ\99\18þ¤÷lÙ\ 3mG×\14Xùr\83sïºGùer]l»Hµó\14¢\aë}Ökz²À\16ƤÚ\16\81\aÄ·¢\8a 쫤\8d\³!£+`ñÿªi\r\9f\90®\91W58}\16I¢ë `ã\86Zö\8d\ eA;\9b\84TTk\1c]ÓÖu¦\1a¸\82ØA⤲\\rdUè;Ñ\0{\85\ eîë\11Å\8dsOèd\7fÚyÔl+á`´\85\96tf\1dè{BÕå\9343:È\1c¡O×&*\ay+\ e¥×mDu¶k\1eØ÷}=ª\9d1n{\94¬1\88 X0\8c\83 }U\9d\8dÚìMS\1a\17¸:læ9ï\1cHÇ\r\98H;\93òP\8d\ 5«\vÉ\9b°\9dÕQ«¨\9f9£µ£G<ô¦µ¤+Väê\9eÇ`dÑ@j\96þ¢X¨\ 5Ö\a\85µ\9aE¸Z\fðJ¤s\80Áö\8e\90¨é\15f-\rÐxZñóÔv½¡\7f\fÖX2@YtÑ£\8b[¯#+´ü\ 4¼4´\95Ù@çZX-ö\86 ZA\1aqÄ\ 1¯;Õ<¨·CÚÓ~l'ù¢7ÿß®(/òeñOÒù~|ôBéè\84nþ½}÷åöþ\98\88þÀ´ÑåÙÅÅå\1dÝ\8f?½¸\8e*¶\9a«ûã!ï\fK\ 3cõKä/·7\7f}ø
-ìßBþ¡\rÆ>_J\86u?6%\87\90\8cçw\83\14Ú\87ØÛf¨ûWr{VÕ$É,F·\18|üwÖì2:\87Á\93ºð\8aتaeÃϸ¯6Ñ\8bzý\8daS\8eái°´¥ó\9eËøzj\93\85§WÅÞ\12óU\91-OO)Ï\8bý~:ûx~Fï°/\r&\ 1óò¾\83I\ 5~2Ü\9d¬fhl5¾ÀöÀú¢\ 2TaB\91#Hûéõ>\94ÈÅj\91\96\ 5\168¢òB^]®G\9fGß\ 1ýQç\9cendstream
-endobj
-580 0 obj<</Type/Page/Parent 513 0 R/Contents 581 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>/Annots 301 0 R>>endobj
-581 0 obj<</Filter/FlateDecode/Length 1651 >>stream
-x\ 1\8dWmO\eG\10þί\18åK@Âw>\el\1c\84*B\80¢\12âbWi*KÕÞÝÚÞr·{ÙÝ3øK\7f{\9fÙ;;`Ò´ ^öm^\9e\99yfüu/¡.¾\13\1aö¨? ¬ÜëF]ìl\7fÝ_ï%ÇGQ\97\ 6Ý\1e~\97¸\95D\83vUÐ\84ïSÿ8\89z|6\1cEývµ=ë\1dE'8K\86'x×\ f+>K\86½hH½ÑIt\84Ó^·\e\1d·+>}¾ÆéÑ1n5w7r{xÏöô\86Gü2¬¶g¸?\b:Ù:~= >{?Ý\8b¯FPFÓ9¼\1e\fOh\9a\ag±\93í_,E奥QDwSú`J¡4Ý\8f/Þº\83é_áe2l^vúGpx\9aï\8f¢$¢\eíÉëÌ+£\9b\9bG\94$íÍÞ\10ÊqsºT\8er\93Õ¥Ô\9e2£=¤;Rznl)ø)yC\955+\95K\12\9aMx4öÁùæðQù%\15f\ 1\93\9c´+\95IwH¼ijO~)IK\99\13\84á-\eÑ¥NÒo\8c\84$~"-Lõ\ 43øº[\94\ 5aϱf3§¥÷Õ»8\86ÏÅÒ8\1fei\12e¦\8cÿ.\1e²"ÎÔÜi\9f\aH"ÿä\ f\83\aÖ\14\ 5\94¦kº\1fdÔªí\r\10,x\f]\ eÖ\15¸ ©2Ω´\90ì¤\93\85Ì< À\11 \ 6\ e^\8a\9c\10Áç\855uE³}øʦ¾Dâ£éÅ8¾\19C\8e÷J/Üì\0>ç;N\8b9\87\92\9f\9b´P\vá\8d]\93\95©10Þ¯+ è¡®\ 62Z\94ò\90*á\1c\0Ï\ f_Ù\aáäê\f\88»y]\14k\ e\ 3^\ 3MX\vÿv5W\95\95\99\12\9eø¦9â\92\8aì\81\80óÚÔ\96äS%\92\1aòB\0a$b\82ȳ\82Cv%¼\ 3ø\9c*ØÉ\8c\85@N\11×\9cæ¹
-«\1dÅ\806\88ÚdÙn@¦\0£\82%Ò#\13¥Ë¬J\11½¥´\922$\1c¢$\85Sð/\87}+Î&kJ\84!X\84K01\15)ÎS\0\ fpk\8d\8bÎ\e\93\ 3F\ 4bv°cÐ\9dô¥Ñ\91|\92\11}15¼-\8a&Oa*\90\ fáy\96\83Í}ì
-O¨\89l \84\ 2dn\8d\f)\ f9d\88\10ÇÕlP)Ö;Js\99\19TPH\9cËéí§ëOw\87T8a«, çìÊ2\9aZ¡\9d@\1aVª\92.¢\97õɵú\1c\ 4¤à¤©:\1as,\93\1d¥\f\91\ 2¬!T®2:\a\1eÏË«\85¢-@¥½\ 4xyã*°\17Z\e\14:v\9a\0\91·"\93¡p\ 2µH¤åãReË\80á\8eòB=È\10\15*\rÂÄåd\99\8dV\8c\ 2\84ÿ0)Î\vgBLX\ 5`m2\\95U!\ 3SÁó\96 o\ 3ù´0 -["ÙdÛ&¥Øq\ 6?³ëÊ\9b\85\15\15ìÞ±¸\12Ös¹\87 MIÔøG{\95\ 5ªûN,Ä
-´\84Ô\93MJ¢4ª\bÙèMf
-\17¹2=m\ eX\1eJFfµU~\1diéw\14çj!\1d¨\aá
-ÉÍ\ f\9c(SpQ8Aù!c\17¸bpdÉ¡`Q\96»\95t\8e@WkFà¥eïZu\e
-lIUû´^ ¢_#\9bE(\88LÄ\93\8bû\9bñt\12\7f>\8f.\7f¿üé¼w¦t>\1avONo϶×O?\9d\9d\9f\8eÏz£þñ÷\ 5ÿ\e[3ôÑÒ\97ÅÎ3ØÝ Õ±\8do@\1cä×ô\9d\86Ë\95®\1dÝ¡ÐRi\17M\98\1a\82
-xÿo¯\ 3®\91±\8b8[¨Nªt\Î]ÜMâ\ 6ê8\19\8d\86ñh(êEÜí\8f\92ïÙû\1fM)¸\89n´ë%§4è\ 5åõ£æ\121@÷dæþÖrÛ\1c¾XJ\14õûZ¡Y=ç£\17-¸¡f©\91\87,\86\v¥U¼i´ÏuÐ]K>m:s®dK%\99WÑ0ÛÞ\15*`\8e6j\1eYæýåõ\9f\93?Ц\16
-5¼¦\a¹f\1fºOÉ<|\85ü\8a¯0°mÇ\8b¶ÙþüËíÇÙlòe2½Äß\8b\1a\1dCû\vL\19èÑ\13éqÔ\ e\r³\19¨\b\rÌèÙl,,Z\1f¨¼\1dp\ 6¯åÞè¶û @¸ \91äÞ\ 3SÛêÝ\9aÊ\1d$\13Lê\81±KvV\87v?Gí2\b\124·ÀÐ\83\ 6\vöÆuµ\91½\ 3ãËä|\95\80\11¨XÒ\9b[%RU Ìß½!\91\9aU3\7fÄWÏg¯\16\9c÷RXî\1d%j\f\88£»H\98·¡Z<µ\1dT{ç\11\1e6=j)À\9dÌçÆ*\9e¸xTÐt>¾\81ÝEã\8c\95È"\8c\rL\13hôøiiØ\9b\1dwÐW\eB®-ÏlRc\ 4´¡î\9av\9eË9\90â©\f\86± \80Ø°ð\86Z\912²pò\91UíRÑ«¾\85äÒ\86J\89ö\ 6\96b\1eÇ Âc!H\16îð8 ¬è£Â@\868\82,\9bÉ\ 2Ñ(ê\1c\1e¥\18(Ù\ft$øT*îJÞ\84ÔÃG\84Î\86Û>\8aª\82\0`4§û\9b\ f°?\14]\98¦\;5ð\98Úá\82\12³\83`x\a\89\8bY;ßÇØÌ0a¹\1dS?\aÿé7Ldtó!Ð\fÂõØì^\87\910l¿\14Ôk\ 4ÅW'mòvzÇÔéó\a\ 6¨ùñH\7f\84Ï\ eÃÁIcQoÄ\ 6]N÷~Ýû\aÊ\ 55³endstream
-endobj
-582 0 obj<</Type/Page/Parent 513 0 R/Contents 583 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-583 0 obj<</Filter/FlateDecode/Length 1751 >>stream
-x\ 1\9dWMsÛF\12½ëWtù²r\95\0\93àwr²£8å*IV\96Lía\95Ã\10h\92\13\ 1\ 3df \99ùõy=ÀðKÞ\1c¶T&Mp¦?^¿~ÝüójH\ 3ü\ri\96ÑhJyu5H\a4YÌð:\9eËk\86\7f\96i\13¾\90G\93ï}1\9a\8eÓÅå\17\9fVW\1f>\8fi8¤ÕF¬Oç3Z\15\ 4\ f\83\ 1òëÕ\8e\89¿©ÜSÅÊh³ýPðF\eíum¨ÞÐ\8b²ºn\1dUj«sÊkã¼2ÞQm\89M[±UrÒ¥ïW\7f\%ð\ 2£Åõ(%ù\8c\8fÉp\94fòHüXnÊ=±µ¸\9c×\ 5\932\ 5µ\8eÅ\8fß)\7fúÕë\8e\r)zí3<\86hÖ\9c×\15;<¸Z³\95k\8a\8aºRÚ\88»ÁÑÛÓµ¯iÍT°Ë^sA¥òl\9fÞ§ôYé²\ 5\988`Ù·ÖÀµvg®uY"ßg\9cAЧ\11 \81Úú.VíI»\90õ\89_UZVÅþ,D1Ò\ 5y\0)\9b¦c\ 1e|Äi´H§òHNçvßøzkU³\ 3æN\ 3©\80\10Ó\ 3{»dûÂöQ9\87Ð\8a%{`YU\80ò\86^q~\87\88Û² U\96õëe\ 6\170\ 1\83|§Ì\96I£¤Mo2¥\95 \12?"M)R!\88mÙHÅ;dÊÚl\13 Z\91cç\84/ϼOé¿_\ 4\19jj<[\97\ 2ô\85WË\7f0ø\16`?\84.TxfnBÄ jK\7f\86}\fç÷7(N:\14?|^Ð\10°n(É&\94Lfé\\0]¤CüѲnmΡ`Ç~\18¦ãQ\86ãóð\8eÃù3à\Y\85\93´±u%\80W5º\ 1\8c}º\16äuÎô¨òg´«\84¬Öõ\v?½\8f\19NÓÁt"^Û\92>º\9d\a&rê®\ 5\99îXoåÉ¿Ð<¨²¥w\ f+º\rì}\a\82ä]^B¦\83\95ÏKù\ 2]fú\16H(×\e7Mý7ÿÆåÿ8\f\16eñü D}ê£,\9d\ 3\82\1e§,¥\9f,\17 \83Xÿ\a\9c\1eQ\9e>Á\1f¨¬U\81\9c6¡\ôªýN`£û\ e·\1f©5\ 5[\91\8d\ 2ò\12ê\8bÄU\v\f\8c×y×Ûnï<W?¢%7lÙä\1cÓëåCWMÉG\1cb;¬úÎ"×6¡5\ 1x×\ 4\81]\11<ácmõV\etÅ\9eÖ
-tþ\ eÜ·É\95¡%Bu\eÍe!¹½&%¿p\89:ªrïÄÐ\86î\97ÿ~ü\89\1euÃ\9dð\9d\15íN\eèå\ 3z\13\1aµý\81\1a[\17m.©çIP½@,A\10LèZ\9d\Ã]ýÏ,ýG\9b¢~u=w-Ô\f\81Ô\8dÀ@\9eUÕ\15 ¬\87¤\83õ±¤\93cIQÐ\87Ú\8bf\82\85KoÛ\1c\8a\17» ¶\v|\8e\ 6\9dú,ÒL\9a%Ü9§\0FG\92Éè¸þ"\8aÉ´¼ÿ$\9db\9cÌ\8eF ¸!\a}¦wG?ïnN\14\18\94ç\eRMÃÊ\8a\96@\9eÇÉz\ f1Q¥Þ\1a\bL \ el_Ô^<í «lq]t\83µ%ðÉú\94~\96Ñ\85\92vE?uM\86a2\98\16ìQ8S#P˹v\8c\eϦ~Å\84³\17Î"e"A0âZ\ 3\189,S-ªu\8fÅo·\8fô°ºûúË×\aºÇ|qeíÿ\ f8²38.\ 2\8bàt\99Ç\81\80Ù\17¼½AFnË<\8eó\17L\88ÁÇ|:í¡å\97ÛÐ\1f2\83±cÔ¶\ 2ÈËÄò\8b\16QO0l»tì0\91×,MSy\7fH\89ÓíE\9cËd\98L\92a6JÆ\93i2\9b/âÿÓ`\7f\82i%ã ÕWèÚõÁÏAÖcÄ'KD\8cX\99½¨I/\89(ïºÝ@/0k´Á Â\96Ò:/¦\râþ\8bmMºËÊy+$è\8fct\a\9dqBC¬4\1e\vDP<é¾^p0\171\ 6Ä(\92<\90\fȼ¨²\róoOn\17S\ 1»Z\13\18\95Òà\eV+,t\83A\86ÁÈUðRÔ!{\84\81Ññf"¢ÏE\bÅlGð\18)\7fÓÎ#\ 2E\ f¿ÝÝŧ}º\14¯ÁC¼w\91hP«\0DÉfëw\ 1ä\93,¿tð\9cÃ(l\10w7\12²Áj \ f\+\1aåe\r8ñÕé\89\1c9\ 2*·¿®¨iqÏ\0à§ë7Mæ±\¡÷p¢Þ<½\177AN
-åÁ \8f\15ªêw\10ØâªÑ@-\b7$@¿ \ 4QÐ\e¡ª\94F&C\b\95î\96\1fiùñþ\82\90wõ\16S\ 1ª×`Oe¬52äeW\82\1eE~ü\ 3\0²ûXdÒ5\86l9\bJ¤\ 4\9ca+\80H\96\17>%£³l\8e:\85\ 2ïD\ 4\8dëô\ e\ 3GY«öÒÑça¸è)\10\v\1d^z\10n»\83\98_¸c\f\18Ч m\8bM\8cd\88¡ *Hæ¡«\16Ù\9b\95s8\98tª\7f\1a\ 2àï\87\ 4
-§bwÈêÜKw óN½Hÿ¢\951\8aÂ\1e\14{0\8d\90vß\ 1+¡_¨ÏEÐ\a\16c:\95®\ eçR K\9bÖ\ 2?\8c;¡\ 3\f\1c\98\84z\9f2çû¼é;>º¿p\1a\85¡ç¶Ôé2\8ex\ 4\99T\15\96!\0\8bq±©e\9f\8e\vÌÉ\1d1Ñã°\85\8eÜ\8ìî¡4kü*8)u/;HSDð\88z§\92½Á0+å\a\ f¶\19\8bÎÓ\18¯j\ 3Q
-©\97Ê\1d¶À^µÎl\1dj?Á\92'\93û°(Ïûß\83ÃÉ(\9d.\164ÍFéh\18Î \7f>}¤ÛnÓ\10Iý¥Åï\ fI*\19Îæát2\e,âÆx¾Y\8fgãt6\9d÷?\ 2\arëçÕÕ¯W\7f\ 3ëö¹Ûendstream
-endobj
-584 0 obj<</Type/Page/Parent 513 0 R/Contents 585 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-585 0 obj<</Filter/FlateDecode/Length 537 >>stream
-x\ 1\8d\94ooÓ0\10Æß÷SÜK\98\14\13;Áqx×n+L¢c´\81·(sÜÖ¬ù3ÇA\83OÏ%nYË"w\8a*Uò=?ßÝs¾Ç \85\10?
- \83\88\83,'! \81\8b\94Ä\10\8b\ 4ÿ3ü\19\ 5ëá \16ï\89\18;`!'|ì\802:®à=ü¿+fÙäÝ<\ 5\1aC¶Æ¬8\17¨Í
-À\9cÂ\102ù&%\f?¸®ºR\99Üêºjßf?\9d\88:QÀ\12\94ì#)\81Åjyw \9fT^(\ 3öw£\9c \ 6úOÀ±X\94Ⱥ,óª\0\84ßc¬®Àn\15\94i$4¹|P\16¶\ 3Æ\11øKÂp×\8f¥zìTk?\9c^\84Ý\rhDX\7fSø\14\86§\90àøø\80i\e¬Où9ì,g¦«ÂÏ\98½\8a1\95\ f~̥à \7fCg\87\92\98p½uÆ¡uÎ\8e;×N]k'\1a±#ë\9b¯òJW\e¨×½\17-\8eá.ß´ [誢\968\ 5\95UÅiú!\ 4lïè\\9bÖÎM¾ñ'NO\ 1'^|Î_Cð¹p[Ûü|\ e±'\87¥\92KÕ\ fÃ\19\1f\85\87q[/º\9dÕÍN=y\9bA}\83\89¥ÌksS¨²ñBØ\19Ⱥ63\89\8dõBb?ä[§ýí\10{ýa\9f\f¶Fôy\1e#\ 2+k:i;£|k$"¸F¾\7f¹¹\82\v×à\91amõ\1f\85CÚG]ôã\191¸×¶%Npx\12ýh\1e=\bÜ\ 6\ 4ä67ç°}LO\15ÇP±\7fg4\11\84§)p¬mØ.«éb6\85+õKíêF\99\16>b«\86µ\17\1cb\83$L\9f·ä\8b}\1a'1I¸À\15\8cË*\1a\9eÇu6ù:ù\v\15\b\87µendstream
-endobj
-586 0 obj<</Type/Page/Parent 513 0 R/Contents 587 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-587 0 obj<</Filter/FlateDecode/Length 701 >>stream
-x\ 1UÁr\9b0\10½û+ö\98t\82\8a\0\vÈ-\19§\ fq¦5éÅÉd0\88X\19#\$Òäï»\82\10\9b\ 4ì6Óaì\81Ñj÷½§·«_#
-6>\14|\a\\ 6I>²\89\rÌe\84\81\17øøîà¯ä\90Õ\vã\80\92 oÁ\1d\pL\92\9eT\8eÍ\88Ó·@é@\rÏ}_û<\1a}þ\12\ 2¥\10eÈ\83\ 5>D) \aÛ\86(9
-\89C\|à:\9a^^\1cG\ f\18í½F[\ e#\1eÆ\1fÕ« \14¸\ e,\85V' d*\92X\vy\ fZä\1c¿Añ¤\90©\ 2%dÂÁ¦\ f±¤¡o\13H\8b¤Ê¹Ô<5a\89È\14#úIÃÍ\11nÑ¢\90à\921lâ{~Rÿ\e\186XÔEþXܵo\8eI\ 3mKÄr\82\ 6ZÃÀ#0\8böRh\96\r\aæÕ\1cþ\1d\17ü\r\921\81ÉÕåÝ|:A~i\91ÇHÙ|(]V\89®J~sÜpa=2Og\91ëtO\ 1M÷ª\84¬r(2PÕÒ\8a+½*J¡\ 5WFÔm¡nrkwû5¦\ f\86³\e\94%\7f\14Ê\9c\b\96ZòòãÉþ\aÔ\ 5»\1dFË`ù¬\91|V\94;ìÁ\82i\8aV\13\99à%\9c½\88ôüb\9fVòwªP¶\90w(«QUí)º\95ùí!ô(Õ6ϬÐü\14ô\8aïâD\1fî´\ 5_+þ{ÅK~Èç\8cÀ<úa:G\97Ø{\97zZ¶\ef|\1fC²\8aËÅ-\9c⫬ÖkKó2\1726\8dÙä3î\8aU"D\1d\1a'\18 \ eAòqx̦ß&\ 6U%ER¤¼Í¶âqÊË\16d«>¶v+\8dq$eÃ\87¼æò^¯\fªnæ\1eµÛiq(e\1e?Á\aÓîkM\ f\9dWÉí\91¾Qv\wd\ 5nÎ\90p°YW
-\96U\96¡\977\85À ºWÌú\14\86ÅìJ\bÍáìQòçÕtòi_º-Û7 \9bMí°îá\1eÖÜ\e\8bva\1d4ËbO{\ e\9bº-b: cëàe
-SÏ!,\f\81\8d½æ^\99\9f]\9e\9fÁ\84?òu±Á6\80¯\95H¹afQ?¨c-ß\ eÍ\ 5Õ\A0o'¼2Q\9eï\11\9f\ 5xç\9a+¬\1eê\17Ñèûè\ fÓW>?endstream
-endobj
-588 0 obj<</Type/Page/Parent 513 0 R/Contents 589 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-589 0 obj<</Filter/FlateDecode/Length 683 >>stream
-x\ 1VÛrÚ0\10}ç+ö\91tjÕ·Úæ\11\86´¡\13 ÅN_\92NÆ\91\ 4(c,"Ëiøû®°I\80\ 4\93K\87a\ 6±òÙݳgw}×rÀÆ\8f\ 3¡\v^\0tѲ\89\r\81c\13\17ü(Äß.~\15\87éÚà{\ 1 ^2¸\87\fN\10=\7f¢\97´¾|ë\80ã@2EïA\14BÂ\0=Û6$´Ý!.ñ\bÆ\0£îð\14®Ú\19Ïgzn\89\9c \9ajÎ Ì\ 5\95\8cC¡\95ÈgW''É-"\ 6\8f\88\96\e\10\1f1Û\17\83Qâ¹\95Ù¯Í\98§åx\98 Ú+d\90Ó=È]@kû\11\ 3é\ 4\97\7f\ e\83æe\96Y\9a«\85È×ÑVQn;¡óT¥\14¯\14¤\82Ù\90±öäFUð5\ f\ e\81\8bÑ N&.R\91fb\96¿\95\81¨)ÚeÊ\18\92\bZÂ\8cë=\1eÀ·nV\9aÃÆí_¡ç ç\86ùTi\93\929ÄÃ\1eÌyʸªÓÙTâ\19qMµX¤\ fðÎz4ÁÚ`aRLÒrÁs\14Ï\91Ò6A½3ºfµl«c-ê'q\1c×\86K`ÜûqÝM\92 \8aCÞÜrª!ÕØ\167¥æÅ\a:Ã~p"d®Nùª-r0J@H\109ÍÊJ3XüúÆTð\8c5\95ÿ÷xÐÿt¸iL\99\94\94\1a\98P\98\84T+Lh)\ 5\96Lí§±#«WàÖ¼äé\82¿\12ôØÜ0Ñ>Ñ\8c Û
-ûh¸\ 5§¥\12z\ 5\8c\17T\89¥\16RýǸ\1fáïJlkt\83]\pu/(?.8\8fÀÏñùõÙ¨\8f\11\9dÇ]XÊLÐ\15ÌÓ\9ce|?s¤i3\89\8dª/]»alî \1d\8fÄ'Ð\1f\ f¯ãAßÌE&\17)J\14Of)\94T\97\8a\7f6Ç\18ÏRáÄDk½6\1a¢<V÷¯XwãC¯\965Yï\1auo\99I£ÁY\7fҰ¶2ß]\8bõH®\98|9ÌõZ9Ü\93\a¡«G¢z¡:¾K\82N\a\820 \91ÙªqwØëB\9fßóL.qÉÁ÷R°5_\96\13âû\0ÞµB»c®V;\ eâMÍ
-\ 3í\87> \83\b_\rð\86ç\99¿N\93Ö¯Ö?+CO-endstream
-endobj
-590 0 obj<</Type/Page/Parent 513 0 R/Contents 591 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-591 0 obj<</Filter/FlateDecode/Length 765 >>stream
-x\ 1ÕV]OÛ0\14}ﯸ\ f\93\80\89\84&\rI»=ñ1P¥R´6ã©\122ÎMã-µKì4ðïw\9d\84Ò"¨\98x@\13ªH{ÝsÏ=çØî}Ç\83.ýy\10ùÐ\v\81/:]·\va/tC\bú\11=ûô*\10Òº\10ô\anðZÁ\ f\ 6nÿµB\14ºþËÏOãÎÑE\b\9e\aqJÍÃ~\ 4q\ 2Ô¸Û\85\98ï\8f\95Áo`2¤¶B\ 3\ 3®d\9a\vnà\ eM\85(m\rJ)¸J\10´)\84\9cC\86,Á\ 2\98L^«
-£1O\81i0
-ªLðÌ>\94\1aéßAü»Ó\ 5Çë\11Ñ8Ù\172\11\9c\995p\8ern2\97P\89K%ò\1c$"5QÄ\86\84Ñ*_aⶠ~Hò\10Èz\ 4\98\ eÏÁ<.i\92\16W\1fBª
-À\a¶XæxH\8c\81å\82éï4h\85yîü\91ª\920/T¹\ 44¼íLÍ\13ÅË\ 5JCݵZ`e\ 5ª\e\1f]\fÖb:~¿¡0p}·çzÇ.\9c__ÝN\88Æl?Q\v&$Ø7$[ÉMYàìÀrßôÃy\9aâ×p\1c÷ü¦\1c´\1d($k©\8eÁÙ¤L£º\94$ÇêZÔ\83Ïö5"L3U\9d\9c\8dôËNÎ&Ö{z\95òY\82mÒÿ\ 4õ¬Â\a@(1dH-'9\8b\ f J\ 3\8a"v§V6\17)\99#9¶ktÓéɦ\9aî\v£B\17F×\97·ÃñÅ59E
-®° tp®Ji\ e\81ç\82¬\7f\97mMør5W\12\1a\1c\90la\ 3Í
-c3l(ý\95\82½Ùl\ fxÆ
-Æ\r\16´ÑhïPÌÊå\92ìãL7á¢A\9fòÐ\0·\94\1aLZo7cÓ¬åX7K\vµ¨K£é Lð¾Dmà,c¹ÝO\14û\9a\ 5\83/@$-\ 2Rs\92OШBZµ6¶äÛ\8cn®\87ç_\em_\vèf`à®LÉ\14X*A[¨Øeýx8\8d';r¿%íö9ô\11Ø-aß\ fK\9bÔ\vßÖ@#¿%\93%å\95\1eËB\98Gkº\94\98×\aÓG\18oÙ¾`<\13òåÁÜÀï
-~äÂÙh\1cßN'7\eÁßÈ\92þÜÔÿO\19ûL®c»bÐo/\11/ðÝp0\80Я¯ÜéÉÕé \9cã
-sEg\8f\86ËR$h\93ãxQ¿^éDÝ\81½X\9b[\r¦O·W}°\ 6QàFa\9f~JÐ\8a^`¿ø#îüìü\ 5\ 5m\87×endstream
-endobj
-592 0 obj<</Type/Page/Parent 513 0 R/Contents 593 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-593 0 obj<</Filter/FlateDecode/Length 762 >>stream
-x\ 1ÝVQoÚ0\10~çWÜc»A\9a\84,\84½Líh;¤\ 2[I»\87vB®cÀk\12§¶SÄ¿ß9 \ 5ª&¨/Ó4P$\88ÏßÝw÷ÝÙO-\alü:Ðs¡ë\ 3MZ¶e\83ïØ\96\v^ÐÃß.>\92Á¼Xðê\16\¿\8bv¯v\9c\85\93\8b>8\ e\84stâ\a=\b#@\a¶\r!=ê[®Õµ\9cÀ\82¯×ç\83)Ü\1fQÉ"\96jNb\ 5\1fAó\84\81Ò$Éî\8f\8fÃß\88å¿`u\ßò\10í\88.\89¼\v~\95ë^µ\8eL:N\17)\18\83-æ>Hg×ê&\1c\8eÎëA¶¡\946\eR\ 5\86\e\94¡T|úÈçj\1cÎ\86ã\8b\89\8b¤\14\93ÏL¶\81Æ\1c¹!!\99S\9dKöòf'Â\ 6¢c¡ÙgX-YÊ\10\ eô\92«-\16\90,cD*à)\10,×SÎ\94nÃZä\90äJ\83&\8f\f\17¨ÈÖ æ¸\99Uát(\89i\1e\13Í"Ø\89ð´·9\94\8c2þÌ¢6<0JrÅ\fÂ\1aV<\8eñ\rþ\8f\8cc\95?(ã\19In¡\80.\19}TVá3\93LåIaM\9dE
-ÈB\vH\bO5>@ÒW®I\8e®Ð\94\16!VÌN\10'\13©\89C\12\1e[Õ\9e\8d&\8aôO¯oËZ½)\8a²\16$\8d ,\ f¤$aªÜ°QÙ¾@\86ã0¸kÐÙ\17ü@F¢\88§\8b6Ì\85\ 4¯ó°Ö\98ö\98/ÒÄdeÅõ\12¦£3X2\121Y\84½\15õ\9e»ÛÉpð¡>þL`¾\8c
-ÄFVÛ\8c«&Ü¢ÓêqK\8dÖ\88\ 2[²Ò°i\87\12¤¡\11\{§\11vú\80P*ò\14Õùß6\ 4üs\1dq5¹,æQ}åc±Àn¬j\83Ý<\17¥í\9bÍð7UäX0\1c\14ÁÏ\1cT\117£f.¶£¯\rfD@\8cS1\ 6§a\80\1ej)-g<\9a\19ð\99ÓÀýf<ü6¸®Od$Ì0+æ ä)§"bU¿7\81âtéºõ \19\91$Áñ\9dj)â\ 38¾W\8fSVy8h\828À\ fµ-ßËî\0äJÈÇ\85\14yöNÜâìwü\86¡L$õàj\ 4\93\9f\17ð\9d(\85\9e¢\ 6îû\80Au\9bpz\81å÷ûà÷<+0W\8aééèì\14\ 6Fq"cxê^æ<*\ 6bgcÛéÙ}cZÞ `º9ô\8b#ÆC \9e\1fà\95\b-º\9fL@çaëGë\ f´Î¾Cendstream
-endobj
-594 0 obj<</Type/Page/Parent 513 0 R/Contents 595 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-595 0 obj<</Filter/FlateDecode/Length 766 >>stream
-x\ 1VßoÚ0\10~篸·µÓHó«Iè\1e¦¶\94\ri\85M·\97JÈ$\ exKlf'íдÿ}g'ÙÊ
-AÝ
-"\bßÝçï>ß\9dùÖsÀÆ·\ 3¡\v^\0Iѳ-\e\8e\a!>ýH?]üH
-\991xN`\ 5Û\f®ëZîß\86³¸w4òÁq Î4z\10\85\10§\80;Ø6ÄÉ\ 1\91\89\ f\93\18¦\9fGð\81(u/dz\18\7fÁ êcTßñ\10:N\ fn&ãëøÊ=\1eÀþvHEA\18\aN
-
-\15g\89H)¨R2¾ø\1fÔJQùÜ\98\98éWU\92\92\89\ eº\83\87"¸\91åk\11\ 6\96k¡\1e®\ 5ק\97³ñd4\85Û\ 3E
-ÈÅBð#ýÌ2`)0\9e \9d}\95\94\95¤·\87\9b\12ØÐw\83\1aq"Jz\ 2+IUU\90y¾~\ 5å\92â\91c\18\87DÒ\94ò\92\91\\ 1S ªÕJ(\9aækÈ\844\8e¨Î\1d
-T
-À/\96q\91\94Æò'\16\92¥>\98%QüE©\89àöí©Î)ÅmD±\92¢`\bm5ö\96ÞùûIlòì8ø$gH\12³ÖT3\96\18a\8fH\85\89àBýÓ\b²)ÂFu}\9a\8e\87/kû¶ÚZ ÆË:ÏÇÒ\18Î;ªöüêb¸\eö1\16ô\81-¸@Ý»PoÆ\93Ø vã\9aj\80\9cÞѼ#ç}(ê\9e\95É\12îH^Ñ\1aÆ\86\81nf£\9cë×\ 5\ 4Í«ñÆr4a3\13V\17\9e>oÛ\8at\ 1·Þ Q\14\9c\13\r»ÅúcǺ\8e\1e\ fM=Ì\1c\ 3ÅÒ\99.õ\99ózGÈÏ\9ayÛMºò\r\91¦\93<\vÞ\8e\87ØD\v)ªUÛ9\1dý¢Eó:\8a±Å©·Ý>Éö@\98\91CJ\1c]óª¤
-É \8e-\87Ë)Ì×zdz\96\ 3\84§ø}ì´\Û\fëÃÙ\9c\17¾\ 5Ãéåìêb\84`Í\9c\944£\92ò\84\9aÖhQZÂZ§fBìi\8d\8a§"©
-l5M¯Ê\10\15\9avÙWÂ]:òªÀ)ÔPL¡&ÞtÈú\14\9e\ fï\8açãì¹Ø¾\ 5ù\ eH~\8e2\88\fP\16É¨ê ½¯ |Ä|º\18x[¾\eþÛm KJR*kÊQs\v9¾k\ 5\83\ 1\ 4a Û\18o\9f³S\18ê\ 1#VT*x[áøÕ!}'\8c\8cg?´qX´W\16\·w\91ÑÂ\ f}+\f"üï\81\1e\9e\99d\17qïcï\17ß~LIendstream
-endobj
-596 0 obj<</Type/Page/Parent 513 0 R/Contents 597 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-597 0 obj<</Filter/FlateDecode/Length 686 >>stream
-x\ 1ÅVMoÚ@\10½ó+æV\12Õ®m\1cÛô\12%"i9@Ô`z U´ñ®a\8b½Kw×Aù÷\1d\7f$Á\b\10-ª*d Éã÷Þ̼ÙÙ_\1d\17\1cü¹\10zÐ\v É;\8eí@à:¶\a~\14â\7f\ f\1fÅ ^ô¢\9e\1dm¿¸\8e;\9fn\ 3p]\88SÄ
-¢\10b
-\88ã8\10'Ýéxøupï=\88"\7fT,}¤2×\96ûã,þ\89\9fùÍgÈm¹=$\8di\17\83\98b"a\140\96p\ 1\85à\89¤\f´Q\ÌaÁ\beJ×\b¯ÄÖ&\ 4rNâûý\14\r® 9Û\ 2?\0:¸\e=N\86\83V"\7f\94\ 6~Ü\88î7iW¢½Èö˼û¶gc .l(\99\86ãÛ;\98u\e¥\¤ò#dì\99e\1az@\ 4\85\v Ø\17³À²`\1a³³ÙY[»\ 3\96\17ÔÈÓá8\8e\1e\ eh½¼¼\84\15¡´¬®\910g\ 6|ëéÅ0 \19\9f\8b\9c \ 3kn\16Ø\ 1¢\fÈ\14&£ë¦\ fmÖv\e\90×\r\8ekCÓÛ\8c\899ò\9c\83÷\1fp¿ß\r\açûå\16\82ʤ(\8bñnÍÊB\8dö§"EçÂJr\8cP\aôÿ\ 5\ fzçÕþGÓÔSÐ\14rפm\8eÁ¬Û\9e²m;µ\1aÛ\8cÂþR5Ȩº\8e9døÀ\86éäæþÕñ\85Æ\1afr.\ 5\94®ßÖ±aë±4ì3p´¦,2
-O\fð\9cÀ\91\90°\14r\rë\ 51Õ|¸\ 1T^®\905Ó\9a#ö\92½\0×\90Je\97\127aãx8ºÙ\9f[Íð\9cÕ1;O ñ\11 i
-'¢,y²\94§Ã¬\88Ök©(dD\eÐ8ý'êz\ 3L\88\80dAÄ\1cÛrZÁÞ ó\ 25\1e\87Y¯\9eý\9d,\r±c\a\1cq°U;í0ð\a4W\91eðO\bj\ fêDñ\95ÙÚ`§«_)\99ò\8cáFÀ\93¸}*\9c\ e¾\90¸s)W,1R½\1c\82\8f\9a%éú\9e\1dôû\10\84\1e^>pQN®F×W0(\97¡\áE\0¾\14\9cVÃh¹aTÅZ¡Ó\7fß©01ªHL¡Xµ\7fýзà »
-\82õ²\8d7qç[ç7 \81y*endstream
-endobj
-598 0 obj<</Type/Page/Parent 513 0 R/Contents 599 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R>>/XObject<<>>>>>>endobj
-599 0 obj<</Filter/FlateDecode/Length 551 >>stream
-x\ 1\96ßoÚ0\10Çßù+îmÝ$²\ 4P\12\9e¦VÙX¤\96j%ì¥\9aP\88\1dð\16ìÌ?Øøïw&©ÖVÅ\ 1\81x\8a8\7füõÝ×çûÝ\vÀÇ_\0Ñ\0\86!\14\9bÞMÖûø%\84 \80¬Ä\7fÂ8\82\8c\80ïù¾\ fYq5\9f¦_\93\87÷ÙO\8c\1aµQ¸°\1f\f½\ 1\ 6^Å\86\ 2a\92\16ZÈ\1d\10ɶ\14\fg\85 \14\94\96\8c¯`MsBeÃxÚ©ÿ\1c2O§Y\10\1eÞ¤\12+Á¡\10\86ë3(Ë\9c@\9d+õGHr\14l88,i®¨\844é\90ã"L¤0õy\bn6°²\18åÐñý>M>\1c>\88áD\14fC¹¦\ 4\96¦,ñ\µ`ø)A\8b\16ï9ø¶x®s\1a\9b©²ÊW.\91Å:\97\8fAøáÓb\14U\8a¡\15~Ñ\9dKQ\87g\e;!o\8bÈ\93½z\14\9c\88MÎøÉðSjÕ\9c¢Ý\88¡µ\9b¢9ò²OòÈw$yä£äg~¨sBì\r^î4U\1e\94F\eI\81þsnëðɱY\97-|è\ 3úw!ô\9aÊ\85bD¹h\1d\89\99Îoo\91÷Rû\7f\13ï÷\806U³4QN?OÓYöà¸úÖÐ<Ƕ÷Ò:®\\1c\83|§0¿U\ 5\17F·f/$«õ\ 5\15×R\94¬¢ØPõú\82ØWÏÉå2ü
-üÖ;å*`G\8f;ª\11OÒäÑ:¾éØ\8e[¸\ f\0ÆKá\92Ôå)G\97;\1fûf\7fs`\93û»\ 5^¼&"nç\88 \8a½p<Æ\99c?JÌ®ïn®!¡[Z\89\9aJ\ 5\13Ã\bµKúO\91ýÈ\1fÛ©cì\r¼¡\a3-Ma[Òþi\19E#/
-c\1cb0b\18Û\85\9f³Þ·Þ?áFglendstream
-endobj
-600 0 obj<</Type/Page/Parent 513 0 R/Contents 601 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-601 0 obj<</Filter/FlateDecode/Length 694 >>stream
-x\ 1UßS\9b@\10~Ï_±\8fÚ)W\ e\90\1f>´£FÛ<\98h\82}ÑN\86Âa®Ê\1d\85Ãjÿúî\ 1\1aÐ\98¤\8e\93aÈp»ßî~ûÝîï\ 1\ 5\13\7f\14<\vl\17âl`\12\13\' >8¾\87ÿ-|
-\ 6i}à\98\ 1¡«\ elê\10ïùÁa8øtâ\0¥\10¦\1aÝõ=\b\13À\b¦ a¼\93È,â\ 2f£ánø\vMÝÖÔ@[\83ÚÄBë\9dáät\8e\16\97¢Êæ%OÊ\1f\8dm\aöÉTª\ 5+`\89Z~il\83.®å\13Gã\ 6Ä"\18Â#0û6\1f\8dO&s:?\v§pµ\93K.\14+JP\12nÙ\1d»EzÊE\84$p\91J(UÁÅuyµÛOÚ\ 4Ãr\eè±Tl\1fJÆ æiYD¹EÔ½Â\ f±âRì}\84<ºf@MÒ/\85\12Ƕ\10Å#>¾1E\13RY`hNçê!×á\13\1eG\8a\95\10Á\90\977µ?Æ¥.1Ý=íA×x\9caÚ
-Î+V±\97\8eÖ\1aÇ!»ãñ
-\1fûu\1f\ 1£³#Èy¾Âͼ÷uÿñ1\91l%søÉ59
-ë[\16{µÛ+wÁ\93\84éclCKÛ\93Z^ðö}2\1a~èsÛUTM¨`JD\19\ 3\ 3ÚvënãGÐ_û\9díÉñb4\ emk\ 3xÝ-\ 3ê\97LÛ¬ñ\9a\19P\89DÆUÆP`Éó:º9nSBÁ²¨¸éW\10ËL\83·Ðë\84ïw\85?«\85ÿ&±_\8cGè½\89\91%Ý\95à±LX{\8d\0éÙ\86õ\82<\11ò2Æö¼\ 4\9a\97\83éñãL8
-§ýnw.z3\15b)\14Î1\1c=\7f¸Z`\9b±\ 1\ 5gå~_F\1d¿M"ÒJ9n@¦,Jú8ÿ%G\8dtX¥)+4Híú8¥V&ÿù=Ò\7f\9fÔ\85\14Æ_VÈ^\ 5¯,\89M\84n\97Qo\11\v|Öì\9c\86E\86Ízx\9c$å\9a~-Cà¥yC\88vù4\11üv¯QÇ"n\10\80ëí\91Àª·Ûìàôð\0pr³[\99ë]öµâI=×\fêùµµá\99Ár\11ÂL\15U¬ª\82Õé;\1eîs×G5àV±\ 3\1dï8\1c\9c\ fþ\ 1v£8{endstream
-endobj
-602 0 obj<</Type/Page/Parent 513 0 R/Contents 603 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-603 0 obj<</Filter/FlateDecode/Length 888 >>stream
-x\ 1¥V[\8f¢H\14~÷W\9cÇÙdd\ 1\89â¾\81âÆ´\80\rÕmO6\e\82P¶µ\83\94S\14c÷¿\9fÃíNf×Ú]\8dD±8_}\97:UßF\ 6èø6`fÂd
-Ùi¤k:L\r]3Á²gøÝÄ\8f p\18¹dôëj
-\86\ 1ä\80\8fLí\19\90\1cp¸®\ 3É>=¬\ 3bÿñç/ä/\1cfõðäØ\98`-\92\7f:§yÎÊg\90\1c\9e©\84ºd\19Ï)TR4wñþURH\vö\Ò\1c.L\1eñ¯THà\a\90G
-±ïÂ\91¦9\15Z\871Leü\1e¤\99ÅÄüûIx%ÂÑ*ÂBÿ£\8a\ ecèétUæ=ßv.¦Y\rá¹fj\13m¢k\10{Ñ£\17%ë`\15&\86n|DÆbæ´{"à\92þ\ 6\15¥\90±C5Õä\8bÄ_\99d¼\84fȸUâÀh\91W\90Ó*\13l\8fb¡<\82²\12E+
-ØÓF±´ª\18ÊWf\14E\13T\83\ 3\17@_ÒÓ¹ \9fÛ*òõL\9b\89 üàP\81\8f`¹=-ø\ 5XÕ\ e«Ò\13ºRÁ!¦â;\15\ 4\9fú\f\97#Ë\8eÍ\88ë\1c\10\1eg¨\199ï(Å\8f ù²õ\92]\18ÝÅÄ!ë0èèÿ,"ú\v\86©y\19à \95\v\17_\91DC¿ú¨Ù\aÏ\a\88Ne\85êf[½j )\15¾ß(׶À)_Ñ´F,\10uY6ánÓ\1cßoúû
-\\96¡ï¬\83dA¢\8d\ 2!\e¶\82\9dRñ
-9?¥hEÆ1ç¼(¨PÇr\9d;58C\a7;Öçÿ\84FÖ¾\97ÄáC´ðn33uèr÷&eÓ
-$;Ñ\8a×\ 2ÃÝ\bͲ6È×æôÓt8«ím<K\aç\8cK\ 4V\f/[Á%ÏxÑÛ¦\12\95 |ô6
-\96Ù:\ 4ü;Å\90«Ç°Ï\84ïù®\17Ýäb`[^viðéi¯\94\84m\84íó>Q\f»\89\b½;Õ1m»ø\19¯\12¾Õ´V±d¹v6\18rE8ë
-7¬«\9cá~Q\ e!ø§}aè\11O^°~RE´\11ñ\89\96ì¥7Ia-\ 5ä\961è\vzOÔKîV»[5Ñ\897+\ 6mv¬Ìù\ 5\e7Wé\ 1\9d\aÉíé£&:\fµ\91F\89[Ór¡Îf\e\12/ h|âFá\ eaopkäzã&\8f©\84,-\9bnÐîN{\81\14±Ñª·\ 1×YÜ=l\15Á\e]ß\9aÝ{,¥Õä;1Á]_\8d'¦\e¡ü\14w`\ 1ÿ\1ajh\r-â\rE\e\a¯¡\ 3tßé¨Äm\13.ÐÂÍ:&I\18l¾t\90v\7f
-2f¶6\9dÏñ\88Ø\9e\83bÇw\1dXRlwüLE\ 5¿×,oûÃx\189\9eéóë\91 b)êLÖ\82¶-×\9aYÚljã\99\13\ fU\96Þ`ydt?ú\ 1ÌRç\ 1endstream
-endobj
-604 0 obj<</Type/Page/Parent 513 0 R/Contents 605 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-605 0 obj<</Filter/FlateDecode/Length 1261 >>stream
-x\ 1VÛRÛH\10}ç+ºò\ 4[X\91lÇ\97G\b°qU \ 4\9bÔ¦Ö[ÔX\1aÁ$ò\8c¢\19\19دßÓ3òu¹Uí\86\8a\v¤q÷éÓ}Nϯ½\84bü$ÔoS§Gé|/\8ebê\f\87øì\ eúølã\7f%)\ f/:ühçÅñdïýY\97\92\84&9\aé\rú4É\b\81â\98&é~üÐÅoü\8fNu=\97\95p\92\8c.\1eIjW)ii.ª\9f2£w\85IEñî`ò\ 3\ 1{MÀ\16"¶\92NÔFÌýñ·\9bÉ÷ËÓ\9b\93/çG£\8b\9bÓ\8bëópz#ýêpü0\bi7ó\9e\98¹PÚF4¹\93TڿDzZÈ\8a\84Îø¯ð\96JQ\89¹t²\ 2´Ú:\9aIº¸þü9z\ 2Y»\17u\19ÙõèbÒi?\ fæ\ 3ªoQY\b\97\9bj~£²'b-«üöetòÛó¡J£4°\913¤\ 1ó\85@¯\82\ 2¤¹øa*\ 2\aV\19ý\1fbu9\96ÒÿK,÷XJ\9a®º\1dE\11Í\94£\É"\9b\1e¼\0òíÌ¥f>Çø½\10ëúb4\9e\½ÐR»Hâä\86[\80ÒkR\93I²\98h}K&'\e&ëµ\16½\9eå\86Ó4x_ÊÔ\1cyjJ\97\93Å\ 31øó¯PõS\9a)E\961~ÌÖt»Uu[³GhW\14êVC¯÷ÊÝ¡`Q9®×APãócº\93"\93U\83bH Ì '¯âN7he\18u":\1f_]~$Ãâ\9bTB[\91:º\0\97\19]ª²\19ê%BH§Ý\8fz¬³3\fX&\9dP\85\85\87¬\92>\11â\10\1d\90\94ªÜö"÷Ðt\1ax ×\1c\96×ê$k4É\12\ fç¶Ûôøä\9c\9a\1d# V\96R£³:u\80ëK\10Ú×¾\82Áq\ 2?Â\8b\94
-aa¶Þ(÷§ÓËÑåétº\9dm?¢ï¦\ e¶\93«
-æcf¨V\93 ¤Ç*àã\80´ìh®
-Iw°¯B\1eÒì\115kß@ÁxL)õ\1f\ 1\ 6w§dP~^\9f\81b«\85]¤;\80\b\86EòAÌËB\ 6p)ªE<ï\16\ePJY±·ÁK×\\1czgõ&\9a\8aªz$S»æ@Z\18Ë{À÷p£\f<J%=\82\ 4Á{Gieïdæç\89[Ñøg\9a®ä¯ZZ·¶i\94ï\9a\82ï\rÈpuI<ôIÏ\1e\926ÍïÁà-,F\e-é§6÷ x\ 6lÓ\83\80Ø\ve\87êL8±¹\1al\9dç*U\9c\11rÁ@ø>1ÑaJ\82\10B¼ð\84#\84Í\13Z\e\9050WKg'ír\ 3I¨\rb\89\1fâ¸Ýã\8c
-\9dNy\97\82phé\90Ð'~\e'[oÇÐñZXôÉÏ
-ËÖ¡\9d\13 µ\92\87y'k\ 3m\ 5jµ\b¹¾Ínñtð3\1e.@ðÃ
-U\80Í\85üWÓpî\84YDJ\87uãG\vè\8f.Gô\11\86Ì[\18BiJ\9cî³CpÜé\ 1\8aõY¶ÚNÐ!§æc\9f¼ë\1cîT\91\9b¢0÷\80\ 3e,O2\80Pø\e¡\80Oì¢çY\f\eiC\b\f\vÓÇ^Ù\4ümg!\8a\9aÙ\96¡nàÁü¯\ er1\8>º\9d]âÂø\I[\1amqabeøQ\17\16\97³ð\94xºÀ\93U~\r\81KQek%®ÎA\bÞ¸\99\8f\10÷iîÂ;Ï\11÷%üÉÆ»\vnä\18»m\89®\82kw' \bDßj\96EÖ¢ -ù\ 4ÈÁØ:*¤\80õ·×Êt¿¬ÌLÌpA\f\vgzÀýB\ eåy\83iLq(³¬°?\14|\83Ç\11Î\aÞ\ 3,QX¯\14 +ÌXªÍ¦23¿\9f³&EØi|#`\9cXk\8c\7fsµí\fV`c©p¥Ó¢\ e{\13_ÛÜ\92\1c\11µº{îú\9añðEï\8dë\87Ü?Ïíû³A³$\92þ ê\r\87ÔûÐo.ÀGçÇGt"\17²\80¹ã~ú{\8dv3¸Öòl«\1f\ fy]½qËvûݨß\e`#â;Ý\84C\9dNö¾îý\ 3©,\97»endstream
-endobj
-606 0 obj<</Type/Page/Parent 513 0 R/Contents 607 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F5 7 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-607 0 obj<</Filter/FlateDecode/Length 944 >>stream
-x\ 1ÅVÛ\8eÛ6\10}÷WL\83>8@¤ÕÍ·ÍÓîf\9d\18Ø8n\ 6\ 5ê>Ð\12µfV&\15\92¶×\7f\9fC]Ò\85³N
-\14AmX\96EÎÌ\993g\86þÜ\v)À;¤QDñ\90²m/ð\ 3\1aÄc?¢d<Â}\84\8fæTô®ÓÞÅ4¡0¤´\80Ép<¢4'l\ f\ 2J³þThc_\11\93´|\7fm3%ÿ$\$ϬP\92\84¡-Ë9YEvÃi¶¸ù\95Ì\86iîS\8aßOvnwÆÒ\9a7ÛwFÈ{â2ÓÇÊòüeú©\17\90\17Æ@\97æý\8a\19sP:7¯H*KYÉ\99ö,\7f´µSÙ\81Q\15\a\98\ e\ 1À8\ 4\95¨\9aØn\e-¹¥9Ûò\9c\16xNï\98ÌKNKË,?\89ÙÁ3\ºl\vË5\1d6"Û|õê"iÎò£K\96e\19¯,]-fÈq»\85_ãÓ\1d3¶<:x¹#++\95áÎÊùôÛxÑÐO\\8e©rdhnT¹çùåÉjù\90\95\17A(Õ~2r\0P(VU ÁÅ\86\9d=\0B\9e\vW\ 3VÒúh¹iA;\12ä®,A\98Þ
-\89LsZ\16³ÅíjE\12\P¡à\ 6»~_Ü4t\9dPñ\91\95;¸3\9cK2\8a
-DEA©\14ÆùZóR\1dj¼\17Ó\80&\8dh¼(iÒ¢ö%$°\ 1\19hhʤùg8µ\97Ý\86:ú\13ú(x\8c\86T1Ͷ¦c#\fü±ãª³y±Â«Édµ*\rÓUö¢[ûç;x\1c\ eàm\18¿Æ\15òÇ%p·Iâ\9e\ e^wÙ~ϹÑ{³\7fÞù(v\1e\87µÇ[Ü\ 6µóÁ\8d\8b\10×Î/¦\13
-Qd×M^\8c¶Êû\13\1fÒöé\1däõ\ 3ð´ã¼Èu\ÿ/ÓöTSbÍ\ fZXË¡ãB\95àÜu\8cæ\19\17Ð\9d*\b\rò\80ÂÓ\9b\9dÌ\sZ&M!x\99ÿ}¢¥\99\84\12@½³G;ñK\12\ 5\1dÕ\ e\ 5¶ <{@Qsf\19\9cWØ\a²ºµ\ 1\ 3Ù\85\98\ 2\98\ 4\81S\8c$V\96\94xNnµÈ£æÖõjÇjÛÂxµ\8b\bùÛ\9d\96\88Á´ÚÉü\97\13t)\84h,ÓuN\9c¡ß\90\9bSç<½[^ÕQæ·éÝ\87·\1fæµzóZ²\ 62¼\17ÒÐAØM+ÆÁ×\11æuM¦\8a\ 2I¶ëÝ\88ë#\9f¦\ 4ÏX|dZ°5f\84=Vü\eÃ?fótüc[Çæ7¶\ 3òjÍoÙ'ôß\9ek\83Þ=ëë\1còð¬ÅÏC\ e\157È\85ü\ fÈ£ÿ\ 1yÔ"\87¬+%1\8ck¹Û³Hα\1e\9fµøy¬ÇÀ¾jNß©f÷´\16Ö;\bä\80\1a8Õק\8d[Y½<\8bî\>ÉY\8b\1fç\13ÿ\8bB>Û\0Á#fI;L¼ï\f\9e\ 6Û¸íæp4ö\87\93 þ\96\ 4Í ³¼z\7f}Eoø\1eçP\85.¢·;\91ק¹×íõF\ 1Î¥g¦n2JüÑp\8c¹\8cÕ¤Nä6íýÖû\ 2v\ f\95Ýendstream
-endobj
-608 0 obj<</Type/Page/Parent 513 0 R/Contents 609 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F5 7 0 R/F8 10 0 R>>/XObject<<>>>>>>endobj
-609 0 obj<</Filter/FlateDecode/Length 506 >>stream
-x\ 1µUË\8e\9c0\10¼ó\15-åÂ\1eÆ\ 1\86ðØ\9cf7ÏC¢<HN#E^h\ 6G`Ïb³ÊæëÓfÈCZ,ff\15\10Hà.QEu\97o½\10\ 2:CH#X'Pv^À\ 2HrºÅYJ÷\88®\1e¡ö®
-ïé«g\10\86PÔ\84H²\14\8a
-¨:\b (}U×\1aÍåEñ\9dÊâ©Ì\87 ;¼ù\v\E \8b ê\7få½à7-\82¹ßã\ 3à\97·ï\8b0Y\ 6WÜð\aàºç»\ e¥\81\16åÎ4°\ 2[\ 6ZüDØú7÷\ 6õö\ 2\84,¡A^a\ f\V`¸h\99ó\83.}\e'â?ê\vH\11\1fLC\12EÉ\8dPrRê$ã¢\7fíD,Ó_GËàY{JÞ¶ *˾\16Ø3è¸)\eÔ\10Fd\96u~\1d\81ªAª\13r\a\9f>\\8f\ e\9elO\18,St¶ßÙúH\9e\9ali\ 4uá|û\91²A?º\ 1Ãø\11
-Ï\1e0Û\80û\1e5Yxh¿RI\83?Ì?®:i9Zñ\18.N«\8eH\99ÙN´:J.Kl¡T\834'\93N\9d\88åù9\97´\90\94ÈûV ¾¤ ^Ñ\83Æþ\ e«ç40ôp; 6´¤örèhY#Â\93
-k!Q\9f>@G\90\9cu\85\8dÇòß\99µE\eÞ\e\9b\0cloý\9d¢p \90«\15Eõ\9fáú6\ e×\94æ\87/eÓÆ\13¦\19Kò\1c\92(g\91Ýl>oÞ]mà\ 5Þa«öØkx=P\0YÐêwí*\rr[\9a³5\8b\18¼\19w\ 6[\11§1K\93\8cþ5Ækûêeá}ô~\ 1"Êð\endstream
-endobj
-610 0 obj<</Type/Page/Parent 513 0 R/Contents 611 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-611 0 obj<</Filter/FlateDecode/Length 985 >>stream
-x\ 1\9dVMoã6\10½ûW\föÒ¤\88UR¢õq*ìÄisH±M¼è¡)
-Z¢lmôá\15%'î¯ï\f)fãfm§\8bÀ\0#\ eg8oÞ¼á\97\11\a\86\7f\1c"\1f\82\10ÒjÄ<\ 6"\88½\10D\1cáÚÇ_« 7\e\81Hhûí\86?\11oOÌ\16£\9f®\13à\1c\169\ 6 ã\b\16\19`\0Æ`\91\9e%^àù\1e÷àîãåß\1feú¨:È\9b\16£}é\95î.p¡7MÕ\ 5,\8b:\ 3\89?»H\1fëæ©TÙJUªîÎ\17\9f1Nø\12gì\87\9eÀHg\9fn~[Ä°U.\9aº\92\9f¡\18\f1Ý1Ç\e\90e«6å\ e´¬\14Hí.\0\ fgì\99M\1eÎ÷\ 3\8c_\1fÜ\ fQÔß\15\82½#D·Û¨ÃÎ\9bZA\93C·Vp{Op.Ð\1cTÝWúäåóR®\ 6«ÿ \r3å\9aam.\0\91
-Ì¿w¶z'S
-|Äy\83%Æ
-Ê\ e\vt8»#ÕA*1ÆO\ 3ÈCÈ[¹*U½êÖ\87#\11\80ÖÆÁ\99ÉN\82V)ÝÐ}»¿\9dA×ÊZÃÆ°ö\ 4Ä\18[öÝúklö\95xÄ\1fD"\95eYd\87ïEûPd\bU\91\17ªõ\90\9aÊ[y\84:ã"\99$â(Þ?\82îú%|º\9fÃbk;íp, U\95IJªÖ¥l\13\85LmT\9d\15õ
-\10\r2ü@¼ü`\9d¹N7\râǶ\am\93û\1eÜÔ\9djs\99ª\97<Òo\94\1d¡qÝKî\vwH\83D\11B>/U«2\8fºt\87rq\ 3k¹Uõ\ f\1d\96HÕP5hÔ%V
-\eâå0ôZeîƦÉ7\ 5¶GMí®ÛÞ¦6\ 1\ 6\89Uª±/ìíåRc¡ÓÎH\81\98\ 5¾¸¾\8c\rÙùUÀÃ\88ÑZD\93i\14s\9fÖq<çá|vml\f9Y`KCEg^Ljc¸\93#¸$0ñ4\8e'WLÐ Î/\13~9\9f\r§ãy\9c\18O!\131g¾ûN~}Wp\87:!g¼[Ä\ 3+«7\ 6ñ»?l\82\a5r¹ëÔ\9f<üë0+\90Äd¤\89\10¶\fû.ߨ"²zPÞÃN÷J¼çÖeõ\r. \9b\19ê\f)\ f¸Ü\9cvý\87A\87\98,s¤£¡ðZI"z\91\ fd\86'$\97q]X\8e»1\ 4ÖòÂÙéuÓ\978\92\8c.Sy\87aBg§éã>>¯®E=\8fpVò¹ÓÅ?GT\1d-\8aª¯¬ÖT\85¦1fd\8c¦\1eÐYà \1e\ 6ï\12@t\87\93ðD@lýT\15[\1cø(\97ß\11\aË.µnÒÕ193\16\85ì°+WmÓoP\12L&§Ó@÷È>U\9aÁ\7fdj\11³,M\89°ÎÞÂå:ÇuÃ\eêbqÒ\ 6\95ç¹;\96ÄëÙåì_´mhîÓ ÅtM½Ã\19ø¬Þ\9d\8f³Ç|ÖHVY>É\9dF"¢\ 4ò\9f\1fÎIV¸Ë2\1e\9e;\ø^\98$ø
-\ehz?½\9dMáJmUÙlð\8d\ 4¿ô8a\88µc\1eáû\ fmÇ\11CEÌ\86\97\1aüj:\85,D$¼(\8cñQ\87»BЧùbôûè_Q#ÜFendstream
-endobj
-612 0 obj<</Type/Page/Parent 513 0 R/Contents 613 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-613 0 obj<</Filter/FlateDecode/Length 804 >>stream
-x\ 1½VÁNÛ@\10½ç+æ\b\88¸vH\1cçÐ\ 3iiË\ 1DÁ¨\87RU\e{\9d¸µ½fw\83\12¾¾ob\e\92\82\9d\vB\11\11ÊÎÎ\9by3ófï{\1e¹øx4\1eÐ\89OQÞs\1d\97|Ïu\ 64\fÆø\7f\80?-)Ù\1c\8c¼\91\13¼và\ 5'/\ f¦aïÃ\17\9f<\8fÂ\ 4 ~0¦0&\0¸.\85ÑÁíùe\18üüu\18þ\81Ù°6C\10}ï\ 4èa|0ìÏÖV\92ÈÒy\91ËÂR)â8-æÇ$æ"-\8c¥\9b\8b)-¤\88¥®¼4`ým7G$fÆj\11Ù\14>noÎèúêÓïóDD²\1d»Xæ$\8a\98\1e¤6\ e©\84pWj¾CQ\96r0©¡¥A4\9dÈ\80-L"õÛ [\ 5HÔBi\94¤D\18¦\ 2\9fÔämÒ\1e\ 4Î\90Ù\9b8 Ñ\199\9blOãXKcèúÇn¸.õ\a~eÏåð|Êd1·\8bvbªsfÄ.$\81WP\0r¢lÉ¥¡b\99e\ 4¦ò´\10Vu\97¥TºªGå¥\1ds\vIÌÔ\83\ 4\1e1õ\99$î\90ã]T\193Cù^jü\8a\9aki¦)*ÝPÓtâ\165\8c\ fúJU\80}\14¡Ì¸\ fD\82<7,T-ÈQU\96e¶F¯F\7f¥ÝÇv.VÖ¤\8f\1d\8dhD\ e(\ 3üû¥4ÿ9Üéóº\80p©ßÒåÉ\0ðFEó4n¯Ð£Ôj7×\9dÐ\8eÈÈH\151æW?M`Ý\93íN\99L¾Á\8d[µ\b&ßP,M¤Ó\19Ê,\85Æ\10t5Ù{iÌ\ 6\am\98#Øefë¹lZi[\8d8)ØÍÐ:\98¡Ú\9cî\ eÜ\95ëÝ\1dvpø\9e©@\aªÈÚ\8bS\9dW\81»ô\91D\14ÉÒîÍ`ãY\18UtyæógÏ\85B0\9b\9fL)£4IeÜ sD\8dê\9auaÅê©áöH>W¦¹IõÕD«¼\1eêñëÐÛq#*÷\97Ð ý¢\92c\91a}5zZ©ÆKiaÉ\97ØEkR\b\13æ\9bïW5aK·¸ex|³LE\v¬ vÎ9w\16\8d&\ ec\973\8a\85\15,j¬±uG¿º`\19\ 6u-Ñ\12\18r+W\1d@l\84í)l\8a\12×Ö\94Æø\89\v««ªw\96·FS%¦¨=!UJ]\81ÔÃÆ\13æ\8d:=C¥8m~!\84\ fW[ú\1dÔûÕ\e\a\8e?\99\90?\1eâµ\83\1d{sz1=¥Ï¨LÆ\80\86¾.\91\vGÕolûcwò¼\8eéÛÓke\b'c?ÀÃ\88\9f:#¾t\16ö¾÷þ\ 1o°¬Äendstream
-endobj
-614 0 obj<</Type/Page/Parent 513 0 R/Contents 615 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-615 0 obj<</Filter/FlateDecode/Length 1020 >>stream
-x\ 1µVÛrÛ6\10}×Wì¸/r§b¨K))}èØ\9bx&Q\\9b\99ö\813\1d\88\ 4-Ô\12I\ 3 d÷ë{\16 \15ÑvT硺\8c(r±\97³g\ fpß\eR\88÷\90¦#\1aG\94nza\10R4\8d\82\11MfS\\8fðÕ\92r÷àÇp\14D/=\18OgÏW\9cǽ7¿Mh8¤8gïÑlJqF\88\10\86\14§}A\95H拉LV²Èda©,È®$Uª\92T\88\8d¤¤_ér)\96ëG÷@\15Vê\¤29%Qdî^YQQo\96R'§§ñß\b9oB\ e\10s0\9a\ 5\13DíÏ\83q0
-f\ 1]_ýò×µ4\8bRoèú\ f¿"jV\84°\8f¼ýçËE<\1e\91X¯Ët\85°Þð \9aÁ\10\ eÙówdÔ?\92ÊÜecl½¤LXAª å£\95¦\eÂ%Õ.å Ã\88*-MZ¢´\87£aØ\f «\0ScO\8aqS¹\92\1aX\19\86L\184ì¾\96ƶ\80´å=\8b=£T\14©\§e}¼Bo\86 °û\19\81Â\87ð\15Î9_½\95Ù1ì\09º.\1dTàC\96©âö\bbß\93\ 3øóÍ\ 5ÅÛ+G\9fcÞ\99LZn\84\ 2½tÛ"-«õ£_\ 5ª\80\1d99dÆÃ/T\19\a\14\vµîúfz0\85û1Ü\82±ìP\8atÕ:^Ä\1fnÎ\1c/\17\17ñ\87Oï>-\1c\893ÇgÃ+\fí\94]½í\16xÀºÀ½ºQ\99Å-a\9a ̯®\8fg\1d\8f¾îEK[k¦P&½ÑWa\98¸y¡sàGoüÏYz×õ¼G\ 5\93åL\f (\86\9bc]¦Ò\18ÆG\18S¦
-Ü-n\81\10O¡\9fò¤/\83[J\92«Ë«\8b$Y\e¡«\14ÃÍ0\91 \13«EarôÎ<\82ù\ f'Lré²FØ\16\15\1eéKV\ 5\90C×)\8a\83> \81¬$µ®J\ 3ý*5e%\a·+e\b\9fº¸+Ê]\11tq<èÅ¢´òsÒH\86Cáæã9Å\9c\94Hm;gì\8e'Ógmw%ÕP\f\f¶\ 1Ð\15X1\97\10.ãsÊ\956\96×`\8aÂQô\13gpP\r\ 3g$æ;c\eþ\97«µ¤\15ô\ e?¾w2ÃÀ¸gȧ\84zþy\98\94©ÊÂHWÙ\7fÖ³\91,\9d\866âÁ²\8eýÀWÚ)\1a\v¬kÛÂEÓR'1\906Î\vóí"±ä¸¬Qæ\93bZ÷Í
-\8fä=#é±8\84ÖÛRÛrßñ\16\83#q\9b\90r¿Ü·}®M\14\8f0ôF;)\85Bø\1aÜ®\ 3¾îVÂõ\88E·Þ\0o[ÒÒ±úI\85,q
-Ô[Jl\13~GBQ\8eܾÄ\8d¨*&Þ^©32%åB£4§\ 4\a=R\85²J¬ißÕFÉ\eÅxiû9D°-ò\89ÀtÄá$ÁËO[\92\18½5Ûô\84KêlÕûÑêX\17\16Ʀ±~qSé\98£eúµ®1øæõ\9e½Lü?¾wwæ\e \81õ·@Òî\v¯Mý\89ý¬9§\f'8\87Íç8Q¹\13ÈÍÙÇó3úUnå\1aZ\80a~W\83lÜÔÁ\10\a3¶\1cLÃù\97c\10½\97\ 2\e"[L¦\93`\1aÍp\bľ6\89øÖEÜû½÷/áfêRendstream
-endobj
-616 0 obj<</Type/Page/Parent 513 0 R/Contents 617 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-617 0 obj<</Filter/FlateDecode/Length 812 >>stream
-x\ 1\9dUïoÚ0\10ýÎ_qªö¡\95\8aIBH ß -[¥µ£%\93ö¡Òd\92\vd\ 4;\8d\9dµü÷;\eÂ\8fÒ\824\10\ 2röó»»wÏ/\r\17\1cz»\10zÐ\ e ^4\1cæ@Çí±\ eøÝ\90~{ô)\11R\ep]\97¹\1f\ 5:\1e\vß?\1fD\8dÖ0\0×\85(¥3\82n\bQ\ 2\84ï8\10Åç\ fRã\15D3\84§Ñõï\11\8fç¨!-ù4G1Õ3Xàb\82%d\ 2&\92þjZ8ÈD\ 2OøR¡ÒÀé·}Ð\8fçB¾æ\98L\17(4,*
-ÆRh\9e\89\8bèOÃ\81¦Ûf\1e\9d}n0Öè2µ\88´!£ì\88\ 1$\óK:.Ϋ$\13S\eÞa6C\9e`É\fbkèo²jz\ 1ó\rö\9aÖ\95Yà2¿íAÓ\vY\97¾Mp\93¡ 7\r¥\809A§\8eÑf\93\8a\r\1enFUH¡ð\7f¡U\rÝ\1aöÀ%²)\1d¿bØöj\86=Öf\1d\ 6\ fÑ÷q\1f¢\92\vÅc\r\ f|\81 \8c²\ 2\ fó6Ý<7íS¦!"F \9aÒ¦\8c¸\82æs\14 \ 5U1SP\10\0ðò\93\fn\95æ\93<S3à¦o\ 2-\ 6hi[p7ºþ\ 2jF»áù||?дä×ó\ 5\83J!бå²ÐıàJ½Ê2Q¶C{\ 5þQ\10\15.l\93M*ð\9aõ$(=8{¦×èntk¾sÅË">c0Ö\92N4\82I³\1caFjËñ\10û§ª¥²³ì\92JBâä0&EoK\bß,\bPº\9a %8o~Ûq\ eAÇv·\0Ó
-K~$ó,^Ò\18Zåï\92[GVÈ\16i_\[~{+×\fÍ\ 1\8f\15\96K¸\13©\84ýcÔ% \8e\ fÙ\1d\87¤:\eÔë\ª\ fÊe\1f¿kë\8aõ\81êo0Í\ 4*He¹\15\11ÍgbF6]Öe§\8a\10ýZ[»~³\99Ìwe´c´\1dar½\8d?8o^¼\12zm[ÍÝð\87å:
-ç\84'ànEµÀÒè!*É·HÈ7rAÆ¥\8eÃZ§Ø&{ÀÒªf\8cq\89ú(P\9a\9eà÷]ÊyUÀøîæ8£tm\10\9fÖm\rd¦á\ 4ҩܬ\86\8efå8«¬6ng\9aØ&\85\19Ç2F\17°÷³µ_\ 6²\ fÏÚÛö\8e*V#¸ò\ 1\88Iæ\13²4±$\7f£»b)+ȳùJñaw}=¸a\97\ 5½\1e\ 4~\87u\{\13\8cû÷\83>Üà_Ìe\81¥\82¯\15IÚ\1c߬W7C§W3=eÉ~è³0èÒõJ©ùVm·Qã±ñ\ f\8e 4\9eendstream
-endobj
-618 0 obj<</Type/Page/Parent 513 0 R/Contents 619 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-619 0 obj<</Filter/FlateDecode/Length 703 >>stream
-x\ 1T[oÚ0\14~çW\9c·Òixq\12\9cÐ\97\89\8avcj¡\17wOH\95IÌH\ 5 µ\9d^4í¿ï8\ e\1d÷uÒ@(Æçä\¾ó}ç±AÁÃ/\85È\87\80A2oxÄ\83v;"!\84q\84g\1f\7fJ¤2\84,À¿»\f^HØ.C@=âï2PÊv\e\ 2º\9dû\947>\9dw\80Rà\13,\97Å\11ð\14°TÏ\ 3\9e4;$ \8cP\ 27ò±\94Ú\1có\aôgoþ-\9faL\9e6¿\ fû½\ fÎ\1aÖVìºE\ 3,\ 5Íãr2\91
-\16E\96\e©Ö£´V\1dï\ 6ý[~ãï\8f¤¥zÂH¹\98KhA\99gI\91JÐFeù\ f|\beìá93S0Ï\ 5\1c\8dFGú@¾áé·û.ç7û\13\16ã\a\99\18\10\ 6S\8cK#\ fE»ë\ fxp x\8a%§RgJ¦ \92Dê:Ør\0\15\14~ì uØû\16{½(r-×Ûðà\rü«áÅý×Ao\7f\ f\17·]Ä~\96%¯0\15y:Û\bµ6\ 1%M©òý±0/dy\9a%\ 2±\0]®·\81d\98@\15¯b\e\8eÞ¶\11\11°%\\97R½B?\9f\14pUU³Ý\91¥_sP\18y\ 2|*1\11ú&3¡5\1eQ-\ e\b\98\97ÚÀX\82A\17m\99 4\9e\85±NöN9¶\12\17\7f\89®El\ 5Ûè=¼þ¯ÐZzP¶\1fÚ\95nGM1Ó\ 5\88õ±}\1e\1d¯·´E\98\88¼\870\7fQk\99§ERÎ%j5\85÷K÷_º[Nm¥åjÀÕ\96\19\1d×\93ó óÆ'?t²Ð¨íd
-£æ\9fW\1d*8^\\89±%P"´\84àÄbµyÛÞ¼ý¹áÕ\e^Þ÷\açCH\8b¹À\9al\9a\8f0\93Or¦!\0\94\ f´1»ÀÕ½¤_]ïJª_uP\9fâòÆ\82\9c¨\0?è\84!\ fÊ\a]\ 2ÜÇN:±\93ÎY\8eóP(9à
-É\8fséUåm,\10|Õ¯$dU\17o\11|¹\9a[½¸ó\ 2ä\8bQ\ 2Ra\84#W\/p\1aÅ\84u:À\18s°Þv/O»Ð³P\14\v©4|)³´Ú%¥o+òpd®tæJ\1f.d¾¢÷0
-IÄb\ 4\ 2ÝÂئ<ã\8dëÆo>\93â\90endstream
-endobj
-620 0 obj<</Type/Page/Parent 513 0 R/Contents 621 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-621 0 obj<</Filter/FlateDecode/Length 527 >>stream
-x\ 1åTMoÛ0\f½çW\10=¥\a«\92íÚò1mº\ f k»Å»\15\184IA=8R*ÙC¶_?Ú²·´u³\ 2Ým\b\ 2\ 4¡øH¾÷Èû\19\ 3\8a\1f\ 6y\fI\ 6r3£\84ÂéiNRHy\8e¿cü:\rë>\90æ1ɦ\ 2ñs\ 1\96§Ó\19\9c\92ø1ÒY9;yS\0cP®±«\8cçP*À\8e(\85RÎ\v\92\10Nb\ 2\9f´ßZãõqù\r\13²ß Q\9caߥ\9a\7f~\7fU&q\b§C\18Ç\8bX\82E1N!\ 2mÚ\8dv¢©¬\ 1iM£wÍC¼h?ãe\88\8d«´Gº\84z%TãZß@eÖÖmú\16\ fà9Ý´Î\1c\18vÇ;\ 2)e\ 2Ç>2\16zt@Ù\8d¨\8c?\ 2ßJ©½G\1eÔ@*ª\80L®¡'!a\81ÖN\80\82Àåj\ 1×[m`¥%\16\ f\95ÿÈ\16Å\9dl½Z\ 5a\9dZ÷öóQ\rT`\14\v\eBî\9d\0%\1añ\14\8cï×þWâ·FY\89ú£ì¯\95ê¿\83ê-1\8a\17Ì\atGÏ{\8f%éà1´Ô\1døÞ \87ü\85>Øw\17£Á^çµ\1d×{ÒXøî±³&ÎÀÍõå\97wWËçWckëJþ\80;aT¡±ðU\83ìJ\ f¦\18k\87\91÷\9c\88õ_bÅ¿6@=Ò\15*ÂÃfn碮á§vÖß\1ew\13LÒ\8eÙ\95Q\95\14\rÞ\9da\8bø|8{,ç$+
-È\18ï¶rµøp¶\80¥þ®k»ÕÎÃÛ¶
-;\1f\8d/£\9c\16ã\ 2ó ÇÅp+5\94ÝaÂÓ±\f§£«\95â\89Ï3\8e\a\eñÓ¢ûë¢\9c}\9cý\ 28-\9dËendstream
-endobj
-622 0 obj<</Type/Page/Parent 513 0 R/Contents 623 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-623 0 obj<</Filter/FlateDecode/Length 588 >>stream
-x\ 1Õ\95Ýn\9b@\10\85ïý\14séT\85²kº@ï\1c9i-9v\eÓÞ$\91\85a¬Ð\ 2KX\88ä·ï`Ö?$&Õ´ReYBÚÝÃ93\1f³\ f=\ 6\16ý\188\1c\ 6\ 2´g\99\16\b[\98\1clסgNÿ\ 2aµY°»\168óL÷Ø &\98i?]8÷{ï.=`6ø+z»pé!\ 2z³e\81\1fö=s`2fÂd>\84\89\94?ª\1cæãÑüÌÿNÇ\ 40Ö\1c3¸CÇúSYâ\aȪt\81YYĨ ÎȱÊe¦\10ÒJ\95°DPA\8a\10¨çû\1e*T¥Ùh\93¥\9d¶K¶I]{!7׸ÙúÜ\85hv~\9eM\16\9f¦£fÝÖJTS\83\r¨\98$UÇÉe\12\87k¸\ f²(Á¶\94q¸÷ëxê\ fx·ÖAÜ\17T¾ÍÆ£7Ý"U\16É°J©l\18A$Ó\80
-G\85\86eµZaA^cZ)^W?«ûpÚ\vn\ eÂÞA\97iíVA)ë~'Ä\r¥ªrÝÚc\r\19Í®\16\94·¿¯C\97Ô\96ÀVÃÂû ¸aâ®»Ú¡Ló\ 4KLÖí\fLÀr]¢zÂàF\9d·)ä5\85\rØí®X`p\8da\1dêúâ²Û\87\ eX õ\18³\10wßJ[²\95î\ 4\1cá¶\9fĪ&*XÊG¼={Aö\14>\7f\9b\99¿äUÃÂ[´ü²Ê\84\97¢\8a¬
-\99n\aÈ[h×G÷ý(U\7f\9a¥\81H\93Q`Y\15\19Í[\83&d\14\87\ 1A\aª
-CTª ²\1fÉÆ \1eÛÛùGÜ\1dÌâ)}ÂúÀÖtÍß¿\1aÆÜü?\87ñ ½|¥Of?Ê\8eN\WßQÌæ¦ð<}\r÷çëó!\8cð\11\13\99c¡àc\15G\9b»Ê`\8e»Ùi8\96·\83ãøEm;¶é\b\97h#\88Þ[u¢\v¿÷¥÷\13\8eçN\bendstream
-endobj
-624 0 obj<</Type/Page/Parent 513 0 R/Contents 625 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-625 0 obj<</Filter/FlateDecode/Length 903 >>stream
-x\ 1µ\96ooÚH\10Æßó)FU_$§xë\7fµMß\9c\bÐ\1ej \pÛ\93\9aª2ö8¸5»Î®\9d\96o\7f³\8bIpKH«Ó\ 5E <ûÛÙg\9e\99å¶ç\80M/\aB\17¼\0ÒuÏf6\ 4\8eÍ\ð£\90>»ô/\11róÀ\8b<\16ýøà<î½x\1d\80ã@\9c\13+\88B\883 \8emC\9c\9e¼¿\9c\8cþ8\8d¿P\90ß\ 6ÑN\96ãÑ\16qvÒðL¤Í\1ay\8d\19db\9d\14\1cx²FX6y\8e\12*QÐ#¹\ 5ìv±ö ³Átü\917ëÏÄ\90\ 5ªO\8fo¦Á
-j\ 1K\84R\88¯´eS±#ìt\95È\8fG\80\9dì\97\9b\9aè\16äI©°Ü@-\13®ÊD\1fl1\19\81ªe\93Ö\8dÄ?·\eö[5ÌaÜ\88ùZ\8e>ó\98ã2\97Á\15ªJp\85Ýìl°Ü`\e:º\9c~¾\1a¿~ü´\9a\12IGä)R\1d\ f!;b¾\9bÌbÏ}\9c¹§3\\9f\94\85Ò§K\96â\ e¯O»\99v°¿c\82_.üÿ\94«Ñu2úEKµ"S\81\15 \92K±¦ÊÝ6¨ê3èÊsÌgÿõ([\ fµÆ\90H.ãÔ\8a\16\14<+Rr \ 2Õ¤)*µ\11Y\8f\9aTw«åù;ãù\ffãøâòÍå\fd\95B¬í\9b¤5̨k2\98\17UëÅ]\ek/\86,ж\8dW\bJ\1f[ÛLä@Ë
-2/ÔÉWä 8Ô«BAE\bH$¾ÒY8Ì÷\C\88è\9d\18u²$ÁV\90@*8GCнZ\13{2\1f>\aEÍ\88$òbz^SÈ?ק\f\1a\85@\9bÊM¥\8dX%J}\132SFkÊÏ \98\1d¼ÔtJ#áp5\1f\9a\83À·¢^\19²\995Ï®éo>\99\8fõûN\84g\f\16µ \1du\ 2yQ"¬\12\9e\95ø3»à7?\ 6\9d\91\1c\9c:\ 3\16¸/ üe\104\v¨(úpöwß³m\83´ºùê\80aYÐP\83á*)Kä7H\19iêÅb°3Yç\99Év\81ò\8eææÃ\1a-v\a]¦\8d\9eJÄR\8aª\ 4oqÓ\82I!Í\1e4$\8e»\87h\85Ðßï\7fÉݬËôÅ{\94E¾¹O]"Uã!í\85¼\83ù\a
-\83aò\10¾ËÚ\84\1fÈø)ì`
-\17â\86\ eó\ 4öwÓm¹yþ\ 4·#° Sv]»-ðO\96\1fa^pjÎ\HZÐvÈ\19\14\19U\9dDÜù\8aúJntãhaöïÚû»à #L\9b\1d¾uíï¶ß\85uƵƵ\15\99·-¥Kv\1c\18<\ 5ÜÕè8¦½|\ e^õ&¯û\92\1cçxÛt¢ö\96u|\97\ 5ý>\ 4!]±\91§GÂb0=\1fÀ\bï°\14\15J\ 5o\1aR^/³\9c02ÑVh÷uh{-\9bî¸ \1f\ eMe¦¢\19§~è³0\88h\98RàKG¯\1fǽ¿{ÿ\ 2í\¨kendstream
-endobj
-626 0 obj<</Type/Page/Parent 513 0 R/Contents 627 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-627 0 obj<</Filter/FlateDecode/Length 933 >>stream
-x\ 1¥Vß\8fÚ8\10~ç¯\18é\1eÊ\9e MB\1aB߶ímµ\12»{W¸¾\94Såu\1câÛ`ÓØÙ\94ÿþf\1c\87Â6ÝV:!\10Áóã\9b\99o>óe\14A\88¯\bæ1ÌRà»Q\18\84\90ÎÒ \85$\9bã÷\18ßµ\80Â\1d$Ù« \e:\98Ͳa\8f8I\82xÈ#
-\ar¼Y\8f^^¥\10E°.\10V\9aÍa\9d\ 3B
-CXóñru \97\8d-!~}±þ\17M\13o\8aЧÑ\f\13óqø5,ºÓ>Ðôô\98b,õV+x«\95uõ|(Ñ\85Z@\94\10&\17j\16\ 5ø\90\8f\17A\12D\ 1PÄ\ fâK#\8c\85·%«*¡¶ÞG\10Â4¦RÆ·Ú\8a×P¹üFÔ\8f¢\ 6Åv\ 2\8ceµ5ÐJ,ζ\1a^l6/\80\97¬fÜ\8aÚ\0S9H\ 3Í~\8f\1e\9c\19\11\10.
-\9bvXN\ 3óJ
-eÉÞ\96\ 2v\8c\97R\89 (mÝ\ f\r&\1ev's©¤\95¬\82%S7L±-æÛ3cZ]çP2SN\80m\99TXk[J\8ehÑ\a\81vUSNiL#òÉ\93ô®L\8f¹\9f\94´FT\ 5lÆ\95n}Y\9b\8b\80""áZYUp/8Fîc¢%õzÕõíÏ\1eÕJØÍ\85Gã¼\10\ eN\0ãH3\81\8aa\ 3\ 3¤pÑ\18©¶O `.\83ø]\12üÐ\81\83nÀj`UË\ e\ 6r\81½èÆ\82\85\1a\9aÕ±\1d\9b±\f(\8d\80åÍo \v÷Õ·»\e«T8k¬íIV\1a VJ¿¾¼BjyºOãì\94XH-O«Îð\94L~ê\1fï®ßýÞ\9d\ eB£rÍ\9b\1d\92Aäpß\14\ 5\rSK|t\88¾ÚÙ\86ü}{½Z\7f\88\7f\1cö\8c¾\8d\92\çÄàÚ·÷ÿ\85õäýå°´$\9f²\7f~\8cÖ\a<r´³ì»î*?ï{L}7{ÌÀ\16ûÆÿ4«_].\1f¡\16¶©\15\8aÜ\14W.\97\1cijÀ4\9c\vc\8e\10\9dæ É©â ¼^\aq°Î\11ü°N\19r"7ÈÂ{a[!\14®A§S¤'µ/rBüç\r-\8acpß°Zä\94\80U¸EdÏKÁ\1fÈbw\94\0| ¬\88°ßéÎyz\8c\88nßâà\ 2ÓR¾ÖT& \12u\1aµ¯Å£Ô\8d©\ e\88\8a\vù\88|ý\1e\86_\99ïTO\89íç¢b[Ô å*è+ë5È-£T\fe±·q\9d\18\16BÒ\80]\83\1agÙ\83\0\ 6\ï\ fý\82?_á\11>\89ØÄ \18VI¨\ e½¤QÙ¨æêIçLsoh:¨Ü\fï8?[\89\17Õ\9eñ\aaÍóz\11ÓUô3½XÞ½ÿ|}{u×\11lH2|×¥\e}Aì"\ 4R\15ºóé)v¦\18gÛ\90y=\8bæø\97`±\80t\1eã\7f\ 6¼ûV\977o.á\9dx\14\95ÆkÌÀû\ 6ÓPØio;\9d\87\8b_¹Y\93y\12ÌÓ\f·\aã¾rìÿc=úkô\1fxf\954endstream
-endobj
-628 0 obj<</Type/Page/Parent 513 0 R/Contents 629 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-629 0 obj<</Filter/FlateDecode/Length 920 >>stream
-x\ 1VÛrâF\10}ç+ú\11W,Y\17, y·ÔVÙN²(Oë\94k<j\81\82\98ÑÎ\ 5Âߧg$n68û\90¢¨\ 21ÝÓçôéÓ|ïÅ\10Ñ+\86a\ 2i\ 6|Ù\8bÂ\b²$\r\a0\18\résBo\85Pú\1f®£$ÌNý\90&ק#\924¦\ 4'RÅiv:Õp\14&ï\ 3nòÞÕÃ\0â\18òÒÕ\99\8d\86\90\17@µF\11ä¼Ïë
-\85 8«¹\99Á\ 2¸Â\82\1eU¬Ö\17ùß\14\9duÑ\ 1\85\aqJwäEÿÏ/ÏùèÛ_í\89\83ü»\ 3\r+\8aJÌÀH\18\ 4o\e\83Àêj&`]\999hÃ\94\ 1YÂôé\ 6æÈ
-Tá\7f\\96&çï\128{-k6Ó\10\0}\96T¼CÒ>zé[mY\r+V[\84JCô\ fa§ÞÅeùrÑ&\1d\1fBLFÔ\10\828\ e\aaB/ø\8aº\91Bãq\85\11\ 4IÖ\9eäs¦¾\8d>!C£Z¡:¤öÿ\82«Ù\92\98Õ\ evGA%Huß-jãïð]Û\16ªÐX%H¶\ 1T¢¨8ѤA[ÎQë\10JVÕ\96\14Û2eÅBȵè
-%\86\88\94Ò\85\92.wü¤!<N'0mñýδ^KUÐwó\91,'¼þ³4ø3\989RÅkh¶\ 1Ô\16mu\83Üõ\8d$óF àî~
-(¸Ú4¦\92\ 2¬öz¢PY\17ûP:=C\81\8a°ø¼\vÜø\9a\ fúÓ^Jļ¡Y#î\b\ 2&
-"«íî%ì\86Àçi'ã°g\97þ<\9f#_¸\13K`3V mÜ\17\a\97nÜ\8eǧc\ 5/}3'Ä\8d\92\8ex\ 2F]p\944
-W\95´ºÞPU\1c«\95\eG? \87e¼\\9cÆç2|\14\1a0ê('ù\1ae=»¥\92Ë\ 3\80gFßCu\19»ûME:û âw85Rêât=\eiai\1d=láÚÉe³q3¿Ïzîî\1dø9*¼¤®qF\1c¹À\rùG];yÐ\83\82Dü¾\1eû¦\9dø\85\ 1fé<ù\18\89Ü©§a|\81FûR¯\1e¶\ 3ïDr0îi\18»q÷ÓóQÀÝ´ß>>ç¯_\9e\1f~kO\9c2¿\8e´Ê\eiÙ\95põ®¢J\94òø\92#\87õ¦ò\89§\1cÍO\0V\14\92Û%!ƶ\1f{\90\ 5\1cÁü\11W»ýz\7f7=\8fñ£ÔÂü¼XÈã\97\r°¦A¦HÞ~¦i\ 1HZ/¾ ?lL¿\90cßzÇ\8e2và[\9d]µ\15\9eñ§AçO\93'x\943éå²ßh®û\a®D¾W\15¯$,åÖD®Üº([½º\87Â[-9ÆεæLÏý|ùH(¥òâîì\97ôYÈ%9D§¹Q·dbÚÓÙxLÿ\15h\ 3\17ýéäéf\ 2w¸ÂZ6HTýjI7\ eU°=\19\f£ñ~#yÇ\9dìÕ\8dàWã`8\b\87Ù\88\1c\9a\92^§.Á}Þû£÷/®Ì\8f\84endstream
-endobj
-630 0 obj<</Type/Page/Parent 513 0 R/Contents 631 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-631 0 obj<</Filter/FlateDecode/Length 758 >>stream
-x\ 1ÝUMo\9b@\10½ûWÌÑ©Â\96/cÜ\1e*ç«\8d\94:j\8c{\8a\84\b,ÉVx×YÀMZõ¿w\86\85\18[D=U\95jd\v¼ÃÌ\9b·oÞ>\8e\1c°ñr`ê\82\17@º\1eÙÌ\86À\vX\0~8Å{\17¿\9aCÞ,x®Ç¡\ 5wâ2whÁ ýá\85Àcþá\v'ÑèíÅ\f\1c\a¢\1cQ\ 5á\14¢\f\10\91mC\94\8egÌÇËapÃ\1fk^VGÑ7\8c\ f^â-7À\9cQ6^Î?Ç\97\8b\8bk\13à·\ 1Ø\9fåx\88\ 6#Êd\1d\8b\fÊJ×iUkn"»Ò\16\85º¡IfªºTµÜ(Y¶±\ 3e¿^_\9e½y½f-3\95Ök.+\9eÁ]\9dç\ÃF |Ôû\9d4å;¤§7çgË×\93\96\o1Oªy\86\89ER\94\fÚÿ*±æØa²Þ@²ÙðD\97P)¸ã î¥Âxf²Ú0#ºMÏH0Ñ#r¸\1do\93Bdq\8dÙn\8f(ÔFúlÜ~\ÿyð\fígu¹\88\9cÀ<x`Aù]Té\ 3`¦\1aËÊL¤I%ä=¬\96ç7Í\ eív AÓ+AI\1aB\9blRIë\a×
-s¶\94Q/\ 3i\ 6\80í¢¨\17(Ô½\92\b&Wz\8dh\94l_q\1dÔ<öFõ¨\ fÏ¥;\a+ÎëêAiQaô\96ã0\18\19¼G\85Z°@`´þa \8bæ(-IY(²m\9f\97PÖiÊËò\0ê¯\83g^\18©õ8ù3íT¨O:\83\96|d«\ 3\0RAÃÄ\ 6[A=\1a!ôÊ\10â\1dõö\13\8e\1f\9a\ 4ýô»À,;f_\ 6©ÛÆ¿ÊæÓ©A\14ø´\ 3Q¼\8cæÑj\19/®ãåêôSL°:\1c\9db\ev\esA\81\93¹X\1eºLÖxÊ\84ÁÕr\ eè\1ap\85âÈsÚ\89}c!#\1a/TÅß\81a-¹+\9e\8f¡zàôÚ\81\94A\94ĺÈ\12\9côcHd\ 6 ÎSZk\8d3Z<Cß n\8f\80kp\84UFâ"Éð¬ÓBkW8\8fTÊ £ôB6\ 5\9a.û\96¹çZ\93\7fâ\95\13ö¿z¥±Èö\8ci\87{\7f&ÚÉf{;\fy"
-<cº\ 1DËi÷-lO&g\1a²`6Ãs×7þ\8a\9a:\99Ã\19ßòBm8\1a÷ÇZdÍÁcu±ÖÔFß6\ 2ö÷\ 5,I=þÔgÓ D¥cÐħ¿Î£Ñ\97ÑoE'-Nendstream
-endobj
-632 0 obj<</Type/Page/Parent 513 0 R/Contents 633 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-633 0 obj<</Filter/FlateDecode/Length 659 >>stream
-x\ 1ÕUQoÚ0\10~çWÜc+A\16\9b\90\84i\9a\ 4+«\90 ¬Å<\8diJ\13\ 3ÙBLcC×\7f¿³CR²¶À´ía "\93³ï¾ûî»ó}\83\80\8d_\ 2\1e\85¶\vѺa[6¸´k9àø\1e®)þr\ e\vcèx\ 4ÿ¾`h\13ߢ/\19ÜÎsO}Öxó±\vÄ\ 3¶Àà®O\80Å\80\81m\eXtѵ:\16Ìñ3î\rGÓÑ\84ÍçÁ@?Øhr= .Ù7<î\ 2ÁSúx\8bz\96\8b\ e.\ 2¡ø[X\87I*S¡$<$i
-\91ÈT\98d\10b\12r#2É«\1dMP\ 2\1eVI´\ 2µâOv¹\12Û4\86;\ e\92gÊ2F\15æK® àª?\9cL5\ 4\fLÚ\983\ 6ÎÂ5\87DÂíàf6\98²¯Ao<xGí÷MôÎ\91»Ã÷z\9f\8efÎ\88\85Y¯Ãh\95d\1cס21ÍÛ\9cßo¹TV\91/Òåìóm\13¤\14Ãj\9e\88\ 57[\9e?ÂBäðéêÃ\vä<Q\13°\1dÏe"²&\8cÆ\ 1Sâ;7Kj\9b% M\15I!âÖ8¥Î-Ô\98\ 5R·Lv<Óû
-Â~\ 1X\15Ä?\ 4\88\10o\8bT\9e\83s\8b\8d³aÀ\88[\98\9d}aQ\8d\15Áö\ f\94\86\ac¹¶\ e\ fLÙíëÞJºu ê\90Î÷QñTÊí\88#\9d\9dÿùËë\806a\1c'ÙRË\91¶î\1e\15\12\9e&Ë\f\ 5¬V Qz
-P)e¤½ Ê\ 6¨a\9e\ 5ÿ\91ºFܦ¯\ 3®\84t"ëc5\14øG>öÒ-|`\8f\18 \1aJhM\84T\8b°èÿz<=?~G\85=T¡ñ\84Ý\80õ:Ò|µÂ\9c]\15\98_`{m7\e\9eG¡äóË:Ü\9aÓÿPX'ô\19\vTyf\86ã\89¼Ï\92'\92Yί\9cG\1c\87W\\f93¸Nr{\96|ÿi\8cr2\9f\95\87¿\97?q¨åv»à¶©åëé?í\8dû=¸â;\9e
-Ô\95\84ëm\12\9bÑ×"\9eoö¶<»[Þ)'î^Çs,ÏõñæE×\9d\8e®Ó\805n\1a?\ 1\84X8bendstream
-endobj
-634 0 obj<</Type/Page/Parent 513 0 R/Contents 635 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-635 0 obj<</Filter/FlateDecode/Length 608 >>stream
-x\ 1ÅUïo\9b0\10ý\9e¿â¾µ\93
-\ 3Cø±/Q«nS¤6Ò\12ö©\9d&\17\9c\84\95Ø)6Ͷ¿~g 4Þ\12\98TiK\15é*_Þ½{çw~\1a¹àà\9f\v!\ 1/\80t3rl\aƱgûàG!Æ\ 4¿%\83e}@¼1þûÛÁU2zû!\ 6×\87d\89XA\84A\ 6\88ã8\90¤ç±=¶\89\r\8bË[¸\11+Áß$ß0?\0×mò-\12bþùL(ö\ e64]ç\9c\ 1§\e\ 69ÇÊr+¸ÄX¶d)ËX\ 6\ f?@í\ 4\9cÝß\9fAº¦%M\15+¥\81\1d°H\80Ü;ÀYò\8cg¹à\17ps;K\94xduH\9c:4jPìS\19H]\9cJ\8c\ 5V^åÏ\8cë<}T²§\8aIu¼V%YÙ1o²\rö²ÚÐ\87\ 2É\e5¨:\ 6^+Ú)\145-5Rº6Ì\e\1a\7fJÙöþy:KÜ 9ö[¥q¼\96ëÙDkã|w\1c\97\80uj*Öaò\10X« ¤¢âʤdâ̦\8bd~\9aÔáì_\ 1ÓM¡\a£\97Gwç64/d!z{B¡=rº'Z\14bÇpêx¡ÒA\81\ 6À2\81\8c8,¦× ó\9f¬§?í\8a;\99g_uÞ\97Óô^\10/@,\11µù\ 5:L±ÆP/N5g\89T£»\1eä ~`K³,ç+P\ 2ü \90 X\1a\18h\91¯8ìrµ\ 6©h©té½Öµ³z\8aö\89Ýy½G\99¡ËÜ-\89Wa´Û¥ÁÀÕX\e¹\16\90\18Vƽ8o7\9cYï`\8f\r1®½ì¡\97÷HZî\13ÛÖ\9cá?ö#RÜ\89ò\11G®p\1f\83*+©þÆ\15\ 34Û;¬_\fSC³Ù\ 1oý\8f»\13µ\17Ã\r#;\88c\bÂv}ãô®.á\9a=³Blñù\82\8fU\9eÕÝYû\+tb½É\8f½®~èÛa\10á[\8c ãú\19x\9f\8c>\8d~\ 1«{\14Vendstream
-endobj
-636 0 obj<</Type/Page/Parent 513 0 R/Contents 637 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-637 0 obj<</Filter/FlateDecode/Length 755 >>stream
-x\ 1ÕUMsÚ0\10½ó+öH:ŵ\8dc\9b\:ù.3\riÁÉ¥t2\8a½\ 6µXr%9\rýõ]ÙÐØ\1dBÒca`\f+=í¾÷võ£ç\81Ko\ f"\1f\86!¤EÏu\\b£Ðñ!\88#zöé£\10ò:p\18Ä»\ 3A8t\82];|ÏuÂ]\81¡\ 5ÿë\88\93¤÷î"\0Ï\83$·é\84q\ 4I\ 6\94\92ëB\92ö?^ù®\91ßQ\1c$ßhå\b<\8aç0 ¥\83a@ $Y\7fä\84\ e̦·³ÛSH\14\13\9a¥\ 6&¬À\f>ñ\12\9b\9dÛ3\\18ø\11åGûÎ0ç\ 25äR\81Yr\r%~\v<Cax¾æbA\7f#ü¨P\81)<j\90ÂM¶\16)l2\98 \81Ù\92\96À¹¨\8aî\816SoH\1cÒ\89î£\9bwAêB¶á\1a\ 6Õ\ 3*¸$ıÈå>,ï°\89\12)ÄÃ\96\14ï\89\14Ï\81]\99µ\v°l÷'Òà\11èº\80\15>à
-\98È@ÿä&]Â\ 3[U\b\Ô\(Ô¥\14\1a-\1dPÒ¯ª`÷«u\1dÓÄ80MÏ\92\16üÙ@ôiãØLÛ\84Õ'¦<×\8a\95¾c\1e\rÌû\1aSÃ¥\80Ãù\ 1\14l\r÷\b2\87\15/¸!)\99Ö\\e&R\84%*¬\11kCÔÖ±Øq»rª}\8aõÙ]Â[IÜ^\8fÏÞ<Op)¹0$żo$èF\16A5¾\9f\1ft!;\1aÞLƳdê?\ fÛBÚ\a3\9e$ñ\97¯ÏÃ\94,Ëj\87JX\90W*ÁS\99!h£ì¿Áà~mH\8d\15_\bâ\8e\94\6\1a\19¦\8ceÕ\1a{vuBT²\fÕ\86Ì1º\ 5Q&Ã}õ<Ùæ\85zö¢´Ì¶\aæ\95\92\91`³\ fÇÓó»ñäâúλ;M¦{@w/Ý\ e\8cvÿ6-©/\eJ] Q¡8ê=è7/ðG]\94£R¤RÁ\1eyQ\15°B± ½æ4.rz\81ýÚz\8ez½ö{-Q×ñ¾u|Ó\9eÝtZ\96\7f)\99Ö\fèbü\9b%þ71ç})h\8aQK\91\f<ß\8cÂZçÒ( «AH1ø\85J6:4ìo\86¿BS)AWê\80\86^ÆSfèNÑU\9a¢Þø"Þ\88æE±\13\8eF\10\86^s\1fÌ\8e¯N\8eáÌ\8e\Y¢ÒpYÑíc\99\1fl×\ e"wôÊK.\88\ 2'
-cÊ\84fúadaÎ\93ÞçÞo1\9e!\9dendstream
-endobj
-638 0 obj<</Type/Page/Parent 513 0 R/Contents 639 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-639 0 obj<</Filter/FlateDecode/Length 914 >>stream
-x\ 1\95VQ\8f\9b8\10~ϯ\98\87>\90\13¸@X \95úÀ&Ù*ÚmÚ&´÷PV+×8\enÁ¦\18²Êýú\e\ 3É]Ú,«S\14\89àñ7\9f¿ùf\9c\9f#\alü8\10¸0ñ\81\15#\9bØà{>qÁ\v\ 3|vñ[qض\vWW\ e /-x¶Gü\8b\váïï¯ãÑÛ\9b)8\1eÄ[Lî\87ø\90\ 2&¶m\88\991%\98\9dÀ\8a×°áÕ\9eWð\ 1\1f\97b+Çñ_¸Ó\aÇévZn\80;\8d\95¬ù;Èù\9eç\90)¨w\1c\14-8ìiÞp
-2Ѿ¬øÏ\86«\9at0Hà\ 4\13\12M¡Ïì\10Xw\91¿çó»À¯«å&^»Ýº×\ 3¡~\963Aá\10IuÄ\ 5Ò8\a±þ\eõu¹\8a'C(ÏYÍvÝÉÎI·0î\19m\94lÍU)\85ú%¥\r\96{äý¿\13\1eÅ>ãýíÓrþÇË\87/e&j,[-a³X\7f[¬\1f\96«\9bO\ f\8eí\fhq1r@Ú\fý\0\89!E~\0\9a¦<\85l\v½ìíZYWÚ\rB
-ëo^Éd¬\93wºõjT¼n*\81\ e´Ð!iÆhÍ\15¨\861®ÔInt\986©5ñ\8e\1e \b̪CYËÇ\8a\96»\8c\81ÊR\ er\v«\18æ² è¶¨A\13\8aZCfR\9c°zÃ[\13\e\9b¢õ[@Ðms¾ÍD¦#û´GÑuåZ\87Gi\9a\18\91cFnw\8c·7\97\94Y¢ê9ü8ÔȦJy\85\9a 2-°¦ÇdUµ\ 6I3ñ\b^\17ø\8c\91m\83Ъ¢\a\ 5\91\ 3T¤\10õ®<29+ÿ"1nÍù\10\93ùb\ 3\8bÙ5pÁ´Rx2M ìR¦´¦0\87Fi\1aA÷î\89\1fàvÀ\1dy!\9f·\891\94ó\8e
-(ð»£j7\80$êW\91°\8e¯\80|þ³Ëp©
-Eê%FAÙ.\13ü¡¤Ji\89\931¼\7f\ fíR®hÚ\14%¼éc\be¬[.\9fõÂió\e|\9b\183h\9e\1fÚ\18\9d\16]q\1c3\1d`§M#2&S~Ú\9e\8cõg@\89h=C¦·æÝ\9397ï\90âËgÒ¡¿\14³¯"\965çâ±ÞÁ]
-8®vÐ\96R\97ûøþi\80Ãþ{A\88H\f3OÆ÷/çWÍ\ f\85w\0\82îa[É¢5\8d\82B\8f\18a\82l-¦E\82²\9b\ 5-\13ÝöØÑ\18ÓSÉ\a\98Ì°]^õµvþ÷\80\90À\fîÍö\87M\88\7f¯\9b\ 1ËÃdQ6z\86P`\88¦\a\0\1dJ\19g\ 5\96kH÷¾IY\83\9d+j¨qÃÐ\11\989ë'È%cöíÇòLcé.ïÇ%Û¡tXDd¾fæZ½;vê\85ÐÓ¹úDa\7fù9\9eKüé\14ÿ:àõgÛ&úx\1dáhÃKY\96¼Rð¡Á1©Ù[N\80\7f
-0Ö
-ìé¿×îK\17¾\17x$ðC\9cÁ\88z\15j\84E<ú2ú\a\16ra¡endstream
-endobj
-640 0 obj<</Type/Page/Parent 513 0 R/Contents 641 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-641 0 obj<</Filter/FlateDecode/Length 1362 >>stream
-x\ 1\95VÛrÛ6\14|÷W\9c§FN(V²e]<ÓÌ(LÒz\12_*Ñ\93\87(\ f0\b\99\8cIB\ 6À¨úûî\ 1E\99fÜN;\1a\8fu98\97Ý=\v>\1e\ri\80×\90&'t:&Y\1c\rÂ\ 1\9d\9e\9d\85S\1aM'x\7f\82?£hí\7f\98ÍÂQ÷ûwñѯ\1fg4\1cQ¼Fªñ\14o\12B\9aÁ\80bÙ\9b\85\93ð$¤\e£\9d\96:?\8e¿#|DÃa\1dÞ?\99 ¼\17õß.i¡\1e£TäA$iÙ\7f\eQd9z@ý\931Êr\14ýBK\92ºØTN\91UÖfº¤\aµ£O\96~£\ f«ÞÍ\97¯³0\1c\9e}\vê\ f\830\1c\7f\væI²êE2\88ìê\98_Ý´ç´\908\1f\19\85¸O\16\r¬\8eÉ·4¯\ªJ\97IáT\80 %B¹ÔS(R\ 6$¬UÆz\9c¦ý#ò \93\1f\ 6Ç¢ó}ááixÂó\1c\8e!eû\98o³ÓäuIßuVfå=¡%Jt!²Ò¿\95y\86\16i\9bå9é\8d\ 3$"Ïw$\9cSÅÆ\91Ó$SQÞ+Ê\9c¥\rjnµIH\94I;\91Ô¥3:Ï\95¡Bì:}\1aµ®¬âLÕ&\ 1\12ÈD\89Ú¨2áv@\81Q÷\99uf\aN\9cÃw6¤8ÍlÝ\93È&-eeh«Ô\ 3·¶vÊl\85IlØ\992:\87f\80o\9c\15jÕch\17òU\eï\85|\13\1fØY*óC\99\9býHKå@Ñ« \96A§\7faä\88\89ý
-9L\82!\14\91\17z»^õ\fP\80\9aö ¸ \13ß\95\83¯ùfÈL\9e·¨F_-Òö\8d¡åNñ\98õÒÌS\vèùD\16\13ÕÙYô\v\8b X+O\95l§Rs nÈë\11§:HÞB\91çt\v
-\úÄú\r>ÛTYæ2×÷¬ Ý\96Áª\97\952K '\91\13¨\16d+\99¢\15\82h\1e¬\13,/¯\9dZ\80\9dYu\91AuÉK\eö?h½Rî³¾×åR\14þ\7fÃêm\17Ú\9fy\1d\8e\83ÒyjoÀÄpì\97ó'ö\11µ\17@\13õ\9f\98í\fÛlo#\1f\8bÍq\0Ë¥\1aË\ 2h\97óË\9a¢g\12èðT;ÝÁy\9a7\aÍa\ 2ì\9eÉʵ^õ@\19à·Òd\e\17Ü^¼\ f\96\17ïm \9cß\88¶b ÍN·O\8eåK´òÿ\8bà9GÛÜû§ÃÚ\89ÙÕOC\8atQ@+Þ§_puxÖ:3Öý\93sµ\1d\ê*OèN5ö\8e÷0\8ar§KE9ÌEyë\ 3ª\0\80\r°T\8e%ÉÒÄÇΰ\85\90i\86\83\r5\94"LÀ~`\91\ f¥Þ\96ôCä\95
-é\16Þ\9eû|Í\11¸\96QwZCÆlsÞU½ù±\9fµ\evºST\95Òì`¸W±_\90Ï\97hUÑVìh]\95\92\17Ç\92^\1fzÂJ¥\19ï\16n×C\9fê±ÊÐ\1ac\1aÒ¼Ü\11s\8f@¿\16¢êÔ¼Sk\8dó\fH3\0\8fz§\14\9bò~\f,±\82¿ÃïáªõD©øáOeæ¥Ú¤þÚ@ÃIH×kðQ\19Û\ 5¸f`{(z\18\0 í\ fã\ 2B_øì«\82I ѵû+F\b\98p:£\eJ îGf½\1f¼ç\99ìicô:Ë\1948\e_c¼\ 4ôZl6J\98×lhP\11\82\9c\92Lâ]÷6C+è\8b/.\945¨-jEÅÑ\rnJ%\1flUt\e\8dÑ \98ÀmS\8f\ 3',6\90\94¯¹/\99Ý\97à"yéèþ\8a¶¸1Y\87\v?jëÙB\eö\vF¡ñ<ÀñX)¬N-\92\v\92¢|å°N\98W0D\ 4âCúCo\157ÅW;ãÜ\91\aÐG(Nø%ñ\11¾ó'°±d\¶\9eí¥Ö\ fÌ^\7fù\88\ 5Hý\9a^]Ç\f2æq¤=(ÈÑl¤á\8elv\87\8b~¿\12¬$ \88Ç\83úxs´² ¡Óò|\11ù»:(\12üg+ç;ÙßbO\8dîM\82Iô_
-èºY2LÜ|\8fÓõ¢óæÔðÎ/ý\90ÞÔðäÉO¬ýÓQcjÓ°\16\13«j\ 1Uqo\1d_\vÇüäæ%×Dù\15öÞ\92hY±!\ 2r\95[µ\85¾Ô¾ÞtÿÈ;\9cLÃñlFãñ\0ÏØ\9cj~ùnNï\ 1Z®7\0\8e~¯p\ 1så~\13Û\9f\ff\1cú³ôh2
-'ã)ÆÀïg3>ö!>úóèo×Ü«:endstream
-endobj
-642 0 obj<</Type/Page/Parent 513 0 R/Contents 643 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-643 0 obj<</Filter/FlateDecode/Length 659 >>stream
-x\ 1\8d\95moÚ0\10Çßó)î%\95f7NB\12ö\ eÆZUjÓdê&!M^0#«±['\81òíwN\9a\96nÈ\81\b%àóïþ÷àËÓ\80\81\87\17\83Ø\87 \82|3ð¨\a\91\17Ò\11\84I\8cÏ>~\8d\80U³\10ø\8cÆÿ.L³ÁùE\b\8cA¶BV\94Ä\90-\ 19\9e\aY>\9cÀüj\ 6E \A\9aÁ\äµ)ª=à\9f\8ba)\ 4Ìno~Z\93²2u^ÕF,Î(dk±\a\8e\8eõ
-ª5ú×fóñ,û3`4\f| ~L\13¼gË¡\11Û¢,´"iJæõ¯I]Y÷àw\ f\ 1¥Ôî&\1e\10\16Q/\1a½Ûê=§\a\9fn\93\ 3ó\9f
-\fÊ\bUÉý\87F®\8d§\13fcgMD\80ú\88\15¨1\ 3\85À\94`\80\ fJï\14ð\12î\84äU±\15\98\99\12Ss\877Ì\84U}~1\ 6\16¶é%\ 1ú¶âÇ4¡\88½\17R\92\96\81NËWó\97j`¢Þ\8cÑü\9bB\ f¦ä\12vÇ6F¯e$~ÔúIk)m [rWgl\16Â\ 2ÚT`N\18ñ\88×\1at\ 4rhq¯\8d\º\ 1\88p\0®uÎ¥\eà;\ 1\9f\8cà\956p»SÂ`\86ݬà$Ö¥Ñõã ,æ\bì½®¹0X\9d\13\90þ ÈVÞÉÈÀ\81\\fS<`µ*\9eê¦=\17gîü\85í2vmÓ\86M/øÉaßúÔ\ e\83\93{0\83îØìÝ\9eG\8e(f\ 5\97õcÏ~âªV*ª\9d6\ f}\bWu¦¼Ê×}\0W-®T%\fÏí¤èü\94áè\91´}Qä½\88¨õq\141QZí7º.¯õo\16CþÀAÙi!ío(Eiçr_¯\8cHìðñÅèç¾\92\93Ä\ 1hûÿ@áRox¡ ת2ZJ<n<Ïuª~¡.?\8baãÃ\ eï~Ð\88|'?ZÑÉË\19a¡O£ñ\18_\9f>e\81\9dÙóÉÍt\ 23±\15R?âÌ\86˺X6\ 5#,N\1ac\12{ã·ñ~ì]\10Æ!\8d£\ 4ßËH\8c\9a\11û9\e|\1dü\ 5P\9d\b_endstream
-endobj
-644 0 obj<</Type/Page/Parent 513 0 R/Contents 645 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F5 7 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-645 0 obj<</Filter/FlateDecode/Length 553 >>stream
-x\ 1½UÛnÚ@\10}ç+æÑ\91X×ëËÚô¥22 K\Zl\94\17$Ë\85%qklâµÓôï;kLJb \82\ 2BÂÌÎ\993s\ e³\ f\1d
-\1a¾)Ø:\18\fVÛ\8e¦jÀ\f¦20\1d\e¿ëø)8lê\80Å,|<\110lGÕO\ 5(ÕÛ\81~Øù4d@)\84\e¬Î\1c\eÂ5`eM\83p¥,\95i\bY\9e\91*K\1e*\ e¾'\9677á\ fL2\9b$äJ¨\81ÈáZ \b%\16Ñ\9e¨ETUÝ\9f;\80\93ã\83K¥_%iI\92\fÖù6N²K¨¢AÕµ=b\ f¨)éÖ\88\ 6UñaôTl[\85[\9e¦äg\96ÿÊ`î{ÁKª\1a\10]ö§¸2\b\89\80\18Dõ\9dÄUy\9f\17Iù\e\1eã´â]\88\ 5ìâ¢\84|\ 3<)ïy\81\a\ 3ßëB^\0RÆ_`\15\v.ã£"¯v\12Nt\9fsdÜ\9bM¢\91ïI\ 2Xö0 Q\16Õª¬
-¬Ñà,\82Á<ò§ÃYD¡\1d\1d\a.\ 4î\ 4Æù]\9e¡øb\97g\827\93Å94²\11Ý9\9e\ 2}=\a¨\ 4/Ä~\18ÖQ\16ÛgÕ=dñ\96\7f~9/EváúÓ¨&\89=F®7ñ§gq¾à«\ 5¡=¡\97\1aåNÔFÔv
-\1d\9ag\8bü;ÙÑb\10\84gq®HÖÚ\179«GË\97p']ó\ eAFóÙâkô¬Hãó\13ã½Z\97ú\ 5\rß\94ä/]é¤\ faKÏ
-ÿ\1flk\a}\b]ý\r\v\19¿t\9c&¸\82Þá!wì»ÁU<ä4+\85âÕÃz=`Ìnî\ 3wÒwÁã\8f<Íw¸\81`T%k.[%\87³ÄÖz\97÷·i\9bªÍ\1c¼\9dps³Z×AØùÖù\ 3[ÞË_endstream
-endobj
-646 0 obj<</Type/Page/Parent 513 0 R/Contents 647 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F5 7 0 R/F8 10 0 R>>/XObject<<>>>>>>endobj
-647 0 obj<</Filter/FlateDecode/Length 324 >>stream
-x\ 1½\95_KÃ0\14Åßû)îã|hL³4I}\91¬«£¸µI\19>\15Ù2P÷ÏÉÔ\8fïu\9bø0ú \846\14B8çÞ\1f\17rò\16D@qE \19ô\ 5Ì×\ 1%\148#\ 2¸\92¸eøï\1d,\83\81\r®ïb\88"°Kt\b%Á.\0Õ\94\82\9d÷ª|xse_PÃÏ\9a\1ePÆèéìÏ\172A8:{£ýö°Û<Ý\85mXLt>mô8צÁºMm²Ê´\16ºÅï¢\ 6ýB®öæ-´Qk\93\7fÐ\8eêÌØNp\99\ fܲ\98eUw#îû`ÖiZÔSÛ\14e'sæ>\98Í£±Ù¤+äØ\arYåÝ\rYø \1eèô¾.»\1a²ô\81\eå8Oµ-ªÖj\1e\13N\9d\9a¨sFGR\11\91$ â\18\13\1fSÙèÉ@ÃÐ}¸Õvçöï0:</Ü\8f)üÕ\86\92&?Ò\84(Â\bÌÜj\15¾n¶\9f\eÀT=ÞG.9\91Bá+\812qL©Ì\ 6\ fÁ7%Û\88\0endstream
-endobj
-648 0 obj<</Type/Page/Parent 513 0 R/Contents 649 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R/Fc 12 0 R>>/XObject<<>>>>>>endobj
-649 0 obj<</Filter/FlateDecode/Length 1454 >>stream
-x\ 1WMsÛ6\10½ûWìä\12%\13Ó\92¬Zv{\8aó1õ!\89Ó(m\ e\9eÑ\80 ("! \1a\0-kúçû\16\0%[ö´\9d$ñdF$Èýxûöíòú`BcüMh>¥ã\13\92ÍÁ8\eÓ/gÓlJ³Ó9~Oñß**ÃÁññ#\aç\8b\83£·g4\1dÓ¢\84\93ù)-
-\82\9d1îÈÑ«Jt^Y\9a\8c3ú$\9a\Ð¥Õ×í\8a.Z\1c´¢vÏ\16_\83\8dÉ<Ú8<\9e!\80E1ÂK\93\8c^æÎ[!}|lF\93Izl:ÏNø±E¥¨ëmg\9c"S\92¯´£ÂȾQ'üö\86:knt¡È\99F\91n\9d^U8jq\12\82zêðD
-«ì[éµA`ÚoH´\ 5!D\ 3#ì\7fL\87\93ã\18\¡\9c´:Wð\a»ª\11ÈJ:\ e@*ë\85n©TÂ÷V\85{\7fé¶0kG²Ö\1cÕà-{,÷YÊ}\9aí\81U
- w\86þ\14V\9bÞѹ\90ßHµEBð\11h"ä½C\10\82¼Èë\80Ð\90"u\ 6I+\e rêF!æ\94½Ë\88a\1d.\19@oü¦cC D¡Jݪ\ 2\10rú1 \10i¨Ì\80QL³¼_¹\11¡\9e½dh`GÖ°\17\fÝ·2ÚBTí½\1e0\ 3]\ f§'Y\80Ê*o5¢\ f\95\90\ 6\19µ>\80."ÎtÝ«>\ 5)S\90\87óì\94Ù\ fú\MOætßG8ÜVº\13\00\18\ f1ý¨90\ 2ÔD=\82ÝâçÄX¨Zy6úÕäTZÓ\84x\7fJâÑf¬ôÏ \96\11¨ý>\ 2\1cyòò\83q»>o4Ûg\93è\17îÐï,Ýáô4\9b\9cí¸öª·\16ôª7l\14\ 4æf0-_®Ye\92\86ä©1I7]X\87\ 4K
-d)öÍ\ 3
-\vZ©VY-¡$\9e5dh<G¥±´6ö\eKæZû
-Ý\ 3Q\12¶ Ïï/¾ì|"i·q^5I\r¾\87ébpÿêóå'r\9d\92ºDL»`®FA]!ª!iÕ²¤ {Yu\15\85·j\9d[è\13\84bÍ\0ÕF
-\8fG\84'i\9aNס\11ïè¨×\8dºz\96\84ð~Ð\83\8cÜéÐ3\8aSb¨Ë,Í\0\8c\8aã$\97ô\91Û\9d\16¯Ï\9fþ\970¦±\0õ\aö¦@ªRÈ\8a\91\ es\ 4¥í}×û]C=©»kÎ\ 3j_< ¥Á\9b¨\10®!ÍV \87*³t\ 2!6õX²<\92 R¥^õ6(2Hï\14î\14xóC~ÃÒ\1eù\ 5ðÚ\15\86'c\e¬\11\83\15.kåXâ uä\9a¼\03ê\9a0\8c¬ºî5\vê\83y¥n\95DKHÓm8;$\92Ñïf\rÝ´/\82I!%\ 2\92át¯c8Þ¨ª\85v]-6ÁA\1af(tr^èF·ÚUª`9½ScÁd¨ëPdÜ\1e\84{\81¼jí\ 2áá;5\96éÐ
-÷d1Ö\12\10´\9cbiz\feüP·\82ý¡Z\1cî`È\17ù24â²Èw\93ÆÑÕh/(§\92*àÁe¥D\18BC\vg\92@Jz\19Å\9e\ 3ಥÐz78][Ñ\81\ 1Û\ eÙs±³öëJùmXË|Ó
-°~Ä.\18\84¡Á0Ì]Ø\18|\85~ \85-\f:©5À\b°PcÐR8l÷\1c½{ùeyùÇÅûÅòõù§å\87Ë7ïYJ\81\97*ÁNÏ"ØY\1eð¬\8a\98¸«A\10\9d² @$¸º0éÂn&À&q#t\1d\bZ>ìÚ¸ýtÞX\90ö"¶\7fÛ79l\81\!Ö â©têV*U`Ï@²\8fÄZ\838þEL¸\84ïзwø\13ô\149\b\0\0ºX%£\ 6c.óz¶2\16ÂØ\84~l°yñöÅ\15Bª\89]! \b\8fp0É8+øZl\1c#·®´¬ðþ°Að Iô\83gè\1a\93%\ 4\14J\1cY\82-\12.REµE \f\1eJã\b¹ïUm;«\ 5íí\87Ñ\7fè+l«Ø'\ 3rqB\ 6¹áqB\ 5:]ò,
-±0¶[ÿQP¨Q¾2\88u\1fPDU\89´1Å\fØv§å7dÖw\94oÐ]Jö\81\flø\9eð%±\1eÓÙ°\89Ïâ&vô\1c¡Èº/`%,!Û\ 6¨èùÑ\90ý8ão\84QÜ\ 2ã\0cï\7fï\9dSú×éb\89\8dY\17¿\11ìGd Ü\92\15°\16ØW¡7[x\1ex\19¬\0"Â|\84£`\86s\8aã\12ÂPwWÏ®\90\18ü¯FÊ\18\a÷\ 4Æ9\7f\ 3p\17lY\1fîc\1e\ 6ÆECGoOw«1ö\89ðÑò\7f?\8cfóY6?9\8d«êÉ1côfqðñà\1f,n@Âendstream
-endobj
-650 0 obj<</Type/Page/Parent 513 0 R/Contents 651 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 6 0 R/F8 10 0 R>>/XObject<<>>>>>>endobj
-651 0 obj<</Filter/FlateDecode/Length 1640 >>stream
-x\ 1\8dWÛnÛF\10}÷W\fò\12Ù°dIQ$')ZøZ¨õ%\8d\95&\ f\ 6\84\15¹²Ø\90»
-\97´â\16ù÷\9e\99Ý\95d9¶\13\ 3¡½$Ï\9c9så×\ eµñÓ¡A\97^õ))¶\ eG[{§mzC£)nô÷ñKJíV»Ý¦QÒ ð¯Ê
-=®ÈUª¬ø÷w´·C\8b\996TÍ4ýc'þ\96NÉÍÍ3sC;{Û£\7f¶ÚÔì´[û\0]beF\80ªÚ
-\ 3\0\17\7f\92\9d\ 2.s\82÷èë.ûW¨à²z\1f\7fø·\ 3\19KSU>Ma®nô8±µ©"\8c!S\17\13]2\12ßuä\9eÁ9¼¼<ó\1eëTPfÊQVÑDC\19§áheE!Q\ 5ÈwºúíqZ\1e®\98@OAsº¢\8c5ñ^A\19EWç\87Oë3uUÉúO³\\e\15BÅ\10ñ\80j\878\81\98\90\12t¾õ8\88\bZ÷\09ì|@7Ù-g\82\ 52Mî\ 41É3vÿÑ(FLp)£þL¬DV\81\19ç\19\93\f\9e?\vóµÖõÊ[ÀÜf\89^\ f'$©\0>µ%@\9fK±\8bÑøøäïáÑÉùåñ í\98j\9cêÛ¦úÝFJ\7f\97\83½Ó\1eu:¾\80\9aÝ>çú\bÄ\93º,Y\83B\99lª9Å3kb\96Î\99\90¯\9b²NªºÄóÖT*3\1cäi¦ó4\90ÕôñbøYb\9e¥Tj<k Í´´\85èó"\9f\7f\8d´^µºl=±\ 5\8c¦/\bÿ\ 1íSfR»ðe5<¦ëÆ«nsÂY\8aäO\ 1\85\90½ÿ0\84Óç\a\9fÇ\7f\\1e\ e\8f¯·[ô\89«[\91\10õÖÝÒú\86½\10sf\ 2/\82íj¦*J-ªÈX\16¡JfàCú[æ*ÎOv>óýC¢÷ÒÑèøp\17&\ 3=~\0tÕÄÞjötÃè/;·Ê Èl¼¬è\8b±\v$\ f\8c.l\99\12b\dα¥\99.õί|r£\8d.\11\a\1c\82³JSþ\8dåe·ÇW£\83\ f£X±Yºa¯Ôs+I\897áh+Üîö[=Ö|\88Ð\96)R\fe\10\9c\8d\8e¬é\8f\b"Ê\16Nvú\12\83\\19\84j]åt\97\1I¹\18\90
-\865*taË;\96\aè\e´¼-©o[\16Þ¾\8a\99¯æóÒ"\82ªBù#õ-²*Xô\ 5ê6Ý\90¨×óÔ\8b\14Ã/\ 1
-¼\16Y\9eÓ\\97Àó 8µyn\17¬¤«ôÜ!¿\90'SaÂ\yº,«£\132T²ª\95¼\95ëXàÇbU_7®·ýk±¨\1at½ý\96\8f0°P^^î£\99N¾°ÖNkî\91
-I\868{é\10éP|ù]Ì1\b\91h'3fé\1e«&¶¥öP«Ò¾\12\86\86;\eBóÃsÄÏU¶DÑ ,÷½k\9c]\1eý)3oï´\e<n\88\7fº\1cs\9bÜðªEÃ)\ 6Ì.§¶A\16K\99x\r¤®\11m N\13âEÙ:-1\8a\93¥\10g\96u\0·¢®ô7\82\13È\94PW\9c0Ü\ 2\842Ù\1a °@®ei\8b\82~\.Ò\ f]\9d$Z£\eì\92Î\1d²EeùÒ<V\81´Ñ]Ù\8et®X
-1îy£ac7\809UÌ\97ÝËè\ 5%
-¢Rî+\9fu`§\ 4õÕCÔ\ f\1a\ 3Lû\9a\ fá oÒm¦è^\97¹\87ÕóXËuFdêù|\89\8b\f²V\83Ì\83îÃ@?ØUþ{ä<ÂmNçتw)\81\1dT\1dJ\11þKT6\87GÄ\88×5,^#V}{¢x`£\1df\88\ egË3¤\9e#\1d\r\9eYû¥\9eKüJ\9dpÓ\f\8d\L=G7¢\ 4Ú¹\aã¼á$ú \9a\11 ^+V\8c·'q>*ù³48k\9fÑ%\1a\8a×µbãY\13\97P\93ß=\ 3ôý\91ûr¾Ú\ 6|åJ\9a¿^Kó^×ïÃÇ:×\9c!æ\8ec\8b½Ñ\ fCéò\\97
-µÅ£3\9c\87\vÏØ\1f\15R\7fÍBh²«ò\946\14j)¸¹²ÆÎ,ëqð\10fM&_ÇkE®n°±Ü\ 3Ø÷\0ÍîëU\8fº°ðSö\ 1D\17Í\99Û\15o;ÒqãÒ¿ô\e\ f,·\1c4ø8=ÃÀ\92\86Ʋ0\88Âæ¤ò¨Çr'\8aá :Üë\18ÒÔPéq\90\8c\0s\7fß\v\r\1eY8Ç\16úÄÂ\ 6¢ËUZ:!Æ¥õ{¦\8cxcM3ÕSUçÕ\ 6£cÍûé96J$»³ \ fè\94\16Y5\13·|¸\90\14-bz\11T&ï\84\93Â4M\8d)¼ü\0\vÛvf\92¼æ\8dN\91·°aV\f\86À_εyï·â\93o<tѤ\ 1)ã¢\9e8\8d¹h*\8cOWO\8a¬bzJ\9a&¯\11Â\8f\a>öY «ã¯\80\19Þ͵\8c5ÄfÃt`\98b\80ú\9c\16¦K¢ô4µ\92é¸JÚ
-Öñ°'#\ e\17\1fÏÎ\84ûCË\ÚÜOqÇ\13×%VM,ôü\85ÀKý\83\10ðj|\87'$r\92/{§ûa¢w\ 6ûþ\9b7Ô\1f\fü®}up~xÀrëÜb+rô{\9d¥â}3>Û\1c´ù«ºq4Ssþ\bÁ\a1]©b¢H\ 2ÀB\ eùëĨܱl½A¯5èïû\ 1ÙïñÑÉhë¯ÿ\ 1\82¸¯\10endstream
-endobj
-652 0 obj<</Type/Page/Parent 513 0 R/Contents 653 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R/Fc 12 0 R>>/XObject<<>>>>>>endobj
-653 0 obj<</Filter/FlateDecode/Length 1508 >>stream
-x\ 1¥Wïo\1aG\10ýî¿b>Õ$5gÀ\ 4pÔTJ\88\89Ü*àâ\93¢ªTÑr·\98M\96[²{gìþõ}³»\8711\91"ç\97"Î7óæÍ\9b7÷£6µð»Mý\ e\9dõ([\1dµ\92\16õzgø·;èãß\ eþZI\8bð ÕþþÁ»ôètÔ¥v\9bÒ\ 5bõ\ 6}JsB\9cV\8bÒ¬1)ô=\15¦hær!*]Ò{y«2I\1fM.I ´+\8d\959mT¹¤µUEI_ÌÜ\91*¨\ÊøÉ·JV\92Ò÷ï\12\9aàS»QN\9eøç!Ú\8bôËQ\8b\9aí³¤\83ä\r\1f[92óR¨\ 2Á\17Ö¬\1eÂI\8b'_dVÒf)C\9aL+\89ÌʹJ:\12ôA\96\7f\98ù¬¡åÔôæ\ruf/À\ 3p¸2ál§£sj£R.¹yÖMº\9c·ÝJº \r\97¢¸\91\97ïé\17\1a\86°C\91-UqCfAW\!\0\\16\vcW¢T¦\bá\1e\18lvúI\8fÃý\93\1a\9a\83{¥5j\0!ZàÕ\7f\7f\94þUB\9fT\91\9b\8d£qzÚùs\9b/\80¢±)Õâþ`ÆOÌÇÆد\8cÖwä!Ú¯\14Hr'¤\98)Z\eçÔ\\ 3 ± ,ôÎI{\8bòJC\95\934½\1aò\7f\9d,r\12î¾È\96Ö\14¦r\f`§_\99g\f*\ 18\95yR\bÄ\17¥ã·cZ\9f&\93\96[\1a\92!\8f@àhH\94¥Uóª\94.¡t \88\99(\98A@YTzÛíýì¡I\85\94¹Ï÷µ0\e\88E\94(ª\90\e\96#-\85C \90#ò\1c½\0*\16g\90e(ÿF\ 1ð\16\17\18ñ\11ø§r\8bG6°´\97ÚCdzmøÀD\9ep£d\1d\ 2\85àOn
-IàDY\89\892¶\\9a\eS\bí)\82ÀPæ:\87@\0T8`4\0Ëø÷RnÕ¹Ó5 \b\ 3á¥\8dÆtzAÐ)¢"\9aÊÐÂ\92å\8b\86\1e;æÓs Vk-W<8Ou\10Ã͹á+ÛxS¹B]#(t¤¬+ã0\ 4HA\9a\17w4kÐt4º\1a\8eiö\82\ 3\9c\8e²è.Í~2`ÇÂlÌ:½>\85§õäø\87[\ fxH5\96w?Ê4~n&.g¨\8d\93O\94\83ZFÃç&\98ʵ¾\9f¬e\11\13<\87\14DÚÅú\8cP\ 6s6\95\v+Ýò\89Â}\17¡\96\9fmb³3HÚç\ f\8a\99@ô\989ÅF ³¡`\16ÄPZ°÷`\12\ 5ÄɦsB\18}~ZÀ;l\10éüÞ\ fjíbnm\8cÆ3~\ 1Kè5\97ÿH\9f¡(\90\14K\9a5~N\83ûðy\80̺¨Vaüµæ!\82)\ 4oÄ(ñ\ 6Äfô[
-¾¦\8aLW¹<µëì³\aë\²d\94;CY\173N\1fy®\1fK\901Wÿ \8b¨+ \87\80\r,¼ý²¡¯ývýÞewL\96}\93\97®É¤Ãþ\ÄÔõbµòF9ì \8e\16Ìñ©Á\87\9bçh\r÷É¡n±\8eBàãá1\7fÌÖ\137.\e8ø ãëí\93ÐÍ\84Þj½\97^ZËo\9a"èÁÁ7oaPìËR«\95*`\7fy\Ï-:\8fÛ¹\13·óð5ù_\13\7f\15à]\8f\12\ 2ò¼°\aú½Åhâ'uúV2`Ï ¯S\94\eÝ*á¡»\12\91\84ÍigD/îX9Ø?Z×\9e\8aãÀG¹\8e0¦\12\rFõ~Í
-º\15Zå; \82!×o\87\8b .áÚ/ÔÚ&ã]\12"\ 5ø¸±°fyOÄ\13è@)\91\ 4\8fAâ\ 2\ 3\v³\86\0òè÷\v-nb¿Â\8e\ ekù@4p¹2\85ÂAwÂdÎ\1asD\12t5½\1c§\17ÓÏãIz9úûóä*½\9c\8c¯qøÙ*+«°%ø\1aØ£\19}æ]ÏZã¢|f\f\bÄ\13î&\96mL\97\90×í&\9c>\aÐÕÃÏËÖðUê\85\83[\93ÝÃï3>Y<èC=K\81ã·\97¸:\8c§j\85{Ñ_JÆæ/\7fÇ Ë\82\8fG>\1aÒá\158Äc¬aàä\ 2¢âg\8drY9\7fL*\1e¤\ 3h¡\9c8°õý\830¸e\86\97#Pç\rÏÏ×FjÍ,CI|fmO«=2\ 5ío\11/ÐZ:\8f îW_«\8e«\8fEÀõY¼®Vo=BõPñõôp|1¹\aÊô§ahí#cZ\81;q\83Cnï½zz\18K`\ 1L®qÁ9rUæ]+Ö\12o\88Ý£\9dMto\928N\94\rÕ\ 2\89\96å\9b\16£Ä!\9d\8eøZØ\83TÛÂ\ e\97\vYfËÐô
-^\8c\ 3 ãÍß,àÆÜØ([\99\1f\bµsÈòO\9c\8e\ 6ñ\ 2j÷\aIïü\1cß²b\1d×o?¾{Ëß©¤\86ü¬£\ f\95ÊýÝÕ¬\7f¶ÙoÁ
-\9fóí¤Ûï&ýÞ \^½W\fé"=úëè\7f{¦_êendstream
-endobj
-654 0 obj<</Type/Page/Parent 513 0 R/Contents 655 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/Fc 12 0 R>>/XObject<<>>>>>>endobj
-655 0 obj<</Filter/FlateDecode/Length 1693 >>stream
-x\ 1¥X]oÛ6\14}ϯàÓæ\0\8db»©íô-qæ5@\97d\89\81¡\98\a\83\96h\9bDª$\95Ôûõ;\97¤,Ù\89\a4i_\12K¾\1fçÞ{νù~Ôc]üï±a\9f½\1f°´8º\9c\1e\9dNºì\9cM\97x0\18á\87\8cu\93n·Ë¦içá#óÿ¦kÁ¬0\8fÂ0#Ê\
-Ë\9e¤[3®\187\86oØÃÝííçùÍíôzòe~}3¹\9d_]L/\8e§_\8fºì¤×MF0Û ¶\18³ÎT©«\f¬Ì:©V\8eK%2&a칡æíÙq\12\rö{É\80\f\8ecx×Kæ\10aºæj%\98ÒN.eÊ\9dÔ\8aá£,\17LZ&Bô¹à\16Î\16\eúÊ\81\0Sd¨\1c{\94\1c\11MÆwã\e¤ý½\12Ö½ó\8e"\14V¨Ìâ\8d{@²\19çÚ\8a;#\95\13fÖ\99\1d\1f0\1dí°\ 5O¿1§CÜÁÝR\1aë\12Æ>é'\1f+¯\9d2MùI{À¤â\84%[\1a]´Í!e½t\ 2 *@\9bÕ\80¸5wþµÒ\88G©«\83VÛ("\1eàñÄ-\81Ë
-nì\9aç9`Lµ1"uù&\ 2\1a»ä@¤Ú\0R\8aTPJ\19wÜÛ|2ZêÚÖÍòBë¥\ 4±õÁ{\98\15Ïÿ§æ\ab\98uîn?_\8f¿Ì?Ý\Í\8e\ 1NÆ2\r«\94\18\15\14\9flز2è\ eó\92õ\ 3f=B\88m·¢HØã]\86¾`øý«^øTO'g¬×\vcwÒ÷íLS\96V\0\14XçÒ:\ 2i§\99£\13[\95¥6.tñ\ 3/\16\9c¥(ò\ 2= +d\80Þ\16?x!\95T«]´\1c_äÈUª:\8b÷I\9f\ 6É\9aǹ-µÎ\9d+\97¤ô\18ü\80¸\923z\1eã\9fûh6soæï\7fèÓI\1aÓ8\19&#¢\17¼>ë\ f\86,<\93ô\ fOzÑ\1f@x\83\93þ(é\9d7Ñýµ\ e]\1eºT§À\90º\ 4}\9eê*\a\1e\82\15ZI§\8dÈÞ1[,2_i\1aÝBXËÁ\19¨\9btVäKÆ\17º
-\ 3\12è$aT\96X\8e=Ø\9a¢Ã\853\ÙB:ª\vÇ<\82/ª-Ñ\ 4¯¥Ñ)\1czïumZ\11ÐDRíQK\r²Ê5Ϩ\ 5¦W\97{~+\1f3µ.º\14Õ\ 4åÐ,Ô¦0ùèdDz
-m·ò®\7fEÑ\89\asK\90®\11Kt7\92ö\85ÅK§¡²Iê\a\82¬.+\95\12\83nù¡n\15ÌHÓ+D\12\9bþ¼°+â<ÿeo²®.MÔ<Æeý+-\16\8fÍEøf"\95\96ø\1aù>\ 5\ 204,4\94\14Ldv$\86\98\81µO\ f?B<\14è\87\88Ès(²´ §LÔtdPL\88\vlÊt½\87"\87\ 6\81Å6±\19ÈO{Ú\12à\ 4\ 6\8e@íOÈGÐ\9eD¹b¢\80 tÒ\81\1c/EÊ+\8bZ9Vjk%Æ\90R\81\11!\1f\ 5\1a\91\1a\8c\8a\85ü\8b*w²Ä\v!k\8b©6Í\87q\14mP¢vÀ¤pÊ!ÿʺ½T 2ȶ£^\ 1jÜ\89\956¤âA\ 6C\e\0rÅ\vA\rïQüFL±\eï
-x\96M,±,;c@¥Ùóî\85Ý";ät\7f7f<\85ld\94-\82!ØcNµXëEÜ\b\82\0{y½-\85ºkÔµV\8b\9a ¦°\12êY÷Ê\ e2ȧ\14\ 68\16h\95\8aBñ~ï\11ÍVÚ)´\98{ q\16Ä\1e~5ñ\13ÐfÃ\17B6b\85\ 2
-\10LX\8cè\95Ð\92\98<ϬÔÐ*ôa»¥=[ák\ 4Ùë¸\94R\ f\85\98çú\89=ò¼\8aýîÅÕ\8f
-\84»äÆ\v
-E\96s\88Ëýä¦\9dýÞúð¶x\9e\835\96@Á/\8e\14E ;©¨,~Yû\19\9fû\1ap\11õ\ 6Ë\17Õγ\10\82õZ\8f:uDö#=Ø//è×Ó\11qì2ç+\f¡\14\90\12"vÐt&\96~e¥ÇvíE\86¨
-c\16*ñÖrBÆ]ôH\9c\a°TU,¨\85\96\fóåG\17SE\ f\9eåé7ï°\96¿\ 5Ð)l\87ï\1f\86t»ä7ËLg\e_\9c\9egð\92a·)\89ó D\\12û|\8f\94co\ 4îÃÎØìOñ\17Ú£~&½Ýý\83b\b\ 5\8dðR\8d¡\90À\16zVÓ\83\ fâõN¨:\9e\856s¿êV\8a\ 4®&\95PU\11\ 6Vú\85\98¾À\1dª»¨\9c?M^O\bB¥ó\1d\90ɶ\95ÿnýlo° .q£§Ì©§+Uïøøäõ\bÌ:\1cK\ 1¹\96\99\97%\9a\90®÷ØÔ4\94\1aÈ4\1f\85£\8d\ 4xñüûd\ eÅ'\93$\8cX\96j\v\14(\9d\9bqSiìÑë¸4_¶\ 5îI×\94x3bä¢n9\9cNâ\a4\ 3Ì\1e'\ ewk\89½\b¯x\99Øó\1a%-²+z[EÁ©\e7\1e\8fñ0¥\14ÚR\95°¸Ð\87;\0Û \\a
-°\b\10\ 4°ï¯\15+\19£C1Ê\8c?
-\8càß\98\f\ar}TP\b\12\9b(\ 4\17+\80@\88\85Îp3#Gh#®3\ 2 \1d\15ù<iA\e\83§\83°Q¾xÖìÞ\ 3\1fúáöo\9d\ 4£Hѽ\ fÝäC÷\9c\r âþï\ 3\ f\17\7f\^°+\943×\90kË~¯0\92Þwo8J\ 6çØù\87ø\ 2.\f\\89g \e#\8e\95¸¾b¿°q¸¡Ç<Ô\12<\19·\ 5v½+0gód8\18\85Ce0 ë¿M\8fþ<ú\ fM\9ab\ eendstream
-endobj
-656 0 obj<</Type/Page/Parent 513 0 R/Contents 657 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/Fc 12 0 R>>/XObject<<>>>>>>endobj
-657 0 obj<</Filter/FlateDecode/Length 304 >>stream
-x\ 15\90ËnÂ0\10E÷ù\8a»ª@"Æ\ ei\1c\96\10 bÑ\97\9aî² \89C\\ 5\87Ú\ 6\89~}'<dydÙg\8egæ7\10à´\ 4d\84Y\82ê\10pÆ\91$3\8aq*)F´B\13,ó`º\89!\ 4òf`\93T"¯A<çÈ«QÞ*8ý§ \1d\94ö²(Fe1\ 6\1dá¼Õf\8fN\99½o¡\r¾ß¶Ùûj\8d¦·÷G7!~÷à¯"\83ÝÅ+\87¾¹ITu²Ú_ÆùOÀ\11\8a\19\8b¨\82Q\eõÑ÷v\ 2²\15£\8a$üj®K_â\v'åØ\905ÝT÷\ 6BÉR\81\87¢\88\12\89\e\90Þ\ 1ñÌÙ3\9f#ºþñµx].°RgÕõGe\1d^NºVCF(dÊ\92ù\1c¡$\9aÊ\11\9cÅ\fY[\9a½Ú®ð\84¬ÓÊxdeÕ\ e3 f>h\18\9eæ³5Ôþ¡ôº7\83*\961\93IJµ\93&\91ÃÕ:\ f>\83\7f\ 5\1av8endstream
-endobj
-658 0 obj<</Type/Page/Parent 513 0 R/Contents 659 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-659 0 obj<</Filter/FlateDecode/Length 1223 >>stream
-x\ 1\9dVmOë6\14þί8â˸\e7´¥kË\95øPv/S¥\r6èÝ>À\84ÜÄi½%v°\9d\16¤ýø=ÇNhZÆ\84Æ\8b\9a¸¶Ï9Ï˱\1f\ fúÔÃo\9fÆ\ 3:\1dQZ\1eô\12¼~?JF4\9c\8cñ<À¿\95\94\1f\Ì\ fN.ÏhУy\8e%£ñ\84æ\19az\ f#éÑ\ f+Qyi©ßOèV\94\vA¿Ï®ni¦1¨Eá>Ìÿ\fëûã¸þãé0\19`\87#,À\920ùR¨Â¬¥\8ds\87Ø«\99;\18#\1fÌ\9d¯$¥µµRû&Hj2¹\10NRe\9c\93üG\9e'\89J,T¡ü3yC5¾_ZSW\8eL\1eC9i\11\88'\vOn%P¢ Ô\94¥Ñ\1c½G\1fû§1?-Jé*\91\ 2\ 3céJú\8bÙõ-ñ(pY*çðÊh\12:Ã\803Eͯ q®XQ\8a\82*a1\9dÑqÏÚ\8b'R\r\1c=:k+\1c&C®\90\9a\1fÆãáöËÍo_n\1e~\99ÞL\7fnÆÏ)\ eÒ\1d\1eø\8bùõM3ôðÓìvN\7f´é÷\12&è\1d\e\1en\94v\14\ 19|cu\13´Íîåó\9c¦\9f?ßÜ}\9aO\7f|+0Ox\99ßy8'U=\88,³ô7å\8fÙ\vì{ycç΢íã9\ 1y¥\97o&Ü\82³]ÂOç\81d\81\98÷÷î»7\17\aÜ\ 3\9eÝåï\ 3ÿä²«Ü Û)9UV\85$ù$Â'd(h-
-\95Q\a}\90à=jú\ f}Ü-\v³\10Å[`w7;§þÙ é\8f&ð× ó|ÊUÿK\923\1d¬#×ì®à\vm\88áW\8e2\99+-3R:¸@´*Ä;Û\80\r\8eÉ\95\8b\8c\84sj = ^#êÂ\87-Pïá·\87 MùE½1\18¶\87A36j0i#ÅàU\11½\99íø.ºÑ\9b¥Dl\9bÐ×
-ös^X_WǤ9\8b\8d*
-\12Þ˲B-¦qjì,\1dosîZú\852.:\1a\94Ô\12«ý\8a\8c\96M&\µ\14é\8a¼X.\91hÈ2iª\18\8c¢q§\98Ó\90[;æ\10\93Ñ^Ú\9aB\7f{i:Mê\8c¬[\99\r¡\f\99Ð\95ñ2\ 2ÏyqÓ\ 2l\8a\ehÎí'4"¼ïÁÇsC,lftñL\8bgh\3\8bm[Â7ÚxPâeºÒ*EK²ò±VV\96\98\15*9¹|Ý\8bþ¯Ö>\81\17\1c"/â;Ý\1d\18$\ 3\1eè¿!ï\11½\15\92F\19¹ZÖ±Á¶Ì\9aº\80Ê^S\e\84\18\11þÆíèeËg\87\85×@\ 6\8a#·t!SÁ\ 40¸\87\Îa£Í\95\0©\eÓjô¸\89\8aL³V-\9b\90a¤"Ð\b9®$\ e\88=âvN\8fû#\1c.ÛããþC`Hº ^Î"W\16/±>\16d0hô\8bW%TiêÈ$äÝjrï°jÏ&X¸(Ì\86=\8a¶¤
-aqB\ 1P\8b\1c\e\1ftsÃáÌé\87äÖ¬l±\8bîZíWÆ0·í\0¸\18äo\9bóº²f\89Ãнrèc-ísÈH/Ñ(w\99bév¼G5´]ìÁ)aZ\84\11|\13P^ùxvè\f`\91\9d±ð"t0\1c÷\85\14\80Òhx
- \87½8p¸\11PnMIè\81Hf'$\13\1f7Ìd¶\17ZË%î\0k óÁðÌV¸\1eÄ\92Øià1¡\19÷|æ
-L\91Iq\8f\ 1
-\8cl\98\17\81u\95LU®Òný¬1¾¤ÄüâÕ¡ÓÃJaÿ\ 2ýH/3\eèÂPec\ fÏk\e ib\82o\90\11²\93OÛýb\a\ fxG9Eãy\91z\99%tÍ0Å\18{UsD)²ã\86ÙÐrC\9bÙz\13¶à}v
-à[Ô«ÛÓÉVú\ 1\ e\85{\1cO\ 4\9bÒ*\ 3\rå{Ñû=*\95®½tMÿ\9al¯\8býÑ86å÷\J\87ãa2\1eMp¥Åmi4á0_æ\a¿\1eü\ 3[ue\ 5endstream
-endobj
-660 0 obj<</Type/Page/Parent 513 0 R/Contents 661 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-661 0 obj<</Filter/FlateDecode/Length 1633 >>stream
-x\ 1\8dW]O*I\10}÷WÔÛ¨A\ 4tõÞd_\Åìͺ\98]0w\1fLH3S@_gºÇî\1e\90\7f¿§º\a%ãÍfc\82Àt×Ç©S§\8a×£!\rð7¤ë\11]\Q^\1dý6;:¿ÿJ£\ 1Í\96xruý\85f\ 5\rú\83\ 1¾É\8foת\ eìh8êÓlÍôTç¶ÒfEÓ\9b?iºó\81«\93Ù\8fhbx\9dL\9c]\öG0r\8c;Ã>M9o\9c\ e;Ò\86\ 2,d\86·r;K÷.i8lï\8d®ûWrïÑ0Ùe<¼Ð«\15û@µ³\8b\92+O[\1dÖT+ï\8b\ 5iO:dx©j<c\13TÐÖÈÕÌ·N³>Ýä9{O¹5ÁÙR.á\8c¢L9¦\9dm$\8a\ 1\9d\r/RÌÎÚ@*Dç\95\15£\19-\94×¾GÊ\14ðGkåÉX±\97s\1dÄÛdF7·\ f^\0\ 22\9eJýÂT\16ªöªÂñ\82\82%U\14\94Uj¥óì¿\g\94¯9\7fñý6¬ÑUÿR ùÎ0b_\10\16âß°Û\91g§mãË\1dm×lhËä\83r\81\vÚZ÷\92¢\15¸\ 5m\1f\\93\87\ 6 ãvÁ^¯\8c\9c\13(£AT\ 65-z´t6\96ó\0\10±±r¶AòMݧ±Ê×\94«²\94¤ä\99ð@ Q\80a>{üc<\89@=\1fë%9.y£Lx>ÁwH;UB\ 2p\ 4À\vÕóÄ\88\84]§\12(ùF\17\883\1a¯\95S\15\83\89=².V\ç: {ßÔu©ql±\8bñØÅ\ fÎ\ 3-XH\9a<rÑ\85ó\1e6øM oz ?0!¦\95H9 ¯{N^¦\ 2üº\8fnÐ\97\ 69\9e̦³\9bÙÓ\94Pãù\8aÃ\1c®\0R\98/vs\83H\9f\8fA\10\10\17ðÌo\1f'³ñ?3:\15\ eò[è y|ødqþ4\1dÿÝbx\9aB\9f\aû¦G\8d6ábÔæ3o\11lí\802ÊÑia+¥M¯c5E\91NH\½\18ÑÍííã\13êõûÍäîaL§âM¢\7f>Iù\1f6elÉ\19*ÝF\ f\98\fà¥ÉÓÃ\ 3=\1fÇ®ðÔx\94@x^\96v+õ±.\9có\9bü\93Êx\ eA
-ÒÔ4Ú\ej[*Þ\90gÂ*iÎ}\ 6mG.,hêuÕ\94A\19\8e\94Oa\82¤ûö\90ð\12`\88\ 1\80ÑiÕøp*aú\9as½\ 4Aú4±®\82\8fÄ\13\ 4ì \1dé¸mb#C¨\1c:~.Ïz©5$YUz+¦\14J»Pe'ÀÌG\19Dë¦òvÉv\10\[8á<X]CWA|\11\ f´\1e()º&H´å¹ÍÉ\87f¹ü\99ÙTós\89W\8aK¢i\90\ 1S(\87|Ç\e \816\846X\83´×j#ï\98ZªÐ\vs\1dýI\1f²ñP\b ²\86üáJaM\16\bÔî¦Û\98×F\95\11ÓLê\1e]{P\ 1À{¥\96ü`DÔ/êÌÁ%\9a~»óÏ'Ý|¾3ô\ 2"\15Åy\8d\1cJ>\90\b[«×FD0"\868cÁ¦ªZ¨\1e-P>d`\ 1¨\12\ 5\84À\83s\bý\1c¼#\88\17¸ÇB7È\16ôz»Öùº\93UëzßÖÝà\ ej\18\ 5ZP\83G`Ä{á\11!¬lÑ\94\9c&¥cå\11\b&\ 6\ e\1aL\95x8S\v»á,f\81\9ef·Ty\94ed\96*@ª\13Z\96¯Áiª-Î\ 3\91oT#]E%L"\19^\829ðaZhT#íÒ,\12)\ 5°Ö,ªa\18£#ê0\84\15ã\12½\90 ñV0\85\8313ùÜ À4ÀM¸\89ÉR\0ÆJ{év\85za²è<N]\ e¹Ä&9aT\b\ 5\10XEãl1ÿñõ~â\80£Â\94\1c¡b^ÿ\fê\16;±Ò¶À!ê\ 2f"È»ê\1f@\19<\97ËX\9c\ f¾\14z¹diíή \vD'ÙJ\ 1ë /\b\8dî\ f\a\ 5ªys7íÉÖ "(a\b¿Ô;6\84Ò:|6Ö\9cM§\ f"\b\ 6ÃH\92¤G$ã°Jä\90§Â\7frÚv'tN\97Psǯ\r\86¤ì\1f\9eΤ\93\f'\81-Yº8\8eíÚ\96:ß\89¦¶µOô\8b\8b\bc/Ð(\9bQh©(zÒý\1d·ï\92IÙ\9aKtO&í\9bs\11\85@\94}em±\9f\94"\96¤6V\17Â\0ì\85\9f¶\94çãûÆI\9e\95u\984\1eûÓ{ÆTíPË\0å\80\12\81Ñ>6sÝxÙA@\91µ-£\12¢rþ£p\80À\ 6ð\85\1d\90MKÍY7 \9c\8f\e©l\QF#8íx\ax\v¬6"GâFä\8a
- \9bcwø4Fâr\93\94\0`'\8aá\1fÄ\1a},ÍjTù¾Æ\0®Jh]d²B@QÒìK~2\88O\16\17!¬¢x·× \8109èd\91a$\8f§ÓùÝxòm|\17»R\8a,ëd+È\90va\9cÂ\1eܶ\15\f9\8d\96.âÞ\16ókùÕ®V\82Þ&Jú;\7f:nÓtL\13ñ}\7f\ 3ÏE(v \82¾ y\94În}\848k×,\89¨\86\f\80§Ð´Øì\90=\8d\12\17ÚËÄoÀ\946À\8eë\8fuÐ`:gQ\ 6Îï¿|ü\1c¸üE\16ÿù\ 3äòú²\7f}õ\ 5¿`pçê«ø\1aÏ\8eþ:ú\17\11^<\87endstream
-endobj
-662 0 obj<</Type/Page/Parent 513 0 R/Contents 663 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R/Fc 12 0 R>>/XObject<<>>>>>>endobj
-663 0 obj<</Filter/FlateDecode/Length 1678 >>stream
-x\ 1\8dVÑnÛ8\10|ÏWì\9b\92ÀVlÇ°\93¾¥Ms\17 íÝÕ>ô\1e\ 2\ 4\94DÙ¬)RGRqü÷7KÊNê\ 6Å¡-Ú\86Ôrwvfvÿ=\19Ó\b¿Æ4\9fÐå\8cÊæd\94\8fh6\1eå\13\9a^Íñï þ8Iu<\98ήñß7\ eÆ8\98¾u0\9bþ\1céýòäânJã1-k<>»\9aÓ²"<<\1aѲ<ý¶\96\86v¶£ÌË\90\910d\8bï²\fôpZ
-\95Y\91\17Íc×V"ÈGQ\96¶3áá\8cÂZ\922A:#4U2\b¥= ä.VB\19꼬rú(Ê5\95kaV\12\1f\88p¶ü~2¢áø\12i.«ÓµðTH¼ß\88
-\17l\fÚ?\7f8«µXd5 o ÷qK<YU\91\13¥¤Ò\9aJ\ 5e\8dG¾\16Ï\9aÆVªV²ÂQÓZ#MðÈV\98êèíC\9c'eµ\b\§0;\92ÏÁ ºùð mø·SN6\1c\81\10\9a\v\16eè¸\\11\ 4ù`QíéV\e.NÒ§Û\9b?ÉK÷$ÝÃYÞ?7\99¡S(õN\ 1'½\eÐVÒZ<IZI#\9d*ñwxô²|¬¤/\1fNSª\88rôCg;¤(SùZÛ-'\9a°ç\\eaTÛq\19Öì_Þ\83¼\K/©²¤Ýt-\10\17è\rW´¸¿\8d\97/î®i\fV0=\86\97Ó\94ðx\92OrZ\ 4 '4p¤ÚÙ\86þþrÿ\ fWö\9aQÃÉ<\9fq\8d\7fà\96#\16S\8dp;
-Ò\88\88_úqfä\96\167\9f3R(\ 5\84 \15hk;]\91±\81D\b²i\ 3÷¸\92Ày«Â\9a²-ßë\8cz&t½¶.~\98ý\&B¦P\85$-ë\18\86û\92->/24j\81Ï?\8b¶åV/v\1eOe\80\eñ\80\ 3ÕÂ5\ 3¦ µÎ\16¢Ð;\12U£\8cÂ=\a¸\9e\94@:¦P¦:~ù[ßѵ`Ò\19\1f\W\ 6\85\16WÊ\97\9d÷è £½FÓ2`¯Ê,UÓkÉSdPæ¬\85þ\ e\15@4\95fÚsN MX+³9æð\1a5\97\90ìÖºMN7I\9c>bÙ:)\9f\91=WËzdü\ eÁ#K+êÚ·êÚSvÉÑñ\eñÏmËÔ\12ú\9cZáBJªÙ\ 1+YKÇøHS\rW¢\919íá\10\8c©¤\0\v,,\94\8eæ¥BV}Ñ=¢Ge!-|\ 1f\02 5ý\92¤\979ý\1e¡âD+ú
-W@ÖI®=Ûþ\ fa\19^d\159\19Is`*c\vÉâ̱ ³\9a\9d\aÀ\14\16ôd\9b\81î
-¥UØ%Æ\1ep/m%\13Vâ¨ÄR[ô\80\84V+Ã\ eÃaùYhãk²U~$§ûÈ(Uán<Â5°[P¶\17\18\b\16l#]¶\8f\80BX\an38z²\90¥\80+\93ª\99N°\9dW¯G¡ÅÚ·Î\9aÕ ²\rpð\ 6M\eÀm\91^\94\9e\81¸<h\87ºµ|\ 6ë´·\ 3Üò\81\80\aî0CüÑã°\85\85h
-\11'DÓa*pXª\11A\15\1a,a¥G¡#Ä.r\1avi·{í9yoÐe>÷È)%\8cÎ\bØE©¢Ð\82Ø`\9e¤9Á\8acP£ÕÆ)å\ 1w¯\ 2È|åPHNï\97ß\90ÿ\ e\12\ 1Ì\9e\r\ fTx#\7fnM\ 36£\ 1©ø á\12\18O[\8cºþþ>ÏWV\18\91áa5Ä\93pH\88\ 2éõ>É,c\96$?\8có¬Ö
-ö\ 1Õ¦\91\eýHËæEX©Ä°µG9ÂÚ\9cÅÀ\95þ\1d\9f`Á\18îÓɾÀ]áMûØÙá?¨ÿ¶;Ì^\16kç]³rd[\89\9eK?\88\16´æ\9f\0Y\9eìnÀÞÖjÜF\97\18ã£T\90\b>\ f
-RdQ\9e{L¼s¾×ð\a\ 3\82ª\r\13\91÷\8eÊ\9a\fÉ¥%\ 1Í=\86ò.:¾B"^\82(<\fî3vW\ 6\13Bwm\89\ 1ÊS÷»§G,+î\11ÃRç%Ë\87W\14dÀò\ 23\90\ 2ÔÁ\1fÂÖ[ª;\87\9cP\r\92<ª /\7f?ø³dÇP\19¿Ï¤z\12ºCy[L\a¬
-°~\9e\8f9EÓôë8Ò\1a ëL$Å`4 KßÒd6G/Æ\8bq58G<ì
-ç=(\89\\17we¿Ã\rçùÕ\98fqä>Lfsâ@/\ 39\9e\ eç×iÅÊ~èzzß¿£\ f\1d\Û\ 4¤\ 4/H\1dx\99¸\11¤\87S`Û
-ï«\82g$\97Ìd\ 5¼À®«ë\87³\ 1\15]Â\ 2»\v\84uT\ f\80ö¸§J\95\1e:h\1d½È*ivX6ÑRÞàz\¸_)\17\1e\14ÜmmË\rKÁá\9a«üÑ@ø\11\90ý¾ó
-\92ýZ3\9c\åãk\1aNûE\ 5»Í4§Ob\a½'ðp\13kZZ\80Fi\9b\89\97Æð·¶\85"ãjõ#ÐX\96&¼K\9fÆ\9e³ë\82K`VSð²*\1a\88\a\1e\8bê\98³<Çâ\90dù \1e\88§\8c»%7 v\9d7\9b¶*$öYò*@\98K¶B¶ìÈ\1dtà\baL\84\97Y\91æ\fÖ<^¤Ø·3ßÂ\14a{\ec·Ø$V2c×\89\ 2B²\85ä-\12A\9b(¸\8b»«\9e^ãùU>»¾¦Ùe\\ñÈû\eºEþ\9a5áé·\ eã\883\19îo\ eç£kÆá×+ãt>Íç³+ì\98¸:\1fq\84\8fË\93¿Nþ\ 3ëç-\8fendstream
-endobj
-664 0 obj<</Type/Page/Parent 513 0 R/Contents 665 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-665 0 obj<</Filter/FlateDecode/Length 1820 >>stream
-x\ 1}W]oÛ8\10|ϯØ7'\85ú+vronÓ;\ 4hp=Ô@_\f\14´DÙ¬%RGRv|¿þfIú£jîдIj\91»;;;;úûfDCü\19Ñ|L\93\19åõÍ0\eÒýl\8e\7f§\ füï\18\7f¤2|0½¿Ï\1eÞú`2\99gÓ·>\18=>þzâÃòæýï\8f4\9aÒ²DôÙ\ 3~(\b\91\87CZæ·£q6ÍÆ\19}]¼Ð³öÒ\96"\97wË\1f84¥Ñ(\1e\1a\8cç8t»Ü*G\95ÜË\8azæ ]\8füVÒ^XeZG[¡\8bJ\92ó¶Í}k¥ë\87\8f7Ò¿wÒ\935WZ:2\1aÿoÜõ\93\84£ÔX³W\ 5\1eàK\9bv]©\9có\18Ò`4ÉÆ\1c_\9dòËh\89gDÓà\19á\15n¬ÄQZªÅ\91\94V^\89Jý\83\a¨\97\e\9cyõÈÔÐ\1a×
-çdÁ¿\88ªÂ£©Þsr}\92\152\13TÈR´\95ïw2p²*\a§\bNé\r¥\0tP¸\10\11\ËYÉ\82Sd´ÄÑ!±Ré"\16\86¤i¬\12^ÒZä;\89ÊkS´@®46Ôî\85Ûõ\19\92Npo\15ÐÙK{\ 4Ö¶ m<W¢e¬¨nó-õvÚ\1c*Yld/£gOnkÚª \1fó'\80C\f+ÿn\95ÅA±FÃD\1e@Äe\8c}LÇu¢¯ee\ e!-\12Ö
-½9'¬ì tª\8c(\80J\96Î\8eg *\1a÷M\ 2'Σ1Ωuu$Q\14´øø\99òÌw\8c£@- 0iÁ\1cthoTA\85r¹\95\8dÐ9\17¯4©º©d-µ\8f\8dOÉ\86\88×<\1fLF1v ø$\12ü%\0\1d*{\93Þ\12½/\80(\80ÍM]·\9aé%Ñ[¿\rÈ\3®\0|¹¯\8e}\10\1a\ 5\8f\ 4\96\83á\e\fDÕÆ\\19Í8\16\18\ 6æ8\8eHµÇC\1dp¹\1dÒyG¥5u\buæfà:òJ\85\ 2|\89k\c4#\99\9a\80~¸
-\80\¢\9f/\8añ{\8e2°n\8fr:¡\11ÈÐêÖ\89ãê\ e9Òç§Å\17\ e¦Êól)çãÄÅ\1c\b¼\96¯\rª\8fÄ\v\9cc-@x0^í$)\8f\80\90\b Y\v4íëóSw\94Ò'ZÔ2±J\1fÉ\01\v aÔ\85÷\ 2ô\bÓÊ@B¡ÐÅÐ~Lzìd\98ø\9cg\99g\89YãL\rÌeÕHÛ)4 Ð\85)Ð4VÄÁdzfÊý\e<¹hç`2ÌfÌgpê>\eáY\80\0¡\97\90ÍoäDý\9d%¦Xsì7(ö¬ÉØ\82\ 5!Î:z\89\9c!\e\82\mP=a\18ÑX\1eÇ>í\84b¬\ f\16¿ó\88¤ª\814¦ÅJ\ 1I\91¯h\ e\7f\18Ã\9e$%Ò\ 3@¸\1a,\89\12[³ü\99 û\98/H\96Ë@\83Eå\fÄ·ªøÎBxqa¤È1Ã\1a2b ºGzú@Òç«»\8c0Ý\82\8f1eÁq\Ê\19wyösö\85\89Y \f\b\1aè= \8dÚ§ÿã]$N\15]\ 6!bzÝ\8eË\88ßó\ ecø\ 1Ê\7f`\1fô\18p2\97Je!\88¦\f¿p¸\13\9fb7xø\95Oôæç½\95\9c"s\99g]æ¢EÎÏA{#Cs\83Æ*ýë|\1d\8cÝE\ 5©¥ÇRZÝ\1e¶\10·\16;\90õ·61\11å\19Ê\90c\9a2¡j$k\88#}\15õZ`¤*µæ®ç¦\bÄI+\93Çv\ 1 ßw1\7f
-\1ae°0ÂTçè²ö}ì(åÅI;øz,P´G½Êb\80à\92\9e>¢«[\ 5uQ\9e\19\98·Öâd(\9d\89\ 1
-18b\ 3<\9cïÐì\9bÒã\1dÄÐrc¹\VÏØN`Q°\863¤®^gX\9e%zQIHO\8ct+`\86ö-\86û\180\10¸ë¼?\90&\ 4J\16«»Nô?\e©C±1\81ÀÎi\0\17\ fMX1aUcJ19§d\90Hô-ì%@\v\0\1a §Å\13\83\91b\³\ eáÏçQh<8ÎÆï'°s R\ 3af´«B4\89hP<Æ\ eu1\9cW]ý_u\9aeô"knç\8bÐb\13¶à\ed\8f\1aµ\ 4Æ=-\ f<á=ø\19¸6ÓðÞ$YB}|\9cY$\9eK«ÑLåÙÜD¦Â³%ÅqB\83\ 4?¯\àS\874:Ð×ç¤\82õ8\b\87°9,\1d4\81Á?`\93\ 6\17\0½[ÝâÓàXð=u\95YàÑn\93CÆ`Óú \1e4£\17T@Cjã\ 3\9dȨ"º<t\ fY`\8f¬\7f`=AÑ\96\1cX%+
-#\11MCìp|(å\14M\1dÖÎyuuB¢\93!HXV\9dø\91V§Ú0QE\10xÞK \9e\rA\93ñE:1.zÉ\86-h\10F\f_¢bM\87\83=ÁÍ]ÑI\a3biî\87õÚ\89\1e¥¿Ï\13tr¡'DÃFä%U\1ec\ fÂzL\85ÃõÅéB?\ 24\88\17\94À\85\13\98®SÍÝ\ 1H,¼4\9cÓGÚ \95\0Á°Ãan\93Hò¬/¾<\aïÆ?_q2:-\16 ^S¬¿s\vV·«»\1ev$&°S%\eV8+\108x\11XÈê\0s\8do \fû\ 5æú¹ï\9ft['à!\9bì\99\¥6[\960\bG\89\ 4Y\bÙ\92\99\1cê\96êNÞ½\1395>\ 2xõâ\83+ ¯è\88ÃUh2[\17\10\1d\1d\93v £Iå\9dÊUËK>T¶:øm\87å\87\17%h/¾`©A[(OUu§\9b\1cö\ f\eÓ\12Ëùd*£¯Ç°¨\9c'
-ÕÄ÷&\96S]\1a|û\f7vP@8\1a\ e¨\r/@\90\10ªË/@Ы\1c/\13ôî]R\9e\87ôÒ7\9a?d³ÇG\9aÍ\1fãË\17däÃ\82\9e¢\8e°²ÿÑb´9×ÁéÙÁ|ø\98ìÑÛï\94Óù4\9bÏ\1e`º`¢æ#>üiyó×Í¿Ã\9cî¬endstream
-endobj
-666 0 obj<</Type/Page/Parent 513 0 R/Contents 667 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F5 7 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-667 0 obj<</Filter/FlateDecode/Length 1196 >>stream
-x\ 1\8dVÑNëF\10}ç+æ¡RB\94\98$ä&\81\87J\ 1BË-\ 4µ1Ò}\88\14mì1l±½éî:\90¿ï\19Û\81bÚ
-!ÐÊ»;söÌ93üu4 >~\ 64\19Òé\98¢ì¨\1fôi4î\aC\1aM'X\ fñk\99\92rcr*»\1f¿_\84G'×#\1a\f(L\10j<\9dP\18\13Âôû\14Fíkc\89_U¶Mùü8ü\13gûtV\1dí\rGÁ\b\87Û\8bp\19ÎÂ\87%9\95Sc\9e\8bíÚéxÕ\8eLî<-gwëËûE8ÿ\11R\a\9f<¿ú.U{\8bpý°\9cÿ±\ eï\7f\9b/$~\9fz\83~0\95°\1d\15EìÜÚ\9bgλ\14Înoï/×\97á\ fêd\9c#ÿz\88ru\7f·^Þ\Q\aYñíIYêtr\95q·\11²Ð¹?\1dRÇï·¼:®ÞóþöÞp,yCõÌ\8e\94 \14¨ä\r©45\91òLþ\89©%\91[d\80éåI\7f\95\97Gök<È\14¹_oö_ä§\ 1ÿ\ 3[Ôà§~[MZÌN[\166Ê\1aÔ\f5âI\ 4\ 1TÒ&e\9a]^Þ? ˯³ÅÕí\1c$Ö\aþ\93«YM\8cðõ¤ò8eÂ_rÞXp(lÕÔi\93¿\11\8a¥\7fR¾¾\10Ô \86ãJM7ØÔùsuD"$\ 6I^tþø5\ 1r^d\a¦Ý\174Øàä\7f9þ@&ub\93)\9d\97ì û\831\81/\ feÚ´©¼Zx5\9fë\92öni\8d\ 3çóÅÃÝ;ãî@ù\19\ràH±fï´tÛ`\18L\ 2
-ÙyP"àÿißÞp\12T"®öI;Úi¯RÒ9*³§æ\88É$äLâ_\94ånY°¥Ê6J\ eGl=Þ\94î)70~Ä[\8fÒ\ 5t\93\93Hê1GR)\90£\9c_\ eÔ\9d¢ÝÀ8®Ø¸½ó\9cÁ\18\8cêîà\17x \85G\1e±\11ç®ÀJ{ÉÄÊi¤ñ\0*:ÕyÌ[Æ\9fÜ\v<S\88*\99¶Öx\13\99Ô5e\12\9a
-\ 6®té;§\19[¤Ä\ 3Dï¶\88\10\94ZhH\12¿õé²< ð:Õ~O«¶c\81g=À\9dÔW\82hu,(«XØ\88)ÕÏLv\eE©\ 6È.m
-¼\ 3ÉXÅd¶lÑ\1f\1cº\ 2`±\14\96Þè\0{¾AUd¹<®¨\15\15pKÖ*¯Ô-§[\89?S{Ú0ÅZJ\1dyJ¬ÉÊè1'ªH=íTZ gá\80n\ 3*\91\18¶+ù\93u]\8cFjñg¤rJ\rp+r¼U\ 2]\88Kôc\81µx5Ack²6#\97ÁÎ\ 4\83mÀ6ª\14\99,C<¸\1fe\8d
-kA\fjªe\dXKa\85& qµ"T\8a§Ç\10¢5;À~\13§Ô Ú\ 2W\r¼üºe<^\18ÍL\H\87)ü\93±\8e^4À$\10\8e(
-¯ð:*Re\ 1@\88Q\9bÏ/\98W\93L\18S\8fï\ 3í0ü0\0ª\1eô\93`8¹þV\8fÅ6mt~PFµõy
-þüÖßTìÎÓXmÏON\ 6gÃ`0\9e\ 6\83àl\]ü4nVíÒNR\ e颰Õ!P\178+»qùyvµ¬)\80ÿQ_)\Æ\1e¥\80P¥àrJ¡|\98NIùE` ÄvÇöÐPþ\ry=´e°\11FÅìfAj\ 3BS.\85û±Ã\94ýeÕ¶\f¿ä\ 2\19F]\1d7ÅrÁ\91\ 2Í\15.y\14
-Ø\12 \8b\90f\97·´QP\b\9d!\9d²\92\90º\fÝRQÒ-\1cê®\93=ú\13äµÑÞ*»¯oWªJ\8cmh%7/¢\ 5äu0\7fÙ\8bZâ\8cÚ0%Æ\93ëi]ÖÁd\1a\8cÏÎh<üV50@¼\98Ñ\15ï8\15C;ú¥@\ f\92\1c½ÃÙÞ¤\8f\7f\7fâö§.<\9a\8c\82Éx\8a>\8dÝÉP.Íãß\8fþ\ 6ÅÖþ endstream
-endobj
-668 0 obj<</Type/Page/Parent 513 0 R/Contents 669 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-669 0 obj<</Filter/FlateDecode/Length 1654 >>stream
-x\ 1\95W]o\e7\10|÷¯Xø%\ e Ë\96¿ä<\15Í\87Û\0\8d\93Ö
-\92\ 2y¡î(\1dã;òBò¬øßwvÉ;Ig·@a\e\90O$wvvv\96÷ã`F§ø\99Ñü\8cί¨h\ eN§§tyþjzA\17×s|>Ã\9f×´:x½88¹yEg§´XaËÕü\9a\16%aù)\9e\14Go*ÕFíiv>¥?\94ý ,)[Òí\82>©\106Î\97ôÎ\16þ±\8dÆÙ\97\8bïrØl\9e\ e;>¿\98\9eá¸#ì\9eMé½\8dÞ\95]±]zA³Y^z6\9f^ñÒ/&V\14+M¥~еk\em#¹U\ e®ÖÀÂ\0¾\18[ºM` \85kZ\15ͲÖÔö\98ô\80\89VÎÓ\9dj\96jB&\92 dÝ\86\81\9eÒ1` <Å{££\aU\9bREM]@\98ÂY«\ 5l cIÿTE¬\1f\ 5[P\8d¦\8dz$\15HíBC¬\1dd8åAûi\8evv\ 5ö\91á¢\ 2\88Ò\15\9d¤VêPx³Ô\81*·\91Ãï>¼~6\11U¯\9d\a;\r\81ö{\ 4\ 6\r\9bJqN¡Ã~\90\86\8a*ü\19©ÄN\82Eå\0v\8dõ\9a\97Ñ£ë\80\1fÌ"k$\vf¦ô7\9e\85Êuu e¨\92Ù*pÚª«ëÇ éÐêÂ(|\16\90ò\91ÔÒu\91\82.:à\ 2\19\0\84ÓGä\1e~úëã\9d|÷æãíÝ!/g\ 1\b+¬¼]±\b?\\95)ý\ e6J\87´\0\83óý%\89ë\19Å$Y\8a2vÊ\ e\8e\83k´\10\14Lcjå9ÙÏ·ï¿>Çî\94\16Ð\*\183Âu]\19È\ 2*\88ÊX\907ÊKQ¥B¥KVM§Y¢Jtó"\fçó¡À\81ß\ 2\8cF¬]\82=uÏ\95\0QÃò\1a\ 1¢þ\19\87\8d\130ß\9a\b9JÕL\9c0\81#\0\1aZ@)£ïl\ 1ýó\99\8ef\17\88\11\ 1\1fJlUY\8e\1fo¸½,J\9a\96e\84yWN\ 5xÁ@Éâ\8e\eG\97W´4q\14üí»;º×\8fXá(³\8eü_4jm\8a\17¤Íº\8a\12!\1d9á.l\18\8b¢\19\8e\ 3Â\1ckS\99¢b\86Bt>\13´-ÄÓ¤\8bÚÀ\10àE\1aÚer\13ûKM÷èk\98\93ô\ 1\1dæÚô\86p8nÂ\9d.Ý\17\rÊ
-ðàõG\aú¡êF\17\95²&4(\8a³Á\ 4¡\1aå.\9d$déÃÛ\vÑ\ 29ħÏÖ\14®\1cw\ 1| @õ,\93ÝÊg¿ÊePupÔ\8aG\8a\0{ª8\99\9chL\r\ f\13³Ç\1e\ e\89Sa^O²«4CIdÑ·£m\8bL\ 6\7fb_ü\82ÆúÍ»®\rÛç¯.Y;[~¾½¤\8d\81Ð¥Ô\8dë`\1aj$\ 6±W*½yÐ\b\86Ýl)*¹.¼$¸Î\17úÛK1à\95ñ!âá\ fXVä.ÛÚ¬\98\84Õk\17\r\9a%\15\12lDW¸\1a¬Áé\98º\94Ô\b\ 1[OnÞ\8d\81¸\ 1\80ç\8dlðºeÓrø\azÉ\91å\9b\84;ï[k«½ÄåÃTÛj[²ÉÒµèuB\1eÏ]3
-\9cäw\9cÎÞÊ\18ó\82±î\ 5P+\1e¤ü8!âÕ<Ü8\1c>ïë\17\9a«km×ú09Óðÿ(>6\96fµ\82óã$.)kⱯü\96Û±B\16\ 3\93\8cÈ2a\89ðQã \9e½
-%U\84Ë\ 3\v\1c-Ý\83\945\91\85î\15w¹Üñ\17øV\18!\8e\95×:\9b
-õ6\82ù¢à\ 3è\8eÁ\10Ä\82vÜ\85\89\eXÈEyê.gÉÿÒ\17£Èû\fC\97-ú\19\ 4çeý|βá1\ \b\84\ f \87»7èص_A ƨPæ©æ[
-Ï´4\ 2¥¦5&\9c.Ñ7(\87 ΧD\94cØ\1d*ÌÖ\11Àÿ:l"GõéõàY8\1e¨¼Ýzgîz\11ü¾\ 4§t³×Ú£ðC¯ \8e$\a©1óPt5\86\f\1c\8c\15ç,\ 6\9e¥¥Ã0\11Á`Þ<kl"nYÖ#FK=É{È o\9bLý\84ÖæA&\18ÆP\9fz\92á¸h¬ç½n\13U£Ñz7åB<If\ 2Ýóù\ 6NÄÓ#\ f¡ÔÔ9£^þ©1Æ\94õ\17ÎoGrgZy×H¡xÝÉ\r®àr¿=
-ÍRF\91Ìð\93\9bþ\16s\94î\18Ç;M\ 5\96µ\87vØ\15D<½\11ì\r\80\88áÛ¢ás¸\11ªÁCy\98$û\14Ë\81%\8a\87Z4\92.p\85\84F\ 2\9aѤÚí1\9c®\7f©ì°\86FEìI\9aØ[7
-=\94\12GãæÖ\ 3Ì\864®Ú{ \8ca\91½E¢ô7mQ|òÑ,é{«Ó\15¹pÞ£É\86ûR\9a:L×~µ2gÇ\9cå\bèвÖá2²Ä«Æ&³\ e\81Ǫ\83Nk<ãkPQ ýÁÝ
-S\1771Q\96\94Fî"ðß\92¿\10\ 3O%\e£C-Gѹ\89´5ÛÓó÷½\aÝ2¨aäí Û²ÃK0¹ä\89dS]\8aZãVÎ÷È\7fiÆcúÞaøîð4\82\95Í\7fpz\9eèe*"¿!üÊ÷\13ák\80¶\8dÙ_µØõ\9e«\824> úQÔ\88É\1a\1a\13ù\82\8c\89\92LÓjÜ=ý=ñhE1\f^è´\92fí+'b:¹¹Þy\87¼JïsoþïKëÅüb:¿ºÆû/ÞÏæç\8cïÝâàÏ\83\7f\0o\99\11\1aendstream
-endobj
-670 0 obj<</Type/Page/Parent 513 0 R/Contents 671 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F4 6 0 R/F5 7 0 R/F6 8 0 R/F8 10 0 R/F9 11 0 R>>/XObject<<>>>>>>endobj
-671 0 obj<</Filter/FlateDecode/Length 1549 >>stream
-x\ 1µWÛnÛF\10}÷W\f\82\ 2\96\ 1\89ºX\96l£\b 4uaÀIÚZi\ÄyX\93+ik\92«ì.\10èÇ÷Ì.II´\r'\ fu\10Àæ^æÌ\993\97ýz0¤\ 1þ\ri:¢ã ÅÙÁ \1aÐäô,\1aÓøt\8aßGøo$-\ eÞÌ\ fú\17g4\9cÒ|\81#\93ÉItJó\84p`0 yÜ\19\1eGÇÑÑü\9f\83\ eÍW\92lv·\16Ön\12Z¨Tò÷þÅ\98\86Ãp¼7\9aF\13\1cï\æ¤M"\r-´¡k\91Ý r\9aÖÂ8\15«µp\92TN\ e÷\89;ý im´Ó±NI9Ê
-ëè\8eWRÉ\87Rï©XûÝÃ Ý\958¼\12v%\13z\10i!-\83\18P\ f@Glz©\1edN\82
-\vó¹ÈdD\1fsÀpE\ e»iÙ%aýe\1fß_Þ\0\12\9c\ 1Ôp\17)K"µ\1aÇu.i#Jo\8a\16E\1e;¥sºí(Ü\a\94ªmVekmª@\eé\8c\92ð\8c}\8cS Çå7Gzá?0´C»µ\1d óV\8f\89½ãÊÝ\1e\ 1-Y â\98³\ 6lÍý\8eÛ±Î\9dP¹Ê\970\ 17jª<G\r©÷rí"\9akÊ°5SÖS\ fÌ\99¥\8dr+F\87onñª\88a[¶KKé\1c_®\v×"\1cHm\99Ç]ï\9aw È\ 2\ 2ô²èô¥\8bûþ¾d_0\1d\12yâ\8fµN4*kïg0LIáTª\Ù\rë'µ%Êî\9b£\91]µNw9¼\90Ú\83J \1e§yy\87Á¥Ì¥§\19\8cï©\9c\16Fg0ú\83¾1V\9f9°1\9a õ N0ß\98áx?e¨Ô\85¡\0ý{(d3,vÏãB§©Þp\9cb\9deÌîùþM;X~
-+Ã\8a¼³èø\ 4\15\0 cáh'fôo\8bVzMýÂ\9a~ªc\91ö-gw\7fmÔ\ 3$Úo\1c
-\97×¥¡çooh¸\\10¼$\81\12d\8aÜ\8b\16É\ 5ÞKëd\ 6O\80\0.Yz\7fyÝåß~Ü\89rÍn\ 4Õý\ f\1eÌW\15¦ïÔ\1eëniDÆ\12\è\ 2\81©
-`(\8e\161\8f%%ÊÈØiSFô¦¤D.D\91º\90X\r±¾ð>®?\16Ç jÜú|Ä\7f4j;b\81¿¤7H\90º\86íG¤óìÕû:èl]$»ÒE\9ap©·Òq¥7ZÃÙº$¬¥A\81²¨º\16Å\98¯ÙÉUTàGÇ\a'èX·\9d`° K¼ÊtB¼ô\1cÄ\16ÂÛ£vÒ^©{¹A|:\10¹E9ñÉWåÀ\93.2wðµôN>ãã\13AmS4\98<ï#/5*yÑ)\ e(ºb\86$©ºRs¶V\18Èä]©B+DOB¤ÐX7F¬×pe%\r:áe\13\aþ*\f÷Vî\9c2w¦$\840\9cVíøù\1a·o0º=
- \atVO\13ãP5¹_r'?/Tr~óÂÏË\eØ\fkiàG\9d\ eU?\9fgq\8cÌ\84\14˵ür~õ˼÷s*¬ëÅ+\91/eÏ©L¾>¿Ò(®\ff\9faÜw< ÷ÍR\87°-ÑÂó´Üén£ºKÕîìßÐéVE\7f»Oµûå£-ô\ 2\197\8fl|\ e_\1a#»N·6\7fá¿w\92\8e3³u\9aÚ\ 4µ®@jûÁ c\15j½UË\-T,@2_Æßx¼\83\9c ý\82\18ëäQó\84ØÂØÕ¿\98Ô\Ò_\97óÙÕÕßm»<\8e\19Ç\86|3q,WN¿ã\11\1dÞ\1c\12BjDì¤aU»\r\v\e[üàsx¾·\¡\ 2Ï[_z-bøèVÌìY¨êì\ 4æª4¥\85P)\978Lc*áQNä¥O\12\85&ç\11&\9arí\90g\18\1a\ 1ò \80\0Ö²»Ý\84\99\8eóY\19ÌÎ;PC·1Þ·+\91c ØÎu<eV\15MbxDëàÎ\14ö~Ry¢7h¿ó\96Å\a0\86\8aÜ®\90\9fV\15\81{S#ß\18\e w\11_\90Àº·ÁÃf\1f\17
-æ\0\b¬²aÂ\<\8eÒn?lAòÓn¢,,0d&Vı´ø\95©\ 5\ 6¶\e\91ÇX=\v¸\9a\89-\15è?\81\89\964BâsÜ\10\11ac¥Z¶Wò\9bHd¬2\91¢ê/\95³¨\99\83ÞY\97f½\v4\12\8e
-&3Ö9¨÷7àÙµ6ø\88iÝ¿(ªâ[\8fë\1c\15Ð\15¦v¬\ 5À\87í×FÍ_;\10\98/¹\99Vn\ 2¸×S¾3ÎßvXf\1830\1fÊ\1c\830¿1d\82\86Ê*®\86I\1e \1fTèÅÀ\9b
-Ì&a\99\ 5\86±~«¼\16#õ+¢rÖ¿zxKÿ¢\99e_½ÿ@¿Ï®¯?}øóí«°V\8f\89\1dÐ\87\97I\11\1eh_\ví¤úqÿâ´Êùáô4\9a\9c\9dá=ëGêëÙ»73z\8bÇVªÑp,ý\86.á«s¯ÞÙ\9b\ eÐR\92ð\96}æ\19;\9e\8e£éä4LÀÓ1ãúu~ðÇÁ\7ft\85ºïendstream
-endobj
-672 0 obj<</Type/Page/Parent 513 0 R/Contents 673 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 6 0 R/F5 7 0 R/F6 8 0 R/F8 10 0 R>>/XObject<<>>>>>>endobj
-673 0 obj<</Filter/FlateDecode/Length 816 >>stream
-x\ 1m\95[oÛH\f\85ßý+ÎÛ*\80È\8ek;\ 6ú\90ô²(°½ìÆ\8b-P÷a$Ñ\96\9aÑ0«\91ìêß/9ò%õF~14\ 3òðã!õï`\8cD~cÌ'¸\99!«\ 6÷«Áõû)Æc¬6r2[̱Ê\91ÄI\92`\95Eï¹\ 6ý4Õ\93¥!\1aFfÉÔh
-Â\93ñ~Ïu\8e\8d\i=ÕH9\1d¢(=|\95\86S9+-\81\SwØsksXæGØò\91°¼Zý\90Ô nûÌ£É4\9eJî\b\87GÂ-ÇI²üô\19_î\1e\1eþùü×Û¯/=Ë\97^>\7f·üö÷1&ð}ùÇ\9bÕHª\vÏò\9eÓß<6µp¦¢åµd-øðÇ\17dm/óLht3\8b\17ªóÃ\ 6\1d·05ÁXËûÒm\ 3\a¯\9c\ 4H tF\91qU\19\97롧F\ fË\1a¼w'\90~\18âUFX\19'7\18ÛrG\9a?Áh|\13O4«\92öxÆ\ 4¥+\9bR\14tð¬a;ä\fÇ\r
-³\13\11¬ü¥;\ 6O5íJný)#ö\ 59d\85q[\15/W{U\8eö\17YOÍ^G\1a¹&\86\Nùú*Æ\a\a1\82äP+(\13\89\14\90H<±\83\ 4í!¾:Ø,:;äWº\91hämm*To\90
-ÙT\f$á2v\8e²æBV¯ø\85àùeÜÜPÅ\ eFÕ\98¦÷ë¾l
-\ 1uÂ\11ã\9dëó©ê´\83ÉóÀEÜnKw²ì±\féÊdÖ{Ö©\81\8e\90<^£#ÿ«\84g\97{Õø¶µ\9c\1aû]ì\905¥\88ã\8d¢R6±\94»é\87g\1d\ 5\86"h_táܤ,}õ\199S\97\f9y¡%_jÚP-ÕtÃ\vfÚ\98Ì4¤\8dê\a×\8b7rÚ\98Ö6§\1a\94yJb\v(¥¡ZK\eû?g\9dyI\ 1!¢øsGuÜW?;-\96\13ªO,¹\ fÃ\7f\9cª\b+E\1e¶\85/¢\90Þ\8b\17\1aAC9$`\87L&M\aµ\8bqç:\96~\84\ 6\9a,#\1ff.\80
-12ã°\8eÂ19n·Å\ 5\83GÇ{Kù\96\8eÌ5\15glýú
-[#U\9f£\86¢\1e>ÞK\9bBa"\95z¥¢¸)d\9c*\96\15àÉy\99C\9d8\99'!긮LØ\1eϧ×\95?Ñ£\91-\1cvntMMvÝïËþäLE\8b9\90\\1c®\8fç\8bxv{\8bÉt\1cÏt!<Ü}¼¿Ã[Ú\91å'Ý\r¿·e\1e\ 6nt¼;\9a'²dóHvÈM\1cô\9f×\92¦Ð´Óù4\9eÏ\16ò \90\8bóWúêÝjðçà?}\98ò£endstream
-endobj
-674 0 obj<</Count 16/First 675 0 R/Last 801 0 R>>endobj
-675 0 obj<</Parent 674 0 R/Title(Table of Contents)/Dest[516 0 R/XYZ 0 756 0]/Next 676 0 R>>endobj
-676 0 obj<</Parent 674 0 R/Count -1/First 677 0 R/Last 677 0 R/Title(SAMBA Developers Guide)/Dest[524 0 R/XYZ 0 786 0]/Prev 675 0 R/Next 678 0 R>>endobj
-677 0 obj<</Parent 676 0 R/Title(SAMBA Team)/Dest[524 0 R/XYZ 0 762 0]>>endobj
-678 0 obj<</Parent 674 0 R/Title(Abstract)/Dest[526 0 R/XYZ 0 786 0]/Prev 676 0 R/Next 679 0 R>>endobj
-679 0 obj<</Parent 674 0 R/Count -3/First 680 0 R/Last 682 0 R/Title(Chapter 1. Definition of NetBIOS Protocol and Name Resolution Modes)/Dest[532 0 R/XYZ 0 786 0]/Prev 678 0 R/Next 683 0 R>>endobj
-680 0 obj<</Parent 679 0 R/Title(1.1. NETBIOS)/Dest[532 0 R/XYZ 0 738 0]/Next 681 0 R>>endobj
-681 0 obj<</Parent 679 0 R/Title(1.2. BROADCAST NetBIOS)/Dest[532 0 R/XYZ 0 254 0]/Prev 680 0 R/Next 682 0 R>>endobj
-682 0 obj<</Parent 679 0 R/Title(1.3. NBNS NetBIOS)/Dest[534 0 R/XYZ 0 758 0]/Prev 681 0 R>>endobj
-683 0 obj<</Parent 674 0 R/Count -5/First 684 0 R/Last 688 0 R/Title(Chapter 2. Samba Architecture)/Dest[536 0 R/XYZ 0 786 0]/Prev 679 0 R/Next 689 0 R>>endobj
-684 0 obj<</Parent 683 0 R/Title(2.1. Introduction)/Dest[536 0 R/XYZ 0 762 0]/Next 685 0 R>>endobj
-685 0 obj<</Parent 683 0 R/Title(2.2. Multithreading and Samba)/Dest[536 0 R/XYZ 0 581 0]/Prev 684 0 R/Next 686 0 R>>endobj
-686 0 obj<</Parent 683 0 R/Title(2.3. Threading smbd)/Dest[536 0 R/XYZ 0 387 0]/Prev 685 0 R/Next 687 0 R>>endobj
-687 0 obj<</Parent 683 0 R/Title(2.4. Threading nmbd)/Dest[538 0 R/XYZ 0 786 0]/Prev 686 0 R/Next 688 0 R>>endobj
-688 0 obj<</Parent 683 0 R/Title(2.5. nbmd Design)/Dest[538 0 R/XYZ 0 487 0]/Prev 687 0 R>>endobj
-689 0 obj<</Parent 674 0 R/Count -5/First 690 0 R/Last 694 0 R/Title(Chapter 3. The samba DEBUG system)/Dest[540 0 R/XYZ 0 786 0]/Prev 683 0 R/Next 698 0 R>>endobj
-690 0 obj<</Parent 689 0 R/Title(3.1. New Output Syntax)/Dest[540 0 R/XYZ 0 762 0]/Next 691 0 R>>endobj
-691 0 obj<</Parent 689 0 R/Title(3.2. The DEBUG\(\) Macro)/Dest[542 0 R/XYZ 0 786 0]/Prev 690 0 R/Next 692 0 R>>endobj
-692 0 obj<</Parent 689 0 R/Title(3.3. The DEBUGADD\(\) Macro)/Dest[544 0 R/XYZ 0 786 0]/Prev 691 0 R/Next 693 0 R>>endobj
-693 0 obj<</Parent 689 0 R/Title(3.4. The DEBUGLVL\(\) Macro)/Dest[544 0 R/XYZ 0 567 0]/Prev 692 0 R/Next 694 0 R>>endobj
-694 0 obj<</Parent 689 0 R/Count -3/First 695 0 R/Last 697 0 R/Title(3.5. New Functions)/Dest[546 0 R/XYZ 0 786 0]/Prev 693 0 R>>endobj
-695 0 obj<</Parent 694 0 R/Title(3.5.1. dbgtext\(\))/Dest[546 0 R/XYZ 0 766 0]/Next 696 0 R>>endobj
-696 0 obj<</Parent 694 0 R/Title(3.5.2. dbghdr\(\))/Dest[546 0 R/XYZ 0 655 0]/Prev 695 0 R/Next 697 0 R>>endobj
-697 0 obj<</Parent 694 0 R/Title(3.5.3. format_debug_text\(\))/Dest[546 0 R/XYZ 0 543 0]/Prev 696 0 R>>endobj
-698 0 obj<</Parent 674 0 R/Title(Chapter 4. Coding Suggestions)/Dest[548 0 R/XYZ 0 786 0]/Prev 689 0 R/Next 699 0 R>>endobj
-699 0 obj<</Parent 674 0 R/Count -5/First 700 0 R/Last 721 0 R/Title(Chapter 5. Samba Internals)/Dest[552 0 R/XYZ 0 786 0]/Prev 698 0 R/Next 722 0 R>>endobj
-700 0 obj<</Parent 699 0 R/Title(5.1. Character Handling)/Dest[552 0 R/XYZ 0 762 0]/Next 701 0 R>>endobj
-701 0 obj<</Parent 699 0 R/Title(5.2. The new functions)/Dest[552 0 R/XYZ 0 621 0]/Prev 700 0 R/Next 702 0 R>>endobj
-702 0 obj<</Parent 699 0 R/Count -15/First 703 0 R/Last 717 0 R/Title(5.3. Macros in byteorder.h)/Dest[554 0 R/XYZ 0 758 0]/Prev 701 0 R/Next 718 0 R>>endobj
-703 0 obj<</Parent 702 0 R/Title(5.3.1. CVAL\(buf,pos\))/Dest[554 0 R/XYZ 0 683 0]/Next 704 0 R>>endobj
-704 0 obj<</Parent 702 0 R/Title(5.3.2. PVAL\(buf,pos\))/Dest[554 0 R/XYZ 0 624 0]/Prev 703 0 R/Next 705 0 R>>endobj
-705 0 obj<</Parent 702 0 R/Title(5.3.3. SCVAL\(buf,pos,val\))/Dest[554 0 R/XYZ 0 566 0]/Prev 704 0 R/Next 706 0 R>>endobj
-706 0 obj<</Parent 702 0 R/Title(5.3.4. SVAL\(buf,pos\))/Dest[554 0 R/XYZ 0 507 0]/Prev 705 0 R/Next 707 0 R>>endobj
-707 0 obj<</Parent 702 0 R/Title(5.3.5. IVAL\(buf,pos\))/Dest[554 0 R/XYZ 0 436 0]/Prev 706 0 R/Next 708 0 R>>endobj
-708 0 obj<</Parent 702 0 R/Title(5.3.6. SVALS\(buf,pos\))/Dest[554 0 R/XYZ 0 377 0]/Prev 707 0 R/Next 709 0 R>>endobj
-709 0 obj<</Parent 702 0 R/Title(5.3.7. IVALS\(buf,pos\))/Dest[554 0 R/XYZ 0 319 0]/Prev 708 0 R/Next 710 0 R>>endobj
-710 0 obj<</Parent 702 0 R/Title(5.3.8. SSVAL\(buf,pos,val\))/Dest[554 0 R/XYZ 0 261 0]/Prev 709 0 R/Next 711 0 R>>endobj
-711 0 obj<</Parent 702 0 R/Title(5.3.9. SIVAL\(buf,pos,val\))/Dest[554 0 R/XYZ 0 202 0]/Prev 710 0 R/Next 712 0 R>>endobj
-712 0 obj<</Parent 702 0 R/Title(5.3.10. SSVALS\(buf,pos,val\))/Dest[556 0 R/XYZ 0 786 0]/Prev 711 0 R/Next 713 0 R>>endobj
-713 0 obj<</Parent 702 0 R/Title(5.3.11. SIVALS\(buf,pos,val\))/Dest[556 0 R/XYZ 0 728 0]/Prev 712 0 R/Next 714 0 R>>endobj
-714 0 obj<</Parent 702 0 R/Title(5.3.12. RSVAL\(buf,pos\))/Dest[556 0 R/XYZ 0 669 0]/Prev 713 0 R/Next 715 0 R>>endobj
-715 0 obj<</Parent 702 0 R/Title(5.3.13. RIVAL\(buf,pos\))/Dest[556 0 R/XYZ 0 611 0]/Prev 714 0 R/Next 716 0 R>>endobj
-716 0 obj<</Parent 702 0 R/Title(5.3.14. RSSVAL\(buf,pos,val\))/Dest[556 0 R/XYZ 0 553 0]/Prev 715 0 R/Next 717 0 R>>endobj
-717 0 obj<</Parent 702 0 R/Title(5.3.15. RSIVAL\(buf,pos,val\))/Dest[556 0 R/XYZ 0 481 0]/Prev 716 0 R>>endobj
-718 0 obj<</Parent 699 0 R/Count -2/First 719 0 R/Last 720 0 R/Title(5.4. LAN Manager Samba API)/Dest[556 0 R/XYZ 0 423 0]/Prev 702 0 R/Next 721 0 R>>endobj
-719 0 obj<</Parent 718 0 R/Title(5.4.1. Parameters)/Dest[556 0 R/XYZ 0 273 0]/Next 720 0 R>>endobj
-720 0 obj<</Parent 718 0 R/Title(5.4.2. Return value)/Dest[558 0 R/XYZ 0 494 0]/Prev 719 0 R>>endobj
-721 0 obj<</Parent 699 0 R/Title(5.5. Code character table)/Dest[560 0 R/XYZ 0 786 0]/Prev 718 0 R>>endobj
-722 0 obj<</Parent 674 0 R/Count -2/First 723 0 R/Last 727 0 R/Title(Chapter 6. The smb.conf file)/Dest[562 0 R/XYZ 0 786 0]/Prev 699 0 R/Next 729 0 R>>endobj
-723 0 obj<</Parent 722 0 R/Count -3/First 724 0 R/Last 726 0 R/Title(6.1. Lexical Analysis)/Dest[562 0 R/XYZ 0 762 0]/Next 727 0 R>>endobj
-724 0 obj<</Parent 723 0 R/Title(6.1.1. Handling of Whitespace)/Dest[562 0 R/XYZ 0 476 0]/Next 725 0 R>>endobj
-725 0 obj<</Parent 723 0 R/Title(6.1.2. Handling of Line Continuation)/Dest[562 0 R/XYZ 0 312 0]/Prev 724 0 R/Next 726 0 R>>endobj
-726 0 obj<</Parent 723 0 R/Title(6.1.3. Line Continuation Quirks)/Dest[564 0 R/XYZ 0 705 0]/Prev 725 0 R>>endobj
-727 0 obj<</Parent 722 0 R/Count -1/First 728 0 R/Last 728 0 R/Title(6.2. Syntax)/Dest[564 0 R/XYZ 0 293 0]/Prev 723 0 R>>endobj
-728 0 obj<</Parent 727 0 R/Title(6.2.1. About params.c)/Dest[566 0 R/XYZ 0 718 0]>>endobj
-729 0 obj<</Parent 674 0 R/Count -9/First 730 0 R/Last 738 0 R/Title(Chapter 7. NetBIOS in a Unix World)/Dest[568 0 R/XYZ 0 786 0]/Prev 722 0 R/Next 739 0 R>>endobj
-730 0 obj<</Parent 729 0 R/Title(7.1. Introduction)/Dest[568 0 R/XYZ 0 762 0]/Next 731 0 R>>endobj
-731 0 obj<</Parent 729 0 R/Title(7.2. Usernames)/Dest[568 0 R/XYZ 0 647 0]/Prev 730 0 R/Next 732 0 R>>endobj
-732 0 obj<</Parent 729 0 R/Title(7.3. File Ownership)/Dest[568 0 R/XYZ 0 269 0]/Prev 731 0 R/Next 733 0 R>>endobj
-733 0 obj<</Parent 729 0 R/Title(7.4. Passwords)/Dest[570 0 R/XYZ 0 745 0]/Prev 732 0 R/Next 734 0 R>>endobj
-734 0 obj<</Parent 729 0 R/Title(7.5. Locking)/Dest[570 0 R/XYZ 0 511 0]/Prev 733 0 R/Next 735 0 R>>endobj
-735 0 obj<</Parent 729 0 R/Title(7.6. Deny Modes)/Dest[572 0 R/XYZ 0 786 0]/Prev 734 0 R/Next 736 0 R>>endobj
-736 0 obj<</Parent 729 0 R/Title(7.7. Trapdoor UIDs)/Dest[572 0 R/XYZ 0 619 0]/Prev 735 0 R/Next 737 0 R>>endobj
-737 0 obj<</Parent 729 0 R/Title(7.8. Port numbers)/Dest[572 0 R/XYZ 0 491 0]/Prev 736 0 R/Next 738 0 R>>endobj
-738 0 obj<</Parent 729 0 R/Title(7.9. Protocol Complexity)/Dest[572 0 R/XYZ 0 231 0]/Prev 737 0 R>>endobj
-739 0 obj<</Parent 674 0 R/Title(Chapter 8. Tracing samba system calls)/Dest[576 0 R/XYZ 0 786 0]/Prev 729 0 R/Next 740 0 R>>endobj
-740 0 obj<</Parent 674 0 R/Count -8/First 741 0 R/Last 777 0 R/Title(Chapter 9. NT Domain RPC's)/Dest[580 0 R/XYZ 0 786 0]/Prev 739 0 R/Next 780 0 R>>endobj
-741 0 obj<</Parent 740 0 R/Count -2/First 742 0 R/Last 743 0 R/Title(9.1. Introduction)/Dest[580 0 R/XYZ 0 762 0]/Next 744 0 R>>endobj
-742 0 obj<</Parent 741 0 R/Title(9.1.1. Sources)/Dest[582 0 R/XYZ 0 679 0]/Next 743 0 R>>endobj
-743 0 obj<</Parent 741 0 R/Title(9.1.2. Credits)/Dest[582 0 R/XYZ 0 569 0]/Prev 742 0 R>>endobj
-744 0 obj<</Parent 740 0 R/Count -3/First 745 0 R/Last 747 0 R/Title(9.2. Notes and Structures)/Dest[582 0 R/XYZ 0 447 0]/Prev 741 0 R/Next 748 0 R>>endobj
-745 0 obj<</Parent 744 0 R/Title(9.2.1. Notes)/Dest[582 0 R/XYZ 0 426 0]/Next 746 0 R>>endobj
-746 0 obj<</Parent 744 0 R/Title(9.2.2. Enumerations)/Dest[584 0 R/XYZ 0 771 0]/Prev 745 0 R/Next 747 0 R>>endobj
-747 0 obj<</Parent 744 0 R/Title(9.2.3. Structures)/Dest[584 0 R/XYZ 0 288 0]/Prev 746 0 R>>endobj
-748 0 obj<</Parent 740 0 R/Count -12/First 749 0 R/Last 760 0 R/Title(9.3. MSRPC over Transact Named Pipe)/Dest[604 0 R/XYZ 0 481 0]/Prev 744 0 R/Next 761 0 R>>endobj
-749 0 obj<</Parent 748 0 R/Title(9.3.1. MSRPC Pipes)/Dest[604 0 R/XYZ 0 419 0]/Next 750 0 R>>endobj
-750 0 obj<</Parent 748 0 R/Title(9.3.2. Header)/Dest[606 0 R/XYZ 0 620 0]/Prev 749 0 R/Next 751 0 R>>endobj
-751 0 obj<</Parent 748 0 R/Title(9.3.3. Tail)/Dest[614 0 R/XYZ 0 584 0]/Prev 750 0 R/Next 752 0 R>>endobj
-752 0 obj<</Parent 748 0 R/Title(9.3.4. RPC Bind / Bind Ack)/Dest[614 0 R/XYZ 0 460 0]/Prev 751 0 R/Next 753 0 R>>endobj
-753 0 obj<</Parent 748 0 R/Title(9.3.5. NTLSA Transact Named Pipe)/Dest[616 0 R/XYZ 0 601 0]/Prev 752 0 R/Next 754 0 R>>endobj
-754 0 obj<</Parent 748 0 R/Title(9.3.6. LSA Open Policy)/Dest[616 0 R/XYZ 0 193 0]/Prev 753 0 R/Next 755 0 R>>endobj
-755 0 obj<</Parent 748 0 R/Title(9.3.7. LSA Query Info Policy)/Dest[618 0 R/XYZ 0 545 0]/Prev 754 0 R/Next 756 0 R>>endobj
-756 0 obj<</Parent 748 0 R/Title(9.3.8. LSA Enumerate Trusted Domains)/Dest[618 0 R/XYZ 0 198 0]/Prev 755 0 R/Next 757 0 R>>endobj
-757 0 obj<</Parent 748 0 R/Title(9.3.9. LSA Open Secret)/Dest[620 0 R/XYZ 0 639 0]/Prev 756 0 R/Next 758 0 R>>endobj
-758 0 obj<</Parent 748 0 R/Title(9.3.10. LSA Close)/Dest[620 0 R/XYZ 0 354 0]/Prev 757 0 R/Next 759 0 R>>endobj
-759 0 obj<</Parent 748 0 R/Title(9.3.11. LSA Lookup SIDS)/Dest[622 0 R/XYZ 0 786 0]/Prev 758 0 R/Next 760 0 R>>endobj
-760 0 obj<</Parent 748 0 R/Title(9.3.12. LSA Lookup Names)/Dest[622 0 R/XYZ 0 301 0]/Prev 759 0 R>>endobj
-761 0 obj<</Parent 740 0 R/Count -5/First 762 0 R/Last 766 0 R/Title(9.4. NETLOGON rpc Transact Named Pipe)/Dest[624 0 R/XYZ 0 465 0]/Prev 748 0 R/Next 767 0 R>>endobj
-762 0 obj<</Parent 761 0 R/Title(9.4.1. LSA Request Challenge)/Dest[626 0 R/XYZ 0 718 0]/Next 763 0 R>>endobj
-763 0 obj<</Parent 761 0 R/Title(9.4.2. LSA Authenticate 2)/Dest[626 0 R/XYZ 0 326 0]/Prev 762 0 R/Next 764 0 R>>endobj
-764 0 obj<</Parent 761 0 R/Title(9.4.3. LSA Server Password Set)/Dest[628 0 R/XYZ 0 584 0]/Prev 763 0 R/Next 765 0 R>>endobj
-765 0 obj<</Parent 761 0 R/Title(9.4.4. LSA SAM Logon)/Dest[628 0 R/XYZ 0 218 0]/Prev 764 0 R/Next 766 0 R>>endobj
-766 0 obj<</Parent 761 0 R/Title(9.4.5. LSA SAM Logoff)/Dest[630 0 R/XYZ 0 406 0]/Prev 765 0 R>>endobj
-767 0 obj<</Parent 740 0 R/Count -2/First 768 0 R/Last 769 0 R/Title(9.5. \\\\MAILSLOT\\NET\\NTLOGON)/Dest[632 0 R/XYZ 0 786 0]/Prev 761 0 R/Next 770 0 R>>endobj
-768 0 obj<</Parent 767 0 R/Title(9.5.1. Query for PDC)/Dest[632 0 R/XYZ 0 711 0]/Next 769 0 R>>endobj
-769 0 obj<</Parent 767 0 R/Title(9.5.2. SAM Logon)/Dest[634 0 R/XYZ 0 786 0]/Prev 768 0 R>>endobj
-770 0 obj<</Parent 740 0 R/Count -2/First 771 0 R/Last 772 0 R/Title(9.6. SRVSVC Transact Named Pipe)/Dest[636 0 R/XYZ 0 758 0]/Prev 767 0 R/Next 773 0 R>>endobj
-771 0 obj<</Parent 770 0 R/Title(9.6.1. Net Share Enum)/Dest[636 0 R/XYZ 0 630 0]/Next 772 0 R>>endobj
-772 0 obj<</Parent 770 0 R/Title(9.6.2. Net Server Get Info)/Dest[638 0 R/XYZ 0 786 0]/Prev 771 0 R>>endobj
-773 0 obj<</Parent 740 0 R/Count -3/First 774 0 R/Last 776 0 R/Title(9.7. Cryptographic side of NT Domain Authentication)/Dest[638 0 R/XYZ 0 486 0]/Prev 770 0 R/Next 777 0 R>>endobj
-774 0 obj<</Parent 773 0 R/Title(9.7.1. Definitions)/Dest[638 0 R/XYZ 0 466 0]/Next 775 0 R>>endobj
-775 0 obj<</Parent 773 0 R/Title(9.7.2. Protocol)/Dest[640 0 R/XYZ 0 786 0]/Prev 774 0 R/Next 776 0 R>>endobj
-776 0 obj<</Parent 773 0 R/Title(9.7.3. Comments)/Dest[640 0 R/XYZ 0 437 0]/Prev 775 0 R>>endobj
-777 0 obj<</Parent 740 0 R/Count -2/First 778 0 R/Last 779 0 R/Title(9.8. SIDs and RIDs)/Dest[640 0 R/XYZ 0 181 0]/Prev 773 0 R>>endobj
-778 0 obj<</Parent 777 0 R/Title(9.8.1. Well-known SIDs)/Dest[642 0 R/XYZ 0 686 0]/Next 779 0 R>>endobj
-779 0 obj<</Parent 777 0 R/Title(9.8.2. Well-known RIDS)/Dest[644 0 R/XYZ 0 718 0]/Prev 778 0 R>>endobj
-780 0 obj<</Parent 674 0 R/Count -5/First 781 0 R/Last 785 0 R/Title(Chapter 10. Samba Printing Internals)/Dest[648 0 R/XYZ 0 786 0]/Prev 740 0 R/Next 786 0 R>>endobj
-781 0 obj<</Parent 780 0 R/Title(10.1. Abstract)/Dest[648 0 R/XYZ 0 762 0]/Next 782 0 R>>endobj
-782 0 obj<</Parent 780 0 R/Title(10.2. Printing Interface to Various Back ends)/Dest[648 0 R/XYZ 0 674 0]/Prev 781 0 R/Next 783 0 R>>endobj
-783 0 obj<</Parent 780 0 R/Title(10.3. Print Queue TDB's)/Dest[648 0 R/XYZ 0 414 0]/Prev 782 0 R/Next 784 0 R>>endobj
-784 0 obj<</Parent 780 0 R/Title(10.4. ChangeID & Client Caching of Printer Information)/Dest[652 0 R/XYZ 0 745 0]/Prev 783 0 R/Next 785 0 R>>endobj
-785 0 obj<</Parent 780 0 R/Title(10.5. Windows NT/2K Printer Change Notify)/Dest[652 0 R/XYZ 0 683 0]/Prev 784 0 R>>endobj
-786 0 obj<</Parent 674 0 R/Count -1/First 787 0 R/Last 787 0 R/Title(Chapter 11. Samba WINS Internals)/Dest[658 0 R/XYZ 0 786 0]/Prev 780 0 R/Next 788 0 R>>endobj
-787 0 obj<</Parent 786 0 R/Title(11.1. WINS Failover)/Dest[658 0 R/XYZ 0 762 0]>>endobj
-788 0 obj<</Parent 674 0 R/Count -7/First 789 0 R/Last 800 0 R/Title(Chapter 12. The Upcoming SAM System)/Dest[660 0 R/XYZ 0 786 0]/Prev 786 0 R/Next 801 0 R>>endobj
-789 0 obj<</Parent 788 0 R/Title(12.1. Security in the 'new SAM')/Dest[660 0 R/XYZ 0 762 0]/Next 790 0 R>>endobj
-790 0 obj<</Parent 788 0 R/Title(12.2. Standalone from UNIX)/Dest[662 0 R/XYZ 0 692 0]/Prev 789 0 R/Next 791 0 R>>endobj
-791 0 obj<</Parent 788 0 R/Title(12.3. Handles and Races in the new SAM)/Dest[662 0 R/XYZ 0 551 0]/Prev 790 0 R/Next 792 0 R>>endobj
-792 0 obj<</Parent 788 0 R/Count -3/First 793 0 R/Last 795 0 R/Title(12.4. Layers)/Dest[662 0 R/XYZ 0 251 0]/Prev 791 0 R/Next 796 0 R>>endobj
-793 0 obj<</Parent 792 0 R/Title(12.4.1. Application)/Dest[662 0 R/XYZ 0 231 0]/Next 794 0 R>>endobj
-794 0 obj<</Parent 792 0 R/Title(12.4.2. SAM Interface)/Dest[664 0 R/XYZ 0 786 0]/Prev 793 0 R/Next 795 0 R>>endobj
-795 0 obj<</Parent 792 0 R/Title(12.4.3. SAM Modules)/Dest[664 0 R/XYZ 0 649 0]/Prev 794 0 R>>endobj
-796 0 obj<</Parent 788 0 R/Count -2/First 797 0 R/Last 798 0 R/Title(12.5. SAM Modules)/Dest[664 0 R/XYZ 0 537 0]/Prev 792 0 R/Next 799 0 R>>endobj
-797 0 obj<</Parent 796 0 R/Title(12.5.1. Special Module: sam_passdb)/Dest[664 0 R/XYZ 0 517 0]/Next 798 0 R>>endobj
-798 0 obj<</Parent 796 0 R/Title(12.5.2. sam_ads)/Dest[664 0 R/XYZ 0 419 0]/Prev 797 0 R>>endobj
-799 0 obj<</Parent 788 0 R/Title(12.6. Memory Management)/Dest[664 0 R/XYZ 0 281 0]/Prev 796 0 R/Next 800 0 R>>endobj
-800 0 obj<</Parent 788 0 R/Title(12.7. Testing)/Dest[666 0 R/XYZ 0 542 0]/Prev 799 0 R>>endobj
-801 0 obj<</Parent 674 0 R/Count -3/First 802 0 R/Last 804 0 R/Title(Chapter 13. LanMan and NT Password Encryption)/Dest[668 0 R/XYZ 0 786 0]/Prev 788 0 R>>endobj
-802 0 obj<</Parent 801 0 R/Title(13.1. Introduction)/Dest[668 0 R/XYZ 0 762 0]/Next 803 0 R>>endobj
-803 0 obj<</Parent 801 0 R/Title(13.2. How does it work?)/Dest[668 0 R/XYZ 0 621 0]/Prev 802 0 R/Next 804 0 R>>endobj
-804 0 obj<</Parent 801 0 R/Title(13.3. The smbpasswd file)/Dest[670 0 R/XYZ 0 771 0]/Prev 803 0 R>>endobj
-805 0 obj<</Type/Catalog/Pages 513 0 R/PageLayout/SinglePage/Outlines 674 0 R/OpenAction[524 0 R/XYZ null null 0]/PageMode/UseOutlines/PageLabels<</Nums[0<</P(title)>>1<</S/r>>5<</S/D/St 1/P()>>6<</S/D/St 2/P()>>9<</S/D/St 5/P()>>11<</S/D/St 7/P()>>13<</S/D/St 9/P()>>17<</S/D/St 13/P()>>19<</S/D/St 15/P()>>24<</S/D/St 20/P()>>27<</S/D/St 23/P()>>31<</S/D/St 27/P()>>33<</S/D/St 29/P()>>67<</S/D/St 63/P()>>72<</S/D/St 68/P()>>73<</S/D/St 69/P()>>77<</S/D/St 73/P()>>]>>>>endobj
+ôü½G<âk6\9e\9dÝÎïò·\ ea\85HÒøåäz9/\96Ëk|5Á:¿\94K¿®Ïþ>û\ fD¤iªendstream
+endobj
+483 0 obj<</Type/Page/Parent 458 0 R/Contents 484 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+484 0 obj<</Filter/FlateDecode/Length 1221 >>stream
+x\ 1\9dVkoâF\14ý\9e_q¿A$p0oP¶Ò>È\16)\9bUµÞªR\88¢±=\80[{Æõ\f!lÕÿÞsÇ6¯\ 6Uj\88\f\9e¹Ï3çÞ;\7f^ùÔÁǧQ\97zC\8a²«\8e7\1eÓáQ¬ðÒ¡A§ã\8d¨?\1eá·\8fß>\15\92\96\10î\10Ö\ 6ÕÎ`èMÊ\8d\ f\ 1ïÁôþ\ 1C7w\13êv(XÂãp4¦ vûX\89\9aÁZ\92\11Y(èÓìÃ÷ÏdvÆÊì:øý\8aµüQ©Õîõ½.ô\9a\ frK_76ßXú¶SV¼\96\92}òýJ²;ò\86,é\f;\11ÒK\12\14Ëp³Z%jE©^Ñ2I%%\ 6Aç\854RY\19\930ÓÒZ\87&lÌ÷ú½.µ»\ 3o\8co\98$úÉYaå[\9a¾{G\7fU+\99YÝÒ߬Ý\81\82_FP\8b»M'^ª¯ãâ\96\1a\8b\85jTÚV¾ÚÛ\vÊNØ)7\1e\e\14̨̿ÑjÐýì×Ù=5\9e\1at7¿ÇÒ´A\8fwß\1f>\ 6ó¯\ fO0Þ\84Èü\ 1\e\8bëÆ\ 5ËÎëI\16i¢\90×¥4Ê]Î:\98ý\16\94 \94xÕè·kÄF\ e9>\ 4\96\ 4Ì\82\8c-\18{\1cE´\16\85\88¬,\fÉ×(ÝļnA\ 3%·ìã àÕ\91\ f½>ã_&\rs,]Ò%\95/2e«¼\94IcÄJÒ¢)\14%8Ó\95,ðíö
+¡°Óñ<¿³¸>7ì`uaÚ\ 4F¬Èòs\11\asåZ\89LÖ>\1d\91\96\85Îh»N¢µóåH²\8ff+\f¤\92\85\0Éþe¶:3\ 6\89SXnTd\13èÿ\9btç^\99sxªM\16\ 2\88
+¤28ä\882\ 3ïáUØC|.\88
+ÇóX?\b\93D"Mw-ä
+%§\89wd*\94A\ 6®|ÐMÚÝêÀÞ_¨ºLÄ\9269\87t\82\95q.Û¨eô\86¸é{Ä\fÀkÛï\95õ?\13ÀøD\87\91;²'h-a½ ¡bb\8a{\14\0×j\11²Fæà\1f×»\83\98Ag1
+w$Ø[\e\15\{«\18¹\8fª^ï\1e\ 2«S=r\12J´\19CÛÄ\96tØsÊÅT\ 6ÿ&o¥\8aRm\10\198\e¢Fþ\90Ö¸ð«:¨Ý3ç\98\83=]ZÎôñiã|\ e\84¬\vã\84\8a´Ôiª·%>µI yæ\f\85\9a%Ê\ 1Æ\10Q¤SJ\7f'\84uEÁ´;\91g\11à\r¢¥Án\19S¤Ñº«Âä Ï\\96\84õè\93Ì¥ría\93£$ØV¤³\1cÙ\17-÷¶¯\16ç<\13;
+Ñ\ 5\12c¸¥,\9a\89erìk\8f\8f\186Î\9c=?×}óù\19D\8a
+ÍôæR\86®Ò\966*yA³bâS\92å©+\e\19·(FKIlÕM\98´\83®ÇÃÙ;Ðc¸\9fEõ\198²Áô\11g\7fÈB\93.(Ó\18®\8c\87i\91d¢\9fb)ê\ e¹ç£«\92~é\rsêPx?ËB6Àu\8dF%_ÑÎ0í´\e\9bÿ9â\88\1eýÉd|ÓÁ\7f\8füît0\98v\a-ò\9fHeaìEÓEs8\98,®k\1cqg(\87#áïAÚ0Ñ\0\ eô4²\0pÄàqGó½\89çOÚ\98·"Í×<\11DqÔ\11ý\13;\1fu¾+\92ÕÚÒ{\15\17\18úA\91Ä+\89f\83àúm<Foø\7f;òÞ\13F¾\88AÃÌE?\1aö.D?W\89MD\9aü`þ¬R\1d\8a\94Ù\8b\x\±Ã\9b»ËÃîA[ô\12î\8c\15µE¨_\ eø3}O\b\8b±\88óf\8a¥ .=1U\1c¯z\15\13\81\8bSX\9cd(#±1lþ\9c¿õñ\96ÎN+\1c\ 61 ¿}\9eÓ\ÅhÛ®'"\f^©+\89b-\8djX2\9b<×\ 5·uIÇEQã\u`W"\8e\817wãõ«7ôƸ¬U÷®7/tý1_/ûeo\9f°ÙYpõËÕ?29.\ fendstream
+endobj
+485 0 obj<</Type/Page/Parent 458 0 R/Contents 486 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+486 0 obj<</Filter/FlateDecode/Length 1218 >>stream
+x\ 1¥V]sÛ6\10|÷¯¸ñLÇrÆ¢I}\90\92û\14OìÔ\93¸\9dN\95æ¡ê\ 3H\82\12#\92`HÀ\8aþ}÷À\ fIvÕ:mÉ\12\ 1îÝíí-ñõÌ#\17¿\1e\ 5#\1aû\14åg®ã\92?\9b;\13\9aÌ\ 2|\1eáUIJ°0\9bÑþZá\8bKÓÉØñÚÞØ º½.®Í\9dùß®\8c'¾ãwð\13gº¿ÇóÝ\1eÍ\ f\ eѦ£\1el¿p»àtQ@ÿ\86¬®ïçä\ 5´HP\97ïO\9d\19-b»Ã¥E4X¬%½»»ýô~9X^Ò£\88*u¹ørv}?!Ïkn\1a\8e\ 2¤·\88\a\9fjI*!}tKηPZ\93)¢µ(V2v\ e\0µØÈ\9aôVQ)*\91K-«Ú!\ e\9a¤Uù>\86Ëe]\8b\95¤L>Éì\8a/q\12.\rAá\88C×2REÜm\ fU¼ãL\ 4%\88ªSUP$²\8c´j\92\93¡Yy¶ nÝiñF>\1a ¼ÅZè\8b\9a\0\9a\98:-VÏ×\7f\92\95ĺ(H~\13y\99IÚ®ÓhM¹ØÑZf%B\87©vè!¡\9d2´U&\8bi[¥Ú&~}ïÒ\9cÉó\9cÉxDÃ\11XÇ\7fÄ-«´ÐÉr@ç\8b5jÇ\9f \1fê®~g¹,ίè<æ\ 2Îiyùãq/\86\1d^`q\81\87\8ak b\98Deti4\93Pë\18_,\8fÅ÷å×J\81Ü+zu\92ÿ=OÎÚÖ
+5dÒ¡·èa+°BU¹È¨ã\vÚLø\8aÖh\16É:\12%tµUÕæyç~VZ\82\ e\ 1m\15\96\16\11ª'Ù·\91CÚ";Î\eÍq'jiÉs\1dzlä\88æèvÙ%\91mÅ®n\12êbvê¼\15uÊ\ 2Ü]QÚÌÇ\91 \19<\ 3$§U\90ªH~5¨Uë*S!¾=\89Ì´©}¼ûýîcÛ½>ßç\ 3¡\85\96¹,ì\b\95\95\8a\80\8fÑ{!ó^\16-¯Çl4º\r%Õ
+³¹fn³t#o\1aÙ\9d\121áç\ fo>\9f]»Áõ\18né߸îÍÔ»"÷Ϧ\93ÑM7xË\817\9a-/»ìá\97<\ 6\8c@°\81n\ 4\1a\11´¤Ù"ö\ 6ôRôw\ 2\93Ø\rüÞ¼¢J\82\13\9e¨Bn1¥"\96\15½1\ 5SÿæpB@Wl"\19S¸³\97ËJ>¥ÊÀ\ eZ\13é1»´[\17\8aÓ\98
+¥\89'n\9bê5B]`d/\1cú¥\9f½cMsëKÁA¤J\99\15ßs äÐ$ ²lÌ\ 5{\93ÌÔkl\86\ fV»gÑu\9a˦¸,-$#Ë"R¦\80§²éÂ\8a8v\8b\88U\9bi^ê\1dàeq`ÊXãJel5fÙJ\v¶\ e,Ô)ÜîydQ\96(ù¥¼\1cÇ Ùq\1a3\ 5ý\18\ 1úbàë\82>d&^a¦\1f4m\ 5H`ø\82ÊLDÈQFÂàaÒóLkl %²ÄeP¥\1a/å\87\86N1\1c\pÝ\89»\9bºÎ£\9b\9c%\f+6y\b§è,»\95ü&E»ìgÖ÷ÃENZd¸¸"\f\83ѯ\10{\9bgã\8apn\18\8cD\91\95Ô¦*\90/[uç\82üÐ:PyÊfÏ»íãèÄ ´øÖtÏ\17\95\91ç'ñdV÷ÏÆ\830ÔqÙ`Ü\vl;\rr\14Ï>töñþið>Có`Ìê¬\11q+·FHXâ6/\a\10¼É\99à¾ð\9e*\8dê\10¬1\9eL©\8d5\1c ¦õ+\1añz×\19Mý\13d¿h_7f\at~O\9c\93î\86Jÿ\1f´ï\9d(á_\1dò³=¬¤uq¡)7pK\8cU{ì²OÑÎ%6vHáÙßø\94Æv\fo\f3\99·\11fí!Ð\vf\8e?\9fã ì:ã\91=Aýööñö-½ã\ 3\9b*qª£÷&\8dmÁÃn÷0pq
+âÃÖá¨÷gÌI0q\ 2\1fghÞã¹ÌÕÝâì׳¿\0ä¼P\9bendstream
+endobj
+487 0 obj<</Type/Page/Parent 458 0 R/Contents 488 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+488 0 obj<</Filter/FlateDecode/Length 1264 >>stream
+x\ 1\95WýkãF\10ý=\7fÅppà\80èÃ\9f)\1c$Mî8ÈÑ\96º\a¥.a%d5Ò®o%å\83Òÿ½oV\92-çÜØM°bI»ofgÞ\9b\99|;óÈůG3\9f\82)EÅ\99ë¸4\9d/\9c1\8dç3|÷ñ1\92\12¼\98Ïiw1)n\\9aLæά[:v&ÝZ\97ƳÀñÚ7ã)¾¶(.\f:Ý¥E\19OyëI\ 6\83©ëø4ñg0ëï\19ôg;\90=\83ä\8d\ 3'hágó\9e\93\a\ñ\17[¯·G¿^\9e]|\\907£e\82hM§\13gNËØ\9eÃ¥e4X®%ÝÜ^ÿöéêæf5X\9dÓ\17\11\19}¾ü\vûÆäy;\11\9c\9ebßà³"\11ÇY\95iE\95¦
+»\1fò:Nå\v\95:¯ûÏC£\1f¤¢<S\926F\87¹,(\96ed²PÆ$Bý(\87\f\80àf% \8ar)Ô\16Å!xÆn¸4ò\ 2Ä\rÆ÷ü,ØORòQ\1aJ¥\92FT\92aÖRÄÒ8ô¹¢§,ÏIl6RÅXøD\95|®:¯£Ú\18©*x\14Ö)\15²,E* h\8a²ä\95]>e¢M!*
+ë$\81A8,\8bMõb½¤òEUâ\99tbãqÀK,g\8cR\14\92\ 4\7f\aR\7f5\aþ\95M{<§É\83K\vN\83ç\8c\ 3\9fF>R\88¿\88\aáÇZ[\rÈ\1dÒjðn¹\86©ÖZ\92\99²²áwV+õ\8e\90ÛÕù\ f\9d\19Èa\ f¦ÿ\0J)#\8dðq\16\19¦o Zgf÷¦o`G\9dQçôÌ:\ f§\7f6:®#Y\1e?Ú\1fÞb1¿pg\17\ 1d>½tÝË\897$÷OJ²\:ÑeR«\88 ·\1aL<\7f\17ÀÞÉ\b$:\18\90\ 3QØ_Û?öÑŽ@4§ê\ 4×\9d>\98t§\a©\9b\94Ý}½;An?A;-QZ \95`uµÞ\11Í\824Zxê¨Õr\ 2 ç´\81o\10\0$\a½¦²\82DÂ\f¼Ð*uèGÊ\fr\ 1^f3ÒS\9b|\16Å&\aó\8d.H\15a|_\ 2G(¥\11w\8eÿ±\f¶n\ 4C\10\93·Þç:\12ù}!ÊJ\9aû\ e¨\80
+/©zÙHzÿÌ2#Å2y_\12JLY\87
+.ã\86_<ió\90\1a]oð\80)=<\98\19V\ 5YÀ!¥¹\ eÙä\vc\ e\19ÎÈhô¡\81½o\1e2êè\ 3_ï-øê¼\95É[,æÄì\17¼\96g\9a`B<\10B\1cë'Eu\99©´S)2" ¦~\85\18rAHt\9eë§òÔ\88RÀb§£AíK\92\13»UÆÎ\81\ eêPüß¡<#-¯¢ø_uä{̽ü\ 1ì@ôO\a;\98\7fË\88~îzxoeï\8aʬÈra\86(èP\84Ik\11æ/¤²\bZ@Ç0ZDk[H52(wrëdÛ\94禼4ê3²ª\8d*iij44Û
+:z¶í«k29ºLÎà9º\ e7\ 3E ·üV\8b¼ëN\roÛJqûõö\8e\1eE^3\83õQ\92d ¸a³a\9d¥ JçÌ\96\ 4D\7f\1fx\16\87)·ÉSéu¨\9fô þ\17\8e`\9dF§# 'Óè\10Î?\1c¯·xµ²ãÔöü\90{×£ìÄð¼É\ 5
+rL¡\84Ü\9dmËò§\98YÑ\1aÑ\1c0\f þP\82yEÄ\8f\ 2\93EÊ%\9cg-P¦\8cÖ²\90\96\ 3\18zG½\9d¨òh÷X²\91\ 6§,`F+pZs±fÇG\18æ0òÅ\ 3Ï!¾Çív²ú]×\14\81\87\ 2u( \ 5º\99\f\92\80e\9d$]\v*+\11=0aÛÑÊâ\87\92\15\12Û¶\94a(|ÝàB >ì;à\7fï\0¦\ 2Ì\ 4¶VZ|\9câ\e µ \b\1c\80fTÓuµ\81fÙ[\98ÆpR51å¶x¢ý ±\7fñqÞ\ e¸Þ$p¦\8b\ 5Æc\8cоÍůW_®¯è\86¥ª\11Ñ\92>Õh\94M\1c1\88óêÑÌÅ\fÓ¶WÒw#ô\18sýl\8aÿ=lØ=Þ}»<ûåì_^¿¨\93endstream
+endobj
+489 0 obj<</Type/Page/Parent 458 0 R/Contents 490 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+490 0 obj<</Filter/FlateDecode/Length 823 >>stream
+x\ 1\85U]OÛ@\10|ϯØÇ \117NB\1c\1eA\ 1\8aD+UuÛ\97Hèì;'G\9d»Ôw&Í¿ïì\9dÃ\87\ 1U\88|Øç\99Ý\99ÙÍ\9fAJcü¥\94Mh:§r;\18'c:˦x\9d-2¼Nðß(ªÂ\8dÙ<M\16ïÝ\98\9e\8d\93yÿÆe>øt}NiFy\ 5\92ù"¥\\12\bÆcÊËáWµ§ëÖ\94^[ãNò\87xx\16\ f\8f¦\f\98Ë¡,Ö^ýõ«áê$\9e\99Q
+\1c\ 6\1cM\80,\87ùF;ª: Ú5ÚxGR\15í\9a¶Ê9±VÄ\bä-ù\8dêîTºV´\1a
+#ig\9dÓE}à\ 3îàj»^\9dУ\16áte\9bðT´U¥\9a\84ò\8dâ*À\9dN\93 ³?\11·N9\12ô(\1a-
+\80\8bfÝn\95ñTkçé¡ÅK\7f«X`Åý\90mhÉu¦ü-\80\936»Ö\13\1a
+}(\89\v(Kt\ 5Pë´Ysa½*\1e]\1d\1e\88¸Ç\9aN\89ûÃiC;á\1cÐ\80\15;º\ f\ 2Ý\1f¥M趢\83mA hyuùãæîç]¨\91/îu]£ [ ±C\8f9Ð\ 6©
++\ fd«ðù(|¬÷\85\87I4\11©x2:Mð1\18½\91Íÿ|\862lâ±C|\81;ûFû þk×7JH6ísx\879ȱ±\9e;)\11\fÈñ\81Ë\17µ³½6ñ\1cbÄd:vø*\18l\18#«íÎ\1f :\95\ 2\8aAltÞ5\15Eìèe[" \ 6rµ\1e~'ô]1º¢Òn93\ e¶÷
+x\81\ 4jÚZ4£Me\83 <\vó(ãmH\ fópÚ8Õ\´\7f5#ÁÏ\ 2l¨\12*HݨÒ×\a\84 <\8c\fH*\ e1\a!\ 4\1c£\90\8a\8bå2dõC\17ßMW<ýþàB9AÎ\v¯ËgWµ\89c\9a\94¡&çÑm4>
+\16\a\9au`ÑÞ\v\1e\10\9e\87Æx]\93ö=E\95)mk¼j¸\ 2£öµ6*¡_<-\8cÚ]¡r#\1aQâ\18\9b\á y\1aYÃJà\8b\1c?ÏO½Y0]¾zÄÏ3ÿÔñÓ¤\1e\a\1d°hY!\1aa½Á(»w\98N&\112\f5ì\97È
+\94³h\96=\86\14j\8dá\1d\81AT¢Ü \ 5¦¿,z3ÊòE~\81Ü\932®\8djw\98\9dä/\1a\15\ 1\959±$õ\96\17é~£AVÖJ\18\94¹ë\16i¯ñ\88\84U\17\ 3±è6y\9a-\92ùù9MgYÜùß/¾\^`5>ªÚîØ\9f\9bVËÐÅèxv\94\8dÏyk¼ù\11\99e³$\9b/ðó\80»é\84\99®òÁ·Á?\8b\900µendstream
+endobj
+491 0 obj<</Type/Page/Parent 458 0 R/Contents 492 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>/Annots 251 0 R>>endobj
+492 0 obj<</Filter/FlateDecode/Length 1882 >>stream
+x\ 1}WÛrã6\12}÷Wte\1fV³eS\96íø2o3^;ë\87ij\966\95Ýr\95\v"A\111\bp\0P\1aåë÷4@èÂI¥¦Æ%^\80î>}ÎiðëÉ\8cÎñoF7\17tyMe{r^\9cãÎîÏËO|\87®®¯ð·¥\8bËÛâr¸Ò4OÏ.o\8ak<\9bÝÍøÍxÅÏ>/N¦\8fwtqN\8b\1a1®oniQÅq§\9cÜÛJ\99\15ÍûÕJú ¬ñ\1f\16¿cÅ\15ÍfiÅÙÅmq\815\93¹¥íi#L `IT\15\95¶\92ü{.Ú¥ ¢(xñ9\9d]\\17W¼äÙH²5\85FR%z\138T\10þÝS-J¾\10Ô9»r¢m¥#\11\82l»ô\92¥\8dSA¦\bµuC\bå©7\95t>\b\13\13ÇÖCÌÙeJs-\9c²½ç\95\1c¡´f-\11\19\95QïeEË-ò±^Rk} Q\ 6µ\96¤LL\12Éü.ËPТ\91xãpíFº´DoG\ 1{é\ 6i\b9Q#u\87(ªÅ^ØX*dèÒæÖ\ 5±TZ\85í)¡\80ô\93P\eâxå±C¹Íp1²\9c\ 6
+®lÙ·(\816JëQì\ 12îÁî5AµÜä}Z\8b´\91\fÇÆ\16\ 3(\9dãºK9@"ÐP\8e\14T\8b~%(RK\ f\ 1\19\85þn+\81Hò[\aüP?\12*\eaV\92¼V«&hT¶f \10â4\ 2%Ñ\16~måì\86\84G;8SOZ
+g°\83XÚ>\90]ú²wã\1eÇr\ 6ü"x \84\88=\ 6f\e\8b4\0'w?\83â\89³\9f>Bd\91Ö\13Ï\8c\9dzÛ»RN\95 Ò\19¡}\81÷Ó\8b\99ÿ\13Îõx-ø\9d¹v´\8bpe\ 3Ê\96\ 1ùþÙFL\b\ 5½@8\8as\15\1a´\ 3µÛ\98ùX:` i\v\9e\ 29'µ`P¿öI£ÜÜ\ 1~\1f¶:Â\ 6p·ÔA\19qcfbli\ 6\0H ÛÆ\82ñIe\f=2qÒGÅ\1f\14\15\1aðÁ÷KVÂ) ,e\17\ 5ï\ 5+\aÏ\9e¨\11 6Z#Ý\9a{Í7%w\99{ÎÔâF\8b¥'/eË\81\96\12:\97µt\ e¯Ck\89\ ý\xÆô©\8e6Ãl\8a}AÉi\11\84\84½:U\8eË?¥\80\9eÛ:\9c}í-¿\9c\8bö\84]>\ e¼Í\9eÔ\84Ð}\9cNõ7Wheúo\85±\99\aÿ\1c\94\16\e2½\8f\ 62g\80ÿ|\8bÍfSÔ¾.¬[MQ^7\8d®$\åß\82-\8b&´Y®9ög0\1a=@\1d\fÙq\v3*ì_hUÕGgå¢[a¶T©\1aø±\r\80G\83czÚ465\ 3*\bN-{\94\9f\ 1ÍA\1fÖv\13Ý\16\98z\v\8d\1fk&âí\eÛë\8a-\12\9b²\97\81¥\10\90\81\95 ϽË\17ô¨`¿Q ¯d\17\1dàÉ\1dÄMÙ.£ë\890\86ÿËÞ\ 5Yí<\0T+ÀÝ£\9c\98$C\ 6uoàUÖÀ5<¯0\12Ývïx¿íÄÎE7ðYB\9a\98+Á2k\93\ 1\9c~\97\1aT\87å¨ôþéq>\9dÿü\99ÝQ#c\13v\ e\ 2Ç\86Lñ_Ûà\99m\1dôÇJ\85Erã\12}\97½Ò\15\1e\e`\1aq+EÏ\89FüFq\87Z\ 4\95Bë(=Òjé¸î\_Ú\9a\v\84H\95YÛ÷Dû\Ê\10\95\9bQÐ'\8d\98{&ñ\8cI\193WF±¿ö<H÷üAÍS.\9eJPõQMà\10¸\aÅú¾c\93=M\96\81\9c\81¦QeCu¤\13²\954ÿåéSÄq\14q!ËÆ(\94J/,zÌ5I¯\13\f:^\ 4{G\G?«ÒY\ fÕÂÞòK{á\ e/ÿ6}î@Æ¥µï»Á\84\96ÍyüCh¯\1fF\91a\805lKoÇ"øW\ 6(òß2`¨qwè\89,ÅÑkwra\1dToঠ5º\ 1\ f\12UdBºÃ'\92Jyð\ 2\9e(¿q\r\ 2Îû\91¤\11K\182\98`Ïà¡\98B!\91\82\8fAN\18\9f\9c\c4öb\95\8d%+\87·â\8aÎ0¥ò½Y\11g\17î\1c%7ÿôøðöøòðp\98]í¤Ü¥\ 2¯í\ 1<¢v;;1=ZÙÙh¬Ñ÷9\12\ e\82Õäb\1f&G®¬ù{\88Ì^þ!]â8\94í%h\81úÿ÷ðòü6_¼üç~\11Ýààú\v<\8b»»Ë\859ýåyþô[®.Ƽü«\98>¸²ÛÆ\9dñS\83\ 5¯\13î\8a\17µ|û\aIÐz-p;ø×\ f»8<ÔÖVa&\1dV½ìÙ;ã\ 1Äõé\84»«ûê¯rXI\f\9cð¦Y\9dF :\î\14\v;\1a\88\91»\7fp.9*ôÇï\83तU©ø`\ 4s\88î\170à\85V5Ô\11m¥\13®¥NxÏF\fCÌNÁ¶Ït\8eÏa\18Êt|R2ØêuÂüÞÀ¤bü\83©\1e\a\ 4\1fÁ¼\82.1(\86\90¥\80¼$ý\92µ\8aÇ®\8dØ&Y\1d\92ðz_@\1e+qJäì\ 4Å\9b\86ç²IcGá\0\188Âɯ\fçoñ)ÀÝ\ 1\13X{°\\81frCÙ\14~ýôvÿü忯\13ô2R\87Ó?È>\ 3\1cÍ\16\ 3lgȧ»Àq\98\80)}ɧY¸tÛ#\1d\94¦\f\8e[Àõ\8fÁO\ 5\9bØ0TðÉÂ\0Ì\1f~ú\95T=
+Ê_;Q\ 3ÑL\18\8e\ûÍ\1e\8eË;|vA?p\83\12§Ih:\16Åro\905\ 6DÎý\80\1cè\13N\9bpYÈu|lÜ\83\1f5r»\ fu¬Ë\ 3\ 2)Sê\1eÃ\8f\87u\83\98À·V\1aF\ eÒÜ\ f?ÏÒÓáj\98ö\11\9d¸6~\17\rS
+\riGPX¶p´o\88ä\8bfWV\9cÛéã%rîÀºîö¹gä\92§\1cä\ eÇÃÙ{×\10\ fh\10\1f¢à\81\ 6\17]IÃg{ô\ e\1fn?´â\9d\8f\926Ø\1f\90\v\12\8a¿\8bfo\ 1£Ä¿Ëîºøqoç)Áéãíð]p6»Ãó³«\8bÔÔt\ 4\1c\7f\1d_Ý\\157×·É7g\97\1cñaqòï\93ÿ\ 3\12T.Fendstream
+endobj
+493 0 obj<</Type/Page/Parent 458 0 R/Contents 494 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R>>/XObject<<>>>>>>endobj
+494 0 obj<</Filter/FlateDecode/Length 1702 >>stream
+x\ 1mWasÚ8\10ý\9e_±ß\9a¦à\0%\90Ü7BÒNç\9a¶7¡s_2\93\11¶À:dÉ'É\10î×ß[\19\e\87a:\99&FÖî¾}ïíòïÅ\90\ 6ø7¤é\88>O(-.\ 6É\80FãA2¡ñí\94\7fÇ\8f\93´º¸_\\\7f\19ÓpH\8b\15\9f\9dÜNi\91\11Î\ f\ 6´H/+/I\9aL C^¬$\15"uÖÓ.\97\86*S\8at£Ì\9a\9e\9fî=½\z)i¹\ fÒºLº$'a2R&Hg\84öIfÓ\97\8f\88*¼5\7f\90±áãâ\9f\8b\ 1õ\87\9f\93\11b^Êt{k$!¦§oxOó\89þp\92ÜPsh8L\88\9fÆ\87ýÑ$\19ó«?l\90ôÛ¨Ôf\92TQj\95\8a ¬ñdW\94æÂy\19(G:\9a³\13=I,¡gd_VZ¿^ÅÄËÊçõ¯'y¦Ö Óðê\83ãÛV\95Ic¬¤\8dsGÍüThõ_üåL)£s¥<Xó!\90ð¾*$=\9aµV>'kô¾½\9dó\14K»\95Ç+Ѫì\12\10u i\0[¸=\ 5KbkU\ 6d9ce®m\15¨\14N\14\12\99rëÚ*(ä" V¨\9c¡L\ 4\81^«\14) æ\9dS\ 1Q¦|÷úËÇ\98I§\95M\93ç M*\98C>\88¥Ò*ì©tv©eá\8fÙ7©\ eÇÝ\ 2\9aÞ>\1a_\81ª©-÷NóÀÌQ)Ò\10ñ©s2\r=ÊjØÊ\12d¥\85SÙZ~ðdP W\1fy\11\vË%e*c\88c1 }[ÑÞV\9cL'\7f\1cá0õ\19 Âá3Ù\ 3û7(\85Ó\89\97©\80êP¡\95oÊã´
+y<ì$þ\ 2óøÅgQ,\ 5}ýõ]fñ\92äLÝ7çê\9e\83¾
+:BÓÄZòu\ f³ÅìõþûOhme\1diiÖ\bèK\99ª\95Âõ,½>·ìÈÄ\16öcÔ\9a+\93nȦ\ 1\v.Od[aÂ!dÈ\96u0¾v)ÐHp¦aKËIhÂ\ 3\ 2iÒýi¤é¹H\a\96§è£¯a\9a=½Îæó\9f¿\7f,À\15W¥à\1f·\8a»«÷=>³'\9fÛJ£N$\19ßDÍ[%¨Ì\96¯k\19\92$y¹\84Ã@æ'íä\ 3p\80æ@\93½?\83S\ fM:SJ\83Ðð¶[MCѺ\9a4\97é\86\90\ eÄ»\83\ 5¶Ù\93X\ve@ æ\ 3\7f\9a-{$ôNì={]|\1c_~m^\8duD\83Z\89TFÊtØÙ¨K[\88\19ú-¨ÔÕz}\10Ø\11ÿ6é»sI\1f\8c\81\13\10¾\84\95\85\159\81\14\1d\12\ 2«ËÚß 3(jÕü\ 1ãG_Jë½\82\8a\8f±"«F\83n &üoD0Ö\15BÓ\1cè\16\854ÁÓ5]ÁH@\19\911·ç\9f>u>»®i\16r\85\1eÍt@ß×µ´:çX\ 4\858\9d"ʳ±µò\9bßݱ÷\98L¸¬GÞÂ\ f¬fUma\14\10Q̨T\9a]0³QôÌ2\90
+g¤::;~\ ePFGÁ-)¬\e
+bû\8fB\9dýúÖ*¦\86³e¸'ùVj°\83}9Òâ\11\8dwÔ¦Ã\8fÁ\95\13NÃ{\8er@\13Q\1d7J\18È\84\1d\ 1h\83É\99:\8cA\a©úJ\aàù$Ü\86c¡-ѱ\ 4R®ÐÌ>prM\13\184 x\1d;ÜáÞÕ\15@d\82D6ï£ÿA\8f¥J7PcUÂ\84èÁ¾í×Ò !\9e\158\8c\9e¬\0q\aÏF9£w3ðó\1d\16\14L²?¥,#\1a\1e®\ fò\bçì.¡\ 5_TH\81±\ e#~7{¯·Â)\81"<'\8eù\107\14Þ(Z®&ô7\f\85ÇÄ \92;Ø\1dÙÊÅiá±Ò0¿µ®\82Ì\12z\14\98}\85Í*\rã¯í'\17[H\86
+4\8d9mªb\890à°|«W\1dÌê:ê£\83^ë<\ 4êµ)\9fÃåÝ,opa%5W Çh\10°OK\e\ 6lcìNK\f>Þ\ eê\ 1\r *\8d¦\96JòÄD\8eõ\86ä\16(\8f»Ã\v\17\18\b\97\ 1>'ÈÔC5âöæÞ]Ç·5É`ËÁdG" \ 2¼$j\1a\19Ä]Ñ\93¶Ð;NÇ0\9eú5}x\96ÆÙr\12tåÄ\1adéÅ}\8dï, \8f\80\9f\98;\ 6vm\1a\18ùÒ«µ\ 1ãQ\ 6\80g§\8c\12`Gðb.@\ 1üf\97*-n'a\11\88\17GÉÒmfjú¾À\ 3\ 3\ f\ eSC\8b^ã5ë`1!\8a\9d\r\8e\85\18s\ 2\14¼_u\1aÜ´rôn×¹\19%·L|0Ül )'WXD÷\87FîXmÐûNiÍ\b×#\18\fb;ãþIÍ%cÉ˲ø\1f· a¹aQgè/V\1d\15ÉßïPr×\8cTlÉðù3·¶WÁ3°\12\ 2't\16Û\11O
+øR§¸ÆñG\87\85¦?¼ÃêÞoj^ÀÈ<\ 6\15¶£¸\9bÇ%6®q\9e¡\a\81P(Lúx¤GKÐ\b\91\0gíöì©\85ØS.uÉôu2«ÒÆ<\1dh¯Ì)\8b\9dÄ4Þ°ôáý\86\8cÜ\1dðà|СTÊ\8coÀ¦\r\98£#cé\80:\80(¾;\18\bêp1w\ 4K%.ðUÉMo>\88®~B¨Ã7%ÞRÑ\17x \7f~ýåöð]k8½M&\18Nã\9bimzϳ§û\19=À³4L\ fãèk\85õ\8f_ê7gûÓÁ\1dÓdncÂÏG øØx:N¦\93[|ñã/\ 3c~ô¸¸øëâ\7f+,\86³endstream
+endobj
+495 0 obj<</Type/Page/Parent 458 0 R/Contents 496 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+496 0 obj<</Filter/FlateDecode/Length 1889 >>stream
+x\ 1}WÛnÛF\10}÷W\füä\ 4\16m]l)}k\9c\185Ð&h-?\140`,É¥¸5¹ËpIËúû\9e\99åÍrZ4E"r9\97sÎ\öÇÉ\9c.ñß\9cÖ\vZ^SR\9e\F\97tµü\14hµYãß\vü_kÊN>oO.n?Ñâ\92¶\19>¹^oh\9b\12\8e_âIrv¯ÊXÑ\9dmtmUá?lÿ\91ãóu8>[®¢\ 5>8»ÉU\12\9c¢ß\94M\vcwáè\8aæóîèb\1d]óÑmn<y\9d4ÆYJµOj\13kOÉ`Áë\86òÎ
+\19K\12Ã9)O¦¬
+]jD\93\ e/h\89Tp\9aTì^4{½¤Ùâ\1a\99Â×\9d¥&×T)ß\ 430\9cÒ\8b®\ f¤ÒYî\92ÿp\eÑ}¢\1a¤\ 3GM^»v\97»¶\11[\89K5íñ\86l[j¼Bèª\bÐÀó|\19\0Ùç&É)q\16Î8ÜJÕ\8dIÚBÕä\9b\1aøxjÜEV»\92¾|¿ÇÁTWj§}D[\ e¸v12% ÕäJ\1cÃá\1e\10X\87¿\ eä2jtÁ8\93ɺ¤{×jê\8caýÈv\0dê\10kç\88\M5¯Ã\ 3v\8cc\ 5gìH\915»¼)\15ÜÂ\97$\1d"©M8\91¸
+\11\99&?ò>I4Q\1eÄò\19\ 6¯§4À¸ÓVת\0v^GA+\9fh*+á\8f±°zOYkE/\9d\0\7fªªpÒ\1f|\ 3àö®~F2æY\ 3@ã\7fa\ f¨\84A\18`L¨ÿ8°a¬7`6\b\9eÓ>exNû÷Â\8b×ÄoʶhÌ,>4º\7f\eXâw\80\99\15Ç°CÇGؤ:3\16ðÅ\a9$\1eú£§ä*) Xðe\1cA:\99\03C\ 5õÔÎ#b\93x2d\ 2oìV\94á¡\87\ 2Um^áämAe=ß\9dúÎ)\ 6'Ê\1e\8eÎ É°Öz\98H\1dø³\9a ÏûÒêCÉ\Q¸=\v\10b r£ßÃ\¶(<ë\1a\bÈ6
+\99}{øýwOú5ÑUC\1c\13j¬4Vqæ\9cÙl~\19-7+t"T¯ê²\r\8f\86Ò\12£±¦õ,6l¹¬ð9ÊE\94F7='çä]Ç\v»÷\8d²M÷\8eÅ?Â\83°nð-\14\11\1f'É\1cÏ\10f \eú°(b¨\16\15Â,ë\1fyQ\ 5\9eö\86\aú\9d×vâ\ 3ZxGfü\9eÌ}\8e¯\ e®¥¶\ 2¤\\e\1c*pî~¨ÁOÓ\91\ 3lc\r\f4NÙ\1dú/\b\f\12tµÙ\ 1Ù¢ûä\1dºÉÿ£«\18Qä\99¸ºF³.\ e\94»\ 2]¶+\1ciö]wBÀÀ³0\8c\83àÈ-sOè[F*\80\15,\84¦Áålq56Ê[$¨_\15wöszØÞÎ6,f®\13´|´õÒAB\93\8aSÞ Á\91= ë¥*Ã'¬ê\87\9bû\ 5ân\11.k/°:\9b4g\11÷qEð\80\ 1©(\88N«¶E[\1fY\9bo"\9e\8dg\8b\91¶ùR\86ßÀZ(\15G\15\97Ö@\95\95~\1a·Y\16èé@\82\82¡\91\860\ 5YK{S#c\80Áô\8b¡\89\ 5RBß$\857\0p%\952&\18snòok\82í\a~ðîÍ\9cÅ\9b ¸>t@\83Ð+¤þ\84`ØëÄiÕúüihÆݨ\92£C\83\96OÇäeÀ)I\ e\rG\100\ 1\8fdz\91ÔÇ\ fa\16\85Þ$\90O¼n\11ý[Ï^~\8f^d6óÐb\10;?\ 3qØzdïX\8e¼]-\ 2\95\8cK³wTrk
+9³ä\8e\9d\r\8c\80ÈÖ¦ºæ^\82R\80/ù(\84-j\95O»4x\92{é(Sí\8dH5
+ÓIQÌU^9ÀÒËÃc^B»ò\8c«\88Ã\84Ë\1aZÁØÇ\8fû?>cÆ'ÏX\94úõ`P\eOzaæ\88»Ñ¯\94h\92ëäY\8ce\85Â2\92\19\r\97Ò¾ Þ80m\e\aiq×C\vHuè×\188!\92î >Áªð\8cA¡dDOØSLì\ fál¨jdq\b½"É\1dz%¡\86ð\fí\v\10ãgÿ\r\17)\ fð>=\ 6+\r%\ 3`8ô\88þvíQ®%6$l«\8eë" \e\0BO\8cç\95³å)\19`Üþõôðíîæû\97¯\x÷øùëýÍÝ\9dØÅ&v\8b\87\1c\fPÁDN/\98á#O\85\89ñê\82ÍA\r¬\88}¸w\ fU\82\8a+\f\14ñ$úðõ\8bü[hcL%\10QÑűìxqâ×G.a\1e\ 3·6
+ëGf E¸Ýa\15µaÂ\0ú~û\ 50 ¥\83â3å\13cà\11eÞ&~Áé\8bûþ9ê\\9e\8fª\ 1á\\aÏ\16\9d]¢\7f×\92&\9b_W\11àM\f²ù\8eQ\91f\a\95P\84M³-c\0\ 6m;\91\0úï\8b¶\98& nâß\1eáÀ\8d,±/Q\12Ây\9bßÏÁ\1c#\84\96Ñ$KÈ¡\aÏc_h±²¿\13°\80$i<U!¯Ç³Ç\ f\1c\8clf««°ð¯Æö2¿Ú\84ëÇ\16µ\1a\9b\1dÖz.T\91\9dõ«Ô\920Ð\11 ¥òyP?\9eñÊ\89f\18ÜÈÎ\1eöQf\91\81ïGÓØ:%\8eI¹\rí]n\12\\97ZY/Ô%Êò8TÞC-\1dhý0\b#T\15¸[xÜ\ee·å\85"¢ïY\83\11!5(¦\8eX\90\fX\18ÒUrõÒ-\rrï\19\12áªf\99qÛ\8cѸHí¸åâ\8f«ÑO¹êS\87}\rq=\9ey±\12î\8a\ 3#!W¾c\9fÊ?\87êì\16\aÏâÉY\98b'4\f=U\8fÜ\ 4\0k\92×O%ó\17Ñ]¯e\80\84?r)ôXµB\83Ú\1f\97\9dä§!̦\95Vè+Þ\8b±\80¶\95¬ÒضrÞu÷¸\1câ\8a\86ÁÞõ-L=ð&K\94¬#\19.£Ãpê'ÑÕ¨\9ek\99VÜ\1a\8aj\1c¶¼ßï¡\9d¦ÑÂøâÖ\89$LáRíLB§¸J\9eJ÷â\16 µ«\92\e¶ä·s6\´\86mì:ø¼¸Ýt\97tÙËÐ<d©ùÉÍ\7fµ^EëëMØåæWÌÊ×íÉ\9f'ÿ\ 2«\11j\ 3endstream
+endobj
+497 0 obj<</Type/Page/Parent 458 0 R/Contents 498 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+498 0 obj<</Filter/FlateDecode/Length 639 >>stream
+x\ 1µU_oÚ0\10\7fçS\9cú2*5n\9c\84$<ÒuÝ&ê6²=ñb\92\vñ\ 6\ e³\1dZ¾ýÎ\85"A\93tL\bBä»óï_â_=\ e>}8$\ 1\841ä\8b\9eÏ|\88\93\98\ 5\10¥ ý\ fè«\11ÊÍ\82Ïé¶ea\10\ 5,n[\88Ò¨}T\14\fXÚÖ\11\ e::\82aGG\10&,j\eÅ\93a;\\1eøípãà9Ú«¬wy\13\ 1ç\90\95N¤8M +\80\84ò}Èò¾\98ÏaU\1a(\e\95[Y+\ 3VüDh\94|\0cµT3ÃàºVo,äµZ¡¶p_¡\82¥0\86\16ÁÖ`+\\9cg?z\1emB3\8b~ÂÀÝ_Þ\f\81Ón%xÁ\0¼0"\9e´z+r]\e\90
+¦k\8bµ.P³jSÿ\84Ó§\8e\848RuVI\ 3\ 6\1f±A\81&×r\8a\ 4²BXl\ 6\15XJ\85ÅÁ@\ 6Y\85fW$(\ 5\8d¡*|°¨\8c\á|í:Ü\9c±XL\85\ 3@Ûò\90$¤móº@¶#A¸K¢æ\85|Cáí÷ѧI\7fÚ\94\17ËÚLÎ[À»\19\1am£\9d ´\87£
+ÂB]\96\ 6-P\eÜK[9\11\9a²Dí. \f\bEÒ\e9s\84òJh\91[\92§\13Èç£\81¬Ä¼A\82\ 1\a\1c \17Æ>º¹^:û·\18¤²8û\13\82ñÞ\9c\v\1aß©\a\11?B\f
+Ö\ 6+ýv\v0~½\0Î\96\1dOSÕ\94ìI\9fÇ0\95vr\ esií\1c=T\85$O¶2üÍA\ 6£]íA Hq²\9bø;y]¤ë\ 5Z¹ (k$ÿÉn"L\ 18û6þp÷5;ë¦üñD\94ÃÀQ}%ÑÎD:CÆÇ=\e»H:G¶¹;\91\1f\9d0\9d\88'\80ù\9f4ÜKõË\9e©\13'Ù¥ñ%\8fß^\18\8fDú/âmÏ\9dg\18ÓíIÇ\93\94ÅÃ!ÄtäÑ«x<º½\1aÁ5Òk¿^¢6ð¾\91\ 5ºtxO\95^â\ f]içñ\14%\11KâtsÄñØ5¿Ëz_z¿\ 1\f \85¤endstream
+endobj
+499 0 obj<</Type/Page/Parent 458 0 R/Contents 500 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+500 0 obj<</Filter/FlateDecode/Length 955 >>stream
+x\ 1µVMsÛ6\10½ûWìä${LFü\10I¹'¹mZÏÄ©k©=i¦\ 3\92 \84\96\ 4U\10\8cã\7fß\a@´¥Hò$\1e×\1a\93 \ 1ì¾}ûvÁ\7fÏ\ 2\1aã\17P\1aR\94PÑ\9c\8dý1%qâ\87\14g)Æ!þ\15§ÊNLð*;:\11NýøØD\9c\ 60pÄT4=±#\8a\8fîÈ2\1aûÃEð\0laäO\ 6ã1\86\ 3PÄä\8f·\97íÚ Ë\9e×\ e1]/ÎÞ\7f\98R\10Ó¢\ 2\rI\86Ai÷\8eiQ\8cæó?g\1fçËQÞW\97\9b¶»üÌêåùùâol\8a)\bÜ&/L±iÔqÝ\91^sêÖÒ´\1c\ 5 åB/Ï©\13+ÉKª\85Ö5÷¸,\ 5\93$¤æ+®\88ij«
+\9b \ eèAèµ\90\ 4\7f\15æp#ÝZ£ðÜsÂÕwî\9f1{Q\0æ\ 1`~ó\1a°\ e[\14\1a¬ß\ 1qõ:\8c÷\86Ð'>Or©¸î\95ttºÈ[0\ 1n{¹%ó\80ä\¬¾\93ÚÓLÞ\e&ß\ 2å\96Ö7Åf5ù\ 4îÛ$ù¿qhä¹/Í1yA\84æ\ 1A*\ e\11CøXÃ:z÷Çü×ßî\17ï^ Ý*øMB{5ñ\87\ 1Ùþ\80
+7ýÁ\8bbWk\1fg\9fè\96If*xÎ\9a\9cÑìîæHcð\13CÄb-:êx¡E+©ä]¡DÎ\9dº«^Ú×\1dIî¨jØ?\9c\18íz¸¿û\91
+V×>YKBVj\98µ¶f%å\9cKã{\87ú6×L\98¦\93?\12ÿÂ\1a!\85\Ù
+rh\8b¶\84\13\89Ü ¨v]\99n\8fP¨l\8b¾áR[/>ÝhÓÖúº$Ùj8üÊ]Ñ¢.K\9blì\11\8a×\8fhŵ`yÍ·ù\1eÓÔp\88^\85ÜxáÄÏp\a7&®¿ØF,Gè\88´Q\85Ô\97¦9Rù<lv^7Û÷\ 3\ 2\9c Æ\fmÿ\8a5St±a\8a5\97ä\1eJ¦Ù0¾P{S\17ÊL.Ï\7fØO\9d7 L-Ú!\83C®\bÙ,yeùE³.j\81 ý²ÔwH,Úûüö\9a´b²c.ë¨\ 1\13)\12«xÓj\90¿\11§+áÎàç\9a«n\1f\182ì\ e\9b\ 5Òf#±\8b\88áÜC\89Um]·\ fÝ\95Ù\84ÃÜ\v\13§VKß\95͵ì\9b\1c\9aE;Í\1f5 b°c'ç+\ 4Ô\99p\8c\r\ fG\1cÎÁr\14ød\9eñøTÜ6\r'm\1aZ!\93ãÖÂCk.ÃÎ\þ\88¦oèe¨\ fkQ¬\aQæ\1c´\9a#\83\97{¸£#\9ev\80¿àÉ\ 6ðM>âC\1f\96Ñ+äzÓ\9ac^\r\87ø\ eÓÐ\ 3@\1f2=9´f \1c1f\11\9e2\93\1c\9aqÊÿÊÐ3D\17ë\83\80F-0m@[ü\ 3ú\81a'\18#NÓ\8f¸Õµ\95Ô\1eõ©CðþC¶ýP
+&\91\9fL§\94¤¸'\13#«ùìözF?ñϼn7°G¿ôè"ÎL\9aÙÕ^:FßÀÒS_bq\1aûi\82oC«ÓÔlþyqöûÙ\7f\9bÞ> endstream
+endobj
+501 0 obj<</Type/Page/Parent 458 0 R/Contents 502 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+502 0 obj<</Filter/FlateDecode/Length 1568 >>stream
+x\ 1\95WÛnÛF\10}÷W\füR\e°\18IVtÉ\9bÒ6\85\81$Hc¡E\v\ 3Á\92\Z\9b\90»*\97´¢|}Ïì\85¢\18Õm\11Ä ¤½\9c9sæÌð¯\8b \8dñoB\8b)ÝÎ)«.ÆÉ\98nW+ü\9d-\17ø;ÅÿZRá\7fào\ 6ß¿Þ\¼x3£É\846\ 5\9f1_.h\93\13Î\19\8fi\93]e¢,?\89\9dz¸z¸¦ªµ\rå\12_\99L4\92\9a²TÉÊÔ\87äzóùbL£Ém2Å\ 1Wu.\1añ\8a\ 4í\8cÒ\8d¬©1½\ fûʶ´WeI©$+\eþÙä\87f+\ 1ºik-sâs\12Úà+\86\82\83Lá\9e"¨Á½ÿ\ 6q\84H#ÆeB¼{4}I£ÛU2gܸÈJ\12à\8cQìD-* ø\96<ä\83iÉ´\8f[\aØJ\9dß\90Òn©©s\ f\ eûTMb·\93ج3\19\17tgQ
+ú¾¼â«Aøh:Of|óZS«zä 'sJU\83\9d\8d|Ä©ë\ fw¤Û*\95uB\7f\0\81Ý\9a¶Ì=o\9c\82'Q¶\12t6[º¿ÿmý\96\93\95Ð\1då\86´iè\8b6û\ 1Mûô!"X\7f²uAçÒfµJeîòÙ'kâÉ\ 2}}Äëû\1fïîþ$ÛÔJ?B\1an7?\ eØ\vYå@\8aVg\8d2\9a\84Å\86Bq¼\81÷ë÷ôNh\81\98]bzzÊMÖVR7\82·z=\14ª\86\1c;ZoB\8aÀ\a_neý\ 4ê4ò\87\1cY2U¥\1aÄ\ 5)áS\0\8c§TX\0hw;£\a\1cñ)ß\ 3\ eüDÈ\95Ð(o\1cϼ\81åz\ 4"²\ 6¿\96\a ´¸¦#5æ|z$5
+\102x\96Tw\ 1à·8\1a)ô²ì$\89j\8a\95Ó]\86:ίn\8f7Eù¯5ã\1a\bÜë6F×å\8akïæù\8c1W\ 3\ 6O\92\86í\853\ 2°tyï²sIB3÷Î\1cð¤tV¶y\94ÏeûV>Éò²\a²\8b)Æ0;\86\159}¦\8e<Y\8fêI\ 6\8d¨o®<ÓC\83o`,\9cÁ´-
+\bgÏ\ 5\ 5\7fjQ!Po-3\89}¼b\10dä\eõS\8b\ 3\9fr\9a"\9bÐ\87ZÚ¶\12)\84à,3Ô/\92Å\17ZH\94©ò:ÓM\10¨/énáàNvÌA¹ó
+®×HÃË#3ÿEZ¶M;QE³ën?j\8aî
+H\9dNWC3åáÆ\856Äé}\81˯ o²6TJýØl¿ËãÜ£\1dZ1e&w\19ÊJ\85âO2\12å^\1c¬ë\0þoì\ 3\9e\ f`ó\rã\ eîia¨Y \eF\95Hø\r\90ëQ\ f\85O\94Ï÷\0øÞ\19¬ëM¸\96\7f|ñfE\13\18u\81\86;º\9dxÏþèº\94÷_¿(¶R,\9ar'å\86ÒÑ×S2=\ùÎ\98³ºÒ\ 3Õ®\14\1f®cCA\ féZJ¯\99 3ý\9fÎá\15\9f\19\18§Ò^ô}KûÁ\ 6l\8eèóÒÃ
+\91sp£\9e\1d{ñÅVã~í5Öó½Bä\9f1?°\89\a×jdYzL¢2-¾\ 6\r\1ep\18\1alô¡®Æ|iùö\87ìø#£«3\8c\1eÆA ¹8BÕDàôZXÅÞæäËçå(ÕÎ
+l#ê&úÂ)\86³ª \ 5³\15Þ(zy\ fC\90\87\84[Ðr\90v´x6@\98\80¦° ¢\r¸Û´©Ñ?°²¨MÅkÑ%\9d$\ 6qâ \93r~\9d\9bdm\r¯bÔ\ 5»\ 4F\883\ 3U0¹®\f£CôúÑËi²tc ¤Á¹ îè\87\ 5þ$KɹìrÔÙ_ÏG"g\18F\=\8aÒò\9cgJK6?\819ÊÍ\90â0\bÊ\1aÌ]ª\82-\a\97<^ìݺ;z(¾ÐéN¬äwfød\94õÛíM¨;?|B\8c\ 3²\8eý±?s(×)Ð\18\90-vp¶÷² 5\84H¹q\fâA\14ÎyüV7W0\1e8i&%äpR{¨\ 3¬çºóz½ôC\9d·\88\9bñÃõ¥Ë\1c{L\18\1eÙe¬D\9dçG\8f¡
+í(\9e\83þrzÊ\94O\89i\89\ 3g\10\8d/B¥sÔ\ 6wƽO\14z#\86¥A`\83\92\89ié{+íq»³`\88\98\9fÓV\81.\8c\80L\9e\1fÔ\1c\94cÃA×u\15\92\19¯æ`\b\83»SY\18Ì@X|\8e\8f³PN¬°\93ìéÒ£\80\13zoÜ{\ e\84ÊÙê|ɽf\80Ûh@ÿ\f̽ºtsT¡¾~ʶ¢þ´kj÷J\85ªíz[&4çËÅ\8eÀ|iìÚ\1a\ 5s6@\94NÝÏ÷Ã\95Oܳy\9f!ïx\95Û"\r®Æ¶nÜBÛ4^k!ëa\b\eÄ\15|:Î8\1dm\0\eª\9a'\1cÐâý<®\v]È\87×mB)HÍ\93k\1c¹ìNðë\92\1d^\8a×Í}\18\9e_¼Y\86wÕÉb\99ÌW+\9aÏ'þ\8dó~ýîõ\9a~â\91Ñìø\8dí\97VåN£¸v´\18¯ØÓ>\ eÚöl1K\16ó%:;~\9c,ùþ\9f7\17¿^ü\rÙ¦öcendstream
+endobj
+503 0 obj<</Type/Page/Parent 458 0 R/Contents 504 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+504 0 obj<</Filter/FlateDecode/Length 546 >>stream
+x\ 1\95TMo\9b@\10½ó+æè\1c ,Æ|äbÙNSEr#U¡ê%\97\ 5\ 6³\15Þuw\97¸É¯ï,¶\9cPT)\112ÚµgÞ{óñüÛc\10Òà \8d`\9e@µ÷ \848\8b\83\88Þ)\9d#úh\84Æ[\17Þõ]\ e,\85¢¡\94$cPÔ@áa\bE5Û¨\1a¡j¹æ\95E\r\96\97\1d^\15¿('\ 6F¡.Ç\8fÒ ¡¬Ù\ 6µåBBÍ-\acu_Ù^£\ 1NL5\9aJ\8b\12k(_`\8f\\1aP\r¬\1e7÷÷¯.VÈ\9d\81JI\a@g:¾'6\ 1\14-\1a\1c l;H b6§\82\88ø\9fà\e§\90êö£$\88Ýï?\81\83}9 q[\84NXÛ¡\8f²\16\B/\8dØIÒ%¤Å\1dj\97ëSiT~=c\ 1¸;]/\\ f\84U©^Z§ßôå»:\8f¨ZhTשã\b&\9aÂÜ\12L£zýiIó)Ö\9a°\86Ê\9efGa[P\a+\94äÝY'þ9Ð\14\f\95È\rXÍEç\1a<´\1ej±\13Ö<]\8däÆS\8a×\91\Õ4\ 6-XEß>üØn\81vc/$·Äq\9aå\bo1Åëþ\83'\95ôO\bÐ\eZ8·J#¬d\8aU\ 2\8dñMÒ°}çN\9c\ 6õé\ 6¤S\12\r\aå6\84< È9´Øng\ 6®²o\1aÔËår$4\9bbl¡C¹£\ 1\91Gܼ\ 6\v|\ 4+\9fbµ û}Irh\v/XB6Jï¹\9b>ðg\1a´³ëEX\12,Î[\1d\9eð®ï²³\89Ù"\ fX\9eCÄ\ 6¿<®¾Wp\8bÏØ©\ 3j\ 3_{Q\ f¦óY\9a\ 5 Eúi\98\ f\9e\1fùôí\ f"Nã M²3aîZó¥ð¾{\7f\ 1lÝ^Nendstream
+endobj
+505 0 obj<</Type/Page/Parent 458 0 R/Contents 506 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+506 0 obj<</Filter/FlateDecode/Length 1286 >>stream
+x\ 1\8dVMoã6\10½çW\fÐ\83m`¥ø+¶³Å\1ev\83\ 6] \87\165ÐCu¡eÚf#\91^\91Nâýõûf(YþÚ´ âØ\169óæÍ\9bG~»\19P\1f¿\ 3\9a\ ei4¡¼¼é§}\1aÝ\8fÓ!\8dgS¼\1fâ¯Ò´\92\aÃQÿÚ\83Ù\8cúióRñ¡O³ûô¾ 1NïÚ\18£I:\1f\fFx+Á¿Ì9> \1c^\10æöñ\9e\86}\9a¯\80p2\9dÑ|)ÏñMÞ\9do4ùr\91æήhe
+Ý\9bÿ{Ã\e\ 6Ó¸!\19q\róe÷I¿\99\\15ôÙªbï\8d\8f\vÇ4\18Ô\v\87ÓtÂ\v¿(Ï\v\8bý\a
+\88ÎAÉxÚV.×Þë%9K\8a
+c5-öõ\7flñ)\ 1\fªP\\89ÛU\14ö[íÉd\8dG0\15äa¥s·¶æ;B!\0r0\94>% A\90\165RÅH¿ë\8a²îVUªôi\9eõ>òb´(\19NÒ±À-\94}®S$ô\ 4X\9eÀFPÆ\1a»\ 6ØbO¯\e\13´ßª\§¼=AÍ`oÙ\1d¤Ä\9fññ\90üÁ\95¥¶á,àB¯\8d\95x¯&lHã\ 5¸\14y]\9a$w\ 5(qüyëvvIÞ¬-@w~íð·\9d_:Yï4ïð2ï_:\ f\ 6a6Z-\11\9aéõÔÔs\96^!ÛV[òßvLö¢Rù³\ e\9cñ\9f\8bT£ËT\7f0\99:üw\96=9©3ß`G\8e\r)r É´Ô+µ+"IÒæ4ë\9d\10;\8eY\93á]Û(Þ¸2\95\ f\14^\9d\ba£ì²\80
+ô[^ì¼yÑhUT\ 4\9dkà\ 3÷0ß\10\98u\15\98\ 1®R\ 4G\85
+\
+Ç\14MFÕ\81\17\ 6t¤*\9f+k\91lå*~r,¡\84\1aö-\88\91ÉxO" µ\f^n¸ÒÛã\r/ªØ\9d¥¨[tN\96\8f£\84J£\88\83{Ö\16s¨d\b\83\93é\94Á\88½t"\9c¬[à\r¾.yZÒs¨\ 4Ê)bà\16\9cq´4/fÉ\1cU®DR\0°Q\ 1è
+D§¡·BÔý\91:\9f:¢iñ\1a\f"\9bS2\1aÄ\99ü\9d\e+Ó·¢¿\ f³ÇÉn\1fO\1c\87\87°]À6\ 3iAúKR\9eàAt\90\9e\87A\9eÙ\ 6\96ËLgݬG«\9d\8d\ 3\94u½Ö\94³\f²îè!ëá!\ 4¦·\81[\7fÅn¬~\15á\1cRñ e\99Å(±£Qó\1càD¨LÐBçj\87\ 6\99@ Ì\ 6³2Q\94¤Á/,\8f»ÆQ\85£cqÄsq\13kS:\e¢U\91ÔEðK\8eÓN?\ 2Gç=µ\93+6Ö\b\9aÛÝjDÔJ¥Ú7\ eIÆbxà³ÇySú\fæ[Ï$ö<æÏûÁú\99jrWn1\93|4@\950Et\1egF¬áÀê\ 1rcóG\83Òxù×\1341À!y[\86è\97ÅòÌ]}ÑÕB\ 5S
+L!,¶\9bÝ\14\84媪\8cZkè'ì*{\8e½±6\1f»^¡ë\1fDyØ\1a-\87-¶Ò¥{ÑË\8b\1a\8eܵ©á \ 6ÎÒgæC¥\8cÌÁ\11\99\80]G\8bc\16{Ò\8eå!\87\9cPµ\91¶S&.qmÎ\9e 6zÀÁgì\ et8©ôʸ=9\80ó§§Í©JX·^T²Ð\90|\80¤y óÊy|\rß7[´7®\821ð\1cÔ\8a_à ò\85ò\9b\9f±\1cIÎ2>¦ä¬\16!6\88¹¥ÑàŦi!G;\83\83ÄÚSY\18\82Û4\8c\7fÇMáhɺÖÙ¤¥\e3|P`«ã³òa\vÐ
+Nï\93\83\91Ñ(:\94$·!{Õ?Þê\93ðÕ`nÀ\19{ð:Þ¡8¿³¹
+Ϊ\0\16åúÀC\9d着¹güìÐKé\11Ðô\9b*A¸\|n\1fûtÏf\v£\1d\rAÁ]:Ã\7f¸(Õ?RC\1cÔOG\ 5Å\91ñ¡bifYÓ\1f\W\8f7\v:nìI[\84ïVII\93{*\18ØÁÝ®`O\84°\15;7G\7f\1féÿAÉ\ 5½\vhVß]\e@#\µû#®\87MöâV<\9e\8eÓé\ 4Wt^1ì3Èßæ7\7fÞü\0\0¡´²endstream
+endobj
+507 0 obj<</Type/Page/Parent 458 0 R/Contents 508 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+508 0 obj<</Filter/FlateDecode/Length 1074 >>stream
+x\ 1µV[oâF\14~çW\9c7\92\b¼¾\80\rÛM¤¤MªJÙ¬VK+UK\1e\ 63\80\eÛC=&l¶ê\7fßïÌx\fd7\17©*(Æñ\9cËw¾sóß\9d\80||\ 3JB\8abJ\8b\8eïù\14\87\917 Á(Á}\88¿JÒ\ 2\a£\11í.Õ\12ÿø4\f\87^Ð\88FC/r²>\r\92À\e7'Aä%»\93hÌ\86ùC\9dhÀ\82öäP'\8ccoØ\9c\84\ 3Ü6\98\0Ð\ fw`÷O\10\98ç7\97\ 6m0\8e¼\91³ò|`£ \8dk\10ãÖø»\980?\8f\f¿¹\1aP\10Ðd\ 1"ãQB\93¹qìÓ$=ºQµ¤z%j\$L\b6\93ÝKÒk\91JM\v\95çj\9b\95K>§ªæÔÕu\85\aÝ\1e\®+©eY»sU6\8a4\93õVʲ\15&QBs\8aO÷xòWǧ>è\v\ 1å(+\8déZ)ÏJÙ£u¾ÑæÑBm*\82\87Tʹó`\11l³zÕ¥FSËTÁ8+{4=úSê\1eýÖ-(U\9b\1d²¬\9c\ 3§¨3UzÓã\ 6B\18#1\80p\rU\88³ôÆ\88Pº\12\95HkYiÃH¶,U%ç¤J\9a墼3Îp\ 4·\969\92¸U\v\18)
+øÑ\1eMVòÁè\9e¨2\7f8y\144\82RË2û
+\9b\1c\v"A\14\fÎØ\Ãy!áÝúñXùÍÕ\98\ 2 å$ö£`\ føÏûÀ?n²êN[\85]Öû!gÝ%\e\19n³*¿\88b\9dË·Vç1{\80õ(¤>:g\84_(Ró1À¨\ 48:¥\1dÊ{\91o\90xS\164\9dºXÑ\8bNù\87\ f9r\13á\ 1÷M´\ e|ß\81I\f(\80\ 1³Tdóy.r¦é¤Tõ \ 3Ò T 1{iB)¦b£%e5At\91Uºf\87©¨U)ê&\ 3\a5h²\87êÖ\9b\9cu\9eçæ5\9c8þþCÄ\9aI\aþº\ 2Õ\vU¹R;(\91ÿ-\7f\1cÀO˧³)\9cÌ+²\88`\90\1aUHýBõ½\96á\1d@\86k¸~=\9e\ fh½¶ WRÌ\9bîë\99ÊHs¥y\ 4Í0\15îd\8d1Ó½íN\8f9!(%\9dA\9a+\8fгE\86ªbÙv\86ôLSóüDIÕ<&ø\9eç\95ë\147
+55\93ÆV \8b¼P}\1c)\7f>·ØÉöç--E5\13Kùã\86´\9cZQô²é`[çO7\1eï\86
+Ì Ã\9eo \v ÜPã\89që\82Ý\e\v\a\99ÝÃ\80Q\87\81µÀ\92°\93\bK\98'\12\9aÿÓ\ 3¦ø\97C¤\18\88aâÅ|̳A\e\11G³.f\1eR´@ãc` _\18\ fvü½TvDïXçÌEÿoOO\89þ¡wM`gô/]~¸ú.²Ý¹S6\8aî1Ùú:cK\86\82vÖÃà\93ÆZ-\8b¢û¹K7çï/ \95ø½Îc³VÇÊ\9fvé\8fóëß/éæú\90HG7Ølè¾\10:KE\9e?p\e\80¼B\8a\92\97³¨Y\13/d}·CEKp\81Þ¡Í\9a\13ðUV\8a0«
+lOW Øμ7aÌ5\v:g\86]Y2\95謤»Rn\8d\97é±\19$}¼¾àue~\14xd!\8f\9a7\9a`\18yñxLq2ò\ 6ÃÈ\94Èùû\8bsúEÞË\y\83ÿºA\7f²Z?\80\14K÷\13\1f\8b®YüOìÏA2ð\92\18o\94,\18\ 6¬\7f9é|ì|\ 3ó,þ\vendstream
+endobj
+509 0 obj<</Type/Page/Parent 458 0 R/Contents 510 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+510 0 obj<</Filter/FlateDecode/Length 562 >>stream
+x\ 1mSÁRÛ0\14¼ç+öF`\88°\1dc\87C\ fÉ\14z\ 1f:¸\9crQd9QkKÁ\92¡é×÷=%\10 \9dLflé½Ý}ûÖO£\14 ýR\94\19¦\ 5T7JD\82"\9b\8a\1cù¬¤ç\8cþ½F\13/./S1û|±¨F\1779Ò\14Uà ŬDU\83\80\92\ 4\95\1aÏáµ
+ÆY\18\8fNÖ\1aÃ\16®\81|;ßh:íѸ¶u/ºÆj\87?ºwp=:Gä[ÙËN\a*i\8dÕ^\9cV?G\13â#øz\9c ð;½NÒ©ÈøèÈx@&bSk\eLcöðÒÂmµ5v\8dU/Õ/\1d m\r¢è\8c\95a_\146\1aªuþ]\95@µÑL\97\1cÙ´å"j¹\9fß]\1fy<¸ÿ0ú\9bäW\89 ³£ê\8fs²]µy&á5\8c\r\8e\f\8b\f,Tâq~ûã:ÊÁYcz\1fÎ \9f\ 6ÙÂ\9b5\rg#;ÛE\12\187hÿI7Ë\8b\80MïºXþ\ e3>²\82\8f\96HXý\12QÕ\86@\15ïd9¾¿Å\17\9c,\97ödyúϤù~Ò\8b\9b+¤4g\83Iv\89I\9e\8b"\ e½rCØ/Ø\vÅ
+\8fY"\8f3\8eÒ\98<ç\92¸\b
+\ e\vWÎ6f\8dÆ´\9aUJ¬LÀ`\aÏ\16\98\ 6;7@Rt\ 6^\fy×êßçØI¥Î©Ò;{\ e\1d\94ÀÂ\85\rß\19EmÒÊvçÍg\9f\96c¯¤å¬,OcJ^¥0þV÷\8dë»}`âþh\f\81GÙ\ e\9adQEë(Ü5\9e\8d\ 4\91´+J\e¹J\8aè\9c\1a:*ß\8f=;|Bi9\13Å\15»u\bÆÃün1ÇWý¬[
+mïñm PpÓäµvR&Wÿ·3/sQ\16³Ã·\92q×u5ú>ú\v\ 1%2âendstream
+endobj
+511 0 obj<</Type/Page/Parent 458 0 R/Contents 512 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+512 0 obj<</Filter/FlateDecode/Length 1691 >>stream
+x\ 1}WÛnÛF\14|÷W\1c\b(ê\0\8eâ[l\17h\v4A\f\ 4hë´vÐ\17¿¬È¥´1Éew\97\92õ÷\9d9äJ
+ã\ 6q\0\9bÜ=\97\999\17þ{t&§øw&×çrq%Est:?\95·Woç7rys\8dßÏñ?X©ôÅ\99>\9a¼x÷pôæö'9?\95\87
+¶®®oä¡\14Ø9Å\93âøO\9bÞ}¼»\17×\8a\91Ï{\96\7f|¨ËW\ f_ôÚÙõpíõÅåü\1c\17\8f?¶)ø²/\92óípèRÎÎÆCç×ó+\1ezX¹(ø1\12W>$)}Ñ7¶M\92V\ 6\7fÙX\ 4·°Q¢o¬ø
+\8f-\8eÇ\1e\8fôDáÛ*x\9c7rÿÇ;qMW[Þ7ô*øé\11è\89\98Vã<\95×g\17Ct+¿\91{Ó,\8c\14¾\83µ\8dK+Zoæò°²[iÌVV¶î¤³\1e6e³òb\80_íý\93k\97\82èhúç׿~z\ fH\92\r0\13ÌÂÕ.mçÌ\17Îίæ\97
+E\92\8d\81\8fàR²$?\98ö=ãƵ\88@é \1fR\aÒ\19¼Ê9ð\12<!ßÖ\ 2ÒuöBÆ\ e¡W\7f\9f£\rilü\ eîV\ 1ë\82O¾ðµ¬\10\9foë-\ 2B\8aÑJ?Ú ËÂvi.\1fLÀ{Â\9coEy<\8e}±\12\~\7f÷÷\87\17pæãO¿\7f¾\7f|\ 5\17k+ÿÆ2±4u\r\ak\80\ 3yÕ\ 6p\1e8)j\aJ\11_Eô\f0lº$\8a7iÖ,\ f¨}<îLH®èk\r¸\vJÏÁyÄBº \7fåBL²6µ+!\19òº\ f\ f¤PnÀamÃ\94R-\80h\8b\1e\9cn©à\85\89¶\84D|ß\96;\eo:\13ãÆ\87\12dÂÓ\~SÕÈÂ?Sð}]\ 2\10Í\1erÌi\82é\12bk·£\8a²dc¿\88É´ \1f¥@±©Æs&Z!\915\842É ùv\1a7ÄMd\17(\13i|L`´1«l\ 4À.E[W\90"E\8a\83Tø\98?S\ 45³¸Ò*°k[ÏðjÌ¿ñ¥eá\fÅÌ«¥L_§I
+<G±ð\84©Ár\8b$\90Î\8cj\93ú\ 5«\80²\878¶RùP NQ¯ª\ 6ÖÃX\fü\95\ 6\a¢²ù\býO¼«\13Ø\11k Ùñ6HÓ\9cN\90¶ÃcÍ\13ï Eª\8eI\ 3 D\97l\9c¢ùñ\7f\11a@c¤\ f\8d¦°DªÌ`WZ°Ís³hcd¿\8a6õÝl§ü\13Y@¢¥Ç%¨d\92Lì»\8eå\8a\82(
+ßt\88\91úÍ\82Ó6\96#\80\936ç\vð=\ 6Aô½âÙGÞÒ(R°\88yh0\aALü¢\95\8aúv\9aË×þ²²\0¢¶gÚUÔÇZB\aK[¶Ûü\82]\8a]C\1fd[À|â´tUe\ 3é@|É>§x\ 2q\9a\rµ\98\1dm¥µ \13Ù-¡\a¿´ð\11ôO*\f \ 1dþI×cM³Õ\1f°1m$;âxÅ·t5¦Ã$JJ#\97ÊVfµ_.ñ\10ñù\99\9eD²\8fÇ\895\81&\80©\16å\1f×\96~\13©e\ eϧ%ºE\17\1f_eYåJgX{0\ 6´Fÿ[)VlÏêx$K\19\1c\12+]|\12X\1f\9b^6\9c\aQÎwl¥0\ 5[\94dòI%º\az'R\ 6\8bÄ\1dêÓ/\912Êw|$e ´9
+4\e¹Ó\16\8dãPf\1dý\84Æ\rº\17)\18ÉØ;SCÄIöÏr\0è\9a\1aöA/"ÑãN°Á\9cFÃ+1\11Û¬äÂ\87\80!9q\9eí1\0\14ÌÂ\81P\9dúÚ\r2ÜSÄ\86\1d!\ 5ª\9d\91¯½£XAjÖúPA\11½+\98Z\1aÈÎ\97CÌ Ó± *ÇJ_\eL\9bÆ|ñ:5\10w\81©1\1c\9eD;ÚÁÅ¢îÑ4wÑ7¦\83ø\81°\8aØ\15ö\a¾\92¸ÅÒ\83MG_\18\80±$,_5\96\9d\8d\81@\9d²\13¯û¹±+ÊÒ\82äq\9d\1aö¯](ؼ\9aÃHD«ùñØb¸"¤Ò\91\ 5ô(\bhí ±±z~Áôâè\1auÿâ\ 6së°sÝmZìF+×1Ê7·/®\8f\94_Óèæ\82¸ÊÉz\92W\8eQ%Ñh\8f\9cm}\ fäÛ\1fÙ\\11\16ö\8f\85-\fî\vß\94\9eoüfhÎ\15"\99eU\1c\14(ÖCì3'd¶2E:áf\83JàªDäy\8d6\86\ 4ò\8a3½/Gèh\81ýd\19¥ï¸\ 4aÑ\rºéÀ.Æ#¦2\99\1c¥\ 6¡Ü\ 2Kûl¸ær`¡k.¾ãâ¦>)ÒapkQéî«Ðóí\84nxÇr\82%\84\9b©5X
+tâ0ìR\16\1c.^\99T\85\91>õ°q\883\ 5ÓFôdä¬Å\ 6\9a9¬ô\1dh·l\f¼±Áv¾\14,Wö[\fá\9eù\8fЫ<\92kìã1\16´\82``\95\82\aÝB\94á±\9aö\rH\ 1&Ü9¸\13\8a-x\ f>P\90Ø&÷¯àk\92þ$÷\ 1ÝÝN\13¬Á^\1eǯ\ 4\9dÂ\8ci 6¯_Ú³è|¬\1càF°¨\864Æ\11µ3O\÷»D+ãjí\0\80\ 2\9a\94\98úª¢\1at+)±HaÕò\9d~\14\95\ e\ 5\85ÞÁ\96\rh\19L\13¥vOX"\1aódg\ 3\ 1t\8eù7
+\ 2\90N¼ë¾\10\9c¦\17Ür\95\94\9b7·7û\ f´\8bÓá;é;_}\97×\97óë«\e|*âCîü\82>><\1cýuô\1f\8a«ã9endstream
+endobj
+513 0 obj<</Type/Page/Parent 458 0 R/Contents 514 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+514 0 obj<</Filter/FlateDecode/Length 1794 >>stream
+x\ 1}W]Oã8\14}çW\ñ²Ìª\14Zª\16\1ea(+$>f¡³h$¤\95\9b8\8dg\1c;c;-ý÷{®\9d\94n\86]!\10Míûqî¹çÞü<\18Ñ)~F4\eÓÙ\94²êàtxJÓé\19þNÎgø;Ư\93TÄ/&ã\8báä£/F£épÚÿâjqpr3¡Ñ\88\16\ 5\9cLÏg´È \ eNOi\91\1d-J Ã\ 2¿^®¥\13\9ajë½Zj<°º Ê\1aOÁR(\95§ÚY|Q\rH\99L7¹2+j¼tFT\92*Q×x0 ar*¬Ëø[A¾\96\99*Töiñýà\94\8eGgÃ1ü\1fí®á$ÕÂ\ 5\955Z8ò%BñC>}rsA#\ 4ËQ\1f\9fM\902î}\11Þo¬Ë}:ñ\9e×ñx\86Üqâ^\98-=ß_Q¦\954ÁSS×ÒeÂKøi/ÓRÂ/§lb\12¡\94Õ\90n©\14kIÆ\92Ê¥ M¹EÖrKyÊ\1e\aL\0X> 3½í%ôR¼\0\8cÎ\15 +ßý\915zKª\88\ f\81\17p& é\1ac\12HÀ5ØÌjZ9)à\ 3\a\85¡Ï\8fOó/w_\9f\a¨DÏ\9b]®\95m<[\r0e~\vô½ñ!:ÈE\10\84ÌÝ\96\9cE\ 1\8dähD\88EF%\97\1aå\8a\b\ 3×ñ4áúÕ¨·=|\98\ f\112 äUPk9¤gàRÄz\ 3S Y©7\99§SïÀFÀø¶2\14à\1eté»z\16ÕRà\1e\1f\0Â\962[KÚ¨P"LÀ²Ü\92Ä\a Ðx\86\87\91<ì<\90\ 6Kõ!Ù\9a\99\89\1a©¬\84-Äã)\19f®²ÝRö1+
+T/ße\99\6ub7È\90\98\8a\13¦©\96po\8b\94]\86b¬¤\1f\10¨\8aà>\8a*\15µ\v«ç8\ 5)´¶\9b½ Á*\ 5v®\85V¨\18'³V\ 2Íccê\95ÈJT\8e^\8f¶V\19.oÑL/Ê<,ÀZfÐë§\8f\81õ ¡u°Ì¸í`\93&sÛ\84Y%Cis.aÎéìµÊ\90\1el\90¸\b²ðm®2@è\8côÒÚ3\89bß«ÌYo\8b@F\ 6tè\ f.\9d\96"\8fêÑ\99@\87ùr\9f\8f\87µ\16L\15ù\16Hþl\14à\0u\ f\87´`*TR°ú \9e\9eïÈzúý¯ùÓ·ßIU\9c°0\bÚ\82ø¾\ 1ýv9$Røj\19C\802)([fM\80Û\96]{ÊÐÅ\aßܳ=¯hÎ\°2\ 26ÆÇY\e\18$\87æ\90ìSB+²¦B\ 6©¢ó\87ÏOß¾,n\1f\1f\86\ 1 ²ÖU¬;¹\84{ý?2wg3\ 6\90ýï\8b÷Nä\16p¥Ó\19pTkOb\r\8b1¸Æä ¯ ëÇç\13\10&gÖI³VÎ\1a\8e,Ê@Õ m\1cz§Ó\1aP\ 20¼\eAM\1aHBG±N¶÷ª"â\81\96\8cà©V?djÁ×O\94\95Ö¦æµ\91E\f\8dG\89ráP\82Ì\ 4ýz\84cK¨2\98ÈÚóïlB_ðPc\f\1e\ e\9fùÚ\1d\ 6\9b¸æøÒÙµâ\ 4h©B\17t§m\8fè£J|çA\93æ\17\8bo$Hn}´å£\1c-£j :\e³\15¤Ô@ûVFæ\88Ô±\ 4\f)Êdç½\ 5\1eõL7 \10Ë&âÛãM²2 \95Z3åâ4\80\9bQt³³\fv\84Æ@þÑê\8fwóñû\0Cb\f`°u¼\81\8c½Ô2\83«\1d\12ÑJìé\9eoæ\1c¬á\ 6\ 6t ò%ÖíIÿÂ\12÷+xaA\1dx\ 2:\1dPV[\0,=k,ÇÑâ\93\*\83pR*Qº±\ 58[;\85<b°¾T\ 5\ fÌÔѽà¼\94U¬`\f\80Á\83o(`\1cÀ\9a\a.R,\9aÀ\1d\rÉó¬\92X)$\16\ 6¶ßQ!Gy·\98é$ò\1c|B@û#¥?\aÚÜú,¹\ 5\9cÚ[t°\8có´\94\1a£\81¥°â\8dbGÒ\9cr!+Þ\8axÌ!*xnV+È3ÀË\1cô\8dZùôZÊ\80}\81á\Û,j\ 2ã ûÂb¬«¢Ä¯,\ 4Â\a0 1Q Ñ\87m£í·ðRÆ\91G\85ܤÀà`å\ 4°dÉ^n\81MªNKÕè´\8f}à\92²¾\97Í
+[O\9cyñ3_¶ù³Aè\9e
+g+\80âO6\96t{\15Oð\1fJëÈ\89\84 ¨\8d]\ 5Ë ßú\80Òö1Fê¨\1eÔ\97+öKCbÌÛ8»\805\96¬¬#÷a\17L\1aXÑA\e\ 4(R\0 ô©;\16wý]óC£\1cµIÛ\13 \1f§\15s»ÝÎ@!ÐP\15i¿\82\v³µP\11©¹\15\9dâF`¦ÄdÑ0±©#\ e\1e»U\ fh\9e8Ø\8aC»¬\ 4\ 5|ØU\eô\86!ôà/\96«4Öø \9b\84\v(\ 6Æp\1d7\ 5.K«@¬{XS}TEÚà²-z^w\82\19\83û\bÖ´©g\8ds\90U0.õzg:m\11qdµ\8aúá>~-Ñ\e÷6\97ÿ½\90¿0ÐboÏÀò\86)\8dGq\16#gà\ f\9eA¨\ 4v\8dÝ«Àaζ+Ø>d(ÐÞØ\152p\0$cüøv$6j§úe\7f=º\9e?|ûûáña> øïÓüòºý÷åévÑ=¾¼»k\9fÞ|¾\8am\1cOc~BøÓV¸Eñ~YBD\96Þ\8e|i\e\8d]
+úÃ;^bé>c6%ï¤-k¸C»ðwJÁ/PL\8cÈç]¬¬\86)ç^q÷\10\18Dàä\9bà\ 19`Ë\0\e¸\89\80\ 6¬ãJÄp¿»d\9cy\91a^´\91\17X\1db«\9eÜ\9c·/\8a£Ùùpzq\81×Åö\85íùòþê\92®yû\86=çé\8f\ 6oI\1c×qwöxvzñË;Úd6\19Φçx\87ûÙxÂ\17æ\8b\83?\ fþ\ 1\80ëòyendstream
+endobj
+515 0 obj<</Type/Page/Parent 458 0 R/Contents 516 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+516 0 obj<</Filter/FlateDecode/Length 1885 >>stream
+x\ 1}WMsÛ8\f½çW`|i:\13»¶óáä²3éGvö\904\9d¸ÓK.´DYl(R\15©8Þ_¿\ f d»JºÓv\9aP$\ 1<<<\80¿\8ef4Å\9f\19-ætzAYu4\9dLéâôbrAg\97\vü<Ç¿FS!\1fΧ\97o\7f\98\9f½ñáãòèÃÍ\19Íf´,`äârAË\9c``:¥evüÝ\99\17*U çIÿjͳ²ÚEü\16\8dw\13Zz2UmuÅ\8b±4\81\1eTµRÔ\ 6\1dH\9bXê\86¬Ï\9e¨0\16++\15tNÞa+¼\95%ã|®I¹üýòçÑ\94ƳÓÉ\1c\1e\1c×VeØk\1c)
+ºV\8d\8a:]\95\9bFgÑ7[ò\r\7f,U\83\8d\95®xiç\8dê\1c\84¡\9d\ 3Ø\14K\8fK\ 3e¶Âö\r»\99w¡àkÝøL\87`Ü\9aw\89·À8ø¶Áò\89Dð\7f¦Ùȳ
+Ñnq\93.4ûÈ÷`9¶\8d\13\18\ 6!¯¶\94ëBµ6R\81ÐàjÐ\14¶!ê
+\87J\15)´uí\9bH&Nøì\87\9b+\9a!_\9c¸ñéÙä\8c\81[6ªÎ=Î\7fÿçsH»öé\1dÏ\17à\ 6v]ÓÃíG\0\8b\0\91\8eL9jZG\ed\f\8bϺQ\96Z\93\87>WÞÁ\13äQGä\9cÓ\ªºÖ.ЦÔ\9c!ä»!@ç\90\19øê)n|Ê\8c¸p\90W1\91\9b\82\11\ 1gø SÀ[¸\94ùZ''\84KÌ\92\96 \88Mð\89\9cÖp ·\aÜ\92\95ÉC¾\10,á½ìe\97¶ }u\ 3x\83¯ÒuHîãqhq\ 1xýðéëã{\9cFLø\v^Sí\ 1ÊÊê.ÒJ+Ä)ð\vq9)ì\14na\9b\995\1c\aÎ\82\1c±1YDjá¢\1aZ\a\91,N\9a\R\aDæ\17)aw\1eÌ\96û·¾\95T(\e<5W\94¦Qì\13\8a³#P8\ 4µFõ Ã\1eß\eØU\ 1¤\9dнÅOÈ\93æë4Ý\\7f\93]¹\8eÊØðgÆÜ3¥\[tógÂ,aJs\98\8aóü\8c\98\998âv\82@¸\928\128T\9auI£ÖÕ\8dy6\16>Ã{aog
+Iøk\ 6\99\ 1ü\\18\1d{\80Ý\109I¾\oý\86F\7fº¯Ë\17\Ô\ eètê!\ 2&úåÆ\8dGz\99q¨\7fåÞE\ 2ÝD_\84Ù\fÖÀ´5(>Ç\12\80X\7fó\1dj&¤pÄ!\fSzëC¤ûO\9dÞq¥õ\18í\89÷£ø\91\94å\87qwK\80\90{v©ð\96£\14B\1e\0\9dy\96Ù¨í\96ÃÔT)3äwÖZ@#Täô;\1dWÆ\83Ò\]\80°\8b¢Íë\14Éìt1¡;|¤_\86r6\90w0\18Ðp\9d\14\8d¯X\EîÒ\ 1_\90\9cY¢V\ 68 -Py¨\9a*I\82PÙW+\83\92\84ORõì\15.¯\80e\ 1\rß(kÙ©¨³Ò\19\18'Xà\ 2ĺßð\17ã°\9d\7f¨\15KÏÐ*îa¨\ eóòºfa\14\ìáOiO\ 1«W\10¡\98\84Óð\ 4Ç\1a
+\ 6 N)¶3\bY¬¦~Ö\a3dÁ\12ñö \0!ô'.N\bY§q»\fq\a\fQÅ6H.\f«á?ï\9e¹È[T\86\14\19Óå\84À\95«s)\17aÍé\ 4¿X;p\rBT{>ç÷\11¾6±£4\92ÊݽR1"æ\r÷\19ÎÔaê7( Nc;\9a$ \a\867¾yB\93×q£QW\95Ê Ì"\93¸\12M\9aV\80\15õ'\19eÍ\81å\13ZµÜÏ k,³&¾û]\84EÁÐ_¸\vH\93APùku\95!¢\83°óPDØaH(8\1cpàë\ 3|i]W¹\1aÍ\1f.¡ëI}#@V\87T\ðd\ 3(¸\10xfÉ\9ev^®½\1e²\10\ e \17\18ÆMiÐU\18½½Ã\89rII\8092ë\803*\r0`8èò8£5\98/Uß@7#\8d\19\94 \1d\1aÞAp\ 3ÀS¦yÖb/9âaæ\ 6YãóoN\r÷\8d\8f>ó\96>\89м\98¸M{ß\98\1d\96Ò
+\18½J\ 1`\brwÖ\82Ü6\8czª°îõß\106\87³\9bd4ÈAÑ@i\9cÞPѺ\8cû\89²°KÌ6\95çÒG\a\ 1+º5Yã\83/D¼1\142\99Ò\8c$3\19²\9aN"\a\aójo@hÌ\85\ fÙøÍë\8e&<\15\rLîö\ 1Ý\91~AîØÍ G\825ß\94©Z\f\çÂíN÷Í\9dŲã6§fw\19V!\ 4\0\ f\13C9:\81y\fD\1c\8b@ºQ[ô»\ 2Lç%Á\8a§eîW\1c²LÞû\8b_û\9cæ%0\a\ 3\13³b%Â\8b\ 6ò"ÚaU³Æx\83\8cȤÑ\97\1ewwq\8aÇ3\83v\ 2B².<É<Q¡R×è\v:\9dÄ^Öê\9fm\88\ 3ÀÒ\v@D+´\1cVHÝDÈ\r\0¸I `À\ 1\85íz{?\8dI5t\9d°\1fvY1·\98¥\e#¡3.i){-}2aGy°([q\17Ît\83ñÇ¡ÒV,J\8aJr\90/MP·\ f\18¹AZ\ 66M\96Ý\84Íɪ¶0\89çJ!³2[ëæ@P\7f\10³zÆ\88¥xh|\95\7f\96{®\15µòPº\8bs\ft¾&)\95Ñ>¡;}=,\1aLH\0Í\ 3Y\83$à\13f½ô\8cÀÏ\e4{ýø~B\ fÜ°}1p \11@ôÐBm\8böR¢\91à "¬
+íj¼/\88ÇcÜ\85\19\13êËï<H5\8f\91\10çù\14ï\8d\83\9d'É\8bÏ>Ü\83©ñÛu.®\fÌÞé\b\9dåWÅ\17ÌyìÞµµ\8c!ü©(2\99ú\a\86¯\99Ê\1d¦ü\ 4ÉJå0Ú2ö¨\0þ\1fb\80\9e2¡[\16\1a9\9cû\7fùÝñ*Ü~j§\91áé\ fÝ\fw'\98¡HiNÝ_\8fI½Íð\ eë»ÓA¡4:½Ï\80«<e;\1a\ 2\19ÄÁÍjÞ\19ÿpsÙ=\9bg\v<¬¯®ðxî\1e¯\ f×·\1f¯éó\9eY\7fcv\17Î\8cû½ãÅôêÍçÚÙâl²¸¸Ä\93\ eÏ´ù9Ãûeyôíè?\97YP\1cendstream
+endobj
+517 0 obj<</Type/Page/Parent 458 0 R/Contents 518 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R>>/XObject<<>>>>>>endobj
+518 0 obj<</Filter/FlateDecode/Length 707 >>stream
+x\ 1eT]oÚ@\10|çW¬xi"\ 5\a\13\82á1_TH!U\15WíC^Îö:¾r¾sïÎ þ}ç\8c\9dTT\bdöövggfýg\14Ó\14\9f\98\92\19Ý,(¯GÓhJ·q\12-i¾Lð<Ã×2\95£ûtt½\9eS\1cSZâÊb\99PZ\10Ò§SJó\v_1\8d½iHñ\9eÕ\98ÊVç^\1aí"ÚxrmÓ\18ë\1d\19\8e´¤·\vg¨\14öí\92LIáîëöÞ[¡\1dR³É?\97\9fö¬é%¥Â°Ó_>*]¦¿GS\9aÄ7Ñ\f0B÷\9a\84RQ\1f\9f-¢y\88¿\8a:\13\94·Ö²öèü\81£mÈ\9b®ñ\18Å\9f·\18$\9e\8d©±Æ\9bܨ+:T2¯Hº.ÇhÆ\11\97\8c:\ 5eGú)õê\96\84.Îp þ\92ÞD·\11=·ùN¢£¯Pc({"\87*áHÐ8\17\8dȤ\92^²\ 3a\92UÑ·u\rç\12\ 17üo\e¶\93"ü\9e5Ô|\98\94B¿+à2MGx\87رݳ\ró\ 6Ú#J\ 3\8c\8aU\83\81\fÕbÇ]\9a¬\eÅ5¸\11áêI\8bÿñÖm^\9dõeá$ÛsºÓ\8aá\15\14\10
+ú\8a0w\86út\90¾êúAeê\86Ë»\86\0\16"á\ 2ýºþÖ@êpzEYë»ü>\98\19³\vYp\f\95ÖÔg`dÁ\ 2\92A\ edHÕ\8d\98\9b0\7f-ô\910$H\10Ú£\84kÙ]A\ 6±\97ú\9dÂ`\83\ fd-Þ¥î`E´\95¹5Î\94\1eÞÏOÖ\81\83DÍç\82÷ÖýTøa³~\85½\1fL]\83Ð\8döl5{ZK\ 5\8f\1f\9dç\1a\9e\ fH+±\87©ÚLIWA<\byb¦\94\1fÜ\80NÇ$Âú\89sá¡,[iì\0ßÀ<=[\85ÉÛ ©\ehD\81PÄy©\14µz8G×\1c;\ 3ò\ 3q,|ky°JïÀ\13\14ðvƸÀncÍ\8f\94qàñ`ì.\18P\87Ý\10ÔqP\84÷\80\ 1H\a\15àr¤aTO\95\ 1 Ý\12\9dH.}ç¢ëõ²\7f·ÄÉ2Z¬V\14/§ý\12ßmïïèñ³Þ×\16\8a\aD\93!w\92LWaßS+\9aÂ\80\95\1f\9bÇ\ eó<\99GÉb\89\17\16Ng\8bpé)\1d}\1fý\ 5\99\13\9cùendstream
+endobj
+519 0 obj<</Type/Page/Parent 458 0 R/Contents 520 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F5 6 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+520 0 obj<</Filter/FlateDecode/Length 1575 >>stream
+x\ 1\9dWÛnÛF\10}÷WLý\10+\80ÄH²l)\ 1\1a i\1aÀ@\10§µ\9a¢\80_\96ä\92Ú\98Üew\97\96õ÷=³\êBÇ}h.\96LíÎ\9c\999sfôÏÙ\8c¦ø;£å\9c.¯)«Ï¦ÉjE\87\1f¶Ä/S\9a¿\9d&KZ¬\96x?»Ä[+©8û°Æñ)\fì\7fàø\9bOoi>¥u\ 1»×Ë\15óð9\9ed£µ\15\99Ò%9Q§\82ÜÎyYS&ªÊ½^\7f?{óiA³Yws2_%sÜ\1d7ÊQ¡*I¹t\99U©t´1[ò\86rC'FÈü$£é.ØÇ\91±\ fdZOÛ\8dð¤¼Ã%\ 6°µF\97 \ 5ã°¯\8d§ÂX\ 61¥ \ 2\f®ý\ 6A
+¥=\99\826RX?¦\14¶TA;Ó\92@\ e¬\149Ûó\8c\12çõþ\93Æ\9aT¤Õ\8ea7Ò
+/\93h~~\9d,8²_2ß"ô]\80Å\b\84£TäüÂ\9eù¿HÍ£¤Z< håÉ\99VçcúÞ:\8f8ô\85'ùÔÈÌ\87³\88²\ 18\ 4\9dJz\94vG\8d\95ÞïèÝäþõÀõíÃ\18\ 6¶:\9cn\9dÒÒ¹\84n5\92W\ 4c©*Iä\8fB{QÂ7\9e¶Z=Å\8a\ 1\vCDB\81qG\1a\99A\14\b\852SKÚ*¿Ù\17f\98ÒP¡Ö«J\ 1Y°\81{fëBÞ\80½6Zyc\83µc~ij\88É\94VÔ\8c\0iAê\ fE\94OÞÊZ\ 2
+GTþ ¹LÛ²äÏ\84F\9e+gPÖªq`\a*çí.\94ò\845;$½\96(/.Á§\ 3Vi\19LWé.ÿ ý\r>dxÖ:9\888\ 6ÁÔd\e\9c\1cæ£Ð°\8cÚ)\11²Ö¨Jx\ 5æ\9a\86_Ü\90+k\90áÈ\92¤>\85ÀÄý#sÊUQH+ÁÖ\80\16EÓGϺˡÈôYéö¨\96h\8ahÂ\85\ 6ê}÷mð§Î\11ò]«oïh\11È\1a\8fw§)~þí\8f\ 59¿C£F_t?R:«ÚÐ ÎTÂ*wÿúÔ@˼ë\fÔHÉ w\1fî>î\8dqïF¿\ f'0ûvâ\14\15Ê¢5ºjq\8b:äºBj\f×\8e{\15\9fq?ijÀkf\bóÎ\92FòÑh1Ãì¦Ó\12\9bÐ\r\88\81;¹r\19Àr\89R \12\f\90Þ\à\8ap®\ 5ÿ\8f\90v å\8e\8eï\0\83\19\r\966Æz(ÄÞm\88ÊrÖ\10ªx\14 \ 4\7fÊ \v+»7\9c¤Ð\8a\ 3ÿ~×HN.ó:\gn\97Ð\14foßÔZe\12é)¤ð\95Ï8ö\ 5\r4æ.\88ý\13!#â`Ä©º\ 1\1c´8@ä(Û'\0\93O\82\9f\8e\19Î\9bOWQ¾G}¸C]\1fQ'²?8*³MèÆÊt¶úQ0êéØ×\19ÆÉ\86`"\1cd3è:ëBÞ"<\bÏçÛ5GÜé!
+\bÁFþ13¸ÿ\98\15\\ 1aKÔJ#Ó\10\1d\19äò¤úQÝ\ 6iîÕ§SdN6ÛB.ÛÊ'ô\8dE\17Âæ\91¦\8dh\1a©¡\94\1a\88úkûæ?a\1a*ŨJé©2\0tÀ>ð\1e#\ fºU¨àüYð°À\ 6Ρý\98\81\95<G)Ú¢ØÇÏx+Ó\r-\9cs\eL±\1c S\8böDú¤Ï\90²R\e;\14²0âîG®0,\ 2ÉÊÃ(ýéÙ\889fÇ\81ó\15FMW3àãÙW\vï¥\ry\ 2´\17hô"7b\91QàwÝÕ)½åýa\96,.ç4\99_%+¼bÖnòò~4\eÓ9\14¿2÷÷ú|L×è\98g\7f~¦ëÎVÏÀIom\19¬ÂZÐ\87®ð\81\a ;\f[fXÛ0¥lÛéF,ý\90Ä<\805¶\18\14þ\82W)Qc"
+ÛÍÎ(ô6<O\90êÃJÃDÑ\12\15\83\8bØ\9f\81\81ÖìÛÕ)ÔNHLQ\9e\8bÃ\12nÅ\8enÈKP\a4\89¶Y\92LTÎÊ`:BmLMõ\8eþ\ 2Çx4\7fý\95O°\9fn¯rÒ¢a \15<5Ù
+Ü:\ fQ\89\96t> îv£²\rw\ 1\1aÔÑÍÇ\8e\ 1Y¥xZÁ?8 ²M\88*Z\85bZ\ 3\8c7Ðî\17H1ièëÍÇÓR\8d\18hg\83\8cþ\88nÁê\ 1*p¼\ e\1cD\a(Û¯QÎcÚÙ\9eX!\15\81ùQ÷\82\83n\1feaÆÔÆlÄ~×:Q\9dJ"¯\897\17u\14S1p\9e¹\r
+\18¦%\132Ò·\17P,¡½ÜÅ*O
+BÀ\97+ìéï_ÅÒ'\90¸Óø\8fî\ 1\¿\88ý\7fOG\8ehþþÕìEo_\8cï6ÖóIq\1e\97\98Ãf\16ÆÝa¢í'JØÿÝ8ncÇk`\98\85a-\ f½ÅÜËZËÛÍ \8f±ºÝbÎÃ1Û¨*ÇAn\eTè\ 1\83jÍË9þ\95Ð\9cð\10õÓa+i,¶{n\1c\98\81XÖ¼b\80Ð9¥¼\9cJ\96Q^ÿcíÏ\a¾SÉW»¯\12]fV\87ï/WWÉååUø\ 6ó\9f_z\16ËE²¼ÆW.>:_²\9dßÖg¿\9fý\v\90\e\9cendstream
+endobj
+521 0 obj<</Type/Page/Parent 458 0 R/Contents 522 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R>>/XObject<<>>>>>>endobj
+522 0 obj<</Filter/FlateDecode/Length 841 >>stream
+x\ 1\8dU]oã6\10|÷¯XäÉ\ 1bÙRü¡\14(\8aä.9\ 4h\9b61p(\9a¢`¤uÌ\86"U\92\8aë\7fßYÊJR¿ô`@_\îÎÌÎÒ\7f\8fr\9aá\97Óª ó%UÍh\96\95%½_ü3^f´È\17YNór\85çb\9e-È3m\10;Ãî·Ë!v¾\f\17C,âSèÕz4½\99S\9eÓz\83\82ËrEë:í\9dѺ\1aßÙ\8aiï:R\88V1ªjËuú\10·l©R\96jG»\8aüÊ\9et$\1dÈYÂ*UF³\8dxTék¥º í3µÞ=\19n\ 2)ÛgÚicN×\7f\8df4Éϳ\ 2õÇ\95jc'\15\8dI©Â>DnPÎ\98Ð'\fÍSM\8dzá\90\1dö\16Ël.{\1f\1cmÝN` nm#ûÖ³à`P\ e\9d\89á\aúÂ\96=²íé\96\ 2+_m±î]÷,w&×Ŷ\8b´q\9eBô@}¨zK/\16¹\ 51©¶ÅÆ#à;QE2\1cXÒVÂlÈè\ 6¹ø\1fÕ´\86ÏHoPW5X}\15I¢ë ÒÆ-µì\e\1d\82v6 ©h£±tK;×\99zÀ
+`G\85\93Ê\12\1aȪ\86Á;Á\0z\85\ e\1eø\88âƹ\17t²_í<8ÛZ0\18m¡%]Z\aø\9eÀºz\91fF\a\99#ôéÚ\ 4å¨nÍ¡òº\8d`g»æ\89}ß×\93\8d3ÆíN\925\ 6\11$\17\fã HϪ³Q\9b\83i*ã\ 2×Çͼâ½\ 3è¸\ 5\12igR\1eª±äêBò&lguÔ*êWÎhíè\19\ f½i-é\9a\15¹M\8fc0²h \9c¥¿ \vµ\80ú\88X«Y\84Û\88\ 1>H\98t\ e0ØÁ\11²kz\83IM\ 34\9eÖü:µ]oè÷Á\1aK\ 5(\8b.ztqçud\85\96\9f\ 1\97\86¶2\eè\\v«ÅÞ\10´Q\90F\1cq\84ëA5O껡ì\85\8cm\9eÍÏ\v\9a\14\8b¬Ä\1d#ð{«k*ÊbYþ\91Ô~\1c\9f¼\ 1;9£»?ï?\7f½\7f<%¢ï1st}ùéÓõ\ 3=\8e\7fyó\1eÕl5×\8f§Cu\9c<ß\94ùëýÝÏ?þ\86Üß\94ù]¡É@b\95È\80ĺ\9f¢\8aCH>ôûA\19íCì]4Èð\7fê{Võ$©.¾·8\aðî¬Ùgt\ 5¿'±a\1dqYÃÊ\86ÿæýp0½ÉØG\f\aç\18\16\aJ[9ï¹\8a\1f\8789zzS\1e\1c\92¯ÊlyqAÅy\9e\15ËE:°.\7fºº¤Ï8@\rF\ 3\ 3ô¥\83k¥Àd\88\9e¬fè44\81\15E\85 & \8f§¢\84ÏWólµÄ¿\84\84\16¥|º^\8f~\1dý\v\82\0ô\ eendstream
+endobj
+523 0 obj<</Type/Page/Parent 458 0 R/Contents 524 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>/Annots 264 0 R>>endobj
+524 0 obj<</Filter/FlateDecode/Length 1642 >>stream
+x\ 1\8dWmOãF\10þί\18õË\81Dì8\81\84\1cB\15ÇÁ5*Ç¥$ÕõªHÕÚÞ$[ì]ßî:\90/ýí}fíä \_@¼Ø;;/ÏÌ<3ùz\90P\17ß \r{Ô\1fPV\1et£.Þì~Ý\7f8HNO¢.\rº=ü.!\95D\83ö© )ËSÿ4\89z|6\1cEýöiwÖ;\89Îp\96\fÏp¯\1f\9eø,\19ö¢!õFgÑ N{ÝntÚ>ñéóg\9c\9e\9cBª\91Ýêíá>ûÓ\e\9eðÍð´;\83ü Ødïøö\80øìÝì ¾\19Á\18Í\16\88z0<£Y\1e\82Å\9bìðnFïM)\94¦ûÉÕ\ew4û3\88'ÃF¼Ó?A\94³üp¬½5y\9dyet#tBIÒ
+õ\860\ 6¡ÙJ9ÊMV\97R{Ê\8cöPìHé\85±¥à«ä\rUÖ¬U.Ih\82õGc\1f\9co\ e\1f\95_Qa\96ðÆI»V\99tÇÄ/Míɯ$i)s\822Üe'ºÔIú\8d\7fÐÄW¤\8dhì n°¸[\96\ 5á\9dcËfA+ï«·q\8cp\8b\95q>ÊÒ$ÊL\19ÿU<dE\9c©\85Ó>\ fhDþÉ\1f\87\b¬)
+\18M7t[?Ȩ5Û\e 9\f\8b'\aï
+\bHª\8cs*-$\aéd!3O\ 2p\ 4t\81\83\97"g/D\88yiM]Ñü\10±²«/\91xãhv5\89Ç\13èñ^é¥\9b\1f!æ|/h±ðÒ\86ë&-ÔRxc7dej\f\9c÷\9bJ\ 2z\98«\81\8c\16¥<¦J8\aÀóãWþA9¹:\ 3ânQ\17Å\86Ó\80Û@\13Þ"¾}ËUee¦\84ç4nh\81¼¤"{ à¼1µ%ùTI«¤\86¾\90@8\89\9c ólà\98C ÷\0>\97
+ÞdÆB!\97\88kNó\\85§=Ã\806¨ÚVÙ~BfÀ²\82'Ò£\12¥Ë¬J\91½\95´\922\14\1c²$\85S\88/\87\7fk®&kJ¤!x\ 4!¸\98\8a\14ç)\80\a¸µ\86 óÆä\80\11\89\98\1fí9t'}it$\9fdD_L\8dh\8b¢©S¸
+äCz\9eÕ`#\8f·Â\13z"[\ 1¡\0\99Û BÊcN\192Äy5[T\8aÍ\9eÑ\f\ 6\1d\14
+çzvûéç»c*\9c°U\16ÐsvíÖ\19ͬÐN \f+UI\17ÑËþä^}\ e\ 2JpÚt\1dM8\97É\9eQ\86H\ 1Ö\90*W\19\9d\ 3\8fçíÕBÑ6 Ò^\ 2¼¼ \15Ø\v\r\1a\1do\9a\ 4\91·"\93¡q\ 2µH\94åãJe«\80á\9eñB=È\90\15*\rÒÄíd\99\8dÖ\8c\ 2\94ÿkQ\\16Î\84\9c° ÀÚT¸*«B\ 6¦Bä- Þ\ 6òia@Y¶D²¶mIqà\f~f7\957K+*ø½çq%¬çvo»[ÔøG{\95\ 5ªûN.Ä\1a´\84Ò\93MI¢5ª\bÕèMf
+\17¹2=o\ eX\1fZFfµU~\13ié÷\fçj)\1d¨\aé
+ÅÍ\17\9c(SpQ8Aû¡b\97\1018²äаhËýNºD¢«\r#ðÒ³·¹-\ 5¶¤ª}Z/\91ѯ\91Í"4D&âéÕýx2\9bÆ\9f/£ëß®\7f¼ì](\9d\8f\86ݳóÛ\8b\9døù§\8bËóÉEoÔ?ý¾â\7fbk\86>Zù²Ø»\ 6¿;¡;vù\r\88\83ü\9a¹Óp¹Òµ£;4Z*í²ISCP\ 1ïÿ\1duÀ52v\19gKÕI\95\8eË\85\8b»IÜ@\1d'£Ñ0\1e\rE½\8c»ýQò=\7fÿc(\8501\8dö£ä\92\ 6½ ½¾MÔ\"\a\98\9eÌÜßFn[ÃW+\89¦~W+\f«ç|ôb\ 47Ô,5ê\90Õp£´\86·\83ö¹\rºkɧ-g®\95l¥$ó*\ 6f;»B\a,0FÍ#뼿þðÇôw\8c©¥B\ foèAn8\86îS²\b_¡¾â\e,h»õ¢\1d¶?ý|ûq>\9f~\99ήñ÷ªÆÄÐþ
+[\ 6fôTz\1cµKÃ|\ e*Â\03z>\9f\b\8bÑ\a*ow\9bÁk½cÝN\1f4\b\ f!\92<{àjÛ½;Wy\82d\82I=0vÉÁê0î\17è]\ 6A\82æ\96Xz0`ÁÞ\10W[Ý{0¾,ÎW\ 5\18\81\8a%ýp«Dª
+´ùÛ\1fH¤fÝì\1fñÍóÝ«\ 5ç\9d\14\96gG\89\1e\ 3â\98.\12îm©\16Wm\aÝÞyD\84Í\8cZ p'ó¹±\8a7.^\154]NÆð»h\82±\12U\84µ\81i\ 2\83\1e?-\r{³\17\ eæjCȵå\9dMj¬\806ô]3Îs¹\0R¼\95Á1V\ 4\10\e\16ÞR+JF\16N>²©}*z5·P\ÚP)1ÞÀRÌãXDx-\ 4É"\1c^'\81\15}TXÈ\90G\90e³Y \eE\9d#¢\14\v%»\81\89\84\98JÅSÉ\9bPzøHÐÙrÛGQUP\0\8c\16t?~\ fÿCÓ\85mʵ[\ 3¯©\1dn(1?
+\8ewP¸ØóÃ$"\86 \8f»5õs\88\9f~ÅFFã÷\81f\90®Çæí\87°\12\86×/\15õ\1aEñÍY[¼\9dÞ)uúü\ 1\ 1f¾M¯Ý
+\7f\82\ f\bÃÁYãFoÄ^\Ï\ e~9ø\e9ý-ñendstream
+endobj
+525 0 obj<</Type/Page/Parent 458 0 R/Contents 526 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+526 0 obj<</Filter/FlateDecode/Length 1735 >>stream
+x\ 1\9dWMsÛ8\12½ûWtå²N\95Éèûcæä\8c'S©²\1dïJS{Xï\ 1"[\12Æ$È\ 5@;\9a_¿¯AB¢äì\1c¶R\91,\10@w¿~ýºù\9f«!\rðoHó\11\8dg\94\95W\83t@Óå\1c\9f\93\85|\8eðß2mÃ\ 3Y\9aþèÁx6I\97\97\ f>¯¯>}\99ÐpHëÜ>[Ìi\9d\13,\f\ 6´Î®×{&þ®2O%+£ÍîSÎ[m´×\95¡jK¯ÊêªqTª\9dÎ(«\8cóÊxG\95%6MÉVÉN\97~\ÿq\95À
+.ͯÇ)ÉoüL\86ãt$KbÇr]\1c\88Åá¬Ê\99\94É©q,vü^ùþ£·=\eRôVÙ\17X\fÞl8«JvX-¹Ü°\95c\8aòªTÚ\ 4ó\83\93¹çk_Ñ\86)g\97Y½á\9c
+åÙ>\7fLé\8bÒE\ 34±Á²o¬\81míÎlë¢@À/Ø\ 3¯û. \82ÊúÖYíI;±Û3«
+Ë*?\9c¹(w´N\1eA\1aÍÒ\89\8029á4^¦3Y\92Ý\99=Ô¾ÚYUï\81¹Ó@* ÄôÈޮؾ²}RÎÁ³|Å\1eX\96% ¼¡7ìßÃá¦ÈI\15Eõv\19À%LÀ Û+³cÒÈiÝÝ\99ÒZ\10\89?\11¦d)\17Ävl$å-2Eev P-ɱsB\98\17>¤ô¯¯\82\fÕ\15Ö6\85\0}\81\92å?\18\84\v°\1f}\17.¼0×ÁepP5\85?Ã>ºóïw0N[\18?}YÒ\10¸n)\19M)\99ÎÓ\85 ºª\1a\9bqÈÔ©\12\86éd<¾EøÆ®ì\ 5@®ÂNÚÚª\14¨Ë
+u\0®>_\væ:czRÙ\v
+U|U\9bê\95\9f?ÆÐfé`6\15sMA·nï\ 1\86ìºoÀ¢{Ö;Yù\eÊ\ 6ùµôáqMw\81·\1f@\8d¬\rHht¼åËJ\1e ¾LGþ\842½u³Ô\7f÷ïLþ\8fÍàÏ(îïaÓ\85>\1e¥\v@\0\8f\7f±\9c#ýrí_\0ô\84\84t\91ýDE¥r\ 4³\r ¢7í÷\82\17=´\80ýL\8dÉÙ\8aRäP\94\90QD¬\1a\ 4o¼ÎÚrv\aç¹ü\19E¸eË&ã\18W§\18º¬\v>\ 1\10+`Ý\15\13¹¦\ eÅ\b¤[Þ\a>EÔ\84\81\95Õ;mP\b\aÚ(\10ø\a8ß5&S\86VpÕm5\17¹Äö\96\14üÊ\ 5\12¨\8a\83\93\8b¶ô°úÇÓ/ô¤knµî,[÷Ú@"\1fQ\8e\90¥ÝOTÛ*o2 =K\82Ð\ 5F \82 @[ÝäjþQâÿ©M^½9jYk!`ð¤ª\ 5\aò¬Ê6K :d\1cD\8fÉ\9cÆd>V^$\12Ô[yÛdзHýX\1cð|<hÅ&l>Ï;ZD2\92\16qýU\84\91iõðYêÂ8é\11µÄ\7fC\ e:L\1fN\ 6>Üô\84\16\ 4ç\eRuÍÊ\8ad@\85'Éæ\0ÍP\85Þ\19èHà\vî¾H¸XÚC>Ùâ¸È\ 3kK \91õ)ý*-
+yl3Ý7M\86qe¸Z\0G¶L\ 5G-gÚ1N¼\98ê\r\9dÌ^\18\8b<\89¬@¯\8aª<|¯Ê\1d\16¿ß=ÑãúþÛoß\1eé\ 1mÄ\15\95ÿ?à\18\9dÁqáX\ 4§\8d<
+?z\°ö\ e\199-}7öÙÑÉù\18O«4´úz\17\8aBz-f\89Ê\96\0y\95X~Õ¢Ý \9aJø\962\1d&ò9JÓT¾\1fSât\17,õzÝ*\19&Ód8\1a'\93é,\99/\96ñï4\18\98¢-I\1fBú\15jus4t\94ïèroZ\88.+s\10\ré\14\10ùÝ4[¨\ 4z\8a6h8\18G\1açåj\ 3Çÿd[\91nÃrÞ
+\vºíhÑA]\9cð\10³\8bǤpÙ²Ñÿ úr)¢<²\fмª¢ }î@n\1fC\ 1½\1a\13(\95Òà;f(Ln\83Á\b\r\90Ë`%¯Bôp\ 3\9d¢í|I\ f4T·è\9fÜÛR<ºÊßµópAÑãï÷÷qµ\8b\97â1\98\88ç."\r"\15\90(Øìü> Ü3üµÅç\1cGá\83\98»\11\9f\rf\0Yp\8dH\93\97~ß³ÕJ\89l9!*§¿©npÎ\0áçë¶Ìú\ 1{\8cQ(?l©¶Ï\1fÅNP\94\y°ÂcZ*»i\ 3\97qYkà\16\ 4\e* _á\83(ç\8d°U\92#\1d!øJ÷«[ZÝ>\ÔÎ}µC7\80âÕ\18I\19\ 3\8ctu\19\8b I\91!\7f\81\80L9\16¡´µ!ó\f\9c\125\ 1kØ
+"\12æ\85M\89è,\9a\93T!Ã{ÑAãZÉC£QÖª\83\14õ¹\e.Z
+ÔB\91\17\1e\94Ûí!ä\17æ\18\8d\ 5üÉi×`æ"i^(\83\12ªy¬«åèÝt9\1cL[Åï»\0ø»\ 6\81Ì©X\1f2$wê\1d\b½W¯RÁ(ft 0øÄ*L#¤í3`%ü\vù¹púHct¦ÂUa_
+diÛXà\87.'tÀ\ 5G*!ß}æü\987]ÍGó\17F£4tä\96<]ú\11· \92²Ä\10\ 4`Ñ1¶\95\8cÎqpé\9d\91+:\1cvP\92\9b\v\83í9¤f\83\17\80^ª;áA\98"\83'Ô[\9dì.\fíRÞm0ÅX\94\9eF\87U[ÈR\b½Pî8öuãÑÙ]ÇÜO1ÕIó>\8eÄ\8bîÕo8\1d§³å\92f£q:\1e¶\83ñíÃç[ºk\a\f\11Õß\1a¼jHPÉp¾\b»\93ù`)×õfèÉ|\92Îg\8bîEo Û\7f]_ýýê¿ßÆ´¿endstream
+endobj
+527 0 obj<</Type/Page/Parent 458 0 R/Contents 528 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+528 0 obj<</Filter/FlateDecode/Length 515 >>stream
+x\ 1\8d\94Ýn\1a1\10\85ïy\8a¹L#íÖ6[¯é\1d$¡\8dÔ¤)l{[m¼\ 6Ü°?±½UÚ§ïx\rUH©\89\10\12Ò\1c\7f\1e\9f9Ìã\88\ 2Á\ f\85\9cÁ\98\83¬G$%ÀÅ$Í \139þfø5
+VC!\13ïRq¬À\bOù±\ 2eôø îá/®\98\15£·ó Ð\f\8a\15vŹÀ³E\ 5Ø\13!Pȳ«¦¯\95)\9dn\eû¦ø\11Ô4¨\13\96£öìf¹¸»\80\8fª¬\94\ 1÷«SA\97\ 1ý«ãø8Tʶ®Ë¦\ 2dÞ£V7à6
+jk: ])\1f\94\83Í\80 \ 4þ/a¸ëûB=öʺ÷\87\17¡\9b \1d§ÌßD\9e\b9\84$ÏË{\8cíðY*Îa'93ÝTqÆìU\8c©|\88c.\ 2\ 6ç58;<\89\89àm\98Â]pQ7«6h\8fL¡ð\9e«²ÑÍ\1aÚ\95\1f\81Å´m˵\ 5m¡oªVâÌ\e§ªÃ® $l7ȹ6ÖÍM¹\8e÷K\ f\ 1\a#øT¾\86\103ÿ¶uåé\1e²H\ f\v%\17ÊgàÄøD\84qÛÞô[§»z\8a\9aAcyħÌ[s]©º\8bBØ Èª53\89ÆF!Y\1còµ×q;Äîü~m\fc\1dÓ\10Ã¥3½t½QÿÛ\16ß>__Ây0ôH8þ0\94^uîã8fp¯\9dMÃ\81}ò}\14w¹\97\9bÒ\9c¢y\8d\87\89ç,±û\17Ñ\¤|2\ 1\8eO\18vÇrz3\9bÂ¥ú©¶m§\8c\85\ fèÈ°Ô\92½6ÉÉį\99\97Û1˳4ç\ 27)\16ÇCü¯\8aÑ\97Ñ\1f=\b}Cendstream
+endobj
+529 0 obj<</Type/Page/Parent 458 0 R/Contents 530 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+530 0 obj<</Filter/FlateDecode/Length 676 >>stream
+x\ 1UQS\9b@\10~ϯØGí\bå\0\ fâ\9bNl\9b\aãØ`_¢ã\108Ì9áHï\ e«ÿ¾{\10L\88\80S§\93I\86Ì.ß~ûÝ·{¿G\ 4\1cü\10\b\ð($ùȱ\1d \1eµ)øa\80Ï.~%\83¬
+\9c\86Ä\ e»\ 2^oÀ5 \1dP®Cm·+@HO\rß{_û"\1a}ý6\ 6B Ê°\ f\1a\ 6\10¥\80=8\ eDÉÑm4½º<\8e\9e0É\7fK²\jû\98VG\81+ð\XrN\80\8b\94'±æâ\114Ï\19þ\aÅ\92B¤
+\14\17 \ 3\87<Å\82\8c\ 3Ç\86´HÊ\9c ÍR\93\96ðLQ[¿h¸;ÂW4/\ 4xö)lâGvRý\1a\1a\ eXÄö±¸çÜ\1dÛ5µ\1d\7fË\rkj³h\90y\1d6Ô©_Qÿw:0L`r}õ0\9fN°\9b´ÈclÐüQZ\96\89.%»;®\99Ó\ eQ§³ÈsÛ\9a£³Þú\16e\ eE\ 6ª\Zq©W\85ä\9a3e$Ü\15j\83[û¯ß"|Ø\8fnXJöÌ\95Ñ\1fK-\99ü<Øÿ º ÷ýl),_56\9f\15r¯{°`\9a¢±xÆ\99\84óH¯[³4\92¿S\85Ð\85x@Y\8dªj èNæÃCèPª\19\95Y¡Ù\19è\15Ûç\89öÛ\e\ 2¶VìÏ\8aIÖïêyôÓ\8c\87\968`\8d\85:æ²\9df\\1eC²\8aåâ\1eÎðQ\94ëµ¥\99̹\88ÍôÕxÆT±J8¯Rã\ 4\13T?\93ÛÙôÇÄ\90)\ 5O\8a\945 +\16§L6Ü\1aql\e!\8cÿ\bí?Ò5\13\8fzeÈ´\91;´m6ÁG\90yü\ 2\9f\84\1d\1aD\1f}V\8aÝ\ 1\1e\88Uù«YGµ\n\9f^°Y\97
+\96e\96¡a7\ 5Ç¥8¨a%~¿\86må >\93\ 1\ 1\7f]O'_\86àvM\1e\90¬_jöïa˵\ fÛl>´Æb`ôú\9dÛ\1416oy7ÜnXâ»6\1d\8f\81\9eúõ\r1?¿º8\87 {fëb\83^\87ï%O\99iÈ"AXåZ\8136WͼYÛÊ\84ýÀ·\ 3\1aâmin¡jS_F£\9bÑ_\94¥1Cendstream
+endobj
+531 0 obj<</Type/Page/Parent 458 0 R/Contents 532 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+532 0 obj<</Filter/FlateDecode/Length 660 >>stream
+x\ 1UQoÚ0\10~çWÜ#\9d\96, \99\13\1eAt+S\81ÉöÒNU°\r¸
+1u\9c¶üû\9d\93Ð\ 2-iK'\84\849û»ûî¾»»m¹ààÇ\85À\83\ e\ 1ºl9¶\ 3Äul\ fü0Àß\1e~\15\87Yið;Ä&/\19¼C\ 6\97\84Ï_ôãÖ\97o]p]\88gè\9d\84\ 1Ä\fгã@LÛãÞè\14®Ú)Ïæza\89\8c \9ahÎ È\ 4\95\8cC®\95ÈæW''ñ\râ\90G\1cË#¶\8fHíßÃqÜñ*³_\9b\91\9dåv\90\16Ú+d\90³=È]@kû\89\81tÉåßà Y\91¦\96æj)²2Ú*Êm't\91¨\84â\95Ü®`6)(=ya\1düx\18Å\17\1e& IÅ<{/ï°)ÆUÂ\18¦\ e´\849×{ìÁ·¦kÍaãö^è\ 5è\85Éw¢´!b\ eѨ\ f\v\9e0®j\12\9bü?KWS\ 5\96É\ 3\1cY\85&X\a,$Å$-\96<CɼRÐ&¨#£kÖȶ&J)?I¢A\11\93þ\8fë^\1c_ $äô\86S\r\89Æ\16\98\16\9aç\1fè\ 2çÁ\r1_5Ñ«¶ÈÀÔ\1f!Ad4-*¥`Éë\e3ÁSÖTô?\93áàÓá\ 61ÅQRj`B! ©ÖHh%\ 5\16JíÓØ\11Ó\epë¼dÉ\92¿\11ôµ\19a¢}J3\82nëê£áæ\9c\16Jè50\9eS%VZHõ\1fã~\84¿-°\99Ñ\rönÎÕ\9d ¼Af?'ç×gã\ 1Æq\1eõ`%SA×°H2\96ò}¾\98\9cͬ5
+¾ô\9c\86Á¸\83Ôà\7f0\19]GÃ\81\99|L.\13\94#\9eÌ°/¨.\14ÿl\8e\11\9e¥Â\99\88Öz\1d4ÄöZ\8d¿b\8d\8d\ f½^Õ\899j\98½gê\8c\87g\83\8b\86Õ´Å|wÝÕC·ÊßËa\96\8bãpÿ\1d\84®\9e\84õ¢t}Ï&Ý.\90\80Ø¡Ù\96QoÔïÁ\80ßñT®pyÁ÷B°2_\96\eàvÇ»VàtË«\9bbå\ 6Ó\ f|; !nxDétÌ_§qëWë\1f@ýD¨endstream
+endobj
+533 0 obj<</Type/Page/Parent 458 0 R/Contents 534 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+534 0 obj<</Filter/FlateDecode/Length 748 >>stream
+x\ 1ÕVÁnÚ@\10½ó\15s¨\14RÅ\ e\18×\86öD\92¦B" \82\9b\13\12Ú¬Çx[³K¼kHþ¾³¶!\10\91(U\ eQ\85\10\86±ß¼yïí.÷\8d6´èÕ\86Ð\83N\0|Ùh¹-\b:\81\e\80ß\réÚ£w\8e\90\94\ 5¿Ûsýc\ 5Ïï¹Ýc\850p½ç¿_D\8dóë\0Úm\88\12j\1etC\88b Æ\16D¼9R\ 6¿\82I\91Ú
+\r\f¸\92I&¸\81;4\eDikPHÁU\8c M.ä\ 2Rd1æÀd|¬*\8cÆ,\ 1¦Á(ؤ\82§ö¢ÐH\1f§ÑïF\v\9cv\87\88FqSÈXpfvÀ\19Ê\85I]B%.\e\91e \11©\89"6$\8cVÙ\1ac·\ 6ñ\ 2\92\87@v#Àtp\ 5æqE\93Ô¸ú\f\12\95\ 3>°å*Ã3b\f,\13L\7f£A7\98eÎ\1f©6\12\16¹*V\80\86×\9d©y¬x±Di¨»VKÜX\81ÊÆç×½\9d\98\8e×(\\8doæ\13j>kÆjÉ\84\ 4û\85Ä*¸)r\9c\9dZÆû.8[î¿\ 6£¨ãUe¿Æ¥hì\ 4ú\ 2Î>Q\1aÐ¥ü8Vͼ\1cwÖÔ\880MÕ¦\7f9ÔÏ;9ûXoéUȧÁ\ fIÿ\13Ô\93
+ï\0¡\9c\90\r¥\9cä'>\80*\f(
+Ö\9dZÛ4$d\89äXߣ«N[sJº[{\86ã\1fóÁèzLþ\90nkÌ) \9c«B\9a3à\99 \9bßdV\15´L-\94\84
+\a$[Úð²Üؼ\1aJúFÁÉlv\ 2<e9ã\ 6sZT´N(RÅjE¦q¦« ÑxÛ\14TÀ5¥
+\93î·\v¯jVs,\9b%¹Z\96¥á´\ f\13¼/P\e¸LYf×\ eE¼dÁà\13\10I\8b\80Ô\9cD\134ª\90V£½å÷2£Ûñàês¥è±XîÇ\ 4î\8a\84¬\80\95\12´\ò×\f\1f\r¦Ñä\95´\1fH{¸ç¼\aö@Ø·ÃÒÒl\a/k \91ÏÉdI)¥Ë"\17æÑ\9a.%få&ô\1eÆ\a¶/\19O\85|¾ WðGã~9\1cEóéäv/î{ Ò\1f\9bõÿ)Y\1fɵvì5ó»õ\81Ñö=7èõ ðÊCuÚ¿¹èÃ\15®1S´ãhøQ\88\18m^\9cvØ-ïtÂVÏ\1e\9dÓí\11Uî\9e~è»aÐ¥\7f Têøö\89ïQãgã/©q\80øendstream
+endobj
+535 0 obj<</Type/Page/Parent 458 0 R/Contents 536 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+536 0 obj<</Filter/FlateDecode/Length 741 >>stream
+x\ 1ÝVQoÚ0\10~çWÜc»\ 1MB\16Â^¦¶´\eR\81¤ÝC;!×1à5\89SÛ)âßï\9c\84\ 6ª&¨/Ó4P$\88ÏßÝw÷ÝÙO-\e,üÚÐw ç\ 1\8d[V×\ 2϶º\ e¸~\1f\7f;øH\ 6\8b|Á[p¼\1eÚ½Úq\16´N.\a`Û\10,Ð\89ç÷!\b\ 1\1dX\16\ 4ôèüúb8\83û#*YÈ\12ÍI¤à#h\1e3P\9aÄéýñqð\e\11¼\17\84\8eãu]Ä8¢+"ïü_ź[®cü\1d»\87\81\e\83
+s\1f¤³ku\13\8cÆ\17õ U(\85Í\96J\8eáøE(çW\93`>\9a\N\1d¤¢\98|f²\r4âÈ\biÈ\8cêL²\977;q5Ð\9b\bÍ>ÃzÅ\12\86p W\UX@Ò\94\11©\80'@°4O\19Sº\r\e\91A\9c)\r\9a<2\ "Ý\80XàfV\86Ó¡$¢YD4\va'\ eÃͪ2'\19eü\99\85mx`\94d\8a\19\84\r¬y\14á\eü\1f\1aÇ*{PÆ3\92¬ \80®\18}TÝÜg*\99ÊâÜZ\9bê\8a\ 4\90\85\16\10\13\9eh|\80$¯\\93\f]¡)ÍC,\99\9d N*\12\13\87$<ê\96{¶JÈÓ?»¾-*ô¦\14\8aZ\90$\84¢<\90\90\98©bÃV[û²\18M\ 2ÿ®A]_ð\ 3) C\9e,Û°\10\12ÜÎÃFcÚ#¾Lb\93\955×+\98\8dÏ`ÅHÈd\1ev%å=w·ÓÑðC}ü©À|\19\15\88¬ª\8c«&ܼ¿êq\v\8dÖ\88\ 2\e±Ô°i\82\ 2¤Yþ;ê'\94\8a,AMþ·m\0ÿ\\1f\M¿æS¨¾Þ\91Xb\ f\96µÁ\1e^\88ÂöÍ\16ø+Ú\19\ró\90ç6j\87\9b±²\10Õ\98k\83\19\a\10á\ 4\8cÀn\18\96\87ÚGË9\ fç\ 6|n70¾\99\8c¾\r¯ëÓ\17
+3¸òÙ\ 1Y©\bYÙÛM 8IzN=hJ$\89qT'Z\8aè\0\8eçÖã\14µ\1d\r\9b \ eðCEË÷²;\0¹\16òq)E\96¾\137?Ým¯a\0\13I]¸\1aÃôç%|'J¡§°\81û> _Þ\17ì¾ßõ\ 6\ 3ðún×7\97\86Ùéøì\14\86Fq"exÂ~Íx\98\ f¿ÎÖ¶Ó·\ 6¹éödÏÏ\11\17\11ú\9e\8fw\1cDé}2\91\\ 4\1f?\95Ôµ\8bendstream
+endobj
+537 0 obj<</Type/Page/Parent 458 0 R/Contents 538 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+538 0 obj<</Filter/FlateDecode/Length 786 >>stream
+x\ 1U[OÛ0\14~ï¯8o+Ó\12rk.ìa\ 2
+¬Òh7\bÛ\vRå&Në\89;;\81UÓþû\8e\9d¤\14AS±Ñª\8e\1a\9fóù;\9fÏågÏ\ 6\v¿6\ 4\ e¸>$yÏ2-\18D\ 1®^¨V\a\7f\82B\86\ea\b\ f\8b\98ã\1f\v\Ç1ÝÆtà\9bQkk!¬Ù.í\9aÁSX<Ã\8e6 \9bóNâÞá¹\a¶\rq¦¸ùa\0qªQ-\88\93>\11\89\aã\18&ßÎá3\91ò\9e\8bô þ\8eN~ãd \97\81g:è׿\19\8f®ã+§¶Ø\82Ý\18¤<'¬\80\82ä\14ª\82%<¥ KÁ\8aùÿ V\92\8a×ÆÄH\7fÈ\92\94\8cwÐ\8d¶EpBÓS"\\1f_NGãó Üö%ÉaÉç¼8Tk\96\ 1K\81\15\19W1WIY z{ð8p\v\fǯqƼ¤G°\12TV9\99-×ï \P¼zt+ \114¥EÉÈR\ 2\93 «Õ\8aK\9a.×\90q¡\rQ\93;\94¥ä\80\ f\96ñ%)õÎ\83/$\vu\1d\v"\8b7¥"\82Ç·w9£\14\8fáùJð\9c!´Ùì·ôN?\8dc\1dgÇu'K\86$1jE5c\89\96ó\90T\18\b¾¨ÿjA\1e\8bð(§¾NF÷õþs\19µâ¬(ë8\9fJ£9ïÈÕÓ«³ánاX`\0\9b\17\1cuïB½\19\8dcÛß\8d«³\ 1\96ô\8e.;bÞ\87"ïY\99,à\8e,+ZÃX\10©\126\Ï\1cø!&ÑÀ\f]]\93Ð|\1a\1fLJí<ÕÎuú©[Ǧ£\92·µN\88¤`\1f)ðgv\7fïx¯¼GC\9d\15S[C±tª\12~j¿ßáò§æ¿©$Ûô\90·áDú\89\8c.FC¬¤¹àÕª-\9f\8e¢Qʹ\1d\19ÙâÔ§>ßÄö@ènCJìZ³ª¤\12Éñ\ 2ë\ e_§0[«né\9a6\90"ÅçÀn¹n\ 2Tý²m\15ÃÉåôêì\1c!\9aÆ(hF\ 5-\12ª«¢õmin5\87=UQ\15)Oª\1c«L\91ª2D\85¦Röeo\97zE\95c\ 3j(¦P\93\96\1f:Ä| Ïíáðz\9cU6AN~\ 1\92\9f¡\f<\ 3\94E0*;hïK#\ f1_.\ 6\8eÇ\8fÃ\7f\e\8f° $¥¢¦\1c6cÇö\1cÓ\8f"ð\83Ð\fýA3|N\8ea¨ú\v_Q!á¢Âî«Ü\f\e\94µ\11XØ+pNµ3H\vá\ 5\9e\19`çÀ±\9fö]ÝÁÎâÞ\97Þ_\88ÍUÔendstream
+endobj
+539 0 obj<</Type/Page/Parent 458 0 R/Contents 540 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+540 0 obj<</Filter/FlateDecode/Length 674 >>stream
+x\ 1ÅVMoÚ@\10½ó+æV\12Õ®m\Ûô\12%"i9@Ô`z \15Úx×°ÅÞ¥»ë üû\8e?\92b\ 4\88\16U\15²\84äÙ÷Þμ\99ñÏ\8e\v\ eþ\\b=è\ 5\90ä\1dÇv p\1dÛ\ 3?
+ñ¿\87\8fb\90V/zQÏ\8ev_ÜÄ\9d\ fw\ 1¸.Ä)b\ 5Q\b1\ 5Äq\1c\88\93ît<ü2xð\1eE\91Ï\15KçTæÚr¿_Ä?ð\98ß\1cCnËí!iL»\18Ä\14\13 £\80±\84\v(\ 4O$e \8dâb\ 1KF(SºFx%¶¶!\90s\12?\1c¦hp\ 5ÉÙ\ eø\11ÐÁýh>\19\ eZ\17ù£kàáFt¿¹v%Ú\8bl¿¼w\89?\1cßÝìÛèã"\95ï!cÏ,ÓÐ\ 3"(|\ 4\82Õ0KL\ 6\8a\9f]Ì.Ú\8a\1d°¼ Æ\9b\ eÇqôxDáÕÕ\15¬ ¥eN\8d\84\ 53à[O/\86\ 1ÉøBäL\18Øp³Ä¼\13e@¦0\19Ý4Ùo³¶\93\8f¼npZò\9b\8afL,\90ç\12¼ÿ\80ûí~8¸<,·\10T&E\99\8cß\86¬\8cÓh\7f*Rô+¬%Ç\buDÿ_ð c^M\7f2Míý&\91ûúkÛü³n»·víÔ*lÓ\0\87SÕ £ê:f¯Í§\93Û\87W\9f\17\1a3\97É\85\14Pz}\97}ËÌciØ'àhHYd\14\9e\18àLÀF\90°\12r\ 3\9b%1UW¸\ 1T\ e®\905Ó\9a#ö\8a½\0×\90Je\97¶aãx8º=|£Z\9bá9«cöN\9bñ i
+g¢¬x²\92çì\89Ö\e©(dD\eÐØógêz\ 3L\88\80dIÄ\ 2Ër^ÂÞ ó\ 25\9e\86Y¯\99Ã\95,\r±gÞ\9f0Ϊýu\1cø\1d\9a«È2ø'\ 4µ\au¢øÚìl«óÕ¯\95LyÆp\ fàümÏ\82óÁ\97\12÷+å\8a%Fª\97cðQ³\10]ß³\83~\1f\82ÐÃ\ f\r\\8a\93ëÑÍ5\fÊ\15(׸ôásÁiÕ\8c\96\eFU¬\15:ý*Ô¨"1\85bÕ\92õCß\ e\83\b?H\10¥\17\96õ»\8d;_;¿\082t'endstream
+endobj
+541 0 obj<</Type/Page/Parent 458 0 R/Contents 542 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R>>/XObject<<>>>>>>endobj
+542 0 obj<</Filter/FlateDecode/Length 546 >>stream
+x\ 1\96ßoÚ0\10Çßù+îmÝ$²\ 4P\12\9e¦VÙX¤\96j%ì¥\9aP\88\1dð\16ìÌ?Øøïw&©ÖVÅ\ 1\81xB9\7füõÝ×çûÝ\vÀÇ_\0Ñ\0\86!\14\9bÞMÖûø%\84 \80¬Ä/a\1cAFÀ÷|ß\87¬¸\9aOÓ¯ÉÃûì'F\8dÚ(\Ø\ f\86Þ\0\ 3¯ÖbC\810I\v-ä\ e\88d[
+\86³B\10
+JKÆW°¦9¡²a<íÔ\7f\ e\99§Ó,\b\ foR\89\95àP\bÃõ\19\94eN Î\95ú#$9
+6\1c\1c\964WTB\9atÈq\11&R\98ú<\ 47\eXY\8crèø~\9f&\1f\ e\1fÄp"
+³¡\S\ 2KS\96x®Z0ü+A\8b\16ï9ø¶x®s\1a\9b©²ÊW.\91Å:\97\8fAøáÓb\14U\8a¡\15~Ñ\9dKQ\87g\e;!o\8bÈ\93½z\14\9c\88MÎøÉðSjÕ\9c¢Ý\88¡µ\9b¢9ò²OòÈw$yä£äg~¨sBì\r^î4U\1e\94F\eI\81þsnëðɱY\97-|è\ 3úw!ô\9aÊ\85bD¹h\1d\89\99Îoo\91÷Rû\7f\13ï÷\806U³4QN?OÓYöà¸úÖÐ<Ƕ÷Ò:®\\1c\83|§0¿U\ 5\17F·f/$«õ\ 5\15×R\94¬¢ØPõú\82ØWÏÉå2ü
+üÖ;å*`G\8f;ª\11OÒäÑ:¾éØ\8e[¸\ f\0ÆKá\92Ôå)G\97;\1fûf\7fs`\93û»\ 5^¼&"nç\88 \8a½p<Æ\99c?JÌ®ïn®!¡[Z\89\9aJ\ 5\13Ã\bµKúO\91ýÈ\1fÛ©c¦¥)l/Ú¿)£häEa\8cÓ\v~\1aÆvÅç¬÷÷\ f(If$endstream
+endobj
+543 0 obj<</Type/Page/Parent 458 0 R/Contents 544 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+544 0 obj<</Filter/FlateDecode/Length 679 >>stream
+x\ 1UßS\9b@\10~Ï_±\8fÚ)W\ e\90\1f>´£FÛ<\185b_´\93¡p\98«rGá°Ú¿¾{@\12Ð\98¤\8e\93aÈpû}»ûíÞîï\ 1\ 5\13\7f\14<\vl\17âl`\12\13\' >8¾\87ÿ-|
+\ 6i}à\98\ 1¡«\ elê\10ïùÁa8øtâ\0¥\10¦\9aÝõ=\b\13@\ f¦ a¼\93È,â\ 2.GÃÝð\17\9aº©\81¶\ 6µ\89\85Ö;óÓ)Z\\8b*\9b\96<)\7f4¶\1dÚ\85©T3VÀ\92µüÒØ\ 6]^Ë'\8eæ½ü6\1d\8dOΦtz\1eNàf'\97\(V\94 $ܳ\av\8f¢\94³\bSç"\95Pª\82\8bÛòf·\1fª \86å6\84c©Ø>\94\8cAÌÓ²\88r\8b¨G\85\1fbÅ¥Øû\bytË\80\9a¤\9f\0%\8em!\8bG||c`&¤²@×\9cNÕS®Ý'<\8e\14+!\82!/ïj<ú¥.1Ý=\8d k\10ç\18¶\82\8b\8aUì%ÐZ\ 3\1c²\a\1e¯Àدc\ 4\8cÎ\8f çù
+\98ùèëªãc¢ØJæð\93kq\14æ·Löf·\97î\8c' ÓÇX\86V¶E\8f¼ÐíûÙhø¡¯m·\8fjA\ 5S"Ê\18\18Ð\96[W\e?\82þÚ¯l¯ ¯Fãж6\90×Õ2 ~É´\8d\1a/\97\ 1\95Hd\e\f\e,y\9eG7ÆmR(X\16\15wý\fb\99iò\96zC»_Öíþ¦\16¿\1a\8f\10½I\87¥È\95à±LX{y\0EÙFë\9c,dxéc+5\ e&Çóû\7f\14Nú\95í\êf\ 2ÄR(\9cT8\þp5Ã\92¢Ø\ 5gå~¿e:¸M\r£»â¸!\99°(éóüWëi¦Ã*MY¡Ijè|"\fþó{\84ÿ>¡\v)\8c¿¬\90½\f^Y\ 3\9b\ 4Ý.¢Þпî`Öl\95FE\86Åz\9aO\8drM½\96.ðª¼ÁE»h\1a\ f~»¹¨c\117\bÀõöH`5ûëàôð\0pJ³{\99ë½õµâI=Ã\fêùµµá\99A½êTQŪ*X\1d·ãáªv}l\ 3\\1dv \1d\1d\87\83\8bÁ?\1e41\93endstream
+endobj
+545 0 obj<</Type/Page/Parent 458 0 R/Contents 546 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+546 0 obj<</Filter/FlateDecode/Length 879 >>stream
+x\ 1¥V]\8f\9b8\14}ϯ¸\8f]©É\ 2\83\12fß !«h\ 2dÀ3\99jU!\ 2ÎÄ[\82Sc\9a\99\7fßk>æCênÜ6QPBÌ=>÷\1c\1fûëÈ\ 4\ 3ß&Ì,¸\9aB~\1c\19\13\ 3¦¦1±ÀvføÝÂ\8f °\1fydôçr
+¦ d\8f\8fL\9d\19\90\ 2p¸a\0É?ÜBâüóù\ fò/\ e³ûaXrl^a-R|8eEÁªG\90\1c\1e©\84¦b9/(ÔR¨»öx÷,)d%{¬h\ 1g&\ føW&$ð=È\ 3\85$ðà@³\82\8aI\871Leü\16DÍâÊúïIø\15ÂÑ:ÆB¿QÅ\801ôtº*×=ßv.\963±\15áÄ\8fïý8]\85Ë(5\ró=\1e\96°¦Ý¸\90Kú\17Ô\94BÎöõt"\9f$þÊ%ã\15¨!ã\96ÿ\9eѲ¨¡ u.Ø\ e[\84M\11\94Uت²\84\1dU}Êê\9aaÓª\9cb«\ 4\9dÀ\9e\v OÙñTÒ\8fm\15ù|¢j"\b?èRâ#XnGK~\ 6V·Ãêì\88ZÔ°O¨øF\ 5Á§>ÂùÀò\83\1añ:\a\84Ç\19NÌV\927\94\92û\94|Úøé6\8ao\12â\92U\14vô\7fd\fã -¤^&¸HåÌÅ\17$¡è×ï{öNé\ 1¢ë²Fu«^·\84´
+ß®µkÛàVÏ(\9aj\16\88¦ª\94¥[\ f'·ëþ¾\ 6\97E\14¸«0\9d\93xAÈ\81\8d`ÇL<CÁ\8f\19J\91st7/K*ô±<÷F\ fÎ4ÀËò/Íé\97ÐÈ*ðÓ$º\8bçþef\96\ 1\9dï^Z©\ 2@²#y#ÐܪÑ,o\8dü\1aI?t\87»Ü\Ƴ\rpO¸D`Éð²\11\ò\9c\97½l:V £{\7f!\99c@È¿Q4¹¾\r{O\ 4~àùñE.&\86ñ¢sC@\8f;-'lb\fÍÛTÓì\16"ôêÔ\87¬Íî\13^%|mh£#Ébå®Ñä\9apö+Ü°®
+\86»D5\98àÿv\83!#\1eüpõ \8bè â\ 3ØS/\92ÆZ
+É%aP\17Ô\9eè\97Ü.·\97j¢\12/R\f½Ù²ªàg\fn®\93\ 1\9d\ 6éåécO\f\18j#\8d
+·¦Å\\9fÍ&"~HPøÔ\8b£-Â^à¦ÚõÂM\1e2 yV©4hw§\9d@\8a\18´ú1à¹ó\9b»\8d&¸êëKؽÅÒZM\81\9b\10Üõõx¢»\11*Èp\a\16ðÓPC4´\88\17:ª\14|\8d\86\ eÐ{ÓG-nëh\8e\12®W I£pý©\83tú³\8f9s&Óëk<\18v§\1f7ð\XP\8c;~¢¢\86¿\eV´ù0\1eF\8egÆu{P\92¢Ée#h\9bµöÌ\9e̦\ e\1e1ñ\fe\e
+Ä'£ÛÑwÞ]ãàendstream
+endobj
+547 0 obj<</Type/Page/Parent 458 0 R/Contents 548 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+548 0 obj<</Filter/FlateDecode/Length 1256 >>stream
+x\ 1VaOÛH\10ýί\18õ\13\9c\12×NÒ$|\84B¯\91J\9aB¨®º\9cÐÆ^öήë]\a¸_\7fov\9d\10r!Tº\ 3\11\81½Ì¼y3ïÍþ<H(ÆwB\83\ euû\94.\ eâ(¦îñ1>{Ã\ 1>;ø©$åáE\97\1fm½8\9d\1e¼ýУ$¡iÎAúÃ\ 1M3B 8¦iz\18?ôð\e\7fѹ®\17²\12N\92ÑÅ#Ií*%--DõCfô¦0©(Þ\1cM¿#`¿ ØFÄvÒ\8d:\88yxõõfúmr~söùâd4¾9\1f__\84Ó\eé×\87ã\87aH»\99÷Ì,\84Ò6¢é\9d¤Òþ}%«¥¬Hè\8cÿ
+o©\14\95XH'+@«£¹¤ñõ§OÑ\ ed\9d~Ôcd×£ñ´Ûy\19Ì;Tߦ²\10.7ÕâFe;bªüúytöÛË¡J£4°\913¤\ 1sO WA\ 1ÒB|7\15\81\ 3«\8cþ\ f±z\1cKéÿ%\96{,%ÍÖÝ\8e¢\88æÊQ®d\91Í\8eö\80üuæR³X`üöĺ\1e\8f®¦\97{Zj\97I\9cÜp\vPzUj2I\16\13oÉädÃd½Ö¢×³Üp\9a\ 6ï¾LÍ\91]Sº\9a,\1e\88á\9f\7f\85ªwi¦\14YÆø1[·ÒmWÕkÏ\1f¡]Q¨[\r½Þ+w\87\82Eå¸^\aA]]\9cÒ\9d\14\99¬\1a\14Ç\94À\frò*îö\82V.®.'ïÉ°î¦\95ÐV¤\8eÆ 1£\89*\9by^\81\83j:\83¨Ï\12û\80Ùʤ\13ª°°\8fu¾\1d!Z _RªrÛ\8fÜCÓd@\81Rs¸]»\9bl\ 2á¤ö9%>+çd\97\bp\95¥Ôè¬N\1dpzìBûz×ù9NàDxa2)!,\fÖ\9bãál6\19MÎg³çÙ\ e#úfê`5¹ª`8f\8e25 Jú<ù|\1c\90V]ÌU!é\ e\96UÈ\16Í\1fQ¬öM\13\8cÇ\94Rÿ\11`pGJ\ 6ågô\ 5(¶ZÚeº\ 5\88`R$\1fÄ¢,d\0\97¢ZÄó\ e±\ 1¥\94\15û\19üó\89\8b\96wSo\9c©¨ªG2µk\ e¤\85±ìý¾y\eeàQ*é\11$\bÞ5J+{'3?CÜ\8aÆc=Ót)\7fÖÒº'kFù®)øÞ\80\fW\97Ä\83\9eôm\8b´i~\ f¦na+ÚhI?´¹\aÁs`\9b\1d\ 5Ä^\1c[TgÂ\89Íu`ë<W©â\8c\90\b\ 6Â÷\89\89\ eS\12\86?Ä\vO8BØ6¡µ\ 1Y\ 3s½h¶Ò®¶\8e\84 \92ø!\8e;}ΨÐé\94÷'\b\87\88Z\84>ñÛ8yöö
+Ú}R\14}ô³ÂRuhç\14häaÞÊÚ@[\83Z/?®o³[<\1dü\8c\87\v\10ü°B\15`s)ÿÕ4\9c;c\16\91ÒaÅøÑ\ 2ú\93É\88ÞÃ\84yóB(M\89³C¶\ 6\8e;;B±>˳¶\13tÈ©ùØGï4*rS\14æ\1ep \8cÕI\ 6\10
+ÿE(à\13ûçe\16Ã\16Ú\10\ 2ÃÂô±?6\97\v\7fÃY\8a¢f¶e¨\ex0ÿë\83\\f\17\8e\8f^w\9b¸0>\97Ò\96F[\\92X\19~Ô\85Å\85,<%\9e.ðd\95_=àRTÙ\93\12×ç \ 4oÖÌG\88»\9b»ðÎsÄ} \7f²ãn\83\e9Ænk[¢«àÚÝ (\ 2Ñ\9f5Ë"kQ\90\96|\ 2ä`l\1d\15RÀá:ÏWÉì°¬Ì\Ìq)\fKfvÄýB\ eåy\83iLq(³¬°8\14|\83Ç\11Î\aÞ\ 3,QX¯\14 +ÌXªÍv2s¿\93³&EØc|\v`\9cXe\8c\7fs\9dm\rV`c¥p¥Ó¢\ e»\12ÿ¶¹\199"ju÷Üõ'ÆÃ?zo|zÈýóܾý0l\96D2\18Fýãcê¿\e4\97Þ\93\8bÓ\13:\93KYÀÜq'ý½F»\19\{u¶=\88\8fy]\ 5\88û6koÐ\8b\ 6ý!¶ \8e÷\12\8er>=ørð\ f\80Ã\94¤endstream
+endobj
+549 0 obj<</Type/Page/Parent 458 0 R/Contents 550 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F5 6 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+550 0 obj<</Filter/FlateDecode/Length 970 >>stream
+x\ 1ÅV]oÚH\14}çWÜö!\95jÇ_|¥OI\1aZ¤\94²\8b[´ìÃ`\8fÃ4fìÎ\f\10þ}Ï\8c1E4´+ª5\921öý8÷Üs¯ùÒ )À'¤~Dq\8f²U'ð\a\ 3úvR\ fø\11P7\89ý!%\83>®ã®\1f\93âTÀ6\80÷áÔÚ:\83Æ6\82½3½I;\97£\84Â\90Ò\ 2 {\83>¥¹ó\r(Í.FBió\8a\98¤Ùû\e\93Uò/ÂIòÌ\88J\92дb9'S\91Yr\1aOo\7f'½d\8aû\94â÷\91åj\r-xc¾ÖB>\10\97\99ÚÕ\86ç/ÓÏ\9d\80¼0ö#侨\99ÖÛJåú\15ÉÊPVr¦<Ã\9f\8c\v*[0UÍ\ 1¦E\00\16A-ê&·5£\1974a+\9eÓ\14÷é\1d\93yÉif\98á'9[x\9aK[ma¸¢íRdËCT\9bIq\96ïl±,Ëxmèz:F\8d«\15âj\9fî\996åÎÂË-YYYin½lL\7f\9f/êù\891,\19\8aëªÜðüêäiù\98\95\97A(«Í°o\ 1 Q¬®A\83Í\r?³\ 5\84<\17¶\a¬¤ÅÎp½\amI\90ë²\ 4aj%$*Íi>\9f\8e§wó9IpAE\850°úszÛÐuBÅ'V®\11Ns.IWT +\1aJ¥Ð6Ö\82\97ÕÖá½\1c\ 54´¢ ý$\8eÈ\8bºþ\0ß(\8eö\87\90@\b| £i\96â_\10Ú\µ\ 6\ eÃ\11\89\14<E=ª\99b+Ýr\12BòÇA_Ìq4õÌç¥fªÎ^\1câ\1d.\82§^\17Ñzñk\9c1B8\ 5ö2IìÝîë¶æ\1f\ 5×j£7Ï\aïÇ6bÏE¼Ãeà\82wom\86Ø\ 5¿\1c\r)D«\vèºá'\8eÜ7øy\a\19qe!\1cO\9e\17ÙÉ»ø[ïg«iµâ[%\8cáÐsQ\95àÞN\8eâ\19\17Ð_U\10\ 6å\11\ 2 7k\99Ù!5LêBð2ÿçDSc E\80|ë\8f±âW$
+ÚUk4Ú\80òì\11ÍÍ\99a\b^Ã\ e\9aenÄ\ 1\ 3õ\85v\9fà°Ê\91ÄÊ\92\12ÏÊÎ\89=j.í̶¼îG\19w¸²\191\ 6f$r0UeþÛ º\14\82Ô\86)W\13g\98;ÔfU:Iïg×.Ëä.½ÿðöÃÄ©8wÒÕ\90ã\83\90\9a¶Â,÷¢ì\1eV\99×\ e[U\14(rÿ¼]u\17¨§iÁ3\1e\9f\98\12l\81]av5ÿÎñãx\92\ e~îkÙüηK\9eSý\8a}Æ\1cn¸Ò\98á³±Î!\ fÏzü:äØÐ\rr!ÿ\ 3òè\7f@\8eåä\90CÖu%±\94\9dÜÍY$çX\8fÏzü:Öc`\9f7oá\91b\ f´\10ÆÛ
+Ô\80\1eXÕ»·\8e}2\7fy\16ݹz\92³\1e?¯'þ\17\8d|v\0\82'ì\92ý2ñ~°x\1al\83ý4\87ý\81ß\e\ eñ÷\ 4\9b\ 5«\1d\8brvýþæ\9aÞð\rÞH5æ\88Þ®EîÞë^kíõ\ 3¼¡\8e\17nÒOü~\ fÿ£ìíÄÕp\97vþè|\ 5\15_£>endstream
+endobj
+551 0 obj<</Type/Page/Parent 458 0 R/Contents 552 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F5 6 0 R/F8 9 0 R>>/XObject<<>>>>>>endobj
+552 0 obj<</Filter/FlateDecode/Length 501 >>stream
+x\ 1µUË\8e\9c0\10¼ó\15-åÂ\1e À\10\1e\9bÓìæyH\94\aÉi¤È\vÍà\bl\16\9bU6_\9f6C\1eÒb13«\f\1a$ì.QEu\97o\9d\10\ 2ºBH#Ø$PvNà\a\90ät\8b³\94î\11ý\a\84Ú¹*\9c§¯\9eA\18BQ\13"ÉR(* ê \80¢te]+Ô\97\17Åw*\8bç2\17\82ì°ò\17èE\89\1f\13ÔýÊ\ 6ÎnZ\ 4}ßã\ 3à\97·ï\8b0Y\aWL³\aàz`û\ e\85\86\16Å^7à\81)\ 3Å\7f"ìÜ\9b{\8djw\ 1\\94Ð «p\0&*Ð\8c·¾õ\856}[+â?ê\vH\11\euC\12yÉ4\97bVj%c£\7fmE¬ÓßDëàE{JÖ¶À+þæ8øÐ1]6¨ \8cÈ,ãü&\ 2Y\e\83dÇÅ\1e>}¸\9e\1c<Ù\9e0X§hm¿³õ\91<9ÛÒpêÂåö#e£zt\ 3\86ñ#\14\9e=`¦\ 1û\ 1\15Yxh¿R
+\8d?ô?®ZiYZñ\18.V«\8eH\99ÅN4:J&Jl¡\94£Ð'\93N\88õù9\974\17\94È}ËQ]R\10{ô p¸Ãê9\r\f=Ü\8e¨4mÉ^\8c\1dm+DxRaÍ\ 5ªÓ\aè\b\92\8b®øÓoýë,Ú¢4\e´I\80)¶wî^R8PÈÕ\92¢úÏp}\9b\86kNóÃ\9b²ùà ÓÌOò\1c\92(÷#sØ|Þ¾»ÚÂ\v¼ÃVö8(x=R\0\19\90÷»ÖK\83Ü\94¾\99\8e\ 4³\15§±\9f&\19}dZ\8e7féeá|t~\ 1¢\17ï\14endstream
+endobj
+553 0 obj<</Type/Page/Parent 458 0 R/Contents 554 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+554 0 obj<</Filter/FlateDecode/Length 977 >>stream
+x\ 1\9dVÛ\92ÚF\10}ç+ºüâujQft\1d\1ea\97MöaSή\~\88S©A\1a\81¼ºY3à%_\9fî\11\ 3K\1cÀ1\14 ¤\9e¾\9c>}f¾\8c80|sH|\bbÈê\11ó\18\84\81ðb\bE\82×>~z\ 5\ 5>\10\ 2\ e_ý\12ÿ0\b¢ÐK\9cièEÎ\96¡[Ï}9Û0ö¸³=¸Å\18\11?8q\ fféèç» p\ ei\81)Æ"\814·N\19¤ÙÕãû\9b¿ÞËìY\19(Ú\1eÃ~Y+m®ñBwm£Õ5,Ê&\a\89\9fá"{nÚ¯\95Ê\97ªV\8dy\97~F÷ñÞýØ\8f½\10\ 3\}¸ÿ-\15°Q½.Û¦\96\9f\aÃpg\88\18\8dyàùdÙ«®Ú\82\96µ\ 2©]\ 2ðé\8a½°èÓ»ã\0ã×\v\8fC\94Í\ f\85`ß\11Âl;uÚyÛ(h\v0+\ 5\ fO\ 4g\8aæ \9au/&_Tr¹³ú\9fÐ0Û®\19öæ\1a\10©Àþ}\1cºw±¤ÀG\9c;l1vP\1alÐéêÎt\87Ñ\8b_\ 6\90ÇPôrY©fiV§#\11\80\83\8d\833\97F\82V\19eèî==ÌÀô²ÑÐYÖ^\80\18c˵Y\1db³\ 3ñ\88?\88D&«ªÌOçEÏ¡Ì\11ª²(Uï!5\95·ô\buÆÃI4 Ïâý\13h³^À\87§9¤\9baÒNÇ"\fzUKl«ê]ÉC¡\90«N5yÙ,\ 1Ñ Ã7ÄË7\8337àv@|1Ìà}cT_ÈLíÓÏþ£Û\88\88\eZòZºE\1a$
+\16Òx¡z\95{4\9c[T\89{XÉ\8djÞ\1aì\8cj nÑȬ$6\bç`¿\18ÖZå.Q;Û]\89SÑÐ\94ë~£7Ù\907\83 é\12÷BìÄØ\8f<\81¿(
+r¡±Ë\99±:\10Î\ 2?¼»\11\96éü6àqÂè:L¢i"¸O×BÌy<\9fÝY\eËL\16\f}¡\8e£Þ\92WK\9c\ 2\91%u\11S!¢[\16Ò
+Îo&üf>Û\16s1±\9eb\16
+Î|w\9füú®Û{È]ò\13[\ 4\86!\11¸·¸?~\1cÊ<)\90\8bQ\7fðøÏÓ\94@\ 6\93\91&6\fÍ8vù\8d$"\80;Ù=íô¨ÑGn÷U\91Ò:"QA¨-¤6àJrzõ/ú\9cb¯,\90\8b\96¶+%\89Üe±#0|EfY×åÀk·õÀ`yíìôª]W¸\rY-~5Ç´v\9a=\1fÃò*-\9asD±\96/F\97\7f\9fQr´(ëu=èK]jÚº¬tÑN\a´Ö\12\87ÇÁw\89\1eºÃÝïB@\1c÷L\95\e<\19 Dþ@\1cì¶ÔºÍ\96ç$ÌZ\94ÒàH.ûvÝ¡\1eØJ.\97\81î\91tª²\9bý\99\9d\8a\b5°\93xêì\a¸ÜÀ¸!ø\86±Ø\9c¬EÙy1ç\8ax½_9û½°ífúrA\82ÒÔ[Ü÷^Ô®\1e±;\94ð\ 4\8fk\93 Ä\89ï\898"Áx\9a>̦p«6ªj;<ËÀ/kÜ \88icg=N\18JX~õ«¥5=
+\13<ËÅxÈ£ÛaH·æéè÷Ñ?\96tÍ\ 5endstream
+endobj
+555 0 obj<</Type/Page/Parent 458 0 R/Contents 556 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+556 0 obj<</Filter/FlateDecode/Length 804 >>stream
+x\ 1ÍVÁrÚ@\f½ó\15:\92L 6qlsètB\9b¶9$Ó\122=\94Ng±epk{\9dÝ%\81|}%Ö&ÐÄæ\92ét\18|ðjõ$=éÉw\1d\17\1cú¹\10\fàÔ\87(ï8}\aÎ\86\ 1=½\90\9f\ 3ú+\84Ä\1e8\83¾ÿÒ\81\e8Ï\ fF\93Î\9b\8f\1e¸.L\12öî\87\ 1Lb \ 4Ç\81IÔ5\v\84b\99ÏP\81L@¯\v#V¨aÚ]\b\r"{\10k\r3Ä\ 2ÜwÓ£i×Y¹Ó££É/rêWN{äµç\9eö\aä·{{y= ¿ÿ°\16;°[\ 3¯7[\e$Ïé¼È±0P\8a8N\8bù \88¹H\vmàæj\ 4\v\141ª\16\9cc\103m\94\88LJ>no.`üåýÏËDDØ\8cMy\82(b¸G¥û\9c.ÝEÅw ÊR\ e&Õ°Ô\14M+2Á\16:Aõ:ÈF\12$q+\15Q\R\18Ú\82\ fwË;\bû\1e\97\97\93<\8fc\85ZÃøÛ~\94\ eô\ 6¾5c\16\\1f2,æfÑ\\ f{Î\85à. rRæT\93([2#Ô\16Y\ 6T <-\84\91íl\94RY\1a¬\97fÌ\1d$1\93÷HxÀ\15Ï\10¸1NöQ1æÂä\a*2F=J\89׺"ußíT\84a©j¥,¨ÖTò2cÖEBém\92·\rÇÁXË2[SgF¿Ñ\1c*r.VF§\8f-m§ENP\9aðï\96¨ÿrølz\887r©^Óåé\80àµ\8cæiÜLÌ#*¹\9fë^hÇ 1\92ELÓª¶óVµb³S.&ßà~µ\9dAs®!F\1d©tFì¢PÔòm½õ¯\14e\83ÃRHÁ.3SMaÝJ»\1aÇI=IfeN\8aé¬\9cÿC\1c«ñ·\915\93cÏmà\ e¼\ 5\11EX\9a\83òN\rªPhY´yæó'Ï\85¬®\80.1J\93\14ãV\98c¨5Ö.¤mÃ\1d\10xf¦¾Yí2H\94Ì«¡Þ\19¿Fu\1dãÝ5)Îa-Éi[Ñ\8eªÕÓ\8aÅsEa]GZ8k\90\14\1d\99o\9e/JÁ\8e\1\83<µY&£\ 5í\99æRsʬ\15u\1cÚ,g\10\v#XËXQ«FnÜÖDgI\9d@³mpÕ\ 2ÄF´"\85I\89ÙÊ\1aÒ\98^1\9fÊ\92ÝÊjÕ\96²¤áiNH\96¨,H5c\9b\8f\8e³ÚsXE×£¯ á\10üÀë\87¼\1aoίFçð\81j\9d±\v\r\9f\96\14\1dãôÜ ÜØö\ 2gȦ\9f·_\17\1eÝ\ eü\90¾¾èµwÆÖ\17\93Î×Î\1f§é²\ fendstream
+endobj
+557 0 obj<</Type/Page/Parent 458 0 R/Contents 558 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+558 0 obj<</Filter/FlateDecode/Length 1005 >>stream
+x\ 1µVÛrÛ6\10}÷Wì8/r§R¨K))}èØ\9bx&Q\\9b\99ö\813\1d\88\ 4-Ô\14I\ 3 dçës\16 ]ÑVTû¡º\8bXìåìÙ\ 3Þ\1d\r)ÀsHÓ\11\8dCJÖGÁ 0\1cãs2\9bâs\84·\96\94¹\85Él>\98ì[\18\87?=ßq\16\1d½ý=¤á\90¢\fAÂÙ\94¢\94\10 \b(Jz?\90±õ\92¾\\9fS´¹\14É´'Ñ?Ø2i¶ ¡þp<\18aWOPå,(\95\95,RYX*\v²+I\95ª$\15b-)îUº\\8aeþà\16Ta¥ÎD"ã\13\12Eê®\95\15\15õz)u|âcÍ\9bX}\ e6\9a¡:\ 4»ºüõï+i\16¥^ÓÕ\9fÞðß:ú£Ð\9b}¹XDã\11\89</\93\15¢}?û7dÔWIeæ\92pe§Â
+R\ 5-\1f¬4Ý\10.\97¶p\ e2\f©ÒÒ$%*º?\18\86Í\80\8d°
+è4ö¤\18.\95)©\ 1\91a¤\84AOïjil\8bC[Þ³Ø3JD\91È<)ëÃ\15z3\ 4\85Ý/\b\14Ü\a/pÎùê\8dL\ fa\17P\1fÍ\96\ e*Ð MUqs\0±Wñê\8dë\88\96k¡À*ݶHË*\7fð1À\10\90"#\87Ìxè[\1f \95wSF\92#æw/\ 2'ÁPö$E²j=.¢\8fק\8e\87\8bóèãç÷\9f\17\8e´©ã¯á\1d\86¶Ê®Þu+c·\rÝ\ 6îÑ\8dº;"MP&V×dz\9e\8eGß÷¢¥5s'\95Þhoý\98\10:\ 3bôÖ\7f\9d&·]\97\8fp´\96\86\ 4dÄ\r¬.\13i\f\ 3#\8c)\13\ 5¶\167\80\86ØÖ\8dsÜ\93\83\e\8aãË\8bËó8Î\8dÐU\82)f|Hбբ0\19ºe\1eÀõûc¦µté"l;8<Ä\17<þ\90\19]'¨
+B0 nOUëª4\10µRSZrp»R\86ðª\8bÛ¢Ü\16\83.\80;MX\94V¾sNØ?D¡pýé\8c"NJ$¶\9d,vdz賶Û\92jh\ 4FÙ\0á
+<Ö\98D(\94ñ9eJ\eË{07Á(ü\993Ø©\86\813\12\13\9d²\rÿËT.i\ 5aÃ\97o\9aL1"n\rù\94\90É¿v\932UY\18é*ûÏzÖ\925ÒÐZÜ[V®\1fù\97v\1aÆJêÚv£ð£i©\13\15\88\19ç\85\89v\91Xd\Ö(óI1ûf\87Gò\8e\91ôXìBëm©m¹ïx\8bÁ\81¸MÈvxö÷í1×&\8aG\18
+£\9dxB\13|\rîx\ 1_·+ázÄ2[¯\81·-iéXý¤B\165\ 5ê-%\ e\ 6\7fô (Gn_âZT\15\13ïQ\9bS2%eB£4'\ 1;=R\85²JäôØÕF»\e©Øw\î"Ø\16ùDY:ªp\1cãá§-\8e\8dÞ\98MrÌ%í?\8c;Ö\85\85±i¬÷\1e#\1ds´L¿Ô5\ 6߼ܳ\97\89ÿÇ÷öÖ¼\ 2\12X¿\ 6\92ö@hR\9f5·$Ãél\10Îç¸orw@ק\9fÎNé7¹\919f\eÃù¾\ 6y¸IýÖ²?\ræ|\ 4}\90\ 2g\19/M¦\93Á4\9cáî\v\97'!_:\8f\8eþ8ú\ 6\96Wä:endstream
+endobj
+559 0 obj<</Type/Page/Parent 458 0 R/Contents 560 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+560 0 obj<</Filter/FlateDecode/Length 767 >>stream
+x\ 1\9dUQo¢@\10~÷WL\9a{°I¥\80\14´oZm¯Ikmá\92{hrÙ \9c¸KÙåZÿýÍ®pjm59\8d\ 1Ù\9do¾ùæÛáµå\80M_\a\ 2\17º>ÄË\96mÙàõ»\96\ 3^/ {\97~%Bj\16z\9e\15||>\8cZç×\1e8\ eD©Æð{\ 1D \10\8emC\14·O\9eé3½\9d\8eõu2\8eî\1en\1e&'§Ño
+óë°\ eÅu\ßò(²=\11
+/!\9a#<M¯~MY¼@\ 5iÉf9ò\99\9aÃ\12\97/XBÆáEÐ_E\e\87\19Oà _+\94
+\18Ý\9b\a\83xÁÅ[\8eÉl\89\Á²¢ÅXpÅ2®ÓÛÐqº\96«Sj\8c\1a]¤\ 6\91\ 22*\9b\18@Â\14;£tq^%\19\9f\99å-fsd \96Öº F\aÂnÊ©i]ê\r\8eåu]Z
+¬\1e])ñ\ 6G/w4%ß²ý\8bf\8d\82u)fq?\18e!¸Äÿ\85\96\rôùu\1f\1cÒ>¥ôk\86]·a8\89îÂ\ 1D%ã\92Å
+&l\89 L³\ 2÷\vÖ}oë¾IÝ \1e#\90\98\14\94\11IPl\81\1c\ 4'ù2 \ 5\ 1\0+¿ >\96\8a½ä\99\9c\ 3Ó\rãh0@ £ýíôê\eÈ9EÃs;¼\1f*ÚòóùÔ\82J"PÚrU(âX0)ßD\99HÓ\9a\1de\1f
+¢Â¸é®.\ 5Þ²ÚH\9cÊ\83\1dÇæ\92\95E|bA¨\ 4eÔNI³\1caN6Ëq\1fû\87l<²µí\8c$!W2\bÉÊ\e á»\ 1\ 1*W\11´\0ûÝëÚö>hh¢9èV\18òS\91gñ\8a\ e¦±ü6¹ze\8dl\90v]µá·³³f¨\13<VX®à\96§\ 2vÓÈ3@\15ï³;\fI:kÔ«\ÈOä2\8f?´uÍzÏî#L3\8e\12RQnLD\a3Ñg5]5²\93"D¿ñÖfÆl\1dÉ\ f2\9aó³3Ãþ\r\ 6ûÝ\8d×Fß\19UÍÜøT®\83pvp\ 4nÌ«%\96Ú\ fQI\ 3\8b\8c<\12K\9aXò0¬\19\11\9bbÍ@Ýfi\\13b\¢:\b\94¦GøÝ ±¨
+\boG\87\19¥õ\80øR·\1aH\9f\86#HÇj3\1e:X\95m¯«êÕï\eÇs-¿ß\a\9f$ºpÌ$\ e\a÷Ã\ 1\8cð\ fæ¢ÀRÂMEÎÒa\1d'è\99Ý\9dÀîë\11wp$z\ 1½#ý\1e½Ti§gº=\8eZ\8f¿à]\17\rendstream
+endobj
+561 0 obj<</Type/Page/Parent 458 0 R/Contents 562 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+562 0 obj<</Filter/FlateDecode/Length 691 >>stream
+x\ 1U[oÚ0\14~çW\9c·ÒiñâÜÓ\97\89\8aucj¡\97tOH\95I\ e%]Hhì´BÕþû\8e\93Ð\ 1-¬«FDäØÇßùü\9d\8bï;\1cLz8ø\16Ø\1eÄó\8eÉLð\1c\8fYà\ 4>\8d-ú\97\bÓzÁ Cú|mÁt\98÷Ú\82½\vÊr9\v^î\b\ 20ÙêUÞÒ\aѱ\99ÛZ\ 6!³\9fé\10sf¶¯ÖÔuX¸\rz\1cu>\9d\84À\1d\88¦tV/ ARo5!\8a»§W=\18-0\87ó"KãåatGæ\1epÞ\98\e\96OæÝa¡ð\b¢\19¢6\83\99È\93\f!\169L\10D¾T³4¿\85eQA\96þDÖà\90Ûg\9c\80iÇÝK¼¯Pª\97~¼fýÇhÐÿЬ:ín\8a\8cÁm
+ m\9fTÓ)\96Ä"Í\15\96\9b(ƺáõpp\15]Z»\91$\96\ f\84\94\8b9\82\ 1U\9eÆE\82 U©Ï!\95(\95\1e<¦j\ 6ê±\80\83ñø@îñ7:þ~Ó\8b¢ËÝ\ e\8bÉ\1dÆ
+\84"\17\93Já>´ëÁ0²÷\90çD9A\99\96\98\80\88c\94-ØJðZ
+ëYr¹(r\89\9bìM0¬VóóÑéÍ·a\7f7u\9d$\e\81ß\84Ú\10¾DU\95ùn,ò\vi\9e¤± @V\9bìë,ñlÞ$\84ö}Qa¹\84A>-Þ\9a¦©¶\8d3!%9£\92i\14\80y%\95NXE\99,uä\85¤±PÚHÏ\95Mv¾?}ÿ«\94:\v¸·[ʵC\8e»"\93\ 5\88Í0}\1e\1f6»ß\97\17\7f©Å*O\8a¸\9a#Ub\ 2o/Ì\7f9Ô*Fk'ÃY÷\90ña\e'\13BÝ\fÛa®\17P^»,°ëv!©~ã\19\8c»\7f\0\1aI(\v9uZÝRb!\11ì#-Ôö¬»=û´eÕ\1f\9dÝ\f\86'#H\8a¹ fÚÍGÈð\ 13 6õÅ\ 4\ò.è
+Y¥\ËzÍÕ¯\16Ôât\89\10¡¦\82\80~{j%h\9b#÷}fy>]Z\16³l[ï¿ê\9d\1d÷ ¯I\14\v,%|Ò¤®~\83û\ 1óÂ\10\fß$É\92׺¿ã;Ì'\15évHºN ¹}\89:\17\9dß»!ã\9dendstream
+endobj
+563 0 obj<</Type/Page/Parent 458 0 R/Contents 564 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+564 0 obj<</Filter/FlateDecode/Length 457 >>stream
+x\ 1åTMoÛ0\f½ûW\10=e\a{\92-øã\986]; k×Æ;\17\9aÌ \1e\12)\95ä!û÷£-§HQ/+ÐK\81Â0`\80ä#ýÞ#\1f#\ e\8c\1e\ eE
+Y\ ej\13±\84AΫ¤\ 4Q\16ô\9dÒk\11VC@\14i\92O\ 52Ê\9d¬àÿ
+\94\13-Nëèó\97
+¸\80zESå%}4@\131\ 6µ\9a]-çp®»\rZé\11jÛ9\8f\r,ÌF¶Ú}ª\7f\85b\1e\8aã´ âÙ\1d>vè|\88
+àOÑ<éÁgÚ\0î¼\95ÐH/_b\94!ë\ eÝÖh\87!!\7f óãëu\9d¥Ï»\10\9f1Ï\92´oà \ 6\1cGo\8d\ 6e´§¾ÏñâÃ\8a×!zÛ¢#}dóF(ß³ ^\19»\91\9eF<\82gÑwvLØSz8:Û\95½b\8cqI¿}B\14\ fè¤U\13´:\ 1×)\85Î\11\ fÍHê^ö\81\84\8c\aÞ{Åo¶¨a\89\8aº\86\99(óIÅ÷¦q§\e£È¡¤î[\15ùpP\83òé¸\97ÁcÀvìl°R&F+\91s\1eÀ\rv8f#Z¸C\13\9dÍ~{\8fÛgb·¿ß\Ý_^/\82ù¦ü¾5ëVý\81\a©\9b5\827ð\13Aõ\rG\v\94£a¹ ëYU\90³ñ¬,çßNç°À߸6[´\ e.º6ìCÌ\8brÈ\8d\vVõ\aä¿·O\14")ò\92Î&e\8bª\9fö¼\8en£¿7T\82+endstream
+endobj
+565 0 obj<</Type/Page/Parent 458 0 R/Contents 566 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+566 0 obj<</Filter/FlateDecode/Length 602 >>stream
+x\ 1µUÁnÚ@\10½ó\15s$Uíx\rئ7R\92\16\89@\vN/I\84\8c=(nm¯³ë\8dD¿¾³Ø\908à$(©,$\8b\19Ͼ÷æÍì}\8b\81E\ f\ 3×\86\8e\ 3aÚ²L\v\1cf\996t=\97Þmú \84Õ&Ðë1Ó;\14è4\ 5\98Ý3»\87¾ptñgG\9cùÓ\8b>0\ 6þ\8aP9\9e\v~\ 4\84ȲÀ\ fÛ3\949Ï$\9eø¿)ÏÙå\19¶CgøQûÇt¼ø>\19\96ñn\15'Z\ 6ë\10\1fJ°$\18\10&\b\ 49Oâp\rwA\16%\b7í Ià/
+.oNt\ 1C\7f·-,°P"#H\ 6ÄY\14\87A\81\12¤
+C\94²<\8dP\13\ 4\8dÚè°\12Íx>\801ç\7fT\ eóÑp¾\8fZ³kOx\81_ Sé\ 2³BÄT7ÎHð\92)¤J\16°D\90A\8a\10Èý¼{\85²0w\18*å\fÛ+1Ìp\93°\7fö[\15Ó$jJÕKmTÚª{5\9aø\1d»L8¤þ\13\92/Tù5\1d\r?5\17QYÄC\95\92XÔÃ\88§\ 1ÉEòÂRV(\bkL\11ñ±õ3þq\a\?!{\vM +´\12
+®»\9c\90[\88\95Ê«\86\1e\12q8½\\10ßzýG\1d\9aJm§¥Ö°ð.\10×̹mV;äi\9e`\81ɺÎ\819°\Ó\10<s^94;ï½2®\9aÊìü¢ùô\8a\96@ê,f!îæâ\85ö\1eaB\1aú$\96ÚGÁ\92?`9÷\8f\8b¥&Õ1®|³Sþ\13ÖÊ"vÍ#¯ªL¦\92¤ÈJð\14ªµñ\19êúTÝ>è¥÷r)S¥÷îÛ \rlµ\98·`i1Û\1f½p½ê\8aa®g:ý>8´ú7÷Ì|py6\80!>`Âs\14\12¾©8ÚÜ[Æ6×p¾ÞÿzÁ~Õ7\92nP×í\9a®ãÑ-B\91\9e¥ÿ:÷[?[ÿ\0\0È\1e±endstream
+endobj
+567 0 obj<</Type/Page/Parent 458 0 R/Contents 568 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+568 0 obj<</Filter/FlateDecode/Length 842 >>stream
+x\ 1µV]oÓ@\10|ϯX!\1eZ\84\8dí¸vÊ\vJ\93\0\11ù¢1\1f\12EÕÅ^7\ 6çν³\vù÷ì]\9c6.4mA$\8a\12åÖs³s³c_¶\pèíBèA;\80xÕrl\aü°c{àwBúíÑG"¤fÁ;ríÎí\85\93¨õâõ1¸.D)a\ 5\9d\10¢\ 4\bÇq \8a\ fNñ²BU\1eFߨ,¸.³¼Àö©ð`6\1d\9d¿\9dô7ë~½N\,·M$¨`4ïB!ò,^Ã\92ñ$Ç&\94µ[ûa8\89ÚÞÝX¼Z\9d#/e\86ê¿£|\9c\ eûÏî¦RñDÄÕ\8aØ`\ 2\89X±\8cÃ|Ø\87E\95¦(©ã\8cVä\1e\96\7f\81ÏÙ
+\1f¾Á¤;\1e|ÙQìëÝÍh`\ 5¥\80\ 5B.Äwj©*ì=äã%\93_ö\06ÔY¬KB· e¹Â|\r¥d\åL\v§\15S¥¬â²\92øj³áÖ\8bÆ\19^gc³ST\85àê\96y\1c¸öa\7f:>?\1d¼¾»Çú\8c$Òñ \8f\91ÆâO\90\7fëG8;È3¥{b\vq\85g\87{Ô{ÌÑ?ØO\8f\98\9dÇp5º\ eû\ f4ÒÍ (Ú$\95b\ 5u\80<\87¦<ûÜõ¯l\9cS\a\94Dò\16§d³ ãI\16\93ï\14¨*\8eQÕ!B\86£ÌÓágµý\8dÝ&\83h4}3\9d\80,b\88´_Y\Â\84Æ$\81YVÔ6ÜÆ\9d¶ah\a:í¢%\82Ò\91©\1d&R Ë2ò-\94ì;r\10\1cÊe¦ \b`\12_j\93¸¶ßö\fB\87¾ £d\vÒj \fbÁ9\1a\ 4=\9c%a\ fg½§ hú\90ô\9d\8fOJ*ù|vhC¥\10hS¹.´\a\v¦Ô\ f!\13ed&~n`;Á\91F'\1a\8cÃé¬g\1a\81\1fY¹4È&\\9e\9cÑk6\9c\rô÷V\84'6ÌKA;j\ 2i\96c\1dä¿cgüâvÑs\92\83ÓPÀ\1cw\ 5\84·æ^@ÃOç¡\9bs~úmÇ1\90V\93¯.èå\19%-ô\96,Ï\91_ 1Ò¨úÞRû«±fØÎQ^Q\12ß\£Ån@çq¥c\88°\94¢S\82w¸®\81I!\8dÝH\1co\a¢\16Bÿ¿û·Fn²Îã\17\1fQféú\9aºD:\8d\eÚsy\ 5³OZ\15\ezì¦|ËÚ\94ÿ\81ñ}°Ý1\8cÄ\ 55s\ fìcéÖ¸iz\ fnC`A¦lº¶\1eûNý à\86¡í\ 5!\ 4\81o\87Æ\9eóîø¤\v}¼Â\\14(\15¼©²ÄÌ\9båÒsMp|\fVè\1co\9f,Ft·ª
+3\99f\9aý\90\80\82\ eÍ2YýÈÕ\ 2\ e¢ÖûÖ/\9c=\9d°endstream
+endobj
+569 0 obj<</Type/Page/Parent 458 0 R/Contents 570 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+570 0 obj<</Filter/FlateDecode/Length 876 >>stream
+x\ 1¥UMoÛ8\10½ûW\fÐC\9dÂR%Ù\91\9dÞܦ]\14H²ÛÆí¥^,\18jd±+\93.IEë\7f¿C\8arb×q
+\14\86\rK\1c¾ùzóæÇ \85\84>)L3\18çÀ×\83$Nà<\99Ä9LfSú\9fÑW#\94þ`|>\8egÇ\ e²$?~#M³8;¼ñv1xýa\ 2i
+\8b\92¼ç³),
+ ÏI\ 2\v>¼ÄRH4P*\r¶\12\ 66b\83#\10\ 5J+Ê\90+z\8dð£A½\ 5¦ñlñ\9dðò\1d^\94åñ\84\10\87W·sø\8cdg,¼«X]£\á\9bμwOYGé\98b$ûä¿d²\ f\16=>vp·¨ïQÃ_Ì\98Vé\82\9eíiÀü9Àù5\©\95\92§a²_\84)ËÓ8ãgpæ\8d ;\8dQ>\83áÓ\81wJZêÓP¡w\17\90RÃJðå\1e§'º·ï:\81(sÜ\19Þ(\8bo vu\ 4ÓµH²5\82±L[\ 3 ¬l«àårù\12xÅ4ã\16µ\ 1&\v \825\9b\r5\953\83±sà`\ 3\85\1e\ 3óZ\10\ 3\9d½£ß\9añ\8ah:\ 2©¬\7fÑ\90ãã×\9d¹\90Â
+VÃ\15\93×L²\15ùÛô$ª\98©FÀVLHbj[ NÑÒ\1d
+´ã¬ó)\8ci° 1Øs\ f.Í\10sOca\rÖ%,\87µjCZ˳Ø!Ò ·¢®á\ e9!÷\98dù\ 4µ\97g!\1a\7f\8b¡ù!\1caFP3*`LÒP6\86&ò \ 4òe(~ï\84~Tk`«\1a°
+Xݲ\81\ 2©\16][(Qãzµ+Çr(bç\ 6áêú\ 5¨Òÿ\råöùR1©×\94Û\81W×@ÊÔ½}ý\818\15ô%Êf\1d£\82\16tçGôâë\9f\1f/_u§Çä¡\91\85âÍ\9a8\80\ 5Ü5eéz¨\ 4=ú@\1e$hO5¾Ü|¼]|\ eó{\fv\8fµ\8d\14\\15\8e¸:Tõ÷`\ 3g\7f\19ÖÍÆ·ÙßO\17!\0_l\9fùC¹ÍFIó´>?ë,\8cò\9e³ÎE\18O\8d¶Ñ\92vHD\9c(\ 4'R\1a0\rçhÌ.2/-dòXX\9cιuânÀ\81¸\1e¨
+\91í\ em\8b(\89íÝ2q²¡±ËnähÎ\e7\ f\9e¨}\814ú}Åj\1a\16gÏ+äÿ:\8bõnÒéÁ\ 5IþúÑí.G;Dºö\80CsÚC\~@\82ÓiÁFã½P\8d©·\14\15GqOüü9\8c0\19.»=q\93¸ú§¬Ù\8aä@ú\fúÌz©ñÓÉ\9c+Fê×ÛøJ\84Y\9b\85YK§³8¿¸ \8dî÷ïíüúí\1c.ñ\1ekE\ 2kà\8f\86\96¸K9ê-£irñäªv\96\93é$\9eæ3j1Éü¹ïÔûÅàÓà\7fRV\85rendstream
+endobj
+571 0 obj<</Type/Page/Parent 458 0 R/Contents 572 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+572 0 obj<</Filter/FlateDecode/Length 853 >>stream
+x\ 1ÝVÛnÚ@\10}ç+æ1QcÇ6Ä\98ö)wEJ\93¶Ð§¦\8a6ë1¸\98]g/Pþ¾³k\13 !éE}ª\10\bÖ;\973sæ\f\8f\9d\18"zÅÐO \9b\ 2\9fu¢0\824íÒg/ëÓgBo\85Pø\aGñQ\98ízÐ\1d\1cí¶Hâþn\8b8é\86½]®\92ÁsO'£ÎáE
+q\f£\82ÒM³>\8cr T£\bF|ïF\1a|\vKiafµ\ 1æ\b\f¸¬\97 \v0\13\ 4^\95(LÀYÅmÅ\fæÀ\15ætT²J\13>\8eå\9c\ e'¨ð\0\1e\903«Ñ\19.aQV\15\9d\0\1däP\8aýÑ·N\ 4AÜ\r\13JaOÛ\a\8d\8f\96\1c\ 1³t\9f\1crfJ) f|\8aF\87Îàðbð\94{\90d\84\9bL?9;m\9açklA\926ϯo/ï¯n.n\9b\v½Ö\ 15é)x\ 3
+J\8f£X\ 5.E!·\9d\ 6[F\13¦¾d_\7fåõ\85R½âøóÕÍ(ûò\8aã\9aåy)Æ`$ô\82\87¥¡\1eUåXP\85Í\ 4´aʸn\rß\9fP\eX\8eª-ݪ4[(\°nò2\b\81ãû¢bc\r\ 1ÐwI}vMo\8eîö¬¶¬\829«,B©!úND¢9\88\8bân¿qºj\98\8fºn\99®¥Ð¸]\ 5¢ÃªgüWÅÕ¨æ¨6É÷¯Pj6£\82j\87¶E^
+"¶ç\98\8fÑ iÉ¥ÐX%h\94\ 2âtî¨\83\1a´å\1cµ\ e¡`eeiè\9b\ 2Y1\15r!ÖL&úº)\fºqËÔá1\f\e`\1f\98Ö\v©rú½\83ÙnjÛauC)pAcÒ\1aP\e´Õ5r×'¢\b\8d\1c\83³ó! àjYû\99²Úó\87Le\95¯Méö\18\ 5*\ 2á\87}\8aK\9fìFc\1a\85 \8a< Y >U\ 6\98È©JM[\ fàI\1f6Dc³Y\aþ>\9f \9fº\e3`cV
+'9\13O
+\8a¸R\86×\15çnÏL\bq¤«¸\13\17íCÖ
+祴ºZ®E©\1dó\rÁºÛß\8dÏ\15õ9Ã\80Q+9ñÖ(ë«[(9Û\0ø¨{¨Îc\eß\94D°7\10;òoàÔH®óÝùüg\8a|z}3ú\eI>üi5ü\8eB¿¢£[c\13\80\15¹ävF«\a\9b6¬·Í\9f\89×é§ó³áË\92ú\9cXá\8al\9e\1a¤à³\1aX]#SDf?Á$ï\92ö¬gÇoëÏ;ÒãS¯ÇQÊ6ä©U¥&ìÝ\87q?\vÓÁ\80þ²\f\9a\8d<<~\7fr\fg8ÇJÖH\99\ZZ\90Î(XÝ\rúÑÀ)Ñ5éÖñzk#ø\85Òë÷Â~\9a\91ÀÑ\95£®³<\1fu>v~\0'\8f»&endstream
+endobj
+573 0 obj<</Type/Page/Parent 458 0 R/Contents 574 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+574 0 obj<</Filter/FlateDecode/Length 812 >>stream
+x\ 1íUMo\9b@\10½ûWÌÑ©Â\160^p{¨\9c¯6Rê¨1î)\92µ\81%¦²Yº\vNÒªÿ½3\vÄ$qÔC{,\96\81e\87y3of\1eß\a\1e¸øó ôaÄ!Ù\f\æ\ 2\ f8ó!\88B¼÷ñ¯%dvc\1cFû6¢\b\Ö\9dô-.ð½Ðc^çÃ\8dð¾ó\82\80ÌmO\9d1÷Ù¸3î\ 3z\13\97MönøþË\8d£xðöl\ 2^\0q\86Yñ\boR\8bæB\9c\f/æS\98O?Ã\85ºUÅAü\r\8d9x^cìø!\1a\ fgª\92ï`+Öyº¬\8dÔ\90\e\88u-!Ï2¨V\12èa!6\12D\91B)\8c¹S:\85\950+\10\98¡}\132¥±\96ßki*\99Bª6"/X\83\8a!>¢F\8c\82\1c^5\96/£âÍ>ƽ<\9f\9d]6\ 6Aë\0Kæx#, z0b³ÌS0\95®\93ªÖò)\94C¦þ#\98)UaZ\93>\a-Ú×Ëó\937¯CÕEª\92z#\vÊì¦Î2ä©T9.õÓ\ 4,j\17àñÕéÉüu§Èë\16ý$Z¦è8\17kà }VåÈ·©Ä¦\ 4Q\96Rh\ 3\95\82\e,Êm¡Ð¾¥Õ\85 ÕÒ\19\ 5lÌ#LwÌ¢\91å&Ïàz¸+êõ\ 1\85á"wضÄÝÏgkh\8fÅù,öx³\18\81\ 3æ.¯\92\15\15\99:¢HóDTyq\v\8bùé\95-Ï\8e~\eS\ f\82\9cXZ·B\15Î\ f©\15úl\89£\8cö¸Ù\13ØÎÊ6è\9aº\19\83Á\9eÛ`4Mg#°ï1N¹\11\1eå\81Làá!â´®VJç\15Zo%\8eeÓ\fïqb\1c\98a`´ÿ¡\ 5î{Ñ\12ûª /dÙ¦/\r\98:I¤1ÏBýõl-×MÃõ8ù3í\ 4Ô'\9dAK>²Õ\ 5\0\85²S %¦\82]Ù´C\ f\86"ÞQïÞ»x\80=õ³@/;f\1f§¨+c\9f\87\7fÎæýq\13\11\ f¨\ 2ñr\1eOãÅ|9»\Î\17Ç\9f\96\14V\17G×±\96Ý\9dØ9\1e\v°ÀÎÈ·W,{_ì²\8cjñªÚ5¼\89\9bõáUNkvÍL*hÇGàÄ\1fZé\138QI5Îêú\ 1ú\8ap}\0RkTÀD¥Ô^Ô42íº¡U+\9cHRS\92b\14Vt\9f\17\16 \1dåÿ
+¹OáÿZ!£Ö«\17ø\8cO&Àù\84q>&\99À¢\1fMáDnåZ\95\12\15öc\9d§ö\váxøÕ'k'tQ`\9f¶VAu\rÂ\80\85¨¸ø\95M\87ã\80\1e\9dÆ\83/\83ß\8dÐJîendstream
+endobj
+575 0 obj<</Type/Page/Parent 458 0 R/Contents 576 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+576 0 obj<</Filter/FlateDecode/Length 689 >>stream
+x\ 1Õ\95ooÚ0\10Æßó)îe+5Y\12Ò$LÓ$º²
+ Â
+î«1Mir@¶`ÓØ¡ë·ßÙáOiiaZ÷b \90áìós\8f\7f9ß5\pèíBèA3\80tÞpl\a\820°=ð£\90Æ\1e}J\84I\1dp\ú¹'pî{v°/àE-;Ú\17hêäO2]°Æ»Ï>¸.° ©
+¢\10X\ 6¤Èq\80¥'%ªªä\14° çY\9e&
+%È*MQJ\e*\9e\89´\9a#W\98Á$É\8b\8ad¯æå\82Û§ì\aeo\81KIuv«éÛ>å?\19Ó«ßîöF½\ 1\e\8fã\8eþb½ÁÕ ®\97\ 4\eA\96\17R\95´$\16
+ßÃ\9c6\91\85P\12îó¢\80Tp\95ä\1c\12òK.\ 4\97¸\99q\ 6JÀý,Og f¸\8dË\99¨\8a\fn\11$é¶MP%å\14\15Ĩ.º\83\91\96@ZÝ&\1d\bmÌ\939\15%aع¾é\8cØ÷¸Ýï|ð\9c\8fg\94\1d©ÞÇÿëyz7³FLÌx\9e¤³\9c#\8d\13eö4ÿ\96xW¡T[\8bÈ\97Ú"·¶èºÂò\ 1&¢\84/\97\9fö¸²õ$fK,%ù}\ 6½~Ì\94ø\89fè9fH\a²>!ÁZ ÔE%Z¬ Ϧù\12¹\9eW;õDÙ
+\rË\8bjeÃZúsMA\1d¿éÆÌ\rêð\9a,\ 2}c¨ó\8bà
+\89¨WJ´\1e/\18±áËÙÖöjËw%\1d\9fã\19<¯$ÒÕE_¿½,h\91dYΧ\1a?Ϻ}Päs\91O9\ 1«f 5\ 5DÆ\1aä\15\0kàw4ßÄÝ·(]+nz/\vÞðs ê×Ît\ 3Þ_åX\11[ç ¶aÈ3\96lÙ«\1fóÝmèiõþ\ 4¾6Á7Ô\r\83اczs\ ea|B\ fSµX`\99&\12ǧ»rw\ fùÿãé\0\96\99 ¸¹é\81\aê>\8aJ2sÝJL\91ZUV·4Ó¦\ ez{\14µÿt\8fu\1f>ª\8ehE½«o÷V\v\82À¯¡Q»\7fÑ\86K\b!\88+ WU\9e\99\8eg¹adæZ¡Ó:|»ú¡o\87AD×1]nççú\88:¬qÝø\r¦7STendstream
+endobj
+577 0 obj<</Type/Page/Parent 458 0 R/Contents 578 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+578 0 obj<</Filter/FlateDecode/Length 593 >>stream
+x\ 1ÍU]oÚ@\10|çWì[R)vÏ\1fئ/(QÚ
+)A*¸OIT]ì\ 3®1wÄw\86¶¿¾{¶qp\12ìH\91ª\82\90\ eÝzvvvgý8p\80à×\81Ð\ 5/\80d= 6\81áȳ}ð£\10Ï.þr\ 6\8bòÂõ\86ø÷ÙÅE<øøe\ 4\8e\ fñ\ 2±\82\b\ f) \ e!\10'§óók¸\92K)>Ä?10\0Ç©\ 2-7ÄÀÓ©Ôì\13¬i²â\82\81 k\ 6\`Jµ\91BáYÁ&g KY
+÷¿Aï$\9cÜÞ\9e@²¢9M4Ë\95m\80 Xn\80¤\eÀi¼Å;.Å\19\]Oc-\1fXytIylå X ^1P&9Ux\96\98yÉ·L\988s\95³Ç\82)ýz®B±¼a^E·Ø«bMï3$ßÊAõkà¥\94\8dBQUÒ¬ÊþRÁºäï\93iì\ 4Õµ_\v\8cí´\1cÏv\8d$ä\17!\8e\v\16\1ci\86u\18Ü\aVK\ 1\89,\84nSjãL'óxv\9cÔaËß\ 1Ó\88ß\81ÑÉ£\19µ5å\99ÊdgM(´ç\1e¯\89f\99Ü1l6ÎQÒ+P\ fX*\91\91\80ùä\12\14ÿÃ:ê3f¸Q<ýaâî\8eÓ{B<\ 3¹@Ôê 4\96f\95\8f\9e\fÚî%R\8dn:\90Çø\81\rMS.\96 %øcpÇ`\19` \19_
+Øq½\ 2¥i®Mê½Ö¥¡:\92v\89ÝX¼C\99¾anvû0ê¥Raà*,ý[
+è6\ e®6B;ÍÁÖê#ZZØC\vÏö\9b\11U~\93\9dÿ±\r\91âNæ\ fØi\8dÛ\17t^(ý\163ôЬG×¼\1fÚ\1a¾\98Óÿmd¢z\1e\9c0²\83Ñ\b\82°ÞÚؽ\8bs¸d[\96É\r¾¬àkÁÓ²:k\1fk\85dd\16x«Ñ~èÛa\10á»\16o\86åÚÿ\1c\ f¾\rþ\ 2=2\ eoendstream
+endobj
+579 0 obj<</Type/Page/Parent 458 0 R/Contents 580 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+580 0 obj<</Filter/FlateDecode/Length 742 >>stream
+x\ 1ÕUMs\9b0\10½ûWìÑé\14
+\98\0Î¥\93ïz¦qZ\9bäRw2
+,¶Z#\11I¤q\7f}\17°\eèø£=Ö\1e{°wõ´zïíê©ç\82Co\17B\ f\ 6\ 1$yϱ\1d\bÂÀöÀ\8fBzöè£\10²:pìGÛ\ 3~0°ým+<×±\83m\81A\ 5þÇ\16gqïÝ\95\ f®\vqV\95\13D!Ä)PI\8e\ 3qÒÿxã9F~Gq\14\7f£Ì!¸\14ÏÀ¢TkàS\ 1qÚ\9fNî§÷ç\10+&4K\f\8cY\8e)|â\ 56\8b6ð\ eX^H¥Ñ\92\v̸@\r\99T`\16\CAÙo\81§(\fÏV\Ìéo\84§\12Õ
+\98Â\93\ 6)X\17Z!\ 5Íæc40]P
+\\8a2ïnX\15é\ e\88>ÚÑyq².H}\86M¸\86Aõ\8c
+® q$2¹\ fË=n¢Ä\aQ°áÃÝ]R»ò\8aáþX\1a<\ 1]W¾Äg\\ 2\13)è\1fÜ$\vxfË\12\81\8b\9a\ 4\85º\90BcÅ\ 3\14ô«ÌÙãrUÇ4Q\rLÓ³¤\84ß\v\887mìªÄ6Sõ\8e Ï´b\85g\9b\17\ 3³¾ÆÄp)àxv\ 49[Á#\82Ì`ÉsnHC¦5×\86\89\ 4a\81
+kÄÚ\ 4µ]*ì¨9ò\ 4ë-»\ 4·ö¾¿\1d]¼ÙMh!¹0Dý¬o$èF\ 6AG{?;êBv4»\e\8f¦ñÄÛ\rÛBÚ\a3\1aÇÑ\97¯»a
+\96¦µ#%ÌÉ\e¥à\89L\11´QÕ¿¾õ¸2$Â\92Ï\ 5QF\ 2.\1ai\fS¦"³2òôæ\8c\18d)ª5\87\e?t\ fD\95\fö\9dçÕ-\aγ\17¥å±=0\7f)\19 6ýp:¹|\18\8d¯n\1fÜ\87óx²\at{êf@´ûµé\fN}ØPê\0\8d\ 6ÅQïA¿;À\1f5O\86J\91J9{áy\99Ã\12Å\9cô\9aÑxÈè\ 5Õ×ÆsÔÛµÍk\89^\8dÞ4c·\8a\96Ó\ fÕÐêø.Æ¿9á\7fÓpÖ\97\82f\16u\12±Ï³õà«å-\8c\ 2º\ 1\84\14ÖOT²¡¿!}=ã\15\9aR º4-\1aq)O\98¡«C\97I\82zm\87h\95\eFv0\1cB\10¸ÍØ\9f\9eÞ\9c\9dÂE5`e\81JÃuI\97LżµÉµBgxø\1aóCß\ e\83\88\8a á}\1cV\b\97qïsï\17\96C\e*endstream
+endobj
+581 0 obj<</Type/Page/Parent 458 0 R/Contents 582 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+582 0 obj<</Filter/FlateDecode/Length 895 >>stream
+x\ 1\95VQo\9bH\10~÷¯\98\87>à\13PÀ\ 4p¥>\10Û©¬äÜ;\9bö\1eJ\14m\97uà\ 2»\94\ 5G¾_\7f³,¶.CtBHxgvæÛo¾\99õ\8f\89\v\ e>.\84\1eÌ\ 2 Õı\1d\büÀöÀ\8fBüöðm\18ì{ÃÕ\95kG\97\f¾ãÛÁECôëúu2y\7f3\a×\87d\8fÉ\83\b?2ÀÄ\8e\ 3 56¬\85\1dk\ e¬\81Oø¹æ{1MþÆ-\ 1¸®Þby!n16¢e\1f d\aVB!¡Í\19HR18\90²c@$\14¼_lØ\8f\8eÉÖÖa0ó9Ld«ÜÆV;ü\9a&Ðö/\9bõ.ÙzÚî\ fû\91/Ë\9d!Q\18@j¼\1c³¿\fbý×ëËz\93ÌÆ¢<\17-Íõ\81^bíÃxg´²\16\þ\94É\ 1Ë;ÁýßyNÔ¾\80ûõózùÛëg®EÁ[,R+`·Ú~]m\1fÖ\9b\9bÏ\ f®ã\8ePpÑs\84Ñ\ 2«\ f©!xy\ 4\92e,\83b\ f\ 3Û½n\eU{.¸õ\ fkD:UÉ5]\ 3\e\rk»\86£Ð,ÔCVPÒ2 ²£\94Iyf\19õ¤´hÍ|]ñEs¬[ñØ\90:/(È"c ö°I`)*\82²\8a;T\eoU´Bðs\98AÒÖÌAÙ£.\96l_ðB¹\f©ND«jõ\1a\8e³,5b×\8c=\rýýÍ%6ÖÈt ß\8f-Âh2Ö \ fÈF\1fXᢢi\98\12EVðGðµã3zö-@\9a\86\1c%Ä.\10\9eA<\bð\84äEÉW©qk.Ç\90,W;X-®\81qª(Â\93)\0\91N\99\91\96À\12:©`\84zí\89\1dávD\11e%\9e÷©1\96ó\8ep¨ðÍ\89ÌG"ñöÍHXÀ7\82üñ\97Îp©
+Uæ§FEh^pöP\13)\15Åé\14>~\84ÞTJ\92uU\rï\ 6\1f\9bPªÍõ³2\9c7¿ÃÕÔè\95AÊòØû¨´¨\8aÓDÑ\ 157\1d/¨ÈØy{:UÏ\b\13ñv\81HoÍ»'siÞ!Ä×Ϥ\\7f*æPE,kÉøc\9bÃ]\ 68\99rèK©Ê}Z\7f\1aÁpøVÙ6O\r³L§÷¯ç\97Ýw\89S\1e\83\1e`ß\88ª\17\8d\84J\8d\15n\82è%¦H\82Z÷\7f\8fDµ:v1ú\fPÊ\11$\vl\977u\94ÿ-´íÐ\fïÍþ\87cÛÁ½j\ 6,\ f\15UÝ©¹A\80b4Õùd,eRTX®1Þ\87&¥\1dv.o¡Å\rcG æb\98 \97\849´\1f-\v\15Kuù0"i\8eÔa\11\11ù\96\9a[ùáÔ©\17\Ïç\1a\12EÃ=çú\9e\1dÌçø¯`®\87Ú.þý:\86¥ºvEÍ\1a \9f:\9c\8f
+½å\86xߣ¯\15:óþ\86¾|\97û¡o\87A\84\ 3\17gäU¤¶®\92É\9f\93\7f\ 1ÞbY\7fendstream
+endobj
+583 0 obj<</Type/Page/Parent 458 0 R/Contents 584 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+584 0 obj<</Filter/FlateDecode/Length 1348 >>stream
+x\ 1\95V]sÛ6\10|÷¯¸§FI(V²eÉòL3£(I\9bIüQ\89\9e<Dy\80AÈdL\124\0FÕ¿ï\1eHÊ4ãvÚÑx¬\8fÃÝÞíÞ\82\ fGc\1aá5¦Ù1\9dLIæG£pD'§§á\19MÎfx\7f\8c?£hë\7f\98ÏÃIÿû·Ñѯ\1fæ4\9eP´Eªé\19ÞÄ\844£\11Erpm´ÓRg/£ï\88\9bÐx\Ç\r\8fg\88\e,\87oÖ´R\ fËDdÁRÒzøfIKËÑ#\1a\1eOQ\8f£è\17Z\93ÔyY9EVY\9bê\82îÕ\9e>Yú\8dÞo\ 6×_¾ÎÃp|ú-¨?\8cÂpú-XÄñf°\94ÁÒn^ò«\9fö\9cV\12ç\97F!î\93\ 5\80ÍKò\90\16\95KTáR)\9c
+\10´F(\97z\fEÊ\80\84µÊ¸Í\80Ót\7fD\1edòÍàØò¼)<> \8f¹\9fÃ1¤ì\1eó0{ ¯
+ú®Ó"-î\b\90(Ö¹H\vÿVf) Ò.Í2Ò¥ÃHD\96íI8§òÒ\91Ó$\13QÜ)J\9d¥\125wÚÄ$\8a¸\9bHêÂ\19\9deÊP.ö=\9cFm+«8SUÆ\98\ 42Q¬JUÄ\f\a\14\18u\97ZgöàÄ9|gC\8a\92ÔÖ\98Df5i)+C;¥î\19ÚÖ)³\13&¶a¯Ëå9Ä\82ùFi®6\ 3\1eíJ¾èÎ{%_G\avÖÊüPæºii\1c(z\11D2èá\17FN\98د\90Ã,\18C\11Y®wÛÍÀ`
+PS\93\80\v2ñ}9ø\9a¯ÇÌäy\87jàê\90Ö\0\ 3ä^ñ\88õÒöS\vèiG\16\1dÕÙYô+\8b\ eX+\8f\95l¯R{ \ 6äõ\88S½IÞ@\91çt\ 3
+\òÈú5>ÛDYæ2Ów¬ Ý\95Áf\90\162\8d¡'\91\11¨\16d+\99\0
+A4÷Ö \96\97×N-À^¯:O¡ºø¹\rû\1f´^*÷Yßéb-rÿ¿eõ¦?Ú\9fy\1dO\83Âyj¯ÁÄxê\97ó'ö\11Õ\b \8dúOÌö\9am··\95\8fÅæ8\fË%\1aË\82Ñ®\17\175EO$Ðã©vº\83ó´o\ e\9aC\aØ=\93\16[½\19\802\8cßJ\93\96.¸ùø.X\7f|g\ 3åüFt\15\ 3iöÐ>:\96/ÑÉÿ/\82ç\1c]W\1f\9e\8c\e'Öy\ e\91x\83~ÆÎaVÛÔX÷O\96Õµn©«,¦[Õú:ÞÃ!\8a½.\14ep\15å=\ fãDçì|\85r¬EÖ$>öºÌ\85LR\1cl9¡\ 4a\ 2¾\ 3o¼/ô® \1f"«TH70õÌçk\8fÀ®\8cºÕ\1aúe\7fóvê]\8f\8d¬\vØé^QUH³\87Ó^F~3>_\0ª¢\9dØÓ¶*$o\8c%½=`Â.%)/\15îÓ\ 3NõP¥\80Æ3\riQì\89IG _S\v5õjÞªÆy\1eHÛ\0·z«\14»qÓ\ 6¶WÁØaô°Óº£Düð§Ró\mR\7f\95\10o\1cÒÕ\16|TÆö\a\3°;\14=4\80!5\87qó\0\17>ûª`\12\93èûü%O\b3átF¹Ê\14\98ºo\99\85~0\9d'z§Òèm\9añÐ`i|\7f±úé\95(K%Ì+v2¨\bANI&ñ¶\7f\8d\ 1
+pñ
\8d\85²
\ 6µE¨hy
\8d+RÉ{[å}
\11\0\82 \3u;°À¼
\84¤|ͦdzW
\80\8bø¹£ÍÝlqU²
\ eW¾ÕÎC
\856l
\14<
\85Öì0
\8e\87Jauj
\91|$)
\8a\17\ eë
\84~
\ 5\8f\88@|H
\7fè
\9dbP|§ó
\9c{òÀô
\11\8a\13~I|
\84Gþ8l,
\19\97{{
\ eú
\81Ù«/
\1f°
\0\89_ÓË«
\88\87\8c~
\1ci?
\14äh7Ò0"
\9bÞâ
\86oV
\82\95\84 â¹ >Þ
\1e,hèA^¬
\96þ
\92\ eò
\18ÿÙÃù2ö××#ÐÆ$
\98Dÿ¥
\80®Û%CÇí÷8]/:oN=ÞÅ
\85oÒ»
\19\1e9ù
\19ux2©ÝÌë
\88\ 5µ
\82 \18VÏÒÂ)?=
\89òÛëm%Ö²b/Ä´UfÕ
\ eÒRM©³æ1w<;
\v§ó9M§#<PsªÅÅÛ
\ 5½Ã¼2]bfô{
\85K
\97+
\ fÛØál4çÐî
\83ód6 gÓ3@Ç
\ f§s
\8e\7f\1f\1dýyô7ú*¦hendstream
+endobj
+585 0 obj<</Type/Page/Parent 458 0 R/Contents 586 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+586 0 obj<</Filter/FlateDecode/Length 646 >>stream
+x\ 1\8d\95mOÛ0\10Çß÷SÜË"Í&NÒ$Ý»²\ e\84\ 4\81ÑLlR¥ÉKÍ\9aáÚàÄ\94~û\9d\93\ 6ÁÆ\9c6ª\92ÖçßýïÁ\97Ç\11\83\0/\ 6i\bQ\ 2åf\14Ð\0\92 ¦\13\88³\14\9fCü\1a\ 1wíB\142\9aþ½pR\8c\8eOc`\f\8a;d%Y
+Å
+\90\13\ 4P\94ã\19,ÎçPÕÀ\15ä\ 5,DiMÕì\0ÿ\\8ek!`~uùÃ\99Ô\8d±ec\8dX\1eQ(Öb\a\1c\1dë;hÖè_\9bÍÇ£â÷\88Ñ8
+\81\84)Íð^¬ÆF<Uu¥\15És²°?g¶Y³þ!ì\1f"J©ÛM\ 2 ,¡A2y³5xÎ_}úM\1eÌ?*0(#T#w\1fZ¹.\9e^\98\8b\9dµ\11\ 1ê#N Æ\fT\ 2S\82\ 1Þ+½UÀk¸\11\927Õ\93ÀÌÔ\98\9a\e¼a&\9cêãÓ)°¸K/\89з\13\7f+¤$ÝfôV¿ØíË\80\19rV_\15\12MÍ%lß³O^ÊF¤ãæVJW²\ eØ×\15\9b\83°\88¶\19_\10F\ 2\12t\ 6=\81¼¶¸ÕF®ü\0Dx\0\17ºäÒ\ f\b½\80OFðF\e¸Ú*a0£~Vt\10ëÌhûp\0\8by\ 2{«k!\fVç\0dx\0²\93w02ò \97ã\1c\ f\94UÕ£mÛqyäÏ_Ü-c\97¶Ý×öB\98íû©8¼õ
+èOÇÎïpâ\11?¯¸´\ f\ 3û\89¯H¹h¶ÚÜ\ f!|E9áM¹\1e\ 2øJp®\1aaxé\ 6Â\10f\9fýwO¢k\87ª\1cD$\9d\8fw\113¥Õn£m}¡\7fiµ\1có{\ eÊ\r é~C-j7~\87ZdBR\8f\8fk£\9f\87JN2\ f kûW
+WzÃ+\ 5¥V\8dÑRâ)ãe©j\86\85úü,Ç\ f7£\87A\13ò\8d|ïDgû£Áâ\90&Ó)¾%CÊ"7¡\17³Ë\93\19ÌÅ\93\90ú\ 1G5\9cÙjÕ\16\8c°4k\8dI\1aLÿ3òã4¦i\92á{\17QI;R?\17£/£?Ë\a\ 2pendstream
+endobj
+587 0 obj<</Type/Page/Parent 458 0 R/Contents 588 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F5 6 0 R/F6 7 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+588 0 obj<</Filter/FlateDecode/Length 538 >>stream
+x\ 1½UQo¢@\10~÷WÌ#M\\8eEXð^.\18Ô\90¨½\13̽\98\10N×\96;d-Ëözÿþf\11{mÔ¶\97\9aBH\80\99ùæ\9bù&³w\1d
+\16Þ\14<\ez\fVÛ\8eeZÀzÌdàø\1e¾ÛøT\1c6\8dÁe.~\9e0ô<ß´O\19(µ\8f\r\83¤óiÄ\80RH6\98\9dù\1e$kÀÌ\96\ 5ÉÊX\1a³\ 4JQ\12Uæw\8aC\14ÊåÕUò\13\83\9c6\b¹\12ÚCädmÄ\84\12\97X\ fÔ%¦iîý\ eàä©ãÒ\18¨¼¨I^ÂZl³¼| U¶¨¶µGì\ 3u4Ý\ 6±GMüX\eßyQ\90_¥ø]Â<
+ãç\1c- ¶.Ì\b´\11r \19Hõ\83dª¾\15U^ÿ\81û¬P¼\v\99\84]VÕ 6Àóú\96Wè\18Ga\17D\ 5È\15ÿÀ*\93\ÛÇ\95P;\r'»\8f1Ú\1e^OÓq\14j\ 2\98öÐ\19YWjU«
+s´8\8bx8O£Ùè:¥pl\9dÄ\ 1ÄÁ\14&âF\94¨ºÜ\89Rò¶¥Ø\80V/bû§Ê\a%y%÷=p\9f8³½sC½Ì¶üóó6\19\9a|\10ÍÒ\86\e\96\96\ 6á4\9a\9dÅù\82×\11\84õ\80³Ó*u"7¢\1e\87Ð\91s6ÉÛÉ\8e\17Ã89\8bsA²î>Éë2Üè\19y\87\ eãùõâkú(D;Õ'ºz±âì\17¤{U\89\7ftõ\0}\b[zVïÿ`Û\fÎ\87еß:9Y\91ã\9eyÇè\ 4\93(\88/2:~»@(\1e,¬ß\aƼvÛ\aÓA\0!¿ç\85Øá¾\81±Ê×\WH\ e¾Ä³úg¶³ã9¦Ç|<tp/³FÇaÒùÖù\ve
+þendstream
+endobj
+589 0 obj<</Type/Page/Parent 458 0 R/Contents 590 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F5 6 0 R/F8 9 0 R>>/XObject<<>>>>>>endobj
+590 0 obj<</Filter/FlateDecode/Length 320 >>stream
+x\ 1½\95_k\830\14Åßý\14÷±{ÐÅ4&v/#µ®ÈÚê\92HÙ\93\8c6\85mv\1dÝöñwû\8f=\14\1f\ 6Á\84\80è9÷þ¸\90ã\87\17\ 2Á\1d\82 Ðç°Øx$ ÀhÀ\81Å\ 2\1f)\9e\9d\85\9574ÞíC\ 4a\bf\85\ e\1e\v0K@5!`\16=\95\8dînÌ\ejØYÓ\ 3B)9½ûóù\94\a\f\9d½ñ®Ùoë\97\8d½²\8dò©Ìf\95\9cdRWX·*uªtk¡{\W5È\ frµ7o¡\r[\9bü\83v\¦Út\82K]à\16ù<UÝ\8d¸ï\82Y&I^ÎL\95\17\9dÌ\99¹`ÖÏÚ¤Ó®\90#\17È\85ʺ\e2wA<\94ÉcYt5dá\ 2Y¥Å$K¤ÉUk5\87 \17\9f\9aÄç\8c\ eE\1cðÁ\0x\14aâc*k9\1dJ\18Ù/»n¶v÷ ãýëÒ\1eLþEë\v28Hçv½ößëæ»\ 6\8cÓãEd\82\ 5\82Çø{Àïü\18O©ñ\9e¼_\88L\86³endstream
+endobj
+591 0 obj<</Type/Page/Parent 458 0 R/Contents 592 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R/Fc 11 0 R>>/XObject<<>>>>>>endobj
+592 0 obj<</Filter/FlateDecode/Length 1473 >>stream
+x\ 1WMoÛ8\10½çW\fz©[4\8aí¸±³{jú\81ÍaÛtëîö\10À (Êb+\89
+IÅ1öÏï\e\92r\12'è\ 2mS$µ$jæÍ\9b\997ã«\83 \8dñoBó)\1d\9f\90l\ eÆÙ\98^\9eN³)Í\16s|\9eâ×**Ã\83ããG\1f,\164Î\86?v\8d\v¼Ç/F\13/\17Ù"Ú8[²\19xÜýÁé£w§4\1dÓ²\ 4\90\93ù\82\96Ex\8e;rôI4¹ \v«[¯Û5\9d·^ÙVÔîÙòë\ 1¿7\99Ç÷\ e\8fg@¼,F¯rç\90>\1e\98Ñd\92\ eLçÙ \1fXV\8aºÞvÆ)2%ùJ;*\8cì\eÕzÂgo¨³æZ\17\8a\9ci\14éÖéu\85G-\9e\ 48O\1dN$@eßJ¯\r i¿%Ñ\16\ 4p\ 6FØÿ\98\ e'Ç\11V¡\9c´:Wð\a»ª\11\88G:\ 6 \95õB·T*á{«Â½\7ft[\98\8d#YkF5xË\1e\8bzÆAÝ'¨\14\12\8e\fý-¬6½£3!¿\91j\8bÄÚ#¤D\9a{\a÷\82¼ÈëÀÍ\10\1cu\ 6á*\eÈqêZ\ 1m\8aÛeÄ\84\ e\97L\9d7~Û±!TM¡Jݪ\ 2äqà\11>ªmÈÉÀN\f°¼\9f³\11!\93½dR`GÖ°\17\fÝ·2Ú\91Sí½\1eØBM\1fNO²@\92UÞj \ f9\90\ 6\11µ>Ð-"ÃtÕ«>\81\94 äá<[p\8b\80ãËéÉ\9cîû\b\ fw9î\ 4\b\fÆ\ 3¦\9f5\87Z@Q"\1fÁnñk0\16ªV\9e\8d~59\95Ö4\ 1ï/ <Ú\8c\99þ5`\99\81Úï3ÀÈ\93\97\9fÄíú¼Ñl\9fM¢_¸7\7f0u\87ÓE69½µ×½µ(¯zËFQÀÜ\f¦åË\rëKR\8f<5&馫\15+\90`1\81 žyPÂ\82ÖªUVKh\88gõ\18\1aÏQi,m\8cýÆ2¹Ñ¾B÷@\8e\84-èóûó/·>\11´Û:¯\9a¤\ 6?RébpÿúóÅ'r\9d\92º\ 4¦[0\97£ «\90Ó\10´jYRн¬·\8aÂ[µÎ-ô B±a\82j#\85Ç\11áI\9a¦ÓuhÄ;
+êu£.\9f% ¼\ fz\90\91;\1d:L\86!/³¤þ\17L=}äF§å\9b³§ÿ'\89i\14@ñÁº)\10¤\14²b\8eÃì@R{ßõþ¶\95\9eÔÝ\15G\0\85/\9e\84¤àMä\ 6×\10e«\84C~Y4Á\r\9bz,L\1eCЧR¯{\e´\18åî\14î\14xóC~Í¢\1e+\v´µke\ 3«Á\1a1Má²V\8eÅ\r"G®É\vÔD]\13\ 6\90UW½f)}0£Ô\8d\92h\ 6iº-G\87@2úÃl \98öE0)¤\ 4 \19\9eîõ
+ã\8dzZh×Õb\e\1c¤\ 1\86\14'ç\85nt«]¥
+\16Ò;Ù\15\\ 6u\1dÒ\8bÛ\83d/Q-µv¡Ôá;µ\94éÐ\ 4÷\ 41æ\12\84¶\1cbiz\fb|P7\82ý![\fw0ä\8b|\15ZpUä·3ÆÑåh\ f\94SI\ fppU)\11ÆÏм\99$\94#½\8a2Ï\08m Zï\ 6§\e+:TÀ®7ö\ÜZûmü\ eÖ*߶\ 2õ>b\17LÂÐZ\18ã.l ¾B§\84Ä\16\ 6=Ô\1ap\ 4Z¨1h&<l÷\1cýùêËêâ¯ó÷ËÕ\9b³O«\ f\17oß³\88\82/U¢:=Ë_gy´³\1ebÖ®\a)tÊ¢\0b\81«\9b
+3.lb\ 2Õ$®\85®C\81\96\ fû5n<\9d7\16E{\1e\e¿í\9b\1c¶P\\ 1k\90ï\94:u#\95*°a ØG°Ö(\1cÿ"\ 6\ÂwèÛ;õ\13\94\141\b\10\80r±JFõÅDæ\95lm,$± ýØ`Ûâ\8d\8b3\84PSu\ 5@A\11\1e©Á$à¬Ý\e±uÌܦҲÂûÃîÀ#$\95\1f<CѸX\ 2 \90âX%Ø\1cá"eT[\0EÉàP\1aD\88}/k»)-ho'\8cþC_aCÅ\ e\19\98\8b³1È\r\ f\12*Ðé\92§PÀÂÜîüGA¡FùÊ\0ë>¡@U\89´+Å\bØv§å7DÖw\94oÑ]Jö¡\18Øð=áK2=¦SÞ¾'Ùìx\8a¦~\99-ð?V©£ç\0$ë¾\80°\84ìÚ ¢çG\ 3\aøJÁ\87ã\16\18\a\18cøwï9¥\9fN\17+ìʺø\9d`?ò\ 3ù\96¬\83µÀ¾
+ÕÙ\91ôÀË`\85Ç\ 3æ#\1c\ 53\1cY\1c\97\90\87º»|\16v\85TÇß5RF\1cÜ\19\18ç¼ýs/ìj?ÜÇ<\fu\17\r\1d½[\f[çÀØ<\9b`é\ 4 ßû\1e4\9bϲù ¾\82ñÁ\93c¦çíòàãÁ\7fj¦EXendstream
+endobj
+593 0 obj<</Type/Page/Parent 458 0 R/Contents 594 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 4 0 R/F4 5 0 R/F8 9 0 R>>/XObject<<>>>>>>endobj
+594 0 obj<</Filter/FlateDecode/Length 1704 >>stream
+x\ 1\8dWkSÛF\14ýί¸\93/!\f\16~c\92N;!\90\ e-\844q\9a|`Ƴ\96ÖX\8d´ëh%\1cÚÉ\7fï¹wwmcB\bÌX¶\1eç\9e{îS_v:ÔÆ\7f\87\ e»Ô\eRZî´\93Ñ\88Ö\1fÕ5~´i0\1c$\ 3ê\8f\ eñ½Óëâ{¥i¶Ó\eòïQ7éQ¿=H\8e6¯\1d\8f\81Õ\ 6úê\ 3X\a¯ÛtDã\19u\92~¯KC\0\ e\86#\1agr[\9bÆé.\85¿:/õ¤&W«ªæï/è`\8f\96sm¨\9ekúÇNý%\9d\91[X[äæ\9aö\ e\9e\8dÿÙiS«\ 3\a\0ºÂÊ\8d\0Õ\8d\13\14\ 6\0.~\92\9d\ 1.w\82÷àã.ÿW¨à°~\1e?üÓ\81\8c¥\99ª~La¡®õ$µ\8d©#\8c!Ó\94S]1\12_uä\1eÁ9¾¼<÷\1eëLPæÊQ^ÓTC\19§áhmE!Q\ 5È·ºþíaZ\1e®\9cBOAsº¦\9c5ñ^A\19Eï/\8e\7f¬ÏÌÕ\15ë?Ë\vmT\b\15CÄ\13Ô8Ä Ä\84\94 ó¥\87iEDк\ 3Èaç\13t\9dßp&X ÓôV\10Ó"g÷\1f\8cbÄ\ 4\97*êÏÄ*d\15\98q\9e1Éàù£0_\1aݬ½\ 5ÌM\9eêÍpB\92\1aà3[\ 1ô±\14{3\9e\9c\9cþ}öêôâòä\94öL=ÉôMi3ýb+¥¿É\89\83×}êt¸\90Z¾\92ZÝC©($ý\18\1e¤MU±\18¥2ùLs®çÖÄt]03_@U\93Ö\rJ9µ¦V¹áhÏr]d\81µ¦\ foÎ>Iðó\f%\8f{\r4\9aU¶\14¡\9e\14\8b/\91_/érÉ¥¶\84Ñì á\ 3h\1fs\93Ù¥¯¯³\13ºÚíu[SNWTA\ 6(Äîí»3x\7fñòÓä\8fËã³\93«g }ä2W$D½u·²¾e/\ 4\9f\99À\8b`»\9e«\9a2\8br2\96E¨Ó9ø\90þ\9a»\9a\13\95\9dÏ}#\910>u4>9Þ\87É@\8fo\0]5µ7\9a=Ý2úËÞ\8d2\886\9b0Okúlì\12Y\ 4£K[e\84`\97¹sli®+½÷+\9f¹ÖFW\88\ 3N\82³Ê2þÆò²Û\93÷ã\97ïƱtólË^¥\17V²\13OÂÑ$\î\ e\93>k~\86ÐV\19r\rõ\10\9c\8d\8elè\8f\b"Ê\16Nv\86\12\83B\19\84jSål\9f\9͸*\90
+\865*ui«[\96\aè[´¼-)t[\95Þ¾\8a% \16\8bÊ"\82ªF\1f@\rXdU°è+Õm»!Qo\16\99\17)\86_\ 2\14x-ó¢ \85®\80ç\13pf\8bÂ.YIWë\85C~!OfÂ\84¹ò¸ñeÂC!d¨dU\92>\97ãDà'bU_í^=ó\8fÅêÚ¥«gÏù\14\86c+Êýj®ÓϬµÓ\9a\9b¥B\92!Î^:D:\14_q\es\fB¤ÚÉ°Y¹Çª\89m©=Ôªô±\94¡áÎ\96Ð|ó\ 2ñsµP4\bË]ïvÏ/_ý)Ãïàu7x¼+þéjÂýrË«\84Îf\984û\9cÚ\ 6Y,eâ5\90ºF´%8-\88\17eë$b\14gVB\9c[Ö\ 1ÜʦÖ_ N SB]qÂp\v\10Êd\e$À\12¹\96g \ 5ý¸\¤1º&MµF7Ø']8d\8bÊ\8b\95yì\ 4Ùnwm;ÒyÏR\88qÏ\e\9d\eK\ 2Ì©r±ê^F/)U\10\95
+_ù¬\ 3;%¨½û¨ï4&\99ö5\1fÂ\13\9e¤\9b\Ñ\9d.s\a«ï±ÖûMWÚq«;HFXtàCÜk\90»\1a\94îõ \86ûÎêòß\ 3ç#Üö°\8e\r{\9fRØAí¡ ¡\82Äf{\96D\8cxÜÀâbݽ§\8aç7\9ab\8e\18qÎ<Bê1ÒÑ๵\9f\9b\85D±Ò)·ÎÐÎÅÔct#J ]x0Î\1eN¥\9f \19\ 1â±fÅx\99\12ç£\92?K\83s÷\11]¢¡xÜ(9\9e8q'5Åí#@ß\1e¸.ç7\97\ 3\9f\86\9d\9eß\12\90\86\83\8d¤ï\ f\92ápÀÉy¢\v͹bn9ÊX(ýp\94®ÏuªPk<JÃùpà\99û½Â\1anØ\bMw]®Ò\96Bm\ 5\87×ÖØU}\1eÞ\87Ù\10Ì×õFÑ«kl0w\0F\1e\0E¸îYo,ü\94ý\0qF³æöÅÛ\8ftàø6°ò\e7¬¶\1e4ü8MÃ\0\93\ 6Dz0\88Â&¥\8a¨ÇjG\8a\81
+:Üé ÒäPóq°\8c\ 1sw\11\f\r\1fù¸Àzú\83\ 5\ eDW;¶tF\8cOë\17P\19ùÆ\9aV¦gª)ê-F'\9a\17×\v¬\9aH{gS\1eØ\19-óz.nùp!)\12bz\11T&ñ\94\93´L\83©¼z3\vkxnÒ¢á\rO\91·°eV\f\86À_.´yë×åÓ¯<\84Ñ´\ 1)ã£\99:\8d9ij\8cS×L˼fzJÚ'¯\15Â\8f\17\0ì·\12Vǯ\as<[h\19s\88Í\96éÀ0Ã@õ9-LWDéÇÔ*¦ãji0´ÞÓÃÞ\8c8¼ùp~.Üï[æ"çÎ\8a+\9e¸®°zbÓçW\aÞöï\85\80Wå[Ü!\91\93|9x=
+\13¾s8J\86GGx\8bî&G]¼Vg»ï_^\1c¿dÁua±'9ú½É3ñ¿\15ïn\1d¶ýª\9c*\12ÙY¾3~Y1ªp,Vÿ°\9f\1câ½\Æä°Ï§NÇ;\7fíü\ f\ 6KÄÕendstream
+endobj
+595 0 obj<</Type/Page/Parent 458 0 R/Contents 596 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R/Fc 11 0 R>>/XObject<<>>>>>>endobj
+596 0 obj<</Filter/FlateDecode/Length 1545 >>stream
+x\ 1¥WïoÛ6\10ý\9e¿â>-î\96(þUÛ)Ö\ 1\e\17ÙP;s\ 4\14Ã<\14´DÛliÑ%¥¸Ù_¿w$å8^< KÓ(\89hݽ»{÷îôõ¤EM|µ¨ß¦N\8f²õI3iR¯×Áµ;èãÚÆ·\95´\b\aÍÖS\a\83\ 15\93úb\97ø\ 3Ïñ\83/ÛݤEíæ \19\ 4#oS¶\ 3\97»\v>~1êR«Eé\ 2Hz\83>¥¹?oR\9a5&\85¾§Â\14ç¹\\88J\97ôNÞ©LÒ\a\93K\12\0æJceN[U®hcUQÒg3w¤
+*W2ÞùZÉJRúîmB\13ܵ[åä\99?\ fÖ^¤\9fO\9atÞê$m8oxÛÊ\91\99\97B\150¾°fý`NZ\9c|\96YIÛ\95\fn2$<+ç*éHÐ{Yþjæ³\86\96wRÓë×Ô\9e½@\ 2\80Ã\95 {»\18]R\v\91rÈç\9dnÒe¿Ã\95(\96òú\1dý@Ã`p(²\95*\96d\16tñÁõu±0v-Je\8a`è!wçí~ÒcC\7f¦\86æ¨\99Ò\1aè\91
+-ðè_G\1d\7fTEn¶\8eÆéEû·\9d§\0\87ƦT\8bû£¾>r\ e¶Æ~a\9c¾
+\ fÖ~¢\90\18wF\8a³C\eã\9c\9ak@3\16i
+õrÒÞ!°ÒPå$Mo\86ü«\93ENÂÝ\17ÙÊ\9aÂT\8e\ 1ìÕ(ó¹\ 23\0Ne>\1d\84d\17¥ã§£[ï&\93\96Ë\18\9cÁ\8f\80á\1dQH\94¥Uóª\94.¡t\ 5\88\99(8w\80²¨ô®Â\87ÞCy
+)sïïKa¶ \88(\11T!·LAZ \aCH\8eÈsT\ 1¨\98\90\81\8a!ü¥\ 2à\1d.dÄ[àOå\16G6déÀµ\87\8e³\9dù\90\89<áBÉÚ\ 4\ 2ÁÿÜ\14\92\90\13e%ºÈØre\96¦\10Ú§\bÔB\98\9b\1cÔ\0Pá\80Ñ\0,ã?p¹ãå^Õ\80 4\81§3
+Óî\ 5\12§°
+k*C K&.
+zê8\9f>\aj½ÑrÍÍòT\ 5ÑÐì\eJ´³7\95kÄ5\ 2CGʺ2¶A\80\14¨yõ\8df\r\9a\8eF7Ã1Í^°\81\8bQ\16\15å¼\9f\fXãÐ\15³v¯Oá´î\19\7f¸ëû\aWcùí¿<\8d\9fë\89Ã\19jãä\13á \96Ñð¹\ e¦r£ï'\eYD\aÏI
+,íc}\86)\83>\9bÊ\85\95nõDà¾\8a`Ë÷\16ñ¼=HZ\97\ f\8c\99\80ôè9Å\12 ®³ \17Ä\9dPZ°ö \13\ 5ÈÉ¢sFh}>- \1d6\90t~ï\eµV1·1Fã\8c\1fÀàyÅá?âg\b
+I\8a!Í\1aßÇÁCøÜ@fSTëÐþZs\13A\14\826¢\95xêa\1aúÉ\ 4]SE¦«\^ØMöÉ\83u.Y1ʽ¦¬\83\19§\8f4×·%\921W\7f\v\v«k \85\80\f,¼ü² oüDý·Êî\89,ë&\ fZ\93I\87\99¹\88®ëajåR9L\1f¶\16Äñ©Æ\87\9aç(\r×É!n1\8e\82áÓá)ßfé\89S\96\ 5\1cù ÓÛÝI¨fBo´>p/å'M\11øà \9bw\10(Öe©ÕZ\15\90¿<\8eä&]òDn%ÝN\etz\99\fð\93çò+òÿ&~\1f\80\ 5\8f\154òÙa%ôÓ\8b1Å;5\blEl <N\91tt§\84\ fÀ\95°$lN{\8dzõ\8dù\83)¤u¬hå6Â\98J\94\199ðÃVÐ\9dÐ*ß\ 3\15d¹&@+l\ 4u\b·~¬Öb\197\92`)ÀÇv\85aËÓ".?GB\89Ið\18$v/daÖ\10@\1eU\7f¡Å2V-Lê0\9c\8fXC.צPXåÎ8\99³Æ\1c\96\ 4ÝL¯ÇéÕôÓx\92^\8fþø4¹I¯'ã[¬|¶ÊÊ*Ì
+Þ \ eÒ\8cjóÄgÆqPÞ3Ú\ 4\14
+{\13\937ºKȳw\e\16 #èj à\91kx\1fõôÁ\96É\1aâ§\1a/.\1eô±\9a¥Àñó\8fØ=\8cOÕ\1a\9b¢ß\97\8cÍ\7fü\ 5í.\v^\eyuH\877È!\8e1\8c\81\93\ 3\88¼\9f5ÊUåü\1a©¸\9d\8e \ 5sbÛÖ[\10Ì`£\19^\8f\90:/{¾Ë¶RkÎ2\98ÄËÖnÁ:H¦ ÃYâ ZSç\11ÄÃèkÖqô1\bh?\93×Õì[¨n*Þ¡\1eV0Nî\910ý\82\18JûH\9eÖÈ\9dXb\9d;x®î\1eÆ\12²\80Ln°Ç9rUæµ+Æ\127\89ýu\9d¥ô \93ØN¤\rÕ\ 4\89Âå\8b\16Ä&\9d\8exg8\80TËÂ^.\17²ÌV¡è\15\14\19k\12Ú\9bß) É\ØH[\99\1f1µ·Îò'.F\83¸\aµúý\84÷\9fÞ\0¯v\9d\ e«Òí\9b\ foßðû\94Ô uô¾R¹ß¿Î[ýAÒ»ÄLí7!\89ÿïͤÛï&ý\1eÞ\fÙ@ï%ùJO~?ù\að\ fjÇendstream
+endobj
+597 0 obj<</Type/Page/Parent 458 0 R/Contents 598 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/Fc 11 0 R>>/XObject<<>>>>>>endobj
+598 0 obj<</Filter/FlateDecode/Length 1739 >>stream
+x\ 1¥X]O\e9\14}çWøi7HÍ\90\ 4òAß ,[¤.°\10iUmV\913ã$ngì©í\81f\7fý\9ek{2I +\15Z \91\8cç~\9c{ï9×|?ê²\ eþwÙ°ÇN\a,-\8e:ÉhÄ\9a\1ff\89\ f\1dÖ\1fô\93>ë÷Î\92.ë\9eöð»\11lqt9Áù\ e,l~àüÉu\87\9d³É\82u\93³Ó\1e\e\8c\86I\7f0b\93Ì\1fë°IÚzüÈü¿ÉJ0+Ì\930°WæRXö,Ý\8aqŸ1|Í\1eïïî>Ïnï&7×_f7·×w³«\8bÉÅñäëQ\87µ»\b\13f[Á\16cÖ\99*u\95\81\95i+ÕÊq©DÆ$\8c½4Ô\9c\9e\1e'Ñ`¯\9b\fÈà8\86w³`\ e\11¦+®\96\82)íäB¦ÜI\18¾ÊrÁ¤e"D\9f\vnál¾¦W\ e\ 4\98"CåØ\93ä\88èz|?¾EÚß+aÝ\aï(Ba\85Ê,N<\0\92õ8×VÜ\e©\9c0ÓÖôø\80éh\87Íyú\8d9\1dâ\ eî\16ÒX\970öI?ûXyí\94iÊOÚ\ 3&\15',ÙÂèbÛ\1cRÖ\v'\0ª\ 2´Y\r\88[qç\8f\95F<I]\1d´º\8d"â\ 1\1eÏÜ\12¸¬àÆ®x\9e\ 3ÆT\e#R\97¯# ±K\ eDª\rÐ*¥H\ 5¥\94qǽÍg£Õ²®mÝ,¯´^J\10[\1f¼\87Yñü\7fj~ \86iëþîóÍøËìÓíÕô\18àd,Ó°J\89QAñÍ\9a-*\83î0¯Y?`Ö#\84Øv+\8a\84=Þeè\v\86Ï_õܧzr}ƺ]\1a¿v\98¿voèç\10}Mã\96V@\16 çÒ:Bk§«£7[\95¥6.´ó#/æ\9c¥¨ö\1cÍ +¤\82&\17?x!\95TË]Ø\1c\9fçHZª:\9dÓ¤G\13eÍÓÌ\96ZçÖÎ\94KRz\f¾i÷\ 6É\19=\8f\89Ì|4ë\997ó÷?têä:ó\19&#¢+\1c\9fö\ 6C\16\9eÖÙú\87ínô\a4Þa«Ý\e%Ýó&º¿V¡ÝC»ê\14\18R» áS]åÀC°B+é´\11Ù\af\8byæKN3\\bk9È\ 3\ 5\94Î\8a|Áø\WaR\ 2¯$\8cÊ\12˱\a[S}¸p\86+[HGuá\18L\10Gµa\9càµ4:\85Cï½®ÍV\ 44\9aT{ÔR\83µrÍ3j\81ÉÕå\9eßÊÇL=\8cvE5Á=4\14µ)P\0ZÚ±¬Bÿ-½ë_Qt"Ä\ë\12ìkÄ\ 2m\8e¤}aqè$T6Iýd\90ÕE¥R¢Ò\rQÔ\82aiz\85ØbÝ\9b\15vIäç_ö&ëêÒhÍb\Ö\1fÙ¢óØ\\84o&Ri\89¸\91ïóJ \0CSCÓIÁD\8aGb\88\19Xûôð+TD\81\87\88\91<\99"K\v\9eÊDÍK\ 6Å\84ÊÀ¦LW{(r\88\11èl\1d\9b\81ülO[\ 2\9c@Å\11¨ý ù\bþ\93(WL\14\10\84N:\90ã¥HyeQ+ÇJmÄ\18R*0"ä\93@#R\83Q±\90\7fQåN\968\10²¶\98jÓ|\19GÑ\ 6IÚ\ e\98¤N9ä_Y·\97*A\ 6ývÔ+@\8d;±Ô\86ä<èah\ 3@®x!¨á=\8aß\88)vã]\ 2ϲ\89%\96eg\f¨4{Þ½Â[d\87\9c\1eîÇ\8c§Ð\8f\8c²E0\ 4{Ì©Vm=\8f«APb¯³w¥P÷\8dÌÖ²Q\13Ô\ 4VB=ë^ÙA\ 6ù\94Â\0Ç\ 2RQ(Þï\ 3¢Ùh<\85\16s/¡Ò\82ØÃï(~\ 2¶Ùð\95\90\8dX¢\80\ 2\ 4\136$:\12Z\12\93ç\99\95\1aZ\85>ÜniÏVx\8d {\e\97Rê¡\10³\?³'\9eW±ß½ÊúQ\81\82\97ÜxA¡Èr\ eqy¸¾ÝÎ~o\8fx_</öÂ\1aK à7H\8a"\90\9dTT\16¿µý\8cÏ}\r¸\88z\83eÙ«këE\bÁzG:"û\91\1eì\97\17ôëé\888v\91ó%\86P
+H \11;h:\13\v¿»Òc»ò"CT\851\v\95xo9!ã.z$Î\ 3Xª*æÔB\v\86ùò£\8b©¢\a/òô+xØÏß\ 3è\ 4¶Ãû\87!ÝlûÍVÓÚÄ\17§ç\ 5¼dØKâ|\ 2\11W\8a}¾Gʱ7\ 2÷ayl\16©ø\81\16ª\9fIowÿ \18BA#¼Tc($°\85\9eÕôà\83x»\13ª\8eg¡õÌï¼\95"\81«I%TU\84\81\95~3¦\17¸Cuç\95ów\94·\13\82Pél\ad²må¿\e?\9bËXP\97¸ÚSæÔÓ\95ª\97}|óv\ 4¦-\8e¥\80\ËÌË\12MHÇ{lj\1aJ\rd\9a¯Âí\8d\ 4xþò}2\87â\93I\12F,Kµ\ 5
+\94î\9dqSiìÑq\9_·\ 5îIW\94x3bä¢n9Ü¡Ä\ fh\ 6\98=N\1c.°%ö"\1cñ2±ç5JZdWô¶\8a\82S7n¼EÆ\e*¥°-U \8b\v}¸\a`;\81ë@\ 1\16\ 1\82\0öýmÅJÆèÆ\18eÆ_
+\8càß\98\f7åúRA!Hl¢\10\¬\0\ 2!\16:Ãå\199B\eqM#\0¶£"\9fí-hcðt3l\94/Þovï\ 3ý^ø#ÀÖ\95`\14)ºÛï$ýÎ9\eôÎ\93Á O\17\87Ç\8b?./Ø\15
+\9ak\b¶e¿W\18Jï½;\1c%\83slýC¼\82£cÄ°\147Wì\176\ e\17é1\ fu\ 4GÆM\81Ýì\8aËÙð,\19âo\1dþ\922\18\90Ýß&G\7f\1eý\a\ 6Üq~endstream
+endobj
+599 0 obj<</Type/Page/Parent 458 0 R/Contents 600 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 5 0 R/F8 9 0 R/Fc 11 0 R>>/XObject<<>>>>>>endobj
+600 0 obj<</Filter/FlateDecode/Length 301 >>stream
+x\ 15\90KoÂ0\10\84ïù\15sª@"Á\ e©\1d\8e\10 âÐ\97\9aÞr \89C\\ 5\87Ú\ 6\89þúnxÈòʲg?ÏìoÀÁhqÈ\183\81ê\10°\88A\88\19Õ$\95TcÚV¡ \96y0Ý$à\1cy3hE*\91× =cÈ«QÞ*8ý§ \1d\94ö²(Fe1\ 6\1dá¼Õf\8fN\99½o¡\r¾ß¶Ùûj\8d¦·÷G7!ýî¡¿\82\fv\17¯\1cúæ\ 6QÕÉj\7f\19ç?\ 1CÈgQL\ eFµr\95ÕGßÛ \88V\8c*\82°+¹.}\89sÙ\9d\94\8b\86®é¦º\a\be\94r<\10E,$n\82ô.àÏ,zfsÄ×?¾\16¯Ë\ 5Vꬺþ¨¬ÃËI×jè\b¹L#1\9f#\94¤&;Y[\9a½Ú®ð\84¬ÓÊxdeÕ\ eé)Æ\a\8dÁÓd¶\86\82\1fJ¯{3@\12\99DR¤ä\9a\0B\ eWë<ø\fþ\ 1{\83u'endstream
+endobj
+601 0 obj<</Type/Page/Parent 458 0 R/Contents 602 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 5 0 R/F8 9 0 R/F9 10 0 R>>/XObject<<>>>>>>endobj
+602 0 obj<</Filter/FlateDecode/Length 1265 >>stream
+x\ 1\9dVßoÛ6\10~Ï_qÈËÚ-Q,Û±\9d\ 2ypÑf\b°µ[â®\ fÍ\10Ð\12-s\93H\85¤ì\ 6Ø\1f¿ïHÉ¿\ 2¯ÅâÀ\96È#ïîûî;òé$¥\1e>)\8dû4\18QV\9dô\92É\84¶_¶ÀK\8f.{WIJÃÉ\18ÏãIrIVÒ\ 2¶=\1a\ e/73ýáîÌ ½äù°f;óvÆËàtó\ 5\17\177WÔïÑl\81XFã Íò0\8f\91ìÕ½¨æ\82>ß~¸§[í¥Õ¢t¯g\7f\9dð\9at\1c×\9c\ f\86I\1f«^\ 5³\e¡J³\926Z\r)M[«þ8\19±Õl))k¬\95ÚSÜ>3¹\9c\v'©6ÎIþ'ÏF¢\16sU*ÿLÞP\83ùÂ\9a¦vd\161"'-\1c±±ðä\96\ 2°\bÊLU\19ÍÞ{t\9e\ ebdZTÒÕ"\ 3nÆÒ\aéßÞ~¼'\1e\ 5\96\85rÞ
+¯\8c&¡s\f8S6ü\9a\10Ç\8a\15\95(©\16\16æ\80\80ܳöâ+©\16\88\1e]q\86i2\1côé¼\7f\99Lð\8b<©ýcT\1eïßßýñþîñ·éÝô×vü\9aâ }Á\ 3OÌ>ÞµC\8f¿ÜÞÏèÏ. \14Ä÷mxºVÚQ\84åôÈêÖi\17Ýæ÷\9a¦ïÞÝ}y3\9bþ|Ì1\elìw\1e®IÕ\8f"Ï-ýC\8b§|\ 3þAÜØygÑöñ\9a\80¿ÒÅÑ\80;p¶Køé:P-àóáÁýttqÀ=๻üûÀ¿¸éê÷¼£w\1ch\ 6½SrªªKIò«\b¿¨JA+Qª\9cvh\0\eÞ#¹o\96Ë\97¢4sQ\1eÃ~wËkJ¯úI:\9a$)Ê{û<`\10þ+æ[\1d\84%W¬½ \1am\88iQ\8er¹PZæ¤tÐ\88èª\13ï,Æ\12"9#WÍs\12Ω\ 2u&x\8dhJ\1f¶@ú§?\9e&4å·\8e\8dV~Ø\1eòÍYÆAÂm\89\ 6%\8b¨Ü|O\95Q«Þ\14\12¾mB\9fj\88Óya}S\9f\91æ(Öª,Ix/«\1a¹\98VDZïì(\9fc×ÒÏ\95qQï`¨\91Xí\97d´l#ᬥÈ\96äEQ Ð\10eÒfÑ\1f%CÖß\146-×\8dcJa\8cæÓå\14ºß¦%µ¡3²niÖ\844dB\1f\8c\97\11x\8e\8b[\1a`SÜX\17Ü\9cB\9bÂû\ 1|l\e|a3£Ëg\9a?£ö5³Ø5-ÌhãA\89\97ÙR«\f\rËʧFYYÁ*drqs¬SýßÒ{\ 3vp|mjq°?ÐOú<\90~«*?E0\97È\ 1Y-TÑÄnÜ\11m\9a\12E÷\92éP\97\11ð\1fÜ^ùléÝ!å%®\81ñH5½\95\99`>\18ëSÎë´-Õ¥\0ÇkÓ\95ìYë\15\91æ]ñ¬C\84\91\99À*ªs)q\9a\1cð¸wÔ<¼ÂI´=k\1e^\a¤\vÅÌQ,\94ÅKÌ\8fë3è5ÊÇ«
+Ej\9aH,ª½+Ñ\83\93;È è²4k\96,\9a\96*\85Åq\ 6@-ble±\e[B\9f9ü\10Ü\8a\v]죻R\87\991Ì]w\0.\ 6ñÛöp¯)prº\17\82}j¤}\ e\11é\ 2mt\9f)®ä\1d)R\83R/\ fà\94Ð0Ü\b¾6(¯V|\96;4
+°ÈB\99{\11\1a\1aî\ 6¥\14\80ÒhH\f \87½Øq¸>ÐÂ\9a\8aÐ\12\11Ì\9eK&>n\98ËüÀµ\96\ 5.\f+ -BÿÌV¸KÄ\94Xxà1¡[>\11\98+0E&Ã¥\a(0²Á.\ 2ëj\99©\85Êvóç\1aã\eM\8c/Þ3vZZ%ìß \1fáåf\8dº0TÛØÒ\17\8d\r\90´>Á7È\bÑɯÛýbC\ fxÇr\8aÂó"ó2Oè#Ã\14}\1cdÍ\1e¥ÈÏZfC\a\ e]g«MÈ\82÷ÙK\80¯\/®Z\17ÛÒ\ fp(\úØ\10lJ«\fjhqà=íQ¥tã¥kÛÙd{·L/'ɤ\17®\97Çn¬Ãñ0\19\8fp»æV>\9aðæïg'¿\9fü\vP¡x\ 5endstream
+endobj
+603 0 obj<</Count 14/First 604 0 R/Last 715 0 R>>endobj
+604 0 obj<</Parent 603 0 R/Title(Table of Contents)/Dest[461 0 R/XYZ 0 756 0]/Next 605 0 R>>endobj
+605 0 obj<</Parent 603 0 R/Count -1/First 606 0 R/Last 606 0 R/Title(SAMBA Developers Guide)/Dest[467 0 R/XYZ 0 786 0]/Prev 604 0 R/Next 607 0 R>>endobj
+606 0 obj<</Parent 605 0 R/Title(SAMBA Team)/Dest[467 0 R/XYZ 0 762 0]>>endobj
+607 0 obj<</Parent 603 0 R/Title(Abstract)/Dest[469 0 R/XYZ 0 786 0]/Prev 605 0 R/Next 608 0 R>>endobj
+608 0 obj<</Parent 603 0 R/Count -3/First 609 0 R/Last 611 0 R/Title(Definition of NetBIOS Protocol and Name Resolution Modes)/Dest[475 0 R/XYZ 0 786 0]/Prev 607 0 R/Next 612 0 R>>endobj
+609 0 obj<</Parent 608 0 R/Title(NETBIOS)/Dest[475 0 R/XYZ 0 738 0]/Next 610 0 R>>endobj
+610 0 obj<</Parent 608 0 R/Title(BROADCAST NetBIOS)/Dest[475 0 R/XYZ 0 254 0]/Prev 609 0 R/Next 611 0 R>>endobj
+611 0 obj<</Parent 608 0 R/Title(NBNS NetBIOS)/Dest[477 0 R/XYZ 0 758 0]/Prev 610 0 R>>endobj
+612 0 obj<</Parent 603 0 R/Count -5/First 613 0 R/Last 617 0 R/Title(Samba Architecture)/Dest[479 0 R/XYZ 0 786 0]/Prev 608 0 R/Next 618 0 R>>endobj
+613 0 obj<</Parent 612 0 R/Title(Introduction)/Dest[479 0 R/XYZ 0 762 0]/Next 614 0 R>>endobj
+614 0 obj<</Parent 612 0 R/Title(Multithreading and Samba)/Dest[479 0 R/XYZ 0 581 0]/Prev 613 0 R/Next 615 0 R>>endobj
+615 0 obj<</Parent 612 0 R/Title(Threading smbd)/Dest[479 0 R/XYZ 0 387 0]/Prev 614 0 R/Next 616 0 R>>endobj
+616 0 obj<</Parent 612 0 R/Title(Threading nmbd)/Dest[481 0 R/XYZ 0 786 0]/Prev 615 0 R/Next 617 0 R>>endobj
+617 0 obj<</Parent 612 0 R/Title(nbmd Design)/Dest[481 0 R/XYZ 0 487 0]/Prev 616 0 R>>endobj
+618 0 obj<</Parent 603 0 R/Count -5/First 619 0 R/Last 623 0 R/Title(The samba DEBUG system)/Dest[483 0 R/XYZ 0 786 0]/Prev 612 0 R/Next 627 0 R>>endobj
+619 0 obj<</Parent 618 0 R/Title(New Output Syntax)/Dest[483 0 R/XYZ 0 762 0]/Next 620 0 R>>endobj
+620 0 obj<</Parent 618 0 R/Title(The DEBUG\(\) Macro)/Dest[485 0 R/XYZ 0 771 0]/Prev 619 0 R/Next 621 0 R>>endobj
+621 0 obj<</Parent 618 0 R/Title(The DEBUGADD\(\) Macro)/Dest[487 0 R/XYZ 0 771 0]/Prev 620 0 R/Next 622 0 R>>endobj
+622 0 obj<</Parent 618 0 R/Title(The DEBUGLVL\(\) Macro)/Dest[487 0 R/XYZ 0 546 0]/Prev 621 0 R/Next 623 0 R>>endobj
+623 0 obj<</Parent 618 0 R/Count -3/First 624 0 R/Last 626 0 R/Title(New Functions)/Dest[489 0 R/XYZ 0 786 0]/Prev 622 0 R>>endobj
+624 0 obj<</Parent 623 0 R/Title(dbgtext\(\))/Dest[489 0 R/XYZ 0 766 0]/Next 625 0 R>>endobj
+625 0 obj<</Parent 623 0 R/Title(dbghdr\(\))/Dest[489 0 R/XYZ 0 655 0]/Prev 624 0 R/Next 626 0 R>>endobj
+626 0 obj<</Parent 623 0 R/Title(format_debug_text\(\))/Dest[489 0 R/XYZ 0 543 0]/Prev 625 0 R>>endobj
+627 0 obj<</Parent 603 0 R/Title(Coding Suggestions)/Dest[491 0 R/XYZ 0 786 0]/Prev 618 0 R/Next 628 0 R>>endobj
+628 0 obj<</Parent 603 0 R/Count -5/First 629 0 R/Last 650 0 R/Title(Samba Internals)/Dest[495 0 R/XYZ 0 786 0]/Prev 627 0 R/Next 651 0 R>>endobj
+629 0 obj<</Parent 628 0 R/Title(Character Handling)/Dest[495 0 R/XYZ 0 762 0]/Next 630 0 R>>endobj
+630 0 obj<</Parent 628 0 R/Title(The new functions)/Dest[495 0 R/XYZ 0 621 0]/Prev 629 0 R/Next 631 0 R>>endobj
+631 0 obj<</Parent 628 0 R/Count -15/First 632 0 R/Last 646 0 R/Title(Macros in byteorder.h)/Dest[497 0 R/XYZ 0 758 0]/Prev 630 0 R/Next 647 0 R>>endobj
+632 0 obj<</Parent 631 0 R/Title(CVAL\(buf,pos\))/Dest[497 0 R/XYZ 0 683 0]/Next 633 0 R>>endobj
+633 0 obj<</Parent 631 0 R/Title(PVAL\(buf,pos\))/Dest[497 0 R/XYZ 0 624 0]/Prev 632 0 R/Next 634 0 R>>endobj
+634 0 obj<</Parent 631 0 R/Title(SCVAL\(buf,pos,val\))/Dest[497 0 R/XYZ 0 566 0]/Prev 633 0 R/Next 635 0 R>>endobj
+635 0 obj<</Parent 631 0 R/Title(SVAL\(buf,pos\))/Dest[497 0 R/XYZ 0 507 0]/Prev 634 0 R/Next 636 0 R>>endobj
+636 0 obj<</Parent 631 0 R/Title(IVAL\(buf,pos\))/Dest[497 0 R/XYZ 0 436 0]/Prev 635 0 R/Next 637 0 R>>endobj
+637 0 obj<</Parent 631 0 R/Title(SVALS\(buf,pos\))/Dest[497 0 R/XYZ 0 377 0]/Prev 636 0 R/Next 638 0 R>>endobj
+638 0 obj<</Parent 631 0 R/Title(IVALS\(buf,pos\))/Dest[497 0 R/XYZ 0 319 0]/Prev 637 0 R/Next 639 0 R>>endobj
+639 0 obj<</Parent 631 0 R/Title(SSVAL\(buf,pos,val\))/Dest[497 0 R/XYZ 0 261 0]/Prev 638 0 R/Next 640 0 R>>endobj
+640 0 obj<</Parent 631 0 R/Title(SIVAL\(buf,pos,val\))/Dest[497 0 R/XYZ 0 202 0]/Prev 639 0 R/Next 641 0 R>>endobj
+641 0 obj<</Parent 631 0 R/Title(SSVALS\(buf,pos,val\))/Dest[499 0 R/XYZ 0 786 0]/Prev 640 0 R/Next 642 0 R>>endobj
+642 0 obj<</Parent 631 0 R/Title(SIVALS\(buf,pos,val\))/Dest[499 0 R/XYZ 0 728 0]/Prev 641 0 R/Next 643 0 R>>endobj
+643 0 obj<</Parent 631 0 R/Title(RSVAL\(buf,pos\))/Dest[499 0 R/XYZ 0 669 0]/Prev 642 0 R/Next 644 0 R>>endobj
+644 0 obj<</Parent 631 0 R/Title(RIVAL\(buf,pos\))/Dest[499 0 R/XYZ 0 611 0]/Prev 643 0 R/Next 645 0 R>>endobj
+645 0 obj<</Parent 631 0 R/Title(RSSVAL\(buf,pos,val\))/Dest[499 0 R/XYZ 0 553 0]/Prev 644 0 R/Next 646 0 R>>endobj
+646 0 obj<</Parent 631 0 R/Title(RSIVAL\(buf,pos,val\))/Dest[499 0 R/XYZ 0 481 0]/Prev 645 0 R>>endobj
+647 0 obj<</Parent 628 0 R/Count -2/First 648 0 R/Last 649 0 R/Title(LAN Manager Samba API)/Dest[499 0 R/XYZ 0 423 0]/Prev 631 0 R/Next 650 0 R>>endobj
+648 0 obj<</Parent 647 0 R/Title(Parameters)/Dest[499 0 R/XYZ 0 270 0]/Next 649 0 R>>endobj
+649 0 obj<</Parent 647 0 R/Title(Return value)/Dest[501 0 R/XYZ 0 481 0]/Prev 648 0 R>>endobj
+650 0 obj<</Parent 628 0 R/Title(Code character table)/Dest[503 0 R/XYZ 0 786 0]/Prev 647 0 R>>endobj
+651 0 obj<</Parent 603 0 R/Count -2/First 652 0 R/Last 656 0 R/Title(The smb.conf file)/Dest[505 0 R/XYZ 0 786 0]/Prev 628 0 R/Next 658 0 R>>endobj
+652 0 obj<</Parent 651 0 R/Count -3/First 653 0 R/Last 655 0 R/Title(Lexical Analysis)/Dest[505 0 R/XYZ 0 762 0]/Next 656 0 R>>endobj
+653 0 obj<</Parent 652 0 R/Title(Handling of Whitespace)/Dest[505 0 R/XYZ 0 476 0]/Next 654 0 R>>endobj
+654 0 obj<</Parent 652 0 R/Title(Handling of Line Continuation)/Dest[505 0 R/XYZ 0 312 0]/Prev 653 0 R/Next 655 0 R>>endobj
+655 0 obj<</Parent 652 0 R/Title(Line Continuation Quirks)/Dest[507 0 R/XYZ 0 705 0]/Prev 654 0 R>>endobj
+656 0 obj<</Parent 651 0 R/Count -1/First 657 0 R/Last 657 0 R/Title(Syntax)/Dest[507 0 R/XYZ 0 276 0]/Prev 652 0 R>>endobj
+657 0 obj<</Parent 656 0 R/Title(About params.c)/Dest[509 0 R/XYZ 0 705 0]>>endobj
+658 0 obj<</Parent 603 0 R/Count -9/First 659 0 R/Last 667 0 R/Title(NetBIOS in a Unix World)/Dest[511 0 R/XYZ 0 786 0]/Prev 651 0 R/Next 668 0 R>>endobj
+659 0 obj<</Parent 658 0 R/Title(Introduction)/Dest[511 0 R/XYZ 0 762 0]/Next 660 0 R>>endobj
+660 0 obj<</Parent 658 0 R/Title(Usernames)/Dest[511 0 R/XYZ 0 647 0]/Prev 659 0 R/Next 661 0 R>>endobj
+661 0 obj<</Parent 658 0 R/Title(File Ownership)/Dest[511 0 R/XYZ 0 269 0]/Prev 660 0 R/Next 662 0 R>>endobj
+662 0 obj<</Parent 658 0 R/Title(Passwords)/Dest[513 0 R/XYZ 0 745 0]/Prev 661 0 R/Next 663 0 R>>endobj
+663 0 obj<</Parent 658 0 R/Title(Locking)/Dest[513 0 R/XYZ 0 511 0]/Prev 662 0 R/Next 664 0 R>>endobj
+664 0 obj<</Parent 658 0 R/Title(Deny Modes)/Dest[513 0 R/XYZ 0 198 0]/Prev 663 0 R/Next 665 0 R>>endobj
+665 0 obj<</Parent 658 0 R/Title(Trapdoor UIDs)/Dest[515 0 R/XYZ 0 718 0]/Prev 664 0 R/Next 666 0 R>>endobj
+666 0 obj<</Parent 658 0 R/Title(Port numbers)/Dest[515 0 R/XYZ 0 590 0]/Prev 665 0 R/Next 667 0 R>>endobj
+667 0 obj<</Parent 658 0 R/Title(Protocol Complexity)/Dest[515 0 R/XYZ 0 330 0]/Prev 666 0 R>>endobj
+668 0 obj<</Parent 603 0 R/Title(Tracing samba system calls)/Dest[519 0 R/XYZ 0 786 0]/Prev 658 0 R/Next 669 0 R>>endobj
+669 0 obj<</Parent 603 0 R/Count -8/First 670 0 R/Last 706 0 R/Title(NT Domain RPC's)/Dest[523 0 R/XYZ 0 786 0]/Prev 668 0 R/Next 709 0 R>>endobj
+670 0 obj<</Parent 669 0 R/Count -2/First 671 0 R/Last 672 0 R/Title(Introduction)/Dest[523 0 R/XYZ 0 762 0]/Next 673 0 R>>endobj
+671 0 obj<</Parent 670 0 R/Title(Sources)/Dest[525 0 R/XYZ 0 679 0]/Next 672 0 R>>endobj
+672 0 obj<</Parent 670 0 R/Title(Credits)/Dest[525 0 R/XYZ 0 569 0]/Prev 671 0 R>>endobj
+673 0 obj<</Parent 669 0 R/Count -3/First 674 0 R/Last 676 0 R/Title(Notes and Structures)/Dest[525 0 R/XYZ 0 447 0]/Prev 670 0 R/Next 677 0 R>>endobj
+674 0 obj<</Parent 673 0 R/Title(Notes)/Dest[525 0 R/XYZ 0 426 0]/Next 675 0 R>>endobj
+675 0 obj<</Parent 673 0 R/Title(Enumerations)/Dest[527 0 R/XYZ 0 771 0]/Prev 674 0 R/Next 676 0 R>>endobj
+676 0 obj<</Parent 673 0 R/Title(Structures)/Dest[527 0 R/XYZ 0 288 0]/Prev 675 0 R>>endobj
+677 0 obj<</Parent 669 0 R/Count -12/First 678 0 R/Last 689 0 R/Title(MSRPC over Transact Named Pipe)/Dest[547 0 R/XYZ 0 481 0]/Prev 673 0 R/Next 690 0 R>>endobj
+678 0 obj<</Parent 677 0 R/Title(MSRPC Pipes)/Dest[547 0 R/XYZ 0 419 0]/Next 679 0 R>>endobj
+679 0 obj<</Parent 677 0 R/Title(Header)/Dest[549 0 R/XYZ 0 617 0]/Prev 678 0 R/Next 680 0 R>>endobj
+680 0 obj<</Parent 677 0 R/Title(Tail)/Dest[557 0 R/XYZ 0 571 0]/Prev 679 0 R/Next 681 0 R>>endobj
+681 0 obj<</Parent 677 0 R/Title(RPC Bind / Bind Ack)/Dest[557 0 R/XYZ 0 447 0]/Prev 680 0 R/Next 682 0 R>>endobj
+682 0 obj<</Parent 677 0 R/Title(NTLSA Transact Named Pipe)/Dest[559 0 R/XYZ 0 575 0]/Prev 681 0 R/Next 683 0 R>>endobj
+683 0 obj<</Parent 677 0 R/Title(LSA Open Policy)/Dest[561 0 R/XYZ 0 786 0]/Prev 682 0 R/Next 684 0 R>>endobj
+684 0 obj<</Parent 677 0 R/Title(LSA Query Info Policy)/Dest[561 0 R/XYZ 0 486 0]/Prev 683 0 R/Next 685 0 R>>endobj
+685 0 obj<</Parent 677 0 R/Title(LSA Enumerate Trusted Domains)/Dest[563 0 R/XYZ 0 786 0]/Prev 684 0 R/Next 686 0 R>>endobj
+686 0 obj<</Parent 677 0 R/Title(LSA Open Secret)/Dest[563 0 R/XYZ 0 554 0]/Prev 685 0 R/Next 687 0 R>>endobj
+687 0 obj<</Parent 677 0 R/Title(LSA Close)/Dest[563 0 R/XYZ 0 269 0]/Prev 686 0 R/Next 688 0 R>>endobj
+688 0 obj<</Parent 677 0 R/Title(LSA Lookup SIDS)/Dest[565 0 R/XYZ 0 692 0]/Prev 687 0 R/Next 689 0 R>>endobj
+689 0 obj<</Parent 677 0 R/Title(LSA Lookup Names)/Dest[565 0 R/XYZ 0 207 0]/Prev 688 0 R>>endobj
+690 0 obj<</Parent 669 0 R/Count -5/First 691 0 R/Last 695 0 R/Title(NETLOGON rpc Transact Named Pipe)/Dest[567 0 R/XYZ 0 333 0]/Prev 677 0 R/Next 696 0 R>>endobj
+691 0 obj<</Parent 690 0 R/Title(LSA Request Challenge)/Dest[569 0 R/XYZ 0 586 0]/Next 692 0 R>>endobj
+692 0 obj<</Parent 690 0 R/Title(LSA Authenticate 2)/Dest[569 0 R/XYZ 0 194 0]/Prev 691 0 R/Next 693 0 R>>endobj
+693 0 obj<</Parent 690 0 R/Title(LSA Server Password Set)/Dest[571 0 R/XYZ 0 477 0]/Prev 692 0 R/Next 694 0 R>>endobj
+694 0 obj<</Parent 690 0 R/Title(LSA SAM Logon)/Dest[573 0 R/XYZ 0 786 0]/Prev 693 0 R/Next 695 0 R>>endobj
+695 0 obj<</Parent 690 0 R/Title(LSA SAM Logoff)/Dest[573 0 R/XYZ 0 344 0]/Prev 694 0 R>>endobj
+696 0 obj<</Parent 669 0 R/Count -2/First 697 0 R/Last 698 0 R/Title(\\\\MAILSLOT\\NET\\NTLOGON)/Dest[575 0 R/XYZ 0 758 0]/Prev 690 0 R/Next 699 0 R>>endobj
+697 0 obj<</Parent 696 0 R/Title(Query for PDC)/Dest[575 0 R/XYZ 0 683 0]/Next 698 0 R>>endobj
+698 0 obj<</Parent 696 0 R/Title(SAM Logon)/Dest[577 0 R/XYZ 0 786 0]/Prev 697 0 R>>endobj
+699 0 obj<</Parent 669 0 R/Count -2/First 700 0 R/Last 701 0 R/Title(SRVSVC Transact Named Pipe)/Dest[579 0 R/XYZ 0 758 0]/Prev 696 0 R/Next 702 0 R>>endobj
+700 0 obj<</Parent 699 0 R/Title(Net Share Enum)/Dest[579 0 R/XYZ 0 630 0]/Next 701 0 R>>endobj
+701 0 obj<</Parent 699 0 R/Title(Net Server Get Info)/Dest[581 0 R/XYZ 0 786 0]/Prev 700 0 R>>endobj
+702 0 obj<</Parent 669 0 R/Count -3/First 703 0 R/Last 705 0 R/Title(Cryptographic side of NT Domain Authentication)/Dest[581 0 R/XYZ 0 486 0]/Prev 699 0 R/Next 706 0 R>>endobj
+703 0 obj<</Parent 702 0 R/Title(Definitions)/Dest[581 0 R/XYZ 0 466 0]/Next 704 0 R>>endobj
+704 0 obj<</Parent 702 0 R/Title(Protocol)/Dest[583 0 R/XYZ 0 786 0]/Prev 703 0 R/Next 705 0 R>>endobj
+705 0 obj<</Parent 702 0 R/Title(Comments)/Dest[583 0 R/XYZ 0 437 0]/Prev 704 0 R>>endobj
+706 0 obj<</Parent 669 0 R/Count -2/First 707 0 R/Last 708 0 R/Title(SIDs and RIDs)/Dest[583 0 R/XYZ 0 181 0]/Prev 702 0 R>>endobj
+707 0 obj<</Parent 706 0 R/Title(Well-known SIDs)/Dest[585 0 R/XYZ 0 686 0]/Next 708 0 R>>endobj
+708 0 obj<</Parent 706 0 R/Title(Well-known RIDS)/Dest[587 0 R/XYZ 0 718 0]/Prev 707 0 R>>endobj
+709 0 obj<</Parent 603 0 R/Count -5/First 710 0 R/Last 714 0 R/Title(Samba Printing Internals)/Dest[591 0 R/XYZ 0 786 0]/Prev 669 0 R/Next 715 0 R>>endobj
+710 0 obj<</Parent 709 0 R/Title(Abstract)/Dest[591 0 R/XYZ 0 762 0]/Next 711 0 R>>endobj
+711 0 obj<</Parent 709 0 R/Title(Printing Interface to Various Back ends)/Dest[591 0 R/XYZ 0 674 0]/Prev 710 0 R/Next 712 0 R>>endobj
+712 0 obj<</Parent 709 0 R/Title(Print Queue TDB's)/Dest[591 0 R/XYZ 0 414 0]/Prev 711 0 R/Next 713 0 R>>endobj
+713 0 obj<</Parent 709 0 R/Title(ChangeID & Client Caching of Printer Information)/Dest[595 0 R/XYZ 0 745 0]/Prev 712 0 R/Next 714 0 R>>endobj
+714 0 obj<</Parent 709 0 R/Title(Windows NT/2K Printer Change Notify)/Dest[595 0 R/XYZ 0 683 0]/Prev 713 0 R>>endobj
+715 0 obj<</Parent 603 0 R/Count -1/First 716 0 R/Last 716 0 R/Title(Samba WINS Internals)/Dest[601 0 R/XYZ 0 786 0]/Prev 709 0 R>>endobj
+716 0 obj<</Parent 715 0 R/Title(WINS Failover)/Dest[601 0 R/XYZ 0 762 0]>>endobj
+717 0 obj<</Type/Catalog/Pages 458 0 R/PageLayout/SinglePage/Outlines 603 0 R/OpenAction[467 0 R/XYZ null null 0]/PageMode/UseOutlines/PageLabels<</Nums[0<</P(title)>>1<</S/r>>4<</S/D/St 1/P()>>5<</S/D/St 2/P()>>8<</S/D/St 5/P()>>10<</S/D/St 7/P()>>12<</S/D/St 9/P()>>16<</S/D/St 13/P()>>18<</S/D/St 15/P()>>23<</S/D/St 20/P()>>26<</S/D/St 23/P()>>30<</S/D/St 27/P()>>32<</S/D/St 29/P()>>66<</S/D/St 63/P()>>71<</S/D/St 68/P()>>]>>>>endobj
xref
-0 806
+0 718
0000000000 65535 f
0000000015 00000 n
-0000000243 00000 n
-0000001809 00000 n
-0000001883 00000 n
-0000001962 00000 n
-0000002044 00000 n
+0000000245 00000 n
+0000001811 00000 n
+0000001885 00000 n
+0000001967 00000 n
+0000002045 00000 n
0000002122 00000 n
-0000002199 00000 n
-0000002278 00000 n
-0000002361 00000 n
-0000002438 00000 n
-0000002520 00000 n
-0000002579 00000 n
-0000002680 00000 n
-0000002782 00000 n
-0000002883 00000 n
-0000002984 00000 n
-0000003086 00000 n
-0000003188 00000 n
-0000003290 00000 n
-0000003391 00000 n
-0000003493 00000 n
-0000003595 00000 n
-0000003697 00000 n
-0000003799 00000 n
-0000003901 00000 n
-0000004002 00000 n
-0000004104 00000 n
-0000004206 00000 n
-0000004308 00000 n
-0000004410 00000 n
-0000004512 00000 n
-0000004614 00000 n
-0000004716 00000 n
-0000004818 00000 n
-0000004919 00000 n
-0000005020 00000 n
-0000005122 00000 n
-0000005224 00000 n
-0000005326 00000 n
-0000005428 00000 n
-0000005530 00000 n
-0000005632 00000 n
-0000005734 00000 n
-0000005836 00000 n
-0000005938 00000 n
-0000006040 00000 n
-0000006142 00000 n
-0000006244 00000 n
-0000006346 00000 n
-0000006448 00000 n
-0000006550 00000 n
-0000006651 00000 n
-0000006751 00000 n
-0000006851 00000 n
-0000007161 00000 n
-0000007262 00000 n
-0000007364 00000 n
-0000007466 00000 n
-0000007568 00000 n
-0000007670 00000 n
-0000007771 00000 n
-0000007873 00000 n
-0000007975 00000 n
-0000008077 00000 n
-0000008179 00000 n
-0000008281 00000 n
-0000008383 00000 n
-0000008484 00000 n
-0000008586 00000 n
-0000008688 00000 n
-0000008790 00000 n
-0000008892 00000 n
-0000008994 00000 n
-0000009096 00000 n
-0000009198 00000 n
-0000009300 00000 n
-0000009402 00000 n
-0000009503 00000 n
-0000009604 00000 n
-0000009706 00000 n
-0000009808 00000 n
-0000009910 00000 n
-0000010012 00000 n
-0000010114 00000 n
-0000010216 00000 n
-0000010318 00000 n
-0000010420 00000 n
-0000010522 00000 n
-0000010624 00000 n
-0000010726 00000 n
-0000010828 00000 n
-0000010930 00000 n
-0000011032 00000 n
-0000011134 00000 n
-0000011236 00000 n
-0000011338 00000 n
-0000011439 00000 n
-0000011539 00000 n
-0000011639 00000 n
-0000011964 00000 n
-0000012066 00000 n
-0000012169 00000 n
-0000012272 00000 n
-0000012375 00000 n
-0000012478 00000 n
-0000012581 00000 n
-0000012684 00000 n
-0000012787 00000 n
-0000012890 00000 n
-0000012993 00000 n
-0000013096 00000 n
-0000013199 00000 n
-0000013302 00000 n
-0000013405 00000 n
-0000013508 00000 n
-0000013611 00000 n
-0000013714 00000 n
-0000013817 00000 n
-0000013920 00000 n
-0000014023 00000 n
-0000014125 00000 n
-0000014228 00000 n
-0000014331 00000 n
-0000014434 00000 n
-0000014537 00000 n
-0000014640 00000 n
-0000014742 00000 n
-0000014845 00000 n
-0000014947 00000 n
-0000015050 00000 n
-0000015153 00000 n
-0000015256 00000 n
-0000015359 00000 n
-0000015462 00000 n
-0000015565 00000 n
-0000015668 00000 n
-0000015771 00000 n
-0000015874 00000 n
-0000015977 00000 n
-0000016080 00000 n
-0000016183 00000 n
-0000016284 00000 n
-0000016385 00000 n
-0000016486 00000 n
-0000016855 00000 n
-0000016957 00000 n
-0000017060 00000 n
-0000017093 00000 n
-0000017148 00000 n
-0000017235 00000 n
-0000017290 00000 n
-0000017377 00000 n
-0000017444 00000 n
-0000017530 00000 n
-0000017632 00000 n
-0000017735 00000 n
-0000017838 00000 n
-0000017941 00000 n
-0000018043 00000 n
-0000018146 00000 n
-0000018249 00000 n
-0000018352 00000 n
-0000018455 00000 n
-0000018558 00000 n
-0000018660 00000 n
-0000018763 00000 n
-0000018866 00000 n
-0000018969 00000 n
-0000019072 00000 n
-0000019175 00000 n
-0000019278 00000 n
-0000019381 00000 n
-0000019484 00000 n
-0000019586 00000 n
-0000019688 00000 n
-0000019791 00000 n
-0000019894 00000 n
-0000019997 00000 n
-0000020100 00000 n
-0000020203 00000 n
-0000020306 00000 n
-0000020409 00000 n
-0000020512 00000 n
-0000020615 00000 n
-0000020718 00000 n
-0000020821 00000 n
-0000020924 00000 n
-0000021026 00000 n
-0000021127 00000 n
-0000021228 00000 n
-0000021557 00000 n
-0000021660 00000 n
-0000021763 00000 n
-0000021866 00000 n
-0000021969 00000 n
-0000022072 00000 n
-0000022175 00000 n
-0000022278 00000 n
-0000022380 00000 n
-0000022483 00000 n
-0000022586 00000 n
-0000022689 00000 n
-0000022792 00000 n
-0000022895 00000 n
-0000022998 00000 n
-0000023100 00000 n
-0000023203 00000 n
-0000023306 00000 n
-0000023409 00000 n
-0000023512 00000 n
-0000023615 00000 n
-0000023718 00000 n
-0000023821 00000 n
-0000023924 00000 n
-0000024027 00000 n
-0000024129 00000 n
-0000024231 00000 n
-0000024334 00000 n
-0000024437 00000 n
-0000024540 00000 n
-0000024643 00000 n
-0000024746 00000 n
-0000024849 00000 n
-0000024952 00000 n
-0000025055 00000 n
-0000025158 00000 n
-0000025261 00000 n
-0000025364 00000 n
-0000025467 00000 n
-0000025570 00000 n
-0000025673 00000 n
-0000025776 00000 n
-0000025879 00000 n
-0000025982 00000 n
-0000026085 00000 n
-0000026188 00000 n
-0000026291 00000 n
-0000026394 00000 n
-0000026497 00000 n
-0000026599 00000 n
-0000026700 00000 n
-0000026801 00000 n
-0000027226 00000 n
-0000027329 00000 n
-0000027432 00000 n
-0000027535 00000 n
-0000027638 00000 n
-0000027741 00000 n
-0000027844 00000 n
-0000027947 00000 n
-0000028050 00000 n
-0000028153 00000 n
-0000028256 00000 n
-0000028359 00000 n
-0000028462 00000 n
-0000028565 00000 n
-0000028668 00000 n
-0000028770 00000 n
-0000028873 00000 n
-0000028976 00000 n
-0000029079 00000 n
-0000029182 00000 n
-0000029285 00000 n
-0000029387 00000 n
-0000029490 00000 n
-0000029592 00000 n
-0000029695 00000 n
-0000029798 00000 n
-0000029901 00000 n
-0000030004 00000 n
-0000030107 00000 n
-0000030210 00000 n
-0000030313 00000 n
-0000030416 00000 n
-0000030519 00000 n
-0000030622 00000 n
-0000030725 00000 n
-0000030828 00000 n
-0000030930 00000 n
-0000031033 00000 n
-0000031136 00000 n
-0000031239 00000 n
-0000031568 00000 n
-0000031652 00000 n
-0000031738 00000 n
-0000031812 00000 n
-0000031898 00000 n
-0000031931 00000 n
-0000032009 00000 n
-0000032096 00000 n
-0000032202 00000 n
-0000032288 00000 n
-0000032360 00000 n
-0000032446 00000 n
-0000032505 00000 n
-0000032592 00000 n
-0000032683 00000 n
-0000032769 00000 n
-0000032840 00000 n
-0000032926 00000 n
-0000032991 00000 n
-0000033025 00000 n
-0000033059 00000 n
-0000036406 00000 n
-0000036449 00000 n
-0000036492 00000 n
-0000036535 00000 n
-0000036578 00000 n
-0000036621 00000 n
-0000036664 00000 n
-0000036707 00000 n
-0000036750 00000 n
-0000036793 00000 n
-0000036836 00000 n
-0000036879 00000 n
-0000036922 00000 n
-0000036965 00000 n
-0000037008 00000 n
-0000037051 00000 n
-0000037094 00000 n
-0000037137 00000 n
-0000037180 00000 n
-0000037223 00000 n
-0000037266 00000 n
-0000037309 00000 n
-0000037352 00000 n
-0000037395 00000 n
-0000037438 00000 n
-0000037481 00000 n
-0000037524 00000 n
-0000037567 00000 n
-0000037610 00000 n
-0000037653 00000 n
-0000037696 00000 n
-0000037739 00000 n
-0000037782 00000 n
-0000037825 00000 n
-0000037868 00000 n
-0000037911 00000 n
-0000037954 00000 n
-0000037997 00000 n
-0000038040 00000 n
-0000038083 00000 n
-0000038126 00000 n
-0000038169 00000 n
-0000038212 00000 n
-0000038255 00000 n
-0000038298 00000 n
-0000038341 00000 n
-0000038384 00000 n
-0000038427 00000 n
-0000038470 00000 n
-0000038513 00000 n
-0000038556 00000 n
-0000038599 00000 n
-0000038642 00000 n
-0000038685 00000 n
-0000038728 00000 n
-0000038771 00000 n
-0000038814 00000 n
-0000038857 00000 n
-0000038900 00000 n
-0000038943 00000 n
-0000038986 00000 n
-0000039029 00000 n
-0000039072 00000 n
-0000039115 00000 n
-0000039158 00000 n
-0000039201 00000 n
-0000039244 00000 n
-0000039287 00000 n
-0000039330 00000 n
-0000039373 00000 n
-0000039416 00000 n
-0000039459 00000 n
-0000039502 00000 n
-0000039545 00000 n
-0000039588 00000 n
-0000039631 00000 n
-0000039674 00000 n
-0000039717 00000 n
-0000039760 00000 n
-0000039803 00000 n
-0000039846 00000 n
-0000039889 00000 n
-0000039932 00000 n
-0000039975 00000 n
-0000040018 00000 n
-0000040061 00000 n
-0000040104 00000 n
-0000040147 00000 n
-0000040190 00000 n
-0000040233 00000 n
-0000040276 00000 n
-0000040319 00000 n
-0000040362 00000 n
-0000040405 00000 n
-0000040448 00000 n
-0000040491 00000 n
-0000040534 00000 n
-0000040577 00000 n
-0000040620 00000 n
-0000040663 00000 n
-0000040706 00000 n
-0000040749 00000 n
-0000040792 00000 n
-0000040835 00000 n
-0000040878 00000 n
-0000040921 00000 n
-0000040964 00000 n
-0000041007 00000 n
-0000041050 00000 n
-0000041093 00000 n
-0000041136 00000 n
-0000041179 00000 n
-0000041222 00000 n
-0000041265 00000 n
-0000041308 00000 n
-0000041351 00000 n
-0000041394 00000 n
-0000041437 00000 n
-0000041480 00000 n
-0000041523 00000 n
-0000041566 00000 n
-0000041609 00000 n
-0000041652 00000 n
-0000041695 00000 n
-0000041738 00000 n
-0000041781 00000 n
-0000041824 00000 n
-0000041867 00000 n
-0000041910 00000 n
-0000041953 00000 n
-0000041996 00000 n
-0000042039 00000 n
-0000042082 00000 n
-0000042125 00000 n
-0000042168 00000 n
-0000042211 00000 n
-0000042254 00000 n
-0000042297 00000 n
-0000042340 00000 n
-0000042383 00000 n
-0000042426 00000 n
-0000042469 00000 n
-0000042512 00000 n
-0000042555 00000 n
-0000042598 00000 n
-0000042641 00000 n
-0000042684 00000 n
-0000042727 00000 n
-0000042770 00000 n
-0000042813 00000 n
-0000042856 00000 n
-0000042899 00000 n
-0000042942 00000 n
-0000042985 00000 n
-0000043028 00000 n
-0000043071 00000 n
-0000043114 00000 n
-0000043157 00000 n
-0000043200 00000 n
-0000043243 00000 n
-0000043286 00000 n
-0000043329 00000 n
-0000043372 00000 n
-0000043415 00000 n
-0000043458 00000 n
-0000043501 00000 n
-0000043544 00000 n
-0000043587 00000 n
-0000043630 00000 n
-0000043673 00000 n
-0000043716 00000 n
-0000043759 00000 n
-0000043802 00000 n
-0000043845 00000 n
-0000043888 00000 n
-0000043931 00000 n
-0000043974 00000 n
-0000044017 00000 n
-0000044060 00000 n
-0000044103 00000 n
-0000044146 00000 n
-0000044189 00000 n
-0000044232 00000 n
-0000044275 00000 n
-0000044318 00000 n
-0000044361 00000 n
-0000044404 00000 n
-0000044447 00000 n
-0000044490 00000 n
-0000044533 00000 n
-0000044576 00000 n
-0000044619 00000 n
-0000044662 00000 n
-0000044705 00000 n
-0000044748 00000 n
-0000044791 00000 n
-0000044834 00000 n
-0000044877 00000 n
-0000044920 00000 n
-0000044963 00000 n
-0000045006 00000 n
-0000045049 00000 n
-0000045092 00000 n
-0000045135 00000 n
-0000045178 00000 n
-0000045221 00000 n
-0000045264 00000 n
-0000045307 00000 n
-0000045350 00000 n
-0000046037 00000 n
-0000046195 00000 n
-0000046362 00000 n
-0000046552 00000 n
-0000049154 00000 n
-0000049345 00000 n
-0000052450 00000 n
-0000052641 00000 n
-0000056177 00000 n
-0000056368 00000 n
-0000056827 00000 n
-0000056985 00000 n
-0000057214 00000 n
-0000057414 00000 n
-0000059223 00000 n
-0000059395 00000 n
-0000061478 00000 n
-0000061650 00000 n
-0000063568 00000 n
-0000063735 00000 n
-0000065380 00000 n
-0000065547 00000 n
-0000067089 00000 n
-0000067256 00000 n
-0000068990 00000 n
-0000069157 00000 n
-0000070893 00000 n
-0000071069 00000 n
-0000072334 00000 n
-0000072510 00000 n
-0000073721 00000 n
-0000073897 00000 n
-0000075145 00000 n
-0000075312 00000 n
-0000076222 00000 n
-0000076413 00000 n
-0000078374 00000 n
-0000078531 00000 n
-0000080308 00000 n
-0000080475 00000 n
-0000082457 00000 n
-0000082624 00000 n
-0000083360 00000 n
-0000083536 00000 n
-0000084578 00000 n
-0000084745 00000 n
-0000086380 00000 n
-0000086547 00000 n
-0000087171 00000 n
-0000087347 00000 n
-0000088677 00000 n
-0000088853 00000 n
-0000089927 00000 n
-0000090094 00000 n
-0000090695 00000 n
-0000090862 00000 n
-0000092648 00000 n
-0000092815 00000 n
-0000094532 00000 n
-0000094699 00000 n
-0000096548 00000 n
-0000096705 00000 n
-0000097820 00000 n
-0000098005 00000 n
-0000099612 00000 n
-0000099778 00000 n
-0000100667 00000 n
-0000100867 00000 n
-0000102592 00000 n
-0000102768 00000 n
-0000104593 00000 n
-0000104769 00000 n
-0000105380 00000 n
-0000105556 00000 n
-0000106331 00000 n
-0000106507 00000 n
-0000107264 00000 n
-0000107440 00000 n
-0000108279 00000 n
-0000108455 00000 n
-0000109291 00000 n
-0000109476 00000 n
-0000110316 00000 n
-0000110492 00000 n
-0000111252 00000 n
-0000111418 00000 n
-0000112043 00000 n
-0000112228 00000 n
-0000112996 00000 n
-0000113172 00000 n
-0000114134 00000 n
-0000114319 00000 n
-0000115654 00000 n
-0000115839 00000 n
-0000116857 00000 n
-0000117023 00000 n
-0000117603 00000 n
-0000117788 00000 n
-0000118847 00000 n
-0000119023 00000 n
-0000119901 00000 n
-0000120077 00000 n
-0000121171 00000 n
-0000121356 00000 n
-0000122242 00000 n
-0000122427 00000 n
-0000123204 00000 n
-0000123380 00000 n
-0000123981 00000 n
-0000124157 00000 n
-0000124819 00000 n
-0000125004 00000 n
-0000125981 00000 n
-0000126157 00000 n
-0000127164 00000 n
-0000127340 00000 n
-0000128334 00000 n
-0000128519 00000 n
-0000129351 00000 n
-0000129527 00000 n
-0000130260 00000 n
-0000130436 00000 n
-0000131118 00000 n
-0000131294 00000 n
-0000132123 00000 n
-0000132299 00000 n
-0000133287 00000 n
-0000133454 00000 n
-0000134890 00000 n
-0000135075 00000 n
-0000135808 00000 n
-0000135993 00000 n
-0000136620 00000 n
-0000136786 00000 n
-0000137184 00000 n
-0000137370 00000 n
-0000138898 00000 n
-0000139073 00000 n
-0000140787 00000 n
-0000140973 00000 n
-0000142555 00000 n
-0000142731 00000 n
-0000144498 00000 n
-0000144665 00000 n
-0000145043 00000 n
-0000145219 00000 n
-0000146516 00000 n
-0000146692 00000 n
-0000148399 00000 n
-0000148576 00000 n
-0000150328 00000 n
-0000150495 00000 n
-0000152389 00000 n
-0000152574 00000 n
-0000153844 00000 n
-0000154020 00000 n
-0000155748 00000 n
-0000155960 00000 n
-0000157583 00000 n
-0000157767 00000 n
-0000158657 00000 n
-0000158713 00000 n
-0000158812 00000 n
-0000158965 00000 n
-0000159044 00000 n
-0000159147 00000 n
-0000159345 00000 n
-0000159439 00000 n
-0000159556 00000 n
-0000159655 00000 n
-0000159815 00000 n
-0000159914 00000 n
-0000160038 00000 n
-0000160152 00000 n
-0000160266 00000 n
-0000160364 00000 n
-0000160528 00000 n
-0000160632 00000 n
-0000160751 00000 n
-0000160873 00000 n
-0000160995 00000 n
-0000161131 00000 n
-0000161231 00000 n
-0000161343 00000 n
-0000161453 00000 n
-0000161577 00000 n
-0000161734 00000 n
-0000161839 00000 n
-0000161956 00000 n
-0000162114 00000 n
-0000162218 00000 n
-0000162335 00000 n
-0000162457 00000 n
-0000162574 00000 n
-0000162691 00000 n
-0000162809 00000 n
-0000162927 00000 n
-0000163049 00000 n
-0000163171 00000 n
-0000163295 00000 n
-0000163419 00000 n
-0000163538 00000 n
-0000163657 00000 n
-0000163781 00000 n
-0000163892 00000 n
-0000164049 00000 n
-0000164148 00000 n
-0000164249 00000 n
-0000164356 00000 n
-0000164515 00000 n
-0000164654 00000 n
-0000164765 00000 n
-0000164896 00000 n
-0000165009 00000 n
-0000165138 00000 n
-0000165228 00000 n
-0000165393 00000 n
-0000165492 00000 n
-0000165601 00000 n
-0000165715 00000 n
-0000165824 00000 n
-0000165931 00000 n
-0000166041 00000 n
-0000166154 00000 n
-0000166266 00000 n
-0000166372 00000 n
-0000166504 00000 n
-0000166661 00000 n
-0000166796 00000 n
-0000166892 00000 n
-0000166988 00000 n
-0000167144 00000 n
-0000167238 00000 n
-0000167352 00000 n
-0000167451 00000 n
-0000167618 00000 n
-0000167718 00000 n
-0000167826 00000 n
-0000167932 00000 n
-0000168053 00000 n
-0000168180 00000 n
-0000168297 00000 n
-0000168420 00000 n
-0000168551 00000 n
-0000168668 00000 n
-0000168780 00000 n
-0000168898 00000 n
-0000169004 00000 n
-0000169172 00000 n
-0000169282 00000 n
-0000169402 00000 n
-0000169527 00000 n
-0000169642 00000 n
-0000169745 00000 n
-0000169907 00000 n
-0000170009 00000 n
-0000170107 00000 n
-0000170269 00000 n
-0000170372 00000 n
-0000170480 00000 n
-0000170662 00000 n
-0000170762 00000 n
-0000170872 00000 n
-0000170969 00000 n
-0000171105 00000 n
-0000171209 00000 n
-0000171313 00000 n
-0000171480 00000 n
-0000171576 00000 n
-0000171716 00000 n
-0000171834 00000 n
-0000171983 00000 n
-0000172106 00000 n
-0000172269 00000 n
-0000172357 00000 n
-0000172523 00000 n
-0000172636 00000 n
-0000172757 00000 n
-0000172890 00000 n
-0000173033 00000 n
-0000173134 00000 n
-0000173250 00000 n
-0000173351 00000 n
-0000173499 00000 n
-0000173615 00000 n
-0000173712 00000 n
-0000173830 00000 n
-0000173925 00000 n
-0000174088 00000 n
-0000174188 00000 n
-0000174306 00000 n
-0000174412 00000 n
+0000002201 00000 n
+0000002284 00000 n
+0000002360 00000 n
+0000002442 00000 n
+0000002501 00000 n
+0000002602 00000 n
+0000002704 00000 n
+0000002805 00000 n
+0000002906 00000 n
+0000003008 00000 n
+0000003110 00000 n
+0000003212 00000 n
+0000003313 00000 n
+0000003415 00000 n
+0000003517 00000 n
+0000003619 00000 n
+0000003721 00000 n
+0000003823 00000 n
+0000003924 00000 n
+0000004026 00000 n
+0000004128 00000 n
+0000004230 00000 n
+0000004332 00000 n
+0000004434 00000 n
+0000004536 00000 n
+0000004638 00000 n
+0000004740 00000 n
+0000004841 00000 n
+0000004942 00000 n
+0000005044 00000 n
+0000005146 00000 n
+0000005248 00000 n
+0000005350 00000 n
+0000005452 00000 n
+0000005554 00000 n
+0000005656 00000 n
+0000005758 00000 n
+0000005860 00000 n
+0000005962 00000 n
+0000006064 00000 n
+0000006166 00000 n
+0000006268 00000 n
+0000006370 00000 n
+0000006472 00000 n
+0000006573 00000 n
+0000006673 00000 n
+0000006773 00000 n
+0000007083 00000 n
+0000007184 00000 n
+0000007286 00000 n
+0000007388 00000 n
+0000007490 00000 n
+0000007592 00000 n
+0000007693 00000 n
+0000007795 00000 n
+0000007897 00000 n
+0000007999 00000 n
+0000008101 00000 n
+0000008203 00000 n
+0000008305 00000 n
+0000008406 00000 n
+0000008508 00000 n
+0000008610 00000 n
+0000008712 00000 n
+0000008814 00000 n
+0000008916 00000 n
+0000009018 00000 n
+0000009120 00000 n
+0000009222 00000 n
+0000009324 00000 n
+0000009425 00000 n
+0000009526 00000 n
+0000009628 00000 n
+0000009730 00000 n
+0000009832 00000 n
+0000009934 00000 n
+0000010036 00000 n
+0000010138 00000 n
+0000010240 00000 n
+0000010342 00000 n
+0000010444 00000 n
+0000010546 00000 n
+0000010648 00000 n
+0000010750 00000 n
+0000010852 00000 n
+0000010954 00000 n
+0000011056 00000 n
+0000011158 00000 n
+0000011260 00000 n
+0000011361 00000 n
+0000011461 00000 n
+0000011561 00000 n
+0000011885 00000 n
+0000011987 00000 n
+0000012090 00000 n
+0000012193 00000 n
+0000012296 00000 n
+0000012399 00000 n
+0000012502 00000 n
+0000012605 00000 n
+0000012708 00000 n
+0000012811 00000 n
+0000012914 00000 n
+0000013017 00000 n
+0000013120 00000 n
+0000013223 00000 n
+0000013326 00000 n
+0000013429 00000 n
+0000013532 00000 n
+0000013635 00000 n
+0000013738 00000 n
+0000013841 00000 n
+0000013944 00000 n
+0000014046 00000 n
+0000014149 00000 n
+0000014252 00000 n
+0000014355 00000 n
+0000014458 00000 n
+0000014561 00000 n
+0000014663 00000 n
+0000014766 00000 n
+0000015007 00000 n
+0000015062 00000 n
+0000015149 00000 n
+0000015204 00000 n
+0000015291 00000 n
+0000015358 00000 n
+0000015444 00000 n
+0000015546 00000 n
+0000015649 00000 n
+0000015752 00000 n
+0000015855 00000 n
+0000015957 00000 n
+0000016060 00000 n
+0000016163 00000 n
+0000016266 00000 n
+0000016369 00000 n
+0000016472 00000 n
+0000016574 00000 n
+0000016677 00000 n
+0000016780 00000 n
+0000016883 00000 n
+0000016986 00000 n
+0000017089 00000 n
+0000017192 00000 n
+0000017295 00000 n
+0000017398 00000 n
+0000017500 00000 n
+0000017602 00000 n
+0000017705 00000 n
+0000017808 00000 n
+0000017911 00000 n
+0000018014 00000 n
+0000018117 00000 n
+0000018220 00000 n
+0000018323 00000 n
+0000018426 00000 n
+0000018529 00000 n
+0000018632 00000 n
+0000018735 00000 n
+0000018838 00000 n
+0000018940 00000 n
+0000019041 00000 n
+0000019142 00000 n
+0000019471 00000 n
+0000019574 00000 n
+0000019677 00000 n
+0000019780 00000 n
+0000019883 00000 n
+0000019986 00000 n
+0000020089 00000 n
+0000020192 00000 n
+0000020294 00000 n
+0000020397 00000 n
+0000020500 00000 n
+0000020603 00000 n
+0000020706 00000 n
+0000020809 00000 n
+0000020912 00000 n
+0000021014 00000 n
+0000021117 00000 n
+0000021220 00000 n
+0000021323 00000 n
+0000021426 00000 n
+0000021529 00000 n
+0000021632 00000 n
+0000021735 00000 n
+0000021838 00000 n
+0000021941 00000 n
+0000022043 00000 n
+0000022145 00000 n
+0000022248 00000 n
+0000022351 00000 n
+0000022454 00000 n
+0000022557 00000 n
+0000022660 00000 n
+0000022763 00000 n
+0000022866 00000 n
+0000022969 00000 n
+0000023072 00000 n
+0000023175 00000 n
+0000023278 00000 n
+0000023381 00000 n
+0000023484 00000 n
+0000023587 00000 n
+0000023690 00000 n
+0000023793 00000 n
+0000023896 00000 n
+0000023999 00000 n
+0000024102 00000 n
+0000024205 00000 n
+0000024308 00000 n
+0000024411 00000 n
+0000024513 00000 n
+0000024614 00000 n
+0000024715 00000 n
+0000025140 00000 n
+0000025243 00000 n
+0000025346 00000 n
+0000025449 00000 n
+0000025552 00000 n
+0000025655 00000 n
+0000025758 00000 n
+0000025861 00000 n
+0000025964 00000 n
+0000026067 00000 n
+0000026170 00000 n
+0000026273 00000 n
+0000026376 00000 n
+0000026479 00000 n
+0000026582 00000 n
+0000026684 00000 n
+0000026787 00000 n
+0000026890 00000 n
+0000026993 00000 n
+0000027096 00000 n
+0000027199 00000 n
+0000027301 00000 n
+0000027404 00000 n
+0000027597 00000 n
+0000027681 00000 n
+0000027767 00000 n
+0000027841 00000 n
+0000027927 00000 n
+0000027960 00000 n
+0000028038 00000 n
+0000028125 00000 n
+0000028231 00000 n
+0000028317 00000 n
+0000028389 00000 n
+0000028475 00000 n
+0000028534 00000 n
+0000028621 00000 n
+0000028712 00000 n
+0000028798 00000 n
+0000028869 00000 n
+0000028955 00000 n
+0000029020 00000 n
+0000029054 00000 n
+0000029088 00000 n
+0000032144 00000 n
+0000032187 00000 n
+0000032230 00000 n
+0000032273 00000 n
+0000032316 00000 n
+0000032359 00000 n
+0000032402 00000 n
+0000032445 00000 n
+0000032488 00000 n
+0000032531 00000 n
+0000032574 00000 n
+0000032617 00000 n
+0000032660 00000 n
+0000032703 00000 n
+0000032746 00000 n
+0000032789 00000 n
+0000032832 00000 n
+0000032875 00000 n
+0000032918 00000 n
+0000032961 00000 n
+0000033004 00000 n
+0000033047 00000 n
+0000033090 00000 n
+0000033133 00000 n
+0000033176 00000 n
+0000033219 00000 n
+0000033262 00000 n
+0000033305 00000 n
+0000033348 00000 n
+0000033391 00000 n
+0000033434 00000 n
+0000033477 00000 n
+0000033520 00000 n
+0000033563 00000 n
+0000033606 00000 n
+0000033649 00000 n
+0000033692 00000 n
+0000033735 00000 n
+0000033778 00000 n
+0000033821 00000 n
+0000033864 00000 n
+0000033907 00000 n
+0000033950 00000 n
+0000033993 00000 n
+0000034036 00000 n
+0000034079 00000 n
+0000034122 00000 n
+0000034165 00000 n
+0000034208 00000 n
+0000034251 00000 n
+0000034294 00000 n
+0000034337 00000 n
+0000034380 00000 n
+0000034423 00000 n
+0000034466 00000 n
+0000034509 00000 n
+0000034552 00000 n
+0000034595 00000 n
+0000034638 00000 n
+0000034681 00000 n
+0000034724 00000 n
+0000034767 00000 n
+0000034810 00000 n
+0000034853 00000 n
+0000034896 00000 n
+0000034939 00000 n
+0000034982 00000 n
+0000035025 00000 n
+0000035068 00000 n
+0000035111 00000 n
+0000035154 00000 n
+0000035197 00000 n
+0000035240 00000 n
+0000035283 00000 n
+0000035326 00000 n
+0000035369 00000 n
+0000035412 00000 n
+0000035455 00000 n
+0000035498 00000 n
+0000035541 00000 n
+0000035584 00000 n
+0000035627 00000 n
+0000035670 00000 n
+0000035713 00000 n
+0000035756 00000 n
+0000035799 00000 n
+0000035842 00000 n
+0000035885 00000 n
+0000035928 00000 n
+0000035971 00000 n
+0000036014 00000 n
+0000036057 00000 n
+0000036100 00000 n
+0000036143 00000 n
+0000036186 00000 n
+0000036229 00000 n
+0000036272 00000 n
+0000036315 00000 n
+0000036358 00000 n
+0000036401 00000 n
+0000036444 00000 n
+0000036487 00000 n
+0000036530 00000 n
+0000036573 00000 n
+0000036616 00000 n
+0000036659 00000 n
+0000036702 00000 n
+0000036745 00000 n
+0000036788 00000 n
+0000036831 00000 n
+0000036874 00000 n
+0000036917 00000 n
+0000036960 00000 n
+0000037003 00000 n
+0000037046 00000 n
+0000037089 00000 n
+0000037132 00000 n
+0000037175 00000 n
+0000037218 00000 n
+0000037261 00000 n
+0000037304 00000 n
+0000037347 00000 n
+0000037390 00000 n
+0000037433 00000 n
+0000037476 00000 n
+0000037519 00000 n
+0000037562 00000 n
+0000037605 00000 n
+0000037648 00000 n
+0000037691 00000 n
+0000037734 00000 n
+0000037777 00000 n
+0000037820 00000 n
+0000037863 00000 n
+0000037906 00000 n
+0000037949 00000 n
+0000037992 00000 n
+0000038035 00000 n
+0000038078 00000 n
+0000038121 00000 n
+0000038164 00000 n
+0000038207 00000 n
+0000038250 00000 n
+0000038293 00000 n
+0000038336 00000 n
+0000038379 00000 n
+0000038422 00000 n
+0000038465 00000 n
+0000038508 00000 n
+0000038551 00000 n
+0000038594 00000 n
+0000038637 00000 n
+0000038680 00000 n
+0000038723 00000 n
+0000038766 00000 n
+0000038809 00000 n
+0000038852 00000 n
+0000038895 00000 n
+0000038938 00000 n
+0000038981 00000 n
+0000039024 00000 n
+0000039067 00000 n
+0000039110 00000 n
+0000039153 00000 n
+0000039196 00000 n
+0000039239 00000 n
+0000039282 00000 n
+0000039325 00000 n
+0000039368 00000 n
+0000039411 00000 n
+0000039454 00000 n
+0000039497 00000 n
+0000039540 00000 n
+0000039583 00000 n
+0000039626 00000 n
+0000039669 00000 n
+0000039712 00000 n
+0000039755 00000 n
+0000039798 00000 n
+0000039841 00000 n
+0000039884 00000 n
+0000039927 00000 n
+0000039970 00000 n
+0000040013 00000 n
+0000040056 00000 n
+0000040099 00000 n
+0000040142 00000 n
+0000040185 00000 n
+0000040228 00000 n
+0000040271 00000 n
+0000040314 00000 n
+0000040937 00000 n
+0000041094 00000 n
+0000041261 00000 n
+0000041450 00000 n
+0000043586 00000 n
+0000043775 00000 n
+0000046396 00000 n
+0000046586 00000 n
+0000048680 00000 n
+0000048837 00000 n
+0000049066 00000 n
+0000049265 00000 n
+0000050972 00000 n
+0000051143 00000 n
+0000053074 00000 n
+0000053245 00000 n
+0000054413 00000 n
+0000054579 00000 n
+0000056209 00000 n
+0000056375 00000 n
+0000057912 00000 n
+0000058078 00000 n
+0000059795 00000 n
+0000059961 00000 n
+0000061691 00000 n
+0000061866 00000 n
+0000063161 00000 n
+0000063336 00000 n
+0000064628 00000 n
+0000064803 00000 n
+0000066141 00000 n
+0000066307 00000 n
+0000067204 00000 n
+0000067394 00000 n
+0000069350 00000 n
+0000069506 00000 n
+0000071282 00000 n
+0000071448 00000 n
+0000073411 00000 n
+0000073577 00000 n
+0000074290 00000 n
+0000074465 00000 n
+0000075494 00000 n
+0000075660 00000 n
+0000077302 00000 n
+0000077468 00000 n
+0000078088 00000 n
+0000078263 00000 n
+0000079623 00000 n
+0000079798 00000 n
+0000080946 00000 n
+0000081112 00000 n
+0000081748 00000 n
+0000081914 00000 n
+0000083679 00000 n
+0000083845 00000 n
+0000085713 00000 n
+0000085879 00000 n
+0000087838 00000 n
+0000087994 00000 n
+0000088775 00000 n
+0000088959 00000 n
+0000090608 00000 n
+0000090773 00000 n
+0000091688 00000 n
+0000091887 00000 n
+0000093603 00000 n
+0000093778 00000 n
+0000095587 00000 n
+0000095762 00000 n
+0000096351 00000 n
+0000096526 00000 n
+0000097276 00000 n
+0000097451 00000 n
+0000098185 00000 n
+0000098360 00000 n
+0000099182 00000 n
+0000099357 00000 n
+0000100172 00000 n
+0000100356 00000 n
+0000101216 00000 n
+0000101391 00000 n
+0000102139 00000 n
+0000102304 00000 n
+0000102924 00000 n
+0000103108 00000 n
+0000103861 00000 n
+0000104036 00000 n
+0000104989 00000 n
+0000105173 00000 n
+0000106503 00000 n
+0000106687 00000 n
+0000107731 00000 n
+0000107896 00000 n
+0000108471 00000 n
+0000108655 00000 n
+0000109706 00000 n
+0000109881 00000 n
+0000110759 00000 n
+0000110934 00000 n
+0000112013 00000 n
+0000112197 00000 n
+0000113038 00000 n
+0000113222 00000 n
+0000113987 00000 n
+0000114162 00000 n
+0000114693 00000 n
+0000114868 00000 n
+0000115544 00000 n
+0000115728 00000 n
+0000116644 00000 n
+0000116819 00000 n
+0000117769 00000 n
+0000117944 00000 n
+0000118871 00000 n
+0000119055 00000 n
+0000119941 00000 n
+0000120116 00000 n
+0000120879 00000 n
+0000121054 00000 n
+0000121721 00000 n
+0000121896 00000 n
+0000122712 00000 n
+0000122887 00000 n
+0000123856 00000 n
+0000124022 00000 n
+0000125444 00000 n
+0000125628 00000 n
+0000126348 00000 n
+0000126532 00000 n
+0000127144 00000 n
+0000127309 00000 n
+0000127703 00000 n
+0000127888 00000 n
+0000129435 00000 n
+0000129609 00000 n
+0000131387 00000 n
+0000131572 00000 n
+0000133191 00000 n
+0000133366 00000 n
+0000135179 00000 n
+0000135345 00000 n
+0000135720 00000 n
+0000135895 00000 n
+0000137234 00000 n
+0000137290 00000 n
+0000137389 00000 n
+0000137542 00000 n
+0000137621 00000 n
+0000137724 00000 n
+0000137911 00000 n
+0000138000 00000 n
+0000138112 00000 n
+0000138206 00000 n
+0000138355 00000 n
+0000138449 00000 n
+0000138568 00000 n
+0000138677 00000 n
+0000138786 00000 n
+0000138879 00000 n
+0000139032 00000 n
+0000139131 00000 n
+0000139245 00000 n
+0000139362 00000 n
+0000139479 00000 n
+0000139610 00000 n
+0000139703 00000 n
+0000139808 00000 n
+0000139911 00000 n
+0000140024 00000 n
+0000140170 00000 n
+0000140270 00000 n
+0000140382 00000 n
+0000140535 00000 n
+0000140632 00000 n
+0000140742 00000 n
+0000140857 00000 n
+0000140967 00000 n
+0000141077 00000 n
+0000141188 00000 n
+0000141299 00000 n
+0000141414 00000 n
+0000141529 00000 n
+0000141645 00000 n
+0000141761 00000 n
+0000141872 00000 n
+0000141983 00000 n
+0000142099 00000 n
+0000142202 00000 n
+0000142354 00000 n
+0000142446 00000 n
+0000142540 00000 n
+0000142642 00000 n
+0000142790 00000 n
+0000142924 00000 n
+0000143028 00000 n
+0000143152 00000 n
+0000143258 00000 n
+0000143382 00000 n
+0000143465 00000 n
+0000143619 00000 n
+0000143713 00000 n
+0000143817 00000 n
+0000143926 00000 n
+0000144030 00000 n
+0000144132 00000 n
+0000144237 00000 n
+0000144345 00000 n
+0000144452 00000 n
+0000144553 00000 n
+0000144674 00000 n
+0000144820 00000 n
+0000144950 00000 n
+0000145039 00000 n
+0000145128 00000 n
+0000145279 00000 n
+0000145366 00000 n
+0000145473 00000 n
+0000145565 00000 n
+0000145727 00000 n
+0000145820 00000 n
+0000145921 00000 n
+0000146020 00000 n
+0000146134 00000 n
+0000146254 00000 n
+0000146364 00000 n
+0000146480 00000 n
+0000146604 00000 n
+0000146714 00000 n
+0000146818 00000 n
+0000146928 00000 n
+0000147026 00000 n
+0000147189 00000 n
+0000147292 00000 n
+0000147405 00000 n
+0000147523 00000 n
+0000147631 00000 n
+0000147727 00000 n
+0000147884 00000 n
+0000147979 00000 n
+0000148070 00000 n
+0000148227 00000 n
+0000148323 00000 n
+0000148424 00000 n
+0000148601 00000 n
+0000148694 00000 n
+0000148797 00000 n
+0000148887 00000 n
+0000149018 00000 n
+0000149115 00000 n
+0000149212 00000 n
+0000149367 00000 n
+0000149457 00000 n
+0000149591 00000 n
+0000149703 00000 n
+0000149846 00000 n
+0000149963 00000 n
+0000150101 00000 n
+0000150183 00000 n
trailer
-<</Size 806/Root 805 0 R/Info 1 0 R/ID[<8ded901626010d73542ea94815423a1a><8ded901626010d73542ea94815423a1a>]>>
+<</Size 718/Root 717 0 R/Info 1 0 R/ID[<ee2e3d1648e40c359fbf8e3964570ce3><ee2e3d1648e40c359fbf8e3964570ce3>]>>
startxref
-174892
+150623
%%EOF
%PDF-1.3
%âãÏÓ
-1 0 obj<</Producer(htmldoc 1.8.22 Copyright 1997-2002 Easy Software Products, All Rights Reserved.)/CreationDate(D:20021105230804-0100)/Title(SAMBA Project Documentation)/Creator(Modular DocBook HTML Stylesheet Version 1.77)>>endobj
+1 0 obj<</Producer(htmldoc 1.8.20 Copyright 1997-2002 Easy Software Products, All Rights Reserved.)/CreationDate(D:20021004182614-0200)/Title(SAMBA Project Documentation)/Creator(Modular DocBook HTML Stylesheet Version 1.77)>>endobj
2 0 obj<</Type/Encoding/Differences[ 32/space/exclam/quotedbl/numbersign/dollar/percent/ampersand/quotesingle/parenleft/parenright/asterisk/plus/comma/minus/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/grave/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde 128/Euro 130/quotesinglbase/florin/quotedblbase/ellipsis/dagger/daggerdbl/circumflex/perthousand/Scaron/guilsinglleft/OE 145/quoteleft/quoteright/quotedblleft/quotedblright/bullet/endash/emdash/tilde/trademark/scaron/guilsinglright/oe 159/Ydieresis/space/exclamdown/cent/sterling/currency/yen/brokenbar/section/dieresis/copyright/ordfeminine/guillemotleft/logicalnot/hyphen/registered/macron/degree/plusminus/twosuperior/threesuperior/acute/mu/paragraph/periodcentered/cedilla/onesuperior/ordmasculine/guillemotright/onequarter/onehalf/threequarters/questiondown/Agrave/Aacute/Acircumflex/Atilde/Adieresis/Aring/AE/Ccedilla/Egrave/Eacute/Ecircumflex/Edieresis/Igrave/Iacute/Icircumflex/Idieresis/Eth/Ntilde/Ograve/Oacute/Ocircumflex/Otilde/Odieresis/multiply/Oslash/Ugrave/Uacute/Ucircumflex/Udieresis/Yacute/Thorn/germandbls/agrave/aacute/acircumflex/atilde/adieresis/aring/ae/ccedilla/egrave/eacute/ecircumflex/edieresis/igrave/iacute/icircumflex/idieresis/eth/ntilde/ograve/oacute/ocircumflex/otilde/odieresis/divide/oslash/ugrave/uacute/ucircumflex/udieresis/yacute/thorn/ydieresis]>>endobj
3 0 obj<</Type/Font/Subtype/Type1/BaseFont/Courier/Encoding 2 0 R>>endobj
4 0 obj<</Type/Font/Subtype/Type1/BaseFont/Courier-Bold/Encoding 2 0 R>>endobj
11 0 obj<</Type/Font/Subtype/Type1/BaseFont/Helvetica/Encoding 2 0 R>>endobj
12 0 obj<</Type/Font/Subtype/Type1/BaseFont/Helvetica-Bold/Encoding 2 0 R>>endobj
13 0 obj<</Type/Font/Subtype/Type1/BaseFont/Symbol>>endobj
-14 0 obj<</Subtype/Link/Rect[72.0 684.0 223.5 697.0]/Border[0 0 0]/Dest[1386 0 R/XYZ 0 734 0]>>endobj
-15 0 obj<</Subtype/Link/Rect[108.0 670.8 174.9 683.8]/Border[0 0 0]/Dest[1386 0 R/XYZ 0 696 0]>>endobj
-16 0 obj<</Subtype/Link/Rect[72.0 644.4 112.9 657.4]/Border[0 0 0]/Dest[1388 0 R/XYZ 0 734 0]>>endobj
-17 0 obj<</Subtype/Link/Rect[72.0 618.0 175.0 631.0]/Border[0 0 0]/Dest[1396 0 R/XYZ 0 734 0]>>endobj
-18 0 obj<</Subtype/Link/Rect[72.0 591.6 131.9 604.6]/Border[0 0 0]/Dest[1398 0 R/XYZ 0 734 0]>>endobj
-19 0 obj<</Subtype/Link/Rect[72.0 565.2 277.3 578.2]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 734 0]>>endobj
-20 0 obj<</Subtype/Link/Rect[108.0 552.0 215.5 565.0]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 696 0]>>endobj
-21 0 obj<</Subtype/Link/Rect[108.0 538.8 221.4 551.8]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 568 0]>>endobj
-22 0 obj<</Subtype/Link/Rect[108.0 525.6 224.1 538.6]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 163 0]>>endobj
-23 0 obj<</Subtype/Link/Rect[108.0 512.4 275.4 525.4]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 734 0]>>endobj
-24 0 obj<</Subtype/Link/Rect[108.0 499.2 280.3 512.2]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 385 0]>>endobj
-25 0 obj<</Subtype/Link/Rect[108.0 486.0 251.3 499.0]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 257 0]>>endobj
-26 0 obj<</Subtype/Link/Rect[126.0 472.8 259.5 485.8]/Border[0 0 0]/Dest[1406 0 R/XYZ 0 734 0]>>endobj
-27 0 obj<</Subtype/Link/Rect[126.0 459.6 307.8 472.6]/Border[0 0 0]/Dest[1406 0 R/XYZ 0 247 0]>>endobj
-28 0 obj<</Subtype/Link/Rect[108.0 446.4 328.6 459.4]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 665 0]>>endobj
-29 0 obj<</Subtype/Link/Rect[108.0 433.2 282.2 446.2]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 498 0]>>endobj
-30 0 obj<</Subtype/Link/Rect[108.0 420.0 478.0 433.0]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 330 0]>>endobj
-31 0 obj<</Subtype/Link/Rect[108.0 406.8 259.4 419.8]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 734 0]>>endobj
-32 0 obj<</Subtype/Link/Rect[126.0 393.6 254.0 406.6]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 553 0]>>endobj
-33 0 obj<</Subtype/Link/Rect[126.0 380.4 204.5 393.4]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 494 0]>>endobj
-34 0 obj<</Subtype/Link/Rect[126.0 367.2 285.2 380.2]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 409 0]>>endobj
-35 0 obj<</Subtype/Link/Rect[126.0 354.0 313.6 367.0]/Border[0 0 0]/Dest[1412 0 R/XYZ 0 734 0]>>endobj
-36 0 obj<</Subtype/Link/Rect[126.0 340.8 195.7 353.8]/Border[0 0 0]/Dest[1412 0 R/XYZ 0 583 0]>>endobj
-37 0 obj<</Subtype/Link/Rect[126.0 327.6 250.3 340.6]/Border[0 0 0]/Dest[1412 0 R/XYZ 0 128 0]>>endobj
-38 0 obj<</Subtype/Link/Rect[72.0 301.2 262.7 314.2]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 734 0]>>endobj
-39 0 obj<</Subtype/Link/Rect[108.0 288.0 226.2 301.0]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 696 0]>>endobj
-40 0 obj<</Subtype/Link/Rect[108.0 274.8 247.9 287.8]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 515 0]>>endobj
-41 0 obj<</Subtype/Link/Rect[108.0 261.6 211.3 274.6]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 137 0]>>endobj
-42 0 obj<</Subtype/Link/Rect[108.0 248.4 236.0 261.4]/Border[0 0 0]/Dest[1418 0 R/XYZ 0 533 0]>>endobj
-43 0 obj<</Subtype/Link/Rect[126.0 235.2 331.3 248.2]/Border[0 0 0]/Dest[1418 0 R/XYZ 0 273 0]>>endobj
-44 0 obj<</Subtype/Link/Rect[108.0 222.0 240.3 235.0]/Border[0 0 0]/Dest[1424 0 R/XYZ 0 560 0]>>endobj
-45 0 obj<</Subtype/Link/Rect[108.0 208.8 310.3 221.8]/Border[0 0 0]/Dest[1426 0 R/XYZ 0 613 0]>>endobj
-46 0 obj<</Subtype/Link/Rect[108.0 195.6 284.6 208.6]/Border[0 0 0]/Dest[1428 0 R/XYZ 0 622 0]>>endobj
-47 0 obj<</Subtype/Link/Rect[108.0 182.4 265.0 195.4]/Border[0 0 0]/Dest[1428 0 R/XYZ 0 266 0]>>endobj
-48 0 obj<</Subtype/Link/Rect[108.0 169.2 276.3 182.2]/Border[0 0 0]/Dest[1430 0 R/XYZ 0 520 0]>>endobj
-49 0 obj<</Subtype/Link/Rect[108.0 156.0 271.1 169.0]/Border[0 0 0]/Dest[1432 0 R/XYZ 0 734 0]>>endobj
-50 0 obj<</Subtype/Link/Rect[108.0 142.8 216.2 155.8]/Border[0 0 0]/Dest[1432 0 R/XYZ 0 645 0]>>endobj
-51 0 obj<</Subtype/Link/Rect[72.0 116.4 163.4 129.4]/Border[0 0 0]/Dest[1434 0 R/XYZ 0 734 0]>>endobj
-52 0 obj<</Subtype/Link/Rect[108.0 103.2 209.1 116.2]/Border[0 0 0]/Dest[1434 0 R/XYZ 0 696 0]>>endobj
-53 0 obj[14 0 R
+14 0 obj<</Subtype/Link/Rect[72.0 684.0 223.5 697.0]/Border[0 0 0]/Dest[1100 0 R/XYZ 0 734 0]>>endobj
+15 0 obj<</Subtype/Link/Rect[108.0 670.8 174.9 683.8]/Border[0 0 0]/Dest[1100 0 R/XYZ 0 696 0]>>endobj
+16 0 obj<</Subtype/Link/Rect[72.0 644.4 112.9 657.4]/Border[0 0 0]/Dest[1114 0 R/XYZ 0 734 0]>>endobj
+17 0 obj<</Subtype/Link/Rect[72.0 618.0 277.3 631.0]/Border[0 0 0]/Dest[1124 0 R/XYZ 0 734 0]>>endobj
+18 0 obj<</Subtype/Link/Rect[108.0 604.8 249.2 617.8]/Border[0 0 0]/Dest[1124 0 R/XYZ 0 696 0]>>endobj
+19 0 obj<</Subtype/Link/Rect[108.0 591.6 255.0 604.6]/Border[0 0 0]/Dest[1124 0 R/XYZ 0 568 0]>>endobj
+20 0 obj<</Subtype/Link/Rect[108.0 578.4 257.7 591.4]/Border[0 0 0]/Dest[1124 0 R/XYZ 0 163 0]>>endobj
+21 0 obj<</Subtype/Link/Rect[108.0 565.2 309.0 578.2]/Border[0 0 0]/Dest[1126 0 R/XYZ 0 734 0]>>endobj
+22 0 obj<</Subtype/Link/Rect[108.0 552.0 313.9 565.0]/Border[0 0 0]/Dest[1126 0 R/XYZ 0 385 0]>>endobj
+23 0 obj<</Subtype/Link/Rect[108.0 538.8 284.9 551.8]/Border[0 0 0]/Dest[1126 0 R/XYZ 0 283 0]>>endobj
+24 0 obj<</Subtype/Link/Rect[144.0 525.6 316.0 538.6]/Border[0 0 0]/Dest[1126 0 R/XYZ 0 129 0]>>endobj
+25 0 obj<</Subtype/Link/Rect[144.0 512.4 364.6 525.4]/Border[0 0 0]/Dest[1128 0 R/XYZ 0 303 0]>>endobj
+26 0 obj<</Subtype/Link/Rect[108.0 499.2 362.2 512.2]/Border[0 0 0]/Dest[1130 0 R/XYZ 0 718 0]>>endobj
+27 0 obj<</Subtype/Link/Rect[108.0 486.0 315.8 499.0]/Border[0 0 0]/Dest[1130 0 R/XYZ 0 551 0]>>endobj
+28 0 obj<</Subtype/Link/Rect[108.0 472.8 511.6 485.8]/Border[0 0 0]/Dest[1130 0 R/XYZ 0 383 0]>>endobj
+29 0 obj<</Subtype/Link/Rect[108.0 459.6 259.4 472.6]/Border[0 0 0]/Dest[1130 0 R/XYZ 0 169 0]>>endobj
+30 0 obj<</Subtype/Link/Rect[144.0 446.4 272.0 459.4]/Border[0 0 0]/Dest[1132 0 R/XYZ 0 652 0]>>endobj
+31 0 obj<</Subtype/Link/Rect[144.0 433.2 222.5 446.2]/Border[0 0 0]/Dest[1132 0 R/XYZ 0 594 0]>>endobj
+32 0 obj<</Subtype/Link/Rect[144.0 420.0 303.2 433.0]/Border[0 0 0]/Dest[1132 0 R/XYZ 0 509 0]>>endobj
+33 0 obj<</Subtype/Link/Rect[144.0 406.8 331.6 419.8]/Border[0 0 0]/Dest[1132 0 R/XYZ 0 200 0]>>endobj
+34 0 obj<</Subtype/Link/Rect[144.0 393.6 213.7 406.6]/Border[0 0 0]/Dest[1134 0 R/XYZ 0 718 0]>>endobj
+35 0 obj<</Subtype/Link/Rect[144.0 380.4 268.3 393.4]/Border[0 0 0]/Dest[1134 0 R/XYZ 0 264 0]>>endobj
+36 0 obj<</Subtype/Link/Rect[72.0 354.0 267.5 367.0]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 734 0]>>endobj
+37 0 obj<</Subtype/Link/Rect[108.0 340.8 181.6 353.8]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 696 0]>>endobj
+38 0 obj<</Subtype/Link/Rect[108.0 327.6 184.7 340.6]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 529 0]>>endobj
+39 0 obj<</Subtype/Link/Rect[108.0 314.4 150.5 327.4]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 173 0]>>endobj
+40 0 obj<</Subtype/Link/Rect[144.0 301.2 198.7 314.2]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 139 0]>>endobj
+41 0 obj<</Subtype/Link/Rect[144.0 288.0 198.7 301.0]/Border[0 0 0]/Dest[1138 0 R/XYZ 0 705 0]>>endobj
+42 0 obj<</Subtype/Link/Rect[144.0 274.8 198.7 287.8]/Border[0 0 0]/Dest[1138 0 R/XYZ 0 501 0]>>endobj
+43 0 obj<</Subtype/Link/Rect[144.0 261.6 198.7 274.6]/Border[0 0 0]/Dest[1140 0 R/XYZ 0 586 0]>>endobj
+44 0 obj<</Subtype/Link/Rect[144.0 248.4 198.7 261.4]/Border[0 0 0]/Dest[1140 0 R/XYZ 0 435 0]>>endobj
+45 0 obj<</Subtype/Link/Rect[144.0 235.2 198.7 248.2]/Border[0 0 0]/Dest[1140 0 R/XYZ 0 311 0]>>endobj
+46 0 obj<</Subtype/Link/Rect[144.0 222.0 198.7 235.0]/Border[0 0 0]/Dest[1142 0 R/XYZ 0 718 0]>>endobj
+47 0 obj<</Subtype/Link/Rect[144.0 208.8 198.7 221.8]/Border[0 0 0]/Dest[1142 0 R/XYZ 0 356 0]>>endobj
+48 0 obj<</Subtype/Link/Rect[144.0 195.6 198.7 208.6]/Border[0 0 0]/Dest[1144 0 R/XYZ 0 679 0]>>endobj
+49 0 obj<</Subtype/Link/Rect[144.0 182.4 209.7 195.4]/Border[0 0 0]/Dest[1144 0 R/XYZ 0 488 0]>>endobj
+50 0 obj<</Subtype/Link/Rect[144.0 169.2 209.7 182.2]/Border[0 0 0]/Dest[1144 0 R/XYZ 0 351 0]>>endobj
+51 0 obj<</Subtype/Link/Rect[108.0 156.0 221.4 169.0]/Border[0 0 0]/Dest[1144 0 R/XYZ 0 213 0]>>endobj
+52 0 obj<</Subtype/Link/Rect[72.0 129.6 348.8 142.6]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 734 0]>>endobj
+53 0 obj<</Subtype/Link/Rect[108.0 116.4 161.5 129.4]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 672 0]>>endobj
+54 0 obj<</Subtype/Link/Rect[108.0 103.2 327.7 116.2]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 439 0]>>endobj
+55 0 obj<</Subtype/Link/Rect[144.0 90.0 213.1 103.0]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 311 0]>>endobj
+56 0 obj<</Subtype/Link/Rect[144.0 76.8 239.6 89.8]/Border[0 0 0]/Dest[1148 0 R/XYZ 0 441 0]>>endobj
+57 0 obj<</Subtype/Link/Rect[144.0 63.6 231.1 76.6]/Border[0 0 0]/Dest[1148 0 R/XYZ 0 303 0]>>endobj
+58 0 obj[14 0 R
15 0 R
16 0 R
17 0 R
49 0 R
50 0 R
51 0 R
-52 0 R]endobj
-54 0 obj<</Subtype/Link/Rect[72.0 684.0 435.9 697.0]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 734 0]>>endobj
-55 0 obj<</Subtype/Link/Rect[108.0 670.8 175.5 683.8]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 604 0]>>endobj
-56 0 obj<</Subtype/Link/Rect[108.0 657.6 313.1 670.6]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 159 0]>>endobj
-57 0 obj<</Subtype/Link/Rect[108.0 644.4 326.2 657.4]/Border[0 0 0]/Dest[1438 0 R/XYZ 0 483 0]>>endobj
-58 0 obj<</Subtype/Link/Rect[108.0 631.2 187.1 644.2]/Border[0 0 0]/Dest[1438 0 R/XYZ 0 305 0]>>endobj
-59 0 obj<</Subtype/Link/Rect[108.0 618.0 425.7 631.0]/Border[0 0 0]/Dest[1440 0 R/XYZ 0 467 0]>>endobj
-60 0 obj<</Subtype/Link/Rect[108.0 604.8 232.3 617.8]/Border[0 0 0]/Dest[1440 0 R/XYZ 0 187 0]>>endobj
-61 0 obj<</Subtype/Link/Rect[72.0 578.4 355.3 591.4]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 734 0]>>endobj
-62 0 obj<</Subtype/Link/Rect[108.0 565.2 181.6 578.2]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 672 0]>>endobj
-63 0 obj<</Subtype/Link/Rect[108.0 552.0 268.7 565.0]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 531 0]>>endobj
-64 0 obj<</Subtype/Link/Rect[126.0 538.8 295.0 551.8]/Border[0 0 0]/Dest[1446 0 R/XYZ 0 734 0]>>endobj
-65 0 obj<</Subtype/Link/Rect[126.0 525.6 334.7 538.6]/Border[0 0 0]/Dest[1446 0 R/XYZ 0 609 0]>>endobj
-66 0 obj<</Subtype/Link/Rect[108.0 512.4 246.4 525.4]/Border[0 0 0]/Dest[1446 0 R/XYZ 0 511 0]>>endobj
-67 0 obj<</Subtype/Link/Rect[72.0 486.0 177.1 499.0]/Border[0 0 0]/Dest[1450 0 R/XYZ 0 734 0]>>endobj
-68 0 obj<</Subtype/Link/Rect[72.0 459.6 131.9 472.6]/Border[0 0 0]/Dest[1452 0 R/XYZ 0 734 0]>>endobj
-69 0 obj<</Subtype/Link/Rect[72.0 433.2 423.4 446.2]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 734 0]>>endobj
-70 0 obj<</Subtype/Link/Rect[108.0 420.0 219.2 433.0]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 672 0]>>endobj
-71 0 obj<</Subtype/Link/Rect[108.0 406.8 181.0 419.8]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 584 0]>>endobj
-72 0 obj<</Subtype/Link/Rect[108.0 393.6 316.1 406.6]/Border[0 0 0]/Dest[1456 0 R/XYZ 0 718 0]>>endobj
-73 0 obj<</Subtype/Link/Rect[108.0 380.4 430.0 393.4]/Border[0 0 0]/Dest[1458 0 R/XYZ 0 613 0]>>endobj
-74 0 obj<</Subtype/Link/Rect[126.0 367.2 351.2 380.2]/Border[0 0 0]/Dest[1458 0 R/XYZ 0 227 0]>>endobj
-75 0 obj<</Subtype/Link/Rect[126.0 354.0 380.5 367.0]/Border[0 0 0]/Dest[1460 0 R/XYZ 0 319 0]>>endobj
-76 0 obj<</Subtype/Link/Rect[126.0 340.8 297.4 353.8]/Border[0 0 0]/Dest[1462 0 R/XYZ 0 734 0]>>endobj
-77 0 obj<</Subtype/Link/Rect[108.0 327.6 261.4 340.6]/Border[0 0 0]/Dest[1462 0 R/XYZ 0 385 0]>>endobj
-78 0 obj<</Subtype/Link/Rect[108.0 314.4 252.8 327.4]/Border[0 0 0]/Dest[1464 0 R/XYZ 0 129 0]>>endobj
-79 0 obj<</Subtype/Link/Rect[108.0 301.2 243.6 314.2]/Border[0 0 0]/Dest[1466 0 R/XYZ 0 124 0]>>endobj
-80 0 obj<</Subtype/Link/Rect[108.0 288.0 292.9 301.0]/Border[0 0 0]/Dest[1472 0 R/XYZ 0 507 0]>>endobj
-81 0 obj<</Subtype/Link/Rect[126.0 274.8 350.0 287.8]/Border[0 0 0]/Dest[1474 0 R/XYZ 0 520 0]>>endobj
-82 0 obj<</Subtype/Link/Rect[126.0 261.6 424.2 274.6]/Border[0 0 0]/Dest[1476 0 R/XYZ 0 734 0]>>endobj
-83 0 obj<</Subtype/Link/Rect[108.0 248.4 431.0 261.4]/Border[0 0 0]/Dest[1484 0 R/XYZ 0 734 0]>>endobj
-84 0 obj<</Subtype/Link/Rect[72.0 222.0 512.6 235.0]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 734 0]>>endobj
-85 0 obj<</Subtype/Link/Rect[108.0 208.8 219.2 221.8]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 672 0]>>endobj
-86 0 obj<</Subtype/Link/Rect[108.0 195.6 181.0 208.6]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 597 0]>>endobj
-87 0 obj<</Subtype/Link/Rect[108.0 182.4 359.1 195.4]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 225 0]>>endobj
-88 0 obj<</Subtype/Link/Rect[126.0 169.2 382.3 182.2]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 734 0]>>endobj
-89 0 obj<</Subtype/Link/Rect[126.0 156.0 269.0 169.0]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 609 0]>>endobj
-90 0 obj<</Subtype/Link/Rect[108.0 142.8 325.8 155.8]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 524 0]>>endobj
-91 0 obj<</Subtype/Link/Rect[108.0 129.6 268.1 142.6]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 383 0]>>endobj
-92 0 obj<</Subtype/Link/Rect[126.0 116.4 327.6 129.4]/Border[0 0 0]/Dest[1492 0 R/XYZ 0 620 0]>>endobj
-93 0 obj<</Subtype/Link/Rect[72.0 90.0 282.8 103.0]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 734 0]>>endobj
-94 0 obj<</Subtype/Link/Rect[108.0 76.8 317.6 89.8]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 524 0]>>endobj
-95 0 obj<</Subtype/Link/Rect[108.0 63.6 319.4 76.6]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 417 0]>>endobj
-96 0 obj[54 0 R
+52 0 R
+53 0 R
+54 0 R
55 0 R
56 0 R
-57 0 R
-58 0 R
-59 0 R
+57 0 R]endobj
+59 0 obj<</Subtype/Link/Rect[72.0 684.0 348.8 697.0]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 734 0]>>endobj
+60 0 obj<</Subtype/Link/Rect[144.0 670.8 251.2 683.8]/Border[0 0 0]/Dest[1148 0 R/XYZ 0 157 0]>>endobj
+61 0 obj<</Subtype/Link/Rect[108.0 657.6 382.4 670.6]/Border[0 0 0]/Dest[1150 0 R/XYZ 0 339 0]>>endobj
+62 0 obj<</Subtype/Link/Rect[144.0 644.4 291.6 657.4]/Border[0 0 0]/Dest[1152 0 R/XYZ 0 266 0]>>endobj
+63 0 obj<</Subtype/Link/Rect[144.0 631.2 260.1 644.2]/Border[0 0 0]/Dest[1154 0 R/XYZ 0 734 0]>>endobj
+64 0 obj<</Subtype/Link/Rect[144.0 618.0 223.8 631.0]/Border[0 0 0]/Dest[1156 0 R/XYZ 0 459 0]>>endobj
+65 0 obj<</Subtype/Link/Rect[144.0 604.8 230.5 617.8]/Border[0 0 0]/Dest[1156 0 R/XYZ 0 361 0]>>endobj
+66 0 obj<</Subtype/Link/Rect[144.0 591.6 236.6 604.6]/Border[0 0 0]/Dest[1156 0 R/XYZ 0 224 0]>>endobj
+67 0 obj<</Subtype/Link/Rect[108.0 578.4 523.2 591.4]/Border[0 0 0]/Dest[1158 0 R/XYZ 0 670 0]>>endobj
+68 0 obj<</Subtype/Link/Rect[108.0 565.2 497.9 578.2]/Border[0 0 0]/Dest[1158 0 R/XYZ 0 126 0]>>endobj
+69 0 obj<</Subtype/Link/Rect[144.0 552.0 389.3 565.0]/Border[0 0 0]/Dest[1162 0 R/XYZ 0 734 0]>>endobj
+70 0 obj<</Subtype/Link/Rect[144.0 538.8 455.0 551.8]/Border[0 0 0]/Dest[1162 0 R/XYZ 0 484 0]>>endobj
+71 0 obj<</Subtype/Link/Rect[144.0 525.6 368.5 538.6]/Border[0 0 0]/Dest[1162 0 R/XYZ 0 132 0]>>endobj
+72 0 obj<</Subtype/Link/Rect[108.0 512.4 181.6 525.4]/Border[0 0 0]/Dest[1164 0 R/XYZ 0 263 0]>>endobj
+73 0 obj<</Subtype/Link/Rect[72.0 486.0 460.7 499.0]/Border[0 0 0]/Dest[1166 0 R/XYZ 0 734 0]>>endobj
+74 0 obj<</Subtype/Link/Rect[108.0 472.8 202.4 485.8]/Border[0 0 0]/Dest[1166 0 R/XYZ 0 672 0]>>endobj
+75 0 obj<</Subtype/Link/Rect[108.0 459.6 244.9 472.6]/Border[0 0 0]/Dest[1168 0 R/XYZ 0 148 0]>>endobj
+76 0 obj<</Subtype/Link/Rect[108.0 446.4 270.2 459.4]/Border[0 0 0]/Dest[1170 0 R/XYZ 0 705 0]>>endobj
+77 0 obj<</Subtype/Link/Rect[72.0 420.0 402.3 433.0]/Border[0 0 0]/Dest[1172 0 R/XYZ 0 734 0]>>endobj
+78 0 obj<</Subtype/Link/Rect[108.0 406.8 179.2 419.8]/Border[0 0 0]/Dest[1172 0 R/XYZ 0 672 0]>>endobj
+79 0 obj<</Subtype/Link/Rect[144.0 393.6 197.2 406.6]/Border[0 0 0]/Dest[1174 0 R/XYZ 0 652 0]>>endobj
+80 0 obj<</Subtype/Link/Rect[72.0 367.2 412.7 380.2]/Border[0 0 0]/Dest[1176 0 R/XYZ 0 734 0]>>endobj
+81 0 obj<</Subtype/Link/Rect[108.0 354.0 444.7 367.0]/Border[0 0 0]/Dest[1176 0 R/XYZ 0 672 0]>>endobj
+82 0 obj<</Subtype/Link/Rect[108.0 340.8 319.1 353.8]/Border[0 0 0]/Dest[1176 0 R/XYZ 0 497 0]>>endobj
+83 0 obj<</Subtype/Link/Rect[108.0 327.6 231.1 340.6]/Border[0 0 0]/Dest[1176 0 R/XYZ 0 330 0]>>endobj
+84 0 obj<</Subtype/Link/Rect[108.0 314.4 292.2 327.4]/Border[0 0 0]/Dest[1178 0 R/XYZ 0 665 0]>>endobj
+85 0 obj<</Subtype/Link/Rect[144.0 301.2 244.5 314.2]/Border[0 0 0]/Dest[1178 0 R/XYZ 0 432 0]>>endobj
+86 0 obj<</Subtype/Link/Rect[144.0 288.0 269.6 301.0]/Border[0 0 0]/Dest[1178 0 R/XYZ 0 189 0]>>endobj
+87 0 obj<</Subtype/Link/Rect[108.0 274.8 301.4 287.8]/Border[0 0 0]/Dest[1180 0 R/XYZ 0 692 0]>>endobj
+88 0 obj<</Subtype/Link/Rect[108.0 261.6 392.1 274.6]/Border[0 0 0]/Dest[1180 0 R/XYZ 0 260 0]>>endobj
+89 0 obj<</Subtype/Link/Rect[108.0 248.4 384.2 261.4]/Border[0 0 0]/Dest[1184 0 R/XYZ 0 599 0]>>endobj
+90 0 obj<</Subtype/Link/Rect[72.0 222.0 277.1 235.0]/Border[0 0 0]/Dest[1186 0 R/XYZ 0 734 0]>>endobj
+91 0 obj<</Subtype/Link/Rect[108.0 208.8 181.6 221.8]/Border[0 0 0]/Dest[1186 0 R/XYZ 0 696 0]>>endobj
+92 0 obj<</Subtype/Link/Rect[108.0 195.6 189.0 208.6]/Border[0 0 0]/Dest[1186 0 R/XYZ 0 278 0]>>endobj
+93 0 obj<</Subtype/Link/Rect[144.0 182.4 245.7 195.4]/Border[0 0 0]/Dest[1188 0 R/XYZ 0 702 0]>>endobj
+94 0 obj<</Subtype/Link/Rect[144.0 169.2 330.4 182.2]/Border[0 0 0]/Dest[1190 0 R/XYZ 0 471 0]>>endobj
+95 0 obj<</Subtype/Link/Rect[144.0 156.0 323.3 169.0]/Border[0 0 0]/Dest[1192 0 R/XYZ 0 718 0]>>endobj
+96 0 obj<</Subtype/Link/Rect[144.0 142.8 386.9 155.8]/Border[0 0 0]/Dest[1192 0 R/XYZ 0 348 0]>>endobj
+97 0 obj<</Subtype/Link/Rect[144.0 129.6 278.1 142.6]/Border[0 0 0]/Dest[1194 0 R/XYZ 0 171 0]>>endobj
+98 0 obj<</Subtype/Link/Rect[108.0 116.4 220.1 129.4]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 652 0]>>endobj
+99 0 obj<</Subtype/Link/Rect[144.0 103.2 250.3 116.2]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 551 0]>>endobj
+100 0 obj<</Subtype/Link/Rect[144.0 90.0 317.2 103.0]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 426 0]>>endobj
+101 0 obj<</Subtype/Link/Rect[144.0 76.8 258.3 89.8]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 341 0]>>endobj
+102 0 obj<</Subtype/Link/Rect[144.0 63.6 270.5 76.6]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 243 0]>>endobj
+103 0 obj[59 0 R
60 0 R
61 0 R
62 0 R
92 0 R
93 0 R
94 0 R
-95 0 R]endobj
-97 0 obj<</Subtype/Link/Rect[72.0 684.0 282.8 697.0]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 734 0]>>endobj
-98 0 obj<</Subtype/Link/Rect[108.0 670.8 197.8 683.8]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 241 0]>>endobj
-99 0 obj<</Subtype/Link/Rect[108.0 657.6 239.4 670.6]/Border[0 0 0]/Dest[1496 0 R/XYZ 0 556 0]>>endobj
-100 0 obj<</Subtype/Link/Rect[108.0 644.4 253.4 657.4]/Border[0 0 0]/Dest[1496 0 R/XYZ 0 240 0]>>endobj
-101 0 obj<</Subtype/Link/Rect[126.0 631.2 218.6 644.2]/Border[0 0 0]/Dest[1496 0 R/XYZ 0 151 0]>>endobj
-102 0 obj<</Subtype/Link/Rect[108.0 618.0 224.7 631.0]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 692 0]>>endobj
-103 0 obj<</Subtype/Link/Rect[108.0 604.8 228.1 617.8]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 603 0]>>endobj
-104 0 obj<</Subtype/Link/Rect[108.0 591.6 152.9 604.6]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 528 0]>>endobj
-105 0 obj<</Subtype/Link/Rect[72.0 565.2 281.6 578.2]/Border[0 0 0]/Dest[1500 0 R/XYZ 0 734 0]>>endobj
-106 0 obj<</Subtype/Link/Rect[108.0 552.0 299.9 565.0]/Border[0 0 0]/Dest[1500 0 R/XYZ 0 696 0]>>endobj
-107 0 obj<</Subtype/Link/Rect[108.0 538.8 288.0 551.8]/Border[0 0 0]/Dest[1502 0 R/XYZ 0 362 0]>>endobj
-108 0 obj<</Subtype/Link/Rect[108.0 525.6 307.9 538.6]/Border[0 0 0]/Dest[1502 0 R/XYZ 0 155 0]>>endobj
-109 0 obj<</Subtype/Link/Rect[72.0 499.2 198.2 512.2]/Border[0 0 0]/Dest[1506 0 R/XYZ 0 734 0]>>endobj
-110 0 obj<</Subtype/Link/Rect[72.0 472.8 131.9 485.8]/Border[0 0 0]/Dest[1508 0 R/XYZ 0 734 0]>>endobj
-111 0 obj<</Subtype/Link/Rect[72.0 446.4 354.3 459.4]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 734 0]>>endobj
-112 0 obj<</Subtype/Link/Rect[108.0 433.2 167.0 446.2]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 672 0]>>endobj
-113 0 obj<</Subtype/Link/Rect[108.0 420.0 333.2 433.0]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 439 0]>>endobj
-114 0 obj<</Subtype/Link/Rect[126.0 406.8 200.6 419.8]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 311 0]>>endobj
-115 0 obj<</Subtype/Link/Rect[126.0 393.6 227.1 406.6]/Border[0 0 0]/Dest[1516 0 R/XYZ 0 441 0]>>endobj
-116 0 obj<</Subtype/Link/Rect[126.0 380.4 218.6 393.4]/Border[0 0 0]/Dest[1516 0 R/XYZ 0 303 0]>>endobj
-117 0 obj<</Subtype/Link/Rect[126.0 367.2 238.7 380.2]/Border[0 0 0]/Dest[1516 0 R/XYZ 0 157 0]>>endobj
-118 0 obj<</Subtype/Link/Rect[108.0 354.0 387.9 367.0]/Border[0 0 0]/Dest[1518 0 R/XYZ 0 339 0]>>endobj
-119 0 obj<</Subtype/Link/Rect[126.0 340.8 279.1 353.8]/Border[0 0 0]/Dest[1520 0 R/XYZ 0 266 0]>>endobj
-120 0 obj<</Subtype/Link/Rect[126.0 327.6 247.6 340.6]/Border[0 0 0]/Dest[1522 0 R/XYZ 0 734 0]>>endobj
-121 0 obj<</Subtype/Link/Rect[126.0 314.4 211.2 327.4]/Border[0 0 0]/Dest[1524 0 R/XYZ 0 459 0]>>endobj
-122 0 obj<</Subtype/Link/Rect[126.0 301.2 218.0 314.2]/Border[0 0 0]/Dest[1524 0 R/XYZ 0 361 0]>>endobj
-123 0 obj<</Subtype/Link/Rect[126.0 288.0 224.1 301.0]/Border[0 0 0]/Dest[1524 0 R/XYZ 0 224 0]>>endobj
-124 0 obj<</Subtype/Link/Rect[108.0 274.8 528.7 287.8]/Border[0 0 0]/Dest[1526 0 R/XYZ 0 670 0]>>endobj
-125 0 obj<</Subtype/Link/Rect[108.0 261.6 503.4 274.6]/Border[0 0 0]/Dest[1526 0 R/XYZ 0 126 0]>>endobj
-126 0 obj<</Subtype/Link/Rect[126.0 248.4 376.8 261.4]/Border[0 0 0]/Dest[1530 0 R/XYZ 0 734 0]>>endobj
-127 0 obj<</Subtype/Link/Rect[126.0 235.2 442.5 248.2]/Border[0 0 0]/Dest[1530 0 R/XYZ 0 484 0]>>endobj
-128 0 obj<</Subtype/Link/Rect[126.0 222.0 356.0 235.0]/Border[0 0 0]/Dest[1530 0 R/XYZ 0 132 0]>>endobj
-129 0 obj<</Subtype/Link/Rect[108.0 208.8 187.1 221.8]/Border[0 0 0]/Dest[1532 0 R/XYZ 0 263 0]>>endobj
-130 0 obj<</Subtype/Link/Rect[72.0 182.4 418.2 195.4]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 734 0]>>endobj
-131 0 obj<</Subtype/Link/Rect[108.0 169.2 450.2 182.2]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 672 0]>>endobj
-132 0 obj<</Subtype/Link/Rect[108.0 156.0 324.6 169.0]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 497 0]>>endobj
-133 0 obj<</Subtype/Link/Rect[108.0 142.8 236.6 155.8]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 330 0]>>endobj
-134 0 obj<</Subtype/Link/Rect[108.0 129.6 297.7 142.6]/Border[0 0 0]/Dest[1536 0 R/XYZ 0 665 0]>>endobj
-135 0 obj<</Subtype/Link/Rect[126.0 116.4 232.0 129.4]/Border[0 0 0]/Dest[1536 0 R/XYZ 0 432 0]>>endobj
-136 0 obj<</Subtype/Link/Rect[126.0 103.2 257.1 116.2]/Border[0 0 0]/Dest[1536 0 R/XYZ 0 189 0]>>endobj
-137 0 obj<</Subtype/Link/Rect[108.0 90.0 306.9 103.0]/Border[0 0 0]/Dest[1538 0 R/XYZ 0 692 0]>>endobj
-138 0 obj<</Subtype/Link/Rect[108.0 76.8 397.6 89.8]/Border[0 0 0]/Dest[1538 0 R/XYZ 0 260 0]>>endobj
-139 0 obj<</Subtype/Link/Rect[108.0 63.6 389.7 76.6]/Border[0 0 0]/Dest[1542 0 R/XYZ 0 599 0]>>endobj
-140 0 obj[97 0 R
+95 0 R
+96 0 R
+97 0 R
98 0 R
99 0 R
100 0 R
101 0 R
-102 0 R
-103 0 R
-104 0 R
+102 0 R]endobj
+104 0 obj<</Subtype/Link/Rect[72.0 684.0 277.1 697.0]/Border[0 0 0]/Dest[1186 0 R/XYZ 0 734 0]>>endobj
+105 0 obj<</Subtype/Link/Rect[108.0 670.8 300.2 683.8]/Border[0 0 0]/Dest[1198 0 R/XYZ 0 359 0]>>endobj
+106 0 obj<</Subtype/Link/Rect[72.0 644.4 264.8 657.4]/Border[0 0 0]/Dest[1202 0 R/XYZ 0 734 0]>>endobj
+107 0 obj<</Subtype/Link/Rect[108.0 631.2 181.6 644.2]/Border[0 0 0]/Dest[1202 0 R/XYZ 0 696 0]>>endobj
+108 0 obj<</Subtype/Link/Rect[108.0 618.0 251.9 631.0]/Border[0 0 0]/Dest[1204 0 R/XYZ 0 734 0]>>endobj
+109 0 obj<</Subtype/Link/Rect[108.0 604.8 236.0 617.8]/Border[0 0 0]/Dest[1204 0 R/XYZ 0 278 0]>>endobj
+110 0 obj<</Subtype/Link/Rect[108.0 591.6 287.0 604.6]/Border[0 0 0]/Dest[1206 0 R/XYZ 0 734 0]>>endobj
+111 0 obj<</Subtype/Link/Rect[108.0 578.4 210.4 591.4]/Border[0 0 0]/Dest[1206 0 R/XYZ 0 304 0]>>endobj
+112 0 obj<</Subtype/Link/Rect[108.0 565.2 231.1 578.2]/Border[0 0 0]/Dest[1208 0 R/XYZ 0 646 0]>>endobj
+113 0 obj<</Subtype/Link/Rect[108.0 552.0 229.3 565.0]/Border[0 0 0]/Dest[1208 0 R/XYZ 0 299 0]>>endobj
+114 0 obj<</Subtype/Link/Rect[108.0 538.8 210.0 551.8]/Border[0 0 0]/Dest[1208 0 R/XYZ 0 210 0]>>endobj
+115 0 obj<</Subtype/Link/Rect[108.0 525.6 196.6 538.6]/Border[0 0 0]/Dest[1210 0 R/XYZ 0 734 0]>>endobj
+116 0 obj<</Subtype/Link/Rect[72.0 499.2 192.4 512.2]/Border[0 0 0]/Dest[1212 0 R/XYZ 0 734 0]>>endobj
+117 0 obj<</Subtype/Link/Rect[108.0 486.0 181.6 499.0]/Border[0 0 0]/Dest[1212 0 R/XYZ 0 696 0]>>endobj
+118 0 obj<</Subtype/Link/Rect[108.0 472.8 323.7 485.8]/Border[0 0 0]/Dest[1212 0 R/XYZ 0 467 0]>>endobj
+119 0 obj<</Subtype/Link/Rect[72.0 446.4 278.4 459.4]/Border[0 0 0]/Dest[1216 0 R/XYZ 0 734 0]>>endobj
+120 0 obj<</Subtype/Link/Rect[108.0 433.2 305.4 446.2]/Border[0 0 0]/Dest[1216 0 R/XYZ 0 696 0]>>endobj
+121 0 obj<</Subtype/Link/Rect[108.0 420.0 293.5 433.0]/Border[0 0 0]/Dest[1218 0 R/XYZ 0 362 0]>>endobj
+122 0 obj<</Subtype/Link/Rect[108.0 406.8 313.4 419.8]/Border[0 0 0]/Dest[1218 0 R/XYZ 0 155 0]>>endobj
+123 0 obj<</Subtype/Link/Rect[72.0 380.4 431.7 393.4]/Border[0 0 0]/Dest[1222 0 R/XYZ 0 734 0]>>endobj
+124 0 obj<</Subtype/Link/Rect[108.0 367.2 170.0 380.2]/Border[0 0 0]/Dest[1222 0 R/XYZ 0 672 0]>>endobj
+125 0 obj<</Subtype/Link/Rect[108.0 354.0 187.1 367.0]/Border[0 0 0]/Dest[1222 0 R/XYZ 0 544 0]>>endobj
+126 0 obj<</Subtype/Link/Rect[108.0 340.8 239.1 353.8]/Border[0 0 0]/Dest[1222 0 R/XYZ 0 231 0]>>endobj
+127 0 obj<</Subtype/Link/Rect[144.0 327.6 229.8 340.6]/Border[0 0 0]/Dest[1224 0 R/XYZ 0 560 0]>>endobj
+128 0 obj<</Subtype/Link/Rect[108.0 314.4 227.5 327.4]/Border[0 0 0]/Dest[1224 0 R/XYZ 0 409 0]>>endobj
+129 0 obj<</Subtype/Link/Rect[144.0 301.2 330.1 314.2]/Border[0 0 0]/Dest[1224 0 R/XYZ 0 294 0]>>endobj
+130 0 obj<</Subtype/Link/Rect[144.0 288.0 272.3 301.0]/Border[0 0 0]/Dest[1226 0 R/XYZ 0 734 0]>>endobj
+131 0 obj<</Subtype/Link/Rect[144.0 274.8 330.4 287.8]/Border[0 0 0]/Dest[1226 0 R/XYZ 0 292 0]>>endobj
+132 0 obj<</Subtype/Link/Rect[144.0 261.6 310.8 274.6]/Border[0 0 0]/Dest[1228 0 R/XYZ 0 665 0]>>endobj
+133 0 obj<</Subtype/Link/Rect[144.0 248.4 244.5 261.4]/Border[0 0 0]/Dest[1228 0 R/XYZ 0 488 0]>>endobj
+134 0 obj<</Subtype/Link/Rect[108.0 235.2 265.4 248.2]/Border[0 0 0]/Dest[1228 0 R/XYZ 0 351 0]>>endobj
+135 0 obj<</Subtype/Link/Rect[144.0 222.0 231.4 235.0]/Border[0 0 0]/Dest[1228 0 R/XYZ 0 209 0]>>endobj
+136 0 obj<</Subtype/Link/Rect[144.0 208.8 238.1 221.8]/Border[0 0 0]/Dest[1230 0 R/XYZ 0 599 0]>>endobj
+137 0 obj<</Subtype/Link/Rect[144.0 195.6 262.6 208.6]/Border[0 0 0]/Dest[1230 0 R/XYZ 0 330 0]>>endobj
+138 0 obj<</Subtype/Link/Rect[108.0 182.4 183.5 195.4]/Border[0 0 0]/Dest[1244 0 R/XYZ 0 296 0]>>endobj
+139 0 obj<</Subtype/Link/Rect[108.0 169.2 182.9 182.2]/Border[0 0 0]/Dest[1246 0 R/XYZ 0 734 0]>>endobj
+140 0 obj<</Subtype/Link/Rect[72.0 142.8 421.8 155.8]/Border[0 0 0]/Dest[1248 0 R/XYZ 0 734 0]>>endobj
+141 0 obj<</Subtype/Link/Rect[108.0 129.6 224.7 142.6]/Border[0 0 0]/Dest[1248 0 R/XYZ 0 672 0]>>endobj
+142 0 obj<</Subtype/Link/Rect[108.0 116.4 186.5 129.4]/Border[0 0 0]/Dest[1248 0 R/XYZ 0 584 0]>>endobj
+143 0 obj<</Subtype/Link/Rect[108.0 103.2 321.6 116.2]/Border[0 0 0]/Dest[1250 0 R/XYZ 0 718 0]>>endobj
+144 0 obj<</Subtype/Link/Rect[108.0 90.0 435.5 103.0]/Border[0 0 0]/Dest[1252 0 R/XYZ 0 613 0]>>endobj
+145 0 obj<</Subtype/Link/Rect[144.0 76.8 374.7 89.8]/Border[0 0 0]/Dest[1252 0 R/XYZ 0 227 0]>>endobj
+146 0 obj<</Subtype/Link/Rect[144.0 63.6 404.0 76.6]/Border[0 0 0]/Dest[1254 0 R/XYZ 0 359 0]>>endobj
+147 0 obj[104 0 R
105 0 R
106 0 R
107 0 R
136 0 R
137 0 R
138 0 R
-139 0 R]endobj
-141 0 obj<</Subtype/Link/Rect[72.0 684.0 466.2 697.0]/Border[0 0 0]/Dest[1544 0 R/XYZ 0 734 0]>>endobj
-142 0 obj<</Subtype/Link/Rect[108.0 670.8 207.9 683.8]/Border[0 0 0]/Dest[1544 0 R/XYZ 0 672 0]>>endobj
-143 0 obj<</Subtype/Link/Rect[108.0 657.6 250.4 670.6]/Border[0 0 0]/Dest[1546 0 R/XYZ 0 148 0]>>endobj
-144 0 obj<</Subtype/Link/Rect[108.0 644.4 275.8 657.4]/Border[0 0 0]/Dest[1548 0 R/XYZ 0 705 0]>>endobj
-145 0 obj<</Subtype/Link/Rect[72.0 618.0 407.8 631.0]/Border[0 0 0]/Dest[1550 0 R/XYZ 0 734 0]>>endobj
-146 0 obj<</Subtype/Link/Rect[108.0 604.8 184.7 617.8]/Border[0 0 0]/Dest[1550 0 R/XYZ 0 672 0]>>endobj
-147 0 obj<</Subtype/Link/Rect[126.0 591.6 184.7 604.6]/Border[0 0 0]/Dest[1552 0 R/XYZ 0 652 0]>>endobj
-148 0 obj<</Subtype/Link/Rect[72.0 565.2 210.7 578.2]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 734 0]>>endobj
-149 0 obj<</Subtype/Link/Rect[108.0 552.0 187.1 565.0]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 696 0]>>endobj
-150 0 obj<</Subtype/Link/Rect[108.0 538.8 194.5 551.8]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 317 0]>>endobj
-151 0 obj<</Subtype/Link/Rect[126.0 525.6 233.2 538.6]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 131 0]>>endobj
-152 0 obj<</Subtype/Link/Rect[126.0 512.4 317.9 525.4]/Border[0 0 0]/Dest[1558 0 R/XYZ 0 570 0]>>endobj
-153 0 obj<</Subtype/Link/Rect[126.0 499.2 310.8 512.2]/Border[0 0 0]/Dest[1558 0 R/XYZ 0 155 0]>>endobj
-154 0 obj<</Subtype/Link/Rect[126.0 486.0 374.4 499.0]/Border[0 0 0]/Dest[1560 0 R/XYZ 0 459 0]>>endobj
-155 0 obj<</Subtype/Link/Rect[126.0 472.8 265.6 485.8]/Border[0 0 0]/Dest[1562 0 R/XYZ 0 286 0]>>endobj
-156 0 obj<</Subtype/Link/Rect[108.0 459.6 225.6 472.6]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 734 0]>>endobj
-157 0 obj<</Subtype/Link/Rect[126.0 446.4 237.8 459.4]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 632 0]>>endobj
-158 0 obj<</Subtype/Link/Rect[126.0 433.2 304.7 446.2]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 507 0]>>endobj
-159 0 obj<</Subtype/Link/Rect[126.0 420.0 245.8 433.0]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 423 0]>>endobj
-160 0 obj<</Subtype/Link/Rect[126.0 406.8 258.0 419.8]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 325 0]>>endobj
-161 0 obj<</Subtype/Link/Rect[108.0 393.6 176.8 406.6]/Border[0 0 0]/Dest[1566 0 R/XYZ 0 440 0]>>endobj
-162 0 obj<</Subtype/Link/Rect[126.0 380.4 213.4 393.4]/Border[0 0 0]/Dest[1566 0 R/XYZ 0 406 0]>>endobj
-163 0 obj<</Subtype/Link/Rect[126.0 367.2 283.7 380.2]/Border[0 0 0]/Dest[1568 0 R/XYZ 0 479 0]>>endobj
-164 0 obj<</Subtype/Link/Rect[126.0 354.0 267.7 367.0]/Border[0 0 0]/Dest[1570 0 R/XYZ 0 692 0]>>endobj
-165 0 obj<</Subtype/Link/Rect[126.0 340.8 318.8 353.8]/Border[0 0 0]/Dest[1570 0 R/XYZ 0 511 0]>>endobj
-166 0 obj<</Subtype/Link/Rect[126.0 327.6 242.1 340.6]/Border[0 0 0]/Dest[1572 0 R/XYZ 0 734 0]>>endobj
-167 0 obj<</Subtype/Link/Rect[126.0 314.4 262.9 327.4]/Border[0 0 0]/Dest[1572 0 R/XYZ 0 394 0]>>endobj
-168 0 obj<</Subtype/Link/Rect[126.0 301.2 261.1 314.2]/Border[0 0 0]/Dest[1574 0 R/XYZ 0 718 0]>>endobj
-169 0 obj<</Subtype/Link/Rect[126.0 288.0 241.8 301.0]/Border[0 0 0]/Dest[1574 0 R/XYZ 0 633 0]>>endobj
-170 0 obj<</Subtype/Link/Rect[126.0 274.8 228.4 287.8]/Border[0 0 0]/Dest[1574 0 R/XYZ 0 535 0]>>endobj
-171 0 obj<</Subtype/Link/Rect[72.0 248.4 197.9 261.4]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 734 0]>>endobj
-172 0 obj<</Subtype/Link/Rect[108.0 235.2 187.1 248.2]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 696 0]>>endobj
-173 0 obj<</Subtype/Link/Rect[108.0 222.0 329.2 235.0]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 467 0]>>endobj
-174 0 obj<</Subtype/Link/Rect[72.0 195.6 431.7 208.6]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 734 0]>>endobj
-175 0 obj<</Subtype/Link/Rect[108.0 182.4 170.0 195.4]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 672 0]>>endobj
-176 0 obj<</Subtype/Link/Rect[108.0 169.2 187.1 182.2]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 544 0]>>endobj
-177 0 obj<</Subtype/Link/Rect[108.0 156.0 239.1 169.0]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 231 0]>>endobj
-178 0 obj<</Subtype/Link/Rect[126.0 142.8 211.8 155.8]/Border[0 0 0]/Dest[1582 0 R/XYZ 0 560 0]>>endobj
-179 0 obj<</Subtype/Link/Rect[108.0 129.6 227.5 142.6]/Border[0 0 0]/Dest[1582 0 R/XYZ 0 409 0]>>endobj
-180 0 obj<</Subtype/Link/Rect[126.0 116.4 312.1 129.4]/Border[0 0 0]/Dest[1582 0 R/XYZ 0 294 0]>>endobj
-181 0 obj<</Subtype/Link/Rect[126.0 103.2 254.3 116.2]/Border[0 0 0]/Dest[1584 0 R/XYZ 0 734 0]>>endobj
-182 0 obj<</Subtype/Link/Rect[126.0 90.0 312.4 103.0]/Border[0 0 0]/Dest[1584 0 R/XYZ 0 292 0]>>endobj
-183 0 obj<</Subtype/Link/Rect[126.0 76.8 292.8 89.8]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 665 0]>>endobj
-184 0 obj<</Subtype/Link/Rect[126.0 63.6 226.5 76.6]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 488 0]>>endobj
-185 0 obj[141 0 R
+139 0 R
+140 0 R
+141 0 R
142 0 R
143 0 R
144 0 R
145 0 R
-146 0 R
-147 0 R
-148 0 R
+146 0 R]endobj
+148 0 obj<</Subtype/Link/Rect[72.0 684.0 421.8 697.0]/Border[0 0 0]/Dest[1248 0 R/XYZ 0 734 0]>>endobj
+149 0 obj<</Subtype/Link/Rect[144.0 670.8 320.9 683.8]/Border[0 0 0]/Dest[1254 0 R/XYZ 0 149 0]>>endobj
+150 0 obj<</Subtype/Link/Rect[108.0 657.6 266.9 670.6]/Border[0 0 0]/Dest[1256 0 R/XYZ 0 467 0]>>endobj
+151 0 obj<</Subtype/Link/Rect[108.0 644.4 258.3 657.4]/Border[0 0 0]/Dest[1258 0 R/XYZ 0 208 0]>>endobj
+152 0 obj<</Subtype/Link/Rect[108.0 631.2 249.1 644.2]/Border[0 0 0]/Dest[1260 0 R/XYZ 0 203 0]>>endobj
+153 0 obj<</Subtype/Link/Rect[108.0 618.0 298.4 631.0]/Border[0 0 0]/Dest[1266 0 R/XYZ 0 547 0]>>endobj
+154 0 obj<</Subtype/Link/Rect[144.0 604.8 373.5 617.8]/Border[0 0 0]/Dest[1268 0 R/XYZ 0 560 0]>>endobj
+155 0 obj<</Subtype/Link/Rect[144.0 591.6 447.7 604.6]/Border[0 0 0]/Dest[1268 0 R/XYZ 0 126 0]>>endobj
+156 0 obj<</Subtype/Link/Rect[108.0 578.4 436.5 591.4]/Border[0 0 0]/Dest[1276 0 R/XYZ 0 135 0]>>endobj
+157 0 obj<</Subtype/Link/Rect[72.0 552.0 518.1 565.0]/Border[0 0 0]/Dest[1282 0 R/XYZ 0 734 0]>>endobj
+158 0 obj<</Subtype/Link/Rect[108.0 538.8 224.7 551.8]/Border[0 0 0]/Dest[1282 0 R/XYZ 0 672 0]>>endobj
+159 0 obj<</Subtype/Link/Rect[108.0 525.6 186.5 538.6]/Border[0 0 0]/Dest[1282 0 R/XYZ 0 597 0]>>endobj
+160 0 obj<</Subtype/Link/Rect[108.0 512.4 364.6 525.4]/Border[0 0 0]/Dest[1282 0 R/XYZ 0 225 0]>>endobj
+161 0 obj<</Subtype/Link/Rect[144.0 499.2 405.8 512.2]/Border[0 0 0]/Dest[1284 0 R/XYZ 0 734 0]>>endobj
+162 0 obj<</Subtype/Link/Rect[144.0 486.0 292.5 499.0]/Border[0 0 0]/Dest[1284 0 R/XYZ 0 609 0]>>endobj
+163 0 obj<</Subtype/Link/Rect[108.0 472.8 331.3 485.8]/Border[0 0 0]/Dest[1284 0 R/XYZ 0 524 0]>>endobj
+164 0 obj<</Subtype/Link/Rect[108.0 459.6 273.6 472.6]/Border[0 0 0]/Dest[1284 0 R/XYZ 0 383 0]>>endobj
+165 0 obj<</Subtype/Link/Rect[144.0 446.4 351.1 459.4]/Border[0 0 0]/Dest[1286 0 R/XYZ 0 620 0]>>endobj
+166 0 obj<</Subtype/Link/Rect[72.0 420.0 484.2 433.0]/Border[0 0 0]/Dest[1288 0 R/XYZ 0 734 0]>>endobj
+167 0 obj<</Subtype/Link/Rect[108.0 406.8 168.2 419.8]/Border[0 0 0]/Dest[1288 0 R/XYZ 0 672 0]>>endobj
+168 0 obj<</Subtype/Link/Rect[108.0 393.6 187.1 406.6]/Border[0 0 0]/Dest[1288 0 R/XYZ 0 412 0]>>endobj
+169 0 obj<</Subtype/Link/Rect[108.0 380.4 245.2 393.4]/Border[0 0 0]/Dest[1290 0 R/XYZ 0 573 0]>>endobj
+170 0 obj<</Subtype/Link/Rect[108.0 367.2 384.2 380.2]/Border[0 0 0]/Dest[1290 0 R/XYZ 0 471 0]>>endobj
+171 0 obj<</Subtype/Link/Rect[108.0 354.0 273.0 367.0]/Border[0 0 0]/Dest[1292 0 R/XYZ 0 734 0]>>endobj
+172 0 obj<</Subtype/Link/Rect[144.0 340.8 291.6 353.8]/Border[0 0 0]/Dest[1292 0 R/XYZ 0 700 0]>>endobj
+173 0 obj<</Subtype/Link/Rect[144.0 327.6 263.5 340.6]/Border[0 0 0]/Dest[1292 0 R/XYZ 0 143 0]>>endobj
+174 0 obj<</Subtype/Link/Rect[108.0 314.4 287.0 327.4]/Border[0 0 0]/Dest[1294 0 R/XYZ 0 243 0]>>endobj
+175 0 obj<</Subtype/Link/Rect[108.0 301.2 256.2 314.2]/Border[0 0 0]/Dest[1296 0 R/XYZ 0 718 0]>>endobj
+176 0 obj<</Subtype/Link/Rect[108.0 288.0 330.7 301.0]/Border[0 0 0]/Dest[1296 0 R/XYZ 0 336 0]>>endobj
+177 0 obj<</Subtype/Link/Rect[108.0 274.8 324.3 287.8]/Border[0 0 0]/Dest[1298 0 R/XYZ 0 322 0]>>endobj
+178 0 obj<</Subtype/Link/Rect[108.0 261.6 185.9 274.6]/Border[0 0 0]/Dest[1300 0 R/XYZ 0 492 0]>>endobj
+179 0 obj<</Subtype/Link/Rect[72.0 235.2 347.9 248.2]/Border[0 0 0]/Dest[1302 0 R/XYZ 0 734 0]>>endobj
+180 0 obj<</Subtype/Link/Rect[108.0 222.0 323.1 235.0]/Border[0 0 0]/Dest[1302 0 R/XYZ 0 500 0]>>endobj
+181 0 obj<</Subtype/Link/Rect[108.0 208.8 324.9 221.8]/Border[0 0 0]/Dest[1302 0 R/XYZ 0 393 0]>>endobj
+182 0 obj<</Subtype/Link/Rect[108.0 195.6 203.3 208.6]/Border[0 0 0]/Dest[1302 0 R/XYZ 0 217 0]>>endobj
+183 0 obj<</Subtype/Link/Rect[108.0 182.4 244.9 195.4]/Border[0 0 0]/Dest[1304 0 R/XYZ 0 530 0]>>endobj
+184 0 obj<</Subtype/Link/Rect[108.0 169.2 258.9 182.2]/Border[0 0 0]/Dest[1304 0 R/XYZ 0 213 0]>>endobj
+185 0 obj<</Subtype/Link/Rect[144.0 156.0 242.1 169.0]/Border[0 0 0]/Dest[1304 0 R/XYZ 0 125 0]>>endobj
+186 0 obj<</Subtype/Link/Rect[108.0 142.8 230.2 155.8]/Border[0 0 0]/Dest[1306 0 R/XYZ 0 665 0]>>endobj
+187 0 obj<</Subtype/Link/Rect[108.0 129.6 233.6 142.6]/Border[0 0 0]/Dest[1306 0 R/XYZ 0 577 0]>>endobj
+188 0 obj<</Subtype/Link/Rect[108.0 116.4 158.4 129.4]/Border[0 0 0]/Dest[1306 0 R/XYZ 0 502 0]>>endobj
+189 0 obj<</Subtype/Link/Rect[72.0 90.0 268.2 103.0]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 734 0]>>endobj
+190 0 obj<</Subtype/Link/Rect[108.0 76.8 231.7 89.8]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 696 0]>>endobj
+191 0 obj<</Subtype/Link/Rect[108.0 63.6 253.4 76.6]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 515 0]>>endobj
+192 0 obj[148 0 R
149 0 R
150 0 R
151 0 R
181 0 R
182 0 R
183 0 R
-184 0 R]endobj
-186 0 obj<</Subtype/Link/Rect[72.0 684.0 431.7 697.0]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 734 0]>>endobj
-187 0 obj<</Subtype/Link/Rect[108.0 670.8 265.4 683.8]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 351 0]>>endobj
-188 0 obj<</Subtype/Link/Rect[126.0 657.6 213.4 670.6]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 209 0]>>endobj
-189 0 obj<</Subtype/Link/Rect[126.0 644.4 220.1 657.4]/Border[0 0 0]/Dest[1588 0 R/XYZ 0 599 0]>>endobj
-190 0 obj<</Subtype/Link/Rect[126.0 631.2 244.6 644.2]/Border[0 0 0]/Dest[1588 0 R/XYZ 0 330 0]>>endobj
-191 0 obj<</Subtype/Link/Rect[108.0 618.0 183.5 631.0]/Border[0 0 0]/Dest[1602 0 R/XYZ 0 296 0]>>endobj
-192 0 obj<</Subtype/Link/Rect[108.0 604.8 182.9 617.8]/Border[0 0 0]/Dest[1604 0 R/XYZ 0 734 0]>>endobj
-193 0 obj<</Subtype/Link/Rect[72.0 578.4 236.7 591.4]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 734 0]>>endobj
-194 0 obj<</Subtype/Link/Rect[108.0 565.2 171.3 578.2]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 696 0]>>endobj
-195 0 obj<</Subtype/Link/Rect[108.0 552.0 186.5 565.0]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 595 0]>>endobj
-196 0 obj<</Subtype/Link/Rect[108.0 538.8 351.2 551.8]/Border[0 0 0]/Dest[1608 0 R/XYZ 0 568 0]>>endobj
-197 0 obj<</Subtype/Link/Rect[108.0 525.6 309.7 538.6]/Border[0 0 0]/Dest[1608 0 R/XYZ 0 414 0]>>endobj
-198 0 obj<</Subtype/Link/Rect[72.0 499.2 224.5 512.2]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 734 0]>>endobj
-199 0 obj<</Subtype/Link/Rect[108.0 486.0 171.3 499.0]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 696 0]>>endobj
-200 0 obj<</Subtype/Link/Rect[108.0 472.8 160.2 485.8]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 608 0]>>endobj
-201 0 obj<</Subtype/Link/Rect[72.0 446.4 484.2 459.4]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 734 0]>>endobj
-202 0 obj<</Subtype/Link/Rect[108.0 433.2 168.2 446.2]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 672 0]>>endobj
-203 0 obj<</Subtype/Link/Rect[108.0 420.0 187.1 433.0]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 412 0]>>endobj
-204 0 obj<</Subtype/Link/Rect[108.0 406.8 245.2 419.8]/Border[0 0 0]/Dest[1614 0 R/XYZ 0 573 0]>>endobj
-205 0 obj<</Subtype/Link/Rect[108.0 393.6 384.2 406.6]/Border[0 0 0]/Dest[1614 0 R/XYZ 0 471 0]>>endobj
-206 0 obj<</Subtype/Link/Rect[108.0 380.4 273.0 393.4]/Border[0 0 0]/Dest[1616 0 R/XYZ 0 734 0]>>endobj
-207 0 obj<</Subtype/Link/Rect[126.0 367.2 273.6 380.2]/Border[0 0 0]/Dest[1616 0 R/XYZ 0 700 0]>>endobj
-208 0 obj<</Subtype/Link/Rect[126.0 354.0 245.5 367.0]/Border[0 0 0]/Dest[1616 0 R/XYZ 0 143 0]>>endobj
-209 0 obj<</Subtype/Link/Rect[108.0 340.8 287.0 353.8]/Border[0 0 0]/Dest[1618 0 R/XYZ 0 243 0]>>endobj
-210 0 obj<</Subtype/Link/Rect[108.0 327.6 256.2 340.6]/Border[0 0 0]/Dest[1620 0 R/XYZ 0 718 0]>>endobj
-211 0 obj<</Subtype/Link/Rect[108.0 314.4 330.7 327.4]/Border[0 0 0]/Dest[1620 0 R/XYZ 0 336 0]>>endobj
-212 0 obj<</Subtype/Link/Rect[108.0 301.2 324.3 314.2]/Border[0 0 0]/Dest[1622 0 R/XYZ 0 322 0]>>endobj
-213 0 obj<</Subtype/Link/Rect[108.0 288.0 185.9 301.0]/Border[0 0 0]/Dest[1624 0 R/XYZ 0 492 0]>>endobj
-214 0 obj<</Subtype/Link/Rect[72.0 261.6 342.4 274.6]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 734 0]>>endobj
-215 0 obj<</Subtype/Link/Rect[108.0 248.4 187.1 261.4]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 672 0]>>endobj
-216 0 obj<</Subtype/Link/Rect[108.0 235.2 247.6 248.2]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 557 0]>>endobj
-217 0 obj<</Subtype/Link/Rect[126.0 222.0 248.8 235.0]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 469 0]>>endobj
-218 0 obj<</Subtype/Link/Rect[126.0 208.8 223.8 221.8]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 358 0]>>endobj
-219 0 obj<</Subtype/Link/Rect[72.0 182.4 252.6 195.4]/Border[0 0 0]/Dest[1630 0 R/XYZ 0 734 0]>>endobj
-220 0 obj<</Subtype/Link/Rect[72.0 156.0 255.6 169.0]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 734 0]>>endobj
-221 0 obj<</Subtype/Link/Rect[108.0 142.8 190.8 155.8]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 696 0]>>endobj
-222 0 obj<</Subtype/Link/Rect[108.0 129.6 169.4 142.6]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 449 0]>>endobj
-223 0 obj<</Subtype/Link/Rect[126.0 116.4 202.4 129.4]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 416 0]>>endobj
-224 0 obj<</Subtype/Link/Rect[126.0 103.2 229.0 116.2]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 146 0]>>endobj
-225 0 obj<</Subtype/Link/Rect[126.0 90.0 328.3 103.0]/Border[0 0 0]/Dest[1634 0 R/XYZ 0 652 0]>>endobj
-226 0 obj<</Subtype/Link/Rect[108.0 76.8 197.8 89.8]/Border[0 0 0]/Dest[1634 0 R/XYZ 0 515 0]>>endobj
-227 0 obj<</Subtype/Link/Rect[108.0 63.6 175.2 76.6]/Border[0 0 0]/Dest[1634 0 R/XYZ 0 255 0]>>endobj
-228 0 obj[186 0 R
+184 0 R
+185 0 R
+186 0 R
187 0 R
188 0 R
189 0 R
190 0 R
-191 0 R
-192 0 R
-193 0 R
+191 0 R]endobj
+193 0 obj<</Subtype/Link/Rect[72.0 684.0 268.2 697.0]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 734 0]>>endobj
+194 0 obj<</Subtype/Link/Rect[108.0 670.8 216.8 683.8]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 137 0]>>endobj
+195 0 obj<</Subtype/Link/Rect[108.0 657.6 241.5 670.6]/Border[0 0 0]/Dest[1310 0 R/XYZ 0 533 0]>>endobj
+196 0 obj<</Subtype/Link/Rect[144.0 644.4 354.8 657.4]/Border[0 0 0]/Dest[1310 0 R/XYZ 0 273 0]>>endobj
+197 0 obj<</Subtype/Link/Rect[108.0 631.2 245.8 644.2]/Border[0 0 0]/Dest[1316 0 R/XYZ 0 560 0]>>endobj
+198 0 obj<</Subtype/Link/Rect[108.0 618.0 315.8 631.0]/Border[0 0 0]/Dest[1318 0 R/XYZ 0 613 0]>>endobj
+199 0 obj<</Subtype/Link/Rect[108.0 604.8 290.1 617.8]/Border[0 0 0]/Dest[1320 0 R/XYZ 0 622 0]>>endobj
+200 0 obj<</Subtype/Link/Rect[108.0 591.6 270.5 604.6]/Border[0 0 0]/Dest[1320 0 R/XYZ 0 266 0]>>endobj
+201 0 obj<</Subtype/Link/Rect[108.0 578.4 281.8 591.4]/Border[0 0 0]/Dest[1322 0 R/XYZ 0 520 0]>>endobj
+202 0 obj<</Subtype/Link/Rect[108.0 565.2 276.6 578.2]/Border[0 0 0]/Dest[1324 0 R/XYZ 0 734 0]>>endobj
+203 0 obj<</Subtype/Link/Rect[108.0 552.0 221.7 565.0]/Border[0 0 0]/Dest[1324 0 R/XYZ 0 645 0]>>endobj
+204 0 obj<</Subtype/Link/Rect[72.0 525.6 255.6 538.6]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 734 0]>>endobj
+205 0 obj<</Subtype/Link/Rect[108.0 512.4 190.8 525.4]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 696 0]>>endobj
+206 0 obj<</Subtype/Link/Rect[108.0 499.2 169.4 512.2]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 449 0]>>endobj
+207 0 obj<</Subtype/Link/Rect[144.0 486.0 220.4 499.0]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 416 0]>>endobj
+208 0 obj<</Subtype/Link/Rect[144.0 472.8 247.0 485.8]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 146 0]>>endobj
+209 0 obj<</Subtype/Link/Rect[144.0 459.6 346.3 472.6]/Border[0 0 0]/Dest[1328 0 R/XYZ 0 652 0]>>endobj
+210 0 obj<</Subtype/Link/Rect[108.0 446.4 197.8 459.4]/Border[0 0 0]/Dest[1328 0 R/XYZ 0 515 0]>>endobj
+211 0 obj<</Subtype/Link/Rect[108.0 433.2 175.2 446.2]/Border[0 0 0]/Dest[1328 0 R/XYZ 0 255 0]>>endobj
+212 0 obj<</Subtype/Link/Rect[108.0 420.0 175.8 433.0]/Border[0 0 0]/Dest[1330 0 R/XYZ 0 718 0]>>endobj
+213 0 obj<</Subtype/Link/Rect[108.0 406.8 169.4 419.8]/Border[0 0 0]/Dest[1330 0 R/XYZ 0 537 0]>>endobj
+214 0 obj<</Subtype/Link/Rect[108.0 393.6 189.3 406.6]/Border[0 0 0]/Dest[1330 0 R/XYZ 0 409 0]>>endobj
+215 0 obj<</Subtype/Link/Rect[108.0 380.4 174.6 393.4]/Border[0 0 0]/Dest[1330 0 R/XYZ 0 189 0]>>endobj
+216 0 obj<</Subtype/Link/Rect[108.0 367.2 180.1 380.2]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 734 0]>>endobj
+217 0 obj<</Subtype/Link/Rect[108.0 354.0 180.1 367.0]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 645 0]>>endobj
+218 0 obj<</Subtype/Link/Rect[108.0 340.8 182.5 353.8]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 477 0]>>endobj
+219 0 obj<</Subtype/Link/Rect[108.0 327.6 208.2 340.6]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 349 0]>>endobj
+220 0 obj<</Subtype/Link/Rect[108.0 314.4 217.4 327.4]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 129 0]>>endobj
+221 0 obj<</Subtype/Link/Rect[108.0 301.2 194.8 314.2]/Border[0 0 0]/Dest[1334 0 R/XYZ 0 639 0]>>endobj
+222 0 obj<</Subtype/Link/Rect[108.0 288.0 194.2 301.0]/Border[0 0 0]/Dest[1334 0 R/XYZ 0 511 0]>>endobj
+223 0 obj<</Subtype/Link/Rect[108.0 274.8 196.0 287.8]/Border[0 0 0]/Dest[1334 0 R/XYZ 0 436 0]>>endobj
+224 0 obj<</Subtype/Link/Rect[108.0 261.6 188.7 274.6]/Border[0 0 0]/Dest[1336 0 R/XYZ 0 388 0]>>endobj
+225 0 obj<</Subtype/Link/Rect[72.0 235.2 271.5 248.2]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 734 0]>>endobj
+226 0 obj<</Subtype/Link/Rect[108.0 222.0 215.5 235.0]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 668 0]>>endobj
+227 0 obj<</Subtype/Link/Rect[108.0 208.8 182.0 221.8]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 461 0]>>endobj
+228 0 obj<</Subtype/Link/Rect[144.0 195.6 532.3 208.6]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 427 0]>>endobj
+229 0 obj<</Subtype/Link/Rect[144.0 182.4 499.9 195.4]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 734 0]>>endobj
+230 0 obj<</Subtype/Link/Rect[144.0 169.2 181.6 182.2]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 734 0]>>endobj
+231 0 obj<</Subtype/Link/Rect[144.0 156.0 488.9 169.0]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 523 0]>>endobj
+232 0 obj<</Subtype/Link/Rect[144.0 142.8 458.7 155.8]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 408 0]>>endobj
+233 0 obj<</Subtype/Link/Rect[108.0 129.6 248.2 142.6]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 151 0]>>endobj
+234 0 obj<</Subtype/Link/Rect[144.0 116.4 351.5 129.4]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 118 0]>>endobj
+235 0 obj<</Subtype/Link/Rect[144.0 103.2 350.5 116.2]/Border[0 0 0]/Dest[1342 0 R/XYZ 0 626 0]>>endobj
+236 0 obj<</Subtype/Link/Rect[144.0 90.0 334.3 103.0]/Border[0 0 0]/Dest[1342 0 R/XYZ 0 475 0]>>endobj
+237 0 obj<</Subtype/Link/Rect[144.0 76.8 300.1 89.8]/Border[0 0 0]/Dest[1342 0 R/XYZ 0 377 0]>>endobj
+238 0 obj<</Subtype/Link/Rect[108.0 63.6 206.7 76.6]/Border[0 0 0]/Dest[1342 0 R/XYZ 0 292 0]>>endobj
+239 0 obj[193 0 R
194 0 R
195 0 R
196 0 R
224 0 R
225 0 R
226 0 R
-227 0 R]endobj
-229 0 obj<</Subtype/Link/Rect[72.0 684.0 255.6 697.0]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 734 0]>>endobj
-230 0 obj<</Subtype/Link/Rect[108.0 670.8 175.8 683.8]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 718 0]>>endobj
-231 0 obj<</Subtype/Link/Rect[108.0 657.6 169.4 670.6]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 537 0]>>endobj
-232 0 obj<</Subtype/Link/Rect[108.0 644.4 189.3 657.4]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 409 0]>>endobj
-233 0 obj<</Subtype/Link/Rect[108.0 631.2 174.6 644.2]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 189 0]>>endobj
-234 0 obj<</Subtype/Link/Rect[108.0 618.0 180.1 631.0]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 734 0]>>endobj
-235 0 obj<</Subtype/Link/Rect[108.0 604.8 180.1 617.8]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 645 0]>>endobj
-236 0 obj<</Subtype/Link/Rect[108.0 591.6 182.5 604.6]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 477 0]>>endobj
-237 0 obj<</Subtype/Link/Rect[108.0 578.4 208.2 591.4]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 349 0]>>endobj
-238 0 obj<</Subtype/Link/Rect[108.0 565.2 217.4 578.2]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 129 0]>>endobj
-239 0 obj<</Subtype/Link/Rect[108.0 552.0 194.8 565.0]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 639 0]>>endobj
-240 0 obj<</Subtype/Link/Rect[108.0 538.8 194.2 551.8]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 511 0]>>endobj
-241 0 obj<</Subtype/Link/Rect[108.0 525.6 196.0 538.6]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 436 0]>>endobj
-242 0 obj<</Subtype/Link/Rect[108.0 512.4 188.7 525.4]/Border[0 0 0]/Dest[1642 0 R/XYZ 0 388 0]>>endobj
-243 0 obj<</Subtype/Link/Rect[72.0 486.0 144.7 499.0]/Border[0 0 0]/Dest[1644 0 R/XYZ 0 734 0]>>endobj
-244 0 obj<</Subtype/Link/Rect[72.0 459.6 181.1 472.6]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 734 0]>>endobj
-245 0 obj<</Subtype/Link/Rect[108.0 446.4 162.7 459.4]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 655 0]>>endobj
-246 0 obj<</Subtype/Link/Rect[108.0 433.2 178.9 446.2]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 408 0]>>endobj
-247 0 obj<</Subtype/Link/Rect[108.0 420.0 160.2 433.0]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 293 0]>>endobj
-248 0 obj<</Subtype/Link/Rect[108.0 406.8 260.5 419.8]/Border[0 0 0]/Dest[1648 0 R/XYZ 0 228 0]>>endobj
-249 0 obj<</Subtype/Link/Rect[72.0 380.4 271.5 393.4]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 734 0]>>endobj
-250 0 obj<</Subtype/Link/Rect[108.0 367.2 215.5 380.2]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 668 0]>>endobj
-251 0 obj<</Subtype/Link/Rect[108.0 354.0 182.0 367.0]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 461 0]>>endobj
-252 0 obj<</Subtype/Link/Rect[126.0 340.8 514.3 353.8]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 427 0]>>endobj
-253 0 obj<</Subtype/Link/Rect[126.0 327.6 519.5 340.6]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 734 0]>>endobj
-254 0 obj<</Subtype/Link/Rect[126.0 314.4 470.9 327.4]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 523 0]>>endobj
-255 0 obj<</Subtype/Link/Rect[126.0 301.2 440.7 314.2]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 408 0]>>endobj
-256 0 obj<</Subtype/Link/Rect[108.0 288.0 248.2 301.0]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 151 0]>>endobj
-257 0 obj<</Subtype/Link/Rect[126.0 274.8 333.5 287.8]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 118 0]>>endobj
-258 0 obj<</Subtype/Link/Rect[126.0 261.6 332.5 274.6]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 626 0]>>endobj
-259 0 obj<</Subtype/Link/Rect[126.0 248.4 316.3 261.4]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 475 0]>>endobj
-260 0 obj<</Subtype/Link/Rect[126.0 235.2 282.1 248.2]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 377 0]>>endobj
-261 0 obj<</Subtype/Link/Rect[108.0 222.0 206.7 235.0]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 292 0]>>endobj
-262 0 obj<</Subtype/Link/Rect[108.0 208.8 267.8 221.8]/Border[0 0 0]/Dest[1656 0 R/XYZ 0 718 0]>>endobj
-263 0 obj<</Subtype/Link/Rect[72.0 182.4 204.0 195.4]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 734 0]>>endobj
-264 0 obj<</Subtype/Link/Rect[108.0 169.2 187.1 182.2]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 696 0]>>endobj
-265 0 obj<</Subtype/Link/Rect[108.0 156.0 188.0 169.0]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 423 0]>>endobj
-266 0 obj<</Subtype/Link/Rect[108.0 142.8 190.5 155.8]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 282 0]>>endobj
-267 0 obj<</Subtype/Link/Rect[108.0 129.6 195.4 142.6]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 613 0]>>endobj
-268 0 obj<</Subtype/Link/Rect[108.0 116.4 267.8 129.4]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 260 0]>>endobj
-269 0 obj<</Subtype/Link/Rect[108.0 103.2 166.4 116.2]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 159 0]>>endobj
-270 0 obj[229 0 R
+227 0 R
+228 0 R
+229 0 R
230 0 R
231 0 R
232 0 R
235 0 R
236 0 R
237 0 R
-238 0 R
-239 0 R
-240 0 R
+238 0 R]endobj
+240 0 obj<</Subtype/Link/Rect[72.0 684.0 271.5 697.0]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 734 0]>>endobj
+241 0 obj<</Subtype/Link/Rect[108.0 670.8 267.8 683.8]/Border[0 0 0]/Dest[1344 0 R/XYZ 0 718 0]>>endobj
+242 0 obj<</Subtype/Link/Rect[72.0 644.4 342.4 657.4]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 734 0]>>endobj
+243 0 obj<</Subtype/Link/Rect[108.0 631.2 187.1 644.2]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 672 0]>>endobj
+244 0 obj<</Subtype/Link/Rect[108.0 618.0 247.6 631.0]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 557 0]>>endobj
+245 0 obj<</Subtype/Link/Rect[144.0 604.8 266.8 617.8]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 469 0]>>endobj
+246 0 obj<</Subtype/Link/Rect[144.0 591.6 241.8 604.6]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 358 0]>>endobj
+247 0 obj<</Subtype/Link/Rect[72.0 565.2 204.0 578.2]/Border[0 0 0]/Dest[1350 0 R/XYZ 0 734 0]>>endobj
+248 0 obj<</Subtype/Link/Rect[108.0 552.0 187.1 565.0]/Border[0 0 0]/Dest[1350 0 R/XYZ 0 696 0]>>endobj
+249 0 obj<</Subtype/Link/Rect[108.0 538.8 188.0 551.8]/Border[0 0 0]/Dest[1350 0 R/XYZ 0 436 0]>>endobj
+250 0 obj<</Subtype/Link/Rect[108.0 525.6 190.5 538.6]/Border[0 0 0]/Dest[1350 0 R/XYZ 0 295 0]>>endobj
+251 0 obj<</Subtype/Link/Rect[108.0 512.4 195.4 525.4]/Border[0 0 0]/Dest[1352 0 R/XYZ 0 639 0]>>endobj
+252 0 obj<</Subtype/Link/Rect[108.0 499.2 267.8 512.2]/Border[0 0 0]/Dest[1352 0 R/XYZ 0 287 0]>>endobj
+253 0 obj<</Subtype/Link/Rect[108.0 486.0 166.4 499.0]/Border[0 0 0]/Dest[1352 0 R/XYZ 0 185 0]>>endobj
+254 0 obj<</Subtype/Link/Rect[72.0 459.6 252.6 472.6]/Border[0 0 0]/Dest[1354 0 R/XYZ 0 734 0]>>endobj
+255 0 obj<</Subtype/Link/Rect[72.0 433.2 181.1 446.2]/Border[0 0 0]/Dest[1356 0 R/XYZ 0 734 0]>>endobj
+256 0 obj<</Subtype/Link/Rect[108.0 420.0 162.7 433.0]/Border[0 0 0]/Dest[1356 0 R/XYZ 0 655 0]>>endobj
+257 0 obj<</Subtype/Link/Rect[108.0 406.8 178.9 419.8]/Border[0 0 0]/Dest[1356 0 R/XYZ 0 447 0]>>endobj
+258 0 obj<</Subtype/Link/Rect[108.0 393.6 160.2 406.6]/Border[0 0 0]/Dest[1356 0 R/XYZ 0 333 0]>>endobj
+259 0 obj[240 0 R
241 0 R
242 0 R
243 0 R
255 0 R
256 0 R
257 0 R
-258 0 R
-259 0 R
-260 0 R
-261 0 R
-262 0 R
+258 0 R]endobj
+260 0 obj<</S/URI/URI(http://www.samba.org/)>>endobj
+261 0 obj<</Subtype/Link/Rect[185.6 631.0 289.8 644.0]/Border[0 0 0]/A 260 0 R>>endobj
+262 0 obj<</S/URI/URI(mailto:jerry@samba.org)>>endobj
+263 0 obj<</Subtype/Link/Rect[72.0 617.8 148.4 630.8]/Border[0 0 0]/A 262 0 R>>endobj
+264 0 obj<</S/URI/URI(http://www.fsf.org/licenses/gpl.txt)>>endobj
+265 0 obj<</Subtype/Link/Rect[72.0 565.0 223.3 578.0]/Border[0 0 0]/A 264 0 R>>endobj
+266 0 obj<</Subtype/Link/Rect[80.2 499.0 223.9 512.0]/Border[0 0 0]/Dest[1124 0 R/XYZ 0 734 0]>>endobj
+267 0 obj<</Subtype/Link/Rect[124.5 485.8 249.8 498.8]/Border[0 0 0]/Dest[1124 0 R/XYZ 0 696 0]>>endobj
+268 0 obj<</Subtype/Link/Rect[124.5 472.6 255.0 485.6]/Border[0 0 0]/Dest[1124 0 R/XYZ 0 568 0]>>endobj
+269 0 obj<</Subtype/Link/Rect[124.5 459.4 258.3 472.4]/Border[0 0 0]/Dest[1124 0 R/XYZ 0 163 0]>>endobj
+270 0 obj<</Subtype/Link/Rect[124.5 446.2 309.7 459.2]/Border[0 0 0]/Dest[1126 0 R/XYZ 0 734 0]>>endobj
+271 0 obj<</Subtype/Link/Rect[124.5 433.0 312.7 446.0]/Border[0 0 0]/Dest[1126 0 R/XYZ 0 385 0]>>endobj
+272 0 obj<</Subtype/Link/Rect[124.5 419.8 284.9 432.8]/Border[0 0 0]/Dest[1126 0 R/XYZ 0 283 0]>>endobj
+273 0 obj<</Subtype/Link/Rect[168.8 406.6 316.0 419.6]/Border[0 0 0]/Dest[1126 0 R/XYZ 0 129 0]>>endobj
+274 0 obj<</Subtype/Link/Rect[168.8 393.4 366.4 406.4]/Border[0 0 0]/Dest[1128 0 R/XYZ 0 303 0]>>endobj
+275 0 obj<</Subtype/Link/Rect[124.5 380.2 364.7 393.2]/Border[0 0 0]/Dest[1130 0 R/XYZ 0 718 0]>>endobj
+276 0 obj<</Subtype/Link/Rect[124.5 367.0 313.9 380.0]/Border[0 0 0]/Dest[1130 0 R/XYZ 0 551 0]>>endobj
+277 0 obj<</Subtype/Link/Rect[124.5 353.8 500.6 366.8]/Border[0 0 0]/Dest[1130 0 R/XYZ 0 383 0]>>endobj
+278 0 obj<</Subtype/Link/Rect[130.0 340.6 257.3 353.6]/Border[0 0 0]/Dest[1130 0 R/XYZ 0 169 0]>>endobj
+279 0 obj<</Subtype/Link/Rect[174.2 327.4 273.2 340.4]/Border[0 0 0]/Dest[1132 0 R/XYZ 0 652 0]>>endobj
+280 0 obj<</Subtype/Link/Rect[174.2 314.2 221.9 327.2]/Border[0 0 0]/Dest[1132 0 R/XYZ 0 594 0]>>endobj
+281 0 obj<</Subtype/Link/Rect[174.2 301.0 303.2 314.0]/Border[0 0 0]/Dest[1132 0 R/XYZ 0 509 0]>>endobj
+282 0 obj<</Subtype/Link/Rect[174.2 287.8 331.6 300.8]/Border[0 0 0]/Dest[1132 0 R/XYZ 0 200 0]>>endobj
+283 0 obj<</Subtype/Link/Rect[174.2 274.6 212.4 287.6]/Border[0 0 0]/Dest[1134 0 R/XYZ 0 718 0]>>endobj
+284 0 obj<</Subtype/Link/Rect[174.2 261.4 269.0 274.4]/Border[0 0 0]/Dest[1134 0 R/XYZ 0 264 0]>>endobj
+285 0 obj<</Subtype/Link/Rect[80.2 248.2 219.0 261.2]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 734 0]>>endobj
+286 0 obj<</Subtype/Link/Rect[124.5 235.0 182.2 248.0]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 696 0]>>endobj
+287 0 obj<</Subtype/Link/Rect[124.5 221.8 182.9 234.8]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 529 0]>>endobj
+288 0 obj<</Subtype/Link/Rect[124.5 208.6 149.9 221.6]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 173 0]>>endobj
+289 0 obj<</Subtype/Link/Rect[168.8 195.4 198.1 208.4]/Border[0 0 0]/Dest[1136 0 R/XYZ 0 139 0]>>endobj
+290 0 obj<</Subtype/Link/Rect[168.8 182.2 198.1 195.2]/Border[0 0 0]/Dest[1138 0 R/XYZ 0 705 0]>>endobj
+291 0 obj<</Subtype/Link/Rect[168.8 169.0 198.1 182.0]/Border[0 0 0]/Dest[1138 0 R/XYZ 0 501 0]>>endobj
+292 0 obj<</Subtype/Link/Rect[168.8 155.8 198.1 168.8]/Border[0 0 0]/Dest[1140 0 R/XYZ 0 586 0]>>endobj
+293 0 obj<</Subtype/Link/Rect[168.8 142.6 198.1 155.6]/Border[0 0 0]/Dest[1140 0 R/XYZ 0 435 0]>>endobj
+294 0 obj<</Subtype/Link/Rect[168.8 129.4 198.1 142.4]/Border[0 0 0]/Dest[1140 0 R/XYZ 0 311 0]>>endobj
+295 0 obj<</Subtype/Link/Rect[168.8 116.2 198.1 129.2]/Border[0 0 0]/Dest[1142 0 R/XYZ 0 718 0]>>endobj
+296 0 obj<</Subtype/Link/Rect[168.8 103.0 198.1 116.0]/Border[0 0 0]/Dest[1142 0 R/XYZ 0 356 0]>>endobj
+297 0 obj<</Subtype/Link/Rect[168.8 89.8 198.1 102.8]/Border[0 0 0]/Dest[1144 0 R/XYZ 0 679 0]>>endobj
+298 0 obj<</Subtype/Link/Rect[174.2 76.6 209.1 89.6]/Border[0 0 0]/Dest[1144 0 R/XYZ 0 488 0]>>endobj
+299 0 obj<</Subtype/Link/Rect[174.2 63.4 209.1 76.4]/Border[0 0 0]/Dest[1144 0 R/XYZ 0 351 0]>>endobj
+300 0 obj[261 0 R
263 0 R
-264 0 R
265 0 R
266 0 R
267 0 R
268 0 R
-269 0 R]endobj
-271 0 obj<</Subtype/Link/Rect[72.0 684.0 273.0 697.0]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 734 0]>>endobj
-272 0 obj<</Subtype/Link/Rect[108.0 670.8 187.1 683.8]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 696 0]>>endobj
-273 0 obj<</Subtype/Link/Rect[108.0 657.6 190.2 670.6]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 529 0]>>endobj
-274 0 obj<</Subtype/Link/Rect[108.0 644.4 156.0 657.4]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 199 0]>>endobj
-275 0 obj<</Subtype/Link/Rect[126.0 631.2 186.2 644.2]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 165 0]>>endobj
-276 0 obj<</Subtype/Link/Rect[126.0 618.0 186.2 631.0]/Border[0 0 0]/Dest[1664 0 R/XYZ 0 734 0]>>endobj
-277 0 obj<</Subtype/Link/Rect[126.0 604.8 186.2 617.8]/Border[0 0 0]/Dest[1664 0 R/XYZ 0 530 0]>>endobj
-278 0 obj<</Subtype/Link/Rect[126.0 591.6 186.2 604.6]/Border[0 0 0]/Dest[1666 0 R/XYZ 0 626 0]>>endobj
-279 0 obj<</Subtype/Link/Rect[126.0 578.4 186.2 591.4]/Border[0 0 0]/Dest[1666 0 R/XYZ 0 475 0]>>endobj
-280 0 obj<</Subtype/Link/Rect[126.0 565.2 186.2 578.2]/Border[0 0 0]/Dest[1666 0 R/XYZ 0 351 0]>>endobj
-281 0 obj<</Subtype/Link/Rect[126.0 552.0 186.2 565.0]/Border[0 0 0]/Dest[1668 0 R/XYZ 0 734 0]>>endobj
-282 0 obj<</Subtype/Link/Rect[126.0 538.8 186.2 551.8]/Border[0 0 0]/Dest[1668 0 R/XYZ 0 371 0]>>endobj
-283 0 obj<</Subtype/Link/Rect[126.0 525.6 186.2 538.6]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 705 0]>>endobj
-284 0 obj<</Subtype/Link/Rect[126.0 512.4 197.2 525.4]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 515 0]>>endobj
-285 0 obj<</Subtype/Link/Rect[126.0 499.2 197.2 512.2]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 377 0]>>endobj
-286 0 obj<</Subtype/Link/Rect[108.0 486.0 226.9 499.0]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 239 0]>>endobj
-287 0 obj[271 0 R
+269 0 R
+270 0 R
+271 0 R
272 0 R
273 0 R
274 0 R
283 0 R
284 0 R
285 0 R
-286 0 R]endobj
-288 0 obj<</S/URI/URI(http://www.samba.org/)>>endobj
-289 0 obj<</Subtype/Link/Rect[185.6 631.0 289.8 644.0]/Border[0 0 0]/A 288 0 R>>endobj
-290 0 obj<</S/URI/URI(mailto:jerry@samba.org)>>endobj
-291 0 obj<</Subtype/Link/Rect[72.0 617.8 148.4 630.8]/Border[0 0 0]/A 290 0 R>>endobj
-292 0 obj<</S/URI/URI(http://www.fsf.org/licenses/gpl.txt)>>endobj
-293 0 obj<</Subtype/Link/Rect[72.0 565.0 223.3 578.0]/Border[0 0 0]/A 292 0 R>>endobj
-294 0 obj<</Subtype/Link/Rect[78.4 499.0 170.1 512.0]/Border[0 0 0]/Dest[1394 0 R/XYZ 0 258 0]>>endobj
-295 0 obj<</Subtype/Link/Rect[116.2 485.8 259.9 498.8]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 734 0]>>endobj
-296 0 obj<</Subtype/Link/Rect[160.5 472.6 252.2 485.6]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 696 0]>>endobj
-297 0 obj<</Subtype/Link/Rect[160.5 459.4 257.4 472.4]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 568 0]>>endobj
-298 0 obj<</Subtype/Link/Rect[160.5 446.2 260.7 459.2]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 163 0]>>endobj
-299 0 obj<</Subtype/Link/Rect[160.5 433.0 312.1 446.0]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 734 0]>>endobj
-300 0 obj<</Subtype/Link/Rect[160.5 419.8 315.1 432.8]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 385 0]>>endobj
-301 0 obj<</Subtype/Link/Rect[160.5 406.6 287.3 419.6]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 257 0]>>endobj
-302 0 obj<</Subtype/Link/Rect[160.5 393.4 367.0 406.4]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 665 0]>>endobj
-303 0 obj<</Subtype/Link/Rect[160.5 380.2 316.3 393.2]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 498 0]>>endobj
-304 0 obj<</Subtype/Link/Rect[160.5 367.0 503.0 380.0]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 330 0]>>endobj
-305 0 obj<</Subtype/Link/Rect[166.0 353.8 293.3 366.8]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 734 0]>>endobj
-306 0 obj<</Subtype/Link/Rect[116.2 340.6 247.6 353.6]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 734 0]>>endobj
-307 0 obj<</Subtype/Link/Rect[160.5 327.4 260.4 340.4]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 696 0]>>endobj
-308 0 obj<</Subtype/Link/Rect[160.5 314.2 284.6 327.2]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 515 0]>>endobj
-309 0 obj<</Subtype/Link/Rect[160.5 301.0 248.5 314.0]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 137 0]>>endobj
-310 0 obj<</Subtype/Link/Rect[160.5 287.8 272.6 300.8]/Border[0 0 0]/Dest[1418 0 R/XYZ 0 533 0]>>endobj
-311 0 obj<</Subtype/Link/Rect[160.5 274.6 274.5 287.6]/Border[0 0 0]/Dest[1424 0 R/XYZ 0 560 0]>>endobj
-312 0 obj<</Subtype/Link/Rect[160.5 261.4 343.2 274.4]/Border[0 0 0]/Dest[1426 0 R/XYZ 0 613 0]>>endobj
-313 0 obj<</Subtype/Link/Rect[160.5 248.2 317.6 261.2]/Border[0 0 0]/Dest[1428 0 R/XYZ 0 622 0]>>endobj
-314 0 obj<</Subtype/Link/Rect[160.5 235.0 303.5 248.0]/Border[0 0 0]/Dest[1428 0 R/XYZ 0 266 0]>>endobj
-315 0 obj<</Subtype/Link/Rect[160.5 221.8 313.0 234.8]/Border[0 0 0]/Dest[1430 0 R/XYZ 0 520 0]>>endobj
-316 0 obj<</Subtype/Link/Rect[166.0 208.6 310.2 221.6]/Border[0 0 0]/Dest[1432 0 R/XYZ 0 734 0]>>endobj
-317 0 obj<</Subtype/Link/Rect[166.0 195.4 252.2 208.4]/Border[0 0 0]/Dest[1432 0 R/XYZ 0 645 0]>>endobj
-318 0 obj<</Subtype/Link/Rect[116.2 182.2 155.0 195.2]/Border[0 0 0]/Dest[1434 0 R/XYZ 0 734 0]>>endobj
-319 0 obj<</Subtype/Link/Rect[160.5 169.0 245.7 182.0]/Border[0 0 0]/Dest[1434 0 R/XYZ 0 696 0]>>endobj
-320 0 obj<</Subtype/Link/Rect[116.2 155.8 410.5 168.8]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 734 0]>>endobj
-321 0 obj<</Subtype/Link/Rect[160.5 142.6 211.5 155.6]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 604 0]>>endobj
-322 0 obj<</Subtype/Link/Rect[160.5 129.4 348.1 142.4]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 159 0]>>endobj
-323 0 obj<</Subtype/Link/Rect[160.5 116.2 360.7 129.2]/Border[0 0 0]/Dest[1438 0 R/XYZ 0 483 0]>>endobj
-324 0 obj<</Subtype/Link/Rect[160.5 103.0 220.1 116.0]/Border[0 0 0]/Dest[1438 0 R/XYZ 0 305 0]>>endobj
-325 0 obj<</Subtype/Link/Rect[160.5 89.8 458.7 102.8]/Border[0 0 0]/Dest[1440 0 R/XYZ 0 467 0]>>endobj
-326 0 obj<</Subtype/Link/Rect[160.5 76.6 268.4 89.6]/Border[0 0 0]/Dest[1440 0 R/XYZ 0 187 0]>>endobj
-327 0 obj<</Subtype/Link/Rect[116.2 63.4 333.5 76.4]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 734 0]>>endobj
-328 0 obj[289 0 R
+286 0 R
+287 0 R
+288 0 R
+289 0 R
+290 0 R
291 0 R
+292 0 R
293 0 R
294 0 R
295 0 R
296 0 R
297 0 R
298 0 R
-299 0 R
-300 0 R
-301 0 R
+299 0 R]endobj
+301 0 obj<</Subtype/Link/Rect[124.5 721.0 222.0 734.0]/Border[0 0 0]/Dest[1144 0 R/XYZ 0 213 0]>>endobj
+302 0 obj<</Subtype/Link/Rect[80.2 707.8 289.9 720.8]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 734 0]>>endobj
+303 0 obj<</Subtype/Link/Rect[124.5 694.6 160.9 707.6]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 672 0]>>endobj
+304 0 obj<</Subtype/Link/Rect[124.5 681.4 325.9 694.4]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 439 0]>>endobj
+305 0 obj<</Subtype/Link/Rect[171.5 668.2 237.5 681.2]/Border[0 0 0]/Dest[1146 0 R/XYZ 0 311 0]>>endobj
+306 0 obj<</Subtype/Link/Rect[171.5 655.0 277.1 668.0]/Border[0 0 0]/Dest[1148 0 R/XYZ 0 441 0]>>endobj
+307 0 obj<</Subtype/Link/Rect[171.5 641.8 263.9 654.8]/Border[0 0 0]/Dest[1148 0 R/XYZ 0 303 0]>>endobj
+308 0 obj<</Subtype/Link/Rect[171.5 628.6 290.3 641.6]/Border[0 0 0]/Dest[1148 0 R/XYZ 0 157 0]>>endobj
+309 0 obj<</Subtype/Link/Rect[124.5 615.4 378.7 628.4]/Border[0 0 0]/Dest[1150 0 R/XYZ 0 339 0]>>endobj
+310 0 obj<</Subtype/Link/Rect[168.8 602.2 289.1 615.2]/Border[0 0 0]/Dest[1152 0 R/XYZ 0 266 0]>>endobj
+311 0 obj<</Subtype/Link/Rect[168.8 589.0 255.8 602.0]/Border[0 0 0]/Dest[1154 0 R/XYZ 0 734 0]>>endobj
+312 0 obj<</Subtype/Link/Rect[168.8 575.8 221.3 588.8]/Border[0 0 0]/Dest[1156 0 R/XYZ 0 459 0]>>endobj
+313 0 obj<</Subtype/Link/Rect[168.8 562.6 228.0 575.6]/Border[0 0 0]/Dest[1156 0 R/XYZ 0 361 0]>>endobj
+314 0 obj<</Subtype/Link/Rect[168.8 549.4 232.9 562.4]/Border[0 0 0]/Dest[1156 0 R/XYZ 0 224 0]>>endobj
+315 0 obj<</Subtype/Link/Rect[124.5 536.2 523.3 549.2]/Border[0 0 0]/Dest[1158 0 R/XYZ 0 670 0]>>endobj
+316 0 obj<</Subtype/Link/Rect[124.5 523.0 495.4 536.0]/Border[0 0 0]/Dest[1158 0 R/XYZ 0 126 0]>>endobj
+317 0 obj<</Subtype/Link/Rect[168.8 509.8 388.1 522.8]/Border[0 0 0]/Dest[1162 0 R/XYZ 0 734 0]>>endobj
+318 0 obj<</Subtype/Link/Rect[168.8 496.6 450.1 509.6]/Border[0 0 0]/Dest[1162 0 R/XYZ 0 484 0]>>endobj
+319 0 obj<</Subtype/Link/Rect[168.8 483.4 371.6 496.4]/Border[0 0 0]/Dest[1162 0 R/XYZ 0 132 0]>>endobj
+320 0 obj<</Subtype/Link/Rect[124.5 470.2 181.6 483.2]/Border[0 0 0]/Dest[1164 0 R/XYZ 0 263 0]>>endobj
+321 0 obj<</Subtype/Link/Rect[80.2 457.0 396.2 470.0]/Border[0 0 0]/Dest[1166 0 R/XYZ 0 734 0]>>endobj
+322 0 obj<</Subtype/Link/Rect[124.5 443.8 201.8 456.8]/Border[0 0 0]/Dest[1166 0 R/XYZ 0 672 0]>>endobj
+323 0 obj<</Subtype/Link/Rect[124.5 430.6 244.9 443.6]/Border[0 0 0]/Dest[1168 0 R/XYZ 0 148 0]>>endobj
+324 0 obj<</Subtype/Link/Rect[124.5 417.4 268.4 430.4]/Border[0 0 0]/Dest[1170 0 R/XYZ 0 705 0]>>endobj
+325 0 obj<</Subtype/Link/Rect[80.2 404.2 344.5 417.2]/Border[0 0 0]/Dest[1172 0 R/XYZ 0 734 0]>>endobj
+326 0 obj<</Subtype/Link/Rect[124.5 391.0 179.8 404.0]/Border[0 0 0]/Dest[1172 0 R/XYZ 0 672 0]>>endobj
+327 0 obj<</Subtype/Link/Rect[168.8 377.8 196.6 390.8]/Border[0 0 0]/Dest[1174 0 R/XYZ 0 652 0]>>endobj
+328 0 obj<</Subtype/Link/Rect[80.2 364.6 352.5 377.6]/Border[0 0 0]/Dest[1176 0 R/XYZ 0 734 0]>>endobj
+329 0 obj<</Subtype/Link/Rect[124.5 351.4 441.7 364.4]/Border[0 0 0]/Dest[1176 0 R/XYZ 0 672 0]>>endobj
+330 0 obj<</Subtype/Link/Rect[124.5 338.2 318.5 351.2]/Border[0 0 0]/Dest[1176 0 R/XYZ 0 497 0]>>endobj
+331 0 obj<</Subtype/Link/Rect[124.5 325.0 228.7 338.0]/Border[0 0 0]/Dest[1176 0 R/XYZ 0 330 0]>>endobj
+332 0 obj<</Subtype/Link/Rect[124.5 311.8 291.0 324.8]/Border[0 0 0]/Dest[1178 0 R/XYZ 0 665 0]>>endobj
+333 0 obj<</Subtype/Link/Rect[168.8 298.6 245.8 311.6]/Border[0 0 0]/Dest[1178 0 R/XYZ 0 432 0]>>endobj
+334 0 obj<</Subtype/Link/Rect[168.8 285.4 270.8 298.4]/Border[0 0 0]/Dest[1178 0 R/XYZ 0 189 0]>>endobj
+335 0 obj<</Subtype/Link/Rect[124.5 272.2 300.2 285.2]/Border[0 0 0]/Dest[1180 0 R/XYZ 0 692 0]>>endobj
+336 0 obj<</Subtype/Link/Rect[124.5 259.0 397.0 272.0]/Border[0 0 0]/Dest[1180 0 R/XYZ 0 260 0]>>endobj
+337 0 obj<</Subtype/Link/Rect[124.5 245.8 387.3 258.8]/Border[0 0 0]/Dest[1184 0 R/XYZ 0 599 0]>>endobj
+338 0 obj<</Subtype/Link/Rect[80.2 232.6 225.4 245.6]/Border[0 0 0]/Dest[1186 0 R/XYZ 0 734 0]>>endobj
+339 0 obj<</Subtype/Link/Rect[124.5 219.4 182.2 232.4]/Border[0 0 0]/Dest[1186 0 R/XYZ 0 696 0]>>endobj
+340 0 obj<</Subtype/Link/Rect[124.5 206.2 189.6 219.2]/Border[0 0 0]/Dest[1186 0 R/XYZ 0 278 0]>>endobj
+341 0 obj<</Subtype/Link/Rect[168.8 193.0 248.8 206.0]/Border[0 0 0]/Dest[1188 0 R/XYZ 0 702 0]>>endobj
+342 0 obj<</Subtype/Link/Rect[168.8 179.8 331.6 192.8]/Border[0 0 0]/Dest[1190 0 R/XYZ 0 471 0]>>endobj
+343 0 obj<</Subtype/Link/Rect[168.8 166.6 325.8 179.6]/Border[0 0 0]/Dest[1192 0 R/XYZ 0 718 0]>>endobj
+344 0 obj<</Subtype/Link/Rect[168.8 153.4 381.4 166.4]/Border[0 0 0]/Dest[1192 0 R/XYZ 0 348 0]>>endobj
+345 0 obj<</Subtype/Link/Rect[168.8 140.2 281.8 153.2]/Border[0 0 0]/Dest[1194 0 R/XYZ 0 171 0]>>endobj
+346 0 obj<</Subtype/Link/Rect[124.5 127.0 218.9 140.0]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 652 0]>>endobj
+347 0 obj<</Subtype/Link/Rect[168.8 113.8 250.3 126.8]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 551 0]>>endobj
+348 0 obj<</Subtype/Link/Rect[168.8 100.6 322.1 113.6]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 426 0]>>endobj
+349 0 obj<</Subtype/Link/Rect[168.8 87.4 258.3 100.4]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 341 0]>>endobj
+350 0 obj<</Subtype/Link/Rect[168.8 74.2 271.1 87.2]/Border[0 0 0]/Dest[1196 0 R/XYZ 0 243 0]>>endobj
+351 0 obj<</Subtype/Link/Rect[124.5 61.0 299.0 63.0]/Border[0 0 0]/Dest[1198 0 R/XYZ 0 359 0]>>endobj
+352 0 obj[301 0 R
302 0 R
303 0 R
304 0 R
324 0 R
325 0 R
326 0 R
-327 0 R]endobj
-329 0 obj<</Subtype/Link/Rect[160.5 721.0 218.2 734.0]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 672 0]>>endobj
-330 0 obj<</Subtype/Link/Rect[160.5 707.8 302.9 720.8]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 531 0]>>endobj
-331 0 obj<</Subtype/Link/Rect[160.5 694.6 280.6 707.6]/Border[0 0 0]/Dest[1446 0 R/XYZ 0 511 0]>>endobj
-332 0 obj<</Subtype/Link/Rect[82.1 681.4 170.4 694.4]/Border[0 0 0]/Dest[1448 0 R/XYZ 0 681 0]>>endobj
-333 0 obj<</Subtype/Link/Rect[116.2 668.2 400.4 681.2]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 734 0]>>endobj
-334 0 obj<</Subtype/Link/Rect[160.5 655.0 257.0 668.0]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 672 0]>>endobj
-335 0 obj<</Subtype/Link/Rect[160.5 641.8 217.0 654.8]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 584 0]>>endobj
-336 0 obj<</Subtype/Link/Rect[160.5 628.6 353.3 641.6]/Border[0 0 0]/Dest[1456 0 R/XYZ 0 718 0]>>endobj
-337 0 obj<</Subtype/Link/Rect[160.5 615.4 467.3 628.4]/Border[0 0 0]/Dest[1458 0 R/XYZ 0 613 0]>>endobj
-338 0 obj<</Subtype/Link/Rect[160.5 602.2 299.2 615.2]/Border[0 0 0]/Dest[1462 0 R/XYZ 0 385 0]>>endobj
-339 0 obj<</Subtype/Link/Rect[160.5 589.0 288.8 602.0]/Border[0 0 0]/Dest[1464 0 R/XYZ 0 129 0]>>endobj
-340 0 obj<</Subtype/Link/Rect[160.5 575.8 280.9 588.8]/Border[0 0 0]/Dest[1466 0 R/XYZ 0 124 0]>>endobj
-341 0 obj<</Subtype/Link/Rect[160.5 562.6 326.4 575.6]/Border[0 0 0]/Dest[1472 0 R/XYZ 0 507 0]>>endobj
-342 0 obj<</Subtype/Link/Rect[160.5 549.4 459.7 562.4]/Border[0 0 0]/Dest[1484 0 R/XYZ 0 734 0]>>endobj
-343 0 obj<</Subtype/Link/Rect[116.2 536.2 485.4 549.2]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 734 0]>>endobj
-344 0 obj<</Subtype/Link/Rect[160.5 523.0 257.0 536.0]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 672 0]>>endobj
-345 0 obj<</Subtype/Link/Rect[160.5 509.8 217.0 522.8]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 597 0]>>endobj
-346 0 obj<</Subtype/Link/Rect[160.5 496.6 396.4 509.6]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 225 0]>>endobj
-347 0 obj<</Subtype/Link/Rect[160.5 483.4 364.3 496.4]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 524 0]>>endobj
-348 0 obj<</Subtype/Link/Rect[160.5 470.2 304.1 483.2]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 383 0]>>endobj
-349 0 obj<</Subtype/Link/Rect[116.2 457.0 266.6 470.0]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 734 0]>>endobj
-350 0 obj<</Subtype/Link/Rect[160.5 443.8 356.7 456.8]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 524 0]>>endobj
-351 0 obj<</Subtype/Link/Rect[160.5 430.6 357.9 443.6]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 417 0]>>endobj
-352 0 obj<</Subtype/Link/Rect[160.5 417.4 233.2 430.4]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 241 0]>>endobj
-353 0 obj<</Subtype/Link/Rect[160.5 404.2 274.2 417.2]/Border[0 0 0]/Dest[1496 0 R/XYZ 0 556 0]>>endobj
-354 0 obj<</Subtype/Link/Rect[160.5 391.0 291.3 404.0]/Border[0 0 0]/Dest[1496 0 R/XYZ 0 240 0]>>endobj
-355 0 obj<</Subtype/Link/Rect[160.5 377.8 260.7 390.8]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 692 0]>>endobj
-356 0 obj<</Subtype/Link/Rect[160.5 364.6 262.3 377.6]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 603 0]>>endobj
-357 0 obj<</Subtype/Link/Rect[160.5 351.4 188.3 364.4]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 528 0]>>endobj
-358 0 obj<</Subtype/Link/Rect[116.2 338.2 265.4 351.2]/Border[0 0 0]/Dest[1500 0 R/XYZ 0 734 0]>>endobj
-359 0 obj<</Subtype/Link/Rect[160.5 325.0 335.3 338.0]/Border[0 0 0]/Dest[1500 0 R/XYZ 0 696 0]>>endobj
-360 0 obj<</Subtype/Link/Rect[160.5 311.8 322.8 324.8]/Border[0 0 0]/Dest[1502 0 R/XYZ 0 362 0]>>endobj
-361 0 obj<</Subtype/Link/Rect[160.5 298.6 345.7 311.6]/Border[0 0 0]/Dest[1502 0 R/XYZ 0 155 0]>>endobj
-362 0 obj<</Subtype/Link/Rect[85.7 285.4 190.2 298.4]/Border[0 0 0]/Dest[1504 0 R/XYZ 0 337 0]>>endobj
-363 0 obj<</Subtype/Link/Rect[121.8 272.2 331.4 285.2]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 734 0]>>endobj
-364 0 obj<</Subtype/Link/Rect[166.0 259.0 202.4 272.0]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 672 0]>>endobj
-365 0 obj<</Subtype/Link/Rect[166.0 245.8 367.4 258.8]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 439 0]>>endobj
-366 0 obj<</Subtype/Link/Rect[166.0 232.6 420.2 245.6]/Border[0 0 0]/Dest[1518 0 R/XYZ 0 339 0]>>endobj
-367 0 obj<</Subtype/Link/Rect[166.0 219.4 532.1 232.4]/Border[0 0 0]/Dest[1526 0 R/XYZ 0 670 0]>>endobj
-368 0 obj<</Subtype/Link/Rect[144.0 206.2 173.9 219.2]/Border[0 0 0]/Dest[1526 0 R/XYZ 0 670 0]>>endobj
-369 0 obj<</Subtype/Link/Rect[166.0 193.0 536.9 206.0]/Border[0 0 0]/Dest[1526 0 R/XYZ 0 126 0]>>endobj
-370 0 obj<</Subtype/Link/Rect[166.0 179.8 223.1 192.8]/Border[0 0 0]/Dest[1532 0 R/XYZ 0 263 0]>>endobj
-371 0 obj<</Subtype/Link/Rect[121.8 166.6 394.0 179.6]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 734 0]>>endobj
-372 0 obj<</Subtype/Link/Rect[166.0 153.4 483.2 166.4]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 672 0]>>endobj
-373 0 obj<</Subtype/Link/Rect[166.0 140.2 360.0 153.2]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 497 0]>>endobj
-374 0 obj<</Subtype/Link/Rect[166.0 127.0 270.2 140.0]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 330 0]>>endobj
-375 0 obj<</Subtype/Link/Rect[166.0 113.8 332.5 126.8]/Border[0 0 0]/Dest[1536 0 R/XYZ 0 665 0]>>endobj
-376 0 obj<</Subtype/Link/Rect[166.0 100.6 341.7 113.6]/Border[0 0 0]/Dest[1538 0 R/XYZ 0 692 0]>>endobj
-377 0 obj<</Subtype/Link/Rect[166.0 87.4 438.5 100.4]/Border[0 0 0]/Dest[1538 0 R/XYZ 0 260 0]>>endobj
-378 0 obj<</Subtype/Link/Rect[166.0 74.2 428.8 87.2]/Border[0 0 0]/Dest[1542 0 R/XYZ 0 599 0]>>endobj
-379 0 obj<</Subtype/Link/Rect[121.8 61.0 437.7 74.0]/Border[0 0 0]/Dest[1544 0 R/XYZ 0 734 0]>>endobj
-380 0 obj[329 0 R
+327 0 R
+328 0 R
+329 0 R
330 0 R
331 0 R
332 0 R
348 0 R
349 0 R
350 0 R
-351 0 R
-352 0 R
-353 0 R
+351 0 R]endobj
+353 0 obj<</Subtype/Link/Rect[80.2 721.0 216.2 734.0]/Border[0 0 0]/Dest[1202 0 R/XYZ 0 734 0]>>endobj
+354 0 obj<</Subtype/Link/Rect[124.5 707.8 182.2 720.8]/Border[0 0 0]/Dest[1202 0 R/XYZ 0 696 0]>>endobj
+355 0 obj<</Subtype/Link/Rect[124.5 694.6 253.1 707.6]/Border[0 0 0]/Dest[1204 0 R/XYZ 0 734 0]>>endobj
+356 0 obj<</Subtype/Link/Rect[124.5 681.4 237.2 694.4]/Border[0 0 0]/Dest[1204 0 R/XYZ 0 278 0]>>endobj
+357 0 obj<</Subtype/Link/Rect[124.5 668.2 289.5 681.2]/Border[0 0 0]/Dest[1206 0 R/XYZ 0 734 0]>>endobj
+358 0 obj<</Subtype/Link/Rect[124.5 655.0 211.0 668.0]/Border[0 0 0]/Dest[1206 0 R/XYZ 0 304 0]>>endobj
+359 0 obj<</Subtype/Link/Rect[124.5 641.8 233.0 654.8]/Border[0 0 0]/Dest[1208 0 R/XYZ 0 646 0]>>endobj
+360 0 obj<</Subtype/Link/Rect[124.5 628.6 229.9 641.6]/Border[0 0 0]/Dest[1208 0 R/XYZ 0 299 0]>>endobj
+361 0 obj<</Subtype/Link/Rect[124.5 615.4 210.0 628.4]/Border[0 0 0]/Dest[1208 0 R/XYZ 0 210 0]>>endobj
+362 0 obj<</Subtype/Link/Rect[124.5 602.2 196.6 615.2]/Border[0 0 0]/Dest[1210 0 R/XYZ 0 734 0]>>endobj
+363 0 obj<</Subtype/Link/Rect[80.2 589.0 146.8 602.0]/Border[0 0 0]/Dest[1212 0 R/XYZ 0 734 0]>>endobj
+364 0 obj<</Subtype/Link/Rect[124.5 575.8 182.2 588.8]/Border[0 0 0]/Dest[1212 0 R/XYZ 0 696 0]>>endobj
+365 0 obj<</Subtype/Link/Rect[124.5 562.6 322.5 575.6]/Border[0 0 0]/Dest[1212 0 R/XYZ 0 467 0]>>endobj
+366 0 obj<</Subtype/Link/Rect[85.8 549.4 229.1 562.4]/Border[0 0 0]/Dest[1216 0 R/XYZ 0 734 0]>>endobj
+367 0 obj<</Subtype/Link/Rect[130.0 536.2 304.8 549.2]/Border[0 0 0]/Dest[1216 0 R/XYZ 0 696 0]>>endobj
+368 0 obj<</Subtype/Link/Rect[130.0 523.0 292.2 536.0]/Border[0 0 0]/Dest[1218 0 R/XYZ 0 362 0]>>endobj
+369 0 obj<</Subtype/Link/Rect[130.0 509.8 315.2 522.8]/Border[0 0 0]/Dest[1218 0 R/XYZ 0 155 0]>>endobj
+370 0 obj<</Subtype/Link/Rect[85.8 496.6 369.0 509.6]/Border[0 0 0]/Dest[1222 0 R/XYZ 0 734 0]>>endobj
+371 0 obj<</Subtype/Link/Rect[130.0 483.4 170.0 496.4]/Border[0 0 0]/Dest[1222 0 R/XYZ 0 672 0]>>endobj
+372 0 obj<</Subtype/Link/Rect[130.0 470.2 187.8 483.2]/Border[0 0 0]/Dest[1222 0 R/XYZ 0 544 0]>>endobj
+373 0 obj<</Subtype/Link/Rect[130.0 457.0 237.9 470.0]/Border[0 0 0]/Dest[1222 0 R/XYZ 0 231 0]>>endobj
+374 0 obj<</Subtype/Link/Rect[174.2 443.8 230.5 456.8]/Border[0 0 0]/Dest[1224 0 R/XYZ 0 560 0]>>endobj
+375 0 obj<</Subtype/Link/Rect[130.0 430.6 224.4 443.6]/Border[0 0 0]/Dest[1224 0 R/XYZ 0 409 0]>>endobj
+376 0 obj<</Subtype/Link/Rect[174.2 417.4 330.7 430.4]/Border[0 0 0]/Dest[1224 0 R/XYZ 0 294 0]>>endobj
+377 0 obj<</Subtype/Link/Rect[174.2 404.2 269.9 417.2]/Border[0 0 0]/Dest[1226 0 R/XYZ 0 734 0]>>endobj
+378 0 obj<</Subtype/Link/Rect[174.2 391.0 330.4 404.0]/Border[0 0 0]/Dest[1226 0 R/XYZ 0 292 0]>>endobj
+379 0 obj<</Subtype/Link/Rect[174.2 377.8 312.0 390.8]/Border[0 0 0]/Dest[1228 0 R/XYZ 0 665 0]>>endobj
+380 0 obj<</Subtype/Link/Rect[174.2 364.6 244.5 377.6]/Border[0 0 0]/Dest[1228 0 R/XYZ 0 488 0]>>endobj
+381 0 obj<</Subtype/Link/Rect[130.0 351.4 267.8 364.4]/Border[0 0 0]/Dest[1228 0 R/XYZ 0 351 0]>>endobj
+382 0 obj<</Subtype/Link/Rect[174.2 338.2 232.0 351.2]/Border[0 0 0]/Dest[1228 0 R/XYZ 0 209 0]>>endobj
+383 0 obj<</Subtype/Link/Rect[174.2 325.0 237.5 338.0]/Border[0 0 0]/Dest[1230 0 R/XYZ 0 599 0]>>endobj
+384 0 obj<</Subtype/Link/Rect[174.2 311.8 261.3 324.8]/Border[0 0 0]/Dest[1230 0 R/XYZ 0 330 0]>>endobj
+385 0 obj<</Subtype/Link/Rect[130.0 298.6 182.9 311.6]/Border[0 0 0]/Dest[1244 0 R/XYZ 0 296 0]>>endobj
+386 0 obj<</Subtype/Link/Rect[130.0 285.4 182.9 298.4]/Border[0 0 0]/Dest[1246 0 R/XYZ 0 734 0]>>endobj
+387 0 obj<</Subtype/Link/Rect[85.8 272.2 364.7 285.2]/Border[0 0 0]/Dest[1248 0 R/XYZ 0 734 0]>>endobj
+388 0 obj<</Subtype/Link/Rect[130.0 259.0 226.5 272.0]/Border[0 0 0]/Dest[1248 0 R/XYZ 0 672 0]>>endobj
+389 0 obj<</Subtype/Link/Rect[130.0 245.8 186.5 258.8]/Border[0 0 0]/Dest[1248 0 R/XYZ 0 584 0]>>endobj
+390 0 obj<</Subtype/Link/Rect[130.0 232.6 322.8 245.6]/Border[0 0 0]/Dest[1250 0 R/XYZ 0 718 0]>>endobj
+391 0 obj<</Subtype/Link/Rect[130.0 219.4 436.8 232.4]/Border[0 0 0]/Dest[1252 0 R/XYZ 0 613 0]>>endobj
+392 0 obj<</Subtype/Link/Rect[174.2 206.2 374.7 219.2]/Border[0 0 0]/Dest[1252 0 R/XYZ 0 227 0]>>endobj
+393 0 obj<</Subtype/Link/Rect[174.2 193.0 406.1 206.0]/Border[0 0 0]/Dest[1254 0 R/XYZ 0 359 0]>>endobj
+394 0 obj<</Subtype/Link/Rect[174.2 179.8 321.5 192.8]/Border[0 0 0]/Dest[1254 0 R/XYZ 0 149 0]>>endobj
+395 0 obj<</Subtype/Link/Rect[130.0 166.6 268.7 179.6]/Border[0 0 0]/Dest[1256 0 R/XYZ 0 467 0]>>endobj
+396 0 obj<</Subtype/Link/Rect[130.0 153.4 258.3 166.4]/Border[0 0 0]/Dest[1258 0 R/XYZ 0 208 0]>>endobj
+397 0 obj<</Subtype/Link/Rect[130.0 140.2 250.4 153.2]/Border[0 0 0]/Dest[1260 0 R/XYZ 0 203 0]>>endobj
+398 0 obj<</Subtype/Link/Rect[130.0 127.0 295.9 140.0]/Border[0 0 0]/Dest[1266 0 R/XYZ 0 547 0]>>endobj
+399 0 obj<</Subtype/Link/Rect[174.2 113.8 373.5 126.8]/Border[0 0 0]/Dest[1268 0 R/XYZ 0 560 0]>>endobj
+400 0 obj<</Subtype/Link/Rect[174.2 100.6 449.6 113.6]/Border[0 0 0]/Dest[1268 0 R/XYZ 0 126 0]>>endobj
+401 0 obj<</Subtype/Link/Rect[130.0 87.4 429.2 100.4]/Border[0 0 0]/Dest[1276 0 R/XYZ 0 135 0]>>endobj
+402 0 obj<</Subtype/Link/Rect[85.8 74.2 454.9 87.2]/Border[0 0 0]/Dest[1282 0 R/XYZ 0 734 0]>>endobj
+403 0 obj<</Subtype/Link/Rect[130.0 61.0 226.5 74.0]/Border[0 0 0]/Dest[1282 0 R/XYZ 0 672 0]>>endobj
+404 0 obj[353 0 R
354 0 R
355 0 R
356 0 R
376 0 R
377 0 R
378 0 R
-379 0 R]endobj
-381 0 obj<</Subtype/Link/Rect[166.0 721.0 243.3 734.0]/Border[0 0 0]/Dest[1544 0 R/XYZ 0 672 0]>>endobj
-382 0 obj<</Subtype/Link/Rect[166.0 707.8 286.4 720.8]/Border[0 0 0]/Dest[1546 0 R/XYZ 0 148 0]>>endobj
-383 0 obj<</Subtype/Link/Rect[166.0 694.6 309.9 707.6]/Border[0 0 0]/Dest[1548 0 R/XYZ 0 705 0]>>endobj
-384 0 obj<</Subtype/Link/Rect[121.8 681.4 386.0 694.4]/Border[0 0 0]/Dest[1550 0 R/XYZ 0 734 0]>>endobj
-385 0 obj<</Subtype/Link/Rect[166.0 668.2 221.3 681.2]/Border[0 0 0]/Dest[1550 0 R/XYZ 0 672 0]>>endobj
-386 0 obj<</Subtype/Link/Rect[121.8 655.0 198.8 668.0]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 734 0]>>endobj
-387 0 obj<</Subtype/Link/Rect[166.0 641.8 223.8 654.8]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 696 0]>>endobj
-388 0 obj<</Subtype/Link/Rect[166.0 628.6 231.1 641.6]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 317 0]>>endobj
-389 0 obj<</Subtype/Link/Rect[166.0 615.4 260.4 628.4]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 734 0]>>endobj
-390 0 obj<</Subtype/Link/Rect[166.0 602.2 213.4 615.2]/Border[0 0 0]/Dest[1566 0 R/XYZ 0 440 0]>>endobj
-391 0 obj<</Subtype/Link/Rect[121.8 589.0 188.3 602.0]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 734 0]>>endobj
-392 0 obj<</Subtype/Link/Rect[166.0 575.8 223.8 588.8]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 696 0]>>endobj
-393 0 obj<</Subtype/Link/Rect[166.0 562.6 364.0 575.6]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 467 0]>>endobj
-394 0 obj<</Subtype/Link/Rect[121.8 549.4 405.0 562.4]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 734 0]>>endobj
-395 0 obj<</Subtype/Link/Rect[166.0 536.2 206.0 549.2]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 672 0]>>endobj
-396 0 obj<</Subtype/Link/Rect[166.0 523.0 223.8 536.0]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 544 0]>>endobj
-397 0 obj<</Subtype/Link/Rect[166.0 509.8 273.9 522.8]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 231 0]>>endobj
-398 0 obj<</Subtype/Link/Rect[166.0 496.6 260.4 509.6]/Border[0 0 0]/Dest[1582 0 R/XYZ 0 409 0]>>endobj
-399 0 obj<</Subtype/Link/Rect[166.0 483.4 303.8 496.4]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 351 0]>>endobj
-400 0 obj<</Subtype/Link/Rect[166.0 470.2 218.9 483.2]/Border[0 0 0]/Dest[1602 0 R/XYZ 0 296 0]>>endobj
-401 0 obj<</Subtype/Link/Rect[166.0 457.0 218.9 470.0]/Border[0 0 0]/Dest[1604 0 R/XYZ 0 734 0]>>endobj
-402 0 obj<</Subtype/Link/Rect[121.8 443.8 223.5 456.8]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 734 0]>>endobj
-403 0 obj<</Subtype/Link/Rect[166.0 430.6 206.6 443.6]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 696 0]>>endobj
-404 0 obj<</Subtype/Link/Rect[166.0 417.4 222.5 430.4]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 595 0]>>endobj
-405 0 obj<</Subtype/Link/Rect[166.0 404.2 389.1 417.2]/Border[0 0 0]/Dest[1608 0 R/XYZ 0 568 0]>>endobj
-406 0 obj<</Subtype/Link/Rect[166.0 391.0 347.6 404.0]/Border[0 0 0]/Dest[1608 0 R/XYZ 0 414 0]>>endobj
-407 0 obj<</Subtype/Link/Rect[121.8 377.8 211.9 390.8]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 734 0]>>endobj
-408 0 obj<</Subtype/Link/Rect[166.0 364.6 206.6 377.6]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 696 0]>>endobj
-409 0 obj<</Subtype/Link/Rect[166.0 351.4 196.9 364.4]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 608 0]>>endobj
-410 0 obj<</Subtype/Link/Rect[121.8 338.2 456.2 351.2]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 734 0]>>endobj
-411 0 obj<</Subtype/Link/Rect[166.0 325.0 205.4 338.0]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 672 0]>>endobj
-412 0 obj<</Subtype/Link/Rect[166.0 311.8 223.8 324.8]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 412 0]>>endobj
-413 0 obj<</Subtype/Link/Rect[166.0 298.6 280.0 311.6]/Border[0 0 0]/Dest[1614 0 R/XYZ 0 573 0]>>endobj
-414 0 obj<</Subtype/Link/Rect[166.0 285.4 418.4 298.4]/Border[0 0 0]/Dest[1614 0 R/XYZ 0 471 0]>>endobj
-415 0 obj<</Subtype/Link/Rect[166.0 272.2 307.2 285.2]/Border[0 0 0]/Dest[1616 0 R/XYZ 0 734 0]>>endobj
-416 0 obj<</Subtype/Link/Rect[166.0 259.0 323.0 272.0]/Border[0 0 0]/Dest[1618 0 R/XYZ 0 243 0]>>endobj
-417 0 obj<</Subtype/Link/Rect[166.0 245.8 291.6 258.8]/Border[0 0 0]/Dest[1620 0 R/XYZ 0 718 0]>>endobj
-418 0 obj<</Subtype/Link/Rect[166.0 232.6 366.8 245.6]/Border[0 0 0]/Dest[1620 0 R/XYZ 0 336 0]>>endobj
-419 0 obj<</Subtype/Link/Rect[166.0 219.4 360.3 232.4]/Border[0 0 0]/Dest[1622 0 R/XYZ 0 322 0]>>endobj
-420 0 obj<</Subtype/Link/Rect[171.5 206.2 220.7 219.2]/Border[0 0 0]/Dest[1624 0 R/XYZ 0 492 0]>>endobj
-421 0 obj<</Subtype/Link/Rect[121.8 193.0 323.1 206.0]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 734 0]>>endobj
-422 0 obj<</Subtype/Link/Rect[166.0 179.8 223.8 192.8]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 672 0]>>endobj
-423 0 obj<</Subtype/Link/Rect[166.0 166.6 281.8 179.6]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 557 0]>>endobj
-424 0 obj<</Subtype/Link/Rect[121.8 153.4 236.3 166.4]/Border[0 0 0]/Dest[1630 0 R/XYZ 0 734 0]>>endobj
-425 0 obj<</Subtype/Link/Rect[121.8 140.2 242.4 153.2]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 734 0]>>endobj
-426 0 obj<</Subtype/Link/Rect[166.0 127.0 227.4 140.0]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 696 0]>>endobj
-427 0 obj<</Subtype/Link/Rect[166.0 113.8 204.8 126.8]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 449 0]>>endobj
-428 0 obj<</Subtype/Link/Rect[166.0 100.6 232.6 113.6]/Border[0 0 0]/Dest[1634 0 R/XYZ 0 515 0]>>endobj
-429 0 obj<</Subtype/Link/Rect[166.0 87.4 210.6 100.4]/Border[0 0 0]/Dest[1634 0 R/XYZ 0 255 0]>>endobj
-430 0 obj<</Subtype/Link/Rect[166.0 74.2 210.0 87.2]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 718 0]>>endobj
-431 0 obj<</Subtype/Link/Rect[166.0 61.0 204.2 74.0]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 537 0]>>endobj
-432 0 obj[381 0 R
+379 0 R
+380 0 R
+381 0 R
382 0 R
383 0 R
384 0 R
400 0 R
401 0 R
402 0 R
-403 0 R
-404 0 R
-405 0 R
+403 0 R]endobj
+405 0 obj<</Subtype/Link/Rect[130.0 721.0 186.5 734.0]/Border[0 0 0]/Dest[1282 0 R/XYZ 0 597 0]>>endobj
+406 0 obj<</Subtype/Link/Rect[130.0 707.8 365.9 720.8]/Border[0 0 0]/Dest[1282 0 R/XYZ 0 225 0]>>endobj
+407 0 obj<</Subtype/Link/Rect[174.2 694.6 406.5 707.6]/Border[0 0 0]/Dest[1284 0 R/XYZ 0 734 0]>>endobj
+408 0 obj<</Subtype/Link/Rect[174.2 681.4 292.5 694.4]/Border[0 0 0]/Dest[1284 0 R/XYZ 0 609 0]>>endobj
+409 0 obj<</Subtype/Link/Rect[130.0 668.2 333.8 681.2]/Border[0 0 0]/Dest[1284 0 R/XYZ 0 524 0]>>endobj
+410 0 obj<</Subtype/Link/Rect[130.0 655.0 273.6 668.0]/Border[0 0 0]/Dest[1284 0 R/XYZ 0 383 0]>>endobj
+411 0 obj<</Subtype/Link/Rect[174.2 641.8 351.2 654.8]/Border[0 0 0]/Dest[1286 0 R/XYZ 0 620 0]>>endobj
+412 0 obj<</Subtype/Link/Rect[85.8 628.6 420.2 641.6]/Border[0 0 0]/Dest[1288 0 R/XYZ 0 734 0]>>endobj
+413 0 obj<</Subtype/Link/Rect[130.0 615.4 169.4 628.4]/Border[0 0 0]/Dest[1288 0 R/XYZ 0 672 0]>>endobj
+414 0 obj<</Subtype/Link/Rect[130.0 602.2 187.8 615.2]/Border[0 0 0]/Dest[1288 0 R/XYZ 0 412 0]>>endobj
+415 0 obj<</Subtype/Link/Rect[130.0 589.0 244.0 602.0]/Border[0 0 0]/Dest[1290 0 R/XYZ 0 573 0]>>endobj
+416 0 obj<</Subtype/Link/Rect[130.0 575.8 382.4 588.8]/Border[0 0 0]/Dest[1290 0 R/XYZ 0 471 0]>>endobj
+417 0 obj<</Subtype/Link/Rect[130.0 562.6 271.2 575.6]/Border[0 0 0]/Dest[1292 0 R/XYZ 0 734 0]>>endobj
+418 0 obj<</Subtype/Link/Rect[174.2 549.4 291.0 562.4]/Border[0 0 0]/Dest[1292 0 R/XYZ 0 700 0]>>endobj
+419 0 obj<</Subtype/Link/Rect[174.2 536.2 263.5 549.2]/Border[0 0 0]/Dest[1292 0 R/XYZ 0 143 0]>>endobj
+420 0 obj<</Subtype/Link/Rect[130.0 523.0 287.0 536.0]/Border[0 0 0]/Dest[1294 0 R/XYZ 0 243 0]>>endobj
+421 0 obj<</Subtype/Link/Rect[130.0 509.8 255.6 522.8]/Border[0 0 0]/Dest[1296 0 R/XYZ 0 718 0]>>endobj
+422 0 obj<</Subtype/Link/Rect[130.0 496.6 330.8 509.6]/Border[0 0 0]/Dest[1296 0 R/XYZ 0 336 0]>>endobj
+423 0 obj<</Subtype/Link/Rect[130.0 483.4 324.3 496.4]/Border[0 0 0]/Dest[1298 0 R/XYZ 0 322 0]>>endobj
+424 0 obj<</Subtype/Link/Rect[135.5 470.2 184.7 483.2]/Border[0 0 0]/Dest[1300 0 R/XYZ 0 492 0]>>endobj
+425 0 obj<</Subtype/Link/Rect[85.8 457.0 293.8 470.0]/Border[0 0 0]/Dest[1302 0 R/XYZ 0 734 0]>>endobj
+426 0 obj<</Subtype/Link/Rect[130.0 443.8 326.2 456.8]/Border[0 0 0]/Dest[1302 0 R/XYZ 0 500 0]>>endobj
+427 0 obj<</Subtype/Link/Rect[130.0 430.6 327.4 443.6]/Border[0 0 0]/Dest[1302 0 R/XYZ 0 393 0]>>endobj
+428 0 obj<</Subtype/Link/Rect[130.0 417.4 202.7 430.4]/Border[0 0 0]/Dest[1302 0 R/XYZ 0 217 0]>>endobj
+429 0 obj<</Subtype/Link/Rect[130.0 404.2 243.7 417.2]/Border[0 0 0]/Dest[1304 0 R/XYZ 0 530 0]>>endobj
+430 0 obj<</Subtype/Link/Rect[130.0 391.0 260.8 404.0]/Border[0 0 0]/Dest[1304 0 R/XYZ 0 213 0]>>endobj
+431 0 obj<</Subtype/Link/Rect[174.2 377.8 244.5 390.8]/Border[0 0 0]/Dest[1304 0 R/XYZ 0 125 0]>>endobj
+432 0 obj<</Subtype/Link/Rect[130.0 364.6 230.2 377.6]/Border[0 0 0]/Dest[1306 0 R/XYZ 0 665 0]>>endobj
+433 0 obj<</Subtype/Link/Rect[130.0 351.4 231.8 364.4]/Border[0 0 0]/Dest[1306 0 R/XYZ 0 577 0]>>endobj
+434 0 obj<</Subtype/Link/Rect[130.0 338.2 157.8 351.2]/Border[0 0 0]/Dest[1306 0 R/XYZ 0 502 0]>>endobj
+435 0 obj<</Subtype/Link/Rect[85.8 325.0 217.1 338.0]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 734 0]>>endobj
+436 0 obj<</Subtype/Link/Rect[130.0 311.8 229.9 324.8]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 696 0]>>endobj
+437 0 obj<</Subtype/Link/Rect[130.0 298.6 254.1 311.6]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 515 0]>>endobj
+438 0 obj<</Subtype/Link/Rect[130.0 285.4 218.0 298.4]/Border[0 0 0]/Dest[1308 0 R/XYZ 0 137 0]>>endobj
+439 0 obj<</Subtype/Link/Rect[130.0 272.2 242.1 285.2]/Border[0 0 0]/Dest[1310 0 R/XYZ 0 533 0]>>endobj
+440 0 obj<</Subtype/Link/Rect[174.2 259.0 354.8 272.0]/Border[0 0 0]/Dest[1310 0 R/XYZ 0 273 0]>>endobj
+441 0 obj<</Subtype/Link/Rect[130.0 245.8 244.0 258.8]/Border[0 0 0]/Dest[1316 0 R/XYZ 0 560 0]>>endobj
+442 0 obj<</Subtype/Link/Rect[130.0 232.6 312.7 245.6]/Border[0 0 0]/Dest[1318 0 R/XYZ 0 613 0]>>endobj
+443 0 obj<</Subtype/Link/Rect[130.0 219.4 287.1 232.4]/Border[0 0 0]/Dest[1320 0 R/XYZ 0 622 0]>>endobj
+444 0 obj<</Subtype/Link/Rect[130.0 206.2 273.0 219.2]/Border[0 0 0]/Dest[1320 0 R/XYZ 0 266 0]>>endobj
+445 0 obj<</Subtype/Link/Rect[130.0 193.0 282.5 206.0]/Border[0 0 0]/Dest[1322 0 R/XYZ 0 520 0]>>endobj
+446 0 obj<</Subtype/Link/Rect[135.5 179.8 279.7 192.8]/Border[0 0 0]/Dest[1324 0 R/XYZ 0 734 0]>>endobj
+447 0 obj<</Subtype/Link/Rect[135.5 166.6 221.7 179.6]/Border[0 0 0]/Dest[1324 0 R/XYZ 0 645 0]>>endobj
+448 0 obj<</Subtype/Link/Rect[85.8 153.4 206.4 166.4]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 734 0]>>endobj
+449 0 obj<</Subtype/Link/Rect[130.0 140.2 191.4 153.2]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 696 0]>>endobj
+450 0 obj<</Subtype/Link/Rect[130.0 127.0 168.8 140.0]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 449 0]>>endobj
+451 0 obj<</Subtype/Link/Rect[174.2 113.8 219.2 126.8]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 416 0]>>endobj
+452 0 obj<</Subtype/Link/Rect[174.2 100.6 245.1 113.6]/Border[0 0 0]/Dest[1326 0 R/XYZ 0 146 0]>>endobj
+453 0 obj<</Subtype/Link/Rect[174.2 87.4 348.3 100.4]/Border[0 0 0]/Dest[1328 0 R/XYZ 0 652 0]>>endobj
+454 0 obj<</Subtype/Link/Rect[130.0 74.2 196.6 87.2]/Border[0 0 0]/Dest[1328 0 R/XYZ 0 515 0]>>endobj
+455 0 obj<</Subtype/Link/Rect[130.0 61.0 174.6 74.0]/Border[0 0 0]/Dest[1328 0 R/XYZ 0 255 0]>>endobj
+456 0 obj[405 0 R
406 0 R
407 0 R
408 0 R
428 0 R
429 0 R
430 0 R
-431 0 R]endobj
-433 0 obj<</Subtype/Link/Rect[166.0 721.0 225.3 734.0]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 409 0]>>endobj
-434 0 obj<</Subtype/Link/Rect[166.0 707.8 209.4 720.8]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 189 0]>>endobj
-435 0 obj<</Subtype/Link/Rect[166.0 694.6 214.9 707.6]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 734 0]>>endobj
-436 0 obj<</Subtype/Link/Rect[171.5 681.4 216.7 694.4]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 645 0]>>endobj
-437 0 obj<</Subtype/Link/Rect[171.5 668.2 218.6 681.2]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 477 0]>>endobj
-438 0 obj<</Subtype/Link/Rect[171.5 655.0 244.8 668.0]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 349 0]>>endobj
-439 0 obj<</Subtype/Link/Rect[171.5 641.8 252.2 654.8]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 129 0]>>endobj
-440 0 obj<</Subtype/Link/Rect[171.5 628.6 229.6 641.6]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 639 0]>>endobj
-441 0 obj<</Subtype/Link/Rect[171.5 615.4 228.3 628.4]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 511 0]>>endobj
-442 0 obj<</Subtype/Link/Rect[171.5 602.2 232.0 615.2]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 436 0]>>endobj
-443 0 obj<</Subtype/Link/Rect[171.5 589.0 222.8 602.0]/Border[0 0 0]/Dest[1642 0 R/XYZ 0 388 0]>>endobj
-444 0 obj<</Subtype/Link/Rect[85.1 575.8 138.6 588.8]/Border[0 0 0]/Dest[1642 0 R/XYZ 0 170 0]>>endobj
-445 0 obj<</Subtype/Link/Rect[121.8 562.6 172.2 575.6]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 734 0]>>endobj
-446 0 obj<</Subtype/Link/Rect[166.0 549.4 198.1 562.4]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 655 0]>>endobj
-447 0 obj<</Subtype/Link/Rect[166.0 536.2 213.7 549.2]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 408 0]>>endobj
-448 0 obj<</Subtype/Link/Rect[166.0 523.0 194.4 536.0]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 293 0]>>endobj
-449 0 obj<</Subtype/Link/Rect[166.0 509.8 296.5 522.8]/Border[0 0 0]/Dest[1648 0 R/XYZ 0 228 0]>>endobj
-450 0 obj<</Subtype/Link/Rect[121.8 496.6 257.1 509.6]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 734 0]>>endobj
-451 0 obj<</Subtype/Link/Rect[166.0 483.4 252.2 496.4]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 668 0]>>endobj
-452 0 obj<</Subtype/Link/Rect[166.0 470.2 217.3 483.2]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 461 0]>>endobj
-453 0 obj<</Subtype/Link/Rect[166.0 457.0 281.8 470.0]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 151 0]>>endobj
-454 0 obj<</Subtype/Link/Rect[166.0 443.8 241.6 456.8]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 292 0]>>endobj
-455 0 obj<</Subtype/Link/Rect[166.0 430.6 301.9 443.6]/Border[0 0 0]/Dest[1656 0 R/XYZ 0 718 0]>>endobj
-456 0 obj<</Subtype/Link/Rect[121.8 417.4 193.2 430.4]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 734 0]>>endobj
-457 0 obj<</Subtype/Link/Rect[166.0 404.2 223.8 417.2]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 696 0]>>endobj
-458 0 obj<</Subtype/Link/Rect[166.0 391.0 224.7 404.0]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 423 0]>>endobj
-459 0 obj<</Subtype/Link/Rect[166.0 377.8 225.9 390.8]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 282 0]>>endobj
-460 0 obj<</Subtype/Link/Rect[166.0 364.6 234.4 377.6]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 613 0]>>endobj
-461 0 obj<</Subtype/Link/Rect[166.0 351.4 305.0 364.4]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 260 0]>>endobj
-462 0 obj<</Subtype/Link/Rect[166.0 338.2 203.6 351.2]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 159 0]>>endobj
-463 0 obj<</Subtype/Link/Rect[121.8 325.0 260.5 338.0]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 734 0]>>endobj
-464 0 obj<</Subtype/Link/Rect[166.0 311.8 223.8 324.8]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 696 0]>>endobj
-465 0 obj<</Subtype/Link/Rect[166.0 298.6 224.4 311.6]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 529 0]>>endobj
-466 0 obj<</Subtype/Link/Rect[166.0 285.4 191.4 298.4]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 199 0]>>endobj
-467 0 obj<</Subtype/Link/Rect[166.0 272.2 263.5 285.2]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 239 0]>>endobj
-468 0 obj[433 0 R
+431 0 R
+432 0 R
+433 0 R
434 0 R
435 0 R
436 0 R
452 0 R
453 0 R
454 0 R
-455 0 R
-456 0 R
-457 0 R
+455 0 R]endobj
+457 0 obj<</Subtype/Link/Rect[130.0 721.0 174.0 734.0]/Border[0 0 0]/Dest[1330 0 R/XYZ 0 718 0]>>endobj
+458 0 obj<</Subtype/Link/Rect[130.0 707.8 168.2 720.8]/Border[0 0 0]/Dest[1330 0 R/XYZ 0 537 0]>>endobj
+459 0 obj<</Subtype/Link/Rect[130.0 694.6 189.3 707.6]/Border[0 0 0]/Dest[1330 0 R/XYZ 0 409 0]>>endobj
+460 0 obj<</Subtype/Link/Rect[130.0 681.4 173.4 694.4]/Border[0 0 0]/Dest[1330 0 R/XYZ 0 189 0]>>endobj
+461 0 obj<</Subtype/Link/Rect[130.0 668.2 178.9 681.2]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 734 0]>>endobj
+462 0 obj<</Subtype/Link/Rect[135.5 655.0 180.7 668.0]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 645 0]>>endobj
+463 0 obj<</Subtype/Link/Rect[135.5 641.8 182.6 654.8]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 477 0]>>endobj
+464 0 obj<</Subtype/Link/Rect[135.5 628.6 208.8 641.6]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 349 0]>>endobj
+465 0 obj<</Subtype/Link/Rect[135.5 615.4 216.2 628.4]/Border[0 0 0]/Dest[1332 0 R/XYZ 0 129 0]>>endobj
+466 0 obj<</Subtype/Link/Rect[135.5 602.2 193.6 615.2]/Border[0 0 0]/Dest[1334 0 R/XYZ 0 639 0]>>endobj
+467 0 obj<</Subtype/Link/Rect[135.5 589.0 192.3 602.0]/Border[0 0 0]/Dest[1334 0 R/XYZ 0 511 0]>>endobj
+468 0 obj<</Subtype/Link/Rect[135.5 575.8 196.0 588.8]/Border[0 0 0]/Dest[1334 0 R/XYZ 0 436 0]>>endobj
+469 0 obj<</Subtype/Link/Rect[135.5 562.6 186.8 575.6]/Border[0 0 0]/Dest[1336 0 R/XYZ 0 388 0]>>endobj
+470 0 obj<</Subtype/Link/Rect[85.8 549.4 221.1 562.4]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 734 0]>>endobj
+471 0 obj<</Subtype/Link/Rect[130.0 536.2 216.2 549.2]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 668 0]>>endobj
+472 0 obj<</Subtype/Link/Rect[130.0 523.0 181.3 536.0]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 461 0]>>endobj
+473 0 obj<</Subtype/Link/Rect[174.2 509.8 533.6 522.8]/Border[0 0 0]/Dest[1338 0 R/XYZ 0 427 0]>>endobj
+474 0 obj<</Subtype/Link/Rect[174.2 496.6 536.9 509.6]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 734 0]>>endobj
+475 0 obj<</Subtype/Link/Rect[174.2 483.4 490.2 496.4]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 523 0]>>endobj
+476 0 obj<</Subtype/Link/Rect[174.2 470.2 459.3 483.2]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 408 0]>>endobj
+477 0 obj<</Subtype/Link/Rect[130.0 457.0 245.8 470.0]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 151 0]>>endobj
+478 0 obj<</Subtype/Link/Rect[174.2 443.8 351.5 456.8]/Border[0 0 0]/Dest[1340 0 R/XYZ 0 118 0]>>endobj
+479 0 obj<</Subtype/Link/Rect[174.2 430.6 351.2 443.6]/Border[0 0 0]/Dest[1342 0 R/XYZ 0 626 0]>>endobj
+480 0 obj<</Subtype/Link/Rect[174.2 417.4 332.5 430.4]/Border[0 0 0]/Dest[1342 0 R/XYZ 0 475 0]>>endobj
+481 0 obj<</Subtype/Link/Rect[174.2 404.2 301.4 417.2]/Border[0 0 0]/Dest[1342 0 R/XYZ 0 377 0]>>endobj
+482 0 obj<</Subtype/Link/Rect[130.0 391.0 205.6 404.0]/Border[0 0 0]/Dest[1342 0 R/XYZ 0 292 0]>>endobj
+483 0 obj<</Subtype/Link/Rect[130.0 377.8 265.9 390.8]/Border[0 0 0]/Dest[1344 0 R/XYZ 0 718 0]>>endobj
+484 0 obj<</Subtype/Link/Rect[85.8 364.6 287.1 377.6]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 734 0]>>endobj
+485 0 obj<</Subtype/Link/Rect[130.0 351.4 187.8 364.4]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 672 0]>>endobj
+486 0 obj<</Subtype/Link/Rect[130.0 338.2 245.8 351.2]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 557 0]>>endobj
+487 0 obj<</Subtype/Link/Rect[174.2 325.0 263.2 338.0]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 469 0]>>endobj
+488 0 obj<</Subtype/Link/Rect[174.2 311.8 239.9 324.8]/Border[0 0 0]/Dest[1346 0 R/XYZ 0 358 0]>>endobj
+489 0 obj<</Subtype/Link/Rect[85.8 298.6 157.2 311.6]/Border[0 0 0]/Dest[1350 0 R/XYZ 0 734 0]>>endobj
+490 0 obj<</Subtype/Link/Rect[130.0 285.4 187.8 298.4]/Border[0 0 0]/Dest[1350 0 R/XYZ 0 696 0]>>endobj
+491 0 obj<</Subtype/Link/Rect[130.0 272.2 188.7 285.2]/Border[0 0 0]/Dest[1350 0 R/XYZ 0 436 0]>>endobj
+492 0 obj<</Subtype/Link/Rect[130.0 259.0 189.9 272.0]/Border[0 0 0]/Dest[1350 0 R/XYZ 0 295 0]>>endobj
+493 0 obj<</Subtype/Link/Rect[130.0 245.8 198.4 258.8]/Border[0 0 0]/Dest[1352 0 R/XYZ 0 639 0]>>endobj
+494 0 obj<</Subtype/Link/Rect[130.0 232.6 269.0 245.6]/Border[0 0 0]/Dest[1352 0 R/XYZ 0 287 0]>>endobj
+495 0 obj<</Subtype/Link/Rect[130.0 219.4 167.6 232.4]/Border[0 0 0]/Dest[1352 0 R/XYZ 0 185 0]>>endobj
+496 0 obj<</Subtype/Link/Rect[85.8 206.2 200.3 219.2]/Border[0 0 0]/Dest[1354 0 R/XYZ 0 734 0]>>endobj
+497 0 obj<</Subtype/Link/Rect[85.8 193.0 136.2 206.0]/Border[0 0 0]/Dest[1356 0 R/XYZ 0 734 0]>>endobj
+498 0 obj<</Subtype/Link/Rect[130.0 179.8 162.1 192.8]/Border[0 0 0]/Dest[1356 0 R/XYZ 0 655 0]>>endobj
+499 0 obj<</Subtype/Link/Rect[130.0 166.6 177.7 179.6]/Border[0 0 0]/Dest[1356 0 R/XYZ 0 447 0]>>endobj
+500 0 obj<</Subtype/Link/Rect[130.0 153.4 158.4 166.4]/Border[0 0 0]/Dest[1356 0 R/XYZ 0 333 0]>>endobj
+501 0 obj[457 0 R
458 0 R
459 0 R
460 0 R
464 0 R
465 0 R
466 0 R
-467 0 R]endobj
-469 0 obj<</Subtype/Link/Rect[80.2 631.0 223.9 644.0]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 734 0]>>endobj
-470 0 obj<</Subtype/Link/Rect[124.5 617.8 216.2 630.8]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 696 0]>>endobj
-471 0 obj<</Subtype/Link/Rect[124.5 604.6 221.4 617.6]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 568 0]>>endobj
-472 0 obj<</Subtype/Link/Rect[124.5 591.4 224.7 604.4]/Border[0 0 0]/Dest[1402 0 R/XYZ 0 163 0]>>endobj
-473 0 obj<</Subtype/Link/Rect[124.5 578.2 276.1 591.2]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 734 0]>>endobj
-474 0 obj<</Subtype/Link/Rect[124.5 565.0 279.1 578.0]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 385 0]>>endobj
-475 0 obj<</Subtype/Link/Rect[124.5 551.8 251.3 564.8]/Border[0 0 0]/Dest[1404 0 R/XYZ 0 257 0]>>endobj
-476 0 obj<</Subtype/Link/Rect[168.8 538.6 276.9 551.6]/Border[0 0 0]/Dest[1406 0 R/XYZ 0 734 0]>>endobj
-477 0 obj<</Subtype/Link/Rect[168.8 525.4 328.3 538.4]/Border[0 0 0]/Dest[1406 0 R/XYZ 0 247 0]>>endobj
-478 0 obj<</Subtype/Link/Rect[124.5 512.2 331.0 525.2]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 665 0]>>endobj
-479 0 obj<</Subtype/Link/Rect[124.5 499.0 280.3 512.0]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 498 0]>>endobj
-480 0 obj<</Subtype/Link/Rect[124.5 485.8 467.0 498.8]/Border[0 0 0]/Dest[1408 0 R/XYZ 0 330 0]>>endobj
-481 0 obj<</Subtype/Link/Rect[130.0 472.6 257.3 485.6]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 734 0]>>endobj
-482 0 obj<</Subtype/Link/Rect[174.2 459.4 273.2 472.4]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 553 0]>>endobj
-483 0 obj<</Subtype/Link/Rect[174.2 446.2 221.9 459.2]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 494 0]>>endobj
-484 0 obj<</Subtype/Link/Rect[174.2 433.0 303.2 446.0]/Border[0 0 0]/Dest[1410 0 R/XYZ 0 409 0]>>endobj
-485 0 obj<</Subtype/Link/Rect[174.2 419.8 331.6 432.8]/Border[0 0 0]/Dest[1412 0 R/XYZ 0 734 0]>>endobj
-486 0 obj<</Subtype/Link/Rect[174.2 406.6 212.4 419.6]/Border[0 0 0]/Dest[1412 0 R/XYZ 0 583 0]>>endobj
-487 0 obj<</Subtype/Link/Rect[174.2 393.4 269.0 406.4]/Border[0 0 0]/Dest[1412 0 R/XYZ 0 128 0]>>endobj
-488 0 obj<</Subtype/Link/Rect[80.2 380.2 211.6 393.2]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 734 0]>>endobj
-489 0 obj<</Subtype/Link/Rect[124.5 367.0 224.4 380.0]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 696 0]>>endobj
-490 0 obj<</Subtype/Link/Rect[124.5 353.8 248.6 366.8]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 515 0]>>endobj
-491 0 obj<</Subtype/Link/Rect[124.5 340.6 212.5 353.6]/Border[0 0 0]/Dest[1416 0 R/XYZ 0 137 0]>>endobj
-492 0 obj<</Subtype/Link/Rect[124.5 327.4 236.6 340.4]/Border[0 0 0]/Dest[1418 0 R/XYZ 0 533 0]>>endobj
-493 0 obj<</Subtype/Link/Rect[168.8 314.2 349.3 327.2]/Border[0 0 0]/Dest[1418 0 R/XYZ 0 273 0]>>endobj
-494 0 obj<</Subtype/Link/Rect[124.5 301.0 238.5 314.0]/Border[0 0 0]/Dest[1424 0 R/XYZ 0 560 0]>>endobj
-495 0 obj<</Subtype/Link/Rect[124.5 287.8 307.2 300.8]/Border[0 0 0]/Dest[1426 0 R/XYZ 0 613 0]>>endobj
-496 0 obj<</Subtype/Link/Rect[124.5 274.6 281.6 287.6]/Border[0 0 0]/Dest[1428 0 R/XYZ 0 622 0]>>endobj
-497 0 obj<</Subtype/Link/Rect[124.5 261.4 267.5 274.4]/Border[0 0 0]/Dest[1428 0 R/XYZ 0 266 0]>>endobj
-498 0 obj<</Subtype/Link/Rect[124.5 248.2 277.0 261.2]/Border[0 0 0]/Dest[1430 0 R/XYZ 0 520 0]>>endobj
-499 0 obj<</Subtype/Link/Rect[130.0 235.0 274.2 248.0]/Border[0 0 0]/Dest[1432 0 R/XYZ 0 734 0]>>endobj
-500 0 obj<</Subtype/Link/Rect[130.0 221.8 216.2 234.8]/Border[0 0 0]/Dest[1432 0 R/XYZ 0 645 0]>>endobj
-501 0 obj<</Subtype/Link/Rect[80.2 208.6 119.0 221.6]/Border[0 0 0]/Dest[1434 0 R/XYZ 0 734 0]>>endobj
-502 0 obj<</Subtype/Link/Rect[124.5 195.4 209.7 208.4]/Border[0 0 0]/Dest[1434 0 R/XYZ 0 696 0]>>endobj
-503 0 obj<</Subtype/Link/Rect[80.2 182.2 374.5 195.2]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 734 0]>>endobj
-504 0 obj<</Subtype/Link/Rect[124.5 169.0 175.5 182.0]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 604 0]>>endobj
-505 0 obj<</Subtype/Link/Rect[124.5 155.8 312.1 168.8]/Border[0 0 0]/Dest[1436 0 R/XYZ 0 159 0]>>endobj
-506 0 obj<</Subtype/Link/Rect[124.5 142.6 324.7 155.6]/Border[0 0 0]/Dest[1438 0 R/XYZ 0 483 0]>>endobj
-507 0 obj<</Subtype/Link/Rect[124.5 129.4 184.1 142.4]/Border[0 0 0]/Dest[1438 0 R/XYZ 0 305 0]>>endobj
-508 0 obj<</Subtype/Link/Rect[124.5 116.2 422.7 129.2]/Border[0 0 0]/Dest[1440 0 R/XYZ 0 467 0]>>endobj
-509 0 obj<</Subtype/Link/Rect[124.5 103.0 232.4 116.0]/Border[0 0 0]/Dest[1440 0 R/XYZ 0 187 0]>>endobj
-510 0 obj<</Subtype/Link/Rect[80.2 89.8 297.5 102.8]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 734 0]>>endobj
-511 0 obj<</Subtype/Link/Rect[124.5 76.6 182.2 89.6]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 672 0]>>endobj
-512 0 obj<</Subtype/Link/Rect[124.5 63.4 266.9 76.4]/Border[0 0 0]/Dest[1444 0 R/XYZ 0 531 0]>>endobj
-513 0 obj[469 0 R
+467 0 R
+468 0 R
+469 0 R
470 0 R
471 0 R
472 0 R
497 0 R
498 0 R
499 0 R
-500 0 R
-501 0 R
-502 0 R
-503 0 R
-504 0 R
-505 0 R
-506 0 R
-507 0 R
-508 0 R
-509 0 R
-510 0 R
-511 0 R
-512 0 R]endobj
-514 0 obj<</Subtype/Link/Rect[168.8 721.0 309.9 734.0]/Border[0 0 0]/Dest[1446 0 R/XYZ 0 734 0]>>endobj
-515 0 obj<</Subtype/Link/Rect[168.8 707.8 353.4 720.8]/Border[0 0 0]/Dest[1446 0 R/XYZ 0 609 0]>>endobj
-516 0 obj<</Subtype/Link/Rect[124.5 694.6 244.6 707.6]/Border[0 0 0]/Dest[1446 0 R/XYZ 0 511 0]>>endobj
-517 0 obj[514 0 R
-515 0 R
-516 0 R]endobj
-518 0 obj<</S/URI/URI(http://www.samba.org/)>>endobj
-519 0 obj<</Subtype/Link/Rect[367.1 584.2 468.3 597.2]/Border[0 0 0]/A 518 0 R>>endobj
-520 0 obj[519 0 R]endobj
-521 0 obj<</S/Launch/F(Diagnosis.html)>>endobj
-522 0 obj<</Subtype/Link/Rect[280.4 510.2 327.1 523.2]/Border[0 0 0]/A 521 0 R>>endobj
-523 0 obj[522 0 R]endobj
-524 0 obj<</Subtype/Link/Rect[80.2 631.0 364.4 644.0]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 734 0]>>endobj
-525 0 obj<</Subtype/Link/Rect[124.5 617.8 221.0 630.8]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 672 0]>>endobj
-526 0 obj<</Subtype/Link/Rect[124.5 604.6 181.0 617.6]/Border[0 0 0]/Dest[1454 0 R/XYZ 0 584 0]>>endobj
-527 0 obj<</Subtype/Link/Rect[124.5 591.4 317.3 604.4]/Border[0 0 0]/Dest[1456 0 R/XYZ 0 718 0]>>endobj
-528 0 obj<</Subtype/Link/Rect[124.5 578.2 431.3 591.2]/Border[0 0 0]/Dest[1458 0 R/XYZ 0 613 0]>>endobj
-529 0 obj<</Subtype/Link/Rect[168.8 565.0 369.2 578.0]/Border[0 0 0]/Dest[1458 0 R/XYZ 0 227 0]>>endobj
-530 0 obj<</Subtype/Link/Rect[168.8 551.8 400.6 564.8]/Border[0 0 0]/Dest[1460 0 R/XYZ 0 319 0]>>endobj
-531 0 obj<</Subtype/Link/Rect[168.8 538.6 316.0 551.6]/Border[0 0 0]/Dest[1462 0 R/XYZ 0 734 0]>>endobj
-532 0 obj<</Subtype/Link/Rect[124.5 525.4 263.2 538.4]/Border[0 0 0]/Dest[1462 0 R/XYZ 0 385 0]>>endobj
-533 0 obj<</Subtype/Link/Rect[124.5 512.2 252.8 525.2]/Border[0 0 0]/Dest[1464 0 R/XYZ 0 129 0]>>endobj
-534 0 obj<</Subtype/Link/Rect[124.5 499.0 244.9 512.0]/Border[0 0 0]/Dest[1466 0 R/XYZ 0 124 0]>>endobj
-535 0 obj<</Subtype/Link/Rect[124.5 485.8 290.4 498.8]/Border[0 0 0]/Dest[1472 0 R/XYZ 0 507 0]>>endobj
-536 0 obj<</Subtype/Link/Rect[168.8 472.6 368.0 485.6]/Border[0 0 0]/Dest[1474 0 R/XYZ 0 520 0]>>endobj
-537 0 obj<</Subtype/Link/Rect[168.8 459.4 444.1 472.4]/Border[0 0 0]/Dest[1476 0 R/XYZ 0 734 0]>>endobj
-538 0 obj<</Subtype/Link/Rect[124.5 446.2 423.7 459.2]/Border[0 0 0]/Dest[1484 0 R/XYZ 0 734 0]>>endobj
-539 0 obj<</Subtype/Link/Rect[80.2 433.0 449.4 446.0]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 734 0]>>endobj
-540 0 obj<</Subtype/Link/Rect[124.5 419.8 221.0 432.8]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 672 0]>>endobj
-541 0 obj<</Subtype/Link/Rect[124.5 406.6 181.0 419.6]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 597 0]>>endobj
-542 0 obj<</Subtype/Link/Rect[124.5 393.4 360.4 406.4]/Border[0 0 0]/Dest[1488 0 R/XYZ 0 225 0]>>endobj
-543 0 obj<</Subtype/Link/Rect[168.8 380.2 401.0 393.2]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 734 0]>>endobj
-544 0 obj<</Subtype/Link/Rect[168.8 367.0 287.0 380.0]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 609 0]>>endobj
-545 0 obj<</Subtype/Link/Rect[124.5 353.8 328.3 366.8]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 524 0]>>endobj
-546 0 obj<</Subtype/Link/Rect[124.5 340.6 268.1 353.6]/Border[0 0 0]/Dest[1490 0 R/XYZ 0 383 0]>>endobj
-547 0 obj<</Subtype/Link/Rect[168.8 327.4 345.7 340.4]/Border[0 0 0]/Dest[1492 0 R/XYZ 0 620 0]>>endobj
-548 0 obj<</Subtype/Link/Rect[80.2 314.2 230.6 327.2]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 734 0]>>endobj
-549 0 obj<</Subtype/Link/Rect[124.5 301.0 320.7 314.0]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 524 0]>>endobj
-550 0 obj<</Subtype/Link/Rect[124.5 287.8 321.9 300.8]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 417 0]>>endobj
-551 0 obj<</Subtype/Link/Rect[124.5 274.6 197.2 287.6]/Border[0 0 0]/Dest[1494 0 R/XYZ 0 241 0]>>endobj
-552 0 obj<</Subtype/Link/Rect[124.5 261.4 238.2 274.4]/Border[0 0 0]/Dest[1496 0 R/XYZ 0 556 0]>>endobj
-553 0 obj<</Subtype/Link/Rect[124.5 248.2 255.3 261.2]/Border[0 0 0]/Dest[1496 0 R/XYZ 0 240 0]>>endobj
-554 0 obj<</Subtype/Link/Rect[168.8 235.0 239.0 248.0]/Border[0 0 0]/Dest[1496 0 R/XYZ 0 151 0]>>endobj
-555 0 obj<</Subtype/Link/Rect[124.5 221.8 224.7 234.8]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 692 0]>>endobj
-556 0 obj<</Subtype/Link/Rect[124.5 208.6 226.3 221.6]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 603 0]>>endobj
-557 0 obj<</Subtype/Link/Rect[124.5 195.4 152.3 208.4]/Border[0 0 0]/Dest[1498 0 R/XYZ 0 528 0]>>endobj
-558 0 obj<</Subtype/Link/Rect[80.2 182.2 229.4 195.2]/Border[0 0 0]/Dest[1500 0 R/XYZ 0 734 0]>>endobj
-559 0 obj<</Subtype/Link/Rect[124.5 169.0 299.3 182.0]/Border[0 0 0]/Dest[1500 0 R/XYZ 0 696 0]>>endobj
-560 0 obj<</Subtype/Link/Rect[124.5 155.8 286.8 168.8]/Border[0 0 0]/Dest[1502 0 R/XYZ 0 362 0]>>endobj
-561 0 obj<</Subtype/Link/Rect[124.5 142.6 309.7 155.6]/Border[0 0 0]/Dest[1502 0 R/XYZ 0 155 0]>>endobj
-562 0 obj[524 0 R
-525 0 R
-526 0 R
-527 0 R
-528 0 R
-529 0 R
-530 0 R
-531 0 R
-532 0 R
+500 0 R]endobj
+502 0 obj<</S/URI/URI(http://www.samba.org/)>>endobj
+503 0 obj<</Subtype/Link/Rect[367.1 584.2 468.3 597.2]/Border[0 0 0]/A 502 0 R>>endobj
+504 0 obj[503 0 R]endobj
+505 0 obj<</S/URI/URI(mailto:samba@samba.org)>>endobj
+506 0 obj<</Subtype/Link/Rect[164.2 153.8 250.8 166.8]/Border[0 0 0]/A 505 0 R>>endobj
+507 0 obj<</S/URI/URI(http://samba.org/samba)>>endobj
+508 0 obj<</Subtype/Link/Rect[233.0 140.6 338.7 153.6]/Border[0 0 0]/A 507 0 R>>endobj
+509 0 obj[506 0 R
+508 0 R]endobj
+510 0 obj<</S/Launch/F(ENCRYPTION.html)>>endobj
+511 0 obj<</Subtype/Link/Rect[174.0 562.6 270.6 575.6]/Border[0 0 0]/A 510 0 R>>endobj
+512 0 obj<</S/Launch/F(#PASSWORDLEVEL)>>endobj
+513 0 obj<</Subtype/Link/Rect[72.0 300.6 153.0 311.6]/Border[0 0 0]/A 512 0 R>>endobj
+514 0 obj<</S/Launch/F(#USERNAMELEVEL)>>endobj
+515 0 obj<</Subtype/Link/Rect[72.0 289.8 147.6 300.8]/Border[0 0 0]/A 514 0 R>>endobj
+516 0 obj[511 0 R
+513 0 R
+515 0 R]endobj
+517 0 obj<</S/Launch/F(winbind.html)>>endobj
+518 0 obj<</Subtype/Link/Rect[503.4 161.0 544.6 174.0]/Border[0 0 0]/A 517 0 R>>endobj
+519 0 obj<</S/Launch/F(winbind.html)>>endobj
+520 0 obj<</Subtype/Link/Rect[72.0 147.8 115.4 160.8]/Border[0 0 0]/A 519 0 R>>endobj
+521 0 obj[518 0 R
+520 0 R]endobj
+522 0 obj<</S/URI/URI(http://rsync.samba.org/)>>endobj
+523 0 obj<</Subtype/Link/Rect[118.1 89.0 222.3 102.0]/Border[0 0 0]/A 522 0 R>>endobj
+524 0 obj[523 0 R]endobj
+525 0 obj<</S/Launch/F(#OBEYPAMRESTRICTIONS)>>endobj
+526 0 obj<</Subtype/Link/Rect[235.4 659.0 332.9 672.0]/Border[0 0 0]/A 525 0 R>>endobj
+527 0 obj<</S/Launch/F(#ENCRYPTPASSWORDS)>>endobj
+528 0 obj<</Subtype/Link/Rect[338.7 579.8 449.4 592.8]/Border[0 0 0]/A 527 0 R>>endobj
+529 0 obj[526 0 R
+528 0 R]endobj
+530 0 obj<</S/URI/URI(http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp)>>endobj
+531 0 obj<</Subtype/Link/Rect[72.0 586.6 183.5 599.6]/Border[0 0 0]/A 530 0 R>>endobj
+532 0 obj<</S/Launch/F(#HOSTMSDFS)>>endobj
+533 0 obj<</Subtype/Link/Rect[345.1 507.4 417.7 520.4]/Border[0 0 0]/A 532 0 R>>endobj
+534 0 obj<</S/Launch/F(#MSDFSROOT)>>endobj
+535 0 obj<</Subtype/Link/Rect[380.8 494.2 453.4 507.2]/Border[0 0 0]/A 534 0 R>>endobj
+536 0 obj[531 0 R
533 0 R
-534 0 R
-535 0 R
-536 0 R
-537 0 R
-538 0 R
-539 0 R
-540 0 R
-541 0 R
-542 0 R
+535 0 R]endobj
+537 0 obj<</S/Launch/F(#NTACLSUPPORT)>>endobj
+538 0 obj<</Subtype/Link/Rect[339.9 526.6 438.9 539.6]/Border[0 0 0]/A 537 0 R>>endobj
+539 0 obj[538 0 R]endobj
+540 0 obj<</S/Launch/F(#SECURITYMASK)>>endobj
+541 0 obj<</Subtype/Link/Rect[493.0 707.8 545.8 720.8]/Border[0 0 0]/A 540 0 R>>endobj
+542 0 obj<</S/Launch/F(#SECURITYMASK)>>endobj
+543 0 obj<</Subtype/Link/Rect[72.0 694.6 98.4 707.6]/Border[0 0 0]/A 542 0 R>>endobj
+544 0 obj<</S/Launch/F(#CREATEMASK)>>endobj
+545 0 obj<</Subtype/Link/Rect[356.1 615.4 428.7 628.4]/Border[0 0 0]/A 544 0 R>>endobj
+546 0 obj<</S/Launch/F(#FORCESECURITYMODE)>>endobj
+547 0 obj<</Subtype/Link/Rect[424.3 562.6 549.7 575.6]/Border[0 0 0]/A 546 0 R>>endobj
+548 0 obj<</S/Launch/F(#FORCECREATEMODE)>>endobj
+549 0 obj<</Subtype/Link/Rect[356.1 483.4 468.3 496.4]/Border[0 0 0]/A 548 0 R>>endobj
+550 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+551 0 obj<</Subtype/Link/Rect[72.0 206.2 144.6 219.2]/Border[0 0 0]/A 550 0 R>>endobj
+552 0 obj[541 0 R
543 0 R
-544 0 R
545 0 R
-546 0 R
547 0 R
-548 0 R
549 0 R
-550 0 R
-551 0 R
-552 0 R
-553 0 R
-554 0 R
-555 0 R
+551 0 R]endobj
+553 0 obj<</S/URI/URI(http://imprints.sourceforge.net)>>endobj
+554 0 obj<</Subtype/Link/Rect[143.7 544.6 280.3 557.6]/Border[0 0 0]/A 553 0 R>>endobj
+555 0 obj<</S/URI/URI(http://msdn.microsoft.com/)>>endobj
+556 0 obj<</Subtype/Link/Rect[218.6 518.2 341.1 531.2]/Border[0 0 0]/A 555 0 R>>endobj
+557 0 obj<</S/URI/URI(http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP)>>endobj
+558 0 obj<</Subtype/Link/Rect[72.0 293.8 355.9 306.8]/Border[0 0 0]/A 557 0 R>>endobj
+559 0 obj<</Subtype/Link/Rect[488.0 69.1 534.8 82.1]/Border[0 0 0]/Dest[1198 0 R/XYZ 0 359 0]>>endobj
+560 0 obj[554 0 R
556 0 R
-557 0 R
558 0 R
-559 0 R
-560 0 R
-561 0 R]endobj
-563 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-564 0 obj<</Subtype/Link/Rect[153.2 599.8 225.8 612.8]/Border[0 0 0]/A 563 0 R>>endobj
-565 0 obj<</S/Launch/F(ENCRYPTION.html)>>endobj
-566 0 obj<</Subtype/Link/Rect[303.1 599.8 389.9 612.8]/Border[0 0 0]/A 565 0 R>>endobj
-567 0 obj<</S/Launch/F(UNIX_INSTALL.html)>>endobj
-568 0 obj<</Subtype/Link/Rect[333.5 442.5 438.0 455.5]/Border[0 0 0]/A 567 0 R>>endobj
-569 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-570 0 obj<</Subtype/Link/Rect[440.4 429.3 541.8 442.3]/Border[0 0 0]/A 569 0 R>>endobj
-571 0 obj[564 0 R
-566 0 R
-568 0 R
-570 0 R]endobj
-572 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-573 0 obj<</Subtype/Link/Rect[465.5 659.0 546.8 672.0]/Border[0 0 0]/A 572 0 R>>endobj
-574 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-575 0 obj<</Subtype/Link/Rect[72.0 645.8 92.8 658.8]/Border[0 0 0]/A 574 0 R>>endobj
-576 0 obj<</S/Launch/F(#NETBIOSNAME)>>endobj
-577 0 obj<</Subtype/Link/Rect[93.6 573.4 158.4 584.4]/Border[0 0 0]/A 576 0 R>>endobj
-578 0 obj<</S/Launch/F(#WORKGROUP)>>endobj
-579 0 obj<</Subtype/Link/Rect[93.6 562.6 142.2 573.6]/Border[0 0 0]/A 578 0 R>>endobj
-580 0 obj<</S/Launch/F(#OSLEVEL)>>endobj
-581 0 obj<</Subtype/Link/Rect[93.6 530.2 136.8 541.2]/Border[0 0 0]/A 580 0 R>>endobj
-582 0 obj<</S/Launch/F(#PERFERREDMASTER)>>endobj
-583 0 obj<</Subtype/Link/Rect[93.6 519.4 180.0 530.4]/Border[0 0 0]/A 582 0 R>>endobj
-584 0 obj<</S/Launch/F(#DOMAINMASTER)>>endobj
-585 0 obj<</Subtype/Link/Rect[93.6 508.6 163.8 519.6]/Border[0 0 0]/A 584 0 R>>endobj
-586 0 obj<</S/Launch/F(#LOCALMASTER)>>endobj
-587 0 obj<</Subtype/Link/Rect[93.6 497.8 158.4 508.8]/Border[0 0 0]/A 586 0 R>>endobj
-588 0 obj<</S/Launch/F(#SECURITYEQUALSUSER)>>endobj
-589 0 obj<</Subtype/Link/Rect[93.6 465.4 136.8 476.4]/Border[0 0 0]/A 588 0 R>>endobj
-590 0 obj<</S/Launch/F(#ENCRYPTPASSWORDS)>>endobj
-591 0 obj<</Subtype/Link/Rect[93.6 433.0 185.4 444.0]/Border[0 0 0]/A 590 0 R>>endobj
-592 0 obj<</S/Launch/F(#DOMAINLOGONS)>>endobj
-593 0 obj<</Subtype/Link/Rect[93.6 400.6 163.8 411.6]/Border[0 0 0]/A 592 0 R>>endobj
-594 0 obj<</S/Launch/F(#LOGONPATH)>>endobj
-595 0 obj<</Subtype/Link/Rect[93.6 368.2 147.6 379.2]/Border[0 0 0]/A 594 0 R>>endobj
-596 0 obj<</S/Launch/F(#LOGONDRIVE)>>endobj
-597 0 obj<</Subtype/Link/Rect[93.6 325.0 153.0 336.0]/Border[0 0 0]/A 596 0 R>>endobj
-598 0 obj<</S/Launch/F(#LOGONHOME)>>endobj
-599 0 obj<</Subtype/Link/Rect[93.6 314.2 147.6 325.2]/Border[0 0 0]/A 598 0 R>>endobj
-600 0 obj<</S/Launch/F(#LOGONSCRIPT)>>endobj
-601 0 obj<</Subtype/Link/Rect[93.6 271.0 158.4 282.0]/Border[0 0 0]/A 600 0 R>>endobj
-602 0 obj<</S/Launch/F(#PATH)>>endobj
-603 0 obj<</Subtype/Link/Rect[93.6 227.8 115.2 238.8]/Border[0 0 0]/A 602 0 R>>endobj
-604 0 obj<</S/Launch/F(#READONLY)>>endobj
-605 0 obj<</Subtype/Link/Rect[93.6 217.0 142.2 228.0]/Border[0 0 0]/A 604 0 R>>endobj
-606 0 obj<</S/Launch/F(#WRITELIST)>>endobj
-607 0 obj<</Subtype/Link/Rect[93.6 206.2 147.6 217.2]/Border[0 0 0]/A 606 0 R>>endobj
-608 0 obj<</S/Launch/F(#PATH)>>endobj
-609 0 obj<</Subtype/Link/Rect[93.6 163.0 115.2 174.0]/Border[0 0 0]/A 608 0 R>>endobj
-610 0 obj<</S/Launch/F(#READONLY)>>endobj
-611 0 obj<</Subtype/Link/Rect[93.6 152.2 142.2 163.2]/Border[0 0 0]/A 610 0 R>>endobj
-612 0 obj<</S/Launch/F(#CREATEMASK)>>endobj
-613 0 obj<</Subtype/Link/Rect[93.6 141.4 153.0 152.4]/Border[0 0 0]/A 612 0 R>>endobj
-614 0 obj<</S/Launch/F(#DIRECTORYMASK)>>endobj
-615 0 obj<</Subtype/Link/Rect[93.6 130.6 169.2 141.6]/Border[0 0 0]/A 614 0 R>>endobj
-616 0 obj<</S/Launch/F(ENCRYPTION.html)>>endobj
-617 0 obj<</Subtype/Link/Rect[108.0 65.0 200.6 78.0]/Border[0 0 0]/A 616 0 R>>endobj
-618 0 obj[573 0 R
-575 0 R
-577 0 R
+559 0 R]endobj
+561 0 obj<</Subtype/Link/Rect[94.2 719.6 125.4 732.6]/Border[0 0 0]/Dest[1198 0 R/XYZ 0 359 0]>>endobj
+562 0 obj<</S/Launch/F(#WRITELIST)>>endobj
+563 0 obj<</Subtype/Link/Rect[91.9 357.3 157.9 370.3]/Border[0 0 0]/A 562 0 R>>endobj
+564 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+565 0 obj<</Subtype/Link/Rect[184.4 344.1 285.8 357.1]/Border[0 0 0]/A 564 0 R>>endobj
+566 0 obj<</S/Launch/F(#GUESTOK)>>endobj
+567 0 obj<</Subtype/Link/Rect[160.6 317.7 228.6 330.7]/Border[0 0 0]/A 566 0 R>>endobj
+568 0 obj<</S/Launch/F(#MAPTOGUEST)>>endobj
+569 0 obj<</Subtype/Link/Rect[501.3 207.8 536.7 220.8]/Border[0 0 0]/A 568 0 R>>endobj
+570 0 obj<</S/Launch/F(#MAPTOGUEST)>>endobj
+571 0 obj<</Subtype/Link/Rect[94.2 194.6 174.1 207.6]/Border[0 0 0]/A 570 0 R>>endobj
+572 0 obj[561 0 R
+563 0 R
+565 0 R
+567 0 R
+569 0 R
+571 0 R]endobj
+573 0 obj<</S/Launch/F(#PRINTERADMIN)>>endobj
+574 0 obj<</Subtype/Link/Rect[451.3 607.5 537.1 620.5]/Border[0 0 0]/A 573 0 R>>endobj
+575 0 obj[574 0 R]endobj
+576 0 obj<</S/Launch/F(rpcclient.1.html)>>endobj
+577 0 obj<</Subtype/Link/Rect[233.6 649.4 379.3 662.4]/Border[0 0 0]/A 576 0 R>>endobj
+578 0 obj<</S/Launch/F(#SHOWADDPRINTERWIZARD)>>endobj
+579 0 obj<</Subtype/Link/Rect[108.0 239.4 299.4 252.4]/Border[0 0 0]/A 578 0 R>>endobj
+580 0 obj<</S/Launch/F(#ADDPRINTERCOMMAND)>>endobj
+581 0 obj<</Subtype/Link/Rect[453.9 213.0 526.5 226.0]/Border[0 0 0]/A 580 0 R>>endobj
+582 0 obj<</S/Launch/F(#ADDPRINTERCOMMAND)>>endobj
+583 0 obj<</Subtype/Link/Rect[72.0 199.8 118.2 212.8]/Border[0 0 0]/A 582 0 R>>endobj
+584 0 obj<</S/Launch/F(#DELETEPRINTERCOMMAND)>>endobj
+585 0 obj<</Subtype/Link/Rect[189.3 94.2 334.5 107.2]/Border[0 0 0]/A 584 0 R>>endobj
+586 0 obj<</S/Launch/F(#ADDPRINTERCOMMAN)>>endobj
+587 0 obj<</Subtype/Link/Rect[200.6 67.8 326.0 80.8]/Border[0 0 0]/A 586 0 R>>endobj
+588 0 obj[577 0 R
579 0 R
581 0 R
583 0 R
585 0 R
-587 0 R
-589 0 R
-591 0 R
-593 0 R
-595 0 R
-597 0 R
-599 0 R
-601 0 R
-603 0 R
-605 0 R
-607 0 R
+587 0 R]endobj
+589 0 obj<</S/Launch/F(#ENUMPORTSCOMMAND)>>endobj
+590 0 obj<</Subtype/Link/Rect[451.4 681.4 510.8 694.4]/Border[0 0 0]/A 589 0 R>>endobj
+591 0 obj<</S/Launch/F(#ENUMPORTSCOMMAND)>>endobj
+592 0 obj<</Subtype/Link/Rect[72.0 668.2 118.2 681.2]/Border[0 0 0]/A 591 0 R>>endobj
+593 0 obj<</S/URI/URI(http://imprints.sourceforge.net/)>>endobj
+594 0 obj<</Subtype/Link/Rect[297.8 593.0 437.4 606.0]/Border[0 0 0]/A 593 0 R>>endobj
+595 0 obj[590 0 R
+592 0 R
+594 0 R]endobj
+596 0 obj<</S/URI/URI(http://imprints.sourceforge.net/)>>endobj
+597 0 obj<</Subtype/Link/Rect[409.9 115.4 549.5 128.4]/Border[0 0 0]/A 596 0 R>>endobj
+598 0 obj[597 0 R]endobj
+599 0 obj<</S/Launch/F(#SECURITY)>>endobj
+600 0 obj<</Subtype/Link/Rect[72.0 615.0 115.2 626.0]/Border[0 0 0]/A 599 0 R>>endobj
+601 0 obj<</S/Launch/F(DOMAIN_MEMBER.html)>>endobj
+602 0 obj<</Subtype/Link/Rect[430.0 589.0 554.1 602.0]/Border[0 0 0]/A 601 0 R>>endobj
+603 0 obj<</S/Launch/F(ADS-HOWTO.html)>>endobj
+604 0 obj<</Subtype/Link/Rect[223.0 562.6 317.8 575.6]/Border[0 0 0]/A 603 0 R>>endobj
+605 0 obj[600 0 R
+602 0 R
+604 0 R]endobj
+606 0 obj<</S/Launch/F(smbpasswd.8.html)>>endobj
+607 0 obj<</Subtype/Link/Rect[218.7 452.2 284.9 465.2]/Border[0 0 0]/A 606 0 R>>endobj
+608 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+609 0 obj<</Subtype/Link/Rect[350.3 135.4 422.9 148.4]/Border[0 0 0]/A 608 0 R>>endobj
+610 0 obj<</S/Launch/F(#SECURITY)>>endobj
+611 0 obj<</Subtype/Link/Rect[169.1 95.8 235.1 108.8]/Border[0 0 0]/A 610 0 R>>endobj
+612 0 obj[607 0 R
609 0 R
-611 0 R
-613 0 R
-615 0 R
-617 0 R]endobj
-619 0 obj<</S/Launch/F(#DOMAINADMINGROUP)>>endobj
-620 0 obj<</Subtype/Link/Rect[494.2 641.8 530.0 654.8]/Border[0 0 0]/A 619 0 R>>endobj
-621 0 obj<</S/Launch/F(#DOMAINADMINGROUP)>>endobj
-622 0 obj<</Subtype/Link/Rect[72.0 628.6 127.9 641.6]/Border[0 0 0]/A 621 0 R>>endobj
-623 0 obj[620 0 R
-622 0 R]endobj
-624 0 obj<</S/Launch/F(smbpasswd.8.html)>>endobj
-625 0 obj<</Subtype/Link/Rect[72.0 512.2 138.6 525.2]/Border[0 0 0]/A 624 0 R>>endobj
-626 0 obj<</S/Launch/F(#ADDUSERSCRIPT)>>endobj
-627 0 obj<</Subtype/Link/Rect[420.0 223.7 486.9 236.7]/Border[0 0 0]/A 626 0 R>>endobj
-628 0 obj[625 0 R
+611 0 R]endobj
+613 0 obj<</S/Launch/F(#WORKGROUP)>>endobj
+614 0 obj<</Subtype/Link/Rect[146.2 721.0 225.4 734.0]/Border[0 0 0]/A 613 0 R>>endobj
+615 0 obj<</S/Launch/F(#ENCRYPTPASSWORDS)>>endobj
+616 0 obj<</Subtype/Link/Rect[224.7 641.8 336.9 654.8]/Border[0 0 0]/A 615 0 R>>endobj
+617 0 obj<</S/Launch/F(#PASSWORDSERVER)>>endobj
+618 0 obj<</Subtype/Link/Rect[188.7 602.2 300.9 615.2]/Border[0 0 0]/A 617 0 R>>endobj
+619 0 obj<</S/Launch/F(#SECURITYEQUALSSERVER)>>endobj
+620 0 obj<</Subtype/Link/Rect[275.2 69.0 351.3 82.0]/Border[0 0 0]/A 619 0 R>>endobj
+621 0 obj[614 0 R
+616 0 R
+618 0 R
+620 0 R]endobj
+622 0 obj<</S/Launch/F(winbind.html)>>endobj
+623 0 obj<</Subtype/Link/Rect[151.1 681.4 219.5 694.4]/Border[0 0 0]/A 622 0 R>>endobj
+624 0 obj<</S/URI/URI(http://www.linuxworld.com)>>endobj
+625 0 obj<</Subtype/Link/Rect[438.0 364.6 495.1 377.6]/Border[0 0 0]/A 624 0 R>>endobj
+626 0 obj<</S/URI/URI(http://www.linuxworld.com/linuxworld/lw-1998-10/lw-10-samba.html)>>endobj
+627 0 obj<</Subtype/Link/Rect[72.0 351.4 186.6 364.4]/Border[0 0 0]/A 626 0 R>>endobj
+628 0 obj[623 0 R
+625 0 R
627 0 R]endobj
-629 0 obj<</S/URI/URI(http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp)>>endobj
-630 0 obj<</Subtype/Link/Rect[139.8 721.0 387.6 734.0]/Border[0 0 0]/A 629 0 R>>endobj
-631 0 obj<</S/URI/URI(ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE)>>endobj
-632 0 obj<</Subtype/Link/Rect[285.2 179.8 540.0 192.8]/Border[0 0 0]/A 631 0 R>>endobj
-633 0 obj<</S/URI/URI(ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE)>>endobj
-634 0 obj<</Subtype/Link/Rect[230.8 140.2 505.8 153.2]/Border[0 0 0]/A 633 0 R>>endobj
-635 0 obj[630 0 R
-632 0 R
-634 0 R]endobj
-636 0 obj<</S/URI/URI(http://www.tcpdump.org/)>>endobj
-637 0 obj<</Subtype/Link/Rect[349.4 417.4 455.4 430.4]/Border[0 0 0]/A 636 0 R>>endobj
-638 0 obj<</S/URI/URI(http://www.ethereal.com/)>>endobj
-639 0 obj<</Subtype/Link/Rect[424.5 404.2 536.6 417.2]/Border[0 0 0]/A 638 0 R>>endobj
-640 0 obj[637 0 R
-639 0 R]endobj
-641 0 obj<</S/URI/URI(http://samba.org)>>endobj
-642 0 obj<</Subtype/Link/Rect[233.5 549.4 308.1 562.4]/Border[0 0 0]/A 641 0 R>>endobj
-643 0 obj<</S/URI/URI(http://www.skippy.net/linux/smb-howto.html)>>endobj
-644 0 obj<</Subtype/Link/Rect[144.0 496.6 346.1 509.6]/Border[0 0 0]/A 643 0 R>>endobj
-645 0 obj<</S/URI/URI(http://bioserve.latrobe.edu.au/samba)>>endobj
-646 0 obj<</Subtype/Link/Rect[179.7 470.2 342.3 483.2]/Border[0 0 0]/A 645 0 R>>endobj
-647 0 obj<</S/URI/URI(http://samba.org/cifs/)>>endobj
-648 0 obj<</Subtype/Link/Rect[282.1 457.0 378.7 470.0]/Border[0 0 0]/A 647 0 R>>endobj
-649 0 obj<</S/URI/URI(http://mailhost.cb1.com/~lkcl/ntdom/)>>endobj
-650 0 obj<</Subtype/Link/Rect[241.5 443.8 408.5 456.8]/Border[0 0 0]/A 649 0 R>>endobj
-651 0 obj<</S/URI/URI(ftp://ftp.microsoft.com/developr/drg/CIFS/)>>endobj
-652 0 obj<</Subtype/Link/Rect[277.5 430.6 469.1 443.6]/Border[0 0 0]/A 651 0 R>>endobj
-653 0 obj<</S/URI/URI(http://samba.org)>>endobj
-654 0 obj<</Subtype/Link/Rect[358.2 377.8 432.8 390.8]/Border[0 0 0]/A 653 0 R>>endobj
-655 0 obj<</S/URI/URI(http://www.samba-tng.org/)>>endobj
-656 0 obj<</Subtype/Link/Rect[298.4 338.2 422.8 351.2]/Border[0 0 0]/A 655 0 R>>endobj
-657 0 obj[642 0 R
+629 0 obj<</S/URI/URI(mailto:jtrostel@snapserver.com)>>endobj
+630 0 obj<</Subtype/Link/Rect[197.9 304.6 310.1 317.6]/Border[0 0 0]/A 629 0 R>>endobj
+631 0 obj[630 0 R]endobj
+632 0 obj<</S/URI/URI(http://samba.org/)>>endobj
+633 0 obj<</Subtype/Link/Rect[151.1 438.2 262.3 451.2]/Border[0 0 0]/A 632 0 R>>endobj
+634 0 obj[633 0 R]endobj
+635 0 obj<</S/Launch/F(winbindd.8.html)>>endobj
+636 0 obj<</Subtype/Link/Rect[306.3 235.8 363.4 248.8]/Border[0 0 0]/A 635 0 R>>endobj
+637 0 obj<</S/Launch/F(#WINBINDSEPARATOR)>>endobj
+638 0 obj<</Subtype/Link/Rect[99.0 165.8 190.8 176.8]/Border[0 0 0]/A 637 0 R>>endobj
+639 0 obj<</S/Launch/F(#WINBINDUID)>>endobj
+640 0 obj<</Subtype/Link/Rect[99.0 144.2 158.4 155.2]/Border[0 0 0]/A 639 0 R>>endobj
+641 0 obj<</S/Launch/F(#WINBINDGID)>>endobj
+642 0 obj<</Subtype/Link/Rect[99.0 122.6 158.4 133.6]/Border[0 0 0]/A 641 0 R>>endobj
+643 0 obj<</S/Launch/F(#WINBINDENUMUSERS)>>endobj
+644 0 obj<</Subtype/Link/Rect[99.0 101.0 196.2 112.0]/Border[0 0 0]/A 643 0 R>>endobj
+645 0 obj<</S/Launch/F(#WINBINDENUMGROUP)>>endobj
+646 0 obj<</Subtype/Link/Rect[99.0 90.2 201.6 101.2]/Border[0 0 0]/A 645 0 R>>endobj
+647 0 obj<</S/Launch/F(#TEMPLATEHOMEDIR)>>endobj
+648 0 obj<</Subtype/Link/Rect[99.0 68.6 185.4 79.6]/Border[0 0 0]/A 647 0 R>>endobj
+649 0 obj<</S/Launch/F(#TEMPLATESHELL)>>endobj
+650 0 obj<</Subtype/Link/Rect[99.0 57.8 174.6 68.8]/Border[0 0 0]/A 649 0 R>>endobj
+651 0 obj[636 0 R
+638 0 R
+640 0 R
+642 0 R
644 0 R
646 0 R
648 0 R
-650 0 R
-652 0 R
-654 0 R
-656 0 R]endobj
-658 0 obj<</S/URI/URI(http://lists.samba.org/)>>endobj
-659 0 obj<</Subtype/Link/Rect[132.8 575.8 227.8 588.8]/Border[0 0 0]/A 658 0 R>>endobj
-660 0 obj<</S/URI/URI(http://lists.samba.org/mailman/roster/samba-ntdom)>>endobj
-661 0 obj<</Subtype/Link/Rect[306.3 562.6 328.0 575.6]/Border[0 0 0]/A 660 0 R>>endobj
-662 0 obj[659 0 R
-661 0 R]endobj
-663 0 obj<</S/Launch/F(Samba-PDC-HOWTO.html)>>endobj
-664 0 obj<</Subtype/Link/Rect[210.4 613.0 317.8 626.0]/Border[0 0 0]/A 663 0 R>>endobj
-665 0 obj[664 0 R]endobj
-666 0 obj<</S/Launch/F(smbpasswd.8.html)>>endobj
-667 0 obj<</Subtype/Link/Rect[218.7 452.2 284.9 465.2]/Border[0 0 0]/A 666 0 R>>endobj
-668 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-669 0 obj<</Subtype/Link/Rect[350.3 135.4 422.9 148.4]/Border[0 0 0]/A 668 0 R>>endobj
-670 0 obj<</S/Launch/F(#SECURITY)>>endobj
-671 0 obj<</Subtype/Link/Rect[169.1 95.8 235.1 108.8]/Border[0 0 0]/A 670 0 R>>endobj
-672 0 obj[667 0 R
-669 0 R
-671 0 R]endobj
-673 0 obj<</S/Launch/F(#WORKGROUP)>>endobj
-674 0 obj<</Subtype/Link/Rect[146.2 721.0 225.4 734.0]/Border[0 0 0]/A 673 0 R>>endobj
-675 0 obj<</S/Launch/F(#ENCRYPTPASSWORDS)>>endobj
-676 0 obj<</Subtype/Link/Rect[224.7 641.8 336.9 654.8]/Border[0 0 0]/A 675 0 R>>endobj
-677 0 obj<</S/Launch/F(#PASSWORDSERVER)>>endobj
-678 0 obj<</Subtype/Link/Rect[188.7 602.2 300.9 615.2]/Border[0 0 0]/A 677 0 R>>endobj
-679 0 obj<</S/Launch/F(#SECURITYEQUALSSERVER)>>endobj
-680 0 obj<</Subtype/Link/Rect[275.2 69.0 351.3 82.0]/Border[0 0 0]/A 679 0 R>>endobj
-681 0 obj[674 0 R
+650 0 R]endobj
+652 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+653 0 obj<</Subtype/Link/Rect[153.2 599.8 225.8 612.8]/Border[0 0 0]/A 652 0 R>>endobj
+654 0 obj<</S/Launch/F(ENCRYPTION.html)>>endobj
+655 0 obj<</Subtype/Link/Rect[303.1 599.8 389.9 612.8]/Border[0 0 0]/A 654 0 R>>endobj
+656 0 obj<</S/Launch/F(UNIX_INSTALL.html)>>endobj
+657 0 obj<</Subtype/Link/Rect[333.5 442.5 438.0 455.5]/Border[0 0 0]/A 656 0 R>>endobj
+658 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+659 0 obj<</Subtype/Link/Rect[440.4 429.3 541.8 442.3]/Border[0 0 0]/A 658 0 R>>endobj
+660 0 obj[653 0 R
+655 0 R
+657 0 R
+659 0 R]endobj
+661 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+662 0 obj<</Subtype/Link/Rect[465.5 659.0 546.8 672.0]/Border[0 0 0]/A 661 0 R>>endobj
+663 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+664 0 obj<</Subtype/Link/Rect[72.0 645.8 92.8 658.8]/Border[0 0 0]/A 663 0 R>>endobj
+665 0 obj<</S/Launch/F(#NETBIOSNAME)>>endobj
+666 0 obj<</Subtype/Link/Rect[93.6 573.4 158.4 584.4]/Border[0 0 0]/A 665 0 R>>endobj
+667 0 obj<</S/Launch/F(#WORKGROUP)>>endobj
+668 0 obj<</Subtype/Link/Rect[93.6 562.6 142.2 573.6]/Border[0 0 0]/A 667 0 R>>endobj
+669 0 obj<</S/Launch/F(#OSLEVEL)>>endobj
+670 0 obj<</Subtype/Link/Rect[93.6 530.2 136.8 541.2]/Border[0 0 0]/A 669 0 R>>endobj
+671 0 obj<</S/Launch/F(#PERFERREDMASTER)>>endobj
+672 0 obj<</Subtype/Link/Rect[93.6 519.4 180.0 530.4]/Border[0 0 0]/A 671 0 R>>endobj
+673 0 obj<</S/Launch/F(#DOMAINMASTER)>>endobj
+674 0 obj<</Subtype/Link/Rect[93.6 508.6 163.8 519.6]/Border[0 0 0]/A 673 0 R>>endobj
+675 0 obj<</S/Launch/F(#LOCALMASTER)>>endobj
+676 0 obj<</Subtype/Link/Rect[93.6 497.8 158.4 508.8]/Border[0 0 0]/A 675 0 R>>endobj
+677 0 obj<</S/Launch/F(#SECURITYEQUALSUSER)>>endobj
+678 0 obj<</Subtype/Link/Rect[93.6 465.4 136.8 476.4]/Border[0 0 0]/A 677 0 R>>endobj
+679 0 obj<</S/Launch/F(#ENCRYPTPASSWORDS)>>endobj
+680 0 obj<</Subtype/Link/Rect[93.6 433.0 185.4 444.0]/Border[0 0 0]/A 679 0 R>>endobj
+681 0 obj<</S/Launch/F(#DOMAINLOGONS)>>endobj
+682 0 obj<</Subtype/Link/Rect[93.6 400.6 163.8 411.6]/Border[0 0 0]/A 681 0 R>>endobj
+683 0 obj<</S/Launch/F(#LOGONPATH)>>endobj
+684 0 obj<</Subtype/Link/Rect[93.6 368.2 147.6 379.2]/Border[0 0 0]/A 683 0 R>>endobj
+685 0 obj<</S/Launch/F(#LOGONDRIVE)>>endobj
+686 0 obj<</Subtype/Link/Rect[93.6 325.0 153.0 336.0]/Border[0 0 0]/A 685 0 R>>endobj
+687 0 obj<</S/Launch/F(#LOGONHOME)>>endobj
+688 0 obj<</Subtype/Link/Rect[93.6 314.2 147.6 325.2]/Border[0 0 0]/A 687 0 R>>endobj
+689 0 obj<</S/Launch/F(#LOGONSCRIPT)>>endobj
+690 0 obj<</Subtype/Link/Rect[93.6 271.0 158.4 282.0]/Border[0 0 0]/A 689 0 R>>endobj
+691 0 obj<</S/Launch/F(#PATH)>>endobj
+692 0 obj<</Subtype/Link/Rect[93.6 227.8 115.2 238.8]/Border[0 0 0]/A 691 0 R>>endobj
+693 0 obj<</S/Launch/F(#READONLY)>>endobj
+694 0 obj<</Subtype/Link/Rect[93.6 217.0 142.2 228.0]/Border[0 0 0]/A 693 0 R>>endobj
+695 0 obj<</S/Launch/F(#WRITELIST)>>endobj
+696 0 obj<</Subtype/Link/Rect[93.6 206.2 147.6 217.2]/Border[0 0 0]/A 695 0 R>>endobj
+697 0 obj<</S/Launch/F(#PATH)>>endobj
+698 0 obj<</Subtype/Link/Rect[93.6 163.0 115.2 174.0]/Border[0 0 0]/A 697 0 R>>endobj
+699 0 obj<</S/Launch/F(#READONLY)>>endobj
+700 0 obj<</Subtype/Link/Rect[93.6 152.2 142.2 163.2]/Border[0 0 0]/A 699 0 R>>endobj
+701 0 obj<</S/Launch/F(#CREATEMASK)>>endobj
+702 0 obj<</Subtype/Link/Rect[93.6 141.4 153.0 152.4]/Border[0 0 0]/A 701 0 R>>endobj
+703 0 obj<</S/Launch/F(#DIRECTORYMASK)>>endobj
+704 0 obj<</Subtype/Link/Rect[93.6 130.6 169.2 141.6]/Border[0 0 0]/A 703 0 R>>endobj
+705 0 obj<</S/Launch/F(ENCRYPTION.html)>>endobj
+706 0 obj<</Subtype/Link/Rect[108.0 65.0 200.6 78.0]/Border[0 0 0]/A 705 0 R>>endobj
+707 0 obj[662 0 R
+664 0 R
+666 0 R
+668 0 R
+670 0 R
+672 0 R
+674 0 R
676 0 R
678 0 R
-680 0 R]endobj
-682 0 obj<</S/Launch/F(winbind.html)>>endobj
-683 0 obj<</Subtype/Link/Rect[151.1 681.4 219.5 694.4]/Border[0 0 0]/A 682 0 R>>endobj
-684 0 obj<</S/URI/URI(http://www.linuxworld.com)>>endobj
-685 0 obj<</Subtype/Link/Rect[438.0 364.6 495.1 377.6]/Border[0 0 0]/A 684 0 R>>endobj
-686 0 obj<</S/URI/URI(http://www.linuxworld.com/linuxworld/lw-1998-10/lw-10-samba.html)>>endobj
-687 0 obj<</Subtype/Link/Rect[72.0 351.4 186.6 364.4]/Border[0 0 0]/A 686 0 R>>endobj
-688 0 obj[683 0 R
-685 0 R
-687 0 R]endobj
-689 0 obj<</Subtype/Link/Rect[85.8 631.0 295.4 644.0]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 734 0]>>endobj
-690 0 obj<</Subtype/Link/Rect[130.0 617.8 166.4 630.8]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 672 0]>>endobj
-691 0 obj<</Subtype/Link/Rect[130.0 604.6 331.4 617.6]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 439 0]>>endobj
-692 0 obj<</Subtype/Link/Rect[177.0 591.4 243.0 604.4]/Border[0 0 0]/Dest[1514 0 R/XYZ 0 311 0]>>endobj
-693 0 obj<</Subtype/Link/Rect[177.0 578.2 282.6 591.2]/Border[0 0 0]/Dest[1516 0 R/XYZ 0 441 0]>>endobj
-694 0 obj<</Subtype/Link/Rect[177.0 565.0 269.4 578.0]/Border[0 0 0]/Dest[1516 0 R/XYZ 0 303 0]>>endobj
-695 0 obj<</Subtype/Link/Rect[177.0 551.8 295.8 564.8]/Border[0 0 0]/Dest[1516 0 R/XYZ 0 157 0]>>endobj
-696 0 obj<</Subtype/Link/Rect[130.0 538.6 384.2 551.6]/Border[0 0 0]/Dest[1518 0 R/XYZ 0 339 0]>>endobj
-697 0 obj<</Subtype/Link/Rect[174.2 525.4 294.6 538.4]/Border[0 0 0]/Dest[1520 0 R/XYZ 0 266 0]>>endobj
-698 0 obj<</Subtype/Link/Rect[174.2 512.2 261.3 525.2]/Border[0 0 0]/Dest[1522 0 R/XYZ 0 734 0]>>endobj
-699 0 obj<</Subtype/Link/Rect[174.2 499.0 226.8 512.0]/Border[0 0 0]/Dest[1524 0 R/XYZ 0 459 0]>>endobj
-700 0 obj<</Subtype/Link/Rect[174.2 485.8 233.5 498.8]/Border[0 0 0]/Dest[1524 0 R/XYZ 0 361 0]>>endobj
-701 0 obj<</Subtype/Link/Rect[174.2 472.6 238.4 485.6]/Border[0 0 0]/Dest[1524 0 R/XYZ 0 224 0]>>endobj
-702 0 obj<</Subtype/Link/Rect[130.0 459.4 528.8 472.4]/Border[0 0 0]/Dest[1526 0 R/XYZ 0 670 0]>>endobj
-703 0 obj<</Subtype/Link/Rect[130.0 446.2 500.9 459.2]/Border[0 0 0]/Dest[1526 0 R/XYZ 0 126 0]>>endobj
-704 0 obj<</Subtype/Link/Rect[174.2 433.0 393.6 446.0]/Border[0 0 0]/Dest[1530 0 R/XYZ 0 734 0]>>endobj
-705 0 obj<</Subtype/Link/Rect[174.2 419.8 455.6 432.8]/Border[0 0 0]/Dest[1530 0 R/XYZ 0 484 0]>>endobj
-706 0 obj<</Subtype/Link/Rect[174.2 406.6 377.1 419.6]/Border[0 0 0]/Dest[1530 0 R/XYZ 0 132 0]>>endobj
-707 0 obj<</Subtype/Link/Rect[130.0 393.4 187.1 406.4]/Border[0 0 0]/Dest[1532 0 R/XYZ 0 263 0]>>endobj
-708 0 obj<</Subtype/Link/Rect[85.8 380.2 358.0 393.2]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 734 0]>>endobj
-709 0 obj<</Subtype/Link/Rect[130.0 367.0 447.2 380.0]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 672 0]>>endobj
-710 0 obj<</Subtype/Link/Rect[130.0 353.8 324.0 366.8]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 497 0]>>endobj
-711 0 obj<</Subtype/Link/Rect[130.0 340.6 234.2 353.6]/Border[0 0 0]/Dest[1534 0 R/XYZ 0 330 0]>>endobj
-712 0 obj<</Subtype/Link/Rect[130.0 327.4 296.5 340.4]/Border[0 0 0]/Dest[1536 0 R/XYZ 0 665 0]>>endobj
-713 0 obj<</Subtype/Link/Rect[174.2 314.2 251.2 327.2]/Border[0 0 0]/Dest[1536 0 R/XYZ 0 432 0]>>endobj
-714 0 obj<</Subtype/Link/Rect[174.2 301.0 276.3 314.0]/Border[0 0 0]/Dest[1536 0 R/XYZ 0 189 0]>>endobj
-715 0 obj<</Subtype/Link/Rect[130.0 287.8 305.7 300.8]/Border[0 0 0]/Dest[1538 0 R/XYZ 0 692 0]>>endobj
-716 0 obj<</Subtype/Link/Rect[130.0 274.6 402.5 287.6]/Border[0 0 0]/Dest[1538 0 R/XYZ 0 260 0]>>endobj
-717 0 obj<</Subtype/Link/Rect[130.0 261.4 392.8 274.4]/Border[0 0 0]/Dest[1542 0 R/XYZ 0 599 0]>>endobj
-718 0 obj<</Subtype/Link/Rect[85.8 248.2 401.7 261.2]/Border[0 0 0]/Dest[1544 0 R/XYZ 0 734 0]>>endobj
-719 0 obj<</Subtype/Link/Rect[130.0 235.0 207.3 248.0]/Border[0 0 0]/Dest[1544 0 R/XYZ 0 672 0]>>endobj
-720 0 obj<</Subtype/Link/Rect[130.0 221.8 250.4 234.8]/Border[0 0 0]/Dest[1546 0 R/XYZ 0 148 0]>>endobj
-721 0 obj<</Subtype/Link/Rect[130.0 208.6 273.9 221.6]/Border[0 0 0]/Dest[1548 0 R/XYZ 0 705 0]>>endobj
-722 0 obj<</Subtype/Link/Rect[85.8 195.4 350.0 208.4]/Border[0 0 0]/Dest[1550 0 R/XYZ 0 734 0]>>endobj
-723 0 obj<</Subtype/Link/Rect[130.0 182.2 185.3 195.2]/Border[0 0 0]/Dest[1550 0 R/XYZ 0 672 0]>>endobj
-724 0 obj<</Subtype/Link/Rect[174.2 169.0 202.1 182.0]/Border[0 0 0]/Dest[1552 0 R/XYZ 0 652 0]>>endobj
-725 0 obj<</Subtype/Link/Rect[85.8 155.8 162.8 168.8]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 734 0]>>endobj
-726 0 obj<</Subtype/Link/Rect[130.0 142.6 187.8 155.6]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 696 0]>>endobj
-727 0 obj<</Subtype/Link/Rect[130.0 129.4 195.1 142.4]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 317 0]>>endobj
-728 0 obj<</Subtype/Link/Rect[174.2 116.2 254.3 129.2]/Border[0 0 0]/Dest[1554 0 R/XYZ 0 131 0]>>endobj
-729 0 obj<</Subtype/Link/Rect[174.2 103.0 337.1 116.0]/Border[0 0 0]/Dest[1558 0 R/XYZ 0 570 0]>>endobj
-730 0 obj<</Subtype/Link/Rect[174.2 89.8 331.3 102.8]/Border[0 0 0]/Dest[1558 0 R/XYZ 0 155 0]>>endobj
-731 0 obj<</Subtype/Link/Rect[174.2 76.6 386.9 89.6]/Border[0 0 0]/Dest[1560 0 R/XYZ 0 459 0]>>endobj
-732 0 obj<</Subtype/Link/Rect[174.2 63.4 287.3 76.4]/Border[0 0 0]/Dest[1562 0 R/XYZ 0 286 0]>>endobj
-733 0 obj[689 0 R
+680 0 R
+682 0 R
+684 0 R
+686 0 R
+688 0 R
690 0 R
-691 0 R
692 0 R
-693 0 R
694 0 R
-695 0 R
696 0 R
-697 0 R
698 0 R
-699 0 R
700 0 R
-701 0 R
702 0 R
-703 0 R
704 0 R
-705 0 R
-706 0 R
-707 0 R
-708 0 R
-709 0 R
-710 0 R
-711 0 R
-712 0 R
-713 0 R
-714 0 R
-715 0 R
-716 0 R
-717 0 R
-718 0 R
-719 0 R
-720 0 R
-721 0 R
-722 0 R
-723 0 R
-724 0 R
-725 0 R
-726 0 R
-727 0 R
-728 0 R
-729 0 R
-730 0 R
-731 0 R
-732 0 R]endobj
-734 0 obj<</Subtype/Link/Rect[130.0 721.0 224.4 734.0]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 734 0]>>endobj
-735 0 obj<</Subtype/Link/Rect[174.2 707.8 255.8 720.8]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 632 0]>>endobj
-736 0 obj<</Subtype/Link/Rect[174.2 694.6 327.6 707.6]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 507 0]>>endobj
-737 0 obj<</Subtype/Link/Rect[174.2 681.4 263.8 694.4]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 423 0]>>endobj
-738 0 obj<</Subtype/Link/Rect[174.2 668.2 276.6 681.2]/Border[0 0 0]/Dest[1564 0 R/XYZ 0 325 0]>>endobj
-739 0 obj<</Subtype/Link/Rect[130.0 655.0 177.4 668.0]/Border[0 0 0]/Dest[1566 0 R/XYZ 0 440 0]>>endobj
-740 0 obj<</Subtype/Link/Rect[174.2 641.8 232.0 654.8]/Border[0 0 0]/Dest[1566 0 R/XYZ 0 406 0]>>endobj
-741 0 obj<</Subtype/Link/Rect[174.2 628.6 302.9 641.6]/Border[0 0 0]/Dest[1568 0 R/XYZ 0 479 0]>>endobj
-742 0 obj<</Subtype/Link/Rect[174.2 615.4 287.0 628.4]/Border[0 0 0]/Dest[1570 0 R/XYZ 0 692 0]>>endobj
-743 0 obj<</Subtype/Link/Rect[174.2 602.2 339.2 615.2]/Border[0 0 0]/Dest[1570 0 R/XYZ 0 511 0]>>endobj
-744 0 obj<</Subtype/Link/Rect[174.2 589.0 260.7 602.0]/Border[0 0 0]/Dest[1572 0 R/XYZ 0 734 0]>>endobj
-745 0 obj<</Subtype/Link/Rect[174.2 575.8 282.7 588.8]/Border[0 0 0]/Dest[1572 0 R/XYZ 0 394 0]>>endobj
-746 0 obj<</Subtype/Link/Rect[174.2 562.6 279.7 575.6]/Border[0 0 0]/Dest[1574 0 R/XYZ 0 718 0]>>endobj
-747 0 obj<</Subtype/Link/Rect[174.2 549.4 259.8 562.4]/Border[0 0 0]/Dest[1574 0 R/XYZ 0 633 0]>>endobj
-748 0 obj<</Subtype/Link/Rect[174.2 536.2 246.4 549.2]/Border[0 0 0]/Dest[1574 0 R/XYZ 0 535 0]>>endobj
-749 0 obj<</Subtype/Link/Rect[85.8 523.0 152.3 536.0]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 734 0]>>endobj
-750 0 obj<</Subtype/Link/Rect[130.0 509.8 187.8 522.8]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 696 0]>>endobj
-751 0 obj<</Subtype/Link/Rect[130.0 496.6 328.0 509.6]/Border[0 0 0]/Dest[1576 0 R/XYZ 0 467 0]>>endobj
-752 0 obj<</Subtype/Link/Rect[85.8 483.4 369.0 496.4]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 734 0]>>endobj
-753 0 obj<</Subtype/Link/Rect[130.0 470.2 170.0 483.2]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 672 0]>>endobj
-754 0 obj<</Subtype/Link/Rect[130.0 457.0 187.8 470.0]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 544 0]>>endobj
-755 0 obj<</Subtype/Link/Rect[130.0 443.8 237.9 456.8]/Border[0 0 0]/Dest[1580 0 R/XYZ 0 231 0]>>endobj
-756 0 obj<</Subtype/Link/Rect[174.2 430.6 230.5 443.6]/Border[0 0 0]/Dest[1582 0 R/XYZ 0 560 0]>>endobj
-757 0 obj<</Subtype/Link/Rect[130.0 417.4 224.4 430.4]/Border[0 0 0]/Dest[1582 0 R/XYZ 0 409 0]>>endobj
-758 0 obj<</Subtype/Link/Rect[174.2 404.2 330.7 417.2]/Border[0 0 0]/Dest[1582 0 R/XYZ 0 294 0]>>endobj
-759 0 obj<</Subtype/Link/Rect[174.2 391.0 269.9 404.0]/Border[0 0 0]/Dest[1584 0 R/XYZ 0 734 0]>>endobj
-760 0 obj<</Subtype/Link/Rect[174.2 377.8 330.4 390.8]/Border[0 0 0]/Dest[1584 0 R/XYZ 0 292 0]>>endobj
-761 0 obj<</Subtype/Link/Rect[174.2 364.6 312.0 377.6]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 665 0]>>endobj
-762 0 obj<</Subtype/Link/Rect[174.2 351.4 244.5 364.4]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 488 0]>>endobj
-763 0 obj<</Subtype/Link/Rect[130.0 338.2 267.8 351.2]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 351 0]>>endobj
-764 0 obj<</Subtype/Link/Rect[174.2 325.0 232.0 338.0]/Border[0 0 0]/Dest[1586 0 R/XYZ 0 209 0]>>endobj
-765 0 obj<</Subtype/Link/Rect[174.2 311.8 237.5 324.8]/Border[0 0 0]/Dest[1588 0 R/XYZ 0 599 0]>>endobj
-766 0 obj<</Subtype/Link/Rect[174.2 298.6 261.3 311.6]/Border[0 0 0]/Dest[1588 0 R/XYZ 0 330 0]>>endobj
-767 0 obj<</Subtype/Link/Rect[130.0 285.4 182.9 298.4]/Border[0 0 0]/Dest[1602 0 R/XYZ 0 296 0]>>endobj
-768 0 obj<</Subtype/Link/Rect[130.0 272.2 182.9 285.2]/Border[0 0 0]/Dest[1604 0 R/XYZ 0 734 0]>>endobj
-769 0 obj<</Subtype/Link/Rect[85.8 259.0 187.5 272.0]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 734 0]>>endobj
-770 0 obj<</Subtype/Link/Rect[130.0 245.8 170.6 258.8]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 696 0]>>endobj
-771 0 obj<</Subtype/Link/Rect[130.0 232.6 186.5 245.6]/Border[0 0 0]/Dest[1606 0 R/XYZ 0 595 0]>>endobj
-772 0 obj<</Subtype/Link/Rect[130.0 219.4 353.1 232.4]/Border[0 0 0]/Dest[1608 0 R/XYZ 0 568 0]>>endobj
-773 0 obj<</Subtype/Link/Rect[130.0 206.2 311.6 219.2]/Border[0 0 0]/Dest[1608 0 R/XYZ 0 414 0]>>endobj
-774 0 obj<</Subtype/Link/Rect[85.8 193.0 175.9 206.0]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 734 0]>>endobj
-775 0 obj<</Subtype/Link/Rect[130.0 179.8 170.6 192.8]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 696 0]>>endobj
-776 0 obj<</Subtype/Link/Rect[130.0 166.6 160.9 179.6]/Border[0 0 0]/Dest[1610 0 R/XYZ 0 608 0]>>endobj
-777 0 obj<</Subtype/Link/Rect[85.8 153.4 420.2 166.4]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 734 0]>>endobj
-778 0 obj<</Subtype/Link/Rect[130.0 140.2 169.4 153.2]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 672 0]>>endobj
-779 0 obj<</Subtype/Link/Rect[130.0 127.0 187.8 140.0]/Border[0 0 0]/Dest[1612 0 R/XYZ 0 412 0]>>endobj
-780 0 obj<</Subtype/Link/Rect[130.0 113.8 244.0 126.8]/Border[0 0 0]/Dest[1614 0 R/XYZ 0 573 0]>>endobj
-781 0 obj<</Subtype/Link/Rect[130.0 100.6 382.4 113.6]/Border[0 0 0]/Dest[1614 0 R/XYZ 0 471 0]>>endobj
-782 0 obj<</Subtype/Link/Rect[130.0 87.4 271.2 100.4]/Border[0 0 0]/Dest[1616 0 R/XYZ 0 734 0]>>endobj
-783 0 obj<</Subtype/Link/Rect[174.2 74.2 291.0 87.2]/Border[0 0 0]/Dest[1616 0 R/XYZ 0 700 0]>>endobj
-784 0 obj<</Subtype/Link/Rect[174.2 61.0 263.5 74.0]/Border[0 0 0]/Dest[1616 0 R/XYZ 0 143 0]>>endobj
-785 0 obj[734 0 R
-735 0 R
+706 0 R]endobj
+708 0 obj<</S/Launch/F(#DOMAINADMINGROUP)>>endobj
+709 0 obj<</Subtype/Link/Rect[494.2 641.8 530.0 654.8]/Border[0 0 0]/A 708 0 R>>endobj
+710 0 obj<</S/Launch/F(#DOMAINADMINGROUP)>>endobj
+711 0 obj<</Subtype/Link/Rect[72.0 628.6 127.9 641.6]/Border[0 0 0]/A 710 0 R>>endobj
+712 0 obj[709 0 R
+711 0 R]endobj
+713 0 obj<</S/Launch/F(smbpasswd.8.html)>>endobj
+714 0 obj<</Subtype/Link/Rect[72.0 551.8 138.6 564.8]/Border[0 0 0]/A 713 0 R>>endobj
+715 0 obj<</S/Launch/F(#ADDUSERSCRIPT)>>endobj
+716 0 obj<</Subtype/Link/Rect[420.0 263.3 486.9 276.3]/Border[0 0 0]/A 715 0 R>>endobj
+717 0 obj[714 0 R
+716 0 R]endobj
+718 0 obj<</S/URI/URI(http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp)>>endobj
+719 0 obj<</Subtype/Link/Rect[139.8 135.8 387.6 148.8]/Border[0 0 0]/A 718 0 R>>endobj
+720 0 obj[719 0 R]endobj
+721 0 obj<</S/URI/URI(ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE)>>endobj
+722 0 obj<</Subtype/Link/Rect[285.2 259.0 540.0 272.0]/Border[0 0 0]/A 721 0 R>>endobj
+723 0 obj<</S/URI/URI(ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE)>>endobj
+724 0 obj<</Subtype/Link/Rect[230.8 219.4 505.8 232.4]/Border[0 0 0]/A 723 0 R>>endobj
+725 0 obj[722 0 R
+724 0 R]endobj
+726 0 obj<</S/URI/URI(http://www.tcpdump.org/)>>endobj
+727 0 obj<</Subtype/Link/Rect[349.4 483.4 455.4 496.4]/Border[0 0 0]/A 726 0 R>>endobj
+728 0 obj<</S/URI/URI(http://www.ethereal.com/)>>endobj
+729 0 obj<</Subtype/Link/Rect[424.5 470.2 536.6 483.2]/Border[0 0 0]/A 728 0 R>>endobj
+730 0 obj[727 0 R
+729 0 R]endobj
+731 0 obj<</S/URI/URI(http://samba.org)>>endobj
+732 0 obj<</Subtype/Link/Rect[233.5 602.2 308.1 615.2]/Border[0 0 0]/A 731 0 R>>endobj
+733 0 obj<</S/URI/URI(http://www.skippy.net/linux/smb-howto.html)>>endobj
+734 0 obj<</Subtype/Link/Rect[144.0 549.4 346.1 562.4]/Border[0 0 0]/A 733 0 R>>endobj
+735 0 obj<</S/URI/URI(http://bioserve.latrobe.edu.au/samba)>>endobj
+736 0 obj<</Subtype/Link/Rect[179.7 523.0 342.3 536.0]/Border[0 0 0]/A 735 0 R>>endobj
+737 0 obj<</S/URI/URI(http://samba.org/cifs/)>>endobj
+738 0 obj<</Subtype/Link/Rect[282.1 509.8 378.7 522.8]/Border[0 0 0]/A 737 0 R>>endobj
+739 0 obj<</S/URI/URI(http://mailhost.cb1.com/~lkcl/ntdom/)>>endobj
+740 0 obj<</Subtype/Link/Rect[241.5 496.6 408.5 509.6]/Border[0 0 0]/A 739 0 R>>endobj
+741 0 obj<</S/URI/URI(ftp://ftp.microsoft.com/developr/drg/CIFS/)>>endobj
+742 0 obj<</Subtype/Link/Rect[277.5 483.4 469.1 496.4]/Border[0 0 0]/A 741 0 R>>endobj
+743 0 obj<</S/URI/URI(http://samba.org)>>endobj
+744 0 obj<</Subtype/Link/Rect[358.2 430.6 432.8 443.6]/Border[0 0 0]/A 743 0 R>>endobj
+745 0 obj<</S/URI/URI(http://www.samba-tng.org/)>>endobj
+746 0 obj<</Subtype/Link/Rect[298.4 391.0 422.8 404.0]/Border[0 0 0]/A 745 0 R>>endobj
+747 0 obj[732 0 R
+734 0 R
736 0 R
-737 0 R
738 0 R
-739 0 R
740 0 R
-741 0 R
742 0 R
-743 0 R
744 0 R
-745 0 R
-746 0 R
-747 0 R
-748 0 R
-749 0 R
-750 0 R
-751 0 R
-752 0 R
-753 0 R
-754 0 R
-755 0 R
-756 0 R
-757 0 R
-758 0 R
+746 0 R]endobj
+748 0 obj<</S/URI/URI(http://lists.samba.org/)>>endobj
+749 0 obj<</Subtype/Link/Rect[132.8 615.4 227.8 628.4]/Border[0 0 0]/A 748 0 R>>endobj
+750 0 obj<</S/URI/URI(http://lists.samba.org/mailman/roster/samba-ntdom)>>endobj
+751 0 obj<</Subtype/Link/Rect[306.3 602.2 328.0 615.2]/Border[0 0 0]/A 750 0 R>>endobj
+752 0 obj[749 0 R
+751 0 R]endobj
+753 0 obj<</S/Launch/F(Samba-PDC-HOWTO.html)>>endobj
+754 0 obj<</Subtype/Link/Rect[210.4 613.0 317.8 626.0]/Border[0 0 0]/A 753 0 R>>endobj
+755 0 obj[754 0 R]endobj
+756 0 obj<</S/URI/URI(http://www.openldap.org/)>>endobj
+757 0 obj<</Subtype/Link/Rect[169.5 560.2 285.9 573.2]/Border[0 0 0]/A 756 0 R>>endobj
+758 0 obj<</S/URI/URI(http://iplanet.netscape.com/directory)>>endobj
+759 0 obj<</Subtype/Link/Rect[223.9 547.0 387.9 560.0]/Border[0 0 0]/A 758 0 R>>endobj
+760 0 obj<</S/URI/URI(http://www.ora.com/)>>endobj
+761 0 obj<</Subtype/Link/Rect[112.6 520.6 202.0 533.6]/Border[0 0 0]/A 760 0 R>>endobj
+762 0 obj<</S/URI/URI(http://www.unav.es/cti/ldap-smb/ldap-smb-2_2-howto.html)>>endobj
+763 0 obj<</Subtype/Link/Rect[125.1 454.6 267.5 467.6]/Border[0 0 0]/A 762 0 R>>endobj
+764 0 obj<</S/URI/URI(http://samba.idealx.org/)>>endobj
+765 0 obj<</Subtype/Link/Rect[243.7 441.4 287.3 454.4]/Border[0 0 0]/A 764 0 R>>endobj
+766 0 obj<</S/Launch/F(#ENCRYPTPASSWORDS)>>endobj
+767 0 obj<</Subtype/Link/Rect[212.8 366.2 332.5 379.2]/Border[0 0 0]/A 766 0 R>>endobj
+768 0 obj[757 0 R
759 0 R
-760 0 R
761 0 R
-762 0 R
763 0 R
-764 0 R
765 0 R
-766 0 R
-767 0 R
-768 0 R
-769 0 R
-770 0 R
-771 0 R
+767 0 R]endobj
+769 0 obj<</S/URI/URI(http://www.padl.com/)>>endobj
+770 0 obj<</Subtype/Link/Rect[284.3 602.2 380.9 615.2]/Border[0 0 0]/A 769 0 R>>endobj
+771 0 obj<</S/Launch/F(samba-patches@samba.org)>>endobj
+772 0 obj<</Subtype/Link/Rect[332.3 487.4 458.0 500.4]/Border[0 0 0]/A 771 0 R>>endobj
+773 0 obj<</S/Launch/F(jerry@samba.org)>>endobj
+774 0 obj<</Subtype/Link/Rect[476.6 487.4 555.8 500.4]/Border[0 0 0]/A 773 0 R>>endobj
+775 0 obj<</S/Launch/F(jerry@samba.org)>>endobj
+776 0 obj<</Subtype/Link/Rect[271.2 237.0 350.4 250.0]/Border[0 0 0]/A 775 0 R>>endobj
+777 0 obj[770 0 R
772 0 R
-773 0 R
774 0 R
-775 0 R
-776 0 R
-777 0 R
-778 0 R
-779 0 R
-780 0 R
-781 0 R
-782 0 R
-783 0 R
-784 0 R]endobj
-786 0 obj<</Subtype/Link/Rect[130.0 721.0 287.0 734.0]/Border[0 0 0]/Dest[1618 0 R/XYZ 0 243 0]>>endobj
-787 0 obj<</Subtype/Link/Rect[130.0 707.8 255.6 720.8]/Border[0 0 0]/Dest[1620 0 R/XYZ 0 718 0]>>endobj
-788 0 obj<</Subtype/Link/Rect[130.0 694.6 330.8 707.6]/Border[0 0 0]/Dest[1620 0 R/XYZ 0 336 0]>>endobj
-789 0 obj<</Subtype/Link/Rect[130.0 681.4 324.3 694.4]/Border[0 0 0]/Dest[1622 0 R/XYZ 0 322 0]>>endobj
-790 0 obj<</Subtype/Link/Rect[135.5 668.2 184.7 681.2]/Border[0 0 0]/Dest[1624 0 R/XYZ 0 492 0]>>endobj
-791 0 obj<</Subtype/Link/Rect[85.8 655.0 287.1 668.0]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 734 0]>>endobj
-792 0 obj<</Subtype/Link/Rect[130.0 641.8 187.8 654.8]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 672 0]>>endobj
-793 0 obj<</Subtype/Link/Rect[130.0 628.6 245.8 641.6]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 557 0]>>endobj
-794 0 obj<</Subtype/Link/Rect[174.2 615.4 263.2 628.4]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 469 0]>>endobj
-795 0 obj<</Subtype/Link/Rect[174.2 602.2 239.9 615.2]/Border[0 0 0]/Dest[1626 0 R/XYZ 0 358 0]>>endobj
-796 0 obj<</Subtype/Link/Rect[85.8 589.0 200.3 602.0]/Border[0 0 0]/Dest[1630 0 R/XYZ 0 734 0]>>endobj
-797 0 obj<</Subtype/Link/Rect[85.8 575.8 206.4 588.8]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 734 0]>>endobj
-798 0 obj<</Subtype/Link/Rect[130.0 562.6 191.4 575.6]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 696 0]>>endobj
-799 0 obj<</Subtype/Link/Rect[130.0 549.4 168.8 562.4]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 449 0]>>endobj
-800 0 obj<</Subtype/Link/Rect[174.2 536.2 219.2 549.2]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 416 0]>>endobj
-801 0 obj<</Subtype/Link/Rect[174.2 523.0 245.1 536.0]/Border[0 0 0]/Dest[1632 0 R/XYZ 0 146 0]>>endobj
-802 0 obj<</Subtype/Link/Rect[174.2 509.8 348.3 522.8]/Border[0 0 0]/Dest[1634 0 R/XYZ 0 652 0]>>endobj
-803 0 obj<</Subtype/Link/Rect[130.0 496.6 196.6 509.6]/Border[0 0 0]/Dest[1634 0 R/XYZ 0 515 0]>>endobj
-804 0 obj<</Subtype/Link/Rect[130.0 483.4 174.6 496.4]/Border[0 0 0]/Dest[1634 0 R/XYZ 0 255 0]>>endobj
-805 0 obj<</Subtype/Link/Rect[130.0 470.2 174.0 483.2]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 718 0]>>endobj
-806 0 obj<</Subtype/Link/Rect[130.0 457.0 168.2 470.0]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 537 0]>>endobj
-807 0 obj<</Subtype/Link/Rect[130.0 443.8 189.3 456.8]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 409 0]>>endobj
-808 0 obj<</Subtype/Link/Rect[130.0 430.6 173.4 443.6]/Border[0 0 0]/Dest[1636 0 R/XYZ 0 189 0]>>endobj
-809 0 obj<</Subtype/Link/Rect[130.0 417.4 178.9 430.4]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 734 0]>>endobj
-810 0 obj<</Subtype/Link/Rect[135.5 404.2 180.7 417.2]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 645 0]>>endobj
-811 0 obj<</Subtype/Link/Rect[135.5 391.0 182.6 404.0]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 477 0]>>endobj
-812 0 obj<</Subtype/Link/Rect[135.5 377.8 208.8 390.8]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 349 0]>>endobj
-813 0 obj<</Subtype/Link/Rect[135.5 364.6 216.2 377.6]/Border[0 0 0]/Dest[1638 0 R/XYZ 0 129 0]>>endobj
-814 0 obj<</Subtype/Link/Rect[135.5 351.4 193.6 364.4]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 639 0]>>endobj
-815 0 obj<</Subtype/Link/Rect[135.5 338.2 192.3 351.2]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 511 0]>>endobj
-816 0 obj<</Subtype/Link/Rect[135.5 325.0 196.0 338.0]/Border[0 0 0]/Dest[1640 0 R/XYZ 0 436 0]>>endobj
-817 0 obj<</Subtype/Link/Rect[135.5 311.8 186.8 324.8]/Border[0 0 0]/Dest[1642 0 R/XYZ 0 388 0]>>endobj
-818 0 obj[786 0 R
-787 0 R
+776 0 R]endobj
+778 0 obj<</S/Launch/F(#LDAPSSL)>>endobj
+779 0 obj<</Subtype/Link/Rect[108.0 61.4 141.3 74.4]/Border[0 0 0]/A 778 0 R>>endobj
+780 0 obj[779 0 R]endobj
+781 0 obj<</S/Launch/F(#LDAPSERVER)>>endobj
+782 0 obj<</Subtype/Link/Rect[108.0 721.0 156.6 734.0]/Border[0 0 0]/A 781 0 R>>endobj
+783 0 obj<</S/Launch/F(#LDAPADMINDN)>>endobj
+784 0 obj<</Subtype/Link/Rect[108.0 707.8 170.9 720.8]/Border[0 0 0]/A 783 0 R>>endobj
+785 0 obj<</S/Launch/F(#LDAPSUFFIX)>>endobj
+786 0 obj<</Subtype/Link/Rect[108.0 694.6 155.4 707.6]/Border[0 0 0]/A 785 0 R>>endobj
+787 0 obj<</S/Launch/F(#LDAPFILTER)>>endobj
+788 0 obj<</Subtype/Link/Rect[108.0 681.4 151.1 694.4]/Border[0 0 0]/A 787 0 R>>endobj
+789 0 obj<</S/Launch/F(#LDAPPORT)>>endobj
+790 0 obj<</Subtype/Link/Rect[108.0 668.2 147.4 681.2]/Border[0 0 0]/A 789 0 R>>endobj
+791 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+792 0 obj<</Subtype/Link/Rect[186.9 641.8 243.1 654.8]/Border[0 0 0]/A 791 0 R>>endobj
+793 0 obj[782 0 R
+784 0 R
+786 0 R
788 0 R
-789 0 R
790 0 R
-791 0 R
-792 0 R
-793 0 R
-794 0 R
-795 0 R
-796 0 R
-797 0 R
-798 0 R
-799 0 R
-800 0 R
-801 0 R
-802 0 R
-803 0 R
-804 0 R
-805 0 R
+792 0 R]endobj
+794 0 obj<</S/Launch/F(ENCRYPTION.html)>>endobj
+795 0 obj<</Subtype/Link/Rect[72.0 566.6 176.8 579.6]/Border[0 0 0]/A 794 0 R>>endobj
+796 0 obj[795 0 R]endobj
+797 0 obj<</S/Launch/F(Samba-PDC-HOWTO.html)>>endobj
+798 0 obj<</Subtype/Link/Rect[72.0 523.0 176.7 536.0]/Border[0 0 0]/A 797 0 R>>endobj
+799 0 obj[798 0 R]endobj
+800 0 obj<</S/URI/URI(mailto:jerry@samba.org)>>endobj
+801 0 obj<</Subtype/Link/Rect[302.7 445.4 381.8 458.4]/Border[0 0 0]/A 800 0 R>>endobj
+802 0 obj[801 0 R]endobj
+803 0 obj<</S/URI/URI(http://www.thursby.com/)>>endobj
+804 0 obj<</Subtype/Link/Rect[91.9 621.8 131.3 634.8]/Border[0 0 0]/A 803 0 R>>endobj
+805 0 obj<</S/URI/URI(http://www.umich.edu/~rsug/netatalk/)>>endobj
+806 0 obj<</Subtype/Link/Rect[72.0 503.0 109.3 516.0]/Border[0 0 0]/A 805 0 R>>endobj
+807 0 obj<</S/URI/URI(http://www.cs.mu.oz.au/appletalk/atalk.html)>>endobj
+808 0 obj<</Subtype/Link/Rect[130.7 503.0 154.8 516.0]/Border[0 0 0]/A 807 0 R>>endobj
+809 0 obj<</S/URI/URI(http://www.eats.com/linux_mac_win.html)>>endobj
+810 0 obj<</Subtype/Link/Rect[72.0 476.6 258.1 489.6]/Border[0 0 0]/A 809 0 R>>endobj
+811 0 obj<</S/URI/URI(http://carol.wins.uva.nl/~leeuw/samba/warp.html)>>endobj
+812 0 obj<</Subtype/Link/Rect[325.6 367.8 544.5 380.8]/Border[0 0 0]/A 811 0 R>>endobj
+813 0 obj[804 0 R
806 0 R
-807 0 R
808 0 R
-809 0 R
810 0 R
-811 0 R
-812 0 R
-813 0 R
-814 0 R
-815 0 R
-816 0 R
-817 0 R]endobj
-819 0 obj<</S/Launch/F(ENCRYPTION.html)>>endobj
-820 0 obj<</Subtype/Link/Rect[174.0 562.6 270.6 575.6]/Border[0 0 0]/A 819 0 R>>endobj
-821 0 obj<</S/Launch/F(#PASSWORDLEVEL)>>endobj
-822 0 obj<</Subtype/Link/Rect[72.0 300.6 153.0 311.6]/Border[0 0 0]/A 821 0 R>>endobj
-823 0 obj<</S/Launch/F(#USERNAMELEVEL)>>endobj
-824 0 obj<</Subtype/Link/Rect[72.0 289.8 147.6 300.8]/Border[0 0 0]/A 823 0 R>>endobj
-825 0 obj[820 0 R
-822 0 R
-824 0 R]endobj
-826 0 obj<</S/Launch/F(winbind.html)>>endobj
-827 0 obj<</Subtype/Link/Rect[503.4 161.0 544.6 174.0]/Border[0 0 0]/A 826 0 R>>endobj
-828 0 obj<</S/Launch/F(winbind.html)>>endobj
-829 0 obj<</Subtype/Link/Rect[72.0 147.8 115.4 160.8]/Border[0 0 0]/A 828 0 R>>endobj
-830 0 obj[827 0 R
-829 0 R]endobj
-831 0 obj<</S/Launch/F(#NTACLSUPPORT)>>endobj
-832 0 obj<</Subtype/Link/Rect[339.9 526.6 438.9 539.6]/Border[0 0 0]/A 831 0 R>>endobj
-833 0 obj[832 0 R]endobj
-834 0 obj<</S/Launch/F(#SECURITYMASK)>>endobj
-835 0 obj<</Subtype/Link/Rect[493.0 707.8 545.8 720.8]/Border[0 0 0]/A 834 0 R>>endobj
-836 0 obj<</S/Launch/F(#SECURITYMASK)>>endobj
-837 0 obj<</Subtype/Link/Rect[72.0 694.6 98.4 707.6]/Border[0 0 0]/A 836 0 R>>endobj
-838 0 obj<</S/Launch/F(#CREATEMASK)>>endobj
-839 0 obj<</Subtype/Link/Rect[356.1 615.4 428.7 628.4]/Border[0 0 0]/A 838 0 R>>endobj
-840 0 obj<</S/Launch/F(#FORCESECURITYMODE)>>endobj
-841 0 obj<</Subtype/Link/Rect[424.3 562.6 549.7 575.6]/Border[0 0 0]/A 840 0 R>>endobj
-842 0 obj<</S/Launch/F(#FORCECREATEMODE)>>endobj
-843 0 obj<</Subtype/Link/Rect[356.1 483.4 468.3 496.4]/Border[0 0 0]/A 842 0 R>>endobj
-844 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-845 0 obj<</Subtype/Link/Rect[72.0 206.2 144.6 219.2]/Border[0 0 0]/A 844 0 R>>endobj
-846 0 obj[835 0 R
-837 0 R
-839 0 R
-841 0 R
-843 0 R
-845 0 R]endobj
-847 0 obj<</S/URI/URI(http://rsync.samba.org/)>>endobj
-848 0 obj<</Subtype/Link/Rect[118.1 89.0 222.3 102.0]/Border[0 0 0]/A 847 0 R>>endobj
-849 0 obj[848 0 R]endobj
-850 0 obj<</S/Launch/F(#OBEYPAMRESTRICTIONS)>>endobj
-851 0 obj<</Subtype/Link/Rect[235.4 659.0 332.9 672.0]/Border[0 0 0]/A 850 0 R>>endobj
-852 0 obj<</S/Launch/F(#ENCRYPTPASSWORDS)>>endobj
-853 0 obj<</Subtype/Link/Rect[338.7 579.8 449.4 592.8]/Border[0 0 0]/A 852 0 R>>endobj
-854 0 obj[851 0 R
-853 0 R]endobj
-855 0 obj<</S/URI/URI(http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp)>>endobj
-856 0 obj<</Subtype/Link/Rect[72.0 586.6 183.5 599.6]/Border[0 0 0]/A 855 0 R>>endobj
-857 0 obj<</S/Launch/F(#HOSTMSDFS)>>endobj
-858 0 obj<</Subtype/Link/Rect[345.1 507.4 417.7 520.4]/Border[0 0 0]/A 857 0 R>>endobj
-859 0 obj<</S/Launch/F(#MSDFSROOT)>>endobj
-860 0 obj<</Subtype/Link/Rect[380.8 494.2 453.4 507.2]/Border[0 0 0]/A 859 0 R>>endobj
-861 0 obj[856 0 R
-858 0 R
-860 0 R]endobj
-862 0 obj<</S/URI/URI(http://imprints.sourceforge.net)>>endobj
-863 0 obj<</Subtype/Link/Rect[143.7 544.6 280.3 557.6]/Border[0 0 0]/A 862 0 R>>endobj
-864 0 obj<</S/URI/URI(http://msdn.microsoft.com/)>>endobj
-865 0 obj<</Subtype/Link/Rect[218.6 518.2 341.1 531.2]/Border[0 0 0]/A 864 0 R>>endobj
-866 0 obj<</S/URI/URI(http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP)>>endobj
-867 0 obj<</Subtype/Link/Rect[72.0 333.4 355.9 346.4]/Border[0 0 0]/A 866 0 R>>endobj
-868 0 obj[863 0 R
-865 0 R
-867 0 R]endobj
-869 0 obj<</S/Launch/F(#WRITELIST)>>endobj
-870 0 obj<</Subtype/Link/Rect[91.9 471.4 157.9 484.4]/Border[0 0 0]/A 869 0 R>>endobj
-871 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-872 0 obj<</Subtype/Link/Rect[184.4 458.2 285.8 471.2]/Border[0 0 0]/A 871 0 R>>endobj
-873 0 obj<</S/Launch/F(#GUESTOK)>>endobj
-874 0 obj<</Subtype/Link/Rect[160.6 431.8 228.6 444.8]/Border[0 0 0]/A 873 0 R>>endobj
-875 0 obj<</S/Launch/F(#MAPTOGUEST)>>endobj
-876 0 obj<</Subtype/Link/Rect[501.3 321.9 536.7 334.9]/Border[0 0 0]/A 875 0 R>>endobj
-877 0 obj<</S/Launch/F(#MAPTOGUEST)>>endobj
-878 0 obj<</Subtype/Link/Rect[94.2 308.7 174.1 321.7]/Border[0 0 0]/A 877 0 R>>endobj
-879 0 obj[870 0 R
-872 0 R
-874 0 R
-876 0 R
-878 0 R]endobj
-880 0 obj<</S/Launch/F(#PRINTERADMIN)>>endobj
-881 0 obj<</Subtype/Link/Rect[451.3 719.6 497.5 732.6]/Border[0 0 0]/A 880 0 R>>endobj
-882 0 obj<</S/Launch/F(#PRINTERADMIN)>>endobj
-883 0 obj<</Subtype/Link/Rect[130.2 706.4 163.2 719.4]/Border[0 0 0]/A 882 0 R>>endobj
-884 0 obj<</S/Launch/F(rpcclient.1.html)>>endobj
-885 0 obj<</Subtype/Link/Rect[233.6 86.5 379.3 99.5]/Border[0 0 0]/A 884 0 R>>endobj
-886 0 obj[881 0 R
-883 0 R
-885 0 R]endobj
-887 0 obj<</S/Launch/F(#SHOWADDPRINTERWIZARD)>>endobj
-888 0 obj<</Subtype/Link/Rect[108.0 350.6 299.4 363.6]/Border[0 0 0]/A 887 0 R>>endobj
-889 0 obj<</S/Launch/F(#ADDPRINTERCOMMAND)>>endobj
-890 0 obj<</Subtype/Link/Rect[453.9 324.2 526.5 337.2]/Border[0 0 0]/A 889 0 R>>endobj
-891 0 obj<</S/Launch/F(#ADDPRINTERCOMMAND)>>endobj
-892 0 obj<</Subtype/Link/Rect[72.0 311.0 118.2 324.0]/Border[0 0 0]/A 891 0 R>>endobj
-893 0 obj<</S/Launch/F(#DELETEPRINTERCOMMAND)>>endobj
-894 0 obj<</Subtype/Link/Rect[189.3 205.4 334.5 218.4]/Border[0 0 0]/A 893 0 R>>endobj
-895 0 obj<</S/Launch/F(#ADDPRINTERCOMMAN)>>endobj
-896 0 obj<</Subtype/Link/Rect[200.6 179.0 326.0 192.0]/Border[0 0 0]/A 895 0 R>>endobj
-897 0 obj[888 0 R
-890 0 R
-892 0 R
-894 0 R
-896 0 R]endobj
-898 0 obj<</S/Launch/F(#ENUMPORTSCOMMAND)>>endobj
-899 0 obj<</Subtype/Link/Rect[451.4 138.2 510.8 151.2]/Border[0 0 0]/A 898 0 R>>endobj
-900 0 obj<</S/Launch/F(#ENUMPORTSCOMMAND)>>endobj
-901 0 obj<</Subtype/Link/Rect[72.0 125.0 118.2 138.0]/Border[0 0 0]/A 900 0 R>>endobj
-902 0 obj[899 0 R
-901 0 R]endobj
-903 0 obj<</S/URI/URI(http://imprints.sourceforge.net/)>>endobj
-904 0 obj<</Subtype/Link/Rect[297.8 674.2 437.4 687.2]/Border[0 0 0]/A 903 0 R>>endobj
-905 0 obj[904 0 R]endobj
-906 0 obj<</S/Launch/F(#SECURITY)>>endobj
-907 0 obj<</Subtype/Link/Rect[72.0 615.0 115.2 626.0]/Border[0 0 0]/A 906 0 R>>endobj
-908 0 obj<</S/Launch/F(DOMAIN_MEMBER.html)>>endobj
-909 0 obj<</Subtype/Link/Rect[430.0 589.0 554.1 602.0]/Border[0 0 0]/A 908 0 R>>endobj
-910 0 obj<</S/Launch/F(ADS-HOWTO.html)>>endobj
-911 0 obj<</Subtype/Link/Rect[223.0 562.6 317.8 575.6]/Border[0 0 0]/A 910 0 R>>endobj
-912 0 obj[907 0 R
-909 0 R
-911 0 R]endobj
-913 0 obj<</S/URI/URI(mailto:jtrostel@snapserver.com)>>endobj
-914 0 obj<</Subtype/Link/Rect[197.9 304.6 310.1 317.6]/Border[0 0 0]/A 913 0 R>>endobj
-915 0 obj[914 0 R]endobj
-916 0 obj<</S/URI/URI(http://samba.org/)>>endobj
-917 0 obj<</Subtype/Link/Rect[151.1 438.2 262.3 451.2]/Border[0 0 0]/A 916 0 R>>endobj
-918 0 obj[917 0 R]endobj
-919 0 obj<</S/Launch/F(winbindd.8.html)>>endobj
-920 0 obj<</Subtype/Link/Rect[306.3 235.8 363.4 248.8]/Border[0 0 0]/A 919 0 R>>endobj
-921 0 obj<</S/Launch/F(#WINBINDSEPARATOR)>>endobj
-922 0 obj<</Subtype/Link/Rect[99.0 165.8 190.8 176.8]/Border[0 0 0]/A 921 0 R>>endobj
-923 0 obj<</S/Launch/F(#WINBINDUID)>>endobj
-924 0 obj<</Subtype/Link/Rect[99.0 144.2 158.4 155.2]/Border[0 0 0]/A 923 0 R>>endobj
-925 0 obj<</S/Launch/F(#WINBINDGID)>>endobj
-926 0 obj<</Subtype/Link/Rect[99.0 122.6 158.4 133.6]/Border[0 0 0]/A 925 0 R>>endobj
-927 0 obj<</S/Launch/F(#WINBINDENUMUSERS)>>endobj
-928 0 obj<</Subtype/Link/Rect[99.0 101.0 196.2 112.0]/Border[0 0 0]/A 927 0 R>>endobj
-929 0 obj<</S/Launch/F(#WINBINDENUMGROUP)>>endobj
-930 0 obj<</Subtype/Link/Rect[99.0 90.2 201.6 101.2]/Border[0 0 0]/A 929 0 R>>endobj
-931 0 obj<</S/Launch/F(#TEMPLATEHOMEDIR)>>endobj
-932 0 obj<</Subtype/Link/Rect[99.0 68.6 185.4 79.6]/Border[0 0 0]/A 931 0 R>>endobj
-933 0 obj<</S/Launch/F(#TEMPLATESHELL)>>endobj
-934 0 obj<</Subtype/Link/Rect[99.0 57.8 174.6 68.8]/Border[0 0 0]/A 933 0 R>>endobj
-935 0 obj[920 0 R
-922 0 R
-924 0 R
-926 0 R
-928 0 R
-930 0 R
-932 0 R
-934 0 R]endobj
-936 0 obj<</S/URI/URI(http://www.openldap.org/)>>endobj
-937 0 obj<</Subtype/Link/Rect[169.5 560.2 285.9 573.2]/Border[0 0 0]/A 936 0 R>>endobj
-938 0 obj<</S/URI/URI(http://iplanet.netscape.com/directory)>>endobj
-939 0 obj<</Subtype/Link/Rect[223.9 547.0 387.9 560.0]/Border[0 0 0]/A 938 0 R>>endobj
-940 0 obj<</S/URI/URI(http://www.ora.com/)>>endobj
-941 0 obj<</Subtype/Link/Rect[112.6 520.6 202.0 533.6]/Border[0 0 0]/A 940 0 R>>endobj
-942 0 obj<</S/URI/URI(http://www.unav.es/cti/ldap-smb/ldap-smb-2_2-howto.html)>>endobj
-943 0 obj<</Subtype/Link/Rect[125.1 454.6 267.5 467.6]/Border[0 0 0]/A 942 0 R>>endobj
-944 0 obj<</S/URI/URI(http://samba.idealx.org/)>>endobj
-945 0 obj<</Subtype/Link/Rect[243.7 441.4 287.3 454.4]/Border[0 0 0]/A 944 0 R>>endobj
-946 0 obj<</S/Launch/F(#ENCRYPTPASSWORDS)>>endobj
-947 0 obj<</Subtype/Link/Rect[212.8 366.2 332.5 379.2]/Border[0 0 0]/A 946 0 R>>endobj
-948 0 obj[937 0 R
-939 0 R
-941 0 R
-943 0 R
-945 0 R
-947 0 R]endobj
-949 0 obj<</S/URI/URI(http://www.padl.com/)>>endobj
-950 0 obj<</Subtype/Link/Rect[284.3 602.2 380.9 615.2]/Border[0 0 0]/A 949 0 R>>endobj
-951 0 obj<</S/Launch/F(samba-patches@samba.org)>>endobj
-952 0 obj<</Subtype/Link/Rect[332.3 487.4 458.0 500.4]/Border[0 0 0]/A 951 0 R>>endobj
-953 0 obj<</S/Launch/F(jerry@samba.org)>>endobj
-954 0 obj<</Subtype/Link/Rect[476.6 487.4 555.8 500.4]/Border[0 0 0]/A 953 0 R>>endobj
-955 0 obj<</S/Launch/F(jerry@samba.org)>>endobj
-956 0 obj<</Subtype/Link/Rect[271.2 237.0 350.4 250.0]/Border[0 0 0]/A 955 0 R>>endobj
-957 0 obj[950 0 R
-952 0 R
-954 0 R
-956 0 R]endobj
-958 0 obj<</S/Launch/F(#LDAPSSL)>>endobj
-959 0 obj<</Subtype/Link/Rect[108.0 61.4 141.3 74.4]/Border[0 0 0]/A 958 0 R>>endobj
-960 0 obj[959 0 R]endobj
-961 0 obj<</S/Launch/F(#LDAPSERVER)>>endobj
-962 0 obj<</Subtype/Link/Rect[108.0 721.0 156.6 734.0]/Border[0 0 0]/A 961 0 R>>endobj
-963 0 obj<</S/Launch/F(#LDAPADMINDN)>>endobj
-964 0 obj<</Subtype/Link/Rect[108.0 707.8 170.9 720.8]/Border[0 0 0]/A 963 0 R>>endobj
-965 0 obj<</S/Launch/F(#LDAPSUFFIX)>>endobj
-966 0 obj<</Subtype/Link/Rect[108.0 694.6 155.4 707.6]/Border[0 0 0]/A 965 0 R>>endobj
-967 0 obj<</S/Launch/F(#LDAPFILTER)>>endobj
-968 0 obj<</Subtype/Link/Rect[108.0 681.4 151.1 694.4]/Border[0 0 0]/A 967 0 R>>endobj
-969 0 obj<</S/Launch/F(#LDAPPORT)>>endobj
-970 0 obj<</Subtype/Link/Rect[108.0 668.2 147.4 681.2]/Border[0 0 0]/A 969 0 R>>endobj
-971 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-972 0 obj<</Subtype/Link/Rect[186.9 641.8 243.1 654.8]/Border[0 0 0]/A 971 0 R>>endobj
-973 0 obj[962 0 R
-964 0 R
-966 0 R
-968 0 R
-970 0 R
-972 0 R]endobj
-974 0 obj<</S/Launch/F(ENCRYPTION.html)>>endobj
-975 0 obj<</Subtype/Link/Rect[72.0 566.6 176.8 579.6]/Border[0 0 0]/A 974 0 R>>endobj
-976 0 obj[975 0 R]endobj
-977 0 obj<</S/Launch/F(Samba-PDC-HOWTO.html)>>endobj
-978 0 obj<</Subtype/Link/Rect[72.0 523.0 176.7 536.0]/Border[0 0 0]/A 977 0 R>>endobj
-979 0 obj[978 0 R]endobj
-980 0 obj<</S/URI/URI(mailto:jerry@samba.org)>>endobj
-981 0 obj<</Subtype/Link/Rect[302.7 445.4 381.8 458.4]/Border[0 0 0]/A 980 0 R>>endobj
-982 0 obj[981 0 R]endobj
-983 0 obj<</S/URI/URI(http://samba.org/samba/cvs.html)>>endobj
-984 0 obj<</Subtype/Link/Rect[354.3 573.4 500.7 586.4]/Border[0 0 0]/A 983 0 R>>endobj
-985 0 obj<</S/URI/URI(http://samba.org/cgi-bin/cvsweb)>>endobj
-986 0 obj<</Subtype/Link/Rect[135.9 373.8 283.2 386.8]/Border[0 0 0]/A 985 0 R>>endobj
-987 0 obj<</S/URI/URI(http://www.cyclic.com/)>>endobj
-988 0 obj<</Subtype/Link/Rect[391.6 262.6 498.2 275.6]/Border[0 0 0]/A 987 0 R>>endobj
-989 0 obj[984 0 R
-986 0 R
-988 0 R]endobj
-990 0 obj<</Subtype/Link/Rect[85.8 670.6 136.2 683.6]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 734 0]>>endobj
-991 0 obj<</Subtype/Link/Rect[130.0 657.4 162.1 670.4]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 655 0]>>endobj
-992 0 obj<</Subtype/Link/Rect[130.0 644.2 177.7 657.2]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 408 0]>>endobj
-993 0 obj<</Subtype/Link/Rect[130.0 631.0 158.4 644.0]/Border[0 0 0]/Dest[1646 0 R/XYZ 0 293 0]>>endobj
-994 0 obj<</Subtype/Link/Rect[130.0 617.8 260.5 630.8]/Border[0 0 0]/Dest[1648 0 R/XYZ 0 228 0]>>endobj
-995 0 obj<</Subtype/Link/Rect[85.8 604.6 221.1 617.6]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 734 0]>>endobj
-996 0 obj<</Subtype/Link/Rect[130.0 591.4 216.2 604.4]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 668 0]>>endobj
-997 0 obj<</Subtype/Link/Rect[130.0 578.2 181.3 591.2]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 461 0]>>endobj
-998 0 obj<</Subtype/Link/Rect[174.2 565.0 533.6 578.0]/Border[0 0 0]/Dest[1650 0 R/XYZ 0 427 0]>>endobj
-999 0 obj<</Subtype/Link/Rect[174.2 551.8 536.9 564.8]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 734 0]>>endobj
-1000 0 obj<</Subtype/Link/Rect[174.2 538.6 490.2 551.6]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 523 0]>>endobj
-1001 0 obj<</Subtype/Link/Rect[174.2 525.4 459.3 538.4]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 408 0]>>endobj
-1002 0 obj<</Subtype/Link/Rect[130.0 512.2 245.8 525.2]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 151 0]>>endobj
-1003 0 obj<</Subtype/Link/Rect[174.2 499.0 351.5 512.0]/Border[0 0 0]/Dest[1652 0 R/XYZ 0 118 0]>>endobj
-1004 0 obj<</Subtype/Link/Rect[174.2 485.8 351.2 498.8]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 626 0]>>endobj
-1005 0 obj<</Subtype/Link/Rect[174.2 472.6 332.5 485.6]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 475 0]>>endobj
-1006 0 obj<</Subtype/Link/Rect[174.2 459.4 301.4 472.4]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 377 0]>>endobj
-1007 0 obj<</Subtype/Link/Rect[130.0 446.2 205.6 459.2]/Border[0 0 0]/Dest[1654 0 R/XYZ 0 292 0]>>endobj
-1008 0 obj<</Subtype/Link/Rect[130.0 433.0 265.9 446.0]/Border[0 0 0]/Dest[1656 0 R/XYZ 0 718 0]>>endobj
-1009 0 obj<</Subtype/Link/Rect[85.8 419.8 157.2 432.8]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 734 0]>>endobj
-1010 0 obj<</Subtype/Link/Rect[130.0 406.6 187.8 419.6]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 696 0]>>endobj
-1011 0 obj<</Subtype/Link/Rect[130.0 393.4 188.7 406.4]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 423 0]>>endobj
-1012 0 obj<</Subtype/Link/Rect[130.0 380.2 189.9 393.2]/Border[0 0 0]/Dest[1658 0 R/XYZ 0 282 0]>>endobj
-1013 0 obj<</Subtype/Link/Rect[130.0 367.0 198.4 380.0]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 613 0]>>endobj
-1014 0 obj<</Subtype/Link/Rect[130.0 353.8 269.0 366.8]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 260 0]>>endobj
-1015 0 obj<</Subtype/Link/Rect[130.0 340.6 167.6 353.6]/Border[0 0 0]/Dest[1660 0 R/XYZ 0 159 0]>>endobj
-1016 0 obj<</Subtype/Link/Rect[85.8 327.4 224.5 340.4]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 734 0]>>endobj
-1017 0 obj<</Subtype/Link/Rect[130.0 314.2 187.8 327.2]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 696 0]>>endobj
-1018 0 obj<</Subtype/Link/Rect[130.0 301.0 188.4 314.0]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 529 0]>>endobj
-1019 0 obj<</Subtype/Link/Rect[130.0 287.8 155.4 300.8]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 199 0]>>endobj
-1020 0 obj<</Subtype/Link/Rect[174.2 274.6 203.6 287.6]/Border[0 0 0]/Dest[1662 0 R/XYZ 0 165 0]>>endobj
-1021 0 obj<</Subtype/Link/Rect[174.2 261.4 203.6 274.4]/Border[0 0 0]/Dest[1664 0 R/XYZ 0 734 0]>>endobj
-1022 0 obj<</Subtype/Link/Rect[174.2 248.2 203.6 261.2]/Border[0 0 0]/Dest[1664 0 R/XYZ 0 530 0]>>endobj
-1023 0 obj<</Subtype/Link/Rect[174.2 235.0 203.6 248.0]/Border[0 0 0]/Dest[1666 0 R/XYZ 0 626 0]>>endobj
-1024 0 obj<</Subtype/Link/Rect[174.2 221.8 203.6 234.8]/Border[0 0 0]/Dest[1666 0 R/XYZ 0 475 0]>>endobj
-1025 0 obj<</Subtype/Link/Rect[174.2 208.6 203.6 221.6]/Border[0 0 0]/Dest[1666 0 R/XYZ 0 351 0]>>endobj
-1026 0 obj<</Subtype/Link/Rect[174.2 195.4 203.6 208.4]/Border[0 0 0]/Dest[1668 0 R/XYZ 0 734 0]>>endobj
-1027 0 obj<</Subtype/Link/Rect[174.2 182.2 203.6 195.2]/Border[0 0 0]/Dest[1668 0 R/XYZ 0 371 0]>>endobj
-1028 0 obj<</Subtype/Link/Rect[174.2 169.0 203.6 182.0]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 705 0]>>endobj
-1029 0 obj<</Subtype/Link/Rect[179.8 155.8 214.6 168.8]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 515 0]>>endobj
-1030 0 obj<</Subtype/Link/Rect[179.8 142.6 214.6 155.6]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 377 0]>>endobj
-1031 0 obj<</Subtype/Link/Rect[130.0 129.4 227.5 142.4]/Border[0 0 0]/Dest[1670 0 R/XYZ 0 239 0]>>endobj
-1032 0 obj[990 0 R
-991 0 R
-992 0 R
-993 0 R
-994 0 R
-995 0 R
-996 0 R
-997 0 R
-998 0 R
-999 0 R
-1000 0 R
-1001 0 R
-1002 0 R
-1003 0 R
-1004 0 R
-1005 0 R
-1006 0 R
-1007 0 R
-1008 0 R
-1009 0 R
-1010 0 R
-1011 0 R
-1012 0 R
-1013 0 R
-1014 0 R
-1015 0 R
-1016 0 R
-1017 0 R
-1018 0 R
-1019 0 R
-1020 0 R
-1021 0 R
-1022 0 R
-1023 0 R
-1024 0 R
-1025 0 R
-1026 0 R
-1027 0 R
-1028 0 R
-1029 0 R
-1030 0 R
-1031 0 R]endobj
-1033 0 obj<</S/URI/URI(http://www.thursby.com/)>>endobj
-1034 0 obj<</Subtype/Link/Rect[91.9 621.8 131.3 634.8]/Border[0 0 0]/A 1033 0 R>>endobj
-1035 0 obj<</S/URI/URI(http://www.umich.edu/~rsug/netatalk/)>>endobj
-1036 0 obj<</Subtype/Link/Rect[72.0 503.0 109.3 516.0]/Border[0 0 0]/A 1035 0 R>>endobj
-1037 0 obj<</S/URI/URI(http://www.cs.mu.oz.au/appletalk/atalk.html)>>endobj
-1038 0 obj<</Subtype/Link/Rect[130.7 503.0 154.8 516.0]/Border[0 0 0]/A 1037 0 R>>endobj
-1039 0 obj<</S/URI/URI(http://www.eats.com/linux_mac_win.html)>>endobj
-1040 0 obj<</Subtype/Link/Rect[72.0 476.6 258.1 489.6]/Border[0 0 0]/A 1039 0 R>>endobj
-1041 0 obj<</S/URI/URI(http://carol.wins.uva.nl/~leeuw/samba/warp.html)>>endobj
-1042 0 obj<</Subtype/Link/Rect[325.6 367.8 544.5 380.8]/Border[0 0 0]/A 1041 0 R>>endobj
-1043 0 obj[1034 0 R
-1036 0 R
-1038 0 R
-1040 0 R
-1042 0 R]endobj
-1044 0 obj<</S/URI/URI(ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/)>>endobj
-1045 0 obj<</Subtype/Link/Rect[72.0 661.0 319.2 674.0]/Border[0 0 0]/A 1044 0 R>>endobj
-1046 0 obj<</S/URI/URI(http://carol.wins.uva.nl/~leeuw/lanman.html)>>endobj
-1047 0 obj<</Subtype/Link/Rect[340.6 661.0 538.7 674.0]/Border[0 0 0]/A 1046 0 R>>endobj
-1048 0 obj<</S/URI/URI(ftp://ftp.cdrom.com/pub/os2/network/ndis/)>>endobj
-1049 0 obj<</Subtype/Link/Rect[173.1 538.6 363.5 551.6]/Border[0 0 0]/A 1048 0 R>>endobj
-1050 0 obj<</S/URI/URI(http://carol.wins.uva.nl/~leeuw/samba/fix.html)>>endobj
-1051 0 obj<</Subtype/Link/Rect[220.2 450.2 429.3 463.2]/Border[0 0 0]/A 1050 0 R>>endobj
-1052 0 obj[1045 0 R
-1047 0 R
-1049 0 R
-1051 0 R]endobj
-1053 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-1054 0 obj<</Subtype/Link/Rect[218.7 321.4 274.9 334.4]/Border[0 0 0]/A 1053 0 R>>endobj
-1055 0 obj[1054 0 R]endobj
-1056 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
-1057 0 obj<</Subtype/Link/Rect[493.6 579.8 549.8 592.8]/Border[0 0 0]/A 1056 0 R>>endobj
-1058 0 obj[1057 0 R]endobj
-1059 0 obj<</S/Launch/F(samba@samba.org)>>endobj
-1060 0 obj<</Subtype/Link/Rect[311.8 650.2 398.3 663.2]/Border[0 0 0]/A 1059 0 R>>endobj
-1061 0 obj<</S/URI/URI(mailto:samba-technical@samba.org)>>endobj
-1062 0 obj<</Subtype/Link/Rect[126.4 637.0 258.8 650.0]/Border[0 0 0]/A 1061 0 R>>endobj
-1063 0 obj<</S/URI/URI(http://samba.org/samba/)>>endobj
-1064 0 obj<</Subtype/Link/Rect[161.5 439.0 270.3 452.0]/Border[0 0 0]/A 1063 0 R>>endobj
-1065 0 obj<</S/Launch/F(Diagnosis.html)>>endobj
-1066 0 obj<</Subtype/Link/Rect[185.0 337.4 229.3 350.4]/Border[0 0 0]/A 1065 0 R>>endobj
-1067 0 obj[1060 0 R
-1062 0 R
-1064 0 R
-1066 0 R]endobj
-1068 0 obj<</S/URI/URI(mailto:samba@samba.org)>>endobj
-1069 0 obj<</Subtype/Link/Rect[164.2 180.2 250.8 193.2]/Border[0 0 0]/A 1068 0 R>>endobj
-1070 0 obj<</S/URI/URI(http://samba.org/samba)>>endobj
-1071 0 obj<</Subtype/Link/Rect[233.0 167.0 338.7 180.0]/Border[0 0 0]/A 1070 0 R>>endobj
-1072 0 obj[1069 0 R
-1071 0 R]endobj
-1073 0 obj<</Dests 1074 0 R>>endobj
-1074 0 obj<</Kids[1075 0 R]>>endobj
-1075 0 obj<</Limits[(10)(winbind)]/Names[(10)1076 0 R(11)1077 0 R(16)1078 0 R(17)1079 0 R(3)1080 0 R(31)1081 0 R(4)1082 0 R(ads)1083 0 R(aen1005)1084 0 R(aen1013)1085 0 R(aen1020)1086 0 R(aen1056)1087 0 R(aen1069)1088 0 R(aen1072)1089 0 R(aen1082)1090 0 R(aen1118)1091 0 R(aen1122)1092 0 R(aen1130)1093 0 R(aen1133)1094 0 R(aen1136)1095 0 R(aen1139)1096 0 R(aen1143)1097 0 R(aen1160)1098 0 R(aen1178)1099 0 R(aen1184)1100 0 R(aen1193)1101 0 R(aen1205)1102 0 R(aen1215)1103 0 R(aen1219)1104 0 R(aen1231)1105 0 R(aen1236)1106 0 R(aen1239)1107 0 R(aen1261)1108 0 R(aen128)1109 0 R(aen1325)1110 0 R(aen1330)1111 0 R(aen1346)1112 0 R(aen1348)1113 0 R(aen1362)1114 0 R(aen1384)1115 0 R(aen1400)1116 0 R(aen1416)1117 0 R(aen1427)1118 0 R(aen1435)1119 0 R(aen144)1120 0 R(aen1447)1121 0 R(aen1459)1122 0 R(aen1464)1123 0 R(aen1472)1124 0 R(aen1477)1125 0 R(aen1480)1126 0 R(aen1492)1127 0 R(aen1502)1128 0 R(aen153)1129 0 R(aen1530)1130 0 R(aen1538)1131 0 R(aen1555)1132 0 R(aen1562)1133 0 R(aen1567)1134 0 R(aen1572)1135 0 R(aen1593)1136 0 R(aen1602)1137 0 R(aen1613)1138 0 R(aen1633)1139 0 R(aen1648)1140 0 R(aen1662)1141 0 R(aen1669)1142 0 R(aen169)1143 0 R(aen1691)1144 0 R(aen1755)1145 0 R(aen1776)1146 0 R(aen18)1147 0 R(aen1820)1148 0 R(aen1827)1149 0 R(aen183)1150 0 R(aen1847)1151 0 R(aen188)1152 0 R(aen1882)1153 0 R(aen1908)1154 0 R(aen192)1155 0 R(aen1930)1156 0 R(aen1938)1157 0 R(aen195)1158 0 R(aen1973)1159 0 R(aen1989)1160 0 R(aen20)1161 0 R(aen2000)1162 0 R(aen2030)1163 0 R(aen2038)1164 0 R(aen204)1165 0 R(aen2042)1166 0 R(aen2052)1167 0 R(aen2055)1168 0 R(aen2059)1169 0 R(aen2081)1170 0 R(aen2083)1171 0 R(aen209)1172 0 R(aen2099)1173 0 R(aen2108)1174 0 R(aen2116)1175 0 R(aen2144)1176 0 R(aen2155)1177 0 R(aen2167)1178 0 R(aen2170)1179 0 R(aen2173)1180 0 R(aen218)1181 0 R(aen2186)1182 0 R(aen2197)1183 0 R(aen2249)1184 0 R(aen2253)1185 0 R(aen2266)1186 0 R(aen2273)1187 0 R(aen2277)1188 0 R(aen228)1189 0 R(aen2282)1190 0 R(aen2286)1191 0 R(aen2302)1192 0 R(aen2310)1193 0 R(aen2314)1194 0 R(aen2317)1195 0 R(aen232)1196 0 R(aen2324)1197 0 R(aen2337)1198 0 R(aen2351)1199 0 R(aen2362)1200 0 R(aen2381)1201 0 R(aen241)1202 0 R(aen2414)1203 0 R(aen2430)1204 0 R(aen2441)1205 0 R(aen2477)1206 0 R(aen2479)1207 0 R(aen248)1208 0 R(aen2496)1209 0 R(aen25)1210 0 R(aen2503)1211 0 R(aen2509)1212 0 R(aen2526)1213 0 R(aen253)1214 0 R(aen2559)1215 0 R(aen2566)1216 0 R(aen2576)1217 0 R(aen2590)1218 0 R(aen2596)1219 0 R(aen2611)1220 0 R(aen2616)1221 0 R(aen2635)1222 0 R(aen2641)1223 0 R(aen2664)1224 0 R(aen2684)1225 0 R(aen2713)1226 0 R(aen2718)1227 0 R(aen2730)1228 0 R(aen2732)1229 0 R(aen2749)1230 0 R(aen2777)1231 0 R(aen2782)1232 0 R(aen2802)1233 0 R(aen2872)1234 0 R(aen288)1235 0 R(aen2880)1236 0 R(aen2891)1237 0 R(aen2896)1238 0 R(aen2899)1239 0 R(aen2904)1240 0 R(aen2982)1241 0 R(aen2988)1242 0 R(aen2990)1243 0 R(aen2998)1244 0 R(aen3004)1245 0 R(aen3008)1246 0 R(aen3015)1247 0 R(aen3020)1248 0 R(aen3025)1249 0 R(aen3029)1250 0 R(aen3034)1251 0 R(aen3037)1252 0 R(aen3040)1253 0 R(aen3045)1254 0 R(aen3049)1255 0 R(aen3056)1256 0 R(aen3061)1257 0 R(aen3065)1258 0 R(aen3068)1259 0 R(aen307)1260 0 R(aen3100)1261 0 R(aen3106)1262 0 R(aen3115)1263 0 R(aen3121)1264 0 R(aen3125)1265 0 R(aen3154)1266 0 R(aen3175)1267 0 R(aen3184)1268 0 R(aen3186)1269 0 R(aen3201)1270 0 R(aen3210)1271 0 R(aen3214)1272 0 R(aen3224)1273 0 R(aen3226)1274 0 R(aen3231)1275 0 R(aen3236)1276 0 R(aen3240)1277 0 R(aen3245)1278 0 R(aen325)1279 0 R(aen3261)1280 0 R(aen3285)1281 0 R(aen3295)1282 0 R(aen3301)1283 0 R(aen3318)1284 0 R(aen3328)1285 0 R(aen3331)1286 0 R(aen335)1287 0 R(aen3354)1288 0 R(aen3359)1289 0 R(aen3369)1290 0 R(aen3371)1291 0 R(aen3377)1292 0 R(aen3383)1293 0 R(aen3398)1294 0 R(aen3403)1295 0 R(aen3409)1296 0 R(aen3417)1297 0 R(aen344)1298 0 R(aen3443)1299 0 R(aen3460)1300 0 R(aen3468)1301 0 R(aen3474)1302 0 R(aen3479)1303 0 R(aen35)1304 0 R(aen362)1305 0 R(aen365)1306 0 R(aen377)1307 0 R(aen392)1308 0 R(aen4)1309 0 R(aen400)1310 0 R(aen414)1311 0 R(aen419)1312 0 R(aen430)1313 0 R(aen436)1314 0 R(aen472)1315 0 R(aen477)1316 0 R(aen496)1317 0 R(aen503)1318 0 R(aen512)1319 0 R(aen544)1320 0 R(aen546)1321 0 R(aen566)1322 0 R(aen572)1323 0 R(aen611)1324 0 R(aen63)1325 0 R(aen654)1326 0 R(aen67)1327 0 R(aen673)1328 0 R(aen714)1329 0 R(aen723)1330 0 R(aen738)1331 0 R(aen786)1332 0 R(aen8)1333 0 R(aen81)1334 0 R(aen830)1335 0 R(aen89)1336 0 R(aen944)1337 0 R(aen970)1338 0 R(aen989)1339 0 R(aen99)1340 0 R(aen997)1341 0 R(browsing-quick)1342 0 R(bugreport)1343 0 R(cvs-access)1344 0 R(diagnosis)1345 0 R(domain-security)1346 0 R(groupmapping)1347 0 R(improved-browsing)1348 0 R(install)1349 0 R(integrate-ms-networks)1350 0 R(msdfs)1351 0 R(oplocks)1352 0 R(other-clients)1353 0 R(pam)1354 0 R(pdb-mysql)1355 0 R(pdb-xml)1356 0 R(portability)1357 0 R(printing)1358 0 R(pwencrypt)1359 0 R(samba-bdc)1360 0 R(samba-howto-collection)1361 0 R(samba-howto-collection.html)1362 0 R(samba-ldap-howto)1363 0 R(samba-pdc)1364 0 R(securitylevels)1365 0 R(speed)1366 0 R(unix-permissions)1367 0 R(winbind)1368 0 R]>>endobj
-1076 0 obj<</D[1450 0 R/XYZ 0 734 0]>>endobj
-1077 0 obj<</D[1452 0 R/XYZ 0 734 0]>>endobj
-1078 0 obj<</D[1506 0 R/XYZ 0 734 0]>>endobj
-1079 0 obj<</D[1508 0 R/XYZ 0 734 0]>>endobj
-1080 0 obj<</D[1396 0 R/XYZ 0 734 0]>>endobj
-1081 0 obj<</D[1644 0 R/XYZ 0 734 0]>>endobj
-1082 0 obj<</D[1398 0 R/XYZ 0 734 0]>>endobj
-1083 0 obj<</D[1494 0 R/XYZ 0 734 0]>>endobj
-1084 0 obj<</D[1476 0 R/XYZ 0 366 0]>>endobj
-1085 0 obj<</D[1476 0 R/XYZ 0 142 0]>>endobj
-1086 0 obj<</D[1478 0 R/XYZ 0 678 0]>>endobj
-1087 0 obj<</D[1480 0 R/XYZ 0 362 0]>>endobj
-1088 0 obj<</D[1482 0 R/XYZ 0 465 0]>>endobj
-1089 0 obj<</D[1482 0 R/XYZ 0 383 0]>>endobj
-1090 0 obj<</D[1484 0 R/XYZ 0 734 0]>>endobj
-1091 0 obj<</D[1488 0 R/XYZ 0 672 0]>>endobj
-1092 0 obj<</D[1488 0 R/XYZ 0 597 0]>>endobj
-1093 0 obj<</D[1488 0 R/XYZ 0 225 0]>>endobj
-1094 0 obj<</D[1490 0 R/XYZ 0 734 0]>>endobj
-1095 0 obj<</D[1490 0 R/XYZ 0 609 0]>>endobj
-1096 0 obj<</D[1490 0 R/XYZ 0 524 0]>>endobj
-1097 0 obj<</D[1490 0 R/XYZ 0 383 0]>>endobj
-1098 0 obj<</D[1492 0 R/XYZ 0 620 0]>>endobj
-1099 0 obj<</D[1494 0 R/XYZ 0 524 0]>>endobj
-1100 0 obj<</D[1494 0 R/XYZ 0 417 0]>>endobj
-1101 0 obj<</D[1494 0 R/XYZ 0 241 0]>>endobj
-1102 0 obj<</D[1496 0 R/XYZ 0 556 0]>>endobj
-1103 0 obj<</D[1496 0 R/XYZ 0 240 0]>>endobj
-1104 0 obj<</D[1496 0 R/XYZ 0 151 0]>>endobj
-1105 0 obj<</D[1498 0 R/XYZ 0 692 0]>>endobj
-1106 0 obj<</D[1498 0 R/XYZ 0 603 0]>>endobj
-1107 0 obj<</D[1498 0 R/XYZ 0 528 0]>>endobj
-1108 0 obj<</D[1500 0 R/XYZ 0 696 0]>>endobj
-1109 0 obj<</D[1406 0 R/XYZ 0 247 0]>>endobj
-1110 0 obj<</D[1502 0 R/XYZ 0 362 0]>>endobj
-1111 0 obj<</D[1502 0 R/XYZ 0 155 0]>>endobj
-1112 0 obj<</D[1504 0 R/XYZ 0 337 0]>>endobj
-1113 0 obj<</D[1506 0 R/XYZ 0 696 0]>>endobj
-1114 0 obj<</D[1514 0 R/XYZ 0 672 0]>>endobj
-1115 0 obj<</D[1514 0 R/XYZ 0 439 0]>>endobj
-1116 0 obj<</D[1514 0 R/XYZ 0 311 0]>>endobj
-1117 0 obj<</D[1516 0 R/XYZ 0 441 0]>>endobj
-1118 0 obj<</D[1516 0 R/XYZ 0 303 0]>>endobj
-1119 0 obj<</D[1516 0 R/XYZ 0 157 0]>>endobj
-1120 0 obj<</D[1408 0 R/XYZ 0 665 0]>>endobj
-1121 0 obj<</D[1518 0 R/XYZ 0 339 0]>>endobj
-1122 0 obj<</D[1520 0 R/XYZ 0 266 0]>>endobj
-1123 0 obj<</D[1522 0 R/XYZ 0 734 0]>>endobj
-1124 0 obj<</D[1524 0 R/XYZ 0 459 0]>>endobj
-1125 0 obj<</D[1524 0 R/XYZ 0 361 0]>>endobj
-1126 0 obj<</D[1524 0 R/XYZ 0 224 0]>>endobj
-1127 0 obj<</D[1526 0 R/XYZ 0 670 0]>>endobj
-1128 0 obj<</D[1526 0 R/XYZ 0 126 0]>>endobj
-1129 0 obj<</D[1408 0 R/XYZ 0 498 0]>>endobj
-1130 0 obj<</D[1530 0 R/XYZ 0 734 0]>>endobj
-1131 0 obj<</D[1530 0 R/XYZ 0 484 0]>>endobj
-1132 0 obj<</D[1530 0 R/XYZ 0 132 0]>>endobj
-1133 0 obj<</D[1532 0 R/XYZ 0 523 0]>>endobj
-1134 0 obj<</D[1532 0 R/XYZ 0 377 0]>>endobj
-1135 0 obj<</D[1532 0 R/XYZ 0 263 0]>>endobj
-1136 0 obj<</D[1534 0 R/XYZ 0 672 0]>>endobj
-1137 0 obj<</D[1534 0 R/XYZ 0 497 0]>>endobj
-1138 0 obj<</D[1534 0 R/XYZ 0 330 0]>>endobj
-1139 0 obj<</D[1536 0 R/XYZ 0 665 0]>>endobj
-1140 0 obj<</D[1536 0 R/XYZ 0 432 0]>>endobj
-1141 0 obj<</D[1536 0 R/XYZ 0 189 0]>>endobj
-1142 0 obj<</D[1538 0 R/XYZ 0 692 0]>>endobj
-1143 0 obj<</D[1408 0 R/XYZ 0 330 0]>>endobj
-1144 0 obj<</D[1538 0 R/XYZ 0 260 0]>>endobj
-1145 0 obj<</D[1542 0 R/XYZ 0 599 0]>>endobj
-1146 0 obj<</D[1544 0 R/XYZ 0 672 0]>>endobj
-1147 0 obj<</D[1394 0 R/XYZ 0 258 0]>>endobj
-1148 0 obj<</D[1546 0 R/XYZ 0 148 0]>>endobj
-1149 0 obj<</D[1548 0 R/XYZ 0 705 0]>>endobj
-1150 0 obj<</D[1410 0 R/XYZ 0 734 0]>>endobj
-1151 0 obj<</D[1550 0 R/XYZ 0 672 0]>>endobj
-1152 0 obj<</D[1410 0 R/XYZ 0 553 0]>>endobj
-1153 0 obj<</D[1552 0 R/XYZ 0 652 0]>>endobj
-1154 0 obj<</D[1554 0 R/XYZ 0 696 0]>>endobj
-1155 0 obj<</D[1410 0 R/XYZ 0 494 0]>>endobj
-1156 0 obj<</D[1554 0 R/XYZ 0 317 0]>>endobj
-1157 0 obj<</D[1554 0 R/XYZ 0 131 0]>>endobj
-1158 0 obj<</D[1410 0 R/XYZ 0 409 0]>>endobj
-1159 0 obj<</D[1558 0 R/XYZ 0 570 0]>>endobj
-1160 0 obj<</D[1558 0 R/XYZ 0 155 0]>>endobj
-1161 0 obj<</D[1396 0 R/XYZ 0 696 0]>>endobj
-1162 0 obj<</D[1560 0 R/XYZ 0 459 0]>>endobj
-1163 0 obj<</D[1562 0 R/XYZ 0 286 0]>>endobj
-1164 0 obj<</D[1564 0 R/XYZ 0 734 0]>>endobj
-1165 0 obj<</D[1412 0 R/XYZ 0 734 0]>>endobj
-1166 0 obj<</D[1564 0 R/XYZ 0 632 0]>>endobj
-1167 0 obj<</D[1564 0 R/XYZ 0 507 0]>>endobj
-1168 0 obj<</D[1564 0 R/XYZ 0 423 0]>>endobj
-1169 0 obj<</D[1564 0 R/XYZ 0 325 0]>>endobj
-1170 0 obj<</D[1566 0 R/XYZ 0 440 0]>>endobj
-1171 0 obj<</D[1566 0 R/XYZ 0 406 0]>>endobj
-1172 0 obj<</D[1412 0 R/XYZ 0 583 0]>>endobj
-1173 0 obj<</D[1568 0 R/XYZ 0 479 0]>>endobj
-1174 0 obj<</D[1570 0 R/XYZ 0 692 0]>>endobj
-1175 0 obj<</D[1570 0 R/XYZ 0 511 0]>>endobj
-1176 0 obj<</D[1572 0 R/XYZ 0 734 0]>>endobj
-1177 0 obj<</D[1572 0 R/XYZ 0 394 0]>>endobj
-1178 0 obj<</D[1574 0 R/XYZ 0 718 0]>>endobj
-1179 0 obj<</D[1574 0 R/XYZ 0 633 0]>>endobj
-1180 0 obj<</D[1574 0 R/XYZ 0 535 0]>>endobj
-1181 0 obj<</D[1412 0 R/XYZ 0 128 0]>>endobj
-1182 0 obj<</D[1576 0 R/XYZ 0 696 0]>>endobj
-1183 0 obj<</D[1576 0 R/XYZ 0 467 0]>>endobj
-1184 0 obj<</D[1580 0 R/XYZ 0 672 0]>>endobj
-1185 0 obj<</D[1580 0 R/XYZ 0 544 0]>>endobj
-1186 0 obj<</D[1580 0 R/XYZ 0 231 0]>>endobj
-1187 0 obj<</D[1582 0 R/XYZ 0 560 0]>>endobj
-1188 0 obj<</D[1582 0 R/XYZ 0 409 0]>>endobj
-1189 0 obj<</D[1416 0 R/XYZ 0 696 0]>>endobj
-1190 0 obj<</D[1582 0 R/XYZ 0 294 0]>>endobj
-1191 0 obj<</D[1584 0 R/XYZ 0 734 0]>>endobj
-1192 0 obj<</D[1584 0 R/XYZ 0 292 0]>>endobj
-1193 0 obj<</D[1586 0 R/XYZ 0 665 0]>>endobj
-1194 0 obj<</D[1586 0 R/XYZ 0 488 0]>>endobj
-1195 0 obj<</D[1586 0 R/XYZ 0 351 0]>>endobj
-1196 0 obj<</D[1416 0 R/XYZ 0 515 0]>>endobj
-1197 0 obj<</D[1586 0 R/XYZ 0 209 0]>>endobj
-1198 0 obj<</D[1588 0 R/XYZ 0 599 0]>>endobj
-1199 0 obj<</D[1588 0 R/XYZ 0 330 0]>>endobj
-1200 0 obj<</D[1588 0 R/XYZ 0 192 0]>>endobj
-1201 0 obj<</D[1590 0 R/XYZ 0 692 0]>>endobj
-1202 0 obj<</D[1416 0 R/XYZ 0 137 0]>>endobj
-1203 0 obj<</D[1590 0 R/XYZ 0 288 0]>>endobj
-1204 0 obj<</D[1592 0 R/XYZ 0 718 0]>>endobj
-1205 0 obj<</D[1592 0 R/XYZ 0 571 0]>>endobj
-1206 0 obj<</D[1594 0 R/XYZ 0 527 0]>>endobj
-1207 0 obj<</D[1594 0 R/XYZ 0 501 0]>>endobj
-1208 0 obj<</D[1418 0 R/XYZ 0 533 0]>>endobj
-1209 0 obj<</D[1596 0 R/XYZ 0 600 0]>>endobj
-1210 0 obj<</D[1402 0 R/XYZ 0 696 0]>>endobj
-1211 0 obj<</D[1598 0 R/XYZ 0 686 0]>>endobj
-1212 0 obj<</D[1598 0 R/XYZ 0 620 0]>>endobj
-1213 0 obj<</D[1598 0 R/XYZ 0 381 0]>>endobj
-1214 0 obj<</D[1418 0 R/XYZ 0 273 0]>>endobj
-1215 0 obj<</D[1600 0 R/XYZ 0 429 0]>>endobj
-1216 0 obj<</D[1602 0 R/XYZ 0 296 0]>>endobj
-1217 0 obj<</D[1604 0 R/XYZ 0 734 0]>>endobj
-1218 0 obj<</D[1606 0 R/XYZ 0 696 0]>>endobj
-1219 0 obj<</D[1606 0 R/XYZ 0 595 0]>>endobj
-1220 0 obj<</D[1608 0 R/XYZ 0 568 0]>>endobj
-1221 0 obj<</D[1608 0 R/XYZ 0 414 0]>>endobj
-1222 0 obj<</D[1610 0 R/XYZ 0 696 0]>>endobj
-1223 0 obj<</D[1610 0 R/XYZ 0 608 0]>>endobj
-1224 0 obj<</D[1612 0 R/XYZ 0 672 0]>>endobj
-1225 0 obj<</D[1612 0 R/XYZ 0 412 0]>>endobj
-1226 0 obj<</D[1614 0 R/XYZ 0 573 0]>>endobj
-1227 0 obj<</D[1614 0 R/XYZ 0 471 0]>>endobj
-1228 0 obj<</D[1616 0 R/XYZ 0 734 0]>>endobj
-1229 0 obj<</D[1616 0 R/XYZ 0 700 0]>>endobj
-1230 0 obj<</D[1616 0 R/XYZ 0 143 0]>>endobj
-1231 0 obj<</D[1618 0 R/XYZ 0 243 0]>>endobj
-1232 0 obj<</D[1620 0 R/XYZ 0 718 0]>>endobj
-1233 0 obj<</D[1620 0 R/XYZ 0 336 0]>>endobj
-1234 0 obj<</D[1622 0 R/XYZ 0 322 0]>>endobj
-1235 0 obj<</D[1424 0 R/XYZ 0 560 0]>>endobj
-1236 0 obj<</D[1624 0 R/XYZ 0 492 0]>>endobj
-1237 0 obj<</D[1626 0 R/XYZ 0 672 0]>>endobj
-1238 0 obj<</D[1626 0 R/XYZ 0 557 0]>>endobj
-1239 0 obj<</D[1626 0 R/XYZ 0 469 0]>>endobj
-1240 0 obj<</D[1626 0 R/XYZ 0 358 0]>>endobj
-1241 0 obj<</D[1632 0 R/XYZ 0 696 0]>>endobj
-1242 0 obj<</D[1632 0 R/XYZ 0 449 0]>>endobj
-1243 0 obj<</D[1632 0 R/XYZ 0 416 0]>>endobj
-1244 0 obj<</D[1632 0 R/XYZ 0 146 0]>>endobj
-1245 0 obj<</D[1634 0 R/XYZ 0 652 0]>>endobj
-1246 0 obj<</D[1634 0 R/XYZ 0 515 0]>>endobj
-1247 0 obj<</D[1634 0 R/XYZ 0 255 0]>>endobj
-1248 0 obj<</D[1636 0 R/XYZ 0 718 0]>>endobj
-1249 0 obj<</D[1636 0 R/XYZ 0 537 0]>>endobj
-1250 0 obj<</D[1636 0 R/XYZ 0 409 0]>>endobj
-1251 0 obj<</D[1636 0 R/XYZ 0 189 0]>>endobj
-1252 0 obj<</D[1638 0 R/XYZ 0 734 0]>>endobj
-1253 0 obj<</D[1638 0 R/XYZ 0 645 0]>>endobj
-1254 0 obj<</D[1638 0 R/XYZ 0 477 0]>>endobj
-1255 0 obj<</D[1638 0 R/XYZ 0 349 0]>>endobj
-1256 0 obj<</D[1638 0 R/XYZ 0 129 0]>>endobj
-1257 0 obj<</D[1640 0 R/XYZ 0 639 0]>>endobj
-1258 0 obj<</D[1640 0 R/XYZ 0 511 0]>>endobj
-1259 0 obj<</D[1640 0 R/XYZ 0 436 0]>>endobj
-1260 0 obj<</D[1426 0 R/XYZ 0 613 0]>>endobj
-1261 0 obj<</D[1642 0 R/XYZ 0 388 0]>>endobj
-1262 0 obj<</D[1642 0 R/XYZ 0 170 0]>>endobj
-1263 0 obj<</D[1646 0 R/XYZ 0 655 0]>>endobj
-1264 0 obj<</D[1646 0 R/XYZ 0 408 0]>>endobj
-1265 0 obj<</D[1646 0 R/XYZ 0 293 0]>>endobj
-1266 0 obj<</D[1648 0 R/XYZ 0 228 0]>>endobj
-1267 0 obj<</D[1650 0 R/XYZ 0 668 0]>>endobj
-1268 0 obj<</D[1650 0 R/XYZ 0 461 0]>>endobj
-1269 0 obj<</D[1650 0 R/XYZ 0 427 0]>>endobj
-1270 0 obj<</D[1652 0 R/XYZ 0 734 0]>>endobj
-1271 0 obj<</D[1652 0 R/XYZ 0 523 0]>>endobj
-1272 0 obj<</D[1652 0 R/XYZ 0 408 0]>>endobj
-1273 0 obj<</D[1652 0 R/XYZ 0 151 0]>>endobj
-1274 0 obj<</D[1652 0 R/XYZ 0 118 0]>>endobj
-1275 0 obj<</D[1654 0 R/XYZ 0 626 0]>>endobj
-1276 0 obj<</D[1654 0 R/XYZ 0 475 0]>>endobj
-1277 0 obj<</D[1654 0 R/XYZ 0 377 0]>>endobj
-1278 0 obj<</D[1654 0 R/XYZ 0 292 0]>>endobj
-1279 0 obj<</D[1428 0 R/XYZ 0 622 0]>>endobj
-1280 0 obj<</D[1656 0 R/XYZ 0 718 0]>>endobj
-1281 0 obj<</D[1658 0 R/XYZ 0 696 0]>>endobj
-1282 0 obj<</D[1658 0 R/XYZ 0 423 0]>>endobj
-1283 0 obj<</D[1658 0 R/XYZ 0 282 0]>>endobj
-1284 0 obj<</D[1660 0 R/XYZ 0 613 0]>>endobj
-1285 0 obj<</D[1660 0 R/XYZ 0 260 0]>>endobj
-1286 0 obj<</D[1660 0 R/XYZ 0 159 0]>>endobj
-1287 0 obj<</D[1428 0 R/XYZ 0 266 0]>>endobj
-1288 0 obj<</D[1662 0 R/XYZ 0 696 0]>>endobj
-1289 0 obj<</D[1662 0 R/XYZ 0 529 0]>>endobj
-1290 0 obj<</D[1662 0 R/XYZ 0 199 0]>>endobj
-1291 0 obj<</D[1662 0 R/XYZ 0 165 0]>>endobj
-1292 0 obj<</D[1664 0 R/XYZ 0 734 0]>>endobj
-1293 0 obj<</D[1664 0 R/XYZ 0 530 0]>>endobj
-1294 0 obj<</D[1666 0 R/XYZ 0 626 0]>>endobj
-1295 0 obj<</D[1666 0 R/XYZ 0 475 0]>>endobj
-1296 0 obj<</D[1666 0 R/XYZ 0 351 0]>>endobj
-1297 0 obj<</D[1668 0 R/XYZ 0 734 0]>>endobj
-1298 0 obj<</D[1430 0 R/XYZ 0 520 0]>>endobj
-1299 0 obj<</D[1668 0 R/XYZ 0 371 0]>>endobj
-1300 0 obj<</D[1670 0 R/XYZ 0 705 0]>>endobj
-1301 0 obj<</D[1670 0 R/XYZ 0 515 0]>>endobj
-1302 0 obj<</D[1670 0 R/XYZ 0 377 0]>>endobj
-1303 0 obj<</D[1670 0 R/XYZ 0 239 0]>>endobj
-1304 0 obj<</D[1402 0 R/XYZ 0 568 0]>>endobj
-1305 0 obj<</D[1432 0 R/XYZ 0 734 0]>>endobj
-1306 0 obj<</D[1432 0 R/XYZ 0 645 0]>>endobj
-1307 0 obj<</D[1434 0 R/XYZ 0 696 0]>>endobj
-1308 0 obj<</D[1436 0 R/XYZ 0 604 0]>>endobj
-1309 0 obj<</D[1386 0 R/XYZ 0 696 0]>>endobj
-1310 0 obj<</D[1436 0 R/XYZ 0 159 0]>>endobj
-1311 0 obj<</D[1438 0 R/XYZ 0 483 0]>>endobj
-1312 0 obj<</D[1438 0 R/XYZ 0 305 0]>>endobj
-1313 0 obj<</D[1440 0 R/XYZ 0 467 0]>>endobj
-1314 0 obj<</D[1440 0 R/XYZ 0 187 0]>>endobj
-1315 0 obj<</D[1444 0 R/XYZ 0 672 0]>>endobj
-1316 0 obj<</D[1444 0 R/XYZ 0 531 0]>>endobj
-1317 0 obj<</D[1446 0 R/XYZ 0 734 0]>>endobj
-1318 0 obj<</D[1446 0 R/XYZ 0 609 0]>>endobj
-1319 0 obj<</D[1446 0 R/XYZ 0 511 0]>>endobj
-1320 0 obj<</D[1448 0 R/XYZ 0 681 0]>>endobj
-1321 0 obj<</D[1450 0 R/XYZ 0 696 0]>>endobj
-1322 0 obj<</D[1454 0 R/XYZ 0 672 0]>>endobj
-1323 0 obj<</D[1454 0 R/XYZ 0 584 0]>>endobj
-1324 0 obj<</D[1456 0 R/XYZ 0 718 0]>>endobj
-1325 0 obj<</D[1402 0 R/XYZ 0 163 0]>>endobj
-1326 0 obj<</D[1458 0 R/XYZ 0 613 0]>>endobj
-1327 0 obj<</D[1404 0 R/XYZ 0 734 0]>>endobj
-1328 0 obj<</D[1458 0 R/XYZ 0 227 0]>>endobj
-1329 0 obj<</D[1460 0 R/XYZ 0 319 0]>>endobj
-1330 0 obj<</D[1462 0 R/XYZ 0 734 0]>>endobj
-1331 0 obj<</D[1462 0 R/XYZ 0 385 0]>>endobj
-1332 0 obj<</D[1464 0 R/XYZ 0 129 0]>>endobj
-1333 0 obj<</D[1388 0 R/XYZ 0 734 0]>>endobj
-1334 0 obj<</D[1404 0 R/XYZ 0 385 0]>>endobj
-1335 0 obj<</D[1466 0 R/XYZ 0 124 0]>>endobj
-1336 0 obj<</D[1404 0 R/XYZ 0 257 0]>>endobj
-1337 0 obj<</D[1472 0 R/XYZ 0 507 0]>>endobj
-1338 0 obj<</D[1474 0 R/XYZ 0 520 0]>>endobj
-1339 0 obj<</D[1476 0 R/XYZ 0 734 0]>>endobj
-1340 0 obj<</D[1406 0 R/XYZ 0 734 0]>>endobj
-1341 0 obj<</D[1476 0 R/XYZ 0 540 0]>>endobj
-1342 0 obj<</D[1436 0 R/XYZ 0 734 0]>>endobj
-1343 0 obj<</D[1658 0 R/XYZ 0 734 0]>>endobj
-1344 0 obj<</D[1626 0 R/XYZ 0 734 0]>>endobj
-1345 0 obj<</D[1662 0 R/XYZ 0 734 0]>>endobj
-1346 0 obj<</D[1500 0 R/XYZ 0 734 0]>>endobj
-1347 0 obj<</D[1630 0 R/XYZ 0 734 0]>>endobj
-1348 0 obj<</D[1416 0 R/XYZ 0 734 0]>>endobj
-1349 0 obj<</D[1402 0 R/XYZ 0 734 0]>>endobj
-1350 0 obj<</D[1514 0 R/XYZ 0 734 0]>>endobj
-1351 0 obj<</D[1550 0 R/XYZ 0 734 0]>>endobj
-1352 0 obj<</D[1434 0 R/XYZ 0 734 0]>>endobj
-1353 0 obj<</D[1650 0 R/XYZ 0 734 0]>>endobj
-1354 0 obj<</D[1544 0 R/XYZ 0 734 0]>>endobj
-1355 0 obj<</D[1606 0 R/XYZ 0 734 0]>>endobj
-1356 0 obj<</D[1610 0 R/XYZ 0 734 0]>>endobj
-1357 0 obj<</D[1646 0 R/XYZ 0 734 0]>>endobj
-1358 0 obj<</D[1554 0 R/XYZ 0 734 0]>>endobj
-1359 0 obj<</D[1444 0 R/XYZ 0 734 0]>>endobj
-1360 0 obj<</D[1488 0 R/XYZ 0 734 0]>>endobj
-1361 0 obj<</D[1386 0 R/XYZ 0 734 0]>>endobj
-1362 0 obj<</D[1386 0 R/XYZ 0 734 0]>>endobj
-1363 0 obj<</D[1612 0 R/XYZ 0 734 0]>>endobj
-1364 0 obj<</D[1454 0 R/XYZ 0 734 0]>>endobj
-1365 0 obj<</D[1576 0 R/XYZ 0 734 0]>>endobj
-1366 0 obj<</D[1632 0 R/XYZ 0 734 0]>>endobj
-1367 0 obj<</D[1534 0 R/XYZ 0 734 0]>>endobj
-1368 0 obj<</D[1580 0 R/XYZ 0 734 0]>>endobj
-1369 0 obj<</Type/Pages/Count 151/Kids[1370 0 R
-1372 0 R
-1374 0 R
-1376 0 R
-1378 0 R
-1380 0 R
-1382 0 R
-1384 0 R
-1386 0 R
-1388 0 R
-1390 0 R
-1392 0 R
-1394 0 R
-1396 0 R
-1398 0 R
-1400 0 R
-1402 0 R
-1404 0 R
-1406 0 R
-1408 0 R
-1410 0 R
-1412 0 R
-1414 0 R
-1416 0 R
-1418 0 R
-1420 0 R
-1422 0 R
-1424 0 R
-1426 0 R
-1428 0 R
-1430 0 R
-1432 0 R
-1434 0 R
-1436 0 R
-1438 0 R
-1440 0 R
-1442 0 R
-1444 0 R
-1446 0 R
-1448 0 R
-1450 0 R
-1452 0 R
-1454 0 R
-1456 0 R
-1458 0 R
-1460 0 R
-1462 0 R
-1464 0 R
-1466 0 R
-1468 0 R
-1470 0 R
-1472 0 R
-1474 0 R
-1476 0 R
-1478 0 R
-1480 0 R
-1482 0 R
-1484 0 R
-1486 0 R
-1488 0 R
-1490 0 R
-1492 0 R
-1494 0 R
-1496 0 R
-1498 0 R
-1500 0 R
-1502 0 R
-1504 0 R
-1506 0 R
-1508 0 R
-1510 0 R
-1512 0 R
-1514 0 R
-1516 0 R
-1518 0 R
-1520 0 R
-1522 0 R
-1524 0 R
-1526 0 R
-1528 0 R
-1530 0 R
-1532 0 R
-1534 0 R
-1536 0 R
-1538 0 R
-1540 0 R
-1542 0 R
-1544 0 R
-1546 0 R
-1548 0 R
-1550 0 R
-1552 0 R
-1554 0 R
-1556 0 R
-1558 0 R
-1560 0 R
-1562 0 R
-1564 0 R
-1566 0 R
-1568 0 R
-1570 0 R
-1572 0 R
-1574 0 R
-1576 0 R
-1578 0 R
-1580 0 R
-1582 0 R
-1584 0 R
-1586 0 R
-1588 0 R
-1590 0 R
-1592 0 R
-1594 0 R
-1596 0 R
-1598 0 R
-1600 0 R
-1602 0 R
-1604 0 R
-1606 0 R
-1608 0 R
-1610 0 R
-1612 0 R
-1614 0 R
-1616 0 R
-1618 0 R
-1620 0 R
-1622 0 R
-1624 0 R
-1626 0 R
-1628 0 R
-1630 0 R
-1632 0 R
-1634 0 R
-1636 0 R
-1638 0 R
-1640 0 R
-1642 0 R
-1644 0 R
-1646 0 R
-1648 0 R
-1650 0 R
-1652 0 R
-1654 0 R
-1656 0 R
-1658 0 R
-1660 0 R
-1662 0 R
-1664 0 R
-1666 0 R
-1668 0 R
-1670 0 R
+812 0 R]endobj
+814 0 obj<</S/URI/URI(ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/)>>endobj
+815 0 obj<</Subtype/Link/Rect[72.0 661.0 319.2 674.0]/Border[0 0 0]/A 814 0 R>>endobj
+816 0 obj<</S/URI/URI(http://carol.wins.uva.nl/~leeuw/lanman.html)>>endobj
+817 0 obj<</Subtype/Link/Rect[340.6 661.0 538.7 674.0]/Border[0 0 0]/A 816 0 R>>endobj
+818 0 obj<</S/URI/URI(ftp://ftp.cdrom.com/pub/os2/network/ndis/)>>endobj
+819 0 obj<</Subtype/Link/Rect[173.1 538.6 363.5 551.6]/Border[0 0 0]/A 818 0 R>>endobj
+820 0 obj<</S/URI/URI(http://carol.wins.uva.nl/~leeuw/samba/fix.html)>>endobj
+821 0 obj<</Subtype/Link/Rect[220.2 450.2 429.3 463.2]/Border[0 0 0]/A 820 0 R>>endobj
+822 0 obj[815 0 R
+817 0 R
+819 0 R
+821 0 R]endobj
+823 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+824 0 obj<</Subtype/Link/Rect[218.7 321.4 275.0 334.4]/Border[0 0 0]/A 823 0 R>>endobj
+825 0 obj[824 0 R]endobj
+826 0 obj<</S/Launch/F(smb.conf.5.html)>>endobj
+827 0 obj<</Subtype/Link/Rect[493.6 579.8 549.8 592.8]/Border[0 0 0]/A 826 0 R>>endobj
+828 0 obj[827 0 R]endobj
+829 0 obj<</S/URI/URI(http://samba.org/samba/cvs.html)>>endobj
+830 0 obj<</Subtype/Link/Rect[354.3 573.4 500.7 586.4]/Border[0 0 0]/A 829 0 R>>endobj
+831 0 obj<</S/URI/URI(http://samba.org/cgi-bin/cvsweb)>>endobj
+832 0 obj<</Subtype/Link/Rect[135.9 373.8 283.2 386.8]/Border[0 0 0]/A 831 0 R>>endobj
+833 0 obj<</S/URI/URI(http://www.cyclic.com/)>>endobj
+834 0 obj<</Subtype/Link/Rect[391.6 262.6 498.2 275.6]/Border[0 0 0]/A 833 0 R>>endobj
+835 0 obj[830 0 R
+832 0 R
+834 0 R]endobj
+836 0 obj<</S/Launch/F(Diagnosis.html)>>endobj
+837 0 obj<</Subtype/Link/Rect[185.0 350.6 229.3 363.6]/Border[0 0 0]/A 836 0 R>>endobj
+838 0 obj[837 0 R]endobj
+839 0 obj<</Dests 840 0 R>>endobj
+840 0 obj<</Kids[841 0 R]>>endobj
+841 0 obj<</Limits[(ads)(winbind)]/Names[(ads)842 0 R(aen1001)843 0 R(aen1031)844 0 R(aen1039)845 0 R(aen1043)846 0 R(aen1053)847 0 R(aen1056)848 0 R(aen1060)849 0 R(aen1082)850 0 R(aen1128)851 0 R(aen1144)852 0 R(aen1153)853 0 R(aen1161)854 0 R(aen1189)855 0 R(aen119)856 0 R(aen1200)857 0 R(aen1212)858 0 R(aen1215)859 0 R(aen1218)860 0 R(aen1231)861 0 R(aen1242)862 0 R(aen1275)863 0 R(aen1339)864 0 R(aen1344)865 0 R(aen135)866 0 R(aen1397)867 0 R(aen1401)868 0 R(aen1414)869 0 R(aen1421)870 0 R(aen1425)871 0 R(aen1430)872 0 R(aen1434)873 0 R(aen144)874 0 R(aen1450)875 0 R(aen1458)876 0 R(aen1462)877 0 R(aen1465)878 0 R(aen1472)879 0 R(aen1485)880 0 R(aen1499)881 0 R(aen1510)882 0 R(aen1529)883 0 R(aen1562)884 0 R(aen1578)885 0 R(aen1589)886 0 R(aen160)887 0 R(aen1625)888 0 R(aen1627)889 0 R(aen1644)890 0 R(aen1651)891 0 R(aen1657)892 0 R(aen1674)893 0 R(aen1707)894 0 R(aen1714)895 0 R(aen1724)896 0 R(aen174)897 0 R(aen1744)898 0 R(aen1750)899 0 R(aen1789)900 0 R(aen179)901 0 R(aen183)902 0 R(aen1832)903 0 R(aen1851)904 0 R(aen186)905 0 R(aen1886)906 0 R(aen1895)907 0 R(aen1910)908 0 R(aen195)909 0 R(aen1958)910 0 R(aen20)911 0 R(aen200)912 0 R(aen2002)913 0 R(aen209)914 0 R(aen2116)915 0 R(aen2142)916 0 R(aen2161)917 0 R(aen2169)918 0 R(aen2177)919 0 R(aen2185)920 0 R(aen2192)921 0 R(aen2228)922 0 R(aen223)923 0 R(aen2241)924 0 R(aen2244)925 0 R(aen2254)926 0 R(aen228)927 0 R(aen2290)928 0 R(aen2294)929 0 R(aen2302)930 0 R(aen2305)931 0 R(aen2308)932 0 R(aen2311)933 0 R(aen2315)934 0 R(aen2332)935 0 R(aen2353)936 0 R(aen2373)937 0 R(aen238)938 0 R(aen240)939 0 R(aen2402)940 0 R(aen2407)941 0 R(aen2419)942 0 R(aen2421)943 0 R(aen2438)944 0 R(aen246)945 0 R(aen2466)946 0 R(aen2471)947 0 R(aen2491)948 0 R(aen252)949 0 R(aen2561)950 0 R(aen2569)951 0 R(aen2587)952 0 R(aen2593)953 0 R(aen2602)954 0 R(aen2614)955 0 R(aen2624)956 0 R(aen2628)957 0 R(aen2640)958 0 R(aen2645)959 0 R(aen2648)960 0 R(aen2659)961 0 R(aen2663)962 0 R(aen267)963 0 R(aen2672)964 0 R(aen2679)965 0 R(aen2684)966 0 R(aen2719)967 0 R(aen272)968 0 R(aen2738)969 0 R(aen2756)970 0 R(aen2766)971 0 R(aen2775)972 0 R(aen278)973 0 R(aen2793)974 0 R(aen2796)975 0 R(aen28)976 0 R(aen2814)977 0 R(aen2820)978 0 R(aen2822)979 0 R(aen2830)980 0 R(aen2836)981 0 R(aen2840)982 0 R(aen2847)983 0 R(aen2852)984 0 R(aen2857)985 0 R(aen286)986 0 R(aen2861)987 0 R(aen2866)988 0 R(aen2869)989 0 R(aen2872)990 0 R(aen2877)991 0 R(aen2881)992 0 R(aen2888)993 0 R(aen2893)994 0 R(aen2897)995 0 R(aen2900)996 0 R(aen2932)997 0 R(aen2953)998 0 R(aen2962)999 0 R(aen2964)1000 0 R(aen2979)1001 0 R(aen2988)1002 0 R(aen2992)1003 0 R(aen3002)1004 0 R(aen3004)1005 0 R(aen3009)1006 0 R(aen3014)1007 0 R(aen3018)1008 0 R(aen3023)1009 0 R(aen3039)1010 0 R(aen3063)1011 0 R(aen3068)1012 0 R(aen3071)1013 0 R(aen3076)1014 0 R(aen3111)1015 0 R(aen3118)1016 0 R(aen312)1017 0 R(aen3124)1018 0 R(aen3141)1019 0 R(aen3151)1020 0 R(aen3154)1021 0 R(aen3201)1022 0 R(aen3206)1023 0 R(aen3210)1024 0 R(aen329)1025 0 R(aen337)1026 0 R(aen343)1027 0 R(aen348)1028 0 R(aen365)1029 0 R(aen387)1030 0 R(aen4)1031 0 R(aen403)1032 0 R(aen419)1033 0 R(aen430)1034 0 R(aen438)1035 0 R(aen450)1036 0 R(aen462)1037 0 R(aen467)1038 0 R(aen475)1039 0 R(aen480)1040 0 R(aen483)1041 0 R(aen495)1042 0 R(aen505)1043 0 R(aen533)1044 0 R(aen541)1045 0 R(aen558)1046 0 R(aen56)1047 0 R(aen565)1048 0 R(aen570)1049 0 R(aen575)1050 0 R(aen596)1051 0 R(aen60)1052 0 R(aen640)1053 0 R(aen647)1054 0 R(aen667)1055 0 R(aen702)1056 0 R(aen722)1057 0 R(aen731)1058 0 R(aen74)1059 0 R(aen742)1060 0 R(aen762)1061 0 R(aen777)1062 0 R(aen791)1063 0 R(aen798)1064 0 R(aen8)1065 0 R(aen80)1066 0 R(aen820)1067 0 R(aen884)1068 0 R(aen90)1069 0 R(aen905)1070 0 R(aen927)1071 0 R(aen938)1072 0 R(aen973)1073 0 R(aen990)1074 0 R(bugreport)1075 0 R(cvs-access)1076 0 R(diagnosis)1077 0 R(domain-security)1078 0 R(groupmapping)1079 0 R(improved-browsing)1080 0 R(install)1081 0 R(integrate-ms-networks)1082 0 R(migration)1083 0 R(msdfs)1084 0 R(other-clients)1085 0 R(pam)1086 0 R(portability)1087 0 R(printing)1088 0 R(printingdebug)1089 0 R(samba-bdc)1090 0 R(samba-howto-collection.html)1091 0 R(samba-ldap-howto)1092 0 R(samba-pdc)1093 0 R(samba-project-documentation)1094 0 R(securitylevels)1095 0 R(speed)1096 0 R(unix-permissions)1097 0 R(winbind)1098 0 R]>>endobj
+842 0 obj<</D[1302 0 R/XYZ 0 734 0]>>endobj
+843 0 obj<</D[1192 0 R/XYZ 0 348 0]>>endobj
+844 0 obj<</D[1194 0 R/XYZ 0 171 0]>>endobj
+845 0 obj<</D[1196 0 R/XYZ 0 652 0]>>endobj
+846 0 obj<</D[1196 0 R/XYZ 0 551 0]>>endobj
+847 0 obj<</D[1196 0 R/XYZ 0 426 0]>>endobj
+848 0 obj<</D[1196 0 R/XYZ 0 341 0]>>endobj
+849 0 obj<</D[1196 0 R/XYZ 0 243 0]>>endobj
+850 0 obj<</D[1198 0 R/XYZ 0 359 0]>>endobj
+851 0 obj<</D[1202 0 R/XYZ 0 696 0]>>endobj
+852 0 obj<</D[1204 0 R/XYZ 0 734 0]>>endobj
+853 0 obj<</D[1204 0 R/XYZ 0 278 0]>>endobj
+854 0 obj<</D[1206 0 R/XYZ 0 734 0]>>endobj
+855 0 obj<</D[1206 0 R/XYZ 0 304 0]>>endobj
+856 0 obj<</D[1128 0 R/XYZ 0 303 0]>>endobj
+857 0 obj<</D[1208 0 R/XYZ 0 646 0]>>endobj
+858 0 obj<</D[1208 0 R/XYZ 0 299 0]>>endobj
+859 0 obj<</D[1208 0 R/XYZ 0 210 0]>>endobj
+860 0 obj<</D[1210 0 R/XYZ 0 734 0]>>endobj
+861 0 obj<</D[1212 0 R/XYZ 0 696 0]>>endobj
+862 0 obj<</D[1212 0 R/XYZ 0 467 0]>>endobj
+863 0 obj<</D[1216 0 R/XYZ 0 696 0]>>endobj
+864 0 obj<</D[1218 0 R/XYZ 0 362 0]>>endobj
+865 0 obj<</D[1218 0 R/XYZ 0 155 0]>>endobj
+866 0 obj<</D[1130 0 R/XYZ 0 718 0]>>endobj
+867 0 obj<</D[1222 0 R/XYZ 0 672 0]>>endobj
+868 0 obj<</D[1222 0 R/XYZ 0 544 0]>>endobj
+869 0 obj<</D[1222 0 R/XYZ 0 231 0]>>endobj
+870 0 obj<</D[1224 0 R/XYZ 0 560 0]>>endobj
+871 0 obj<</D[1224 0 R/XYZ 0 409 0]>>endobj
+872 0 obj<</D[1224 0 R/XYZ 0 294 0]>>endobj
+873 0 obj<</D[1226 0 R/XYZ 0 734 0]>>endobj
+874 0 obj<</D[1130 0 R/XYZ 0 551 0]>>endobj
+875 0 obj<</D[1226 0 R/XYZ 0 292 0]>>endobj
+876 0 obj<</D[1228 0 R/XYZ 0 665 0]>>endobj
+877 0 obj<</D[1228 0 R/XYZ 0 488 0]>>endobj
+878 0 obj<</D[1228 0 R/XYZ 0 351 0]>>endobj
+879 0 obj<</D[1228 0 R/XYZ 0 209 0]>>endobj
+880 0 obj<</D[1230 0 R/XYZ 0 599 0]>>endobj
+881 0 obj<</D[1230 0 R/XYZ 0 330 0]>>endobj
+882 0 obj<</D[1230 0 R/XYZ 0 192 0]>>endobj
+883 0 obj<</D[1232 0 R/XYZ 0 692 0]>>endobj
+884 0 obj<</D[1232 0 R/XYZ 0 288 0]>>endobj
+885 0 obj<</D[1234 0 R/XYZ 0 718 0]>>endobj
+886 0 obj<</D[1234 0 R/XYZ 0 571 0]>>endobj
+887 0 obj<</D[1130 0 R/XYZ 0 383 0]>>endobj
+888 0 obj<</D[1236 0 R/XYZ 0 527 0]>>endobj
+889 0 obj<</D[1236 0 R/XYZ 0 501 0]>>endobj
+890 0 obj<</D[1238 0 R/XYZ 0 600 0]>>endobj
+891 0 obj<</D[1240 0 R/XYZ 0 686 0]>>endobj
+892 0 obj<</D[1240 0 R/XYZ 0 620 0]>>endobj
+893 0 obj<</D[1240 0 R/XYZ 0 381 0]>>endobj
+894 0 obj<</D[1242 0 R/XYZ 0 429 0]>>endobj
+895 0 obj<</D[1244 0 R/XYZ 0 296 0]>>endobj
+896 0 obj<</D[1246 0 R/XYZ 0 734 0]>>endobj
+897 0 obj<</D[1130 0 R/XYZ 0 169 0]>>endobj
+898 0 obj<</D[1248 0 R/XYZ 0 672 0]>>endobj
+899 0 obj<</D[1248 0 R/XYZ 0 584 0]>>endobj
+900 0 obj<</D[1250 0 R/XYZ 0 718 0]>>endobj
+901 0 obj<</D[1132 0 R/XYZ 0 652 0]>>endobj
+902 0 obj<</D[1132 0 R/XYZ 0 594 0]>>endobj
+903 0 obj<</D[1252 0 R/XYZ 0 613 0]>>endobj
+904 0 obj<</D[1252 0 R/XYZ 0 227 0]>>endobj
+905 0 obj<</D[1132 0 R/XYZ 0 509 0]>>endobj
+906 0 obj<</D[1254 0 R/XYZ 0 359 0]>>endobj
+907 0 obj<</D[1254 0 R/XYZ 0 149 0]>>endobj
+908 0 obj<</D[1256 0 R/XYZ 0 467 0]>>endobj
+909 0 obj<</D[1132 0 R/XYZ 0 200 0]>>endobj
+910 0 obj<</D[1258 0 R/XYZ 0 208 0]>>endobj
+911 0 obj<</D[1124 0 R/XYZ 0 696 0]>>endobj
+912 0 obj<</D[1134 0 R/XYZ 0 718 0]>>endobj
+913 0 obj<</D[1260 0 R/XYZ 0 203 0]>>endobj
+914 0 obj<</D[1134 0 R/XYZ 0 264 0]>>endobj
+915 0 obj<</D[1266 0 R/XYZ 0 547 0]>>endobj
+916 0 obj<</D[1268 0 R/XYZ 0 560 0]>>endobj
+917 0 obj<</D[1268 0 R/XYZ 0 126 0]>>endobj
+918 0 obj<</D[1270 0 R/XYZ 0 599 0]>>endobj
+919 0 obj<</D[1270 0 R/XYZ 0 425 0]>>endobj
+920 0 obj<</D[1270 0 R/XYZ 0 201 0]>>endobj
+921 0 obj<</D[1272 0 R/XYZ 0 734 0]>>endobj
+922 0 obj<</D[1274 0 R/XYZ 0 428 0]>>endobj
+923 0 obj<</D[1136 0 R/XYZ 0 696 0]>>endobj
+924 0 obj<</D[1276 0 R/XYZ 0 531 0]>>endobj
+925 0 obj<</D[1276 0 R/XYZ 0 449 0]>>endobj
+926 0 obj<</D[1276 0 R/XYZ 0 135 0]>>endobj
+927 0 obj<</D[1136 0 R/XYZ 0 529 0]>>endobj
+928 0 obj<</D[1282 0 R/XYZ 0 672 0]>>endobj
+929 0 obj<</D[1282 0 R/XYZ 0 597 0]>>endobj
+930 0 obj<</D[1282 0 R/XYZ 0 225 0]>>endobj
+931 0 obj<</D[1284 0 R/XYZ 0 734 0]>>endobj
+932 0 obj<</D[1284 0 R/XYZ 0 609 0]>>endobj
+933 0 obj<</D[1284 0 R/XYZ 0 524 0]>>endobj
+934 0 obj<</D[1284 0 R/XYZ 0 383 0]>>endobj
+935 0 obj<</D[1286 0 R/XYZ 0 620 0]>>endobj
+936 0 obj<</D[1288 0 R/XYZ 0 672 0]>>endobj
+937 0 obj<</D[1288 0 R/XYZ 0 412 0]>>endobj
+938 0 obj<</D[1136 0 R/XYZ 0 173 0]>>endobj
+939 0 obj<</D[1136 0 R/XYZ 0 139 0]>>endobj
+940 0 obj<</D[1290 0 R/XYZ 0 573 0]>>endobj
+941 0 obj<</D[1290 0 R/XYZ 0 471 0]>>endobj
+942 0 obj<</D[1292 0 R/XYZ 0 734 0]>>endobj
+943 0 obj<</D[1292 0 R/XYZ 0 700 0]>>endobj
+944 0 obj<</D[1292 0 R/XYZ 0 143 0]>>endobj
+945 0 obj<</D[1138 0 R/XYZ 0 705 0]>>endobj
+946 0 obj<</D[1294 0 R/XYZ 0 243 0]>>endobj
+947 0 obj<</D[1296 0 R/XYZ 0 718 0]>>endobj
+948 0 obj<</D[1296 0 R/XYZ 0 336 0]>>endobj
+949 0 obj<</D[1138 0 R/XYZ 0 501 0]>>endobj
+950 0 obj<</D[1298 0 R/XYZ 0 322 0]>>endobj
+951 0 obj<</D[1300 0 R/XYZ 0 492 0]>>endobj
+952 0 obj<</D[1302 0 R/XYZ 0 500 0]>>endobj
+953 0 obj<</D[1302 0 R/XYZ 0 393 0]>>endobj
+954 0 obj<</D[1302 0 R/XYZ 0 217 0]>>endobj
+955 0 obj<</D[1304 0 R/XYZ 0 530 0]>>endobj
+956 0 obj<</D[1304 0 R/XYZ 0 213 0]>>endobj
+957 0 obj<</D[1304 0 R/XYZ 0 125 0]>>endobj
+958 0 obj<</D[1306 0 R/XYZ 0 665 0]>>endobj
+959 0 obj<</D[1306 0 R/XYZ 0 577 0]>>endobj
+960 0 obj<</D[1306 0 R/XYZ 0 502 0]>>endobj
+961 0 obj<</D[1308 0 R/XYZ 0 696 0]>>endobj
+962 0 obj<</D[1308 0 R/XYZ 0 515 0]>>endobj
+963 0 obj<</D[1140 0 R/XYZ 0 586 0]>>endobj
+964 0 obj<</D[1308 0 R/XYZ 0 137 0]>>endobj
+965 0 obj<</D[1310 0 R/XYZ 0 533 0]>>endobj
+966 0 obj<</D[1310 0 R/XYZ 0 273 0]>>endobj
+967 0 obj<</D[1316 0 R/XYZ 0 560 0]>>endobj
+968 0 obj<</D[1140 0 R/XYZ 0 435 0]>>endobj
+969 0 obj<</D[1318 0 R/XYZ 0 613 0]>>endobj
+970 0 obj<</D[1320 0 R/XYZ 0 622 0]>>endobj
+971 0 obj<</D[1320 0 R/XYZ 0 266 0]>>endobj
+972 0 obj<</D[1322 0 R/XYZ 0 520 0]>>endobj
+973 0 obj<</D[1140 0 R/XYZ 0 311 0]>>endobj
+974 0 obj<</D[1324 0 R/XYZ 0 734 0]>>endobj
+975 0 obj<</D[1324 0 R/XYZ 0 645 0]>>endobj
+976 0 obj<</D[1124 0 R/XYZ 0 568 0]>>endobj
+977 0 obj<</D[1326 0 R/XYZ 0 696 0]>>endobj
+978 0 obj<</D[1326 0 R/XYZ 0 449 0]>>endobj
+979 0 obj<</D[1326 0 R/XYZ 0 416 0]>>endobj
+980 0 obj<</D[1326 0 R/XYZ 0 146 0]>>endobj
+981 0 obj<</D[1328 0 R/XYZ 0 652 0]>>endobj
+982 0 obj<</D[1328 0 R/XYZ 0 515 0]>>endobj
+983 0 obj<</D[1328 0 R/XYZ 0 255 0]>>endobj
+984 0 obj<</D[1330 0 R/XYZ 0 718 0]>>endobj
+985 0 obj<</D[1330 0 R/XYZ 0 537 0]>>endobj
+986 0 obj<</D[1142 0 R/XYZ 0 718 0]>>endobj
+987 0 obj<</D[1330 0 R/XYZ 0 409 0]>>endobj
+988 0 obj<</D[1330 0 R/XYZ 0 189 0]>>endobj
+989 0 obj<</D[1332 0 R/XYZ 0 734 0]>>endobj
+990 0 obj<</D[1332 0 R/XYZ 0 645 0]>>endobj
+991 0 obj<</D[1332 0 R/XYZ 0 477 0]>>endobj
+992 0 obj<</D[1332 0 R/XYZ 0 349 0]>>endobj
+993 0 obj<</D[1332 0 R/XYZ 0 129 0]>>endobj
+994 0 obj<</D[1334 0 R/XYZ 0 639 0]>>endobj
+995 0 obj<</D[1334 0 R/XYZ 0 511 0]>>endobj
+996 0 obj<</D[1334 0 R/XYZ 0 436 0]>>endobj
+997 0 obj<</D[1336 0 R/XYZ 0 388 0]>>endobj
+998 0 obj<</D[1338 0 R/XYZ 0 668 0]>>endobj
+999 0 obj<</D[1338 0 R/XYZ 0 461 0]>>endobj
+1000 0 obj<</D[1338 0 R/XYZ 0 427 0]>>endobj
+1001 0 obj<</D[1340 0 R/XYZ 0 734 0]>>endobj
+1002 0 obj<</D[1340 0 R/XYZ 0 523 0]>>endobj
+1003 0 obj<</D[1340 0 R/XYZ 0 408 0]>>endobj
+1004 0 obj<</D[1340 0 R/XYZ 0 151 0]>>endobj
+1005 0 obj<</D[1340 0 R/XYZ 0 118 0]>>endobj
+1006 0 obj<</D[1342 0 R/XYZ 0 626 0]>>endobj
+1007 0 obj<</D[1342 0 R/XYZ 0 475 0]>>endobj
+1008 0 obj<</D[1342 0 R/XYZ 0 377 0]>>endobj
+1009 0 obj<</D[1342 0 R/XYZ 0 292 0]>>endobj
+1010 0 obj<</D[1344 0 R/XYZ 0 718 0]>>endobj
+1011 0 obj<</D[1346 0 R/XYZ 0 672 0]>>endobj
+1012 0 obj<</D[1346 0 R/XYZ 0 557 0]>>endobj
+1013 0 obj<</D[1346 0 R/XYZ 0 469 0]>>endobj
+1014 0 obj<</D[1346 0 R/XYZ 0 358 0]>>endobj
+1015 0 obj<</D[1350 0 R/XYZ 0 696 0]>>endobj
+1016 0 obj<</D[1350 0 R/XYZ 0 436 0]>>endobj
+1017 0 obj<</D[1142 0 R/XYZ 0 356 0]>>endobj
+1018 0 obj<</D[1350 0 R/XYZ 0 295 0]>>endobj
+1019 0 obj<</D[1352 0 R/XYZ 0 639 0]>>endobj
+1020 0 obj<</D[1352 0 R/XYZ 0 287 0]>>endobj
+1021 0 obj<</D[1352 0 R/XYZ 0 185 0]>>endobj
+1022 0 obj<</D[1356 0 R/XYZ 0 655 0]>>endobj
+1023 0 obj<</D[1356 0 R/XYZ 0 447 0]>>endobj
+1024 0 obj<</D[1356 0 R/XYZ 0 333 0]>>endobj
+1025 0 obj<</D[1144 0 R/XYZ 0 679 0]>>endobj
+1026 0 obj<</D[1144 0 R/XYZ 0 488 0]>>endobj
+1027 0 obj<</D[1144 0 R/XYZ 0 351 0]>>endobj
+1028 0 obj<</D[1144 0 R/XYZ 0 213 0]>>endobj
+1029 0 obj<</D[1146 0 R/XYZ 0 672 0]>>endobj
+1030 0 obj<</D[1146 0 R/XYZ 0 439 0]>>endobj
+1031 0 obj<</D[1100 0 R/XYZ 0 696 0]>>endobj
+1032 0 obj<</D[1146 0 R/XYZ 0 311 0]>>endobj
+1033 0 obj<</D[1148 0 R/XYZ 0 441 0]>>endobj
+1034 0 obj<</D[1148 0 R/XYZ 0 303 0]>>endobj
+1035 0 obj<</D[1148 0 R/XYZ 0 157 0]>>endobj
+1036 0 obj<</D[1150 0 R/XYZ 0 339 0]>>endobj
+1037 0 obj<</D[1152 0 R/XYZ 0 266 0]>>endobj
+1038 0 obj<</D[1154 0 R/XYZ 0 734 0]>>endobj
+1039 0 obj<</D[1156 0 R/XYZ 0 459 0]>>endobj
+1040 0 obj<</D[1156 0 R/XYZ 0 361 0]>>endobj
+1041 0 obj<</D[1156 0 R/XYZ 0 224 0]>>endobj
+1042 0 obj<</D[1158 0 R/XYZ 0 670 0]>>endobj
+1043 0 obj<</D[1158 0 R/XYZ 0 126 0]>>endobj
+1044 0 obj<</D[1162 0 R/XYZ 0 734 0]>>endobj
+1045 0 obj<</D[1162 0 R/XYZ 0 484 0]>>endobj
+1046 0 obj<</D[1162 0 R/XYZ 0 132 0]>>endobj
+1047 0 obj<</D[1124 0 R/XYZ 0 163 0]>>endobj
+1048 0 obj<</D[1164 0 R/XYZ 0 523 0]>>endobj
+1049 0 obj<</D[1164 0 R/XYZ 0 377 0]>>endobj
+1050 0 obj<</D[1164 0 R/XYZ 0 263 0]>>endobj
+1051 0 obj<</D[1166 0 R/XYZ 0 672 0]>>endobj
+1052 0 obj<</D[1126 0 R/XYZ 0 734 0]>>endobj
+1053 0 obj<</D[1168 0 R/XYZ 0 148 0]>>endobj
+1054 0 obj<</D[1170 0 R/XYZ 0 705 0]>>endobj
+1055 0 obj<</D[1172 0 R/XYZ 0 672 0]>>endobj
+1056 0 obj<</D[1174 0 R/XYZ 0 652 0]>>endobj
+1057 0 obj<</D[1176 0 R/XYZ 0 672 0]>>endobj
+1058 0 obj<</D[1176 0 R/XYZ 0 497 0]>>endobj
+1059 0 obj<</D[1126 0 R/XYZ 0 385 0]>>endobj
+1060 0 obj<</D[1176 0 R/XYZ 0 330 0]>>endobj
+1061 0 obj<</D[1178 0 R/XYZ 0 665 0]>>endobj
+1062 0 obj<</D[1178 0 R/XYZ 0 432 0]>>endobj
+1063 0 obj<</D[1178 0 R/XYZ 0 189 0]>>endobj
+1064 0 obj<</D[1180 0 R/XYZ 0 692 0]>>endobj
+1065 0 obj<</D[1114 0 R/XYZ 0 734 0]>>endobj
+1066 0 obj<</D[1126 0 R/XYZ 0 283 0]>>endobj
+1067 0 obj<</D[1180 0 R/XYZ 0 260 0]>>endobj
+1068 0 obj<</D[1184 0 R/XYZ 0 599 0]>>endobj
+1069 0 obj<</D[1126 0 R/XYZ 0 129 0]>>endobj
+1070 0 obj<</D[1186 0 R/XYZ 0 696 0]>>endobj
+1071 0 obj<</D[1186 0 R/XYZ 0 278 0]>>endobj
+1072 0 obj<</D[1188 0 R/XYZ 0 702 0]>>endobj
+1073 0 obj<</D[1190 0 R/XYZ 0 471 0]>>endobj
+1074 0 obj<</D[1192 0 R/XYZ 0 718 0]>>endobj
+1075 0 obj<</D[1350 0 R/XYZ 0 734 0]>>endobj
+1076 0 obj<</D[1346 0 R/XYZ 0 734 0]>>endobj
+1077 0 obj<</D[1136 0 R/XYZ 0 734 0]>>endobj
+1078 0 obj<</D[1216 0 R/XYZ 0 734 0]>>endobj
+1079 0 obj<</D[1354 0 R/XYZ 0 734 0]>>endobj
+1080 0 obj<</D[1308 0 R/XYZ 0 734 0]>>endobj
+1081 0 obj<</D[1124 0 R/XYZ 0 734 0]>>endobj
+1082 0 obj<</D[1146 0 R/XYZ 0 734 0]>>endobj
+1083 0 obj<</D[1198 0 R/XYZ 0 359 0]>>endobj
+1084 0 obj<</D[1172 0 R/XYZ 0 734 0]>>endobj
+1085 0 obj<</D[1338 0 R/XYZ 0 734 0]>>endobj
+1086 0 obj<</D[1166 0 R/XYZ 0 734 0]>>endobj
+1087 0 obj<</D[1356 0 R/XYZ 0 734 0]>>endobj
+1088 0 obj<</D[1186 0 R/XYZ 0 734 0]>>endobj
+1089 0 obj<</D[1202 0 R/XYZ 0 734 0]>>endobj
+1090 0 obj<</D[1282 0 R/XYZ 0 734 0]>>endobj
+1091 0 obj<</D[1100 0 R/XYZ 0 734 0]>>endobj
+1092 0 obj<</D[1288 0 R/XYZ 0 734 0]>>endobj
+1093 0 obj<</D[1248 0 R/XYZ 0 734 0]>>endobj
+1094 0 obj<</D[1100 0 R/XYZ 0 734 0]>>endobj
+1095 0 obj<</D[1212 0 R/XYZ 0 734 0]>>endobj
+1096 0 obj<</D[1326 0 R/XYZ 0 734 0]>>endobj
+1097 0 obj<</D[1176 0 R/XYZ 0 734 0]>>endobj
+1098 0 obj<</D[1222 0 R/XYZ 0 734 0]>>endobj
+1099 0 obj<</Type/Pages/Count 131/Kids[1100 0 R
+1102 0 R
+1104 0 R
+1106 0 R
+1108 0 R
+1110 0 R
+1112 0 R
+1114 0 R
+1116 0 R
+1118 0 R
+1120 0 R
+1122 0 R
+1124 0 R
+1126 0 R
+1128 0 R
+1130 0 R
+1132 0 R
+1134 0 R
+1136 0 R
+1138 0 R
+1140 0 R
+1142 0 R
+1144 0 R
+1146 0 R
+1148 0 R
+1150 0 R
+1152 0 R
+1154 0 R
+1156 0 R
+1158 0 R
+1160 0 R
+1162 0 R
+1164 0 R
+1166 0 R
+1168 0 R
+1170 0 R
+1172 0 R
+1174 0 R
+1176 0 R
+1178 0 R
+1180 0 R
+1182 0 R
+1184 0 R
+1186 0 R
+1188 0 R
+1190 0 R
+1192 0 R
+1194 0 R
+1196 0 R
+1198 0 R
+1200 0 R
+1202 0 R
+1204 0 R
+1206 0 R
+1208 0 R
+1210 0 R
+1212 0 R
+1214 0 R
+1216 0 R
+1218 0 R
+1220 0 R
+1222 0 R
+1224 0 R
+1226 0 R
+1228 0 R
+1230 0 R
+1232 0 R
+1234 0 R
+1236 0 R
+1238 0 R
+1240 0 R
+1242 0 R
+1244 0 R
+1246 0 R
+1248 0 R
+1250 0 R
+1252 0 R
+1254 0 R
+1256 0 R
+1258 0 R
+1260 0 R
+1262 0 R
+1264 0 R
+1266 0 R
+1268 0 R
+1270 0 R
+1272 0 R
+1274 0 R
+1276 0 R
+1278 0 R
+1280 0 R
+1282 0 R
+1284 0 R
+1286 0 R
+1288 0 R
+1290 0 R
+1292 0 R
+1294 0 R
+1296 0 R
+1298 0 R
+1300 0 R
+1302 0 R
+1304 0 R
+1306 0 R
+1308 0 R
+1310 0 R
+1312 0 R
+1314 0 R
+1316 0 R
+1318 0 R
+1320 0 R
+1322 0 R
+1324 0 R
+1326 0 R
+1328 0 R
+1330 0 R
+1332 0 R
+1334 0 R
+1336 0 R
+1338 0 R
+1340 0 R
+1342 0 R
+1344 0 R
+1346 0 R
+1348 0 R
+1350 0 R
+1352 0 R
+1354 0 R
+1356 0 R
+1358 0 R
+1360 0 R
]>>endobj
-1370 0 obj<</Type/Page/Parent 1369 0 R/Contents 1371 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1371 0 obj<</Filter/FlateDecode/Length 94 >>stream
+1100 0 obj<</Type/Page/Parent 1099 0 R/Contents 1101 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1101 0 obj<</Filter/FlateDecode/Length 94 >>stream
x\ 1+ä2T0\0BC\ 5s#\ 5c3\85ä\.§\10.}7K\ 5#\ 3\85\904\ 5K\13=3\ 5cS\10\19\92¢` g`\0\14NÖ\bvôurT\b(ÊÏJM.QpÉO.ÍMÍ+I,ÉÌÏÓ\fÉâr\rá
ä\ 2\0«\13\17\ eendstream
endobj
-1372 0 obj<</Type/Page/Parent 1369 0 R/Contents 1373 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 53 0 R>>endobj
-1373 0 obj<</Filter/FlateDecode/Length 3678 >>stream
-x\ 1Í[Ûr\eÇ\11}×Wì[\9cª\10ÂÞ\81¼¤t\89\1dV,Q\11éR^\97 (Â\ 2°\f\0Jößç\9cî\99\9e^\80TÑ\96HÉ®²uö`fú6==½«ÿ=ɳ1þͳ¶ÈÊ&\9b\9e\8cGc<±ÿ¼ý\89O²¦\9aâ¿«¬\9c\8eÚ\0\96Ùé\13\aWYÛ\f8\aWY^ç£Ú\ fl8iY\8f&\98´Gy\0\9cÔA\f\1c\17£©#E\98ñtTa\5&%\80ãHÕ\93RälíÏ2£!\fj!¥þ\8c\94\83\\8c£\13)3ÖͨÁbõ\14\8bÕ\ 2l±r<*Ô(yV\v \ 5£D\88ac\ 3ä\1c\84Þ\15§´q\ e®²I\ 3Ó$ÎA\88\99OaÌDz\f\16f\81\126Ç`\eÚÓ±\ e¯²b\\8fJÇ\96tS\9dÓ\9aP¥àª\ 2D\95\ 4¡JËY\8dsp\95M+\9b\84ã\1c¤*5Ýa\ 3=¦*å`I\15\aNbÔ¨8\ 2\928\81\9bò'µq\ erI±\8f\91\1esIÆV\1a*KVÓ±Æ\0UV`KF®-0.q\ e\8a3sÇÁ\99\11bÁ2ÇÜi Ç`¡eü-\97Tq`^Æ¿X \12\90Ä Ü\84FO\9c\83\98t̸M¤Ç`\8b|È:\f\16\e¬ôc\1dfü\94´\82\89¤â6\95l\13\15W@\127p\88}Hd\9c\83\88\9f\96&0ÎA
-;¡\9eFz\f¶ª)Nb\1d\ 6Û0\158Öaª2¡¢6VUA\1a³P Hª\ 4\ e±\ 2q\8ds\10K\8e\eNj¤Ç`KîMÇ:\f\16£\10}i¬Ã`Ûé`æZü_¶\9a`'ø_%\80ⶠb`."\19é1X$\13,\9aX\87ÁNÚ\ 1«\8b\16\95l\16]E@Z4py)â\19é1¦m¦\947±\ e\83ÅÄp[b\1d\ 6+[Õ±\ e\93\9d0ÎÒX\87ár9\8f\12«.Ïs·Ù\ 4$\97\a®Íérã\1cÄ\92c\8eO¤Ç`\91ù°ûm¨Ç`q:Á\10\89u\98Ê\8céòÄ:Ìø\15\13\eë1Ø¢a¨%Öa°rÌ%V\fQ\8aBÖQ`\86\88\9ch\9e8\a!nQÀö\89ô\98ªV\b%Ç:\f¶\19Ãç\8eu\18¬\1cú\8eu\18Ê ßûuU\99I\9d6r) )\138\95Þ8\aM\19#\832ad^qO¥i=Æغ\84í\1dë0\95a¼8Öa*C¿%Öcú\18¬ë1Øépf\8fQÙ!\ 2&nf\8fÁÖ´WZ×c°²×\1dë0Ë4V\11\8e\15\bsÊ)Îü]
-\10\a$\88c\93\89$q\ eJQ\81\80°q(*"¤sÒ,\9cÔc\9a?ýVX\87i~\9eibIie=\91\94\ 6 \10I\ 28ÒA\fD\8e\84\bFzÌi\vêi¬N+Ç\91è\89i\ 5¤i\ 3\97ç\12,FzÌEY\91¤¡:-\1e²,Uñ\ 4¤i\ 3\97\17Sªb¤Ç\98V\96s¬ÃÔ\85§ªc\1df\84\96\83\99U$T¬<7U$\ 1I¤Àq\vA\17#=¦H,Ã\1dë0X\6\10¼i¬Ã\14x\82üìX\87ÁNy\vq¬ÃP§\10emf\8fÁV,ÞÒXU\16E4C[\95\15\90\94\r\^\94\8c\16#e`1-R\98)°\81\91˱M[leþ\92¤Ç´\ 3\8b\96IJÒ-\9aFÂA®%
-8ÐAätÖ,\89s\10;\8d\85Eâ\1cÄz\12\18\89ô\18lͽäX\87iwæôÄJ^.\90\vÀR@a¥t\8c\1cΡ\ 6©\8e?$ç &E²¯\1dé1\ 5â\ 6NCuIXÂî\13\85\80´dà°\ 6\fi\9c\83\98´äe#\91\1e\83\85\85`Z\eê1XÜu§\8eU\81àb¹qr?ð VO«\r\ 2\aÿ{ÎA
-$\1e³\81:)¶¥Ý\19¸G+1\9eN\1a8UË8\a1)r*ÂÀH\8fÁ¢L\86\81\8cÕp\96k\ 6î\86,7\v\ 14¬\83\18(×ûDzÌE¹\93\1cë0X\14Àð¦Mì1Xd\\84Ib\1dæ¶æ \9dX\8fÁbf\84¦\8dõ\98¬Ø×X±/Ï\r\v\\ 5\16E\91ý¯\82\ü!9\ai\bV)\89ô\98,\vAÏ&\f¶dEìX\87Á6ô\bUÜÖ]¢s\ 1IÜÀ©|Æ9hâ\1a\19Ä\r#\19ä\10(±\ ec,Ò\0ZN\89u\98âòÔw¬Ã°=T\8326V\95A5h\e\86¥¢Û0
-\91\8cÅöÆ9hÊ\18\19\94 ³\ 6e\12«ÊDV\85O¬Ã¦LbU\990¶È\19¢I`U\ 65¾mT^\0ÜFU\beØÿI\9c\83X²à \91\1e\83\95n\83c\1d\ 6\8b¢\eaf\8bzLexùu¬Ã`Ñdñ¬*\83{\1eK\11I3¼ä\15)ë(\8cÊ\18§Ê\84qAx#=¦2\rí\90X\87Á¢\ 5\ 3C$Öa\ 4\12®G\9eUqÑê\90MÌtÏ>\88nTTm\11B\6d\12ç \96D/\12\93Ú@\8fÁÊéãX\87Áâ`õ\13«@²ïa?\91@\80lÓ\ 4q>ó8Ô\ 4AÎAL
-\87"«Ø@Ö\ 3r\9f\90Nn®\7fæ(\1c\19\ 1\85b@~%k±4\bcä\ 2a\8cH\88äb\ e\96?Ë\18\9eN\81A_\ 2Í]þ\8aLB\10\9c½Fc\12\82ب¥Ý çgO\9eþ\88cr\9c\9d]Â\8a(%1{[eg\17Ò¨ÆãÙ\ fgÝùr\9eõ\97Ù\8b~½\9b¯wÛ¿\9eý\8aQ\b\8f\9c£\8e°£\82Ã~8}öêù3þ\ 2z·\ 5{àx\98½Ùô¿Îg;y\8ekV5\rÏ_ö³\9b\15æìv\8b~M\16í©I©äèÛü\93«z8N\82zè£ÖÐ\92µ÷\9e~hè\ 4=ÎæÝ\8aãpöM&Õ7\95ÿÐjA£ä°q\91\1dARñ׳óínÓ\ 5×à°«¿3á\ fÕ\91'\ 5}ÄÓ\18¾\89º\1c\8f$\84Fã"Æ×Oóõ|Ó-ù\18íµ¦\f®É\16ëí®[.-ì\90/ʲýÎToDGÔmNÃõnÓ_ÜÌâv©'ß\99ÌûîjE\a\88iNzqÕ]ïæ\e>gjDÂÑ\14\91\8bó°é\14þ«ÿÄ\9f \9f\18C2Ûõ|\82ÆÚ4\ f)";V?ÊdŨ\1dÇçÝúBF\8fGÕ¤\b3\9eÍ·\92\80p\19N\13XºBx<êÎ\9dR¾§?¦4Ã\16¹Ë3è{ªAx\10«IÞÎ;Õ
-Ù½\8e\ fwWs±
-^|L£¦«Nr)\ eËÆ\9e]wïç\92¹\v4\96£\95÷½õxXÔ?âñY\f\94.ö\95~~³X^,Öï©$Z\ 2E\13\ 3ä6Å\9f/ÖÝf¡z27L¿ñ\96\ eZ¢\18\1dº¶Ü×ò,x\11÷eó,ò\93x\16í\8cèìÅêºß캵Ä1\8aåÚ\12Ýv7¿\96_c\86&\9cJ\8fçÍÁJQéÁ±\89þè¾Î/6ón'Á\8bJ¹\8a'émnݮΩ\e\8b¿Iðh6ë×\97\8b÷7\eKáxÛ:ÎC:Ì.\17˹®\87]U=^A\91\8f)èQÞ\f\82ºÞWÝR\91ß¡¿÷7\92\15\aùIÕä¤xë\9cb\83ú\89»q\89±døi±»\12;¡:\1fGKì\90õ®»\8dT'Ø\12\93<\1c\8d\ 3\97=\ 4\88¦hÙ6²ò
-ï\eãt×mva\87£:ÍÅw\84\82æ@¤EûaÈö9Êu;á׫sý!ߣIþ|\b%ï\983ê>ÌmHÑ¢»?ÓîTþrÓkEY\8dpÑ
-'Àb=ß]\8c\18\13ô3ú´mûXî\f\9aæRLÂ\9d(\87÷ܪ©Û+÷l\89\83~\8d\1dúqþw
-\8c7\1dELÉ\19
-°äv45,ÇIrC¤Æ4\96urn\rÎý\8eÓáý\9eYæ¢\9b¯ô\ 6\817\8d\ fl\94h\83)ª\9ax-@Wk?®Ï6¿SÊAT.\17[\vut¥>{\98m¯ºM8ÊðÓ2\96´ÝÇn±ä\95LB\0\9fFÄÌ©êC 3å\19e;ß|Ôò\v/*Æu8Nï\bä?û8×ú¼ÀÅÒ\99hr\1f\13!º×¸*\86\84Àwò\96ÕoOp·\14@7ëÅo4\ fRiÊ\84³å\ 27My\8c¶ý#í\9b`\b¶Õ\86ûeú\85¶¸5?\1cl\8b\97'§\7f\13\8d-\vfï.ß½\97gØ(U\19«©w\8bõô7{\ÅJ\12\8f_\9féc_«ãqñáð×'§O\vy\8a\8evº\eÏw3\84\91H\81Îh\11ÃÕ¹\ 3;6úøÎ\80\v\86,ÑÕ\18ä\1d¼\95PO\87\14ùîª\8b>®Û¸Ö±äK~\9dd\8fή\10a\92X\90ÊR\90¼ì×\7f\89ãÛx\9bx×o>ü\83«à¥^\1dæ¼SЯLä%\17¾%áB\e=Nø9ZL\9e/\17Ýûu¿\8d\9b\aï"Úèa´`\904V¢2zWvGþÊò~fº¨
-n Ãr\18ªèááU9\9dõ×\92ã\90¦R\9e?~©\87\ 1zÕñ|øÌ\8a\ fN\ 5\95ðâe¸»¡\91Öø^£\17W½¹\ 6\1e\98¢a¦\17»Û
-\1d¸k×Ïú%½\8f»©¹+ûyþq.OÑõhâíù\81\15\8d\9eã=>\9dxPR\8bz¯ä\9bÍb\1d\937êM|¶\16\94¼5aýòúø¿²±ü g÷ü´-\ f\12Û\8b\94Ì\11\1eU\8cÿ7/8[\8eð\8eÅá\83X&¯tSâõü~2ÒZß[äç~öÁÊ[5Æ\83\bõ\a&\rò£åp\10¶Z\9e{ù_u××Aþ
-å\86%\94_PI¬»\95\96(ø¶Ó.£\7f@\90/þ©jâ»Ñø>\81JÅ\9eà]í¦Ðh\88Ùñxu½é?ÎåÊ\0]R/å|Ó\7f\8aù\14\ 57^Y\85x^¬%ÔÐ\8d²}¼íVç\12©8',e}±\8a÷\9b \97n¡o(ÕUÚ¬x³²_o\9c
-ü¸\98K\97\8d\8a\15q£özXú6ÛÀ\bø4¼ù\96-nÕô\88ß3»Í\87\ fsö5|î]7h\96Ü\³\8f"\89Çß<¢GSÞ1\8f¢¢±\8böý\1cò\95~\15µåÍØûó \85\14Îw*58/p\87è\977±a\8c¦Q\11ßÊ|% ÿÄ4Q)|Àé+\ 1d\97{û°\9bmúÖoþìØÞ\9cã\8e¬Ïñ\82®\f\85ì\9f\90ñË\86äÚøÎñ©óÀm¸Í\8b\8aþ\9a\9cZÝé¦\7fÑ\87noV\9bÊøX#u\80Ue fôÑ,=\ fölé:Á\9fPÍò×\83I¤¼ÅÇ\ 3\ fò>!\18£Àulèî\83ÆØé|gÅ\ 3¾Î³Ìz£ÍMw·=¨\bÞ\1d¿>\15#ø>Ùà²ûÞð\14¡)\88`´ê \aÄ~¨ß_÷;\13\9b\9dI)\83\1dÚéäí¿\7fz{òË\e\1a\v/îí\rÌ\97\ 5ü]£\vm\18ñ\8b\9f¡ï\ fú%\8f¤ÿË\93WÏ\8e_Sy|\8ca»è.ñ¿ÒóBû!ø\98Ò\87ÀA?äÇ~3\8b¥"^\93Û^¶c\buYj\ 2ßR'\9fkW¸t=ÃÛ.\17«\ eï\vô\15\1c2ð#µBÔ\94Ñ\12ø\ e~\18\ f\a\r\91W\9d\95Í÷°Å-] \8b~Õé\8e`O0Öm\ 3ÝííàWòóg¦)JÆ\1c^\r\fo¿Ü\80z"Ä\9eËë^ß\8aà\88HçAwÞßh_\ 2ßoØK=äøîb\ 6gJ8ãJ\89wÅz¥ì..pðoCqÎëþ#\9e\84E¸\1eá\95\8c¿_@ÕpøE)_Ý,w\8bëÐÊÄûyW\#>/»\99ÉÿX7Ý;\1d¨:ù\8b\ 6þ\ 6Ý}.\1a¡P\8b\17\8d\93ë%î\83R ð\95ó4\84å\9dë>>QÔ\8c&w\93À\eI;·\90YöÏ[;nh]s\16ü\9d
-ü\8b\10\93½ª®\9d4|\1dô\88ïåî²bÔ\15\9fæÉ×>¸¸\8dñýQ\83/\13&öµOüz);øZ©Äß1ª\98ÆÚñ\94?_Pç\7f\9e=ùÏ\93ÿ\ 3ÿ5\7f¤endstream
-endobj
-1374 0 obj<</Type/Page/Parent 1369 0 R/Contents 1375 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 96 0 R>>endobj
-1375 0 obj<</Filter/FlateDecode/Length 4615 >>stream
-x\ 1Õ\Ms\eÇ\11½ëWlù\90\92\ f ö\13\vä\92¢H9aÊ¢d\91)]\\95\ 2AP\82M`i\0\8c\7f\9f×=3Ýo\ 1Ð&)QN\92*[\ fogvº§§¿få_\9e\15Y\8eÿ\17Y[fÕ0\9b.\9eå\a9~±\7f¼û»ü\92\rë1þ¹ÈªñA\11Áuvö\8cà"kò\1eGp\91\8d\8a\83!\8d#¸È\8a¢8(\89d\f¶níýòJÆ`ÇõAÅc /²2Ï{33\ 6[\8e\ fF4\961ØѨ?\960ôP5\a\r\8de\fvX\1d\8c\99\1d\8a\b\182\82
-\9bRF*\10y\bB\9c¼ê\91\95\ e,K(/\rTà\ 3#×\96\au64\8e t¯*2\8e ¼0\97\17\1aÉXt_\88\1cÎ\12\ eºç\97Ê^$\fýáY\98\8a\8d\r¢äc<\92DQà¢D.¬Ý8\82I\14ã\82(q\\º\91\8cM\14g\83(il;\123r\96°\98Q+J2\961ئ\16C1V\ 5mÆCü\18\ 5\rÀ\ 4M\9cJæ\1cÁ(¨s*h\1aW\14\r4ëdxá¨Ò\ 3ªæÔ(ð\17Fn8:h3ç\b.2ì]N\1cAè\ e\a´!\921X¼\7fÄ,a°Í¨?\960ض\15Ql¹\8cÁ\8eËÞ\82\19CïUÙ\eËX̯\81éúÌ\8cÁ\ eëÞª\18ãøê^úXÆ`\9bª·ª þ¡ø\92´ß
-\ý\91\83Ó\83\16\8d#(J\94\93æ$c°Ã\1cæé¬x䦮ô(©\v\ e@ÞH\10«\11\8fì\1cAlx%»¦\93È8\82x_!.ÃIƲֲÏ\12\ 6;ÒµÚÄ\8ceÓä\øÌ\8ceÓF½\ 53\ 6\v3áU\ 5ÅWââ\93â\15¸â#W`?\87Ycd\18XH\I\ 3\15øÀÈ\8dG2Î8\82\90³\94ñN2\ 6Û´²V\eÊ\18,¼\ 3N¢±ð \98
-¾_L\b®\a\e£@\16D\10\ 3+Ùt'\19\83\85Íã¥6\941ضè³\84¡ÜRü\87\8fÕ%Õã\#\8f®!\0[RâÂ\12\9cd\9c\96D¬.1\8d-ageæ,c,i(ÇßYݶ\1a\1eÃ"H\0¶m\89SOê\1cA,¨\94(ì$cÑ\91\840gå ÕM\81\7f\82\13õ\ 5 o$\b\9fÐâô:Gp\ 1\ 1ä\85:\89\8c#\889sqåNêûÊ:\84û±Ì©@Æ UÁ\ 2ÅØõ\90\a \14Áxæ\9dÓ3\9fÆAºq\9cDÆ\11DÄ\11/îã\bb\99\10\bù¡¾]\ 62\16¥\89? \960XÄ.~)c°ð;\ 5\8f%\f\v(\86P\85ÏÌ\18l#É(±\84Á\8e·XÂâÄ\vl´\8fUÛªF\8dî´ÆÐ\0DZ\82X0r\ 1èI\9fTU\10\ 6\8bd\15\8a26L\8b\83f±¡RàÓFN\\14ö×È0\10±Ò\12¿J\81\ f\8c\\1ch$c¬\aÖ\8eõ8K\18,\9c\14¶ÆYÂ`ᤠ^g C½uÝcÃ\82qºípV
-|Á\91\v\el\1cA¼²\92ãç\ 3\19\83Õ(H,a,(\97cã,c°po°Q{-c°\10\92ßË\18,Ò\90ÞX°$¸Û\96ff\f¶\90Óïïe,V8\92]·U©Ó\10Nå\90«Ó\r@\94H\10ªÐ\14ÐIÆ`\9bF\96¤óÈPƢƶÏ\12\165\8eÄ&l,c°Ø \1eK\18l;\16k³±A\1ch@ÜgX¿\ 2\17'r\ 5\8c ú7\921\16\8cã\ 4Ct\960رÄab Ë\82Åc:Ë\18,ÒÀ\1eKXvVRW\1f\eÄ\81Ƕ(])pq"W\14Rþ9É\18\vF\1e\ 2ql(c°pbØ;g \83\85\83\80°Î\12\ 6;Rïã,a\b\8b³\ f%\e«'VlÛ\L\0"\8eº¼Äi)ã\1cA¼²\96úÑIÆA\98\82YõÐiÞb$Å \8f\r\v\82\r\99\v\11\83ª3_Pä ÖP\8d-p\ 4ñJõp>\90±,Wv\86XÂ`\91º\8e\88\r\v\1aR%W*ð\ 5E\ eë\82\98Æ\11ĤðK\90ÒHƲ\q²Ä\12\96å\8a\93%\960XÄvèÁg&\f\16¦Ál\10\ 6µ\8b%½¥\ 2\17&rÈùZxDyP8\82²\©×\9cd,Ë\15c"\960Xì\13LÅ&f,Ö\99ËÎ\18«\87Dfc\87-\0Y\92º\92ÄÉ\96\968çò¤\90\8c1m.\aÆYÆ`±@\1eË\18,ÞÃcÃ\92°Ar`Â\1a\14ø\92"\17\97`$c[\92±qIqlð°¥³êa\ 3\96\ 5KF@,a°ãB¶ÎÇ\12\96P$¹\80³\8c%\14©*ll0\1782?\8c
-DØà\1d"\17²¿ÒHÆb\85RÑ1ë\18\vÖ¢ÃYÆ"l.'Çff\f\163C\15Î\12\ eÂbï\8c\15a\13\ 6\v1+f \8b*$bùXɼÅXåàhª\1d\80h\82`̼\9dÓÌ;\8dÓTÛ9\821óvN3ï4®È¥\ 3è$ch·\90\bE,a°\90jÄ,a°Ã\ 6ú£±\84¡]\84 f\19\83ÕDÑÇ2\ 6«-\ eb \87}c\89Â)\vO˾\95=y\19\83Ez]Ð\9a\19£ÐB/\93×Ì\18,¬\89Y5ð¢\r5·Zt\0fà\89\v\19¿\93\8c¡FÍø\9d\rÓ"3µ¨*iëÐ\83X\80\18¨\19¿\93a f³\ 3'SSô\v\10\9eG\82\8ds\ 41)\92¤\96HÆ`á½+f \83\85\ 1À\98ì¥\8c±m8JÌ2\ 6K3\89\ 2\19\83Õf\90ÏÌ\18,\8e\16\v¤nV2\7fK\82\ 3\90yÕë&®ÈK\84\f'\19\8b°\92¨\11K\18¬6R\88%\fVû\1eÄ\12\16UHLq\96±¨BVN,a°ð-¼fÆbýÒ;ó±A\15eè?\ 4Ù\15¸*"\17mÒHÆ\10\a\8d&¼ÔY¢
-é>\11K\18,J\14\88ãc \8b¢Ä-:\e\8cXKâØY\v+ñC\159\9c;\8cS Â8Ĥð=0b#\19\83\85\8fþ:K\18,|\Í,a°è(õÆ\12ÆÞh®à33\96\9d\13Wá¬\8a\8a6¹\9dsý³ \1a\99V²\ 5c\1c¡ÿ*ÁÍ\18G`Äm;cHd\97N\82Q\ 4Er9¾Î9\ 4\aë.\89s(:\91sâã\1c\82Ó\92ß85G´ÅC©5ê\9fÍ\18#\13\8e¡Q\ 41¡6t\9cs\bN\93\ 1ç\1cÊ"¥ÈvÎ!8xÀ1q\ e±i\90´r\8e l¨\848\9bS¢<~± ¯\7f\16Ù4ÆGFcº1\8e\10Ä%¹2Æ\11¶S\1aFÆ8ÂÊ5¸\eE\10\1cªD\1aFP´! \8a\8fs\b©àBh\9cZ)®º¬ÿ¤\7f6+\8d\8cZ\9c1\8eð*¸}´@e\ 2\19D\10\1c¢&\9a¥Æ9\ 47\16ktΡ,Q\1c\9aq\ 4Á¡\172tN\97_R\17LÿlË\8f\8c.Ø\18GiùF\85åÇQaùÎéò\13§ëuÎaZ¾qaùq\©ÑÓ¸\97çÏ^|\87ª&Ïί´²Ïq\8dØÖÙù¥Þ°ãçéóóÉÅõ,뮲£n¹\99-7ëoÏ\7fÂ(ÄÚBF\r¤!\80a\83R\86=?ú8¹ÙÌVò\8cØ%\bLrù<«\ fä'\f ð\87Ûùôg}\b§uTÆ_\8fVÝZ§ÇÅ÷°ªã¯g·\17ËÙF\1f\86ß\1d¦)^®º_×óå\a! U5\1cÆç_È/ð\19ùèw§}ß~þ°ênoôq\¯Ú\ 4wÎüáv~9\93Ç\91M´e\9cþà\9eÿ+\872òÅwðþAq\15f)¡8Xp):B)\1d\944\84e\ 65\1dÏ×ÓÛõzÞ-e,:ó\91¸ç+\9fú± Ò\0\8a#!Êm!þµV\9d!ó\e5I°îJ\ 4Â9\e\17U\94uó1<\86~Ã8\19Ä7ïf\8bn£¿ã8ÖÍ8>{¸\v·Ëéì\e\99EÎE\9döúf²\9a,fÑ\ 2qV\11YÂ\98'ÑET@\89\16ko#«¯ \ 3µRU\r\9cPe\9a=û´\9cªZp\86ÐL\8c
-ÛVK\9b\98/\96²\95-\19\94Èàú¶\1d\1d\80Ûö=ÍâýÉé\99L \9fÕVÑ.¾ô¢\1f1_\94³mÙô\9bím?îÔÌÙ¤Oß\9c«8¸ µ=»\8d'\ 4å\94\1d\87E·ÒÍE\9aä\ fn>NÔ\13 Û\1dÚ!é\96áà
-\99Ïüñyñã·ún\84¹6yÆ\9bU·é¦Ýµ\10ðÎþ²à_à\88Út@_«Ò\91º\ eëôÓûùò\12.W\ 6£Íç\aw1\99~\9c/g\81@þZ<b\97Ê\91L;¨\90oõÍf¸ÒS\1coy\16æ\9d\17ɼßÍÖÝõí&úI¤=¸\96\8c\96ÿfu\19Â\11¼\85\84Gløg\ e \ 2n\85Mh{ ùÿï\ 4ÎhS)ê}?Y¾\ e6\80\9aµÍ\93ó\9c,/U)\90Ü¢é©\1a\1a¶0/\93ß|;Y¯\7fíVú,bæ¸MÓ¾ZNW\9fnL\81ø4Å\148W\8b\13Wm?\9dM\16\17\13y\1fnR\86\8fÙî»\95Yå2/EI¹Ç\13=¥( \97¾m\12'Ëͪ»¼\9dúò\9fÐåß½ôýL\10h\80fwO\88\9d(y²¸éV\9bÉR\13\9d\1a\1eÃÎò)" \1e.¸@?²\87\17ÝmH\8að}I:¢g³éíj¾ù¤{\83º8ÙÇþ¥}á_£¤òMÞ\96¨aÇÐg0÷rxù\1f\88:ù\10\ 4CÝ6\1c%SÜ\93\1a\9c½~©Ö\r³4ëî[,ÚÌf\9e_X¬ÞtU!\v\19\14r§±%dØÑÇ\v¹ì\96\83Y8\863= øümT¶\16ÀÃÉ\r^\16én:Ó½å}.\88âÉM\Oº\9d|æ<&k\9cÓ\17\177â_tñhFÔæ]\8eºÅ"z(x\1d)04½ýÜÕ>h|\10\8d\1d0Z<\102ùß\93\93àVð\11\8d\15\ eç\9fnB¬AÖ2J;±Ç>çËõfr}=1\a\84ðX?"
->H \a=\UÁnq×ÇAgÇs>°¦yÐ\1a>ÿáªV)\9a\91oÛ]õfÌ\e\92SùG÷«z\10rA\9b\90\9bq \82
-÷jþá6$^\92EX6æ\11\ fñÇ2¢\89\9eFÜ\b4é4f\1a\16áy\93G>=×5£Wäϼ]Í\17\93\95:iÜïÕ);;î\16\93\10lq\13à1[ÊîUw}\1d²\18¬ªBÒùðóS5¢\0
-¬\15"*\1drD\9cí¸úv5[Í~¹\9d¯ç¡\ 4CC§\1c§cðn6¹\8cÕ·|ÂðU#Í®%\ 5é\ 6E\91{¦\0\17½-ÑËÉTkþ\90-¥ü{wº?á\97(A?O@a·-B²Ñ¨û\ 6®É\8co_ í\96\8b\Íj\ 6·5l\9e×Û}[\93,$ÙúSh¤Ò\8eÈ D\97\91\83)\1aä;B¯fp®±×\83Û*Ë\8d^\87ÚCL\ei\a®Ñc¸<_Ý®5;B$ó,÷p:EÛ t°\90Vº1Çà$å\8eMýÏn¾L\ 6Î\87þèz\9eº`hÞZÖ\91\99?ñø±o?HóHÀóxøï¯Þ*\14Øú\15Wïø¦ö\11g (\15n'¡Üã\1eÁ\91ª36\95X\9d{bÛgh\18_N~á6C\14\1eWX|̱\93j0,ù7o\96\ 3¨\7fðÝõ'í\86Èå±YÿW\92\1f×VM\f@÷ßßÝ'«P\eë_ãØÚñà\1dXv\9f)\ 6KÖ¸\88~k:é\8f0diË>}æP\8de©\ 3ÜÄóæïô\$Ù\8c¦Í\15òÛU\87>ö"äÏøÛ\ 3\96äí;û¯V«n¥\8f¢æ²&öîÖ<Í/IP|\ 2Ü÷\8b;Í\90³OëÍl!jÁ_×2_\9d½í®çÓy¨ðe´ç®ûd\85b®æ×ñaÌ\92\1càÓȶwÖZ\8bþ\ 1>Câ\9dm·£Àû\8f\93àÓ\11ó¬§ÕÁ²õº¡×(û8»Ö¾~¯Q6\r\8d\13é\88XçèD\94\87\88c\99Þ\87Ùæoz$ð\11äøÁÞy¯x\ fü±\8e5&®¹¹ñ\81kÖm\85P,Ù\13ÅÕ,àöí^ãªSEáK#Wß]M½ño/^¿Ò\19ðw\1c¾FrW\87Ü~»²\16©wÛ\a) ²\8a\vßÅz¹y\82rl\15ÚAë¿\8a\fø\1aÈ:\ f§³\r:`?ËϽ\8cáûîC·Ô#\8f¨\9e\7fá
-µÖä{PÂ\1cû'\1a\99óNèú\fáÎf\9b\94&õr\93pÉÅýÝwÝd\91\12*ÈkÕ-ºòá4¡8°CÒs\11\88¶±¸y\90]×!ÙÛ©:Æ;FýæõáÉé¿\8fÞ\9c\9e¿{óýÁæ7=óú¡P
-2YØUïçfw\99qì\81rcý\81\87æ/b)è~zÀð\8c\9aî.ï¯\8b&v8í\ 2µ
-æi\9d\88»JÚè\ f\1fVÒ\1eN\83úä2(%Ç÷([¥P
-F\83ú`T¤\91®»ß+Qñ¡¦½kO÷x»D~\8b\82û:´,\91O\9b#v5sh³
-e·Ëä\8bÃÝÆÞ&SSÊfR\r\£\1fÂ\a\12\1fzm\9bãÿQ\11\1cÄë\17Á¸\86Û\96è\7f¸\b\8e\12ô\8b`4;·EØ\9b ü\82Rg~\15Ó\1eù\982e2¡)\83Æ£ý@¦²'pÆVKï\82d÷\86l_F\8dï\14$¸h\ 2\81ÖÎ(ÿ\ 2é\7fò,Q7ò·\88û&\8b2KõÃe\80÷»,\9fË.»x\8d\80¯\12í\94éadÕÈg\11èfZ+\13GÂÔv\85\e@9Aø\14Þ£í<ÔÓ\b.\9e\80^Z+\vy©\85Þ©u²\82\82ðÍEò,IÈÇü»©dM\83íúHÌf7¸¾ÿ8[ª\b|}8׸\8f\ f\93<\ eîÛÝ·ÇG:\14\95¶\15KËÙìrv©ò Ó¶ ñ\189\1e<&
-.\1fàP]\88X·}\\8eâ1o\9b»Wî\v]\84«d©ÜÓ\ 5ê\8e\85Plà¦Â\1f\9e)U\12>Ö(ñ\9fòxxÿò\1eÚI\86°õí\ 1
- m\85ì?\1e²¹\9c#íÔ\ 6ëð\19\12þR°÷\94vS«\1d\85íWõËã#Õ\88|ëÔ|ÍB#\99Mÿ\9eN´t_?ò\87\8aZÍnP\81Nâ\97;pÅeº¨Þw®î¾8\92ÂT\95\84\8f\87ÆÅcÚÞ÷1\e<èfH¾¤\15\17\9b®\86îJÈb=\96\122ßfNXî\91l\1d\1e\9fE¿b®\92\1c(5׳Ålq\11òsÄ·2¥Ã÷\90ñ³\1ei¶¯\ eäo\13p\fJ%\1a¾ÞH÷\1eR\83áJ,\95\18ÜpÙg\ 2zÏ°
-÷\9eòeJ\1e]Dv\83D4]\13ã\8b\87|\98^°¯\98=\9e]Ì\83«\93ê§y"{\81.\83Fй\1e{Ã"\95r\7f¶\12ÞÍ.ÿ\11ú$_E /¾ÃGçá\83Fü\97\ fä\90\ eñ\81³~\vzvøúåa\86âñ§Ùt\93\1dwÓÛ\ 5:ç\96Zè_yÂçy\83\16jÄ\170ó¹\9c\82WçÏ~xö_ô°¶Xendstream
-endobj
-1376 0 obj<</Type/Page/Parent 1369 0 R/Contents 1377 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 140 0 R>>endobj
-1377 0 obj<</Filter/FlateDecode/Length 4309 >>stream
-x\ 1Í\Ér\1cÇ\11½ó+ú(\1f\0ö¾\1c\1c\ e.¦E\aIÉ"dù:\18\f\89\111Óð,¤ô÷~\99U\95ùz0\10I\93\0eGXxóºª+³²r«\96ÿû Èrü·Èº2«Úl¾z\90\9fæøÅþç§\7fÈ/Y[\ føßUV\r§E\ 4WÙë\a\ 4WY\93O8\82«¬oNK\1aGp\95\rÝiO\1cÁUVä½]^È\18l\95O\862\ 6ÛÊ\9aÃÊu,áUV\16Ó±\95¾¨j0!D)O\9b¬U # b¹\95\88i\1cA¼²\94ñN\86IËò´µI\15ø¤\91ëóÓ*k\8d#(:¨DyF2\16)»Ó\9aØðÊ|À\8fI\ e\ 5þÊÈõµhÇ8\82òÊ\^i$c°u-¯t\960ؾ\98°\8d¼§\19ZL¸Êº\1eú @\16D\10\ 3\8b\1eÏ8ÉX^ÚB\8bΪ\9cM_aò(g\0&gâºZfÕ\aõ\95\ eÕô
-â`z â\85e{Ú\11É\18,l\82Ù°\1cX\98\99O£À\97\13¹¾ÇN;\a\88ÕE®\80MBF\eÈX^ÙÊò\8c\r¯Ä\8ff\\8d\ 2\7feä`MCæ\9c\9cç\ 6'GöC\ fp\02\8c`<ÏÎéyNãô\0;G0\9egçô<§qáü:ÉXT>\88üº6Y\ ec°°t\18\8f³\84q\9ea\8e<6h§èÈ>\14¸v"×w2Î8\82x%Î\ 1^i$c°Á`\9d%\f\16Ú¯y,a°0}Ø\8f\8f%,ÎIÎ\90³\8cÁ\96\9dl¨\8d\r¢ÂK¸í)pQ#\17¶É8\82"ª\8co\8cd\f¶Öå:KX\84©à/i,a\11F\«³ºÜz\10S\8f'7\0[nâ:1mç\b" Èát\8e \88Ò@{N2\ 6[\89;%\960X¸«\81YÂ`\87r:3a1AÙ5\9f\991X\84\f\9eY\8eaÝ\8a7\92·\8a¤
-Ôî\1dBC\83\f3\8e ÆÁGA\16#uÎJ\8eI\1a§@æTJÍ*\9eúZ\81Pzê\ 3Ä0}·q\ 4ñ:üÜd>\901X\8dÆÄ\12\ 6ÛuÓ±\84Ť+ÙO{-c°u'b:K\18l_Â¥:«öU\râX!N\ f5\a öå\10\8eª\99pa\1c\ e\85F\14}P\81\8f\8b\1c\\ 4æ4\8e (A±\93\8cÁâØôÌ\12\ 6«\1e\82Æ\12\16\ 5Ê\11$\96°XW9\99\991ض\806|¬Æäª+ÔP\10ùÁ)\10Q â\98©¨Î9Ä\82Ê\1eVë\ 3äP¸\9cë0\8b\ 2\9f4q:\8bs\ eE\a\r\82\ed\98´\96\ 3\9d&Uà\93&NgqÎ!&ÕÜ¡22L
-\8d\89\85\84\95*ðI\13§³8ç\10\93¶â\82*#\83ù\14!OÆúa"
-dR\82I§Æ\ 5\15Çqâ\9c` F2\169\1ay¥³\84eAº\1fÎ\12\ 6;\f8\7f4\960\f\ 4¡\vj·±\8cÅ|$Í"\960¼ ¼×@lÐ.|°x¡ ]\ 5®ÝÈ\15y-/5\92±\b+~\8cXÂ`\11\r&,a,8\97LÎÇê\92J8k3Í\0lI\89\vKp\921^\8a},3b Ë\92Äu:\e^Ú\85L\õP*ð\97F®(å :É\18ÓÂ=WÄ\86ia|f¼¥\ 2\9f6r\ 52¢\1c{'O
-É\18ÓâL0\e¦mB>\1dV«À§\8d\\81í.²ÒHÆ¢¢rÂê©(!\82\86$9\15\ 1È´z*\12\a'\8eYõA}¥CLªe\95\93\8cÁ"#nh(c°\9aaÓXÂb(²2g\19\83ÅÆ`¿mQ\8cÁB\ 5\93±\84ÁjT¢±\84qf\90X\ e43c°\98©c\96°Do 1>3ãUV\97Ro9Ë\18,BÊdf5\ 2d\11\9a\8béö(ðí\89\9c&_¥q\ 4e{
-1|#\19\83EÆ\82\9du\960Ø¡\16ëv\960\94X\94¢&c\19\83êÉ{\19\83\85s\9c\8c%\f\16ù'6Ïg&\f\15#\1d\81I\19Ë\18,\f\82%b\fVË-\1aK\18\ePI\8eèl8vEåñTàÇ.rÑ\13\19ÉX¶@¿\ fe\f\16\95\12vÝÇ\12\ 6\8bL\ 6â8KX6H\82\1e±\84e\83¤éã,c°ð\888?63c(
-î\9f×\1cT¡\9d\87\187J\ 5®\8aÈ\15°
-,ÉHÆX0º\11\10ÖYÂ`á\9f \7fg \8b°zà\9d%\fqPþ@Xc\19\8b*ÄÑ\12K\18,l\15Öèc \8b¢Ô\r9K\18,T>\99\99°X£ªÑÆ2\ 6ÛåbÉƪ\92\vÍ9¢\92\ 30%'®\80¡¶°\rÙ}!\19CQ(9*f \83\85{(\99%\f¶\97\80F3\13\86°XaM,c°\88LhWÚª4¼Hùiá%\0Y±\86\97Ä\85(å¤\94C\92aHZ©Ç9\0\19G0\96CÎi9\94Æ¡èlâ$ª>\87\10²\16Kò\81\8cE}\92{\12KX\14$½%b C\ 5h\92ðk\19\83\85L\13\96°¨O¼\8fÏÌ\18z(Å':Ë\18,\12\ 6^sP=\8cÏʬB\81«>r¨Ä`HÆ\11\84¨hbÀ\16\8cd,j\92¶(±\84Áj\v\81X¢\bqÿÎ2\ 6ÛI\87\97X¢&)µ\88%\fE ']\10ËXÔ$±ÛÇ2\ 6\8b¢\rJ4y\83\12\11?æ\94à\19N\°ßÈÁ\ 4ðNã\bjG\1a\9bj\1c:Ò \ 6\ 5CûF\8a\82\13\ 6\8b\9e\ 4Î\81³\84ÁB)éYÙUÆ`aþØ\1c\1fK\18,V\ 1õ;K\18
-ÖÈê,c°ðÉüÞ $¤ô~È\15¸¥E.\98\96q\ 4± íB\15F2\ 6\vÿ\85W\1a«¯D*bi\91þm/\8c\8c¾À\18GémF\85\97ÅQR7ç\99s\ e1\ eîº&Ρ(Mª?\e§\9e\Ïstäú·,Q³÷È\844Á(\82"´xAãtBÔ\8cVWèß6ad¤'\8b«\ 1yL(\82\98P3\aãT\89ð\98fÛú·)12AéF\11Ä\84\10\19íq\99"¼Ì 8tZÐ\ e7Î!8ÄO4u\8ds\b5âðI;<Ω\8b\84³6ÛÒ¿m\91\91)ò\1eûb\14AYH\8e}qÎ!88Mtïdz\15À!8\1c\18æ\1cb\91¨ÄÑ\11Lã\b\82CÓ\889\87àpÛÁ\9cCø\1e(\938\15\[8±K¦\7f\9bà\91 \92\1aE0 î\9c
-\9eÆ©¤Î9L\82;§\82ÇqARã\bÊÎi**ÒË2 \8aàÒm÷q\ e!8|\1e2Â4îñÙ\83\87Ï$\17ËÎÞhu\92㮯«³³\v½÷ÄÏóïÎfçW\8bl|\93=\19×»Åz·ýËÙ¯\18\85\90QȨ\13)j0ì¤\94aß=¹\9c]ï\16\eyF\92\a\10\98ä⻬?\95\9f0$À׳ÕùL\1fBÂ]§\87f:7RÚ¦\1câ\83ú\10NXzäÑÓ×2\f\95]\97~º\18W³åZ'Ã\83y\15G®\16«ó°\90\87Ï\10\ 4âbÑ£\1aú\12«\96Î7\16\86+¨°2ÉXÂÚ\9e\8c«ëåÕB&¬Ñ\99·Õù\9a\91\e4ñéÓoû\9f¦\91e\9eô=KT\1fJôz±Û_«Ú\108ò>Êùû¸×}B½4\14Ik\ f\17»ùÃw\9bóæt>®ßÈ\18äcyÚ\8eû\16¶iU<õ¬01ß´æPÄ'\9bÅl§{&Ue\eEÜ]êO\88w¸®\88¿Í±½ûh¢¨\87PQDb6\9f\8fûõNÞ\b¿Ø4ÑVïQf\13÷@ÖB¥e\9bÿqÜn\978\97ºX´Õpø\82ñ.6\9bq£Ç\b7c}\19\15q\8f2ð«\92<EÎ{×\1eîÝÙb«ZG\86ÔÚ6\1dµÎíbó>\9ci¹\1e-\93Ñn;á\16ðù\86ª\82\17ro\7f7]0X4\ 6'{Ø\1d\93y¹~«û\87\&ù\9e\ fËÝ¥ü\863YÙAÝ®ÎçWK¸^a\90S\9b\92îM,z\91I¨N\99\8edôðîG_\8d»E²Ä?\87·$1ôÏ \vŲ\1e\86\8a|ü\ f#Ù\10¶ò\8b#Ù«³Zw\1aíµä^³\8f\862¤Au\1fcã¡4_\e7½¬\8f\83'\9a\v\bĶç\88ï\87fýÏq¹v³¦È¾\96¹à¿QïEOõêL\7fBßÁ\82ÏS\8eäî±\8f\1e
-\8fƨ\90Ìk \97 ³¢%ÓÞ¹ï\v
-:\91&\ e\ e0©¥<TËñÅÎÖ\17ºXdc¦\95_\96ë\8bñ\83\1e\e\ 4'\8fËh[åò0\a\81 ®ð,Z,í½\ 4¬f\90e\9cè\15ìDè\eyÔ/\97¿Ç\15û¦/uµè\94æ}
-»»Ëø#Ô`¹Öùb\17C4ÂXg!zw9SC\9aD\8aíb¾ß,wú2¤ÅM\97¢ÿ_åõýéÐ$\93\váãoò3òÀ¶¸[¯\144EÞ\ 5å\96»\97çÏ\9f\a+A¤0]üp½[\8eëÙ\95¬\10Û\8fkÆxX$\19[¾ÝofÂ\v\8b"=\1f¢\_ûà\7fæ|m!\v:)\90\83\98ó|¾ÞmÆ\8bý<-·\89IçgN}_\8f·ê5N°J\93à¶B\ 6¶+â"¥L1\e².ÞÊÎ\84p\8erÚ\8fíË×ú0ú\ 4éi>à¸\80J\876[/v\1fÆÍ»p\9a\91¯\9aG0ïÇ\81Â\1d
-~ýºÊmµ¤ ·_Ê\ 1\1du¹çP\1d\94)¥~ôv±¾Hå\Êeîkï>þ\9e ÑI\ 3O2\15#øi\13ãÕl¥ 5r˼HUÒO\8bíxµ7;FOÊríPtâS\1cOÕT h+Úî]ï7aND&sc?¯\97¿=|±\ï\7f\13ë\90f\93y\0ØÀ\95F\ 5t(¤P½\83T6ª£Ä\9dÓ\r}\84\8dbbÅàå¸\r5?êù?ÇÞF\ 1Ð\92½±þ°£\93õod\ 3ß{9\8b\v¤»õû\7fh\90m¬hå\16êÐ\18C\ 4\9d,^\94oKoî)ñ»E\80¸täZ\96êÀ\15à\ eQ\9dÁdÙëí\16nk~iK\97^ÿ7ÒzÒ¸4k§\1a\ fúþãã¯ÖcÇ\1f»t\ 4²Ø¬*ÈÛï·\8bpv¹£"þ;¶§Ð7JYi\16#\ 3'=\1c\1a8÷\8b¡!Å\17´X«/v\fm(TK4ï\ e\ e\11rô°¡j¡ê\7f²³ØGÁÕlj|e¯\16»ÇÏ\7fÐøÆ5ivÔ\8b>\99ÍÃ\14R·÷÷e V0èPÊ\r\17\e-ê\98O\92ñÅËï\7fx}¦2N¼ô\9bØ\1fD\99o¾ÿ\96Ss7?·1\vGoüP²èEh÷L\ 6É\8e-Ò\90\f\96¯ÜÍb?eÖN«\9b\13ü» 7Ì1ú\17\12èé+Ý\12®\85^\8cã»Ðã\94\vÅû2°[$KÂ\1cñ8¡q\89ë\81´Æì\97çA\1aüæ\87\8bÄÁÕâð-å\89ÂÈW\ 3SS\vûbîóûñ\83d3Ø\14Ï]Ï7¨e£ß\9a8\897ûµÖ\ 6!Ý¥\96Vv¬(¾\8cSs\7fp7jfÍÉ×Åâúj\fe ÷\ 4¶;¹ÁеáæÊ\9a\rÇ^\84\19$\93\8d\8fÃmôuª\1do\15e\9f\ 4DãÈO\97%èpxC?mEt¡`ª\91c²S
-¦aúü\8c\0qk\ 5<j=©JÆu6·cnv\1e>QÉ©\12U\85J\8b"OU\80\89,µµudÞ\8czÉ Öc\85ùv±X]-¶aóq±g1e\99J©Päâ:¯*n uQ\89\95|W5µK\bzùÿ¼ÕõÂ]úË>CÁGzUGÂ\7fèML\9a\³=® Ö»åÜ\vwܶ\92"¬\9f\r×üun\1cºJL\1d×qøpãP17£ÞËÙ»p4¸Ír|'oÔ6~ÃVá]VÝ\8czm\84²ÈÂ
-\ eµ\1eVnÿ}\99öoµxê â«\8b\83\83w\8b»N?GÍUÅ\8dÂ\baþ\86Iá:T[2á àÛ\1d³â[Ô§æþ1µ|ºÁ Hý\9aM\153\eùh\8aÝR¸®1·\ 4±çWðyãZåIB'\1d~Ã\7fvÚO§~[\ 1_ÿñ~Np\16ÔÏùùÕóÿ\88¹N\ 2ò\8f\8bÍj\89;·à\98\90\fº\87{¼\fõ±|àcÙU\8c.ø\8c¬NU|Æù=·~¢wÁ§0v\11ðh>\8fþ\11ÿ\16\84»X(\1f}5m\ f¢\1a÷Xöb\19kt|¬[àþþÿé\1at\87}\1fÉlÝ\10\8aæϿ\97\8b\ f)´ã\9aÜ:\1eÇâê\1c}Û·éa|Wo\ e\90t\8dï´c³óÚt\1dMÌ\93ììx´=vÏ{Ägßî5\96³«ñ¾\rú®êOï¤\a\9dÈ\10ÖÕAgéXnt$\81y\ f\95j\9eÂ9\94åé|Sr«$Á>\11\83¼N\95\19¹%uÜ=m/g±S\85/Hï¬Ó\10ÕUÂŲ\97A\16§þÕ¼ÌmÆuT\19ã\87õb³½\ê'\ e(Ñë&ö¯îÝ\19EñäßE\9c\8aw\90+\7f\9ex!\81âxz±Ü,æ»q£Én\8d\16Lºò8<:(|¿f\908®Ð.ö´Úar\ 6`Ä7\82æ³T8#\11³V\88ûÖtÞÍ\9b\1c\7fá]þ\9a\84Á¿\8a5I\9fpñz¤iðt²\11\9c\rß\14ªªï~+¦\9aI² \15\9c\9aãa©1^,ßü\9eü3¶&e\16Ùñóö\ 5\ 6\89/Úói54]ò\97£.~\821L£×A\1a#\976\9b\99ßO!N[!c7.ü\11Ʊ\10\83Ê\12ÕâFk)|*æ\97\ 6Ç]ìܾQ\92\e\86<]\80®fÛwêõÑñïÒg\ 5׳\rn#°Æp$påòEZ\8bJѯ¹§¦\10¾L1Çû-ôrÔÈf»Ýfy\8e\ fµ4\15ãdg5»¾N¶
-¥··\14\88\9flI\9döÒ\1e>Ã÷þñ#Aü?¼ÔE\87/!ñOùHðõ£\97\8f\1fe?nÆ_áu³§ã|¿BQg%\1djÔÓf@\ 2Ðå\83<¾\.eÑ\7f?{ð¯\aÿ\ 3W àFendstream
-endobj
-1378 0 obj<</Type/Page/Parent 1369 0 R/Contents 1379 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 185 0 R>>endobj
-1379 0 obj<</Filter/FlateDecode/Length 3777 >>stream
-x\ 1Í[M\93\eÇ\r½ëWÌ!\a§*KÏ÷Ç)µ\96,[©HµÑ®K©JåÀå\8eV´IÎ\86ä®ì\7f\9f\a \eÀp(Ë*\89+ÛU\12ß¼én\0\8dF£Ñ£ÿ=É\92\14ÿgI\93'E\9d,ÖOÒY\8a'úÇë\1fèIR\97\1dþ\'E7Ë\ 2X%\97O\1c\'U5«\1dçà:ɲjÖ:Òc°e1jê1Ø:\9d\95¾Ãë$GÏ^$\8fÁ\16Åh\\8fÁ6êFêx\f]ó±T\1e\93%ÊYî¤*jêª 5a
-î\97\ 1õëà:éÒY\13^$ÎA¨\9av³Â\91\1e\83E\87\9dceÈ<\87íâ\90\flÈÀeYJÝ*I\18²G\16V\80}\95\95n!I©Ý2°n\ 3×\964kÊ9HSÊ\9e¢¤Ç:¥ÆÊ\94\86~ó\94'MYrÀª-Ì\ 1\ 5\90<ì\80\91c\8f3ÎAX½ÒNØê\ 6Éê\ 5Ìc\r=\ 6[e\98SÇ:\f\17JÉxÆz\f6oGm=\ 6[W\98\ 6×Öa°m=\92Êc¸_\9aÂøÖÖc°ìz\8e%ç¬êÎ\9cS\80Niä²,\87w:²¤\86UÍ.\86 \86¸\f¨¡\83°\924T\92ç¬ 7£¥\82\15Z1°9\v\9cL\92r\ ebÎ\9aYåÚ9\88ñ\8a\96\ 4Õ\86ì´UÖ°\93ðz\13`\1a\ 6\8e"\ f¤aÄÒ°iØãÂ"ª\18XÃÀeX \10ÇH2M\89åK«\8fm!\80\1a:\bQó\12ËÖH\8fÁÖ\19\8cdlÅÝ6\r¯>é\87\81u\e¸,k©¡\92\1e£Ûª A\8du\98\ 6í \8bc\1d\16\9fömɧ#\ 6[R\14²¶"pM¾\11íÀÀ\ 4\ e\\96ÓB*\95ô\98¬Ä"9Ö0©Cý»¶\ e\83åYp¬Ã¤\ eM\9c±\1e\83\85#y©D\1d¬qÚîÄþ\fL\9dÀe9ùx©¤Ç\10 [\1a\ 65Öa°m:f\1d&ujø¶kë0\ 4ÆJ\83ýµg\8fÁV\r©c¬Ã`\e\8a8\8eu\98bJ\ e¯3VLQP\87Ñ\14\fÌ\14\81˲\9aDRÒc¨\83`T{Öa°u\8b0çÚ:L¦ =ØX^æ%\16\94ny\ 2H$^õ\91\83ãC"~\918\aÑ)\16¿'=\ 6\8b\95\82!µ©X!ËÜ\82d`V\b\1cíª0½\92\1e£[¸\v\ 65Öa°\bý¾-\ fZt´Â\83é\ 5è \91\93`b¤Ç¤K\ 3]\1cë0Ø\96\92:Ç:L\v\83¶\ 2cE¤\966Î(\12\ 3\13)pYZ"Â\16Jz\8cAË\ 3Öa°\rmýÖV\ 6m(pÄA\19Ø \81\v\83(é1Ù¡Æô\15Æ:Lv =ÀXv²\ 2î¤N&\80\ 6e'\8b\1c\r\ 2iùM&)v\17\88\8f\949qì\10`Ò\ 6.+É\9d\8c\145ap\9bn\ 6Ö0p\92\ 2\16Jz\fE°v \80±\ eSàÈhB\95\95A3IìEZ\ 66hàÄ\91\v%=Æ e\ 3±\1dë0\89DnïX\87\89m°ø=k\18,\926\b¬ã\8aÀ©¤Ø"0\ 3\138p²\15\16Jz\8cn\8b\8cD2Öa°\råç\8eu\18,\96\b&ÎÚ:L\16¦Ðl¬Ç`Ë\9a¼EÛ²:y'é;«#@Õ\89\\86¸\$Fz\f\91ò
-{\89c\1d&e;Ì\8ec\1d\16e3Ç\8aH\8d¤þ"\12\ 3\13)pA\ 4%=V\91\8c\15\91b[¸@\8a\88F¡\8eÉE"F[ìÝ\9dcE¤º¶¥\9130\91\ 2\97¥ä\87Fz\8cn\91YBSmê1XL£gePl\ 4\1aër\ 66hàÈ\97jlºô&ëâ0ºå\8cÛXé\163 Ñ,g`Ý\ 6.È®¤Ç¤\vE3kÊæË
-<\v¹vÎ\80zE\ fÐ+p\9c\\eç`ȵ\8dã\;¶#\ fÃ\94X§\14.s\1c@(Zq@\14@\ 3:\bA9×6\92\ 3kÖº$]\806\8c\1c\¯Æ¤Ð\8bÁ6\11¢Ó¼Á\ 25Òc°p«Â³\ e\83í(Ùvm\1dÆ\ 2åÓ\9a±\1e\83ÅÞéÛ\92ÕÉui\93`3\vP«G\8eÍl\9c\83°zA]r'ÔÎAÈÊg\e#=&=i\aq¬Ã\14\88(s0Öc°\98\87\11ë0éIÙ§kë0XLJåY\87a\aL¸\97Êc°U7êYÜ\ 1Û\85\16\1ah/\91 À~$\10f¢mÍ8iWÈ\89C^d`n\148ñ¿LIi\88c\b-kiÈÀ\1a\ 6NüO9\aay¬\86\16\7fR/ÔÐc°ØÑ2Çò\92§å«K^\0µä\0\e9\92\15fç7¹[\87É\19(h\18Ë\9a \ 2¥\19
-ÿV=\ 2Óæ\90E\19C¤\ 4\85\v¥\1c\ 4\a\17\8cc\rZ\97þòo\95?0ä\9de¢\94\83b\13ÏÁD\ 1\92§\96P[Û9\b®L!¿r,\b2\1aÍ\91ø·
-\12\98\fa
-µ.zM̨\10\82p\15Ó8\83à`\1e×\8e\a\83!t\ 3àß:X`(üS}$º\82AtØqÙC9\83¢\19ªF\91ãÁ\90\12ª\8fðo\1d,02ûJ9\88ÁrÚ\12\8c3\b\ e\81\v',ê\9e-b\10\1cÂ\ 6\ e;Ê\19\84\908¡Ð\99$´c!\11!ÉåØsù·
-\19\98\10òé5\1eLv\0iE\87xd*\91ûîêɷϱ¯¤ÉÕ[\b\89<´Jê¦L®n¸þ\8cÇ\8bo®æ׫>\19Þ&O\87;ßìw\7f½ú\19\10\812ju\16\9a\9dåÔì\9b§ïæwû~KïPDF\7fèäæ\eXgFÏpJ\8dOÐÝÛåíýv¹¹%\ 6\11\18EÇðöÅùKzFÛL×\84go\aî\15=س\9bån¿]^ßïû\ez\1fÊ5Ú\a\9eò\88е\8cc. ÿv¾ZýF\fN=¹ö¾\9eoæ·Ò\v\ e\bUÞ\85Qç÷ûwh´\Ì÷ËaCÍ\90PtÐ\95Õ\9aýÞ\7fmJ¯\7fû\1cÑX,U`Ú+\18\8cv\1cØ\ 4&ÉØ(y\1e\ 6»\9c¯¯çÔ\b\a\84º\8bOç\eV\ eûI]\84q\93h \1cë1]\1f\97å÷äü|N4=ëº\91r2ãªÜ³\83¹ÂI+NËùÔÈõã+Õfdú³\f!\ f\92ùi*ÆÓ\14\8d\ f_n£wFo67)geCW;äýKö\1c\1cþ\8a´\r\8fvëëÙ\ 2K\80ÆDaªh\1fm\1aÛ\üRW0\15û\ehÌ\11ë÷Ö°ØÁá\1f\87Ý>¬_¬v\14l\82rìÄ\88ÿq\82_.\17Ûa7¼å\15Y¶³ª\8eÌ¡WÀ¦ºö\9e/W=\89\8a h¦¼üm·ï×ô\18\epQÅ~öÛ^ÞÅn \9dË\82ÅöVÔÁ\9f\12[b8\8c\84\15öé\v -Ä\84º´sl-dB]ÛÅáÚ~±A¨º_P\14á\bZ\99ÿ\7fúø_¾\85ht\86Dsäû¤\86\ 4)J\85£±_\rû\9e\95È¿Â2ý\90îmyàÖT#!e>êÖ%/oçÖ\17Ø\94¢_ÓækÞs\7fw7lÅ\8bÑy\13v\89\ f\89túçmuà\88Y\8a
-\93wD\94úÆÑë\ 5¶ÀáF<\91\1aÇ%tza?:\82hsÖ4n!a\93\1eË?\8d´ØO\83g~t\84\13¿\10\14@v=ZE¤Ãt\15=ÝöØ-$ûÁ\9ec\9bû\7fîÈÿþò_\9a\1d\1c\9cÔýN,ü\91î\83>Hã\ e\9d
-Ñ\8b§Å\87\85Ë~\1fõÁ\9d¿&Iɳíò¡ßrÀÀ½CSÄÜ*ftÈ·\9a\18\9f¿ÿ\15i±-\85×dì\ 5Õ\8f¸ó\1e\91ús\1fµ\rYþ\f\95\8a\ 3?\94ýo¤²\ 5\ 4\½X:À\e
-ÿ\9a°æÛ[Ù \90£ª\ 56÷ëë\90,ûÍlà¬\0éB\97Å\8c\98]"ª\ f\7fÂÇ"'Ìú¢\ 5p ;\b&¸\9e\9aÌûùÍM\9c1ö\13Éy^õïÉ\8c8åVYLz\ e&±Ó\ 4éaÉ\16C\fÎ4ïEâM\1d\8c\9e½Ynn\86÷ìJHßÍ<¯®øU\9cjÕbç\17ox|, 4äa\9fé\18mK\1dâ S\1føE51\89¥\19\1fÍäi\a\1fðï^`\9f\91=\16\89d{ÒÙ>4KÛ±\9eTã<\98ý\83Dø*Ì\10
-#q\17I^¬ÙUe\8aP Ólîj\18V»\9e÷ND\87:û\9a©CÇG³3.±ZÎ\86<ñH\98~ónÎB#\8d°0µdý\90`h\1cRÅÿNÆ\83s\16E8\e\1c\9a÷Ô8(\97!~\1cìBØ('\9eúÁ](¬UÒft\1c\95hÎ\8fQ\91\8aqûb¾ø\ 5\ah\99vl\ eÙ\89\8f3QIÜ*O\94\9c\86éOrÔ]¿ÅvE
-â{\b=9\9czÖFýGípï6ÎåP2\9cÌàQåpÚ@\9dCO£î´\91<]-QÑ`ýÚY\16k#£ñO ¢nt\f\1cÅQÑÌÕ\væ·\9ba'+\r÷v\bE'Üñ>UãN\8a\ 5\15n*\ fµ\98fz\93\94\9bOY_W\9b \0îÝ\ få\9fÆ\88gýõýímØãñ]\8b¥5!- A"Õ4în; j¸\96p\808ôH\a¥\8eK\e(Iâ\e\9bCµ¦Qáhd\ f\1a±ä£
-ÃÍ@Zâ\80\1f\1d1yA\ fPôÕ\94ãÝü¡çð\8f\ 2+vÏGô×® YP»Ê&Ó9\r\18\1fÊÓïï\ e5dc,æü\9c¾öÓré±\9a$¿L=PÊ\17g<\91h*æÄ)è\84Û~´ÁAÚ\8e\82÷$dþc¸fUq©å\ 4Ýìÿ\16ÄÏóX¹ÛLf}¸ßßIi\19³\1c}áSÃÇg¾ß\95$èY\86]Ö§/¸\8cú\fUQ\9f\9aoä\90\82S§%íNa\94¾\1f7\15\9dEMñeüXÓf¢éë¹\1c8ð\ 1\88®È\v\14(/\17Ûå\1dïw¸ÚTù\13Yè\ZG~£7\15\9f93\7f¸yÇ\95\eèÄÕ\8b±níD·ó\9b\87ùf\11î'p\97TÆJë\85+U!\\95écF\1dS6j3qÈn¢Êë~¾âeæçéÆï0\98&M«m\88Çû%Ê\8c®¸pâÆ~òÑJ¢D\1aWI¼ì\17¸áÚË}\13*\89zLZõ\ fý\8a£"\9d+N\9c,ÿAÓu5Í\8b»°j[·èP/ç¹Ô\ 4m\92Õüy\124Ñd\HDJ0\96ÿå°\95\8a\8c?Ø-\86õݪß3\81k\19Ëhnú\1dÇ\91p\v8Ê\82\8eÔkvnâ©2¤\99\91\9bx\1c]àU§H\ 3ãLÚ\15\ f²\91\8f»¯ì\1eÎ}\7fÚ,ß.%ê\8cÊ[ÿ\1cnÃ5\ 6b\8e\85Ôë~ÿ¾ï7äEHDðu\94(\97øª\r\12ù:n®¡jãwá\90XÐ\95OÜi\92\9f^½ø7õ\89Â\9b- û]ÈGqIÜfn¤k\94\88X\ 2|L\80Tà\13ÍÛq\8dÇ\81\ 2_\99\8cR|\94¨Æ~t~M;ç\82w\18$I§\99Ñ?¸\84\8f¼&\1a\9dá~ÝgÄ8\81\8cµø3¯f©»\8d®\ 5P.\1dË\7f4\99\87ã©;p5\84½!¹Ø\ e\ fK,hv*woyÄz'}\14¦fR©!妧È+*!\8b\97¹ÂËO»p\15\97ÏÒ¯¾\8dt¡rxx \85Äd<[?\ e\92«ávJKä\1f\98¬7Ãö\17\99),ÿx\13wÒiù@çªÜÁ÷\ 1¤Üt¶ÆWÞ\b\1aªçë~\8dûSö=\ 4O-\81Ã)\91àÝË\9e\84\14Èr¼§¨äHªðåjÙÇu\8c*â\1f\ e\8c\83E¼\85ów\1f¯ækÙ?ñÙ\90Vø/Q<[.D;\7f×sù~¹_¼c¥q§P\86k\8dãR|ù§Y*\ 5_þPõP³iaàb\85r\a}öÄû\88\95\9e\92#\1fªà¤¯3û\12÷ª«P\ 3Å?÷<¡³ªBGfjzàG\8c\90z¦¿\8b9v\84ÿa;H\11`´Õ¾xFv Ï(4}=_\ 6û$
-¥¼º\bw<_~òb\8f¸Ú&9Î2ú\82üp\12§gü×ýî~%áÒ\ 5\8eäé|ñ.ÞVá\ 3µ8wq\90Çû;¨óís|TÊß\87á{°¶À÷\8füU>>ù<\7fùÝ9íU?÷\8b}òlXܯQ·Õ\92nA÷\83\94\994iG\1f\19-\1fÈ:ß_=ù×\93ÿ\ 3\8d; âendstream
-endobj
-1380 0 obj<</Type/Page/Parent 1369 0 R/Contents 1381 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 228 0 R>>endobj
-1381 0 obj<</Filter/FlateDecode/Length 3497 >>stream
-x\ 1Í[[\97ÓF\12~çWè-ìÃ\18µîzä¾\9c\ 3\19Â\f\9b¼\1a\8f\ 6\94Ø\96ã\v\97ýõûUuwUÉ6\99Y\ exHÎ\ 1\97>uwUuݺZü}Ï%)þwI\9d%y\95Ì\16÷ÒI\8a'òÇ\9bçô$©\8a\16\7f.\92¼\9d¸@Ì\93\8b{\86\$e9©\ffÈEÒæ\93Ì`\86\$.OG ¥\81ÖnR\98¡\96^$\99kFc-\r4¯Æ¨¡\81\96Õ¤63[\1ahSOJ\8b\1a\1azpå\88+K\ 3-ÛÑÌX\16*ÌËI\ 3\15\96\8d\10¤BCBX\97Nòð&\81DCoa¤Ë\9aIkQCc,\94
-Eñ»<qAëd\196e\914\ 5ÍÃ\ 4a\86ÄÀ\825,`É\ 3Ó\16³Å\81LèÀ\80¹¢!k\10\90\a\96-é<\fô\84\f\8c\98ËȦ\14´4ø)s(Á \86\ 6Z\93D\8a²nË&Ç\84A·\9e`\15\90ª#æ\9cÃ\86*è\aVnJÉ\84\ e\f\18mB\9b(ȼ\17¤ìà\ f%\134\8eýÁ\93Á\1f\14c\7f\88XK*WÌ\90\900Ï\88m\99ÔÒ@«\ 2¶¥¨\17\83](ÊÏ\84\8a\11°¶%
-æǹÚè\8d \1d\170ç
-Ò\9b\80~`\9a\e½1¡\ 3\ 3\ 6\87\81\18\82\19\12RÀtÁ\8d\80\96¦=®Hã\8a\1a\1ahÓ`m\83\1a\9a|¾\18\8dµ4к\85uêX\16¦hSv\12vEO\880\11\83s5\89b\86\ 4Ce\86I\15´4 CælPC\ 3mkX\82A\r\rv]\ eÎ\14µ4\89ZÃ\14\14%Ã,`\1eä~l\89\9e Y\f\19\fS16Ì8\8e-Q1C\82WG΢ ¥½\16J\83zÕ\96N\r¬`BU\e06LÅü8\88&Á²`BÇ\ 5\fÛ\ e\vÆÒÃÇÅ-\v&Tú\80yq\ 53dHS:\8eÓ\94'!\1f"+´-\ 3-\8d½H\vÚGA-\r´¨È\ 6\1454ö*-I\12A-\r\14\9e7B\r\r4§¨fÆ\1a\1a([\83A\r½À(¶[]\97ÒTÞ\92ZC(ñ\84h>b\1câ\15ã\1dË\9bRwÚ\13:.`\ eYÓ%
-ú\81Hð²Õ9\13:0`.eÖ\ 4´4í\fù\90\ eµ4Pø\e\8a\e\19ë\17\85¯S^d\97Ï\99ÐE\ 3ÖR=£\98!1)\82"&\95\81\96¦%)G\19ÔÐ@\91¬Z\8b\1a\9a\f)%\1dÉÌ\96\ 6\9aQ@0¨¡ÉÌ\1aR\84\8e54\19\12m·¢^\11\ 5\152Q\11L¨"\ 2æ3@. ¥!NAöiPC\ 3E\12--jh\12\96Â\83\8eå
-"Gþ\93
-Â\13Ä\12×,\11s\bh\98\96ß$ÐÒ~ZhIP?-¢\17Õ\b~\1e&tÚ\80¹"\85-æ\ 2Z\9a¶5§E\ 5õ
-\84óªù2¡
-\f\98K3¸?¹u\930·\86Æ´¨\86`\ f\8a\1a\1a(ªTØ\83¢\86\86¤ð((PPf)k}Ñ\a;H\13O\bK\11ã4£\98!±¤#oSÐÒ@Y\81\8aú%\91WÅ\8c(É\16,¨ç `\rm\99b\86$\1dP± ¥\81Ö)B¯A\rM\fQp5¨¡¡!ð`Çzv+_¤zþ\98P\r\ 5\fi©M2Á\f)ì
-\18Ø\r#]EVC-MÂT¤\a\1dkh\12\86\ 2\8bA\rMÂ\90!)ê\85A}L\86]\91ufL\900\86Ä´($ \8d\80\94,³¬â\18ȵ\81'h\9c!C© \18'Ë8\8e¬º\b³Ð@KcEð\ 6Vy\rF\rMJ DmPC\93ÿR\8d«¨¥\81¢vl,jh \bS£±\86\ 6
-˱ëz\ 5B9j¼L\10ÇÞ8\ 2æS\17Õ_Þ²ý@ÄjÉ\95\14¨3cõ\ 1k2¸¯b\86¤]aG\93\81\96\ 6
-
\9f\0¯
\8a\1a\9a4HéIQ
\8eq
\8e\8bì
\10ã<A
\92°
\rEÌñ
\91YAKcZ
\94Ï9¬
\90ÜÑo
\9bÒ´h
\ 5Õ+ê
\17EX¤
\bèWaB
\17\rXXD@KË¢
\8az&âXÔ
\89XTP²]J:Rèy
\82ÖdÛ
\8d\18\e«b
\86\ 4¯
\14\8b\143$qCò(hi
\r\1d\16\14en2_åúå
\99Pn
\ 2æ
\97\17Ì
\90(;)ë8Á
\f\89õ¼
\8e\ 5´4qCõ
\80\ ee³t©)
\9e=Aì°=G
\8c6
\0kò
\9bÌ+Yb[p@à
\17ù·
\f\v\b§ E¨QÐø
\8a\9b7
\9f\7fÓ
\18¥H
\9där
\ 2±8
\95¯1ù5þ-
\83\ 2âPä¢ûB¯
\11dHÒ
\b\19§`<!Ô)¹
\9d\7fË
\84\ 1q8Lâ
\14K¯ñ
\84JbB8
\16\ e\85\82)
\fqÚ
\19LI`P
\aN¸2NI
-a%\ 2®`\86\ 4\86\14\8eÃo\1cÇ{\86\1e\8cT\11ü\9b¸ä\8d\b\b\8c\82N\1fx\8b\10¥\88}ª+\ 4ò\91É\94·\b\8f\15\ fò\ 1Í#°\eÄ\96\88(\85é \1ad \b=º¼÷à\19RG\9a\^Cõ¨¡°/u\91\^q\97\10\8fg÷/§ïæ]2\'\8f\87å¶[n7ÿºü\13£àa\8eF\9d\85ag\19\r»ÿøÃtµíÖô\ e9\fæÃ$W÷¡ê =Ã_ñÉÛe\7fÝwWü&ì¡©Ã\9b/\87÷Ã\92\17\81°m\93\85Çïºí§®[ÒëÐF\96·áùïýòjøÄïãÜUWÔó¤\ 5\7f½äõP%eñÕé\92WC\ 5VÈ´o\7f}ñ\a³\0/-#k»M¿|OOa,\8d\8bñÒ;,FÏ\1f<+¢øT\9a %\b=\90f±2\89Ȳf\91õ\17ËÍv:\9fO·ýÀüSG!.\15x\82ÃVy\11X\87¢¯û÷»µ\f@¶oªÊ£\93\13üçRGRB$\94Wå\9eh\8e\85£VS\94áÅr»\1e®v3\91\ fõWÀNÀì±%¢\0(\16÷ÙÏ\ eØ\7fÓý½ë×Ý"Ú6
-<\bÍVtlî\1fþ\f¥\16k¿Íö4\9f\1f°~Ùm¶ÁT©\81\117äò\ 3\1ez\17B{*m\82]\9dï¶41¢oQ\ 4ÛüáÂ\98\ 5¢\T\85ìY\95\ f\ eâ0/ûE¿eëg!\8c¿\98éîè§K[Þ\9d\1a¥üضjÞ\1e\11\ 2^<\9b#\92\1cøü\1d1n\96EÓ\9bd°A\9cî" \ e*ú\7f\ eã^H\13Æ_O7\9b«w4\1dY \84ßW_.~{IOqè®\8ah\98«ùî}¿ä\97)\b\87Èj8;ÅOÜ\15xé%\86;\88m÷²\9eø '{ùh×ϯ\82£Qö¹Ëðp ¢ Ï\19²ÄÈ"Q÷\1cX$ç\95 HLw\a\13\9eúA\14 ®MÀ«'>ÜÉ\1e¼\95¤\8c2Erúj>íQ\96|æÈf¶&YÁ.?\rë+_\194\93²\ e 4\19¸:Ac´uy\88\8cÝr¶þ\82º\85\93;Ê\b\97E$Næ\9c£ ù\9e6ë\9c\8fô\19±Ö\ f\bÏã}{Þm\8fEùå°<\9b\róÝ\82\1d
-õ_QÆ
-âjº\9d\12Çt°\10¹¯×Ã\82\1f\16\13\84à ùöCGÏàÐ\ eùÆ\97N[ªøøM\b\\847\7f\84Q\ 4ùM\1c¢K]Ê\r7Æ¡\86Uts\1cúã\15G!T¼\85ì¶\89BHõY¨\18\7f\84\807Ì\89Æ\r©ÙT\93Ô\89°\91\bw°c[øÉ#\11Ës\10\89pÒ\eKñv3}ï-\8cN\82wWj\1dß\1fÙ\169ãà\8aã6FÙî\eåÅvXÇúÌ\9eq.¦\8bwÓ_|hB\9fMO#\9bnýàÕt\86ú\8dÕ\83sp-'\9d\87³Ù°[Æ@§§\95~y=¬\17rX@ hëx
-òÉ\96b\1d\8egÞ»§Kvxt~â\91"yùäákz\88\9ez%Qà jâ\19øÿB\bõÙê\7f
-}¸6Ø3å\1cçH\rj8\v\8eMàõn½\1a6,¥)]\8foÈé\9f\ 6qÎÐ\8d\18\95ª¸`\1e\8bqpöùYÌ9J0Jª8ª\8eÙ¿ØVÃ:&¾ÚX\8eØ\ 4Z@bN\17Ýúc·f»E\1fMN\16§Ü\1fDH24XÖÞ)\ 2×\12{²Í>t\vN\83¸BÔô\7fìÄý¦ó§óÍ\87~E³Ã\87Ô;¶\ 3=\82\ f\89¼É±¬ùæÙcz\ fwv\92\86³<ù\19³êÝ\ fFß\7f6®\Áçb6þf=F¥d{ƺ×\88\88\8d\85X\0¢ê\95B\8aC\121;
-\ 2\9fúí\a\96\0W\13r\8e<f\1aßÌúm\a¢}N\8c\9c¡9;
-+¸tæm·\r\89óU·\8cL¢\13\97µ±·4;è¬ÀºËPëÝ\96\93o~ïë"\1c6%nµU\19n±¢o~3Wß0P\ 49ôÁ½\93|0t\9fépb\96\9d8æ\85Ï×Ãnå\83\vv5:E²\98.Q-P{\86\f\0®Y5'\b²èJ{{«÷z`øúo/Ît³Ýºßr\9eDÏSëÌc2n(ó[÷GbMOe\80a«q=\10\\89{F6Iû²ZÎ\Ñ\89ðÝ\89&\81ͪ\9bõӹߨQdÝn×ý»Ý¶óÛ\8dË\v)&P¡Ð\92TÝÊyĪ\82Gàë\81\1f³µQà\f\8dn+¯×DÚ§\9f§\8b\95?ùPÃ=\9e\8fQ\1e½xFÜ£\e¬\87¤§hzö^R¤B=J\1e\93\94\93Pq>±¢Ó̸xÈ\7f\8c\11à3.Þë\8c?ô³Â£ã\13\84
-Þ\84\ 6ÿB\9a ø$ø\ 4Nv«Ø\83O(\88QsJD\81~ó\11\11m~\1af\8e\88ÿ>ÿýò\9c\9e\8d.
-à\8cÝÆ\e3ö1\8d\87`Í\87\88EÒÀÚ\f»õÌ\17è¶H4\9b\rWþ8c\8fÖ\1f{Þw0ÐHê|ü\9f\vV:.×ÚÐ\96½\95\ enñ\12î ½\9a¤\95Á0mA\0\8dì\15á?oõê\859³Õ+Øß+¾U\9bºC_ÙÎ#E\1c;ádXóM\ f5}â.ßBÙßë\95°igôµ¥9÷³¨\87uÍWdSCÓð\ 4Õ|ê¸-\8bPÖ¦'¼<òª\11Áðå¹íJ²d\87åÎÿ!Ùì#;+n1ðõÔ\9dõ\ eÄÛ¤Gàð%Ã-\9a\ 4hÉí\85%.{è\19å\119¦/¦«Uì8ã¬.·\90\1aÄ\10\97ÊS_ã 1J\9c\9e94\ 3nlÒaë÷D=\1eTWÝ\9a;\18K\1fY©\8f\9dÅ;«~³Ùù,\8bì[ã\1f²\9c´Yä²ý®\ 6\82Ä8¦â\v \9fGcâ@\16]M×ý&\bWéO\92H\83,gøHÉF\1a¸ç\98ÿóÕ|\98ýå\13"Úæ§Uø\rq5ÊP\1cÊp\18-ÏѪøØw\9fÈ\ 6±k?Á¥Md\1f_wíoÁaH|Ù}ìæ|?\80¸ ¥\86Ý\1eôÊO}vÐ\r\8aÂ8ú\86m_\9cëêó9_® ÏÅ\8dH~¹\9eþåË&\1c\15äæpðö÷\vGDô2ËØË\1cVñ\ 3\ 3\9cõå{\88ä\8c^¤÷b\83óª[¡s9\rM\12ßpUß¹Ôb%àË\1cZùlt¨@ÈÛï°Á\99:>¹\8e\1a+^\18ïewÔIÓ\f¿¢DM£§$\b´×V{ÓMýg4%¾{\89G\87Mÿ_ÞIú\8eå\ eʨ\ 3QäA\90éÁ3|\ fÇß+Uø2«Á?Ããï\96ñ¹ÎÅÃW\8f\1e&¯×Ã\9fèv'O\86Ù\8eÎ@ÒMÏqn*\1cZN5nþðúGÚó§\97÷~»÷?\ 1ðô0endstream
-endobj
-1382 0 obj<</Type/Page/Parent 1369 0 R/Contents 1383 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 270 0 R>>endobj
-1383 0 obj<</Filter/FlateDecode/Length 3564 >>stream
-x\ 1Õ[Ms\1cÇ\r½ëWÌÍRU¸\9aï\8fSJ¢b\9bU\96Í\88t\98\83.£Ý¡8öîÌfv)9ÿ>\ f@7\1a³\ÆrÅ\14\19»ÊÖ\9b·\8di\0Ý\0\1a=ú׳$\8año\12Ui\94\95Ñró,^Äx¢ÿy÷\1d=\89ʼÁ\7f7QÖ,\12\aÖÑÅ3\ 37QQ,JÃ\19¸\89\9axQ\eÎÀM\94\14¹¾\81\84Z\f¶Îfb³\92~\9c\15\90\87WÖ
-h¤\81\9b¨\8e\17\8dû!q\ 6Bh\9cÑ|X
-ëÁBÓ\14oòB\19\ 4¡\8ekªE\1e\95ÊÉdâ\ 6\ fý8\ 6a\9cãj\9ao©\9c\81\98LR-2C²Ð¢)\17©\17*@\85z®ª\17E\148\ 3ICR&\90"\14¶$/²\9d
-\ 6A¨ãê\9cÆ)g áþ@\8aвa_\94\19Í\86\ 1 5\10¾¨á\8bÀ\19¨Bu \b-Jö\85Ha\10\84:®I`¶B9\ 3ɦ1ÍFI\11\9agì(\11Ê \bu\9cLM9\ 3!\14RÒ¨PR\84f1;J\842\bB\1d\97Ä9ÙMI\8b!6/0À\8aX,
-r\95\88e\10Ä:N&§\9c\81\10\8a5ZG\85\92"\94\97½\17Ê \bu\9cHQÎ@\11
-\ 3(ÉBslfÚ6<S\ 1*ÔsM\ 6ý\ 3g ¥í\1fH\11ZÑFóB\19\ 4¡\8e«\13¸8WÎ@\bMÊEeH\8aay\91°I\93B\ 1É4p\830HÃø\87Äñ0Ì\8fôãX\973 Ê@l(
-}\813\10SÁ®\87òa Å\9a<IBÌ\10@Bycz\ evÅ\ø\87üB\1a\975u\b\v\ 2t\9cçê\14ï\v\9c\814\99\12;1\90lì\fáHÃ\82\80 ÔqX\aÈ\10\fÂdª\84w>Ï:c\10Æ9®É¡gà\f$ÏÓ~\f¤Å`ñÊ°ä\8b\8c·\8aó\85\0\9e\rYØslüÀ\19èÒPà8\rùq ,\r\15ù\r$ÔbÌ\ 6þöïgÖ`°e K\98±\ 6\83m\1aÒD%\8bѳÔx\92A0\9eã\92¸¢))i1Ä"\10A¬²"6\91D->a\10Ä:\ e©0\8b2å\f\84P\ 4Nè©$çæ,\96t\8bd\80é0 ¡\ 6b r\ 3\9c©¤Å`ÓrÎ\1a\f\16:À|a¬Á`±Å+Ë\1a¼\89RD#8_ÇZ\f\161\17º\ 6Ö`°H:V²Å`\11QJ;Ö`,Aø\ 6\86RÉ\16\83Í(â\eÖ`°y:³\86Å`as;g\8bÁ\96 íàð^\83ÁÖ¼\15\ 2kð&Ê\91\87¬¾\16\83Ŭì{Ùõi#E\11ûZ\80ºÞsâê@Zì]oXv½\8eeW\eÖ`ïzòëýXqu`-ö®7,»^Çf\14],\e0Æ\16´\8b\fk0\8c\f3Ö\86µ\18,§ù0Öb°(¤s;Ö`°e\ 1ç\9a±\ 6\83\85ö³÷\1a\f\16±5³c\r&×73É\16\93ë«\995Äõ\95Ôµâz\ 6Áõ\8e£B\1afTÒbr=e\rÃ\1a\f6§\dX\83Éõ\14\1f\rk0\1c\14S°\ e¬Å`S6\94ÎÊbrn6\1fk0ت\98id1\8c\9c°\91U²Å`\91äáÜÀ\1a\f\16F\86\83\ 2k0X,1«\91Å`9¡\98±\ 6\83EU`-)îÃOè\ 4!îc\10Üç8·S\95´\98ÜG\95D\1aX\83Źp½ay\ayÉ9\85\1aÃ\1aLÎ¥|iX\83ɹ\94n\ 2k1¹/¥½©ïµ\18,\8e\ 1pA`\r\86¡8h\aÖb°\88=p\90\8eµ\98\PÏ4âtKkIK'\ 1ddξ\9e££\18¼Ã¿$Òb\98"a³\ 5Ö`1\14V\85²âYÔ\1etú\15Ï2\b\9eu\9c\1c1R%-\86XÄ(x6°\ 6\83EÔ\81ý\ 3k0XX\14S
-¬Á°?ÊiØPY\8bÁ"YaÍ(+ê !P\81-ê0\bê8.\81X,'%-&u¨B0¬Á`±³°$ÂX\83Á¢>Æ\84\ 3k0&ÌÏ\ 3k1©C§ÌÀ\8a:\89\9c2E\1d\ 6A\1dÇ%\19\95\16©\92\16Ó\84k²\7f`\rÆK¹à ¬Å`±Ï \8e\8e\95)ÅrF\95)1\bSr\9cÛúJZ\8c)!MaÂ\815\18¬¸5°\ 6cJ()±Ø\94å\8d\93Ôr¾å\9d"\80¦d ÄòÆ ¤Å`QRUp\1fÉ¡¡"¶¢Æ\8eëp$\f\82XÇ91JZ\f±È\1d\10\eX\83ISr®a\r\ 6\8bÉ\14\965\18lCÛ*\8c¥B;A\ e s.vDâ\0ë\12 ;\Ê\ fY\17:kúqt\9eóR\88´\18oD@³¬\98\bvÓÎ\12\191eó\89å\1dGÛ\vóQR\ 6¦r~\96_2\b¶u\1cTÄä\943\10³Á\99\1c³QR\84""\a\871\bB\1d\87c\1a&£\9c\81$\94Âg Y(*\1fmäñ\9fU¤c0¯8R& Èã3©R,\ eu¿ö÷øÏ*Î1\12\\952\90&HÝ\9dÀ\ 5(/K\f\87w;\b\ e±%6\\80à0ã:p<Id'õ*ÿY'é\18è\84Ö%ý\8a\98×\97Ï^~\8b¬\14G\97×\1c!ã"*«<º\qó\17\8f\97Ï/Û\ fë.\1a¯£ÓqØwÃ~÷âò\17\8c\82¹\13\1auB\81\15ÃNR\1aöüô¦Ýî»\89~C«\19\ 4\84¬\9e#<.è\19\9cï\9f\´\9b\ f-ÿ\ e«,÷O·Ýt=N\9bvXvÄac¥iídô»Ýmç^\8fíç^\8fæVSÕ\98\aÕsx\15ÞTð»ÒÔ\8d{ÛþF²@4Iæ\9eý¶é÷ü\10«¹®äáâ)ü\8332Íë¤,g*\95s\95~\18\97¿öÃGú%\1faØÈOaú\98\83j@iѺ¥\9aëpqÓNìd\8a\8dóA´\19Wâã\14G\95¹ë±5ó*¡j¯æ:Õs\9d~\18Ù'i¼È+ºT¡¥¿î>uk^k8%¥ÍÓ_kÍ\§«~%nÂÞJ¯T?87aWaë?\95\ 5\88ÄÍÛ\a\8dǹ£P~°\ f(7\8b_Þuí\8a\1f¡V-üéýLÏ\90OJ\1f\93\1e{ññ\96ºO«äP««©ßßÝUA'³§(P8P}\1c8K²\ 5\ 2\83÷ËQgm§nÕ/÷ý8\90ÏÐ8Ð<òh>ó:5Í,ô!9\1d¬¾·Ýf\9cþÍóÆÍIævP´i·[\1fØ\91?\13·ß\1eG\1f¯\fw\9c\ f<\94\1f*t±\1eyë¤ØNH^²ÇN×½/\19èX]?\89@\81\86\14Ùý\ 4÷\18\87ëÎU\ eaÝ\1dÕ
-Q¾\1f¸\10ù¿PÊÕ\ eA)ñ
-/H\1cè|\9c\8bö·\83_z¸¨÷!ñq\96\9e{«ºj^à¡æ;ÜN¼\95\10¶c\9fa£wÝîv-å*\1daR\97\8f\1fU\1f¼<I\e\9a» ©\81í\85.\ 3×Ðgÿ`íÐdl´\88xµÝvêÿM\92.n´«ê)U\12ƨè*ñîB\ 6¶JÝ{0\90Èh\ e\ 6çã´o?ôë~Ï>Å5lݸ4`^óX\7fD\93Fܧ'\90\83R\ 3§7Y\9cþøñýùÏÿ¤!t#ðtôpösê\9c \9d:\8b\858L͵¸8ý\89\94@/[\93lôóÐû\93UéOz\8få\17û^¯\14ι³r=[¸4ì]óæÇ3vM(4¬\98Gþ³×\ 2M6\9b{Ñz\9a{æ]·ú¾åÃ,Z\0¡\92ý¡\1fnÅ;8\9f\9b ¸ù0µÃj\7frvFþÄ\ 1»öÙúëè\8bv\94l ÐA@\83\8c\16\9f\8f\7f÷\86
-QÜ\84\8aã=\ 4¨ÇK\15\87°Ú{zÜßHWbvØ<=ûö\82\7f\8aöSìÛ\fKS³ çã[\ 6\ fo\9d$ËÄ2\1aZ\92ò`[b÷Í\9dÿ¶]öÃ~ÜÝÐH¬\94¤ñ\1a;5þJ\ 4õ\86
-§ßÃëqì\rN·\93;¥$2ó\£\9f.x} [\93©KLÁR\ 5\15\8f½ç+?ójájÆîQRJ\1ce\82~ô½+\90áD÷\97í@\ e¢Â%ñ\vP6fXyÑr\1c®û\8f·Ò-Ak¿\89½\93\7fºx)Ö²E÷U;mI(\96zRû.\ 4ºwC·\940\81\9b\10¿ª£\91{uøê%ôƾ\hN¯A3Ñ\9fÒZ.\8ag¸ÅW\99\13\8e¬K??]®èú±!pïªM\ 6ÞÞ²\80ñ8¿³\80½õ³\1a\97\9c\87ö\97eõdìÏ[Û\98êýóa\94\ e¤í\159/½\7fñ\172\ 6¾\15ªS\7f\94:ê\15\Âñ/ñ¥\8e:\ 1\1fD²%C«õ\88\8fÓ\ 5ç\ 6\13K\7f×\ 1µ_´~\8fa\15Ó\8bN2ÜýÍò,-\7fÉ´Öü¯dýÒT3W»F\14\95¥[\81k\1c}Ú\ e¾\9a\ f\aã\10Àm»&´\84Ñ.\fYîóMÇÛ
-\19%¬¦£\ 6|ÿܽ\fñ&Õ&ä§nÚ¡«ðþ\ 5é\87\ 6khOö²ÂÑ\95÷]ãèv×I¾±ýå/ß ¼¾1ûü÷\ f(jp|£sg½Kr´\ 6?\16oV#¯\8d\8c\1c&Gô;ÑæcÇë\12K#$\93í\84,ãÚú¸MÒ\1dº\9azØ\8aD\92ý5\82ÆÏÃz\94ö\1aµeüÊ\89>\8f\93öm\14:¶ø\8eúk\96ÕðM8:ÿ_ÞzTûe±éÎàªt\9e\81®ú\ 1
-°£)Øj¨<6É+(ôq\1ao·üs|f\18ã^âËgä·Òÿö\7f¯W\82½5\ f\83þ0b\97ÅÏ;Þqø\9eñ£u»ïv\12\8eðí\91\9e:/OÏ_\9e\9dó&À\11µô¹d·o\97¿²Óí^¼\9eÆ\r?´ùím¿\9cÆÝxͲé\9bé\87è\15{ýSú²íÐ\0wóÀ\9bnÝI\8f\14\17ð¹\8f¯\8bígéÒûÜzݯ]\8b\e×ô\9a§Úk·\ fè:Ióð¶Ýí°¶9\ e`Í\84H²¼i\87\8flo´\8ap\7fþç¯\8d$+Èê'G\95¿\e\85\91aL-\81o\91|\9f'ºº¾b÷Ùªá^½ Öjí»E(;Ë\a»CóúÑ\97À\aAÏ\1f\85ìê>meyÓAUÃ\8e\9dm\8e\9cécßxM\1aÏê\15¯±l\7fÜLÅ_å\ eJµÄ'\a\aZ\1e\1c÷î\8bNß4ÅËo\9a\9a]Ø,²ìÁ\1cò¥±Ê«D\7f\87e¾)\ fîgïÓ\b\1f\8bp+ ®ÔluÑM\9fz¹\eÆßÛ %ù\8fHÖí\\1aãz¸üzmgüí\10ò\80íîá\9a\1eêÿîáV\8cb
-²wÝ\16\9d0·Ç
-T\89\9a\88^ß~äåI_)ø\13î\97zå\ 1~\87\ f¯Dg=·â¯vX\8fã\82\7f\9eaÏ\86ý4®nõêÆÇ \a\98Ü\1f\13éT9©*S à\9a`>ýﺡ\9bZÎ\16øƬ(}8é\87k.¯pý\9bÔîá\1f{ÿ\9fÿkÕèàê\1a\99{®Ô\9bîÃ|P`\v<¾¼\96Å\86\8fzðiÈ×®m\8eZä~¥\ e\82%\16Z7\rÎUøÐØ'ûn\9aÆIÔBtz\80¬|tÚÿõa\92qì¾s+\85è1wÔ«=ʯ\e\17\17fÕõ^\8a{\1c\0µsrçø=Ý\ ezË\ 3\83h©·\9dÆe·c\93 °æ_ñË\v¯8}H4\8f\1a\a\1f½\9c·ûå\8d\94d\14û\9fÈ\ 6óNuj¼ü\16_÷ñ§IÈäY\86¿ÒÉß¹âC\90\8bWo_¿\8aΧñ\17ôa¢7ãòv\83»ÑÖ__gT\86PõZÅ\r}7ò©§ ú·Ëg\7f\7fö\1f\r\17R\1dendstream
-endobj
-1384 0 obj<</Type/Page/Parent 1369 0 R/Contents 1385 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 287 0 R>>endobj
-1385 0 obj<</Filter/FlateDecode/Length 903 >>stream
-x\ 1ÕXËnÛ0\10¼û+xL\ fVø\14ÅS\91GSôP mü\ 3\8eã$\ e,+õ#@ÿ¾»KjIÇ@í\1eÜ: ``8ÜÑ\ e\97ZQú9PB¿\12^\vS\8bI;\90\95\84\11þùñ\19GDm\ 3ü¶Â\84J%0\17·\83\ 2¶Â¹ª.¸\ 2¶B)Y\85\82,1°ÆU¾d\v\fl\8d×\8e\19àEKÜ
--Õ\16kj\84 Ð@º®a\80\91\ 5Ä\94\1cz¡\99ä\85\ 2µ\ 6\13} \81\1c\988¥\9aJ\8b\9aÉxE\19*Ë\81\ 4r`â\1a\8bÙd\ e¡\v5\88µ\ 28\9d\0Æ\15\102\95\ e\16/ÎD²Äèc;Ô\91lc@¼\97%\90e\13\97d\98,1Ë2\ee¡\14¸®1=\ 2Y6qI\86É\12³,³QÖÕ´êQ\96@\96M\\92a²Ä,Ël\94µ\86j\12e dÙÄ%\19&K̲ÌFY#\8b\92\11Ȳ\89K2L\96\98e\99\8d²Ê\17%#\90e\13\97d\98,1Ë2\ee¥)JF Ë&.É0Yb\96e\96dm\90¹d\11°lÏE\99L\96¸\97Íl\94õ>\96\f÷\99%@²\19b \829\99,1°ÚAu2\eek¼G`ß\92\ e\81,\9b¸$Ãd\89Y\96YºéÃÞ\93ºE\ 4(Km¦ç<vÌÌ\150:\ 1\9b¤\82\81xÉ\1e\ 3\v©\87\82½\1c\rÎo\ 24<1z\0\12\9a¢\13µ·btOý\1a\86'g£ñÝ|*º\aqÕ-ÖÓÅzõaô\fQ\ e\16\r£\86)l¨1ììêiü²\9e.q\ evrÐ\ 3\91û3¡ë
-ÇT]õ#׳ñã¢[Í\16\8fH@k7*¤É¿º\r)h[ù~újÜÞ\8dIÖTF6iæjº|MWÓ\95Ti¸:ö\9f2\ 1S9¿±¼
-µ\83¥0°%À-\98UdWë\94ç\97ÅzÙÝo&ëY·\88v#qìD÷ê''Cï·Ò×Ûé_¬V\9bö\ 5\93§ê;ÏuÙ{\81#Oàü\ 3¦TVÀl[\18MWqë\16\9bêȹý\95|oD7»FâfÂÞÞß\rè\ 6÷\91VU\1dúM¦p\ 4:¾ûW·Á>\83½'\17ÞT&n¯½\86ôÉ\19²\12S\1aî\18\8a\9bm¯!ón\fYº{ö\1a²§g\88î\82Ý
-¹Ã\f¹wc(>P÷V¨~7\86üa\15ò§g\88úÔî\96k\ e3Ô¼\eCá0Ct6:©ç\90¥Æ»[!ø\84\80\8b\8fß\ 6þüd¥¶¯tåNâÙª\92\1f/ß<Wá°\7f\98\1fj\92'ç§i¶üÄg\10\9f¡o׳ù\1cíÁ¡G\86þ\ràiü\9a^!\f|gá³\10\1c·7ðÞ²ú\88\ 1VW¶þ_\aîT¬ó\9b&½+À²7Æ\bí<¾+Ü^|½¼\10ß\96Ýót²\16×ÝdÓÂKÖ¸\7fQ0ðmÇÁì¡\97\ 1§¿ÎfèèÓhð}ð\e\7f\91åtendstream
-endobj
-1386 0 obj<</Type/Page/Parent 1369 0 R/Contents 1387 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1387 0 obj<</Filter/FlateDecode/Length 159 >>stream
+1102 0 obj<</Type/Page/Parent 1099 0 R/Contents 1103 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 58 0 R>>endobj
+1103 0 obj<</Filter/FlateDecode/Length 3675 >>stream
+x\ 1Í\Ûr#Ç\r}߯\98·8U\115÷áä%µ\978Ù*ßbɵy\9d\95¸\12c\91THj×þû\9c\ 3t£1$\1dѶèU\µÅ3g\1a\ 3 Ñh4f\94ÿ¾(²\1cÿ\15YWfU\9b]-^ä\93\1cWøOÁ\7f¾ÿ\a¯dmÝãßEVõ\93.\80»ìâ\85\83\8b¬kG\9c\83\8b¬h\8aIã\a¶\14Z5\93)\84vͤ\b\80B\1dÄÀ¼\9cô\8e\14eò~Rc\\9d\93\12Àq¤\9ai\15õ,\ 2\bzF¸È\9a\1c\8fÓ\eÉ9\bUj\88L\9c\83\8blÚBÛÄ9\b5\8b\1eö%Òc°Ð4êÆGz\f¶¥\89n¬Ã\8b¬Ì\9bIåØ\8a\9ekÚ^<×\94|ª\01%A1\ 5ê\1a\aS"\14Sà\ 2ã`J\844\85S\95H\8fÁ\96\1dfÙ±\ eÓPÎ\8cc\1d\ 6Ûu\93Ò±jJÓNZL¦\9a" \99\128ÕÝ8\a£)Æ©)a\1c\95\85:FzLe+<Ù±\ e\83\95HJ¬*\8b[\18yª¬\80¤làT;ã\1c\8cÊ\1a§Ê\86qE.3k¤ÇP\a\ 1\ 6¿'Öa°mCÏ&Öa\9aÒ\8cƪ)U\8e!Ñ\14\ 1É\94À©îÆ9\18M1NM ã\8a¢£g\8dô\18êT\15C1±\ e\83md &Öa¬\86¢åZ1Öc°UÇÅa¬\1a
+e\98ºtÎ\ 4$C\ 3§\96\19ç`4Ô854\8c+ò\8e¦\18é1\rÍé÷Ä:\f¶-è¤Ä:\f¶cÂu¬ÃL
+\ 5\93\82\8dõ\18l]ÐIƪ\erz=ºA@rCàÔnã\1c\8cn0NÝ\10Æ\15eEC\8dô\98nè©Nb\1d¦\eZ¦\9bÄ:\f\16¡\8bÔ\94X\87\19\r\929\8díJø¬îsI(=Óµ\ 2\1aê Äbõ\14\8eô\98
+s5¥¡\1e\83ÅS¼`\8fÁö\8c67ÖaÎL=bUa¤E&\15ÕP@R8pAA#=V\85Û¬N,\f\88\98*q\9ft¬ÃP©dþM¬Ç`!©ñ¬Ã4\87\9a»±\ e\83m\1a\1akZy\f¶/GÏ\95 Û:%%\ 5\16¤\91\93¨L\9c\83!H\13'A\1aÇ\15y\8d M$1æ1<\91s\fe\ 5ñ\91\1eÃ\85(_\10\11\89u\18ì´ \e\12ë0\fÅâ\80û\8dõ\18,R\96×Êc°-cÙ\8du\98.d
+O¬º\10ªYº«\ 5$\17\ 6N}f\9c\83Ñ\85Æ©\vøàB#\83\v#\8bù\86C\13ë0\9cÔM¹ä\12ë0c´FBs¬Ã0\14Y\1fn°±\1e\83Ŷç\9f«n\80_-ÝÕ\ 2\92\e\ 2§v\eç`t\83qê\860.¸ÁÈà\86ȪÙ\89u\98n`2L
+yÌHê¸ÜÒX\87é\ 6\89Qc=\ 6\8bBÖ\8fõ\18,\12§\7f®Ç(ë˱d\8fÁ"ê¼d\8fÁN§\9c\1cÓÊcÔèHÑX\eÆz\f\16[Áh,K º¬q\11;ÕÔ\80L]\82\98\1eÞ¢7\92s\10yTÖ¹\b!ç \1c\&)$=\ 6\8bZ\ 3\8bÑ\86z¬\93\ 3S\8cÕä\8dj\99É\9bç\14¬EA"Øa
+f\ 5æX\87179\8f\a\89\15ÁU?\95T¨\82\15%ÁÆVÜê\1dë0\1fË\89K¬
+F$0A\ 4Á\82\9càÈ"\95ãH\98X\871¶e\1dìX\87iÏ\98õ\18,Tô\92U©®\90å\1a\94\12ä\94\8a,ÎQ°'±\ eS)\ 6\85c\1d\ 6\8b8\98zÖaªÌ#P\1aë1Ø\82\19Ʊ\ e\83\95²Û±\ e\83m\18â\89Us\11Û\fñ`® gndQÇuYe¬\ e\e\17p\95 74²(404±\ eÓ\17-²mb\19~\15J¢pÂ\87#\ 4P,\16h\84X\91<9'ÎA\9aB½\12é1X©É\1dë0X\84\ fæÕ\1eê1µe\r\92XÉï\15\1egù]\ 1Õ\95"?r\ 5Z\ 3p½Ü)¶0»hÝ\11ê`\ 560r\ 5\92V\17îL\ 3\91¹íìW
+H\ 3\ 3\87=É\12'\13V¢ åAKÊ;\ 5\1cç L,¦\90\9dH\8fÁ¢D\83:"\87CUl£\9d\ e\95# \89\r\\10c¤Ç&ÖX\15\8b §_U¬\80$6pA\8c\91\1e\9bXcU¬T\99Q¬\80$6pA\8c\91\1e\9bXcU,\16¢\95Î\¥u\96Ä\ 6.\881Òc\13k¬\8aEBNS& \89\r\\10c¤Ç&ÖX\11ËÝ\9dKL|«ÀÄFNÅ$Òã(6±*¶Ó\93\9d\8a\15\90Ä\ 6.\881Òc\13k¬\8a\95Z3j+ \89\r\\10c¤Ç&ÖX\15+g\ 4\90²A\16\82(×c\ eeÑìX\87Á¢\9cè\1c«\82+=;\ 4A\82\9càȪ Ä:l\82\8d\95TS\94®¢V@¹\92j"\a×µP\9a7\92s\90\962Û&Òc°Ò"K,s1¶&î\ eXB\85þ¦Ì\84B"\96»D\13¦å0F»FF9\88G¡Ê«\92@\aÁ\89\ fÓ¸\ 4¹ý±\141ÎAn~Ü£\12\97 8´\80§\89\13gÊÑ(d_ùm®\fÌ\94\8dTcdL«\95\908\~Û\98Ààv4\97y\17\99\84`\96ÔCF9HÏWpGâ\12\ 4\87½\r½å(ÒAºªÂ\93\12\97 LFÇÑÉt\10\9c\14}6N<\8cK\96\11ä7\r\90\85\1c\19é+ó.a\fQý\ 2Ón\83D\1c.Yò\96ß&.2\14\90\18C\10ײgg\94\88C±Ì8Ô½\80¿M\d(@~\9bv\81)Pö\14\89zuùâüË\1eeVvù\ 1ÎE©\81 ëêìòZÞ5àòÕ\17\97Ãû»Y¶ú\90½^-·³åvóçËÿì¾\8eXßdç_6Ø/)ç,\b:+)è\8b\8b\97_¿zÉ1X)]É\17\e¸\98}·^ýgvµ\95ëè\1dÖ}¸þfuõ°ÀS\86í|µ$Ëã_¥ääóü¯ \1aç_Öf\1eÎ{\r¬d¸íØW\14m°ãr6,8\ e\eãtZ\7fVý÷½\16,J\13\96\97Ù\194\95ùzù~³]\ faj¦\93®yfÊï\9b#WJzû¬\12\85Í\96×·Ãýv¶&Å<\8dèÖè+&¼\84pUøÏÕ'\99+\14çñ\8eíJï\98ôE\88¾ìír³\1dîîD\18
+Ñ<^\1f\96×2:\9fÔÓ2H¼\9cm$¶KtBM\80\ 4\9c\8fþÐ è¨\9f\8f`$\15Xj!\8c\8c¥\ eaÏW]r±\9dÝ\8bUå¤Ê§ábþW^Âa:]ú~6¨õØÃ\9a8x{;\93\eqxë£G\16\83,gìÅ]»\1fnf\92N¸Jú0ú\17æ÷D\97Å5g|óW\8e\1cR\1eå\90bß!¯\1eæw×óå\r\1d\80´]¶1È\ e9åÕ|9¬çê\ 3\84.:\96êé\13\19{Plô\0Z!#\ fTGy Ü÷Àe\98}\9cX,"ºAδ\156_ܯÖÛa)ë\ 4'â¦\8c{À&Ä\1e\ e\9e\98\14\89Ç\83\9a\9fæbô\aÏ\8cn\85ÔG¹£ÚwÇëõlØÊz@ÑSÇýáP4l\16ïeÉ¡\\9dvaÉ]\96\1fæ7\ fkÛ\ fñ\16:/â\82ü0¿\9b©^pv\17Æ\9cÆ-\93É\94Ê\9d±+6\ e\94æ(ÏÔû\9e±$ésÂÏ«\aÉף̩^àóÑ HQEóy\11¯Ôj˲\9fæÛ[q£Ï\[äãûa-[2\16\1aZ_'\8d«è*öO\\fµGyªÙ÷ÔÅvXoCRÁ!«±ðø\850Ò\94\8cln7\86M
+G\86¶
+åH¶\¼\8f7þqÛ\91º\ 6 wì\18Ý\80Ðĵüpp\aj\ 6u\8eßY~Ñ9\1fÖ+ÁêIaFÏ\97³íõ\84\ 1Å AÞA_è\94±\10ìív7\18t\9f$\1a\1e7ùýnÔ¼¼CM³DFø8\13oà°Qö1a FI¡"9]7ô¹äÙédÚÆ\144ÈÖ\8bÝ<U(\ 3}\82\ 3\87yëz\98-´\ eÇ\91¯«Âfþ\14\19¦ç£Îäð5Z#Ý®µ\aã Ý_#\97ë\9f)r\14áwó\8d-\eLÀÿÝ\8b7·Ã:ìĸµ\8a\9bÑðq\98ßñ\b$á\82·&Ñ}ê\16¿£\1dL]\9bÙú£V 8\82ÕÕÓígE\1e<Xù\954=Ê}ÝqîÃ*Yâ\90\16\12\ fßóÙÎs8Ë\1e¨û\1e\96ó\9f¨(òyª\1a¯îæ8ãÉe¼\12Ç\81ód\9b|ô\12\9a=ã\ 2¯?ÊQÓßí¨\83Iho\9d½ùöâ/â\ e¾hÔ\ 5ûîû\e¹\86Wàu\15«Èwóeÿ\93]®cu\8dËß\êe\7fÎÁåòÇý»¿½8/å*B2\1dYgÛ+,lÑ\ 2\9dË2Æùh®ÐÅ;0WÁÉ5>\7f\19å"Wq¦åí \93\8e\9d©\8bòßJ"ƹ]º¼EÈIvÂ7H)jÞ¬\96\7f\8aã»xúz·Zÿø7*]á+» ó)òÓ12\82Ý\ 5\1a\ 2ãà\825º¡ñ}J\9cÐ7óáf¹ÚÄÕ\84®x\17g\15Ý\10d\98\85\98\Ã\8eX
+\1f£Äｧ\90nÀ\19ßfì\19¡[\947ââju/©°ÄK\1cÛ&޾ѽ\ 4Ǹ¸½ü^µ~Ûø`\f?rÝ\8dD=Ïx[^ß®l:ð"®G¿J\97Þ¡ª
+S´]]î\18j8-æq\8a²¯f\1fgr\15m\ë0ü6í\8f\18\15g\v\1fOî\1a¨'\14oàwëù2fo_õf\a\93Ò\ fß¼ý·,$¿ýY\1f$-ýäõ:es\ 4E\1dãý»×\94\86µQU'9\99DWà#\90½ÉÖ3\89÷ÅW««\1fc\ 5\8d\ 3ÀÓíÃGLÚ\81[
+íW¡í¼;\8dzHðª\7f=Üß\aÕ\91\1cRÖø\ 1µÅrXhÑ\82ÎxwÚJvÇ
+µÀ·}å\85𣽷ÐY\89©o'+"Z\8aXzY=åN\ 5\9bañ^\ 2p´3¤"\v»\80\15);
+\9f\ 6\16\15£Ü7×ÐFwsZî÷ÖÞ.·ëÕõ\ 3
++!c\97ä4
+þJ©jÏ\19>æ\18\19±×\ f{¹Ù<,îi\82¤þF:\8a'+ã~¥\118ïqVÎðòÀïi(Aw«>ö Ä\0w\ eûµ\ f;õýÁ\98q\91A[ö\ fÍ\a[*²Á£ÁÖ\84¶Ñ©õ}D~4\aï\1câ;\14\1a³\7f\1c>h\8cäÍgdL-\81Öì\18£qæb*;h\8cDé³7F\v\8bG\8d\11O<#c\9a\833£\95Á£ÆÈàgo\8cÖ
+\8f\1aÓÒ\13ÏÞ\18íü<j\8côç\9f\911âܳÝ\ 4 }\98G\8d\91îà³7F{%\8f\1a#-½gd\8c¾ÉÙ\9d\99Ð\94ð\ 5öÁܬ\87{´Góg°o\16jKëz}R\0ìw\19\ eÛ"%Àó²¥ïýþ\7fàõÚ\ßµóë>¾ðº\1d>ÆC\1cþNÅ^$£\9e~@\ 3e#\8d \9e\91þàFиâÑÉò'£ú¸Ï\12Bu\1a\8fF8'ÌnÖèóëÛd´ùS§þë\væt÷\864C¯ïzõIjÙ\1a'bëuã}Ç'ôÈ"\91Þ\84X\v\17o©¬\9bqáÎWO^0\16\92îÜY möQ\81\1eKZüaIì"¼¼\99-¯õÄ\97Þf\8cýýy\91\1a\85\r`Ç\92½\13Ó78ªsÒÐ9³#jöýl³º{°\93 ¾!±.Ô|)S쿶Øk½Ü?¬U&\9en¯\80~@Ëýü«ùòA\1aïøã\89ô:\19\91p\17¿×èã×*Oí¿à\11þý\95?}±Ä\ f'\16ër\9f£é|~»
+g°:DþS+t´¼ ù¸+C½Ãád¬7^\17î>Ú»Düqo|yyô\ 3\9fèÆBߦõPÕ\9dÚ©x8\88\8c\15§ÃMm\9cÜ?_3L\15G;5ü\9f\eÈ/ù\9ap\1a>·ã\8b\ 1|\0Øâ\8fêÒç\84ñóÁlïsÁ\8aß\ 2°\1dØñ£Æë/æ\C\7f¿|ñ¯\17ÿ\ 3\9cözKendstream
+endobj
+1104 0 obj<</Type/Page/Parent 1099 0 R/Contents 1105 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 103 0 R>>endobj
+1105 0 obj<</Filter/FlateDecode/Length 4540 >>stream
+x\ 1Í\Ûr\eÇ\11}×WìC\1e\94\aBØûâ)¥\8b\15«Ê\92\95\90\8eR\95Ê\ 3\ 4\82$,\ 2Ë\0 dÿ}N÷Ìt\9f\ 5@\914u±]Eóà`f§{zú6KÿïQ\9e\8dño\9eµEV6Ùlùh<\1aã\13ù\91Ë\8f\7fþ]>É\9aj\82\9fˬ\9c\8cò\b.³ãG\ 4\97Y=\1ep\ 4\97Y>nl\16\19È\18lQ\8fJ\9a\961ض\18\8e%¼Ì\8a¼\e\154\961Ø*\1fµÌ\12\ 6Û6£\8eØ0qYãÃe6QN\81¬\98 ¸É¨Î\1aç\1cÊr'² #K\95¼(F\r&\v\19¨@&%¸Ìº|À\11\14\ru¢!\eÈ\18l5\96G:K\18lSÊÆ8K\18ì¤\12í:KX´+ëv\961غ\1d,\991l%\1f\8f*\1a\e´;\9eàä]\ 5®ÝÈåy#\ f5\92±\883\16U8K\18l7\19²\84E\9cÉ`f]R\8d-Ò\92\ 2°%%.,ÁIÆxh;\86\95\11KX\96ÔAÿÎ\86\87v¥\1e(5«Z\81?4ryYA\16'\19cÚ:\87\9d:\e¦m&n¼µ\ 2\9f6ry!\86æ$c\99¶\e°aÚZv$îZÀ§\8d\^´ø\8e\93\8c1mS\rX=\15uUª1è1\b@¦%¸ÌpD1«~Q8\82\98´\10Sp\92qxä\98Y,!a°]!{f\133\86¡\8cUõÆ2\163ª\ac\19\83ä¬úÌ\8cÁªÏ!\960ØI\r\8d\10K\18'
+3\17Ä2\16ß\9c\8f&Ì\12^f\15ü$vÝ$b\f\16Æ4\98Y\9cV]\8a[\89N+\0ß\9eȵ¹Ø¶\ 2Ý\1e\87P1Î1\93\8cÁÖ¥ì¬\re,ÛÓ\89u;K\18j\1a·¢&c\19\83-$J\11K\18,\9cã`,a°\9d\84"\1aKX\Zgz\11q\19\83-\87\121\ 6ÛêÖÚ\9a\19c\ 3\10\ 2±yÆ\86c\97·ä$\14ÈS\83Ï\88\ôDF2\86\1a\11\86 \8e³ÀØç4¶\93\r&\960ÆNô@ûX²\ 5\12ô|,cÙ\ 2\89\eÄ\12\16%·r~lfÆ¢äv°æ \8aqI\8eM\81«"ryQÉ\92\8cd,öÖ\8a°Î\12\ 6\vç\0ý;KX\84-eÁÆ2\ 6\vw\0a\9d%,ªè\86c \83Ô\92},a°\93BTá,a(
+[À«b\f\163ñXÆ`5Æø̪äj2\86 ÑÍ\a`JN\^U8\N2\86\1aÕ\9b\11K\18,\ eqËc Cر\ 44\1fË\18lÓ`\83\88%,\8aj°õÎjx©ZÑmô_\ 1\888\1a^\12\97C\87Mæ¤$»â\f-Ù\r@Æi²\9b8Ín\9d#\b1\91ø\94q\16\19È\18l)é\80\ fe\f¶\16;$\96°¨HW«ë\93\99\19\83Õ$ÑÇ2\ 6\8b-\86\8a|,a9tÃU1\16kÑ\8d³±A½e«G2èS\81«7rð\9eEV\19G\10¢ªY;ÉXÔ$nÚÙðH\9cpK£+\ 5þÈÈå\bÝ0##\19cZH\rý\1a\e¦Ís2\14\ 5>mä\90Õc×\8c#\88I\11UaDF2\ 6\e¶ÐYÂ`'\92-øX1À\12z2\ 3\f@Ö£\ 6\988µ8ç\b¢\92\10×ì\1cA\9cmÙ4ç\b\8a\1c\rÖâ$c1>Q\9d³\8cÅøÊÁXÆ`kqU4\960XÄ\1d^\14c°È\81r\1eK\18¦ ;á5ë\86\96HK¤\86SÓ\fÀ64q9r\b\14½úM!Õ\ 3\96È~Í\ 3\ 6 \9cFÜÄIu\8a\81úM!uÇÊ\ 2\9fa5b%¥\ 2¡\bb1R\1f;GPk?l»\8dCí\97 v\ 51\eº3\92±XW3d \83\85\vÄZ},aÙ3É\88\9de\f¶\92º\9bXÂ`\91ÎÀ\1alfÆâN$ïp\961X¤\,QØ3ÔfbôaÏ\14\88
+ Âx¥\92-\8d#\bQqÀ`DF2\165\89W \960X\1c8\9e\98±(B\\91\8fe\f¶\91$\8dXÂ`\11g±\ 1¶*ÆPÄX\ 2®³\8cÁ"RðXÆ`a°P¢Í\1c\948\ eÍ\8b 5\ 5®ÄÈ!$ã\99Æ\11\84\1d¶²©Æ\11\14\ 5\17¢$#\19\83E\92\r§ã,a°PÊ`,aQ¿\9e\7f\1fKXØNÔO¬c(\18Õ,ÏÌX¶nø\U\92dU\16E\ 20%%NMË9\82X\10â{¹Y\93É@Æ`áÚrbÃ#\11/,\15)\14ø##\17\9ea\1cA{¤\91ñ\91qd\8eì\1a\vr\960Æj*K,aÑ\9fÔ\0Ϊ\e\94dËZ"\ 1ÈrÕ\r&.\14\1aN2ÆC1\ f\96¤óÈÐ0-J>9âa\1e\ 5>märíÐ\15F2Æ´Z\838\e\94\v7kÞ¾PàÊ\8d\\8eàUfN2\16õJx"\960Ø2\87½\10KX$\95\84\98X¢^ÙxgÃ\82\8bÐNÑSZ(ð\ 5GN\168Ápù¦\90\8cñP\8dAÄ\12\ 6\v\1dâ¡>\960XD\97\ 1K\18\vÎU\1c\eËXÎ\93x`\9f\991Xt\98\ 6,a8,X\1a³A\159µ\80
+\ 5®\8aÈEÑ\8ddlªp6¨"\8d\r¢;KØTálPE\1c\eE7\961\84\85\15ÀÂ\9d%\f\16-@l\9f³\84¡
+¸R\1c:c%\85Èál-é\v@4¡)Dâ4gp\8e \ e\95Dkç\bBNt&
+"\19\83$¡ñ¡\8cEG\92`\11K\18rÂ-çÄê¦æm(ÖÕ¾\ 3°MM\(¼\9c\f\ 3ÑË5Ï,\8dÞ`ûa\9eÈåÚ6pR=K®esô,\ 1È\13ÕÑ$.G\19RAXù)$c\88\895·Ä\86iÑ\815?(í×BG\86i#'\85
+\ 6\1aÉ\18ÓÂ\ 3â¡Î\12\16Ýê¦9K\18ºEhã±\8cÁ"\ 1e6,\18CÌÃJcwL\v\8e\h#;É\18KÒ,\8fXÂA\1c\bk\13\8bx \8b1\88wp\961Xä\84°P\eËXÄÉÅÌ\8c\râ G·»\18IØ;\12'r9RÐ\1aÅd"\19cÁH\87ñPg \83E\90\1d°\84E\1c¹Éñ±\8cÁÂÏ@ÿ63c°8ï\10ÇYÂ`µ\ 1F,añ\ eÒ\ 3pVU\81k\19+Lôw³ïÈH\ 2VeF\11\94M\95êÞ9\87à4ÙrΡh@:¸Æé\19U\17\19ÓtýÝ\8evd°ÜJ.³Â)s\84GÁí\11E0-\91\87áVJòßx¨õw\9392¹\16\9dF\11Ä\84ðy¸~\92)Âi7\b®Õë´Ä©\82ëPsëÙÖßía\91 þÂ(\822¡Ä6ç\1c\8a\12õ¾E¦\97) \82S×kãt!\88Pfóú»-$2!Ó2\8a \16\ 2û\96VD<)\ 4ÁuRÞ\e§\ fCËÈÌJ\7f·\87E&¦uò5¡\bbBh\17AÎ8\87àÐ×@xLܳ\93GO^â»ãìäLSä1îAÛ*;9ÕËf|<{|2}\7f9Ïú³ìy¿ÚÎWÛÍ_O~ݽ\8f^\9fgO^â¸ç2Ï\91äÚ\98è¨\90\89\1e?¿\98^mçk\19%Q\13\ 4¦=}\9c\95#ù\bC\ 2|\85ÉÏ×Óíbu.\9fCù\93¼\8cÜëcý*Î}\1aün±:í?éRÐ\1di\9b4Ëj¾ýÔ¯?$\ 2N4Nñi±½\90I`\9au1\89\1f\1eO\97ï§òé\93\97ð\19qñÈ\8e\9aI\ 1)$8c¡øϨҵâ*->ÿÉ|;{²Úl0ëìb4ëWg2\v2ýÈ\8f¾Ý?ùD\1e}\84æ\16/9*WÚ¯A½o¦Ë¹Ê\8fÉ»øáz¾é/¯·\8b~%\94(2}}ª\1aDíî\9bp½\99\9fê\fÈ\80mgD\v\1d\8dxÛ5M\9c8n\18̬J3ò\8eÁ\91Ú\fqÇÒ¶#j\97E\98å!:,ƪ\95\ 2¾\116C{\89P\18ö²raO.T5¨.º:-÷Í|ûìÕÏjwÒF\84A|F\8fϧ³0\ 5\ e\16\9a\14\ f_þ¢\17¹Ê'9á\8exÅ\9dÄûéõ\8f?\1f\9f¨xh¹\8c»6\8aw¶¸\fº\80åÔÑLn]Ì\17úBQ\ 4\99\90\90ìîY0gôÅÌ@mùH\1fëý壿ÐDïñ\85Vw¿i\8aReQ\8f0°¾èIH\92\17ot\eX¸\9fúþÃõ\95Ì\80&ã·0§ÃÂE!`Ð\ 3\11ê=\v{÷*È >ÀN\10 \81&ßä{\89\11\85ÈQ:\ fä\b\e\81»ðtâ\7fì?\89Ʊ\ f\1e5Þ¯\11d¢k\1a¸\81³ëÕLüæF\86\f\98éJ½$.n\1a\v>\17qj4,Ì\91l{\19
+\ f[\8e\93;>\9d_]ö¿ë¶£\15fßÜl%\ 2ëÚP[\98ã<ô Ì0_\9d¦¯£@ëª\14\0o\14å: (\1a²\93d¡\11ùë¤\8b~Ý̤¨d9G\152Ç\81R\83i\90Rï\11\b6óÙõz±\ròãP·)\98ôW¦i\1c\a¸¼è«\ e)à\8e\9a\96\88½8¿^«Vqu:\19'ÿnr£~ñ-8ë5\7f\81gòemæóåå|\13,\0\99\9d\19þ"e21¬"©Ío\fiQ\93%ê,ø6:g\90tï\9cý²Ù\ fT÷Ðð\9b\1359TÚnDºüA\9c\9f®ô[\b\94f¿Óëí\ 52¿Å\féY\10ªAÞl\e´\99¯?\86\ 4\ fñ¯\eÇ\Ì\8c徿\14\8d\1aW\81}ÙÑÈ~l{=ý\10N\ 6^]\98¤ vx\ f5Ñû\13&Õr¾|\1fóRÜ£Úè^s¹ÛTò0µßhë§ýr\1aó)DA¼û©YÇ\1a\8c*\93wûvT¶\1f9\91Æ\93íãm\ 43Ü\eôö\85MDâõ\1dźMîd)úr\1c\9d\9dFO\ e¹!È<»\84£\8b\ e;I|Ûüß\84/Z1w.\9fÐ\9eÀ.Â\1d\7f¶~\8a\ 1,U>i[c´B[\ e}\9eè)ß>}-Ï@ýâf\9e\\1a\92~3ýÓÅf»^¼¿Þ\86L\1f\99aksàSõ\v\9cÓÏà\14ÖÓËKõÙ8®\85Í´\9c®¦ça\16IQâ:àI\10_P(ÞÅÎ\8b.hÊjµ²¦:\rq{wÛo0è\ 3\11:i\b¯\f¡ü½Ëb¾®m\ 4Q\8fÐø¢ó\f\ 5ïJøbgÇÐÀNáñé¾Ó¾«;ù¢²\15±@E;\95#\1cÞäÜ\15&m\ 2ç!ɬ=òT£ªMF\1f\å \89Ú,ß[A\8eĬì¾áv\96ZuòQF»Ej\99ÛÎrÌ\9b\92X?ö\9bÔ\aAË\ 4¯ÅÄs¬!Lg\fÅèëÅlÝoú3=\99è\1eÖMÚü]»\80Jí\f¾\8c5\1e.~\\93Ç¿o¶ó¥\9c/\94Ì\1e\12¶ëy\88¯èYÛä!\ 5@;´´\82ßO\1aò\96\e\93\9dÛíªÔº\96Ú1\ 5Ú\9c\\r¦´\88\9cû«\15¼Öµ§ãH{Ó!¸ý\81ßâ\eA¨#d\94|\0D\92ý\14ïM¿\9dkÀ\85³þ\93HQj]ÎV\r\83¼Õ¤c\fN&ýË\9bWÿVëâ\12ñí|½\l$,\v\85pã\19÷³Eh4ÊÍ\83\15%1ã\17ÃíRÂÎ}%î\ 4Æd\17o\ 6\9bá?\9dÍb¾\8e&´§üp1Ûu\7f©«Ãi³Üø'øÖ°\15È\85ÿpT(K\99\98,ºÄ\1529u´òwýà¿\16óO©èÄe\9b%¬\87
+\9eÙÅtu\9e¾\8ck\13KÊIá¸ç\8e\ eäÊ\14®\82¡ÉêÕçá:\10\89¿¬\1fÇ-·\82ô@\1dqsB»\98^öçú4(½¬¢=ÜéØ\ 5Õ\1d\95Ú\ 4±ô\ e\1d½]\85\1d*Ý\ fÔ×\1f¡W\11fPâ[Ç\8bË¢\eÅ\89®\ f\97\92ÉÓî\95\15î
+¹\82Ü\LCµ\89\ 6tWÇý¸\93\16î÷¥¨3\\8ay1 \87¾«±\9bLì 6úO«ùzs±Ð\8e\14ºÄUýýZkQ>ÜH²|{Í\9cûÉ\17\8a{nv\9f.ÖóÙ¶_\87Ì\16\17\0©\19±{\82p\96¿T5ó¹\8d.CÃe§ß\8b8\10BR|\97~¶\ 5hwµáäS\97ësÏýò\\94\ 4\89\11\aC\91d¿º\7f1Ø\ 5nÓì\8a\83CU}\8b}HúHû\81\9b®\81/ßo\80õ§\8b³ß\93\83Æ\8eX·ïðQ{\80)"1\1e\7fí\f¿¬Å\81\1e!\16\fåÞ«¸å:o=Õ¤LFà\9d\98Êzlv\17\87\97¿L\1d\87\ 2\r:\9fèf®µ¡\8a·=ýâê°\8f\9dçÓmHWqË5Ní åtóAÝ>®\14r¸\9a®q#\865\86ã\80{â\aª.jFß$\1d\98D»ë{¿\87j\ e\1aÛt\e«}Ñ\8e\14\1a\96ú,§WWÉf¡÷æ\ 1\19}<1ån\97£Ä}ëIdÔ]J"ß®Ñ[MëBËÕ¼ÛñõÕU¿\ ee\10þdή\83>´\16Cæ¦\83\ 4ÜzÉ(\19F¿©\91à}\84êë\85çä?\92Vv;\1aòF.ûEÜc\1d0\9fu\7f\1aê\1d=Z1\13Ù\99úûÀR\ 5:Âëût\ 6PÉì
+±_Öã\9aýO#H\94\ 2í\83á^àMk\15\84ïê\9e\8bÓI6ÉÙú\7f®ÄZÿò_=\H\9f\1fê`þÐ\86\96±ù¢/»X
+-\e²\1fm\8fçÛ$\88ÔGÖux±^ ½\1fRxüÍ\83\15\13©\83È\97"?ü\86¢)jcкУ\9bfAc?Õt\7fHª\9b\aUáÞ?G×g í~\e\9c\Æà
+y/\9f¿\9c®ÏCPA\ 3Ë\84_]Ûå\ 1÷K\ e\\1e¨\19$É¥\17úpgzXþ*¾\13\80·¨v\ eßþ¥óÓÓÓ´KØÒT˼\89õ\11º\8eö\8eÈ`ãðÇ~\16A?.TU\83ÊðP\10ç\ 2\9d_ü8PE>}ûN}0^\ e¬ïS(\1eÔGT\87þ¿&vô±\7f\83íQ\81\8b¶C\ 5wÔ\87\9ejþî[Ä\1f=#xË\7f\92º\13\a\17öE?¬´9s´\1f7öJ¾\93\ 3o¹¼Zªuêº%Á²VÉIß_næ\1aPá\v\9aïâ»\OU)ê>B\ f\86\ eõ¡7yÞ]LuÍr\95m\9d\90\85\8a\87«1o$%¹ÿ&óâUÚ®\8cÉ¢?óëÿ\16¥\92¿\84ä\ e'nä\ e8ç\eÃÌMö\18¼¶\9a)^úLåëÛéì\ 3.fÂ\86#Õi¾^w<\89×Ò\8bi"Û¾+¾\97eÒe3Þ-N\19à×ßø\84$ÕðÍ\a\91kßÉ\1e\94\vÍjÜ\98Ùu\ 65«³ç\97\v\¨É\96á¥\8bò[¾1\13¤Â \89ÿ\93!ýM_êìÒ{\91ø;
+8\99¬Á\1f£ëµäñÓ×Ï\9efo×ý¯h\94d/úÙõ\12\8b7¹äO\vÇ%¶¾\95\97KO\1f/\16"×\ f'\8fþñèÿXQ\7fòendstream
+endobj
+1106 0 obj<</Type/Page/Parent 1099 0 R/Contents 1107 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 147 0 R>>endobj
+1107 0 obj<</Filter/FlateDecode/Length 3948 >>stream
+x\ 1Í\9b]s[Ç\r\86ïý+Îô*\9d©\18\9eoò¢Óqì:u&N\K\19÷\96¦h\89 ?\14\8ar\9a\7fß\aØ\ fà\90²ã:¡âvÆ£÷¼Ü=\0\16\v`±'??*\8b1ÿ/\8b¾*ê®\98¯\1f\8dGc\9eÈ?¥üóêkyRtÍ\94\7f×E=\1d\95\11¬\8aóG\ e®\8bv<à\1c\\17Ó*O"ã\1c\\17e]\8f*7©Ç°M;d\1d\86\9d\8cGµ\1fëðº¨Æí@¤º\13)êv4A\95¶\1aµ\11\88H\ e"îTfÕ\1fª¸S\11!\8e+Ëñ¨s¤Ç¢L3ê=ë0l×\8f\1aÏ:\f\8bY°n~Ç¢L=\18ë1l5É2\8aȺhã)#Ò¢)\10*,ZäÂ*eÎAäá\8dh\9aI\8faY\b\fh¬ÃA\97\89cÕôí´CÈhú\0²é\13W2aW\18\19\ 6Nju?]¤V\81\r\8c\9n°\9e\91\1e#\ fóT\9eu\18¶\9f\8e¦\8e\r/í¦æ(\ 2{iä\18Ç;3ç \93\96-æ7ÒcØJ\9cʱ\ e\8b¸X!Oì1l×`\ ec\83¸mÇ\90d\\ 5&nä&\9dH\949\a\99t<\16\812é±\b$\ 1À±\ eö½\88kc\1d\86\9d\94b%c\1dÆs1\93\9f9(Ó\88³'e\14\982\91ëÇø_\9b9\aÙÀ5Kg\9c\83¢h?\18è±(:\11\eåi\838µØ&\89£ÀÄ\89\x\7fæ\1cLâd.\88\13Ç\95ìܺh3é±XV=,³A\9c²wÛA\81\89\13¹^\9d/s\ e2i%Öm3é±¼²\17\812\e^I,ÈQ³U`¯\8c\1cQ\13£gÎÁ`VV9\93:i3\95P\1aÍ\1a@\9e4q*¸q\ e\8a\1e\rã\8d\94 ×°7d©4Ê\ 5 s:Èû$S\19ç`ÌTÆi¦Js\96Õ\18»\19\19\94hI\94Y \ 5¦DäBPk2\19\ 6Ö½\99´Q`\ 3#§\ 1Å8\aEû
+M\8dô\18¶\97\ 5s¬Ã°\93\964åX\87%\99Ôx\80±\1eâ\86\1f«V/KݯÁÌ
+Ìê\91k%¤5\99s\10«\ f9\a\91\95Àî\az\fÛT¢g\9eÖcض\19²\ e\8b\15$ì»±\ e£çX¢¥±ºhõTò,.4aÑ\ 3ÐE3¨»½t\1c»=AQ¦Ã´6ÐcX\fß{ÖaØ®D\7ÖaQF\1cß±\ eK\94í\ 6c=\86¥\ 4kÜØ *>¡\8eº)0U#Ç\ 6FÞÌ9(ªJ\15e¤Ç°¬\ 4âæ¡\1eÃâéØ×X\87\11·*\89àÆ\ 6qû2l'\15W\81\89\e¹\89\14Xuæ\1cÔ\8d\8f<\99cã'\888Ô|X>\93\1eÃ\922°\82±\ eÃv\124\1cë0ì´\1fÎìppAÿ^qÉ\84a\eÙt6³lÄ\9a*,×|\ 1ä\8d\988ÝyÆ9¨¾\8bÚ:\89\8cÃw\13\14=%\v\1aé1,ú#M\1eê1²\96²o\8cõ\18\96\15\1c°\ eÃR9`ß<³Ç°\13Iç\8eu\984 E\98±\1eÃ\92]ýÌÁ\91jYú´Å\15\98#E\8e(\803\17Æ\95á\8c\14B\83\ 2\e\179©\ 1ñÀL\86\81\1cS4·ê¤
+l`äØÌ]QgÎA,_Éx#=\86å\8cÁ+óÐ^\8eb\15î-\99·\1c\8b®\ 1É;=\86%,ô\9eu\18\96:aâXÕ¥b£já&º\ 4\90uI\9cn;ã\1cdR-M\8côX^)g\ ec\83.]8UDÙ\159]\12ÛH]W\19ë0\13\13i\ 6¬Ãâ\9e\95Ø!\8fõXÜs\82\81\8d\rBµáÄ\12\85Rä\84Jl]\12"+c\1dF(V\ e#\1aë0¯¥^÷cÃkIÀâJñµ\8aÜk\13«§ùÊX\87\99\98Ê\ f}2ëqÐ\16Ke6¼¶
+g\8føZEîµ\89U?\8cu\18\91\9bF\96ÀX\87a)üÐÖX\87aIÜ\9dg\1dFdâ1\8e\9aÇ\ 6\91ËpÂ\88"+r"'\16\8fÇ\16Æ:,BI\ fÁØ°\ 3ô\1c\15Ã\87,RUȼ\1a\15\ 2d ù\ 4m2)\98m\18GÊ `êY\87\19KLÆNy¬jS\12ô$W\am\ 22m2K¸k0\96üVØ0T\vÃ<T\91\e\9aX\9c¿Da)*m(©Ì¢\88$ºNÉ(Eb1?Ý$c\1d浤\8dÚ³\ e\8b²2§\8dU\v\97\8dtQ¢\85\ 3\10\91ÔÂ\89+)\b[|J~)d\18H3&GvéÔ¸¥ \907jª7R\92ª\9c\10eWáôØ@\81Îi\10a¤\825ÎÁuAS
+³çq\ ejÙ\81ú\99#.'\88,Ô¶½#=\16Ë\89T6Ôc±\\93g\12a=\96à!\85\84\8dõX"\80d)Ç:,\11@\ eû\8eu\18\96\ 2fÀ:\8c\ 5\894^f]\16$ÕS ¸\89þ\9dW32%û¯6ÊAô¤'Ô\e§\13Ò_Èþ¡\7fç #S\96\rÞ\91)\1dÔ¹Â^ÿÎ\83"\13\ 6eÊA¤ 4¢í'S¨±\rÂu²a\8d3(ëP¢{æ\1c\84ÃV\8eS!q«\\92ëßYÈÈP\98H#\86_ cHDÔ\1eW¢\1c\14\11¥\82ÈÃ\1cD\f6\84toâ\94\ eÂ\11\99Ü8\aáÐ\93\9eZ\1eg\10\ e§ðã\fâ"\1c\e¤\ f\15ßç \1c\19\83ÖDæ\fÂñ\ 2úA\89ÓØF\81lÙP\81®\8e\16=\89#\1aÉé\92\1f\86\95Ë\10³PÌpÂÎ\9cA¸i9à\f¢\1eõ\82\9c\1cã\9c\ eÂ\11¦<gPT\17_ÎãT\ 5,l!V\81©\908ê\ 2ò\85üP9\83¼n,\8f3ç \1cí\fÒW\1aç \1cgKJ\9eÌ\19\84#\81xÎ * :5K\1a÷ÕÅ£/\9fI.+.Þ²U)\90i\19÷Mqq©w\f<\9e\7fq1{³Z\14Û·Å\93íf¿Øìoÿzñãá5Äîªøò\19ñ¼\94yÎâDg\95LôÅ\93ëÙÍ~±\93Q\12 y\ 3Ó^~Qô#yÄ\90\0_î\96\9býrs%\ fÅÄ]\17\89ó»\9b\9bín\1f\9f£x|¾Ü\84ñ£)ï s\9cÏÖofò\94ö,ýïø\94\12zô_yúå3Â|\14\91ê¥\1e\97È*'(Ä!\11\ 5y:l\1ef{±¼ÚÍö˾§á\8c\93\88ý6¾¹\1eOâoßî¶kyHÇ\8bÜt$\ eÕü´Êâ\8c\838üöCSf±é#å\17\8dNö¿¦ &Ê«X±{\91ï\8cºì\83ë8\19®ãÓÅ\9b»««¸\90ÔÆÍ$)þÞ\15~¹Ûâbku,*\ 2¢O0ÕÉt\1dLÜt\87¾!çY\14O®ÁñáÐ5\9eoö»íåÝ<yG\e]c0ñ\9f\ 5\82Bg\14j\ 3%ªC%\86+E¢Ë\8e{#{1nYâE\9f¶â\8d_(báô!×IÍÙô²XgeSûõ©\ fU{}=Ó\80\81ï¶NzÕJÝ\8cl]§E+.Ã~æ0\9dvøsy\v~_ÖqÓ^ÏÞ-þ!\ f\99q:\8eöxð\ 5NÚ\8bZ^ÿ£Ðu¾Ø§XÊ\89È\ 2äÝ\8dè\80cgMu©ç3}NªíÓÞ+f\9bKý-©bè\17j\ 5ry\15W¿¸]ìÞ-vÁ¬ÜH\96\ fb\9df"r\9c\95=2\ flÑ\1eúÂ7Û7Q\91±\13y³ÿ[T\84ne\äÍ\91\1flïö7wêIÒ[ûÓ7yR\9aªt¨t÷éJßîw³ÍÕB\8cÁ\89«-SF3Õ©\16ú:\ 6ñ\awùѨ\99\86\95f\99\H\8eÕ\83eëW³_tA«Ñ4ïÚ\97ÛÛýù|·¼ Õ\ 3eXNF!Ä©\8b³CºT\95|6úŬjú=¾|7ÛÌ\17*1I²nR\95áÓ*×R\7f^tʶK+vä¦ÓC7}µ\98\8eVíÒW\10´\ 1ÛÉ\83Ö\ 3Y\8dÃ?Ú±\88êë\
+Ïß,\8f¢Î)Æ\9c/æw»åþW\99JÊÜ\9c\84V\8bw\8b\95\ 6Q\89îqq\ fExpÜ\96Aç\8Ó\rvá\96zþpI?ëÒ(¨sP\1aq\88<TâÅv§\11qP?Ì·ë\9bÕb¯\ 4ß\1fXYt¹¸Õ \13\8f
+Ü¿ZÊܾ\15\ 3Òí²¨të\\80\rk\ 5\8as\ 1ªà\93¥\9b´¦VésÃ΢¢ì\a\v}\1a\rª\8bÅ$¯IC'.'\8f¿Ë\ f9M¦Òÿr»\9e\85ó\1a5\ 6_FÅ\84û\7f\1cáô\0Gá2©\1f,\v·õ\81ïKÃßç]鼨Iª¤ç7Ûå&\1e}\ 6GÐÙF-G³:×Rß]è#Î\9d9]=õVâë²h¥_\96ûkù?\a\16vÔ\1d\9e-+\9d\95Ãm:?\9f*d\ 4ë\9c\95|\v\80§æÌ\8cMÂnÊ6¹_ÒûÊË×ËÍåö\17\8d\81\1cÏmÃÐL×Ðë\ fÌÁVá·tzRWàTÚʼm#¶=Ó\8bü¡Æáü\915~}á}Ð\vXª¨Xg\9c²Y±¿\8e\ f)±s³â\r\95{8yU8[®Æ÷×Á\85¸Y·N\82ß~\83@¢Û\8fK\8a\94Fb\89®\a\18\1a@]yÊ=\14ÌäÒ¤\F}Lx9J%?l\96o\97¡â\11õ²á¾Ý^m7jO\8eqVÒaº_\16\vÝidVÞ\1a÷\8fw+NöÉU\8a¸\ 3ikçsAôJù\8e(W\8a?|÷ü?²ð\9c\0,[ßÝÆmÎ*MJ÷¦7ø°ü\9a«\81z\1a\93þÇ;e{Ø\8b¨YðAÈáS½aÈyüF*øy8¤P,\ 5¥?þ\95'þeÐè\8cÛ%¿eX\9e¡\16\9fqÕ\105è{\17ä¸\13\eÊ\7foÃ\ 1ÇËî\80Æqi
+Ú]ï\96Ô\fêTÜø¥öå\89Wâhú¨\98|C2\\eÒ\94jçμÅÅlwµ\bNÆíMj\býp\eÔà«\80´\87\8e^sú\aml
+ù\13¢|p6\¢\7fmÃ\ 1Ñwhß³B¯·»\9fÂò°çO\9dH?d\9f¨\19E÷Á\12¡ÄÑ\12½XÎwÛÛí[]%úÕVk¼Z¬·¡n\95\80Ù§³\b\8eÈ\81ò.\94º\833å\93Ù*\9eE¸Ù£M®\rñ\ f ú \Zµ \87¨ÔjÕU\v¡Á;ßw³u(Ç))s\8dyNÛi9\ f\8d\v:Õ9Ü\9fS/͵`âk\8d\8aFá)\84¿Wß6ö¤(¤\8f\96+Ä\v¯ÔË\15}r¹[Ñtá®\17\1eßí¯¹gYÎóå\ 3\17\90¶\98/h<¯bôàzïDî\99t9Z\9d°«¼"\ 4\ 1½Ý!\bXûè¾úîëÝ64 \19m©ôùS1\07¾Ö\90}¼ZmM{<\93OøN¹\8cml1ñmòA²¥#v´Ï^-nïV!\14ºðP<\99ͯSíÏ\1d{*ôïõ\94\93=L\9aÈ\7fÖ2\fêA\8f\£>ßÜîÙäÙŸ¦Ï ê¾µãòïíòêÎ.ĸÎ=\95ï½Ç:I7ª³#Ý\8e£áQEa·mï\99ÿ\94\8f£ì\93Ã59\8eu¯\16?ß-w\8buºií\1e0\80y\vtzä:;®\ e¸â?Ú\12\17\8bÛ|ß ·\86\1as\8b\vÙ\10!\91J\1eIåïCK\9dONóYÆ¿ù\84\7fG¥ø\98y\90sBû<ï\8do\97ëå^w\86Êî¶Æ Eûè©»Píô|\1e5ô¦Ð\12ÏZ°cç+Î)áþúsSBS¥;$ê'vèó\9bM¨°cø\>\95ÓV×\11\15\82ßå\vzë!¤ø¥Ù\96~\97u]¬?qðÑ\80¦%{ÏL\9d¡¤ÿ\99JÝB¿5 ¡\95ÞK+~=Û\85Þ.\9f\98¤*Ùú:Ò$Ë£å{\8aÝvµ
+Ù\93®á§µî;M^îÛ\86\9ajÊ{\ 6\1fÕ\ f+á\97»ÅN¢Ìí2\14\85|\94\93ïÜ\vZò\97)\8d¹^ÝG»ç\1fùà Ú\99|\95=TèàôøÕlþÓ\15ÅE8z§\96ú\1f)É'Î\15\15\18\9c\1di\f\f\97#¹f´:_\1f\98\87Q F7´~ 9¬oý\99\93Ñbµ\1f\ f\9dLN\ 5©Õô\89*}`X\1fRFE\15?HÐl\85\ 3\8dw\vÂküÖ\87/HST¼Ð\1a*Tľ\85s±»»Õ\8a\8boRìüòx>gÍÃ\aI4\fÍ\87ï+`Þ×\9a}²Z¦T;¸*Ï1ÄòÖ}\8báÌþ wo½^¯\9cUòuÚÐÃï=àÍ6wá¾lðùÂ\13µfüLÉ[ó\9e»\87ßa`¹Õøcªð¤u5qYX\9cä¸\1aúË÷\9b3Ì~ölõë_d#ð!d®\19\8a\aR\9c\88ßþ\8e#p¯-y\ 2\7füïöõ/ý`\8e/mã×h\14Ó\.\14\1d\9fSë\15Ìùã\17_=\96FÑ\8f\8bù¾xº\9dßI=\98\8bõZ²\10Ýų^¾Ü»üb¹\\8aqþyñèß\8fþ\atëztendstream
+endobj
+1108 0 obj<</Type/Page/Parent 1099 0 R/Contents 1109 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 192 0 R>>endobj
+1109 0 obj<</Filter/FlateDecode/Length 4542 >>stream
+x\ 1Í\Ûr\eÇ\11}×Wà)Q\1e\ 4bï»yII\94d+¥\v#Ò¥Ç\14\b®DØ\ 4A\ 3 $ÿ}N÷Ìt\9f\ 5 \8b\96H*I\95\8b\aggvº§¯3kÿþ \eMðÿlÔ䣢\1eÍ\16\ f&ã ~\91\7fdò\8f·?É/£ºìðÏŨèÆY\ 4\17£ã\a\ 4\17£ª\1a×Ä\11\\8cÚɸ$\8eàbÔåã\828\82\8bQVæã\86HÆ`\9bfÜ2K\18lW\ e&f¼\18å\93zÜÑXÆ`³j (c°U3\10\951Øn\8b%\f\rB\93¼æ&\17õ\16\15~Ä\92'ù8\8fHôË\18lÑ\88\16õYe \83
+Y\94³\84Á¶ÅpfÂ`¡ª\8aÇ\12\16eLd\13lfÆ`ËV\14ilQ\8b@y\8eÅÀ&Z\ 3²b\82xé$\93iõÉ ¬c°¥Ï£,a°u)ÂúXÂA\1c,ÉØ°¤I\aí¥%)ð%E®+d×\8d#\88I\vÕ\82\91\8ce¹2»\ fe\f¶Å\14m¬.¨êjlI\P\0¶ ĵ"¦s\ 41)¦ë\88d,ËÍ\ 6C\19\87åòIJÜ\84ÁV5ôà¯e\f\16^Æl\10\ 6ö$\ 1Bw¸RàÂDNåu\8e ,W\fÆIƲÜV^iÓ2\ 6\8b}\9a0K\18ö\99×Ø\19\1f«\ eWÕâ\85\18ª\ e\17\90Z\19a°u\r\v%\96°L,Nã,c°u5\18Ë\18Q\0¶Ïcâ vq\9a¸(E´¨Ä\86E8KØ\16el\T\1c\9bc{ \vg c,V\ 1-;K\18KFHÌ\89e\f¶h¡P\1fË\18l£Ê°\99\83É\94\85;d¥ÀM&r!Â;É\18\8a\82AÀhl(cQE+:6\961ز\12ïq\960Xx\1aTá,a\88\93O\ 633\16Ud¢
+\eË\18,"\15¯J²k\955ê<\9aN\ 3\10M\10\84cIvu\8e`Ì®ÎivMsj:u\8e ô\97©\15êÛÕÐ\b\83\85}§µ)K\18,\1c¶ \ 51\ 6Ûd¢?\9f\990´\8b÷0Ë\18l-vác\19\83\85)ñ{\19˾\15¢]{/cè\1e¿3Ë\18l¥!ÈÆ2^\8cJÔ\v¼fÆ`\91\9d\98\r\ 6>)4È\84\98¨À\r<rYV\888F2\86\1a±$\ 4 cuÚ²\9bh\98Ði\ 3°i\13\97ebeN\86\81\bÜ\96\ 1K\ 5>0r\9aa\9c#(\ 6!\11ÀIÆÁ Zfa \a\83\980\v\83HX\fBÊK\9f\991X\9aI\16Ì\18¬Ö\1f4\960X\18|M3k -á\83\92yC \rH&f,âJâ \960XdÌ\82YÂ`\11ê:f \8b¸\12]|fÆ"®î\9d®1\88ëXÄm`\124\960XØ?¯\99±D&1H\1f\e\94QÉN\982\14\912\12\8b \ 6q\9d%,ÊÈäµÎ\12\16e\88Û\11K\18l+e\1f±\84!\90\86Zg\83!£ð\95ì\1d<@\81¬\98àbÔHð/\8d#\88W"þÀ\90\8dd\f\16q\ e¢:K\18,\ 4ÇÎ:K\18lÝ\ eÇ\12\860\88!¼(Æ`+µ(\9b9\88\8a\97[!]*pQ#×JÚv\8e \9a+ÉrÎ\11ÄbQì@P\9b\941X\ 4Â\ 1K8¨\ 1\1eëc¡\86\84\85meO\89u\f\16¾?\98\99°(I
+W\1f\e\8c\14;&¡+z¨"2ÒÄ\ 6\ fu\960Æ\96\13Ñ\93³\84\85Õ½!Ö1ض\11\8bq\96°,Y½ÎXƲ¯µx\9d³\84Á6ÒR;+õ@ÑVê\92Z\0\ 4 Â\12\8cõ\80sZ\ f¤q¨\7fÑÎë$2\8e $A£Ö\10ÉX$)¡g\1fÊ\18,tT0K\18Ñe"éÁÇ2\ e¹wÀÂ\9c\12\96È$\95\b\8d%\fVc!±\84\91{3i\9a\99\15\15¦,D\ 4`~\938m@\9cS\7f+\10DÌß\ 2ðq\91ËôpÀÉ0\10õ£%×B\81\ f\8c\\ 6ÿÇÒ\8cd,;#é\99XÂ`\eÝT\e\e^\8aÌh-d¡À_\1a9¸|\rýÊ\83Â\11ĤHDP\9d\91\8cå\95\92;\89%\f\16©¦c\96°\18\928\9b\8fe\f6\97Â\9dXÂbfÒ¥\10KX\fI·ÛÖ\1c\14¡\ 5DÌ\b\85\ 2WDäBMä$c\88\83<
+UØPÆ`Ñ/Â>\9d%,ÂJðsVC\96\98¿·\98\ 1É\9aB\b3Vs!±\8411^\b=éL2V'\ e%\rÖ¤½j@>±±0Ö6\96?Ê\12ÆØNüÍǪ\12%\14\99 \a #1p¢a*\ 5à"¢ôÒ\841-²uÇ,a°\b|\19³\84EV zþÚ°$4·fà¹\ 2_Räp¼V¢i\90\a\85#\88WfâqN2\ 6\8bò6'6¼\12çfv\92\91+ðWF®\15kp\8e è@\9a9'\19\83mä\14\89X² °Ä\12\86\86°\13<6,\17YÁ\ 2]®À\97\e¹N\ e\8a\9c#h˵\81q¹qdV\8beûPÆ"\8cäHb \8b0ª]\9f\99°\b#Å\87\8f\r aKôE\a\88y\15\880\ 41-:&Hc¤$L\89.b&x\17\fL\81\8c#\18\13¦s\9a0Ó8¤J¬ÅÆ\11\94÷IFp\921X¤S~%c°Ø±ÁXÂP\ 1d\86\98öZÆ`ÑèBNcUAR\87\98q\ 6`»\9d¸PÆ9É8\88Saod\1e\19*â$,\vnðRb cI\1aç\9ce\f\16¾\96f\92\99\19\83Es\90ÑÌA\1c$53^Ép®I#N\80X\92V©N26qlh\14'Î\eÅq6\88\13Ù¸|c\19\9b8Î\ 6ñÒX\98/\14el\10§¦Î<Sà»\13¹N,Â9\82\10\ 6UOAd\98\14\89É¢²d¥\92t\149\18l«\19,p\ 4E\7f\125| c°H)\90æ\r¯D\ajQ7SàrDNc\9es\ 4å\95Rc:É\18,:e¼Ò¦e\f\16!\8fYMyYÎ=j@j¼\9a\ 2\8dE×\89×ê³Ê\12\16I¥"q6H:¡N2Sà\92F\ eY\11³\1aGP$\95\12ÉIÆ`µH!\960X\98yNcuA¸x±òSÿ¶åD\ 6Å|;2Æ\11æ\83\81fN\11\ 4\878^;§¯B\9fmv¥\7fÛ«"\83\9d(GÆèA%õ%\b !\82h\94U\14\83¬1\1ac#\93¡³\90\ 3â\14v\1c\8a&¤lpΡ¬\\fÔ9\87àÂ\15B\9aS¥Â\9e[DÑ¿MªÈÈB¤áÂcB\11Ä\84Z.8çP\16)v`\9c¾\f'̶[ú·½,2\19:C\84xy,¼Ì &\84â\90u\8cs(/\93Hâ\9cCpº%Æ=9ypð\\12Åèä½.r\82\9b¼¦\1c\9d\9cé5.~\9e=<\99\9e^ô£åûÑáòrÓ_nÖÿ8ùuû¦wõatð\1cñ;\93y\1e\89´\98èQ.\13=<<\9f^mú\95\8c\92Ý\ 6\81iÏ\1eÂ\9bÆò\9bFÆðËÏËOò\v:ÿ&=´Yê386É\8a8\ eËx?ÿp½ê\85\81l¥1ÇÓÅéT~\95¼Z¦)Pñë\1c\92`Â{¦*\ 2Þ_å]úI\1e\81K¥G\8eVóÅtõ\87ü\8a[ä²\8e\8f=].¦óKý\15&m£E3«åÅE\90òày\994\91ãÔ³êJ¨D\1a0H\8d\97â\80H\ 5Ç\95 ½îßËùåüò\83L<Xûæ\¥\14çìò$ÿÅ\1c» \8fæ(ðMLÓT1iã\93ûF»\ 4è\10'Y|t|ëÿkTé\8fät\1e\9bÉòW*}nâ,\17\8bePi1n&i\97\8fVK\98ÝBwª\84ÊL¨éå\99È.\85UQFA\9fVË\95>
+Ë6\v»u\99öNØ\14²\1cØ<®û\86\82ÖCA\8fÿXoúÅÎ\16\1f-/æ³y¯«Ç\96Tm\13\85Ú'(´ò~~\11\1f\86\91'\rì]Ù]üØ\94AZtÕCa\9b¡°ïΧÁDáuMò\9e%\fRã\0¼¢¨\92«\9d÷\17W2)RomF>\9bªI`\97ÍFG/ä)¤\15ó÷\ fýæ_:\12ɹ\8b/¹\v¡¿4gSEe¨'³\8d·Cm\90ÓÁ>MÈ\186d\12d\84¢Nzz¿T-¡§uݽ\9b_\9e-?%wðhØ}>xõLgÀmOò\9e/-øû\7foÚ 2zÙ-k\87`*4\87µ\14ª§\9bypq\9c½\95\8d|6$ àÅåz³º\9e ·þ§L\8b\ 2Û\ 2ÿë~ói¹úM~FÚD«\17\a½\~Àã*0êÌøëwÊÕt*\14îx\a\81
+éà6%:î7\9b\14ãÑ\85"9\ 65\«õ#A\98ìo\97ÓE|\12\17Á\13\8b\b¿¬£û \10H\91{´\15\12¢WÝD#Ql¹mG"bóí¶Ì÷Í«Ç/^ÿ÷ðÍë\93·o^\8e7\9fÕµ3\9c/5uÊ5a\ 3ÇÅé/\19ìë\13Q6\ epÝ\8fÿ¢{üM'@·cïòÄ\8f²´\8d\99å&*\90gZ\ràT¾\1482\10\85è\ 5À\9f\150!\8fÿå\ 2æñ,è¯#³¾AIòd:û-Ø\8a|.\91%\87påáJâK% \1aNw¡PÀ 1»\rjÕÄå\ fÊ«\v~pëçÁÆõÌ\ 5\96U?\9a\98\11\19ÜÅ}q(ý¤°T\93÷\9dikÙK*\98J|\974\b,ø¨jh\8cG«~Õÿ~=_Ï7¡\ 2ÄÅA\97ræÛ~z\96|\fâÜ}<tQvþ
+²=\92\ 3\7fö.ØÖP Ù×\ f«åu¨kRZÜ\99îþ\7f\88\ 24\rÅ\ 6|p0\ýÞDÿûõôbþ>\1650K¯ÔÔÐð\89c*\Fd!{Rc¬¨qÂÐYÚ\b\99\84ãå¾:÷2ä\ f\ fPÁ·\93\98u¾_\8dQ-r¼¾e©ÉV9\ 5zOcÅÚèl\19*8|cè¾µ£\99wH\7fë\8d¥N$G\9fá=ª\ 1ñ\1c\1c\91»³ÍCk\ 6Íxósf\r\8b\Ý¥\92kfýJÐ\ fN¤ëoO¥m#KA¸Ì¶\fe7}¾;ï/uÝh\10-\83Í5\9dã;QÏtûvôèé¡\ eE\anMÏeß\9fõg*\ 4\82bUÝY;ãf\13¥Õ\ 3ê¡_\97CÏ8\f%ì`\8b<\80âèÇêÀÓÐäaßÌ-v¬\81¢?JÅ\14%¾î>ª\e ÿøH{+øºLßþWÚ{\98ò\963lµyûý@6\94=y§Ä_÷!W\96\14\0v\v¦\1dmí×ó\93§\87ª\ eé\9b«ûë\17\92Å Zõ"\v%Ü\9e\82ù\eµ´ê¯ÐDNCB\94x\9b§6z\9f#\17§WÓõúÓnº\96Þ2h\bçíuLªßn\1c\83\91v\ eTfå\rÊí¯ÖXÁ©¨Æ:Þ,W)Ås»¬[þ÷Ð á\90%U\81#)\9a\ f^MgçóKu3|TÓX7ñx6CâU\13\93Ã9s«ù%z°\85Ç^|¥nùg_ù¤A\r÷áÞý|úøH¬\e§¶îèOç«~\86õ\87s%\ 4äæÏ£n«\8d \95G\ 5J(·!DÂaÈ9º^]-×*&\85ûÁ6üP\10äy\14ú<\96c«$z!Çig¡5\14%¦}ù¡\8b\ f/\8f"\f\8a¢t¢ggZÇ×WWËÕ¦W\ f\e\14/f\16hTÌ¢\8eûÕÇ>\9c_¡Ü¶¶æ~¥í&¢il\8a\9e¾òælåµãÙy¿Ð\88+ÇUv¸³ï¸êm\7f¡>´>\9fk\93\8bK\v÷\90\e\1eX¾}\1eÒ>\ 2fê\98ób¢%\a\1f\14Ãîç\9fÉ\9dqÔoEæw(2j\ 5÷©\ 3¿ÛJné\9c#Æ%\1c\ 5úÉòþTôi¾9\17}#oÚ~\8fö\19Çw¬ý¦C»,ìü ?á³Ñ=ùéÍU\7f\99V\89k\15o¼PQ꡼\87LÜÓU1\vÝt!ßô\Z=>nÚÞ£Ýúóf\e\85ó¦üÖÚ\85\e \95\84\80\89³çm\9d Gó\ e9NN¿RÛ»Ï÷~BKy¥\8fÊ\8d\82\15\96\8béåôC¿\887\bòIAû\17\8e\8cn$ÌÞ\87ºp\1f\90á[Ú-_Ú:9>îg׫ù&\1c>à\9b";íÝ'äZn|Øë\91Sï¿éï\8aà@0Á-Ù¶Î\81\93ëàªÞ£ÿúª\9fͧ\17a«\ 6\11u³YÍO¯7¡YÄI \17\12ûN\88Y\17:\19>3»«Í\8d\12ã\ 3ë\81½n\9d\e>û<]\]h92¨®^>}ñ\\83\1fZZk\82\9e!ç§k\10>sÚ'êN½Ï²ËÌø «¸«àÓ\95ºÛòÝý0à \83\8dR¥>û\10w[éÆ\14\1f.Ü\8b£íõ¾í\1f;½¹ b\1c\1fFÝ \18\ fi\8f\8añ_Ö1å\r®"u7D\15\Í\8cp\92-¿ÑhK\82Èíé(\7f\84ÓÑùÇ~P)ã_/iÓ9ó:\94V:;BI{Ë»Üm\1fHÊGf\83Óñ\94\16Ø\93k\8céÅETÄà®r_÷¥\87\97«P\1abîr\92.B¯p\ e\88Ь®+Çþu²¢}\1eð´?\9d\87ó\ 59 n·Usk êÀ-îÐÖ\91ù\87\8dÇ\ fÑÁÛþìçpËøct°u\12
+g¿Bÿ,\96)-¸\9dQ\1dÛW \13ï0]Å?௸«øþ\87\ 3\18>A\1fn*.¬ÂQ\v>Jõ{\9d?\96×á\ e\97\ f/\ fúÍìà·Õi5\96BPT\80úÛ.#îWÄ.\1cGî42¨\ f\87ò\1d®úxd"ù8]¾îóÙ\19¶\16yXå\86\83Sáåç\aè\9bªê~«Æ1N%D׸cÀ·,\94\89EÔÝÛØ£åz=ÇG\15\1a;\11yì\ 6²÷Ï'\907óû;\19cÃH¢\14ù@\90\12ø¤_ëiÍàc\81½&\89c\1f4Õ"«ä&;\10Ã\81b4jô¹ws&ÊR}ñï.^¤£Ñð\8a\1fõãÐDEÜtØ¥Åe¸2¶ÄÉÝ#\8eõföi\10W\8b_\Ã\9d\11&ÜÖW\ 2øÒt(ßëe¬n\11bþ\7fª#×K\10\84ê$|\1d\vGûê©e°Z*u^,®VË\8fñ@\b_ÁYÙ{ºÂW\1d©vÀg^\966ö\1c3z]u;\87\e.ç×þê¶\ f"å\13?\8e8XùpgßÀù>ÎûOâ\80òï7\9b\ 3.5=Èí³uv\ 3\1dàkÎzç\9eøkë»5>\bú\b_ú\92[âß\ e\19
+÷\847\r\16aÅ+W§ä¯¶\97~Öc{\89/֬ǽ51¾>Q\10\14wnñ?Ø£\7fég\9cø\18<~Æ){\84ÿÈ
+þ\95qý\90óøñ«'\8få{\93_q\88\8d\9b§Ùµ47vâSÈ\9eJÿÛÈç¤g\ fç\1feï\9f\9d<øÏ\83ÿ\ 1¥ÔH\8eendstream
+endobj
+1110 0 obj<</Type/Page/Parent 1099 0 R/Contents 1111 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 239 0 R>>endobj
+1111 0 obj<</Filter/FlateDecode/Length 4146 >>stream
+x\ 1Õ\]\93\eÇ}ׯ\987ÉUY\8aó=ó\94\92×\91£\8a×ëh×µ/z\19\91\\89\16ÉaH®dç×ç\0è\ 60$ei\93\15¥ÜTÙ><Óh Ñ\8dF£{ï¿\1e¥É\18ÿK\93:Kò*\99,\1f\8dGcüBÿHé\1f/\7f¤_\92ªhñÏe\92·£4\80ErõÈÁeR\96£Êq\ e.\93t\\8c\1aGz\f¶\1c\8fZÏ:\f¶Ê\86¬Ã`Ûj\94¹¶yEêæ%º\83J\8d\ 2R×ÁeÒ\ e9\a!´`uY
+ÛÉB³\f\ 6F¡\fLhàÒq>*\93JI\8f!6Ïi\14\8cu\98ìl\amë\8c\94\1f·£\ 2\9d¦ã\8cÌdD½z\f6«ð\95c\1d\ 6\vçå\9eu\18l]\8cjÏ:¼L²qE\1e×~=\ 6\vI0ÈX\87ÁÖå@g\8fÁ6Ù -;®do\861\16 c\1c¹6Åt0ÎA\1a¦\12Æ\18é1Ø4Ç@8Öa\1a¦\ 2ê:Öa\1a&ò\9d±¢n\93ó²à\89U20u\ 3'ú)ç ª«dP7´LË\94\142Öa´Å2(=ë0©;\86ß\[\87Éol\8cJ\16c0ÿtÑ\94\fÌ\98À\89öÊ9¨Æ(\19\8c -\831Æ\8a1\91\15å\8duX\8d1V\8c m³´!S\95\15cÊÊ\16kÉÀ\8c \[ÂyÆ9\88.3\8a Fz\f6¯©K\15ë1X\84/L3c\1d\ 6[Uä7c\1d\ 6\8b8äY1\ 6î¢ Ó\8c\81\19\138Ñ^9\a!T\8cQÒc°\ 5\ 5\9aÒX\87ÁÖ5\r\84±\ ec"aé{VÔÍÇ\98·KDa2\85\ 1©ëà2ij¸Ç8\aÑeJÑ×H\8fÁ\96--q\15ë1)T\f\ 4\8bBiÍËT4``
+\ 5\8ev$¸TI\8fi\8c¸SeiO,Ú1O1Þ\ 4\ 5\90T\aá1Ú\13\8ds\10\eÐ\18V\1aç \19Yh\ f$Ôc°X¸^,\eYÀ1:I\ 4PK\9e3\91K±TÐ'\7fɺҾVT\14÷Âì\12`\r\ 3×\92lãxk*°\82)'\90H\10ëÊ[\95²ECMù[b¥)Ö\ f\85\9aÐ\94\91k\1aYì¿eR\18ë0Úbw\81òÊ\8aà\8cܯ\82\199Á\91ÍR\12l¬Ãh[жåX\87Á64O\1cë0¦_ÊJ©d\8fÁf9¶.kë1Xl¼¹cÅ«iê¼Ê\80ì\11¯\ 6\ e3§N
+å\1c\84º¼ô\8dd¡9\82\8cz\\80
+\8d\1c¦X\81t\8f>$ÎA\1aÝ\1c?\e)B\e2=L£\9c\81 \r\Cy\9eq\ e\8aÐÆ\91"´Ny¢°½9\ 3\13\1a8\9e\9bÆI;4Ð\-g`í\ 2\a\9dÐ\9fr\ eB\19¬ôÜ\91"\14\13AWXÎÀ\84\ 6®¦ðm\9c\83d!%\90F\8aÐ\9c\12»8l\fLhà0ÅÐN9\aI(í~F\8aÐTÒu\ ex9\ 3\12ê "pC¾PÎA\15ª¤\bEnE\8bV¤00¡\81CB\80aSÎA\1aÓ1\8d\8d\92,4k%©f¡\ 2ThäX5ã\1c\84PHÉ\12#Eh-I³\be`B\ 3'ñ=SÒc\88ew\1a+b±Së¾\9610±\81\13å\94s\10B\91ø7\895\14¡¥¤\90¢+\ 3\13\1a8\91¢\9c\83"\14\ 3 ¤\bÅ&¤®Ê\18\98ÐÀµ9æ\8dq\ e\92PÚ~\8c\14¡8TÐ\9a\12M\19\98ÐÀ5\14X3å\1c\84дB\9c2\92öÐl,©\ 2o\9a\ 2H¦\83a\ f5\8e÷ÐØ\8e7Mã\1c¤þ(}6Òc°è#öO]z\f\16\1e\84«X;f\1d\ 6ÛÒIÍX\1e\9e\149\8cÆ?\ 1Ô\12ñ\ 5GéÀ¥ã\1a*\19é1Ä"É*\1d+bùÜ\11â\83\1cBLlà\10Góp@!ÎA\bŪ\83\ 2ü%\91¼M¦\95¤.²ÿ
+"Òc4\85\1f\v\f\ 5}ˬäm1d\1d\ 6\8b\9c·ñm\1d\ 6\8bô´ö¬Ã´M¦\98\9aÖ¯Ç`\91PÀZÕÊc°\18i/Ùc°p\åÛ:\8câ\ 6öJ\f\95Jö\18l\99\r´ò\18,Zù±ò\18,FÝëì1±-B±ë×áeR`ÎøÑð\18,b\8a·×c°ÐÊ÷+Î/$Q\fÎfä\9c\1fYq¶±\ e«ó\8d\15çǶâlc\1dVç\e+Î\ fm\83³\95õX\9do¬L\86Ø\16\87*, c\1dF[¤½p¯±\ eà \1c\9c\8dõ\18,úÁÂÕ¶\1e\83hD\1dë0XäNp¯µu\18,¬ÇB1Öa80å\89£¬Çäüz YÜ\9bK:\9fâh\86¹ÎÈ\16>\96\96åì)#çûÈâß\18Gc\1d&ßÓ6èX\87ÁâÄ\0kÃä{\8a÷\8eu\18\1eBÂáY\8fÉ÷<R*Ùcò.E{\93ì1XloÞ"\8fá\ 3¤VX&*Ùc°8\ fûÆ:\f¶*\87m\1d\ 6\8b9æµò\18,29øÞ$;L¾¯\ 6#)ÞE4°\93\13í\1f\8dÄf>t Æ0Ëb5Öar Õ\86\[\87\89åEdm\1d\ 6\8bÂ\fâ\8d±\ e\83mÙ c\1d\86\13pü\81¹ÊzL\ eä\8dÊX\871T\c´¶\1e\83\95Èm=\ 6\8bð\ 3÷\1aë09\81Ò\12ÇÒ\99\18zëñ\81ÿ\9b\16 oå\81¡àÙÊgqý\ 4\88QÀ)»t\9cAp5-\1e\15É>E\96d%^\ 6Qd\96D\ eÑ)\15À\9cA\88Dlò\9cAp\885\8dkg\10\ 3\8e!\r\1d\90L\aÁ¡2\9d[;\aÉQ\94ý¨\9elB%\aJÙR\18\98 \91\83HÔ\99ã\81\92já\ 1BM$u\9e3H#FÁÕÚ\19$\13ȳÊ9\b\ e[\12î#b\7f\ e\92 ä!åØ\ 4ôi\91\91\81\99\109T\81Pµ¢\ f\993HjRÆh\9cAt\87\15NåÂÐÎApX@T,\f\1c«RÈ¡WF\93\81©\129^ÑÆ\19\84*Ø~P\1e"!ÜÎ ©IÎ3Î ©I\13I9IúÝ9\1a´$\82¼\10\18A /\ 4¥\1c\ 4\87Í\a\19\7flöýõ£§Ï[8-¹¾å2Þ\18>¨\8bäzÊ\17Nøyòäº{½\98%ýmrÞ¯v³ÕnûÝõoûwR\9b7ÉÓç\88æ)É9£ú\1f\ 4\9de$èÉùÛn½\9bm¨\15\1d"@@ìô ÆdD¿á_ñ\97\17Ëõ¦\7f?\9bÒÏpdÚfáÓ×\9bþÃv¾zÃ\ 4n?\8aØb¾b\11¸~@_"vÛ-_wôëÓçØ"\82BðESUÐ\8cª$è\1c\9dæÜ{\16»øeÓÃÌ%÷\80¨\97µAÜf¶í\17w»yÏ=a¿ÃT\11jô\95þ¯mIÉ3
+\8f\19\ 6Ù\99T\fMúÞ\8f\1aêvjS7Ùô[v#\95lóhêöîõj&î¥\14%\ fCsR3Óñ\98k\87ÎB\81\8fm#}£ïÿÞ\7f Oq.Ƥ\ eÞ\9aö3¶\vÁ¸Móð£Z\8b-)/cs±\96$ä\böupj2\98j¨éê\1cüÐoÞq\7f^È_é\17\fmópS"\8e\0EÇzèßrèß«Ùn\17\16\ 5"·\80»5i\85y\81æ²&x= \ 2é8ݼøù\8aMÇ\91ÐFd¶y/ë4Ãíd^?\9cM\9f9\85PÄ$¥0¥kÄ\ 4?³%Tèbý|Ë?º\ 64räãà¼äp\94._þãÇ\97\97¿þBZa\eÐØõ\99öÜã3ÔºØtºÌÝ[Õõ\7fëõÿÉö\1f./\9e½ø\99tÂIGWÍ=,ºï§\18\q>Ò\98¡ó\9bá\0<ï7\938í\91\8eëÊÕÀ\8f a\93z×\93TÔ\9dÌϯgü\13\8amº\1evoå7ì-ºà\97Ý6n[é¨\ eAò¾VÝÿ{\1d\ad!{3¡\1d\ eÄE÷î\1eãpÄÂi¿ìd\1dà\1aG\83ÅÀî¢9É.\90\8e+q>\8ab{F£XF\14ÎÕ1\9aýÜïØ[\83Èß½îïváCó!¢y7\9dÀ\91Ä ¶ã¸ßwÓ)¶öl\17`Æ1¸Üßc÷k\81}[LE\ e¸\17ß1K÷L½¸[ìæë\ 5\9b\8b#aå\12\1fÌÍÛn¢úW1¯º\9f6\ fóu°É§\808ò\90u\9c\ 4ÿY\12(ÑÍ%\81W1\7fÃ\9c´Do\rkûͲ[Mx,PðFj\1cv·ùv{\17¶}\f)\9eMñ¦÷0\96}Z
+n{Èi>ÛD\968ð,ª\85Ã\95{Þ/×Ýf¾íW\9c $\18æö§»û¢_\ 4[Îð\ eÈ\87`$\9aCý/×\8b~ò\8euÏéØvÒ\ 1ÿÄ\bD\e\10\1döm8Ì!/\91ð¼\9fÏ8\91D©?ÆÀOtñeè¨8\8e_\96úÐÐËàûÔ÷§ÙûÙ"£i\87Ä/kC¦\96x· \fY\86\ 4ø˨{Tj´!\1d\ f7q2C\ e\Þ\8cË\ 5\1fõ¨Ä\18cûãÛî\9d\ 4wäÞULÊ{\99o\8fÙb\\92\96FÄ\93\19mú8áI¾{F\1fÒwz.\987³I·\vgKÌÙê\ 1Sv\f\ 5J»ÔçY\86#úpÚí\9d3¯°pf¼\1d¡Âi§\8b~M\86È\8aB\9d'æ¤G\aùT?F\9b\9af0!÷N\99/g\1d{qx¸\9aÿ\9b½\88:\9bîY§RûOû\896\r\8a\ 1H-\86ñí¢û\9d¼98Eþ¾\9cK~\81r}sú³ÑÇÂu"O½=\93ö\8eL?aÞÅlñ\9b\vÙÑ\ 2Ú\a}ìÛ?ú¼í6\12\1c°ÏkÔ[öÓ°ûãÎî+ļ£\9e\89NA1o/\15Ø;ÍüÔsU+Ã]¥\9ed\16\14Þy\ 2â\8a$Vm\8evsê\1f£Y{smï`r3\9f\8a\9b\10\vë\18\93\17óUp\13j3±Zwjý\8fô\877\b¼|pY5\9c|\87\a\8f£¡nÓqöð\8dEº\8f[upƸÙÌÃyʯ*3ë\9bYSØe£¯P\9eÜsVÈPí\94xÔYÈ\ 2¦óIÌ\19p\8d¦'\8c#3ã4?E\9bÚv\10úP¾ã\b`\ 6]Ì\96ýæ\ fú\91N\82ZºXvëu\fì¨\99§a½\9dFùý^¢1\aÅi\1c\81BÞ`\ 6]-B\ 5\17\15UMÝÎ\17óxÇ@WÀMÈàö;:-NSN¶Ïð q\7fÞ\85Ìá\13V!ÊÏCv÷ÿ`TÈ\1dÌ(ñ
+OHÜ·i\15bw·\8aSÏÕÜNë\9b½ÞÔUä\15\8fG÷\97\13/%\84m»ëy9Û¢Þ"I8"Ì×¾è\89\96áodHw_]Á\9bæϪ®H²ñÉêJ·\92\14\1eIH¬÷%=j¢|i\87Ê\9b%[ç/\9e_\85\81lâ!%\99¸5\8b»\94xñ\12õÿrÿÆ\9f!ÈÈØMß~Õ\14÷§û¹=ªÇ»~û\96Z\ en\19\83\19|§C7\ fy«sÿ1\b¶\1dÞóáú|hÑå\15G'\9cVôÜ\98¸\ 5\8bÐ\ekÚ÷×âÁ[D³ø\ f\a,×'£\ eË3Ç®ø&Ý\8a<G\v7\8d\15À\17ô\v^FÆ\99\97LúÕíüÍ\9d\9c\16\ 6ußË«§2Z~Ó¹é6|g\86©\9e6±¶\80ëîÕl"Gu<^VÙ=¯
+Ôjí\86ñó\85ò|\85±±ÞÑq´\19\b;¸\86\92yI&\92~Ñ\97 ê¡<\10¸~Ô$\9b\8b§q\ 2×Õ8tØñ\18ÓgN4î\87õ¥¯:î\1cìÜ\10½z²êåäíÏHÁ;¯¾û\v\r\ 2½CËâIã¨7ð\14\8d¿ôÅ&\
+ñ\bÚ\v\84#¾ÍF\\vp14\füY\8e<\fi\98NâÄ\8d>ý\99Ì·R\15MS¹Y;²ä\ ekrÏdÍÐ0éÃ\0Ú ä@\87+iýµ[Å\1dÔ\92QÛ4ü-¹+ÐãaH<Ð&\1fÞÎx)ã\8eÀfðQç½z\12:C\8c³r'j·[\14Í^}GND\1dÚv©¹¬*¼ã\88\95\9aän+µ¿AMçóW\9f¬)äÝñ\90~$0ê8ó£q\9d\16\88TxÈ!Û\17?\8f±©\VZ!:9\88lo¤x\88éh\91`½Á\8e\16^Øà\ f\a5\1aL7s»Ð·h9í?¬\16¸\17ã\85\ 39z\94 '\ e1\9fó\11ïX¤9ê§Á\ e\8aÛ¶xEsd°ÜO6n\\bö\ 3·W<½\99¯ <;\97\82º\86äc
+ÞÀ\987\9bþnÍ\9fÓk.<\ 6:õ\92\8c¦í×Ãñ^þÈv÷ëV\8a¦øK\11}\94±@ÑZ®/Q`µËîëó_\9e¾àw tu«\85òí®\9b¼#¿\ eª±·\9b\9e\1f6\r.L/æô.¦¿åÐ\8aѤg_\ f7<Ñp¼g°\0\89\95\80ë\8a\83\95ðÃl1\93
+\ 4½Ä\89Q|´þ 5°xc{;_\84\ 2Rê
+çÝm\98ù´°õvwÝm·\98Í2Å\91Êk±pò¶[½áQÆÍI\8e3÷C\9a,wØ\87&\1fFYì^.?q\ f,\92\9bÛ\eö\9fÏD>j\r\8c\99¢®&ïâ°;¦\ f_\97FA\81ô9K\ez¥8\\9b\87Aí¼\93)<\98i\ 3-±\ fÇܧ¿%É\83Ü'Z*K\1cOaÆ_ø\ eË\9b7(ÔâOdy¢Æg\ 1ÉÇbÏã¶|ú¸å;à¯ôlÊ\85RúÏ`\126¿ðÿ5\84ÿ\8b_hâ©7?\88Äó¾&Ç+]<õç'\9aWÏ.¾\7f\96à äoHx\93\1fúÉÝ\12E\98.ÖÉrÔnhn\9dÕôPtúä=ùío×\8fþùè?Ä!DCendstream
+endobj
+1112 0 obj<</Type/Page/Parent 1099 0 R/Contents 1113 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 259 0 R>>endobj
+1113 0 obj<</Filter/FlateDecode/Length 1600 >>stream
+x\ 1ÕYËvÔF\10Ýû+´t\16#ÔÝzõÒ\98\18X$8x\bÙ\8e5\ 2\ f\99\91\1cyÆ$\7f\9f[Õ¯\92\ f\ e\8f8>\ 4ÎññÕUU׫««å?\8eTVà¿Ê\1a\9d\99:ëvGE^à ýPôãõsz\92Õ¥ÅÏ]fl®<Øf\17G\ 2ÊkÁ ¸Ël\91·\82\13p\97)¥r-H\89Áb\8d°>-)1غ\9e)\96\18¬µy%4\9b\9aT\99
+"0·\8d\80ô
+\bÁBçÖ¿É\8b
+\fV7y#Y\81É$\93\97\92\15\18lÛ\90Il\ 3k\16\18¬%Û\12Ë¡/,ô\85Ð3 A\17zϹXGN@è\84í°'\92\12\83EL\8cd\ 5\ 6Û¨¹¬À»L\17%Å!j\96\18¬nÉ\97Ä
+\f¶¬æ²\ 2\83m\8aÙº\9c¸ÊÖ¨\13\9f8\abâ\ 2§T\85\ 2M¤\13l\r\17/§¸b\90\ 4=×j\92\8b\9c\80\88\82¢ºI¤Ä`\91ýR²\ 2S\ 4iW$ÙF\93ªÚr R*´G\\f\ 2C\14ÆÏX\81ÁV\1a\89s\9aXV`°¶Ä
+\89uËV5l\ 1é\96a$\96\r¬[&±\ 2Çe\13ë\96\r²ìX\15YªßÊ\14\9c6.X\ahQ\ 1}ëH\1c×o\90S\ 5G\9fµ8k\13\86=\86\ 3\1aY\18\8b%U\83\9f¡R\18\90¤Ë¿ç|¥DÒ \16\86\13ãÞd\90\ 4=\87-\8a\84FN@Xã*%\92¬´D·£°³R\a¢ÒÀá\15\95%N@RÚ¢e$Ò)m¨ê\82R\ 6I©ç`Z\91\95\91\13\10J5u©D:¥u\99vXÉ )õ\9c¦\87©\91\94\98lHmb\ 5v\8bÎdaDÀ`k*\17!+0X\98ß
+Ö\19\á\90\8aQ`\90\fö\1cv\ 2,\8a\1c¯¡KÎ\b×`É\80Ä\ 4ô%\998.I\awYKÇJâ\ 4\84\9d\86J(\91\12\83m©\16\12KÖ\18Û¦\râ@´&p¼|â\ 4\84N´Xåµ° m\ 1ÓRò}}8\10#\138TYã_Lrèðñt4\f\92\9cç¸9&N@2¦ÆÉ\99HN\93AéÇ\1dà@Rê¹\96\82\90¸§Ë£'g\16GL¶|\87^\87\19\0§fSfË5\ f'xÜ\1d/W\97Û>\eße§ã°ï\87ýÍ\ fË\ fwç\97é}öä¬B]\92\9e\85W´Ð¤èøôju½ï'\92¢Ôc\ 5¨]\1f#I9=Ã^\ eO.V»Ë\15¿\87ã¥\fOWÃ\9a\9ei\9cUö²ãþÊi¤\99À6þéé˳\v~µÉÛ¢õ\ f»í&\18ýä¬\8c&¢\95µ¦\81\ 6\ 1\819´ûÙ\1e\1dÖx»\19ÖãGö¶,s«\8cW¨\8b¢àUp,\a\e/úévÓõÞöÆXÿîùªûÝ¿«L\19\14Ð\93&·µ\7f\90ÿ÷ÿ\94jhQ\99#lô*[è\1aÛö\9f\92dï&éÅ«·ËW¤¬¬ó¦¦Á\96\92yÒuý\rÇ
+\eÓ\16!\86\9fÎèÍx\98|°\10ý\98¾n\s\ 4Ñ)R°n7\\11¨\92\94ÒÓ_]\9a˼°>Í\ f\15B\9c\ 2.P±R4\1cB\9eS¡ \86ç\85òrØOãúÐí7ã@Â\95¯\8a\87²é\9bõxg\16\8d¬s\9bë¹ù)\9aiÏÝ\93ÎýHþá"aâöº¡=\9b\8fÓ{_\12QÇ7[ýõ\82ÁOU(ªé¸¥ÉU\97+\1a\Â^½Ç·ThÊ\86òEh>ö\97ì\19ºOQ»bÿz\ 3¿^"º\84¶w§ú0Ìr\ 2¿Ñ§î\96·)&\86ºzD\87b\bâ\ eKÇEÝ~¾\11!\ e\{é´xÝ_\8fÓ~3påUÈOìÐO\ fïÙG\1a¾Â\91\11×\7fü_\94æóB\9c>ÖÈ:\85kÿ\9b\8eâ\\99u\14\98\7f§£<ï\87~Zm)_\ 6÷ð:ì¼Íð\8e\e\b9Ü~'MÒ'gÑØÙ>\83\89fÞ&\9fõ\97\a.5º
+5~çdÛþ¶ßºbÃ\86ÂäÄÇáã×Ø|Åû\9d*çNáèê§Á§
+#ep«\9f¦qrnávì§\99ù\1a\8f\8d\94VTP\vLÜhå±É#Qwæ¶\93ý~Õ]ù¾\80!%Í\12\9f8¾x¸hò:\ egÓa\18¼,\86jÛ\84\ 1çz\1aã\84\83ËWå§ÁG\88Bp\9c¦ê¹ãõ<\99ç«}wÕsÖðá+̦\8f`á\17-áÝ\10#(º \1dm\9f\eAµk\8eâ\9eð|\1a\ f×Ü]0kâ\92áFÐÝêú:d½Ì\8d
+3x\1aXq«¨üÑþE&?ÄKJk.[ÕØ/pÕ5Ráê9\8e¸Õåf»ÙÿEjp¿níwÒ9\11\1d|Þ «ÄÉ\86»«¬Ñ0\7fÅKÕ\8bó7¿qæÒ@ö\10Q~\18\1dÞ\9d\ 5>¶ÍZL\98¸¢\17\17§|\ 3¢\8bJ¼¦¾\196\7f\92gZçu¸ã>\8cYÿNKpªnç\a\1c¾kÎÛdz\9f_rjp¥þ~*,øî½À\87\1cÿg\13þ\8d?;´þNߢôZ\83¿¯ÐGmÜI/N~zz\92\9dOã\87¾ÛgÏÆî°Ã\87\80U¸¥\19\c,õ\9f\86¾~¬\8fo7\94½\1f\97G¿\1cý\rLÒIfendstream
+endobj
+1114 0 obj<</Type/Page/Parent 1099 0 R/Contents 1115 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1115 0 obj<</Filter/FlateDecode/Length 159 >>stream
x\ 1\85\8eA\ f\820\f\85ïû\15ï¨\ag;æ\98G\88z3Ѹ?@ÆH$\ 1"Áÿo\11N^LÓ¤é{ïk_\8aAR\8cÜ s\88\9d"MpÙA[X\9fËl¤Ç\84f\11\fió+\94Aí/G\18Bh\84år\8fPC8$\9b¸y\14ײÀm\1cÚ\14'\9c\86øîR?UÓsè·¡ýFÙ.Ñ]Æ\82\ fõ\9a ©ê\16\8b\aójqÖéùÀ?®õ¤½·ò\90xyÆ\9c\83º«\ f\95ã;Òendstream
endobj
-1388 0 obj<</Type/Page/Parent 1369 0 R/Contents 1389 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F6 9 0 R/F7 10 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 328 0 R>>endobj
-1389 0 obj<</Filter/FlateDecode/Length 2703 >>stream
-x\ 1u\99ËrÛH\12E÷ú\8a
-oF\1daC\ 4øöfF¶ÚnE[\8f¶èÐÆ\e\10\84$X$À\ 1@Ëúû9\99E \92\92':Âöå|gUV¡ÿ{\14»\ 1ÿÅn\9a¸áÄe\9b£A4à\97þ\8f¯\9f\8fâx\18MÜx>\89\ 6nã\92x\1aÍöhínd½\eÏ\12~Û¸é$\1aíAO\reÁÆÅã8\1aº±"ádåh2Rn4\8e\92=\10ÊÀ\8d\9bÏ¢Ør#Y:\1e¨¹\89xâ\81ª\f\10Wæ"§\v\853\10_bñ)\90\16Ã&óÞ\86\88Z,q\f\88ÃÈ\1a\f;\9bFsÃÎfÑØ\8d\86Sò'f\87B*RÅ\ 6Ãjj\fk°\98\8d£©\955XÌ\ eÄå^³7\9b\8cÈ1$ñ\90
-E]<\1d\86%ÛÄ\13X\83EñXêÔ³^q\1cc\rr W¤\8a\r\16³\89\98\r¬Á°\93\99\98\r¬Ábv&Ñö¬\9a\1dÒ
-ÚI\89\98÷ÈÇ\130¢$adY\83aÇR\1f#k0\9d\f(W`-\86\1d\r\b(°Þ©ÙH[1\1eÌ©ñP\91ÏEÀâT"\8a\ 3k0ìDv\8fa\r\86¥u\ f4\e\8cS\ 3ÙVAÖbqy(.÷v½ËÓØ·c2!ÉCE>\8f\ 1cv\94H¦\ 2k°¸<;d\r\86Å\ ef\83¬Á8\15KÇ\ 5Ö;5\9eùf\1dL$S\8a|\1e\ 3Fñp"\99
-¬Á°ã!\rbX\83Å©Ñ¡f\83q*Q\97{Í\16K\1ec 7°\ 6Ãr\8cY¯,\86\9d\8f\ f¼òáê\19\87S>\E&Ü\8e¥;IF`\rF\96F`\1f\ 4Ö`X̲\ f\ 2k0Nq\88S¡\9eµXÂ\1dI\85zÖ»LÏêöó.+2.w¬w1°\ 6K\rb1\eX\83\85\9d\8bYÃ\ 6,.O$Ü\9eµX\\9eÉ. ¬Á°Ì§\ 3Y\837n\18k3÷²\16Ã\8euï\ 6Ö`XN^z.°\ 6oÜh0\94ÎèY\8ba\87ñ\81ì\¦¡\18\97Q\1as\16uÈïÎ\80\85\9dKuug\ 3\86å\0!Í\815ا\99d\ 4\96´w\98TqºR\84\9e¥\15 \ac=2üJ\ 5bÕ@Ô\12%{¤'-\865zÔa\83a§¢?ÈjÃ%óÄ\1f Ã!\7f{¤¢\ 6{ÅSË¢¸Ã°h²²^±n\14H¯H\91Qܱ\939\85H\ 2k°(\96N6¬ÁÒ« ñ\ 4Ö\9b\9dø\v\94\9fÇ\89"5«óÙc\14s\87\1as¤ÈZa½(=§Má=Vd<îXΡ¹K\ 2k0>\r\ 6âSÏzÅC\19.X¥ê\ 4«Èû\14°$JÊcX\83a\192\a²\ 6K<²õ\8c¬Áâ\94l®Àz§\18Lþâ¢N(2Nu¬w"°\ 6c\96}\88âÀ\1a\f;\7f¡Ù`\9f©\81\91\95Ìu\18\96±F@½fï2W9½\12ù<*2.w¬w1°\ 6÷.\aÖ»ÜÉz\17\ 3kpïrÏî]ÞË&\9cäÔ¯g½Ë\1a\15f\89\84\r£È»\1c0,3\8fh\ 3k0,{\82,\aÖ` HwA`\r\86å:GÛ\ 4Ö`\ 2âl´\9aÕåx&ã\1fQî£sÔ\vò.\a\f;\9ep\82\19Ö`XúolY\83%\8fr-\r²\16Ã2öy+õvõÀ\8e§ò:B1#\15Å\8aÔ)\83a)\ 1\8a\ 3k0,G]lY\83%\17R\83 ëÍN\ 6ûÓQ¦F¬HÍ\ e\ 3F1=\84hÏê©\e\8f¦Ú¬3¹.y \92>Å*.ÑÈm)Vä£ \18\96êP\80À\1a\fK\94SÃz£Ì3}"\ e%\ f
-D/K;\88 \97Y\ 4{Òb1*ï\19Ã\1a,Få²`X\83ayÇ\90à Ù`\12ÌÎ Ø\9eµ\18\96³ØÚµX.\ f2/\83¬Å°\94Îjö9æ\9d¤\1dÃq\v©¨/\0ÅÕ³\8fF\1c9\ 5\9aþ\0 &\9e\93¦À\ 5(I\1aS\99À\ 5()\92\eTà\ 2$ÈD|ê9\ 3áX\18\aNc`Üù' ¸© ¸ÙqêWà\ 2ìÜ\f\9cºÙÉ©_\81\vP*%\97Ð\9e3\10Nßg\81\v\10\ e§§ANCàÉâï³\12\82\82\10BÇ©Ï\81\v\90\10¸aÆANU\8e»Ç ÜA\14x\95=D\8c\87\ 6\9fOd¡r\ 1\8aJ9¹\ 2\aL<\84Ó×Tà\ 2\84\9bË\87\85À\ 5è36\ e\9cdl\ fáôÑÓË\19\bGÔ{ãâ§\81\92MÙþA.@¸¹ìÃÀ\ 5Ènà\rÉ÷¡.v\ 3å"-c§ç4\9d\1c·þd\9d`N\81¦\8c\87À\1e\12:\9bS¾\14°P¹\0%-ú\91©ãô\18"bÙ^¼ý\86\84Á¿E* \84¸²3x:Ê@8\7fà\ 2\14Gdã\ 5.@r¢£ ç\f\84ãgÆ`gÏ@¸\89\ eÁ\8eû°8:ù\84\8d\81[ÜñÍn2\9d¹ÅJ?ÕñKv|ºlÚ:ÍÚ?\16?X7Á[¿î\1dÊ\13V\1e\7fI\9bÖ}Û®Ò6÷k8Õtͱ{ï\16\ f;wº»gzÒ¢ïG³÷£±ûx¶\90\ 1\9dÈê\81{§W\1eô,\1e\8aÆ-«êÑñwê²j½Î³¶¨JWݹ¿®n\17Wü¼Zå+×Vî&Ý,S·ª²Ý&/ÛÔ/û\99×®}ÈÝs\9eÖMäÎ][?Ëâ¼lvu\ e\95¶.]¯÷võÞ\82Ý\14*ÛÕ5zÞºå®uMµÉÛb\937ªL\9dY§õ=Ê\7fTKÑ\82Geî¶yÝà\\ 6ܤ\ 5N\14eD¼¹ÛT$¤Î3\14:\jö!´Ä÷Âtç¿*Yæî®Ú\95+\87\97\ fm»}\7fròôô\145\12iTÕ÷'XU\8fÞ\9cٰ߸mz\9fGîz\9d§Mî\9a\1c\r;\ 6þW/\fþÈëúù?½Êèw%è\9còI%üUA\a\14d\86Ôãß>É\9f/¿¹Ïy\99×éÚ]ï\96ë"s_
-bÆ\87ïÇ\9f¯¿|ÿ£\ f>\89Ü)õÜ>K%)Ð\v§\10U1L\15e¶ÞI\89\9f\8aöA\83õ\85nª]\9dåÁ\13RÚë\94\ 2ô¹«Êwë\82â¤Ú¯tWWe\93Ñ»æNó¹·Û\9cÜo×Qû«\93èúñãCNñÞ:Í\99¸|ò\89[Dßýr\bHצËu.q}¬Ê\96\8ak\89\ föIçÁyÔç«(\9b\96FÔ\f\8bf>\91÷\8eÆ\91û«z\92¶=÷«\JE\179=uszñáôõz$¾æ)ÛBz\8fdH?¼ì4æjä>ì\8aõª(ïuå\87¢LëÂ/|g\12Ž÷1\ eºb³ê6¥\91\9b6ß¾¨[\1c\8d"÷±ÎÙøª±Ù,©ryWÜïjß<wÅ:ïz¬K\ 3g\ fú%\9cg\8aº\17p²R\8b~\98ècײr\9bÖ\eÿ{wü\1c:<\89ÜM\9bÖm\17\1a\8e°\8bÈZÉ?^9=Å<çÂ\9a®î\ 5\1e8\ 48]~¦ÅÚ׳ôÞ5yÍ\ e\16\15\87\16g^\aÑ\96rF\91Ò¾aweñËeë\82^xezþJì®®6\1cvgW7oÝíÝí=\7f\16åü\97þu¹Ð¿\92Ç·îêæ$yëò6\8b¢È(?t\8aÿýànå\8c;¿ã\1c©Æ\9dUå¿Zw[Õ\8fÿÖ l£Ñ\10ç\9bm]ýd»-ëê©\910\8aÒéé «\ f\17ÓeWäâg\91?I»w\12/bäUN\9fuÚ\9aÝVúç@«iµDZíº®ØA\e\ e̦Zïä WO\ f\96Ñg½Î4««¦qÍnYæ~·\1d,¥¹nòVK²Û\92ÙÛóË\e\ eÅ®\8c\ak¥oÂÚÞ\ 29@îêëß\9f¿^}»~í\r\rô\7fÅή.NÏ/_%\85~ùTÕ\99dXÓ+Û\9b3ËïX¶\96¶Ø\81o´ÊEúh\ 4ØÜ«J\ 6\r{ü·\12RþË\8a½\98.+¦\18\ 5JW\99Ìf\86&Ém^ou^\87Tõb·n\8b-Û\8f\19\96×wi¶_hËO\9d®¶ë*{Ôså\90A\85v\9dÌÑÊ/zÝlTð\9f]\91=r^Hõn´z¡¨'ûߥSïë\8aÊõÕ¸ß\15+\9d\18Öê(ÂêYÑd»FÆëË\1añq1rß\98D~Þ¸7_ó\8ddæ´,\99°Y.3³N\99ò¯÷67¸ß\8aª?¹»y.³\17Ò¦l<²zai¼\17}À[\17¯+wyµp;¼ÛTþVâï\13ß\8fcf&\e²¸ûÈ°¿¸\91Ó`ÅÖ¤æ\19;úÕ±>\8aèáK"a\ 2tÛÇ]ÕÌhM\89M\19¦¿¤å\ 5óANÆË\85»N\9b橪WîÏ2«\9f·z\85¢»tà\8aôɧÙ~ܽ\13=úi\98\81gï\83#¾\ 3Ìf#n\8d\10z\9fûsqôÏÑÿ\0w²\0Îendstream
-endobj
-1390 0 obj<</Type/Page/Parent 1369 0 R/Contents 1391 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 380 0 R>>endobj
-1391 0 obj<</Filter/FlateDecode/Length 3554 >>stream
-x\ 1\8d\9a[o\e×\15\85ßý+ÎSÑ>\98æýR (d;i]Ä\97ÚJÓ·\82"Ç\12c^\94á0¶þ}¿µ\ fg΢\94\16A\ 17Kkö}\9f½Ï\8cô˳Aêó¿A\9a\rÓh\9aV»gý^\9f\9ftÿ|üÛ³ù¼7IÓù´×O»4\18O{Ã3Ú¦Ogr6ìÍE\8e&"\ 3\89t\f;\1dõ\ 6Î\1a\86]\f/Yû4\1cõ{\v\93Í>M\16½©Ìög\98\9f\ 6
-³\86e¶ÏSÆ\1aFq\7f~Éöå\ 5A\8eQ<\1a+\9c\0Òkp\97Æ\13e¥ã\fîÒb\8e¸q¡f4BÙ\8e\18äk\0é4¸K³\85\8cw\9cAÂ\18Ne°#\1dÃ\12¼\8b:\86\9d\rz3\975,v¡Ü\16Í\86\95 \81\12Ô±\8eaÇ\ 3ÚÂXðh"\81EÖ0Ù\1dF\9a:6×tH辶$\14³\81¢¦\86aç\13\99íØ,Ú\9fæ.äQÈ@\12\rr²\18¡/ëí§\8cZ½-\86\9d\ epØXðèX8k\98`Gjà"ë\18v>è\8d\8cÍNÍûÑg\ 3º{\9c&\81Â)Ã\98¥ZSg\rË©Ù%kXõéSù¢Ù1,]C@\9d]Ç°\8bÉ¥¬aUO\87¯È:ÖÉÑy5Ö0ìd¦Tuv\1dÃb\87TulN\15\aEÇg0RÃM\ 2åT\15¬TMd¶°\86\95ª\89Ì\16Ö0á\ ee¡°Ùìd\9cÛq8 ·&\81¬a\143Rpª°\86å\94N\81±\861;P×\166\9b%]1P\ac\ eý$P\985\8cb~NÛ\14Ö°\9c\8a~,¬aXÒ\8bÙÂ\1a\16\e¹0¶`\ff\92å\8eÍ.\93¾8`Ì):.PÎTÁrjtÉ\1a\86%3T¾È\1aV\81\86\17¬cX²O2:Ùì\14ùÒ \1föµ &\81ä\94c±Q c\v\96â0[XðSmGÓl\98Vf\b\91\8cNÖ±\ eI$£°\86uH4ÆLÖ0,\15rÍcí\98 ³ºÛ1\19(Z\1a\9eàÏ\1c)å\f\ 4\10g\90½¥\15S8\83Ô\86$áN'è\18v0Sm
-k\18v2º\945\f»\88¡[d\r\93`Ú\8cºv¬c\15G\9bÍXÃ*N\9cË"k\18\96\e\86Gä\98\ 4\ fÇ\17\9a\1dÃ2XÚ|+\8d\8e¹\e\fF\17>G/\8eù·l¶\8c$\9a7]ÇÆf+l\16\9d\8dó8\88Í6\ e$ÑL²£âàÑG\934\ e\14z\r«\ 4\9a}Æ\1a\86å\18\8e\9d5L¢HàÔXÇ*\81&IÑìX%¸ôÊ1,Sgæ²\86s Ü«\1cîX·\ 6\¦\1fq*P\84k\18v¬Ck¬á\9c\f\14\17Y\92Ñâ\9c\f\9c*l̨\8ca\17\8bîÙ°k\98\80F\9a\82EÖ1,\1dç^å\80âÒ\8câ\81Úq\1c(ׯ`ØáDY.¬aXî\1eCg\rÃ\8e5½MÖ0,\87bá¬a±\9a\85&k\98\80è\f\97u¬dh\ 3\15Ù\98Qc¦¸\8eÁl*É\0\8aÖà.Í\17êä\8e3È\8cÒÜ+\9cA\9cåBHö;AÇ°\13Ýê\8d5\f»\18_ÈæÚ°éò\8bM\9c\8f@Q\e.¨jÙq´ba\rKq_E/¬aåHwÊÂ:\86E\13\99èd\1dÃÎ5¢
-\e.ëö\14ã \̨¸Ü±á¢±\86[\97\8d\r\97[Ùìba\1d·.\e\e!t²\8c·EÜð¦I^e\97çC²\89Y^\b&l6¡pÙ0lÜÅ\v\9bE£\1d!\aº«\8e\ 2\85¨aØ\91^ò\8c5\8cÇ\\ eôö«F/>Ñ\1c1¹èA\ 6Ê>\15,Å3|5Ö0,w~\9c*²\861;Ðe§°9\1eæT4\L³Q 0kXf\87JTa\rÃrÑÃla\rË©ù\ 5\9bÍÆe\1er¨·¤|\95ÏÑ\16\fËúÁãx6Xð¹I:6+æv\e¥åÿ\11\r$Ñ\18\ 5£~~%\8e³\9f\818\83çQP¸\18\ 5\\9cýÂ\19Ä\e²KeÂBøj\18\96\81OU\vkX\91èt\176"\19\12^n\bÝ´2
-ÅÜ\13Z\8c(\9dÕwÖ°Ì\96gCְ̪ñM³aµË\98aZXÇ:uz\8b0Ö0,\eldl\ e\88<G«E\87\ f\ 3å\80Ôá\19ãT\¿\8c5\f;\1fÑ\88Æ\1aÆ,s\v³\9dfÇ°qo(lv
-OóeF\97
-ù\9dçÄ`P0f\99ó\vg\rÃ\8e44MÖ0,·á\vYðT\99à\8b]øÌÛ\85{å\186׺\93u\f;Óeß4\a$\a:\1e´ß4\12\92\a\9fA\\1aÌåR<©ú0Oñ\81A\13¯ÃÌ.ú-P\14Ï°Du\b\8c5¬Lh\8a\18k\18\7fûzý(¬ceB/6Æ\1a\86å»\82Ûeµ¢\8a\83\12\a(>nd$\973\19õÅ'v7\92\81r3\16\fË\97ERQXð¹ù
-k\18\96·
-òVXÃxÌé"\9e\8eu\f;ÕeÅXðl\÷9\ 2Ê\9feÚ\802*\ 1u,Kg\8ekº4\ 6kX\ 1éºh¬aÌR ¡±\8ea¹)N\9c5\fË;ìÂYÃ
-H»¯ØuÌ\9c\8b±ÛÍár\15És~&³\81" Þ\ 3[L@±Â\8d5¬\80Æ
-·\93u\f\e«ÉXð,\94\99Ë\1a\86\8d\15l²\86a\99<\84[ì\1a&\"\18\18ë\18v¤½Vd\1dò®(o§Ù1o\89ÜÐÚÜ(W\8ea¹\86»]Z\1d'ùô\97\8f½îÝ\19I4×`r~Á\1c\f¨Å P®AÁÔ\80\9d\83ÕÂ\1a\86eç`µ°\86U\ 3M\9dÂ:V\rôùÀXðÌÙ©³\86agú¤d²\86É#µ&\8f\9dW\8ea©¦Ûu\fKâ<"ÇùM\9dúu\9aõæÞbÕ`|áUN3\15{\93O\r(\ e\14å\8bZóyRû\v÷IT\0q\ 6Éq\fÀB:V}ôº`¬aX\ 6\ 4±v\8a\1d\93E^!ÉqÇ:\86å:M\16\vkXõ\19\hv\f˯4Ü®cÕ'\9a³Ó\9cóÄÞ\8a\91Àå\14³\81¢\1d\r+Ü(Oa\rÃ2Z/d\r+ ]§\8afÇ°|ÚÂåN³c\æË\1cÕëXÇ9 \8aPX\ 2l-Á²è]³cXî;\9cÔ"kX\r§\13\Ø\9cª\18å\84\9b§e |rcz¶l®Wa\r+\91Úo\83Â\1a\86å³$\9dQXä*'£c\1dÃrkàl\16Ö°\8a0W"\vk\18\96)æ^9\86Í\93¶\93\8dd0qò5Am\13 tMËÅÛjá
-TËèèu\¨äøå·x©\fPT¶\è(\\81J\9ez´p\ 5\12B8ßq\ 6sð\93"\17®LÏoç¼\9dñ;*\81p¥@URî\16®@8\16Àȸ\ 21Ç\1d\86_;¶:\rÊ\95\ 5û±ãÂ\15NZ\9cOÞâøE\8e@v¥\83\8a<>ëv\\81pq½*r\ 5b\8e¯Sú\18\7fÖi\10\8exø\ 2Ýq\ 5ÂÑ\10ú\ 5@+W ç\8aѬ_,\9c9\83p\ÈørÝr\11\1e·þX\95\11^\80\12^ËE<\85+°\r¯p\11ÞY.ÇÓq\ 6Ûð
-\17áµr|¹Õ×\ f\1c\93/Ã\ 2\15\9e.l\1dg\10\8e\r7/\1c½©·\90|L8º¼c Dx\ 5\12B\fäÂ\15\b\17ß\0\vW \¼I\17®@Â\8b¯Ê\1dgP¡_øb\10.>\93\16¹\ 2U=}¼é¸\97×Ï^|Ï°\1a¤ëÏú»\84é|\96®×ñ7 ýt½ú#\1f²{é;©\ fëÓªÙ\1cö\7fºþùY?=§?\86<\b?\84ßÝ\1fêf¹oÒ»CS\1dÓÕÍáÔ¤OÕêTo\9a\87'\12£^º¾«Òqws¿<\1e¿®Ó«Ãn·Ü¯õàs|è\94¿yÃ\93\ f÷U:|N\9bý±Yn·ËÖ\aþ\80¢{nÚK\7f?|MÍ\ 1MûÏ\9bÛS]¥OËÝÍ2-\8fi\99Þ]\8fÓ\87z³[Ö\ féõa·Üìõ\1c!m·U-£\97º\bøC]ÕÕ/§ÍqÓTécµ\oö·\8fÂà/3zéårõå¶>\9c²ï\96\16jÓë\9cA85\ 4\9c]úM\ f.DÇ\88Ö\15\91"÷v¹ºÛì«t]\9f\8eMºZ0Ö\10Ô~\9dþqØìõÈ«í¦ÒÏ\b_V²þÈå\85Ö\89\1cÚí\ e{¢;Ül«]Öò]]\1fêã\93àHé§\87cSíÒ\87Ãv³ÚPUÙDôóf[=}~ÖK?Ý-\9btÀ\85:ÝUÛû´ZîÓ\9bt[5\7f}¢}Þ{T\88ôùP§\9f6ûõáë1-¾½xûÝÓ\0\16\b½\7f{õæÝ\7f^½\7fwýñý\ f½æ[\93þÜ\89½»~¬ô\ f9å¡Êk\8c³ç~¹Z5¹GTÉÓý#\ 5´\a}G\a} £¶\ fç\ 2v½³¶\_ªÿ}-Äýþq\v=·\92±\rÎIýå´Ün>G\r~ÃC*ªºï«æë¡þò8Ù|3¥ð\94"wßME8ÿ+ا²4\8d2µ>PÉcÕ$R´<kzùúU<ÿÜC§°vð®^\7fB4\ eÜ®ÚÝ<=l,'M\978Ùí)\89\83WWëtOI\96·4\9ezãuu³YÆðñ\14qûø\9dò\1f«õß\97Í£FdÿÅ¡¸§¥³ßO\1e y\9fª\86°\1f\ e§:½¨\9aÕ\8b/õͤ·bÐ<yXGL\a·\8a\82¬\ e»ûSC\v-ó©\8d6´úrId¼U\1cëÐ}¬ê_y\98,\9fî\9fh¦cõ¤rôuÓÜiv®âØ?UJ b
-\aãµáüXm4\14ÿomøÕu¯\9b1ôO9^áAVÅMý\91¯ìÛÎ\ e\ 3£=ÓÃ>\7fé\96GÓãáÁ\97yõùCÚ0Ãîøç¦j\94¶æ\ e«Çó\12I\7fá?\95 Üs\97[\825ñþ^\8ba¹M*\8c6Ào.
->9i\99U·¢5]?u\ e\9e\8fÏ1ç7¢Sd\9e@¤IÉÕmµ_/\1fE\rEØï\96;\8bãa{\927yvÜk\eý¸ß|{ñÃf\7fú\968¤ÛXuÖ
-\88\93\83\10¯\8b8Ëëtä (ß\8c¡§Î\12BTùR\13-«3{S3K\15äçÓ>6w\9eàwyQ®«ûíá!qòX\ 51Úù\89\ 2\13ìDORð(Ô.5\97Vé}s°+Û!êraºP»\10u¼\8fUµc\1cIÙ¹:On\1aä\88óÂð]mqë°\8f6º\18>¼í¥\1fß½ùwúPÕ»ÍQ\ f¥\97\9bó¶l\e\916f\8bÊ\14ªt\aH?l\8eM(»¨5ß\ezé_\9bê«R¨Õ·¢\1do\ 5ÂÄ}gBEÒ\8f5\83QÞE¾Þ,·\87ÛÇÍ®7Ònûü\8aú¤}Z¤p¹\1d°Ç»e]=J>â4JëV\88\1e¾î«úx·\89¡áÃ\91gi\85Ëgë´ÞÔÕª9p\15²\10\9eZQ9\ fëÍç\a\85\96íünYʤCV/£íò\81Rvh6\1a¬^\9fÇÐ*\8fÊÝòø\85Y_sv\90ÉUõÖâ×z¿O_x¹l\9azsÃØM»åý=ÎÇ\ 1¹¨,ù§ô1$\14Ü\87«·±aÖ´A\16]'\14¤\15\97ª\9a\eç\ 3\9aöì¡uZ\9e\88bßlVÝlyñ½>\98èê¬ë\7f\7fÎÛâ<®Å\9f®Þ¾¼Òmég\92ÍÜ[\9dvHvrÏõ®§Ç\9fÏú\v]£¯n0N¾äíX\7f\1d6\1fó\97Â\10#ýä»ëgÿ|ö_´\93\ 1Çendstream
-endobj
-1392 0 obj<</Type/Page/Parent 1369 0 R/Contents 1393 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 432 0 R>>endobj
-1393 0 obj<</Filter/FlateDecode/Length 2332 >>stream
-x\ 1}YËrÛÆ\12Ýë+fw\93\85`¼\1fKù!GUVì\98t\9c-\ 4B\12\12\12À\ 5@KÊ×ç\9c\1e\12Ó \95TªRut¦ß==\rúÿ\17\81ññ_`²ÐD©©v\17¾çã/óÿ¾~¼(bÏ7i\9eâÿ;\13\84©\97\1dÐÖ¬.4\ 6\e'^¡Y\85Áf\81\17)Ö*ÎB/§â8¥¨ Q¬ðÎ\84AìÅ\8aµ¢Iá¥\14\r
-\92\82DTa°yì%\9aU\18l\91À¼\92U\18f£\8cNÍ\9aã\82\87áY\f³yÆh\ 4Ъ\82;\ 3-©â\14d¤\81\17(Rc:$é\9eÕjló\80`f\96y9b°q6ûG\974\ 6\9bf\v§4\ 6\9b\aL¢Ó¬ðÎD°\83&\98Yëd\14y¡\94®`&\ 4ѬÍR\88&b\96
-\9cI\ 5H\96\1cD¬h&äs&V\9f\7f\ 4\99\ 4$\ 5QRȤ\88lÉQ\92ÀXäÈÜ\97Â\ 4\ 1ýJ\ 4\91Ô\98z#x«X\85Áæ9t8ÖZEæl ÌQ"\88\8a%Ð$aj\10h\8eJX@NAh\rRÚ\94\93ÎÝØW\81&\82\1c\19²X\90DrR\93\b"©1Ø4\82mÅ*ÌfIhu\96Õ\18,\92¯5kÌf\89\99C'«0Ø"\ص\89\90;\8aD$L\84\0I\84\83s83y\bç \19 ªÈ¯c\15\86Q?\(Ö\18l\90c09Y\8dÁF9\1d\9e5k\f6å\8dV¬Â`Ñs\vY\85q3Ðö\9aµ\rã\a¶a"öF"h.m\8cÖ\90Q*\rn\91#³Ø6\85\\8aXб\98uçåR¬Âp\18ö
-ŊKq\1a؆
-2dÑ"Q¬0\14'l;Å*\fV.\87câ\987\ 6$\86\ f\14\v\12Å
-Óc¾\e\8aU\98åá]w¬U\1c%\87[Ç\97!\16äò\14²\ 3iUHA$¥\13c?\97$bÒGÆ\ 2r
-BP.\96#5\ 6\8bÚ \18Ñ3Û\8cd\8c\83DUSc\91#óЦ!ñ!\19 rdʱG£l\96H\10I\8dÁâ\8eE\9aU\189ÂT\83âYVc°¸ÍZ³Æ`ñ¬\ 6ZVa\ e÷lÁJö£äøàóͳȺì0\FG,X\85é2_:'«1X\9bF±CÍ\1a\83E\1eµf\8d\19\10\1fX§YÊ\1eÅv\95\90:[@½
-Âa¿`\9eä¤\84£0ب@«9Öf"<¬\19Ö_A\14µ$&»t\7f\18SR\10Ië\90o\1fHx\0NÀÁ¡#\84I\bb÷\9aI\8d\99_qȱ
-#\v!g\9e\93Õ\18l\1eÁ5Å*\f\16î/d\15FK óÑl³]\8d9ó\96v5\ 6\8bpuD\92§°°ë@\80q\19Ã8Ñ\9cÄ0ÓO¾E\8eÄ\9b&/!jæcT\13\91\f\14F¢ÐÑ¡f\15F°\bGËZ\97ÐaR:\f\1f\90\82D±ÂP\8c¿C±c\15¶\8aSÅÒÐ\11\83Å"ZhVa°Q\8aÛá4k\fV\96NÅ*\f\169F\1ag¯4F\ 5dOs¬\r\17»¬Ì \b%0N$á*Ì\86cË*Va\98õÙÉ\8eÕ\98\ 1q`;Ö\9aE\7fË \86AD+ÈfÙaf\99\v\92b\15\ 6\8buc!«03%õ\9b5[³Áa¹\8a8\13BAÖ¬Ã4+=åX\85¡\18åB1gV\14\aÅq1ã°¶H\14Ë=\9eÙ\94¯\81b\15f\1a³\ 5«1Xy$\9c¬Æ`áE®4[§¤\1d\10\8fT\80_<±Â`\13\8eU\98IÎP(%«0sÁå˱\1aÓef[±
-\83Å£\80TÍv\8b\82ªð1hwjÎ\12\8b\98G\19\9cAbW¤\82;\8b\ 5ä\14\84¿H8´ÊÉc\ 1\8e\18,\16\17DãX\85Áb\8c\ 6\9aUØƪÍ2Ö#f¬|ò\9cf\8dÁ¢\19µf[\9eø°ÔÉÆ\17\b\92xx5\ 2\8c\eû\15Ë+`\91Ä#ß\f3\8b¼\1cÏ
-«0âÁþ·\90U\18>á\8d\83Çb\87²6ÅØ\97å+\96e\b\ 4\90ÃWß\112ÅRô\99Ô\98F¥\03kÕúvi\93ý'\10 jå:\1c8~ðâr̤ÆP\9bq,;V2(ß\eà\92\ 4\9c\0j\15*³»^ \17]ÀL¥\\12\18\ 6?A\ 4\90R\90AðûjæD#\86\80¼\vò3\82\0\11s\10bx\ 1ùñ\84\83³5ì\ eÒÐR7\ 1V\8ce=rò\192sbM\167j´\ f\18ªL±·ë\8b7×hºÀ¬ïùãL\9agf½\91\1ff|³®~BK\ 6\9eY\95»»Ò\94íÆ|¹ºýyýç\85o.åãw½á\89Ð3ï\9bq\1a\9a»ýToÌÕ~z¬Û©©Ê©éÚóã\91G5æ]×Þ7\ fûAN\99¦5ãîΫðGJ\âW"g\ 2\12¿tãÔ´\ f¦4·M5tcw?-\8c^7ÛÚ¬^Æ©Þ\99i¨kÓµÖmj;Q\86\88nZø»¯èàxn/\86\87C\83\10`pµïûn\98ÎÔÄLÌM;\rÝÆê\115:1XO¼e\94<²<\81ÈÖ\8fµ¹Ùõ´7\9au×mÇZ¬-\ fÂ¥÷MùÐvcó\8aà jTWû¡\99^̶þQoåÌ"ìä5\7fµ\r\(ÏÜvCmªn×oë©6\9bz¬\86¦g\96LwoÆs\13Ë:¥\9eùÖ6÷\r\9aàS÷\80Ô\9a»zzªëÖ|oÚM÷4\9a_×ÒFß~½ùÃìGæ\17Ì\1dȳübiñÌÕ\1dÊTVgùHéëiòu0¸\f\9eùþXNGý(h÷£A@geÂbÍöz\9aO~ï\86¿äØR!rÌ®)·[Û±¼\ e\8b\1e>.~÷ð̧f×L"ð\9aåL\1a¤Ú"\15ö¦,ó úK9\8e\9b;sû²úí\93é·û\87FnÔ¢´Øp<óvßl7Hè©\17Ø¿\\17¾Ê#Sߤ\14ý¶D\13ÖÏ\93éaõ©\e6£é\ 6S·ÕðÒóf\1fÿ|n\ 3)üXOraÚ®½¬ºí~×\9aM9\95æ~èp%ÑäSy·%ý\vïó9È?nÿ5Äü¿BÌ\19â·±|xE{\81\9b1u¸\¸É\9cbÿ\eq²\1eÞÜ\96ÕcÓÖ檪º};aþÜwÃn\9eEek>½¿ú\82;7Ô\15ä_è÷Âm¼ìp|?ôÝ(fu³`Bÿw{â\87Løe'\v/\vMêáG=\9c5\1e~ªÂÑê±ÞÙ üµ¶ý7>6½\99:Éì×ëwØ\87ýÌÀ\99æù\10Òi\91°\r-\1aá0Õ\9f\9aéQ\1c8?\8fö=è\1aåÖ~\1cº}?\9a]Ù"Õ;\8cøs\11tì<\88xAFæü_\1dBé%ô±¯«¦ÜÂÊtxEF\83r,¤_I\fjûá¹ä¬\82\9a\9bkó\ 1Ó¸©h¹\10>w\14Û6nï\8eQØ\8b©\8b\8bµÒüòùûú3ã¯Çñ\90ª±Û\ f\15Çã¦6?\9aÒ¼û}EÅ'\92¯<\vª7 \9a÷ñ÷ÕQ5J(IòºAîîb\ 2\84P&YGÒû\9eM,n\9d\84\83õéàa_\ fÒÆ-ÜlÆqoÇÝÂAyÐ\11y_\ eÍxxý´\7fò\9c\7fî·]u6\ 4a\87m\v¦\9eL'ÏÂiUp\ 4íúµ.QúæïÓ\8bÁ=\ foLùl\9e1\15\19ÅåÒ4\a&Ô\1fÆÔ\9bk¬\93²\99à\171?ç¿é\84ØN~Z]ݾ½â@ÿ\13wÓ¼ïª=Ë(wWt\ 6øå\9cÇ/3¿àyý\8aÄø¹>Ïcüc\14\88\98Ç?¬/~»ø\aKE\16Jendstream
-endobj
-1394 0 obj<</Type/Page/Parent 1369 0 R/Contents 1395 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 468 0 R>>endobj
-1395 0 obj<</Filter/FlateDecode/Length 1345 >>stream
-x\ 1uWÉrã6\10½ë+ú6ÉA4W\90<¥d;\9eQÕ8ãX\9a8W\8a\82-ÎH¤BR^þ~^7(\ 1ZR®²ëñáõ\86F\ 3þo\14\90\8f\9f\80Ò\90"Eåfä{>¾\1c~=~\1eå±ç\93Ê\14~o(\bC/\1eÐ\9af#\17\83M"/rX#MC/ci\10y9)A"u0Ø(eÃ\aÖH\93ÜS"Í\99\14d¤\16C\1a\87løÀæ¹\97\90\8a\15$ Ã\98IA&`\8bY\1a{©Ã\1ai\14y¡H\15\93\82\8cÔb\96*ÄfY#\rQ:ëU\90ãuÏJ\96êÀ\1a©¯L\99¢\8c\ 3\16$R\aÃkæ#6Ë\8a4É#S¦\90ÿ\1ad¼Z\fi\92\1e±F
-{¦L²T\90#ݳ\89¾&\aÖHU:\94)÷\ 2J\ 4\19©Åðª¸"\965Ò\84{
-d v\ 5\89ÔÁ\1c°\8f\8a$\96\8dØOÌ\1f7¤¸ú\ 6°2ÎyiÈ\19Bès\91\fbRz) â!SÅf\ 4YÒ\ fL.A\8aÞI\ 4\99\80,\86Ý8@CXVìÆYæ\9c\f\83\ evã4\1e6\95Ël\90Ø\8d,æD3xwX\ao(D\a'\ e+©Æ*\90T3>\8e\ 6°]\ar\198\Kº\18,\8auÄ:\98Câ~p´\ e\ 6\9b%¨¡eM!âÌ\148æã\13\v\92\\1dÌRÞ\eË\1ai\94\fåO8&A"\r,\864NÐ\85\965R\f$i%Ì\ f\84$ÈTØbN'dÃ\96u0*ìs÷XÖ\18ö³aëÄ\90 Çð\9eU<¡â\ 3+Ò(OL\1fJL\ 6Yé\81Å\16fä°\ eFÄy\8a¼\1cÖÁÜ\13¼µ\96u1³9F\88e¥c"é\8d\rå
-Ýd\0Çä@8\85Y\\ 4²RH>¦\11R\94q\98H¼\82,\89É`ÊÏC>\12dRµx_~Ë\9a*al˽\10ò\81\8c\ 4\89ÔÁ,å[òF\8a\ 4å G!Ç+hïu\8f!U|8,k¤\1812ð"¾%"AFj1{å)ã°\ ef\96'\9cËZ\f\16%ÅÞXË\ eÆÞà:AM\ f¬ Ê\1fn\9c\88Ou$\88\83\92\8d\vóáNÁç\8c\f\92\88\1d\f¯¨Zê²ÀûÕ\1c1O\18Gë`°\18a\89ÃJLa:ÜG²í\ 6±[C*\1e\ fl\97K\1c
-²$\8a%%\ eø\96\ e\ 5Y\12gBº \ 3\18>\ 5I6\ e\86Ý\98W9¬\83ÁæÁ\91öz>ººS¸MhþÌ/\19\95¥4_Ê+Ƨyù\e\8e}êÑlU´\9a6ÍRw¿Ï\7f\8c|\1aã\ 1\12b!ó\99G_\9b\17ZëW½fv|Lç\1e=UKM몾¤\ e|\8f\1eu±¤¶x;·\1d\ 4P·U¯ÿ\87\ e\añ¶Õ˪쫦¾`#òè^o\9aö\836Åv[Õ/\17ÖÄHrݼÑͺÒu\7f!K\8cS³\ 2¹Võ¥\ 5Ê\eÔÔïêË^PÊû\ f¤ÛíÖÆÇ\18%?Ôrú\8fG\93íV×ËêÝ\94
-ïÊ\ 3\8b\a
-=4m_,ªuÕ\7fp\ e'4jõåáû¿Ì\1cí\ 1¶
-±ß|£ïuõ~\9a;^\9d\1eÝþ5\15\99»s\91\87\9a<êå\97¢§¯U½{\aØ,Ú¢^öãéT\9c\1cùç
-\16\9bEAXAM¿Ò-ÝLïfTÚ\8a\9e¬G¼÷EYÕ}ÓöËþ8\8d/æà¿Í¡¶ç4Â\7fªêeóÖÑsÓÒSÓþ|i\9bÝV¶è¨\ exÄص\9fòäêS\9e\9dÛÃ>ïí\85>\1eô3ݾV¥¦\87¢üIáyÞXÿ¨·Ø\18l9]ï^ÄïQ¦¸ð=\9aÖ}Û,w\87\1e=\8a\fW¸G\9fuÛbMUýÜ\9c\86\85Û\e»¤\17»á\9c\9dõ_¹Á\87nk\98ÐmÛ´\17Ö ÖIß\17å\8ací\e*¨ÝÕÜ«´m\9bRw\17$èê\87¢/W¦!ÇG\89\81»\8a\97ºéØÄG³k©\93\16èP3Ýr\12'ë/\14Âí9Åu\98tÝn³å³|\16\ e\9e¼\1eÍuw~@q3¡ÿúj½¦Uñ*é¡ \16kÝIG]ÝeÃ\8cÃûÂÏð\14Jù\96Â\0\9bMî¯'ôÐ6?tÙÓmSî6\18\0Å~\94\8c\ 3<ÎY0Ný\9c×O\16]ß\16eÏÉÅx\90eY\8cÿ\ 2A$üåÏùèïÑ/ûË,8endstream
-endobj
-1396 0 obj<</Type/Page/Parent 1369 0 R/Contents 1397 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1397 0 obj<</Filter/FlateDecode/Length 113 >>stream
-x\ 1+ä2T0\0BC\ 5s#\ 5c3\85ä\.§\10.}7K\ 5#\ 3\85\904 \8c\99¹\85BH\8a\82\81\9e\81\ 1P$YÃSOÁ=5/µ(1G!3¯¸$1''±$3?O3$\v¨ÍBÁÐ\10¢M\17¢\ f\9fr\13\v\ 3=\v\v\13 \1d!)\1af \ 3\C¸\ 2¹\0\98T&lendstream
-endobj
-1398 0 obj<</Type/Page/Parent 1369 0 R/Contents 1399 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F6 9 0 R/F7 10 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 513 0 R>>endobj
-1399 0 obj<</Filter/FlateDecode/Length 2873 >>stream
-x\ 1}YËnÛH\16Ýû+.z3i aDR¢¤Ù\f\9c8é1:~t¤ ³è\r-Ñ6'"©!)»ý÷sÎ-²êÊ
-\1a\ 1\12\1f\1fÞgÝG\91ùßY,\13ü\89e\9eH\9aɦ:\9bD\13üÆÿõõ·³E\94Èl\99E\13©$\8d£Å\0v²:3°\92i\1aÅ\863°\92ù\14âN å\f¬d\99z\ 3ä\f¬$\8e§Qj\ 4-\ 6;\8b£¥agI4\93Ù"\81\8f09'§@M\ 6\b\93ê\8eç\f¤ÉY47\82\16\83\9dNé\17u&³e\94Á$\G\ 6\14\f\91\8c\10\82\93%#ñ¤ÅT»\8c¦\86ujg\19~\89H4é
-4\92\0+Yd4é9\ 3¡4MhÒ\93\16\83\85\rÄéYg\12§\96ÀäbÆ(\15Ф\81\8c$¦¯\9e´\18l¢g\12X\83Á.¦<¢À\1a\I2\992\1aÏ:\97RT#³\90"Ç3\ 5\9a\85\0\91ø\8cZ=g \1dÊX³\9e´\18,\8cYµ\16\83ÍfÌ`\905\98îÎé®g\9d»1ÍÁ¥ ³«@k!@¨\9dd¬MOZ\f\16ÇvÄ\1a\f\16V`4È\1a\fv®UæYd\ 2±O\18#\15ÏØ\85\8aè\93ÅT¼`\12\ 3k°;\1a8åYU<E\90,Pú4\11\87T±Á`\17ËcÖ`°K6¦\915\18fcZ\b¬Åd\17H²e\ 3\ 6\8bÒN\r\v§f2ÅX`\81Ï'\1eh5\ 5\b\97&\13dÍ=©á\18\f6\9e3\1cÕ£¬Á`§Ì¢a\rf°<<Ã\1aÌ\1cÏ\98
-¯Ùb°ÉâÈ+
\8b\19¬&Ù˺`3ι1X
\ 5!Ø
\81c¿ÂaOZÌpRæ0°Ú
\9b\ e\83\85Q
\9cN`
\r\ 6»
\88\19l`
\rf°
\8b#ÍÎá
\193?:¬ 8<p
\83\83\9e´
\98\ eÏh4°
\ 6Óa
\r'°
\ 6Óá jÃÈ
\1a\f\87ã
\ 4]
\14X
\8bÁN³#Y
\8bÁb_àd½]
\8b¹T9¾
\ 2k1Xl
\1cÔ
\9b\97µ
\18l6gU
\ 4Ö`°Kv|`ÑÒ
\80é\Ç
\ 1Fï
\b\98d
\ 3u
\93á`õArXl#D
\9a0P
\91bOZìR
\8c$
\ 6\16)
\1e1SÌ
\81jØIB6
\99\ esD;V
\11ÍÆ®
\83\a6ÁÞ
\81l`
\9dl
\1cC
\ 34ã.
\ 2V
\91Ê
\1a\f\16û
\15\a\10X
\95M
\97Ì
\aY
\ e\ 5\87TÖ`°
\19£7¬Á¬ã)²
\19X
\8bÁÂ
\8b#ÍÎ.rÍ2
\8f§1æWªÈÙ
\r\98v¹
\84\rk0X
\9c ì
\ 6Y
\83\9dWKÃÒ«
\11\83\8dy&AÖb°S^
\fk0Xôø
\91]
\17\11î(ºb¦
\9cש"
\8dȱ¨;Ý
\13(eÄ«ÈÅ
\e0#â`
\r,ï
\9d)Ú
\97§«Eä
\0\ 5\rÔå
\8fÐôArØL#
\84NL
\99Q
\8bó'`°©ÆâEu
\ 6¥X·,
-x\83H\14¨Ú\0\9dZ\ 4âI\9a\191Xè±¢N-v\95Þ\vT\8f\82 vàâ4eæ=i1Ôê(3¬Á`ç\19ÏÅË:£Ø(þb\9a*P£¼§:HµÜ}\81TÁ\ 4\8b\89'¦IpÀ{;r1\16ÒR\ 2i1Ôbîg\86Õ\vC\82ë\896k2A³:D½±Áô\88åiX\83©\98:\fk0\v\7fB³j\87\9a-fióu°\ 6\83\85¦Ø²\ 6\83Ånµ².O\99{/ÂX[@\9e\80V\rD\ eYd\813\10Áà
-i\ 5-\ 6\9br©\ 4Q\8b\99\b®\8dÀ:\87ð7ËÌy 84pÎ\ 3Ï\19\b¥È\b\94zÒb°3\8d3°\ 6Ó!n\14#k0ò\87Û'\82ñ²ø\ 1\86´\ 3Gw\15\ 4w\aÎùç9\ 3½»\9e\1cÜ\1d$\aw\ 3ëÜ\1dYç^`\r\86»x_ñyÖ¹\8bÕ§mÁÛ|¢\80îê]ßA¸\94p¥\ 5Òb°hq\84íE-f8lbÃ\1a\f6ãÙ\1aÖ`°ØõV³sX'=ò«ª@ó\e \ 4]óyÒb°¨A¨\r¬Á`ç|Å4¬ÁÌ!¯\1f\81Õë\a;\92ó\15·AèU .\ 5\bµú²\1cH\8bÁâZ\80>õ¢\16Ó¨æß³j4Æ\8b±N_.|\aôà\ 2\84Z\94~bHn\8aXß:ñm\83«É\ 1Êinã̽ýÌyãw\80\9c\81è}Þè\ 3g ìá\8e47¤ÚÓ\9b\a.n\9c5îZB\9d\ 6V\82k\0ÄôAr\ 6Â\1e\17mà\fd|¼ü\ 6Òb²\1c~\96\r\18,\86\1f\82ôF-fk3\13\81µ\18ì\9cw>Ã\1a\8cHq\V³Kmê^\b¼o\82T\14ò\8ezåY¢Ô`T\81æ=@\14WÊ\1cyÎ@\9dÇ8\13Ïa\9e\8c\90Yà+@ -\ 6»ä-Ç°\ 6#NÈ"\83^±\8b\ 4\ 3\9e\eØ9« 8;pÎ;Ï\198:ë9çì 78çI\8bydÜF\(\99î$\8bÙ%üÔ\12X\8bÁÂwäÏËj(øJÆÙ§\91èÏ>\90\81QÇ=\13\10|Á»S̯nSuEÕ¡ÿy\15ÈxsÒ\9f©. \84Îiç\99\80¨\8e×\aO\19\b\ ek&3\\80àfüÖ\10ä\ 2\ 4\87tÍ\f\17 8}M\ fr\ 1"U¸\ 4&AÎ@V\ 4ÛßË\19\b\ eo\11&\ 6\ 3Ù\13\3^Î@pxÕ3 ÓT"k:Q'°¦?3\95xy\1d\10\93B!O\19\bNÇ\98ç8\85fîõ\ 4\9f.ðñ\8b?S_@84N\ 3Ï\ 444\9eg´\ 6\ 6mqÂFó\94\81ð\ 1±\1a\85\ 6ºäã\eÖè\ 6Ïb\80HbÂ\9dç9M\ 6Þ©ôM\ 45\827K\ 2z¯\14.¬º½õ\ 2É\9fÉ ¥°®\87\17\94\84_ô\14\90\8a\ 3\84\1fnë\8cb\ 6ÒG¾^y¹\ fë³÷\9f\81'²¾Ç×õl¾\90õV?ªã7\9b7\97uß6Ûæ/\9bú×õ\7fñ,æXì\9e}\a% \9e~³~,;Ùçm/\9b¦îó²î䡨\8b6ßIYß7ÒÔòØ<Kß\0v}¾ÛI\97Ww¹äõv$ x_>\1cÚBúÇBuuÒÜ\ fϽ4\ay.!V5]O/&òN\97<lïÊ\1fÅîEê¢ØFrûåÓùê\93´E¾\85\9e²\8b\9cË\18\ fÞeV+]Îïv\ 5-|\84ÇEÝwîILÌñÉÑ@\1cÉ¿\9dó\97\83ót{]t½¬Î¯>\9cS\10ÿ\1dá\1dÂ\87¤H¾:\ f
-©ò\1aÑ<\14ªß¸\8d\81\12É\87C¹Û\96õ\83Æü¡¬ó¶t\ f¾;z2\8dd\8d¤0oeµoÚ>¯{éúbÿ*\15øÔ\1dÉG\ 4ß»,vÕ\1d\ fDó\9aó\0å¾Ü\15\9a\93#ý3èg8Hs;\bè\93Èyÿx\9cÁ7ÒãI\1cuu\9c¯c\87³HV=Êa\f\r\8elõ°küp\9a/Ü\90\8cÀ}ÛT¨\93¢ßFtþ$F¼fDr¾ë\8b¶FPOÅ?\91\8aÁVÙKÞI.Û¼¨\¹¾;>\999"m_dWvÁ·Ç¼- ô\94\97;W\13µKDW´OE{b~áTÀµº@Wàð\98%=ÁC]þ%\9b]\89r:\11[\9e\88i\9c¹\ܬÞÊ÷ûï\ fø»¬\97\7fé?×ký'ùñVnVï\93·Rô\9b(\8a\8còã\84c~È÷Ǽ\97Ë{\94
-\9cê䢩ÿÑË÷¦ýñ¯Ó\8cãy¤ü¢Ì\1fê¦c\f·m\83~¨N«\94\93 \87³iö\85\^(\7fb\1aõùñ±q\8aؽPÖ7\9bf'_\8a§bw\92
-¨D\9dÞ¶eéÓ<|»¾ü\ fçC.\1f5\7frû\91r'¦Pª_\9aÍ\ f¸ü3µ¨»«|¿g@ßp|u^\rí\84ÿ1ôý\89p.«}Û<\15[¹k\9bg\8d¿¬Ý¨y\9d*\\ 5"¹A\1d<\95Å3ÇÅ(ñÊ<ö*ÚyÔÖ\1dölSTqÐj:\ e¯!\8c_3\8eYÕ5»Ã8^mÀ¸#\1a\9dù¦mºNºÃ\1dZCÏÁ\966\9f\85§\1cTÛ\ 6ål\1fö>Ë3ªA´\1c\8eú\ 2\97Z\1cqÑëq\1cö8\84ï\97×+ùi\ 3à»òѳ>fÄ
-¹\9b¯¿ÿöõæÛíëÃÃ\15íoÄ.n®Î/¯OR\8aVûÜ´\e\1e§Û\17(\90;7Úª\1cóïusâ»5\v\80Õ1
- \1a·M\85\8d\84AüS vÎu\83\81\99ß5\87\9e©Ê·\e<*ùv\8b£éNç1J\ 2\99¾:ìúr\8f\15\82*.Úû|3<h\ f\ 5§|³ß¡\O\8e\vß´\86\86Åð\91Æ=tz08ÿ?\ eåæ\a\86:Ï~¥g\1fÊìýð{6ùCÛàäüi<\1cÊmñº\98µD.Ênsèºa\9d\9bªÄ\veĶa\95³\8b\7fù\8a!\8aÄ\9c×us¨7Å/ÜÊè¨Ó¼ã;ÕO%Õ\9bBV/õæï\84\11å`\96e÷ª
-ð\85\a\83ª\91ë\9bµ\1cà\Õè\15\ 1[µ©\vùóMüç¯\82fvó\ 6\eîjÅ1ºE[ãÄ7\18\85§\a\88o}8sD\82-=ö\9eÜ´[WOG\9dÁq\93×W°Æ\9d\7f½\96Û¼ëÐE[ùToÚ\97½.U\14×\8a×\99×éÆ\7fî`Ô¼º?\99\84ã\13\93\8e¢a¡³
-;9×2\\15\9bC[ö/Tùþób¸\94¨k¸\99ê\ 5æµâ)îÐ\8bÅ\14W8Ünæ\14ü´>ûãìÿ¬h\862endstream
-endobj
-1400 0 obj<</Type/Page/Parent 1369 0 R/Contents 1401 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 517 0 R>>endobj
-1401 0 obj<</Filter/FlateDecode/Length 343 >>stream
-x\ 1]\92ÁR\830\10\86ïy\8a=ê\814 \10±ÕÖñÐ\19µy\ 1$Aí\98¤\ 2ÕñíÝÐ\96f\1c\ 6\86\9fïßü» _\84\ 3Ã\8bC% \97Ð:Â(Ã/óãå\81Ô\92*\90JR\ 6\ exÉfõ ;\92j¤RP~öN4ÑHq\8d<¥\89v ò\8aÖ =ÅV\ 2ãæØI%±\17z\8a¹ÒDÇ\85\ 5\15 g\9aj¤\8aÓ"¡¥ %Ȳ¦\12c+\1e\87\9dDLM$¶$
-ô\aª\91b\JqGA\165.W¨
-ß\ 5Þ½\85\8e¬4Yl$p\ eº\8b§ U\ 5ÚL'À@·7%Å-¥°4ß\8d\1f\9b7;@è`·]ÁÚ·ýïaü\bþVï \83\8cç8¦6S\85ø_á\83Ïì©Â\1a84Ãð\13z3ÄÒ\f\ f>)Î)èw\v\83{\9d\\ 6î\82s\8d7Ѻبs§<ç\94©\1c§ÁÝÃÐÝr»ZÂS\1fö¶\1dá>´Gg±ßK{\19\9785ú³\8aÕÑÿèÇ>\98c{1\14
-ÿ+Uà¿\88PŬµ&Ïä\ fª\12\9d×endstream
-endobj
-1402 0 obj<</Type/Page/Parent 1369 0 R/Contents 1403 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 520 0 R>>endobj
-1403 0 obj<</Filter/FlateDecode/Length 1086 >>stream
-x\ 1VMoã6\10½ûWL·\ 56\ 5bÚ²\1c\7fì-)ºÛ=´\8bn|é\91\96(\8bµDª$µ^\ 3ûãû\86\94\13ç£\ 1Ú\14\81\ 3[$\87oÞ¼y£¿F\19Mñ\97ÑrFù\82\8av4\15S<¹û÷ùÃh¶¾\12\19]Í×bF-åë\85È\87_\rÝò~ºÊ×bNóÕ\12ßgø8EU\Èò9\ e=³\90ÏÄâñó\9bÍhò~M³)m*`Z,W´)#\14<).~ªe\17\94£LÐ/ö@ÁÒGã\83l\1a\92¦¤\8dò\81n¯\7f½¹þqóg\8c\93-S\9cqÄ°)/2\81£\9f\95,)Ô\8aZi¨\93;åÓþ9eÙ°\7f¶\ 46ìß\9cï¢Rûàô¶\ fª¤\83\ euº\8c
-k\82Ô\86\1a\e<Ù\8az¯ª¾!m*\8bkdÀ^ ¬UÓ1â\9d
-t´=\ 1·C A\1f+þÍ\10¦4Îr\90\85\8bKkÞ\ 6Ú\edY§L\1d£¾CÌø\r\ 5w$o[\15jmvÔè½z\97RA9ïRY .\88øCZÉ\86\95µÈ¯À0\168¦o·¥X=¤á\82¬£\87á\9e\ 4Aå³<\851ÎV\15\8dï£Ñ7jSO\82\1a²M\89"öF\7fU^ðúx\r8\8b\9cƳ\ 1ì'¤ç\90Zï
-\159e2]+\83¶\86$´ÕYm¸\f t{\8cż\95íVÒAmÉë .©\ e¡{7\99\1c\ e\aáyIX·KXÖt®\8bHN&f\82nzÝ\94L$kãF\eéôKÒ°Tr}µ¿¤J;HÏõ¨\b\8evÎî\9clÓeW\ 3ß\17$&\10J¥wýSN \1e>\98ò\85Ì\9c*\82uGA\e\84'_Û¾)IöÁ2\ 3\ 5ô~dÑÝÇ:\13N¢\ 1d±¨\1cÙN9\9cARþè\83jOr£Z~Q(Aï{Ù\90Qªô\fÁDi¶ò\bÍú\9aÙER)\91g$å¬\rߧÕ\93¬ò+±\1ctu\96/\8dÇ,ÿ´õÔfã´÷®æ\89D\é\95¢\ 3÷\8dïT¡\ 1Ïv\w\1f±\15P«2rÛ(f\a\80ÕWUô\9cá\7f\84ÙÊý#\8d>\ 6\16Û·@ÿ\ 5\15Ë´\1d¤!è\93)\14éð\165ê\v(Õ£ïcmÚN7P'÷9\ 3\86#¼\ 2\1d\9c$\9aÜËô\81¸aß\ 3\90Ñ\19Ñ\94\æèu\82þ\18PyÕI\88C\ 1ñ?\9d\9c@G÷\9eÓû×Ñ|º\ 6\ 4¾\9c\vÜü\7fà\vÀ_¾æ7\e+
-¥éèÁÑYú\ eÍ\em\80\9bH¢\9bÕ\17m{O_\94ól?pøÔd\ÝVïê\10\9d\97\9b%úu´|ngØÜé\10{\18c9kTÞqRR\9a\10[\85©id{\9a.\92Þ\bÄx\ 3\89\aeøîûÚíà{²Øó¥\1cè H\1eO¯¡\10I+\17^¦o Ò\98½ì\83§dA\1a&¥\84ݸïR\84g\1d7\8f\rL<½uÛY\17¤AË\aõÈ&@Ùi\1a_\87t\ fºa§\92SõðÝJ\85¢æ\9fΫ¦Âí\ 5&\11<\ 4å³ ÇQé´ÙÇý\11«\ fºí\9bè\8a\82>¨\10í\91Ytü\ 2\81òò÷³\9e;+\9a\8båæ\96\8ecW·\98N(\eÞ
-\8aýñ\12\ fã-Ñ00\ 5¶°©c4W\98D\1ct\9cÌ0âÒØO><\\86ÂÇQ\85\90Ð^4\9bdÈñ½ÆûC\9c\aà(F\9b¼_ÝÏùy\9eæü¿yG\9a¯¦bµ\9a§\ 1¾æZý¼\19ý>ú\eí.\0tendstream
-endobj
-1404 0 obj<</Type/Page/Parent 1369 0 R/Contents 1405 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1405 0 obj<</Filter/FlateDecode/Length 1387 >>stream
-x\ 1\95VÛn\e7\10}÷WLò\12\ 5\88WWKN\81>$i\12\18A.\8d\15´F\\14Ü]j\971\97\94I®\15ý}Ï\90»\95½U\ 24\86mÅ$çræÌ\99¹=\99Ò\ 4_SZÍh¾¤¢9\99d\13\9a\9f\9deç´8_áó\fßNÒ&\1eÌf«ã\a«y¶\18>x¹>\19¿yNÓ\157ð±<\9fÒº$Ø\9fLh]\8c¦Ù"£WN\8a )Ô\92|\93SaÍFU\13AYC\e¥eötý\rf\164Åk6s\8a\10\9604Z×\12q |{Ñlµ<òØ\932Ѷü\1e¯xòm^*'\8b`ݾ?,\95\ fNå-ûÌè\ 2wªJú@{Û"sQ²\85\86Ã\80óé<\9b±ó\ 2~7Ö{ò6^,\84!/%Õv\17=Ú-\9bóTY
-¶\920áØßÖ\89"¨Bft\89Ë\9cv\83\87[Q\ 1aëHh}ÿuL\9eS^\ 2Ý\942yÅÉ"¼Ös\ 4G²¦\9dmuI9\80±\r<+S\91V7ìNù_\12\9e\13zÞùH¶©û÷µÒ6\17ú¯>á
-
\ e×ý1~כּ©
\9cm·ô+½¿zûùã
\97OÝåÙ4
\95æÞå¯5bð?±
\86»UËùØ
\eØ3öÇ~q3
\96Ã
\1aÀÞ_}@
\8dù2
\ 5»«UQw0
\0R
\94\ 4Ä2¨z,I¾'aöÖHÚ©Pã3
\89¢°A
\b\89-^º;é
\9e\ 1a
\86Nâ
\12\8a\87\1fÊ
\91¶
\15ªhD#ɺ>Ô
\8e\13\8fcª
\8fIøXC¶
\82JÇË
\19]
\8f>ØHt
\11@1¡A
\e/C¼xÀ3Ô8½
\14M.Hy°Â!¤M¢ÊËÏ
\1fÿ¸¼øð6
\vßÃÀ/
\13§
\94A(í¯
\9fö
\95è
\18ó¯SþûøÍY×F#Ð
\ e\84PÆ
\aà
\93Îú
\16\e\ 1\16ÐÐØÐ
\9f\93 t
\ 5B
\11»p
\84^͸W
\87/cÇÒ
\15\1aÇH
\89ƱT¤
\ 6W±
\9d\9c\97z3$õ{
\8eÄ·ècn¸m
\9b@é=D
\11è;
\15\8d.i«
\ 5På»~+
\vµQp
\94Ú|
\10$
\eæ
\80\86A^
\8f¸ïJ¹
\11F
\8e¨
\96E]í
\rß»×â
\f+Â
\86é
\81ÝqëÝXÛBè1
\ 2ÊÅX«|<prýt
\98æ
\e\98k,²T
\ 6\96\9b¤p"·È×Ë¢u*@Kd
\b \9c\8fZÀAvÝC¾f
\9dCß
\v/Ñ
\ 4\eæ#
\84\85Ó°EÛH3äÄ
\97\ f\17\7fþ}ùúÕ
\97Ï
\17ë+æL§£
\a9>
\9dw
\8d?ÍÎ2Zw
\82ç:=I°Çþ
\b8
\ 2\15£
\ 2>è¶^
\88/Â
\13\bm³µ.
\b4Q$1
\97\87\1fÆ
\18ï
\84V%çg7\77
\ 4´¯õ
\0Ã
\14CjBNµ
\ f\ 4"j+'
\1ahõæðG×
\1a?¨àÇwìÞp
\15#¥5
\84>
\ 6¤(Á
\9a®C}4
\14ùÞ]¬Ô
\1d&
\8b!é
\1cWMz
\ f\81\1e\16ôÀ[Øgï
\ 4\7fÂð¸@
\17sÀ½ýÈ.Ö.o
\8dÈ1©r
- \9eÎ\16h\13T|hû\85Þ\89½g«\87\ 4E%ÀÅ\1d'Äè\16µ0\98\1a\ 3nþ\0ÊGéÚÑê/!0\ 1RÃZ\17£nò2æaðáaIîMß+\84дÀ³¨\ 5)AGh \ 4\v\11\1c\9e÷â I,\85lx \ 2Ð\8d³\1d\9b\ ez¤\8c\f\ 3o£\8c~³æ °Ä¬\86ýÒRnCý\88^'E\ 6
-\83\82ó\10î\ 4¤9Ò¸ÑÇQÝâ²Õ\ 2E\a\0MJ\ 4üÀ8(%æ3fé>\ 1ñóx\9fqr±6\88#¡\11í\1d²\1fÄÛ\8d\16Æ#B_Ø&ºÓ\88\94m\1dÑ\1e\19\8a±+²(?\ f\8b\ 3¸\86;E\12\92n6ôÓí¾\93A<ÝÒ\ 29`Mæù£\8aV\v\88\ 2Ë\ fJЯC\94\83óI¼vÌvì")ó^ö±| xëʤT \8c8ÙÐl\86\97\9e\88è=¹- m>¢\17i\ 5\ 3ÎÚ$[\83\r¨á>\10å\1dÄ\86÷&\88J4\ fþ\ e\8bÄ\\1c\80ÄÌ\1e^û/ÑGÝìç~À¶\88²HÃ\8a\91H\fE\bµÅÔáA\9fz}\1f\15f\0§\93~kÁ\1e¯UU\a,-Qÿo[UÜà?\80\134QF\ 5%â\1a×-(pxË\vQ§ØçÝÌ\9d.±\8d\9fÏi9[¤%çòÅû\97/è\93³ß°Ø SÒ\1c\88s\85ã8í\1f\9c®&ØõÊÿ³o/V\8blµ<ǶÍï&lîõúä÷\93\7f\0ù\r»ôendstream
-endobj
-1406 0 obj<</Type/Page/Parent 1369 0 R/Contents 1407 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1407 0 obj<</Filter/FlateDecode/Length 1295 >>stream
-x\ 1\95Vïo\1aG\10ýÎ_1v?\94(æà\80\0v?9JÒZj\1cצ\8a"Eª\96»=³öÝ-ÝÝ3ðß÷Íî]\8cÏP;\89\82Q<¿öÍ\9b7óo'¦\ 1þÆ4\1dÒhBIÑ\19D\ 3\1aÆÓhFãÙ\94¿ã\9f\91\94uÞÏ;ýO§\14\8fi\9eÁe2Ã\97\94`>\18Ð<éÆÑ$\8a#ºqÂ8UÞRftAª\94.\8d\12]foæwp\1fS\1c\a÷Þp
-÷îå\97ùÇßh¾D\ 2\9dçzÍ\9ek\95ç´\90\94ª,\93F\96\8eTF[]Qe%]^Ü\906üã-9\r\eë\8cZTN¦d¥yP\89´T\88\95\8d8á\80zÃIÄuvÿÔú\9e\84ã8\86B1x¶/¦Û\97.é7ÞO\víFôu 7e)\95\19\9e\93r\90\956\8eâÑiß%«\88.2*µ[ré;fn)K\12)ì)\87\1f>îe]S<\8a\86\\13|ìYÈ\17ï\0SW\fè\16JÛ\9eµe\93ëim;¯³ªP¹0ù\160\1aXOûUºò\98Ù¥®ò\94\96âA\92( h\9a¯ååÄ¥m"\1dÌ{)7\8edªþ\a×C\14è¢\1c\80\ 3\80ÜZ{\88,Y]È\0$£E;ø\fè´áÍ84\94Z\7fvá\ 2'¤(\bÝAgÖ\ 2å\19\1dõ+kú¹NDÞ·¢X\88þB\95}[,@\1dþhº3\0÷Ñ\9dV|j\12\0\96ôÖ <CüBð\92ãú\8fg\10\8e&!\rs_nDâÈnK'6¤³½ü<\8cã\830
-¬_H·\96à\Uª\8d´\115\8c\a\11 ô\94Æ7\9f-U¹3\98\9e1¢y{ÍÌÛJ¥²=B<«gt\83\1eÕ9HäÀ9Ý\ 6v1µ8ºo]\rÖ?\0ë{\17ÓÁÍd·T\1a\9bh#¿¿á*\ 2(¯\9cÃoºjUYT\16ìSámLÂ\9f\88Ç"²Ïü0ÌP\9bBxVÊ\82 i\16Ò\837ïGéK ãr\8b\9e¨°~\14\v±\ 5\89 \88ÄRÆ\88\1c«ÒI\93 ÈÖ1é\95S\9a{Ã|ôªÉ¦v%\13\95m½ùÅ\15O\8c\91Ö¶ àY\ 2æ\85°÷L ¯r\8f¡#º®ÊðÚw\8dèATY\97ÕmøÿF\991\966LK-º©.\7fut\8f9¢5+!W½0Z¤\89\0ú\10<V\1c\9f\ fù=\18ýOM\12(T£u<\ 4íL\81/¬â\12 \14¬\92h"r\98ª$§
-yBPvÊ\84Ê-\ 1\18\96\87\1fô¾\91\ 1A+\13\8f\1a~\7fì¤õ»\87\93\1dï%6ë\8bN\19"\88yê%;ì\96¦1©Æ\vÕ³õqttôõüúòâòw|£ÏÜÚ0g¨\vª+\92D®PºÑ 8½£\95\80@ð£|Ý\fY¢\v\10"õB·\87ú\ai\17a9ªv·\v)0X\0\9d\82¼s\87\98QvÅDú¡\ 4\9c7pÊ\ 6±5·U\ 1ÊÚ\13fÿ£»÷\15d\13£VîÄ\9bZ^ãÜë\16Ï\82\8d_îÏø\84þ·[Ü\1e\8ek4\b\81_ãzB+i\96ØätÇcn%ÀcvÐ\1f\7f_ù\9dËõûµ¦J\ 4Ís^ÍXpØ\82
-Z÷\0ìy\98t}y4\94ìz9~ÆD^Ö\1c°\99ÑÖ³ÁÑ{¾J¼\94c@Ö2Ïk®?^D½Q\1cV\13\9fBÃ\88Îs\10 \14N=È3òïö|Ã\eÐ\ eJ\85,t=\94ÍðñF÷gÑ\1ccßtÀß5xÑ\8e×nï\12H0äµiß¾\1d
-\8eb\94\1a8±þp\90àV©ÛÐÈïΰúÜÐ \16Lõ\8b_ÞÅ¿\1c\85Õºl`<°R\ f/äÞ\a¯Î\ÓÏøúþÔ¾O®ÍfÛ\82ѬÌ\90qpIndR9±È%nNç\8b}Ô®.%Ë\ 2Rñv\13Zñ\f\ enV}ª}\ 3s\12\90ÏG\87x\ 5Ü\1e)w\0OZðê\ 4¯1\8d¡\16_\96¿\9cC\88¦7áD5Iä¯\97ð»Yäñ\ 4gúlD\93I\1cÎÊ\9bóÏïÏéÊè;H#}Ð\89\1fzð0Ð×8ô¦\ 3\1cUék.÷ñt\1cM'3\9cýl\1fs\ 1\1fç\9d¿:ÿ\ 1Wÿ§¦endstream
-endobj
-1408 0 obj<</Type/Page/Parent 1369 0 R/Contents 1409 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F3 6 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1409 0 obj<</Filter/FlateDecode/Length 1161 >>stream
-x\ 1V]o\e7\10|÷¯Ø\ 2-*\ 3ÖI')úðC\81¤\8e\81\0\89ÝV×\1aEÕ\aê\8e\92hÝ\91
-ɳ\7f\9fYRgK\96\93ºE\1dØ9\89ÇÝ\99Ý\99%?\9f¤ÔÅ¿\94F=ê\ f)¯NºI\97\86ýa2¤Áx\84ç\1e~¤EX\18\f'øøÂB¿\9b&\83\97\16B\8cg\eÞe'\9dË\ 1¥)e\v$\1f\8eG\94\15\84ÄÝ.ey+3´VeIÊ\93\93º \11?:µÔ¢$oȯ$m¬É¥sÒ\9df·\88öf\17Eº\9a\17ñ»&C\8b\84Þ}õô\9a;~-ám]j÷\86 \92\15«ëìý9}XÐÖÔT;\19òNÿøm@ÎoKIJ3Âó²â%\1dÞ«Ä\96JµÆË\86JcÖ$|Ø\17!¡Ò\81tK>\88jSJ×qwvÐv^X_o\ ea\ 3IÚOz\8cÄåVm\10ÇP%\10z*ª¹ \ 5²+\1dÊ\81\1c\11G й\9cP\8a\92rmÛýA$\93&£\842Ëà\9cWz\19@¹\95°Ò\91¸\13ª\14sP2\81\84EÝí\9d´\87\98¹2#È\ 2x¾\8f+é\8eÍ$é¿A.\ 6ZÍóRIí©ý\91âKý\862ªhWÆy-*yÈ´\1d\ 2<ÖýO\94ÛL]\16´\94\9eæ"G\15\ 3n2\v¬|\13sÒ4¬0úÇPzMÎTÒ¯\98´r(Yn¬\95¹/· \89ª7mo\8a}e<·:ô\rïóVSP.4\89Ò\19\9aKÖBÁÍpRÒ=¿Ø`\82O\ eji \vK\1f\85þ$´Xâ1\16ÇѬåê|E"¨w¯Ñ7\8b\9båì´AÔ\bq'Á|e\fT\88ì\96Jy'K\0Èk«üöP~\v\ 5Ó\ 4\ 2Q(V~®¥óè3m\84s÷Æ\16`±0@\v ݳÕX\14\1c\84û²\a'òJh
-¢»Õ}«=vû°\9d-¨T#Õ\12SÃX*¤\87¼\\ 2Òl$.$¾ÎCr6É.uSÄ{\85z×þ\0ìö\19.Q\14\8d\84ÍÆ+¨¶ýû\ fÍdÈM\85ü\ 5\ 2k ɯÐÃÀQ\e\905v\8dO~EÚèv,OÔº\9b\9dF\16/zg\1c½\93\e¡\1cÎ\1d\82 &Tkõ°ëk\fÐxüßù%î}4\vu:û~é\bF©òo\e'ÛnT.J\b\9b\81Å\88½\7f¶_\vea³AÙ¼\8fýÉFãgö+$.!\15î\9dÒ\98Te)_5MQú#\10/ÓhÁ\97\8cvOyB³;\ 3å\90y%î$\94\ 4iÃzJï\11lÊͳ'A\83\16\91÷Óð_¨\92u\80ÑÇ\15\8dö \1cU\9cì·58\86ø\82þZaT¸¿ÙXAVJÇhM\92=\84_I÷Ü»\97pÀnØSL\b\b,\99PZhs\8ea®ø\84\8aðJ³\ 4½\88ÏÑÂ\82.W>vÈo7òü\bQ3&^1\95;\9d\90®Ãqc\9cFî»\19üt\L\8e$¿°¦\82-/®§gÄ\83
-\7f\95\9e<\84ÿ®²3\8eÇ\9aïÆ\ 3\ak½õ\19]O;½3\92>O\92äÀ&M\83ölÂ=ªL\83Á
-åÖ\18\1arùuÂ?\9fÏf7\1f®.®o¦³ÙO\91Os&\8dÓd²;\944\ e\11>¾\8bs\9aá'ú\9d+\1c\9f\8f]\15÷>\9eG\fkcqÔÂ÷ÿ+ rãÓ\170m\8c)\ fìÞ¨¯ý\fØ+ù\aì¸.\94\92IÇ25Õ?
-)K9·ÂË3\82pÃõ\vÓ@м^â\16¸1Ö\7f\17\ 3\8cws%\1dâ\928îÓ0Mã]eúöÓ»·ô\8b5·ð\10]\98¼®p\1f\10l'ÞÙn6´GÝ _\19þëÅd0\1a$£á8Þ;Ò\1eÇ~\9f\9düzò\ 5ù\ f2Eendstream
-endobj
-1410 0 obj<</Type/Page/Parent 1369 0 R/Contents 1411 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 523 0 R>>endobj
-1411 0 obj<</Filter/FlateDecode/Length 1504 >>stream
-x\ 1\85V]oÛ8\10|ϯXä¥)\90¨þ¶[àpp¾
-\ 3\89\9bÖ:\18\aä\85\96h\9b\rEº"\15ÇÿþfIÉMÔ\1e\8a \86e\91»³³³Cþ8éR\a\7f]\1a÷¨?¢¬8é$\1d\1aöúÉ\84\ 6\931¾÷ð_JZó\v,=~|û|ÒëL\92\ 1\rÆäG\ 5õ\86ä[?iZ\84@\83Ñ\90Wü\12\88ú\93N2úÝ\8bq÷×\r\97éÉ\87Û\8fÔ\1dSº\ 6ØѤKi\1e t(ÍκI·\93Ðr+<ÍÖ\94n\95Ù8º¶æ\9d§¥-\9fþ~\9f~Çþ\ 1u±\8d÷_ôÆÈ\9dægXm¬çõ´ÇBGÂät°\159/JOÞ\12¿|¢ÓýÖÒ¾´^ò\ f\8evJK²kò¥pÛSü&\rÍÈU\9b\8dt>\ 4È-bÈ\1dõHl\842ôx\86Ð\8c\ 3Ù»}Ð\85ìáÍã{òJë°)\13º ÜîMR¯ì\8dÀ\ 5V¦\9c\80q\15j³õè\86È9)\19Çõlúyþe1[$þÅ\87
-øÕíôkÂlð.\81ö¹\90Åù*{\8ax}y\b1
-¡4\13 \15 Û²\85ÑȽÛ\94¶Ú¡\ 2mí\13¡\16\ eÿífz}\7fCk[R.=B¸Ç÷ -D±\12´\15\8eV\12\88]\95eÒ¹u¥õ\ 1\eAªÖ2'´ÉomåÀ\88c\16\9dòÒµò¢\1d:ß«\\9e\93³T\88Ã
-%ØBZ#Ij'C\92
-d\97´+íJË"\14ÏÙí³,3¬&å\13ú\17\fd¶ÒH¬\11«Âf®`¹\¶r2\ eî¹Ë\84¡\95\0QʹJ\ 6\8c¼Ãqu\17¹â&·;´l:´V/!|\ 3éáîfº¸!'¡,\0â\1a¨Úå\ 2%G}It<«
-i¼ðʲRÀ©³U\99IÀÎ%\ 4\ 2Ô\9eÅ\r\10-ÈF¢å;Y:lܳ\8cÖ
-y@\8b\14NÉ2 \f\93\ 3\19\ 5å÷yº ¨02Ý\84®\95Ø\18ëX\0\ f\91ÄÐ\89Ö´Ô³ÂZÚ\8agÐ\1a{\19\ 1×\95¢\1cæ`\ 3¬\f\17º¬C;ʶbçe\19^°êl\84É\8bêÍ\7f\0Ú\83´2»\934»þ?x\97\a\bq-*ík\15¢Ï\98gZi\81\ 1võî\84ÝÁ¡\11Âàe\1c»\12Ì\19L\1dDk_°§¨0\bA*¡Ö7!ZôÏ®\8f3\86\99d\95ï\85 ¾Á*\130\17sñ\16@$\89\89\fí2\12ó\0>\1aQ¾3Ò¯\94u\11ð;rÅ*ɬY·òÚ\1dK%¡iSÁÃ\95{\e0@g\82!Z|Hï¹Å<®ÁÀ\90\92\r\ fè¡>ö@x
-\ 6\ 6*Ì\8f\¹?4¥\9fÐÕÖFíp&èÇÛÌjº\93ÏR3âߨ(ÅÂÅý%÷=.æq-\84A÷\94Ð2ó\ eQ«²Ä8\80Íè'®Úílé\1d\rÏ \16É\16rõåÛÍyø|¸ûgqNwÓùýtÞ=oñ\14\7f\86\a£¬yÚm\ fmp\ 6ÌzÆeHÚó\8c\15âE\15Uñ\13 ¨ª\ 14Þ\17KÃ\99\19\8e\93³×=úYñY0gÖ\e\ 6¼\16&\94\a\14µE#\17\9eA\\vó\8a\8f\90Ø(IÏ\ 2\ f\85ønKå\ fG¯l×13du\8e\ 1\83í9\b#8Vä\8e\95\ 6÷\8cc»¶Ut\a#Ù\97E\9cEÖ\1eóÉLF¼Z\15*º\11\ 3\ 4P¦ÜÛ\16Ð ¤ ³Â:îVð|ø\9fÌ¡«P\9d±{ìu\ e\87Ë\93Ä\8a\10ì(þ׳\12VáµiZ\19\91X£\ f´¥Ä\89eXÍ"\7fÆ´\89M8\8a\9b
-"©ÀÌ\14\ 6·µ+\97U8\ 11¡l\93Ëõr\83îJ'Ëgö`ô'\13 \0\aÑN8\87±ÈÛ\87Q8óøدE{\ e©H\ eGà\13´7ê«¿ôp\8c\86FÃ\87!]\1cE\88\1fíæ\98\ 1d\ 1 O¦ÉQK«F\80*ι\82\8cëdÂ^yÄi\13\ 4ÔbÐþ:¥h\a,ÏPpH×Ö\bë\90\89{ËZk@\98¼FìÌ\9f¶l\1a¸d\18¸\b;\8cßÖ)´Â\84:\1cVró\89]*\v?´çoY\eë<eJðôq\88kB]ls¹YÈx 7sôx\86EÀj*¡Ñ\12´\97¡\14ÌV}ÕhG\98ãbö\89Ò\9f\83º+\15løG%+n;\9bGÃ#ÏB8#\8fR\8cN\19-8½zø0{ 4\96eÑ\8cmÓöV\93bïYN Ý\ 2aà¾\16\99\8a\17/-ù´\9cÃÓe¥Úa¡\ eF³Â\96p%\83¼~\87Ú\9aVÞ\90Ç\1dp½,`\96qÐXÏU!V\981\11\15¾ª6\81¦\ f·\93Ú¨º#Üæ'}\1a\81ø \9fè\8béýå\94mû;|\17÷åW·\10NyÑl¸\18w>\1eï\f\7f¸f\ fÆ\83d<\9aà\92Í\97\8c>ǹIO¾\9eü\aÚ\ 6êaendstream
-endobj
-1412 0 obj<</Type/Page/Parent 1369 0 R/Contents 1413 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1413 0 obj<</Filter/FlateDecode/Length 1741 >>stream
-x\ 1\95WMoÛF\10½ûW\ft©\ 3X\8c$+\92}ÈÁ_\ 1\82:¶kÉI\ 3\18)Vä2Ú\84ä2»K+ú÷}3K*
-í\1e\8a"\ 5-îÎÇ\9b÷f\86?\ eÆ4Â\7fc\9aOèxFiy0JFôæÍqrBÓ\939\9e'øç4åòâô4\99ö\7f?_\1e¼~wJã)-s\98\9a\9dà!#\98\19\8dh\99\1e\8e\93ñ(\99&tçL\15Lõ\95rgKz¸yÿ7\ 5K\8a.
-£«@w\17¯\96ß`hJãq44\9cÌaèpi©ñ\1a\ak6 \1d\85µ
-d<©'e
-µ*4=\19\85÷¾\\rWÊë\8c¼vO8(\8e\145\95ùIkë\ 3mLXÓõÝ=mm\83?\8a\82*\8dã\b#µem
-Í!\8ch8>N&ì:¬5[Mc\84µ³_\9d*\13ú\8cÛxUín\9bÊ\a\ 5kr>u¦\ e4À= x\90нVp\ 2[|Î5i0¶Â3\9b\96#\94[×ó\Z@\9eé\80\f}Ò¾\9bÌ\80=\ 3²ÖxÉ\0\14\9e\ 1\|^|$\1f¶\0ÂGç\82Pfµ§²I×1,Uj<0þ)Be\90Zï\89ßú§\84Þ\a\80PÁaå÷ã|æ}¡Ù\8e¦\8b\87»\ 5\95ªjTÁñã\ eþ_*ÉMl\13P\85 õnêXº]í\9f\95Dl \19\10T¬a\ f\8fXQAb\9fkÃãqÄDHö&¡k\9b~\87\1f¾ý\ 2\95n+ðÈiE\9bµ\ 1.Þ\96:\98\120¥
-\14ó\14\9cm\98OÀ¶\88\86^Æ\1e6(l,\85m\8d[6ïN·v;R4ÕÚ1,\80{µåR}8oÉ\99\10ÊH¹q %Ü\r\9cNË:C\83^ú1^ÔÍnPvj Ä8LüàTõUs «m@Dà\96"[\83¡9H\1d]y8¨2öÅÕ\edºÚRi3í\aø\ 1\82â\9c|S\93\e\9d=s\ fSJ\8c±\ 1¶Ü\aæþ·ø\91$¨\11L꡾\fR|`\râ*d¹¥Ìä9(\fÑ\8bB\7fO½½ðÉT\19\92Mè£v\1eza\98{Q-T¹R´Ò\0X£KMh\9eP\17\87øYÒÜ48Õ
-\9cÄïyZ\85âñðñUì\a }Ð¥h\81\ f\9b².tÉ!Aå(\1a:Þ~=z\9eW:l4 ù\95H\8c%Ö\ 5A/×È5Uè\106 BÊ\9b¢ØB_\ ef\ 3e\r"³À\bh@= ¤G\82m\99$\92H
-\8e>Wièy\8få¢\16¡\8e\fp(ü\88É·¼`:´ä\80
-ásòåxBPëäËlz\84\ 6\83Jf¬K4$öÖ\12ëv!ÁôüJ\1fmu\81\vHÈ7um]ðB»è\a\ 5ï\1c\8d\13Z\0Yá7ãP[ï\rË\vq´P°\r\94Çç,\ e\89Ùé\1f\8döý\94ÑPPB\ 4\ f\9bKi\7fLWP\8c9\8c§®\10©öG0oã+ø\ 1ö\85A¥3â[}Òƪ1u\14¤\11\9dì\98à{\1c\90\19Qè \114È)Ð1a :\86Nx^l\19L\ 1*\12\f}5'Õ\ 3r¯*\92³\14t\ fþ\16\ 3\ fB×(\10\14kÁ\ 3Ì\17Ì?4\1d8\8bz\1f\r\19\91#\8ai¬\91\ 3\8b\eDh\r\10\14Tõ|·\ 6D\8f]\88g0maÖI ~#®g\9a£uIJ\80{£¶Ï@\84âÒ\0PöÛ\eùµm\8a\8cÒµF\83âùÀ\99\82(QÌü-\13\1f¨\ 3ù\8d3à)Ï%&bl4 z\ 6î\85\ 6úeÈev#È^>\bhOÚ\eëàD0`õ¡ú\1e-S|\948\b\12¡ß:íc\13tu\9apX\99L?\11\10\ fÔ¢ä]A\150Íí«Ò`\95W\88Wù\9eóVï±w²\16xù\0Â{ô@ä¥ú\ e\16Æy"Iî``\0 Û\ e\ 1~d\84Éü\9a(¦ï\13ü\ 4*h®ì\bx`\1f9GKÕ¹j\8aÐRAÄÉnws¬õ»áEÿ¬\v\93\1a)\99ÿ\1e#\96é\14Ó9¢\15\867BÀ\92ÔË\17\13\1d\8b\8dÔ{\97Ð[ÚÆ\19\ 2ËкlU»\8ccýY\13\\ôpx\7f¡ô}Jñ\82Åõ\93\ 5'3^\96<\84\18i¿\83\12;[«ÇƳ\8fA÷æ-ú.ö.éÂ(+&\ 1\1a°°0`\ f\ 4)Öh\1fÌ\ 1Õo4\99þÀæ\12ûÚ.GÐ7¾\90É\8e,\1f\ f=/V
-ZÉ°ÍúÇW \10·PxK±\82¶uÈ¥\ 4"X\1d\1aW¡\85`àî-\f=|#H\W\r)tì\92ö °Á>Ò\84\8fÛ?û\90-Ñ\15Ú\11\9f\16
-\ 4ßÛJp\81cØ\9fùÒFy«æ©\8fªrý\81wÍÌ\88;\9cP\ 5©ò°ç\9d\837 P®\171VTíJ\83½jÃKÄn!R)\8b¦ë\ 2Ð!Êo7à\9a7%xª*m\eß©Ú`\82ÈNAgÝ\ 4bµ*/\9d£çñòêæó?7·7WG$\8f÷Wg\97íã§û÷Ë+\9enòâìúz\7fX\b\97dÁÁÈåu\1fi®LaB»\ 6õÜ´K²Xzwq."\95?.1\1cùì\7f¯¡³\84>\0I.Õ\ 3öÖ
-\9b·\88ø\85\85\14Ã\81?EdqéfX`¾Æ[ÝX¾»\88]\82«\18\87KüÀÁß \1d·\17\9e\9e\16\9b JÀ\95î, ÷Ô\ 3`Ë[yÇ\98îã¦[ä±r'X\rs\9e\99T+ì\91Ü®÷¿=^¿;i?ÊÆ3|\11\9e\1cÓl\8eO:þ\16Y\9c}8?ç\9dýÆ\8bÍ¥M\e^¢\84A\fÒ°»0\9c\8fNùüÿú\18\9cΧÉ|v\82oJ¾9e\83WË\83¿\ eþ\ 5®ÂÓÚendstream
-endobj
-1414 0 obj<</Type/Page/Parent 1369 0 R/Contents 1415 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 11 0 R>>/XObject<<>>>>>>endobj
-1415 0 obj<</Filter/FlateDecode/Length 166 >>stream
-x\ 15ÎQ\v\820\14\ 5à÷ý\8aóh\ f®M×6\1fÕ
-z(\8c\16ô*Sc\92\8edýÿ&\11\97\ 3\87{ùྠ\a\8bá2ä\12v"\8c2H]P\ 1¡UìYÌÒc \95!Û£\ 6ç0\ 3¸\8c7\9dC±\ 2¦CD\8cÁØäV\9e«\12ÍâÇÞ\ 6ì½ýLý\1cÚàü¼1#Iÿ.ýÁ\84SΨ Q¸9¸ù\89añ\13î\97Ó\ 3Á£EýrÑ£©W-\94 Jêø¯é\12¾[W\aC®ä\v5\f1\86endstream
-endobj
-1416 0 obj<</Type/Page/Parent 1369 0 R/Contents 1417 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1417 0 obj<</Filter/FlateDecode/Length 1600 >>stream
-x\ 1\8dWMSãF\10½ó+º¸\0UFØ\86`²7ØÍVqX³)\9cÊ!¤R#idMV\9aQf$¼þ÷ûºG\12Fì&)
-0h¦?^¿~ÝúçhAs|-hµ¤ËkÊê£y2§«\9bëä\1a?Wø¼Ä·×TÈ\83Å|\95ÜL\1fÜm\8e.>þLË9m
-غ^ÝÐ&'Ø\99ã?ÙéûR5ö0D÷uãݳÎ)õn\17\8cÝ\92±\14T\9dª³Íßbd±\8aFÎ/¯\92%Ì\9c.\93EB\ fÏÚ?\e½#W\8cWã\8d+Z,ú\eË\15bÆ\8dÇOwdu»sþ\v{`\8f&×\81\14Õ:+\955¡¦tO»Òd%e\95Ѷ\r\94)K*Ëtàs\95 -»ªUV\1a\8b«\88R\r6g$ÁÎé|q\19C\fî<SU\85´\8e%/-\ 6\8e\13Ú\94&Dc\99³26¼\98lKÕ\92\ 2°^«|O\83Ã\ 2(\15¦Ò¤l~á<B7¶¥À¹#29Ó\96Úsæ\aîÇ(w¦E¸\84#C¬\1cB\87ð[Ê\1d\fX×"\95¬êrý\12HÄ\ 1\91Ø\93\96²ÎãC[íI¥\88\ 3QåN\ 2@d
-_B2q¾\81³\83¤ \97Z=\eXè\ 2\17\1a\96ª\8a¸&=Ô ½w¶0ÛΫÖ8Ë8óÓ\91\11¥
-\94jm¹p\88¡Æ©\8c
-7Í:¸ZÓ#S\87\1dù0\83_\9b!dÆ<wYW#\8f!ÚåurÅÔ¸\eh·3\bjý°!f \99\82¬\829¯\83«:\89ªð®¦µnïî\1f\1eå¡À\7fÿ\99T\9eãX\0\9a#¤Eg3¾4\81&sÀ2\ 3\96 ý\164ç©è÷ûõã\80'Ce¶%\90Â1W#Þ\1c\80\ 1reð\v¸\1e\84\83ËC0OLð§³Ã &\8eÇ\10\93è\ f\ 5@·Á\íZ\rï[\86f(\87°*er\8e\1e\18\8b¿Ú}£A\16\0Ï\15@\9d\84°Ü&\f[ª'>û.\8b\ 5·{rLT4\9c\ 2ç\11ü\ 4^©\vkÆa»K\85\96 db,Sè\9aÆy&í¡J|¯ç\85\bÖí¨è* Ú_\ 4\93ú\8as'ôL\15Ù Ã\91ÈQ[§9w\1dóWUÁ\117¬wÒÔ °k\18\ 2Ö\81IÚ\¦P§ \8e\17±u\9fN\83~ùßÓéOOgOgS\1eFÞFÍ\81
-\88æ8hÈÐJµ
-¬\98\0\1f\9ca\8an½ë\1a \90=ªÔT¦ÝËsQO.â\80Uîj.få¶\88x\12.g\182o\1a(\1e2e¼Ô³2\157{B\8f\büÃçÛûuÒ~mÅzí P\87,\0\11^9ø\97Ì\18F\95õéõ\97úĤ*o\13ì\153²Fø\ 6å\92VÍP
-\ 5ò²2\aâæ\9cdV½\85\8fËÅÝ\ 4\vÐ;\bÜ(áC\a²5\f%h\90Ïûhbd\87Í!]øÌÂ\ 2YEg@\bJ½\9f¸¯\15ªa\98?Ü(\80\96MÏXxñùU{³ì§è\8eHh)éÞu~ô\b1{\13S\84×ÜÄ\ 2\ eîQ(]WåÒ\93A·½ "ë4\ 6ü\1aö)\9fÄ
-ëÐ\98\15Pú\94ù8%úzC\1f\84Xï\b\14Ð\18\8coa\9d\11GTw<<-\9aPcjS©\80\9d³z Í\84\ 1\r\8e\8c\ 4\9fMPõz«|^ñP\86\86ìJ\8d8}\ fêz3ë³å&\19\15Gd\v\87_'\1e¹\14ú]\80\ 5@\8aÔOÖ)Â\7f¼@,ºÀ}
-<¹ÇylA1¤c\ f´|Fi\87RKµyÈZÍ\9b\84ò2×C£3S\18^\11d(\ e\95\ f\f×t¬\1d\18Mh½¹}\94Íä\8dw¡Ì«³`1\16\1có\15Ñ¡V\9c\19 \92~\17iÔöÙxgYù' £\9c\98KÜ"·Ü"\183\\8f\1fr\97KÌ\1ceÊ\8c\8eN«É\96©&J\94ÑAúëÍÆÄ1\9dG\92¼\ 4ö\9f>\99F\9c\92\ä?¢lG \ f#øsZÒ\8d£-Úc\98\ 6¬\972ù9\e«ãØõ\9d\1d\rv¡SU¬ªèÏpfÈüxäìq?\1cÞÎ\86q.ÀY?NÀa´ÿx·'pÊã\1fº¢¨Q\18v®\98F\1fÇ\85Ì%îVÙx0ç\ 6ϱ㡾ðp\19×IÓ\ 6]a4¡IÆä¹â`)÷RèR¬Ê¨\11SwB\8c7²%=\13G!Ë\9aT\ 1\80äbý¤³\ 2Ú 5\9do\1c\16¤wðb\1dv#ͬÃyf$Ó\ 6²¬=ÜÎøâÄ©þªêf\18FÇýÊ2Ø9\8eòú2^±ÅbOT[-\88ý`¡¸Lès\%\ f6*v{ññ;\9bÄ}A¼Z"W¨\ 4¯x¼\16\vW\10º¥Ò5:®\18\9c \86l\ 2\ eÆÉ/D)uÕ\88\f¶^e_``\17\17ò~\99Å\84\83((ÊuÚm'©WÐKÔ´ %æ\11]
-ª<Sú\97\18Þ\85ÑM·<VQ½~\ 6p\14ýÒ>,\ fòö"µ\80Þ\80õXuZ\8cñ8\9bt\1cì5#9íJyõèßdâ\1cLr\15wè\8b\8f7//Z\97óøÞó¿_ì®VWÉêú\ 6ï\86ØÁ\17×\9c÷/\9b£_\8f¾\ 1:(ϳendstream
-endobj
-1418 0 obj<</Type/Page/Parent 1369 0 R/Contents 1419 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1419 0 obj<</Filter/FlateDecode/Length 1738 >>stream
-x\ 1WÛnÛF\10}÷W\f\8c\ 2µ\11\89\16eŲóRø\16Ô\ fq][m^\ 4\14+r)mLr\19îR\82\0\7f|Ï\fI\99bâ¦(Ê8\0/»;3gÎ\9c\19}=\bi\84\7f!MÇtzFQv0
-Fô~4 Îhr>Åý\18ÿKM\89|\18O¾óájvpòqBaH³\ 4g\9d\9dOi\16\13Î\19\8dh\16\1dÝ[¯É¯\94'\93\90ñ\14[íò\9f=mlùL\89-ik«\ 1\16è\9cïÈl\95Æä¼ISZhR\8b\14Û-ùmÁÇhrº\ë\92r\95ᣣ9®§ÛÇ?o\1fÉädz/\a#\1a\86§Á\18>\1c%&Õ\99ÊÕ\12ëÅÀ
-öuîñ¨ò\98º\9f\e³±qEª¶b(5Î\93MH\95IÅ\r·R¥vAce|\16LØÊ\93\85'\85¶\ 5\1cM\fÎ]\94vãL¾¤\ 4\e\1d\82\88TåÄù-¢çØWj]\a³LíB¥t¸¬4\8c©(²Uî\ f\11£ç\98\15Ujâö}k¸\rïQg:[Hl@\97±¹{¸þ\89"\9bç:òÆæx\87\ f\1c\87\93ϵÿd\1c»!è\89Ý\81 áW\95\93\fd\15\\11\ f[û²ª\87mãkëS\vÆeê,ΣÔ
-v
\r,
\80\8d\96Ú{
\ 6ea¼G®
\175ÈEi
\91à
\8cqöÖ
\12²µ¥B
\95H.²äHbÐ
\b)Ã
\97\18¡Àm,ͳEÜóÇäÈ¿öq
\80ð
\93\80f+DéK
\13=s¸À2
\87C
\9c\ 5W¨HsRüFÃ
\rFÍ
\16\ 2\16\eàÇ
\9dy
\9a\1féå
\a\1aÆc
\1cí¼V1Û
\1eÆ4
\9e\1f\ fzæeó«
\15>gx%¸
\ eï
\e\ 3. {½!
\90×!7
\88
\8e\83\18\9cÜnÀ
\96\922
\8b\87Ô<ë
\14ðXÄ]
\96H%
\1e\84X¨
\8f²g
\17\Sq¤
\98<p
\1f\0HY©8
\ 6QÝ
\80\9c\85ë8
\15ß±
\bqÃ1
\80\0\93LÃ\ëXÇý
\14Î
\18\12¬+
\91ª%µ j2)¼`D
\99YXd°êÕ
\85Ö,üÈ
\94{&T÷Ý
\ 35Þp"6¥
\ 5\ 5æG®Ð
\91I
\8cîgqcüJ
\92ph¸L
\13ÎÕa
\9b Dâ²
\85$x~Ì8
\9c|¼
\10jò3<
\9dÔå8
\ e&
\ 1]µ%¨¢Ò:G®ZÀ'WozÕªáx
-¡C\r\7fní\96:Õ\0\8a\93ó¤²\85¢0¸\bÂéüH¥ÅJ\85\82²Zص\9e\1f7\vV\10¡\ 5S©*bå58d¡1¢\17P\e<¸ª(l)hõ\92Wê"5\91\12öÁ è\ 6§\9fëuÏqZ@\17bU\1a¨\8f\90(²1²\88\8c×Üuu½\8a\e@»vBE+£EgÌN³Zé\90òp\8dJÄÚE¥Y\80\1d+Ð\90=fùá\ 2J´ò\15\18Y\15L£Ø$\89\ 6s</àZÞ\1dÛVÿ\8c÷êý@\84)¨º\9cf×\ f' C\93\v°Àè ¥,R¤¹ð\18@HCi+©\7fÙ\kf¡\90Ç\1d×zHúR%\89\89\90\14î!¢`\1c\ 4üf\ 1DF¡F\90\8eÏw÷O0Ä\r\84%bï\ 5\10gØñG7XÅ\9dé^û«»ß\9e¤×¸o*>Mí\86\ 5»\8aÑë0\1enå.\13\8c/hg"¼\b0¶¼U\ 1S.púZérˤCIõ½4BÛN[Cbä\98µQ»\13\0Û\1f7\ fЮè\19qC6\85ráé\94=ê\1d
-\95\ 55r\80Ï\10\94@\aë9^Õ5\8drí\83Ì5ϾëDU©\87Ì£EÿËè[\9f±}\97Cð«´\99x'ñ3"k=ÓÂ×L\ 3M,\87\17Í2i\10\9cØ\9aS´á¡\81\95¾38@\bmÚ´[\1e\1aDx»û\156°ÚÕgô\f³ \81\8bh\1du¾º\fj\96¶äoÛñ@°\94b\96={
-Äé\10\89ÞI{\rcëÐ\80]\87;[ú\8cQ\ 2s\ 4]¼\1fìîïg}\16"kµNÕ¬v5÷wóE\87\8b ×~~\97fÍ\rPè\91q^Aü_¯Q\9fR\1f\ 3\16o¼DßTÚC\85{¬YV(W\9e2æGL\1eø{ñ^4 wp\14Q éüWwÙ¦ú\1fJ[èÒCÉ\ 6\ 4M\ 3î`\90 Ò\8a
-\8a\98Ï\93°zv{G¶Ý@&9icÒ\110\95Õ\1d!|í\ba@¿BÜxø¤nBjâ<\89\ f¿°Áî4\8b\ eÁýáºÓE^· 8ųIâ(ÁXå\91\1eð\ 4æ\95É\85Ï(\14Ã\93af×ü\f\8dóÐð;\9e°Àeõ\8c\14|2ì\91M|/Z\aõ.1\1dnµÂ(\84Da\84\92j\11õ\97:h4\9e«\ 2Î4\9cªç¹\9a\16©Zr{B¹Ç\9c\bdz*º¿\82\ fÀ\83\r\fP5~Õ3Í\8aQw>è\83tÄAÃ36£
-io`Ô\ePò0ßr\ 4°ì¸Þ\1f5®1\a\19æ\80jû\0ØWË6ÄÁ²Â:úPçdD\17M^ÇM§§\1f_ó£\9bOWõ°À\ 2:
-Î9\9b{ûîÿ.ë\17¸»j?áþº¹ÇíMçõm\vÕ÷\ e£\97v%uo»÷\9d\15ôòæYÃÿv½yÞ\9e;\8dZ\86¯¾îݽíÕ;xõnoí\9b\ f²ôMw^\1eC`ò(]\1e¿>¿¹\9a/c|xy\1cÿ\ 3Nÿ\9bG{\0}ãOïÅÛ\bÉ1\r¾ì}çjÞ\9e¾¾\92cN>\9e7¿\9dÃ3üà>?Å/èö\97å姫K\82b~á\19áÆFU\86éKD\97\91\1d¶\e\86Ó\11j#>úÑè;\99N\82éÙ9¦e,\ e§|Æíìà÷\83¿\ 1~5Ô7endstream
-endobj
-1420 0 obj<</Type/Page/Parent 1369 0 R/Contents 1421 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
-1421 0 obj<</Filter/FlateDecode/Length 1763 >>stream
-x\ 1}X]O#7\14}çWÜ7@JfóA\81VU¥\ 4\96
-µ\ 4
-¬ö\ 5iåÌ8ÄËd\9cÚ\1eRªþø\9ek{&\13\13v\90&É\8c}?Ͻ÷\98¿\ f\864Àß\90ÎF4>¥|u0}<øt5 \9féq\81\17§çøRÐ \e\f\ 6ô\98\1f\11õ?¼(\\1f¾ï¼8~ü~0 þp\90\9dC<¤þç÷vïñQ\14\8a\8fð²ûeû\88\9f¦2g£o\13"ܧþ~\815øq\89\8fæ\9a\8dy\ 5.|Á¢ø\8d\17ú\vO/)\95Ú¼ì|>\1d}½\9e=<\1dóÒOW'4\1c\86ØõG§ìÜ\85®¬²NUϤ\174&[Ï+é,=\1d\r{4êÑøé\98r]U2w² ù\e¹\8d&£k'\r/ºÇªû\11ÖôÉ-¥\95Thª´£µ°\96æF\8b"\17ÖÙ\8c\1e¼\\1a6\16\8f³\11«_
-K?ÑJäKUIKº"åzÑ\b\1a\11¿>i_·/ÆÉ\8b\8c&ÖÖ+I\vmØ\ eZé\95¬\1c¾
-G¢,\83m\89êV©0\92]\¨çÚÀG§i.IU^\90\15\90ºÑæå\19>¯á0k°jµ.U®\9c\82ÉV¼È§ã\8cn\82\ f4\e~»`?B \81]e\13Å\1d]pïR¯\ 4\94Ý LÒÐÔè\8dÅçÓ\91\92\19bA\e\ 5ós]\96ÂIo\11\82\8a\15T"i¶õ·µpÇ\12à)Ql×Shgl\10\14¾B§¨\8a&X¤\11EÓ\ 6\9eÞ\87ÈÈgX\805X¨\fͤ\9b^ß>P\85xY\18í\96©f\97Å'£Óì\84S?±\8d6¸³\93\8c¹Ö\f¶zÝ#Y\ 2x
-\18õ®®B\90B\b\80?\1f\1c\87\ 4к\14¹ä°K¤\81\91Ì(pK#ebGÄw\8b\18\ f\91¨=än£ \93À^¨Òä1J\83ãå«0y5¦~¢\14Ƥ>¾TzS\112Pê\\94ðß\a³õ,\ 2\19\91]\vãT^\97\ 2¸ó5\94\ 53¹4\ 4$\14¯¢râ\99\11\9bh\85Y\15×5\16r4ö)êúÉë\08@ÄJ\87àóï½àL\13y»'ê\84& ´½mjC5¾+6½X\0Fv)\f\eËXT¹Ç\10\80\8fx\84\ e\ 2\ fPÊpã-q\92\91é%ðæ\10çFDF\8f?pÛ\ 3%\16©Ç\91\91¹T¯¾È\90¬V3G¹ \17)\11\90D7vhS4h[\88<v\1c\8ev\ 3)\84³5O4Þ±exÁ5Ì»\83\1cD?$j.Ð\91\e©\ 1\11~iFWÚ$&8\96\83\16+\ 1ÇÐ\ 2»=¯±\ 2>|\14ö&ÜVûjlëÐ\87\ 4}\10\85Àî\ 43\12ål\7f
-\ 6\98\18j0\ 2 ç·\7f\84=ol\Éî£5ZUHnÃ\87¢vKm\94\13\ eY9ôõ\1f[yì2Ê%öÄ\fZzU"½Mc\f9tÌe.jdX4ÑAVdåGÛGpayï$&ÊW5\92¹\r\98\1f\1c\8dg?ª@F\97[Ö>û\82\ e\9d\81\1cY\1czÔ\1d¢-«\85\12ó\12\ 10ÒêÚä²\89ø0\8eÐ\9bÎð\fm»©=È\rE³·ö\81?)\f:È\1cÓ\9c6KÄ Ì\99XIè=\1dðY\8cÜ×´\99ò¤\9fsð
-\85Ø»ò-\84²á\ 2\r®=ø\90;Îj¥«þnf\e\7fÚ¹ÀU\84<µò#¼\ 1_\1cy¥Ö/Ü\9a\16\98\89\98\84\98\94¡êYI§ð,½é\1a\93».\v6\8aç9\1e\98¦/%É«¤z^εYj]\90Zø½¬\b\16c#º"Ê@t[q\93Y\83}\ e\8cg\83ÁË2;ä´?: \83î!P\9f-'\9b\86\11\1eG>Ñ\9f¨£Æ È9\ 3\eÝnÙ%¶xÎ\v\92=AÏp»ÉS\91íO\9e\e\13L³á·©¿_øû¥¿\7f\8e²FÃÌÓ k´Ý\1c\98êÎo\96\ 5þêï,kK7v¥\8c;»\98´v.æ¸Ø \82ëï,\ 5+B ßQÕ\19XA\80´Gu\v\91¦+\84f\1ez\9d\95\98\9b L=ä¦sìð¥.r£AOEõÖtÙ¸5\85âLoHþ#Và¦\r\9f\e1s «\19\1060\ 3\9eÄh* \9c\1e\80{{\1d Äx
-4F4s5Lý&\8d±\9eCÑ\81Xi²oU¾4ºRÿ\ 2À {\9dzô\1c+£k\aÆ\8dié+\ 6ìüïZ\9a·XÀ;äîé\88ó\ 3¢\1e\99\ 5]ß%zEQ Å ,Öê\!v\85×á}\9auè\1d}½½ÿã÷ûÛ/w¿\r§¿Æ¾Ê¼\8f6\bDÃ\vÃY\ 1\r5P\88D×.ÝA\r3Ta\1c\13G¯p\87\97nã\8d0²\92@\10ÓlÝV \80\1e§L®Â,m\9c\8a\8c0ò\99D=¤:Y\96\9eþø\96 p+Ù\9bIÄ/q&\80\a§\15Äßʪàð\8bHè'U¥kØå\8f#k\91¿\80ZÁ\ 1A_.ïÐá\8c£áø\1c\8d\85_ølB/Î\ eÛ¼\a2Í-h\9eR\9f\ 2\r\925!9\ f\9eÁ\7f®êÕ\bl ,cV\82WìÊ^"ç!\ 6\83Yz[Dá,\10x<\9eûP&\ eû\89\91\91\8f7\v/Â\11&\89j;\8dyÉ\8dç·û¢\ 1\1d6_Ê¢.\ 1ã\94am\ 3\ 1\16\80\923\12\0Ç\9cEm°T\8e6¸£O.zB\13ÆÉ\82\ f&s\fÃN$½\0hÀ\98(4ê\99÷wê)=¤ù1S*\1c-~aï?]\9dÇ\93óðô,\e\9c\8fñ¿\a\7f\80}\98ÜL'tgôw\f@\849Ç1\14|\9cå}ýfyÿlÀÿ«8\1ae'Y8åùä\85N\14Û\ fo89;ÉÎNÏñÏ\r,\1e\9eó£Ï\8f\a\7f\1dü\ fÆzbþendstream
-endobj
-1422 0 obj<</Type/Page/Parent 1369 0 R/Contents 1423 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
-1423 0 obj<</Filter/FlateDecode/Length 912 >>stream
-x\ 1íWK\8fÚ0\10¾ó+æ\b\15Ió ÀöÆc÷Ô®Z\15©\17$d\82Ùx\17ì®í\80¶¿¾3v\82Ù\88ªÝöR©\e$gb23ßØão&\8f\9d\14\12ü¥0Ê \1fB±ïL\17\9d·7 \Áb\8b\7f\fÇ(l \89\93$\81EÑýR%·\10®©VGÃá#3\96k\9cþ \8cí-î; Di\12\8fQ¹\e¹+¨\80\9f¨G\9c'©¥ãý¤Aé6]ÍÂ\13\0>Oú4NÝ8sãÜ\8d×}hY;W¼(ßf«É²ûfÙC\ 3Ùj\1aÄY\10çN¬-gi<¤Ø<Î,\18%õð\848Ѳ7êFÂ\99æ/Æ\87Ñ6H0ä \9eð¥+\8f\ fí§«ë\9fCÍ\ 3¸Û|5\ fO\b5wPs·¤ù\8a â\eí\80¹>pmà(l \f\9c#`[Ú|[ò=0ÍA*\19±Ê\96J\vˬ8à\fÛs\13\93©·7\ 3HS\9f\QæÖpbQU\18ø¦\84´P\192¿SêAÈ;\10\92Ì
-\r\98uG¥\1fð.îʵҥR\eP\12\8cKH\83\19¬4d\bk·\ 3Ã90¼£&Ê\1e/¾ºV¶ì7+\9fÇ\19í\9f÷v²\ 3ymÁ\92\1d%wOÎXË\90G¤\8e\8dw\17\18&|6\8c\adtA~1bÔ}¬¸,8¨-ð\ 3\97Ö &fA\15E¥ù\ 6¶\88Ù%\8cTG?iÜ\1cùÛ©\82í`ïÏÕÚ\9d2\1d\ 2\86¼\15ȲK\9bµìÅðµä\12\84\ 5ó$\8bR+)¾s\ 3Þ\0ìðtÖ{G>6jÏp\85[NÐ\14¥[\8f\8cÜq|\9f\16îl1[\9e1,-ÐEXÄ´\ fLnPC!3\84é,\86\89K\14\97x%3ç\107>£ÐóÌ)\1fDÁ"Ê4F\9e[.\9fEC©\82\81=ð:¿NÜ\15e\ 3¿\1fÿ=i\9d²¾fäóS\7fQ&*hH\ 6ù \88'¾¡d#¬wæ¿ãæ¸]\¾óIw\96êÒòÛÔýò\rûã\ 2ö/óyÃÆ\97ù\1c)¾Å\v¦\92k$¬~]DΨçwh=\94\12b¯¬\ fëÊb-³\90· þFHtþÔw¤x\91¨\89Ù½=,JH¨ÔTôj\10ÈËÀî\88x]\11ý\ 5\11ÏNg,k\16¡suNóB`Yq(öÂ\18*\98¾ÞAMÊ1ÔP!r¬\8a\9cË\0;5¶ÁÂ\86µ\99#6±Å ±\ 6\14¥\90HãTÀ5ß«\ 3Ö'
-¢¬Ný\í_m·\18\vÁ~ÆÃ\ eÒ\89\8cá=íÍY'ùÊÆØ÷y"m²ö\95\8dÃGÂ9e^\94ÿ²$ýißûÊóMß>®ûöt8\8a\93q\ eÃá»ú\ehòq:\81OZÝóÂÂ\\15Õ\1eé\a\e\7f%)Ó£F!\1a%ô1ÙÍâA\fSêh\89°X¡\95ÁVÐ÷ñ¤0\18\râÑp\8c_\9førzES×\8bÎçÎ\ f\7f"¿aendstream
-endobj
-1424 0 obj<</Type/Page/Parent 1369 0 R/Contents 1425 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1425 0 obj<</Filter/FlateDecode/Length 1571 >>stream
-x\ 1\9dW]OãF\14}ϯ¸âe©\84M\12 \81ª\8b\ 4Ë"ñ°YZ¢VUÕ\87\89=\8eg×ö¤3cØô×÷ÜñLâ\18ª®*\94\84Ø\9eûqî=çÞü5\9aÐ\18\7f\13\9aOélFY=\1a§cº8\9bàýür\8e÷)^FR1º]\8eNïÏi2¡e\81#³Ë9-sÂãã1-³ã§m\93\95F7êoá\94n,¤{\91²!WJÊu-TCµ°N\1aZ\19ýbñ)\9a\9c*\9d\89jpÃÒ\8bª*ÊtãTÓJr\9at\96µæ\84Vûaùe4¦dr\96NáÿØ\95Ê\92-u[åðH\82àAä[|\b'É*×úpÒpl:KÏùØCAR!2CF·\1cÓ/\13Òx\9fR!Te}Ð\85®*ý¢\9au\17\8e\ fáG¶\ 3 \92hh!jiI\17\88¶Þ°%|iH\8a¬\84ó\ò\1d\ 6@5"ˤµjUIj\80\8c6_©0b]ËÆ\85|\11>£äð\929\15\bGØA¶\95F4Âr©j@ã¤=\81iï!\1am¤Z\97+Ý\9aRkÀ«¬³>ù\ 4\85\8b MRbø²ËãÆ9Yo\10
-À\ 6ð\8dÌ\1cÿ\8bØí ú}¢¾J\8c\97/L\17\85\87Ãßh´ã\8a\18YëgÎÇè\9a\9d&\aÅÛ\83ñ=qO_Ç\8dBêf\aó\1eQtEÖ:À_xÏ>¸ß\1e\16O\84Æ{\96h%åBY\9bjë;\87+\83\8c»:\85Ç|1\95{]\ 6nZÛ®\0:rßRk¹Mº\v\89²ºBó¡\1f\8d\16y\86\9e§\85t·\ f\9f\9f¨\ 1<@\ 4\ f´L\92\94\96è\rY\14@Û\92\0ͬªU%\f\ 2\19TÞ\95\82³\ 1_¼«\10%ÇKw»¬v\85\8eÝyÖ\ 1vz\7fE\13е@½/(\99\8dÓK&Á4½HéI:°lMí\ 6¦z\b±ÿ>ß\93é<\9dñ©\8f\1do\ 4=\89z%вY\89\86eöà¼jrp\9b\16KØe\9cw·káQ¶ÒyOȶï\f@h@îpÕ[\1d$\1f} ]Ïñ^\98´Õ-Õ-0\16y§Þ0È¡\8dÉÖ«\14\9d\8d~P¨4_\aöVVÀ\1eµ\8a.<Á{-\1aØõǺÒ+QÙ?q"óV£»
-ÉwX]ì´qÇ*¨\aÔ©Ýl´qô\9e¶ÒwÒ!¬A\91~\85txÝD\91;d7F>+ÝzJNÒ«\14\15,\ 5ç\88ÞÞ\b\83VbáÊe!ÚÊ\93\15æS\ 2!\18\92R<C\r\9b-é*ÇS(E´>À¶ó\ 58pÊì¤ ì`]u\10ô5øaÛõZBYso»Ý¬\8d\80¶¡\1c!..þ
-4?ñm\80`\0-\n©\92Üþ\Y\\1axÞç\0Cï\1aý\8e\8b" üx\14¢\13*Ò©\17*\12{úS×p,\9a®¤£Cì\8fÿ\vñã£\8eö_¥ä\86g}dZ±Û>I-XºÆ=i\90³w\84 ê\13¨\83'\v$X\f²a\16²f\1fX\19\8e\9dßQ\990¬\ 2\134ËÏçÅG8áVñ¤IéNÓâó2âö\7f\92\f½\ fDk\r]\81|4,\94\83 »â\a¯á^Ä90²Ó\85W¼f\ 4ú\fö\8dÑH \85b\86ܸ\vvTU\99¤\ 4wd×h\8bå \94\g-\ fC?®=\92¹Ä(¬ÐÒ\v\8dQî\ 5°§/Þp'2\90zdgä¦R\19O}Dà\a°F\0PzÔ¶\eã\8cÄÀkÄ\85Ï@ZBà ½ð\ 3½\92ß\82ª\93l\9e\15ØÀ!¦tcé\93Ê\8c¶ºpp\´èWX\889\84\ e\8e\11\81Ö\ 3·\e£\9dÎ4\16\8d®\ 2\88\9fÇ%v\1c\ 3ûè\bpéLm8\9dN\82à¡g\8f\89î)ºÑa©\bBU´®íê\rE\1cxõ¾\92ëΥǯg\91bL \9e\97j\b\v/"~Áx)\15\16\1a\8c2вßN\873`à.\8bKY@õUË`\9bë¥ì\99À³¼ß\94\91-^θ\9f\8e^\13ÜK@O²÷º\ 2ÇC\ 6Þ\14,\9a\a\9d\89ï%b[ñ²Ê\ 3B\81`§t~°ÈÆî!\85NDaê\15\89\ah\98(X ür\87iþ
-\8f\9dí¨(<´°\ eø\ 5Òëú\8e.ÒD)7{\ e!R¨ò`ò\9eð@«â\1aèÁ\e8\8e³íáqç/tËÑ£Qµ\80N÷Øt\ 4{\12ÛtØ\\8f>`\r7º\1aØ|\14\8d¬\92k¨\1dg\9b\?Æ\8eN®\97\1f\1e\93ë\ 3\83¹\12\95^[\8e12øê\82GEü¶Xú\rÀI$òf×\82\99~\9dàÂõÒ\b1öP{c\rà Íìä³a\8eïÇxÐþ¸\1c\f²äUÁ\92ß Nïÿu¾w¡½§k¿Þ!}\84?±Á7çý\v´I¾y\84k\1c~\9cpÈ<X:ÃÝO\89~²±²ð\89-µç×·ýéýeXI&3ü\94»<£Ùì¼[ý\9en>ÝÞ\10\8aö\85\17ý»¾örÄI<\90ÌÇWßµ*\9eÏÏÓùì\12?\fy±\1c³\91\8fËÑÏ£\7f\0k¯¤Yendstream
-endobj
-1426 0 obj<</Type/Page/Parent 1369 0 R/Contents 1427 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1427 0 obj<</Filter/FlateDecode/Length 1414 >>stream
-x\ 1ÍWËnÛF\14Ýë+.¼©\13È\8c$Û\92\4\ 5âæ\ 1£\88\93Æ\f²hº\18\91C\89 9£Ì\90Qõ÷=w\1e\94ÄH)²jmøÉ\99û<çÜË/\831\8dð9¦Ù\84.§\94Õ\83Q2¢ëùe2§«ù\f¿Oðe$\15\83Ûtðäå\15\8dÇ\94\16¸2\9dÏ(Í ÇG#J³ó{ÝHjV¢Á·ÒRU*I¯ß?¤tÿ&¥Û\17ôð"¥Rá¡$[/\92L«\82\8a²\92¤\v÷Ï\aQ/\ 4Yi¾JC"kJµ$aÝ£\ fw÷\ fáÉ£ôÓ`D\17ãËd\ 2ïçeceU$tWÐV·8ÓÐB7+wë\8cÏ>yy\1d">ß\94Ê\92m×km\1azJ[iý\81\98Òù\19éuSjEBåß±à#|J¿*QË_NÙ@\9e\8aT½È{\11oʪ¢B\94\155\9al#L\93\84\13\93irÅ9¥+\89z\v|5\eMkmm¹@\99l&\950¥¶ThÃ\99º
-µkÊ\f\8e ±\85âì\8dÞX\94.!\98A}\8dm(\97\rüáÈñ;½\0£\ 5âB\10ln´ùLh\17\8c(nÊ\87RåpB7×CòMãzÅÿÞ§T\8bl\85îsï\80\ 6NDé\86-\14å²52G[{>×(\ 3ã@ì\9by®kxô\89X\89ëù¿eÒeϱ\87ÈC\14!þ\9e_\ 4ë½X×\84'/oh\fT3¼/.¯|;&É4¡\87]énC\85\19Ì\88÷Í»ß_½{óþ-[Þ§ÇÅd\96L];Ñf4æT£N\96¹«"üà2в\90=\9fCWX¡Neå8¡$*ÎXóAhÐò\80jÞ0ÓÒ\97\82^\vÛ\80\82.Oüüx\8eîí3\eä~\fN?îye\v\16\8c`Ò
-zkÊZ\98m´ù\eàctUI3$Q5+Ý.W.\19E]\ f\1cå\9c\85\90:+±µ\9eи,íÇG\ e\r=ÇüÈ\83'$Pû\ 4\1c\90\91\0âE\8e\19¼\v\97\87ô0\91\90(Û\80MF×TéLT\0®Ë<\´®5`«ËÌÑ«\8f[\að\95ø\8a¤#ê\89±\fåZ8~\ 6Åc\ e-\8dn× \10Îé\ 3îhDLô\80\e°\95;è\87xzéÆ´$X\16Y¿Ñm\953>\84Bº\9a\13Í©ó9¤V \96\10\87\ 2>´\8d\9e}\8eø\e¢\89Ry\11\81\9c60ÓóËUX\ei¥²¡Ü\aQ\86¢\1aOúZ|\ 6ÿ\8f*ÓNÑXÇÄ.̾\ eÞ±\10ï\bFR}-\8dVµT<bäa\91:÷u\vÅãJ\1c \1c¨ó\9a\ e1r'´ª¶½\ 4q\89{r<«5ªÓ\15\94Xù\ 1Å\8eT\87Î<\ 3\8eÚ\19ö|2)9\97\ 2èÔ\18PË8\82\ 2nþ\Vz!ª¿À^LD¨Z\18\96\87\13ôg¶º\9bt\10¯8K\ e\8382ôöΦ'kj\ 1XàKT\16óÈÈB\1a\ 3<m¹Ì\1cü1ò¸!\85éLz£v°Bü&G%\eÝ«\ 3O\f \1a¹ÕáTQlÜ\1f~¨*#º \8a> \8aNáãDqx½\18aýÁ(\8e'\ f2ìªxä`¨\ eØ\17´ä{\871Ê+$]a\19\99^û\16Æ]ĵ%,\ 3'\10Y\8b®\ 1\a¢ùíÎ4¤Ò¯GF~iK#ûD»\97\7f7C¿?ùF\83â\98Óh\ 6Æ·\93\99\88:/\82q\19`\9d\8f
-æÎfà+67\8fÿ\83\9aEÑ\ 2å{\9dg\0uÄJè\19´h·BP@\1eó9\bX®\1dH@hKn\97\8a\8bÇÍu\fÆbfuC\ 6ö¡W\8dTýE\fb¸\ 4û\8c\hÌ74L#e]àä\90\80ó²ùɺñj[è¬ ¥Ö9\95¹\14¬¢-\9bdÃn"i8þÜW\1c\Ù¯@/ëX\8fÿ
-êª#àÿ\ 6éϵ+wè¯Ó\ f×\12 \v²ÑßZ \85{\ 3p\b]á\86l=$6\ 2b\8d1\eÀ\8b\a\864¿VlV%\9aùíhs»\15\8e\1d´,\8e\94>]R\9c;Ûïí\19Ï|L\ 4Þ\9a\ 4ë¸\r³\aHù.\1dÜ6Cg}Ñ8£L\0aý\ 1Ì/\13\f>p(c´E\fÉ*Î\ 6(-¿P`[ìÞ`¢ÆìÇ\bÐÅ\bW%ö0©Ü:\ 6Ð;\16\97M\ f¬\81\84\18Onuèû\8d»ó<¼h\8d§xm\9c_Ò\14¯\94ÐÐ\87g¯o\9fa\1fÔ\9f\10&öÁ¬å \8eíH»½õ"\1e¿\98\8d Ôùù\ fìÛW³«d6\9dc[ç{c\ eûE:øcð\ f£ÔÉ\vendstream
-endobj
-1428 0 obj<</Type/Page/Parent 1369 0 R/Contents 1429 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1429 0 obj<</Filter/FlateDecode/Length 1346 >>stream
-x\ 1½WMSãF\10½ó+:>AÕZkË`C*\9b*\9b\85Ä\a>²V\8aCÈa$\8d°@Ò\10\8d\84Wÿ>¯gFF\16f\8b\\ 2\ 5ØÖL\7f¾÷ºùç`L#|\8fiæÓdJQ~0òFtr6ñ\8eéøt\86×>~JI\89yàOfo\1f,\82\83Ï\97Ç4\1eS\90ÀÖôtFAL°3\1aQ\10\1d.\13jTMkñ"I\14t\1dP.¢uZHR\ 5UkIº\ e\vYᥨÌÉMª×T)
-¥y\9c©Hd¸£+YRXª\8dÆ_Ü+Ìá\b&ãT\8b0\93GÁãÁ\88\86ã\89ç#\80Ã\95ÈCAI©rX\8aT\9e\16\ f$h¯µ°!-«\8aOp@\89Ê2µáwê¹JU¡)µ\91þõ\90©Pd\7fãtÄ\ fH%|¡çXç¡\17©"¡$Í$ýÌO?_\8eèÌ\96gè\1f£\84\88\8fÜW¬r\ 1û.Á/T¨ÖÞÈ;í\1eÜ ý\aç\9eK\99Ȳ\94ñ\al*M\99|\91\19}¡\91\rô\8cÆè\1f7r81qúÞÌ£\95+OýL\vn\ 1\17\aA\vúzs5_^Û«¯\18\18ú3oʱ»æ\v HÄ1ß²mA\ f_d©¹Í\82îÒ"\86M\86ÆW[\8cm{óZW¨HÅý!8\17;÷Ih\12mµ\ÛwËéðâÑ¢¡X&¢ÎªO»\1eoË4\17eÓz>WEU¢ÿÀX¢JNÐFT\88\R
-w\99V{zîNõPÊ\16\f¬ù6ü\16Ü\92¢Ág¨\84¦M\9ae@´\14O\94&ýÔJù\902äQ#@ÒÚï¥Úóv-«ÅòfE&ÔûCÛ\99_Ç\8b_î\8fàªZÓÝòz\85®Áª\88\1dtéöë¹çÌúS\vÌKDm9©IÁ¹ÉÁ\12@\81µ\80v\ 5Àr/9²Nó`Ëp2\17\86OܯÝn£]\ 6Ä?Ì\ 35Öè\95\8eÊ4\94±G\81BÑ\9e\80\9f\1dcx»Ã\87V\18\18'\1cÖ{\1cî¹~\87Ñô?q¸\91º\r¨Gö=$~ÿp\87ÅÓ\136ØÕã¡ßeb+®V\8ewK\9a¤\ fk[=\999\813¸qz\r48Áf.8ÕfioûÍu\1f¨mF\8e\90F_\ 6ô,J\c\r\aç!¯xa\9ehËMeñ\ 4\86±EVõª\ 6Øؤ*c\1c\86Ônã0\9c²ìae\97\1fB\15(\ 6k\r±\16\95uÁ\0ö\88±\9e+|\12K\80:s)"
--óVé\a\977ßÎ\97׿Ñj~µ\98SpC\8b\8b¶u.Ñà÷\vº\9a¯\82\8bo\ 3L\1c¤Ø'Vw\12vh³\9b\16\87\97Ë<dæÛñBNÒP}\ 1ÁpÔ´rÂÅâ\eºÆ/\93\1e\97¥\17\98È6¢Ñ<O]Þ|òÍøtX0\ 3³\12OÜ\ fô¬b\99oÉÕÂ\ 2\14\85\94an` oGkÏé^vv\ 6í{\ 4¥ÿDÉ\93íÚ\ 1\98[ùrÕêÌÓ]¥àÉI{è\85O;<Ú7\r}ß;5¸\89¸BÚ,\19¯Ë\8aõú\96\82n\1cÞyaÈZY\1fìJø\80'\f\90(Kl+\98ß(\17\88ÐV\1dA«HjMµ\19¿h\8a\88#¬E`Ð\ 56ªí¹^#\9eEô\ 4Qt²\8dÖQQ3¼\18][Rb\18SØØ:Ç{¬c(S$cYD\92î\ fÃTh\8c\12Ak\85¡¬×ªÎb»ÖÙõ¨ç·\r»;{\1dÆj\8dü\ 5\ 1?\rKA×\r\ 3«Z×<(øPkÄl
-\8f¼\f\88PÕø]4<\8bd¦å;,Û\88¢rîÐ\1els][\f\7fc\1d\17\90-+G\ 3²;\9e[ý\18ýÛY\0;H\1e"\89âÙ\1a¶¾Û\9dsY¡\82fË0\ 1\8f<úÓô
-\9bÔÆ\94ËL²´2ñ0\99_óSÌ&¦Tã\86®n0¨sÔ]~\8fäsÕ~Ê\80ëUÚ\9eÔ?Ý\1f¹\a-\15æ,Çm^h·ß\8b"\94èñ]r\87Å\18e\87$\9d\9d|¢\10åå\8dë:\98¯<\9a\9b¿\ 41\88Üvdzh\14¼\17ÍÄo«Ò\86\11@Äsñ=Íëü\95b@º\7fâ\86Õ©cñx\8aÿ8N'4\9d\9aÅ×Jím©\1e1\8d°\ 2Eu.±{ðæÍ>\87íñál\84å:>üè¦z<;öfp\81\7fOpÉg[\17ÁÁ\1f\aÿ\ 2ê\13$Öendstream
-endobj
-1430 0 obj<</Type/Page/Parent 1369 0 R/Contents 1431 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1431 0 obj<</Filter/FlateDecode/Length 1589 >>stream
-x\ 1\9dWMoÛF\10½ûW\ft©\ 3H\8c$Ë\92] \a\em\0\ 3\8dÒÂ*\8c\ 2¹¬È\95´ ¹ËrI\vú÷}3»\94)J.Ú"\89cQÜùzoÞÌþu5¡1þLh1¥\9b9¥ÅÕ8\19Óì~\92Ìhv·ÀïSü«4mÂ\17ódÞ\7fþ¸ºúøiF\93 605¿[Ð*#\98\19\8fi\95^?mèà\1aÚ+[\93WÅZQíhãªT\93²¤s\9dÖÆYÂ__«ªnÊ!Õ;\8dOºæ_hPVz£«JgT(_ëj@ÛÜUN®\94\93\ 6ï\16ë$uv\ 3Ó\1fVß®Æ4\9aÜ$S\84q=8h?HèY\1cïM\9e\aã;õ
-÷äs³ÝÕ¤²WD§¶\9aÜ«®ÈÁmE¥«µ\rü\ 4·´®ÜÞëÊÃ\82Â\19Ôĺ\9a\8eÑõ\1c÷\ e%ô\87×8i<\95ªR\85F"´7õ\8eRX\1a\92òdB¡$´zïhç|íéëõ~§% ü8\88Û½±\19B¡û[r\15-W=Ïx&uþú\81\8bÊ%ÄGM¹K\91\8boÖ\16\85]#G©°\84p¡ÄÀHJ\17Á(ue\f`!G\f6#T»6¶áÏ=÷\12¦Tú\1cd@åª\f\99ÃüZ§\ eaq|!´Ó\8a%Ñìt\ e&\ 2È\8b4Z3\88\83Ì\15
-\96OÏ\ fbä¦&Ô¼bg\85¶\19X$ð1%Uî\9d\14á-ÿ^.Áä\80Ã\8dÕ@Ôª\ 1\92\81É\92&³ &£èb,LwIt¿s9H&@WôëÃ\12åè¹|ÁC0!\84ͦ%Ju±F\8c¯\ 1GÜÞ2;U\96¢A\90®ËU\8dD\ 3Ög\85\94\82\94Î{³F0H\8d;Çl\e\10\9ai\172\ 3ÑÑ
-àº#U׺(Ñ\8c'\98½\9fh[\84ÖqÛ\8a+ ½1\15"\fÆ\ 3\10L\ 2OM\89f@s\ 2P&ÄEã =à\8dÐ\9c§AÊÑ·0{\15í\10í¢]ÒÈô@·T\80еö !ÒC\88g\83V\vq*`Á²ÐõÌÌRy¥Uvà°{~/;ãæ Ý¡LήX\11*÷j2\94A55¸\\9b\14\84Í\1a\9b)\9b\1e\86äw®É9\fMi\ 3!\84\90\9eØîù\8d:E\evÀß}ütO\13\882«óèf\16úi\9aÜ'ôY}7v\esbûgv»Ê>\9a. þèÅUÿÍÐb¾t6\90\8aù\9eº\1c4dól8\ 4E¹aMC\ 3\14M^\9b\12ü\v$õ\84V\94Æ\94\17ùT\8aéàR$ÜOO×{ÍóA\94\fhý\89Væ\97\võ½íK\95¢oX¨{\19ÑúÀ\r/Qõdã'âIAÆöܵ£%¡Ç\ 3ez£\108wg§õ¡A'uk\89ßJ×\12\93$$Ǫ\13Ñ\~Y\89ö<·#ñ"õ¹\90\8aö®ú¾\1c\9aDJ´\8b©\81\8a\98Aü\ 3\ fT?ðå\8a~\16aì\87ó"ÓUÜ\82{ç5b\86òÓS==æÌ\10¢ü\1cY|CYë\1a\9bjè«\f¬Beý^@ðÛ\1dFGh5\0\98cþÆ~Ã\9cÚT®¸¨pà
-X\80hÐx\ 1o\99>x`e\ 41ÐøP@\9cú¸\1dlº«\9c5\10ë.ùúÕxo®p\ 5NPe?\96\9e\10Çv«!b'\13\84ß\1e8O9\12Ì\a´ÃZA\1aUÁ\7f\90ÍÀL\bl/F¡\91õÇ%Èc\ f@ñyóy\eI±ÊÝ!\ 4\93[¼\13¤\b\1f\80Å»ÛT?ß72bvs\12¨lÔú¯×Ʀy\93\1d%\ 1ÈȬÏ\8d \e\99\v¢6\9eßQôò´|\8eÇ9ÏJcô\0Ø¥®\1f\9f¾<÷²e¦¢]CÁ¡\ fÑ*/RÎ\82\eÁ(°
-sL\94ã̦ð\1du\120x\a¥²[\1fÚQäâGv\8bUvÔ¶\9fäxiÅ\88§8\1f«â,\14Áïõs»ù\85--¶¾\84\8c£¹s¬¡½\ãâÕݹ\ 4\88\11¶äv\1eN\12âSxr\f\15\83_ÅÂÐN\95¥\ 69"ØØ\1c2\16Î6¶Ñ\1e\13£ËìÀ\1d\852¢Yâ0\fó;Mµ\87@ÈBy.p")ÜÔÃc\8b\9fT¤\ 5\95)\1e\81\r¢\83`\82\1caO=Kn\1a\92\eMo1rîÃØxÚ\f\11Ã\9e5`\187PQ!æ\98\80Ô¥Ä\ 5\8a\ 5Ôÿ3¾¼ªF\9d8!,Ü
-¢¹c.c\ 2I0,®\95Þ²Èñ\95C2\94e¬\87p\8bC+\82AcâNϵêôÆ0¤w\89\83\81¸XOµAãH\b?à*P²·Qç\1e£²\f@\0E| \91=U¦èû\bBËü\ eÃZ\fp\99°o\1c\8b~\99\1cÁâÿgU¨TË£~ø2-ß\ 3¢£\1cÿL2ξEëH=4\8aïaÓÁ\8f\8buÂZ¹ð°\e\99\9e' ñSé\1e\89\16MÐ\8a\82×q~ó\95ì¬Ê\91ê\1f?ÝÅ;ðd\86;óÝ\rͧ·á\12úüðùñ\81~«Ü7\v1\95Ó\86G%\96#g¥P\939.Ú80Z\8cïy¿ú\97»Ùl1K\16ó;lu|æ\86Mý²ºúýêo\89ï>wendstream
-endobj
-1432 0 obj<</Type/Page/Parent 1369 0 R/Contents 1433 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1433 0 obj<</Filter/FlateDecode/Length 481 >>stream
-x\ 1\8dRÁnÛ0\f½ç+\1eriz\88f%\8e\9d\1e[l\ 3vè°!\ 6zÉE¶éD\8d-y\92<¯\7f?ªI\9a.\ 3\86Á\90m\81äãã{ü1\91Hø\91È\17Xf¨ºI"\12d2\13\v¤ë\9cÿ\17|\1c¡y\r¬RÉ׫ÀC1ùðù\ e2GÑ0V¶\96(j0N\92 ¨f\v!\13\81¯6\10Ti\87\80ÒYUWÊ\a¨ºvä=ùÛâ\991RH.\8d\18óE.2F\99}iðb\a\aCa´î\80\81\93¡0M¦(\95§úo0lg\8du _ªë[\82n \ 3ÈÔ\1eÚpe²½EØ\93\89°\18uÛÂ\a§\ f\14\19p_¹äÁ¹oïlÙRç\ 5\9e´©íè\11A\9f\98ÂÎÙ¡÷¨-\1316À\13u\b\16~è{ëx&$7þ=-S_zEXU¶/h\18\95y¨pÕ\97µ\19½6;(\8e\eÕ\11Zk\ f±áhÍMà·;\88£Z\17ÅçËT¤\915K-\ 5\1e\876è×ÙM רê\1fúnTW*\9ec<ó÷èTµ×\86§\euØ£;\83\9d\1dÐo \ 2Gw°W?é\92xIøSè«I\r±{¬\e;\1aó0½ÔMaû \89\8eù®\14\955ML\8d_½\ex\e¹ \13Ø\10½Å·³\15;\eMª)(Ýú\93JëÓNÉ\8c\97y½\84\åG\877÷\8f\ f÷øæì3U\ 1\1fm5td\82\8a}#Óù¹`\9e'w'mÿk\8dÓ<\15y¶æ%\8e\86¤\11ëS1ù>ù\rïÿ\ e;endstream
-endobj
-1434 0 obj<</Type/Page/Parent 1369 0 R/Contents 1435 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1435 0 obj<</Filter/FlateDecode/Length 1657 >>stream
-x\ 1\85WkoÛ6\14ý\9e_qá/M\8aD\8d\1fKÒOÃ\1eí\96¡È°ÆE: À@KTÌZ"U\92²ç\7f¿s/ÅØÑV\fM\9dH¢îã\9cs\1fþz2¥Kü\9bÒõ\8cæWT¶'\97\ 5.oæø\Ü\ãs\86ÿ^S}òãòäÍû·4»¤e\8dW®®ohY\11\8e_âNyúÓZuQ{\9a\17ô{׸r\13Î\96_ä\8déuzãb¾(fxçt^L\vzX«H
-\96]:ý}:¾ ét8>».®øøÃZ[RT6FÛ\88ãÚ\ 6\Ö¦Ñd"\95Ê"¾¯½\ e0gi\92ÌMÈùt¤Ñ*è\82\96k\13\b?\8f§ÑQ0m×\98z\ f3+\13\1fÏðû©G,6jM\91\ 3³\8eù¤\8bé<Åì¬&Ý\ 4Mk\15p\ 4\80°\7f\ e\86õMTV»>4û\82n\11HÓ¸]:7\84\r¯ÖE
-ÚV\bsO}W©¨\ 39{°\863l9h¿Õþ|\14@\÷\ 1\89V}iì\13\ 2¶:î\9cߤ8TYê\0\7f\8e\80¼jh¸~<u¶ä\8c\86p\19\ 2\9b\81,U¹Ö\8fg\ 5ýð\8c\1a¼V\9b ã´\ 3èÿ\8a Ç&i0 \19ø!òC®uÓ\875Ã\0\8a\ 2\95ke\9f\90ìJ\95\e\ eò(K
-é2Ñ)ñ\81jg\83 \11|\8cB\b\11 Q\rn\1dlàSÄ\0\8b¡\a\ 2º\ 2ø5Â\1aâ¨\95i\ 4\14¯Cç\0¼¸Fr*ìm¹öÎ\82±C\ e,³g¨XV+=r_:ï{¨\1c~~Õ\19ÙIì½%W×YÉ\13\10\1cv\88ÎÔÔièQ\8bÎ×jË̱VÌE\ f\92_P×y·jt\e\8aÁåìªX°ø?ÙF\98\ 5\85\eí\ 6 !\8b\9cÔ\ e¢\9d@Ó÷¿ÜÒíÇÛÏð\Ñ\acû¿Å%gãl³'H\85>ÝÝ~\ 6\a"o®;¨\9c\9f·®\ 5Î\8fg£TñÈr\ 2jP\14¿M\bRt\96ä%Æ\ 6e½¬\ 16lé^µ+%õb\1díÔ\1e\18QÔMÃ(ÄT\8e#§®,{\8fÇçY\15GU\99d20\v\fVÞm´\1d
-\9bÙ\1aÈ\91¤XM\ 5ݯ\9dç¦ d\p³Ø»\1e\ 1mµ\801r\9eLC\1cRK)H\b^µC\8a¨ûЮª\84\a0\85\b·FÑÝû{A\1d¦_\ 1U.rß[Ëï'"pN¨\11L²VF¾\87\1e(Ê\16\82Rwñ\14Ö j¬\89É=ß\ 5s\95\ e\13F@£/=ßa\98¹.8\82Ô&Ï\81 Ø>\80 ´\8cÝ*/\rõ\82\8b\aµ\1aèçww\7fþõðñvù\8e.F\ 1îÖ\ 6gZ\r0\931\96\ 6ÚØq\19r\ 4CCÐ\15íL\ÓÎ\eÔëÐ\8dTÍóA\98\aÍÜmSÿä\8e:Ô/Þc\98FÎqk\ f$\ßT¨Iª\90[v hÂ\10q®[ã\1a\15\8d³\13ÒÞ\ 3õ\16\85£\9eX\a\83\10m\85Zb\a\80Ë ×{\8b\ 6µÇ\9fÁT`\1aäf¤s×\17Õÿ\9f0Ì\93uH=Û\1dp\r\ 5ýÖc&¡f¤î\85\ 2 Æ\12´hU/Æ\86´\82QÖ\ 3jµw-x|0¶â\91Â\ 5~\14\95\98{ÝÂÑë$lP«:\f·R @P \9eÛ9\88@?\1d&Ä\ 6<¡\*\19ÑGC\8eKH\97\91Å\8dî\an\11$4VÐ{½;6\8b0\90p¶Ù\98\rgo¹D§·ðSkn\80|ªô\ e\93©\ 35hÛ-z\95D\8f4Fé\ e b\18c"`Ju^\95ÑÈôBü&ØW\11½\13"\84¼\15£Êí2ó\95»åä\ 3\16\ f\88Aª\ 2¯a\9c1ÃI·\93Õ\1ebô<\8a¸\88å\1c\1dÔÏ·hzI|
- ÆaÂ×uÐ\91f\v©Íc=gßY+yÃ\80\ e8qÅI¤²Ù¡é=£\95Ó?0ÚuàÇàHéP·\1e\13\ eÛÑ@7\aÅK\vÂáE\ 6AA\ e#äî\96Ü\8bÔÊm1Î\ 5ó«Å\ 5ö\1aê!ì'\v©a8! ð(Î\93MæF£FAÓ|Êk\10\e¹\9aË_,2~>¼\8e\9d 9E×ÉC3V\rfY5t®ô
-/\15ÿUs«=0õH\ 2\e\9côù$OÞ\12ØÁË\9c+Ç\8cc\13¨!æ\b\b\f`AýHÇ\19!\90ßÌ\95*-¾tm§#w\86\940\XúÂ%éõ\17¨\9cLÛêÊ\0îf\ fÜ.DÂysÃ^ [E×ñ\bIx~Ãi²\8e\82\99Ï\ 4unÝa\8fí\ 5Ã\9cîQgh;Ø4Ñ,s\1c \93ÑݪÆ$\9c%´\16uË\Y8\16\9eêÒÆfät$axX>w\7fÆðÈ\85H
-í2hä\rèÅæ0Á¹¦o1\8dÁ>Z!Ô~\0ZneSx6
- a\87\rh¸\9f+ïΡ¶r\8f{ÞÀ¸µ£#¥ñÆî0x"M6\16l\92\8ec7HCd\18í<Ê\85?\8e!\8dAY²\1dõ¡\97j®\9cæn0
-\8cÛ\15\8f\17ì\82¼cã7c\91\a\12_³Á´[g²S_\90\1dY=)Ôëq\7ffK2g\85P\f\9e¸c$\19Æ\91k.\97,Ág\80sq¡:ÒüGyÉBpÎ\85\96÷\80¼3æúÁaq÷F\§mðÍû\9bÃ\97¢éÛyÁ_¼¾ñ}kq½(®¯nðý\fGfßq ï\96'\7f\9cü\ 37x \97endstream
-endobj
-1436 0 obj<</Type/Page/Parent 1369 0 R/Contents 1437 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1437 0 obj<</Filter/FlateDecode/Length 1631 >>stream
-x\ 1¥WMoÛ8\10½çW\fzi
-´\8aí¸qºÀ\1e6í\16\b°MÓµ\8b\1e6{ %ÚbC\91Z\92\8aë\7f¿oHÊV\94 Àb\e\14H$r>Þ¼y3úçdJ\13üLi1£ó\v*\9b\93I1¡·\8b·Å\9cæ\97\vü>Ã\7f'i\13_LÏ'ÅÅøÅÕêäìã;\9aMhµ\81\8bÅ%*\82\9d \9e\94§ïkÑ\ 6éh^Ð\97N\95÷ôÞYïiÙ\8d\ftåìÎ+³¥³ôüÕêûÉ\84ÞÌæ°qúͺû³]{<¶íT%ùÐÙÇ9M§Éå\9bÙe1ã\v«ZyªlÙ5Ò\ 4òµítEk\89\ 4DEÊPiÍ÷Î\94AYC;\15ê£]a*jÄ\9e\ f\aq/\r O¡FÞÂ\a
-N îè\9a\82Í!NÏ\93OÕ´Z²?Îbݧ#Ê\98¥\8fYzbógd\1dåç»>3Ow§x\ÙF(ãï^\15ôíúfIH\83½¯%{·VÓƺ\91_'½Õ]LÅnèF\86«ëÏK2¢\91¸kéú\96DUIï¥?Ú¼ù¼\ 2\f\ fV?È\88G\fW\92VpS#FÍ9È\1f¥l\ 3÷´\13û\91Sxb\ fì\0Ö\11\82\ajm\8bkE*Ê;\9a.rQÎç \11\8a2/¦\ 5}P¾ì¼\aðéÜ°x\vp
-ç>*ç\83Þ¿&¡5}ZÒ7e*\90\83@\13\86\8bC\ 3,ká\11;ê·üt\ 5ì\96Ò=\80\\9f\10\89ØJºÒ¶¼¿{\95O\ 1
-<åàøô(\95ÃK¶z("lw\91\8f\19PÜ\14ÍZ\1c\ fø\ 3Ô\0H\9aR´¾Ó"\16_\ 5²\1cÌêýíÙõm\81\1cF.û\8cZg«®\f\9eJaPzà\7f/wÊËâh;f9ȼC\1d\99]¢*\99\91Çà¹\12\9b\8d,Q0æ^*æÈo#\fÀa\8e\82
-5Èí:c\18Ï\9e5\83°Á;à\11Ý}ýpû\14H~\98¼# \8e\7f\1dÛ\11=Û7Ä1J\10»3\8a\ 3\8eì྾H\9c¸±®A\99Qlkô¾?EGã\1c]²ÎÔß W¡2@\1cj\01\ 1¥Wh\8f\17N66Ht\97±hkù\82Zá@O\96\9b'}ê\9bu\81þßP-u\e[\ 4eø>\0®·Â8Å÷Ùz®\ 2y¹M¯\1e\94\18F\f\8a¨Fiá8\1dtí\bü>È\\1e¿7å0NtÔ!²\ 3\vc©ûbBµ43\f\9cOÔÌ\982Zc\\97\12)V\1c\bÔ.Ô\16|Èá{ÚÕ\12B\9eé\9cô%\82Ï\8däS\e\ 5YÖÆj»Eïóifs\vµVk\rCͺÊ\9a:J\11¢ÉȪmçRoZ#Ñ\9bS4b#ÊZá¯,§QÜ\923.!\98Ö@mÑ\7f\81¤ð{Ö\95DÖ$\7fYMGî¤yPÎ\9aÄçë\rn\96u\9ff_%nêALQìUxéÉî \1d±¥\a±Äº1`2ñ\11Â÷\94@[\8c«¬ê\89 GµGØ,QQ\9fÀæ( l¬¯}O\17q\10\fß\fY1JóÀåHƽíÜ\91)\e¥å¸ö@"Ö\93Á\1fäÆA¡\9d+Î.¥\88¿\b´\e\86ñ\7f\ 3Ì£\96ç\vÈ`dÉÊëöã\10\aÀW\16e7\16Sºk[ë\ 2ÔòM\8cÚÉVC3\98ï=E¤0ÌW\11\98\95\ 6%\ eQo±\17$\83 \97\88)\8f\10ìY\1d\89ßtÐÍ\b\10"d\8c"\9f\a\1c9Xé»\ 1\rÇ\18å\ 6B\9b[L>¯\ 2\ 2¯Å\83\8c¨\8e<6\9d\ e
-ûÀS\8ayÖ1,"Ug*aÊ=Ï}\ 4\91ClÑhiW@Ïð²\10\8b\15ËÖsè'Lá\vý±c%\9f\9d\f\ 31É«\bOÛ^Ú0\80XO#Ôq\ e4\11úR«¨\89;¥õ(á\bh\E\0\b\86¯Ði\ 5Á\14ç\8d\8a1\7f¬\ e\88\8aù÷\ 1K\ e~ío¦µ\ 5\80[$ÞC\ 1YÀ\ 3(ÿ3jÞ_ä\ 2¥U\87\97\11T&\13;á\1aUn\1f\a\89\97\õÇö3¿À'P mÂttPÐ\ 6Ò\82yó\9aÖ]ÀóQʬ; ':*2¦År\18@XÍzã±\9dº¤Õw§Jþ\ 2\14è¥ÚÄ\95Fjä½\11Jû\97äKi\84S\16\v_¶ÞOÆ?0-ã \81.r@¹\1a¹ú¼©\81ìÐq\11+\89ñÅs\ 1IwÆI\ 4\v5Î>Z\13\80J¬(_CwI\118ö0JK\19\8cÍ\a¡#\84\8cDcq\1e\17\rMßR£\f\ 6o\9c»,ÚÇ\8e\84r3-âÖLA¥Ý\10k+"Q¾F\98\83È#'p\ 1\83}ä\9cwnB\11@\89ùÁ\19ÿÅ\86\14,É×<Û\813\96-\fÚ~\8f\1eÏæ\88&\7f\8d<³\85Î
-ú:P¾?ÓîðÛÓÝ\81c{üy\917ÔÕ³\92~Ði.Ãa\96çå%¶0ò@ó\97\98¢¼2zLÉ\\10Æ\r6o\1e-﨧\18ÁÓ§É#¨oph\ 4V?\144®@\a\91â\18±c\ 4ñ£o\85§Êp\8cXù_R¶\13z×\7fKåµ\9dò¿Ñ\8eE¿\92(°I\15\15ý%\8bM±-ê¿©(2ð\97Ço²ù´à\ fÁÿøýG?ûæ\9b/æÅââ\12\1f\99°;»àÈ\7f_\9d|9ù\17ÎÌåkendstream
-endobj
-1438 0 obj<</Type/Page/Parent 1369 0 R/Contents 1439 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1439 0 obj<</Filter/FlateDecode/Length 1584 >>stream
-x\ 1\9dWÛnÛF\10}÷W\füR\a\88hQ\96%9@\1fl4)\8cú\92F
-\8c¢.\8c\15¹"7&w\95]R\8aþ¾gvI\89¦\8d\14h\1cÛ2¹\9cË\993g\86ß\8fb\1aâ+¦é\88Î&\94\94GÃhHãóq4¢ñl\8aÏ#|[I+\7fc4=\8ffý\eW\8b£ÓOc\8acZ¬`k2\9bÒ"%Ø\19\ ei\91\9c<\19ûônñ\rg\86t\11\8e\fFãh\8cC'Ôü³²4\95$¡µ©u"éW\12Ñ2J¢ôôáþË\1f¿\7f¹ÿú\99þ\96Ñ*Ê¢üpé\1f\8a¢(\98>¸\1f\8c&ly\9bK+?\84\9b\93}l¸\19\1c7æá1¥ÆîKC\0c\10\9f\ 1\ 5ØR\8e¤ª`\90ð\83nn¯èñäÆ$¢ [á*\¾²fë¤}|G×\9fI¤©\95Î\91 Ç\97Ö\884qÕáúÊ\9biRÖ²Ú\1aûìÓ\18v\Ê\ f{gp/*\8a/FQ<\99Eq\14\ fß·Æ[_\89©\8b\94\96\922µ\91\9a\84ë\1c\1f\9d\9f\93GÃ\e\84¿R¸gR\8eóíx\14ÎÕ¥L©2lg4¦¥ª\1c\12ÅãQû=||\17ÑC\ e\ f\fD¯h¥Ô\15ÌR)RÉVøHH\1e õ\9dµ\18½\85\ 5É\8d´;Ê\r@Ûª¢\80£D"/2µÝS\84½¹\88\169<â¿6Êí|5¹Nre¬d\97\83N\82µN¥SV,\vÄUW\88sÇ\99j\18wNÀ¡ZÑVRjèî~AÏÚl}
-Ý\8a¾\88\16<hÈ×òkÐ%Í\9e¸?å\95YWÊh0\89\89\98\bÍ\115\ãlÍV\13Ó#³¦^\87¢\83
-æE\1c-\83èzE;SSí\0\7fîÓïd\7f°¢E (ß2Á\8fi\8fò\9d¬®®ïçÀ(É\95\ 6HxÆ\85bH\ 4\8aX
-c\9e\95ΨPÏ}W°ÂÈ\16\ 6·=\ f\10òÞý{8ñ$Ù!]\ eÕ\87\83\861EÍPÐÚ\1aT¨\ 4çáÈå-±ÅƨT¦\râ\17\14CdVä\11\9f\f¡IhÓqt\16ÑW\98l\92;þ\12T%t'Íw:9¦µ°È\ 5Mû²,@j4\8d¼r,ÀÛã\86Ûà/\1a\9bÜËGÙ\81+¡OF¯\98|HÃ÷Í^¾\90µÐ\ 68X¯\16U\ e\ 4\14\18W¿j\ 4¶\9c[£\15¼¨ê\17G-ò\1e\96Bù\16¨r_\94¹(\97\82\rFt\1d\10ut\7fwó\17\13\17¾(Ü\87\ e¡}p\ 1>s\b\ 1ÃÝë¾@:\8eÜ©².*¡¥©]±óVXÞP\ 6\1fLC-r2ã~kEª\15QF
- TâÇ\1eò\9fã¦\£Èÿ9 :À\1f\86Áë\92\1d¤¾\1d\18\9cUG¬\7fÖ½ÜO²`à\19%V\ 2/Å\aÑêIv\ fÅ&Õ.6§\9fZb\82OgÍ\8cï=-\1f®ï毳h\88×P\97Ï@w\9b$BQý5\1e¤t;§\a¥SÐ\92î\164\ fÅæÛ\18>È#WY\8eBB1M\89\92qÇÐG\96Ó^ð-ÍÚ\ 6·2\ 3פ\85\982\v=û*\93IÏá-\86\1f \7fñ©Ú%mDQc%`ü \10\|î\b\96m(\19\9fÀôã\vv£0ÌU_ý\99\96b#TÁZ\1c\91Ì>0¡ß
-!UȤBBü\ 4ÕZ}\87ßÇ\13®\96\ fdøcx\86Ä9\ß\14¢pæMCh\91Wa\0.[kÍ*Æ\ 6\v¡K¡E\86æ\ 1xkQ)\9e\14M;µ¹<\9e´Í^\8agÜÍ\ 5¤ËKÕÚ*í\ 1ÜgÆâçE \87=,X\87¨\97\§\0{\eCãíE\86#LÝ\90ac§m¿K\8cƶ\8e\8c\0âÀ¢\ 6m\86ßø\9c\12Ä&\92PSM\85ÔY\95óÀ\f\92Û\16Ò*?\10\81\ 5v\89 c\f\ 6«<JÈ\1fÙt/\83\ 1nÔ\8e\12+\81\12à\13\14cwlý5å¸Ô;ÿ gYþ 6¹±\b\87ÿÖý\0\1d\84Ùû÷\sk\81¡Ü,\11=ßñ9ȸ÷\15\91¦ô6\12Ý\98\1c\ 6\16\ 2}<Q:)ê´Å\9bs\vH(\r:\97HÇh,9=¤}ûñtv\15\16\vF\ 5ªÑ5ï\13\ 5\84^Hv\84¾Ù\97\96;ð\92\92Bñzä¡Ø
-¬.\9c\a2H->x\98\83úô²e§¼®ñ \1fEÃ\10î=\81á\8bù\802 0!0 \91},K-µ¸¦x\18D¹1\19\84½eò>õ°Dõü:±A\ 1öë\eUV¬V*ñLϸìèIùc-SUá\1c\12 \93\9bW)`\eÑ\1c8wÖ¿@\84Î\94ç¼0!±&ô\1cûö\12\895Ø [An$\96Á\ 5\8d|ã#éNÅüæd4bÂú\84\ 5bë\ 2m\94\b\98yáä¿\\85\ 2co/úrÈ\93\eµÅSÇEÉ\9b§;¦\95*\98\84Ì^\9eÜ@ÔÁ.\ fGÆ;T\14z\19\96a±t\92SF`\§fO\995o\1eñ\ 4¯R³3\9aL.Â+Åüòöê\92>[ó\rúF¿\99\ 4»7\ 6)Ó\8f\ 1\19´\ f\f¦C¼3ý\9fÝf<\1dGÓÉ\f/dx|4e«\1f\17G\7f\1eý\vJÏwIendstream
-endobj
-1440 0 obj<</Type/Page/Parent 1369 0 R/Contents 1441 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1441 0 obj<</Filter/FlateDecode/Length 1642 >>stream
-x\ 1\9dW]oÛF\10|÷¯Øú%\ e\10Ó\92,KJ\80>رÝ\18°%7V\9a\ 6MQ\9cÈ£t1yÇ\1e\8fVõï;»$%\8bq\80¢È\87\13\8a·;;;»súû O=üêÓx@§#\8aó\83^Ô£áé$\1aÑp2Æ¿\aøã5¥òAÿl\12\rº\1f\Ì\ fN®\87ÔïÓ<E¬ÑdLó\84\10§×£y|ôùfú@*+\1d\95Ú?é\92ÂJSQùÂ\95\9a\J©ó±±KZx·Æ\93Ì\94\81Ê\8d\8dWÞYSª`\9c¥Å\ 6\112º½»xUFõ\ fÊ«½\17õëù·\83\1e\1d÷O\81p\9e\1c!\8bñ{A×&¬$ùåÝ\ 5}=J\®\8c¥\\95A·/ú¯¯IÙ\84\ 4óJgE\8d\16y)82\89¶Á¤\e2áUI\88\12ÑŦ\936Ñ©±F@\87\95)im\80{íü#9\9bmð_<µ¤¨DÉ\99\96O\96ÞUEDS\174à© \18_DG+UÒt6ÿp3ý¥\93\17ð\12'áiÍ1\90ÚëT{¯\13\86\8esÊÒÝ\ 3}66\ 1Ï4\9dÓ¥\10\10Ñ\1cýÈ\14\93\80Cª>¦m\f08\87¦Å\957¡[§¶O\ 6\rÊÁ\b\12\1a\94Âmef%-xsò¤¡7v6x\97eH\82~ïµÅX<Éë>3GQSÙ`\14\r¹\91\9fj\99HKvlÆ\ e¥Å\ 1\94
-¯&¥«ß®>~¡83\fiþþþäæ\9e
-ï\82\8b]FePñ£Ð·ÐÚ\12à¤fY5äTÈ\0ô\1dF%¡HÖ\9f@tçvÓ\ 6\97&q+¬\vôãxµ\8aê\bµ\ e\98\ 5c+a\96\932ôNVL\81Jbh\92\16ªDï¬Ê5(]b*|Í\11\ 6I\0\b¾\mhÊ\95ÓRC8\8e\1e[\93Z¸
-\12\b\11Ý@k\f\1c±Þ@ê1Ä'\13¨B'ïJ=i©§Î¥\99\1a\19\18õ}\19©2Y\r\8c\15\92$^\97%eÎ=V\ 5©\10t^\84\92GÖ\81Tß\90Æúã\88YÖIÌïh(@\ 3$s³\82nÉ\ 4©8æÐP±óeW\17s·k#=¨|¡Då{p¿ñ\8e\0B:\\e[RY\15\85ó\81~¦\8d.\ f[\89\96ù"bAPÊ2þc\99¹\ 5ÖÕ\9f¬|Fñ\1fò\82\86\96¶\97Hë¢à5è\ 1BEH\1c%\ 2dã*O{H:<½\8cëäz´]¼ÇíÄ\ÎxIÈ@p\90Ýr>"fx\81¾ü\88\10¨\88{&\9do8û\ em¡|0q\95)\8féã\11¨x\99ÉRì`vkK\98ÂF"BäÉõ[êà Ø)\8eO\87õ\88\ f£³\bëHP3Â\9cå\0\91[L\88ƪîc-oG\19v°ÛcMÂA¯\ eÔ*|¿ld\1a\8cahX&ç\ 4ê1\ f.Ï\11§V\1c<H¼\87\8b@\96E¦s^\9ee\95AÆ©w9A;\ 1þÃ/ìC{\ eJök\87\80vÛ6¸ºRº\120S\1d.nf\ fíxRP\8f0H\90\8c¼XÀÈ!S\0\98:cI\ 2\ 5\9aÄ.\bjxª°uA\90\96`ý3ʱb\82æ\95\ 5 \aXl\aT\1d\85ËÇ^×Þ(Þû ]\8c"Ñx\84\bõ>w>\81\1a\90¹À²eû\83+ðþÆ4Ù\1a\a\8enã5H9qSp'³¯êcõ´"NË\ fÜHVû\ 2ê4²÷Ú-Ç\95æ\8e\9d¾2A¡7mèú\0p%&æ\ fØ[yÙ¡\8aUUv\13ëÀ^/¾\r\eÒÝFÌ\91¥[\ 6³r\98ºj¹\ 2\87U8$\86\84KL¡\15Ì\9c'¸f¼m\9fÕA|ÞX0\98ªXËöeü¼}\99DÕAÕVÿö\9fmQ[k\91!m\\8c\8bº¹ÿ½\95!\1aÅOä.ÐHG[¦&©aÉÑV\99]&\18϶Ò\96óD\9aûâq4³\ 4ö\0Ó\©¢Ð¶|C0[\ eó\ 2|PÆ\9f\88%ct;õÊVÙGǯ[9Ãrf7\83\ 4ÖÐ&~s¤\96Ü-©u\89ü\113ÒV\195\ 6ð²¿X\98\13:À\878\v\v\80â\19~!\ 2SÎwO\13ÄDqu[ÕW\18>c0NµjåUA\1dkîkp\9d*ÓÊ\8ao4w.>ݪrïÞã
-Ý8:jåÛmÓm!¯]dµÊÙp_\92l©R\rľBA¬/\ 4\81BSܳp @\1dr\ 3=¦O\ fW4\9bÞ~Á_Wtÿq6\9f½\9fÝþÄ°\7f°\8dG¸\8dò½ã£.]V\89\15Ïx\13ÔGvWýíZ}ö"p´Mã»\8b\\ 4w\1e\80ÿÇX\94õ\8aË0$\8dy(²U¾¨wM\ e\ fr \b\9f?\93\12\vë»K\v\87\82\ 4\9e°\99ö\92þ\156\85Ƹì.\96Êëw\8c¾\1f\rO\ab\a\13ü\84!ð-ê\9dHcÁT\ 6ç2a\86¿I\8c¢Þè\8c_º½û0{\98ã=è[î&q3\81^v&\7f\8fàýÒ¶hwð¢½Í½ã\ 5[Ò§K¸!f\97\81³sÂe\Æ\17/aJÅÞáºãuÎ_\ 5J½äÛu}ï9¹\9e4>ß\1f\9dE£³>\8dÆgQ\7f$5<\9cß]\9cÓ½wß`\ fðѸâ\83r\85â\9aQ\b¾ÈMNéxÜ{Ëåü\7f»m÷\94l\95áx\18\8dG\13\189b\ e&\9cêj~ðëÁ¿ Ò§ endstream
-endobj
-1442 0 obj<</Type/Page/Parent 1369 0 R/Contents 1443 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
-1443 0 obj<</Filter/FlateDecode/Length 673 >>stream
-x\ 1¥TQOÛ0\10~ï¯8õ)H4MÒ\90\14¤=\806Þ`\9b\9ai/\95\90ë8ÄàØ\9díPòïwç´\ 3F\91&mÒ(¾ûÎ÷}ßù×$\85\ 4¿)\94\19,
-àÝ$\89\13ÈÓE\B¾,ñ9ÃË
-h&WÕd~\9dC\9aBÕ`J±,¡ª\ 1Ã\93\ 4*\1e]*/¬f^> è\ 4Ó\ eL\ 3\9au\ 2³\9dQ½\97F\83Ô\õµp\17'ÕÃ$\8dóE\ 6³¬\8c\97ø_ÕÑ\x>o\8dóî\ 2¤\ 3ç\11\8d\9fBËl\rÞ@Ǥöx\9d\ 2Ó5(Æ\1f](pç\87@èÆ\10j\ 2³´\88\93â\8c\10?ß®\ 2\14\83{cjà\91\À¦÷ûtá\9cÐ^2õ\17PLH³w\e¼az\0'½p°cÚÓ¦°9o%÷\80¥@\19óØo]Øß!\80=\19YÃÆ\1aVsæü;J¼eM#y\fU+`J\84\1dºXÄ\81\95@\1f\92jl-ì\14¶Ìb\frM\14!Å÷V0\ fP[¼Y1â¸\ 1\99z¦e\7f@\1de8\8e\13ä\98_'p>j;Ëò8'þ`ÿyÑñ\0\0\9f`'QdÕ\ 5Á`\13\9a£gÚþk£Ì²\82 î\8c½\e\97þ§Ì¸\9fu$\94ì$º\r\95\18+\93%¨úúä\83úDo-\1aÖ+\8fÌý[Ço9Ã\96©Â¾å±ýPü\83\8a1ìH\11\98RÖ\14±\1aa]\10\84Dù3*¾5µ\83Þ tÉ\10\96\7fhù\fnp^td1Ùm\95èЧañ^`\82ó\9b\814YGc¿dú½]\9a^ó0k\9c)En@\9bàO\eÛá\8b\ 1¸ÑÞ\1a¥Ær\aEÆ©~\99À\18Ã\9a·}E§p,Z;·\93\9e·Ç2h\10Þæ¼Úh\98öÑÜÇrÃ\bί\97û\ 3'-ð0Z. [æñÙ\82\fµº¼¹º\84oÖ<\b\1a?Ã{â\b\8f\f£©&\9e\ 2cƬLÐÖu\84y1\86Áí×\8aØ\86Î 6¾e\1a\8c\16°\8eÒõ lñ\86\e\85¯àf\ 5?¥®ÍÎáÉÃ[©\85#ܼÌã²Xâ \88\98Ù9½úRM¾O~\ 3«\9d\9a»endstream
-endobj
-1444 0 obj<</Type/Page/Parent 1369 0 R/Contents 1445 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1445 0 obj<</Filter/FlateDecode/Length 1570 >>stream
-x\ 1WïoÛ6\10ý\9e¿â°/M\81Dñ¯ØÎ\80ah»\ 6(°¤Ûì!\18Ö} )Êâ,\91*IÅõ\7f¿w¤\14Çj\ 6lØÐ\16($\8aïîÝ»wçÏgc\1aáÏ\98\16\13\9aÎIÖg£lD×£I6¡Ùr\81ÿOðÏ)*â\8bù"[\f\9f¿]\9f]ÝÞÐdDë\ 2WÍ\17KZç\84kFx"Ïß\95¢ ÊÑuF?
-s'\f \93Óý\9a~\12ÞïËé½\91îÐ\ 4m\riózýçÙ\88.'3\r¾\12õFð\13\ 6\18/\12Àåt\86àðö:\egôÁ\ 4góVòçéä\8cÆãîäd\91Íùä½Ú#\82½6¹Ý{\92\95V&xò
-\81¨\ 4®rjºx<ÙG\9c\ e¥Â\17N] (\1f\94ÈÉ\16ÔTB\e
-êK8\1eÏh\8d£\ 6\10>tÑ\8f§)Â\1ei¯«\8a¬©\ e\7f\8fɤ8U´^Q°éØK`\17Ô\9aJyÏái\87/¶Ú\aw í\aÐa¯ÄNåY÷x2Ï"£\b\15\bÇT¥0¯\ 2m\14Ik\90u\0\ f\80o\8dþB>\1c*õ\12?\19½URp¤`$\94"ÐÁ¶\94n\8añ\97j\10\8c\ fHO Ôñb\9cq\94\8b 6Â\83^Î\9c/(ÅcÊ=Xè\8dé\87^ê£^Já\11<y[«}©pDU^etk\1dÕøb\0©Ma]-X\16\17 3]\98[ÙÖ¨}|LbcÛÀ@üéÕíu§\9bóHO¾¡\8d\90;\96Èwé}¯+~ïD êÈîP\9b\91çël\ 2mÖ\8duH=н\r\býM\ 4\)Ù:\1d\ e§·²æ;µ¢F\89(ffu÷ö©\}1¸S\82\92¥Ñ\9f[fD©\9a¼®u%\1cT\16©ó+\84\ 4=ëRãDz P\bå\82J»W(öÅ\80²$Ð\1d\ 4\9e+Õ$Y'%ÈRÕ`ðÐh)ªNÅÜG
-\80§Ípì\1d£\ 2º{G¨\95¡Ên·ÚlÑJ)¢\ 12BÜ\88<!rÂ]Sr\9e>a\e\ e8¶E\94~Â>\81þ\1ay\83êê@¹e\8ezQ\r\90ÇsÚ\1c\82\82ø ®\9c\1eEÅ\8c\ 27×~×±\87èDåm
-ñ¡<|ÿ¤\7f\16éË7\bèSÐ7}£\rPÕçV\ 3
-Jü&£ßRó\18\8bP\95ÓÜ\ 4,\04É+\7f,}álÍ/ê\vâ¼ð¿\ 3z¶à[Ð\96 :\16\ 6\8d\8c\ fsðLÑ7¡ªÞ\8bj\9bëBã]2%nó-\9b\99\902ú\89E¼À\ 4Í]Úûx»ãX\91\füÁkÄ'60\85$>h\81vÆî+\95oá\ 5\ 66R\8aª\80+\fÒå|D\bÜN.F\ fF\eå
-%\ 3ÄÔXï5nMLø2Â\86²E¡\9d\82¹ð×¾ÞD*s*4ð\ 5\8bÀ¶Û\92ë\8bÈ\ 2\12açúÊx¢DOd\82â\16(gÅ\96ã"Ë\1e\8d\8aiÀ×ıP·>:âN5\ 1\8cH§B2)\ e$Âw1\82ìÆ\81| ×\1cd\fR1Ù øê0tà\ f¹\8a¥Úc¼ÄT+½côRé\15¿/µ,1V4`Ùèc\19ÀÛ\v\13¨oz´\1cÁ\r{õ\ ebú\95\1d1´F\ 4\ 5Ö\ 3û\ 2þ²ìÄ£\80wpaAl\9c¹üÆ\87V¢}\81\8fÂróJ[7pN>\17\9fÚ\18\19÷«?`BÖ\9e>\9d?hs¿\1e\1aËCñ°½ ¼º¹&\15ä§×\91\93 v\8cÑ8ÚÞr\1a\a:»$\ 2CÍq6\8ej¬ 3ì\1f+èRK\9e[\88hJ²\14f\9bê\8d\96)D[\ 5Bn¬©Z'1\91h\11\1dÚBF¯\1fP\81f\8e0\91Ì\81<й|úêvþ4\ f¢ù¤\87Ç!\80í\ 1l³+±.xSHþåmÕÆ]\ 6\rÖ\93Ü\15\91\a;\98\93å \1c<\7fi\r\89$§r 9\95Cë\fõ\8c\9b§ñ\8f\e\9cºT&\16ñ)«\ 1L¯0\b~5\18\88|éý:\vØk\98È\¡£ªè\83\98\15l\15yJf(æ\8fQ\ 2wZ:ëm\ 1>P\ 2\10\ e±ô\92H2\8eþ©¾\94z\13\93\80ºØ+\1e5°´\91U\9b«¸¿`\ 3½ì7\95»\15ýðqE÷Ý\18é\k
-5D^\98 ì\ fZ¢EÒ q`È¡\19ã\9dØ8*øR*\9aì*y¹È\96¼ïb#ü4\99/è´¤ñå\93]ö,C²Ox/ µ\r\16\19\15WÄÿ\vpI¿{õÇ\7f\8f|\82\ 5ü\9fÜÒëür²ÌÆ7Ç\ 2Änüö\94£ó7pN¬/\8eÅï\14\16\80´\ 5\1e\15\0;¸z÷ávuܲÛ\86· ACÒ£\16QÍ8Ï\10Ï\ 6\15~0 thð«_\94o0v\14ÕXv\84Ѿ\862½tz\83æç\150Ão\aH>\9aÓq\199mý4ÿas\fsù\f\a\13>\r3(IltÅÛQ\h1ìâ/\ 4Ö=V=x\88\86ïq\91\9fµé)H·\b.{¡õÞ¶¸Én 4\bî_þ\fJ6Ì!Ï\16³l1_&ÙNcE߯Ï~>û\v.Úw4endstream
-endobj
-1446 0 obj<</Type/Page/Parent 1369 0 R/Contents 1447 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1447 0 obj<</Filter/FlateDecode/Length 1532 >>stream
-x\ 1\9dWQoÛ6\10~ϯ¸\87\ 1u\81H¶lÇv\86a@»µ@\1f\9au\8b\87í!/´DÙl$Ò%©¸þ÷û\8e\94dÙÍ\90¢\b\ 2$&y÷ÝÝwß\9d¿\e4ÁOFË)Í\16\94×W\93tB7«I:¥ùj\89¿§øµ\92Êp0_M¿=x»¾\1a¿¿¥lNë\12¶\16+üQ\10ìL&´ÎG7é4ÍRzS< íÅV:2%Ý\7f|Kïtn\8f{¯\8c~½þ\f\13sÊ26\ 1\1cÉt \e£}%\94&/¿zÚ\vç\ eÆ\16\8e\ 4Ðh\13?\91\ 5\89Ü\1açÈïð©ô¸ò\98Ò½©¥Ñ\92\1a§ô\96Dw@N«²\94\96r¡ÙÂçÆyv\9dL(Éf\b\f.ÌáeànkØ\867Á\ 3ÃvÒ>I\9bFÌy\8b9Y¦«\8c:#\ fÓÅ\92Î\83
-çÉt\91rrFÿ(}·¦ÂH§_yªÔ£$/ªÇÖ\93h}À¥ð¤Â\9d\18
-û\971m\b½ÏIJ\1f<\1dTU¡Reã`Ì°÷AX\ek\ eü9²\14ñ\93*ÏþC^+g\béÆ{K\95|\92\15®æ\8dUþHµ)äÉ\89ÒN9OFÓÞ\9a\1a\15ä\ 4Á2¿¼ð[\1a\e\8e:¨üH\8a|G¹ÑZæ\ük:ì\14>Q\8e\90×#qm\8e0\99Ò\1a6\8d®\8e°\80ÿ\1d\1dMÃ¥CÞ¸\1eÎ\9b=\9f¸\v\97°\83SΠ[ðólÅf·é\82\v2¨XÇädºJ³[J\96 e\11X<½d±6:y¦\1cç\95ÿN:?Ê}Hi¡Üã³PÑLg8»v\89Ìê¨\87¸\1d9QË\9e\1dTªJ\92@Û¡F\96\1a¾\ 6\ e¨\9co6È<Î*³Eé\85.¨ôû\88ÿ\9cÚßç\9d+Äý ^lÄ\ 6\95\13\95\95¢8¶\9d\18\110\ 1\83ó\87QçÞË
-ÍÛù\7fxÝRÂI\0zN\ 4.Jn@\9c@3\18¹&Ð\98\1f¶¬¬\899ÈT\88\8d\14]ÒFm©\90¢z6Õ]2ÏY\ 1I*¡L\91\15óe$ÎM:\8bDuõ&\90¼ ßL]#\93ç,@/NÛ'LëÓí<Þ¦\1aRçñ\e¥\fBF³)m\8eþ¬\90²\82\0²$\9e\99à\ 2£;ËÐ \aåvßö\7f- 1Ê\93Sµª\ 4\92\15õ\8cÉ\10qÞ´B6\8a¼¹@?"\13:{üþtï¸\8fñ\9eÇ\89÷Öl¨Ý5\80:¨ZÅ~\819Þì "?\1a7Î\8e+\93\8bj\fºnÄx£ôøÒÖÃ(ú\1d(\19(fC²è\9e\9f¡\90Z@5
-\ 5åöÆ\1e\1f^·%í\90ræ[Ùí³~éG\9b\ 3ñè\bÉ\15\94WJj\9f´JÉâ\aBJð\1a\91@¸¼È},SÀÏÅ,8£ùNèm\14Y\96ÂW\97Ê4\14A\ 5\v\e¹\13UÉô\81fíÐ\85R\e[\9b\86O´,ùJÂÍY\9aª\82|ÿ`\l\98ù\92\8b½Ø¨\8aåü\84µ\83\ 4uÐ\84©TÀ\ fa4ÅÐ\1d=\8cXa£
-Ç\ 4!\11\81\7f\9cÂAY¬üÒH\f\ 5\Fóù\8e`0õɪ\9a+ô»a\8a£;´·\b\b\1d\8b\11Ô FH\1dw,ä\1doÚ»1\8b½\92µ¥\1d\14tmÈ6zÐM\88\15ã\1eY\14U\1cd<ãÉ\1f÷\92~>'àÀÊOñ\ 4ó;Pó6\9dÝ`\8f\81Ú^ð¥ãn\12nô¬ú£*\82¾t¹l\1duæ²l\9eÞ¶\ 6\7f H\f\1e<\89ª\91\14H\95 ¹h\ajYé\e«ÛÉ\f¶\1d\10\8d6\84ë\f0i\rõ«Jçï×ÿ\rìN\1e\ 2²Oíòô"2\8d\a\ 1Ù\85ÍÞw×I\7fɽÄnò\92\83E\96f]èV&!úÞG\84Ý\8d±$\8b\97û´BÏ\98¶§dñº\146¿ZxLÀéÆZf[Ì&6\ 2\8bµ(î\1c@Çô¹æäòUVÔÞµã\1d\82WÀh\8a7\12F3às\18U×ü2ªm\97ì¸fñÓ\rZ*4|\11\1asÀ' WúÉ<\ 2Ë\86÷\19@À4â\1e`D,"aW\v«\rô\11ÚÃ\0ÃÙ©3CÛ\81\17x`\ eº\15»\ eÅ3\1e¹\ fà\8d-Y\ 3xÁ\O`\ 4\8a3\1e\ 2\f',Ýè\10a·M\8düafîe®J^»NX4o\11\87\9d\89\9bÔE~:$Ã\99Óæ#¥;\83±\15\96× \16\f\rT\ e°N\88úrÆ%2\94\rµÊw2\7f\f ZÞ\ f\8aÒ;\rõæê@+C\ 6\19x°\8f\ 4:l\12ÝM\16Oì<H»ãP ²Oø.cìÖx\1f+«ìéò\ f(,ô®\90Nm5\8a\r߬\91ý\80\ eùCÞy\ 2[J\81Ù«âðýûîÿ\ 3X\0È!Ç\8eè\ 6×K£xÕêU¶À÷´Õ\8c\16ËðÝâþÍÇ·o ºæ3\ 6"\944\ f%\16Ý÷,ôY¼\9e,'·Ýfû\1dßÏæËyº\¬¢0Î2\86ún}õçÕ\7fÛ\85o\98endstream
-endobj
-1448 0 obj<</Type/Page/Parent 1369 0 R/Contents 1449 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
-1449 0 obj<</Filter/FlateDecode/Length 257 >>stream
-x\ 1m\90Á\92\820\10Dï|E\1fÙ\831 \ 2{ÄZ½Yµ[ò\ 31\f\10\v\12\96D)þ~\83Êmk\8eóº§{~\83\bÜO\84,Æ.\85ì\83C\19lO{D\11ÊÚoÒ<CY\813Î9J\19Îà ¬\9dª\8fòæ¹äÍ\85\90¦ï\85®,[\16\1c\9b8e\89\17\86'3¢7#¡"'Tga4îVéæe°\1e
-aûëÿÎ#Õ4Â\19¸\96ào`\10\raj\95l1©®\83è&1[\éITT+\9cz\10\9eJÒ\92\9e¡¶§ü\9d6J3Æó\1d\92ü\95ñR\9c\ f\ 5¾Gs#éðeä½'í\84SF/)7+¿ÉøçÒiÏb\161\14ÕCx¬!_ªÆå|ÀQËq\1eV]\92%,KsÿD¯ÙÅ\8bÕ±\f~\82?\810jÇendstream
-endobj
-1450 0 obj<</Type/Page/Parent 1369 0 R/Contents 1451 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1451 0 obj<</Filter/FlateDecode/Length 115 >>stream
-x\ 1+ä2T0\0BC\ 5s#\ 5c3\85ä\.§\10.}7K\ 5#\ 3\85\904 \8c\99¹\85BH\8a\82\81\9e\81\ 1P$YÃÓSO!¤² U!?M!3¯¸$1''±$3?O3$\v¨ÏBÁÐ\10¢O\17¢\11¯z\13s\13=s3\v -!)\1aÆÆ #\C¸\ 2¹\0øà&äendstream
-endobj
-1452 0 obj<</Type/Page/Parent 1369 0 R/Contents 1453 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F6 9 0 R/F7 10 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 562 0 R>>endobj
-1453 0 obj<</Filter/FlateDecode/Length 2754 >>stream
-x\ 1\9dY]oÛF\16}÷¯\18ô¡H\815#J¤(\15X,\12;Ù¦h\1c7Ñ"/\ 5\16´DÛÜ\88¢BRëúßï9w¤\99#)-\8aE\12Ã'gîÜï;3Ò×\8bÔ\8dð'uÅØM¦nÙ\\8c\92\11þ'üøøÏ\8bY2vù|\9a\8c\ã&i2Û\83µût!°qÙ$I\85\13ظù(É\85\13ظt|,¨\18ì$O
-\11U\f\16ZæÊ
-\ 6;Í\93©²\82\e7\1eåðÉ{Fg\14\83ÅN\a¿\8d\15\fv>N2\91ÍÇôo6Ft v4§ZC\14UL\93çT\eX/:¥\88\17\ 5i\88¢\9ȩP\16HC\87}±øÀ\8es\1a\1cYÁ\90Í\v\ 6*²\82Á"½È]d\ 53\14y2\11Ö\eeñ@f3\ 6Â\0m\12\88m\91;\ 4"\90\8aÁNÓcV0³\931ïAV1XÔ\fÜ\89¬`°ùüXV0ØùäH¯bT8ôêÎ\8aÁ\8eS\ 6*èU\f\16z\10¨À"\8aè\96 º\89Ù\9bLh\94!Ë\9e`°\85\85*²\82ÁΦ4*²\82\19\8c\19\8d
-¬b\ 6#;f\ 53\18\ 5«&Èz\93S\1aÎ\få\145d&\v\86è¨`!\aV1ØtÆXDV0\8d²\16\89¬`°³\9cí\14YÁÌÁ\8cù\v¬7yĤ2ÊÖ\89\86|\94#\ 6\9bÍ\98\83È
-\ 6[\98É\91\15\fvf&GV0\83\913×\81U\f6Ë\18ªÀZ\ae\98\82lë9Ç\90\aÖA\11Ò\9d9\12\1fIÅ`\11µTYÁ`ç)R\ee½Ò\82ùn\1c":s\99\ 1*\15\bÁ1\8d¤b°VÞÂ
-\ 6;\e\1dmì\95N¹aã\10ÏÜe\ 6¨T \ 4Ñw\99\90\8ai\12\aT\14UL\932*\r\e+\ 6\9b[\1c"+\18l1f\84\ 3ë\rÎé\85\1d[\85Ë\fXjF¨\1e\ fiR\11\10IÅ4i\82ò\8f¢\8aÁ¢\7f\8fXÁ¨\16´
-B\11Õ²\e³Iá\v\1cSò\80L`\88\8e-ü¶\96¬b°Ó\13V0X4\12Ò\1ed¯2Ô\82\9d=^\8d!Q»g÷j\ 2«\18\eÛÄñ;\99Q\82i\14O&a\ 5£ÙÓ\11#\15vV\fv\92±¢"+\18,R\8b¢ ¬OmÊj@
-¦\16UCÞ¡\88Á\16<ý³È
-\86É\98=0*°\8aÁÚ\b\12V0ØÂ\8a(Ê
-\86É\98©(±À*f0xu\10V0XÔµÊòÞ6\99Ϭóì¢æ\ 1\9d\15¸¿·E\ e\85\9b\ 69\14H¾\a\94\13\88n\9e`ë('\10ã%E\80"'\10±MynDR1Ø\9c×\18a\ 5#z6%"«\98yá]QXÁ`Q\bªW1X\~\8eXÁ`g<8dgÁ\88<¦´Ú¬\18,¦l&²V\86\93\19G\16ܵ»¢GV\86\82ÁÚ]1²^´à½É\8bÂbC\14õdÎÙ±\1fµ\13\ 3älÔz\bA\94\rR\1cHÅ`1×`nd\ 5\83µ+´°\82\99\0z\15YÅL\0ç¿°\82Áb\88#ÄA¯b\9f\0µÊ\86Ó\ 4\17SëeL=\94\9b!\v¢`\98l\a\94°\82Á¢k°q\94\15\fµ#öOd\15Ó¡\82î\ 6YÅt(=\96\15\f¶\98ÒÝ(+\1853f§GÖ»\8bAb7I\142âhÈ»\e1\1cÂ\f\9c*+\98îò\b\10YÁ`íÖ)¬`\98\8cv\82QA¯/8\1cV,d´?´\1a°\82\8b\10Û\8e8/#©\18,Ê\11\19\b¢\8aÁÚ1+¬`°Óɱ¬`\18<b§DYÅ`Ñáj\95w\a÷86\17²\ 1W\r\98;\11b¸Í\19ÂÀ Ä\8daÊI\108\81t\94GO$\15ÓQ><\84\15\f\16¯\85#YÁ\fC~,+\18,¬@¿«Q³ý\v\96jÙ;þ=\e{ÇcªåÌ\14V0Ø\8c7Xa\ 5\83Å\13÷hgÁ`q2å*+\98¹aWÆ\9d\15\83E±\15Âò¤\e\17\9cÁ8ÍF\88\84\atG`\83g\ eUÚBr\ 2\e\87û\r¶\f\9c@$\9c\1d\159\81ð\ 3ñ\83¥AP1X\8c3\15µ\1a\eãêÁ>ÆÓ\v\92\ 6h\8e@\b¦l H*æ¶\19C\eD\15\83ÅN\88Ad\ 5#xØ\19Q\b¬b°ö"\8a¬7\18?í:l\ 6\e\88\ 6ï¹½\81\81T\1c\f\8e¬wà ë\r\8c¬à`p`÷\ 6ïeÇ8"ál`ñ\v¼Ã\81Ì.Ƨ4\a`\ 6G\b\93ìó\11¿ÒªÁH¼3ìøä\a\bc\ 3ä\90Ý\ 3\84àhÌÔ\ 4R1X\ 4\16Õ\18Xo\ fb¾\7fu\813Àmñê:@nk%\1fHÅ`qPÀ\84È
-\ 6;ãk#²v\\8cG\87\ f\1ex³õ\88ZÓIÄ´\97·±È\9a½|\9f\84¡î\81\85\815yà #ß\ 3r\ 2±)Ü/\84T\f\16:\94õ*í\0A¯ñ\99Ãë÷ÔY\88"\84 .G\13!\15s[6E\14õÛâÊÊ\84âY
-Î\80m\8bÀ§\99\7f
-Û\88ð\80\94ÀýÄ\88\9cM\8c\83\9c\8d\88È \84:\1eK\91\13\b;qÞ\1d´S¡bzÁ&\8b¢Þ\v\e»Ø\96\93ÎÏdó"B\ 6\87·\83H*¦Ò¸Ö+\8d\98JYö"+\18,n\8f©²\82Ù\9e¼QDYÅ`q\#ðf?õzw03Y^Vÿ\1c\983\9fk¶\83\87t\87\ fÏH*\ 6\8bÜ¡ú\82¨b\1aÌ\93GXÁ4\98\97ÔÈz\93ðð²sß8\ 34·\88\10æò\80N\ 3'\90ærªFR1X<¸TT1X\14.\1c\ f\e+\ 6\8b\8fq`nd\ 5Ã\19\9fõÀ*\ 6\8bÇ<:-°\1c\b\98øü\0m\86®Ç¿®r÷\17¯\17\17/ßb\8a\8eÜâ\1e_\aL\8b\99[¬ì[\0üÏòÅ»Íе«Ýr¨ÛÍ\ f\8bÿ`-2\93úµ\97¸Ä\8f±úÅâ±îݶì\ 6·l7CYozWoîÛ®))æðw××\9b\a×\97Í] Ê\95î·\177\v\97¹¶s¯®?ýö\83[µ\rä\12÷îÞ=·;÷T÷\8fnh]·Ûì¥ÊÞ\954`ä.m\12B\97qMÕÜU\1d·º¾ú\e\9c*Wnx¬\¹Ýví¶«Ë¡rËÇr;`\rT\ f\a[\13ï\ eb\14Üa'Ð\9dòn]¹öÞ]Á\9bj3ô~%fÓaåÁ\82iâ~j\9fh(\96Þ×\ f;\84ô\939IsÝÍ"s·]Ý\94ݳ»6\amË®]¯«\8e\9bâ{\97à\r.j VW]õuW÷5¬þ\bW\10¶\13¯qÆ$îu¹üòе»Íê\8c\9d$Á\18Æ\9c¡ð&}Ó\ 2 '¼\87(â7Pî}¹|¬7\95[t»~p¯\96K(\eàÔfå~në\r\97\kF\87îS\8bßÿÜ-|\ 6\9d`»Í®\ï·gMÜÿ\81\863\7fÐ \89ûîÃæ\12:.ß®\9f¿ûÿ6AX\ evÓXoû¹é\97Ç)É\19̦\81Á·]\8bªh|\ 4Þt]ÛYY\1cÅ\ fåðé¹\1fªÆݶëzYW~5Dïëuu¾¾HÜçÇrp-,êÜcµÞºe¹qïÜC5üã,\10³ä¤\88\1cZÌ}®7«ö©wóß_¾\7fs\1e|\8cïX\ f¾\1dßmú¡ó\1dÝÿènªá©í¾¸_Ú\87vsn":üÏå?U\83ÕËnë>¶eúøW\ foÔé\93 ÎáÈ\87÷¯ÞÝüûêÃÍâã\87_\92á÷Áý\18\Ád8®U÷½/aºw´\17\ 2¸ï¿WËÁYϱ3`Ëñ\ 6h7?vnÑ¡ëç}C°½\17W\7fP»Å_lI\&þ¤%q
-îóü\15-Pß[Y|Ã@\14\19+sã\13bù×bä6È%ý]µ¬,÷\19yë\a\9fÔ{\94\81«Ñ\8c+?g\96\aߺÓBâ>0÷ócµq\18ÛTy{}\ 5µÕªZÙâ\93\10s* *ý\10¹Ã`µéó\18{ii \9cÔ\a\8bQÕ}58\88\95û^__}ÃI|í$"]µE#q\84Óξ¹Û\96}ÿ´rì'¯\rß^\87\11\8a\ e\91é\8b\83å\10\r\7fD\9cv\87õ\ 6»¡\¯\ f£Ò¦oWp\9c-¿\94\ f\883\9b캺«K;ÿ.Å;ë\8d¿$ÿ±ZýT\ e'\1d\8do\9clºlá\8b·ûl\ 1B\8fþBÌp&vîe5,_~éîò\ 4Ù½?[ÌYÅéícµl\9bí\8eg^éG÷¹ó\16éÛ¶ïk\1ewU\18iGéÇ\e6q\8b
-G\80\99\80Îþ/öD&wÛ3\ 3Ð\8d\ÉP>ÕÃ#Óµ´#\82+\8f\ 3\87LÝ´\83\1f\89Gú0\e$\85<@÷\ 5ýí\14âÓÌ8×Q¤qt\98\ 5~«q2>±\15·ð \a}s\98¡x
-\8dö\8dy: ñú`Ï<û\96AßÜaî!\12Ã#´öÕr×Õóû;~e\80¬4_¾ÅÝÍn\fÞC|\9e8åõâôJ\95á¦YLg¸|\81\9cd4õÍââ×\8bÿ\ 1\99Õ£\aendstream
-endobj
-1454 0 obj<</Type/Page/Parent 1369 0 R/Contents 1455 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 571 0 R>>endobj
-1455 0 obj<</Filter/FlateDecode/Length 1693 >>stream
-x\ 1¥WÛrÚH\10}ç+ºò²v\95\19\83\0\ 1ûæK²qmâ81Ùì\83«¶\ 6i@\93H\1ae$Aøû==#\81À\9bªlR©`\844}9}útëkoH\ 3ü\eÒ4 QHQÖ\e\88\ 1~Ù\7f|ø£7\e\8a\80&áXÌ(£ád\84¿þ*¥Ç^0\1a\8aáþn0\v\8eïv®3\1a\r§bÞ9\v/4\99Lð9\9eMñ\19à¿U´ê\ 5áPLh<\98â\13ÇÂ\90\1fqWìr\14ÎÄ\98Fó±\18áî8\18\8b°¹â»ÝkÜ\1d\87xÊ?ëîv®q7\9c#ÜÃÝëEïòÕ\9c\82\ 1-V@%\9cÎh\11;0ðKtv\93È¢R\96BA¯Í\96*C7&_éu\8d \1fe¶\94$K\92t¿\18\9f/>÷\ 6Ô\ fÆ8\7fö`u&í\8enM&uÎg*kÒTY~\8aý\r§Þ_\7f4\ 6Ò8\11\8a¡ \a«¬úZëRW\8a>(\19ë|íO\8ci8lN\ 4S$\8f\13×je\10ÅÎÔ\14Á¾Îk\ 5(Ý\19\82Ï*Ñ%E>ü\v*R%KE\99ü¢¨äà«DVî¬ÄEd2تä2U´ÕUÂ\ 6]\92ðOKYê¨Én8òÑ®tªJ*\95Ýè\b_à®Ì\96\82O\91ÌcJ<T*w\16ù\17\19g:×%CYȲÜ\1a\e\93Ê#»+*mr6àÐ\14´HT \8bÕÖ\0ìBGå\89g\1fî\ 68Å>KE\1e!0Ú!tÖFòt6y:?Fï\f\0ä\85\+\17e\95(zy\88¡Á\8aÌÊc÷úݧÅ;\94\ ee\8b8Hám\1d×ÎU;\14\81 k\19}Y[Sç±\7f.lâ \ 2\11\f\86 Æ\\fF®ÔWu\95\18û[I÷¦R¿\9fF¸àºÅ&ª3\95W\84ï\92˳ԹtH!º[¹Ñ1üå¹Éaå\85ç!ÜÐÃí\r¹°_°U°±\17\97 yî~ѲòÕÕû\17\88Û Þ?x\ 3\1dʺP¶T1 ^î<\18&W.ÿþ>\9d©\98ùtþ³\80§dà|(\85ÕÆr¯XåiDZ%2\ 6úv\8dDR\8ad!\97:Õ\95æZ\e\92Qå\eé\93Îc³\ 54\v\1aC\ 1\8eûè$©CWÑÓ\19R\7f:\17ô\89Ù»\aD\f.h\8bb#§\ 2¥\89\9d+ÀVç\91B¸+\1di\ 4\83t\v°\9fÐ\ 28ßõß/«]ªNÜƾ§S³æ¤WÖd'§\1c¹ZCÁ\0Ú\1a¥\1aÅ,\99Ý\P[é\b\9dfê*Õ9\ 3\0"¢5\8a\92r\85v*Y9\10Ì\89ßnOú\f\9dô qAw\8e)\87Ó\804\91\edNè´/ÜÅþ\ 4w,·`[ \9dA\18\98hü\b\87\ 1k'nW\0\8b\99'Q\1d<\9cj8ë¹aÐÒÔlÁ\94C\12M^®??ÞßýýÏÝýãâêÍ\e\91TYú\1d):q
-Q³N^\10,ËX«¹1¾Z\8b~Lw´ôú\87ÂFJ±R
-ºBD
\8e¬
\8d\89A¾
\12VPh'
\86@¸Q(§
\v,
\ 4P¢µgu§S
\16\0獀
\90\1c%Oebê4v
\90²Q°Úu/
\86h?
\b1
\9f Ê'äxƨË#>pÖ
\97¯¢F)úh)
\9eÍ0ó
\14\84ÓF×Zåw7÷
\r]¤2â
\0å
\9e{óo
\rÍ8´
\1a\85¦Tm
\14Ø¢Ú¢t?ï˪ÊjµñîR
\888w:{
\0\95¡+,z ®k
\ 4Ùð
\8c\85\b\1cl
\9b`þíò~q
\94ú/Dc\$OgÖHÌ
\94õÓ¹Ï
\16<pSéç-·Ñzíñ½Oå
\ e\9d\99QaR
\88\85rÓèG+Ö
\ ffb8?pã
\98Z
\85æ^g(
\8fIÆbÅ
\8d¥ó(Y
\82\eú²
\866zú
\8cuÝÈ¡ånç¨l]Vÿ+Þc
\86=^½
\85¿
\ 2iûÁãö
\82®#Èó³õ¦
\84\12k¡
\ 4xé
\ 5\87\89àæÿ
\9e\v÷
\v®P§ã®ñ
\bú
\847
\828
\95²
\9dÚÇ}Ñ
\8e²ï¶FÛ
\82W1
\8bACÐ
\8d\96N
\99>rC¼
\959:Þ:¡÷¡ÿ
\ 2>WPEn@
\1eÐ-,®¹
\9f\81Òbò§²Ke
\8dï
\1a>
\ e\81¾Õ¬fÆîþ;éï
\89Á)µ
\1eü
\9c\ 5o
\9aÍ®
\8dh¯
-<v<±@\f,\82*C,\8e~²e\fÏ?,\90¥\9bå~65ì;\f-·\ 4t\8a\aN[¯Ã\10^\1e²\95\89Lê\10nÇê!\94¦¥\1a\826\ 3ÔÉ;\8f¡JAÔc½ZÁ"6\1f§'\87½º-ÿña¦V\82\12,\95Ê÷\ 3\1df\1aßè\1eNª4\19`ÑÙ^ì[ªÜuÇ_\97²\11¦\83Û{eê&\râÂÎå\9a\11²\16Ð\12â\13û\99í\10é\8e\0¬%ûÝ\99AÙ7\ 2ó¾\8f%Õ\15\15Û>_ãr¯é7\0ßq*\93Q\82Å\80\\vc7\8a°°T\9e6\9f\rÖhЮÙ(XdÙ\87GåÈ\ 1VRw\1dL\8e\14\b$`"ø9 ý\ 4<±ª¤N±Î×QÂ|vã\95Ó\8bS\ 5¼ UEB¸÷!\f\18{Á\ 1àÕ¢¥W»\84èÔ\8d\9c\ eWÊBE\1a;\97ÛÂ\ e°°Ë¬q\rS;g J'+Þ*\ eC\ 4²\9c+¼\17ø}\ 6+A¤
-¿SáÌV§)XÀ\19w<ºÍ\ 6«kL&ç:b\8cð\979Ûló³Î{ÕDLG\13\9e¾?þÒw² \9e¼è\8d§c1\rg¾à£ \a÷rÑ{ßû\17Oðº°endstream
-endobj
-1456 0 obj<</Type/Page/Parent 1369 0 R/Contents 1457 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 618 0 R>>endobj
-1457 0 obj<</Filter/FlateDecode/Length 1427 >>stream
-x\ 1\95W[sÚF\14~çW\9c\97N\89'\b]°\ 4Íd:ÎÅ\89\1fj»1/\9d8\ f\8b´\80\12Ý"-&î¯ïwÎJH\ 67\9dâ1èì¹ßWßG\1e¹øó(ò)\b)ÎG®ãR8_83\9aÍ#<ûø¯5\19\ 1ÒÃק\ f£`\118ç\14ú3\90ä4s\17NÔB\19Ý\8d\860°ç\81ã\r±\ 3\18ØhæÌ\aX1Âsq\96\93Ï?¡\0,Ö÷\9c\90Î\839\fÌi\1eâÇ\ 2=Î\8f@\91Sä:>\9d\vpÀÍ\16ç8Ì)du\16èqó\99ÈôÜ9ü\99 Ô#£@\84.<f\14 Ç\85¾\18*ÆÌ\ 4èq\81+BB\ 1\ e¸`Á\8arò¼\04\16ê\91áy¯0\10 Ç\ 5\81x\111I À\ 1ç/8v\88\8c\87\1f\vô¸hÑóù\ 2ô¸ ´|\1cQ_\80\ 3Î[X\ag¬Ö\ 2=nÎ\ 5ÒFÛ\13 ÇE^¯Ï\13 ÇùÖy+S\80\1eçE\96\8f3è Ðã\6°õÏ\13à\80Cr9ñ\væ\96gÆ\88+\b¼D\1az\101\ 6\18õf9\9a^.È\8bh¹F\13\84\88ò\9c\96\89\14¹KËx\1c:\81CoËb\9dnvuZlÈl5Ý©|¥è]\99«´`¤©Ë,Óõ\8båWH\9bÁ^+m"\95·LÆKð¬Óº1Ô\18]\11\98âZ+Ãâ\14íËú\e?Y¡·ïÞRÚ\90)iW$\1a,ªHDg¥j\95k\83#*t¬\9bFÕ\8f,©ÉWN\fû\1cº¢}\9ael\84K\13\14\94\ fGÆEiH\19£óÊ°ÐZOô\8f*c»Ù\91\81ÐF\8b+hÞêGRxÎK|\99\ 2\7f¢¿ï\94ÑÙ#Åå\ 3è\12VÌü\9drÊUq¤¸R\eíÐeY\83§xÐEª\8bX¿<Ѫ\1e4´.(K\8bo\10¼OÍV\88Tlv*ë5$º\89ë´2iY8*\9fë\0>~dÓ\114U\90þ¡ò*ÓdS\81©&©\18wvÚã.CcZÃ<(\92D\80\9f\10ýß:ÖE\97D\9e Ðòy\93\95+\95}i\95Ë4Â1áó\8aÞ¨&\8d©Ñ5Â\83\1fÃ"\e¦\94Y5é\88\vmVi\89\f"\95\8c\1dÓëÖT\94+ë\eßÞ|¸9¶ ãæJÙÔå®z\9eõúâÓõÕÅ\13æ\89U/ß\a[÷ÈÛ¶Üe »Þ¦\9c\12[Ì\mY\19#ð¹BÖ´ªË=Üb©O]\81\17\99~ÐRoìF8c\1a®<\1eÖPVÕzk.\16+ª3úQK`\ 6\94îÿ"\eÚu$ìY?\e\1d£eÍã!\1ft?ÎwhÂ\1d\1cÂa\8b}-ðý\8bS\17;\92N\19óñó³ÚPÞõceàn¥\9a\ 6©JPPÜRè¹ï»´Ö¹.\8c-8.³Sm\80\9e½SÛ\ 6ìYÍ®ªÊÚtéËÊMY<Swm\84{4gìgr÷2\ e00\1aÃc@"VÕå:Ítóû©í"\18\96\9bmgô=>¿\ßßwL\80v\8c{Ö\v«\8d;X4ýÚжÌ5%\88Z\fý\98G(KKÔVnjXØ \86l\e®xlí
-Î\822ÿjgR§\ f\87öû(\r?\90d}a\ 3\86¾0lÛû§\9e4\95\8eÓ5\f¦\8d.t\8d\99`ÅÙÙeÓ\9feâåq\17X\ fÌ\16a\90HÔ:Ã\8aÀx<;{wswv&áå\19Î\83÷3&\89Hþ\82^F\99±©Oûs¨·sDÎ\9c8Oøà(\13¯\ 6kED\8a±má`\84\ fvÜ X½\1d§\16\fËaºkê©4ð´áå9ÍÒÕ´ó\81Y\a2±\1a\13*\8bì±3ûtbìÑ×\1a+£\9128\9d¢\85QI\9eÊJ\9a^ºv´\9eøÛ{ÉEÎ;àI\99\1fYõ¹«dY\0OcýÄSìWtä\14+gZ\98\96éHÖ\89\87EyD!÷\ 3\14³j¾uQpC×=¢ê\eä ad û«HçzÈsyi7½\8c¦\18Ë\ 4Û²\SU¦\85\91{\a®
-[l³¿±Rí\92W+,}Þâr\aBM¶\e\18/\v\93n\ 5¿\7ffúɬEGêB2\9dØË\80Ü*\12mT\9a5H2\1a}Ï5\9dpY§ÍK\fK,\r\9ct\9e¶×\98÷×o?ýu»¼º¹v¶&Ïä\ 60½\8cÛý>\89\9c¹GÝ\95çÞ\ f£v«Î[\ 2\ f/\vóE\80û\1dßú\11\84»\8b?Þ\Ðm]~Å\84ÁM.Þñx\16ßXóÄ\vñâ3\ fh\12¹ØËÉÿ¾\ 6òÛL\14Îq¥\ 4s\10²Ì÷ËÑ\9f£\7f\0aE³Âendstream
-endobj
-1458 0 obj<</Type/Page/Parent 1369 0 R/Contents 1459 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F3 6 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 623 0 R>>endobj
-1459 0 obj<</Filter/FlateDecode/Length 1752 >>stream
-x\ 1\9dWÙn\eG\10|×W4\94\0¦\ 2qyI$\957I\8e\13\a¾b1ÈC\14\ 4ÃÝ¡¸öî\f=3+\9aùúTÏÁcMÙA`[Ö^}TWW÷|:\19P\1f\7f\ 64\19ÒhLy}ÒÏú¸³ýñþç\93\8bá0\eÒ¸?ΦTÓÅå4ëÇ«\8aîø}º¼\1aec<\eN²ËxÁ\8fö.kº¼Ì®ö\9eùϦ#\98¼\98N`b\88\7fFÒÂÛ\e\M¾|p3;齸 Á\80f\v\8eu<\9dЬð¡öi\96wfKIV\9aGi¨n¬#Û¬VÚ8*t-JE\95~ÐÊ\92P\ 5 :\9b}\801äí\8duþTÒùç\7f\85\aÉK\87ìR\18\19næñí.bcÔfEç~8\9eD[é\13ÿ°;\18\ 11¼Ð\8ei.É!Ì\18R-¬C´s£×\b\9c\10¤6\ 5~YhC\7f\94ªÀmÊ«R*GN#\81\¸ð}LS \1d\8eO[\87Ïo3zWIa%Ð\À\16>d\8f\8fÂ\94º±ôFºµ6\1fé\86}\96ê\ 1¡äM\r\ fÂ\95Z!\84¼j
-YкtK|XZ*JëL9oüsDÖrXH'ÊÊfÇ0\1a\8e³\8b'`ê\ e§Ùà\8aº\97C\14\1a@][º\13õ\\80\aCÄ$-)íH/8\ 5A¹®W\95Dò%ÿ¿\vW/èÁèfEµX8\9b9Ò\93RmÑ{3\v/øº·"ÿ]\95\9fÓÓû\8eÏ\15é\1a)ªjC\9f\9a\12î¼ß\92a/\18HùyU1\95ðW\80\19L.»\12¹¼?;§\8dnøVS\15\87À\87R·\\8b¢\86\8d\10ºçY®Õ\82VÂ\88\1aI\86ú\97
-Xס*H3G\\8e3<}\1eè|Í&ì)Y·©$\89<×\8dr©\fW4@o,@Òîè"Ô\0¥Èè6Yy-òe©$Í\fwÊuüÚ7ǯºTìèÖ\13Ï"ï\18ü°\1f,1\9dB\10¡æ\89ùp\86\86\1fûj¢ Á\81ó\ ebx\ 4|E¬sºå\96ÂñýÆ\ 6\8cE\ 3ûÊyйò\81þÉÜ}Ç\b<\a\97\82\8b\80¯ÌýÙ.ÆÔw\1ccàSh\95\8c^îH\ 1\88\81\9dFÃoÎ\ 3Çáÿ£ÒkXä\0OoA·\86\v\11\81ÉN\13\ 4\91Ð3\98_ kÑJ\ 5H\8aoR\80\87ù\8aÜÁ 0Äû^I
-(\14Jé|\8bã×\ 6\92\a\92Õ\8dâ\84¹\ 3cãíC¼×Þ·Z9£«J\9a\8cfÜ\9d\1eQo¨t\eZ\80$l\12\]\19ùÈÂ\ 1\98\1aÅ jSþ\ 3\88S [?\16¤cY¸yùö\8e\14_,\8c®[\84ý\10IÁ\89Dñb!}@70WPLi\99*é!×¥\17ø\1d\vm³ý¦ä\8f\87}\f\9aP__þ\96Ë\14è\ 1¢ö\9c D[KW\9f·\ 6
-Í\8a\91Ñ/Råò\1c\15I\ 2º}\87±R\0\85\ 5\ 5F%Õ²\9eãJ/Z\9eEÊb.s\81L¨ä!\12%i¥å\\9f(9<#5·\84Ô.Qx¥[ußÂ~T\17 \ 3©¼-Æ]oóy÷ü\16M¯\râ\91h²mA\ fpb\89âZ%\10ÞË\a\96ñMF×±/`æ\9c\96zÍ\80\9cG\83-\1c¾a~\r\92 ãP\12$º\0)1Q~d\13\98ÍÝ$ýÉ]dAôT¤ø<ùü`cîÃ\ e\13\87^ õ\9aÛ\eHBÀ·\8d\ 6@\97Èú¾\83¶1àvµao»1¾×'\10UÿY\11ÞH\12Õ¹?ã¾IÚ\10\83¢XSØf\97\bÁ\92V\18\ 2\8c`;\80£\83.ÉÎ\93ûÀ\ e\8e\#v»ÒªàÆñ3h\8b\8dÛ¬ \ 3<~|\81=J\87)vzÒå½£©e\0æEãÛßH¿\ 1X\88IU\11\fÊÇ2®\ el®»\a\94\92Avý|\91í½èio\ 4üM)mv\7f\16"<Ü\8e¾\ 2H\9aü£«0+P\ e(\16¶,ÂfBk±ñ:\12ã9.\ 2_°\fliD\15\87¤V\19Ýh¿¾l\v\8d²>\r¼w\1e\1c\164ß qUq´Ìÿmç;}«º`NwQmN÷BÚÑîhR^É\e\87áγ\8f9°\17Q\18e\18\94°Ëpï\15Ð\95PlÜN\93\12"Çb\1dªÊ÷\83Ðxv`L£b7øø\1d#y\bIÅ\9b\1fV\90¥.PWn\94\96³¯`X\8b\r¶¯mÐ\988{©ÀqíKTm\8e\ 2\9bÚc¯\7f°Â`w\@Iâ¢È'\ 2,\8a¼Ç\f2\8a\15¿õ\v\r¤\ 3CøõÑ\9d&°3 \0\80\eò©Á/æ\8bÒð1ÁÉ\15ËQ
-0\96\8c§ÚSÚê\19zø~¬Á\17ÍÝ\ 20)\ eü\85À¶G\90§[-Nú\1c\8a\b\80\v\8dµáÕ=\18¸Lg\18z,WëÃl;8O\10:\ 1\92úL\14^ÙÌ3¿o\84!\156/Å{&\13\ eÂÇkn+äØ\89J®\ fÔ
-ó\1cü\88ºÏRÆ\9b\88Â\8a,xE÷û\8d W¥j>Ó\1c§\91â`\1dó\r| Ü\89\ 1Fk÷];³^cMÏÎK\85_¤áLº\ f4ÀöÐ-¨WÈÇ\9ej sÝ<b:J\90\9c¦NÃvõ\91W\e¿Çõ^ì0ëZê±Ý\85¨l<楯÷z,\9aù\9bM´bû>\§22¿â\8ex4\93 ÜÔÚ¡~ÛÅ>\85£\8b·\8a~¸¹{Nv\ 3\12×\18Äþ\10ó\ 5Q¼<<Ë\97ìü\19á WaW\8c%\98F¬\ 6c\1c§#\1aOâ
-\7fwýúæ\9aÞ\19ýAæ\ eûþÞ)\91Sî¦\ fº\93þUêËÿy¾ðñíN\14\17\93\8bl2\9e\86\13öhÂÞ~\9a\9düvò/}\9a3\aendstream
-endobj
-1460 0 obj<</Type/Page/Parent 1369 0 R/Contents 1461 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F3 6 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 628 0 R>>endobj
-1461 0 obj<</Filter/FlateDecode/Length 1583 >>stream
-x\ 1\9dWko\1aG\14ýî_që¤
-©Ìò4\10ú\90ì¤iS5I\e\13EU]UÃî\0\13ïÎ\90\9d]cúë{î<`!\8eUU\16\16»3÷}î¹\97O'=êâ¯Gã>\rF\94\16'ݤ\8b7»\7fï~â74\1c\8f\93>\154\1a%£ð\90Ó\95;ê?ë&=\1aNƸÖǧ\94´8\19\f'øÚ\9bL\921¤\ 6NÌ?±Xó\19§\10\1d\87»î´ñ\а7L\9e5NÙ\9bI79?¶x9;é¼\84É\1eÍ\16\88h4\19Ó,s\81ti\96¶JcªGOg\1fqé<\jQºZ\vk©-èÔ\1f\râQ!Ò\95Òòo-
-y$õxúÍ´×íáÓ\9dN»øû`Ê\e[\89J\19}¨¥KíÞ\0i\9be\aôM;\99¼íè:ϧ\1d;Wº£Mn\96J\a\97\86»\90ÚýQ2de³\95$o)ÆÛêÈ*íp0\9bÌ\9fD±\16I]\95[Ú¨<§\Ù\8a*H\aw\88ÃÃQµ"¤àñ)\89õZêLfg´1úIE+q+qä\14\9b\92_³\1a~ËV\1añ â\0È®$þ\v\9d\916´2P\9e©R¦\95)· ½4%É;Q¬sÖÙt!£'\99Y¯·O`¶Î³`Vÿç \e\8eøhsu#\11¨²Ó\98§g\1e\16íþÐçÐÙ{<½\9b\9ewÏñé\85\8b}r\17÷õRéÍ\1e\ 3ÝpÚ,\19Wl!r\e`\12ó\ e\97ú#.ÖÅÜÜʳ\10Jÿ3|\1dè\8fÂ@¦Ð4G\9aô\962iÓR+\85R¸z-\90G.b\9a+D{F*\91É\19]
-+\v<?7ź®d\99øÈ£ÅF\8a>ÇâÞ®\98[\93C<ßRQ\ 3,ð\81M½\91Õå«·WÞ¾Y4ÌSeøÒG\83nÉø\81¯g¦\10J'4ÃwÀê\b+Qq\ 4[\94zÀ\b"¾\12Å\xüiS\81eR³Ôê\1f_f\12¶\ 1©ª\84ëGFE\9a\9aZW.+®6\1e\ 6oÌ\ 6\1e\vß\15©)Ki×FgJ/é½Vw\14Ä\80H\8b0¥¦´\94¢â\ 6á8µ¼«ÈVrMÊr\14þÐ\1dyw£8Jvä\ f\8bû\ 2Rjt\85t±M~»A\vµo´ÙhÂËJ\89|×+.°\9dO±+9Ï°\1f \93\19-©¶A\9b\aAd¼\ 6\bl1÷tqÝ\9a\?õ×ö0HMQp\17#j»bOV²\94»^\8a\1c»#¤{Éug\81ùµ]\84\ ex\80a£ùFy6l÷\8b½³ãæ(Ùru@\ e\ 3Ä\9fØ\ 3äz@¾{õ\82\ 2\84µÜÄ«»¬"\93K©eÉU>ªÙ¢4\85+Ñû½\8a/c&4`Ì}¿\9fô»=°Â8\99\fÜLø\ 5=ãÔ\ 5\1c\1c4\ f©¢\90\99\82\17ùö°:\ÄQÒ\1d\9d3»¼\16º\169ºÕA\8f\8b¾gÖC´DH ¾BV+\93Å\ÉOµº\159¨\83Ó²×s\14|äëCFÃà\a¥3³A®gôÛ\8bç{ðÑé\95,oeIðR,ey\8a\19\10SX)\f\aẴÝ\80åf¥Ò\95KJl\1dF¶ï¹È\13Nt\7f1d\8f\19\bM\88â{öqS(] ½\94îõQ8±yÎhkê2ÊÀØm\9dsõç\18R(\bhXa~Ö\19¢`\v\9cá¦\80Ϫhd\9d§é\91-vÊò¤m2\B\17.[J3Æu\85\1aºÔry\8a¹,m\ 4i#\1c7}-ç\94L]\91`;Íìå¢\"~¹,%n,P ¸4اpë Gdk$ØçÌ&ô\87©ý´uä¶\11%Xü+VÛy\89¥\vÛÆ\ 2\88\rÈ\1dô#r±\87$ý\84Nßê6bk¿Ì·§ô\9c\8b\84\15\88í¾öÛ\13Í\98\88éÂS¯õjc¯r\97ó\8aæ¶\19\v6\aÝ\·\98t\98Ú\ 1~ÞC®\9fÒFl\ fpy/\ e-\83Ù*¬\16È"ª\96ç\8e×e\98\1a.e\9f1p\93¯\v¦:-%l\12Hç /¡úÞñ\16ª\1c·²+¥SI\12¡\a«÷z\8aèÐo\183\80Ì\97¹ã\8c\ 1å»\94§½¨+LÔJ¥ÜêÁlÜ,w\rË(;\98Yð»¶\9e\1dl½^c[ȾE\83àõÎ\ad}¡\965È.T\8e\95\88,óÈñ{\a\19ì\1e¨«
-ÛmÜ9\e]\vªOXÕa\85[a0íéÆ\ fn\17?&(\ 6\8b\ 4;|û@\1eÐ\f(?¶+·d\ 4\1e8J\0\ 6\95\vòx´_J\ 6\ 1¢E\ fǵÓ%\93ÞÉìg\8cü\11Vó_\95®ïÈn1Ä\8b@ØaÉc|\86]ñÏenæ"ÿ+\1aî&\13\ 6.\11=¢ï\92$)%¯;L\11ÀþZ\94hu,`\16'?|.r\9cÝï©SÛÒoþܯ|ÞÎh÷£\80ÚKÂO\rj[êìvMj¿¦¯ë0\18'a©ì\8dð\13l2 Qo\92ô\ 6ìáÕÅëK°Li>b\a§\17&yCtÅfÇ0G¼D{ÜÅÚ\9bµþ\7f_\ fÇÃd<\9aà\87\17Ô\f&¬ýÇÙÉï'ÿ\ 2\80ýnwendstream
-endobj
-1462 0 obj<</Type/Page/Parent 1369 0 R/Contents 1463 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1463 0 obj<</Filter/FlateDecode/Length 1617 >>stream
-x\ 1WÛnÛF\10}÷WL\8d\0V
-\8bÖ]r
-´°å\18P\80¦)¬"( \97\15¹\926&w\95]Ò\8aþ¾gv¹²ÄØE\vÄ7Èär.gÎ\9c\19~=ëR\aß]\1a÷¨?¢´8ë$\1dê\ f\87É\84\ 6\931>÷ðk%ÎnçgW÷×Ô\1dÐ|\85GF\13|È\bÇ;\1d\9a§Q2Hú }0J+½¦r#i\9a+©K*\8dÿïÎ\14Bé·ó/03 n7\98i÷Æ0Ó\9aãøÖ\9aTf\15;3\96¾Ô\86\ 4¥'f2o\86\9e\84UÒÑN\95\eoýIZ§\8c&³¢ÏJgfç\92àjT»Bví\1e\82doõ ê!öï\ 3\8a\876R{Ó\95\93\96d.ÓÒq.\1c\98¿þ\1c\97 \10Õeô͹\14[\9cçL\84&\91¦¦\ 2\14Bg´\15Îí\8cÍØq\87ÚÝ~Òã\98Ê\8d(I9<©\9eT.×2;q\16\1c$tC\ f¢X
-\12Y\ 1 ]iE©\9eäÁÁ¢¥\12\99\\92\88ÇjÇÞúF¸\86SkLùìÑ\11\0äÂ\ 5\17H\e¨.ÞRQ¹\92\96\92PLi\11×\ 6\7f\7fñ\aÍVr\0xl§ò\9cVBå¤V\9c1\12TZØ=1z\r¯\11\rd»Fð:!_þ\1a\17\8fY¹ÁÍxÎmL\95g\1c\81\93\9eNÀ[V\88\ 2\90F8\11\ fÜ"ú¦3çLªD\89¸ùÎÕ=Øî¹×º\92ezå\1f÷µxfe\8b3µûK\1f\89\93ieU¹G\13\bgt \15ê\16¹Ä¡;é<ù\1eå\9e ø\fá+U\12L%\81\1f\rO©Ýo=\84ü4ó\ 5I\96u\v5r9äZ;)DºQZRi¹B5\\ 1Í\17o\85*\ 1Ç\14É0"F·\11l{\95#YÓ,SµÍü!\14TÁz\8eg²=Éo`]l®´Æ²=N&]êö=\93\17½Ñ¸Æ:6\9f¿Ýî\ e\86\81ë±ÿ>ÎCI¢\1c´\8fp\9d\ 5\1c_É\ 3àÅ\1c
-¡+\91û\f\ 2{g\19ʧV*\rÌ\9c\82\17kHE!u\15(ü\ 2KjUÑ¢\90\97´¬J44iôFº\91é£/èÒ|£ó©Ç\rÝ5E{Wè\ 6º©\e¬Ö\84;¯NÉ9Í8\16p8\15\ e\16¿§¥\87\91«ür\82x\12\8ds*\ 1\87\93AOkE¨)\12éø¯°Á*\ 4ìµúÿ ôXã~\10lõ\fht\ 1·W]/?2d\16\9aii \84Ü@\91^,ï\14\15qoª d®Únóý³B\9e\b)»b\16FU\8e\12´ãa\10D]f\8b·õliп;ÁÔ\84\94\1f5\0æ%æÛ
-r1Iº×°;¬å~\94\f\13fQ\ 1íüdÍ2\97\ 5ëAFï5ÖëôÕ}l\1f?»ÆÉ\88\8dÏ@)ÍÔT:Í«\fÒO\17o.ð\1f>D\860\8dë\10ck\1duÖ\r]\1c\1fôÏ.Zå~\8b\8eA\1fAðCWþ\17¡l\b\11;\ e39D%¶[©3\99%to¥¼}¸k\94rÑâ\94\r*j wÉí] ~C\f;£/Ð\7f±áü\10öÓþ\90/\9eR\96\ e¹\1ee8\ fÛ\ 4\83Ê#ÕhÔ»nPÔpmEqè®B<B?q¾\96|£S \1c34-D\ fsú\11#YÚ\15¦\7f¾OèÁ\1cBjRå\10¡\81|°E.\v§\87\e\ 1Ða\9c<ô¤¶»p-Ö§Å\9d)3ø<
-Fd\18¢a\97\82±\84þ°Ñ;\1fÚmL^Ç\1d0\8fV\8fø\vífâçê\11 ù\\1d/X|\ra\812\95V_+I\7fñ\8e3»£\9fBT§Ä¾î\85µé\88×\91\99µ°w\86\91\9ck?¡1Ïÿ\86\8f846\82w\14J\8dÖ\0\92÷\85\93¥0Á×9\ 6\10\ 46pÛïX¡Ç½xrÚ^ÕEÞ\a|;+H%\8c¯r\95¢h¼\13òhåIÅøa ²}ßÃ\9eP|ñ¹[N§çiYNH\ 5*m<£\1d/9\8c!¶\ 4ÎäÀÒØW'&i\85eÐ\975ÞV¥\939¯IY\ 3!v~,?G\80-Z2Y'¨!Z*£\f[¢D\97À¹ ·\11¨é¢\ 5\0g\9f¦opùd\8fût7\r;ÁÊä¹Ùqò)\84\87½óÖÆ>\8f\18ceÁ:
-% -Kn\80àì¨xî]\0)
-Ä\11HÓw\8bÅçÙÇ\8fóÅâ×pè\99ô0çI÷3]5\16®#\ 3÷\95\ 5·-ºïtþ\ 3{,½õ\ e\ 2 (d±\ 4e¡?ÂwéÚ\9aj{\ 1\94Ã\16ÍýáX\8c¼"a[à\v\81P\8d|¹\8c\f_|ßX´\96"#\95I\ 1\1cù¦ßl=y\9e\17XõÄZB»ýZáí2HÞ\7fð\86\9a8SH\8c\7f -sÌÿ\86K4yf°\91°\8a\17¢ä5b\87¸/±b.±\90c{Gi\98Zb\8d7¦\97gM\¥^ïÉá$tí\9c¡ðºÊ\93Ã;ÍÍÚ§\ 6\9a,ZSLÉN÷ú\16S\r_¡h§ý\8f÷»\93¡6©u¬ÛÇÀ»îÓhT»z¸ùýö\86ÇÙ\17t9Ý\99´ÂÒUú5\8cí¶»#¼QNúÔ\1ew®Ùæÿxg\1c\8c\aÉx4Á\8b'\9eë_³¹÷ó³?Ïþ\ 1\19u «endstream
-endobj
-1464 0 obj<</Type/Page/Parent 1369 0 R/Contents 1465 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1465 0 obj<</Filter/FlateDecode/Length 1858 >>stream
-x\ 1\8dWkO\e9\14ýί¸ªZ5Haò \9b\ 4¾¬ À.ªx,\ 4¡\95\90*Ï\8c\93¸Ì\8cSÛCÈ¿ßsm\ f \ 1V¥ª\b\93ñ}\9esîõ¯\9d\1euñ¯G£>í\ f)+wº þìv\93>\rÆ#|îã¿\914Ý9\9eìtÎ\ 6ÔëÑdÊï\ eÇ#\9aä\84÷»]\9adsú©U%srsI¹.\85ªÈÖY&\9dÖE±¢´v$¦N\1aª\173#rUÍÈi\12TÉ%\1e>Ic\95®HO½\85[Q¦\822\9dK:§\99tüpwòs§K{½}D7É[%L\8b\99lÓ§ \Ú\95u²¤LTTiG\85\9eÑJ×\ 4\8b\ fo\88±Û;8~ØmÓu!\85\95äÌ
-®g\1c¥6ðSÙºp|ÂDK[ÎD^ªJYg\84Óæ\13-ç²"áàqáb"ð¨«\84\8fí!Èþ0\19p\90\93¹²¤³¬66\1cÚ(Ïíù Y\98CÑ\10\ 6\9fì\9c¡ú¾Â\85QOÂÉÎýÕÍ÷¿n®î®\13¼\1eÞiºÐ"ØÎæ¢\9aÉ<¡3ä!\9fE¹(d{+x.\84\91¥~BÞ(ÕT\15\92D\95\ak\7f4\1eÉ\96i|¶ö j\87^:\95 îaf$b²¡i¨LèÊø:\v\80Ä.ÅbÁÕHEöÈ\ ehª\8d\9bo\ 5\93J·\94¨^l¸e\88%£6M.ÿòg8¿O\8fN(5¢Êæ\ 1\ 3\ f-nª\91\99.KYå2\7fØM\88Û®+\84µ\14+@iËO¦\rÞ÷À¡\85Ñi\ 1t ^\80\9c\91¾ê¾\16Ú¨\99ªDÑ@\96{\82BnT+b9+\94¬\1cM\8d.ßÁb|\89s6\92\89à\81Ð9\eÆânÀ\96£.E6\aY\80ÂÚ\82\15Y¦k¶\rÇ\8eñ\82,\1753E*Tà 6Ô\9c\v \9f\ 1A\8e\ f/ñß8 \12(ä\16ý5\8dÛ@à=CõÜ\ 3\1e¹sl>ñ\18ñ\v¹(Ò)°© ð·BÛ*üÿ\aú)¡û¹p_A\a£«Ù\9fñð+¾l´+\13µ\ 5?R4\18u»>ùæó\9e\8b'Æ\99\80Â('\90þû\15Mè|ú\82ÎÚz¢\ 6\19é\9cõßvFä9Á\e\14 3já8²µäµP 7×Ð7\1diÐô\r\98â\12ûÎ-u]0\9bs\10Æ1Û\84#åh.B¿\96Ú<\82«[\ 5;\85ø\80>\9c`\83#V\9b\18KÐ54\9c\ f#\85ætS±£\ 2H©@Ñ' *¨uÂ\9e¬¾L\11_À¯Q@R)ªÚÓ9Æ-W\b\10ÚÀ\8dK\99\9a\81æ9pè)T¬\1a\9f\8dô^\88GÐ=\ 4\8d\fY_¼\ 5N\81½@)"û\ 2¦?è\ fË\1eDg!¬]B,X\96 ×0²U 0\fÐüuCsh\80¯X\83ÐÐ^¨¿Ì\154\95 ÔL\1dt\80\v\19[¿ávªPnÕF5\1e½?Ví&¿uj\9cQã¢\12¥ô\12\82g\rA.¥;>¿º%ÿÝ\12t\ 5(¿~þJPB¯S\f\17\0à\ 1Z\9d\ 4\92n¸ixþ\83O\7f¦¨i\80Bɲ\90²HÇr¢P©\86ñ\8etY'Ö\8bÅ\86Ã{]Á\84n5Â\H\8dAÀuÜÌË7ÉÈ\ 5dÙ\97\8fÑYñð\83¬°ºÙ:0kKa\1f-ü\a¡f\1f¡\ 3à\ 6TûE¥/'\14UÑÛ\rTÝj\9dgEäsB[¸\81e\8cb\1e\1d\e10b|®Ñ6§\19\1cG\8dË"s÷FɸG½\831ÏÙ\87þp\14Gh£¹þë½~¯\17Ö\85¨\83qhs_0±Y\fy\a ù\9d\84µÅk¼ ËÉ sßÿîyg\1d\b¦«v\FÄ\8bZ\8aTc¯)W[i7\90I%#/W\96E*\10\7f-)oö\84wuOÐõÑ\ 5¦J\ 1A\81\10Ö3fM\88·\9fðìÄ\1c\84:ø/,Hô\8c·ð\ 6\7f×ÃxF\8dÍVpv\85E\97<gX\80³ºBÀq\92\90\9d£#XZ*TÀ\17 \94eʪè»oÙ8C"J\95\9fYØ)tQè%\92Ýò%\8dáqUÅÕ
-\eF\82²\1f\12c8O\ 1å\92?%Ù!>ý\88U{hõ\87ã\87]Îû\90î.¿_^Ý_ÒéÍÍÕ\8d\1f\91w\bäpËÍ\17Öí/ñá\8b2b¤*\13\98$£Æj\10Ê\ f\fN\81\ fE\9f\90W\90\97\rtÎ^mD\91l{\92Ö>Ö-lµQ\vTßÏcSzUͱ\17ù\rl\93y~ad\9d\fÚÊÌ\8e\9e\emm¢>ç\8d4géÒ\1ezà\a¶\ 3¦:\9c¼ $4¸ÛfæLÕ¬\99\1f!\81f¶µ¢\8bð´Ù\rZ|Æ\19]д\10\8c¦ðu³ynèST\9b2É;\96÷ñm;a\91\ 4è|óo
-¯°\a|Gà\15d\10\96`\8a?1\1c\80ùWxí\8d?Üû\854¥r\89õkܺÀ°²?L<Åã,_
-\b\15j\83\15\8d·wÞ5\97Âð°\ 2\94\9cJ½¬ó\v>d¿]>s§ß,Ø\1f;EW\15o(¢\bál\94d¡Ã¾Å\ e>2ºÌÓ7y´üº
-¥ó\8b2+4\b\vÜ\84qÍ\13óc\83u¥\9eß\1aD\8cáp%¥_Û7¢d¬´\99ØkØs°\8cùR\83\10X\8cYî_ݹ\80.îç»"Û\1f\f·Dö\80z¸ÿMÑãqÒ;à_ÝÐëa2Ä\b
-K˵.TÆ\e\akøµÑlß¾\ 6\11£d\94xë\175¶ýxýS\15Æ\0ß; B\15\82ÅM/\94Hñý\ 6W\0÷®\8f\eí÷Â;ðúÅ\1f\8bO\14xv½Q¥¨`H\9c\v\ 3¸ ;ü\19S\91\87Ð\8b«¸< \80þ\1d\85[\9fWAA÷ØôôÒB(i\80\8br0\98пà¹\9d{qÅ\85)Þ©Æqlõ\86¸W\8f÷i8\8a÷ØÛ£\8bã#\ e÷'_WNtVs~>w\ ex¯9°7ê\82Xyë·*<\18\r\92Ñp\f\16âÄ Ë\86N';ÿìü\a\9b\ 3\ fZendstream
-endobj
-1466 0 obj<</Type/Page/Parent 1369 0 R/Contents 1467 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 635 0 R>>endobj
-1467 0 obj<</Filter/FlateDecode/Length 1938 >>stream
-x\ 1¥XÛrÛF\12}çWô\e\99\94\ 4\12¼Ó/[¾H\89j-ÙkÒqv\8b/C`HN\ 4Ì \18@\14ÿ~OÏ\0\10\bk³IÅ.Q\ 2æÒ=§O\9fîáï½\90Fø\1fÒbL\939Eio\14\8cð¦ùøòSo¾\b\964_Î\83\11¥\14NÆÁ¤zJhÝk?ct¾º\1cm=ct¹\bVíµç\94ÆãY0k\8d¶\9f1:\997^°Ýö3F\97a°h¯m=ctµ
-Âöhë9¥I8\væíÑp\12\8c)\9cNa/¥é|\89sû'wÞÙ\12ïÃÑ\fs0:\994O<
-Üh5\v¦4ÅÑF4ÆO.iß{·é\ro§\14\86´Ù\ 3îùrA\9bØ¡<¢M4(\8e\92NGUHÊD&sºK³D¦R\17J\1fèsnö*\91\96\84\8eé³IT¤ð 4}S:6'K\ f\e\9aÂ\90x\12*\11»\ 4ör\93Ò½\8arc;\b~ØüÖ\eÑõx\ e¿6ñàg \97\ 4~¬IñG\1c«B\19-\12\8ae\81\1dì\e\9e?¼\9dWÞ\82\15ÍÒoGQ\90Ø\99²h\ew>\9dé\ 6\e\99ü\1f~õËY\9bÅ\eCQ.\ 5\ eir\92\98L~*Ðu°\ft\11\19½W\87 3Éå.\ 3:\9b\92ÒÒ\16TZI\f\17\ e½\96ù\13Àº0\7få\17Îê= {±@>Ëî\9e@<:\92²ü\1eø¸°\ 3\1f¥£¤\8ceL'U\1c[vveáw¨\91\19\906\ 5OøfòG[\b\86±c# Í\91áV\88Þ¥£d4^=l\10?lL@\ 3s°_Ç\19[ªÂÇ\14 9ø@\89®\e\1fL*À\a\a\ 4¸ñ\9d\ f·e\ eÈò+\12Iq4åáè\10¬é³\9au<\8b\84¦\9dCë\ 2\15\9c0\ 1\96ÎqÝ9öÐÇâ\8aÏqRIâ\909\ 1\96\ 6DÄÁ\13w'#Q\a1\97\ae\8büL\8fò\f\9f\84;ýu˪£©,hÇÃÈ\ eÞ\ 4\7fJä\a\88d\ 3úÙ\9c$Hpå\86}\9a8ö_RĹ\94\97\9a\8e"ËTr&©\1d\f\1c\ 3\17²\96I\ eI@ÿ\ 6ß´Äi=\98\rG[tº¢È¤©Ñ\81\88Ó\ eä.U;+OJëâ\95¹\ 1ݹØ\83ûOR+$=\15\862p\82ÏP\9c\fïÓòïGÞ\83üQ\11ô\8e\95èÍvë,m·Jï»nÕ\8c\87Ø0+ÙÀNi\81\08\84\12c\1ei\ f¢a ¥RCt,\9cI\10s¼ÉOÊÊZLêdy0Èg\91X\835Ð\ 6÷\11«\F\90\823Sº\7fTq,u¿^X«Ð\ 6¶k\ 6"\85ªÈrªÂ>§\vïy\99\8aì.óLE\92>\8bè\91&´\1d°(2\17òí\ fÎõ\97=;¸A"\ 3ºy.r\11yh=\84¥m\12êE4¬·\92Á\88\16\10Éás\aI\10=\90\81;n¿Ê·\97Õ\ fÅÔfs\81\19ϯ,u^V\ 6 ÷8Æ\8\99`\13mî_@òWt\8d!a¬\84µ&RÀ\ 6\8fUÆT¼Ù\ e\1c\8b\0\99\85\1e ¾;IÒC\83ÉÂÒI&IEÌ®[.0\99±Vq©\ 1UQ\83tb\ 4+&[íähe\91Yõi¿GèV\v\97\1d\adµ@\ 6eg2ûöBO\81\9a.5ÏÞB\1aAAì^\19NLä\ 4\97¹â\84\9amÿGæ\86ÞÆ©Ò,+~ü\9f\90¤Vi\84\1fµÃ¯ÕÉámT\95\8ekt=!\85«%×Ìíx¾¨RV\7f7|=\ eC4\ 2\98ñ\1e¢ îALcÓ(ñÿ.\86wÚÉ©;ø!7eVãvDô\12\1c\94\ 1ãý\9e\9d\1a(Ð\ 4sZ3¡ó\ 1}ä\84\85\88ñÙyò\92Þ\7f@Òx²Ö\9aÕÒ\8eí¶0&±Ûm.í£*¶[\8d\92Ïpm·\95°ux\ e\ eT\8e^\9aöÕËû\17%N´vg^Û2\16\9b\12\f¹ÆpôÈ}Ì¥W\ 3·!¬\ 6ßë\14\1fì\0Zì\1dSX¤\ f\ß\98.%\1a#G\18\95V\1d\91\95(¯ûêø\19lY ÕqåÒù\80¾jÀ[\94\1a¹\81bP\1c¹ôBìYì8\15b£aD\13W\96s\15\85TDG\85×NáP¿¬\ fFÇ\90#?\87\ 6ÿª¡Zðîö\9dð±\99>Ê%WI6\98Ë\fNY²åá -þ@\8a¸\ 6\90£[f±Käí\0-TüÆ\ 2¨Èà\ 6Ç\18e\17Çêx\84\18¹&qõìD¦ò!A~pæ\1cr±Û!q]Í\1cÊ"\1aºí\9cïߥBÈ\9dï\1f%\ 3î\ 2®Á4'N\82;>\0õ¿Bëè^hq\90yß\ 5´Ï"ÞzÉ\1e¿tÇ,\815fk\14\0\89\8d<R®\1es\84Ê3öiuf ½6§+:¶\r3j\17Æ]JùVÉö]ÃÐ\81ªë\97ËÞ¶;MKM1ë\8bBãÆ$$\1cÆ¢÷«\84\8c\eTÎ2\8a|¿¤åsi\9dqåsÉë\12æ7±\99\91=[h´ISËÞ\ 6\87ð\9bY`Y\95CWpÚmù%\9e\1eÎFÆ P£É\ 4\97\ e\17¹Ù¨ÊúA¯\86\9bî·\1d®6b\7fo×\e´6\ 5ý¢äI:\82¶¸õ\7fü»\1eO\83\15Ä·qð=ë ùþå¥ø8 \149rô\89é\8cû\12í\8bìÍp\88Ï m®BèØ\86kÜ\89\12µ\eÞ¯?ÞÞ}¼Y\ f\1fn~ýº\ en~½©øP³\8fÁ¯C\84\16\85ïX\97\91þ\ 3~½JtwëjjQ\87}\97\976zR\82Oà3óO\1feýå\97ͧO\1f\9bÓ´pöålÉ·ÚË\1c^Q\88Ûè\1eY·\fÂ\15~\85+_ÒæÁ" wåóµ÷(\93\f¤Ö>³_©m\vÜ£±7p«n\98©Ðg\3Ë<B\9e ÌCêM\9ezþ78à\8b\1e\ fñ$Üe\12®\17¬Qö\8a¾Ü¾ïû»ol¢\92/Ån}Ó2]T\9c\b\12Î}(â\8c\e5ßßX\ 6¬Hwâ%g9UÑm㲫9 g:\18\13£ÿÁ\9d\ 2\15\ 1£Î×\83Ô2Çx}ÿ\ e)\88ÂÂÊ\8cû¢¨ú=| à®!¾\1e\19-ñ\95ÈÂ\ 1»~{ÿî-ßÙ\7fC\ fL\1fÚ.sÀ¯ëé×\8bÑ\8aÁú\13 O\17Ó`1_ú\14\9e\86¼Íͦ÷¯Þ\7f\ 1)Î\\1aendstream
-endobj
-1468 0 obj<</Type/Page/Parent 1369 0 R/Contents 1469 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 640 0 R>>endobj
-1469 0 obj<</Filter/FlateDecode/Length 2010 >>stream
-x\ 1¥XÛrÛF\12}×WôK\8ar\8a\ 4¯&¥¼lÉ\96\9dUŲ³!w]©âË\10\18\90°\80\19\183\10Jöß÷t\ f@BPòàÚr\99\12qéë9§{ôõbJ\13ü\9bÒjFó%ÅÅÅ$\9aàÊéã·\9f/f«U´ ùÕ\f\9f\ 5~ÎOßrZ_Ì_Ï¢×x÷:\9aáîb¹\88\96Í7¾ûfs1~¿ é\946)ü,¯V´IÄü\846ñ宲G\97\99}ôjó\ 5\ f.\9b\a\11Éh¶\84\9bMrùù <©J\93³\85¦$S{c\9dÏbGÞÚÜÑ\1dÅÊPí4¾S¢wõ\9eü\ 1\ fÚBe\86r»·\86ÊÊÆÚ9R&¡ãAÃ\18¿sGif\12ö<¡Ñt\8eøá\ eï\16ÿ\bÑ\9cÃ>\ 5óÉh²©8Øiç;á4Ѥ¶
-Aì\91\15ûÝåºp\949Z«b§(óNçiD¿Ûú\1c7Â\1d%dK\9fYÓ\v\87íí¬?\90+v\89Äoø\17¤êJ\1dgé\13òA}\ 6!ñ\?ê|@¸p<dñ\81\1f«j\13ÑZ£:ðR ëRíµ#\14\85-\ eÙݨ\93¾Xç2án\14[\93\12GPX\94,3øµP\1c$¿.\1e%Ë\10¸\8bhÃu\97\ eH \92`¥Ì^SZÙ\82¦½Ü¶\l¼\90ª:÷ÛW\1cítBÛË)\0Ø«£rîh«Äm_ R\10p\v\8f\e\83êè\8a\ e:/Ó:§Bû\83E1ÓN\80¨>lǶ(³\1c8\92FÔ\f;.Jèõë\ 6y\97´\8fc\1aíÃÕ\16\ 1\97\94æjÏ ÂÔ1Ës\14#ÎëD^îT/$ß-\14 ÈIî2£ª\fuçÒª<·Gz\ 2\ 2\10\95ò^¡SûdÇßøYtÌplÒñ1IG\1a\0Gt×\a\bª\82ì_\18B£åý\16ù\O\û¸!ÔñÁyiã\10\ 4¨\80â½öâ¹s\8b-\16êA`Ók\ePatÌ0\88è×
-´â`c_å#\95ûQ¢síµä¹·|'±GÔ ¤Ö\90rg¿1#\\9d¦Y\9ciãÑt`6×Êù!c«iK§²!P\9fA\ 2¸p_`ZB\ e\16\ 3xöÚèJ±s\1a|pê\9d©\8bMU;¯\93[\11\ 37\10\88VZ¥^WÃ~ʽ4Y><þsÏÀMm\0 6ñ¡ä\87(+\8dÂJ\91ð)ÀØqîÏkß6\14I:W\17\ 1wʳ¿.õ8¯\83zÔfàÉ¡#\8a\10i\9e?\91;Ø
-\97\98÷Y\ 2\0s\15lÍ\8cYÛ!\90H;í\8f\1a\ 1\96Ýn\0fÐ'éF\bWžf{½<ýSÉ\11Á\f\ 2¨ \ f\81jC©3Ë$C³A)£\17Uð\99©µ\10\91ão\99¸f}\86\ e3\v\ 3ÇÀ8(N\ 2Ê \81\ 3\<B3³=°gö?q\18]\9d÷¸WªJ\15ô§è\rß\1f¿\8f\e^\8e¦Óh2\9fc\84@£·³×\13
-÷[\866·O2\8ejŹ@kô\81Æã?\8cö»Ì:2
-AB\1c\9c®\1euõßïs2\9a-¢ëåê<,n\fïß\906
-2\9f\10,:QGL\88¸Lê¢d\98«G\95åü@PÁ\83÷åOãññx\8cä¡2²Õ~\1cÑ;\81\93ʹY"i\1c[\87\ 1{\vY+Uü\0h8\93¥)hϬþ·É¾ \1c?gf>£\ 3\86£\e\8aô\ 2\8aL¾Üª\ 4Á\89\ 4w\9cC'\ 1_\95Cå\8b¾¨¾\87]_©8@\15\9f20ð\ 2Ýgqe\9dM=Á\1d¬;HÊ\90>\ 2\80\90\15º·&óx\17H\7fP\11¡è\855Àé³*ü%¿Ïvoy\86\81oÕÉêÛÛ\ 12bïg\9f\18iÜ@`
-Z\ 6=~{ÛR\12\1dYãë Ì£^\11;\1d
-ÁÁ,\94Ç\1d²\92\85\1d å·E ]\98Ah"W!\14Þ\9d¨¦Ì\13!g\19*5ÔÄ!ç,
-¤è4ÌÛ"j®\86\14 ²¢«TÅ<QyC(2\17׶v@}¢1àd\8c\9e\ 2\r2\aÝ~\990ë\rç×\15\11k \18\12?ÌI38z\0¾õ\8e¶²êbs© âÀE#͹\8dUÎó\81Å\99y\8eÕL%1\14ùÔ{y¤WPWï`9¢7\90½#oiRÏ\16Ëa\ 3Ð*l.Ç*\8387u\at±Kp\0)\86²\13\ 4vè¾\8a®¦²r^\ 5Â\83uìù¼"Ê\ 3£ùõ\92ïÿ\13ó4±XèZ8\f>>Gä\80§
-´\fù}>Ï?â¡x\ 2Õõ7ν·ûu\ 5î.`\8d\vÚ$q2Ê\8dm\86*Tûk\8dâ\82ø@G]\82÷¬7^\97Í\86\94Z\9eÿl\85ëÅ\14n¢Æ¥^u\91\ 5ºHÿY`\1d\8fæ\8bëa³×\81²°/x=\13ç%9ð\9a\8cÓ\17ÏôÝ<¯
-^\v l\97\a\f :\a"°;e\ 5´,\bOØ»N@MO\85D\91ÇL^\84.\8bnÏ\9b\8cI£ÑyYlÿNUZÀ#\1al=/XÞmãóGúbv\a\1ad<ød¢\9d½\ 3ø\7f\a\17ÚÈÑ\82ip\83Â\v|8Ð\13\ fQ \9c6x«É\1cç×\9dd?[\98^{\85¡=B\16\9eÇ\9dïo19+\9bÓ¯Êè\1cß[\8còCÕc\86\13
-.Þ$r"éPá;'ß\1a#?\ eû\\9f\ 5/Ó\92\81\9egñ\ 3ócðé\97A\9f\87ßéüØbCÍ\1awJòYòÿ§\17ÀA£¸\7f=\11\18\fm_1\15pÜ\v*[Bk¾ÓïËyÏN1ÌJ¬\9fÁ\7fÃPÑ0^Ô\98'ú[\86¥\1aâÎÀ\18¿ÇéZN¿\97?¬\7f_oÞÝÿöéÓæ\87ívý\ 4M(æ³íÖ\841¹ý1ú1¼Ñ.5\97@ÙÑöè\ 3Å\rÚmå@\11\9c)¨\81α;ô\b¡B©ÜvÛ3|Ò\91fÅåRb©Ç2¯ª'ºýða\10Æ\1f¿ÏJ\15î3£{Ñ4\v ï:aËì\ 5\10«Ò×\10Ã\17\11H+:Ûã\1d\96ìö(Ó¶O\18\17$0\9cõOzÛa\7fXT\85Öá\90 ÒÒ!7[i\99ÀÑuÇå}³°4,\97\1d\89\9fïØï\80©\ f\1f\99A³ù
-\7fñ\90ô4¤®\9a\96OçWÑÕõ\9c\16\8bEøcÆúæþÍ\rNMö\vsôÖÆu\ 1y\91Ã\98\846]®¢ÉÕ\9cF«É5Û\F«\88ä/ çS®\fÕ;>´É¬Z¬\16Ñjy\156ãÅ\8cͼÛ\üëâ\7f¢\b¢®endstream
-endobj
-1470 0 obj<</Type/Page/Parent 1369 0 R/Contents 1471 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 657 0 R>>endobj
-1471 0 obj<</Filter/FlateDecode/Length 2189 >>stream
-x\ 1XÛrÛF\12}×Wt\1eR\94S"x\ 1EJ~ÙÒ%vT»²\1d\93YWj¹\ fC`HL\ 4Ì0\98\81hîÃ~{N÷\10\94DÅÙdåR\95$`fúrºût\ f~=\1aP\1f?\ 3\9a\f)\1dSV\1dõ\93>Þì\7f}|{4\18\ f\92S:\1d\8c\92\11U4LÇÉ`÷TÒôh2Lú4Â\961/NFX\8cO¼8èO\92 \8dÒÓd(«ý$Ý=ñêpÐçÝC\96PQÚ\1fó^y\92³ãs¨\1dõÏ\923^\85ÚöIÎöOñ\9c\9e\9f\8aÞô|\ 2IñIVÏÆÐ\98\8e\86ñì¸\8f¿ñIV\87c¸\92öS±*=\95UyâÕËÙQïÍ\88\ 6\ 3\9a-\19\96ñÙ\84f¹@Ò§YvüÖ\ 5GÓ ê@]\9aê\10\8c]yü{ål¨]I\1f\94Õ%\9eßé°qõ\9dlªïM¦yÓE\9e¿\9aý\ 2\ 5ÙNAw0Húi\8a\18Ìòãùð´Oq½5`·Ü\1d°±Ø2Õ¥Î\ 2\85BS§Õpë¬ ®¦\8b\95¶¡CÊæ\94\95&»#g©óþï\9däe*¯D\16\vb\81¬¹UüÄå\17j¹±^\ 3R\16ÿÉØÜm<½\9bÑ' è\83
-\ 6\9aGH\13cñT\96tuM\9bB[Z×®Z\a\9dÿEåÝá(9\1fOh\ fë;·¡Ì·¢\7fiJ\ 4k ÑÑÛ\19Â\ßë\1aÚéÛéÏÓÙ÷·\1fß¿\9f};\9fO·>è*\1dÎçV\87ÊÙùü»ä;
-\8e\ 1ï?Hÿ3\87vÐ>v\98\ 3éu µ®+ã=0ð¤<m]C¹ÖÕ\81\12µ\ 6\18ëÚ¨ i\89lÀ¶\9a¼ :¡\9fqbc\0\9bÕ:'\95WÆ\1a\1fjÀz¯©6«"ø}hg´p\9fá\ 2Õ\8dÅ~öJÀ\85;R6ÈÁ\99ÛÇ\ 1\99\80\r|XíÃvþYD´¡â\88B\8eÔ\ 2öJ¦*ÎÔ\a\84Û\80ãäÕõ\81[óãù\,\16\8c\83s¥ß£ý*¡Y¡kM\ 6ÀP±\ f¾#zTº\f8äð:\14\12Äè å5\®eÏÞeä\92Y2\\a\9a\ 5,c\81e\15\13\10^\16È\13`\93;\b5>AÑ?Ï\19Eì+X\81ë\84ÑÙ!!B\ 4Ëî£Ü\80\ 3\bWYº\r\9f\10GJ\ 4\87M*t¹^6%ýôñ\1fð\ fÉà\80eM¥±wþ5\e\vÆÞ\aå\a\aßÝ\92¦ªZ(\89;\15!¬_÷z\9eß$®^%ôIS¡\10sE\95©k$\89ÕJ2\85¾ayÿ?-Á\8b(`¼ãµcºÖ÷ºtë
-\91\8eK-¥\1d\ 3¾¬á÷mÒE\9b£I\1e¦!!\89×¹ê%\8d\91Ù\8bRW Ý,É»\132"ò\11\8aí\19Å\ 4¥"\8däÑ\0]\ 3<äH\e\14\ eHø\ 2_´,û\aDÜ\16ÁT\ 3KdÃ4s!Юk.0oª¦Dæq>^^_ÑB\ 3o\ 3 Õ¡Å»àl6\9bÄß\99õz\9b E{\88mó¹ç«E\17²\83K\8aP\95/·õ¢\f\85kV\ 5¡Ó¢Ç\16 \11UV\ eYV¨\1chxÊÕ\96©EÑ\87ë«\13º\86Í9]*k\ 1\96\10Ç\9dÖk©£(\ 1»8¦\8fóx\8d\9a\86\0\88\8cY·0\ e\84~¯\13À\81èéDçM¢\9a\98\8d´r\9cíLS¨\96\82+v«¿BPn\8dÏb}p\95^ݼ\99¢ø\1e
-ø° z\99YúÞË2\1fMêÚU
-5.îüdÍç\16\ 2¼-\v \9cd\8bA\92¹ª÷ßò.+{6äøÿeZßÌ>Ä\1ag\b]\99\83\16¦·\97ä×:ó¯i)u\8fßIe²Úy·\84\rй«\88º\97׫\1e£ó§¬è¦Ãd2\99Ð`Äc\9c\8c)h\9dÑþ¶Ü'ÉÙ\0ýnÂc vü\80Â\0GÞÐ
-í\8biì\81ë\19\14\8e=\93\9cÿ[\94Ò2Ãã\1e#¼Îu«È6Õ\ 2\ eîÉÖ\b9=\11\95Ð[\90²k±ß\93ÞÉÃ,$TÂ\8c§½TããôÝñ!³,HÖî\ fE\ 3O÷¬6mÖkW?c´ÿ}Nhùw-\7f\8aÁña·}\83\bÿÚÀdéÿ"\81ñ\83«\916gïÞ¢\9c\1e¹.\94ÂêºÁ®\98÷{tÃ\95îÁFð¬Ö"\rø S>ï{¹³\1d\f\1dL\ f\ fzÕÂ5!jì²F¨\aN\1c\ 2K\18%´ªvæH\\ f}\0mCO\94\89Þ£½\a[°\fg¥i±(9HëR+\8fw\v!\ fÑñÐ\1dW\8dÉy£\ 5Ó<k\80\17åFm=Ü«´¤Ë\97úÀ½+\e\e4Ú \8b\aï!ɬ\83Ç
-¤·\vä\16\9d\11\83\ 2\87æQ\97Y5ªV|\96MGOÊ\9b\8cós\8d»\80ÉÀû\18,´
-\r'mxú>\98
-sØ\85Å\80\89ÿv.°âÎ\ 2\91¥\15âë;¬íqN²-0¬àpW®Ö_h\ 4mGú\83¦\95\9eǺÜaÔöÖ\r·J¸É£%\97\97\14\8dD\8aMk<+f#d\9fÃ\18\8a\11\ 6¯¼L½Ò70$Z¼:À©± ¤8vz4\9e2g°\16jQn%Ê\12U$²¾\a\98\98p³\98Ú0@*\14Ý\ fle\972¥\9d0\94\9c\13ÒÓ\ f\11rëx\14Iø¯U \15å¿!\9cÁ_.ù\9a\84>E>VìËÁ»Á\90\9bçF¦\92]úï°Ã@\12\13Ü-\ 2
-\ 2¥\15KóÞ(ºúçt?Ëp\9aç<\9fËÝ\85+¢\84c\87Ne\85Îî Ã`>j¾BS\9cÕÈqD±Rwh³|+hË\1a,Çó\1f/.j£\97'\98\9bù*°Ä_»\ 2s:ËÕÂ\Û\1eñBé9\82\87·\aa_ht#ÔF[Th9(ç \11v\9eÍé\etÊ=µðdCÚf.\87ô\1d#x\9a\1fï\90Ì0Éùx×Í\ £\ fQ\ 2+.qãF\17ü\ fæ\7fXÍ\ 2篾B\98c(ùú³g'\8c2dÍ2l©sÓ©xl-\i04ù\ eÜE\ 1ø\87\90ré(PÑI\ 4Ü3\1dÀ¾\ 3¬8ÁÍ
-k a'ô£¬ß Ë=mj|êùTþ\17ÆÔ\888\ f\ 1^è\17w\0þ(Ád\8e¹++øÆÁi)4$\17\ f¦6æ~üåÄð`;©ÿ\ 2\17LmA\9a&\ 1\95I\938\8cI{n\ 1Ò\8adÒ\95a'
-\8a-Ig\855\99*\13ºU õvÈ\11Rà\0ÜK\0,\e\13[\81o\16>«Í\82Ùö\0=fCìD\8ep\88Äl¶\95§\r\1eZ·\11U6\9dÅ\81ÖЩڦ³A×\ 1Ì"\ 1\\8cKÜûeÐöÐ\17\8fû\14\v\97ñ\97%=ô-VÅQ\97;\1eªt#\14\a;\17ø\1a\84\10æZ\95xËWO8¤\98Âu}"\92~?\9e-=ï\19¼\1d¹ø\e\95\fTóá~ä:ÛÍ"\83\14_ÆÎS|\19ã/düièâöò\82>Ôî\17¦¾ëÝ\1dKn\9dâÜ`<Iúg)u'ýsÞ\8fÏmÈ\ 6fËx¯\949\8dëNÆ6\19ÍFø\9e7\19\9fůS£\94Å|?;úñè7dè\16öendstream
-endobj
-1472 0 obj<</Type/Page/Parent 1369 0 R/Contents 1473 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 662 0 R>>endobj
-1473 0 obj<</Filter/FlateDecode/Length 2127 >>stream
-x\ 1¥X]oÛÊ\11}ׯ\98·*\85EK²¬\8fÛ¢\85}o\92k vÜHEZÀ/+r)nLr\99Ý¥\14ýû\9eÙ]Ê4Q (\8a$v(rwgÎ\9csf¨\1f£\19MñgF«9Ý,)FÓd\8aO.?¾~\1e-§É\9an\17ü³¢Ùíí媤íh~³Hnèv¾J\96¸;¿]&ÓxÅw±\ f-VëdN\8bõ
-ÿ\9fã\9f\91\94\8fîw£ëO\v\9aÍh\97óÙËõ\8av\99?wJ»t\9cks\12&#åH×\84+:ë6ù°û>\9aLi2»Á\8e»lü/ÝR¥\ e\85#U§e\9bI~àúÓ2î;¦F\18§D\19>î\8e\eS©\ f\94«RZ:\19å\9c¬I8\12\94É}{ R\1eeIV:r\9a\84¥ªM\vþ=\9f&ô\Ja%eºþ\83ãM{±XYgä
-I²v
-9ò\19ûÖáR·\87\82÷:¨£ôO¤ºvò'2ËÃ\ 2c\90_%\15\ai}\92×\9fÒ\98Ãd6K¦77Ô¥ü2¿\9dÒû|â\13\93ù2Y0*/ãgmÚ\97ç\97\ fô\903rT\b\9c-(ÕUSJ'©\96®\ 2°Î\88TÒË\98r£+\1f\8cndêC\17[£\1aĬ{q¾|àÓûUàýSQ\ 3²\88À\1f\93_ï\9e=À\8cÛI\96åÿ\9fTDÞ\15ª~ÅiFæmY\9ei/Á\rdæ\9cHqëÀUÔi[¡\b¾|5ÉJ¨2¡_umU&\r(a\1d?È¥2\12Å\16õ°\94Ì\1a\vJż÷:;wxÄ*%´Ãr+ª½ Þ\9f7,\95Ū\ 3°\ 2m¨h\ f@¹ö8\12un¤\ 6ðW\bn@\e\84q&Q\96¨\88Ì|\85\1a\7f\18@5d«}\ 2²ä\88\85ãU&&J\19\18\96:mÎ\7f\rT\18²åB\857¶t¢\98Ì\17Éf¹¢ÉÍ\ 6\92\ 5]~×'\84E\ ft\0åu\1e8ù.©xH§\1f\90¾Û\7f§\ 3³|´µ¨\18ÒJ\1f\91\89'\94ø\ f\10]E\88\18\7f\0(©)\99\83L¢S¬\1a\0ô±Ô\90¿gNOf\9f=¾\85sÍ/××\1eòÄ\97!ÑæpEi©ÒWv\8c\10\90\ 4O¬\83Ex\85\89@ÏúòTÀîöâ\16Û¶i´ñlx3§1ý\97u})l=#@+á\80Á;\10Ãa\1d\86ã\84¾\80\8bÒ\14¢±P\8e¤B\1ao_=tûnC\8dæL¢It\92d\0 ±WOh\r5tø_\ 5@\15\88õ½Å3þN.\8dAX\91Öb\8fB\rØ(²\f\88Y8B[Ã\1e-X\agl\8cNù"\aÓ±\1ed´\1a\85;\89s\92$Á\ fz\86µJÖ3ÚÌ£\17ÍAµ\90ú\86fðø\1cäY'³\rL\1c$Z3\ 1ñ+¡ß4ЪY¦ÎèÒ;þ7Ugúdióóúñã{øæód>\9da«\rÌÑ·\ 2Öc®ËR\9f\18\v\vu(Ð\80\9d\16ÛF\13\8f~«\8d:¨Z\94ôÛ\97Ç»\87§ÄÁ\8a¹\e OyTºµð\95ØO2:)W\f@òENè\91ûBܲB½\r\1a\r)K{t\88\8c9xbì<§{V¢_C&\9d\1cÇ´mdÊK?f\8ac¾¢\7fXNÁ\9fò>ëñ\15_÷ù¶?ÓW\95\16Ü)·øÙÈÐ"/ð \16\ 1\9e;HÜ\ 3Ìd\16tÒæõ`tÛ\10\14Bò§H\1d\92¾H\92]öàMG\9aÊr\92è\17¼\86ö\ 6\15ÁÍ`\80\99ÊÁ)YC¿HÜsE\fÀÊÀP£Ð\bÅ\1e\b\8b\16g ?¦Â\97'\13ø\98\e*V\vk5p`Ý0æÞÈ9â+Ï\ 5\14´\rM\15$\11©§£÷Ù\18XBw¥Õ\1e\9f\9eYtñA#a *_À¤¹[A\11\a\ 3ï\ f\82h4°|o~g²\7f<´\98^ÌHàÀtòÃBÀ\13m\1e¥Æê£4\83Ô_ÆO»xÇ{\88Fîðô³u\12 ^hòö\90\rþ\ 3 \95½âÖ\99i\8c( \11O\1d.0\82vO\9f©Ö§\97\ f\9d3^¼\18
-Ø>Þ³»±\8f"0°\1c\8d\1c\83\eR¬\7f\81m\91½ü Ö¹P\ 5_7\f=\ 6\8d'\84è³\89M§[h\vÝ\96à\ e\90i\86\róB\9c\1eV,?U£;C\eø\7fBO\ 3
-QÞÖ^¥¢TÎ÷¼\10"Ç\a\ et\fEUð7\v¬ñ\93\¯Àü$n#\9b\12u ÞtÿõË·íÃÓgÖuB\ f\8ebä(xQî«@Ô\8eÉ\9e¹Ú¡\ 5#\ 6ã
-®'Ô\bÌbiCQ\86h?XÛ¢8\9dÕGOei\94r\12Vv\9a©t\86\81\92\85\ 61¤e{ð\r\1d\91G£Jbq#\ 3¸òÌý\ 1¡ü¶`F·q\f05ªqL\18\80Á<f¿\ eÓ-ÏÍ\8f[ê\8c\94/{¸òó½»\9b\7fF\9bíá\e¸\84\19®\80Ë@\97h'\80\91Ë\9dcÊòÎÀd½¤\11\ 3î(ù\rbg¶õhÉòí(uR¶\0\86\17¨1ì£*"K\99íFþ\0À\10+G-ºbxf\ 6óÉ\95Ácºæùt\0\94\91\rª\89\19\82MIÒw½\ fè\1cA5x\ eÎT¸\85IÐ\ 2\ e\ 6\8d\85ÂvÍ*@\93\85£ÖÊ\86\818´t\91U
-\1fa^ÆÔ\85\99Ç\ eNdS\0\85dæ\19\aDЮy\ 4çá\9aß\ 2¼º¬k\e\95a(GÆ©\918®\87\ 5÷\7f\1f/aß\19ÁZp\18üÉ\0¾;I9äEp\1f0@%2á=0Q²Ã\9c!0¼Í\9cßÊ\1e\r "Ë\10\93S>u,©¬,\8fì6\8c\v>OU\ 3Ý\86.Ð\15\8cqWÃÌ3\f|H\1eÀ`u\81Yrè\ 1\96~´
-©¾\99±\9f\r\19\95´Ô8\96»íQãôèüÑ\ 6\86\8a\vm\11¡¢_ä\0\ fýÀú)\87ݼ\12¯~\864Ñþ,#®rßÓ06\a¥\1c\95ð\b\87\92\ 6Ôþ\14\96vD7-ø9¨í^8\90ßO\b'&´\a8ì\18eß \92\15\85\91¥.Ab~\f'c¦\88-\12õɤ}u\1aM\17Ï\81/\86\aº:¼ÖöƾûðNS
-øclÄñ\1c~\17P\87\16X\aw\ 5ì·P®=^\82!T¶0¨\15Ä+µæ¹\10íÃWåâ\ 2~\9c\8a0\r2Å<Ê\86\r\16\ 4Ä~áûøZàmÞ\87\9ab\7f¹(\95§Å\18ßÃsOÀÝ,\19G$Ûî\ 1S\fSÕP\81à\96ð7ß?£Ø\ 3Á\90Ç .¼Yú×9@Êkî\1f¾lÉ¿m\84 îϳô/Ü&û·Kq\96&\18E\f8-4Ø\16\1c!x\a\bÔ\80»~\bÆ{öå\1d{\96Ä\91u\1d_\rf\v|q±¾¡å\12_s,oyhÝÞ=ÞßѳÑß¡1L¯á\9dÓ\17\86\83\9fÌð(/\99¬¦\9bÿiÈ]¬\16Éj¹Æ\9728e±àÍ>îF\7f\1fý\e#¢·\93endstream
-endobj
-1474 0 obj<</Type/Page/Parent 1369 0 R/Contents 1475 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1475 0 obj<</Filter/FlateDecode/Length 1937 >>stream
-x\ 1\9dXkoÛÊ\11ýî_1p[T\ 1dF\92e=
-\14\85\9f÷\1a¸vÜXin\ 1}Y\91Kkc\92«Ë%£èß÷Ì,\97\96h\15A\9b \80ø\9aç9gfóÇÉ\90\ 6ø;¤é\88Î'\14ç'\83h@ãù0\1aÓx6Åï\11þ\95\9aRyp1\8d¦ÝûW\8b\93\8fwc\1a\ ei\91²\8dÉlJ\8b\84`g0 EÜ3\15¾\8fµù®]\9f¶k\13¯)¶E¥Lá¨ZkzÔÕÕý§g*T®É¦r/³/¶ §ËﺤÊRí4\99B\1e¥¶ÌUÅ/.ñçùöó¿n?G\1f\16ßN\ 6t6<\8fFðÝ[Àl\9c\19]TüIÁþ
-\1dWðgq\ 3_{Ë}\82\1fGð´ì%V;R\ 5=?\9í\9c®êÍïË\ f¸\93\1c3¡;\ eï\9f®ÿLnP¨e¯v¦xilUp\r;\12à\19J\14"\1cEÄ&pçl4A\8f\ 4í#âò|}u\95ú\82\98\7f\93²\94ú\8fZ»*\14³ÔUi4ª+åÙ¯"ªVþÕq\92¶è\ 4ìâÒlªwa\9dÿ<¬ÃZJû|X>}.\98Óª\8c×\b\b½BP\86\v\9b\90I PÀEjk\ò\18\ 5_iÀC%ýN\80x/$æßÕ?t\W:¡ÕN\12õý\8dè2\18#ðÒß»O\89qm¤iisy\86ZîÅú.ûñϳwºH\90\ ew\85\eò\8b®î\8bÔ"Ti\89Ç\97ná\ 5¸\85$Ä\7fÓ\90µ\ 5Ò¥\M\ fßç\8e7\ 1<Û\94R
-¹)mj2í"z6E¬Å`©ÝÆ\16 \87\0[\9aq,,\81Ra«@<ÊëxÝq\9a[\80\97ùx$ÈàZâøj\8aùï\r½\1c=|y^ Ig\92\96¡l\80$ÇÄ\80ù\95-wm©\ 3Ø/ÞJ}>\8f&Çð߶¯Éí]\\ 2¡\ eÖÚð\9b\90\81\ fÇ°«ê\12rcëª\8b³\9d\ 5\86n£c\93zh\1dñÄ=\97\8e ¿\18»\eU#º\ 3Âõ\ f\95o2Ý\17ABîЬå2-u²\Fm\18÷)×ûlO¤¸ÖmaY9\84\17\ 2â\1dñµa«9DL'ïê7ùyý\8e2à]j}©"Út \91ÇhÝÁKfí«gøõ§Ç»û_¢§O¿y\ 6nlfbÃô\a\#ºgI\a\9d\ 3óû\8d\f0ë½0\1cÉ3èäÔçùñnNC¨d
-¹¼ ³ñØCf\12Í¢aD׶HÍK]ªÊ@Ëï\vW\95uÌ¿Ýß\98¨[[¾\92ðÞq\ eoÃ
-Í\18ñ¬\92y\91c A5ÒT\97\9aéµÂ\87\1a³CÑÓ͵ĩ\bÐOìÖÑü\87\17Õ\86èL«½\0\90(\ f\19ö\85qØêû\93r\ e¡$\ 4óån#±âU¦%Ë\a¨\92\b¿þ«\e\ 1ÁÇ»¸\19µgÓhÆÓ\eñ/G\93©Ì\93·Üäa;\10ß\ 2ÿøpÛr7±â}c1ï\9c£\ÅkS@\ 4ÊÚU¤â\18:]¹ÿÉëÙ\b\r\99¿å\8cA\jL\ 1\90CѳÊW¾\9a[\93e¤2gá\ 5\9e\98\o\11\1e\94¶ñ~Ñä<\1aE£\ 1ÏL¤w.£Þa*\94¦ÚQn¡@LÌ\9\9e\b«\12\9dÒe§åBÀI4\98\4}\aÏ\98k\8aR½E\1fsæ\9bì ¹z\15ECÇü\ eR\19\88Ë\86\1c\8b7À\ fÑåY\10\91äHkd±b¼°´R¢WªÂ6\ 3)èÐ\86Yo\9c«eÕÙ®5®K\82\880\füx´¯¬æ\ 1Rº)\9b\14éÆ
-J\81÷ª´Y\86/\81Ù\83
-@ãØ";=Ô\1aLZ\ f~,{²©õ¾`wò·ÂòÖ\93d°\ fe»C«ÍÚ&mã@\85Q r`iÖñº0±Ê\80båÀ9&zÇÕó¯\97\9fo;¾¤a|o?Î\90K`}\eìͧ\87ËûÇ® nw×\95,\84Ý\17\ 5\1cÁ8\a\88X3dùM\90NßUi¼x@?°\ 1Ê\f¤\fKUÖ\16B\90È\8aѬk\97qU³\rÖ<\18ô=Å\ f\81u\9c\ 1\1f°\ fÌÈ\18ç®\aL\14¨æAÛ=/r\ e\ 5Ë\90¼êûì\91̹ì\8d\8d\ 6×"\15\ 6På^¼\94\16È\84Ù\82ìF³\ eò\ 2Ê´º¹\8eèë\1a:ÌàÊ\15"
-íBtðÆÜ7+<>\80\9cêøôC\8d-:F÷²§déBú}Ï3¿ð&\94øÀeã\84{\10\vêË»\18"\8a+¸\f\ 2[QZã\ ekôòC\98\b\f®ë\17k±:&Zq\84ÎFôo\fl·¶u\96 \89¹ÎWÌNÞé¹pPj©c©_àS\9eà¦`çOÃÕÁQ\83±nD\1dö\ 1\88\ 6²\1d\99ò\98\95²m\ 6iò\e§\88Cfcæ·w\89
-7s!¼Ñ\b«Ïû¥6nÝ\8e\13|ÂÅÝ÷Ù\8c\171öpåw
-Á\94'T¨\ e´dG[ã\97½7yàÏ<\82Ø\8e\ fÿ\ 6f\9a\16\ 6¸>Ú-T,ÚÂ\9f´\1a\14,I\vß,¡ÚÈ\1f\b\12ê\88¨p\99\v:miôw¡É©LøFÝ;¸Y[`\1a%\r><\19Ä.zÍÊÇdkÐ\ 5\11D\ 6\10´Vq¿«Ì$\gÞZØ\b\1fâxÄ7ë¶ßø\v@»ã\97iH)Ï\16\7fÚcÉöþÂ\8c\83\11®BÑl\aË\1e_\9dnÂ\88ö!\9dâ\0øZðÀ\97åX°?úX¤\12ø¤ã×÷\81³\8eh>ÿK8ÍV&Ç\0\94\96ú(B]T \frk\14="îÔ~\15<£e\16yzu\9c\1eh\9bßÀN[Q8Å\9eZâ`Í\\b
-\83Ã\b7ç¿wæ\ e ~\\84¨\96=9®³¿}¼ª\8cW·\9d\8c¼#\19ô©4/ëê\1fË\ fM \ 1\82\8b°\f´xØÇÜÊþ\b\92Õ¬A\8d\98H\v\83O\1cþ\12\9d\9aÂ\b\ exèú\8d\82;î^a¯S\1c9\81B\1d!qͤöÛ\b¯ý\8d\8a¨l«v{\18\15`´\8c\ 2\ f\1aQ\ 6©ZÑõ¡5Ëɬ\99¨C¬¥³Ù\88&8Ñ\fæ²X>_>\]ÒSi¿\ 1¹tcã\9a÷\v\195RÕá\ 4ÿÅ2;§³é`Î\vÉÿµÐ\8e§ãh:\99ùUp|Á\86o\17'ÿ<ù\ f©±¿,endstream
-endobj
-1476 0 obj<</Type/Page/Parent 1369 0 R/Contents 1477 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1477 0 obj<</Filter/FlateDecode/Length 1449 >>stream
-x\ 1¥Wï\8fÓF\10ý~\7fÅ\80tâ\90\12\93_MrHýÀQh\91hJ!¨\bB\e{}Ù\9eí\rÞ5áþû¾\99õ:¹\84RD9!9ñîÎÌ\9b÷Þl>\9e\ri\80¿!ÍF4\9eRZ\9e\r\92\ 1ý0\1c&c\9aÌgx\1eá\7f)\97\17ãñìË/\86Ãñé\8b«åÙ£ç\974\9cÐ2G\90é\1c\ f\19!À`@Ëôb\9aÌ\93QBOm\95\9bë¦VÞØ\8a^TÎ×MÊÏî1½ÑÞ\9bê\9a\9a-½¶ªäÇ·N×ôª¶¹)´{¸ü\e!¦4\1cr\88Ñ(\19\r\86Ô\1fÍ\93Éx\84X\17\8bß\96Ïî\85E\93vÑEwÒ¶=\84\³ÝÚÚ\93q\94\99<×µ®<嶦?Luù'©*ã§Å2á\93ú]\94Y2\ fQ®4\16kìuiã\1c'¹±;ò\96Ò¶4Mu\9b}\8cÙ##ñ\1a§ó¦àµNkÙv\14\93Ò \1d©t@}À,\85\99r[è\92óô\eíÐ\1e|Sk')bÝh\9a0Ø\17á´ö\fÄ@)\8a\16Ú3\8a?kÿ¢Ê-ºû±Ñ\ e'Y>\f\8bêO\80\18\9f®µ\1cOH²~à(æN\85M¥Y ýbw\1a\8b{¼\91Á9È\10ÉlÑCÀbµ£ÊzÚ¨O\f\84-\ 5[\85@[\85®ëÓ\83)7ºÈzd«âVrj3ØØ\12ùmT\13ZnЮR«Êa\85òGÑCÝ]ÆØ\812Á,\93z\9dqmkÍ}2ÕÉñ\99©uêm}û\ 5(\17ËØ\8e\ 3(ß<ùõ¥½\ 6u_¿z\1a±ìÑncÒ\r\13À+\83\14KUÝ\86ª\1cZ_¥E\93qü\ 3\10¤dFæ¨\12nI\ 4\9cl~\98o,ï\ 4\8c\8eÑLâ¸êÛè-\82\1551\8b $fQPê0a\19dvç\b@Ü\91-çüèy\94Ø\ 1ÿ\96 v«.ìÝãÇ H)ï®\v»VÅ{\0*¢ç\12]¹NX:ø.\100·Eaw\fØê\82KÒ\9f\15ó\7fõðq\b< Ë`1ýÑ$d\HG¶ÊoèGZá_DAȽÿÈ\ê>ñòÕêüíjUBÏí\ eþò\vå1,K´&Ó¹j\8a`\17\9e)i·âcxâ°ç\8bp`{X\8f*Uj\90\9aß9U®UPÛjÅ\fçw]2ÜT-ë\16ç|\ 6À¨?\99ôXf\88\93Ö\10?X\1aoK\b3U\ 5"¬\83rÞ±f\1cÃ+»\13z\91Óm\88\15Ñ\88W\81\83\9c\88¬\80î\19_æ\\ 4¬'Ë?\94\8dó\1f\8e¨Yª\e-kE\92ä¶:5 q\16{{Ð\84u\rÚhµ.´ÈêÔCß\157iA£©j®/§Ô§\1dÜ\90ý\82MÕÂb¸>Î '\94\10\17¾èÈ\18Ý-U\15tfDqX\f\ 6U-§\82³\1deß!Ã\1cà\94×Úï´® ¶kH6à\7fw\11\83@\98)\t\1dL\7fÍ0\86\92%?\1eKÄ\9cIÞ\aÖ`þ\89\9cösã2Î\8d +\8cÀ(+\f\9bï\91\15¶µ\18\84fI\9aÈJzs?t\81ip\1f\89Õà\98×uBo¤é\eÅÞ¼Cí(<7\9fQ\89ã1 <ݯô±«âÌGá Þ³³õ\8d#\1c°ÓEÑ\931i<F\81µ=ø Æ\16Ä\10Dþ/9´\r\89³êê¶e$Óo\9fõ>éPÝ©\97o\9bpK\0\8c\80"\127²\90\95\85é%³ãÄÜã<½j<í\94ñ÷XuL\a\14F<.n\84þL-\9cÓ©çÔ\98¾bg\90[½÷4&È\7fØ\96¤\1alëüeð\8f$V\15HuÇiÙ\8a\0YÅ\99Æ;KÔÄÎ\14\ 5e\8d7¸eÀ\14\80\14\93ÂÔ\910\f\12¤ß¬;dØ\80å »\80\11»\8aÎ\8e4Ô¥\ 5cö\9b\86çÜ\rÛ4b\94´1Y¦«ÕÃãAºÀ] \9dì
-|Y#§\aà\1a\ 3,ìz@\92µ*ÀDæ\18\96èTá-§¦âU\873\97\86£)\1e|+á\12h\1aÆì¾\14ç\9b<?JÙæa\86òU¨\1d§G\95\82`JØ,I".ß0º{\11ß\ 6\83ßñ\9d\11×T6
-ÈÅð`÷à\85(
-\ 3g\ 4\8aG±÷\ e)³Az+\86{(\10\81ë+cx,~qx/ýFÓø\v¶ÏD\8e\ 39RJ2X[\8cÊ î¾Û\91\ 4³\ 4\8c\97\9b¸¬c8\ eS\16´Â\17G\15³\13\1eØ\ e\õù~~ÿo\19Ì[o\1dNñKe>¦é\f?OƬ\a\Ê®\9eðÏ\84¿1\ 2è'\9b6|Y\96[+gØ\8f;ú³\ 1®\ eñ\86s\17Èïø-2\99M\92Ùt\8e\1f;8s2åPÏ\96g¿\9fý\ 3váWéendstream
-endobj
-1478 0 obj<</Type/Page/Parent 1369 0 R/Contents 1479 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1479 0 obj<</Filter/FlateDecode/Length 1917 >>stream
-x\ 1\9dXk\8fÛF\12ü¾¿¢!à 5 Ñ\92Vû2`\ 4v\9c\0FâÇ\9dµÈ\1d"#\18Q#i¼ä\f33\\80üø«î!)\85k\aAl,öArº»ººº¨ßϦ4Áÿ)]Ïèâ\8aòòl\92Mèj~\9b]Ðüæ\1a?Ïðå5mÎ^/Î\9eÿ8¡[ZlðÄÕ\r~X\13î\9eLh\91\9f\17në,U*îè%-ñï_?/\97\95w\eSè\80ßî\9e-¾àù9M§|Àl\96Í&S\1aÏ®³ùÅ\f'\9d¿¥\9dzÐd]¤|§ó{½¦ýNE\1aZ\1d©\ e\9a\9eï\©\87´v:\10B½_ຶ4H\91ùâ\80L \80ÛU µr\ f:KAo\9b ã.êmv\93¢^e7Ù,\9bgô\8b±k·\ ftû_ú\98²¦O:ÖÕ\9fÓ\9e ã«lÎùþÂÁ\15gæic|\88\84D\ 2\19ËÉ\1dO\eQÜ\ 1= ·fo^-8ËÜk\15õz$©2¼®Xk\1fhð)*\1fé\9d¶õ`ı\11qz\91 B\837:ÜGW\rF4@\8e[¯Ê0 e×4x¯ãιõ £ÅN\ 3«µñ:\8fÎ\e`Å7 \aã)w6j\e\ 3íMQÐJS©ý\96q6è\1a§Y¸\\15½¨\ fHË8\v`q\1enF\81ù\8bår\9fð:í1CaU©\19\80P¯\82þ½F4\86ÅØ\0\1cÔ½±[\89S:À\85\fùòÆ»\92´Êw\19ýÏÕ½à\92¨Õ\b\e\9d\90\80³üu[¸\95*>\93«¢d6¨<\8aö`O®PüK:èÀ \85\9d\ 3\96_»\98P\93»\83¶ÁD\83\87_ö\82[\aB¡\9d\1e\9dáø¥26â\vQ*\13UA\85\8e\91\9b\86?I¨¼\ 6¶øEÙ\ 3¹\8dTÚL@Û_!ä \89Ð#-\84$Ü#Ä@ÛÐ"®\96Q\1d\ 6®b£½¶¹\ e\19½ÝÐÁÕè[@ß\1ci»q>×`#\93\1f\91On\1e\ 1gi
-Î2¾W!\9f-\8c\94Ð b\9f½{õ\1e¼\ 4kÖ\1a\85à¹\92öÞD\9c\9f#zà\88q\a\ eóCR\10\84£\e\8b\ fV²î\ 6à\12°å;cõ\88¶xÎÑ÷(л\82>*«\vú\ 3ßCØ\ 3ãDÔ \v\10W\8e¸Crí,"¨Ze\98H¾Ú+\82Aòà\1a(¿FK\1ep* ðN\95L·\13(2\9cÆù\7føiD«:BIè7ÈÍo\fµÛKÌÜ\95U\8d\9er¢^¯\9c\8bRà\18¢ÕNá4#N\0\7fùç5c\Qò=ªÿ¾02\ 4ÎÓ;\93{\17Ü&Rs9Ð\1f\1ci|"\ 1(àÈ\82\84\ 6\r\7fv[\1e9¤\fM|ã\98¦C\11\ 2;\ 25B\ry\89¬¤\fÔGoJå\ f\84gð\b\9a8<fÐ\ fö4!\1c{\840é
-\8e\88\ 63ÿ·0lµs\960\1cÏ.i|9ËnXOï,\8fÙ\917£cï\15*\808Û©5z,\8añ¤\98n*d\8d<¹\f¡íñæ¤rz\8fe\81yk\81\1f\8aj'&·;L&\ 2ZÆâ\96{SÅNEû©a4}{â'\96%ß\8e}Ë¡f~¿\99)\r[\1c¤O_M§Õð>(¢áíÐѸW´¢\95Á~ܲÄ$F@pr\8djþ43im\8fÈ$¡Qá\1e»¢¢í"ä:a`1=\eì\83#Í\9eR\87\19\ai\¹GYC"q¿²þ\8c`\1a\92\ 2\8cÐd&ïghh\88Z9§/uè\ f|ï±Ïàú¡Ò,¼Üõ Ê\15\v!ã\ eÝLG\92Hàò\1cc&â\8c\e}{é\1eéËôèG\13b\92\86\95V\1e\aöÀ\83 \9cÔÈÉw\1cP5\8e´Ñä¼ÕOðÅx4\19ð¸t\êSÆ .°\961M÷÷B7Ä\93ª°\«
-\9b\r»&.\9f\8ddC¤\ 29\ 6§Åû¢\ 1µß´\ fè¶à$éïà\94V\1aF&Ô¢í\9bº(\ eô
-³Nö\84\11m¹xÛiy*ÛðÚ)e\13IâÃ\ 5nî\8e\85²>\81Ý\ 6\ 6h¥ñ$¼\1cç\vn\ 59£áZ»Ô\ 2»A\ eß\16t\94¾ï\9aE@C,úá7+<É;O2\vy\87!ª+äß8\9eu²T#É\0K¼.Öl\8cÔ
-~\r\82ª\1fy\8b¤<:÷\ 4V"¯^qã:P¨tn6\ 6\956\8cl\1c*{ã\81\bu\8f¥\ 2\ 3Øj6¼m\e¡>5{\7få ¿a\ 4[Ã\91Lµ´¸±\9c}¸Ð4x¦Ö\7f¶ª\92ci£\ 2\11\130\82×\v²N0&sPWB\91dÂÛ>%\ fì6\eZ\9e7ýd\91³Ã\bEZ÷1ÃS%Ö¬Z\8f\9dE\90\95\98\rK/ÆËgb\ 6\13Í\8eÊ"\13ÒP,U\ 3\13R{\1c\ 3\vÞ\18hL¸x±1\9b1\96ñ\ 6Ï\94z¯iR\98`)¯5k]§OÆ´cLw1Ñ \9déÎr\1f°
-¹¦\ e´¯\99ê\16È\13Olõ^C\92Û:x4\8e\85\1c]2[¼~\vß&\95\96uÂ0K1íAÏŧ\85\13\9c\9bf\9e
-e³ï\92©Ä"ÜÂGjï\1dÌm·m÷·\97=ø\1agÇìHúÄIóO5ä\fÊÂ\9b\ 6\ e¹¬ U\18¦#ÐiGñÝL\1c¯K\awÙ \9fÑk\15 £\10¢nÿpe½Ø,ãM\86^³\1a\82\89@\84DÛý7Jï\92\12æÎ\9aÇô"Vi_\9a\90Þj8 è?lüÎTäÍv\87d\e\84\9a\8cz\91\8f\93ÞRaÔ>p
-é_5 \aC`Êæ5\90mªÈf\13\ f´åFäÊ\ 2\1avôítAÖ\13r\8djá\16L©@\rª`\894\8cl\e¸5\eò¢*\86]\82à0KV?vï«ÒûC·É"\ 6 \11ÓØ\80Ìð^h)v÷\96õl\0á\96|Ò+/[¿\81\ 4|þãMó\96=½ÂÇ\ 67\17tu=ÍfW\97ìí>½z÷ú\15û¹/lî߸¼.±,\15¿½1¸ãö\91ñõ\84?U8Ooåüª°1ÛÚË\8dô\16¦À×¹¼ò½à\97ó(ÀUô\9fÆêßñBF\10~/\11³7¿\9eg×W7ø´\ 2gί9Ô\ f\8b³\7f\9fý\1fv·\9dþendstream
-endobj
-1480 0 obj<</Type/Page/Parent 1369 0 R/Contents 1481 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1481 0 obj<</Filter/FlateDecode/Length 1951 >>stream
-x\ 1\95W]oÛH\12|÷¯h\b8¬\ 3H\8c>lIö=yãd×XÛ\9bÛèÎ8D\811"GâD$G;CJÑ¿ßê\99!EÑ·\ f\97 \8e-\93ÓÝUÕÕ=\7f^\8ch\88¿#\9a\8di2¥8¿\18FC\9aL&øz5\9fáë\18ÿ\8c¤õÅÏ\8b\8b÷\9f®h4¢Å\9a\9f\9dÎg´H\bÏ\ f\87´\88/UaK)\12ÒkÊôf£\8a\r©\82ª"\91\86ÊTÒ×ÊJÓ§\9d°ö MÒ§DçB\15ß(Q\ 2/à7FZKÒÆb'£w\8bï\17\ 3ÄÂÑÉå("þ\19?\ eF\93hÌ\1f\99ªp§\1a¹\91\89*#ùCâ\0½1"ï\93(\12ä ·Hà\96_\1cÒ`<\8d®ø½_\7fûøß×Çß?Ü=¾>Ý}øõáùãrù¢\8aD\1fìrù¡2F\16å\7f¤±J\17Ëåg£×*\93\8fÊ\96\9dc\8eº¢\83Ê2Zã]Ä#¼f\8e}ZkCRÄ)ùb\81E8ã³(Ó\88\9eu)]Ú±.J¼b\192U\96¶òHËËLmev¤RÓJ:\ 4\90y]q|»\\1eêLQ*g\86\9c9P!r¹|×ç\93\vJd&C\14>´\15ßeÇT\18ùg¥\8cL\\96\ eê\16B_?þPe\8d-*7Gb\84µùÖ\90r3ö`\8e=/ï?M\83,\1cCÃëhÊP¿Üýñüðü\v×q\12Î%\rP\e`\92>Q\96 §t\ e\b~\89üb\ 4=R\86\1c\90*´ÄϵËY^:è\80^\17·ÿ\ f6a·|vN\8aÉ\0f©ØK\90z$\95ï´)EQ\82g M\16\19!\17írQ\ 6%Øm©w\ 4ÖU\11$Ró\85\93ð\84-\85))\97E\15µ\99ùûrÏ\vÌÅ\96\11\12´\12ñ¶Úq\86\9c\97S\r\9a\92\93ê\84\15@¶\902\91Éò\9d'¬Åí\82¥ætëJd@åz\r ùD#s½¯ùÈt,2(Ò ¥\aº\80(S\95$\90\97=\82\8eÜ\85^¾ó\ 2º¿[\ 4z\94éd\13tz¢\13Í\89\f$:\aÿs|\1f¨\17\90ìõ©WÈ2Õ:áoOèõ\S÷p\1e·¸íAË\19\9cÅ6\9a\9cÝxc\98\9c¼¢\96©\95 %¹79"wÌO\96¢Ï/\8f\8d\e\rb4-×Î\90ÖZkuÜY\ 1èøÐd0\1e.¸1ª«SðZ\ 6°6\80ë\84\ 5ä\9dÑÐÍ5Å\99Bÿ\9f¿}ýöí8\95±\13ç\9b\ 6©\91ÝÁXÀ\93\95\92z\88\ 5iò'=\96flÔ
-j\15+½wöÀ¶Ør\aÆ!bî´cmÐj\1a÷«§»g\ fG\e¸>ý\ fIÖ~Ò\94S\17?õ\15\rÆ×4\98Üx[x\80\84A¿Ì,\ 4,TfûÀ;\86Îð³\15ùJ\80\9bD®ª\r\8f\11Êä\1eOzG,\ f\12\ 2\9c8%\8c\86Þæßsïñ0\10¨;ÞJ8\97\11q3\v:r´\15tÀÂ\8bwI\95»¾\85Úr]ðühÍ\r®\98ûL\1aÃÇKv\ 1/µV3¡\10\1e\ 3Þ,â\98\87\17\8c\e³àyA\80vÏÓ\ ez+\0¢±%>* \1dl´ÈYh\81?ëªqU \13G \86\82÷ºæ\1c\87k\8b\9e'±\85?\9d\15Üg\1cä\ f>ÛO\18þ~\a-·Q±\1cu¯à\r\90"dÓ\ 4ð¥³\86\ e©pæß\ 1.Q° ÌFTIì0îug\1f\98${\91AË\9e<\ f¿Køý§\9b0\16\18´¹\1f\19Óh\1e\8d#(=\f]ÎáE\9b-:½ÄÌ¥«hÈ¡O\ 3£\ 5ø\v\83)\ÿ\ 6L\81\97uÝ
-ÜÿæDÇA\8d6¢5ª\87\13²ê0["ZÀ\16\ 2!\9dÂÙ\9e\b1\88]ÁZõ\81ìNÆj\80b\99\1a]mRg+gÝ·\13p)\8caã\90\18\8f£ñ\10ËËx\16Í'n}ù\9amã\8cFCQmnf\18\89
-¸ñ\81\10IY[°ël(j\89?®1\ 6^UËeªs\1eý!cO^¢l\8c>Çxâ
-ÚÍ\zJQ¯k7T\11\v \0Äx¨lP\ 1|\ 1g9\ 5óJVâ\9f7g\8c©\ 2Ó\81\89A"Ì÷W\17û[\a%\9b:Q¤
-í\95hhäµÐå+LN#\ ev«\82IZIßÀÌ\0÷6\82D§\ eÂùÜI\9d\83ßÖþ\8fÇVá\87\14\ 5{A <Î\8f\ fçu¨æ\96ÖFçíÌÉå\1av\99·Ä@ 8\11\87q{\ 5\ eñ:\9a\ 2\9f1ùb\ fÏ\12+t\16\9b\ 4ãX·Òç°\93ÝÖF\9c\18µ\97=V\17Þµ©®²\84%ÄF\80j{ém¯Smp\1d\8dB°[ðÛ¡1\9bw\11ÏB æ{Uxf\9a^,ä¡\ eÍ,õN\15Ô\ 6RoÁ¨Òo¬ÍPD\e¢õê&ð\0¼6KØ+J/\ 1 OGß-x>\95\19\1c\14ó&ÔÍ[\ eK\85\89\0^â43;e2º\99Õ\rE®\0\81\81|ÿ\ 5\16\86½\98·o\1f\86éìÃ\94x*C2áV\81!TÁQ\9dó\1e\8c¶»\93&W\96ßch}_;Ö×U\96uÂ\87|\81\8e\9b\9c<\15Y9~¡89Ûy:ØuÞöìÚµNè¯ 9N!¬g|B'v\83¨ëE\89[\10\87Oqm:K\eªÊEQaN\1e\1dC+E\0Ë\ 2ý\8cxÄïÊÈÁ\891
-*¤r¨fUyx:á\99ÅRò>Ͷè\9d\9e\18¢\9aD\ f\8aC\17J]\19\\8b¤\13ûw\ 6\1c\93\13W\ 3ÐÇÒ?Ü\ã\ eWaÚxg@Â\ 5d\8bF\a]ð\ 1`zì\84\17%VÇ\9dS\7f\87¢³ø·.GH\817\7f\8c\1cÆÓ!à\18\8b5\96ò\ 2RûgÍóùǾµ[cãÁOÓ\9aö\86\82>Ï\1e\9f\87¥\9co$a§dh
-,i\11=\94Í\ 3½»Ý.Sa\18Ü\8bRø\8dÔõ*V\98ÓVÛ©¹wïï\b¼Î>\9f6Û/î^ð\84{AØlá\1e~³=\9bFÀÛÊlÍ\98\87»\aðõ}Ø\9aeaÜÎë[Ø\14\17÷ù\84¦³I4\9d^ó]ìËÝÓÏw|yúÎËþ½\8e¡\12ø<·+ç;\18\85W\ 6³á\r?ïÇ4}ÐÅZm*ãGà\ 3nø¦r¦coéK\18UØiþ\b;Í¿ÙÙ\11¤¹\97\Í®¢ÙtîoñWs\ eõqqñ¯\8b¿\0`k`\bendstream
-endobj
-1482 0 obj<</Type/Page/Parent 1369 0 R/Contents 1483 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1483 0 obj<</Filter/FlateDecode/Length 1814 >>stream
-x\ 1}WÛnÛF\10}÷W\f\ 4\14M\0\8b\96dÝ\1c \ fN\93¢\ 1jÕ\8dU\ 4AU\18+re±"¹ìî2²þ¾gfI\8aa. ìDâr.gÎ\9c\99ýïbL#ü\1dÓbB×s\8aó\8bQ4¢éõ,ZÐt¹Àÿ'ø±\9avòàz6\8dfßz0\1dE×ýï߬/®~\9dÒxLë\1d|Ì\97\vZ'\ 4û£\11ã\17+ã÷iñDª,µ²\8e¼¡&ç\8dÕ ¥\ 5ù½¦èþí\ 3%©Õ1¾>]\92*ðÈ;*+[\1a§)u\14WÖêÂg'ª\8aCa\8eEôrýïÅ\88\86\93y4\85Ã\17\9fLE±*¨Ây¶ùpr^çô\8b)¼5\19Ý«Bgì<6å\89\14e&V\19\95ÖìÒL\13\ e\19|éT¾Åom?kK\9b\17NkZé7\9d\958Ñ\1cv¯\10[í||\1dMØ9\ 2T\99\83qUª-ÛÛÑ.µ\9cvUJ4±Aø±\17·>\85±:óoF¹3\96N¦Ú¼\8ch\8dL\9a\10$RvÓs\9e\ 3\17\98\ 4´{åQÄBåìyµ\ 6\146z{»æ´ëOw·+ò\95ÅaÕä\83P$ù\1c¨+Æ\1f¹jAw2\89&£1 ^DËkÉóïì\10g4\1e©êéfACJ©0>\8d\19q¸F \1f\8d=8¯$E¯³ÌQ^?L=\971Aå2£\12aD\eÁÎ\9a\9cáÏÌ\91²´84µmà=î5Jjá\ 5&\18ëØW*\ 3\17¸Ð±rú\92\0Ùù\94\ 6\93qÌ\198\8fM±K\9f*\ebJ\9d«pZ9:ißPéRÂ\ eÚõSzd.\1f\1eCºì\9c£\95\88Bð@.|Ê\95÷\1c°\90Ýjg²Ï:ù§É«ál\80sÒ©vüR`a\92>iç\11>\88ãJS$º\889OxàºÒÎTE\12ZE¡\b\f\8f¤js\8d¯¥\1e5»]/3t ^à.äJ \v\eø»ì¯\8aL;G\ 3§Ñy©?Ñkq;\90Þ\1c \16{*=\95ʹ£±\89Ãã\93v\83ºi\10Mϧp÷Ýê\97\ f\9fî×ïÿXEþÙo^rѺ\ eBãÕ.\1aÓM;¾¦´\8cT\92\0\r\17¡Á"t\88]Ûwlß%PJ"z\97
-4hHü\vi0eè\95c\9aeèYf\1c\1ep\9d\91Ç\99ºP\838f\0øá\17²P9æîï·+Îp\b\ 1jH\8aþQO¨B\8d\rpmRp\97tD\18¦òbNÊ\87¦c\99\91ÎE\13Ù\ølõ\7f\15d0¡í©\1f\12D¡\87i\9cAP\87^?wêð=\8aÍ\9a\8eÍ¡» J΢á \16±NÁLR[\8e\ e(4\9cy%¡ro±\981
-\8dV>\ 6n»ÇH¾æÊö\ 2{Ì+ç\1f\99`ÐØ\fÖ;Rdì%¨kÑíg½©-_6ç R!\8f«_oê¹2lµè¦Ñ¢y´\8c&Ñ<¢\8fi\ 1Y\91^}\10éæpº#©\9d\11kt\894(7\f\97\11ý\89IT²Ú\92+u\9cîN¢LÅ Åó{$\bYã\87YzÀpDÜ\8c\ 4Ï\ eQ8 ÃÅt?7à\80\99â\ 3'Ñ«x±\87Llª,i<\ 5ë]hÏ\83\11\13âËq$
-§\10Whõ\87»7uc\88\98e\ 6É@Ô$^<ë¹\rMB®*KcQöoPT¤é\8c7\ fÖe\18¬\ 1çED\ f{%#í>\fM\87\ 2û£Ö\ 5}¼\99\89,ôô\7f\1a\8dB%fu\11Û\1a¶óäÞxn\ 1á>\b\88ù\ 3¶\0å´h\ 6&Ȧ-\ e\0|nVѲ/j;\9eG£ù\8c\87ð{¤ÏrÜN tøÖ<Uh¿-ȽW\9f5\8f+Jt¦ÙOê#èÕ\874F^\89dWêÍK\ eù̶6R\94\15/îT\95ñ\10\7fâu\80 \82)³Á\9f\9fVøù+â\ 6êNÀ 2\98\ 49´\12\\8bF:¨l»ëô
-5`c"7ÃP³Í\86 \86\89®yG\1aPºër\15©2\eÛhÀ\80\1fX\18\88
-É;«uÏñ_ðBwAÁú\1cÆk@²Ð\80\8cû%´ \90ãvÐÏ*/3Àö#Ç\9bMÝá\ 3A¨æEG:¿\83Ó\ friM
-,Ð×=ÊÈÕ\10}ãnåí\0ÑV\90qÌ\81:Ýfð¾\ f0\ 2¾\82\8eª\90â8Ð ¬\8e(\0öG¯¬§;]TtEoµ;°N°\8c3Ý¥·¿\8dË S\8f×=\94¿_Ý6\9f\ 1}¹c \99÷(,ïÃ\89UÇ\8a\ f¼\82Öd\82t\93Û£«c\9e.\86°t\15ÚGúY_ö\9c\a\88x/\ 1\ee\ f·U\11f?Ó(~µÙ\1cÓ¢ð ¬ÎØøZ\9a²Ô\ 3Üö3#m¶\9fSS9ÙÈÏ\80ëç\14[\vËWÏ=Túf64\ 5Îï\8dó_\rªÍxVWE\1aUü9ÞÑÊ°\ 3ÅØý;°ï úPÀRa±\v\e\91lº|sèL\e\1eN\80.Ü2¤¬5\13{Áµ\89 Q¾Ö©zQk§(\0\ 3W\98/²cÊV\19 \r«^ JwÙŨèL×K\1e\18[\\15\84¤\89lôÝ]BxæÓ\_±$bF¡Ë0[Ò b²ú¡"²r³>Hê(I¡ùâR\95µ\8e\86´»{\8d,\98½Ü¹ø¸¬ jì0\98\rË:®Jihz>\13nL]k5\96gZÔ4A$\80\1cÛ¨·\8aÍ\1a:¢ezn±ó,öô\98\18í°R[U¸\1d¿ª\13hgê¹þÍV°¬\aÊx:\8d\96Ë Íg¸\ 4NøÞùâáöîÍ-Ý[ó/_·Þ\9a¸âMGÆ5\a0\1cÏqÛ]^Óp1ºáóaºñ5±sKx_8o«X6ÅWô ½ç\0Lü`ÂÝJä\12N\84_lwº\98F\8bù\12÷_Ø\9cÞðWïÖ\17\7f^ü\ fáË\16Äendstream
-endobj
-1484 0 obj<</Type/Page/Parent 1369 0 R/Contents 1485 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1485 0 obj<</Filter/FlateDecode/Length 1652 >>stream
-x\ 1\9dWkoÛF\10üî_±\b\90Æ\ 1\14Z\92\1dÉö\87\ 2ÎÃÛØJ-\1aF\ 1\ 1Å\89<\9a\17\93<æîh\85ýõ\9d½£d\9aqÑ \bàH|ÜîÎÌή¾îMh\8c\7f\13\9aOépFI¹÷.Þ;8?¡É\9câ\fwfÇ\13\8aS\1aGãñ\98âd\7f\16\9dDôaqyvqõ×ûÅU|½ø\14¹o\8eNéVU©ÞXº\8aé\83.\85ªè½®\9cÑÅëøËÞ\98ÞLÇÑ\11\8eÚÿ\89\96¢\\v¾zpþ\96&8?£é4\9a\8e'xè$\1a\1fNù±ÏÚZµ.ZZ4.\15N¦t\89¿F \7fÞÁùQ÷æ\e\1c=\99EãÙ[~+Î\95%QײJÕ7Ú\bKÚ¨;U\89\ 2'\89ÆåÚà¤uK¿é¼¢_)\96¦¶Î\bÒ\19¹\\86ÔpU\94$ª\94p\98ª\92¢IñR.\8dìJ\99\1cF>ÇL\eªµå´\\e\85\8afÛ¼v%Í£ãPÒÕ"þH§á±múû\14#,N(éÅSØ
-i^ø$\90´\95ddáQp\9a\94÷L\1aÂg]I²µLT¦\12*%\9eM¹\16.UVN%Â)]\rÒv¹p\94\88\8a\9a*\95\86\81©hyù\8eRO\eè}B\1fò°T\e\85Z\11¯ÇòR\9a\a$q\18Mh\ 3lÈêÂCû ðpc\aA\13]Ö¢R\12ô\0ص°\80TW|ð\ 3ê"ùÍÉÊ"WËQ\98\8aOgW ¼\12w\881E\8cÚh§\13]Dý\1c\14+,m\12\99\ eÂ]ªÄh«3÷f\87ÎF´\90CF©\ 2ãjÝ8UÝùH\8dE\88§\88\11$'8É\88\96Rv\82÷BgÎå7QÖ\ 5JÑÙ l®7\9d\86\18ßZ\18P j.\10ý\807\13#ùË#Úö\11
-\9b\v\16ç¿$B6ÉeÉ1\ 1\8e\19\84\ 5£\95/¥OÏÙ¥\97$·Þ,´^ÿn \8f³\srÖ¡E8º%©8\ 2 ª\vîâL\15Òs\ 6ª*GÀ\8aY_íß.®\7fÿåzqó\996ÚÜã}V\1aj\1c¤\16\9e_½æêq¸Ø\1eàEØ\ 3\88;m <\ 4 N\ 3a\97kiFôÙ¨R\98vû\\12\f\ 6
-ý>î;\91Ü7õ÷O®^G¾å¬(Q7Ôf\1aILêby0¥[aj0Î%\8eè\ 3\9c\ 3°Ðgár_£\87ÁãOV\95ª\10Ãb¡Q\88ÑÙ\11\ 1MÖÚ&WIî{Wê3\95\8aBC\8c\e ßS÷\90¾XS)ª\96j©¡>æ\e¾ÀÖa}\ 4ð\b@²ÆB×#t#\15Ò½â\ 2[n©¤\90\ 2\1d\8cÆ\12Ê\fOþ\88zÛ^d²-\\ 4\ 1O¹íÈ\ 3\9b¹çÒÈ;n¦¶×.1"ì.3AÐ\104\85>åÞgÖ\a\ 2I¥MÐ\8e¾\1e £\1c,^ý\1dÔ¤*0S\86ÏÌ\11£Ê\82R ÎZís5òk\ 3\a)\10\80ñ¾©`û\1f\84,a$ÈÒ\8bÌ4\95G\16úÂ\v\83è½\96\90Õ\832º*qT\90È®\fQ\0Ígk\ 1üH \ 3§è¬\16¸gn\83F\ 6õl\8a@>Ã`\1cDMÛJ\94x\83§R¡E*Öà³Pk\ 3ëìPâ\\81«äQFM«\88.Ð\8c"q#¾õ\1f\18ãÅ\80êÐ\86%3íò`}\18\ 3ÐSøV\8a\96* \a@Æ÷\15l\fÿ£ß¥AÄ Ì\10Õz\9cùsÐÈPJq?7ö\8e\9d8\v\8di\14\\9fUÜC¾\14 2\92<\975êåä\ 4ð.¡ö\94}¿¬9Q¤ÖÖ¸×MPl-~uèùÛûÓÕêöâê*^~fÄ\1f·\84}¸¾¡\97K/ëkÝËÕ*|9\9c®VÜ6ê®ãhk\96\HO\12ÄcÍóÔ?\ 5W\vøGg£zÍjG\89(ä\87s\1df*\93\?Éô\99¼À\89z\90~¾ø\91\16¨ézÑ\8b¾Õ\rÌ¢Å
-\84Æ\0\95è¯\f\92+\14LÀÛ\fK\94_ÛRÄî\7f
-Ùd¢) ±@îh Û¸q¿Û\90¬L\9aÝöÓ£\ 2Z\15ÝBÑGqD»ÁÜ\17@Ø<|\8baa\f\eÇÓÙiäc\8b¡Ï9óåÙå =ÖÈòãû\9bë\8bøÏ®04®Ç\83\9d\83;x{<c\10\fa\9be.\80(Æ!\86{âÐ\97*\r\v\14¿WC\98\19IÈô9¹?[R\0\90'\f\f\123¡áÙÞEå!\18`£R§²\b)ZÞOvÉö<ůL\83Rw.X6èÈÞÎàY-,\1eÐyk ×ôWZ¯Ñ P\f\10S*¬×\98×\19ºË£ù\98Q·sA4©\86\8b}gØÀ¾E\ 1ð\81ÆK+ÕÏ\81Òkï\e$»\9b\10ðppb¤\ 5¾v\vH_¿ì½@\8dç%\83Þ¿å\19ôó\84¯òÚöjèo»2\ 2}\99âA\9ekÌz\18\80L\9c6í\88î\8cÆj\10\96
-\9b«\1aó\1aÉÜ;]³ÛpG`\80CKH\14¾;è¿\1f\9b\95\18\8f\e?\1aÀ¿_'0\8d6
-"ô2S\ em»©v&þd§]úç}a\açÇ\9dËMfóh||H³ùÛh~È?u ÿwgØ\88ô\17\94\85='ixríö}ü(
-o¼\99\8fOøùÿñË\8dz¿Õ\8eæGÑ|v\8c\9f\848ëí\98Aù\18ïý±÷\ fR»½¬endstream
-endobj
-1486 0 obj<</Type/Page/Parent 1369 0 R/Contents 1487 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
-1487 0 obj<</Filter/FlateDecode/Length 885 >>stream
-x\ 1mU]oÚ@\10|çWìSK¤b>B\80ô\8d|T\8aÔ@\9a¸ª*!Uçó\ 2×Ú>÷î\1cÊ¿ïÜÙN¨S%1Á¾Ý\9d\99\9d]ÿî\8di\84\9f1Í't>#\99÷FÑ\88¦\17ãhAÓÅ\1cÿOðg\98¶½«¸7ü4¥ñ\98â-Bf\8b9Å)áøhD±ì»½pT
-ã\94T¥pLª \e\9d\v|<±¬\8crG\92ºpFg´\17ÏL\82RáD",S\88u{>\92Ý\v\14C\8cÔy®\v\1aàYeqÁ³TÓj\1d\9fÅ?{#\1a\8cÏ£ ê÷õ¡ Q "å\92q)\1cm«,\ 3ä\9d²Î ª-¢·>\8d2\84\90\ f$¬Ï÷M\9b_Ö §ta\91&¥2«\ 1\9bg66jjMfÑÔ×\8a÷L_-\9b×\9cÊ\92\14YÆ©OMOË{Úô_Ø.¥dké^\14bÇfsö\1aæ+!´²\bÜjCHá¿\98\ e7Q!k\ 1A\ 3@\ fùÀ8\89Ï\10ôïSÐS\85c3 ÒèP¸\13¾é«\88#r\9a¸°\15TnU'T~V\92»Õ¥\97\ 5mòÈÐ2\vM\7fWl\1d@\ 3|É&WÎ\7f9(·GǼ\ 2\99Â=KAjØÁG¾ÇQ£\9eUÆ;¶\9b³ÿiú$òD\90c\91×Î\0\81´\92È\8cÚNeÞ9\ 1«D£Ó*/C©oh¹>XZÅAwp×dó¤\14Ö\1e\82ª¹p\1fAKëvuýøý!¾[¯"÷\af\81üªÀ\15Ç=]ü¾fñ}\1a\96U2´\1eá°<\84ê8rÔ\95¡\82áUë¨\86\9f+c\90\v\99::z]\1a\1a\11Å{H·\15²fU{\0~¥¤rpRQhG \13\v«²cí\ fÐRy\99qîí\1df¸ÌZKàa]Ý\1eÑ\97ü\8dc[\91<Kïõ\9dÑUi?P{ÿò\ 2\93\0\92íw\88ùf$\9eà\ e\f\83\87×\9doÑ¡ÚÌ»mç½FU7\ f\\9bñ÷ã\92\1cOkz\ 3ú\12¡Ëa9$Ì~\a\18ÃÒA DnÕ\ e¦M[ÿ´ó¿Ìr\8d\1e0âý\86\bûæ 0%!ÍzuK\ fFå\ 2\ f\ep×õ\ eÊàéMÿáæ\1a\96¤;ç\1d\9d²UF$Y3\19,äþ4c\87k½Ã\1ceh\96\83m\98®\84üU\95ÿs\15ê4\19N× \0\84\ 6à@Øro$>ív½Á\82 ^¶\9aÕµj\ 1m\87¢*v\1dÐ/û\19^zU \8d\ 5nx Yë-\86í[\82R8\15\86ÛOu»RC\v\86\9f\16Í«`<ÃkbqN\93i³&aÒ«%d×?Ñ<È!+ïÝ0^\1eÎ \r\18ÌG\97~΢Ë\88nÖ÷Ë»Õ\8fëõ*~\\7f\ e£ùñÔ"ÿR£wµï}¾é|\1aÍg\v¼\92\90ëbìoÝƽ/½¿\1cøELendstream
-endobj
-1488 0 obj<</Type/Page/Parent 1369 0 R/Contents 1489 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 665 0 R>>endobj
-1489 0 obj<</Filter/FlateDecode/Length 1504 >>stream
-x\ 1\8dW]oÚJ\10}çW\8cÔ\97T\ 2\a\b\ 1R©ªòÑÜö¡InAÊ\95\92<,ö\ 2{c{\1dï:\94\7f\7fÏì®Á8éUUµª÷kfÎ\9c93¼t\ 6ÔÇ\9f\ 1M\86t2¦8ëô£>Vvÿüü«38\99F#:\9dL£>e4\1c\9dFÓð\95Ò\8cÏÓéx\1a\ri4\9dàÿCü-%-ÝÆàl\1c\8dßÛ\98\ eðHëÂżs|}FÃ>Í\97ði<\99Ò<q®`%>º\\8bÂÊ\92&\11}Ó\e²\9aÎcKÂ\90 \v\11?W\ 5]éL¨üãüßN\9fzÃ\11n\1f]êÜ\96:MqOå8yW\952ÝÒLd\vA»Í¤q\95]\18L¼\v½\93\11âÂ3\93h\10Ñ])KùR)£¬¤\9fR$*_±±ãë\11\r\ 6áÆp\82\80qãB.5`Øê\8abø òJ\ 2\16w\87=±ke(ö\11u©H¥0\922ñ,ÉÀCl\vëî
-|Ä:Ã[V,RI\ee×üàRª\12öI\84p\a'ÞS\1fÙÝÕ%#\93H\13\97j!\13oRú¸{Øí}»½\9fßFÞýÃ\80\1dn\93h\189XW¥®òä·aÞ³£\bE\ 4\ 4÷\98\96_è{ØÊD¼Vy\88\8a\ fs$È\9fÈÍ\ 6\89IõJç\0ç¥\92Æ\1aZ\96:£\8d.\9f\8d\15Vé̵ܸ¼Wy¢7\86næÁpD÷k\99ËW¼'¨2þY¾Êv¨qü~ÿr\178\ 3Òý\ 2#\9bË\18Nð\96IÏ®F\80ð?\ 1ÊÏ\86Ö
-\1e¯%^+Ý\93l?\17\99t'
-a\fl$»\1d²Û§\849 Ë\12\16#\9aÃ\95\ 3\ 2×\19ݱ´\ 4FEª¤ñ,\10\0Î\92^"FÐ#sX\ 1Z]Ù\9d¥.a\87ä/\91\81anµHE\8c\90á¨ÿfO\r\15¥^*\9cP¦\15³± qâqòG\97U\9a\92\8b\r\96\19>^\8eè\1c«\8eÓMg\10\9e\7f ¦\1f²ÅÇ)\11`3\18ï\1f6º\17\v\94¨c\19*·\ e|vþÃ\11\94\8by\f\ 5BU\ 1$8ÎEa7\9a\9eA\ 2Ã\b¼M\8d+v\98\eqõ\14À\86)ç\8f}¢s\94²ÊD¹}{±\15ÿã\11jåñ£Ë£\ 6\83\81fÆe} 8\rJ\18z<ºà\e>\9f\\86\ýP%P
-`e°\84źز߼Ô\88²\ e|Çä°OkÔ2\18 ½ÈW\0\99T¤\92uÍÁê÷\99\8eHi`\1dCÌ4sWë\87\16\92\12\84Ó
-\16EÈ\ 6á4òùÛ\10}µ\1f\944«®\8fQ8\8dëé\1c\1aÛ\ e\12\f\7fï\8dØ\92ò*\114\81)¾å`[ªàj\82\7fÐÒX@\80=\1d\91ç\98¥38ÎÎå¨
-ñ*TÊ2\13Ñ\95×IF¡\15¯U¨Ð¼\86Õ!\\ 3Î\f+´1L\9b\86²Ô\0ýæIÆ\92öèu l&Ð e\ fu.Õ«÷µ~É\89]p¾Mö\99ÊQ«P4\ 3\15D_\1d\86¶¥\97K\15+ØØ¢Y\14\ 5Z\ 3\94Þµ>\ f\1a$\14<e\1fâ
-â\92Û\9dü]B=rkº¨Ç8êþÕ(¹Z'\87}\f\ 1\fù?wÌd jå/n¶¦Ê ?ìp°\b(À&\16\84\84©|q\8eóni'òu\93\ 6¯º-D\8cF\ 6
-Qâ6Ê =?ý°JõB¤O=\ 3eäØC©\98l\11qï\ 3\8d\19FgÆHû\89_=¾îÓYÝ\83G^-XÙ¹\7f\15ôÙûV\9bïcø\80\9a\84\10BQ~¦ÜQäð\84ã¢Á+áÄaÇwý~ÆG¤¤\11\07\ 1ôfC©BC\17ô°F\9cæÉ÷\vzÈ¥u\ f>\91Y3ÑDj4\94aË@"\1c|k4v×éñ\89Ñ\ 1/qF\19\9a Ôu ¡éCàÖM\91f{\94\94L6N¢óÉ\84Dn\14\v8j\ 4Öb\r§ëé\0INt\8cüæöÿæ\82\13®\a4ý\97J¤jÉÝè\9dÞ_W\ 3Bå$|ñ\19zgLú
-\a¶\b¾5 ¼\15æ\1d\ 2!i\8ekµ\9e\95r¥\9c°2D7Ò^|¿\9d\91Ï<3³\85\96»úa\10{\88ùÊý÷\9b\19 /á\f\ 3v\f°\17HG©E\ 2uA\93õÊ\98jô)
-1í\15Þå¯vÁ\15GË`\95+Ì6;Ç\÷\fN,Þu¿íÎñ¬@\1f\ 6\v¯lhó\ö¥tÎ&5(-{\87¼F\18\e\1c\87*\11&a\96\1fd\8f;
-HÀ4åBJt\98)ò_Ã\94\f\91ÅÌ\829h¯º¨Å.-Â\80ñCÅ¥6zi[Ö¯¼\14)\9e9\98L~0q\933ünjG(¼à`(è\80µáñ©æ\ 5·?¤\89;\13\e;¾\9eî\a\1f¸/ÿðçA£[óXò'? F\93Q4\19Oñ\9b\ 4¢q:d\17¾Î;\7fwþ\ 3\99êB\91endstream
-endobj
-1490 0 obj<</Type/Page/Parent 1369 0 R/Contents 1491 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1491 0 obj<</Filter/FlateDecode/Length 1695 >>stream
-x\ 1\9dWËnÛH\10¼û+\1aØC\12À¢õ\96\9cKàG\8cø°N\16Ö"XÀ\97\119²\18\933
-gdEûõ[5CÊ4íd\17\8bÀ\88¤\19ö£ºººùýh }ü\eÈl(£©¤åQ?éËdÞO\862\9eÏðy\88¿JË*\1c\8cO'Éøµ\83Ñdüò\89óÅÑÉÕ©\fƲXÁÉt\8e\ f\99ÀA¿/\8bôí,\19%\83D>Ù\9ddV;QòÕV\ fÎ+\9f[#«Üd\92{\87³RåFRk|e\8bBW\1fÞ-¾ÁðX\ 6\83h¸7\9cÁðÛ3¹YÈ®e\ 2Oùµn\fÜ\9eý~~\86\1f\94\97\9d20¬¤°©*dët%ÞÊR\8bÚâ\ 1ãóTy\9dÉZ9þ\1e"y2Dï}é\rFH\18^\9fâ\92\95$xIäÚÇ\9cü:w²ÜãKnîáñFûóëÏ·bT©åûVWûð\14ßWv»\89\aÁÈo\83\94v:î\94sÛ\12`\85<´J×bW!Ë\12\9fs\83\93Ü˽FzK\95>Ȫ²e8¦¯\9c§Ìû\ 5¤¢\0vª\fþw; QØ{k:\9e+\r\eλD\16V\8cõb7Ú\88Óé¶Êý^Ö¶\80ù¥õëà¯]\a\1ag\86N\17:%°wo\17\9f/?¿\ f¥G@<»¼\90tm\9d6wï:~_ ¶U%\89\18ÀD\95ÈÙʳ\94,1m¶c\80å,zb¹ß8I+\9d±Ôªp\88\87ebM:¾\19ù\ 6\90ÃRv÷\8ed Ý\17\11\1d\8br\ f,0\19 6\9bÊ>ª"¡6ÿ{£\ 1\9a\a\94!ñ\87\89|\ 5ÕX\ f\9aü\82ü\8dFDÙÏØÍÛú\11é©HØÈaD\94®\95¹×Â\f\9aP\8fa\13_kþ\82×\995ZÐTµ«PÂ\ 3á\9b\ ftso£W÷çOØ[ÓuI\18ÀN\ 2\11ü×\94\14ö¯Ç_LµT\8eUJífßA»f2Ì!ÀNýØf*\ 5ë\14\8e#ÕÊߪ¢Ø?ëÜÀfÞkðh0\ 2&Dâ©2Ð\r*So4n*3Nä\ 2}p«Ê¥
-\8a çè#4æe\94¡\8b_ÊP2e}¿æh\ 2\94ÊQÇ\86Éð\18í\1232жGM\9dB\92\90ÕMA©á5pÆÛÔ\82\8ck\85\e쯽ö\88\0\1cYm\99a^n
-]\82²:\vÆ:àÅ\88\17Z\95ä\14\8bÇ:ÀòÖd\bÅ\83ÊA\82¨ª\8d¥X)àÔ8\aª[öNm!0\88¡0\8c\8e?Ð'wk439ßJ6\80\vH\87Ó\b)Ѽ¦"\85Ê-Aâ\15U\1dµVr\ eÖï\bV\bþ\83ü¥©.(\PüJ+\87øiÿYÄñ9\84¨\1eU^¨e^@\7f \95«N\845S¢äExjF\82¨\14.\v,\9eý\1e$\10íâ\10-J\8eæ\82V<æ©\8e\82\88\82E \94]Ó\8cðÑñÊN\ e<Û\99_ñlÒ\f>\80S»Su0@å5\11\88ܺ¥\ 6`h¡Fæ¾&\vâ¬{ü=\83Á\1c? O0k¹º½¾l)\ 2Áq\1cB@¸\ 1ªÑi\ 4À2 \vh%¤;\98wÞB1¥\9e©«¼è&¾©òG\8cÍ\93ßÏ.>]ß|L௶ÂËÄ\84L\82ì\86٪̾\84Aq¹\ 1¼±
-h\95d"(7r4\10öªÈ¡ê\1d|oìNej\1f\85 \95\1aì¿\f\11Ì\8eA¡Ú\15\86bâ³e"·¤Ó>(PÓ\ 1ó\8e¿Ã\ 4ea\ 1\ 5Á"o\83$2#¶\1a\95ïp²³Û"\ 3ã\r
-å±S@ØwBô\ 3\93=¦ ¸o2úéµ\16 \8bÂVy¦\83\9dVb¡ABKÒ\ e]\13Ù:ʦË\16\16äô\98ðÐ\ eFØzþY\ 2\9cO\80öGî<S§5V= ÇÍ¡.o\v\8ecÜÆ\8c÷¡Üíxß\18tIµIö\91go\1a&\91=\8cîä*7´Þ,\99\ fät\18\ 5án8\9dI¼Ð¬pá¼7èO"Ç\17HàO\93ÿ\88\83.S^-\95Ã\84\8bë\18ûsoÒueMþ7õ§Yq\9e\17¨æ^©±Ò\0\12¬\ 4ÍnÒ\ 5þDûô$\8c\8a,\80\11¾Çm,hqä\7f#Öÿê\91kTÝ\8eu\91\9aU±T&\ e«\83|ÄÙ\r%C'\94*ÓÇd\7fÓ\8edt\14"$®äæú\16wÂì¤*q\13@å\1a:òJÇ\1d\1fp\ 5§I¼\ fD(hQÚj\16\aË¥\86{ÞNÑp\86\8c&\81£î\8b6v{¿~Ið\8e³ú¶Z¢Õ\ 1\98JSí¸\8b\ 6\r©äPDnò,fÐ\7fVl\ 5\rßVÍL~N\99É0\99s þ\942Ó0oÉ\97¨ \87\81ßöG\88\82\ 4\1dÄ \Öå~¢Ô¯ËÛI\96\14\8f\ 2\89\1aaM@ã ÷Ò\87ý1ð\8d\rhô\ f\8f/)\87û«íÐ\90⧹5}föP\10\1fVrqkRå¿\86Íþ®\ 3m±\12,\8a<ìdu`%\¡L.ò\rêG\87\91§Y '\92m\eÃ+\136#¾2qIñ\16\93\1e»x\1cëDÞ5`w¼=õpX\80^Ũ\81à\15\8czÃy28\95^C\91«Ü0\80°È\ 6Y{Âhe±\ 2ñ%\8cá´¶Ú°k \80ílp\v\1dBmd¸'WóZÂ\ 6S¼\vÏGx\87_ûÂÎ+_*û\r5Ær\98â\f\e*ËÍ'{Í\ 3½Yÿ´Ùùÿ÷Ëîx6NfÓ96U4ÃdD\a\1f\17G\7f\1cý\ 3\82wø\90endstream
-endobj
-1492 0 obj<</Type/Page/Parent 1369 0 R/Contents 1493 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1493 0 obj<</Filter/FlateDecode/Length 784 >>stream
-x\ 1\95TËnÛH\10¼ë+\1aÈÁÞ`Å\90²,É\87`aç\81ø\10¯\13\vØÃ"\87\11Ù\14Ç&gè\99¡\15þ}ª\87\94Ö\96sY\bâkº«»ª\1f\8f\93\8cRü2ZÎèlAy3I\93\94Î/2\ç«%®3ü\1dS\19\ fæó4\99\1d\1f\'ï>§tAë\12P\8b\15\1e
-\ 2L\9aÒ:?ÝY÷°u¶ké=yÕlÔ\1fëûIJÓ,MV0<-l£´¡FùÀ\ e6ÆþÞ ¶[k<\fzöbñîó\9c²l\889\9d-\ 4
-0¡búw[Û\8dª\7fL=çA[C¶\8cß}³IrkÊýûÕÇ\ f +í\11ü\81}´Á7²¦îAy«cF\82hTÃtwùõêòM\96ïÓ;\83\12\bºÓ¡\8a®ÿ\ßÜ\91g÷Än\84\ 5²±Ô:»©¹!5Dx\81E0QtÃáêúï;\1ad\8a\ 6¡RA\ e\eV&P8h2\ 6Ýð!A.hÓScQ#8\81¬aðÉ+mXÒ`j\95Cú"îÉkO¨´.\7fFÞX w@?";j°¡]¥óJ()ê\8c~ìø@"¦\8fÌ\1dG-
- \10õ¹uºQ®§\8fCÁ?X\13\9ck¨5\94ó\82²ùXγ,ÁcqºLÎ\93,¡/vG\85¥k`¶µÎU\10ªL¨g«¼ß!\84®ù¯×M±\14\8cï£ÏËFxæ(2{6^\aý\ 4É®\ 3UR*K\10¹\105w\15\eFU)\87¾[ÑÊÆø\10\83\14doTÁ\91\83tõX O°ï©\83\ 4'\1e\15@\96Ö\15#\80\ 4\8cÀc¿¾äAÊ\14Ï28P.öacÛÞ\1dwÄÞN\9bíoÄ¡\98\8e-\ 3\e\89n\18%÷(Æ>íÙb\10ürèÑ£\8c04\ 13
-"µ\8cjà\9fá?NüØé'U³ þOÒ\81\9aÎ\a´}\10ù k@\7f°É]ß\ 6tª\15\19¥v;í^i&ͺaxïT/d=ù}Væ\ 3GÌtél\13\91n1±cAdxÁ\ eo\10>\1evA×:`\9a}oòd¸Q®ÌQ[\8b¹÷c?\a§\8co\vIü¦\83çº\14§\81QÌ !T\9es\eèl\8b·#rt-AQ\96\82í\ 2\1a\16ê¸}M¤\1db®}ËG\19¨\83 ã4¬Æå\96-°\84Wg4;\8fÛ2\ e Ý:{\8fÝ\86QÊ»\ 6\1a+Ys\828Ý\9bO\97©¬áÿ?Aóå<Y.VXäð>\9f\vè§õäÛä\17^vôÜendstream
-endobj
-1494 0 obj<</Type/Page/Parent 1369 0 R/Contents 1495 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1495 0 obj<</Filter/FlateDecode/Length 1013 >>stream
-x\ 1\95U]oÜ6\10|÷¯X \ f=\ 3\15-é¾ä\ 2}p|NcäésMQà\80\82'Q\12{\12©P\92]ÿûÎR\92/6\9c \85}8[ZîÎÎÌ.¿\9cD\14â'¢uLó\15¥õI(BZ\9c/Å\92\16É\1a\7fÇø8E¹\7f1O\12\11¿ô"\8e8îÙ\89WÛ\93³×ç\14\87´ÍQdµNh\9b\11
-\84x\92Î.KÙtÊQ"è\93¬÷\92dK\92.6\9f(³µÔ\86jUï\95;Ýþ\8d4\v\8a¢!M\103\86m6Û\96º%üJú|uû'ÝÞüþë\e*z\9d)ê,µªë´)¨o¨+\15¥½sÊt´\9b}°w>/p\85Ñî\94\1a§\ 2Y5¥¤;åZm\rÙ|\ 44\17!W\ f)\88æCÍ{Ý\95tP\ e¸,*÷Hm:\9dÊ\8eÏÉ\ 2¨Û\ e\80þÐ&³÷-*\84ôvs)h\v\b\8d³©Êz§ZªtÛ©\8cJ\ 5f%>\95>¨ê\81a§¥4\ 5\1e¶Ï
-û\1e,ZËÔ\9dªlÓ\8a1 ^\89\ 5³ñQ«\14\99\1flOF!÷^å\16\99ùÿ½*´ù\99ã#±\98Ç\14Äk\91à\e§\1e¡2\e!Hs Á§\ e¸ë\95\bWK\8ek½@à\83¬£R\17@>\ 18\ 61Æ÷×Û#?#Ö\9a\89¯ôÞI§\ 1q7S`\11Â3Y²ª(w¶ö"É=´¡Öö\8e[A¥¾\ 5\15ÔÈô \vµ;\1dx,\95®3Yq?\1eä(ͱÀ½FRc;º·îð2Ì\9bF\99w\9b\8b\8f\13\9dO!ú3lÝhÍ\9e\vFÚæË\89¶DD\82®\aøl2îÜ©/½v`~\84Û\12\ 4 \8dÚki\18ëS\ f¯Å\8ay½1cÄQ8\98`"\86Ó涪ì=\17\99ò¾¬$Ú?¸ý2\0ç£3\8eÂø\17àr\9c¥ïõ\15ÿǾnUöFvßëk\88\05\18ÑZI3x³-m_Áù\12BK¸Bɶ{¹!\ f\9a\15\84IüxífLèA\eÝíN_î\11$°¿8®Ò\ 6¡\ 5ñÄ~+Üû\13ñ{\95J¶\1a\ f\v\8fcjëF#A1Xs0ä\90dòÂq\84°¨d\96i\ f\11Ú±f@l2é²'îRæN;kØi\93'§Ùý`;ì¬\12|à4[\1e\18Ø¿\8fyx¹ÐHèh\8e\9f\b5<âZ>\f#\8fê\85ò9jì°\9c.7ñ3'c¦ç\8ba_$b.èÒ7ª\86u÷M1¯s®\ 3ꧽw\1c5FÊ\ 4\0® \1eáVvÜ\88hÇ`0\86EÎë\rLy\86Rkr]`\17\92m\98¹IÎq\96\83\80e\vØ\ 2¿l®o\9fóu\91ó½Áj¹Þ@)W-\ f \9f³z2µI«>SgC\80(9²ã\15Íæð[\18áìOoÀ³×!\9dOWÌHÒ\ f\99Ê\11Jo.>_ýõööÕ\92¢ i(ø6\9b=\89ð\eÅG<\1dv?ê`Qw¸ÚTk~ô"}\8d<Ó\99W\1cÕ¼¨ \e½\7fµ4áh¯A\95ÉæøXÐ;k\ f¬ÀØce±\8c,\rÜNPGRm\8f\8dX>xßäú\1f \19Ý\91\1cïÖÅJ$¼ô²ÿs;/Ö\v±^%¸âqn¹ä²WÛ\93ßNþ\ 5P)\8elendstream
-endobj
-1496 0 obj<</Type/Page/Parent 1369 0 R/Contents 1497 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1497 0 obj<</Filter/FlateDecode/Length 1424 >>stream
-x\ 1\8dV]o\e7\10|÷¯Xè¥v`\9d>¬¯\18(P%VÐ µãJ
-\8a î\ 3ï\8e\96\18Ý\91\17\92gU(úß;K\9elGrÚÆ\bàó\1d¹»³3³ûõ¤G]üôhܧ\8b\11eåI7éÒ°?N\ 64\98\8cñ{\1fÿ¤ûð¢ßëáñ\85\17½~?\19\1d¾x³<é¼\eP¯GË{\ 4\19MÆ´Ì \ 1º]Zf§ËµÔ\94\99²R\85$¡sRÚyQ\14´\10e*H8ª]-\8a\84>\9b\9aÊÚy<ãCO\85\14xðkde\8aÂl\95^Ñ\ 5\99Ê+£\1dn!W¦IfôýåÙò\vRèÒë\98A»?@]Ëü\94P\92(Jú\91>\7fü4O>Ìæofó\8f\8bd>\9bþrÍ\87ºÔîu\93IüVä\8e\9c´\ fÒâÀÎÔ6ÙH\9bJk\\12ÿ|tÂɬ¶ÊïðýôjqôZêÌî*O\95pnk,®Ç½ÒÅl\9f\0k÷G\9cÀÂ[\95ùbG®\92b\83bÏ9 Ê\84&Sª\bD,G\8b2"¹\7f\1f\0Óôþ\96D\9e[é\1c\10³\ 1¹§\9a\12z¯ñ'à\9a '÷¹^$ý\10;´b«Ð\15Q{ÓÎ¥\97Y\bédÒ|Û\1fEP¹M¹¡WÚøW¤¥ÌIp'B\919Ý£Ëç$
-¿6õjMÈ{kô\ f\9eO\b½£µ°e$Á}¨n-\1e$\19-9YÝ0"¤\91\1e¦(RÐÇ\eºgê¤"Ûð\836¶\14Å#Àh_Ó\10®ß\149Z\99\15JjïP>É?«X\15@`Z\89Ô º\95_keQÆ\9eY\1cÿ\0\9fl-ôJ\923FÓ\963ÝJZIO©ô\1e1Dæ\15nÊqMæ\8dÝ\81\9c^®¬`¦\ 6ø:ï^S\ f²`}´/\1avN\92AB\véë*°\8d:Òg\9d\8dM\87\81ÔÇ,\19Czà ôD¥Ò\8a\vgö«U\1d#\85¦?\9e'åþE\17\14þý\1eøäþØWû(\ 5zI0`ï_/|É7mòìÿj\86èïãÒba\12rgÝ5eQº\ 3mXõ\82Z\10\ 4¸ôi1\9bßL¯g?\ 5\ 5·\ 2\93Ê \16r5ì+ð;\±×\1c`@{2Yy\99ï\93oH\8fë\99\ 5¿)Ýg«úpõö\90ê7\1f\97³KbÀ£ð\82;¥\92êª\92\96etx\80µ!
-g¢\8fIýMRAʬ\ 3Ü\ 6\93\81É]Ý,¨0f\ 3\ 6\80X\9cÌ3 \9b \10\eò¢).=\ f_°ø\ f
- Uû5*Ý_Ü\Z\8aʱLBÞR!\80\ 5eã5Ò§Ê8
-^\82P\1c\1c\bÐÝ©\92IxZ\eçÃÛ-\ eBièE)\94>\88-¼\17ÙZæwg\ 4É¡EìW\90¿´\1aô\7f\90ð³\97"FG\87è\9a&\ 4|\ fÑdà1\ 3\14ób+Ð-C\r¤hqÐ_,ZÖ\9eû\8c÷ð?à\e\94Äù;\1cðÐ#\80¨\98Hß\87\18\87\ f*S8\9f¡\ 4\a\89\9e\95\aCcù?\v\8f\9bup´à^ü\12¤-L\ 6\91Jk\8dmEßàÄ9!¤ú\ 5Ô\ e ½X;b±Ññ÷[¡Cyûi\ 4ªW\95±ø[\18\81Ñàø¦\98\07ÀmTEÎ[\11 A0çeECtq\vËáß/\180£Ñ\1e¶ð#m¨Xj\bý\9d¸yh×w\9cm\98Ð[Ôå#Ùxú×Ñ(3SkÏH?_\19ÚXD\82\ 5\±:¢Ö!n(\97w\ 1\9edpì5?×\98+a⢦Æ\94\85M\15*\ 5¨{Ísa\ 1ÙHèÖ4g¿d8`Îà\b´2æÐ\ f²µQ\99¼;KXñ ñqø-BK\82öKå\1c¼}\1f'n2\95U\ f\ñÓ\18¸;\r«\r@¶ÆxHÄÖº1åa³/\9d2Ç@Û°\15ð:Ò\98\13³#Â\84É\81e&N\8e^\1cÁ\93d\98ô\12º5È\82Çb`X³W\8c\1e\171 Êó¢\95
-·¾¤` \97¼\88\95¼\84azc^Ô:o}Û\fl\87\8f9DÏ\ 5O\1a¢òlic\91Ù`\7fãÑFóÛk\86`.ó\9fÑ ·\ 3ËJ\87éÏK^8Õ©\9díìùÓI\95>Ç\f}Z
-à\fG\86Â\12\ 4\1c\a<QQ\0\85Yq
-b\ 5û\81Añh¯¸A\80nK \15º+\8a»³XȾþöóJZXÏ\1eeÃ¥7û(/£\r\0\93\ 6·Þ\bëðä\82Fã\8bÈÉÅôúÍ\94nùÂËÃ\95Éê\12¦\12\0à\88íý\81ö¸\8bý3?ýï±>\18\ f\92ñh\82]\0\9f\ fG|ËlyòëÉ?Äû¢Ïendstream
-endobj
-1498 0 obj<</Type/Page/Parent 1369 0 R/Contents 1499 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1499 0 obj<</Filter/FlateDecode/Length 741 >>stream
-x\ 1\8dTMo\9b@\10½ûWÌN\15\bþ\ 2|\8a\928\91zHÚÊ®ªJ\91¬õ2\98\r°Kw\97¸þ÷\9d]Lj;9Ô\96\ 1³óñæ½\99ù=\18ADß\11$c\98ÄÀëA\14F\10Ç\13ºNÓ\84®cúi\84Ü\1fÌ\92i\18\7ft0\9dÏÃéG\a\93y\12¦ç\a·«ÁÕÃ\14F#Xå.m\9c&°Ê\80RG\11¬øpÉê\r\83º5\166HÙ¹\92¹Ø¶\1a3x\1ej¬Õ+B÷.ä\8c\17ø|\ 1LfÞ°nDåÍjV\92Q\85L\ 2«*\10ÒXº;ËÜ¢\ 6[àÅêe\10D\10\8c&á\98Ò\ fKÔ\eÔÊ@%6Æ\a,\90e¨é\99\b8\ 4À,t~W\ fs\18\11è\1c\ 2Â\1fL¦T=\85HÃ8\84\15\12î½j5\18Ô¯\94Ë m\9bΫ/\9aÒ\8e\13¢\92|¾\12@ø)d¦v\ 6Æ\8e\ 1^ \94\16¬ÞwN³\ 3SC\90h¡5\b\9fá\99>]xº\17\ 4ð4þ0\84_ª\ 5S¨¶Ê\1c\89\95Ún\89\17!a'l\ 1oµº\7fªµÎû\88
-\89\98 ¹\ 5« \94jG\0\efÌNé,\84/9\91'\fäLTÆñ(A·ò\1ciY bÁ
-^¢5ï°-Dæ\18\82-ÕÃ\ eV\90+/Ë\81µkX(4 Ρ\15\8cÄ'QQrÕaÜ7\b*\87Åý2¸»½\v\1e\173¸î2ö\1aQeÿ\14J:\85\y\9e
-So:ÂOQ\9e*äåìÚò *©ãè!^\89Szð\1azù\ e\ 6TÍ{¯Ö¸¼o)}\97õZøÆ:\12á\a }diHù\96U\97°i-\98\ 6¹È A\81\10\94 \1a+\94\87Á\v¥È¯\8f ¬u
-\91\ eÌY\9cõî /i\bOÊâ\99XG4¸\86ò3É\v&·$BV\vI*kf©Ö¾A\80Y ©#ñ\95ädä§mq×ÏÏ¥ã\8akd\16=x-¶\85=\15Ó#pyãn¨vã\122ê\ 5ù\89êF¬Ï"¬ûZÃu\9b5\9eÑu\95±&\[Þ¸\86'\ 2\84\86\fsÖVÖÀâiÙMd\b\8flO£\91\8b?~2\9cþGô;\19\ 5UÐ0^\9aCC¥\87I\1cÅ´\1aÓ L¢¨Ã¸¼y¼½\81oZ½ ·Ô¹¼\89uϹ\v\eô\ eA\12ÍÿcQLiÏ&qJ\9b\99\16Ä,q!îW\83ï\83¿K »Vendstream
-endobj
-1500 0 obj<</Type/Page/Parent 1369 0 R/Contents 1501 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F3 6 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 672 0 R>>endobj
-1501 0 obj<</Filter/FlateDecode/Length 1424 >>stream
-x\ 1\95VaoÛ6\10ýî_qÀ0@\ 1bÅ\92\1dÛ)º\ 1IÓ\ e)\90dk¼}\99÷\81\92hK\8d$z$\15Çÿ~ïHɱ\95\ 4X\91")EòîÝ»wwüw\10Ñ\b?\11Íb\1aO)\ 6£p\84/û_ß~\eD\93i8£I4\vcª(\8eâð¢]\95ô0\88gópLÑh\14N°;>\1faׯx÷b\16F4\1d\85sìE\93\vì¹\ 5o\1d,±7\1dw\ayïj18ûrAñ\88\16+À\9bÎæ´È\1c*|I\83O¹ØX©é"¤\aQ%\82\84!Aw\8b eª\12EM\95¬\12©O\16ß\9d\99hæÍ\fÇ\13\84°È\82\8b0
-é«*ê¢^\93¨q\93®ýÅmaóÖf\1cÆÞÀ\84¢¨5\10ÏÂ)\e¸4¦©$íTC¹x\92pîqÄá3\19©\9f\80ÍY\ 2(i¯nî\1f¨\168¯VäM\82qg2xøüí¯èØM\0D\19 -éû\11Â6´T\94¥Ì\8eÍ\8ch\18\8d}h×÷·=s§´Í\8b4\aP&é÷ëOÿ\13\1a,ápÏ\98Ãf·\8a\12\91>6\9b\8eïTÕV+\0ÓÆ[oÃæÛ\aà\98\ 4Ó§\0~®®?½IÂq\94\81?ÙËJ@aë%\9eB\82HÎMMJgH\81U\8eB²¹l\81\9eÒªÐÆ\92±jC ²M[&d¥jÐ\ 3âuS»\v©ª*¬?\1cc@0\9d\e\94ýÉïFm:Ççáì\1cz\ 5\bS%\eaÌ6£áw\ 2p\1ajþÃô\ fÿô·P5^\ 4\97Y\ 5)\1a«\85Uúgw\r\ 1øC\9dø\86ÞöÞ;\92¹\85î\ eTò\12¥óDZð'ö¸R #\17¶K×2à\1dU\97;ªD\9a\17µôÛ,\91.,\f§©4\ 6\f2\8a\83\f\1e8y¸¼¥LX\91\b#\97'T\986¾\90\160îÑÇ?\12bÀ6ØA©Ö¨aW1\88¢\87 £Ç\ 5\85Ú\ 5RÕÔö@äl¢\96\8c_è\1dmtñT\94r\8d\10\15\89,ë"æà\9c7_W!ݬ°\ 4\ 2ü3\8d\v\7fÕ\94=ç\ðÛ\ 2º1\92)\93h4ð²\96ï«d¯\83\ f®áȬË\ 1Äà\84{ö¥Kñ\81¶\10>\!iRC\1a¢\84Ó:S[´»ÖïÞì2\98\83|(\956ÀáH©\14T\91I+\8aÒôk\ 3©Á&B\94Ï\10\1c·¿L>ÉRm* \ eS\959\9a¸ñ W´\1d\87;\99j,w:¾\0ÚR-\ 5Dâ\bèô£\eÔU\97\fåj¨G\1e+1\91ТÌ\91V\96 p8\97\8eÒ\m$\18\87&\13èï èERJ2
-Æ\0GËRBi\94hQ§9Ú\88«\80²|\1d¡³ê\8a\97Ö
-\am®U³Î\8fàv@÷jJ\81 üm´²*Uå)\9f®}1xQÖrKË\0ÎÁÊò¤\17ZWE¯ÌúÊ\ 3"?\1fÚÙPÔ¬Eô"Ä\87Ð\98GÃó!+´LÑ\ 3vüÕwm$v\9fkw¡çy«\9a2cÆÐÒ4Ô5¤Zé
-mGï\8bò¬1ú¬T\18%gð\9b\883.\12d\94m¿©Ç\9bz?àFá³#Ç\81q5Z*õh¨,\1eY\11\85iÝv¥\7f ê\8f<gïo/oîèîòöó¯ÞÝ~\16¶åÐ]\f>zÎ\1eü<½\ 3A¯n\80÷w1CêýQ\13¾:\1f ÖW«\ 2SÛ"³Æ×O+é×ÉD¾P\82\8a³ÃÕ)\9fEµA
-E¢\9eä\v)´Ï\89\9fÕïç\81{\80{\ 1¼\ 6v@Û\ 1ù1{\81\9a\9cr¸['\12*ÕrS\8a\14Éoß\1c\8bë+HuÁ\8d\ fãú¥G»k\9c³¬Ï\8c\91¨ikB\9b%Ç\84\ 6oÖ\97W.ª×5\ 2¼V0lÔ¶\86ÝdG<\18Ý\17\0ñ_\9cÉ\)cOÔ;Rл¦\ 6µ\80¦k»¦ÿ(wÇ\1dyXrgb4\aó\a8\e\f¨\9dK\94k\91fg¬¬N\9dC\83>å«ÁvÀ\80\11CÒ÷\15ð%Èä\ 2\9d\14Ý\12Ã\19SÖQÙ\8fñNmOÛV\ 5ô\90\86v\92ëÔk²{0ð<¨¸ñɬ°¾e÷D\8dâ\rñ:Z-\83sß5^ê+ðiä1$÷O\11\98ñQô\ 2¯\81\19\94u=¹ã¡\8f\1c/cncË\0\13\1fÃ\ e£Á\91äAí+«»M¿ø\8dn\ 2\ 5¨b¼\ 5 o\ eõïu©\12Qþ\83a\97Ú\ 2]\18ÏWOy\e\13ç\8b\93Û
-ü¼\1dö\aÒ}qÔ\ 2÷þæ/'ñ¬q\8f¶\1fxÒOf\93p6\9dûwÖù\9cM~^\fþ\18ü\a\86@Ý\84endstream
-endobj
-1502 0 obj<</Type/Page/Parent 1369 0 R/Contents 1503 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 681 0 R>>endobj
-1503 0 obj<</Filter/FlateDecode/Length 1678 >>stream
-x\ 1W]oÛ6\14}ϯ¸ËKÝ!Qý)Û\ 3\8a!\1fëP`I»ÅE0,{ %Úf#\89*IÅñ¿ß¹¤äÈrVìahë\94&y?Î=÷ðæÛÉ\80úø3 é\90F1%ùI?êã\9býÇ\1f¿\9eLÇÑ\90âY\1cõ)§Á¸¿_etwÒ^cw2\8aÆõY¿;\19FS\8aûq4ã»óY4¯W~·µÎi\18\8f\ fw\a1îNâ)üán<\8f&õÊßmqw0Ù\9fåÝö\1a»Cö\e,ñ.²£Ñh\84Ïñl\8aÏ!þ\19I+¿1\18N\10lgcØ\1f!\8aÑ\18\aa\ e\10LÃÂûzYòÞüpo¿ÄÞt\1e\8d^î].NÞ}\18Ó`@\8b\15J\10Ϧ´H=ò}Z$½[ùì(Ù\88b-Ém$½]|Åùa}¾G[m\1e×FW%½\ f[\8d©\1eeª\90¤
-\7fí¯u¦\97"û\9b¬L\9cÒøR#W\91þ\14.MöþÏ\871J·H{-ÃtýéæÐx\9föç\84\85\ 3e \7f9¾Bä\92ôÊÿ?Õ¹\80ÿ$\ 1\¿jU¨b\1d±¥Öý?uEye\1d\89ÌjÚ\88§\90g)\f,9iº\19Ë"1»ÒQ)¬E\8c©=\8c¬\87\f\1dg\17¾\ 6§=°½\9d<:\88Ðp\1f\1eVÚÐNW\86*+\rÒÐ$*äR8\95\b'ëx\a\zà\82]ÎóvA\9f¯¯ºÉ|P\85ȲÝ\19\894¥\87\1eìæ:U«ÝÃ[\12ÝD\9a\ 4\10°yB\14ÿsý\8eÌs\15\112ÿ¸¼¾\1aÔ?\87\87ðµ
-³ØH\e*Çù\96FåÂìH\14)-Eò\bÂÕåMtá\8cÎ2\86îNäKA[\95e$\9c\939ê\ 4¼ø\84H\1cs1\0þ}\84}\15¢¶-\aÇ-;R$\9b\9ac\880À\a\ 2ÖÖÏ\b<B9)\17;Ú\8aÂ\87\0®\eS7\11\98\9a)\10®¹p\`[ro\90®p\17¹·ØÀ\93iì\89\\17ëW è2â"\ 3\87\váÔ\93d^¨\95\ fÍ\87eóeZ\93\r\8dÂd\ 3u(eÒçܺìÚ\a\8avº\ eÔÆ\1a\80\0)&o'\81ÃpÏöXøÆàVõÂ\80ëKIÿÞÿÇüùñ;T\81UtëF§g´Ý(\94g\v]PL\8c´JdÊX\an@d£\18ý\91ezÛð¥ÎD>\83$@\80ó¶,#¹dáS6ÇWÂu²D\ 3¦ZÚ\88\16\9cRpNRᲡ¥A\89\12a\9d\ 5á\18%\8bö»ÿx{G©pb)\0[S|.ÀJ\81Ô¯°Ùé\8eÏ\16²`Å\1aâf]·à{ 0Ò:a\P\96\90|*$h\83`ào\r\99b\96í¼ü$\99\82ÞxíYÊ5\82«,´²
-¢]\19åv?\84
-Ìi\80G\82_\8bs¼E^çÑ°é\186~\8f\8c\18ßa\1f¯xàNGþ¸Ñ§QÌ\8av#\8a\1d\95R\97\99\fú+ì#JfäZ\98\94£ð\ 5q\90Bn:\9fÉ\eä°T\19Bbü Õ`¯*ù\ 4B\aÔÇî\e\98\1a\19\r\80ðã\8bê\89%\Ã\10\8b\ 4x#PÎ|\89:ÖÊ\b¯\1d\9bu±t)\r\1a\a!Âm®\9e\115ê\1dº\8d\95W6^\9bGm\ 1v Fð¥\ 2GÑM+à\8c\96^J·\952<\95\892I\95£vE\ 2Þ0ó\0Å·JᢠSïåÔ\eç4\87\8f\ 4IeÈ!{x2p^y¤\81o\93êFCl\12Á^Èn\95K6\88\13Ù\9e\86@\83±\88.^3~ÄJ\ e^\17è\92BÊ\94\ekÕ Ýá*ú\ 32Ï\99»|®\ 5oß[ÁpD\97¬8+Qe\ eMù\92\11ð<\b/hºu¬ì¶*Km\8eúQºË\8f\9fî<\16·\8bßn\9e\ 6\9eØ\96a QÊ\f¼JvÔ0Þr%Pô\863óçÚ\ 4aÌj8½ñSF÷)ö"Q×&÷íãÉÓX\ 2\ 2~Rksé\15B\90u²´!ØÔó]ìµjH¾xLÍ\1a\9bº <Ðì±ôÁé Åüò3!\e\e5\85\8f¥d\9fp\1dfS\10P4\14X>'²ô³\1aJîiÈ\ eOï´\80¦\15kiNietÎÓÈ\18½kA1pÐÈ2\13¬ºË]\87\14ÞÂ\ 5&@LY×`tâ4\9eÖ/\b\12]\a\12_鼬ðþØSº¹¹Â\ 4s£\12£^9
-\ e\19f\9c*¬Î$\86\9a2« V\1eÔw\1f^\95¥QD÷\9b]\98\ e\91\a\1a\8dg:¤S »\83ªÑûºÑ\7f\ eòÖL°-\89ºª\8c\81g~Aë\ 2ì/\83©µ¸â5(Þ8\0"¥\7fó<2\18(½\84a
-\81ÚB 2\8dw\96¾\14êùeÜ\ 3`PkN\r\0u óÓ\bO3\18:jK~V\f\85Ý??\ 2²î\8b\84\86¬Cä\9bÝ1\14Ã×Ã\ 3"L\ fSíÕ\ eXpüðb\1a#M\9e\9d¨BÊ!\863\8e\1a|dEð÷¡3¢\9b'ÃâU§\9d+¤Í\a \f\99\19\1e\94\95ʤݡ'ò:·#=ðº#«r\95 T2\8cÃ:ãAº\89ª®++ðq\95yBàpÃ᮲Ô\ fó\b\ 1¿Ç¬7\1cJ@gV\ fï\ 3üò×\9f\8d(\9eú·îîâæò\82>\eý\15üÅë\ 6µFéð\ eè\82ï\9d7Çϧý9¿oÿñm\1cã\17Üi<ë\8a;\939\9búeqòûÉ?.\ 5®¨endstream
-endobj
-1504 0 obj<</Type/Page/Parent 1369 0 R/Contents 1505 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 688 0 R>>endobj
-1505 0 obj<</Filter/FlateDecode/Length 1282 >>stream
-x\ 1}VMoã6\10½ûWÌÑ\ 5\1cù3þ(ÐC²Þ\14\ 1\9alºñ"=ôBK´Å\8dDjIÊNúëû\86\94mEÅ\16\ 1\92P$gÞ¼y3Ã\1f½1\8dð3¦Å\84¦sJËÞ(\19áËù××ß{\8bU2¦ùl\9ę¤ñd\84¿qUÐs¯½Æîl\91\·v§óy2¢éd\95Ìqw6\99ÂR\ñ]x¡é8Ú\9dðŸàÖ\12÷¦É¢µ×Z\96´\1c'«Ö^k 4ã\19ü^\8cÞnzû\19>Óf\87 çË\ 5m²\10ë\886i_Ô>\97Ú«Txe4Yù£\96Î\937$èEéÌ\1c\1d=nÈI{\90\96\94&\1c''JIGñNµ\8e®ÉØó¥Õ²¹ôËæ{oDWãi2\81çþÑÔE\964\1f'Ì\ 3>>\15R8 ï;8\81ov\ 2ï[\0 JTø¸\83i¥ñ»\8c@\81U\90{w^\96\ 1lí\r濫(\18\96S{Mß\1eïÿ¢Ze\0 ;{þÇ\9b\ e\9cV\8ckX@\805bmnXSW.¡M®\1c¥&\93\84¿â T!¶\ 5\16\9a2y\90\85©J0H[+t\9aKGF3\ 4p\88 JÃ{\83\8eÓmíé¨\8a\82¶|â 3\ eÁÊHÂÙ\8e3Fw\89ÚÀ¦È\ eB{±\97|+\v ¯
-\ 6\ 2ÂÓÚ*ÿÎ8}Þ@èd\98QÿìN\ 5â\0\ 6I\ fyî n\19¡¯O\9f(Í\85Öð\v\9bòM¤\1eq\7f\90GÀ tK@!ûp@Ê7¼\96RhGÏ¢Ü"\9fAe®ãW\9b#D`\91\U \1fy\8f©ò¶\86VA\Ð\84ËUå~\8aå,bÇîÿî«D&\ 3z75¥@(²,bèøn\10Áj¨\b+\9d©m*\e
-\83®rq@&8/\1fK©!\13BÝYSBÝËOëOAººãS¤©©!¨\98&±®
-î\ 3`Å\15;\80\90|Î\16\86w×M\95÷/BøU\84\976Ð'Èž7¬gB\96@\19+*Öy\8eÂFÀ¯RV\0\9e\1ad9\rýÁT\12Ò\b\ 5ÚEÝ\8a^ï\e·¡la«0øÄ6Y\94\8d¿B8\7f..¤ ³\}LdËß\893®* yP©5Îì|Çù9¹!#©@\rCa\fÔÖ\88\fåfvʽ8\0\80\97ÿç/f!\12|j£ý\ 1åæÈ\1c\ e\ 2à Þ\ e¤\18%÷\8d@^C\1agsx\8bÄ\87&ÁMÅ\ eª\16<Kç\ 4rÃz»P\1a\15Æi\10B\ 4MÌ\98©Ø\7fÇó%:FW\a\b¬c\85\1c°æ.ûgIº®ÂnÐ0wJs7\85Cä\1ew\9bì\84æ_rá\að\1fÊ»\85\98op\fÁe,òØ\ e\(fNÈ\7f¡·ï#áVVì\9f5Ñn\10´\97\9eµ$C¯&\95ñ\0Û\9dFX{J¸:Í£î\9a³Ï÷ëh¯Pè\1cfס\ e:Ú\87¦\7f±¾E\83×{.\87\ 1I\9f&t\83¾íy"´\1d\85n\ e¶Ðª"R\84\8eæ.ß¼Ô\19ºeÃÝ®öµå\ eÆÌt|\97<`8¨f¨ð\14B;·\b\ e}\95\a\e\89ª*\14¦\fO\8dL&\84>\10\90ðj@Ú Îp\8e¾iõÖ\8c±Ó\949ë*ȧã9"\ eG÷\12iå&\em|\98\9d¡\8d1ÀvàM\97Û\8aô5ö9>À*;²BE\93¡nKoåYf\ 3*Å+ËE|Ì2º;\ 2¯\8a\1a;ü\ e(ðà\0\8fQpMs\94ú ¬Ñ<dQÉÂ#Ý\T\81\15\9eØ\9dHÏ#ux7??\89®N¯\90Ç/\9bÏ¿ò\8dv§|` E±\92G>ãÿH\7ffÒ:\fþ#Jx§,ôTÕ[è*¿äûEn\11Ü^ü£´¤?\94®ß^\8c-²\93$ÃP+º ×&Ô\ ex|¼\7f\1eB\92!?¡B\87wË\ 6öx¾HFË)MWc<÷ð\84z¾y¸½¡'k¾£UÓº\ 1\17\ 6#\87tuºpµ\18øü*\99$\rßÌîé\1d4\19á%¼\ eã5$m¶\98%\8bù\12/GÜ\99\8fØÔçMïÏÞ¿ù\ 5\9b\88endstream
-endobj
-1506 0 obj<</Type/Page/Parent 1369 0 R/Contents 1507 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1507 0 obj<</Filter/FlateDecode/Length 116 >>stream
-x\ 1+ä2T0\0BC\ 5s#\ 5c3\85ä\.§\10.}7K\ 5#\ 3\85\904 \8c\99¹\85BH\8a\82\81\9e\81\ 1P$YÃÓÓSOÁ¿ $3?/1G!9?/-3½´(\11Ä×\fÉ\ 2jµP04\84hÕ\85è%¤ÅÄÜDÏÜÌ\ 2hWH\8a\86\99!È\14×\10®@.\008)¡endstream
-endobj
-1508 0 obj<</Type/Page/Parent 1369 0 R/Contents 1509 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F2 5 0 R/F4 7 0 R/F6 9 0 R/F7 10 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 733 0 R>>endobj
-1509 0 obj<</Filter/FlateDecode/Length 2872 >>stream
-x\ 1\8dZKsÛÈ\19¼ëWÌ!\aç`\9ax\10$\8f~¬³®²µÊJ\e§*\95\ 3DB"b\12`\0вþ}º¿\ 10\r\8a»ÙÚ*¹Z\8dïý\98\ 1´ÿ½\8aÜ\1cÿEn\19»$s\9bÃÕ|6ÇoÆ\1f¿þí*Jf+·Xg³¹;¸\8cÿx°w·W\ 2\ fn\95ÌRá\ 4\1e\\14g³\85\90\8aÁfë\89ZÅ`×óÙRe\ 5\1f\\1cOÍ.VTµ\8aáôÁSºd\80îz\ eÆ2p«\8c\9c\ 1r\ 2a2Éf±\90\8aÁ¦K\ 63\8a*\ 6»X0a\81\15\fv¹b0\81\15\8c`\92ùl-¬b°\8bõÄåh¾`¬\v\ 6BÍÑ\88\18PϦ "\81l4GÔ\vCÂÂ\1eË\1a\97ÔlHØ(³,2Å\88È\10Y\9fÆy"i4@Χ±ç¢Ä\ 4GR1\8c¦Ù,q\8bÀ
-\ 6\8b\14¡\ 4\81\15L\87×,A`\ 53Ø\8ci\1cYÅ`3\ 6-¬à\83K¢xjwN\9c¢ç,Éq\ 4»\1eY¢\ 4Ógö¢°\82és\844
-+\18^Å1ò)¬·»\Zù"oÇ\90Ø\1dØeL¯\ 2+\18vWkäYX¯9K}é\13\ eLjÈ4\v\86ì"¥Ï\81õ²\8b¹5F\14³ÕSCÞ«\80\99\rËU`½l²´¾\89ÐlK\97\1aòv\ 3¦,\9b:°ÖriÌqÆä\9a^\ 3\94\14\bA¸\84r\8d¤bª]1\15\81\15\fvE×\84\15\8c\ 2Í9¹\81UÌò±©\84\15\fv\11OYÁ`\11A¤²\82Ñ\90óùÄgÅ`\17\1c±`W1XÌ5\1ac\8cWñÁ~¯vùÜ\80Áb¯¨f_\82(²~\.X\1e\ 3,\81@¤1ZÑèH*\ 6\vµ0\12XÁ`1\13(_`\ 5#QXbªY1Ø$bùFYÅ`Ó\18;AXÁ,Á\92Á\ 6YÁH#\8a©v\15\83Åa¡\11)\ 6\8b©DË\8d\9a\15³\ 4«\89W\91ÍH²æL"\eØ \11\8aHäç+`° w °\82ÁâÔË\94\15Ì<¯\10¯È
-f\9e#ø\1cXÅ`1bê\95b°¨Xª²\82\99IÖ(hîã]qË0^\1ep\89!\1foÀ`3\8b>°\82Á.¹¡EV0¼ÂðÂî(«\98ñ®Q\ 5a\ 5\83Å)6\91\15\fvÁcWd\ 5\83Å\r\ 4¹
-v\ 5#\eègäyd\15\83Å5C½R\f\16÷+õªÏ$.\ 1¼ÜD)/9\89!ˤ`°è\ 5Ø\r¬`°ð\11½\11XÁ\88Ègrd\15\83]¦ô9°\82á3.,ÈÆÈÚJIðÓ\8eÖÈHCæ2\17[\92r\9dsNð\8f\aä\ 4ö\97¼ÀÁ[ôA/\17E)#5dJ\ 5#RT\12\13\14XÁ`\97\19s\18XÁÌ\12¯\98Â
-F\1e0#ªY1Xtî\84\15\f\16w(tÔh×g)á \82`¹\94\13\ 3\8cG \µ\aé\1dIÅ`q{TQÅ`W+f8È
-\86K¸7Âá\91U\f\16£¦v\15ûpT3Ã\e0[ÂR1jVÌ\11à©\1aì*\ 6\8bcgÐÄdøDáôá.±[Ab\80\9c@$ÑJ7r\ 2\99DÞa\82 b°p\14=1\8a*\ 6ë\13\11XÁLqÂÙ\b¬`°ð\ 2I\f¬`$\11G³z¥\18¬]'\82¬O\ 4\86\8d«À·\88\81Ð1=\17áå\ eá\8c¤b¸\84¶D~GÖÔÆð\8bãjj=\18Õ\ e\9cW\13HÅP\8bwÁ\b\9b\91z(ª\98Fyï\17V°ÏÃBY;/ã%e¨9Æ\15Í#¯9`°ö\94°^ÖÞaÁbÛ®0\99\9c=\93\15\f»sî\91ÀúT ívlÍ)Ä"¬¼¨`ï\14\14\a\16N\ e\18l² âÀ
-¦ËÜ\8dÂ
-\86SXW\bw\94õNá\16`'À\9cÿÆ\86,\1eÁ4Ë\13^XÁ`í\ 5WXÁ`ñ>\ 1§\82fÁ¬\10û8°\8aÁÂYµ«\18,îJ\bhÔ¬\18ã\8e7\ 6Ô~d}¸h&;=|x\86$Ü\81õá\ 5Vð\18n`}¸\83¬\ f/°\82ÇpG¶\ f·\97\8dñ2µFJè#½RÌpy\81\13V0ÂÅ¥\13}2ÊÚw\98\18?ÙéX,H£\ 1ê\15\88ÉäÜ\aN Bµ{h \15\83Å\e\eò?ªU\f\16Í\aw\ 3+\98\89\98º¤\18¬½ \aYÅ\fu=±ë+\8b÷\1e;ñø^\18\e`¨öñÇC¸\84ª#¿#©\18¬\9f¥\915µ\11\8e\1f\eZܽÖèe"k\18Á>ÖTX/ºì?yð-?2@IûÐå!\ 4S&)\90\8aÁÚ\19,¬`$i\1eÑ¥Q12½BMü\97\a\+\93\1eШÀ\ 3¾\8d¡âþAã\ 2\84I¬ïHHÅt\88ï\16AT1X«°°\82á.zið\8ff\15\83Å\88©S\8aÁâv\83\1cZl&+\18,ì¨WÞIL¥-y¤\ 5\990DQ\7fñ\8d\92ás\ 6ï"\1e\19k9´QB\9e8<\91\ 1r\ 215\9c6áÌ\83yÿÂî\ 4\91!\13$i÷Lä\b\1fÇ"\ f\827¸m\98«)oÿ\ 6\8c\v\10rvç\ e\9c\1dFø\1caï}hÜÌ\190¹\0Y\136Ià\ 2¤N¾î\a.@ä\14\8b$ \9c@p\19{$È\99/öå\a:±oññ\8f×\ fïË\bÁ¡Ù#á\ 2¤\9f\8c=È\ 5\b{\985|n\1ct
-¤\9fÜA\81\v\10\1c\1a\1d_\f\a9_ù´\7fãÁ[8ßà\918ïç\bá\väø\86>p\ 1\82Ã'\12~\17\18¸\0é§}\10\198\81àp\1añ½¾\97\13\b\ e#ÌÏ#\ 3\17 8\1c\1füJ1p\ 1b\ fÂ\9eúâ/(ýë\11\1a\1c«\8eÀÇ7BÆ\97¢ß\ 2\17 8\ä±?G¹\0\19\9f]>\ 6îÝÝÕ\9b\8f\§îî\ 1\7f\15È\96+w·µ?\ 6à7\9bW\9fª®©·§MWÖÕ_ïþ\83g1Á\91\7fö5\fÄxúÕm~¸ÏÝ.o][|/\9a|ï\1e\8a¼;5Eëº]Þ¹çúä\ eåã®sOyÕ¹ºéQU÷¿éjwj\8b\99»Û\15n³Ë\8f]Ñ´®¬ ]¶î\987\9d+òÍÎmjh§\17s÷ÚN$Ø®«ÂµÇbS>\94\9bÁìÌ{º\14Oy\18ãé»ü~_¸úÁ½¯«®¨ºÖ?\89\9d5Ä4èE·:\ 4_<6yWV\8fîËûZVÛú©uUÑ=ÕÍ·Ö=\95ÝÎYðT\83¿¥\8c^A:\9a¹·\8fEµÍÏ\1c\ 6\15ÏÜu~(ܯE[ïOL-\83ÍÝ\11)s¿Uå\8f7\9fËêôÃÁÊ~{A5.[3ç=Çj3Ï_½)ºÍ\9b]ÝþqH¸Û_\96Dêý÷Ù¦®\1e¼âË)ÁEî²<-ÿ éô²tÕ¶ÈåfwAÃ보¾åÎ\1cö¹Cß¡{¶V\ eäñe¥P¿\vYÄ
-÷\1dw]tï>ýrëõ¾G£\15|Zz\f%Ã!â\1fþüåç_nïnÝC¹¿ø\18ü\9b>ðú\\11rðáúÖ}®ëo§ã%K\8b\99ûúiòÄy\12 âçúÉÝ7hG6çé² m]^mÝ\ e\14&j[\1c÷õ³k;ëy\12ø\r\e\92#0\8a\9eLÁØÄSgá\89d³-6§¦ì\9e]}dÏN\8c±qÊGö¯_\ 6\ f\18ò¶(\ eû¢å$÷säwÈYEq\fÍÜom¡¦®ï\1cª\9ac(NÝ\ esZn0\85\18\93¶hú\15p\96V|\14\80¯ù·Á~î\ eÅá¾h8ëP#Q@õ\18ȶ>ä¥íµó¸QF¬\88IHÿÏ¡³°2Ó°Ù#ÁÈ\15ë<"\83¾þôOwS4\87²åCî]Ùù¤\ e\9b\ 6¾¾Ýl\98B޻Ïe?á\13køSÂÌý£,\9eØ\f¬4\96hõH`&\8e£ N
-\7f\8d¤ºI"Ê|_?\9a\97\9a Üh|§¡\9d¾C½u}H\1f\Îûz·»¼y1\ f¸½\ 6·80®~ª°Úw¥õý¤\84ø\80|þlã¶eSlººyv\12Â\8bQ¦(âÿH\ 3!\9b\17\82Á\81\89Ù\eu\9e={^\1e6\7f½-\1f\9emÂÌû?ðè,\18T\9f§G\93Û\ú\93\82IÇ4b\ 2\9bm\9f¶M\83\83²p\87¼ýÆs\ e\87\ 2\8f¾ó¥\80ËÑ\9fSg9λ®)ïO¦öx\84ó/{\ fi\18º\9bÁݼýâ8°[4\97\17Ý:(p\eL\1eNóý3\1c¬òG¬Øé8¾¨\84\1dL~\ 1°\v¡÷<\14;\80>\88\9d·\93\ 1\7fù8:\88î\rîú5\80-ß\1eîÇÓbZ9n`\9cF\f,w_ÊMS·õC\87º\87à¬Un\9fÛ®8¸®)Ð\97Õï\9cãvH|ª êï@V\9bÉìñ tßuÝ\15F¾ÆÿV\11î\ 1hê\9b\ 6û\8fÞÜ\9e\8eǺé^dͺ\17Ý2¹hé\18ZßN2pA\87åþ=û\89¶þu¤Õ¿üû<¡T\85êß\16\9d=ö¡)±O[«þO?\90!k\a\8a^hCÊ"¹}\18Hî>o\1e\vW\9d\86Ek6\7fG\10\89x»ÝRý5ö\88å\84\86¿\97¹-#Ýx7_/y\8dq\94Îò.º\eäÓ²þæ#^äì&dù·¿)á¾w\9eÕ\14o$Ël\85\8b.È,¦\9d\9fî®þ~õ?î\87
-=endstream
-endobj
-1510 0 obj<</Type/Page/Parent 1369 0 R/Contents 1511 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 785 0 R>>endobj
-1511 0 obj<</Filter/FlateDecode/Length 2358 >>stream
-x\ 1\85YÙrÛF\16}×WôÛÌT\8d`ìËSJ\96Ç\1eMY\8e"Ñå¼B D!\ 1\ 1\ 6\0¥øïsÎm\10}Iq\9cJ\95\9d\93Ów_º\89üq\11\18\1fÿ\ 4&\vM\94\9aj{á{>þËòÇý§\8b$÷|\93æ)þÜ\9a,óÂ\19´æáBÁ \82Ì\8b\14©1Ø$ôbÍú!Ue¡\97Co\10æ\v¢b\8dÁF95ËYa\15\ 6\9bGСX«9)¼\94\9aãØ\vL*Hd\15\ 6\9bå8¥X\85·&\f|/S¬Æ`\93äXÖÚ\8dSÄ Íaà%&\15d#r\18lê\90°
-\83-\ 2Fädæ(B\8e\16Í\82\94æ\ 3\9b%¬\97c\15\86Ï~L\9f\17Ö\167DÁ©ØOX"A¢Ø\9aõS[¢\94§RA\8eM\8aȦ9\89¼ÂX$¬ÂÐ\9c³o\14«0\9c\8aücY±\9bäþ\9cH¶\86E6\\87¡9Mà\9db\15\ 6\9b± \14«0½bS+Va\16\9f\89T¬õ*e$\90\8dXüD\90x¥0ظ@Ã*VaÚ=a\15f\89Ø\92NVcæ*DK*Va°ðçÈ®õ9\89m}QYÔH\90ͤÃô\99\83¢X\85Á&Ù±¬Â\8c(§WN³µ\eû¶s¬]AÊî\81µv\1c«04£bðÙ±
-³F\1cPÅZ»af{2d³'\82¬]\87©9b¼\8eU\98UȨٱVs\10Û\9e\8csü\9d\b\12Í
-3\e\19{Ò±VÖ\ fæñMØÏ\82¬W\ eÓ+ZP,w[\8côr@±B\93\19PRÁÁ´D\9a£D\fe²]ÑÊÐ"H\ 4\85ÄÊá\82Ì\99\94X\09\ 5á\râ\87\9a\85Ô\98¾²\8f\15«0ØÂ?R¬1ò+\vßÉj\f6ád:6\90,H\92·\ 6³\84,\b Ã
-\1e\82Y8\eÌ,\17\84\11Rë\ 45\86»iz¤Vc°9ÇNÉ*Ìf éîbVc°XoÚ®Æ\fURìd\15\ 6[\1c³²¯cì\1aî BÊ(ÀU5¤+pØ\96\\90#±ZØ\ fH\vÜ\150\97ü\0!\88¡9 \92\1a3K ÆÑ\89\ 6ÒÚQÁe\b6\8aÑ\10\16\89¬Â`á|¢X\89%B"y]æ¼\ f-\10\97\1c¤KìTGjLµÔ XëRZØi\8b9\8b\91 qIaÈâé\0³\8eU\98\85cÑ\1d«1\vÇ\9dçØ9\15Ò¹Ð\8c¢\83\15dSá0X¹¥\14«0X\14½Ð²6¢x~*%>"\8b\ 4\89f\85á\15\1ea\88wa5¶>#W\v;û\1cÎO¥\90O\97H\90hV\18^Å,²b\15\ 6\8b§` Y\85\19\91ÔÓiV\18^a»ûZÖÆ\eÌ\ f)T\ 15\12d3é0í:DÖ6\95?¿\94\ 21+HD\15\86¨-\91c\15¦ËÜ\99\91cÅ©\10KMÆK\1eC\16\89fËf\87§R\ 2\97CA\8aMç§R\94!Í¡ a\15f@>\12©X\85ÁÊSÁ±\12n\88\ e\90''nÃ\ 2}IDÅ\96\84vy°XR\90µ\8aðB\19v¬T¾¯- §à¼R\1d'+õ Ç-\83@E\8b³\bKÜ2XO©Üйó\86-\9b\ 2\97c"\8d\9e*\12ºe\17pç\ 5\ 2¨\14·é\ 1"\ 1¸7"EjÌäeT»\88j\fV\8a§X\85Ñ\85Q\8aÄ;Vc°XP\9a\95Ü\ 6\99½Òñ\ 6Îa\9b\80\ e+\b£XO\9aÔ\98\ e'T»\88jL\87\99BÅ*\f\97\90CYc\86áV²â£¸=×\9bûØ\17\87¥Þ\16â'^Ät/\9c\82p\bãP(Òf\ 1\ f¶¥Þ|EêzGó##§\9c\0fHîó à#J\9c\ 1'\80\1c\9c9@4\1fßú\8eS\90\99\15g\16A\8d\99;.o'ª1²\83k V¬Æ`\11\97\96Õ\18¬¬\1c§Yã-6Ʊ]\8dÁ":\1d\90M ~wÉ}.> `"\84C\14î:\17°Pø©*\8f;ü"ó\8d\0I\83H\ 2z:T\9c\83à\10\86\92\13k¸\868\9dX}ø¥Ç\7f§F\87 \84\9eïö\ 3¥ UÈßÒ³\18õÏ\10\1c.ÖBq\ e"\9f>7Þ"§ 8¼Ù\94N\ 5Á!\97ø¹z°§ ò\8c\1d¤8 NÞ 6\84\84Oi»$\19Â\fÁ¡-ð6_8\aÁ¥lLÇ9\b®àkÃqö\ 2\9b_ x\ 3ðQ\84\ 3R\1f\a\11BP Ó\8e³·\88ýÔÂ\11Ä\86&°r\v¤=^l\v÷~uñî#\86=0«'¼Hð\95%3«µ|Æñͪú'B\8c<³z®ÍÍv74Ý4\9aUß·c=ýkõÛ\ 5\ 4.1\90!DìÉÀ3ß\9eËÉ4ãrþ'\1e¼ôO\ e\86\9e¹\1eêrjº\8d¹£Þz0\1f\86æ\ 5\7fÝ\95Õïå¦\1e)w*vêËX\ f\109w2\9e½îÆ©l[\18ê;sÝ6u'\8e_\9ex\8eÓ\1f\9arÓõc#vßÐ\bì¦\9b\86~½¯¨êE47tÔ\8fûÍ\861I®\10Ìnè\1fÛz{&\18I¬$k>;\9auonÌsùR\9fË\19.8Ï<Ô\93¤l¿³\16ªrgÊnm\81±Ù8k+ñÌÿúG\9cè¦\7f\9b®7ý~Úím*\8es\8c\9ftúè8\re·©ÕùÓã\99gîËWs×\8fÓC54»i\8e}}.G¹g®Ö/eWÕk[väêܹ\ 2Jë²5ëCByè\12\9f\1a]»!¢\87ºÚ\ fÍôÝ´õKݾ-\1c.È\1f\97\rËÓ3·ýP\9bªßîÚzªaq\94(Ø/ý\13\12öÆÄqï [_»æ©A@\9fûMß\8dæ±\9e^ëº3ß\9anÝ¿\8eæËJJôõËͯf?²9À<\82dLG\8d\86W\ 4òóÈ\9cWok\83}üãh°,æñ\9b\r ÅýK\83\88ÎXÂ\17\fLH9lêÉ|\1dí\91ÓÈÐpÿí_\ fî\9aoýðû9Uøø\83,6ÕÐ\8fýÓ\84Âm{$\12¶Qå=r{\8d\ 1\14¹£-\80':\ 3úRnk\14rxi*üýÚLÕóiCð$"»k1[%¦É\í§g4rSÙ±¾ÅT¶o÷\ 5Å\10\ 1\82\e¤\0\9f\86\1ecsóÁ\µmoEÏYB_Ý×ã¾\9dàwõ<÷çifpèFo\16Îàuß=5\9bý N\9dÉøßv#¾"0#÷õ\1fûf¨·\88P²¦\a\8eG¸\ 3ëQÖÀ\8aþ\8dæçy\92O\9a ù¹Ù6\938tF\15&\17>W-\9aÒn´ã(Aß\95ã¸~4·ß\1f~ùlvÈ\7f#\9bïÈ\ e~¼yæý¾i×\87\i\87q)\8a\15ÉÌ|à\98G8_e*vmÉ{àO,\10\98}í\87õhúÁÔ]5|ßM\98¯Ã\7f>\1aÞ>\9eù4oÆ®ï.«¾Ýo;³.§Ò<\rýÖ ]ÌÄÖ¡èq\94ØHs\94¿Þþß\18ó\1fÆ\88w\19cÀ\9dõV=\16ÙÃÔã\82Û\98\87rûXþc\94\86|w+½\85V®ª~ßáÂì\9eúakû¹éЯæó\87«;\JC]Aþû\9b~*èÒÝ~Øõ£\98ÕIÅ\83áÇ\9b\ 2\1fßà×~·ë\a&VLq\ 6ëáM\9b\14LîCõ\oK\99¢ûÚ^¦ãs³3S/©½ÿxÍOU\99\813Í\9fsH§U§·£N°ù0\98øgqàL\8421?ïêN\1c¬Nçë8d\99\9dÃ\f.ù¦Öw\1fñ[G\1e8|\8fæü\1fMòby¸º}\7fÅ=õ\erl>ôÕ\9e3·\8cïe\80Oâ<~\99ù\ 5_8§\ f\0~\15ÍÒ\1cÿ\17\fd\1aÑÔ\7fV\17¿\ü\ 5\91M3\1eendstream
-endobj
-1512 0 obj<</Type/Page/Parent 1369 0 R/Contents 1513 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 818 0 R>>endobj
-1513 0 obj<</Filter/FlateDecode/Length 1376 >>stream
-x\ 1mWÛrÓH\14|÷W\9c7v\1f"4ºû1\84ÀRE*,vÁ³\90'Y\81my%;À~ýv\9f\915ãKQ\15è´ºÏeÎ\19\89\7fgFbü1R&\92\16Òlfq\14ã7Ó\8fÏïgy\15ÅRT\ 5~nÄÄ&2#ZËb\16b°I\1c¥!\e`°yqª\rðF\12\93OqèìÂ\96IT!ì¼À_\85\ 2r\ 1\84aj\9e\f1Ø*\8d\8a\80u¶ù\1c¿ÜHU1]\ 5´\ 5LFÈZ\8a(\vÈ\10\83-Í)\e`\ 6-\99Òd\1cbT\8a\1cPÍĺ\942\86C¥sæ @+õpJi"Ç\94F¥)\f\83z6ÀL¸\88ò\90\r0\13Î\98\92×\ 6\98 'ìÓÄ\16)Ò\14\99Bj\92¨\1c\1136)\9dpð\1c\97<gó\15\90\và±ù\13çÎbÔ\99Dk\99È\10#d\9er\90<\e`Wi\18\94\95\1f1Ø9'*Ð\ 6Ø\raèì\8e&æô±Ò\9cREZ\r\17#\9fs¾P\r'ß\ 1r\ 1¤0\9d\9eÔ\16\ 5\18l\92\9dHC\f¶d?½±\89\13´=\87?§Å¤Y4\1f\91:\a\18lÎeuÏ*\e`°s39)ë\9c\8bÒ\1d«sR\148\1fYçäÙ\0Ã\19¿GV\9eÕ\12òLG"Ë\19U\ 1}\ 3\88&rF=\17@\98&\VOê\9cåY¬G££é\80\9ar\97\8e\9c\89ó ¹:=\86-ê<>KVO<OJ=Tcæ$\15yÒP1ÞI¹\ 2g«\a\83ûQ·"c\esE\9eÍ0äz\8b"h*\ e)\e`¤\84#7!«\a\93\95\QöÁ I\ e©6À`3\ eDÀ\ 6\18¬^\86\ 1\e`\ e\7fvâ\1cb°\18Ó2p\ e1X,\19*Ò\1c\99\95¶1Ã\r¤»1§¯\ 2r\95\87,'Ã3\9et¬Ò\16#½L2\ 5*ô\10Bt\ 5Â\89tÂ\94Ó5nc¦@\85\N\a\9d0\1e\91O5IôdðfI$Sà¹\98÷µN'²Q ¦\1c2\aajJ\86\98HÍ&\9dóúÛHÉup\80Â\02\e¾H<é\84UâëO\15hDÖï \85\ 5]'R/å´àû\ 2©Vä\14¨ÐC
-+\1c¤'\9d\10ïbNæ<&§\80Â\0²Æ\18åxÒ 3÷\86v\11\15ø\88#gR^ éD:aâÞÁ<Gäª\88Ê\10#&æ\17\9f&\13ë¤xãs\ 3ñ\96E>
-4¦\87\10b-BÒ c÷ÎrB\ 5^8rî\e&\9dH\15&h\84¶\87\9bé\0\85¸û\8f\90\11yÁyÒ ±\17:;\9c@.I%\1aÑCö\95\9bíI\86JpybHõ;\82\93Ù[y\9a½YÎ^¿+ð¼,\9fø¹VT¥,Wúµ\16˲ù\ 3·U\11ÉmÓt\87í~\90z»\92÷}wØ\r²©·õ³ÝØíþÏå÷Y,7¸=\13h))#YØæзûß*\19êÍ·z4¹|º\8aäãÛÛO2ìlÓÖkDÙïûöÛao\ayêz ÕÃ¥|\1eÉý¯z³[[Ø|x'÷[¨Gi}"¾Ôbüä®Û°
-u¾A\v¦Bð1 \7f=~]>²~;\f²`\192t\87¾±Òt++/m-w_\164>S\9aH> \91nuhöm·=\v\rë\ 4\91¿,\8eÖûÎe\1auýó\15·$\82ß\98Å\18ó§ývÍ\14¶ÁsÍ\8b+\vßâ¾,Xé\19â\bw»vûì\8a<7\83\91«wg{\9c\ 2\8e\eE·Ãp°jyR®¦\87>îê¾\1dº\8b\19\8c\ 4.?Ø=îÖ]óã\9aZõ\8f/¶\7fiíÏËDTýѾØu\12\9a\9c\aH\11b½\92WOõ\ f+\9d\vö
-ÿ`ÿåFVv×Û¦ÞÛ\15#\9c\9e4>FQ.²³ûQ i\9eFÈ"ùlë\95\fí\7fö2É<\92\87ú\97üÚ´ç\v\81ê±C\1fá\8ef_
-¹,ÿÔØÆ\r&êJX®G÷,kÖ\7f©Æô\7fm1\89ëv{MÌ\ 1פûúJc\rFá+¶ÔÊu\1a\87¦b4nÕ^\9dc\9c\1c:÷`7]ÿû8O\97Iâ6\92źû)wëö¸j§½Åw°{\ 2¥¶n\80Î\1e@\v\9dZö\87íÕFâ})\ f¿\91ñpX»u~ý®\1a¯6\93âë¿â\e\9b\1fS¸¥\16·\ fonåSß}·Í^ÞvÍ\81\97@}ÜÕ\e~pRpSÆs>\7f¾Ìü.)\8b
-ÿÓ\ 5Yd¬ù~9û{ö?ß)aIendstream
-endobj
-1514 0 obj<</Type/Page/Parent 1369 0 R/Contents 1515 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1515 0 obj<</Filter/FlateDecode/Length 1287 >>stream
-x\ 1VÁrÛ6\10½û+öèÌD\94HÑ\94ì\9bê&ÓÌ4nÚ¨\93\8b/\10 \89hH\80%@Ûúû¼\ 5H\9a\92Òi;m<\99\11Iàa÷½Ý·øó*¦\ 5þbZ%´Ì(¯¯\16Ñ\82ÒÅm´¦t½Âï\ 4ÿ[I{ÿ!YÇ\97\1f~Ø^ÍßßR² í\1eXÙjMÛ\82\80³À\9büú¾\14\8d\93-Å\8b\88>h'\ fpJ\1fèãgú¢ta\9e-ié\9eMûÕÒ³rå\9bí\1fW\v\9a%)P®?\8bz'ø\r\9f\10¯Â ³e\1a%ü\15\90qD\9b\83ÔE¿(¥8î\17%«(ãE[Cª\90Ú©ý\91\)é«<Ò¾Ó¹SF\8b\8aj\99\97B+[[2ûï\ 4Å¡:CR\8b]%=@!\9bÊ\1ck@ò\8e1BÄ\1c/C\Â\92\0°Ð\1eS¾8\ 4È8B\17sÓ\82Φ\12ù\19\a\ fÛyÂ\8c9Ä£Me\ eÇh`"\8b<\17_$ø©*\92/¢VZÞñgh6Kúï\ f¢\96À¶¦ê87R\1aQ4\1dÄû]«\97ùÏJw/´½ÿ4ÿð é<©ÖhN\82af`\rb\81Ñ\88ø\19\8fc2ç°H®³²ðZá\88K\19\91Ø fr\89ù\93y¦]\vé\99\84A\f\90¦\v*ñ |\a\92É:O;\7fÀ\eÖ\99U\18·v\1e`\94`Lcyyä$N+ó®UîH¦a¢NÎÍ\8dÞ«\ 3\93æQi\ f½¬\94u%\ 5£}ù\1a}\92azyÜ}\8f\83Z\87\14C\9d\90°\17²m8I]ÌDe´ÄYí\93l\ 3ú"Z®Ó \8bèO\b¯Fm6'ü?li\19½ÌStì\98baj\ 1\95jYï\ 6Ø^êÝeÐ\80\13\15zU#ê'\14»\81"S\81'\aü\18p\91¦kMU\rØ\93\90ó\80?[fQ\16gt\93À9Pa7áõk?Ï\92\e\9aÁj\86\8eF¹ø\92ûío*\19\8eQ\15LÔüý÷º¾ïôAÏ Ã^AGÊ\r(F\ 5\83\17W*Ëdy\95D\e\9ajþ\1e\8eèmdÚ^séòyi¬³áм_3[Eë\9eÒÇ$[ùþyEð\1fG½<\86oѧ\88#û\8fH\1cÍÿ\81£\85óæå?Æ\82\17Ã\92öð\9eu\14ßÒl\19\a\8b\82!'lÉ!¯¸_u}NÝ\89^\\14\F(S¶M4\83S9UÊz{\85Wm\8a\ 2\94Y\bÇ6 ár6"yð\8dÄDß\ e\86\9f\86 ¨ÿ\17c\ 2`
-Eqÿ\\99\TL\19\8d¿"ÿ+ô\bÇÌ\1e¾\bu:¢Ü"£\fiö8;uØ\99\97\bP\85l\ 5\18«ÃÊð\9eÐ@JØ\14K\ 2\aÓTÃ8BaÂ\94\ec%ÛBX5ÔÛ_2uM¨SôcÓ\9a'L3ðÄ<LÝ~\9ccd\rÊZ8viK\85!m\1c&,êÝ\99!Ç~Nµ2ø\ 2\81e1°|>v\1eÂp¦Fä_¥C\14\8c\8dVAÛð\ 4D+ù©Ø\94G«ÀÊ0Ìɵ\98\7f\8diA·8b\11\98ª;\8d%Nú\90\9e\9489\97v\9d\9fE\939\8a\9bB\89\9dÁåyv\7f\94\ 5vmò\9cݸ÷\9e!ò·\ 4«þ¸¹\1f\9eqÛ8©\1dD\fÛo\11tu¤eB;\85d`\ 1\95Ô\87ñÖ1NpT\1açè\8e\r'\85\1d\rj\10{A#\ 6àÞt-=^§\8fo0\96rUsÚ\1d;ì =\8d@\ 2Ø°;B¯\ 2*<^#ÄF¶Ê\14\8fo|\r\93/-.±(îÅ\19Æ9§òZú\10\13\17²\10´\87É\0ë¤E\ 4Ü\15§±â\821\8d\16\97+*ÔA9*qw8\vø¬$¬\9cD\9dã\1e¢C³áNx·\96w\vq\17'wËôî&;\v÷\1d
-á8\8aÏ\93²Ý·"\97Twè¸R`\9eð0\99ê³±ÖäÊSÄ\17?\904ùÌE\ 5\ 1jq¤\1d:\ 5£Ñø±8)\8fÚ`ÁIéÒÖoB¯<ü\82樼ëÛR5ÀpÏRb¾éÉ\8e@ÝôÔ·èß\8al\97#\1akÕÁß\90zÃ_\9fÜ-ý0û·wÛ×ÛbºJ£U¶\ eÓ=»a2ßm¯~½ú\ 6eù}\eendstream
-endobj
-1516 0 obj<</Type/Page/Parent 1369 0 R/Contents 1517 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1517 0 obj<</Filter/FlateDecode/Length 1614 >>stream
-x\ 1\8dWÛnÛ8\10}ÏW\fÚ\87u\81X¾Ä°ÝîSÚl\81\ 2Ûn¶u±/y¡%Êb#\91.IÅñßï\19R\92eÅÅn/h*\91s;gÎ\8c~^Íh\8aß3ZÍéfIiu5M¦´\98Í\939-Ö+ü<Ç_+)\ f/æ«E²¼ôb6_¿|ñ~s5ù¸ Ù\8c69\9c,×+Úd\ 4\aÓ)mÒ\91\80Ya·Ê\v{$c)S.µÒ+£ù\81Ò¤\85¯LèÖ\93/$UÆyÚ
-§R*å\93,I\94%ié\ fÆ>RjªªÖ*\15|ß\91\17\8fÒѾ\14©¤Ú)½{³ùq5¥ñì\ 6\89m²ÑçÛ\ f$²ÌJÇ/\13ú¦4Nö\9eâvU³?I»ÒláêH°ÿ³\96×$tF;©¥\rO¬\84\82Ë\=Ë\8cr$"ôqàn/¬Wi]
-\8b¼¼´9âº\ eI \ 4°Ó\95Ô\9eL\8e\9bôé¾\r\8cª\90\84\93Ú¡þÖT$ºt+¡ÅN\86k{iÝ^¦^=Édàö³A\89}\ 1«F˾å\14\8f\90Yt\8e¨a£\9f|B\7fá|S\9f®\ e\8cÁÞª\8aÑ9EÉi(7p¬\80\0N·\16\10\82§\83\ 2\p
-\88k«á\14\bó¡Û¯÷x¶/\8fmôóe²`\8cþ)¤FʵCp\U87)\0£\83Ð\1e\ eL\ ft ó¾@ý\fLZT.-\14R\88!\eoRS\92ªöe(Yà\b¡¬`×0ò\10*_{ÕÚТ\92¯8\80W\ 5\130þ\17 â®)\9f\90\a\ 29Ç\r\89 \84 Á\10D\80Ôq:5Ú[S\968¿=r\\83\8am>ÜOPT\1cËÕ®¶1Äæ\12¨UJ\97Ð\ 6añ\8fÄw'\1fѶ¡³F\13éÓ \a\17\929µÜ\88\1d3ò®N\8bpób\899Û\13\9eLC~\92Iç\15:\10ítâ,\15Â\ 1Cà\92IиB\8d³\bL,q\8a\8eÀ\13@:ùʸÂ?àã\12\rÒU\19\18¯òP\89>óZïÐ\84\9dDáÚf\81\bÀ\9cóh=t\1aÀ¸\8dÍK_\19\85:Dyo#бAáZ\f\9cn\11Y*\0¢±
-þ\11X%}a\10\1f£\84H\1d}¿»§\87ÑwæÜ\9dðbgEEá\877\8c5ú\91s¶\12Z\0S\8c>\88ÝEÊ\15¿\80oiP\9b®}\9dÜ\85Þ\rÒ\14ÊÍ6f¿¹~-\12úÒ\88[Ï8\8b&ú\80ãªBa\99\87{\83\90\10\b¤p\90ò¹¢\19]\1e\7fgw
-\1duÐ\8d umʺÆзm\9bçïÎÿD
-\86f¥½H\1f\81PÔ%Íð\f\·\ 5
-}ÏL\86J\ 6ó½\98Ð8ÑåK] (Kôñ©´Cön\10+;ý_\10\1a\a¤ÈM³@kàÑ\80÷]«çÉ\9fJ×ÏÔô!\ 4Ý\ 3\92p\ eDbÄñ\ f\81ðuUWQË\9a\9c\ 6is\ 1\ 3ØA-øæ9ô\1d\96½\9e\ 3ï\86\85`\99A«\1déP(Ô\0V\8f\18\96\92\1e5\ 3Çb§ô¯<·òÇpqÆ,\19\85,÷A3¹Ò\8d0ÖÕ\9e\1cXÃä\17g\93\15\1aÀ\ 1D\8d\8bÝÅ#C>«0\12Ñ\80CýÂÌ£F{cK]0±\95\98Ò\9cë\93P¥Ø\96q^M>¾¥\19\ 4\9fW\84ñÍ,jÿl\9a`\ 5I\1axgÍ\81¨tQx\13\96Ê\88þiÅ\18ÏyÅ\18\9dÒö²,ã,\1aæSª\15\90\ 1÷\8e\8d`÷\19·s\87i\15N·JhxÀ3W:,Ú
-C\vK£w\8dî¦\8d \8fWÉ\9a÷*Dò0_®\9a$Ú(ÃËn\11i\9d=\8c\1cä\ 5\1e¹\90YðÈq\ 3\19W\98ºÄÔ@_Ö\1e/°H\80\99Gè\90°i\ 1\r8ð\9côö\88E\86\83læ\12\9aûg-J\95+\99\r\88Òͱ@\bP\vrp\1a\0±¦ç¹´kÓ/ÓyY»¾É\90W\v:ÝÅz~a\82}\93ö ûKÌ´\12Ç\90¦{\8cÊ\86\ 4L«"\18/FH«RÞ
-íb§¢ÕÌc½¿\bÇ\85\14ZÞ\8d±¼ÎÞÒxÁË-@\v仹L>®]\8fzí\f\ 6u#õºYÜ;Ô"\1fæ1ÊÝmQ\95DègM\ eT=Æî\ e¢GÁT\8fì ]¬O\9ecÝ\93YB\9fÂj1\1cs©U\81#\83e\82e ¯\bÍr\11»ÃØ\f\13¯\93\9ba³°ç°}eÁ\ 4ôã¸g\1a\ e\88å¼SÞÙ1øC[±2¿mZ{¾\88Mͯè2¬-×[¥;\92N\935\83Ð\1e«êÒ+ÌÔH˶\94\ï\80\15Ê\89U\16ÊÓN-èË©cÚ]3¡ûR
-¬ÑVæ¼\94±èá\83\ 2\92¶Ç\1a\1dFM\alø_^[\9cÀ7\89ÄØ*]\98<¿\16ªÅe®hç Ôiq\81
-\1d_NRu\86\87@\19y_\18\88p\\8bú«`\ 3\ 4ô\80W³¦÷1Ý·?À\11â\ f\ 3(@ûU$\86Ûn\8e\8dÔ\1cþ\e«×\91\8c/\12B\1ah\963¼^G Ö\8d\16Î\96ø\88\ßÐrÕlõßn?¿¿å\95*\ 4xgÒ\9a7¡0hù渽0^MÁ\9c¦\191 \86ÝÀ\87\17ø\1c]-×Qj\97K~ôÇæêï«\7f\ 1\18%¹@endstream
-endobj
-1518 0 obj<</Type/Page/Parent 1369 0 R/Contents 1519 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1519 0 obj<</Filter/FlateDecode/Length 1606 >>stream
-x\ 1\9dWïS\e7\10ýÎ_±ã|(LÁ¿ 6ɤ\9d\814¤Lc ±3ùÂLG¾\93m\85³tH:\8cÿû¾\95N¶¹ÆmS\18\ 6ûNÚ}ûv÷ôxУ.~{4ìÓé\80²åA·Ý¥Ó^·Ý§³ó!>÷ñg%Í\ e.'\a\9d«.½¦É\f;\ 6çø\90\13Vw»4É\ e©þyE7b)i,í\93Êð\7f¥|¶ Ìè\99\9aWVxe4ÍT!ÛG\93¯\a]:\81§s\18Úî¯\9f÷{íÁîóR8·Êß$7°¸,\85ßg\84.
-/\86»'IR{«¤£\99±\14Ì\18\9b\93¨ü\ 2/T\16! +ßì5öÒwô\1c\82p¤\95£"\17%\94\9e*\9dï±á\16"7«ÿ\88~nMUn×¾\fµÉËÂ8ïv\163·\11V®Ý\1e4¯öÒÃÖHs\ 2t¦¨Bºþ\91\9b\97þ£wx\ eÄ\80\9c\1fi\ 1C*§|ZDZ¡k\1f:-ýÊØ\87MPLñÆn\1dQ\93\ 5\89dÚÍ\ e
-ÞÃ\9e=\f\94Öx\93\99"mÙøسÞ\96Ù\ eÇÿnßÅòOæ_âé\\9dQ¯\17Ûè¤\1fªüv\ 6v*ëä1I\81~13BDNÒRf\v\ 1tK\87\8c<V
-iÁ\eáù5\89\12q\94V \8fþ\14\99*\94ç:\17:ï Ô\13\ 6Bþ`ÝZ\99ùb\9d\ 2<E\83£íRcÊ<5d\7fÐ>ã7×\9eÜÂTENSIÚx\99GÇ\95F\81Á Õy
-¸¤ó\9d%\1e\8b9 W¨!ìqh¯c\9a¼»ë\ߥÅØ\a0\ e5ª}\eUX4àÔ«ÑbËJ×½\89=ÎU°\ e\9f\bVgª\14\ 53äJ)\1e\94\9e\93ÑÅ\9aVhg¸É\18\85]7£\19{a=¯\85\1e-è ÅÂBÔo³º9±\9c
-Z\bG\1f\95®\9eÉUei¬\ fz!\9f½Ô¼\16´\9b@zè\8e\9a[rQÞ\94\9eYá¼2_YÙ\88Éñ>d¬\bƳB!v\a\1cEÁ,\89i!Ù´\99z¡ônÛ!ÂÑ\98¾@TÌÊÑ\8dô\97×·ãÐ\9c\ 1\vH½ÈsÔ\83\93®M\13Óð:gk~Á½Sé\8cûX <Ö4\ eÁj)ó`\ 5\bXÏ\90\90<R³[SÂÎÁ;£c_\8a\87°~\89\12£ûC\155³sõÓ¶\9e{ua\85¥\1a\9aÍúß)Ô\14\9fÿ\84Hº¶\vP·Mpx\7f\ 4ü(gÄR\15!IXn\91ÄT\80¨uÍ\a·\17\ 5C\r±Iâ\98y&Ån:d7ñQj°CÊÑ2\9970Æ\98a©ÁS\8b1µ0\17,T\ f3\ 3%´¥Fä9\97}L|+J]\8b\13ÉXB54\11H\9fuRÔmn®&\1eV%T>70rS\1a¥=©Í\1c«ÉKÅQ\1açT] %W¯ÐëÝ¢XB+\18Ìt\r\e?l\8b$=çZ=&\14`ax3òÈ\85\98Þª\8d\ 2oÜ\ 2T\8c\8b\158Ì!\8e~µPФ©Aç°ìÄ~IVjZ¿ K²ßÐ\8a\9d«×Ô\eÖ\9awz\16%\ 6³ÿ´\1dÏ\v»ãÆQåêr\ 4\9am\ fÔ\99ëwãîZ\7f@ËK\8eq¨è\ fãáa»7 \10\93ȼ[\99³¼À\8d\98\9a*Êièì ¿)6¬\9cã\ 4¡¹>ñ9,Àÿ\amV\9a\9e\84U¦r\7f\93ÔûC¦\ 4:\ 5ÑP\ eò\ 1Õ½?\8aìKjq»U¡Ð\90\9cÖ1µ\923¶Îß·q\ 5\87õ£©2\11\0\7f\1f\8f.k2R»\85ÍAQ ¶1-\96RÄL"[\10\18äµÖ>Î |Îd\19f;D\86\1dn×Éΰ\eR\0]\15\ 5\vØVû\1a\8e㤢m½`ò°\8bÜ,Y\81\18Wìî\b«µYØ
-\rÙ\8aëð\ 5sÁJt÷\9a¾ò\0\11\98\12KöÏ\16\1a>\83\86Ç¢dW\89@d\ 6\93Âd<\ fóÈÅKÕd\1fòYð\18¤\1e\ e»\v4}\ 6\\8e»\19#iî\17\11koà\17\r\9f\9bÅ\>¨V\fxv\82)\89ï¡^Á\91\83Ð@Ò1\90¸'1\95\9fDQ1ûè:èx¨8\97\ 63<>É\ 2Ïq.]Ö\aãH^Ãõn\10µ-\860çâB\1d#ÒÍtHT0i\f\fôX ûÌmZ\1fç\1a\9f2Ò\14óë2\82l8\86\ 1\1c0\9e\14\8b $\86¹\8eã«\13·Í!;Á\82\99)
-\ 3M\85ÜÀ+,#èb\83\8fq\85Í|7\bn#®x1pá\b¾sÉ8é×J\91\8eý\9fµz\ 4¡\89\91\e\98\8b\9b¾q\93H{F\17ï~»¾y\7fs1zÿ¶Ûý\85~\ e\97\13(ý¸¾£pB+\193Î\ 4;Ë\13\1d\8d+Ê7\r\9f²á\ fRK«2\1aÕºÌø0'\13\\8eþþè;¬ö\ 3Ü\8fB\8fÐ\8e\f\17¨SÒþ/ê/·\9f~ÿðéöóÝÛÞ\941ÿ\1a\eu\84ó\v¬_Z\1c6¤16\8fÙ\1føf\12\ 4;¥ê¼\9e½½\ 1î\8aç§4\18\9eGu\1e_\8c./èÎ\9a¯\18¿p\92\85\93D(s6~\926\9c\f»|\91<üÎY°£çlîlxÖ\1e\ eÎq/\85©Á\90\1f½\9f\1cüqð\17$»\90Sendstream
-endobj
-1520 0 obj<</Type/Page/Parent 1369 0 R/Contents 1521 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1521 0 obj<</Filter/FlateDecode/Length 2027 >>stream
-x\ 1\95X]sÛº\11}÷¯Øñ\93Ó\89dÉveßÎmgìĹÕÔ_µ\94I\1fò\ 2\91\90\88\98$\18\0\94¬\7fß³\vP\92é\99´7±e\r\ 5`wÏ\9e=»ÐÏ£1\8dð\7fL\97gt>¡¬:\1a\rGtv~\89×\8b+~=ïӴ\94\ fÎÏ\87\17ýç7ó£Ó/#ú\8dæK\9c4¹Â\9b\9cpÊhDóì\84zÿ¾=>ÿë\8fçǯO¿\8fÎÿA\7f§?t\9dÉèAU\1avVÆ\aítN\8b-©²¤JW\ví<Ù%ív~\98ÿ8\1aÑ`<\1a^ÁÔ/,\8c3¶ðÙVÊÔôÉÖÁÙ²äÓNéA\87Ò®lM3íÖxôÿ\9f\99ó\99w6S%Ý+v\96n\9cÝø?u\86æ3¦56×:ÄÐ\9fµ·eçÉé\97\v\1a\8f# \83³ G9\rä\vÛ\96@FSm\ 3
+1116 0 obj<</Type/Page/Parent 1099 0 R/Contents 1117 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F6 9 0 R/F7 10 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 300 0 R>>endobj
+1117 0 obj<</Filter/FlateDecode/Length 2453 >>stream
+x\ 1\8dY[SÛH\16~çWtÍË2U ¬»ÌË.\81M\86*&a\a§Ø\87y\91í6(±$¯$\87ðïç;§¥î#Öb\©2ùøtî\97n\99ÿ\9døj\86\7f¾J\ 3\15&jU\9e̼\19~C\1f>}üñéÄ÷C/Qñ<ñfªT\81\9fzY\8f¶ê\81\9eWq\16àw¥J\13/ê\81¥Bz T~ì{¡\8a\19\11\97y\81\8a\92\88¹Ð\87´\ 1D Xª(ô|Á \bs$îä\ 4,Õ<´\ 6H§\80ðÅ\8fà\8b\13\94Øx:\17l\1cx±\8aâ\99\890"µ\fH-L\ e°TYB®ZN@2é[-$(1Ø õR!*1ØhNîZÅ\12\83M©\1e\8e5î\86)JÆ\19\82\7f\f\9c»=gü³\9c\80äPBJ-)19\14xÈ\90c\ 5\ 6\9b\85T\16Ë\1a\87\82\b18ÄÀ9ÔsÆ\ 3Ë \b¥³\18ò\91%%\ 6ëÏ)\7f\8e\15\18l\12\93»\8e\15\98ÜM(»\965î¢\\81u\97\81s·ç\8c\7f\96\13\90\1cÊ(\7f\96\94\18l\18S\86\1c+0Ø8¦Vq¬À4~\19u\99e%\ 6\8b¬#\11\96å`ÂyÆcÆÍj\80\rfàØ{Ç \b\87f)\92áH\89)\98\19\1c\12¬À`\93\19ê&X\81Á¢wG\9a\ 5\ 6\v¿çRV`\84\1aÍ\10ªÓlBÍ"7¦!\ 3\17jÏ\99Ø,' L¢\rBå\ 4%\ 6\v\93±d\ 5\ 6\9b$cV`°YLîZ³\12SUi¢\1c\8b]\9b©0õy\88©y\90CF\14\8dÄP\8cæ\81¨c\ 5\ 6\8b¢£:\8e\15\18ì\9cÖ\84`\ 5¦\fÓ~u¬q*&g j\9cb$\9c\1aØ0"§\1c+0\99\9dQÙ\1d+0Ìb\19JVb°!mY'+1¹\9cQ@V³Ä`ãdä\95Ä`ç´¢\9c¬i¨(\863ýÞ
+\19¸\86ê9ÓA\96\13\10¡Î8ÿ\96\94\18,Ò\ 2\93\8e\15\18,6>\82q¬À`qæ"\11\8e\15\18Á\ 41u\90e%\ 6\eΩU\1d+0Ø$\18y%1¥) F¶²&Ma V\f\ 3\97¦\9e3y±\9c\806M\96ìÓÔKÒFDG8V`ÈâÖ\81^s¬À`qò£\89\1d+0\82ÁM\0ÁXVb°\91?ÒlBåÕ>t\ 4\ 3\17jÏ\99Ø,' \rÕ\92}¨½d\1fªcM¨\ 3\9bfä®c\ 5\86fØA"\1c+0\85\1aRGXVb
+5¡\14;V`°é|,+p )^|VVb°èZô©c\ 5\ 6\8b\8d\8f\1ew¬À¸üÍ|êDËJ\f6àa·,¦\1e\95ÆE\81n>X´\ 3 ò\bÈwChå\a\89CG\f\10IÄÍ\aîZRb°1]+\ 5+0\15 ¦ÓÃÉÎ\ 2<M\ 3Ã\e\13Û'ì\11\99õ\ 5F\8a\11ê\885²H4\1f\1fwb°\8cXV`°¸ Î%kdqþðÍ;¢}\1a0bY\81!\9bPô\82\15\98¼\8a\90MÇJ\f\16^\8c4\e»\18\13z\19ð1=)v.!c×a²K3-X\81Á¢&°ëd\ 56^!^Ë\92W\ 3\ 6\8bF\97\9a%\ 6\8b»j&e\ 5\ 6\eÏÇvMDX\8fÔStþ#W\8c8"âc¸¾8.\11/#\13¯Ã\14Q\8aj8\96Þ\7f\8cg¥Â¾EqÙm\12\14\10}L-å8@'çcð`Ñ
+JLÞ²EË"]1
+Ú¿\8eùt\ 4\eD6\99¤\ 5Â\95\ 39çub*gÈ\94J\82½\97\12Ç\80\ 4ùR`ny0Éï\86\ 6q
+\ 4\ 6Ë£åX#ÊÝhE\19 Ñ\815¢\965¢8-¹Á\8d\15FBt`\8d¨e\8dh`^çz\87\19 Ñ\815¢\965¢¸\rs3\18«\8c\84èÀ\1aQ˲(_0\86P\198Á\81c9˱XfÞE\8c¯\f\9cØÀ±\98åX,1·~#ÆÀ\89\r\1c\8bY\8eÅbs\836b\f\9cØÀ±\98ãx\f0í\9c\96 DÃ2`9\a\118ÞNèÝ\ 5\ f2gƧ¿Oò\83Øè\91á\1c\1cä,÷aqrñ\11ó>S\8b\r¾»HÒL-Öü\95\ 5~³:½Z¶]\93¯º_\17ßð\\82¦4Ï\9dCA\80'Oïò¶S_wë¼Óæ\99¨\7fæT]ªÅó^]í\9f°éѯ\97Qv\19ÅêúfA£\12ÐÓ3u\8eè#Ò³x.Zµ¬ëï
+?sµª·[½ê\8aºRõFýöåqñ\ 5¿^¯õZuµzÈËe®Öõj_êªËÍc?t£ºg^uÞ´\9eºU]óJ\ fëªÝ7\1aTÞ©|»ííò$Ãn\ ejµo\1aè9SË}§ÚºÔ]Qê\96\95±3Û¼y\82òoõ\92´À£J«\9dnZ8·\ 2,ó\ 2N\14\95\87xµ*k$¤Ñ+(Tp©íCè\10ß\eÓ\83ÿ¬d©Õ¦ÞWk\95s®ù;#þà/\8e\9a'uª\9e»nwyqñòòâµ\94\0¯n\9e.X§ý\96\89%øaøFÉøåF&é\17µË\9f´§î·:oµj5ìí¹v\88¶\1e«\1aì¢FC®¾é¦yý\97µ=~Þ\9aöú0G\95\1db5µBV×\ 5\1a«@ÂQQ\84Ý×îÓç¯ê\93®t\93oÕý~¹-Vê®@*áì\9f§\9fîïþüÕæ4ðÔ\15Úd÷J\r\82P{«\83¯\10e1\98*ªÕvO\9dóRtÏ\9c\15Ó?m½oVÚy\82JY\9dTW[\92º:ß\16¨ùTiD\8aD\8d6í\86+Ô{Ò^<í¶^÷óMy\87´\89Q¸~Öè\9b3Å馰.>¦bð\86\81É\97[M±_×U\87fãî\1a\8dè\90
+ßTÄ6ÉPÙSõ[ýB\13r[µ\1d&Cåh\87\85Fû>\ýþáêpyñ½¦í\aß\9bVýÐé\9d\9a]ª?t\8e\91¥¹@F©ûÌ\14XgDüÎß`ÒcVë_ª\ fûb».ª'Vý¡¨ò¦8Jsø¾æ\80v\16
+\8dd\14å®nº\1cSÜ"\94ÃÉ\10\85ÇÝú}Õ᥺n4Ö$»Ü\96K4oµ)\9eö\8d\99\89M±Õo4\1cÌMüæ!WMÎM\84\b¨\84¯hîÞ\82"ÕÜüãf:U\1d\9eÜåMy8º\89fJÞw ¾T\ f]ÞtCq\10)\96\1a:«Â\7f\ e\e\1a÷\14^\19þÆB.Ll\9aºÄ\84ëníQ>\ f\e\18Õ ïf\7f£\7f\895°ítS¡2?ô%\1a \8f§À B§Ó:×e]\1d¶u>\8e&}ßV\82rá\98Úb\eÚ\84=ãL\82\95\1fy±53^\99j¶ºÁ\81rØê(Âì}\9b©±\89tUtÄb\88ìbÜWÅOµÚ\16Ø'GØ\99¿o'û?;\¬\Ý|y8S\8f\9bÇ'|\16Õü'ÿø¼à\1fÁ÷3õåá"8Sº[y\9ew¼7¸g\8f}v\93ñHgÿí\ 6³\8dh[uSWÿèÔcÝ|ÿçXb\18¸q ¡xº#o\8aü©ª[Êâ}Sc%\97Ç,8za\98ôö\ 1§\9aV·7G*\9a^i×ϵñ\8cö/¼ëj\«Ô\9dþ¡Í-èý%\f\1f§WÚ}\83;\ f\ 5Í%ýúùö¿t\90äê\9a{GÝ_\1fNì¨Ma`z\99ÝÕ«ïÐ\7f\9c\9aé\95ô{¾Û\91\9b_1<U\8e[Ýa\85çø\8b\9d=Ö¦+#\8aÍû\95¯B¸FMÏ¥ì$|Å8YóÛªkêõ\9eo¼\87]\14©Ã\17!\93\8a®Úv_îèF<\11êHÏtïÐ!2¡a\1c\13þ¤8é\f\9fDþ\11ñàK\86÷\95\98×\85÷\1a\16¯ýø7¶å6\0{\12\8eÙaÚßddºéYIt\94\92éÆf%ñQJ¦Û\9a\95$G)\99>\80XIz\94\92é\13\85\95dG)\99>.XÉü(%X\1aãçÞÔØ\9f\8dé\89"ã\8fzãçÞª\99èÚ\8b\8fY\7f\15ç\95\11ÌÍÛ«|M\8e2|\1d\92Ex\99Æë%÷í¿\17'ÿ9ù\v«\>\94endstream
+endobj
+1118 0 obj<</Type/Page/Parent 1099 0 R/Contents 1119 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F2 5 0 R/F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 352 0 R>>endobj
+1119 0 obj<</Filter/FlateDecode/Length 3312 >>stream
+x\ 1\9dZ]sÛÈ\11|ׯØ\87<8\ f¦ \80\9fO)Ù>ç\eé\9c\93\1c§*\95\a\88\84$\9cIB\ 1@Ëþ÷é\9e%v\e:B¦SW¥s«¹³3=³³\1fÔ\7fÏ\127Æ\7f\89\9b§.\9b¹Õöl<\1aã7ü\91ðÇï\7f?\9b¦£©\9b-f£±Ûºy\86ÿy°qWg\ 2·.\19OGs!\15\83\9dª°\8bQêfót´\80ÕÙ\98S\18 U\81\98q>Z
+'\106S8)¤b°³¬gV1ØÅ4xÀI\15o]\9aô§õ"L\97£\19Ü],è\92\ 1\8eôÜd6\9a\90\e\933@N ¦ÌÆ\14(\90\8aÁNR\ 6\13YÁ`!_¦¬`°H\ 4ä\8cc\ 5#\98t
+ß"«\18ì4ë¹¼\Rµ\8c\ 6ax6\r\88ñx2e*1\12 OÜÌP$Ç3Ëi²LhÖP §ËÌ\14L\93\ 5¢ñ\88¤I8\85XAB\ fÈ\99\84\1d\97¤6Ð>IR1%\1ccî8T1cÉ ¿°\82Á.'\bJXÁ¬\87\ 4¾EV1%\9c@%a\ 5o]\ 6\rtÞ%\ 5\9aÎæ^à\84\vË#\vH0\9c\9a²\f\85\15\f\16\8b\12*\9a%\e+\98.Ï\91\9dÈúiá\19S\97øi\fÉ´\1d\v\93p*²\829mÆ\0\ 2ë\r\9bô 3¶\8b©!3,\18ìdI\8f\ 3ë\87¦s+\8a\ 4\85\ 4Ò\90\r\15\8c¡S\13*°~h2±\92IPá©\9b\1aòC#ÆP4\14¨\18X_mãÄ\1207³\ 68R \ 6&Kf.\90\8ai\96ÝKXÁ`\17)å\8fc\ 5sép}EV1Sgõ\14Æ*\ 6\8be\ e\89#+\18ì|
+5
\85\15\f\16U>+F¥Nlu
\ 5Ë
\8aÁ.Ù ¢eÅ[7Á
\92Öy
\15\83\9d&Ìm°l)
\98 \91²
\18gK¤Ç
\ 3¦@ SÀ
\1d'
\92\8aÁ¢
\vÎ
\94\15Ì
\14pC
\92±
\82!
\ 5º
\97ZV
\f6
\9d!}q¬b°Ù
\1cu'¬`°Hu¦¬`È
\98ôçU
\f\16{
\84F¤
\18ì<Aúâ¼
\8a!r
\9aõ¼²%2
\993ã
\14rFÃ
\86l
\89\b\ 6\9b±/
\b+
\18,v]
\88\11Ç
+\ 6\8b¦\8ep#+ØË\f\97\ 3K\99;\f\16+L½RL!§¬\8c8V0\85´\14\ 5Ö\87;K`\10NA\v\f5ä;BÄ`ÑL0md\ 5\83\9dMúc\ 53 \8cb\84±\8a\19\10;\92°\82Ábûê\8d\15\fvÂÍVÆ
+\ 6\8bÕ¢>+\86\18c¦9\8eU\f\16g õJ1«ªï\95\17\12½\80»q2\99ÐeC&¤`°è\97\986²\82Á.Øî\85\15\8c\80¼\90a¬b°h\ 3p9²\82Áâ \ 21\ 2ëûIÆ®\8fiÇF\1a¢Ë<jNR6/ô\1a\93É\0)\81[·\1c3ÒÀ ¤Më%\81T\f\16õÓÍa" \ 6kÇähX1BA\85@Â`Y1XÛñ\85\15\8cÌ¥\93Þ¼^\86ñ\ 2\ 6q\14¥\1a\13\ 3¦B\84\fÇÊ4\90\8aÁ¦Kº\14X3\9b-¹±p(O\93\1eY¬\82\19k\8aµ\13Y?\14\r\90µd\87÷Ì\0G
+ÄÀ \e}$\15\83Åi#SV0XT,\
+\86\99ð\fõÂbÀ\1aZ\1c\0ç\14¸ÅA\ 4 ÷\1f$'\10ÅÀ\1a\8a\9c@zÃCN$\15\83µt\v+\18 Åi\10\91\98w\9c\948zë·\19am\eò\18c3î\94Â
+\ 6\véÕ+ï$*Ñ\ e|ã9u0Äim\8d³\rØÞ\802B°\86H\9a~¨\ 1¦;ãá53@Jàá"\149»\17y\b\15¬z"©\18,\1a\1f²\1dÌ*¦\82 \13\13YÁ`\17s*\18YÁPÁ®#\91U\f\16ËGçU\f\16÷
+(\18,{\ 5±Í°xq\9fÁ¬\ 6LÀ\báRÂ];\92\8aÁ¢°\90â0T1ÃI©pd\ 5Ã¥Ì\84
+¬b°è_:¯b\1f\8eZfx¨\ 1³\ 5viRDË\82\91v\1c\0 E`\15³(x0\8e¬\17ÊδX嬸Ì\0\85\12\88\8a±Ô\ 5N \17\112\ 5\92"v\18,Nþ¨\89È
+\ 6ë\85\88¬`°ØàÐ\1f"+\18,®M\101²\82!\13N(È{`\15\83µ³wdM\88\14;\a×\9cU\8c\a¡b:\8eË!A\ eøI\92\8aá\12Öé\XoÖöÖά\81höÀ\1dÌ\ 4R1ÌbmÌÐ'¸gÛ¤\82ÁÚ}XXÁ^\87±\8cµ\ 6\92â#¶'à®\99¢\1a\89Ì°`\18F\ 3\\bë\87â¨îÏ\17<,§\86l(ºP\871tɽ,²^\b\9c¶ý>ÏåʳxzÐ0b\f\85\ f0\14YÁ`±Èa8²\82é1w1a\ 5C
+4/D\eÆz§ÐC}£å¦\92\1a²x°Óv\98Ór;\12V0XÄ\ e\8dãXÁ`qï\86S\91\15Ìü°\8a#«ØשÎ˺í0X\84\87\80\82eÅ<dðÂ\12Y\1f.\16§m\1d><C\12nÇúð"+8\84\eY\1fn7Ö\87\17YÁ!ÜÀ\1eÂ=\8cMñ|5\81$ô\91^)f¸L\95°\82\11.îg¨\9b0\96¹NÐ\eYç\939\96¥\a4+Ð\8e[\99p8}u\10K\96¹\89ã\ 4²$Ø`"©\18,^ç&Â\9aøÉâðì\ 1'á\9c!úãIl\96¶:Pï\98Ô\10I[uÉÔ_¹\13l+ \r\91T\8cICDÖ\ fÅÁß2\8e\ejb×\82C\13\11\8c¡3î\96¼4\1cXÁ`±·áe9²\82\91\17´£\85°\8aÁÚ\83k\1cë\9dÊ\ e×=lW\10Ñ\90\8f'bL\8bÂB´\91\15L\97M\8bÈ
+Æ´(ð¥\8cU\f\16«\ e\19\bc\15Óe6¾Èz\97ñPb\8d\ f\83à²!ïrÄp
+Cárd\ 5\83ÅS\fT\8e¬`ºl\ 1\ 5V1X,s8\15YÁ`ñÔ\87p#+\18,J\r¹\8f¬`¬\1cÜ»Ô+\1f.®\aV\8e(s\90\86,\ÁÌÐ\82++²\82ÁbéCåÈ
+f¸lå\91µU`oU8\8bð½ÄþÍ9#\82M¼è
+%\90ÞÌ B\18fqàÈà\8fÊ<\19ðQ\ 4\88axë\\b\17!8\fÉ"g&ñ¶n\9b§E\ 3¾\ e\98½\8eÃÖ\89'v~и\b\197\95\r\9c@pØOe\9cM\a]¬îP²xÆ#0\93\11ÂK»\1fD.Bpþu¹\eg&qÿðÆ\8e|\ 4ÑdÇá¨\88\83dà"\84Iܪp¦ë8K\1c.<vvâMÇþM\8bøÜ\ 1a\10\12dz\ 6>æ'\v\10\1cÚ\0ÎM\81\8b\10\1c*\19{Bà"¤# O\12\81\8b\9023«\81\13\b\ e\87Pì$ݸ××g¯ÞqÕºë[\9c\91ñm×Ü]¯íë´±»^½\80v£¿^ÿñôK¶úνpWm¹Ù¸ûük¹»sm]ío6Eó·þ§qX\1c;|ú%l¿ÄÃh
+ë/²A\93ïwmqWç--^\¹Ïån]=6nW´\8fUý¥q\8fe{ï®òíM~|\9aþ,Éà<çwÅn=`c¬\8e¦\83&.ómá~/\9aj³oËjçÊ\9dËÝþ.ܧ]ùíÕ\87r·ÿæàõf}\8a«xy\1f¹þ\aíÛLH÷ê\1d\1a\89åçÅ«¢]½º¯\9a¶é\7f´S9¦òI\10é©Æk\ 6ôu´ªv·?9Evê\14ôÿÿ\99`rê\ 4»¦A\9d¬îO\9aäIa\ e\97¦åÛäñùÎ\e·o\8aµ\95$rÿçjE\r\1f\97°_¤è\96\835v}_¸Ë¢}ýþ·+gó¿ÉW÷Åq«½\8cc¡=kôÃů¿]]_¹Ûrs\9a¹a]~ÒÐp;y{yå>TÕ\97ýÃI\ 1N\a\ 3üüþ\a\96\9eä|Ø¥_«GwS£\ 3±\1fÝîw+®ôÆ廵»\aÕVn]<lªï®is4?#ð\eö\16Â0to\ 6\9eé[½ä\rG&EÖ\14«}]¶ß]õð'§¸zË;¶"\9bÒÝVµk\8ab\8böÜ O\1dZlµ;®s¿<ñ}ù Ð\9f\9aBëþòÚaQäè\83ûö¾Øµå
+\8d\1c\9d±)ê¯E}|²'\81\ fWíEþ¥\v'wÛb{SÔ®ºål"
+<\bº¬«m^\ e\84ødÖáâ~óDÉ\9f\8eïI©Í\ 6µÄL«\rê\ 4õu\©\9e¥á\92í<fÅ~<¿°Ü¯Ë¦Ë\9b}\8bv\85\9fn\85äÔùfóÝmó]~\87ßö3vÜ\ 1\v\9c©\a#ñ5Ç5\82ù\8f\9b\12ýñÎ8héø}Þ«©\13Ì\ e'\95²t2ù
+Eÿn¶7Ïì\17=ñ\87×ç¯ØÚ(|î.ÊU]5Õmë4\88wh·îê{Ó\16[\1c\98\8aÂau<Ó\15TñçÖáû\1dò»÷Íé¸2O-\rgï²j\8b¡
+Ä\9f\\853Üp%\7fº|ÿ/÷±¨·eÃrv¯ËÖ·Ìî4\87Uz¾Z±\17!\v87nÜ\a$z`Rõ\1c_\9e\ eÖÊ?ËâѤGÝîóÝ\1d\81¹ò\10\á\8eÍ_£;¹^«(óMu7à\80Ô*.Î\83ós«À~ð\15nØ®\1a\e\11$È\ f\8d¸¹Ïë\1fï·ø¶ep\9a.LnÜ®zÜ\15us_þxÃÄ\vÇ\89&k·.ëbÕVõw'Êý¸¬8Åpz¬òcQ\9c¢õó\9d¡óñ\876{K\17\7f\862¨ÃEµ.o¿³>¼¸?¥D¯J\86×\ 6ï7un+ÕßeX\8a8<àÀP¯\ fE²ª\8b¼-Ð\9a\9b/î!¯qÍÀ\98S\ 4\9b\ f\86vÊ´\16tÞ\1e6
+Lÿð\0-\8e罧éð´\1fk\1c6(èÕþᡪ[Þ\91üî\80ÇÛÑ·ã¶uÁãû\93çbª«µïzÇ-INðÞ>h¨·\15\1c·Ô÷\89wµþ纫Ú\v÷\86ÉcÈÿ~`ð\7fùOÿ\83ÝEí\89kÃÎ]\15\99{[\978C5¶\9dÿò\rí\92s\98¾§Ô\ 6Ã\1fî)]vr·Éë»ÂíöÝéÊb8u\82á\ es¾^ÓÝK´ÆÎe4ÊÜú°n
+\1f?\9f¤Öð\12\96£\aÕÇ\11ñ#Ên`í<)âa}x\v{¿5-\1aw]U\9b¦h\8f;Ú¯\93çnv\9fïs,\87&Ø\1dx6éÕÉs\97ºPw\a\81\9d/\18÷1_}Á o@\82'æO\94àÄó<¾Ëzf×1QqnÁ1Ô\9fÁÞlJ\1cK\8fëú$UÃ\95vQÚë\11¶\ìÅ·uµ\rýf<úÆß=Óx^½ã\e3ßÁøü=^ào\97\97\19\9f«®Î/^\9f£r«?°/º·Õj¿\85§æ5Ý}Ég:~üå<Å\9bÙúÅù\r\8echò$'ü\ 2{1Á_¬óÝ\8b¿ùåúì\1fgÿ\ 3\9añi\bendstream
+endobj
+1120 0 obj<</Type/Page/Parent 1099 0 R/Contents 1121 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 404 0 R>>endobj
+1121 0 obj<</Filter/FlateDecode/Length 3058 >>stream
+x\ 1Z]oÛF\16}÷¯\18ôa\91\ 5Ö
+I\91\14U`±p\9c´ë"v²¶\82ìÛ\82¦h\9b$º\14\15Çÿ~ϹCÍ\\1a\1aW\ 5\8a\ 4\8e\8f\8fç~Ï\9d;£ü~\12\9b\b\7fb3KÌ47Õú$\9aDø ¿ÄürýóI1IL^ä\93ȬM6\9fÌ\a°27'
+®Í|>\99*NÁµ\89ÓÔI\91\85É$3ù,\99\14\10\1aÇ\11IA\9e\84ì\9cd\94Nb\93\v"©1Øél\92jVa°E<Z\9b\89Ö4Ç\92µ\99\154A\0å*H\8br.t¤Æ`\939ìV¬Â4)§7~Â`ólÄZ\93¦Süpm\8a\8cr\ 5Ð$\ 5%º¹â\10Ý=¤J\8f$F
+\83Í\8a\91X\8dÁ\16SdÖ+Õxm\92xÆ(9\93¬¹ ê\83\11\94è
+\90\bz\bsSæÅq
+BeT0º\8eÔØ:\ 3\83\1ckUF¹\94\8aU)À«\1c8«Ãq
+RhD\95\8eÔ\18l\8eZW¬¨ÌæS)ÀY
+Í\16\88J\ f±0\99ÂMOj\f6\9ba·xÖ\8a-")¿y\ 1é\99\0\8aU\90Ö\16°Ç\93va>\93"\99eT)@ìñ\90ö¤\94êHnÝ,K%[é\8c2\ 5p\9d\82Ȥ8å8«/\8d$ävwf\82¸Ð\92ÉÌ\ 6g\8e°f\ 2Ä\18\ fiL\8cÚñ¤Æ`gSÆÕ-Õ\18,j_\vÖ\18U\99$\93\99Z«1Ø,\1aë\15E1\v\12\r,F\93Ê\ 4\883\1e®\rª\0ö:NAÔól´NA\18\8bzFÔÝB\8dÁ¦^\aUj\f\165\ 2GÝZìUd)\8a%Õ¨@\84H\0W*H¥Ü\99\9eÔ\18,
+\13\11rK5\ 6\v×P\98\9eU\18,:\ 2Üñ¬Âì\b9#áX\8dÁNÙÒ=+î¤\ 5\9dB\f#Ød\81¸ã!ÝáÉâI\8dÁflR\8aU\18ìl\ 6¥\8aU\98Å\12Á`ÏZ\93¤âÑq\85\13@\93\14\14sS\93:\ eÖï¡5\17\ 69\92æî1X9\85\14«0\9d\993\ e~Â`¥´\14«0\9c\91¬{Vc°)Ï\11ÏƬ\9f\14ÉåA\9aÎQ/\16ÐU\ 5\11\ 6¶\rÏ)\b\83¤ÇyRc°y>\12«1Ø\82\eUU\98Î$\f\9aØG\934\ 6\8b\96\8d\80{Va°Ø7£µ
+\83EÐ4ks\9e\16Ò\ 2ÐjÁ VËMy,Ãà\98Gp*È\93h7¬_\84\ 5\v\ 5\90S\90Q\1a\93\1a3J\19«Û-\8dá9\12\85¾!óÏ4e\85
+¢àXa¬\85\81H\9ccÅÞé<\93¤bÀÉ\8c\ 5b\92\874\89\89÷¤Æ\14\9b \1a\8a\15\93¦H\10Ûd\8cã¡0\16\89I
+\83EG\80Zù]a\15fâ\98tÏjÌÄ\15#Ö\86b\9aÏmü\91d¬\15dCá1ô"\8c°Ê³
+\83EÒç\9aµ\1eevr\8dq*`Æ\15$\92\15\86U\98s Ù±\1a[\9b\11+Ç\ e6§Ãø\9ap \9c
+\12É
+3\92Ì\94b\15\ 6\8bV\15kVaz$ùô\92\15\86U8\92#½Öú\8baTæfd\ 19\12d#é1õzDÖ\16\15Z»$?\16µ\82d©ÂXjSäY\85i²¤È³Ö¨È\ e¸q.&\v\12ÉÂ&hÜ_Lo\86½K¤Ø\99\1dýlSM\ 4 +MÕb:Ä\ 1O±
+\83-x7ñ¬¸\9bävÀã\8037\16Q°%Q\1e6\16B
+²ZQ' T³[à\1fH\15@NA´[Î\ 4\9eS\10'\vKÒs
+ÂÔd¼Pc°¨\1e¸éTj\f\16Mp¦Y\85ÁJ\13Rk\15F5EÙÈ\19\8dYkÜñ~Æ`çÜñ\9eµ\11\94\8e\bµh©0Y\90DPa\9a\9cR°cíRdÄ^\f\85\14ä2Ãm.\ 5\8e\99)\93M\9fÛjQ\18r¥*íïÚ¼±\91¸µH}ª×*ÌP°qúµ\1a\83E-\14\8a\15\8bc\1c\ 6,\17\Ëæ¨6\ 2jU\10&a\10\8c\15©1X\fí#Va(\95+²\17¬1Xìr¸ãÔj\f\16yN4«0Xبõj\8c
+\87^-Yc°èt\b\94Ó«1Ø\9c·
+ÏÚ®\19ã
+''-J\90M\90Ç\88\86ÜÜ\15«0XÔ\e¬òk\15\86G¸Â*Çj\fV^\12\14«0lFCB\99¸µ\83Í\92cèES\81dAb³Â\90\1c³§zVc°\18£\10\r·Vc°È ^\<«0Xôý\11«0lƸ\80\fºµ\83Íxq±Ã\ 5Ç\1d¾¿\14v\9bÈÝÒbx\84í\87,xVafAlö¬ÂÌ\ 27¶Z«0£Ák\8fg5\ 6+ã§gÅøxj'Õ8â\ 5Î" ³ÂP\8b\16\88äËï
+«0X\14\1dRäY\85irÎô:Öª\8d\87¹P\f\16@¹\881ì\1f8>ùÀ$GjL\938Ó(Va°x;ÛK¢`«\14íV\9e|86Æ\ 2Èa+í!\16Ê\9dÈ\93\1a\83\15/\14«0Xt)(u\825&+qP¬Ç`ñ\16\86\b;V\fÆ\16\93;\1c\1f·ä{\89\91C´\87g¼£\14\ 4\87\80\14\8aó\10\1c\ 29\ fQ&Ø4sµNÆ\ 5X'\85\8d\ 69å+ÞP×\1er\1dCî8\ 5ÁáÆ¢9\ f¹ý9ù¸uv'a+Êy#
+\ 4Ðuök<wZÎ*p\9c\82Ð'\rÆs\1e\82Ã#\b\9f/¡\802\15\84-r\15q\9c\82àdôó\9c\87à0Bâip/S\92'³>\13\9bÀf\ 1â\82\87äXÃ\8as\90ád\8a\1c§ 8ûVÅ\86,.xH÷X\1f~\9d\87t\8fåâ8\ 5Áa\1càËÑ SAp\98iÔ:¹âÊQBÏá\9d|OK<\1a\861Ç úx/\82\18¼ùp\14s\8cGÃû°c\10\1d^´d\rö3î
+ü\9ez<B\10qÃ\e~M\ 2ì!8̾¸Úì\97)\88@ÉNw\9c\826ø¸¸ì×1ø\ 3$Ƕ¤8\aÁáæ¬9\ fÁáqTËô\10QD»Wv*\b\ eW>\±ö¶Hma«ÉðnÇ:\ 2qÝC¸n\87¼=÷nqòö'4éØ,îðáC^ÌÌb)\9f9DfQ½)&\7f_üúòs\88îÞ¼1ïëÛÝý}³¹7\9f»fÓÛoÚÛU½Þ\8e\97à\ 6\11\19,ÁG\1a§Rg\8b%ÄÆAÁ\17\9b¾k\97»ªoÚÍaI\91\16\94\ 4\ 5y\v\1fiaÝ\99Çî5\ 3Gb§A±_\1fÊ\1e\92DâÖ,[sa\1eÊoõ¿\8e°5\r
+½©{ áîÑ\8a®ÊGSn\96\16\98mÝ}«»@\GfgA\r¿´·\90³éÿa6iwýã®?Ââü\byÛ¾+7÷õñBgA¡×å\93ùÜnû\9bªk\1e÷Q^\1eag¸NÏ\96ßÊMU/]\99\1e!m\1e6°.Wf¹/ýâNu¥\87EÝÔÕ®kúg³ª¿Õ«@rÇ¢þ¢M\83\96\11tð²íjSµëÇUÝ×ðt+\99ÀV4í\1dêç\b\93GîãÊ2\ e\92|\90)\rÄ û'6Ѻl6\ 6\7foÊõmi\92É÷ñªC=\ 4¢Ãñø¥m6lIåÆ\-Ì{+ÿ©é\1f\9c\86ä°\ 6µ\9bxÍ\vZo\rå\16ýÚl\96íÓ\16ç\ 6ú\9cÕ\14HæXök\1dæÙ4[Ó?àË-\1a\ 3:Wÿ\0OTÄlG\bô\9cq\ 6ÂAú²iî\1aì\8c\8fí}»\11UOu½q\ e!pôïËÕÅ\7fÍnËhÂÕ[x{8rºTqß\b«=»eǨþ¸ý@J8\ 1\7fê\98àý'\98Jiè\83kè\12í·\ 6e\7f\94\8fÓW¼\\94Ý}Ý\9b/Û\90¬\97Y
+\1f\ eÿn\9fö¡7_Ûî·ã\8cÃE4èòeSuí¶½ëÍu½n±Ñá6zä\ e{ÿ¼\\85\9a\91®ßx\82©%(ÿª\×æ\ 6§VSá_ì»êáp@_\8a\fgéó
+ãF\89ùÂ\9cíú\a\1cdMUrD0\97\18\16V¡ ¿\94\1f\ e2\12ÕI½ÿܵ8\85/Þ\9b³Õªµ:\8e³=|ö^×ÛݪGh«\al£ÃÒ^\96CXÚÅfÛ#IÖ{îÐóvs×Üï:ùÉaé/6'\1e\v\82¹û³\e\vwç ¬ëú÷]ÓÕk¤+P´ã\ 4áÙ3(kQoeDZ0\86[ó)4¿¼\fdx\84ùج\9b^\82v\94qá±\ 5 ¨Vh\91¡\81ulR8\Üè}ëò\893\1c\87\89)·¦ä\b³.»çýy\ 6µ\18\95W«º;"éÉ+)ÿÜÕ\1d3µmÐ
+®ër\19¬R\9d.|l\16LÖ»²úí\1e\e)tX\8cå\84\93¾/m\9e>ØõC@\86óü\8fü\1f+ oýó®F\15@Ã¥lÐÚ,ºÝ¶7gU\ 5\az\ 4\1e{l?P\9c¯\1a\163ÓD{¬%G\85ÿÕ~\nv\18,!vÖ:lËaM/\1d\rçå\87O\9bSØ}úÓêù\87¿L]8}û¨1T6rÇ\ 4îåv ·Âóv½F¸pzÉÅS2õ¡ëÚ#îJx \ ew\86\9bçm_¯q\15Y5USÛ
+\80\92»æ¨\83\ 6ÏÖÁ\8d!ÃF\8bxtæ¡^=\9a
+sÝ\85Á¤\10\98åÆ©\r_sÆ[Âܵ\9d\9bãæßß^~8\8£c\ 1\9f ¾Ò#ö;Ñ\1e;<\83:{Gßþh®êþ sÉ0H\1eVõÒ\91p\8d¾¦IÝ\93¯ÛrÍM+\a÷ëÉyYPáKÙûO\97g\17Wÿ;ÿtµ¸þôqÒ\7fïÍ\8f.\90þ&1t\1eó7Û\90\ e{<Ö\1aÞ$C×?«zÛåÙ;1\81\8c3\8a&Ïû\11Î\0\fi«ç¡\11\ ev¬0Ä\1fÝ\89^\eZ\8f?\bÞþ\84\ fPäÑ\88oßQ\81ç×ù\14OGonÎ.ß\9dqGþZá÷mµãéïF\93S¾Õò×Og ^\98\96oôm Åÿù)\8a\14ïP RFõÃâä?'ÿ\aú¤\93\rendstream
+endobj
+1122 0 obj<</Type/Page/Parent 1099 0 R/Contents 1123 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 456 0 R>>endobj
+1123 0 obj<</Filter/FlateDecode/Length 2995 >>stream
+x\ 1\95ZMsÛF\12½ëWÌÍÞ\83)|\12äiK\96lGµ±¥\95äò\19\ 2!\v\11IÐ\0hÅùõû^\ f\88i0\1c\86[©RôüÐ=ý5==cÿ8\vM\80ÿB\93E&\9e\9abu\16L\ 2ü \7f\84üq÷é,\9dM\ 23\9dMñseÂ0\99¤=Z\9aû\9eÌ¢É\fä,á\97\ 2È)\bÁ(\99L\15©1Ø8\9aÌ5«0Ø,\9c\84\9aUxe¢(\98Ä\8aÕ\18l<6Jc°i0\89´¬Â`çñت â×é\1c\9eУ\14^[Dw5\ 6\9bÌ&\99f\15\ 6\9bN©Y4\89¬ÂX7\8c\19ä\81Õ\98\1eÅô×±
+\83M¦cY\85ÁÎ\9c\a\Wã\95\89\11+½nhý\85\86\84þÆ(\v3\15$6+L\7f\ 3æȱ
+[\7fa³cáï\ e\83\9dI~\1d«0lF~aÕÀÚz\84Ó\11\8cÊæ\U\0mR\10jÃ\90 \1aH\8dÁ¢ \91\ 2Ç*\fVþ\±
+\83\9dÎƲ
+Ãà \e\19¥1ØéØ*ë\ e|äö\82ãpU\0ÝQpeæ)C6p
+ dµ\r¤Æ`Ãé\98U\98®\ 6ȯ\92U\98¬Ô±Ó¬0XìÄ\91¬Â\fDÈ=ïdm=\ 5Sé\16ý~\11$õd÷Ó\8e\8dç\f\85c\15ƺIÊ\ 48Va°³\8c\89w¬Â´J:ÂÀj\fÖîDÇ*\f\16\ 5\86\ e0°Ø¨3\93¢M°!`\87Ï{@\7f\14Dbg\90³\1fJb\1d\84¹)Û\8c#5\ 6;\8f\90<Å*\f\83\92\f p¬Æt\86ÉS¬Ât&B\88\15«0\9a\ 1\92¥e5\ 6\vï´CRÅé\8c\95\84J\15\9b\ 4ÐYËM3Ù°aÈ®\99
+rdÊ\94ÀW\ 460© \92\1a\83\8d§\Ó±
+\83\85õZÖ®\8a.Ä\93 \9b\ 5\9c\0êU\10\828Ò v 5¶j§\9aÅ2;\fv&©s²
+#À\ 1{¢Ó¬1Ø\88e£X\85Á"ÀHì Yc\84?d¤\1dk\9d\8d2©C{F§\82$\8arf[\f\93Q1p×±
+\83\95N¦X\85ÁÎYþ\8a\95\r\9dB¿\1c\10ÒÔ-\92u\15\86Cá\9c9\90omny\14¥h\11ìã!<@Y\b²²\ es]öEÇ\8a» ö\94-\1a\9e\1e\16YÅ\ eC\14Ý'Ö¬Â\v:\96U\98&³l\9cf»l\96Ø\92b\17K\ 4pÕ¹\83P\8b\ 6\vÁ\81Ô\18,\8adªX«\16Ç\ 2\9b\b\9c\82¹\ 2¨Vú\86\85ô\85'±#5\ 6+½W±
+sÑ\8c&\r\8a5\86§\12~ÇZ\93¤\ 4±y\98ôD\80xêà`Ò@ö&õ\92!\96â\8eU\98\ 6sTQ¬Â4\98qV¬Â48b\9c\ 6ÍSNLI\9cÚb
+Ùº,\92\8a`\97N"ö\atiΪ\16\90S\10Ó\ 4;\81ã\14D\14ØI\1c§ lÅ\82X^V\90\ 5\15¦'é\98U\18\9eD\9c\a\9c¬\r}Àò\87(6ØÜ$\82D±Â\\96Ó\8fb\15\ 6\8b \11\8a\9d¬ÂX6\88YK\ 3«1XÙ¬\8aU\98Á\978\r²br\8c¦*c±\98h\913y`ÅDÅ*¼3Y±bòNÖ\9aèX\8dw&+VL\1edÓ\14î:Ö\9a\8ciXÎ+6\92X\0-\9e;\b\930\re\8a´\82Sî\ 1lVÖ[,\80\82
+B\10á \15©1XlN¨\1dDZt\1f\96(j\v\9c\0±ÇAªåÍÁ\91\1a\83MÙN\15«0Xt\93\99f¥}Dz\ 5Àâÿ1\ evî\ fI\9cÂ`e8p¬58²W!\19»c\ 1\94T\10\82X\ 4Ñ\1dH\8dÁâ¢\a\83\1d«0X¬¢Y»(\9a«d-f|\ 5H\94\1c\84 \8e\19x:\90\1aS-w\86cZl\88>§à\ 4H\14Ø;"d\84\89Á\87Y\ fÈ)\b¥ð3Q¤Æ4(\1e\89j\f\16ãk¨dÅ \bíÐõ\0\8bÄ"Ù`\ 3\vO#\8crüVX\85éi\86jq¬U\8cfévj$H)Þ±\18¸cÜVø°
+Sq\80?W¬Â`±\97àÏ k\97Å'ýn\83¤\0êÅnÛA\ 6\82;À\91V0îGGë¸ eï\8eÅå\15ñw¬ÂP\9cq\14S,t!l¸óÉ\b!W\ f\8bD³Â4JÒ.ß
+«05'̬c\15f\9bå\80áX\8dÁ&,DÅ*\f\16\9a\10\9aA³Æ`\11c-kC\85¹PæÝ\90¹\13 1v\10\ 6\aRl\ 3©1X\14ª\16Õ\98¡`Ûr\8a5f(¸Õ\1d+&\85¸\r°Ú0ÂÅ\18ä\b\ 6\93v\9c5Á\91\1aC-j\ 5ÏQ\83¨Æ`1ShÅ\1a\93å5RÉ*Ìø³µ:Ö\1a\8cACêTô
+p\ 6÷\oà@j<\18ìXëÀNÖ\1aìX\85\a\83\15+\ eô²\9cHC\19\8d\12\89¢5\18g ;\17FÐ\b9 \10\83\1d\84ZÌûðt 5\ 6\8b½\8d\b;VaºÃݬX\85i0'VÅ*\8c\bc¢×\9aÁò\13\ 63Ðìñ\815ØA\1aÌ{¢#5\ 6\8b³ j\aQ\8dÁf¼ÿ+Va\98\84ÊGI\f²èR\80\89\9dêeJ¶\801T\10jåPq¤Æ`\91Æi¯\87¢\1a3\ e\12\7fY\85¬]4¶3\7f\88Ó\ 6&\b\12Q\85éë\9c©s,O¤0äõ\10Ó,ÏB\v(© \ 4±Ñ5©1Xé\8fNTâÁOä:\86á ¢\82¨WH<<Èt£F~·¶²\91fý¸*wI\ 1\8e\9bös!Öã³e¿ÿ¹|\ faKÆÃÛqÒ\9cQeô0Ä|\8c»\1f\81èt\10\1câ\89\97\93\81s\10\9cܲ\1cç K\80\ f\9d\ 3§ 8ô[¼{ìt*\b\ eÇlì8\89
+¶\8a\8c\rܦò;\9c\r\88\ e°\8d\ f\94\bá"ÇPÂ&\1cYü]\84\ 6\ 4!\84\80çkO½\7f8;ÿ\88ê
+ÍÃ\13\1f꧳Ì<,ä\9d>0\ fÅ[4íhò¯\87?ö\9fï\9bïæy\9f\17/ß\9bz»^\8c¿@W\r\f¾\bÌ;ÊC!õÄ^=ß\9eóÎüØæËê©*[\93\9b«z\95WksY¯»¦^.ËÆÔkÓ=\97f]v¯uóòïÃëÁþñ\82¡wÉßêW³¨e±oPØvyWa\8d§j½0U×\82\13\v\8aÁ\ 2Ï\92û.ú\83õí¹\\9bª\157n¯.áJ¹(\17\1eµïö\I¼\8e\æks\9f¯\1esóX"rLÉvó÷\0zÖ\19\9b\9fzW±á2צ-;\ 3ýy¿æû«K\8fæ=\apºü³ò¦Ü,«"ïJ R»zÜämûº@V\96¥g\99wøû%\97s\7f\98©ÖßÙoZóµ-\9bóÏyñ\KsQ\14(âÎT맺YÙJ@ù!²¿_]Ü\9a«ª)\vÈÿ:¡ê\92#~Þn\9bMÝ\96\87µèL`ðö\ 6ë\9a[b±-X®§hòïºûífS7]¹°^Þ\97ÍϲiOÑy$ÌÅs¹Ê\11¹\85¹+\97\12Éö¹Ú\98®\96\94Þ}¼Ä¨\1cd\ 6q¨þìÃ~Ê\8aþÊD\8fxª¾o]rÍkÕ=\8bK\87\15\8f
+\13ÝúHÂn6åZ*\0m@\16\11\87\ e«\1dç\ f\87\9d7\83\7f³ø°Âq\v@§÷*ìã\88Æ\89°\7fB?Þ´f\95¯óïåª\w\87µ\8fÍͼºïË\ 2±í~\89î\96}æÿÈÚÌ«V¢ÚnÊ¢Ê\97°»ë\9aêqÛ¡\1dc\ 3\1a½ÌIõ8÷®óáÏ|µY\96(\87ë\8fæ\ 3¶\ eÏ\17®\91\8fV9%F\18îÆ\9fÉ_cË9xY¯\18i\8fãDú+ùkË\ 6%Î\9b\18dzÔñ\ 56úÏrè@¦µ\9bvlÉî¼\1d\95ö±Â¾^ãÀ[.¹\1eOÕ¦ü±E\8f[\98\rN\ f\94\8d\rÑUùXåëÃ+éò9Vë'-tW.~ËO¨Sü5å±\14lpJØþ~\8aÍGzXÙá\84ûUo\es^vÅùKó\98NØ\ 1NQëOïeSîN¶¢^mPí¨B{ð\1cV¼\97Ícù¼Û¶z\84ûeÓÔ¾\1e¾_\87þ\86òP¶\9d\r\0NI\1c
+<õ·\9bÃV\8e+ÁßH¨\93õ&U\8d£½XV'5'\Ö¼IÿR£e\1c6kì¬ßÕëÕ¦©\7f¢ô\1f\9búU6 \ e~Ù\83\87õ\8e\92\82\17\18¯m7\88ÛϪ|5õÓ û°J\1dAܬ½\1aßï,ì{\0Æ\95c\96\8eÕúwÎmS£rVh\ 2m½Ü\9e6VànøÏfæE\83²DÇzÄÔîIÓ^8\8fMOÃÄ®Õ\ e¡5¼\16\18ß\90¸·\8c\7f\93Þ\97\9dT©\8c¸ß®¿Ü£ô¹\ 3NÉ\9c¿È\94Ö!\89\9c/Í·\9b»ÿ|º»ùz{\8a~ÿÞò꿺ù|qýå\14åþMö±n
+w0a\90Ã=\83\87Æ*oÑÂNÑí?\9e?ç/J5\94ö×®Óu\1f9\95Ù\1dLþXo;VI¾(`°É\17\v\14zëk\eãM\83\7fæ3öÏ\1dù\9f·Ë®âdQ\11\85§¼ði\1c7¢#9\94;Ü\ 6ºx\ 5Y\17Ðܶ[\9fÖQAã\1f\ 5yíÄh²É\9bª×\9e\1d¨=Æk¸WÑÍfY\17/\1e%{æàUϯ§ï\8bãÀî&\98}küöü^þ,\97\919jÖ¾6\7f\13¼Y.Ì\9b§ü¥4µõó\r~\91\17\81wfQnpÿÃÙíyåØÏ°\7f\95{D\10÷g«Ù\13ʱÍþ6{Wæ\vÓV\7fy®\93ç\1fù\94ÇG\1d¾ï\ 53¼\88Íc>ÄÜ_|~\7faÐôÿÀ\9d\16ï\ 4Å\96£ëp±y\17â\1fÐðs\¬ñ\0´x{ñØvM^Èx\96à_ÞÌf Þu@¤Ìà\87\87³ÿ\9eý\ f[èEÝendstream
+endobj
+1124 0 obj<</Type/Page/Parent 1099 0 R/Contents 1125 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 501 0 R>>endobj
+1125 0 obj<</Filter/FlateDecode/Length 2446 >>stream
+x\ 1ZÛnÛH\12}÷WôÛ$ÀD\16¯\12\9f\16\8e³¹\0ã\8d7rÖû\90\17\9a¢lÎH¤\97\94ìäï÷\9cj\92]4Ô\86\16X\ 4PptX\97®ª®®¦ü\9f³ÀÌñ/0\8bÐD©)vgóÙ\1cßð#àÇ·OgÉr67é2ÅçÎ,糨\a[³:Spg\82y8>IÒ
+.ÂÙ\12\82Y:\vM*ÀqI6K©4\9dÅ&\15 J\1d\84Ò`A\8b#i\95Æ|dg\16\8bYfR\ 1\14T\90Þ\ 4Ô:\92V0\8aà\ 6,Fä\ 4\88E\a)\98RëH¦Ñ,1i\88\98PpIN\80\b:HÁål¡H+\bm²þ99\ 1\14Ì\1cä\1aç\88\83#E0É"\e\1c\9a°`´8pADå\8e´\82H
+\83Ãt@R\10%5\ 6\eÇ\88\84chº°áYÀt"@l:\bÁ0\98\90V0\89mxäI\ 1N°ç\ 2D-2ÉHZÁxnÃ\13Í\ 2\93\b Ö>@Z¤rGZÁ\90¦ú\82L\ 4\88E±ÑsA\103<#\19D\84ø\92á\91°\80\82
+îPnH\96ã\14D!\a\13NAx\8abEàÄ\ 2\95jÌ\90g\ÕÈJE&(SVd0gè-\12Q\85)*Ù\92gÉ\8ah\8cbdM.2xd\ 19\ 5©6CÐ\1dÉ"\bM¼``À\86 þ·H\8c*l\8dÆ\9a\85\13\ 3\ 6\9b0sJVa°\19C¨X\85w&D)$\8aÕ\18l¼\98Èj\fv¹@\14\9df\8dÁfl)\8aUxg"TÒ°\ 2®Wc° +ÛÉjL6\9b¬Wc°èl\88³ÄU4+\f\16\9bp¢YaT"R#©1Ø\90ÍÉiÖ\98U<õ¹Ï¯|;æW\90ÊïÀÚ|:Vá1¿\8eµù\1ddm>\1d«ð\98ß\91íóÛËöùt¬Í÷À& Ú\96]\17}\ e\15\86æ\ 5;¿b\15F\9cC©îQ³Æ`ag®d5\ 6\9bò\84r\9a5f\ 6CÖ¤Ó¬0X¬\1eÙw¬ÂÈQ\10°bGVcæ7\9dhÖ\98ù\8d'Ñèó\e/\11\ 5æwNV\90ͯÃ`ÑÓ°"Ç*\fÖjv¬Â`q@¡&\1d«0²\10d\13»\1a\83\8d¥«\8c²\1a3\83²\17\1c«0Ø\8c\87\96³«1â\1c±ù:Vc°q0ñYc°XßDVa°\98\1dt¬4\ 6»LدF\9f5f~\97\13Ù>GQ\82o\99#\89\86 µ\a\a6ʨٱ
+3\83²\17\1c«03\18²®\1c«03\98p§8VaÄ\19^iY\8d\99#\1eJNVcD\ 3ã
+öѨYc°Ð\8c^çX\85Á¢\8bh¯4f\9c9ì9Y{ÌaSó\98ã@\a\97\ 5I \15\ 6\eÈ6r¬Â`\17<úµ¬4
+\flö\18\94@
+²)r\18²H;
+DZ
+\83EiÀ+Ç*\8c@"TXîÈj\f\163&\8aݱ
+3 R\1a#kË\8a\86sO\80g\17ÒxR#>+\f\16M3ЬÂ`Ñ41ï\8b&\91U\18,\8eÌ\89f\85á\15\ e\89TÉjl}\9eh\96q\83ÍSÚ\15\ 6 È
+\12»
+Ó+Y\91c%g\83l\88M\ 6¯FVcØM9P8¶\8fU\9aõ[\90\8d?\12dóë0ì¦\9c°\15«0X\1cÕ¼\eQ\93È*\f»a\86\959V
+6Jì]É\16¬E"*\ 5;²H\18\82!Ï\92µ¢±½-õ¢\82\94èÀJK\89\1c«0×\83\9b\e\9a!5\89¬Â\\ f\a3Å*\f\16\837bád¹m",\92%\87\1a\82Ã\ 2Äa\aå^\14)\ e\93é\0¡\147\ 684
+j\f6ᬯX\85Á¢4µQ\8dé.\17©d\15Fr\ 2Ù\ 4£]\eaô\ 5©E\90\10\15äÂ?ï¯\87¼ED\ 2È!å\ 3\84MÜ"°\9a\91Ô\18,&ÌáY ¾Â\\8dÄÓÉÊö\bq¶J\83\8bxÖ[$²
+C\16Ói Y\85Áâ\1e\12jÖjFô¤ÁYM\82\94æ\81µ\9a\1c«04ã\1a\b¯\1cË%\84¸\83±$dÛY@½
+¢$xþ9N¢\1fJû\87R\89¾E\14´ddo\9fxU\0\v\ 2È)HA¶yGZA¹ âj6g\84\ 4\88 \83\14\94e\8c¤\15D{\96Ë9û!{³Ý1ò®ÂB\bb>\8b\15)\82Afo\9f\ 1R\99 øD4©1mò\9a¥X\85©\98\85¯X\85Á"\96\vÍ*\f\16\16ñ\86f´k\9dZÚ\9bôõ@\80øÄ\84\ 5r¢cVaR, § \12\96r-ò 9\ 5é,w´#å*\1d\88YT\ 1/§\16PÐ:\83sBBË$ðújCk9\8cqrw\ fhP\80\18t\10\ 6çìS\8e´\828\ 4¸yå\85Q \80\82Ü>|ù\82±\ 3\ 3ÄÜp^hK³9{\7fsvþ1E\1eÌÍ\ 6]\1a/®\16æf-¯·ææ¦x\83\9aHfooþ|ùÖ«½7oÌUþÓüÜUû)\ f[P~\8f\97fï\10\83\10ê¨%õjù£)þªêûS\94,¼JV\ f9Ö³kÖew\8a¢¥WÑ\1fͽÙ\96Oåö\145\99WÍmµ.ͶªOs\aûjjNÞ,J\8c¿\95ùÚ´ùó\94?\1ecÜ¢¦\8f95·mµ/OÖ\13zõ\88;\8fm¹®\8a}ÕÔSs\1e¯"¯¶«r×´¿Ì.\7f|<±\ 2Ð\1f¦6Ý\12WÛæÙ\n«²Þ\9fT\ 3h°¯ªB%Tõi\9aüÅmý1ûC}ê\ 2ý5~õË|+»ÃÖ·¼wØ¿nËùK|\95ïîr\93×kÓì\1fÊÖ\~ù¸2Åk\81{¡Ø_fWyQÕû¦{\18ôým\1aâc\15\82«¡7\11_Wa\9fÒãz^8\86K\89WÕgTG\91×æ\8b)\9azSÝ\1fÐ/¾®ÎCs\9b·\8f沩ë²Ø\9b¦U_Æ&ïLÞ/ÅlÀIèN\\93\7fU¯»\12\99\1foêf?¸ôãíïÖ%\8c/¿ã'\87\88>\86³\9fÿ³?þmx\81P°\12J\14ů¾(ª®;\94\9dy~(kkþÇ\e\92OeÛaßÿxkªÎ\1cºrCtb`ü[\98\81Y7HÑ}¹7\8f-J å¹n+XÅ÷Ïõ¶A3|nZ\9e\17²~I`_º\1eë/w\85?\f·U\r#\9d(¾\85\91û¶9<z\1aÀ\8bÂÃ\9câ-¼ï\1dN\82|_v{ssy}þåÚtû¼øËlÚfg®ª¢mºfsÂ\19\8añâ\95\9dò¡Ü\96èð³ÇçÙT[¤.ß0z\8fy×!bkS<äõ}y|\eé£\9afü1Â>é÷ÎíæÖ)\87î5N»\13\ eqª÷\17Àe\8e`\rÊL³\19-xÒð2¹~ÍCr\7fË\92óß²å)qð\9f\ f\83²p\8eQgU¶OUQ\9ak&5<®xê§\7fløüõö櫹(\8a²ël³1]sh¡½Àhc\9eªÜ\þkuÜƤ$ñ;\8a· ¿Ôû¶Y\1fN<Àq÷j\82/\83³ûÆt<WfMë©\82\17þ½Ö«û\0ôË}.ï\8e¯X\97-Ýô;ª\14\16O¾ZÂ/¼ãñ\89×ÆS\9bnÎøV>6í\9e\1dèýáÞ£K¯\15ªþO¹\80&ÿ\12?\95uÙæ[SÕ\9bfêú\91C\17\9aü{üCywè\87`ÏòTà¡É¿éPie[é²m\9bö$eþMw±GÛ|`ÜQk¹i\ f5g*\1c\13\rwË)Kö\8fi×ù¾xðÍê\93Í\8b75SS®0>ñ¼\18\86Y#[yúè±Dø\13z\8d*Ëïªmµÿu\ͤÈ^ÛN\9f¯¿ÿû¸
+\9dÈ×öÏêò«ù^W?OÑòJaýã\8bÇ\8fó\8f¸\80Ë\1d\94÷Ùù\12\7fÏ0ç\8f ¸;®.®Þ_\98ë¶ù\93óÙ\87¦8ì0áçÃíã\1dß¾PàÝ"Ä\8duýæâ®Û·y!\aj\8c÷RËe\8c«(\88\94Îÿýæì\9fgÿ\ 5·TY\99endstream
+endobj
+1126 0 obj<</Type/Page/Parent 1099 0 R/Contents 1127 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 504 0 R>>endobj
+1127 0 obj<</Filter/FlateDecode/Length 1081 >>stream
+x\ 1VMoã6\10½ûWL·\ 56\ 5bÚ²ìØÎ-)ºÛ=´\8bn|é\91\96(\8bµDª$\15¯\81þø¾!åÄIÓ\0m\8a \86-~Ì\9b7oÞè\8fQFSüe´\9cQ~EE;\9a\8a)\9eðGÆ\1f_>\8efë\85Èh1_\8b\19µ\94¯¯D>üjè\8e÷Ó"_\8b9ÍWK|\9fáß)ªâB\96Ïqè\85\85|&®\9e?¿Ý\8c&\1fÖ4\9bÒ¦\ 2¦«å\8a6e\84\82'ÅÅ\ fµì\82r\80E?Ù\ 3\ 5K\9f\8c\ f²iH\9a\926Ê\aº»ùùöæûÍïñ\9el\99î\19G\f\9bò"\138z\17TGÓkú¢dI¡VÔJC\9dÜ)\9fÎÍ)Ë\86s³%0âÜæ|\17\95Ú\a§·}P%\1dt¨SP*¬ R\ejlðd+꽪ú\86´©,ÂÈ\80½@Z«¦cä;\15èh{\ 2~\87\8b\ 4}ªø7C\98Ò8ËA\1a\ 2\97Ö¼\ f´7ȶN\19;Fý\80\98ñ\e
+îHÞ¶*ÔÚì¨Ñ{u\9dRA\ 5\1fR¹B}pãwi%\eVÖ"_\80i,\18g«\8aÆ|µo·¥XÑ\9fÔZ§\9e\922\8e\aƳá¶Ï\88ï\10»w\85\8aIs¶®\95A[C\12"è¬6Ì\132Þ\1e#Ûw²ÝJ:¨-y\1dÔeLø©àÜ\8e.¨\ e¡»\9eL\ e\87\83ð|BX·{º7*\14{Y1ç\95\8eifb6T:»¦Û^7%SÃÕ¾ÕF:ýZ±-\95\1í/©Ò\ e¢r=8ÆÑÎÙ\9d\93mbd10xAb\82ÒWz×?'ë\ 2Å\8f\a\13A\10\8eSE°î(h\83ëÉ׶oJ\92}°LY\ 1%\1fYF\8fw\9dI!ñ\ 6vY&\8el§\1cÎ )\7fôAµ'\ 1Q-ï\15õ¦÷½lÈ(Uz\86`¢ØZy\84
+}Íå@R)\91\17Dâ¬\rߦÕ\93Pò\85X\ eJ9Ë\97Æc\16tÚzj\9cqÚû \92D"Bz¥èÀ\9dà;UhÀ³\1d\vÅGl\ 5\84§\8cÜ6\8aÙ\ 1`õU\15=gø\1fa¶rÿ\¼Ï\80Å\86,ÐQAÅ2m\ai\búl
+E:¼G\8dú\ 2ÒöèäX\9b¶Ó\räÌ\9dË\80Ñão@\ayDûz\9d>\107ì{\ 22z\1eº\95Ë\1cÝKÐo\ 3*¯: q( þ§\93\13èèÑEzÿ6\9aOa@àë¹À§ÿ\a¾\0üõ0¿ØXQ(MGW\8dVÔwhÞh\ 3ÜD\12ݬîµí=Ý+çÙ¯à٩ɸºÞÕ!z)7Ktàhâì\ 3\16M;\1cbÓc,g\8dÊ;NJJ\9e¿U\98\87F¶§y!é\9dÀ\1dï ñ \fÇ~¬Ý\ eF)\8b=\aå\8bþ\ 6\92\aÎ[(DÒÊ\85×é\eH«4¦*ûà)Y\90\86Ù'a7î\9btÃ\8bÎ\9b\ fÎ;»æF&\9eϺí¬\vÒ õ1}\9fF\au§9{\13R<tÅN%Çêá¿\95
+EÍ?\9dWM\ 5\14\ 5F\15¼\ 4e´ ÉQé´ÙÇý\11³\ fºí\9bè\8e\82>ª\10m\92Ùtü\8a\802ó÷³Þ;+\9e\8beçÖ\8e\ 3U·\18k(\1fæ}±?^âa\8c\12\8d\ 3Ó`\v»:F\93\85Y\bN\8b\93\19fc\1aèÉ\8f\87`\10@\1cf¸\12\1a\8c¦\93\8c9\ 6Ük¼\19Ĺ\0\8eâm\93\ f«Ç >ÏÓ\ 4ÿ7oAóÕT¬Vó4á\97\fðÇÍè×Ñ_Vì÷#endstream
+endobj
+1128 0 obj<</Type/Page/Parent 1099 0 R/Contents 1129 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1129 0 obj<</Filter/FlateDecode/Length 1446 >>stream
+x
\ 1\95V]oÛ6
\14}ϯ¸ëK]¬
\91?ã8
\19öÐvi
\11\fMºÆÅ
\164Ã@I
\94ÄF"
\1d\92Jê
\7f¿sIivÔ´À
\128v,ò~
\9esî½;
\98Ò
\ 4¿S:
\9eÑ|IYs0I&4?:JV´X
\1dãó
\f/+©
\b\ ffG
\8bdöÔ
\83\93\93o/¼^
\1f\8cß
\9eÐô
\98Ö
\ 5|,WSZç
\ 4û
\93 ³Ñ4Y$tåå
\86æ§ôÆJá%ùJ
\92kRÊ
\8c.TÙZá
\95ÑT¨Z&/Ö_`nASXas
\87³ãd
\83£u%
\11\9fÀË
\89fSË'.;R:Ø
\96_Ã
\11G®Mseeæ
\8dÝö
\ fså¼UiË>
\13:Ç
\99²
\94ÎÓÖ´¨
\80ÈÙBÃaÀùt
\8e:Ày
\ 6¿E[×[r&
\1cÌ
\84&'%Uæ!x4
\e6ç¨4äM)a²¿
\8d\15\99W
\99D
\ 5p
\98Ónpq#JTÚX
\12u½
\7f;$Ï)/
\93E
\9729ÅÉ"¼Öq
\ 4OdM
\ f¦sJQ
\18ÓÀ³Ò%Õê
\96Ý)w
\1aë9¡
\93¾
\9c\8bh
\9bº
\9fÏemRQÿÝ'<A
\83\91pÿ
\18ï
\ fÆÞ
\96Ö´
\eú
\95Þ_¿ûxùéCwx6
\8dÙ;ü¹B
\fî
\aÖp¶l9
\1fs
\v{Ú|ß/N
\86v
\18\8d²÷G
\1fAc¾
\8cÁ>T*«º2 ¤h
\80¥ÑõÐ
\92tKBo
\8d\96ô |
\85Ï$²Ì´
\1a!D´8iï¥}
\89+sé$\ e¡yø£,Õ¦D\17µh$\19Û\87ÚaâYHõ\19 \17zÈVÐép8¡\9bÑ\85 @\17\1e\10\135`ã¤\ f\awõô\15\9e^\89&\15¤\1cPa\11R\11¡òúãå\9fWç\17ï\12ÿÕ\ fü2pré\85ªÝÍ\8b¾\13\1dbþsÊß\8fß\1eu4\1a\ 1v\0\84ÒΣ>ñYO±\11Ê\ 2\18jãûç$(\1e\81`\ 4\16\8eÀÕ\84¹:¼\19\18K× \8e\96\12Ä1\94E\82«@'ëd]\fAý\9e#q-xÌ\84Û´±(½\87 \ 2=SAtI\9bZ ª|Ömd¦
+\ 5G\91æ\83 Ù0\a4\fòfļËe!Ú\1a9¢[\ 6}5·|n\8fâ\V\84\rÓ\ 3»ãÖÙqm2Q\8f\11P*ƵJÇ\ 3'7/\86i¾\85¹Æ K¥a¹\89
+'R\83|\9dÌZ«<´Dz\ fȹ \ 5\1cdÇ\1er\15ë\1cx/\9c\ 4
+Æ#\84\85Ó0YÛH=Äħ\8bó¿þ¹:{óéãùú\9a1ÓéèN\96\ fç\1dñ§ÉQ§Ç\8bSZwÂg;]\89å\ f<ñx\ 4H\ 6%|ĺ^\90Ïýs\bn³1Ö\v\90)\80\99ÛÄ\17C¬÷¢V9çi
+î\9f\1d\16¶ïù \961\86HFN¹\ f\ 4bjJ+\1ahv±ûÒ¶Ú\r:yù;»×ÜÍ\0í\1a\82\1f\ 2ª\8dÈ\81\9e\8e©.\18
+¸ï\ e\96ê\1e\13F\93´\96»'\9d\83P\ f\e»Ã/ì³w\82?¡yl\80Í\1cpo? \8c5Ì\19-RL¬T\ 2
+è«5\19è\82Îÿ¨KË®KG§\98\9e\90\ 6Ö¦`½IóàOãÃãÒíMËk4¢i\91wV\19\ 3\10\ 1>à>\ 4\ 6Eß]ïÅ\ e\12\96\vÙð\0Câ\855]×wú¡´ô\ 3o£\84~3ú9rÆl\85ýÜPj|õ\13\9dE\ 5EË\a\8dá¡Ù\11¾y\82hÁÇ\93:Ãå\ 4\9a\83\ 241\11ô\11ò\9dKÌS̾m,Ä\8fã}ÉÉ1BÃð\ eÕ\bövÙ\ fâíF\ 1×#\94>3MpW#R¶õ\84VH\9f\8dm\96\ 4¹xÜ\1c\94k¸\ 3DâwZÞO£}'\83xº%#¡5k(Ï\v\95µµ\0yY.Ð\82~}¡\14Ø\8cbóÀ¨Äî\103ïe\1aË\ 2\8276\8fÊ\12¡\11&\11H¡yI \15Ý\93Ç\fRäBõ\ 2¬`À\1a\13ef°±4\ 2¦E~\ fQà=\aä\ fæ\81ßa\93\18\8b\83"1²\87Ǿ\ 5ú¨\9bÕÌ\alwh\8bÔÌì\bb0×W\ 6S\82\asää6(Á \9cVº\8d\ 1z\ÊÊcÉ\bz}תì\16ÿ \9c\80«ÒÊ+\11Ö®n¡\80Ã;^`vÜÅ®\166Õ9V]Þ\9d°\15%Ó\9e½b\8f¾\ 1HßCy /_¿¸\\9fýBk¤V\18^f\98øAÇPó\\15\18\ 6Ð\7fRAS¹³tq~ÅhÄÛÏ\81\87ý~»'uèèÆu\11¯º©>]bï_Íi\89÷°ó]½zÿú\15}°æ\vV'p;N\9a0¹¸r\87ý\85Ãã\196{Îó\7foö\8b\15öËÕ\ 2{=î¯ØêÙúà\8f\83\7f\ 1ã4ß\90endstream
+endobj
+1130 0 obj<</Type/Page/Parent 1099 0 R/Contents 1131 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1131 0 obj<</Filter/FlateDecode/Length 1361 >>stream
+x\ 1\9dWkS\e7\14ýί¸Ð\ fu¦xýÀ\18Ã72IZf\1aBÁm&3\99éÈ»2VØ\95¶\92\16ð¿ï¹Ò
+?0%)\ f\8fa¥û8÷Üs¯ÿÙ\eP\1fß\ 3:\19ÒÑ\98òj¯\9fõix2Ê\864\9a\9cð{üZIó½·Ó½Þ\87\11\r\ 64\9dãÊxrBÓ\82p¼ß§iÞùÝ\98;\12\9e\96¦±ôfú\r\87a7\1cîô¤Ï{NÚ{\95K\17\9f%C\9d\8c>/pM9*ä\iY°\91ÚXO\83£Ó\9eÏë\8c.æ¤\8d_(}»~Ì/¤&Qà<\95¸\87\97;ɶûÔ\1d\1c!üiÑÁ\1dw\16ý\r\9e\ 2ï\ eÇÙ\88\9fjégʸ®s:ùÚ\8c\r\96ÒY§*U
+[.in,N\9fô\9a¢æ\É-LS\16´\10÷\92\84&©½]\86X^w¬]²ô¢ßKùèI\16ê?pEî¾Èr£ç\9bV:\b\aà\0 ÿ`\ 2D\8e\9c©d\ 4\92Ñ¢5|út\1aëÚ\1d\8e"<´õµ\ e\97óV\8a\8aP\1dTæA <k\8c§^ãl¯4¹({NT3Ñ\9b)ÝsÕ¬ ðÂñquúÙ\84ñß²OÉ\ 1`)n-Ì3į\18×l<¼l&\ f7Gãèfº\90$\1fEîÉ-µ\17\8fdæ;ùù2\8e÷Â*éh&ý\83\ 4ç\1a\1e¥Ë(1\1eD$ÐSÚP|>©4~RU\ 2cDʽeæm£
+\99µÿL$»ü4}\7fF7¨Që\83D \9c\8bed\17S\8b\87Òµ`ý\r°¾vÐ\1d\L¾VHërcå×7\1cE\ 4å;ûð\8bi¶¢¬\1a\aö©\98\e\93ð\aì\11úd×ñ\150ñé\93\10\907T\89ÀJY\11øì\94óÈy7J\9f4\ eë%j\8aC\95\vX\89%H\ 4\ 5\81¥ÆED\ e\94öÒÎ\ 5\84ç\80Lí\95áÚ0\1fCËðQWË\Í\97\ 1À\8b+î\18+]\90©5)á^\ 2æ\95pwL r+Ó\19]7:æs\9cD\8fÔ\9c\9bRÝnç)\ì\16\15ÌPaôÏ\9eîÐGôÀJÈu\9cY#\8a\\0}è"+Nð\aÿ\ 1\8cÞ\87äd-@n\82mO\91/H±\90\0¡\ 2ô\84"Â\87m4yUÉC\9a5\9eæB\95\8e\0\fËÃ\13½odDÐÉ< \86ç\a^:Ï2ÌÎ\ ev\12\9bõÅ\14\f\11ļ\b\92\1dÓL\85)L\90\9díªîïï\7f>¿¾¼¸ü\15ïè#\976ö\19â\82ê\8a<\975B·\ 6\14§cª\ 5\ 4\82\93
+q3d¹©@\88"\bÝ\ eê¿H»\8c¦\98\12\8cÜ\1a\98\95\14h¬\95¼s\85\98Q®f"=)\ 1û\8d\9crQlímS\81²î\90Ù¿º\1eî
+r¹Uµ?\fG\9d\17\18q0°å9\9e¡¹5U¬f*u'JÊV\89·a¼F\81`ø{®\1eR-íBÔ\8e¾q\9b; ð\98\1dôÛ\9fWaærüa¬)\r£eÉ£\19\ 3\ eSPAëî\81=7\93iÇÎ*Î\9dLäaÍ\ 6S\8fn¥\r\8eÞ©²\8cR\8e\ 6y\90eÙrý\94\ 6\18×¼rt\8f\ 6q4\r²q6ÌèÆË\9a\8eg\19\9d\97`\82\16^ÝË3
+\0\ 4â!\19Ô\85
+!+£7\81\83±!ï/\9d)ú?\95\ 2\18X¤µ~k½\889´\18:\9bê¸k\98\82¬è©\84+æ 6\13,-m=\92\ e¯\11-ø\86\18mF×iS\7f}(ÿ´\1fgì"áùÂl}y2wß\ 5\99æ\98~än\98¹íÝõµðiì\82Ú,ÑÐs\90J>ʼñbVJzÀ8\89Ù®\18\93/*hÆ/\8f±\14Ïààbµ;Û\17P(\a\v\83u¨Ø¶¥\17ð¤\19ÏP\10\1cm\19c aq\97í\1cR6ÏÂ\1a³Y\96µ8@\9bÀWä\16\1aGÄ?\9dºÕ¢ä¡ÂÒP[\ 3µpiå]廫C\10ݳd\9eKz ÆZ\1cqeÀ\82̽\95fÞÍ_×#@¹\ 4ÚJs\84aFFÌR\ fÆý\ f{a»¶s¼Ñ\7fbi\aKSU\97Òõܽ\1du\ 3²Mý\f\91´k·Â\85ÔCÑoxÿÃ\fÀ\ 4Ó\ 1\ eL\9d\18GËíI;'\ac|Ê\98\1cáóÄ îk7ç\1fß\9eÓ\955ß0xè\9dÉ\83¤¢¹c\ fwÓ\85îÉ\10\1f<\8aÎÿ\15\83Ñ\ 4|\9f\8c +0rÊy½\9fîý±÷/Xlä¤endstream
+endobj
+1132 0 obj<</Type/Page/Parent 1099 0 R/Contents 1133 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F3 6 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1133 0 obj<</Filter/FlateDecode/Length 1290 >>stream
+x\ 1VïOãF\10ýÎ_1=µj\90\88\13'!?øÐ\8a+G\85t@¯I\85ª¦\1f6öÆY°wsÞ5!ÿ}ßìÚ\81\ 4®=µ\ 5\11\99¬wæÍÌ{3óù(¦.~c\1aõ¨?¤¤8êF]\1a\8e'Ñ\80\ 6ã\11\9e{ø+%-ýÁi/\8eÆo\1dôO\aQï\83¸?y}ãýì¨s9¡xD³%¼\ f\87§xg\96\12|w»4KZq4\8ahêä\9a\86g4+·\94+ë\94ÎÈ$Ù\95(¥%ñ(T.\16¹$£ikª\92¬,\1fey<»\87uÄ\14\aëíÞ(\1aÂzëÛp\12×'\93¨\7f
+ç8°Å"É\95Ô\8eÚ\1f)¼Ô¯_j±á\95±N\8bB\86£A}Ôö\ 6Ú½!R\ 5#¿\9b
+ÈL\95§\94IG\v\91<\90ð¸É,ÿ sDWK\8e\81R£¿w\1c¥&k
+éV\1c´²¤tbÊR&.ß"LW#\ 6Ó¥vÜGÞáþÆ8\89{\82/ã}¾jRJ\84&\91[C\vI\95\95)9\83ë\926üb\93GTw/\97\ 6îKú(ôµÐ"ÃcH\8e¥yËVÉ\8a\84=ð}·¼ËæÇ\r¢&!uDÉÊ\18ë½\97\94ËG\99\ 3@R\95ÊmC\98\1cu!¶´T\1að\18×T\14\v\ 1Î}®¤u¨3\85µ\eS¦\88bi\80V9Ú¨<\ fÉ\ 5Ø\ 38!.ð\a\81Ö§\9dËÓ¦ ´«ö~9[@¡á*\ 3×MI©t \97\8d\104#äDâëÄ;G\12\99\8fl¼IâF!ß\95Û\ 3»=À%Ò´¡°Y;\ 5Ö¶\7fû\8e+Âv\12SÀ\7f
+ÃZF4ã\1aú\18µA°¦|À\7fnEÚèvHOàº\9d\1f\87(\9eÅÔî\ f\ 2!¡ÔZC£ ¡Äh\r\ 61\ 6o\8cÝVZ=Õõ\r\86þ\9dnÂÝ\9dh¨ÓAÒvºé\bF«\92¿\17Ðl»V\89ÈAp\ 6\16,ö\9aª½4\17\8e\1a\19¶\90\1e\16\1d\18Î÷X§,8~fÝ\82ê\12\94á\1a*m\1dìË4\18ØcDýÝÎ(\97à\15\88·ÃhA\9flñ\85\18\85f\95ú\90½ç\95x\94`\14(\ e *ý"À&ÝÜ\83"\14hy\18ÜRåÌ\a´@N\ 1\8b¸\f1ªÐ0î+Äèí\vúc\85\96aÿd\81yz)\1d¬5N^ ü\82»C\r_B òI\14ktÙà\10\10\982>µàè\ 2ZUÄÄõðr\93!<_\ 3\1c.K\84Ë\99\ f\15rÛµ<{\85¨i\17_Ñ\9d;\1dï®Ãv\83\9d\86öu/~¦þ¤¦þø\15õ\97¥) Ó\8bÛé qã§Ò\93§\136\88\ 4õºA=øòfæÏz\ f't;íôNHº$\8a¢=¹4\84á\9bõ\98áZ\15¦Ò^h©²\ fh"2ûrà?\9dÍçwW7\17·wÓùü\87\10W3£Æq4©\87\94ÆPAõ)=£9~\82þ9ÓáùµºÂÝÝ|bXëRyXÿ+ |íâ70\8dÉ÷dß°°}\0ì+ã÷Ø1%rùÆ(>4)s¹(\85\93'\ 4\ 2[ z¢+\bZT\19æÊÚ\94î\9b}þ |ÏÜ\89»\11Ýñ Â\ 4C#Ö\99¥\v?\96ïÐ\87\7f\f\17ߨ;ÞF³ö\ 3\9b\e6\ 6WP\ 5¡ë\94\18\16Üç\95~ w\9b\95¡M\19æ5T²FH¾c\95®ÞqoÐtE¶Ê2\8c?/\9f\14C\9bw¡\1e\89L@_ó\16L×|mæ¿?\99\1f\93ãÁÈ\9aC+-°Nlô¡¦ÑØü¾D\85ÊV\ eù\10<w1õ\18ÇÅÕùÏ7·Ó«iä\9e0Í\10\ 1\1f]\9e\7fÚm(ؽ\80\86½XWaÇñx\1dÈÅ/\16\98\99<_üx4~\15{Ñt´Üج4Õ\1a\11äÆ<4ð×\ fç\17×\1f^\8e]l\13õ\1a°\12h2\92ס*I¤µË\8a'Ä®\95\93_xLe\ 1ÕúEK9éÛqçr\\ f\8fx\88=vÜÇVË;*v¥éùõûsú¥4÷h\94¨mR\15Xþ\ 4÷LÎj»¹Ð\1eõü~ø_·ÑÁh\10\8d\86ã°lÆ]öñavôéè/b"p6endstream
+endobj
+1134 0 obj<</Type/Page/Parent 1099 0 R/Contents 1135 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1135 0 obj<</Filter/FlateDecode/Length 1512 >>stream
+x
\ 1\85W]oÛ8
\10|ϯXä¥.`«
\96\93Øi
\81{H
\9cô` u}µz¹
\ 2y¡$Úf#
\91®HÙñ¿ï,)åCi¯(
\9a8
\11¹;
\9a\99\1d2?
\8eb
\1aâ_L
\93\11\9d\8c)+
\8f\86Ñ
\90Æ£
\93è
\94NÏ'ø<ÂÿJÒÊ?8
\e\9fáÇ_<8=
\1fF£_=
\88'ñë
\1d\97ÉÑ»
\8f§
\14Ç
\94¬Ð}|>¡$'t
\1e\ e)Éz{S
\15ù^å²OÖP)
\ e©Ä
\87R
\1a-I
\16VÒFXÚ(G
\aSW´LZÈ
\92\84Îý
\ 3³
\93U
\86Õ¤\DßLM
\99©
\8b\9cD
\81Z56»
\8d¤ÛÛÛ·É÷£!
\râ
\13àNò
\9eU
\ e\8f\fÙLhJEvOÊÚZZ2+¿Ã
\8a2
\15\83\¥uQ³w4
\ 6KØ{»
\91\9a±ÐJ=øÅ-¤ÅÍõÅò
\9a¬
\ 44
\0âw z
\9b\v\87ºèÅHr
\93Õ¥ÔN8e4ÝõL
\85eu
\95IÀÎåÝ[fÀm
\84ãÅ
\1dÈZ>8ÚÊÊbã^
\15\ 5Ú£
\ fh
\91Â*Yy
\94ï>¾§
\18 \99æÁI
\1cðÆQ<
\8câ
\88®
\94Xkc
\95^Ó"
\90h¹Åsi
\ 6#
\96¦7[ù÷Û
\88\1dhÕÖ
\89¢
\b\80\9b7Åë0
\ak`5
\14jÀT^ÞÞÕìâïùçål
\19¹
\a÷²~ϳP
\1dø
\9b\aÏ
\8c4%ÿ
\0\7f\14Ñ23[I³«ß
\81¾<P.W¢.
\1c-Y=Vß
\92 ´
\10ú
\1eB
\87Ý
\11%
\ee!
\8fÐx
\b\16½©ö Òì-¥æ
\ 1{ÊÚº` ÏÀ
\8b\12\1dQfW
\115lU
\12å
\ e´
\17\1aê
\ 5ï ÒF
\ f^
\ 2\bÔ±}¼
\88Zʼ]Ît¼ÑÒ¥ÊØ
\0ø
\rÙ2
\8d2£W
\9d¾fË
\ 6\8aè¢}
\83ÅÔ¾,è¡sEX
\19_¤s,ü
+\86sL\0\10bîî\81\1e\9e\ 4L\87©Ç\18Á\9bù#Wö\ f¢\9cD4Ý\98à(î\ 4W9\93\99\82näN\16/µ\87\1f\83·\12,\~ºdÝÃb\9eîRh¨§D!3gQµ®*\f Ø\fJÚz»5\95³tÖ§\f,\83²éç/×}ÿuqóuÙ§\9b\8bù§\8byÜïð\14~=òi1Oâî(û¼@\ 2dü\1a\92ö<y¥xPe]>\ 1\ 4U\r\0\f\ 3Ë×µüs\8d\9e¦©\a\8f\17\92ý\86±o\8c â\81£ñSÎB¼\1aô\14\99Ó\b%i'ðC)¾\9bJ¹\ 3§\13'W\10\86)m"i¦É\14¹¬\baha\f\9fc\81;v\1a2\15Y\89a^\99:d\86\96\99´V\84Yä\98d>\99É\80·P¥
+\19Å\0A
+SîL\87\o$_·4\96ÕJ%R\ 1©(søÊ!Ra¬=öZK\85º\97Xá\8b=\9aÿù¬øUx¬[)\ 3\12£\8bC§m%K¡4»Yä;L\9bXK&¦}\ 3nëÛ°×}\ 6\9bÔf5\ e5L(\87çíêv\ru¥\95Õ\8e\93\19úd\ 2\14 ÆVX\8b±È}Æ<;.¼î¨Û\9a¶\ f«H.Gà\13´·îk>\8c\bYh¤3¬\8b\ 3
+õCÜ<v\0Y\0È\93©s¼Kç\1d\ 1ªì³ 2~O&¬\89\14F{Ü\16\ 1µ\18´¿\8e)Ä\ 1ÛÓ¿°o×õz\82\9dLÜKÖ:\ 3Âäµfgþ
+á\ 1\1fk¤\b'\8cÛ4-
+\85 µ8Âäú\ 3§Tæ\7fÑ\9d¿Û&Xç S\82\9fÞ\9fݽí"[ÊpL·st×Ã"`Õµ( äe(%³\95K'TñÊÿsãä\aJ\9e\ 6u[)Äð\8fZÖ,;\87GË#ÏBsøÀ×ÌlHÊ\90ØÉtñn¶ \bËD·cÛÊÞ\11)hÏv\8aè#\10zî\e\93©p\84\16\92Çn\8eL\97µê\96\85;\18M\8a-÷¾ß¯Q\eÝéëûØ\83u²DX\86Ac?×¥H1c"8<×\9eèßß N#D6xbjV\95)éë|ö\1f\eMÐÔ«I\8b)·~Ê´§\14o\ f8\ f\19\13à'\ eæ\11;è\ 3\18H.%P\b\9a\ eR¸\1f§
+\8f[\15\1aápÖ¸<m\10\eÁS7\8b/^\8b\17g"Σ-¬×y{\16æÑo<\91ëJ\94áê\87G\9aÚ\13µ¹¸xbmV©£cìó\80\8f#ú"\ 5"\rµx]UgþBÆ\ 3Ô,aÏu:ÿ\9f\ 3\13Î\ 3\9e\1e\7fñ\14´ü¶ü\97¬;\80\88¦¹g(7þ~\91m\ 2,>\9a\91¢à¿9ÖÚî\11äÝymqøÃòHôg8_ù¿\9d é×Ų\1d\1c\9e\19¥ñµ\fw7\91\9aÚ=^\ 4ê-¨{®ý+I|-o\ 6\80
+\1avø\b\8a6&;o.\80ñ\18\7fF\9c\9fà\96ÿ\9e¯\92Ë\8bO\97\17|3ø\8e£\9d®\9e_\7f¹Ú ]>\98\8cðÇ@ÞûÃeõtr\1aMÆç¸ÞòÚ\98K\'Gÿ\1cý\ 4»¹\14ðendstream
+endobj
+1136 0 obj<</Type/Page/Parent 1099 0 R/Contents 1137 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1137 0 obj<</Filter/FlateDecode/Length 1480 >>stream
+x\ 1mVÛnÛ8\10}ÏW\fü² \10kmDZÝ\87>8M
+\14\9b&ÝØÝ¢@°\vZ¢j6\12©\92T]ÿý\9e!)ÇU\82¢\88m\89s9\97áü8\19Ó\bÿÆ4\9fÐÅ\8còúd\94\8dh¶x\93Miº\98ãó\ 4ÿ¤2<\98\\âë+\ fƳ\8b\97'®Ö'\7f¾\7fCã)K$\99Í\16Ù\82Ö\ 5!ÅhDëüt\9c\8dGÙeF·&\7fRúÛÙú;\ eLi<\8e\a\86\939^?½×\92\84\95\82v[\95oÉ\99ZzUKG¹h\1dþxkÚM%I9ªb \8c#\8dh8\99¡(DXo%Z@\fò;C~ßà\94)»·S\-eAÞÐFR#mil\8dï\9b= Z}¼"'íOi3B(*\95u\9eÓ\r¬Ì\8d-º@\83\94v|\91M8m¬WT\95Ù9\84É+%µç\14\&~°B\7f\93\ÈfïQ\91ÒøÍ4R#A%c*\87\ 4ºà\\1e\89\a\85Ô{ªM!Ý\0?\b\1fzr\8dÌU©dñ"=B\89\10\8c\ 3pä>0\ f¿Õ\8f&k¡½Ê\1dµº\90\96>kõ\8b\8f¢ó=\15ª,\ 1#:(©¡\89ãÖÓ\81/J\17h6£\7f¤uÊh\86¹WÕJÔ\e\ 1\90\ 1°\84¸&´\15?Á\8bEý\f\r\18\rjá\15~/sí«ÇÓÇ3$@-nＬA|Uñ˪n*YsI\8dE{¶WT/óFú\9d\ 4$Ï\8dÄZ"/(z½E¯¹Ð¤\8dg\19\94mUí m¢WOE\8bÊ\f0\ 2\1a¢B*áÐ`¢)T\12EÁD\95"÷½ì\91.J\bub@ \8fØ|Ò\ 5Ë!\89£m8çäß\8b \19\8b¿³é9\15\12L\16ð\v\19\1d°Jº_\85bzy\ 3nÉ\178\80\86\Û4Æz\17d\17ó\80ð.Ñ8£\15\90\rúf\1c\1aã\9cb{¡\8e\ 4\ 5Ç\0=®ds\84\9aüÑJ×oYl\f(Dñ\88ùlAH\8c5\fö;"réÎ\11ÞPx\84<À¾R`º 6n_´\915\96\8e\805b\92\83\12\O\ 3¨\99Eâ%\8a\868\ 3t,\18¸\8e\89
+:¯ö\fæ\91À2úP\92è\ 1yÄJè9\10Ê1\12ü \ 3\aA7 \b\8e5Ð\ 1\84ª4>ñ\8bÑï£!#rN±\8d-z`sC\b)\0ÁAº\97;\ 5\b~\8c\1eÈh\89Ð\ 6am à7á:\969FWh pïÄþ\ 5\88p\î\ 1Êñx#·5mUP¾\95\18Pph
+\9dÜÊÊß³ð\81:\90ßY\ 5\9d\ 6/B\88qÐd\98\198ç[ø\97!ß)¿åÞ{ý #kï\8c}J\18°ûÀ¾ÃÈ\f9j¼\b\11aÞZéâ\10´M\9e1\ 1\ 5X
+*
\15\953pQmà?Q!4
\8f/-¡*'P¯p½äÉïqv²
\17\tß
\91<Py-
\9e Âx
\9f\84&á
\978´
\18\0ضC
\80?2¤
\9eo
\14ÕÏ }
\ 2\15\fWV
\ 5ð¨3ºÂH
\95¥h+
\9f¤
\10ÌÉi
\ f÷XÊ»Û
\82Nù«©T®
\ 2eî)V
\1cn§ØÎ9mZ QÒÞ´½~
\9dô4
\0\80àûÐÐ[ÚÇ;
\ 4\91áõ
\9d\82\98\ e\1dGþÙ
\13L.f8²¿B}_R_M
\8b\ 3P
\ 2óQ('xj Ä(û
\ 3\94Ï~l
\1dç
\18tOÞbî
\ eÒ
\14\86\1dp
\13`
\0\a\15ú-8
\828q
\83³
\ 6D
\7fÐ
\14Fÿỹvè
\11ò
\8d\ fÂÍ
\8e.
\1fO]
\8b\ 5BÀ+
\ 5®0÷x
\ 6 ñ
\b\rc
\1f\19¢%Ë@A0¬ôÕ
\18!¸p
\8f\16\86\1e¾
\11$æU
\ 2ÅN]a<
\ 4Ø
\10\1fm"Çý_}ÈÖ
\98+é\8aÏ+\ 1\81\1fm%8À5\1cßùa\8c¢NÞd\98Uæ\1fx7¬\f\fdð\14¤\82Vù²ç\9d\837 H®Wq\81yhk\85½jÇKÄa!\129\9b¦\9b\ 2ðaw79UC§BKÓºÎÕ
+7HØ)hÙ\8d@v«parô2^ßÜ}ýïîþîæ\9cÂÇ\87\9båuúøåáÃú\86o·ð`y{{|Y\ 4-\85\ 5\aW.\8fr´¹Q\95òi\rê¥a*`\8d\10éý»«`Òðå\1a\97#¿{¼\8f\ eq/\85õ0¬¡³\8c>\ 2I¦ê3\96=-°aÆ\13/\16R\\ epY\\º;̳^ã©îZþô.N f1^.a\87dV!:\1e/|{\1al\82 \80\99î"À\89Í\0Ø2£\9dbº\9dr%ã~äêM\86Õ°ä;\93\1a\81=\92Ç5\88\15ªr©ÕEÚ¤Ç3,ò\8b\vº\9c^\86\ 5ütµüxµ¤OÖ|çÅæÚä-/QAAÜò°;0\9cO°§\17¯íéÓù4\9bÏ\16Xëùù\84\8fݬOþ>ù\1fæ\r\ 6³endstream
+endobj
+1138 0 obj<</Type/Page/Parent 1099 0 R/Contents 1139 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1139 0 obj<</Filter/FlateDecode/Length 1359 >>stream
+x\ 1\95VMsÛ6\10½ûWìøÒd&¡>kÙ\99ÉA±åD3¶ä\9aLÓLÓ\ 3D\82\16j\12`\ 1Ð\8aþ}ß\ 2dê°é¡c{Æ\12\16ûñöí[üu2¡1~&´\98Òì\8còúd\9c\8ci~q\91\9cÓü|\81ÿ§ø³\92Êp0\99Ïþ}ð.;\19]_ÐtLY _g\8bsÊ
+\82\9f1¾É_\îEã¥\85#ºRâA\e§ô\ 3\1dMkÉ\89z'ÈIû$íËìÏàf²\88n^ÏæÉ\14\8e^L\93IBkí)ÚÜ+££å\9c&\93ÎrºHÎØ2Û+G¥ª$åF{¡´#A\95r\9eLI^:ï8,åBS#milMÞÐ\93¨T!¼\8c)¥ÏRBXO¢r\ 6\97«*^>ì\85'¿\97ðû(«#ç2¦×\93YÌ5\17\93!\1a,\1akv\95¬ I©\92\94§R(x\11úHF÷V0w^6\ e±\82M#\9c\930ª*\8e\82Ó\987þ×ì\ 2¾ØØUG:\18û\b(\a)\94Jˤûnz\96Ì\19\98ϨÚíM[\15T\18ZÞÜ\84
+\82çW¤tødl\81&Áê \91\víÅ\13b[%\vÆ(\17V\96m\85 ùÞ\18Îj\8fÂ\0L\ 5àl\97£Ñ8Gý\83\84rÑ\88\9dª\94W¨\v\8dV%;í¢Ja+Õ{\18¦\rD¸_Nê\82j àHÖ\80\10´92\85N\81Ga¤Ó?ù\80Å),\8ap#$¯\r\107Ue\ e\\ 3S\83\vførY´ tÀ\14\ 1\ 6ùv@ñõ\1d\9aÓÚÆ*Ç\19\97\80E\81¿¸\8a[6&\13rfú?çm\0}\9a\80ñKçÚºaÖ:\ e3ºþ\ 1m×:´\9b9
+ÖÄ~¯ <hQ4\ 3\10Ê\11ô\9c\9aèHU!©wë÷éêþ×Õ}¨]ÐÝe\7f²¼¼Y¯6\19í\8cß\ 3íA\91Ì\9d\akÚ\86²U\9a½¿ß~¼ã®\a²w\919\19¸\ 3n¶Õ\9a\ 1?(]\98\ 3FÌØ\0xpàð5"\b\88D.µÇè5àw¨e\10³V¹5Î\94\98\9f¼\19©\ 6Ä\17ù#0ªÀ!-¼zÂ@½\8aØ"p-\8eÜ\80>ø§.øÅÏ\84ðý'\14øåÅ'\14\ 3_\8c2Î\ 6QÓ ._^\ eÉ\95Å í¸\80*\9dªU%l¨\ e\981)\8f\r(\8bZrpT{7tñ=^Ü©Gm\ e¡\8bZ w¸ Î\8a'p\16\ 3\v.í1FÌü@\1fWï\12èTɸ\1f\14æý\eî\9cL4u]7\a5\9dúº9Mè3"²\98\89¢\0þáËî"\8b\13í\8e|Â\8dãVÆQ\b\9f\fõ±ß°ãÑõ\98.z)\9dGÅø\1d\11þè£\8e¡ùP\11´¶®¹ÅoAÒº1VØc\90[GCËF\80\12oi\ 4/Ã#+E\ 1ý\83T¼¥£üÁTD)ÿ°JW\81\9b)-Óôãí\8a@òt½ÝðB\82Üoïéf\99\81÷ÛkÊ>¬(]Þ¾[Rúq\9d\12J·°¿ÜÞÞ.7Wi\9f@'Ñé\87í§\r]¯h³ÍhõÛ:Íh½¡Õò\1eórßGéoõ
+zWI\ 1ÙkÀIá=@`®A\18\19Yi-\18YKçÄ\ 3øÂ<àY\0\9d\83¨³Þ\7fg\82S\80\87eäy\97D.\ 4\92ò¬í$Z4H¹Õ%\84X\17À\8c\9dw\ 2U*\v9Ë÷2\7füæ\89Öw\14¨g¥3U\e²\84ÓÜXdäqßIOm\93\90|xC·\ 2$\81¾E9\eÄ\1cI\9f\8f\82\97§ÀÒ¸W\e£0\a\x\88\127wW\b\1aË\v\ 2\vF~ÅÎ\1d\ eË\12{\14Ë&J:\8cX_\83°]mÒî @"Ï\81b\98Àa\15MlÀ³r\19z\94ã\81W¼ÂH\ eªèy\1e³G9m\85ô1\81§\ 5\1e\aX\ 5_\99\86Ú`\982¸Ûñ\828 Ǽò:`\ 1\1f~\83Æ\9d²67\ 2Ï\86Þï)Çû\ fõ\9fÁ'¿9¾\99`+ðûèõ\8cù\e\1e63~Ú°\11M¢ÕwÛ\81m°\e¸ÎBqÿ\fæ\r¹\1fö*ßG&à«n\19õ\19\85J_±j\86\8b<²¼\15\7f\90z 'VhÏFðt\80^`-w\17o\8fHÓN²ø}Uª\87ÖFÍ\rO.\80T
+À{\f\8d\1f]\9fÿó>\9b_DQù\1f/Áùb\9e,ÎÎ\ 1\17@\98Ì8±UvòËÉß\9egdÛendstream
+endobj
+1140 0 obj<</Type/Page/Parent 1099 0 R/Contents 1141 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1141 0 obj<</Filter/FlateDecode/Length 1638 >>stream
+x\ 1½WÁNãH\10½ó\15%_\96\91\88CB\940#Í\ 1\18f\85Ä2ì\104\12\97¶Ý&=ØÝ\99n\9b$\7f¿¯ªm\b\86Ùã\12!\82Ý®îz¯Þ«ò¯\83 \1dã3¡Å\94Næ\94×\aÇé1Í\17ótJ³Ó\ 5¾Oñë5\95rc¶\98¦óá\8dóåÁøë\8c&\13Z\96\885?]в Ä9>¦e~xã\1aý\89~¸ÖS¨³4w¶¤ÒT\9ajµ£LSårÕè\82\8cýD\1f\96?\11\vç\91X\87cÝäñR\1fþ\90¾ùwW¶Á\8f9R5\ eªÎÔ¸2Y|ò#Mfñ`£\93I\8a¯Åá4=I§)-uhhú:þ1\8d¦|üÃï¥f¥)wulAÉÚØ\a:¿úóîòû?\97ß\13*½«eÅí\ 5½,8»¸¾º¼YîÝnÙRæ¶)]\95´s-\15ÎþÑÐ\83nxgì7ÁaxGEOª2\ 5À\ ekg\83æà\96\9f𴼸\1d_ÝRpe³Q Ã\ 4²®ÁÙ¼×ySí\80HhTUé"í\82Nç1U\ 6\1f\81T#[oLU\91Õ\0»q\84'|C\8a\92Â\ 5Z#\9bu\93ÐÆØÂmÈÅä\91\1a\16z@ÁÙ\ fcwù \13D©u\bêASP;\ 6*Y9\80Ë\87,]k\8b\84\1cØ7µ©\94ßËëËÍÝKRXÁ|\8fùÉ\10+$æ9Àé%ë \9bv\r\\e\ 6díB0\19ʪ;±\94\ 1òiV®m\88wÒ¶ñF#4vbj\83öOÚ\vyyep÷\882,½"\15B[ë\8e¬Áî+õÄE!À¿\89èu\0 \82º\92·`\12Qda\88Ü\19\80Ya\95×*\0êÍj'\0Sm\1eV@L\99\8a32R/\9e\ 4Jü\ f\1e,c[\1a¯7`û\19º\94Õ\85T÷ÈõºR[>Âàø¾\80\0 ªÀ\9a\89,o\9c\7fD14\ 6GÁ¥_-\8e\8cïG´Ö~¥Ö\81²\1da;\87Úx \95ç`:V¿êÒ\bmf\11îþ\10\ 1®\8dmyc>\7f\18l\8eÊ×ôd\94 oÖåF\155WÞ\83Wuzÿ\81W\8f¿þF¯'\9d^OâªÞ\ f~¯WxMd\95F×ûºíJûE\96\8c]@\91T\ 5\8b\12¥\\19\94.\bTO BqI\85\15T7Ì&Sùã\90ØW\92ÐÞ£ÒzaÀ÷\1a\14\ac(Å\87Zd\9d\9c«\82Ö(8\90\0\95à\8eH\9eQÉ°õ\8e¤Þ4ªX*\15ütµ7\80Vô\16"MÉQ\94_ BÛ\9dH/\89ÖÒ¢äC\82\ 4Á\ 3\98\16oé=ù\88%*W\1e¸\0\98h(W¤Å2\96\0)]¬tþ8Ø{ÓÙ\8b§7O¶A\92d\11¬\95¯\13\11[£ëµóÊ\e¤\aÅ8\bJÙ]\7ff©´A
+HHö\1flÜ¥\83s'ƾÉð\8dê^\91\93\80\ f\vóä¢÷ºD(ÀÿÚz\85¦:+z£à~ÅP guR|öôgÿ%ò\1a\9c\13p7El|o Ö\85áî'\1e-mñ\99âj÷~|\ 5\9e©P@Nôk)gRb\ 4Þ~X¨Ýa\8f¢Ó½¬åüp²Ì¸0
+\ 1\1eïÐ\ fX·\16ñ¯¯î\96\977Ü$Ð@:\1a±\98ÿ§\91Jþ³ð\93\0\8b\88À\8a\99\88£1¾\92½À\1a·\ 3\9e¯ÃS{>$k$\82V\12(\81<Ñ:âú½\ 68\808Ó\h-áð¶¨Põ²\97A'y\96R¦s\ 5\9eÅ×EV}Ñô=^t\81:Uµn \14i\92à_\94¡úö5ظTh¼²G¥ki7\92\r\84Þ\18Ü\90&Û®ÙN ´"¥³*¸\8e0\11\e\8fC\86=\1d6s\7fØ\8bñþ\83t©°\83glI\8c$HðÁîÉ@Y¬D\ 6ó êr-\f\0"o\9c´½\r,\84û3¦#zÔ\1a¾ÎèT\ e\9e\8eù\ 6³Ó£\9c"\90ÞÂ\0\87\ 4/åi\1e>\14Ù¶Îb\8f\8b\r,¶ÔÍÊä+ÉR&»È-\9bJ¡aÄp\1c@øº.`é8kÍ\93\ 2S\80rvå A$\ 3Æ@\94«`\13Ü?ØR\1d\8e\11;,`ê;S\8f]IJkö\9f8\1eO\94\1f»\19p:\8b\83\11u?qÚ`£¤Ïtv}Ýï\7f\9c\9eòPöz\99x\13Öm·Ûtïw¼Ûýæ±\fÓ\0N\8fj*\15ú&\12\80ç}¦\1f±\99ìOÍ£é\9c÷»\8a-YepÅ#¸Mttes\8dN\80N¬Ñ\1fjU`\1e\a\ eì\9a\ 3HQ´\\ 32\v¨¶q5Ú:\86bìÚxeCÅjF÷\a¬ý\89»é³rnÍ\1d\8dT¡Ö¨\18ü-`\87\81&S¼\ 5à3\ 1[\18\1a\85\aiï¬+®ù|¥,\ 6¿È\14\13ÍÂù¿p\97ãE\8e÷G\ 2Áò\8b£\9boK\98\97\1c\8e\92÷ÈHÐ|;½c\fc\81@\95R¿\e\13V\fUÿx\14Nߪ»¬\a \82dS\99f'\8eÑéíy\f\91öÑÍÞÝ\14%/,bn\ 6\ 43¥\16ÞÃmÈU´&\âËq!_o}.Ô\8d¿\9evoI\939\b:=¡ùÇi|\91¸;ûëü\8cn½û íÓ\17\97c\98\85\8fp<>ï¨\7f`´\98â\ 5í\9dסÙb\96.æ§x\97ÃÝÉ\8c\1fº\\1eü}ð/\94\17\93Dendstream
+endobj
+1142 0 obj<</Type/Page/Parent 1099 0 R/Contents 1143 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1143 0 obj<</Filter/FlateDecode/Length 1473 >>stream
+x\ 1\85WÛN\eI\10}ç+jý\82³\82Á7l²o@È
+iÃzÁZi%$Ô3Ó¶;ôt;Ý=8þû=Õ=¾d DQ$c{êrê\9cSåoG}êá_\9f&\ 3\1a\8e©¨\8ezY\8fÎÏ'Ù\88F\17\13¼\1eà¿\934\8f\1f\8czãlüÖ\a\83\8bA6h\7fp5;:û<¢~\9ffs$\19_LhV\12\12ôz4+º\855F\16AYã3zìÞÙ ÿ °\94ÔÉ\95)I\99 Ý\\14Ò\935zÓ¡\95p¢\92x\93J9W\85\92¦ØÐz)Q\9d
+´VZ\93±\81\84ÖvM\aÁ)X\ eûaöõ¨G§ý!
+\9d\95]mí*\17Å3\89²tÒû\14 G§ê»,É[k\1e?dÍC\831ðÀC\97H\80\84\88^UÖP!j/ÉÎ9<^\84µ%é\9cu\9e\94§¥xQf\81@¨yɯ\84vR\94\erµ1ü7\ 2¬¬\vÔ\1f~<!_\17K\12\9e\1eD\95\8bV©\8f]\ 5d|\95\ 3\14¿{|îl\ 5\90d(·\91\1f?\90u\a µz\96ôI-T\10úØÓT\84åÚºg }½\94è|ck\97"d\80k\8eÎu\e¥\Î-ð\rnÃ\15\ 3H\1f\ 4J\8eµ ZA¥\90@â\84'P\bCâÅ*ÔC\1a\83\0.sWûà\ 4Ïø·WP\96´\91\18W\ 3éÊz¯r-\eP\91\96æBé\1aÙ\11hvó0£!·\8f\81\9bÈ\12_çh\9e*á1Cðå\8c\9bÏ\9d\15e!<⦱¶ ô2\ 4t\82Ê\995¦°Î\81\82\19Mµ\14\98`\11q K\11b
+ÄgÀöT¤Û)]6|9£«]²ý{
\ f©ª/¨ê½ÔMâXxL
\17ç
\ eÎxp+Ö¤7Ìf01qK¥¦µ]d¦Êã¨"9Ï>
\7f¤>¸É
\ 2;
\1dö
\13M
\aÙ0
\ee4
\93ÀaÄe
\1cÊðtÀ2ìÞ×)"S
\99áë ,4ñ\¯èô
\8a®nÿ|¸¹ÿ÷æ
\9e\9e\9e\1e.¿\]>=u2úÏÖä
\97¶Ö%-
\0=*c@¶
\ 2Â
\98\98Q¶Sc^º
\17è
\86\ 5×ÖÔm|
\8cJk
\8ecHC¨$2}7
\1f`¡
\f\98§µ,
\7fF^
\95Â@\ÌÅ(
\ e\96ª<aZl'Úª-
\91÷PT
\8c\84V>ȨPð½.W[
\95NÚ
\95ÿmÀ
\98ä
\ 4+gÁ]èѧ\
\80\94kfqªj
\85O¤ Q
\ 6\98¯
\88\8d+h3~kgkìs\11ÓíH4\ 2dt;oU\r7\89\ 6Ãð\83êP'K¢\80¹\ 4 éY#OùIò\85S+\86\14l\86¾\83\0\861¾S\8beØÛ)Ä\80®\19¸øÕ½¯¼O°ó\86`ç?!X
+\98\10B\82ôóf\etyÈ{º]^ÿu{s7£ãß\8f_Gk¼÷\ròM¯ý!\ 1#»\80\17Óð\90O\11(\8d}\ 1ã²ó°fí7PO¯12\9eÇ\8e_-°wj\8c<Jß\8d\1e(Ëø\ e§ZÀì8\87Ázj¶\ 1!ðÚY³hs\ 6Õm\9b-\8c©±}¬~\91ô¢\ 4}º{àP\86x±pÌ\1fõuÐIc\b"·x4@éïOkÜLkü\1aß·ìà\9di\954xwN3¦gP\80b\r:\1e,\ ftã\19!x\1c÷±ròEÙ\1a\7f°Må5,{ÿeH\98á\10\a\86\9e¶8ï~Qk<°5ßÖÀ\1a7Êè\92L]å0\1døÒ\9d\f¹²þlv=\ 5 KëÃNl[\8fo|\rÃXY\83Ù
+\1dàt\8beÚÈ\90jôc\b.ð¢Öº\95\16I¸©ô¸ÇÍÒÌ\aa±/#\1cè)Y\v\16ð\ 1\99½ÄÅÃ\14\120\1a¯\82Â<#\93¾ÕÒáZ\88\ 5yÙ¡
+W\8aXHßÊ\1cõê%ìUèÔÚ\e\9c\8b\9e±%Ü\82S\bòªRZ8ÎÀ\806øþ8\16ô\14ý¸\91jâÿN\13¼\ 5x\9d¦Kâ\17\13\ 1>.\ 2ª\0¾¨\83`\88\ 5º*\96Â(_ÁéØ\81@\9ehj,¬f&òûJ:\10
+úÝÊ¢³¿\ e;dW|`\0ñ\162¸RÒa\83Ö`µ5¦¶a'\9c«\ 5\9f\15Èà\ eôu²§T4D\10\83o\8b7À\8c\ fBàl\9bÍb\ 3uÙE\1aW\894oî\93\88 7\93\ eTÉ\e\1dk¥\917VmS=ÞÄq\12IôK ã=\8b¯ÂØ\eÞ±\13¦\84íz\93\1cYb±\0^T"\a\ e|\QZ\9a¸\19[·Ô®\82ÝrgmòuÝÌ\9e\ fö{9\87ºPws\9cñ¹Ò&g´§æ\8e>û|Ѹ\7f\7f\8c_\16\17Cü"À\9dÂÇH<1hêìW\côÉ\16õnaòLO·\ f\9cN\ 6øéPv_\1d8£É(\9b\8c/p\ 4áÓ~\I7³£\7f\8eþ\a\92Å&Fendstream
+endobj
+1144 0 obj<</Type/Page/Parent 1099 0 R/Contents 1145 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1145 0 obj<</Filter/FlateDecode/Length 1615 >>stream
+x\ 1uWÛnÛ8\10}ÏW\f\ 4,Ö\ 5j9v\Û-º\ 5z]\ 4ضÙÆ»\8b\ 2y¡%Êb#\91*)Ùñßï\19\8a\92e§I\10À±È¹\9c9sfôóbJ\97ø\9dÒrFW\vJÊ\8bËø\92\16«\97ñ\9cæ«%>Ïðg%eþÁÕlùøÁ»õÅäÓK\9aÎi\9dÁÖb±\8aW´N \96./i\9d\8cfñU¼\8ci-]MËgë\1f8>§é´=>\9e-qxôÑTç\92\12S\96B§í©\17áÔ\88\¹I
+%uM\93É»ë?o?~û÷ã·ÉúóÍ©¹QLßMC.7M\91²=M\eI\955eUË\942cIP%\9cÛ\e\9bú³|ÿ\92ÆÓ«xÆa\84\9b\8d\93>\9aî(\99Ìÿ/\92Ä4\bâ\0'\ 2¨\14f»\85]¥kã\9f7Z=ÐÆ<Ð^ÕyL×\99?¹\17¸Â'\18\0~BB\e\ 4gÏ\9cwÖ}Ü"õ Ðø\1fz\13\1ehQÊ×dªZ\19\80Õz\94:í\82\vÐQ¡´\8cIn_= â\99ßÉd£¶NÚ\9d´\93º¬àò\87Éujdk`X«\ 5Ê\ f\98¾\98Z¾¢ë\9a\94£Ê8§6\ 5\03ä*\99¨ìp\8a\9d(\8cÞ¶ys\85\81åLH8\14¤(ÌÞ=\1d)Ê}\12ÛYä}¤¿9\99XY?\19ðW\9dH_\vPHÚÓø¸\98¡î[\89B!Æ\b|{\13\ 5âôuL\8dþÝ?×(¼¹'Ñ\1e\96Ö\82W¥tNl\ 1üuv\16¤ªÉ\89\83£Hé\9d(TJZÖàß=1
+\11ûk©Ï\15P\b3B\r"F\16$A?X+\93º8\90\93uS\81j\9c\86å\86\88\13£³88\9b\85Ê\80r½¿\8dH{²\ fü\14ê^Â^"P Ç4öð£ûÇ\9d\11F$\17; XDjöÞ\b\1aÆÑÝ\b\99:\83âyþöÖÉ\1d\-Ë»g´ijJUÊ@\81\8f\95\ 2/\10²kªÊØÚ7 ò-ñ\1dÇ=\1ev^¹ñ]?\860tÝ8\8d\89\8fá\9bah\96¢\16Gf\92\8bàGgjÛXáû\ 2¸)\1dPó>p\e*\94B\85zc\9dý>OA¥z@#'\ 2\8dß7=tÈs\86¡à\84¤\16àyÛ\96Q\7fª\90;YD][\82\13\82rµÍC]:WR\9bf\9b\93?Ü\85Õ=»:FÖUÀ\93°\12\90\8a?"ßÐ\1eÅPsæF\9fcLïs\99ÜsÕ½´°ÈTÂ\96\9d\13\9fûüè¡sʹw õ¹H\9dØC«/ÃBZ)êV\10o?¿Ã-\7f\b@ô÷2ÔùÄá\8bÖáxöâX:ß\83(\96\ 6\9fq\99\ 3\bm\a\8dfdYA:å\rbæØêäÓq\10¤Ê\12wiÕ\9c5û\88d\9d`È\1cª [Ç;¹,*z\13,¾n-v¢6bNòW\ 3**íjÛ$L'w2P¤×7Qp÷xÐë<h\80(ý\À\98Ȭ\94è\0w\ f1\14èf¤¸×\±ÀIÚs¿sòõ£P\a1 ϳ@}§\ f\aíøjÚª1Ï×U\98¯«Ó[°ØÎׯÆܼ÷n½È\ 5@Ú\vG´ N´SrOwøégí©Ù0g÷ª( fÜ\12\86R\1eHÈ3ôõTDß\v\8aR\83\11á\apÄ6\ 6)î\15fÌþ\ 4`®ìF\80Í\ 2¤Ç°\ 4\9eb'TáÙ\ 11²\10,\9e}\90èv^ýBþ\18Z¶\ 3ßC¡õj\9a¡J)z\15"¦J\98µÔ\8a·×`\9cÞ(Dë\87\13<\99¢é\14\85\95\98%[é-pæ,\95gæ \9bÆ5-1XVSÚ\1c\10\0ò\ 6YíHCÞpÕ\90Á\94\ 5ò\90Åv\8dÀB\81U\ 5à\19\rUm×\8cv,Â\19\ 4\97Ó1\1a\8c\v8\9f\81\98äÆ@³\8e\97!Â\8fô<S\ f\18\1d\8c\1a\87\81p\\8dX½^²9\96\/\13\ 3½íd¢[C®o\b\1f\81
+
+\90QO\8bn\r\89PL\17j\12ù\r\b9³C\91î\ 4f/\18\92T\13U\85)\16jxóÞׯ÷ÿ\v\89n%
+|b®<®ÍN úðå\96\11>ñ\86uÀ×.\0:t~\92ñ@z\87\19\9fä\87
+X*Êܸ\1aìæ\89öDøAeOD/¬\80\81\90¿Þ\0@Çh8«[R\ e&¶ãu Eäq]Uà\ 2V'¤{àIÛÍÔ3^ð\ 6\136æñ_0Å«§Ø\80|XP4\84ÛÖ*iÐ\0Ï©\14÷è¦\ 6Û¬O4jó\ 4?̾\e=Gñº\e9È\eC\8d-\1df¶ÒÝ=\v®»Ùõ¶pæ93\9a»\86éî\97%/\95\99Hxg\82hz\15d;ÜV £¯\96\95?\e\ 4ê\93ã±Î\93b°ë\ 2\86\8d\b$kç]Q\9c¥-j¬!\15|\98î>&
+7\12»ò\8dí\87ä>WIîE8lð\867x\9fÿ\7f\81i¥Hr¿H\7fG\ 3v\1aÇX\9dyôÈù\94\0H·ÁË\a¨\97\97*oóv\18x;¥\19\ 3ùÀpøâ¶\v1ö\8dn¤\ 6µ_\857 é\ 2ïb«+¼\Íã\ 5o3·o?¿{K7Öü\0FôÁ$M\89ÕvÐÒáÂx9\vÛÏÙ;Ø|9\8f\97\8bUhü\ 5gõq}ñ÷Åÿ®\ 6n\92endstream
+endobj
+1146 0 obj<</Type/Page/Parent 1099 0 R/Contents 1147 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 509 0 R>>endobj
+1147 0 obj<</Filter/FlateDecode/Length 1729 >>stream
+x\ 1\8dWÛRÛH\10}÷Wôú%NU\10\96íØ\90*j\97$\90â\ 1\96\ 5gS[ËVj,\8dì \92FÑH8þû=Ý#ù"Ø\v\14F\96fº{ú\9c>ÝúÞ\vi\88ß\90f#\1aO)ÊzÃ`HÓÉipB\93\93\19®Gø+5%ò`òö4\98¼ô`<
+_Þ\11\9eL\82Ñ\v;à5\18Â1\7fÜ}ê\9d\8e°*\fO`$£pÆÿý·\94î{á\14Ë(\1c¾\r¦x:\9aN\83Yó\8d\9fJÀ/\84õ~Þ;¾\9cÀ\fÍ\13\1cqz2£y,^\874\8f\ 6W mlMK]Qß\15:2\89Ñ1E6+êJ\97d\1cå¶ÂÉ#m\9eL¾ÄÕ÷Z»ÊõÉ\96äLfR\85U\15\15¥]¨Eº¡L«ÜQµR\15>4¬«\1a+¯çßzC:
+Ç8ã<\1eD6¯TTa\93¦'£¨\8a
+rº|2\91v\ 1}Xéè\91*\8b[\9aLr`«¬ó\9ccá\1dëR\15\85.Ý\eRyÌ\v\9d%\15ÇøF:¯Ê\r\99\9c÷v|sT.Pij×\94\18\ 4\90à4ÈCIQj°\8f\1e\ 6|¼z\91ëê\ré*
+\1e^³\89ãËS
+'>\93Gã\10$ÀAFÁ88\rh\8e´Ð©_µË÷Ñ\88ó=¸«%\fNl\86@ýª·\r*\ 3\82\eª\9d¦\1fïè\ 1?ï¯>Ý_Üý~q÷ð0¿¾=49\bè\ f\0æV¶NcZhÎ|VT\0\8dÏ ¨PÎm\19ó©sÁÖ/e+{ÙgÀ\15õ\9bx\ 4ðT³\15WG\0À%u\9anú@Ó9µÔ\ 1\81'L\84ÖhI·\1f\90ê¤Z+T\ 5XbòÈ\96 I\ 5
+\98ÜUÈ-\8cÙ²ãVrì²E\0ô\93\83}\ 1eêQÃ=ìɪ¾\80D\ 2R_еð\ e\84°Ó,)5¹f·´µÆ\914A\ 4\8dÛÑÔCtU½r°\ 4n\14Ö9Ã\94Û2\949ÇfUþª"dî\91l\8d\v&0 ))W\19V[ö\9bã|\92R\ 5\86Î÷¸É `Ò\v\1a°\9eu\8eÍ\8cä§\1c4õÅì\19}\ 6Æ7ç×\17}¶ÎOÿ¬²â/\10>ª\8cÍÉ\82Ëm¢Ö886îv4ÞØ\12Ç×q'Yp\85Íc)\13o}K\fd\97ªM¡cA\95¿%\ 6µS`41?\90U\æK''ÍÔ\ 6ì\ 4\94\1c`ë\ eP\15\ 5\96tÜÚ\82\ 3\7f\9e{ÊÌr\ 5ºqþAX¶\14)°] \10¬\9bª³9Øãt\1e;\14oTn\84ÖmÜ\0\10Qr¸+õ$'>¾ÜUP³~K\7fGg\9dèrË7vZ8`òø[PU\91ÇA\9bðÎJ\80]\979ËÜBA\95\0\ e\10Cªä¨ÿ¨ á°\11\85pxh\ feøÿT![¤Ö>Ö\ 5\1d]Óüâ~þéî×Ï]9\0S\99\eÛÇ-\11\85¶à\10g\9bY½,-\fqÊ9\98=%\10\0îU¶P"¿`<çù\v(a×\ eeî\80YjYní\81ô°\82H:ØÃÕ-«n µ`Þò\9dL9n \8b\12Vð\1fâÔñ+èo#{Æ\1aß\97bËU {^>uÚ\14\aD\8fU
+T\0g\15\14\1cdþ¢\0\90\ 2Ùr´.F¨i\1d¸\vf\7f«!Ï\vÍ\ 5áXö½M4\bµT&\97R0ÝԸʤ©Ø\aù\12>N«\1a912Ô499$[ö\15à+\87Y\8a\10à|§Q\ 1]ï\8bÜ\8bL.J\9dhH©4\89=\9c\9a\84\9eÑF»C>\rø°:\17é\94\0¹ùµ\99ÂÑW\1a\9d\ 2¡B\95˪.þ\83µaËÚðÐË\96µ\97h8¾k¢\95¡9 +H#BðX\vú^T\85/è£ûäj\1a\17wm\9e\1c<®ÍÎÔ\0#ðG(\99ÚH¥\1dÎléâ\e4óÌBQY\14vÃË^¾\1f^\1fP\16â#ã\ 6b\8dmÍ]\0ÂÓ\144Lí\95Lǯ?\8e\14\86o\9cm¤n\85®\83f°7F¡«\9aüI¥&Þ\8aQ\9f\0(º3JÕ·äX$Ù_sÛj§§\8eÛvÐA1ÞÌÅ»ç2\18R;æÛ.éÛâ\15\ 2pYäÌ\89®\88Bx\vµ0©©@|\1e\98¤\85²®w\§úI§ oT\97¼6³1\ f\ 1\8c\16¶\88zk\83ô\ 3\-U³¯ÅÛ]gxÊÍ\95mï\vïùÍG\7fk§ßÊ7;\9e©w£G_oæ_¯U\84þÔt\80vÒ\125\17Þ´\1a.\14}ÃcªÎ\ 5õçÙpt~9¿¸\93é\a9AB\99;uQز+\ 5<\½dàa åÊH0\e¹¼y \ 4ñü 1/b\0äÉûh<içÅI@÷"-Ð\b\81\11Ú\f6º\9f\ f\13%\15\87a\1fóã\9c+LTÕÇéù\87áD¯\9d(»\1c\148Ê*ÍÈh\95R\r/\f\1f¢s¹I¼23Ù0¢ ̹|\92ÄD\ 6K}\91fÐRDÄqìI\8fxÃ\80ÄÝ\ev£\15æ\81¦\8fð\8bËî\15¦\ÒÀ[úEì\ 5¶ô¶¶Ëd-/\83{î¡à \8f[\99E\15¨\ 5_ú@\98\9c+\96iD^/\T\1a\9e\1c|\92ÿ-Hym`3\9c-oj\17¨Ä%ì{P·±È[\97\84¼ªªâÝññ6f\7f%YØ®n#gT\9a±ò\9c'\9aýFà'ÔØFRV\1c½h_\81±\ 1\11üäñå\97:æD8Å\9båÉ\98¦c~Ï\ 4Ê÷ç×ïÏ鶴ßxÐüh£:ÃË\88â©\8aw\1eµ\e\8ef#¼¼½ðæ1\99M\82Ùô\ 4lÃÓpÆ\9b.æ½ßz\7f\ 3ë"¥\ 1endstream
+endobj
+1148 0 obj<</Type/Page/Parent 1099 0 R/Contents 1149 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1149 0 obj<</Filter/FlateDecode/Length 1286 >>stream
+x\ 1VÁnã6\10½ç+æè\0kÙ\92\15ÛÉÍM7è\ 2MºíºØK.´D[l$R\15©$þû}CJ\8aìlÑ\16í\ 6\vX\12ù8óÞÌ\eþy\11Ó\1c\7f1\12Z,)«.æÑ\9cÒùu´¦t½Âï\ 4ÿ\eI{ÿ!YÇï?ü°½\98Ý]S2§í\1eXËÕ\9a¶9\ 1g\8e7Ùä¶\10µ\93\r-"ú¤\9d<4Â)} û/ôUéܼXÒÒ½\98æÉÒ\8brÅåö\8f\8b9M\93\14 \93/¢Ú ~Ã\aÄ«pÀt\91F \7f]DqD\9b\83Ôy·&¥8îÖ$«hÉk¶\86T.µSû#¹BÒ\93<Ò¾Õ\99SF\8b\92*\99\15B+[Y2ûïÄÄ\91:CR\8b])=@.ëÒ\1c+@ò\8e!@\84\1c/BXÂ\92\0°Ð\1eS¾:\ 4È8Bç3Ó\80̺\14Ù\19\ 5\ fÛYÂ|9Ä£Mi\ eǨ'b\19y*¾JÐS\96$_E¥´¼áÏPl\9atß\1fD%\81mMÙrn¤4¢¨[H÷»V¯³\9f\95n_i{ûyöé3ÒyV\8dÑ\9c\ 4ÃLÁ\1a¤Ê' \93\9fñ8$s\ e\8bäZ+s/\15\8ex¯"\12;ÁLÞcþd^h×@y&¡\17\ 3¤é\9c
+|\ 2ß\81d²ÎÓÎ\1fð\86uf\15\86\a\18$\18Ò@¥\9d§1\8aÓʬm\94;\92©\99¨\93s3£÷êÀ¤yTÚC/+eUJkÁhW½F\9fd\98¾?î¶ÃA©C\8a¾NHØw²m8I\9dOEi´ÄYͳl\ 2ú<Z¬Ó \8bèN\b¯\ 6m6'ü?lÑb¯³\14ý:¤\98\9bJ@¥JV»\1e¶\93z÷>hÀ\89\12\9dª\11õ3\8aÝ@\91±À£\ 3~\f¸HÓ5¦,{ìQÈYÀ\9f.\96Ñ2^ÒU\ 2ß@\85]\85×oí<M®h
+£é\1a\1aÕâ+î·¿)døE\993O³»ï5}×è½\9cA\86½\82\8c\94\190\8c\ 2\ 6-®P\96¹ò"\89&ôÔì\ evè]dÜ]3é²Ya¬³áЬ[3]Eë\8eÑÇd¹òu÷\86à?\ ery\fß¡Ï\11Gö\1f\918\9aÿ\ 3G[\vßÍ\8a\7f\8c\ 5'\86#ía=ë(¾¦é"\ e\ e\ 5ûcC\ eiÅÝ¢É9s'rqIp\11¡HÙ4Ñ
+NeT*ëÍ\15NµÉs0f¡\e\9b\80\86ÇÙ\88äÁ·\11ó|ÝÛ}\1ab î_\fÿÇ\ 4\8aâî¹4\99(\991\1a~EþWè\10\8e\99\1d|\1eªt@¹FFKdÙáìÔag^#@å²\11 ¬
++Ã{Bû(aS, \1c\8cS\rÃ\bu K®\8d\95l
+aU_n\7fÉÔ\84P¦èƺ1Ï\98eà\89y\18{ý0ÅÈ\1aTµpìÑ\96rCÚ8\8cW\94»3}\8eÝ\94jdp\ 5\ 2Ë¢gù|è<\84ÉLµÈ\9e¤C\14\8c\8dNA×ðüC'ù\99X\17G«ÀJ?ÉÉ5\98~µi@·8b\11\98ªZ\8d%Nú\90\9e\9589\97v\9fD£)\8akB\81\9dÁãyrßË\1c»6YÆ^Ü9O\1fù\a\82Qßonûg\5Nj\a\11Ãô\e\ 4]\1ei\91ÐN!\198@)õa¸r\fó\e\95Æ9ºcÍIaG\8d\1aÄ^Ð\88ñ·7mC\8f\93ôñ\12C)S\15§Ý²¿\9eÐS\v$\80\r»#ôÊ¡Âã\ 4!Ö²Q&\7f¼ô5L¾´¸Ä¢¸\13§\1fæ\9cÊ[éCL\ÆBÐ\1ef X'-"à®8\8d\15×\8bq´¸YQ®\ eÊQ\81\9bÃYÀg%aå(ê\f·\10\1d\9a\r÷Á\9bµ¼\99\8b\9b8¹Y¤7W˳p?¢\10\8e\83ø<'\9b}#2IU\8b\8e+\ 4¦ \8f\92±>\ekM¦<E|ë\ 3I£Ï\T\10 \12GÚ¡S0\18\8d\1f\8a£ò¨\f\16\9c\94.mý&ôÊÃ/h\8eÒ\9b¾-T\r\f÷"%¦\9b\1eí\bÔ\8dOý\80þ-ɶ\19¢±V\1düý¨óûõÉÍÒ\8f²\7fy¯}»*¦«4Z-×Ý\95kÍ\~Ü^üzñ\rT\94|3endstream
+endobj
+1150 0 obj<</Type/Page/Parent 1099 0 R/Contents 1151 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1151 0 obj<</Filter/FlateDecode/Length 1609 >>stream
+x\ 1\8dW]sÓ8\14}ﯸ\ 3\ f\ef\88\13§\99$e\9f
+]f\98YØ.\84Ù\97¾(¶\9c\88ÚR\90ä¦ù÷{®d;\8e\ef\97Â\0¶t¿Î¹ç^ÿ¼Ji\8a\9f\94\963º^PV]M\93)ÍÓY2£ùj\89\7fÏðÇJ*Â\8bÙr\9e,.½Hg«\97/Þ¯¯&\1fç\94¦´.àd±ZÒ:'8\98Ni\9d\8d\ 4Ì
+»Q^Ø#\19K¹r\99\95^\19Í\ f\94&-|meB·\9eüNRe\9c§\8dp*£R>É\92DY\92\96þ`ì#e¦ªj2Á÷\1dyñ(\1díK\91Iª\9dÒÛ7ë\1fWS\1a§×Hl\9d\8f>ß~ \91çV:~\99Ð7¥q²÷\14·«\9aýIÚ\96f\ 3WG\82ý\9fµ|KBç´\95ZÚðÔÊJ(¸,Գ̩@"B\1f\aîöÂz\95Õ¥°ÈËK[ ®·!)\81\0¶º\92Ú\93)p\93>Ý·\81Q\15\92pR;Ôß\9a\8aD\97n%´ØÊpm/ÛËÌ«'\99\fÜ~6(±ßÁªÑ²o9Ã#d\16\9d#jØè'\9fÐ_8ßÔ§«\ 3c°·ªbtNQr\1aÊ\r\1c+ \80Ó\ 5\84àé \0\17\9c\ 2âÚj8\ 5Â|èöë=\9eíËc\eýl\91Ì\19£\7fvR#åÚ!8®*\9c\9b\f\80ÑAh\ f\a¦\aº\84y¿Cý\fLZT.Û)¤\10C6Þd¦$UíËP²À\11BYÁ®aä!T¾öªµ¡E%_q\0¯vLÀø_$\88»¦|B\1e\bä\1c7$&\10\82\ 6C\10\ 1RÇéÌhoMYâüæÈq\r*¶þp?AQq¬PÛÚÆ\10\9bK V)]Bk\84Åÿ$¾;ù\88¶\r\9d5\9aH\9fM8¸\90Ì©åFì\98\91wu¶\v7/\96\98³=áÉ4ä'¹t^¡\ 3ÑN'ÎÒN8`\b\r \1aW¨q\1e\81\89%ÎÐ\11x\ 2H'_\19Wø\a|\¢Aº*\aãU\11*Ñg^ë\1d\9a°\95(\Û,\10\ 1\98s\1e\87N\ 3\18·±yé+£P\87(ïm\ 4:6(\\8b\81Ó\8d5"Ï\ 4@4VÁ?\ 2«¤ß\19ÄÇ(!RGßïîéaô\9d9w'¼ØZQQkøá\rc\8d~ä\9c\84\16À\14£\ fbw\91rÅ/à[\1aÔ¦k_'·¡w\834\85r³\8dô7ׯEB_\1aqë\19gÑD\1fp\U(,ópo\10\12\ 2\81\14\ eR>W4£ËãïìN¡£\ eº\11´®MY×\18ú¶m\8bâÝùïHÁЬ´\17Ù#\10\8aº¤\19\9e\81ë¶@¡ï\99ÉPÉ`¾\17\13\1a'º|©+\ 1e\89>>\95vÈÞ5be§ÿ«\15Bã\80\14\85©u\1eh\r<\1að¾kõ<ùSéú\99\9a>\84 {@\12Î\81H\8c8þ"\10¾®ê*jY\93Ó m.`\0;¨\ 5ß<\87¾Ã²×sàÝ°\10,3hµ#\1dv
+5\80Õ#\86¥¤GÍÀ±Ø)ý+Ïü1\\9c1KÆN\96û \99\éF\18ëjO\ e¬aò\8b³É
+\rà\0¢ÆÅîâ\91!\9fU\18\89hÀ¡~aæQ£½±¥.\98ØHLiÎõI¨RlÊ8¯&\1fo(\85àó\8a0¾N£öcLã§A7mÞG¡\8bº\9b°RFðO\eÆxÆ\eÆè\94µ\97e\19GÑ0\9dRm¬\80
+¸wl\ 4«Ï¸\1d;̪pº\15BÃó\9d©ÒAÑ\16\18RX\1a½md7kôx¼LV¼V!\92\87ÙbÙ$ÑF\19^v{Hëìaä .ðÈuÌ\83G\8e\eÀ¸\9d©K\f\r´eíñ\ 2{\ 4\88y\84\f \9bí \ 1\a\1e\93Þ\1e±Çp\90ÍXBoÿ¬E©
+%ó\ 1Oº1\16ø\0fA\rNú\1fkz\9eK»5ý2\9d\97µë\9b\fyµ\98Ó]¬ç\17æ×7i\9f°¾ÄL+q\fiºÇ(lXJ@´*\82ñb\82´"åÐ.6*:Í<Öû\8bp\H¡¥Ý\18»kzCã9ï¶\0\8d¹w}\99{\º\1eóÚ \fâFæu\93¸w¨\ 5>LcT»Û¡*\89ÈÏZ\1c z\fÝ-$\8f\82©\1e×Á¹X\9e¢À²'ó\84>\85Åb8ä2«\ 2E\ 6«\ 4\8b@_\ f\9aÕ"6\87±9æ]'6Ã^aÏa÷Ê\83 ¨ÇqÏ,\1cðÊy[g¼±cì\87®b]¾i\1a{6\8f\8dMͯè2,-o7Jw\1c\9d&+Æ =VÕ¥W\98¨\91\95m)¹Þ\ 1*\94\13\8b,t§\9dYP\97Sô\9bfB÷¥\14X¢,x%cÉÃç\ 4\ 4m\8f%:\f\9a\ eØ𿢶8\81/\12\89¡Uº0w~)SóËTÑÎA¥³Ý\ 5&tt9 Õ\19\1c\ 2Uäea Àq'êï\81\r\ eP\ 3ÞË\9aÎÇhßü\0E\88¿
+Ðÿí'\91\18®º\ 5ÖQsøo¨^G.¾H\bi¤\ 3¸^G\9cV\8d\12¦\v|A®®ùË/¢ÿíöóû[Þ§B\80w&«y\r
+S\96o\8eÛ\vãå,èg3\ 6\86½Àgçø\14].VQgÓ\e~ôÇúêï«\7f\ 1\9cJ¸\81endstream
+endobj
+1152 0 obj<</Type/Page/Parent 1099 0 R/Contents 1153 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1153 0 obj<</Filter/FlateDecode/Length 1598 >>stream
+x\ 1\9dWïS\e7\10ýÎ_±ã|(LÁ?)\90LÚ\19HCÊ4\ 6\1a\9cÉ\17f:ò\9dl+ÜI\87¤Ãø¿ï[éd\9bkÜ6\85a°ï¤Ý·»oßJ\8f{\ 3êãw@§C\1a\9dPVîõ»}\1a\rúÝ!\1d\9f\9dâó\10\7fVÒlïb²×»ìÓk\9aÌ°ãä\f\1frÂê~\9f&Ù>5?¯èZ\94\92î¤}R\19þ/\95Ï\16\94\19=SóÚ
+¯\8c¦\99*d÷`òu¯OGðt\ 6C\9býÍóá {²ý¼\12Î-ó7É\r,\96\95ð»\8cÐyá¥Õp÷$Ijo\95t43\96\82\19cs\12µ_à\85Ê"$aå\9b\9dÆ^ú\8e\9eC\10\8e´rT䢢¥ÒS¥ó\1d6ÜBäfù\1fÑÏ©«ÍÚ\97¡¶ó²0λÅ\9cÛ\b+×n\a\9aW;ÓÃÖHs\ 1t¦¨C¹þ17/ýGïð\1c\12\83äüH\v\18R9åÓ&\8euºv¡ÓÒ/\8d}X\aÅ)^Ûm"jgA¢\98v½\83\82÷°gG\ 6*k¼ÉL\91¶¬}ìXo«l+ÇÿnßEú'ó/ñô.\8fi0\88mt4\f,¿\99!;µuò\90¤@¿\98\19!"'©\94ÙB\0]éP\91ÇZ¡,x#<¿&Q!\8eÊ*áÑ\9f"S\85òÌs¡ó\1e¨\9e0\10ê\aëÖÊÌ\17«\14à\b\r\8e¶K\8d)óÔ\90Ã\93î1¿¹òä\16¦.r\9aJÒÆË<:®5\b\ 6'ÔÔ)à\92Î÷J<\16s@®Á!ìqh¯C\9a¼»í]ݦÅØ\a0\ e\1cÕ¾\v\16\16-8Íj´XYë¦7±Ç¹\1aÖá\13ÁêLU¢à\f¹J\8a\a¥çdt±¢%Ú\19n2FaWíhîD9\15ô\ 4\92°\0\r»¬jKU\14$ò\9c>*]?\93««ÊX\1fdB>{©y)²mB®CS4)%\17UMé\99\15ÎÛ:ó5\87Å+7\9aÔd¸\bƳB!d\17}"9bZH6m¦^(½Ým\bl|G_ %féèZú\8b«\9b»Ð\93\ 1\vry\9eç \81\93®K\13CsÞï\17jÝN\8dßY3n_\ 1V¬(Ư¥Ì\83\15 `\19C\1dr@ò\8b\17T\12v\8et3Ú&öR<\84õ%\98E÷û*Jeïò§\86ÆûÄ+Z¥ÔÐkÖþ^¡¦øü'\ 4Òu\9dáU\9b\ 6Ø¿?@\10 2\ 2ª\vÏÅÄr\8b\ 2&ò\81ç\9aÙ\84Ý^\14\8c7\84+)\1aÂè
+\9d´ÏnZ¶)G»dÞÀ\18\ 3ç\8eé0\8aN\vi%,\14\ fó\ 2ôÙä\aÄ`ÊÇêw¢Ìu\80N3\96`¬\8d@ú¬\97¢îrcµñ°"\81õܼдÊ(íIùÄ\896*ã\9cjXRqb\84^m3£\84N0\98é
+6~Ø0%=gÂ\1e2'\vÃ\9bQL\96\8dô\16þ¹îJ·¼r\92X}Ã\fâè\97\v\ 5=\9a\1ap\84ß¹ÐGÉJJë\16aÓ«©d¿¡\r{\97¯ipÚèÝè8Ê˨;êÆ£Âö¤qT»\86\92HòÆl\83rØ\8f\9b\eéAV^¦\18ç\89ái<7lö&íá\1crÚÌYYàFLM\1d\954twPÞ\84\1f+ç8<h¦'>\87\ 5øÿ ÍRÓ\93°ÊÔîojz¿Ï\19\81DA8\94\83\84@pï\ fbòA>n¹:ð\fµé\1cR'9cëü}\13WpØ<\9a*\13\ 1ð÷»ñE«das\10S\82m\f\8aR\8aHP\14\v"\83"Ïc\93s\ 1ås&«0Ö!4ìpc½©u\86Ý\98,\90TQ°¤mô¯å8\ e©-º`è°\8bÜ\94¬I\8c+6w\84ÕYóª\13ú±\13×á\v´ÓJ4÷\8a¾òì\10\18\10%ûg\v-\9fA¬"'ÙUJ *\83!a2\1e\85yÌÅKåd\1fòYð\ 4¤\ 1ι\vô|\ 6\\8e\9b\19Óhî\17\11ëàÄ/Z>×\8b\99>`+f;;Á\80Ä÷ÀWäÈAg ë\98EÜ\92\18ÈO¢¨9ûh:hy`\9cK3\19\1e\9fd\81ç8\92\96Í\998&¯åz;\88Æ\16C\983¹ÀcDº\9e\10)\15\9c4\ 6\86ôX û\9cÛ´>Î6>`¤IæWU\ 4Ùr\f\ 38[<)Ö@(\fç:\8e°^\b߶çë\ 4\vf¦(\f\ 4\16j\ 3¯°\8c \8b5>Æ\156óµ ¸\8d¸â\9dÀ\85Ó÷ÖýâhØ\bE:ñ\7fÖê\11 M\19¹\86¹¸é\e\97\88´g|þî·«ë÷×çã÷oûý_èçp/\81Ðß5×\13.h5cƱ`kyJGëvòMÃ#6üAjiUFãF\96\19\1ffe\82ËÑß\1f|\87Õa\80ûQè1Ú\91á\ 2u*ÚÿEýåæÓï\1f>Ý|¾};\982æ_c£\8eq\86\81õ\v\8b\ 3\87´\rÆö û\ 3_J\82`§R\9d5£wp\82kâÙ\88o\84Q\9dïÎÇ\17çtkÍWL_8ÉÂi"Ð\9c\8d\1f¥\rG§C\\1dóýï\e\ 5[rÎÖ\8eO\8f»§'g¸\91ÂÒ°Ï\8fÞOöþØû\v>"\8d]endstream
+endobj
+1154 0 obj<</Type/Page/Parent 1099 0 R/Contents 1155 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1155 0 obj<</Filter/FlateDecode/Length 2025 >>stream
+x\ 1\95X]sÛ¶\12}÷¯Øñ\93Ó\89dÉrm÷NÛ\19;qZÍõW-eÒ\87¼@$$"& \ 6\0%ûßß³\vP\92é\99ô6\1f¶\87\ 2÷ãìÙ³\v\7f?\18Ó\b\7fÇt~B\933ʪ\83ÑpD'\93s|=½à¯'øï4-å\83ÉdxÚ\7f~5?8þ4¢_h¾\84¥³\vü\90\13¬\8cF4Ï\8e¨÷çËýã\7fÿx¼ÿüðëhò;ýF\7fèZ;\93Ñ\9dª4ü¬\8c\ fÚé\9c\16/¤Ê\92*]-´ód\97´}óÝüÛÁ\88\ 6ãÑð\ 2®~àa\9c±\87\8f¶R¦¦\ f¶\ eÎ\96%[;¦;\1dJ»²5Í´[ãÑÿo3g\9b76S%Ý*\ e\96®\9cÝø\7feC³\8di\8d\97k\1dbê\8fÚÛ²\8bäøÓ)\8dÇ\11ÐÁÉ\19g9\rä\vÛ\96@FSm\ 3
\85
-\ 2\12\82¹\99>ΨRYajíw8b\896\8e즦\1aøzR\9e\1ax\8cǤ\16v\874/\8c'þ©i\8dp:\1cÎ\87gl5cÐð\98\82¥ù§§Óé\13\16ú\80̨`líiS [\845¹á\aø`+§û- ©Hå\95©\91R§\82u´1Èh®\116\9ej6É\8e\9cê\90\9d\16Ö\adÙõì§%\9f\1ff\94« \16Êk\98DØ)\1cØVÞÛÌ(\ 6dcBA\1a \10üTyî´÷ÃtâÙ\ 4ÌED\8f0¼l\1d\f;j¬©\ 3S++\953K\93IP}\9c?\8a\97|\fÓ<¦ådïtü Ë× -M §jN\8f&vÜé̺ÜSn9oÔ8»6¹î\ 5Ê\8b»4rl\14¶\r#´´®\8a^I¶ïgôÍÔ9ø\ 6\9f\8d®\81Y®\e\rk 2rT\82\97\ 1\9bq\9a\1c\80ØÀ̵Éø\99êg·R[a\93Ö¹Î\87t]\93~UU\ 3ÿ±/$b\bÜ\85j`EÒ]#8zç\am\14;³wA!^®»^\9c±èØ'í\86\ 4R/\11N´Õ9Úa·Ï!»£$\10á.Ò\9f@\ 4m\ 3+\ 58Í@\99z\85u¥µ/mCßOÖF\91êÙï0^8«ò\fÌþþ\81°\95tÝV\1a,\ 5\87Å\1aKOWM\82|¡Öoô\89!Þ'ê/¿Ck\80 \8cCTz6\9dþÙjÔ\10ª\f»j\ 4\ 2Ö\ 1©\1eS%C¼ÈéÐB\18ò®@:ßð¤D-±\7f{l´\1fÒ·Â\80ó\1a\90ö,§\10\0²Ã>§\ep&9\ 1Îx\ 2L\11IF\8e#Ú§\a\94yW;ó.æã\8du/+gÛæ\185KÇ1ÕÇ° \ 2\90\81!P)\88Dzõ|4^\84\81\1aå+@²-\14("òfUKéñ
-»ì\ 5\0rHUâ\fáa\84\10\bf3\ 1-ÂAñ\82Î\0X">ä&Ô\95=e\95C\ 1@vèÐót¸ ò®6ØÃÆ\99J¹-ò|x~:\14\94Y\egë\8a³)~\81\97BÔFk7\bvÀ\7fQ\9e\1c!¨\8eºÙ·0\96í^¨;º)\84\ 2åj ¯f\81ZdzÂ\9b¤ã]è\1fEcVÜ=\ 5sß\82\ 2Ý\87ìOi* \83Ú²Ô\ 2vxö£\ 5 ú\ 5Ñ@?\81Q\8ezy©¹Q EÌþyý|K÷\8f\9fow'~ÿ !T\90i¤,´\9dü³â¾\897¡Ó\11
-¦÷Í55\95Ma\99\eÜ\8d\ f\ 2ÛÅ/]Â\eèÐ\96l#\95"\9c©íÎ\e\8a\8dO\ 4\ 4¡6ÖG¨\10«,ý:»}\16ÿ{\18ïñy\9b\8d\83T²Ú·\\83?[ã8\8a\ 4\9eâ7.\96<+\94\82>\ 4n·+ê ì·\9a\ 3\91<@E¨\ 2\v\r¦\9c®\15î²Ô\15llo\9cy$WT½\94|;]¡õwÒÔ\8b\ e\rÞ«\15h\8b\94¯ÈzÔw°\19\90\86ûP\14ô\r\9c\88w3\91`ºO{nÐ9^À\81Ùý\r\141J0\16ó\ f7\ 4&96Åj\ 6\19{\96\1fÒ\0²3öý\ 4\8f¸ôèFyLwÓºi\ 3=¶\81ÿÌd6`Fuû\92`è:S\8do1[ìlÝÝ}\82Wwv\ 5\19èWÌ\9d©_º±\ eNï\8c\ fX87¢\89PøØ\rQPm\19$[\1d {,Ø\8dÛ¯S\18zëõík\80Lê¼\17íW&\82LoK\95é~\1cªô\96Õϵè$\90dhõ\7fpr7í1(ìÆ\93Ê^0ûݾf\85ªW8eï?*P\92µØö\f?à<Ð\ 1N~\83HD\ 5@\ 3Lèí\f¦AÃÃÓ\9f\aäfÞ3\r&2Jó8\fñ[\1e8%¾hî\17äßU6¢BÝd\96\19õ
-ív\98? KÒF\91 [¶Ò\7f+Í\98\18_¡µÍ¤sl°\ fª\18õØ\94}\ &\19\8fÒi\ 2LñË\0\93£`0°¦Î\8e\94\1fÈ¢,À¹J|?ýò\e\8d1"ò%fp>\8eÓ"î\18çÃq¬¤.è\a\1eÏ>a8\90*x;ª_ò\88y\8d\1c\1dÔþ.|\8d¸-zVÍüÄÅÆ¢µ,Úå\12\1cÙ\11\16\1ez\8cÊ\b\85\ePg2Ê\ 1Wåô©\97\984æ¢\89uj¡ÁZ\87I¼S nøÐKyéô¥\0Ç\90\87ª¹½vÀI:¥ññÈ?\1e\rÆ\7f%\fUmà!cÚ\9f\1eá*BФ\97\98\9cy\16åVc\17\ 1C\1fǸ\1fQ¢g\9d;´t¶\92èxX-Á^ ÉÞ\ 1\96ØH-,\1e`¼X\15¢\7fï\ 5\87G\v³BÓÏ\7fÅ\9e\ 4U7úOy\8aì\10@\13\ 2\e\85z\b\ 4.sÜÑ#y\18Ýb\9c\16\9ag¶\ 2Â\85¹\9b\a\e\0\1dEE\16\16\8a¯dX¢_\e\ 3\87úùAÒ\96eë\v¸º\8b\\ e\97R\12¨TÀ])v:\9dô\80=MÒ,·\9a7Ù\93\ e \89ñíâ\af\1fàÞ3\1aL¥\a\96=Ö¥Ú"yf¨\87\7fC
-}?âä $K½C2\rÒ±\1f·Y\86kÂG\10\96©´kA,>=ã|É\89ó\vî\14r½L\ 2µt\18@¸\12!\7fLVÈ\ 1îâ\ 392¦\1eâP(§2\10\18\83.ú\ 6ÔAø\984»/2s8rPi\90\8f\92§B\ 1\vm\8e¯I|£1\18àÒ`ϧ\1dVU¢\1f(\90úâq½\b¸à\86ãXô3U-ú#\13\8f\ 6kU2ãÅ?æÏÁþj\11\81;N²r\95î\8cã ¾N¹:§Éä"~q1»¾¿¹¦'g%\89\9fm\86+H\rÓp\95!\1dt\e\ 6\97#þNåä\7f\8bÑÅåÅðrr\ 5\ 5ÃòÉ\15\9fr;?ú÷Ñ\7f\ 1J,ÝWendstream
-endobj
-1522 0 obj<</Type/Page/Parent 1369 0 R/Contents 1523 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1523 0 obj<</Filter/FlateDecode/Length 1698 >>stream
-x\ 1\9dXkoÛÊ\11ýî_1\90¿8\80H\8eáGpQ@¶åV\80¸\16o\83\v\10(VäRÚkr\97w\97´¬þú\9eÙ%-Ùí&½M\ 2;"\97ó8sÎÌP\7f\1c\8ci\84¿cº8¥/ç\94U\a×ÉÁç»+\1a\9fQRàÎù%þ\93Óh8\1a\8d(É\8eÆ£á\97áé\90\92µ¤û\87¿}[$\v*T)?%¿ã¹3\1a\8fÃs'§\17xî(Y+çï\13~·®\15e¹¥Òd¢\919)M\ f\vú®tn6\8eæ \9d\rGd,\9d²/Ü\f6\11\9d·ytó5M¿Ïæó$M\17¿-\92éÃ\97Ó4½}\9aýcú´HÓiró>\86#\12:çK#:\19#f\ e'3º\11J;j\10þì\91&yn¥s|Ò_ªD¶VZ\92\16\95ä\b*ÑdkDZ\ve]HúCP\1d\ 6\1f]3$TK[\18[!5Ù\Ͼ-¼Ù\ f\115\86ã\10]\1c\95¨k¥W\0AI\r\88\86ÝéÓó!\97áhÖP³UÖÁh\9e\1d\95êY~í\83ºêÁ?\vç©ûsH7¦ÞZµZ7\94\1eeé'\1a_]]Ò\83ʬq¦hpÛÖ½3\94ø\92\9d½=Ü\87üñ:H\80ªâ\9f 'ª\1a\19ï3\ 2å\ 6rË\avç åvtSr~\b¥C&êÁ¼HKÉÍãçÙ#\82v\8dÈ\9e \98ö¤¹º\8c=\19»\1eböåyG\86\ eyG¦Ø+\88\ 4S\f333UÝ6Ò21\Ôö[>\88Õ\9f\1c\12MA)B²vKnmÚ\12\90Hz\96uCF\83w`Y®^T\ ee \94ZF\8bà\15·G\95\9d±º\14YP\13³º\0S\eÄ[¶\95\ 6Tei6oe\88\ 6\9e\19\v\1dÔ\ 6±\80}ûÉ\ 6Ò÷üìuÂ':4¢6w\ 1:Y\vë\15\ f6\88\86J)\10¢\81Î\\8dÐYò\8dX\ 6O\83Ã\ 1ek\1cÏ`?j\e\9c[I-×\81ç\19Ê\94Km\1aéé\ 6¢Xx(ÀL\84Z\ 5®9\19nÊ×\fð+£ã\85\JÀ\96~\8a\16#\1aØ»~Ç(\89F-!\8c\8djÖ{r»\9fÌéAh±\ 2»O\87¯\1dé¬ÖÆ5ñ°\98¶¡Y\99¢\906´±Pc®\9b|m¤v\9c\98o\bÜ÷>J6\1a¸\17ûáãÓô''n¿=|ý%7\15ºè_~rt6¿¹ÿõvJ¿pØ,\87\9f=p=ýëlþÏÉ}2}\9aO\92\9fE2\9dßþ¯gÓtôª5Ú\8d6ú¤¶J7\9eæ=Íȵuml\93~\8ae\14»Nw^`lMèm'sÌ\8d ľîüé\8dÓ\8e\ 6\fó\0\94(KÊ\ 4Ø\eµÎ\ f\86Ö\ 1z£mÔ\16¼\14¹\17;®ðm?©2ô\189¤ë-4P\88¶l\8eýc\8aÉbãæ!\97\9dÉcZ¶\r\1fÇ°³Ü¹\8dƨ\16\ 5dHù\16nT\16\9c¡Q ¹°~¨\10ªt\7f^$û uùy}p>\83Ã}\86\rÐ\18V\ 1)á\9cÉ\14º\b§\1dE, õf-\10\15mFfªP¡\ föìå~ó\vJÊ\1aGk³ù¡å¥Å\92\ 2,¸\ 5\96f\85ìñéEeÀx)×âÅï\vaR!§\17e\8dæ¾Ã[\83éQ\8e\86Í\99³ô\ 3Âo©æ¡o0$\ 1§cR\r\ f\-á× Ì\14Ð@\94\ e?ò\9cDÔ>3\8e\8f²\1f?eü4é\91ð#¼Ü\88ë\ 3\ 5R¢l0®Vköè©
-¶Dí\83\9bh÷\eM\9bµ\fìßñ\92¿(\89)ôç\99²ð\85Û²¾\ 6\87ÿÙO:\11a!À\14áÜ\9eînÞ\96-\fãë$.iâ½gÃ|\a.\18\rÏÞÀ\8e)»®åKîEÁX\bl<\85\aEþ@Z¼â\96ýÖÇ(ìF\96 _ç7'KÁ:c¤\8e\ 17&\8eï#Q\903&·(Õ¿ðP7)Âj\8d\ 4P\0nɼÜâ.o\16\9e\9eÒF1'ì\92\88irÿ}ò\e6Ó}BÕÖ`#\91°Ñr1¾{û\a\86+®D\83eq@-h¶üh`^_ÁNy½ñª\ 5ñÑ\ 6½\aÏÔ\YhR½ü`\e\9a!Å<÷]\88\ 3sèåh\1eu»,U6àÕ\9d¯Ê×°\96úqNÞ\ f\80
-7£\91ß\v\8dѼ\bñ\97\8a7\95\82\ 6ó¶,\17Ð\1cÚÞ\82}9ïÄØ\1cI2:YØh»\17\b^\e£\ e\10\82à\9d\0¨X)Â\8bÇ»zº6cy\17p¹í°z\96[®V«á/j8M;÷i궮\91U\9af-\16;ÝðªkMéd\83[]ÛJÓRèJèP©4å\1d\92h÷.M5\»\90G6¾\92tH[¹\ 2R\16á.\14Þ\ 408Ð\8fÞÊÑÕß\83Y\18$ÁÕ±ñêF3LPÔð&xU\1e¾[\ 2°Vo7( \9a:« \ 5/\eů%=ñ¢v±/\ 2.n×\\15\14heM[CI\8dYI\8euH\13Ìw\a\81ÂÜ®>àRV¶y\\ 6»!ï éͲ\voâÿé\88wJóÒ{Lÿ}\95qØ(4' «¥ÌæЫ\18\83j\eE ¼68Ð\85ëÃ\8d\88\ 5´ÿâʺù£5@\8a7Ìc¾¯!Ûî(\eþ|wÙ½«\8fÏ/\86£Ë/øö\0_\1aäG\8bÉÃõ\84\1eù\1d²¦[\93µ\8cµ7ÄÏ\9dôÇO.Fx\83Í\7fø%ÃÙÅÙðâü\12_Mààù\15??M\ eþ~ðo\a\9då+endstream
-endobj
-1524 0 obj<</Type/Page/Parent 1369 0 R/Contents 1525 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1525 0 obj<</Filter/FlateDecode/Length 1607 >>stream
-x\ 1\95WÛNãH\10}ç+Jð°\8c\ 4\89s\99\ 4FÚ\a \99ÝH\90a\89gG#YZuì\ eéÁîö¸í\84üý\9ejÛ¹ ï2 PÒî®®:uêTùçI\87<üvhØ¥Þ\80ÂäÄkyÔïy.õ¯\86øÜÅ_&iá\1eôzÝ·\1ft®ûÁñ\89[ÿ¤ýÙ£kò\17¸cp\85\ f\11Á¾ç\91\1f\9eSõsFAà½jMÚä"WFSnȦ2T\8b\r ZÊWZ\89¸\80\v&Ãwmôe\9a)\9d+ýLáRd"ÌeÖúàÿ8ñè²ãµ®pËÎxÓ:ùK¶\18ÇfÍ\86ä«HÒX\92\8aãÂæ\99È¥%\11Çd\16\94/¥\95Ø\90Kmá\9dýÔd²i\9d:^·õ±ß\ 2D×C\17t¶TÚÔñÓÙãÓ\98ÎF_\1e>i\99¯MöÂ\ eÑ\19¾Ðsf\8aô7K£»w\18Ç5lóT¤©\16\89$\87k§\7fº½hïÃ\99\ 3XÄ\84Íde¶\92Ù{nèöØFjÒ"\16Ù\9e¹2\86\83\ 5k\8a,\94¿`»ã°\89M(b\9böl9|ö¾342\92\91#\ 4²CJ\87q\11ɦ\0\9aÖéìvüÇdúÏͽ?~\9aÞøãæ\8d\93éÝý×Ñ\18\88\ 6Aía\10¤Å<V!V\92¥±¹}ßq\97û_8;\9e\8eþßÃÆ«'¨& $æfÅ\1cv$¿pK5MN«\14Qht.\94\ 6ïËê\13q£ÕmÙ\ 1zR¹%æ[e¶"Ç) \1dÑi\rÖö\16Þ\89+²ÆlQ\9aÉØ\bä÷Â\99`÷O\1dh\a6HÙJ$\14\98`\rÜ Ph\9aK*¬\8c\1a]\87¶Ä¨î\8cÎê\9c
+\ 2\12\92¹\9aÞϨRYají·8â\886\8e즦\1aøzR\9e\1aD\8cǤ\16v\874/\8c'þWÓ\1aét8L\86'ì5cÐð\98\82¥ù\87\87ãé\ 3\ eú\80ʨ`líiS Z\843¹á\aøàE¬û\17@S\91Ê+S£¤N\ 5ëhcPÑ\#m<Õì\92\ 39Ö!;.¬\ f¨²ëùOG>ÞÍ(WA-\94×p\89´S:ð¼·\99Q\fÈÆ\84\824@ Ä©òÜiï\87ÉâÉ\19\98\8b\8cîáxÙ:8vÔXS\a¦VV*g\96&\93¤ú8¿\97(Ù\fÓ<\96åh\17tü «×\11-M\89 j.\8f&\ eÜé̺ÜSn¹nÔ8»6¹î%Ê\87»2rn\14^\1aFhi]\15£\92jßÎè\8b©sð\r1\e]\ 3³\7\1aÞ@eÔ¨\ 4/\ 3^\8651\80ÜÀ̵Éø\99êW·R/Â&s\9d\ fé²&ý¬ª\ 6ñã½\90\88!p\17ª\81\17)w\8däèM\1c´Q\1cÌ.\ 4\85|¹ïzyƦã\98´\e\12H½D:ÑW\17h\87Ý®\86\1c\8e\92D\84»(\7f\ 2\11´\r¬\14à4\ 3eê\15Î\95Ö>µ\r}=Z\eEªç¿Ãxá¬Ê30ûë;«¤ë¶Ò`)8,ÞXzºn\12ä\vµ~¥O\fñ®P?ý
+\ 1\82p\ eQéùtú{«ÑCè2¼U#\11°\ eHõ\98*\15âCN\87\16Â\90w\rÒÅ\86'%z\89ãÛa£ý\90¾\14\ 6\9c×\80´ç9¥\0\90\1dÞsº\ 1gR\10à\8c'À\14\91dä8£]y@\997½3ïr>ÜX÷´r¶m\ eѳt\18K}\b\ f"\0\19\18\ 2\95\82x,[ϦñE\18¨Ñ¾\ 2$ûB\83"#oVµ´\1e\9f°Ë^\ 2 \87t%l\b\ f#\84@0k\9d \18\11\ e\8a\17t\ 6À\12iõ>7¡®\1c)«\1c\1a\0²Cû\91'ã\82È\9bÞà\b\eg*å^Pç}ûÉ((³6ÎÖ\15WSâ\ 2/\85¨\8dÖn\10ì\80¿£=9CP\1d}³\ea,Û½T·tSH\ 5ÊÕ@^Í\ 2½ÈôD4IÇ»Ôß\8bƬxz
+æ¾\ 5\ 5º\ f9\9eÒT@\ 6½e©\ 5ì\88ì[\v\12ô\e¢\81~\ 2£\1cýòTó À\88\98ýyùxM·÷\1f¯·\16¿¾\93\14*È4J\16ÚNþYq_å\9bÐé\b\ 5×»á\9a\86ʦ°Ì\r\9eÆ{\89mó\97)á\rtè\85l#\9d"\9c©í6\1a\8a\83O\ 4\ 4©6ÖG¨\90«\1cý<»~\94ø{\18ïðy]\8d½R²Ú·Ü\83ß[ã8\8b\ 4\9eâ\1f\lyV(\ 5}\b<nWÔAØ\1f5{"¹\87\8aP\ 5\1e\1al9Ý(ÜV©kØ8Þ¸ò(®¨z)õvºÂè朗\97\1d\ 6¼W+Ð\16%E\\91õèï`3 \8dð¡(\98\e°\88\9ff"Át\9bÞ¹Âäx\ 2\af·WPÄ(Á8Ìÿx 0ÉñRìf\90±çù.- [g_\8fð\88[\8f®\94Çv7\9b6Ð}\eøÛLv\ 3fT÷^\12\f]gªñ-v\8b¯\9b\9b\ f\88êÆ® \ 3ý\8e¹1õS·Ö!èó\ 1\vçF4\11
+\1f§!\1aª-\83T«\ 3d\87\ 5\87qýy
+G¯£¾~\ e\90I\9d÷²ýÌD\90ím©2ÝÏC\95Þ²ú¹\16\93\ 4\92\fþ\e\96»m\8fAá0\1eTö\84Ýïú9+T½\82\95]üè@)Öâ¥çø\ eö@\a\ 4ù\ 5"\11\15\0\ 30¡·u\98\16µ\ e\ fOÿ\1e\90«yÏ5\98È(Íã2Ä?òÂ)ùEw? ÿ¶³\91\15ú&³Ì¨gh·Ãþ\ 1]\921\8a\ 2Ù²\95ù[iÆÄø
+£m&\93c\83÷ \8aQ\8fMÙÇ\ 5b\92ñ*\9d6À\94¿,09\1a\ 6\vk\9aì(ù\9e,Ê\ 1ØU\12ûñ§_h\8c\15\91/1\83É8n\8b\93ád8\8e\8dÔå|ÇÛÙ\aì\ 6Ò\ 4¯7õsÞ0/Q¢½Ößf¯\91¶ÅȪ\99\9e¸×XL\96E»\\82"[¾"@\8fM\19\99ðüé\F5à¦\9c>ôê\92¶\Ì°N,4Hë°\88w"Áó\1er)_:y)@1\94¡jk\9e®\1dnRM\99{¼ñ\8fG\83ñÏ\84\9dª\r¼cLûË#BE
+\9aô\12\8b3¯¢<iì"`çã\1cw\eJ\8c¬\v\87\96ÎV\92\1dïª%È\v$9:À\12稥\95Å\ 3l\17«BäïÞðfaV\98ùù\8fÈ\93 ê6ÿ)/\91\1d\ 2\98A £0\ f\89 dÎ;F$\ fcX\8cÓBóÊV@·°vó^\ 3 £¦ÈÁBñ\8d\fGôsc\10P¿>(Ú²l}\81P·\99\8bqé$\81J\ 5\\95â ÓI\ e8Ò¤Ìr©yU=\19\90P\18ß.¾aõ\ 1î=§ÁTz`9b]ª\17\14Ï\fõð?(¡ïg\9c"\81b©7H¦=:\8eã6ËpKx\ fÂ2\95¶\13\88µ§ç\9cï8q}Á\95Bn\97I\9f\96\ eû\a7"Ô\8fÉ
+5ÀU| &cé¡\r\85r*\ 3\81±çbl@\1c\84\8fI²û\1a3G {\9d\ 6õ(y)\14°0åø\96Ä\17\1a\83ý-íõlm¿«\12ý@\814\16\ fëEÀý6\1cƦ\9f©jÑß\98x3X«\92\19/ñ1\7föÞ¯\16\11¸Ã¤*\17éÊ8>ÃoS.&tvþsü½Åìòöê\92\1e\9c\95"~´\19n 5\#T\86tн08?\19±®ü£\16\9d\9e\9f\ eÏÏ. _8}2f#×ó\83¿\ eþ\aF{Üëendstream
+endobj
+1156 0 obj<</Type/Page/Parent 1099 0 R/Contents 1157 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1157 0 obj<</Filter/FlateDecode/Length 1698 >>stream
+x\ 1\9dXmoã6\12þ\9e_1p¾d\81Äk;A^\16E\ 1'qî\f$Þ\¬Þ¢\80\80\82\96h\9b\8dDª¤\14Ç÷ëï\19R\8a\9dÜq·m[ì6\129/Ï<ÏÌ(\7f\1c\fi\80\7f\87t1¢ÓsÊÊ\83ëäàóÝ\15\rÏ(YâÍù%þ'§A\7f0\18P\92\1d\9döOû£>%kI÷\ fÿü:Oæ´T\85ü\94ü\8ekg4\1c\86k'£\v\;JÖÊù÷\84¿\e×\88¢ØRa2QË\9c\94¦\879}S:7\eG³\84Îú\ 32\96Fì
+/\83M\ 4çm\1eÝ|IÓoÓÙ,IÓù¯ódòp:JÓÛ§é¿'Oó4\9d$7ïc8"¡s~4 \93!bæp2£k¡´£\1aáO\1fi\9cçV:Ç'ý£Rdk¥%iQJ\8e \14u¶F¤\95PÖ\85¤?\ 4ÕbðÑ5CB\95´KcK¤&ëëé×¹7û!¢Úp\1c¢\8d£\14U¥ô
+ (©\ 1Q¿==:ïs\15\8e¦5ÕÛJe-\8cæÙQ¡\9eå\97.¨«\ eü³p\9eÚ\7f\ eéÆT[«Vë\9aÒ£,ýDë«KzP\995Î,k¼¶Uçl8è_²³·Ë]È\1f\9f\83\ 4¨*þ\13äDY!ã}F Ü@n±õÀî<¡Ü\8en
+Î\ f¡´ÈD=\98\17i)¹yü<}DЮ\16Ù3\ 1Ó\8e4W\97±\9b±ç!f_\9ewdh\91wd\96{\ 5\91`\8aaff¦¬\9aZZ&\86\8bÚ~Ë\a±ú\93}¢ (EHÖnÉMS\0\12IϲªÉhð\ e,ËÕ\8bÊ¡\f\94RËh\11¼âö¨²3V\15"\vjbV/ÁÔ\1añ\16M©\ 1UQ\98Í[\19¢\81gÆB\a\95A,`ß~²\81ô\1d?;\9dð\89\16\8d¨Í]\80NVÂzÅ\83\r¢¦B
+\84h 3W!t\96|-\16ÁSï°GÙ\1aÇ3Ø\8fÚ\ 6çVRKëuày\862åR\9bZzº\81(\16\1e\96`&B-\ 3×\9c\f/åk\ 6ø\95ÑñB.$`K?E\8b\11\rì]¿c\94D\16\10ÆFÕë=¹Ý\8fgô ´X\81Ý£þkËp*ʵqu<,¦mhVf¹\946´±Pc®\9b|¥v\9c\98o\bÜ÷>J6\1a¸\17ûáãÓä\a'n¿>|ù)7%ºèÏ?8:\9dÝÜÿr;¡\9f8l\96Ã\8f.\Oþ1\9dý6¾O&O³qò£H&³Û?{6M\a¯Z£Ýh£O*«tíiÞÑ\8c\SUÆÖé§XF±çtç\ 5ÆÖ\84Þ¶2ÇÜ\bBìêÎ?½qÚQ\8faî\81\12EA\99\0{£Öùbh\1d 7ÚFeÁK\91{±ã ¿ö\93*C\8f\91}ºÞB\ 3KÑ\14õ±¿¦\98,6n\1erÙ\99<¦ESóq\f;Ë\9dÛh\8cj±\84\f)ßÂ\8dÊ\8234
+4\17Ö\ f-\85*Ü_\17É>hm~^\1f\9cOïp\9fa=4\86U@J8g2\85.ÂiG\11\vh½Y\vDE\9b\91\99ZªÐ\a;ör¿áÙ\ 5%eµ£µÙ|×òÂbI\ 1\16Ü\ 2\v³BöøéEeÀx!×âÅï\vaR!§\17e\8dæ¾Ã[\83éP\8e\86Í\99³ô\ 3Âo©æ¡o0$\ 1§cR5\ f\-á× Ì\14Ð@\14\ e\7fä9\89¨}f\1c\1fe?~ÊøiÒ!áGx±\11[×\ 5
+¤DQc\ÖìÑS\15l\89Ú\a7Ñî7\9a6k\19Ø¿ã%[\7fQ\12Sè¯3eî\v·e}õ\ eÿ·\9f´"ÂB\80)¹=Ýݼ-[\18Æ×I\ÒÄ{Ï\86ù\ e\0\1a\9e½\81\1dSv]Ë\97Ü\8b\82±\10Øx\96\1e\14ù\1diñ\8a[ô÷Z\1f£°\eY\82~\99Ý\9c,\ 4ë\8c\91:\ 6Ü\988¾\8fDAÎ\98Ü¢PÿÁ¥vR\84Õ\1a \0Ü\92y¹Å[Þ,<=¥\8dbNØ%\11ÓøþÛøWl¦û\84ª¬ÁF"a£ÛGyåb|÷ö\ f\fW<\89\ 6Ëâ\80ZÐlùj`^WÁVy\9dñ²\ 1ñÑ\ 6½\aÏÔ\YhR½|g\e\9a"Å<÷]\88\ 3sèåh\1eU³(TÖãÕ\9d\9fÊ×°\96úqNÞ\ f\80
+/£\91ß\v\8dÑ<\ fñ\17\8a7\95%õfMQÌ¡9´½9ûrÞ\89±9\92dt²°Ñ¶\1f\10¼6F\1d \ 4Á;\ 1P±R\84\ f\8fwõtMÆò^Âå¶ÅêYn¹Z\8d\86¿¨á4mݧ©ÛºZ\96i\9a5XìtÍ«®5\85\935^µm+M\v¡K¡C¥Ò\94w´R¢Ý»4ÕpíB¶\1eÙøJÒ"må
+HY\84;Wø\12Àà@?z+G[\7f\ fæÒ ®\8e\8dW7\9aa\82¢\1e\865Á«òðÝ\12\80µz»AIÐÔYM(xQ+þ,é\88\17µ\8b}\11pq»æª @+k\9a
+JªÍJr¬}\1ac¾;\b\14ævõ\ 1\97²¢Éã2Ø\ryOHo\96]x\13\7f§#Þ)ÍKï1ýÿUÆa£Ð\9c\80,\172\ f\9bB§b\fªm\14\81ðÙà@\17®\ f7"\16Ðþ\87+ëæ\8fÆ\0)Þ0\8fù½\86lÛ£løóÝeû><¿è\ f.Oéü
+\9fîùÑ|üp=¦Gk~\87¬éÖd\rcí\rñ½\93îøÉÅ\b¿cÈ¿÷;\86³\8b³þÅù%~1\81s£\11_\9f$\aÿ:ø/\1e¿ä¿endstream
+endobj
+1158 0 obj<</Type/Page/Parent 1099 0 R/Contents 1159 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1159 0 obj<</Filter/FlateDecode/Length 1605 >>stream
+x\ 1\95WÛnÛ8\10}ÏW\f\92\87M\81D¾ÖN
+ìC.î®\81ÄÍÆî\16\ 5\ 4,h\89\8eÙH¤*Jvò÷{\86\94|C´\9b&H`SäpæÌ\993£\9fG\1djã·CÃ.õ\ 6\14¥Gí Mý^;èRÿb\88Ï]üå\92\16îA¯×}ûAç²\1f\f\ eO\Ï\8eZ\9fÛtI³\ 5î\18\àCL°ßnÓ,:¥êç\84°ý¢5iS\88B\19M\85!\9bÉH-^IÐR¾ÐJ$%\09¾k£Ï³\éBé'\8a\96"\17Q!óàÃìÇQ\9bÎ;íà\ 2·l\8d7ÓlÉ\16\93ĬÙ\90|\11i\96HRIRÚ"\17\85´$\92\84Ì\82\8a¥´\12\e
+©-¼³\9f\9aL6S§Ý\r>ö\ 3@t9tAçK¥M\1d?\9d<<\8eèäöËý'-\8bµÉ\9fÙ!:Á\17zÊM\99ýféöæ\1dÆq\rÛ<\16Y¦E*ÉáÚé\1fo.Úùpâ\0\16 a3Y\99¯dþ\9e\eº=¶\91\99¬LD¾cÎÇ°·`M\99Gò\17lw\1c6\89\89DbóÕ\8e-\87ÏÎw\86FÆ2v\84@vHé()cÙ\14@Ó:\9d\\8fþ\18Oþ¹º\9b\8d\1e'W³QóÆñäæîëí\b\88\86aía\18få<Q\11VÒ¥±\85}ßq\97û_8;\9aÜþ¿\87\8dW\8fQM@HÌÍ\8a9ìH~æ\96j\9a\1cW)¢ÈèB(\rÞûê\13I£ÕMÙ\ 1zR\85%æ[e¶"Ç1 \1dÓq\rÖæ\16Þ\89+òÆlQ\96ËÄ\bä÷Ì\99`÷\8f\1dh{6HÙJ$\14\98`\rÜ Hh\9aK*\8c\e]\87¶$¨î\9cNê\9c
+\8a¤FÉ'É+¥\0\80A\80É*©´P,\vN\ 6vÂi´o_m!Sö®Ôb%T"æ\89üuu\9a\98B"M¢p¹Z/\r\9cð\9eXÊD\8e\b+Ö;\154i\8a\10,A;¥\88\96\94\18ó\fgÍN\1az\962ã³\f¯.Ó9\10\81ÖEµ%À$(UZ¥eJk¨"©4Ë\99D\99Ì!Ä©ÐQsX,®¹Ä6 W0\16\90v\12ñJYFÃé;Ì\ 1o\11\1f\0Í\99P \b¸hØ·Æ\10$ØåÄ\19Ö\19\18\aqëó%uú¾Ý\9c÷:Ü\bz\ 1ÿÒ\9f_¦³©ÛÈ\16[\9fûÔÁcnKçÝ!ï\9b-+C.u¶tt`ö\16\ ejº\9fÒ7¥c³¶4\99Q\1fM\11ݨË\f%àm¢\8d:\9b§7\9fÂðÛx2\99\85áôût6ºïuÃðöqü÷èq\1a\86£\99\13ó\ f§Ìó:Ð\1eú+ÜÙ\14#çgü@Wq\9cK\8bÂAØÕ\12k\8eÓy8\90\8a"ZÂÑL¨Ü\ 64Þ«\ 5\9a¿ú4sS\80\15\93\94Üf\ fnTz\91\v´¾2*JÎ\9bÞ ù\8cb\99\ 1q&\f8¶4kgpvóÐ\82oR¯Tn4S\90Á\83ë\võ\ 4\eq\0\1eì
+\93\12}æõàâµðîÉ\9f¥B£g+¾ëÒW^ZwJ\97/\87\b·d\11µ6¢»\ve\13\17\ 2г¡\1fÐídJw®F|æÞfC$21W\89*^÷Ãbl8\aUøV\16eÆ\8a&ê\aU\eß á§\9a\85\88\9c1¤g\ 1̸\12bäó\0\r Á0<\7f8MÝI\17dúg)Quì\8c\1f\p\9eý\80`F
+#\8a\16.s\0o½TP\ 1e}Ö\ 4#ª±X©ÉD\16×ã/Ó\83\8b'&FH¯\19ìa¦J%kä^6Q¶\ 1]Ñv\1f.jS*\ 5Z\ 6$\97*³4Ï¡Þ\11¨Dá)\ 4#§¯·\ f\awm¶\84\1f\4 mád»\16ZÇk'\7fp\81c´åü\87\8c\1c30\ 22\91½Æñq\16\97\85)Q\19UbjOxßÁÍ\11äQº\f8ë\v\b´»@3'Î*\99à"»»÷\92\81¼bÊ\94Ñ3Ó\19\89C¶Y¿¶(\¸¾§!\97oã
+
\12\1f\80Á¼æ%
\1f¼eÂ{±#
\88Æ
\94¦n
\1aã%3ç^
\ 4ËU¬s/©[OÏj77R_É
\a´i
\83q}
\1aHqg|K(·Åñ1ðNügu\ù=ái
\88c
\r¶h 3áÌø
\0\10\1dÏ
\95Ê
\13\96sè
\v|§¾óEÔi·;-üëî4óÉõä
\90\9cái
\9dÓ½
\e\98\8f\ e3?Á
\92-Ðr<a8÷^.¡Ph3¬
\9eî
\11\8a\80s
\9aË'
\85N
\r\95by
\14µ¸
\1fÒ%QNÕ|ûß+ø¥°
\186¤¦'µÂ
\7f\98M$
\93Þh¹
\97Çx;ä¹á
\f<Þ3³Q
\b\80&Ò¹à¤c
\80\817L
\84*(
\86nû¢²-N
\1e\82\11«?
\11ó<
\8cϼ
\99cà÷®ª
\eÙt
\1e°&ûåZêN]3tï2;ïhçݾ÷
\1e·ñr
\849«Ì2
\93\17ô;}
\97nÊÝ
+®\vÇõÏ7\83a]xW4n$¤j®¯Ê¸v|×Ó\8b*ªÎ\0ï¦\17=\1a\f\a¾aN¯î¯¯è!7N&nMTr?rÊË\81\9f×\aÎ\87]¼}6Ì\ 5ýa?\18\ e. kØÑíñÁÑì诣\7f\ 1Mïqðendstream
+endobj
+1160 0 obj<</Type/Page/Parent 1099 0 R/Contents 1161 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1161 0 obj<</Filter/FlateDecode/Length 1780 >>stream
+x\ 1\9dXËnÛ8\14Ýç+.ºr\ 1G~ÄuÒ\ 1f\91L\1a4Àô1p\ 6ÝdCI´ÅF"U\91\8aã¿\9fsIJV\14\ 3\ 5&AÒÀ|Ü×9ç^ö×Ù\82æø^Ðå\92.Ö\94UgódNëÕ"YÑêê\12\7f/ñÓHÚú\85\8füÉèó\9b\87³ÙÝ\9c>ÒÃ\167¯ðGN¸e>§\87lBñk¯´%ÛÖµi\1cýI_Íû\87\9fgs:_Ì\93+\1c\18í\93ͳl°íåå%\19üð\99ÙÝ\8a\16\8b`ì|¹æ³ûBÂð¸\8c\8b\93Á1¾âõÑ )K®\90tÿ\9dD\9e7ÒZ2[ÿÉ\8fû¯\e²Þ\81$\1cúH\8bËhïb\85¼ÀâE²Jè³ÙSÚ\98½UzGÛVgN\19\ 4)tN\ 5\96\9c¡\Ö¥9\90u"-%/ð\85\bz9\ f×`]êÜ/ö\17µþº\8d¨RñÚg>w\99ø\80¯\91J'\9cÌI¤æYNéË\86~(\9dÃ\17ªDV(--\8a¶SÖ!\8d\88S5ôUº\9bûo\eÒ¢ÂâãD%2ùÃG\1cOø\15Ú\9a\86$®\88\9e..\92%\aÌ Q\99$w¨%)M¦\96\8dàx\1fß\93Ñì\rÊÚÖ ]\97ÖLI\8c\1dä\Ë\17\919ª¤+LNé\81ö\85Ê
+x\80R°SÑápíȼ\13Opº.\ 5\Àö\"®
+QÆ{p%â\84çÚ8\1fÒ \1fY©¤v³PQ*àY*¥¦\9dzÆoA\83r\8flF\Láç«ûÿþòùÛæaC¥1OmÍîHÍ%̧ì\81ÚÒ-\0Äi\1cf\1cÁYS¶\9c±W'¤Ë<ʸ¸ë\0\8a{íCÈ\84\95l\1aÈæè|ÜÚ\fý%Q\96o3\a\0ZÚK,á_\9f×à(>Ç%¹Ñ\92sÿïí÷Q¸\0 ÈaÔ%ôÀ%Qð\17\10ëkÓ»\ f\s5K\93\89\12\8cNµtSjuÉ\1cêr\83óEu°·\ 4\b{O\ 3;îǶcª¥M\bÑÛ\16°°Êµ\1e`\96<\17¨n̳Êá\8f\0\84\ 4x6@\90$Ë|\89´\rQWâ\80Js!2\95\96\87Q´Jÿ\94\19\13Hé\18\8f' Âbw!\ 5\ 2\15«\8c\93Cj!Ò½i\9e@\9e@RNû¸Mhm \ 1ò\1dÕ¢\ 1\9a\ 1ÐÇ÷ãÒþð\85|\ 5:F\ 3§jz\1a·´W¨$6pÅ\90eÅ\15â´öìÞ+Ç$\92Cdtv;ön8£µÈ\9e¤³\94 Í\89iLë\ 5\ 4jå\8aÖ\86ã@\14kH¤ã°ä\9d¾\91È\1a\83JÇã1%¶³Ø\81ø¶mX\15Ù/¯\r
-¥FÉÇñ\86\12\0À Àd\95TZ(\96\ 5'\ 3{á4Ú·\e\9bË\84½+´X \15\8by,\7f]\9d¦&\97H\93È]®ÖK\ 3'JO,¥"C\84\15ë\9d
-\9a$A\b\96 \9dR\84K\8a\8dy)Ò\8bf'\r½H\99òY\86W\17É\1c\88@ëÂÚ\12`\12\94(\92"¡5T\91T\92fL¢Tf\10âDè°9,\16×Lb\e\90Ë\19\vH;\89h¥,£áô\1dæ\80·\88\8e\80æL(\10\ 4\4ì[c\b\12ìrâ\fë\f\8c\83¸ýù\9a:ý²Ý\ö:Ü\bÐ\10zø¥?¿Ìü\99ÛÉ&Û\9fûÔÁsîK\97Ý!oô\97\95%\97;[8>0}s\875=Ìè\9bÒ\91Y[\9aúÔGWD;êr/C\r\946ÑG\9dÍó»OAðm2\9dúA0û>óÇ\ f½n\10\8c\9e&\7f\8f\9ffA0ö\9d\9aï|8g¢×\91öÐ`áζ\1a9A\93Gº\89¢LZT\ eâ®\96Xt\9cÐÃ\81Däá\12\8e¦Be¶E\93\83b ù¦Ì3w\ 5X1qÁ}öèF¥\17\99@ï+¼àÄé½\90/(\92) gÆ\80dK³v\ 6ý»Ç6|\93z¥2£\99\83\f\1e\_¨gØ\88Z Â\1eª0)Ñh6G\17¯Eé\9eüY(tz¶R¶]úªÕkû^éâõ\18á¶ÌÃöVu÷¡l"C\v¼¨èÐoÑh:£{W%eêÞ¦C(R1W±Ê7\87q18\9c\84*~+ó"eM\13õ\83ª\91o¡(ç\9a\85\b\9d1äg\ 1и\16"$ô\b\ e É0<\818UÝË\17\84úg!QwìL9ºà<û\ 1É\f\15\86\14-\ê\80Þz© \ 3Ê\96i\13\f©Æb¥'S\99ßN¾Ì\8e.\9e\9a\b!mRØÃT\95HVÉ\83t¢p[tC»}¸È£D
-4\r\88.Ufi\9eA¿Cp\89\82sHFF_G\8fGwm·\ 4\1f\4`mî\84»\96ZGl'\80p\81c´Åü\87\f\1d50\ 42\93K\95ãã,/\vS 4ªÄÔ\9eð¾£\9bC\b¤t\19pÖ\17\90hw\81fN\T:ÁUvÿPj\ 6ò\8a9S\86/Ìg$\ eÙf\ 5Û¡på:\9f\86`¾\8d+X|\ 4\ 6\13\9b\97Êà-3¾\94;\82jÌhææ1^2sîF°\Å:/EuçéEíæVì+ý\808m1®O\ 3)î\8doIå^u|l\95^ügyÜ\94{\82óZ\13'\1atÑ\80fÊ©)#@x<Zª\92±\9cIJÄ÷*<[\84\1dÏë´ñ¯»×ϧ·Ócv\ 6çuR\ fn`B:ÐÊ!\96l\8e®S2\86\93_
-&4
-\9d\86õÓ=B\15pR3ù¬Ð¬¡S,\90¢\96÷c¾ÄÊéZ9\ 1\1cTüRXÌ\eRÓ³Zá?ÌÆ\92Yo´<HäN¾\1dôÜr\ 6%à¾ÙJ\ 4@\13É\pÖ1ÃÀ\efB\15\14C·{WÙU'ÏÁ\88µ<\11ñH\8cϼ\99càW¯ª\1fÙdÞbU.\97k;wíнÎ콦]vû¥oõÄ\8d÷#\8cZE\9a\9a,§ßé»t\83îNr]8®\83¾\19\f\vû¢qS!U£}Uǵãû\9e^UQu\ 6x=½êÑ`ð±l\99³\9b\87Û\ezÌ\8cÓ\89\91 \vîHNz9ðËúÀåÐã7Ñ\86Ñ ?ì·\86\83+\b\e¶\f=>9öOþ:ù\17Á5r¯endstream
-endobj
-1526 0 obj<</Type/Page/Parent 1369 0 R/Contents 1527 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1527 0 obj<</Filter/FlateDecode/Length 1779 >>stream
-x\ 1\9dX]OÛH\14}çW\õ\89JÁI MèJû\0KQ\91¶\1f«dÕ\17^&ö$\9ebϤ\1e\9b\90\7f¿çÞ\19;ÆDª´ (Ê|ܯsνÓ_gS\9aà{J\8bKº\9aSZ\9eM\92 ÍgÓdF³ë\ 5þ¾ÄO¥i#\v\1fù\93Áç·«³ñý\84>Òj\83\9bæ×ø##Ü2\99Ð*=§øµ7Ö\93ov;WÕô'}uïW?Ï&t1\9d$×80ا«g]aÛËËKÒûá3ãû\19M§ÁØÅå\9cÏîs\r\ fÃâe\<ï\1dã+^\1f='ã©Î5=|'\95e\95ö\9eÜF>ùñðuI^\1cH¡\8f4]D{W3ä\ 5\16áõ,¡ÏnOëÊí½±[Ú46\8dC\94Êf\94c©v\94é]á\ eäkµ.4/ð\8d\88ú\12çù\1e¬k\9bÉbwQ#×-U¹V¯\9dæs\8bD"¾A.kUë\8cÔÚ=ë\11}YÒ\ fc3øB¥JscµGÕ¶Æ×È#\ 25\15}Õõí÷%YUbññÜ$:ùCB\8e'd\856®"\8d+¢§Ó«ä\92=å\8c\98TS}Øi2\96ÜNW\8aã}|Oβ7¨k³Kè¦ðnDjè '[¿¨´¦R×¹Ëh} }nÒ\1c\1e \16ìTt8\;0_«'8½+\14\ÀöL#®\12QÆ{p%â\84çÖÕ\12R/\1fia´Ç¡¤\94óµÖ\96¶æ\19¿\15õê=°\19\811\82\9f¯îÿûËçoËÕ\92
-ç\9e\9a\1d»£-\970\e±\afCw@\10§±\9fq\ 4ç]ÑpÆ^\9dÐu*0ãâÎ\ 3(\1e¬\84\90*¯Ù4 ÍÑIÜÖõý%U\14o3\a\0zÚk,á_Ékp\14\9fã\92ÌY͹ÿ÷îû \\0Pe0Z'´â\92\18ø\v\88uµéÜ\a®¹\9a\85KU\ 1J¯®GÔØ\82IÔæ\ 6ç\e\8fê`o\ 1\10v\9e\ 6v<\fmÇTk\9f\10¢÷\r`áMÝ\bÀ< \17hW¹g\93Á\1f\ 5\b)ð¬\87 M\9eù\12y\e¢.Õ\ 1\95æB¤f]\1c\ 6Ñ\1aûS§L cc<B@\84ÅîB\v\14*VºZ÷©\85H÷®z\ 2y\ 2I9\rïâ6e\83\ 4èw´S\15Ð\f\80>¾\1f\96ö\87\14ò\15è\18\r\9cªÑiÜÒÞ \92ØÀ\15C\96\rW\88ÓÚ±{oj&\91î#£µÛ²wÉ\19Ý©ôI×\9eRe91\95kD@ VuÞøp\1c\88b\r\89tì\97¼Õ7RiåPéx<¦Ä·\16[\10ß5\15«"û%Ú\0¢ \80)c\ 4æu\81ä3\15$:&wä6\ 2K+\rØ!ÿ\ 1`%â\ 5·Cu\84^\8càÌ10AvU`{6¬®~A\15\13ú\ 6K\90²#\11cýø\86VôÄ\ 3¤C\
-\88=\86\1a\9aDæJ\ 5É{íI`É\0Uqg§å¬6ð\12z\8cT \1d8\ 4\8cjA\9d¼N\91¡ú\80ÏäòÔÙºr\ 5ã\1fñª\b\87\93\96\a6EØ\82£¸@3vù2H-[\95øOfòñ|\ 3À\8a\80*ÿÄ{E
-¡[\9bÊ\95-\93!ïǶÕÂI¿¤¹²[>Óg\r\9b\85Ô\82Ä" {\10P£\8f\1f\ 6\99\vEÇ\8a\ 5Ã\8bâ@n]s~\15ü.w\ 5\98s$aQ\f¢íº[\9d+T\1f\8a\ 6\141Ê"\10\13ú$&§Ó\8bé\aB\8b\0È_C\ e|Ëu!ÒÔµ\91Ø\8aú\98\18Ø\ 5BØÊ\10\ 3·\87`\Õ\r»\12F\88\ eÝ)*¬+£z\ 4?\9a\88¬ÍÍ6× t³«M\89N\8eüÃÐÀzé°Ãkk°
-
\1aÕ.u
\ 5!N
\ f\ eÉ
\11`
\f$ií¡e±j`æ
\12ï:
\7f\80Æ
\93\88\1a\92÷/i
\99è"Æ·Ð
\8duîe
\1a¹
\0mY
\99$l¤
\95¥sDë
\86YéeøÁpÓÖG=+S¨µ)
\18ô
\82Ѫ
\82\b\f\ 2=!<l
\12ÍsÇ
\8añÜ
\9fØÆÇ®
\11oiÅçÆ
\1e\98\ 3\e³mÂ4
\814
\0-kHÅÓ[q
\ 3¾ÇÈkGZt
\ 4h
\977)'
\80Û(
\94ýÀ
\81V<:¤
\8aC
\86S
\98_°:ð?Wp
\11Lß!
\90<a;
\17¬
\ 2\1d¥Ù´
\19À
\9exO
\8b\i^
\18±ÞHih
\7fqvæö·
\81@2Ü
\ 2\ 5\82bs
\9b\83\ 1\7f°iî¬ñÒ:9Ï=
\82âìIí
\86'"Po`×ö¶x
\a_Þko<
\ 6rq|¹N8Û´1
\85\8eÜ
\97,µ
\9d\9bE=(
\92ì?¥F
\834
\82Ó]ÿm
\9b.
\8fÕ¸©Ò¿
\1aæK/®
\10uÕ
\85\1d}Ð
\9bMÀ
\f$f]
\99l
\v!@ÿnóÍ
\92\19$d`Ükîà\.L
\18Òæ*
\914$
\1c§c»oû
\1eX Ø
\ra
\ f}*LQ´Æü
\96½é¤
\0\1aËìÀäɽ
\81J
\ 6ÄÏ]
\ 3Á
\82\ 4¡
\97àNñ
\9b3ÿ
\9bút
\13S/W
\ 3Ã
\82\97cæè
\82Õ>
\18\0¡3
\10ÚàY
\13:
\82p
\13\15h
\1fLÇ
\89v$/
\ 2\89\1fóQæG2þ
\ 6¬
\85\ 1q`V
\1c\12̹îá
\ 4\8c\88" Z
\88\19Ö1+ E
\18\f\99¡P!
\97'
\1dÀDÈ
\1dÉø
\92³
\14ãÎN¶èãδÍê3
\14\1a3û(>!ñ
\1c\96÷åù
\18Ãù8
\87ôzvÿøð<Çû
\ 6Y
\82Ä9+Ò9¾?ýFü
\90ô§Ç®å;Hýà¡ØªU+üí
\ 31p
\9f\1f\13^ëRFlÈ
\93Þ
\1e\1fIãûëèït
\8e×ùõ
\15Í?È
\eqyóåö
\86¾W
\8e\a]ºsiS"
\9d¢
\v\1cÎE»ýb1á'ûÿ
\7fÓò+÷w¯ØÙb
\96,æ×ø
\ f\ 2XZLÙ
\81O«³
\7fÎþ
\ 3Qü
\87Âendstream
-endobj
-1528 0 obj<</Type/Page/Parent 1369 0 R/Contents 1529 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 825 0 R>>endobj
-1529 0 obj<</Filter/FlateDecode/Length 1960 >>stream
-x\ 1\8dXQsÛ6\12~ׯØé\932cÑ\92,KòÍô!¾Ä×ÎÄIï¬NÚ\19¿@$d¡&\ 1\96\0-ë~ý}» (\85ñM;M\1d\13$v\17û}ûí"\7f\8ef4Å\7f3ZÍéjIy5\9afS¬ô?þó¯Ñl:Ϧt=_eKªh¶Xf7ÝSI\ f£óg¼½Yã«ø-¿\85!\9a/¯eçzÖ?ô¯®\17Ù\1aFWüÅ\\1eÒ«Å*[Ðb½â=ø¿Ñ´\eÝnF\97w\v\9aÍh³CÔËõ\8a6\85\ 4;¥M>¾\7f ¯Æ\16îà)/\8d¶ÁS¥\8eÔzMÚæͱ\ eº Zy\7fpMáIy<4\81Ü\8e\14å{U\96Úê'}Ùh_;\8bMª\r{X1¹
-ÆYª\¡Ëw\9b?FS\9aÌ®²9|\8f\1fÇ*{ÎTF\9f7\9fî_f\8fïÈ5¤Jgõ\ 5ÿ\96\97Z5\14ôk \1f\1ac\9f<í°ìMU\97º\ f\85¶Ê#²oÝeô36í][\16´Õ8¿*Í\7fu1ð\1fö*ÐÁ\84=!Tz¸¿¥ºqÁå®\94\85tX2|VÏ^Ü\8bFDøØê\80<<\93Æn,\19Ku©ðS¢E\90}Ê.hÛ\ 6².\f|o\1dÜò\ 6\18óªú._\8dþ³ÕÁgݶù\12\80"e_\91Ó\93ñ> À\ 3\18\ 3+$¢_\84m\9co\ f¤¶Zv\ 5Ýà\83íQ\9câcÄíÏ\8cq4\aG\auôÿ`· ô$ù}oéþÃ\82\8dí\19r\8eú×Ï?ÿóË\87\8fé±ÏVÄ*£Í\1eÖñçÙº\83e¾ð¦Ï\e±!Ǻ¼Ë;6NVÙ\9ak\8991_®\88½\9f¸*/{Òl`¥÷\ 5ó¹³\0\85É\19\1cµu\8dSå`Ä\ 5)\8b%NW\8a\82±\ 3rM\v:ÆOg\vd"hß\ 5\1a£æxyÏ\0,\ 5³\96m\bY®ãF>øç_?}bö7*Gr\81\ 2|úº4\81\83\ 1Y+Éèõ\92¶Xúðñ\81\9eõ\11\1e\Ê:)ö49«\89\1f*õdò\1fh-NèE\95æ\10\99ľ-\ 3Ê\80f°Ç¡K9 \ú¤ì½²ÿ?³ Å7\92;\99¯³Ù\rM®çÐ\12äÿwצÂiô\8eÙî\ 4¸_ºÊ§\8fQ\f¸¦qp¨\82°?0Ø?}ùºù\ 2@ \ 5¹\14=\97kåÀÌB\aeJOØÄñ\1aku3È1\97\13×x·\9cB>\93¥\9bkÔ§\9e\80·/&g\12äÏ4» ³/À.pÁ#6OWÙ«ÀÑ-Ð\ 2:øÝö+ Z\ eeI$/Ö5«\16ãÜ\13n(3ïËòä\12\1f\9e\ 5#Õ·C2Ü\81\ f\rIìc³\8e rOßåÀ\83¿\ e¢z¦%É3\8aø\884î\1480\14\853§Iº÷ê\ 5\92\ 2F0ñ\10WѸºfî$áªÀi\91ÔN$ð¹¨\84) \8cÛlJ\95±-Ó\fO1Üä8 ¸¨\11\ 3*b¢BÐU\8d¾Á\85\88ãò\vv\83º)\1a\ 3\a(UÛ1ã[i\92ètq![â\11@÷\89öAmKã\91¼\ 1YØô\99µÖóÑÐ\87T¾\87·ÜÕÇ¡,¥Ð\13¯$ô{\937λ]`*\ 3\ f\11\8c\94å\13èÌ\ 2\89\r\bp\1eñ]B\8a3Å^Ù?ÒÌq\9dÀ\e\ 4\9d ì\14§Ò
-4\95D\1cX¦xo£\9f\f\94è\bß\r\9a\82\14\17$.\ 5ç$+\16I\91\94\v3Om'Ù\87ê\ e»\r£ O@\86ë,6%ñªú#u\8c s\18\e\r\ 12\ 54\136¥Vh\87B&\13\8fÚèÊáÕ·E185\97+4¢p \12Ú`\9f¹¾CöyNR|\96\188\85®\80öÆ\9a Ë£XPôä\A¦Ð\8a\ fÄD\91\94\f\1c\9fpè=ôÎÑê|\9bïÓ¤3$Ç\ 6PÄÊe\{,\80\ 4T\16ó\ 4Ø-íFF\0Õ¸6¶\1aÄê[Ñ\8b4Iݼv.N\9d\89-r¹Xà;¤5·\8f\84"ü\80\¨¢\ 64©L\10å\aGÐR¢"ó¼Ò%W\90\8cEp64}\v\8b\9cñònJ7qþ\9bÌ\17q¤`\872ÔQ©_â\8c6¦\1f»\1e<\8f\9f\8f\8d\r\98îD³Ïm̦±k¤\ 3ým\13§9\14#\ 6÷\9dÛ^ÝèAU[\15É\ 6íìú¹\94Gï¦ËMGUN)\92R:÷ÜÖý\87iº\ 2{\15Ï\88\-¥ËÕPîýÑC·Hå9pÄÄE·:WðÄ\ 3Îo'¨Xo^x u\16Ã.ôÅâ\aÖÐØ,ìöqöÓ@T3&ååݼ\etÆé\ 4\ 3®ö\99?M=ã\13ï¸\ 6\1a\fxp\b\84,4\c\18\19\92ö'Ä\80J»81\bÝVÎ\10O\b\1dß\ 5ì®Ôs¯\1e\95ye½äìôq¿U\86\16= \0\12,w2²\9cM,|$n쪿?\9cX\ fT:\99f\80T\amÇÚ¿ ì\9bùKÕñwòWµ>pµz-ã\18ëk¥^MÕVdÛjËQïNu©Á]4°\86\ e{\93ï#lË\ 4\eN\81«D\LÔ\1dSTUFç4tã2Ã\92Ȳ>\88\11\9fq\bÝá¿<0µâ\12J¼0\91X2$¦\91\ 5áÉÅëqüøN²ÁI\8eAô\84J 9UÞ9\85`a\1d+)N\8f\\13\8cö04\جG\bhÒÉ \ñ<_\1cv\8d«zl\19íÄ\10\9e\9dp_ó¬Á<\9b²õ8(à¯'<\ 4\ 3\8dãÑ?\964ß\1e\ 6\9e\85 U\8d1C\92\83é½j\83Ü\18\99®q-M\9eÝ\88.s=Z¤h!î\8a<\18ñ_(^t&\ 5\8c\ 3\94\1dÙæbçaÿq̬ýnÌË]µ5¶óÅ]íñÝ°¤6Àk\8b)\84\-ó,s¸Àïl\1d¿Ç¶Ó7\15.\8e7º\1a\b\85{\17WnÓå\ 1»\91ÆBÆz¼Ae\ f³²o´\f8;óÔ6ñ\ 2];ïÍÖàna\90Sö\95f\10äé\r·r\85»¼[w\14\9e-ñ\8f\ 1ë+Z^w\92ýðþþö=ýÒ¸?0\92Ñ\a\97·\15ÔM|q4\93´a²\9a¢c\14cHý"#\88\fm\eü#\ 1k2çÇ{Ï\9eç\\87f]\97î\88\e»L)\f\16Vp{\92Ç~k¬}¡\ 5{[¬\16Ùj¹\8eWÀÕ\9c\97>nFÿ\1eý\ f\86\18°\9cendstream
-endobj
-1530 0 obj<</Type/Page/Parent 1369 0 R/Contents 1531 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 830 0 R>>endobj
-1531 0 obj<</Filter/FlateDecode/Length 1477 >>stream
-x\ 1ÅWMoÛF\10½ûW\f|r\83\8a\16%YR
-ä`ÇIk ¶ÒJFP \80±"\97\12\1d\92«ì.%ëß÷ÍîR\12i\1f\8a\0E\938\90ÌÝùxóæÍðûYL}ü\8di2 á\98\92ò¬\1fõitu\15\8dh4\9dàó\0?ZRÆ\ fpôðß\9f¿\9e\8d\861\8eÅ\831\8e\944\9a\f¢qøVÐÜ\19\8aãA4ågC>è¾\1c\1eõ\87ì©íãfqvùù=Å#Zd\bk<Å\87Ô9íÓ"¹\88ûÑU\14Gôh$ÝÏék^¥jgèaAÂ\90¨HÔv-+\9b'Âæª"#õVê\9f\16Ï0Êî½ÑÞ`\ 2£\17\8bun¨\94vRÊ«*¶Ò\10®\93HÓ\9c¯\eR\99ûE¦\8aBíòjE\e¡\ 5®HmpÅ=3å2JT\95Q\96\17ò\17ïªOï\eO#¤\r_\14þÈ*Ñû\8d\85\1dcvJ§\86>Ð_Òðµ>õ\90Ýôô´\91Is»Ç¡c&o\9ck¬\85S8~þ íÍÝlþT!Ü'\95=}¹ýxþ\1a\87±ÇA¢¼\ 2?v§h'ö.ï<e\1c³=g½[\ 3%©Iiª\94%A5ÂaË\80<=ä\82\ f¹Æ}C[Qäi8\1dѬ\92|ÁaÛ$:\8c\ 6ìZËM±\a\92\99Ò¥¯ØF«-\§\O\80m\9b\12t
-[JcÄÊUD«\ 4_~vÅP.Lçì¹6\88\14áI\11w¢R\19\ 5ï «+Ê\ 2µ\ 6}ª\9e\81Gï\88\19\81\93ü\85\8b\9a¯jíãÂ\ 3¦F&\12\8b\ fÂ\12B\ 6Ü¡>Z
-Ã|\99\8br)h\97\17\ 5\9eÁ7®t2î\96JÐRjÓF´ùåá0ç\91{.jY*+\9bJg"/\10\99B\83>K\17\9aÃÚ\15§ãùu©\10\1d:\ 6ÿ
-\10ºB\9e[yÈ>\94¿i$àá\8az\0\ 3\18§\11}\ 5+@\ 229Br°7!w\9c\17*ùFªFE2øÂ\8dDj+ÐBU].\99Yè\1f¤Âuow°°V\96\eËè£\ 4\ eY-M]Xî?xÔĦaÙt«û\b\89pý{RÓ\8eñT\81\95Z~¯s&¿Ë\ 5P.]F\16x \9dÒc\95¿\90H\12UW¾èL\ 3vÌ\8c\83éð¨\93o\ 2XagÉÁ!)XÝh¹EG!Ü\153e¹'OV\90©:\95²¤ÈqÌgsª\84='µè\19'\81\83\88îÅ7\19\b' c\r\8cmk\10Æ\ 3ISU\ 2q\ eôß\8a¡\13BȨ\83\11äoËàÿ \82Ç\14ÞPAèé·\95Võ\86õÏ©\13â\ 6\0þ\92S¿7n5\84m:ê\ 3½{\rQ£\93\ø\ 6\8dówç\10ÍU]rUQàó\8e¥sÏÖDð\1dã\84\ 1§@\b\81^a\12ù¸Xg¬\ 6² 2(\rõ\10û\ e\99D%\985P \18à\9b8âÉ\aþ¥
-òºËÁÅ\16\8d\1e\16Ý~¸C\1du
-/¬\\8eºaöÁ(Cç,{\ 1óÃ\86*)1 ðøYÁ8;n\8fÜ\ e³"ZpCä\87i\16DÞE\b9÷ô1nFbÓè52<{ËökpjÃrÏQÌÝTG\ 3Tb\85|ÀRÀV\8a\ 4\10 uÛÚ\81ò4?\aÐåç$ì\ 5½I4\8d)\ eAÿ=\18O¨M\ 4÷ü\10õ\83|±?\13\9a\83#ú=¯ê\172{\ 3±"ù\82±`\9b]à*\98¿ l
-\8e")õ4a\1e?=\ß\7f¢Þ3ÝÎî¯ï\1eÜWï±\1d\12\16\9fôâ\8dxz\83i\14¿?âø_\v\1eÓÓ3Ȫ\ e¬Øfò\15\93·æ¹_%\9eàM)Ö(þRò¬9j;D\11\12ÈØ\85\81Ö¬r·\1f\ 3\8f\9aÛ^J;\ e\7f\X½[PÉ\90©\935ï\19FZËÜ\82tb\ ft»\8bYKÌpÏz_\13¬ÈÍúØpäRÚäÒ\97Ô\9fiVÌ\v\82&è}·\ 3¯Û£\16\8dåqcß\8fw·®Õ\1a\18xÂ`\ fcL=g\83Â\87ÖD\9fa `Ç°\024'®.±\ fw\90\9aa\ 1ÞærGÉZlxöºÓ¸ÿÛìëb\ 6õ\81ò$¼í\86v8îÞí\893\8cècØ\88\ ecç\aWî°`\9d°\81wõT\96\18¹<è±]\81\18\18É\98 ¡Áx
-_¶ºl\89ñ pÜx6v_\1c;_t\ 5hǵD\9dQßc\ fº
-\ 5-ô\ 3\9dy'\83AßÉm
-ºM\83áÎ\9a\9dÁm©ªÂ
-\8bx;¸\87M\1fç\ fsÁm/È µM\9dçùý\rùy\7fÚ\1aÇZL\ 3çâ1ÞæC¼\r9-\98_ßß\Ó\17ÜÊw«\127\83ÜjÆAô\9aã½I\1fï!acø\91\97¦Ñd\14MÆS¼\87ÁÊdÈÆ?-Îþ8û\a¤:\83ùendstream
-endobj
-1532 0 obj<</Type/Page/Parent 1369 0 R/Contents 1533 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1533 0 obj<</Filter/FlateDecode/Length 1198 >>stream
-x\ 1\9dV[SÛF\14~çW\9c\81>Ð\99H²%Ç\97´é\f $}\b6-Êd:¡ÓYKk¤DÚu´+\eÿû~{\91±\rî%0\80\aiÏí»\9cývÒ§\1e¾û4\8a)\19RV\9fôÂ\1e\r&I8¦Áx\84Ï1~\1aN\vû \19\8c\9e\7f\10'\830~îÄhòôÀ\9bô$z7 ~\9fÒ\ 5\92\ fÇ#JsBâ^\8fÒì<-JE5×\85Ì©\14+Y¸"\96ç¥.¥ ¹ ] \1eYUr]\8a{Z²\86ámÞ(ÒÒ>Sõ<̤XТ¬ø«\1fÓ/H×£\89Ë\16Ä\83p\80|çgg´¬8S\1cí-xÓ\1d¾eõ\9cÑÍå[úuö)\9dQV°%\82SÅÌïR\90\89×£ ßCc.\8c6\ 5g(\88g¶Ä\85l¨\96\18ZÎ5++upâó}%ç¬úóàß俸È\9aÍR£/¥Ö²É\15½¦?øa\90îmų¶)õ\ 6/µ\8a7Gbæ²f(½\92÷Rüs¼\9f\88 \9aÝRÅW¼2ÃN\12êÚA\97\rÏd]s\91óüH*©üÙ×8êß\89ûáÐÌêóô*ý0{?\9b\1eë}Ét\81N"%k¾.XãRD\ 6ÅHm\94æõ\91\9c\rg9IQ\99)lܨv \16Ä6;\ 6\80q\ 2D\83\8fÅÌ\93\f´Á ¿\12£\8f¢| \97\8aX\96ÉVh\12\9c\ 3\ 3¼3ç\94!\93æ¹\8dÀYVØ\99¿ ¦hÍ«Êü5±Í\93®Ò\ 4²@ç×·ô©\14¹\+\9a¦Ql\98^ãRð\90Ò=:+Ý´\99nÁ\1e;îomÙð<4á¢w\93f\82xìX\f\1a¾\f\93°\1fÒGÀoYrк{ïÂ\96ºmJ\17L£\82\r-\e¹*s\8eÞ\vÌ\9crdË´l6¤
-ÙVùNÓ\87\85~(E»\1d\96a\ 5\13ù\96¥¾m Hz³,3f¹d\84\8b\84\19ÏM\7ffTv FÅ`\9d\1f¸ïõ©`;Ê\9fÙV`\b\14(\8aæ`È\9c©\82\82\9c"ÓCtj\84Pæ§\14ÔÔ}îàð¢}\feU\96ÿÛ{DWÂÈÿÆkò\15ý¼\ÿâ\83vì~\f
-\ 3òq\ 3öý¡\ fð64òhÇ!í\11\8a®\1d\97èÂqö8\rÀ5\18\9e\81¥á\8eZN7ë\82\vrÖ\aÚa\80¹!3#o\1cpSÝ\18\83kBúý\89[\ 6pËÀ¹%0íFí)°k\84ß\ 1í\82U(Ø`\9bóU$Z¨ìÔ+ç/\ 1ß?½»û¡Ëx\fÜàÿ\9cÙÃÎ0h/\9bIeqÁÊ2»+Hì.\ 1.Ã\90ÞJ\91UÂ\96z\ 6\80\91³@7c¯:3áEÅ\1fÊyűñ\18¼\19>#\97¼\81Ë\0\800´\13Ãb\86\85u:¾Õ\10ZÀ*)8\81è+Ð2 ©$µäY \9d1·\84\0£q.\0)!;cx\90\18¢;\vÛs\ 3\15ÒNÐn\9a\1e?\97B\81 4\9d¥[¿\10\[Ï´+ÅÖQf\½°]\18={\83±\16\87®\8cÝ\80UÎv}Õ.¢I\17\98}êó¡y\90¨~ä\9eË0o5\96/v\0\9c¾f_¹\8df-ß_\bv\ 4áN¬\8b\12\ 6\8d1TÒØ\ fZÇ\1c\ e\9aÛ9dºQ\9a\99\ 5\1e¹\ 2=[3oº\ 1®>}J&\ eÇ»x8²W\81G·µÏ\83\97±»\17\\88\ 3\8d&áC4Àej»±½¶j^Ï¡+Ǭýd¸\ eåçG3u\13C&VÁ\9d\ 4\8a_aÄÒ\98éNgÓ\94ºÜ\97î\1e\0¢vrþ/iÇ~\ 2ýd\1c\8e' \rû~ùÜ^\¿¹ \9bF~ÁÒ K\99µ¸\1a¸\19ZXûCÜ Ç \ 5£\1en_[û2BY\94÷f\a89\18«A\13-\0\12\1aËÂÞ¢\1c\b&Î`4\bGÃ1ä\86\18£\81ù×UzòÛÉß®\87%8endstream
-endobj
-1534 0 obj<</Type/Page/Parent 1369 0 R/Contents 1535 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 833 0 R>>endobj
-1535 0 obj<</Filter/FlateDecode/Length 1701 >>stream
-x\ 1\95WMoÛ8\10½çW\frr\ 1ǵ\1d×N÷\96\ 6I7@\91v\e·ÝC.´DGÜR¤JRñúßï\eR\92e%)°(\1aØ\165\9fï½\19þ:\99Ñ\14ÿf´\9aÓù\92²òd:\99â\97îÏ×\8f'óåjò\9e\16ïg\93%\954¿XMVÍ7M÷'ýï%\9dÏ\16\93Yïiÿ;\9e.\97\9d%~\17nh±¼\80Ý\ 5¬Ni\8eÿNÒ6>8\9fÎøññ\83\ fë\93·7ïi>¥õ\16q/W\17´Îc¸ø%\e]\15¢
-ÒÑl6¡ow·\7fÓ\17éJå½²\86>¨àI\98\9c~(\93Û\9d§»õ\9bõ?'S:\9b/`dt\99eÒ{º²&8«é\93òÁó\ 1ö7[%\7fgç\8bÉ\9c\ fÃ\ 1\|Wr§Ìc´\9a\15Â<ò\97è·êüzª=ÿ\1c
-Ùó8\9dD\9f^fµSaO¹\12Ú>6þ\16\88¿ñ7_¡8ðw'w¤L4r/Ê\8dàRÁ\84\93Z
-/IùøHl\94fk[ëzYR¦\954H>XÄ"ù¤rdDPO\92º\b¼\f\ 1qÆ\10P\93ÙyJ4\ 5F\eû/¿þ\84\84c¶¥ÍÕv\1f\9dÖ&\97Nï_J}Ò\16x\99Ò½³\81Ý\8b\80?\b¹\r\17\1f3áä¶Öd,\9eYÊlY9\8bÎÅh\ fAÚmt\19K\X\1f(\15\ 3\ 6\m\f\87`Í8\ 6è\83Òºqßæb7r\ f¯ZG#[¥%\1dú\ 4\vZr\19\11\9dhì\8a¼T\ 68p" ¢\990\88$\f\93º5ÍéÔ\12F\98ØX\94\96;\9e˨u '¡kIMø\95p¢\94\8cÓ\84¯yÓï\11\19øÎ4ùºª¬\véi\8b\86\11\15ÂÓFJC\11k2§-j\94\ e\81Â-dÚl·B{94\81Ú\1e¿0
-®\1e\9e\1a\93·T
-£ªZ\ 3%à\ e\ 2?TÊG¸ÕÎ \ 2<Û\0½)ËX\99!]"ÎA\97ù\84þ´»\ eD±ú\1dø`¦¹/\0\85ã°\99¢\r\ fn\901ú\v&Ñ\ 2ê\90\90\8dxÑz-Ïð5ûI;\15\8aX|§\1e\8b@¥eÐoê\108\1182 \b÷\1e-Í\95\93\19z»grµ\11à\ 5\13dÎ1ô\89à\98.\1a,Aßðê·»+ªD(&ô£@K¸Ù¥45U¶ògu5æØ\10\f\1câQÊgÙõù\8b³¨gPrÀø\11\81¨\88&2\ 4A[\ 4]¶°aó-øÚ&¯\99G\eÇÄ¥º\8aQ\18ëJ¡S\8a Qã§Q\18&ò\98\8b\91ªÔ×\92HÉ\1dX\ 3\9c!SA\ 6\\ fb\ 3Âؤ_\83\8a\ 4[\ 1%îg*ÕÛ\9bCz÷\8d¬\1d·q4¡«CM\10w4\ eºìm\8dpàØKf\8dÃßÔ.?~V¸\83®\ e\8c?;zYç\8a\15mx\8eåahöóÎHç\vU\r\ e?/÷³V¾â¦\ 5\Ì+\13\fA \\ 2;@¯t\ e\b*1nÄ£¤KÈø¯Zz`\8e* \fØį¨\ f\8ba!uÎ\14c|%´\83B\1ce\ f\9a¢ª¤p¤\928Â\15>§·ù-P岯ccF¯hñ°+TVðq\ 5ÌCÉsf($\12TE G/Æ'ù\90\17¢)sL\ 2t\ 2JÓ¨\11 \82\83¨0å\1e\93n@Ì^
-oB\11ÓÍÜ\89y\98³mm2\16"1\94ôÈõ\96¸Q:\12wð^P¥Ä,H^¬Ñ{\1e~<c\12¶Æì=µû]ÇËË\94ÞÛ\9b\83è6Â\11ûÈ\rÁÀvH\11æ\9a*\91Æ\84\0G\aMá6À·\85b3®ÍoÅñü°K$iz\19\8f=!\8cLJ\ 3ï¥DN;D\9f\ e Ý\ 2ó \1a\1d\16â\90\97Z³ÙÈÉÂ\92Ý\99TÁGÈ\9f\89-å\ eA=9ÄAÎ\ 6c-1\19I7Ã\ e»HI\7f\1c\17\9aóhV\82Óûë¯ß¯¿><DØ>\8c>±Ö°\9d\877\83È{/Aq±&&\9bÝðL\86\86Ù2\10\98\ 42|¸ý|\1f-·\91%ñC\9b\9e¤\e\ fq8¯Ø\8a\91ÆTûëHüuW\f¹ÙÕ\8fû\9aV\93AÜG9¿â2\97>sªJ\e[`¹'\95\ 3\85ØÁø3gØÔ/©?йÅ\14Ë\9b\9d\91öôâãõ\15J±U,-ý\14*áýκ\9cr\ 1iÆ^ùðæH²\9fÑåJÛç+FC\18 \1fb\90ö 4!ñ¹ÕÓ¶û·I²^]\88~¿\ fÁ,ö1æX*[»\ 4\8d^^}Ú1}`X\87U_ OV@0\ fÝoµ¡W¾Ók\0fo\8d\1c\0t4Ì\ e4I\81µFF´\16?%}~\99Ý£\96\9a\9dÖ$\85a*"Ç´ôÅ^Gîñ¸JíC\1dbN8\84³ÎK½¥\87QÜ?\1a\85Pq\97ìå\10]äÊWZ@ÈÚaÀ\ 2À«·\16X{#®\9aE$\82\8bãÀnÖSÀNÌá9²lÝÎ(ìÊ,\96\9bX\80\9eß\88J\86\15j\ 3|\b\8fý\88o+qù\88\\85Çî*Å6\8frmg
-¶øè\ 4\88±ä¤E\15k\1c_\ eâ2Ðs+\9e\84ÒbÃK\1f\ f\82\14nêÍakqÖ>[¹9ñ ]â\82Â\9bKSÍ\18l\ 3ó8Úù.ÉF\ 5\96òJ7\18¾\ e¦;Àq\ 6\ 3.¶\8dãT\9bÑ\92¨ÜÔ\16cyXÛâÆ%\ 6a\9b\957éYì\18W\12ã¯\999\17\87ËÁ9_¶q\9f¼ú\7f\17ezír¼X-&«å\ 5®â0ºzÇÉ]¯Oþ:ù\ f\14ü
-£endstream
-endobj
-1536 0 obj<</Type/Page/Parent 1369 0 R/Contents 1537 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1537 0 obj<</Filter/FlateDecode/Length 1810 >>stream
-x\ 1\8dXßSÛ8\10~ç¯ØÉ\véL\b ¤ ½\97\e pÃMK¹\92kï\81\17Å\96\89\8amù$\99\90ûëï[Évl\87þ\98¶\8c]É«Ýo¿ývÅ¿\aS\9aàÏ\94\16't:§(;\98\8c'4?\9d\8fç4;[àù\ 4ÿ\8c¤Ä/Ì&§x}eaúöÝø¬¿p±<8¾\9eÑtJË\ 4\87ÌÏ\16´\8c \aL&´\8c\86˵\84aeIät»¤h79E:ËD\1e\93[\vG\e\95¦´Ñæ OnM÷"[ ì\8eI¤©Þ\90 ÒJ\13ÖÎãLåÊ:#\9c6T\18õ¬Rù(ß,¿\1dLèhz:>ÁÙÃHç¹\8c\9c\84}\8dÏ\83AD8\9e\11,=Ã\98°d´v¼\1eEþ(á\89$x&\8d]«\82tB ,[Ò94\9c\12\94êH¤\88àú>,m\93\19iÓ;ÛÈL;I\99.svÀï\87«Á\87\18\ eË1-×\80\83\11y\16*\15«T²?\850\8eÏ\85#lòøz^A:¤{\19¥j\15þ·\ 6zÈ`Z\19\95F¹-aÙ\b³¥\rÞ\9c\84ÏÛ\9e[\7f" Ù\96ÎÓTYÄ\14Ω¼ZJ\91\8dZÎ$Fg\1e\8fL¨¼Ú\93¸\82¬rr\1c¼xGSd\99Ó}t:\ 3¬\0}:\1dÏÆôEÉ\8dÊ\1f=D\0\87be\90 \r×
-i2eÒ¹íF\ 2\e'\v\10\116À\15\1c¬LL«Ò9ø \90\1a<Þ6x\fîv¶\ 6]cÃêË1]¦*zbW`\ 66-\fÞ,\95\ 5\92\19+\91êG¤ö\ 5k \ 5+±\833]\9d×¢SËsOKì ¿ooþ |©±d¾t"æ<W\9câ8be\8bTlÁ \80Ê&\12m2ú-¸_ÇÆXÌ\ 3\9e\83û«Ï_®>?<xö?\f?hÄ\92\8bL>¼éÅÜúè«/¶`ó¤Æ+\18êã\14 ¥[é.n>Ý{Ëu(\81¬¡TFÔ³Æî|Ç\96÷\94]¬\ry\94Bõ®5\7fÔB\15Åæ\93ë©\ 2ú¡Þ{'ubþÎ\91±´\91Q\85C]\11d\81ób\99;\95lù\99q®ðË\ 17\ 4e\vÜK\9c\15\92Ðóé\8f«K@\91(\99Æ\9d\10
-a-\ 4*¦X8±\12\169ð\85ÐBþÆW.W1âw\90\98^0¹#\11¥dË¢Ðƽ\12\8d\95^\8eÂ
-´ÚËé0\11©ô`Wù\88ª¢\90ç\1c«V\10Ñ\15@ðú
-=áÐ!\11»tµ8V\våà
-b¸Õ¹ì1jØð¼Í}¯Óí#`~p]B¼/uî\8cN\a}P\96ð¡m! Û)\86X% ´)w>3&h«?¾\96\ e%í\88¬¦\9bC\9c\14ò\r'8¼\8d@6\19\82Ö\19½\8c
-ô\9e]å%ÊX·\930èV\900HW#aÓ1]³Í»\9dÆt³ÅIç\16çÕÊ:\10W\80\19\rÕ\8f\1f\8d.\8bcÐ\ 5$\ 2#\v\96wßê$Ú\9e1Ò\16:\8f\99\9c\ 3#E<\18Ñ\80U[ò\83|\81 ãñ\a\ 1\ 5\8bè\1d\b,\13E\ 1=Ym+\91V¹ïwnm¤$\99Ê\f°2\aÎ/?\84öÉ \1d\9aÃ\11\1dnð\83½:|9¤\95r¶¶åM`[\ fÆ®ã0ÙB<è\9c\8f?\ 4ÝZk»Y\9b¦ÇT¯|+%\ fU@÷\15vÖäìÂ?\1c¡\82y0\b\91sHèi¾uv\ e®¶@eCn¼o-_}³÷\184^´Ô©cªÃ!\94\96\9fdºn\ f[\85¶+T\85IÄ\1fñê\17a¢hNß\rQCò\1f2UÐ<!m¾6^\8d¹\97§\8eÛ-\ 4\18¥\86¡» ûõzÎ<È·aëÎ\16æ\f0$Öù¡c\9e@;ynÂ\b\87èÀ\ 5V|\ve\8b0&U½½Îæ°"y?\85}ð\ 6a
-Û\93¡0^\1d_·ì%\10\9c^Ô@ÙËOï\14Ö\88\1cy)½ì3\ 4»\90l#\98\85\91\89zÙ\91\89u~?\8a{d\ 23\ 3\9dG\91´vÏϪ¥\ 3\8cJl<'ûð^\94\18vyÜXsá¢ý©Ð4¼\86A¬\w\ôó/<c\ e\v? ª¨LEEhß×<{xì\b¥\87¤@]Pö=\84~§\e\f}&F£`\89`fÐ {Ú\80WXÝ%@ciÈ4´Yáx\ fc\98 4úEªE\·\97½<.ÅS_;>ÕSõ\1ej¬KÂAÑ0íIz\18nÖ
-\1cª\80ȤÈ};Ï=\1d\1fÞx§\8cäö\89\12dþ\85P\83´u\83é\85\ fh×â¹\1e\bn\97{n\7fÚó\r¢È´¯\86õ\r,àæb\ 1\rFçH\97Æ¢\ 5iTÃ\13î6\ e\97\ 3ý\84\94ãEÐ\7fÒè\11Õîó[Ï\9b\16\vÇôQ³ºH\87\9b\80¿m0Mcp\8d\ae¤c|ë@ˬ»ï#ô\80W\90Â\9ft²\931½oÆï»\9f¶³z/ú-ÏÌáºÖÜwÈ\86\v\ fpDä\e\r¢W\8d;¨\ 3`éĵD\1c¾Ýò2\83ÖZÅ8Ü\83\84£f6ø½a¶©Ûÿ\16øZ\99&#ð\100ào]Ñ»¾^OÔÜÞ\9bóÐ!sص\b§Z\ f#à^ò?\7fíe¿Õ\aPÑÖmÓúÒö\83\88(B;ç+_«\1d\93|\11\11O6\1c\9fåÁ\98G\16_è<\8cþÂð2j&\1e\\87W(¿Ð¶;#T\15]m¿¯:\9c \\141tÔÐì m'¥ª;D\916ìLûÖÑÞ\eÔ\86U\ 2\ 5\89>\ 5¤_Ié\1eÒ*Çý\ 4³NÜ\ 3|Øa\87¿\91q\eòºXÃÊ¿\eðîøØë[åF\97\18³*»U=\9cUÃót\8eßl\9c\9dÒ|á/\97÷ç\1f/ÎéÎèohªô^G%ÏG¡ÐØÑ£zûÑbò®\99\ 6\7fýB;[ÌÆ\8bù\19®Ä\18\r\17s6yµ<øëà\7f\1aU\7f\1fendstream
-endobj
-1538 0 obj<</Type/Page/Parent 1369 0 R/Contents 1539 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1539 0 obj<</Filter/FlateDecode/Length 1510 >>stream
-x\ 1\9dWÁrÛ6\10½û+vt\92glY\92eÉéÍ©ëi&\8dÝÖê´\a_ \12\14\11\93\0\ 3\90¦õ÷y\vB\12\rÚ\97NÆ\1aF\ 4vßî¾}»úq2£)þÍh5§Ë%%åÉt2¥åò\12\9f\8bë\15>çø³\922ÿb~9\9b,â\17\9f×'\17w\v\9aÍh\9dÁÖòzEë\94`g:¥u2~\14åF\90Ûé:\97N9é\88\1f$)\9dK«j\99R%m©\9cSF;Ê\8c¥û5mvpZ7V+½%áHhþöæ×?ø2ýsÿå¿Þ-*M*O×ßO¦t>»\9cÌá~\ç¢&AZ¶\94©BRb¥`_0Ü\ 12\1a¦\94#\97\v\84×\9a¦Há2\91êENØÖÅÝ'\9a!\12\ eéür\81°au6\9b\Mè\9bIU¶cdÞ4\10§
-Wkcw=T®³rLÌù|5Y²\95è¾Ðéû\ 6\bð\10»Se\85\bð\94äBoÙ/'!U®*Ä.Ê\9fâ°ø¥(Ì\966æõ,J\f{K
-\95<\a;\1dÊ«P¾1=|}\8b{L\9b¦®\8d\9eÐï¦\95/Ò\9e±\ 3¤\8cÓV¨RÕ¢ö\95\v\19o\9c´H»LQgC\e\9ckù¤ÉÎPÄ\94DáL\84HéZZ\91tVZUç>\ 2W㸰i(×\91#T
-÷Ì\8cHñTU\1c\86Éèöá\91D][\ 5´\9eb(?£`\10ì\13H"·µx\96\1a,ä\ 3Ib\1a]ûº£ÚóeWí/\99GR +J \8cÔef¾Ï\95\ 6Ã\92\82\SUÆÖqÚ\98[²fÿÝ\et\99ï\90q\ 6<\1e̱kÆìH#¦\1d\a!ËÊßãëN&\rºä\r±¨UEA\99PE\14\92O\9eÐ\9d¿cIG7I"\9d£[©\95LG1Ð\12ïĶc}/ú5h\94)ë\0%÷\1¤M\8d¾å\ 6Fv\81xè(\1d\9aïèÓa\86\81Ð×èÍBÁ6JÇ\8cq(D¨4\ 4\aé\7f\1a«º»³EG"3Q¨ÒZô]\80\ e+\ 3(\fßÊ\92\11WÖ$2mÀÂD\84Ä\81\18L T¥\1c\14ÉW¤¹\96qj\9eN'´f\91(¥\806ù°w¦\81\19MF\17»\bS)´ª\9a\ 2:ÃÉ!\14ÎJp\84ã»ØZÓT\17±\90\99#\97\9dO\ 2À\fÚ68F[4À¼\83@Y\90þG\ 3Á¤V\16qå!\ ep Uå^cç\fï\8d#\ fÞ\vçÁf.Ü;\94\17½k\84\86bíy\1aKô%:\80c9#\1fÌ\19¡\0> §S&\ 5'û\ 5¡dÖ\94\1e¾¾ýpC\9cÐòN¡¢\f²^ñ]M-\7fàiP×\87¯q\95\82@1\86Ê\82Ë\9cÎÀ\1d\96\9fª*Àz\96Ï\916½ØÜ\bIò@}V\9cJå\84Ðò(p\84Ê\ 3zQ\18%xê[ ±\15!¢\81mT\1eãÀw* Ha\19\ 1ß¿_\ fc\1a\84\94\15b\vÁt\94J\97@Ôd\1aa\12\e${O\92¢0cà^íÒ·\fÛ\88äÙ\7fÿδ2:\91þ^.Ðdû
-\ 2eÙ\95QD^\ 3\1d\12SVF#Â\98>7®\9bÍA\12]GC\8ezdGg4jG¾íF¯#Ú¨\1a¯3ü¿7Ù¡Ç\19\19\9c÷KÀAûzÂî\9a$G^"\£[Y@¡YÈA\08A\178|\95ðÈ\879_çP\rpBmµ±xãI¶'H CXW¤Å¨\8bÃû\97-A\95kÖÃ>qW\80Ñû%\80\ 3\ 6x\ 3\85a\rG\94ýÃ\90¶\8ewÑ\11\80ö;\92t]Cmb}Ie&\9a\ 2C'PÚ\8f6\f\ 2ì7\ eLc\99F°\90æ\ 3\12Oh¿æ 9XèZ~ÍDi\ 5\94\89\1fÊ\ 6*Üè$\97L\93w\1aîo\895#\89§g? D/_!æ\9c\15\ ff@go\1dͽ׹Cÿc,cã\83V\86\8ddØ\1a\83v\8f\8bÒµ,âwX\1cL 1f~ñ&é^\95ÄP\8b\ fTîhâ3"v\14ä.WÛ¼ÀßaÚõ6ÌãM\9e$>\80\ fòǺ8HI7\16½\88ú5\ 1\949ZD\1c^À}[z6U2ÁJ7HÏ\1aKLÔ\v\ fÆ<ÍU5py¬\19\ 4ý¸>vÝtq×[\18\1e\ 6wAÉC2dêkðÑ\86¼\ 4ë\8e+\9d'&'\86¢\8d®ÛÈý6\17"\98óàÇ~|X¸>^¡ïy®{®û\9d§kZÞ\1c®Ø\15\bÅ
-\90\99\86WÑ\96\8e\ 6\99!èËÚ\9a\ 2\aÑ\14½å\93Õt?B\7fé2½_õzkÑA\94x\rÝ\ 3\ f\v#¨\f==\9e8þ,Ù¯\94\87Îì\9dúÈÎ{g\83Å\8b»ë°MÎ\96ø\91v}IË«Åä\9a\93÷xóíó\rýiÍw¨\1fÝ\9a¤)!+~Gg´çû\vç«é§ÿõ\93f±ZLVËkü,\82·Õ\8a\8dþ¶>ùëä'GC\88Òendstream
-endobj
-1540 0 obj<</Type/Page/Parent 1369 0 R/Contents 1541 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 846 0 R>>endobj
-1541 0 obj<</Filter/FlateDecode/Length 1445 >>stream
-x\ 1µXÛnÛF\10}÷W\fòb\ 5°iQ\17R)Ð\a\aM\8a HÓ6zÌË\8a\Y\9b\90\\86»²~}Ïìò¦µ#%\ 1
-\ 36\96{\9b93ç̬¿^Ä4ÅOLé\8cæ eåÅ4\9aâKÿë\9fß/\16³8\9aR\92΢\15\95´HçøëG\ 5}äõ\94,_E æfI´h\a<5[-¢\98\96«)¾\964\9fÍ£´\1dñìx\8cÙer<»\9cEsZÎRwð|µìGnïh\f\93\16\vÞëÖòìxÌ\ 6§G³ÞªÅbå\8aSØèGîäÑ\18V%sÜ;\9a\1d\8d1û*9\9ae(â4\8efð\16h%í\80\8f}½¾¸y» 8¦õ\16x'«\94Ö¹\83yJëlò¡Ê$ Ú\eÙPV¨ì\8by¹þ\8c\1dËvÇ\84^|øã\85ÿÖ\9d2!«IÔuq »\93T˦TÆ(]\19ú(Ê\8d RÔÆMÝ©{Y\1d-P\15ïu÷ÝÜ5z_ß<è¦Èù\82)]Çs¸°Î'ÍÍÃÍ#ÙFÕ\85$#í\15\89*ç\13+zPEAÙNf_Ü\rÙNTw2?ºc«\e\±UØ+î\84ª\8cuK7Ê\1a>\8cTåÆÞ©Yç¨\91Ù¾Qö\10\98R
-ó%t¿\16\8d(¥\95MD·Õ\81ÜÁv',=ÈFÂ8o\92û"ð¡ÒÖÝ\vÏ/ãK\7f½2Ô\9fB¼¨\90[K¢Ð\95ììc\a\ 2cFPGí\94Ë|@öÆ\18YY%\8aâpEÿÊF{³Nû\8aH=õ\8e¿a\ 2~I\84@
-\vx\85\ 1¢\8c\9dÞvîJ\9f4ªM\18ä\9cK± »\e\ 2\ 6«ô\ 3\8e±:pÈcåÃË®;(\19\ e»Ó\86\7f÷·\0\9bî\8c\16á\10\81wÛ\1eiùX#\97\95u\19z\ 45\ 6ì\ 6BÁg\e\84\91îE±G¦ø\8cõ\96÷I\919ÿ\9f\85i\b\1f\ e«\e}¯ò0\\99.kaÕF\15È+d®Ýµ\ 4\99E¬L\ f;N\17»c\ 3{\ eµÎÑVdí6X\ 6Ö4:ßg2\8fh\rþ0\14\1dk\9f`Zê\m\ f¼¨ÇoLµÑ]\86tÕ2åÊÃâlé²\9bQ\9a¦\10± Õþ\94\8f¶uÄ\11Ñ#×¥ýà\8a¡\9fc"vA\94:>\12üqÀ\8ee¬W\8a>
-ç©\98é¦\91¦Ö¬$-;ÚTø6+\9d)~½\13¢\10\8a#Ö\9d\11\98³nMF\92p\9e\7f\ 2ª\88\fª\ 2Fùè«ên\0p\14ä\9eP;ftñ \ e=\1fÀöK]]\86\1eþ\1f¬òHtÜz\12Þ1\ eO²»e\1a}'·ÆåéG©\15 \8b¤ù)jyâW\9a\90}(i\99u\95Ò¥ÞSºM§a\0ÖЩ@\95\ 6j<#ß\)\83õ?\92yH\v\88\12Wwå\ 4Ûi\88ç6\1cøº\87\ f¾@ §ò£¢\9b\1c\15±\ 5+Ko]-ÎU#3«\9bC+\e®\88C(`X9\b±Æ\17È%÷\11ÈÎ\\9a¬Q\e.>\e}/ÇZ"\1f3Y[Ô\1fNs¤t\10¨^\13B\1ch°ã$\84Ü2H\91s±\v\90<µÍW±`\83\87¾¿7°t8î$ ¾mÏwD6\8cÈ3ùÔ\9b7hÆs\8dÁ\80ëæ\80ðlž@.ô\ 2ÂÚr¶ öW\ 5H\9c¾¯íþÂh\ 4à\8e¬? çIë\ 3»N5\aáõO\vÕ±\92u]ÂwkW`ËPYÏ)Y»±#á;nx\11(È}K@Y9ã}å\1e\9d{$Q¾\81E\87\90\97ªRÐ.\ 1
-S&*\0\8dN\90[\aßï\9b\1d4\83«\91*L¨
-ÆrÃî:\16f+?4pk/¥\9c4£û] åFÉõè¨G\ 6\85\89\8cÊtÐ{8U¹~\8emÚ×ܦ²5p\18»Ýµ¦½t»ç\97\83æVª` \e*åsFÀ=|V\8d{G@\90ªð\8dÒe²\92n\96r-MuiY§øI\85w\ 1øbU¶/DÓöÌè:\\17á
-í\15\9fï¡äû·\9a\9b:\86¨§\19÷}¼\88£yó\16/¼ö\r×7?¦ÜDphûi²üôÒ¯\1aÞhîýÓÁè11µÌÔVeL\14ÖYúÅoêÚ]\88y\972\832ñkàW×\a\ 6Yå\1d\1d\16\82s¼0XÕÁt\18±óÌ\91Ïm\19\1d~Ô\avöÞ\8e
-Æ\15ãæ3Ó7Ú\8cï\bÕÖëU\vh\9c¤Ñt5§$Yáÿ\vxJ}¼}ÿú\96þjôgÀD¿él_âiå*\13;wÝm¸N§¯x}\1cGË\88Þ»¶\9b\ 3è\90\aS\ 6?\86\fw¯¥E\8a\7f\e$+<DZ;]ñ¡oÖ\17\7f_ü\aâàI\14endstream
-endobj
-1542 0 obj<</Type/Page/Parent 1369 0 R/Contents 1543 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1543 0 obj<</Filter/FlateDecode/Length 827 >>stream
-x\ 1\9d\95O\8fÚ0\10Åï|\8aÑ\9eXi PÂ\1eû\ f©ªÚmµTía/Æ1\ew\13\9bÚÎ"¾}\9fí$\ri{h\85\90\b¶gÞüæ\8dóc\92Q\8aOFù\82\96kâõ$MRz\91§É\9aV\9b\1c¿\17ø\1aA\87°°\Ü&\9bñ«Ýd¾]P\96Ñî\80XëMN»\82\10'MiǧÜ\bæ\ 4ÕÌ>]ï¾OR\9a-ÖÉ
-[¦\am¸ n]\17b´^H#¸Óæü÷Ã\83-íùùvÕKé3\9d\ 4Jh¬(H*ë\ 4+H\1fÈ\95\82\8eÌ°Z8a,\15ÒòÆú=%v'^Ë|{K\19ªñeÍ\96«¨:Ë\92<¡w
-\87\18wR+:IW\86hÖ1U0SÐ=«÷\8c\ e²\12Ä\9c3r߸¾¸4\86©Ùñ(ÕcL3\94\9c\ 3=àÄ\10ØeÉêZt\82ßÜÝÿ
-I{é,=LmÃKb\96®\80\1a¥©ê|õp\8dR\9d\ e²¾||÷\8d\8eÂÔÒZèµ>VT\97Ю\94¶Å\9e-\93\85Ï\\v\86= \ 3f\9c)Ú£\bâZ\1d*É\1d\9eÜI\b\15éõ1£\12+\1c=K\16Y\bÞ\18éÎàÊ*ýH ó§3£Ü>Âþ\1c6^Ò\83\ 5\ 2¯Ð\97\81\87î\94 \13ó'¤\rjm©OÔ\1c \8f²+\93JÀQ\9a\ 2\88À\88q.¬%80äÒ'%\fI\87VV\15u!.\89\82çH¬7PßòK¹àÇö{x)V\9fÐ\17\85\®Q\18\85ªUÛ\82\81Ð\10\b>Dë\ 4\1e\98ó¸\1d\83WãR\8br\94^"$D\81¬öÍò\19Çt¾úX=\1aßXÏ%d\0\1c\9f6VÎK¦\1eEÌ64
-\fĪ
-@±µ¶¢zÆ\9e!¿ÆÂÂ~q$Í^6ÿ\868¼ó\14\8c6ß¾hçsJWwï¯üÉ_3;%¤|ô&`üÉÿö\1a{Æý,A)Û·lo:k©\7fÈ\82©õ\14F²cGn|RE\1fw\e Æ«\b\r\1eÂé$z 3?t\98DX&Òµt\8aì\a7\0&Ù\ 5\7fÁ¯èÛïØbþ\87ë8\96Ô\r"zÈ\ e¸n\bÓá<ð¡
-?W\81n\7f\99ü3ß\ 1ÖÖ\93gÝ\8cÐ`&\9aª\80\e0l\96J\19Ð]ôò5S\T¿õÓ0Ôé§\8c\85ñ¹8òçö\ve\e\=\81#\84\18êÜÉð/¼NúY\18#\8bB¨à÷ùvÓ:*[ã\8dµYâM¶\89\97ìýË\ f¯^Ò'£¿ãEBo4oj\81Áò·¶¯oÖ\1d\98åé¿úþ÷nïn'\1ft\95¯\92|½Á+\ 3\ 1ó[ÿ×ÛÝäóä'ú.S¿endstream
-endobj
-1544 0 obj<</Type/Page/Parent 1369 0 R/Contents 1545 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1545 0 obj<</Filter/FlateDecode/Length 1451 >>stream
-x\ 1\95W]oÛ6\14}ϯ¸@6Ì\ 5Zù#i\92\16ØCÛµO+Ð!Þ[\80\8c\96h\9b«Dºü\88ãþú\9dK\8a\96¬¨[¦\ 2ICñ~\9cÃs量\9dÍi\86\7fsº^ÐÅ\15\95ÍÙûåÙôÓ\eZÌh¹Æ\9b«ë\eZV4+f3¬\94\93\ f[±óÒÒ|QÐ\a£×j\13¬Ò\eúòî3\8d¥J9oÕ*xY\11~¾Xþ}6£W\8bK8\99\94R{+êú@\8dÐb\83\1d"ø-\16U)¼2\9a7sìùu\8aýêâ²X°!\82Í\vº\15ÍJ\90Ð\15\aK{/i>o÷.®\8b+Þû\8ethVÈЬéO\1eÉ\1d\9c\97\8d£»\89ܼ¥Û éÖÔÂ*w÷â% G{Y×ü\e\99Ð#\9e÷·¿ÑZ4
-ir¬ß\95\ e\8f/I\9b=\ 5¯jõ]òÎ\16×ü"%ø¥\ e\9b\8dXÕ\92Þ\9d ¢Ï¦
-µäàÈùî\ 5\1c\97ðá\ fä\rí¬yP\95$02 \ 2yÁ\8d±ê{ä%æa¥3Á\96ÃÈ¥\ 1§¦&'í\83*¥+è\8bU8\aøg@\8aßV¡dz\99\11d\ 1çTÉR9^¶à\90\82F\168V\8dx\ f\0\98\8c\13s´\13Îí\8d\ 6\98+áÅJÀøn\92\ e\ 32\8a\871\99J_N£U´\99~ÊÇ4\ 1\ 3{\13ê\8a¬ü\16\94\8dT&\1eb6H°\97\86\8b\82bvÀÔÆ
-\9c¡ß
-\7fäÍÉ\12Úó\87A^\1d\13·¡Ü\ 2l¹5`¦\r¬ô\83©\ 11\92?\1a\14à\1d\e\1e\83
-÷6\ 1|\9d\ 1Rm6ª\95ë\11ÛËá¦Q\ 6\9eìBvûQW(\9b,/ðY´(\17WE¬%®·V@\ e\18\eYn\85V®I\14¡
-!\f-K\1fu\8dCÊdu°ÖÖðnIAWÒÖ\aTñ\80ÉÓê\9c\9ejRéµ\15¨uh+X Ù!!å\bacO@qK\ 5ïPâÖ\9a°Ù\92Ñ\92Ö
-%\92x\1aª¥)Ø4½Ë\9cö(¸\9bôª\16ú^\1dHVÊsëQºR(¤ êè¿U\89\80ºj\83Æ\82L\94þaСB\87</AÐÚÔµÙÇPàZ\93|\14Íî_\80TÓ1}\1c©I5ÍT\14´Ü\82³ìo+Ð\11!w³ãru´\922*£GCÐ¥i\1a´LFåø0Wh;\a´'\8fB\8e\1d\bLyr^\94_\1d7Ú\ 3\afª\92K4éØr\12 (\1dMÃC\8d]\fªm\14\ 3%°L"&\8eÈ\ 6\ 5}t\8e;wlç\9ct/H \8eV\92G\ 1'\849À)Ĭ\99CøjÈ\ 4\ fØ¥Üù(Á\12\1epnæT\1a=Ü;ÑÜïöÕªpí\9e,\91I<°é§\19½É\83à2UÈùÏ\90ä«y1ËXf\ 5\8f²É9H\97Q®Y«Ý\81Ä\8eÃ`ÿ\8ah\7fÉmuèbð7W\ 6õ\9e¶»Uy\89³\8f\ 5(½?´\10\18\\9bÑs̵\89\19=5>\8f³"G¢ÜYObW8¦°ûoÛ$<ÔQûpÞ\8dPõSËç¤Ü\9e\179è\1aÓ³©^\ fhCêei\82öm¸H\9bS^öÂ{ÕÈ\91ð'vã {réqí ^\1e|ù\19;ªqËs\88¡o;FV\8d\8e\88sz\9aðùq\8a¦ÀcaK\8b\92\15k\1c§èíá×\8b\ 1ay\12?#ù\ 1ëÝ\f\ 6\17\8bxQâ\86\8d²3{\17¯\0\98½VîjQÆ&Ò¤{\v7(Ã÷\83\a¨ ¾\0u\82\ê\7fíý@é²\ e\95l\87äÓBü\89¦+¥§(ð)ÐMó$z\82¹\87\1c¸·\0?\1e\16ßÚ³j3Ü´V«Fù¼)öõÞñ²\91.w÷¬ÏhÉ\v\16\18¼;]ÃäêB\8dyé\9fFÌe\831ÖÏ\86=׸íÆF\1e\93\1cAÔ\95m\8bÈ\1aãÍ×\ e\14{ñÜD\8fK#^*©»÷l¡\9c\v\\16\99\19^k\vµ]\1añ²\93\16̵VlÑoIl\16sIõöc/Ç^\92-:Í'£\98Ë×i0\9fm\8c6\96Kêå\9d\85Ûâ\1a~<Õ\94KÀõ½\ 39âEê\87î=Ç+Ñ?¢\88¨1¾êv\8dx±¢R!\87\8e¼4+®´£\11¯q.¬ÏÄß\88\97ýVJn\94\11Rg\91uØ!ºO÷Bl\1dñ\82˸\8dS.³»\17Vg¯y-æÒ6£ÖÍH}ó\94ën.ù\8eÁßh<à\8eÓ\9c/Ömåã;\85_ñ\a\ 1º\ 1ÿ\973äÙÚ^ì\19V¯9vA'\94\1a\ 6í·
-Wgx\88®\92ùM÷\91vq\95>ÒþçW$=çËñòú²¸¾ºÁ7+\86üM\9cú\1f\97g\7f\9cý\ 35õ\93Vendstream
-endobj
-1546 0 obj<</Type/Page/Parent 1369 0 R/Contents 1547 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 849 0 R>>endobj
-1547 0 obj<</Filter/FlateDecode/Length 1633 >>stream
-x\ 1ÕXÛnÛF\10}×W\fP\14Q\0\8bºX¾$@\1f\1c¸)\ 2ÔAZ»o\ 1Ú\15¹\147!¹ÌîR²úõ=³K\8a\14e\aj\8a\ 2m\82\ 4¶¸\9c\9dË\999gôe4§\19þÎéjAç\97\14\17£Y\84_篢%-¯¯ðó\ 2ÿ\8c¤\94\1fàèþ¿_\7f\1a-/£9],q ùÅ,:\ f¿ät?zó0\9a¾]Â\10=¤°\7fy}E\ f\89\7f{F\ fñØî¬\93\ 5UÂÚ6 %Â\89\95°\92>\8e_>|«ì\ 3¿:\9eJ\17Oý¹$<i\8d\8eÏè©£6\13\89Þ\9ettmt]\rN~|I[å2r\99¤B'u.\ f/\99Ñd~\1e-\10̸\12Åï¶X±o\91Õ\ 3;´ÍT\9cQm¥õ¶îE±\12]\98ái¬K'T\19NÜ©Øh«SGw·K\92elv\95\93É>G|AïöLØLÚ\88\1e2e;»øÙ:mð\9a*I"\10i\8e²T[3Íu,ò©e§¦\95Q\eáä´\89e{\94çg3àk\13\8c<û2iþ\1cÚ\bUõoFÉó\17S"+Y&ª\\93.»4\ e2¡\8a*\97\85D*\9d±\14\17îtmè·R=N\7fVeýH\ 1n\9c,9ôäëU\f\10 ¤µ2z£\12$vµ£PÌ\8d4\16\17\ e¼YD\v4\ 5|È\91S\13Ñ;G±(i%)ÖE¥ò`ÁV2Vé\8e#C\8dBr.ZÈÓdÂ\18\9cô\\v'öÐ']q¬\16(\93%\99º,Ù\92wë\85\rgÛ\ 6êA\ 6pKÕº6Í}\9d5\e\eU¹\88ÞÂí\ 2èAÁ\90Å"ä³Éü¡Õ>ø\87¾\85\9c\9d\91\95Ò×,ÑqÝ\95\aXØGü\84\8f\16\95\8b%\1a~ß[Có\8922\ 6Æw¤Ó\ e\13\14^¤DYgÔªæôDϯÂ\10\9a,\96\98jèÜï¾ÿps7\99G3>À \9aE×þs\ f\10<CBª\1aH¡l\1eWð\9cþÈõZ\95/\10\9eÙ¨Øç²ob`RÔ\18&½?F~©\11@Ò~Ô\v\14C\84J\9dÈ\ì\86FâX×¥kßÁ8þ\ 6#\98D\f×\7ffd?°\e3§{Òg\83Éâ\92ÓÍÝ\98ê<×[F/z\8cÓû\95ì\vÌBãT\çÂÐqc'2\15u\8evÓ\18\19~\14ðôm1Ð2ÑÁø®¶ÉêxvÿK¸ñãî\eps\90ãi®VS+ãÚ(·ómÒÄ@e\8dL~n\11D\81\aIÔÈÅóp:Ѷ·Ò\9a\1eXëáêDkO\83¼\a\13í4!\16ÉE(r;ÐÐ\8e\ 1`ï\ 2it\18\93\8f\82É"\8c%L`ß\10`R\8cgÌÑB$x¤\99´ý\89=§uü*78Ç\f\ 3±¢bò%móÑÈ\ 2îx\90\91\8aýì\88è¾\86\ e\0õ·×¡\95ó\84D\8en\a)ø;Ù c?È\1c¦\9aµ\11\ 5\892¡?í²Úâ\15t
-\9f\e\ع٦\10\9dä\8dÇ\99(×\985µm\88fpÃÿ\vèM\9c'\8dÉ\13\11ôßÂõq\80\84\8f\98\8a~è\94VÐK\11\7fú\fêßk'_û9ê\11Ã\8aPÄ\9f\19\ 1 ÌCtR!\19#Ê\16P\92P*\98Á\1e\98\95\ 6W¬¸Q´\87Ì¡ X±h\95^&öÔ\ 5K\16\90».Ã\fo\94\93Ë ²×ÐÓÚ#¼\94\8f®ÑÕ¬
-Û\81ï=\8cèC.y\a02\85lmÞ8T\ fè\94\ 1ú½ÔëñB³Y<!
-\13 ¿s\vóka¼¨äë\83\12C/Ç¢\12+\95\839 Ù\91)&"ï¢ò\1cÒ\8bT\96\eetÉ\9a\ 6í\vÙ\90\11ß¹\17:m&\83lô\91\86zµ¢'H(.Í1\ 3µ)r\99p¡ï}û\ fB\1fÔ²éùVäù\15@\10·>
-\19ÃY#rJ!e\9e×ÁÏy#]¦\13âAi9\(ß\1d\ 6Ú\ 6@\e¢ ÌZ(ãV±ó dfG j\1f\v\ f<\94Z¡Ì")\14\0\bç¼d£\e\88Z \89£\ 6\1cm\8db
-¹Jy&3\94Î\bCØß\1fæ÷ )\85øÌ+\97Á,\9fè4µÐ¡\9a÷\ 1LÚ\1dm\ 5T\14\93\0ð»\aß\11Â(\r a(\93y\95Öð£\93ÃÍÈ|Es,´¼ÙNÎ\eQ9gåO·þÄؽ9`\82Pý>G]E{\19$¬«\9dì'\ 3\19Ú*äÀH\91«?!\94\8c.àr\9bK\86.\16\8a\95*\e\95\9eþÅæ,xÓ\1c\90`°\95\1cí~LB\87g{\8d`ì®\8c\ fã\1ac\83gá\9f9W½\9eNý\89ÈÓd¤Ízê×kDµç2\92èýU®lÆ\9dã'T\8bÕ|\87\9a\95\ 2\ 4vÖÉú#À\81¬Mø~àà{\ 4\ f8^¼Z¢Å9¿»1®¸µ?\8eåúuh\8%¶\ 2kOC¼è50¯¨ª¼!ñfÍæH{Ñ\vc\98^½ß|S&6LáB\85û\15\1a\ 4A\89d\ 3Ü!\10ëw@Ü\ 4^g\8cs\11Yl`ÚtÛÿMì\14\fݶkNÈïu³\1cÎ/ñ\9dÌõ9¾P\99\85]æþæîÍ\r}0ú\13¶"ºíïZüæ¤}ar5Ã\1a\94\8cO\81éòj\19]]^\ 3ÝxázÎv~|\18ý2ú\v¬\0¶«endstream
-endobj
-1548 0 obj<</Type/Page/Parent 1369 0 R/Contents 1549 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 854 0 R>>endobj
-1549 0 obj<</Filter/FlateDecode/Length 742 >>stream
-x\ 1\95TMs\9b0\14¼ûW¼[\9d\99\9a\0&@ÚéÁiÚ\9eÒIkfrÉE\ 6a\94
-É\95D\ÿû®\0'Øé¥ã±Çâ}ì¾}+~Ï"
-ñ\89(\8bi\99RÙΠ¤4K\83\98\92<Ãÿ\18_éö\ 1¤¾üüü6\8bÒe\90P\1a'Hi)Bz:\9e$gÓsKqx\1d,'Ñé\19Ñ4\f®§Ñ4\r2ºJ\92 Gçe\18\ 3g8ùÎÓ3¢W\11ð'ÑÉ\19Qt>\89NÎ\88fÙIg\9f\9bäñÛáo\8aÙå×\84¢\88\8a\1az¥yFEÕ«\11RQÎ×Ü<\8b\92Óã|u»~¼ ¡Èjª\99!f¡^Õ\95NhEº¦½¨81Ã\19)îöÚü"Ö¹\86+'JÖç8ÃêZ\94ÁEñ\ 4Èk\8a\80ä!\17Ë\ 4T\8bj\1eÅÁ2 ûÕ\1d}Öª\16ÛÎ\f\85\1e³Ý\ 4%\1e\ eµ¯t\17±_\rj\8b\86c\97Â\12\ 3\99]\8f7)£\92IÉ+Ò\e~ \1dkÁÜ:#zî6 \14S¥Ô{¡¶¾ImtK OZ-¤P\9c\1a.wH1x(¬'\ 1ÚÑ\12j\ 2ú\15ný°*>\8eÑ8\1d\86z\80\ 4´fí\86Áp±oîçðÃqr\9a¸b\eÉû¡m·Ûiã µ\bx@èpp¿\99ùb±\17®Y\80ü©\ 6óÇ\8b÷=+ÌeXË\1d7X\85\94\1eÆ\19-ÏÈî\e\8e¹\fa\14¥ÝHÌ6º\93£:\90ÿ\1dT,KÝ)\a5+²ÜZ¿ã\96)¶å-6J\950\1câ=óQ¼\8a׬\93\8e6¼aÏB\9b3P\f\8dQ;;Ìée,%\87\85\1cÿ\ 3\88S\97h%\ f=,*ÄViÈÄ\14\9e\8c\84Pû\96O@ßµ\83\9c\rsgÈ\83ðLîÙÁ\8eíl/¶'q\86\f¿ø\95\97\f<ág®JsØ9Èj-ì\YúD\87ãÀ°¹\85$~°· ÞÁ®:ɱl¦¼ÎÇÝö\0\8d7£ÚòK¸p§\15àÎ\98´¼l\98\12¶ÅUâ\15|;RÛ¡\0´<½ó9ïn^\88\1e\99cgý]\83U\8ff¼\1döôÁW_~½:zëß÷\ 2ó*=dæcf\94âÅ\99/)\8eúK·^ÝݬèÞè'¸\81nuÙywô\97Ö×-\8eé\8b,¼þ\8f\v\9edI\90¥9^\r¸]yì[})f?f\7f\ 1P\9c¹ýendstream
-endobj
-1550 0 obj<</Type/Page/Parent 1369 0 R/Contents 1551 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 861 0 R>>endobj
-1551 0 obj<</Filter/FlateDecode/Length 1403 >>stream
-x\ 1V]oÛ6\14}÷¯¸@\1fæ\ 2¶bù;\ 5: içµ\ fE±ÅC1Ì{ $Úf+\91\9eHÙõ¿ß¹¤$;j\82!À\12 \ 1ÅËû}νÿôb\1aá7¦Å\98&sJ\8bÞ(\1aáKûç÷_ù\vÍfq4§\82¦\93hZ\1frzè]\1d\v\8aã8\9a]]\8e\17\93(¦éb\8c'\ 5MFóöÄO¯Ï¸\9d΢E-\en\97Ñ\92¦³ÛhÌo§Kè\b'\7f{uÆí2~t{¿îݬni<¢õ\16±Í\17KZg>$|IûïöâàdIñ$¢\ fÆ:¥w$è\93JKcÍÖÑ{e]©\92ÊÉ\8cV*\97¯×_{#\1a\8e§ÐÒ\7f8['\vr¥\94d4=\88"\11,À\ 6ãE08\9cLá5\84a!\8eè£\86¾*uÊh\eD§HU-:^ \10]ïå\ f\86©6¶é\9b\92Þoíæ5\1dJsT\99´p¸\90B[2[²ò JáÃpÐ\92\9b\9dJENG%O|½E\b\90×\19eª\94©3¥\92Þ\ fÄ\ 4\a½£n/\1cUV\96\16Ú$mK\83\10¡K¤®\82ªÃþl½Îܤ0\848X1\ 4¬¤RZS\95)L \1düFKw2å7ÄíHä¹9YÚÂÿ½ÚíeYç²±+\8eBå"Q¹rç\ 1ÙÂ\18h(ÉÂI±\93$¿\1f\10#ì\r\10\95È(\11¹Ð)×Kº4¢\15Ô\16¦\94¤4,\14Þ3\12\89©PÃ\1dÀµ-\949Ó1z©tfÒª\90Úù\97Q-6\9e£\99|E\94¥F\82]É\85Bà{s\82Jü³\b\8fí´½ è\ f¾S!Ò½Ò\926}\ e\e\ 2Cq\12p2Í\15LAÜPR"+\12å¬,\82é¸ç[ê\ag\fI-\92\Òçûa",zóýêÁgÖ?\18PjôVí*N\87£\93r{_\rV~³\1a×\r×\1f\ eùfXØlÛéÅ>\99\ 3\976¢Ï:\95\94T*w\ 3DØvøU» Q\8eÈl*4%\12\ 1gè\14\9f\8aú"9£\8d\Û\91»Ü r\94\18\93£g©ãRHå\93\1eq_\17\92±ªBo\85§ +\ f\9f¾-\92\88Ã\ e\9f¯PÕô\17÷~D\7f\9a\8a\80\19µÓ±§vÏõ\10\f"®_\89®\v\95ð\19\v·¹<Êç]öÞú\87\8fM÷©u9¢»V;\v]¥¯Áá¹e\10\9f\ 3ëås¥¿Ù&^nk\ fñs\91\98\¥\14n=\\ fFiÇÝTcÆ×Ä\ 6TÈï¢8ä\12õë\98¶×\8aêJ´éüZiÏRÃ\9f}|oj\18Æ\9b\8dÏIÜ\8dµ.JHØ%(\90\ 6R\8bFgJC~\eµMO7Åù²\97\9a\ 5:ø\10\ e\ 4{ð\91\89\14¼\12\145J|\ 6\ 6¬ûL\ÅR\ 6ÃÀ\ 3RÁ&\eòh¸
-@ô\8eª.é¥@Ñ\806øé\ 6ºyÝøÚ\90\ 1ÇÁ\9cïYÎC\82\98ä\ 2ÎÀrOÄQ
-½cªòdúEé\8c\99ðvÆn\8eG£Q×Â\aYÊ\9f\98§A5¾x\81Ú\ 3\8aªCÝ«ÍÜ©q \981\12½®\9bÕ\88n\9b©2\r\1cö\8aÖ\9c\91\1a&~\14¼i:b\84ù
-\9aû+ óïÎgª\7fÀæ\892\964\80HoéáîÓýÝ3¢\9e\12\ 32\b¢çvÊ\8cyu`SÙÖ>gç @Xoé\ 6<kJw\ 3I\86å3\96.ð»Ø¹Y]á\7f2\ fÁ}\f´ÑÑÚ\ eÂ3\9d\90\1d ô\1f\bC\8c`µAX\aVÝáÆ\8eqÂ/s¼\9e\1aìõ«p\e×·\13l63ì!È@\9a=\15áEÑ0È\ e\9b¶û\ fm\98E:ÐW'ÂÇî½Tka2ZÌfÿ§«¹¦¡¥G´rç\91ÇT|ç\93^¯QMN_æô#ý\1e\13÷úA\0É»ö\837\97\84\1c5MÓ5Ç3ÃîM\95gM\830·\1cdY(Ë\eIب\90\7fìL{\85öñûÐUg\81\ 5ýbyáA?gl\95ò`ƺet~f\1f®\aC3¤²z\19ã \9b\96\12ck\80 \96c\14\92ßy2µ={²\vHðS\ 1\ 3'·\86´\81\907\0®ç\v\ f]ìu!\18ÌkÐUÇ.\964Y2\1dFà\vl=¹*TX\8a@FØ\86\11\ 36\1eqÄöÁû.\89£QàÛòì#\ 4ûqnø=\96\90"Q\18³>Cx´\ 3¸\10+ß·¾Ôlµ¼\80g2ap¼t/oÖã\86\13ÛMeº\98F\8bù2@n9á`\7fY÷~ëý\v\8ffô3endstream
-endobj
-1552 0 obj<</Type/Page/Parent 1369 0 R/Contents 1553 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1553 0 obj<</Filter/FlateDecode/Length 689 >>stream
-x\ 1u\94AoÛ0\f\85ïù\15¼-\ 5j7v²Ø=¶ërÛ°¡)vÉE\91\98Zm,y\92\1cÃÿ~O¶ÓA\97 \80a\89äãÇÇü\9ee´À7£"§å\9ad=[¤\vZçËtE«²Às\8e\9fc:\f\a\9f³<Í/\ fî·³\9bÍ\8a²\8c¶\aäZ\97\ 5m\15!ÏbA[9ßh#\8eÇ\9e<\aj\e
-\15\93ïë½=jIGm^=\ 5K\8dÕ&Ä\87xl8tÖ½\92¯\84cO½m©\13&\\930\8a|\10.У¨÷"½Ú¾Ì\16\94äk¨Ýªù\93gçÉ\1az8øDt\b&yÔl\82')\f\19ÛÑÞÙÎóP\ 5\97(8æ\18\10«\ e)¡Ò\9dØ\91\b´ÃÇÇ2»\9d:ø\94î¤dïµy\1eUOµ³%\80 vìD\90uÃá\9evó®Ò²"Ñ4,\90Î\93Ò\8ee°N££©ÏQÜî\8a\82xÅÛv\90?Þ\ 3¯é\1228Û8-\ 2¸\8d@FÁ\17\ 2&h\ 3\93\9bÍ-e@\12Ç\91,³\91\ e\94føÒw\eØÇà¿CÃä\93<NmþK\e\ 5BoÜ\f³\8aJö\f\13ì-B\15é\ 3 j\1c\9f´m=\84Ö¶5ñ½±&\ 1©Q%iOµP\8c«ñ\9dCh¤sÒ\92cí\ 4ÂÎèÀÛ\vðE\91\10À¾\13}\8cFUxÂYÕÊ\98Åp7e\8e.¨A\8c4\1c\83Á\9dóOËÉ\89I\91\96\19\9d\8bìòuAï»\1eÎßÌó¥u\ eV\89à+vüÉ£&Ü\17\9c\96A\ fÄá\89Ú\ f\röu\1c7\19Qcl¾²íQ\11<\1e)\1dmÇN
-Ï\1fªÁB¨ù\7f¥\9cµn\0ʳl\9d\ e=5k¬g\7f=ö:¹¨'\ 1Yð"\9c\15\19\8c|\ fÃóÃÙØ\93²J\9c`òÎ\0s¥\9b¸D\17ÖiØÕ\1aÖ¶\ 6Ý`K}\Ctk\rh(öúÙÀ}j2h\¥Ú*}\18H]î²\1e\97éìöþC\fçFÿ!QNSË\96eZÞ.)+ò´\8c´\1eï¾ÝßÑ\ fg_°>ô`e[cL"Îd0R¶Æ¿T¹¤¤XÜÆûÈýÞæ«b\95\16ë\12«\80Ór\15\83¾ng?g\7f\0±Q\8b\1eendstream
-endobj
-1554 0 obj<</Type/Page/Parent 1369 0 R/Contents 1555 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 868 0 R>>endobj
-1555 0 obj<</Filter/FlateDecode/Length 1647 >>stream
-x\ 1\95WÛrÚH\10}÷Wô\83«\16W\99\ 1a\9bKÞ\1c'Þõ®í8\81T\1e\96<\fÒÈL"i\88F\82u¾~OÏ\85`\82÷RI¨ Í¥ûô9§\9boG õñ'¡Ñ\80Î\86\94\96G}ÑÇ\93íÇ\87_\8fF\89\18ÑE\7f"\86TÒ ?\16gá[AÓ£ä|\88ççã31à·Ã\89HÂ7~\8bsh0\19\8bs~\875\93ðmûn<v»G¼\ eÿjE¹Û\94ô\aî g/^Ï\8ez×8¢O³\1cA\ fGc\9ae.V<I;WK¹jTMɹ \87ZW\8d®\1eiÚ®V¦nNf_ÜÞdä÷vÏÎ\11ð,ë`q"è¦jj\93µi£Må\97\9eS\92\84¥\83\11bÄÒ×êQW\15\1fºÑÍ\92\9a¥BÌ>êBI«Ni*Ë\85$믴nE%\e½VôIW\99ÙXº\9fÑ*\86Vªt)+mKKº\\15ªTU£2¾¾OÝ\84\ 1Å¥k-énÚýðpEó\8e\16J¸S§\ fïÞÝN§TÉRe´Ò+5?á¤ÕZ\9bÖÒZÕ\16\99X2y\88ÉTÅS\f\f;neu'«m({w¦²(¬\b\ f\aCT\ f\81Ì\90®Ì2Í\10É\82ò¶rhÉB7O8Ȭu\86\83\17O>kµ¡\18c\80\83t\95\16m¦ì+>\18\ëÆ\93C\89(75\ 1¤ª02c\94\1dP¨gV\ 3Á\9ar](`j¶XN.z\93qï~Ö\eôAÙ´ÐÀÏR»2\15eª\94UæRè]§¡\94Ý\91\183Ý\91Ì|0\1c\11ÇÑ»\8e\85v/·°\7f\Å(\0áó@\0/jÂÕß)êe\96yÎ!ÐOú»¬3\94ëòáÓü\84\90\15/¾)Ý1\9c\81)È*GÉ\9dBÏ;µÊ±\e .\9bfõª×\ 3)\98*VXÓÖ©\ 2<\8fJTªA©}èÏ\13\8b\8cy1·Cxsd\81¢\81eîN\86ß±\0\9cI\97$-M\eY7oLúÀ!©ú\94ÞVmù»YØyg~rJªI\85\10Èyª\14§\eÈ\13cº\9b¾¹GmÓ\969\ eE D²\89y\966«D©ÓÚX\937"5eÏq¡4°\ 3]!ïÒoÁ®\0ûÙà%î^>ÜÌO\ eÁ\13³\7f\11\9e368pc\97\8e\90ëe\9a*kéÊ°E\14t«-H\86Ú^Ýrm\83\86P7³ø¢ÒÆ\1eºú¿Q\8e bÖÐP\14\fëÁU\ 3§\7fkU«\b¤Ö«¶ðh4ËÚ´\8fÞ\87Z«Xë\90´«\ e\v4\93\8d\À\95¬ÃÒ®Àº\9fÌå\8bYì\ 2|(öXÁ\ 3°u\ac\91L¨\e\81\9b-\15
-¶\ 4Y\16JUdMÉå\83a \9aÔTyË\9eDraÚ\866KÔ\1f6\83\82jK¥\920+(\16Ï\15J\f4kªLC\1a\7fñ\ 2}á[«kç\90\9cÎ\1e»"HÞ(\9cG,øjÛà\ 6\0Ê·\ 6\1f\\1a\8b#+\9c\9fyE°·´ÏkSn\95\1dLEÐ%Gaaq{W#Èïg\ 6`sÔ\\rd\81Ï\18\11n\94Õ\13m$ìÑ ¨Æq*\14Å;\9b à÷D\12\10¶\8d.ôw\ 4\ e± k8··Õ½»cpáq$8\8e\ 1FEa6¬â»)ýñ\1a§6:-\10i\89\b\80\r¸âʳTÅ\8atNO¦u7g
-~\1e\e\´·]{uæÝ»\1e\ 6KíÐof\83\94ö"ÛqCë\9b彡\8f\16\88£ÑªZºÎÁeؽ\82ÏøaÇpÆ\98P°ÃP©=§\bO{_\17½\90¤í½OÆ\93^Òë_\88Ëé\83?vB»\9dß54tþ\81`]çú±\9d¦üÚ\8b\90Ü\0ݽ\9f \8e\89èÃp`\r\7f:\96\1c\7f¦µ\15俨úøóóÈ»lêCÑ\1f^ð\96\7fèɵ\82ÕÁ\10¹oB\e\80\1d\14[2\ 1|[ÿq\ 1s\ 3:àÇà\10\b.¿B`\8e©à\19_¿ÓH\82\1a\8eÑcêµN\15¥µ\92\18,\98D\11ïÉ_Û~ ű<¢\86øx\17D&vWÇ×|&\86\8b½+e\ 1f[H\1f\93Îö¨\1f\ 1l\96\1aM$Ì\b\16b\96Y×\r$Ò{+÷Ó
-²\90Ön ÌCúä\v\1d°a,\8añ\84Ù \8e\r?M- §BÀ§®qD3ÚN[¡\13±V\80\ fû-¢\975`æ9ÒWÁ\17w\10 ¿wqaÒ\1dæÄYb§\1a\90;ô\ 6G\b6´ÂÁ¾È0gÔ\14ïíJ¥:÷\83S<\8f\15\8aÒ>\9f}\80\8fIµ«e\98@a¢! 8®E¿¾\84\11±\91þ¯t|®1\8bN,Y\ 6X¼E#ªLåÀ\11dåðöÐp\ 4ýÉ\r\90¿\85\93qª¼ÇÛV\18a K\881\87È\82ØÎ\ 6bìÅæô\89Ùü\8aéË\17Fõ=\8f\92\8d\ 2C}Ö¹9àê|_ûò(ç\9d÷ÔÙ_Ù¢3äºÆ'7+ö\ 4&3O\9d\aTyüy\1fð\19®rù»Ê¡²¾Êø\ f$\9dáL\969,ÏýFø\ 5#?;!\1a5\16z\Üf,\a]\9fø\a\ 1~µH 6ï8\90\8f¹\11r:AÕ\fÂ\ eÍ\1cÁv\ 4\1e\7fg¸å\10lh;<¤\1f\9c/öt´\1d1Ç\81÷\8còXô\1dÐÿö;ë|t.Fñ\9f´Ç\17\1céÛÙÑû£¿\ 1o\99\89\8dendstream
-endobj
-1556 0 obj<</Type/Page/Parent 1369 0 R/Contents 1557 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 879 0 R>>endobj
-1557 0 obj<</Filter/FlateDecode/Length 1851 >>stream
-x\ 1\8dW\7foÛF\12ýß\9fb®(`\ 5\88h\8a\92(©F\81s\1c§5pqUKE{8\1f\ e+r-2!¹Ì.\19EÀ}ø¾Ù]J´ª\ 4U\ 2KËåÌÎ\8f7of?]\8c(Ä¿\11Í"\1aÇ\94\94\17a\10âÉáÏãO\17£E° É8\ e&TÒ4:,
-Z]ô\96%ͧ/öF£\b"\93h\1cD\10\1cÅó ö+\96쯱»\b\83q\7f··.)\1a\8d\83yowΪÆ\8b\18\ f!:\9aâÛ¬âÞ\1a»ã0\18õw{kÞ]À¸\9elo\8dÝi|8\875O¢\ 5\8c\8cæ1Ü,i\ 2ßç~ew{kìÆ\93`ÖÛ\8d"\1c\14ÍÆxÈ\9bÐë\16Vò¸D\80§,g_ä½Þ²¤Ù\f\ 1=îõ\9606\8càèqóÍúâêÝ\ 4Ñ¡õ32\1cÏg´NmbCZ'\83\7f«\96L¦Ú"¥R¥ùó\9e\9aL\92\91ú³Ô\97\86L¹ \12U=Ós^Hj\14\894µol\vµ\11\ 5ÕB\8bR6R\e\12\15v\14%Z\8a\ 6¯B˳*
-µË«\95~µþp\11Ò\10)\8c`ÁÀdBKz\1a¨gJT«\8d|MF\95\92°fÙ\83bú,\8aV\1aì¶IFÂÐe-\9aì\92XZèMÞh¡÷öpïÆF\92\96u!\12\99Ò.o²\93sE]kUë\9c\8dtªa§¦=l \937òéÕ\ f,qõ.¤\85\vÙ0\9a Ü0ù?Îéÿv\1aCä\1d\8f \9fk*e¹á0xû«F¤e^ÑV«¶î"\fÓĦ\90gå}lS\9d#ò.\9aF6\ 4K+\84\17ߪ\96ºÉ¥9+\95j(7\94\97u\91'yS $\88\94\17¶¦\\9e\11|ñ\ 2ýHÿôfûW£\11ðÉ\8eÛ÷¾?ç8'\ 3\82WÑW\85JDqeD¹\11W^ó9k·HgCê#ÄögÝÙhµ3\92#õÕW\0²\94T\ 57¿¦ä\1aÙ¬\12\ 6"ÂâÀ\86\1f\8cå|Ûj`\ 3P:hyÍ\98«h'©\922=\13¨k\ eçN\ 3\1fT䦹\f\88n3\99|t8çÚ0{ÓÈ\92\90¤27&W\95áj(ÅÇóé6°ÁÙ&\12à¿j(\11\15Ì«÷¶X¬°D.\13\9cvÏe\91\9f\vç5ç\1dP\ 1Ì\18CT©jháà\15{ßò¦C¡(\8c"ù\ 5n\9cw\14àû\eÐ9\ 6\ 3)èpó\9a\ ff}Ê\19F\16DkTµÛ\8a<\e\r\8e:^Ê\fØ¥Ö Iì\11\93\bx\aÕ\ 4\93µhP TÈϲàW4y7mÄ2\81=§\15\8f¥AAT¤t\8a× ©ST}ç´ç!&6Tme3iq\12ÐJ:\ 2ëØïi0}z\85\V ¥-ó\9a\ 6Y"\7fy\85\9f%,\828þwàê\18ÏÁÎ\ 4þÄ\88;'ª\89\ 3¡å§6ײ\94H<t8÷§]\è¯%r\fè\80RYË*E\84j\1c\9a!8\aòâ¸uVÈ4`Ôp\8c\f\88°(\bô³mAØ \14\eÚ\93HØàÁÇ\ e\90>&+®g\1cc\1a\8f$[Q8ÈA\r`o¥uñê]ç\07¹pDÃh\16ÌÇ\96íoÚ&SÜP\1e\94ËÀÑ\9f!7\858\bãi\17\1cF°UËî4\99\0³=3\f\9c\9f¿çU
-~
\87µ÷
\8d;Á
\v¿ØQ
\81\ 3\11Ü<AÆSÚ¸¶f]9ñÚµ:4¢®¿
\bJU)
\80\eÇè¾
\17ºö
\86Ìùc)
\ 3\7f\88\82\19d
\8fó@
\1eh&9ãëpÚ[«æä¸[U5
\1a}
\11\88ìC³P[
\ e·²(ìy
\88d
\1aU )ùØ;`tØ6(ö
\ 6\94ÅHG
\17\fè
\97C3=9
\16g Ú)ýÑõ#Y}εª,üv
\99D
\0\ 1!úÐ
\82\97w
\80\a\eâ{
\15ÿ´\n{©jñ
\82ÒzÏ
\10\17\e^
\1a kϧÙ<ú¢:Ô$
\ f\ 5F&-
\98sï]8àóXq¶¢ú®
\ 5\84¹ä
\12\19GÛÛ
\11ì
\ ffaþàÃ
\8eX
\e .
\99ùN
\1cvÚ~¤7è
\13¿!ÇN¨
\9b\83@0®à»
\96ÎFÚ2FVw²(
\ 2z
\ fæÆÌáCÓVà
\10Ó°;;
\ 6¤
\81ã
\8c\92ªc#ó!ØHÔµ
\ 4D9T _à¿Ýf
\ 1\r\87\1f$
\ 2h#ö×:¹ïè
\8a9FP
\ f .
\1eH
\8aiëZiÖ+
\ 1Ø]U(
\91òQ
\98?Ü
\fáû
\b _¶E
\93×èQI
\91£&N"%t
\92¡¯%
\r|Å
\98\ 5SKÆ
\81\9fãL»IATI£4f
\ f\v\82.t~(°
\ 5\92£Óî²
\1c\13Z
\ 2xH
\ 3f²ä-
\ 5\1e¹
\91èäXo?ÊÅY
\85a®g
\a8ØÒ
\8e\e!
\99\ 5@
\ 5\18PAú]
\86¼¾
\8eU
\1fä
\97\83Ñ6&ÞjT¾
\ 6\9do$w
\11Þè
\86\19?
\14p
\95ýóm9ìr
\931ü½¥
\9eãÎ
\8c\85>
\10Cþt^öfC
\9e\ fÿ?ü}
\1cý1
\8fù·ÿ\Ów½ô~
\99Çß}]öþa
\12vrüÝ
\93]L¯
\16óo
\88\8e£
\9b\7f-
\7f¾9H÷DAe7E
\9d\89ÿÝü±ü¦
\86÷÷ËÕAAÿphx
\9c\84aøMéåòö(|"½T;©
\97·VþXÓ½º
\98øþ±^ß=¬ï
\7fyø
\a=ÞýúÛýãÝ[ZÞ=¾¿_ðpÅ
\91;v
\94\17\råPQÈ$xH£
\0x8Æ5
\ 6ýKîºbÁ.S`¿Ù©ÊÝFv
\10\ 4\9csæ
\a\80\90\8b#S¸/5º
\95ö®
\80\v3f
\9ccsï
\1ah7Á@
\1a\1cmY
\95\ 1x<Ã+ã¡EP
\9bc¢å+ÚÓ
\ f0ò êOqO¯
\9c\8f\89\9f\11\86h|gÇ<ñ
\14Å3?YÍýî
\b\r5^D
\14Ï`
\96\e¿V7ïßÜÐR«
\ flÊ[
\95´ÌþvvaÍhÁ³
\9c\8fi8
\vqïI
\a·
\99¨ùâ1
\9a\ 4\90Â%
\84ÉeåH
\87\ 5&3\lã¹3a
\1eó£»õů
\17\7f\ 2\14\Ú
\8aendstream
-endobj
-1558 0 obj<</Type/Page/Parent 1369 0 R/Contents 1559 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 886 0 R>>endobj
-1559 0 obj<</Filter/FlateDecode/Length 1912 >>stream
-x\ 1\9dX]oÛF\10|÷¯X\b\ 5â\ 2\16-J²$÷¥p¾\8a\ 2\89ãÆ
-\8a¢éÃ\89<IW\93<\96GZQ\7f}g÷\8e4E»}(\828æ×ÝîìÌì^þ:\8bi\82?1-§4[P\92\9fM¢ ît?>ÿt6[^G3Z¬æÑ\82r\9aO¯¢«p\95ÑýÙÕ*\9aÒb\19Gs<¼\8e»\v~\86eèj\1eãëùj\89ߧø[iÚÊ\83xºÀB\83\añ"Æ.W1\9eä4\8dgXN.xµÞ%\9ea߸÷ìé2§Ùd\89-»ï^¯Ï.ßÏ)\8ei½%\ ew\12#~d±XÑ:\95\'´NÎ×{M*IlSÔÔ8\9dRm)±E¡\93\9a\7fñø^å\eE{ëjÊ\eüØà\vÊu¾Ñ\15Ù¼òýúOl7\rÛ\9d\97\95)j]ñÝ \8d%¡uz®ÒÜ\14þÍ6°sÊ\8c«#\7f3 \9f\8f\97Ñ*¦ö«¯ÓÅ\92N¿\1aO\ 1Ã5\8dg×\80\r\v\7fÚ"ä¦rúB\82 á#\9761 ÛÕ&˨´Îiçø\11ÿ\83\14U\9aÒÖdZ.8_×lRS\ 1\0[\19í\ 6Ilt¡U½§ß%Çïþ\88è³\ eXÔ{U\93Â\1e¼\1a¹½ª°&~\90Ó\82å«J«\94l\91\1d_ÑæH©Þª&óÉ\8f§SThJã)r\9fM%©"Ñt´\ríÕ£¦\ 4ßÖ\\1dÄWé¿\1aÄ\97v1`\83êÑàuU gçlbäåÓD.È\99¼Ì\8e\94Ù\1d¢è\17w\90#/\87Ú6Î\14;\94º²¶¦¯ç¶
-e\18\96\19\b>/ì×ï;ô·\95ͱ̯¦HíÁÑí\9aæÑärú@IftQGô©Ô\ 5\8dnu}°Õà \96[mvû\rª»·6\1d\11\82\18}<Rx\97î2\852\8e$ñM\85Õ¡3¼rÊZlp\82ef\93\ eK\9fêÅ`ÓB=\9a\1dÞi\150ºó\84vQ\14\8d°C\96ê*¢ßP\1c··M\96¢\0\f>\99ÂÔFeBjÆ\ eê\bR\0¹\98\1d¹ª\93=3\re\fO\ 2Q\ 6\11\80\1c¦@\89mÁ\1c¨z\1a\fb¹¦xÎÒ\86¾flC\90A<\8fÀ¢\88îu]óîo+\832:AäÝ7è\8co¶\99ð~O\ 6\81U¦K^c\8dÀþ+\vS\fÀ}åº%\ 30t`\9d k\v\v²\ 2\8f6ÕT"b\8a\9a\1dgWÛAÚÀ%\8fh½7®\95\87\97(Ý~ùð\81\\8d2ìD³Yf\ f\12 <«5!®kF7\90sH\12\94û[U\ 2âíúr:\81Ç{Ê9\ 1±gM7uóR\0\82.\1e\8dö\8b·q\97\95-uUÃ\r\ 4LÕ%tØ\9bd\8f\¹¢O1Ó0OA\ 4n\0¹\ 3]\8e{\90·®*Ð6\87#©\9dþÁ×f\11ì\90k³ð\15~«Eæð\13\ eÕQ¢\8a\ 2Ú\84!§Æ\95\99:ê\94ÑÃ¥\aºÕ\82+ub¶\ 6\88·\19!XþÒ\14®\86céôB|\89\imö̸{éK&§û½µbS\a\85\ e\ 2ðÂ\92R\9c\10Fa\ f?>ç[ÈéMf\92\a¨ß\8e\ 24äÁH!$\18\15[\1a»`»q \18a\1aHå``Ã\80²Ëé$Lö\1a\8fÅA\1d\9f\13ÍS\10®\14Bä>Ð-\ 4pp±¾\87\ 23BW\82/à\eo
-»:\ 4\85\89)l\9aº\86X{\0(*ðJ\v¸ß\a0KW¼|\7fÚìÐ\8aÓó\17:\9dt®\81Þë\8cÛr\17´\18« `˦\14×a-tE\rɹ\88~öÆ\ 4ó\17\9erÓí\10eâ\1f_lÁÿ\16UÛ\7f[Zþ¼\r%r(È\13\ 3NS÷Òñú#\96\93\12¹¹£\83ô\1cY\ 6\eÑÁEG½Nñmµ\18]<\11 Ð:\1dH\a\e²\aHMîÑs!\8c\11ÕjÓºB\eE\8f\1d\9eZ\a´YÜ8× \8fíd7ßtý\1cÔr-tÂ0Tô¢R\99³2\15mÐ÷s\9b\9aí1äóÂæ®Iö\83\14`\1f7o>`V\0×Ó\81Ä}\13öîâ\15±±ß\9e\85N[P-ɬtìÄæ9$â\ 1\97/\1dhclqA\ 6\92w2\ 3\19\8e\15\84=éË\12®L\13\\vëM<äà\84_ÀÂÏp=ódèïB\83ìz\80\18#\ f?l32\vÁ\9aü$\99Zø(ßÎÕ\ 3\17\8e\8dSº\93\ 4\19Ñk\99\8d¤\vq̼<\ fM\94\86\13\19\18ïmد\8eÕÔ\817æ¿5¦V\1d\1eË$Ö\19!0\ f\13\1a\fÙ\9b\13N\ 42-\9f»|\13a\88Ü\9ezÖù3Ô\91\ 3\93Vf]íÛ«3©¤\8c.Ê=\ 1-¿GæÐ|(µ\92~KÛû\8f¯ÛÜ|L\17\ 47!\b\84W\87Ç\ fèâ«äGTV4¬«èÐ\91\9a\86Àz[Ëôî¹ôñ~üùîMè²\0Ï\8fÎÜ\94\e4 \1f4v~iSVGP°ïyÈUó\1c* à\11\83ï\ ek°\11¢j\95Î-\86(Ù[FTnÞ¸\1f\18\15Z\95\1f\83 \8e\90\e\f\ 6¶\18\16¸\e\1704÷Râ¼Û¥h\87Q\87c\871\v\15Gýõ\18"yô\ eóÐÑ\16zD\a\9deã\a4¦\82v\95mJ©íåû\7f\9bªfànS\96¶b÷ÍTµCâM{\0
-éHØ/\8cT\9f
-&\83k\98\8dà\ 3\ 3\a\97B\13£´ñó\f¢\86ìufKÖ-\95xE\86\1aOhÌt\9eL\f6ô\87d\\88%4/´º"³*\1d\ 2Çí?\9eL0¢õ\ 6Ñ\88¾\88K0 =4oî~å]\9cÍõAÎ1\87\a¨ÈïÆ\r\14oËQ\8d`ö¹\15iÁª\81åK<\ 1mYmwá\ 4¤òv(\11A{e]µ\82£ªL<¯\10+¦\9b\90\17\e\19<Ñ¿ütd\84"Øm!\1f\1f\1e\9f®\18Ân¸\fç\9fAd2/àÓa{ô4ÄP\8f\91\92 \ e\14ô7\85\93\92Ô`/s&îA&\18ôùì\8bÓ2\9e\1a·×i\18ÕV!\91x\81\ 3ÿ
-ÿm°ÀÉtqÅMýþæãë\eØ£ý\93[÷[\9b@dE\8dÞgEÖãö\93ñrrý¿\86øùr\1e-q¨\97f½ZrÒïÖg¿\9cý\ 3_Üj\99endstream
-endobj
-1560 0 obj<</Type/Page/Parent 1369 0 R/Contents 1561 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 897 0 R>>endobj
-1561 0 obj<</Filter/FlateDecode/Length 1653 >>stream
-x\ 1µWaoÚH\10ý\9e_1\97öT*\81ÁÆ\ 1\12)'Q%isJI.Ðö$è\87\8d½\ 4·ö.g\9b\84ܯ¿7»^bH"õN½TiÙÎÎÎ\9b7of\97¿ö|êà\8fOý\80º=\8a²½\8eס°Ûñ\ 2
-\a}|\ eð\9bK\9a³\ 1[7\7f]¿ßëö`ëú\a^\8f2ê\ 5^X-R\1aïÕ\96\19\r\ 6Þ f«-3òC\1fþö\14v¬¯a\ 5\86ºk}\9dQÐñ7\bØ·¾\865èoAê\ e|ï\90\82Á!rË(\84o¿Z±o}\rëAè\1dÔ¬ÌJÐç|aëá\0»0\80ý¾×%¿ßA0\0>è!\88]\19kmÍ\80\ f\11ôÑZ_Ã
-Ò\ ejV?\18\80\1a?\fMX?\1c \82]\99\93kkKEP³2\15n\r+ÒA\95ÍIìûn²×>ëÐ!Mæ¨~o\80\ f±©m\87&Qã5½\9d|ÛkäË(J\13©JZê[MO\94k]þZÈ(\97%µ"Ú\97j\95Åyr'ób\9f]:Ôò;¨×$n\9cèL$êx:\1a^\8fÎ\87_ér|<ý¤\92õW\1aË\1c\ eÇÓ±Èn\ 4ä\ 5\81µDº\\88î×ê\8c\80\15\813¦_\12\15ëû\82F\13Z\ fzÎìB\å\89*eN'\ 6\ 1\9d«¹&ÿh\a\añOµc$2yDÓ\ fWt!
-\99ÿ\8e,Â\ eD\rD\89,èjì"8\0?#Bàÿß\11ÂqÒÆïÇ?\9fÉà_\95ri ý©µtÅ2u\98§â¶8\9avÖ\ 3ÐÞé8º·ö(.Òt\86\9f«Ë÷\97³ÙbÙ2¸\9eÝ\1cË"Ê\93e\99hu4µûwý\9a£K:¹>ÿ|zMÃÏÃó\8bá»\8bS:»¼¦É\87ó1]]\9f\8f&§×ÍgO\8ft\96AþGSguºø!Vg³\1d)þfÛÊtN!KÛ8äò£ÙlÿeeÂø3;Ì1>^E\91,\8aù*M\1f\b\98\1eÑ\94\9a*\80/\83ò8Áö\19Æ]h\aI«ësßú!\9a:ôh\18Ç\89º¥\91¼§ª\93
-ºK\ 4\95\vIµÖ\1e^}±\aaºÁ\9f'R+èóAï\1e(\96s±JË&Ùq¡çs\f\e\12iJ\95Z©X\88\1cÝ\8b\8d\89\921%ÊÐÌãÍ\9eÖ(²\e/Òj¾\1d¤Á;\19ɾÃæyÞ>Íu\1aË\1cØÓB\93\'EÉ)$ÊÕ²\8b©
-då")ª½\84O»\19űË\18\89þ-rÀ\ 2\ 2\8f&\88\87té>A\ 27\12Øõ=i\ 5ò\13\ 3\ fWp+èaÌ#\ 4ï\85\93\92Q\89´V\18X\1cIܤ\92P\9c¢^9¹\96Ѫ\94$\14].¥ª\12:]Ï\1aÜGðÄÀ\9d½EÔrA"Î\12\85´rQbpsZ-\1eÛU^ õ.Iå-\b\9d5\12Ozfæ\93Î+Rq¥\98\125\1cûæ¸\1dfgo+eDÕî\16.q\9f\\8cYÐëï\1cgì\9bÌ\r+\ 2\1cº ÷\96Ãcz\90ÅN,Àdò+\99¼\10\19·Zܨ\85uBká\82õ\ f\1f)?WÈ\14åg\82Q\1dÇ5¸7\15æÊíRÏ0Å\ 6(¬¢Rªe½i\1c-æ\rwµÔØR£\9f'\8ePñn\8eÙª@k\8a;@ÚèüN¤+\94\87U²Ìõm.2Zhý\9dÌÞ-up8æȱ \90¼,\1e\8aRfU\99mD×25DmYFmã\19\89å..ÈB,\11\1dv\ 1ùÍ¡\9c\ 2:C\ 6?Ü\83s\82À1\82Dþ`Dý_5À\97\85TÐ=÷\1fãeöç¹ÎÀ\81}\964Ñ4ÆÂWÆ£XÌ< XCÂJ\97¶\87\9b\169\1eWV½\84\99ð\84eÓ\94®\958¢uª\97\8dÿ§F\8ecô\85²1\ f¹\\8a\9cõcI·G:\9e_\1cM¬£\12ÕY\96ì\98ê\88éeH
-³ÔE5\89ztnI°i'¦?j\101¿0j\98\88j@6yJÈ<Gíô\9cö\87æ\ 2 \13©\12\19ïó\84Áãn\95ó$ [²=\1ai\83A\0Ò³Ü8\O82â´\89»ÆÃð-P\193µ0Û\94é9\9c\8ayWÊuÉÈ8Èöøk\9a4\9c\\12\fMa§\93\88"½Rå®~&\v\89/.<3qP¶L%_æÐÙn]c\99J¤æh}¡\98s\10\96ËLß±\1eq\90y2\1a=2Òg/\91\8a §gàá+#Õ÷æJ\ 1.\14b-\18Ù.¤Ú\84`ìÏÍ\ 4ûðAùK\8côØ^Aõft\10K½¹\9a6¶zÛc\95¥»e\9a5¢\85P·,>.¼¦{þ÷A¯ D\19W½n\15Ã<§¸\82¹xoN´\92o°9\89\16\\ 1Þ\fE\81Ã\8a\13w\170w÷\v\r\ 60Fx\ e\98\18:ÿ^Ý \9bï( ´×â«_Ú7\89j\17\vÇnõeá\15\8dÍS\90\ fH\14¦/xÙj\17&\ 4÷¬\82Ý\94\1aóì1gf¥úæòÊAtkzí77êàYÓäÛ\18cß\92¾y\83b<³õ©{д\8f\14cÞvv¢cG¦\87.\12µZ?=¢\v\ 4\1a)¹\0í³A5Ëü\1e¾¥\ fºÔë\1fÚoMãáÇwC<?ô7¼\1cèDG+£{~#ó¹-çÐêwøkß\7f|\85ýÐë÷\ 6x«á\88Á\80O>\9dìý±÷\ f$5¹)endstream
-endobj
-1562 0 obj<</Type/Page/Parent 1369 0 R/Contents 1563 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 902 0 R>>endobj
-1563 0 obj<</Filter/FlateDecode/Length 1198 >>stream
-x\ 1VëO#7\10ÿ\9e¿b\146\15U\93}%ä\81\14$¸\83\1e*Ð\14VªNê\87sÖ\ eñÝ®½g{ Hýã;öÆ\ 1-×\83\1eå\91ìcæ7¿yxf¾v\12\88ñ7\81I
-Ã1äe'\ ecH\ f&á\bFÓ\89½Æ\7fÅ`e_ èîãú×Îp2C±$\1e\86)\940\1aNÃéö®\80\e\a4³høj\8c\12îÚ¿\98Æø¤eà$ëDg1Ì [!¥ñ\14/¨3\18C\96ïïA0ê\ 3Uü\8e)\10¤d?g\9f;1\f\92\18fÔ¾?èC!sb¸\14}¨5£°\92
-Ì\9a\ 1ew<G'xÁ@®Ü£Jqa\98z\8e2îÃ\86\8bÙý\ ek+\92&áØ\19z¦rI¾0Ð5Fiì]\87ï\99à\r1pÍè\aüÂ\97Ú\91²o\vØr@z+ÝB]\\9f_eï\8e\17ó\88\99<r\829©B§×\12}\7f\9c\9dÎ?Qb\18üÒûØ+{tÐûлìÝ|j ^,æEÕzv}z\93\1d_gó®fÊŨ¨(æ[\e¢Lw+»ó\1c~c¬\ 2\ 2¹¬\1eZ8y\ 5\81çüx\15\ 6\96\Kt\ f\8e)}\9a\ 30òQ¥%Ìòµ\84n\17þëÏÑÑ\v\90Aúw\90\1cþ\85?¯\a\7f\11\14àPÓytGT¤+)\8b\b£\19\ 5éwͼ\ 6´¼\9fÇ\87e\81\1fzý]0\1f¦×\80\16Õ<ªµ\8a\ME\9a\94Kâ\98»b\8b\82\83°Râð18ß\80ô\85ad\9d¯¡û"Z\17\10$2eÕ\144¡4\f\ 2H\8f~JZYǤo\ 4\ 4\17\8bÿ\ 3Ô³,¿P®àYr\9e\99.%\85 öº\97%=É\97$÷\\15\a\89uÿ\15Qj1Új§oÒ\1e¾I{ô&í\837i\8f\7fL;Øv¶\1fÓÞ\83+i\9a\9eÎí¼à\1aðO0F\19m¥§)þgµ_ðe¤Ëe\98K±jiìµïᣬ\1d¸í\84\8a\99Z ì²w¤¨Y\1f\96µ\81s %\bÏhc'
-7P2"tØ\ 6kÝ7\rô½\14Ì·s?1Ù=bÄV<:\9bA2jæî`\98Ø)\97\8cÂ4<\báƶ\ 5 \82¢\19\98°\90ʸi\15\9dáðGa;\aéÄjýÉ\ 5\95\e\rWY\94Æx\84\+\ 1;Z\98Ò@´\969·s\8a@\85(8gÍ\1a\18ÁÞá\ 4\99
-![3\1c Bª\92\14Å\ 3\18;Zí\ 4ÇI^ÚÑ}±È\92þ÷Ñn\1ehöÝï\97ø\10ÎÎ/Nñ\v\af\18zæe\r\90BKLfå\8cZ4LJÎ*c\ 1í³'ÔhC
- 6î\86pò`ç3©\vÓ\a)\8aÝàÛÚÆÀzY\87ÕwË \85n\13¹§Që"·{®Ñ\9c´ùÕ\ fÚ°Ò\13¥\12W\ 3\9bbÅ\9cçÛ\10q\ 1RQ\y\8cl9í\böA\11tHÙrÀ\ 2%¨ýµæ\8a\95L8ï|Bò\82ã\93]±¤c\Ü0pXä6¼XN\rÛ\1d\89\7f V÷Ñ\1dYpqÛ\ 5·D Ç\98a6\9b\146§e³fÖÍBÞr\v¾ÅÞòv±ç·\ 2·5,þ\12ÃÌ+ÜÒ|Z\10À§¾\90\84Â\92\14Däh\1aÃ\ 2+Â\v\90X[þ\10x¿ÎWð\80Gj\e\8cÆÃ\16ôÒn\85+níÚ-QË\92ÙÐk»;6g\ 2×bWÝûO\8fñcÑï#G\8dû\9c]éÈV%õ*LÔ¥s¡åv.Ë\12\ fScÀ\1f\9f}ج9\1e\82\9c\b@ZnsÅX4ôðìaÕà¦\8aAÆB\93·
-[\81KÙ-\13\f³ïÌ\17XV.(¾ \9fVXc\rwsçN2Ƶ~:\84q2 g3»dïß\1c_\9e\1cã\ 1\97\9fYnà½Ìk[?n\91¶º\ 3¯2\98ÄNþ\15Ía4\19\85\93ñ\14[\ 3âOg\16æ4ëüÑù\aÇ~\93êendstream
-endobj
-1564 0 obj<</Type/Page/Parent 1369 0 R/Contents 1565 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 905 0 R>>endobj
-1565 0 obj<</Filter/FlateDecode/Length 1518 >>stream
-x\ 1¥WÛrÓH\10}ÏWô£S\8b\15ßâ\v/[Ü\12R»@\16D±\ fy\19Kc{@\9a\11ºÄköç÷ô\\14Yq\8aª\ 5
-S¶f¦{Î9}ºõýlL#ü\1dÓbBÓ9%ùÙ(\1aá\97öããõÙdr\19-i>]E\13ʱê2\9aùo\19}âõ4\1fMñ9[.ð9Á¿RÒÆ>\98-\96ÑüÔ\83éj\8a3Oì\98¬8XïÁËøìâjEã\ 5Å\ed;_\8e)Nm\92#\8a\93Áx\16M#\8aw\92nò¢Tº®(6&«d}\1e\7fÅÎ\19\8d±\81w\ e'\vä\13§\83£Å5\16\13VSQ\9a{\95Ê\8a\ 4}~\7fó7Éï\8dº\17\99Ô5\99\rÕ\bðEéÔì+z\1fÓ\8b4¥[\8e&KüüC\94iDW¦¤ÄäE&kɱ\11q<\ 5l\88¨ôÆ\94¹¨\95ÑÏ\b\vD%\81Ó\ 6\9bkc\8fnsßË5Uª\96$jÚÕuñüâBù{E\95iÊDâ¤\8c´¬/HT´\97YÆÿ#¿^ÌÔ$M\8eìmTR:É\9aT¦´WõÎ\86\fÇ\92;\96RUÕ¥Z7\9c$\ 3ª*À\92ð7ìA\10£³C\0 \18K%7½\90À£4iã6ù\9bm¤¨\9b\12°\ 2ÄpËÈQ\ 3Rg\9e\9aé\18º\ 2P\96ÍqD_v¸?2\b;~w;\8eÈäõá9¯\15@?Ë|ÊL\19Ë\80\0\17UMQ\98²Vzko¾5\ 2\ f\8cÍ\1eº\1fNæ.øU\0¯ÂQ@®\14\19X*\fø0å\ 1\10¶$âç-8ç¥\1dQ\b\9dÒêòbµ\ 4LN\1ai©îAr!\92ob++w\89Ä+r¸\88 e\888\1dÜMæ\v:¾¢}Ø
-è!5\16¢»\99\96\89¬*\81Ìø\8eI Ã\r[X\9eHÄ\13ðk\99\b\rHªZd\99\93X\92).\96ýN%;/\99u-\94&Æůì!\ 3\164°Ì\r\ 4ÿIäkÁk\19\87Nít\0\9e¹íÐe X«\93·\b%×\814èl8YFã\15\rg3ç\ 3Vl\93\88^\ 5èBE¿v´Ý\1eÑöH{l#0\r&\81ÅÝ\12ð\ 4æ,ѵ<\18\80Á\1cV\89)¤s\16<\bÅJw\83Ö\17\ 2\89QýOMP¬é\ 1ó¸¤\1d\84ÝB¶ÒÈ\r<¹£Þ»ó\88n4U;ÔÄ3 ÞV\19\1dëÕ\15Õö\87*
-Ùg¥\16å\1aÌ£äà0J\aáù\ 36*\93Õ30\viÀsnÞ_\91ÿ\89µÀ\85ÊN\91Ù\1fIKÉÆ´>8[z,©\9fØEßþ\9d:\8e«Éº?W\1a\93\16\80õ:âkB\ 1\19ìMP*j±f{v§ %\18Q.\ e \8e¾7\12¦\97Ò½\12\ 4Ýë\14\16@oãø\96r\99ì\84VU^EôF$»\1eSA\11ì)ì#ö¢m¤\1dì\e$\88ª2\89²x}þø§%\8eu"\92º\81\ f¡ñèÌ\bk9ìm¬='O\171|ëEfi©â"= ¯lµOÿZ7·×¾T\13\ 4Çí\9a
-Ï`Ú¨,µa.pq\1f¢\8d\8e\158Ñ¥\84\ 39\v£û\8dÇ
-¸ä¥î¢-ÜáÆP\1f\9b»chîÝp@ÚôZö\0´ ¡¢\89±>lBµoKM©ê\ 3%;\99|ãÜ!y±Îdú\13¥Ìü Ð\95Ø+ëZO¨å]¯r\90Pð}¾{{³S>È@Ý\v\95qb\1e
-\17\ 5\13W\98H\82Y\85\83\86.\9báÛ\ f_â\ fQá!
-Î3põò¸îU\98||+\ fÊðb\bý-þYÊ\0\e\8d\9aiÛ\e\16 äÌGt{$\94\8fY\89í\ eÄp1gJKº\95%\86¨¤TEý\vMNÐuüÇoÄå\97Ò¶\14\ 5: ¤o[éF$Ü÷¬ä\8eB\17ÿ3th\ 6]pNÑx\87á\8dÖ\ 6C\93\ 5äî\9c=?\f\8a¹\14Ú\9a?[Ã!\98``ó\91\99p\9f\16\9e\94@=¦ÂdÇ;3Ì_\fì7\8dRoûdnR\99\91\16LLgÜ\13°\1c\ e\rD\823\1cµYV§óâN\8bíEn\enw\86±VuÔ`Ù:ý\80Ä\ 2\ 2;*\ 1'\9dÆ\1f\9a \14\ f¬6\98Ra\8f²`WKÉò\93à\16ì\1c{\90\8a^B¢4\8dkô\17W\97\ 1TùÚÍ\10\9cèÃä>àsÜO\ fkË"9¹Ö;À\88Vaè\9f¹á\ eØK83\1a¬\9f\ 6m\1a\80¾ÆÄ\88\ 1Õ\1a® -\ 66í¡»;\ f\88\8dðZ\82æñoï;ñ\1fL«Ôfó\9c®Q\1e\8c>.Z\1a C§¦`ë\86KÁÏì(yê\1c>\vÓ\10ïõ\13ÑC#ãqÈçÀËð\9eEÔ¢õ\9c>»ó\1fHwÝÖa¶ôø\8eçxC[Nñ\ 25w·ùôâÝË\17x\8b1_\91\15½î¾.ðÎaØ0\\8c\0¦\9fÍ\9f|Ó\9a-fÑb¾tóìjÄ'¼\89Ïþ:û\ f/d\86\92endstream
-endobj
-1566 0 obj<</Type/Page/Parent 1369 0 R/Contents 1567 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1567 0 obj<</Filter/FlateDecode/Length 1473 >>stream
-x\ 1\85WÛnã6\10}÷W\fò\94\ 5bù\12¯í,P\14Ùl\82\rºé¦\8d\8b-°î\ 3-Ñ6\13JTHÊ\8e\1fúï=CJ\8eMÛ\lK"gÎ\9c93\1c?w\ 6ÔÇï\80&C:\1fS\9awúI\9fF\83\ 1¿N'x\1dâßJZv>Î:½\9b>]Ðl\89\1dã)>d\84Õý>ÍÒSâ\9fó\84È\96iª\95,ü\aºu®\92\8eDA\97YvoUá¥ýdÕFÚùéü\1dÝ=t\7f¿¿z7{ìô©;è'S\18<ý»¾\1e\ e\921_\8fÞ0ylñúåÀ\1ayC"õ\95ÐzײÌ\0S+\85\97ä×\92Ê\88\87\17õnF4\18ĸºÃàök!É,ë\85f¡eîH\16©©8\ 6\99Ñv-\vRy\89\a\bU\15«°ô6\ fV\1dP\18MNzÚ
-\À[!rI®\14©$\15YYH¿\95²h@\9e'C\ ew#¬2\95#W\95¥±\1e\9e"\99$lºV^"4+]B7Æ\92|\11\fà\8c¾©"3[G¿ÎH\15©®2&\9d²Àtð\9cÑÉe\89¥-g_\84\93ö\9b\85YK··Øþ'mÞ\ f\92é \bÎöV/ÞS
-:\1d)ï\b¹sÊ\14\91\eå\1a'Ñ<ýhð¤v9\1c'#\8eo\16\98\ f\84\82\bZ\9b-gì©Àûv-|\13mÄ\8eçb#i\ 1\9a¨*µ\11\19øX"rÑd/¡K\84ê|\85¤"µ\19\ 2Ù*[qZ$)_à\99g\17\9c\8e\ 3Æj]Ò½5¥´^\81»L mVd
-½{%4&\8f½\eh£VO\13?§\17XZ~\9f+\95>\916æ fÚ~G¨+·s^æ@¾RÎÛ\1d Ï\16¸Ê\ eä\18\89ûüË\97»ùü!l\98ϯ*k¡»+Sxkô\83ô¸\15?Ïç! ùüºØ(k
-\96g4z¤ñh\94¹\82÷\8d\14:rsÀ\8bÐ[±sT9\10Â\94A\\a\8aJh¶Fþð\87à ñ\1f7Z\89ð¡Õ`¸E\f² %ÒÖæäH]?\90\fg%\f" \84>\9b-`Û3z\10ù\ 2Z7pT\18\1f\ 5\ 3¸-\875\18&\ 3©\80Þ\vn\10\1c\ 4ª\199E\11±\14S´ª\9d©8è7b&µ\f\9aE¸ìJhVÜ.ÊS\15ÎäÌ~®=\1f
-\1eDrÁ8\85Âô²,c»@8ZåÊ\vÏ\ 5\85+\14B\8d3p\ 6\a\9aö\1d¥%8t\92'±BÐuÁÓÂø5cn\ 5~\8b`õQvPÙ\17ï{\17Ó\96\84¹MgÑïk¦\ 1j\1f\18-\95u>aû½\9b\v\1aLê~y>\8aZ\1aà=¡OJ¬
-ã\94Û¯CÙóyÑ=ïÇ\86\1eÖ\r\12\ 22k²*åèãâC\81Â:7\v\ 6À½ÌÑ\f ô¥V\95\81/ðY7\8fL.ªU\8c\86\89-mÝ®·
-\8c\ 4yÔb\8dÛ\17 ípg\8b°ãí\81u¶º´&\a\8e\87»\8fM\8bâ\83¦V\1fºhÐ"«\82K\ 5©àF\84¬\v\8b\13#\8bí\9a\9fpY\88ËÉ °\96ﺡ»ÞÞm\86
-J½±»À;Xldõõé\8c\9c bÝ
-\88\1ahÂ&þp\f+B\87ª-Ý_\ 5ÅÇL\ 2)\aÆr/$ú*6\ 2*Ðy\16\ 2Ë\11Ͳ\ 5°UlÍA\8bò\83zv¯9ÀI!õò\f'\ 6=V(s,ä6\rd¹Ê2\9c\99¨³úüc\0\8c¬¡\95\9dó\96ç?
-õòjßU\8bØ:\93:\ 3`Ib®\88\9dj©4æ\15N\18S\ eÓx+¨\14®ieaA J¾Ä^@'\81½\96ÓÔä@\9a\9d$ô\8d\ f\8eHp}3\10Ç}\ 2LU%³\aÔí,Íà\7f»6\80\13È\ ebNc\9fF«@\9bá\f\98 h®4rù"ÁóeLSn@\9d\95Zn8ÃͲùévÒuð\8f²¨t\16N\98\16t@ª\8f\9cÆ&1é%z\ 6&/aå\aÞp0Ïu\87u\1dó\98Dô}¥ÍBè¿\1a³õt\16\1fR\8b
-¾Û\85¦\91:\ 1qq¸¬BWb
-\92ûL¶Lèò\99\1a.£Ù.01\85]ô\É
-e
\82æX
\85Vr0!6
\18tióc
\v]°
\95\eL
\f\82\1eÍâMèßC
\12¡ò
\7f\8dL küD=
\fb½
\0¥§Ë¬çø
\94\89\8c\1dv©0*r
\92\97Fk³ål
\82Z*
\14Æ<P
\10Æ
\1a±0
\95ÿ
\1f¶)Æ[
-\16Ô+)àÔ\9b\12ÑÔ ÃG\14a çÍ\0kS8'+L\9c{[lJ \85þ\977Æàë8bÖð§õX2\18ã\8bÁô\9cÆ\93q\1cÚ\1f.ï>^ò\ 4õ\88nE\9fL
-ßE<Ø\18d·ÙÐ\9dôù[Ãé\egÅh2J&ã)N
-<¿\18ð¶ëYç·Î?¯O
-Mendstream
-endobj
-1568 0 obj<</Type/Page/Parent 1369 0 R/Contents 1569 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1569 0 obj<</Filter/FlateDecode/Length 1542 >>stream
-x\ 1¥WmOãF\10þί\98rGïNº8/\84\ 4hAâtwêUª\8e\96TU\ 5|XÛ\9bxÁö\9aÝ5¹¨ê\7fï3»¶ >hO*!\8a\1dï¼?óÌängL#¼Æ4\9fÐþ\8c\92bg\14\8dhz0\8af4=\9cãz\82·\91´Üy·Ø\19~\1cÑ\11-\96\90\98\1dâ"%\9c\1e\8dh\91¼¦æ¯2ªt\94è¢\10eJ'4¬\19ƪ\1cæ\95¡\ 1þÏ÷*Ú³o\167;#\1a\8cGÑ!ÔtÒyu×ÉÒcé;6ð_Ò¦x\10\7fl»è¤o\9e±}WËZV¢¶²ÓѨ°Áÿ$\98·NWÿ[\850\8eu\f?Ni<\ e\19\1dLf\9c\8a\vQÄ\82l¦ë<%+\1d\92/¬.E\9cKJåRÔ¹³´Ô\86\&áj*+Y¦ª\\91.i£kCvc\9d,Èm*ù\96âÚ\91¿-_¡*¹Pæ^oDé"úÄßR©½\1f\\8aýhÂöë\92\8b\ae.\13\8e5R&î%9Mn-Åmc\96\1dÈu"rä
-æ\9dÒ¥\8dh\91u¹³m\b"_\8b\8d\rJ\96u\9eoÚÜ5öl%\13µT2¥J¸¬\14\85´oIX¶C¶Hc*Ä\86ÝlÜð\16\8c\91\89£ó³ÅOt/òZÚ¨Q:\99ES\ eâ\8fLúl \81@¡ \e\1ds\ 4!·¸\88%y Êô-§gò\1cvn%\8e"w\956Âl\10Yµ!½ôùãt Ù\8a\rk<{ðZ\95½\80øàeÐnì5<H8;\11q?ÀVSYö@\1a¥S\85$æ0\96KQ" ºFm8\8fM¿è\8a¥\ 1\ 2ÀÓ¢ò¾*l¢ó³gÞ{\ríF\16ú\1e
-ÅÒI\13¢\ 5J~ OËî\86\96Bå>Ó!Y\85Ze\8e\96
-\8eæré np\97KK\8aã\a\º\ 4 D>\9c\9eño .\14\ 1m\96ú\9cn·<*\93J¸[¨\12\ 1"È].\Y\17±4»\0\85U+Î\91Ó=³\1e÷\81yX Þxa[i\9dKÓÇ\ 6'wï4\97\ e\86~$\ 1nÛ-Db´Ý\85\14 ¿BÏ¥\e\0±©\8c\91U.\12\98]+\97\91¨*£aJ8Ù`\8fÖ\f6x»ñÊ80_Á\9e\8f{\965[Ôe[\1d\aÉ\98g\9cñµ÷Ù'=8\13\92\95\80\ 3\1cÊÀ9çS Ð\7f×Õ³Í2\r"\ 3¸ön\9eSð(ãëL%\19³!l/\8d\ 6©@\11\17\f(\0T63üxDc4\1d\ f\85Áþ8ôßx\1aM£IDïe\¯VÌN\8dy|j0Yá\aÀcö\9bsã~FáÁ\17ܬ)Ë>`µ\15dÖÂSë@¡\é\90O6\ 1綸ÛWËf\12\9dm\13£ª¶wÐÁÚø4ö\92$̪.d\89sm\9aAmÎ\7fÑ\14' \8c;"¢3²ª¨ÀÉò\8bð\9fþ\f|»åö 7åÊRè©X\1e\87\uós0A\8a8âfn\86@·'\8f+ª¡\ 5õ\ 6«ÛSs2ÆtnD_|ç§kw°\rjk°¾ µ\fìfk Ý\83\1cß0ò¹\9eÆw=`k\9e\90íÆ·JiPÑé\90½Â;ò^=!à\8d\99:ðe»\ 6pBÙCoO\1a\83á\ 1HY±\92O-\ 2/Ú\1eñÇ[\1d¾\9eì¯\ 6D¶»\90GÑÖà{§.\88n\ay9¦\97\13\9a\9c\9e~ÿu@\8fQé\13½hÇI¨\85\b\rêa\82Yà\99\96\ 1¨@Ý\7fb`òÄò,Ú\91u\90ó\e\ 6\95R¦\1e iÞ%*P\vø\15 \ 4Ý2²¥lchF$G\1dd\81zW\a\80\ 6~÷)\ 2ç=\v¯lzL\7fM'\7fÓ\1eÉ$Ó\94©¦\88\99j4P '÷ù¤-â$W\80>\r\87~ÊgÚºa¾\9eöDD\9azçÁ¤KP$©ê\ 4\e\1d¿¦\14'ºövrp@e!ìí ®¢ö=ê©;\aï\91\87cê=x¯\v¡Ê\93˳\8bÅÙo\8bkú|qrù{©¾\Ó\854\98R'\97\81'±«Fóë\9e0\829¦««Ó¦Ã|Á¿
-\1elæ¸\84ÜÜÔ\1cá-$S\83ñü`\7fJW¯y1¾\8d\87öê\rn\0f\ 3øòþÛ|ù\9cU_¸ÞÃñhzäû~¿í~þlmõ\ ewþ'¢LdN,Ü;òÁ·Tx\9es\18<\ 5½\91c0J
-7{\ 2ß óçVE£V¦Ïéx*ÂÎ\80ü¢\9eÛtÑUô*¸÷
-\1dÀ\9b\10\ f¹®i8\885jÐl2\ fë%\ 3³\9dñ\1dRA½\82b,X\85²Ø¥Ú\95\98×\96v\ 3hW\îQDE:\ 6é5¬ÔÒL\98lí\b(ýE®õ-a3à>|Ì\17ͤöM\8b= 9c¤õ[:\18¶\19\91\87Í\96?\9eá'Õá>ÍæMk_\9cýòî\8cÎ\8d¾á\8dö½Nü\b\12¼óqº\aÀ`>âß[¯¿m°NçÓh>;ÄD\86ÈÑ\845}Xìüºó\ f\a©UÁendstream
-endobj
-1570 0 obj<</Type/Page/Parent 1369 0 R/Contents 1571 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1571 0 obj<</Filter/FlateDecode/Length 1323 >>stream
-x\ 1\8dVmoÛ6\10þ\9e_qß\94\ 2±üZÛ P\f)¶¬\ 1V4[<\f\ 3\ 2\f´LÛL$R%©$\1eúã÷\1c)ɲ\93¬\8d\11Û\92Å{yî¹çîëÉ\90\ 6x\ri6¢ñ\94²âd\90\ eh:\1dã}2\9fá}\84\7f+i\1d~\98ÌGéèµ\1fÞOÓéñý\8f\8b\93þÕ\84\86CZ¬ác:\9fÑbE°?\18Ð";ýÛT\94 M_+\95=ä;Z+½"SyRkò[I¥5Ë\\16¤\1c=)¿¥\9d©,n*í\95Þ\90Û9/\8b\94¾¬½ÔTJSæ\92¶â±=W\9f\82%eß-îO\ 6Ô\e\8e\11übuÚ\97>ë\aK\99(á\17'\rLK[(ç\94Ñ\8e\8c¦Ga\95©\ô\88 e%]Ê\86úWç4\9cÄ\9czãa\8a¯«Óá$\9d¤ã\94þÚ
-\1f\8fHëheè:\ 4õS<¸\a£7b0Z\f*'CÎ\89\97Î\97V»\84ÓßXQ\907\94meöÀ_\9c\94{t\0\84´¤E!\19\1a\12(Rå\18\1a\0fef6Zý+W´ÜÑ(\96"ÄÞ\ 1á
-)ËgQ\0·³`\80k\818.b¨\ 3:¯S\1c!5\8e\95ð×\84פH\aP¾LrÊ\a\83ûPê\8dDu}\8d)c¯ôÚØBx\80Nkk
-\12m9êË\1a\86\94\1aºx»\vPM\9e\9b'η\ 6\ 6\95æ\0:)FÛd"\9fä³·"ó\80¤ãõDzí\89·\13\86¿Ñ\10ä?F¨s&ùÖ_*ÝÏ\1aj ó$buÀ$6\11x4IéVú@óª\8c\9e\19,\81þ\b¬\ 5\ fì#øõ\12ï\96T\85Ø\91\96È5\80ã v\9c\ 1S\1aÖ;\ 28±¥byb?ñãà@J×(\94#çÑ\eô&ó©(¤^±E¦8\18w\ 4vCáµÈT®¼\92\fó¨ø\b8\18;\1a\9c%W\1a\93\83¹ûÈbsíó;bFÃÜÑ4\121\ 6l%\84ÃÂ\8b\848À\]">Ëͼï\9e\95Ì\15ÐjSï\96?¥Å\16y6¨t\7fBß:\8eú(ÍÈ©ÿ¡\r7ä7\91+á\86ñc\94¦é\85)\99ã\1f\1eE^É\vÜxYºÀ +\84.òÂ8\8f\8f<ƵW;w¶\87\11 %ì*¡¢ÂÓKI¨Pi\1cÐ6\1a\15\ 3éE^n\85®
-iUÆ\98T(\9fu\99\81P$ÿ\ 4\ 2vz%Û\8aÐ\1dÖ\81|Ì\94H\b\a+Îp0æ\89¶»r+¡\8ew§I/¹{G\0èIæyJ\97\1aO cæ\fTDäP&\8d®\86\1a\a}b®µ\ 4\90ö\8cK}\84k8Æ&\82Ö\v°Dd\10;\r½`«`×\8aý J"\13}BbÉÓ¢c\97«¹§83\1cÒB\11zd°c+lâî\8e\84?òÏfÀoÆ-W\1a\8f\81\9eP\f¾Õz`návQå^ñ¸ \ f\1e³ó\93\ 4¾,Æ¡ßj\85ÅDYïYÆ\13Ç\ 5
-aäö\1aZ\97\96î¹\94\81\8c(/#ÇAö0@10¡\r)ñ5.ÛIVÚȱ\83C¡\91B=\ e\8e\8f^=þyG7<S\9b\ 6©\1d£D¡ \rî5è\a\ 61î^Æsá¶\17À\17=
-\14¸³øFV|\b£\83©\1c.ð\ 4\8f\12\\1fX\84ð½jñ{æ^³õ>Úê\8dÞï!n\94C¬Bkï+Ò\99\bô\ 4\8ec
-Y\94Âya10 \87ë0"\vñ\80>CSm@\10pó\80\19\1d\e¡O5§Òé0\1eÒ¡W±\15ðÁv\80½`Bpã*p(hmë¥\95Nn³'æX\1cmX\1eê b\aüvóG»!Eγ\89$/3\b¹\95bõ¢ù!î<]@î\10\9c\8a\9b\ e3¯Ù\99:äk\bûJ\98AÛëeé\8c°f¥x\7fV,g0\1fÖ3\ e\ 5\1a\84\89\ 2ªïW®7"?Â0ä\11Ö!äÒ[',zß\8b¼Ãû&rÞ%4\ 4ÍmM\95¯0N\11\9c Ûë_?ýyCNm´È\19\vöæ\8a%?Àó\96o\85\14 I\11Ç7 \10D¡mܺQúWóz\19\1eN°UÏÇ4\9dÔ\9bÃíåç\8f\97hDsÏ°ül2¨¶öa/\8a\r2Å*\8e\ 3½Ù\0kÙ\8f\9b\93Ù$\9dMçQ;ÎÇlç\97ÅÉï'ÿ\ 1ëÄÊlendstream
-endobj
-1572 0 obj<</Type/Page/Parent 1369 0 R/Contents 1573 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1573 0 obj<</Filter/FlateDecode/Length 1591 >>stream
-x\ 1\85WkOÛJ\10ýί\18©\1f Rb\12HÃã\e-EêUK¹@Õ[ ]ic¯ñ\16Ûkvפ\91øñ÷̬M\«ííCr\9cÝy\9c9sfò¸3§\19þÎéè\80\ e\97\94V;³d\86§7É\82\16ÇGx>À\7f§)ßy{»³\7fqBó\ 5Ý渲<ÆCF8>\9bÑmº7_$\8bäMB\7fÙ\15y]\87 Õ\96l\e\9a6¼¾ý\8e«\v\9aÏãÕéÁ\11®îÝ\16Æ\13þ\85BSe} ܵ>8\15L}O\8dr\81lN\8d35¿Hè\9bm©R\e*Ô\93\16\ frñ»]MèI;\93\e\9dá\8d
-ýkZ+O¹ukå2\9dM8\88\19Mç\87É\ 1;÷:PÛ\90¢µSM£\1d)gÛ\9a-hJmU)~¶ì'¾ËM©'´jÅ<ð`ã/ "r[ÉU W»¤óv°\ 4\8eðva\9c\a"i¡Ó\a6[©\aäÐÂÎO\11_¿?ûøñ\ecr¯\83À\80³\1c\913÷E\88XÐc«[\9dÐ\87\9c6@DÁFë\191EooÎɺQ¢\1f¯®\19N\86\91|cm©ÝDn¦ª¦ «Æ:åL¹!\1fl³Í\81-\ 2~À륦\9eø¼\ f¦,iű¯*\13\ 2pí1ÙÐ\1aß\8d\9c×6ðé\88J\96Ð\17¯OùÈþÅ\8cNz2\808\8c\11QÙ¤4½ê \94xâÙ!s\96|ôÒ®»\b\90uL\r\81\92Ô¬Ð5\0Ñ´[6\8f[k»±\98\9aL.9òqf\1f \0¼ÑÄ\16X\13øK\ e~x`\94\9b\1cçëµÀÉÙGn¢f¹\ 1m@~Z\17\eÚZ[i)T\9aê\ 6Ð19£kæwg½gÌ¥þ\ 1Âp\85\99ók\85êÁî\v\81¼\ 6\ 5{²ÃN\ 5Þ£\\9c\f§æ´*QR\904¡¯&\14ò\85òÞø êT÷GýÆ\83\ 1£¼TV\99\1a\aÑ\88\88\8f#àÊ?\19½\16+/\95\17n ÓRÃIß\9cB\r\a<=wc\aDÏqT\85éÚáÊá\8f\³³µmË\8cô\8fF§1edÒWYJ(\91d\e]rd\lÎûËå\87\7fh\97ãÙ¥6\180uÃ\11d:h\87\8c\ 6x\ 1¡\91ã\ eA\95\86V\803þ\ f4%J3Ú\7fRn_úi¿l²ý\9e´D¯b\97Qf\1c2°nó¢b\ 2Xïx\96\1cGÒ\83ö\9e~ûçU¤\12×T\90þÅu~OY~6\9bÍ«M\ 1\1då3?Ë4\r\97È\17\82îH~\0{GDè o\eHB`YF\ ftÀ|¾ÆGPLNFÖÐÏ<) \87¦\ 6½Ê\12\95W}\9c\9dÚîÆ\ eC¨(\ 6z\91mIä¶\86xGÍ\96DP1Õ{\850;\8b\9b*HÕ£÷\ eié\97á<\9a\1eΣ\8eÈ Z\ e\a\11s¹¾\aëÿ4\8d>s_0\ 1e¾ô\8d$ÞÐ\9e\ 3Éä\86G\9e\bzm\9dÛHG¯¸×\81*\7f@»Çlk\93êr3nì[PU¦\1dO\19[ã¬\ 5«+\16\1c´¼\83\9e©{í\9941ÜSZ©ºFaâ{TbUªú¡ûØ\8d;L©±\9fÁ|è\87ÉÐP?\8cX3GtàÜ%\83T5d\9b`\10e¯T\88£{\83xQ¼ÜÜc\8ae£r\835<\1c£?¨C\17\8b Û 6lO"Å`\88=\9eú\82îö\98}N{O\85V\19;sÃôï^wÞc÷G6\8f|¿\94/·ei×R\11Qè\17\8awÔùÕ\ 4\8aykwJI\92pH¿é¥aBÒ'\1d(\8c&K\\9c\93¿Æ\1dÉâ\ 4²V8æ,\18\93\16"ÊÛ\ eë8\8eC£äî5\98\10\17$\98©d\820gU\e,F\80IY½\86à\8ckÛS Ûª8\8cÌxÖÕ8\8e^j¿Ýaú\8dIÖµÖG\81tú±\85Àùn÷\18\ÃÊ\14°Xy\9b\al^h:Æݦ:\ 3O¼¨KÉ\9bÚ
-âÜó\fuƾÕæ,¿në¸\1f\85\1dØ@\13\13~Ð$Û\1eé\98\94\8a¸a\ 4e-F\82í[ËCj0\ 2E»DHe\80L82³]¢¶Ð\8e0¿\82¤Þ¤Î4A\ 4|\ 2\99KÑø<\9e\90ªlih\10±Þ×-s\ 6ªFxÍ9~2©³7À\83R¤^\87\84.àZÿPUÃ;%¶N\9cýjê\937#ϸÜ3%òë\ fCé\8a+ª\9d\7fî\1eèRUúùnïZ6Çw¥I\1fî^_AN¡¶Fã\18²ò\92ÕóYöÄüË\9e\7fCvá%\88e×^\ 4\12Ȧ\85µ\18»\80OÑ»àÊé¹\10\1a\8b4\92\91Á\8fó\ 2WBý\9a¯xMß \9dy¡æ¶äál'\84Á!z(Ã\14ïG ÄiÃ5ä=`ÈsL t\eý{Î\96\18hÞÕ\aK\10¢\8b«\17¯\0)/\pµ&G\ 6)nË`P\a6\83Mkä<U¼]\80up\85\8dÂÖª\14áÝR¯\13\93ãîÇÍ|\89ßLÇ\87´<ZÆ\ 1\7fsöéí\19\ 1øïL\98s\9b¶\15(\80Vµ5û\9aö\17¦G3,ÄÙÿý\8cZ\1c-\92£å1~\7fáìÉ\82M¼¿Ýù{ç?\8dÈ\82Kendstream
-endobj
-1574 0 obj<</Type/Page/Parent 1369 0 R/Contents 1575 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1575 0 obj<</Filter/FlateDecode/Length 671 >>stream
-x\ 1\85TÑn\9b@\10|÷W¬*UI¥\98\82M0~t\94FêC«´¡\ f}<`m\93À\1då\96¤ôë;wà¸r\93V¶%ÃÞÍÌÎìÝ\8fYD!>\11\16´L¨hfa\10R\92®\83\98ât\85ÿ\vü:¦íX\bã y©p\19&/\17âå%\0N ®²Ùû\9b5E1e[°'I\1a¤\94\95\ 4î0¤¬8\8fâ \ eV\ 1}UOtk¬Ü\15]Õ
-µ]¥\85ËwÙ=öÇ\14Eãþùb\85ÝçÙ¾²\84¯Â:\93×Ü\90ì\95¸7½íU]\ fT¨ÞrIù@\É\9e;,à\11\94lkL]é\1dÙÁ
-¶¶½\88{¬ôÖt\8d\92Êh\ 2\98Û`EuBfëd\844\8f\96ÁÂÑ\1f±îM>R7ê\81í\91Ä\13VúÁ¿q\8b¼Xá\9fBÛªæ\v2\1d\r¦ï¦>;²UÓBvi\80¢\8d\90íÛÖtrB|4( 獵F\r¤\19}\8a!Ö
-NÐÙ¦\17ãº(èÆ·C×,\¸®Î\b\9dýÉ\1a\8cö\1eã\99/#L\ 3:ô©¤\ 1mÊG¥\v\10ܺ<àÒ+\81|6£\11À\87ù\1a\9d\905\8dó\9cE\ 6(ÝA\91ì\ 1a]*½u\96{1\95«éÑ÷'\84å={ã\a\80
-Ó4J\97oÈ´®\83\13;P\19Iì\9eë\9a¬\1f\1d\eеqà#\82*
-Ó{é.\ 3Vvpô²^\80Kòí· Ý¹è&
-\9d\1e\88É#\9fÐ\8e<c\ 2\0¯KâGÖhñÁyp\18³I:\95Þ~_\90¡eL\13\99^0tääWb\91ý/ö\ f\96ý\e¯ã¯^[\8c:´)\18í%r÷\9føÖ8T¬j\bÈû\1d\1c~-»\8f[/Nåæ\91ÇÅ$Uk\91 >\13\82³í\85[à\1a\1crv\99=Ï\\ e¯ÜÁñ\0`¡]¯íÅá`I§
-Ô\ 3ºc>±0\9bJ\82\ 3á·#\9b²ê0§¦\e¦¾ÒéÔG .§tI\8bd:~w\9bOW\eL¤¹Çz\84]ô\rkñ\ 3ähæ\87\róU¸~\1eæ\7f^1ñ
-wP\92â\82Âì¯/\1dÊ\87löeö\e?õ\9eµendstream
-endobj
-1576 0 obj<</Type/Page/Parent 1369 0 R/Contents 1577 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 912 0 R>>endobj
-1577 0 obj<</Filter/FlateDecode/Length 1794 >>stream
-x\ 1\85W]oÛ6\14}ϯ¸ðK\13 QbÇIÜ\ 1}h\97v+\864[c \ fõ0Ð\12e«\91D\95¤ê\1aè\8fß¹\97\94¬(\1d\86¢A\14\91÷ãð\9cs©¯GSºÀ¿)ÝÌèò\9aÒêè"¹À_ú\1f\1f\7fã¿ÐÕ\82\7fV4¿Lfñ¡¤\87£Ë«\ 5¿¼\9a\87\97\8bY2\8dOüvz5å·³\9bä\1a[gó«d\11\9fø-\a\9c_.ðn¾¸Áï3ü·\9aò£7Ë£ów/ivAË\1cµ]ß,h\99IIøKzüëV5^[\9a^%ô ÓÖ\16~O¥þ¦Kw²ü"[§7aëÙå\1cå.³c¬\9d&ô¾öÖdmê\vS\87¥s\9aNãR©\12K\1fTµVäÚ¦1Ö;ò[\94dÊÒì\8azC¦á½ø«\91\17\9bÒ¬UI®Z'©©sj\94U\95Fq!ú\ 5½ì\82Ï\939×ñ9ìø;¼\9fõï§\17\80\ 6ï]ìçÉþczE\9fÝVYý£uÚ®\8e3\9d«¶ô«\93\1fxü¦í\8fÌTª¨\7f¨ÌÅÈþ®9ð\9f¥VN\ 3ß\1cÈÅêû²+U£ô\r7j©uü[Qã÷Jq·¤ê¬Û\92\99´tíéöþîõû\ fÿܽ½{óöc²õUÉ%_ÐÙ\94 \82\84\1c*o-à³´VéãÆ\9a\16q2íUQ:BØP4U&ÓÔõ\9dÐ\12x\7f*êÌì\1c\18\0*þ¡íZ[ãºõÝRÙ8κê\11\ 4f\80cuB\ 5vj\97Úb3´%çöúöáì÷ûOË{©<\89¥Ï®Ã!Ýç²HÍ7}J\93>á+\94ÉpO¨Ò\8aI°U\9e\ 2]¬\8el1\94\96\ 5\0\8ao\vÏùm[×Ì\1ed\9fð Jé\13Z·~\ 4\9aJ}«Êr\8fÓpN\ 3¥<'<\93j\81cí\8b4\1c\88Õ_[í8\87Áá\18Áx\188\94ÉXrr,.,\82á\90U\96\15|¤j\8c[O\\9apê\9d±Yl\96^MB£\8d)¤À|«ÁûQY\87´Àå¿\17PªD}\ 3²¬ußG\94\9f\0Mà\10\16\13¿îIña\19+;\95S*\15{A\r``\0{,oÔºÔ@\8et\9dÚ=\9c"\134¹¥\11ÚQãrül8C×\10µÂ5f Ý\19¸Rjª¦\84²#\97Ä\ 68IO\8e¡\ 1\rÕÇÞ\a9¼¦\87»7\1d¤^\97\90\0\8e-\92\85\80\97óÊú¶¡\1d\93êÀ9 ;¡'<\12\91 &\18\ 2ù\9déMi"\1e\11¬p2ê\955\1c(\12"&ôi[¤[n\ 1uÀ\198Ð "«S\rDÁ\9a<×iôÁ\9dÚ\ f×`9äd\v¬b"\1e8ªGÉ\vït\99Ã\7f=D\8cÕ ,eàdêqb!\ 1\8e\85Ì{Ú\809\9eôw\ fÂC¾\S\97÷ 7$R\a?bÓcmvX\ eÊ\172\b\ 6ürÞªz\ 31Cr\8ce\8e\8aX\8d»Âo\a\1d\9d\a\ 6\93j\1akT@\aÇÆ\83C\8e\ f3Æî\91\81¥Ìû¡%°/\13\83\84ÿc¸\94%\1e×ûQÿ\a\Oe-?ÇTLoS\ 3\ 6æÄ \94À\ 3dQßà\97Bi>ÂÝVc³\15-Ë\18ãBà\10f§³±\8d½\7f\81\88\9dõÁÖ±MÎþÀÙ¼°Î£$ô\ 2<\Á\14·ÒíÏV\1fº\0n\bí4
-RÌUçxL8\rþ\8ey\aÝ`ºÀ÷\ fÇÍzåXÀØ\9bÔ\94Të\8da$\11$z\16\83\89\81\86Ö¤î\1aCU\80ë¼I\140\80p\84·Æ±2Hiª\eÏ&bõ\17\90\rYÁ,n\8d\ 3\9ewÁXÛë\82\1d\84ó\7f0\10¹,ÄZa\13\94\89\81È\15Ç3Û\ 2°ÚP\91i%Ç4Ê\1eT8F\vÜ©£¹{\8bãÆ 0u-U\99Sr\bçÙë^xLK\96#ÒMB\ 3ç¡ú ÏLUGþ\ 5ÓG\9dõ/\9c\1eW·³n|ñÖgMò¢3Üup\83Âm(!~Æc?®yS\ 5Ê\17uì~P?(\ 6\88\98õ¹5Õ\93H°Gy\9e]\1dò¿\ fã3\82\15z\bn÷¬*n3Lä05!û&¸\8d\11Óg'\aR\15®\ e\9e{§\80íê¸u\\8eâÜ\ 3\99O¼ÕlÕ\82+Ns\ 2ÿ`\89\e¨Þ!p\91ïe[?\10Ä\92ú\9cÌ\ e\99¶à\8dÃà,6[ÈB¸Î\13Hz\18e|ÞQÈS\1cî\1a#}<S©Ü\10T \ 64\ 6Bâ\96ùÙ\80þEi\15n|\ 5\ 4:\16\9c\fx¾\r°¥G4#ö\98ú\8d©3\967mÄÍ\81÷¨\83\b<tÜ\16\19F½aîp³|]8X:\v\1c:\90Ò~.£ É\18\8em\8d¯¤¬bê*\1fe\1eEgÍÃõÅ\97Ewìú«cÜ\ 5ooÅåj°C±EñÐâê\9a¦ìnDR\92L\ 4Þº:\89©:IÜ?\9eB±;©~0$\ 1lø|\10ÏûÙ\vÑa\aÑ\ 1\rÌ°0Ó\10\81¯N0ï½\ 4×<5$PwÎÝ}\18³oè\9a½ù¨Ò\80É2\88dó3\ e\ 3\83P\99¨`u"\9cíÇ(È\v\10
-\1e¤Á\8fG w\ 4\r\19\ 4WÓhT\1cͶ¿\82@äA\bO\15Â\84\10ò;\93\86aw(UÊ:\1d%ÄÕ]7\98\fp»x¹\103\8aÆ>¸8;ùÎb/E
-ÜÎ\1e\89e*×\9f¾è\81 aZ¬1\ 6÷¸\f\84kè(/ö\b2è£æ9ÍÝ\f\90a/?Ø">\1c\rF
-\ f'mÑ\17>GûÛ\19\ 6a\8bCD]¸iö\17r\\8a\ 3\0£´Ý9â#£\9bp\ 2\90`#\\ e\87÷tò\86\8bH@@\95 ºc\90¢IÖÅ÷±ò\ºÕ\95(÷üÝâðÉz\89o×ìÿ¾\87ç7óäæz\11\9cÿå5×ÿvyô×Ñ¿\98NM¸endstream
-endobj
-1578 0 obj<</Type/Page/Parent 1369 0 R/Contents 1579 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
-1579 0 obj<</Filter/FlateDecode/Length 1049 >>stream
-x\ 1\85VMoã8\f½çW\10>Í\0\9b¤Ý$=ìa:³\ 5æP`\17\r°X`.\8a-Ç\9aÚ\92W\92\9bñ¿ßGú#\8d[`Q¤H,\8a\8f||$ýïbEKüh»¦Û\reõb\99.éöþ\1eÿïv[ü_ãã5\15\8b\87ýâæñ\8eV+Ú\17¸²Ùmi\9f\13Ì\97KÚg\9fN¥\86\99\89d\ 2)j\83öVÕú¦Q!\9c\9cÏ)\96ª?kc©m4\99\8a:¿"ë"Ì\93P*\7f6NÒÏû\9f\8b%]¯7é\1dP>=)ÛQV\19\\f\14´Íå\8e\ eÁ8\8bß±m\12Ò¯Ú\92)\0¤ñÈ¿jÏ¡\18\9c³oªp^á k½\89]JûRw@÷µªªnôùª*\93\ fØ«ÛtÍØc*th#.Ð\98QJϪ>(\90\93!¿\0\ÀMÆÀUT\99\10É\15\944\ e¡\1e*=\9d\87$¥¿Á\83DÛ'6\83e\96(w\9aÙL¢×\9a2gÎ"RN\98gU\ 5G*gd×\83\v\1c§ÏÌ3®P!Ùã[GÑããF?üõ\agW´\15\15ÎÏðK\a\1f¹AvÑy£Ã\8fϤ\98w\14\82\93\f\92\9cÎ\99`\86Iø!ý\9eP¨\ f)"-pnµÐ<1Æõ\80¥¬ÔÙËp·õv\86¬\8eÊX\10\aÓ\0Ç\1fr÷½\0-µ\8aYÉN\v×"4qͱô|\8a\10ß\8a\8d\14ÃC\85\1cê\a\8fÆ\8a\10\92A:"\17d3éå;\vMTu©$\86¥ J\18νn\9c\87N¥,S4½þ¥\ 5@\19\870KûÒmÏÜ\90\89d6j!\Ê\1eIå:dÞ\1c@¨V\1eMâûË\17AEõ\ 2)ÁÑ\f\95\ 3ù QßÐÈí\ 6\11rícÔuÓgV¹#W\9e\95Ç5\1a»¼§ ¡CßRÆ\1eIÿRYD\8b½ÇF\80ç\8e\98O\8aHG\8c\86»Z z&RBá\85É\81ë¾ÃE{\97üõ\ 1g\99\96xߥ=\ 5\8c¨PX)\9f:[O³æÜsÌ)Ð \12w\12"/\8b\ e&\10\ 5P\1d<zz~z\18ä2ã[4ø\ 1cs=þãZ\f.×V \9d\e\1d~u\9f9\ 4Ì\9cc¾\81㨼L\18\84\85§&\Q?\87Ùb (êªê\ 3\1eÔtâ\1e\18\85=ÌE\99Û³P\8d½\9aæÌ;'\18´¸\13ڦ׺¶\99ï\1a\9eMR"\1c\89\\85ÝÁ\ e¼\fÃÄ\12Mì¡,WÏ \13ñö¢;\8cÉ=R\19#7\92&WLv\0~\8d\85\94I?D\81FÀ<«Sb\12Kõ
-âxêÕ\8dÁ\ 4îk}\ 2ø\fó\9c\ 2i«0¬1QÜ\98¡\90K\85V±õúJÄÕ½q^cbE|\90OÐ\8dòØm<\b%8\ 4ø\8cȲ\98¡\86Øáð\1cø\94\ fx\94a!L¸£WM\89\9dÉ»ÊÔÓHäþ\ 3\81¡b@é\95Ö\9a_\90Å\e§¼"a÷?аBZU\84ä\8e%\v\f+\93×fà5P(ãyI\ 2\19ÁÖʪ£®±\8b)`\92×(+Úý\84ðä"Å\13³ÍÊ=hzA\ 3ÎR\ 6M¡³\99(þæq7¼Q¬6xÛØÝÒ\1aï\1e²w\9f¿<=|¡?½û\89\15Dß\Ö2¤b\8d±ÃëñÂõvyÏ{úk©\9a\88Ö[ý\86Í<\8cí^Ý\81íï¶wév³Ã\9b\vlï·üè\8fýâ¯Å\7f\12\18
-Cendstream
-endobj
-1580 0 obj<</Type/Page/Parent 1369 0 R/Contents 1581 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1581 0 obj<</Filter/FlateDecode/Length 1618 >>stream
-x\ 1¥WMoÛF\10½ûW\fzrP[±dErzK\82\ 60Ð8n =ä²"\97âÖä.Ã%Ũ¿¾ïí\92\12M\a-ÚÂ6l\93»óñæÍ\9bÑ׳¹\ák.ë\85\¯$)Ï®fWòjþj¶\94åÍ\1a\7f/ðSkÉÂ\8bÅÕb¶\9a¾x»9{ùþµ,®d\93ÁÖj}#\9bT`ç
-O
\92ów¹ª
\1a]Ë|5
\93OÖdF§ò
\8bÛ9ëe«
\9bNk+
\9f\8dM]çånóbóÇÙ
\95\.
\960q®l*
\9fîn
\7f\97Ö
\e»ã©-
\ eò
\býÍ×Ñßåõr¶àq8
\98ÏäÍÖ7µJ
\9axl)óy
\7fl±Fè8vk
\e½«Uc
\9c\15\97E
\aôôÁ$µó.kFáH
\93×®Ý墤íC/
\18ºä
\8aÑ#ô
\ 4y
\98T×HJÉ
\ f¹+
\ e\ 2ã¦ø¡Ïd~
\1d\833¸£
\ 1\83Ûi«]ëq±¬Ú
\86yi»7µ³¥¶
\8d\97ÌÕ0T8<oL©gòYKUk
\8f\971£U
\9fѹtc<
\86DÏ/p
\9d¶
\9dÅ
\15&ØäZ
\1eT¹U
\93\88|k
\1aÍ
\ 3\15\82ªUé
\ 59)ñ®@XH±qáêÓ¼qv[è
\12aEç(
\8dæP&SVx
\a·
\ 3¸
\13\8f'
\84\7f»
\7f'
\89*
-\7f!÷E»Û)\18\957-Bµ\8dIâõ\ f.m\v\8d\13,\ e\93¸S%2ÑõÞ$øÝ\99&É\19$̸nT³\89ÓÔ\95
-à#ÎÚ\87ãU¥\150\86QWið@3ï\9ef<\83Ôû|J\95äÆ¢\ 6\9bÜx©\14\8eKª}R\9b-\92fH£\12\80µCýÁ7º¼\10ý*à\9b5æᬵ \91U\85i\ eb\1a\ 2¿\aw\90b\8e\fð\0^À§ÌìZð)&Þ¿é\ýèÅ\80º5î\17\87Y$ÃÓ.\bM\83.XÌ\ 4$¯\81_ð\17\8f\ e\ 4aw\r\9d\10<vº(äѺ\ e%ÏUó\ f\r\91«½\96Ôd\19(\ f~\95.ÕEdm{\9e2_ÂM\8c'ÅØ¡\9b*¤\ 1\96\97±Ê¬\ 3\ e\8fL6:ÉC\9b\19\80Ìv8Òª\a\12ì\v\ 5ÉÐå¡\11K\95jÂÇ°LÒ\16\rê<qLäØô:T¢é\9cÄ"\11S\92\1eÁxÚsõAJe®\ 3Â\ 4k\ 5)\84l|´\9a}U\82\1eÇ\16\89¼\82·T\1dN\92\0N&µ¦/\147ð\19\ 5\13\vö\86T\81K\92¸\96Í\ e[[×\80Å`G`àsÄÐgA\1a\87p\a¼x%tµ<ïc\ 4ÐSK2\83Æâ\9dª\ 6\ 4\82ª°{NÊK3@cHv`pÀ÷\94&ê\80\96ÉjW
-z ÓÄÝuz¯k\90\14í\9f¦,\rÝ\80\r:\88Zì·!A¯\99m\ 6hCGÑ?°¤rLê\94ä\ eÃ\86\96B\8dúk\95ò\1e\1d\90â<ÞÖúkk(¸\ 1;Xír\ 3)H\94\95B+Üdqm\ 2å¶æÏȲ^¶\9eä=ñ<à\7fT\921âìJ\f!¤CB\86Ü\ 6È\ 6~@§SÃv\ eÕü®j\86ËÁÏ\11\a\14\852[k-¾Dc£k\86X\7fb\80\98É'\ 6n\9b^M\ 6RÜm\8e\8d\86©3i-^\7fù>éÇÅåzvÃY\ f&\7fY¬Ö\12ß\ e¢\10^\1eõk,ĨëÄ\9bÿï\86ïû:J\92+»#g\bçÿ±\7f¹¸\99Í_\9f0ºM5å\91C\108ú
-T5\10¬#\95\ 3Úz2Ì{Ä¥sm\91öZpà\ ¥T[\a\vÇ\91ê!úMîÚ0\8eG¢\9f¶U1\8c.pr¬q ͱÃ\8f\95'Ç{KQ.B\v¡\93â\88\90Fy(>ñáÝHF"?r©Ò\12Ó\85ë\ et\v]\80u\84³n`IlAú Ü\br£\11;8\16ÍQG\8f3¬\7f6(\a\87º\ fÊû\1d\19G\93ï\14åd´+D¸Hä\11T\0\82Ñ\7f·\eþv\84]cÃà0\ 27¸óÉ}?*\9fÒv4Ë\86\83ÑU?Ð\99û\88]½îRàÕ.,*²\ruv]\0?jðÖ}£\84D\85\ 2
-Y[\14\13àK]n\81"²SØY%®\183ùh±\984Ü\15ð\9db\ 1;\95\9dF;\ 3Fy\0Ô·- >Õ\ 62j\ 2X\aé0Z1.HÜ\89ßÑ\96rº
-®s\ 3b\ 6Äú\18OL\82\ 2\91rÈ\95-×%R\89kT\9cqø\1f\18ßÝ>üÈ\88yrâ\90\ 4Å]ú½t\16Sl¼«N\15\90dÒÈ\bÛ*g0,\ 6óä%G\ 5²=\90]Ü59ù\18ËX\f1I@x>\8d{\19\13\8a<e&\85s\8fX\1d°\87c\86M¢\ 4ù£úqÆ^\ 4\13_[\8dI\1e\10ßrb\80©{N\f\94Û?>\87
-ú\8e})Èï±ã \1dñÃJ¿A"\88tºV0Ú\18ÙLÞêD!¸#esD\1cV¶¸G?K
-ÈsÑï0´öº\90/ç{£Bìw\ f\ fa[\88a\87e|\920¶.®Æ,+#x'\85ÙÖª>|y\81ÿ\81;\86#\ 6dXþ\88\1dÏ\9ch1Ê\15GÙ¬\18Ù\1aµ\85\8eX_aÂÚ¦ïÍ\9bÓ§§å«\19?Öý»Os\81à=i zߤÌf¹^ÎÖ«\9b8\91^ßðÑÏ\9b³_Ïþ\ 2ìÑÍ\18endstream
-endobj
-1582 0 obj<</Type/Page/Parent 1369 0 R/Contents 1583 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1583 0 obj<</Filter/FlateDecode/Length 1670 >>stream
-x\ 1\85WÁrÓH\10½ç+º8\85ªÄ±\13ã8GC\96Z\ e Yb
-\ e¹´¤±4D\9a13\92µÞ¯ß×3\92ì(ÙÚ\ 2\ 2È\9aéî×ï½nÿ>\99Ñ\14¿ft}IW\vJ«\93édJ\1f®fø9_^ãç%þ8E\9bðÁÕr:¹|ë\83ËÅ\87Éü\ f\96Ë×\a>®O.>Ïi6£õ\ 6Á\17ËkZg\84ÀÓ)ÓÓï^9OÖP](ú~ÿå'U\9c\16Ú(J9<4ÔxE÷kùË\11\9b\8crg\9b-\19®\94'örpOmÊ,¼ùÎpwê]¼,¼5y¿þu2¥óÙ\15Ò[g§k9!ק\85m\rmt\89\9b¼ÅM\Çë\18 à#\95Q²\97Ø\99X\87L$YGj§\f\956dzZÎ\8dR\97,]cFa9¦ôóü\876\99mÉ+ï5*G\r|\1c¡O÷r\ 1\94cº\0¨Ü\93MvÚ6\9ep\§¨2 \86\94q_\82g¤=%J\9b\p\bÿ\v\ 5½\89[ÍÏ*ä½±®\1aåyûõnõåþéi8Ø?\bÀOh] \10~\e\95¢\ 2v{©@×Äei[?d\ 3`2U+WI3C&NeÚ©4&n\89Gq;\90SkjgË\12ÝF\90\96M\8db\90&@Ú²«uÚ\94ì\0¾}\ 6\v\ 4é¶ÐiAµk¼¼ÙÝ2`áÔF9eR\95\8dq]e\99\96\\90÷þlH{ëìNgB-t¦Ak\rBF°AÀ\9dN»b
-$ èúÿP6yÎI©hõâШÆ;\9b5¶§Ó\87ÕÝÓ{ò{$] \89º¸ã\98;Í(ü@A¼ÉfO8MÊH¼\8cx»-»\14}ìÎ(hÊ[Nt©ë=X^î\10^\18\8b\808^\91Ý \v\93\16Î\1aý\8f°gËÞ·Öe¦ºU`zÌ\12\1aÑÀQú|ô\8eHÅ×\16½\ 5\18¯z\8a\1390)m\aáÓi'õWÍ~z\1fúsñù\86f ½xÅ9\9c)(`¶\98\Mf¨\8d]®jú\ eåH\89Ǿr~)¾rz$\85:¼,øÔ\90lΨ.´QªÇ£\82w(Å\90ú[ûZÊ\ 6Æ \8bpz\ 6\99\8dc\ fZ¥u\83\1aC§;ªÁ?F\10·Ú\83\82èb\83ôÄÅ\0೯»\80 ¯p\aN7\19xÖjÀ\18$#Ý\80Å\8dr\14õlK»\ f×\8d£\1d_Þ꺰\b\8b\82¤\f$!^U\8b_1ÂB3\£Ò4µ\8d©QÆqU\9d\98s§¸\86Áx]\81J\e\1d\192
-Ê\19\94\f¬p\1dü\95,Ê)\14gÂ\9f\98©D\7f]{À-08¢{\æ+E\1a\v, {hÞ©Ø\96\96÷B¬\88|«Ð¯-,d\80\11å&j0¼`¥)$ëX8êÐùMÌ)\ 6\ fRa\90Ø÷¡û\99°\12\11\85O"=z9Êp\b.³uÈ*´\11\16\0\ eYºÓ©³Þnê\8e7\ 6j\91ÆPh-²
-v\80\17a¤Gù\8e`í\ 3yÅ\15\9c!X\8aÊ\ 5d(\ 5Ù\8bT\87´#\våQ$éA2`\7f\94Ì|\90Ì|B\7fbÌô\92ø!¹Ið\91l&\8b~È´Ý\1céL \16
-\1fÔ¹\8cAÆÌ\85Õ2¥¥\ 6¼\17\91Îx\8cY]£\1fPÈ\84VÐ98\80ÉgÀ\85\18êC7ùO\81J\98RÙË\14N)cU¡Ô\12ÔR&$x4ªñA76;Uz\9b>Ã\ 2Z\86u#\96Ì\ 5§~7 Kè ;\ar
-ERÃ'bR¹2J¤\10fº@xÿø\18:\v/\1dõ$\16)# \13\9b\941\87c^â`\1aȼèés<£\81Ca¬l\ 5à\az\9e IDQªÂ±¾~`\86î)\9f:\9dà\15P\eS\92u \1ac|\1e\1aú\86\aÎÅ\ 3\ f¬û\ 6Ü ì\aI0\13\8bú\84ÌÞê°ô÷+ä\1a¸TÂÓ\bD¥½bçÏHm\80!À\v~\98\88Û£ÑÊ\89ì°ûìØ\85\95ã\91«\84i\r\8eR¥ªDv6\14\97©Ôfª\7fi\ 4"{\11*Ö¥ÈáÿÉ\e\13ñîñÛça&vÖtàb@Tú]YTÐ\89m\14Ó©2tØn¥ÕPÐa\86A\ 6Xº¼Ø|·a\8aÔÒ²É\84G.bY±á<´ëL:\88\9dãÅ0\17B\8c"v¶°µ¶Ä=Ð@)n\9c\17¸\e\f\15ª\0uÙc >°\16\92²²\ ea\8akð\ 3,\1c\b2(þÁéJ¶ªÛ¸t~\1aö¡Qhì\10·\82צ1a§â0áA¨Ð¬3YÉ
-1Ä\12«í^«2\ 3Ý\98\12\9ba\93ÜPè\tUY\85{\13\15\80£ o\e·µ\98´cª÷~\ 2||ßz
-½ÃN\r\ 2JqÊ4U\10[?L\ 5̨§°DÆ\7fâE\9b\84A\15%\10ä\80\ 4ª\0ŨZNdÈÉê\8bõ¬\81½Ç+\91n¼qB_\ 1§{\91Éqa\ 2ù¡\99á\eEg)\87Üj;
-\9a\16lò0^Üaå\99ÐÇ=ÅM\16Ý\85'¸½P\88Åi\ 3ÅÐ\96`Lrqð\90ø\8d\ 5£·¯ílp\83\8a·cÏ\vÞ´>\9eØý1|\r@\19aÆ\8eî>|Ϲø¼ì,w¶ÀWºå\15-fSq\80ÇÕÝÇ\95¸Å/\99\9f·6E\8b°&\88J¤êóþõóëé\8d¼ÿ\1fK×üz>¹^,±\9eá\9d\9b\e9úÇúä¯\93\7f\ 1ʸǥendstream
-endobj
-1584 0 obj<</Type/Page/Parent 1369 0 R/Contents 1585 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1585 0 obj<</Filter/FlateDecode/Length 1828 >>stream
-x\ 1\95XMoÛF\10½ûW\f|r\ 1\9b\96lGvrs\9c\ 6ÈÁ®[)hoÅ\8a\J\8c\97\fwiUýõ}3»\94(ÊAP\ 4Fdjw>ß¼yô÷\93)MðoJ·Wt=£¼>\99d\13º\9a]g7tswË\9fñã4\95'\1f\17'\97\9fßÓô\86\16%®Ìîð¡ \1c\9fLh\91\9fMgÙMv\95Ñ\93ª5͵{rü¿©B¾þeñ\rWoh:\8dW/®nqõl±Öo\9d>'ëèi>?§Ê\93¢R«Ð!\80°V\81\9f´N{ÝàcCµj¶ôõéË_d[íT¨\9a\15ù\ fºö\19} ¤\8c±\eÏÞ't1½Î®Øk<\80ë¥u5îØ\86|\97¯IyZ[\1f\1a\84ïÏaº2¸_)¯\11DSPçµ;¸\14,-5*ãyÕ\ 5\95ÎÖTTe©\1d¢\eû´\9dË5\82ú\8cÔô?ªn\8d>Gn>À´2¶Ñ1\8d\8du/x&AÕjÛ[OI\1d¸\17\7f° ]\85\bmI¥Qc·eeð\9d\ fÖ!@ä\19PpcseH¾\91JetO\8d\ eì\19\87Æ\ 1\94\95ó¨c@IÛ@H9åûFD£\94%¾\813¤\8b*"\82\86rÛøÎÀ,=}\99S¡\82Z¢Ì\84~\1cW\19Ï\14}z\9as¢¯è\0\1fêÛ4ò8èh\96¾º\ 2&wH\9bÏIµ©òXßÖÙ\95SuÍ ©\9a ]©\0Ø\b\19ÚTͲâxí\1eoÁkS2LPué'W=¢éÇ\91Ð\863\8eUcO\82VÆ\92àLj²r¶k\81\8d?\93O|ëQ(@}\17V,Þ Á\91C»\fªjz\14*6U\0ùô´èëÖyöþ8ÿãù\81\0\0\ 3\ f\9c\9a}
-$\r\ 4l\ 6I©<·\1dFL7]-se\9b¾¢ý\14}\15{\11¿®\88i\99jé\94ÛFû\98b :WÍÎ
-\8f°\96\ eÇ\89\8ay3.U¼_«|\8d,ÈuM\83hG9ö-a\18y-\9d:6\ 6R\0ª\16TX\fpCéØ×\96\82ë@\vEÿ\1cM\fkÛÖ\1cÒ\966\98Ù4\18Ü\9a1c°ÇÔ¤7pÕºª\96¬m\13\9c\8d£%0\ 5\851_ñ\95ËÏ X!¿³K\1dòËÆ{!Æ\f£PÆ\ 3=;\9e\ 1\b\f\99T\93!bkõÂd\ 44}ï4Æ2ØQ\89
-\8bo\8dµ/]+µ~ ¾%ü\90ñô¿£\91L`\94û²YWàIpf¾\16\84j\ 1\17Ó|ض\1alxÜ´\14ª.ÎÅP¢> î´U¨Bqzh\ 4\ 5C\v@D\\ 3n\ 6/\ 3)>¥\89\91VY&«®ÍhÁsÂU¬Æx\91\90}«sæÇ\18zż[\83\9e\85\ 1\845e«0·p\1a\1e\980\ 5Óz\0«\162\9d¨Ù\867\8fu\85vØ*¥\ 4\1fcO\8e¥:£VTþCìë»ÁÖKl\14/\7f\88$ܯ\83C\14`_õÜ%\94É\93³ïæ¦2\8c3¦fc\15â¤Ú\16\9dáq3\ 6qG[{È\ 1\ 5\97ø\ 1êþ\16âϼ g¿\92ÏÐ\1dÞ\95¸»Ä°ÀY4xhh°DÙ\o25õØ(wç(ìb\8b>\82\83\8dÙÆà5¦\9e\99\14^±\ 4¢_\81*¶>Æ\0³Ç\879\92\81ÿ´\86°\ fº&çu\89\16Wà̸ãz# ¸\0>\1a¬-N-a2£ß\1a\86îþ Oën\9fóó]Å\8f¼slÌ!"\0x\97±+ü6\18×\9e1û>
-R
\85\13vË&ñ/Ï4vÛ
\96´ò #ì}Þrý:
\80å5¦
\97\97Aô1Ö:Øà
\80\83\0¹Ñº`f
\1fÅ
\v@
\17ÌÆÈ
\ f6Ú.
\8c\11\92À
\91(ö¸
\93o1
\a# âcG]\
\ 2´¬(è4
\99:
\8daÇs{@þ
\8c\ 3¡8F)¤â:
\vºUA
\83Ù±ß
\ 4\98ÄÀ
\90\19V°
\97-Â(;>
\8f\94"
\8d\1a*Û
\8bëi
\94\r"i¯3z6Ýj¥
\96\18°û
\8eÍ
\87^C<ÊØɾØ
\ f\13Ï®èÛ
\9f]ÃV7ÞÒKc7¨
\9a§çûǤy
\93Fe
\18¨¥
\ fN
\ 1ãXßêÐ;ò
\18U
\89\ fXWý
\e\15NÐùº±Æ®À
\80,/
\ 2D.;éÙ¢
\8azÚz_qn
\80\86Ðe¹ÝëرËZÃ
\ 1 \86ÈF®wÒ·
\97\86\83Q
\88Ãi
\81»µzåDàÊéÜÖ-
\ 4*
\83\ 6\83?<
\8e\8a#J Uê
\83\9e\95\1døîÈå
\8eÎ¥6Ô*
\87ÆtF9j-d^
\1c£
\83\92\1c\vpÑÀ
\80,d`Å
\85\86VÆ
\86ÛB
\95\80\9f\0"»
\19åÉâÕ"j.+(@d.£j§³
\13\aEé+T
\8fÕ!\OKT`o8©
\97\1dã$E?ÔÄ#ß(
\eÜò0ZÖÂ<
\13Iº
\8fɦ'
\ fD
\16ij
\ 4\1d¼9©
\95¬BaØ]
\98\83çÒ
\82\1dUÁ5«Q(æ GQÁW/6c!
\84©
\92~
\89HN{Zêé
\87ê4^Øç
\85O#1Èú
\1c»
\1cdÃkz
\ 5ǯ)x
\91«ð2
\81î<'Qö)êÀ
\87¨Í
\foð
\85À-:fy*
\18ËתY
\14+
\87\85 \9aÆÒq<a
\00
\1fcÑ
\91®@
\94\91Æk_
\1e06@u
\0pÒ»Ö
\8f£H%ìwC
\82{Ô1xÙ
\955
\1c·
\ 3c
\eÏwÒ2®Ft>:³X
\ell¬0[UgÅ
\11?3¡
\föm/½
\18"G
\8cËk
\12ù
\8c\18 W§¨Û!
\19õ¢
\14\95©
\15Þ) #¸¸
\83\17.
\86+'
\9a[|
\9d¦äa
\84%,
\15y
\85\88zUd,
\97z
\90?sG¡ñº
\86\89eI
-i6X÷"\87øDZÇ\871B·æ/\ 2x¸ç«±rwI¢Mgø{ÇÝ5Ínïø¥q~ÿøñ\1eH²ß¸·\9fl\8e\97¡$\1dùÞE\7füâvò\9eÏÿä\ f 7³»löî
-\7f9á³\93 ÛøuqòûÉ\7f\19\ fÏ'endstream
-endobj
-1586 0 obj<</Type/Page/Parent 1369 0 R/Contents 1587 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 915 0 R>>endobj
-1587 0 obj<</Filter/FlateDecode/Length 1790 >>stream
-x\ 1\8dWMsÛ6\10½ûWìÍÎ\8cE\8b\92-˧Ö\89ëÄmóÑX\19÷\90\99\ eDB"\1c\12`\ 1P²þ}ß\ 2¤DÓî´£IF\16\81Ý}»oß.ÿ>Ji\8cOJ\97\13\9aÎ(«\8eÆÉ\98fÓY2£óù%¾OðÏJZ\85\aç\17WÉùk\ f¦\934\99¿ò\0Æ\93qûß×÷Géä"¹¢Éì
-æ+\9aLçIÚþUÒ}ð\90ÎÇ/]¿]\1c\9dÝ\9eS\9aÒb\85hgóKZäÁò\98\16Ù\89±¹´ -
-åHi/íJd\92*ñC:\12y®ô\9a\ 4i¹%ÑøBj¯2á\95Ñä¤Ý(\9c\\19K\ fJ/\95Îi#í\8e¤p»S\12eI¾\10\1eWeîÈ\eZÊ7\8bÇ£1\8dÒi2A\b'¹Ñ\92à5\1c\83mâçg·Hh\bõ¤\16Õ_Ûh9q&>ìp\9cPeò¦\f÷3S+\99³\8b\81\81³R-Ï\9cÌ\1a«üîlh@ `öúåú#eF{kJZ©\12°\ 1\89\ f÷Bµ²\94\e¡}\87\1a©AY\9b:\17>z\ 6\ó"E\e%¨\ 3@÷RîÝå&k*ä2f\923X\19û"=Ò\vUº$Æ}Eéy,àh\9a\82FÈ_:KÎñ¡o(\ 51\9a÷Ö45ÝÝÐ5¢\89ez\ e\1a\88&\ý\93\aT\12emø&¼¯ÃE\94"³2 j4HÁeÍÍÖѧ\ 5\97Iy.*Û\ 5dP\ 2\b,ÈP\82à%\80lP\8b\9cù±R¸úýäëÝÍ÷7\91W\83dÂ\96+Õºðå\8erµZI\8bk\¾o\9fîþ¤m¡²\82
-\81\14\93\15z-ɬØÙRÚ\96*!õ.æ½u¹\vP\1ch×\16Õ\89JÆëCçºõ\0\7fûË\ 1¿KèÎ3жdÇ\8e\1eÍ\92ã\ 2;ÀlO\80\14\98\1câTù>*v\1az\ 1§\9cH\88³;pÛÚdó°¶RëÆ\ 2\0R\8a\1fÖÈ\9d¦ZÀ\ 3 2%\83\83P\1cxq57$û\10/\ fµ\95ëN©\17~C6\81Áy0¬_Q6\8f\1cÃì\1eý
-\1ez5\8f\ 18Ô×\99r\83p\99¨\1cÞJY\87\82©J\9eF\b\ 3°\a\9aði-\9f|D\ 40+kª`#\94\96é!)Ôª¶&\93\ e\ 1Õu©b\ föcébü\8c\14GÏ\ 3\9f]\82·
-ÂS\b°±\82)f*þ\1e\80êÃÞó®Mwï\19ø\11»\8fÛ\ 6½Æ\8dÃñ"\1fMé],\16êÇ\8e\82L"Á!Í9ÕÈr\1e¼\ 6Ç\15ZMs[v\a¡\1ab)\9c¤B\96 \ 1w¢Ï\97Ôýü/m#µ\ 3iÚ\1e\bTäFhQvÝÃ\f\r\ 6Á²6\ 2Ú\8aÝ\7f\88ÈEB_\ 3(z'²\ 2X8¹ý¡ÑÊÆ5BÍB«»\1dÐU\94\ 1ØZji!
-@Q\9a@á\90Ê=³Hs/\96ÆühjôØÂ \81y\ 3JGrø±?Ð\14`Td¿\e
-a{µëKnuT ¾C¨ä²BÂ\ 1'4'\f&6{\ fMwòïFjø\89âA® ÔÊi¹cEËM%^´K;\aJ\94¯ÕÕ\83:jп\8a\8am¥o¬\86;\98\12ôåæ]èkÄ\13\7fê¸(J\83é¹U¾À©A8\ 3ú\8aÒq^\ ef\19\ 5\fG\ 1\1d^fwJC¬y\88D\9f=\8ao!?\92ûDè¨\8b{\89\1f8U=HÌc\ 35Æ$\85\ e²\12p~a\e\1e0ÔY\8fåSPºÓ\90á\ 1\1c\8eÈrÂA\8b^\97sj@\84\81ßÌTP;\9c\13k\94\80¥\84U`P®V
-ûQ\84À^9ëPLÒà\1eÊ\93\15!¾@\83¡Û\bh\80:W.\13Ø\81\10\r´\10ó\13Äc\1d >\14ü\19º\1cYȸ±÷bÆ\85bgg·\18Ó\18°¼g\8d¦\18Îí\98F\7fÝ\ 1'¤(ò\87=½kÇ@ø%^î\96\9b0¦±ÈAo>r\r± é\1faòüj
-M\v\8bf\91%=beá/?;-j^Ç°Ç!µA¦!§\e\15\967Î×\87Ï\ f\8bÏ|\ 3
-V"^áBÈÏ´\rÏâÑ\ºÌª%ú¬ÀZ\83\8c¬¥ß÷\1f»Âæç8Y\8cÄ6Z³þáXÛ?P\89(æxÚ[\e±1ñÐ\19\94\ 5-»3\8d¥ß\95n\9ehi\9ep*\98Cà]'í]Æí\0(ù\19ú
-\8dþö\1ak6\7fZ»=©\86>\ 2Rè-ÇWîM),' \96\19¨\9e=¯±\1eî\8fXÓÜ\99Çø
-_ÚË#t\1a/»£\90©Ä?ùçÅ;éâèÖÜÛ\ 6]ÍSc£\1c²~\98\eÝ\16\b$\98Qègck\13\944lÄ=þ\1dÈõÊ\ ex\91¤L/\90\ 1ªÊu}\1eO S\1c]¯\94\97Ù\11Fo\1ef\vê\13\16é~¹\aUF¹ª\1dÆEþ\ 1Ëý%^Aâ(\18¢n³\14\85±\16K¬êèè\ 3-_g\b¿Xt\1câm£Sµ\9b Ö\91>h\a¬«khª\86\8e\ fÉ\14îL~\v¢Ì\16\8e\7¨ú1X\1fi{\8aI\80\r\13\82\86ÞÑà5vYH\96¯±=bù\93¨\ 5_\8cÌê.uð\ eäÚ'\93¥q)±Ámñ\9a\81\91\1feAÐqÌÑ(c\ 5UÙqX
-@<\9e\9f\88\ 1ëç\8a\89\1fß$\ 2ã\ 54¬\80nC\92pcÙp1O\a\0ùF%X\90±â ã\82h³D°`áZ¤\0(\ e¾oùý\vgVØ3ù\0\16\81Øj}\aÄó·{Ë\98µï^x\9bݯ<\ fÅ\8e\a\1a¬*wlÍãMñ§È±¬=>ºLæü.\fÁú>\99]¶}4o\9f¦xS\9d_Mi6\9bGE\8c©ýbÍ#²A7ý\97!¶;Jgxw\9eOit9¾j\15ô\7f½è\9cÃÁìb\12\ 3IÇ)\eûeqôÇÑ?}\94\ f\1fendstream
-endobj
-1588 0 obj<</Type/Page/Parent 1369 0 R/Contents 1589 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 918 0 R>>endobj
-1589 0 obj<</Filter/FlateDecode/Length 1998 >>stream
-x\ 1¥XMoÛF\10½ûWLÑC\15@¢DI\96dôP8iÜ\ 6\81c7Q\91\8b/+r%nMrÕ]Òªþ}ßÌ\924Í|\0E\11ĶÌý\98yïÍ\9b¡ÿ¾\88i\86\7f1ç´XQR\Ì¢\19]®gÑ\8a\96\9b5~\9eã¿Ó´ç\aXÚ}ùøÛÅú*\8ai9[Ds*(Æ÷«æSN\9f.ú\9fñty\19ûO{\9fñtµ\8a6ý§½Ïxz5\8b\16½§\1cáb\16ãë\97\11â¨E´\1c>x½½\98Þ,)\8ei»ç4W\9b5mSIfFÛd´Í\8c'\95çöä©Ê4}º¾}}M*-Li|åTe\1dU\160äg²¥,Q5\16\96\95ITeð«B'\99Ââ·\v>l§\9fM9\7fÿjû×Å\8c&1£´MG÷¿¾¡=\1f\87k\ 6gØ=¥¶P\86O+vÚù\88ÚC¨öøL¥¥Ü\96\aí¨Ô:å\902õ¤Éë£B\90\9a¯\9aôîRIbë²êB
-iá¤'í"^<½Y5 ôv}Î,ùÌÖyJ;\8d\9cUjÊ\ 3â\ 5D©Mê\ 2Yÿ\126·\88bó|\ 5Ô\91\9e ùûÝçí\1dñzíÍ¡D¤\9c±?ûJ\17/QE\8aïöt¶5)hÌ\14Ç\óù|a\b\16Ð*Ú\9b\rë\ 5\19\92 U¦t2>c(\1eF{e\1c\18ÒÊ\9büüð\8aLYé\ 3\ 3Cú\1fðȧ\ e\0Ý;[ðõ\8e\98\17[â\18\103 ¬\ fÛ8\0ÑeÈ\89a\7fDÛLUä\95IÇô\8eTÁT}Ø\12\9eÞ_ßâú£vÕ\98¼\95\\vuFN\b]\rnÚéª\ 2¹ØÅ9à§\13V"&&\12ØH¢\99ö\9a*å\1f}CaÒP8YG\9b\98V+¦áa¾ZS é
-µÇ²\9fÌ7Q|E\93«u`*^E\97Ñ<¢\8fúïÚ8\81Ý\7fI+×ɨ¡H´¦\90d±S\94Øro\ e5Ðeù3C@\ 6\10´\&µs`\12tÔ\1eÀGÑ@p#z}ýæ=½ÛÒ\9f÷?¼¼wÔhâY29«ð<\0\v%á\19ÝqØÝ*yD;\95<R}d&\e\fæ\rD£©®\92éQ\15Q:Ü\94\ 2\83\ 4u~æÌ*Dî¿\11\95\94\ùS\ 5¿\90¨¨P)J\99vÖV\94\1aÿøE<·×ïß\ eb¿ûð\96>Ü}\1e\Ñ«£[í\196\88»\82¸\91\b\82þ
-æ\9e\12\ 5»P\8f(\9e
-¦ Xÿ(#\8bÝ;¦\84\rã\80Bà\9fXç\85J2Sê ×\9f<\9d²!¬LàI\95\15ï@ý«æ\18IO\90EU\85³p¯\1cÆÇs°¸\8fm\8a
-Ë\80@ÞN{ ªåâ\86 ´\1a1á/\98h½$Ð7\80\v\172\ 6Ö\99\83)UN¾â¢Æ¯ÎtÒl\1c%\99`#\a]ÑÞÕbÚð\9d\ e>)$d~\80ÏcÃÁ²&éçÉëæªg\ 3Ó\94ãt_\11\Ò³¸áËÁ\ 2\1eFí¯\16h>
-¾ºG\10ð¹\933ì.\ f¯Æ¨û\13ÂIò\1aÞÇÖU\97 W\b\9e"\98r\87ªO)Uº°¥\14DÏÒîs\14=\eî\1e\186\19K7\b\97\9fô\ e"80
-c\10#FqÖ0\15¦\95\92Ü¢\1cª&ÐÂ8Ç\8ek\80\12;\94)\ 1H-\81p3\18 \9bÚS\99ÛÖæÑNp`¢¡¶T·1vèÀ\8b¸MÒ¯¡Q\85¶Äܨ\9dÉMÕº\15ÔÛ\84â3à\r$ \a6 ?fÜN:ÏùûÑr¥\19\1c\89¾\8aS\102\9a\93I´8Q\ f\9b£³O&\ 5¡»sÈ7`Ò\bp,&û0:æõá \82\1dtV(²ÆÝh \ 5¤Á²öº\82CàX\183_^ʱ\ 3`ºby\a\11¸4ÐÂN\1cÜN·\8c²âù|á¢í\9dÁ-+bVQLM çfç\943@\ 4¨ #ÔÙ×ï\ eÝ2¢\eÐ\agâ\85\1fuú;7\19é£\1eýn\1dÅã\8e_U&\9a\ 5(.\hUúaÉÁB&³h½\9cÌç\9cèóD4
-×ìX@\b«Î+¤\ 2?1C\1a2\9d\1f÷uÎêT9\9a\19ë
-äIv©~Ò¹=rû\86N\93GHÕsa\86«ººç dé·B ëÛ®\ 5\r,â^ÃZÀ¹\10&\97\13F\r.绺z\99\r»¨´×\1aÚ\aÕ\95r¼¡I\89IßA$gÈ\80\89±ôh\90\82ÝïYÚ\92J\10\17¦=ø@[ ¬.¥\8c\e¾Dª\98£è}³\9d£èI\16\87\85¸.[Ë#_ì\9a¾Ó¹]Ó,\9e×\94_YÃÕ3<«5\93\97¹\8f8;\94\ f·Æ \ 4\f\10<Å\85Ø\ 1\9ee\8f\96¶É\8a\87\82\91sk÷ÒG|\rÌxï \1f^-\9af)\ 3Ó2U.\95ÂkØæ\ 1\fb\r*E©\9d2\93däë#\ 6\17 §íÆ\9d\16\86ݸC\ 5}´íÆÁ¸\10\93 ÕÃ7\98,\v¡¦
-Åà\91¤\98\ 5ËM\9dØò[gÁ\14\ 6¥:t\11n©]=Â\97`Q|T@ô9ÈÚ»)\ 6ß!Ð\1d'íÊ^lSÞS(1Ú^\99\11jCj\9fqÂí\11á\r\81[\ 2íj\93³/\89«£h\82\ 2ÑÓ\9aÜBÉ´u\ 5Âøuå¹\0uÚ\1auû\9a!sxKL×\8fø´\f£\14\9cLÌX^#\0\14\8a µµgÀ\14\13\17^o0¦³\ fI¹ÃfÆT\9c\e\9e\a"ifü\fñí`èC,ùð¯;\90 ?@\9eW\7fÏ*èãý-[\8cxP\ 3Áô\ 6Î!\13\ 6ÛÀæ\85sÄ\11½i¦Ö0\9f´9\vÚ/ùåÝÝ+\r÷Âþ´ËJ {ÃôÛ\r\b\18\ 5\8e\ e$\9eQ N\99CV\81i¨/Eá\ 1ú½qÒ
-\9cæ
-ÒG\8f ê\8c\89\81\99\1f\0YÂò½W\18GS}Ô¥¼\82ÕGXÏ)Ó`QÞ\11xcW\95¸÷ÉØÚ³¯\89\98\98ëO2ªCaÒrD#Ó\9b\19]ñû\0g¸\fø8\8c®?\86üãðp1Ç\93\19Ïþè¤\96³o¹\91½\13y>\89gxkÇ\9aïí\17OIÐ\ 4\9bbhnÿ\ f'¸vð\8d\12Ì\9b\ 2T\97Ä\7f8&\9a¶$j\9aLx0Ä\17©¾ÿ\93ÚÿÙÛJ7\9c±it\e/\96Ñj³Àß(âð\17\83à\ 5÷Îþ\85\17\14\f^á\15\\94Ç;'ñ
-\7f¦Á\86Éz\ 6rÒÑ·^ì\96«M´º\9c\aZã\99Ì\0o·\17\7f\ü\v\19Âv>endstream
-endobj
-1590 0 obj<</Type/Page/Parent 1369 0 R/Contents 1591 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 935 0 R>>endobj
-1591 0 obj<</Filter/FlateDecode/Length 1493 >>stream
-x\ 1\9dWmoÛ6\10þî_q@QÔEcÉ\92cÇ)¶\ 1Ùº\ eýÐv[¼OË0P\12e±\91DO\94â\1aØ\8fßs\94(Ëoëº\14MLóx÷ÜÛsä_£\80¦ø\17ÐMH³\ 5ÅÅhêMi±\98á÷õò\ 6¿Cü¯$¥v#\9cß\9eÝ\80\ eoÚýúõ§Q8»öf\14N§Þ\92
+\981F`^\96H>SÁGÇä\8eÜF`Y#\ 1;ä?\0¬B¼àv¨\8e§\17#87\fL\90]\94Ø\9e\8f«+_PÅ\84¾Á\12¤ìHÄX?¾¡\13=ï\ 1Òá]
+\88=\86\1azDn*\ 1É{íI`É\bUqg¯å¬6ð\12z\8cT \1d\18\ 4\8cjA\9d¬Ì\90!wÀgþòÌh×\98\92ñ\8fxE\84ÃIË#\9b^Ø\82£¸@2vù2H-[õñ\9fÌäãd\vÀz\ 1\15ö\89÷z)\84nm\eSuL\86¼\1fÛV\a'ù\92\15BïøÌ\905l\16R\v\12{\ 1Ù\83\80\12mü0Ê\(:V4\18^\96\a2©ãü
+ø]Õ%\98s$aY\8e¢í»\9b+\ 4ª\ fE\ 3\8a\18e\11\88 }ò&\17\8bóÅ\aB\8b\0È_C\ e|+d饩o#±\15\r11²\v\84°\951\ 6n\ eÁ¸p-»\12&\88\1eÝ\19*,\e%\ 6\ 4?\9a\88¬-Ô®\90 t[;U¡\93#ÿ04²^\19ì°R+¬\82FÎd¦$ÄiÁ!\7f\ 4\18\ 3I:{hY¬\1a\18¹¼w½?@ãID\8dÉû\97o\99è"ÊvÐ\8du\1ed\1a¹\0mY\99|ØH+Kç\94Ò\96Yiýð\83ᦫ\8fx\16ª\14©*\19ô\1e£M\ 3\11\18\ 5zBxØ$\9agÍ\8añ<\1cØfÇ®\11oéÄçZ\1f\98\ 3[µkÃ4\814\0-)¤âé¸\ 1ß3äµ'-:\ 2´Ëª\8c\13Àm\14Ê~à@\e\1e\1d2Á!Ã)Ì/X\1dù_\b¸\b¦×H\ 2$ϳ\9d\vÖ\80\8e¾Ùt\19À\9exO\87\ß¼0b½\91ÒÐþâèÌío\v\81d¸\ 5
+\ 4Åæ6\a\ 3ö ³Âhe}ëä<\ f\b\8a³'µ\e\9ex\81z\ 3»®·Å;øòA{ã1\90\8bc«4álÓV\952rßg©ëÜ,êA\91üþSj4J#8Ý÷ß®éòX\8d\9b\1aù«e¾\fâ
+Q7}ØÑ\a¹Ý\ 6Ì@bÒFå;\b\ 1úw\97o\96Ì !#ãVr\açraÂðm®ñ\92\86\84ãtl÷]ß\ 3\v<6HBØC\9f
+S\14¥\98ßò7\9d\14@c\99\1d\99<¹7PI\81ø\85i!X\90 ô\12ÜéýæÌÿ¦>ýÄ4ÈÕÈ°ÇË1stÎj\1f\f\80Ð9\bð¬ \1dÁs\13\15èÞKÇ\89vê_\ 4>~ÌG¹\9dúñ7`-\f\88#³Þ!\8f9Ó?\9c\80\11¯\b¨\16b\86uÌ
+h\11
+Cf(TÈåI\a0\11rGR¶â,Ÿó\93-ú¸3ë²ú\f\85ÆÌ>\8d/H¼\86ýór2Ãp>+ ½\96Ý?¾;'xß K\908£½tÎîN>\11?$Ãá±ïø\ 6J?z'vbÕé~÷>\fÔç·\84\95²ò\136ÔIî\8eo¤ÙÝUtw±ÆÛüê\82Ök<VóÉæúËÍ5}o\fϹtk²¶B6½,p4çÝöóËå\9c÷ÿß\17-¿q\7f÷\86]]®\92Ëõ\15þw\0\86\96+¶ÿéáì\9f³ÿ\0j"\871endstream
+endobj
+1162 0 obj<</Type/Page/Parent 1099 0 R/Contents 1163 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 516 0 R>>endobj
+1163 0 obj<</Filter/FlateDecode/Length 1983 >>stream
+x\ 1\8dXQsã6\ e~÷¯ÀôÉ;\13+¶ãØÎÍôas»¹vf³Û»¸³íL^h\89¶ÙH¤*Jq|¿þ>\80¢ä(¹ig³ND\91\0\b|ø\0øÏÑ\8c¦ø7£Õ\9c®\96\94\16£i2Å
+\7fÌøã?ÿ\1aͦódJ×óU²¤\82f\8berÓ>åô0:\7fÆÛ\9b5v\85½ü\16\82h¾¼\96\93k\bl\1fºW×\8bd\r¡+Þ1\97\87øj±J\16´X¯ø\fþW\9av£ÛÍèònA³\19mv°z¹^Ñ&\13c§´IÇ÷\ fôÝØÌ\1d=¥¹Ñ¶öT¨\135^\93¶iu*k\9dQ©¼?º*ó¤<\1eª\9aÜ\8e\14¥\a\95çÚê½¾¬´/\9dÅ!ÕÔ\aH1©ª\8d³T¸Lç\1f6\7f\8c¦4\99]%sè\1e?\8eUò\94¨\84¾n¾Ü?Ï\1e?\90«HåÎê\vþ+͵ª¨Ö/5ùº2vïi\87eo\8a2×\9d)´U\1e\96½V\97ÐÏ8tpM\9eÑVãþ*7ÿÕÙ@\7f}P5\1dM} \98J\ f÷·TV®v©Ëe!^\96\fßÕ³\16÷¬a\116[]Ã\ fO¤q\1aKÆR\99+|\8aµ0²sÙ\ 5m\9b\9a¬«\aº·\ ejù\0\84yU¼ñW¥ÿltí\93öØ|\89\80ÂeßáÓ^xç\ 4Ä\ 31F¬à\88n\11²q¿\ 3"µÕrªÖ\156lO¢\14\9ba·?\13ÆÖ\1c\1d\1dÕÉÿ\83Õ\ 2Ò\93¨÷£¥ûO\v\16và\90³Õ¿~ýù\9fß>}\8e\8f\9d·B¬\12Ú\1c \1d?OÖ\1d-ã\85\ f}Ý\88\f¹Öå]Ú¢q²JÖ\9cK\8c\89ùrE¬½Çª¼ì@³\81\94N\17ħÎ"(\fÎÚQS\96¸U
+D\\90²Xbw\95*Ë8v\88\Õ\0\8eaël\ 1OÔÚ·\86\ 6«Ù^>3\b\96\82XË2\ 4,×á _üë¯_¾0ú+\95¹\88\ 2tú275\e\ 3°\16âÑë%m±ôéó\ 3=é\134¸èuR\ 3M?\14joÒ\1fh-:èYå\8df\v\19þÉkd\ 1Í \8e-\97l\80µôEÙ{eÿ¿cc\10ßñíd¾Nf74¹\9e\83Jàþß]\13ó¦Ò;\ 6»c\87\88\95¯¹ÚÓ\98~iù\80>\a\8a@¦¿Þ*\([á%P\88¤JÍÈøéÛ÷Í7D\ fÄ\91
+Cpn\17\ e0ÎtLî ¬Á·3Öêjà&Î=&\84v9^ð\8cÃn®\91Ìz\ 2\90?\9b\94\11\93>Ñì\82Îv\0\8a\0\8e\87É\9e®\92\17\89]»@\v\90æ\9bãW\b\7f>ä0áÇ@\ 2Lq\f\8a\ e\9dCNú\98ç½Jl<3FRu\ag¸#_\1aüÙÙf\1d\81\12÷o|à\ 1v\a\ 6>#\9e¨\19\19\7f\82\ew
+\88\192È\99ÒÈó\aõ\fþ\ 1~\18¥°+«\Y2Ò"Ë\15H\0áß\96Q°](Åd b\8eÛlJ\85±\r\83\12OÁܨ8²½P\17\aT\98GÕµ.J\14\19ÎZ\\97_°\1a$YV\19(@^Û\16\19¯yL¬ÓÙ\85\1c W@rL´¯Õ67\1eÎ\e\80\85E\9fIk<_\rEK¥\ahK]y\1arX4=âJL¿7iå¼ÛÕ\9cð\88\87°Kôr\1ftF\81Ø\86\b°\1f±/F\8a=ÅZY?ÜÌvõÁ\e\18\1dCÙÒS¡\15`*\8e82§ñÙJï\rhë\ 4Ý\15*\88$\17ø0\1açÄ+\16N\11\97\v2û\1a\15å\83¢\87¥\89£ @f\88\fçY¨`¢UuWj\11Aça¬4èÊd XÈ\94\¡\1d\12\99L¸j¥\v\87W¯\93bpkNWpDæ\0$ÔÌÎs]9íü\1cyûÌ1P
+^\ 1ì\8d5µÎO"AÑÞ¹\8cL¦\15_\88\81".\19(îãÐiè\94£.ú&=Ķh\b\8e\rB\112\97ãÚÅ\ 2\91\0'£ù\0º¥6I¿ *×\84º\ 4[}#|\11Û®\9b\97VE_ÆX"§\8bE|\87°æZ\13£\b=\0\17²¨\ 2L
+SK\9d\0FP\7f\84¿¥¹i\9d+\91\fIpÖa½\ eK¸ã\e¿¼\9bÒMh\1f'óEèHØ\ 4é )×Ï¡Å\eÓ\8fm \9f\87ícck4\87Ââç2fÓPuâ\15ÿ¦\88¾Ë\8eå¥o\16Ð^Î\97\Én;\ 6¤\aUlU\0$øµm\10$\85:ÅÿZ8³Ûá¸Ü¹§¦ì6Æv\r\bWÜtrFå.UÃ\92àO\1eÜF*M\11k´pt«S\ 5MÜ1ýÖ\87\939é\99;dgÑ=\83\83,>°\86âg!·³³k/\ 2ã1p/ïæmç4\8e7\18à¹\8bEï\99q\8fMÎ\93
+\1d#\14"f\16<¯ÑÝ\f\81ý\13l@6^ô(CE\96;\84\e\82ëw5N\17ê©c\98¼0§²w:»ßKU\8b:\91!\12L\89Ã\1e\88¯ÄÅ_u\ 3I\9f\19\88JKå\1c Õ\86¶Eö_\80ú]ÿÅ\fú;þ+\1a_sF{-ý\1dsp¡^LÑ\14d\9bbËVïúÜÕ@3\8a\EÇ\83I\ f!lË\186Ü\ 2³IX\8c3Ù\98\ 2órtú.\1eÓ\11Ó&SÿÀFlc\13ÚË\7f{`h\85%Ð@f\ 2°¤ë\8cm\rÌ\93IîqüøA¼ÁN\ eFt\80\8a\ eésñ\1cB\90°\ e\99\14úQÎ \8eöÐ4L\80ÖÃ\ 4\14ò(PfFÏ\93È®rE\17[\8evD\b÷W\18\0=ó4w»,=4\13øµÇCmÀ\83<K\84\94æqd Y\0R\94hEÄ9\18\a\8a¦\96\11\94á\1aÖbÓÚöü2( \8c
+_bøäæ\89\7f!yQ½\14b\\83ýámNv\9e\1e\1eÇ\8cÚ7`ê\8a±.®|\8f\1f\86)µA¼¶èTÈ\95Òó2\863üÍÒñw(M]ááäx§ò\ 1P\18ä8s«Ö\ f8\r7f2(à\r2{è\95C¥¥ Ú\99}S\85\89¼tÞ\9bÁ°bàSÖ\15û\14øé\1dµ2\13^Þ[\bÏ\96øva}EËå,\90øÃÇûÛ\8fôKåþ@ÛF\9f\Ú\14`7ÑÅÖLâ\81Éj.\93ÞU²H\b\1cCÛ
+_:0åî\1a+£@\98£\ eÜ
+;Ôó2w'|\ 3 \8d\fÇ
++\98Æä±;\1aR_PÁÊ\16«E²Z®ÃH9¿æ¥Ï\9bÑ¿Gÿ\ 3.\ eÀ»endstream
+endobj
+1164 0 obj<</Type/Page/Parent 1099 0 R/Contents 1165 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 521 0 R>>endobj
+1165 0 obj<</Filter/FlateDecode/Length 1492 >>stream
+x\ 1ÅW]oÚH\14}ϯ¸Ê\13[\15\a\ 3\ 1²R\1f\92¦Ý\8dÔ\84îBT´R4Ø\ 38µ=tf\fáßï¹3cÀN\1eV\95VÛ4\11à\99ûqî¹ç^~\9cÅÔÃOLã>\rF\94\14g½¨GÃËËhHÃÉ\18¯ûøÕ\92\96ü\0GùOÌ\7fþüíl8\88q,î\8fp¤ á¸\1f\8d»\9cfÎP\1c÷£ ?\eðA÷æð¨7`OM\1f7ó³\8bÏW\14\ fi¾DX£ ^¤Îi\8fæIg\10]FqD\8fFÒý\8c¾eeªv\86\1eæ$\f\89\92Deײ´Y"l¦J2Ro¥þeþ\f\9bìÝÛìöÇ°Ù\99¯3C\85´k\95RVnU¾\95\86p\9dD\9af|Ý\90Zº\ f\96*ÏÕ.+W´\11Zà\8aÔ\ 6WÜ3S,¢D\95KZf¹üÕ»êÑUíi\88¬á\8bÂ?Y&z¿±°cÌNéÔÐ\aúK\1a¾Ö£nÜ\ 3T'§\8dL*\9dÙ=\ e\1d3yã\m-\9cÂñó\aio§\12á>©åÓ×Û\8fç¯q\18y\1c$ª+ðkw\8avbïòÎRÆq¹ç¬wk $5)M¥²$¨B8l\19\90§\87\ð"Ó¸oh+ò,\r§#\9a\96\92/8lëD\aQ\9f]k¹É÷@r©tá+¶Ñj\v×)×\13`Ûº\ 4Â\16Ò\18±r\15Ñ*Á\9b÷®\18Ê\85é\9c=W\ 6\91"<©5âNT*£à\1dluE\99£Ö OÙ5ðè\1d1#p\92ßpQ³U¥}\xÀÔX\8aÄâ\85°\84\90\ 1w¨\8f\96Â0_f¢X\bÚey\8egð\8d+\8cÛ¥\12´P«Ê4\11?<\1cæ<2ÏE-\vee]é¥ÈrD¦Ð\9fÏÒ\85æ°vÅiy~]*D\87\8eÁÿ\1c\84.\91çV\1e²\ få¯\e x¸¢\1eÀ\0ÆiDßÀ
+\90\80L\86\90\1cìuÈ-ç¹J¾\93ªP\91%|áF"µ\15h¡²*\16Ì,ô\ fRáº7;XX+\8b\8deôQ\ 2\87¬\96¦Ê-÷\1f<jbÓ°lÚÕ}\84D¸þ=©iËxªÀJ-\7fT\19\93ßå\ 2(\17.#\v¼\84Né±Ì^H$\89ªJ_t¦\ 1;fÆÁtxÔÊ7\ 1¬°³àà\90\14¬n´Ü¢£\10î\8a\99²Ø\93'+ÈT\9eJY\92g8æ³9\15®SZô\f+`?¢{ñ]\ 6¾ ¨X\8dbÓ\18tñÀÑT\15\0\9cãü·Zèt\10*êP\ 4÷\9b*ø?\88à1\857D\10rú}¥Uµaùsâ\84¸\ 1\80¿äÄï\8d[5_ë\86ú@ï^CTË$×½FãüÝ94sU\15\TÔ÷¼eéÜ\935\11|Ç8]À)ðA U\98C>.\96\19«\81,\98\fFC<ľÅ%Q
+&\rD\ 2\ 6ø&\8exî\81~©\82ºî2P±Á¢\87y»\1dîPG\9dÂ\v\v\97cn\18}0ÊÐ9Ë^¿ü¬¡RJÌ'<~V0Î\8e\9b\13·Å¬\88æÜ\ fÙa\98\ 5\8dw\11BÍ=}\8c\e\91Ø3ºµ
+Oß²ý\1a\9cÊ°Ús\1437ÔÑ\0¥X!\1f°\14°\15"\ 1\ 4èÜf§¶ <ÍÏ\ 1tñ9 kAw\1cMb\8aCÐ\7f÷Gcj\12Á=?Dý _ì{BspD_²²z!³7Ð*\92/\98
+¶^\ 5.\83ù\ eaQp\14I©« ãøéáúþ\13u\9févz\7f}÷àÞz\8fÍ\90°ö¤\9d7âéö'Q|uÄñ¿Ö;¦§g\90U-X±Ìd+&oÅc¿L<ÁëR¬Qü\85äQs\94vh"\14\90±\vó¬Þän?\ 6\1eÕ·½\92¶\1cþ¼®z· \92!S%k^3\8c´\96¹\ 5éÄ\1aèV\17³\96\18á\9eõ¾&Xyëí±æÈ\85´É\85/©?So\98\1d\82&è}»\ 3¯\9b\93\16\8dåqcß\8fw·®Õj\18xÀ`\rcL=g\83Â\87ÖD\9fa\9e`Å°\0ò\18fk?×+êð\8a¼À\96Ü\ 2p\8aµx\9bÉ\9dûø°Õ»ûîV²\16\e\1eÔÎ6¼ý>ý6\9fB« S ¯Æ¡y\8e{zc<\r"ú\18¶§Ã\8cúÉõ<,c'Ôá½>\95\ 5Æ3/\ 5ØÄÀ"\8coLÛÐ\8d<±/\1a-¹À¨\ 5\92n\94\e»Ï\8f2!ÚjµãÂ\83\14 ña]9\83púáÏ$\95Á oû&_ÝVµYÖû\85ÛhU\89u\17ñ¶ª\11¾\15àüa\88¸M\a9\81\b©ó<»¿!¿\e\9cöѱ\14\93@Ðx\84¯l\93\ 1\8d®À×´3»¾¿¹¦¯Z¹õðV%n`¹5\8e\83èÖÇ»ã¾\13\9a\9fý~5\1c\ f£ñh\82olpÚ\1f±íOó³?Îþ\ 1Ën\8c\94endstream
+endobj
+1166 0 obj<</Type/Page/Parent 1099 0 R/Contents 1167 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1167 0 obj<</Filter/FlateDecode/Length 1200 >>stream
+x\ 1\9dVÛnÛF\14|÷W\1cØ}p\81\90\94HE\97´)àÄNú\10KnÍ (â¢X\91+\93 ¹«p\97\92õ÷\9d½P\96d«\97Ø°-\98Üs\9933g¿\9dô©\87ï>\8dbJ\86\94Õ'½°G\83I\12\8ei0\1eás\8c\9f\86ÓÂ>H\ 6£ç\1fÄÉ \8c\9f;1\9a<=ð&=\89Þ\r¨ß§t\81äÃñ\88Ò\9c\90¸×£4;O\8bRQÍu!s*ÅJV+®\88åy©K)H.H\17¨GV\95\\97â\9e\96¬ax\9b7\8a´´ÏT=\ f3)\16´(+þêÇô\vÒõhâ²\ 5ñ \1c ßùÙ\19-+Î\14G{\vÞt\87oY=gtsù\96~\9d}Jg\94\15l\89àT1ó»\14dâõ(è÷Ð\98\v£MÁ\19
+â\99-q!\eª%@˹fe¥\ eN|¾¯ä\9cU\7f\1eü\9bü\17\17Y³Yjô¥ÔZ6¹¢×ô\a?\fÒ½xÖ6¥Þà¥VñæHÌ\Ö\f¥Wò^\8a\7f\8e÷\131A³[ªø\8aW\ 6ì$¡®\1dtÙðLÖ5\179Ï\8f¤\92Ê\9f}\8d£þ\9d¸\1f\ e\rV\9f§Wé\87ÙûÙôXïK¦\vt\12)YóuÁ\1a\1e\95"2S\8cÔFi^\1fÉÙp\96\93\14\95Aaã Ú%X\10Ûì\0\0pb\88f>vf\9ed \r\80þJ\8c>\8aò\81\*bY&[¡Ip\8e\19à\9d9§\f\994Ïm\ 4βÂbþ\82\98¢5¯*ó×Ä6OºJ\13È\ 2\9d_ßÒ§Rärh\9aF±az\8d·JÁCJ÷è¬tÓfº\ 5{,ÜßÚ²áyhÂEï&[Í\ 4ñر8 _\86IØ\ fé#¦oIrй{íÂVºíI\17L£\80\r-\e¹*s\8eÖ\v@N9\92eZ6\eR\85l«|§çÃ:?\94¢ÝbeHÁD¾%©ï\1a\ 3$½Y\96\19³T2ºEÂ\8cç¦=\83\94ÅÓ\88\18¤óxûV\9fêµcü\99m\ 5~@\81¢h\ e\82Ì\99*(È)2=D§F\ae~JAMÝçn\1a^³\8f¡¬Èò\7f{\8fèJ\18õßxI¾¢\9f\97ë_|Ð\8eÜ\8fAá?>nÀ¾?ôÁ¸\r\8bÜ°ã\90öèD×\8eItá\18{\9c\ 5`\1aìÎL¥á\8eXN5ë\82\vrÆ\aÒ\ 1¿ÜP\99\91·\rx©n\8c½5!ýþÄ+\ 3xeà¼\12#í\90ö\fصÁï\98ì\82U(Ø\8c6ç«H´ÐØ©×Í_\ 2®\7fzw÷C\97ñØl\83ÿsfot\86@{ÙL*;\16,,³¹\82Än\92$\1c\86ôV\8a¬j\15VÔ3ø\8f\9cÿ9\88½æ\fÀ\8b\8a?\94ó\8acÝ1\183LF.y\ 3\8b\ 1þah\ 1ÃV\86\7fu*¾Õ\90YÀ*)8\81æ+\902 ©$µäY \951·\810Ec[\98£\84è\8cÛA`\88îükÏ\vTH;AM\87\81Ùn~~.\87\ 2\13h:K·v!¸¶\8ei\17\8a-¤Ì¸zaÛ0röþb\r\ em\19·\ 1«\9céú²]Änx>\1d\9a\a\87êGê¹\ 4óVcób\ 1Àækö\95Û`Öïým`G\ fîĺ(áÎ\80¡\92Æ|Ð:p8H¶sÈ4£43Û;rõy²fÞq\ 3Ü{ú\94LÜ\1cïâáÈÞ\ 3\1e½Ö>\ f^ÆîRp!\ e$\9a\84\ fÑ\07©íºöÒªy=\87¬\1c±ö\93á.\94\9f\1fÍÔ\r\b\99X\ 5o\12(~\ 5\84¥±Ò\9dΦ)u¹/Ý%\0DíÔü_Ò\8e=\ 2ýd\1c\8e' \rã\89#ãíÅõ\9b\vºiä\17¬\fº\94Y\8b{\81ÃÐÄ\rúC\\1fÇ \ 5£Ø¶âÌËèdQÞ\9b\ 5àÔ`\8c\ 6=´\98\8fÐØ\14ö\ 6åf`Â\fF\83p4\1cCl@#\1e\99\7f]¥'¿\9dü\rï¯$yendstream
+endobj
+1168 0 obj<</Type/Page/Parent 1099 0 R/Contents 1169 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1169 0 obj<</Filter/FlateDecode/Length 1451 >>stream
+x\ 1\95W]oÛ6\14}ϯ¸@6Ì\ 5Zù#n\92\16ØCÚµO+Ð!Þ[\80\8c\96h\8b\8bDºü\88ãþú\9dKJ\96¬¨[¦\ 2ICñ~\9cÃs量\9dÍi\86\7fsºZÐÅ%åõÙ\87ÕÙôó;ZÌhµÁ\9bË«kZ\154Ëf3¬ä\93\8f¥Øyii\99ÑG£7j\e¬Ò[úzó\856ÆR¡\9c·j\1d¼,\b?_þ>\9bÑ\9bÅ\12>&¹ÔÞ\8aª:P-´Øb\87\b¾Ä¢Ê\85WFóf\ e=¿J¡ß\,³\ 5\e.³yF·¢^\v\12ºàXië\92æófëâ*»ä7¤C½F~fC\7fjõDî༬\1dÝMäö=Ý\ 6M·¦\12V¹»W¯I8Ú˪âßH\84\9eð|¸ý\8d6¢VÈ\92cý®txzMÚì)xU©ï\92w6°æ\17)¿¯UØnź\92ts\ 2\88¾\98"T\92\83#ç»Wp\9cÃ\87?\907´³æQ\15\92@È\80\aä\ 57ƪï\91\96\98\87\95Î\ 4\9b\ f#ç\ 6\94\9a\8a\9c´\8f*\97.£¯Vá\18à\9f\ 1)~[\84\9cÙeF\90\ 5\9cS!såx Û\82C
+\1aYàP5â=\ 2`2NÌÑN8·7¶\18`.\84\17k\ 1ã»I:\f\88(\1eÆd*}>\8dVÑfú¹=¦ \18Ø\9bP\15då· l¤2ñ\10³A\82½4\Ô\13³\ 3¦¶Và\f})ü\917'sHÏ\1f\ 6yuLÜ\86¼\ 4ؼ4`¦ ¬ô£©\01\92?\1a\14à\1d\e\1e\83
+÷>\ 1|Û\ 2¤ÊlU£Ö#¶×ÃM£\f<Û\85ìö£®P5¼ÀgÖ \\f±\94¸Ü\1a\ 19`¬e^
+\\9d(B\11B\18Zæ>ê\1a\87Ô\92ÕÁÚXû%\ 5]H[\1dPÄ\ 3&O\8bszªI¥7V Ô¡`%d\87\84\94#\84\8d-\ 1µ-\15¼C\89¥5a[\92Ñ\926
+%\92x\1aª¥ÎØ4½k9íQp7éU-ô½>\90,\94çΣt¡PHATÑ\7f£\12\ 1uU\ 6}\ 5\99(ýà C\85\ ey^\81 \8d©*³\8f¡Àµ&ù$êÝ¿\0)¦cú8R\93j\9a©ÈhU\82³Ö_)Ð\10!w³ãru´\962*£GCй©ktLFåø0×h;\a´'\8fB\8e\1d\bLyr^ä\ f\8eûì\81\ 33UÉ%ztl9 \10\94\8e¦á6¡Â.\ 6Õ4\8a\81\12X&\11\13Gd\83\8c>9Ç\8d;vsNº\17$\aGkÉ\93\80\13Â\18à\14bÖÌ!|Õd\82\aì\î|\94`\ e\ f87s*\8d\1eî\9d¨ïwûb\9d¹fO+\91I<°éç\19½k\aÁ2UÈùÏ\90ä\9by6k±Ì2\1ed\93s\90.£\[v\a\12;\ e\83ý+¢ý¥m«C\17\83¿¹2¨÷4Ýh\978ûX\80ÒûC\ 3\81Á5\19½Ä\\9b\98Ñsãó8+ÚHÔvÖ\93Ø\ 5\8e)ìþÛ6 \ fuÔ<\9cw-TõÜò%)7çE\ eºÆô¬\8b·\ 3Ú\90z\9e\9b }\13.Òæ\94\97½ð^Õr$ü\89Ý8è\9e\z\;\88\97\a_û\8c\1dÕ¸å9Äз\1d#«BGÄ9=Oøü8ESà±°¹EÉV\8a5\8eSôöðëÅ\80°v\12¿ ù\ 1ëÝ\f\ 6\17\8bxQâ\86\8d²3{\17¯\0\98½Vî*\91Ç&R§{\v7(Ã÷\83G¨ ¾\0u\82\ê\7fÍý@é¼
+\85l\86äóBü\89¦k¥§(ð)ÐMÛIô\f[}\ f9po\ 1~<,¾\8dgÕ¶pÓZ¥jåÛM±¯÷\8e\97\8dt¾»g}FK^°ÀàÝé\1a&W\17jÌKÿ4b.[\8c±~6ì¹Âe76ò\98ä\b¢®l\eDÖ\18o\1e:PìÅs\13=.\8dx)¤îÞ³\85r.pY´ÌðZS¨ÍÒ\88\97\9d´`®±b\8b~Kb³\98Kª·\1f{9ö\92Ö¢Ó|2\8a¹<\94¦Æ|¶1ÚX.©\97w\16®Ä5üxª)\97\80ë{\arÄ\8bÔ\8fÝ{\8e[\15¢\7fD\11Qm|Ñí\1añbE¡B\e:òR¯¹Ò\8eF¼Æ¹°>\13\7f#^ö¥\94Ü(#¤Î¢Õa\87è>Ý\v±uÄ\v.ã6N¹\96ݽ°ºõÚ®Å\\9afÔ¸\19©o\9erÝÍ¥½cð'\1a\ f¸ã4ç\8buSùøNáWüA\80nÀÿå\fy¶6\17{\86Õk\8e]Ð ¥\86AûRáê\f\ fÑU2¿î>Ò..ÓGÚÿû\86¤\97|7.¯\96ÙÕå5>X1ã\17×\1cúÓêì\8f³\7f\0%\9c\92Ëendstream
+endobj
+1170 0 obj<</Type/Page/Parent 1099 0 R/Contents 1171 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 524 0 R>>endobj
+1171 0 obj<</Filter/FlateDecode/Length 1651 >>stream
+x\ 1ÕXmoÛ6\10þ\9e_qÀ0Ô\ 3b9v\9c8)°\ f)²\ e\ 5\96¡[¼o\ 56Z¢,¶\92¨\92\94\1dï×ï9R²d9)¼\ e\ 3¶\ 4 \12ëx¼\97çî\9eÓç³)]à{J\8b\19]^S\\9c]Døwz\eÍi~³Àß3ü\18I)?\80(ÿ\9aò¯_\7f<\9b_GSº\9aC éÕEt\19þÉéñìÍòlòv\ eE´L¡ÿúfAËÄ\9f¾ e<²;ëdA\95°v«MB\89pb%¬¤\ f£ï\96\1fq\94mࣣ\89tñÄË%áI«ttNÏ\89ÚL$z{\92èÚèº\1aH~ø\8e¶Êeä2I\85Nê\\1e^rAãée4\833£J\14¿ÛbŶEV\ fôÐ6SqFµ\95Öëz\14ÅJtn\86§±.\9dPe\90xP±ÑV§\8e\1eîç$ËØì*'\93}\8cø\82Þí\99°\99´\11-3e;½øÛ:mpL\95$á\884GQª\99ä:\16ùIJQ\93ʨ\8dprÒø²=\8aó\8b\11ð¹ J^<LÚ°-\87:BVýÉ(yùbJd%ËD\95kÒe\17ÆA$TQå²\90\b¥S\10KqáN×\86~+ÕÓä'UÖO\14àÆÁ\92CK¾\9cÅ\0\ 1BX+£7*A`W;
+ÉÜHcqáÀ\9aY4CQÀ\86\1c15\11½s\14\8b\92V\92b]T*\ f\1al%c\95îØ3ä(\ 4çª\85<\8dÇ\8cÁqÏ´ ±\87>é\8a}µ@\99,ÉÔeÉ\9a¼Y¯l\90m\v¨\a\19À-UëÚ4÷uÚllTå"z\v³\v \a C\14\8b\10Ï&ò\87Zûà\1fÚ\16bvNVJ\9f³DÇu\97\1e`aïñ36Zd.\96(ø}m\rÕ'ÊÈ\18\18ß\91N;LP8H\89²Î¨UÍá\89Z\9boC\13\1aÏæèj¨Üo¾}\7f÷0F\17c\ 1\ eÐEtã?÷\0Á3ä*\84ª\81\14Òæq\ 5Ëé\8f\¯Uù
+î\99\8d\8a},û*\ 6*E\8dfÒû2òs\r\a\92ö£\9e£h"TêDæb7T\12Ǻ.]{\ 6íø+\94 \131\ÿ\99\92}ÃnÔ\9cnI\7f\1a\8cg×\1cn®ÆTç¹Þ2zQc\1cÞ/D_ \17\1a§â:\17\86\8e\v;\91©¨s\94\9bFËð\80»o\8b\81v\12\1d´ïj\9b¬\8e{÷¿\84\eßî¾\ 27\a1\9eäj5±2®\8dr;_&\8d\ fTÖ\88ä§\16A\14æ \89\1a±x\19N'êöZZÕ\ 3m=\\9d¨íy\90÷ u¢\9eÆÅ"¹
+In\e\1aÊ1\0ì]\18\1a\1dÆä\93àa\11Ú\12:°/\bLR´gôÑB$x¤yh{\89ýLëæ«Ü@\8e'\fÈ\8a\8aɧ´\8dGC\v¸â1\8cTì{GD\8f5x\0F\7f{\1dJ9OHä¨v\f\ 5\7f'+dì\a\9aãfmDA¢Lhë¥]V[\1cA¥°ÜàÂÎÌ6\84¨$¯<ÎD¹F¯©m3h\ 67ü¿\80ÞøyR\9b<\11Aÿ-\\1f;Hø\88GÑ÷\1dÓ
+|)âO_@ýÏÚÉ×¾\8fzÄ0#\14ñ'F\0\ 6æ!:©\90\8c\11e\v0I0\15ô`\ fÌJcV¬¸P´\87Ì!!X1i\95\9e&öØ\ 5S\16\fw]\86\1eÞ0'\97\81d¯Á§µGx)\9f\ë\99\15¶\rß[\18Ñû\ò\ e`d
+ÚÚ\9c8d\ f¨\94\ 1ú=ÕëÍ\85f³x\86\14&\12vç\16ê×ÂxRÉ×\a&\86Z\8eE%V*Çä\0eG¤x\10y\13\95\9f!=Oe¹QF\97ÌiPÞº\90Í0â;÷D§\8dd \8dÞÓ\90¯\96ô\ 4
+Å©9\9e@m\88\&\¨{_þ\ 3×\a¹lj¾%y~\ 5\10Ä¥\8fDÆ0Ö\88\9cRP\99\97yðKÖH\97é\84¸QZv\17Ìw\87\86¶\ 1Ð\86(\b½\16̸eìÜ(y²Ã\11µ÷\85\e\1eR\90f\91\14
+\0\84q\9e²Ñ\1dH-\90Ä^\ 3\8e¶F2\90\85\¥Ü\93\19Jç\84&ìï\ fý{\10\94B|â\95Ë \97\8fu\9aZðPÍû\0:í\8e¶\ 2,\8a\87\0ð»\aß\11Â(\r a(\93y\95Ö°££ÃM˼¥)\16ZÞlÇ\97\r©\9c\83øÓ}K?Ñuï\ e\ 6AH~\7fD-¢=\v\12ÖÕNöc\81\0m\15B`¤ÈÕ\9fàIF\17°¸\r%#\17ûÄJ\95\rIOÿÖ^s\1e¬é6\ e00èJ\8eV?\9eA\87²½:0vWÆ\87~\8d°À\83÷ó\87\83×\ 5fM#Ê\9c«^O&þ`ä\87g¤Ízr(î\ f²¸ßÅ\11\83ýà#\89F±Ê\95͸Ì|;k\81\9dï\90àR`Ú\9dw;À\11:1ÙMx\99pðÒÁ£\93·´v*CÎ/z\fBî\ 3\1fFrý:T9\8c\12[\81\1d©\99Ò(L\8ciQUy3ñ\9b\9dÜûÔ½,\10Æð,övóM\99Øð¼oé,̯PMpJ$\e\80\14\8eX¿0â&\90\0.\bN93\13´¦îUÁ]ì\14\14Ý·;QÈÆM³IN¯ñ\ 2çæ\92®o§añy¼{xsGï\8dþ\88\15\8aîû\8b\19\9f\1c·\aÆ\8b\19^Ó$£\130=_Ì£Åõ\r*\ 1ò³[VóÃòì\97³¿\0ê~¿¤endstream
+endobj
+1172 0 obj<</Type/Page/Parent 1099 0 R/Contents 1173 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 529 0 R>>endobj
+1173 0 obj<</Filter/FlateDecode/Length 775 >>stream
+x\ 1\8dTM\8fÛ6\10½ûWÌ^ R¬\8f\95¼)zðf\9b\9e¶Hk\ 1¹ì\85\96F\16\13\8atIj]ÿû>JvVë\r\8aÀ° j¾Þ¼yÃ\7f\16 ðK¨L)+¨î\17«xEEYÄ)åë\12ï)þ\96©\r\ 6¸\86G\12\1e\7fÿ±H\8a,ΩHs¸ô\94À½8\9f\14m\17ósOéê.ÎfÖù\19Öb\15ßÍE\11\97t\9bçñ\1a\99³U\8a:Ó)d\9e\9fa½\ 5\9e¹uv\86\15\99_YggXËòUæà\9b¯Ó·ÍßW\8b÷\9frJ\12ªZðU¬Kª\9a\91\8d\15UõrËöYÖLOËÍÃöé\86¤&g¨\15\96\84\ 3{ÍP{i4\99\96\8e²a\12\96\ 5iöGc¿\91\18|ÇÚËZ\8c>Þ\8a¶\95u|S}EÉ;JP)\94\8c²\1cP«f\99ÇYL\9f7\8fôÑèVî\a;Å\85\92ý.®ñq
+}A\e¥a2\b:Æ(¥#\ 1,\87±Ü,\8cj¡\147!újÖvOK2;>ÑAôèÇy+Ç\8eÜkç1,8Ç\84RÔ\1a¥ÌQê}(ÙZÓ\13:%£#%5SÇê\0\17\8b\8frÊCQ\92\81z\0}\ 1·ý²©~\1d«P\94\16\13\ 3_À\17mE¿\13Pg\1a\92\87®\ 3\15LÞ\10k±S<Rä\86ÃÁX\8f¹È\98c\9a\88\81\80Ç1.£è(}\17¡§ÉpalùtónD\85vèÙ³ÅÜ\94
+e¼5ê\fç\ 2öØ1ú²\84V´ñg`®3\83j&Ò0¬_Ày]\9bA{pß\90cç\82 z¡Å\9e{\8c\9f\1ai\19\9c>³\9bÈk¸\15\83ò´ãN<Kc¯\8a¢i´:¸©Ï@c\18zóü/J¼\96\94Ñê4\96E\84Ük\ 3\9a\84Æ\973 ľÅ\13Ó\9fÆ\83ÎNø«Ê\13ñB\1dÅÉ\9dÓ¹\91ì\0âª2Ô\15F^\và4£.\7f¤,Öµ=\1d<Øv\ e+Ñ8ú\8dNüÿÚÂ\ 69\10\18hx\v1lGo\9aA1¤!t\98ÊE #\9c.\b]ïù=¤|0\1aà®p÷\wBK×cK¹á&,t\88< \0h¿7ó¢ØíãýwüPàØ\10&<®1\96÷"Ý\87iª\1f&ÁÝ^\94øãå\ 2\rÚL\9eë³gRàN^g\94¦á\ 2Zn7\8f÷\eúlÍWh\87\1eL=\ 4-\8d\17B\88\8b.îQ\99â\9eúÙ»#/ó¸,Ö¸t\10\92B¦ß«Å_\8bÿ\0]®ÌFendstream
+endobj
+1174 0 obj<</Type/Page/Parent 1099 0 R/Contents 1175 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 536 0 R>>endobj
+1175 0 obj<</Filter/FlateDecode/Length 1435 >>stream
+x\ 1W]\8fÚF\14}çW\)\ f%\12x1ß\e)\95v\93Òä!ªÚ¥\8aªÒ\87±=À$ö\f\9d±!üû\9e;c\ep\92ª+\95\95@öܹßçÜ»\7f÷b\1aá/¦Å\98&sJ\8bÞ(\1aá\r\7fÅüõÛÏü\86f³8\9aSAÓI4\1frzê]=\16\14Çq4»:\1c/&QLÓÅ\18W
+\9a\8cæí\13_½~Æét\16-jÙpº\8c\964\9dÝGc¾;]BGxò§WÏ8]Æ7§\8fëÞÝê\9eÆ#Zo\11Û|±¤uæCÂ\9b´ÿf/\ e¥´4\8bè\9dq¥Ò;\12ôA¥Ö8³-ér¥UIUÊ\8cV*\97/×\9fz#\1a\8e§PÒ\7f:»R\16TZ)Éhz\12E"X\80íÅ\8b`o8\99Âi\bÏ¢8¢÷\1aꪴTF» 9E¢jÉñ\ 2I\85äz/¿²KµMßXz»u\9b\97t°æ¨2éào!\85vd¶ääAXá£(¡%7;\95\8a\9c\8eJ\9eøx\8b\b ¯3Ê\94\95ii¬\92Þ\ f\84\14O\82\9få^\94T9i\1d´IÚZ\83\b¡K¤e\ 5U\87ýÙy\9d¹Ia\bq°b\b8IV:SÙ\14&\90\r¾£ey2ö3â.Iä¹99ÚÂÿ½Úí¥SÙØ\15G¡r\91¨\\95ç\ 1¹Â\18h°äà¤ØI\92_\ e\88\11ö\ 6\88Jd\94\88\è\94Ë%Ë4¢\15Ô\16ÆJR\1a\16
+ï\19\89ÄT(áÖ\ràÚ\16ÊJã\8dÞö´Ý¡-Úð/¥ÏLZ\15R\97^×í=\ f\bÜëGu\10ã9zÎ\97N9j.²Ï¹PÈÐÞ\9c`\e?\ ey`\87Ú\9e\11ô»V_¨\10é^iI\9b>ç\a\ 2Cq\12\88&Í\15<\80¸¡Ä"}\12u¯\1c¢î$Ï·ÞWÎ\18\92Z$¹¤§\ f\8fÃD8ôðÛÕ\93/\81¿0 ÔèÚU\9c·\92NªÜû²±ò»Õ¸îÌþpÈ'ÃÂeÛNÓöÉ\1c¸\a"úE§\92\92Jåå\0\11¶H¸J,:ê\88\12¤BS"\11p\86\96ò©¨\ f\923úl[w\97\e\94\98\12cr47Ýæßs\11ò\7fådHnëã\85·\9aZÝ\1a¨õ\89ARH\86½
+\8d\1a"\ 6Éy,ö]\91D\9c\9aðº¹w\15\f\ 3)¢?LE\0 ÚiQr4nÏ5\13\8cH®±E\v\87jù¬\86Ó\\1eåsÂò\11yU·)ø×°"zh=ð×.ýÝ\0ÿÜ2\96Ï\9cóò¹Ò\9f]\93\13Æ\91ç\94s\91\98\¥\14N=?\1c\8cÒ%we\rR_[\17`(¿\88â\90KôAÇ´»Vä+z·jSþ©Ò\9e\16\87?ú\88_Õ¸\8f7\e\9f·ø¶\14ýÆÉ\90ÔKP`)¤\1f\80a\ eE\r\1aµ\r6\1a¶ù¸\97\9a\ 5:8\13%\býà#\13)\88,(j\94ø\f\fX÷\99¸ÒV\ 6ÃÀ\15RÁ&\e¶jÈ\11\80ö\1d¦º,\9b\ 2\8d\ 3ÚàÓ\rtó²ñµ!\15\8e\83g\8c§U\ f-bV\rx\ 5~#\ e+ô\8e¹Ñ³÷G¥3¦Þû\19»9\1e\8dF]\vï¤\95?ð`\0eùâ\85Y\12ÐX\1dê~næ\\8doÀ\95\11íuq!ï\9b16\r\ø\82Ö\9c\91\1aJ~ö¼j:b\84q\ eºü3 ü¯Îkª?\18\1f\892\8e4ÀJ¯ééáÃãÃwD=µ\ 6¬\10DÏíX\eó¦Â¦²û\9e\9d\83\0ñ½¦;ðµ±å\1d$\19ºß±t\ 1äÅÎ\85[À\11\93y\bî} \96\8eÖvò\9eé\84ìH0Ä\8105 V\e\84u`Õ\9d¦ìØ\ 59°Ø4
+{ý"\9cÆ5\95M°HÍ0ß\90\814ûV\84\17Eà û_µa¦é@q\9d\boÝ{®ÖÂd´\98ÍþOWsMCG7´òà\91Çtýà\93^¯m\r\e=Ïé\eý\1e\13\8fúA\0É\9bö\857\97\84\1c5\83¥k\8eç\8aÛ\9b*Ï\9a\ 6an9H[(Ç+PXá\90\7f,i{\85öñ\vØUg\81\ 5ý"{áA?\8b\\95ò\80Ç~gt~f\1f®FZ;ȲzûãI\9dZ\89Ñ6À\94Ë1.É/Y\99Ú\9e=Ù\ 5$ø©\80\81\93;CÚ@È\e\0×ó\81\87.\16É\10\fæ>èªc\17[¡´L\87\11ø\ 2ÛS®
+\15v.\90\11¶oÄ\80ÍI\1c±Åð~Mâh\14øÖ\9e}\84`?Î\rßÇ2S$
+£Øg\b\97v\0\17båóÖ\97\9a\96\97{2ap<óß\80f\1do(±]x¦\8bi´\98/\ 3â&~jý´îýÚû\a\ 2þ
+=endstream
+endobj
+1176 0 obj<</Type/Page/Parent 1099 0 R/Contents 1177 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1177 0 obj<</Filter/FlateDecode/Length 683 >>stream
+x\ 1u\94AoÛ0\f\85ïù\15¼-\ 5j7¶³Ø=¶ërÛ°¡\19vÉE\91\98Zm,y\92\Ãÿ~O¶ÓmA\97 \80a\89äãÇÇüZd´Â7£2§bC²Y¬Ò\15mò"]Óº*ñ\9cãç\98\8eãÁÇ,OóË\83ûÝâf»¦,£Ý\11¹6UI;EȳZÑN.·Ú\88Ói Ï\81º\96BÍä\87æ`OZÒI\9b\17OÁRkµ ñ!\1e\e\ e½u/äkáØÓ`;ê\85 ×$\8c"\1f\84\vô(\9a\83H¯vÏ\8b\15%ù\ 6jwjùóód\r=\1c}"z\ 4\93<i6Á\93\14\86\8cíéàlïy¬\82K\14\1cs\f\88UÇ\94Pé^Ù\91\b´ÇÇÇ2û½:ú\94î¤dïµy\9aTϵ³\ 2@P;v"Ⱥñð@ûe_kY\93h[\16HçIiÇ2X§ÑÑÜç$n\7fEA¼àm7Ê\9fî\81×| \19\9cm\9d\16\ 1Ü& \93à\v\ 13´\91ÉÍö\962 \89ãH\8al¢ó1Íð¥¯6°\8f±\7ff\86Á'y\1cÚò§6
+\80Þ°\19f\15\85\1c\18\1e8X\84*ÒG\12Ô:~Õ¶óÐÙØÎÄ÷Æ\9a\ 4 &\91¤=5B1®Æw\ e¡\11Ϋ\96|¡\e´½\0]Ô\b\ 1ä{1Ä`\14\85#\9cU\9d\8cI\f÷sâè\81\ 6¼HÃ/\18Û9ýܸ\9c}\98\94i\95Ñy:û|SÒ¿M\8fçoÖùÔ9\a£Dì5;þàQ\13Þ\vNË GÞpDãÇþ\86&\ e\9b\8ch04_Ûî¤\b\ e\8f\90N¶g'\85çwÕ`\1dÔò¿RÎZ·àäYvN\87\81Úεֳ¿\9ez\9d=4\90\80,8\11¾\8a\f&¼ÇñùálëYY-^añÞ\0sÛ¸B\17\ 3hÙ5\1aƶ\ 6Ý`G}\Btk\rh(öúÉÀ{j¶g\¤Æ*}\1cI]n²\9eVéìõá]\fçFÿ"QÍSË\8a*n\vʪ""Ç»/÷wôÍÙg,\ f=XÙ5\18\93\883\89m$Ù\ 6ÿQUAI\99\8ft/M¾.×i¹©°\aHVä1æónñ}ñ\eÆâ\8a\87endstream
+endobj
+1178 0 obj<</Type/Page/Parent 1099 0 R/Contents 1179 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 539 0 R>>endobj
+1179 0 obj<</Filter/FlateDecode/Length 1723 >>stream
+x\ 1\95WMoÛ8\10½ûW\frr\81Dñ×ÚéÞÒ é\ 6(Ònã¶{È\85\96h\8b[\8aTI)^ÿû}CJ\96¬$\v,\8a\1a±EÍç{o\86¿FS\9aàß\94V3\9a/)-F\93d\82_øcÊ\1f_?\8efËUò\9e\16ï§É\92
+\9a]\92UóMÓã¨ÿ½ ùt\91L{Oûßñt¹<Zâwá\86\16Ë+Ø]Àê\84føï$mÃ\83ù\ 4\ 1\f\1f|X\8f.ïÞÓlBë-â^®®h\9d\85pñK:¾ÉEYIGË\84¾=ÜÿE_¤+\94÷Ê\1aú *OÂdôC\99Ìî==¬ßÿ\1eMèb¶\80\8dñu\9aJïéÆ\9aÊYM\9f\94¯<\1f`wÓUtw1_$3>¼L¦ }Wr¯Ì.\18Msavü%¸-\8fn=Õ\9e\7f®rÙs8I\82K/ÓÚ©ê@\99\12Úî\1aw\v\9aN\ew³\15J\ 3w\ frOÊ\ 4#\8f¢Ø\b.\14L8©¥ð\92\94\ f\8fÄFi¶¶µ®\97$¥ZI\83Ü+\8bX$\9fT\8e\8c¨Ô³¤c\ 4^V\15â\f! $ÓyÌ3\ 6F\eû\ f¿þ\8c\84C¶\85ÍÔö\10\9cÖ&\93N\1f^K=ië»\8cé>Ø\8aÝ\8b
+\1f\b¹\r\17\7f¦ÂÉmÉX<³\94Ú¢t\16\8d\vÑvAÚmp\19J\9c[_Q,\ 6\f¸Ú\18\ eÁ\9aó\10 ¯\94Ö\8dû6\17»\91\axÕ:\18Ù*-©ë\13,hÉeDt¢±+²B\19ÀÀ\89
+\15M\85A$Õ0©{Ó\9c\8e-a\80\89\8dEi¹ã\99Ü\8aZWô,t-© ¿\14N\14\92Q\1a\ 2<¥\9bÛÑåݬAÀ\98\f¢I5ùº,«NÏ\a\8e\86ó-bÆ\94\vO\e)\r\ 5<Ê\8c¶¨#¿vy\a>·°j+²\15ÚËø´3\81ú\9f¾0®\=<uNÞR!\8c*k\r$\81^H®«¦\ f\90¬\9dA\ 4x¶\ 1Âc%Bõ\86\8c
+\X&³\84þ°û#ÎB\83\8eø\84\95¶->\aZN£f\127T¹CÂ\80\0ÈF\vÈG\ 4?Â\ 5:´¼À×ô'íU\95\87þ8µË+*,óbSW\15ç\ 1G\ 6\1cbx ë\99r2Eû\ fÌ¿6\ 2¼`*\99q\f}®8f\94\ 6\91ÐZ¼úíá\86JQå ýÈÑ\11ÆC!MM¥-ýE]\9esl\b\ 6\ eñ(æ³<6þ\8b³(g¥ä@\14Æ\ 4.#\9a@"\ 4m\11tÑ"\8bÍ·øl{¼fªm\1cs\9bê2Da¬+\84\8e)\82g\8d\9fF\84\98ëç\\8cX¥¾Ü\ 4ÖîA,À\f\99
+2\90\83JlÀ)\e%nP\91Ê\96\0\89û\19Kuy×¥÷Ø(ßi\eÇ Ýt5AÜÁ8\18u°5Â\81c/\99X\ e\9f±]þüEá:é\1d\18\7fqôºÎ\14\8bÞð\1c+ÈÐìç½\91Îçª\1c\1c~Yî\17|ÃM\v¸\90W*\18\82\12¸\ 4v\80^é\1c\10T` \89\9d¤k(ý¯Zz`\8eJ \fØį¨\ fëe.uÆ\fc|E´\83B\1ce\ f\9a¢,¥p¤¢~Â\15þ\8eoó[ Êu_êÎ\19½¢ÅÃ>WiÎÇ\150\ f±Ï\98¡PQP\15\81\9e¼\18\9edC^\88¦Ì! Ð (\8dÓHD\b\ e¢Â ÜEÙ\80\96½\16^B\ 1ÓÍh
+y\98\8bmmRÖ!1TýÀõ\96¸A:"wð^¥
+\89q\11½X£\ f<\1fy\fEl\9d³÷Øîß\8e¼¼\8eé]Þu\82Ù\bGè#7\ 43Ý!E\98kªD\1aC\ 4\1c\1d4\85Û\0ß\16\82͸6ÿ¥\8dónÛ\88Êô:\1c{:\18\88\14Gâky\9c\1d\ 1}6@t\8bËN3\8eP\bk\80Ô\9aÍ\ 6Jæ\96ìÞÄ\ 2î ~&t\94\e\ 4ñä\10\a)\e\f¾HdäÜ\8cCl+\ 5ý~ZgΣY\1aÎ\1eo¿~¿ýúô\14Pû4þÄRÃv\9eÞ\r"ï½\ 4ÁÅ\1a\19m\1e\87i44Ì\96qÀ\1c\90Õ\87ûÏ\8fÁr\eYÔ>téYºó¡5\ eç\r[!Ò\90j\7fa ¿îó!5\8fõã¾Æåe\10÷IÎo¸Ì¤O\9d*ãNW±Ú\93Ê\0Bliü7gØÔ/\8a?À¹Å\10Ë\9a\92öäâãí\rJ±U¬,ý\14JáýÞº\8c2\ 1eÆæùôîD±_°åFÛ\97\vFÃ\17\0\1fZ\107%4!Ò¹\95Ó¶û÷Q±NW¦Þ\82ôr?ê3\13f±±1ÅbÙÚ\15hüúâÓNé\8eaG¬ú\1c}j¥\ 2zÙu¿\95\86^ùÎn\ 1\98\835r\0Ðñ0;Ð$\ 6Ö\1a\19ÓZü\94ôùuv\8f[j\1e¥&
+\fS\119Æ\95/ô:p\8f§Ul\1fê\10rÂ!\9cu^ê-=\8dÃúÑ(\84\8a»e·ø\a\17\99ò¥\16бv\16°\0ðr®\ 5\16ã\80«f\ f àâ8°\9aõ\ 4ð¨åð\1cX¶nG\14¶iÖÊM(@¯v\ 1\95\f+Ô\ 6ø\10\1eë\11ßgÂî\11¸
+\8fÇË\16Û<ɵ\1d)Øó»I \10cÇ\89k*¶8¾>\84] çV<\v¥Å\86w>\9e\ 31ÜØ\9bniqÖ\862õ!Æ\89't\8d+\f/.M5C°\rÌÃdçË&\e\15Ø\r\8b2ÞqøÂ\18o §\19\f¸Ø6\8eSm&K¤rS[Låam»=\8dK\fÂ6\eoÔ³Ð1®$¦_3r®º«Á\9c/ã¸qÞü¯\8b4½uy^¬\16Éjy\85\9b:lÎç\9cÛízôçè_+Ó\10éendstream
+endobj
+1180 0 obj<</Type/Page/Parent 1099 0 R/Contents 1181 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1181 0 obj<</Filter/FlateDecode/Length 1807 >>stream
+x\ 1\95XßSÛ8\10~ç¯ØÉ\vîL\b\ 4Ò@ïå\ 6(ÜpÓR®äÚ{àE±e¢b[>I&¤\7fý}+Ùñ\8fÐÞÝ\942\ e\92W»ß~ûí*\7fïMé\bÿ¦tzL's\8aó½£É\11ÍOæ\939ÍÎNñ|\8cÿFRê\17fG'øøÊÂôí»ÉÙpáb±wx=£é\94\16)\ e\99\9f\9dÒ"!\1cptD\8b8Z¬$\f+K¢ Û\ 5Å+½.(Öy.\8a\84ÜJ8Z«,£µ6Oxr+º\17ùR`wB"Ëô\9a\ 4UV\9a°v\9eäªPÖ\19á´¡Ò¨g\95ÉGùfñmï\88\ e¦'\93c\9c\1dź(dì$ìk¼\1e\f"ÂÉ\8c`é\19Æ\84%£µãõx%\8aG O$Á3iìJ\95¤SJaÙ\92.h©á\94 LÇ"C\ 4×÷aic\9dÌI\9bÁÙFæÚIÊuU°\ 3~?\\r>$pXNh±\ 2\1c\8cȳP\99Xf\92ý)\85q|.\1ca\93\87×ó\1aÒ\88îe\9c©eøk\ 3tÄ`Z\19WF¹\raÙ\b³¡5>9 \9f7\ 3·~G\12ò\r\9dg\99²\88)\9cS{µ\90"\1fw\9cI\8dÎ=\1e¹PE½'u%Yåä$xñ\8e¦È2§ûàd\ 6X\ 1ú|2\9bÐ\17%תxô\b\ 1\eJ\94A"4<+¥É\95µJ\17¶\1f\bL\1c\9f\82\870\ 1ªà\e\12ZVÎÁM`´\85ãí\16\8eÑ]kkÔ7\16ÕoNè2Sñ\13»\ 23°iiiðÉRU"\97\89\12\99~Df_°\ 6\ 6Z\90\12;8Ñõy\1d6u<÷¬Ä\ eúóöæ¯@\97\ 6J¦K/bNsM)\8e#Q¶ÌÄ\ 6\94\0¦l"Õ&§_\82ûMl\8c\ 5pd,F÷W\9f¿\}~xðä\7f\88>hÄR\88\>¼\19ÄÜy髯µ`ó¸Á+\18\1aâ\14 ¥[é.n>Ý{ËM(\81«¡RÆ4°ÆîüÀ\96÷\94]l\fy\94Bñ®4¿ÔA\15µæ\93ë©\ 2ö¡Ü\a'õbþÁ\91\89´±Q¥CY\11T\81ó\12Y8\95nø\99q®ñ+\07ôd\ 3Ü+\9c\15\920ðé·«K@\91*\99%½\10Ja-ô)¡D8±\14\169ðuÐAþÆ\17.\171âwP\98A0\85#\11gd«²Ôƽ\12\8d\95^\8dÂ
+¤Ú«i\94\8aÌÖrÐ\16>¢ª)ä9Ç¢\154t \10¼¼BN8t(D\9b®\ eÇ\1a\9d\1c]A\v7º\90\ 3FE[\9ew¹ïeº{\ 4Ì\8f®+h÷¥.\9cÑÙh\bÊ\ 2>t-\ 4d{Å\90¨4\854\15ÎgÆ\ 4iõÇ7Ò¡¤\1d\93Õt³\8f\93B¾á\ 4\87·\16È&CÐ9c\90Q\81ÖÓV^ª\8cu\82¡Î\82\82M[\ 5\9bNè\9aMÞµ\12ÓO\16ç\9c\e\9c\17+ëÀ[\ 1bl\99~øhtU\1e\82-à\10\bY²¸ûF'Ñô\8c\91¶ÔEÂÜ\1c\19)\92Ñ\98F¬Ù\92\1fä\vä\1c\8f?\89'XDç@\¹(KÈÉrSK´*|·s+#%ÉLæ@\95)p~ù!4OÆlßì\8fi\7f\8d_ìÕþË>-\95³\8d-o\ 2Û\ 6(ö\1d\87É\ eàAæ|ü!èÎZ×ÍÆ4=fzé\e)y¨\ 2º¯\90³áf\1fþh\8c\ 2æ± DÎ!¡£ùÆÙ;¸Þ\ 2\91\r¹ñ¾u|õÞc°õ¢#N=S=
+¡²ü\1cÓw;êÔY[§
+s\88?âÕ7Â<±=½\1d¡"ò/2UÐ;¡l¾4^\8dy\90§\9eÛ\1d\ 4\18¥-CÛ \87åzÎ<(6akk\vS\ 6\18\92èbß1O \9d<5a\80Ctà\ 2\v¾\85°Å\18\92êÖÞd3ªI>Lá\10¼Q\98ÁvT(\fW\87×\1d{)ôf\105Pöê38\85%¢@^*¯ú\fA\e\92Ýêeidª^Z2±ÌïFq\8fL`d ó8\96ÖîøYwt\80Qk\8dçä\10Þ\8b
+£.O\e+.\t?\15z\86\97°\15\88Uè\9e\8b~ú\85gÌaáÇC\15W\99¨ íÛ\9ag\ fO\1d¡ô\90\14¨\vÊ~\80Яt\83\91Ï$è\13,\11Ì\f\1aõO\eñ
+\8b»\ 4h,\r¹\864+\1cïa\f#\81F»È´H\9aî²\93Ç\85x\1ajǧf¦ÞA\8duI8(\1a\86=I\ fÑz¥À¡\1a\88\\8aÂwóÂÓñá\8dwÊHî\9e(Aæ_\b5H[?\98Aø\80v%\9e\9byàv±ãö§\1dß \8aLûzT_Ã\ 2î-\16Ð`p\8eue,:\90F5<áfãp5ÐOH9>\bú.\8d\1eSã>\7f\1axÓaá\84>jV\17ép\ fðw\r¦i\ 2®ñ\9c\8ct¬\94o\1dè\98Mó}\84\1eð
+RøóFv<¡÷Ûáûî_»Y³\17Ý\96'æpWÛ^vÈ\86Û\ e`Dàk\r\9e×m;\88\ 3Pé\85µ@\18¾Ùò2cÖYÅ0<@\84\83f2ø½a²i\9aÿ\ 6ðZ\99¥cÐ\10(à§)趫7ó47÷íyh\90\ 5ìZ\84S¯\87\ 1p'÷\9f¿\ e\92ßi\ 3(hë6YscûID\14£\9bó}¯Ó\8dI¾\88\98ç\1a\8eÏòXÌ\ 3\8b¯s\1eEÿÃè2ÞÎ;¸\v/Q}¡k÷\ 6¨:ºÆþPt8\13¸%bæh i¡í&¥.;D\91mÉ[\9bö\9d£»7\88\r\8b\ 4ê\11m
+H¿\92Ò\1d¤U\81Û F\9dd\0xÔc\87¿\8fq\17ò²ØÀÊ_\fxw|ìÍ\9dr+LYµÝº\1cÎêÑy:Ç×\1ag'õ×\11ÑýùÇ\8bsº3ú\ez*½×qÅã\91p¨3vô Ù~pz\8co-þïmvv:\9b\9cÎÏp\1dÆ«'3¶xµØûcï\1ff\85~dendstream
+endobj
+1182 0 obj<</Type/Page/Parent 1099 0 R/Contents 1183 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1183 0 obj<</Filter/FlateDecode/Length 1511 >>stream
+x\ 1\95WÁrã6\f½ç+0>yg\12'¶\13;í-Û4Ó\9dí&mãN{È\85\96(\8b\e\89Ô\92R\14ÿ}\1f(ÚR¨äÐÙ\89Gk\91À\ 3ðð\0ÿ8\99Ó\ 5þÍi½ å\8a\92òäbvA«Õ\12\9f\97×k|.ðg%eþÅb9\9f]Æ/>oNÎï.i>§M\ 6[«ë5mR\82\9d\8b\vÚ$ÓGQn\ 5¹½®sé\94\93\8eøA\92Ò¹´ª\96)UÒ\96Ê9e´£ÌXºßÐv\ f§ucµÒ;\12\8e\84æoo~ù\9d/Óß÷_þ\1dÜ¢Ò¤òÓæûÉ\ 5\9dÍ\97³\ 5ÜOë\Ô$HË\962UHJ¬\14ì\v\86;@FÃ\94rär\81ðZÓ\14)\&R½È\19Û:¿û\89æ\88\84C:[^"lX]Í®fôͤ*Û30o\19\80S\85\9bµ±û\ 1(×\19éór¶XÏVl$º/tú¾\ 1\ 2:\84îTY!\0<%¹Ð;öË9H\95«
+±\8fÒ§8*~)
+³£y=\8dòÂÞ\92B%ÏÁN\87ò*ToJ\ f_ßâ\9eÒ¶©k£gô\9biå\8b´§ì\0\19ã¬\15ªTµ¨}áBÂ\e'-².S\94ÙÐ\16çZ>i²SÔ0%Q8\13!Rº\96V$\9d\95VÕ¹\8fÀÕ8.l\1aªÕS\84Já\9e\99\10)\9eª\8aÃ0\19Ý><\92¨k«\80Ö3\fÕg\14\f\82}\ 2Iä¶\16ÏR\83\84| IL£k_v\14{±ê\8aý%óH*aE)\81\91ºÌ,\ e¹Ò XR\90kªÊØ:N\eSKÖì¿{\83&ó\r2Í\80Ç\83é\9bfÊ\8e4bÚs\10²¬ü=¾îdÒ IÞ\10\8bZU\14\94 UD!ùä ÝùëK:¹I\12é\1cÝJd:\89\81\96x'v\1dé\aÑo@£LY\a(¹ç\8a!mj´-÷/²\vÄcGéØ|G\9f\ e3\f\84¶Fk\16
+¶Q:f\8cC!B¥¡7HÿÓTÕÝ\9d\1d\1a\12\99\89B\95Ö¢ï\ 2tX\19AaøV\96\8c¸²&\91i\ 3\16&"$\ eÄ`\ 2¥*å H¾"͵\8cSóôiF\eÖ\88R
+H\93\ f{o\1a\98Ñdt±\8f0\95B«ª) 3\9c\1cBá¬\ 4G8¾ó\9d5MuÞ\1a\v\95é¹ì|\12\0fÔ¶Á1Ú¢\ 1æ=ôÉ\82ô?\1aè%µ²\88+\ fq\80K\88*÷\1a;gxo\1cyð^7\8f6sáÞ¡¼\18\#4\14kÏÓT¢/Ñ\ 1\1cË)ù`N \ 5ð\ 1=}bRp²_\10JfMé!\1cê;\f7Ä )ï\14*Ê ë\15ßÕÔò\a\9eFu}ø\1aW)\b\14c¨,¸Ìé\fÜaù©ª\ 2¬gù\9ch3\88ÍM\90$\ fÔgÅ©TÎ\b-\8f\ 2G¨< \17\85I\82§¡\ 5\12;\11"\1aÙFå1\ e|§\ 2\82\14\96\11ðýûÍ8¦QHY!v\10LG©t DM¦\11&±E²\ f$)
+Ó:\ 6îÕ.}Ë°H\9eý÷ïL+£\13éïå\ 2Mv¨ P\96]\19Eä5Ð!1ee4"\8césãºÑ\1c$Ñu4ä¨'vrJ\93vâÛnò:¡ªñ:Ãÿ\a\83\1dz\9c\91Áy¿\ 3\1cµo ì®Irä%Â5¹\95\ 5\14\9a\85\1c\ 4\80\13t\81ÃW O|\98óu\ eÕ\0'ÔN\e\8b7\9ed\a\82\ 42\84mEZ\8cº8¼\7fØ\12T¹f=\1cÒ\1aw\ 5\18}X\ 28`\807P\18ÖpD9<\fiëx\17\1d\ 1h¿"I×5Ô6Ö\97Tf¢)0t\ 2¥ýhà ÀzãÀ4\96i\ 4\vi>"ñ\84ö[\ e\9a\83\85®å×L\94V@\99ø¡l Â\8dNrÉ4y§áþ\92X3\92xz\ e\ 3Bôò\15bÎYñ`FtöÖÑÜ\a\9d;ö?Æ2\16>heØHÆ1j÷¸(]Ë"~\87ÅÁ\ 4\12cæ\17o\92îUI\8cµøHå\8e&>#bOAîrµË\vü\1d§Ý`Áìoò$ñ\ 1|\90?ÖÅQJº±èEÔ¯ Lo\11qx\ 1÷méÙTÉ\ 4+Ý(=\e,1Q/<´\1aó4WÕÈe_3\bz¿>vÝt~7X\18\1eFwAÉc2dêkðÁ\82¼\ 2éú\8dÎó\92óBÑB×íã~\99\v\ 1,xîc=>î[\1foÐ÷<Ö=ÕýÊÓõ,/\ eWì
+|b\ 1ÈLÃ\9bhK½A&\bÚ²¶¦ÀAôÄ`÷d1=LÐ\9f»D\1f6½ÁVtÔ$ÞB\ fÀþ\b&CNû\13ý\8f\92ÃFylÌÁ©\8fì¼w6X<¿»\ eËä|\85\9fh×Kü`»\9a]sò\1eo¾}¾¡?¬ù\ eñ£[\934%Tůè\8cöìpál½À\8f³ÿÿ\83ær}9[¯®ñ\9b\b\97\97Wló×ÍÉ\9f'ÿ\ 1ë¤\88Cendstream
+endobj
+1184 0 obj<</Type/Page/Parent 1099 0 R/Contents 1185 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 552 0 R>>endobj
+1185 0 obj<</Filter/FlateDecode/Length 1494 >>stream
+x\ 1½XMoÜ6\10½ûW\frñ\ 6päý\946\ 5zpФ\b\8a4m³Ç\¸\12åe"\89\8aÈõzûë;3¤$.½v\9c¢(\ 2(æ÷Ìã{3Ãýv1\83)þ\9bA6\87E
+y}1M¦ØC\9f\19}þúõb9Ç¿ ÍæÉ\1ajXf\vüßµ*øDó!]½NR\1c\9b§ÉÒ7hh¾^&3X§Ø[Ãb¾H2ߢѰ\8d£«ôtt5O\16°\9ag¼ñb½\1aZ¼6h£IË%å¹4\1a¶ÉàìdÔYµ\®\9dU³\fmt-Þ9h£Ué\ 2Ï\rF\836\8e¾NOF \8aY6Kæè-¢\95ú\ 6mûfsqýn ³\19lJÄ;]g°)\18æ)lòÉÇ&\97 `od\ay¥ò¯æåæ\v®Xù\15\13xññ·\17®¯ße\ 2V\83hÛê\bv'¡\95]\8cQº1ðIÔ[\ 1µh\r\ fݪ;Ù\9cLP\råó®o;½o¯\ fº«
+:`
+¯f\vtaSLºëÃõ=ØNµ\95\ 4#í\15\88¦ \1d\e8¨ª\82|'ó¯|B¾\13Í,NÎ(u\87G\94
+×\8a[¡\1acyêVYC\9b\81j¸Íg\9er®»\85ëwóÞu#ó}§ì12®\16æëéZ&-¯\1d!jE'jie\97ÀMs\ 4>Üî\84\85\83ì$:àÌæ\1e\81\1d\8d¶l\e¢s9»t&*\ 3Ã.@\93*YZ\10\95ndï\ 39\19\99\17\Gâ\87X\1d\bë[cdc\95¨ªã\15ü-;íÌ
+ð8ã=Þ¦ów¤Ñ\84ûð\83~I¼&),^\810\88:á«ËÞ]é\88¥<©\90\97Là ¹K¶\85[¢Uú\80ÛX\1d9ä°r\14 ×\19J\82Ãî´¡ïp
+bÓïá\11\8e\11x_\ eHËû\16ù®,³ø\ 4jl\90\ex\15´·Ák\84;Qí\91M\8eÕlßSÄÉ\19\91\ 18¦Çøy\8c(t`Ûé;UÄW\9aëº\15VmU\85lD\ 5Ø\9d\17Ú<¡\bwØ\11¥ì\8e\9c\18´è\ 1\80Rä~\19Z\8fêët±Ïe\91À\ 6uHpõê\7f\80{\vU\1eiÒ\80q(Ùà,\ 3ºñ\8a»rб-½\ 2ȱi\86Á0¢ãïòÞzGXÐ\ eÝ^\1a£+\ 6þ+Eã>\18îz]\ 3zè \1e.ó¡\92\83¨4\88ñû\92Îu×IÓj\8aZ^e\9eR\8f«\9b\8dsó9èÅp\9d¨÷\0\vÄû\88£¡Þ\ 6o\9e¡c\81\11\18YÖDÊt\fQÍí\bi@\84A\98;\8a\fÕA\1c\a]aÔ¸ÔÍeìáÿ£N\87M¯ÑgP`\12\84á\a*ñ\8a\85gj4L\97?*Ñ\b}$Ö¿\92¨\v \8d\ 6d(¦ØÜræfz>\94ít\1a_Ò\ 6c"Y\12°m\14Ô\99TA\99;\9aÿ#ìDê`p£jCqràXäb\ 4:ðm\8f>¸d(8£\ 4rÕ]\81Ù×\83Ö§Àw\\e\14ª\93¹ÕÝÑ\87\1f.*0à aõ\18ô5ö`Ø¥º\ 6\19\H\93wjK\89n«ïd\18\93ä}.[\8b¹\8e¤\80´\8f.jTZ\84\ 3\8cv< !\950R\14\94X£\1d\9eZæ2f´ÀA?\9c\eY:nçeq>`<nÏ3n6¾\913|\1aÌ\eãʹ"dÄu{Äë)žB.\fA\86âÏùä\1dPw8*Bâéó|5\1aßF\ 4n`ý\93p>i}d×\83B$ð%>¾Ooç/\11ÃÇ\8fÆ®È\961C\7f/\92ù\85½\bßS\ 1\8e\17\85)Á\vP6l¼«\0\82}OB\94+\96±Ò(jÕ(\8c]\ 2%\f¹h\10h¬:©\ 4qï\ f³Ã\98A\19KU&\8e
+ÆÒ\ 3\82+\1fR+=|ðÔ!\94\12i\82ó9ÍRÁÅ52Vï\81A1\911{\1dõ\1e\9dj¸v$\9bö-\95Äd\r:\8c«ùXã\ f-÷ô\92ÑT\92U\14ÂÆlzÎ\bt\ f»UÇï\1a\fHMüfê\99¬$\8fB¡¥i.-Å)zâá\e\ 4õbU¾¯Dçës¬L¸Òàd|Eû;(éüRSqH\10\r2£ú\91&ñm\ e%\13?Ö¹¦Å7¨\7fe\ e\ f9So\13t±ü<Y}~yºîa©5qo¶\1ej\87\9bie®J\95\93\98(\16ÃO´ÍÈz\fø=Æè\85i\b~æ\9a3b\9e\ 3c\9c\88º¤\89Ѭ\1eÊc àïlynI°ù(ÁÀÞ\9b ©\\11¶\8e½®¨§;\b\90÷^¯=ij4K¦ë\ 5þ\1aò\1a\7f\13Á§Ý§\9b\ fonà\8fN\7fA\98à\17\9dïk|êqö"ç^õ\v^es|÷\17\934Y%ð\81+|ºc~,£\98F7F\11ðãm\99á/\1dé\1a\7fAÀÅ\8b\94ö|»¹øóâ\1f\e-l¡endstream
+endobj
+1186 0 obj<</Type/Page/Parent 1099 0 R/Contents 1187 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1187 0 obj<</Filter/FlateDecode/Length 827 >>stream
+x\ 1\9d\95O\8fÓ0\10Åïý\14£\9eºÒ6ýKÓ=î²TB\b\16´EpØ\8bë¸\8dÙÄ.¶³U¿=Ïv\12Ò\0\87EU¥¦¶gÞüæ\8dós0£)>3Jç´X\11/\aÓdJoÒi²¢å:Åï9¾FÐ>,,æ7ɺ¿p·\1dL6s\9aÍh»G¬Õ:¥mF\883\9dÒ\96\8f¸\11Ì *\99}¾Úþ\18Li<_%Kl\19íµá\82\9au\9d\89Þz&\8dàN\9bó¿\ fw¶Ôç'\9be+¥Ít\12(¡²"#©¬\13,#½'\97\v:2ÃJá\84±\94IË+ë÷äØ\9dx-\93Í\rÍP\8d/k¼XFÕ«$Mè½Â\19Æ\9dÔ\8aNÒå!\98uLeÌdôÈÊ\1d£½,\ 41ç\8cÜU®m\1a£\94ìx\94ê\10³t\15§ \ f61\ 4vY²º\14\8dÞû\87Çß!i'\9d¥§\91xNÌÒ\10¤Q\99*Îç+Têt\90õõÓûït\14¦\94ÖB¯õ±¢º\84¶¹´5õÙ"\99ûÌ¥`Ø\ 38@Æ\99¢\1d\8a ®Õ¾\90ÜáÉ\9d\84P\11^\e3*±ÂÑ\8bd\91\85à\95\91î\f¬¬Ð\a\ 2\99¿\9déåö\11vç°ñ\92\1e\1c\10x\85¶t,ô \ 4\9d\98?!mPks}¢êHx\94M\99\94\ 3\8eÒ\14@\ 4F\8csa-Á\80!\97>)aH:´²(¨ qI\14<{b½\7fÚ\96_Ê\ 5?¶ÛÁJ±ú\84¾*är\95Â$\14µÚ\1a\f\84\86@°!Z'ðÀ\9cÇí\18¬\1a\97j\94½ô\12!!
+dµo\96ÏاóÍÇjÑøÆz.!\ 3àø´±r\9e3u\101[×(0\10+
+\0ÅÖÒ\8aâ\ 5{ºü*\v\vûÅ\9e4{ÙükâðÎs0Údó¦\1eÏ\11\r\1f>\fýÉß#;"¤<x\130þì\7f{\8d-ãv\96 \94íj¶×\8dµÔ+²`j=\85\9eìØ\91k\9fTѧmí\ 6¨ñ*B\83»p\1a\89\1eÈØ\ f\1d&\11\96\89t-\9d"ûÎ\r\80IvÁ_ð+úö'¶\98ÿé*\8e%5\83\88\1e²=®\eÂt8\ f¼«ÂÏU Û^&¯æÛÁZ{ò¬«\1e\1aÌDUdp\ 3\86ÍR.\ 3º\8b^¾e\8a\8bâ\8f~\1a\86:ý\94±0>\17GþÞ~¡l\85«'p\84\10C\8d;\19þ\85×I¿\bcd\96 \15ü>Ù¬kGÍVxa\17´Hoâ%ûxûñî\96>\eý\ 3ï\11º×¼*\ 5\ 6ËßÚ¾¾qs`\9cÎñªÊFÿyµ7\97\93\8f¹L\97IºZã\85\81x\8bÔÿõn;ø2ø\ 5L\8eS\endstream
+endobj
+1188 0 obj<</Type/Page/Parent 1099 0 R/Contents 1189 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 560 0 R>>endobj
+1189 0 obj<</Filter/FlateDecode/Length 1795 >>stream
+x\ 1\95WÉrÛ8\10½ë+ú\90\83\e\91¢$kÉÍqâ\99ÌØ\8e\13)\95Ã8\a\88\84DdH\82!HÉÎ×Ïk\10Ðf'5)/%\91D/¯_¿n~ïDÔÇOD\93\ 1\rÇ\14ç\9d~ÐÇ\15þ\17ñ¿O\7ft&Q0¡\8bþ,\18SN\83þ4\18ºo\19Í;Ñh\8cë£é0\18ðÝñ,\88Ü7¾\v;4¸\98\ 6S¾\87gfîÛîÞh\86'FÓ ?\87¿JÒª3\8aÆø8\1cÁRN£ñ\0§í\17>ôfÑ ¯a¥O\8b\15â\1eO¦´Hl¸¸\12w¯RQÖ²¢I@÷\95*jU¬iÞ\94¥®jR\ 5ÍE¾\14p4\b\1eÏ\16߬¥hÒZêÁÅ\0¶º\93
+è}QW:iâZé¢}rDQä\9e\1cL\901\9e|#ת(ØÅVÕ)Õ©´¦9\8bL
+#Ï\9d?Ó\ 6`ì\13\85¨ÕFÒ\17U$zkènA¥\ f4\97q*
+erC*/3\99Ë¢\96 »ïS/b\80át£\ 4ÝÎ{\9fî¯è¡«\ 2\19X«óû\ f\1fnæs*D.\13*U)\1fÎ\18\ 2¹Qº1´\91\95A&\86ôÊŤ\8bì\89\`8q#\8a[QìB9ñ\19\8b,3\81»8\18\a#\ ed\81tE\92(\86Hd´j
+
\8b\96ÈTý
\ 4Cz£
\12\18^>µYË-ù
\18\9dWÔ#Î
\9aD
\9a×l
\18Üëy˾`+]
\11@*2-
\12FÙ
\ 2\85â&
\15\10¬h¥2 Lõ
\ eËÙE8
\9b\86w
\8bpÐ
\aqãL
\ 1?CM©
\vJd.
\8aĦ
\10^Ç®
\94½I0eú#
\99\87ÁxB
\1cGxí
\vmoî`ÿ\ú(
\0áq
\80\175áê
\1f\14õ2IZ
\ 6"Ð/ê
\87¨
\12\94ëòþËÃ
\19!+~ø}nÍp
\ 6:##kvß;¨ôC·
\92+
\1c¯µEþ¸-«5u)ëòu
\18\82,L!
\13\18ÝT±
\ 4lk
\19\14Á}7ÛO|
\fÌh3=ÆÁ
\13ì§P¼T
\1eNÄ1Ú
\91Ò
\86ÂÕ²¤
\ 1Åâ
\94\84¡y-ªú
\8eï9RY
\9dÓ»¢ÉÿÒKó
\80xÎIÖq
\10\ 4\80h.%£c3Þ
\93þvþö
\ eT
\88\en 4
\10**,^ûô¬X
\1d¢
\92\9b¤
\br
\15WÚèU
\1dÄ:
\ f\8fqÜ
\ 1BL´\C{T
\81\8fyë
\0>\M
\87\83\9f5Æåýû
\87³
\97ÀôXý
\14Ì!«)
\88wÈuhÁe
\1cKcèJ³þdt£
\f\18\fâ\Ý0q\
\83\82\13zùMƵyÉõÿã3³OoÐ ¾
\e\19\ 3[;XÿÞÈF
\12:F
\95MÖ¢Q§
\95nÖÈ5F²
\90@/l-¹û
\13Q
\8b%$ÏX,M J?S®ozy
\bðK±ÿ
\82\83½Á4
\88fÔóÀ-R
\89\82¥ ÖRÊ
\82\8cι|P#D
\13ëbÕ°à
\91Xꦦm*j
\82\86¡ ÊP.
\ 5\94\10r
\80ë
\12%
\ 6\9a\15\15\1a\ 3\ 2¿¸
\ 1ùþÞ¨ÊÊ/§cY³ç¢
\a©U!+@Kvmjx
\0 ìÕ
\89lª
\8d\1d;ºJl
\1fïÀÞ5ɪÒùN6
\9cb
\ 5tIËf}âV>
\82\v0
\7f4ÅúHA¡Ár
\91\1cªÏ±
\0ºt
\90<P`J·SÐÈ
\8aU´Ô
\ 6eã´7
\90îÓiã¥Öi
\96Ë=
\ 5\ 3\89ß
\95z<
\8d)²Ðê"ÆxX
\vU
\9cïò;Uæ
\18\fb.qL
\99\86^
\9c¤
\f¹´trز¨
\1c\83\8eÃ("Ï^
\8f¸M
+\ 3°U\99}\9cìÂ`6\82,©ÀL¬H>¦j©\18ÑåÓ\89_/ã³G?DP\12FÈ`¤1Sv\93=Ñ`<SÇ¥\81d|\84¨\93(\9eh+0\05\ 2Ò¶±]g´³ËOTÏúE*\9fH\80ÕM2õ\ 3¡Aí@DLj7F=C\À^ep\10@e\99Þ2F·súû\rìÔ*Î\10i\8e\b@P4¬í\91Tf%©\15=éÆúJ$Ê\8eS\16F\9fùá\0µã9¼\1e»¡Ù¥?õÖϤ}W\1cÌ;ÓÚºÓô\19åàUJVÂî\ 6LÞC\176\8dgsm?\821\f}\8anÔ9µ:Ñuw5üw\19º´Mø1\9aÎÂ(ì_\ 4\97óûcG^øy\91<\ÿìZ3ÁrÈú»R릲ÚÇ\87Ãë\v\97ÿ\0Ûc?B`X\1\18 áÿX¶½úJ\e\13PûEV¯¾¶Çü6a\a;ÖÚñ\ 5\1fùÅbVIL*\8c9^\9e a¨\fx\972+ÚÝnïÀ±\9b/\83f\10"ñ/\84Ð*
+ènSÞ×ÇuÄ+,\1aÕF¡7ãJ\8a\96ý»\92ìùÎÊÈ2æNYó6\88$8|Úßn¥ÄN£\83ýEd ¿\81DcÝÝ\99Ú\aÐ*\97[\14\rDW$=»\95\8av\ 6òRU s\841[\b(sçTG9ÇÃ\8dÉÇãTËï\8eÏVW0XBûÎòø¡±[¹Ý~Áí\84\1að\Dô¢\ 2ÌüfÑV¡-îÀ÷Ä\89c\16³\17ß\1c|§C\11Ð\92V¾ì¸(a¸-2\86(d\15÷M)cµj·go\8f\9b\98\95Ì«²]\80\81\8f\8e\95¥{\r\81Ì»\80¬Â\1c"t ±â\89÷[ù\1c3¹ËbÖ.÷ÂÍR\84\95È\15\80\ 4[9¾\138,CÝ\16»g$\00Ð7Î\95Ï´Ò¶\vØ÷ý"\95\10Õ]¸æ\1c<à×\ 6võë"ðëÁ³È}\19Ïö-%\9bId\89¦³\0òR`RÝd «:\9f>೯\18\88XàuÆM%[h4þ5xòò\ e\89zò{Ý\1aZÌ¢ëìûÝ\9e\93·\8e\9eé`\97nÕz/AûUw¯_Sÿ&ãUix\11Dý!KÌï½ \8f&£`2\9e¶/CÃ)\aônÑùØù\ fð÷\ 2Jendstream
+endobj
+1190 0 obj<</Type/Page/Parent 1099 0 R/Contents 1191 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 572 0 R>>endobj
+1191 0 obj<</Filter/FlateDecode/Length 1873 >>stream
+x\ 1\8dXYoÛF\10~÷¯\18\14\ 1¬\0\16-Rw\8d\0ÍÑ\14yHzØEZÄyX\91+\896ÉUvI+\ 2úãûÍ,/)JQ9V´ÚÝ9¾ùæ ¿\\844ÂOHó\88Æ3\8aó\8bQ0Â7ü\16òÛ\1f¿\DQ\10Ñl1 f\94Ót\1cLêEF·|\9afóq0¦Éb\8eÏ\11~¦õE¸\f\964ÆÕ1_\8aÚ\ 5_ê-sZL\8föÂ0\82\82ñh\19\84¸\18Î\16ÐêW|³¿Æîr\ 4ñ½ÝÞ:§(\1c\a\8bÞî\82EE\8b(\98³àp\8aM¿\12Á½5vÇ#¨ïíöÖ¼»\ 4 ýÝn\8dÝé¬ÕÃ\92'Ñ\12F\86ó\búr\9aÀ÷E½\92ÝÞ\1a»³ ¬ógyW\90\ f§KA~ÂrýBnvK\0<å{r\90÷zË\9cæs\0Úíõ\960v\14ÁÑnóÕÝiüí\86®ßâ~Hwkb{F!Â?\r¦³\ 5Ý%B\94\11ÝÅ\ 3§ã25Åó»\87\9e\ 4¡\11$\fȬ©Ü¦\8e\12\13W¹.Ê\80\ f^¿]R8aÁÃZòp\fxÆ\11$\ fæ\ 1L\vèµÕªL\8b\r}ÚÙ´(\9f}ö\17\e\8bF¸:çãï
+26Ñ\96JC®Úí\8c-¡QSµË\8cJX\0L\10\118\93Øô ÿÓL»+:\98\8aòÊ\95X[¼Ç¦X§\9b
+,Vr\82ÜVaQ¨\'\15b?\94\83cbí\1dTñ\89ÖQ\7f \1eãr\ 2\99 .§\ 5ݪ|¥.\1d>\96Ú\16*sä\8cØ)\97q\1cv\1d(ÍÙ~U\94t?ðn\13¶Ø\1d§íS\1ak\81¹Ó^9H_\1dècZ$fïèÃ\9dwU\8ek\8b«\ 6_\98§4\81\84\1a\9cµ±§xànÁhÝ?oÜ\8bfà\ eÐý\e\10¹©²\84r\93¤ëCk\8c¶ðÆå«\80aóxA\99J\129±ÉÌJe´S\16ØÀcGªÀ\8e¡\98êåÌÚd\99Ùs\848\1e'\9ey\18ï\a\b^l*ëô\15\0k`Ö\9d`zRYÅÁtU¼%åèr§Êí%qä\94]¥¥UÀ\95\95×n¬4êÔ.S1\90Û§åöD¯Ú\ 1/@ÏFzÑÄ\80\81*\96\Zêûç?z"\8ehÉ\ 4f\1eN<V\9f¼ÓBTfÈ\b \ f\b ¯\eÊu¾b\18$\1f@\99R%9h±±¦ÚõLS«\ e\89£û5¶\9eÀ\1eM§Ë6\90l´¶eª]ãÏÑmkLÉL\ 2¿²4NË\f\90\0)N,¤\83\98ryæâÑ\ 1zA?Õf×G£\10\85 \1eö3ôÄq\ e\ 6.^WÎ^g&VÙµãD¸®%\9f³v\83p\96d\1eqípÖ\9d\95\ 5Õ5#õÝ# YB¦\80\9bß\13r\83h\161\13\11°´9Û\96\80\84©ÔJ¹b¾\16´GÜ´NÎ\0uÃpî-øAYêÊË\80èõVÇ\8f\9eç`7¹\83+uN\bR\9e:\87\82)¹\99«Ç\96øG\ 1s\\86Ä6\15\83ÿ(\b±*\90 »\83$\8b\\96²À%
+ÚÞù2{Ö4vP\97 \19s\88
+S\f\85\ eµàÚ·´lX\88ÚdH\7f\85\eg¥\ 1\97ÿC\9d\ e\f\84 áÍ\15+f©]gáü\11\12q!\15\85Çc\88´¡¨nC\83NêñѦßtr\aLw)\8fì5\17\1aOs¸eÑW\9e\10(ý¤3>\82\ 4ð\18\vª[\85=¯\a_kÇ%»ë0Õ.Aeh\80©{\80´\13ÐM¢-\
+èVK\91;6S\ 6+i\8bMá¼\1fLï\9fS\8eØîÔÆËmýo\9c\1aH\ 5Ê\r\18\91\16(F9ì\872ükèÚÔPOdwZÄ\19Z«¿T©ÕÜ\82YÜy»®ßN\e¤éL\1a~cY\1fîDït\91\0ó\1d\fÛ\ 2î¶dr$\1aKu\120W\19u\87ò\9be\84z¼©Ð&P\89P\91Ks\82\84\ 3ð4iP£,í\14j\YóWr\ 5\8a<Á\91b\95®G\8dÆ¥fÒ\88æͤñ²*·\86ÛØ\aãcÚùÃel\16\8cfS®o\8c\1f§\8dHõ\rY¡\9c®\99WÞÍ^ÿõ®qû9r\8býTÐ\aüÓ\18\14\92¶\8d¥\1f\fØé!ë¬\19ÅÝ\1e¼¼\1f4]Ma\80Ê\15\98èûHÝß}S\85\10ô}!ò\96³3ãºu\80B\94,´°\94\19Ûª{#bN@~m\8aÒ¢\eCe\9fì\99Ù0Ü~Né¹\88`:\93¡\15ÖØ{ª4Ùâ\80U\89Bɹ\83Þ\eЯm\v?Q\v]\8aöÆ>ú.¨\8b§Ô\9aB(ºßj È\ 3Ú\ 3\ fh{\1e\89`\b\83Èu\1f\1f¥\83H\a7\15\ e\18k\ f\9c\ 6jÅK\af\1dN´µI.Ã\80\8e+\94ëCíAKÏ.\85%éú\9e\ 5\84aè\12\11G¯]Á\8aCk\15\86\1eÑÕæG\93çý|Ê\15\17`>×\ f´Wð\82^¡_ý\89¨\1fËi*@ÇK\945_f\9aa\ 3L\90ù\9bûÕ^gY@ïÑS0\rÕðU\ 5fc\87\91\12ÓÎ\16¬\95<iÇ2°ªk±5÷V\1aõ\ 1ó3úã\86Ð\16\90#Õf\eÐpø \ 1²xðm.½k\8a$OKê{\ 3)\a®\99C\99üÍàɪ0\19õÇs\1ekó*+Ó\1dâ\1dg)\12GÀé\92DÙx\8b\8e\e\97ð\15\ 3 L\95a¾\9e0]µJPðâÒXLEB\94\ 6:¡Î³Ï\92D\98©\ 1L\8aÙ1\ 6\85´Cõ\929U+|å\87µ\13µµýH)o\15ÆÌ\9e\1d¨ü<à\80=ÜsÐQx¾Àè\8cVÓD¨\96×\8cØ\1fôWt÷n,n¬Æ¨mÑDV\9a{\17\83Õ\8cYõ¸Â@\8b\95}ý\922ûÔm{H×uðÌÀZ\ 31äWãeo\fáÉõ\9fáÇqô×bÆ\9fë×\rýÐ+\ 6_\17³\1føîõ[<ÞÊÃb8Ã\1f\ 4\16c<-.\82ñR\1e#n_¾\7fõ\92~³æ\ 1\ 1¡7õ³ ô1¾\8bZë¯\fç\11\1e*ÿû\19p2dz2\1eBåàxÉ÷\7f¾»øýâ_%\13\aèendstream
+endobj
+1192 0 obj<</Type/Page/Parent 1099 0 R/Contents 1193 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 575 0 R>>endobj
+1193 0 obj<</Filter/FlateDecode/Length 1936 >>stream
+x
\ 1¥Xï
\8fâF
\12ýÎ_Q
\87"-+
\r\ 6\f\ 3LîCÄÌ@
\824Ã
\10`
\93;Ý
\9c"c7Ð
\19ÛMÜö°DùãïUw
\e\fIVJnW;
\f¶»~¼zõª¼¿Ô:ÔÆß
\ e\r|êö)Ljm¯
\8d+ü£Ã?
\16ßÖº
\83;¯K·
\ 3ᯝ
\84zþ->í·
\98\96µêwÜíßz
\9dÊ]
\18¢^
\8fOö
\86\ 3üîã_&hS»_ÕZ
\936ÝÑj
\ 3ÿý!~
\89\8cÛ6Â
\ 6¹?¿5
\7f\9cÎzíò+
\7fþ
\93ê?Ê4R
\aMw·»aýãêçZ
\9b\9a\9d¶7
\84\8dêÑ®?z
\9a\7f7:
\9d®
\1c\9dh
\14ïwÁO£
\7fÍ¿háy:_
\9e\fT
\9dâ×n·¿xz>
\7f8
\1f¾:=W
\a\91Í
\1fÌùÖä
\96:
\1dÆÂ÷=¿Ý¡¦?ðz]
\9f\13\1aVãÙjú2û
\a-Æß
\7f\9a.Æ
\8f4
\1f/
\9e§Ë%..9ýÖ¤ç
\8e7
\19\89¾×îßòÑiJ*
\8bDF¹¢°È2
\91æñ
\91\82(¢
\80Rq (
\93ïöîQ
\15´
\f\92u@;¥ó
\eR© µ¡ü
\80\83*
\8dd.Uª))t
\8e\aâ
\88ò¬
\10_³k
\90¦é÷½
\1e»[í
\ 4\ 5a¨
\8a4§B
\v<eN§"Ìù×
\1c·Ï>
\9c±à
\1dg¨
\90\11»kÓkCzÂÃ
\95L©¼4öúÑ&
\19\96I
\ e¼!ó
\16._ýþ
\80.!07
\9b\9d®gÐû
\e19¢D$k@Ã
\18 löpÕ
\18Ù
\96Z
\13ßEÔØg2Íñ|
\10%2½|Ú
\9c3O
\97EjP,uîý
\95¤
\9aþÐëÜ
\9d¡~Ù .E¦Å
\8d\89\ f5b
\94\ 1y
\89¿)
\95Îe
\1cÓ^i-´æ[ü
\81J0
\ 362
\16æ
\vç§
\8bu$3XP
\99ÄÕµHE
\90ïL
\1eà
\93\83ò?&ɯþëÑB8xò]
\80*Á
\a[#½
\v2
\9cÆ
\ fÒÂ
\94üC&
\ 2T6
\8d\8f\1fh}¤Hl
\82"¶
\997+L
\1fZ¦¿¤¡ fâ
\8eY
\11â,gÄñeâ
\97\ 2ñETÆ
\0\aÙ»ÄãA
\8a\9cµV¡4
\ f_&rCZ&{P>V[DQåàUnl
\ eå+´L·%û^
\e*sÜúó:
\9f[¯ñúñ
\84þ&S Ì
\94B
\ 5èyí
\96ÿFa,Ñ
\84\1e½ìEJõ
\99@
\83eoW±Ì
\84ÜîÖ¨îN©¨
\8e\ e¦úó
\91ܳ4
\8f\ 3\94±n
\12_g
\90A¨)
\1ea
\94ÎÍ
\ 5\a\17XÆ*<aiS½¹r
\9a\ 6ïr
\8bgÊFÏ-£µçyux
\88!#
\1eý
\eÅÑ;U@
\ 1´`ðI¦Ð
\86 6
\8cfìÐ0®
\17@.fG
\12äá
\8e\99\86\0Ë.±D¹
\8a\0ä
\90)J¬Ræ@VÍ
\86\9flMî¨
\ 3\99a
\95hv;Vq
\ 6\1eäÒ£¥ÈsvþhôL
\e@Æ
\9fÑc|±LÄ
\1a){
\10FüA)Z_JB¦WØ~Ð'
\93\ e\17:p
\9b\19Ò¦
+\\ 5\1ce¦NaÁP¹åäru\955`I<º?õÆ\r\10u©sjm8\97º\14ê4H\ 4\1d\ 2íÚËfÔ/5\88f/4_Lg«ñ\82\1e\17Ó\1fð1úa4}\1aÝ?\8diò² ÕwS3.xF¸\9evÏ_bÓðè TÈ\b-¡\8dð\87» Ý\9a^D0, 4ûôôD:\aI¶æB\1c«\83\ 1
+Â\8f\vV6\99v1\8d 6®\bè\88_\83\8ck|\ 5ÃlÕò1L]\7fh\8fFy.\92½) ü½KL«*\83ö\99Ú\8b,g±bö\a'À\ f;\19îP\v&\1c\ 3g\15§\ 4°¬Ã\95wS?H\17´\89ágG"Ë`7\81`\ 6[;éZ\93\12iæ\8e\ey\8f¨\10ä\8eCÕ\14\ 6i\8aÁ\85\11\12I½\8f\83£\88<ZÁ\9e#BÙªz/B¹\91\80´d
+\82å\932Õ9\ 4UD<\83¡\z¯T,²«\80+é\9bØ/ý=*£¢\87\0s\18à9\93&-\17Fª\ eß\Ö¼\92ÓC,Ã7\88\93ª_\82\11¡Ï¡£¬¸,Ò¥ã=\80\83¦!\95\83Ìw\7fV¥\83ÙÙ,\16\87à\88¸®R²¥A%]\88\86e\15pð]À¾\85¢ºu|bÂ\ 1a¨éÁ)\80Ѭu\91çÐ\92
+\0vé)mZ?\80Ù\80Û\9aü\9díb)b^nNA\eÝç`öj_ì\8d(²"\9e\8aê\92\ 3¿§V7QaÃS^\bN\882ñ\8fÿ×z0ݸ\12i\14äÌ\80ËÔmëØ\89DÜN\81i7}Ôh=M\8aÁFt\10ùÓÆ\8dAöyدß\9c \90
+
\11]U
\12\ e\8d\bpM
\96X Ð
\18uÊ
\83u¹L
\95QTHl©eR®
\10q¤u
\81ujk¼Ù
\9dà´ç
\18®]®
\89\95¨
\82X+nÂ`
\8dµ$Q
\91Ü
\1c]>
\7fà\
\17áõª
\ 3ù
\18=<a
\95\ 1×£«
\16·;
\82U
\17Û
\11kõùw¡Ó
\ 6l
\fce
\16\8aP% ZÄ
\ 2nNjÐ
\ 6Ê
+µGËk³¢I\8e\15\84½X\eL¸fÙáZ(;d\\ eÚð\v}ç6γª3\ 3çn~\9ff\94\11FÞÍXfÌ\ 4\864Ù\95!RÐQ¾\9c\ 4oÜL,\9cfz\9a Ëñd¦$ÇÌæ\8d8\95\81\\11\0\8c·2lÃZp`Çü/Çû\ 5fØ)\98³\10òX³\v$$Ø\8a\13ÞAÍKQC'k\ f;îÆ^.gxãw¨#\a&ÙÅ\85\1dÿZF&eÁ8\9b\8d¤²\95Yò#[eÒ/i»|¾?é²\89é\86 &\84\ 6aëÐø«\84m\95ì\ 6Í\1d\8d\ 1\99\1eO\16¸¦.°\8ak~Ïrûæó²¹\98?°6"D\80g7{^k\v\f \e4<ÿ\91Sî\ e×Ávæ!WÁk~\90\99\0Þ±\97oa\83\85\10UËD¢°ã\19ßf\83æé\8dë®\90nT¹\99 EH$\16\17¼ù]¹.Ç(ïô\95\948ïÒ\14mñjɱC\ 4\f\15ëT±Ç\10\99[c¬\18G¼lÖé â¸ù\86Á\94Ò6SÅÞÔ¶5\19:
+túøï\83a\97úw=oÐåÅm9z¾\1f\81æêg\96àG\15\ 2¬4\87\86Ùå\ 2¯ÁöDsà\9bWÅ¿º+ö\ 6ðÔ\1fÚ÷Ì^\9b!\18¯jß×þ\a,\8ef\86endstream
+endobj
+1194 0 obj<</Type/Page/Parent 1099 0 R/Contents 1195 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 588 0 R>>endobj
+1195 0 obj<</Filter/FlateDecode/Length 1805 >>stream
+x\ 1µXmOÛH\10þί\18¡;]*\11c'Á H\9c\14\ 4½æÔ\ 2GÒrRÒ\ f\8b½!nm¯Ïë\10¸_\7fÏìz\13'\a*\95Z*¢nfwç\99·gfùg/ \1fÿ\ 2êw¨\eR\94íù\9eOáàØëQoÐÇÿ;ø-%ÍY\80ü\11ðÇÍ\1f{A\18x!\85A\ f\9b3ê\ 4]¯S¯R\1aï5×\90\1e\r¼ )m¬3êú}¯Û\902\88np\8cÏ\1d\10Ý\90!ùVcØ\81b»`\85\8deF\83\817hÈ\1aË\8c\82\1eãÞ\1cl®!\85ÙÍ£Í5ìða}ãls\ri§¿\ 5©;\b¼c
+ú\ 3\9cɨ\87³ýzÅ\80\9bkH\8fzÞQCÊ>\bÂ\1e°@\16µvÁ\a\83\80Ýut\8c/\81÷(\84\ e³0²Í\92Ñ\1eCãZÖXB\ 6\7f\1dmdAg\0§t;F_Ð\eÀ\ e³0wn\96Ö\ 3H\16ÞÈ2v@½\84\f6 rNv6Ù;|\vû{4\99#ËÂ\90\832\89M\16ù4\89Z}¯ãu=\1a/\8bB\95\15 JEy/)_fw²$5§¢LòJ\96úÍä\v®êQ\10Ø«Ú\9d>.j]å\92\12\97\92ª\85¨h!4\892Ñ2§x\89\93÷øZR,\1fdª\8aLæ\15\15Ø"ùâ±Èî\ 4\92»\83ófW.eL\95"]c\89Ëä\ 1\18bµÊS%b\83À§¶Irh\9e«\92\ 2ßÿM7QzôQ;·I\8e³\9a.'4¼¾e-ZerÅ0ÅêëJ\94V\9bx2ÚÓDW\1e\8dæ\94)\14\e\8cÉIå\92nè¬\9d\ 1\13%-×\8a´È`£A{Àw\99CÛµZÞÓá[ä\96q^\8bÊ"\8aÒ\ 4î\0z-«ÚÒHe\99Èãíã¦ÞÍqçû\16E\0wÇ\bj\87ÉÊ\98P_#´VQ"*ioÚxl\95T\vÂÑ$×\95HS\1c¶'<\9a Hs\95¦jÅÎ\83§ä£È\8aÔÄi¡V¸\1dßEj\99ƬWD@ZÀa\v\19\9fؼðéØ¥\ 53\ 3Âó\v±¤µ¶\94
+u¯¨ý\91J¥ª_µ\8cJ nG´/\91k\16\87Þ7¦\ 3°o²´u®2\91ä§ÓËáÍåhø\99®Æ§Ó\8fyòø\99ƲDn\9cN×Iäùm\91"·º\9fë;:Ì0À1m¤Áã tb§âÚ¦7\9dÛd\eåsE\811\8aÃ^ã þ©w\"Ø'4}wMï\91Èå\9f°¢ç\83\8d\81(\91\9a®ÇN\83\ 3ð#4t\90è?WCo\9c\1câ÷ÃßÏXð]¡t|ñ#c¹\15\87y*îõÉÔ\7f\1cÀí¾ïܽµ'ç Mgø¹¾úãj6[\14m\83ëÙͱÔQ\99\14U¢ò\93©Ý¿{îàò\8aÎoF\9f.nhøi8z?<{\7fAo¯nhòn4¦ë\9bÑåäâæàÙÛ¹¨Qè'S'uyñ*¯Îf;%ñ»-+S9\eæpöÑl¶ÿrfBø3¢2^F\91Ôz¾LÓ'f3Z£\ 1\99Ûʦ\97Ayl`³Gµ» ÉØ4¦\9eGÃ8fJº\94+ª\vIÓC"\fß5*\e\ 4oïq$\89êµ\rêì íg.\96iuP·\1c5\9f£\9f\11\18Ð57Ò\v0ºæ\8dI\ eZLrãå÷èÿ\96±uvçE*\9fo+iñNnpû\ e\9bçyṳ̂±,\81=Õ
+L\8aÆbX5w¡ä)\r\16\1aRµ{]\vlZ\14ÇÎbºMþån\95\0\81åjîg«\ 4\ 6\80\8d5\13´ÊáûÄÀÃ\10Ùî\84\96\84\99×q(\97\11º\ 1÷\8b\925\89;0»i´\8dÀÉG\19-+\90{NW\85Ìk\83.\1eg-.#\9c\ 4ßÎÞ@+÷\908Kr\98U\8a
+-\9aÍjo7É\87$\95÷pè¬\95xÒ3\94Oh×Ö{\98£¬SMI\ 2\92¹ndz³7ubDõî6fÂ\80\ó\9fu¾¹Î´GóafbÓ(\9d\ 2sbí\vã'\ 1¯:µ+ëÕSz\92v¶X·ìçzî\fñâIƤÒ\vè0QÅ5´Í´ÔÆd\17\1coÂ2ÂlQ"E8\bÜOëx >&\9b8º»áaàb\r\1dRQg³\8d\8c\99;¾é\90VÃü\9dd|õì\91-5\8fy\ f\80½®\97\a\91.\11fζ¢T÷¥Èh¡ÔW2{u\93\1e\18\0ûÑÅ\0\86ðR?éJfuºØLp¥×H¬CYE\87æd$\8a\9d|áô\12\ 5´C\8eÑ\87æÈ@\8d|Å<õêZ\9e\13
+\ 5L&Ê'\93|Ì!u!Ý.0Ñn&>\8eмT\19|`ç¸\ 3\14\9f±\84;Ï&Å\f¯`\82E)䪲\p`\91o\86Ap\8b\99Ô6ùÒ²ÅíJ\92=d\ f¹Ìæ@ò7\rç8\8f6\ 2Ù¼\90ýPÊB\94\9ccÖéöJççÖK\14ǹV!:\ 5\86LE©\8aؽ\f)\a';ÆP3>\9bp2\9d\82iv \82\aAYì\88\9ah\ f\98mdY"vx\10ì\ f\r\1dѹÌ\13\19ï3SaF\\96ÌÈ5dël\8f.\95Á\80Iþyß8\;\0êä´\86»N\ 1\12çy×°\1f827u óÀ\9b\95|¬\18\19+Ù¦Ñ\ 3c\86K\97\ 4ä+,Ëñl¼Ì«Ýü\99,¤ñ\b'\fÏÎ\92g\ 2äÙ·K6\96©\84±ÎÑ\8dðn¨ï9¾âçQ)3õÀ½\aÊÌtjr\96y¶aÕÞr9\ fÌÛ\8f\ 2\ eVý.0[×|ù\7fêm2\r[üºw\8d\9dÃ\90Fx¡Å±}\156\8bÚ\99Q)\eÂAÝ\e\82\10\7f'\19àÏ\17\ 3~¥\83\83ÇÃ\ fgC´Oõ\ 5\9d\8fÎU´4þæ\11\8fO¶Ý\81v¿c8û»^Á½~Ïë\87\ 3<§¡©\17ð\85\17\93½¿öþ\ 3bü\1c\8cendstream
+endobj
+1196 0 obj<</Type/Page/Parent 1099 0 R/Contents 1197 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1197 0 obj<</Filter/FlateDecode/Length 1119 >>stream
+x\ 1VaOÛH\10ý\9e_1\17\9c6Õ\ 5;vB\12\90\82\14
+¨è\80æÀÒ©\12\1fºx7\97-ö®»»&Dº\1fßÙµ\1d8§-\¹ b{=óæíÌdç}m\85ÐÇ¿\10Æ\11\fF\90d¾\8f\8fÃÈ\8f`8\19ã}\84ÿ\8aÁ¢u\14·\82S|\17B¼@\97Ñd\f1\ 54ï÷!Nº\ 13I\90+.LBr?\95 IßÅ_ÐeX¹tá¦\9b,\89ø\9b\81Y\12\ 3FÂÊ^ײ\0Á\18½y\aDP\8ce
+%4\10H¹` \17ðöX
+ö\16\8dy²\ 4®\9d1£°\90Ê\ 6èÃn8@¶1í\9a%C+\992È\95L\98Ö.\86Tw~ɤ\ fû%÷Ýhè\ fÇÎoÁ-\17\81^VHQè\8fÜ:\'\8aç\8e$\17\9a)\83|\ 4[!0n\90)`¨5à½,\97þµgK©ïO\1cPM±~\ 6/ìmP\ 4ÉX\ f
+\8d»!H\16éS¦]`~ÏÀ¾Ýv\8fz \97\ 4+²í\\93³olzà\9c\8bâa\eb\80\f$néû\ 1\86=
+ã«\1f¼ßë\81®áRTÜm¨\92ü=O02Ç
+`ÝìREi\9bè\a+.ö\1f6X\95ɦ\ 2[.\17ä\8e\81.pç+fsæðk&ø\80tÅè\a¼àKíöﺰæ\80¹]è\ 6êüêì2~?\9bO\7fнO*y<\8bO¦\9f)1\f~ï|êd\1dºÛùйè\\7fn`\9eϧiÞX»:¹\8egWñ´\8där\94æ¶Óµ!Ê´+ÛÍÎá\ fÆrì·Dæë\ 6N\92\83Ws~¼ó=K®aº\ 33J\9fÖÀþ\186Î\rc\96,%´Ûð_?\87\87Ï@zÑ?^xp\83\9f\97\83?\v
+p é4¸'*й\94i\80Ù\f¼è§a^\ 2\9a=Lû\aY\8a_zùS°:M/\ 1MóiPh\15¸^\f4Én\89cî~\19\81·ççJ\1c<&ç;\90uc\18Yà\ 1Ø~\16\r\b\12\98,/\8fcB©ïy\10\1d¾ \eUÇ¢¯\ 4xçóÿ\ 3´f\99ÝQ®`«8[¡3Ia\8c£ãyË\9aäs\96;®\8b½Ðnÿ\ 5Yj0ª¼£Wy\ f^å=|\95÷Þ«¼G¿æíU'Û¯yïÀ¥4å\99Îí¼Àá¾\99ï\8dò\94Í¿Õû)¿\rtvë'R,\1a\1e;ÍgøT)\r{\12\962\ 3OÙ{\92\168\84o\v\ 3g@2\105#'N¸\81\8c\11¡\9d\82x2\r\9aàå\ 1j\85J}\9c×
+\80= Fßr N÷QYU
+d\802\8avÇ~äïùpmO\ 5§~æ\95¾\98ã|vÃêQ?aôÈJ®î_\P¹Òp\19\a\91\15_î$\ 1;Y\98BݤµL¸\1dS¤\9cò+n\96À\b\1e\1dÕ0ö!^2\9c\9fBª\8c¤é\1a\8c\9d¬vZã Ïìä>\9fÇáA¯Î_¥®Þ\7f¼ÀE8=;?Á\vª=߯\99g\85F\81\94j\89µÌ\9d´°hX\93\84¡\86B@»ö\84\1aÅÙ\8f¤\90`¹]\1f\8eÖv<\93"5=\90"Ý̽*6浶uX=§M(´ËÌ=ÍZ\e¹=p\8dá¤À\bz\rËj¢T¢2°\15VÌí¼J\11\17 \15EÅcdcÓ\8e`\ f\14Á\r)ÀJb\7f\12ôþZpÅ2T\81vwuA\92\94ãJÙ+Áé¤Ò½á\beôd\0£Ñ\9eÞõìâh\ 6s%¿°ÄÀ±L
+\vãä\94\8d½[\9bï\8e#ÔÕ/i\91áxè\8fG\13Ôäh>\8c,ÊIÜú³õ\rö\90egendstream
+endobj
+1198 0 obj<</Type/Page/Parent 1099 0 R/Contents 1199 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 595 0 R>>endobj
+1199 0 obj<</Filter/FlateDecode/Length 1625 >>stream
+x\ 1¥W]sÓ8\14}ϯ¸ÃS\98%Nã¤Iº/;|\15:,¥\vfº\ f}Ql%\11Ø\92±ä\96ðë÷\ÉJ\9d´ð°\f%\9dØ\92îÕ9ç\9e{ûm0¡\13ü\9bÐ"¥é\9còjp\92\9cà \7fLøãã\9bÁtq\96Ìh>\9bã³¢Ùt\99,»o%}âõ4\9fN\93\94ßÍñ+|Ù¿J§Ø6[.°,ÅÿFÒz\90¦§8ãôt\89\a\15â\9ebIø\16·\9d¦\13¬8ÚÆ¡¦g\8b\87çù\17\934\99?¶#\9dÌ\1e¾x\91\rÆç3\9aL([ãþóå\82²Â_û\84²|xi\9c$·\15\8e>\89j%¨0Ò\926\8el[צqx')7:\97µ#³¦'W\8dÒN6teL©ôæ ù¯Z\94å\8e¤Âê&¡l«,áçn+5 *ÍFå¢|\9a}\19\9cÐhÂ\bfÅ°î\ eÂ:aÚhY\903Tµ¥Su)\89£ó+\1c°6MÅÁK#
+Z\89Rè\1c¡É4´\16ª$s\8b Ýé)s\87Ó/Ö´3-HøÖ*0áoxtôJR!×\8aã"\0YSI¬\17Öègħ\8dÏ¡\f\ fÛÐV«\ 4 ¬Ãã\88æ\109Z+ù\aIú\ 4\ e%Õlh|\9eÆC¤n+\7f©.Õ\bDnªJèâp¿×¥ß\7f\1fín«ò-åB\13RomÀ+\\81ðP~\a/ \82êÆl\1aQ\85Ko¤\96\8dp>ÅRYç\81[wè\1a¦Çî¬\93\95\ap|~F\13\b\84\952\9aÎ\ 2\94\8bdÊ\94Jº¨<g\962po¥;D\ 3;Ò\ 5ô\að\ f\16;,&¬æ´nUá\13ù|yñ/15·¢\94Ú\v\8buvtaî,]fô¼((JíZý\10M\91Ð9X\ 2X\10\87\93G\18*Í\1a\11N1yX ,s¹\86N!)>z\9fû\9d\\91U\10½ðù{\9cý\877\ 1 >¤sõ\9fã±ê®\9bXÓ6¹D\80\8dL´tãÇ\99\1a²VïdYòo\84<Ê°0y[á®>G\14M^¶\ 5\18¼CÉø\ 4c4è\90£Q\ 1®\1aµjùJ]EY\99ó7ìA\10£Qp\1d¤ qÕ(éåÙ«0Tfc\8a6lêpXKáÚ\ 6$ \9c"&÷Ô£t\ 2õ\93{ê' ]³? Nã\86¿\1eaÞ\17]\14\b×4¨*Ë.c\ 4c\19ØPhÁYX\88ÌÌÆ\b¼0>y\18ó(Vð\95\97\v¯ÂQ\0®\81²\e\89\8aSÎ4; ¸g\1c\8f7\10\b/í)\b%Eg§ã³%P
+\96U4
+NAµÈ¿\8a\8d´á\12yW\9e£E²ä\16\ 1ùÞ¤óEç\0±øü˽uݧÆ\17\b7Ó2\87\13\bd\86¼(\87\91øR;ÐÞO\12éðÿ½L`\0J[\a\1f\ e
+ËKÅ\95\15<#(få\84BÁ\ 3\97nå\112`A\ 3Ë\8a[Bè\ 6Ñ\96î]»\að,lGm7\80Õ>z\8bèq=Há0^f£t\99LÎh4ã¦\ 5ÔÙfÒ\84^Fäbõ¿
+¬]\1d°\16yñ¦\13-\aÕÀ\1c°´÷øÿ\ 4rVóJî\f°`\86lnjÉû\1cw®Xªt3Ü{H\94~â¾;\82`ÍQy?,è®\9föÊØ+£2hG=ñÞ<MèB\93Ý¢Ý=c\e\8f\91èP®\9c± Í\ fU×2ô\8a{R\9chÐ\15KîÓLq¬¬î\80µ*¥}\ 6b¡\f8ÎÅå9u\8fX
+\§ì\13¥\7fHZJ¶¥Õ.\98ÒCEýÚ,\8e;EÐÆOì"ëûrXÉ·\84\0x\98À,"\9cX±\93wïB\13\17;n\7fßZ Ç+èV¡\819\\ 4\ 6@o³ì\8a*\99o\85V¶² ½\16ùö\88¨(\bv\14v\11\7fÏ}¤-Ï\e¨\11kM®<\\9f?þíyc\99\88ܵp!ô(Í£\bãì5\83a%¨3D\8cß\8e"³²ÔFq\89îÐ\82üÀÃé¿ÑíÕ\9b®P\8f\9a;êJ\99
+øo\17b\1f\1d\97gIø\94p çgôq×ñúmxi¸è½¸:l!>¶öÀÐ<\8e*<\ 1\1e\926\ 4-<¨HÍòð ùZAOj\eåv\94oeþ\95\99Aã\12«R\16¿\16ʬ\e)ú\ 2{é-ë0î¾Àß\1fÕ\rò\89¦ÏWß_ì1\13d\9cn1)r^\1d\12!J\1cðzM3\1e4
+Ù\8cÞ~¸Î>$u\87Pô\9da¨\96\87U¯b\vìÚx\14\ 6Çã»tãé\81ô\1fK\19X£I3kw\86õ\a5ó\11ý\ 6 ácªb³\v\ 3$a\1e\97t%\e\8c[y£j÷\e\1d\ eªÌÞý\81Y\9b§L\f\935FO(ß÷ѵÀxÒ\8d\13\a¡ëÿ\19:v\82>8\8far3\ 4\1e+\83\81É\ 3ró4Î?ì\8c\95\14Ú[?;Ã.Z`dó\81\97p\93\16\1d)±Ia~Ì·¼\93çd\ 6ö«F¥ï\9bde
+Y\92\16LLoÔ\8b¡\81H4\86\83\1eËê\fNÜë¯G\91÷ݶ?Àx§:ê®Ë®B'sü\99¹\9câϹSî~\9f\9e¿\7fñ\1có²ù\82\81\8b^õGM\8e4\8aËG\8bÔO8¿\1cég\8bY²\98/Ã,4\9bò\ 1¯³Á?\83ÿ\0Ë\85Åýendstream
+endobj
+1200 0 obj<</Type/Page/Parent 1099 0 R/Contents 1201 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 598 0 R>>endobj
+1201 0 obj<</Filter/FlateDecode/Length 1858 >>stream
+x\ 1\95W]oã¶\12}ϯ\98î\93\ 3Ä\8a¿â\8f})²\1fÝ\rÚ½ÝÛøbû %ÚâF\12U\92\8a\13\ô¿ß3$e;\8a\vÜf³q\14\89ä\9c9gÎ\8cþ¼\18Ó\bÿÆ´\98ÐtNYu1JF4\9d\8e\929Í\96\vü>Á\7f#iË7ð(ÿ\18ó\8fß>]L§\8bdEËQ2£\8af\8bEr\13.Jº¿x·¾¸þiFã1·8`¾\Ð:÷ËG´Î\ 6ëBÒFX\95\91ª\13e)\9cÒ55FgÒZRø®i«[CÖÉÆ\92¨sj¤))Ó¹äÛ{#\9aFæ$\8cnëürý\1dÇÝÄã\ 6d«MV*Y»p£\8bcÀûô\9f5MvöÙ$<8¢U\800\9cÌ\0t\9d\ f¶ÚH\91\15\94\ elÛ4Ú8\1fFV('3×r®´!A;õ(kÊ\r>LzÉ\9b\8dh8\1e%KÞ㿽kâ¯qBt\88æ-}\92\8e\1cò\ 4 F7F '©mJ-rÊ\95ÁYÚ<Ó¹}x/$\93×\1aYi,³Ò \8asÏNpæ![oé?a\7f^\1a"§*¥=·rú2Ú;k[ÉDÑm\9e\7f5ªvÒ|\bà\aé%}¹\1fþöõ}o\9f¿âõd\f¹!+³3[¾ÜñãSzÜ\8d\9c&\81\94C>Ͻ\9d9\ 5\19h\ 2vÆ\82ìq<üЩ*\87\13\7f쯵$½\8d\ fêM)+K²Î ,¬\ 1¹û\ 2DªªÁ\rHJÕ;ÿè]åwµ\88B\97È°£½À\ 5N«E\85\947"c¥ú¬l¤ÛKYwAN\93 Ã}\14FéÖÒQFA\88\10õQM6¡\9f 'ù$8\80+ú¦ê\ï-ýk\8d\12ÉÊ6ç¤wdñÉ9½¹mðhï°_\ 4DðÍ@¤\86îî°üwz¼\19'Ë7¾¶º]W7\94!\9d(?g \92±\\95>7¨¹¨\88°=½ÞðM<r2\ f\85²ö\99÷ å\92-ô\9e\19{¨ñ¹/\84£\886l\8bûâ\11¦\804E\95\ 3I¨¤È^B·\80j]\vRAm\ e {U\96=\9cP¼¬6¸çø\b¦£Ã\86\8cE]âSÃM\9cBîr%J½C½\94ÏÇ\84\ 6òøt\rmÄó;ü\9cdÄÒ;÷ÏVe\ fTjýÀÖÕ;w\ 6\13µÏ°²
+\91ï\94u¨\\11Í ~\1aM\12r\f\89ûüó/_ÒôÞ/HÓ÷1ÐÝ{];£Ë{éð§ð{\9az@iú±~TF×,O\ e«§ñ°)ç
+§?JQ\86Ü\9cäE\94{ñl©µH\b\87\8eTE²\ 3ØuÁ\8el à ñ×\v\8d\ 4|ã\17\aXluQå`¡\94 \9f\93\17êz\95d\1cÖ`C\0Jè³Þ#lsE÷¢Ú@ë\1a\aÕÚ\ 5Á Ü\1e\131\18N\ 6¨\80Þk6\88\84Ö\ 5ª\19\9c¢\88X\8a\19¬êY·\fú\ffR[¯YÀå£DÉ\8a{\ eò\8c-Kæ?Æ\93;Þp\ 2Là\99\vÆ*\14&ZW\13ì\ 2pJU)\17Ú\1c®P\b1Î@\ 6B¤\83£ô\ 4\a'y\10;\80\8e\ 5O\eí
+\8e¹\aü\ e`Ë\17ì k®n®WË\9e\84C?õ\ 5rd\1aA\1d\80Áõ\8du±\ 3®h\8cæÍ]|8\8d-p\91ÌüÍ\ 1}Q;\13@\ 1ÑÖè*\92\84±!yb\94\93d\92<½\16å"8þ'ß$}$=Ð\95¨\81Ù\93X\80\84¬\10õ\ e\8e\90\ eö\12ô5°Vø¯~\949\9a\v
+\ eÇ\10®\f#EÙ\1aÉ\9a\93ö\8aª.À^²|¬\90\80|B92Ipð¶\89\11{qluYB'\96µ\87\9ai\84+`Æ\9f!"\18tì+ÚZ\85\86A6\935»¹õ\96u8ó-\1f\8a¹êPÙw[¯¹\{UA"¨\1a¯¾ZîO\99óÉèj0ö\87+^Sp¨µ\94¹\97Ð\ 6m\1a\ e\ 57\82|:$= \8d00,\94\ 1\86&m\1eüi\96-,\90\92Eû\19.\92å\98º¢M'ó\85\9f-\8eVâï÷\81ì\ 5\8a\f,;ñ\80¬ä\8f¸\ 4k\\0\10V\8fÑ\b\836CÔ>\ 1Ýò\90°\90\89ÕSÄÍ\b{X y\80gNÀÕ\95\87\ 2\9eÑ6øF\87?ÆÝùê \86a\93\n\ 3æã<ÈÓMB߸Ác
+Â8éàÑ\rz\1f0\95:ãùAÐ!¢^4Ü\1føà\ egôýõ\87w¾§n\85ò\8dÔw)`Ò\r`ïÑ\e4<§\9b"N\83\83¸yÎe+\10Öê\8c'>?®\ eOìôHgzé=-@:ξ\15¨ø#n{\ 6±\9fV|/\10¥e\13ª\84\1fµ\ræñìa/\f\94\95é
+jW\eU*\aÏ\ 3_~Á¦o8<]¢\ 2¹þ\ 23O\8e*ñýX\7fg5v3 3ðßjlX*Ñ\93@C×v\ et¼\1c\ fxä\85\9f\9bh@\85FËI\a14\9f\ fÎ9ÈI/Y9ê0ÔÆ>¥jðY\ 5/óp½¦Ñ\842\99c\1a\84\10À\rÃt\85\91\90x\897\12\1e+y×#)]¦Híj´\1a6¬àÚþ1~\9eù:%46Z¯6L[`50ú²0»\16ó·I\9b®\82£Æ´õ+ëÔéÂþÿw}\80^®ð×¥\97\85Á$ÌNV\97-¿Ãñæ'r\r®ë±\1d\850\87ۯ߸\12:zyûC/êú\93<\96\1e\9c×\ f!ܵáz63ª9S\1d¾°\ 2¾cE\1cÞoÂ\8dcõÿ\93·Aº\aé\1cå¡KÇÐ\83bºÉÝÓÛ{U6;\1aPá\óöú\9a»\16òi\13\v©f<\8eìdRKwíóvxÅö;`Ý©PØn<\8dþMà¬J:\11\9c¨¤KÃð&Y-W4\9c£wOýëÇmV¸¶Þý\10²²\8c}`<\9b%Ëå\84æ\v\b*<x\7fûåÝ-ÏÌßñÒI\1ftÖr[ö¸yíp\8c=GË)\r\17\13¼Üç\ 3\9e\ eþÁ`0[Ì\92Å|\89ù\82_\ 1g¼åÇõÅ¿/þ\aV\ 3=\1aendstream
+endobj
+1202 0 obj<</Type/Page/Parent 1099 0 R/Contents 1203 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1203 0 obj<</Filter/FlateDecode/Length 560 >>stream
+x\ 1SM\8f\9b0\10½ó+æH\ exù\86\1e7êÇi«VAê\85\8bÁ&ñÖØÔvÂî¿ï\18È*\9b½ôP¡\88hð\9byóÞó\9f \81\18\9f\ 4ª\14²\12ú1\88I\fE\9e\90\fòºÂÿ)þ\f\87!Ø7ÁÃ×\1c\92\ 4\9a\ 1Ò\94¤q\ 2e]\90¢¬¡a\80¸8\86¦\ f\9b\13\9eÖRêY¨#ì\9ag\84á\84\ 5\16Ú±#½VÃZ¾v\va¢\86\8eÜqc\81â4<b\ 5ã\863p\1a:\ e\8cO\86÷Ôa\81*\ 6³\90Ò\97\r\1fõ\ 5kVkEà³\ 6¥\9do\1dC\94d$E^áÙrp'>\82P ø\8c/ë¨\94Ô \9c±ÒH7v(@\94\96$÷°É\b\85t\80\19qÁ× $\876üÖîVH¿A¢\8aÔ^BD´iYmë^\e.\1fß\98ܵlÃÃ\7fì&5ª\83+!É\7fl{\15?*b\92}Jpu¤\9b-\9ay\vOôÂQb®Àͨ+*wë\11c^Ï\ 3\1d;\8a ÁÇû4h\83\bçe³çiÒÆ\81\1eÞ\ eÅä\ 5:Úÿ\9e©a\8bð7&õt¢\9d\90½"ÿ÷¦\84LXÚ¡úvÒZÚͲ+ù°Ý-\81ð£ÏÖ\aÎ\v!aÓÚnþY@e~ Åôlá{ó\90ú¬öRpåìÇ\89\18\99»\10G·f+¿\e\ 6\ 4öÚ\9dü®\184\8c\9b\9e\96p-IfÜöFt\98QÔ\v?Ãz\ 3\84\1aÚ°@ò#U(ì\91/[øèoë2è^ïH0>гtd\9d_o LJ¼¥u\ 6þ]\97\85Oâáñiÿ\b?\8c~æ½Ã[Ñ\9fG\t\89\87ÇFWHT¥Kr+\92\13x\12G³&È;iôøÎ8¬y\9b_<>¯rRá¥_°yáK_\9aàgð\17sc<»endstream
+endobj
+1204 0 obj<</Type/Page/Parent 1099 0 R/Contents 1205 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1205 0 obj<</Filter/FlateDecode/Length 1387 >>stream
+x\ 1¥W]o\e7\10|÷¯X\180\9a\0öIr\14Ié\17Ф1\9a\87¢.¢"\ fI\1fxw<\896\8f<\93<É÷ï;K\9edé\1cÇ\ 1ê8¶t"w\873ËÙõÝÉ\84Æø7¡ù%½\9aQQ\9f\8c³1½~\9d-hº\98ãå%þ;IÕÉÛåÉèê\r]\8eiYaÇl¾ eIX=Æ\93âÅ»µh\82t´Èèw\99·«\952+ºvÊ\84ôÂæZÖþåò&F\99ÌS\94\8bWÓì\12q^,²IF\1fLp¶l\8b ¬I+§4\99ô+/çÙ\8cW.×Ê\13¾\ 5ùµu\81Jé\v§\1aÞC¶¢µÝR°x
+\fÔìò7.å§
+kú(ê\d\14#¥í¹ôG;9û\98.&¯\12ºãíû¨\95³5p|üó-\15ZI\1383ÞsxòÒm¤;'cñx-Éâ\87£èH8Û\9a2£+ëâ'Nb¡\97Ø!ùý ·¼\17u£¥\1fíÓ\96ÊÉ"X×eýÒËY6ejþº='o©³-ò$4qÓcX\14¡c¡£ëwÌ\ 4\14VÎ3R\96\8b#\18)KÞ\b¨@\17\84)\99õ°\16a\00\1d·´ \90Ï*\8aÐ
+;*Á\85é\1e4PÁK]\9d\93
+tÓ"\15\16BE\16²Ve\89ê\10\86r\19¶R\1a\ 6ÀÈv´rr~4Èü\8fQ÷\ fñ}\9bûÎ\aYg½\ 2`Iª\r`1ý\95ÒøÁ\82ñ;\84Æ/C\8dðþpAÔOÞ£\90\8dÐt\1aÙ\e$-l\r¤åiF\9fÀEJOýÃH\\v)ÁTÛ0{@=T\89ÉÞ®-àD²c1\17\96K_kPÞzVÀÆ\82Æg\86|\9dgø¼J2Õ\16Ô9©å\86\15Þ-ûòb»VÅ:æǵhuIÚÚÛ\ 1t@B<>ÿ.&1é\8dXÉ//Q\96òGÞ0º\1aÓ\9bÝ¥\9b¦Ê¢øõy¥m.ô¿»°c¸\ 4Ê.}H\ 3*øé\ 5j\1aÒ\89Ä~$×7\16Gß+9\b¡\9b»=\97)ì\ 5d ¸\8bîZÙ\ 2{\10¡\8dNÂ7ôQ\0W\1fG¸\0[µÝH ¸±ùW¡\7f\8e:£Ê\9f<\99\80küB£\8dp£\be¤\9bräù\9e'Æ\ e}ªw)T\e\ 4µ[V\13Ô\92Q\ 5\14·tkàP"·mx\86mJçm\ 4\17Ô®À"§Á68M\ f\9aà"é\96Gz¾zÀ>\94\93¾\ fbA\9e `¡ß\8a5ºzt¶÷É\91\9e\85\9fPí\90\83¾Ö»Q®\fÈst\81ïë³\86Î\9eVò°\14\8evßÅÚzf÷a\1d\1cíÆ\a`1î¾ù\16[ÇÄ÷!|Â_¤\0\1eJüï\10Pà\89"ê\eIºÏ\1e×ÀIá\11h¥hp\95h5\1c´J]\ 45RÊ\ 6·-ºGï É\ f)t\8d<§¼\rì½Ê\9b\1f\ 2\8cU(·±\1dL\ 4}\97\9f²yïÎÒ·½Ö°xè«ìúÑ[Ö\ 2\17 E\f\97\16·ì$HË\0´-à\97p©Rq#öÉ«zé=wj¶$¡ÑþÐh9HÕ¢G\fòùF\16ªR0Á\ 6\17Î\88Zúsî\10ɱÊ\1cnÕÅ\1e\93`ÀÇ
+ë¸\17ÒõoË?h#t+ýÐn?±ÏsCë\b&À'HÜâE.û\9bTÆÖ´UZ#Ï-û\ 5zIc\9dp\1dò4\1dO\17Ì_rÐ}\13\867íP«8µ\1cÌ\r\füÁ\\80 \8e6\19ú"\9a)\-ÑÂ\b¤S¶T \11\8d³ÐR\18\90\0\8bH<ö÷%\99=\8a\0\17ÝCù¨
+§Øã\1cð\19Q#z2@ð_ñ\84\16¯%ªä'úPíßP%\94\8eL'²jµZ\aØ6\80jY\ 5ø§\8b&\1e;\12ú\96§=\ 1\90(\1eg\90ü{\ e\97D\80¿aÒÀ9\ eÝ\1fÊ\94\12pke¸QJ:eáL[çÒ\9d¢(¼Z1GÁ\ eÒÆÉ!9\ foÈ»T=©ë\fkc\89¸g¿j\19\90èçèÒ§µ(\9cõ§\89\n=e\87Bì\95q²Ñ¢@Ú8F\8a\ 6s!R\89 ûÚC_G±\ 1-\ fy\12\bÌC\92\ 1Æ3ÏMÍC\97Ãp|H®y®3~\9dz^\9c[¢Ò\89¬\ 2\1e\100²0ç¼
+\16úíX\83ܼ'Ò#]*®³\9b§\ 2\1c1\9eæ\vÜhäÞ\8fQ,\18ª´A¡r\9aÑÕâa^\9fÍÒ¼þý\7f\18LçÓl>[à\8f\v\f\15Ó\19G|¿<ùûä?%\8d\aÌendstream
+endobj
+1206 0 obj<</Type/Page/Parent 1099 0 R/Contents 1207 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1207 0 obj<</Filter/FlateDecode/Length 1241 >>stream
+x\ 1\8dVmOãF\10þί\98ê\8e\86\93\1a'NL\12\90BÅ\89;é*UÐ&UU\ 1\1fÖö$^b{Íî\9a@_þ{gví\1c\18"\ 1\84øeÞç\99göþ \84!ý\860\1dÁx\ 2Iq0\f\860\8aNè\7f4\9bò5}4Âʽ\98DÁ¤ûüóò`ðõ\ 4Â),Wdj2\va\99\ 2\99\19\ ea\99\1cÍ\82Q\0\17\18×ëµ,×PiYZÔôâ\1c\vóiyGê\11\84¤ÅêýÑ\94\,Ó£Ë\12a+\9eÀ*HYÛkz\13^\15¤á·Æ
+m!~¢(«\$,a34\b\89*
+Q¦°\956\ 3\93a\9e\83I´¬,©eÂ\92|¢tÊÂ\1c\ 4¹\ eÇÁ\88]\v½®\v,I\8eÕé=\99¢ ù\81Z¹{\97\ 5¬d\8e\ 1\9c\83\91E\95#à£pßN\86bÛHÒö7åÚ@!×\19Å\89§>å!\9c´\19GAÄn¡ùñÆÛèç0°E50â\ 1ý\8bÃ
+\ e]Ù¸X¡/\16k~øa\10Ëò»`\9bÔ0\98µÖ?À\16¡\10\e\ 4SSO]\15è\89p×\bÚEX\eÔoè\ ej£\9d\ 3\99B¿\823\17\15E\16¸¨ÞPpÎt]6\ 5ô½à\82r*î!j4\14h\8cXc\9bRø"^ßS/ÞVÄõ\93»¢\b"¢"$Q\bÂ\12FÉÚ\93ª5\98'c±x#¦]\12y¥¡O\7fW\1fCø8\82ÑÙÙ\8f¯\13z\89K\87Êe\86%ûðh\ 4á0àa¢\19\81\85z`\0J\eÀ_$U\10\80W\f\ 3Wj\8eÙ÷ð¾Æ\1a¡DL\1d\84cj\88UU\85)È\12\b\944 \8clì"\93-x]B½=@\9dW_¢;\15ï\85W\16\9dÂ?Ñè?8\ 4L2\ 5\99l\9a\98ÉN¥¼ä\98%M\11'¹$èÃ`\90«Dä\992v\90o£\8e\8aHS\17<\8döJ$\b²\9aS#ù7\828\11ƶ·£ãc(\va6sº
+ÚÏ°cîJ\18³¥:\9cBçÅ\85*\84,ç×ç\8båùïË[¸\̯ÿ(åã-,P? \9e_/D\11\vf`zÛQ¦dNáææ¬i\82kø«ä«ÚZn!\ f·\1f=*\940T®~8=\1eGpsÄ\14¹\89\aææ\13Ý\10\985Á\97 ¯y¸Ï«k\çe8\8cNÜØ\8f\9báw_¯\8eð.þD\94 æÀÊ\1d\91/n¤üû\9cÓ D898%\12K)Ì\8eÂ;lþÒ\9ahÌbºÏÆ[\19î\1cࣴ¬øöTAÏ\87×£ HeBãÜ°4C\9e\93ØR\ f<ÒÓ\0h\f\1d½30\89ùY\86ü4H%ê\15\10KK\8ckr\14)\97A1\rI\13´\917LÏ3JY\81\8a\89ô\1aVjiFÕ\96°Ð®\80Ò]äJm\80V\a;|É\17\1e/~haËë\85e4\9a:ç=¢q\9fëûZ&\9b¼¡ ò ²]1nËñ\92s\84ç\88ͱ\açã\19.\80Ë\15í%¨Pñ\ 2Ê\98XÛÅêµ(\b¹có&é\ 1Údà,%¢òq\13qV¨©^Fª\92¶\ \ fBKE\ 4ó\8c¯|õ\9eïúþ¸Y]³`\1cÀ\9f\9cµ\93Gm UðÍEôóë¦7+¾>m\1cW\1e5ÝVº4=ÎbEÁ,\98d\98l\1a:ü^\1c\7f\8a(E\81\8e\8ey\85Õ\86+Cõâž.åßÄH\ 4\ eG\bÝê\7f¥\8c\9b}ý\933À( 8ö²'Ïe\e^\9b$¼¨äë4ÝÆð|Äæ×HÍ%0ìJ/KÚX\85°TsXiU´ë\84bkn\9b2øeÂ6,m\19\ 6ÖJå¹Úr¾\räèa\aÛÞv{bÁG«Eb\1dIï¼¾/Û¾Ø\9fpç\f²«Ð3\9dÞ¿îØ@#½Ë¼çk5kN}á\84\ e\9a³1L¢c>©,Î\7fý|\ eWZÝabáB%î0æÊÄzýV¼?\1dÑ 3}Ï 3\9aFÁt2£ó%ÉGS6óeyðÛÁÿó\97Yéendstream
+endobj
+1208 0 obj<</Type/Page/Parent 1099 0 R/Contents 1209 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1209 0 obj<</Filter/FlateDecode/Length 1547 >>stream
+x\ 1\95WïoÚH\10ý\9e¿b¾\91Jà\ 6B\81Fê\87Tm®Ú*×PÝU\8atZì\ 56µ½Î®\1d\82Ô?þÞÌÚÆ8ÑU§(!\98ÝùñæÍ\9báþdLgø\19Ó|Bç3\8a³\93³è\8c&óWÑ\94¦\8b9ÿ\8f_§i}òvyòòê5\8dç´\ãÊl1¦eB8~vFËøt\11M#ºÑeiò\rU\ 5\15Îäe¬
+Ry\12Þ\90×îA;ÿby\aKS\1aÃ\0[\1aMæÑ\f¶N\7fØ\8a2µ§\ë\84J\8bó%[ò6Ó9Okëho+G7*[)ò{_ê\8c\8fW^Gô±$ãÉ\97Îæ\9bt\8fÈc\9be:OØâV\95|\93ýÃëø<\9a°W\ÃGÈPÅ&5¥Ñ\1eÎì\83á+«½|$¹\90/¬MµëDv_é
+ÇÛ\f9]\93#ÀL\95ÆæQíi2\ 3\9að\14\ 2vú¾2\ e×´\81[GªÍ\8d\90\19\o\9c\92|\12\9d\1aàuø¸k\9a\96[äÙ\82Üù\88¶ÊsÔ½4CT\17\ 1ü3zÝ`?\r±\11å*Ó¿Tj\94\1f\87\97I\14E\17¶àLÞ<¨´Ò\17x\10îw\8b'¥»Bè*ͬ/ñ\92\86¸\98\b¡:~x\80\11 \rØÕ\80²
+§W\9aP¡Âz msTÌ®a¡Øª¼Ê´31cR¡|ÎÇ\164\1cü3èå\15o\95Sq\89\ 3 \1f3¥v +Þr0vGÛ}±Õ¹§ÛÓÁhpû\82\0ÐN§iD\979N cæ\8câÿa'Gí\1e´À!\cn\bÎÚ\r¹Ô=ÿr\8dMìPN\14Ó\17*Ö`\ 1\19a"Ø\95°?E\83ÀÄr@je«²\8bH\84j\1e(Î^A
+Ð#\83=S\9bMÜÞ\92*{þ9<ð\9bqKM\8ecè\ 4ýXò£6ræ%\1egUZ\9a"Õá`\9f\9d\1f4ðUø\95~Ó\8f*ÃQÏv[\96\r\9e\b\85 \15£\86Ö\85£;.e\r\92 ÇA\8eÐà\90\86ät\1c\11¿ÇÛ¶é
+\178vtI\1aIêqt}òìõ/{ºf\89i\1a\ 4¯L+\94H
+Úà^\83~dðü9\83\17~{\ 1|Ñ£@\81;\8b\1fÄÙ\e*µ\17M\9378Q¿?²\bé{\9a!\füÎÜs¶^\ 5[£É«\ 3Ä\8dr¨DZûP\91nßïÀqZ\e\87RøR¹R'\90Ã5+\1eTõ'ú\fMµAEÁÍ#ftlH\9fæ\9cJG Å\0\178±rqm¹©ÐÝO\98 n|\ 5\ e\89Ö¶^Zéä6Û1ÇÀ*|
+孃
+\1dðùú[«\19\81ólb\90\161\84Üi\95<i~\88;«/È-Á\19/¬fæ5òÞ!_CØgÂ\14m§ çCÒe\1cáï£AÒl~« \b\1c
+4\b\13\ 5T×.3ÞC\19¡:K|ð$ò\1e\86\92G¼ÕñOä2Z\ fXô~\17y\87÷Mä?PË\1c\82æ·¶J\13\fH\ 4§èæã\1f\1f¾_\937\9b\¥\8c\ 5{óÙ\8a\ fðÄåG\92\ 2$)à('Ú¶î\10 \85O\1a·n\94ÃØ\17R\9e×#c\11\81ª\9fì\8aÃ(\87\88\8b kE%\ 2õì|\97\91\ 5
+px2*Ö\ e´rÐ[T½\0c[±Á\83\888Y^\a$tö!\17ïìjHHʬM3ÓÙ\1e\1eÓ\ e}\ví\ 4Á0»\87½
+ÔË\84¢\9dS\ 5ê\a©³\18,b³S\f\81\94\r²Ö\ri\15\84\1a\8ceãm\8a´v\163\1aÇjÑë\8bé\15·á\10ìFÅEz¹\ 1\8f;\83#þöþòóç\1f<}6õæTWÏ\99ͶVÔÀʶ\95¹{*Ï\88)z{ó\ eó±\97h ¢ÄÕôÝPD ƨªTX§\9cÁPñ¥ÅXhr`\8bèJD\ 5J\7fÂ_âó\90>\8cs\fi_2SBSZLö\98xiÚs\9e[\19é\ 1\15èÏw¯ÿcåàÆ\1e]×\10J<lî\98;²^|eÎK\ 4È:¤ÆðIë³êAíY&î\ fÖ\ 6\8cº×\98Ä¢4Â\ fÀÜÕ¾\ e°aVsðÝ\ 3½ÜD\1d\18°\àäìke°`\v¨ÄS}·Ý×\93?@!\85\8ac]\0:Y'$zæwm½ií¯\18Ú¡NÌù\9dbºÛ\ 3\818\95\1d/°ÂÍzA8¤\ 6qä=\ 1$\8dè/^Dø\98\82Ba\12äØG\82ÞÖ»Q//\95d&ÇA4bX¥ò\ fFïÄJ[yá\86ô\ 5\9c4Í)ÔpH\8a÷\1c\ 4,@4ê\8fª0]k\9ü\9ek\1e-;\912ýX°°rÊȤ©²Za[ ëPpÉ\9cäbszß¿~ü\9b\ 6ܧ\ 3ªJlî\0\0÷\13\8d\9d\0\19uð\ 2Wz\8eë\15\v\8bc%À\99°Ö¼¼ZÔ_KÆ3|ùY\9cÓìõ¸^Þ/¿¼½ÄÊaï8Îw6Æ~\9a\97²ç³íQsa4\9f\88vþ¿ïCÓù4\9aÏ\16a_\9a.ØâûåÉ\9f'ÿ\ 2ZÙg\89endstream
+endobj
+1210 0 obj<</Type/Page/Parent 1099 0 R/Contents 1211 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1211 0 obj<</Filter/FlateDecode/Length 1422 >>stream
+x\ 1\8dVÛnÛF\10}÷W\f\12\14N\0\99ºX\95d¿9q\r´@.MT\14\ 5\8c\ 2+r%mLî2Ü¥\15\16þø\9e\99%%ZQ\83:1@ï\92s9sæÌ|=\eÓ\bÿÆ4\9fÐå\8cÒâl\94\8ch6\9e'S\9a.æx\9eà·Ò´\96\8bÉì*Y\9cº\18/Ƨ¿\98\9føàÍòlx7¢+Z®á{¶ÀCFð;\1aÑ2}EøI3\1a>ªjèKçòa^fò26è
+w/IN)3\95N\83«\1ark\92kúâVþõòËÙ\88.Æ#\ 4ºÌÄZîÙæé\9f\97´66ã/ñ\90ëS\9fó9eë\9bÑh\4[ç\ 3»\18ÞMi<\8e\19\Lfìê/W\93ߺ:ϨP\ f\9a|\rÜÂV\ 5j\]Å\10\91\81¯ËÒUÁãÊxZ»ªÀ\e\1f>õÞô\8d\ fº \95\15Æ\1a\1f*\85,i«<\19ë\83Ês\9d\91êÒ¼L&ìû<\ 2\80P\ 1Òy´µ3yN©³\8fº
+8A\r9\91àHu^UYV\ e_ª\80KøèÇ\99Ä,¯h<o³¼\9c¢ÄðµHf ý\ 6À¼¶a@\1c Ýhru(ë\13ØÌ\13Aç\83M5;@"\8f\f\8b\16Ì%lc7\ 3¹J\95å\e\v\9b
+1ï\U5¸$µ\82q\ 6\95ÿ0¡¶5©Î\e\89\13\ 5\9fÌbtKX.P$d^\14Îâ]·Ê\81&°Öß\10*\95j£=s&\ 6|M+e-ê\12ÏQ\88U®ìCû'Jáj\9b\1dûùu-!+Ôx£CàÈú\86\ 6\94nuú@
+ä:b\ 3\e\94¼SU\92+\83A\94\0_\8e\10G{\82xQ»µÙ\80EÙQµ¹VÖµþ|Bm,\82,\12äV\81í\ 1B\87\15üg\8f×~K÷¯\98|\95ö\9e¶Zeì¬êG}ÿºõ\9eÐ\81ÌG¾÷å[»<w;©\88=Å\9c}\83_LZâ \ 3Û$¯)I\12\ e)\92ì»Vê'$I´ 0\9a\8c¸\ fÌíÓ¸#Y¼\81¬\15SÓ¡.éV1ù¾oE³o÷¶\8d6\1aLPRL\98)º¦ U\a\8765)º¯é\83s\Û\8e\ 2\\ 2\81ÆC§¼\ 2\ 331¶¯½®:B\8d[ßK.Víkv\ 1ÅýZCßø\80Íô>C×\85º$ïÖaÇP\bs\ª3ðÄ\8b¸ä\ 6ÎVͳ\8f
+eëµJ\ 3^Ú;î:¦\ 5\eh\82½&9ôHˤT´m\ 51¬EGÚÖò´3a\e) :*\926àÈL¿I:h\8f\bõ\11Íú9L\19D¿\aP¹\14\8d\ fmçT\ 5E4H_\9a(«\fD\8dpÌÀ¼3iå>\ 3\ fJ\91º\r ÝÁµþ¦\8a2×\ 3ª-\13ýOc¯~>ò\8c\8f;¦D~]G:\9ebîÇ8\7füSû@ïU¡\9fî_}2\9bm ·¹I\1fî_\7f\84\9aBl\8dÆkÈÊKVO7Ù#ó/{ú\ f²\v/Qu·ó")Pètë\9c\a\89× ñÛPå\17·Bè²\84\10¡¸¬áà?\8f»\84\847Bw`Ò \9dq¿\15Ò8ÊÜ\8007D\ fejâü\b\848l¸\86°ø\8cç\18@è6úû\96ý1ÐpÎ\9càG®3¢\83\16Ãs¦\ 3ªÅSÉÓ¡\9a\1c\19¤¸Î\83A\1dØL¡\9a#穪\91&X\aW\86\85På"¼\aêýh\fÍ\13ú¤v=\97¼\88\>\1fÐí\10:`Õ\8d\ 5\ 1¿×x\12\91´\8f\ 6©A\1cÎVT+®\1d\fl;\9f1íb\8fÛ8ÄYÇÛy\11ç\97[\1f¥{°Åø\89k\9e\rQ [iıÁøáW\ 5dÖ±\80É%Ó[\9aêY+x\ 3\967(4¬X\87\96\89ÛÅ\91ã~UXÙQ ²:2I[\96':¿é4\8eÛ\87w\92[)+²:çNë{ýQQ\16 u\84'é\95\96r'ëñÞaóèt\99xüg\ eÒV0äèý\ 6\81nL*\90l<kZ\94C\89Åð\9d\85(#8\11 \86ìE,\15Ï~Ì\8a\17í8;B\83§\888ñ[\rÒÇ6E'Ý:®n´ R¨Ý^õòè¬\ 6Üô{=þé\8fnTËJõÌ1ö@X>r\eýÄé\11¥T?b×\91íàÀ\8c6ô¶©\84\a¡)¡óÝÂ"+\85ÁþèÍ?Ü;È\85\e\13ÈqØ#§ý\15OBlõ\7fx·h÷×ñ\fkþâ\92f\93«¸A}¾y÷æ\ 6µs_X\83o]Z\17PU\ 1\9a\8d_t\1f\Ì'XØÿÇ>8\9dO\93ùl\81]\1foO¯ØÈ/˳ßÏþ\ 5\ 1ê\ eÉendstream
+endobj
+1212 0 obj<</Type/Page/Parent 1099 0 R/Contents 1213 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1213 0 obj<</Filter/FlateDecode/Length 269 >>stream
+x\ 1u\90ËNÃ0\10E÷ù\8a»£H\e§!v\96\0\89\ 5\12Pÿ@\1e\934Uc\97ÄAäï\19\93²D\96%KsÎÜñ|F\121\1f \95`\97¡ê£XÄÈ\92\¤HµâwÂw 4ÑÁDÛç\1cRÁ4¬dZÂÔ`<\8eaª\95\16¹À\a\15\17ÔTNmÛÙöÞ\9cYI!\99\fÊ&Q"ciõÒÀ\9f\bEé¾hÁá»ë\88ÚÙ;\8f\13]®ë\0XôÅ\\12f7Á\12Õð\ eåÀ\8dÑÙß\ 6\9c\83v²ã\1aã<zêá\87¢âºÀ\91(¤s¦Ü\89$d\9a[É\7fûEï8¯\e¨òn\98Å2ª¾\8d*3þ¹ÞAåB\a÷¸\7f=ìñ6¸3ãxtÕÔ\93õ\85ï\9c\râæ\8fߨ\84wQÿ·\8bT¥Be\9a7ÁÌC\1cÔ'\13½G?\88Tn\0endstream
+endobj
+1214 0 obj<</Type/Page/Parent 1099 0 R/Contents 1215 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 605 0 R>>endobj
+1215 0 obj<</Filter/FlateDecode/Length 1828 >>stream
+x\ 1\85WMoÛF\10½ûW\ft\89\fØ´%K¶\ \87¤NZ£pÜÆ\ 2r\88\8abE.%Æ$\97Ý]Z\11\90\1fß7³$EÓn\8b \82)îÎÇ\9b7oF\7f\1fMè\1cÿ&t5¥\8bK\8a\8b£óè\1cßðÇ\84?>ÿÂßÐ|Á\9f\ 5Í.¢ió\90ÓÃÑÅ|Á/ç³ðr1\8d&Í\13¿\9dÌa\82æÓ«è\12W§³y´h\9eø-\e\9c],ðn¶¸ÂßSü·\9aÒ£÷Ë£³\8f×4=§e\8aØ.¯\16´L$$|\13\8f\7fÞªÊkK×\11=踶\99ßS®\9ftî\8e\97ßäæä*Ü<½\98!Úe2¾\8e&\11Ý\96Þ\9a¤\8e}fÊprF\93IsRbÄÉ\aU¬\15¹ºª\8cõ\8eü\16\ 1\99<7»¬Ü\90©ø.¾5òb\93\9bµÊÉ\15ë(6eJ\95²ªÐ\b-X?§ëÖø,\9aq\18_Ã\8d?ù½ ,\1f\ 2³ÝÐÙÇiwcr\ e¨pÃ5 >³8¦·ôÕm\95Õ?j§íj\9cèTÕ¹_\1dÿHL¡²ò\87JÜÀ\89x\12'ý¤/ÙÇï¹VN\ 3ú\14 6©u9\15ªD^\eFÁRíø¯¬Äß\85b(H\95I{%1q]èÒ¿\9eÜ\98nîïÞÝ~úëîÃÝû\ f\9f£/òç'Û\bÏétÂ$Cdì3-\8a`iâÇ\8d55\1c&Ú«,w\ 4ÿ!_*L¢©Å*¢%ªö%+\13³s`\11Hü\9b¶km\8dkÏ·Gåb\88ãàuÕ¡\ e\9c\81äê\982ÜÔ.¶ÙZ'È\9f«ÿ<ø¶\86czwópúëý\97åý\7f¤8\8eä6\9dN/\ 31îS!\94Z\9b'}B£.¼·HÊ>i;¢B+&ÞVy
+\14µºa¨¡8Ï\80{ó6ó\1cË\92\19\8bXGÌ\11ItDë:\94ç\90¬\8a}ò|\8f";§\81i\9a\12\9eIÕȱôY\1cêlõßµvìà æF*Ò7\1cÂdäÙ9\ eg\16ÆÀ\1d\95$\193E\rQî\9a\85FìzglÒ$KoG!ÑÊd\92Vè6«Ñk\83°\ en\81Ë¿\1f XIÇ÷¨µÖ]\1eMË\vÐ\ 4Æá0ñë\8eB\9f\96Md'R¥\±ú\94\0\ 6\9a³ÇñJs\räH\97±ÝC\9b\12A\93SjêÜ\12ºÑ\15)?K\_¨D!®£iDw\ 62\18\9b¢Ê!&\rñDyØGÇ\8d¾äõ{\9aÅ\16½ó\8e\1eîÞ·\88z\9d£_Pµ\86+\ 4¸\9cWÖ×\15í\98S\aÊ\89Ù\11=£\91t\14b\82â\90ß\99N\aG"BA|G\83TY\19\ 2C\82Å\88¾l³xË) \ eè\r\eêEdu¬\ 1(H\93¦:n¤w§öý38\8eÞ³\19N1\ f\ f\14\rÝx`uæ\9dÎSH¾GÇã4\18K (\19{\14,8 ÕX¸¼§\r\88ãI\7f÷à;z\9dcjý>£\86Xjá\87mz,Í\ eÇÁøLFO\8f^Î[UnÐËè8Æ2EDÜ\8c»Ìo{\19\9d\ 5\ 2\93ª*kT@\aeãY%åÃT³{xàNæûh%\90/\11ÙÅÈÁ<Ës<®÷\ 3ð\ f¸\9eÈY~n\1»M \18\98\13½P\ 2\ fàE=A\\85Ñ\ÂÝVã²\95V\96ÉÉ\81@ ÌN'C\15»}\ 3\8bNbXà\9aÔþÀÙ4³Î#$ä\ 2<\Æ\14·\92ík§\ fY\07\98v\1a\ 1)æªs<|\9c\ 6\7f\87¼Cß`faH\1cÊÍíʶ\80±7±É©Ô\eÃHÂH#Y\f&\ 6'R\93¸KÌq\ 1®\95&é\80\1e\84\ 3¼5ÊÊ Å±®<k\88Õß@6x\ 5³856xÖ\1aãÞ^g, ìÿ\93A\93ËA\9c\156¡31f9â¦f[\0V\1aÊ\12¤L\ 3ï¡\v\87h\81;e£íÞ¢Ü\98\13¦,%*sB\ eæ<KÝ\e\8fÑÊí\bw£\90ÀY\88~Ä\ 3V\95\rÿ\82æ#Îò'v\8f]±\9b^|õE\92|è\14ë\15V¶d\8cí\8b\9fñØÍv¾T\80òYÙdß\8b\1f\14\ 3DÌúÔ\9aâ\99%È£<Oç\aÿ·az6`\85\1c\82Ú½\88\8aÓ\94ñÝ
+¡þ^\ 5µ1¢ù,ä@ªÀ\9eá9w
+خƵãp
\14ûîµùÈ[ÍR-¸¢
\9a#è
\a·¸A×;
\18ÎÒ½\ëæ
\81HRç
\93Ù!Ã
\16¼q
\98\9bÙf
\8b¶
\10®ó
\0\92\1c\ 6\1e_f
\14üdÝb2ì
\8f\17]*
\v\82ÊÁ
\80Ê
\918e^´T
\v ò
\97N+°RfhСA
\99ï¼
\f°¤7h6ØcèW¦L¸½i#j
\ e¼
\a\19\84m
\85û¸Î
\12LzÃÜády[8H:78ú@B{½
\8dBO6æXÖxõå.¦6ò
\81ç
\81uîy¨¾è²ô
\1d«þj
\8cÅñæFT®ÄPP,Q<´8ºªÊÛ
\85HB
\92\89ÀWWÇ
\8d«n¡{<AÇî$úÞ
\90\ 4°á
\a\8bhÞk/¤
\ f[
\88\ eh`
\86\85\99\ 6\v¼9A¼÷b\óÔ
\10Cm
\9dÛ]
\ 3³¯¯
\9a\9dø¨Ü
\80É2
\88äò
\v\ e\ 3\83\10\99tÁêX8Û
\8dQ
\90\17 d<H
\83\1e\ f@n
\1a<
\b®¦Ò
\88¸
\11Ûn
\ 5A
\93\87FxÞ!L
\b!¿3q
\18v
\87P%¬
\93\81CìùºÂd
\80Ú5Ë
\85\88Q#ì½½ÙÉO;ÖR¸ÀröHܦ²þtA÷D
\bÓb
\8d1¸Ç2
\10¶Ð
\81_Ü
\11d
\90GÉs
\9a³é!ÃZ~
\90EüT5
\18)<
\9c´E^øýÛmg
\18\845
\8a\88¸°hvû8vâ
\0ÀÀm[Gü"i'
\9c\0$Ø
\b\97Cñ
\9eOÞ°
\88\ 4\ 4T
\ e¢;
\ 6©
\11É2û>ì<
\17ou!
\9d{öqqø
\95|
\81\9fËÉÿü
\0\9f]Í¢«ËE
\10þù
\84Ãÿ°<úãè
\1fË
\fb©endstream
+endobj
+1216 0 obj<</Type/Page/Parent 1099 0 R/Contents 1217 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
+1217 0 obj<</Filter/FlateDecode/Length 1048 >>stream
+x\ 1\85VMoã6\10½ûW\ftÊ\ 2\89â¯ÚΡ\87MÛ\0{\bÐ"\ 6\8a\ 2{¡%ÊâF"U\92\8a×ÿ¾oF\1f\8e\95\0EàÀ\16ÉyoÞ¼\19êßÙ\82æø[ÐvI«\reõl\9eÎiõð\80ÿëÝ\16ÿ\97øxMÅìq?»\7fZÓbAû\ 2G6»-ísÂöù\9cöÙÍ©ÔØf"\99@\8aÚ ½Uµ¾oT\b'çs\8a¥êÖÚXj\eM¦¢Îoɺ\88íI(\95¿lNÒ/û\1f³9Ý-7é\1a(7ÏÊ\9e)«\f\ e\ 6
+ÚærF\87`\9cÅïØ6 é7mÉ\14\0Òxäß´g*\ 6ë\1c\9b*¬WXÈZoâ9¥}©Ï@÷µªªó\10óMU&ï±\17«tÉØC*th#\ eÐ\90QJ/ª>(\88\93!¿\0\À\8d\9b\81«¨2!\92+(i\1c¨\1e*=®\87$¥¿¡\83°í\12\9bÀ²J\94;Íj&ÑkM\99³Vg\11)'¬³ª\82#\953²ëÀ\ 5\8eÓgå\19W¤\90ìñíLÑãã\868üõ;gW´\15\15ÎOðK\87\18¹AvÑy£Ã÷/¤Xw\14\82\93\f\92\9cÎY`\86Iø!ý\9aP¨\ f)\98\16X·Zd\1e\15ãz`¯¥¬ÔÙk\7f¶õv\82¬\8eÊX\b\87\ 1\81?Õî[\ 1Yj\15³\92\83\16®\ 55 Í\:=Å\88ïÍF\8aááB¦:uØ\93±b\84¤·\8eØ\ 5Ù\8c~ùÆF\13W];\89a)\88\13úu¯\eçáS)ËȦó¿´\0$c
+\93´¯ÃvÊõ\99Hf\83\17µí\91T®CæÍ\ 1\82jåÑ$¾;|E*ªWX \81&¨Lä\93F}'#·\eLȵ\8fQ×M\97Yå\8e\yv\1e×hèòN\82\84\ e]K\19{$ýSe\11-ö\11\e\ 4/\1d1\9d\14\91\8e\18\r\85wµ@tJ¤\84Â\8b\92½Ö]\87\8b÷®õë\bg\99\16¾\1fÒ\1e \83\15
++åS\97Ý㬹ô\1ck
+4\98Ä\9dDÈë¢C °\0ªCDO/Ï\8f½]&z\8b\a?QlêÇ\7f\\8bÁåÚ
+²s£#®î2\87\81YsÌ7h\1c\95\97 \ 3ZxjÂ-us\98wô\12E]U\1dáÞM'î\81ÁØý\\94¹=¡jìí8g>\ 4Á Å\99Ð6\9d×µÍü¹áÙ$%Â\92ØUÔí÷Á\98×4L,ÑÄ\1eÎrõ\ 4:\91h¯ú\8c1¹G*\ 3s#irÅä\ eÀ¯¡\902é{\16h\ 4̳:%\16±To\10\8e§^Ý\18Là®Ö'\80O0/)\90¶
+Ã\1a\13Å\r\19\8a¸Th\15[¯oÅ\çwÁkL¬\88\ fò ºQ\1ew\e\ fB!\a2\8cË\88l\8b j\88g,^\88\8fù@G\19\16¢\84;zÕ\94¸3ù®2õ8\12¹ÿ `¨\18Pz¥µæ'lñ.(_\91Ø÷?ÐØ\85´ª\bË\1dK6\18®L¾6\ 3_\ 3\852\9e/I \83l¬:ê\1aw1\ 5Lò\1aeE»\9f@O\ eR<±ÚìÜ\83¦W4à$eÈ\14Î6\13Çß?íú7\8aÅ\ 6o\e»\15\16óîÞ}ùúüø\95þôî\a® úÝe-C*ö\18\a¼\e\ eÜm\97x\ 1Éo~+U\13Ñz\ f¸\98û©Ý\99;ðöõv\9dn7;¼¸`ë/K~ôÇ~ö×ì?\ 3\88 öendstream
+endobj
+1218 0 obj<</Type/Page/Parent 1099 0 R/Contents 1219 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F3 6 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 612 0 R>>endobj
+1219 0 obj<</Filter/FlateDecode/Length 1449 >>stream
+x\ 1\95WïoÛ6\10ýî¿â\80a\80
+IJe;vR´\ 3\92¦\192 éV{û2ï\ 3%Ñ\96\1aIôH*\8eÿû½#%ÿ\90\e`E\f'\12É»wïÞÝ1ÿö"\1aâ'¢Ù\88ÆSJÊÞ0\1câ\r\7fEüõõ×^4\99\863\9aD³pD%\8d¢QxÝ<\154ï\8dfWá\98¢á0\9c`u|9Ī\7fâÕëY\18Ñt\18^a-\9a\cÍ=ðÒÑ#Ö¦ãv#¯Ý.z\83ûk\1a\ri±\ 2¼éì\8a\16©C\857Ið)\13\e+5ü\84ddRëÜîè#¥ª\14yEøÌE\19\v\1a\85¯ï\16ß\9c¥hæ-õÇ\13D±H\ 3\1c\8dBúMåU^ITô´ ;\7f~\9bÛloaä-L(\8a\1a\v£Y8e\v7ÆÔ¥¤\9dª)\13/\92ÄþÌ+@é\17às\96\ 4=I{ûðeN\95À~µ"o\12\ 4;\93Áüó׿¢S7\ 1\10¥$´¤o'\b\9b\b\13Q\142=53¤~4ö±Ý}yì\98» m\96'\19\80\1aàüýîÓÿ\84\ 6KØÜ1æ°Ù¢X$Ïõ¦¥=Q\95Õ
+À´ñÖ\9b°ùô\118&Át)\80\9fÛ»Oß%á4ÊÀïìd% °ñ2\9aB\86HÎCEJ§H\81U\8eB²\99l\80^Ð*×Æ\92±jC ²I[*d©*Ð\ 3âu]¹\ 3\89*K<¿?Å\80`Z7Z)û\93_\8d\9at\8e/ÃÙ%4\v\10¦\8c7Â\98mJýo\ 4àÔ×ü\8béïÿéO¡r¼\bnÒ\12R4V\v«ôÏî\18\ 2ð\9bZñõ½í½w$s\vÝ\1d©ä\10¥óDZð+ö¸R #\13¶M×2à\15U\15;*E\92å\95ôË,\91-
-o\ 3ïº[åt?
-Ym0k7\83` ¡vµß\9cÞz!N.\178\18ØE¿\aP\v·e?÷;\8b\ 5ô\16\14\84×8l\17ýÖ|nõ\ 5á-\ eÛE¿5\9bY}A0\83-»è·ÂÐâ\ f¦!Dì\82·¾_\8dü·\80\15Ð*Eè\16Ë\eZ%Öÿ)âñ*S\86¶*ϯ(ÚQ"SÑäõ\15©ÒÔ"Çù»÷ßßaE/W\9f \a\81°zÆ~c*?×±È}#\8aH´ÛÎÌØ£{)©Î$\15\ 2\87[-\89\8e\9bB\96µ¨\95.I¥´Ó\r\9f\9bÒ\ 4Þ\84\805Þ\8a²¦Z\1f\997º\90ÛL"27Ò£wµEL"7\9a¢Få\895µUe¤Ê$!ùYÆM-¢\\92(\13ÊUT\89JIãµ(oû`LÂ%¢\b»ÁÂ\9b{ÀàÑ\ fºLÕº\81V8p\1e\97ÆlU\1dg^\f\89CEck\86½í ìM¶\82..ð4ä\1a\81Å\15¤{`TJ\99Hx¡©jJv¦=7wÆ\9dâäPß\98\12!\v\ 4³Î*ݬ3r BV\17I\8aõFµº¡WU´©ôFV¬h\10xN%§Å\\91Ñ\11\97ë\ 1èJëúÙ1´xC\9e×V\81otSÅÒw0|x\88Ï\7fvañ\90.þêÐ\89\81þwmJSÝ mª\86\17±4FT;v¥\10\8fmI¥:Ï5T®Éì\8aHç*F$ËÇ×_\a;/ib,\9c\v(O¿öÂ\8bÈïÊ\84\9bÆÖa,\8c$\9dÒ=Rit\8eÒ3ÿ\ f\9bí1\15\9d\ 2¡¶ýÎmyÁa\18fÁ\1cTw\83ÎGÑ\9dÍ\9f\r\ 4\1f\9a8Ù¾\1d/\9bÙ#8Ìï±ùð:ð\96ÓðKæ÷êN*Æ"sjN\91\1d\99¿\9c¡\ fz{EÂ\10Ç\80\99§o\11\99 Ò\ e\836öe\1d÷U<èx×Èc.Hð£ÞRcdeû\7f\8d\16Ü\10ø\8d©¦ë½'e\14ÓPZéâ´\aý縫ű7Óö·Gïw_\ f1U°\9cký\88ö°\ 3¦\17i\r¸ì2ú§¯ÊÛv6L0\8a,9Q÷³\11 ½äµ]±6\9e\14\96c\19&£ç¡\88ºrò&\13\89Þ\ eå/\bÚXµrt¢x8®À\97\17Ù\12ójȹ\1d\15ò,cÚ\13M\vp\1aFT¾ã´`~\80TJ$î\f¿æ ÓºZ\1fÇ?\161\88\9aÍ\94òsí¼é¦U
-É¥T\81\88L-\v\<"T\1784jjæ/\ 4<\15Ø©èaÌ\93\88Ë.Ñå\vf¶\8eîí\89\87\97Ý8Ä.\9f+DÙ0ì>Anz÷ããl'û\ 6óÏw®Ðä\89þ¦u%7ì\1d\ 5×\r# e~5ÇUvØ\8eÇÑ\11OBåvÎ"ª®\84m3È8Ó\86"\11?\92 \84\10\7f!\ 2ÿ¿8\83gÃ\19l\8aèL÷\r&ƽ|\92\95Èi#*QHD\1a%\8eÙÝÍÓ\8e\90\9d\16[j\8c\ 3¹®+\9dÛ¼F2\13OJW`ìÖ½/\ eÝ\ 1ÀöÄ`Rº\8b\8c3y\1c±U&1\1c\18b"M\©ÈÖ$\15Ú~S#\9cn\8a¸p>\8c\97(\ fT\ 4|\ãòsÊ\ 4\97lÙþß
-Ã\18\ 6TSèD¥Ý\8d@\95qÞ$ÇcÕqX\17¾ß×¹\8eDþ\a\19\19ó\1d¡¯ÊcÚp\82Îà\90\1d¾ñ<ï»s\eÏ \96³W#$hXØäNaV-\91QTU\9dÑ\8bW/®Z\12{óñýÝ»\ f¯Ü6+\foöDÔ\ 5Í©Ôö\9a3¦oé\15KN\86¢\96³\9e±!jT\82Fe\8a\ e¦øá
-Ác\0\1fR\94E\a\8a-ÚH\ eu8sPÀúÙ\90Õ0±ÇÿÍäú?\98´$yÑ&4|\85ÍvVÉ\12\17p\84\9aï߸ ôðÙ·ý\f»h\92\8fÛÌX öv'íÇÁ(p:ìÞ\83\81ð¹,¬ÕÓþòlC\rÚ¨$\1aÛd\12|þ0Ö%XܵuÊ\9d»#4.JW楬IÄ|U|xÉ1\19¦\b´¼É¹¸2<"\12Õ\17\84Ïk\1fhËÚ\7fþÆ\7fþ\e\1f\1cøÑ\9f³\0\¤}&ØH\98\8c¿ðßâ%h\9fCÁ5Þ\93Ë\19\1eWüpÃ@l\1f<?Wú\13Z\86Þ\f\1f>|r\12,ð¨Ä\81ÉÍ\14MÔ¿?h%\r\ ff«¬\\eúØØ\91s½Xz\8byw\89
-¦3VñãjôËè\1fµ\16[°endstream
-endobj
-1592 0 obj<</Type/Page/Parent 1369 0 R/Contents 1593 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1593 0 obj<</Filter/FlateDecode/Length 1089 >>stream
-x\ 1VÛnã6\14|ÏW\9cn\1fâb-Y\92/qòRd\93l\91\ 2»I\11-\16}¤$Úf"\89*IÙ5Ð\8fï\90\94rQ\9c\0\8b\16q\0Ã\14ÏefÎ\1cýu\14S\84¿\98N\12\9a.(¯\8e¢0¢Åò4\9cÑly\82ï þ\15§\95;\98Ï\920\19\1e|J\8f&\9fO)\8e)]!Öâ$\ e\97\94\16\84HQDi>\8a\17á<\9c\86³\90~\97¢&³átwþåÓ9i®¶\\91\91î·ÛË\v*dÅDýKz\8f\90³Ç\90A²@=i1ºª\8d}\1e\ 1V²,åNÔkÊeU±º°Q*öÀ_\87¿ï\93>%\18ÓnÃÑ\95O\94t\89F\977_ί¿¾Ì>"¡]Ì\9aUÜ\1eE\14ÄS \80rä\8aö²Uô]Ô\85Üé®z²Õ\f"\9f\17\95¨\856\8a\19©\ e$`ýÝ\16\98 8I\e¦\89=Ý\12[N\8d\12[Qò5×äa\1c\94ãÁ\v}x\90Ú\11ò\88\9e\92ÒüìOç}Ë4iµ\9a\942gåD³*c\93LÔ\93\9a\eRMN\ eºà\8e,rÁ7z§\v Ò\93\94\82\9eFÉ\ 6\8d(®\eYk\90â)î¹Ò\eÙ\96\ 5eü\8c>XMpÐ\87[¾\81!v\aYùð\83\fZ\9e\ 6pù¸dyí0{\12q\90,½â:íÎCº3L\19j\eW)\94\a\9c\8a\82
-Æ+Y;Ê\r×\86\84ùÉ#|H½[^\9b\96\95å~luC;Q\96´cµqÚ\95\85Xí½\9et\95\91¶é\90MçJ4î Ö\1aL\87\11 ªÜC\ 1[Ù©}PÌ M(ÝÏ\9c\ 4Ä\8a\1a\84Õ\ 4åv#hÓ\8c)kméVê\8dÔZd¥§Ìv$qtßâ\8be¨K\85§\94\11è{%\946!¥Ò×\vx\86Ù=PnÔEÎõ\98\80Á\9b3\fÍ[\91\9ey\bÿ\93\84{PÞdãú¸"VîØ\1e=3Åj)
-Gc),¬\9d\99è\16.á¤éy\ 6@\8a;üU[×°\9f0üÁyk4\ 5\8cÓ?´V¼éñ,Þ¬2Ý å`l0\E\9bsËL\ 3r|ÁxnLb5,ÖWÙ\91ÒOè4Jæô+EÑ\99û¼¨âÙ \7f\95;´\a«õ\96k\e'+ò1\19µ·\10a\13ZV\1cbÄCV\9bv\142«\18\8b\99õ2Hö¢\86\87ü\1f´bìV\92\82ö}Ä:\83á9\9c4cù\ 31Àdż\1aTõ½³îWµ\86ô\19}ó¿YÕ\94|L×®YÛÕãæé@í\97Aïu\8fâ=õû0HfÞJ.®n>¾rP»M"·/Gö<kUÁ˲\ fýìä·\16È\1føýÞ\ 4ÌÉg\10éAef}èBª¯í\ 4Ââ¿\81\9f\ 30ÚÍv\93m\85lµuªk¬",\1fk\93\ 5UûÞ¤\8fQî±\e\18üæ£<îÑÞ%4·\93uxã\1d\7f<v\93óLo\7fÂ\13sV#\83\93\ fÖ\11\87¼`º`Ílì®ï4·V\12Îø\t+%+w *{\93\80gû/&ÇÎ4\ 15xG)F\a×à®\13ÛÚ÷\17ùK\81»õ\82¶K÷Úâ÷£>@Rwn\ 1\7fçØQüÎù\85¬0ïï\86¸\90µQx5:üÐ\ 5\a\98·m\86QÀ*p\99&\9f\97Ý«@¼ÀëÞr\8a\97¿8\XHü\82¸Uò\9eç\86.eÞVðn7ä¶Å ¿\10\9cD\0³è_ó(\85P-Y°®zé¦u*\9c-\96áb\9ex´ãhfC\¥G\7f\1cý\vV£!;endstream
-endobj
-1594 0 obj<</Type/Page/Parent 1369 0 R/Contents 1595 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1595 0 obj<</Filter/FlateDecode/Length 1121 >>stream
-x\ 1½VkoÛ6\14ýî_q\91\19\8d\8bÅ\92_q\9c\ 2Å\90çV¬y¬\116\fË>Ð"\1d±\91H\87¤â\1aëþûî%¥Äq¬¶ë\1e)RDâ%yî=ç\Ý»V\1fzø¯\ f{\ 3\18\8e!-Z½¨\a£ýI4\86Ñd\ fÿ\1eà¯\110k\1d&ø´\aû\90ÌpÇx\82\7fpÀè^\ f\92´strñíU\9a\89\82Á\ 1/¤²/\93÷\1etû½h\82\81~ýD9aæFZÑ\1có½Ñå\1c.u.Ó%\1c\19Á\9c6p±PÂø\13ãÓ\11ôû\ 1Bw0¦\93\93\fÑ\95*uR+ؾ\11N(·\r)S ô\ 2¦\ 2J+88\r¸\ 4¥\923\89\8f¹´Î\82\9eÁT»\fr\9d²\1c\98âpy|DñÆú§\e\ 2c#HÌ\12\&ê\94\86Ñ\80.\9eé<×\v©n ÕE\81»_Q\0Õh\ 5a4¢P£µû&¬îV«\1dÂ\83Paά]ð°ø$¹°õW]\82Ít\99s\9f\0óÐ\11\rs\b[ßZ|¾\15°Ô¥\81§×wbáÒxÓé\9dpFÀ\8fÅ\98úì\80ë\82IU¥¿\90X\17ÌY\1aPbA'\13\99Uæ¥äv\anüÿ\99.\ 4piD\8aLI\11
-ÇÅ\8c\95¹Cà"ÏmTm\1f\8cCJÄ\98e¸Íe¾zH\15ÒĵB"\91íPu¨\11ÔÕ}\9a\1d¢©\8fûTqýYaçþ
--\93\0¤?\8ev£a4\8eàT~ lA*é"\ eÖ1ãP\8765rî*åí×Úï\ eFkûû\11¼\95ªü\10nzÂb%Ñ°òH>êf*\15_ã½\ 3\9c\89\ 2u¬\84à\96Dë\91\0Ba34\ fa\?É\16Óg§ \18×ÃÔ\86°p\19R\86\ 67¥RÈ\ 6\8a]\ 3KQÑsô\bI@>X¹bß1{»C\8aó( d¡¹\9c\ 5\11U\8e,æµi\97Ö\89\ 2OÏÄÒßG\9es(>Ôq\80ZÛ&è6\10\11craµ®i\a)¢7+j|'ø\ fx
-Ù÷S'±bÊ\9e\9f\ 5Çb*\99\8a*ª)\eÆy9O\81T÷\1a-F\95¨éA\9b\90ZæFÏ\85Y\83cÅ])T*"8[® )<Z¤3\0y\94Ã\ 6\12wÖc60¸CY¯Ç5Ikftáa\87\r\8fõ.\89}\v\8cÑ\95S\16£0CH]ô\95b×N_V\9eÏ\97\9eSØöÄo?vâªDÁA«\8aêøÐ)«¯É\83£ü)×\9dë\97ð\aA \8b«\ f\bT??¾9?~½uuv¸Õ\10 ÒLCWA{ë\8a\L\1d¦M\9b\0Ûú½L\85}\ 5M[+óÅ\e
-BJäÐÆ{\8f/.\937\17çW\r׿;I~>xûºý]Ã:ÁkX
-©\9dÿï©\91° \8d÷~Qj\83\7f\90Û/¡ë5Õÿ?¢nÕ\10\e\14\15\18\e~UZ¿A;l\87®¸Ã±¨Ëê\17\83go\86Õ\9bßáÅ\vì3e\9aA|ϼõnc[N±E\92ÊàãG¸¾n\90\b\9a \12X¿!Â\bW\1aT\7f\b[\vú\93\9e\ef(t°\9e¯\188cøaÀFh\8c°s8\19 ç\15\1a\85ð³\94\95\ e¿Ø\8bÐ\akgù\1eLS TcÉg¼®çÿ\9aÕ\11\8f·ºÇô¥~¿\95y\8e=<\85ºý6ªã«Äñwüüyüñé¤\9a`úc\1cÌ'C\9cÁÇa¸¾:8;<\80K£ßã\14\ 6Ç:-\vd\8aÑDL\84wë\rݽ\1eMí\9djî\81DX_´\84æ0\v\17¥£ðÑ\18§ÿÝ\ 1ª\99B{»ôî$iýÔú\vÊódZendstream
-endobj
-1596 0 obj<</Type/Page/Parent 1369 0 R/Contents 1597 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1597 0 obj<</Filter/FlateDecode/Length 930 >>stream
-x\ 1\95VkoÛ6\14ýî_qj\a\8dSDO;\8aÛ"\18\128\ 1\8aí6\eÛ\87¸Ce\89\8aÙH¢"Rñ\82mÿ}\97\94äú1u©\r?HÞǹ\8fs©\87\9e\a\97Þ\1eÎ}\8c\ 2DYϵ]\9c\9d»v\80ñä\9cþûô)\19\92ÞÕ¼çܸx\8dyB\1aÁ\84þÄ i×Å<\1a¢yÝó4-J\11!Ï\96ñÉüKÏ\85å¹ö\84\8472¿^Ï\7f»üÉ¿8ú¡C\80E+Ñqôã»\ fÓ\8bþï<_ò<îw\bi}X9\8eú³U¥\14Ïï\10\8b5µ6$+\1fyÄä\etéo\82X×~¾\1dȨ;\90[\1cÕÁÂb\ f\945+l7ü\83\9dQ³ó /_¢Ì`%p\1eÃÒIEtïÈj)\9f¤#³å·Bîw\ 5T2U\95\14\7f\rfÏÄ?zíܼnKkù\81®\96\17ØgöÈ\ elßÆL¤aÉe-8\86çÕMÐH~Ì!k\81S<\89
-9c1
\94@&b
\9e<A
\18jMj4£9t
\98\8a\1c\9eseÇ
\8e\f³eh뢰r×Á
\10R
\85¥ª
-Ȩä\85²ñN¡\92U\98¦O\109}\99s\ 3K·ÙÈö5pJR\8c0\8fM\vbY)È\95¨RZ\8bu\81¶®\84R\90ÕÄÀ^\85\8f\f\ 6\rxN\96Ó\94Âàù.ô-?N%Mu´\8eÁ¡\96Ü\vàÔ\ 4\9fð\94!2\10"\91«\90¬SÂ2¦Vº3S~ÏH\8cË7§\86b\96?¶Ç: Á@\9fl\11i0¨qnemç´\11÷=b1éó\ 4·x\ 1+\86\81L0ñiÏ"Õ(o)¼ý;0*\949EÕ¬rź¨ÀþäjÏfÂ÷p´´Z\f\17'øk×\8d>3ÉÊÃ\8cÒ®G\b\93r1drq²g·U,x|ñ¹\8dÈ)$ñ\a\7fwÈ\1a\9d\8dì]É
-Xk\1cyÏT\90\ 4\89¬\1fKç\ fà\95ã\1c7+Øzñ¹Ãé-úG\ 4²\8f\17\17è÷a\88mâÔ»{:\86\84TĶf\ 3Ìtï;R\89¢Í\ 6\934\89\1f*^\12\9aD\94M¯~eÎ\96z\14JFÞ½~ÓÀ[GÇ\864Ç\ai=h2\Ç\é\9a\90©\94çä\9d8-+Ú#\92\97-GBÅE\8eÅ°\bÕJ\9eb-Êû»RTÅ)VBªÿõbFµ Usaöþjº\97\18ªÜ\7f\11M\8fBªÉ\14\96Äbq¨óµà4?7\f%%\9b(\984òm²wA|x>\b}É\19\10éw\80¨\87ú\9dF~\10Ù³\06·\1f¦!Ë\84\199TÞKöÀ*1ÞiGÞaªÞ¾ÝK\au\88(\ e\e\84RÚ2¸ãvß\1cëâ\1c:Ú\1c\7f\a\96Wu\a97\93æîð\ 2z*\99\8cè\ 1¤\99\8e³Ë÷W\97ø¹\14_X¤0\15Q\951\1a²º-5\ 4«U°Î]ýÈÒÞk\983i\9e\fæz
-K|¬Ìü\1a\a\13;8óé®Ö¢n M\Ï{¿ôþ\ 5C\ 3y\87endstream
-endobj
-1598 0 obj<</Type/Page/Parent 1369 0 R/Contents 1599 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1599 0 obj<</Filter/FlateDecode/Length 1552 >>stream
-x\ 1¥WÛnÛF\10}÷W\fÒ\17\19°HI¶%9AP$M\8d\ 6H\90´QQ\140P¬È\95´\11ÉUvI+BÛ\7fï\99½H$¦\ fM\10Ç wçræÌ\9cá\97\8b1\8dðwL³ ]O)+/FÉ\88¦·3ü¼\99óÏ þ\19I+÷âön\9cÜ\9c{q};Næý\17¯\17\17éý\88îh±\82\8fé\1c¿ä\ 4û£\11-²\ 1\11Él£éÙ¯V¬åsJe\9d¥ªRu\92§V\94K\91Xi\1e¥¡?ÉÖÂÔô\17þ×;úûÙåâóÅ\88\86ã\11\.r6ôâEï\99´"ãGéý]ô?\9cLùôx\9aÜ&×É\14ÿè\17é,«jíÏÞÐxì\83\r\87ß®è \eäï#¨7Ò\1f¼\r\a\adËeÞ½<¸ê\9f©Î\9c!Q\85{'[{U-U\95÷íQ.d©+K¢¦z£,í´ªê+\17\99Ýè¦Èi)I,\vIµ¦LW\95ÌpRã°\v\97¡ºN&\9c¼Ã\95\ 2®\ 2\16)×¥P\15\95²\\ 2êÏ\8d Ï\95Ï{/QyA\85ÎDA\r®%>µ»\16Ns\10â\ 4ë,¡\1ftµRë\ 67\7fóùpªôñÕû.L\88j2õw\ 3Ê\eñ(©\14¹$\15\12] ãÓÜVz\8ft\0@ÄÈ\19õé\b¸Úk³E\19\91õZ"m\93P0º\17\95Ã\ 2ѳÿ\16\16Á\12\ 3µ3úQÁ¯hp·ªU&j¥+ZiC\9a9ÄT&í\15m¥Ü\81\ f"\87·\84\16\eI;Q2è.çpO\15ÒR%eÎÆ\97}Ç¢¨\81kN\80Ý\95ÓÖr\97ÐÃà\8dÊ\ 3ÛB5p¹\14[IK\91m\9b\9d%íª\82\98\8cZ«
+\86\93D\1a\ 3\ 6\19ÅQ\ 6\8f\9cÌo\1e)\15VÄÂÈå;ÊM\13_H\v\18÷èG?\12bÀ6ØA¡Ö¨cW1\88¢\83 ¥Ç\ 5\85Ú\ 5RUWöHäl¢\92\8c_è\1dmtþ\92\17r\8d\10\15\894m#æà\9c7_W!=¬ð\b\ 4ø\98Ú\85¿ª\8b\8es.øm\ eÝ\18É\94I\82\9e\8dXË·U²×Á{×pdÚæ\0bpÂ\1dÜ·)>Ò\16Â\87+$MjHC\14pZ¥j\eÒÜûu°N\9bµ^S@{oËàjùît\97ëën\17tM\e v\14\96
+\1aJ¥\15yaº\95\84Db\11\84ÈWÈ\93\9be*_d¡6¥\ 4ã\89J\1d©Ü¦ÐY\9aþÄ}OÕ\96û"\1f\0É\89\96\ 2\92rtµjÓ5ª°M\9dr\15ס\9au\eK(Wf\10\ 1\8b
+8\9cK\97\80Lm$ò\ 3\ 5ÇPë\vÐ\8b¸\90d\14\8c\ 1\8e\96\85\84.)Ö¢J24\1dW/Eq\1e¡³êJ\9dÖ
+\em¦U½ÎNà¶@÷ÚK\80 üm´²*QÅ\ 5ï®|éx WrKË\0ÎÁJ\93\88C\8fnkî̬¯S ò3¬\99$yÅÊEçB|\b\8dy4<MÒ\Ë\ 4\1dcÇo}\8fGb÷\12p\a:¤nU]¤Ì\18\1a \86\16ûT)]¢\11îèm \ fj£\a\85Âà\19Ào,\ 6\RÈ(Ûþ®z\1f\ eCx\18¾:r\1c\18WÑ\85RÏ\86\8aü\99\15\91\9bÆmÛ(\8ejà\ 3Oå/\8f7\ fOôtóøù\17ïn?9\9bâi\ f\ 6\1f<gs?}\9f@ÐÙ ðþ&fH½;\98³ý(°zµÊ1ã-2k|ý4\92>O&ò\85\82U\9c\1d®eù*Ê\rR(bõ"\ f¤Ð>'~²¿\9d\aî\18î¾p\ eì\88¶#òGì\ 5jrÊáÞ\1eK¨TËM!\12$¿¹¡,în!Õ\ 5·I4\9a»CGwÇ8gi\97\19Ü»´´&´i|JhðÝúòÊEõºF\80»\rF\93ÚV°\eï\88Ǩ{\ 3 \15þÄ\9eÔ\952ÖDµ#\ 5½kªQ\vhѶ\1d\11ÏrwÚ¿û\ 5w&Fs4ö÷C.,×PÍÎXY^8\87\ 6}ÊW\83m\81\ 1#Fªï+àK\90É\ 4ú.º%F9f²£²\eã\93Ú^4
+è!\ríZ%ש×d{½àéQrã\93in=\1e\aø¬\91\ fî÷2G9\87¸]\96Áå[\rýP\83\81O5\ f6¹¿ÜÀ\95\8f´CN\85¸@kÛ·[®ºÑá¾Ín\19\80B\8cOLzGä[À÷õØÚ£\8f§[Û1t\8cºà\e\bÊ\84)û{]¨X\14ÿðåÞæèæ¸4ûÔ5LpÞY$M¡\6W\8c£\128¸n\82c\ 4\83û«ÃN\¦ÜUñÇþ\99\98Ì&álzå/x\97c¶úyÑû£÷\1fC\87÷aendstream
+endobj
+1220 0 obj<</Type/Page/Parent 1099 0 R/Contents 1221 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 621 0 R>>endobj
+1221 0 obj<</Filter/FlateDecode/Length 1714 >>stream
+x\ 1µW]oÛ6\14}ϯ¸ËKÝ!Qlù3\ 3\8a!\1fËP`I»ÅE1,{ %Úf#\89*IÅÑ¿ß¹¤äØrÖîehêD&y?Î=÷ðêëÑ\80úø7 iLà %ùQ?êã\eþ\18ðÇ\1f¿\1eMGQL\93Ù$êSN\83Q\7fû\94ÑýÑî3VÇÃhÔìõ«ã8\9aÒ¤?\89f|ö|\16\9d7O~uç9§x2Ú_\1dLpv<\99Â\1fÎNΣqóäÏî<ãì`¼ÝË«»ÏX\8dÙo°Ä«È\8e\86Ã!>G³)>cü7\92\96~a\10\8f\11lg!î\ f\11Åp\84\8d0\a\b¦áÁûzyäµóýµí#Ö¦çÑðåÜåüèìfD\83\ 1Í\97(Ád6¥yê\91ïÓ<éÝÉgGÉZ\14+In-éíüK·6fEg7qc¡G\em\1eWFW%½Ûßì«é7·îz\94©B\92*¼é¿V\99^\88ìo²2qJãK\r<Dú\13\9b9»\19oc<\8d'(ï<íí¸¢ë\ f·a_k¼OÛ}ÂÂ\81²\84\1fΡ\10¹$½ô\7f§:\17ð¿\91$\80ý\17
+U¬"\1føËù?uEye\1d\89ÌjZ\8b§\80E)\f,9i¾\8f\8a,\12S\97\8eJa-¢Ní÷¡±Ò1\ 2!)´\81/P¯\96þèKÉz\f\1f,"\8a¥6TëÊPe¥Aª\9aD\85|\v§\12ád\93Ó\80)\ 4ì°ÊXÜÍéãõU7á\eU\88,«OH¤)=ô`7שZÖ\ foI|?Ù6I\14Ò<!®ÿ\9d\a\a\ e\99\rH\8b\7f]^_\r\9aßqÀò\15\82Ì×Ò\ 6\ 60&¥Q¹05\89"¥\85H\1eAå\86&\89.\9cÑYÆðÞ\8b|!h£²\8c\84s2Gu\81)ï\10\89{)Ê·«à+\15íÚrp¼cG\8adÝp\15\11\ 6@Aä¦ä'\ 4>¢ä\94\8b\9a6¢ð! g\8ci\1a\16\8cÏ\14\88Û\1e8$\81-¹ÇHW8\8bÜw\18Ã-\98i¬\89\\17«W è²æ"C/\14©'ÉÜQK\1f\9a\ fËæ\8b´!$\1a\8e zQÊÍ\93³\ 4°k\1f(Úò:´ä.Ö\0\ 4H1Á; ì\87{²ÅÂ7\ f·¼\17\18\1c_Húw\1d9äÏ\8fß
+¬¢ë×:=¡ÍZ¡<\eè\8bbb¤U"SÆ:p\ 3\82\1eMÐCY¦7-_\9aLä3H\ 2\ 48oËr\94K\16Yes|%\'K4iª¥\8dhÎ)\ 5ç$\15\ e\eZ\18\94(\11ÖY¨\0£dÑ¢\9fßßÝS*\9cX\bÀÖ\16\9f\v°T õ+lvºãs\aY°b\ 5\91´®[ðL\18i\9d0.¨OH>\15\12´A0ð·\82\941Ëj/QI¦ I^\9f\16r\85à*\vÍm\83\82øWF¹ú\87P\81s\1aàBâ\9bé\14÷\9eWý\ 1®þ¶eØúg¤Ä\0Ç}\f
+\81<\1d\8dä«`\1aMXönEQS)u\99É äÂ>¢fF®\84I9\f_\11\a½ä®ó©¼A\12\v\95!&\ 6\10¢\ fúª\92w v`}è¾Å©ÕÚ\96\ e1ß@b\ 1×0Ä*\ 1â\bÔ3_ \90\8dXÂkÇfS-]J\83ÎA\88p\9b«gD\8d\82\87vcy\96×öv\9c\83\1e\88\11\84©@R´Ó\12@£§\17Òm¤\fwn¢LRå(^\91\808L=@ñµR8(èØ{9öÆ9Íø\91 ©\f9t\ f÷
+ö«p\91Ñi\9bêZCm\12Á^Èn\94KÖ\88\13Ù\1e\87@\83±\88.^3~@K\ e^\17h\93BÊ\94;kÙ¢Ý!+\1a\ 4:Ï\99»|n\14oÛ\ÁpD\97,9KQe\ e]ù\92\11ðÜ\v/\88ºu,í¶*Km\ e\1aRºË÷\1fî=\16wóßn\9f\ 6\9eÙ;=Ã@£\94\19x\95ÔÔRÞr%Pô\963çÏ\8d ÂL×rzíÇ\95î}íU¢©MîûÇ\93§µ\ 4\ 4üX¸Ë¥W\bAÖÉÒ\86`SÏw±\15«\98|ñ\98\9a\r6MAx2Úbé\83ÓA\8cy<`B¶6\1a
+\1fjÉ6á&̶ h(°|Ndé\87>\94ÜÓ\90\1d\1eß\87\ 1\ 2M+VÒ\1cÓÒè\9cG\96\11z×\82bà \91e&Xv\17u\87\14ÞÂ\ 5FI\8ck×`tâ4îÖO\b\12]\a\12_鼬p\ 1Ùcº½½Â\98s«\12£^:
+\ e\19fì*¬Î$&\9f2« V\1eÔ³\9b×ui\18Ñçu\1dæL$\82Nãé\10ù\14<Ôz]£wM§ÿ\1c\ 4nw\1ai4êª2\ 6®ù\ em*°=\fª6ò\8aû xã\80\88\94þÖóÐ`4õ\1a\869\ 4z\v\85Ê4nZúT¨ç\97¡\10\88A¯97 ÔÁÌÏ#<Ï`ìh,ù\892Tv{\ 1 \b»¯\12:² \91Ov\87U\8c_\ f\ f\880ÝOµ×8`Åñã\8bi\8d´yv¢
+)\87\18N8j\10\92%Á\9f\87Ð\88n\9e\f\8b\97\9dÝ\¡m>H`ÈÔð ,U&m\8d¦È\9bÜ\ e\ 4\r\ 3lMVå*\13¨d\18\9auÆãv\eUSW\96`\1f÷þ\9b+^xz\87Åßßؾ\19õx¢àä\82é\8d®²Ô¿2 `¼QÖ\1cxÀrÖ¼\10\fðbÚ\9f\rñÞ6æëíþâöò\82>\1aý\ 5tÇe\bqG¡qmè\82Ï\9d¶ÛO§1^ïÒÞ\7f½KGxû\9eNf¸\86qh<b[¿Ì\8f~?ú\ae9Íæendstream
+endobj
+1222 0 obj<</Type/Page/Parent 1099 0 R/Contents 1223 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R>>/XObject<<>>>>/Annots 628 0 R>>endobj
+1223 0 obj<</Filter/FlateDecode/Length 1331 >>stream
+x\ 1}VMoã6\10½ûWÌÑ\ 5\1cù3¶S \87d½)\ 2t³éÆ\8bôÐ\v-Q67\12©%);é¯ï\eR¶e\15)\82Ø\96HÎÇ\9b7oø³7¦\11þÆ´\98ÐtNiÙ\e%#¼á\8f1\7f|û½·¸IÆ4\9fÍ\93\19\954\9e\8cð\1d\9f
+zîµ\9f±:[$×Õé|\9e\8ch:¹Iæ8;\9bLa)>ñYx¡é8Ú\9dðÁøÀKG\9c\9b&\8bÖZ뱤å8¹iµ\1e\11Íx\ 6¿g£Áßh\8ew³å\ 2¾'ø·\92òÞݺ7¼\9fa?s 1_.h\9d\ 5\10F´Nû¢ö;©½J\85WFãÈÏZ:OÞ\90 \17¥3spô¸&'í^ZR\9a°\9d\9c(%\1dÄ; ×ÚvsMÆ\9e\ eÝ,\9bC¿¬\7fôFt5\9e&\13xî\1fL]dIórÂ\0áåS!\85\93ð\9eà |ÃIØqY/»¥>Ûß .ªD%íå¦PÙ°)G Jã³\8ci!3AîÝyY\86Ôjox%\15EÁI8µÕôýñá/ªU\86\94`~Ë?¼é\ 4ßBd\ 5\v\80£\ 62Í kêÊ%´Þ)G©É$á[ì\85*ĦÀ\83¦Lîeaª\12xÓÆ
+\9dî¤#£9\ 4 \ e\KÃk\83\8eÓMíé \8a\826¼c/3NÁÊ\bÙÉ\8e3Fwa]æÈöB{±\95|*\vA_\15\1c\bÊ\93ÖVùw\8eÓï\9a\10:|à¨?:S\ 18\ 4\ 3\8a\ 4Vt¢n\19¦oO\9f(Ý á\176å\9bH=ò¾ S\88Aè\16Ý\ 2Wà\80\94op-¥Ð\8e\9eE¹A=\ 3']ǯ6\ap⸪\12>â\1eKåm\rf\ 3¸À ·S\95û0\96\13å\1d»ÿ»¯\12\99\fèÝÔ\94"B\91e1\86\8eï&"X\rýc¥3µMe\ 3aàÕNìQ ®Ëeã5`\82¨¹5%ØÚ=ü´ú\14¨«;>E\9a\9a\1a\84\8ae"lë²à!\ 4¬¸¿\a \92ß±\85áýu£ ý3\11~kµìY4ú\ 4ºØ÷\ 6õLÈ\12QÆ\8e\8aª°\83\f áW)+\ 4\9e\1aT9\rjb* j\9cÛù¬\ 2íìõ¶qKܶ°U\18¼b\9bLÊÆ_!\9c?5\17J\90Yî>\ 6²åï\88\19w\15"ù¢Rk\9cÉ}\a²SqCER\81\1e\ 6Ã8P[#3´\9bÉ[\9d{v\80\0^þ\1f¿X\85\bðQtû\ 3Ú\99\ 3c8\b\ 1\aövB\8aY²n\ 4ð\1aи\9aÃ;\14>\88D\a\1dt-p\96Î Ô\86ùv&Td\18KÓ ¤\b\98\181S±ÿ\8eçsv\1c]\1dB`\1e+Ô\809w^?QÒu\19v\vÁÌ\95f5\85CÔ\1eg\9bê\84QQrã\87Ò^´w+b>Á9\ 4\97±É£\1c¸ÐÌ\\90ÿ\86Þ>\8f\82[Y±\7fæD[ h+=sI\ 6&\95ñ¸Ë\8f\ 3¯=%\\9dî"ï\9a½Ï\ f«h¯PP\ e\93w \ 3\8f¶AôÏÖ7\10x½åv\18\90ôiB·ÐmÏ\13¡í(¨9Ð\82TÅH\91:Ä]¾y©3¨e\83]^û\1a3<ªIÇwÉ\ 3\86\93j\86
+O!ȹErÐU\1el$ªªP\982<52\99\10t DÂO\ 3Ò\ 6}\86}ô]«·f\8c\1d§Ì\89W\81>\1dÏ1â°u+QV\16Ùhãbv\ 6\19ã\0Û\897*·\11ékÔ9ÞÀ,;0CES¡®¤·ê,³\ 1\95â\95é".«\fuGâUQc\85¯\a\ 5®'À1\12®\11G©÷Ê\1aÍC\16\9d,<ÊÍM\15Pá\89ÝÉô4R\87÷óÓ\ 5êêxgyüºþü+\9fh+å\17¦P$+yÔ3þFù3\93Öað\1f l¹²àSUoÀ«Ý¹Þ/r\83ä¶â\1f¥?¼þü¡týöbl\91\85`O\17¤óÝ'\b'æ\v\8fÀâ\ 3;ûØÊ\84ÞC\1d\1e\1f\9e\87 t¨ï\aÆCã\ fï\97\r\1aã9®\9aË)ÍF\13\<q\8f{¾ýrwKOÖüÀ\ 4 U\93s\98·lñêxàj1Áí3ë\8fGÉ$iêÈU;Þ¯&#\ÏWal\a2Ì\16³d1_âþ\8aC××lëóº÷gï_@»\9cendstream
+endobj
+1224 0 obj<</Type/Page/Parent 1099 0 R/Contents 1225 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1225 0 obj<</Filter/FlateDecode/Length 1616 >>stream
+x\ 1¥WMoÛF\10½ûW\fzrÐX±dYrzK\82\ 60Ð8n =ä²"\97âÖä.Ã%Ũ¿¾ïí\92\12M\a-ÚÂ6l\93»óñæÍ\9bÑ׳¹\âk.ë\85\$)Ï.g\97r=¿\9e-ey³Æß\vüÔZ²ðbq¹\98¦/ÞnÎ^½\7f-\8bKÙd°µZßÈ&\15عÄ\93äü]®ªF×2\9fÏä\935\99Ñ©üâvÎzÙê¦ÓÚÊgcS×y¹Û¼Øüqv)\17\8b%L\9c+\9bʧ»ÛߥõÆîxj\8b\83<B\7fóuôwqµ\9c-x\1c\ eàâÍÖ7µJ\9axl ·ý±Å\1a¡ãØmô®V\8dqV\\16\1dÐÓ\a\93Ôλ¬\19\85#M^»v\97\8b\92¶\ f½`è\92+F\8fÐ\13äaR]#)%?ä®8\b\8c\9bâ\87>\93ùU\fÎà\8e\ 6\fn§vÇŲj\eæ¥íÞÔÎ\96Ú6^2WÃPáð¼1¥\9eÉg-U=^Æ\8cV}FçÒ\8dñ\18\12=\7f\89ë´í,®0Á&×ò Ê\9aDä[Óh\1e¨\10TJ/ÈI\89w\ 5ÂB\8a\8d\vW\9fæ\8d³ÛB\97\b+:Gi4o\852\99²Â;¸\1dÀ\9dx<!üÛý;ITQø\97r_´»\9d\82QyÓ"TÛ\98$^ÿàÒ¶Ð8Áâ0\89;U"\13]ïM\82ß\9di\92\9cAÂ\8cëF5\9b8M]©\0>â¬}8^UZ\ 1c\18u\95\ 6\ f4óîiÆ3H½Ï§TIn,j°É\8d\97JḤÚ'µÙ"i\864*\ 1X;ÔÚ\1f|£Ë\97¢¿U\ 5|³Æ<\9cµ6!²ª0ÍALCà÷à\ eRÌ\91\ 1\1eÀ\vø\94\99]\v>ÅÄû7\9d«\1f½\18P·Æýâ0\8bdxÚ\ 5¡iÐ\ 5\8b\99\80ä5ð\vþâÑ\81 쮡\13\82ÇN\17\85<Zסä¹jþ¡!rµ×\92\9a,\ 3åÁ¯Ò¥º\88¬uÏSæK¸\89ñ¤\18;tS\854Àò2V\99uÀá\91ÉF'¹uh3\ 3\90Ù\ eGZõ@\82}¡ \19º<4b©RMø\18\96IÚ¢A\9d'\8e\89\1c\9b^\87J4\9d\93X$bJÒ#\18O{®>H©¬Õu@\98` \85\90\8d\8fV³¯JÐãØ"\91Wð\96ªÃI\12ÀɤÖô\85â\ 6>£`bÁÞ\90*pI\12ײÙakë\1a°\18ì\b\f|\8e\18ú,Hã\10î\80\17¯\84®\96ç}\8c\0zjIfÐX¼SÕ\80@P\15vÏIyi\ 6h\fÉ\ e\f\ eø\9eÒD\1dÐ2YíJA\ fd\9a¸»Nïu\r\92¢ýÓ\94¥¡\e°A\aQ\8bý6$è5³Í\0mè(ú\a\96T\8eI\9d\92ÜaØÐR¨Q\7fRÞ£\ 3R\9cÇÛZ\7fm\r\ 57`\a«]n \ 5\89²Rh\85\9b,®M ÜÖü\19YÖËÖ\93¼'\9e\aü\8fJ2F\9c]\89!\84tHÈ\90Û\0ÙÀ\ fètjØΡ\9aßUÍp9ø9â\80¢PfkÅ\97hltÍ\10ëO\f\103ùÄÀmÓ«É@\8a»Í±Ñ0u&Åë¯Þ'ý¸¸XÏn8ëÁä/\8bÕZâÛA\14ÂË£~\8d\85\18u\9dxóÿÝð}_GIrewä\fáü?ö/\167³ùë\13F·©¦<r\b\ 2G_\81ª\ 6\82u¤r@[O\86y\8f¸t®-Ò^\v\ e\9c+¡\94jë`á8R=D¿É]\eÆñHôÓ¶*\86Ñ\ 5N\8e5\ e´9vø±òäxo)ÊEh!tR\1c\11Ò(\ fÅ'>¼\eÉHäG.UZbºpÝ\81n¡\v°\8epÖ\r,\89-H?\81\eAn4b\aÇ¢9êèq\86õÏ\ 6åàP÷Ay¿#ãhò\9d¢\9c\8cv\85\b\17\89<\82
+@0úïvÃß\8e°+l\18\1cFà\ 6w>¹ïGåSÚ\8efÙp0ºê\a:s\1f±«×]
+¼Ú\85EE¶¡Î®\vàG\rÞºo\94\90¨P@!k\8bb\ 2|©Ë-PDv
+;«Ä\15c&\1f-\16\93\86»\ 2¾S,`§²ÓhgÀ(\ f\80ú¶\ 5ħÚ@FM\0ë \1dF+Æ\ 5\89;ñ;ÚRNWÁun@Ì\80X\1fã\89IP R\ e¹²åºD*q\8d\8a3\ eÿ\ 3ã»Û\87\1f\191ON\1c\92 ¸K¿\17Îb\8a\8dwÕ©\ 2\92L\1a\19a[å\f\86Å`\9e¼ä¨@¶\a²\8b»&'\1fc\19\8b!& \bϧq/cB\91§Ì¤pî\11«\ 3öpÌ°I\94 \7fT?ÎØ\97ÁÄ×Vc\92\aÄ·\9c\18`ê\9e\13\ 3åö\8fÏ¡\82¾c_
+ò{ì8hGü°Òo\90\b"\9d®\15\8c6F6\93·:Q\bîHÙ\1c\11\87\95-îÑÏ\92\ 2ò\ô;\f½.äËùÞ¨\10ûÝÃCØ\16bØa\19\9f$\8c\8b«1ËÊ\bÞIa¶µª\ f_^à\7fà\8eá\88\ 1\19\96?bÇ3'Z\8crÅQ6+F¶Fm¡#ÖW\98°¶é{óæôéiy=ãǺ\7f÷i.\10¼'-Aï\9b\94Ù,×ËÙzu\13'Òõ\8a\8f~Þ\9cýzö\17\15´Ìùendstream
+endobj
+1226 0 obj<</Type/Page/Parent 1099 0 R/Contents 1227 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1227 0 obj<</Filter/FlateDecode/Length 1671 >>stream
+x\ 1\85WÁrÛ6\10½û+vrRflY\92eY=*q3ÍÁ\8e\e+\93\1c|\ 1 \88DL\ 2\f@\8aU¾¾o\ 1\92\92iw:I\9c\84"°»oß{»úu6§\19~ÍéfAW+J˳ÙtF×Wsü\®oðs\81?NÑ.|pµ\9eM\17o}°X]O\97o}°^¿>ða{vùiIó9mw\b¾ZßÐV\12\ 2Ïf´M'ß¼r\9e¬¡:Wôíþó\ f*E\9ak£(\15á¡¡Æ+ºßò_\8e\84\91\949ÛTdD©< Ï\a\ fÔÚ¦\90áÍwFÔz¯ÞÅËÂ[Ó÷Û\9fg3º\98_!½\9clù\ 4_\9fæ¶5´Ó\ 5nò\167\89:^'\0\ 2>R\92\92\ 3Ç\96¶\14:dÂÉ:R{e¨°\19\9eÕ|n\94:gé\1a3
++bJ?.¾k#mK^y¯Q9j\10§\11út\17+ \1cÓ\ 5@Å\81l²×¶ñ\84ã:E\95\ 15¤\8cû\12<#í)QÚd\8cCø_(èMÜjñ¬BÞ;ëÊQ\9e·_î6\9fï\9f\9e\86\83ý\83\0ü\94¶9\ 2á·Q)*\10îÀ\15è\9aDQØÖ\ fÙ\0\18©jåJnfÈÄ)©\9dJcâ\96Ä(n\arjMílQ Û\bÒ
+S£\18¤ \90*áj\9d6\85p\0ß>\83\ 5\8ct\9bë4§Ú5\9eßìn\19°pj§\9c2©\92c\7RjÎ\ 5y\1fÎ\87´+g÷Z2µÐ\99\ 65\b\19Á\ 6\ 1÷:í\8aÉ\91\0·¢ëÿCÑd\99H
+E\9b\17\87F5ÞYÙ0Û\9e&\ f\9b»§÷ä\ fHºd\12uqÇ1÷Z ð#\ 5ñ¦0\aÂiR\86ãI\12UUt)úØ\9dQÐTT"Ñ\85®\ f`y±Gxf,\ 2âxIv\87,L\9a;kôofO%¼o\93̦ºU`zÌ\12\1aÑÀ\91û|ò\ eKÅ×\16½\ 5\18¯z\8a\13\190)l\aáÓ¤\93ú«f?½\ fý¹üô\aÍA{ö\8a\v8SPÀ|>½\9aÎQ\9bp\99ªé\e\94Ã%\9eúÊÅ\82}er"\85:¼ÌøÔ\90l&P]h#W\8fG¹Ø£\14Cê\1fík.\e\18'\82\85Ó3Èì\9cð UZ7¨1tº£\1aüc\ 4q«=(\88.6H\8f]\f\0>ûº\v\bò2wàtÓ\81g\ 6\8cA2Ü\rXÜ(GVOUØC¸n\1cíôòV×¹EX\14Äe öª\9aýJ ,4#jT\9a¦¶15Ê8ª\13sæ\94¨a0^\97 ÒNG\86\8c\82
+ %\ 3+\\a\7f%\8brr%$ó'fÊÑ_×\1ep\v\f\8eè\9e\96ùJ\91Æ\ 2\vè\1e\9aw*¶¥\15\a&VD¾UèW\ 5\v\19`D¹\89\1a\f/Xi
+É:Á\1cuèü.æ\14\83\a©\b\90Ø÷¡û\99°a\11\85O"=z9òp\b.S9d\15Ú\b\v\0\87,ÝéÔYowuÇ\e\ 3µpc(´\16Y\ 5;À\8b0Ò\93|G°ö\81¼\12%\9c!X\8aÊ\18d(\ 5Ù³T\87´#\vùQ$éQ2`\7f\94Ìr\90ÌrJ\7faÌô\92øιqð\91l¦«~È´Ý\1céL \16
+\1fÔ\19\8fA\81\99\v«\15\94\16\1að^F:ã1fu\8d~@!SÚ@çà\0&\9f\ 1\17b¨ënòO\80J\98Ròe
+\13\92B\95(µ\0µ\94 \9e\8cj|Ð\8dÍN\95ަϰ\80VÀº\11\8bç\82S¿\1a\90%ôD8\ar2YRÃ'lR\992\8a¥\10f:Cxÿø\18:\v/\1dõ$\16É#@²Mò\98Ã1Ïq0\rx^ôô9\9dÑÀ!7\96·\ 2ð\ 3=\97L\12V\94*q¬¯\1f\98¡{ʧN'x\ 5ÔÆ\94\14º\0\8d1>\8f\r}Ã\ 3\97ì\81GÖ}\ 5nPö\ 3'(Ù¢>"³·:Ìýý\ 2¹\ 6.\15ð4\ 2Qé \84óç¤vÀ\10à\ 5?LØíÑhåXvØ}öÂ\85\95ãQ\94\89 -8J¥*\13ÞÙP\9cT©\95ª\7fi\ 4¢ð,T¬K\91Ãÿ\937&âÝã×\87\8fÃLì¬éÈÅ\80(÷»´¨ \13Û(¦SEè°¸ÕPÐq\86A\ 6Xº<Û|·a²ÔÒ¢\91Ì#\17±,\85\11Yh×9w\10;Ç\8baÎ\84\18Eìl¡²¶À=Ð@Án\9cå¸\e\feª\0uÞc >°\16\92²¼\ ea\8akð\ 3,\1c\b2(þÁé\92·ªÛ¸t~\1cö¡Qhì\10·\8c×®1a§\12aÂ\83P¡Yç¼\92ål\88\ 5VÛ\83V\85\ 4Ý\ 4%Vb\93ÜQè\tU^\85{\13e\80£ W\8d«,&í\98ê½\9f\0\1fß·\9eBï°S\83\80\\9c2M\19ÄÖ\ fS\ 63ê),\91ñ\9fxÑ&aPE \ 49 \812@1ªV$<äxõÅzÖÀÞã\95H7Þ8¥/\80Ó½Èä´0\86üØÌð\8d¢³\94cnµ\1d\ 5Msa²0^Üqå\99Ò\87\ 3ÅM\16Ý\85'¸\ 3SH°Ó\ 6\8a¡-Á\98øâà!ñ\e\vFo_Ûùà\ 6¥¨Æ\9e\17¼i{:±ûcø\1a\802Â\8c\1dÝ}ü\9esùiÝYî|\85¯të+Z-ðÝKN\1e7w\1f6ì\16?y~ÞÚ\14-Â\9aÀ*áª/ú×/n\163~ÿ?\96®åÍrz³Zc=Ã;×7|ôÏíÙßgÿ\ 2awÇ\86endstream
+endobj
+1228 0 obj<</Type/Page/Parent 1099 0 R/Contents 1229 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1229 0 obj<</Filter/FlateDecode/Length 1832 >>stream
+x\ 1\95XMoÛF\10½ûW\f|r\ 1\9b¶dÅvrs\9c\ 6ÈÁ®[)hoÅ\8a\J\8c\97\fwiUýõ}3»\94(ÊAP\ 4A\14jw>ß¼yÔ÷\93 ]áÏ\84n§t}Cy}r\95]Ñôæ:\9bÑìî\96?ã¯ÓT\9e|\\9c\~~O\93\19-J\¹¹Ã\87\82püê\8a\16ùÙd\92ͲiFOªÖ4×îµÊñï¦
+ùú\97Å7\\9dÑd\12¯^Loqõl±Öo\9d>'ëèi>?§Ê\93¢R«Ð!\80°V\81\9f´N{ÝàcCµj¶ôõéË_d[íT¨\9a\15ù\ fºö\19} ¤\8c±\eÏÞ¯èbr\9dMÙk<\80ë¥u5îØ\86|\97¯IyZ[\1f\1a\84ïÏaº2¸_)¯\11DSPçµ;¸\14,-5*ãyÕ\ 5\95ÎÖTTe©\1d¢\eû´\9dË5\82ú\8cÔô?ªn\8d>Gn>À´2¶Ñ1\8d\8du/x&AÕjÛ[OI\1d¸\17\7f° ]\85\bmI¥Qc·eeð\9d\ fÖ!@ä\19PpcseH¾\91JetO\8d\ eì\19\87Æ\ 1\94\95ó¨c@IÛ@H9åûFD£\94%¾\813¤\8b*"\82\86rÛøÎÀ,=}\99S¡\82Z¢Ì\84~\1cW\19Ï\14}z\9as¢¯è\0\1fêÛ4ò8èh\96¾\9aÞ\0Æ=ÒæsRmkª<Ö·uvåT]3hª&hW*\06B\866U³¬8^»Ç[ðÚ\94\f\13T]úÉU\8fhúq$´á\8ccÕØ\93 \95±$8\93\9a¬\9cíZ`ãÏä\13ßz\14
+Pß\85\15\8b7HpäÐ.\83ª\9a\1e\85\8aM\15@>=-úºu\9e½?Îÿx~ \0ÀÀ\ 3§f_«\ 2I\ 3\ 1\9bAR*Ïm\87\11ÓMWË\Ù¦¯h?E_Å^į+bZ¦Z:å¶Ñ>¦\18¨ÎU³³Â#¬¥Ãq¢bÞ\8cK\15ï×*_#\vr]Ó ÚQ\8e}K\18F^K§\8e\8d\81\14\80ª\ 5\15\16\ 3ÜPk:öµ¥à:ÐBÑ?G\13ÃÚv«5\87´¥\rf6\r\ 6·fÌ\18ì15é\r\µ®ª%kÛ\ 4gãh LAaÌW|åò3(VÈïìR\87ü²ñ^\881Ã(\94ñ@Ï\8eg\0\ 2C&Õd\88ØZ½0\19\ 1Mß;\8d±\fvT¢Ââ[cíK×J\1f¨o ?d<ýïh$\13\18å¾lÖ\15x\12\9c\99¯\ 5¡ZÀÅ4\1f¶\ 6\e\1e7-\85ª\8bs1\94¨O\82;m\15ªP\9c\1e\1aAÁÐ\ 2\10\11×\80\9bÁË@\8aOib¤U\96ɪk3Zð\9cp\15«1^$dßê\9cù1\86^1ïÖ ga\0aMÙ*Ì-\9c\86\a&LÁ´\1eÀª\85L'j¶áÍc]¡\1d¶J)ÁÇØ\93c©Î¨\15\95ÿ\10ûún°õ\12\eÅË\1f" ÷ëà\10\ 5ØW=w eòä컹©\fã\8c©ÙX\858©¶EgxÜ\8cAÜÑÖ\1er@Á%þ\ 2u\7f\vñg^\90³_Égè\ eïJÜ]bXà,\1a<44X¢l®7\99\9azl\94»s\14v±E\1fÁÁÆlcð\1aSÏL
+¯X\ 2ѯ@\15[\1fc\80ÙãÃ\1cÉÀ\7fZCØ\a]\93óºD\8b+pfÜq½\11P\\0\1f\rÖ\16§\960\99Ño\rCwÿ\84§u·Ïùù®âGÞ96æ\10\11\0¼ËØ\15þ7\18×\9e1û>
+R
\85\13vË&ñ/Ï4vÛ
\96´ò #ì}Þrý:
\80å5¦
\97\97Aô1Ö:Øà
\80\83\0¹Ñº`f
\1fÅ
\v@
\17ÌÆÈ
\ f6Ú.
\8c\11\92À
\91(ö¸
\93o1
\a# âcG]\
\ 2´¬(è4
\99:
\8daÇs{@þ
\8c\ 3¡8F)¤â:
\vºUA
\83Ù±ß
\ 4\98ÄÀ
\90\19V°
\97-Â(;>
\8f\94"
\8d\1a*Û
\8bkHY
\96\r"i¯3z6Ýj¥
\96\18°û
\8eÍ
\87^C<ÊØɾØ
\ f\13Ï®èÛ
\9f]ÃV7ÞÒKc7¨
\9a§çûǤy
\93Fe
\18¨¥
\ fN
\ 1ãXßêÐ;ò
\18U
\89\ fXWý
\e\15NÐùº±Æ®À
\80,/
\ 2D.;éÙ¢
\8azÚz_qn
\80\86Ðe¹ÝëرËZÃ
\ 1 \86ÈF®wÒ·
\97\86\83Q
\88Ãi
\81»µzåDàÊéÜÖ-
\ 4*
\83\ 6\83?<
\8e\8a#J Uê
\83\9e\95\1døîÈå
\8eÎ¥6Ô*
\87ÆtF9j-d^
\1c£
\83\92\1c\vpÑÀ
\80,d`Å
\85\86VÆ
\86ÛB
\95\80\9f\0"»
\19åÉâÕ"j.+(@d.£j§³
\13\aEé+T
\8fÕ!\OKT`o8©
\97\1dã$E?ÔÄ#ß(
\eÜò0ZÖÂ<
\13Iº
\8fɦ'
\ fD
\16ij
\ 4\1d¼9©
\95¬BaØ]
\98\83çÒ
\82\1dUÁ5«Q(æ GQÁW/6c!
\84©
\92~
\89HN{Zêé
\87ê4^Øç
\85O#1Èú
\1c»
\1cdÃkz
\ 5ǯ)x
\91«ð2
\81î<'Qö)êÀ
\87¨Í
\foð
\85À-:fy*
\18ËתY
\14+
\87\85 \9aÆÒq<a
\00
\1fcÑ
\91®@
\94\91Æk_
\1e06@u
\0pÒ»Ö
\8f£H%ìwC
\82{Ô1xÙ
\955
\1c·
\ 3c
\eÏwÒ2®Ft>:³X
\ell¬0[UgÅ
\11?3¡
\föm/½
\18"G
\8cËk
\12ù
\8c\18 W§¨Û!
\19õ¢
\14\95©
\15Þ) #¸¸
\83\17.
\86+'
\9a[|
\9d¦äa
\84%,
\15y
\85\88zUd,
\97z
\90?sG¡ñº
\86\89eI
+i6X÷"\87øDZÇ\871B·æ/\ 2x¸ç«±rwI¢Mnð{ÇÝ5~ÙxÏì?¿\7füx\ f$ÙoÜÛO6ÇËP\92\8e|ï¢?~q;Å\ f i[üø\a\90Ùí,»½¹Ã/'8ûî\8eMüº8ùýä?ÒùÎôendstream
+endobj
+1230 0 obj<</Type/Page/Parent 1099 0 R/Contents 1231 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 631 0 R>>endobj
+1231 0 obj<</Filter/FlateDecode/Length 1810 >>stream
+x\ 1\8dWMsÛ6\10½ûWìÍÎ\8cE[\92-ɧ6\89ëÄmóÑX\99ô\90\99\ eDB"\1c\12`\ 1Ò²þ}ß.H\89¦ÝiÇÓ&1\81Ý}»oß.þ>\1aÓ9~Æ4\9fÐtFiyt\9e\9cÓl:Kft±\98ãï\13üç5åÃÅåUrñÒ\87éd\9c,^ø\0ãÉ9ìóÿ¾¼;\1aO.\93+\9aÌ®`¾¤Ét\91\8cÛ\7f\15t'\1eÆ\8bóç®ß,\8fÎn.h<¦å\1aÑÎ\16sZfbù\9c\96é\89ó\99ö -s\13ÈØZûµJ5\95ê\87\ e¤²ÌØ\r)²zKª©smk\93ªÚ8KAû\a\83\93kçé\9b±+c3zÐ~GZ\85Ý)©¢ :W5®ê,Píh¥_-ï\8fÎi4\9e&\13\84p\929« ^å\18l\13\7f?»\ 1` õ¤Rå_Ûh9 .~ìp\9cP鲦\90û©«\8cÎØÅÀÀYaVgA§\8d7õîlh@!`öúùõ\aJ\9d½+hm
+À\ 6$>Ü\vÕëB?([w¨\91\1a\94µ©2UGÏ\80ë\9e¥èÁ(ê\0Ð\9dÖ{w\99K\9b\12¹\8c\99ä\f\96Î?K\8f®\95)B\12ã¾¢ñE,àh:\ 6\8d\90¿1þÄ\ f}E)\88Ѽó®©èö\9a^#\9aX¦§ \81hÂÕ?ù\86J¢¬\rß\84÷\8d\D)R¯\ 5QcA
+.kæ¶\81>.¹L¦æ¢²]@\ 6%\80À\83\f\ 5\b^\0È\ 3j\911?Ö\ 6W¿\9f|¹½þþ*òj\90LØ
+\85Ùäu±£Ì¬×Úã\1a\97ïëÇÛ?i\9b\9b4§\!Åä\95Ýhrkv¶Ò¾¥\8a¤>ļ·.w\ 2%\80vmQ\83*u¼>tn[\ fð·¿,øCB·5\ 3mKv\1cèÞ8.°\ 3Ì® \90\84É\12§ÉöQ±Sé\ 5\9c
+*!ÎîÀmk\93ÍÃÚÚl\1a\ f\0H)~±Aî,U
+\1e\0\95))\ e¤8ð\12*nHö¡\9e\1fj+×\9d2ÏüJ6\81!Ô`X¿¢l\1e9\86Ù=ú5<ôj\1e\ 3\b¨opÅ\ 3Âe¢rxkã\ 3
+fJ}\1a!\fÀ\1eh§~¬#"\80Y{W\8a\r)-ÓC\93Ôªò.Õ\ 1\ 1UUab\ föcébü\84\14GÏ\ 3\9f]\82·\ 6Â\93+°±\84)f*þ=\0Õ\87½ç]\9bîÞ7ð#v\1f·Í,ö\1cÇ\8b|4E\1db±P?v$2\89\ 4K\9a3ª\90[\13jð\1a\1c7h5ËmÙ\1d\84j¨\95
+\9ar]\80\ 4Ü\89u¶¢î×ÿÒ6Ú\ 6\90¦í\ 1¡"7B\8b²ë\1ef¨\18\ 4ËÚ\bh«vÿ!"\97 }\11PôV¥9°prûC£\95\8d×\b5\95V\ f; +)\ 5°\8d¶ÚC\14\80¢pBaIå\9eYd¹\17\vç~4\15zlé\90À¬\ 1¥#9êó?Ð\14`Td\7f\18
+a{µëKnuT ¾%T
+i®á\80\13\9a\11\ 6\13\9b½\83¦\aýw£-üDñ Ð\bµ2ZíXÑ2WªgíÒÎ\81\ 2åkuõ \8e\16ô/£b{]7ÞÂ\1dL)ú|ýVú\1añÄ_u\T\85ÃôÜ\9a:Ç©A8\ 3úª"p^\ ef\19\ 5\fG\ 1\1d^fwÆB¬y\88D\9f=\8ao!?\9aûDÙ¨\8b{\89\1f85=HÌc\a5Æ$\85\ e²\12p~a\e\1e0ÔY\8fõcePºSÉð\0\ eGä9á E¯Ë95 ÂÀoêJ¨\1dΩ\rJÀRÂ*0(W+\85ý($°\17Î\ 6\14\93,¸\87ò¤¹Ä'4\18º\8d\80\ 6¨3\13R\85\1d\bÑ@\v1?ÑJ<Ö\91àCÁ\9f Ë\90\85\94\e{/f\(vvv\831\8d\ 1Ë{Öh\8aáÜ\8eiô×-pB\8a"\7fØÓÛv\fÈoâån¹\911\8dE\ e\83ú\ 3×\10\v\92ý!\93çW\97[Zz4\8b.\ 4\1d¯\86\87%Ñoè\84î±Éð÷\9f\83U\15oiXï\90ñ§Çå\8e\1cgQ\87ø>\18Yõ8»ï?}[~jÅ\1eÀ±@ñÂ'\0\9f(!¾Å£\99\ e©7+te\8e%\bùÛèzß\1c\ 1öÄÀ©eܾ±\96Õ\12ÇÚn\83¦DéÇ×Þ\92\89ý\8aG\94Ä}X\1aÑà;×xúÝØæ\91Vî\11§Ä\1c\ 2ïúnï2î\12\0ÏßÐ\85\90\857¯±\94óOk·'ìPS@\92N\f|åÎ\15Ês\ 2*\9d¢1Ò§\8c°Ãm\13K]8«1ìä/íå\11ú\92Wã\91d*©\1fkö{\90Ö\93.\8en)¾i \ 1<c\1eL@Ö\ fS¦Û\19\81\ 4\13\rÝï|åDwe\7fî±õ@Å\176ÆËdÌd\ 4G Á\קñ\bõ\98xò\1e\18\96\97Ù!\83:\93I\84úÈÚÝ/÷ Ê(W¹ÃpÉÞã)0Ç\83%\ e\8e!ê6KQF+µÂb\8fþ?Ðòe\86ð3¤ã\10Ó¸ÓÀk\91öH\1f4\ f\96Û\r\14ØBõ\87d\92;\93ßDÂÙ±×\9b\ 6U?\ 6ë#mO17°\8fBþÐR\16¼Ææ\v\81«+ì\9aX\155jÁ\17#³ºK\1d¼\ 3¹ö½ÂBºÒØ÷¶x\94`A\88"¢è8æh\94²Þ\9aôXV\b\10\8f§-bÀ²ºfâÇw\870^Añr¨<\ 4\f7V\r\17ót\0\90o\94\8aå\e\v\11:N$\9e\ 5\85å\r×"\ 5@qð}˯5\9cYc+å\ 3X\eb«õ\1d\10OëîM2k_jxûî\17¤où\8eBî\1a,6·lÆ»ò§È±´=>\9a'\v~9\83eß'³yÛG\8böë\18ïÚÅÕ\94fs~-ãLLígïî\91\rºî?\9dØîh<ÃK{1¥Ñ|"6ÿï³èb~\91Ìg\8b\18Èå\15ÛúeyôÇÑ?\17y\18<endstream
+endobj
+1232 0 obj<</Type/Page/Parent 1099 0 R/Contents 1233 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 634 0 R>>endobj
+1233 0 obj<</Filter/FlateDecode/Length 2016 >>stream
+x\ 1¥XMoÛF\10½ûWLÑC\14@¢DI\91dôP8iÜ\ 6\81c7Q\91\8b/+r%nLrÕ]Òªþ}ßÌ\924Í:\ 5\8a"\88m\99û1óÞ\9b7Cÿy\11Ó\fÿbZÏi±¢¤¸\98E3z³\9eE+ZnÖøy\8eÿNÓ\9e\1f`)\7f\89ùËç_/Ö\97QLËÙ"\9aSA1¾_6\9frúrÑÿ\8c§Ë7Ѻÿ´÷\19OW«hÓ\7fÚû\8c§\97³hÑ{Ê\11.f\bâ\85\bqÔ"Z\ e\1f¼Ý^L¯\97\14Ç´Ýs\9a«Í\9a¶©$3£m2ÚfÆ\93Ês{òTe\9a¾\ݼ½"\95\16¦4¾rª²\8e*\v\18ò3ÙR\96¨\1a\vËÊ$ª2øU¡\93LaqáÛ\ 5\9f¶Ó¯¦\9c\7f|½ýv1£IÌ(mÓÑÝ/ïhÏÇá\9aÁ\19vO©-\94áÓ\8a\9dv>¢ö\10ª=>Si)·åA;*µN9¤L=jòú¨\10¤æ«&½»T\92غ¬º\90BZ8éQ»\88\17O¯W\r(½]_3K>³u\9eÒN#g\95\9aò\80x\ 1Qj\93º@Ö?\87Í-¢|ç|\ 5Ø\91\9f@ùÛí×í-ñ\ 6íÍ¡D¨\9c²?ûJ\17ÏaE\8e\1föt¶5)\88Ì\14Ç\ó\ 5|c\88\16Ø*Ú\9b\\92ëE\19² U¦t2>c,îG{e\1c(ÒÊ\9bü|ÿ\9aLYé\ 3#Cú/\10ɧ\ e\10Ý;[ðõ\8e\98\18[â\1803à¬\8fÛ8 ÑeÈ\89a\7fDÛLUä\95IÇô\81TÁ\}Ú\12\9eÞ]Ýàú£vÕ\98¼\95\\vuFN\b]\rnÚéª\ 2»ØÅ9à§\13V"&f\12ØH¢\99ö\9a*å\1f|ÃaÒp8YG\9b\98V+¦á~¾ZS`é\12ÅǺ\9fÌ7Q|I\93Ëu`*\8e£7Ñ<¢ÏúÏÚ8\81Ý?ç\95iåB\195\14\89Ø\14\92,v\8a\12[îÍ¡\ 6º¬\7ff\bÈ\0\82\96ˤv\ eL\82\8eÚ\ 3ø(\1a(nDo¯Þ}¤\ f[úãî\87ç÷\8e\1aM<I&g\19\9e\a`¡&<£;\ e»[)\8fh§\92\aª\8fÌd\83Á¼\81h4ÕU2=ª"J\87\9bR`\90 ÐÏ\9cY\85Èýw¢\92\9a+_U0\f\89\8a
+\95¢\96igmE©ñ\ fÿ\88çæêãûAì·\9fÞÓ§Û¯\83+zut£=Ã\ 6qW\107\12AÐ/`î)Qð\võ\80â©à
+\8aõ\8f2²Ø½cJØ1\ e(\ 4þ\89u^¨$3¥\ ez}åé\94\rae\ 2Oª¬x\a\f@5ÇHz\82,ª*\9c\85{å0>\9e\83Å}ìSTX\ 6\ 4òvÚ\ 3Q-\177L {\88\vÿ\83\89ÖL\ 2}\ 3¸p!c`\9d9\98Råä+.jüêL'ÍÆQ\92 6rÐ\15í]-®\rßéà\93BBæ\a\18=6\1c,k\92~\9aÜ¿n®z20M9N÷\15Á&=\8b\eÆ\1c,à~Ôþj\8eÊ\99\93\82µî\11\ 6\9cîä\fûËýë1*ÿ\84\80\92¼\86û±yÕeÂ5\82§\b§Ü¡îSJ\95.l)%Ñ3µ»\1ceÏ\9e»\a\8a!g\89îyçu\a\1a\ 1zä\1c¢:é\1dÔq\b®Õ-\95N-K\e\83H1\96³\86 ±\f(É-ʧj\8e(\8csìÐ\ 6¨²£\99\12\0Ö\126w\8f\ 1\e©=\95¹mû\ 2ú\ f\ eL4Ô\99ê6£\ eMx\17÷Uú%t¶ÐÇ\98Kµ3¹©Zw\83Ú\9bP|\ 6~\80\eäæâÇ\8còIç9\7f?Z®L\83#Ñ\88q
+BF73\89\16çê!ytöѤ\10Àî\1cò\rP5\82\1d\8b)ß\8f\8ey}8\88À\a\18
+®q7ZH\ 1)q\19x]ÁQp,\8c\9c//åØ\ 10]q}\80h\\1aHdç\ eî¨[þ¹Bø|á¢m¶Á]+b\r ø\9a\92ÏÍÎ)g\80\bPAF¨Ë\97ï\ eÝ5¢kÐ\a'ã\85\9fuú\e7%é»\1eýq\1dÅã\8e_U&\9aå*®]hUúa\89Âr&³h½\9cÌç\9cèÓ\b5
+×ìX@\b«Î+¤\ 2ÿ1C\1a2\9d\1f÷uÎZV9\9a\1fë
+äIv©~Ô¹=r»\87|\93\a(Øs!\87«:\9fà dé÷B ëÛ.\a\r,â^\83[Àé\10&\17\1fF\13.ÿÛºz\9e\r»®´¹·\1aÚ\aÕ\95r¼¡I\89IßA$gÈ\80\89±ô`\90\82ÝïYÚ\92J\10\17ÆCøF[Û ¬.¥è\e¾Dª\18¼èc³\9d£èI\16\87\85¸Þ´\16I¾Ø5}ªsǦ¹<)_XÃÕ3<«µ\9eç¹\8f8;\94\ f·Ò \ 4\f\1c<ö\85Ø\ 1\9eeO\976Ë\8a\87\82\91sÛ\1e¤ïø\1a\98ñÞA>¼Z4ÍR\ 6¦eª\*\85×°Í\ 3\eÄ\1aT\8aR;e&ÉÈ×G\f:\12NÛ½;-\f»w\87
+únÛ½\83q!&Aª\87o°d\16B[[M\15JC@\92b\16,7uâ\16Ñ:\v¦6(Õ¡ëp\vîê\11¾\ 4\8bâ£\ 2¢OAÖÞM1)\ f\81î8iWöb\9bò\9eB\89ÑöÊ\8cP\eRû\8c\13n\8f\b¯\14Ü@hW\9b\9c}I\½ë\ 4è\81Mn¡dÚº\ 2aü~óT\80:m\8dº}/\91¹½%¦ë^|Z\86Ñ\vN&f,ï\1d\0
+EÐÚÚ\13`\8a\89\vïC\18ëÙ\87¤Üa3c*Î\rÏ\ 3\914ï\ 4\19âÛÁÐ\87Xòá/;\90 ?@\9eWÿ\9bUÐç»\e¶\18ñ \ 6\82é5\9cC&\12¶\81Í3ç\88#z×L¹a\9eis\96z\7fÎ/ïî^\81¸\17ö§cVJØ\e¦ån Ààpt ñ\8c\ 2qÊ\1c²
+LC})
+\ fÐï\8d\93Và4W\90>z´ý3æ\vf~\0d Ë÷^a|MõQ\97òÎV\1fa=§L\83Ey§à\8d]UâÞGckϾ&bb®¿Èh\ f\85IË\11\8dL¯gtÉï\ f\9cá2àã0êþ\18ò\8fÃÃÅ\1cOfü®\80Nj9û\96\eÙ;\91ç\93x\86×|¬ù·ýâ) \9a`S\fÍíÿá\ 4×\ eÊQ\82ùT\80ê\92ø\ fÇDÓ\96DM\93 \ f\92ø"Õ÷\7fRû?{[é\8636\8dnãÅ2Zm\16´ºä\91\14è\86ntçì7¼Ð`ð
+ïì¢<Þ9\89Wø»\ e6LÖsaì{/\82Ëõ2Z¯6\81ÖÕ\8c÷¾ß^ü~ñ7¤&\7fåendstream
+endobj
+1234 0 obj<</Type/Page/Parent 1099 0 R/Contents 1235 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 651 0 R>>endobj
+1235 0 obj<</Filter/FlateDecode/Length 1526 >>stream
+x\ 1¥WmoÛ6\10þ\9e_q@QÔEcÉ\92\1d¿\14Û\80t]\87~h»-Þ§e\18(\89²ÙH¢'Jq\rìÇï9J\94å·uÙRÔ MÞÝsoÏ\91\7f^\ 54¿\80f!\8d§\14çW#oDÓé\18\9f\93ù\f\9f!þ\97\92R»\11Þ,În@\877\82\1aþøåÇ«p<ñÆ\14\8eFÞ\9cr
+\17\817iW\19Ý]\85¬6\187\9bA0Ç¡fµß\1c-¼\10\92ó)\ 4\ 3»èö\0jê¶ìßÝÎt
+½9\ 5á\ 4ÂvÑmÝÜX}A¸\80°]t[ã±Õ\17\ 4cز\8bn+\f-þ`\14â\88]ðÖ\9bå\95ÿ\ e°\ 2Z¦\bÝt>£ebý\1fÑ2\1e,×ÊÐVeÙ5E;Jd*ꬺ&U\98Jd\90¿ýðæ\16+z¹ü\f=\b\84Õ3ðkSú\99\8eEæ\e\91G¢Ùvf\ 6\1eÝIIÕZR. ÜhIt\粨D¥tA*¥\9d®YnDCx\13\ 2Ö`+\8a\8a*}dÞè\n×\12i\95\99\91\1e½¯,b\12\99Ñ\14Õ*K¬©*"U$ É/2®+\11e\92D\91P¦¢R\94J\1a¯A¹è\821\fç\88"ì\ 6\81wã\ 1\83Gßë"U«\1a¶\9aÃ\81ó¸0f«ªxíÅ8q¨h`Í°·-\84½Éæ \8b\v<\r¹F`q\89Ó\1d0*¤L$¼ÐTÖ\ 5;ÓÈÝ8ãNqr¨o@\89\909\82YK]¯Öä@Z\85¬.\92\14ë\8djtC¯*iSê\8d,YQ/ð\9cJN\8b¹&£\e#.×=Ð¥ÖÕ³chñ\86<¯©\ 2ßèº\8c¥ï`øð\10\7fÿÑ\86ÅCºø«C'zúß7)Mu\8d´©
+^ÄÒ\18QîØ\95\<4%\95ê,ÓP¹"³Ë#\9d©\18\91,\1e^?\rvVÐÐX8\17P\9e~í\85\17\91ß\16 7\8dÃX\18I:¥;¤Òè\f¥gþ\e6Ûc*:\ 5BMû\9dÛò\82Ã0\8c\83\e°Ü\f\9d\8f¢;\9b?\e\b\16\1aº³];^6³Gp\98ßcóá$ðæ£ðkæ÷êN*Æ"sjN\91\1d\99¿\9c¡\8fz{MÂ\10Ç\80\99§k\11\99 Ò\ e\836ðe\15wUÜëx×È\ 3.Hð£ÞRmdiû\7f\85\16Ü\10ø\8d©¦í½Ge\14ÓPZêü´{ý縫Á±7Óô·G\1fvO\87\98*Xδ~@{ØÖ\ 1Ó\8b´\ 2\v\19ýÓUå¢\99\rC\8c"KNÔþl\ 4H/ymW¬\8d'\85åX\86Éèy(¢®Üy³\16\89ÞöÏ_8hcÕ\9c£\13Åýq\ 5¾¼È\96\98W}Îm©\90g\19Ó\9e¨+\9d\83Ó0¢²\1d§\ 5ó\ 3¤R qgø5K\98ÖÕê8þ±\88AÔl¦\90_*çM;*\95K.¥\12Dd*\99ãâ\11¡ºÀ¡Q]1\7f!à©ÀNI÷\ 3\9eD\v\89.^0³µto%î_¶ã\10»,\97\8b¢fØ]\82ÜôîÆÇÙNö\ræ\9fï\¡á#ýE«RnúY;
+®\eF@Êüj\8e«ì°\1d\8f£#\1e\85Êì\9cET] Ûf\90ñZ\e\8aDü@\82\10BüÆ\11øÿÕ\19<îÏ`\93Ggº¯71îä£,EF\eQ\8a\"Ò(qÌîv\9e¶\84ì´ØRc\1cÈuUêÌæ5\92kñ¨t ÆnÜûêÐí\ 1l$z\93Ò]d\9cÉã\88-×\12Ã\81!&ÒÄ¥\8alMR®í7\15ÂÙN\11\16´\97ÔýMµ\Ñ \8bòý`~ÿòð\90=i\ f¡~\10\91\15®J§¼q \99e\8b0VçþF\96ëD¥íýA\15qV'ÇCØ1^\eìßV\99\8eDö;\19\19ó\8d¢«ác\92q\a\9dÁ>\97|ãyÞwç6\9eA-çºB\0ÑÞ°É}Å\1c\ ÿ\88Nµ¦\17¯^\7\94÷öÓ\87Û÷\1f_¹íÃpÙÛ?Â\15ÎöDÖÖ°3¢í5i@ßÒ«CY\17êa_زà3\ 6CµJÐúLúÁ\b?\sx^à\8f\14\85Ö\ 2gTM´ù\19r\90æ¾V\a *\19\ 3\83±:\87VáÓ`þ\ 5,KÍOÀ\ 5\9dÿ\vW3Ee\81§\ 1ÒÊ/\ 3\\9d:§9Fûéú\ 4X¬ÐÖ\85\95á¨íd#~\9am{vïwÿp\97\9a\7fÊøJ=î¯þ6 ½R\82\96ÌZb\1aÝ\ ft\81\19äH)eÞÙ\11h\a$³BV$b¾è\1e7ô¹
+Å\98Ùd\þk<\8a\12Õ\15¨Ïk\1fq+*ÿù[ÿù¯¶2ö¾vr\16\92Ë\98Ï\ 3#\12f}¾\8eüwxëÚ\a_0A\0æc\9a.¦ÍKyÒýTêÏhszÛ\7fÚ±®a0ų\19\ 2ÃYh¯\9eí\v\8b\96ÒðÕ\83ðî,V\86>Õv¨Nf\13o6\9d7×Ä©½Âþ°¼úùêo\11ß\88\91endstream
+endobj
+1236 0 obj<</Type/Page/Parent 1099 0 R/Contents 1237 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F1 4 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1237 0 obj<</Filter/FlateDecode/Length 1086 >>stream
+x\ 1VÛnã6\10}ÏWL·\ fv±\96,Ë×ä¥ÈæR¸ÀnR¬\16\8b>R\12m3\91H\95¤ì\1aèÇw\86\94\1cGq\f,ZÄ\ 1\fS\9cË9gÎè¯\8b\11Dø7\82y\fã\19dåE\14F0[\\86\13\98,æø=Æ\7fÍaå\ e¦\938\8c»\a\9f\92\8báý%\8cF\90¬0Öl>
+\17\90ä\80\91¢\b\92¬?\1a\85Óp\1cNBø] vÃáëõçO×`¸Þr\rV¹ß\1eoo W%\13ò\97ä CN\ e!\83x\86õ$yÿNZz\1e\ 3¬TQ¨\9d\90kÈTY2\99S\94\92=ó·á\9fÚ¤/ \ 6°ÛpìÊ'\8a\9bDýÛ\87Ï×Ë/¯³÷A\18\17S²\92ÓQ\ 4Áh\8c(`9j\ 5{Ukø.d®v¦©\1e¨\9aNäë¼\14R\18«\99UúD\ 2ÖÞ\11\13,NÁ\86\19`/·Ä\96C¥ÅV\14|Í\rx\18;åxðB\1f\1eIm\b9 §\95²?ûÓiÛ2\fk£\87\85ÊX14¬LÙ0\15r(¹\ 5]eà \v\f\10rÁ78Ó\ 5¢Ò\92\94 =\95V\156¢¹©\944H\8a§¸åÊlT]ä\90ò+ø@\9aàH\1fÞò\rt±;ÉÊ\87\1fd\90xêÀåã\ 2ñÚ`ö"â ^xÅ5Ú\9d\86ðÕ2m¡®\¥¨<Ä)Ï!g¼TÒQn¹± ìO\1eáSêÝrikV\14û\ 1é\ 6v¢(`ǤuÚU¹Xí½\9eL\99\82¡t\98ÍdZTî V[\9c\ e+\90ªb\8f
+تFí\9db:m¢ÒýÌ)\84XC\85a\r r\9b\11¤4\ 3Hk*\9d¤^)cDZxʨ#\85GO5~!\86\9aTø\94¶\ 2û^ ml\b\89òõ"<Ýì\1e(7ê"ãf\0\88Á»3\8c\9a'\91^y\bÿ\93\84[PÞecÙ+\81\15;¶Ç\9e\99fR\89ÜÑX\b\82µ1\13S£K8iz\9e\11 Í\1dþº\96\12í'\f\7fpÞ*\ 3\ 1ãð\ f¬5¯Z<ów«L6\98²368\y\9dqb¦Br|ÁøÜ\0Ī[¬¯²!¥\9dÐq\14OáW\88¢+÷yUÅÑ \7fQ;l\ fÖ[.5\ e$ò\ 1X½'\88Öh\13F\95\1cÅ\88\ f\916i\14RR\faF^\86R\93^Ôè!ÿ\a8v+\ 5A}\1e±Æ`x\86N\9a²ì\19\18ÂDb^uªúÞX÷\9bZC¸Ç¾ù߬¬
+>\80¥k\96º:l\9e\ 6Ôv\19´^w\10ï¥ß\87A<ñVrs÷ðñ\8d\83Ò6\89ܾìÓyZë\9c\17E\eúèä·\1a\91?ñû\93\r\98\93O'Ò³NíúÔ\85Ä,i\ 2Ñâ¿!?'`¤Íö\90n\85ª\r9Õ\12W\11.\1f²É\1cÊ}kÒ=,·ç\ 6\ 6\7fóQ\ e{´u Ãi²No¼ÞÇ\9e\9b\9c#½ý\89\9e\981\89\19\9c|p\1dq\94\17\9a.²f7´ë\e͵Bg<\16ÝJ«Ò]B\95½KÀÑþ\e\81cg\1c#5ø\8e\92÷O®Á]#¶µï/ò\97\ 2wë\15m·îµÅïGs\82¤æ\9c\0?sì(>s~£J\9c÷³!n\94´\1a_\8dN?tÃ\11ÌÇ:ÅQÀUà2\rï\17Í«Àh\86¯{\8b1Ì.ãpF\90ø\ 5ñ¨Õ\13Ï,ܪ¬.Ñ»Ý\90S\8bA{!\98Ç\ eÂfUB\82B%²ÐºäÚÀCíT8\99OÂùláÑ\9eÅ\14á.¹øãâ_è\8b!\1fendstream
+endobj
+1238 0 obj<</Type/Page/Parent 1099 0 R/Contents 1239 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1239 0 obj<</Filter/FlateDecode/Length 1123 >>stream
+x\ 1½VmoÛ6\10þî_qÈ\8cÆÅbÉoµ\9d\ 2Å\904ÉV¬yY#l\18\96} E:b#\91\ eIÅ5Öý÷Ý\91Râ8VÛu/)RDâñøÜ=Ïsâm«\ f=ü×\87É\0\86cH\8bV/êÁh\7f\1a\8da4\9dàß\ 3ü5\ 2æä\15\9fô`\1f\929î\18Oñ\ f\ e\18ÝëA\92v^\1f\9f\7f{\99f¢`pÀ\v©ìóä}«\aÝ~/\9ab _?VN\98\85\91V4Ç|ot¹\80\v\9dËt\ 5¯\8d`N\e8_*a|Æød\ 4ý~\80Ð\1d\8c)s\92!ºR¥Nj\ 5»× åv!e
+\94^ÂL@i\ 5\a§\ 1\97 Tr.ñ1\97ÖYÐs\98i\97A®S\96\ 3S\1c.\8e^S¼±þé\9aÀØ\b\12³\ 2\97\89º¤a4 \83ç:ÏõRªkHuQàî\97\14@=ZC\18\8d(Ôhí¾ «/ªÕ\ eáA¨°`Ö.yX|T\Øú«.ÁfºÌ¹/\80yè\88\869\84o,>ß\bXéÒÀãã;±pi¼-{'ä\bø±\193_\1dp]0©ªò\97\12û\825K\ 3J,)3\91YU^Jn÷àÚÿ\9féB\0\97F¤È\94\14¡q\ÌY\99;\ 4.òÜFÕöÁ8\94D\8cY\86Û\æ»\87T!M\+$\12Ù\ e]\87\1aAÝÝÇÕ!\9a:ݧ\9aës\85\9dûk´L\ 3\90~?z\11\r£q\ 4'ò\ 3U\vRI\17q°\8e\19\87:´©\91\vW)o¿Ö~w0ÚØß\8fàTå\87pÒ#\16+\89\86\95\aòQ73©ø\ 6ï\1dàL\14¨c%\ 4·$Z\8f\ 4\10
+\9b£y\bãf&[Ì\9edA1n\86©-aá0¤\f\rnJ¥\90\r\14»\ 6\96¢¢\17è\11\92\80¼·ržcöf\8f\14çQ\12ÈBs9\ f"Úè\1cYÌkÓ®¬\13\ 5fÏÄÊ\9fG\9es(>Ôq\80ZÛ&è6\10\11cqaµîi\a)¢7kj|'ø\ f\98\85ìû©L¬\98±§¹àHÌ$SQE5UÃ8¯5ç)\90êN£Å¨\135=h\13RËÂè\850\ep¬¸-\85JE\ 4§«\r!\85G\8bt\ 6 \ frØBâÞfÌ\16\ 6÷¨ê͸&iÍ\8d.<ì°á¡ß¥5±\1f\811ºrÆb\14f\b©\9b¾ÖìÚé«ÊóùÊs
+»\9eøÝ\87I\µ(8h}TQ\1fï'eõ5¹w\94ÏrÕ¹z\ e\7f\10\ 4:¸ú\80@õóã\9b³£W;\97§\87;\r\ 1"Í4t\15´w.ÉÅ4aÚ´ p¬ßÉTØ\97дµ2_¼¥!¤D\ em<÷èü"ys~vÙpü»ãäç\83·¯Úß5¬\13¼\86¥PÚÙÿ^\1a \vÚxî\17\956ø\aµý\12¦^Sÿÿ#êÖ\r±EQ\81±áW\95õ\e´Ãvè\8a[¼\16uYýbðäÍ°zó;<{\86s¦L3\88ï\98·ÞMlË\19\8eHR\19|ü\bWW\r\12A\13T\ 2ë7D\18áJ\83ê\ fa\eA\7fÒsÃ\1d
+\1d¬\17k\ 6Î\18~\18p\10\1a#ìB+NFÂû
+]\85ð³\94\95\ e¿ØË0\akgù\19L·\12¨®%\9fñº^ükVG<Þê\1eÓ\97úýFæ9Îð\14êñÛ¨\8e¯\12ÇßñóçñÇ'Óê\ 6Ó\1fãÅ|:\84ñþ$\®/\ fN\ f\ fàÂè÷x\v\83#\9d\96\ 52ÅèFL\84wë\rÝÉ\0/ë¼SÝ{ \11Ö7-¡{\98\85óÒQøh2\8a&ã)ª\19CÇCzu\9c´~jý\ 5\v\ad\1eendstream
+endobj
+1240 0 obj<</Type/Page/Parent 1099 0 R/Contents 1241 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1241 0 obj<</Filter/FlateDecode/Length 931 >>stream
+x\ 1\95VkoÚH\14ýί8\ 5Ô\90*¶±!@ZE«D$RµÛv[P÷CèªÆ\1e\87il\8fã\19\87\8d¶ýï{glS\1eu7\ 5ñ\98\99û8÷qîø¾å¢Oo\17c\ f\83\11\82¤Õ·û8\1d÷í\11\86\931ý÷è\933DËy˹îã\fó\884F\13ú\13\82¤û}Ì\83\1eª×\1d\8fã,\17\ 1Òd\19\1eÏ¿´ú°Ü¾=!á\8dÌ\87«ùÇ\8b?¼óîo\r\ 2,X\89\86£ß_¿\9d\9e·ÿâé\92§a»AHëÃJÑmÏV\85R<½E(Ö´ÖÚ\90,\7fà\ 1\93/Ѥ¿ b]úùy \83æ@nÐ-\83\85Åî)k\96_ox\a;\83jç\13\9e?G\9eÀ\8aà<ø¹\13\8bàÎ\91ÅR>JG&Ë\9f\85Ün
+(gªÈ)þ\12Ì\9e\89ozí\\9fÕ¥µ¼\91®\96ëÚ§öÀ\1eÙ\9e\8d\99\88ý\9cËRp\b×-\9b \92|\97B\96\ 2'x\14\ 5RÆB(\81D\84<z\84Z1\94\9aÔhF³ç0\158<åÊ\ e\1dé'KßÖEaù®\83\1e¤òsUd\90AÎ3eãµB!\v?\8e\1f!Rú2ç\ 6\96n³\81íià\94¤\10~\1a\9a\16IJP\90+QÄ´\16ëR\ 3u] ¥ «\91\81½ò\1f\18\f\1að\94,Ç1\85ÁÓ]è[~\9cB\9aêøq\19\83C-¹\17À\89 >â1C` \ 4"U>Y§\84%LtgÆü\8e\91\18\97/kO\15Å,oh\ fu@\9d\8e>Ù"R§SâÜÊÚÎi%î¹ÄbÒç\11nð\fV\b\ 3\99`âÓ\9eEªQZSxû·cT(s\8aªY¤\8a5Q\81ýÃÕ\9eÍ\88ïá¨iµè-\8eñï®\e}f\92\95ú ¥]\8f\10&å¢ÇäâxÏn\98ñðüs\1d\91\93Iâ\ f¾6È\1a\9d\8dìmÎ2XktÝ'*H\82DÖ\8f¤ó7ðÂq\8eª\15l½øÜàô\ 6í.\81lãÙ9Úm\18b\9b8õî\9e\8e!!\15±®Y\a3Ýû\8eT"«³Á$Mâû\82ç\84&\12yÕ«ß\99³¥\1eø\92\91w·]5ðÖÑ\91!ÍÑAZ\ f\9a\fW!Wº&d*æ)y'NË\82ö\88äyÍ\11_q\91bÑË|µ\92'X\8büî6\17Ev\82\95\90ê\7f½\98QmBÕ\\98½¹\9cî%\86*÷#¢éQH5\99Â\92X,\ eu¾\17\9cæç\86¡¤d\13\ 5£J¾Nö.\88·O\a¡/9\ 3"þ\ 5\10åP¿ÕÈ\ f"{\12ÀêöÃÔg\890#\87Ê»uÉ\1eX%Æ;õÈ;LÕ«W{é \ e\11Ùa\83PJk\ 67Üî\9bc]\9cCG\9bã_Àò¢ì çzRÝ\1dî\88\9eJ&\ 3\8cÎNËé8»xsy\81?sñ\85\ 5
+S\11\14 £!«ÛRC°j\ 5kìÑ\93Êæ^Ã\9cIód0×SXâ]aæ×p<´Ç£ ÝÕ$:\1aj\vWóÖûÖ\7f¥\1dyPendstream
+endobj
+1242 0 obj<</Type/Page/Parent 1099 0 R/Contents 1243 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1243 0 obj<</Filter/FlateDecode/Length 1552 >>stream
+x\ 1¥WÛnÛF\10}÷W\fÒ\17\19°HI¶%9AP$M\8d\ 6H\90´QQ\140P¬È\95´\11ÉUvI+BÛ\7fï\99½H$¦\ fM\10Ç wçræÌ\9cá\97\8b1\8dðwL³ ]O)+/FÉ\88¦·3ü¼\99óÏ þ\19I+÷âön\9cÜ\9c{q};Næý\17¯\17\17éý\88îh±\82\8fé\1c¿ä\ 4û£\11-²\ 1\11Él£éÙ¯V¬åsJe\9d¥ªRu\92§V\94K\91Xi\1e¥¡?ÉÖÂÔô\17þ×;úûÙåâóÅ\88\86ã\11\.r6ôâEï\99´"ãGéý]ô?\9cLùôx\9cÜ&×É\14ÿè\17é,«jíÏÞÐxì\83\r\87ß®è \eäï#¨7Ò\1f¼\r\a\adËeÞ½<¸ê\9f©Î\9c!Q\85{'[{U-U\95÷íQ.d©+K¢¦z£,í´ªê+\17\99Ýè¦Èi)I,\vIµ¦LW\95ÌpRã°\v\97¡ºN&\9c¼Ã\95\ 2®\ 2\16)×¥P\15\95²\\ 2êÏ\8d Ï\95Ï{/QyA\85ÎDA\r®%>µ»\16Ns\10â\ 4ë,¡\1ftµRë\ 67\7fóùpªôñÕû.L\88j2õw\ 3Ê\eñ(©\14¹$\15\12] ãÓÜVz\8ft\0@ÄÈ\19õé\b¸Úk³E\19\91õZ"m\93P0º\17\95Ã\ 2ѳÿ\16\16Á\12\ 3µ3úQÁ¯hp·ªU&j¥+ZiC\9a9ÄT&í\15m¥Ü\81\ f"\87·\84\16\eI;Q2è.çpO\15ÒR%eÎÆ\97}Ç¢¨\81kN\80Ý\95ÓÖr\97ÐÃà\8dÊ\ 3ÛB5p¹\14[IK\91m\9b\9d%íª\82\98\8cZ«
%ñ\88¢}\1dk\a®\83\10Nò\84A+\8eè{ƤÒ`N®\ 1q\ f\ e \9c<\\86\87±2¿\83ü{U\14>\19ár-uÞxª\ 1ÓS=öªÞ0ãð¬\8b\19£\ 4Ò\86kÎ\1aè\9aér\87 \ 2
¡b&*%Ijuc2\99VÖÂG¶ñIÇV\1dP®\fø®Í\81\96\a`ú¨=\11P\19ø(\8fmÖ²\1d³3Z×ßys§&t\88G_)Ðü#\10%±ºëºÅà\95Ñ%'߯È1úîÍVÐ\9eCþu\fqð-¯\ 3âbÒ©ñ3½S\9ei\1c\0÷ª#ï\91,xjØ~\vT¦¬\95YcT}\b\85± }À\188`&æ?¡Ïì\ 1´,¯<C÷\18 g²K\vµL£\9dod\bÃ\9ft!\8cBÿ°\19¸ï\ 5\14\8dÄ`xârC¢EzФ\8d5ßò\e&T\84²U£³ÕÎvÄ5b¹éó¬W{:ãµ-½18Nè\9dª\9a¯é½\91òõ§7C»\93\99Z©\8c'aw^t\91s\11óD]<¥Ó©Á}ÈÝ\9b\81\19¹æá£ëÖ\0¢l#ªµÌ1\15ý\88/ä*\8eX\90\89\a>&«°Ï#ØA²\87\93\e\9f\16\ fFÈ,Êò¥A»åü;ÿé`â\0\83Pf[´J\1c\99/=\91\86l\813\v\83n\8b,Ó\r¦óÿ7\9aÞÇqÐA¯;\87@=ðú-S\fuð\1d#\8a \8bduãù\1aE\81µ±êë\ 1ë&T\80\9c,2\91+mJQÄ´\82Æ\16\1aÃ\99 \1f|\ 2Â`5Úõa\0-\11\84Á_ºÉm¥µ\90\98\87Kt\84,*Y£qq\r\rÂb¹ªw\11?\94\fÆL\ e\11\82\1cÈÊ˼\e³!\1cëö\rÆ5\ 4À\eK)\ e\98\13\ 6j\1eeÈSÀ\ 5\ 5\893
$9Ó]¼\83}U\88'\7f*".\87È\90¶äøó¬\81þm,Æàá\92w,7OfÉ\981¶=°\1c\8arOÑ'V<Ód5¶\87«£>f\ 2µá¤Î¤RÀ÷\7f&\92z\88{Á1ÒÝlZ\18ºN\8bA¥ûf\88\92ôïóÐ\8f\ 6ú\r\13
õ\12\14é^;\12´\ e/\8eûñ±Ù\8ew\ f\1e®3ì¾\a\9bZ$ÁtÖn\ 5âMf'Mqðk\93\13[Q \e#t\12*\r*¹U\v«¦ÂÚÓ`\91\88\1aʬà\87Ë\126C\14Íô«&
Þ\80\ eð\ 6¹G\a\a²3!%66\18h±m£K\18;\8a4TeW\88Úíª\82Ö²\92¦\15\0XË\8d\82\8dûgðZeqÁ8É\ 4%2t(6 \8c/U\1cÐ/5\bævÀ§\83\13[zr\86\9f´.ô\12Þ¹!\ e¾N§Eà\18('\80ø»u\1c8¡qÕô#rñÔkk\\9f£\ fËxÈ!Ìg.£\1fIq\ eq\911'1-¸\1d\ 4ú\1aÛ=öQU*\b*\9fçR9ýêAÅ[BBï\ fO\ 4\94[\1c
\8c¯¬\7f\v\8aå¾\15Q¡õ\96
-\85E\94×Õ \11ó°t\8e§øH\9c_Ótv\97¸ï«O¯Þ¿~E\1f\8dþÌ_!otÖ\94\80×í$\1cá0^\18ÎFü=\18¿Çh\81o,®\1e\96ÅjméCã\16Ô\9bé<\99ÞNðùÈGG36ñãââç\8b\7f\0µ\9fyeendstream
-endobj
-1600 0 obj<</Type/Page/Parent 1369 0 R/Contents 1601 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1601 0 obj<</Filter/FlateDecode/Length 1193 >>stream
-x\ 1µWÛnã6\10}÷W\f6}p\80X\17Çqì\ 2\ 1êm\eÀ\ fA·\e¿\14\b\10Ð\14es#\91^\92\8aWýúÎèfYNêl. bÄ\109×sÎ\8c¾÷B\bð7\84Ë!\9c\8f\81§½À\v`\14\ 4Þ\10F\93Kü\7f\88\7fF@Üû¼èù×\ 1La\11ã\8dñ\ 4ÿ\89\0O\a\ 1,x\9fen\rå\8f\11ß3iDT|ó\13¹ôà\99\91.÷7,½O¤u±L\84g5H'Ò«Ì
-\ 3V(+®"¡r \87W¾pÜ\8fÝ\86\1eZÐJ\18se3Î\85\88N\17ßz\ 1\fÂÀ\9b`\bmÏ6\8bcÉ¥P\ e}\1fzÞJµ\94*BÇÏ\9b8\12¼u\8c?Pä\18Ö£äâÊæ\16s\18Pú¯7º\16Ib\9f\b\8bs\9d\15¹À«3Û\99x¿Ì¬°VjEý}£Qÿz\ 4aX"j0\1cS;\17k\ 1TIÂZù¨_`\ 1¡ãE~¢WR\95\8fë\9bý\ 20À\99\82¥\0¾fj\85ØS\82\99$\a\87Ö,K\ 5lYîÁÜ\81Ò[H´~°\90È\a\81Ï¥ýµvWA{0\1cy£\ e²\8eåI\0\17ÎåO4qG\8cW7ñÅ&2%\7f\10:\915÷±4ÖÝo\98µ¯\aæG ]é¢\89OTj\87ÕWWjgâXÇ^\9e\1a\95p«\réÙû\19}?\ eµ¤°eTo\1cR\94%DÒ'¤\90keu¡ÁûdBc%\rçªà\ 6ÒÊ\8a3\98\ 3\8b"d\15Ò©<\7fQs\13
-áoõë\98ìî(ßG
-*a\81Y$n¬\rúYf\ eX\82\0~Æ\1dåz\8e£ u¢i\ 5Í\94bÀ´ø×vÂ\96úQà¤9\ 3§!\92\96% j\80ÑÚ¡\10 \9aàtyÄ\ 1DJ¡\84ÃF? P´£`Ý\94wÙÖ̪b:ÌýyB¶C¤:\0\8b]\19F×ÝþØ:¸\87Y\84\ 3##Ð10¥t.Õ
-"\9d-\93¢[¢m\8cN7Î\ 2V\ejX[¯t8G;" Ô¿pì]xçÞ¥7ôàV'ÌH;°\eÁ%\ eY@\ 4År\95\19F8+-Ô\8aÜ\80\88´¼\11oº\80\15\16\91¥Fì¤\9aª]«6Éq)ç\88\ 1·f\ eÒ\1cþÐ)\93\8a4\r7\ 1\92yl\eN\9f¥Æ\8d#Ñ\1cû\99#\86:ØâH%d9\91`W=\8a$ÖÔyª\rÃ\85\86ú]ºÅCäi\ e)\8b\84÷\8fÎ
-'<³N§òßò$M\9f"\ 1ZNÈî\ 6{\95ëÌtÜV¨Lq\ 5±g\84fÌÓâh Ö¸µ¶;\9fKÁ\19¦\ 4\98\19\85\82¸³®`\eB\15¶\12£O\ 4Cà\92\13(·\8cj¨u\Êt£q\1ec³\8bº"®«\866»Z3ÐNê«Õêt"qáÂ]éÓowý\93»Ó&I\80Ð\vG¤\1cÓ©\1fLýp\f·7óOÝÛÝïð»ÞäF®Ö\ eîúüî\14Âét<À\8fé\19Üf
-n$7ºLÅ¢¦(^\ 4Jð¬ã\81\19æý\95,Xø*hÇ\12ÑÁ¡\ 3·_f7\87pl\9b=¸1Ã\89\8a\99K^ \17\e¯ØJPÓº';ß\vÁÀ²\14¢×(\10
-lfÍ!ù÷\89Û
-èåf~\99ßÎ\8a¹\12\12/\ 4gòÖl/v¥·\99\8e$Kî)#\1cÉGíw!dª\\ eÆÀÏUäåf\9a\8a\18¤\93³»À;Ú³ø¿j,>Wã\8eån "WÖà\8d%Ø3ó¡\ 1\e[¾ª\1dGqS\9a#ÅF)F=¬x±\e\8f?Ë\8b=3\1fZ\82\13\98U«â>÷ýëIµÙ\84c|û\9d\9cã\8bnõ6p;»ù<\83/F\7f\13ÜáPâ\19 F3þ\ 6õ\85Áe@¯ÆýjzÂBXGCg±ÆO\v\7fe\85È\8cÆ\13o|1Ä7i:\1aL\bc\7f.z\7f÷þ\ 37Xêoendstream
-endobj
-1602 0 obj<</Type/Page/Parent 1369 0 R/Contents 1603 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
-1603 0 obj<</Filter/FlateDecode/Length 1233 >>stream
-x\ 1µWÛnÛ8\10}÷W\f\90Å"\ 5jÙ²ãÛ¾¥í\ 6\b¶ ²kïå!@@K´ÄF\12U\92\8aë¿ï\19Jr\12%M²\80\9b\8b\13\88äÌ\9933\87£¯½\90\86ø\ ei6¢ñ\94¢¼7\f\864\9aÎðy2çÏ\11~\8d¤\8d_\98,\82y÷ù\87Uop6¤\ 56°4\9dã\9f\98`e8¤Ut|ônõ¥7¤~8ÄÉU|\9céD\15D$¢HW\85#[m6*R\12ÿú¯AeÍ Së\81\95Qe\94Û\rJ\91ßlU±VE\1cXý\8a9#¿VÊ*'kkôÔÜ/çËSoÓèLZX\fBz\8bQ#ãÆæKF«B}{Öf\97\87ØÕL\1c\88\87®¹\83ðð¬Ñ\ 3ó ]*\r\88=\10\ f]s\aááY£\aæá\88\96ÒZ¥\vÊE!\12\99£#:eÙ-¡\16\96m\ eúX\ f\ eëJX»Õ&~;®£\16XÙ\1eí4ùÓ¦|±Ç\9f\98ë\ 4úÔܾÇ\7fØ\8e±kY\13\95K!p\90\r¦î-¶^I\v2Y\95¥6\8e6ÚÐ\1fÒ¬¥Ñ\96þ\99\10»BZU$\1c'úú¸*"\9ds¦Éiª¬Üï¾~÷\9a\13ÓÈ\a£×%Û\13\19Úè\ 5ü·f=©¥É\99ÝÍF\19ën8C]O\8dB{^\ ek¹Õ\93FG\7f\82\87¦T~\82å.öæúÚ\13ô\16â»L·h\ fh«êCàÚ·ïÿ2FO«kpvBaXÏ\aýÑ\94Ç\80s\12\99Õ$â\18M':g(S\85$±q¸\19Ð1t\7fû×+h\96D:2*&½!Q\14z§\8a\84b]3I¥Ñyé,w_Kø8\18±Ó6 \e4\v£ipÂ\v\97z\v °N iwº2´\14ùZЯ\8c\8b"]\142rìÁ¥FWIZï\11e\99µìRáOòæ\8dJ*\96\12\8c9\f\1eÒ\16ðSïsp¶ pÖ01>©½\87Ó`\1aÐg\95+ç\85ÁwäcÎf\81gíßz\f¢TX\90VT9¤\85)Èîϲ[\85è1<\19\16\16#3),àÜIã¯\17\ fu+)Õ¥dÙÑX\80
-I>¸©\1c wXk,Øßø9fDd°ÆÝ¢Q{oÙ\8et\81\ fq'T&8\19,\81ÌÂgUTß TÒ D0iwÖÉü=ªÀ¥\9eR\16Lëñ`;\82jwvÀÔç\10=FÒH\1a'\14û+5®N¸\vè\fþl\15¥xÔØ[\ 3\ 4\18àå÷\84¸\e©÷¨>\82¹µ\11H2Hd\98¨\0TVÇç\1eK\83\9aQÚFâùÐ¥\0{KiîT\84¿[åà^\141]eU\92x\16N\1f\vÿ\85\8e+Ì\9e\1d7Mh\ 1R0\8a\9fµD^\98¬\s´¸)pi ó\97Ëemÿô\82\12\10°\a#°!¡¿/ÏÿC¶\8bX\9bºÐ\agQÓ~ýY0\ fi¼¨«é\1ac¾\1f}ïkͯ÷'£zV_!¸\1ce\ e\f\96\19BÂc½\ 5\80\15ýuþÉgË;S±Ç[h\87í1:7K4F÷4G{d\\ e #\96% Á\8cï\8aNè\18/\90sD²M\15È«
-ö\8a\9aÅ\95hpÄP\82¾+ë¬[)\vZïö¢@çìu\a¶(Vü.Qeþ:5`\ f¥Íiíx{\18\12k\bÒÙ\84ÑFKª.\87\8dB £y¹ÌêþçÌ\14(꼾¹ôµ1Ué\80\168c\88\88Ñ;\197Ýþ\98ø¶q~H|\9b\99\8fuó\82:®¯Fþè
-ùÎ}é@ê¤%æÛ\89[î\\84Ð\ eÐm/\10\86¶[H\9a\1f58\ 3¸×\99|\95wù`å3
-
-§\vä\94\95¬ásÍT[(-wñ\83äû´<\eaØ(í\83\bçMí\85ãy0_\8ci:\9aÔj¼<½øpJWF\7f\81ºÒ'\1dU< y¼\9c°~È/¡ó1õgC~¥<~V&O¦ó`:\19áÅ\93w\f\17|ò÷UïÏÞwÓ\8a·\1eendstream
-endobj
-1604 0 obj<</Type/Page/Parent 1369 0 R/Contents 1605 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1605 0 obj<</Filter/FlateDecode/Length 398 >>stream
-x\ 1mQ]o\9b0\14}çW\9cÇVJ(\90\14ÈcÚmÒ\1e\12e+ÓöêÚ7à\ eìÌ\1faû÷»NZMª&\84mÁ9>\1f÷WV¢à§DSaUCNY\91\17¨\8b\15¯ë¶áµâ×\11\8eÙC\97Ý}Ú lÐ\1d\99R·%:\ 5\86\17\ 5:ySÖy\93ãÑ\1a9F¯¹í^\18¿FÉ°\84_VM^3ã¦\e\b³6ÏÚ(ø?>д@\18\9c\8dýÀ;!z\82=^\8e{1\11\9eÈ\9dµä}ÖA\ e\v\1cÆØ÷ây$l#ãMÐR\ 4\16ÄΪ8\92_@\18\95ÔY³\åUÒ\14§\93³'§E ì´tÖÛcÀ×Ã#¤\18G\8fA\9c |²3)6\80`Á\84³V\ 4Obâ[=´ Ô»«\14ûûwÍwNbg\8f}÷NUÙIh\93\ 29\ f6(ðmÿùÇkè\1c©\bG>\8e\ 1ÚóÏÞ\91\büEEyÉÃÔÔ\87P\936Ú\87$Í.¥õ!õã¢1ÚôÌ\9bôoz\1fø"Ä=°)\18
-³u?óëDÚ×\89\945O·]as\7fèi»{Øâàì\vÉ\80\ fVÆ\89»½ÄMÄå\e~Ù\14\9bTéÿæ½®Û¼¾¯xÚ P\16\89ø±Ë¾d\7f\ 1È\84¼»endstream
-endobj
-1606 0 obj<</Type/Page/Parent 1369 0 R/Contents 1607 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1607 0 obj<</Filter/FlateDecode/Length 1316 >>stream
-x\ 1\9dWûkãF\10þ=\7fÅ\14
-v \96\1fI\9c\a\94rÉ]¨!\r¹ÆG\v磬Þ[KZÝî*9ÿ÷ýf%Ç\8fHI8\85`!Í|;óÍ7³«ï\ac\1aáoLg\13:\9eR\90\1f\8c¼\11\9dNO½s:9?Ãý\ 4ÿ:¢øàj~0¼¹ É\88æ1\¦gç4\ f æ#< úש(m¤i|æѽ0&ôéÏÕÃç[*³*\91Åáü?ç>>«Ý\aÇ'Þ\ 4\0}Ø\8f=ºªd\16Ê"©ÍNh<nÌ&gÞ\94Íæ\8a|¶!\9bF\rä\11éªÁ=m\1cú\94\8beD¾,\86eèÿ\9b¯Ì÷Ì3j\17µO²p0õcdï\16ë\eUé \1aî\e\87RG\81UzE*&#r_P(\8dÕÒ¯¬T\85Çö#\1aL¦Þ \az\17ý°G\14¨rEÛ!\90U$\8a\15e*\10ìF+UÑ\93(¬G3\ 2\9a*\92l\ 5¢\ 3\95çQ\11"DcE\96\81\12\92\96\ 3þõþ¯O7³\7f\86\99ôIéfÑñqMâ°2\9aß\f]|M
-\17¨Å\86l\17\1cÈ\9ext\8aX&\95~\95ïT\9a\86gÊD°4dT\1eQ¢TH¡
-*\ 4i]"G¨\8b¥4\82Fàá\8cLª4Ç\1c«Ë=r>\84! Ç}¬²L=qz \ 65YßÔ±¬%äciÐQ¿]Ë¢O\8fBKágXÒ\11©©6Ø\942÷½\0Yîù¹p\867#ºX«ë¤.Úîjô\e}U\88I\ fjí\9ao\r\13\97Ãuù\86Ví(ìR\86 DÆ\12\1d°ç»\e\83S\8a\134t¼å\14\88\82üÈI\84µ\ 5^X \99\FG$\fd\83'ø\85\16B\15\99¢g!1È#\8cèIÚÔQºA3,U\97A\138\1eìK¦~ídV\ 4\91óØè\95f±[ß\94Q ã\15åUfe ¾7&F\112Ö\12®(Bo\97ÁÞ\91s\17\19¬\8a(rõCæk¹¢ä\95\89ÐFq\fÝ\14ÐÊ3{æ\17æk«\9f \19É\r#2R%ß\18j¸JäcÄ\8d¬+\97¾ijN±¬\85Á\93âk\92)_dßÈ \87×ÝÚ¦\80M\ 4\97njPª\8c¥¶kP¿*D\8eÒ\84Q,À\8da\15÷X\1c\19ûõ\9a\1cÆ#\8cQÌ\84\17àÌÖ\93ÒϼtÙ\81%Ý\16\ 3\rvWvmÿ檡°Â\17 ~ÿú)´\92\9b¼íÚE;>\1eM»é@@(Vç5 ;ÐÌjæbÖÆèk+dÁ-Âô\98\8eþbG§jöD¯T9\94ã\ 6?Æ\94CZôg½G´\\18FacAvUÂË¢\88\e'\8c³
-\eO*`\1cKmìâ°s\90lU:S Ƽ\95\88¿^~'Ë\ 1b±\8bþÅâ°\9b\1cF\88\91z;Ä{\10\962XvC¼\a\81\95\8a\r\0½`"û"\94w#pË\ 6©(\12Tq'\9dw#ä\15bh\83x\ f\ 2\v\85\e¶\12\84fÂ~\ 2h½èONO\17\87xP\15ò\87\93\17{uW(T9¤Ø\8eÚ\8a{7Çüv>®µy\8f\15h#åv*\9e\90/'\ 1Æã+á·Ä\8e5Ö\ eÝ\91ÇU\96u0Ò\ 2y\ 3kræhE\ 6ï\ 6Nù\98\803S;)-Ø_\98jöb§RØ´\e\9b-B\8d±ß
-¾\8dí\8aøñùäV;18-úQrI½?.{oµ^A&вt;-¦ÇVûn¯Ô\bæJØ ·\1el\ 58\98\12\9a?È$ïn\ 6S\81\9eRlVèh\9c\85\13¼ëN²ÔÊí`.Ú\17\93£eé{N\vui\1c»\91E\10àø\10\99àMú\9a¤\1e¸\96\1f\1e®g3jDE¼\87t¯\80=m\89sk³M»¡û:m\7fo;¸\96àIÑ\8cN\85b)Mw_no)Æ\rÎïլ*\96\85zBÕêóÓ\1eu-Äí:tg\95W\98[8öJ\9cAöP\91]\vðïÝX\95|Þk¶\98Yßnf\19`]c8Nf\1fÁ\ 4<_Ë>ù\19àD«ª\ 46\9c_ÃvA@Å-Ù·\13°VËÃìc7\15õâ]°-´\ 2µö©Q\877ç[ß\89\17õIþ\1d\9f¡'Ósoz:Á7,\7f~\8eÇ\1cá§ùÁç\83ÿ\ 1Û\9c\84\9fendstream
-endobj
-1608 0 obj<</Type/Page/Parent 1369 0 R/Contents 1609 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1609 0 obj<</Filter/FlateDecode/Length 896 >>stream
-x\ 1\9dVÛnÚ@\10}ç+æÍDÂÆ\17nÉK\95¤¥ª\94Þ\14úP ©ÚØkìf½K½k\1cþ¾3\8bi\8c¹D*\ba³»gÎ\9c93øO/\0\1fß\ 1LC\88&\10\17=ßóa\1c]{#\18ͦx\1dâ§ä\90Ú\85h6ÆÛ\13\vá(òfÝ\85»Eo8÷á\1a\16)Æ\98Ìð"\ 1Ä÷}XÄý<áÒäiÎË\eÁdÁ$¬\99Ö\10+Q\15\12Z/\176¬\8c3V.ûáx¼¼\ 2\17¸\8cËíÚð\ 4ZGkU&W\8bß=\1fÜÀG6\8b¤\1dC\9asø\14êb\8cæh}\ 1}-X.\r\7f9\1dä\ 4úá\81ËÔY\1c\eÔE\9aR\89c}\ÀÈËþµ\15\ 6©V\9a\97\900ÃÎkQÉg©j Ñ1\9aÕ¢\ 5Øl=\8f%ÔJIHòÍ©Ò¡®-¬wçQ2U\95\1a\ 4\97o3º\80²Ïkü6Ê\9byí±°)\8e\1cI~iåÕÂ\1aÎG\10\ 4;ûá\84<øa\83>¯\98\10Û\ 1lU\ 519½2À\b\18¥[öo°t,5X6\93q\90¬à Rà,Î\9aØ\ 3¨³\1cï4Ê$\12Ðk\1eçéÖînÈ\19\ 5Õ\1a\8bÎ÷\12G^HÁë\f%µ+¹\Ù\ 3\86= îÁÏ\86 \13Zý\ 3\94Êd´ï\89ãW²ÇG\8e.]Kû\ 39\vÒR\15ö\ eÛ\17 Õ¹\10\80\87;Á\9fxC*ñhe8¿\86`Úh\13\8dp Á`êE\1eüÐ\14ö¸'4¨²Õì4 ör¨ôÔ³Z\7f\ 2\8dM"Wb\8b\8eÔ1\9a\8a¸%\8a]A¢\9e\b1\80LÕ|ÃË×òÐfL¸¸i\12
-';²\9fR[ÁÚVAäϸ\vuÇÍ'a57à\\9cr\ e0\94¹½çpJ9\1dA1\9aóåÇÃ\83\83¦©s\83n06¹?\952\\93\8b:p\87¼\1a79ĺí4ºn|DS\ 6'Yc\96NøC4*\84¶\85Å\81ÛQ\884y\9dÑû²é\ 1\90&\14®\9dó!l\9bäÅd=Xd¹îP̵\85OxÊ*a.ÚnäÁGn\f¥*\95t\e\ 1\ eím\9b\85B\9cv\9b\ 1\8c·VZçØS¤jÆ6ØÀ
-\9b\e\eÂBå¯]óÄP\15ªPÁ\9e)ªVØè\ e*®\r\93ÆéJ9'ë¿°b-ø«3»\9eJ+!ìÀØÑ·¥µ®\1dÎÇÍ êÃý×/÷·\8be\7f\9e\97Úü¢í\ 3\a\9cÁcUÚ\9båÕq\86\8dá¿bStCbÝ\9f\91±É\91x»XGaÉ©g\91\1fù®/?o\1f¿?@¢âªÀ1iQ!ÅÌ\v\85\ f\1dø羪¨\83He\15\9b\9dá\86óY\93\0Ág\94Y\ 4£q3O\1eo?ßÝ·Rýæø§ù¾\8dK\Üý\ 1wêÓãÈÿÏ\9fÑdæMÆ!>Ø\10J\10\12ú\87Eï{ï/\aràwendstream
-endobj
-1610 0 obj<</Type/Page/Parent 1369 0 R/Contents 1611 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1611 0 obj<</Filter/FlateDecode/Length 474 >>stream
-x\ 1\8dSËnÛ0\10¼û+æ¨\01õ°,)>¦hO-Ð\ 2*ÚC\80\82\12)\8b^á\ 3Iþ¾KInl·@\ 3A\84 \9dÝ\9d\99]>nbDôÄÈ\13ì2Ôý&b\11öù\1d\9di\91Ó\99Ы%\9a9\90f)K®\ 3÷å&üp\87$BÙP,/P
-P\9d\88þÔÁ»\96OVjÄ\ 5Ãgn\8c¨ðýÓGL\9d;ªá¦ü9'Çù\92¼Ýù\ 6¥\b\b\1d3Ü;Õ 5\1c\17X\8a8^aIÎ2\ f+[eÐ\8fÂu\92X>:¥¥A§ªç¾K`GT\12j0\96w\9d\14ÌW\89°M2\96ι\14öõ1\89ê\a%ÜB»á°´Ú¯\ 2ôü\97D¥\86pE13^² ¨\ 3l+!¨ymGý\82\ 5@¶Ît\ 33:]Ëð*m¦ã\8d;×>\13#í ÃWÃ\8fò2Ç\93ÿ#\Ây\ 4Ææ$\0äŤ¥µ/0Vsulm3ê'®\ 5C9B>O£¶\10Üò[Ê\95\7fI%\85R(\8bíÜ\96\9aÅ»e\18ˬ\ e¡3:$sCÃû\8a\9f\19rhT'\aÞ_Ñ\rð\10<µÒoÏ\1a÷\f½U\1eë\89ûo\1fó£\9a\9c]l$~déÃ\8d×~9.Õ¿U\81Z÷ë\r\9cI.j§µ\1cì\96\1c¸t<À7/`¥ròã\9frH\82\96\¼jhôØ\83\ fâ¼úI(¹¬\86u\ 3\8a×µNó½ßÌÿ^\994+X¶Oè¶ù«\12ï<¿÷åæËæ7\88C\1cÂendstream
-endobj
-1612 0 obj<</Type/Page/Parent 1369 0 R/Contents 1613 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 948 0 R>>endobj
-1613 0 obj<</Filter/FlateDecode/Length 1995 >>stream
-x\ 1\9dW]sÚF\14}çWÜñKñ\f\b$ÀàÎôÁ\8d\9bÖ3IãÆ´é\ 3/\8b´\82%º+\99ðï{î®\16d\92vÚN&\1e¤ý¸_ç\9esõç ¦)þÅ´LhvCi9\98FS¼9ýùøãàv\19-h\91,¢\84JJâYtÛ=\15ô4\88\171?ÇI4Åê,^\9c\9exu>\8dnh¾ZàoI«)nð\ f¼Ö{,)\9eÁdoq1\8bb\9aÇ·î`|»\80\aþÉÙ\ÆÑ\92æÓ\9bhî<ZD³î\89Wù¢Ùj\86µùj\89ßì\99\91\94\ fbx³¢Ù,v\81Ä«\18&ü\93»´÷\8c0\136}^í?cu¶z½Ú{ÆêÍ\14î\9eÏ~¿\1eLÞÞR2¥u\8e\ß,W´Î\\8añ&\1d¾Ù\8bº\91\86\10,=5Ú¨jGO¢Ü\8ao,ýj¥\99¼\17é^UòzýÇ`Jãd\8eÓû4ÕmÕ\90ªrmJÑ(]á7\89\8aÞÝß=Ò½22Å]G>ÄÆã¥7>\9eÍ\11=.\80µ8¢ÇÖÔÚº«'oç\14ÇÝ®d\89ø°k½W\962\9d¶¥\84±LÚÔ¨´´×\aj4µV\9eLfÁ$Á#²ý@x\9f!ñ¥Ë]H\80\94ó©1"S\1c\8a(\8a£»Bf\1cU³\97dËm-¬=d\9bábsM¹*dD\ fH\80%¼\86\7f\19¶\89Æí5Rdl°à\1fGÚ\vì¡°*¥¶Â\8amD\95q\9au~á\81K^ª«TÖ\r\ eUYwø Í3\1f8\a\89\88^z6T\85K\8bBf\11½Eø¥\ 6âúµAyøî\vs ²\r*Õ\1a$\95Í\85Â)iGT\17R ÃFæ°\84ts\1er]\14úÀ¾X\9c´\11ß\88Æ\1d'Ü\f¨Ø\87ZV.\8a1í\9b¦þv29\1c\ e\91ÆÛ"\13u¤ÍnÂG&oÓ®Úãe´b\12ÀÙMr³$¿\1a°à\16Ç¡@ê±\10\95lN^\1eéɧádLÕnG\84]6\15µ\8cR]NNYû/\96ÇÉ*\8aoÏ\81ý¬\eéKüá\9b\8fR1B\1eÛm¡,zcÇ0\b5Bª\ 5íZ\95a»öíÀ\88|:ÚF\96t\97\95ªR\16P\ 3Bqh¯Ò}Wdv½\92\19;\89>\v1\eé«\90 Ø×9Ia\18\9cmYJ3BSO\13W\ 3îÌ®\ 4ë\83&\91\ 5$û^F\11nM\8a2{\93¥8Rmô\8bsr+i/\8b:o\v\12Æuc¿¤k\94Ý\11ÂøñþÍ\98\8b;þéçõ\a*\85ª\1aü\aö·GzØU"U\9aÞè¶\96¢u^ý¿2³Á\9f×Tª\1d²ÄÌÂmÏ\r\91\e]ÒÃý\ fwï~÷¥\80·´CF¸û4ü©ÄNºn÷hÞ\19øÂ\1dl[dY\dÖÇäÀz¯9\16¸^5\ 6\0\aÜÑ\84¹ÚµÞ\81¯Æ\12
-ÔCmà¹\80\9dyGc »\ 4lÁ\97gmÊ!½F9\17/0^\9f\83F(\96¬N¾0Юd\95\9acÝ\90c#m2KßÑQÚ+\ e3ж¿\1d²êøt\bîB\1fT\8elÎ4;t$6zE\8e\17\19ê3\88O¡uÛ+QÊ\11½{?A\95\82\1f\fâ½c\r¦I8Fé^T(G£J~Íì\12(8/Ä\ e$.\80¾\94.\19=Ä3w\9f\89÷ËXz<ü:\8d>¢\88\80\1fà\82±a%HR\14àM+²\17\ 1´îÐ\ 1\8eÊ\98¸kt\0ÄÍ+\ 6Ó\19\1dT³'\9c9R!Ì.h^(uÕ\96[Ð7·!K\8a¥ÍÐÉàÙÛf¯[\8bPíæÚ\81æ²\8fr\ 5ög¶pb\ 1ƦBë綶T¶X@#ÖÒ°¤âJ+ÿl!{\8aÕ(¢\1fÕ\v \104¦\8bÏEðYA\80%H¡9è\8b\ 2\86Ëq)dÔa¼Ð;tÔf¨+&s¨\14U¬à\ 5ÌYËÍ\ 6¤T\90\ 4×w®m\982`º\841F \ eHX2Ï\17¶2\ 3\ f 7Ö\18!0Pl®Gp\17¡r¦CX\ 2ÒF[Ý4\85\84\91gç\ 12-\83\9cÐ'\16Q\9c¨¤Ì8ÜÈ\80v&?{f\1c÷\80rª_À&v£.N³A\97\ 2\92Û)Ô%\ fÍxºú'ÅY$\18ÕÜ\0 BJ2fËm\ 1\ 6\87\11_¼K&×< `
-q\dd]¨\949[\9cg\a×q\8e©X\9fqKE(\ 3ç±\1f\96ëbXu\ 2\7f`(\172Çdáç\1dù\19¹Å\84\82g]Ø\8eÙ¬o\84Eèx2öX¥\9ba¼¹ö+AO\87Ü\87\97\9bÝÿÝV:\18Ö½\14àÔå\b\85\183À/û¢ãç¯ÒdP¥\1eM\ 6g¼¸\87ZÜ!ǹr³\17\ 3\a\89+Ý\88\89fëó\90\97/\14áL\13Hãi<#t\fw¯\ 4¹\0E\9a\8c\86f\0è\1ct\1f;g\81\14M\83©²åö\ f@\12\980Ky\1e·0\v\ 5V\93\9fkÕÉ\123Û\88\11\ f\96aÑÿ(\vè\15\9aà!ã¾ÍÕ\17b¾\19~|¸ï¨á\12\93ÿ\90¨ '\ 1\95wÜQPô¶h\98\8b\90,\8ci\19Æ´TA\1eÜì&ü\f\bÌ2¯\94RT\8e¶Â\ì'âsà®m âÈcF\a\f¬\19b*0¶e®¨½Ä±8ß=>tc\ 4\8cBÿáN\8aÑÂ1«¿ÙÏÚ®÷1\81\95º\ 2=¹9²k\ fXà\12[Qf[\94\17\90Î\ 5\98a3¬\8d|Q\80Xá>\1dzv\1d\95°g©\9bsÝq.
-ÎÃ\1d¯/\ e\15\18ÍÈjb\8d:Mïo~{¢ÆHÉ´\f\1dîf¢\ 4ª<\e\ 11\ 2s\1cO´m]kÓxZ¼À\8b÷t+Òg \9cn\862ÚEݬ\9a\84®\e\8fY>Æ<èbûeã\ 1'þÕåþ&Û~¹\1dß\18\ 6ü\ f:Aĺ¬ñ½á\9448\19Ê\12PóÉ\ f
-¼\91Cyâ\ f8¦\fU¥EË£(²ýuó\7fã®h\eÍC\ 3é\9aµ`䡱\19:\1d·V§
-äÆT\a\16\82³\a¤ý2e¬ãN÷½\f½\9a4\0\8dóçâi@wÅÁWS¡\9aãY=\9c\1eãS\ 4
-\a\ e<}AasNGÝ\86\99µ\a\16d\f-\ f\ 5@Ö\9c¤·ÖIW\9f(ø\13\ eQ©²vØÄô\r\0^\9d\88äÊ\1f¼róáÉA7f±l#\9f>\9d«®ú°\8e/\ 6§*ÿö\8b\9aþËWôü\ 6·/\12ÿ¥\14Çs¶þÃzðËà/GnUÐendstream
-endobj
-1614 0 obj<</Type/Page/Parent 1369 0 R/Contents 1615 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 957 0 R>>endobj
-1615 0 obj<</Filter/FlateDecode/Length 1946 >>stream
-x\ 1\95Wßsâ8\12~Ï_Ñ\ fS\15R\15\f\18\ 2d\9f\8e\r\93ÙÜ%Ù\ µwU¼\b[\ 6MlËgÉaøïïkÉ\ 6Ãfçê&\ 3\89-©ûë__·þs1 >~\ 64 i8¦(»è\a}¼9|½~»\b\aa0¤\9bñ$\b)£a\7f\1aÜÖO)-x?Ý\8cFX\eM'ø;ħ\94\94\\84ã>\8e\8dnÂ`ÄǦc,ø'>6ê\8f\82ñau4\1d\ 6ÓÖ*\v\1d\8dBÞq*tp{\vMa\9fµd\14N¦\10î\9f\1a,C'éôÔ¯Ë\8bÞý\88\ 6\ 3Z&°v<\9dÐ2vFöi\19ub\1dU\99Ì°JçÁÕòûE\9fºá\18¢\97qg¹\950Gð\87\12¹£B«Ü\1a²\9a\8c-¥1$Öº²´Û
-Kv+\89\8f÷îÃZY§ÛÝ)»í¦±(\8cÈüb\83¤C±\96\86rm©(õ\87\8ae@PG\8fóÙ\v\99ª(tik4\83!Ì\ 6\9aR&²,eÌúUî\14Ú2\10Ô2á(VåQZÅò\17\96\82ð\1e\8c\9aQ&EnH'\88\95-\95üPù\86*#K\12Q¤«ÜBz¢Ë̹\84\92Rg$rúCå±Þ\19x\1c92\8b¬ú\904W¥\8c¬.÷\84Ó\1f²tþëÝGµ\ 3º\93`Ê9\ 6ì«p<©ÝÓxÀ-v\eãNP\15©\88\18TOÚ¨W\bcvñÿ%º\eN\83ÁíÑdv¬\91\91ÎcRVf\14Á\9e5\82
-s³"Uf\v§®÷ð\ 1+u\11x^,`tL/³'Êt\¥Ò\ 4ôøíå\91`¦Aª8ÿ!æF\9eE)UëRÀ«¦Ñ¢×V¨\1c\1a\9c'_fóGZèÄî8V\9dµÅ/½Þn·\v
-\11§\ 1\10õVW\ 1ý¦w\12ª®]\98c \11©S #\12µ©J =SìÀP!¢w±\81v\16¿\96{¶\19+d"]H\8eùIÊÔ^½¥\ 1ª\82Ë£;\1cùÔ\1fÜ\ 6Ã\80\16>\11\ 1Þyeá¢lXq»¦ºá\ 4Õêë¥N`\91Åk\8at,9SÃ\80Id+\f\0É\9cb\18\96\ 2Mì<l¥±øÓû\9e\91þ^ÈÜiã:÷yå6F©B\9d\9e\19}ð¶¯\1e\94\99ôjÍVW)¢\8a(¯SÉ%³Óå;qAÒ³´&\12\85¼4\fö¶µ4Ñbþ\8fc\1cÎôÆ\95\93\89<}wN\85\11\9c;FS"|Ðjâ\0Ap\ 44#álS\0\83*Ö%"\84\85uµAb-9\8f¨\86Ì\94\80Í[Qºs\89ú\11ÐCr¦\7f¯+\17a(ä:çüº¦"\95\ 2rpØTP\ f¥(cä\19\1c\9d¦È\f\eA\ f¿\86\9bÖ¢[¿ø\9b{
-t¹q\88¾\ 3Ýþøî§\192B\86@f&ÜÉW\99:Ê0[U°\16\ eæëý\1d\85Ãþ¤\86\1fö}v\15Ú¨\1f3Ï6¼ôi6-\18e\9d<5\99\ 1=\84æ2\ 2ù
-¦\1d¯=a¯ÂÖÓÜAæyÙèq\8eý;ò\87@½KÓãüêy»½\88S\10\1dg5ª¡a§UçY[xÔ\13=8·ø\90Ø
-\95($3x$âÝ\bõ\8fB\96Ê5\98´¡uDLY\85\90ì]ìÀÑ %_%!\97>²¡vW£Þ!ÝEzý\1d¤\e¥ E\ 2\92\r\888'nT\8eé{÷}ºk9¬k¹}bÕ¡\ 1*{\10Üà3Âg2\18ß >ñCϳ§¯tÙVvI\8b·\17IJ Åòõínùö:{l°õѵQóÄÿæ_\17wté\ 3Vã¼ülßÓÛb Ò£JÅô\85J|¯®>Ý7û7ñ¾(Ƕ4{á\16 \91Ç_(·\87b\17?
-c\17Òò6½Ñù\12¾¦/\9f\89t8ÉíJ\12¿\8dÞUô®\ fO\90v'ò»È7\90Ax|ª\8c=<£[ØûTlÌOåÇÊ {í\9f\99\88¾\90ÉÖ¿i÷×\16¿æ%7M¼\8dJUÀ\ eP\11Ô\94\9aÓ×?ý\ 4x,ý1ô\1e\9câvý\a\bÍøÁ\ 5\98 He¨\89o¥®\8a\879^Ä:Cã\81\87½\8fOkìÀ×í* WH\87|öC\0³óymy¶ýýa\ e
-åF£wÜàÐB9ç}\1a,¥à¹!nLª\87\184\ 1SE[ÎÜTnDÊD\ 1ÂB;ÈQ\ fEµöí\98)\8f\98äl\89Y\ 5¼âË©.;\7f\ 6>\88O \9dæ\8b\86\ 5ÏÔ\9aj\9d)?¤\1d«´E\1e\80%<C2 3\ e¬e5Sáß\91\15\84\ 3l+\ 2ìç\13ï:X\95a¸b\19\ 6s\11w?ïD\8eÚn«`8Ïv©dF`\95\1cGø\905påÖ<Õ\9a{üJ33u\bçÊý5\1aÍ\99\81Ðìð0g\9e2\85C\ 4Ó\ 1é Úí}{~ø\97\ 3ðÙÜ\17ÐÌ·\89F\18\14\88S\98-~<e\87c¦uNØ\8a\9b\95mÆ"ç\1f&¾Xaúj:tÀâf¬<¶_~_wTÃs\11\12\aL\9bÆn\16i\ 1Yud° \98_VWµÃ5¶§¢ð\99Â>j7\9f\13|\98å]'e6Fãâ¾Å\89\ eËñ\1fÉ\8d\12T\9b?]\12\1er\ 25az>\ 4\9d»-\aö3¿\82Õ\9cß¹ù»B\ 1N¨c\\a³¯ÙMPyìs\10\r\81¼ë,ì®z\9b\10±Ì¿2\ e\8d\1fj0\81¬Uîï:Ç\11\13IÌ\85\ 4Ô\98bðí'V\87Éçç\99RoÀ'w\85\ f%Ü)°R\1eóÜqG~@Û#ê)\ 6Ø:<\ei\8b].²UguuMÒ\ 6\18P\ 2ßú`6W\10g³¿T\9déöä\ 2ç"ª\94¹JL\91W[\ 1fe'ºÉ\91§÷F±Ê\81&MA\15ì\9e¤ÊquÑ9\ fk\91Æm*²é¾\ e2'"\8fö\18èÎ\94¶«8\13ïìK\Û´1ª\9e-}±sÜ=>ô\8a?]¤à~\ 6w\8d\99ÏÖ\8ef~æË\ 1±GÏtþ\85\88ç\87\ 5ç5\8f´°6\97Ö\8dµð\9a#JÌ\15Þ6$\f®¬\15\09\87À\80\12\8d²¬"\8bÉ°\9eé¦5Ý\fp»ïO\874\1e×óÂböôë\8c^JÍ\83\ 6ÍÛ×K\ 6Ùm\ et'}\8c\1aqç\7fÝ\15Fãi0¾ ýMp0¸a!_\97\17ÿ¼ø/kå"Õendstream
-endobj
-1616 0 obj<</Type/Page/Parent 1369 0 R/Contents 1617 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 960 0 R>>endobj
-1617 0 obj<</Filter/FlateDecode/Length 1136 >>stream
-x\ 1\9dV]oÚH\14}çW\)\ f!R0\18\88\81ǤÝT\91vÓnþ!Uc{\bÓµ=\8eÇ.áßï¹\9e±1Nж%
-²\99;÷ãÜs?^\ 6>MðçÓbJ³\80¢t0ñðêϽ\80æË\ 5\9e§ø/$mù\0¢í××O\83YÀç\817§\94næÞÊ>'ô48¾¥\14¬¼Ùñän=\18߯È_Ðz\vÃÁÒ§u\«\9dÐ:\1aú+ïÆ£\ f:ÛªçªPÙ3=\894\14´Wå\8eþüxûåjýÝ*\98[\ 5£Ù\ 4®®c{Ó÷ès.3\16¤È)\11¥Ò\99½6GdîÚ\14\ eÄõ&\95EI\15K2U\9e뢤.¨Üá\9díÞF\91®²\92tø]F%dIdG\v±*ð«.\ eddñC\16×´U\85)a9?°\ e6:¡\91?ó¦l¬Öè\99h'S\ 1ÉDR©É$"\8f/Í©·Ôjö¬ã\9c\92ÆqÆ\eÚ
-Ë\v{zãN\87\14åÖïÆÊX\96ÑX\ 3\91$\16ùØ\9a\1e¿Å©|\94¯åu\v\b\83pjý$\82S-C\e\10\0ê_áø<ÎEï\82Gë3(C¸\14*3Tî5\89²,TX\95Òðý\ e\9aû\9d\8av\14K\ 4\17S\95ë\8c4<.¨\83¯±6.+\15_\1e\15\912¸¶U\99\8c9¡=\7f#mpâðë¹\8cäÇïäõ2V&OÄáQ¤ò¼\9dwà\84!°ç9\97\85ÑÙ\19\93Ì\13\8fî\10\eé-\e7\92Ò
-$\ve\93©¸\87L(Áa\90ë×óײmÕ\90mnÉvqA=*\9d¤\15i\99ú¶\f!ÙÍ\0m\86\11\9ciø\bè\vùR¡nb
-\ f\9c\ 6Q%åæª\89`â-\99ÛMMÒñÓ3_\17Ѹ£Úiè¸\91I\19Ã\f×s·\96\7fÛT\8f\17LÅ_t÷\¾\7fCU·\97¼\r½Ê"\9d¦\12\8d«Ü\ 1ò\ 4\86Imé +Ú\vþ\15}ǵ;fÉ×û\ fÓÙd\81\=><m®\\ 2{@!±ý´¼\9b\93L\99\ e\95;Ìðða\9dãûn\e®{÷\ 3Z+3ÃzÍY+w¢¬ýMÑ ¸\e\90Ñ)3>V\914\84j¯ßmIPªQ\10\95\91Û*I\8e\85n®\11ù¿|©®\85N\12½ÇHi\ 2smY¾\8a4Oäu\8dJ\ eÒ \9b ¡\8b\ 2\1c3\94
-Ì\ 66÷v\1cD\890\ 6"\9b!÷\85\\e£ÂäÀ\ fêµ\19\1c8é\99«\8f?\15\1aF\84¡½L\92ÍÕùº£\a\171RÖ@Ñ(tìCbº5ÕÎ?\fî\9e$Ð\93¯n\96ÕΣ¼ä\8b\13êTNÃ\8d<üö,KD\9eï3\91n\86ïÔ)+D{=Ö)å\854×Ö¦D¸-8Æåq£6\14ù¾PñYÅ8ë(nuv<í\12\9d;£#¹@û3h¼?\9cKÇ\11½NFP2\85BJ\1deÚ1ܤª\aèÅ\85\85\14\b<Vi\88éÃ\9fÖÑcðVìùçÄ¢¬\13õym©d\8bÿ8\8c¬Ñzµj7#^ì^4}g§âXNkÑ®Dh\bm©P.
-Lµ\12\13\8a\18TñC¨D\84X]¸"Ó°\1eì(\ fоÞЬÎi³\8f\8cFüë\88\97\ f°èÔà\10\88\81®·¯¸¾Þ ë
-\13Ý Wè]n\a¬\8b\ 4;ê¨Þ8\11\19«%c\12«7rFG\v\ f;%\96Éx¸\99\ 6\v7ß\97îÔ\9f-½åjÆ{§\9dWO·\7fÝÝÒ\97B×\vÞG\1dUÜ7Û\9dqä\aX\82\973\1a-&\18\8a\ eÎÿ[PçÁÒ\vn¦Ö\vß\ fØÃ?Ö\83¿\aÿ\ 1ÎîfÂendstream
-endobj
-1618 0 obj<</Type/Page/Parent 1369 0 R/Contents 1619 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 973 0 R>>endobj
-1619 0 obj<</Filter/FlateDecode/Length 1487 >>stream
-x\ 1¥WßsÚH\f~ç¯Ð\84¹\83Ì\80Á@\fÜL\1eèäÒö¦Éå
-oÇ=,ö\1a;±½¾Ýu)ÿýIZ\9b_C;×i\98\0ë]I\9f¤OÒòoË\87!¾|\98\8e`\1c@\98·\86Þ\10\9f\1cÞ>¿o\8d\ 3o\bÁ\8cÞs¸\9bxóz\91Á²u²Ìa6ñ\82\93='7\1dy³\83\1c/\8erõÞìÎ\eApØ;Yæ0\9f\91½Ã\9eÓy7GC\r\16^\1cuÖ{³±7\81à°çä&\ 1>läxq\94«÷¦sÏ\87à°çäÆc\ 4ØÈñâ(WïMïÈÞaÏ÷9NÃ\80\9d÷§>iå\15Ibxa\84'F0\99Mé;þk qëݪ5x\9c\80ïÃ*¦|\ 4³)¬"NÇ\10Va7\8bD Fê/Rß®^ñlX\9fíO½\19¥r\15u×£`
-n·ÑÄ\9b}\9f¼À\ 3¬DDyZ@Tü¤\1aSÅqúõ'\95Äif\7fÚ¡Riû#8ú£\99çÏ¡?"N`TV\894\12\ 4¦!\92&ÔéFF\80\11²\89\ 4\93o¼P\15ñº{·¾\85\\14P\8a-\9e-"0
-vi\96A¡,l$&±\94¢d"µôà\83ÚILU\ f\ 4\18\91\97\99$\80C8d¢Q\f\18\ 1L¿ÒP!\86]j\13T\ e\9f\1e\16/\10¥Z\86Vé=\84ªÊ"\10%ZÐ \8cóu\bs¢
-ê\1cM\9c\1fí6\f*£\a\99
-E6@³\e1ÈÒÍ ±Õ@\18"3Ñí¿·\99Ú\88ì\9f\8bÇ@\7fF\86\95Ní\1eî \173\8eÀ×\92|D\16¡Þ\97\16\ 3bÌNéÈàÙ½dp\84ÉÇ:E#|´\90v\93*\ 3\85È%\9eZ-\96\1fV¿¿ÿó\9aaÔô¶Õª*ñÜóâóóÇE}êLa\e\98ÉZf\1còRhÔ\8cDºj½\8di\8dÓBrB\1f\9eÁ*\17ëD\16°I\8b(-¶ô\8cÒ}\f¹«´Fß\99ãm@Â\1cÜæÜÙ$5\80ªñ\9dè`0k\8eCMè=\80Ï\ 2-hH\99ª\97ÁlC^\19æ\91\91ø±G\84\ 4«\83ò\1cß\bú»º²G.ï]L\91\96¶ÜQ|\ 6\8f5\eº\1dr\85í\93C×"Üfèe¢\ 5\12®¡9ë2\9e\8d6LH\84û1æ\88Ü\9cµ\8c\eø"²ê\90ä\8b°\84\89(¶ÒôP\10\ 3Ñð¢®\12\89\ 1Ah\)è£w\rÚ\99-$ÀMXÜ/\89Æð$
-¬;ÝSÕ})\15\96S/
-ï\99áôEéíÍu\9a\80)e\98Æ{ö\85«Ê%¶c QÆ2!×]ä\87¨2k\b \15\ fmo¿\89Щ@|"\11\e\8fQx\bá:\82\87#÷\96ËO J\9bª\ 2vD>l,\ 5Vø5þ]³Ý\86u·£â¸ÓC^X¡-ØÌà\ 2{GG\15\1dÜýXß~\ f¼É\10ùAþ:è\93\82¡æJq¡öT³¥\8e£1äÉÁ*G/ÀÉE¾]ÇïÈd\18\81*n¾\83\92ÞÃx6¿\ eð4\e"òE]\eì\94aÂ\91=-ëk°\98tn\98\11å~\94a[YH-²ÌQ¬Î\80kO\ e\ 4\15\14¶&ê\rêí\1a\80º\99ÕÇ\10ºûëº[¥Ñý/\15¦²«6¯È\920Ã>ë(¿\bq \14ÈÐõ-Ó~ð8\a\1fo\v<\fÆ<Ò|¼&yP\1f4<¯ÞSW54ð\92rYÔ#³¹(PÏ\9eº\9e½0ÜôQÌ\19Â/8\e\9d \16q¢+.'&~m\ 2N@ö`¯*0 \ f\ET~ôD~M\r\91½\89A}'áë\bîhÁ\95a\95Ê\98J\91\14\99\e\88g\86\84µ8¡++MÓB\9a1þ$(ãò\e°y´R\8f?Óv\ 6û\95Zp\96¾É\v÷O¦yj±sTå\85\vX\1eä ~Ô\9dßb\a9\ 5\82\85#p¸Ä1Þ\r
-,'-%¨\98\85¸\98¨\ f\99R\84ò·ÓØaÉ]\18"vº<RÛ+3\91\16¯\8a{!µÀ\ 3\0à êÒN"/\87\96ùm\11\1aóÆ\83?0\ 6\17Féþ\93n+¤\0:©áy¹d>½,\9e\98 \9a\ 6(Ò\1f)k**\84^Ó'\ 6Ò\86\ 3*/¾BQ»c=.ÏtïYß^æðc\ 1Knø8Ú%ÕõÈ\eyc\9a(Ò9uÂ_0{ceN\85E- \ 2ìF¥2é×Ú}\ fç4îå\92nk6\11¶V\9d\8b·Ë¸V\86nu\98\11²Ã:8ʧ¬öà\11\em¡v\f\ 6\83\81ª\v\ 5Ï«>3\86#Þ :Ö\18FÅݲ(d\17qåkZ\8dµ\8eÄàqVßêý\0\7f\1dÌÆøû\87ïjËÅÓ»\ 5¼hE\0\1eTXQ\ 5s$Ik¿9Þ\9f\ eñV\18uÿoýO\82\99\17Ü\8dÜÏ\aß\9f\92²ßW¿Zÿ\ 1ûm\1f\80endstream
-endobj
-1620 0 obj<</Type/Page/Parent 1369 0 R/Contents 1621 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 976 0 R>>endobj
-1621 0 obj<</Filter/FlateDecode/Length 1734 >>stream
-x\ 1½X]sÛ8\12|÷¯\98ò¾(W\12#Z¶$§Ê\ f^gs»U\8e\93\8b´\95\\9dî\ 1"A (\0(Eÿþz\0R\1fÌf+[{\95$v,\11Â4fº§\aþ|\91Ò\10\7fS\9a\ÑhLYu1L\864\9eÞ&×t=\9dàç+|YI\ 5?ÀÒ÷wÿ\fKoFi2¦\8aÆ·É\84â\8b\92f\17'/+J\87×Éôä!\87\18\ryóN\88\9fç\17Ï_ÝR:¡y\ 1Tãñ\r>7ÏCÔ!ͳ^\8a( ÍdV[å÷$tNNTKq\9fe¦ÖþÙü#6¸¦4\8d\e\f®&\07Ï{óµÄ\19\ 4¾üÎ\90ª6Æz¡=m\8cÒÞ\9178b%«¥´´[KM¹rYí\9cÒ+òkI®\rh\8a³x$µ·J:R\9a×qø!\rÒQrÅAseeæ\8dÝ'\11׸Á\85<\ f®ÆH0Ö<É´ç°{À»n\ 1\16±ËêpnglNÆ\92ö\87WÂcÕ²ö\92¶¢¬\ 1Â`+¤\84j-uf÷\e/sz|yÿ\16ðq\14£\e\18Y\ 3c0I¦\} X\\8d't\ e2<<\1cå\ fa\8a²4;ÒF\ fD^!\ 3µ\936är«äî¯aÿ.hm]\aWÓ$½=æ\10Åu\926m\96ÖÂá\8dPì¬\94Â\92\97_<ÉϵB\9eP0<\ 2m2$j)\19sÎå\a%\0Þh\81trÖù,´S~mjO¹´jÛp¡SccÕJiQÒI(\87ºè\95Kè\15
-V\19\90NéÂØJx\14\81ð\8f\ 3äÒ\vU¢h\ 5=¾~þ4ïâï\83\ 5\ 50\0\e\96w¢þòôðîßo翽y¢l-PhËûð¶3VÃà×7ïço\ 6\ f¦,AÀ¶ò`f˺yä{¾\ f\9f)\94uþÈqå\-ûáÉe\99\8b\r9W^\92«\96Ift\ 1\9cVT\92Cæ²\10uÙÊ\aùe\89ih¢%_û\ eøE/2í¦áa¯\rBwHN|Ö\96º·x\86R´2l\ 2BµÖó\81ÇPR\90+\80y\81\936r=\b\ f\87²\10EBïYÔq# |³\91\9a\85Ñ\ 1Æ\9d.~ OÊ\93r\b\ 4á,KPÂ0#BNÚÿg^X?\7f\9cE\89\81bRçà\92\ 1\8fb¡cO M)2\19Ê\8c\88³\84~\vG<i\13\12,C63á\90õ½©\ 3sÁ!£Wå>t"S[±\8a<Ec\12\ 1Ð\1að\ eméOSZ\14_å4Èí\84\ fO&Ð^øpBNÍ\8c6Öx\93\99\92ó\90Ë\rZ\19´\91s§+Ä\16Än\bÇ\8b·#:dãëD$ô«Ùq\9bëwòÍ|mKA¥ZZa÷ä¼*K\ e¾U9TìêM¨6ô\13°\99\12b$ðom\90ktãÐ\99Q÷ÌTU\15@²È\96Òï$J\9e\95\8a\15ß \1cl#0Ãu31\a&ìiØXÚ¦\1fÎ^\87}\91\vP\ 1ol±í±õ)\94\v\81ѱ¹o8*¬©h-À=\1c\aຽ\89\9fw0q2\ e¼MhÎõmzTn4oܲ»\80¬Í\8e_Ý?<r=byaâÁõz®\14\9b<h5>8héE»ð¶uÇëhB?ýD±\973\88¨ùØÑs}I"Ë`\1f}\82Ó\80\azO\Ê=C\92¥;4¦a0ê^\Ì9bwrwGóê\1f\9d«=yó\19â?K0]ß]fú.t0ºgGé\9bún#ͦ\94ý<»\83\90\94þhÂÏÆ®.i\87\19 \v Ýì\1f\\9cððt \18\8c\82éb\8a\98&\8d5nd¦\ 4úðÁMQ=pítª\bôùÖXq¶\92Ìò#:nVÂ\8bX7 %Z\bw\85Ø\9d\8f¥;\86;T%\96ït88f¯[ɨÓû§×÷OGr¥ãÁr\ f!³\ 1BG0\9e\9c\ 4NÆ\1eaÑ\1e!\1cËBvànãE\ 5\89¶\1aÍв\96_ ¼LUð´hdA"Ï_\9d\8f\rí\8cs29´\ 4\8c\93Ck5çe?f±÷"\9c¡k|Ô\1eâ»ñÓ âÎYþ\1fø7»üQ8?\93\9dá\12ø¹W`|\94+$Ö«\8a_4½\ 3}Kitýôv2\8c\ eÅÊ\8aElÓÔûfuÃ|ÒYü4\9eøÈ\91R´ãi\17$dW÷\7f¯~P´\7fU\8aUG\ 48~Ì.S\eÌ=P\8c[¶µ\18ÆÙ\f¡j÷¹æ±\eÍ=û$1+üç¿G\12r\ fÃþ<¹SÑÆ89\91«³53øwZô¸±.\9eõéý¢\87Yø\93\8b\fæw>,z\1a=¹\1dÿä\97\8d\8a\ eÌ\ f¹Õ¿\`\14\ f¶\99/\9eý½l\94feô\1cµ\8eå9¶VØz$B\98Å ÷\13\v\95Á¿k\räy\~.¡îäÝ\12ã|òæ\88EñCC~RÙ§\1f\1d\132{\10úa-ôêÇå\16A_×Îÿà¨kSÉ\97¸P|}NÇfTð}2L\ 3¼\86Jé¹qÃQwk\ 59à\87
-39/øýé\ 1´÷èõÍç\82àÂög7Ï\13EqËÊO÷p~¾\a\1d·hÆV¾°Ðå\87\17°ÙpwþÀ~ÆQ\e@\8d£ÅÍ"¨\84Þ5W\16¦ûà$,\7fî2h'F¿\ 4îö\16ÑÄkï\17\8bÞ\rfþ
-Sú\ 63oðâî\15ê\ f%ÜúÍ\89!M\9b\89(\1dM\93éí\88Æ7i¼\98Ïî_ÿ|Ooa³¦\97&««Ö\12\ 3òt\8cßMLG4\98\f1*åßó[\87ëñ4\19ß\Åët\9aNy\9f_æ\17ÿºø\1f¾ÛP\81endstream
-endobj
-1622 0 obj<</Type/Page/Parent 1369 0 R/Contents 1623 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 979 0 R>>endobj
-1623 0 obj<</Filter/FlateDecode/Length 1645 >>stream
-x\ 1µXmOÛH\10þί\18!U\97Jĵ\1dçUâCHBA*G¯¤jO\97û°±7\89Áñæ¼v\ 3ÿþ\9eÙµ\93`h\v÷\ 2"\18{wfö\99g\9e\19ó×\91G.¾=êúÔêP¸>r\1d\17wv\1f\9fÞó\1d
-z=|®És\ 3§[þ\95Ð\8dyæ÷[N\80{]¬ðñ\93IZ\1c\9dM\8fÞ\9dðGÓ\ 5[îôº4\8d\8ca\97¦aC\87Y¼É?\8a|õvz\8b¥A¹´1 éJÒþ1m2µ\91Yþ@z#Ãx\11KM9Vl°\95ÔÂ\\17Zf¿hJÔR¥åÖ\13rFWc|N¾NNHeìÅ¥¦×r|ÄÑpÎ\86SZÄ\89t¬»<\8bÓ%\85"¥¹¤´H\12{ß8\895\8e\94\88<þ&)WÆa*óÒÙJd°ñI.dV=<>\8cã¸æx#2±\969VÇ©1¥×s'TébÖhÏÞÒ\1a\11lÄ\12\bª\8cÖ
-PÆ).×ð®RÇB\15\96P5»NÏ#¿\ 3ðq¢\99ßé\92]PÁn\9e7[}§Ã\v\80#\1føYÈ÷Ð
-\vlyÎ\12Ør+c\ 20¾\89¤\90\15V EÚ\0xB\ 2I\bEBb®URäòÉéó\15g\ 3ë>ÿ:2®\9e\a\8f\81?Æó×\81Uóö\9fA\87\1c]¨µ9Ì\13¦®ð`\1cg2ÌUöð\12²ò\ 6\8av;8ÑÌg\86Ú\90®v\b\8bl\ 5·¥æå\82\8cÛ\8c)\89\8ch\99\93H£\83
-\11\14\99\87\89ÌÁµ\13»|çS¯T\91DLu\93\aöØ<(\ e\ 6ÿ\80ÿëBçv-h¿UÙÝ.wUý1Ci\86/\9cá\9bÌð\9bËb6Û\9dòYæÔ\ eÊG+yô<'øȯçÄO\v¨ª\8fï\16PÛwz\@\9c¡/8¾ÎM5rø\8fØ\10âÐ"äÒ.sV\16J\91e2Í\93\a*R\98\88\9ebhâ\ fJ¸R,\8e\9exeîÄi.\97ð\9bÉM&5\9c\99\0«ì\94E¼Ó°8Â
-\16Ò\8cf\8dO\97ãÙÛ\7f\11Ò&\8b×"{x\9f©bs9~6º\1f8®B,Ð\92ÍT7MEX\8b\8f%¯\ eVÕ;\9a~ÏñúÔ¬$\91\eÉZܪ,F÷°Bsã(EE\13HJ*åÌ /´]É\94nÄz.¸¦\90In \ 2Wôq<âý(*µ\16ÐíY#;\10|\ eñ z\8c\85&¶4/®¿L¯\8d\92G2\17q¢á\f\95¸åFÁ\92\1f/\v\ 4`=Z?\16L\1a[7#\95æ\99J\12TÔÛç¤a\81gjËQ.T\ 1MÍ!Âs\88îÁÁ4T\89\8f\16£Y2S4\1fo\18\86ªHs\ 2\r Y±í¡\86¬vgªÒf$\17¢Hr+özÀgD\17ßAûH\11_\96\1dÛ\8d**ï\eük2üØ\86é³û~öOÂØÉèk¢x\86gàÕÿ\b¿CçO&\18y/Ö\9bD¢åj] £L\877\17ÓÉûkZ\81J)H6\97 ó\8efÑ\9eÉÜ)ò\95Èí\91ÛÕàU\8eO¦=\9d\1a5\7fóa6{SØeU\8d5h+4ß:`<¸\12§`\19*#Îum\biT\ 3NÝ\8e\9d¾¾pÑ Óý(Åd\14Ññ\\86w\ fÇ6\1cÌzvâ²\95wbHl-ùUàvÜâ¸ë.J\1d\8eë\ 1Ëû\r@\80/\18ç¶Ua7\9b\19ß\ e¡Á\9aj±}\7f\9fZ\92÷±Æ\11ËÙÍ\14P\r\8cã"\8eN\8d\99\13U\9cn¤â$Eá©©<¾PÙò\98ϱ\9b¤paú\ 2]¨Dû<±%É\1aTU4\84\aU\9d*Ô,\a``Hk\8e9`ÛqÊ©øÅ0í\14\91uÏHa\99ÉM"BL·V¡¶1ú³QË-\ 4\15£0üí\ 3´\9em²j\81í¦\80Jpì\0owÀ£Fæ\0\adLÁ&OC\18\82Ùz¥A³\86t\96\8eÉÔÕõÙïe\96vm«O\1eÞ-\16x\8di¶\ 2;\f{}§ïÐÄ\96\b}\18_\9eÓ\ 4bÇï\ e<o\89G:hqª\b\ e+~×NÌSÄ°×XÎ\añøÃ\91\1a\93;U\8dÓ0)4&ôªum\94\8eï+\99Uó[L\87a\82B5:ÊïEý2`¿\f8J\aÄÄY\16Rç>FäCê \rqz«\f\8dÀ\9e
-^×\8e%)Þ¢´F`Ñ\80zÝÞ¸çzAÇí\8cÆC¿ßév\87A09\1fzvë|ÔmÝl£+\fw#\0¾\94\ 3ò½ \eôZ\9dàɺGM~@\9eïz5SÉz\1fE»í÷]ßmyg\93ñ¤\ fïÃqë,hµÏÚ^à\ 6\93Im+¢ø t~#sXvñÝí{~P[d\8a|\1a¯\11¦[{dñ\1d\19|\9f$\96eª\ 4
-ø\ eÈ\ 2\³p\17\87wj±°æ¿\8b\82\bÃü<\11K= ?>\7f¥êëÏ\9a1\8eô§¶0Éá°}×íÔv\ 3\8c\91H«\8c\98£î\87Læ¦y\97{ÊÌÔRÒ¶tæ8ø\b\9eÎQR¦\96\1e5~î\0ߣ¨|\ 1IC\91\99·\8a\9f±ôÝy¯\14i¯\83ÿ\ eôZø7\80Ï\93îÍðêlH\1f3Å\95\81q'D\a+§VÆ£Y-ov]TJÔxu=\a\9d\9eÓiûÐ\ 4ÞíõÙêdzôÛÑß\83í!\ 3endstream
-endobj
-1624 0 obj<</Type/Page/Parent 1369 0 R/Contents 1625 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 982 0 R>>endobj
-1625 0 obj<</Filter/FlateDecode/Length 635 >>stream
-x\ 1\85TÛ\8e\9b@\f}ÏWøqû\102·pÉS $ÛJÝK7TÔöa\ 2\13B\16\18:\fJÓªÿ^\93Mº\12M» \10ÈÇ>ö±=ßF\14\bÞ\14<\ 6Ü\85´\1a\11\87\80p\99ã\82ð=üfø\18\ 5\9bÞ\80Ð?¯\87ë\11ãÄñ@Pâ\b¨\80\93ÀñO\7f%¬\8e\818\86\10Ã@ód4Y\12\b Ù µëãGv\fL I¯J\9dë:)*5\ 3ò*Ù\8d\b\8c\91ÀGÌUV´M)\ f·²7^+#Ë\f"i¬2\ 3`YÝ˶Ýk\93Í`:e\ 1a\84Óù"^\ 4\8be\18Æ|.øt>¥\82\88ÅbàÚ\98¢\92æpmt×¼\8dg@\19¡\ 3\88^ïTj£\12)fÐè¶ø\1e¦©îjû?\+«µ¼\8c\93ij\97¥Ì1Úç\ f\9fà|}\1d\84ëZe\9eËú\99\9aCc\7fÍ\9b\e¦vþÃã\ f\94mèP`ùyzI ®Èn»jÌ\f\ 2B\86:§õ\vò꼨W[U\963\98¬\8bz²\96ív@Þ·q³yê#£Â\13>w\857\0åÏiп²x,ÒÇ\97C4ûì\9dlíJYì\15ÁÛ\vp,\a<¦W\82^¨t«+\15\17\ 6Û©Í\ 1\8béÿ'\16«±*×\93ËÚ!c$ëh+ëüÂ\8c¢õ¦kíÙüÏÒkûÜKßóc\9fPá\127\8aC\16¸\9e\17
-\81£Jù\94/££j\93e\0Ô{Z\991\17ý:ÐÀÁÍ\80HW\95ªmÛ×<Y
- ô\84b\1e.1âîK%[\ 5\95,J\90e éÉ\ 1×:\97&+ê\1cì¶háÍÝÇä\ e¬\86\9d2æðú8±\8e6¹\ 3IoÎtÚ\1d\89`/[Àé·Ð5\99´*C\9f³àÜa=¥Q\9b\12EŸ
-Výäã1Â\1c\8e\8cÇ\\9c/tú\94®\7fJ\97ºxÖø\1cøy×WáÍ<\84{£û]\83øÄ-m¡ëÞs|v\18{¤??.\89!\ßq§\fÏ\98ÞÎ\8eC±HFïG¿\ 1\ 6à^èendstream
-endobj
-1626 0 obj<</Type/Page/Parent 1369 0 R/Contents 1627 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 989 0 R>>endobj
-1627 0 obj<</Filter/FlateDecode/Length 1464 >>stream
-x\ 1\8dV]oÛ6\14}÷¯¸ÈKS \96mÙq>\9e¶uK[ h·Æm0 /4EY¬%Q#)«þ÷;\97\94\1cW\r°!pl\89äý8çÜ{ùÏdAsü-è:¥å\9ad5\99's¼9ýûôf\92Þ¤É\92®\967É\8a*Z¥7ÉuÿTÒ\ 3ï§+¼[Óêæ\1a¿S|¬¢<,¬Vó$\1d/¬\97É--aî\ 6æÒÅ\ 2;âÓ`n\99ÞÂÈÈÜrq\v\1fiz\8dÿ\1cÅ\1aÇâ\13\1fûm3\99ÝßR:§M\8e|Ö×7´ÉB\1ax#/_\17¢ñÊb=¡·\1f\1f7\1féW)\95sô ª gZ+\15I\93©\97\9bo\939MÓ\15Î_\1e´ ×_\1eø\1d[_\GëÓå
-α\ es\8b\84ÞÕÞ\9a¬\95^\9b:n]ÑbÑo\rñbkt¤\1deê JÓ¨\8ctM¢&ü¬IÕ\amM]©Ú'ô{¿Ã:j\9dâ\0èëåkSËÖZl /Ê:¸Òõ\8e\1e\8eΫêëKò¦\ f|±\8c¡]ÈBɽ®/pV\94Îо6\1d\1c:º\90¦ª´¿À©Zuç¹'\11\8e\17\8e\ eÂjÓºà{kE\rc\8e$¢Ý*\12\ 19Ä\ ftFNEmêc5\1cl\1d\87è\v\85L\9d·\11 \ 6À\v]Æü}\ 1Dd$'é\8d\81Ù\0þ\86×2#[F\85ð[Pe2\9dkv\1d! \93ÿl?7m\9d\91ðTxßÜÍf\8e)N\8cÝÅ_3ypIá«2Rõ#«Á1XM\93\90z/\12oèd$\9ez\86à\rò¬\84,t\9ev\93mk\ e¼i·¥\96å±\aOoËÈ«U\8dqÚ\e{¤ÜØ~\15d\86¬ÎTÉ\89:ÈÂ\8a\106\ 4:ðÜ\b¹\17;å^\ 1dY¶\19C\1e\82}EÖ\1dk \89eôM{¨\7fÛî\12B\98¨N\81\8fï\f\ 2\86\b;qtì \12;pƲsÊÂ'\99\1añh7"»0Î\aÎBi\09.¼ér\11Ù\v ¢8z\bûJêÔö\19\0¹\94þ6m\10X\fâ§üùü\11UJ¹8àK{E\8f\8f\8f´µ¦C\90\9c\16\v¤,ñÈû\18Â3KÒÔ\1e"â,GIè:Ó\a\9dµ¢¤\1c¢t\\94¬Ø3b\18ÀPA°Y\1a³giÅ-\aÍuHp\1d\18ä\8d±¶°o\17 \1d\9b\1f4>°wÊ\9a+T¸}T\ 1Aå9\950Ëdl\95ï\14z\84¨\8f\81³^û°?\ eu°>TÐgt\ f\8eôó§÷t÷s9È\9d\9enuÍ\ 5qâ\ 5åð,\93(\883&qâ¿h\f Å\1eË!\9ck\99¹\14T\e[\ 1u\98"YêÐø\ 2\89;}\0\rÌaÕÊ\ 2%\ f©2\7fÖ\94dX\8d¼\84V4"23Ôi_<OÞ¹,B_4§®0¨Â>0o\15¼2\83{¥\1a¶RQ\8boC\99\80Ö8ä§\80G®\99s\9ct½
-!Dθ±*WhØ\19UÊ\17&{ª0ÒyH\82\8bP\9cæ\ 1ª\1fÞkãé[ë<\16¤p,ËAâ½Ó\81Û\r"CC/\8dÈ\82»\12aâ\18Ãy\86õ+j\8cF÷\ 4fv°4è÷\aUt]\97È#\88\90 Ò\99%!\18~ÜCf£|9»\17oMÇèìTðù\ 2j÷±i"ÿ\1ch"\8cÜw\9c#Ú1hãSo>|¦7\7f¾ç\91\84Jë§ï×\97 }0\0Ù\17±²\18\16|\9eïw;+\9aBK\0Ã\r**Ç\81K\r4Ö \96\19Ô§]È^Ù\`º#Z\8eÁ\19ð¡+°]!0\81n\1d\f\9d8|\8fDÆ.\1eu838\fÜ\ 5\8d\1f0Ì\ 4÷óÜ\9aj(²\1fá\1c×%¸Ûqãí;T¨\87Óäd\ 6yìs¬¹á\8e\16ZºW\r\ 4v\8f!Á\98ÔwQ5pªãdt\ eS\92\85\0\ 4¹>:\ 1ÒÇÓY\9aæÈ*\f(\8cï=\83mE\ 6ëö\DOÍP\ 3\81~\18\90\vW\8f(V×nÑ«|\eHär\85î¥\1fɦ\9fTT\8b*ܲpÝ\9c\ ej~\87\v\ 2º7\98ÃA\1e÷C¬@\ 3\9d\a+\9c\95UØsÄ\85/\ f<V\87]\9cÑS#!45a\8f\ 1õ).b¸\ 1f\97\18E\1c\ f\1eO£óS\e\eh_¿¼<»¿:»ºõ\17\11¶<Íè®\89ãð\ eÏ¿\9cî\ 3wÜ>AÙ¢çëP*³ûáz0å\9bdoå±@\ f\a]èò±½\85\81O\8dp®3\16Ü\1d\e\15B\9cÝ/ú\18.a:F5\18¼<%u\95âúÌWЧ¼Ök~ñLV'\10\96qóìþ¦÷0M¯0²ç¸Rãäÿ¿$\87~\88²áàVkÜý¯Ò\1eåtÁïþØLþ\9aü\váËåæendstream
-endobj
-1628 0 obj<</Type/Page/Parent 1369 0 R/Contents 1629 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
-1629 0 obj<</Filter/FlateDecode/Length 610 >>stream
-x\ 1\8dTMOã0\14¼÷W\8c8\95CB\92¦iéi\veÅe\ 5«FË\ 5 ¹\8eÓ\ 4%v±\9dVüû}vR(e\ f«ªR>\9eç½\997\93·Q\8c\88~1f &\19x;\8aÂ\bÓ(\r3¤ó\19]'ô×\ 2åè&\1f]ý\9c"\8e\91\97®6\9bÏ\90\17 ú(BÎÇ|o\10\14Xì\8cÐ{¡\17tÿðvÃB¥·\8b+ºÕJYp\ 5ÿô2\7f%¼tÀ\v"\ 4I\16¦\848ΫÚàP7\r¸\16Ì
-0\14µ\16Ü*ý\ eÎ\9aF\14=\ 4aIËjYË-l%ÐP±±Ã;£:Í\ 5\95\14\ 2Ïã:\14¡¯¹¿[®\kê\17OÂÄõ³l»%H7ÿF3É«çË\10~\bÞi-¤m¨¢+³S²0°Ê#MH\98BìE£v-\15Áj!B\a}ÊåöÏz\0\15\ 6\8a\86Ôp\13\10\r\89\8d\80Ú¸ù©ùæ\1d\9d9òè¥I\ 6iÆ\81þªÕ\18L\16Ôºì\993\10\ 1HÖ\12Ã%\9a\9a\14PåÐô;S_h\8eýKÕ\11\94\92\9eÐÅê\93Í\ 5vlKó\95þ\8d_\18\ eb\ 3S[ß\86«¶¥cZ¼uNrZ\98UgÍznþü°\98\84ôÖ¢\11Ìô{9ª¬º\86\14\10(\94\14_\95(UÓ¨\83ÓÅ5$Ú^àO\e\9e¸æÿí\17h¬\97¿n\96/ÉKò//\9eXã©\12\92DÑxW\1d\ eÌmY¡\15\9a¤©{Ñ\ 6jÞf¼brK{î\88\9fóã·éQjÕ\92µmÕ\9f>S¬\97ùÃë\8b~íÇÈ\9dqív\85Ë\ 6%.xì\v?²D\11\9d\S\80ÉÛi\88þå|pS\9cR ç\13ÄS\9f5/\ 4\1eµz¥|a¥xç¼Ìl¤;\17Ä\19}\ 3¨<\98E×\ eï¶b;Kz$Q\88û\87§ü\ 1KÎ\851X»¤ã4tû\9a\81ìï`Òl\1efÓ\84>4\ 4\11'\89{v\97\8f~\8fþ\ 2z\94_Üendstream
-endobj
-1630 0 obj<</Type/Page/Parent 1369 0 R/Contents 1631 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1631 0 obj<</Filter/FlateDecode/Length 1413 >>stream
-x\ 1\95WÛnÛF\10}÷WLó"\19\90h\99¾Æ/E\eÇmÑÔi\11\15A\ 1¿¬È\95¸6Éew\97\96õ÷=³\97\88"Ü4\85aÃ"wvfÎ9sÑßG§´ÀÏ)]åtvIEs´Èðq±Èr:¿¾Âÿ9~\8d¤õÑ\8fË£\93»·\94/h¹\86ÉåÕ5-KÂñ\ 5\9e\14Ów\95è\9c4\94\9ffô\93Ñ}G\8dè:Õnèç\8f\9f\97\1f\8f\97\8f0?§ÓÓ`>ϯábYN?9a\1c\1fÛ*WÑ'Ѭ\ 4\9dÁ§¨»JP>#AÜÒæàÊuß\16Né\96\94%ñ,T-VµÌhYI*zcdë¨\91®Ò%=Lkõ$ë\1d9Í!,h~z\16\1c\17\95h7òá\18o\10j+6\92\1cì½#ë/ö\8e\vÝàmI\85¨kY\864.b\1aS²ÍÊ\eÈR¹Ã\14§Yô\97_fç\9c(\a·VÆ:RM\83óÂI\0+,²@\ 4½\1d¸ÿ\ 2\1dÞ úýöÝ\8cãq\95p\1câ8\86R7Bá`Ùà¯\8ff\14 éux\ 2f\13ü \ 5$\90\15º\8d\a\12?Sö×jÀ®[\8f+>vÂ\b\80
-\8a·Âr¼%ǽQÏ!ðZY\87Gxn,Õ\1apÅ\88\8cÚTÎ\12§YIe"*ÉÿV\9b'ë\ 4\93i3úÅùËn$0ب\82¬ë×ë\90ºUM\a"Ù\ 2\8eV½£R\95íÄ\91\853IÏÒ६kZkC «å\vYéúÎ\8e¹ø Y $_º\9a¡«\90©\82k\8e\85\ 3½_\9e|Î\7f\9dq~\95ðù!ÿ\10ÏZ\94\92ÄVì2ú\I\b°EôuÍ\ 2\ eVl/FIr0=\90Ã\8d\10A4\ 1\90\9dÑ\e\80J\ 5tà¤%\9fw@\90%\17¤\98ѽvÐ7$\fãÉ\ fL3°6Âic'á\10ª\84Ï\83\v;r\8d\14¼nü]ÁAgÔ³ªå\ 6\ e¹6üµb¥jå¸J(Ô\85\7fZ²Fùf§\80\16PÅë'\ 5\84E»ãà\vi-*\8cá®5\vXë\87ãQ\0¦o[F'ð\1f\95Ñ\88¢RAYã\94&^B¡þ\1aÙ¬\0\93f\ 1\8cÏ\1d¦îª~\9cùDµ\954ÊM¾b\8c$\12\16\10ß\1aÅ6yÔr\1fB ¦ô\18¬$h\ 4\1c\10Î ªQ¶\87ô|a'ÜZ¡nä\8b(\äÒ¢\9e(\96\a^\8dlÇ\9aõr\13Ie\11AÆéQ\ 3J_\8c\82B/\98QÙ\e\ 6ÝS\8f>je\90Þ\9bÛÐ+^\15QÄy\94\11º\8f'£,\83\8f\7fg"ñ4(é\8cÞû²\f\90¡¶"\93¯\871ò\1c${Hcj&_S\ 4m¹0k½Ù\ft7\f*úI\8dù/Ý\93À\88ã~·Õm Ñ\0:î \90{#P!¾.\11ûN÷\86À\1aF\14Ã\12*õõÜF¹\8c\ 1ÿ\1e³J¸\89å PC\ e\98\ 3;O8\86ð<\ 5\16Ô\aÅõz \85\8ejëmïMзØÉÉ]êêÓ\13é\8a\93×\ 6ÀÃñ\8cjÉîx\8aq«c\9d\94\rÛÏ1\120ÀË)æ6\7fÆÇ/#R\94^V®\82Ê\ 2\eÌ~HÛK«é1ÎV\92\ eÓËè\ e-\ 1Jç\16LÊã\86¾\8e¡\8câ\9a=ê
-\1d\12M¥\11f7\eáä\11ÆøF+ÿ\1fùaw@ZµÖO¾£Ý$\Þò®1ÇÌÏÏÃ\f\ eiß¼Ü\,ò\9b\14Ì\8c\ 3 &iþ1(gWÙ%ã\92ïq¹X\84k~\13\1dJ\v \84û\126Üj¿:\9d}\8bÚoAÓh¸ÚQê\92\8coÜ8b\16i×à,â&1\:h^ÐAUÛ74ï\aüîÝqRé\8a³\90Ô<¿ ùE\9eñ*7E\1dLP\ 6\98\983O\14þ\f\98ò%Âù\82\17Hg0\83è»HbºüC\9a*·\83n\13\154ã"\82\f[Ðßù9"ÌJa\9a\81ñ?÷2Gåñ\8c¹_\ 6\882BpÞJÔ6\14åH8|z`\9f:a2\1f\bræ'tì\94©\99§vú0Edi\90\e\94^¨v,5èc#\97\89³jWª-¹È8·îë2NÖ¸\1f\89ÂOJN\8a
-i\1ccX*#\v\8cp?s\a\83\7f[á\14hØO\99ñ6\11*\11ó\14Þ\ 6í\bUW\8bØòÃ\11Ì\94C\1ch¯´oUWh>á¾¹\8bûo*\93\81&\13?¼\ 6ú\81û,\8cÒ}d\1dû´_ÿ\98tÿ\9d\0\9b\85Xa,¥\rDÅÒøOµ?\87B½\1el²\905Ôû\rß?Î/¯³Ë\8b<¶»ü\8c¯z¿<úãè\1f@ê)\88endstream
-endobj
-1632 0 obj<</Type/Page/Parent 1369 0 R/Contents 1633 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1633 0 obj<</Filter/FlateDecode/Length 1531 >>stream
-x\ 1\8dWÑnÛ6\14}ÏWÜ\97¡)\10«¶ã&é\80=¬ÅR\14ØÒ\ e1\90\97¼\I\94Í\85"U\92²æ¿ß¹¤\1cÛê0\fE\e×"/Ï=çÜCåûÅ\82æø³ Û%]ßPÕ^Ì\8b9\96óâ\86Vw·ø¼Ä_¯¨I\ f\16\8bÛb5}ðq}ñîþ\ 3-ç´nPëæö\8eÖ5¡Î\1cßT\97\9f¶ÜEåi¹,è\91Û\92©S¾q¾e[)Ò!ô*¼]ÿ\95j,ns\8dÙõªX¢Ê%6-
+\85E\94×Õ \11ó°t\8e§øH\9c_Óôn\94¸ï«O¯Þ¿~E\1f\8dþÌ_!otÖ\94\80×í$\1cá0^\18Î&ø\f<~\8fÑ\ 2ßX\=,\8bÕÚÒ\87Æ-¨7³\9bd6\9dãó\11G§·láÇÅÅÏ\17ÿ\0\8fGy\eendstream
+endobj
+1244 0 obj<</Type/Page/Parent 1099 0 R/Contents 1245 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1245 0 obj<</Filter/FlateDecode/Length 1194 >>stream
+x\ 1µWÛnã6\10}÷W\f6}p\80X\17Çñ¥@\80zÛ\ 6ðCÐíÚ/\ 5\ 2\ 44EÙÜH¤\97¤âU¿¾3\92,ËrRgsI\10#\86ȹ\9e9gô½\13B\80¿!\8cúp9\ 4\9ev\ 2/\80A\10x}\18\8cGø\7f\1fÿ\8c\80¸óyÑño\ 2\98À"Æ\eÃ1þ\13\ 1\9e\ e\ 2Xð.ËÜ\1aÊ\1f#¾gÒ\88¨øæ'ré[Á3#]îoXz\9fHëb\99\bÏj\90N¤×\99\15\ 6¬PV\GBå@\ f¯}á¸\1f»\r=´ \950æÚf\9c\v\11\9d/¾u\ 2è\85\817Æ\10\9a\9em\16Ç\92K¡\1cú>ö¼\95j)U\84\8e\9f7q"xë\18\7f È1¬GÉŵÍ-æУô_ot-\92Ä>\11\16ç:+r\81Wg¶7ñ~\99YaÔ\8aúûF£þÍ\0°DT¯?¤v.Ö\ 2¨\92\84µòQ·À\ 2BÇ\8büD¯¤*\1fïnv\vÀ\0g
+\96\ 2ø\9a©\15bO f\92\1c\1cZ³,\15°e¹\a3\aJo!ÑúÁB"\1f\ 4>\97ö×\9d»
+Ú½þÀ\e´\90u*O\ 2¸p.\7f¢\89ûÁxu\13_l"Sò\a¡\13§æ>\96ƺû\r³öõÀü\b´+]4ñ\89Jí±úêJíM\9cêØËS£\12nµ!>{?£ï7C\r*l\18Õ\e\87#Ê\12\1aÒ'¨\90keuÁÁ\87Ã\84ÆÊ1\9c©b6p¬¬¸\80\19°(©Âq*Ï_íf\13
+âoôë\14íîG¾\8b#¨\84\ 5fqpcmÐÏ2sÀ\12\ 4ð3î(×K\94&ä\89º\15¤)\85À4æ¯é\84-õ£@¥¹\0§!\92\96% r\80ÑÚ!\11 \9b º<¢\0\11S(á°Ñ\ fH\14Í(X;å}¶»Éªb:Îýù\81l\86Hu\0\16»2\8c¶»CÙ:º\87Y\84\ 3##Ð10¥t.Õ
+"\9d-\93¢[\8d¢m\8cN7Î\ 2V\ev°¶^ép²\93vD@É\7faè]y\97ÞÈë{0× 3ÒöìFp\89"\v\88 X®2Ã\bg¥\85\1d#× ".¯É\9b.`\85Ed©\11{ª¦jïX\9b踤sÄ\80[3\ai\ e\7fè\94IE\9c\86\9b\0Ñ<¶\rÕg©qãH4Ç~æ\88¡V+¶(©\84,'\12ìªG\91Ä\9a:Oµa¸ÐP¿K·x\88<Í e\91ðþÑYá\84gÖéTþ[\9e$õ)\12 å\84ìn°W¹ÎLËm\85Ê\14W\10{AhÆ<-J\ 3µÆµÝû\
+Î0%ÀÌ(\14Ä\9duÅ´!Ta+1úD0\ 4.9\81r˨DåR¦\e\8dz\8cÍ.ê\8a¸®\1aZïjµ \9dí®V«Ó\99Ä\85\vw¥O¿ÝuÏîÎë$\ 1B/\1c\10sL&~0ñÃ!Ìog\9fÚ·Ûßáw½É\8d\\1dÜuùÝ9\84\93É°\87\1f\93\v\98g
+n%7ºLÅ"§(^\ 4JðÜÅ\ 3SÌû+Y°ðUÐ\8e%¢£CGn¿Lo\8fáØ4{tc\8a\8a\8a\99K^ \17\e¯ØJPÓÚ'[ß\vÂÀ²\14¤W3\10\12lfÍñð\1f\ en# \97\9bùe6\9f\16[sE$^\bÎä\rm/v¥·\99\8e$Kî)#\94ä\93öÛ\102U.G2ðs\15y¹\99º"\ 6ÇÉÙ}àV\1dXüßVÕ\16\9f«qËr»\ 4\91+kðÆ\12\1c\98ùÐ\80\8d-_ÕN£¸.Í\89b#\15#\1fVs±\97Ç\9f\9d\8b\ 33\1fZ\823\98V«âáìû7ãj³ \87øö;¾\84áäªTÃùôöó\14¾\18ýMp\87¢Ä3"\8cZþz»\v½Q\1fß\88£n¥\9e°\10Ö\91è,Öøiᯬ \99Áhà\8d\86c|\93Æ£Ã!AìÏEçïÎ\7f&\8eê8endstream
+endobj
+1246 0 obj<</Type/Page/Parent 1099 0 R/Contents 1247 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1247 0 obj<</Filter/FlateDecode/Length 1233 >>stream
+x\ 1µWÛNãH\10}ç+Jbµb¤\89\13'! ûÆÌ,\12Ú\ 1±\9bìå\ 1 uìNÜ\83íöô\85Lþ~Nµí\0\86\ 1VÊp ÈÝ]uêTÕéò×\83\98\ 6ø\8ei:¤Ñ\84\92â`\10\rh8\99âs<ãÏ!~\8d¤UX8>\89fÝç\1f\16\aý³\ 1\9dÐb\ 5K\93\19þI V\ 6\ 3Z$G\87ï\16_\ e\ 6Ô\8b\a8¹H\8fr½V%\11\89$Ѿtdýj¥\12%ñoøê{kú¹ZöL¼QnÛ¯Dq³QåR\95idõ+æ\8cüê\95UNÖÖ詹_Îç§Á¦Ñ¹´°\18Åô\16£F¦\8dÍ\97\8cúR}{Öf\97\87ÔÕLì\89\87®¹½ðð¬Ñ=ó ]&\r\88Ý\13\ f]s{ááY£{æá\90æÒZ¥K*D)Ö²@Gtʲ[B-,Û\1c\f±î\1dÖ\95°v£Múv\\87-°ª=Úiò§Mùb\8f?1× ô©¹]\8fÿ°\1dSײ&¼Ë p\90\r¦î-¶^I\v2é«J\eG+mè\ fi\96ÒhKÿ\1c\13»BZU"\1c'úúÈ\97\89.8Óä4y+w»¯ß½æÄ4òÁèuÅöD\8e6z\ 1ÿY\1e×ÒäÌöf¥\8cu7\9c¡®§F¡\ 3/ûµÜêI££?ÁCS*?Ár\17{s}í\bz\vñ]¦[´{´ÕVõ>píÚ÷\7f\19£§ÕÕ?\eS\1c×óAo8á1à\9cDn5\894EÓ\89Î\19ÊU)I¬\1cn\ 6t\fÝßþõ
+\9ae-\1d\19\95\92^\91(K½Uå\9aRí\97¹¤Êè¢r\96»¯%|\14\rÙi\e\90\8d\9a\85á$\1aóÂ¥Þ@\ 2¬\13hÚö\86æ¢X
+ú\95qQ¢ËR&\8e=¸Ìh¿Îê=¢ªò¶\95]&ÂIÞ¼RkÏR\821\87ÁCÚ"~\1a|öÏN(\9e6L\8cƵ÷8\8e&\11}V\85rA\18BG>æl\1a\ 5ÖþÇ Ê\84\ 5i¥/ -LA~\7f\96Ý*D\8fáÉ°°\18\99Ka\ 1çN\9ap½\ 4¨\eI\99®$Ë\8eÆ\ 2THòÁ\95w\80Þa±`\7fãç\98\11\91Á\1aw\8bFí¼å[Ò%>Ä\9dP¹àd°\ 42\v\9fUé¿A¨¤A\88`Òn\93Å{T\81Ë\ 2¥,\986àÁv\ 4Õîì\80©Ï!z\8c¤\894N(öWi\\9dp\17Ñ\19üY\9fdxÔØ[\ 2\ 4\18àå÷\84¸\e©\ f¨>\82¹¥\11H2Hd\98¨\0TVÇç\ eK\83\9aQÚFâùÐ¥\0{siîT\82¿\eåà^\94)]å~½\ e,\9c>\16þ\v\9dzÌ\9e\1d7Mh\11-20\8a\9f¥D^\98¬Bs´¸)pi ó\97óymÿô\82Ö `\aF`Ã\9aþ¾<ÿ\ fÙ.SmêBï\9f%Mûõ¦Ñ,¦ÑI]M×\18óÃè{_ka½w<¬gõ\ 5\82+PæÀ`\99!$<Õ\e\0XÐ_ç\9fB¶\823\95\ 6¼¥vØ\9e¢sóµÆè\9e\15h\8f\9cË\ 1d¤²\ 2$\98 ]Ñ \1dã\ 5r\8eH6\99\ 2y¾d¯¨Y\\89\ 6G\fÑwU\9du+eIËíN\14è\9c½nÁ\16¥\8aß%|\1e®S\ 3öPÚ\9cÖ\8e·\87!±\86 \9dM\18m´¤êrX)\940\9a\97ˬî\7fÎL\89¢.ê+\9cK_\eã+\a´À\99BD\8cÞÊ´éöÇÄ·\8dóCâÛÌ|¬\9b\17Ôq}5òGWÈw\11J\aR'-1ßNÜrç"\84v\80n{\810´ÝBÒ¨Á\19À½Îä«¢Ë\a+\9fQP8]"§¬d\r\9fK¦ÚBi¹\8b\1f$?¤åÙ\bãFi\1fD8kj/\1eÍ¢ÙÉ\88&£IÆóÓ\8b\ f§teô\17¨+}Ò\89çI(àå\84õb~ \9d\8d¨7\1dâM2=zV&ÇÓq4\9dÌðâ\89\1d\93)\1fü}qðçÁw\ 1\e¶çendstream
+endobj
+1248 0 obj<</Type/Page/Parent 1099 0 R/Contents 1249 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1249 0 obj<</Filter/FlateDecode/Length 397 >>stream
+x\ 1mQM\8fÓ0\14¼çWÌq\91Ú\10§U\12\8eÝ\ 5$\ e
+\e\ 4W¯ý\9axIìâ\8f\ 6þ=Ïí"¤\15\8ab[É\8cçÍÌÏB âG ±i æ¢*+4Õ\86×m×òZóë §â¾/Þ~|\aÑ¢?1¥é\ 4z\r\86W\15zu'DÙ\96xpVM)\18gßôÏ\8cßB0,ã×u[6̸ëGÂbì\93±\1aáw\884¯\10GïÒ0òNH\81àN×ãAÎ\84Gò\17£x_LTã
+Ç)\r\83|\9a\b»Äx\e\8d\92\91\ 5±w:M\14V\90VguÖ\14\9b²Î\9aò|öîì\8d\8c\84½QÞ\ 5w\8aør|\80\92Ó\140Ê\v\81On!Í\ 3 :0áb4!\90\9cùÖ\0c#\rþ&Åóý»æ\e;qKÀ¡\7f¥ªÝ,\8dÍ\86|\0\ f(ñõðéû\8bé\129\bO!M\11&ðÏÁ\93\8cüE'uõÃÔ\9c\87Ô³±&Ä,ÍS*\17bÎÇ'k\8d\1d\987\9b_ôÚðU\88sà¡`).Îÿ(o\8dt/\8d\88\86Ûí6\10UsËèq·¿ßáèÝ3©\88÷N¥\99ýúÍÌõ_º¹pýß·í¶l\9b\8eëf@ÓeÞ\87¾ø\ü\ 1±\93¼´endstream
+endobj
+1250 0 obj<</Type/Page/Parent 1099 0 R/Contents 1251 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 660 0 R>>endobj
+1251 0 obj<</Filter/FlateDecode/Length 1739 >>stream
+x\ 1¥WÛnÛF\10}×W\fòR\19°h\91º÷Í\97¸1\9a8N¬4}0P¬È\95¸ Ée\97\94\1dý}ÏÌ\92º9\ 6\9a\ 4AdQ»³3söÌ\99á¿\9d\90úø\17Ò$¢Á\98â¼Ó\ fúø\85?BþøøGg\1a\ 6\11\8dÆÃ`J9\85£\ 1þú§\8cî;Ñ \fÂíj4\8d\ eW÷\9es\1a\84\93`¶g\v/4\1a\8dð9\9cNð\19á¿Ó´ìDã0\18Ñ°?Á'ÌÆcÞ"Oìr0\9e\ 6C\1aÌ\86Á\0«Ãh\18\8c\9b'^Ý\7fÆêp\8c]~¯¬î=cu<C¸»Õ\8byçìzFQ\9fæK 2\9eLi\9e\b\18ø%î^¦ª¬µ£0
+è\8d}¢ÚÒ¥-\96fµFÔ÷*_(¤\10\91ªH\9dÌ¿túÔ\8b\868 {çL®Ü\86®l®LÁ6µ³Y¦\1dïb\87áÄ;ì\r\86°\87\ 5<\84\ 1Ý9íô¿kS\99ZÓG\12S¬¼É\90°1\89&H\1f&\17zi\11ÆÆ®)\86\ 3S¬5À\14\e\82Ó:5\15Å>\81S*3*M¹úª©âèëTÕb«ð\10Û\1cgÕj\91iz2uÊ\aJ\96ðO\vU\99¸I/\1cøp\97&Ó\15UÚ=\9a\18_à®Ê\17\ 1[\91*\12J=Vº\90\13ù\17\95ä¦0\15\83Yªªz².!]ÄnSÖÆ\16|\80À\19Ð<Õ\15N¬\9f,Ð.M\\1dyöá>\ 2§Äg©Iv\1c\92Øèì\1a\84\16̺ml\ fÝÑÃÉáná½ìn\11î\ 2¤¢T+-\99Ô©>4\90\1a\81A\97^ïÂo`>ÜÙ\1eÝ%»ô·ñæýçù{°\ 1L\889í\80\r\8eé \ 4\ 2\1d@¹\v\15\7f]9».\12¿qÜ$\14aµ\1f\82l³ ?\10ú\9c¯ëÔºß*ºµµþÝïÞ%4g*$6^纨 ß\15ßøÂ\14JÀGxWêÑ$ðW\14¶À)¯vܾ»º$\89û\15ã!\19R¯¥A³ïvÞ2ýúüÃ+ÄmA¡Ö\1f¼\81aÕºÔ®Ò nm±ñhØB\v\0½m:\93`êÓù\v{\81OÅÈùPJg¬ãúsÚ3\99ë.U .Ë\90HF±*ÕÂd¦6L\1fK*®¥0é³)\12û\ 4hæ4\84¬\1cÖæQB»J¥\87.R\7f8 `\8fl¶\80\ 4ýSz\ 27\90S\89«IÄ\15`[\17±F¸K\13\e\ 4\83tK\14\14¡ª\8eü÷ªz\93yNípL¼NdvÅI/\9dÍ\8f¬\84\8bm"Q\1f2\1dg\ 6\97YqÁð\85ºÚÄ(^»®3S0\0)0¯uYQ¡Q¡\15«\11\829Jw¿Ì}\86,e\84Ä\ 3º\11¦ì¬\ 1iª\1e\919¡x¿²0x\v\16\ 1®êö\82L\ ea¢ñ\16\ e\ 3§\1d¹]\ 2,f\9eÂmmài)B$§\17\96AË2û\ 4¦ì\92hòâ\92\97³\9eU{\97>ÝÞüýÏÍíýüüíÛ óìpã¶\1a_У\10¡ªNô\r©±\8e¶ª\9fà«s(ßlC\v/À A¬5Ku@ç\88?\85ÉÊÚ\ 4Tp
+h!jü¢\8e\1c¨\13\8b\ f\14ru´{\e½T\fúL[\81s\0ìñb¸\ f\80¥*µë,\91ëâ\10P1¢\fèú½h\8c\86\8a\1erD¼gl=;à\1actv\1d7*ÔC¹ò0\81c\1e¢ñDdøìºU\1dYÜ\86Yf*æ\0Õ\96׳o\r\859´5HD\99~Ô¨\1c\1d¯\1dhñó¾\9c®\9dÑ\8fÞ]\86\9eÃ*Â\1e@mt"\16T\94\85\14\99j8Ì"\a~·\ 56ûvv;?Hý\17¢±\12ÉC×Y\85\16¸z8ñÙ\825ÒD\7fþä6Z¯k^W¨Ú ês*m\ 6!ÒÒ<ÿï\8dõ¢i\10ÎvÜ8¤ViXG\18ÊC\92±\10rÑ\9a"ÎÖ,ï\9eì2\175Zý\8cuû\91£OÈ\8cT»uUÿP¼\87\f»?\7f\87\82+\91¶oj2Æì;\82ô?\eÇ*¨¼ t\0^z1c"ȸ²åÂí\9coh¯â.°\ 5uÂ\83\ fAø*åG\8ac\94Û\ 2}±4Ú\12<OX:\1a\82>\1a%ª÷\89\vâ\9d* \ 4N\9a\88\ fý\17ð9\87âr\ 1²¾·°Hq?\ 3¥ÅäOí\16ÚY_5l\ eñ¿2¬}Öm¾\9fôKbpL;ßÃÁ\9bf\10m#Úª\ 2¼6Ä\ 210·ê\1c±\býTË\18î\98w+\99\13|ßkØ·k\88ß\91KçU\9b{\vj°¶±Í\ 4á¶eïBiJª!hÓ\9c¥\19p\8b«5Z@b\96K\8c¢\98ªDOnçÃ#¶\1c\1a3µR\ÁBëb;,à\98Æ7ª\87\93ªl\ eXLîÇ#~©hÔúf¿µîS6FÓ\901]eÒ\97\10\17æ9)FÈZD\v\88Oâç\ 1Ad¿\ 5`äÙ\8eú\fʶ\108\93\1e&h¹T¼\9cð3\1e·\9a~ ð\85S¹\8aS\f\1d$%\8c¹+Æ0T{Ú|±\98úA»fZa\91e\1f\1e\95\ 3\a\18wå9\1aíò\85\ 2\81\ 4L\ 4ßU¡\9f\80'ѵ2\19Þ>ÖqÊ|\96æÑÊéé±\ 2\9e\92®ã \90÷74\18wÊ\ 1àM¨¥W;à\98LZÎ^¡W¥\8e\ræ9\99ðv°°Ë¼q\8d£6r\12\94NÕ<±ì\9a\bd¹Ðx\8dñ³\12\ 6\88X\97~^\83Í\93É2°\803Þó(S\13Æâ\84lÁ÷\886¶Ä_FA®íìzº÷\1a8
+&\83\11wß\1fxK=\9a~\8fÞL\87\93a0\19Oý\8d\8fg\1cÝëyçCç?,xÞ\16endstream
+endobj
+1252 0 obj<</Type/Page/Parent 1099 0 R/Contents 1253 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 707 0 R>>endobj
+1253 0 obj<</Filter/FlateDecode/Length 1502 >>stream
+x\ 1\95WKsÚH\10¾ûWôek\89+\b$a 6\95ÚrÞ9¬í\8d¹lÅ9\fÒ\0Jô\8a4\98x\7fý~Ý£A\80\9d¬íT\80V¿ßï'>\8dñϧ8 0¢¤8\19{c\8a¦3oB\93i\8cß\ 1þ7\9a\96\8c\0)\7føüñéýI8\v½3\8a\82 H
+\9a\8cg^ÜA9]\9fìÃÀ\9e\85\9e¿\8fÝ\83\81\8d'Þt\ f+Føc<+(à¯H\0\16\eø^Dgá\14\ 6\164\8dðe\81\1e\17Ä ((\1e{\ 1\9d °ÃMfgxXPÄê,Ðã¦\13\91é\8f§ðg"P\8f\8cC\11:ó\99Q\80\1e\17\ 5b¨\183\11 Ç\85c\11j\15
+°Ã\853VT\90ï\87 ±P\8f\8cÎz\85¡\0=.\fÅ\8b\98IB\ 1v¸`ƱCd\90$²@\8f\8bg=_ @\8f\v#ËÇ\11\r\ 4Øáü\99upÂj-Ðã¦\ ]´}\ 1z\ì÷ú|\ 1z\`\9d·2\ 5èq~lù8\83¾\0=nÌ\ 6vþù\ 2ìpH.'~ÆÜò\9b1â
+\ 2/\91\86\1eD\8c\ 1F½\9a\9f\8cÞÍÈ\8fi¾D\13D\88ò\94æ©\14ù\98æÉÀ\ f¼Ð£×U¹ÌV\9b&+WdÖ\9a®U±Pô¦*TV2Ò4U\9eëæÙü+ÄM`°\157\94Ò\9b§\839x\96YÓ\1aj\8d® LI£\95aq\8a¶Uó\8d\7fY¡Wo^SÖ\92©hS¦\1a,ªLEg\1aUh\83GTêD·jîXR[,¼\ 4öyô\91¶Y\9e³\11c\1a¢¢\ 2x2(+CÊ\18]Ô\86\856z¨\7fÔ9ÛÍ\8eì ]kô¸\82æµ¾#\85ßE\85\ f³VàOõ÷\8d2:¿£¤º\ 5]
+Å¢çp 4+\1a\88Xg\13\15ÊÒõöÔj¥\ fY\91\vÌ\17°zô®j ¡¼Õe¦ËD?¿g£ºÕ´Ðº¤<+¿Á\8cmfÖB¤\12³Qù.\18\94ê6i²ÚdUéu\11 ¸l\10\91\ fì(B¬JÒ?TQç\9a\98bô\ ecM\127pæÛÇ.\9f\ 3ZÂ<(\92´\81\9f\90«?\1cëÌ¥\9cG\b´|^åÕBå_:å2¼ð\98ð÷\82^©6K¨Õ\r\82\89/Ã"[¡¼\17P\19vCÇ^j³È*T\0J\81é\aô²3\1eõÎ\16\f®.ß_\1eÛ丹ÒVMµ©\1ff½8ÿtññüÐ\f\97\1c\8e\8e(\18Z\83äsçÏVS»®6yÊáé\8a\88RÛ\1e\¿y\95 9\85Bõ7´hª-\?Ô#\v\ 5Epè.<Íõ\96\9afW£\89p¡\9ax#@}Ýè¥n¸ pçØ\9d¶áì);kþ\8flßÒca»Ü¸ <\18\8bV'\18\14æn\97Wº\19\14\e´þ\ 6Nãa\87})ðͳÇ\84Á19\83XÒ!ß/-B+5wµA\90jÕ¶(\82\14ÅËÍ\8eið}\935ºÐ¥±ÅÍ%}(ùáÄt"{\81Î4\17øGÆjS×Uc\©äÕª*\1fÕ\a]6{\ 6®\8e§éÞÊÀÃHl\r\ f:ÉNÝTË,×í\9f\8f\89\81(G\ 4ÌÚ9\7f\83¿ß.nn\9c\18@\9bCI¿Ì\93µ\88'\93Xó{KëªÐ\94"C lÄTF+Y¢®Û2#âû*·ãeÁÃ{SrÆ\95y\82/i\93ÝîÆÊ\a\19m¼Iº^³þ²Iûþ2l\aÙ\13½mk\9ddK8E+]ê\ 6óÐ*°sÛ\96c\9eK$\8e{ÙziÖ\b\95D«Ñ9\96)VÃéé\9bËëÓSI
+o;^q\9f13Eò\17Ì(\94ýaB\1e.ï}K\9c³òÌK\8aôPÀO2úboI\8bZq¨+[¬¸½\8ba/Ľ\87J\1e¶r¿ôF\9b¶\19Éð\1aµ|\9c\8còl1r\9e\8b°>\918=RªÊüιæ\1a§'Ùb\82i,ÙV
+ìþ\96)\8dJ\8bã\eÀ\85âg»â\85M\80D\82\9b\8e÷èAÛ\1dÙùÙõ\91]¢»\91ò\88hàÆÁ\\19a\91\8fJÓ\899\92~/
+euD!7\1aZIµß\¤ÆÑx|DÕ·ç\ 1aÜ\11î¬î£ã\ e
+·>"Þd8\11y$ËXN°¢q\95TKª«¬4r\râ\80[ãjø\17§\8b=ÝÔ\ 2§\18_Kr\99¢þ»K\aïpCwê¼}`òË.Â\84Ð¥Zä:µG\97Üz©6*Ë[\94\ 6\ 6Ï\96û'å\16ÊÚçX\14X³x"¾ï\r\89Ø;7ß^¼þôÏÕüãå\85·6\85=Fwô.\ 4\ 39ÉFï\92îà\1aÆÞÔ'w±Þ\ 4QÜ\1d5Ó\8eÀÇËÞt\16R\84÷\1dÙû×ç\7f½:§«¦ú\8aÑ\88C<Ùð\ e\93 °\89C?Â\8bë4¤a\1cà\8cO\9f~Æóëh\1cMñN\0îXrþv~ò÷É\7f²
+\rDendstream
+endobj
+1254 0 obj<</Type/Page/Parent 1099 0 R/Contents 1255 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F3 6 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 712 0 R>>endobj
+1255 0 obj<</Filter/FlateDecode/Length 1744 >>stream
+x\ 1\9dWÛnÛF\10}÷W\fÜ\ 2\95\ 1\8bºX\96ä¾ÙNÓ¦\88\934QÑ\87º(VäÊbBî*»KËê×÷Ì^taä¤(\928æeçrfæÌáç\93\ 1õñg@\93!]\8c)¯OúY\1fwøÇ\80\7f¼ÿùd4\1cfC\1a÷ÇÙ\94j\1a]N³~¼ªè\ 3¿O\97W\17Ù\18Ï\86\93ì2^ð£½Ë\9a./³«½gþØô\ 2&GÓ L\fñÏHZx{\83«É\97\ fnf'½\97#\1a\fh¶àXÇÓ Í
+\1fj\9ffyg¶\94d¥y\94\86êÆ:²Íj¥\8d£B×¢TTé\a, U\90 ³ÙG\18C\8aÞXçO%\9d\7fþWx\90¼tÈ.\85\91áf\1eßî"6FmVtî\87ãI´\95\8eø\87ÝÁ\ 5\10Ã\ví\98æ\92\1cÂ\8c!ÕÂ:D;7z\8dÀ AjSà\97\856ôG©
+ܦ¼*¥rä4\12È\85\vçc\9a\ 2épl}Ú:|q\9bÑ»J
++\81æ\ 2¶p\90=>
+SêÆÒ\eéÖÚ|¢\eöYª\a\84\9275<\bWj\85\10òª)dAëÒ-q°´T\94Ö\99rÞøç\88¬å°\90N\94\95Í\8ea4\1cg£g`ê\ e§Ùà\8aº\97C\14\1a@][ú ê¹@\1f\f\11\93´¤´#½à\14\ 4åº^U\12É\97üÿ.\½ \a£\9b\15ÕbµâlæHOJµEïÍ,¼àëÞ\8aüwU>¥§÷\1d\9f+Ò5RTÕ\86>7%Üy¿%Ã^0\90òiUq+á¯@gpsÙ\95ÈåýÙ9mt÷\9aª8\0Þû<\9c(ó@\9dØ\ 1\88DQôÏèð\9c\1fG\7fÎÖó,×jA+aD\rHB·\94
+\95©C\r\ 1J\8e,\1cãqú"4ÿ5[¶§dݦ\92$ò\7Ê¥¢]Ñ\0\93´@Kw/F¡b\83a6Êè6\99¹\13ù²T\92f\86\aë:\1e÷³ô«.\15{ºõ}jcFÃ~°\13»/DÁÏv\13\foà\87±/>ê\17\1c8ï ÆG(\87\88m\91n¹¥p|¿±¡$¢Aw+çkÄ\8d\12¦%\99»ï\18\81ç\98\82¥à\9aá\94¹?C)[Àó\84\84ö\v\93\95Ñ«]\ f\ 1c\80§Á\ f\9bó0\12ðÿIé5,r\80§·èÎ\86+\11\81ÉN\13
+±ÿg0¿\12Öbò
+ô4Τ\0\ fó\15¹\83Aë\aÖ\13O\ 1BC-\9dg\ 4üÚ\80!Ñ\93u£8a\1eØ8§\92v\10ï±ÁVÎèª\92&£\19\ f³GÔ\e*Ý\86\16è\126\89*\8c|d\9e\ 1L\8dbPµ)ÿ\ 1Ä)Ð\1f\8b®c\16¹yõö\ 3)¾X\18]·ðü\18\9b\82q\8d\Ǽû\80áá^A1¥E\9a:=äºôÂ$ÇBÛl\7f\86ùð°\8fm\14êëËßr\99\ 2=@Ô\9e\13\88kkéêik ÐL0\19ý"U.ÏQ\91Ä·Ûw\18+\ 5P\98\7f`TR-ë9®ô¢åY¤,æ2\17È\84JÞ9\91ÁVÚZÎõ\99\92Ã3RsK0ó\12\85W:,\9cmÝ·°\a\14[\9eA\ 4©¼ñIbÜëm>ï^ÜbêµA<\12C¶-è\ 1NÌh\«\ 4Â{ùÀ¬¿Éè:Î\ 5Ì\9cÓR¯\19\90óh°\15Í7̯ÑdÂ8\94\ 4\89.Ð\94X@?² ¬òî.î0\86±\v¢§"Åç\9bÏïAî}ØáÆ¡×BÝñx\ 3IðývÐ\0è\12Yßw06\ 6½]mØÛnëïÍ XÕ\1f+Â\ei\97wîÏxn\127Ä (Ö\14¶Ù%B°¤\15v\ 6#Ø\ eàè^LêàYù°\83#×\88Ý®´*xpüÊÚbã6+Ð\0o+_`\8fÒa\8a\9d\9etyïhj\19\80yÙøñ7Ò\v\ 6\v2©*\82AùXF¥Áæº{@)\19h×/\18Ù\96QÏ{#àoJi³û³\10á¡\98ú
+ I(\\\85]\81r\80± Ê\bB\86Öbãy$Æs\9c\ 4¾è2tK#ª¸%µÊèF{µ³-4Êú<ðÞypXÐ|\83ÁUÅÑ2ÿ7\89xúVuÑ9ÝEµ9Ý\vi×vG\93òLÞ8lwÞ}Ü\ 3{\11Å\19\82j\zíºW@W\82±q;mJ\90\1c\93u¨*ß\ fDã»\ 3*4\8aÝâãw\8cä%$\15\vEh\90¥.PW\1e\14®í\9e³¯`X\8b\rÄÚ6hl\9c½Tà¸ö%ª6G\81Mã±7?Ð0\90\9a\v0IÔ\95ü\ 1\ 1]é\85Ì £Xò[¯hÀ\1dØÂwGEMhÏÄ\0HfÈ_\19^È/JÃ\9f\15N®\98\8fR\84±f¼Ö\9e#Wߢ\87ïÇ"|1Ý-\ 4\13åÀ_\blûÉòü¬ÅU\9f\83\12\81p¡¡Û\1a\96úÁÀeúæ¡Çrµ>̶\83ï\ fÂ(\80S\7f\10\85§6ó\83\17\1caK\ 5é¥XirÇ\81ùX\16·B\8e£¨äú\80®°ÐÑ \91ø\99ËX\8a(HjÁ\92Þ\v\1cA¯KÕ<Ñ\1c_/Å\81\1eó\13|ÀÜ©\ 5\8cÖî»vf½Æ\9a\9e\9d\97
+¿HÃ\99t\1fh\0ùÐ-¨WÈÇ\9ej@tÝ<bz\91 9M£\ 6yõ\89µ\8d\17r½\97;̺\96zlw!*\e?\vÓé½¾\8ffþf\13ؾ\ fש\8cÜ_Q$\1eÍ$P7u«v¨ßv1\8dY\rÆø¼\9e^ÐxÌ\9fVhå\ f×w7×ôÎè\8f2wÐ\8d{ß\7f\1c\7\1dèN\86\9eÁþ÷·\0\v<¦\8b\9d4\1dMFÙd<\r\1fÏ\93\ 1»ûivòÛÉ¿aå"Xendstream
+endobj
+1256 0 obj<</Type/Page/Parent 1099 0 R/Contents 1257 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F3 6 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 717 0 R>>endobj
+1257 0 obj<</Filter/FlateDecode/Length 1648 >>stream
+x\ 1¥WkoÛF\10üî_±uRX\ 1,J¢dIvÚ\ 2vR·)ê¤\8dU\14E]\14'ò$]BÞ)<Ò²úë;{\ f½\1c\a\ 5\8aÀvÈ{ìîìììòÓQ\8fºø×£QJý!eåQ7éâ\rÿêñ¯÷?ð\e:ë\r\931\954\1c&ÃðPÐ[ê§çÉ\88\ 6ã\11¶¥ø©$Í\8eú\831?¦ã¤\8fS}wÌ?ñ±Ýg¬âè(ìu«;Ï%\rz\83ä|g\95½é¥Ý¤whòjrÔ¹\1eP¯G\93\19B\1a\8eG4É]$]\9adÉBÒ\8bÉ\aìÁy·§Õ\91uÖY
+kW¹_\89§[$u]i¥\8a\82
+ekªqº\14ÙBiIZ\94\12Kõ\82\ 4\1d??&±\J\9dËü\94VF\9fÔ´\10÷\12KîbSñk¾\86ß²\95.µ{ý$\85o-AºÁ\8a]Hü\16:'mhapy®*\99Õ¦Z'tm*\92\ f¢\\16|ç®\v9\9däf¹\\9fÀlSäÁ¬þÏAî8â£-ÔG\89@\95½\888\9d{(Ûé \19°ÃÎÞó\8b\87\8b³î\19~zacJnc+x÷·VÙG\ 6iï\9aÖE'\97÷\1d\8eø¢3Uº3\13\85\r["îp)\1d²¡Ë©¹\97§!\944æëó÷ÇÃ-Ê\84¦)`ÒkÊ¥Í*µ¬\15Ráò5\ 3\8e\9cĬP\88ö\94T"\93Sº\12V\96x~eÊeSË*ñ.G\8b;\10mloâÚÚ\15Sk
+\1c/ÖT6 \v|`Soe}õæÝ·of;æ©6¼é\83\ 1\9dr~àí¹)\85Ò Mð\7fÐê\80+ñâH¶xê\vF\10ñ(§ÂóO\9b\1a¥\99\99¹Vÿø4\93°;\94ª+¸~`Td\99itíPq¹ñ4xkVðXøªÈLUI»4:WzN¿iõ@á\18\18i\11¦Ô\94URÔ\ \1c§\96\ f5ÙZ.IY\8eÂ/º%ïn<\8e\94\1døÃÇ}\ 2)3º\ 6\l\93ß®PBí\8fÚ¬4áeD±©\15\17ØƧX\95\8c3ì\aÊä\ 6uÝØp\9b³º/\83Õ\9c:×g\eqÙ\94°-§^@îZã»\17û\a\9d\88º\83[ªd¦,¹Ò\81\8c]°·\vYÉM½EíB\15x¤+cêg|ëÖx\8b66©-¨]\86*é?ª\92GLÝIá\8aí>Y_\8fN¶\®\80s(\83\13»ÇnOÚ÷o^S ¹\96«¸u\83<Ð\9eK-+fÂA^g\95)]\1a\7fÛ^ñ4¯B\91Æl¤i\92v{P\8eQ2î;]ý uå®\v\Ù+0Re)s\ 5/\8aµG6f\87«}\98t\87g¬@7B7¢@E;z21¶ê»Ï¨H\eÄWÊzaò\88\95üÔ¨{Q@^\18\96§î9\80"\92ßh\18ü]éܬ\80õ\84~yýjKP:¾\95Õ½¬\b^\8a¹¬\8eÑ'"\84µB\ 3Am®\16*[8\14â\95Ê\1eØ
+e\19¥Ä\9dÜ\1e\và±H¡N\91{/P®Qe\v¡çÒ¿\8e\15uJkÓTq×#c÷MÁÉ\9f¢\8f!\1fPj\85\16Ûä\b\82-0À»Ç=¨b\at×pÙ\r\vv\1e°ï\92á9\bNi¦¸®\91B\97/ÎN9\95\95\8d\1cÝ Ç5hË\90\92ij\18-D5GÀr^I¼\9a\ 1yø©4\14©\14µBn\10\82m²Å\81M\ f\99Mè\ fÓø~ìäo%*èüW¼¹s}N=ôÒ\19ø\1axÛO#o{i2HÒ\84\8eßé6"m_\17ëczÅÚÉ&áÆM\98@&¬ÕtéÕÙeuwòA%0\83'\8c\15\ 4\1fjs×bÍaõ\a÷yT¹{A+±Þ£e¨l\ fV,ZË\¶
+Ó\aPDÖ\8aÂI¿\f\8dÅAöH¤w%½d¥ÓRÂ&\18\89VÀ\19\fÌÂÕ\9fí\80\ 1Ô¨\81·Jg\92$B\ fV?ë)¢C¹¡\13!{OKÇ)\13Ê\17)\ f\ 4¢©Ñtk\95q¥\1fæÒá\1eÚË^[\83ß\8dõâ`\9bå\12\ 3Eþ\12qáõÆ\a >Só\ 6Z\172\87°Ýý\8fºJ\8bD\9e{~ù\89e\7f[ì!-2\18fÀ\ 2¥yÃv\88Ý\19QÐ\17\126ì7DUk\85N·Õ&? 8´Ð\92Ñ\85$¤äå\17PCé\80,\18×ÜÔ\12TÃù¹\9deÑÕ\1c$\87³Â\95dÊ\0\eT|\9cc\1dôô^æ?B§\86\98\85\7fVºy »ÆTP\ 6uïú\99\92[V\18>ÿ\9c\17f*\8a¿¢á.>H@s"zFß$IRI\9e\9fXPP)KQA&0ÑY¬|÷øÈ\ 1èô-u\1a[u,\ f¦\ì¼ÞÎi3²R{N=|\ eµ-m\87WjßÐ×M袱®±§\8fÏ\8b¼åª¹\9f\10w£8¦¼rÓg\14Ü×nâÛO\17\a¼)ßee2\997üE\ 5¶F\9d\ 4Á÷® Bv/*\ 5úot\12Iµ\81}¡\8f\ 4h\87aRÀ÷ÞfÐ\88\9d&ív»Þ¡,ìj£òG""ºK\87£\10í8¬öúãd|Þ§á¨\9fà\ f6Ý^Þ\A\8f+ó\ 1\9f0ôÚd\r\ fØ®\10øb´X|(\8eûÔ\1e¥îÒÿ!z\83Ñ \19\rÇÞ¹QÊ×\7f?9úõè_Ï\12\8d\12endstream
+endobj
+1258 0 obj<</Type/Page/Parent 1099 0 R/Contents 1259 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1259 0 obj<</Filter/FlateDecode/Length 1770 >>stream
+x\ 1WÛnÛF\10}÷WL\8d\0f
+\8bºØ\96ä\14ha+q!\14\8dÝX\81Q@/+r)mLr\99]Ò\8aþ¾gvI\99b\9c4\ fÉ\r\ e/;3gÎ93ü|4¤\ 1~\ fi2¢³1EÙÑ \1cÐùÙ4\1cÓùt\82\9fGøk$%G×\8b£þÍ9\r\87´HøÙñtB\8b\98ðü`@\8b(xØÈ\9cÊ\8d¤ÊJC2\95Qi©ÔôI+\7f=J\95ÌK¾$(Ö\99Pù)=¨<Ö[K\85ÑY\81ç\13mHä$¢HWxVä1\15ÂÚ6ñëŧ£\ 1õ\86gá\bq\83r#JRü¦zR©\Ëø \98\ f\10Ò\15Ý\8bl%HÄ\99Ê\95-\8d(Õ\93Ü\aX\ 6*\94á)2ª\1f«\ 3»Ó7Âv\82\1aËç\88\96´¯Ì¿\8b²\9f¤Y¾¦¬²%$¡Zi\90×\ 6ÿþæ Ñ\85ä\ 4ðÚV¥)%B¥¤\12®\18\ 5ª\\98\9dC¯\13µA\ 3Õ®\91|\1eÒ\ 207¸8ÌÊ\rn6ÏÙ\8d®Ò\983°²Á[% ²\0¤û×P¢Ë¾\eÌZ\1d)Q"o¾Ó¿\ 1;\Ë\83¾,£¾{Ýõâ\99\f\ 1Wjv§.\13+£Ê¨r\aÒ\b«s\eò)=4n4\ eϹq\9c»\95Ö2
+\8frG:qÐ|·M\82¹$ð'G¨Èì
+\87!¿Í\84A\95¥Ê×|L§\98}±u\90LD\e\95K*\r·¨ÆËÃùâ-ß&\0\19¡\1a\86Dç=Dé%)ªÕ¦\13*b÷\10:ªpz\8awâ\1dÉ/ \9d\87¡\7f3®Ál\11¹\91Àû\85Ç»\91X\e³¹Çè\e9\ 2\98&¿Lä\95H]v\9e\9aó\18½Q\89\8a<ífhúZZÊd^y~¾\80\9a×\ eå"\93§´ªJ¨\95r\10?ÚÈèÑ5k¥¿ÐñÌa\ 2éÌ Ý
+T§«Z=µàß:\91\87Ç4ç\@ÐHX\9cøu\9b\1cDÜÁ\97\vÄ\9bð\94C}ï\9fÔ.¡ZîuC\1aª}\176\9c
++úVo\7f\12zl`? 6öQ`Ôá\1cÀ¬Í\94=4\922öBYi¸\1c\8b£¡×\88mº±»\9d®¼KÙª(Òݳý\1d¸d'Tc/[6zoØ2^¾v\ 2ïßD5³{\93p:ÄÏÓpÊj_\8eÆ\93ÚH.i\88\89\91À ¦áð\12N~Q[ùp\14^\84Ì¢\f\96pgô*\95\19k=¦wÆhãLøY:\18=½Ñ\ 4ó §ÏA©\9c©©ò(bø:\9d¼:ÁÿðCÃ\10¦q\9dc#\96\e]ÑIûA÷î2(w\ 5\14\ 3\1dÁͽ*\7fÄ\ 5;&Ã\81a å¦ÎJ\14\85Ìc\19\87tc¤¼¾\7fË'³Ê\9b\91¶\f¸f\8d\96\1aÂm²;[\ 2\89?\90ÄVç'\10`£87b[G{Á)ã4ë\8am\95¸àaáQå\81©s4¼V(.¯\8dÈöòÊÄ#Ì\11Ï×\86®óH\ 2È\18ª\85£a
+?bàJ\93`¶§»\90îõ>¥n-û\f5ü\83Oä¾py¸á\11½hæ
+=©bë¯5\r
+X\9a2FÌV2"Æ\88t.Ï\87\85tk\9aèüÐv£Ó:o\ fzsj\v`\1833?U\8f(ÈÕj+ì6|\ri¡MU®>W\92>ò\ 63\7fK¿ø¬\ e©}9òs¬ÅìÆÕ\1dõ{ÃÁEÃε\9b¿\98ÅÇÿ"F3\116\827\10\8at\9e\ 3H\9e\83¨\96k¨\r3\fá\99\90îñÌ\93ÛmPÞá\9c{rÙÎÖEê´Ñæ\90\13´\82Yâô$U\11ºæ\18\88ÁÉs\88\ 1ĸä\0NÆ\8eQ|ñY/\87³ñ°/\a¬\ 2\976\8eÓ\96w\18\ 6\11K\0\97²§i£¬\83#)Á®çÊmn«ÒÊ\94· ¸\ 3\11\aoµ¯\ 5Ø2\90á:D\ f¡©\98bì\80\12*AlAv#ÐÓe\0\0çw³W¸Ì\0\ 3]¿aܽ\9dù\81\9fè4Õ[®=\82óppÞÉ:!\8dÌØHa\ 5\94Ë\92\ 5à\83µ\9agßx\8c\1a\87ha4{³\>Ìß¿_,\97¿û\87\9eI\8fã\1cé~¥~g\9dj\1dpS\19dn ¾Ã\ 5\0Ðc¥\17\fx^&³\15(\v\ 3\12N¥k£«â\ 4Uû\1d\99«·ìFÎ\92°.ð\ 5O¨N½ÜE\86¯\1e6\80q%bR±\14À\91oº½ÕÑ\9a\az\86=N¬%ÌÛí\15î\\ 6ÉÅ÷ÑÐ\13«3\89ù\ f¤e\8a\ 5 \13\12"\8f5V\12¶ñL\94¼Gl\91÷)\16È\15Ömìæh\r3K¬ñÉðò´9¿ð\1f\ 5ßÖäÅ´µ}:_åÑá\82¦zíJ\ 3M\96Á\fcr0¼¼Æ\Ã/ß´Æ\95Z\8d\99;\84x'Ù#I¶\8a"à\91T\98\enm\12 \17S\15°Xï\LÏ\nq\11\1f
+n\ 1>X~#\8d 6'\8f®sɶ²k¬OéxÁíü¡\1aNé.Å\1aÎ\v/\ fy\ 6\90\8d\ 5B²UZrÕØ\9eÝI\9d¦´>\97´©½\82{\83\8f4î#\9a
+Ô´ïF{Q]0+t\84O\0ë\r¦\85Ï=\1cÕ\96\9a¿\88\90\86\87¶\11MÀ\9fqX\9eû\ f·\1fþúóÃíÇ»\10\8f\1fÂ\1fðô\8a\1cÑx\86¢\ eùEdEú\15£\98§µp9|\82ÏC&\91?íY\816[u\94\17\90¨J,¥\1fþµ\91±ÖÐ5Ø\b\88~k\1cWX#v\v÷a4V\ 2k1³\14ûV¹ñaþwfLëñ7Ä·öôò\8c..Ç~jÜ_ý}}ÅkÐ'\f\a\8c\84¨Â²^ºõ\9d\8fî\rÇø,\9f\9eQo2Âww\1cüÈöt>9\ f'ã)¾ôñÂä\8cÏy·8úçè?òé\feendstream
+endobj
+1260 0 obj<</Type/Page/Parent 1099 0 R/Contents 1261 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 720 0 R>>endobj
+1261 0 obj<</Filter/FlateDecode/Length 1815 >>stream
+x\ 1\8dWmO\e9\10þ\9e_1ªZ5\95`\93MÒ¼ôË\89\1epE\15¡\a©ÐIH\95w×!.»ëtí%äßß3¶\97lÒR\95ª\10Çö¼<3óÌøG'¦>þÅ4\19ÐpLiÑéGXNfÑ\88FÓ >\ fð¿\92´ä\r\1cå_1ÿºþ§3\9eDS\8aû}ü.(\1e\ e¢aXåtÓi¯±;\9eíï¶ÖØ\85¦Yûnk]Ð`ð>zßÚm¯±;\1c?[ÁzÛkìNãhÒ¾ÛZcw6\8bâönk]Ð0~\1f\8d[»\1f\17\9dÞù\88â\98\16K\ 6k<\9dÐ"s\90ôi\91v\13i7R\96ô(+£ti\18ºhrD\8bù?$Ê\8cìJÒ§³\93SJ*Q¦+Ju&é®[j\v\80S]\14²Ìdv÷.¢\ 5Nê2ßÒFlÉêw\8bï\9d>\1dÇÃh\0\85ÝTW8o\9d¼u¥\93\\16¤\fÎA\8c±\1aÁbMºR÷ª\149eº\10ª¤\9b\8bS|\87#\85~ô'ÂF\9a+YZZVºà\8b\aÊÂ!¶¿\92ßµ*#>Ð;\a0\ e\87\96]lu!Ò\95*!¿ª\8d%\91¦ºfÙPlW°\11^®k++\92
+ª*Ø&\r1\0òIá<\8eá\10¯qS\1a£à[Ð×à\ e}\831\92\138Ü®\0ö\ 5T1FĶ9Ç\83Å\17t/=F\ 5$\89{I¯Ú\ 6þ\91i\aXüÞÐW\11Ý®\84}khSéòþ¯p¹±vÁþ·Â\95\8aÚÈ\8c\12\18\ fܾ\9cþíü^\89GUÞ\93 S++àþ¯\11\8dèbI[]\93@´kÃW ÅGfðsdD\96á\14ð6i¥ÖÖ\9fk\10íR!íJ#?5¥\95\14V6qCN1Ä.r\e]ç\19©2S)\9f°ð\94\94¥\95ðñÚèêAf.V\8c8+M\1dұɣ¬@\98¼-[c}æòe¸ÐÜn\10;É\91)¥°êQ¢\14ÔÎag¥\83)ä\17ò·RȤB\94µÈq8Ø-·0\10ÙÎ\81K¸4½\7f\19òÐ\95P¾u:\8f[&_\8a\a ð\9dÕp\911v"8H¬fÛÜ\rIýB\80\80\14\99"Y\vc6\19-\15\ 2©]z\1e¤Ô\8d(\12ÁÑßE4\ 3 °\ 3M\14B|EI2S(oª\ 4v¹ ðÕsì[Új«re·G\80ãá°\9cw\9eµ5\94¢\90\8eBZ\15<\97öãÅÕ\r¹½\rÊ\15Iùöõ[\12ëµã)N\17$À]\97Tä\8b´\85bSçßøök
+\9c\ 6P\v¦\85\ 4¾Á\e\87&pJ4\84÷¤M{\ 1®\86,÷\ 1\8cèFÃ̵ÔëüÐ-\17¢J®ue\1dx\9c\9ce
+\ e\ 6«0¹\99:)Á\ 6\850\ f\ 6ê=O3\ 2\1e\7f\94\ 6Hû\99¤ç\v
+¤èäúJ=\b\9c+\8aPÎ\11\1dd\r$\eø\b\7f[60 :W\83löÒ+\ e\14\97\86Â=F[EW\9aM\99äî\ 6ã ù\82m(×m\1f\ fâØ·\83@\83¢\9aÖ`<M¹\ 6óó\a\11ü;õ-ÀQ¼ ùbÔ»\1d|&.;cQ_º<\ 2\8f2]
+p\81'K\91è\1a\80m\ fÜnh3\91\\7f\992ÌQ¾îw½\91ë©)â\97i\ fi\7fr\89¦\92\83OÀ\83õ=×\8c\8fÇ âÖ\896\bÊt\e\ 6%ô\84S8Á{qDW\\ 3\aÆ\99-\0Ð\ 5·\19&+¤Y]î\1a \99\15"b¸\ eç\v\a@!\8b\84IÑEß°pN\89ÀT®eaîÑy®7pö@\97¬*îV%3\ 4D\14I\16\ 1ö\ fÄ)\9c%Èä\82?Eé\a|ú\16P»ë\ eÆÓ»wì÷\aú:ÿ<¿º\9dÓÙõõÕµ#\93¯0äÃ\81\9a7L\95oÂ\97\r¦'訪ò\85$\ 3ÅjÔ\93ë\17ì\ 2_
+:Ñ\8dP», w\8e!Êõìn\8b,\8e%ítìBØ=\ 2\16@ßµãªp¤\9aéR\1e\1dØ·á\ 6Á$Ùt\8e²¡gfm¬¾(Ñß3&.íR\ fõ\81á\80©®Ý\18}\80ûG\9Kuß´\ fï@ÓÚºÁ9ÿí®\91á\8etNË\p6ùmÌ«\87\93J \9b"Êz\86 øP\8eãkt6\1f|ã\82Ò;ïÓ\8c'?Nî\91\9f@(ü\ 4s\90Ì?jU!OÃ\ fÇ~-«BÙȸ)n\a0¤¸Á\15%\1eZùF\80¨\80\r&4\9e×\12\91>lDŽ
+©dUâH\9d\ f8\93ÝpùÄ\91\ eìиÙý\8dRDUñ\80"roN»ñµ\9f·XÃKR7Yò\93#]7®\82ê\98î\f34*\16\89ãÛu\18Î^\10X\97êég\810Ò_.¥Ì84m39[\8e¸´w\89ÏÂ9ë\v\8d\92ÀdÌ\84\1ffpÒK\9f_\1cÑ_Òì`4> Y<D0×/\11åi\14ÏøOßG;\1eDc4!?¶|ѹJyæ`\1aÿRiV`öó\88\13e\82\17\ 4B|YcÞw¶ Ï\96è\ 4\85£]*a-øÖO°ª@cÃ#ÀþRǵv\93áW\94ö³>æ\9fÀñ¬\1a
+
\9b7B 1T
\16#
\83\8cA|ø3
\1a#÷¡gUÌâ8
\ 1\ 4Ý
\19\85\1eâ
\88PÐ-f=½1àJ
\1aá è
\ 5Fô
\1fjݬ
\1c¿bVtái©ee
\9b\15¤
\80\a\91øΨýgcuO]ºh<eõ
\rx
\1eÉ
\ 6Vx¶oÁ¾,÷
\ eu²Ä£P¹c>×Þ.UZi£
\97ÖE
\9bC
\10^
\v\9fd;G1
\11+n|ü>
\92\16\12\9a"o
\9a,ÞwÏWy¬'ß
\10[6¹
\fØÒ
\99\eÊÜ´ß;ßoáx
\15î5p<
\96\1d\13ÅÃi4
\9d\ri<Á2ëÞ
\9c\~<a
\18¾ó«îT§5'
\81K
\10vú8Æ;»?
\1dÒñdà$þY
\1e\8e&£h2
\9e\82® b2bIg
\8bο
\9dÿ
\ 1Çöç>endstream
+endobj
+1262 0 obj<</Type/Page/Parent 1099 0 R/Contents 1263 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 725 0 R>>endobj
+1263 0 obj<</Filter/FlateDecode/Length 1871 >>stream
+x\ 1¥XÛrÛ8\12}÷Wô\9b4[6e],ÉyÙÊÅÞumìd"e2»¥\17\88\84$\8cI@C\90\96õ÷{ºAR\14\93\9a\9a©Iʲ%\80Ý\8dÓ§O7ôûÅ\90®ñ\7fH³\11\8d§\14g\17×Ñ5>á\97!¿|ù×Åh8\8eF4\1aM¢kÊh2\9dãwx\97Òâbx3\8fæ4\9cO¢ ¯\8eÇÍ;^\85!\1aÎ&Ñ\94&ó\19?\87\9f\ÓæâÝòbp?¡á\90\96\eö<\9dÏh\99\88ãkZÆý¥£8תÐärÒ\89)è§åox\ 4æä\91¾-bg7f\eí]\1a\96jk}:º\92²Ò\17TzMÅNÓÓ\92\16:\7fÑ9}v©\89\8ft\a\8b.¿\f\ fÞÔ6 ¶ØW¤_u×æagâ\1d\19Ï\9f_]Ó\95\80²LúÆÆi\99è\84\ e¦Øµ\1cË"\98\986Ö+xÃ7\97?ûB\15ÆÙ\8e\93\88\96;\rx\8c'u\1e)9\8b\8f\9e\96\aO0L\80\ 3{`¯\e\8d/M¡Ö)\10\ 6l\ 2 ±Ûn\1c\1f\¦\8c\r\ e\8c\96\13\9drÑ\8fè¾Ì\ 1Z~I*-v®Üî\ 4ÃoÆ&\ eþoo:¡ÅÊÒZð:\83\ 5GL\81¦Dn;ç\1e\84l\òA\ e&Mù(t\0.\r\8aÈ\84\89\11\1c,ǪNc®·Æ\17ù\91\9eõ\111©ï\8e¯\0\9e×\ 5yYs:9Ù\85Îö)¨ä#ú·;hÐàR\967&\85\83Mî2y{"\89\84\94\97\96vj¿7é\91´\15\188 \92³ÖA9'\11ý\17\8c³\1a§\rX7,m\11ê\92b\97eÎF*É:y\87Õï\9e<\18k\8b\1fì\8dèA\92\ fö¿hk´-¨p´\a)øÄÅÁ±íV|ÿ`\e\14\8e\8a¤wâ\8b߬Vâiµ2vÓ\r«æ<\1d\84\96ì`m¬B\ 2\ 4¡Ô¹g!\1a\162*-Ðô\b&EÎñI~0^G\9dh\9e\1c*Z¥Þ!ZÅ!ã%1¹\8eQ\8dGætog\92DÛ^ýàh
+]A\99-á»f \12Ue\96\8b\15Dçza\9bçµÈá2ÏL¬é³\8a\9fiL«>#Í\ÈW?Iè'\9b\9dH¡v\11ݽ\16¹\8a\ 3´\ 1ÂÒ7\ 5u\92\r\1f¼ìáĪLÓàµ\83$\88\1eéH\8eÛ«êíôôS1ñû©Â\8e×\1f<*QV\ e\88=ÐT\89N°\8b¶\10\9dAòW\94\8d!a¬\94÷.6À\ 6o«\8a©x³ê\v\8b\0\99\87\1e ¿kM:@\83ÍÊÓA§iEÌ\ e\8c\92\97½óÞ°*\81©Ð\10\9b:Å\8aÉN;%Z9dõú´Ù s·3)\8e-\8aZ¡\80öGr\9bö\83\81\ 15[jQ~\v=\ 1\ 3a½r\9cºX\ 4\97©"B;ÿ§sGo\93ÌXV\95°þ\1f(\92zQ&mT´\ e8\bÅ£\89sçݦ\10\97\83ûZÝ[\15÷\1ez\bZA'\13×\88ì?Ï\19Á\89«©ý`E*åTÛÜ\95û\1a\94\1d2\93â\14\8c\ 6\e|\95J7 \0ö´vB&#úÈÅ\b\81â\83ñæ9½ÿ\80\82\bnk=jE¹Z\15Î¥~µÊµ\7f6Åjeu\ 1¥0vµªDë<bô\85:Ðsס5\85øâT\ 4i}ì° q%Ò\7f\85åø\19õÓU!1\b¯Ñ÷\1aÄ\aÛ"ç\e¡\ 1\vð\96{\17s¡Ü\83QÌ\ 6\93AÆ\99Å^£wnªãïáË\ 3©N(çÁGôÕ\ 2Þ¢´à=\84¾Øq_\85\90³\901Í\13gáÄ\12w\8dc\95\85LÅ;\83\8fE½Ð\9b|HFÇ\910\9bS\83\7fÕR\93ñM'}ì¦Wu@v\98ë=\82òäËíV{ü\ 1þ\17\f\1cg·Ü'R¤«>\ 6¤ä\8dôM¬¡:\e\1c\13´T\1c«\13\11r\14:ø«\bH\15C
+òsYlsµ^£*¥\1f\ et\11\ fÄ\Åó¸\9ab®fÑ|\88¿yè\83,¯FÓY\95ͺ\12d\ 3Æ£\11¯£ßr\15<ð\ 1¨÷\15:F\8fʪÎ{\92±\1e\vtëC\8eø4\8b´\8ad\ 1m×°\13\80\92VË *\8f0Ó\9aºÀyë\ e\97´kûeÐÎ|KE\85)È÷d\16è Õ\rKª·\15M£\ 2h^\90\ e\83\99\8c)H8\8aÇXWi\14\ f\9f\c\14\87IÈê×\12ó\ 67¬PòAr°¿ÉÌ\rù£\87úú\9a2µ¢-q\86`\8cç\9bªÑI+ÁðÜHÉ9\9a\ 1Ì&sC\fôã1¦}ÉÛÍu\95·zl®\96\9bÁ¶\9d¬6`\7fÏê\1d\86\96\82~1ú \85\9e\83û?\eß\15. ·`[\13à{V\13
+\93É©¯H\89¨\1c\15úÂdÆ\88'¹=¿Õä[êӦؿ\19\fð\1ae\8d¨cD\e, î©Y\ f\1e\17\1fï\1f>Þ-\ 6Ow¿~]Dw¿Þ\9d[\92K\12,µxÁYªs\89)\85oLç\94ø\ 3\1eþ°\1e\88'Ú¦\1f±ÿvË\97R=qñÅ(>\94Tðy¨r\95ûk\87^|ùeùéÓÇ?8w+uA\14p\aì\8aÂ-n\7f|û\1aÍ£á-~\roq\97\ 4\ 1\87£h\16Ñ7\9eÿB«Þét\8fB±A+:í\92!\9eá\12\89\a\ 11C\82\9fLÙ#yWæ1j\ f}\0ÍÃåY¨©\ 62|*\8cà%Þ\84\9bOÊBʪç/éËýû^è\1d\89\8bË\fÜ\94ç\9b\ 1\v\8eë
+Ä\ 64\ 5\ e\18$ѧ)«lN:Àå\8fÙ¼à.%=cë\\82i 7\10ô\18¬J¬[mu®pC~|\87²F«bÇýRII·¼®sܹ\10p%õȶ\8b^@\94\9b\ fÇ\95\18µµÎ\17l2\bÆ\83À*w(\94\89^\97¡\8d$á\16\98º-"Þç\ e(\ 6$°\1fR±AË\10*\9dp\80\9afUz\9aÒ\rùç¯ D[\9a\9e\80/\ 6ä¶>\1c£_Ü\8ei:¹\rãüâíã»·ô9w¿aô§\ fmì\85äÃ)¾-\98\8féj6\12½ú3t\99à{\86Ùt\1e\ 4nvÃvî\96\17?_ü\1fZ\17(}endstream
+endobj
+1264 0 obj<</Type/Page/Parent 1099 0 R/Contents 1265 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 730 0 R>>endobj
+1265 0 obj<</Filter/FlateDecode/Length 1973 >>stream
+x\ 1ÝX]oÛF\16}÷¯¸/\85\9cB¢>-Ù}Y8qÜ56Nº\95Ú \80^Fä\90\9a\98\9ca9C+Æîþ÷=w\86\94(º\8bEÛ§]\ 4\11,~ÜÏsν£_/¦4Á¿)f4_R\\L¢ ®ðÇ\94?~üþb¶ZE\vZ,®ñYÐüz~ü\96Óúb~5\8b®h1¿\8af¸»X.¢eó\8dï¾Ý\\8cï\174\9dÒ&e\aËë\15m\12o\7fB\9bøò\93\96dRr{I;i\1d%JdÚX§brÆä\96RSQ"wu\96)\9dQY\99].\vKÊÒZ\14;AÊY\99§\11ýbj\8a\85¦ÚJom\94\90)\9d2úÍæËÅ\84FÓ9âÛ$\97logÜ\9el±KHè\844ÿá\fÙRÆ*}¡Ã^8\1ax\9f\94Ëg\99\ f\b\17\ e{\15ïù±ªÖ\11eðRÀc)2iÉhoqÈîF\1d\7fÞ:»\81¿(6:õ\19\15¦\92¤4\82)\ 4\aɯ\9f²\f\81Û\886(K'\10\9f`%t&)LAÓ^nÛK®c"SQçnû\86£\9dNh{9E\1f{u\14Ö\1eL\95Øí\9b¨12[¢(ÐFudE{\99\97i\9dS!ÝÞ \98i'@T\1f¶cS\94*\97d}#jË\r«lo|\7fÕôü\92²8¦Q\16®¶H¸¤4\17\19'\bS\a\95ç(F\9c×\89\7f¹S½\90|·PJ\a°(-*\85ºsiE\9e\9b\ 3½\0\ 1\88J8'Щ,Ùñ7.\b:¦96ßñqè7\80\14K\8b\12?ô\ 1\82ª ûW\86Ðhÿ~ó¢¯'®}Ü\10êød\9doã\90RU\ 1Å\99tÞsç\16[,Ä\93\87M¯m@\85\961à ¢\1f*DÅÁÆ®ÊG"w£DæÒI\9fgføNb\ e¨AH-1\85@Evæ+3ÂÖiªb%µCÓ\81Ù\
+ë\86\8c¦-\9dÊ\86@\9d*¤/Ü\17\98ö!\a\8b\ 1<\99Ô²\12ì\9c\ 6\1f¬x¯ëbSÕÖÉäÎûµ\ 3\ fÑJ\8aÔÉjØO¹\97&Gêð\9f{\ 6nJ\r\0µ\89\ f}~\8c; ú"áÓ\ 3cǹ\9f×¾m(\92´¶.\ 2î\84ëùc<ìųÔ\ 3G\16\r\11\84@óü\85ìÞT¸Ä´W ðËE05\13fm\86\0"\94È\1d$â+»Í\0Ê O¾\19!Z\11»\9aí±Û.ãÝKÉ\11Á\ e"¨ \ f\81jC_g\96(\86f\83RF/ªà\94®e\9f\88k\83Þ@Î\98\84\81b \1c\ 4'\ 1c\90À\1e\1e\9e!\99*\ 3ôtö\1d\87\ 1\81\1dµ<v¸W\8aJ\14ôOb¹áûãû¸¡åh
+u\9fÏ!ý üvv5¡p¿%hsû(\9b¨V\9c{d\8d>Ðxü\ f-ÝN\19KZ Hh\83\95Õ³¬þõû\9c\8cf\8bèf¹:\89ó¦õã[\92Z@å\13\82EëÅ\11\ 3".\93º(\19åâY¨\9c\1fð"È\1e{#«Êè\92öÎ\95ß\8dÇ\87Ã!òï\96\91©²ñùÓþ=~:¢÷\1e{"çÖzýóO\9e"Ë\f4°\14ñ\13\80dµJSh\ 4KêOZ}õØý¬ô|F{\8c.;ô:\rÜ2Ss#\12¤Âz}îÜO×~¨ÐZP@ä\98\14½ÇO±6\91µ}¾G\14®\12q`\ 1>ý,\82\1dzTqe¬I\1d!8Äb¡VCú\bpC±èÑhåð.Hô$"BC\v£Á\81³
+ÿ¦t\9cìÞñx\ 4\95«£Õww\ 3äÏÞO>1-\19\1cÀ+d\12Rÿî®e;º½Æ×A\18u½\92wº\1f\82\83Y\88\9aÝ«\92g\ 6\bÀo{íoÖ\ 4\0\84«\10Úd\8f4\16ú\85\90³\9fW5\84Ê"g\15\1dùÖn\ 6eÞ\16Qr5|\91 X²JEÌÃ\9a\97\8fBÙ¸6µ\ 5£\12\89Ùé'ô1Ð \18 ¯\13f)ëåg4´È\87\ fk¾\17\1c<¸Ô:GWYϱ\13U\18\ f\0Q#ú¹\89EÎ\93\87e\9f\15dW\ 1d1´þØzÿHÏ\9fw°\1cÑ[\bêAx\91E9[à\87ÝB\8a°\13\1d*\ 5ÙoÊ\ e\9ccKá\0R\8c{ëuj|¿l\95¤3Tþ\8a1\9c\18z8¶zðñ\1cm\ 3\1eF\90@\ 4ÿù46 0\14GÀÜ|åÄþÂÑ\9fVG8i\ 1ÿ\10`ÄÅj\ 2<Úä\9e5£\18bÿk\8dÂA/Ðøº\84\°L9Y6{Ujxk`+\\vær\83O\êU\ eI Côó\ 2\vq4_Ü\f\9bm\10$\85}\ fÅ\13'^ã\1e¯ù!üê\99¾\9bó¢àµ\80¯våÀܪst\e\e\97* \81A\81¶vÄ`z¬#j<f^"t¿\1e÷¼ùáª%ºê×áÿ$\18-\96\11\rv¥W\ 4îvñü\91þ8{\0Ä\15ÏK?\aOÞ\ 1êV\18úh¡\8d?\ 20Äo±\8b8\8f\1e\ eôH1\14È0â\1cöHί;\0¿70½v\ 2³~\84,\1cOI\8b?ßaÞV&§\1f\84\969¾·\10å\87ªg\85µ\10\17o\93\84íýñ\81¹Æ¦\10\87-ð¿§å×\80\ÅOL\8fÁ§¿\r\1a\8eýÑiýÎÛbCÍòwLò,ù?é\ 5p\90(îo\8b=\83¡í+\ 4ÿ°÷û\14N\fÐ\91ßé÷õ\9aÀN1§J,Á\7fÃP¯O¼ß1OäW\85U\1cº\1d\1a\89ó¬?\84^~³þe½yÿøã§O\9bo¶Ûõ\v4¡\98϶[\1d&àöÛèÛðF»\va=Ø\1c\f_ë®y\90Ó ÌÆ\9fC\827\ 19\909¶\88\9eO,b¨\95Ýn{\96\8fBÒlÆ\K\9c\ 5p\ 6\10Õ\vÝ}ø0\b£\8dßg©
+÷\99Òl¨£¼ÍjÂ;RØN{\ 1Ä¢t5ÔðU\ 4¾\17gê
+5nN@mÿ<å\82\ 6\86CùQp;ô\ fûçu8[xmé°\9b´TàèºÅ|l\96\91\86æþtËÏwìwÐäcþß z\93Ðÿ\13Á»=ùÓ,\1fÍgÑjµ¢ùd\8eß\8düY\ 4\a\82\0Þë\86±Óùut}3Ç/O7á'\8aõíãÛ[\1c\95Í\17\96Ø;\13×\ 5¦\83?\81{`M\97«hr=§ÑjæÏ7Sø\88è3o\8f§ß6üÂóÀGu¿j,V\8bhµ¼\ e\a¢Õ\92í¼ß\üýâß\1e\9dó\ 2endstream
+endobj
+1266 0 obj<</Type/Page/Parent 1099 0 R/Contents 1267 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 747 0 R>>endobj
+1267 0 obj<</Filter/FlateDecode/Length 2259 >>stream
+x\ 1XMsÛF\12½ëWt\ e)Ñ) ü\12?\94Ë\96,Å\8eªV¶×dÖåZîa\0\f\89\89\80\19\ 6\ 3\88â\1eö·ïë\1e\80\14)ËI6.UI\ 2f¦§ûu÷ënüvÒ§\1e~ú4\19ÐpLIqÒ\8bzxÿúüëãÛ\93þ¸\1f\8dh4\9eD\ 3*h0\1cGýæ)§ÙÉd\10õhÔ¿\88.xqrÁ\8bòÄ\8býÞ$\9aÐÅt\8a=¼Ú\8b\86Í\13¯\ eú=ì¾À\99)V\87½1ï\95'9;¾Äµ\17¸|Ì«¸¶}\92³½\11?_LåÞáå\84%É\93¬NÇPvx9
+gÇ=Ü\10\9edu0Æ©áh,Z\rG²*O¼úz~Ò}sAý>Í\97\8cÉx:¡y*\90ôh\9etÞ¹\r%n½¥*Ó´4¹ö´,]!\8fïæ4Óå\83.ÉXú~öy6ÿéîãû÷óï\17\8bÙÖWº\18\ e\16\v««ÂÙÅâ\87è\aªÜ«ù¯'=:ï\ f¡ð<íü\91CÎÊe\9f\yï+U\19<+\9b\92×\15uY\18ïñÊ\93ò´u5¥Z\17G\97¨õºtëÒ¨
+\16¸\92·\95äM¥#ú\8c\13\e\93çdµNI¥\85±ÆW%nyÐT\9aUVyjî\87±±{\84 TÖ\16ûÙª¨¹I\10\869s\a$ $\ 4¾\93\r|XÑ'cS·ñtù("Ú-\8c(äl`\18A\98© \9bZi[í\11~ròúæȬEg±\10\8d\ 5ãʹÜïÐ~\15Ñ<Ó¥&\ 3`¨ÔØ\17¼G¹K\80C
+««Lp\r\96PZÂä²ñpcòõ\r\99%Ãut³\80e,°,\82?°?C\9c\0\9bÔA¨ñ\11]\7f!f\14±Æ®Zt\1a$D\88`yþ$6`\0Ü\95çnÃ'Ä\90\1cÎa\952\9d¯\97uN¿|ü;ìC08`YRnì½ÿ\91\95E \9f·NùÙÁv·¤\99*b%~\17s\ e\13¿\Q\87²ªZÿØízÞ\18¹ru¸OX\82÷EôIS¦\10!\8a
+S\96p\9bÕJâ\8a¾ã3Ý7I\93Pç}ÐÊp\bÎAt,\ 6£\1e\85õ6á\9aå]>Àæ°aÜ\bèÐ\8d~й[\17\88\8bó\1d\80\9dÔü¾\rÑ`aPÉC5\84/ñ:§\8c\ 4=ò Îu\11Ñí\92¼;##"\9f`Þ\9eQ\9csª\92\0I\83\ 2º\ 4Ô\88¨Ö\85\90i*qÚssÛôþ\8aÅwf\1aX"vf\89«*ºÓeÉéèMQç\88S\8eÞ×7×\14kàm8?\82ÆÏ\9c÷Ä\86Æ\8b\9bÍ&ò÷f½ÞF\bñ.b£~ìú">Çm\95\8b²ªÈ\19Ï}\ 1Øû7à|ìÃ?aÔU^e®^e\84j\ 1\96ÏÀM*/\1c\827S)`ó\94ª-3\96¢\ f7×gt\ 3ãRz¬\ 5ªÂG÷Z¯\ 5ý \ 1»DÙ=s®Á\148ÿ\ 2\1c»X\8e\8dóLÑ\11Ð\84óu¤Ó:Ru\88ñ\17ì§\95ã\8ccªDÆfà|Úêoàê;ã\93\90£Ì\14×·of`Ë\1d\89\1c*#Õø\8bIÙMÌÒw\ fw·®{\1e\89\7f4ñÀî7®P $±û\17k\1e\ f¯x¦\106ç\19\\1a%q?J\Ñýo~\9fä][¥øÿðì_WïÍü\830\97(çò\14d7»{M~\93@xû0Þ+º\146Ãï¨0Ié¼[BY(×$tÙMËU\97Ýð\7fª{>\1cD\93É\84ú\17£PÍ\17\83ñ¤!¸\96¿&Ñ´\8f \9dp[\ 3
+ü\19\99\8e\12qK+Tofñ}©c<9ì\98ãýß\18À}_\82ìnù"\945&"E¶.b ±ãöR3g¤t *¢·¨I¡ñxF\e»<ù=Î?£$7É=30)\13¾ö\92}OkVS\ e¸$¡"ÙÝ¡`ÎhGê³z½v¥\1cß[Ù\91RöõsRþhç!b\9dãÖä\r²ù·\1a*K³$\12\18m$b¨\1aówo\91÷¿\ f\94Ð*kq^Ù\15\17É\17\82§C·Ìv\1eÔ\r\1cJ-wÃ7RV\9e·\14©³§èç\98"÷ZªØÕUÐï\9cõ\83²@\87Ýk ]\9aVE£¼Ä̱Ũq¸'ÈD¡ÖÞ\832Y\86³Ò\ f°(9Hë\+\8fw±P¥Ü±o<VµIy£\ 5Ý>ë-®ò\8dÚz\98Wh Å\97\8aæ\83Ëk[iÔÐ3\16\ fîG\0[\a\8b\15\88¿ \97-Ú\bô`Â\1d{¢_ÕªT|\96UG\ 1Oë\84c\7fÊÊ$(\92èÙ´ªjN\88êð}e
+´¸W\16½;þkLà\8bOcÄ\ 1\10\rþ\94o{\1aÁ¬\v\14Ë88
+Wê\17*|\9b\8e_©ðÃË\90ó\rFm#²á¾\ 2fr×Ω+\99'\9ebÕjÏ\17³\12²Ï¡ÃGw\88W^\ 6
+©\9dè¿-^\1dáT[°bèè=\8ao\9e2X±\8aóxY¼\8a°×\ f\0\13ÃC\12\12\ 1
+H>£1\07Ú¥4Àg\f%Ç\844@Ç\b¹u8\8a ü×*Ç\15ù¿!\9cÁ_.!\96+:ù\90ß\7f\1d¼[Ì\ fij¤\85k¿Á\ eÝ[\bp\17WH\b¤VHä\a£èú\9f³]ãÇa\9eòè³aBâ\8cÈaرQI¦\93{È0h&ëoPëç%b\1c^,Ô=º\a\1e¸Ú´\ 6'r³Ì\8bqiôò\f# OYKüµ+ð¬³\9c-Ìãí\11/å"\85óðöÈí±F\a\81Üh\93
+\ 5\ eé\i¸\9dÇ\1eú\ eu}G-Üô\91¶\89K!½a\ 4O\8bN\83d\82¶×ã\1681q9\94>º\v\14ºt\1c=æ?\98¬ 4Ë[¼ú\ 6^\ e\9eäÁrGNèÛÈ\9aeµ¥ÓÛÓ\82\vOær\83¾Ñ\9fÂZÄ¿ß{\943G\81\89Î\ 2Þ\9eÙ\0ú\1d©ÏñmVX\ 3\v;a\1feý\ 6\ 5ô°^ò©ç\8dÔ\9fè~\ 3àÜqxa_ÌK<â2\97£\9bL2\9eå8*\85\85d¤cfcêÇ_\8e\v\ f²\93ôÏ0ºk\vÎ4\11\98LjÄ\91Mí±\18\94\15¨ä\:° 'Ô)\9ddÖ$*\8fèN\81\f×Ú!BH\81\ 10Â\ 1WÖ%\14\ 2_Ç>)MÌ\{t\11s!v"BØC¢5«Ê}\f·íÛ\0*kÎâ@j¨SmÉÙ æ\0e\91\0&Ætü~YiË7<¥^\8fA\95\85Ë\0À\92öU\8b¯b§Ëð\8c\1cÝ\bÁAÏXW\15<\98j\95ã-Ïô0H1\81ëòL$\1dÙ\81lÙ¨2$º\95v\12ÙùB\ 4\8f\ 6ø\90ôõÁu,mÝg°J\18\1d\8dMò:}6ÄJµR2p=íwr\871C¾)mJ\ 3C :×°TÇ5\1aA\9e;å3\ f\87\ 5æÙ\1a¡\83¿\83^D\1fBÅþRDx-Xiäyeà3¾#Fèi+\13\19dØïì%$D¥\1fÁxKyÄìÉn
+^ó/`ò,\ fÚ.x\88\ fx\ 2Æ\93.xÚ4|ýá4\9a^\ eipÉ\1f×:³«»×Wô¡t¿2ÕÜ4S¼|\ 5\91\98èããco:¤óÉ@æ\97>úl$\11×\98ð¡C:gf+i¤¥Yæ/\89\93ñ4|i\98LXÎOó\93\7f\9cü\ fäø:Üendstream
+endobj
+1268 0 obj<</Type/Page/Parent 1099 0 R/Contents 1269 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 752 0 R>>endobj
+1269 0 obj<</Filter/FlateDecode/Length 2169 >>stream
+x\ 1\95XÑrÛ¸\15}÷WÜ\87ÎTéÈ´$Û\92¼í´cg\9dÔ3µãµÔf\1fô\ 2\91 \88\98$\18\0\94¢¿ï¹\0(ÓÜô¡ÙlÆ\16 àÞsÏ9÷BßϦ4Á\7fSZÌèrNiu6I&ø\84ÿ\99ò?/\9fÏæ\93dI×ËIrE\15M¯¯O¿\95´:\9b]^%\97t=_$3<\9d]Ï\93Iü\8d\9fb\1fº\9e.°âj¹ÀÏ3üo$ågwë³\8bOW4\9dÒ:ç³çË\ 53\7fî\84Öéh3zÖÖªmyÜ| \87\9c\8eº¥Bì% JuÕ\94ÒIª¥«tMÎ\88TÒfD¹Ñ\15¹B\92ndê\1déÜÿÚ¨F\92Óþgi\8c6´ùðaýíì|BçÓKĽÎF¼\7f*j²²Îü\8b\7fI>Þ>S®J\1cié Ë2á5\17\9fÒ\18ôù\14ø\^R·Ãfv=¡ðJ\97W|ã|6\at8ä¹\94Â"\94BÕ¯8Íȼ-Ë#me®\ 1\8apN¤x´C\8e\99NÛJÖ\8eÃFT²\12ªL裮ʤ¡FXÇ/r²F\96r/jÇG÷\12j\84q\96T\1dóÞêìØáQIkÅN&´Ær+ª Þ\9f7,\95Ū\1d°Â¹T´; ÜV[\1c ,\e©\ 1ü\18Á\rÑC\1cG\12e\89\92ÈÌ\97¨ñ§\ 1UC¶Ú&©®s\ 4Ã\ 1+\133¥L\19\99:m\8eÿø9²\1dl=dç\1dø³«äf¾ óË\9bdÎÐþS\1f\10\17=ÐN:Ä\1a
+ÿ.«xHW\e@Õí¿Ö\81Z>ÚZT\8ci¥÷ÈÄ3Jü\ 4£qÄ\88\v\0\ 4%5%\93\90Yt\88e\ 3\82>\96\9a\94óÔéÓí3#ì+ö^mfG#*\9ck~¹¸ðµH|}\12mvïßö\ 2å·Ç\94\96*}%\b!Ä/Á+ë¨R\9eé"й>½\15 ¾\8e8\8ehÕ6\8d6\9e=o\82\1c\81t^\ 6ÿk]\8fh+O °P8 ö\ eòpV\87ø(¡/ ®4\85h,\84&ßgäÝ&ä/ÍàY\97m¯hQK\99®ÿì¨Ñ\9cq µí¤ÎøA»¯^(\1a*ëÊ:\ euRàë·\16ïø'9\9c\ 1ñG¹\88-êïã{³\b\91e@ÖÂiÚºä\1f\!p´Ñ)ÿ\92CAX\ f\8e[\r>\1cÄ1I\92à3=Ï\80\13Néf\16ì`3\ 3\83\ 3F74\85ÿåàä2\99ÞàLpsɼ\9eÎ\92eB¿jàZ³þ\9dÑ%Á.諪3}°tóãâñþ=гY2\9bL±×\r\fÊ»\e\v=×e©\ f\f\86\85ê\14ø\ 2Q:lk©jÓ¢3\amÔNÕ¢¤_¿<Þ><%î\87\v.Ø\18¹Wºµ0,U§e\9b!Û\83r\ 5y\ 2x\86÷XñØÛ²\ 23\8cÂ\96ÊÒ\16\ 6\981Y\ f\f\9e×JÏ£ôkȤ\939èÙÈ\94\97Þg\8ac\1eÓ¿-§àÏ|\9f5\94°=Ò\8bJ\va2~Ô×Û
+\1f62Èð\ 4\ f\8a\11à¹\85ux\80\99õ\82\ eÚ¼î\8cn\e\82\94Hþ\10©CÒ'©³}ï¼\99ISYÆ\r\8d\88×ÐÖ "x\18\9c5S9H%kø\ 2\12÷d\11\1cW\ f¥\f\145jÛ:±å>Óâ\8cÚ©Tøòd\ 2\1fs¿Àja\ 6\ e¬0\8f9w\b\8exì¹\80\82¶\88´Ô¨\1c\89ÔóÑ\ex\f,¡ÛÒêñ\1f\ e\ fñA$a *_Àý¹\rB\12;\83¦\82ó°Qk¥A/ñ¦z$Ûú×CïêÅ\8c\ 4vL'ì×á\89\88Pj¬ÞK38}3zZÇ'Þl4rG¯8Z'\ 1ê\89&o/Ù`T\0RÙ1÷äLK\0ã\88\9bª\v\8c õÓgªõaó¡ããÉã¡\80Õã\1dÛ û3\ 2\ 3V\98\10Ð\92¸ÓÅú\17Ø\96Ûí\ f°Î\85*øºIÄ\8f\86\16BôÙÄfÖ-´\85nKp\aÈ4ÃN|"N\ f+\96\9fª¡ch\ 3?'ô4 \10åmíU*Jå|/\r!r|à@ÇPT\ 5\7f³À\9ar\01¿\89ÇȦD]PJ°ãîåË×ÕÃÓgÖuB\ f\8ebä(xQîq jÇdÏ\íÐÚ\11\83q\ 5×\13j\ 4f±´¡(C´\1f¬mQ\9c®)àu\ f\ 2\10/åyXÙi¦Ò\99,½Ð \86´µl\ f\88\93«Ü\19U\12\8b\e\19À\95gî\ f²õÛ\82\19ÝÆ1ÀÔ¨Æ1a\0\ 6ó\98\r\9b§:86\ôqu2Rþµ\87+¿ß{zó{´Ù\9ez\ 3\970\1c\160\1dè\12ý\ 40r¦9Æ7ï\fïÒ\88\ 1w\94ü
+±3Ûz´dùv\94:([ Ê\13Ô
+\8dÊh\91¥Ìv#¿\ 3`\88\95£\16]1<3\83ùäÊà5]óà;\0ÊÈ\ 6ÕÄl¦$é\9bÞ\ 6tö \1a<\ag*<Â\88i\ 1\a\83ÆBa»f\15 ËÂ`keä\1d\9a¿È*\85\8f0\88c\9aÃ,e\a'²)\80B2ó\8cCaѯy¶ç©\1dæG^]Öµ\8dÊ0í#ãÔH\1c×Ã\ 2Þ\10\90õ%ì;#X\v\ eè3\80ï\ eR\ ey\11Ü\a\fP F^d\8cI\95m\1dæ\a\81í%°8\95=\1a\12D\96!&§|êXRYYî\ 1\fì\81çj\95ª\ 6º\r] +\18ã®\86\99g\18$\91<\80Áê\ 23êÐ\ 3,}o\15Rí\9a\ 5\9a-ßb\18\95´Ô8\96»í^ãôèüÑ\ 6\86\8a\vm\11¡¢_ä\0\ fýÀú1\87ݼ\12¯~65Ñþ,#®rßÓ0\8e\a¥ì\95ð|\b%\r¨ý5,í\88nZðsPÛp ¿¿'\1d\98Ð\1eà°c\94}'HV\14F\96º\ 4\89ù5\9c\8c\99"¶HÔ'\93öÕi4]¼\a¾\18\9eèêv\98è]¸,\95\ 2þ\18\eq<\87ï\18j×\ 2ëà®\80½õ\16ʵwìd¨³+ V\10¯Ô\9a\aC´\ f_\95\93\vøq*Â4È\14\93+\e6X\10\10û\85\9fãÎüv\8f\80\9ab\7f9)\95ÇÅ\18ßÃsOÀÝ0\19¯¨¶Ý\ 2¦\18¦ª¡\ 2Á-á_¾\7fF±\a\82!\8fA\¸²ú{" å5w\ f_Väo1a\82ûÛ4ý;·ÉþãR\1c¥ F\11\ 3N\v\r¶\ 5G\bÞ\ 1\ 25àîp
+\ 6\92¸µI\b\a°\ 6ç;Í\91ý#|\ 41»hÅ¡q\ 2\r\888x<;%·@\1e¢6ø³º\7fùÏý\8b/9®×Ô9å4ñc2>9Ý÷ÖoXãT?ËÖг÷Kß²\ 3\81Ç\*8q\8d2\84yÁû-2µ\12~ó;\ 3\rºýd\8baÞ\ fÏ\1fÿ\14\8c\86/\0Þ\18\82w;¤\8f}NAwß\aÌBÐ\17\9f\96ñ®5½Â·\1fËK\9a/\96É|~ÍÓýêöñî\96\9e\8dþ\86Ø1å\87K¿'0\17ù|\8a¯UxÉùb\86oEþ\9fÛÀÕâ*YÌ\97øj\aË\16KÞí~}öÛÙ\7f\ 1\90ºÉGendstream
+endobj
+1270 0 obj<</Type/Page/Parent 1099 0 R/Contents 1271 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1271 0 obj<</Filter/FlateDecode/Length 1905 >>stream
+x\ 1\9dXkoÛÊ\11ýî_1uQÔ\ 1lÚzX\8f\ 2EaÇö\81k;\8d\94¦\ 5ôeE.Í\8dI®.\97\8c¢\7fß3³\J¦Ý¦m\828\12\1fó<ç̬\7f;\1aÐ\ 5þ\ eh:¤Ñ\84ââè"º ËÑ\0?dz)~\ eñ¯Ò\94Ê\8dù4\1aõ¯_/\8fÎïÆ4\18Ð2e\e\93Ù\94\96 ÁÎÅ\ 5-ã\93e¦)Î\8d.kª3]Rbµ#E\8fºþúâjõÅéêWûlKxùÑ®>¥mfâ\f_ëÊèïx\18¯Q©
+M6\95Ï\r^ù££\9cßú°üvtAg\83Q4\84×\13\17WfSG|õ\f\11\85Ë£\88ø\12®\9c\r'Ñ\98\9fì\87\15Û²Ôq\roV\9c >\1f\96Ë\14òWeBN«*Î\10Pj+<c\90\ 6®\9a\94LMø\92Ú\ 6_ùR¬JZkd \92Ó^\80x.$æ\9fÕ?tÜÔ:¡õNüúREt\95ÖÚ{9=¸N\89q]¤ie\8bwb}\93ýøçÙ;]&mW¸!¿èú¾LmhI¨ î|×\15âá;¾;â¿mHfÑ#)WÛ÷¹ãÉ\84_÷¥\94Bn*\9b\9a\»\88\16¦\8cµ\18¬´ÛØÒáK×\8c÷Â\12(\95¶&\94¤V¦¤¢\89³\9eÓ¢{\8c w\82\f®%\8e¯¦\9cÿ£Eª£\87/\8b%\92t&Ñ\ 4ÃÁ\0I\8e\89©\0\15[íºR\aT]îK=\9aG\93ÿ\ 6hoâz\ fk]ømÈÀ\87cØÕMU:²MÝÇÙÎ6\ 2C·Ñ±I=´ÞñÄ=\97\8e ¿\18»\eUg\11Ý\ 1áú\87*6¹>¥\15þøÖ¯Vi¥\93Õ*ê¸O¹Þg\a\14äRu\85eê\b/\ 4Ä;âï\86\16Ð\ 3\9d¼©ßäçõ{\97\ 1oR;\95*¢M?¥u?þÜÚ\17Oñ\8fO\8fw÷¿D\9f\9e~õ\14ÜØÜÄ\86ù\ f¼FtÏj\ 4>\aê\9f¶:À´÷ÊðN¢A\91¦>Ñó»9\r G)\84é\92ÎÆc\8f\99Á0\9aE\83\88>Ú25ÏM¥j\ 3\81¼/]]51\7fv\7fb\ 1ÝÚê\85D¥\1cg±\97a´cÈ*,*W03\12\93¦ºÒL°5^Ô\10bE\9fn>J \8a\0þÄn\1dÍ\7fxY\ 5A\99êL¬\83\0\90i\9d©\9a}Aè;)ý¤\9cC( Á|µÛH¬x\94\89É\9a\ e²$°\7fëF`p~\17·Cäl\1aÍx.!þÕp2\15éÞç&7;Áß\a~þpÛ±7±â}c\9dÓÎQ¡âÌ\94\90\81ªq5©8\86R×î\7fòz6DCæû\9c1>*\8d9\0z(Z¨bí«¹5yN*w\16^à\89éµ\8fðUi[ï\97mÎÃa4¼àñ\84ôF~\94a.T¦ÞQa¡ALÍB9\9e ë
+\9dÒU¯åBÁIt1¹lûÎC\8bÿQª·ècÁ\8c\93éV¨\17Ñ4t\8c'\f\14Ö@^6äX¾\81~È.O\83\88$GÊ\90Å\9añÂâJ\89^«\1a\93\18à`\18ôxo\9ckdLo3\r\1d¨\b2Â0ð\ 3Ò¾°·\0)Ý\96M\8atc\ 5¥À{]Ù<Ç\9bÀ¬;¬\0T\8e-öÙ
+<\96-@°ÆÈ\ eròeqûù5\1fN$\19²e¾{mµÝ5¤m\1c¨0*A\ e\\16\1dg¥\89U\ e\14+\aÎ1Ó½ÝÎÕâ¯W\9fo{¾¤a|í 8!\95ÀúÎÀÍÓÃÕýcß\ 2w»ïéöóßߤå±\11\8cs|\b5G\92ß\ 4èô]UÆk\aäcñp-C\90rlUyW\a\ 1"\vF»\18]ÅuÃ6Xó`з\14\1f\ 4Õq\ exÀ> #s\1c-é Q¢\98¯ºîiQp(Ø\86äQßf\ fä^\89ZX\8bR\18 \95[ñ\Y\0\13fK²\eÍ2X>{VÝ|\8cèk\ 6\1dfl\15
+\11\85n!:xcê\9b5n¿B\9cêùlU\ e\10t\fîÕ\89\92\vé\9fz\9a\89?4#ñ\81ËÊ\89R\80W\10_^Æ\10Q\ÃeÐ×\9aÒ\ 6WX¢W\1fÂD`dõ]?[\8bÝ1Ñ\8a#t6¢\7fbb»Ì6y\82&\16ºX39¡¶R8\bµÔ±ÒÏð)w4yìü~°æYp}ÿ´\90-\99¡nD\1c\ e§2\1aÈ\r\901\8fa)ëfP&¿r\8a6ä6fzó£Ráv,\84'Z]õy?7ÆeÝ4Á+½â¶ÃEl=\û\9dB åé\14\8a\ 3%ÙÑÖøeo/\ eü\9a\a\10ÛñÑßÀLë$ õÑnibQ\16~¥S `I:¸·\84b#}¨¢¨ªH
+W¹¤ã\8eE\7f\16\96\1cË\80oµ½\97Yf\ 1iT4øð\\10»h5ë\1es\ 5\17$\10\19@Î:½ý®r\93p\99yka#|ðà\ 1ß\9e\80\9c¬\e%\90ÝóË,¤\94'\8b\0C\ 4Ûû\v\13\ eF¸
+e»\e¬NøÛñ&\fh\1fÒñê\ 3½\94<îe9Vkì\8f>\16©\ 4^éùõ}à¬#\9aÏÿ\10Îaµ)0þ¤¥>\8aP\17\15ø\82ÜZ=\8f\88;uX\ 5Oh\99D\9e]=§Ò Ð\14¿\80\1dw\9ap\8c=µÂ\91\90©\10\ 4ÆiÔÅ\9f\17\ eO\8b\ 1å\8fË\10ÕêDN\98=\7f*çÅm'óî\9d\ 4N©2ÏYý\97Õ\a~\8f©\15 ¸\f«@\87\87CÌí\8f Xí\12Ôj\89´08Åá/Ñ©)\8dà\80G®ß'¸ãî\ 5özÁÊ \14â\b\85kç´ßExíoEDå[µ;À¨\0£c\14
+Õj2HÕi®
\ f]Mö
\9bi»
\9b\8c°
\95úÝDöÓá
\7fÞO
\17º
\16¹
\86\80\7f¶ªà
\9a|a¼
\7fjÏ{
\9cÑùݤ
\1dÚóËh6DMgÑØ»x|ZÞþÎ?
\13~¹pÒ
\19êÎ
\17®Ùll%d<P`P
\ e]Çi
\8eç(>=.Û
\94f·é
\1aNF4ÁÿÓ
\89l[
\8b«
\87ë+
\8eí
\e¸H76nx_
\92Ù)ý
\1eLðË
\90Ù
\88ΦCYLÿ¿
\r}<
\1dÃáÌï¶Ó9[¾]
\1eýíè_
\8a{
\1cendstream
+endobj
+1272 0 obj<</Type/Page/Parent 1099 0 R/Contents 1273 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1273 0 obj<</Filter/FlateDecode/Length 1483 >>stream
+x\ 1¥WkoÛF\10üî_±\r`Ä\ 6$F¢\14=\ 2ôC\9c6\81ÔM\13\ 5m\11\ 5Á\91<\8a\17\93<\85w\fã\7fßÙ;R\94)·)Ú\18\ 1$ò\1e»³3³«ÏgS\9aàoJË\90f\v\8a\8b³I0¡§ËI° ùj\89Ï!þW\92R÷b¶^\ 4O\1fz1]\86\ f¿\98ON\9f_mÎ\9e¼\9cÓtJ\9b\14\97/VKÚ$\84\8b'\13ÚÄ\17W2Õ¸1Q&®\8dQå\8e2Ý\90Õ\14ë2U»\1aï*-
+~±¯tªriF¤,)Cµ\91i\9dóZ#¥Ûö»*×\7f\90(\13§\9b\rŹ\92¥5\97\9bOg\13\1aOgA\88»/T±Ïe\81\17d3i\90\14\16÷\98 ]\17.\829¯ó§µgà\ e\1c+èFÚwFV?I{]¦\1a`}®¥ÁI\9a\ fâê\8b¬øÛNºã9Èê±9ÄN¹\8e\85Uº\fègÝH,\1eñÆA\84\bf¯K\84\96hi¨Ô\962ñ\85\81Ð\ 5\ 1.\84aä^TÂÊÓ\83)U2OF¤ËüÎÅÔF\90é\ 2ñe¢\92\ 1m2ÀWHQ\1a¬\10vp»Ï»C\9b°\ 3i\1a[©ØÊ\84s\8b$\97C\95'Ç'ª\92±ÕÕÝ\ 3Pöå8\82òíó_^é\9d.éÍë\17\1d\96#j2\15gL\0+\14B,Dyç³âÒ\97q^'|ÿ\11\b.eFf\90 \97¤\ 3\9ctz\1co\97Þ \18dêý^WÖ\ 1Ýbº%*MeÅ´á\12\f¨æ\12~òr}àù8\y\16MÃ`\15\84Á4à-\89n\f\ 1\89\17-¹\1d\158èc\89\8c;\ 2nÀì6\18ìí\ 1d\14\.ïw¹\8eDþ\ 1\88ÆL*ÎÑ\14QÀÚÁ3ÏÀTç¹n\18±í\ 5G.¿
+\16Àöò\99¿xBk/Íq8÷!ç®${a3ú\9e¶ø×ÁàØÝ\7fe2\1d¾ñòíöüÝv[@Ðí\ e~ø@z¬®\rj\93ÈTÔ¹\aÔ2'õÞ¥\81O|íù\8d?°=lD¥($XÍï\8c("áå¶Ý2ÅùÝ!\18®ªtënÎù\f\80Q}QñPg¸'® ~ÐZÔV\17(G,rÜ\10yé¼gÑ\18\86×í\ eè:¥;];IÔά@B\ eÄ\80ð\19_&]\aØÈ-ÿXÔÆ~\1cp³\10·Òu\9a$³\97±\ 2\8f\93®¶GE\88*ÐF\8a(\97\8efa\18\84\93)\8dÃe°\9a9G{\9fßÆ9\85\vQïÖ\v\1aS\ 3;dÃ`WÕð\18Î\8fc \ 5Ô\85\a\a2vö\16\8b\12BSNrX\f\ 6\95-§¼µ\r¢? Ã\1cà\90#i\e)KÈm\aÍzüï/b\10èæ×\r']y×\8f$û£KÙÅÇöNÌ\99à\83gM§§ñ!çu\97s««°×\15¬ÿ¿è
+ÛZ\10|µ\\9c\bË\15ç\91/\ 3óà\11"«@2+«\80Þºªg\82ݹAòÈ<U_\91\8aáF ,=*åÐWqæ\13\7f\10ïituk\b\a42ÏG®i)\8bf õ\bN\88Æ\ 55x\95ÿM\fmE:³¸º\ 3\96¬ræ_\1fu\1f´ÏîÔÍ÷µµ¼Ï;ZÇÜ\8e\86,-ô/×=Nì½ë¨Wµ¥F(û\1dË\8eù\80Ä\88\eÆã?s\vç\1cäsêLÿàgÐ[Õ\9b\1a3ä\e¾åBõ¾uþÊ\eHÐeåYÕO#°Zö"@Vr¤\9dw¢hT\9eSR[\859\ 3®\0¤\18]Uu\84a\90 ý:: Ã\ eì\ eº\ f\18±Èd ¢CXpf\9bÕÜénÛ
+\16\94©$\91åörØJo0\r´½]\80/\11bz\f®1À\8e]\8fÉE-r0\919\86%2\16xË¡\89nØáÈ]ÁQ\14\v¾\15° \14\r\8d¶OÅØ:M\a!ëÔwQ\1e\86Ú\86:È\14\ 4\13\8eÍ.HÜË3Æa2âÙÌ\e\1e÷X7\amX.ÊOu¹Ö\10E®`\8d@qpwo\91®9¸Ú:Ç=\16È7\eñÌ\19ƽ1ñß¹Æ\9f0~fr×\92;N¹\10"\8dfé\15t2~r7\ 1å\9dÈÜ:Æã8f\a\97\7f0H\99½ðÈwà«/û\ eþ?uÀ\13ñ$X1ÿ\8fzM/\9c.?\96\10\87Õ\8f(O±m¶v\rhî\eеï7<©Æ\99\8coa\84\r\97µc&µÔtó,l\r³\fÚPy\1f\ 5¸\ 6;\ 3,QD c[ÉU;RM§\8b \9cÏi±X\ 6á\9a\7fD\`z¼zN¯+ý \8a~ÐqÍSýa¦\1aO±t²\9aÑx\19â·FrѶ\8cû]\82®K̶µ\9b\9fÌ3zÛ\16ªÞÓ\9böwÇ;X ßâ~|0\12óå<X.Vø5\83CW\13~ôãæì·³¿\0L\fR\7fendstream
+endobj
+1274 0 obj<</Type/Page/Parent 1099 0 R/Contents 1275 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1275 0 obj<</Filter/FlateDecode/Length 1925 >>stream
+x\ 1\9dXïoÛF\12ýî¿b /r\0\89±\1cGv\ 2\14\aÇIÑ ±ã»(×+ª X\91+ic\92Ëî.#\vè\1f\7fof¹\94ʤÅá\10\ 4ùArgæÍ\9b7oýûÉ\8cÎðkF\97çôlNyuòjqòôÇ\174\9bÑb\8d'ó«KZ\14t\96\9d\9d\9dÑ"?\9d\9dgWÙyv\91Ñ/¦.ìÎÓ\8bÿн³kSjú CÛ<Y|Á \17ý Óóyv\813N\7fÙê\9a\14µ^;Z\eç\ 3\95vãÉÔdë£Ó&\14¶\1a/à<~5{}½ ã)wZ\ 5]LHyR\ e/زÐÎÓèCP.ЮÛÑ\84c\9fÑtö,;ç\88£×Ú?\ 4Û\8c&4B\8e\e§*?"U\174ºÓakm1Êh±Õ^Sa\9cÎ\83uFãx¼\80\1c\8c£ÜÖA×ÁÓÎ\94%4UÚmt\81\7f\86¤YÚ\\95\83¨_\91\96±µ'\8fóð2
+Ì_.\97»\88×rÙD´ürÉõÕªÒ\f\80oW^ÿÞ"\1aÃbj\ f\1cÔ\83©7\12§²\80\v\19òãµ³\15i\95o3úÕ¶\83à\92h\116XÆO¾þmSÚ\95*?\91m\82d6j\1c\8av_5å
+ïü@{í\19$¿µÀò{\ f#jò¶×µ7Áàã\1f\ 6Ák;\92v:t\86ãWÊÔ\ 1¿\11¥1A\95Tê\10¸iø/ \95·À\16ÿPõ\9eìZríÐIýͺ\10\89DèÖ\81\16B\12î\11b mh\11S\87Q\1d{®b\9d®sí3z»¦½mÑ7\8f¾YÒõÚº\\83\8d^\a\8e|ôò\ 48KS\84\ 2\83
+{FJè\b±Ën¯ïÀK°¦Ð(\ 4ßU´s&àü\1cÑ=G\f[p\98?\92\820jýX¼¯%ë~\9c\9e\ 3¶|kj=¡\r¾³t\83\ 2\9d-é^Õº¤?ð§÷;ë\8aHT¯K\10W\8eø\88ÂÓ,"¨Ze\98H~:(\82Arà\1a(_ %_q* pVUL·#(2\9cÆù¿ÿyB«6PaésmÃg\86Úî$fn«¦EO9Q§WÖ\ 6)p
+ýHS8Ë\88\13Àÿüÿ5c\Qò\ 3ª¿)\8d\f\81utkrg½]\aê\1e{ú\83#M\8f$\0\ 5\1cX\10Ñ ñ;»á\91CÊw\vzm\99¦c\11\82z\ 2jø\16ò\12¶*\82zïL¥Ü\9eð\r>A\13Ç\87\f\ 6¸~\9b\ fN= \18e\ 5'\ 4\83\91ÿ\9f L¬?\8f\10NÏ\9fÓô9\14\98ÅícÍSv ÍäÐzÖGhs]ZU Å"\18Üô?ÕÒ\ fÅVa\94¿y\f\9d\1d\94wT8ÝY°¦ìq\1f\8bhG"'y\93\81\80\94±¶åÎ4¡\17Ñaj\98L\97NüÀªäÒÔ'
+uãû\97\99Ò8á mún:IÂ\87 \88\84§\99£é hE+\13HmXa"! 7¹F5\7f\1a\19Ù\7f\90l\13uFù\a¬\8aTEê"Ô:bPcxÖX\a\a\96}K\1d&\1c\94qe\1fe\v\89ÂýÆò3¡¦\13\80 \9aÌÜý\ 4 õA«\82súÒúá¼\ f>û\ 4ªï\eͺË]÷ªZ±\ e2î\90Íx$\89\ 2.O1e¢ÍxÑ¥G\ fH_\86G?\1a\1f¢2¬´r8p\0\1eôä¨FN¾ç\80jqd\1dLÎKý\b_\8cG\97\ 1\8fKÏ¥!e\fâ\ 2k\99Òøþ tG<©
+»µi°Ø°jÂòÉD\16D,\90cpZ¼.:P\87M{\8fn\vN\92þ\16îc¥ác|+Ò¾nËrO_Ui\8aèN\18ÑÄÅ\17½\94Dz\ro\9dJ\16\91$>^àåþX\bë·5°ÙÀ\04¾Ôc\19)pËË\19\1d×ÒNói\8cSA\aåûG·\ah\8c=?þË
+\8fòΣÊBÝá\87Ú\ 6ùw\86§\88\8ej"\19`\87·eÁ¾H`× §ú\91\97H\ 4¬7O`%`\19\14\97\f×\9e|£s³6¨´cä(6¯Qa;\12\9d\1e°T`\0[Í\9a\97m§ÓÇ^ïï,áý÷}`ò\e$\1a#-î\1cç\10.4\r\96)ÙϤ*9v6*\101\ 1#x» ë\bcô\ 6m#\14¡\1dÛ`~(\9dG©\1ec»¦åi×ON \1e\a(R1Ä\f_Uزª\98Ú\1aAVâ5jz9]>\11/\18ivP\16\99\90.P¬\ 6\1e¤u8\ 6\ e¼óÏ\98p±bSöb,ã\1d\9e1õAÓ¤ZñÀRAòj}§\8fÆ´gLÿ0Ò Ítï¸÷X\85\S\ fÚ÷<u\ 2òÈ\12×z§!É©\ e\1eåC!\a\93Ì\ eoØ·Q¥¥Õ\f³\14\93\ ez*6Í\1fáÜ5óX(»}\17=%\16á\ 66R;gámûm»{ñ|\0_gì\98\1d\91â\9c4ÿ\85\9cAYxÓÀ W\r¤
+Ãt\0:î(~\9b\89ãtea.;ô3z¥<t\14BÔï\1f®l\10\9be¼ËÐiVC°5\12\88\90hÚ\7f\13\ 2\8dó\a ó±6\8fñ\1eÖhW\19\1f/5\9c\ 4ô\1f.~k\1arf³E²\1dB]F\83È\87IOT\98¤\ f\8e!ý»&á`\bLÕÝ\ 2Ù¥Êðtñ@[nD®j@Ã\86>M\17d="ש\16^Ay\ 25¨\82%¶Òð±)p2\erO\15¿.ApXMµ~쯫Òû}¿É\ 2\ 6 \11ãØ\80Ìð^h)v÷\86õl\ 4á\96|â\8d\97ßH\ 2\1e_\ 1\8eÖ÷ѧ\18<®e°À\ f{¿0
+\1fÀ\11\88M×\1e÷¬è:Ø\7fã¾^\9c\1e\99ïT\9fk£þ8\8díbB¦\1f\85K|;\8eJUZû\80Ü_v}Löå§\9fßüúùÝû\9bëw\9fo¯o~z{÷f¹ìVÆryÓ:\\9b¿ãÝw¹¼\8f\97Üwp\b|\fç\93ÎéÌìÓ\1f¯º\9f\11Ì.㳫g4\9fϳ9'ýáúöÕ5ÛÙ/|µymó¶ÂÙ\8aï®ñ°ù¥|0½<\8fEÆ\1fJðMim6\937é-L\91ks¹ñ¾ä\9fM\ 4!NCÿên:\1fÙ\90t\89\8aÙ½¸¼È.çW\11¹«\19Çz³8ùçÉ\7f\ 1\12º³íendstream
+endobj
+1276 0 obj<</Type/Page/Parent 1099 0 R/Contents 1277 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1277 0 obj<</Filter/FlateDecode/Length 2012 >>stream
+x\ 1\8dX]oÛF\10|÷¯8\b(ê\0\12-ɶ>Ü'§nZ\ 3\8dáÖ*\8c"
+\82\13y\12/"yÌÝQ\8aþ}g÷H\89¢óÐ\ 4N\1c\85¼Ý\9d\99\9dÝó·\8b\91\18â÷HLÇâz"âüb\18\rÅõ|\8e?ofSü9Æ\97Ub}ñ~qqõáF\8cFb±¦g'³©X$\ 2Ï\ f\87b\11_\1eL%ö:ËÄZ\17\89\90\85P\85·\87¾X\e+\94\8cSQ9eû¬ų5k\9d©géÓH<\19¯\84O\95\88Máñ\8a£'|ª\9dت\83X^fz«²\83ðF¬Ô»Å×\8bÁP\fF×Ñ\18±/ã»år\8fhfï\96Ë2\9c\8aï(P!sµ|ק\93\v\91¨LÕQèÐV|Î\8e¢[õÒV%\9ceD\81\10g<\89n(Χ߾kÏIZµÑ\ ee \95hoìg~òêä\86¥\95ÛëýßO\8fO¿ÓI'Ø.Å\0e\0\11\15rÒÅæ\aµã?\91J\8có\ f"C8d¥\v~®\9dùò\92Q\ 2P]\88ZYü\ f\84¤ÛÒÙ¹Ð\84;àIåN\81¿\83Ðyi¬\97\85\a¥\99rÂ!#äb8\17mQ\82ÛzS
+\10¬\8b\1a²\86\1a\9c\84'\9c\97Ö\8b\\15UÔ&á\9cêv¹ç\ 5ærK\bI±\92ñ¶*)CÊ\8b\ 5\ 2IRR\9d°\12È\16J%*Y¾ë²¸ Q±B¹Bb]×À\99\ e´*7»\86\8eÌÄ2\83ö¬\92ÉÀ\14\90_ª\93\ 4Br\a°\91säå» \95\87ûEÍ\8e¶\9ddjE\9eØì\v\89\f\14z\ 4\7fSü\10¨W\ 3Ùë\8b^¡|jLBß\9eÀë¡ìDôpÞÆÊÜõ Ú,QÖq\85\ 3tät\1e\1aâ:\12\94\ 3>\19ÌÇA»NI\8bæ£.¤\88Ô\e?;\11=¿þ)JéÜÞØd\10£=©vB´\91ZK9g\ 5 \91º\9d´?Æ\87\ 1$\977§à\8d
+2³\ 1¸¬+ Ï\8d*æ·"Î4:ýüíÛ·oÇ©\8aY\9b\1doP¢A¶\84\85\80'§\94è!\16\94I\9fôH\99±Õ+\88U®Ì\8e\8d\80\10lù\0á\10\11w¦Ë\1aÿÏÇû§\80F\e·¾ø\81 \eã8VÓÔ> \ 5\rÆ·bp=\8f&\ 4Ñ#\ 4\föUæ _©3×\aÜ1d\86\7f;\99¯$¨IÔªÚ@\19øR;<\19¬Ïï\15ôwÍB\18\r!$\94sE\9dg«\ 2\rR¢A\14,ÊÊ\98Ñ!\9dtÔè*È\80t\17\97I\95s×Bl¹)"õ]\85\ 33c¶¬\14ê2e-\1d¯È\ 3\82ÒZ\8e\88BÈï\83Uır\9c&Lÿi!\80ì\8e\9c\1er+\0¢u\1e\1fy\81þµF椳\9a>wª\ 2\990\7fpÿàtÇs\18×\96£}\94[¸ÓYÁ\18*\181ßéì0Jèû\12Rn£â(êNÃ\19 D¨æ\18 \94N\12Ú§\92]¾\ 3\¢á\12V\15¨R\90¿ðëì\1e\18\19;\99AÊ\81¼\0?'|õa~\1a ãYhÅÑ8\9aEã\bJ\7f{\ 1I¼\1a»E§{\8dÂo¢!Å>Í\8b\16â¯\84¦äþA\ 5`\8e»Õàó\1f\9fÈ$4p£ä£êá\84$;\8c\96H,`\v5#\9dÊÉ\9e8±\18Ì®à¬f/\©b½Ö\80ѧÖT\9b\94må¬ûJ õaàZ\86b<\8eÆC\18Òx\1aÍ®yl\7fʶq&FCYmæSLD\ràè@¨Ä7\16Ì\9d\8d¡¿Ä/î\8cA\90Õr\99\9a\\9dÆ}`/Ñ.F\9fÓtò\81D\14È\rÖ©h¥b \10\0\18\8d\94\r
+@\1f¡xVp.uáñ\15¼\19CªÀp ^\90\añý\89C\7f\16.e\19¤\1a\r\95\18¨âKaü\17¸\9aq¼¢´Ô\8aÕ¤ \8eV*40\11@½\8d Ñ©\83p>wÒÛb\7fúó¸Øô¡OT\18\14\80ò(#:\8e6\9dN\955µbmMþ6ó°´\fÞò\ 2!à|\1cMíUS\18ðÄgĽÜÁ³ä
+\9dE¶H86ô\/_w\8d\ f'VïT\8fÄ\85w]jª,!\ 5\91\11 Ú^z×ëä\8c\ 3y¶£,l\16ôvÝ\98Çw\11\8f\17!\10óµ*\ 23Ç^,Ô¾ M,õN\154\ 6Ò,s¨2¬¦Ç\99\88.Dç5=\10\0ør\Á¾ t\ fHh8\86fÁó©Êà \187uÝ´ã\90T\88\16\98\88<\8dÌN\99\84næLÓ}\ 1@\89yüð\ 2\vÃ\ 2ìpJ\bCä\12é4\94!\19hf\ 3)a\bUpTÖËÞj¬µ¥²¹vô\1eA\e¸gÖ×U\96uÂ×ù\ 2\1d\1e\9c4EHGa\9f89Ûy:XuÞ¶ì\9a[§î6lïä&\94B½\9cÑ \9dØGD¹3U\12øM%Rh§\rU岨0'\ fÌPëîÀlKÈ\89V(\9að¥\8f\18N\8cQP¡\\95C5«*ÀÓ O,zEÛ4¹bpzA\105$\ 6P\18](ueq«P,ö¯\ 48&'î\0 \8f¤¿\9fßöERaÚ\ 4g@Â\ 5d\8bF\a]p\ 5`zè\84\97\1e\9bcÉêïPt\16ÿ\8es\84\14hïÇÈ!<\19\ 1f,6XÉ\vHí\97\86çó\8fCk·¦Æc\98¦\ríG
+ú4ÿB\1eNät\1f©WJ\82¦À\8e\16\89G\7f| w_\96\99®gÁ\83ô2,¤\86z\15+Ìi©íÔÜ{\b7\ 4Úf\9fN\8bí\vß
+>âVP/¶p\8f°Ø\9e\r#àíT¶&Ìë\9b\að\r}Ø\1aeM{7k\17î\93¼ËʲÄæËk ùN¸ºà\0\92;Ë»\85\ 5µ\ 1\82\89²²%<\9c"Æ\95ÅÈ÷Ð`Ulá}E\13§±\91\7f±þÐX$\17¤3_ÂÕàWÜbÉij,TÆÂ6å\ 1Y\87M¿á\ 1\ fÑÐæÁVïKõ\1a\vZþèxË\1drë\0{t\11Y²B!\12,Zd\10ز(\9bØ }Ül\8e\13¼®ü\87Y\92¢±ÍáÆÄ»@\93\ 2ß\ 6Ȭ:ÁÏ\ e(\85¥®µ] ¸ú_´GûÊÂ\171S\82W¢K¸xôL"ù\8e\vE3ºW\1ffõÒ4\9aàG\ f³kü\8cá&\9aLniu~¹ÿøþ\9e®î_©®\a\13£×1És(¿AóÊ`:æÛH½l \10²Ö\9bÊ\ 6wz,p{¯xv¸;ñR/\1c\0íïz5ý\87\ 64¢\1c/\977Ó\9bh:\99á\87$Hb6¦X¿-.þºø\ fd\8e¨mendstream
+endobj
+1278 0 obj<</Type/Page/Parent 1099 0 R/Contents 1279 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1279 0 obj<</Filter/FlateDecode/Length 1736 >>stream
+x\ 1}WïoÛ6\10ý\9e¿â``[\vÄ\8cíøg\80~H\9b\16\b°8Yã¡\18æ! %:æ,\91ªHÅñ\7f¿w¤äjZ׶\ 6\\9bâݽ÷îÝùëÙ\90\ 6ø;¤Ù\88.§\94äg\ 31 É`(f4\9eÏð~\84W©h\e¾\18\8f\ 6bò½/\86\83©¸ì~ñ~uvñiLÃ!¶4\9d\89ÅhDÓùDL¦sZ¥\84H\83\ 1\927\7ffû$£á@VÏ\8b\19õI\93±^'\8aüNzZ®è\8b-÷ÎK¯!¯²ÌQ^\7f©=iG©=\98ÌÊT\9bg\92T\94v«3¤\Ú\9cäÛÕßg\ 3ê\ f/Å\bA߸Ì\1e(Óf/è°S~§JDÁ\15ø'\13_É,;â\ 3E\89tê\9clÙ:¥\0\ 3\8e9\8bà\895[ý\\951'í\\85ÓÒÑQy\ eØoE¬ÌÞ ¿óXM.÷ÊukzB
+fÿ\14OptN0¤D!_kBdI¹ô\9e3¶´Q\9dÂJålö¢Ò¿D\93Àh*Æ\r\84wt\82Wnù\ e'ó\8d¤T?+çQN\89ç\vkRe\12®\e\ 1+\87S[[\99\14\95\99\14/\eà
+¥\97¹JÏ;\19\ 4¶jð\1d\04x\0y\123£Ò\9a\8e:.î~Áõ\95É\94sÔs*©Jí\8fô.\84í\85\80=äR\1e\8b\0h\vÏB:w°eêpø¨\\8fÖo\9cb9\80q¦ýãòÃç?\1eV·÷Ká_ýú-\93Ø\ e\10C×!\9aË(~Ú©è\1déBÈ4\ 56N\90Ý\8a£Êåêt\ 3\ 4\ 1\94RA\1fu\80Æn9\r§È\16¬UG\a\9de\ 4MAs\9c\1f¤\8cÌ\e)w\82\81T\99$\f\a\1f\8dô409Vö¯×K\bÀÈg\0WC\ 3X\9b
+Ü9¢ù\9d|x\9eÙk\84Ðh_\e\10ÿ¢Lè#cË<¨½T_+]â¦Í±\93 Ø/)É\94,û^½úo¡¢ÆÀIGb\93¦\83s\vh\12\9bç\bæ`\1f\89Ò\90&É\r§\a\14\1a\95\\85\¹×\80nxß4ïS\94º{:ɹ©\82Ñ D?å\95óO¬°\ 4\85àúå\8a«\167×+p~\1e²ç\961©ô¶<6AÏ\9bsw×ËXÈŧEmRýÚ¥ú£\85\98_\ 6Ã\18\8eÄ\\8cÄTÐ\17m`4¡y\1f\83|\19ßo\ 6×\82c\ 5[ \1dË-ÃÔ\81[çmAÐ\ f¹B%z{\f^e\90\95ô;T\ e£ã/3½Gu\80\9d«Ìl\12ý\ 5Øpeî\97¦\ 6¨1ÄÀIt+\1eìh)±U\966\91âí|a\ 3. C:Ì9\fUþKkÁó$ò\8aÍþx÷¾n\8d`o\99e\87e\85"_|× \8b\1c¹«]U\14¶\ 4ñßQi ó\eà\fÚ<ÚT\rôLÐãN\96\fÏC4r\a\8aýA)C_\16\93à\f\9d\910\16\83HŤ¦q8\98`¶Lq÷¬¡ñÁz\16~P<D\bIpõ%i\13¼/ñìªÄ\ 1ÀÏ\rëþÃîp*\ 6Ó ;ê-\0`\87>M\ etùÆ>WèÁ\r\ 4¾\93/\8aG\18¥*S\1cG{\ 1\97ú¬\13\14\96\86ò
+µ~Ë\ 1úßI\15Ìâɬ2\ f <\83¢ \11\8c\9e5þü´ÄëwÁ]Ô\1e\8bÑi0\1dò\ 2\ 6`))\15ê\ 1¹)z;aýw¸êñeÁeú\91¶õ\9a5fd®ÄÃÍc\8fô¶-WÔÊ\82<e\ 3\11üà\86^ð¢ðÌrÕ ü;¢Ð]ô±®\8c£a\1a\ 5̸eb§\0:î\bõ*ó"\ 3n?
+¼^×\1aï\ 5\84je´¦Çÿàô\83ZNW\ 6Xà²;ðÈÃ9\98\1c7,¯\fȶ\82{c\18Ôå6Öx\ea\ 4|\86\ eÒ\ 4r\1ct\10'\16\bPôèeééN\99\8a.èF¹=[\ 5\9b9\v>´÷÷qéµøx×AùÿÙ=ÕÓ£\7f/^AÍ;\10«Ñºi)\ f\e\99ìÝ\15Ö±(&ø7¹\1d\1a;á\19cy\133Ê\võªº\9b@\84\88w\15¨\11na©¬L\\0XFÉÕz}ÐÆx\bðèp\bN{\92©\88]uú?#m7/ÚV\ e8ca8\ 1®^5V\17v°Ní0êŤo\rÎï¬óÿ\99Vëá¤f%tj¨Û)OU\11\17¡ÄgÇ\16ì[ø>L°\90ØöâZ\14F\fïD\89Ã# ÐaAE\85\81ÖZ\89\9däN\85\ 5¡L°\96\8eçm£ª·µÓ(ÅuÐ
+ë%,\9eaÕ\8c\90Æ\85/
+¥½\ 1cZ´Fì9»þFn¢HSÛI'ÈÌë\]°%b, É0]t4±°þ¡¢°\86\9f\86+\181*¬oEí£±êÖnCaÉäXíU\98¡Ùê\12¬qÄxoÜà\13[èØô|\86\a_Ö^\95N\93ë\ezQ&H\ 5\90c%õ¥äk-\1dÐ2Ý\1aã8öô\94Zå°f\97Ò¸-\è\ 2\94\87²kª°µò"Ìü·6\83\19ÿ|é7L]N\9a\91\82\81µ\10ts\7fw}»|úp¿\}¾ÿ\95WNºj¯
+76\97Hñ\ 3§h³:3ü\8c
+«ùÏôÈk8\7fzñ©\99^£\91\18\r\86ÐÄB\fâ\ eò`\9dÓÌà}3¹îêa\15\9f\9c7so<\16ó9ÿÈ\9a\8aé"¬/\8f×wï¯y\92þ\8d²èÆ&\15ïdaàgûCl<\83ù%õg#ü\16KßÔS\98ómýÀ¹5Î\97U\12\96Ú+zTÞó|F¿|¶2ç·ÁÔ\11%t\ 1_<\9e\8dÅ\f¿óÂ¥óKþèãêì·³\7f\0üÀ¯Éendstream
+endobj
+1280 0 obj<</Type/Page/Parent 1099 0 R/Contents 1281 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F6 9 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
+1281 0 obj<</Filter/FlateDecode/Length 1775 >>stream
+x\ 1\8dW]OÜH\10|çW´"EÙH¬a\17² \1eN\82@î¸; Ç\1a¡\93öeÖ\1eã ¶Ç\99\19³ñýú«\9eñ\1ac8]Ä\vë\8féîêªêö÷\9d\19íãoFGs:XPRî\9cÅ;{_\ ei6£8£ù<\9aïÏhqü)ú´8¦8¥ýh\7f\7f\9fâd\12çÊ\92¨kY¥ê\am\84%mÔ\83ªDQ´$\1a\97k#SZ·ô»Î+ú\8dbijë\8c \9d\91Ë%-E¹\16¸*J\12UJ8LUIѤx)\97FR¦ÍÇøÛÎt\9f¦³\83h\8eØ\93Z['\8drmÄwö¾,º,§]\9aÓùQt|à\1f½¾\89/è$<¶-fB1ââ\84\92Þ\9dëR¨\8a>ëÊ\19]\14Ò¼óY k+ÉÈB8äá4)\87_\994ü¿®$ÙZ&*S \95\12Ϧ\\f×*+§\12á\94®8ä e\97\vG\89¨¨©Ri\18\99\8a\96Wg\94úø\11½ÊÃRm\94öñîU\95ê\8d¥ë\98\96Ò<!\89\83hF\e\ 6ÇêÂcû$ðpcGA\13]Ö¢R\12ý\ 1²kaQ\8b®øà'ÔEò\87\93\95E®\96«â^üyzMW¢\12\ f\881G\8cÚh§\13]D4ÈA1Ti\93Èt\14îJ%F[\9d¹i\8fÎF´àCF©BËÕºqªzð\91\1a\8b\10/\11£T8ÁIF(SÒùÍÕéåuä~8¦\0\92\15e] \14\9d\8dÂæzÓ\91\88ñ\85A\vTÍ\ 5¢±x31\92\7f<£m\9f¡°¹`vþG"d\93\\96\1c\13àx\16¾ìhåK\19@³<½ò\94ÄcóEtÈ\\1dÞ\rÍã,×\9c\9cuÐ\bG·$\15G AuÁtÌT!}ÏЪÊ\11°â®¯&÷7·\7füz{s÷\956Ú<â}f\1aj\1c!\12\9e_}äêq¸Ø\1eàI8\0\88¥6b\1e\82\ 4àAìr-Í.}5ª\14¦Ý>\97ôJy\1d÷L$\8fMýúÉÕÇÈKÎ\8a\12u\83m¦ñº¦\9båÞ\9cî\85©;bïÒ9¬\ 3°ÐWár_£\87ÁãOV\95ª\10ãbÁQ\90ÑÙ]\ 2\9a̵M®\92ÜkmPê\e\95\8aB\83\8c\e ?`÷¸}±¦RT-ÕR\83}Üoø\ 2[\87õ\11ÐG\0\925\16¼Þ\85\1a©\90î\ 3\17ز¤\92B
+(\18Â\12Ê\8cO¾@KÛAd²-\D\ 3^ö¶k\1eº\99û^\1aùÀbj\ar\89\11¡¿Ì\r\ 2\87À)è\94µÏ]\1f\11$\956\81\1c}=@F9%
+õO`\93ª ·2üÏÂcT\99P*ÁY« W#¿7p\90\ 2\ 1\18ï»
+¾\7f.d #A\96\9ed¦©<²à\17^\18E\1fHBVOÊèªÄQ\81"}\19¢\0\9aoÖ\ 2ø\91\12&NÑY-pÏÜ\ 6BFëÙ\14\81|\ 6Ë\1cEMÛJ\94x\83ÇR¡E*Öèg¡Ö\ 6Ö١Ĺ\ 2Wɳ\8c\9aZW\11]B\8c"q»|ë\7f0Æ\8b\ 1Õ±\rKî´Ë\83õa\f\80OáW)Zªd\180\8f\15l\f\99CïÒ b f\88j=Îü\7fàÈ\98Jñ07ö\8e\9e\9c\85Æ4
+®Ï,\1e _\8a\ 4\19I\1eÌ\1aõrr\ 2x\97`{ʾ_Ö\9c(f_[ã^7A± øu`ào\9fOV«ûËëëxµú\85\11\7fÞ\19&p}Cï\97\9eÖ·Z»÷«Uøq0_X6ê¡ëÑÖ,¹\90\ 1%\88Ç\9aïÓð\14\-à\1f\9d\8dê5³\1d%¢\90\9fÎu\9c©Lrý"Ó7òBOÔ\93ôóÅ\8f´Ð\9aN\8b\9eôn`\16-v \b\ 3\84¾2P®P0\ 1o3LQ~mÛ"vÿ\13Ð&\13M\ 1\8a\85æî\8ex»%7îw+\92\95IÓo?\83V\80«¢[(\86(îR?\98\87\ 4\b\9b\87\97XØ|°q¼\9c\9dF>K\f:çÌ1àFé1G\96\17\9fïn/㿻 \\8f\a;\a+x{<c\10\fa\9be.\80(Æ!\86{â K\95\86\ 5\8aß«AÌ\8c$hú\16Ýß,)\0È\13\ 6\ 6\89\99Ððlï¢ò\10\f°Q©SY\84\14-ï'}²\ 3Oñ+Ó¨ÔÞ\ 5Ë\ 6\8a\1cì\f¾«¥\95Å\13\94·\96pM\7f¥õ\1c\r\ 4Å\01¥²¼mQ\ 6uy4\9f3êv.\90&Õp±W\86\rì[\14\0\1fh<µRý\16(\ 3yß!Ù~BÀÃÑ\13#-ðµ[@\86üeï\ 5jÜ\7f\ 6}xËwÐÏ\13¾ÊkÛ\87±¿õe\84öe\8a×\86\cÖÃ\0dâ´iwéÁh¬\ 6a©°¹ª1¯\91Ì£Ó5»\r+\ 2\ 3\1c\B¢ðÝ\91þ~nVb<nüh@ÿýÆ\84i´Q ¡§\99r\90í¦êMüÅN»ôÏ\8f\vóÄ\18\89¢[Ô\97[2u\ 4\ f1 ¿n\87\r¤
+mã\1d\93÷\ fvW´\7f\8a{\r³\8eg\8d¦ë\9bxÄ3Î\12¢À\bó\93\88ÇlÖ \8c~6öAB¯à²x\ 5ðY>ïþy3\f{\7fX)»
+ÇÈÆhêK®\80\a<$y*\ 5Ácè÷Õ\9e&Ø\ 2ìö\e\ 1øö©pïð*\b\92ú}\9dÅÏl\19Õ6P\rKaÐ2¿k¼ø\84b*úq8e\8aøÀ£×W\13\15ás\ 1²Á\87\fÔÞ£¾ÝX8úÞ\97ãnlÍ\16GÑþñ\ 1>cçÑbñ\89×s\18ÚÙ)v\ý\rDÅæ\9a4¼\8bô_pÓí+Ó£9¾vÓÉl\1e\1dGó\88?\181¾\1a\13ö¤Kìòl8ü-u\82]Öùï\1cðýVc\0`´z\88\11Å;?'uxt\18\1dáKÚ\1fz|È\97.â\9d¿vþ\ 5\³9Kendstream
+endobj
+1282 0 obj<</Type/Page/Parent 1099 0 R/Contents 1283 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
+1283 0 obj<</Filter/FlateDecode/Length 709 >>stream
+x\ 1mT]Oã0\10|ï¯Ø·+\12¤M)Mà\8dò!ñp\85£9¡\93xq\92Mk\88ã`;ôúïoì´GÕ;5\95\12{wggvì\8fALcübJ&t>£B\rÆÑ\98.â$Ji\9a&x\9fào\98ªÁ<\e\8cî§\14Ç\94UH\99¥ e%!|<¦¬\18\8aÂIÝ\90 β¡µ°ÈúèØ:.IZjÙ(éüÇFºµlÈ\99j\895KºÂ\97p!ó\eB\8dü\945¯Ø¾\9eD'ÙÛ`Lg\93Y4\ 5Ü0CÖR¨\\90c¡\0óÉ\88×eW 2°\9d¬¥Ûöå
+ÑPÙ©6@½È¦Ô\eK\8b\8c\96×ßI6N\93Uy+¬Ý\94Ti£\84»"˼\ 3\8cÏ£\89\a¼[Ü<ÿzÊ\1e\1e\17\91ûí| rûpO\17ÏW\15Ñ\944j»|d}\87£v\13Ð\11²Õ\9d¡\86\85\81\1c»ö\954\ 6µPé\bÐë²£\11Q¶\86t\95(zVx\87¸UWSÞ9\ 2½F;Ê\99XXYoý^I %U[³â\ 6P`j¸e!Âp°Ù\8bg·\98\8b²ÇêîEò,_´y_\19ݵö\94öë\97\17§äIî¿!¦\ f³.\94·aoÉæ\93\8dõíQ+\8c\93\85l\85c¨Fâ\88êV\ 2Ë\96\8bÎø©õ]õÃ\ 3×B7Îèº\ 6«|{\88 \83\ 5\88`\9a`\81\9c¹A¼1\8(\81ÌJ®:Ãå\9eá~\9c×µÒ\98\ 1#\7fKe\8f¿\91uÝ;éqqGOF*\81Í]s7û&\f½\ e\9fno`IzpÞÑ%[iD^sß0\8bb}Xñ\88kh\13\1e¯1,\aÛ0ÍEñÞµÿÅ\99\a\9c]\85Cë£\81 2\ 2¬·õ?\12\1fN;\1c+\1c\17\98 \14NäÂ2Y}Ðí\11EÙ¬\8e\9aþ;?xéK%\f\16}ÃK¨Ú\97/´jA)D\85ÃíOµá\95´ÎlÃ\bF÷éîæ\88g¸UÒs\8a/ãþH£¿ù5d×o\18\1eä(:ïÝà(ßÎÙ>á,\99à¢)\87ñ$J£ID\98L\18roí\87\ 6X]¸\83ì\15-Ù9Ðñ}>k¡üëO\7f-\ 1¥ÂÕb}ái2\8d\92Y\8a«\fEÓ\v¿t\97\r~\fþ\0Wªêendstream
+endobj
+1284 0 obj<</Type/Page/Parent 1099 0 R/Contents 1285 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 755 0 R>>endobj
+1285 0 obj<</Filter/FlateDecode/Length 1526 >>stream
+x
\ 1\8dWMoÛ8
\10½ûW
\f°
\97\14°
\15Ûqm§@Qä£ÙöÐ6[
\eÈ
\ 2m
\ f´DÛÜH¢BRuýï÷
\rIÙ²
\92]
\14A
\82X
\1arfÞ¼y3~ê
\8dh
\88\9f\11ÍÆt1¥´è
\r\93!
\9eð
\9f\11ÿùúgot1O&ôz6O
\86TÐxò:
\99ÇO9-Ø
\9e^OçÉ
\98&ó
\19þ
\1fã×HZû
\17£Ëi2}éÅ|
\84K:
\a®
\97½ó»K
\1a\ fi¹FLÓÙ
\9c\96\99\ f\ 5OÒ³
\9b¨
\9c44ºHè
\83Þ
\91Ót
\95:
\12\96\ 4]
\8bô±®èV
\17B
\95¯
\96ÿô
\864
\18OpüìF
\97Îè<ÇAUÂò¾62ßÓB
\14+A
\87\97Yë(Ç0
\9a\85\18\ 6\17\13$
\86kàt
\94н
\91F>ÕÊ*'é«
\14\99*7ìíünB£Q<2
\9e!e
\1c¹
\96k
\r öº¦
\14A¨²
\96\0Æ
\9fáPÜVYJCN}ªr)¬¤B<J²
\b\11¯
\85óg
\ 5>¤ºÀ]N¬rI;å¶|áZmj
\ 3ÿ$b¾
\bÑ
\87\1aR»¿½ah2iS£V2
\v.¥·=°ÙÐYÀc
\80C
\83\ f_
\1e\96_NÍ<
\eØ, É
\9eâãafç
\89/ÃÆèºÌ
\82á
\v¨<p^È\DÄ
\8f50ïèc|U
\88t«Ê
\b\ 2\es⨷(í
\ e\85ÌõF
\97Àò©
\96ÖYZ
\e]ÐN
\9bGë
\84Sº´¾Ò>
\ 5\1a4¨<¨2Ó;K
\9f\97ÑqB
\ f[YÊ
\9f¸OPmõ|
\94ýPËüáxs
\1feA
\ 5\8e\ f¸
\10¥L
\11\ 4\9fê¸
\fll%
\88ø3
\14åÑÒV!âÄmÆ_ÉþKQHoQ ká#;¼!·¯B
\ 5\992Ú
\18xLh
\89PN
\bߤz`µ
\ 1FU®¤
\r¤
\11\0Î
\91^#G°©ðX
\ 1Z]»
\83§>á
\rÉ_¢
\0!ýÓ*
\17)RF á3Gj©2z`¡l'gëÀù,à
\14L×u
\9e\93Ï
\r\9e\19>~
\9cÐ
\15\9eú
\16h
\a\83ôÂ
\ 5\91\-6§L
\80üh
\90p±Õ
\83T ¥=ËÐéMâ
\8b«O
\9e¡ÜüSH
\16\9a\10 !pî!·Óô
\b\12XFàyi¼8ÀÝ
\84\9b
\ 26L¹`ö
\86®Ðùª
\10fÿü`'ÿïgè¡ï¯|
\1d5
\18\f4
\vV
\81\13\81jQÂÒ÷³k>
\11êÉ]Ëb
\ 1\15\ 3¥
\0V!,k^ª«=ÇÍ
\8fZY6
\89\1f\98\1cßÓ
\16
\ fFB^Ê
\r@k
\17\15¥d
\1dô°
\86÷LG
\944²
\8e!f
\9aù£ÍE+I
\19Òé$
\8b&d
\87\b\1aõüÏ
\14C·
\9f´4«tÈQxI
\1cè
\12\9aÜM
\12\f\7fƯ
\9dØ
\93+*\115\81)¾çd;ªà{F|\90ÞT@¯\ 3\1dQç\94\956\ 6ÎÁ\95è
+ñS¨\9ce&¡Û «\8cB'_§Ð¡e\ 3«G¸\ 1\9c\19Vik\996-ei\0FxmKÆ\92\8eèõ l&Ð ã\ f}.ÕÏ\10ks\93\17»\18|\97ì\vU¢W¡h\16*\88A<\8ecN¯×*Uð±Çl©*L\12\f\ 6?*\ 3h\90Pð\94cHk\88Ké\ eòw\ 3õ(\9dí£\1fÓ¼nÆ]«å\1a\9d\1c\ f±+0ä\7fß3\93\81ª\93¿x8Ûº\80þpÀÑ# \0\9bX\102¦òõ\15ìý£\83È7C\1d¼êw\10±\1a\15¨\84Ái´\85\17z¾úÛ&×+\91ÿ\18X(#ç\1e[Å\16«\84G%hÌ0z7Vº7|ëùÝ\90.\9b\91= jÁÊÎó«¢·!¶Æý\10Û
+Ô$¦\10\9bò-íå\81"§\16\9e\8b\16·D\8bÓ\ 5Á¯\a\v\1e="'\8d\ 4x\b`\94[Ê\15æ¿ o[äi\7f\84yAßJéü\85?Èn\99h"·\1aÊ°g \91\ e>kì\ 1~1ÀGl\1a¸\89+ÊÐD¥n\12\89;\ 2\ 4nÛ\16iöG\99a²q\11}L6\16r§XÀÑ#ð\96j\ 4Ý,\13(r¦SÔ·tÿ»\18`_óSÿ©\16¹Zó8zaø7í\80\¹
+ïB\89^X Þ#\82=²ïl\bÏ\95ù\0A¬\9a'[#hFn\94WVÆè³t×\1f¿,(\94\9e©Ù\81Ë\1fýc\94\ 6\8cùÈÃÇÏ\v`o\10\f#v\ e´W¨\87Ñ"\83¼`Ê\ 6iÌ5\ 6\15Å\9c\8e\12ï\vØ\84໣ã°.\15\96\9bC`~|Æ V/\ 6\11îöv¼,Ð\1f£U\906Ìyî{#}°Y\ 3JÇß)±\91Æ\ eæ\90%ÂêÌú\83\9d\8dG
+XÀ<åNÊt\*Ê}x\86µ\1a*\8b¥\ 5\8bÐQvÑ\8c}ZÅ\rã\93J\8d¶zí:Þo\83\16)^:\98Ma3ñ\9b6ân\8bGì¼\18`ìè\88µåý©á\ 5Ï?\94\89G\13;;¿\9b\1f\17ôËqXÐo~÷\vEk^óbò;_"&³I2\9bÎñ5\ 6²1\9fr\fï\97½¿zÿ\ 2Ö\9dLÓendstream
+endobj
+1286 0 obj<</Type/Page/Parent 1099 0 R/Contents 1287 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>>>endobj
+1287 0 obj<</Filter/FlateDecode/Length 1691 >>stream
+x\ 1\9dWËnÛH\10¼û+\1aØC\12À¢%Y/ç\12ø\11#>ÄÉÂZ\ 4\vø2"G\16crFá\8c¬(_¿U3¤LÓvv±\b\8cHâL?ª««\9b?\ e\ 6ÒÇ¿\81L\87r<\91´<è'}\19ÏúÉPF³)>\ fñWiY\86\a£\93q2zéÁñxôüÆÙüàèòD\ 6#\99/ád2Ã\87Là ß\97yúvp\9c\1c'\83D>ÙdV;QòÍV÷Î+\9f[#ËÜd\92{\87g¥Ê\8d¤ÖøÊ\16\85®>¼\9b\7f\87å\91\f\ 6Ñro8\85å·§r=\97mË\ 4nù\95n\fÜ\9c~>;Å\ fÊËV\19\18VRØT\15²qº\12oe¡EmpÁø<U^g²R\8e¿\87H\1e\rÑ{_z\b\7fH¯\8fqÉÒV\12¼$råcN~\95;Yìð%7wðxýÙÕ\97\e1ªÔòc£«]¸Eëw\95ݬã\83`ä\8fAJ;\1dwʹM °B\1eZ¥+±Ë\90e\89ϹÁ\93ÜË\9dFz\v\95Þ˲²exL_9\9f2ïg\90\8a\ 2Ø©2øßm\81Faï¬éx®4l8ï\12\99[1Ö\8b]k#N§\9b*÷;YÙ\ 2æ\17Ö¯\82¿v\1dh\9c\19:]è\94ÀÞ¾\9d\7f¹øò>\94\1e\ 1ñÙŹ¤+ë´¹}×ñûB°*IÄ\0&ªDN\97\9e¥d\89i³\1d\ 3,gÑ\13ËýÆIZé\8c¥V\85C<,\13kÒñÍÈ×\80\1c\96²Ûw$\ 3í>\8bèP\94»g\81É\0µ^WöA\15 mµ\e w<@÷\802\81ùÃD¾\81k,\bm~\ 5\0F#¤ì5zó´~@~*26\92\18!¥+eî´0\85&ÖCØÄ×\9aÀ vf\8d\16tUí*ÔpÏkøæ\85nòmøê\ 6}\85¾5_\17Ä\ 1ô$\12Á\7fÍIa\ 3{üÅTKåX¦Ô®w\1d¸k*Ã\1c\ 2ì\14\90}¦RðºNá0rÜø\8d*\8aÝ\93Ö\rtæ¹\ 6\8f\ 6#`B$\1eK\ 3á 6õ\8eGûÒ\8c\129G'ܨr¡\82&È\19: y\11\85èü·B\94LXáo9Ú\0µrT²a2<DÃÄ\94\fÔíAS©\90%\94u]Plx\f¬ñ6µ ãJá\ 4;l§="\0I\96\e¦\98\97ëB\97 Î\82±\ ez1â¹V%IÅê±\10°¼1\19Bñ s\10!êjc)\96
+@5Î\ 1ë\86ÝS[\b\14b(\f£ã\ füÉÝ
+íLÖ·\92\rè\ 2Óá$bJ4¯¨I¡t\v°xI]G±\95\9c\81ö[\82\15\82ÿ \7fkê\v*\174¿ÒÊ!~Ú\7f\12q¼\87\10Õ\83Ê\vµÈ\v(\10ÄrÙ\89°¦J\14½\bOMI0\95Òe\81Å\93ß\83\b¢_\1c¢EÉÑ]P\8b\87<ÕQ\12Q°(\82²mº\11>:^ÙÊ\81h[ó[¢\8d\9bÙ\atj\7fª\8e\ 6°¼$\ 3\91\7T\ 1Ì-\14ÉÜÕlA u\97¿g4\98å{ø\89fX7W\17-M :\8es\b\107H5R\8d\0X\a¤\ 1¹\84z\aóÎ[\88¦Ôcu\99\17ÝÌ×Uþ\80ÉyôùôüÓÕõÇ\ 4þj+<LPH%(o\18¯ÊìJ\18\14\97\eà\eË\80^IÆ\82z#G\ 3m¯\8a\1cÂÞ\ 1øÚnU¦vQ
+Z©Áþó\10Aí\18\14Ê]a.&>[$rC>í\82\ 65-ÐzÞñ·\1f¢¬, X$n\10EfÄ^£öí\9flí¦È@y\83By¬\15\90ö\10ý@e\8fA\bò\9b¬ãÇ¢®U\9eé`¦\95Wh\90Ð\924CÏ\ 4¶¾ÜtÙÜ\82\9c\1e3\1eÚÁ\0[÷\9fÄÏ \ 5d\7fæÎ3sZcÑ\ 3pÜ\1dêê¶Ð8ÄiLyßö\e\83&©ÖiX7òìMÃ#r\87Á\1d]¦õ\8aÖ\9b&³\81\9c\f£\1eÜ\ e'S\89\a\9a\1d.<ï\rúãÈð9âÿËä?ã Ë\94W\vå0áâ>ÆöÜ\99tUY\93ÿ¢ü4;ÎÓòÔÌ+5v\1a \82\9d YN:°\1fi\9f\1e\85I\91\ 5(Â÷¸\8d\ 5%\8eäo¤ú_\1dr\8dª{±ã¨T&Ϊ½xÄÑ\r\1dC\e\94*Ó\87¤~Ó\8b¤s\94!ääúê\ 6gÂè¤&q\11@Ý\1a.òHÇ\1d/¸\82³$\9e\a \94³(l5\85\83åRÃ=O§è6C:\93½QõE\e»¹[=gwÇY}Z-Ðç\0L¥©vÜE\83\80T²¯!7yÖ2¨?\v¶\84\82oªf$?eÌx\98Ì8N_eÌ$L[Ò%ÊÇ~Þ·ý\11¢ ?{%(\17u¹\1f\19õûòv\92%ã:¢FX\12Ð6è¼ô~w\b|cû\19ýÓãKÊÑþb74ï\ f¯æÖ4ö©ÙA>|XÉÅH\95ÿ\1a6»»\ e´ÅJ°(ò°\93Õ\9e\95p\852¹´Êר\1f\1dF\9ef\81\9eH¶m\f¯LØ\8bøÊÄ\15Å[Ìyìâq¨\13y×\80ÝñöØÂaýy\11£\ 6\82\170ê\rgÉàDz\rE.sÃ\0Â\1e\eDí\11£¥Å\ 2Ä\970\86ÓZjæ\81\ 2¶³Á)t\b\95\91á\1e]Îj\ 5\eLð2<;\96É _tAÉ°òÊ×Ê~G\8d±\1a¦x+Ã\82Êróf¯¹Ð\9b\ eñ¶[ïüÿûmw4\1d%ÓÉ\f\9b*Lͦôðq~ðçÁ?\eõøìendstream
+endobj
+1288 0 obj<</Type/Page/Parent 1099 0 R/Contents 1289 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1289 0 obj<</Filter/FlateDecode/Length 786 >>stream
+x\ 1\9dTËnÛH\10¼ë+\1aØ\83\9d`E\93\92"É\87 °óÀú\90¬\13\vÈa\91Ã\88l\8a\93\903ôÌÐZþýV\ f)Å\96}Z\bâkº«»ª\1f÷\93\8cRü2ZÍh¾¤¼\99¤IJo.3\\17ë\15®3ü\1dS\19\ f\16\8b4\99\9d\1e\o&\17\9fRº¤M ¨å\1a\ f\ 5\ 1&Mi\93\9fïûµs¶ké-yÕlÕ«ÍÏIJÓ,MÖ0</l£´¡FùÀ\ e6ƾlPÛ\9d5\1e\ 6={±¸ø´ ,\ebNgK\81\ 2L¨\98þÙÕv«ê\1fSÏyÐÖ\90-ãwßl\93Ü\9aòð~ýá}B\9bJ{\ 4ÿÅ>Úà\eYS÷ ¼Ó1#A4ªaº»ú|}õG\96\1fÒ\9bC \ 4ÝëPE×ï7_îȳ{`7Â\ 2ÙXj\9dÝÖÜ\90\1a"<Á"\98(úÂáúæï;\1ad\8a\ 6¡RA\ e\eV&P8j2\ 6Ýò1A.hÛScQ#8\81¬aðÉ+mXÒ`j\95Cú"îÙsϨ´.\7fDÞX wD?!;j°¥}¥óJ()ê\8c¾ïøH"¦\8fÌ\1dG-
+ \10õ¹uºQ®§\ fCÁß[\13\9ck¨5\94ó\92²ÅXÎy\96à±8ÏæÉ\9b$Kè/»§ÂÒ\r@ÛZç*\bW&\14´UÞï\11C×üîyW¬\ 4äÛèó´\13\1e9\8aÎ\9e\8d×A?@³\9b@\95ÔÊ\12T.DÎ}Å\86QVÊ!ðNIJ1>Ô \ 5Ý\eUp$!m=Vè#ì{ê Á\99G \90¥uÅ\b \ 1#ðØ°Oy\902Å£\f\8e\94\8bCØØ·w§-q°Óf÷\828\14Ó±e`#Ñ\r£æ\1eÕ8¤=[\ e\8a_\rMz\92\11¦&`HA¤\96Y\rüoøÍ\89ï;ý j6ÁÿI:PÓù\80¾\ f"\1fd\rh\106¹ëÛ\80Vµ"£Ôn¯Ý3ͤ[·\fï½ê\85¬g8·\8fÊ|ä\88¡.\9dm"Ò-Fv,\88L/Øá\rÂÇÃ.èZ\a\8c³ïM\9e\f7Ê\959ék1÷~lèà\94ñu!\89ßtð\\97â40\8a9!\84Êsn\ 3½\96uñzD\8e®%(ÊV°]@ÃB\1dw¨\89´C̵où$\ 3u\14t\1c\87õ¸Ý²%¶ðzN³¥ìÕó8\81tëìO,7ÌRÞ5ÐXÉ\9e\13ÄéÁ|º\9aaýþ\9f\11Z¬\16Éj¹Æ*\87ûz-¨\1f7\93¯\93ÿ\0´Ðõ8endstream
+endobj
+1290 0 obj<</Type/Page/Parent 1099 0 R/Contents 1291 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 768 0 R>>endobj
+1291 0 obj<</Filter/FlateDecode/Length 2061 >>stream
+x\ 1¥XÛrÛF\12}×Wté%T\15 \11¼\88ÔVí\83Ö\8a\13U9±b1ñ>ðe\b\fÉ\89\0\f2\ 3\88æßçt\ f@@\94\9dì¥RQ \9aKßN\9fÓã?.b\1aã¿\98\16\13\9aÞP\92_\8c£1þÂ?bþñé\87\8bÛE4§ùd\1eM(§I<\8dn\9b¯\8c\9e.âyÌßñ$\1acu\1aÏO_¼:\eG74[Îñ3§å\187\84\ f^ë}æ\14Oa²·8\9fF1Íâ[9\18ßÎáAø\12\9b\8b8ZÐl|\13ÍÄ£y4m¾x\95/\9a.§X\9b-\17ø\9d=s\9a¶\171¼YÒt\1aK ñ2\86\89ð%\97ö¾\11æ\84Mw«ýo¬N\97¯W{ßX½\19ÃÝîì¿V\17×ïoi2¦Õ\16¹¾Y,i\95J\8añ\97dðn¯ÊJ;\8ag\11=UÖ\99bGO*ߨï<ýêµ»þI%{Sè«Õï\17c\1aMf8=¸K\12[\17\15\99bk]®*c\vüNª \ f÷w\8fto\9cNp×\91\ f±ñx\11\8c\8f¦3D\8f\v`-\8eè±v¥õrõõû\19Åq³k²@|صÚ\eO©Mê\ÃXª}âÌF{ÚÛ\ 3U\96j¯O&ÓÖ$Á#òý@x\9f#õÖå&$@J|ª\9cJ\r\87¢²ì(Wè\94£ªö\9a|¾)\95÷\87t=\98¯¯hk2\1dÑ\ 3\12à \7f\86\7f)¶©Jö:R6\98ñ/GÚ+ì¡\8dò&¡ºÀ\8a¯T\91r\9aíöÌ\ 3I^b\8bD\97\15\ e\15isø`Ý3\1fè\82DD/=\e¦À¥Y¦Ó\88Þ#üÜ\ 2qýÚ <|÷\999åPÙ
+\95ª\1d\92ÊæÚÂ\19í\87TfZ!ÃNoa éæ<lm\96Ù\ 3ûâqÒG|#\1aw4áf@Å>\96º\90(Fbëu3»\1d\rh_Uå?®¯\ f\87Cd±9KU\19Y·»~½_\18\0û¯ß'\r,F\8bhÉl\ 1#ëÉÍ\82x\7f\a\1aY\1cµ\954\8f\99*tu
+çHO!_\7fç\95)å`\84Ã>Q¥\8e\12\9b_\9f²þÿ¹8\9a,£ø¶KÕ϶Ò\ 2\9a××
+íI¦>~÷I\e\86âc½É\8cG\13î^om\934`\18¶\18A©\15íj\93âr\eÚ\91;âéè+\9dÓ]\9a\9bÂx@\1d\1d\82C{\93ì\e\90qè\85NÅ\ 4\9dRét@AªàÝ\92V\8e\9b£Îsí\86 \95ñD0ÀÌÐ@`u°¤Ò¶\93\ 2\97\0DÞÖ.\ 1Ì\82É\\1d©töE\9cÜhÚë¬ÜÖ\19)'lÐ\87Ôj\1f¸ç+X\12\9e\1a=Þ¿\e1æF?~ü¼úø\14åÊ\14\15þG§n\8eô°+Tb,½³u©U-1üoX\83{ôó\8ar³CN\99\a\99¤¸}·Îæ¯\9déJûpÿýÝ\87\7f¿^íª)L\82LÐ\ eÙff±\94«Bí´0YèÔ\9d\83çÌN¾F\ 5\15_5B\11Ú\ e\b\99\91N¼·\1c:"-*\87îE/\83a¶fW\a\7f¿\1az{M¯ÓZ\12oa<k8\1aL>\ 1\15òåi\9dp\ 6Ø\97®3\19\19-\9d÷ v\b$èâäË\epwɺÔEâ\8eeEÂÀÖ¥\9eþIGí/¿\95?DÛ*Xð\ 5Ã\84HË\04\8e\96.\84w;\17\aÂçÃW:!wwùì\93iȸ\97í\85Êõ\90>üt\r\b´îq?í\85@Y1à/%{U z\95ÉùÏL´\1am3µ\83\9e)4ÂFkI]¯\8a,c\9d\ 6½\8d¥'Ia±ÕÐ\10QD\0'`ÄPò\1az¡2H\88Wé\8bB+ìÐ\8cÂê¬a%\9a\11:\1fÄ\93\99\9d\ e¦Ú\13Î\1c)Sn×Ê\7f\v\8c¢Î7P2f\ 4VWOë\81L\ 4\9d·ÕÞÖ\1e¡úõ\95@쬥\91r\b!\13W@{\96Qfís]zÊk,\80\13JíxºÀ\95^ÿQc\ 20,Ì\11ý`^\0\9cVn\9bø$\82/\ 6³\88\ 6?U\a{VÀör\\8a\89B:"³;´ëz`\vÖ5\b6\15<Ìd0ç=w2\90R@\1d¥©¥Ë\98½`:\871\96@\1cаä\9eÏl¥\ e\1e\12n,1Ma¶Z_\rá.BåL·a)¨<mlUe\1aF\9eÅ\ 3dZ·ÊJ\9fy\9eÀ\89Bë\94ÓÊ}\8f\86Oõ\97@Òýv?Õ¯Å&v£.2¾\80¹\15¦\8fF¬ÏInÊ\83æ_iê|\82©Uf1\ 6\11R\922qo2\88 \8c\84â\9d\8b\8aåY\r\ 3\99P\97Óef\12\96\ fÕ\8dQÒqBl<ªà\96\82P\ 6Îc?,ébX\95YçÀPÎô\16CV\18ýô\17ä\16Ã\1a¾mæ\e"ô¡\11æmÇ\93óÇ"Y\ fâõUXéZ\ 4à<ßìýþ[[éàX°\13\80ÓæC\14bÄ\0?ï\8b\86ü¿Jª@öHµu&\8c/m-î\90ã\911\94\81\83Äå2m£Ùú<\14\94\14Eèh\ 2i<Mª\84\8eáîÕ \17 È\92³6g\98qÐ=\92éiµª*\fØ5·\7f\v$\85a;×Ýä\89±°e5ý¥4\8dæ1³\r\19ñ`\19\9e?>é\fb\88&xH¹o·æÍ\±\1e|z¸o¨á\1c\93\7f\91¨V}ZTÞqGa¸¨³\8a¹\bÉÂÄ\9abbM\fTCÆX\15Æa`\96y%ת\10Új\9f\báqÐ\ 5.m\83 \ 1yLé\80Ù=EL\19FÕT\8aÚK\1c+ÿÝãC3ÑÀ(\86\v¸\93`Ê\11f\r7\87g\87ô>\86ÉÜ\16 '\19©\9bö\80\ 5.±WyºAy\ 1é\ 23¬\a¥Ó/\ 6\10Ëä\15Õ³+TÂ\9e%2òËq.
+ÎÃ\9d /\82
+\f\8fä-±F\9d\1e2ï~{¢ÊiÍ´\fÕnƳ 4|:\ 4b\14&M\1eîë²´®
+´x\86\97àéF%Ï\1a8]\ ft´\8b\9ai|ÒvÝhÄò1âá\1eÛÏ\e\ f8 \7f:ß_¥\9b·ÛñÜrà\7fÐ "¶y\89§\97(iëd[\96\165\9fÃXÁ\e9\94'~Ë2e\98"Éj\9e\8a\91í¯\9bÿ\86»ª®,\ f\rdKÖ\82a\80Æz :î½M\fÈ\8d©\ e,\ 4g\ fHûyÊXÇE÷\83\f½\9a4\0\8dîå|zkHqð\80ÌLuìÔCô\18¯2(\1c8ðô\98Äæ-\1dmÝ\8eÏ=° chy(\0²&\92^{\91®>Qðk\16Q\99¼\14lâ!\0\0^\9e\88ä2\1c¼\94iòäॸ\r\84!\9f!\9d˦ú°\8e§\8e¨Ê\7fú\8f\vôßü\83Âl1\8b\167Ëð\16\Þ²ñïW\17¿\ü ßb\8b®endstream
+endobj
+1292 0 obj<</Type/Page/Parent 1099 0 R/Contents 1293 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 777 0 R>>endobj
+1293 0 obj<</Filter/FlateDecode/Length 1979 >>stream
+x\ 1\95X]sÚF\14}÷¯¸\ f\991\991\ 2\ 4\ 6ܧR\13§nm×5xÒÎð²H\vl,iUíÊ\84\7fßsw%\10ÄIÚ8`ÄîÞÏsϽë\7fÎzÔÅO\8fF!õ\87\14¥gÝ \8boøÇoO\1fÏÂ^\18ôér8
+BJ©ß\1d\aWÕSB3ÞO\97\83\ 1Ö\ 6ã\11>\87x\15\92Vgá°\8bc\83Ë0\18ð±ñ\10\vþ\89\8f\rº\83`¸_\1d\8cûÁ¸±ÊB\a\83\90w\1c\ví]]ASØe-)\85£1\84û§Ú\96¾\93t|ê\97ùYçf@½\1eÍWðv8\1eÑ<vNvi\1eµb\1d\95©Ì¬°JgÁûùç³.µÃ!DÏãÖ|#á\8eà\17ä\96r2kÈj2¶\90Æ\90XêÒÒv#,Ù\8d$>Þ¹ +ev{«ì¦\9dÄ"7"õ\8bµ%-\8aµ4\94iKy¡_U,\ 3\82:º\9bN\1eÉ\94y®\v[YÓëÃmXSÈ\95,
+\19³~\959\85v£\f\ 45\8\88UY\94\94±ü\89¥ ½{§&\94J\91\19Ò+äÊ\16J¾ªlM¥\91\ 5\89(Òef!}¥\8bÔ\85\84V\85NIdôIe±Þ\1aD\1cÈ\98DV½J\9aªBFV\17;ÂéWY¸øun¢*\0íQ0f\8cÁöE8\1cUá©#à\16ÛµsGVå\89\88ب\8e´Q'\17Ælãÿ%º\1d\8e\83ÞÕÁe\ e¬\91\91ÎbRV¦\14Á\9f%\92
+wÓ<Qf\83 .w\88\ 1+u\19x\98ÍàtL\8f\93{Ju\&Ò\ 4t÷ññ\8eà¦\ 1T\ü\90s#O²\94¨e!\10USkÑK+T\ 6\r.\92\8f\93é\1dÍôÊn\19V\8b\96;}\vÅ\9aZ\ekó\9f:\9dív\eä"N\ 2\18Ú9ÞêÊ\94·.Þ\aô«ÞJ\18vá@\11K(L\9c\81py¥Öe\ 1¿NÌt¦S.¢\17±\86lÌRî8BX!\13é\2B\8e\0Våà\8az¨!.¦v\7fà\v¥7\bú\ 1Í<láª\8báÌa°âf\ 5¶Ã\11jÛWW\ 5w\91ÆK\8at,\19×aÀ\94³\11\ 6\ 6É\8cb8\96À\9aØåÃJcñÑg\8a-ý#\97\99ÓƬàQè6F\89BU\9f8½Ï\8d¯5\14¥ôjÍF\97 0\0L,\13É\ 5¶ÕÅ\vqùÒ\83´&\12¹<7\r¼{ß\1a\9ah6ýý\90\87\13½qéd\ 2Õ/.¨p\82\91f4\84OZE3 \13Î\80fK\18\9b
+Æ æu\81\faaY®\ 1Ã9£\8e*\93\99@°y#
+wn¥¾\ 4t»:Ñ¿Ó¥Ë0\142+0\1a/(O¤\80\1c\1c6%ÔC)\8a\1e¨D \93\ 4È°\11ôàk'ëk\84\12¢·\14íjßÏî)Ð\85ÇÙ~û\1e¥lÿ·$}\86\8b»\1fJø.ú\ 6@\1fìM\85\8bÓ\93L\1cy\99\8dÊÙ1\ 6ÊÓÍ5\85ýî¨
+MØõÈ͵Q_&\9e÷xéM¤ÎØÕ
+\98\15"2\10\9aÉ\bm@0\ 1zí+Î\18âx\8cK ÚËFcu}¨%¿\b0\8f4\1dÆnÇ\aÏ\8b86¢å¼F¥Õ<¹h=h\8blù\96\ 3öo*Þ\17\r(K\14
+\ 5\8c\16ñnÀèK.\våZ]R7\18 AY\85tï\1c.Ð-@\90¾\ 2C¦\15
+WÞYZ\85\8bôò3è?J@Ð\ 4KÖh \19qËt=§sÓ¥«\8a'Â\8a'\9a'\16-L\19ý \17\â5ÀkÔ\e^¢öñC\ f\93û\ ftÞTvN³çGä2§Ùüéùzþü4¹«mëb~\0\9f\10ÿ\9b~\98]Ó¹OXeçù[ûî\9fgsÐ/\95*¦wTà}ñþÍ}\93¿\89÷E\19¶%é#7#\8d\1ayG\99m<äÛøN\18;\93\96·éµÎæ\885½{K¤³\93Ü®ÕÊo£\17\15½èý\13¤]\8bìz#²5d\10\1eïKc÷Ïè[ö&\11kó]ù±2裻\a&¹wdÒå¯Ú}Úà×´àö\8do£Båð\ 34\a5\85føú§ï\18\1eK\7f\f]\10§xpø\ 4²4~\84\82M\10¤RÔÄÇB\97ùí\14_Ä:E\vD\84}\8c\8fklß\v\9aU@®\90öxöã\b3ÿimy&ÿãv
+zæ&¦·ÜjÑÌ\19ó\1e\ 6s)x\82ñôs¨$4\18SF\eFn"×"a¢\0\19¢Õd¨\87¼\úÁ\80é\94\98@m\81© ¼âË©*;\7f\ 61\88\8f\9b\ 5Mg5ÃÖ\91¬¦8S.SåÇÅC\956È\ 3f ϾßáÞÿÄ\98\8dAö7À\87 \99\83\ 2$ø\91ÊÇ\18î§\98\aÙ{\83Q\8e[°\8f6§w»Q\88\10\8f£\89dê`Û8á\b6»Å%^\11ZcTó+õ\98×"\9c+v\17èv'\91\80fg\ f\93ë1¥8\8b\10#\98´Wíö>?Üþå\fxkT\rhâ\9bR-\f
+ı\99\r"=¦\91\ 3$[G´Æ\1dÓÖ\93\9c\8b\ f3d¬0°\97\15o:Ãâz\12>Ì\0ü}ÕÖ\r\ fg@\18(9\89Ý@Ô0dÑ\92Á:`"Z¼¯\ 2®±=\11¹\87\14Ǩ٥\8eìÃõõs¦mt8np\\11ð\1cÿQ\ 5¨Uµþê^s\9b\118\f\ 3ÿ>éÜò9±oÅ\15ôçâÎ\13\88«(Ø ul×Þí\v\ e\13T\1e\1a"DC ï:I»+ó:E,ó[Îaú\80\1a\8cAK\95ùëÙaÎ\ 5\88¹â`5F)¼û!ÛÙäñy¢Ô;ðÆõæU w
+ô\95Å<ü\\93\9f\12wÈz\82)ºJÏZÚ|\9b\89t\81yû\82¤\r0%\ 5¾GÂm® F³¿\a\9eèö,\84à"«\94ºJL\80«\8d\0\ 5s\10ÝøÊ\17\8eZ±Ê`M\92\80S8<«2ÃmKg<1F\1a\17ÀÈ&»*É\fD¾\8d`ª<QÚ¬âT¼p,qÓÔƨjÀõÅÎy÷ö¡©|u÷CøÙ¸\v\f\9e¶
+4\139ßg\88#z¢ó\e"\1eng\8ck\9e«ám&\9b\115Ǩ\18@¼o\0\fnÙ%\fr\ 1\81\ 3\ 5:jQF\16ãi5ü\8d+ºéá\ f\12Ýq\9f\86£K?ÆÍ&÷¿Lè±Ð<\91дy#f#Ûõ\81ö(t÷Ñ\1f]X\ 6£A0\1a\8eýåõªË2>ÌÏþ<û\17o\8dFäendstream
+endobj
+1294 0 obj<</Type/Page/Parent 1099 0 R/Contents 1295 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 780 0 R>>endobj
+1295 0 obj<</Filter/FlateDecode/Length 1148 >>stream
+x\ 1\9dVMoÛ8\10½ûW\f\90C\1c \96-ÙñÇ1i7E\81Ý´Ûxo\ 6\16\94DÛìJ¢"Ruüï÷\8d(ɲ\12\ 3m\1dÄ\90LòÍÌ\9b7Ãy\19ø4Á\9fO\8b\80¦s\8aÒÁÄë?óæ4[.ð\1cà¿\90´å\ 5lå/\9f¿¾}\1aLç¼>÷f\94ÒÝÌ[¹ç\84\9e\a§·\94æ+ozZyX\ fÆ\8f+ò\17´ÞÂð|éÓ:®`'´\8e\860|çÑ\a\9dmÕ®,T¶£g\91\86\82\ eÊîéÏ\8f÷_oÖß\1dÀÌ\ 1\8c¦\13¸º\8eÝIߣ/¹Ìx#E5\88°JgîØ\f\91ÕÇ\ 28\10\ f×\9aT\16%e,É\94y®\vK[]\90Ýã\9díÞG\91.3K:ü.#\8b½$²\93\85X\15øU\17G2²ø!\8b[ÚªÂXXÎ\8f\8cÁF'4ò§^ÀÆ*DÏD{\99
+ìL$YM&\11y|mν¥\16Ùs\8esJ\1aÇ\99o \15ZÛ+·zW¯\ e)Ê\9dß\8d\95±´ÑX\83\91$\16ùØ\99\1e¿å¢\86|\92¯ö¶%\84I8·~\16Á9ÊÐ\ 5\ 4\82úG8>\8fsÑ;àÑú\ 2ËØl\85Ê\fÙ\83&am¡ÂÒJÃç;l\1eö*ÚS,\11\Le®3Òð¸ \ e¿ÆÙ¸.U|}\ 2"epl«2\19sB{þFÚ`¥æ¯ç2\92\1f¿\93×ëX\99<\11Ç'\91ÊËvÞ¡\13\86 \9e].\v£³\v&Y'\1e= 6Ò[6n$¥%D\16Ê&Sq\8f\99PBÃ\10ׯç¯UÛª\11ÛÌ\89íê\8azR:K+Ò\12ø®\f±³\9b\ 1Ú\f#8Óè\11Ô\17ò¥DÝÄ\14\1e9\r¢Lìæ¦\89`â-YÛMMÒéÓ3_\15Ѹ\ 3]#tÜȤ\8ca\86ë¹[Ë¿mª§\v\96â/º{)ß¿\ 1Õí%oC/³H§©Dã²{P\9eÀ0©-\1duI\aÁ¿¢ïÔí\8eUòíñC0\9d,\90«§ÏÏ\9b\9b:\81=¢\90Ø~ZÞÍI¦LGÊ\1dexø0æø±Û\86«Þý\19\95\95á¼æ¬Ù½°\95¿):\ 1w\ 32:eÅÇ*\92\86PíÕ»+ J5
+¢4r[&É©ÐÍ-"ÿ\8f\ fUµ°ÕI¢\ f¸R\9aÀê¶,_E\9a'ò¶b%\87hÐMÐÐE\ 1\8d\19J\ 5î\ 66÷ö:\88\12a\f¶l\86Ü\17rm\8c
+\93#?¨×æâÀJÏ\µü©Ð0"\f\1dd\92ln.×\1d}®#FÊ\1a*\1aÀZ}HL·¦Úû\ f\17wo'Ø\93¯õ]V9\8fò\92/õ¦Nå4ÚÈÃ\7fwÒ"òü\90\89t3|§N\19\10íõT§\94\17Òܶ¨M\89p[¨\15\97Ç\rl(òC¡â\8bÀXë\0·\98\1dO»BçÎX\8b\ ý\19´V\9e\1f.¥ãÄ^'#(\99B!¥µdÚk¸IU\8fЫ+G)\18x*Ó\10·\ f\7fZGOÁ»m»\9fÛ\16e\9d¨/£¥\92-þSsä\8cV£U;\19ñhåæ¢à\9d\99\8ac9¯E7\12¡!´¥B¹(p«YÜPĤ\8a\1fB%"ÄèÂ\15\99\86ÕÅ\8eò\80ì« Ía\ 6Í<2\1añ¯#\1e> ¢s\83C´"&º\9a¾âêxÃn]\98è\ 6¹BïªgÀªHzCh±ã©uTÍ \88\95\r\911I\ 5Ô\8e«Õ\19ì\1c?Fµc£\85\87¹\13\ 3g<Ü\ 4óE=\ 3,ëU\7fºô\96«)\ 6×ÀÝiÏ÷\7f=ÜÓ×BWCàG\1d\95Ü[Û¹räÏ1(/§4Z\ 4\15æO\r±³ÅÌ[Ì\97Î\8b\95Ï.ÿ±\1eü=ø\1fROm¨endstream
+endobj
+1296 0 obj<</Type/Page/Parent 1099 0 R/Contents 1297 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 793 0 R>>endobj
+1297 0 obj<</Filter/FlateDecode/Length 1522 >>stream
+x\ 1½WmsâF\fþίÐ\84iCfÀ` \ 6:\93\ fÜär/sIÓ\83o¥\1f\16{\rNl¯»»>\8e\7f_Ik\9b\97r7mgzÉ\84°Þ\95ôHz$ÿlù0À_\1f&C\18\ 5\10f\817À'ôáÓÇçwQà\r \98Òg\ 6·coV-RX´\8e\96\19LÇ^p´çä&CoÚÈñâ WíMo½!\ 4ÍÞÑ2\83Ù\94ì5{Nçí\f\rÕXxqÐYíMGÞ\18\82fÏÉ\8d\ 3|XËñâ WíMf\9e\ fA³çäF#\ 4XËñâ WíMnÉ^³çû\1c§AÀÎû\13\9f´ò\8a$1¼0Ä\13C\18O'ô\1dÿ´\84¸õfy\1e\7f½\81þÃ\18|\1f\961e(\98N`\19q\82\ 6°\f;i$
+0R\7f\91úfùr$Í)dé°\92îM¼)¥{\19uVÃ`\ 2§ç9Û'ÖøxÏ'ßQ\84\r\89(Kr\88òSÑÿÅ\94)ã8ùú\ 3\fÅIj\7fHð
+¥í\7fñç\90ÿÞpêù3è\r\89Ç\98\93åV\1a \ 2©\13I\13êd-#ÀüØ<µSç¶\ 3&[{¡ÊãUçvusz¨Îb\a2\91C!6¨9\8fÀ(Ø%i
+¹²°\96HÓB
+\8bv¶RK\ fÞ«\9dDêuA\80\11Y\91:Ãশ\a\18e$¸ÒP"â]b·¨\1c>ÝÏ\9f!J´\fÒ{\bU\99F
+´ A\18\82×\7f\18À\8c¨?@¯ÇÎëv\eú¥ÑýT\85"í£Ùµè§Éº_Ûb·\10Â\0k\ f\83ôû&Uk\91þqö\18èÇÈ°Ô\89ÝÃ\1dár\15t\90ä#2\ fõ¾°\18\10cvJG\ 6Ïî%\83#L>v"4ÂGsi×\892\90\8bLâ©å|ñ~ùöݯ\97\f£¦×\8dVe\81ç\9eæ\9f\9f>Ì«S'
+ÛÀU§eÊ!/\84FÍHÖ\8bÖÛH\828É%¥\1fî\9fÀ*\17ëÌa\9däQ\92oè\19í\1eBî:G¯\ e\19{Ó\ 6¤Wã6çÎn\13Cªñ\93è`0k\8equè=\80Ï\ 2-hH\1cÕÏ\82Ù\86¬4Ì##ñß\1e\11\12¬k\94çøFÐÛq_ê?\f]Þ;\98"-m±£ø4lè\\93+l¿aûßL\91Æb«\ 5\12Î\15\ 5¥\eu\19ÏFk&$Âý\10sD®NÚÛ\15|\11iÙ$ù,,áVä\eiº(\88\81¨yQU\89Ä\80 4®\14ôÑ»\94ü\13[H\80«0¿[\10\8dáQäXwº«Ê»B*,§n\14Þ1Ãé\8bÒ\9b«Ë4\ 1SÈ0\89÷ì\vW\95Kìµ\812\96 ¹ê ?D\99ZC\0©xh«ê\ 2gÁc\84N\ 5â\13[±ö\18\85\87\10.#¸?po±ø\ 4ª°\89ÊaGäÃ~\93c\85_âߥè´aÕ¹Vq|ÝE^X¡-ØÔà\ 2{ǵʯq·òcuó=ð&Eä\8düeÐG\ 5CÍ\99âBí©bK\15GcÈ\93Æ*G/ÀIL¾]ÆïÈd\18\81ʯ¾\83\92ÞÁh:»\fð8k"òY]\eì\94á\96#{\Ö\97`¹\94òP%Êý[\86md.µHSG±*\ 3®=9\10TPØ\9a¨7¨×K\0ªfV\1dC\b«ÎÏ«N\99Dw?\95\98Ê\8eZ¿ KÂ\14«ÖQ~\1eâ@È\91¡«\e¦}ÿa\ 6>Þ~x\18\8cx\0â\1d*ð :hx^½£®jh\86a%e2ç>t\18¡Ô³'®gÏ\r7}\14s\86ð\vNR'\88E¼Õ%\97\13\13¿2\ 1G »°W%\98-\ fLET~ôD~M\f\91½\8eAu\7fâ«\13îhÁ\95a\95J\99J\91\14©\e\88'\86\84µ8ÏK+MÝBê¡ÿ((ãò\e°y´R\8f?Ñv\ 2û\85Zp\9a¼Ê3÷\8f¦yb±s\94Å\99\vX\1eä þ«:¿Å\ er\f\ 4\vGàp\89c¼\eäXNZJP1\vq1Q\1f2\85\bå/DZÃ\92;3Dìty¤¶W¤"É_\14÷Bj\81\r\0à êÒN"ÏMËü¶\b\8dyãÁG\8cÁ\99Qº\16%\9b\12)\80NjxZ,\98OÏóG&\88¦\ 1\8aôGÊ\9a\92
+¡[÷\89¾´a\9fÊ\8boVÔîX\8fË3Ý{V7ç9ü\90Ã\82\e>\8evIu=ô\86Þ\88&\8atN\1dñ\17ÌÞX\99QaQ\v\88\0»Q¡LòµrßÃ9\8d{\99¤Û\9aÝ
+[©ÎÄëy\KC·:Ì\bÙa\1d\1cåcV{ð\80\8d6W;\ 6\83Á@Õ¹\82§e\8f\19Ã\11¯\11\1dj\f£ânY\14²³¸ò5ÂZE¢ÿ0ÞIü\0ß\7f¦#|Á[^ÔYÌ\1fßÌáY+j\ 5p¯Â\92*\98#IZ{õñÞdÈï1ÿ´þÇ\93±7 ¦îåg6$]o\97ßZ\7f\ 1?ÖLeendstream
+endobj
+1298 0 obj<</Type/Page/Parent 1099 0 R/Contents 1299 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 796 0 R>>endobj
+1299 0 obj<</Filter/FlateDecode/Length 1748 >>stream
+x\ 1½X]\93Ó6\14}ß_qgû\12:\89ÉÇ\92d\99Ù\87íRÚÎ,\v%a ÓôA±åD`KA\92\13òï{®dçÃ@\87N;\0»$\91¬ûuÎ=Wùx1 >þ\ eh2¤Ñ\98Òò¢\9fôi<½N®èj:Áë!~¬¤\9c\17°\95\7f\rø×ë_ÂÖ'£A2¦\92Æ×É\84â\9b\82f\17'oK\1aô¯\92éÉ"\9b\18õùð\96\89\9fæ\17\8f\9f_Ó`Bó\1c^\8dÇOðÜ<\vVû4O;\83«d\92ÐL¦\95U~OBgäD¹\14·ij*í\1fÍßã\80+\1a\fâ\ 1½á\ 4ÎͳÎ|-\11\83À\8fß\19RåÆX/´§\8dQÚ;ò\ 6!\96²\JK»µÔ\94)\97VÎ)½"¿\96ä\1a\83&?³GR{«¤#¥y\1f\9bïSo0J\86l4SV¦ÞØ}\12ý\1a×~!Ͻá\18 Æ\9e\a¹\95öÜí\ e|áS·p\16¶\8bò\95pnglFÆ\92ö\87wÂcײò\92¶¢¨à\84ÁQH UZêÔî7^ftÿìö\15ÜG(F×n¤µ\e½I2åêÃ\8bÅp<¡s'Ãâ!\94/º)\8aÂìH\eÝ\13Y\89\fTNÚ\90Ë\92»\7fçû7¹ÖÔµ7\9c&\83ëc\ eQ\'iÓdi-\1c>\bÅN\v),yùÉ\93üX)ä \ 5Ã\12`\93"QKÉ>g\~@\ 2Î\e-\90NÎ:ÇB;åצò\94I«¶5\16Z56V\94\16\ 5\9d\98r¨\8b^¹\84\9e£`¥\ 1è\94Î\8d-\85G\11\bÿØ@&½P\ 5\8a\96Óý\8bÇ\ fó¶ÿ] \87\ fð\rÛ\83ÕsþÙ\15jw(ÐÏ\ fw¯ÿx5ÿíå\ 3¥k\81Ò\aP\1d)\e^á\91\ e\edû3¦Mï×\97oç/{w¦(\80Ô\ 6"8¶\81ç<\12#Û\87gre\9d?\92A9WÉnX¹,2±!ç\8aKrå2I\8dÎ\11\90\15¥\84'\885\17UÑð\f\85`.j\90§Ai\rÐVn\17\9d\bÉ'5`;\8d\11ºA\16ãZ\83\89Îâ\11jÖðµ6\bz[Ï\ 1\8fA¹Àk8æ\ 5"y}`(\82²`OBo\99ýñ xør#53¨å\18·Äø@\97\94'å`\b\f[\16À\8eaè\84\9c4ÿϼ°~~?\8b\\ 4\16¥Î\0:\ 3ÀEDÄæA\9bB¤2à\ 1\16g ý\16B<©±\ 4\1c\91ÍT8d}oª\0q\80ÍèU±\ f-ËTV¬" ÑÁDph\r÷\ eýë\1fS\9aç\9få4ðò\ 4\ f\ f&ðCø\10!§fF\ek¼IMÁyÈä\ 6=\ f$ʸ%æb\v\ 6Ô\80ãÍÛ\11\1d²ñy"\12úÕì¸\1fv[ùf¼6¥ B-°{r^\15\ 5\eߪ\ftwÕ&T\eD\v¾\99\ 2¬%àom\90k´íÐÂQ÷Ô\94e¥\15\9cd6.¥ßI\94<-\14·\86\96á /\ 1\19®\9d\899|Â\99\86\15¨Q\87\10{\15ÎE.\0\ 5|°Å±Ç\1e©P.\18Fkç\ 6ã(·¦¤µ\0ö\10\ e\9ck71^oùÄÉ8à6¡9×·nf\99Ñ|p\83î\1c´6;~w{wÏõ\88å\85~\ayì¸Bl²ÀÕ¸pàÒÓfãu#£WQ~ø\81bÓg'"çcëÏô%\894\85Ît \92\ 4\1cè=q)÷ì\92,ÜA\eûAÑ;q3ç\88eÌÝ\1cU®{\94¸&òú\19â?K ]ß\¦ú&t0ºeéé\9aêf#ͦ\90Ý,½\ 1\91\94~oÂkcW\97´Ã°Ðv 9ìG.NX<\9d<z£ Î\187¦I¡\e\99*\81\86}\90]T\ fX;\1d?\ 2|¾6\7f\9cí$³|\8f\8e\9b\16\10-æ\r@\89\16Â]!vçcé\8eæ\ eU\89å;\9d"\8eÙkW2òôöáÅíÃ\11\\83qo¹\a\91Y)Á#(TF\ 2\91±tX´G\10Ç2\91\1d°[\8bVN¢©F=ݬå'\10/U%Ä/*^ ÈãççóE3\f\9d\8c\18\r\0ã\88ÑHÍyÙ\8fYì<\r1´\15\92\9a ¾Ù\7f:ñ¸\15Ëÿáÿf\97Ý\vçg²5\85Â\7fî\15\983å
+\89õªä7uï@ßR\1a]\7fp=éG\85bfÅ"6iê|µºa\90imþZ\1aOtä\b)ÚñX\f\10²ªûÿV?0Ú?/ĪE\ 2\84\1f³ËÐ\ 6r\ f\10ã\96m-¦v\16C°Ú}¬x>GsO?HÌ
+\7fþu\ 4!÷0\9cÏ#>å\8d\8d\93\88\\95®\19ÁohÑáƺxÔ¥·\8b\ e\86æ\ f."\98?y·èhôäfN\94\9f6**0/r«\7f¶ÀÌ\1ed3[<úoÙ(ÌÊè9j\1dËsl\90õ\b\840´\13.2\16,\83~W\1a\9egqû9\85Ú#z\ 3\8có\11\9d-æùw5ùA¥\1f¾·MÐìN軵Ыï\97[\18}Q9ÿ\9d®M)\9fáæñy\9c\8eÅ(ç\8bg\98\ 6x\ f\15Òsã\86¢îÖ
+tÀ\8b\1239oxóp\aØ{ôúú¹@¸püÙ\15õ\84Qܲ²ÓsKÄÏ\17¦ã\11õØÊ7\eº|÷\142\e.ÙïXÏØjíPhñ°èTB¯ë»\rýwb\96\9f»\fÜ\89Ö/áws\8b¨í5÷\8bEç fþ\12Sú\ 63oÐâö]ë\8b\14nôæD\90¦õD4\18M\93éõ\bß;\fã\r~vûâ§[ze\r\8b5=3iU6\92\18<\1f\8cñ%ÆtD½É0\90ô\e¾\9e¸\9aà+\8cñ4Þ»¯G|ÌÏó\8bß/þ\ 6[1X\85endstream
+endobj
+1300 0 obj<</Type/Page/Parent 1099 0 R/Contents 1301 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 799 0 R>>endobj
+1301 0 obj<</Filter/FlateDecode/Length 1657 >>stream
+x\ 1µXmOÛH\10þί\18!U\97Jĵ\9d÷H|\bI(Håè\95Tíér\1f6ö&18Þ\9c×nàßß3»v^LÚ½\80\bÆÞ\9d\99}æ\99gÆüuâ\91\8bo\8f:>5Ú\14¬N\ÇÅ\1dþðøãÓ{¾CÍn\17\9f+òܦÓ)þ\8aéÎ<ó{\r§\89{\1d¬ðñ\93J\9a\9f\LNÞ]Â\86G\939[nw;4 \8da\97&AM\ai´Î>\8alùvr\8f¥ÍbiO\93¥¤ÝcZ§j-Óì\89ôZ\ 6Ñ<\92\9a2¬Xc+©¹¹ÎµL\7fÑ\14«\85J\8agä\foFø\1c\7f\1d\9f\91JÙ\8bKu¯áø\88£æ\\f&4\8fbéXwY\1a%\v
+DB3II\1eÇö¾q\12i\1c)\16YôMR¦\8cÃDf\85³¥Haã\93\9cË´|xº\1fÇiÅñZ¤b%3¬\8e\12cJ¯fN \92ù´Ö\9a¾¥\15"X\8b\ 5\10T)\14 \8c\12\®à]%\8e\85*( ªw\9c®G~\eàãDS¿Ý!» \84Ý<¯7zN\9b\17\0G>ðQÈwÐ
+\vlqÎ\ 2Øb+c\ 20¾\898\97%V EÚ\0xF\ 2I\bDLb¦U\9cgòÙé³%g\ 3ë>ÿ:4®\8e\83ÇÀ\9fâùëÀªxûÏ C\8e®ÔÊ\1cæ\19S\97x0\8aR\19d*}z Yy\ 3\85Û\1d\9chæ3CmHW9\84E¶\84ÛRózNÆmÊ\94DF´ÌH$á^\85\b
+ÍÃXfàÚ\99]¾õ©\97*\8fC¦ºÉ\ 3{¬ï\15\a\83¿ÇÿU®3»\16´ß¨ôa\9b»²þ\98¡4Å\17ÎðM¦øÍe1\9dnOy\949\95\83òÑ
+\1e\1dç\ 4\1fùõ\9cøi\ 1\95õñÝ\ 2jùN\97\v\883ô\ 5Ç×\99©F\ eÿ\80\r\ 1\ e-\ 2.í"gE¡äi*\93,~¢<\81\89ðh\15C\13\7fPÂ¥j¥QøÌ+s'J2¹\80ßT®S©áÌ\ 4Xf§(â\86E!V°\90¦4}º\1eMßþ\8b\90Öi´\12éÓûTåëëÑÑè~à¸\f±°B\v6SÞ4\15a-\1eJ^\15¬²wÔý®ãõ¨^J"7\92\95¸Wi\84îa[\85æÆQ\88\8a&\90\94TÂ\99A^h³\94 Ý\89ÕLpM!\93Ü\12\ 4®èãhÈûQTj% ÛÓZº'ø\1cb¥k¦\v4Õm³16ë0R¿ºý2¹=\ovb}ÍH~(3\11Å\1aQ¡d7ÜQ¸7D\8b\1c\91ÚÐl@\16u\1aÙx\86*ÉR\15Ç(½·Ç4d\8egjÃÇ\99«\1câ\9bAgPç=\ 44ä\8b1\88ÐU\99R\9aq\18\ 4\81Ê\93\8cÀ\17h[d\9baµÝ\99¨¤\1eʹÈãÌv\ 5ÝçáÝosp \9d/K£m[%çw\93Àk¨phÃ4ä]ãû'alõö5Q\1c!$\bø?ÂïÐå³QG>\8aÕ:\96èÍZçh=\93ÁÝÕdüþ\96\96 R\ 2\92Í$x¿¥Y¸£<·\94l)2{äV9¡\15s\96écçFöß|\98NßävYY\8c5Ú\bÍ·ö
+\ 1\\89\12°\f%\14eº2ÔÊI¨jÇ\8ei_¸:\85i\93\94`\84
+ét&\83\87§S\e\ e\86B;\9aÙ\12=3$¶\96ü2p;\97qÜU\17\85`GÕ\80åã\1a À\17\8cs\7f+±\9bN\8do\87Ð\89MµØ\ 1a\97Z\92\8f\91Æ\11\8b!Ï\14P\ 5\8cÓ<
+Ï\8d\993\95\9f¯¥â$\85Á¹©<¾Péâ\94ϱ\1d¹pa\1a\b]©\8dD\9f=³%ÉbUV4\14
+U\9d(Ô,\a``H*\8e9`Û\9a\8añùÅ0m¥\93\ 5Òhf\91Éu,\ 2\8cÁV¡6\11\1a¹\91Õ\r\94\1733üí\ 2´\9em²*\81mÇ\85Rpì¤owÀ£Fæ\0\adLÁ&\8fM\98\96Ùz©AÓ\9at\16\8eÉÔÍíÅïE\96¶ýG\1e^Bæ,Í\8d¦\9d\9a½¦ÓshlK\84>\8c®/i\f±ã\97\f\1eÌÄ\81\ eZ\9cJ\82Ã\8aß±£õ\ 41ì4\96óA<'q¤ÆäVU£$\88s\8dQ¾ìqk¥£ÇRfÕì\1ecd\10£P\8d\8eò\vT¯\bØ/\ 2\ e\93>1q\16¹Ô\99\8fYz\9f:HC\94Ü+C#°§\84×µóK\82×-\11Xاn§;êº^³í¶\87£\81ßkw:\83fs|9ð\1aÆå°SÙºÞ\847\98\ 2\87\0|!ûä{ÍN³Ûh7\9f;\98\ 6úäù®W1\15¯vQ´Z~ÏõÝ\86w1\1e\8d{ð>\185.\9a\8dÖEËkºÍñ¸²\15Q|\10:»\93\19,»øîô<¿YYd\8a|\12\10¦[ydñ\1d\1a|\9f%\96eª\0
+øöÉ\ 2\±ð\10\ 5\ fj>·æ¿\8b\82\b\82ì2\16\vݧ?>\7f¥òëÏ\8a1\8eô§¶0òá°=×mWv\ 3\8c¡HÊ\8c\98£î¦Qæ¦yé{ÎÌÄRÒ¶tæ8ø\b\9eÎPR¦\96\ e\1a?w\80ïQT¾\80¤\81HÍëÇÏXúî²[\88´×Æ¿\11º\rj÷\1a<\12ß\rn.\ 6ô1U\\19\18w\ 2t°b¼e<êåòzÇ7Sá«ë\19Dv:í.4\ 1Þz\86LãÉÉo'\7f\ 3Íâ)\fendstream
+endobj
+1302 0 obj<</Type/Page/Parent 1099 0 R/Contents 1303 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 802 0 R>>endobj
+1303 0 obj<</Filter/FlateDecode/Length 651 >>stream
+x\ 1\85TKoÓ@\10¾çW̱\1câì+~äD\9e\ 5\89ÒÒ\18\81\ 4\1c6öÆqj{Íz\12\10ÿ\9dY'¡Â\ 4ê\95-¯æ\9b÷|óu@\81à¡\100à>$å\80x\ 4\84Ï<\1fD\18à?Ã×(Ø:\ 1BÝ\87ºÏýõ\80qâ\ 5 (ñ\ 4\94ÀIä\85§[\ 1ëÎ\10G\13¢oh\16\ fF+\ 2\11Ä[tí\87ø\93v\86 ÄÉU¡3]Åy©&@^Äû\ 1\81!:\b\11s\95æM]ÈÃ[é\84×ÊÈ"\85¹4V\99\1e°(ïdÓ<j\93N`<f\11a\84ÓÙr±\8c\96«étÁg\82\8fgc*\88X.{ªµÉKi\ e×F·õëÅ\ 4(#´\aÑ\9b½Jì¼@\17\13¨u\93\7f\9b&\89n+û?\#Ë\8d¼\8c\93IbW\85ÌÐÚ§÷\1fáü|é\99k\ee\9eÒú\91\98Cm\7fÎê\e¦öáýÃw,[_!Çô³äR\81Ú<}Û\96\ee&\10\11Ò¯sR=S^\9dåÕz§\8ab\ 2£M^\8d6²Ùõ\9c»6n·Ç>2*\ 2\11r_\ 4=Pö\14\ 6ý+\8a\87<yxÞDý\98¾\91\8d]+\8b½"x\82\bDzçǸJÐ\v\99ît©\16¹ÁvjsÀdÜ}d1\e«2=º\;ô8\97Õ|'«ìÂ\8c¢ô¦mìYüÏÔ+ûÔË0\b\17!¡Â'þ|1e\91\1f\ 4S!pT)\1fóÕ¼«Úh\15\ 1\r\8e\94\19ráè@\85\87Ì\80¹.KUÙÆå<Z ô\84b\ 1\92\18qw\85\92\8d\82Ræ\ 5È¢\80ä¤\80´Î¤Ió*\ 3»Ë\exuû!¾\ 5{\1c£?Én2¸\82½2æð²\edO\9b¬«ñoX·\18\1cÌ\83Ø\19KuÒvaÁ£l\0¹b¡SiUzö\80¼æ\1es\ 1\1aµ-°\ 5\18\85\82µã .\1dæq\8c¯\8bÜûLÇÇäÂSrÔÇÍ\14rà\8c\1e7Ãzz3\9bÂ\9dÑ\8e\99°8ù\966×\95Ó\1c\9e\15\86\ 1Ã%s±t8¢^à\87¸\91P\1eu\ e\97ñàÝà\17Ath\13endstream
+endobj
+1304 0 obj<</Type/Page/Parent 1099 0 R/Contents 1305 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1305 0 obj<</Filter/FlateDecode/Length 1018 >>stream
+x\ 1\95U]oÛF\10|ׯX \ f\95\81\8a&©O\17è\83cÙµ\914N\15%E\ 1\ 1Å\89<\92W\91wÌ\91\94à\7fßÙ#)E\8eR´°\ 5ÙäÞîìÌìÞ\97A@>~\ 2\9a\874\9eQT\f|ϧÉ<ð¦4YÌñw\88\8f\95\94¸\17ãÙÄ\v/½\b\16\v>w~âÍzpýpC¡Oë\ 4Efó\ 5cB\ 1\1fO¢á]&ÊZZ
+¦\1e}ª\94N©\12ÅVÐ\18\99\ eªÎè6ªÕ^.\95\95QmìËÕúï\81O£p\82,ê)Kck~vý0¡ hk\8cÂ\ 5\0âý:S\15áWÐçûÕ\9f´zþôë#¥\8d\8a%Õ\86*Y×\°)©Î$E\8dµR×´\19¾7{Yl\ 1*ôý`sE¥\95#\91\97\99 ½´\952\9aLB\1f{\98\1d¢`ÜÖt wÒâ¼Aå\ 6©u"Qó9\91
+¥«\1a\80þP:6\87
+\15|z»¼óh\r\b¥5\91\8c\e++ÊUUË\982 Ú\ 5>¹ÚÉü\85aG\99Ð)\1eV¯
+»\1e\fZ\8bå^榬¼\9e«\99çØú d\84Ì/¦!-\91{+\13\83ÌüÿV¦JÿÌñ\817\19\87àwî-ð\r\ e\8fP\99\r\1f¤Y\90Ч\ ef\9e?\9b:)z:ÈXÊT
+àß\ 61Äß\9eÖt¤§\83Z0ï¹ÚZa\15\10n\86\12Ê\83\7fæJä9%Ö\14N#±\854T\99Ær'¨ÔT`\82J\11íD*7W-\8d\99TE,rng\ 4¯ôÊ\9c
+\1c\14\92jSÓÁØÝe\98Ï¥Ôï\96·\1fz6Ï!º3lë`Î\96\eu¬\8d§=k°sàÑS\8b\9fMÆ[ù¥\81\8fã\1eoE\10\80\96r«\84f°ç\1e\9e{3&öYw\11'á`\82\9e\19N\9b\98<7\a.ÒñP]V\12ýïìv:\ 2é\9d3Nò¹\17 Ó¶8þµ±ð?6¶\92ñ£¸0\9c§ÆÚ\bp\83\19-¤Ð9«Ì49¬/ µ\80/¤¨êË\1d9Ô¬!lâæk3dFwJ«zsu¹I°À\ eã¸\i\84¦nÏ|/Ü9\14ñ[\19 6\eO\vÏcd\8aR!AÚ\9a³µd\9b¤wÃi\86\14&?\8e\95\83\bñX4 Ö±°ñ\99¿¤Þ+k4{weØ\rï{Scieà\ 3§ÙôÀÀ\ e>æáíB\1d¡\9d;~"Ôp\88\vñÒÎ<ª§Òå(°Ä\12º[\86¯¼\8c\81\19OÚ\85\ 1\13\8f=ºs\9dÊvá}צO \17\ 2÷ýæ;M\eCe\ 6\80W\8f\8exsÓíDô£1\1aE»r\ 1\10T9\8a"£\13\95b\e\92)\99º^ÏnÑ\8eF¼jGì\81_\96O«×\84Ý&|°\¶Ñ\90«ÏU\88\1dØç¬\8eM¥£¼\89åu\eàe\1cYó\92fw¸=\8cp6¨sàõ\83O7ý%Ó±ôC,\13\84Òãíçû¿Þ®ÞL)è\91ú\1e_vó\b·T\Äù¸»a\a\8bª¦ØÈJÿèTú\1ay¬b'9ª9UA6zÿjoÂÒN\83<\16åé±Gï\8cÙ±\ 2]\8f¹Á:2ÔrÛ
+º8Ý\9dc¬tÞjñÿ¾\9aÁêñ:\9eÌ'Þ|¶À\85\8fD73®r¿\1eü>ø\alN\956endstream
+endobj
+1306 0 obj<</Type/Page/Parent 1099 0 R/Contents 1307 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1307 0 obj<</Filter/FlateDecode/Length 1381 >>stream
+x\ 1\8dVkoÛ6\14ý\9e_q\91/K\8bX~į\ 4\180·q±¢M\9bÙ.\86bÙ\aJb,Ö\12©\92T\cØ\7fß¹¤\9c¤N:4A\8cÈ"ïó\9csï×£>õðÛ§É\80ÎÆ\94UG½¤G£^\1f\9fÃé\ 4\9f\ 3üYI·áE\7f:LÆϽ8\1f'\83Ãï_\8eºo\86ÔïÓê\16>ÆÓ r\82ý^\8fVÙ\89i<m\8b\1d \9dÓúFÊ'/V_\8ezÔ\19\8c\93!\8e\9e¬
+©)3UJ\19\8e)í¼(KZ\8a*\15$\1c5®\11eB\9fMCUã<\9eqÐS)\ 5\1e|\81°MY\9aÒk:#S{e´#¥ÉUi\92\19}{Á\1e»ozt\1ecì\f\86Ñ5!gQVô+}þøi\91¼\9b/^Í\17\1f\97Éb>{\7fÕ\86Ùï%S\ e\93Hä\8e\9c´wÒâÂÎ46ÙH\9bJk\\12¿~rÃɬ±Êïp~v¹|òZêÌîjOµpnk,Ìît1Ú\87\92¢R\1cÀÒ[\95ùrG®\96b\83dO9\bÊ\84&S©X\88\98\8e\16U¬äþ}(\98¦·×È!·Ò9TÌ\86Ê=ä\94Ð[\8d¯P×L8¹\8fõ\f\rgß¡\15[\85®\88Æ\9bN.½Ì\82K'\ fûÉmÊ\r½ÔÆ¿$-eN\82;\11\92d\f\94ò\94Dé\vÓ¬\vÀ\81¶Fÿâù\86Ð;*\84"\bnCv\85¸\93d´ä`u\8b\88\10Fz\18¢H\ 1\1foè\96¡\93\8alÃ\ fÚØJ\94÷\ 5FûÚ\86pþ¦ÌÑʬTR{\87ôI~«cV(\ 2ÃJ¤\ 6ÞüÚ(\8b4öÈbÿ\aõÉ
+¡×\92\9c1\1ahG¤[Iké)\95ÞÃ\87ȼ\82¥\1cf2oì\ eàôrm\ 5#5\94¯ûæ\9cú \ e3¨sÖ¢³?J\86 -¥oê\07êJ\9fu76\1d\ 5T?\85É\ 4¬\8d\84¢JiÅ\993üÕº\89®B×ïï\93rÿC\f
+?\7f\ 5@¹¿÷éÞs\81\9ec\fàûÏ3'ÙÒ&Ï~\964Dÿ>M-&&Áw&^\9b\16¥;à\86i/è\18\8c\0\98>-ç\8b\ f³«ùo\81ÂÇ\ 1JU`\v¹\ 6\ 2\17\0\1eLìI\872 ?\99¬½Ì÷Á·¨\87y\86Á\9fJ\ fXÍÞ]¾>Äú\87\8f«ù\ 5p(2/ÈS*©©ki\99G\87\17\98\1c¢t&
+\99Ôß\ 5\15¸ÌD\805¨\fTîòÃ\92Jc6@\0\90ÅÁ<â° \14±!.\9aÁèi8Áì?H$dí\vdº7Ü\1aDí\98'!n©àÀ\ 2³Ñ\8cô©2\8e\82\98À\15;G\ 5èæDÉ$<\15Æùðv\8b\8b \1azQ ¥\ f|\vïEVÈüæ\ 5\81sh\11\v\16ø/\ 6þï$\ 4í9\8fQÒÁº¶ ¡¾\87ÕäÂc\b(ÆÅV [\86Ú\92¢Å\81\801iµ.<÷\19ï!\80¨o`\12ÇïpÁ\83\90(DÍ@úq\89qù 3\85ÛúQ\95 !Q´ò hÌÿGîaY\aI\vòÅ/\ 1ÚÒd ©´ÖØã(\1c\1c8\a\84P¿\0Ú! gs\87/V:>¿\15:¤·\1fG\80z]\e\8bïÂ\f\8c
+Ç\96b\0Ü\0·Q59oE(\r\9c9/k\1a¡\8b[H\ eÿ\7fÆ\ 53\1aía\r\7fÂ\r\15S\r®\7fà7\ fíú\91´\8d\12z\8dÄ|D\eÏÿ&Jef\1aí¹Ô\8f×\8aÎ \15·K¦G$;Ø\rêò6À³\f\9a]ðs\83É\12f.\92jeYØT!UTuOzÎ,\946"úx\96³`r= ÏÇA\12hmÌ¡ d\85Q\99¼y\910å\81â§î·p- ä¯\94sP÷½\9f8@k«î8ã\87Aps\12\96\eTÙ\1aãÁ\11ÛèV\95GíNu ãåã\0~\f\8fX&Ì\ elRqvôãf\83Ù1Jú ]\e\84Á\931`¬]-Æ÷Û\1aÊÊ\13ã8\15®¸ ¡\17¼\8bU¼®a\80cb4:?þ¾\eØ ;ýV"£ê\ 2)-Tyºt°Ël°Âñt£Åõ\15×`!óßÑ!·\ 3Î*\87\ 5\0öãnãlw\8f nªô)ÆèÃ^\0mا9mÃî\9fao\9d\9eaÕä5\95·\93ÙÕ«\19][ó\85Ç÷¥É\9a
+¬\ eþ9òN\7f\8c\15\17\17:\93\ 1vÒüä'\ 6ëp2L&ã)Æ1Î\9fOØÌ|uôÇÑ\7fÖó\85\92endstream
+endobj
+1308 0 obj<</Type/Page/Parent 1099 0 R/Contents 1309 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1309 0 obj<</Filter/FlateDecode/Length 815 >>stream
+x\ 1\85Ua\8fÚF\10ýί\18åK¹*¸\18s6ù\14Ý\1d\89Ô\ f\97¦:ªª\12ÒiY\8fñ\ 6{×Ù]\87Þ¿ÏÛµ¹\ 2\89T\10`ðÌ\9b7ïÍ,_')ÍñL©XP\96\93l'ódNy\96'9-W\ 5®\17xY¦*Þ¸]®\92ÅÏn,\8b\fq?ÉÈ\8a4Y^߸ßL~û¸¤4¥M\15Êæ«\826%¡ô|N\e9õ5S'|M½öª¡\17ÓScö¤4\89½Àûvj,\99\8eñ\9d4\1fɳm\95\16Íöæfó\ 5Ðù\b=\ 3ö,Í@ySNßÜ\9fÈõ]g¬'m<IÓvªá\12¸o\86¼3J¯iO¢Ý j{çiÇPB\1a]©}o\91·\9dZnÍ7\ 6Rø-\91BÖ¼½!¡Ë\188Âo§8 ¨a\ 1ÂM\83zÎã3DV Nh7Ô\9fÍÿ#{`»ck\1c5jç"`Í¢d\8bk\981\ 2p\99\f¼ßQ
+\ 1+\8aýfK\b\8e~ÓÛ$Ohà \ e\ 1-9¶ßP̱ï»ËvQwQÀp$ý\11$ý[éÒ\1c\1d-\82\1d²Q¬=yû2$Ý\8eÚN¡¼§Þ1ýJ[<\ 6x|Ö`x\89?Mè\1fXèjÓ7eP\11fî£îtTpùµÙðÍô>d\9fi¡\99K¥÷ä\r\1d´9\82`'\9c;\1a[&ô{\ 5õ\94£J¨Æ\ 5!5Ù^_3=4
+*x%\ fìÝ\ fÜÖª\8c#¶G?b\8c¢
+
\13\16Æphë=
\r;R×Ôj
\ 1և*ki
\ 6\8e/
\1d\93©hýáiöpÿ0{\ßÒû¡âÉ$tvfQ1X
\14ú
\8bZ¸v7(~IóÒ¢èç0
\98£«°'è
\ 3a±
\1e¸
\88&FÿÆ
\0´ócVïBÝ×
\92qÎNfÄÑ:sá/8}
\16é`}/
\9a·´ë=¹
\8e¥ªÀ
\0\82Í
\ eØL¯L¤!kc
\90wÂ$Ñ
\a\8b`
\84\b\11WÓ{)Ì*¡OÆó
\95]g:
\84\91\8ak)k¡÷°¡Ä
\19\0\9fðhö4"$<añ`¿Ñ
\12AqáÖ
\ f§
\15z
\eÄ
\92\96\85çÈÞª}í/í
\8c\fBÝ|Ø«ãâ@%¦Aÿ
\82Æ
\99Û+
\84çS³És_vQÒç¦
\14]òìe
\87²¡
\8c²Tr%úÆ;Z
\7f©
\14v2¡Gñ
\82å¨Ô¿q7Â
\0\9cé
\1f|Tè
\13òàÆ
\91Z
\8d»
\98æ8©W
\19eY
\91¬Â
\1a?Ý=ÞßÑgk¾°ô
\98]Ù·
\90=
\8a\1e`g§
\84Y±À
\81ûÿgŲX&E¾Â?
\ 5\82ß
\ 2Æ
\87ÍäÏÉwæLæ
\15endstream
+endobj
+1310 0 obj<</Type/Page/Parent 1099 0 R/Contents 1311 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1311 0 obj<</Filter/FlateDecode/Length 1602 >>stream
+x\ 1\8dWMSãF\10½ó+º¸\0UFØ\86`vo°\9bâ°fS8\95CH¥FÒÈ\9a¬4£ÌHxýïóºG\12Fì&)
+0h¦?^¿~ÝúûhAs|-hµ¤ËkÊê£y2§«\9bëä\1a?Wø¼Ä·×TÈ\83Å|\95ÜL\1fÜm\8e.>½£å\9c6\ 5l]¯nh\93\13ìÌñ\9fìôC©\9aV{Z\'t_7Þ=ë\9cRïvÁØ-\19KAÕ©:Ûü%V\16«håüò*YÂÎ)®-\12zxÖþÙè\1d¹b¼\e¯\ÑbÑ_Y®\105®<~¾#«Û\9dó_Ù\ 5»4¹\ e¤¨ÖY©¬ 5¥{Ú\95&+)«\8c¶m LYRY¦\ 3\9f«LhÙU²ÒX\E\98j°9#\89vNç\8bË\18cpç\99ª*äu,\89i1p\9cЦ4!\1aË\9cm\95±áÅd[ª\96\14 õZå{j\1d\1c\16À©0\95&eó\vç\11º±-\ 5Î\1d\91É\99¶Ô\9e3?p?F¹3-Â%\1c\19bå\10:\84ßRî`Àº\16©dU\97ë\97@"\ e\88Ä\9e´\94u\1e\1fÚjO*E\1c\88*w\12\0"kUø\1a\92\89ó\r\9c\1d$MH¸ÔêÙÀB\17¸Ò°TUÄ5é¡Nè\83³\85Ùv^µÆYÆ\99\9f\8e\94(U TkË\85C\f5NeT¸iÖÁÕ\9a\1e\99;ìÈ\87\19üÚ\f!3æ¹Ëº\1ay\fÑ.¯\93+¦ÆÝÀ»\9dAPë\87\r1KÈ\14d\15Ìy\1d\ÕIT\85w5u{wÿð(\ f\ 5þû/¤ò\1cÇ\ 2Ð\1c!-:\9bñ¥ 4\99\ 3\96\19°Lè× 9OE¿Ý¯\1f\a<\19*³-\81\14\8e¹\1añæ\0\f\90+\83_Àõ \1c\\1e\82yb\82?\9d\1d\ 65q<\86\98D\7f(\0Ú\ræj×jxß24C9\84U)\93sôÀXüÙî\e\r²\0x®\0ê$\84å6aØR=ñÙwY,¸Ý\93c¢¢á\148\8fà'ðJ]X5\ eû]*\84~_&4Ö)tMã<³öP'¾×ôÂ\ 4ëvTt\15 í/\82J}ɹ\15zª\8að\84áH$©Ó\9cÛ\8e ¬ªà\88;Ö;éjpØ5\8c\ 1\vÁ$o®S¨Ó\ 4Ç\8bØ»O§A¿üïéô§§³§³)\11#q£è@\ 6Dt\1cDdè¥Z\ 5\16M \ fÒ0G·Þu\8d\ 4È\1eUj*Óîå¹è'WqÀ*w5W³r[D< \973\f\997\r$\ f\992^êY\99\8a»=¡G\ 4þñáóíý:i¿µb½v\90¨C\1a\80 ¯\1cüKf\f£ÊúôúK}bR\95· ö\92\19i#\84\83tI¯f(\85\ 2{Y\9a\ 3qwN2«ÞÂÇåâv\82\ 5\b\1e\14nÔð¡\ 5Ù\1aÆ\12DÈç}41²Ãî\906|fe\81®¢5 \ 4¥ÞOÜ×
+Õ0Ì\1fî\14@˦g¬¼øüª¿Y÷S´G$´\94tï:?z\84\9a½\16\8a)Âkîb\ 1\a÷(\94®«riÊ Û^\11\91u\1a\ 3~\rû\94Ob\85\ 5WhÌ\12(\8dÊ|\9c\12}½¡\8fB¬÷\ 4
+hLÆ·°Î\88#ª;\9e\9e\16M¨1¶©TÀÎY=ÐfÂ\80\ 6GF\82Ï&¨z½U>¯x*CDv¥F\9c¾\au½\99õÙr\93\8c\92#º\85ï\13\8f\
+ý2À\ 2 EêGë\14áß_ \16]à>\ 5\9eÜã<· \18Ò±\ab>£´C©¥Ú<eæUBy\19ì¡Ñ\99)\fï\b2\15\87Ê\a\86k:×\ e\8c&´ÞÜ>ÊjòÆ»PæÕY°\18\e\8eù\86èP+Î\fPI¿\8b4jûl¼³,ý\13\90QN\f&n\91[n\11Ì\19®Ç\ f¹Ë%f\8e2eFG'áÕhËT\13%Êè ýõfeâ\98Î#I^\ 2ûO\9fL#NI.ò\1fQ¶#\90\87\11ü1-éÆÑ\16í1L\ 3ÖK\19ý\9c\8dÕqîúÎ\8e\ 6»Ð©*VUôg83d~<rö¸\1f\ eogÃ8\17à¬\1f'à0Ú\7f¼Û\138åù\ f]QÔ(\f;WL£\8fãBæ\12w«¬<\98s\83çØÖñP_x¸\8cû¤i\83®0\9aÐ$cò\q°\94{)t)veÔ\88©;!Æ\eÙ\92\9e\89£\90eMª\0@r±~ÒY\ 1í\84\9aÎ7\ e\eÒ{x±\ eË\91fÖá<3\92i\ 3YÖ\1eng|qâT\7fSu3\f£ã~g\19ì\1cGy}\19¯Xc±(ª\16Ä~´Q\&ô%.\93\a;\15û½øô\9dUâ¾ ^.\91,d\82\97<^\8c\85,\88ÝRé\1a\1dw\fN\ 5S6\ 1 ãè\17¦\94ºjD\a[¯²¯0°\8b+y¿ÎbÄA\15\14å:í¶\93Ü+\b&\8aZÐ\12\ 3\89.\ 5V\1e*ýk\foÃh§[\9e«(_?\ 48\8a~m\1f¶\ay\7f\91b@p@{ì:-æx\1cN:Nö\9a¡\9c¶¥¼|ôï2q\10&¹\8a[ôŧ\9b\97WËy|óùÿ/wW««du}\83\17D¬áïÞqâ?o\8e~9ú\a7ýÐÇendstream
+endobj
+1312 0 obj<</Type/Page/Parent 1099 0 R/Contents 1313 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1313 0 obj<</Filter/FlateDecode/Length 1740 >>stream
+x\ 1WÛnÛF\10}÷W\f\8c\ 2\95\11I\16e[²óRø\16Ä\ fq][m^\ 4\14+r)mLr\19îR\82\0\7f|Î\fI\99bâ¦(Ê8\0/»;3gÎ\9c\19}=\bh\84\7f\ 1MÇt2¡0=\18\rGt6:\1dNèô|\8aû1þ\17\9abù0>ýÁ\87«ÙÁñ\87S
+\ 2\9aÅ8kr>¥YD8g4¢YØ»·^\93_)O&&ã)²Úe¿zÚØâ\99b[ÐÖ\96},Ð\19ß\91[Ù2\89Èy\93$´Ð¤\16 ¶[òÛ\9c\8fÑät±Ö\ 5e*ÅGGs\O·\8f\7fÝ>\92É\8ef_\ eF4\bN\86cøÐ\8bM¢S\95©%Ö\8b\81\15ìëÌãQe\11µ?×f#ãòDmÅPb\9c'\e\93Z+\93\88\en¥
+í\86µ\95ñdxÊV\9e,<ɵÍáhlp\eg²%ÅØè\10D¨J'Îo\11=ǾRë*\98eb\17*¡Ãe©aL\85¡-3\7f\88\18=Ǭh\12\135ï\eÃMx\8f:ÕéBb\ 3º\8cÍÝÃõ/\14Ú,Ó¡76Ã;|à8\9c|®ü'ãØ\rAOìö\ 5\r¿*\9dd -á\8axØØ\97U\1dlk_\e\9f\1a0.\13gq\1e%V°«a\ 1l´ÔÞ3(\vã=r½¨@Î\v\8b\ 4§\8c³·\96\90-åª@r\91%G\12\83FH)¾D\b\ 5nci\96.¢\8e?&Cþµ\8f\86\b?\1eÒl\85(}aÂg\ e\17Xfp\88³àr\15jN\8aßh¸Á¨Ù\Àb\ 3ü¸3Oó\9e^¾§A4ÆÑÎk\15±íADãùQ¿c^6¿Zás\ 6W\82ëà¾6à\86t¯7\ 4ò:ä\ 6±Uq\10\83\93Ù\rØRPjñ\90\98g\9d\0\1e\8b¸\8b\ 2©Ä\83\10\võQtì\82k*
+\15\93\aî\ 3\0)+\15E ªë\93³p\1d§â;\16!n8\ 6\10`\92i\98i\1dé¨\9bÂ\19C\82u\ 5Rµ¤&Au&\85\17\8c(3\v\8b\fV½ºÐ\98\85\1f©rÏ\84ê¾{ Ú\eNĦ° À¼çr\1d\9aØèn\167Ư$ \87\86Ë4æ\\1d6 B$.]H\82çG\8cÃñ\87\v
+ 6,;\83\93Óª\1c\ 3\94å\90®\9a\1aTaa\9d#W.à\94«v½\8aÕ`<\85Ò¡\88?7\86\v\9dh ÅÙyRéBQ0¼\18\ 6ÓyO%ùJ\ 5\ 2³Zص\9e\1fÕ\vVP¡\ 5s©Ì#å5Hd!2"\18\90\e<¸2Ïm!pu²Wè<1¡\12úÁ \b\aç\9f\vvÏqZ@\18"U\18È\8f°(´\11Ò\88\94WäuUÁ\8a\e\80»rB\85+£EhÌN´\1aí\90úpµLDÚ\85\85Y\80\1e+ð\90=fýá
+\8aµò%(YæÌ£Èı\ 6u</àbÞ\1dÛ\94ÿ\8c÷êý@\84*(»\8cf×\ fÇàC\9d\vÐÀèaÃY¤Hså1\80Ð\86Â\96"\0²¹\12Í\!\8f;²u\90ô\85\8ac\13")ÜDDÂ8\bøÍ
+\88\8cB\8e \1d\9fïî\9f`\88;\bkÄÞ\v ΰã\8fn°\8a[Ó½öWw¿?I³qß\95|\92Ø\r+Z{\15£×¢<ÜÊ\R%\18_ÐÏDy\11`dy«\ 2¦\áôµÔÅ\96I\87\9aêzi\84¶¾\86ÄÈ1k£v'\0¶?o\1e ^á3â\86n
+å\82\93){Ô9\142\vjd\0\9f!(\80\ eÖs¼ªm\1aõÚ\ 5\99\8b\9e}×±*\13\ f\9dG\8fþ\97Ñ7>cû.\87àWaSñNâgD\1a×:¦\85¯©\ 6\9aX\ e/êeÒ!8±\15§hÃS\ 3K}kr\80\12Ú¤î·<5\88ò¶÷+l`¹«Îè\18fE\ 2\17Ñ;ª|µ\19T/mÈßôã¾`)Å,{ö\14\88Ó!\1a½Óö
+ÆÆ¡>»\ ew¶ô\19³\ 4\ 6 º8ëïîïg]\16"k\95NU¬v\15÷w\ 3F\8b\8b ×~~\97fÍ\1dPè\91r^Aü\8fרO©\8f>«7^¢ñ\96*é ÂMÖ,K\94+\8f\19ó\1e\93\aþ^\9c\89&á\ e\8e"
+$\9dÿª6[WÿCas]x(Y\9f iÀ\1d\f\12D\1aQA\11óy\12VÇnçȦ\1dÈ('}LZ\ 2Ʋª%\ 4\96\10\fé#Ô\8dÇOjg¤\12+N\948ñ\e[lϳh\11Ü ®[mäu\v¢S<\9dT2\8e\1a\8cT\16ê>Ï`^\99L\b\8dJ1<\e¦vÍÏ\109\ f\11¿ã\19\vdVÏÈÁ'Ã\1eÙØwÂu\90ï\ 2óáV+\fCÈ\14\86()\17\91\7f)\84Zä¹,àLMªj¢«x\91¨%÷'Ô{Ä\99p<¢ÿ+ø\0<Ø@\1feãW\1dÓ,\19Uë\83@HKì×Dc3*\97þ\ 6J½\ 1%\8fó\rI\0Ë\8eìÝaã\1a\93\90a\12¨¦\11\80~\95nC\1d,K¬£÷UNFtQ'v\÷zúù5ïÝ|ºªÆ\ 5VÐÑð\9c³¹·ï>øû²z\81»«æ\13î¯ë{ÜÞ´^ß6Pýè0ziVRû¶}ßZA/o\9e5øo×\9bçí¹SËeðêëÞÝÛ^½\83WïöÖ¾ù Kßtçå1\0&\8fÒæñûó»«þ2Æ\87\97Çñ?àô¿y´\aÐwþt^¼\8d\90\1cSãËÞ·®úíÉë+9æøÃyýë9\98à'÷ù M.¦õoËËOW\97\ 4ÉüÂCÂ\8d\rË\14ã\97¨.#;h6\f¦cüØ\8ez?\1d~O'çÃÉÙ\18\ 33¯\1e\8dø\94ÛÙÁ\1f\aß\0¬Ôõendstream
+endobj
+1314 0 obj<</Type/Page/Parent 1099 0 R/Contents 1315 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
+1315 0 obj<</Filter/FlateDecode/Length 1765 >>stream
+x\ 1}X]Oã8\14}çWÜ7@j3ý`;ÌjµR\vÃ
+íRX`4/H#7q©\874fl\87.«ýñ{®í¤©)\13¤´Mìûyî½Çü8\18Ò\0\7fCú8¢ñ\84òõÁìþàÃÅ\80>Ñý\12/&§øRÐ \e\f\ 6t\9f\1f\11õß½(\ï¾ï¼8¾ÿ~0 þp\90\9dB<¤þç÷vïñQ\14\8a\8fð²ûeû\88\9f¦2ç£oS"Ügþ~\865øq\8e\8fæ\9a\8fy\ 5.|Á¢ø\8d\17ú\vOÏ)\95Ú¼ì|>\1c}½\9cß=\1cóÒ\ f\17'4\1c\86ØõG\13vîLWVY§ªGÒK\1a\93\17\95t\96\1e\8e\86=\1aõhüpL¹®*\99;YÐâ\95ÜF\93ѵ\93\86\17ÝbÕí\bkúäVÒJ*4UÚѳ°\96\16F\8b"\17ÖÙ\8cî¼\\1a6\16\8f³\11«_ K¿ÐZä+UIKº"åzÑ\b\1a\11¿>i_·/ÆÉ\8b\8c¦ÖÖkIKmØ\ eZ뵬\1c¾
+G¢,\83m\89êV©0\92]\ªÇÚÀG§i!IU^\90\15\90ºÑæé\11>?ÃaÖ`Õú¹T¹r
+&[ñ$\1f\8e3º
+>Ð|øí\8cý\b\81\ 4v\95M\14wtÁ½s½\16Pv\850IC3£7\16\9f\ fGJf\88\ 5m\14ÌÏuY
+'½E\b*VP\89¤ÙÖßÖÂ\1dK\80§Dµ²]O¡\9d±APø\ 2\9d¢*\9a`\91F\14M\exz\e"#\1fa\ 1Ö`¡24\97nvy}G\15âea´[¥\9a]\16\9f\8c&Ù §~j\empg'\19\v\19lõs\8fd à)`Ô»º\ eA
+!\0þ|p\1c\12@Ï¥È%\87]"\r\8cdF\81[\19)\13;"¾[Äx\88Dí!w\e\ 5m\9d\ 4öB\95&\8fQ\1a\1c/_\85É«1õ\13¥0&õñ©Ò\9b\8a\90\81Rç¢\84ÿ>\98g\11È\88ì³0Nåu)\80;_CY0\93KC@Bñ"*'\1e\19±\89V\98Uq]c!Gc\9f¢®\9f¼\ e\80\ 3D¬t\b>ÿÞ\vÎ4\91×{¢Nh"\fJÛÛ¦6Tã\9bbÓË%`dW°±\8cE\95{\f\ 1ø\88Gè ð\0¥\f7^\13'\19\99^\ 2o\ eqnDdtÿ\13·=Pb\91z\1c\19\99Kõâ\8b\fÉj5s\94\vz\92\12\ 1Itc\876E\83¶¥ÈcÇáh7\90B8[óDã\1d[\86\17\ü;ÈAôC¢\16\ 2\1d¹\91\1a\10á\97ft¡Mb\82c9h±\12p\f-°Ûó\1a+àÃ{aoÂmµ¯Æ¶\ e}HÐ\aQ\bìN0#QÎö§`\80\89¡\ 6#\0z~û{ØóÆÆ\95ì>Z£U\85ä6|(j·ÒF9á\90\95C_ÿ±\95Ç.£\bOÌ ¥\17%"ÜÛ4Æ\90CÇBæ¢F\86E\13\1ddEV~´½\a\17\96÷Fb¢|]#\99Û\80ùÁÑxö³
+dt¹Uí³/èÐ\19È\91Å¡GÝ!Ú²Z*±(\11\0#®M.\9b\88\ fã\b½ê\fÏж\9bÚ\83ÜP4{k\1fø\93 \83,0Íi³B\fÂ\9c\89\95\84ÞÓ\ 1\9fÅÈ}I\9b)Oú\ 5\a¯P\88½+_C(\e.ÐàÚ\83\ f¹ã¬Vºêïf¶ñ§\9d\v\EÈÓ³V~\847à\8b#¯Ôú\89[Ó\123\11\93\10\932T=+é\14\9e¥W]cr×eÁFñ<Ç\ 3Óô¥$y\95T\8f«\856+\vRK¿\97\15ÁblDWD\19\88n+n2k°Ï\81ñl0xYf\87\9cöG'aÐÝ\ 5ê³åd³0ÂãÈ'ú\vuÔ\18\149g`£Û-»Ä\16ÏyA²'è\19n7y*²ýÉsc\8ai6ü6ó÷3\7f?÷÷ÏQÖh\98yZ\18d\8d¶\9b\ 3SÝùͲÀ_ý\9deméÆ®\94qg\17\93ÖÎÅ\1c\17;Apý\9d¥`E\bä\eª:\a+\b\90ö¨n!Òt\85ÐÌC¯³\12s\13\94©\87Ü´u\8e\1d¾ÔEn4詨^\9b.\e·¦P\9cë\rÉ\7fÄ\1aÜ´ás#f\ ed5\ 3Â\ 6fÀ\93\18M\ 5\94Ó\ 3po¯\ 3\84\18O\81Æ\88f®\86©ß¤1Ös(:\10+MöµÊWFWê_\0\18t¯S\8f\9ecetéÀ¸1-}Å\80\9dÿ¨¥y\8d\ 5¼Cî\1e\8e8? ê\91YÐåM¢W\14\ 5Z\fÂbÎ\15bWx\1dÞ§y\87ÞÑ×ëÛ?ÿ¸½þróûpö[ì«Ìûh\83@4¼0\9c\15ÐP\ 3\85HtíÒ\1dÔ0C\15Æ1qô
+wxé6Þ\b#+ \ 41ÍÖu\ 5
+èqÊä*ÌÒÆ©È\b#\9fIÔCª\93eéé\8fo\99\0
+·\92½\99Dü\12g\ 2xpZAü¬
+\ e¿\88\84~ZUº\86]þ8ò,ò'P+8 èËù\r:\9cq4\1c\9f¢±ð\v\9fMèÅÙa\9b÷@¦¹\ 5-RêS A²&$çÎ3øÏU½\1e\81\r\94eÌJð\8a]ÙKä<Ä`0Ko\8b(\9c\ 5\ 2\8fÇs\1fÊÄa?12òñfáE8Â$Qm§1/¹òüv_4 Ãæ+YÔ%`\9c2¬m À\ 2PrF\ 2à\98³¨\r\96ÊÑ\ 6wôÉEOhÂ8]òÁd\81aØ\89¤\17\0\r\18\13\85F=óþN=¥\874?fJ\85£Å¯ìý\87\8bÓxr\1eN>f\83Ó1M>\8dù\14s7½\9aMéÆèï\18\80\bs\8ec(ø8[ËûúÍòþÇ\11þEQ\1c\rqúÉÂ1Ïg/´¢Ø\7fxÇÉä4\9bü2Â\7f7xõÀ\1f\98?ß\1fü}ð?\86ðcRendstream
+endobj
+1316 0 obj<</Type/Page/Parent 1099 0 R/Contents 1317 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
+1317 0 obj<</Filter/FlateDecode/Length 913 >>stream
+x\ 1íWKoÛ0\f¾çWð\98\f±ëGçd»åÑ\9e¶bÃ\ 2ìR P\1c¥Ö\9aH\9b$'è~ýHÉ\8eR#ÃÚî2`u\0\99VLò£D}¤\7fôRHð\97Â(\83¼\80r×\9b.z\17× ¼\83Å\ 6ÿ(Æ(¬!\89\93$\81EÙÿR¯$·\10®©V\aÃá#3\96k\9cþ \8c\1d,¾õ\12\88Ò$\1e£r?rWP\ 1?Ñ\8c8ORGÇûI\83ÒMº\9c\85'\0|\9e\fi\9cºqæƹ\e¯\86бvªxV¾É\96\93Ûþ\9bÛ\ 1\1aÈ\96Ó Î\828wbc9Kã\82bó8³`\94ÔÃ\13âDËÞ¨\e g¶\9c?\e\1fFÛ"Á\90\83xÄ\97.=>´\9f.¯~\ f5\ fànòå<<!ÔÜAÍÝ\92æK\82\8aot\ 3æzϵ\81\83°\150p\8e\80mhómÅwÀ4\a©dÄj[)-,³b\8f3lÇML¦.®/!M}rE\99[Ã\89EUaà»\12ÒBmÈüV©{!ï@H2+4`Ö\1d\94¾Ç»¸«VJWJAI0.!\rf°Ò\90!¬í\16\fçÀð\8e\9a({¼øêJÙjØ®|\1eg´\7fÞÛÑ\ eä\8d\ 5Kv\94Ü>8c\1dC\1e\91:´Þ]`\98ðY\11_\92Ñ\ 5ùÅ\88Q÷GÍeÉAm\80ï¹´\ 611\vª,kÍ×°AÌ.a¤:øIãæÈßV\95l\v;\7f®Vî\94é\100ä\9d@nû´Y·\83\18¾V\\82°`\1edYi%ÅOnÀ\e\80-\9eÎfïÈÇZí\18®pÇ \9a¢t\e\90\91;\8eïÓÂ\9d,fÇ3\86¥\ 5º\b\8b\98\ e\81É5j(d\860\9dÅ0q\89â\12¯bæ\14âÚg\14z\9e9å½(YD\99ÆÈsÇå£h(U0°{Þä×\91»¢ìÒïÇ\7fOZǬo\18ùôÔ\9f\95\89
+Z\92A>\bâ\91o(Ù\880\9b\9dùïø°-ng\97ïtÒ\9d¥¦´<\99º\9f¿a/.`ÿ2\9f·l|\9eÏ\91â;¼`j¹BÂ\1a6Eä\84z\9eBë¡\94\10{eCXÕ\16k\99\85¼Kð×B¢ó\87¡#ųDMÌîíaQBB¥¦bÐ\80@^\ 6vGÄë\8aè\1f\88xv<ciS³\b\9d«s\9a\97\ 2Ë\8aC±\13ÆPÁôõ\ e\1aR\8e¡\81
+\91cUä\\ 6Ø©±5\166¬Í\1c±\89\r\ 6\895 ¬\84D\1a§\ 2®ùNí±>Q\10U}ìç\1aÿj³ÁX\bö#\1ev\90\8ed\fïioN:ÉW6ƾÏ\13i\9bµ¯l\1c>\12N)ó¬ü\97%é¥}ï+Ï·}û¸éÛÓb\14'ã\1c\8aQÑ|\ 3M>N'ðI«o¼´0We½CúÁÆ_IÊô¨U\88F\19~C®û)¶É1L©¥%Æb¥V\ 6{AßÈ\93Æe1\8e\8b·\19~~ÒÛIFsW\8bÞçÞ/ø`¿µendstream
+endobj
+1318 0 obj<</Type/Page/Parent 1099 0 R/Contents 1319 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1319 0 obj<</Filter/FlateDecode/Length 1573 >>stream
+x\ 1\9dWMoÛF\10½ëW\f|\89\v\98´$[²S4\ 6\9c&\ 6|\88âÖB\8b¢èaE.ÅMH.»»´«þú¾YîJ\14í¢AaX¶Hî|¼\99÷føçdFSüÌèjN\17KÊêÉ4\9dÒâb\86ÏËë+|Îñk$\15\93÷ëÉùÝ%Íf´.pdy}Eë\9cðøtJëìôq×d¥Ñ\8dú[8¥\eK\eé\9e¥lÈ\95\92r]\vÕP-¬\93\866F?[ü\15MN\95ÎD5ºaéYU\15eºqªé$9M:Ë:sF\9bÎ}·þ2\99R2»Hçð\7fêJeÉ\96º«rx$Að ò\1dþ\b'É*×ùpÒpl¾L/ùØ}AR!2CFw\1cÓÏ3Òø\9cS!Te}Ð\85®*ý¬\9am\1f\8e\ fá{¶\ 3 \92hh%jiI\17\88¶nÙ\12¾4$EVÂy.ù\ e\ 3 \1a\91eÒZµ©$5@F\9b¯T\18±eãB¾\b\9fQrø\959\15\bGØQ¶\95F4Âr©j@ã¤=\83iï!\1am¤Ú\96\eÝ\99RkÀ«¬³>ù\ 4\85\8b ÍRbø²ÏãÖ9Y·\b\ 5`\ 3øFf\8eÿEìv\14ý!Q_%ÆË\17¦\8fÂÃáo4ÚqE\8c¬õ\13çctÍN\93£â\1dÀø\96¸ç/ãF!u³\87ù\80(º"ë\1cà/¼g\1fܯ÷«GBã=I´\92r¡¬Mµó\9dÃ\95AÆ}\9dÂc¾\98ʽ,\ 37í6\0\1d¹ï¨³Ü&ý\85DY]¡ùÐ\8fF\8b<CÏÓJº÷÷\9f\1f©\ 1<@\ 4\ ftL\92\94Öè\rY\14@Û\92\0ͬªU%\f\ 2\19UÞ\95\82³\ 1_¼«\10%ÇK\1föYí\v\1d»ó¢\aìüî-Í@×\ 2õ^P²\9c¦×L\82Ù2]¤ô(\1dh¶¥®\85\ 1D\1cÀ\90ðÉü*]ò±\8f=q\ 4=\8az#гY\89\8eeúà¼jr\90\9bVkØe ÷·káa¶ÒyOHwè\fHh`îpÕ[\1de\1f} _OòA\98´Ó\1dÕ\1d@\16yîË|àn\19åÐÇdëM\8aÖFC(\94\9a¯\ 3|++\80\8fbE\17\9eá\83\1e\rôú}[é\8d¨ì\1f8\91y«Ñ]\85ä{¬\16{qÜÓ
+ò\ 1yêÚV\eGïh'}+\1dÃ\1a$é\17h\87\17NT¹G¶5òIéÎsr\96¾MQÂRp\8ehîV\18ô\12+W.\vÑU\9e0\9f\12\18Á\90\94â rØìHW9\9eB)¢õ\11¶½/À\81Sf¯M \a\v«\83¢oA\10Ûm·\12Ò\9a{Û]»5\ 2â\86r\84¸¸ø\eðüÌ·\ 1\82\ 1´p¹£Jrÿseqiäù\90\ 3\f½iô\e.\8a\80òãQ¨N¨H/_¨HlêO}ñjº\92N\8e±?ý/ÄOOzÞ\7f\95\92\e\9e\ 5\92yÅn\87,µ é\16÷¤AÎÞ\11\82ªÏ \ f\9e,Ð`1Ê\86iÈ¢}de<w~Ce´
+LЬ?\9fW\1fá\84[Å\93&¥\ f\9aV\9f×\11·ÿ\93dè} Zk\b\vô£a¥\1c\ 5Ý\17?x\r÷"Î\81\91½.¼à5#0d°o\8cF\ 2-\143äÆ]°§ªÊ$%¸#ûF[G¡ä:ëx\1aúyí\91Ì%fa\85\96^iÌr¯\80\ 3}ñ\86{\91\81Ö#;#ÛJe<ö\11\81\9fÀ\1a\ 1@êQÛ~\8e3\12#¯\11\17>\ 3i \81\83ôÂOôJþ\15d\9ddó¤À\ 6\ e1¥[K\9fTf´Õ\85\83ã¢C¿ÂBÌ!tp\8c\b´\1e¹m\8dv:ÓØ4ú
+ ~\9e\97Xr\fì£#À\r§2Õr:½\ 4ÁÃÀ\1e\13ÝS´Õa«\bBUt®ëë\rE\1cyõ¾\92\9bÞ¥Ço`\91bL \9e\97j\b\vo"~Ãx.\156\1aÌ2ÐrØNÇ3`ä.\8b[Y@õEË`\9d\e¤ì\99ÀÃ|Ø\94\91-^θ\9fN^\12ÜKÀ@²\ fº\ 2Çc\ 6Þ\16,\9aG\9d\89ï%bÛð¶Ê\ 3Bm\81`¯t~°ÈÆ\1e \85NDa\1a\14\89\ah\98(Ø üv\87qþ\ 2\8f½í¨(<´°\ fø\rÒëú\9e.ÒD)7\a\ e!R¨òhò\9eñ@«â\1eèÁ\e9\8e³íþaï/tËÉ\83Qµ\80N\ fØt\ 2{\12ëtX]O~Ä\1ent5²ù \1aY%7P;Î6¹y\88\1d\9dܬ\7f|Hn\8e\fæJTzk9ÆÈà·\v\1e\15ñÛjí7\0'\91È«]\vfúu\82\v7H#Ä8@í\955\80'4³\93Ï\869~\18ãAûãr0Ê\92W\ 5K~'8¿û×ùÞ\87ö\8enü~\87´\ e\11þÀ\ 6_\9d÷ÏÐ&ùê\11®qx;á\90y°ô\86ûw\89a²±²ð\895uà×·ýùÝuXIfK¼Ë]_ÐòjÑï~\8f·\9fÞß\12\8aö\857ý\ fCíå\88\93x ¹\9aãõî[vÅËåuº\ÌñjÈ\8fO/ØÌÇõä§É?\1fƤëendstream
+endobj
+1320 0 obj<</Type/Page/Parent 1099 0 R/Contents 1321 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1321 0 obj<</Filter/FlateDecode/Length 1416 >>stream
+x\ 1ÍWËnÛF\14Ýë+.¼©\13È´$Û²\4\ 5ìæ\ 1£\88\93Æ\f²hº\18\91C\89 9£Ì\90Qõ÷=w\1e\94ÄH)²jmøÉ\99û<çÜË/\831\8dð9¦ë ]L)«\a£dDW³\8bdF\97³kü>Á\97\91T\fîÒÁùËK\1a\8f)-pe:»¦4'\1c\1f\8d(ÍN\1ft#©Y\8a\ 6ßJKU©$½~ÿ\98ÒÃ\9b\94î^Ðã\8b\94J\85\87\92l=O2
+*ÊJ\92.Ü?\1fE=\17d¥ù*\r\89¬)Õ\82\84u\8f>Ü?<\86'OÒO\83\11\9d\8d/\92 ¼\9f\96\8d\95U\91Ð}A\eÝâLCsÝ,Ý\13>{þò*D|º.\95%Û®VÚ4ô\8c6Òú\ 31¥Ó\13Ò«¦Ô\8a\84Ê¿cÁGø\8c~U¢\96¿\1c³\81<\15©z\9e÷"^\97UE\85(+j4ÙF\98& '&Óä\92sJ\97\12õ\16øjÖ\9aVÚÚr\8e2ÙL*aJm©Ð\863u\15jW\94\19\1cAbsÅÙ\e½¶(]B0\83ú\1aÛP.\eøÃ\91Ãwz\ 1F\vÄ\85 Ø\kó\99Ð.\18QÜ\94\ f¥Êá\84n®\86ä\9bÆõ\8aÿ}H©\16Ù\12ÝçÞ\ 1\r\9c\88Ò\r[(ÊEkd\8e¶ö|®P\ 6Æ\81Ø5ó\×ðè\13±\12×ó\7fˤË\9ec\ f\91\87(Bü=¿\bÖ{±® ç/oh\fT3¼Ï..};ÆÓd\9aÐã¶vw¡Ä\8cf\ 4üæÝï¯Þ½yÿ\96Mïòãlr\9dL]?ÑgtæX§\8eÖ¹+#üà2à2\97=\9fCWY¡\8e¥åH¡$JÎ`óAhðr\8fkÞ0óÒ×\82^\vÛ\80\83.Oüüx\8aöíR\eì~
+R?íye\v\16\94`Ö
+zkÊZ\98M´ù\eðctUI3$Q5KÝ.\96.\19E]\13\1cç\9c\85\90:*±±\9eѸ,íÇ'\ e\ e=ÇüÈ£'$Pû\ 4\1c\92\91\0âE\8e\19¼\v\97\87ô8\91Ð(Û\80NF×TéLT@®Ë<\´®5 «ËÌñ«\ f\\87ð¥ø\8a¤#ì\89Á\fåJ8\82\ 6Éc\12-\8cnW Îé\ 3ïhDLt\8f\1c°\95;ì\87xzéÆ´$h\16i¿Öm\953>\84Bº\9a\13Í©ó9¤V Ö\10\87\ 2>´\89\9e}\8eø\eª\89Ry\15\81\9e60ÓóËUX\19i¥²¡Ü{Q\86¢\1aÏúZ|\86\0\1c\94¦¤±\90\89m\98}!¼g%Þ\12\8c¤úZ\1aj©xÆÈý"uîë\16\92Ç\95ØC9PçE\1djäNhUmz â\12÷äpV+T§+(±ô\ 3\8a\1d©ö\9dy\ 6\1c´3ìùdRr.\ 5Щ1¡\16q\ 6\ 5Üü¹¨ô\T\7f\81½\18\89\90µ0-÷GèÏlu;ê ^q\98ì\aq`êí\9cM\8fÖÔ\ 2°À\97¨,\ 6\92\91\854\ 6xÚp\999øCäqS
+ã\99ôZma\85øM\8eJ6ºW\a\1e\19\124r»Ã±¢Ø¸@üPUFt\13$}\12$\9dÂÇ\91âð~1Âþ\83Y\1cOîeØUñÀÁP\1d°/hÉ÷\ ec\96WHºÂ62½ò-\8cË\88kKØ\ 6\8e ²\16]\ 3öDóÛ¥iH¥ß\8f\8cüÒ\96Fö\89ö ÿn\86~\81ò\8d\ 6Å1¨Ñ\fÌo'3\11u^\ 4ã6À:\1f\15Ì\9dÍÀW¬n\1eÿ{5\8b¢\ 5Ê÷:Ï\0ê\88\95Ð-´h»CP@\1eó9\bX®\1dH@hKn\99\8a\9bÇÍU\fÆbfuC\ 6ö¡W\8dTýM\fb¸\0û\8c\9ckÌ74L#e]àä\90\80ó²ùɺñj[è¬ \85Ö9\95¹\14¬¢-\9bdÃn"i8þÜW\1c\Ù@/ëX\8fÿ
+êª#àÿ\ 6éϵ+wè¯Ó\ f×\12 \v²ÑßZ \85;\ 3p\b]á\86l<$Ö\ 2b\8d1\eÀ\8b\a\864¿W¬\97%\9aùíhs»\15\8eíµ,\8e\94>]R\9c;Ùíí Ï|L\ 4Þ\9a\ 4ë¸\r³\aHù.\1dÜ6C'}Ñ8¡L\0aý\ 1Ìo\13\f>p(c´E\fÉ*Î\ 6(-¿Q`[ì^a¢ÆìÆ\bÐÅ\b\97%ö0©Ü:\ 6Ð;\16\97M\ f¬\81\84\18Onuèû\8dËó,¼i\8d§xo\9c]à\rñ\82\15ìñöõÝ-öAý ab\1fÌZ\9eàØ\8e´Û[Ïâñ³ë ^$óÓ\1fY¸/§³dz5Á¾Î\17G\97\1cø\8btðÇà\1f\98\84É\9dendstream
+endobj
+1322 0 obj<</Type/Page/Parent 1099 0 R/Contents 1323 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1323 0 obj<</Filter/FlateDecode/Length 1349 >>stream
+x\ 1½WMSãF\10½ó+:>AÕZkËø\83T6U6\v \a\fY+Å!ä0\92FX i\1c\8d\84×ÿ>¯gFF\16°E.\81\ 2lk¦?ß{Ýüs4¤\ 1¾\874õi4¡(?\1ax\ 3\1a\9f\8d¼S:\9dMñÚÇO))1\ füÑôõ\83Epôùò\94\86C
+\12Ø\9a̦\14Ä\ 4;\83\ 1\ 5ÑñUB;UÓZ<K\12\ 5-\ 3ÊE´N\vIª j-I×a!+¼\14\959¹Mõ\9a*E¡4\8f3\15\89\fwt%K
+KµÕø\8b{\859\1cÁd\9cj\11fò$x<\1aP\7f8ò|\ 4p¼\12y(()U\ eK\91ÊÓâ\81\ 4½i-Ü\91\96UÅ'8 De\99Úò;µ©RUhJm¤\7f=d*\14Ùß8\1dñ\ 3R _è8ÖyèEªH(I3I?óÓÏ\97\ 3:³åéû§(!â#÷\15«\À¾Kð\v\15ª±7ðfí\83\a¡ÿàܦ\94\89,K\19\7fÀ¦Ò\94Ég\99Ñ\17\1aØ@Ïh\88þq#û#\13çpâM=Z¹úÔ\eZp\ f¸:\88ZÐ×\9bëùÕÒÞ}\ 1Aß\9fz\13\ eÞu_\0B"\8eù\96í\v\9aø,KÍ}\16t\97\161l26¾Újìû\9b׺BI*n\10Á¹8¸OB\93hÊåú~XO\a\18\8f\16;\8ae"ê¬útèñ¶LsQî\1aÏ窨J\0\0 KTÉ Ú\88
+\91KJá.Óê\8d¦»S\1d\98²\ 5\83k¾\r¿\ 5÷¤Øá3TBÓ6Í2@Z\8a'J\93nj¥|H\19ó¨\110iíwRíx[Êjqu³"\13êý±í̯ÃÅ/÷'pUéîj¹B×`UÄ\ e»tûõÜsfý\89Eæ%¢¶¤Ô¤àÜä`\19 @[`»\ 2b¹\97\1cY«y°eH\99\vC(î×a·Ñ.\83â\1fæ\81\1akôJGe\1aÊØ£@¡hOÀÏ\811¼= D£\f\8c\13\ eë=\12w\¿Ciú\9fH¼\93º ¨Ãö7Xüþá\16\8d'c6Ø\16ä¾ßfb£®V\8f\ fK\9a¤\ fk[=\999\853¸q\82\r48Åf.8ÙfmoúÍuï©}F\8e\90F`z´\11%®±\88\83óÐW¼0O´å¦²x\ 2ÃØ"ËzU\ 3llR\951\ eCk÷q\18NYö°´Ë\ f¡
+\14\83µ\1d±\16\95uÁ\0ö\88±\9e+|\12K\80:s)"
+-óFê{\977ßί\96¿Ñj~½\98SpC\8b\8b¦u.Ñà÷\vº\9e¯\82\8bo=\8c\1c¤Ø%V{\14¶hs\98\16\87\97Ë<dæÛùBNÒP}\ 1ÁpÔ´rÂÅâ\eºÆ/\93\1e\97¥\13\98ȶb§y º¼ùä«ùé°`&f%\9e¸\1fèYÅ2ß\90«\81\ 5(
+)ÃàÀDÞÏÖ\8eÓ7ÙÙ\9a´ï\11\94þ\13%Çû½\ 30·òåªÕ\1a¨\87JÁ£\93Þ \17>mñèqhíc Î\fp".\916kÆ˺bݾæ \9b\87wk^l\18³V×{\87\1aÞã\11\ 3(Ê\12û
+&8ê\ 5&4eGÔ*\92ZSmæ/º"â\b\8b\11(t\81\9dj\7f®Ó\89\8d\88\9e \8aN·Ñ;*jÆ\17ÃkÏJL£u
+\e{çx\8f\85\fu\8ad,\8bHÒýq\98
+\8dY"h0\95õZÕYl\17;» uü6a·\87¯\ 3Y\91¿ \0hÇZÐvÃȪÖ5O
+>Ô\181«Â#o\ 3"T5~\17;\1eF2Óò\1d\9amEQ9wh\ fö¹¶-Æ¿±ÖÌ\vè\96Õ£\1eÙ-Ï-\7f\fÿý0\80\1d$\ f\95Dñl\r\eßÍÖyU¡\82fÍ0\ 1\ f<úÓô
+»ÔÖ\94Ë\8c²´2ñ0\9b_òSL'æÔÎM]½Ã¤ÎQwù=\92\9bªù\94\ 1ש´=©\7fº?q\ f\1a.ÌY\8f\9b¼Ðn¿\13E(Ñã»ä\ e«1Ê\ eM:\e\7f¢\10åå\95k\19ÌW\1eÍÍßF\83\18Dn=2=4\12Þ\89fä7UiÂ\b â¹ø\9eæuþÂ1 Ý\1f»i5s4\1eNð?ÇlD\93)ÖeìðFkoKõ\88q\84\1d(ªs\89å\83woöÙo\8e÷§>þ×\88\8f?¼«\9eNfÞdìcËå[\ 3\13ÅEpôÇÑ¿Âz%\9dendstream
+endobj
+1324 0 obj<</Type/Page/Parent 1099 0 R/Contents 1325 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1325 0 obj<</Filter/FlateDecode/Length 1593 >>stream
+x\ 1\9dWMoÛF\10½ûW\ft©\ 3H\8c$˲] \a\em\0\ 3\8dÓÂ*\8c\ 2¹¬È\95Ä\84Üe¹¤\ 5ýû¾\99]ÊäJ.Ú"\89cQÜùzoÞÌþu1£)þÌèfNWKJË\8bi2¥ÅÝ,YÐâö\ 6¿Ïñ¯Ö´ñ_,\93eüüauññÓ\82f3Zm`jy{C«\8c`f:¥Uzù¸¡\83mi¯LCN\95kE\8d¥\8dSMÊ\90.tÚäÖ\10þºFÕM[\8d©Ùi|Ò\rÿB£ªÖ\e]×:£R¹F×#Ú\16v
+²\95\9cÌñn¹NRk60ýaõíbJ\93ÙU2G\18\97£\83v£\84\9eÅñ>/
+o|§^á\9e\\91ow\r©ì\15Ñ©&ûªk²p[Se\em\9a\1c~¼[Z×vïtí`Aá\fjblCÇè"ÇÑ¡\84þp\1a'sG\95ªU©\91\bíófG),\8dI9Ê}¡$´foig]ãèëå~§% ü8\88Û}n2\84Bw×dkzZE\9eñLêüõ\ 3\17\95K\88\8f\9a
+\9b"\17×®\r
+»F\8eRa áL\89\81\91\94.\80Qé:·Y\ e\v\ 5b0\19¡ÚMnZþ\1c¹\970¥Ò§ \ 3*[gÈ\1cæ×:µ\b\8bãó¡\r+\96\ 4³ó%\98\b ÏÒhÍ \8e2[*X\1e\9e\1f\85Èó\86Pó\9a\9d\95Úd`\91ÀÇ\94T\85³R\84·ü£\¼É\11\87\eª\81¨U\v$=\93%MfAHFÑÙX\98î\92è~g\v\90L\80®é×û'\94#rù\82\87`\82\ f\9bMK\94êl\8d\18ß\1c\1c±{ÃìTY\8a\ 6Aº¶P\r\12õX\9f\14R
+RYçò5\82AjÜ9ù¶\ 5¡\99v>3\10\1d\0®[RM£Ë
+Í8ÀìýD»"t
\8e»V\
\ 1éM^#BoÜ
\ 3Á$pÔVh
\ 64'
\0eB
\9c5
\9eÐ=ÞðÍ9
\fR
\8e¾
\85\19U´G´³vI#Ó
\ 3]S B7Ú%
\84H
\ f>
\9e\rZÍÇ©
\80\ 5ËBß33K
\15µVÙ
\81Ã
\8eü
\9ewÆÍã»Cå
\ 5»bE¨ík
\9e¡
\fªmÀå&OAج5
\992éaLngÛ
\82ÃÐ
\94¶
\10B
\béÀvä7è
\14mØ
\ 1\7f÷ñÓ
\1dÍ Ê¬Î
\93«
\85ï§Ù2¹Kè³ú
\9e\9bmH
\8a\1d\9c\18îKûd~
\ 3ùG3®â7}
\8f¹Ê
\1aÏ*&|j
\vð
\90ͳa
\1f\15\159
\8b\1a: l
\8b&¯@@ÏRGèEéLy
\91O¥
\18\ f6EÆq~ºÙk
\1e\10"e
\80ëOô2¿\ªï]cª
\14\8dÃJ
\1deDë
\ 3w¼D
\15éÆOÄ£
\82r
\13¹ëfKB
\ f\aÊôF!pnÏ^ïC
\84\ 6uë
\98ßi×
\13F
\89O
\8ee'Àùôe%âóÜÍijÜçB*ÚÛúû¶¶è
\12)Ñ.¤
\ 6.b
\bñ
\ f<PqàO+úY
\941
\ eçEÆ«¸
\ 5ùNkÄ
\14å§CA=æÌ
\10¢ü
\1cYxC
\19c[
\93j
\b¬L¬Req3 øí
\ e³Ã÷
\1a\0,0
\80CÃaPmj[
\9e\958p
\ 5,@4è<
\8f·
\8c\1f<02
\83\18h|(¡N1n
\a\93îjkr¨u
\9f|q5Þ
\e,\
\81\ 1ªìÇÐ#âØn5Tl0Bøí
\91uT ÁbD;ì
\15¤Q
\15ü
\aÝôÌ
\84ÂF1
+\8d\8c;nA\ e\8b\0\8aÏ«ÏÛL
+UîO!\98Üâ\1d¯Eø\0,Þ]§â|ßÈ\88áÍI ²Aì¿^æ&-Úì( @F\86}\91\v²\81¹ jëø\1dE/\8fOÏá8çYkÌ\1e\0û¤\9b\87Ç/ÏQ¶ÌT´«/8ô!XåMÊ\1apÃ\e\ 5V~\90\89r\9cØ\14¾£N\ 2\ 6Ï+ìTfë|;\8a\üÈn±ËNºö\93\1cÏí\18á\14çcT\18\86¢øQ?w«\9f_ÓBëKÈ8ZXË\1a\1aå\1a6¯þÒ%@L°&w\ 3q\96\10\9fÂ\93c¨\98ü*\14\86vªª4È\11ÀÆê\90±pv±Mö\18\19}f{î(\94\11Í\12¦¡\1fàiª\1d\ 4B6Ê p\93Þ\8e,\9aÂ]=>öø $\1dªÌñ\80¬W\1dDãõ\b\9bêIvs\9fÝd~\8d¡sççÆãf\8c ö,\ 2ã°\83\8a\f1É\ 4¥>'ÎpÌÃþ\9f\ 1æe5\bÅ\80±p+\90\16\96É\8c\11$Á°ºÖzË*Ç\97\ eÉPÖ±\bâ\ e\88N\ 5½È\84\9ekÕk\8e±Oï\1c =s± ê\1c\9d#!ü\80Ë@ÅÞú(©,\ 3\10\80\11_Be\87Ò\14|\1fAè¨ß£X\87\ 1®\13æ\8ddÁ/³Ã[üÿ´ò\95êx\14\87/ãò= zÒñÏ$ãì;´\8eÔC§¸\b\9b\1e~\¬\ 1kåÊÃnd|\ e@â§Ò>\12-\9a S\ 5§Ã\0çKÙI\95\ 3Õ?~º\r·àÙ\ 2·æÛ+Z^-ý5ôùþóÃ=ýVÛo¸îb,§-ÏJlGÖH¡fK\µq`r3Ç¥9»ü·ÛÙby\9b,¯çXìøÐtÉÆ~Y]ü~ñ7»\96?6endstream
+endobj
+1326 0 obj<</Type/Page/Parent 1099 0 R/Contents 1327 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1327 0 obj<</Filter/FlateDecode/Length 482 >>stream
+x\ 1\8dRËnÛ0\10¼û+\ 6¾Ä9X\15eYr\8f Ú\ 2=¤ha\ 1¹øBI+\9b±Hª$U5\7fße\1cÇ\v\14\85 \17¸;3;³ßg\ 2)_\ 2e\86U\81FÏÒ$E!\8a$C¾)ù;ãÛ\11º\97\83u.ø÷êà¾\9a½ûô\1e¢DÕ1V±\11¨Z0N\9a¢j\16\8c%Ò\ 4_l ÈÚ\8e\ 1µ³²m¤\ f\90mëÈ{ò·Õ\13\83ä\10Ü\eA\96Y\99\14\f³øÜáÙ\8e\ e\86ÂdÝ\11#\17Cb\9eÎQKOíß`Ø-:ë@?¥\1ez\82ê \ 2È´\1eÊpgº»E8\90\89°\98TßÃ\a§\8e\14\150¯XñäÌ;8[÷¤}\82GeZ;yDÐG\96°wv\1c<ZËB\8c\rðD\1aÁÂ\8fÃ`\1dÏ\84ôÆÿ.Ë´\17®\b+ëþ\19\1d£²\ e\19®xÙ\9bÉ+³\87äs#5¡·ö\18 'kn\ 2?Ý19¹u±|¹Ê\93<ª\8e^\8b\ 4\ fc\1fÔËð&\90ëdó\ f\83·R×\92\a\99Î\ 3xhÙ\1c\94áñ&\15\ eÐg°s\ 4ê\r4Á)\1e\1cä\ fº\14^
+þtújTC\1c\1f\eÇ\91Æ:Ì/}sØ!(kbd^×IcM\17Kã[íGÞGnÐ ¶Doç»Å\9a£\8d)µ\14¤êý«M\9b×¥\12\ 5¯óf\ 5QlN\11oï\1eîïðÕÙ'j\ 2>ØfÔd\82\8c¼QéòÜ°,3^ä\93¹ÿµÈ93\14ë\8c×8v¥eDûX;Í~\ 1\9cÁ\ f\ 2endstream
+endobj
+1328 0 obj<</Type/Page/Parent 1099 0 R/Contents 1329 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1329 0 obj<</Filter/FlateDecode/Length 1531 >>stream
+x\ 1\8dWÑnÛ6\14}ÏWÜ\97¡)\10«¶ã&é\80=¬ÅR\14ØÒ\ e1\90\97¼\I\94Í\85"U\92²æ¿ß¹¤\1cÛê0\fE\e×"/Ï=çÜCåûÅ\82æø³ Û%]ßPÕ^Ì\8b9\96óâ\86Vw·ø¼Ä_¯¨I\ f\16\8bÛb5}ðq}ñîþ\ 3-ç´nPëæö\8eÖ5¡Î\1cßT\97\9f¶ÜEå [é\91Û\92©S¾q¾e[)Ò!ô*¼]ÿ\95j,ns\8dÙõªX¢Ê%6-
úäÚ\8e½\ eÎ\8e+W´X\8c+\97·\80\8a\95ë\1aË\aåw8¯\ f*ÐúÓ7\8a\8e"\9b\97ô\13\8b*£\95\8d\ 5·} ÝÐÞõÄè0ú½¶\eY\15\14p5¤ã\ 1i A\19\93V\86ëM-xç4[\g\94^±1{ª\12Lì\8dR¥ónã¹\r\14·\1c\ 5\r>(
Ü*y\14]å\8c\80PÔº\10A1×\1a5xÇÚpiÒ¢¼\1f\Q£ñMôlC£üäô×úÒ¬tÒÄ\8e°\87Ã\89>qPrP5=þñ\11Í ;ÅXcy\ 3=ÁÞ\97ÌÃÀ6a\8f
\90xÃÚâgp\8a[áÆè\17EL\ fk)ÿÔ<mÆjÒ\99Mô\f\1a<my\a°\8ej\1dR' \87Ê>& ÎNÐ+\9d@â\9fQ\19©=\82¤¯òlÐàNTjy\9f\85(\15ø\14@\8cc -x«u\ 3f ì+¹ô|\19újK\1cèAÅRõúù-8\99j\97EKÞJ\a\804Bý\1d\e]OYú¬¬òé8\81\93\0il\9d5>sw [Hé\ 1\ e\\88&°\81çáUF
-\9dRuA_@qrÕÁnô½×\11DO\98*á«\86\83Ì\12$·ôpÿxEl"ön¶øJ\a\82²{j¥ëZuÊÖ\81\Ò\ 5\8cî±±\9d6ô¨°\83\r\ ev\1d\f\96\84«\9d\85\14Ç\89\ 3\eqPÐ7·\a\ 6éÁí0\ fW\82 9AÛ\875ú°É*TÁk!¯\9et0\ e>\9c(r\970Ù\15iKɦ2'\8a\ 6ç\ 3fó\v\85\1eìT0£,Ô\9b\8d\18²á*Â\1cèSDÊpvà\19þÌ5Æ.\93Ù°qrú\96}=È|H\vµ×h=È\ÖB\92\9c³CÆ8\84Bæ*\14ô\19kÐTÖ\11ì\8cûóÉ£f\95ò\11s\ 2\95Ëé\81B¢\8a:¢\8a´\99ä¦\ 1~?C\e\92(\92 §é\97¦\12é\87ÐüÚ\19W½\1c3\12\8f$gg×\12Ò9#SJ~EC;\ 6iûÝýYDʲ±LÎ:¡\1aÓ\94¢CR!\87b \8dJ¡×"\965Xi¼k1dc¢ÂÆ@\92£\8e+\94H©ä *G¬\ 6a\88\91Ãê ù\882\e\ 3¨'8\rí`:]×9\1f{«CÔ\95T~Á\80B\87,FF$b7\1ey\8c³\19W\ 5\94N\981
+\9dRuA_@qrÕÁnô½×\11DO\98*á«\86\83Ì\12$·ôpÿxEl"ön¶øJ\a\82²{j¥ëZuÊÖ\81\Ò\ 5\8cî±±\9d6ô¨°\83\r\ ev\1d\f\96\84«\9d\85\14Ç\89\ 3\eqPÐ7·\a\ 6éÁí0\ fW\82 9AÛ\875ú°É*TÁk!¯\9et0\ e>\9c(r\970Ù\15iKɦ2'\8a\ 6ç\ 3fó\v\85\1eìT0£,Ô\9b\8d\18²á*Â\1cèSDÊpvà\19þÌ5Æ.\93Ù°qrú\96}=È|H\vµ×h=È\ÖB\92\9c³CÆ8\84Bæ*\14ô\19kÐTÖ\11ì\8cûóÉ£f\95ò\11s\ 2\95Ëé\81B¢\8a:¢\8a´\99ä¦\ 1~?C\e\92(\92 §é\97¦\12é·,èkg\õrÌH<\92\9c\9d]KHç\8c\JJ~EC;\ 6iûÝýYDʲ±LÎ:¡\1aÓ\94¢CR!\87b \8dJ¡×"\965Xi¼k1dc¢ÂÆ@\92£\8e+\94H©ä *G¬\ 6a\88\91Ãê ù\882\e\ 3¨'8\rí`:]×9\1f{«CÔ\95T~Á\80B\87,FF$b7\1ey\8c³\19W\ 5\94N\981
x"¢9¡^,ËU¥\80Z"|\846\81 ²c_\8a(ÞxY\f\e#¶\8f½Ô\1c¹ '\91(»*c\8dû\ e\8e\96²#*I"\8c\8e=Ý\v\1eì»Ê¸0µÁ)Ak\99Ò
,lÄ\14Êâ\1a\14Ç\9dÞ\88%B¦Ñ1Û\ 22\1f":¡\12\f^\19\85\11#×\8c3°(>\14\8b;D#æbÀèz\8fÉAc¡O\f\83ñ)Ñ\90*!\11\ e{oó\b\94HQÕpoâÕ¿0' \91\8b\87åM#S\ 3±1\15jFå~\96>\11.\1a\14E© b<\88\81Ë\e×\9e\ 4×ÏÙ\9cïOîïñ\ 6ʶ\bô\vݳÉ\1c\9e\9bx\÷$\ 4`²ZÄ[ö\82d1\18\ 1\9f\87\1a@¶u\83d\e\ 2\12|÷`\ 47\ 3\98¶-{¼
Np©\8bθ\e>Ê÷\0¬Z±\99(3í¿Ã\8dý·n9\8a_\98®ç?\91nñÝN\ 1\ 6¬x6ÜШ\ 59G\8a\85(ÉÙ\r\12ö\15VB/®\8d=\9bÉy§µ\ 1Kl\96Èw¾\96Ì\82ð-o¬\8e}\bF\ 6,4\9a\13_(Çy\83¼s\9c\18Ö«Z\8b+r|Ö\ e˦wÁ7¯v)þÀAN¸ÑW(\83Ð\1c@$Ó\9b\86ñ
-0òü\ 6\1fdðÇNó\7f\10\93Ð_@\eÕ$j\12\f\a¨x\91\994Zrõ\82HÆ=\95.\9c¨KmtÜËÛ\90¼ì¥ ×ñM\8aé\9cû\83ô\89NÐ3®Î_åæô¸?û\16º"\a\9acçÎÔ¨\8ack=½ó\eg\8c\eN\82÷5R\17ùu(\ 5/¢÷wxÈ,Ï\13ø\87`M\83\99\19ÃËrñ\1e4Y\859ä\8eÇvfà"\15z¾\94÷<\bdöȺ\83]10ã¨b\10\9f/O®t¡Z\18\96Þ\1dF®ÜO\b\1c\a\96fbß$xhË¢rV,b©\13ÏÉûcpI\99ðü\16ZaàG\97\8c¨\ e8\10ÉÇ\91>\9fh ýáìÿ\9cð»ã\84¯®3©ÿ÷\17\81ÕÍ]qó~\89+\ e·Öb¹\92\96\7f[_üyñ\ f\v['Nendstream
+0òü\ 6\1fdðÇNó\7f\10\93Ð_@\eÕ$j\12\f\a¨x\91\994Zrõ\82HÆ=\95.\9c¨KmtÜËÛ\90¼ì¥ ×ñM\8aé\9cû\83ô\89NÐ3®Î_åæô¸?û\16º"\a\9acçÎÔ¨\8ack=½ó\eg\8c\eN\82÷5R\17ùu(\ 5/¢÷wxÈ,Ï\13ø\87`M\83\99\19ÃËrñ\1e4Y\859ä\8eÇvfà"\15z¾\94÷<\bdöȺ\83]10ã¨b\10\9f/O®t¡Z\18\96Þ\1dF®ÜO\b\1c\a\96fbß$xhË¢rV,b©\13ÏÉûcpI\99ðü\16ZaàG\97\8c¨\ e8\10ÉÇ\91>\9fh ýáìÿ\9cð»ã\84¯®3©ÿ÷\17\81ÕÍ]qó~\89+N.·ù\9d´üÛúâÏ\8b\7f\0«§'hendstream
endobj
-1634 0 obj<</Type/Page/Parent 1369 0 R/Contents 1635 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1635 0 obj<</Filter/FlateDecode/Length 1595 >>stream
+1330 0 obj<</Type/Page/Parent 1099 0 R/Contents 1331 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1331 0 obj<</Filter/FlateDecode/Length 1595 >>stream
x\ 1\95WMoÛF\10½ûW\ft\89\ 3H´¾,+\87\1eìÄ)\82ÖuZë\90\ 2\ 6\8a%¹\147"¹ìîÒ\8aúëûfHÉ\12\1e\8aÀ\88@jgÞ¼yófõ÷Å\84Æø7¡\9b)Í\16\94\94\17ãhL\8bé,\9aÓ|y\83ÏSü9M\99¼\98/¯£å¹\17Óé\99\17w«\8b«Ï×4\99Ð*C\92Åò\86V)!ÁxL«ä²Ð/º\98\92\v\9bl<ýDÁ5úýê;\ eÍ\ f\87FÓ\ 5 ¬ÒK\9fÛ¦HÉ×Z§\94Ø*i\9cÓU \95$Ú{
\962Sh|È\15\1e\ 2qe\ 3¾W\96¶*v´u&\ 4]ákCòM\92\93ò¤êº0\89
-ÆVäµ{1Õ\9a|\8e£\9eA\8ci4\99ESNý|itÔ½jã#\7fP¦êâStÿí¾K?z\rO\ f&qÖÛ,Ðc\96\99D·!\9eßsr\ 3\90Ea·\9e\92 \ e® \97Öi\95\8eTÎÿQ¢\92\#]mP¢Í\80B{4\85+\8eZÊ>Ð\ 4<1Ï£Ù¤¥l:\8d¦Ñ,¢Gðö.S\e½çú\1d>HÙ#Juí4HÐé[æ¹]\97Oª\8c\15òWÀëAòQ\98!Å;Z;U\ 5¦NuÑi\9bë
-uxÒÖ\86zÑßÌ:²\15\88\å\ 6õ£p\90èlQ \9f\8dç\b(ªG\81/ã\b_Ëöx\aÇé\a\11}Éhg\et/ÐÉ+\88i§ý\80#Vò\r\16DÐEÑ¥Ù\ 3\13± \15¥Úõ2«5tà\r\14ºëÈG,!\9cR\15\94T\83\ 6\ 2\98®Ú\16\80ø½Vï+\15Kª>ëLb\81qBcE\96Ü\bÌt\9f\ 4\10\97´©ì\96¶\863°~cÝ \1ddeÎ\96ÌdWD\1f8\84EÁ\94Zê\96\b^ã4ÅfMµvhC©*\88Ñ\94µ³/ºä!Â\ 4àá\8e«q2\10þÀæZ@\1e7S\rÏ˹9AãAsÙ\14ÁÔ8²\176È}Å¿o@;¬Â\ 4Ï&\0\ 6î\16y\ 5ä\aø,»5\9a+\94'Ö¹Ftû*yH´\95üü y\bþ \86\82S-\\99æSK¹\89\16,í\95àei(ª\9a2\86d1Zþä0@\ 1\99à\0Ø\80V¨,ÓI\vö\98N\9cT´úø\95båÑ$6\14Ä+̦¯i\19(©àH1\80r6q;}\8dÇÔ3N\b=H;b\erî\1aSÆ&§ª\14¹ \89Á\v~:zìê\1f²¼àUxØ\93Êaº¸\19ç\10\rN¹\18 \7f"¾Ñ:\10\1d\ 2 \7f£
-ªÕZÃQ|âL\fÄ9$\f_æéDrø\15£\c¦ú\ 6\v\aB\rºB\9baÆoÆégT½×Í)"rf\9d·í)Ù\98Z\95§\ 6-Âr\80È\91\1eÓä\8e\85\ f×j\ 2«j\1f³Äv°°\1f4¹GPªán)F%°Ó}o<fËCàIÎ.ÆÌc\aA\vÜ\16\0l{\84¶ïØVQN7Z\82\0K\ e\fU:lÛ\9c#û¤2VÒ_¿=~ºÿõöOöJî(\8f¼¨\11ó\ÊÆ\93\9aù\15f{\81\8em\14\93wD\0»ni}èUÖáÀ\98?ðÜ×\1a[XÃ\98jë¸Y¼BÓ\949ïI\0Æz\84l@©mà\ e->YTG#ÑK)\ 3Òê9u\10AK!t\12Hÿ¨\vUµ\9bø\våê\85\95\ eçfðb<Â@ç\10¯[\15H®¾|%\1fT²a\92<ö)\94ÞËëÑ\bQORÓíÇ_\8eöå\19ó\98Gô\aï[oþ\91iù/ßØ[á@\8aæo\ f:cèz\ 5\15\14ªf?I\8dß\88åû+q:ßÎh×\81\937bºÜOUÚ\86m\19§±lz\ 5ÅZÊÁÞõ\90¹\83Ù`º=o\\b¬\9b̧\87»½/xz¾ì.Kp/¼\10\14Ãço2\96xÎ¥ÄNmqA1ý -\94[ÃÎ \f6\12pý¢\8a\86åÈw*\0îì.ÖkS¡@8º`Ä\e±îX£\952G9\ 6\b3£!\80TNns\våÕh!lBV\eâõ*î¸:r2\f+ü\ 4Å\1eá\1eÊ\9cö\10XI²'»ÃÁK\98Q\v6F\14³Ú¸þ^bÁÃ\r|;°à\0Û\93\9b\s©<Õ\1c\ajæûOK
-ßUåº&\1a`÷Û\ 3énâé¦4 wȺçHâ\1f\ 5®« EË®é\81:\8dÏ$°3\0\ f\e\13îcXS¯\ 2I¨Ô½ÅÏF\9d)ìê®\958?YÌ\96óÖ\1eO@üÀPãB\81+¯\98ÿ\81°\94óîØÝ-\82!iÉ\e\88\89åÍ[B\8d¢\92a\ f?ó\0GEBÞ\8eФø\r\1f\13úZeÉÅåEÁJ¥ ¹\ 2\85-·Éï|`ÿ\83omÕ.¢Û®\0î\ 6-®¯ñ3\ 6¡kk*0èûBæä\12;QتrG\ 2z¾\8aó%\98J]Zälª
-\1aõ^9Sì\84»«ÏËî7Éd\81\9fEË\19-n>´×\88§Û\87»[úêìwÞ\ 5\9flÒ\1c¸âÊGû\ 3£\9bñ\a¾vüÿkù|±\8c\16×SÜíq|2½æ°÷«\8bß/þ\ 5W,\80iendstream
-endobj
-1636 0 obj<</Type/Page/Parent 1369 0 R/Contents 1637 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1637 0 obj<</Filter/FlateDecode/Length 1474 >>stream
-x\ 1uWÑnÛ8\10|ÏW,ürNQ«¶\13+Î\ 1}h®-Pà\9aë!\ 6\ ewð\v-Q\16\eJTIÊ\8eûõ7KJ±£¸H\ 2$\96¸;;;;Ëü¸\98Ñ\14_3º\99ÓUJYu1M¦\94.o\93kº^Þà÷9~¬¤"<XL\97IzîÁÕrzþÁ,\9d&ós'\96\v\ 4\1e¤¸[]¼û|K³\eZ\15@\95¦\8bdI«\9c\80i:¥U6\9eÏ\93EB_Å\13=UÊ_®¾ãýk\9aÍâû\93ù\r@¬òñ\aOÎ\vëÛ\86|))ÓJÖ\9eD\9d\93\93v'-Õrk¼\12^\92 Q%\9eTÕVä¨\1dÂ\8eÈ©\9fò-íK\95\95¤\15>r!\ e\7fL¦Àiaõ\81\84Öôðõ\8eQLi2»B\9dÈ\9d\99ªB&\97п¦¥LÔÈéÃñ>O\bãKáéAT\eA{\85@GDSõ6\1c`d¡PzO#2\8dW¦&U\ f\12ºj\93d¦.\12º7((\ 4ö¥r\84o®þEZ \ad4ôG+\1dÃz\89Bd\99lü[Ú´\9ejó\ 2ö0+sÑå\92ô&Rü&Ö\12£$´:rß\83°2\93j'\ 3Ã\fÐqc¼é\98Ø\1c\ 2â\93~\ 5\86\ 6©KS\9bÖrq\b\10Ú\93toÌSÈ\16=øâ)\97\85h57ÎPºX@Û\9b\83\97\8eÖã\13NÖ\97±Tå\19Kc\9cS\eÝ\95åLÕ+Ç\81Ã\ 35Ò\16ÆV´\91ÞCB{åK\12\ 3h®\82(ð°\97\12µµò Â\1e¸§;¡Á:+HKÇø!\8eùôzÉɵz\94Ð\14Ðf¢u HB§\92\1ak\80¨r¯*¬©2h`&\1c"rI]Á}×7ÜÞ(\99pöt®&W×\91'\8cS\9aÐ\9f&{\ 4<.åì4Ý\1d\9e\83GÁæ\ 69Y\1eªj\0\8e[è¼U\99'\1dC\11t*\ 5\86ÇJ\91¿Û[\ 5]f<.ë±Ð¾4í¶$p\9e«\1crF\8dr§Lë\ 6\¢~\aÁ»õeB_
-:`\9ad-¸?\83dëq\1c\99Ñàó÷t\90n´¾dzêp\9eÛX(Ø@\10.GtmQ _¢ã{\0¡k¹¨3I%\0£¬ \vwpþLSXïÃ#a¸¹\8b@~\80vh\vNX?\88uÿù\ 1]lk/sÀ\82&bبÉÌ´:ç\ 3?Z¦¯Tà\f\9a¨qp\80\12¤\v\r2Ýc\94ɯZ}\93ÐC) ªÊä2°}¶Ý\ f,üF\1a´ö\84,ÓÈ\9a5\1cp²ÈÐ\9e\ 39mö<çø\eߦðÀ·\91QÁ\909ërä\8e9G\94!5¼Næ(Ù\9bA!E«ÁÑQTAÖ\ 6&q\8c\80Þ£cGoEÕA\12Á\vBð^\v'gÞC¬£\ efèÇV¼rQ\16\83\80~!jPÜ\15Ë\e#Ó&\18r,\9c\8d1\84¨$\867Èh=Æ\89è\16<\8cQo\14{I{Sÿæ ¾\ 1\ 5±È`Ô9a¾í t\90%\ 2·ì\0\9c>pÇ9Ã\fMLÍÌDF\ve1Û¥\0ç<âx\97Çl\12Æ,¡ÏÆ®j¬§¦Ñ*\13¼4\82×`Þ\fGUÐÞþ\8c\86Ø\ 3ð\1c}äùfØ\95`§\8brD ±HäÄ\18a ³ýü\83a2{÷2W.\81)§R\8a\9d\ 2j\bý\85\ 6\ 6\95ï\8d\r\993c±\1c<\ e0ëÈ\ 2 ø\0Û\14ÁX-¼ªX\11Ñ\83\8e\9aÀ\f7\8d±\9egEË\ 2{>¾×\e"¨\1d\99z4tÐ\15B\9d\ 4 ÚA#ct&w#\ 3³\81WÖ5\1erúYr\9bà\82b¥\96h7Z«1\ 3\81:8®\8bk\81ßûO\15Åä#(\18úÚ½ôw²\869~û\83Â/\95\88\fxc4¬.T^\9b=\0àÞ²ëK\8fÀºìÏ32\18\ eÜUt¸\9b¼\9a¾S÷«!\11÷\7f>ýN_bua©ð\92\86§÷\ 6Ì\v+fG]°\ f4\ 6Úï®#\90kXW<n9U²2°\85\9d\12\84[P³\1eó4\fÇü\19|àóØ\ 3\\99\82\93Tâ1ì4\90\8aÍÛ\82©BÀo-ìKòr\96¸\0>Ê0\e¬Ê\12T\ 1E·\eXÀ¡Â_¹à\92\17Þ\16JÙIÍR<ë\81ݾéonº?\10\16\983ô\88þÔ\ 4\91\8cr¹i»h¼jئyÿ\87ÕÎX\8f\8bçyÕ C[ìkk\9a×\97¹\93õqôÕÞQ¹ôî\ 2[èÖ\95Ýægt\81\r\ 1ÿµqñÂ\16l\18ýþ\1aË\17Q\fHpmù\84\ 1u¸\86uD-»\eô,Å\85\7fyEi\7f\97}øðõî\ 3}³æ;&\93>\9a¬åe\1fâ2u\93þÀäfzË÷®××óë\14ÿ0,æ¸Ìãñl\9eò±O«\8b¿/þ\ajñ\ 4óendstream
-endobj
-1638 0 obj<</Type/Page/Parent 1369 0 R/Contents 1639 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1639 0 obj<</Filter/FlateDecode/Length 1226 >>stream
-x\ 1½VÁnã6\10½ç+\ 6¾4\v8ªe»vrÈ!A[`\ fÙ¶\89\81E\81\h\89¶¸¦D\85¤¬ª_ß7¤\9ch\95lö°@\11$\b !çÍ\9b7oøt\96Ò\f?)ç´XQV\9eÍ\92\19ÒU2§åå\1aÿÏñk%íÂ\87åò2Y½õa1\9f½ý!\9dÍ^_u»9ûù÷+J×´Ù!ûê2¥MNÈ<\9bÑ&;\9fÏ\93«\84>«\\92V\95t\1f6_\10¿¤\14a\1c\7f1_#Ù&?ß\14\92&m\1fwp\132µW¦"å¨2-ÉJlµÌiÛQ.w¢Ñ~JÛÆ\93ÚQg\1aÊ\95ãï¤<=\9eï\8c¥ô^Zr2k¬òÝã\aò\85¬Bl):F\81Üé\ 2õ ·kv;\ 4\vª¥ÅáRT\99¤\ 2w©
-|9£\8fªÚÓNi (¥K\88Á\ ecµq\8e\91jé\9c¬\0³\87U\88#ªÚKßæ\94\89\f§®G©;é&Sj\v\95\15§R\ 1ôTc\12éz¡÷b±L\96\f\19¼¦³\84î¥ÈÉ\8aö}Zm\1fŤJ+N¼æÒ©=£õ\ 6|\91¨\ 2ç¥r2\9f\926í\85\16^VY\17*\a\11Hõ|>¡\e\90k\8f í5\9fYa\8c\93|me<¹¦®\8d\ 5\99hYaZ\893 \92åô ÊÀñ\83tÏAÜ»É\10/\83\15\1a\14)\ f\86<\80r/^ä0â³\17G \8eÕµ\8at}¬È\99R¢ \ eÉ2då\1då¦úÉS\ 1,\90Î +\10vÔJ\ 3L\91ùFhÝ\11úÈ´ äaï\eÇ\80\80Ìã"VÙX]|,\ 6qg3S\1d\91<T5âÔ\8dQ?\98(Xµ/\90Y\1d\ 2¥\1eØ\9e±Ò5(\9e\ 4\98NJèHp=u-+G\18\1e\8c\86¥
-ò3ö\90ÐGOe¼\8a\8b\98B7h5\81ptiD£À@d>\9e\1f\14\9bÐ\1f\15\88ðÒy.:CÁè\15sãÁÖûjMa\ 3\18Eù}¹¶§°\1fÒk¼åÿ\11ìW\88ßUì\88ç\17;{Ý{ȵ\84g°kò\8ca
-13\93A*\17Å\18tW±mi
-_§ì[ÑRXï'ÓÃ\b¹\82\872\83P÷ÐR¡\82\1d\ f\8c0zîû}\9c÷®S[\99«\8c\8bý¦ùÄ\ 1g\95ä&jýå\10Ë3\8c¤ÙñÐÐÃÝ-f£\84÷æ0Ø{6\9bAp)\ 5\14\8dJ}ï\1al\11p\rÌô\88Qù\8f·\82rá\ 5gà\9bµp>Z\18\864X\v¸ÁÀ·B\ 5\15³åp\\85£C\18L\95°V\1de\18\1d.\ 3aa#Ô\ 6(\8d\1d'\7fjTvÀ4´\1c÷|gÈiåS\83±éo|5ê\e4\83\17@¿È\86\8b.¡¿±á8}t½à\82]o)Ñ \ 6L]\13¯\94±\9a>\19\f^ /\80\19Ä#§á\99nàúÌ\18o¹\9ei\98\ 4ì\ 1^\82/á\18\a\8eo¾\1fuÊ\15¦Ñè\9d°^e\8d\16\16w\17R×\14iæ½à\14;ÆÉ\84\1f±~±ü\84£Ég\1eü 5U\ e\8fý´ÁÒ\8e*\86z´\81_\9bݨÙÁ¨\1d\84¯\ 3Àày"\940\86\19¥Ø"sØI¡\1cQ0vncÔËÉÀI\94¦©°¸j\99©\9dâu\1e»\19Évê_\80ìG\85MUèVt."\18\ 1\8c)@kz 6\19þâê\X\85gD\9c\9bo,÷EBw\12Ø:Ì~]Ãmcô\e/§XZ¿e#\f6çØÈ£Â\86ýê\1eÖeÉF\8eFðJ|ö\18ö\83 ³=$\8fÇ\10z\a\97Øb\95c·\99Qa\83¥0eÙ\18Üj¡`¬\98°Ïyñç\8a\9fUxAà6f [\9c×>¢Câ\10Û\81¶¼AÄàÂ\9e\98Ëþ\91\98®ðv½\ÐjÝ?×\1enînoèOk¾ð\8eúÕdM\89\8d\1a\9e5\8còâtàb=»êßJ¯Þ Ë\15^¿¿Ìñ\ 2Åc*\9d¯ùào\9b³¿Îþ\ 3Û\ 3\98Ðendstream
-endobj
-1640 0 obj<</Type/Page/Parent 1369 0 R/Contents 1641 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1641 0 obj<</Filter/FlateDecode/Length 1551 >>stream
-x\ 1\85VïoÚH\10ý\9e¿bÄ\97¦Rq0\10BNê\a\9a\90
-)$\ \8az\97Ói±×Ø\8díõí®1Ü_\7foÖv~Ц§@dÖ»3³oÞ¼\99\7f\8e|êáϧ³>\rF\14dG=¯G#¿çõi8>Ãs\1f_-)r/\86ãþ;/z¼÷àÄ\97ÕÑÉÕ\90|\9fV\11\9c\8cÆg´
- \ ez=Z\ 5Ç+E2\17ëTÒ^\95î\e\8b$«à/PY\91àÍRdkAUbc²±¤îåýrú÷|>Y\90*l¢rÂ\87_\]O¾.)MrI*â\95\8f«ïG=êú\ 3Ä»
-\8fçâIF0è5ëý\917äõ\eeá1\16\962\99)½§L\14E\92o(10\9dî©42d'|\18K\85Ìñ[KÁ\8béþ\13\89<ä½¹²õÖõÞÅÓq[´¨:\a\81À\82\16\1c¹G«¸4îÚ\99ØÃ>\fý\18\ 3b\92$£H\ 66\ 16Iä\ e\84\89q¸½x\81s\8eúy\81>\1føÍUÇÝýäê\9c|ä\81\13Ò\1d\fk\14ú}Ï\1fz´LUE\17i"skøøëäuûgÞ\88\11»\ 5ĸ\83\ 1&±0\80¢PÚ\ 2\13\a¢\91Ör\1c\9c\92B+«\ 2\95rB/nï¦\8bëû%áî±Ô¼9§ëÉÍ|rÓ§\rg]P¨E\ 6d\82\83ÀM!a=É`n+3\84F\8fÇ\91V\19ù½§\13ÃÆýS~züx\98Û\19\99\12§\ 3[Ç\16#M\8b\8b\ f\ 6ç\aã\91Ùù#Z\vd÷ñ#U\12(\vóÄ¡GJ\93C=\14VÔ\81"ä=\ 5ªLC
-bYyôbY\90I²$\15ú§Q×gÖ\12H\85\ 4f´ð¼J\13\98Óq$êdbG»,±ô\99ú½á¸ó\89\92ÜXÇ´\b~E¾9D¶½pKòk\85\8b´\9bj\1f&ùWv(K6±%\91\1aE±L\8b_\13á´!µ\82Ã÷yàÈ\92º=$\18¾4S\86\9dTbo(,]!;\1e\bc*¥\1dv\81\83Ø&\99ôèÞ1\96w\80v\12G\v-Àò@¤Ô)Ú3©ÜÊô°\86ª$M[F C¸±\ 1\7fRe=ú\ 6%©Qw·mô\85\9dtî¯.(ÐûÂvZíHjíx£\rïÖÇÈkJ\83l\99Ãåû\ 5\12Y\99#\9e\9a¸ -\14.£\0\84\a\11,îÈÅ¢\10·¤ÀÕ\1a+AûÌä\ 6\ 1åNd\ 5äï\ 1ª *ãHù ôÓF«²\0ÕÙÜ\ 1ã\94sË.J\96(¶²F5¢ØV\17\v®X¬d"\ f~\90À¥t\ 2¬\9bh(TAí0\94V$©\ 1Ýs*\84FjJ\10ý\13Øït:\96\ 2IÕe¦J\8d:d\rå;=D\ f\9b\ 6`G\9eW"\8c@\1ef7\97·\ fËÙ\1fSGz¬,§_çÓ\9b\95[b\90\9cmdSè\rô.+À Öß_\`¼\86\07BnTÆ
-¥\18?g,R%´õ\8d>]ÊH\94©½\v¶5Â(5\17ü\9fó%Bú\v\85
-&ÂëO{ÉòÛr5\9d{³\9b\99ë
-\ 4ë@ÙÝ\ey\1dôÐJ7\10kæä:A'y\91.V\8ePå\1f,=å\90Ú*Þ·%Üö£ù\9eT\95#ÿ¸/t8\90T¡õý\18n\ 3ø\8c6\12«\fâ6Ù¯pªÛf\våV¤¨ÉÇc\7f4\18\ f\ f¹£k¼5D\94n\91Eý\ 6À·\1a/ò½«9\82\1eëúº\ 6\15Ì\11¹J\ 4aq\81\1c¬\03Lº\87Åç\96qà\17Å\9d¿t\90¶dB
-F^P\84ä\83Çx\1eô\80\166\83`\15÷\0×\ 1\1cÔ\80|ì\9f÷ÿ\1fÚ\19+\8cZ£qî)\94häa£\1aL/L \1alÑa\ 5-«»:\93Ùî\v7P âw´V»\97)¥a»r`ÁVC\15\1eA\9e\ e\93º\0×èB\ 5±\16@\82»&H É\11ÕBùX²\11C\ 6h(¡+b^åé\ 2£\10~×\82\11©\14Pó\9b@åA\8a¦¯ró[\83jË¡\19Ú\86\80Bºjì£ç\94\85'w\18áx rÀUUåeI \95\81jxpÀ\12\84ö\88\ f*°,Ðú°\13ȳ ¸3*x"\18Å\7f\8e¨´I\9aØD\1eÖw\15' bÃ÷_Uì\85Ê£dS¢k4\ eÎOY¥f\v\90a\93\18\8b9¬i\95®Ás5½áwc(&Lg ÒºÁð\0QLS\19\1epl¾º_.¦ÓK\aA\1d!ª\ 6ã\9a\8aÜ H¹DßX\81ó0\85ïVè\ 4¼¥:³ÏWó\v\80\1c%"-%h$¶\10H\9eÄ\9c\81\ 3Çm³¯}º;ðm×®Õ½Èq=p8ß.\91\98»m&çb\87ðé\ e£éÖM´]ÌÒ\98\9dÃcß#v\87\9fÏ#î\1d´õg[Q\1a¼õäjÜLâþ\103ýx\80y¼\19\8e\97\93ù\97 -´úÎÃÒ¥
-J\9e³Ü\94Ê'»þ\bÃ=\ etÏzçìü\9dqq8\1a{£Ó~\13`\7fÌg§«£ß\8fþ\ 3\13§ñ¥endstream
-endobj
-1642 0 obj<</Type/Page/Parent 1369 0 R/Contents 1643 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1643 0 obj<</Filter/FlateDecode/Length 1505 >>stream
-x\ 1\85VÛrÛ6\10}÷Wl\9fìL-\9a\17Ýì7_\eM£D\8dÔI:u\1f \12\94\10\91\ 4\ 3\80\96Õ¯ïY\90r\1c&3M&\19\98^\0»ç\9c=\8b¯'\11\85ø\eÑ$¦dLiy\12\ 6!%£Ë`HÃé\ 4ë\18ÿ\8c¤üäfurñ0¤(¢Uαãé\84V\19!>\fi\95\9eÍW\7f^7Nß)\9bê'i\b\v±.ä\9bÕ\97\93\ 16!&;K\ 2â\9fñã J\82\98?aÛM!ÒÝ[]È;édê~ºsøãÎ\95*%4½SO\92î+¾,ûî¶Ñÿì\19ÐÛ\ f\8b%%ñw»Æ?îz\7f7£[\91n%-Õ¿\92Âïâ'mü \1eÑ \1e\ 37\145#g\94ÌèI\19×\88¢8\10þ#\9d\93Ã\19ÊÉÒR)+§t\85 UùÏ\99N\eþH¢Êü\a]a\1f"h¿Ué\96J\91I\12\94©<\97FV©$§q
-ç\12~\83s/¬ßluº\93\8etÍ\97Ø\80f\8e\cø:Ý8\9a\11Ç¥s Jç9í\95Ûò/Duø\85ÿt§¾Ô\83\14¥AÖ(\81Éåjl-ù4ÔdDe\91Ó9\1f¸\97²¢'a\94n,N.G\94\16
-eY_\97 »Ïñ`<¦8\9cß\90\95\86\95Â\97\93è\15\92\1aQ×\az\7f\1f³¾R]ÖÂ)Pì\8fÑEF³»{Ê\fsÿxö»Di\ 5k5HÂÇ7\ 1\80ó1/2Â\ 1D\14l¤°Ú\v\85rm(
-i-¬\\ 5½j\1ff\9fç÷þ\88\m\1a#\91º\91W´\0>¿\ 1ÓE\84üÛ¢(¹Õ%¥ÂdW4\8cÃÁp\18în.,\8dÂp0\8aÛõ"âü=\ 6¯Â{Õ&\97Ø\1cµ\e\86X\8fºõÝçá`r\84°\ 3ã\8a\92I8H¦mt\92`=òë^\193_\9d×\92\ 5\1aÒB\ eà±c\8bÜ^S®
-®\8e\86Á\bt8ùìü§\8eªèø\91ÃZL\ 1FS0\97¦:u8?\ 33\95U\994ªÚôjbo\ 1Í\1eèÑR\94kA
-\1c4U\85X¤Â¢<åÛ\99jÈ;ݪJþD|ÌeSg ±×5\91Ï3¦µÑÍfë\10ä¥ÿR!ón)7 èKÃÕ³ØÀ\86§\b]g5\f¤Sg_\ 3×TÉý\916¤-h\91$ W[Á¢|k\v|Äis&\9c%à³Ù6ë\9f¨¯ËÂmqÒ\1eÝK\e³«\1e^Ã\11xï²\ 3QµoÇ\8cÆaø«Ï\18ß6Òõ\13}§õ\8eñ\14\8e¬\83up"\ f«\ 5\90ð¨à\94óoà\vZ+Ä\15\1aI m\8eX458Ê,7Î\8clS×\9a\ 5³åD\91p©}Â?\12\8c\84:ï²\9eÝÚh§S]À\b\90»Êát\0¬A¯"oÏ\8eö\ 4ù~\84q´iJª¥Éu)ØÒö>|-ék\ 3\9bä\8a6\e¯-_öÅÃ%E\98:9¦É \19¶^\eÇA\ 4\ f\9e\1fèc+N\86õÛ¤Bd< ÆìÊKæ»\96º\86\8bì\ 5\9c\16\ 6j¥d[(¨jʵ4\96+\82É\1e½¸P;FBÙs¨\85<"À\ 5vnÐ\103È\eö\83ö\99\8eí3«Ãwy\8fÖ£à?å\9f6\94\ 4\98}Þï¸;ø§5¹´¾P5×\9aî¼QoaU³ôÊäx*À4×ì¸F\94¯\ 2\97óÛÞ\95÷\ 5À\eDc\9a-¯Á\85%ÉdV \81uÚêÓO\17\9f\93k|CÎNQKÆó\ 6\9c{d0\89e.Ðï\1fÓ§OªÊô¾ã»wÝßóåêvñ\ f°LyÚp\86ö`1å\ 2U)>*\1a'S\fpPÔ9¾o( \96='<\f\8e\10½SUóì+\13\ 5Ã\r\1c^\95Ü»\95\ 1\11\84âé¥Ü¶º¿t\83:ÑÞ ¶|¹\12\9d\v7?
-V>\8b\122°\17\98ÓÙF^@õëL\19\14 \r\86®\1fÔ½û2e\11\fe£Ä~\13μÂaÜ;x\ 1\10\80¢2ß\944\ 5cl\9f-é©®\ f¨¯\8d\1eF\1c½7Êq(ë\ 1m\84\97\16G\ 3´î\ 3\³\ 5\7fç\87\9c\9bËXyΡFz+-´kû\15\a¬ñHØ\96ÂìøE\0<bèf\8fåÑ\17p\93\9fn]»:Ú`\98Z:\0>ø\ 4F|\8d½]Pÿr/\16O\12Ï\15Ø!ô\81QÏ\9c`õ~uî\97¹n\8e\1fhÃ\82ò¸¬5Ï¢öýÐJÝÛGÛ=:s\81SëQÐMQÐÃ\ f\90Ç3\1eâ¥||Ã\8aµåºûõQMàAT\9a±¡\82\85Ek\rqÍÅ\ 1ö2;Å\ 1"ãáÈ^w\1ck¾Áy,dâ@AÐ\99δ{ôFc<\88§ \8dð<öo×åõüæ\9a\16F\7fñÏÖÎ4ðNÑ\15g\8e\ el7\f&á%\eÐOj8\9e\ 6ãQÜ>\90£ø\92wÞ¯Nþ8ù\ fÏ\b\95êendstream
-endobj
-1644 0 obj<</Type/Page/Parent 1369 0 R/Contents 1645 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F6 9 0 R/F7 10 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 1032 0 R>>endobj
-1645 0 obj<</Filter/FlateDecode/Length 2112 >>stream
-x\ 1}\98ËnÛV\10\86÷~\8aÙ5\ 1j\9a÷˪H\9c¦5Ð6n¬Ô]dCK\94ÍF"U\92\8a\93·ï?3$ÏP\16\8a\0F~}\9c9s97òß\8b\80|ü\v(\v)Ji½¿ð=\1f¿Ì\7f>þr\11D^Ni\94x)í)\8d½p\14;º»Hrϧ4\f½\18¬ð½`\14\8eù\ 5\fö\94\a^B©\bfFî)ð\13/3P\9c&E
-×0Lá[Åì4ÉC\84\84\ 1cf"\98\19 §\b*4ÐjÐ<G<ÎTrLÒBr\8ceH\11ìÖHäÏ¡ê\83Ì\8cD8Á\82\19\89\ 1\83\f¾\9d¡Õ q\81Ò9ª\15H8\ e@?ãLDñ\98V³)wÄQ5\8d#©zVpD"ØÒHv[x\91\81\81/\ 5\8bÐ{\1e4LPâD\94\fj´\ e\8aÊ;\8a &\r\9aøK[£A\v)¡³5zOaèscfj5h\9cqB\8e\1a\r\9ag\EG\8d\ 6-¸»\86\1a½§(t\19p¾V\83&ÁÂÖj¦Å"_«A³\90ë<Ge5hî/=\e½§\18·]°\1a4\8cæªsÌV\83¦Ë\98Çþ\ 6)<Îý\15eú;Qí§£FÏýuTû;Ùj?\1d5zîïLÇþ\8e¶c\7f\1dÕþN4I¼\82\12G\8d\86çL\96£F£Îº\1dÌÔjP\8cã\eÏV\83¦)/1gk4w0ä9é¨Ñ È\1eÝwÔhô(\bxÆÎÔjîoºðl5÷7^Tcì¯\1fa>q\7f}¦¢´¿N\83bOCF\8e\1a\rª\9e\1d5\1a\14Û<椣F£\vA±\18×jÐXv\95ÙÖjî ¬\ 5G\8d\ 6-Â¥g£QçH6ßÙÖjÐ8XÄl5(òC\a\9dÑ \99l¿\8e\1a\r\9a'¼_9j4÷7_ÖYöØ\18\15\93\8d]öTUn\rÎ4*àÙP£¹\83¼\16\f5\9a;\18b^\19j4w0Áø\86\1a\8d:#*kk5÷(@FÎÖjT#àÓÃQ«Aá9µÔhPì"6*«¹Î\19Ö\91ó,Ç\,@B>/#URH£A±¼2K\8d\ 6Íøzcmù\18äÅ¥Ç \14R\94¶ÈiØÆ9{vÔhPL\ 5Då¨Ñ($J\85tgj5h\14q{\1d5\9a\9b Sc¦ºôcÙ\861.\9eET¢$f£A±i"*G\8d\ 6Ŧ\89ì\1d5\1a\14Gæ³Ñ\88
-\87\ 4Ú;ÛZ1/<ëR\88øZ\ 4ϸ\0ÁV\94Äl4G%=rÔhxÆ"CT3µ\1a4å\v\85£cä¸\87ç\907þX\94ö×iÐ4ç.8j4(\8ejdä¨Ñ\187,¸¿3Õ \8bý\9eoÃã\84\15%Ãê\84\9d(\1a\86bÌTL£\82¯Ú\93©*g:SÙR\f5\9aó àÃP£9\1f¾\98\19j4hÁ3ÒPnI\94Çø\8b[1×X\ 5Çd$.ð RvL\93Á."m\ fø<\88D±¡Bü\95× ¾©D"\98á}`\92\88FÖ°\83j\88=\90«+ï!\91\b1ä×\12\95l\98q\1a3TÃ(\94Úb\b\84*b\1cq\920Äa\1c\e¨\86\98zr\9bÂþ\8f\ 2\88bËÀh\1e\93«d¨Ñì8âø\9cÑ ¨%\9aâ¨Ñ \ 5OWG5(¼Nqq±«§\14\89\90\98¸a|\88rmS¾Wª`f¤\94/3L\8e÷ÉNߢ\9c¡Õ\b' Q\ 6G%\1cÞ¬dÎK¯Uñ\98
-q\95\92Y\8d~ÆX«¬\1c\84;®nÎ×ÜP\84$";G\88ãP/:\11\ e\ 6UBQ¾I#"\\vRKÕVz ªÏ\8a2¶\13U[GÕ\16¯\8a\92\8eÚ\8a2¶\13U[GÕÖ\9f^®$FQÆv¢jë¨Ø\ 6x\11Ö\8b;Ûªr¶3\15[CÕ\16û¥«\15囹TYóW=ÕÊPµÅ\84ÓË\8a\8c+Ê\8c;Q\1d×QµÅµÚÕ*\10el'ª¶\8eªm4\9dÀ2®(c;QµuT^\98øò«µâå©Jm\9dF¾q\88:\18ª¶ø«µ\92gE\19Û\89ªíLe2Ë÷\87=eüiAþÏvNaDÙÒgd$\18ÎacÆ\13\ 5\9b+\8e\ 1\||âý©«h{ñvuqõ¾ ЧÕ\16\1fnÒ,§ÕF¾×à\97õ«\9b¿<zs8TͦþVõ¯Wÿàé\fãêÓ\97!_GW\9bW«òaWQ»¥ë¶\19ªf\18\9fD5¦'eæâIÌrºm»¡|¨wõð\9d=â;Ñ¥Á\81G¿Þ~ú\9bÉ¥¿ ¡Gw×\1fèSS\7fcº\84ðûî\8f\e1[\82Ø£\8fÕæ×r ßêæø\rbÿÐ\95Íf¸¼¹\91A\16ããé»rÿP\12\9e vxª:º¾y\7fGë]=åuò<âý½\×ÍÐöOÓc?\9dÆ\87o*\1e}¸\véZü0>q\83{ \12o\9fi]6tCë¶ÙÖ\8fGôèÃÝUH÷ewàâ6Õz ¶3?ÆTöT\8e\ 3Ó\16Lâ\97\b\16õã\10\10Äÿ\ f\11ÑçWM;LC}~ý£\ e\85kÆ\8f\14`£\80ÿÐûv2\8e-8\ f\83^¼Aä\½
-\85ü>\16²îûcÕÓóSÕ¨×ϯ\18~º¾n\9bϯ©îéØW\e\9bÑù<Ð%ÎcÓ¢R\8fÕ@\87\ eõG«6]\roøý¹Ùµå\86\9eÛîKÝ<J¸RDZ\8dêõ¤\ 3\88ú¾n`ÛËó÷°}ìÚãA&ó\8bgÑO}E»r¨ú\81V×·W7·Ô\ fåú\vm»vO¿×ë®íÛí slY!ìø\98Õ®\1a*ò\ eÏ;ÚÖ;\14¦Ür\ e\87²ï\11÷\86ÖOeóX½\9cIØ¿<nÐ8?î·÷Î\ 6&\9b\1d2>;(ªv]"æé!^°Óh\92äåI\960\98*òC\91\ýPä/£IÜ3¡\8fO½wU÷µ^WtË\95\b%\8e\85W<ÿ±:`\aྼ=>¾¬.Þ'<ºi\86®Ý\1c×\ 3fÆ\8bdp-óè\97ª©ºrGu³mOÃÂ7\12.ðÃñ\91vÕ×j'\83Ø\1eà\85Uƨº\ 6.ª®k»3Ï Ö7\ 3Zúı\ e-\96Ywl\1a\16\87®]Wý\19\93\14Û[9¬\9ft³\\16\14ì]]>6mÏ.¾·Ç\8ezÙkzÔ¬ê8\89E©Òs\85°Yàz\89\b±ªö\a®Ó\8bpR.Ã
-óSÈ\89oÜ\12\15RpZ>¶\83g¶Ô\16.\a\95 (0:g\89Ê
-\8cÏA\94T`r\ e¢@\ 2Ós0\eav\ eæ#|1A9\95b\84Å9K¼6ë \81\7f\16ÏE\92*\9d6\14¹Þ\rõn\875õU& 6\f\1c\85½l0WïqY\90\ 3PÌä«\b\8eÀ\97gj\8c÷À4 qþ\ 2\a\91\ 4òóêâÏ\8bÿ\0IN\91{endstream
-endobj
-1646 0 obj<</Type/Page/Parent 1369 0 R/Contents 1647 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1647 0 obj<</Filter/FlateDecode/Length 1452 >>stream
-x\ 1}VïoÛ6\10ý\9e¿â\80}\88\v8\8a\7fÅv¶O]Ò.\ 6ÚÆC\1c,è<\14´DÙ\$R%©¸þï÷\8e\94âDíÚ"\80%\91wïÞ½{ä×\93!\rð\7fH³\11\8d§\94\96'\83d@ÓÑE2§É|\86ß#üYIyø0\9e]âñ\a\1fFÓI2ê~ø}urþþ\92F\ 3ZåH2\9dÍi\95\11\12\fð&í]íD奥Ñ8¡¥±^lT¡üáÍê_l\9bÐp\18·\9d\8dæ\b½Êzw¢Ü\bÚ\eûèÈhÂO\95I²Bo%\99\9cªBøÜØÒѦöäw\92\94Fø\¤\92DQ\847Ç5\955O¼]9ÒÆcÁ^\1c\1c§\1eÐÙp\1c\13¦¦¬\84W\9bB&´ÚaeÚ N\8döBi÷\9cóÌU2U¹J\91\931`\17#Ü\18 á((LoIè\8cjÇ¿\1c\97\92ÄJ/i8k*\1dO\92 W
-F\86 Ý,ï\1f¾'c\96LyÉÍòÔ\91*«B\96\12`B>\90àêª}e\ f´µ¦®°ÌõIÚ>
-ÕgÎ\ 3\85°\19{\0J»\83\ 3G*\15\ 5\9a,\9cÑný\86\8b\95h¹À\9fß\9b\ e)!&åª\90\88z.}z\1eßpqá±0[\94È\99\7f\v\9c;NQR)\80ä~qíÈ\eÒu¹\91Ö5lp¯\985Æ\88Þu\12*|,dÝ[¿a\98\19b`\vú\rì }4ÎS\93Ed%÷e¿3ô¨Í>¬³¦\92\ e\vJ4áñ%d\0é î¤^÷vLUØ\97\19éô©\ fúc´-_(Ç\90óu¥2®lkXv\86\98A¦²\83~¯ DVD\ 1ý\90Ê!ä ^®'\16Ù\81p0õ)úÀ\8bu\17-í\ 4\97*<)\96\99v\104HEö\rºÇ;\9eD\ 1X\8bë>\96©tG¥\14`\aªä¥\91\1c\1e\9fNο\aI\82N}ùøöá\1fÞÉbh\9ey^Ö½\ 5¶\82Ktc\8aY\1ePZ[\v\15\16\a\9eË\9båÙýC30\95\95iQg ÿl\14ä?½¸\18Oú\9c¹\93³v54xªÍÆd\87Sú\ 3B ó\81q\1cMãT,r\ 2\e$ujj\9el\ 6\81\11´\ 6\ 3Zö!°G ý³h\99\12f\14߶VÀ\11Â\eÖs.â(\82£Ng@\991³,Jf\11®Ð\81\88\ 6\bý<T{åw\ 1æ+:a4f/³èJÝ\ 2\82\87\0rfÒ\9a§\16ë\10\93\81Þ,\ 1_3\ 3\95Ø\82Z£\93ää³ðGà\9a'¬\12Îí³uo\ 2m5ðZzn\99úû\87ÀQYc$P\amÓ\94 Õ&Ç[H¤ñ#\1e\9c\152çVÊçW\91'È\13\10B}¡\97Gòî\ e%AÉJh\18(À¥B³\97FÃ\93\14üú§&7Jèîê\96îµúÆ\81_»~ctM×Co4\99"£'´\87í\15v×îæ\ 2u¬\\1cHK0˳(1\19eÅG\v\10®®\96ç\8b%\18ôé\ eõñ\bÇ\13\ 5+ùPù®4h:\85¦\13ú\vf'g\16Ãöþsª£\18Scm]yÊ\84\17äq*¹üèpG¿\7f¡g¦?\84\vÑ\ 2h\88ãþöz<¿ +£5Òs\9d×VqÉt÷á.¡\ 5Jr$\9e c\ 1Ý£\7f¦\f4ÀÏ}\95¸Ô$à¿O\99bôÆ\86ãôÅ\99\86 ýèÞT\9b\f\99Dò94¯}*¼M>7êâÓûG\87\13\ eìëO\8bÿ?\9cøc0'Ñ\8eg\94\13\ 4-k\ 5ù6jæçm|\ ej\84`qnx¥Ñ\1f\9eVæ\ 4ü®U\90XÓ\9c\1f\1d\18hÓ\81ölZ\85Ì=\8f'K\85\9b\17p]ÁÏ7Vàxä¸\ ebo¬¼;PïÃà\80íx26jÙ\1c(\93¹¨\v´Zæ\ 1*\87.Ej\r}ºýònqÝNuHç\9a.\ 2\82ÒÑ\f\93]c\8fá.ÓÑ\9d\0\ 3\98%\8eÙX\e\87\13\0]*v\fÜSBÑìùÀ\96\v\e5\0C\17E?ÖÃî¼Å\91çù´Ù\9bçc˪íÎwË\\19èáÛ«\84H\I\v;g¿m§ Î#K\96\1cCË\r\e\1d_epC ¼ÖAªèZ\84®Ibf`a"\v¥\94\18ÇN\9d\bméØ\vp\1d\8eYì*Q0fòh\1f/f¦
-c\88º\eãä{\bEïÀ-6Ü\18{\8dª\92p\9d;zJï×vÝe{±l®[ÔüK¶\ 5Î\12¢/M\84\16ñ\0\97a\¹Ú×!\ e\8fTó¾Ý^\9a'ù\15\ f¿LfýlÐÙüb\112`Ñp0è\8b\9f¬\8a¡\86ýl\18aÏ_\\88§ñ\ eø\93\vôd:O¦\17#ܺ\ 1|8\ e1ÞNþ<ù\ f&gÂ8endstream
-endobj
-1648 0 obj<</Type/Page/Parent 1369 0 R/Contents 1649 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1649 0 obj<</Filter/FlateDecode/Length 893 >>stream
-x\ 1ÝVMoÛ8\10½ûW\f\92\1e\ V$Ù\95\9d\ 2=$\9b\16k é~Ä\87.P )*fB\91.IÕë\7f¿\8f\94ä:N\ 5ì¹\16lKÔðÍÇ{3Ò·QF)\8e\8cæ9M\vâõ(MpyµH
-\9a-æ8Ïñµ\82ªxc:Mf§ë7«Ñå\87\94®hU\ 1©Xà¤$ ¤)ø\98ºOm¾«p:û2vÛ/¯/Xözõ8Ji\92¥É\ 2;\ e\86Þ²m0<¿\1a0Xsî\82AöjÀà±\8e\0Ä\85µÆ\9e\18e¯Þ\9e¬\ 4¬ðáÊÆ\bËtÀÀz\17î\~\98Q\96µÙNò"ľm<ù\8dt$5þQ,©\ 4µ¶(f´\1d;áE#Ëä\ 4c\1cÃ9*à$\9f¡ÆG\ 5I\1e\94Y#²¯\1dÂItýòPZ(¼ø\86ôÎgó\8bÁÔzvγ4½`C\ 58@¥\17å\10}=Ò/É3«¼°Ä`^ê\87H5[£¾\91pG{Ó\845MÌ9Q¯¡\ 1\ÕÔ8\18·jxs¬\9c\96fæè\994Ð\12yñìÖÃKÕ\1c\19ù\róä6¦Q%m)\e\1eÝv!\r\88дë½\90ÇÄtù3Á\ 6×'¶Ï\#×\90´\16¢$o\88\95øÛ\b\87\bL¬ÎÇåÍý\1d)©Eß\1a·\9f\96\9f\910÷Òh2U´ºgõ\9aÑ\1d{\12¡q\12úÇ4\96~lí\ 5?MòÐ\17;©TئI\19óDÎÔ\ 2½\a:\94|
-©K7ØR-æ»Xð\98Ú¡ô\86&J?/JL48D8}\81£[+B#ÄÈCf\83ÞÎKä\83Ì?ýñõýòv\0¼²¦\8eP§\85ií\ fãCj®\9aR¸dÓÞ¸¢lÞÍ i70r\fç\84þ\16åïPÄG©\9b\7fqQ¯-¸õ\93åòe\0s\fyäw³'DÊ\1aåûÍÇÛ¨ll¨®ÔÎ3¥ |\10\a¢\1d4CB{»\ fd_
-Ï/7Æy,;ª
\8cRf7ÌC
\9c·øÉr<apd
\81Êí
\9añ':
\v \9aÕâ,9+Mͤ
\8e\17/
\83\8f¡¯ÂÐå¬qÂQ«"Ä
\12°(
\82\19Ýéð
\0/5:¸b
\1c*[aP[áBÚ
\0\89mÔBTL*,
\18⦮
\e-9ó"ø
\87 ²N
\83ÜX
\v\r«=í¤ßDþvÆ¢
\ 3C
\1fA$VTÆRÍö
\14ÀZ¬~
\87\16\ fÆK`ÒncZ×
\ 2¦.
\8c\96µEÙ
\ 4\94ì<m
\8c*±
\ 4Ä
\13çCÛlÒ
\19öóã·6J ±^Ç
\86{K·Bá9
\14\ 3n¹kG
\1aB&$Pþà¡{
\92ÅÖ
\ 5ñ6
\ e¼
\ 3_-
\1d\8bn
\9ae
\ 5h\L©(fí³üþúîæ
\9aþ´æ
\11E¢[Ã
\9b\1aÞ¢tÂÎI¿a2OÃÛÂø
\7f(wVà
\95äM
\8e7
\fØgÓ<à¼_
\8dþ
\1aý
\aq
\9fm
\0endstream
-endobj
-1650 0 obj<</Type/Page/Parent 1369 0 R/Contents 1651 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 1043 0 R>>endobj
-1651 0 obj<</Filter/FlateDecode/Length 1656 >>stream
-x\ 1¥WÛn\e7\10}÷W\fôb\e\90VÖź䥰]»\15\1a_\1a)q
-\18(¸+JbÌ%7K®\15½ôÛ{\86\I¶\12\14\b
-C\82\96KrfÎ\9c93þzÔ¡3üuhØ¥Þ\80²üè,9£Ao\8cïþh\88ï.>¥¤\ 5¿ÀÖÝ×\87ß\8e:ãdLç£A2¢\9cÎÇI¯~Ð4\r×ô\a#\1cΩ7Ä«øÀ¯ÎGÉ°~ÌiÔÅéý;¶Þïw\92\ 1\8eups§~Ú]Ùëðþ·\9euÏ{8ÐëñU9õ\87Ýä¼~Ú\1e\83sßÅs9;jß\8c©{F³\ 5 \18\fG4\9b\87\0±\92\9d\DáeIÝ~BS\91§\82\84\99\93õ+¬]Mn¦\94i%\8dw§³/¸§O\9dN¼§Õ\1d%]Üt2[)GY}Kf\8d\17Ê`!\9cj¹Bfj¡2RfaË\xeM\12¯\1aSgX_Õë'}¾
->t\12º\15\992ÞºÕÖô/ßÛ\1e\ 2\b\1cøKº\84f«ªté\86\8c]ÓJ¼H\12Ññ«à\ 2µi*Ë\17D\93 å\9c~½øtM-rRòµgÔê\ e¢õÙJnÈKçIy\12K\ eÃÓ£2s»v4>oî~ßÍ\ 2F. \85°(³y\81ÐR¥\95ß\90r®b¿.<\ 1Eò*\97d\17´.\95WfÙ¬vz\11¾àÎZ8\12\9eà¥\ 3@ÔIÎ\18\b8\14~\9e\91·q\8dªb.¼\84 \12/Bi\91j\84\8b\aZ\94R\12<5Ú\8a9\9el\1e\8co±YËôÀ®S¸çé\84=D\92\80\v\\ X\ 6Ê\16J:`é(\95Òв\94Âë\rI³\12&\93óf\b\1f'Q/\ 2\9f´Z¶\16ê\e\8e(\93éj.çO§!ɯÀ½Ð \99\ 1H/ØÖâÐêÃ~m£ó*/´ÌAµ@\12Çþ\\14X\9a ýL\8c²\93ÀGhz\86\97áõÇ»ÉgÊE¶2Ò\ 5\9f\ eC¬\ fä\16¶\90£\\96\99Â\ 5\16û\ 3ºNRQÚy\95y@¨5ø³±\15\83]V\ 6`\0[\aê¨\f.sQ\14%x¹_\8aÑ\0\17o\ f\fï\19\á\ 2ø¶V~\ 5~\92\98ÏA\ 2kà\84«\8aÂ\96\1e\9aóµR%ãoBÆvgcþwð\80boà\ 1ð\aVï$ \ 3X1=W\17\ f =®ÀªXÕv±\80+t;ÝѸö\ryd\1cDö,\96\b4ìc\fà\bPº\ 1ð\ 1?.`øx`óíáf´\15\1dx¯Lõ\r\fÛË ç«\95
-\87`ÝÆy\99»§ÓWu¸\88\95÷Å»v{½^'à\9dK\90¹¶æËþF®ÿ^+\93¬|®Ù\11Öµ\1f\89H7¡ûi\97¢\0ì6BbX\0[½³(\1eP\9b.\97ÙïÈ{&\fMÀ\11³PË
-l¹\9f¶»ô(Ê\82®¬12ó\ 4\1cö\8býPt[,¸1@\8c¢ä\ 5ª\ 6È\7f$[¼ï"\ 2Ê¢¡%\8aP\18·FÕ\ 1rÏRú\15âÁ\1c >¥èH¶bA6Tã\92\89Òê\ 40¸¤z\11\89Ñí\7f´\94Õº\1dô¨½\86Ó\ 1 Ã
-¼\14N±\ 4n\9a\81å\86kÞ¯X6Ø\13Ô\ 4Dþ\1d\87\84þøZ\13é\86\v\81³ø\10ø_ËêÓÉñäò\96\1e¤,\8f\9fN#ÈYÝ\1dZÃdÄ\r\17Á>u\aC\8ao·½#¼lm³=»zhO\1eÀ\93ã\89a\89\90¨°X\1aÿïZèZ\ 3\15q9¹\9f\92eù\8f\86\1a4/¡A%\eÄÊåõÇÉOÚáÆ×\19ï!\9a M\0VH{¨ß\85*Ñ6¸l½]J\16ÉXýøEÌ}²\ 5T\8c;A]\ 4\9cZA©\16æy»\ 2\16Èo\85F\aB\8eTÔ\ 5&ã\96puëÈ\85©\84Nh²\88TeÁ\16\1ab=ßDáæ\ e\16\9a^\13\1aícÚAöµ\80\8c\81nõëà6p_Û\12Ò
-·"üM\82@ð»\ 3«\8d©Ô(\b\80Huè\81òÀº¾ A6ýÂ%S{Þ\98\86bG\eöUÑÀf\8d&sÈÎ\v(c\8dà\7f¦\rÐ\18ëi.]Vªt\ fOÄ"ÐôK\85\ 4¤ÐGHsí\825ÈÏa s\9bU»~\83áÇ\vÈñíÃl\9a\\7f¾nòð\91=srîÿxõÐ\80\1eÔ\1añþâaÚ\b\16w[\e\\12,\13\a\98Ý]Ï\ 2\11ï?]\7fØ\11\11¾\1d?\94ÖÛÌjwÌr\8fàØOnïÀÝ@'^¸H-\1d_Ue\89\ 2e5
-ÖC\8fÄ\99\98\vì\86ÎóÑÃébï\19æ<³\94dª<\95et\eÝ\1adA\921ï\84\89¡\1e4 âHn\10£"\ 6{\879\ 3ï\98Õ±¿p§\94åÓ kz\9d$`\87~Z\92¶Ð\1dÐ*\ 5É¢ø°ÜÚ"vBd m\91 \ 1Fäu§ÅB)\9d\ví\88m¸ÃÜEk\80\89E\93+=\1c}¯\9co4YªãÜ\89\9béqr7\r=;ÖüV\12Â\81àò1\93\84óÆ\12÷áæ
-#`\99+cµ]nösÌV®¸\1f¾é\v<1ä\ 2ÓgÐS»\9fÁ\10b=ñð²\17Kö9\85\92.\19v@ÄþCº%i\8c+\9a\eË\ fJ\9d\87s(5ïÅ(W S\13S\17m\ 2\ 4\11)x\12\92Ó¾\19í\aôÁ8ö¥\9f\99ðù?\94Áy7jw§×c\1e_Ï\8eþ<ú\17¦\81\175endstream
-endobj
-1652 0 obj<</Type/Page/Parent 1369 0 R/Contents 1653 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 1052 0 R>>endobj
-1653 0 obj<</Filter/FlateDecode/Length 1607 >>stream
-x\ 1WQoÛ6\10~ϯ8äe)àP\96ìØI\81`HÚdMѸYì5\18\96a %ÚV+\91\9a(ÅõË~û¾#©ØqQt\ fkZÕ\16É»ï¾ûîxùû ¦>~b\1a'4\18QZ\1eôE\1fo\9e\1f÷¿ð\e\1a%#<KJ\86c\91\84o\ 5M\ f\92Ñ©\18=¯\ eG#1ÞY\8dû±\88é¤?À\1e\9c=\8bÅIøÆgÙîðl Nix:Æç\ 4ÿjE\8b\83xx
-'Ãø\ 4Ï\92\ 6'c1\bߺc\83ñ\19\1f~y\8cíÅI\ 2_{\v\97³\83èú\8câ!Í\16\bvt\8a\ f\99\8b±O³ô(\19\8a\ 4?ôά)\95\9an(5z\91/[\80ù8\8d\12z\90uE\ 3z<Ò¦¡7Fk\956\8f¯z~1\16I\8fb 4õ«Ùç\83>\1dÇ#\844Ë\8e\12ñ\95\16¦¦©,çòg^\8c®\87\14Ç\1eÅq2æM¿\9bÖ9m¢f\85èk¥è6OkcÍ¢¡\ f\17\13º\95Z.U\r~\92\94Þ\14¹Ò\8d³ë°-jSv~\aà\v&\17Mõ:\8að\14egG¤¦\8c.[;ÝØÈ[°\11Lß^LÄÇi\12 \9aÂëªq\aSY\9bB¬smEû$\85.¢\7f
-¥ÚuTH]J-VMY°ÿ=¯¥\ 1]¹ÆB)\9bÜhÂß\15\18m\fÞÚF\16\ 5I\9d\91\8f3·\94º@\ 4Ýh\92¤ÛÆ®TQôHeyã\89È\vE\8f\8f\80÷éê\1e&ÜËÚ\98fÏo\96×H\87©7d\16n\8f£e\8e\8dTɺÉ\1d\16ö,³Ì\17¹VöµOG\9fκl\f\ 5«â\88öþ$ýs«\9a¶\12ê«ê<÷}~÷v\12¶jÕ¬¿ Xa7ö?í~ʲnï\vq\f\82\86æ
-\84*Ú@%\1d\8b¬\92\8e¼\8bÂ\9a\1eeFÿÔ\ 4f9\aiÑf*£ÉUÒG-guþ\ 4õÌU*\99|Ð\vöçír¹\114\ 3mlÏoí\10\a\1dAº\93é® Ö\1amÕ\95føî\94UµóÈØ$âðMý%ÒYn#\aXÉLxª·õw<\88=×®ð\ 6\82.\10!Pà)5ÒÈ\1f\81ѶÊÒz¥´¯³Ç#^D$\16âz|ÅA \1c¤Õ\92ì\80\aÒ<;ß«¸\a6É\84f\ 6Ê\9b\ÍèÓÍÕ\ 3Ê÷\99ÁÃkÖ\1ekæ®ÎQl¾bè^YÓÖ©¢ËÚ¬ª\ f{¤\8d¯nÂW\86F\96%\ fµt\88\ 2\95³\15+\1e½e\8e
-Ï¿\ 2ö|\ 3ç\95lÒ\15J\1e´þ¨ø,7\91\bg]ý!sÈ\9a?¾ÎQZ°Ûå}Ï5*GR!\ep\1aÈãBq= Å×\90\84\84\1c&ð\88Æ×V\b\1d\e|\16ªÚÌ\vUÚ\1eÙ\16HÁuU+\8e5×K*\f\1e\vP¥e\19RµçÛÌ?£6a\18©Íj¹\"p\17-kî\ 1J©
- >§\úÜ(øµC\16øü\81t\86¾g#\8f7´T¨wÎ\16â\f\8aÏÌZ\17FfÄ\9adÀÜ\8c]wð\ 2±ßSÈu^Û¦Gi@\eX±+\ e E\v\ 3þ?îîo&³·÷\9fþ\ 4\é\8a ö\8bì\18»3 ¶\ 4®\88jÃ
-\vÞ\ 2\1cfÊz\9d\v\9a\18Xæó{\8c1\ 3âêâ/Ç«¥²µ\rÙ&dØ*t4@B6\8cS°K½V@\ 5òº\eÄÔù2ײxn\18ÎqÏé\99/°\94ÑA\8a¡\9f¨l\ fB\a\97U\89m\8e0´³F\95\9dª1\v¸^y\13ú:\83\9eÌ:Ú\17Ì\9eãÚñ\13\92â\14«\81\82»°C_\93-çh\1fzá*¡\86\88\90¼\1e¡\91t¦JYÑ9Ã\8b®\93íÅ\19w÷\\90\9eßÐݬG\87\9d«pgpød+\95æ\8bÜ\17ÞK\8bG\9d\84÷ìô\88Ýsl¬ïîvÙÆéÞ\ 6Ñ2I|\9coÿ\80.Ðèv¡n\16¦(Ð5½s²\8d¦#\13}f÷ȹãápçÕ¡8ÌÔS\8eza\9b\87ß Ub)^Ó»;ú Q¡ïQ\ f'\1fè\1c\13ÄôêþýÕL¼\ h;ïÝ\18²\92O
-ª+\9a\9cû\80÷\ e\19ʪ\ 2u\8eP42&ì\e-,\9c"\8d.6\81l\7f³8ùìD±Õ!3»\13PÏQíÅ#\e¨Â\1c`ФC\11»íî*Û#Ú\15\81L\9b\16õ¹y¹?(\7fÞú\91b§öÉ\9dj¸ïðU°5Î÷
-W\89|\92yáËù£\9f=¬\82V÷\8b% íñµêLr¯a\ 1Â\8cc\8a{½ÍË
-иåg\197¢½Ð»ÖÇ4c\19\14-¸\8dW9zî®á½È1a±¥\17\9cm[&ÆK\9ev\8f\aa²Ám\8b»ö!× \94õX»\ e¼¬Ñòݬ²;"\1f\ fú\18£y\86åC± ß09ð%\82Ê\9e½¹\8bnîÐ\95dúÅwóçqõ¥&áÛϸ|\98\81~×Àó\9cJ¹\97\11÷²]¤ÌªG\1aâ;\r\ 5\14\8fð\9bÃé\80Føß\ 1\9e^Ü^^àÞ6|óÐ[\93¶%æe7\912:\fçþÀñ¸\8fÑÏ\ 5øÿ\fÿ\18Ï÷Çý!ÿrt\92 p\14\ f\86\fàjvðëÁ¿Ð?\17
-endstream
-endobj
-1654 0 obj<</Type/Page/Parent 1369 0 R/Contents 1655 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 1055 0 R>>endobj
-1655 0 obj<</Filter/FlateDecode/Length 1676 >>stream
-x\ 1\9dW]OÛH\14}çW\õ¥¬D\1còI¨´\ f4 \15*\84lâ6] i5±ÇÎ\14Ûãõ\8cIòï÷ܱ\1d¨Åj¥UU°=s¿Ï=÷ò÷Y\8f.ñ¯GW}\1a\8c)HÏ.½K\1a]_áçpÂ?ûø_H\8aÜÁp8öúï\1d\f\86\93w\ f Ü»¬\7f¬¾\9cõ \7fEýÉØ\eRJý˾w]¿%´v\16úã\ 1ÎZ¦?ûgÝÛ!õzäGðv<¹"?t\9a/É\ fÎý\9d$)\8aäHþtÙ½[\92±"x6´\13!%Ú\1aÒ\11mËØx¿ù?Ï.©Ógó~xþ \82B\e\1dYÜ4\b2\91ÂÈ\90DF*\v
-\99ÊÌ\8a\84Ê<.D(Éj²;©\8aÆÈ ßù¬,}?Ì(,Ô\8b,\8cGìI"¬4¶QG\ 1Ômem¹7@\96`9Òe\16\92Îj\8d\91ÍÉ(+IX³\976\8ey\81N/\10C\0\9d!¼¢n.\v\9d\9b£éîU\16ê½éæå6QA×\ 6¹Ê»ûho\a}O\1e¤ó\ 5uS¦e\1aî\94y\b}\9e=À\9aJ\10ÙNâ¦ÝÁz(MP¨4ü\91òBo\13\99ò\vÎö|+R\a\19z´\90{'k8UI\89ôlî\16ëÇéWov\7f\7fÑ2éÏï\17sß\9bÿ\98_ÐÆ]\1aLÆ\17ô}ñÙ÷ÜÓf\8dÂU\8fþêf:_Õ\97!µöoê\17\91\85-½\90o\8e]i»·×ÔCe\19#\9dA¯*r\7fè!é\1eÍP^dØË÷Ií¹\88¬,(\17Æìu\11R°\13Yì
-õ\16k\9d>cí|\13mb
-5ò"P\8eÒ\1cé§ÞÒ^ÙÝI\ 1Ê\7f\aͨ«Ë\96\8aðZé¤ôxºÅE\97\10\83eÎp\99©\ 3mõ\81tõ¾\9c¶bäKFD\8c(»SYÌ0\f5Êê\1eª\98øÎ\9b¸\0\13þR\ 3\84BUÈÀêâXÁs9ÅI\92\10\90\95'\ 2wÅV\97\962m[\969\14g\10º\18&æ\ 2M\ 4\14°°Ñ\b#\96\964pOÊ^\90H\12\r\8b1\1duÉ®¡wê\103@¥Ir»\ 3ï"w?ÔÙG`\8f\e\f\81±\86T\1cßäÒe\9f\e2Ý¢ÍÐ !\95¦Æ¨NÂ\93ú\v\92/\12Ý[iµ|\84\ e\15\ 4\17ZÁéL¶}y\ 4\1c2r¦\\8cV£ûÁ)*Î4\80/NV\9c\831:\9e\95s\ 2\91b\91è\98ëø\1f8\1cx4ÕY¤â\12\1aaêU'À\17&È\1fûù\ eþ|×¢H\ eÜ(4\b)\ 5± \10"LÑ\80QÌ-_ó \b\b` \95y¦§s÷kòô\eS \83bs»¡\81\a"u\aFZ\80\ 2hÊÀ\98Ð\86xì1o\93ÕüÇòf1£\9bOOO7³\87»Åôö\vzù/\9aâ\ 3º~ö¸Yÿr2g\1aDZÂ\8aJ\ 3@%\ 2¼¡üE çÅ\87%b\10i«&\ f"\13±,>Ð\a°Ë\az\90YÉ\90EÐMÈ\ ed\15@\01(¶\85Nh§÷..\97B ¢\ 1\e\1aRI\ eT\80ÄZ¶\96M×OEàÚJÚÀy \¹¶®ê0ªgÎ9\19\19\94\85²Gú\9d¡WTÇÿF7C\94\19£\ 4c¥**gÿäU%ú:Í\1a\86©øÜ9±ÑÅs\è27àj0~\0e5#7~o%r
-j\90U\93råÜ|Â\97\ 2=éÑ7f\96\93Ñ÷Ç\10ëí@\ 5f\ fÃÙît\19ïàûN\ 6Ï®P&Ýb\ 4eÑÓù\b\18R\19l¦Â*TTgí\f5¶(A\13&¿FyÎÞ\99\\ 6*:Ò\9e\87 \98±\10\ 18¢=\9f\8cH·\82\f\A÷ÚâÈ\92§$@\16È
-Ø?ôÊk³\81£+Ò\1f\9eH\1f5ØÔ)ýx=ê~¼\9eüê\12ï\ 1WÞØ\91;+-\r³W#r=¢Çù\ 3W}\97\87H7ôVÍNô!\92\ f^Õ)¶\84\10³\19\8eáËÚ9\ fÄn%k\ 3RÂ\86f\9aÑ¿t[\ 6-\1eý9T#\13Ü\96à`ä¿\9e\16\8e}D\14\81µ\1dÕè,p3\1a\80j¬ï\ 4®o%Ü®[÷ÕN³ÜT\8cÁn¦\f\94F\12&«ñ\0\ 64Ä+\ eª ÿÙ}\8fþ\ 4õV\91E²(ð¹\ 6Õ릴\91ÛjUá\96F?rR\91Ê&:4I\ 1\9d Mñ"TÂ\9d÷jZs8E\8d\ 3\15\10ïL\ eKÑ\9b¼»|a\15=mi_e\91É\84¾¹¥å\13}]-î¿-g¼M°í\ e¸\fK`xÞó\88ßñzrfÉ5¸U\87O´¼[|yO\b{A[h\85\ 1ÙØÂóÊ\7fO\ e<Þ\96«WÏFôûÝò=A ²-¸\92Í\84>Ùý¾\9aÞ\93\1eUÒ\9dþè5=7\89Ñ\17<ò*\0?¬é±´÷Z?»édx£S\85«\ 3jÙ\10=cîñ~^ÛÀ¤=ÔL\8b'7{\8dÕyUÔ\11d\9b?£B§Lo1§ØA\ 1kÍ\ 1\ 3\94{\ 1\8c¥´k þ\bnÁ\9dÆ)\9eÝÍ\80\17p\9d\17\ f\ 5|£å1hU¤°/[\86\88\fË\9cSõ\ 6\®ùE\10Hãz5\93\16\8bÛ3¦»\8aw[]ì4\8c2ýA_µëwo'5\81÷Æø[f2À\9f\ e½ªç×7\ f\9fo\bsè'·ÙL\a¥[÷¹\eØj§\11è\]^3¼þÇ\1a9\1cO¼ñ¨_Ãs0b½sÿì\8f³\7f\0¨M+bendstream
-endobj
-1656 0 obj<</Type/Page/Parent 1369 0 R/Contents 1657 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 1058 0 R>>endobj
-1657 0 obj<</Filter/FlateDecode/Length 1190 >>stream
-x\ 1\8dVMSãF\10½ûWtqYSedYزÙ*\ e\ 6/ UÙ\85]»*\878\87±4F³\8cf\14\8d\ 4!¿>o>d@\e\96à²\8d%u÷ô{¯ßÌ_\83 ÅxMh\9eÐiJY9\88£\98ÒÅY4¥éb\8eÿ\13¼kN{{\ 3\8f\1e>¾ý2\98&\93(¥Ùt\1a-¨¤é|\8eoÿKÒÚ%JN\13<ÑKt±\19\8c¯Îh2§Í\1eµÓt\86¸MîrÇ´É\86É4\9aEô»P¹~4\94Ĩ»æõ\83È8ݲì\9e\92ãÍw¤\98ÒdâS\9c$s\94ÙäÃMÁ±V\86·á\ f¼f\92\98Rú\89©\8c\ez\14MÑËz\9bDt£8é==\16"+H+ùD¬ª8«\11PpE\11ê\8e\18Y¹c¶pL'\93Ó(±å\fVÅkj4\15Ú4x\14?ªZï\85D9\}ÝÂmB\99\14\5\86\84BÆîn®K&TD\9bB\18bÆ´¥\8d.Xãk\92½Ú+\òr\87ZXvSpò F´k\e÷\eKØI^¢a)I\8a{\8e\9et\96µ5\89=\89Æ&Tº\89BÎ$\ 5×hæZ\91®sßNhìÐ\8bi3 höDª\9f5¶\1d:Ð\90\9et\ 5\ 2\1a\a\1e\1a ÛÕåöxô\9f0\96-À+Ø\ 3÷¼Î\ 2¯CR\r±L\92i«J×\r\9dcÙþ\91\8eú!±<ç¹]\92\ 5Â\ 2O¦°ü{:\v\rN,\98\9cjÍJ»\98®§\88®-zÀÂÃ\ 1\14\15\1fõpF rÑ\1dW^\8c\a&=Ä\99.+
-\89í4(°Íï¸k\1c4ص1\87\9eK\14ÊÓv¸ô\17W\ \9eo\8f{\95\99Ê)«9k8\95lD\85L\99®\ 4º\ 1ë Q+Ê\85¹G¢ÕÍçåõ\97Ȫ\ fÓ9\19Ñë\vÉ\88x\93EQ´=\8e0GX\10Ð0å.Ê´Úo\87³\1fJ\97LQÅî\0§®©Ô\03ç\r\13\12\95-\18\80KW\8dÐPìR\1amÛµ9!W$þ9\83}ò*V³\927ÐÜ#3¶\ɬÀ\18ÝI½c²\aÉóÓ\80ºæ\923ËmU\v,\13 »\ 1\85]ÙW\88줽±ÚÐRêGË
-\1a`\ 4-\bTëäàUóÑ/0¦³ÎW¦~6(üý\11èû³[Zì¬kØÝï¾+\ 6«9§1ÿÛ
-w\1c¢Þ êèf`õ\9câ4\8eß ÈEͳF×OT\86\98ù»1o\8c\945µ7z\81\bsï\8b?Î\1fÂ\92ÎxA 3P\88U\8dSÉ®uXwÒ°~\97ÜÓúyx\82\9e\9d\1e9ìI4O\90\9aÉjQ¡«\90\88\1f(r#ÝA\12\1c\18\1a\864\95\1fq¯\0ï]\1f\f¯W#ø\7fî\ 6Ò\16ñ>i¯[³Å<97ÆX\95\90V° Üt\85×ËÏ\17ËíÖY:rôÊ¢U)þA\88wÓ\ì÷Øx\80í¡Y\98\89õrq§¼=ù\99ô #ú\95cG²óò\1a4NGÁ*rç
-G½²Ø\18\f\ 6³/ï\vÀ&\fÛI«n$µQã«·lÔß}vÐÃX\ 5sö\9ef8\80³\vô¬\ 5¨\18Ök*\8c³µPêÅ\86øµåõÓ:p¹z¦²©\992Øþ0ÞÁ\993vpæ\90\e#l8\f\1f\12Ø3X\1e-/\7fëk l\92á\89\1e:öy¡2ÙBC¯!p2õ\93ü\92\a:ºÂ\86F\97ÐP¥\ 3{|\95¾8U\84\9dñËÍæ\13}ôû³\15u®Á¼Ûâܦúâ\98\0\7fÙáØbí(L3øÔÝò\9dwòàRî¸`\aeåö~wr0\8eÖñÕ",`\92âøµ8¥)ÎGnÆ\9c$é¶Öß1õ\88ÌpP\80ú\15ÛvOº\80\93y\fÿÊÿß1j\9a.¢t\96à\1c\86\88Éij3}Ú\f¾\ eþ\ 5RO\ f\86endstream
-endobj
-1658 0 obj<</Type/Page/Parent 1369 0 R/Contents 1659 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 1067 0 R>>endobj
-1659 0 obj<</Filter/FlateDecode/Length 1662 >>stream
-x\ 1}WÛ\8eÛ6\10}߯\18\ 4(º\ 16òý²\ 1\82¶i\9a´@\1fÚÄ@\11 /´4²\98¥D\95¤Öë¿ï\19Ròz\95m\90¬\v9<sæÌ!ýïÕ\8c¦ø7£Í\9c\16kÊë«i6Å\93óÇÇ\ fWóÅm¶¥õl\95Í©¦Å|\9d-ú;C\9f®VËlIëé<\9bâål»\96¡ñN^no³\15-§Ëôòv\8b\99éN^b\11ZÜ.\11u¹ÝàZB8¦òj6[È+DYJÌÕ\ 6ÓÒÝ0m¾\92\11£iowW\93÷·4\9fÒ®DNëÍ\96vEL\ 5Oòë_+Õ\ 6v4_eô\91[ë\82n\ eô¶;ø\97»¯qæl\93f¾Z\b¨]q\8d¡³\8cþh\82³E\97\am\9b4tI³Y?t¾ÉÖ2tW1q´!U\14\8e½§Ò:Úw\a¤$k¥{\1fÔÞ0\1e\19V\9e=iO^Õ{õsü̬;d\82èÉ\1ceÚJ\9d§\b\80)½\ 2C\11¡¯lg
-:X
-6\85z\158¯\1a\9d+s\11´\9f\85Ò-\ 5ì_qy
-ê\8e)\0xÐ5>,\16Q\ 5\1e\0U©\ 1sÏÈ\81éd;òݾÖ\81ÔEF\19ýb¼½¡6\ 5ó̤K JyÊ+Õ\1c¸@\88pd\8e´] \1eò¿!\f=2Õê\84\91i\92\14E0=R'Oj$¥\1aíkR\81¼\15¸À\9c=\9f\97\ 2.*¬\ 4¯»¼\92oÉ!W\8d|;Ϧ\94l+6-\ 5§ò;\f>6ê\19}\92\92HmPÏ&àO\129!ù\82\v\10\e¸\18Uáàl×\92-©e\v:èXYº·¦k\ 2CpÈFã\13xoÈßic<©¦ .Ánð\19ý#\82ÈYßCûÊQ-\9c'%ím\17\84Ñ\80Ü\85'd0Z¹µÞë½\ 1¸Æ\1fÙa\ 1\es\14¢©\94~¥\ f\15`\b\819\vJ\ 4KÃ#\ e\85b?Héb\9d\19È:\0¤\17\ 5ß³±-»Ñ\92¥Ó\18dN/.J$\b\ 3\19\86Ì19Æ\vHÆ\87q\85ÞYj,tä}'5\94YýÊÈD\12M\85Guä2·u\9bµÎ\ 6\9b[ã3_ï©á£ïé\8eÌF¦D!FÇù\b\b¢\8e`y\ 4;j[\a´s\9fiç[Î#·!Ê\82°\10\9a³\96ÂG\8c1¿=* \0¤)õ¡sJ<à<\10\10\e)\ f&@çâ-Ò\84 ÔÌ\8e\0HBIYRÜ\ 1rl\ 1¼BÍ\15þ¾\\v\8f \ eKB>_^Òj
-?¶2\ 2Ô²ó\ 4\0\89ísÂ}ûDk\19t\8db\8e¹ÿ\8c\1e\90¡±=\8c\96Þ·d¬½C<Û\1dªH¹(± OYU.¯ N\7f\ 3aké'\0\ 5#÷Ü@ AÄ\97çp<è\10ò\8a}4J=¥}ä=µê\0ÛC\8eU\bíëÉäì{éj\121\8b\8b_zqô,xñ<£\ fÜ°S\86tSF~'ï\9fñâ·É·\92gE\97¿ô-4\ 2£åÅ úºF«ö\90Ì\89Ø9ëÐ\93\7f
--:ù\ 58:DCL\1en÷÷ÚBå5R\96lF¹ÆÚ\ 46&öS¼ÃR?¢\1dkí\a\1dÁPÄÄ`µP®\98\81ëÀ\eûÐ*WKYäú)D1dÙRrëP#\98à Öô0®ñïÒ÷X/\ 5¬àK}]\v\ e\8dõÚÿD;1xü¿gw"]Ëî¤\9ao:µo\13Ýä¦+\18\85s!zÇ\99\r4Y¨\12ÆG¯\16\r5âå¾\83H\90\88jÐK°Li\898\81\1fT.\9a9Jï\vRØ\16\8f8,¬ð\92¤D¹\11\95\89f¤\83\92\8dFÿ¼\f$¯°ëv\ 6\ e$\ 1¿«£EFïX0\e±¸~û\7fFG @âÊHÙÓTsJ\ 5CZØ]b6IÙ{\86ß
-d°\95Ê#M!.\8a\8e\ 5ÍhëØo\8eËÎË8D\80³Â\86£®ÐåBÛ\88\ 4YúQyâhÑxÐåq³\8cÕ\83#\94\9d\91t\10¸ mð2\15CÄ<¥zývL\8b(ºÙ\94p~8bÚ3K\ f\11\ 6siñ u\1a¥ÄÆOý\9e\92\ 2\1fÄ\1câ¶U0¶Ks\ 3ÊÄBNâXÈÕ¦}¨Ðþ\8e|«òoöí\9dØfªoñX\18\99-À&ïWýyëú"\9b7éÕP¶ës·¦ç8ÓÆ#Ú56\8dLÚn4<£Ï\97vXêäÚ\89P©Ï\0HJ\10Ó\94\0\17g\98\9e\ 1iɯ\1d\9aÕ6²kÃ(ñ-ò¼cn\11\ 4}#êG\94ä\1e\8c!ø\8c\908\94\14O\Xùõ\0ýv8\ÊÙ\1açµ3\ 6zC³é\0d\8a£vÿ2\1e×ÞФónb,Î~½\9d\1a½Çý!û¡\1eM\1aÚú\7fæ\f¤õ\13\9fºl<ï\8a`)Ǧ\8aä\92\8ai@ß\13ÿ,\98sà\9eª4ç±\88Ǹ\13¾èß¾\10\9b\92>h\14N\vÐ/®\87Dú\ 3pï\ eÑH´Ç\1e\ 6FEBrlÇp¸Fä¦\95m¼9Ñ°>l´®Q¦t2<Âÿn¢»Â\9dj\9cà\12¬gd÷\8dêR{\8c@%\15¡¼â´q»UÆØcZ\f\bù\ 1Ç*\9c\aakÑE
-]\960-ÜzÎ;§\ 3\80\9e|à\1a[.Ú.\1e\7fz³"\ e¹8ã ¹\84tûø\83d±I\9aùþÏ\9dåz\9bWsüL\82\82f\8b\8d\84ùmwõ÷Õ\7fUÝ\7fåendstream
-endobj
-1660 0 obj<</Type/Page/Parent 1369 0 R/Contents 1661 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1661 0 obj<</Filter/FlateDecode/Length 1668 >>stream
-x\ 1\95WMo\e7\10½ûWLu©\fIJ¾,;\ 5zpP\e0Ф©£\16\bà\vw\97»bÄ%U\92kYÿ¾ofw-wm\1f\8a @Â%93oÞ\9bGýs2£)þÌèrN\8b\15åõÉt2¥\8b«Åä\8a\96W\97ø÷\1c\7f\83¦R>Ì\17³Éò\ f³ùÇ·O,ß8ði}r~»¤Ù\8cÖ%\82¯®.i]\10\ 2O§´ÎǵÊ7ÆéÉéúÇÉ\94Îæ+\84\\17ãõF\13/\9dß"_9:\8eu6ɽ+ÛåþÆ1i\97¡]¼è÷\92õ\15Yý¨-ý:Üo"Å\83óîPû&ÒÞ¤\r%D{ó\9aBgMõÎ=i£\12mT¤LkGMÔ\ 5\19GÞ\16:pH\143[Læ\Ì£\ eÑx\17É\97ôMÕ\99"å°\99O\1aW\ 1ð¤\0AA¥\ f\94©|»W¡\88\94ûz§\92É\8c5éÀG{\0¨4VÇ!b×\91Ëø\1f8<*Ûhθ<hÅù\1f|\ 3@¬EJ¹\ f\ 5)\8a¦r¦4¹rÉ\1eú\9d\9ct\v
-²\12\88*^2\ e\ 5ÔHÙ»>¹\1e\81[TVû\98^ìö;\1ddo\94°µ:\90ó\89\9cF\1e\88«Sâ;7¦Úè\80Ê\94£Å\84¾h\15\90\87B\8ah\f0Âr¦)\ 5 Æç\12©\ 1öýEÈt6ý\80S\89\ fì\82Þ©ÐA®èï\9bûïdU¨4=zÛÔ\9aáf
-\15*)©åüö#ÍÀ\¦ðÙbÙ\92t~1YNèÎ%\1d\9c²¤Cð!þ\97nLéËÉ\8aYpWJ¡\95F\924ºû²¾¹ÿrý;ÝÜßÿq?¢ZǨ\10\1f\14B\17\82D\97>\93Iø¨À\1e!\Ë\9f
-H¡ôÆé§\9dÎ\13
-áF);(~¿\ 1S(4Î\ 1Kd\9a¸Ý»à3\951\8a@¹ªÁ{i\ 3\95ª±|+`´Ò«\\a&&v¶ñ\15cÎ ¶9<\8c\e\a\1eJû\ 6q7ê\11C\84ï;@!¡\0¡\ 1i\80îbÒ5E_&^z8íÎõª\aD,Å\1e\8b\¡\13eð8Qg\ 5\7fr\8c\860ô¹
-tSå¢\15g\80CÆuõ\17 þ|\ 3Ρ\f+ò@\93c\1a$ûíó§ç\ 3à½6\8fí5\1csBë\8d(¤ô\f\1dòF
-\90ó\81õ^6\96Ñ\10ò1W\v¿Çÿ\90?çf¥NÚYVÖ "\ 4g\9b\ 2½F?ºv3²à¤\ f©\97N\8fÉwh2n|c¹/ÑwÕÐÆï)y>\13|ÑäÐÀ1ð\a2%í|\8c\ 6iLè«ä@µÚò.\94Áj÷N8Ðb£\8b·¢²$%di@
-a\9fÂTb\7f`Z©Ý\ ej\ 4V¨\ 1\84æ\ fBØ\11Å&+\f L\1e@AI\9cÚqa\ fAk\91ÂVë\9d°}\80O\94\19Éúk']Û\ 4 \8aìù6ág×\82ä½\95Ñùº\11@\15\1dôÜ,\ 6\9bÇ[á\ 5\83_8äùmo\18/\9c§*²\96n\P»«÷\9a\17»TQpË\81Að»`TB×UÚ ;ß\9ef\1d Vh\19_É\93ªÃQ×\90b;\f
-ï~f\13\81\x\13Jc>\1dhTdO#&\9fv\ 3lد\98t\f)\9bS\85éÈåñ\ 2TPsÜ\91@<â\*°\99\85\9e0 \85©2ÚÚ\16ð\91\9eª>Ï\9b\80fò8\13r\ eÂ
-oz²Ö\90Ó\900]A[Ç"P\ eÌ\89Q×<f¬rUã\rñ\1cã\ f²\14&âû¨'Gð\r¦½¦÷ó¢\8718m\12»Õ«\19oM\16\14Pë¯i\ 3I\bN¡\ 5çø\11.\91ÃA\98¹éáT&\1ec\ e´ö>l ¹\90~R9\eÞë\84@ÀL^\e CïnÖû°!I\e"\90ô\8d\13\82ä¾\80\ 2o\1eQ9òo È-g\9c\8e\10IÂ\98
-\8d\9cé°æ\91Ó6ú8\1c\ 6]éì¯\15\82tä=\9fº\98Ðu\ 2 À\9d\8a+U½+0\ 3rLñ×Lïlë/võÔ8P\1c\80D\8f\91Ü8ó¤#·Ä\81õ!\99¼\81y¶ßx\82ºDÖ¸æ\89¶0Fm#@Æl\10\96b~5õ\ eá\8fs\ 4¸0\13\93\8a[~N\rK\84óWhUc
-\ 4l\aº¸Aá\91\82\fä\87S\11¹È¡\7fÏ¡M\11i3Á:Óaìs\19£]³\95àÁ`pøÎ$\aÑ;p 0Æmô<\e¾Þý6êÈÁ÷²§céÙ« ·ÔÄV¿¢ÎQ.jÄó\15<Ç«\8bUÚ¥\91+\03\bË @\ 2V\e\Ö¬\ 1¸rïQý\9d9ä*Áëx×ÑÈÑ2+¤ky\8c\11ø¬ó¶ßo?jVð\f¾M¿Ï\8a5âd\1a\ fº\1eå#GÅ(!f1\8cÎê":^\9a§\9fú¹\175\0Àë\e3\93Ãt6ÉPµyõsy\fß(K:kÚå~\10\8fyÞã¥Ùiê\9d÷67_\8eÇfÇÎ\8aÙ\91>\90\aDao02ß\8d\96/\aá&ô\99Í\13Â\16ã
-\8b°©!9Uá\91\ 4$Ài\18<\ føµßÍ6¾éŨ\88xÛÁ¬¹ÿ\16¤\81\98d\12\1cç\r\8aê~.Hã\90cëÍç·WÝ\8f\9bÙ
-¿Ô®\16´ºXáW\18\1e\96ß®?\7fº¦¯Áÿ\80åÒo>Ç\ 3¶{Ôqô³þÀÙåô#ï\7f÷Ùº\]MV\17s<q±k¶¸âÓ7ë\93?Oþ\ 5§\93\90 endstream
-endobj
-1662 0 obj<</Type/Page/Parent 1369 0 R/Contents 1663 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1663 0 obj<</Filter/FlateDecode/Length 1323 >>stream
-x\ 1\95VÛnÜ6\10}÷W\fö¥.\90h¯õ\rÈÃÚ^'\vØ»®%7\r\8a>p%Êb-\89
-Iy³\7fß3¤\94:ªûP\18\ 6lq8\973gÎðëÑ\94&ø\99Òé\8cæ'\94VG\93hB\8bóóè\8c\16g§ø{\86_#)÷\aÓÓI4{ë`~\16\9d\f¿_&Gã\9bs\9aM(É\11ãäô\8c\92\8cà\7f\82/éñU!\1a'\rÍN"ºVâ©ÖVÕOtÐ!+ª\9d +Í\8b4?'\7fy?ÓÓàçý|\81\1c\92ì\18\17§\11kgtÖ¦Né:\98.h:íLg§H\v¦I¡,åª\94\94êÚ U[\12T*ëHçä¤u\96ãR*jj¤Éµ©Èiz\11¥Ê\84\93!§øUN\bëH\94VãrY\86ËûB8r\85\84ßgY\1e8\97 ½\9fÎC²©hôÑ`Ñ\18½+eEHJå¤\1cåBÁ\8b¨\ f¤ëÞ
-æÖÉÆ"\96·i\84µ\12FeÉQp\1aòÆß5»\80/v+vå\81öÚ<\ 3ËA
-¹ªeÔ}\ 3v\v\ 6æ\vª¶\85nË\8c2MËÛ[_\81÷ü\8eTíÿÓ&C\9b`µ¯#ú,©\10/\bn\94Ì\18¤T\18\99·%¢¦\85Ö\9cV\81Ê\80L äL\97¤®ÿ\ 5\bÃ\91\8aFìT©\9cBahµÊÙi\17V
-SªÞÃ0o@Â\r³²Î^AÖñ¦\ 2\9aL%n0£J\92¿àðÀ_G\0+ÓÒÖ?9\ fÔ\b\16\99÷æ\v«5Ú¡ËRï¹>ðf\80"cÃH§2k1\17\1e~\9fJ@\91¯ïйÖ4FY¸À\99é\12àv\83æFf¾\1c\1e\8eפö\rAcf\11-m«\86)íÃ\8foÞàôºö\`\ 2\83R\81\f\81\a J[\85СY\82^\93\17°\97%\8e/×\1fãÕÃo«\a\ f\80 û«þdyu»^m\12ÚiW\fÊGs\98]OF·\r%«8ùø°}¼\1f¶' $ï0BÝVUª\14\ 6È\1a\82Snë¡AÓ\91}\8a.×Î\ e]¬=¥ý\8c½®ç¹Ö{_p-*?)h¯xA{A|À^\80\8dL \8fºv\11æ=Ç\ 4Ñ^an\82#ßÕÞÔv5\ fÊ\1c¹ª\19Eô¥\13\ 5\91e\10\fÿ±»ÈCN»\ 3á\84IÅ-\b¬ñÿiêc_°ãñÍ\84Î{IZ\84Éû\ 3\11þì£N ·\98F¨SU\ 1\fú\80~V\8d6Â\1c¼lY\1aZ6Â\150\eÃËðÈHÁC\81\89ü@\aù\ 6\81\82$~ZÅ+ßÁ\98\96qüx·"P!^o74\8fx l\1fèv\99\80\1dÛ\eJ>(^Þ].)~\'«\88â-쯶wwËÍuÜ'ÐI]üiûyC×ëkÚl\13Zý¾\8e\13Zohµ|\0«\1eú(ý^\89îK) \8d\0¦Î\ 1\ 4\90\9fõ\85\91\95Æ\807\95´V<\814<nF¦R½H/\8e¬\9b?\98à\14àaö\1dkrà\82ß%¬\92;\89\16\rRnë\1czVgÀ\8c\9dw\8a\98+\83YO\v\99>\7f÷Dë{òÔ3Òê²õYÂiª\r2r¸o¥£¶\89H>]Ð\9d\0I \ 5a\83\fb\8e¥KÇÞË\8bgiØO\8dV\18\ 6.ÜG +°+\ 4\8de\9d\85PËo\90¶áÄ,±\8f ÚA\19aÄRä%íz\13w»\94D\9a\ 2E?\86Ã*\9aÐ\80Wå2ô(Ç\ 1¯p\85\91\1cTÑó<d\8frÚ\12éc\ 2G\19\96,tò\eÓ°Ö\18¦\ 4îv¬\9e{ô\987G\a,Ë¢Å\80\82Ð#\96±F`ýö~G\1cï¿\94r\ e§¼¼¿Û@Bù©ñ~> {\1fä\9aó#\81h\1aÌ~\90R\9e:\b)W\9a)î ÆıÆ\15*-\ 2\17ð©{\ 1ô9ùZß\91iÃE\1eZ^!o$ßïî\9e\8f`ê\0?Ï[î/¶x j'ZüRÉÕSk\84ç\98\7f¼\0¦\\0àðõ\eíä\ 5«\15öt\7fßߨ\05ÖQ©Slc^\17^IX\90Â#éØÓп·~\84ç\98¶æMûÖ\9a1û+ÇþÖ¸T»póì\9fw×â<\88Üÿyã-Nð\86üe\86ö¡'Óù9;]%G¿\1eý\rú)VÜendstream
-endobj
-1664 0 obj<</Type/Page/Parent 1369 0 R/Contents 1665 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1665 0 obj<</Filter/FlateDecode/Length 1622 >>stream
-x\ 1½W[OÛH\14~çW\1cùeA"! 4ÐJ}\0JWH,Ë\96h¥J¼\8cí1\99bϤ36\89ÿý~ç\8c\r\89a·o[\ 4\ 5{nç»\9dÉϽ)Mð5¥Ó\19\1dÏ)«ö&ã }\98Lñóäì\14?gøö\9a\8a½\8bÅÞÑ×\8f4=¡E\81)ó3ü\92\13\86O&´Èögóññx6¦\85\ e5Í\ e\16?0ú\84¦Ó8z4;Åèýo\8d¥z©)sU¥lNÉÊØGº¸þýþêÛßWß\12*¼«dÄÝ%½\ e8¿¼¹¾º]l½n¬ÙPê6cº.¨u\råÎþVÓ£®yç \8d¦8\fï¨èY\95&G aålм¸å\19\9e\16\97wG×w\14\Q¯\15J4\81¬«q6ïuV\97-\19\ejU\96:\1fw\8b¢F.zÿÖÕ¼\90ªeëµ)K²ZçT;Â\f_\93¢$w\81V¨fU'´66wkr±x\94\86\81\1ePpõõ»zP V©t\bêQSP-\ 3\95,\1dÀåC\16®±yBÎS0\95)\95ߪëËíýkQ\18q¤ëì\88g\ 6*LÙ×9Àéµê ëf\ 5\k\ 6dåB0)&u'\ eªJ\15ê©\97®©\89wÒ¶öFciìÄÔ\ 6í\9fµ\17ò²Òàí!¥\18zM*\84¦Ò\1dY\83Ý\97ê\99E!À¿YÑëJ\ 1@,ê
-Þ\82I\84ÈÂ\10¹s\0³Ä(¯U\0Ôëe+\0Se\1e\97@L\99\92+2¢\17O\ 2%þ\ 6\ f\96±-\8c×k°ý\ 2Ý\98¾CW;äz]ª\r\1fap|ß\94@\0\10\95`ÍD\96×Î?A\fµÁQðèg\83#ã÷CZi¿T«@iKØÎA\e\8f¤²\fLGõ«®\8cФ\16Ë=ìc\81\ec\eÞ\98Ï\1f\ 6\9bCù\9a\9e\8d\12ôͪX«¼bå=zU\8d\1f\ exô¶oGÇÓ(b1ìqgØã8ì×\86\rU\1ai¥ÑͶq;m¿ú\92Á\vPI\99³+¡åÒ@»`P=\83 Å\9a
-KØnXNª²§!³;\9eÐÞCj½32gk¨\83A\14õA\8cl\94\v\95Ó
-\8a\ 3\v° Þ\88ç\19\96\14[·$\82Ó\90±H\15\ 4uâ\e`+\86\v\91§ä0ú/P®m+ÞKb¶4Ð|HP \88\0Õ\12.Ài\8c³\15\87ìQyòÈ
-`¦a]ñ\16ûX\16\18ÓåRgO\83½×]¾xz3³ R$»`¥|\95\88Ûj]\9cWÞ <XÆÁQʶý\99Ej\83\12P\90ì?ظ+\açN\8c}Sá\eÛí\90\93 f\8bôdÕ{]`)À¿\9b½BS\95æ}RTª\95HKuïÅ\97P\7f `2ì«Á9\ 1w\9d\vÈï\10¬sSs"3\881õz\8aËöýõ\15x¦\\ 191°¥\8cI\89+ðöC¡vÁq\18£îu,×\87\93¥Æ\85Q\b\by\87\86ÀƵXÿæú~quË]\ 2\1d¤£\11\83ùo\1a©ä?\85\9f\ 4dD\ 4VÒD"\8dñ\15y\v¬1{;àù9BµçCªF!è%\81\12Ø\13½#\8eßê\80\ 3\88SÍBkl\81\88·y ÕË^\ 6äÅJ©Î\14x\96`\17[õ¢é\9b¼ø\ 2:U\95®a\14é\92à_\9c¡úþ5ظPè¼²G©+é7R\r\8c^\e¼\90.Û¬8N`´|Lçep\1dab6¶\9eáPGÌ<ì÷f|8\906\15ZdÆ\86$H\82,>Ø=\198\8bEÄ`>Ã]®A\0 Wdµ\93¾·F\84p\83æ¾ø¤5\82\9dÑ)\1dB\1d\17\9cÒAB|\8a@z\83\0\1c\12¼\90Ù|ûPd\9b*\8dM.v°ØS×K\93-¥Jb§Dn9Tr\8d Fâ\0Â]] ÒqÖ\8a¯
-L\ 1äì\8aA\81(\ 6\8c\81(W"&¸\81p¤:\1c#¶XÀÔ·¦\1e»\88e×í?ñzG_'ô±¿Þ\9dĦBÝ¿xÝà ¤Ït~sÓï?\19\9fñ\ 5jw\98d\13Æm6\9bñÖ÷QÛþË´\14×\ 1\9c\1ej*\14\1a'
-@æ}¦ï±\99ìÞ;ç¼ßuìÉ*E*\1e"mb¢+\9bit\ 2´b\8dþP©\1c×\àÀ©9\80\14¢e\rÈe@5µ«Ð×3\1c»¥Ú+\eJv3Ú?`íOÜ]?KçVÜÑHåj\ 5Åàÿ\1cq\18h:Ãå\1a_S°\85[£ð ý\9d}Å\9aÏ\96Êâæ\17\99b¢Ù8ÿ\17îr¼Èñö\95@°üâèöÏ\ 5ÂK\ eGÉ{d$h¾\9dßq\ fc\83À\95¢ßµ K\86ª\9f\1e\8dÓ·ê®ê\ 1\88 Ù\94¦n%1:¿½\C¤}t\97ïî\1a\ 5ÓqF Ü\f\bfJ-²\87Û\90+\eiMxÄ\8fã@~ÞølHÝkr\8612ä\16wþO\92\ 2¿¬8×\85É\10\98YÛ\15\8fÔ\8d÷Htü(öÅ\7f)\9c(\18Y\0=²0\eôµà\9c}8\9049úzÖ}Ì\9aΡ©³c\9a\9f~\8c\1f~îÏÿ¸8§;ï~ ®è\8bËp\ 1Gô1\ 4\fñ¨\9f0:\9dÀÈù;\9fáNægãù\87\19>ïáõôdÂÓ®\16{\7fíý\ 3w]¢Îendstream
-endobj
-1666 0 obj<</Type/Page/Parent 1369 0 R/Contents 1667 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1667 0 obj<</Filter/FlateDecode/Length 1406 >>stream
-x\ 1\85V]OãF\14}çWÜò\ 2[\11\93/\ 2ô-°l\85Ôݦ`Uª\84\84Æö8\99eìIgƤüû\9e;3 Y/»hµ\b\12û~\9c{ι÷ß\83\11\rñoDçc\9ąl\ e\86Ù\90Î.ÏñszÁ?Çøo%Õá\8bét\96\8dßúb2\1ee\17o}1;˦ýϯò\83ÓOS\1a\8d(¯\91|vqNyEH<\1cR^\1eÏ[ãWÒRi\9aÆ´T\8aÎI25áCüâ7\86¤µÆ:R\8eVâYµKr¦\91~Å¿ m¥¨^ÈvmË\7f#ÀÚXO£Éå ¹®\\91pt/\9aB|È¿\1e\fi0\9a £¼:~8Vò7rMQqÜíëµ5\r©Vúj\eùá\ 3\19»\97P«'I\1fÕRy¡\8f\1c-\84_m\8c}r\19]¯dùD/¦³1BV\9a¶¦ZiÙK]ÈÚ\0bo_¸boÈy\81\92C-¨VP%$\908!å\81FKâÙ(ÔCÚxÆ¥¶\9dóVxeÚ_Räñ\f¨£©y[Ñ\8bô$\12¤kã\9c*´L "-ÕBé\ eÙ\11(¿¹ÏiÂíoV²e¼\81X\81æ©\11î A*:åæ\vkDU
-
\87¸Ue¥s½~
\9cô
\1e\9d rÄUmi¬
\95¥Ïh¡¥À
\ 4Ë
\80\8b_
\1fR >
\ 3\86\a½´µ(%Ý.h
\1e\ 3#ßÕ.Ùëg÷±ªÏ¨êg©SâPxH
\17æ
\ eÎ8p+Ô¤_
\bÈÈ*qKŦµYfmS
\84Qe
\9càôÓ%
\8d\0(³u0
\19El
\81ñ$
\9bf
\94K
\01
\8d\8f½
\92z0fR
\1fßu1$s
\99ñ;D\mÌS·¦Á
\15]Ýþ~
\7fs÷÷Í
\1d=>ÞÏ?_Í
\1f\1f\ f3úÇtäV¦Ó
\15-
\81=
\8f\ 1\88$¨yNL©^ß±3'í3
\84S
\88ò)Ô
\8dj·L¸
\r¯QeÚ£
\10²%T
\12¨¾
\e\10ÀP-¨§µ¬~Ä^
\15Ã@
\1eLÆ
\ eÖª<a^lGÚ«-²w_U
\8c\84VÎË Q
\10¾«Ö[
\99\9e÷+ÿ³
\ 5e¢
\15¬
\ 1y!H
\17s
\ 1R®
\99Õ©
\9a5¾
\91
\ f:À
\80EhT@
\9c᩵°
\ 2\1e!a
\e°
\ 4Æt;
\12\8d\0\19ÝÖ½ªa'Áa£L[ü
\ 23
\82»x í
\99V
\ eøMr¥Uk
\86\14t
\86À½
\0\86!¾UË
\95§½¼Ü5
\ 3\17\1e}5
\96w
\18v
\96\18vö
\ 3\86Å
\88»vâSgÉ\
\8fyʯ|
\9b_ÿq{ó%§£_
\8f¾
\8f\96,ã
\rö-®Ý>
\ 3\ 3½
\0\18óp
\9fP
\ 1)0
\ 3Øcí7¬þ
\84õâ
\1a3ã
\81ì
\bÖC{§Ç@¤ølpAY
\85O8Õ
\12vÇ9Z
\f2í
\ 3Bà
\8d5í²O
\1aT·m¶22¤
\86Q
\19ý,éY úøå
\9eC掮
\85c~+°½N
\92%
\88ÂàU
\ f©¿3®Y
\1a×ì{
\80ß2
\84\9f\8c«¢ñO
\a\953A½
\ 2\16\e\10ro
\7f \1dÇ
\10Áæ¸
\91µ
\95ÏÊtø
\83\8dªèàÚ¯
\ fCÄ
\8c\87ØótÈ
\91_«d-:
\8d\17¶þÛ
\9bXò£
\8cæÔvM
\ 1Û
\813}
\91¾PÆ
\9dæ×
\v º2Îï䶵ùäl
\98ÆÚ´
\18®Ð
\1e^·\Å¥
\f±
\ 6K
\86~=ïj{i
\91\84«
\8b¯;
\89F5#,Vf
\80\ 3=EsÁ
\ eÞc³
\93\92\ e\99C
\ 2Vã
\94W
\18h Ò¿
\9d´8
\18BAN
\1eR
\83\8d&
\96²¿Õ
\82b
\9d\84Á
-\1d[{\83tÁ5¶\8c[r
-AN5J\vË\19\18Ð\84ï·cAOÁ\91\93V£\0v¢à=À\e5\1e\13ïL\ 4øØ\0¨\ 2ø¢ó¦\81%\96èª\\89V¹\ 6^Ç\90\81<Xá2\888ÍDþ·\96\16\84\82\80·º8ÜmewHfÍ7\ 6\10ïÍ\ 4\87J¼mÐ\1a̶ÃÔ^Ø\vkµäË\ 2Úµ{\ 2;y¥TØÌ \ 6\9f\17o\80\19^\84ÂÙ8Ój\ 3uÙF\92\ 4\9a§\13% È6±QZS+y©c±$}cÙ¦êñ!î\93@¢w\81\8cJ\b~\9dxÇV\18\13öë\8drd\89\85\ 2xU\89\ 28ð}Eqmâlì\9dS»
-vë\9dµ\89\93\ 4ð¥£éáøNÖP\17êN÷\19_,}r\ 6\7fzø\10\8a:ýt\91ì\7f4Ã\ 5\7f1¡Ùd\8cë\1cçH82haÍW\1cdôÑ\94ÝneòL\aÛ\17\ 6çÃK~þû\eg:»Èfgc\1cBøz4\1dñk7ùÁ_\aÿ\ 3:Fï\ eendstream
-endobj
-1668 0 obj<</Type/Page/Parent 1369 0 R/Contents 1669 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
-1669 0 obj<</Filter/FlateDecode/Length 1712 >>stream
-x\ 1}WïoÛ6\10ý\9e¿â `\98\vÔvì$\8e[t\ 5\9a®\1d\ 2¬mÖd\e
-ä\v-Q\16\e\89TIÉ\8eÿû½#)Yv\9a%\bàXäýx÷îÝéÇÉ\8cNñ;£Ë9\9d-(NN'§tv>\9f,è|y\89ÏsüYIùÉÕÝÉôã+\9a\9dÓ]\8e+\8b%>d\84㧧t\97\8eæ\8bÉÙärBwÒ5tùâî;N\9fÓl\16N\8fç\978=úÚjj
-I©©*¡³pê"\9e\1a\91«Vi©¤nh:½ºþãöÃ×\7f>|\9dÞ}º947\9aÐ7Ó\92+L[flOÓJRmMU72£ÜX\12T\vç¶Æfþ,ß?¥ñìl2ç0âÍÖI\1fMw\94Lîÿ\17ijZ\ 4±\83\13\81ÜK³^îÒ\8dñÏ[\1eie\1ei«\9abB×¹?¹\15¸Â'\18\0~BB\e\ 4g\8f\9cwÖ}Ü"ó Ðøoz\e\1fhQÉ7dêF\19\80\15<J\9duÁEè¨TZNH®_?\vâ\91ßét¥ÖNÚ\8d´Ó¦ªáò»)tfd00¬Õbµ\1d}6\8d|M×\r)GµqNJ\0fÈÕ2Uùî\10;Q\1a½\ eys\85\81åLH8\14¤,ÍÖ=\1f)Ê}\10ÛQä}¤¿8\99ZÙ<\eð\17\9dJ_\vPHÚÃø¸\98±îk\89B!Æ\ 4|{\9bDâôuÌ\8cþÕ?×(¼y \11\ eKkÁ«J:'Ö\0þ:?
-R5äÄÎQ¢ôF\94*#-\eðï\81\18\85\84ý\ 5ês\ 5\14ÂLP\83\84\91\ 5IÐ\ fÖÊ´)wädÓÖ \1a§a¹!&©Ñù$:C\93ùÊ\80r½¿\95Èz²\ fü\94êAÂ^*P Ç4öð£ÇÇ\9d\11F¤\10\e XDf¶Þ\b\1aÆÑý\b\99:\83âyþöÖÉí\#«û\17´j\eÊTÆ@\81\8fµ\ 2/\10²këÚØÆ7 òðÝ\11HÈÇ7ý\18ºÐ5ãlB|
-ß\f#³\94\ 4\18\99H.\81\e\9d«uk\85o\vÀ¦t\ 4\8d/³=¨P6\9aï\8duöû4\ 5Uê\11}\9c
-ô}ßó\90!O\19F\82ó\91Z\80æ¡+\93þT)7²Lº®\ 4%\ 4\15j]\1c¥'µi×\ 5ùÃ]X]\18gûȺ\ 2x\ eÖ\ 2Jñ[âûÙ\83\18KÎÔès\9cÐûB¦\ f\t¯,¬1µ°UçÄç~¾÷Ð9åÜ»\84ú\¤Ní.ÈË°\8eV\8a&èáí§+Üò\87\0D\7f/G\99\ f\1c^\ 4\87ãùžt¾\ 5Q,\r:ã2\a\10»\ e\12ÍȲ\80tÂ\eµÌ±ÕéÇý\1cÈ\94%nÒº=êõ\11É&Å\8cÙÕQµöw
-YÖô6Z|\13,v\9a6bJòW\83\19 ´kl\9b2\9dÜÁ<\91^ÞDÉÍãAo\8a(\ 1¢òc\ 1S"·R¢\ 1Ü\ 3´P \99\91âVsÅ"'iËíÎÉ7OB\1dÄ\80<\8f\ 2õ\8d>\1c³ã³Yhy?_\97q¾.\ f¯Ád\98¯_\82Æܼ÷~½ÈEDÂ\85=\P'Ú(¹¥{üô³öÐl\9c³[U\96P3î C\19\ f$$\9acÚz.¢ï\ 5%\99Á\88ð\ 38a\e\83\1c·
-3f{\800\97v%@g\ 1ÖcX\ 2P±\11ªôô\80\18Y\b\16Ï>Ht\98W?\91?Æ\96íÀ÷Ph½\9aæ(S\86f\85\88©
-f-\ 5ñö\1a\8cÓ+\85hýp\82'S¶\9d¤°\12³d+½\ 6Î\9c¥òÔ\1cdÓº60\83e5£Õ\ e\ 1 oð\9aÕ\8e4ô\rW\r\19LY \ fY\fk\ 4\16
-¬*\0Ïh¨jX3ÂX\843\b.§c4(\17q>\ 21-\8c\81hí/C\84\9fèy®\1e1:\185\ e\ 3á¸\ 6±zÁds½F\ e\ 4·Ó\89n\r¹¾!|\ 4*(@N=-º5$A1]¬Iâ7 äÌ\ eE¶\11\98½`HZOU\1d§X¬áÍ{_¿ÞÿO4:h\14øÄ\yZ\9b\8d\12ôûç[FøÀ\eÖ\ 1_»\bèÐùAÆ\ 3í\1df|\90\1f*`©¬
-ã\1a°\9b'Ú3áG\99=P½¸\ 2FBþ|\ 3\0\1d\93á¬\ e¤\1cLlÇë\12\8aÈ㺮Á\ 5¬NHwÇ\93¶\9b©G¼à\r&nÌã?a\8aWO±\ 2ù° h(·mTÚ¢\ 1^R%\1eÐM-¶Y\9fh\12ò\ 4?̶\9b={õº\1f9è\eC\8d-\1dfÖÒÝ¿\88®»áõ®tæ%3\9a»\86éî\97%¯\95¹Hyg\82jz\19d;ÜV £¯\96\95?Z\ 4ê\93ã¹Î£b°ë\ 2\86\95\88$\v\ 3¯,\8fÒ\16\rÖ\90\1a>Lw\1f#\85\e\89]ùÆöSr[¨´ð*\1c7xÃ\e¼ÏÿßÈ´J¤\85_¤¿¡\ 1;\8dc¬\8e<zä|J\0¤Ûàå#ÔËK\95·y;\f<\8ciÆ@>2\1c¾¸a!ÆÂÑÍÔÿ\11¶$lÙ
-M\ 5!Á$ÄB\vEb´±*Jµá|;(\ fÄ\ e\92Ã\92\ 45Ýa_\15èØ~\82qÕ£\95£\ 4Q\87\ 6qz ævC/ù\1a`UÅx\fÛ\aÀc^¨ _\9d-Ûjí±Ç\8d\ 5s±¯½Ä»\ f\14(Ç\16É\82\82ÿ°P4v\17;\98}O?.ã{ßl\81÷Ìå\19-.\97¼Âݾûtõ\8en¬ù\ e^Ðï&m+Ü\1dÈX<>¾<}åW¾'/\9eç\8bådq1\ f\eáì|Îî>Ü\9düuò\1fÒC¾\ 6endstream
-endobj
-1670 0 obj<</Type/Page/Parent 1369 0 R/Contents 1671 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 1072 0 R>>endobj
-1671 0 obj<</Filter/FlateDecode/Length 1576 >>stream
-x\ 1\8dWÛnÛF\10}÷WLõ\12\ 5\88iQ\92%9\80Ñ:\8dmøÁ®k3\r\8aº\bVäRbBî²\Ò\8aþ¾gf©\eí^\12D¡HîÜÎ\993£¿\8eB\1aàoHÓ!\8d&\14\17G\83`@\93é$\18Òx6Åõ\10ÿ*M©<\18ÏN\83Ùk\ fFãÙë'\86á \98¼r\ 2^\83Aûñp}t6Äñp|\8aÏ\82Âé\f^ü·\9c\1e\8fÂI\88 Â\11\87RÐp2 ¦í7~ú!::¹\1aS\18R\94"\95ÉlJQ"Ö\a\14Åý¥uµ\vT\9eÛ\15¥Y\8eLlEkÛT\14ç\9965=õqÃ5s£ëw¤ë8xzû6ú
-\9bg\bÁÛ<\1e\85\ 1.\93þp\12\8c\82³\80"íj:ó¯í\\1f\ fÙuÿ¡1T/5Ŷ(\94Iü[§m\80}\82\1fj\9c¦ïïé \7f>Ü\?^>üvùðô\14ÝÞ\1f\9aì\aô»mÈ-m\93'4×TV¶(k\9dH\12\8aJåÜÊV »3\9cTû*[\19Ðq8B9\11Ð\ 2\1e\15õÚx8®2×lÅ5q¬\9dK\9b<_÷¨À¥Zè\80nR2¶Þ\1aèþgr6W
-DÈ\1ce&¶U¥ã:_ãÚÕ(.\8cÙªãV\8aì\8ay\10[\93\1e\9c\v¨Pß4ÜÃ\9e¼Õ\13\94HPê\11\8aF\16)\ 1"\9cÌ\16\94gF³[ÚZãHÚ \82Ö-°\11\8cnê7\ e\96\9c¥Ò:\97Í\ 1y½T\92\ e9]=³YeÞÔ\84Ê}#Ûà\82\1f\ 3\92\8a\8c*ð¶e¿\ 6ùII\95\ 3Þ\16G\91{
-S\\0ÇÅa4`½è¤\12ÁC\82¦\9e\98=§OÀøîâö²ÇÖùì\1fuQþ £q\9dYC6Ý¥¶Bâ\9az»\137¶ÄñuÜI\15\iM\92\99ÅÆú\96\18Ì\89z]êDPåoi\86êJ\16iö\1dUÅ¥Y8É´Pk°\13Pr\80\ew\80ª,ñJÇ-9ð\97µ§"[,A7®?\bË\96b\ 5¶\v\ 4\82uÛvÖ\80=N\9bÄ\916qµ\16Zoâ\ 6\80\88\92Ã]ªgÉøäj×Aíû[ú;:ïDg,ßØÉB\9fÉãoAHD)ú\e.uÞ\ 4ØMe(«i®bð\ 3½lQ´ï\92ê?\8b\ 2dΫB884\88>ü\7f²PÌsk¿5%\1dßRtù\18]?üò©«\a *\93cûxÃDá-HÄåfZ/*\vC\s\ efO
-\ 4\81GUÌÕ¦\17¸Ð\9fÁ »rès\aÐr+D:Ð\1e\96\10©\a{¸¹'\90¼\82\0qùN¡\\8dö\99W°\82ÿ!±\1d¿\ 2ÿ6²\17´I\ 5ëÄr[Â\9e×O\9d·Ý\81>c\99\ 2\17\1c¥
-\1a\ e6\7fV@H\81m¦©¥eÛþÄ]ôË×\ 6ú<×Ü\11\8e\85ßÛ¬Ö¤\16*3Ò\vY·4®Îò\ì\83})§³\91\rC\8c\fµ\1a"I²eß\ 2¾u\98¦¨(\9cïD* Û}\95{\95Êe¥S\r-\95)±\87S[ÐsZkwȧ>óQ\eÑN P\19ÚV
-©/5F\ 5B\85,WuSþ\17mÃ\rmÃC7[Ú^aäøÁ\89a\86ñ\80² \8e\88Á\83-ð{Y\15Â`\94\1d]\90\10*.\ e³¥=\99g\0 \ 4\12Næ6Vy\874[¾ø\19ÍG\91\89A®Ôq\96fЪ½\82?½=à,äG\89ú[JlÃW\90\9e¶¥aj¯g:~}:"A~tn"uKÌ\1d\8c\ 3\fHÖ¦v®fæYåY²\95£\1e\ 1Qì\14èU?\94\13\91|\7fÍ\83\8bç\ 6"[wÜV\8d1Ì+tã]$Þ=\99A\91Æñ\83]Ñ·Ý+\fà¾0L\8a®\8cBzK5Ïò¬\ 6óÑç \aÊÅÊÞq\9dëg\9dó4j*~·° ¯\ 1\8c\16\8e\88~ë\få\a¸ZÚf_\8d·§Î[IaÛûÒ{q÷ÑßÚ)øFçÛ\13/ô»\15¤/wÑ\97[\15cBµ3`³k\89\9e\vo6*.\14}\87%\ 4e\10Ô_VÃÑÅUtù û\ fj\82\822w\9a²´UW\vxG|ÍÀS_ú\95\91`6r\7fóN âù\f±2b\ 5ä5ôx4Þ®\8cã\80\1eE\ \12\82#Ô\19tt?\1eVJZ\ eË26¶\88[\f\ e
-¨\1d\9fð\ 4Ä~¢WN´]2\ 5\90ò\96fh´Ê©\81\17Æ\ fá9\93¥^\9bÛ-\ 5}Îý\93¦Y\9cáUߥ}\8ecO|Ä\ev$\1eà°\e/Ñf¬(ÜØ?Ég`«\ 5\fò`\ 4x\87*,\88æ|éM3ß\96,½\88¥\99»¸Êx\1dðuû7·KÍ-
-3\9c¿7µÒs4×\ 2ökZÖuùþäd\e\85¿j\13ج\80\17¼}ìk¶ß&\13\eK\ 3°åGQ©\12#\1e\86\7fð@à7\87¬\ 6á\ 4?|f#\9a\f\86\1eÃÇ\8bÛ\ f\17t_Ù¯¼\14~´qSà\97\83â\r\88O\1eo\ e\1cO\ag¯ÿL\18OfÁät\bb\0Ýp<âc\97ÑѯG\7f\ 3\18\9d;\ 6endstream
-endobj
-1672 0 obj<</Count 36/First 1673 0 R/Last 1922 0 R>>endobj
-1673 0 obj<</Parent 1672 0 R/Title(Table of Contents)/Dest[1372 0 R/XYZ 0 756 0]/Next 1674 0 R>>endobj
-1674 0 obj<</Parent 1672 0 R/Count -1/First 1675 0 R/Last 1675 0 R/Title(SAMBA Project Documentation)/Dest[1386 0 R/XYZ 0 786 0]/Prev 1673 0 R/Next 1676 0 R>>endobj
-1675 0 obj<</Parent 1674 0 R/Title(SAMBA Team)/Dest[1386 0 R/XYZ 0 762 0]>>endobj
-1676 0 obj<</Parent 1672 0 R/Title(Abstract)/Dest[1388 0 R/XYZ 0 786 0]/Prev 1674 0 R/Next 1677 0 R>>endobj
-1677 0 obj<</Parent 1672 0 R/Title(I. General installation)/Dest[1396 0 R/XYZ 0 786 0]/Prev 1676 0 R/Next 1678 0 R>>endobj
-1678 0 obj<</Parent 1672 0 R/Title(Introduction)/Dest[1398 0 R/XYZ 0 786 0]/Prev 1677 0 R/Next 1679 0 R>>endobj
-1679 0 obj<</Parent 1672 0 R/Count -10/First 1680 0 R/Last 1691 0 R/Title(Chapter 1. How to Install and Test SAMBA)/Dest[1402 0 R/XYZ 0 786 0]/Prev 1678 0 R/Next 1698 0 R>>endobj
-1680 0 obj<</Parent 1679 0 R/Title(1.1. Read the man pages)/Dest[1402 0 R/XYZ 0 762 0]/Next 1681 0 R>>endobj
-1681 0 obj<</Parent 1679 0 R/Title(1.2. Building the Binaries)/Dest[1402 0 R/XYZ 0 621 0]/Prev 1680 0 R/Next 1682 0 R>>endobj
-1682 0 obj<</Parent 1679 0 R/Title(1.3. The all important step)/Dest[1402 0 R/XYZ 0 216 0]/Prev 1681 0 R/Next 1683 0 R>>endobj
-1683 0 obj<</Parent 1679 0 R/Title(1.4. Create the smb configuration file.)/Dest[1404 0 R/XYZ 0 786 0]/Prev 1682 0 R/Next 1684 0 R>>endobj
-1684 0 obj<</Parent 1679 0 R/Title(1.5. Test your config file with testparm)/Dest[1404 0 R/XYZ 0 437 0]/Prev 1683 0 R/Next 1685 0 R>>endobj
-1685 0 obj<</Parent 1679 0 R/Count -2/First 1686 0 R/Last 1687 0 R/Title(1.6. Starting the smbd and nmbd)/Dest[1404 0 R/XYZ 0 309 0]/Prev 1684 0 R/Next 1688 0 R>>endobj
-1686 0 obj<</Parent 1685 0 R/Title(1.6.1. Starting from inetd.conf)/Dest[1406 0 R/XYZ 0 786 0]/Next 1687 0 R>>endobj
-1687 0 obj<</Parent 1685 0 R/Title(1.6.2. Alternative: starting it as a daemon)/Dest[1406 0 R/XYZ 0 299 0]/Prev 1686 0 R>>endobj
-1688 0 obj<</Parent 1679 0 R/Title(1.7. Try listing the shares available on your server)/Dest[1408 0 R/XYZ 0 718 0]/Prev 1685 0 R/Next 1689 0 R>>endobj
-1689 0 obj<</Parent 1679 0 R/Title(1.8. Try connecting with the unix client)/Dest[1408 0 R/XYZ 0 551 0]/Prev 1688 0 R/Next 1690 0 R>>endobj
-1690 0 obj<</Parent 1679 0 R/Title(1.9. Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client)/Dest[1408 0 R/XYZ 0 383 0]/Prev 1689 0 R/Next 1691 0 R>>endobj
-1691 0 obj<</Parent 1679 0 R/Count -6/First 1692 0 R/Last 1697 0 R/Title(1.10. What If Things Don't Work?)/Dest[1410 0 R/XYZ 0 786 0]/Prev 1690 0 R>>endobj
-1692 0 obj<</Parent 1691 0 R/Title(1.10.1. Diagnosing Problems)/Dest[1410 0 R/XYZ 0 605 0]/Next 1693 0 R>>endobj
-1693 0 obj<</Parent 1691 0 R/Title(1.10.2. Scope IDs)/Dest[1410 0 R/XYZ 0 547 0]/Prev 1692 0 R/Next 1694 0 R>>endobj
-1694 0 obj<</Parent 1691 0 R/Title(1.10.3. Choosing the Protocol Level)/Dest[1410 0 R/XYZ 0 462 0]/Prev 1693 0 R/Next 1695 0 R>>endobj
-1695 0 obj<</Parent 1691 0 R/Title(1.10.4. Printing from UNIX to a Client PC)/Dest[1412 0 R/XYZ 0 786 0]/Prev 1694 0 R/Next 1696 0 R>>endobj
-1696 0 obj<</Parent 1691 0 R/Title(1.10.5. Locking)/Dest[1412 0 R/XYZ 0 635 0]/Prev 1695 0 R/Next 1697 0 R>>endobj
-1697 0 obj<</Parent 1691 0 R/Title(1.10.6. Mapping Usernames)/Dest[1412 0 R/XYZ 0 181 0]/Prev 1696 0 R>>endobj
-1698 0 obj<</Parent 1672 0 R/Count -11/First 1699 0 R/Last 1710 0 R/Title(Chapter 2. Improved browsing in samba)/Dest[1416 0 R/XYZ 0 786 0]/Prev 1679 0 R/Next 1711 0 R>>endobj
-1699 0 obj<</Parent 1698 0 R/Title(2.1. Overview of browsing)/Dest[1416 0 R/XYZ 0 762 0]/Next 1700 0 R>>endobj
-1700 0 obj<</Parent 1698 0 R/Title(2.2. Browsing support in samba)/Dest[1416 0 R/XYZ 0 568 0]/Prev 1699 0 R/Next 1701 0 R>>endobj
-1701 0 obj<</Parent 1698 0 R/Title(2.3. Problem resolution)/Dest[1416 0 R/XYZ 0 189 0]/Prev 1700 0 R/Next 1702 0 R>>endobj
-1702 0 obj<</Parent 1698 0 R/Count -1/First 1703 0 R/Last 1703 0 R/Title(2.4. Browsing across subnets)/Dest[1418 0 R/XYZ 0 586 0]/Prev 1701 0 R/Next 1704 0 R>>endobj
-1703 0 obj<</Parent 1702 0 R/Title(2.4.1. How does cross subnet browsing work ?)/Dest[1418 0 R/XYZ 0 326 0]>>endobj
-1704 0 obj<</Parent 1698 0 R/Title(2.5. Setting up a WINS server)/Dest[1424 0 R/XYZ 0 613 0]/Prev 1702 0 R/Next 1705 0 R>>endobj
-1705 0 obj<</Parent 1698 0 R/Title(2.6. Setting up Browsing in a WORKGROUP)/Dest[1426 0 R/XYZ 0 665 0]/Prev 1704 0 R/Next 1706 0 R>>endobj
-1706 0 obj<</Parent 1698 0 R/Title(2.7. Setting up Browsing in a DOMAIN)/Dest[1428 0 R/XYZ 0 675 0]/Prev 1705 0 R/Next 1707 0 R>>endobj
-1707 0 obj<</Parent 1698 0 R/Title(2.8. Forcing samba to be the master)/Dest[1428 0 R/XYZ 0 319 0]/Prev 1706 0 R/Next 1708 0 R>>endobj
-1708 0 obj<</Parent 1698 0 R/Title(2.9. Making samba the domain master)/Dest[1430 0 R/XYZ 0 573 0]/Prev 1707 0 R/Next 1709 0 R>>endobj
-1709 0 obj<</Parent 1698 0 R/Title(2.10. Note about broadcast addresses)/Dest[1432 0 R/XYZ 0 786 0]/Prev 1708 0 R/Next 1710 0 R>>endobj
-1710 0 obj<</Parent 1698 0 R/Title(2.11. Multiple interfaces)/Dest[1432 0 R/XYZ 0 698 0]/Prev 1709 0 R>>endobj
-1711 0 obj<</Parent 1672 0 R/Count -1/First 1712 0 R/Last 1712 0 R/Title(Chapter 3. Oplocks)/Dest[1434 0 R/XYZ 0 786 0]/Prev 1698 0 R/Next 1713 0 R>>endobj
-1712 0 obj<</Parent 1711 0 R/Title(3.1. What are oplocks?)/Dest[1434 0 R/XYZ 0 762 0]>>endobj
-1713 0 obj<</Parent 1672 0 R/Count -6/First 1714 0 R/Last 1719 0 R/Title(Chapter 4. Quick Cross Subnet Browsing / Cross Workgroup Browsing guide)/Dest[1436 0 R/XYZ 0 786 0]/Prev 1711 0 R/Next 1720 0 R>>endobj
-1714 0 obj<</Parent 1713 0 R/Title(4.1. Discussion)/Dest[1436 0 R/XYZ 0 657 0]/Next 1715 0 R>>endobj
-1715 0 obj<</Parent 1713 0 R/Title(4.2. Use of the "Remote Announce" parameter)/Dest[1436 0 R/XYZ 0 212 0]/Prev 1714 0 R/Next 1716 0 R>>endobj
-1716 0 obj<</Parent 1713 0 R/Title(4.3. Use of the "Remote Browse Sync" parameter)/Dest[1438 0 R/XYZ 0 536 0]/Prev 1715 0 R/Next 1717 0 R>>endobj
-1717 0 obj<</Parent 1713 0 R/Title(4.4. Use of WINS)/Dest[1438 0 R/XYZ 0 357 0]/Prev 1716 0 R/Next 1718 0 R>>endobj
-1718 0 obj<</Parent 1713 0 R/Title(4.5. Do NOT use more than one \(1\) protocol on MS Windows machines)/Dest[1440 0 R/XYZ 0 520 0]/Prev 1717 0 R/Next 1719 0 R>>endobj
-1719 0 obj<</Parent 1713 0 R/Title(4.6. Name Resolution Order)/Dest[1440 0 R/XYZ 0 240 0]/Prev 1718 0 R>>endobj
-1720 0 obj<</Parent 1672 0 R/Count -3/First 1721 0 R/Last 1725 0 R/Title(Chapter 5. LanMan and NT Password Encryption in Samba)/Dest[1444 0 R/XYZ 0 786 0]/Prev 1713 0 R/Next 1726 0 R>>endobj
-1721 0 obj<</Parent 1720 0 R/Title(5.1. Introduction)/Dest[1444 0 R/XYZ 0 738 0]/Next 1722 0 R>>endobj
-1722 0 obj<</Parent 1720 0 R/Count -2/First 1723 0 R/Last 1724 0 R/Title(5.2. Important Notes About Security)/Dest[1444 0 R/XYZ 0 584 0]/Prev 1721 0 R/Next 1725 0 R>>endobj
-1723 0 obj<</Parent 1722 0 R/Title(5.2.1. Advantages of SMB Encryption)/Dest[1446 0 R/XYZ 0 786 0]/Next 1724 0 R>>endobj
-1724 0 obj<</Parent 1722 0 R/Title(5.2.2. Advantages of non-encrypted passwords)/Dest[1446 0 R/XYZ 0 662 0]/Prev 1723 0 R>>endobj
-1725 0 obj<</Parent 1720 0 R/Title(5.3. The smbpasswd Command)/Dest[1446 0 R/XYZ 0 564 0]/Prev 1722 0 R>>endobj
-1726 0 obj<</Parent 1672 0 R/Title(II. Type of installation)/Dest[1450 0 R/XYZ 0 786 0]/Prev 1720 0 R/Next 1727 0 R>>endobj
-1727 0 obj<</Parent 1672 0 R/Title(Introduction)/Dest[1452 0 R/XYZ 0 786 0]/Prev 1726 0 R/Next 1728 0 R>>endobj
-1728 0 obj<</Parent 1672 0 R/Count -9/First 1729 0 R/Last 1742 0 R/Title(Chapter 6. How to Configure Samba as a NT4 Primary Domain Controller)/Dest[1454 0 R/XYZ 0 786 0]/Prev 1727 0 R/Next 1743 0 R>>endobj
-1729 0 obj<</Parent 1728 0 R/Title(6.1. Prerequisite Reading)/Dest[1454 0 R/XYZ 0 738 0]/Next 1730 0 R>>endobj
-1730 0 obj<</Parent 1728 0 R/Title(6.2. Background)/Dest[1454 0 R/XYZ 0 637 0]/Prev 1729 0 R/Next 1731 0 R>>endobj
-1731 0 obj<</Parent 1728 0 R/Title(6.3. Configuring the Samba Domain Controller)/Dest[1456 0 R/XYZ 0 771 0]/Prev 1730 0 R/Next 1732 0 R>>endobj
-1732 0 obj<</Parent 1728 0 R/Count -3/First 1733 0 R/Last 1735 0 R/Title(6.4. Creating Machine Trust Accounts and Joining Clients to the Domain)/Dest[1458 0 R/XYZ 0 665 0]/Prev 1731 0 R/Next 1736 0 R>>endobj
-1733 0 obj<</Parent 1732 0 R/Title(6.4.1. Manual Creation of Machine Trust Accounts)/Dest[1458 0 R/XYZ 0 279 0]/Next 1734 0 R>>endobj
-1734 0 obj<</Parent 1732 0 R/Title(6.4.2. "On-the-Fly" Creation of Machine Trust Accounts)/Dest[1460 0 R/XYZ 0 372 0]/Prev 1733 0 R/Next 1735 0 R>>endobj
-1735 0 obj<</Parent 1732 0 R/Title(6.4.3. Joining the Client to the Domain)/Dest[1462 0 R/XYZ 0 786 0]/Prev 1734 0 R>>endobj
-1736 0 obj<</Parent 1728 0 R/Title(6.5. Common Problems and Errors)/Dest[1462 0 R/XYZ 0 437 0]/Prev 1732 0 R/Next 1737 0 R>>endobj
-1737 0 obj<</Parent 1728 0 R/Title(6.6. System Policies and Profiles)/Dest[1464 0 R/XYZ 0 182 0]/Prev 1736 0 R/Next 1738 0 R>>endobj
-1738 0 obj<</Parent 1728 0 R/Title(6.7. What other help can I get?)/Dest[1466 0 R/XYZ 0 177 0]/Prev 1737 0 R/Next 1739 0 R>>endobj
-1739 0 obj<</Parent 1728 0 R/Count -2/First 1740 0 R/Last 1741 0 R/Title(6.8. Domain Control for Windows 9x/ME)/Dest[1472 0 R/XYZ 0 560 0]/Prev 1738 0 R/Next 1742 0 R>>endobj
-1740 0 obj<</Parent 1739 0 R/Title(6.8.1. Configuration Instructions: Network Logons)/Dest[1474 0 R/XYZ 0 573 0]/Next 1741 0 R>>endobj
-1741 0 obj<</Parent 1739 0 R/Title(6.8.2. Configuration Instructions: Setting up Roaming User Profiles)/Dest[1476 0 R/XYZ 0 786 0]/Prev 1740 0 R>>endobj
-1742 0 obj<</Parent 1728 0 R/Title(6.9. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba)/Dest[1484 0 R/XYZ 0 786 0]/Prev 1739 0 R>>endobj
-1743 0 obj<</Parent 1672 0 R/Count -5/First 1744 0 R/Last 1750 0 R/Title(Chapter 7. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain)/Dest[1488 0 R/XYZ 0 786 0]/Prev 1728 0 R/Next 1752 0 R>>endobj
-1744 0 obj<</Parent 1743 0 R/Title(7.1. Prerequisite Reading)/Dest[1488 0 R/XYZ 0 738 0]/Next 1745 0 R>>endobj
-1745 0 obj<</Parent 1743 0 R/Title(7.2. Background)/Dest[1488 0 R/XYZ 0 650 0]/Prev 1744 0 R/Next 1746 0 R>>endobj
-1746 0 obj<</Parent 1743 0 R/Count -2/First 1747 0 R/Last 1748 0 R/Title(7.3. What qualifies a Domain Controller on the network?)/Dest[1488 0 R/XYZ 0 278 0]/Prev 1745 0 R/Next 1749 0 R>>endobj
-1747 0 obj<</Parent 1746 0 R/Title(7.3.1. How does a Workstation find its domain controller?)/Dest[1490 0 R/XYZ 0 786 0]/Next 1748 0 R>>endobj
-1748 0 obj<</Parent 1746 0 R/Title(7.3.2. When is the PDC needed?)/Dest[1490 0 R/XYZ 0 662 0]/Prev 1747 0 R>>endobj
-1749 0 obj<</Parent 1743 0 R/Title(7.4. Can Samba be a Backup Domain Controller?)/Dest[1490 0 R/XYZ 0 577 0]/Prev 1746 0 R/Next 1750 0 R>>endobj
-1750 0 obj<</Parent 1743 0 R/Count -1/First 1751 0 R/Last 1751 0 R/Title(7.5. How do I set up a Samba BDC?)/Dest[1490 0 R/XYZ 0 436 0]/Prev 1749 0 R>>endobj
-1751 0 obj<</Parent 1750 0 R/Title(7.5.1. How do I replicate the smbpasswd file?)/Dest[1492 0 R/XYZ 0 673 0]>>endobj
-1752 0 obj<</Parent 1672 0 R/Count -8/First 1753 0 R/Last 1761 0 R/Title(Chapter 8. Samba as a ADS domain member)/Dest[1494 0 R/XYZ 0 786 0]/Prev 1743 0 R/Next 1762 0 R>>endobj
-1753 0 obj<</Parent 1752 0 R/Title(8.1. Installing the required packages for Debian)/Dest[1494 0 R/XYZ 0 577 0]/Next 1754 0 R>>endobj
-1754 0 obj<</Parent 1752 0 R/Title(8.2. Installing the required packages for RedHat)/Dest[1494 0 R/XYZ 0 470 0]/Prev 1753 0 R/Next 1755 0 R>>endobj
-1755 0 obj<</Parent 1752 0 R/Title(8.3. Compile Samba)/Dest[1494 0 R/XYZ 0 294 0]/Prev 1754 0 R/Next 1756 0 R>>endobj
-1756 0 obj<</Parent 1752 0 R/Title(8.4. Setup your /etc/krb5.conf)/Dest[1496 0 R/XYZ 0 609 0]/Prev 1755 0 R/Next 1757 0 R>>endobj
-1757 0 obj<</Parent 1752 0 R/Count -1/First 1758 0 R/Last 1758 0 R/Title(8.5. Create the computer account)/Dest[1496 0 R/XYZ 0 293 0]/Prev 1756 0 R/Next 1759 0 R>>endobj
-1758 0 obj<</Parent 1757 0 R/Title(8.5.1. Possible errors)/Dest[1496 0 R/XYZ 0 204 0]>>endobj
-1759 0 obj<</Parent 1752 0 R/Title(8.6. Test your server setup)/Dest[1498 0 R/XYZ 0 745 0]/Prev 1757 0 R/Next 1760 0 R>>endobj
-1760 0 obj<</Parent 1752 0 R/Title(8.7. Testing with smbclient)/Dest[1498 0 R/XYZ 0 656 0]/Prev 1759 0 R/Next 1761 0 R>>endobj
-1761 0 obj<</Parent 1752 0 R/Title(8.8. Notes)/Dest[1498 0 R/XYZ 0 581 0]/Prev 1760 0 R>>endobj
-1762 0 obj<</Parent 1672 0 R/Count -3/First 1763 0 R/Last 1765 0 R/Title(Chapter 9. Samba as a NT4 domain member)/Dest[1500 0 R/XYZ 0 786 0]/Prev 1752 0 R/Next 1766 0 R>>endobj
-1763 0 obj<</Parent 1762 0 R/Title(9.1. Joining an NT Domain with Samba 2.2)/Dest[1500 0 R/XYZ 0 762 0]/Next 1764 0 R>>endobj
-1764 0 obj<</Parent 1762 0 R/Title(9.2. Samba and Windows 2000 Domains)/Dest[1502 0 R/XYZ 0 415 0]/Prev 1763 0 R/Next 1765 0 R>>endobj
-1765 0 obj<</Parent 1762 0 R/Title(9.3. Why is this better than security = server?)/Dest[1502 0 R/XYZ 0 207 0]/Prev 1764 0 R>>endobj
-1766 0 obj<</Parent 1672 0 R/Title(III. Optional configuration)/Dest[1506 0 R/XYZ 0 786 0]/Prev 1762 0 R/Next 1767 0 R>>endobj
-1767 0 obj<</Parent 1672 0 R/Title(Introduction)/Dest[1508 0 R/XYZ 0 786 0]/Prev 1766 0 R/Next 1768 0 R>>endobj
-1768 0 obj<</Parent 1672 0 R/Count -6/First 1769 0 R/Last 1786 0 R/Title(Chapter 10. Integrating MS Windows networks with Samba)/Dest[1514 0 R/XYZ 0 786 0]/Prev 1767 0 R/Next 1787 0 R>>endobj
-1769 0 obj<</Parent 1768 0 R/Title(10.1. Agenda)/Dest[1514 0 R/XYZ 0 738 0]/Next 1770 0 R>>endobj
-1770 0 obj<</Parent 1768 0 R/Count -4/First 1771 0 R/Last 1774 0 R/Title(10.2. Name Resolution in a pure Unix/Linux world)/Dest[1514 0 R/XYZ 0 491 0]/Prev 1769 0 R/Next 1775 0 R>>endobj
-1771 0 obj<</Parent 1770 0 R/Title(10.2.1. /etc/hosts)/Dest[1514 0 R/XYZ 0 363 0]/Next 1772 0 R>>endobj
-1772 0 obj<</Parent 1770 0 R/Title(10.2.2. /etc/resolv.conf)/Dest[1516 0 R/XYZ 0 494 0]/Prev 1771 0 R/Next 1773 0 R>>endobj
-1773 0 obj<</Parent 1770 0 R/Title(10.2.3. /etc/host.conf)/Dest[1516 0 R/XYZ 0 356 0]/Prev 1772 0 R/Next 1774 0 R>>endobj
-1774 0 obj<</Parent 1770 0 R/Title(10.2.4. /etc/nsswitch.conf)/Dest[1516 0 R/XYZ 0 210 0]/Prev 1773 0 R>>endobj
-1775 0 obj<</Parent 1768 0 R/Count -5/First 1776 0 R/Last 1780 0 R/Title(10.3. Name resolution as used within MS Windows networking)/Dest[1518 0 R/XYZ 0 392 0]/Prev 1770 0 R/Next 1781 0 R>>endobj
-1776 0 obj<</Parent 1775 0 R/Title(10.3.1. The NetBIOS Name Cache)/Dest[1520 0 R/XYZ 0 319 0]/Next 1777 0 R>>endobj
-1777 0 obj<</Parent 1775 0 R/Title(10.3.2. The LMHOSTS file)/Dest[1522 0 R/XYZ 0 786 0]/Prev 1776 0 R/Next 1778 0 R>>endobj
-1778 0 obj<</Parent 1775 0 R/Title(10.3.3. HOSTS file)/Dest[1524 0 R/XYZ 0 512 0]/Prev 1777 0 R/Next 1779 0 R>>endobj
-1779 0 obj<</Parent 1775 0 R/Title(10.3.4. DNS Lookup)/Dest[1524 0 R/XYZ 0 414 0]/Prev 1778 0 R/Next 1780 0 R>>endobj
-1780 0 obj<</Parent 1775 0 R/Title(10.3.5. WINS Lookup)/Dest[1524 0 R/XYZ 0 276 0]/Prev 1779 0 R>>endobj
-1781 0 obj<</Parent 1768 0 R/Title(10.4. How browsing functions and how to deploy stable and dependable browsing using Samba)/Dest[1526 0 R/XYZ 0 723 0]/Prev 1775 0 R/Next 1782 0 R>>endobj
-1782 0 obj<</Parent 1768 0 R/Count -3/First 1783 0 R/Last 1785 0 R/Title(10.5. MS Windows security options and how to configure Samba for seemless integration)/Dest[1526 0 R/XYZ 0 179 0]/Prev 1781 0 R/Next 1786 0 R>>endobj
-1783 0 obj<</Parent 1782 0 R/Title(10.5.1. Use MS Windows NT as an authentication server)/Dest[1530 0 R/XYZ 0 786 0]/Next 1784 0 R>>endobj
-1784 0 obj<</Parent 1782 0 R/Title(10.5.2. Make Samba a member of an MS Windows NT security domain)/Dest[1530 0 R/XYZ 0 537 0]/Prev 1783 0 R/Next 1785 0 R>>endobj
-1785 0 obj<</Parent 1782 0 R/Title(10.5.3. Configure Samba as an authentication server)/Dest[1530 0 R/XYZ 0 185 0]/Prev 1784 0 R>>endobj
-1786 0 obj<</Parent 1768 0 R/Title(10.6. Conclusions)/Dest[1532 0 R/XYZ 0 316 0]/Prev 1782 0 R>>endobj
-1787 0 obj<</Parent 1672 0 R/Count -7/First 1788 0 R/Last 1796 0 R/Title(Chapter 11. UNIX Permission Bits and Windows NT Access Control Lists)/Dest[1534 0 R/XYZ 0 786 0]/Prev 1768 0 R/Next 1797 0 R>>endobj
-1788 0 obj<</Parent 1787 0 R/Title(11.1. Viewing and changing UNIX permissions using the NT security dialogs)/Dest[1534 0 R/XYZ 0 738 0]/Next 1789 0 R>>endobj
-1789 0 obj<</Parent 1787 0 R/Title(11.2. How to view file security on a Samba share)/Dest[1534 0 R/XYZ 0 550 0]/Prev 1788 0 R/Next 1790 0 R>>endobj
-1790 0 obj<</Parent 1787 0 R/Title(11.3. Viewing file ownership)/Dest[1534 0 R/XYZ 0 383 0]/Prev 1789 0 R/Next 1791 0 R>>endobj
-1791 0 obj<</Parent 1787 0 R/Count -2/First 1792 0 R/Last 1793 0 R/Title(11.4. Viewing file or directory permissions)/Dest[1536 0 R/XYZ 0 718 0]/Prev 1790 0 R/Next 1794 0 R>>endobj
-1792 0 obj<</Parent 1791 0 R/Title(11.4.1. File Permissions)/Dest[1536 0 R/XYZ 0 485 0]/Next 1793 0 R>>endobj
-1793 0 obj<</Parent 1791 0 R/Title(11.4.2. Directory Permissions)/Dest[1536 0 R/XYZ 0 241 0]/Prev 1792 0 R>>endobj
-1794 0 obj<</Parent 1787 0 R/Title(11.5. Modifying file or directory permissions)/Dest[1538 0 R/XYZ 0 745 0]/Prev 1791 0 R/Next 1795 0 R>>endobj
-1795 0 obj<</Parent 1787 0 R/Title(11.6. Interaction with the standard Samba create mask parameters)/Dest[1538 0 R/XYZ 0 313 0]/Prev 1794 0 R/Next 1796 0 R>>endobj
-1796 0 obj<</Parent 1787 0 R/Title(11.7. Interaction with the standard Samba file attribute mapping)/Dest[1542 0 R/XYZ 0 652 0]/Prev 1795 0 R>>endobj
-1797 0 obj<</Parent 1672 0 R/Count -3/First 1798 0 R/Last 1800 0 R/Title(Chapter 12. Configuring PAM for distributed but centrally managed authentication)/Dest[1544 0 R/XYZ 0 786 0]/Prev 1787 0 R/Next 1801 0 R>>endobj
-1798 0 obj<</Parent 1797 0 R/Title(12.1. Samba and PAM)/Dest[1544 0 R/XYZ 0 738 0]/Next 1799 0 R>>endobj
-1799 0 obj<</Parent 1797 0 R/Title(12.2. Distributed Authentication)/Dest[1546 0 R/XYZ 0 201 0]/Prev 1798 0 R/Next 1800 0 R>>endobj
-1800 0 obj<</Parent 1797 0 R/Title(12.3. PAM Configuration in smb.conf)/Dest[1548 0 R/XYZ 0 758 0]/Prev 1799 0 R>>endobj
-1801 0 obj<</Parent 1672 0 R/Count -1/First 1802 0 R/Last 1802 0 R/Title(Chapter 13. Hosting a Microsoft Distributed File System tree on Samba)/Dest[1550 0 R/XYZ 0 786 0]/Prev 1797 0 R/Next 1804 0 R>>endobj
-1802 0 obj<</Parent 1801 0 R/Count -1/First 1803 0 R/Last 1803 0 R/Title(13.1. Instructions)/Dest[1550 0 R/XYZ 0 738 0]>>endobj
-1803 0 obj<</Parent 1802 0 R/Title(13.1.1. Notes)/Dest[1552 0 R/XYZ 0 705 0]>>endobj
-1804 0 obj<</Parent 1672 0 R/Count -4/First 1805 0 R/Last 1817 0 R/Title(Chapter 14. Printing Support)/Dest[1554 0 R/XYZ 0 786 0]/Prev 1801 0 R/Next 1827 0 R>>endobj
-1805 0 obj<</Parent 1804 0 R/Title(14.1. Introduction)/Dest[1554 0 R/XYZ 0 762 0]/Next 1806 0 R>>endobj
-1806 0 obj<</Parent 1804 0 R/Count -5/First 1807 0 R/Last 1811 0 R/Title(14.2. Configuration)/Dest[1554 0 R/XYZ 0 370 0]/Prev 1805 0 R/Next 1812 0 R>>endobj
-1807 0 obj<</Parent 1806 0 R/Title(14.2.1. Creating [print$])/Dest[1554 0 R/XYZ 0 184 0]/Next 1808 0 R>>endobj
-1808 0 obj<</Parent 1806 0 R/Title(14.2.2. Setting Drivers for Existing Printers)/Dest[1558 0 R/XYZ 0 623 0]/Prev 1807 0 R/Next 1809 0 R>>endobj
-1809 0 obj<</Parent 1806 0 R/Title(14.2.3. Support a large number of printers)/Dest[1558 0 R/XYZ 0 208 0]/Prev 1808 0 R/Next 1810 0 R>>endobj
-1810 0 obj<</Parent 1806 0 R/Title(14.2.4. Adding New Printers via the Windows NT APW)/Dest[1560 0 R/XYZ 0 512 0]/Prev 1809 0 R/Next 1811 0 R>>endobj
-1811 0 obj<</Parent 1806 0 R/Title(14.2.5. Samba and Printer Ports)/Dest[1562 0 R/XYZ 0 339 0]/Prev 1810 0 R>>endobj
-1812 0 obj<</Parent 1804 0 R/Count -4/First 1813 0 R/Last 1816 0 R/Title(14.3. The Imprints Toolset)/Dest[1564 0 R/XYZ 0 786 0]/Prev 1806 0 R/Next 1817 0 R>>endobj
-1813 0 obj<</Parent 1812 0 R/Title(14.3.1. What is Imprints?)/Dest[1564 0 R/XYZ 0 685 0]/Next 1814 0 R>>endobj
-1814 0 obj<</Parent 1812 0 R/Title(14.3.2. Creating Printer Driver Packages)/Dest[1564 0 R/XYZ 0 560 0]/Prev 1813 0 R/Next 1815 0 R>>endobj
-1815 0 obj<</Parent 1812 0 R/Title(14.3.3. The Imprints server)/Dest[1564 0 R/XYZ 0 475 0]/Prev 1814 0 R/Next 1816 0 R>>endobj
-1816 0 obj<</Parent 1812 0 R/Title(14.3.4. The Installation Client)/Dest[1564 0 R/XYZ 0 377 0]/Prev 1815 0 R>>endobj
-1817 0 obj<</Parent 1804 0 R/Count -9/First 1818 0 R/Last 1826 0 R/Title(14.4. Diagnosis)/Dest[1566 0 R/XYZ 0 493 0]/Prev 1812 0 R>>endobj
-1818 0 obj<</Parent 1817 0 R/Title(14.4.1. Introduction)/Dest[1566 0 R/XYZ 0 472 0]/Next 1819 0 R>>endobj
-1819 0 obj<</Parent 1817 0 R/Title(14.4.2. Debugging printer problems)/Dest[1568 0 R/XYZ 0 532 0]/Prev 1818 0 R/Next 1820 0 R>>endobj
-1820 0 obj<</Parent 1817 0 R/Title(14.4.3. What printers do I have?)/Dest[1570 0 R/XYZ 0 745 0]/Prev 1819 0 R/Next 1821 0 R>>endobj
-1821 0 obj<</Parent 1817 0 R/Title(14.4.4. Setting up printcap and print servers)/Dest[1570 0 R/XYZ 0 564 0]/Prev 1820 0 R/Next 1822 0 R>>endobj
-1822 0 obj<</Parent 1817 0 R/Title(14.4.5. Job sent, no output)/Dest[1572 0 R/XYZ 0 786 0]/Prev 1821 0 R/Next 1823 0 R>>endobj
-1823 0 obj<</Parent 1817 0 R/Title(14.4.6. Job sent, strange output)/Dest[1572 0 R/XYZ 0 447 0]/Prev 1822 0 R/Next 1824 0 R>>endobj
-1824 0 obj<</Parent 1817 0 R/Title(14.4.7. Raw PostScript printed)/Dest[1574 0 R/XYZ 0 771 0]/Prev 1823 0 R/Next 1825 0 R>>endobj
-1825 0 obj<</Parent 1817 0 R/Title(14.4.8. Advanced Printing)/Dest[1574 0 R/XYZ 0 686 0]/Prev 1824 0 R/Next 1826 0 R>>endobj
-1826 0 obj<</Parent 1817 0 R/Title(14.4.9. Real debugging)/Dest[1574 0 R/XYZ 0 588 0]/Prev 1825 0 R>>endobj
-1827 0 obj<</Parent 1672 0 R/Count -2/First 1828 0 R/Last 1829 0 R/Title(Chapter 15. Security levels)/Dest[1576 0 R/XYZ 0 786 0]/Prev 1804 0 R/Next 1830 0 R>>endobj
-1828 0 obj<</Parent 1827 0 R/Title(15.1. Introduction)/Dest[1576 0 R/XYZ 0 762 0]/Next 1829 0 R>>endobj
-1829 0 obj<</Parent 1827 0 R/Title(15.2. More complete description of security levels)/Dest[1576 0 R/XYZ 0 520 0]/Prev 1828 0 R>>endobj
-1830 0 obj<</Parent 1672 0 R/Count -7/First 1831 0 R/Last 1846 0 R/Title(Chapter 16. Unified Logons between Windows NT and UNIX using Winbind)/Dest[1580 0 R/XYZ 0 786 0]/Prev 1827 0 R/Next 1847 0 R>>endobj
-1831 0 obj<</Parent 1830 0 R/Title(16.1. Abstract)/Dest[1580 0 R/XYZ 0 738 0]/Next 1832 0 R>>endobj
-1832 0 obj<</Parent 1830 0 R/Title(16.2. Introduction)/Dest[1580 0 R/XYZ 0 597 0]/Prev 1831 0 R/Next 1833 0 R>>endobj
-1833 0 obj<</Parent 1830 0 R/Count -1/First 1834 0 R/Last 1834 0 R/Title(16.3. What Winbind Provides)/Dest[1580 0 R/XYZ 0 284 0]/Prev 1832 0 R/Next 1835 0 R>>endobj
-1834 0 obj<</Parent 1833 0 R/Title(16.3.1. Target Uses)/Dest[1582 0 R/XYZ 0 613 0]>>endobj
-1835 0 obj<</Parent 1830 0 R/Count -5/First 1836 0 R/Last 1840 0 R/Title(16.4. How Winbind Works)/Dest[1582 0 R/XYZ 0 462 0]/Prev 1833 0 R/Next 1841 0 R>>endobj
-1836 0 obj<</Parent 1835 0 R/Title(16.4.1. Microsoft Remote Procedure Calls)/Dest[1582 0 R/XYZ 0 347 0]/Next 1837 0 R>>endobj
-1837 0 obj<</Parent 1835 0 R/Title(16.4.2. Name Service Switch)/Dest[1584 0 R/XYZ 0 786 0]/Prev 1836 0 R/Next 1838 0 R>>endobj
-1838 0 obj<</Parent 1835 0 R/Title(16.4.3. Pluggable Authentication Modules)/Dest[1584 0 R/XYZ 0 345 0]/Prev 1837 0 R/Next 1839 0 R>>endobj
-1839 0 obj<</Parent 1835 0 R/Title(16.4.4. User and Group ID Allocation)/Dest[1586 0 R/XYZ 0 718 0]/Prev 1838 0 R/Next 1840 0 R>>endobj
-1840 0 obj<</Parent 1835 0 R/Title(16.4.5. Result Caching)/Dest[1586 0 R/XYZ 0 541 0]/Prev 1839 0 R>>endobj
-1841 0 obj<</Parent 1830 0 R/Count -3/First 1842 0 R/Last 1844 0 R/Title(16.5. Installation and Configuration)/Dest[1586 0 R/XYZ 0 403 0]/Prev 1835 0 R/Next 1845 0 R>>endobj
-1842 0 obj<</Parent 1841 0 R/Title(16.5.1. Introduction)/Dest[1586 0 R/XYZ 0 262 0]/Next 1843 0 R>>endobj
-1843 0 obj<</Parent 1841 0 R/Title(16.5.2. Requirements)/Dest[1588 0 R/XYZ 0 652 0]/Prev 1842 0 R/Next 1844 0 R>>endobj
-1844 0 obj<</Parent 1841 0 R/Title(16.5.3. Testing Things Out)/Dest[1588 0 R/XYZ 0 383 0]/Prev 1843 0 R>>endobj
-1845 0 obj<</Parent 1830 0 R/Title(16.6. Limitations)/Dest[1602 0 R/XYZ 0 349 0]/Prev 1841 0 R/Next 1846 0 R>>endobj
-1846 0 obj<</Parent 1830 0 R/Title(16.7. Conclusion)/Dest[1604 0 R/XYZ 0 786 0]/Prev 1845 0 R>>endobj
-1847 0 obj<</Parent 1672 0 R/Count -4/First 1848 0 R/Last 1851 0 R/Title(Chapter 17. Passdb MySQL plugin)/Dest[1606 0 R/XYZ 0 786 0]/Prev 1830 0 R/Next 1852 0 R>>endobj
-1848 0 obj<</Parent 1847 0 R/Title(17.1. Building)/Dest[1606 0 R/XYZ 0 762 0]/Next 1849 0 R>>endobj
-1849 0 obj<</Parent 1847 0 R/Title(17.2. Configuring)/Dest[1606 0 R/XYZ 0 647 0]/Prev 1848 0 R/Next 1850 0 R>>endobj
-1850 0 obj<</Parent 1847 0 R/Title(17.3. Using plaintext passwords or encrypted password)/Dest[1608 0 R/XYZ 0 621 0]/Prev 1849 0 R/Next 1851 0 R>>endobj
-1851 0 obj<</Parent 1847 0 R/Title(17.4. Getting non-column data from the table)/Dest[1608 0 R/XYZ 0 467 0]/Prev 1850 0 R>>endobj
-1852 0 obj<</Parent 1672 0 R/Count -2/First 1853 0 R/Last 1854 0 R/Title(Chapter 18. Passdb XML plugin)/Dest[1610 0 R/XYZ 0 786 0]/Prev 1847 0 R/Next 1855 0 R>>endobj
-1853 0 obj<</Parent 1852 0 R/Title(18.1. Building)/Dest[1610 0 R/XYZ 0 762 0]/Next 1854 0 R>>endobj
-1854 0 obj<</Parent 1852 0 R/Title(18.2. Usage)/Dest[1610 0 R/XYZ 0 661 0]/Prev 1853 0 R>>endobj
-1855 0 obj<</Parent 1672 0 R/Count -10/First 1856 0 R/Last 1867 0 R/Title(Chapter 19. Storing Samba's User/Machine Account information in an LDAP Directory)/Dest[1612 0 R/XYZ 0 786 0]/Prev 1852 0 R/Next 1868 0 R>>endobj
-1856 0 obj<</Parent 1855 0 R/Title(19.1. Purpose)/Dest[1612 0 R/XYZ 0 738 0]/Next 1857 0 R>>endobj
-1857 0 obj<</Parent 1855 0 R/Title(19.2. Introduction)/Dest[1612 0 R/XYZ 0 465 0]/Prev 1856 0 R/Next 1858 0 R>>endobj
-1858 0 obj<</Parent 1855 0 R/Title(19.3. Supported LDAP Servers)/Dest[1614 0 R/XYZ 0 626 0]/Prev 1857 0 R/Next 1859 0 R>>endobj
-1859 0 obj<</Parent 1855 0 R/Title(19.4. Schema and Relationship to the RFC 2307 posixAccount)/Dest[1614 0 R/XYZ 0 524 0]/Prev 1858 0 R/Next 1860 0 R>>endobj
-1860 0 obj<</Parent 1855 0 R/Count -2/First 1861 0 R/Last 1862 0 R/Title(19.5. Configuring Samba with LDAP)/Dest[1616 0 R/XYZ 0 786 0]/Prev 1859 0 R/Next 1863 0 R>>endobj
-1861 0 obj<</Parent 1860 0 R/Title(19.5.1. OpenLDAP configuration)/Dest[1616 0 R/XYZ 0 766 0]/Next 1862 0 R>>endobj
-1862 0 obj<</Parent 1860 0 R/Title(19.5.2. Configuring Samba)/Dest[1616 0 R/XYZ 0 196 0]/Prev 1861 0 R>>endobj
-1863 0 obj<</Parent 1855 0 R/Title(19.6. Accounts and Groups management)/Dest[1618 0 R/XYZ 0 296 0]/Prev 1860 0 R/Next 1864 0 R>>endobj
-1864 0 obj<</Parent 1855 0 R/Title(19.7. Security and sambaAccount)/Dest[1620 0 R/XYZ 0 771 0]/Prev 1863 0 R/Next 1865 0 R>>endobj
-1865 0 obj<</Parent 1855 0 R/Title(19.8. LDAP specials attributes for sambaAccounts)/Dest[1620 0 R/XYZ 0 389 0]/Prev 1864 0 R/Next 1866 0 R>>endobj
-1866 0 obj<</Parent 1855 0 R/Title(19.9. Example LDIF Entries for a sambaAccount)/Dest[1622 0 R/XYZ 0 375 0]/Prev 1865 0 R/Next 1867 0 R>>endobj
-1867 0 obj<</Parent 1855 0 R/Title(19.10. Comments)/Dest[1624 0 R/XYZ 0 544 0]/Prev 1866 0 R>>endobj
-1868 0 obj<</Parent 1672 0 R/Count -2/First 1869 0 R/Last 1870 0 R/Title(Chapter 20. HOWTO Access Samba source code via CVS)/Dest[1626 0 R/XYZ 0 786 0]/Prev 1855 0 R/Next 1873 0 R>>endobj
-1869 0 obj<</Parent 1868 0 R/Title(20.1. Introduction)/Dest[1626 0 R/XYZ 0 738 0]/Next 1870 0 R>>endobj
-1870 0 obj<</Parent 1868 0 R/Count -2/First 1871 0 R/Last 1872 0 R/Title(20.2. CVS Access to samba.org)/Dest[1626 0 R/XYZ 0 610 0]/Prev 1869 0 R>>endobj
-1871 0 obj<</Parent 1870 0 R/Title(20.2.1. Access via CVSweb)/Dest[1626 0 R/XYZ 0 522 0]/Next 1872 0 R>>endobj
-1872 0 obj<</Parent 1870 0 R/Title(20.2.2. Access via cvs)/Dest[1626 0 R/XYZ 0 411 0]/Prev 1871 0 R>>endobj
-1873 0 obj<</Parent 1672 0 R/Title(Chapter 21. Group mapping HOWTO)/Dest[1630 0 R/XYZ 0 786 0]/Prev 1868 0 R/Next 1874 0 R>>endobj
-1874 0 obj<</Parent 1672 0 R/Count -17/First 1875 0 R/Last 1894 0 R/Title(Chapter 22. Samba performance issues)/Dest[1632 0 R/XYZ 0 786 0]/Prev 1873 0 R/Next 1895 0 R>>endobj
-1875 0 obj<</Parent 1874 0 R/Title(22.1. Comparisons)/Dest[1632 0 R/XYZ 0 762 0]/Next 1876 0 R>>endobj
-1876 0 obj<</Parent 1874 0 R/Count -3/First 1877 0 R/Last 1879 0 R/Title(22.2. Oplocks)/Dest[1632 0 R/XYZ 0 502 0]/Prev 1875 0 R/Next 1880 0 R>>endobj
-1877 0 obj<</Parent 1876 0 R/Title(22.2.1. Overview)/Dest[1632 0 R/XYZ 0 482 0]/Next 1878 0 R>>endobj
-1878 0 obj<</Parent 1876 0 R/Title(22.2.2. Level2 Oplocks)/Dest[1632 0 R/XYZ 0 199 0]/Prev 1877 0 R/Next 1879 0 R>>endobj
-1879 0 obj<</Parent 1876 0 R/Title(22.2.3. Old 'fake oplocks' option - deprecated)/Dest[1634 0 R/XYZ 0 705 0]/Prev 1878 0 R>>endobj
-1880 0 obj<</Parent 1874 0 R/Title(22.3. Socket options)/Dest[1634 0 R/XYZ 0 567 0]/Prev 1876 0 R/Next 1881 0 R>>endobj
-1881 0 obj<</Parent 1874 0 R/Title(22.4. Read size)/Dest[1634 0 R/XYZ 0 307 0]/Prev 1880 0 R/Next 1882 0 R>>endobj
-1882 0 obj<</Parent 1874 0 R/Title(22.5. Max xmit)/Dest[1636 0 R/XYZ 0 771 0]/Prev 1881 0 R/Next 1883 0 R>>endobj
-1883 0 obj<</Parent 1874 0 R/Title(22.6. Locking)/Dest[1636 0 R/XYZ 0 590 0]/Prev 1882 0 R/Next 1884 0 R>>endobj
-1884 0 obj<</Parent 1874 0 R/Title(22.7. Share modes)/Dest[1636 0 R/XYZ 0 462 0]/Prev 1883 0 R/Next 1885 0 R>>endobj
-1885 0 obj<</Parent 1874 0 R/Title(22.8. Log level)/Dest[1636 0 R/XYZ 0 242 0]/Prev 1884 0 R/Next 1886 0 R>>endobj
-1886 0 obj<</Parent 1874 0 R/Title(22.9. Wide lines)/Dest[1638 0 R/XYZ 0 786 0]/Prev 1885 0 R/Next 1887 0 R>>endobj
-1887 0 obj<</Parent 1874 0 R/Title(22.10. Read raw)/Dest[1638 0 R/XYZ 0 698 0]/Prev 1886 0 R/Next 1888 0 R>>endobj
-1888 0 obj<</Parent 1874 0 R/Title(22.11. Write raw)/Dest[1638 0 R/XYZ 0 530 0]/Prev 1887 0 R/Next 1889 0 R>>endobj
-1889 0 obj<</Parent 1874 0 R/Title(22.12. Read prediction)/Dest[1638 0 R/XYZ 0 402 0]/Prev 1888 0 R/Next 1890 0 R>>endobj
-1890 0 obj<</Parent 1874 0 R/Title(22.13. Memory mapping)/Dest[1638 0 R/XYZ 0 182 0]/Prev 1889 0 R/Next 1891 0 R>>endobj
-1891 0 obj<</Parent 1874 0 R/Title(22.14. Slow Clients)/Dest[1640 0 R/XYZ 0 692 0]/Prev 1890 0 R/Next 1892 0 R>>endobj
-1892 0 obj<</Parent 1874 0 R/Title(22.15. Slow Logins)/Dest[1640 0 R/XYZ 0 564 0]/Prev 1891 0 R/Next 1893 0 R>>endobj
-1893 0 obj<</Parent 1874 0 R/Title(22.16. Client tuning)/Dest[1640 0 R/XYZ 0 489 0]/Prev 1892 0 R/Next 1894 0 R>>endobj
-1894 0 obj<</Parent 1874 0 R/Title(22.17. My Results)/Dest[1642 0 R/XYZ 0 441 0]/Prev 1893 0 R>>endobj
-1895 0 obj<</Parent 1672 0 R/Title(IV. Appendixes)/Dest[1644 0 R/XYZ 0 786 0]/Prev 1874 0 R/Next 1896 0 R>>endobj
-1896 0 obj<</Parent 1672 0 R/Count -4/First 1897 0 R/Last 1900 0 R/Title(Chapter 23. Portability)/Dest[1646 0 R/XYZ 0 786 0]/Prev 1895 0 R/Next 1901 0 R>>endobj
-1897 0 obj<</Parent 1896 0 R/Title(23.1. HPUX)/Dest[1646 0 R/XYZ 0 707 0]/Next 1898 0 R>>endobj
-1898 0 obj<</Parent 1896 0 R/Title(23.2. SCO Unix)/Dest[1646 0 R/XYZ 0 461 0]/Prev 1897 0 R/Next 1899 0 R>>endobj
-1899 0 obj<</Parent 1896 0 R/Title(23.3. DNIX)/Dest[1646 0 R/XYZ 0 346 0]/Prev 1898 0 R/Next 1900 0 R>>endobj
-1900 0 obj<</Parent 1896 0 R/Title(23.4. RedHat Linux Rembrandt-II)/Dest[1648 0 R/XYZ 0 280 0]/Prev 1899 0 R>>endobj
-1901 0 obj<</Parent 1672 0 R/Count -5/First 1902 0 R/Last 1914 0 R/Title(Chapter 24. Samba and other CIFS clients)/Dest[1650 0 R/XYZ 0 786 0]/Prev 1896 0 R/Next 1915 0 R>>endobj
-1902 0 obj<</Parent 1901 0 R/Title(24.1. Macintosh clients?)/Dest[1650 0 R/XYZ 0 721 0]/Next 1903 0 R>>endobj
-1903 0 obj<</Parent 1901 0 R/Count -4/First 1904 0 R/Last 1907 0 R/Title(24.2. OS2 Client)/Dest[1650 0 R/XYZ 0 513 0]/Prev 1902 0 R/Next 1908 0 R>>endobj
-1904 0 obj<</Parent 1903 0 R/Title(24.2.1. How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?)/Dest[1650 0 R/XYZ 0 493 0]/Next 1905 0 R>>endobj
-1905 0 obj<</Parent 1903 0 R/Title(24.2.2. How can I configure OS/2 Warp 3 \(not Connect\), OS/2 1.2, 1.3 or 2.x for Samba?)/Dest[1652 0 R/XYZ 0 786 0]/Prev 1904 0 R/Next 1906 0 R>>endobj
-1906 0 obj<</Parent 1903 0 R/Title(24.2.3. Are there any other issues when OS/2 \(any version\) is used as a client?)/Dest[1652 0 R/XYZ 0 575 0]/Prev 1905 0 R/Next 1907 0 R>>endobj
-1907 0 obj<</Parent 1903 0 R/Title(24.2.4. How do I get printer driver download working for OS/2 clients?)/Dest[1652 0 R/XYZ 0 461 0]/Prev 1906 0 R>>endobj
-1908 0 obj<</Parent 1901 0 R/Count -4/First 1909 0 R/Last 1912 0 R/Title(24.3. Windows for Workgroups)/Dest[1652 0 R/XYZ 0 204 0]/Prev 1903 0 R/Next 1913 0 R>>endobj
-1909 0 obj<</Parent 1908 0 R/Title(24.3.1. Use latest TCP/IP stack from Microsoft)/Dest[1652 0 R/XYZ 0 184 0]/Next 1910 0 R>>endobj
-1910 0 obj<</Parent 1908 0 R/Title(24.3.2. Delete .pwl files after password change)/Dest[1654 0 R/XYZ 0 679 0]/Prev 1909 0 R/Next 1911 0 R>>endobj
-1911 0 obj<</Parent 1908 0 R/Title(24.3.3. Configure WfW password handling)/Dest[1654 0 R/XYZ 0 528 0]/Prev 1910 0 R/Next 1912 0 R>>endobj
-1912 0 obj<</Parent 1908 0 R/Title(24.3.4. Case handling of passwords)/Dest[1654 0 R/XYZ 0 430 0]/Prev 1911 0 R>>endobj
-1913 0 obj<</Parent 1901 0 R/Title(24.4. Windows '95/'98)/Dest[1654 0 R/XYZ 0 345 0]/Prev 1908 0 R/Next 1914 0 R>>endobj
-1914 0 obj<</Parent 1901 0 R/Title(24.5. Windows 2000 Service Pack 2)/Dest[1656 0 R/XYZ 0 771 0]/Prev 1913 0 R>>endobj
-1915 0 obj<</Parent 1672 0 R/Count -6/First 1916 0 R/Last 1921 0 R/Title(Chapter 25. Reporting Bugs)/Dest[1658 0 R/XYZ 0 786 0]/Prev 1901 0 R/Next 1922 0 R>>endobj
-1916 0 obj<</Parent 1915 0 R/Title(25.1. Introduction)/Dest[1658 0 R/XYZ 0 762 0]/Next 1917 0 R>>endobj
-1917 0 obj<</Parent 1915 0 R/Title(25.2. General info)/Dest[1658 0 R/XYZ 0 476 0]/Prev 1916 0 R/Next 1918 0 R>>endobj
-1918 0 obj<</Parent 1915 0 R/Title(25.3. Debug levels)/Dest[1658 0 R/XYZ 0 335 0]/Prev 1917 0 R/Next 1919 0 R>>endobj
-1919 0 obj<</Parent 1915 0 R/Title(25.4. Internal errors)/Dest[1660 0 R/XYZ 0 665 0]/Prev 1918 0 R/Next 1920 0 R>>endobj
-1920 0 obj<</Parent 1915 0 R/Title(25.5. Attaching to a running process)/Dest[1660 0 R/XYZ 0 313 0]/Prev 1919 0 R/Next 1921 0 R>>endobj
-1921 0 obj<</Parent 1915 0 R/Title(25.6. Patches)/Dest[1660 0 R/XYZ 0 211 0]/Prev 1920 0 R>>endobj
-1922 0 obj<</Parent 1672 0 R/Count -4/First 1923 0 R/Last 1937 0 R/Title(Chapter 26. Diagnosing your samba server)/Dest[1662 0 R/XYZ 0 786 0]/Prev 1915 0 R>>endobj
-1923 0 obj<</Parent 1922 0 R/Title(26.1. Introduction)/Dest[1662 0 R/XYZ 0 762 0]/Next 1924 0 R>>endobj
-1924 0 obj<</Parent 1922 0 R/Title(26.2. Assumptions)/Dest[1662 0 R/XYZ 0 581 0]/Prev 1923 0 R/Next 1925 0 R>>endobj
-1925 0 obj<</Parent 1922 0 R/Count -11/First 1926 0 R/Last 1936 0 R/Title(26.3. Tests)/Dest[1662 0 R/XYZ 0 252 0]/Prev 1924 0 R/Next 1937 0 R>>endobj
-1926 0 obj<</Parent 1925 0 R/Title(26.3.1. Test 1)/Dest[1662 0 R/XYZ 0 231 0]/Next 1927 0 R>>endobj
-1927 0 obj<</Parent 1925 0 R/Title(26.3.2. Test 2)/Dest[1664 0 R/XYZ 0 786 0]/Prev 1926 0 R/Next 1928 0 R>>endobj
-1928 0 obj<</Parent 1925 0 R/Title(26.3.3. Test 3)/Dest[1664 0 R/XYZ 0 583 0]/Prev 1927 0 R/Next 1929 0 R>>endobj
-1929 0 obj<</Parent 1925 0 R/Title(26.3.4. Test 4)/Dest[1666 0 R/XYZ 0 679 0]/Prev 1928 0 R/Next 1930 0 R>>endobj
-1930 0 obj<</Parent 1925 0 R/Title(26.3.5. Test 5)/Dest[1666 0 R/XYZ 0 528 0]/Prev 1929 0 R/Next 1931 0 R>>endobj
-1931 0 obj<</Parent 1925 0 R/Title(26.3.6. Test 6)/Dest[1666 0 R/XYZ 0 403 0]/Prev 1930 0 R/Next 1932 0 R>>endobj
-1932 0 obj<</Parent 1925 0 R/Title(26.3.7. Test 7)/Dest[1668 0 R/XYZ 0 786 0]/Prev 1931 0 R/Next 1933 0 R>>endobj
-1933 0 obj<</Parent 1925 0 R/Title(26.3.8. Test 8)/Dest[1668 0 R/XYZ 0 424 0]/Prev 1932 0 R/Next 1934 0 R>>endobj
-1934 0 obj<</Parent 1925 0 R/Title(26.3.9. Test 9)/Dest[1670 0 R/XYZ 0 758 0]/Prev 1933 0 R/Next 1935 0 R>>endobj
-1935 0 obj<</Parent 1925 0 R/Title(26.3.10. Test 10)/Dest[1670 0 R/XYZ 0 567 0]/Prev 1934 0 R/Next 1936 0 R>>endobj
-1936 0 obj<</Parent 1925 0 R/Title(26.3.11. Test 11)/Dest[1670 0 R/XYZ 0 430 0]/Prev 1935 0 R>>endobj
-1937 0 obj<</Parent 1922 0 R/Title(26.4. Still having troubles?)/Dest[1670 0 R/XYZ 0 292 0]/Prev 1925 0 R>>endobj
-1938 0 obj<</Type/Catalog/Pages 1369 0 R/PageLayout/SinglePage/Outlines 1672 0 R/OpenAction[1386 0 R/XYZ null null 0]/PageMode/UseOutlines/PageLabels<</Nums[0<</P(title)>>1<</S/r>>8<</S/D/St 1/P()>>9<</S/D/St 2/P()>>13<</S/D/St 6/P()>>14<</S/D/St 7/P()>>16<</S/D/St 9/P()>>23<</S/D/St 16/P()>>32<</S/D/St 25/P()>>33<</S/D/St 26/P()>>37<</S/D/St 30/P()>>40<</S/D/St 33/P()>>41<</S/D/St 34/P()>>42<</S/D/St 35/P()>>59<</S/D/St 52/P()>>62<</S/D/St 55/P()>>65<</S/D/St 58/P()>>68<</S/D/St 61/P()>>69<</S/D/St 62/P()>>72<</S/D/St 65/P()>>82<</S/D/St 75/P()>>87<</S/D/St 80/P()>>90<</S/D/St 83/P()>>92<</S/D/St 85/P()>>103<</S/D/St 96/P()>>105<</S/D/St 98/P()>>118<</S/D/St 111/P()>>120<</S/D/St 113/P()>>121<</S/D/St 114/P()>>128<</S/D/St 121/P()>>130<</S/D/St 123/P()>>131<</S/D/St 124/P()>>137<</S/D/St 130/P()>>138<</S/D/St 131/P()>>140<</S/D/St 133/P()>>144<</S/D/St 137/P()>>146<</S/D/St 139/P()>>]>>>>endobj
+ÆVäµ{1Õ\9a|\8e£\9eA\8ci4\99ESNý|itÔ½jã#\7fP¦êâStÿí¾K?z\rO\ f&qÖÛ,Ðc\96\99D·!\9eßsr\ 3\90Ea·\9e\92 \ e® \97Öi\95\8eTÎÿQ¢\92\#]mP¢Í\80B{4\85+\8eZÊ>Ð\ 4<1Ï£Ù¤¥lr\13M£YD\8fàí]¦6zÏõ;|\90²G\94êÚi\90 Ó·Ìs».\9fT\19+ä¯\80×\83ä£0C\8aw´vª
+L\9dê¢Ó6×\15Zëð¤\rõ¢¿\99ud+\10¹Ê\rêGá ÑÙ¢@?\eÏ\11PT\8f\ 2_Æ\11¾\96íñ\ e\8eÓ\ f"ú\92ÑÎ6è^ \93W\10ÓNû\ 1G¬ä\e,\88 \8b¢K³\a&bA+JµëeVkèÀ\e(t×\91\8fXB8¥*(©\ 6\r\ 40]µ-\0ñ{ÞW*\96T}Ö\99Ä\ 2ã\84Æ\8a,[¹\11\98é> .iSÙ-m\rg`ýƺ\13:ÈÊ\9c-\99É®\88>p\b\8b\82)µÔ-\11¼Æi\8aÍ\9ajíÐ\86RU\10£)kg_tÉC\84 ÀÃ\1dWãd ü\81[͵\80<nZ§\1a\9e\97ss\82Æ\83æ²)\82©qd/l\90û\8a\7fß\80vX\85 \9eM\0\fÜ-ò
+È\ fðYvk4W(O¬s\8dèöUò\90h+ùùAò\10ü\13\f\ 5§Z¸2ͧ\96r\13-XÚ+ÁËÒPT5e\fÉb´üÉa\80\ 22Á\ 1°\ 1PY¦\93\16ì1\9d8©hõñ+ÅÊ£Il(\88W\98M_Ó2PRÁ\91b\0ålâvú\1a\8f©g\9c\10z\90vÄ6äÜ5¦\8cMNU)rA\13[\83\17ütôØÕ?dyÁ«ð°'\95Ãtq3Î!\1a\9cr1@þD|£u :\ 4@þF\15T«µ\86£øÄ\99\18\88sH\18¾ÌÓ\89äð+F¹ÆLõ\r\16\ e\84\1at\856Ã\8cß\8cÓϨz¯\9bSDäÌ:oÛS²1µ*O\rZ\84å\0\91#=¦É\1d\v\1f®Õ\ 4VÕ>f\89í`a?hr\8f TÃÝR\8cJ`§ûÞxÌ\96\87À\93\9c]\8c\99Ç\ e\82\16¸-\0Øö\bmß±¢\9cn´\ 4\ 1\96\1c\18ªtØZ·9GöIe¬¤¿~{ütÿëí\9fì\95ÜQ\1eyQ#æ¹\94\8d'5ó+ÌöZ\ 3\1dÛ(&ï\88\0vÝÒúЫ¬Ã\811\7f๯5¶°\861ÕÖq³x\85¦)sÞ\93\0\8cõ\bÙ\80RÛÀ\1dZ|²¨\8eF¢\97R\ 6¤Õsê \82\96Bè$\90þQ\17ªj7ñ\17ÊÕ\v+\1dÎÍàÅx\84\81Î!^·*\90\}ùJ>¨dÃ$yìS(½\97×£\11¢\9e¤¦Û\8f¿\1cíË3æ1\8fè\ fÞ·Þü#Óò_¾±·Â\81\14Íß\1etÆÐõ
+*(TÍ~\92\1a¿\11Ë÷Wât¾\9dÑ®\ 3'oÄt¹\9fª´\rÛ2NcÙô
+\8aµ\94\83½ë!s\a³Át{Þ¸\10X7\99O\ fw{_ðô|Ù]\96à^x!(\86\87Oßd,ñ\9cK\89\9dÚâ\82bú\13Z(·\86\9dA\19l$àúE\15\rË\91ïT\0ÜÙ]¬×¦B\81ptÁ\887bݱF+e\8er\f\10fFC\0©\9cÜæ\16Ê«ÑBØ\84¬6ÄëUÜquäd\18Vø \8a=Â=\949í!°\92dOv\87\83\970£\16l\8c(fµqý½Ä\82\87\eøv`Á\ 1¶'7¹æRyª9\ eÔÌ÷\9f\96\14¾«ÊuM4Àî·\aÒÝZÅÓMi@ï\90uÏ\91Ä?
+\WA\8b\96]Ó\ 3u\1a\9fI`g\0\1e6&ÜÇ°¦^[\ 5\92P©{\8b\9f\8d:SØÕ]+q~²\98-ç=\9e\80ø\81¡Æ\85\ 2W^1ÿ\ 3a)çݱ»[\ 4CÒ\927\10\13Ë\9b·\84\1aE%Ã\1e~æ\ 1\8e\8a\84¼\1d¡Iñ\e>&ôµÊ\92\8bË\8b\82\95JAr\ 5
+[n\93ßùÀþ\aßÚª]D·]\ 1Ü\rZ\_ãg\fB×ÖT`Ð÷\85ÌÉ%v¢°Uå\8e\ 4ô|\15çK0\95º´ÈÙT\154ê½r¦Ø wW\9f\97Ýo\92É\ 2?\8b\963Z|\18·×\88§Û\87»[úêìwÞ\ 5\9flÒ\1c¸âÊGû\ 3£\9b)~÷¤\97ÿÿZ>_,£Åõ\14w{>>þÀaïW\17¿_ü\v¸¨\80mendstream
+endobj
+1332 0 obj<</Type/Page/Parent 1099 0 R/Contents 1333 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1333 0 obj<</Filter/FlateDecode/Length 1474 >>stream
+x\ 1uW]oÛ8\10|ϯXøå\9c¢VmÇ_= \ f͵\ 5
+\r=ÄÀá\ e~¡%ÊbC\89*IÙq\7fýÍ\92Rì(.\92\0\89%îÎÎÎÎ2?®&4Æ×\84\96SºYPZ^\8d\931-Vï\93\19ÍVKü>Å\8f\95\94\87\aóñ*Y\zp³\1a_~0Y\8c\93é¥\13«9\ 2÷RÜ®¯Þ}yO\93%s Z,æÉ\8aÖ\19\ 1ÓxLët8Y&ó\84îÄ\13=\95Ê_¯¿ãý\19M&ñýÑt \10ëløÑ\93óÂú¦&_HJµ\92\95'Qeä¤ÝKK\95Ü\19¯\84\97$hP\8a'U6%y+*\87°\ 3rê§|K\87B¥\ 5i\85\8f\\88Ã\1f\93ÉqZX}$¡5=ÜÝ2\8a1\8d&7¨\13¹SS\96Èä\12ú×4\94\8a
+9}8Þå a|!<=\88r+è \10è\84¨qªÚ\85\ 3\8c,\14J\1fh@¦öÊT¤ª^BWn\93ÔTyB÷\ 6\ 5\85À¾P\8eðÍÕ¿H\vô\80\8c\86þh¤cX/Q\884\95µ\7fKÛÆSe^Àîge.Ú\\92ÞD\8aßÄZb\94\84Ö'î;\10V¦Ríe`\98\ 1:n\8c7-\13Ûc@|Ö¯ÀP/ua*ÓX.\ e\ 1B{\92ö\8dé\ 2²E\ f¾zÊd.\1aÍ\8d3´\98Ï¡ííÑKG\9bá\19'\9bëXªò\8c¥6ΩnËr¦ì\94ãÀá\91jiscKÚJï!¡\83ò\ 5\89\1e4WB\14xØI\89\9aJy\10a\8fÜÓ½Ð`\9d\15¤¥cü\10Çt<[qr\1e%4\ 5´©h\1c\b\92Щ¤Ú\1a *Ý«
++*\r\1a\98
+\87\88\R[p×õ-·7J&\9c=\9f«ÑÍ,ò\84qZ$ô§I\1f\ 1\8fK¹8M·ÇçàQ°\99AN\96\87*k\80ã\16:oUêIÇP\ 4\9dJ\81á±Rdï\ eVA\97)\8fËf(´/L³+\b\9cg*\83\9cQ£Ü+Ó¸\1e\97¨ßAðns\9dÐ×\9c\8e\98&Y îO/Ùf\18GfÐûü\ 3\1d¥\el®\99\9e*\9cç6æ
+6\10\84Ë\11]\93çè\97hùîAh[.ªTR\ 1À(+ÈÂ\1d\9d¿Ð\14Ö{ÿH\18nî"\90\1f¡\1dÚ\81\13Ö\ fbÝ\7fy@\17\9bÊË\f° \89\186j25\8dÎøÀ\8f\86é+\148\83&*\1cì¡\ 4éB\83L÷\18eò«V/\13z(\ 4DU\9aL\ 6¶/¶û\81\85_K\83Ö\9e\91ejY±\86\ 3N\16\19Ús$§Í\81ç\1c\7fãÛä\1eø¶2*\182g]\ eÜ)ç\80R¤\86×É\f%{Ó+$o48:\89*ÈÚÀ$N\11Ð{tìä¨:H"xA\bÞiáìÌ\a\88uÐÂ\fýØ\89W.Êb\10Ð/D\r\8aÛbyc¤Ú\ 4C\8e\85³1\86\10¥Äð\ 6\19m\868\11Ý\82\871ê\8db/é`ªß<Á7 \16\19\8c:#Ì·í\95\ e²Dà\96\1d\80Ó\aî8g\98¡\91©\98\99Èh®,f»\10à\9cG\1cïò\98\8dÂ\98%ôÅXØU\85õT×Z¥\82\97Fð\1aÌ\9bá¨
+Ú;\Ð\10{\0\9e£\8f<ß\f»\14ìtQ\8e(!\16\89\9c\18#,a¶\9f\7f0Læà^æÊ$0eTH±W@\r¡¿Ð@¯ò\83±!sj,\96\83Ç\ 1f\1dY\0\ 4\1f`\9b"\18«\85W\15+"zÐI\13\98áº6Öó¬h\99cÏÇ÷:C\ 4µ\ 3S\rú\ eºF¨³ A;hd\8cÎäne`6ðʺÆCN?IÞ'¸ X©%Ú\8dÖjÌ@ \ e\8eëâZà÷þSy>ú\ 4
+ú¾v/ý¬`\8eßþ ðK)"\ 3Þ\18\r«\v\95Wæ\0\0¸·ì»Ò#°6ûó\8cô\86\ 3w\15\1dî&¯f«ëÔýºOÄý_ëÏ¿Ó×X]X*¼¤áé\9d\ 1óÂ\8aÙQ\17ì\ 3\8d\81öÛë\bä\1aÖ\15\8f[F¥,\rla¯\ 4á\16To\86<\rý1\7f\ 6\1fø<õ\0W¦à$¥x\f;\r¤bó6`*\17ð[\vû\92¼\9c%.\80\8f2Ì\ 6«²\0U@Ñî\ 6\16p¨ðW.¸â\85·\83RöR³\14/z`»oº\9b\9bî\ e\84\ 5æ\f=¢?\15A$\83Ln\9b6\1a¯\1a¶iÞÿaµ3ÖÓây^5èÐ\ eûÚ\9aúõeîl}\9c|µsT.½½ÀæºqE»ù\19]`CÀ\7fm\¼°\ 5\eF¿»ÆòE\14\ 3\12\[>a@\1d®a-Q«ö\ 6=Y࿺¡Åt\16ï²\ f\1fïn?Ò7k¾c2é\93I\e^ö!.S7ê\ e\8c\96S\ϳ\v×óÙ\ 2ÿ0̧¸ÌóãÉ\98\8f}^_ý}õ?Ü0\ 4ûendstream
+endobj
+1334 0 obj<</Type/Page/Parent 1099 0 R/Contents 1335 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1335 0 obj<</Filter/FlateDecode/Length 1226 >>stream
+x\ 1½VÁnã6\10½ç+\ 6¾4\v8ªe»vö\90C\82¶À\1e²m\13\ 3\8b\ 2¹Ð\12mqM\89
+IYU¿¾oH9ÑÊÙôP \b\12\ 4Ð\90óæÍ\9b7|¾Hi\86\9f\94ÖsZ¬(+/fÉ\8cVé*\99Óòz\8dÿçøµ\92váÃry\9d¬Þú°\98ÏÞþ\90ÎfçWÝm.~üõ#¥kÚì\90}u\9dÒ&'d\9eÍh\93]¦ëäcB_T.I«Jº\ f\9b¯\88_R\8a0\8e¿\9a¯\91l\93_n
+I\93¶\8f;¸ \99Ú+S\91rT\99\96d%¶Zæ´í(\97;Ñh?¥mãIí¨3\råÊñwR\9e\9e.wÆÒVz/-9\995Vùîé\ 3ùBV!¶\14\1d£@ît\81z\90Û5»\1d\82\ 5ÕÒâp)ªLR\81»T\ 5¾\9cÑGUíi§4P\94Ò%Ä`\87±Ú8ÇHµtNV\80ÙÃ*Ä\11Uí¥osÊD\86S7£Ô\9dt\93)µ\85Ê\8aS©\0zª1\89t½Ò{µX&K\86\f^ÓYB\ fRädEû>¶\8fbR¥\15'^séÔ\9eÑz\ 3¾HT\81óR9\99OI\9böJ\v/«¬\v\95\83\b¤z9\9fÐ-ȵGÐvÎgV\18ã$_[\19O®©kcA&ZV\98VâL\82d9=\8ar+pü ÝK\10÷n2ÄË`\85\ 6EÊ\83!\ f Ü\8bW9\8cøìÅ\11\88cu"]\9f*r¦\94h\82C²L+YyG¹©~ðT\0\v¤3È
+\84\1dµRë\0Sd¾\11Zw\84>2-(yØûÆ1 ó¸\88U6V\17\1f\8bAÜÙÌTG$\ fU\8d8ucÔ\8f&
+Ví\vdV\87@©\a¶\17¬t\ 3\8a'\ 1¦\93\12:\12\O]ËÊ\11\86\a£a©\82ü\8c=$ôÉS\19¯â"¦Ð\rZM \1c]\1aÑ(0\10\99\8fç\aÅ&ô[\ 5"¼t\9e\8bÎP0zÅÜx°õ¾ZSØ\0FQþ»\ÛSØ\7fÒk¼åÿ\11ì7\88ßUì\88çW;;ï=äZÂ3Ø5yÆ0\85\98\99É \95\8bb\fº«Ø¶4\85¯Söh)¬÷\93éa\84\ÁC\99A¨{h©PÁ\8e\aF\18=÷ý>Î{שÌUÆÅ~×|â\80³Jr\13µþz\88å\19FÒìxhèñþ\ e³QÂ{s\18ì\ 3\9bÍ ¸\94\ 2\8aF¥¾w\r¶\b¸\ 6fzĨüË[A¹ð\823ðÍZ8\1f-\fC\1a¬\ 5Ü`à[¡\82\8aÙr8®ÂÑ!\f¦JX«\8e2\8c\ e\97\81°°\11j\83V\94Æ\8e\93?7*;`\1aZ\8e{¹3ä´ò¹ÁØô7\9e\8dú\ 6Íà\ 5Ð/²á¢KèOl8N\1f]/¸`×[Jt\82\ 1S7Ä+e¬¦Ï\ 6\83\17è\v`\ 6ñÈix¦\e¸>3Æ[®g\1a&\ 1{\80\97àK8Æ\81ã\9b\1fF\9dr\85i4z'¬WY£\85ÅÝ\85Ô5E\9ay/8Å\8eq2á'¬_,?áhò\85\a\7fBM\95Ãc?o°´£\8a¡\1emà×f7jv0j\aáë\00x\9e\b%\8caF)¶È\1cvR(G\14\8c\9dÛ\18õr2p\12¥i*,®Zfj§x\9dÇnF²\9dú\e ûQaS\15º\15\9d\8b\bF\0c
+Ð\9a\1eh«M\86¿¸:\17Vá\19\11çæ;Ë}\91н\ 4¶\ e³_×pÛ\18ýÆË)\96ÖoÙ\b\83Í96ò¨°a¿¹\87uY²\91£\11¼\12_<\86ý Èl\ fÉã1\84ÞÁ%¶XåØmfTØ`)LY6\ 6·Z(\18+&ìs^ü¹âg\15^\10¸\8dYÂ\16çµ\8fè\908Äv -o\101¸°'æº\7f$¦+¼]¯\17xZ.ãsíñöþî\96~·æ+ï¨\9fMÖ\94بáYÃ(¯N\a®Ös¼AÃ[éì\rº\áõûÓ\1c/P\ eHS>øËæâ\8f\8b\7f\0_\1e\98Üendstream
+endobj
+1336 0 obj<</Type/Page/Parent 1099 0 R/Contents 1337 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1337 0 obj<</Filter/FlateDecode/Length 1551 >>stream
+x\ 1\85VïOã8\10ýÎ_1ê\97e¥mhÚRÊIû\81\85²ªD¡G\8bÐÞq:¹\89ÓdIâ\9cí4íýõ÷ÆIøQ`O´(uì\99ñ\9b7oæ\9f\ 3\9fzøóé¤O\83\11\ 5ÙAÏëÑÈïy}\1a\8eOðÜÇWK\8aÜ\8bá¸ÿÁ\8b\1eïÝ;ñmypt9$ߧe\ 4'£ñ -C\82\83^\8f\96ÁáR\91ÌÅ*\95´S¥ûÆb#É*ø\vTV$x³\10ÙJP\95Ø\98l,©{q·\98ü=\9b\9dÍI\156Q9áÃ/.¯Î¾/(MrI*â\95ÏË\9f\a=êú\ 3Ä»\f\ fgâQF0è5ëý\917äõkeá1\16\962\99)½£L\14E\92¯)10\9dî¨42d'|\18K\85Ìñ[KÁ\8béî\v\89<ä½¹²õÖÕÎÅÓq[´¨:{\81À\82\16\1c¹G˸4îÚ\99ØÁ>\f½\8d\ 11I\92Q$\ 3\9b\0\9b$r\aÂÄ8Ü\9e½À9Gý´@_÷üæªãî~tyJ>òÀ é\ e\865
+þ\89ç\ f=Z¤ª¢ó4\91¹5|üeòºý\13oÄ\88Ý\0bÜÁ\0\93X\18@Q(m\81\89\ 3ÑHk9\ eNI¡\95U\81J9¡ç7·\93ùÕÝ\82p÷XjÞ\9cÓÕÙõììºOkκ P\8b\fÈ\ 4{\81\9bBÂz\92ÁÜFf\b\8d\1e\ e#2ò{\8fG\86\8dûÇüôðy?·S2%N\a¶\8e-F\9aæç\9f\fÎ\ fÆ#³õG´\12ÈîÃgª$P\16æ\91C\8f\94&\87z(¬¨\ 3EÈ;
+T\99\86\14IJòèÙ² \93dI*ô»Q×gV\12H\85\ 4f´ð¼H\13\98Óq$êdbKÛ,±ô\95ú½á¸ó\85\92ÜXÇ´\b~E¾ÞG¶½pKò+\85\8b´\9bj\1f&ùWv(KÖ±%\91\1aE±L\8b_\13á¸!Â\95\82Ã\8fyàÈ\92º=$\18¾4S\86\9dTbg(,]!;\1e\bc*¥\1dv\81\83Ø&\99ôèÎ1\96w\80v\12G\v-Àò@¤Ô)Ú3©ÜÈt¿\86ª$M[F C¸±\ 1\7fRe=ú\ 1%©Qw·mô\85\9dtî.Ï)лÂvZíHjíx¥\r\1fÖÇÈkJ\83l\99ÃåÇ\ 5\12Y\99#\9e\9a¸ -\14.£\0\84\a\11,îÈÅ¢\10·¤ÀÕ\1a+AûÌä\ 6\ 1åVd\ 5äï\1eª *ãHy¯ôãZ«²\0ÕÙÜ\1eã\94sË.J\96(¶²B5¢Ø\96çs®X¬d"\ fÞHàB:\ 1ÖM4\14ª v\18J+\92Ô\80î9\15B#5%\88þ\ 5ìw:\1dK\81¤ê2S¥F\1d²\86ò\9dî£ûu\ 3°#Ï\v\11F ÷Óë\8b\9bûÅô\8f\89#=V\16\93ï³ÉõÒ-1HÎ6²)ô\1az\97\15à\ 4ëï/.pƼ\86\07BnTÆ
+¥\18?g,R%´õ\95>]ÈH\94©½\r65Â(5\17ü\9f³\ 5Bú\v\85
+&Â뻽dñc±\9c̼éõÔu\ 5\82u ìî\8d¼\ ezh¥k\885sr\95 \93<K\17+G¨òO\96\1esHm\15ïÚ\12nûÑlGªÊ\91\7fÜ\17:\1cHªÐúÞ\86Û\0>¥µDë*\83¸Mö\v\9cê¶ÙB¹\11)jòáÐ\1f\rÆÃ}îè\1ao\r\11¥\edQ¿\ 2ðµÆ\8b|çj\8e Ǻ¾®A\ 5sD®\12AX\ \a+À\f\93î`ñ©eìùEqçÏ\1d¤-\99P«\82\91\17\14!ùà1\9e\a= \85Í XÅ=Àu\0\a5 \1fû§ýÿ\87vÊ
+£Vh\9c;
+%\1ayب\ 6Ó\v\13\88\ 6[tXAËê®Îd¶»Â\r\14¨ø-ÔöyJiØ®\1cX°ÕP\85G\90Çý¤ÎÁ5:WA¬\ 5\90à® \12HrDµP>\96lÄP«\ 1\1aJè\8a\98WyºÀ(\84ßµ`D*\ 5Ôü&Py\90¢é«ÜüÖ Úrh\8a¶! \90®\1aûè9eáÉ-F8\1e¨\1cpUUyY\12he \1a\1e\1c°\ 4¡=â\83
+,\v´>ì\ 4òl\ 2î\8c
+\1e Fñ\9f#*m\92&6\91ûõ]Å \88ØðýW\15{®ò(Y\97è\1a\8d\83ÓcV©é\1cdX'Æb\ ekZ¥kð\M¯ø]ë\18\8a Ó\19h\82´®1<@\14ÓT\86{\1c\9b-ï\16óÉäÂAPG\88ªÁ¸¦"7(R.Ñ7\96à<Lá»\11:\ 1o©ÎìÓUëü\ 2 G\89HK \1a\89\r\ 4\92'1g`ÏqÛìk\9fî\ e|Û\95kuÏr\\ f\1cηK$¦ðn\9bÉ\99Ø"|ºÅhºq\13m\17³4fçðÐ÷\88ÝáçÓ\88{\vm}o+J\83·\1e]\8e\9bIÜ\1fb¦\1f\ fht:¬\87ãÅÙìÛ\19͵úÉÃÒ\85
+J\9e³Ü\94Ê'»þ\bÃ=\ etOúµó÷ÇÅáhì\8d\8eûM\80~\9fÏN\96\a¿\1fü\a{:ñ©endstream
+endobj
+1338 0 obj<</Type/Page/Parent 1099 0 R/Contents 1339 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1339 0 obj<</Filter/FlateDecode/Length 1511 >>stream
+x\ 1\85V]sÛ6\10|÷¯¸>Ù\99Z4)êË~óg£i\94¨\91:I§î\ 3H\82\12"\92`\0вúë»\aR\8eÃd¦\8e\9d¡¨\ 3p·»·\87¯'\11\85ø\17ÑtHñ\84Òò$\fB\8aÇ\97Á\88F³)\9e\87ø3\92rÿE\14_âcï\8b\9bõÉÅÃ\88¢\88Ö9o2\99Mi\9d\116
+CZ§g\8bõ\9f×\8dÓwʦúI\1aÂ\83H
+ùfýåd\80E\88ÉÎâ\80ø3>\ e¢8\18ò+,»)Dº{«\vy'\9dLÝOW\8e~\¹V¥¤µ¦wêIÒ}Å\87eß\9d6þ\9f5\ 3zûa¹¢xøݪÉ\8f«ÞßÍéV¤[I+õ¯¤ð»øi\e?\18\8ei0\9c\0P\145'g\94ÌèI\19×\88¢8\10þ#\9d\93Ã\1eÊÉÒR)+§t\85 Uù×\99N\e~I¢Êü\v]a\1d"h¿Ué\96J\91I\12\94©<\97FV©$§±\vç\12~\83s/¬_luº\93\8etÍ\87Ø\80æ\8e\cø8Ý8\9a\13Ç%Ò9\10¥ó\9cöÊmù\vQ\1d~á\9fn×\97z\90¢4È\1a%0¹\\8d%ï\86\9a\8c¨,r:ç\r÷RVô$\8cÒ\8dÅ®Õå\98ÒB¡,ëë\12t÷y8\98Lh\18.nÈJÃJáÃIô
+I\8d¨ë\ 3½¿\1f²¾R]ÖÂ)Pì·ÑEFó»{Ê\fsÿxö»Di\ 5\8b8\88ÃÇ7\ 1\81ó1/2Â\ 1D\14l¤°Ú\v\85rm(
+)\11V®\83^µ\ fóÏ\8b{¿E®6\8d\91HÝÈ+Z\ 2\9fß\80é2BþmQ\14ßê\92Ra²+\1a\rÃÁh\14în.,\8dÃp0\1e¶ÏË\88ó÷\18¼
+ïU\e_bqÔ.\18áyÜ=ß}\1e\r¦G\b;0®(\9e\86\83xÖFÇ1\9eÇþ¹WÆÜWçµd\81\86´\90\ 3xìØ"·×\94«\82«£Q0\ 6\1dN>;ÿª£*:¾ä°\16S\80Ñ\14Ì¥©N\1döÏÀLeU&\8dª6½\9aXë[@³\az´\12e"H\81\83¦ª\10\8bTX\94§|:S\ry§[UÉ\9f\88\8f¹lê\f$öº&òy\ e)1ºÙl\1d\82¼ô_*dÞ-å\ 6\14}i¸z\16\eØð\14¡ë¬\86\81têìkà\9a*¹?Ò\86´\ 5-ã8æj+X\94om\81\97ØmÁ\84³\ 4|6Û&ù\89úº,Ü\16;íѽ´Ñ:»êá5\1a\83÷.;\10UûvÌh\12\86¿ú\8cñn#]?ÑwZï\18OáÈ:X\a'ò°^\ 2 \8f
+v9ÿ\ 6¾ D!®ÐH\ 2msÄ¢©ÁQf¹qæd\9bºÖ,\98-'\8a\84Kí\13þ\91`$Ôy\97õìÖF;\9dê\ 2F\80ÜU\ e§\ 3`\rz\15y{v´'È÷#\8c£MSR-M®KÁ\96¶÷á\89¤¯\rl\92+Úl¼¶|Ù\17\ f\97\14aêä\98&\83xÔzm4\rðK\8b\ 3}lÅÉ°~\9bT\88\1cN\83 »ò\8aù®¥®á"{\ 1§\85\81Z)Ù\16
+ª\9a2\91ÆrE0Ù£\17\17jÇH({\ eµ\90G\ 4¸ÀÎ\r\1ab\ eyÃ~Ð>³\89}fuø.ïÑz\14ü§üÓ\86â\0³Ïû\1dw\a\7fJÈ¥õ\85ª¹Ötç\8dz\v«\12\9e¥W&ÇS\ 1¦\99°ã\1aQ¾
+\-n{GÞ\17\0o\10Mh¾º\ 6\17\96$\93Y\81\ 4Öi«O?]|N®ñ\r9?E-\19Ï\epî\91Á$\96¹@¿\7fL\9f>©*Óû\8eïÞq\7f/VëÛå?À2åiÃ\19Ú\83Å\94\vT¥x«h\12Ï0ÀAQçø¾¡\80Zö\1có08BôNUͳ¯L\14\f7pxUrïT\ 6D\10\8a§\97rÛêþÒ\rêD{\83ÚòåHt.Üü(Xù,JÈÀ^`Ng\ey\ 1Õ'\992(@\e\f]?¨{çeÊ"\18ÊF\89ý&\9c{\85øwð\ 2 \0Ee¾)i\ 6ÆØ>[ÒS]\1fP_\e=\8a8zo\94ãPÖ\ 3Ú\bW0\8e\ 6hÝ\v¸f\vZÿÌ\ f97\97±ò\9cC\8dôVZh×ö+6HpIØ\96ÂìøF\0<\86ÐÍ\1e\8fG_ÀI~ºuíêh\83ajé\0øà\13\18ñ5ÖvAýýX<I<W`\87Ð\aF=s\82§÷ësÿ\98ëæø\826Ü*(\8fËJx\16µ÷\87VêÞ>ÚîiÕ\99\vìj]\8f\82n\8a\82\1e¾\80<\9eñ\10/åã\eV¬-\93îë£\9aÀ\83¨4cC\ 5\v\8b\12\rq-Ä\ 1ö2?Å\ 6"ãáÈ^w\1ck¾Áy,dâ@AÐ\99ά»ôF\13Ü\94g1\8d§a{w]]/n®iiô\17\7fmíL\ 3÷\14]qæèÀvÁ`:ô×ß\9fZÕh2\v&ãa{A\8e¢\98WÞ¯Oþ8ù\ f9m\9aÞendstream
+endobj
+1340 0 obj<</Type/Page/Parent 1099 0 R/Contents 1341 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F8 11 0 R/F9 12 0 R/Fc 13 0 R>>/XObject<<>>>>/Annots 813 0 R>>endobj
+1341 0 obj<</Filter/FlateDecode/Length 1703 >>stream
+x\ 1¥WÛn\e7\10}÷W\fôb\ 5\90VÖź䥰]»\15\9aØn¤\
+\18(¸+JbÌ%7K®\15½ôÛ{\86\I±\9c\ 6\b
+Ã\82vy\e\9e9sÎèËI\97Îð×¥Q\8fúCÊò\93³ä\8c\86ý >\aã\11>{ø/%-y\0Sù£Ë\1fï~;éN\92 \9d\8f\87É\98r:\9f$ýúAÓ,l3\18\8e±8§þ\bCñ\81\87ÎÇɨ~ÌiÜÃêÃ\18\9f>\18t\93!\96u±s·~ÚoÙïòüç\91õÎûXÐïóV9\rF½ä¼~Ú-Cp/îs9?éÜL¨wFó% \18\8eÆ4_\84\vâMÖ¼Z\8bÂË\12Q$4\13y*H\98\ 5Y¿Æ»«éÍ\8c2¤ñîÕü3ö\19P·\e÷i÷ÆI\ f;5çkå(«wɬñB\19¼\b«Ú®\90\99Zª\8c\94YÚ2\17^Y\93Ä&Ô\1dÕ[õ\aÉ\80·B\fÝ\84Þ\8aL\19oÝzwô//Ï\1e\ 1\b,øKº°ÛQÎÊ\155i¾®J\97nyía8|\vÃÆnh-\9e$\89xÍ«\100uh&Ë'Ü=\13ZË\ 5ýzñá\9aÚä¤\f\eQ»7\8c±Î×rK^:OÊ\93Xñ¥=}Tfa7\8e&çý÷Ûy@Ô\ 5l\ 1\ 2e6/\0Dª´ò[RÎU¸\ 5]x\ 2æäU.É.iS*¯ÌªU\9fÚíG°C8\eáHxB\94\ ep2M\196\ 4\14¾\9e\91·ñ\1dUÅBx\89#H< ¥Eªq]<в\94\92\10©ÑV,ðdópx\r\19mdzt®SØç¡É\11"¥À\ 5!.qY\ 6Ê\16J:`é(\95ÒЪ\94Âë-I³\16&\93\8bV¸>V¢º\ 4þÓjÕ^ª¯X¢L¦«\85\<¼\8aI<\80{¡AI\ 3\90\9e0ÍW«\17û\8d\8dÁ«¼Ð2\a1\ 3¥\1cÇsQàÕ\èGb\94\9d\ 4>BÓ#¢\fÃïo§\9f(\17ÙÚH\17b:¾b½ ·8\v9Êe\99)l`1? ë$\15¥]T\99\a\84Z\83?[[1Øee\0\ 6°u \8eÊ\102\97PQ\82Å\87Wñ6ÀÅÛ£\83\ f|¯°\ 1bÛ(¿&cI,\16 \815\bÂUEaK\ f\85úR©\92ñ7!cûµ1ÿ{x@±gð\0øpêsmC!\9cQ{Ç[ 0\ 1ßó\89û\8a9`öb\93&]]ÜÿDz\84>®AÖ(-v¹Ä\réíl_\1dõ\95A\ f\86Wd\8fb\ 5üÂ<\86\16÷\ 3ø7ÈgH\v«\b®~\ 4àóÅxV¤Ý\eeª¯ îAÓ\98\ 6íT8`è¶ÎËÜ=¼Ú\97÷\8b\9b}\ 3ÏÚûâu§³Ùl\12\10Ü% HGóö\7f\83T\7fo\94IÖ>×ßG\81\ 5ø{j×KènÖ£¨=¼4L\84\16²R·ûgQå \8b=®ðßA¹L\18\9a\82\9ef©V\15\88z7ëôè£(\vº²ÆÈÌ\13°:¼\1c\84zßáÅ\ e\ 6Õ\8cÚ\1cª$¤å{úÊó."è¬WZ¢þ\85q\e\14<ÒâYó¿@·\98\9e!¦\14Öi+v\8e\98\9d\17H6©\ 60\13¥Õ ðrIõ$\12£;ÿh)«M'(dg\83»ü\0Éæ±T\
+§X«·P\8e\86ÅɯYß8n\14/¼ë5\ 3\0ÛÿV¼é\86+\96yq\1f
+µÖÿ\87æéôò-ÝKY\9e>¼\8a)ÉjÓk\8f\921÷\11\80æ¡7\1cQ\1cÝYb\18Ü\17Óüê¾3½\aóN§\86µLB
+b\rÿ¿m!À\r\14êåônF\96}*\1eÔ E ±,ù@¼¹¼~?ýÉsØÏ»\93\ 3DSø\19`\85\a\ 5¡Yª\12þÆúâíJ²\9aG\99Â7âj"[@nÙ²ê²b\85\12\94ja\1ewoÀ\19ùµÐ°JäHE\ 1cêîèY{\.L%tBÓe$6;\8bÐp\95Å6:\f[mpç\16ÌÄÇ´£46\ 2z\vrÖÃ!lྱ%<\0aEø[\ 4Éá±£S\e3©Q>\0\91ê«\87\ 2\ 1Öõ\ 6\r²ég.°:òÆ,È\aú\ 5_\15\rLÖpÃcv^@Âk\ 4\7f\986@c¬§\85tY©Ò\ 3<\11\8b@ÓÏ\15\12\90BÈá!u\bÖ ?Ç\17YجÚ\e#z:/à\eoïç³äúÓu\8b{ªì\91\93s÷Ç7\ f\r¨G(o.îg\8dpâ~j\83K\82Eå\b³Ûëy âÝ\87ëw{""¶ÓûÒz\9bYíNÙ\97p9\8e\93û\10àn *O\¤\96N¯ª²D\81²v\85Ó\83\99cMÌ\ 5fÃ9xéq\et\88\fí«YI2U\9eÊ2\86\8d¶\ 2dA\92Ñ\98\85Ö¦î\88à\vHn\90®\9d~\86ó\8es\ 6Þ1«£c±¥Ëò¡É.Q' ØÁøKÒ\16º\ 3Z¥ Y\14\1f\16g[DËF\96àß\ 4\r0"¯[\ 2¼(¥sÁàø\fw\9c»x\1a`b\89åJ\ fKß(ç\e-\16öØNcgú8½\9d\85æ"ÖüN\12Â\82\10ò)\93\84óÆ\12÷îæ
+½j\99+cµ]m\ f\r×ÎûÙa\9f¹\b·6¹ØRÔS{h\16qźä.ë \96\1cs
+%]1ì\80\88ã\87¢KÒè«4ÛÐwJ}À©\ eÕÈ=g\ 1ï'¦.L\ 5\ 4\11)x\12\92Ó¹\19\1f~w\f'ÑÅ~æ\87\vÿð\1a\9e÷¢vw»\ 3æñõüäÏ\93\7f\ 1ÐB¶endstream
+endobj
+1342 0 obj<</Type/Page/Parent 1099 0 R/Contents 1343 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 822 0 R>>endobj
+1343 0 obj<</Filter/FlateDecode/Length 1648 >>stream
+x\ 1WÛnÛF\10}×W\füR\ 5\90\97"u³\ 3\18\85\93È\83Øq-5FQ\17Å\8a\ILÈ]\96KZÑK¿½gvIë\128yi\1c\13\96vwvæÌ\993Ã\7f:!õñ\13Ò$¢Á\98â¼Ó\17}|Ã\8f\90\1f÷¿ð74\8eÆxæ\14\r'"j>e4ëDã31~^\1d\8eÇb²·\1aöC\11Ò¨?À\1e\9c=\ fŨùÄgÙîð| Îhx6Áß\11~KEËN8<Ã%Ãp\84gN\83ÑD\f\9aOí±Áä\9c\ f\1f\1ec{a\14ᮣ\857óNpuNá\90æK\ 4;>Ã\1f\89\8b±Oó¸\eâ6üЯfC±ÔtM±ÑËtUÃ\99\8f³ ¢\aY\164 Ç®6\15½5Z«¸z|Õó\8b¡\88z\80j@¦|5ÿÜéÓi8FHó¤\e\89¯´4%Íd¾\90?óbp5¤0ô^\9cF\13Þô\87©Ý¥µUT\11}©\14ݤqi¬YVôáò\96n¤\96+U\ 2\9f(¦·Yªtåì:ß\96¥Éݽ\87i+W\bô4\1c\0A\²¬\8a×A\80§È[Ë"6y𦶳\r¼M\eà²\9bË[ñq\16\ 5\87&\1d\1d`²+h¦Ôá\9ac ¯Ñºr×IJ4\99ؤÚ\8aúI
+\9d\ 5ÿfJÕ\9b \93:\97Z¬«<;4ñl\9eÃrK;×s\83,¤\1a\v¹¬R£ ÿ×HTeðd\96\91Ô yøRK±ÃGе&Iº®ìZeY\8fT\92V\1eß4Sôø\88\18?MïaÂ}Y\1aS\1dÝ\9b¤%²lÊ-\99¥ÛãÐ^`#\15²¬Rç\vß,\93Äg©Vö5[ ®útÞ&y(\98l]:ú\17õ/¬ªêB¨¯\1eODÜ÷´9ÚIتUµù\82`\85ÝÚÖÏïî~J\92vï\ 1ç\ 6\r5\17
+\80*Ú\82|-\8aL¾\16¼ËÌ\9a\1e%FÿT5Èr\ eâ¬NTB·Ó¨\ faHÊô ¤\¨X2ø\80\17è/êÕj+h\ eØØ\9eßÚzÜ\90\11\15q;Û7ñ2\85»´cn\9c\80é\8eµE½\b\8c\8d\ 2FÅ\94_\ 2\9d¤ö%ºð\94L\84OÌN\ 4N\a¡Ï\8c«þ\81 Kà\ 1\9fñ\94\1aIç?\11\91\95¥ÍZi_ì\8f]^DÜ\16T||Å!#x\90À\92lÃl öX¾Tö\ fl\92áO\fxz;\9dÓ§ëé\ 34ä\19ï\93+f*3ì®LQñ¾Hé^YS\97±¢7¥ÙXU\9eôH\e/1\84\8fì\1aY.\10p«õ¨\ 1~¾æú\80À- 3éW¸½ØâòBVñ\1aºó\92\8eü¸°-\v\\0\93ß«m°\ 2\8cð\97mR\94-¼h9uä(ªRR&+d \81\9a\8bÐÉ(
+»" zº\b\80:´º.\0\146ø\9c\15¥Yd*·=²5âBf\8aR12©^QfðX\ 2X-ó&±Gw\9bÅgÔ=\f\83\bI)W+ÀÄØ8>?\80nE&\81þ\8ce\85E\88iî<kÐÿ\ 1Ñ\86¾Í ë×´RÐ\12Î-âlª)1\e\9d\19\99\10\13\9b\1dæþá\94ÇÓɾħ«´´U\8fâR\ 16 b×\1c@\fy\84ÿ\7fÞÝ_ßÎßÝ\7fú\vîJW¨°\9f%§Ø\9dH %ÐÕ\8a-ó±¹q\87\91²¾*\ 4Ý\1aXæóG\881\ 2bzù·ÃÕR^Û\8alÕdØ*¨%\B6\8cã»K½Vð
+àµMÏ\94é*Õ2{\16#wqϱ\9f{nÌÞ\81¸\8dV©äÈ\85Ö]Î\13¶9À \95\95ÊÛ\1aÀøâtøºé\19ìôí¼\85}Éè9¬\1d>MR\1cc5¼`\85wÞ\97dó\ 54H/]Ý\94 \11\92×#¨Qk*\97\ 5]°{ÁU´ëõÏ\8d¸¡\9eßÐ\ e\ 3Ý\93öª¦\1fqød\v\15§ËÔ\97é¡ÅnKá#;=âë96æwÛ¹vqºo\eÒ2H||oLh`t»P7K\93eÐ\98¦§\8dvÑ´`B\95ö\8f\8\1cNö¾:\11'\89zJQ/lóä\eo\95X\89×ôë\1d}\90¨Ð÷¨\87Ñ\aºÀÐ3\9bÞ¿\9fÎÅáJãm{{;9å\93\ 2ë²*e\1dð·\83\86²(\0\9d\ 3\14²Ç\80}Ã\85¥c¤ÑÙ¶\ 1Ûw-G\9f½(v<dd÷\ 2ê9¨=yd\ 5¶\15\981\f$½)b·ÝµÉ# ]\11ȸªQ\9fÛÃý\ró\17µ\1fWöj\9fÜ©\8au\87\eÇÎ8w!®\12ù$ÓÌ\97óG?×X\ 5®\1e\17Kãi\8f[¶3ÉZÃ\ 4\84\19\87\14w\ 6\9bæ\ 5\ã\ 6\91$,DG¡·ÒÇ0c\19\10-YÆ6ë\14\9a»oø(rLolé\0³\9ddb"æ\ 1ýtÐLMèÍèÌ\ f©\ 6¤ÌÇ\92X\81W%$ßÍAûSýé \8fÉ\1f£\96;\14
+ú\1dS 7\11Töüí]p}\aU\92ñ\17¯æÏ\13ö!'q·\1fËù0;ú¢\81çA\9aRO#Ö²}O\19Uïi\13ßYS@á\18/;g\ 3\1aOøÕ \ eÏ.oÞ\¢Ë\eî<ôÎÄu\8e\11ßM»ì\1dÞ'ü\81ÓI\84÷\15\17àÿó¾\827\8aã7\94!¿Ï\8d"$\81/
+GìÀtÞùó\1f½\13;bendstream
+endobj
+1344 0 obj<</Type/Page/Parent 1099 0 R/Contents 1345 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 825 0 R>>endobj
+1345 0 obj<</Filter/FlateDecode/Length 1699 >>stream
+x\ 1\95WmoÚL\16ý\9e_qÕ/M¥`ÂK\b©´\1fR UÔ\84°à\96g¥H«Á\1e\9bil\ fÏ̸À¿ßsÇ6´VV«UU\82=sßÏ=÷ò÷E\8f®ñ¯G·}\1a\8c(Ê/®\83kº¹»ÅçpÌ\9f}ü7\92\12\7f0\1c\8e\82þ{\a\83áøÝ\ 3(\ f®¡\9f?\96_/z\90¿¥þx\14\f)§þõ\80\rø§\8cVÞB\7f4ÀYËô\97ð¢û0¤^\8fÂ\ 4Þ\8eÆ·\14Æ^ó5\85Ñe¸\95$\85É\8e\14N\16ÝÇ\ 5Y'¢7K[\11S¦\9d%\9dЦLmð)üyqM\9d>\9b\ fãËg\15\19muâpÓ"ÈL
++c\12\ 5©"22\97\85\13\19\95»Ô\88X\92Óä¶R\99ÆÈ ßù¢\1cý8L)6ê\9746 ö$\13NZר£\bê6²¶Ü\e K°\9cè²\88I\17µÆÄíÈ*'I8Â÷ o\1c\v"\9d_!\86\b:cxEÝ\9d4zg\8f¶»WE¬÷¶»+7\99\8aº.Ú©]w\9fìÝ \1fÈ\83ô¾ nʶLÃ\9dr\17C_à\ e°¦2D¶\95¸é¶°\1eK\e\19µ\91\96_ÒÎèM&s~ÀÙ\9eo%ê ã\80ærïe-§*+\91\9eõã|õ2ù\16L\9f\9e®Z&ÃÙÓ|\16\ 6³¿fW´ö\97\ 6ãÑ\15ý\98\7f \ 3ÿm½B᪯áò~2[Ö\97!µ
+ïë\aQÄ-½\90o\8e}i»\ fwÔCe\19#\9dA¯*ro\1c é\ 1MQ^d8Øí³Ús\918ih'¬Ýk\13S´\15Eê\võ;Ö:}ÆÚå:Y§\14käE \1c¥=ÒO½¡½rÛ\93\ 2\94ÿ\11\9aQW\9f-\95à±ÒIùñt\8b\8b.!\ 6Ë\9cá²P\aÚè\ 3éêy1iÅÈ\97¬H\18Qn«\8a\94a\18k\94Õ\7f©bâ;¿Å\ 5\98ð\9b\1a \14+##§Í±\82çb\82\93,# k\97 Ü\15\e]:*´kYæP¼Aèb\98Ø+4\11PÀÂV#\8cT:ÒÀ=)wE"Ë4,¦tÔ%»\86Þ©C,\0\95&Éí\ e|LüýX\17\1f\81=n0\ 4Æ\1arqü-\97>ûÜ\90ù\ 6m\86\ 6\8d©´5Fu\16\9fÔ_\91ü%ѽ\95VÇGèPAp¡\15\9c.dÛ\97\17À¡ oÊÇè4º\1f\9c¢ÒB\ 3øâdÅ;\98¢ãY9'\10)\16\99N¹\8eÿ\ 3\87\83\80&ºHTZB#L\9du\ 2|q\86ü±\9fïà/ô-\8aäÀ\r£AH9\88\ 5\85\10q\8e\ 6LRnù\9aO@@\0K¬ì\e½^ú?ã×OL\81\f\8aõÃ\9a\ 6\ 1\88Ô\1fXé\0
+ ©\0cB\eâqÇ]\9b¬f\7f-îçSºÿüúz?}~\9cO\1e¾¢\97ÿM\13¼@×O_Ö«?NfL\83HK\Qi\ 4¨$\807\94ÿRÂ{ña\81\18Dުɳ(D*Í\aú\0vù@ϲ(\19²\bº Ù\83¬\ 2\b \ 6ÅÎè\8c¶zïãò)\ 4*\1a°¡!\95ä@\ 5H¬ekÑtýDD¾¤\8b¼\97À\95oëª\ e7õ̹$+£Ò(w¤\7f0ôLuüßèf\882c\94`¬TEåì\9f¼ªDÏÓ¬a\98\8aϽ\13kmÞR£Ë\9d\ 5W\83ñ#(«\19¹ñ{#\91SP\83¬\9a\94+çç\13Þ\18ôd@ß\99YNFß\1fC¬·\ 3\15\98=\fg·Õeº\85ï[\19½q¡|Òxt\9f\87¸I ÉÈ7\98LEòzyóúéÏKþ¦¿¤
+x\98\v§P\7f]TQ\9fóÙxF\19Z6û3'\97\1c\8bÝÉH%GÚóè\ 1\8f\1a\11\81QÚÓÌ\8a|#ÈÂqôº3G\96<¥\f²ÀaÄÑ ³Î F¯FÄð4"P±u]\80\8fw7Ý\8fwã?]âá6\18ùQÀJKË\×\88ÜÝÐËì\99V˾\87w¢\e2¬&-º\16¥\ 2\vë\1c;E\8cI\ eÇðfå\9d\a¾7\92µ\ 1WqCJÍ¢°ð; Í_Â\19T#\13ÜÄ`lT«\9e-\9e«D\92\80ã=1é"ò\13\1dðk¬o\ 5®o$Ü®\eýl§Y\85бp\88ÝÌ\19V\8d$LVÃ\ 4|i\89\17"T\13þóí\80þ\ 5¢®"K¤1x]Cð¼Wå¦Zl\98\0н\1e+Ôi¢CK\19è\ 4É\8a_BeܧgÓ\9aÃ15\ eTD¼ay,%¿åÝç\v\8bëi§û&M!3úîW\9cÏôm9\7fú¾\98òîÁ¶;`>¬\8cñe/ ~ÆãÉ\99\ 5×àA\1d>Óâqþõ=!l\11m¡%Æic\vß\97á{r`ý¶\½¨6¢?\1e\17ï \ 2\95mÁ¥læùÉî\8fåtù\9eôM%Ýéß\9cÓs\9fY}Å\ 3²\ 2ðó\8a^J÷¤õ\9b\9fe\96÷?e|\1dPËf,0æ^\9efµ\rÌåCÍËøæ'µuzWU+÷tÚfÛÄè\9cÉ0å\14{(` :`Ür/\80ß\94ö-Á/ÁD¸Ó8Å\93¾Y\a\ 4\ç5E\ 1ßhy\8ce\95(l×\8e!"ãrÇ©B\9f6àòÍ/¢HZß«\85tXóÞ°\v¨t»Ñf«a\94É\12úª_\ 6Ý\87qM÷½\11~ù\8c\a4ºëW=¿º\7fþrO\98Z?¹Í¦:*ý\8f\ 3î\ 6¶Úi\ 4:·ý
+^ÿÿÒ9\1c\8d\83ÑM¿\86goÄzgáÅ?/þ\ 3X}4½endstream
+endobj
+1346 0 obj<</Type/Page/Parent 1099 0 R/Contents 1347 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F6 9 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 828 0 R>>endobj
+1347 0 obj<</Filter/FlateDecode/Length 1202 >>stream
+x\ 1\9dV]Sã6\14}ϯ¸³/\r3à$&qÂÎð\10ÈÒ2³»°MfúÐôA±\15¬Å\96\Ë\86Ò_ßs%9\80[J§d\ 2Ä\91îÇ9ç\1eé÷Á\84ÆxMh\1eÓiBi9\18GcJ\16gÑ\94¦\8b9þ\8fñ®%íù\v,å_\13þõó\8f\83i<\89\12\9aM§Ñ\82J\9aÎçøë?\15´v\81âÓ\18+z\81.6\83ÑÕ\19Mæ´Ù#w\92Ì°o\93¹ØcÚ¤ÃÉ"\9aEô\8bÒ\99y´\14\8f\91m-ë\a\95Jº\15é=ÅG\9bï\b1¥ÉÄ\878\89çH³É\86\9b\¢V\81·\95\ f²\16\ 5 Í\93Щ´ô¨\9a¼\17õ6\8eèFK2{zÌU\9a\93ÑÅ\13\89ª\92¢Æ\86\jjÒw$h-Ê\9dàÄc:\99\9cF1§³¨JÖÔ\18Ê\8dm°\14\1fªÚìU\81txúº\85Û\98ÒBIÝXR\1a\11»o3S
+¥#ÚäÊ\92°¶-yw.\1a\9f\93øi/q)Ë\1dr¡ì&\97ä\ 3\1cÓ®mÜg\94°+d\89\86\8b\82
+u/Ñ\93IÓ¶&µ'Õp@m\9a(Ä\8c\13p\8df®5\99:óí\84Æ\ e½Ø6\ 5\82vß\16\bõo\8dm\87\ e4\84'S\81\80Æ\81\87\ 6èvu¹=:þG\18Ë\16àåâAz^g\81×!é\86DZ\90m«ÊÔ\r\9d£l¿¤£~H"ËdÆ%1\10\f<Ù\9cù÷tæ\ 6\9c0\98\92j#J.¦ë)¢kF\ fXx8\80¢\96Ç=\9c±Q»Ý\1dW^\8c\a&=Ä©)«\ 2\14\92Ø\19PÀÍï¤k\1c4pm¡ç\ 2\85ô´\1d.ýÃ\95ÔJfÛ£^f¡3Jk)\1aIe[4ªB¤ÔT
+Ý\80u\90h4eÊÞ#ÐêæËòúkÄêÃ`N\8eéõ\83ø\98d\93FQ´=\8a0G((w@÷æ¹¾£!Ùr\17¥Fï·ÃY¨è0ôn9\16½\90\7f)4Uâ\ e¸\9b\9aJ\ 3Ô3Ù\bU DF\r¸\9aªQ\ 6Ò^\16Ö0.\9c\1cº\ e\15\8c®Þ¢ºÏr%jQÊ\ 6â|\14\96Ó\95\82\95(è®0;Qô°{^\rNjYHÁ"¨j\852Á\86\9bdø\1a¿ÂÎn\ 66,"S\14æ\91éC\ 3\82 \1a\85l\9dn¼¼>ú\ 2ÇtÖ\19ÐÔ\ f\11\85\9f_\ 3Ï¿u¥\8d\9dÇ\r»ï»¿\95\80'\9dÓHþÁ
+\1f\85]ïlêt!@ÿ9\8d\93ñø\9d\r\99ªeÚ\98ú\89Ê°gþî\9e7f\8fé\7f£\17¨5ó\ 6ú÷AŶ¸shP",\14ªq*Ùµ\ eëN\1al\8cñ=\9f§,\b\1f²\81¯ÃÇTó\ 4©Ù´V\15º
+\81ä\81"7û\1d$Áª¡jHS{/ð
+ð&÷\83¥õõê\18\aEæ&\97\93xCåçìÊ\18<gÛ\98¿\12Ò
+~\82/]âõòËÅr»uÞ\8f\18½´hµP\7fb\8b·ÝLí÷8¡\80í¡Y¸\ e\9b¾ºÓÞÇüðú\80\11ý$qtñ¼¼\ 6MÒ\87à)\99³\8f\ f½´8A,\ 6³/ï\vÀ¦¬Ø\15¬n\ 4å]ÿc\b\83\8b{ó³\12Àq\81\9eµ\0\95@½¶2Ú:ÿ\v©^XÇ·VÖOëÀåê\99ʦ\16Úâ\9cÄx\a\vOÅÁÂCl\8c°\958\19 \81½\807Òòòs_\ 3á4\r+zèðz¥Ó¢\85\86^Càdê'ù%\ fôá
+'\1f]BCµ)\1cØ£«äÅõ#\1c¡_o6\9fè£?ÈYÔ\99\ 1óî,t§ï\8bû\ 4üe\87û\rÛQ\98fðiZ¾\e8ï\94Á¥Ü½\82\aeå. î\8aa\1d£«E(`\92à\9e¶8Å\ 5,ñ· 'IºÍwL=v¦¸Q@ýlÅÜîI·ád\1eã¾\95ý·ûÖ4YDÉ,\86ÿó\8eÉ\9c#}Ú\f¾\rþ\ 2\83C\17Çendstream
+endobj
+1348 0 obj<</Type/Page/Parent 1099 0 R/Contents 1349 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F1 4 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 835 0 R>>endobj
+1349 0 obj<</Filter/FlateDecode/Length 1498 >>stream
+x\ 1\8dW]oÛ6\14}ϯ¸ÈK] \96cÙq\9c<më\96¶@Ðn\8dÛ`@_h\8a²XK¢FRÖüïw.)Ù\8e\e`EaÇ\12ÉË{Ï9÷£ÿ\Lé
+ÿ¦t\93ÒlA²º¸J®ð\86¿¦üõùÝEºL\93\19]Ï\96É\9c*\9a§Ëä¦\7f*é\91÷Ó5Þ-h¾¼Áï\14\1f«(\ f\vóùU\92\9e/,fÉ-Í`n sét\8a\1dñi07KoaäÌÜlz\8b;Òô\ 6ßìÅ\ 2Çâ\13\1fûmu1¹¿¥ô\8aV9âYÜ,i\95\850ðF\8eÞ\16¢ñÊ\12lÐûOO«Oô«\94Ê9z\14ÕZ\903\95\8a¤ÉÔëÕ÷\8b+\1a§s\9c\1fí´ ·_\1fù\1d[\9fÞDëãÙ\1c\97c\1dæ¦ }¨½5Y+½6uÜ:§é´ß\1aüÅÖx\91v\94©\9d*M£2Ò5\89\9að³&Uï´5u¥j\9fÐïý\ eë¨u\8a\1d o£·¦\96µØ@_\95u¸J×\ezÜ;¯ªo¯É\9bÞñé,ºv)\v%·º¾ÄYQ:CÛÚt¸ÐÑ¥4U¥ý%NÕª;\8d=\89p¼r´\13V\9bÖ\85»×VÔ0æHÂÛµ"\11\90\83ÿ@çìRQ\9bz_\r\a[Ç.úB!Rçm\ 4\88\ 1ðB\971~_\0\11\19ÉIzc`6\80¿âµÌÈ\96Q!ü\16T\99Lç\9a¯\8e\10\90É\7f´\9f\9b¶ÎHø`î¹\98í\86FTxßÜM&\8e\99O\8cÝÄ_\13¹sIá«òù±\90\b8vN\7fð\10ô§IÀ¨W\937t0Ëv&÷/(a\ 5@*!\v]«ãn²mÍ\116íºÔ²Ü÷(ëu\19\ 5`Uc\9cöÆî)7¶_\ 5ë!ü\13ù2"\ eú±"\ 6BãA\10\8d\90[±Qî\rØ\90e\9b17ÁÙ7dݾ\96ÐbFßµG\9a¬ÛMBp\13i,ðñ\9d\81ÃPk'ö\8e/\88
+\18Èe}:eq'\99\1aþh×\139Ü\\18ç\ 3¹\ 1D Ç\19:\9eM#Í\ 1DdQ\ fa\9fr\9dZ¿\0 çÜߦ\rJ\8cNü\10?\9fß#\9d)\17;üÑ^ÑÓÓ\13éà$\87ÅJ*K<ò>\86ðÄ\924µ\87Ú8ʳ t\9dé\9dÎZQR\ eõ:Î^\96ö 1\f`H5Ø,\8dÙB\83ý\96\9dæ\84%\\1d\18ä\8d1 ±o\13 =7?$Ã\80á!jNeá¶Q\ 5\84tÈ©\84Y&c|§PLD½\ f\9cõI\ 2ûç®\ eÖ\87Tû\822ÃÁ|ùü@w!ð\9fÉ\e¹Ñãµ®9szº\8e½ãYÞ¼H92ç\84rØø?¾Cä±j³¯§¢gÒ\ 5ÕÆV \a¦H\96:\94ÒÀöFïÀ\17\93]µ²@\11\81¦\99hkJ2,[^Bq;c<3Ôi_¼Ìò©~B¥5§®0H×Þ1o\15neª·J5l¥¢\16\7f\re\ 2¢d\97\8f\ e\9f]ÍâÀI×Ë\15\8aå\88\e«r\85\16\90Q¥|a²c*\92ÎC\10\9câÐaP&p{m<}o\9dÇ\82\14\8eõ;äB\7fé \82\15<C\8b(\8dÈÂu%ÜÄ1\86ó\ 4ë7Ô\18\8dz\fÌì`i\10úÏȧëºDîÁ\8fL\10å$øp\10Û \9aQ\12\ç][¨÷\f\1dÆâÕ{Ó1\96\e\15<|\85$¨·±\16\ 3\1cØÃéÜw\8c\bÚ\ 1HæSï>~¡w\7f>pKD\ 2÷ÝÿÛë\84>\1aPâ\8b\98°\f">/\97Ñ\8d\15M¡%`äº\17uæÀ¼\86²\1akP"\98\82ã.`¥l.0]À[öÁ\19°§+h£\82c\ 2M \18:0þ\80@Î+h<êpf¸00\1d2b\87f*¸MäÖTCs{\8eòyº\83é\r×ó¾ð\85ì9tnæ\9bÇ\ eö57\(C§ðª\81\1cïÑ{¸Â\93úWT\r.Õ±3;\87.Ͳ\ 1\82\9cM\9d\80DΧ\ 3i\9a=k6 p>w\r¶\15\19¬ÛSÉ\1dk¬\ 6\ 2}\8f!\17F\9f(m×®Q\ 2}\eHääF\96È8\0üÐ\0©\16U\98ò0î\8e\aí\7fÀ\80\82¦\0æp\90Ç\8dÁW \81:\85\15\8eÊ*ìÙcjâá\85»õ°\8b#:\96\1dBQ\14v\1fP\1fc\10Ä\ 4\8aQ1!\961\1e\ f\1dùs\eër\9fí¼<¹¿>\19\1dûA\88-\8f3ºkb\97½Ãó/\871ã\8e˯5Hr´\12\1dRå8u\8cy\92í<\15h\r \vÍ#\16Ã0GP#\9cë\8c\ 5wûF\ 5\17'÷ÓÞ\87\11LG¯\861ft\bê:Åø\8e¸PÆ\87¸\16\v~ñBT\a\10fqóä~Ùß0N¯1 \a¤ÇÉ\9f\1fÒCõDÚðÍó\ 5þïq\9dö(O\97üî\8fÕÅ_\17ÿ\ 1yÕ\0\ 5endstream
+endobj
+1350 0 obj<</Type/Page/Parent 1099 0 R/Contents 1351 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F2 5 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
+1351 0 obj<</Filter/FlateDecode/Length 612 >>stream
+x\ 1\8dTËnâ@\10¼ó\15¥\9cÈÁ\ e6Æ\10NK\1e«\VÉ
+ks\89\14\rã6vdÏ\90\991(\7f¿=¶IH²\87\15Bò£§º«ºÊ¯£\b\13þE\98Ç\98¦\90Íh\12N0\9b$a\8ad1çë\98ÿ\86P\8c®²ÑÅÏ\19¢\bYákÓÅ\1cY\ e®\9fL\90ɱÜ[\ 49\96;KfOfÉ÷?¬h6"Ôf»¼à[£µ\83Ôè\9e\9eg/\8c\97\fxÁ\ 4A\9c\86 #\8e³²²8Tu\riH8\82@^\19\92N\9b7HQ×\94÷\10\8c¥\9c¨T¥¶p%¡æbë\86wV·F\12\97ä\84§q\15RØÕÜÝ®n|kî\17MÃØ÷sb»eH?ÿÆ\b%˧ó\10Ý\10²5\86\94«¹æ+»Ó*·pºC\9a²09í©Ö»\86\8bà\fQè¡O¹\ÿY\ f d¡yH\ 3?\ 1ÓPØ\10ôÆÏÏÍ7ohí\91G/M<H3\ eÌgÆ\10*çÖEÏ\\80 @\89\86\19®PW¬\80.\86¦ß\99v\85öØ¿Ð-CiÕ\11:»ù`s\86\9dØò|E÷¦[\18\ e´\81\×Fê¦ác\86^[/9/Ìé/ÍznÝùa11ëm¨&aû½\1cUÖmÍ
+\10rè³\12\85®k}ðºø\86L»\13øÃ\86'®ù\7fû\ 5\ 6ëÕ¯«Õsü\1cÿË\8b'Öx,I±(\ 6oºÅAø-k4dX\9aª\17m ÖÙL\96BmyÏ-óó~ü6=
+£\e¶¶+ûÓ_\14ëe~÷ú²_û1r_¸¶»Üg\83\13\17<ô\85ïYâ\88N/9Àìí$Dÿr1¸)J8Ð\8b)¢tæßwBàÁè\17Î\17n´l½\97\85«´òç\82(åo\0\97\aó\98C\9e\8f¯K±s¬Gt\19âîþ1»ÇJJ²\16k\9ft\9c\86n_ °ý=L\92.Ât\16ó\87\86!¢èÒ?»ÍF¿G\7f\ 1{½_åendstream
+endobj
+1352 0 obj<</Type/Page/Parent 1099 0 R/Contents 1353 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>/Annots 838 0 R>>endobj
+1353 0 obj<</Filter/FlateDecode/Length 1601 >>stream
+x\ 1}WïoÛ6\10ý\9e¿â\10`\98\v¤òÏ8i\81b[×µ\e°\ f[k`(Ð/´t\92ØP¢FRqüßï\1d)9\8e\9a\ e\89e[:\1eïÞ½{Gÿ{±¤\ 5þ\96t³¢õ\96òæb\91-h³¸É6´¹½Áç\15^\8e©\94\a0\95ËR.\1f?\,\97k<\/¯³-5´¼¾ÉÖÃ7C\9f¢£Õv\9b¦\8eÞî.æï_ÑjA»\12{ooniWDϸ\93Ï~U\17ØáyF\1f¹³.趢·}å_ì¾Æ\95Ë\9b´òåz\ 3ï»b\ 6ÓeF\7f´ÁÙ¢Ï\83¶m2ÝÐr9\98®n\10$Lw5\137J\eREáØ{*£}_!IÙË\93öäU³W?Çkf]%Î\16ôrµ\ 5(pñ\97aå\99\82ºÃ\ 5î\82np±p
+ÜÀúR\e¦=Ã3ÓÑöäû}£\ 3©³}2úÅx{E]ræ\99I\97\ 4£ZyÊkÕV\ÀE80Çd°?Ð\8eÙ:\8ekü\15ÁôÀÔ¨#,Ó"\81JbzLHî4,\1eµoH\ 5òVÂEÌÙóy)ÄE\85\15çM\9f×ò.9äª\95wçÙ\94\92mͦ£àT~\aãC;î\9aÑ'\ 1OP\ 4ÊmÀK\129"ù\82\v\9d«ÀÅ°ï\98Oålß\91-©c\v8èP[º·¦o\ 3\83\ 6ÈFã\8ax¯Èßic<©¶ .\81nð\19ýÃ\0>g}\ f\8e*G\8d`\9eê»·}\10D\ 3r\17\9c\90ÁdçÎz¯÷\ 6ÁµþÀ\ e\eØ\98kàM¥ôk]Õ\bC\0ÌY¢\84³d\1eãP(ö\83\94.Ö\99\11Y\8f\0é²à{6¶c7Ù²t\1aFæxyV"\890\90a\90\ f\8b£¿\80d|\98Vè\9d¥Ö\82GÞ÷RCY5ì\8cL$ÑTxTG>æ¶é²ÎÙ`sk|æ\9b=µ|ð\ 3Ü\11Ù\88\940Äè¸\1e\ e\ 1Ô\ 1(OÂ\8eÜÖ\ 1M6dÚû\8eó\88m\88´ l´7ÜHác\8c1¿=* \10H[êªwJ:ód\88\10[)\ f\16\80çÒñ\88Û\v\82R3; @\12JÌ\92â\8e!Ç\16À#Ô\áõe&8\ 28l ú|yA×\vH\95\15\v@ËÎ\13\ 2Hh\9f\12\1eÚG!ú\13¯QÌ)ö\9fÑ\ 3b\1aÛÃhé}KÆÚ;ø³}UGÈ\85\89mx\8aªry\rv¢]\ fµ\96~B @ä\9e[0!\bùò\1c:\ 4\1e\82^±\8f&©§´\ f¼§NU\fvA$Bè^Ïç'\85J\9fæ²P¤õ\ £dA W\19}à\96\9d2¤Û2Â;\7fÿ\8c@¾M²\95$+Jï¹l¡\ f\18\1d/B0\945ê§\ac\8eÄÎY\87\96üSPÑI.\0Q\15õ0 Ýßk\v\927ÈX\92\99¤\1aK\13Ø\98ØNñ\e¶ú\11ÝØh?Ò\bz"\1a\ 6¥\ 5qE\v\\ fØØ\87N¹Fª"\9f\9f\86(z,:\9f[\87\12A\ 3\8fP¦\87i\89\7f\97¶Ç~Éa\rYJe\8dA>\9d~®¢\19\15ZUõ:eq2\883R\f~¢\9dL\ 3üß³;\92ndÀ¨ö\9b¶\1ezJ·¹é\vF\95]\88BsÂ\ e\1d\19ê\94Ñ£°\váZ\11~ß\83QH[µh<è«ôO\À\ f*\17\82\1dD($/h\1cO\10/¬ \98xG¹\11J
+Á¤Ý\92æF±=w$\8f08{\ 3¹\12\87\11Åï±n\9dÑ;\96\98\8dèá0Á\9fa\1d \10¿b)\ 3PµÇT^¤\85Q\14³Im°g\88³\84\f´R1¥\83DrÑÞ\80\19\1a\10\9bÓqÙ{±\83\aÈ04;²\10\92 °M@\90\1fy*ò\17U
+\92\10'k¬\1eä£ì\8d¤\ 3oÅ\19h£ð©è"æ)Õ\ef7#E\97\vòµ=`Ù3[\8f\1eF%êp£s\1a¥Ä)\81\86\ 1\94\1cW¢$qÆ\15\8cÙj®\0\99èÍQä\r¹Ú4´
+íïÈw*ÿfÈïDcS}\8bÇÂÈj lþþz82Íβy\93\1e\8de\9b\9dz;ÝÇ\810\9e²f\980\994éÄ<£ÏçÚYê$ñ P©Ï\18\90\94 ¦)\ eÎ\ e<\ 3\ 2ÒÀ_{´¶meÄCUñ.ô¼cîà\ 4}#ì\87\97¤5\f\93Ñ.#$\ e&Åã\19v~=\86þj<\1fnÒáî\14\ 3½¡åb\fd\91É\19u6r\ 4Ïæ½wscse\ 6í5z\8fïUöC3Y4¶õwÖ\8c \r\v\9fjr<²
+a)Ç\ 4Fr\89Å4F?\0ÿl0'Ç\ 3TiÍc\11\ fql^\ eO/E¦¤\ fZ\85£\ 5ø\8bÏc"ùsP\87($Úcà\ 1Q¡\90\9c¼a\ eÕ\88çÞNf~{¤q\7f\88nÓ Lé\18y\80þ]E-\86:58\9e¡Ý7¬Kí1 *±\bå\15¥\8d³Y\19c\ fi3DÈ\ f8\83áð\bY\8b*Rè²\84há«ç¼w: У\ fÜ`>£íâYi\10+â\90\8b2\8e\9c\9bì<\07ÈßíãO\8dµüx\ 2[þÿ\87Ìf{\9bm¯Wø\ 1\ 4Óå*Rí·ÝÅß\17ÿ\ 1SÑY+endstream
+endobj
+1354 0 obj<</Type/Page/Parent 1099 0 R/Contents 1355 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1355 0 obj<</Filter/FlateDecode/Length 1657 >>stream
+x\ 1\95WÁn\e7\10½û+¦ºT\ 1bY\92eÙ-Ð\83\83Ú\80\81&M\1dµ@\0_¸»Ü\15#.©\92\Ëúû¾\19îZ\86l\1f\8a @Â%93oÞ{Cý{2£)þÌèrNçK*Û\93édJËÙt2§ÅÕ%þ=Çß ©\96\ fó\8bËÉÕ[\1ff\17Ë·O,ß8ðiurv» Ù\8cV5\82/¯.iU\11\ 2O§´*Ç«µ¦\ f«\1fØ\83ÄdÏ8¶Å¤ô®ÎËÃÑ1i\97Â>/^\f{Éú\86¬~Ô\96~;Þo"Žónßú.ÒΤ5%D{ó\9aJ\17]óÎ=i\12U¤BkG]Ô\15\19GÞV:pÈ)\9dÎÎ\81Ǫ\1a?ê\10\8dw\91|MßT[(R\ e\9bù¤q\r\90MÊ8\1c¯} B\95\9b\9d
+U¤Ò·[\95La¬I{>:\0@µ±:Nú óådÁA®#\97ñ?pxT¶Ó\9c\85qeÐ\8aóßû\ e\80X\8b\94J\1f*R\14MãLmJå\92Ý\ f;9é\f
+²\12\88\1a^2\ e\ 5´HÙ»!¹\ 1\81[TÖú\98^ìö[\1ddo\94°Ú\93ó\89\9cF\1e\88«Sâ;צYë\80Ê\94£ó }Ñ* \ f\85\14Ñ\18`\84åBS
+@\8dÏ%RGØ\ f\17!ÓÙô#N%>°\rz«B\ f¹¢\7fnî¿\93U¡Ñôèm×j\86\9b)T©¤¤\96³Û_h\ 6\8a2WOÏ\17\19òùt²\98Ð\9dK:8eI\87àCÌ\1d\18è\89ÝóËÉ\92\etWK¡\8dF\924ºû²º¹ÿrý\aÝÜßÿy?¢VǨ\10\1f\14B\17\82D\97>\93Iø¨À\1e!\æO\ 3¤PzçôÓV\97 \85p£\94=*~·\ 6S(tÎ\ 1Kd\9a¸ÝÛà\vU0\8a@¹iÁ{i\ 3Õª³|+`´Ò«R\a&&væø\8a1ç\ 4s\ e\ fãÎ\81\87Ò¾£¸kõ\b·àûöPH¨@h@\1a »\98tKÑ×\89\97\1e>ôç\ 6\ e\ 3"\96â\80E©Ð\89:x\9ch\8b\8a?9FC\18ú\\ 5º©JÑ\8a3À¡àº\86\vP\7f¹\ 6çP\86\15y É1\1d%ûíó§ç\ 3à½6\8fù\1a\8e9¡ÕZ\14R{\86\ ey#\ 5ÈyÏz¯;Ëh\bù\98«\95ßá\7fÈ\9fs³R'm-+ë("\ 4g»
+½F?úv3²à¤\ fi\90Î\80Éwh2®}g¹/Ñ÷ÕÐÚï(y>\13|Õ\95ÐÀ!ðG25m}\8c\ 6iLè«ä@Úð.\94Áj÷N8\90±ÑÕ[QY\92\12²6 \85°OÁ\95x\100Ôv\v5\ 2+Ô\0Bó\a!ì\88bWT\ 6P&\ f $Ní°°\83 µHa£õVØ~\84O\14\8fdýe§ËM\90 È\9eo\13~ö-HÞ[±Î×\8d\0ªè çf1Ølo\95\17\f~å\90g·ÃÀ`\99ö>ÚTE¦\e\17\94w½\14s¿KU\15·\1c\18\ 4¿\rF%t]¥5²óù4ëH°BËøJvª\1eGÝB\8aÙ\f*ï~æ!\ 2¹ð&\94Æ|ÚÓ¨*\9eFL>í\8e°áyŤcHy85pG.\8f\17 \82\96ã\8e\ 4â\11çÒ\80Í,ô\ 4\83\14¦\8aµå\16ð\91\81ª¾,»\80f²\9d 9\8fÂ
+o\ 6²¶\90Ó1aú\826\8eE \1c\98\13£nÙf¬rMÇÖ\86x\8eñ\aY*\13ñ}4\90#ø\ en¯éý¼èa\fN\9bÄÓê\95Ç[S\ 4\ 5Ô\86kr Á)dp\ e\1f1%JL\10fnzø \8eÇ\98\ 3\9d\ f\eB.¤\9fTÉ\ 3ïuB `!¯\8d\17óÝz¿\116$iC\ 4\92¾sB\90ÒWPàÍ#*Gþ\99\80ÜrÆé\0\91$\fWèäL\8f5[NnôÁ\1c\8eºÒ\8f¿,\ 4éÈ{sêbB× $\0w\1a®T\rS\81\19PÂÅ_3½\1f[\7fóTO\9d\ 3Å\ 1Hô°äÎ\99'\1d¹%\ e¬\ fÉ\94\1d\86gþÆ\ eê\12Yãº'Ú`0j\e\ 12¼AX
+ÿêÚ-Â\1f|\ 4¸0\13\93\8a\e~N\1d\97\88Éß U\9d©\100\eºL\83Ê#\ 51ä\87\ f"r\91Ãð\9eC\9b"Òf\82õC\87±/ÅFûf+Á\83Áàðý\90<\8aÞ\83\ 3\851n£goøz÷û¨'\aßË3\1dKϳ
+rK]Ìú\15u\8eJQ#\9e¯à9^]¬Ò>\8dR\ 1\98£°\9c\90\0$`åà²f\rÀ\95{\ fêï\87C©\12f\1dï:\fr´Ì
+é2\8fa\81Ï:Ïý~ûQ³ÄÌàÛôû¬X!N¡ñ \eP>pT\ 6%Ä,\ 3£\1fu\11\1d¯ÍÓO\83ïE\r\0ðú\86gr\98~L2T9¯Á\97Ç\98\euM§]^\1e\8cxÌ~\8f\97f¯©wÞÛÜ|9\1e»-OVxGúH\1e\10\85\9d\81e¾\e\\1c\85\9bÐg\1e\9e\10¶\f®\90§\b\ f5$§\1a<\92\80\ 48\8dA+Ï\ 3~í÷ÞÆ7½°\8a\88·\1d\865÷ß\824\10\938ÁÁoPTÿsA\1a\87\1cól>»½ê\7fÜÌðsjzuNËÅ,?C¿]\7fþtM_\83ÿ\81\91K¿û\12\ fØþQÇÑO\87\ 3§\97sü¶ªÆï>[\17Ë«Éòb\8e'.vÍæ3>}³:ùëä?î\ 2\89¤endstream
+endobj
+1356 0 obj<</Type/Page/Parent 1099 0 R/Contents 1357 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1357 0 obj<</Filter/FlateDecode/Length 1410 >>stream
+x\ 1\95WÛnÛF\10}÷WLó"\19\90h\99¾Æ/E\eÇmÑÔi\11\15A\ 1¿¬È\95¸6Éew\97\96õ÷=³\97\88"Ü4\85aÃ"wvfÎ9sÑßG§´ÀÏ)]åtvIEs´Èðq±Èr:¿¾Âÿ9~\8d¤õÑ\8fË£\93»·\94/h¹\86ÉåÕ5-KÂñ\ 5\9e\14Ów\95è\9c4\94\9ffô\93Ñ}G\8dè:Õnèç\8f\9f\97\1f\8f\97\8f0?§ÓÓ`>ϯábYN?9a\1c\1fÛ*WÑ'Ѭ\ 4\9dÁ§¨»JP>#AÜÒæàÊuß\16Né\96\94%ñ,T-VµÌhYI*zcdë¨\91®Ò%=Lkõ$ë\1d9Í!,h~z\16\1c\17\95h7òá\18o\10j+6\92\1cì½#ë/ö\8e\vÝàmI\85¨kY\864.b\1aS²ÍÊ\eÈR¹Ã\14§Yô\97_fç\9c(\a·VÆ:RM\83óÂI\0+,²@\ 4½\1d¸ÿ\ 2\1dÞ úýöÝ\8cãq\95p\1câ8\86R7Bá`Ùà¯\8ff\14 éux\ 2f\13ü \ 5$\90\15º\8d\a\12?Sö×jÀ®[\8f+>vÂ\b\80
+\8a·Âr¼%ǽQÏ!ðZY\87Gxn,Õ\1apÅ\88\8cÚTÎ\12§YIe"*ÉÿV\9b'ë\ 4\93i3úÅùËn$0ب\82¬ë×ë\90ºUM\a"Ù\ 2\8eV½£R\95íÄ\91\853IÏÒ६kZkC «å\vYéúÎ\8e¹ø Y $_º\9a¡«\90©\82k\8e\85\ 3½_\9e|Î\7f\9dq~\95ðù!ÿ\10ÏZ\94\92ÄVì2ú\I\b°EôuÍ\ 2\ eVl/FIr0=\90Ã\8d\10A4\ 1\90\9dÑ\e\80J\ 5tà¤%\9fw@\90%\17¤\98ѽvÐ7$\fãÉ\ fL3°6Âic'á\10ª\84Ï\83\v;r\8d\14¼nü]ÁAgÔ³ªå\ 6\ e¹6üµb¥jå¸J(Ô\85\7fZ²Fùf§\80\16PÅë'\ 5\84E»ãà\vi-*\8cá®5\vXë\87ãQ\0¦o[F'ð\1f\95Ñ\88¢RAYã\94&^B¡þ\1aÙ¬\0\93f\ 1\8cÏ\1d¦îª~\9cùDµ\954ÊM¾b\8c$\12\16\10ß\1aÅ6yÔr\1fB ¦ô\18¬$h\ 4\1c\10Î ªQ¶\87ô|a'ÜZ¡nä\8b(\äÒ¢\9e(\96\a^\8dlÇ\9aõr\13Ie\11AÆéQ\ 3J_\8c\82B/\98QÙ\e\ 6ÝS\8f>je\90Þ\9bÛÐ+^\15QÄy\94\11º\8f'£,\83\8f\7fg"ñ4(é\8cÞû²\f\90¡¶"\93¯\871ò\1c${Hcj&_S\ 4m¹0k½Ù\ft7\f*úI\8dù/Ý\93À\88ã~·Õm Ñ\0:î \90{#P!¾.\11ûN÷\86À\1aF\14Ã\12*õõÜF¹\8c\ 1ÿ\1e³J¸\89å PC\ e\98\ 3;O8\86ð<\ 5\16Ô\aÅõz \85\8ejëmïMзØÉÉ]êêÓ\13é\8a\93×\ 6ÀÃñ\8cjÉîx\8aq«c\9d\94\rÛÏ1\120ÀË)æ6\7fÆÇ/#R\94^V®\82Ê\ 2\eÌ~HÛK«é1ÎV\92\ eÓËè\ e-\ 1Jç\16LÊã\86¾\8e¡\8câ\9a=ê
+\1d\12M¥\11f7\eáä\11ÆøF+ÿ\1fùaw@ZµÖO¾£Ý$\Þ¦]ã<\8cà\90õÍËÍÅ"¿I±Ì8\8e`\91Æ\1fcrv\95]2,ù\1e\96\8bE¸æ7Ñ¡²\80I¸/AÃ\9dö«ÃÙw¨ý\124\8d\86«\1d¥&ÉðÆ\85#&\91V\r,.I\16Ã\9d\83æ\ 5\1d\14µ}Có~@ïÞ\1d'\95®8\vIÍó\v\9a_ä\19orS\94Á\ 4U\80\819ó<áÏ\80(_!\9c/h\81r\ 6#\88¾\8b\1c¦Ë?¤¡r;h6Q@3®!¨°\ 5û\9d\1f#¬\14\86\19\bÿs¯r\14\1e\8f\98ûe\80(#\ 4çDmCM\8etç\aö©\11&ó\81\1eg~@ÇF\99zyê¦\ fSD\96æ¸Aå\85bÇN\8366r\998Ûªv¥Ú\92k\8csÛê¾.ã`\8dë\91(ü 䤨\90Æ1\86¥2²À\ 4÷#w0÷·\15N\81\86ý\90\19/\13¡\101NámÐ\8dPtµ\88\1d?\1cÁH9Ä\81öJûVu\85Þ\13î\9b»¸þ¦2\19h2ñÃ[ \9f·ÏÂ(ÝGÖ±Nûí\8fI÷_ °X\88\15¦RZ@T,\8dÿTûs(ÔëÁ"\vYC½ßðõãüò:»¼Èc·Ës¾êýòè\8f£\7f\0¦\15)Zendstream
+endobj
+1358 0 obj<</Type/Page/Parent 1099 0 R/Contents 1359 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F8 11 0 R/F9 12 0 R>>/XObject<<>>>>>>endobj
+1359 0 obj<</Filter/FlateDecode/Length 1421 >>stream
+x\ 1\85VaoÛ6\10ý\9e_qÀ\ 6Ä\ 1\14E\92\1dÇÙ>mI»\18X[\ fq°¢óPÐ\12e³\91H\95¤âúßï\1d%'©Ú¬-\ 2XÒ\91÷îÝ»G~>J)Áÿ\94.2\1aO)¯\8f\928¡iv\1eÏh2»Àï\f\7fVR\19>LÒY<ýÞ\87q2þvÅïË£³×\97\94%´,\91dz1£eAH\90àM>ºÚ\8aÆKKY\16ÓÂX/ÖªR~\7f²ü\84e\13JÓnÙi6\8b3,\1cÝ\8az-hgì½#£ ?U!É
+½\91dJj*áKckGëÖ\93ßJR\1aÛ\97"\97$ª*¼y\8ai¬yàåÊ\916\1e\ 1;±w\9c:¡ÓtÜ%ÌMÝ\b¯Ö\95\8ci¹EdÞ#Î\8döBi÷\98óÔ52W¥Ê\91\931`\15#\\e á]P\98Þ\90Ð\ 5µ\8e\7f9.%î*½¤ô¢¯t<\89'\)\18IcºYܽÿ\96\8c\v4\0!7\8bcGªn*YK\80 ù@\82k\9bÃ+»§\8d5m\830\17\91´\11
+Õ§Î\ 3\85°\ 5F\0JÛ½\ 3G*\17\15\9a,\9cÑnuÂÅJ´\àÏïÌ\80\94°'\95ª\92ØõLúü¬{ÃÅ\85ÇÊlP"gþ5pî8EMµ\0\92»ùµ#oH·õZZ׳Á½bÖ\18#z7H¨´ò]!«Ñê\84a\16Ø\ 3KÐo`\8fé\8dq\9eú,¢¨¹/»¡{mv!Î\9aF:\ 4ÔhÂýsÈ\02@<H½\1am\99ª°®0Òéc\1fôÇh\ f|¡\1cCη\8d*¸²\8daÙ\19b\ 6\99Ê\ 1ú\9d\82\12Y\11\15ôCª\84\90\83x¹\9e®È\ 1\84½i\8fÑ\a\ eÖC´´\15\ªð¤XfÚAÐ \15Ù×è\1e¯x\10\15`ͯ#\84©|Kµ\14`\aªäÐ\8e\1c\1e\9fAÎ\7f\928F§>¾ùíý¿¼\92ÅÐ?ó¼¬Fs,\ 5\97èÆ\14³\9cPÞZ\v\15V{\9eË\9bÅéÝû~`\1a+óª-@ÿi\16ä?=?\1fO"Î<ÈÙº\16\1a<Öfm\8aý1ý\ 1¡\84ùÀ8fÓn*æ%\81\r\92:7-O6\83À\bZ\83\ 1#\bì^Bÿ,Z¦\84\19Å·\8d\15p\84ð\86õ\\8an\14ÁÑ 3 ̶\98Y\16%³\bW\18@D\ 3\84~\1cª\9dòÛ\0ó+:a4f'\8bÎ\95\86\ 5\ 4\ f\ 1äÂä-O-â°'\ 3½Y\0¾f\ 6\1a±\ 1[F'ÉÉGágà\9a'¬\11Îí\8aÕh\ 2m1<ö×ïÙ\a,õöê\1dÝiõ¥\v{\85ô|\86ª5\99ª \a\14ÎÆ\ 5#9¬fx:ð^\8b=i ̬r ÍÕ\r\9b¶ö´¼Z\9cÍ\17Àæó-Àópt^\8dH¶ë\ 1\8f¹\81Zr¨%¦¿A"{dh\16/\8f\1eS=µ\99ãÛÆS!¼ \ f¿wå\93w<9é3¥,¹÷¼]Ø-\80\ 6íwï®Ç³sº2Z#=×ym\15\97L·\7fÞÆ4GI\8eÄ\ 3\14" (*©\ 3\rpJßÄ.71\ 67¢B1zcÃAõì´À&Qç\8bÔ\9a\ 2\99Dü!ôìðTy\e\7føAßÆ1]¿\9d¿lûü1\8c½8\b\1f§ \84\b©ÈVA\18½NøyÓ=\a;wP7\88V\1aýá9`NÐÊoZ\ 5\eé\9bó=+F\9bö´c;¨déYø,\15n^Àu\ 5§\[\81\83\87÷u¦FÒp¨\f\aá5>\87áí>÷jYï©\90¥h+´Z\96\ 1*o]\8bÜ\1azûîã«ùõa^B:×w\11\10\94îl&ÞöÆ\13n \ 3Ý 0\80\11â={Óàí\ 4@×\8ag\117\80P4»)\94P
+Ûi\0V)ª¨«\87}o\83Ãij\8fïÌã\81`Õfë\87e.\rôðå«\84HÜH\v£d';L\13fZÖ,9\86V\1a¶\10¾$à쥲ÕAªèZ\a]\93D¿a\ e¢\b¥Ô\18ÇA\9dØÚÒS/Àu8À°ªFÁ\98É0\9cC°M\18CÔÝ[\12\9fðÔy\aî\87á.6êU\15\87\8bÒÓ\1dmôË!îòpeë/2Ôÿ\8b7\15\\9aèc¿Ã\ 1q\82K#.3\87×a\1f\1e©þýaym\1eäg<ü4¹\88\8ad°øY\102 (M\92HüOT·U\1a\15é\ fv\9a¬F®Y\9dDâ¥@\98Q\13R^¾°Ó:Ï\1d\a¤?¿\10ð©\ e\eP.5\96\83Î^Ï\9e]}ÇLÏÿ\\94'S\ÈÏ3Ü®\11\97fcÞáÕò诣ÿ\0¤Û«\16endstream
+endobj
+1360 0 obj<</Type/Page/Parent 1099 0 R/Contents 1361 0 R/MediaBox[0 0 595 792]/Resources<</ProcSet[/PDF/Text]/Font<</F0 3 0 R/F4 7 0 R/F5 8 0 R/F8 11 0 R>>/XObject<<>>>>>>endobj
+1361 0 obj<</Filter/FlateDecode/Length 584 >>stream
+x\ 1µT]oÚ0\14}çW\\89>¤\12 NH\ 3\9d´\872\8a\844ºNð°I\95*'1`pbj;\9búïwí\10\ 6éò8xHb\1f\9f{Îýð[/\ 4\82ÿ\10Æ\11\8c\12È\8aÞtÝ\eÎ ÜÃz\83\eÉ\ 4_r \ 1!\ 4Ö\99\17Þ|º]ï{\ 4ü\90\ 4\13ÜòàôË\84\12ö5'\1d\0e´Ý\19Îc\bÃ\9aÝ\8f\12Kq¬\f\98\1d×ÀK|2ØpÁ Æ¢4\87õ43¬âyÐâð\9c\9c\vÁ~\14\añ¥®`+d\8aÊ^O\f-uÍr\97Bþboh«\1f\8f\a\9dÖ\10ä¼÷CB\ 6´+\ 1g*2ÈÃ\96\8cS\12¡a\8a_<}|¹\1dÐ. Qôh\ fõï;\98Ò,Ó\16\10Þt\0ö\85#\80\8c)%U\vô_êL7\86)È\14£\86\97[Wj\9ab~]Á5¼ËÊ®\95@µfE\8a=\80_\ 5T\1aÁVÞp~wÙ9u\99©\86«ÖÀÎ\8c\92«íÇ®¹\0\99\1d5 w²\129\1c\95Ì«Ì\85=IªÃ~hBY¯7\8dì\ 1-ó\7f5¬\rÝÂ^\85F¯ÖtÉX\ eF\ 2Íñ±c\1a\15H\97\9d¯\8béj \82\97¬\19\8dÙÓâ\a\1aÎ\f\97%È\8dCh\91RXÒ\ 3³\83\13ÀOY)ø{´©ì(\88ì\üæBØc%\b)\ f eÁpö°\1c\82\1f¬u®;Gªæüì\12î¬\9dS/Á\17åuR\9cQ\e\10å4 va\15³\83à\94[g\9dÑú9úAçOß^\1f\17³\ eò\8d\92\85£j'¦Æ\9f+ÇËLT9ÓÁ®Þ\98\9c:)LÆ\ 1\99\8c Ƨ»6V\ fËé\ 3<+¹Ç$ÃLfUÁJ\83\r+\9d?¿9à\8f#¼\10sïË\8e\1emWGQ\0ÏR\19\9arÁÍ»\8d\12'\93 ¹\8bð\16E\\18ÅvíqÝûÞû\ 3Ç\98qéendstream
+endobj
+1362 0 obj<</Count 25/First 1363 0 R/Last 1594 0 R>>endobj
+1363 0 obj<</Parent 1362 0 R/Title(Table of Contents)/Dest[1102 0 R/XYZ 0 756 0]/Next 1364 0 R>>endobj
+1364 0 obj<</Parent 1362 0 R/Count -1/First 1365 0 R/Last 1365 0 R/Title(SAMBA Project Documentation)/Dest[1114 0 R/XYZ 0 786 0]/Prev 1363 0 R/Next 1366 0 R>>endobj
+1365 0 obj<</Parent 1364 0 R/Title(SAMBA Team)/Dest[1114 0 R/XYZ 0 762 0]>>endobj
+1366 0 obj<</Parent 1362 0 R/Title(Abstract)/Dest[1116 0 R/XYZ 0 786 0]/Prev 1364 0 R/Next 1367 0 R>>endobj
+1367 0 obj<</Parent 1362 0 R/Count -10/First 1368 0 R/Last 1379 0 R/Title(Chapter 1. How to Install and Test SAMBA)/Dest[1126 0 R/XYZ 0 786 0]/Prev 1366 0 R/Next 1386 0 R>>endobj
+1368 0 obj<</Parent 1367 0 R/Title(1.1. Step 0: Read the man pages)/Dest[1126 0 R/XYZ 0 762 0]/Next 1369 0 R>>endobj
+1369 0 obj<</Parent 1367 0 R/Title(1.2. Step 1: Building the Binaries)/Dest[1126 0 R/XYZ 0 621 0]/Prev 1368 0 R/Next 1370 0 R>>endobj
+1370 0 obj<</Parent 1367 0 R/Title(1.3. Step 2: The all important step)/Dest[1126 0 R/XYZ 0 216 0]/Prev 1369 0 R/Next 1371 0 R>>endobj
+1371 0 obj<</Parent 1367 0 R/Title(1.4. Step 3: Create the smb configuration file.)/Dest[1128 0 R/XYZ 0 786 0]/Prev 1370 0 R/Next 1372 0 R>>endobj
+1372 0 obj<</Parent 1367 0 R/Title(1.5. Step 4: Test your config file with testparm)/Dest[1128 0 R/XYZ 0 437 0]/Prev 1371 0 R/Next 1373 0 R>>endobj
+1373 0 obj<</Parent 1367 0 R/Count -2/First 1374 0 R/Last 1375 0 R/Title(1.6. Step 5: Starting the smbd and nmbd)/Dest[1128 0 R/XYZ 0 336 0]/Prev 1372 0 R/Next 1376 0 R>>endobj
+1374 0 obj<</Parent 1373 0 R/Title(1.6.1. Step 5a: Starting from inetd.conf)/Dest[1128 0 R/XYZ 0 181 0]/Next 1375 0 R>>endobj
+1375 0 obj<</Parent 1373 0 R/Title(1.6.2. Step 5b. Alternative: starting it as a daemon)/Dest[1130 0 R/XYZ 0 356 0]/Prev 1374 0 R>>endobj
+1376 0 obj<</Parent 1367 0 R/Title(1.7. Step 6: Try listing the shares available on your server)/Dest[1132 0 R/XYZ 0 771 0]/Prev 1373 0 R/Next 1377 0 R>>endobj
+1377 0 obj<</Parent 1367 0 R/Title(1.8. Step 7: Try connecting with the unix client)/Dest[1132 0 R/XYZ 0 603 0]/Prev 1376 0 R/Next 1378 0 R>>endobj
+1378 0 obj<</Parent 1367 0 R/Title(1.9. Step 8: Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client)/Dest[1132 0 R/XYZ 0 436 0]/Prev 1377 0 R/Next 1379 0 R>>endobj
+1379 0 obj<</Parent 1367 0 R/Count -6/First 1380 0 R/Last 1385 0 R/Title(1.10. What If Things Don't Work?)/Dest[1132 0 R/XYZ 0 221 0]/Prev 1378 0 R>>endobj
+1380 0 obj<</Parent 1379 0 R/Title(1.10.1. Diagnosing Problems)/Dest[1134 0 R/XYZ 0 705 0]/Next 1381 0 R>>endobj
+1381 0 obj<</Parent 1379 0 R/Title(1.10.2. Scope IDs)/Dest[1134 0 R/XYZ 0 647 0]/Prev 1380 0 R/Next 1382 0 R>>endobj
+1382 0 obj<</Parent 1379 0 R/Title(1.10.3. Choosing the Protocol Level)/Dest[1134 0 R/XYZ 0 562 0]/Prev 1381 0 R/Next 1383 0 R>>endobj
+1383 0 obj<</Parent 1379 0 R/Title(1.10.4. Printing from UNIX to a Client PC)/Dest[1134 0 R/XYZ 0 253 0]/Prev 1382 0 R/Next 1384 0 R>>endobj
+1384 0 obj<</Parent 1379 0 R/Title(1.10.5. Locking)/Dest[1136 0 R/XYZ 0 771 0]/Prev 1383 0 R/Next 1385 0 R>>endobj
+1385 0 obj<</Parent 1379 0 R/Title(1.10.6. Mapping Usernames)/Dest[1136 0 R/XYZ 0 317 0]/Prev 1384 0 R>>endobj
+1386 0 obj<</Parent 1362 0 R/Count -4/First 1387 0 R/Last 1401 0 R/Title(Chapter 2. Diagnosing your samba server)/Dest[1138 0 R/XYZ 0 786 0]/Prev 1367 0 R/Next 1402 0 R>>endobj
+1387 0 obj<</Parent 1386 0 R/Title(2.1. Introduction)/Dest[1138 0 R/XYZ 0 762 0]/Next 1388 0 R>>endobj
+1388 0 obj<</Parent 1386 0 R/Title(2.2. Assumptions)/Dest[1138 0 R/XYZ 0 581 0]/Prev 1387 0 R/Next 1389 0 R>>endobj
+1389 0 obj<</Parent 1386 0 R/Count -11/First 1390 0 R/Last 1400 0 R/Title(2.3. Tests)/Dest[1138 0 R/XYZ 0 225 0]/Prev 1388 0 R/Next 1401 0 R>>endobj
+1390 0 obj<</Parent 1389 0 R/Title(2.3.1. Test 1)/Dest[1138 0 R/XYZ 0 205 0]/Next 1391 0 R>>endobj
+1391 0 obj<</Parent 1389 0 R/Title(2.3.2. Test 2)/Dest[1140 0 R/XYZ 0 758 0]/Prev 1390 0 R/Next 1392 0 R>>endobj
+1392 0 obj<</Parent 1389 0 R/Title(2.3.3. Test 3)/Dest[1140 0 R/XYZ 0 554 0]/Prev 1391 0 R/Next 1393 0 R>>endobj
+1393 0 obj<</Parent 1389 0 R/Title(2.3.4. Test 4)/Dest[1142 0 R/XYZ 0 639 0]/Prev 1392 0 R/Next 1394 0 R>>endobj
+1394 0 obj<</Parent 1389 0 R/Title(2.3.5. Test 5)/Dest[1142 0 R/XYZ 0 488 0]/Prev 1393 0 R/Next 1395 0 R>>endobj
+1395 0 obj<</Parent 1389 0 R/Title(2.3.6. Test 6)/Dest[1142 0 R/XYZ 0 364 0]/Prev 1394 0 R/Next 1396 0 R>>endobj
+1396 0 obj<</Parent 1389 0 R/Title(2.3.7. Test 7)/Dest[1144 0 R/XYZ 0 771 0]/Prev 1395 0 R/Next 1397 0 R>>endobj
+1397 0 obj<</Parent 1389 0 R/Title(2.3.8. Test 8)/Dest[1144 0 R/XYZ 0 409 0]/Prev 1396 0 R/Next 1398 0 R>>endobj
+1398 0 obj<</Parent 1389 0 R/Title(2.3.9. Test 9)/Dest[1146 0 R/XYZ 0 731 0]/Prev 1397 0 R/Next 1399 0 R>>endobj
+1399 0 obj<</Parent 1389 0 R/Title(2.3.10. Test 10)/Dest[1146 0 R/XYZ 0 541 0]/Prev 1398 0 R/Next 1400 0 R>>endobj
+1400 0 obj<</Parent 1389 0 R/Title(2.3.11. Test 11)/Dest[1146 0 R/XYZ 0 403 0]/Prev 1399 0 R>>endobj
+1401 0 obj<</Parent 1386 0 R/Title(2.4. Still having troubles?)/Dest[1146 0 R/XYZ 0 266 0]/Prev 1389 0 R>>endobj
+1402 0 obj<</Parent 1362 0 R/Count -6/First 1403 0 R/Last 1420 0 R/Title(Chapter 3. Integrating MS Windows networks with Samba)/Dest[1148 0 R/XYZ 0 786 0]/Prev 1386 0 R/Next 1421 0 R>>endobj
+1403 0 obj<</Parent 1402 0 R/Title(3.1. Agenda)/Dest[1148 0 R/XYZ 0 738 0]/Next 1404 0 R>>endobj
+1404 0 obj<</Parent 1402 0 R/Count -4/First 1405 0 R/Last 1408 0 R/Title(3.2. Name Resolution in a pure Unix/Linux world)/Dest[1148 0 R/XYZ 0 491 0]/Prev 1403 0 R/Next 1409 0 R>>endobj
+1405 0 obj<</Parent 1404 0 R/Title(3.2.1. /etc/hosts)/Dest[1148 0 R/XYZ 0 363 0]/Next 1406 0 R>>endobj
+1406 0 obj<</Parent 1404 0 R/Title(3.2.2. /etc/resolv.conf)/Dest[1150 0 R/XYZ 0 494 0]/Prev 1405 0 R/Next 1407 0 R>>endobj
+1407 0 obj<</Parent 1404 0 R/Title(3.2.3. /etc/host.conf)/Dest[1150 0 R/XYZ 0 356 0]/Prev 1406 0 R/Next 1408 0 R>>endobj
+1408 0 obj<</Parent 1404 0 R/Title(3.2.4. /etc/nsswitch.conf)/Dest[1150 0 R/XYZ 0 210 0]/Prev 1407 0 R>>endobj
+1409 0 obj<</Parent 1402 0 R/Count -5/First 1410 0 R/Last 1414 0 R/Title(3.3. Name resolution as used within MS Windows networking)/Dest[1152 0 R/XYZ 0 392 0]/Prev 1404 0 R/Next 1415 0 R>>endobj
+1410 0 obj<</Parent 1409 0 R/Title(3.3.1. The NetBIOS Name Cache)/Dest[1154 0 R/XYZ 0 319 0]/Next 1411 0 R>>endobj
+1411 0 obj<</Parent 1409 0 R/Title(3.3.2. The LMHOSTS file)/Dest[1156 0 R/XYZ 0 786 0]/Prev 1410 0 R/Next 1412 0 R>>endobj
+1412 0 obj<</Parent 1409 0 R/Title(3.3.3. HOSTS file)/Dest[1158 0 R/XYZ 0 512 0]/Prev 1411 0 R/Next 1413 0 R>>endobj
+1413 0 obj<</Parent 1409 0 R/Title(3.3.4. DNS Lookup)/Dest[1158 0 R/XYZ 0 414 0]/Prev 1412 0 R/Next 1414 0 R>>endobj
+1414 0 obj<</Parent 1409 0 R/Title(3.3.5. WINS Lookup)/Dest[1158 0 R/XYZ 0 276 0]/Prev 1413 0 R>>endobj
+1415 0 obj<</Parent 1402 0 R/Title(3.4. How browsing functions and how to deploy stable and dependable browsing using Samba)/Dest[1160 0 R/XYZ 0 723 0]/Prev 1409 0 R/Next 1416 0 R>>endobj
+1416 0 obj<</Parent 1402 0 R/Count -3/First 1417 0 R/Last 1419 0 R/Title(3.5. MS Windows security options and how to configure Samba for seemless integration)/Dest[1160 0 R/XYZ 0 179 0]/Prev 1415 0 R/Next 1420 0 R>>endobj
+1417 0 obj<</Parent 1416 0 R/Title(3.5.1. Use MS Windows NT as an authentication server)/Dest[1164 0 R/XYZ 0 786 0]/Next 1418 0 R>>endobj
+1418 0 obj<</Parent 1416 0 R/Title(3.5.2. Make Samba a member of an MS Windows NT security domain)/Dest[1164 0 R/XYZ 0 537 0]/Prev 1417 0 R/Next 1419 0 R>>endobj
+1419 0 obj<</Parent 1416 0 R/Title(3.5.3. Configure Samba as an authentication server)/Dest[1164 0 R/XYZ 0 185 0]/Prev 1418 0 R>>endobj
+1420 0 obj<</Parent 1402 0 R/Title(3.6. Conclusions)/Dest[1166 0 R/XYZ 0 316 0]/Prev 1416 0 R>>endobj
+1421 0 obj<</Parent 1362 0 R/Count -3/First 1422 0 R/Last 1424 0 R/Title(Chapter 4. Configuring PAM for distributed but centrally managed authentication)/Dest[1168 0 R/XYZ 0 786 0]/Prev 1402 0 R/Next 1425 0 R>>endobj
+1422 0 obj<</Parent 1421 0 R/Title(4.1. Samba and PAM)/Dest[1168 0 R/XYZ 0 738 0]/Next 1423 0 R>>endobj
+1423 0 obj<</Parent 1421 0 R/Title(4.2. Distributed Authentication)/Dest[1170 0 R/XYZ 0 201 0]/Prev 1422 0 R/Next 1424 0 R>>endobj
+1424 0 obj<</Parent 1421 0 R/Title(4.3. PAM Configuration in smb.conf)/Dest[1172 0 R/XYZ 0 758 0]/Prev 1423 0 R>>endobj
+1425 0 obj<</Parent 1362 0 R/Count -1/First 1426 0 R/Last 1426 0 R/Title(Chapter 5. Hosting a Microsoft Distributed File System tree on Samba)/Dest[1174 0 R/XYZ 0 786 0]/Prev 1421 0 R/Next 1428 0 R>>endobj
+1426 0 obj<</Parent 1425 0 R/Count -1/First 1427 0 R/Last 1427 0 R/Title(5.1. Instructions)/Dest[1174 0 R/XYZ 0 738 0]>>endobj
+1427 0 obj<</Parent 1426 0 R/Title(5.1.1. Notes)/Dest[1176 0 R/XYZ 0 705 0]>>endobj
+1428 0 obj<</Parent 1362 0 R/Count -7/First 1429 0 R/Last 1437 0 R/Title(Chapter 6. UNIX Permission Bits and Windows NT Access Control Lists)/Dest[1178 0 R/XYZ 0 786 0]/Prev 1425 0 R/Next 1438 0 R>>endobj
+1429 0 obj<</Parent 1428 0 R/Title(6.1. Viewing and changing UNIX permissions using the NT security dialogs)/Dest[1178 0 R/XYZ 0 738 0]/Next 1430 0 R>>endobj
+1430 0 obj<</Parent 1428 0 R/Title(6.2. How to view file security on a Samba share)/Dest[1178 0 R/XYZ 0 550 0]/Prev 1429 0 R/Next 1431 0 R>>endobj
+1431 0 obj<</Parent 1428 0 R/Title(6.3. Viewing file ownership)/Dest[1178 0 R/XYZ 0 383 0]/Prev 1430 0 R/Next 1432 0 R>>endobj
+1432 0 obj<</Parent 1428 0 R/Count -2/First 1433 0 R/Last 1434 0 R/Title(6.4. Viewing file or directory permissions)/Dest[1180 0 R/XYZ 0 718 0]/Prev 1431 0 R/Next 1435 0 R>>endobj
+1433 0 obj<</Parent 1432 0 R/Title(6.4.1. File Permissions)/Dest[1180 0 R/XYZ 0 485 0]/Next 1434 0 R>>endobj
+1434 0 obj<</Parent 1432 0 R/Title(6.4.2. Directory Permissions)/Dest[1180 0 R/XYZ 0 241 0]/Prev 1433 0 R>>endobj
+1435 0 obj<</Parent 1428 0 R/Title(6.5. Modifying file or directory permissions)/Dest[1182 0 R/XYZ 0 745 0]/Prev 1432 0 R/Next 1436 0 R>>endobj
+1436 0 obj<</Parent 1428 0 R/Title(6.6. Interaction with the standard Samba create mask parameters)/Dest[1182 0 R/XYZ 0 313 0]/Prev 1435 0 R/Next 1437 0 R>>endobj
+1437 0 obj<</Parent 1428 0 R/Title(6.7. Interaction with the standard Samba file attribute mapping)/Dest[1186 0 R/XYZ 0 652 0]/Prev 1436 0 R>>endobj
+1438 0 obj<</Parent 1362 0 R/Count -4/First 1439 0 R/Last 1451 0 R/Title(Chapter 7. Printing Support in Samba 2.2.x)/Dest[1188 0 R/XYZ 0 786 0]/Prev 1428 0 R/Next 1452 0 R>>endobj
+1439 0 obj<</Parent 1438 0 R/Title(7.1. Introduction)/Dest[1188 0 R/XYZ 0 762 0]/Next 1440 0 R>>endobj
+1440 0 obj<</Parent 1438 0 R/Count -5/First 1441 0 R/Last 1445 0 R/Title(7.2. Configuration)/Dest[1188 0 R/XYZ 0 331 0]/Prev 1439 0 R/Next 1446 0 R>>endobj
+1441 0 obj<</Parent 1440 0 R/Title(7.2.1. Creating [print$])/Dest[1190 0 R/XYZ 0 755 0]/Next 1442 0 R>>endobj
+1442 0 obj<</Parent 1440 0 R/Title(7.2.2. Setting Drivers for Existing Printers)/Dest[1192 0 R/XYZ 0 524 0]/Prev 1441 0 R/Next 1443 0 R>>endobj
+1443 0 obj<</Parent 1440 0 R/Title(7.2.3. Support a large number of printers)/Dest[1194 0 R/XYZ 0 771 0]/Prev 1442 0 R/Next 1444 0 R>>endobj
+1444 0 obj<</Parent 1440 0 R/Title(7.2.4. Adding New Printers via the Windows NT APW)/Dest[1194 0 R/XYZ 0 401 0]/Prev 1443 0 R/Next 1445 0 R>>endobj
+1445 0 obj<</Parent 1440 0 R/Title(7.2.5. Samba and Printer Ports)/Dest[1196 0 R/XYZ 0 224 0]/Prev 1444 0 R>>endobj
+1446 0 obj<</Parent 1438 0 R/Count -4/First 1447 0 R/Last 1450 0 R/Title(7.3. The Imprints Toolset)/Dest[1198 0 R/XYZ 0 705 0]/Prev 1440 0 R/Next 1451 0 R>>endobj
+1447 0 obj<</Parent 1446 0 R/Title(7.3.1. What is Imprints?)/Dest[1198 0 R/XYZ 0 603 0]/Next 1448 0 R>>endobj
+1448 0 obj<</Parent 1446 0 R/Title(7.3.2. Creating Printer Driver Packages)/Dest[1198 0 R/XYZ 0 479 0]/Prev 1447 0 R/Next 1449 0 R>>endobj
+1449 0 obj<</Parent 1446 0 R/Title(7.3.3. The Imprints server)/Dest[1198 0 R/XYZ 0 394 0]/Prev 1448 0 R/Next 1450 0 R>>endobj
+1450 0 obj<</Parent 1446 0 R/Title(7.3.4. The Installation Client)/Dest[1198 0 R/XYZ 0 296 0]/Prev 1449 0 R>>endobj
+1451 0 obj<</Parent 1438 0 R/Title(7.4. Migration to from Samba 2.0.x to 2.2.x)/Dest[1200 0 R/XYZ 0 412 0]/Prev 1446 0 R>>endobj
+1452 0 obj<</Parent 1362 0 R/Count -9/First 1453 0 R/Last 1461 0 R/Title(Chapter 8. Debugging Printing Problems)/Dest[1204 0 R/XYZ 0 786 0]/Prev 1438 0 R/Next 1462 0 R>>endobj
+1453 0 obj<</Parent 1452 0 R/Title(8.1. Introduction)/Dest[1204 0 R/XYZ 0 762 0]/Next 1454 0 R>>endobj
+1454 0 obj<</Parent 1452 0 R/Title(8.2. Debugging printer problems)/Dest[1206 0 R/XYZ 0 786 0]/Prev 1453 0 R/Next 1455 0 R>>endobj
+1455 0 obj<</Parent 1452 0 R/Title(8.3. What printers do I have?)/Dest[1206 0 R/XYZ 0 331 0]/Prev 1454 0 R/Next 1456 0 R>>endobj
+1456 0 obj<</Parent 1452 0 R/Title(8.4. Setting up printcap and print servers)/Dest[1208 0 R/XYZ 0 786 0]/Prev 1455 0 R/Next 1457 0 R>>endobj
+1457 0 obj<</Parent 1452 0 R/Title(8.5. Job sent, no output)/Dest[1208 0 R/XYZ 0 357 0]/Prev 1456 0 R/Next 1458 0 R>>endobj
+1458 0 obj<</Parent 1452 0 R/Title(8.6. Job sent, strange output)/Dest[1210 0 R/XYZ 0 699 0]/Prev 1457 0 R/Next 1459 0 R>>endobj
+1459 0 obj<</Parent 1452 0 R/Title(8.7. Raw PostScript printed)/Dest[1210 0 R/XYZ 0 351 0]/Prev 1458 0 R/Next 1460 0 R>>endobj
+1460 0 obj<</Parent 1452 0 R/Title(8.8. Advanced Printing)/Dest[1210 0 R/XYZ 0 263 0]/Prev 1459 0 R/Next 1461 0 R>>endobj
+1461 0 obj<</Parent 1452 0 R/Title(8.9. Real debugging)/Dest[1212 0 R/XYZ 0 786 0]/Prev 1460 0 R>>endobj
+1462 0 obj<</Parent 1362 0 R/Count -2/First 1463 0 R/Last 1464 0 R/Title(Chapter 9. Security levels)/Dest[1214 0 R/XYZ 0 786 0]/Prev 1452 0 R/Next 1465 0 R>>endobj
+1463 0 obj<</Parent 1462 0 R/Title(9.1. Introduction)/Dest[1214 0 R/XYZ 0 762 0]/Next 1464 0 R>>endobj
+1464 0 obj<</Parent 1462 0 R/Title(9.2. More complete description of security levels)/Dest[1214 0 R/XYZ 0 520 0]/Prev 1463 0 R>>endobj
+1465 0 obj<</Parent 1362 0 R/Count -3/First 1466 0 R/Last 1468 0 R/Title(Chapter 10. security = domain in Samba 2.x)/Dest[1218 0 R/XYZ 0 786 0]/Prev 1462 0 R/Next 1469 0 R>>endobj
+1466 0 obj<</Parent 1465 0 R/Title(10.1. Joining an NT Domain with Samba 2.2)/Dest[1218 0 R/XYZ 0 762 0]/Next 1467 0 R>>endobj
+1467 0 obj<</Parent 1465 0 R/Title(10.2. Samba and Windows 2000 Domains)/Dest[1220 0 R/XYZ 0 415 0]/Prev 1466 0 R/Next 1468 0 R>>endobj
+1468 0 obj<</Parent 1465 0 R/Title(10.3. Why is this better than security = server?)/Dest[1220 0 R/XYZ 0 207 0]/Prev 1467 0 R>>endobj
+1469 0 obj<</Parent 1362 0 R/Count -7/First 1470 0 R/Last 1485 0 R/Title(Chapter 11. Unified Logons between Windows NT and UNIX using Winbind)/Dest[1224 0 R/XYZ 0 786 0]/Prev 1465 0 R/Next 1486 0 R>>endobj
+1470 0 obj<</Parent 1469 0 R/Title(11.1. Abstract)/Dest[1224 0 R/XYZ 0 738 0]/Next 1471 0 R>>endobj
+1471 0 obj<</Parent 1469 0 R/Title(11.2. Introduction)/Dest[1224 0 R/XYZ 0 597 0]/Prev 1470 0 R/Next 1472 0 R>>endobj
+1472 0 obj<</Parent 1469 0 R/Count -1/First 1473 0 R/Last 1473 0 R/Title(11.3. What Winbind Provides)/Dest[1224 0 R/XYZ 0 284 0]/Prev 1471 0 R/Next 1474 0 R>>endobj
+1473 0 obj<</Parent 1472 0 R/Title(11.3.1. Target Uses)/Dest[1226 0 R/XYZ 0 613 0]>>endobj
+1474 0 obj<</Parent 1469 0 R/Count -5/First 1475 0 R/Last 1479 0 R/Title(11.4. How Winbind Works)/Dest[1226 0 R/XYZ 0 462 0]/Prev 1472 0 R/Next 1480 0 R>>endobj
+1475 0 obj<</Parent 1474 0 R/Title(11.4.1. Microsoft Remote Procedure Calls)/Dest[1226 0 R/XYZ 0 347 0]/Next 1476 0 R>>endobj
+1476 0 obj<</Parent 1474 0 R/Title(11.4.2. Name Service Switch)/Dest[1228 0 R/XYZ 0 786 0]/Prev 1475 0 R/Next 1477 0 R>>endobj
+1477 0 obj<</Parent 1474 0 R/Title(11.4.3. Pluggable Authentication Modules)/Dest[1228 0 R/XYZ 0 345 0]/Prev 1476 0 R/Next 1478 0 R>>endobj
+1478 0 obj<</Parent 1474 0 R/Title(11.4.4. User and Group ID Allocation)/Dest[1230 0 R/XYZ 0 718 0]/Prev 1477 0 R/Next 1479 0 R>>endobj
+1479 0 obj<</Parent 1474 0 R/Title(11.4.5. Result Caching)/Dest[1230 0 R/XYZ 0 541 0]/Prev 1478 0 R>>endobj
+1480 0 obj<</Parent 1469 0 R/Count -3/First 1481 0 R/Last 1483 0 R/Title(11.5. Installation and Configuration)/Dest[1230 0 R/XYZ 0 403 0]/Prev 1474 0 R/Next 1484 0 R>>endobj
+1481 0 obj<</Parent 1480 0 R/Title(11.5.1. Introduction)/Dest[1230 0 R/XYZ 0 262 0]/Next 1482 0 R>>endobj
+1482 0 obj<</Parent 1480 0 R/Title(11.5.2. Requirements)/Dest[1232 0 R/XYZ 0 652 0]/Prev 1481 0 R/Next 1483 0 R>>endobj
+1483 0 obj<</Parent 1480 0 R/Title(11.5.3. Testing Things Out)/Dest[1232 0 R/XYZ 0 383 0]/Prev 1482 0 R>>endobj
+1484 0 obj<</Parent 1469 0 R/Title(11.6. Limitations)/Dest[1246 0 R/XYZ 0 349 0]/Prev 1480 0 R/Next 1485 0 R>>endobj
+1485 0 obj<</Parent 1469 0 R/Title(11.7. Conclusion)/Dest[1248 0 R/XYZ 0 786 0]/Prev 1484 0 R>>endobj
+1486 0 obj<</Parent 1362 0 R/Count -9/First 1487 0 R/Last 1500 0 R/Title(Chapter 12. How to Configure Samba 2.2 as a Primary Domain Controller)/Dest[1250 0 R/XYZ 0 786 0]/Prev 1469 0 R/Next 1501 0 R>>endobj
+1487 0 obj<</Parent 1486 0 R/Title(12.1. Prerequisite Reading)/Dest[1250 0 R/XYZ 0 738 0]/Next 1488 0 R>>endobj
+1488 0 obj<</Parent 1486 0 R/Title(12.2. Background)/Dest[1250 0 R/XYZ 0 637 0]/Prev 1487 0 R/Next 1489 0 R>>endobj
+1489 0 obj<</Parent 1486 0 R/Title(12.3. Configuring the Samba Domain Controller)/Dest[1252 0 R/XYZ 0 771 0]/Prev 1488 0 R/Next 1490 0 R>>endobj
+1490 0 obj<</Parent 1486 0 R/Count -3/First 1491 0 R/Last 1493 0 R/Title(12.4. Creating Machine Trust Accounts and Joining Clients to the Domain)/Dest[1254 0 R/XYZ 0 665 0]/Prev 1489 0 R/Next 1494 0 R>>endobj
+1491 0 obj<</Parent 1490 0 R/Title(12.4.1. Manual Creation of Machine Trust Accounts)/Dest[1254 0 R/XYZ 0 279 0]/Next 1492 0 R>>endobj
+1492 0 obj<</Parent 1490 0 R/Title(12.4.2. "On-the-Fly" Creation of Machine Trust Accounts)/Dest[1256 0 R/XYZ 0 411 0]/Prev 1491 0 R/Next 1493 0 R>>endobj
+1493 0 obj<</Parent 1490 0 R/Title(12.4.3. Joining the Client to the Domain)/Dest[1256 0 R/XYZ 0 202 0]/Prev 1492 0 R>>endobj
+1494 0 obj<</Parent 1486 0 R/Title(12.5. Common Problems and Errors)/Dest[1258 0 R/XYZ 0 520 0]/Prev 1490 0 R/Next 1495 0 R>>endobj
+1495 0 obj<</Parent 1486 0 R/Title(12.6. System Policies and Profiles)/Dest[1260 0 R/XYZ 0 261 0]/Prev 1494 0 R/Next 1496 0 R>>endobj
+1496 0 obj<</Parent 1486 0 R/Title(12.7. What other help can I get?)/Dest[1262 0 R/XYZ 0 256 0]/Prev 1495 0 R/Next 1497 0 R>>endobj
+1497 0 obj<</Parent 1486 0 R/Count -2/First 1498 0 R/Last 1499 0 R/Title(12.8. Domain Control for Windows 9x/ME)/Dest[1268 0 R/XYZ 0 599 0]/Prev 1496 0 R/Next 1500 0 R>>endobj
+1498 0 obj<</Parent 1497 0 R/Title(12.8.1. Configuration Instructions: Network Logons)/Dest[1270 0 R/XYZ 0 613 0]/Next 1499 0 R>>endobj
+1499 0 obj<</Parent 1497 0 R/Title(12.8.2. Configuration Instructions: Setting up Roaming User Profiles)/Dest[1270 0 R/XYZ 0 179 0]/Prev 1498 0 R>>endobj
+1500 0 obj<</Parent 1486 0 R/Title(12.9. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba)/Dest[1278 0 R/XYZ 0 188 0]/Prev 1497 0 R>>endobj
+1501 0 obj<</Parent 1362 0 R/Count -5/First 1502 0 R/Last 1508 0 R/Title(Chapter 13. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain)/Dest[1284 0 R/XYZ 0 786 0]/Prev 1486 0 R/Next 1510 0 R>>endobj
+1502 0 obj<</Parent 1501 0 R/Title(13.1. Prerequisite Reading)/Dest[1284 0 R/XYZ 0 738 0]/Next 1503 0 R>>endobj
+1503 0 obj<</Parent 1501 0 R/Title(13.2. Background)/Dest[1284 0 R/XYZ 0 650 0]/Prev 1502 0 R/Next 1504 0 R>>endobj
+1504 0 obj<</Parent 1501 0 R/Count -2/First 1505 0 R/Last 1506 0 R/Title(13.3. What qualifies a Domain Controller on the network?)/Dest[1284 0 R/XYZ 0 278 0]/Prev 1503 0 R/Next 1507 0 R>>endobj
+1505 0 obj<</Parent 1504 0 R/Title(13.3.1. How does a Workstation find its domain controller?)/Dest[1286 0 R/XYZ 0 786 0]/Next 1506 0 R>>endobj
+1506 0 obj<</Parent 1504 0 R/Title(13.3.2. When is the PDC needed?)/Dest[1286 0 R/XYZ 0 662 0]/Prev 1505 0 R>>endobj
+1507 0 obj<</Parent 1501 0 R/Title(13.4. Can Samba be a Backup Domain Controller?)/Dest[1286 0 R/XYZ 0 577 0]/Prev 1504 0 R/Next 1508 0 R>>endobj
+1508 0 obj<</Parent 1501 0 R/Count -1/First 1509 0 R/Last 1509 0 R/Title(13.5. How do I set up a Samba BDC?)/Dest[1286 0 R/XYZ 0 436 0]/Prev 1507 0 R>>endobj
+1509 0 obj<</Parent 1508 0 R/Title(13.5.1. How do I replicate the smbpasswd file?)/Dest[1288 0 R/XYZ 0 673 0]>>endobj
+1510 0 obj<</Parent 1362 0 R/Count -10/First 1511 0 R/Last 1522 0 R/Title(Chapter 14. Storing Samba's User/Machine Account information in an LDAP Directory)/Dest[1290 0 R/XYZ 0 786 0]/Prev 1501 0 R/Next 1523 0 R>>endobj
+1511 0 obj<</Parent 1510 0 R/Title(14.1. Purpose)/Dest[1290 0 R/XYZ 0 738 0]/Next 1512 0 R>>endobj
+1512 0 obj<</Parent 1510 0 R/Title(14.2. Introduction)/Dest[1290 0 R/XYZ 0 465 0]/Prev 1511 0 R/Next 1513 0 R>>endobj
+1513 0 obj<</Parent 1510 0 R/Title(14.3. Supported LDAP Servers)/Dest[1292 0 R/XYZ 0 626 0]/Prev 1512 0 R/Next 1514 0 R>>endobj
+1514 0 obj<</Parent 1510 0 R/Title(14.4. Schema and Relationship to the RFC 2307 posixAccount)/Dest[1292 0 R/XYZ 0 524 0]/Prev 1513 0 R/Next 1515 0 R>>endobj
+1515 0 obj<</Parent 1510 0 R/Count -2/First 1516 0 R/Last 1517 0 R/Title(14.5. Configuring Samba with LDAP)/Dest[1294 0 R/XYZ 0 786 0]/Prev 1514 0 R/Next 1518 0 R>>endobj
+1516 0 obj<</Parent 1515 0 R/Title(14.5.1. OpenLDAP configuration)/Dest[1294 0 R/XYZ 0 766 0]/Next 1517 0 R>>endobj
+1517 0 obj<</Parent 1515 0 R/Title(14.5.2. Configuring Samba)/Dest[1294 0 R/XYZ 0 196 0]/Prev 1516 0 R>>endobj
+1518 0 obj<</Parent 1510 0 R/Title(14.6. Accounts and Groups management)/Dest[1296 0 R/XYZ 0 296 0]/Prev 1515 0 R/Next 1519 0 R>>endobj
+1519 0 obj<</Parent 1510 0 R/Title(14.7. Security and sambaAccount)/Dest[1298 0 R/XYZ 0 771 0]/Prev 1518 0 R/Next 1520 0 R>>endobj
+1520 0 obj<</Parent 1510 0 R/Title(14.8. LDAP specials attributes for sambaAccounts)/Dest[1298 0 R/XYZ 0 389 0]/Prev 1519 0 R/Next 1521 0 R>>endobj
+1521 0 obj<</Parent 1510 0 R/Title(14.9. Example LDIF Entries for a sambaAccount)/Dest[1300 0 R/XYZ 0 375 0]/Prev 1520 0 R/Next 1522 0 R>>endobj
+1522 0 obj<</Parent 1510 0 R/Title(14.10. Comments)/Dest[1302 0 R/XYZ 0 544 0]/Prev 1521 0 R>>endobj
+1523 0 obj<</Parent 1362 0 R/Count -8/First 1524 0 R/Last 1532 0 R/Title(Chapter 15. Using samba 3.0 with ActiveDirectory support)/Dest[1304 0 R/XYZ 0 786 0]/Prev 1510 0 R/Next 1533 0 R>>endobj
+1524 0 obj<</Parent 1523 0 R/Title(15.1. Installing the required packages for Debian)/Dest[1304 0 R/XYZ 0 553 0]/Next 1525 0 R>>endobj
+1525 0 obj<</Parent 1523 0 R/Title(15.2. Installing the required packages for RedHat)/Dest[1304 0 R/XYZ 0 446 0]/Prev 1524 0 R/Next 1526 0 R>>endobj
+1526 0 obj<</Parent 1523 0 R/Title(15.3. Compile Samba)/Dest[1304 0 R/XYZ 0 270 0]/Prev 1525 0 R/Next 1527 0 R>>endobj
+1527 0 obj<</Parent 1523 0 R/Title(15.4. Setup your /etc/krb5.conf)/Dest[1306 0 R/XYZ 0 583 0]/Prev 1526 0 R/Next 1528 0 R>>endobj
+1528 0 obj<</Parent 1523 0 R/Count -1/First 1529 0 R/Last 1529 0 R/Title(15.5. Create the computer account)/Dest[1306 0 R/XYZ 0 266 0]/Prev 1527 0 R/Next 1530 0 R>>endobj
+1529 0 obj<</Parent 1528 0 R/Title(15.5.1. Possible errors)/Dest[1306 0 R/XYZ 0 178 0]>>endobj
+1530 0 obj<</Parent 1523 0 R/Title(15.6. Test your server setup)/Dest[1308 0 R/XYZ 0 718 0]/Prev 1528 0 R/Next 1531 0 R>>endobj
+1531 0 obj<</Parent 1523 0 R/Title(15.7. Testing with smbclient)/Dest[1308 0 R/XYZ 0 630 0]/Prev 1530 0 R/Next 1532 0 R>>endobj
+1532 0 obj<</Parent 1523 0 R/Title(15.8. Notes)/Dest[1308 0 R/XYZ 0 555 0]/Prev 1531 0 R>>endobj
+1533 0 obj<</Parent 1362 0 R/Count -11/First 1534 0 R/Last 1545 0 R/Title(Chapter 16. Improved browsing in samba)/Dest[1310 0 R/XYZ 0 786 0]/Prev 1523 0 R/Next 1546 0 R>>endobj
+1534 0 obj<</Parent 1533 0 R/Title(16.1. Overview of browsing)/Dest[1310 0 R/XYZ 0 762 0]/Next 1535 0 R>>endobj
+1535 0 obj<</Parent 1533 0 R/Title(16.2. Browsing support in samba)/Dest[1310 0 R/XYZ 0 568 0]/Prev 1534 0 R/Next 1536 0 R>>endobj
+1536 0 obj<</Parent 1533 0 R/Title(16.3. Problem resolution)/Dest[1310 0 R/XYZ 0 189 0]/Prev 1535 0 R/Next 1537 0 R>>endobj
+1537 0 obj<</Parent 1533 0 R/Count -1/First 1538 0 R/Last 1538 0 R/Title(16.4. Browsing across subnets)/Dest[1312 0 R/XYZ 0 586 0]/Prev 1536 0 R/Next 1539 0 R>>endobj
+1538 0 obj<</Parent 1537 0 R/Title(16.4.1. How does cross subnet browsing work ?)/Dest[1312 0 R/XYZ 0 326 0]>>endobj
+1539 0 obj<</Parent 1533 0 R/Title(16.5. Setting up a WINS server)/Dest[1318 0 R/XYZ 0 613 0]/Prev 1537 0 R/Next 1540 0 R>>endobj
+1540 0 obj<</Parent 1533 0 R/Title(16.6. Setting up Browsing in a WORKGROUP)/Dest[1320 0 R/XYZ 0 665 0]/Prev 1539 0 R/Next 1541 0 R>>endobj
+1541 0 obj<</Parent 1533 0 R/Title(16.7. Setting up Browsing in a DOMAIN)/Dest[1322 0 R/XYZ 0 675 0]/Prev 1540 0 R/Next 1542 0 R>>endobj
+1542 0 obj<</Parent 1533 0 R/Title(16.8. Forcing samba to be the master)/Dest[1322 0 R/XYZ 0 319 0]/Prev 1541 0 R/Next 1543 0 R>>endobj
+1543 0 obj<</Parent 1533 0 R/Title(16.9. Making samba the domain master)/Dest[1324 0 R/XYZ 0 573 0]/Prev 1542 0 R/Next 1544 0 R>>endobj
+1544 0 obj<</Parent 1533 0 R/Title(16.10. Note about broadcast addresses)/Dest[1326 0 R/XYZ 0 786 0]/Prev 1543 0 R/Next 1545 0 R>>endobj
+1545 0 obj<</Parent 1533 0 R/Title(16.11. Multiple interfaces)/Dest[1326 0 R/XYZ 0 698 0]/Prev 1544 0 R>>endobj
+1546 0 obj<</Parent 1362 0 R/Count -17/First 1547 0 R/Last 1566 0 R/Title(Chapter 17. Samba performance issues)/Dest[1328 0 R/XYZ 0 786 0]/Prev 1533 0 R/Next 1567 0 R>>endobj
+1547 0 obj<</Parent 1546 0 R/Title(17.1. Comparisons)/Dest[1328 0 R/XYZ 0 762 0]/Next 1548 0 R>>endobj
+1548 0 obj<</Parent 1546 0 R/Count -3/First 1549 0 R/Last 1551 0 R/Title(17.2. Oplocks)/Dest[1328 0 R/XYZ 0 502 0]/Prev 1547 0 R/Next 1552 0 R>>endobj
+1549 0 obj<</Parent 1548 0 R/Title(17.2.1. Overview)/Dest[1328 0 R/XYZ 0 482 0]/Next 1550 0 R>>endobj
+1550 0 obj<</Parent 1548 0 R/Title(17.2.2. Level2 Oplocks)/Dest[1328 0 R/XYZ 0 199 0]/Prev 1549 0 R/Next 1551 0 R>>endobj
+1551 0 obj<</Parent 1548 0 R/Title(17.2.3. Old 'fake oplocks' option - deprecated)/Dest[1330 0 R/XYZ 0 705 0]/Prev 1550 0 R>>endobj
+1552 0 obj<</Parent 1546 0 R/Title(17.3. Socket options)/Dest[1330 0 R/XYZ 0 567 0]/Prev 1548 0 R/Next 1553 0 R>>endobj
+1553 0 obj<</Parent 1546 0 R/Title(17.4. Read size)/Dest[1330 0 R/XYZ 0 307 0]/Prev 1552 0 R/Next 1554 0 R>>endobj
+1554 0 obj<</Parent 1546 0 R/Title(17.5. Max xmit)/Dest[1332 0 R/XYZ 0 771 0]/Prev 1553 0 R/Next 1555 0 R>>endobj
+1555 0 obj<</Parent 1546 0 R/Title(17.6. Locking)/Dest[1332 0 R/XYZ 0 590 0]/Prev 1554 0 R/Next 1556 0 R>>endobj
+1556 0 obj<</Parent 1546 0 R/Title(17.7. Share modes)/Dest[1332 0 R/XYZ 0 462 0]/Prev 1555 0 R/Next 1557 0 R>>endobj
+1557 0 obj<</Parent 1546 0 R/Title(17.8. Log level)/Dest[1332 0 R/XYZ 0 242 0]/Prev 1556 0 R/Next 1558 0 R>>endobj
+1558 0 obj<</Parent 1546 0 R/Title(17.9. Wide lines)/Dest[1334 0 R/XYZ 0 786 0]/Prev 1557 0 R/Next 1559 0 R>>endobj
+1559 0 obj<</Parent 1546 0 R/Title(17.10. Read raw)/Dest[1334 0 R/XYZ 0 698 0]/Prev 1558 0 R/Next 1560 0 R>>endobj
+1560 0 obj<</Parent 1546 0 R/Title(17.11. Write raw)/Dest[1334 0 R/XYZ 0 530 0]/Prev 1559 0 R/Next 1561 0 R>>endobj
+1561 0 obj<</Parent 1546 0 R/Title(17.12. Read prediction)/Dest[1334 0 R/XYZ 0 402 0]/Prev 1560 0 R/Next 1562 0 R>>endobj
+1562 0 obj<</Parent 1546 0 R/Title(17.13. Memory mapping)/Dest[1334 0 R/XYZ 0 182 0]/Prev 1561 0 R/Next 1563 0 R>>endobj
+1563 0 obj<</Parent 1546 0 R/Title(17.14. Slow Clients)/Dest[1336 0 R/XYZ 0 692 0]/Prev 1562 0 R/Next 1564 0 R>>endobj
+1564 0 obj<</Parent 1546 0 R/Title(17.15. Slow Logins)/Dest[1336 0 R/XYZ 0 564 0]/Prev 1563 0 R/Next 1565 0 R>>endobj
+1565 0 obj<</Parent 1546 0 R/Title(17.16. Client tuning)/Dest[1336 0 R/XYZ 0 489 0]/Prev 1564 0 R/Next 1566 0 R>>endobj
+1566 0 obj<</Parent 1546 0 R/Title(17.17. My Results)/Dest[1338 0 R/XYZ 0 441 0]/Prev 1565 0 R>>endobj
+1567 0 obj<</Parent 1362 0 R/Count -5/First 1568 0 R/Last 1580 0 R/Title(Chapter 18. Samba and other CIFS clients)/Dest[1340 0 R/XYZ 0 786 0]/Prev 1546 0 R/Next 1581 0 R>>endobj
+1568 0 obj<</Parent 1567 0 R/Title(18.1. Macintosh clients?)/Dest[1340 0 R/XYZ 0 721 0]/Next 1569 0 R>>endobj
+1569 0 obj<</Parent 1567 0 R/Count -4/First 1570 0 R/Last 1573 0 R/Title(18.2. OS2 Client)/Dest[1340 0 R/XYZ 0 513 0]/Prev 1568 0 R/Next 1574 0 R>>endobj
+1570 0 obj<</Parent 1569 0 R/Title(18.2.1. How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?)/Dest[1340 0 R/XYZ 0 493 0]/Next 1571 0 R>>endobj
+1571 0 obj<</Parent 1569 0 R/Title(18.2.2. How can I configure OS/2 Warp 3 \(not Connect\), OS/2 1.2, 1.3 or 2.x for Samba?)/Dest[1342 0 R/XYZ 0 786 0]/Prev 1570 0 R/Next 1572 0 R>>endobj
+1572 0 obj<</Parent 1569 0 R/Title(18.2.3. Are there any other issues when OS/2 \(any version\) is used as a client?)/Dest[1342 0 R/XYZ 0 575 0]/Prev 1571 0 R/Next 1573 0 R>>endobj
+1573 0 obj<</Parent 1569 0 R/Title(18.2.4. How do I get printer driver download working for OS/2 clients?)/Dest[1342 0 R/XYZ 0 461 0]/Prev 1572 0 R>>endobj
+1574 0 obj<</Parent 1567 0 R/Count -4/First 1575 0 R/Last 1578 0 R/Title(18.3. Windows for Workgroups)/Dest[1342 0 R/XYZ 0 204 0]/Prev 1569 0 R/Next 1579 0 R>>endobj
+1575 0 obj<</Parent 1574 0 R/Title(18.3.1. Use latest TCP/IP stack from Microsoft)/Dest[1342 0 R/XYZ 0 184 0]/Next 1576 0 R>>endobj
+1576 0 obj<</Parent 1574 0 R/Title(18.3.2. Delete .pwl files after password change)/Dest[1344 0 R/XYZ 0 679 0]/Prev 1575 0 R/Next 1577 0 R>>endobj
+1577 0 obj<</Parent 1574 0 R/Title(18.3.3. Configure WfW password handling)/Dest[1344 0 R/XYZ 0 528 0]/Prev 1576 0 R/Next 1578 0 R>>endobj
+1578 0 obj<</Parent 1574 0 R/Title(18.3.4. Case handling of passwords)/Dest[1344 0 R/XYZ 0 430 0]/Prev 1577 0 R>>endobj
+1579 0 obj<</Parent 1567 0 R/Title(18.4. Windows '95/'98)/Dest[1344 0 R/XYZ 0 345 0]/Prev 1574 0 R/Next 1580 0 R>>endobj
+1580 0 obj<</Parent 1567 0 R/Title(18.5. Windows 2000 Service Pack 2)/Dest[1346 0 R/XYZ 0 771 0]/Prev 1579 0 R>>endobj
+1581 0 obj<</Parent 1362 0 R/Count -2/First 1582 0 R/Last 1583 0 R/Title(Chapter 19. HOWTO Access Samba source code via CVS)/Dest[1348 0 R/XYZ 0 786 0]/Prev 1567 0 R/Next 1586 0 R>>endobj
+1582 0 obj<</Parent 1581 0 R/Title(19.1. Introduction)/Dest[1348 0 R/XYZ 0 738 0]/Next 1583 0 R>>endobj
+1583 0 obj<</Parent 1581 0 R/Count -2/First 1584 0 R/Last 1585 0 R/Title(19.2. CVS Access to samba.org)/Dest[1348 0 R/XYZ 0 610 0]/Prev 1582 0 R>>endobj
+1584 0 obj<</Parent 1583 0 R/Title(19.2.1. Access via CVSweb)/Dest[1348 0 R/XYZ 0 522 0]/Next 1585 0 R>>endobj
+1585 0 obj<</Parent 1583 0 R/Title(19.2.2. Access via cvs)/Dest[1348 0 R/XYZ 0 411 0]/Prev 1584 0 R>>endobj
+1586 0 obj<</Parent 1362 0 R/Count -6/First 1587 0 R/Last 1592 0 R/Title(Chapter 20. Reporting Bugs)/Dest[1352 0 R/XYZ 0 786 0]/Prev 1581 0 R/Next 1593 0 R>>endobj
+1587 0 obj<</Parent 1586 0 R/Title(20.1. Introduction)/Dest[1352 0 R/XYZ 0 762 0]/Next 1588 0 R>>endobj
+1588 0 obj<</Parent 1586 0 R/Title(20.2. General info)/Dest[1352 0 R/XYZ 0 489 0]/Prev 1587 0 R/Next 1589 0 R>>endobj
+1589 0 obj<</Parent 1586 0 R/Title(20.3. Debug levels)/Dest[1352 0 R/XYZ 0 348 0]/Prev 1588 0 R/Next 1590 0 R>>endobj
+1590 0 obj<</Parent 1586 0 R/Title(20.4. Internal errors)/Dest[1354 0 R/XYZ 0 692 0]/Prev 1589 0 R/Next 1591 0 R>>endobj
+1591 0 obj<</Parent 1586 0 R/Title(20.5. Attaching to a running process)/Dest[1354 0 R/XYZ 0 339 0]/Prev 1590 0 R/Next 1592 0 R>>endobj
+1592 0 obj<</Parent 1586 0 R/Title(20.6. Patches)/Dest[1354 0 R/XYZ 0 238 0]/Prev 1591 0 R>>endobj
+1593 0 obj<</Parent 1362 0 R/Title(Chapter 21. Group mapping HOWTO)/Dest[1356 0 R/XYZ 0 786 0]/Prev 1586 0 R/Next 1594 0 R>>endobj
+1594 0 obj<</Parent 1362 0 R/Count -3/First 1595 0 R/Last 1597 0 R/Title(Chapter 22. Portability)/Dest[1358 0 R/XYZ 0 786 0]/Prev 1593 0 R>>endobj
+1595 0 obj<</Parent 1594 0 R/Title(22.1. HPUX)/Dest[1358 0 R/XYZ 0 707 0]/Next 1596 0 R>>endobj
+1596 0 obj<</Parent 1594 0 R/Title(22.2. SCO Unix)/Dest[1358 0 R/XYZ 0 500 0]/Prev 1595 0 R/Next 1597 0 R>>endobj
+1597 0 obj<</Parent 1594 0 R/Title(22.3. DNIX)/Dest[1358 0 R/XYZ 0 385 0]/Prev 1596 0 R>>endobj
+1598 0 obj<</Type/Catalog/Pages 1099 0 R/PageLayout/SinglePage/Outlines 1362 0 R/OpenAction[1114 0 R/XYZ null null 0]/PageMode/UseOutlines/PageLabels<</Nums[0<</P(title)>>1<</S/r>>7<</S/D/St 1/P()>>8<</S/D/St 2/P()>>13<</S/D/St 7/P()>>19<</S/D/St 13/P()>>24<</S/D/St 18/P()>>34<</S/D/St 28/P()>>37<</S/D/St 31/P()>>39<</S/D/St 33/P()>>44<</S/D/St 38/P()>>52<</S/D/St 46/P()>>57<</S/D/St 51/P()>>59<</S/D/St 53/P()>>62<</S/D/St 56/P()>>75<</S/D/St 69/P()>>92<</S/D/St 86/P()>>95<</S/D/St 89/P()>>102<</S/D/St 96/P()>>105<</S/D/St 99/P()>>114<</S/D/St 108/P()>>120<</S/D/St 114/P()>>124<</S/D/St 118/P()>>126<</S/D/St 120/P()>>128<</S/D/St 122/P()>>129<</S/D/St 123/P()>>]>>>>endobj
xref
-0 1939
+0 1599
0000000000 65535 f
0000000015 00000 n
0000000248 00000 n
0000002876 00000 n
0000002978 00000 n
0000003080 00000 n
-0000003182 00000 n
-0000003284 00000 n
-0000003387 00000 n
-0000003490 00000 n
-0000003593 00000 n
-0000003696 00000 n
-0000003799 00000 n
-0000003902 00000 n
-0000004005 00000 n
-0000004108 00000 n
-0000004211 00000 n
-0000004314 00000 n
-0000004417 00000 n
-0000004520 00000 n
-0000004623 00000 n
-0000004726 00000 n
-0000004829 00000 n
-0000004932 00000 n
-0000005035 00000 n
-0000005138 00000 n
-0000005240 00000 n
-0000005343 00000 n
-0000005446 00000 n
-0000005549 00000 n
-0000005652 00000 n
-0000005755 00000 n
-0000005858 00000 n
-0000005961 00000 n
-0000006064 00000 n
-0000006167 00000 n
-0000006270 00000 n
-0000006373 00000 n
-0000006476 00000 n
-0000006578 00000 n
-0000006681 00000 n
-0000006970 00000 n
-0000007072 00000 n
-0000007175 00000 n
-0000007278 00000 n
-0000007381 00000 n
-0000007484 00000 n
-0000007587 00000 n
-0000007690 00000 n
-0000007792 00000 n
-0000007895 00000 n
-0000007998 00000 n
-0000008101 00000 n
-0000008204 00000 n
-0000008307 00000 n
-0000008409 00000 n
-0000008511 00000 n
-0000008613 00000 n
-0000008716 00000 n
-0000008819 00000 n
-0000008922 00000 n
-0000009025 00000 n
-0000009128 00000 n
-0000009231 00000 n
-0000009334 00000 n
-0000009437 00000 n
-0000009540 00000 n
-0000009643 00000 n
-0000009746 00000 n
-0000009849 00000 n
-0000009952 00000 n
-0000010055 00000 n
-0000010157 00000 n
-0000010260 00000 n
-0000010363 00000 n
-0000010466 00000 n
-0000010569 00000 n
-0000010672 00000 n
-0000010775 00000 n
-0000010878 00000 n
-0000010981 00000 n
-0000011082 00000 n
-0000011183 00000 n
-0000011284 00000 n
-0000011594 00000 n
-0000011696 00000 n
-0000011799 00000 n
-0000011902 00000 n
-0000012006 00000 n
-0000012110 00000 n
-0000012214 00000 n
-0000012318 00000 n
-0000012422 00000 n
-0000012525 00000 n
-0000012629 00000 n
-0000012733 00000 n
-0000012837 00000 n
-0000012940 00000 n
-0000013043 00000 n
-0000013146 00000 n
-0000013250 00000 n
-0000013354 00000 n
-0000013458 00000 n
-0000013562 00000 n
-0000013666 00000 n
-0000013770 00000 n
-0000013874 00000 n
-0000013978 00000 n
-0000014082 00000 n
-0000014186 00000 n
-0000014290 00000 n
-0000014394 00000 n
-0000014498 00000 n
-0000014602 00000 n
-0000014706 00000 n
-0000014810 00000 n
-0000014914 00000 n
-0000015018 00000 n
-0000015121 00000 n
-0000015225 00000 n
-0000015329 00000 n
-0000015433 00000 n
-0000015537 00000 n
-0000015641 00000 n
-0000015745 00000 n
-0000015848 00000 n
-0000015950 00000 n
-0000016052 00000 n
-0000016410 00000 n
-0000016513 00000 n
-0000016617 00000 n
-0000016721 00000 n
-0000016825 00000 n
-0000016928 00000 n
-0000017032 00000 n
-0000017136 00000 n
-0000017239 00000 n
-0000017343 00000 n
-0000017447 00000 n
-0000017551 00000 n
-0000017655 00000 n
-0000017759 00000 n
-0000017863 00000 n
-0000017967 00000 n
-0000018071 00000 n
-0000018175 00000 n
-0000018279 00000 n
-0000018383 00000 n
-0000018487 00000 n
-0000018591 00000 n
-0000018695 00000 n
-0000018799 00000 n
-0000018903 00000 n
-0000019007 00000 n
-0000019111 00000 n
-0000019215 00000 n
-0000019319 00000 n
-0000019423 00000 n
-0000019527 00000 n
-0000019630 00000 n
-0000019734 00000 n
-0000019838 00000 n
-0000019941 00000 n
-0000020045 00000 n
-0000020149 00000 n
-0000020253 00000 n
-0000020357 00000 n
-0000020461 00000 n
-0000020565 00000 n
-0000020669 00000 n
-0000020772 00000 n
-0000020874 00000 n
-0000020976 00000 n
-0000021345 00000 n
-0000021448 00000 n
-0000021552 00000 n
+0000003183 00000 n
+0000003286 00000 n
+0000003389 00000 n
+0000003492 00000 n
+0000003595 00000 n
+0000003698 00000 n
+0000003801 00000 n
+0000003904 00000 n
+0000004007 00000 n
+0000004110 00000 n
+0000004213 00000 n
+0000004316 00000 n
+0000004419 00000 n
+0000004522 00000 n
+0000004625 00000 n
+0000004728 00000 n
+0000004831 00000 n
+0000004934 00000 n
+0000005036 00000 n
+0000005139 00000 n
+0000005242 00000 n
+0000005345 00000 n
+0000005448 00000 n
+0000005551 00000 n
+0000005654 00000 n
+0000005757 00000 n
+0000005860 00000 n
+0000005963 00000 n
+0000006066 00000 n
+0000006169 00000 n
+0000006272 00000 n
+0000006375 00000 n
+0000006478 00000 n
+0000006581 00000 n
+0000006683 00000 n
+0000006786 00000 n
+0000006889 00000 n
+0000006991 00000 n
+0000007092 00000 n
+0000007193 00000 n
+0000007517 00000 n
+0000007619 00000 n
+0000007722 00000 n
+0000007825 00000 n
+0000007928 00000 n
+0000008031 00000 n
+0000008134 00000 n
+0000008237 00000 n
+0000008340 00000 n
+0000008443 00000 n
+0000008546 00000 n
+0000008649 00000 n
+0000008752 00000 n
+0000008855 00000 n
+0000008958 00000 n
+0000009060 00000 n
+0000009163 00000 n
+0000009266 00000 n
+0000009369 00000 n
+0000009471 00000 n
+0000009574 00000 n
+0000009677 00000 n
+0000009779 00000 n
+0000009882 00000 n
+0000009985 00000 n
+0000010088 00000 n
+0000010191 00000 n
+0000010294 00000 n
+0000010397 00000 n
+0000010500 00000 n
+0000010603 00000 n
+0000010706 00000 n
+0000010808 00000 n
+0000010911 00000 n
+0000011014 00000 n
+0000011117 00000 n
+0000011220 00000 n
+0000011323 00000 n
+0000011426 00000 n
+0000011529 00000 n
+0000011632 00000 n
+0000011735 00000 n
+0000011838 00000 n
+0000011940 00000 n
+0000012042 00000 n
+0000012370 00000 n
+0000012473 00000 n
+0000012577 00000 n
+0000012680 00000 n
+0000012784 00000 n
+0000012888 00000 n
+0000012992 00000 n
+0000013096 00000 n
+0000013200 00000 n
+0000013304 00000 n
+0000013408 00000 n
+0000013512 00000 n
+0000013616 00000 n
+0000013719 00000 n
+0000013823 00000 n
+0000013927 00000 n
+0000014030 00000 n
+0000014134 00000 n
+0000014238 00000 n
+0000014342 00000 n
+0000014445 00000 n
+0000014549 00000 n
+0000014653 00000 n
+0000014757 00000 n
+0000014861 00000 n
+0000014965 00000 n
+0000015069 00000 n
+0000015173 00000 n
+0000015277 00000 n
+0000015381 00000 n
+0000015485 00000 n
+0000015589 00000 n
+0000015693 00000 n
+0000015797 00000 n
+0000015901 00000 n
+0000016005 00000 n
+0000016109 00000 n
+0000016212 00000 n
+0000016316 00000 n
+0000016420 00000 n
+0000016524 00000 n
+0000016627 00000 n
+0000016729 00000 n
+0000016831 00000 n
+0000017192 00000 n
+0000017295 00000 n
+0000017399 00000 n
+0000017503 00000 n
+0000017607 00000 n
+0000017711 00000 n
+0000017815 00000 n
+0000017919 00000 n
+0000018023 00000 n
+0000018127 00000 n
+0000018230 00000 n
+0000018334 00000 n
+0000018438 00000 n
+0000018542 00000 n
+0000018646 00000 n
+0000018750 00000 n
+0000018854 00000 n
+0000018958 00000 n
+0000019062 00000 n
+0000019165 00000 n
+0000019269 00000 n
+0000019373 00000 n
+0000019477 00000 n
+0000019581 00000 n
+0000019685 00000 n
+0000019789 00000 n
+0000019893 00000 n
+0000019997 00000 n
+0000020101 00000 n
+0000020205 00000 n
+0000020309 00000 n
+0000020413 00000 n
+0000020516 00000 n
+0000020620 00000 n
+0000020724 00000 n
+0000020828 00000 n
+0000020932 00000 n
+0000021036 00000 n
+0000021140 00000 n
+0000021244 00000 n
+0000021348 00000 n
+0000021452 00000 n
+0000021554 00000 n
0000021656 00000 n
-0000021760 00000 n
-0000021864 00000 n
-0000021968 00000 n
-0000022072 00000 n
-0000022175 00000 n
-0000022279 00000 n
-0000022383 00000 n
-0000022487 00000 n
-0000022591 00000 n
-0000022694 00000 n
-0000022798 00000 n
-0000022902 00000 n
-0000023005 00000 n
-0000023109 00000 n
-0000023213 00000 n
-0000023317 00000 n
-0000023421 00000 n
-0000023525 00000 n
-0000023629 00000 n
-0000023733 00000 n
-0000023837 00000 n
-0000023941 00000 n
-0000024045 00000 n
-0000024149 00000 n
-0000024253 00000 n
-0000024356 00000 n
-0000024460 00000 n
-0000024564 00000 n
-0000024668 00000 n
-0000024772 00000 n
-0000024875 00000 n
-0000024978 00000 n
-0000025082 00000 n
-0000025186 00000 n
-0000025290 00000 n
-0000025394 00000 n
-0000025497 00000 n
-0000025599 00000 n
-0000025701 00000 n
-0000026054 00000 n
-0000026157 00000 n
-0000026261 00000 n
-0000026365 00000 n
-0000026469 00000 n
-0000026573 00000 n
-0000026677 00000 n
-0000026781 00000 n
-0000026885 00000 n
-0000026989 00000 n
-0000027093 00000 n
-0000027197 00000 n
-0000027301 00000 n
-0000027405 00000 n
-0000027509 00000 n
-0000027612 00000 n
-0000027715 00000 n
-0000027819 00000 n
-0000027923 00000 n
-0000028027 00000 n
-0000028131 00000 n
-0000028234 00000 n
-0000028338 00000 n
-0000028442 00000 n
-0000028546 00000 n
-0000028650 00000 n
-0000028754 00000 n
-0000028858 00000 n
-0000028962 00000 n
-0000029066 00000 n
-0000029170 00000 n
-0000029274 00000 n
-0000029378 00000 n
-0000029482 00000 n
-0000029586 00000 n
-0000029689 00000 n
-0000029793 00000 n
-0000029897 00000 n
-0000030001 00000 n
-0000030105 00000 n
-0000030209 00000 n
-0000030313 00000 n
-0000030658 00000 n
-0000030761 00000 n
-0000030865 00000 n
-0000030969 00000 n
-0000031073 00000 n
-0000031177 00000 n
-0000031281 00000 n
-0000031385 00000 n
-0000031489 00000 n
-0000031593 00000 n
-0000031697 00000 n
-0000031801 00000 n
-0000031905 00000 n
-0000032009 00000 n
-0000032113 00000 n
-0000032217 00000 n
-0000032321 00000 n
-0000032466 00000 n
-0000032519 00000 n
-0000032606 00000 n
-0000032660 00000 n
-0000032746 00000 n
-0000032813 00000 n
-0000032899 00000 n
-0000033002 00000 n
-0000033106 00000 n
-0000033210 00000 n
-0000033314 00000 n
-0000033418 00000 n
-0000033522 00000 n
-0000033626 00000 n
-0000033730 00000 n
-0000033834 00000 n
-0000033938 00000 n
-0000034042 00000 n
-0000034146 00000 n
-0000034250 00000 n
-0000034354 00000 n
-0000034458 00000 n
-0000034562 00000 n
-0000034666 00000 n
-0000034770 00000 n
-0000034874 00000 n
-0000034978 00000 n
-0000035082 00000 n
-0000035186 00000 n
-0000035290 00000 n
-0000035394 00000 n
-0000035498 00000 n
-0000035602 00000 n
-0000035706 00000 n
-0000035810 00000 n
-0000035914 00000 n
-0000036018 00000 n
-0000036122 00000 n
-0000036225 00000 n
-0000036327 00000 n
-0000036429 00000 n
-0000036742 00000 n
-0000036846 00000 n
-0000036950 00000 n
-0000037054 00000 n
-0000037157 00000 n
-0000037261 00000 n
-0000037365 00000 n
-0000037469 00000 n
-0000037573 00000 n
-0000037677 00000 n
-0000037781 00000 n
-0000037885 00000 n
-0000037989 00000 n
-0000038093 00000 n
-0000038197 00000 n
-0000038301 00000 n
-0000038405 00000 n
-0000038509 00000 n
-0000038613 00000 n
-0000038717 00000 n
-0000038821 00000 n
-0000038925 00000 n
-0000039029 00000 n
-0000039133 00000 n
-0000039237 00000 n
-0000039341 00000 n
-0000039445 00000 n
-0000039549 00000 n
-0000039653 00000 n
-0000039757 00000 n
-0000039861 00000 n
-0000039965 00000 n
-0000040069 00000 n
-0000040173 00000 n
-0000040276 00000 n
-0000040380 00000 n
-0000040484 00000 n
-0000040588 00000 n
-0000040692 00000 n
-0000040796 00000 n
-0000040900 00000 n
-0000041004 00000 n
-0000041108 00000 n
-0000041212 00000 n
-0000041316 00000 n
-0000041420 00000 n
-0000041524 00000 n
-0000041628 00000 n
-0000041732 00000 n
-0000041835 00000 n
-0000041937 00000 n
-0000042039 00000 n
-0000042464 00000 n
-0000042568 00000 n
-0000042672 00000 n
-0000042776 00000 n
-0000042880 00000 n
-0000042984 00000 n
-0000043088 00000 n
-0000043192 00000 n
-0000043296 00000 n
-0000043400 00000 n
-0000043504 00000 n
-0000043608 00000 n
-0000043712 00000 n
-0000043816 00000 n
-0000043920 00000 n
-0000044024 00000 n
-0000044128 00000 n
-0000044232 00000 n
-0000044336 00000 n
-0000044440 00000 n
-0000044544 00000 n
-0000044648 00000 n
-0000044752 00000 n
-0000044856 00000 n
-0000044960 00000 n
-0000045064 00000 n
-0000045168 00000 n
-0000045272 00000 n
-0000045376 00000 n
-0000045480 00000 n
-0000045584 00000 n
-0000045688 00000 n
-0000045792 00000 n
-0000045896 00000 n
-0000046000 00000 n
-0000046104 00000 n
-0000046208 00000 n
-0000046312 00000 n
-0000046416 00000 n
-0000046520 00000 n
-0000046624 00000 n
-0000046728 00000 n
-0000046832 00000 n
-0000046936 00000 n
-0000047040 00000 n
-0000047144 00000 n
-0000047248 00000 n
-0000047352 00000 n
-0000047456 00000 n
-0000047559 00000 n
-0000047661 00000 n
-0000047763 00000 n
-0000048188 00000 n
-0000048292 00000 n
-0000048396 00000 n
-0000048500 00000 n
-0000048604 00000 n
-0000048708 00000 n
-0000048812 00000 n
-0000048916 00000 n
-0000049020 00000 n
-0000049124 00000 n
-0000049228 00000 n
-0000049332 00000 n
-0000049435 00000 n
-0000049539 00000 n
-0000049643 00000 n
-0000049747 00000 n
-0000049851 00000 n
-0000049955 00000 n
-0000050059 00000 n
-0000050163 00000 n
-0000050267 00000 n
-0000050371 00000 n
-0000050475 00000 n
-0000050579 00000 n
-0000050683 00000 n
-0000050787 00000 n
-0000050891 00000 n
-0000050995 00000 n
-0000051099 00000 n
-0000051203 00000 n
-0000051307 00000 n
-0000051411 00000 n
-0000051515 00000 n
-0000051619 00000 n
-0000051723 00000 n
-0000051827 00000 n
-0000052124 00000 n
-0000052227 00000 n
-0000052331 00000 n
-0000052435 00000 n
-0000052539 00000 n
-0000052643 00000 n
-0000052747 00000 n
-0000052851 00000 n
-0000052955 00000 n
-0000053059 00000 n
-0000053163 00000 n
-0000053267 00000 n
-0000053371 00000 n
-0000053475 00000 n
-0000053579 00000 n
-0000053683 00000 n
-0000053787 00000 n
-0000053891 00000 n
-0000053995 00000 n
-0000054099 00000 n
-0000054202 00000 n
-0000054306 00000 n
-0000054410 00000 n
-0000054514 00000 n
-0000054618 00000 n
-0000054722 00000 n
-0000054826 00000 n
-0000054930 00000 n
-0000055034 00000 n
-0000055138 00000 n
-0000055242 00000 n
-0000055346 00000 n
-0000055450 00000 n
-0000055553 00000 n
-0000055657 00000 n
-0000055760 00000 n
-0000055864 00000 n
-0000055968 00000 n
-0000056072 00000 n
-0000056176 00000 n
+0000021758 00000 n
+0000022127 00000 n
+0000022230 00000 n
+0000022334 00000 n
+0000022438 00000 n
+0000022542 00000 n
+0000022646 00000 n
+0000022750 00000 n
+0000022854 00000 n
+0000022958 00000 n
+0000023062 00000 n
+0000023166 00000 n
+0000023270 00000 n
+0000023373 00000 n
+0000023477 00000 n
+0000023581 00000 n
+0000023685 00000 n
+0000023789 00000 n
+0000023893 00000 n
+0000023997 00000 n
+0000024101 00000 n
+0000024205 00000 n
+0000024309 00000 n
+0000024413 00000 n
+0000024517 00000 n
+0000024621 00000 n
+0000024725 00000 n
+0000024829 00000 n
+0000024933 00000 n
+0000025037 00000 n
+0000025141 00000 n
+0000025245 00000 n
+0000025349 00000 n
+0000025453 00000 n
+0000025556 00000 n
+0000025660 00000 n
+0000025764 00000 n
+0000025868 00000 n
+0000025972 00000 n
+0000026076 00000 n
+0000026180 00000 n
+0000026284 00000 n
+0000026388 00000 n
+0000026492 00000 n
+0000026596 00000 n
+0000026699 00000 n
+0000026801 00000 n
+0000026903 00000 n
+0000027288 00000 n
+0000027391 00000 n
+0000027495 00000 n
+0000027598 00000 n
+0000027702 00000 n
+0000027806 00000 n
+0000027910 00000 n
+0000028014 00000 n
+0000028117 00000 n
+0000028221 00000 n
+0000028325 00000 n
+0000028429 00000 n
+0000028533 00000 n
+0000028637 00000 n
+0000028741 00000 n
+0000028844 00000 n
+0000028947 00000 n
+0000029051 00000 n
+0000029155 00000 n
+0000029259 00000 n
+0000029428 00000 n
+0000029481 00000 n
+0000029568 00000 n
+0000029622 00000 n
+0000029708 00000 n
+0000029775 00000 n
+0000029861 00000 n
+0000029964 00000 n
+0000030068 00000 n
+0000030172 00000 n
+0000030276 00000 n
+0000030380 00000 n
+0000030484 00000 n
+0000030588 00000 n
+0000030692 00000 n
+0000030796 00000 n
+0000030900 00000 n
+0000031004 00000 n
+0000031108 00000 n
+0000031212 00000 n
+0000031316 00000 n
+0000031420 00000 n
+0000031524 00000 n
+0000031628 00000 n
+0000031732 00000 n
+0000031836 00000 n
+0000031939 00000 n
+0000032043 00000 n
+0000032147 00000 n
+0000032251 00000 n
+0000032355 00000 n
+0000032459 00000 n
+0000032563 00000 n
+0000032667 00000 n
+0000032771 00000 n
+0000032875 00000 n
+0000032979 00000 n
+0000033083 00000 n
+0000033186 00000 n
+0000033288 00000 n
+0000033390 00000 n
+0000033703 00000 n
+0000033807 00000 n
+0000033910 00000 n
+0000034014 00000 n
+0000034118 00000 n
+0000034222 00000 n
+0000034326 00000 n
+0000034430 00000 n
+0000034534 00000 n
+0000034638 00000 n
+0000034742 00000 n
+0000034846 00000 n
+0000034950 00000 n
+0000035054 00000 n
+0000035158 00000 n
+0000035262 00000 n
+0000035366 00000 n
+0000035470 00000 n
+0000035574 00000 n
+0000035678 00000 n
+0000035782 00000 n
+0000035885 00000 n
+0000035989 00000 n
+0000036093 00000 n
+0000036197 00000 n
+0000036300 00000 n
+0000036404 00000 n
+0000036508 00000 n
+0000036611 00000 n
+0000036715 00000 n
+0000036819 00000 n
+0000036923 00000 n
+0000037027 00000 n
+0000037131 00000 n
+0000037235 00000 n
+0000037339 00000 n
+0000037443 00000 n
+0000037547 00000 n
+0000037650 00000 n
+0000037754 00000 n
+0000037858 00000 n
+0000037962 00000 n
+0000038066 00000 n
+0000038170 00000 n
+0000038274 00000 n
+0000038378 00000 n
+0000038482 00000 n
+0000038586 00000 n
+0000038690 00000 n
+0000038793 00000 n
+0000038895 00000 n
+0000038997 00000 n
+0000039422 00000 n
+0000039525 00000 n
+0000039629 00000 n
+0000039733 00000 n
+0000039837 00000 n
+0000039941 00000 n
+0000040045 00000 n
+0000040149 00000 n
+0000040253 00000 n
+0000040357 00000 n
+0000040461 00000 n
+0000040564 00000 n
+0000040668 00000 n
+0000040772 00000 n
+0000040875 00000 n
+0000040979 00000 n
+0000041083 00000 n
+0000041187 00000 n
+0000041290 00000 n
+0000041394 00000 n
+0000041498 00000 n
+0000041602 00000 n
+0000041706 00000 n
+0000041810 00000 n
+0000041914 00000 n
+0000042018 00000 n
+0000042122 00000 n
+0000042226 00000 n
+0000042330 00000 n
+0000042434 00000 n
+0000042538 00000 n
+0000042642 00000 n
+0000042746 00000 n
+0000042850 00000 n
+0000042954 00000 n
+0000043057 00000 n
+0000043161 00000 n
+0000043265 00000 n
+0000043369 00000 n
+0000043473 00000 n
+0000043577 00000 n
+0000043681 00000 n
+0000043785 00000 n
+0000043889 00000 n
+0000043993 00000 n
+0000044097 00000 n
+0000044201 00000 n
+0000044305 00000 n
+0000044409 00000 n
+0000044512 00000 n
+0000044613 00000 n
+0000044715 00000 n
+0000045140 00000 n
+0000045244 00000 n
+0000045348 00000 n
+0000045452 00000 n
+0000045556 00000 n
+0000045660 00000 n
+0000045764 00000 n
+0000045868 00000 n
+0000045971 00000 n
+0000046075 00000 n
+0000046179 00000 n
+0000046283 00000 n
+0000046387 00000 n
+0000046491 00000 n
+0000046595 00000 n
+0000046699 00000 n
+0000046803 00000 n
+0000046907 00000 n
+0000047011 00000 n
+0000047115 00000 n
+0000047219 00000 n
+0000047322 00000 n
+0000047426 00000 n
+0000047530 00000 n
+0000047634 00000 n
+0000047738 00000 n
+0000047842 00000 n
+0000047946 00000 n
+0000048050 00000 n
+0000048154 00000 n
+0000048258 00000 n
+0000048361 00000 n
+0000048465 00000 n
+0000048569 00000 n
+0000048673 00000 n
+0000048777 00000 n
+0000048881 00000 n
+0000048985 00000 n
+0000049089 00000 n
+0000049193 00000 n
+0000049297 00000 n
+0000049401 00000 n
+0000049505 00000 n
+0000049609 00000 n
+0000049712 00000 n
+0000049816 00000 n
+0000049920 00000 n
+0000050024 00000 n
+0000050128 00000 n
+0000050231 00000 n
+0000050333 00000 n
+0000050435 00000 n
+0000050860 00000 n
+0000050964 00000 n
+0000051068 00000 n
+0000051172 00000 n
+0000051276 00000 n
+0000051380 00000 n
+0000051484 00000 n
+0000051588 00000 n
+0000051692 00000 n
+0000051796 00000 n
+0000051900 00000 n
+0000052004 00000 n
+0000052108 00000 n
+0000052212 00000 n
+0000052315 00000 n
+0000052419 00000 n
+0000052523 00000 n
+0000052627 00000 n
+0000052731 00000 n
+0000052835 00000 n
+0000052939 00000 n
+0000053043 00000 n
+0000053147 00000 n
+0000053251 00000 n
+0000053355 00000 n
+0000053459 00000 n
+0000053563 00000 n
+0000053667 00000 n
+0000053770 00000 n
+0000053874 00000 n
+0000053978 00000 n
+0000054082 00000 n
+0000054186 00000 n
+0000054289 00000 n
+0000054393 00000 n
+0000054497 00000 n
+0000054601 00000 n
+0000054705 00000 n
+0000054809 00000 n
+0000054913 00000 n
+0000055016 00000 n
+0000055119 00000 n
+0000055223 00000 n
+0000055327 00000 n
+0000055431 00000 n
+0000055800 00000 n
+0000055853 00000 n
+0000055940 00000 n
+0000055965 00000 n
+0000056019 00000 n
+0000056106 00000 n
+0000056160 00000 n
+0000056247 00000 n
0000056280 00000 n
-0000056384 00000 n
-0000056486 00000 n
-0000056588 00000 n
-0000056690 00000 n
-0000057059 00000 n
-0000057163 00000 n
-0000057267 00000 n
-0000057371 00000 n
-0000057412 00000 n
-0000057465 00000 n
-0000057552 00000 n
-0000057577 00000 n
-0000057624 00000 n
-0000057711 00000 n
-0000057736 00000 n
-0000057839 00000 n
-0000057943 00000 n
-0000058047 00000 n
-0000058151 00000 n
-0000058255 00000 n
-0000058359 00000 n
-0000058463 00000 n
-0000058567 00000 n
-0000058671 00000 n
-0000058775 00000 n
-0000058879 00000 n
-0000058983 00000 n
-0000059087 00000 n
-0000059191 00000 n
-0000059295 00000 n
-0000059398 00000 n
-0000059502 00000 n
-0000059606 00000 n
-0000059710 00000 n
-0000059814 00000 n
-0000059918 00000 n
-0000060022 00000 n
-0000060126 00000 n
-0000060230 00000 n
-0000060333 00000 n
-0000060437 00000 n
-0000060541 00000 n
-0000060645 00000 n
-0000060749 00000 n
-0000060853 00000 n
-0000060957 00000 n
-0000061061 00000 n
-0000061165 00000 n
-0000061269 00000 n
-0000061372 00000 n
-0000061476 00000 n
-0000061580 00000 n
-0000061684 00000 n
-0000062005 00000 n
-0000062053 00000 n
-0000062140 00000 n
-0000062188 00000 n
-0000062275 00000 n
-0000062325 00000 n
-0000062412 00000 n
-0000062460 00000 n
-0000062547 00000 n
-0000062596 00000 n
-0000062644 00000 n
-0000062731 00000 n
-0000062779 00000 n
-0000062864 00000 n
-0000062909 00000 n
-0000062995 00000 n
-0000063038 00000 n
-0000063124 00000 n
-0000063165 00000 n
-0000063251 00000 n
-0000063300 00000 n
-0000063386 00000 n
-0000063432 00000 n
-0000063518 00000 n
-0000063563 00000 n
-0000063649 00000 n
-0000063701 00000 n
-0000063787 00000 n
-0000063837 00000 n
-0000063923 00000 n
-0000063969 00000 n
-0000064055 00000 n
-0000064098 00000 n
-0000064184 00000 n
-0000064228 00000 n
-0000064314 00000 n
+0000056328 00000 n
+0000056415 00000 n
+0000056462 00000 n
+0000056548 00000 n
+0000056595 00000 n
+0000056681 00000 n
+0000056722 00000 n
+0000056767 00000 n
+0000056854 00000 n
+0000056899 00000 n
+0000056985 00000 n
+0000057018 00000 n
+0000057073 00000 n
+0000057159 00000 n
+0000057184 00000 n
+0000057237 00000 n
+0000057324 00000 n
+0000057374 00000 n
+0000057461 00000 n
+0000057494 00000 n
+0000057613 00000 n
+0000057699 00000 n
+0000057742 00000 n
+0000057829 00000 n
+0000057872 00000 n
+0000057959 00000 n
+0000058000 00000 n
+0000058046 00000 n
+0000058133 00000 n
+0000058158 00000 n
+0000058204 00000 n
+0000058291 00000 n
+0000058337 00000 n
+0000058422 00000 n
+0000058466 00000 n
+0000058553 00000 n
+0000058604 00000 n
+0000058691 00000 n
+0000058740 00000 n
+0000058827 00000 n
+0000058875 00000 n
+0000058961 00000 n
+0000059026 00000 n
+0000059089 00000 n
+0000059176 00000 n
+0000059234 00000 n
+0000059321 00000 n
+0000059415 00000 n
+0000059501 00000 n
+0000059603 00000 n
+0000059652 00000 n
+0000059755 00000 n
+0000059798 00000 n
+0000059884 00000 n
+0000059932 00000 n
+0000060019 00000 n
+0000060060 00000 n
+0000060147 00000 n
+0000060191 00000 n
+0000060278 00000 n
+0000060322 00000 n
+0000060408 00000 n
+0000060473 00000 n
+0000060519 00000 n
+0000060606 00000 n
+0000060631 00000 n
+0000060680 00000 n
+0000060767 00000 n
+0000060821 00000 n
+0000060908 00000 n
+0000060959 00000 n
+0000061046 00000 n
+0000061097 00000 n
+0000061183 00000 n
+0000061237 00000 n
+0000061323 00000 n
+0000061373 00000 n
+0000061458 00000 n
+0000061523 00000 n
+0000061573 00000 n
+0000061660 00000 n
+0000061710 00000 n
+0000061796 00000 n
+0000061860 00000 n
+0000061947 00000 n
+0000061988 00000 n
+0000062052 00000 n
+0000062139 00000 n
+0000062164 00000 n
+0000062206 00000 n
+0000062292 00000 n
+0000062343 00000 n
+0000062430 00000 n
+0000062477 00000 n
+0000062564 00000 n
+0000062605 00000 n
+0000062654 00000 n
+0000062741 00000 n
+0000062789 00000 n
+0000062876 00000 n
+0000062918 00000 n
+0000063004 00000 n
+0000063045 00000 n
+0000063088 00000 n
+0000063175 00000 n
+0000063225 00000 n
+0000063312 00000 n
+0000063360 00000 n
+0000063447 00000 n
+0000063501 00000 n
+0000063586 00000 n
+0000063635 00000 n
+0000063680 00000 n
+0000063767 00000 n
+0000063824 00000 n
+0000063911 00000 n
+0000064007 00000 n
+0000064093 00000 n
+0000064134 00000 n
+0000064196 00000 n
+0000064283 00000 n
+0000064308 00000 n
0000064357 00000 n
-0000064443 00000 n
-0000064488 00000 n
-0000064574 00000 n
-0000064612 00000 n
-0000064698 00000 n
+0000064444 00000 n
+0000064469 00000 n
+0000064517 00000 n
+0000064604 00000 n
+0000064654 00000 n
0000064740 00000 n
-0000064826 00000 n
-0000064869 00000 n
-0000064955 00000 n
-0000064993 00000 n
-0000065079 00000 n
-0000065121 00000 n
-0000065207 00000 n
-0000065251 00000 n
-0000065337 00000 n
-0000065384 00000 n
-0000065470 00000 n
-0000065518 00000 n
-0000065603 00000 n
-0000065804 00000 n
-0000065854 00000 n
-0000065941 00000 n
-0000065991 00000 n
-0000066077 00000 n
-0000066110 00000 n
-0000066159 00000 n
-0000066245 00000 n
-0000066292 00000 n
-0000066379 00000 n
-0000066412 00000 n
-0000066527 00000 n
-0000066614 00000 n
-0000066696 00000 n
-0000066783 00000 n
-0000066868 00000 n
-0000066955 00000 n
-0000066996 00000 n
-0000067051 00000 n
-0000067138 00000 n
-0000067194 00000 n
-0000067281 00000 n
-0000067314 00000 n
-0000067362 00000 n
-0000067449 00000 n
-0000067523 00000 n
-0000067610 00000 n
-0000067678 00000 n
-0000067765 00000 n
-0000067819 00000 n
-0000067906 00000 n
-0000067974 00000 n
-0000068061 00000 n
-0000068135 00000 n
-0000068222 00000 n
-0000068270 00000 n
-0000068357 00000 n
-0000068414 00000 n
-0000068501 00000 n
-0000068582 00000 n
-0000068637 00000 n
-0000068724 00000 n
-0000068805 00000 n
-0000068892 00000 n
-0000068925 00000 n
-0000068978 00000 n
-0000069065 00000 n
-0000069090 00000 n
-0000069139 00000 n
-0000069226 00000 n
-0000069274 00000 n
-0000069361 00000 n
-0000069403 00000 n
-0000069489 00000 n
-0000069530 00000 n
-0000069573 00000 n
-0000069660 00000 n
-0000069710 00000 n
-0000069797 00000 n
-0000069845 00000 n
-0000069932 00000 n
-0000069986 00000 n
-0000070071 00000 n
-0000070120 00000 n
-0000070165 00000 n
-0000070252 00000 n
-0000070309 00000 n
-0000070396 00000 n
-0000070492 00000 n
-0000070578 00000 n
-0000070619 00000 n
-0000070722 00000 n
-0000070826 00000 n
-0000070930 00000 n
-0000071034 00000 n
-0000071138 00000 n
-0000071242 00000 n
-0000071346 00000 n
-0000071450 00000 n
-0000071554 00000 n
-0000071658 00000 n
-0000071762 00000 n
-0000071866 00000 n
-0000071970 00000 n
-0000072074 00000 n
-0000072178 00000 n
-0000072282 00000 n
-0000072386 00000 n
-0000072490 00000 n
-0000072594 00000 n
-0000072697 00000 n
-0000072801 00000 n
-0000072905 00000 n
-0000073009 00000 n
-0000073113 00000 n
-0000073217 00000 n
-0000073321 00000 n
-0000073425 00000 n
-0000073529 00000 n
-0000073633 00000 n
-0000073736 00000 n
-0000073840 00000 n
-0000073944 00000 n
-0000074048 00000 n
-0000074151 00000 n
-0000074255 00000 n
-0000074359 00000 n
-0000074462 00000 n
-0000074566 00000 n
-0000074670 00000 n
-0000074774 00000 n
-0000074878 00000 n
-0000074981 00000 n
-0000075083 00000 n
-0000075185 00000 n
-0000075554 00000 n
-0000075658 00000 n
-0000075762 00000 n
-0000075866 00000 n
-0000075970 00000 n
-0000076074 00000 n
-0000076178 00000 n
-0000076282 00000 n
-0000076386 00000 n
-0000076490 00000 n
-0000076594 00000 n
-0000076698 00000 n
-0000076802 00000 n
-0000076906 00000 n
-0000077010 00000 n
-0000077114 00000 n
-0000077217 00000 n
-0000077321 00000 n
-0000077425 00000 n
-0000077528 00000 n
-0000077632 00000 n
-0000077736 00000 n
-0000077840 00000 n
-0000077944 00000 n
-0000078048 00000 n
-0000078152 00000 n
-0000078256 00000 n
-0000078360 00000 n
-0000078464 00000 n
-0000078568 00000 n
-0000078672 00000 n
-0000078776 00000 n
-0000078880 00000 n
-0000078984 00000 n
-0000079088 00000 n
-0000079192 00000 n
-0000079295 00000 n
-0000079399 00000 n
-0000079503 00000 n
-0000079607 00000 n
-0000079711 00000 n
-0000079814 00000 n
-0000079918 00000 n
-0000080022 00000 n
-0000080125 00000 n
-0000080229 00000 n
-0000080333 00000 n
-0000080437 00000 n
-0000080541 00000 n
-0000080644 00000 n
-0000080746 00000 n
-0000080848 00000 n
-0000081273 00000 n
-0000081377 00000 n
-0000081481 00000 n
-0000081585 00000 n
-0000081689 00000 n
-0000081793 00000 n
-0000081896 00000 n
-0000082000 00000 n
-0000082104 00000 n
-0000082208 00000 n
-0000082312 00000 n
-0000082415 00000 n
-0000082518 00000 n
-0000082622 00000 n
-0000082726 00000 n
-0000082830 00000 n
-0000082934 00000 n
-0000083038 00000 n
-0000083142 00000 n
-0000083246 00000 n
-0000083350 00000 n
-0000083454 00000 n
-0000083558 00000 n
-0000083662 00000 n
-0000083766 00000 n
-0000083870 00000 n
-0000083974 00000 n
-0000084078 00000 n
-0000084182 00000 n
-0000084286 00000 n
-0000084390 00000 n
-0000084494 00000 n
-0000084598 00000 n
-0000084871 00000 n
-0000084919 00000 n
-0000085006 00000 n
-0000085053 00000 n
-0000085139 00000 n
-0000085186 00000 n
-0000085272 00000 n
-0000085313 00000 n
-0000085358 00000 n
-0000085445 00000 n
-0000085490 00000 n
-0000085576 00000 n
-0000085609 00000 n
-0000085655 00000 n
-0000085742 00000 n
-0000085767 00000 n
-0000085813 00000 n
-0000085900 00000 n
-0000085946 00000 n
-0000086031 00000 n
-0000086075 00000 n
-0000086162 00000 n
-0000086213 00000 n
-0000086300 00000 n
-0000086349 00000 n
-0000086436 00000 n
-0000086484 00000 n
-0000086570 00000 n
-0000086635 00000 n
-0000086690 00000 n
-0000086776 00000 n
-0000086801 00000 n
-0000086854 00000 n
-0000086941 00000 n
+0000064784 00000 n
+0000064870 00000 n
+0000064914 00000 n
+0000065000 00000 n
+0000065050 00000 n
+0000065136 00000 n
+0000065186 00000 n
+0000065271 00000 n
+0000065320 00000 n
+0000065404 00000 n
+0000065451 00000 n
+0000065535 00000 n
+0000065616 00000 n
+0000065664 00000 n
+0000065751 00000 n
+0000065799 00000 n
+0000065886 00000 n
+0000065936 00000 n
+0000066023 00000 n
+0000066071 00000 n
+0000066158 00000 n
+0000066207 00000 n
+0000066255 00000 n
+0000066342 00000 n
+0000066390 00000 n
+0000066475 00000 n
+0000066520 00000 n
+0000066606 00000 n
+0000066649 00000 n
+0000066735 00000 n
+0000066776 00000 n
+0000066862 00000 n
+0000066911 00000 n
+0000066997 00000 n
+0000067043 00000 n
+0000067129 00000 n
+0000067174 00000 n
+0000067260 00000 n
+0000067312 00000 n
+0000067398 00000 n
+0000067448 00000 n
+0000067534 00000 n
+0000067580 00000 n
+0000067666 00000 n
+0000067709 00000 n
+0000067795 00000 n
+0000067839 00000 n
+0000067925 00000 n
+0000067968 00000 n
+0000068054 00000 n
+0000068099 00000 n
+0000068185 00000 n
+0000068223 00000 n
+0000068309 00000 n
+0000068351 00000 n
+0000068437 00000 n
+0000068480 00000 n
+0000068566 00000 n
+0000068604 00000 n
+0000068690 00000 n
+0000068732 00000 n
+0000068818 00000 n
+0000068862 00000 n
+0000068948 00000 n
+0000068995 00000 n
+0000069081 00000 n
+0000069129 00000 n
+0000069214 00000 n
+0000069415 00000 n
+0000069465 00000 n
+0000069552 00000 n
+0000069602 00000 n
+0000069688 00000 n
+0000069721 00000 n
+0000069770 00000 n
+0000069856 00000 n
+0000069903 00000 n
+0000069990 00000 n
+0000070023 00000 n
+0000070138 00000 n
+0000070225 00000 n
+0000070250 00000 n
+0000070332 00000 n
+0000070419 00000 n
+0000070504 00000 n
+0000070591 00000 n
+0000070624 00000 n
+0000070679 00000 n
+0000070766 00000 n
+0000070822 00000 n
+0000070909 00000 n
+0000070942 00000 n
+0000070990 00000 n
+0000071077 00000 n
+0000071151 00000 n
+0000071238 00000 n
+0000071306 00000 n
+0000071393 00000 n
+0000071447 00000 n
+0000071534 00000 n
+0000071602 00000 n
+0000071689 00000 n
+0000071763 00000 n
+0000071850 00000 n
+0000071898 00000 n
+0000071985 00000 n
+0000072042 00000 n
+0000072129 00000 n
+0000072210 00000 n
+0000072265 00000 n
+0000072352 00000 n
+0000072433 00000 n
+0000072520 00000 n
+0000072553 00000 n
+0000072606 00000 n
+0000072693 00000 n
+0000072718 00000 n
+0000072774 00000 n
+0000072861 00000 n
+0000072930 00000 n
+0000073017 00000 n
+0000073068 00000 n
+0000073155 00000 n
+0000073242 00000 n
+0000073329 00000 n
+0000073385 00000 n
+0000073472 00000 n
+0000073522 00000 n
+0000073609 00000 n
+0000073674 00000 n
+0000073726 00000 n
+0000073813 00000 n
+0000073869 00000 n
+0000073956 00000 n
+0000074004 00000 n
+0000074091 00000 n
+0000074139 00000 n
+0000074226 00000 n
+0000074275 00000 n
+0000074316 00000 n
+0000074401 00000 n
+0000074426 00000 n
+0000074470 00000 n
+0000074557 00000 n
+0000074602 00000 n
+0000074689 00000 n
+0000074733 00000 n
+0000074820 00000 n
+0000074864 00000 n
+0000074951 00000 n
+0000074993 00000 n
+0000075080 00000 n
+0000075128 00000 n
+0000075215 00000 n
+0000075280 00000 n
+0000075328 00000 n
+0000075414 00000 n
+0000075439 00000 n
+0000075492 00000 n
+0000075578 00000 n
+0000075603 00000 n
+0000075657 00000 n
+0000075744 00000 n
+0000075769 00000 n
+0000075824 00000 n
+0000075910 00000 n
+0000075978 00000 n
+0000076064 00000 n
+0000076139 00000 n
+0000076226 00000 n
+0000076296 00000 n
+0000076382 00000 n
+0000076461 00000 n
+0000076548 00000 n
+0000076605 00000 n
+0000076687 00000 n
+0000076773 00000 n
+0000076848 00000 n
+0000076935 00000 n
+0000077008 00000 n
+0000077095 00000 n
+0000077173 00000 n
+0000077260 00000 n
+0000077309 00000 n
+0000077357 00000 n
+0000077444 00000 n
+0000077469 00000 n
+0000077517 00000 n
+0000077604 00000 n
+0000077629 00000 n
+0000077692 00000 n
+0000077779 00000 n
+0000077842 00000 n
+0000077929 00000 n
+0000077983 00000 n
+0000078070 00000 n
+0000078111 00000 n
+0000078158 00000 n
+0000078245 00000 n
+0000078270 00000 n
+0000078304 00000 n
+0000078338 00000 n
+0000082635 00000 n
+0000082679 00000 n
+0000082723 00000 n
+0000082767 00000 n
+0000082811 00000 n
+0000082855 00000 n
+0000082899 00000 n
+0000082943 00000 n
+0000082987 00000 n
+0000083031 00000 n
+0000083075 00000 n
+0000083119 00000 n
+0000083163 00000 n
+0000083207 00000 n
+0000083251 00000 n
+0000083295 00000 n
+0000083339 00000 n
+0000083383 00000 n
+0000083427 00000 n
+0000083471 00000 n
+0000083515 00000 n
+0000083559 00000 n
+0000083603 00000 n
+0000083647 00000 n
+0000083691 00000 n
+0000083735 00000 n
+0000083779 00000 n
+0000083823 00000 n
+0000083867 00000 n
+0000083911 00000 n
+0000083955 00000 n
+0000083999 00000 n
+0000084043 00000 n
+0000084087 00000 n
+0000084131 00000 n
+0000084175 00000 n
+0000084219 00000 n
+0000084263 00000 n
+0000084307 00000 n
+0000084351 00000 n
+0000084395 00000 n
+0000084439 00000 n
+0000084483 00000 n
+0000084527 00000 n
+0000084571 00000 n
+0000084615 00000 n
+0000084659 00000 n
+0000084703 00000 n
+0000084747 00000 n
+0000084791 00000 n
+0000084835 00000 n
+0000084879 00000 n
+0000084923 00000 n
+0000084967 00000 n
+0000085011 00000 n
+0000085055 00000 n
+0000085099 00000 n
+0000085143 00000 n
+0000085187 00000 n
+0000085231 00000 n
+0000085275 00000 n
+0000085319 00000 n
+0000085363 00000 n
+0000085407 00000 n
+0000085451 00000 n
+0000085495 00000 n
+0000085539 00000 n
+0000085583 00000 n
+0000085627 00000 n
+0000085671 00000 n
+0000085715 00000 n
+0000085759 00000 n
+0000085803 00000 n
+0000085847 00000 n
+0000085891 00000 n
+0000085935 00000 n
+0000085979 00000 n
+0000086023 00000 n
+0000086067 00000 n
+0000086111 00000 n
+0000086155 00000 n
+0000086199 00000 n
+0000086243 00000 n
+0000086287 00000 n
+0000086331 00000 n
+0000086375 00000 n
+0000086419 00000 n
+0000086463 00000 n
+0000086507 00000 n
+0000086551 00000 n
+0000086595 00000 n
+0000086639 00000 n
+0000086683 00000 n
+0000086727 00000 n
+0000086771 00000 n
+0000086815 00000 n
+0000086859 00000 n
+0000086903 00000 n
+0000086947 00000 n
0000086991 00000 n
-0000087078 00000 n
-0000087111 00000 n
-0000087230 00000 n
-0000087316 00000 n
-0000087359 00000 n
-0000087446 00000 n
-0000087489 00000 n
-0000087576 00000 n
-0000087617 00000 n
-0000087680 00000 n
-0000087767 00000 n
-0000087825 00000 n
-0000087912 00000 n
-0000088006 00000 n
-0000088092 00000 n
-0000088133 00000 n
-0000088176 00000 n
-0000088262 00000 n
-0000088310 00000 n
-0000088397 00000 n
-0000088438 00000 n
-0000088525 00000 n
-0000088569 00000 n
-0000088656 00000 n
-0000088700 00000 n
-0000088786 00000 n
-0000088843 00000 n
-0000088889 00000 n
-0000088976 00000 n
-0000089022 00000 n
-0000089109 00000 n
-0000089158 00000 n
-0000089243 00000 n
-0000089284 00000 n
-0000089338 00000 n
-0000089425 00000 n
-0000089476 00000 n
-0000089563 00000 n
-0000089614 00000 n
-0000089700 00000 n
-0000089754 00000 n
-0000089841 00000 n
-0000089891 00000 n
-0000089978 00000 n
-0000090035 00000 n
-0000090085 00000 n
+0000087035 00000 n
+0000087079 00000 n
+0000087123 00000 n
+0000087167 00000 n
+0000087211 00000 n
+0000087255 00000 n
+0000087299 00000 n
+0000087343 00000 n
+0000087387 00000 n
+0000087431 00000 n
+0000087475 00000 n
+0000087519 00000 n
+0000087563 00000 n
+0000087607 00000 n
+0000087651 00000 n
+0000087695 00000 n
+0000087739 00000 n
+0000087783 00000 n
+0000087827 00000 n
+0000087871 00000 n
+0000087915 00000 n
+0000087959 00000 n
+0000088003 00000 n
+0000088047 00000 n
+0000088091 00000 n
+0000088135 00000 n
+0000088179 00000 n
+0000088223 00000 n
+0000088267 00000 n
+0000088311 00000 n
+0000088355 00000 n
+0000088399 00000 n
+0000088443 00000 n
+0000088487 00000 n
+0000088531 00000 n
+0000088575 00000 n
+0000088619 00000 n
+0000088663 00000 n
+0000088707 00000 n
+0000088751 00000 n
+0000088795 00000 n
+0000088839 00000 n
+0000088883 00000 n
+0000088927 00000 n
+0000088971 00000 n
+0000089015 00000 n
+0000089059 00000 n
+0000089103 00000 n
+0000089147 00000 n
+0000089191 00000 n
+0000089235 00000 n
+0000089279 00000 n
+0000089323 00000 n
+0000089367 00000 n
+0000089411 00000 n
+0000089455 00000 n
+0000089499 00000 n
+0000089543 00000 n
+0000089587 00000 n
+0000089632 00000 n
+0000089677 00000 n
+0000089722 00000 n
+0000089767 00000 n
+0000089812 00000 n
+0000089857 00000 n
+0000089902 00000 n
+0000089947 00000 n
+0000089992 00000 n
+0000090037 00000 n
+0000090082 00000 n
+0000090127 00000 n
0000090172 00000 n
-0000090222 00000 n
-0000090308 00000 n
-0000090341 00000 n
-0000090405 00000 n
-0000090492 00000 n
-0000090517 00000 n
-0000090559 00000 n
-0000090645 00000 n
-0000090696 00000 n
-0000090783 00000 n
-0000090830 00000 n
-0000090917 00000 n
-0000090958 00000 n
-0000091020 00000 n
-0000091107 00000 n
-0000091132 00000 n
-0000091181 00000 n
-0000091268 00000 n
-0000091293 00000 n
-0000091341 00000 n
-0000091428 00000 n
-0000091478 00000 n
-0000091564 00000 n
-0000091608 00000 n
-0000091694 00000 n
-0000091738 00000 n
-0000091824 00000 n
-0000091874 00000 n
-0000091960 00000 n
-0000092010 00000 n
-0000092095 00000 n
-0000092144 00000 n
-0000092228 00000 n
-0000092275 00000 n
-0000092359 00000 n
-0000092440 00000 n
-0000092496 00000 n
-0000092583 00000 n
-0000092652 00000 n
-0000092739 00000 n
-0000092790 00000 n
-0000092877 00000 n
-0000092964 00000 n
-0000093051 00000 n
-0000093107 00000 n
-0000093194 00000 n
-0000093244 00000 n
-0000093331 00000 n
-0000093396 00000 n
-0000093448 00000 n
-0000093535 00000 n
-0000093591 00000 n
-0000093678 00000 n
-0000093726 00000 n
-0000093813 00000 n
-0000093861 00000 n
-0000093948 00000 n
+0000090217 00000 n
+0000090262 00000 n
+0000090307 00000 n
+0000090352 00000 n
+0000090397 00000 n
+0000090442 00000 n
+0000090487 00000 n
+0000090532 00000 n
+0000090577 00000 n
+0000090622 00000 n
+0000090667 00000 n
+0000090712 00000 n
+0000090757 00000 n
+0000090802 00000 n
+0000090847 00000 n
+0000090892 00000 n
+0000090937 00000 n
+0000090982 00000 n
+0000091027 00000 n
+0000091072 00000 n
+0000091117 00000 n
+0000091162 00000 n
+0000091207 00000 n
+0000091252 00000 n
+0000091297 00000 n
+0000091342 00000 n
+0000091387 00000 n
+0000091432 00000 n
+0000091477 00000 n
+0000091522 00000 n
+0000091567 00000 n
+0000091612 00000 n
+0000091657 00000 n
+0000091702 00000 n
+0000091747 00000 n
+0000091792 00000 n
+0000091837 00000 n
+0000091882 00000 n
+0000091927 00000 n
+0000091972 00000 n
+0000092017 00000 n
+0000092062 00000 n
+0000092107 00000 n
+0000092152 00000 n
+0000092197 00000 n
+0000092242 00000 n
+0000092287 00000 n
+0000092332 00000 n
+0000092377 00000 n
+0000092422 00000 n
+0000092467 00000 n
+0000092512 00000 n
+0000092557 00000 n
+0000092602 00000 n
+0000092647 00000 n
+0000092692 00000 n
+0000092737 00000 n
+0000092782 00000 n
+0000092827 00000 n
+0000092872 00000 n
+0000092917 00000 n
+0000092962 00000 n
+0000093007 00000 n
+0000093052 00000 n
+0000093097 00000 n
+0000093142 00000 n
+0000093187 00000 n
+0000093232 00000 n
+0000093277 00000 n
+0000093322 00000 n
+0000093367 00000 n
+0000093412 00000 n
+0000093457 00000 n
+0000093502 00000 n
+0000093547 00000 n
+0000093592 00000 n
+0000093637 00000 n
+0000093682 00000 n
+0000093727 00000 n
+0000093772 00000 n
+0000093817 00000 n
+0000093862 00000 n
+0000093907 00000 n
+0000093952 00000 n
0000093997 00000 n
-0000094038 00000 n
-0000094123 00000 n
-0000094148 00000 n
-0000094192 00000 n
-0000094279 00000 n
-0000094324 00000 n
-0000094411 00000 n
-0000094455 00000 n
-0000094542 00000 n
-0000094586 00000 n
-0000094673 00000 n
-0000094715 00000 n
-0000094802 00000 n
-0000094850 00000 n
-0000094937 00000 n
-0000095002 00000 n
-0000095050 00000 n
-0000095136 00000 n
-0000095161 00000 n
-0000095214 00000 n
-0000095300 00000 n
-0000095325 00000 n
-0000095379 00000 n
-0000095466 00000 n
-0000095491 00000 n
-0000095554 00000 n
-0000095641 00000 n
-0000095704 00000 n
-0000095791 00000 n
-0000095845 00000 n
-0000095932 00000 n
-0000095973 00000 n
-0000096076 00000 n
-0000096180 00000 n
-0000096284 00000 n
-0000096388 00000 n
-0000096492 00000 n
-0000096595 00000 n
-0000096699 00000 n
-0000096803 00000 n
-0000096907 00000 n
-0000097011 00000 n
-0000097116 00000 n
-0000097221 00000 n
-0000097326 00000 n
-0000097431 00000 n
-0000097536 00000 n
-0000097641 00000 n
-0000097746 00000 n
-0000097851 00000 n
-0000097956 00000 n
-0000098060 00000 n
-0000098165 00000 n
-0000098270 00000 n
-0000098375 00000 n
-0000098480 00000 n
-0000098585 00000 n
-0000098690 00000 n
-0000098794 00000 n
-0000098899 00000 n
-0000099004 00000 n
-0000099109 00000 n
-0000099214 00000 n
-0000099319 00000 n
-0000099424 00000 n
-0000099529 00000 n
-0000099634 00000 n
-0000099739 00000 n
-0000099844 00000 n
-0000099949 00000 n
-0000100054 00000 n
-0000100159 00000 n
-0000100264 00000 n
-0000100369 00000 n
-0000100755 00000 n
-0000100811 00000 n
-0000100899 00000 n
-0000100968 00000 n
-0000101056 00000 n
-0000101132 00000 n
-0000101221 00000 n
-0000101292 00000 n
-0000101380 00000 n
-0000101460 00000 n
-0000101549 00000 n
-0000101612 00000 n
-0000101695 00000 n
-0000101783 00000 n
-0000101859 00000 n
-0000101948 00000 n
-0000102022 00000 n
-0000102111 00000 n
-0000102190 00000 n
-0000102279 00000 n
-0000102333 00000 n
-0000102382 00000 n
-0000102471 00000 n
-0000102498 00000 n
-0000102547 00000 n
-0000102636 00000 n
-0000102663 00000 n
-0000102712 00000 n
-0000102801 00000 n
-0000102866 00000 n
-0000102955 00000 n
-0000103011 00000 n
-0000103100 00000 n
-0000103148 00000 n
-0000103237 00000 n
-0000103291 00000 n
-0000103346 00000 n
-0000103435 00000 n
-0000103490 00000 n
-0000103579 00000 n
-0000103615 00000 n
-0000103651 00000 n
-0000103687 00000 n
-0000108725 00000 n
-0000108770 00000 n
-0000108815 00000 n
-0000108860 00000 n
-0000108905 00000 n
-0000108950 00000 n
-0000108995 00000 n
-0000109040 00000 n
-0000109085 00000 n
-0000109130 00000 n
-0000109175 00000 n
-0000109220 00000 n
-0000109265 00000 n
-0000109310 00000 n
-0000109355 00000 n
-0000109400 00000 n
-0000109445 00000 n
-0000109490 00000 n
-0000109535 00000 n
-0000109580 00000 n
-0000109625 00000 n
-0000109670 00000 n
-0000109715 00000 n
-0000109760 00000 n
-0000109805 00000 n
-0000109850 00000 n
-0000109895 00000 n
-0000109940 00000 n
-0000109985 00000 n
-0000110030 00000 n
-0000110075 00000 n
-0000110120 00000 n
-0000110165 00000 n
-0000110210 00000 n
-0000110255 00000 n
-0000110300 00000 n
-0000110345 00000 n
-0000110390 00000 n
-0000110435 00000 n
-0000110480 00000 n
-0000110525 00000 n
-0000110570 00000 n
-0000110615 00000 n
-0000110660 00000 n
-0000110705 00000 n
-0000110750 00000 n
-0000110795 00000 n
-0000110840 00000 n
-0000110885 00000 n
-0000110930 00000 n
-0000110975 00000 n
-0000111020 00000 n
-0000111065 00000 n
-0000111110 00000 n
-0000111155 00000 n
-0000111200 00000 n
-0000111245 00000 n
-0000111290 00000 n
-0000111335 00000 n
-0000111380 00000 n
-0000111425 00000 n
-0000111470 00000 n
-0000111515 00000 n
-0000111560 00000 n
-0000111605 00000 n
-0000111650 00000 n
-0000111695 00000 n
-0000111740 00000 n
-0000111785 00000 n
-0000111830 00000 n
-0000111875 00000 n
-0000111920 00000 n
-0000111965 00000 n
-0000112010 00000 n
-0000112055 00000 n
-0000112100 00000 n
-0000112145 00000 n
-0000112190 00000 n
-0000112235 00000 n
-0000112280 00000 n
-0000112325 00000 n
-0000112370 00000 n
-0000112415 00000 n
-0000112460 00000 n
-0000112505 00000 n
-0000112550 00000 n
-0000112595 00000 n
-0000112640 00000 n
-0000112685 00000 n
-0000112730 00000 n
-0000112775 00000 n
-0000112820 00000 n
-0000112865 00000 n
-0000112910 00000 n
-0000112955 00000 n
-0000113000 00000 n
-0000113045 00000 n
-0000113090 00000 n
-0000113135 00000 n
-0000113180 00000 n
-0000113225 00000 n
-0000113270 00000 n
-0000113315 00000 n
-0000113360 00000 n
-0000113405 00000 n
-0000113450 00000 n
-0000113495 00000 n
-0000113540 00000 n
-0000113585 00000 n
-0000113630 00000 n
-0000113675 00000 n
-0000113720 00000 n
-0000113765 00000 n
-0000113810 00000 n
-0000113855 00000 n
-0000113900 00000 n
-0000113945 00000 n
-0000113990 00000 n
-0000114035 00000 n
-0000114080 00000 n
-0000114125 00000 n
-0000114170 00000 n
-0000114215 00000 n
-0000114260 00000 n
-0000114305 00000 n
-0000114350 00000 n
-0000114395 00000 n
-0000114440 00000 n
-0000114485 00000 n
-0000114530 00000 n
-0000114575 00000 n
-0000114620 00000 n
-0000114665 00000 n
-0000114710 00000 n
-0000114755 00000 n
-0000114800 00000 n
-0000114845 00000 n
-0000114890 00000 n
-0000114935 00000 n
-0000114980 00000 n
-0000115025 00000 n
-0000115070 00000 n
-0000115115 00000 n
-0000115160 00000 n
-0000115205 00000 n
-0000115250 00000 n
-0000115295 00000 n
-0000115340 00000 n
-0000115385 00000 n
-0000115430 00000 n
-0000115475 00000 n
-0000115520 00000 n
-0000115565 00000 n
-0000115610 00000 n
-0000115655 00000 n
-0000115700 00000 n
-0000115745 00000 n
-0000115790 00000 n
-0000115835 00000 n
-0000115880 00000 n
-0000115925 00000 n
-0000115970 00000 n
-0000116015 00000 n
-0000116060 00000 n
-0000116105 00000 n
-0000116150 00000 n
-0000116195 00000 n
-0000116240 00000 n
-0000116285 00000 n
-0000116330 00000 n
-0000116375 00000 n
-0000116420 00000 n
-0000116465 00000 n
-0000116510 00000 n
-0000116555 00000 n
-0000116600 00000 n
-0000116645 00000 n
-0000116690 00000 n
-0000116735 00000 n
-0000116780 00000 n
-0000116825 00000 n
-0000116870 00000 n
-0000116915 00000 n
-0000116960 00000 n
-0000117005 00000 n
-0000117050 00000 n
-0000117095 00000 n
-0000117140 00000 n
-0000117185 00000 n
-0000117230 00000 n
-0000117275 00000 n
-0000117320 00000 n
-0000117365 00000 n
-0000117410 00000 n
-0000117455 00000 n
-0000117500 00000 n
-0000117545 00000 n
-0000117590 00000 n
-0000117635 00000 n
-0000117680 00000 n
-0000117725 00000 n
-0000117770 00000 n
-0000117815 00000 n
-0000117860 00000 n
-0000117905 00000 n
-0000117950 00000 n
-0000117995 00000 n
-0000118040 00000 n
-0000118085 00000 n
-0000118130 00000 n
-0000118175 00000 n
-0000118220 00000 n
-0000118265 00000 n
-0000118310 00000 n
-0000118355 00000 n
-0000118400 00000 n
-0000118445 00000 n
-0000118490 00000 n
-0000118535 00000 n
-0000118580 00000 n
-0000118625 00000 n
-0000118670 00000 n
-0000118715 00000 n
-0000118760 00000 n
-0000118805 00000 n
-0000118850 00000 n
-0000118895 00000 n
-0000118940 00000 n
-0000118985 00000 n
-0000119030 00000 n
-0000119075 00000 n
-0000119120 00000 n
-0000119165 00000 n
-0000119210 00000 n
-0000119255 00000 n
-0000119300 00000 n
-0000119345 00000 n
-0000119390 00000 n
-0000119435 00000 n
-0000119480 00000 n
-0000119525 00000 n
-0000119570 00000 n
-0000119615 00000 n
-0000119660 00000 n
-0000119705 00000 n
-0000119750 00000 n
-0000119795 00000 n
-0000119840 00000 n
-0000119885 00000 n
-0000119930 00000 n
-0000119975 00000 n
-0000120020 00000 n
-0000120065 00000 n
-0000120110 00000 n
-0000120155 00000 n
-0000120200 00000 n
-0000120245 00000 n
-0000120290 00000 n
-0000120335 00000 n
-0000120380 00000 n
-0000120425 00000 n
-0000120470 00000 n
-0000120515 00000 n
-0000120560 00000 n
-0000120605 00000 n
-0000120650 00000 n
-0000120695 00000 n
-0000120740 00000 n
-0000120785 00000 n
-0000120830 00000 n
-0000120875 00000 n
-0000120920 00000 n
-0000120965 00000 n
-0000121010 00000 n
-0000121055 00000 n
-0000121100 00000 n
-0000121145 00000 n
-0000121190 00000 n
-0000121235 00000 n
-0000121280 00000 n
-0000121325 00000 n
-0000121370 00000 n
-0000121415 00000 n
-0000121460 00000 n
-0000121505 00000 n
-0000121550 00000 n
-0000121595 00000 n
-0000121640 00000 n
-0000121685 00000 n
-0000121730 00000 n
-0000121775 00000 n
-0000121820 00000 n
-0000121865 00000 n
-0000121910 00000 n
-0000123318 00000 n
-0000123479 00000 n
-0000123648 00000 n
-0000123841 00000 n
-0000127594 00000 n
-0000127787 00000 n
-0000132477 00000 n
-0000132671 00000 n
-0000137055 00000 n
-0000137249 00000 n
-0000141101 00000 n
-0000141295 00000 n
-0000144867 00000 n
-0000145061 00000 n
-0000148700 00000 n
-0000148894 00000 n
-0000149872 00000 n
-0000150033 00000 n
-0000150267 00000 n
-0000150471 00000 n
-0000153249 00000 n
-0000153424 00000 n
-0000157053 00000 n
-0000157228 00000 n
-0000159635 00000 n
-0000159810 00000 n
-0000161230 00000 n
-0000161391 00000 n
-0000161579 00000 n
-0000161783 00000 n
-0000164731 00000 n
-0000164906 00000 n
-0000165324 00000 n
-0000165536 00000 n
-0000166697 00000 n
-0000166885 00000 n
-0000168347 00000 n
-0000168544 00000 n
-0000169914 00000 n
-0000170129 00000 n
-0000171365 00000 n
-0000171559 00000 n
-0000173138 00000 n
-0000173308 00000 n
-0000175124 00000 n
-0000175275 00000 n
-0000175516 00000 n
-0000175686 00000 n
-0000177361 00000 n
-0000177540 00000 n
-0000179353 00000 n
-0000179522 00000 n
-0000181360 00000 n
-0000181529 00000 n
-0000182516 00000 n
-0000182695 00000 n
-0000184341 00000 n
-0000184529 00000 n
-0000186018 00000 n
-0000186206 00000 n
-0000187627 00000 n
-0000187797 00000 n
-0000189461 00000 n
-0000189631 00000 n
-0000190187 00000 n
-0000190357 00000 n
-0000192089 00000 n
-0000192268 00000 n
-0000193974 00000 n
-0000194162 00000 n
-0000195821 00000 n
-0000196009 00000 n
-0000197726 00000 n
-0000197895 00000 n
-0000198643 00000 n
-0000198850 00000 n
-0000200495 00000 n
-0000200702 00000 n
-0000202309 00000 n
-0000202478 00000 n
-0000202810 00000 n
-0000202971 00000 n
-0000203161 00000 n
-0000203365 00000 n
-0000206194 00000 n
-0000206407 00000 n
-0000208175 00000 n
-0000208388 00000 n
-0000209890 00000 n
-0000210112 00000 n
-0000211939 00000 n
-0000212160 00000 n
-0000213818 00000 n
-0000214025 00000 n
-0000215717 00000 n
-0000215933 00000 n
-0000217866 00000 n
-0000218088 00000 n
-0000220101 00000 n
-0000220313 00000 n
-0000222398 00000 n
-0000222601 00000 n
-0000224865 00000 n
-0000225087 00000 n
-0000227289 00000 n
-0000227487 00000 n
-0000229499 00000 n
-0000229687 00000 n
-0000231211 00000 n
-0000231390 00000 n
-0000233382 00000 n
-0000233570 00000 n
-0000235596 00000 n
-0000235784 00000 n
-0000237673 00000 n
-0000237870 00000 n
-0000239597 00000 n
-0000239757 00000 n
-0000240717 00000 n
-0000240911 00000 n
-0000242490 00000 n
-0000242670 00000 n
-0000244440 00000 n
-0000244619 00000 n
-0000245478 00000 n
-0000245657 00000 n
-0000246745 00000 n
-0000246942 00000 n
-0000248441 00000 n
-0000248620 00000 n
-0000249436 00000 n
-0000249666 00000 n
-0000251165 00000 n
-0000251377 00000 n
-0000253130 00000 n
-0000253323 00000 n
-0000254680 00000 n
-0000254841 00000 n
-0000255032 00000 n
-0000255245 00000 n
-0000258192 00000 n
-0000258367 00000 n
-0000260800 00000 n
-0000260975 00000 n
-0000262426 00000 n
-0000262624 00000 n
-0000263986 00000 n
-0000264184 00000 n
-0000265873 00000 n
-0000266061 00000 n
-0000267742 00000 n
-0000267921 00000 n
-0000270023 00000 n
-0000270202 00000 n
-0000271975 00000 n
-0000272154 00000 n
-0000273836 00000 n
-0000274024 00000 n
-0000275878 00000 n
-0000276090 00000 n
-0000278125 00000 n
-0000278338 00000 n
-0000279890 00000 n
-0000280079 00000 n
-0000281352 00000 n
-0000281573 00000 n
-0000283349 00000 n
-0000283555 00000 n
-0000285440 00000 n
-0000285637 00000 n
-0000287222 00000 n
-0000287433 00000 n
-0000288953 00000 n
-0000289141 00000 n
-0000290043 00000 n
-0000290231 00000 n
-0000291757 00000 n
-0000291960 00000 n
-0000293668 00000 n
-0000293871 00000 n
-0000294688 00000 n
-0000294900 00000 n
-0000296378 00000 n
-0000296558 00000 n
-0000297322 00000 n
-0000297553 00000 n
-0000299275 00000 n
-0000299487 00000 n
-0000301413 00000 n
-0000301644 00000 n
-0000303631 00000 n
-0000303853 00000 n
-0000305581 00000 n
-0000305784 00000 n
-0000307057 00000 n
-0000307279 00000 n
-0000308872 00000 n
-0000309051 00000 n
-0000310599 00000 n
-0000310778 00000 n
-0000312395 00000 n
-0000312574 00000 n
-0000313972 00000 n
-0000314151 00000 n
-0000315817 00000 n
-0000315987 00000 n
-0000316733 00000 n
-0000316936 00000 n
-0000318805 00000 n
-0000318965 00000 n
-0000320089 00000 n
-0000320278 00000 n
-0000321971 00000 n
-0000322150 00000 n
-0000323895 00000 n
-0000324083 00000 n
-0000325986 00000 n
-0000326199 00000 n
-0000328064 00000 n
-0000328304 00000 n
-0000330377 00000 n
-0000330589 00000 n
-0000332157 00000 n
-0000332363 00000 n
-0000333527 00000 n
-0000333715 00000 n
-0000334911 00000 n
-0000335090 00000 n
-0000336095 00000 n
-0000336283 00000 n
-0000337910 00000 n
-0000338098 00000 n
-0000339366 00000 n
-0000339555 00000 n
-0000340863 00000 n
-0000341033 00000 n
-0000341506 00000 n
-0000341694 00000 n
-0000343085 00000 n
-0000343273 00000 n
-0000344244 00000 n
-0000344432 00000 n
-0000344981 00000 n
-0000345203 00000 n
-0000347273 00000 n
-0000347486 00000 n
-0000349507 00000 n
-0000349729 00000 n
-0000350940 00000 n
-0000351153 00000 n
-0000352715 00000 n
-0000352937 00000 n
-0000354746 00000 n
-0000354968 00000 n
-0000356688 00000 n
-0000356882 00000 n
-0000357592 00000 n
-0000357795 00000 n
-0000359334 00000 n
-0000359512 00000 n
-0000360197 00000 n
-0000360385 00000 n
-0000361873 00000 n
-0000362052 00000 n
-0000363658 00000 n
-0000363837 00000 n
-0000365507 00000 n
-0000365677 00000 n
-0000367226 00000 n
-0000367396 00000 n
-0000368697 00000 n
-0000368867 00000 n
-0000370493 00000 n
-0000370663 00000 n
-0000372243 00000 n
-0000372439 00000 n
-0000374626 00000 n
-0000374805 00000 n
-0000376332 00000 n
-0000376520 00000 n
-0000377488 00000 n
-0000377684 00000 n
-0000379415 00000 n
-0000379628 00000 n
-0000381310 00000 n
-0000381505 00000 n
-0000383256 00000 n
-0000383469 00000 n
-0000384734 00000 n
-0000384938 00000 n
-0000386675 00000 n
-0000386863 00000 n
-0000388606 00000 n
-0000388785 00000 n
-0000390183 00000 n
-0000390362 00000 n
-0000392059 00000 n
-0000392238 00000 n
-0000393719 00000 n
-0000393898 00000 n
-0000395685 00000 n
-0000395889 00000 n
-0000397540 00000 n
-0000397599 00000 n
-0000397702 00000 n
-0000397867 00000 n
-0000397949 00000 n
-0000398057 00000 n
-0000398180 00000 n
-0000398292 00000 n
-0000398471 00000 n
-0000398580 00000 n
-0000398706 00000 n
-0000398833 00000 n
-0000398972 00000 n
-0000399112 00000 n
-0000399281 00000 n
-0000399398 00000 n
-0000399527 00000 n
-0000399679 00000 n
-0000399819 00000 n
-0000399997 00000 n
-0000400153 00000 n
-0000400266 00000 n
-0000400383 00000 n
-0000400518 00000 n
-0000400659 00000 n
-0000400774 00000 n
-0000400885 00000 n
-0000401061 00000 n
-0000401172 00000 n
-0000401302 00000 n
-0000401425 00000 n
-0000401591 00000 n
-0000401707 00000 n
-0000401836 00000 n
-0000401975 00000 n
-0000402111 00000 n
-0000402246 00000 n
-0000402381 00000 n
-0000402517 00000 n
-0000402628 00000 n
-0000402784 00000 n
-0000402878 00000 n
-0000403087 00000 n
-0000403188 00000 n
-0000403331 00000 n
-0000403477 00000 n
-0000403593 00000 n
-0000403760 00000 n
-0000403872 00000 n
-0000404063 00000 n
-0000404166 00000 n
-0000404339 00000 n
-0000404460 00000 n
-0000404590 00000 n
-0000404702 00000 n
-0000404826 00000 n
-0000404938 00000 n
-0000405144 00000 n
-0000405255 00000 n
-0000405370 00000 n
-0000405514 00000 n
-0000405722 00000 n
-0000405856 00000 n
-0000406010 00000 n
-0000406135 00000 n
-0000406266 00000 n
-0000406399 00000 n
-0000406530 00000 n
-0000406705 00000 n
-0000406840 00000 n
-0000406993 00000 n
-0000407138 00000 n
-0000407363 00000 n
-0000407474 00000 n
-0000407589 00000 n
-0000407782 00000 n
-0000407925 00000 n
-0000408041 00000 n
-0000408186 00000 n
-0000408343 00000 n
-0000408460 00000 n
-0000408637 00000 n
-0000408771 00000 n
-0000408919 00000 n
-0000409037 00000 n
-0000409167 00000 n
-0000409337 00000 n
-0000409431 00000 n
-0000409558 00000 n
-0000409685 00000 n
-0000409781 00000 n
-0000409958 00000 n
-0000410084 00000 n
-0000410219 00000 n
-0000410352 00000 n
-0000410479 00000 n
-0000410591 00000 n
-0000410783 00000 n
-0000410881 00000 n
-0000411067 00000 n
-0000411171 00000 n
-0000411295 00000 n
-0000411417 00000 n
-0000411529 00000 n
-0000411725 00000 n
-0000411841 00000 n
-0000411965 00000 n
-0000412083 00000 n
-0000412201 00000 n
-0000412306 00000 n
-0000412495 00000 n
-0000412718 00000 n
-0000412857 00000 n
-0000413020 00000 n
-0000413157 00000 n
-0000413260 00000 n
-0000413466 00000 n
-0000413625 00000 n
-0000413773 00000 n
-0000413901 00000 n
-0000414082 00000 n
-0000414192 00000 n
-0000414307 00000 n
-0000414452 00000 n
-0000414616 00000 n
-0000414766 00000 n
-0000414984 00000 n
-0000415089 00000 n
-0000415221 00000 n
-0000415342 00000 n
-0000415549 00000 n
-0000415677 00000 n
-0000415762 00000 n
-0000415928 00000 n
-0000416032 00000 n
-0000416189 00000 n
-0000416300 00000 n
-0000416445 00000 n
-0000416587 00000 n
-0000416737 00000 n
-0000416854 00000 n
-0000417018 00000 n
-0000417129 00000 n
-0000417269 00000 n
-0000417396 00000 n
-0000417513 00000 n
-0000417652 00000 n
-0000417758 00000 n
-0000417892 00000 n
-0000418024 00000 n
-0000418169 00000 n
-0000418296 00000 n
-0000418428 00000 n
-0000418558 00000 n
-0000418683 00000 n
-0000418791 00000 n
-0000418956 00000 n
-0000419060 00000 n
-0000419196 00000 n
-0000419402 00000 n
-0000419502 00000 n
-0000419620 00000 n
-0000419785 00000 n
-0000419876 00000 n
-0000420037 00000 n
-0000420163 00000 n
-0000420290 00000 n
-0000420430 00000 n
-0000420566 00000 n
-0000420674 00000 n
-0000420848 00000 n
-0000420954 00000 n
-0000421074 00000 n
-0000421186 00000 n
-0000421303 00000 n
-0000421405 00000 n
-0000421574 00000 n
-0000421674 00000 n
-0000421791 00000 n
-0000421944 00000 n
-0000422074 00000 n
-0000422241 00000 n
-0000422341 00000 n
-0000422438 00000 n
-0000422658 00000 n
-0000422757 00000 n
-0000422875 00000 n
-0000423003 00000 n
-0000423161 00000 n
-0000423332 00000 n
-0000423448 00000 n
-0000423559 00000 n
-0000423695 00000 n
-0000423826 00000 n
-0000423974 00000 n
-0000424119 00000 n
-0000424220 00000 n
-0000424408 00000 n
-0000424512 00000 n
-0000424665 00000 n
-0000424776 00000 n
-0000424884 00000 n
-0000425015 00000 n
-0000425190 00000 n
-0000425293 00000 n
-0000425444 00000 n
-0000425546 00000 n
-0000425668 00000 n
-0000425800 00000 n
-0000425920 00000 n
-0000426035 00000 n
-0000426149 00000 n
-0000426262 00000 n
-0000426379 00000 n
-0000426494 00000 n
-0000426610 00000 n
-0000426725 00000 n
-0000426841 00000 n
-0000426963 00000 n
-0000427084 00000 n
-0000427203 00000 n
-0000427321 00000 n
-0000427441 00000 n
-0000427544 00000 n
-0000427658 00000 n
-0000427819 00000 n
-0000427915 00000 n
-0000428029 00000 n
-0000428139 00000 n
-0000428256 00000 n
-0000428434 00000 n
-0000428544 00000 n
-0000428698 00000 n
-0000428867 00000 n
-0000429055 00000 n
-0000429236 00000 n
-0000429392 00000 n
-0000429558 00000 n
-0000429690 00000 n
-0000429837 00000 n
-0000429976 00000 n
-0000430096 00000 n
-0000430217 00000 n
-0000430336 00000 n
-0000430500 00000 n
-0000430604 00000 n
-0000430722 00000 n
-0000430840 00000 n
-0000430961 00000 n
-0000431097 00000 n
-0000431196 00000 n
-0000431360 00000 n
-0000431464 00000 n
-0000431581 00000 n
-0000431731 00000 n
-0000431831 00000 n
-0000431945 00000 n
-0000432059 00000 n
-0000432173 00000 n
-0000432287 00000 n
-0000432401 00000 n
-0000432515 00000 n
-0000432629 00000 n
-0000432743 00000 n
-0000432859 00000 n
-0000432961 00000 n
-0000433075 00000 n
+0000094042 00000 n
+0000095270 00000 n
+0000095431 00000 n
+0000095600 00000 n
+0000095793 00000 n
+0000099543 00000 n
+0000099737 00000 n
+0000104352 00000 n
+0000104546 00000 n
+0000108569 00000 n
+0000108763 00000 n
+0000113380 00000 n
+0000113574 00000 n
+0000117795 00000 n
+0000117989 00000 n
+0000119664 00000 n
+0000119825 00000 n
+0000120059 00000 n
+0000120263 00000 n
+0000122791 00000 n
+0000122975 00000 n
+0000126362 00000 n
+0000126537 00000 n
+0000129670 00000 n
+0000129845 00000 n
+0000132915 00000 n
+0000133090 00000 n
+0000135611 00000 n
+0000135823 00000 n
+0000136979 00000 n
+0000137167 00000 n
+0000138688 00000 n
+0000138885 00000 n
+0000140321 00000 n
+0000140536 00000 n
+0000141901 00000 n
+0000142080 00000 n
+0000143667 00000 n
+0000143837 00000 n
+0000145392 00000 n
+0000145571 00000 n
+0000147005 00000 n
+0000147184 00000 n
+0000148897 00000 n
+0000149076 00000 n
+0000150624 00000 n
+0000150803 00000 n
+0000152493 00000 n
+0000152696 00000 n
+0000154500 00000 n
+0000154698 00000 n
+0000156059 00000 n
+0000156257 00000 n
+0000157941 00000 n
+0000158129 00000 n
+0000159802 00000 n
+0000159981 00000 n
+0000162081 00000 n
+0000162260 00000 n
+0000164033 00000 n
+0000164212 00000 n
+0000165892 00000 n
+0000166080 00000 n
+0000167935 00000 n
+0000168147 00000 n
+0000170205 00000 n
+0000170418 00000 n
+0000171985 00000 n
+0000172174 00000 n
+0000173449 00000 n
+0000173637 00000 n
+0000175163 00000 n
+0000175366 00000 n
+0000177092 00000 n
+0000177295 00000 n
+0000178145 00000 n
+0000178357 00000 n
+0000179867 00000 n
+0000180047 00000 n
+0000180805 00000 n
+0000181026 00000 n
+0000182824 00000 n
+0000183030 00000 n
+0000184912 00000 n
+0000185109 00000 n
+0000186695 00000 n
+0000186906 00000 n
+0000188475 00000 n
+0000188663 00000 n
+0000189565 00000 n
+0000189796 00000 n
+0000191666 00000 n
+0000191878 00000 n
+0000193826 00000 n
+0000194057 00000 n
+0000196068 00000 n
+0000196290 00000 n
+0000198170 00000 n
+0000198349 00000 n
+0000199543 00000 n
+0000199765 00000 n
+0000201465 00000 n
+0000201678 00000 n
+0000203611 00000 n
+0000203799 00000 n
+0000204434 00000 n
+0000204613 00000 n
+0000206075 00000 n
+0000206254 00000 n
+0000207570 00000 n
+0000207749 00000 n
+0000209371 00000 n
+0000209550 00000 n
+0000211047 00000 n
+0000211217 00000 n
+0000211561 00000 n
+0000211764 00000 n
+0000213667 00000 n
+0000213827 00000 n
+0000214950 00000 n
+0000215180 00000 n
+0000216704 00000 n
+0000216916 00000 n
+0000218705 00000 n
+0000218898 00000 n
+0000220304 00000 n
+0000220493 00000 n
+0000222184 00000 n
+0000222363 00000 n
+0000224109 00000 n
+0000224297 00000 n
+0000226204 00000 n
+0000226417 00000 n
+0000228302 00000 n
+0000228542 00000 n
+0000230633 00000 n
+0000230845 00000 n
+0000232446 00000 n
+0000232652 00000 n
+0000233813 00000 n
+0000234001 00000 n
+0000235199 00000 n
+0000235378 00000 n
+0000236384 00000 n
+0000236572 00000 n
+0000238199 00000 n
+0000238387 00000 n
+0000239656 00000 n
+0000239845 00000 n
+0000241153 00000 n
+0000241323 00000 n
+0000241795 00000 n
+0000242008 00000 n
+0000243822 00000 n
+0000244035 00000 n
+0000245612 00000 n
+0000245834 00000 n
+0000247653 00000 n
+0000247893 00000 n
+0000249616 00000 n
+0000249823 00000 n
+0000251668 00000 n
+0000251899 00000 n
+0000253789 00000 n
+0000254011 00000 n
+0000255957 00000 n
+0000256169 00000 n
+0000258217 00000 n
+0000258420 00000 n
+0000260754 00000 n
+0000260976 00000 n
+0000263220 00000 n
+0000263427 00000 n
+0000265407 00000 n
+0000265586 00000 n
+0000267144 00000 n
+0000267314 00000 n
+0000269314 00000 n
+0000269502 00000 n
+0000271589 00000 n
+0000271777 00000 n
+0000273588 00000 n
+0000273766 00000 n
+0000275616 00000 n
+0000275776 00000 n
+0000276560 00000 n
+0000276754 00000 n
+0000278355 00000 n
+0000278535 00000 n
+0000280301 00000 n
+0000280480 00000 n
+0000281341 00000 n
+0000281563 00000 n
+0000283699 00000 n
+0000283912 00000 n
+0000285966 00000 n
+0000286188 00000 n
+0000287411 00000 n
+0000287624 00000 n
+0000289221 00000 n
+0000289443 00000 n
+0000291266 00000 n
+0000291488 00000 n
+0000293220 00000 n
+0000293414 00000 n
+0000294140 00000 n
+0000294319 00000 n
+0000295412 00000 n
+0000295609 00000 n
+0000297065 00000 n
+0000297253 00000 n
+0000298143 00000 n
+0000298313 00000 n
+0000299990 00000 n
+0000300169 00000 n
+0000301984 00000 n
+0000302153 00000 n
+0000303993 00000 n
+0000304162 00000 n
+0000305150 00000 n
+0000305329 00000 n
+0000306977 00000 n
+0000307165 00000 n
+0000308656 00000 n
+0000308844 00000 n
+0000310268 00000 n
+0000310438 00000 n
+0000312106 00000 n
+0000312276 00000 n
+0000312833 00000 n
+0000313012 00000 n
+0000314618 00000 n
+0000314797 00000 n
+0000316467 00000 n
+0000316637 00000 n
+0000318186 00000 n
+0000318356 00000 n
+0000319657 00000 n
+0000319827 00000 n
+0000321453 00000 n
+0000321623 00000 n
+0000323209 00000 n
+0000323404 00000 n
+0000325182 00000 n
+0000325394 00000 n
+0000327117 00000 n
+0000327311 00000 n
+0000329085 00000 n
+0000329297 00000 n
+0000330574 00000 n
+0000330777 00000 n
+0000332350 00000 n
+0000332528 00000 n
+0000333215 00000 n
+0000333418 00000 n
+0000335094 00000 n
+0000335282 00000 n
+0000337014 00000 n
+0000337202 00000 n
+0000338687 00000 n
+0000338866 00000 n
+0000340362 00000 n
+0000340540 00000 n
+0000341199 00000 n
+0000341258 00000 n
+0000341361 00000 n
+0000341526 00000 n
+0000341608 00000 n
+0000341716 00000 n
+0000341895 00000 n
+0000342012 00000 n
+0000342146 00000 n
+0000342281 00000 n
+0000342428 00000 n
+0000342576 00000 n
+0000342753 00000 n
+0000342879 00000 n
+0000343017 00000 n
+0000343177 00000 n
+0000343325 00000 n
+0000343511 00000 n
+0000343667 00000 n
+0000343780 00000 n
+0000343897 00000 n
+0000344032 00000 n
+0000344173 00000 n
+0000344288 00000 n
+0000344399 00000 n
+0000344576 00000 n
+0000344679 00000 n
+0000344795 00000 n
+0000344944 00000 n
+0000345043 00000 n
+0000345156 00000 n
+0000345269 00000 n
+0000345382 00000 n
+0000345495 00000 n
+0000345608 00000 n
+0000345721 00000 n
+0000345834 00000 n
+0000345947 00000 n
+0000346062 00000 n
+0000346163 00000 n
+0000346276 00000 n
+0000346467 00000 n
+0000346564 00000 n
+0000346749 00000 n
+0000346852 00000 n
+0000346975 00000 n
+0000347096 00000 n
+0000347207 00000 n
+0000347402 00000 n
+0000347517 00000 n
+0000347640 00000 n
+0000347757 00000 n
+0000347874 00000 n
+0000347978 00000 n
+0000348166 00000 n
+0000348388 00000 n
+0000348526 00000 n
+0000348688 00000 n
+0000348824 00000 n
+0000348926 00000 n
+0000349143 00000 n
+0000349247 00000 n
+0000349378 00000 n
+0000349498 00000 n
+0000349704 00000 n
+0000349831 00000 n
+0000349915 00000 n
+0000350120 00000 n
+0000350278 00000 n
+0000350425 00000 n
+0000350552 00000 n
+0000350732 00000 n
+0000350841 00000 n
+0000350955 00000 n
+0000351099 00000 n
+0000351262 00000 n
+0000351411 00000 n
+0000351591 00000 n
+0000351694 00000 n
+0000351850 00000 n
+0000351960 00000 n
+0000352104 00000 n
+0000352245 00000 n
+0000352394 00000 n
+0000352510 00000 n
+0000352673 00000 n
+0000352783 00000 n
+0000352922 00000 n
+0000353048 00000 n
+0000353164 00000 n
+0000353293 00000 n
+0000353469 00000 n
+0000353572 00000 n
+0000353703 00000 n
+0000353832 00000 n
+0000353974 00000 n
+0000354098 00000 n
+0000354227 00000 n
+0000354354 00000 n
+0000354476 00000 n
+0000354581 00000 n
+0000354745 00000 n
+0000354848 00000 n
+0000354983 00000 n
+0000355163 00000 n
+0000355290 00000 n
+0000355426 00000 n
+0000355560 00000 n
+0000355766 00000 n
+0000355866 00000 n
+0000355984 00000 n
+0000356149 00000 n
+0000356240 00000 n
+0000356401 00000 n
+0000356527 00000 n
+0000356654 00000 n
+0000356794 00000 n
+0000356930 00000 n
+0000357038 00000 n
+0000357212 00000 n
+0000357318 00000 n
+0000357438 00000 n
+0000357550 00000 n
+0000357667 00000 n
+0000357769 00000 n
+0000357976 00000 n
+0000358088 00000 n
+0000358204 00000 n
+0000358349 00000 n
+0000358558 00000 n
+0000358693 00000 n
+0000358848 00000 n
+0000358974 00000 n
+0000359106 00000 n
+0000359240 00000 n
+0000359372 00000 n
+0000359548 00000 n
+0000359684 00000 n
+0000359838 00000 n
+0000359984 00000 n
+0000360210 00000 n
+0000360322 00000 n
+0000360438 00000 n
+0000360632 00000 n
+0000360776 00000 n
+0000360893 00000 n
+0000361039 00000 n
+0000361197 00000 n
+0000361315 00000 n
+0000361535 00000 n
+0000361634 00000 n
+0000361752 00000 n
+0000361880 00000 n
+0000362038 00000 n
+0000362209 00000 n
+0000362325 00000 n
+0000362436 00000 n
+0000362572 00000 n
+0000362703 00000 n
+0000362851 00000 n
+0000362996 00000 n
+0000363097 00000 n
+0000363291 00000 n
+0000363426 00000 n
+0000363575 00000 n
+0000363694 00000 n
+0000363825 00000 n
+0000363996 00000 n
+0000364091 00000 n
+0000364219 00000 n
+0000364347 00000 n
+0000364444 00000 n
+0000364621 00000 n
+0000364733 00000 n
+0000364864 00000 n
+0000364988 00000 n
+0000365155 00000 n
+0000365272 00000 n
+0000365402 00000 n
+0000365542 00000 n
+0000365679 00000 n
+0000365815 00000 n
+0000365951 00000 n
+0000366088 00000 n
+0000366200 00000 n
+0000366375 00000 n
+0000366478 00000 n
+0000366629 00000 n
+0000366731 00000 n
+0000366853 00000 n
+0000366985 00000 n
+0000367105 00000 n
+0000367220 00000 n
+0000367334 00000 n
+0000367447 00000 n
+0000367564 00000 n
+0000367679 00000 n
+0000367795 00000 n
+0000367910 00000 n
+0000368026 00000 n
+0000368148 00000 n
+0000368269 00000 n
+0000368388 00000 n
+0000368506 00000 n
+0000368626 00000 n
+0000368729 00000 n
+0000368907 00000 n
+0000369017 00000 n
+0000369171 00000 n
+0000369340 00000 n
+0000369528 00000 n
+0000369709 00000 n
+0000369865 00000 n
+0000370031 00000 n
+0000370163 00000 n
+0000370310 00000 n
+0000370449 00000 n
+0000370569 00000 n
+0000370690 00000 n
+0000370809 00000 n
+0000370997 00000 n
+0000371101 00000 n
+0000371254 00000 n
+0000371365 00000 n
+0000371473 00000 n
+0000371637 00000 n
+0000371741 00000 n
+0000371859 00000 n
+0000371977 00000 n
+0000372098 00000 n
+0000372234 00000 n
+0000372333 00000 n
+0000372464 00000 n
+0000372611 00000 n
+0000372707 00000 n
+0000372821 00000 n
+0000372917 00000 n
trailer
-<</Size 1939/Root 1938 0 R/Info 1 0 R/ID[<2961315c0e4068c07caa3948042c9821><2961315c0e4068c07caa3948042c9821>]>>
+<</Size 1599/Root 1598 0 R/Info 1 0 R/ID[<5fb0ca5260e34d5c7c72807d3a63192d><5fb0ca5260e34d5c7c72807d3a63192d>]>>
startxref
-433984
+373598
%%EOF
<!-- Misc -->
<!ENTITY samba.pub.cvshost 'pserver.samba.org'>
-<!ENTITY stdarg.debuglevel '
-<varlistentry>
-<term>-d|--debug=debuglevel</term>
-<listitem>
-<para><replaceable>debuglevel</replaceable> is an integer
-from 0 to 10. The default value if this parameter is
-not specified is zero.</para>
-
-<para>The higher this value, the more detail will be
-logged to the log files about the activities of the
-server. At level 0, only critical errors and serious
-warnings will be logged. Level 1 is a reasonable level for
-day to day running - it generates a small amount of
-information about operations carried out.</para>
-
-<para>Levels above 1 will generate considerable
-amounts of log data, and should only be used when
-investigating a problem. Levels above 3 are designed for
-use only by developers and generate HUGE amounts of log
-data, most of which is extremely cryptic.</para>
-
-<para>Note that specifying this parameter here will
-override the <ulink url="smb.conf.5.html#loglevel">log
-level</ulink> parameter in the <ulink url="smb.conf.5.html">
-<filename>smb.conf(5)</filename></ulink> file.</para>
-</listitem>
-</varlistentry>'>
-
-<!ENTITY stdarg.help '
-<varlistentry>
-<term>-h|--help</term>
-<listitem><para>Print a summary of command line options.
-</para></listitem>
-</varlistentry>'>
-
-<!ENTITY stdarg.configfile '
-<varlistentry>
-<term>-s <configuration file></term>
-<listitem><para>The file specified contains the
-configuration details required by the server. The
-information in this file includes server-specific
-information such as what printcap file to use, as well
-as descriptions of all the services that the server is
-to provide. See <ulink url="smb.conf.5.html"><filename>
-smb.conf(5)</filename></ulink> for more information.
-The default configuration file name is determined at
-compile time.</para></listitem>
-</varlistentry>'>
-
-<!ENTITY stdarg.version '
-<varlistentry>
-<term>-v</term>
-<listitem><para>Prints the version number for
-<command>smbd</command>.</para></listitem>
-</varlistentry>'>
<address><email>jelmer@samba.org</email></address>
</affiliation>
</author>
- <pubdate>$Id: Diagnosis.sgml,v 1.3 2002/11/02 00:20:29 jelmer Exp $</pubdate>
+ <pubdate>$Id: Diagnosis.sgml,v 1.1.2.3 2002/11/22 00:32:23 tpot Exp $</pubdate>
</chapterinfo>
<title>Diagnosing your samba server</title>
<title>Abstract</title>
<para>
-<emphasis>Last Update</emphasis> : $Date: 2002/11/13 15:34:49 $
+<emphasis>Last Update</emphasis> : $Date: 2002/11/22 00:32:23 $
</para>
<para>
If you'd like to work on any of these, please contact jerry@samba.org or jelmer@samba.org.
Outdated docs:
-docs/announce - needs updating before we release 3.0
-docs/history - needs updating (is current up to 1998 - merge with 10year.html)
+docs/OID/allocated-arcs.txt - does this file really belong here?
+docs/OID/samba-oid.mail - does this file really belong here?
+docs/announce - out of date (announces 2.2.0) - should it go away?
+docs/history - needs updating (is current up to 1998 - merge with 10year.html ?)
docs/docbook/devdoc/* - most of these docs are outdated and need updates...
docs/docbook/manpages/net.8.sgml - Still not finished
docs/docbook/manpages/rpcclient.1.sgml - Command documentation might be outdated
docs/docbook/manpages/smb.conf.5.sgml - 'restrict anonymous' isn't documented properly
docs/docbook/projdoc/DOMAIN_MEMBER.sgml - Needs update to 3.0
docs/docbook/projdoc/ADS-HOWTO.sgml - seems outdated (it says we require 'ads server' when in ads mode, though that's not true, according to the manpages...)
+docs/docbook/projdoc/ENCRYPTION.sgml - contains useless old info about smbpasswd
docs/docbook/projdoc/Integrating-with-Windows.sgml - Should slowly go a way. Contains a little bit information about wins, a little bit about domain membership, a little about winbind, etc
docs/docbook/projdoc/NT_Security.sgml - probably outdated
-docs/docbook/projdoc/Diagnosis.sgml - Needs extension and updating
+docs/docbook/projdoc/Diagnosis.sgml - Needs extension
docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml
docs/docbook/projdoc/Printing.sgml - Cups is not documented, smbprint, printing /to/ a windows server... - Kurt Pfeifle
docs/docbook/projdoc/Samba-BDC-HOWTO.sgml - Needs update to 3.0
docs/docbook/projdoc/Samba-LDAP-HOWTO.sgml - Needs update to 3.0
docs/docbook/projdoc/Samba-PDC-HOWTO.sgml - Needs update to 3.0
docs/docbook/projdoc/Speed.sgml - contains outdated and invalid information
-docs/docbook/projdoc/UNIX_INSTALL.sgml - Needs a lot of updating (swat, etc)
-docs/docbook/projdoc/printer_driver2.sgml - still up to date?
+docs/docbook/projdoc/UNIX_INSTALL.sgml - Needs a lot of updating (swat, ADS, PDC, etc)
+docs/docbook/projdoc/printer_driver2.sgml - Needs integration with printing.sgml, still up to date?
+docs/docbook/projdoc/security_level.sgml - information about ads and domain should be added (currently only contains pointers to the ads and domain_member docs)
docs/docbook/projdoc/winbind.sgml - needs documentation for ADS
docs/textdocs/CUPS-PrintingInfo.txt - needs to be converted to sgml - Kurt Pfeifle
docs/textdocs/PROFILES.txt - needs to be converted to sgml
docs/textdocs/RoutedNetworks.txt - still valid, but shouldn't this go into Other_clients.sgml ? This text originally comes from microsoft, what about copyright?
These still need to be checked:
+docs/docbook/manpages/smbd.8.sgml
docs/docbook/manpages/smbmnt.8.sgml
docs/docbook/manpages/smbmount.8.sgml
+docs/docbook/manpages/smbpasswd.8.sgml
+docs/docbook/manpages/smbsh.1.sgml
docs/docbook/manpages/smbspool.8.sgml
+docs/docbook/manpages/smbstatus.1.sgml
docs/docbook/manpages/smbtar.1.sgml
docs/docbook/manpages/smbumount.8.sgml
docs/docbook/manpages/swat.8.sgml
+docs/docbook/manpages/testparm.1.sgml
docs/docbook/manpages/testprns.1.sgml
+docs/docbook/manpages/wbinfo.1.sgml
Stuff that needs to be documented:
-Doc for package maintainers
+Merge the various docs about wins and browsing
Windows NT 4.0 Style Trust Relationship
One Time Migration script from a Windows NT 4.0 PDC to a Samba PDC
ldap passwd sync
-merge the various pdb docs and the doc about encryption
-UNICODE support
-Winbind with samba PDC
http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html
TITLE="Samba FAQ"
HREF="samba-faq.html"><LINK
REL="PREVIOUS"
-TITLE="Configuration problems"
-HREF="config.html"><LINK
+TITLE="Compiling and installing Samba on a Unix host"
+HREF="install.html"><LINK
REL="NEXT"
TITLE="Common errors"
HREF="errors.html"></HEAD
ALIGN="left"
VALIGN="bottom"
><A
-HREF="config.html"
+HREF="install.html"
ACCESSKEY="P"
>Prev</A
></TD
><A
NAME="CLIENTAPP"
></A
->Chapter 4. Specific client application problems</H1
+>Chapter 3. Specific client application problems</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN175"
+NAME="AEN170"
></A
->4.1. MS Office Setup reports "Cannot change properties of '\MSOFFICE\SETUP.INI'"</H1
+>3.1. MS Office Setup reports "Cannot change properties of '\MSOFFICE\SETUP.INI'"</H1
><P
>When installing MS Office on a Samba drive for which you have admin
user permissions, ie. admin users = username, you will find the
><H1
CLASS="SECT1"
><A
-NAME="AEN180"
+NAME="AEN175"
></A
->4.2. How to use a Samba share as an administrative share for MS Office, etc.</H1
+>3.2. How to use a Samba share as an administrative share for MS Office, etc.</H1
><P
>Microsoft Office products can be installed as an administrative installation
from which the application can either be run off the administratively installed
><H1
CLASS="SECT1"
><A
-NAME="AEN195"
+NAME="AEN190"
></A
->4.3. Microsoft Access database opening errors</H1
+>3.3. Microsoft Access database opening errors</H1
><P
>Here are some notes on running MS-Access on a Samba drive from <A
HREF="stefank@esi.com.au"
ALIGN="left"
VALIGN="top"
><A
-HREF="config.html"
+HREF="install.html"
ACCESSKEY="P"
>Prev</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Configuration problems</TD
+>Compiling and installing Samba on a Unix host</TD
><TD
WIDTH="34%"
ALIGN="center"
><A
NAME="ERRORS"
></A
->Chapter 5. Common errors</H1
+>Chapter 4. Common errors</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN206"
+NAME="AEN201"
></A
->5.1. Not listening for calling name</H1
+>4.1. Not listening for calling name</H1
><P
><PRE
CLASS="PROGRAMLISTING"
><H1
CLASS="SECT1"
><A
-NAME="AEN213"
+NAME="AEN208"
></A
->5.2. System Error 1240</H1
+>4.2. System Error 1240</H1
><P
>System error 1240 means that the client is refusing to talk
to a non-encrypting server. Microsoft changed WinNT in service
><H1
CLASS="SECT1"
><A
-NAME="AEN220"
+NAME="AEN215"
></A
->5.3. smbclient ignores -N !</H1
+>4.3. smbclient ignores -N !</H1
><P
><SPAN
CLASS="QUOTE"
><H1
CLASS="SECT1"
><A
-NAME="AEN229"
+NAME="AEN224"
></A
->5.4. The data on the CD-Drive I've shared seems to be corrupted!</H1
+>4.4. The data on the CD-Drive I've shared seems to be corrupted!</H1
><P
>Some OSes (notably Linux) default to auto detection of file type on
cdroms and do cr/lf translation. This is a very bad idea when use with
><H1
CLASS="SECT1"
><A
-NAME="AEN233"
+NAME="AEN228"
></A
->5.5. Why can users access home directories of other users?</H1
+>4.5. Why can users access home directories of other users?</H1
><P
><SPAN
CLASS="QUOTE"
to the definition of the [homes] share, as recommended in
the smb.conf man page.</P
></DIV
-><DIV
-CLASS="SECT1"
-><H1
-CLASS="SECT1"
-><A
-NAME="AEN246"
-></A
->5.6. Until a few minutes after samba has started, clients get the error "Domain Controller Unavailable"</H1
-><P
->A domain controller has to announce on the network who it is. This usually takes a while.</P
-></DIV
></DIV
><DIV
CLASS="NAVFOOTER"
TITLE="General Information"
HREF="general.html"><LINK
REL="NEXT"
-TITLE="Configuration problems"
-HREF="config.html"></HEAD
+TITLE="Specific client application problems"
+HREF="clientapp.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="right"
VALIGN="bottom"
><A
-HREF="config.html"
+HREF="clientapp.html"
ACCESSKEY="N"
>Next</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="config.html"
+HREF="clientapp.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Configuration problems</TD
+>Specific client application problems</TD
></TR
></TABLE
></DIV
></DD
><DT
>3. <A
-HREF="config.html"
->Configuration problems</A
-></DT
-><DD
-><DL
-><DT
->3.1. <A
-HREF="config.html#AEN170"
->I have set 'force user' and samba still makes 'root' the owner of all the files I touch!</A
-></DT
-></DL
-></DD
-><DT
->4. <A
HREF="clientapp.html"
>Specific client application problems</A
></DT
><DD
><DL
><DT
-HREF="clientapp.html#AEN175"
+HREF="clientapp.html#AEN170"
>MS Office Setup reports "Cannot change properties of '\MSOFFICE\SETUP.INI'"</A
></DT
><DT
-HREF="clientapp.html#AEN180"
+HREF="clientapp.html#AEN175"
>How to use a Samba share as an administrative share for MS Office, etc.</A
></DT
><DT
-HREF="clientapp.html#AEN195"
+HREF="clientapp.html#AEN190"
>Microsoft Access database opening errors</A
></DT
></DL
></DD
><DT
HREF="errors.html"
>Common errors</A
></DT
><DD
><DL
><DT
-HREF="errors.html#AEN206"
+HREF="errors.html#AEN201"
>Not listening for calling name</A
></DT
><DT
-HREF="errors.html#AEN213"
+HREF="errors.html#AEN208"
>System Error 1240</A
></DT
><DT
-HREF="errors.html#AEN220"
+HREF="errors.html#AEN215"
>smbclient ignores -N !</A
></DT
><DT
-HREF="errors.html#AEN229"
+HREF="errors.html#AEN224"
>The data on the CD-Drive I've shared seems to be corrupted!</A
></DT
><DT
-HREF="errors.html#AEN233"
+HREF="errors.html#AEN228"
>Why can users access home directories of other users?</A
></DT
-><DT
->5.6. <A
-HREF="errors.html#AEN246"
->Until a few minutes after samba has started, clients get the error "Domain Controller Unavailable"</A
-></DT
></DL
></DD
><DT
HREF="features.html"
>Features</A
></DT
><DD
><DL
><DT
-HREF="features.html#AEN251"
+HREF="features.html#AEN243"
>How can I prevent my samba server from being used to distribute the Nimda worm?</A
></DT
><DT
-HREF="features.html#AEN265"
+HREF="features.html#AEN257"
>How can I use samba as a fax server?</A
></DT
><DD
><DL
><DT
-HREF="features.html#AEN276"
+HREF="features.html#AEN268"
>Tools for printing faxes</A
></DT
><DT
-HREF="features.html#AEN286"
+HREF="features.html#AEN278"
>Making the fax-server</A
></DT
><DT
-HREF="features.html#AEN302"
+HREF="features.html#AEN294"
>Installing the client drivers</A
></DT
><DT
-HREF="features.html#AEN316"
+HREF="features.html#AEN308"
>Example smb.conf</A
></DT
></DL
></DD
><DT
-HREF="features.html#AEN320"
+HREF="features.html#AEN312"
>Samba doesn't work well together with DHCP!</A
></DT
><DT
-HREF="features.html#AEN333"
+HREF="features.html#AEN325"
>How can I assign NetBIOS names to clients with DHCP?</A
></DT
><DT
-HREF="features.html#AEN340"
+HREF="features.html#AEN332"
>How do I convert between unix and dos text formats?</A
></DT
-><DT
->6.6. <A
-HREF="features.html#AEN345"
->Does samba have wins replication support?</A
-></DT
></DL
></DD
></DL
--- /dev/null
+<HTML
+><HEAD
+><TITLE
+>LanMan and NT Password Encryption in Samba 2.x</TITLE
+><META
+NAME="GENERATOR"
+CONTENT="Modular DocBook HTML Stylesheet Version 1.57"></HEAD
+><BODY
+CLASS="ARTICLE"
+BGCOLOR="#FFFFFF"
+TEXT="#000000"
+LINK="#0000FF"
+VLINK="#840084"
+ALINK="#0000FF"
+><DIV
+CLASS="ARTICLE"
+><DIV
+CLASS="TITLEPAGE"
+><H1
+CLASS="TITLE"
+><A
+NAME="PWENCRYPT"
+>LanMan and NT Password Encryption in Samba 2.x</A
+></H1
+><HR></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN3"
+>Introduction</A
+></H1
+><P
+>With the development of LanManager and Windows NT
+ compatible password encryption for Samba, it is now able
+ to validate user connections in exactly the same way as
+ a LanManager or Windows NT server.</P
+><P
+>This document describes how the SMB password encryption
+ algorithm works and what issues there are in choosing whether
+ you want to use it. You should read it carefully, especially
+ the part about security and the "PROS and CONS" section.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN7"
+>How does it work?</A
+></H1
+><P
+>LanManager encryption is somewhat similar to UNIX
+ password encryption. The server uses a file containing a
+ hashed value of a user's password. This is created by taking
+ the user's plaintext password, capitalising it, and either
+ truncating to 14 bytes or padding to 14 bytes with null bytes.
+ This 14 byte value is used as two 56 bit DES keys to encrypt
+ a 'magic' eight byte value, forming a 16 byte value which is
+ stored by the server and client. Let this value be known as
+ the "hashed password".</P
+><P
+>Windows NT encryption is a higher quality mechanism,
+ consisting of doing an MD4 hash on a Unicode version of the user's
+ password. This also produces a 16 byte hash value that is
+ non-reversible.</P
+><P
+>When a client (LanManager, Windows for WorkGroups, Windows
+ 95 or Windows NT) wishes to mount a Samba drive (or use a Samba
+ resource), it first requests a connection and negotiates the
+ protocol that the client and server will use. In the reply to this
+ request the Samba server generates and appends an 8 byte, random
+ value - this is stored in the Samba server after the reply is sent
+ and is known as the "challenge". The challenge is different for
+ every client connection.</P
+><P
+>The client then uses the hashed password (16 byte values
+ described above), appended with 5 null bytes, as three 56 bit
+ DES keys, each of which is used to encrypt the challenge 8 byte
+ value, forming a 24 byte value known as the "response".</P
+><P
+>In the SMB call SMBsessionsetupX (when user level security
+ is selected) or the call SMBtconX (when share level security is
+ selected), the 24 byte response is returned by the client to the
+ Samba server. For Windows NT protocol levels the above calculation
+ is done on both hashes of the user's password and both responses are
+ returned in the SMB call, giving two 24 byte values.</P
+><P
+>The Samba server then reproduces the above calculation, using
+ its own stored value of the 16 byte hashed password (read from the
+ <TT
+CLASS="FILENAME"
+>smbpasswd</TT
+> file - described later) and the challenge
+ value that it kept from the negotiate protocol reply. It then checks
+ to see if the 24 byte value it calculates matches the 24 byte value
+ returned to it from the client.</P
+><P
+>If these values match exactly, then the client knew the
+ correct password (or the 16 byte hashed value - see security note
+ below) and is thus allowed access. If not, then the client did not
+ know the correct password and is denied access.</P
+><P
+>Note that the Samba server never knows or stores the cleartext
+ of the user's password - just the 16 byte hashed values derived from
+ it. Also note that the cleartext password or 16 byte hashed values
+ are never transmitted over the network - thus increasing security.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN18"
+>Important Notes About Security</A
+></H1
+><P
+>The unix and SMB password encryption techniques seem similar
+ on the surface. This similarity is, however, only skin deep. The unix
+ scheme typically sends clear text passwords over the network when
+ logging in. This is bad. The SMB encryption scheme never sends the
+ cleartext password over the network but it does store the 16 byte
+ hashed values on disk. This is also bad. Why? Because the 16 byte hashed
+ values are a "password equivalent". You cannot derive the user's
+ password from them, but they could potentially be used in a modified
+ client to gain access to a server. This would require considerable
+ technical knowledge on behalf of the attacker but is perfectly possible.
+ You should thus treat the smbpasswd file as though it contained the
+ cleartext passwords of all your users. Its contents must be kept
+ secret, and the file should be protected accordingly.</P
+><P
+>Ideally we would like a password scheme which neither requires
+ plain text passwords on the net or on disk. Unfortunately this
+ is not available as Samba is stuck with being compatible with
+ other SMB systems (WinNT, WfWg, Win95 etc). </P
+><DIV
+CLASS="WARNING"
+><P
+></P
+><TABLE
+CLASS="WARNING"
+BORDER="1"
+WIDTH="100%"
+><TR
+><TD
+ALIGN="CENTER"
+><B
+>Warning</B
+></TD
+></TR
+><TR
+><TD
+ALIGN="LEFT"
+><P
+>Note that Windows NT 4.0 Service pack 3 changed the
+ default for permissible authentication so that plaintext
+ passwords are <I
+CLASS="EMPHASIS"
+>never</I
+> sent over the wire.
+ The solution to this is either to switch to encrypted passwords
+ with Samba or edit the Windows NT registry to re-enable plaintext
+ passwords. See the document WinNT.txt for details on how to do
+ this.</P
+><P
+>Other Microsoft operating systems which also exhibit
+ this behavior includes</P
+><P
+></P
+><UL
+><LI
+><P
+>MS DOS Network client 3.0 with
+ the basic network redirector installed</P
+></LI
+><LI
+><P
+>Windows 95 with the network redirector
+ update installed</P
+></LI
+><LI
+><P
+>Windows 98 [se]</P
+></LI
+><LI
+><P
+>Windows 2000</P
+></LI
+></UL
+><P
+><I
+CLASS="EMPHASIS"
+>Note :</I
+>All current release of
+ Microsoft SMB/CIFS clients support authentication via the
+ SMB Challenge/Response mechanism described here. Enabling
+ clear text authentication does not disable the ability
+ of the client to participate in encrypted authentication.</P
+></TD
+></TR
+></TABLE
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN37"
+>Advantages of SMB Encryption</A
+></H2
+><P
+></P
+><UL
+><LI
+><P
+>plain text passwords are not passed across
+ the network. Someone using a network sniffer cannot just
+ record passwords going to the SMB server.</P
+></LI
+><LI
+><P
+>WinNT doesn't like talking to a server
+ that isn't using SMB encrypted passwords. It will refuse
+ to browse the server if the server is also in user level
+ security mode. It will insist on prompting the user for the
+ password on each connection, which is very annoying. The
+ only things you can do to stop this is to use SMB encryption.
+ </P
+></LI
+></UL
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN44"
+>Advantages of non-encrypted passwords</A
+></H2
+><P
+></P
+><UL
+><LI
+><P
+>plain text passwords are not kept
+ on disk. </P
+></LI
+><LI
+><P
+>uses same password file as other unix
+ services such as login and ftp</P
+></LI
+><LI
+><P
+>you are probably already using other
+ services (such as telnet and ftp) which send plain text
+ passwords over the net, so sending them for SMB isn't
+ such a big deal.</P
+></LI
+></UL
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN53"
+><A
+NAME="SMBPASSWDFILEFORMAT"
+></A
+>The smbpasswd file</A
+></H1
+><P
+>In order for Samba to participate in the above protocol
+ it must be able to look up the 16 byte hashed values given a user name.
+ Unfortunately, as the UNIX password value is also a one way hash
+ function (ie. it is impossible to retrieve the cleartext of the user's
+ password given the UNIX hash of it), a separate password file
+ containing this 16 byte value must be kept. To minimise problems with
+ these two password files, getting out of sync, the UNIX <TT
+CLASS="FILENAME"
+> /etc/passwd</TT
+> and the <TT
+CLASS="FILENAME"
+>smbpasswd</TT
+> file,
+ a utility, <B
+CLASS="COMMAND"
+>mksmbpasswd.sh</B
+>, is provided to generate
+ a smbpasswd file from a UNIX <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> file.
+ </P
+><P
+>To generate the smbpasswd file from your <TT
+CLASS="FILENAME"
+>/etc/passwd
+ </TT
+> file use the following command :</P
+><P
+><TT
+CLASS="PROMPT"
+>$ </TT
+><TT
+CLASS="USERINPUT"
+><B
+>cat /etc/passwd | mksmbpasswd.sh
+ > /usr/local/samba/private/smbpasswd</B
+></TT
+></P
+><P
+>If you are running on a system that uses NIS, use</P
+><P
+><TT
+CLASS="PROMPT"
+>$ </TT
+><TT
+CLASS="USERINPUT"
+><B
+>ypcat passwd | mksmbpasswd.sh
+ > /usr/local/samba/private/smbpasswd</B
+></TT
+></P
+><P
+>The <B
+CLASS="COMMAND"
+>mksmbpasswd.sh</B
+> program is found in
+ the Samba source directory. By default, the smbpasswd file is
+ stored in :</P
+><P
+><TT
+CLASS="FILENAME"
+>/usr/local/samba/private/smbpasswd</TT
+></P
+><P
+>The owner of the <TT
+CLASS="FILENAME"
+>/usr/local/samba/private/</TT
+>
+ directory should be set to root, and the permissions on it should
+ be set to 0500 (<B
+CLASS="COMMAND"
+>chmod 500 /usr/local/samba/private</B
+>).
+ </P
+><P
+>Likewise, the smbpasswd file inside the private directory should
+ be owned by root and the permissions on is should be set to 0600
+ (<B
+CLASS="COMMAND"
+>chmod 600 smbpasswd</B
+>).</P
+><P
+>The format of the smbpasswd file is (The line has been
+ wrapped here. It should appear as one entry per line in
+ your smbpasswd file.)</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>username:uid:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:
+ [Account type]:LCT-<last-change-time>:Long name
+ </PRE
+></P
+><P
+>Although only the <TT
+CLASS="REPLACEABLE"
+><I
+>username</I
+></TT
+>,
+ <TT
+CLASS="REPLACEABLE"
+><I
+>uid</I
+></TT
+>, <TT
+CLASS="REPLACEABLE"
+><I
+> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX</I
+></TT
+>,
+ [<TT
+CLASS="REPLACEABLE"
+><I
+>Account type</I
+></TT
+>] and <TT
+CLASS="REPLACEABLE"
+><I
+> last-change-time</I
+></TT
+> sections are significant
+ and are looked at in the Samba code.</P
+><P
+>It is <I
+CLASS="EMPHASIS"
+>VITALLY</I
+> important that there by 32
+ 'X' characters between the two ':' characters in the XXX sections -
+ the smbpasswd and Samba code will fail to validate any entries that
+ do not have 32 characters between ':' characters. The first XXX
+ section is for the Lanman password hash, the second is for the
+ Windows NT version.</P
+><P
+>When the password file is created all users have password entries
+ consisting of 32 'X' characters. By default this disallows any access
+ as this user. When a user has a password set, the 'X' characters change
+ to 32 ascii hexadecimal digits (0-9, A-F). These are an ascii
+ representation of the 16 byte hashed value of a user's password.</P
+><P
+>To set a user to have no password (not recommended), edit the file
+ using vi, and replace the first 11 characters with the ascii text
+ <TT
+CLASS="CONSTANT"
+>"NO PASSWORD"</TT
+> (minus the quotes).</P
+><P
+>For example, to clear the password for user bob, his smbpasswd file
+ entry would look like :</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> bob:100:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U ]:LCT-00000000:Bob's full name:/bobhome:/bobshell
+ </PRE
+></P
+><P
+>If you are allowing users to use the smbpasswd command to set
+ their own passwords, you may want to give users NO PASSWORD initially
+ so they do not have to enter a previous password when changing to their
+ new password (not recommended). In order for you to allow this the
+ <B
+CLASS="COMMAND"
+>smbpasswd</B
+> program must be able to connect to the
+ <B
+CLASS="COMMAND"
+>smbd</B
+> daemon as that user with no password. Enable this
+ by adding the line :</P
+><P
+><B
+CLASS="COMMAND"
+>null passwords = yes</B
+></P
+><P
+>to the [global] section of the smb.conf file (this is why
+ the above scenario is not recommended). Preferably, allocate your
+ users a default password to begin with, so you do not have
+ to enable this on your server.</P
+><P
+><I
+CLASS="EMPHASIS"
+>Note : </I
+>This file should be protected very
+ carefully. Anyone with access to this file can (with enough knowledge of
+ the protocols) gain access to your SMB server. The file is thus more
+ sensitive than a normal unix <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> file.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN105"
+>The smbpasswd Command</A
+></H1
+><P
+>The smbpasswd command maintains the two 32 byte password fields
+ in the smbpasswd file. If you wish to make it similar to the unix
+ <B
+CLASS="COMMAND"
+>passwd</B
+> or <B
+CLASS="COMMAND"
+>yppasswd</B
+> programs,
+ install it in <TT
+CLASS="FILENAME"
+>/usr/local/samba/bin/</TT
+> (or your
+ main Samba binary directory).</P
+><P
+>Note that as of Samba 1.9.18p4 this program <I
+CLASS="EMPHASIS"
+>MUST NOT
+ BE INSTALLED</I
+> setuid root (the new <B
+CLASS="COMMAND"
+>smbpasswd</B
+>
+ code enforces this restriction so it cannot be run this way by
+ accident).</P
+><P
+><B
+CLASS="COMMAND"
+>smbpasswd</B
+> now works in a client-server mode
+ where it contacts the local smbd to change the user's password on its
+ behalf. This has enormous benefits - as follows.</P
+><P
+></P
+><UL
+><LI
+><P
+>smbpasswd no longer has to be setuid root -
+ an enormous range of potential security problems is
+ eliminated.</P
+></LI
+><LI
+><P
+><B
+CLASS="COMMAND"
+>smbpasswd</B
+> now has the capability
+ to change passwords on Windows NT servers (this only works when
+ the request is sent to the NT Primary Domain Controller if you
+ are changing an NT Domain user's password).</P
+></LI
+></UL
+><P
+>To run smbpasswd as a normal user just type :</P
+><P
+><TT
+CLASS="PROMPT"
+>$ </TT
+><TT
+CLASS="USERINPUT"
+><B
+>smbpasswd</B
+></TT
+></P
+><P
+><TT
+CLASS="PROMPT"
+>Old SMB password: </TT
+><TT
+CLASS="USERINPUT"
+><B
+><type old value here -
+ or hit return if there was no old password></B
+></TT
+></P
+><P
+><TT
+CLASS="PROMPT"
+>New SMB Password: </TT
+><TT
+CLASS="USERINPUT"
+><B
+><type new value>
+ </B
+></TT
+></P
+><P
+><TT
+CLASS="PROMPT"
+>Repeat New SMB Password: </TT
+><TT
+CLASS="USERINPUT"
+><B
+><re-type new value
+ </B
+></TT
+></P
+><P
+>If the old value does not match the current value stored for
+ that user, or the two new values do not match each other, then the
+ password will not be changed.</P
+><P
+>If invoked by an ordinary user it will only allow the user
+ to change his or her own Samba password.</P
+><P
+>If run by the root user smbpasswd may take an optional
+ argument, specifying the user name whose SMB password you wish to
+ change. Note that when run as root smbpasswd does not prompt for
+ or check the old password value, thus allowing root to set passwords
+ for users who have forgotten their passwords.</P
+><P
+><B
+CLASS="COMMAND"
+>smbpasswd</B
+> is designed to work in the same way
+ and be familiar to UNIX users who use the <B
+CLASS="COMMAND"
+>passwd</B
+> or
+ <B
+CLASS="COMMAND"
+>yppasswd</B
+> commands.</P
+><P
+>For more details on using <B
+CLASS="COMMAND"
+>smbpasswd</B
+> refer
+ to the man page which will always be the definitive reference.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN144"
+>Setting up Samba to support LanManager Encryption</A
+></H1
+><P
+>This is a very brief description on how to setup samba to
+ support password encryption. </P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+>compile and install samba as usual</P
+></LI
+><LI
+><P
+>enable encrypted passwords in <TT
+CLASS="FILENAME"
+> smb.conf</TT
+> by adding the line <B
+CLASS="COMMAND"
+>encrypt
+ passwords = yes</B
+> in the [global] section</P
+></LI
+><LI
+><P
+>create the initial <TT
+CLASS="FILENAME"
+>smbpasswd</TT
+>
+ password file in the place you specified in the Makefile
+ (--prefix=<dir>). See the notes under the <A
+HREF="#SMBPASSWDFILEFORMAT"
+>The smbpasswd File</A
+>
+ section earlier in the document for details.</P
+></LI
+></OL
+><P
+>Note that you can test things using smbclient.</P
+></DIV
+></DIV
+></BODY
+></HTML
+>
\ No newline at end of file
--- /dev/null
+<HTML
+><HEAD
+><TITLE
+>UNIX Permission Bits and Windows NT Access Control Lists</TITLE
+><META
+NAME="GENERATOR"
+CONTENT="Modular DocBook HTML Stylesheet Version 1.57"></HEAD
+><BODY
+CLASS="ARTICLE"
+BGCOLOR="#FFFFFF"
+TEXT="#000000"
+LINK="#0000FF"
+VLINK="#840084"
+ALINK="#0000FF"
+><DIV
+CLASS="ARTICLE"
+><DIV
+CLASS="TITLEPAGE"
+><H1
+CLASS="TITLE"
+><A
+NAME="UNIX-PERMISSIONS"
+>UNIX Permission Bits and Windows NT Access Control Lists</A
+></H1
+><HR></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN3"
+>Viewing and changing UNIX permissions using the NT
+ security dialogs</A
+></H1
+><P
+>New in the Samba 2.0.4 release is the ability for Windows
+ NT clients to use their native security settings dialog box to
+ view and modify the underlying UNIX permissions.</P
+><P
+>Note that this ability is careful not to compromise
+ the security of the UNIX host Samba is running on, and
+ still obeys all the file permission rules that a Samba
+ administrator can set.</P
+><P
+>In Samba 2.0.4 and above the default value of the
+ parameter <A
+HREF="smb.conf.5.html#NTACLSUPPORT"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+> nt acl support</I
+></TT
+></A
+> has been changed from
+ <TT
+CLASS="CONSTANT"
+>false</TT
+> to <TT
+CLASS="CONSTANT"
+>true</TT
+>, so
+ manipulation of permissions is turned on by default.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN12"
+>How to view file security on a Samba share</A
+></H1
+><P
+>From an NT 4.0 client, single-click with the right
+ mouse button on any file or directory in a Samba mounted
+ drive letter or UNC path. When the menu pops-up, click
+ on the <I
+CLASS="EMPHASIS"
+>Properties</I
+> entry at the bottom of
+ the menu. This brings up the normal file properties dialog
+ box, but with Samba 2.0.4 this will have a new tab along the top
+ marked <I
+CLASS="EMPHASIS"
+>Security</I
+>. Click on this tab and you
+ will see three buttons, <I
+CLASS="EMPHASIS"
+>Permissions</I
+>,
+ <I
+CLASS="EMPHASIS"
+>Auditing</I
+>, and <I
+CLASS="EMPHASIS"
+>Ownership</I
+>.
+ The <I
+CLASS="EMPHASIS"
+>Auditing</I
+> button will cause either
+ an error message <SPAN
+CLASS="ERRORNAME"
+>A requested privilege is not held
+ by the client</SPAN
+> to appear if the user is not the
+ NT Administrator, or a dialog which is intended to allow an
+ Administrator to add auditing requirements to a file if the
+ user is logged on as the NT Administrator. This dialog is
+ non-functional with a Samba share at this time, as the only
+ useful button, the <B
+CLASS="COMMAND"
+>Add</B
+> button will not currently
+ allow a list of users to be seen.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN23"
+>Viewing file ownership</A
+></H1
+><P
+>Clicking on the <B
+CLASS="COMMAND"
+>"Ownership"</B
+> button
+ brings up a dialog box telling you who owns the given file. The
+ owner name will be of the form :</P
+><P
+><B
+CLASS="COMMAND"
+>"SERVER\user (Long name)"</B
+></P
+><P
+>Where <TT
+CLASS="REPLACEABLE"
+><I
+>SERVER</I
+></TT
+> is the NetBIOS name of
+ the Samba server, <TT
+CLASS="REPLACEABLE"
+><I
+>user</I
+></TT
+> is the user name of
+ the UNIX user who owns the file, and <TT
+CLASS="REPLACEABLE"
+><I
+>(Long name)</I
+></TT
+>
+ is the descriptive string identifying the user (normally found in the
+ GECOS field of the UNIX password database). Click on the <B
+CLASS="COMMAND"
+>Close
+ </B
+> button to remove this dialog.</P
+><P
+>If the parameter <TT
+CLASS="PARAMETER"
+><I
+>nt acl support</I
+></TT
+>
+ is set to <TT
+CLASS="CONSTANT"
+>false</TT
+> then the file owner will
+ be shown as the NT user <B
+CLASS="COMMAND"
+>"Everyone"</B
+>.</P
+><P
+>The <B
+CLASS="COMMAND"
+>Take Ownership</B
+> button will not allow
+ you to change the ownership of this file to yourself (clicking on
+ it will display a dialog box complaining that the user you are
+ currently logged onto the NT client cannot be found). The reason
+ for this is that changing the ownership of a file is a privileged
+ operation in UNIX, available only to the <I
+CLASS="EMPHASIS"
+>root</I
+>
+ user. As clicking on this button causes NT to attempt to change
+ the ownership of a file to the current user logged into the NT
+ client this will not work with Samba at this time.</P
+><P
+>There is an NT chown command that will work with Samba
+ and allow a user with Administrator privilege connected
+ to a Samba 2.0.4 server as root to change the ownership of
+ files on both a local NTFS filesystem or remote mounted NTFS
+ or Samba drive. This is available as part of the <I
+CLASS="EMPHASIS"
+>Seclib
+ </I
+> NT security library written by Jeremy Allison of
+ the Samba Team, available from the main Samba ftp site.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN43"
+>Viewing file or directory permissions</A
+></H1
+><P
+>The third button is the <B
+CLASS="COMMAND"
+>"Permissions"</B
+>
+ button. Clicking on this brings up a dialog box that shows both
+ the permissions and the UNIX owner of the file or directory.
+ The owner is displayed in the form :</P
+><P
+><B
+CLASS="COMMAND"
+>"SERVER\user (Long name)"</B
+></P
+><P
+>Where <TT
+CLASS="REPLACEABLE"
+><I
+>SERVER</I
+></TT
+> is the NetBIOS name of
+ the Samba server, <TT
+CLASS="REPLACEABLE"
+><I
+>user</I
+></TT
+> is the user name of
+ the UNIX user who owns the file, and <TT
+CLASS="REPLACEABLE"
+><I
+>(Long name)</I
+></TT
+>
+ is the descriptive string identifying the user (normally found in the
+ GECOS field of the UNIX password database).</P
+><P
+>If the parameter <TT
+CLASS="PARAMETER"
+><I
+>nt acl support</I
+></TT
+>
+ is set to <TT
+CLASS="CONSTANT"
+>false</TT
+> then the file owner will
+ be shown as the NT user <B
+CLASS="COMMAND"
+>"Everyone"</B
+> and the
+ permissions will be shown as NT "Full Control".</P
+><P
+>The permissions field is displayed differently for files
+ and directories, so I'll describe the way file permissions
+ are displayed first.</P
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN58"
+>File Permissions</A
+></H2
+><P
+>The standard UNIX user/group/world triple and
+ the corresponding "read", "write", "execute" permissions
+ triples are mapped by Samba into a three element NT ACL
+ with the 'r', 'w', and 'x' bits mapped into the corresponding
+ NT permissions. The UNIX world permissions are mapped into
+ the global NT group <B
+CLASS="COMMAND"
+>Everyone</B
+>, followed
+ by the list of permissions allowed for UNIX world. The UNIX
+ owner and group permissions are displayed as an NT
+ <B
+CLASS="COMMAND"
+>user</B
+> icon and an NT <B
+CLASS="COMMAND"
+>local
+ group</B
+> icon respectively followed by the list
+ of permissions allowed for the UNIX user and group.</P
+><P
+>As many UNIX permission sets don't map into common
+ NT names such as <B
+CLASS="COMMAND"
+>"read"</B
+>, <B
+CLASS="COMMAND"
+> "change"</B
+> or <B
+CLASS="COMMAND"
+>"full control"</B
+> then
+ usually the permissions will be prefixed by the words <B
+CLASS="COMMAND"
+> "Special Access"</B
+> in the NT display list.</P
+><P
+>But what happens if the file has no permissions allowed
+ for a particular UNIX user group or world component ? In order
+ to allow "no permissions" to be seen and modified then Samba
+ overloads the NT <B
+CLASS="COMMAND"
+>"Take Ownership"</B
+> ACL attribute
+ (which has no meaning in UNIX) and reports a component with
+ no permissions as having the NT <B
+CLASS="COMMAND"
+>"O"</B
+> bit set.
+ This was chosen of course to make it look like a zero, meaning
+ zero permissions. More details on the decision behind this will
+ be given below.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN72"
+>Directory Permissions</A
+></H2
+><P
+>Directories on an NT NTFS file system have two
+ different sets of permissions. The first set of permissions
+ is the ACL set on the directory itself, this is usually displayed
+ in the first set of parentheses in the normal <B
+CLASS="COMMAND"
+>"RW"</B
+>
+ NT style. This first set of permissions is created by Samba in
+ exactly the same way as normal file permissions are, described
+ above, and is displayed in the same way.</P
+><P
+>The second set of directory permissions has no real meaning
+ in the UNIX permissions world and represents the <B
+CLASS="COMMAND"
+> "inherited"</B
+> permissions that any file created within
+ this directory would inherit.</P
+><P
+>Samba synthesises these inherited permissions for NT by
+ returning as an NT ACL the UNIX permission mode that a new file
+ created by Samba on this share would receive.</P
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN79"
+>Modifying file or directory permissions</A
+></H1
+><P
+>Modifying file and directory permissions is as simple
+ as changing the displayed permissions in the dialog box, and
+ clicking the <B
+CLASS="COMMAND"
+>OK</B
+> button. However, there are
+ limitations that a user needs to be aware of, and also interactions
+ with the standard Samba permission masks and mapping of DOS
+ attributes that need to also be taken into account.</P
+><P
+>If the parameter <TT
+CLASS="PARAMETER"
+><I
+>nt acl support</I
+></TT
+>
+ is set to <TT
+CLASS="CONSTANT"
+>false</TT
+> then any attempt to set
+ security permissions will fail with an <B
+CLASS="COMMAND"
+>"Access Denied"
+ </B
+> message.</P
+><P
+>The first thing to note is that the <B
+CLASS="COMMAND"
+>"Add"</B
+>
+ button will not return a list of users in Samba 2.0.4 (it will give
+ an error message of <B
+CLASS="COMMAND"
+>"The remote procedure call failed
+ and did not execute"</B
+>). This means that you can only
+ manipulate the current user/group/world permissions listed in
+ the dialog box. This actually works quite well as these are the
+ only permissions that UNIX actually has.</P
+><P
+>If a permission triple (either user, group, or world)
+ is removed from the list of permissions in the NT dialog box,
+ then when the <B
+CLASS="COMMAND"
+>"OK"</B
+> button is pressed it will
+ be applied as "no permissions" on the UNIX side. If you then
+ view the permissions again the "no permissions" entry will appear
+ as the NT <B
+CLASS="COMMAND"
+>"O"</B
+> flag, as described above. This
+ allows you to add permissions back to a file or directory once
+ you have removed them from a triple component.</P
+><P
+>As UNIX supports only the "r", "w" and "x" bits of
+ an NT ACL then if other NT security attributes such as "Delete
+ access" are selected then they will be ignored when applied on
+ the Samba server.</P
+><P
+>When setting permissions on a directory the second
+ set of permissions (in the second set of parentheses) is
+ by default applied to all files within that directory. If this
+ is not what you want you must uncheck the <B
+CLASS="COMMAND"
+>"Replace
+ permissions on existing files"</B
+> checkbox in the NT
+ dialog before clicking <B
+CLASS="COMMAND"
+>"OK"</B
+>.</P
+><P
+>If you wish to remove all permissions from a
+ user/group/world component then you may either highlight the
+ component and click the <B
+CLASS="COMMAND"
+>"Remove"</B
+> button,
+ or set the component to only have the special <B
+CLASS="COMMAND"
+>"Take
+ Ownership"</B
+> permission (displayed as <B
+CLASS="COMMAND"
+>"O"
+ </B
+>) highlighted.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN101"
+>Interaction with the standard Samba create mask
+ parameters</A
+></H1
+><P
+>Note that with Samba 2.0.5 there are four new parameters
+ to control this interaction. These are :</P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>security mask</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>force security mode</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>directory security mask</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>force directory security mode</I
+></TT
+></P
+><P
+>Once a user clicks <B
+CLASS="COMMAND"
+>"OK"</B
+> to apply the
+ permissions Samba maps the given permissions into a user/group/world
+ r/w/x triple set, and then will check the changed permissions for a
+ file against the bits set in the <A
+HREF="smb.conf.5.html#SECURITYMASK"
+TARGET="_top"
+>
+ <TT
+CLASS="PARAMETER"
+><I
+>security mask</I
+></TT
+></A
+> parameter. Any bits that
+ were changed that are not set to '1' in this parameter are left alone
+ in the file permissions.</P
+><P
+>Essentially, zero bits in the <TT
+CLASS="PARAMETER"
+><I
+>security mask</I
+></TT
+>
+ mask may be treated as a set of bits the user is <I
+CLASS="EMPHASIS"
+>not</I
+>
+ allowed to change, and one bits are those the user is allowed to change.
+ </P
+><P
+>If not set explicitly this parameter is set to the same value as
+ the <A
+HREF="smb.conf.5.html#CREATEMASK"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>create mask
+ </I
+></TT
+></A
+> parameter to provide compatibility with Samba 2.0.4
+ where this permission change facility was introduced. To allow a user to
+ modify all the user/group/world permissions on a file, set this parameter
+ to 0777.</P
+><P
+>Next Samba checks the changed permissions for a file against
+ the bits set in the <A
+HREF="smb.conf.5.html#FORCESECURITYMODE"
+TARGET="_top"
+> <TT
+CLASS="PARAMETER"
+><I
+>force security mode</I
+></TT
+></A
+> parameter. Any bits
+ that were changed that correspond to bits set to '1' in this parameter
+ are forced to be set.</P
+><P
+>Essentially, bits set in the <TT
+CLASS="PARAMETER"
+><I
+>force security mode
+ </I
+></TT
+> parameter may be treated as a set of bits that, when
+ modifying security on a file, the user has always set to be 'on'.</P
+><P
+>If not set explicitly this parameter is set to the same value
+ as the <A
+HREF="smb.conf.5.html#FORCECREATEMODE"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>force
+ create mode</I
+></TT
+></A
+> parameter to provide compatibility
+ with Samba 2.0.4 where the permission change facility was introduced.
+ To allow a user to modify all the user/group/world permissions on a file
+ with no restrictions set this parameter to 000.</P
+><P
+>The <TT
+CLASS="PARAMETER"
+><I
+>security mask</I
+></TT
+> and <TT
+CLASS="PARAMETER"
+><I
+>force
+ security mode</I
+></TT
+> parameters are applied to the change
+ request in that order.</P
+><P
+>For a directory Samba will perform the same operations as
+ described above for a file except using the parameter <TT
+CLASS="PARAMETER"
+><I
+> directory security mask</I
+></TT
+> instead of <TT
+CLASS="PARAMETER"
+><I
+>security
+ mask</I
+></TT
+>, and <TT
+CLASS="PARAMETER"
+><I
+>force directory security mode
+ </I
+></TT
+> parameter instead of <TT
+CLASS="PARAMETER"
+><I
+>force security mode
+ </I
+></TT
+>.</P
+><P
+>The <TT
+CLASS="PARAMETER"
+><I
+>directory security mask</I
+></TT
+> parameter
+ by default is set to the same value as the <TT
+CLASS="PARAMETER"
+><I
+>directory mask
+ </I
+></TT
+> parameter and the <TT
+CLASS="PARAMETER"
+><I
+>force directory security
+ mode</I
+></TT
+> parameter by default is set to the same value as
+ the <TT
+CLASS="PARAMETER"
+><I
+>force directory mode</I
+></TT
+> parameter to provide
+ compatibility with Samba 2.0.4 where the permission change facility
+ was introduced.</P
+><P
+>In this way Samba enforces the permission restrictions that
+ an administrator can set on a Samba share, whilst still allowing users
+ to modify the permission bits within that restriction.</P
+><P
+>If you want to set up a share that allows users full control
+ in modifying the permission bits on their files and directories and
+ doesn't force any particular bits to be set 'on', then set the following
+ parameters in the <A
+HREF="smb.conf.5.html"
+TARGET="_top"
+><TT
+CLASS="FILENAME"
+>smb.conf(5)
+ </TT
+></A
+> file in that share specific section :</P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>security mask = 0777</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>force security mode = 0</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>directory security mask = 0777</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>force directory security mode = 0</I
+></TT
+></P
+><P
+>As described, in Samba 2.0.4 the parameters :</P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>create mask</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>force create mode</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>directory mask</I
+></TT
+></P
+><P
+><TT
+CLASS="PARAMETER"
+><I
+>force directory mode</I
+></TT
+></P
+><P
+>were used instead of the parameters discussed here.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN165"
+>Interaction with the standard Samba file attribute
+ mapping</A
+></H1
+><P
+>Samba maps some of the DOS attribute bits (such as "read
+ only") into the UNIX permissions of a file. This means there can
+ be a conflict between the permission bits set via the security
+ dialog and the permission bits set by the file attribute mapping.
+ </P
+><P
+>One way this can show up is if a file has no UNIX read access
+ for the owner it will show up as "read only" in the standard
+ file attributes tabbed dialog. Unfortunately this dialog is
+ the same one that contains the security info in another tab.</P
+><P
+>What this can mean is that if the owner changes the permissions
+ to allow themselves read access using the security dialog, clicks
+ <B
+CLASS="COMMAND"
+>"OK"</B
+> to get back to the standard attributes tab
+ dialog, and then clicks <B
+CLASS="COMMAND"
+>"OK"</B
+> on that dialog, then
+ NT will set the file permissions back to read-only (as that is what
+ the attributes still say in the dialog). This means that after setting
+ permissions and clicking <B
+CLASS="COMMAND"
+>"OK"</B
+> to get back to the
+ attributes dialog you should always hit <B
+CLASS="COMMAND"
+>"Cancel"</B
+>
+ rather than <B
+CLASS="COMMAND"
+>"OK"</B
+> to ensure that your changes
+ are not overridden.</P
+></DIV
+></DIV
+></BODY
+></HTML
+>
\ No newline at end of file
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
<HTML
><HEAD
><TITLE
>SAMBA Developers Guide</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
+"></HEAD
><BODY
CLASS="BOOK"
BGCOLOR="#FFFFFF"
><DIV
CLASS="BOOK"
><A
-NAME="SAMBA-DEVELOPERS-GUIDE"
-></A
-><DIV
+NAME="SAMBA-DEVELOPER-DOCUMENTATION"><DIV
CLASS="TITLEPAGE"
><H1
CLASS="TITLE"
><A
-NAME="SAMBA-DEVELOPERS-GUIDE"
-></A
->SAMBA Developers Guide</H1
+NAME="SAMBA-DEVELOPER-DOCUMENTATION">SAMBA Developers Guide</H1
><H3
CLASS="AUTHOR"
><A
-NAME="AEN4"
-></A
->SAMBA Team</H3
+NAME="AEN4">SAMBA Team</H3
><HR></DIV
><HR><H1
><A
-NAME="AEN8"
-></A
->Abstract</H1
+NAME="AEN8">Abstract</H1
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Last Update</I
-></SPAN
> : Mon Sep 30 15:23:53 CDT 2002</P
><P
>This book is a collection of documents that might be useful for
>Table of Contents</B
></DT
><DT
+><A
HREF="#NETBIOS"
>Definition of NetBIOS Protocol and Name Resolution Modes</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN24"
>NETBIOS</A
></DT
><DT
+><A
HREF="#AEN35"
>BROADCAST NetBIOS</A
></DT
><DT
+><A
HREF="#AEN39"
>NBNS NetBIOS</A
></DT
></DL
></DD
><DT
+><A
HREF="#ARCHITECTURE"
>Samba Architecture</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN54"
>Introduction</A
></DT
><DT
+><A
HREF="#AEN65"
>Multithreading and Samba</A
></DT
><DT
+><A
HREF="#AEN70"
>Threading smbd</A
></DT
><DT
+><A
HREF="#AEN86"
>Threading nmbd</A
></DT
><DT
+><A
HREF="#AEN92"
>nbmd Design</A
></DT
></DL
></DD
><DT
+><A
HREF="#DEBUG"
>The samba DEBUG system</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN103"
>New Output Syntax</A
></DT
><DT
+><A
HREF="#AEN128"
>The DEBUG() Macro</A
></DT
><DT
+><A
HREF="#AEN151"
>The DEBUGADD() Macro</A
></DT
><DT
+><A
HREF="#AEN159"
>The DEBUGLVL() Macro</A
></DT
><DT
+><A
HREF="#AEN179"
>New Functions</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN181"
>dbgtext()</A
></DT
><DT
+><A
HREF="#AEN184"
>dbghdr()</A
></DT
><DT
+><A
HREF="#AEN188"
>format_debug_text()</A
></DT
></DL
></DD
><DT
+><A
HREF="#CODINGSUGGESTIONS"
>Coding Suggestions</A
></DT
><DT
+><A
HREF="#INTERNALS"
>Samba Internals</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN284"
>Character Handling</A
></DT
><DT
+><A
HREF="#AEN288"
>The new functions</A
></DT
><DT
+><A
HREF="#AEN317"
>Macros in byteorder.h</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN320"
>CVAL(buf,pos)</A
></DT
><DT
+><A
HREF="#AEN323"
>PVAL(buf,pos)</A
></DT
><DT
+><A
HREF="#AEN326"
>SCVAL(buf,pos,val)</A
></DT
><DT
+><A
HREF="#AEN329"
>SVAL(buf,pos)</A
></DT
><DT
+><A
HREF="#AEN332"
>IVAL(buf,pos)</A
></DT
><DT
+><A
HREF="#AEN335"
>SVALS(buf,pos)</A
></DT
><DT
+><A
HREF="#AEN338"
>IVALS(buf,pos)</A
></DT
><DT
+><A
HREF="#AEN341"
>SSVAL(buf,pos,val)</A
></DT
><DT
+><A
HREF="#AEN344"
>SIVAL(buf,pos,val)</A
></DT
><DT
+><A
HREF="#AEN347"
>SSVALS(buf,pos,val)</A
></DT
><DT
+><A
HREF="#AEN350"
>SIVALS(buf,pos,val)</A
></DT
><DT
+><A
HREF="#AEN353"
>RSVAL(buf,pos)</A
></DT
><DT
+><A
HREF="#AEN356"
>RIVAL(buf,pos)</A
></DT
><DT
+><A
HREF="#AEN359"
>RSSVAL(buf,pos,val)</A
></DT
><DT
+><A
HREF="#AEN362"
>RSIVAL(buf,pos,val)</A
></DT
></DL
></DD
><DT
+><A
HREF="#AEN365"
>LAN Manager Samba API</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN371"
>Parameters</A
></DT
><DT
+><A
HREF="#AEN406"
>Return value</A
></DT
></DL
></DD
><DT
+><A
HREF="#AEN420"
>Code character table</A
></DT
></DL
></DD
><DT
+><A
HREF="#PARSING"
>The smb.conf file</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN451"
>Lexical Analysis</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN472"
>Handling of Whitespace</A
></DT
><DT
+><A
HREF="#AEN484"
>Handling of Line Continuation</A
></DT
><DT
+><A
HREF="#AEN495"
>Line Continuation Quirks</A
></DT
></DL
></DD
><DT
+><A
HREF="#AEN515"
>Syntax</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN530"
>About params.c</A
></DT
></DL
></DD
><DT
+><A
HREF="#UNIX-SMB"
>NetBIOS in a Unix World</A
></DT
><DD
><DL
><DT
+><A
HREF="#AEN540"
>Introduction</A
></DT
><DT
+><A
HREF="#AEN544"
>Usernames</A
></DT
><DT
+><A
HREF="#AEN552"
>File Ownership</A
></DT
><DT
+><A
HREF="#AEN557"
>Passwords</A
></DT
><DT
+><A
HREF="#AEN563"
>Locking</A
></DT
><DT
-HREF="#AEN571"
+><A
+HREF="#AEN570"
>Deny Modes</A
></DT
><DT
-HREF="#AEN575"
+><A
+HREF="#AEN574"
>Trapdoor UIDs</A
></DT
><DT
-HREF="#AEN579"
+><A
+HREF="#AEN578"
>Port numbers</A
></DT
><DT
-HREF="#AEN584"
+><A
+HREF="#AEN583"
>Protocol Complexity</A
></DT
></DL
></DD
><DT
+><A
HREF="#TRACING"
>Tracing samba system calls</A
></DT
><DT
+><A
HREF="#NTDOMAIN"
>NT Domain RPC's</A
></DT
><DD
><DL
><DT
-HREF="#AEN652"
+><A
+HREF="#AEN651"
>Introduction</A
></DT
><DD
><DL
><DT
-HREF="#AEN688"
+><A
+HREF="#AEN687"
>Sources</A
></DT
><DT
-HREF="#AEN695"
+><A
+HREF="#AEN694"
>Credits</A
></DT
></DL
></DD
><DT
-HREF="#AEN702"
+><A
+HREF="#AEN701"
>Notes and Structures</A
></DT
><DD
><DL
><DT
-HREF="#AEN704"
+><A
+HREF="#AEN703"
>Notes</A
></DT
><DT
-HREF="#AEN717"
+><A
+HREF="#AEN716"
>Enumerations</A
></DT
><DT
-HREF="#AEN775"
+><A
+HREF="#AEN774"
>Structures</A
></DT
></DL
></DD
><DT
-HREF="#AEN1571"
+><A
+HREF="#AEN1570"
>MSRPC over Transact Named Pipe</A
></DT
><DD
><DL
><DT
-HREF="#AEN1574"
+><A
+HREF="#AEN1573"
>MSRPC Pipes</A
></DT
><DT
-HREF="#AEN1588"
+><A
+HREF="#AEN1587"
>Header</A
></DT
><DT
-HREF="#AEN1842"
+><A
+HREF="#AEN1841"
>Tail</A
></DT
><DT
-HREF="#AEN1854"
+><A
+HREF="#AEN1853"
>RPC Bind / Bind Ack</A
></DT
><DT
-HREF="#AEN1898"
+><A
+HREF="#AEN1897"
>NTLSA Transact Named Pipe</A
></DT
><DT
-HREF="#AEN1939"
+><A
+HREF="#AEN1938"
>LSA Open Policy</A
></DT
><DT
-HREF="#AEN1973"
+><A
+HREF="#AEN1972"
>LSA Query Info Policy</A
></DT
><DT
-HREF="#AEN2001"
+><A
+HREF="#AEN2000"
>LSA Enumerate Trusted Domains</A
></DT
><DT
-HREF="#AEN2025"
+><A
+HREF="#AEN2024"
>LSA Open Secret</A
></DT
><DT
-HREF="#AEN2054"
+><A
+HREF="#AEN2053"
>LSA Close</A
></DT
><DT
-HREF="#AEN2071"
+><A
+HREF="#AEN2070"
>LSA Lookup SIDS</A
></DT
><DT
-HREF="#AEN2130"
+><A
+HREF="#AEN2129"
>LSA Lookup Names</A
></DT
></DL
></DD
><DT
-HREF="#AEN2193"
+><A
+HREF="#AEN2192"
>NETLOGON rpc Transact Named Pipe</A
></DT
><DD
><DL
><DT
-HREF="#AEN2232"
+><A
+HREF="#AEN2231"
>LSA Request Challenge</A
></DT
><DT
-HREF="#AEN2267"
+><A
+HREF="#AEN2266"
>LSA Authenticate 2</A
></DT
><DT
-HREF="#AEN2306"
+><A
+HREF="#AEN2305"
>LSA Server Password Set</A
></DT
><DT
-HREF="#AEN2335"
+><A
+HREF="#AEN2334"
>LSA SAM Logon</A
></DT
><DT
-HREF="#AEN2359"
+><A
+HREF="#AEN2358"
>LSA SAM Logoff</A
></DT
></DL
></DD
><DT
-HREF="#AEN2382"
+><A
+HREF="#AEN2381"
>\\MAILSLOT\NET\NTLOGON</A
></DT
><DD
><DL
><DT
-HREF="#AEN2386"
+><A
+HREF="#AEN2385"
>Query for PDC</A
></DT
><DT
-HREF="#AEN2460"
+><A
+HREF="#AEN2459"
>SAM Logon</A
></DT
></DL
></DD
><DT
-HREF="#AEN2550"
+><A
+HREF="#AEN2549"
>SRVSVC Transact Named Pipe</A
></DT
><DD
><DL
><DT
-HREF="#AEN2562"
+><A
+HREF="#AEN2561"
>Net Share Enum</A
></DT
><DT
-HREF="#AEN2623"
+><A
+HREF="#AEN2622"
>Net Server Get Info</A
></DT
></DL
></DD
><DT
-HREF="#AEN2654"
+><A
+HREF="#AEN2653"
>Cryptographic side of NT Domain Authentication</A
></DT
><DD
><DL
><DT
-HREF="#AEN2656"
+><A
+HREF="#AEN2655"
>Definitions</A
></DT
><DT
-HREF="#AEN2699"
+><A
+HREF="#AEN2698"
>Protocol</A
></DT
><DT
-HREF="#AEN2709"
+><A
+HREF="#AEN2708"
>Comments</A
></DT
></DL
></DD
><DT
-HREF="#AEN2716"
+><A
+HREF="#AEN2715"
>SIDs and RIDs</A
></DT
><DD
><DL
><DT
-HREF="#AEN2724"
+><A
+HREF="#AEN2723"
>Well-known SIDs</A
></DT
><DT
-HREF="#AEN2812"
+><A
+HREF="#AEN2811"
>Well-known RIDS</A
></DT
></DL
></DL
></DD
><DT
+><A
HREF="#PRINTING"
>Samba Printing Internals</A
></DT
><DD
><DL
><DT
-HREF="#AEN2896"
+><A
+HREF="#AEN2895"
>Abstract</A
></DT
><DT
-HREF="#AEN2899"
+><A
+HREF="#AEN2898"
>Printing Interface to Various Back ends</A
></DT
><DT
-HREF="#AEN2925"
+><A
+HREF="#AEN2924"
>Print Queue TDB's</A
></DT
><DT
-HREF="#AEN2959"
+><A
+HREF="#AEN2958"
>ChangeID & Client Caching of Printer Information</A
></DT
><DT
-HREF="#AEN2962"
+><A
+HREF="#AEN2961"
>Windows NT/2K Printer Change Notify</A
></DT
></DL
></DD
><DT
+><A
HREF="#WINS"
>Samba WINS Internals</A
></DT
><DD
><DL
><DT
->11.1. <A
-HREF="#AEN3033"
->WINS Failover</A
-></DT
-></DL
-></DD
-><DT
->12. <A
-HREF="#SAM"
->The Upcoming SAM System</A
-></DT
-><DD
-><DL
-><DT
->12.1. <A
-HREF="#AEN3054"
->Security in the 'new SAM'</A
-></DT
-><DT
->12.2. <A
-HREF="#AEN3071"
->Standalone from UNIX</A
-></DT
-><DT
->12.3. <A
-HREF="#AEN3075"
->Handles and Races in the new SAM</A
-></DT
-><DT
->12.4. <A
-HREF="#AEN3086"
->Layers</A
-></DT
-><DD
-><DL
-><DT
->12.4.1. <A
-HREF="#AEN3088"
->Application</A
-></DT
-><DT
->12.4.2. <A
-HREF="#AEN3091"
->SAM Interface</A
-></DT
-><DT
->12.4.3. <A
-HREF="#AEN3095"
->SAM Modules</A
-></DT
-></DL
-></DD
-><DT
->12.5. <A
-HREF="#AEN3098"
->SAM Modules</A
-></DT
-><DD
-><DL
-><DT
->12.5.1. <A
-HREF="#AEN3100"
->Special Module: sam_passdb</A
-></DT
-><DT
->12.5.2. <A
-HREF="#AEN3103"
->sam_ads</A
-></DT
-></DL
-></DD
-><DT
->12.6. <A
-HREF="#AEN3107"
->Memory Management</A
-></DT
-><DT
->12.7. <A
-HREF="#AEN3121"
->Testing</A
-></DT
-></DL
-></DD
-><DT
->13. <A
-HREF="#PWENCRYPT"
->LanMan and NT Password Encryption</A
-></DT
-><DD
-><DL
-><DT
->13.1. <A
-HREF="#AEN3147"
->Introduction</A
-></DT
-><DT
->13.2. <A
-HREF="#AEN3151"
->How does it work?</A
-></DT
-><DT
->13.3. <A
-HREF="#AEN3162"
><A
-NAME="SMBPASSWDFILEFORMAT"
-></A
->The smbpasswd file</A
+HREF="#AEN3032"
+>WINS Failover</A
></DT
></DL
></DD
CLASS="CHAPTER"
><HR><H1
><A
-NAME="NETBIOS"
-></A
->Chapter 1. Definition of NetBIOS Protocol and Name Resolution Modes</H1
+NAME="NETBIOS">Definition of NetBIOS Protocol and Name Resolution Modes</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN24"
-></A
->1.1. NETBIOS</H2
+NAME="AEN24">NETBIOS</H2
><P
>NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX.
Samba only uses NetBIOS over TCP/IP. For details on the TCP/IP NetBIOS
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN35"
-></A
->1.2. BROADCAST NetBIOS</H2
+NAME="AEN35">BROADCAST NetBIOS</H2
><P
>
Clients can claim names, and therefore offer services on successfully claimed
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN39"
-></A
->1.3. NBNS NetBIOS</H2
+NAME="AEN39">NBNS NetBIOS</H2
><P
>rfc1001.txt describes, amongst other things, the implementation and use
of, a 'NetBIOS Name Service'. NT/AS offers 'Windows Internet Name Service'
CLASS="CHAPTER"
><HR><H1
><A
-NAME="ARCHITECTURE"
-></A
->Chapter 2. Samba Architecture</H1
+NAME="ARCHITECTURE">Samba Architecture</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN54"
-></A
->2.1. Introduction</H2
+NAME="AEN54">Introduction</H2
><P
>This document gives a general overview of how Samba works
internally. The Samba Team has tried to come up with a model which is
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN65"
-></A
->2.2. Multithreading and Samba</H2
+NAME="AEN65">Multithreading and Samba</H2
><P
>People sometimes tout threads as a uniformly good thing. They are very
nice in their place but are quite inappropriate for smbd. nmbd is
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN70"
-></A
->2.3. Threading smbd</H2
+NAME="AEN70">Threading smbd</H2
><P
>A few problems that would arise from a threaded smbd are:</P
><P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN86"
-></A
->2.4. Threading nmbd</H2
+NAME="AEN86">Threading nmbd</H2
><P
>This would be ideal, but gets sunk by portability requirements.</P
><P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN92"
-></A
->2.5. nbmd Design</H2
+NAME="AEN92">nbmd Design</H2
><P
>Originally Andrew used recursion to simulate a multi-threaded
environment, which use the stack enormously and made for really
CLASS="CHAPTER"
><HR><H1
><A
-NAME="DEBUG"
-></A
->Chapter 3. The samba DEBUG system</H1
+NAME="DEBUG">The samba DEBUG system</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN103"
-></A
->3.1. New Output Syntax</H2
+NAME="AEN103">New Output Syntax</H2
><P
> The syntax of a debugging log file is represented as:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
-> >debugfile< :== { >debugmsg< }
+> >debugfile< :== { >debugmsg< }
- >debugmsg< :== >debughdr< '\n' >debugtext<
+ >debugmsg< :== >debughdr< '\n' >debugtext<
- >debughdr< :== '[' TIME ',' LEVEL ']' FILE ':' [FUNCTION] '(' LINE ')'
+ >debughdr< :== '[' TIME ',' LEVEL ']' FILE ':' [FUNCTION] '(' LINE ')'
- >debugtext< :== { >debugline< }
+ >debugtext< :== { >debugline< }
- >debugline< :== TEXT '\n'</PRE
+ >debugline< :== TEXT '\n'</PRE
+></TD
+></TR
+></TABLE
></P
><P
>TEXT is a string of characters excluding the newline character.</P
><P
>Here's some example output:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> [1998/08/03 12:55:25, 1] nmbd.c:(659)
Copyright Andrew Tridgell 1994-1997
[1998/08/03 12:55:25, 3] loadparm.c:(763)
Initializing global parameters</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Note that in the above example the function names are not listed on
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN128"
-></A
->3.2. The DEBUG() Macro</H2
+NAME="AEN128">The DEBUG() Macro</H2
><P
>Use of the DEBUG() macro is unchanged. DEBUG() takes two parameters.
The first is the message level, the second is the body of a function
><P
>Here's an example which may help a bit. If you would write</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>printf( "This is a %s message.\n", "debug" );</PRE
+></TD
+></TR
+></TABLE
></P
><P
>to send the output to stdout, then you would write</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>DEBUG( 0, ( "This is a %s message.\n", "debug" ) );</PRE
+></TD
+></TR
+></TABLE
></P
><P
>to send the output to the debug file. All of the normal printf()
><P
>The output of the above example would be something like:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> [1998/07/30 16:00:51, 0] file.c:function(128)
This is a debug message.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Each call to DEBUG() creates a new header *unless* the output produced
DEBUG() has been used to write partial lines. Here's a simple (dumb)
example of the kind of thing I'm talking about:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> DEBUG( 0, ("The test returned " ) );
else
DEBUG(0, ("False") );
DEBUG(0, (".\n") );</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Without the format buffer, the output (assuming test() returned true)
would look like this:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> [1998/07/30 16:00:51, 0] file.c:function(256)
True
[1998/07/30 16:00:51, 0] file.c:function(261)
.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Which isn't much use. The format buffer kludge fixes this problem.</P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN151"
-></A
->3.3. The DEBUGADD() Macro</H2
+NAME="AEN151">The DEBUGADD() Macro</H2
><P
>In addition to the kludgey solution to the broken line problem
described above, there is a clean solution. The DEBUGADD() macro never
message even if the format buffer is empty. The syntax of the
DEBUGADD() macro is the same as that of the DEBUG() macro.</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> DEBUG( 0, ("This is the first line.\n" ) );
DEBUGADD( 0, ("This is the second line.\nThis is the third line.\n" ) );</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Produces</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> [1998/07/30 16:00:51, 0] file.c:function(512)
This is the first line.
This is the second line.
This is the third line.</PRE
+></TD
+></TR
+></TABLE
></P
></DIV
><DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN159"
-></A
->3.4. The DEBUGLVL() Macro</H2
+NAME="AEN159">The DEBUGLVL() Macro</H2
><P
>One of the problems with the DEBUG() macro was that DEBUG() lines
tended to get a bit long. Consider this example from
nmbd_sendannounce.c:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> DEBUG(3,("send_local_master_announcement: type %x for name %s on subnet %s for workgroup %s\n",
type, global_myname, subrec->subnet_name, work->work_group));</PRE
+></TD
+></TR
+></TABLE
></P
><P
>One solution to this is to break it down using DEBUG() and DEBUGADD(),
as follows:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> DEBUG( 3, ( "send_local_master_announcement: " ) );
DEBUGADD( 3, ( "type %x for name %s ", type, global_myname ) );
DEBUGADD( 3, ( "on subnet %s ", subrec->subnet_name ) );
DEBUGADD( 3, ( "for workgroup %s\n", work->work_group ) );</PRE
+></TD
+></TR
+></TABLE
></P
><P
>A similar, but arguably nicer approach is to use the DEBUGLVL() macro.
This macro returns True if the message level is less than or equal to
the global DEBUGLEVEL value, so:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> if( DEBUGLVL( 3 ) )
dbgtext( "on subnet %s ", subrec->subnet_name );
dbgtext( "for workgroup %s\n", work->work_group );
}</PRE
+></TD
+></TR
+></TABLE
></P
><P
>(The dbgtext() function is explained below.)</P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN179"
-></A
->3.5. New Functions</H2
+NAME="AEN179">New Functions</H2
><DIV
CLASS="SECT2"
><H3
CLASS="SECT2"
><A
-NAME="AEN181"
-></A
->3.5.1. dbgtext()</H3
+NAME="AEN181">dbgtext()</H3
><P
>This function prints debug message text to the debug file (and
possibly to syslog) via the format buffer. The function uses a
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN184"
-></A
->3.5.2. dbghdr()</H3
+NAME="AEN184">dbghdr()</H3
><P
>This is the function that writes a debug message header.
Headers are not processed via the format buffer. Also note that
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN188"
-></A
->3.5.3. format_debug_text()</H3
+NAME="AEN188">format_debug_text()</H3
><P
>This is a static function in debug.c. It stores the output text
for the body of the message in a buffer until it encounters a
CLASS="CHAPTER"
><HR><H1
><A
-NAME="CODINGSUGGESTIONS"
-></A
->Chapter 4. Coding Suggestions</H1
+NAME="CODINGSUGGESTIONS">Coding Suggestions</H1
><P
>So you want to add code to Samba ...</P
><P
CLASS="CHAPTER"
><HR><H1
><A
-NAME="INTERNALS"
-></A
->Chapter 5. Samba Internals</H1
+NAME="INTERNALS">Samba Internals</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN284"
-></A
->5.1. Character Handling</H2
+NAME="AEN284">Character Handling</H2
><P
>This section describes character set handling in Samba, as implemented in
Samba 3.0 and above</P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN288"
-></A
->5.2. The new functions</H2
+NAME="AEN288">The new functions</H2
><P
>The new system works like this:</P
><P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN317"
-></A
->5.3. Macros in byteorder.h</H2
+NAME="AEN317">Macros in byteorder.h</H2
><P
>This section describes the macros defined in byteorder.h. These macros
are used extensively in the Samba code.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN320"
-></A
->5.3.1. CVAL(buf,pos)</H3
+NAME="AEN320">CVAL(buf,pos)</H3
><P
>returns the byte at offset pos within buffer buf as an unsigned character.</P
></DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN323"
-></A
->5.3.2. PVAL(buf,pos)</H3
+NAME="AEN323">PVAL(buf,pos)</H3
><P
>returns the value of CVAL(buf,pos) cast to type unsigned integer.</P
></DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN326"
-></A
->5.3.3. SCVAL(buf,pos,val)</H3
+NAME="AEN326">SCVAL(buf,pos,val)</H3
><P
>sets the byte at offset pos within buffer buf to value val.</P
></DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN329"
-></A
->5.3.4. SVAL(buf,pos)</H3
+NAME="AEN329">SVAL(buf,pos)</H3
><P
> returns the value of the unsigned short (16 bit) little-endian integer at
offset pos within buffer buf. An integer of this type is sometimes
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN332"
-></A
->5.3.5. IVAL(buf,pos)</H3
+NAME="AEN332">IVAL(buf,pos)</H3
><P
>returns the value of the unsigned 32 bit little-endian integer at offset
pos within buffer buf.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN335"
-></A
->5.3.6. SVALS(buf,pos)</H3
+NAME="AEN335">SVALS(buf,pos)</H3
><P
>returns the value of the signed short (16 bit) little-endian integer at
offset pos within buffer buf.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN338"
-></A
->5.3.7. IVALS(buf,pos)</H3
+NAME="AEN338">IVALS(buf,pos)</H3
><P
>returns the value of the signed 32 bit little-endian integer at offset pos
within buffer buf.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN341"
-></A
->5.3.8. SSVAL(buf,pos,val)</H3
+NAME="AEN341">SSVAL(buf,pos,val)</H3
><P
>sets the unsigned short (16 bit) little-endian integer at offset pos within
buffer buf to value val.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN344"
-></A
->5.3.9. SIVAL(buf,pos,val)</H3
+NAME="AEN344">SIVAL(buf,pos,val)</H3
><P
>sets the unsigned 32 bit little-endian integer at offset pos within buffer
buf to the value val.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN347"
-></A
->5.3.10. SSVALS(buf,pos,val)</H3
+NAME="AEN347">SSVALS(buf,pos,val)</H3
><P
>sets the short (16 bit) signed little-endian integer at offset pos within
buffer buf to the value val.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN350"
-></A
->5.3.11. SIVALS(buf,pos,val)</H3
+NAME="AEN350">SIVALS(buf,pos,val)</H3
><P
>sets the signed 32 bit little-endian integer at offset pos withing buffer
buf to the value val.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN353"
-></A
->5.3.12. RSVAL(buf,pos)</H3
+NAME="AEN353">RSVAL(buf,pos)</H3
><P
>returns the value of the unsigned short (16 bit) big-endian integer at
offset pos within buffer buf.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN356"
-></A
->5.3.13. RIVAL(buf,pos)</H3
+NAME="AEN356">RIVAL(buf,pos)</H3
><P
>returns the value of the unsigned 32 bit big-endian integer at offset
pos within buffer buf.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN359"
-></A
->5.3.14. RSSVAL(buf,pos,val)</H3
+NAME="AEN359">RSSVAL(buf,pos,val)</H3
><P
>sets the value of the unsigned short (16 bit) big-endian integer at
offset pos within buffer buf to value val.
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN362"
-></A
->5.3.15. RSIVAL(buf,pos,val)</H3
+NAME="AEN362">RSIVAL(buf,pos,val)</H3
><P
>sets the value of the unsigned 32 bit big-endian integer at offset
pos within buffer buf to value val.</P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN365"
-></A
->5.4. LAN Manager Samba API</H2
+NAME="AEN365">LAN Manager Samba API</H2
><P
>This section describes the functions need to make a LAN Manager RPC call.
This information had been obtained by examining the Samba code and the LAN
Manager 2.0 API documentation. It should not be considered entirely
reliable.</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>call_api(int prcnt, int drcnt, int mprcnt, int mdrcnt,
char *param, char *data, char **rparam, char **rdata);</PRE
+></TD
+></TR
+></TABLE
></P
><P
>This function is defined in client.c. It uses an SMB transaction to call a
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN371"
-></A
->5.4.1. Parameters</H3
+NAME="AEN371">Parameters</H3
><P
>The parameters are as follows:</P
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN406"
-></A
->5.4.2. Return value</H3
+NAME="AEN406">Return value</H3
><P
>The returned parameters (pointed to by rparam), in their order of appearance
are:</P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN420"
-></A
->5.5. Code character table</H2
+NAME="AEN420">Code character table</H2
><P
>Certain data structures are described by means of ASCIIz strings containing
code characters. These are the code characters:</P
CLASS="CHAPTER"
><HR><H1
><A
-NAME="PARSING"
-></A
->Chapter 6. The smb.conf file</H1
+NAME="PARSING">The smb.conf file</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN451"
-></A
->6.1. Lexical Analysis</H2
+NAME="AEN451">Lexical Analysis</H2
><P
>Basically, the file is processed on a line by line basis. There are
four types of lines that are recognized by the lexical analyzer
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN472"
-></A
->6.1.1. Handling of Whitespace</H3
+NAME="AEN472">Handling of Whitespace</H3
><P
>Whitespace is defined as all characters recognized by the isspace()
function (see ctype(3C)) except for the newline character ('\n')
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN484"
-></A
->6.1.2. Handling of Line Continuation</H3
+NAME="AEN484">Handling of Line Continuation</H3
><P
>Long section header and parameter lines may be extended across
multiple lines by use of the backslash character ('\\'). Line
(logically) concatonated with the current line by the lexical
analyzer. For example:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> param name = parameter value string \
with line continuation.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Would be read as</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> param name = parameter value string with line continuation.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Note that there are five spaces following the word 'string',
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN495"
-></A
->6.1.3. Line Continuation Quirks</H3
+NAME="AEN495">Line Continuation Quirks</H3
><P
>Note the following example:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> param name = parameter value string \
\
with line continuation.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>The middle line is *not* parsed as a blank line because it is first
concatonated with the top line. The result is</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>param name = parameter value string with line continuation.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>The same is true for comment lines.</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> param name = parameter value string \
; comment \
with a comment.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>This becomes:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>param name = parameter value string ; comment with a comment.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>On a section header line, the closing bracket (']') is considered a
terminating character, and the rest of the line is ignored. The lines</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> [ section name ] garbage \
param name = value</PRE
+></TD
+></TR
+></TABLE
></P
><P
>are read as</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> [section name]
param name = value</PRE
+></TD
+></TR
+></TABLE
></P
></DIV
></DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN515"
-></A
->6.2. Syntax</H2
+NAME="AEN515">Syntax</H2
><P
>The syntax of the smb.conf file is as follows:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
-> <file> :== { <section> } EOF
- <section> :== <section header> { <parameter line> }
- <section header> :== '[' NAME ']'
- <parameter line> :== NAME '=' VALUE NL</PRE
+> <file> :== { <section> } EOF
+ <section> :== <section header> { <parameter line> }
+ <section header> :== '[' NAME ']'
+ <parameter line> :== NAME '=' VALUE NL</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Basically, this means that</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN530"
-></A
->6.2.1. About params.c</H3
+NAME="AEN530">About params.c</H3
><P
>The parsing of the config file is a bit unusual if you are used to
lex, yacc, bison, etc. Both lexical analysis (scanning) and parsing
CLASS="CHAPTER"
><HR><H1
><A
-NAME="UNIX-SMB"
-></A
->Chapter 7. NetBIOS in a Unix World</H1
+NAME="UNIX-SMB">NetBIOS in a Unix World</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN540"
-></A
->7.1. Introduction</H2
+NAME="AEN540">Introduction</H2
><P
>This is a short document that describes some of the issues that
confront a SMB implementation on unix, and how Samba copes with
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN544"
-></A
->7.2. Usernames</H2
+NAME="AEN544">Usernames</H2
><P
>The SMB protocol has only a loose username concept. Early SMB
protocols (such as CORE and COREPLUS) have no username concept at
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN552"
-></A
->7.3. File Ownership</H2
+NAME="AEN552">File Ownership</H2
><P
>The commonly used SMB protocols have no way of saying "you can't do
that because you don't own the file". They have, in fact, no concept
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN557"
-></A
->7.4. Passwords</H2
+NAME="AEN557">Passwords</H2
><P
>Many SMB clients uppercase passwords before sending them. I have no
idea why they do this. Interestingly WfWg uppercases the password only
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN563"
-></A
->7.5. Locking</H2
-><P
->Since samba 2.2, samba supports other types of locking as well. This
-section is outdated.</P
+NAME="AEN563">Locking</H2
><P
>The locking calls available under a DOS/Windows environment are much
richer than those available in unix. This means a unix server (like
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN571"
-></A
->7.6. Deny Modes</H2
+NAME="AEN570">Deny Modes</H2
><P
>When a SMB client opens a file it asks for a particular "deny mode" to
be placed on the file. These modes (DENY_NONE, DENY_READ, DENY_WRITE,
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN575"
-></A
->7.7. Trapdoor UIDs</H2
+NAME="AEN574">Trapdoor UIDs</H2
><P
>A SMB session can run with several uids on the one socket. This
happens when a user connects to two shares with different
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN579"
-></A
->7.8. Port numbers</H2
+NAME="AEN578">Port numbers</H2
><P
>There is a convention that clients on sockets use high "unprivilaged"
port numbers (>1000) and connect to servers on low "privilaged" port
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN584"
-></A
->7.9. Protocol Complexity</H2
+NAME="AEN583">Protocol Complexity</H2
><P
>There are many "protocol levels" in the SMB protocol. It seems that
each time new functionality was added to a Microsoft operating system,
CLASS="CHAPTER"
><HR><H1
><A
-NAME="TRACING"
-></A
->Chapter 8. Tracing samba system calls</H1
+NAME="TRACING">Tracing samba system calls</H1
><P
>This file describes how to do a system call trace on Samba to work out
what its doing wrong. This is not for the faint of heart, but if you
hello</B
> output is:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>write(1, "hello\n", 6) = 6</PRE
+></TD
+></TR
+></TABLE
></P
><P
>all the rest is just setting up to run the program.</P
> is not world writeable, which
causes printing to fail with Samba:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>[pid 28268] open("/dev/null", O_RDWR) = -1 EACCES (Permission denied)
[pid 28268] open("/dev/null", O_WRONLY) = -1 EACCES (Permission denied)</PRE
+></TD
+></TR
+></TABLE
></P
><P
>The process is trying to first open <TT
CLASS="CHAPTER"
><HR><H1
><A
-NAME="NTDOMAIN"
-></A
->Chapter 9. NT Domain RPC's</H1
+NAME="NTDOMAIN">NT Domain RPC's</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN652"
-></A
->9.1. Introduction</H2
+NAME="AEN651">Introduction</H2
><P
>This document contains information to provide an NT workstation with login
services, without the need for an NT server. It is the sgml version of <A
>HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters</TT
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Incorrect direct editing of the registry can cause your
machine to fail. Then again, so can incorrect implementation of this
protocol. See "Liability:" above.</I
-></SPAN
></P
><P
>Bear in mind that each packet over-the-wire will have its origin in an
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN688"
-></A
->9.1.1. Sources</H3
+NAME="AEN687">Sources</H3
><P
></P
><TABLE
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN695"
-></A
->9.1.2. Credits</H3
+NAME="AEN694">Credits</H3
><P
></P
><TABLE
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN702"
-></A
->9.2. Notes and Structures</H2
+NAME="AEN701">Notes and Structures</H2
><DIV
CLASS="SECT2"
><H3
CLASS="SECT2"
><A
-NAME="AEN704"
-></A
->9.2.1. Notes</H3
+NAME="AEN703">Notes</H3
><P
></P
><OL
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN717"
-></A
->9.2.2. Enumerations</H3
+NAME="AEN716">Enumerations</H3
><DIV
CLASS="SECT3"
><H4
CLASS="SECT3"
><A
-NAME="AEN719"
-></A
->9.2.2.1. MSRPC Header type</H4
+NAME="AEN718">MSRPC Header type</H4
><P
>command number in the msrpc packet header</P
><P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN739"
-></A
->9.2.2.2. MSRPC Packet info</H4
+NAME="AEN738">MSRPC Packet info</H4
><P
>The meaning of these flags is undocumented</P
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN775"
-></A
->9.2.3. Structures</H3
+NAME="AEN774">Structures</H3
><DIV
CLASS="SECT3"
><H4
CLASS="SECT3"
><A
-NAME="AEN777"
-></A
->9.2.3.1. VOID *</H4
+NAME="AEN776">VOID *</H4
><P
>sizeof VOID* is 32 bits.</P
></DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN780"
-></A
->9.2.3.2. char</H4
+NAME="AEN779">char</H4
><P
>sizeof char is 8 bits.</P
></DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN783"
-></A
->9.2.3.3. UTIME</H4
+NAME="AEN782">UTIME</H4
><P
>UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).</P
></DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN786"
-></A
->9.2.3.4. NTTIME</H4
+NAME="AEN785">NTTIME</H4
><P
>NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).</P
></DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN789"
-></A
->9.2.3.5. DOM_SID (domain SID structure)</H4
+NAME="AEN788">DOM_SID (domain SID structure)</H4
><P
></P
><DIV
></DL
></DIV
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: the domain SID is documented elsewhere.</I
-></SPAN
></P
></DIV
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN814"
-></A
->9.2.3.6. STR (string)</H4
+NAME="AEN813">STR (string)</H4
><P
>STR (string) is a char[] : a null-terminated string of ascii characters.</P
></DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN817"
-></A
->9.2.3.7. UNIHDR (unicode string header)</H4
+NAME="AEN816">UNIHDR (unicode string header)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN832"
-></A
->9.2.3.8. UNIHDR2 (unicode string header plus buffer pointer)</H4
+NAME="AEN831">UNIHDR2 (unicode string header plus buffer pointer)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN843"
-></A
->9.2.3.9. UNISTR (unicode string)</H4
+NAME="AEN842">UNISTR (unicode string)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN850"
-></A
->9.2.3.10. NAME (length-indicated unicode string)</H4
+NAME="AEN849">NAME (length-indicated unicode string)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN861"
-></A
->9.2.3.11. UNISTR2 (aligned unicode string)</H4
+NAME="AEN860">UNISTR2 (aligned unicode string)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN884"
-></A
->9.2.3.12. OBJ_ATTR (object attributes)</H4
+NAME="AEN883">OBJ_ATTR (object attributes)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN911"
-></A
->9.2.3.13. POL_HND (LSA policy handle)</H4
+NAME="AEN910">POL_HND (LSA policy handle)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN918"
-></A
->9.2.3.14. DOM_SID2 (domain SID structure, SIDS stored in unicode)</H4
+NAME="AEN917">DOM_SID2 (domain SID structure, SIDS stored in unicode)</H4
><P
></P
><DIV
></DL
></DIV
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.</I
-></SPAN
></P
></DIV
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN941"
-></A
->9.2.3.15. DOM_RID (domain RID structure)</H4
+NAME="AEN940">DOM_RID (domain RID structure)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN960"
-></A
->9.2.3.16. LOG_INFO (server, account, client structure)</H4
+NAME="AEN959">LOG_INFO (server, account, client structure)</H4
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: logon server name starts with two '\' characters and is upper case.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.</I
-></SPAN
></P
><P
></P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN987"
-></A
->9.2.3.17. CLNT_SRV (server, client names structure)</H4
+NAME="AEN986">CLNT_SRV (server, client names structure)</H4
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: logon server name starts with two '\' characters and is upper case.</I
-></SPAN
></P
><P
></P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1008"
-></A
->9.2.3.18. CREDS (credentials + time stamp)</H4
+NAME="AEN1007">CREDS (credentials + time stamp)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1019"
-></A
->9.2.3.19. CLNT_INFO2 (server, client structure, client credentials)</H4
+NAME="AEN1018">CLNT_INFO2 (server, client structure, client credentials)</H4
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to
maintain an authenticated request/response trail.</I
-></SPAN
></P
><P
></P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1040"
-></A
->9.2.3.20. CLNT_INFO (server, account, client structure, client credentials)</H4
+NAME="AEN1039">CLNT_INFO (server, account, client structure, client credentials)</H4
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.</I
-></SPAN
></P
><P
></P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1053"
-></A
->9.2.3.21. ID_INFO_1 (id info structure, auth level 1)</H4
+NAME="AEN1052">ID_INFO_1 (id info structure, auth level 1)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1100"
-></A
->9.2.3.22. SAM_INFO (sam logon/logoff id info structure)</H4
+NAME="AEN1099">SAM_INFO (sam logon/logoff id info structure)</H4
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.</I
-></SPAN
></P
><P
></P
></DL
></DIV
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> switch (switch_value)
{
ID_INFO_1 id_info_1;
}</PRE
+></TD
+></TR
+></TABLE
></P
></DIV
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1127"
-></A
->9.2.3.23. GID (group id info)</H4
+NAME="AEN1126">GID (group id info)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1138"
-></A
->9.2.3.24. DOM_REF (domain reference info)</H4
+NAME="AEN1137">DOM_REF (domain reference info)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1177"
-></A
->9.2.3.25. DOM_INFO (domain info, levels 3 and 5 are the same))</H4
+NAME="AEN1176">DOM_INFO (domain info, levels 3 and 5 are the same))</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1208"
-></A
->9.2.3.26. USER_INFO (user logon info)</H4
+NAME="AEN1207">USER_INFO (user logon info)</H4
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: it would be nice to know what the 16 byte user session key is for.</I
-></SPAN
></P
><P
></P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1365"
-></A
->9.2.3.27. SH_INFO_1_PTR (pointers to level 1 share info strings)</H4
+NAME="AEN1364">SH_INFO_1_PTR (pointers to level 1 share info strings)</H4
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: see cifsrap2.txt section5, page 10.</I
-></SPAN
></P
><P
></P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1388"
-></A
->9.2.3.28. SH_INFO_1_STR (level 1 share info strings)</H4
+NAME="AEN1387">SH_INFO_1_STR (level 1 share info strings)</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1399"
-></A
->9.2.3.29. SHARE_INFO_1_CTR</H4
+NAME="AEN1398">SHARE_INFO_1_CTR</H4
><P
>share container with 0 entries:</P
><P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1445"
-></A
->9.2.3.30. SERVER_INFO_101</H4
+NAME="AEN1444">SERVER_INFO_101</H4
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1. </I
-></SPAN
></P
><P
></P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1571"
-></A
->9.3. MSRPC over Transact Named Pipe</H2
+NAME="AEN1570">MSRPC over Transact Named Pipe</H2
><P
>For details on the SMB Transact Named Pipe, see cifs6.txt</P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN1574"
-></A
->9.3.1. MSRPC Pipes</H3
+NAME="AEN1573">MSRPC Pipes</H3
><P
>The MSRPC is conducted over an SMB Transact Pipe with a name of
<TT
>lkcl/01nov97 there appear to be two additional bytes after the null-terminated \PIPE\ name for the RPC pipe. Values seen so far are
listed below:</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> initial SMBopenX request: RPC API command 0x26 params:
"\\PIPE\\lsarpc" 0x65 0x63; 0x72 0x70; 0x44 0x65;
"\\PIPE\\srvsvc" 0x73 0x76; 0x4E 0x00; 0x5C 0x43;</PRE
+></TD
+></TR
+></TABLE
></P
></DIV
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN1588"
-></A
->9.3.2. Header</H3
+NAME="AEN1587">Header</H3
><P
>[section to be rewritten, following receipt of work by Duncan Stansfield]</P
><P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1649"
-></A
->9.3.2.1. RPC_Packet for request, response, bind and bind acknowledgement</H4
+NAME="AEN1648">RPC_Packet for request, response, bind and bind acknowledgement</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1688"
-></A
->9.3.2.2. Interface identification</H4
+NAME="AEN1687">Interface identification</H4
><P
>the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003)
transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002)</PRE
+></TD
+></TR
+></TABLE
></P
></DIV
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1693"
-></A
->9.3.2.3. RPC_Iface RW</H4
+NAME="AEN1692">RPC_Iface RW</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1704"
-></A
->9.3.2.4. RPC_ReqBind RW</H4
+NAME="AEN1703">RPC_ReqBind RW</H4
><P
>the remainder of the packet after the header if "type" was Bind in the response header, "type" should be BindAck</P
><P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1744"
-></A
->9.3.2.5. RPC_Address RW</H4
+NAME="AEN1743">RPC_Address RW</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1755"
-></A
->9.3.2.6. RPC_ResBind RW</H4
+NAME="AEN1754">RPC_ResBind RW</H4
><P
>the response to place after the header in the reply packet</P
><P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1799"
-></A
->9.3.2.7. RPC_ReqNorm RW</H4
+NAME="AEN1798">RPC_ReqNorm RW</H4
><P
>the remainder of the packet after the header for every other other request</P
><P
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1819"
-></A
->9.3.2.8. RPC_ResNorm RW</H4
+NAME="AEN1818">RPC_ResNorm RW</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN1842"
-></A
->9.3.3. Tail</H3
+NAME="AEN1841">Tail</H3
><P
>The end of each of the NTLSA and NETLOGON named pipes ends with:</P
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN1854"
-></A
->9.3.4. RPC Bind / Bind Ack</H3
+NAME="AEN1853">RPC Bind / Bind Ack</H3
><P
>RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc)
with a "transfer syntax" (see RPC_Iface structure). The purpose for doing
this is unknown.</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: The RPC_ResBind SMB Transact request is sent with two uint16 setup parameters. The first is 0x0026; the second is the file handle
returned by the SMBopenX Transact response.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the same in the response as the same members in the RPC_ReqBind. The
RPC_ResBind member transfersyntax is the same in the response as
the</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: The RPC_ResBind response member secondaddr contains the name of what is presumed to be the service behind the RPC pipe. The
mapping identified so far is:</I
-></SPAN
></P
><P
></P
></DL
></DIV
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.</I
-></SPAN
></P
><P
>Request:</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN1898"
-></A
->9.3.5. NTLSA Transact Named Pipe</H3
+NAME="AEN1897">NTLSA Transact Named Pipe</H3
><P
>The sequence of actions taken on this pipe are:</P
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN1939"
-></A
->9.3.6. LSA Open Policy</H3
+NAME="AEN1938">LSA Open Policy</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: The policy handle can be anything you like.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1943"
-></A
->9.3.6.1. Request</H4
+NAME="AEN1942">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1962"
-></A
->9.3.6.2. Response</H4
+NAME="AEN1961">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN1973"
-></A
->9.3.7. LSA Query Info Policy</H3
+NAME="AEN1972">LSA Query Info Policy</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: The info class in response must be the same as that in the request.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1977"
-></A
->9.3.7.1. Request</H4
+NAME="AEN1976">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN1988"
-></A
->9.3.7.2. Response</H4
+NAME="AEN1987">Response</H4
><P
></P
><DIV
></DL
></DIV
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>switch (info class)
}
return 0 - indicates success</PRE
+></TD
+></TR
+></TABLE
></P
></DIV
></DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2001"
-></A
->9.3.8. LSA Enumerate Trusted Domains</H3
+NAME="AEN2000">LSA Enumerate Trusted Domains</H3
><DIV
CLASS="SECT3"
><H4
CLASS="SECT3"
><A
-NAME="AEN2003"
-></A
->9.3.8.1. Request</H4
+NAME="AEN2002">Request</H4
><P
>no extra data</P
></DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2006"
-></A
->9.3.8.2. Response</H4
+NAME="AEN2005">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2025"
-></A
->9.3.9. LSA Open Secret</H3
+NAME="AEN2024">LSA Open Secret</H3
><DIV
CLASS="SECT3"
><H4
CLASS="SECT3"
><A
-NAME="AEN2027"
-></A
->9.3.9.1. Request</H4
+NAME="AEN2026">Request</H4
><P
>no extra data</P
></DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2030"
-></A
->9.3.9.2. Response</H4
+NAME="AEN2029">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2054"
-></A
->9.3.10. LSA Close</H3
+NAME="AEN2053">LSA Close</H3
><DIV
CLASS="SECT3"
><H4
CLASS="SECT3"
><A
-NAME="AEN2056"
-></A
->9.3.10.1. Request</H4
+NAME="AEN2055">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2063"
-></A
->9.3.10.2. Response</H4
+NAME="AEN2062">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2071"
-></A
->9.3.11. LSA Lookup SIDS</H3
+NAME="AEN2070">LSA Lookup SIDS</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: num_entries in response must be same as num_entries in request.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2075"
-></A
->9.3.11.1. Request</H4
+NAME="AEN2074">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2102"
-></A
->9.3.11.2. Response</H4
+NAME="AEN2101">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2130"
-></A
->9.3.12. LSA Lookup Names</H3
+NAME="AEN2129">LSA Lookup Names</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: num_entries in response must be same as num_entries in request.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2134"
-></A
->9.3.12.1. Request</H4
+NAME="AEN2133">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2165"
-></A
->9.3.12.2. Response</H4
+NAME="AEN2164">Response</H4
><P
></P
><DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2193"
-></A
->9.4. NETLOGON rpc Transact Named Pipe</H2
+NAME="AEN2192">NETLOGON rpc Transact Named Pipe</H2
><P
>The sequence of actions taken on this pipe are:</P
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2232"
-></A
->9.4.1. LSA Request Challenge</H3
+NAME="AEN2231">LSA Request Challenge</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: logon server name starts with two '\' characters and is upper case.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: logon client is the machine, not the user.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2240"
-></A
->9.4.1.1. Request</H4
+NAME="AEN2239">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2259"
-></A
->9.4.1.2. Response</H4
+NAME="AEN2258">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2267"
-></A
->9.4.2. LSA Authenticate 2</H3
+NAME="AEN2266">LSA Authenticate 2</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: neg_flags in the response is the same as that in the request.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2275"
-></A
->9.4.2.1. Request</H4
+NAME="AEN2274">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2294"
-></A
->9.4.2.2. Response</H4
+NAME="AEN2293">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2306"
-></A
->9.4.3. LSA Server Password Set</H3
+NAME="AEN2305">LSA Server Password Set</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: the new password is suspected to be a DES encryption using the old password to generate the key.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2316"
-></A
->9.4.3.1. Request</H4
+NAME="AEN2315">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2327"
-></A
->9.4.3.2. Response</H4
+NAME="AEN2326">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2335"
-></A
->9.4.4. LSA SAM Logon</H3
+NAME="AEN2334">LSA SAM Logon</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: valid_user is True iff the username and password hash are valid for
the requested domain.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2339"
-></A
->9.4.4.1. Request</H4
+NAME="AEN2338">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2346"
-></A
->9.4.4.2. Response</H4
+NAME="AEN2345">Response</H4
><P
></P
><DIV
></DL
></DIV
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>if (valid_user)
return 0xC000 0064 - NT_STATUS_NO_SUCH_USER.
}</PRE
+></TD
+></TR
+></TABLE
></P
></DIV
></DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2359"
-></A
->9.4.5. LSA SAM Logoff</H3
+NAME="AEN2358">LSA SAM Logoff</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: presumably, the SAM_INFO structure is validated, and a (currently
undocumented) error code returned if the Logoff is invalid.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2363"
-></A
->9.4.5.1. Request</H4
+NAME="AEN2362">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2370"
-></A
->9.4.5.2. Response</H4
+NAME="AEN2369">Response</H4
><P
></P
><DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2382"
-></A
->9.5. \\MAILSLOT\NET\NTLOGON</H2
+NAME="AEN2381">\\MAILSLOT\NET\NTLOGON</H2
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: mailslots will contain a response mailslot, to which the response
should be sent. the target NetBIOS name is REQUEST_NAME<20>, where
REQUEST_NAME is the name of the machine that sent the request.</I
-></SPAN
></P
><DIV
CLASS="SECT2"
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2386"
-></A
->9.5.1. Query for PDC</H3
+NAME="AEN2385">Query for PDC</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2390"
-></A
->9.5.1.1. Request</H4
+NAME="AEN2389">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2425"
-></A
->9.5.1.2. Response</H4
+NAME="AEN2424">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2460"
-></A
->9.5.2. SAM Logon</H3
+NAME="AEN2459">SAM Logon</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: machine name in response is preceded by two '\' characters.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: user name in the response is presumably the same as that in the request.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2468"
-></A
->9.5.2.1. Request</H4
+NAME="AEN2467">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2519"
-></A
->9.5.2.2. Response</H4
+NAME="AEN2518">Response</H4
><P
></P
><DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2550"
-></A
->9.6. SRVSVC Transact Named Pipe</H2
+NAME="AEN2549">SRVSVC Transact Named Pipe</H2
><P
>Defines for this pipe, identifying the query are:</P
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2562"
-></A
->9.6.1. Net Share Enum</H3
+NAME="AEN2561">Net Share Enum</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: share level and switch value in the response are presumably the same as those in the request.</I
-></SPAN
></P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: cifsrap2.txt (section 5) may be of limited assistance here.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2568"
-></A
->9.6.1.1. Request</H4
+NAME="AEN2567">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2603"
-></A
->9.6.1.2. Response</H4
+NAME="AEN2602">Response</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2623"
-></A
->9.6.2. Net Server Get Info</H3
+NAME="AEN2622">Net Server Get Info</H3
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note: level is the same value as in the request.</I
-></SPAN
></P
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2627"
-></A
->9.6.2.1. Request</H4
+NAME="AEN2626">Request</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2638"
-></A
->9.6.2.2. Response</H4
+NAME="AEN2637">Response</H4
><P
></P
><DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2654"
-></A
->9.7. Cryptographic side of NT Domain Authentication</H2
+NAME="AEN2653">Cryptographic side of NT Domain Authentication</H2
><DIV
CLASS="SECT2"
><H3
CLASS="SECT2"
><A
-NAME="AEN2656"
-></A
->9.7.1. Definitions</H3
+NAME="AEN2655">Definitions</H3
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2699"
-></A
->9.7.2. Protocol</H3
+NAME="AEN2698">Protocol</H3
><P
>C->S ReqChal,Cc S->C Cs</P
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2709"
-></A
->9.7.3. Comments</H3
+NAME="AEN2708">Comments</H3
><P
>On first joining the domain the session key could be computed by
anyone listening in on the network as the machine password has a well
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2716"
-></A
->9.8. SIDs and RIDs</H2
+NAME="AEN2715">SIDs and RIDs</H2
><P
>SIDs and RIDs are well documented elsewhere.</P
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2724"
-></A
->9.8.1. Well-known SIDs</H3
+NAME="AEN2723">Well-known SIDs</H3
><DIV
CLASS="SECT3"
><H4
CLASS="SECT3"
><A
-NAME="AEN2726"
-></A
->9.8.1.1. Universal well-known SIDs</H4
+NAME="AEN2725">Universal well-known SIDs</H4
><P
></P
><DIV
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2761"
-></A
->9.8.1.2. NT well-known SIDs</H4
+NAME="AEN2760">NT well-known SIDs</H4
><P
></P
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2812"
-></A
->9.8.2. Well-known RIDS</H3
+NAME="AEN2811">Well-known RIDS</H3
><P
>A RID is a sub-authority value, as part of either a SID, or in the case
of Group RIDs, part of the DOM_GID structure, in the USER_INFO_1
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2815"
-></A
->9.8.2.1. Well-known RID users</H4
+NAME="AEN2814">Well-known RID users</H4
><P
><B
>Groupname: </B
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2829"
-></A
->9.8.2.2. Well-known RID groups</H4
+NAME="AEN2828">Well-known RID groups</H4
><P
><B
>Groupname: </B
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2847"
-></A
->9.8.2.3. Well-known RID aliases</H4
+NAME="AEN2846">Well-known RID aliases</H4
><P
><B
>Groupname: </B
CLASS="CHAPTER"
><HR><H1
><A
-NAME="PRINTING"
-></A
->Chapter 10. Samba Printing Internals</H1
+NAME="PRINTING">Samba Printing Internals</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN2896"
-></A
->10.1. Abstract</H2
+NAME="AEN2895">Abstract</H2
><P
>The purpose of this document is to provide some insight into
Samba's printing functionality and also to describe the semantics
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2899"
-></A
->10.2. Printing Interface to Various Back ends</H2
+NAME="AEN2898">Printing Interface to Various Back ends</H2
><P
>Samba uses a table of function pointers to seven functions. The
function prototypes are defined in the <TT
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2925"
-></A
->10.3. Print Queue TDB's</H2
+NAME="AEN2924">Print Queue TDB's</H2
><P
>Samba provides periodic caching of the output from the "lpq command"
for performance reasons. This cache time is configurable in seconds.
The second method is to have the print job picked up by executing the
"lpq command".</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>/* included from printing.h */
fstring queuename; /* service number of printer for this job */
NT_DEVICEMODE *nt_devmode;
};</PRE
+></TD
+></TR
+></TABLE
></P
><P
>The current manifestation of the printjob structure contains a field
for the UNIX job id returned from the "lpq command" and a Windows job
ID (32-bit bounded by PRINT_MAX_JOBID). When a print job is returned
by the "lpq command" that does not match an existing job in the queue's
-TDB, a 32-bit job ID above the <*vance doesn't know what word is missing here*> is generating by adding UNIX_JOB_START to
+TDB, a 32-bit job ID above the <*vance doesn't know what word is missing here*> is generating by adding UNIX_JOB_START to
the id reported by lpq.</P
><P
>In order to match a 32-bit Windows jobid onto a 16-bit lanman print job
></LI
><LI
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> foreach job in the queue
update the job status only
}
}</PRE
+></TD
+></TR
+></TABLE
></P
></LI
><LI
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2959"
-></A
->10.4. ChangeID & Client Caching of Printer Information</H2
+NAME="AEN2958">ChangeID & Client Caching of Printer Information</H2
><P
>[To be filled in later]</P
></DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2962"
-></A
->10.5. Windows NT/2K Printer Change Notify</H2
+NAME="AEN2961">Windows NT/2K Printer Change Notify</H2
><P
>When working with Windows NT+ clients, it is possible for a
print server to use RPC to send asynchronous change notification
notification handle is as follows. The 'C' is for client and the
'S' is for server. All error conditions have been eliminated.</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>C: Obtain handle to printer or to the printer
to monitor, or (b) a PRINTER_NOTIFY_OPTIONS structure
containing the event information to monitor. The windows
spooler has only been observed to use (b).
-S: The <* another missing word*> opens a new TCP session to the client (thus requiring
+S: The <* another missing word*> opens a new TCP session to the client (thus requiring
all print clients to be CIFS servers as well) and sends
a ReplyOpenPrinter() request to the client.
C: The client responds with a printer handle that can be used to
S: The server closes the internal change notification handle
(POLICY_HND) and does not send any further change notification
events to the client for that printer or job.</PRE
+></TD
+></TR
+></TABLE
></P
><P
>The current list of notification events supported by Samba can be
CLASS="CHAPTER"
><HR><H1
><A
-NAME="WINS"
-></A
->Chapter 11. Samba WINS Internals</H1
+NAME="WINS">Samba WINS Internals</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN3033"
-></A
->11.1. WINS Failover</H2
+NAME="AEN3032">WINS Failover</H2
><P
>The current Samba codebase possesses the capability to use groups of WINS
servers that share a common namespace for NetBIOS name registration and
resolution. The formal parameter syntax is</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> WINS_SERVER_PARAM = SERVER [ SEPARATOR SERVER_LIST ]
- WINS_SERVER_PARAM = "wins server"
+ WINS_SERVER_PARAM = "wins server"
SERVER = ADDR[:TAG]
ADDR = ip_addr | fqdn
TAG = string
SEPARATOR = comma | \s+
SERVER_LIST = SERVER [ SEPARATOR SERVER_LIST ]</PRE
+></TD
+></TR
+></TABLE
></P
><P
>A simple example of a valid wins server setting is</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>[global]
wins server = 192.168.1.2 192.168.1.3</PRE
+></TD
+></TR
+></TABLE
></P
><P
>In the event that no TAG is defined in for a SERVER in the list, smbd assigns a default
-TAG of "*". A TAG is used to group servers of a shared NetBIOS namespace together. Upon
+TAG of "*". A TAG is used to group servers of a shared NetBIOS namespace together. Upon
startup, nmbd will attempt to register the netbios name value with one server in each
tagged group.</P
><P
>An example using tags to group WINS servers together is show here. Note that the use of
interface names in the tags is only by convention and is not a technical requirement.</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
>[global]
wins server = 192.168.1.2:eth0 192.168.1.3:eth0 192.168.2.2:eth1</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Using this configuration, nmbd would attempt to register the server's NetBIOS name
-with one WINS server in each group. Because the "eth0" group has two servers, the
+with one WINS server in each group. Because the "eth0" group has two servers, the
second server would only be used when a registration (or resolution) request to
the first server in that group timed out.</P
><P
for a period of 10 minutes.</P
></DIV
></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="SAM"
-></A
->Chapter 12. The Upcoming SAM System</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN3054"
-></A
->12.1. Security in the 'new SAM'</H2
-><P
->One of the biggest problems with passdb is it's implementation of
-'security'. Access control is on a 'are you root at the moment' basis,
-and it has no concept of NT ACLs. Things like ldapsam had to add
-'magic' 'are you root' checks.</P
-><P
->We took this very seriously when we started work, and the new structure
-is designed with this in mind, from the ground up. Each call to the SAM
-has a NT_TOKEN and (if relevant) an 'access desired'. This is either
-provided as a parameter, or implicitly supplied by the object being
-accessed.</P
-><P
->For example, when you call </P
-><PRE
-CLASS="PROGRAMLISTING"
-><
-NTSTATUS sam_get_account_by_name(const SAM_CONTEXT *context, const
-NT_USER_TOKEN *access_token, uint32 access_desired, const char *domain,
-const char *name, SAM_ACCOUNT_HANDLE **account)</PRE
-><P
->The context can be NULL (and is used to allow import/export by setting
-up 2 contexts, and allowing calls on both simultaneously)</P
-><P
->The access token *must* be specified. Normally the user's token out of
-current_user, this can also be a global 'system' context.</P
-><P
->The access desired is as per the ACL, for passing to the seaccess stuff.</P
-><P
->The domain/username are standard. Even if we only have one domain,
-keeping this ensures that we don't get 'unqualified' usernames (same
-problem as we had with unqualified SIDs).</P
-><P
->We return a 'handle'. This is opaque to the rest of Samba, but is
-operated on by get/set routines, all of which return NTSTATUS.</P
-><P
->The access checking is done by the SAM module. The reason it is not
-done 'above' the interface is to ensure a 'choke point'. I put a lot of
-effort into the auth subsystem to ensure we never 'accidentally' forgot
-to check for null passwords, missed a restriction etc. I intend the SAM
-to be written with the same caution.</P
-><P
->The reason the access checking is not handled by the interface itself is
-due to the different implementations it make take on. For example, on
-ADS, you cannot set a password over a non-SSL connection. Other
-backends may have similar requirements - we need to leave this policy up
-to the modules. They will naturally have access to 'helper' procedures
-and good examples to avoid mishaps.</P
-><P
->(Furthermore, some backends my actually chose to push the whole ACL
-issue to the remote server, and - assuming ldap for this example - bind
-as the user directly)</P
-><P
->Each returned handle has an internal 'access permitted', which allows
-the 'get' and 'set' routines to return 'ACCESS_DENIED' for things that
-were not able to be retrieved from the backend. This removes the need
-to specify the NT_TOKEN on every operation, and allows for 'object not
-present' to be easily distinguished from 'access denied'.</P
-><P
->When you 'set' an object (calling sam_update_account) the internal
-details are again used. Each change that has been made to the object
-has been flagged, so as to avoid race conditions (on unmodified
-components) and to avoid violating any extra ACL requirements on the
-actual data store (like the LDAP server).</P
-><P
->Finally, we have generic get_sec_desc() and set_sec_desc() routines to
-allow external ACL manipulation. These do lookups based on SID.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3071"
-></A
->12.2. Standalone from UNIX</H2
-><P
->One of the primary tenants of the 'new SAM' is that it would not attempt
-to deal with 'what unix id for that'. This would be left to the 'SMS'
-(Sid Mapping System') or SID farm, and probably administered via
-winbind. We have had constructive discussion on how 'basic' unix
-accounts like 'root' would be handled, and we think this can work.
-Accounts not preexisting in unix would be served up via winbind.</P
-><P
->This is an *optional* part, and my preferred end-game. We have a fare
-way to go before things like winbind up to it however.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3075"
-></A
->12.3. Handles and Races in the new SAM</H2
-><P
->One of the things that the 'new SAM' work has tried to face is both
-compatibility with existing code, and a closer alignment to the SAMR
-interface. I consider SAMR to be a 'primary customer' to the this work,
-because if we get alignment with that wrong, things get more, rather
-than less complex. Also, most other parts of Samba are much more
-flexible with what they can allow.</P
-><P
->In any case, that was a decision taken as to how the general design
-would progress. BTW, my understanding of SAMR may be completely flawed.</P
-><P
->One of the most race-prone areas of the new code is the conflicting
-update problem. We have taken two approaches: </P
-><P
-></P
-><UL
-><LI
-><P
->'Not conflicting' conflicts. Due to the way usrmgr operates, it will
-open a user, display all the properties and *save* them all, even if you
-don't change any.</P
-><P
->For this, see what I've done in rpc_server/srv_samr_util.c. I intend
-to take this one step further, and operate on the 'handle' that the
-values were read from. This should mean that we only update things that
-have *really* changed.</P
-></LI
-><LI
-><P
->'conflicting' updates: Currently we don't deal with this (in passdb
-or the new sam stuff), but the design is sufficiently flexible to 'deny'
-a second update. I don't foresee locking records however.</P
-></LI
-></UL
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3086"
-></A
->12.4. Layers</H2
-><DIV
-CLASS="SECT2"
-><H3
-CLASS="SECT2"
-><A
-NAME="AEN3088"
-></A
->12.4.1. Application</H3
-><P
->This is where smbd, samtest and whatever end-user replacement we have
-for pdbedit sits. They use only the SAM interface, and do not get
-'special knowledge' of what is below them.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN3091"
-></A
->12.4.2. SAM Interface</H3
-><P
->This level 'owns' the various handle structures, the get/set routines on
-those structures and provides the public interface. The application
-layer may initialize a 'context' to be passed to all interface routines,
-else a default, self-initialising context will be supplied. This layser
-finds the appropriate backend module for the task, and tries very hard
-not to need to much 'knowledge'. It should just provide the required
-abstraction to the modules below, and arrange for their initial loading.</P
-><P
->We could possibly add ACL checking at this layer, to avoid discrepancies
-in implementation modules.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN3095"
-></A
->12.4.3. SAM Modules</H3
-><P
->These do not communicate with the application directly, only by setting
-values in the handles, and receiving requests from the interface. These
-modules are responsible for translating values from the handle's
-.private into (say) an LDAP modification list. The module is expected
-to 'know' things like it's own domain SID, domain name, and any other
-state attached to the SAM. Simpler modules may call back to some helper
-routine.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3098"
-></A
->12.5. SAM Modules</H2
-><DIV
-CLASS="SECT2"
-><H3
-CLASS="SECT2"
-><A
-NAME="AEN3100"
-></A
->12.5.1. Special Module: sam_passdb</H3
-><P
->In order for there to be a smooth transition, kai is writing a module
-that reads existing passdb backends, and translates them into SAM
-replies. (Also pulling data from the account policy DB etc). We also
-intend to write a module that does the reverse - gives the SAM a passdb
-interface.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN3103"
-></A
->12.5.2. sam_ads</H3
-><P
->This is the first of the SAM modules to be committed to the tree -
-mainly because I needed to coordinate work with metze (who authored most
-of it). This module aims to use Samba's libads code to provide an
-Active Directory LDAP client, suitable for use on a mixed-mode DC.
-While it is currently being tested against Win2k servers (with a
-password in the smb.conf file) it is expected to eventually use a
-(possibly modified) OpenLDAP server. We hope that this will assist in
-the construction of an Samba AD DC.</P
-><P
->We also intend to construct a Samba 2.2/3.0 compatible ldap module,
-again using libads code.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3107"
-></A
->12.6. Memory Management</H2
-><P
->
-The 'new SAM' development effort also concerned itself with getting a
-sane implementation of memory management. It was decided that we would
-be (as much as possible) talloc based, using an 'internal talloc
-context' on many objects. That is, the creation of an object would
-initiate it's own internal talloc context, and this would be used for
-all operations on that object. Much of this is already implemented in
-passdb. Also, like passdb, it will be possible to specify that some
-object actually be created on a specified context. </P
-><P
->Memory management is important here because the APIs in the 'new SAM' do
-not use 'pdb_init()' or an equivalent. They always allocate new
-objects. Enumeration's are slightly different, and occur on a supplied
-context that 'owns' the entire list, rather than per-element. (the
-enumeration functions return an array of all elements - not full handles
-just basic (and public) info) Likewise for things that fill in a char
-**.</P
-><P
->For example:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->NTSTATUS sam_lookup_sid(const SAM_CONTEXT *context, const NT_USER_TOKEN
-*access_token, TALLOC_CTX *mem_ctx, const DOM_SID *sid, char **name,
-uint32 *type)</PRE
-></P
-><P
->Takes a context to allocate the 'name' on, while:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->NTSTATUS sam_get_account_by_sid(const SAM_CONTEXT *context, const
-NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID
-*accountsid, SAM_ACCOUNT_HANDLE **account)</PRE
-></P
-><P
->Allocates a handle and stores the allocation context on that handle.</P
-><P
->I think that the following:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->NTSTATUS sam_enum_accounts(const SAM_CONTEXT *context, const
-NT_USER_TOKEN *access_token, const DOM_SID *domainsid, uint16 acct_ctrl,
-int32 *account_count, SAM_ACCOUNT_ENUM **accounts)</PRE
-></P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3121"
-></A
->12.7. Testing</H2
-><P
->Testing is vital in any piece of software, and Samba is certainly no
-exception. In designing this new subsystem, we have taken care to ensure
-it is easily tested, independent of outside protocols.</P
-><P
->To this end, Jelmer has constructed 'samtest'. </P
-><P
->This utility (see torture/samtest.c) is structured like rpcclient, but
-instead operates on the SAM subsystem. It creates a 'custom' SAM
-context, that may be distinct from the default values used by the rest
-of the system, and can load a separate configuration file. </P
-><P
->A small number of commands are currently implemented, but these have
-already proved vital in testing. I expect SAM module authors will find
-it particularly valuable.</P
-><P
->Example useage:</P
-><P
-><TT
-CLASS="PROMPT"
->$</TT
-> <B
-CLASS="COMMAND"
->bin/samtest</B
-></P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->> context ads:ldap://192.168.1.96</PRE
->
-(this loads a new context, using the new ADS module. The parameter is
-the 'location' of the ldap server)</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->> lookup_name DOMAIN abartlet</PRE
->
-(returns a sid).</P
-><P
->Because the 'new SAM' is NT ACL based, there will be a command to
-specify an arbitrary NT ACL, but for now it uses 'system' by default.</P
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="PWENCRYPT"
-></A
->Chapter 13. LanMan and NT Password Encryption</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN3147"
-></A
->13.1. Introduction</H2
-><P
->With the development of LanManager and Windows NT
- compatible password encryption for Samba, it is now able
- to validate user connections in exactly the same way as
- a LanManager or Windows NT server.</P
-><P
->This document describes how the SMB password encryption
- algorithm works and what issues there are in choosing whether
- you want to use it. You should read it carefully, especially
- the part about security and the "PROS and CONS" section.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3151"
-></A
->13.2. How does it work?</H2
-><P
->LanManager encryption is somewhat similar to UNIX
- password encryption. The server uses a file containing a
- hashed value of a user's password. This is created by taking
- the user's plaintext password, capitalising it, and either
- truncating to 14 bytes or padding to 14 bytes with null bytes.
- This 14 byte value is used as two 56 bit DES keys to encrypt
- a 'magic' eight byte value, forming a 16 byte value which is
- stored by the server and client. Let this value be known as
- the "hashed password".</P
-><P
->Windows NT encryption is a higher quality mechanism,
- consisting of doing an MD4 hash on a Unicode version of the user's
- password. This also produces a 16 byte hash value that is
- non-reversible.</P
-><P
->When a client (LanManager, Windows for WorkGroups, Windows
- 95 or Windows NT) wishes to mount a Samba drive (or use a Samba
- resource), it first requests a connection and negotiates the
- protocol that the client and server will use. In the reply to this
- request the Samba server generates and appends an 8 byte, random
- value - this is stored in the Samba server after the reply is sent
- and is known as the "challenge". The challenge is different for
- every client connection.</P
-><P
->The client then uses the hashed password (16 byte values
- described above), appended with 5 null bytes, as three 56 bit
- DES keys, each of which is used to encrypt the challenge 8 byte
- value, forming a 24 byte value known as the "response".</P
-><P
->In the SMB call SMBsessionsetupX (when user level security
- is selected) or the call SMBtconX (when share level security is
- selected), the 24 byte response is returned by the client to the
- Samba server. For Windows NT protocol levels the above calculation
- is done on both hashes of the user's password and both responses are
- returned in the SMB call, giving two 24 byte values.</P
-><P
->The Samba server then reproduces the above calculation, using
- its own stored value of the 16 byte hashed password (read from the
- <TT
-CLASS="FILENAME"
->smbpasswd</TT
-> file - described later) and the challenge
- value that it kept from the negotiate protocol reply. It then checks
- to see if the 24 byte value it calculates matches the 24 byte value
- returned to it from the client.</P
-><P
->If these values match exactly, then the client knew the
- correct password (or the 16 byte hashed value - see security note
- below) and is thus allowed access. If not, then the client did not
- know the correct password and is denied access.</P
-><P
->Note that the Samba server never knows or stores the cleartext
- of the user's password - just the 16 byte hashed values derived from
- it. Also note that the cleartext password or 16 byte hashed values
- are never transmitted over the network - thus increasing security.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3162"
-></A
->13.3. <A
-NAME="SMBPASSWDFILEFORMAT"
-></A
->The smbpasswd file</H2
-><P
->In order for Samba to participate in the above protocol
- it must be able to look up the 16 byte hashed values given a user name.
- Unfortunately, as the UNIX password value is also a one way hash
- function (ie. it is impossible to retrieve the cleartext of the user's
- password given the UNIX hash of it), a separate password file
- containing this 16 byte value must be kept. To minimise problems with
- these two password files, getting out of sync, the UNIX <TT
-CLASS="FILENAME"
-> /etc/passwd</TT
-> and the <TT
-CLASS="FILENAME"
->smbpasswd</TT
-> file,
- a utility, <B
-CLASS="COMMAND"
->mksmbpasswd.sh</B
->, is provided to generate
- a smbpasswd file from a UNIX <TT
-CLASS="FILENAME"
->/etc/passwd</TT
-> file.
- </P
-><P
->To generate the smbpasswd file from your <TT
-CLASS="FILENAME"
->/etc/passwd
- </TT
-> file use the following command :</P
-><P
-><TT
-CLASS="PROMPT"
->$ </TT
-><TT
-CLASS="USERINPUT"
-><B
->cat /etc/passwd | mksmbpasswd.sh
- > /usr/local/samba/private/smbpasswd</B
-></TT
-></P
-><P
->If you are running on a system that uses NIS, use</P
-><P
-><TT
-CLASS="PROMPT"
->$ </TT
-><TT
-CLASS="USERINPUT"
-><B
->ypcat passwd | mksmbpasswd.sh
- > /usr/local/samba/private/smbpasswd</B
-></TT
-></P
-><P
->The <B
-CLASS="COMMAND"
->mksmbpasswd.sh</B
-> program is found in
- the Samba source directory. By default, the smbpasswd file is
- stored in :</P
-><P
-><TT
-CLASS="FILENAME"
->/usr/local/samba/private/smbpasswd</TT
-></P
-><P
->The owner of the <TT
-CLASS="FILENAME"
->/usr/local/samba/private/</TT
->
- directory should be set to root, and the permissions on it should
- be set to 0500 (<B
-CLASS="COMMAND"
->chmod 500 /usr/local/samba/private</B
->).
- </P
-><P
->Likewise, the smbpasswd file inside the private directory should
- be owned by root and the permissions on is should be set to 0600
- (<B
-CLASS="COMMAND"
->chmod 600 smbpasswd</B
->).</P
-><P
->The format of the smbpasswd file is (The line has been
- wrapped here. It should appear as one entry per line in
- your smbpasswd file.)</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->username:uid:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:
- [Account type]:LCT-<last-change-time>:Long name
- </PRE
-></P
-><P
->Although only the <TT
-CLASS="REPLACEABLE"
-><I
->username</I
-></TT
->,
- <TT
-CLASS="REPLACEABLE"
-><I
->uid</I
-></TT
->, <TT
-CLASS="REPLACEABLE"
-><I
-> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX</I
-></TT
->,
- [<TT
-CLASS="REPLACEABLE"
-><I
->Account type</I
-></TT
->] and <TT
-CLASS="REPLACEABLE"
-><I
-> last-change-time</I
-></TT
-> sections are significant
- and are looked at in the Samba code.</P
-><P
->It is <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->VITALLY</I
-></SPAN
-> important that there by 32
- 'X' characters between the two ':' characters in the XXX sections -
- the smbpasswd and Samba code will fail to validate any entries that
- do not have 32 characters between ':' characters. The first XXX
- section is for the Lanman password hash, the second is for the
- Windows NT version.</P
-><P
->When the password file is created all users have password entries
- consisting of 32 'X' characters. By default this disallows any access
- as this user. When a user has a password set, the 'X' characters change
- to 32 ascii hexadecimal digits (0-9, A-F). These are an ascii
- representation of the 16 byte hashed value of a user's password.</P
-><P
->To set a user to have no password (not recommended), edit the file
- using vi, and replace the first 11 characters with the ascii text
- <TT
-CLASS="CONSTANT"
->"NO PASSWORD"</TT
-> (minus the quotes).</P
-><P
->For example, to clear the password for user bob, his smbpasswd file
- entry would look like :</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> bob:100:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U ]:LCT-00000000:Bob's full name:/bobhome:/bobshell
- </PRE
-></P
-><P
->If you are allowing users to use the smbpasswd command to set
- their own passwords, you may want to give users NO PASSWORD initially
- so they do not have to enter a previous password when changing to their
- new password (not recommended). In order for you to allow this the
- <B
-CLASS="COMMAND"
->smbpasswd</B
-> program must be able to connect to the
- <B
-CLASS="COMMAND"
->smbd</B
-> daemon as that user with no password. Enable this
- by adding the line :</P
-><P
-><B
-CLASS="COMMAND"
->null passwords = yes</B
-></P
-><P
->to the [global] section of the smb.conf file (this is why
- the above scenario is not recommended). Preferably, allocate your
- users a default password to begin with, so you do not have
- to enable this on your server.</P
-><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Note : </I
-></SPAN
->This file should be protected very
- carefully. Anyone with access to this file can (with enough knowledge of
- the protocols) gain access to your SMB server. The file is thus more
- sensitive than a normal unix <TT
-CLASS="FILENAME"
->/etc/passwd</TT
-> file.</P
-></DIV
-></DIV
></DIV
></BODY
></HTML
><DIV
CLASS="BOOK"
><A
-NAME="SAMBA-HOWTO-COLLECTION"
+NAME="SAMBA-PROJECT-DOCUMENTATION"
></A
><DIV
CLASS="TITLEPAGE"
><H1
CLASS="TITLE"
><A
-NAME="SAMBA-HOWTO-COLLECTION"
+NAME="SAMBA-PROJECT-DOCUMENTATION"
></A
>SAMBA Project Documentation</H1
><H3
>Table of Contents</B
></DT
><DT
->I. <A
-HREF="#AEN18"
->General installation</A
-></DT
-><DD
-><DL
-><DT
>1. <A
HREF="#INSTALL"
>How to Install and Test SAMBA</A
><DL
><DT
>1.1. <A
-HREF="#AEN25"
->Read the man pages</A
+HREF="#AEN20"
+>Step 0: Read the man pages</A
></DT
><DT
>1.2. <A
-HREF="#AEN35"
->Building the Binaries</A
+HREF="#AEN28"
+>Step 1: Building the Binaries</A
></DT
><DT
>1.3. <A
-HREF="#AEN63"
->The all important step</A
+HREF="#AEN56"
+>Step 2: The all important step</A
></DT
><DT
>1.4. <A
-HREF="#AEN67"
->Create the smb configuration file.</A
+HREF="#AEN60"
+>Step 3: Create the smb configuration file.</A
></DT
><DT
>1.5. <A
-HREF="#AEN81"
->Test your config file with
+HREF="#AEN74"
+>Step 4: Test your config file with
<B
CLASS="COMMAND"
>testparm</B
></DT
><DT
>1.6. <A
-HREF="#AEN89"
->Starting the smbd and nmbd</A
+HREF="#AEN80"
+>Step 5: Starting the smbd and nmbd</A
+></DT
+><DD
+><DL
+><DT
+>1.6.1. <A
+HREF="#AEN90"
+>Step 5a: Starting from inetd.conf</A
+></DT
+><DT
+>1.6.2. <A
+HREF="#AEN119"
+>Step 5b. Alternative: starting it as a daemon</A
></DT
+></DL
+></DD
><DT
>1.7. <A
-HREF="#AEN144"
->Try listing the shares available on your
+HREF="#AEN135"
+>Step 6: Try listing the shares available on your
server</A
></DT
><DT
>1.8. <A
-HREF="#AEN153"
->Try connecting with the unix client</A
+HREF="#AEN144"
+>Step 7: Try connecting with the unix client</A
></DT
><DT
>1.9. <A
-HREF="#AEN169"
->Try connecting from a DOS, WfWg, Win9x, WinNT,
+HREF="#AEN160"
+>Step 8: Try connecting from a DOS, WfWg, Win9x, WinNT,
Win2k, OS/2, etc... client</A
></DT
><DT
>1.10. <A
-HREF="#AEN183"
+HREF="#AEN174"
>What If Things Don't Work?</A
></DT
+><DD
+><DL
+><DT
+>1.10.1. <A
+HREF="#AEN179"
+>Diagnosing Problems</A
+></DT
+><DT
+>1.10.2. <A
+HREF="#AEN183"
+>Scope IDs</A
+></DT
+><DT
+>1.10.3. <A
+HREF="#AEN186"
+>Choosing the Protocol Level</A
+></DT
+><DT
+>1.10.4. <A
+HREF="#AEN195"
+>Printing from UNIX to a Client PC</A
+></DT
+><DT
+>1.10.5. <A
+HREF="#AEN200"
+>Locking</A
+></DT
+><DT
+>1.10.6. <A
+HREF="#AEN209"
+>Mapping Usernames</A
+></DT
+></DL
+></DD
></DL
></DD
><DT
>2. <A
-HREF="#IMPROVED-BROWSING"
->Improved browsing in samba</A
+HREF="#DIAGNOSIS"
+>Diagnosing your samba server</A
></DT
><DD
><DL
><DT
>2.1. <A
-HREF="#AEN228"
->Overview of browsing</A
+HREF="#AEN223"
+>Introduction</A
></DT
><DT
>2.2. <A
-HREF="#AEN232"
->Browsing support in samba</A
+HREF="#AEN228"
+>Assumptions</A
></DT
><DT
>2.3. <A
-HREF="#AEN241"
->Problem resolution</A
+HREF="#AEN238"
+>Tests</A
></DT
+><DD
+><DL
><DT
-HREF="#AEN248"
->Browsing across subnets</A
+HREF="#AEN240"
+>Test 1</A
></DT
><DT
-HREF="#AEN288"
->Setting up a WINS server</A
+HREF="#AEN246"
+>Test 2</A
></DT
><DT
-HREF="#AEN307"
->Setting up Browsing in a WORKGROUP</A
+HREF="#AEN252"
+>Test 3</A
></DT
><DT
-HREF="#AEN325"
->Setting up Browsing in a DOMAIN</A
+HREF="#AEN267"
+>Test 4</A
></DT
><DT
-HREF="#AEN335"
->Forcing samba to be the master</A
+HREF="#AEN272"
+>Test 5</A
></DT
><DT
-HREF="#AEN344"
->Making samba the domain master</A
+HREF="#AEN278"
+>Test 6</A
></DT
><DT
-HREF="#AEN362"
->Note about broadcast addresses</A
+HREF="#AEN286"
+>Test 7</A
></DT
><DT
->2.11. <A
-HREF="#AEN365"
->Multiple interfaces</A
+>2.3.8. <A
+HREF="#AEN312"
+>Test 8</A
+></DT
+><DT
+>2.3.9. <A
+HREF="#AEN329"
+>Test 9</A
+></DT
+><DT
+>2.3.10. <A
+HREF="#AEN337"
+>Test 10</A
+></DT
+><DT
+>2.3.11. <A
+HREF="#AEN343"
+>Test 11</A
+></DT
+></DL
+></DD
+><DT
+>2.4. <A
+HREF="#AEN348"
+>Still having troubles?</A
></DT
></DL
></DD
><DT
>3. <A
-HREF="#OPLOCKS"
->Oplocks</A
+HREF="#INTEGRATE-MS-NETWORKS"
+>Integrating MS Windows networks with Samba</A
></DT
><DD
><DL
><DT
>3.1. <A
-HREF="#AEN377"
->What are oplocks?</A
+HREF="#AEN365"
+>Agenda</A
></DT
-></DL
-></DD
><DT
-HREF="#BROWSING-QUICK"
->Quick Cross Subnet Browsing / Cross Workgroup Browsing guide</A
+HREF="#AEN387"
+>Name Resolution in a pure Unix/Linux world</A
></DT
><DD
><DL
><DT
->4.1. <A
-HREF="#AEN392"
->Discussion</A
+>3.2.1. <A
+HREF="#AEN403"
+><TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+></A
></DT
><DT
->4.2. <A
-HREF="#AEN400"
->Use of the "Remote Announce" parameter</A
+>3.2.2. <A
+HREF="#AEN419"
+><TT
+CLASS="FILENAME"
+>/etc/resolv.conf</TT
+></A
></DT
><DT
->4.3. <A
-HREF="#AEN414"
->Use of the "Remote Browse Sync" parameter</A
+>3.2.3. <A
+HREF="#AEN430"
+><TT
+CLASS="FILENAME"
+>/etc/host.conf</TT
+></A
></DT
><DT
->4.4. <A
-HREF="#AEN419"
->Use of WINS</A
+>3.2.4. <A
+HREF="#AEN438"
+><TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+></A
+></DT
+></DL
+></DD
+><DT
+>3.3. <A
+HREF="#AEN450"
+>Name resolution as used within MS Windows networking</A
></DT
+><DD
+><DL
><DT
->4.5. <A
-HREF="#AEN430"
->Do NOT use more than one (1) protocol on MS Windows machines</A
+>3.3.1. <A
+HREF="#AEN462"
+>The NetBIOS Name Cache</A
+></DT
+><DT
+>3.3.2. <A
+HREF="#AEN467"
+>The LMHOSTS file</A
+></DT
+><DT
+>3.3.3. <A
+HREF="#AEN475"
+>HOSTS file</A
+></DT
+><DT
+>3.3.4. <A
+HREF="#AEN480"
+>DNS Lookup</A
></DT
><DT
-HREF="#AEN436"
->Name Resolution Order</A
+HREF="#AEN483"
+>WINS Lookup</A
></DT
></DL
></DD
><DT
->5. <A
-HREF="#PWENCRYPT"
->LanMan and NT Password Encryption in Samba</A
+>3.4. <A
+HREF="#AEN495"
+>How browsing functions and how to deploy stable and
+dependable browsing using Samba</A
+></DT
+><DT
+>3.5. <A
+HREF="#AEN505"
+>MS Windows security options and how to configure
+Samba for seemless integration</A
></DT
><DD
><DL
><DT
->5.1. <A
-HREF="#AEN472"
->Introduction</A
+>3.5.1. <A
+HREF="#AEN533"
+>Use MS Windows NT as an authentication server</A
+></DT
+><DT
+>3.5.2. <A
+HREF="#AEN541"
+>Make Samba a member of an MS Windows NT security domain</A
></DT
><DT
-HREF="#AEN477"
->Important Notes About Security</A
+HREF="#AEN558"
+>Configure Samba as an authentication server</A
></DT
+></DL
+></DD
><DT
-HREF="#AEN512"
->The smbpasswd Command</A
+HREF="#AEN575"
+>Conclusions</A
></DT
></DL
></DD
+><DT
+>4. <A
+HREF="#PAM"
+>Configuring PAM for distributed but centrally
+managed authentication</A
+></DT
+><DD
+><DL
+><DT
+>4.1. <A
+HREF="#AEN596"
+>Samba and PAM</A
+></DT
+><DT
+>4.2. <A
+HREF="#AEN640"
+>Distributed Authentication</A
+></DT
+><DT
+>4.3. <A
+HREF="#AEN647"
+>PAM Configuration in smb.conf</A
+></DT
></DL
></DD
><DT
->II. <A
-HREF="#AEN544"
->Type of installation</A
+>5. <A
+HREF="#MSDFS"
+>Hosting a Microsoft Distributed File System tree on Samba</A
+></DT
+><DD
+><DL
+><DT
+>5.1. <A
+HREF="#AEN667"
+>Instructions</A
></DT
><DD
><DL
><DT
+>5.1.1. <A
+HREF="#AEN702"
+>Notes</A
+></DT
+></DL
+></DD
+></DL
+></DD
+><DT
>6. <A
-HREF="#SAMBA-PDC"
->How to Configure Samba as a NT4 Primary Domain Controller</A
+HREF="#UNIX-PERMISSIONS"
+>UNIX Permission Bits and Windows NT Access Control Lists</A
></DT
><DD
><DL
><DT
>6.1. <A
-HREF="#AEN566"
->Prerequisite Reading</A
+HREF="#AEN722"
+>Viewing and changing UNIX permissions using the NT
+ security dialogs</A
></DT
><DT
>6.2. <A
-HREF="#AEN572"
->Background</A
+HREF="#AEN731"
+>How to view file security on a Samba share</A
></DT
><DT
>6.3. <A
-HREF="#AEN611"
->Configuring the Samba Domain Controller</A
+HREF="#AEN742"
+>Viewing file ownership</A
></DT
><DT
>6.4. <A
-HREF="#AEN654"
->Creating Machine Trust Accounts and Joining Clients to the
-Domain</A
+HREF="#AEN762"
+>Viewing file or directory permissions</A
></DT
+><DD
+><DL
><DT
-HREF="#AEN738"
->Common Problems and Errors</A
+HREF="#AEN777"
+>File Permissions</A
></DT
><DT
-HREF="#AEN786"
->System Policies and Profiles</A
+HREF="#AEN791"
+>Directory Permissions</A
></DT
+></DL
+></DD
><DT
-HREF="#AEN830"
->What other help can I get?</A
+HREF="#AEN798"
+>Modifying file or directory permissions</A
></DT
><DT
->6.8. <A
-HREF="#AEN944"
->Domain Control for Windows 9x/ME</A
+>6.6. <A
+HREF="#AEN820"
+>Interaction with the standard Samba create mask
+ parameters</A
></DT
><DT
->6.9. <A
-HREF="#AEN1082"
->DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</A
+>6.7. <A
+HREF="#AEN884"
+>Interaction with the standard Samba file attribute
+ mapping</A
></DT
></DL
></DD
><DT
>7. <A
-HREF="#SAMBA-BDC"
->How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</A
+HREF="#PRINTING"
+>Printing Support in Samba 2.2.x</A
></DT
><DD
><DL
><DT
>7.1. <A
-HREF="#AEN1118"
->Prerequisite Reading</A
+HREF="#AEN905"
+>Introduction</A
></DT
><DT
>7.2. <A
-HREF="#AEN1122"
->Background</A
+HREF="#AEN927"
+>Configuration</A
></DT
+><DD
+><DL
><DT
-HREF="#AEN1130"
->What qualifies a Domain Controller on the network?</A
+HREF="#AEN938"
+>Creating [print$]</A
></DT
><DT
-HREF="#AEN1139"
->Can Samba be a Backup Domain Controller?</A
+HREF="#AEN973"
+>Setting Drivers for Existing Printers</A
></DT
><DT
-HREF="#AEN1143"
->How do I set up a Samba BDC?</A
+HREF="#AEN990"
+>Support a large number of printers</A
></DT
-></DL
-></DD
><DT
->8. <A
-HREF="#ADS"
->Samba as a ADS domain member</A
+>7.2.4. <A
+HREF="#AEN1001"
+>Adding New Printers via the Windows NT APW</A
+></DT
+><DT
+>7.2.5. <A
+HREF="#AEN1031"
+>Samba and Printer Ports</A
+></DT
+></DL
+></DD
+><DT
+>7.3. <A
+HREF="#AEN1039"
+>The Imprints Toolset</A
+></DT
+><DD
+><DL
+><DT
+>7.3.1. <A
+HREF="#AEN1043"
+>What is Imprints?</A
+></DT
+><DT
+>7.3.2. <A
+HREF="#AEN1053"
+>Creating Printer Driver Packages</A
+></DT
+><DT
+>7.3.3. <A
+HREF="#AEN1056"
+>The Imprints server</A
+></DT
+><DT
+>7.3.4. <A
+HREF="#AEN1060"
+>The Installation Client</A
+></DT
+></DL
+></DD
+><DT
+>7.4. <A
+HREF="#AEN1082"
+><A
+NAME="MIGRATION"
+></A
+>Migration to from Samba 2.0.x to 2.2.x</A
+></DT
+></DL
+></DD
+><DT
+>8. <A
+HREF="#PRINTINGDEBUG"
+>Debugging Printing Problems</A
></DT
><DD
><DL
><DT
>8.1. <A
-HREF="#AEN1178"
->Installing the required packages for Debian</A
+HREF="#AEN1128"
+>Introduction</A
></DT
><DT
>8.2. <A
-HREF="#AEN1184"
->Installing the required packages for RedHat</A
+HREF="#AEN1144"
+>Debugging printer problems</A
></DT
><DT
>8.3. <A
-HREF="#AEN1193"
->Compile Samba</A
+HREF="#AEN1153"
+>What printers do I have?</A
></DT
><DT
>8.4. <A
-HREF="#AEN1205"
->Setup your /etc/krb5.conf</A
+HREF="#AEN1161"
+>Setting up printcap and print servers</A
></DT
><DT
>8.5. <A
-HREF="#AEN1215"
->Create the computer account</A
+HREF="#AEN1189"
+>Job sent, no output</A
></DT
><DT
>8.6. <A
-HREF="#AEN1231"
->Test your server setup</A
+HREF="#AEN1200"
+>Job sent, strange output</A
></DT
><DT
>8.7. <A
-HREF="#AEN1236"
->Testing with smbclient</A
+HREF="#AEN1212"
+>Raw PostScript printed</A
></DT
><DT
>8.8. <A
-HREF="#AEN1239"
->Notes</A
+HREF="#AEN1215"
+>Advanced Printing</A
+></DT
+><DT
+>8.9. <A
+HREF="#AEN1218"
+>Real debugging</A
></DT
></DL
></DD
><DT
>9. <A
-HREF="#DOMAIN-SECURITY"
->Samba as a NT4 domain member</A
+HREF="#SECURITYLEVELS"
+>Security levels</A
></DT
><DD
><DL
><DT
>9.1. <A
-HREF="#AEN1261"
->Joining an NT Domain with Samba 2.2</A
+HREF="#AEN1231"
+>Introduction</A
></DT
><DT
>9.2. <A
-HREF="#AEN1325"
->Samba and Windows 2000 Domains</A
-></DT
-><DT
->9.3. <A
-HREF="#AEN1330"
->Why is this better than security = server?</A
+HREF="#AEN1242"
+>More complete description of security levels</A
></DT
></DL
></DD
-></DL
-></DD
-><DT
->III. <A
-HREF="#AEN1346"
->Optional configuration</A
-></DT
-><DD
-><DL
><DT
>10. <A
-HREF="#INTEGRATE-MS-NETWORKS"
->Integrating MS Windows networks with Samba</A
+HREF="#DOMAIN-SECURITY"
+>security = domain in Samba 2.x</A
></DT
><DD
><DL
><DT
>10.1. <A
-HREF="#AEN1362"
->Agenda</A
+HREF="#AEN1275"
+>Joining an NT Domain with Samba 2.2</A
></DT
><DT
>10.2. <A
-HREF="#AEN1384"
->Name Resolution in a pure Unix/Linux world</A
+HREF="#AEN1339"
+>Samba and Windows 2000 Domains</A
></DT
><DT
>10.3. <A
-HREF="#AEN1447"
->Name resolution as used within MS Windows networking</A
-></DT
-><DT
->10.4. <A
-HREF="#AEN1492"
->How browsing functions and how to deploy stable and
-dependable browsing using Samba</A
-></DT
-><DT
->10.5. <A
-HREF="#AEN1502"
->MS Windows security options and how to configure
-Samba for seemless integration</A
-></DT
-><DT
->10.6. <A
-HREF="#AEN1572"
->Conclusions</A
+HREF="#AEN1344"
+>Why is this better than security = server?</A
></DT
></DL
></DD
><DT
>11. <A
-HREF="#UNIX-PERMISSIONS"
->UNIX Permission Bits and Windows NT Access Control Lists</A
+HREF="#WINBIND"
+>Unified Logons between Windows NT and UNIX using Winbind</A
></DT
><DD
><DL
><DT
>11.1. <A
-HREF="#AEN1593"
->Viewing and changing UNIX permissions using the NT
- security dialogs</A
+HREF="#AEN1397"
+>Abstract</A
></DT
><DT
>11.2. <A
-HREF="#AEN1602"
->How to view file security on a Samba share</A
+HREF="#AEN1401"
+>Introduction</A
></DT
><DT
>11.3. <A
-HREF="#AEN1613"
->Viewing file ownership</A
+HREF="#AEN1414"
+>What Winbind Provides</A
+></DT
+><DD
+><DL
+><DT
+>11.3.1. <A
+HREF="#AEN1421"
+>Target Uses</A
></DT
+></DL
+></DD
><DT
>11.4. <A
-HREF="#AEN1633"
->Viewing file or directory permissions</A
+HREF="#AEN1425"
+>How Winbind Works</A
></DT
+><DD
+><DL
><DT
-HREF="#AEN1669"
->Modifying file or directory permissions</A
+HREF="#AEN1430"
+>Microsoft Remote Procedure Calls</A
></DT
><DT
->11.6. <A
-HREF="#AEN1691"
->Interaction with the standard Samba create mask
- parameters</A
+>11.4.2. <A
+HREF="#AEN1434"
+>Name Service Switch</A
></DT
><DT
->11.7. <A
-HREF="#AEN1755"
->Interaction with the standard Samba file attribute
- mapping</A
+>11.4.3. <A
+HREF="#AEN1450"
+>Pluggable Authentication Modules</A
+></DT
+><DT
+>11.4.4. <A
+HREF="#AEN1458"
+>User and Group ID Allocation</A
+></DT
+><DT
+>11.4.5. <A
+HREF="#AEN1462"
+>Result Caching</A
></DT
></DL
></DD
><DT
->12. <A
-HREF="#PAM"
->Configuring PAM for distributed but centrally
-managed authentication</A
+>11.5. <A
+HREF="#AEN1465"
+>Installation and Configuration</A
></DT
><DD
><DL
><DT
-HREF="#AEN1776"
->Samba and PAM</A
+HREF="#AEN1472"
+>Introduction</A
></DT
><DT
-HREF="#AEN1820"
->Distributed Authentication</A
+HREF="#AEN1485"
+>Requirements</A
></DT
><DT
-HREF="#AEN1827"
->PAM Configuration in smb.conf</A
+HREF="#AEN1499"
+>Testing Things Out</A
></DT
></DL
></DD
><DT
-HREF="#MSDFS"
->Hosting a Microsoft Distributed File System tree on Samba</A
+HREF="#AEN1714"
+>Limitations</A
></DT
-><DD
-><DL
><DT
-HREF="#AEN1847"
->Instructions</A
+HREF="#AEN1724"
+>Conclusion</A
></DT
></DL
></DD
><DT
-HREF="#PRINTING"
->Printing Support</A
+HREF="#SAMBA-PDC"
+>How to Configure Samba 2.2 as a Primary Domain Controller</A
></DT
><DD
><DL
><DT
->14.1. <A
-HREF="#AEN1908"
->Introduction</A
-></DT
-><DT
->14.2. <A
-HREF="#AEN1930"
->Configuration</A
+>12.1. <A
+HREF="#AEN1744"
+>Prerequisite Reading</A
></DT
><DT
-HREF="#AEN2038"
->The Imprints Toolset</A
+HREF="#AEN1750"
+>Background</A
></DT
><DT
-HREF="#AEN2081"
->Diagnosis</A
+HREF="#AEN1789"
+>Configuring the Samba Domain Controller</A
></DT
-></DL
-></DD
><DT
->15. <A
-HREF="#SECURITYLEVELS"
->Security levels</A
+>12.4. <A
+HREF="#AEN1832"
+>Creating Machine Trust Accounts and Joining Clients to the
+Domain</A
></DT
><DD
><DL
><DT
-HREF="#AEN2186"
->Introduction</A
+HREF="#AEN1851"
+>Manual Creation of Machine Trust Accounts</A
></DT
><DT
-HREF="#AEN2197"
->More complete description of security levels</A
+HREF="#AEN1886"
+>"On-the-Fly" Creation of Machine Trust Accounts</A
></DT
-></DL
-></DD
><DT
-HREF="#WINBIND"
->Unified Logons between Windows NT and UNIX using Winbind</A
+HREF="#AEN1895"
+>Joining the Client to the Domain</A
></DT
-><DD
-><DL
+></DL
+></DD
><DT
-HREF="#AEN2249"
->Abstract</A
+HREF="#AEN1910"
+>Common Problems and Errors</A
></DT
><DT
-HREF="#AEN2253"
->Introduction</A
+HREF="#AEN1958"
+>System Policies and Profiles</A
></DT
><DT
-HREF="#AEN2266"
->What Winbind Provides</A
+HREF="#AEN2002"
+>What other help can I get?</A
></DT
><DT
-HREF="#AEN2277"
->How Winbind Works</A
+HREF="#AEN2116"
+>Domain Control for Windows 9x/ME</A
></DT
+><DD
+><DL
><DT
-HREF="#AEN2317"
->Installation and Configuration</A
+HREF="#AEN2142"
+>Configuration Instructions: Network Logons</A
></DT
><DT
-HREF="#AEN2566"
->Limitations</A
+HREF="#AEN2161"
+>Configuration Instructions: Setting up Roaming User Profiles</A
></DT
+></DL
+></DD
><DT
-HREF="#AEN2576"
->Conclusion</A
+HREF="#AEN2254"
+>DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</A
></DT
></DL
></DD
><DT
-HREF="#PDB-MYSQL"
->Passdb MySQL plugin</A
+HREF="#SAMBA-BDC"
+>How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</A
></DT
><DD
><DL
><DT
-HREF="#AEN2590"
->Building</A
+HREF="#AEN2290"
+>Prerequisite Reading</A
></DT
><DT
-HREF="#AEN2596"
->Configuring</A
+HREF="#AEN2294"
+>Background</A
></DT
><DT
->17.3. <A
-HREF="#AEN2611"
->Using plaintext passwords or encrypted password</A
+>13.3. <A
+HREF="#AEN2302"
+>What qualifies a Domain Controller on the network?</A
+></DT
+><DD
+><DL
+><DT
+>13.3.1. <A
+HREF="#AEN2305"
+>How does a Workstation find its domain controller?</A
></DT
><DT
-HREF="#AEN2616"
->Getting non-column data from the table</A
+HREF="#AEN2308"
+>When is the PDC needed?</A
></DT
></DL
></DD
><DT
-HREF="#PDB-XML"
->Passdb XML plugin</A
+HREF="#AEN2311"
+>Can Samba be a Backup Domain Controller?</A
></DT
-><DD
-><DL
><DT
-HREF="#AEN2635"
->Building</A
+HREF="#AEN2315"
+>How do I set up a Samba BDC?</A
></DT
+><DD
+><DL
><DT
-HREF="#AEN2641"
->Usage</A
+HREF="#AEN2332"
+>How do I replicate the smbpasswd file?</A
></DT
></DL
></DD
+></DL
+></DD
><DT
HREF="#SAMBA-LDAP-HOWTO"
>Storing Samba's User/Machine Account information in an LDAP Directory</A
></DT
><DD
><DL
><DT
-HREF="#AEN2664"
+HREF="#AEN2353"
>Purpose</A
></DT
><DT
-HREF="#AEN2684"
+HREF="#AEN2373"
>Introduction</A
></DT
><DT
-HREF="#AEN2713"
+HREF="#AEN2402"
>Supported LDAP Servers</A
></DT
><DT
-HREF="#AEN2718"
+HREF="#AEN2407"
>Schema and Relationship to the RFC 2307 posixAccount</A
></DT
><DT
-HREF="#AEN2730"
+HREF="#AEN2419"
>Configuring Samba with LDAP</A
></DT
+><DD
+><DL
+><DT
+>14.5.1. <A
+HREF="#AEN2421"
+>OpenLDAP configuration</A
+></DT
><DT
->19.6. <A
-HREF="#AEN2777"
+>14.5.2. <A
+HREF="#AEN2438"
+>Configuring Samba</A
+></DT
+></DL
+></DD
+><DT
+>14.6. <A
+HREF="#AEN2466"
>Accounts and Groups management</A
></DT
><DT
-HREF="#AEN2782"
+HREF="#AEN2471"
>Security and sambaAccount</A
></DT
><DT
-HREF="#AEN2802"
+HREF="#AEN2491"
>LDAP specials attributes for sambaAccounts</A
></DT
><DT
-HREF="#AEN2872"
+HREF="#AEN2561"
>Example LDIF Entries for a sambaAccount</A
></DT
><DT
-HREF="#AEN2880"
+HREF="#AEN2569"
>Comments</A
></DT
></DL
></DD
><DT
-HREF="#CVS-ACCESS"
->HOWTO Access Samba source code via CVS</A
+HREF="#ADS"
+>Using samba 3.0 with ActiveDirectory support</A
></DT
><DD
><DL
><DT
-HREF="#AEN2891"
->Introduction</A
+HREF="#AEN2587"
+>Installing the required packages for Debian</A
></DT
><DT
->20.2. <A
-HREF="#AEN2896"
->CVS Access to samba.org</A
+>15.2. <A
+HREF="#AEN2593"
+>Installing the required packages for RedHat</A
+></DT
+><DT
+>15.3. <A
+HREF="#AEN2602"
+>Compile Samba</A
+></DT
+><DT
+>15.4. <A
+HREF="#AEN2614"
+>Setup your /etc/krb5.conf</A
+></DT
+><DT
+>15.5. <A
+HREF="#AEN2624"
+>Create the computer account</A
+></DT
+><DD
+><DL
+><DT
+>15.5.1. <A
+HREF="#AEN2628"
+>Possible errors</A
></DT
></DL
></DD
><DT
-HREF="#GROUPMAPPING"
->Group mapping HOWTO</A
+HREF="#AEN2640"
+>Test your server setup</A
></DT
><DT
->22. <A
+>15.7. <A
+HREF="#AEN2645"
+>Testing with smbclient</A
+></DT
+><DT
+>15.8. <A
+HREF="#AEN2648"
+>Notes</A
+></DT
+></DL
+></DD
+><DT
+>16. <A
+HREF="#IMPROVED-BROWSING"
+>Improved browsing in samba</A
+></DT
+><DD
+><DL
+><DT
+>16.1. <A
+HREF="#AEN2659"
+>Overview of browsing</A
+></DT
+><DT
+>16.2. <A
+HREF="#AEN2663"
+>Browsing support in samba</A
+></DT
+><DT
+>16.3. <A
+HREF="#AEN2672"
+>Problem resolution</A
+></DT
+><DT
+>16.4. <A
+HREF="#AEN2679"
+>Browsing across subnets</A
+></DT
+><DD
+><DL
+><DT
+>16.4.1. <A
+HREF="#AEN2684"
+>How does cross subnet browsing work ?</A
+></DT
+></DL
+></DD
+><DT
+>16.5. <A
+HREF="#AEN2719"
+>Setting up a WINS server</A
+></DT
+><DT
+>16.6. <A
+HREF="#AEN2738"
+>Setting up Browsing in a WORKGROUP</A
+></DT
+><DT
+>16.7. <A
+HREF="#AEN2756"
+>Setting up Browsing in a DOMAIN</A
+></DT
+><DT
+>16.8. <A
+HREF="#AEN2766"
+>Forcing samba to be the master</A
+></DT
+><DT
+>16.9. <A
+HREF="#AEN2775"
+>Making samba the domain master</A
+></DT
+><DT
+>16.10. <A
+HREF="#AEN2793"
+>Note about broadcast addresses</A
+></DT
+><DT
+>16.11. <A
+HREF="#AEN2796"
+>Multiple interfaces</A
+></DT
+></DL
+></DD
+><DT
+>17. <A
HREF="#SPEED"
>Samba performance issues</A
></DT
><DD
><DL
><DT
-HREF="#AEN2982"
+HREF="#AEN2814"
>Comparisons</A
></DT
><DT
-HREF="#AEN2988"
+HREF="#AEN2820"
>Oplocks</A
></DT
+><DD
+><DL
+><DT
+>17.2.1. <A
+HREF="#AEN2822"
+>Overview</A
+></DT
><DT
->22.3. <A
-HREF="#AEN3008"
+>17.2.2. <A
+HREF="#AEN2830"
+>Level2 Oplocks</A
+></DT
+><DT
+>17.2.3. <A
+HREF="#AEN2836"
+>Old 'fake oplocks' option - deprecated</A
+></DT
+></DL
+></DD
+><DT
+>17.3. <A
+HREF="#AEN2840"
>Socket options</A
></DT
><DT
-HREF="#AEN3015"
+HREF="#AEN2847"
>Read size</A
></DT
><DT
-HREF="#AEN3020"
+HREF="#AEN2852"
>Max xmit</A
></DT
><DT
-HREF="#AEN3025"
+HREF="#AEN2857"
>Locking</A
></DT
><DT
-HREF="#AEN3029"
+HREF="#AEN2861"
>Share modes</A
></DT
><DT
-HREF="#AEN3034"
+HREF="#AEN2866"
>Log level</A
></DT
><DT
-HREF="#AEN3037"
+HREF="#AEN2869"
>Wide lines</A
></DT
><DT
-HREF="#AEN3040"
+HREF="#AEN2872"
>Read raw</A
></DT
><DT
-HREF="#AEN3045"
+HREF="#AEN2877"
>Write raw</A
></DT
><DT
-HREF="#AEN3049"
+HREF="#AEN2881"
>Read prediction</A
></DT
><DT
-HREF="#AEN3056"
+HREF="#AEN2888"
>Memory mapping</A
></DT
><DT
-HREF="#AEN3061"
+HREF="#AEN2893"
>Slow Clients</A
></DT
><DT
-HREF="#AEN3065"
+HREF="#AEN2897"
>Slow Logins</A
></DT
><DT
-HREF="#AEN3068"
+HREF="#AEN2900"
>Client tuning</A
></DT
><DT
-HREF="#AEN3100"
+HREF="#AEN2932"
>My Results</A
></DT
></DL
></DD
-></DL
-></DD
><DT
-HREF="#AEN3106"
->Appendixes</A
+HREF="#OTHER-CLIENTS"
+>Samba and other CIFS clients</A
></DT
><DD
><DL
><DT
->23. <A
-HREF="#PORTABILITY"
->Portability</A
+>18.1. <A
+HREF="#AEN2953"
+>Macintosh clients?</A
+></DT
+><DT
+>18.2. <A
+HREF="#AEN2962"
+>OS2 Client</A
></DT
><DD
><DL
><DT
->23.1. <A
-HREF="#AEN3115"
->HPUX</A
+>18.2.1. <A
+HREF="#AEN2964"
+>How can I configure OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba?</A
></DT
><DT
->23.2. <A
-HREF="#AEN3121"
->SCO Unix</A
+>18.2.2. <A
+HREF="#AEN2979"
+>How can I configure OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba?</A
></DT
><DT
->23.3. <A
-HREF="#AEN3125"
->DNIX</A
+>18.2.3. <A
+HREF="#AEN2988"
+>Are there any other issues when OS/2 (any version)
+ is used as a client?</A
></DT
><DT
->23.4. <A
-HREF="#AEN3154"
->RedHat Linux Rembrandt-II</A
+>18.2.4. <A
+HREF="#AEN2992"
+>How do I get printer driver download working
+ for OS/2 clients?</A
></DT
></DL
></DD
><DT
-HREF="#OTHER-CLIENTS"
->Samba and other CIFS clients</A
+HREF="#AEN3002"
+>Windows for Workgroups</A
></DT
><DD
><DL
><DT
-HREF="#AEN3175"
->Macintosh clients?</A
+HREF="#AEN3004"
+>Use latest TCP/IP stack from Microsoft</A
></DT
><DT
-HREF="#AEN3184"
->OS2 Client</A
+HREF="#AEN3009"
+>Delete .pwl files after password change</A
></DT
><DT
-HREF="#AEN3224"
->Windows for Workgroups</A
+HREF="#AEN3014"
+>Configure WfW password handling</A
></DT
><DT
->24.4. <A
-HREF="#AEN3245"
+>18.3.4. <A
+HREF="#AEN3018"
+>Case handling of passwords</A
+></DT
+></DL
+></DD
+><DT
+>18.4. <A
+HREF="#AEN3023"
>Windows '95/'98</A
></DT
><DT
-HREF="#AEN3261"
+HREF="#AEN3039"
>Windows 2000 Service Pack 2</A
></DT
></DL
></DD
><DT
->25. <A
+>19. <A
+HREF="#CVS-ACCESS"
+>HOWTO Access Samba source code via CVS</A
+></DT
+><DD
+><DL
+><DT
+>19.1. <A
+HREF="#AEN3063"
+>Introduction</A
+></DT
+><DT
+>19.2. <A
+HREF="#AEN3068"
+>CVS Access to samba.org</A
+></DT
+><DD
+><DL
+><DT
+>19.2.1. <A
+HREF="#AEN3071"
+>Access via CVSweb</A
+></DT
+><DT
+>19.2.2. <A
+HREF="#AEN3076"
+>Access via cvs</A
+></DT
+></DL
+></DD
+></DL
+></DD
+><DT
+>20. <A
HREF="#BUGREPORT"
>Reporting Bugs</A
></DT
><DD
><DL
><DT
-HREF="#AEN3285"
+HREF="#AEN3111"
>Introduction</A
></DT
><DT
-HREF="#AEN3295"
+HREF="#AEN3118"
>General info</A
></DT
><DT
-HREF="#AEN3301"
+HREF="#AEN3124"
>Debug levels</A
></DT
><DT
-HREF="#AEN3318"
+HREF="#AEN3141"
>Internal errors</A
></DT
><DT
-HREF="#AEN3328"
+HREF="#AEN3151"
>Attaching to a running process</A
></DT
><DT
-HREF="#AEN3331"
+HREF="#AEN3154"
>Patches</A
></DT
></DL
></DD
><DT
-HREF="#DIAGNOSIS"
->Diagnosing your samba server</A
+HREF="#GROUPMAPPING"
+>Group mapping HOWTO</A
></DT
-><DD
-><DL
><DT
-HREF="#AEN3354"
->Introduction</A
+HREF="#PORTABILITY"
+>Portability</A
></DT
+><DD
+><DL
><DT
-HREF="#AEN3359"
->Assumptions</A
+HREF="#AEN3201"
+>HPUX</A
></DT
><DT
-HREF="#AEN3369"
->Tests</A
+HREF="#AEN3206"
+>SCO Unix</A
></DT
><DT
-HREF="#AEN3479"
->Still having troubles?</A
+HREF="#AEN3210"
+>DNIX</A
></DT
></DL
></DD
></DL
-></DD
-></DL
></DIV
><DIV
-CLASS="PART"
+CLASS="CHAPTER"
+><HR><H1
><A
-NAME="AEN18"
+NAME="INSTALL"
></A
-><DIV
-CLASS="TITLEPAGE"
-><H1
-CLASS="TITLE"
->I. General installation</H1
-><DIV
-CLASS="PARTINTRO"
-><A
-NAME="AEN20"
-></A
-><H1
->Introduction</H1
-><P
->This part contains general info on how to install samba
-and how to configure the parts of samba you will most likely need.
-PLEASE read this.</P
-></DIV
-><DIV
-CLASS="TOC"
-><DL
-><DT
-><B
->Table of Contents</B
-></DT
-><DT
->1. <A
-HREF="#INSTALL"
->How to Install and Test SAMBA</A
-></DT
-><DD
-><DL
-><DT
->1.1. <A
-HREF="#AEN25"
->Read the man pages</A
-></DT
-><DT
->1.2. <A
-HREF="#AEN35"
->Building the Binaries</A
-></DT
-><DT
->1.3. <A
-HREF="#AEN63"
->The all important step</A
-></DT
-><DT
->1.4. <A
-HREF="#AEN67"
->Create the smb configuration file.</A
-></DT
-><DT
->1.5. <A
-HREF="#AEN81"
->Test your config file with
- <B
-CLASS="COMMAND"
->testparm</B
-></A
-></DT
-><DT
->1.6. <A
-HREF="#AEN89"
->Starting the smbd and nmbd</A
-></DT
-><DD
-><DL
-><DT
->1.6.1. <A
-HREF="#AEN99"
->Starting from inetd.conf</A
-></DT
-><DT
->1.6.2. <A
-HREF="#AEN128"
->Alternative: starting it as a daemon</A
-></DT
-></DL
-></DD
-><DT
->1.7. <A
-HREF="#AEN144"
->Try listing the shares available on your
- server</A
-></DT
-><DT
->1.8. <A
-HREF="#AEN153"
->Try connecting with the unix client</A
-></DT
-><DT
->1.9. <A
-HREF="#AEN169"
->Try connecting from a DOS, WfWg, Win9x, WinNT,
- Win2k, OS/2, etc... client</A
-></DT
-><DT
->1.10. <A
-HREF="#AEN183"
->What If Things Don't Work?</A
-></DT
-><DD
-><DL
-><DT
->1.10.1. <A
-HREF="#AEN188"
->Diagnosing Problems</A
-></DT
-><DT
->1.10.2. <A
-HREF="#AEN192"
->Scope IDs</A
-></DT
-><DT
->1.10.3. <A
-HREF="#AEN195"
->Choosing the Protocol Level</A
-></DT
-><DT
->1.10.4. <A
-HREF="#AEN204"
->Printing from UNIX to a Client PC</A
-></DT
-><DT
->1.10.5. <A
-HREF="#AEN209"
->Locking</A
-></DT
-><DT
->1.10.6. <A
-HREF="#AEN218"
->Mapping Usernames</A
-></DT
-></DL
-></DD
-></DL
-></DD
-><DT
->2. <A
-HREF="#IMPROVED-BROWSING"
->Improved browsing in samba</A
-></DT
-><DD
-><DL
-><DT
->2.1. <A
-HREF="#AEN228"
->Overview of browsing</A
-></DT
-><DT
->2.2. <A
-HREF="#AEN232"
->Browsing support in samba</A
-></DT
-><DT
->2.3. <A
-HREF="#AEN241"
->Problem resolution</A
-></DT
-><DT
->2.4. <A
-HREF="#AEN248"
->Browsing across subnets</A
-></DT
-><DD
-><DL
-><DT
->2.4.1. <A
-HREF="#AEN253"
->How does cross subnet browsing work ?</A
-></DT
-></DL
-></DD
-><DT
->2.5. <A
-HREF="#AEN288"
->Setting up a WINS server</A
-></DT
-><DT
->2.6. <A
-HREF="#AEN307"
->Setting up Browsing in a WORKGROUP</A
-></DT
-><DT
->2.7. <A
-HREF="#AEN325"
->Setting up Browsing in a DOMAIN</A
-></DT
-><DT
->2.8. <A
-HREF="#AEN335"
->Forcing samba to be the master</A
-></DT
-><DT
->2.9. <A
-HREF="#AEN344"
->Making samba the domain master</A
-></DT
-><DT
->2.10. <A
-HREF="#AEN362"
->Note about broadcast addresses</A
-></DT
-><DT
->2.11. <A
-HREF="#AEN365"
->Multiple interfaces</A
-></DT
-></DL
-></DD
-><DT
->3. <A
-HREF="#OPLOCKS"
->Oplocks</A
-></DT
-><DD
-><DL
-><DT
->3.1. <A
-HREF="#AEN377"
->What are oplocks?</A
-></DT
-></DL
-></DD
-><DT
->4. <A
-HREF="#BROWSING-QUICK"
->Quick Cross Subnet Browsing / Cross Workgroup Browsing guide</A
-></DT
-><DD
-><DL
-><DT
->4.1. <A
-HREF="#AEN392"
->Discussion</A
-></DT
-><DT
->4.2. <A
-HREF="#AEN400"
->Use of the "Remote Announce" parameter</A
-></DT
-><DT
->4.3. <A
-HREF="#AEN414"
->Use of the "Remote Browse Sync" parameter</A
-></DT
-><DT
->4.4. <A
-HREF="#AEN419"
->Use of WINS</A
-></DT
-><DT
->4.5. <A
-HREF="#AEN430"
->Do NOT use more than one (1) protocol on MS Windows machines</A
-></DT
-><DT
->4.6. <A
-HREF="#AEN436"
->Name Resolution Order</A
-></DT
-></DL
-></DD
-><DT
->5. <A
-HREF="#PWENCRYPT"
->LanMan and NT Password Encryption in Samba</A
-></DT
-><DD
-><DL
-><DT
->5.1. <A
-HREF="#AEN472"
->Introduction</A
-></DT
-><DT
->5.2. <A
-HREF="#AEN477"
->Important Notes About Security</A
-></DT
-><DD
-><DL
-><DT
->5.2.1. <A
-HREF="#AEN496"
->Advantages of SMB Encryption</A
-></DT
-><DT
->5.2.2. <A
-HREF="#AEN503"
->Advantages of non-encrypted passwords</A
-></DT
-></DL
-></DD
-><DT
->5.3. <A
-HREF="#AEN512"
->The smbpasswd Command</A
-></DT
-></DL
-></DD
-></DL
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="INSTALL"
-></A
->Chapter 1. How to Install and Test SAMBA</H1
+>Chapter 1. How to Install and Test SAMBA</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN25"
+NAME="AEN20"
></A
->1.1. Read the man pages</H2
+>1.1. Step 0: Read the man pages</H2
><P
>The man pages distributed with SAMBA contain
lots of useful info that will help to get you started.
><TT
CLASS="USERINPUT"
><B
->man smbd.8</B
-></TT
->
- or
- <TT
-CLASS="PROMPT"
->$ </TT
-><TT
-CLASS="USERINPUT"
-><B
>nroff -man smbd.8 | more
</B
></TT
-> on older unixes.</P
+></P
><P
>Other sources of information are pointed to
by the Samba web site,<A
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN35"
+NAME="AEN28"
></A
->1.2. Building the Binaries</H2
+>1.2. Step 1: Building the Binaries</H2
><P
>To do this, first run the program <B
CLASS="COMMAND"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN63"
+NAME="AEN56"
></A
->1.3. The all important step</H2
+>1.3. Step 2: The all important step</H2
><P
>At this stage you must fetch yourself a
coffee or other drink you find stimulating. Getting the rest
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN67"
+NAME="AEN60"
></A
->1.4. Create the smb configuration file.</H2
+>1.4. Step 3: Create the smb configuration file.</H2
><P
>There are sample configuration files in the examples
subdirectory in the distribution. I suggest you read them
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN81"
+NAME="AEN74"
></A
->1.5. Test your config file with
+>1.5. Step 4: Test your config file with
<B
CLASS="COMMAND"
>testparm</B
><P
>Make sure it runs OK and that the services look
reasonable before proceeding. </P
-><P
->Always run testparm again when you change
- <TT
-CLASS="FILENAME"
->smb.conf</TT
->!</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN89"
+NAME="AEN80"
></A
->1.6. Starting the smbd and nmbd</H2
+>1.6. Step 5: Starting the smbd and nmbd</H2
><P
>You must choose to start smbd and nmbd either
as daemons or from <B
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN99"
+NAME="AEN90"
></A
->1.6.1. Starting from inetd.conf</H3
+>1.6.1. Step 5a: Starting from inetd.conf</H3
><P
>NOTE; The following will be different if
you use NIS or NIS+ to distributed services maps.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN128"
+NAME="AEN119"
></A
->1.6.2. Alternative: starting it as a daemon</H3
+>1.6.2. Step 5b. Alternative: starting it as a daemon</H3
><P
>To start the server as a daemon you should create
a script something like this one, perhaps calling
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN144"
+NAME="AEN135"
></A
->1.7. Try listing the shares available on your
+>1.7. Step 6: Try listing the shares available on your
server</H2
><P
><TT
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN153"
+NAME="AEN144"
></A
->1.8. Try connecting with the unix client</H2
+>1.8. Step 7: Try connecting with the unix client</H2
><P
><TT
CLASS="PROMPT"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN169"
+NAME="AEN160"
></A
->1.9. Try connecting from a DOS, WfWg, Win9x, WinNT,
+>1.9. Step 8: Try connecting from a DOS, WfWg, Win9x, WinNT,
Win2k, OS/2, etc... client</H2
><P
>Try mounting disks. eg:</P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN183"
+NAME="AEN174"
></A
>1.10. What If Things Don't Work?</H2
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN188"
+NAME="AEN179"
></A
>1.10.1. Diagnosing Problems</H3
><P
->If you have installation problems then go to the
- <A
-HREF="Diagnosis.html"
-TARGET="_top"
->Diagnosis</A
-> chapter to try to find the
+>If you have installation problems then go to
+ <TT
+CLASS="FILENAME"
+>DIAGNOSIS.txt</TT
+> to try to find the
problem.</P
></DIV
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN192"
+NAME="AEN183"
></A
>1.10.2. Scope IDs</H3
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN195"
+NAME="AEN186"
></A
>1.10.3. Choosing the Protocol Level</H3
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN204"
+NAME="AEN195"
></A
>1.10.4. Printing from UNIX to a Client PC</H3
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN209"
+NAME="AEN200"
></A
>1.10.5. Locking</H3
><P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN218"
+NAME="AEN209"
></A
>1.10.6. Mapping Usernames</H3
><P
CLASS="CHAPTER"
><HR><H1
><A
-NAME="IMPROVED-BROWSING"
+NAME="DIAGNOSIS"
></A
->Chapter 2. Improved browsing in samba</H1
+>Chapter 2. Diagnosing your samba server</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN228"
+NAME="AEN223"
></A
->2.1. Overview of browsing</H2
+>2.1. Introduction</H2
><P
->SMB networking provides a mechanism by which clients can access a list
-of machines in a network, a so-called "browse list". This list
-contains machines that are ready to offer file and/or print services
-to other machines within the network. Thus it does not include
-machines which aren't currently able to do server tasks. The browse
-list is heavily used by all SMB clients. Configuration of SMB
-browsing has been problematic for some Samba users, hence this
-document.</P
+>This file contains a list of tests you can perform to validate your
+Samba server. It also tells you what the likely cause of the problem
+is if it fails any one of these steps. If it passes all these tests
+then it is probably working fine.</P
><P
->Browsing will NOT work if name resolution from NetBIOS names to IP
-addresses does not function correctly. Use of a WINS server is highly
-recommended to aid the resolution of NetBIOS (SMB) names to IP addresses.
-WINS allows remote segment clients to obtain NetBIOS name_type information
-that can NOT be provided by any other means of name resolution.</P
+>You should do ALL the tests, in the order shown. I have tried to
+carefully choose them so later tests only use capabilities verified in
+the earlier tests.</P
+><P
+>If you send me an email saying "it doesn't work" and you have not
+followed this test procedure then you should not be surprised if I
+ignore your email.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN232"
+NAME="AEN228"
></A
->2.2. Browsing support in samba</H2
+>2.2. Assumptions</H2
><P
->Samba now fully supports browsing. The browsing is supported by nmbd
-and is also controlled by options in the smb.conf file (see smb.conf(5)).</P
+>In all of the tests I assume you have a Samba server called BIGSERVER
+and a PC called ACLIENT both in workgroup TESTGROUP. I also assume the
+PC is running windows for workgroups with a recent copy of the
+microsoft tcp/ip stack. Alternatively, your PC may be running Windows
+95 or Windows NT (Workstation or Server).</P
><P
->Samba can act as a local browse master for a workgroup and the ability
-for samba to support domain logons and scripts is now available. See
-DOMAIN.txt for more information on domain logons.</P
+>The procedure is similar for other types of clients.</P
><P
->Samba can also act as a domain master browser for a workgroup. This
-means that it will collate lists from local browse masters into a
-wide area network server list. In order for browse clients to
-resolve the names they may find in this list, it is recommended that
-both samba and your clients use a WINS server.</P
+>I also assume you know the name of an available share in your
+smb.conf. I will assume this share is called "tmp". You can add a
+"tmp" share like by adding the following to smb.conf:</P
><P
->Note that you should NOT set Samba to be the domain master for a
-workgroup that has the same name as an NT Domain: on each wide area
-network, you must only ever have one domain master browser per workgroup,
-regardless of whether it is NT, Samba or any other type of domain master
-that is providing this service.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> [tmp]
+ comment = temporary files
+ path = /tmp
+ read only = yes </PRE
+></P
><P
->[Note that nmbd can be configured as a WINS server, but it is not
-necessary to specifically use samba as your WINS server. NTAS can
-be configured as your WINS server. In a mixed NT server and
-samba environment on a Wide Area Network, it is recommended that
-you use the NT server's WINS server capabilities. In a samba-only
-environment, it is recommended that you use one and only one nmbd
-as your WINS server].</P
+>THESE TESTS ASSUME VERSION 2.0.6 OR LATER OF THE SAMBA SUITE. SOME
+COMMANDS SHOWN DID NOT EXIST IN EARLIER VERSIONS</P
><P
->To get browsing to work you need to run nmbd as usual, but will need
-to use the "workgroup" option in smb.conf to control what workgroup
-Samba becomes a part of.</P
+>Please pay attention to the error messages you receive. If any error message
+reports that your server is being unfriendly you should first check that you
+IP name resolution is correctly set up. eg: Make sure your /etc/resolv.conf
+file points to name servers that really do exist.</P
><P
->Samba also has a useful option for a Samba server to offer itself for
-browsing on another subnet. It is recommended that this option is only
-used for 'unusual' purposes: announcements over the internet, for
-example. See "remote announce" in the smb.conf man page. </P
+>Also, if you do not have DNS server access for name resolution please check
+that the settings for your smb.conf file results in "dns proxy = no". The
+best way to check this is with "testparm smb.conf"</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN241"
+NAME="AEN238"
></A
->2.3. Problem resolution</H2
-><P
->If something doesn't work then hopefully the log.nmb file will help
-you track down the problem. Try a debug level of 2 or 3 for finding
-problems. Also note that the current browse list usually gets stored
-in text form in a file called browse.dat.</P
-><P
->Note that if it doesn't work for you, then you should still be able to
-type the server name as \\SERVER in filemanager then hit enter and
-filemanager should display the list of available shares.</P
-><P
->Some people find browsing fails because they don't have the global
-"guest account" set to a valid account. Remember that the IPC$
-connection that lists the shares is done as guest, and thus you must
-have a valid guest account.</P
+>2.3. Tests</H2
+><DIV
+CLASS="SECT2"
+><H3
+CLASS="SECT2"
+><A
+NAME="AEN240"
+></A
+>2.3.1. Test 1</H3
><P
->Also, a lot of people are getting bitten by the problem of too many
-parameters on the command line of nmbd in inetd.conf. This trick is to
-not use spaces between the option and the parameter (eg: -d2 instead
-of -d 2), and to not use the -B and -N options. New versions of nmbd
-are now far more likely to correctly find your broadcast and network
-address, so in most cases these aren't needed.</P
+>In the directory in which you store your smb.conf file, run the command
+"testparm smb.conf". If it reports any errors then your smb.conf
+configuration file is faulty.</P
><P
->The other big problem people have is that their broadcast address,
-netmask or IP address is wrong (specified with the "interfaces" option
-in smb.conf)</P
+>Note: Your smb.conf file may be located in: <TT
+CLASS="FILENAME"
+>/etc</TT
+>
+ Or in: <TT
+CLASS="FILENAME"
+>/usr/local/samba/lib</TT
+></P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN248"
+NAME="AEN246"
></A
->2.4. Browsing across subnets</H2
+>2.3.2. Test 2</H3
><P
->With the release of Samba 1.9.17(alpha1 and above) Samba has been
-updated to enable it to support the replication of browse lists
-across subnet boundaries. New code and options have been added to
-achieve this. This section describes how to set this feature up
-in different settings.</P
+>Run the command "ping BIGSERVER" from the PC and "ping ACLIENT" from
+the unix box. If you don't get a valid response then your TCP/IP
+software is not correctly installed. </P
><P
->To see browse lists that span TCP/IP subnets (ie. networks separated
-by routers that don't pass broadcast traffic) you must set up at least
-one WINS server. The WINS server acts as a DNS for NetBIOS names, allowing
-NetBIOS name to IP address translation to be done by doing a direct
-query of the WINS server. This is done via a directed UDP packet on
-port 137 to the WINS server machine. The reason for a WINS server is
-that by default, all NetBIOS name to IP address translation is done
-by broadcasts from the querying machine. This means that machines
-on one subnet will not be able to resolve the names of machines on
-another subnet without using a WINS server.</P
+>Note that you will need to start a "dos prompt" window on the PC to
+run ping.</P
><P
->Remember, for browsing across subnets to work correctly, all machines,
-be they Windows 95, Windows NT, or Samba servers must have the IP address
-of a WINS server given to them by a DHCP server, or by manual configuration
-(for Win95 and WinNT, this is in the TCP/IP Properties, under Network
-settings) for Samba this is in the smb.conf file.</P
+>If you get a message saying "host not found" or similar then your DNS
+software or /etc/hosts file is not correctly setup. It is possible to
+run samba without DNS entries for the server and client, but I assume
+you do have correct entries for the remainder of these tests. </P
+><P
+>Another reason why ping might fail is if your host is running firewall
+software. You will need to relax the rules to let in the workstation
+in question, perhaps by allowing access from another subnet (on Linux
+this is done via the ipfwadm program.)</P
+></DIV
><DIV
CLASS="SECT2"
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN253"
+NAME="AEN252"
></A
->2.4.1. How does cross subnet browsing work ?</H3
-><P
->Cross subnet browsing is a complicated dance, containing multiple
-moving parts. It has taken Microsoft several years to get the code
-that achieves this correct, and Samba lags behind in some areas.
-However, with the 1.9.17 release, Samba is capable of cross subnet
-browsing when configured correctly.</P
+>2.3.3. Test 3</H3
><P
->Consider a network set up as follows :</P
+>Run the command "smbclient -L BIGSERVER" on the unix box. You
+should get a list of available shares back. </P
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> (DMB)
- N1_A N1_B N1_C N1_D N1_E
- | | | | |
- -------------------------------------------------------
- | subnet 1 |
- +---+ +---+
- |R1 | Router 1 Router 2 |R2 |
- +---+ +---+
- | |
- | subnet 2 subnet 3 |
- -------------------------- ------------------------------------
- | | | | | | | |
- N2_A N2_B N2_C N2_D N3_A N3_B N3_C N3_D
- (WINS)</PRE
-></P
+>If you get a error message containing the string "Bad password" then
+you probably have either an incorrect "hosts allow", "hosts deny" or
+"valid users" line in your smb.conf, or your guest account is not
+valid. Check what your guest account is using "testparm" and
+temporarily remove any "hosts allow", "hosts deny", "valid users" or
+"invalid users" lines.</P
><P
->Consisting of 3 subnets (1, 2, 3) connected by two routers
-(R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines
-on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume
-for the moment that all these machines are configured to be in the
-same workgroup (for simplicities sake). Machine N1_C on subnet 1
-is configured as Domain Master Browser (ie. it will collate the
-browse lists for the workgroup). Machine N2_D is configured as
-WINS server and all the other machines are configured to register
-their NetBIOS names with it.</P
+>If you get a "connection refused" response then the smbd server may
+not be running. If you installed it in inetd.conf then you probably edited
+that file incorrectly. If you installed it as a daemon then check that
+it is running, and check that the netbios-ssn port is in a LISTEN
+state using "netstat -a".</P
><P
->As all these machines are booted up, elections for master browsers
-will take place on each of the three subnets. Assume that machine
-N1_C wins on subnet 1, N2_B wins on subnet 2, and N3_D wins on
-subnet 3 - these machines are known as local master browsers for
-their particular subnet. N1_C has an advantage in winning as the
-local master browser on subnet 1 as it is set up as Domain Master
-Browser.</P
+>If you get a "session request failed" then the server refused the
+connection. If it says "Your server software is being unfriendly" then
+its probably because you have invalid command line parameters to smbd,
+or a similar fatal problem with the initial startup of smbd. Also
+check your config file (smb.conf) for syntax errors with "testparm"
+and that the various directories where samba keeps its log and lock
+files exist.</P
><P
->On each of the three networks, machines that are configured to
-offer sharing services will broadcast that they are offering
-these services. The local master browser on each subnet will
-receive these broadcasts and keep a record of the fact that
-the machine is offering a service. This list of records is
-the basis of the browse list. For this case, assume that
-all the machines are configured to offer services so all machines
-will be on the browse list.</P
+>There are a number of reasons for which smbd may refuse or decline
+a session request. The most common of these involve one or more of
+the following smb.conf file entries:</P
><P
->For each network, the local master browser on that network is
-considered 'authoritative' for all the names it receives via
-local broadcast. This is because a machine seen by the local
-master browser via a local broadcast must be on the same
-network as the local master browser and thus is a 'trusted'
-and 'verifiable' resource. Machines on other networks that
-the local master browsers learn about when collating their
-browse lists have not been directly seen - these records are
-called 'non-authoritative'.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> hosts deny = ALL
+ hosts allow = xxx.xxx.xxx.xxx/yy
+ bind interfaces only = Yes</PRE
+></P
><P
->At this point the browse lists look as follows (these are
-the machines you would see in your network neighborhood if
-you looked in it on a particular network right now).</P
+>In the above, no allowance has been made for any session requests that
+will automatically translate to the loopback adaptor address 127.0.0.1.
+To solve this problem change these lines to:</P
><P
><PRE
CLASS="PROGRAMLISTING"
->Subnet Browse Master List
------- ------------- ----
-Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E
-
-Subnet2 N2_B N2_A, N2_B, N2_C, N2_D
-
-Subnet3 N3_D N3_A, N3_B, N3_C, N3_D</PRE
+> hosts deny = ALL
+ hosts allow = xxx.xxx.xxx.xxx/yy 127.</PRE
></P
><P
->Note that at this point all the subnets are separate, no
-machine is seen across any of the subnets.</P
-><P
->Now examine subnet 2. As soon as N2_B has become the local
-master browser it looks for a Domain master browser to synchronize
-its browse list with. It does this by querying the WINS server
-(N2_D) for the IP address associated with the NetBIOS name
-WORKGROUP>1B<. This name was registerd by the Domain master
-browser (N1_C) with the WINS server as soon as it was booted.</P
+>Do NOT use the "bind interfaces only" parameter where you may wish to
+use the samba password change facility, or where smbclient may need to
+access local service for name resolution or for local resource
+connections. (Note: the "bind interfaces only" parameter deficiency
+where it will not allow connections to the loopback address will be
+fixed soon).</P
><P
->Once N2_B knows the address of the Domain master browser it
-tells it that is the local master browser for subnet 2 by
-sending a MasterAnnouncement packet as a UDP port 138 packet.
-It then synchronizes with it by doing a NetServerEnum2 call. This
-tells the Domain Master Browser to send it all the server
-names it knows about. Once the domain master browser receives
-the MasterAnnouncement packet it schedules a synchronization
-request to the sender of that packet. After both synchronizations
-are done the browse lists look like :</P
+>Another common cause of these two errors is having something already running
+on port 139, such as Samba (ie: smbd is running from inetd already) or
+something like Digital's Pathworks. Check your inetd.conf file before trying
+to start smbd as a daemon, it can avoid a lot of frustration!</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->Subnet Browse Master List
------- ------------- ----
-Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E,
- N2_A(*), N2_B(*), N2_C(*), N2_D(*)
-
-Subnet2 N2_B N2_A, N2_B, N2_C, N2_D
- N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
-
-Subnet3 N3_D N3_A, N3_B, N3_C, N3_D
-
-Servers with a (*) after them are non-authoritative names.</PRE
+>And yet another possible cause for failure of TEST 3 is when the subnet mask
+and / or broadcast address settings are incorrect. Please check that the
+network interface IP Address / Broadcast Address / Subnet Mask settings are
+correct and that Samba has correctly noted these in the log.nmb file.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN267"
+></A
+>2.3.4. Test 4</H3
+><P
+>Run the command "nmblookup -B BIGSERVER __SAMBA__". You should get the
+IP address of your Samba server back.</P
+><P
+>If you don't then nmbd is incorrectly installed. Check your inetd.conf
+if you run it from there, or that the daemon is running and listening
+to udp port 137.</P
+><P
+>One common problem is that many inetd implementations can't take many
+parameters on the command line. If this is the case then create a
+one-line script that contains the right parameters and run that from
+inetd.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN272"
+></A
+>2.3.5. Test 5</H3
+><P
+>run the command <B
+CLASS="COMMAND"
+>nmblookup -B ACLIENT '*'</B
></P
><P
->At this point users looking in their network neighborhood on
-subnets 1 or 2 will see all the servers on both, users on
-subnet 3 will still only see the servers on their own subnet.</P
+>You should get the PCs IP address back. If you don't then the client
+software on the PC isn't installed correctly, or isn't started, or you
+got the name of the PC wrong. </P
><P
->The same sequence of events that occured for N2_B now occurs
-for the local master browser on subnet 3 (N3_D). When it
-synchronizes browse lists with the domain master browser (N1_A)
-it gets both the server entries on subnet 1, and those on
-subnet 2. After N3_D has synchronized with N1_C and vica-versa
-the browse lists look like.</P
+>If ACLIENT doesn't resolve via DNS then use the IP address of the
+client in the above test.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN278"
+></A
+>2.3.6. Test 6</H3
><P
-><PRE
-CLASS="PROGRAMLISTING"
->Subnet Browse Master List
------- ------------- ----
-Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E,
- N2_A(*), N2_B(*), N2_C(*), N2_D(*),
- N3_A(*), N3_B(*), N3_C(*), N3_D(*)
-
-Subnet2 N2_B N2_A, N2_B, N2_C, N2_D
- N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
-
-Subnet3 N3_D N3_A, N3_B, N3_C, N3_D
- N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*),
- N2_A(*), N2_B(*), N2_C(*), N2_D(*)
-
-Servers with a (*) after them are non-authoritative names.</PRE
+>Run the command <B
+CLASS="COMMAND"
+>nmblookup -d 2 '*'</B
></P
><P
->At this point users looking in their network neighborhood on
-subnets 1 or 3 will see all the servers on all sunbets, users on
-subnet 2 will still only see the servers on subnets 1 and 2, but not 3.</P
+>This time we are trying the same as the previous test but are trying
+it via a broadcast to the default broadcast address. A number of
+Netbios/TCPIP hosts on the network should respond, although Samba may
+not catch all of the responses in the short time it listens. You
+should see "got a positive name query response" messages from several
+hosts.</P
><P
->Finally, the local master browser for subnet 2 (N2_B) will sync again
-with the domain master browser (N1_C) and will recieve the missing
-server entries. Finally - and as a steady state (if no machines
-are removed or shut off) the browse lists will look like :</P
+>If this doesn't give a similar result to the previous test then
+nmblookup isn't correctly getting your broadcast address through its
+automatic mechanism. In this case you should experiment use the
+"interfaces" option in smb.conf to manually configure your IP
+address, broadcast and netmask. </P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->Subnet Browse Master List
------- ------------- ----
-Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E,
- N2_A(*), N2_B(*), N2_C(*), N2_D(*),
- N3_A(*), N3_B(*), N3_C(*), N3_D(*)
-
-Subnet2 N2_B N2_A, N2_B, N2_C, N2_D
- N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
- N3_A(*), N3_B(*), N3_C(*), N3_D(*)
-
-Subnet3 N3_D N3_A, N3_B, N3_C, N3_D
- N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*),
- N2_A(*), N2_B(*), N2_C(*), N2_D(*)
-
-Servers with a (*) after them are non-authoritative names.</PRE
+>If your PC and server aren't on the same subnet then you will need to
+use the -B option to set the broadcast address to the that of the PCs
+subnet.</P
+><P
+>This test will probably fail if your subnet mask and broadcast address are
+not correct. (Refer to TEST 3 notes above).</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN286"
+></A
+>2.3.7. Test 7</H3
+><P
+>Run the command <B
+CLASS="COMMAND"
+>smbclient //BIGSERVER/TMP</B
+>. You should
+then be prompted for a password. You should use the password of the account
+you are logged into the unix box with. If you want to test with
+another account then add the -U >accountname< option to the end of
+the command line. eg:
+<B
+CLASS="COMMAND"
+>smbclient //bigserver/tmp -Ujohndoe</B
></P
><P
->Synchronizations between the domain master browser and local
-master browsers will continue to occur, but this should be a
-steady state situation.</P
+>Note: It is possible to specify the password along with the username
+as follows:
+<B
+CLASS="COMMAND"
+>smbclient //bigserver/tmp -Ujohndoe%secret</B
+></P
><P
->If either router R1 or R2 fails the following will occur:</P
+>Once you enter the password you should get the "smb>" prompt. If you
+don't then look at the error message. If it says "invalid network
+name" then the service "tmp" is not correctly setup in your smb.conf.</P
+><P
+>If it says "bad password" then the likely causes are:</P
><P
></P
><OL
TYPE="1"
><LI
><P
-> Names of computers on each side of the inaccessible network fragments
- will be maintained for as long as 36 minutes, in the network neighbourhood
- lists.
+> you have shadow passords (or some other password system) but didn't
+ compile in support for them in smbd
</P
></LI
><LI
><P
-> Attempts to connect to these inaccessible computers will fail, but the
- names will not be removed from the network neighbourhood lists.
+> your "valid users" configuration is incorrect
</P
></LI
><LI
><P
-> If one of the fragments is cut off from the WINS server, it will only
- be able to access servers on its local subnet, by using subnet-isolated
- broadcast NetBIOS name resolution. The effects are similar to that of
- losing access to a DNS server.
+> you have a mixed case password and you haven't enabled the "password
+ level" option at a high enough level
+ </P
+></LI
+><LI
+><P
+> the "path =" line in smb.conf is incorrect. Check it with testparm
+ </P
+></LI
+><LI
+><P
+> you enabled password encryption but didn't create the SMB encrypted
+ password file
</P
></LI
></OL
-></DIV
+><P
+>Once connected you should be able to use the commands
+<B
+CLASS="COMMAND"
+>dir</B
+> <B
+CLASS="COMMAND"
+>get</B
+> <B
+CLASS="COMMAND"
+>put</B
+> etc.
+Type <B
+CLASS="COMMAND"
+>help >command<</B
+> for instructions. You should
+especially check that the amount of free disk space shown is correct
+when you type <B
+CLASS="COMMAND"
+>dir</B
+>.</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN288"
+NAME="AEN312"
></A
->2.5. Setting up a WINS server</H2
-><P
->Either a Samba machine or a Windows NT Server machine may be set up
-as a WINS server. To set a Samba machine to be a WINS server you must
-add the following option to the smb.conf file on the selected machine :
-in the [globals] section add the line </P
+>2.3.8. Test 8</H3
><P
-><B
+>On the PC type the command <B
CLASS="COMMAND"
-> wins support = yes</B
-></P
-><P
->Versions of Samba previous to 1.9.17 had this parameter default to
-yes. If you have any older versions of Samba on your network it is
-strongly suggested you upgrade to 1.9.17 or above, or at the very
-least set the parameter to 'no' on all these machines.</P
+>net view \\BIGSERVER</B
+>. You will
+need to do this from within a "dos prompt" window. You should get back a
+list of available shares on the server.</P
><P
->Machines with "<B
-CLASS="COMMAND"
->wins support = yes</B
->" will keep a list of
-all NetBIOS names registered with them, acting as a DNS for NetBIOS names.</P
+>If you get a "network name not found" or similar error then netbios
+name resolution is not working. This is usually caused by a problem in
+nmbd. To overcome it you could do one of the following (you only need
+to choose one of them):</P
><P
->You should set up only ONE wins server. Do NOT set the
-"<B
-CLASS="COMMAND"
->wins support = yes</B
->" option on more than one Samba
-server.</P
+></P
+><OL
+TYPE="1"
+><LI
><P
->To set up a Windows NT Server as a WINS server you need to set up
-the WINS service - see your NT documentation for details. Note that
-Windows NT WINS Servers can replicate to each other, allowing more
-than one to be set up in a complex subnet environment. As Microsoft
-refuse to document these replication protocols Samba cannot currently
-participate in these replications. It is possible in the future that
-a Samba->Samba WINS replication protocol may be defined, in which
-case more than one Samba machine could be set up as a WINS server
-but currently only one Samba server should have the "wins support = yes"
-parameter set.</P
+> fixup the nmbd installation</P
+></LI
+><LI
><P
->After the WINS server has been configured you must ensure that all
-machines participating on the network are configured with the address
-of this WINS server. If your WINS server is a Samba machine, fill in
-the Samba machine IP address in the "Primary WINS Server" field of
-the "Control Panel->Network->Protocols->TCP->WINS Server" dialogs
-in Windows 95 or Windows NT. To tell a Samba server the IP address
-of the WINS server add the following line to the [global] section of
-all smb.conf files :</P
+> add the IP address of BIGSERVER to the "wins server" box in the
+ advanced tcp/ip setup on the PC.</P
+></LI
+><LI
><P
-><B
-CLASS="COMMAND"
->wins server = >name or IP address<</B
-></P
+> enable windows name resolution via DNS in the advanced section of
+ the tcp/ip setup</P
+></LI
+><LI
><P
->where >name or IP address< is either the DNS name of the WINS server
-machine or its IP address.</P
+> add BIGSERVER to your lmhosts file on the PC.</P
+></LI
+></OL
><P
->Note that this line MUST NOT BE SET in the smb.conf file of the Samba
-server acting as the WINS server itself. If you set both the
-"<B
-CLASS="COMMAND"
->wins support = yes</B
->" option and the
-"<B
-CLASS="COMMAND"
->wins server = >name<</B
->" option then
-nmbd will fail to start.</P
+>If you get a "invalid network name" or "bad password error" then the
+same fixes apply as they did for the "smbclient -L" test above. In
+particular, make sure your "hosts allow" line is correct (see the man
+pages)</P
><P
->There are two possible scenarios for setting up cross subnet browsing.
-The first details setting up cross subnet browsing on a network containing
-Windows 95, Samba and Windows NT machines that are not configured as
-part of a Windows NT Domain. The second details setting up cross subnet
-browsing on networks that contain NT Domains.</P
+>Also, do not overlook that fact that when the workstation requests the
+connection to the samba server it will attempt to connect using the
+name with which you logged onto your Windows machine. You need to make
+sure that an account exists on your Samba server with that exact same
+name and password.</P
+><P
+>If you get "specified computer is not receiving requests" or similar
+it probably means that the host is not contactable via tcp services.
+Check to see if the host is running tcp wrappers, and if so add an entry in
+the hosts.allow file for your client (or subnet, etc.)</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN307"
+NAME="AEN329"
></A
->2.6. Setting up Browsing in a WORKGROUP</H2
+>2.3.9. Test 9</H3
><P
->To set up cross subnet browsing on a network containing machines
-in up to be in a WORKGROUP, not an NT Domain you need to set up one
-Samba server to be the Domain Master Browser (note that this is *NOT*
-the same as a Primary Domain Controller, although in an NT Domain the
-same machine plays both roles). The role of a Domain master browser is
-to collate the browse lists from local master browsers on all the
-subnets that have a machine participating in the workgroup. Without
-one machine configured as a domain master browser each subnet would
-be an isolated workgroup, unable to see any machines on any other
-subnet. It is the presense of a domain master browser that makes
-cross subnet browsing possible for a workgroup.</P
+>Run the command <B
+CLASS="COMMAND"
+>net use x: \\BIGSERVER\TMP</B
+>. You should
+be prompted for a password then you should get a "command completed
+successfully" message. If not then your PC software is incorrectly
+installed or your smb.conf is incorrect. make sure your "hosts allow"
+and other config lines in smb.conf are correct.</P
><P
->In an WORKGROUP environment the domain master browser must be a
-Samba server, and there must only be one domain master browser per
-workgroup name. To set up a Samba server as a domain master browser,
-set the following option in the [global] section of the smb.conf file :</P
+>It's also possible that the server can't work out what user name to
+connect you as. To see if this is the problem add the line "user =
+USERNAME" to the [tmp] section of smb.conf where "USERNAME" is the
+username corresponding to the password you typed. If you find this
+fixes things you may need the username mapping option. </P
><P
-><B
+>It might also be the case that your client only sends encrypted passwords
+and you have <B
CLASS="COMMAND"
->domain master = yes</B
-></P
-><P
->The domain master browser should also preferrably be the local master
-browser for its own subnet. In order to achieve this set the following
-options in the [global] section of the smb.conf file :</P
+>encrypt passwords = no</B
+> in <TT
+CLASS="FILENAME"
+>smb.conf</TT
+>.
+Turn it back on to fix.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN337"
+></A
+>2.3.10. Test 10</H3
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> domain master = yes
- local master = yes
- preferred master = yes
- os level = 65</PRE
-></P
+>Run the command <B
+CLASS="COMMAND"
+>nmblookup -M TESTGROUP</B
+> where
+TESTGROUP is the name of the workgroup that your Samba server and
+Windows PCs belong to. You should get back the IP address of the
+master browser for that workgroup.</P
><P
->The domain master browser may be the same machine as the WINS
-server, if you require.</P
+>If you don't then the election process has failed. Wait a minute to
+see if it is just being slow then try again. If it still fails after
+that then look at the browsing options you have set in smb.conf. Make
+sure you have <B
+CLASS="COMMAND"
+>preferred master = yes</B
+> to ensure that
+an election is held at startup.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN343"
+></A
+>2.3.11. Test 11</H3
><P
->Next, you should ensure that each of the subnets contains a
-machine that can act as a local master browser for the
-workgroup. Any NT machine should be able to do this, as will
-Windows 95 machines (although these tend to get rebooted more
-often, so it's not such a good idea to use these). To make a
-Samba server a local master browser set the following
-options in the [global] section of the smb.conf file :</P
+>From file manager try to browse the server. Your samba server should
+appear in the browse list of your local workgroup (or the one you
+specified in smb.conf). You should be able to double click on the name
+of the server and get a list of shares. If you get a "invalid
+password" error when you do then you are probably running WinNT and it
+is refusing to browse a server that has no encrypted password
+capability and is in user level security mode. In this case either set
+<B
+CLASS="COMMAND"
+>security = server</B
+> AND
+<B
+CLASS="COMMAND"
+>password server = Windows_NT_Machine</B
+> in your
+smb.conf file, or enable encrypted passwords AFTER compiling in support
+for encrypted passwords (refer to the Makefile).</P
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN348"
+></A
+>2.4. Still having troubles?</H2
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> domain master = no
- local master = yes
- preferred master = yes
- os level = 65</PRE
+>Try the mailing list or newsgroup, or use the ethereal utility to
+sniff the problem. The official samba mailing list can be reached at
+<A
+HREF="mailto:samba@samba.org"
+TARGET="_top"
+>samba@samba.org</A
+>. To find
+out more about samba and how to subscribe to the mailing list check
+out the samba web page at
+<A
+HREF="http://samba.org/samba"
+TARGET="_top"
+>http://samba.org/samba</A
></P
><P
->Do not do this for more than one Samba server on each subnet,
-or they will war with each other over which is to be the local
-master browser.</P
-><P
->The "local master" parameter allows Samba to act as a local master
-browser. The "preferred master" causes nmbd to force a browser
-election on startup and the "os level" parameter sets Samba high
-enough so that it should win any browser elections.</P
-><P
->If you have an NT machine on the subnet that you wish to
-be the local master browser then you can disable Samba from
-becoming a local master browser by setting the following
-options in the [global] section of the smb.conf file :</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> domain master = no
- local master = no
- preferred master = no
- os level = 0</PRE
-></P
+>Also look at the other docs in the Samba package!</P
+></DIV
></DIV
><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="INTEGRATE-MS-NETWORKS"
+></A
+>Chapter 3. Integrating MS Windows networks with Samba</H1
+><DIV
CLASS="SECT1"
-><HR><H2
+><H2
CLASS="SECT1"
><A
-NAME="AEN325"
+NAME="AEN365"
></A
->2.7. Setting up Browsing in a DOMAIN</H2
+>3.1. Agenda</H2
><P
->If you are adding Samba servers to a Windows NT Domain then
-you must not set up a Samba server as a domain master browser.
-By default, a Windows NT Primary Domain Controller for a Domain
-name is also the Domain master browser for that name, and many
-things will break if a Samba server registers the Domain master
-browser NetBIOS name (DOMAIN>1B<) with WINS instead of the PDC.</P
-><P
->For subnets other than the one containing the Windows NT PDC
-you may set up Samba servers as local master browsers as
-described. To make a Samba server a local master browser set
-the following options in the [global] section of the smb.conf
-file :</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> domain master = no
- local master = yes
- preferred master = yes
- os level = 65</PRE
-></P
-><P
->If you wish to have a Samba server fight the election with machines
-on the same subnet you may set the "os level" parameter to lower
-levels. By doing this you can tune the order of machines that
-will become local master browsers if they are running. For
-more details on this see the section "FORCING SAMBA TO BE THE MASTER"
-below.</P
-><P
->If you have Windows NT machines that are members of the domain
-on all subnets, and you are sure they will always be running then
-you can disable Samba from taking part in browser elections and
-ever becoming a local master browser by setting following options
-in the [global] section of the smb.conf file :</P
-><P
-><B
-CLASS="COMMAND"
-> domain master = no
- local master = no
- preferred master = no
- os level = 0</B
-></P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN335"
-></A
->2.8. Forcing samba to be the master</H2
-><P
->Who becomes the "master browser" is determined by an election process
-using broadcasts. Each election packet contains a number of parameters
-which determine what precedence (bias) a host should have in the
-election. By default Samba uses a very low precedence and thus loses
-elections to just about anyone else.</P
-><P
->If you want Samba to win elections then just set the "os level" global
-option in smb.conf to a higher number. It defaults to 0. Using 34
-would make it win all elections over every other system (except other
-samba systems!)</P
-><P
->A "os level" of 2 would make it beat WfWg and Win95, but not NTAS. A
-NTAS domain controller uses level 32.</P
-><P
->The maximum os level is 255</P
-><P
->If you want samba to force an election on startup, then set the
-"preferred master" global option in smb.conf to "yes". Samba will
-then have a slight advantage over other potential master browsers
-that are not preferred master browsers. Use this parameter with
-care, as if you have two hosts (whether they are windows 95 or NT or
-samba) on the same local subnet both set with "preferred master" to
-"yes", then periodically and continually they will force an election
-in order to become the local master browser.</P
-><P
->If you want samba to be a "domain master browser", then it is
-recommended that you also set "preferred master" to "yes", because
-samba will not become a domain master browser for the whole of your
-LAN or WAN if it is not also a local master browser on its own
-broadcast isolated subnet.</P
-><P
->It is possible to configure two samba servers to attempt to become
-the domain master browser for a domain. The first server that comes
-up will be the domain master browser. All other samba servers will
-attempt to become the domain master browser every 5 minutes. They
-will find that another samba server is already the domain master
-browser and will fail. This provides automatic redundancy, should
-the current domain master browser fail.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN344"
-></A
->2.9. Making samba the domain master</H2
-><P
->The domain master is responsible for collating the browse lists of
-multiple subnets so that browsing can occur between subnets. You can
-make samba act as the domain master by setting "domain master = yes"
-in smb.conf. By default it will not be a domain master.</P
-><P
->Note that you should NOT set Samba to be the domain master for a
-workgroup that has the same name as an NT Domain.</P
-><P
->When samba is the domain master and the master browser it will listen
-for master announcements (made roughly every twelve minutes) from local
-master browsers on other subnets and then contact them to synchronise
-browse lists.</P
-><P
->If you want samba to be the domain master then I suggest you also set
-the "os level" high enough to make sure it wins elections, and set
-"preferred master" to "yes", to get samba to force an election on
-startup.</P
+>To identify the key functional mechanisms of MS Windows networking
+to enable the deployment of Samba as a means of extending and/or
+replacing MS Windows NT/2000 technology.</P
><P
->Note that all your servers (including samba) and clients should be
-using a WINS server to resolve NetBIOS names. If your clients are only
-using broadcasting to resolve NetBIOS names, then two things will occur:</P
+>We will examine:</P
><P
></P
><OL
TYPE="1"
><LI
><P
-> your local master browsers will be unable to find a domain master
- browser, as it will only be looking on the local subnet.
+>Name resolution in a pure Unix/Linux TCP/IP
+ environment
</P
></LI
><LI
><P
-> if a client happens to get hold of a domain-wide browse list, and
- a user attempts to access a host in that list, it will be unable to
- resolve the NetBIOS name of that host.
+>Name resolution as used within MS Windows
+ networking
</P
></LI
-></OL
+><LI
><P
->If, however, both samba and your clients are using a WINS server, then:</P
+>How browsing functions and how to deploy stable
+ and dependable browsing using Samba
+ </P
+></LI
+><LI
+><P
+>MS Windows security options and how to
+ configure Samba for seemless integration
+ </P
+></LI
+><LI
+><P
+>Configuration of Samba as:</P
><P
></P
><OL
-TYPE="1"
+TYPE="a"
><LI
><P
-> your local master browsers will contact the WINS server and, as long as
- samba has registered that it is a domain master browser with the WINS
- server, your local master browser will receive samba's ip address
- as its domain master browser.
- </P
+>A stand-alone server</P
></LI
><LI
><P
-> when a client receives a domain-wide browse list, and a user attempts
- to access a host in that list, it will contact the WINS server to
- resolve the NetBIOS name of that host. as long as that host has
- registered its NetBIOS name with the same WINS server, the user will
- be able to see that host.
- </P
+>An MS Windows NT 3.x/4.0 security domain member
+ </P
></LI
-></OL
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN362"
-></A
->2.10. Note about broadcast addresses</H2
-><P
->If your network uses a "0" based broadcast address (for example if it
-ends in a 0) then you will strike problems. Windows for Workgroups
-does not seem to support a 0's broadcast and you will probably find
-that browsing and name lookups won't work.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN365"
-></A
->2.11. Multiple interfaces</H2
+><LI
><P
->Samba now supports machines with multiple network interfaces. If you
-have multiple interfaces then you will need to use the "interfaces"
-option in smb.conf to configure them. See smb.conf(5) for details.</P
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="OPLOCKS"
-></A
->Chapter 3. Oplocks</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN377"
-></A
->3.1. What are oplocks?</H2
-><P
->When a client opens a file it can request an "oplock" or file
-lease. This is (to simplify a bit) a guarentee that no one else
-has the file open simultaneously. It allows the client to not
-send any updates on the file to the server, thus reducing a
-network file access to local access (once the file is in
-client cache). An "oplock break" is when the server sends
-a request to the client to flush all its changes back to
-the server, so the file is in a consistent state for other
-opens to succeed. If a client fails to respond to this
-asynchronous request then the file can be corrupted. Hence
-the "turn off oplocks" answer if people are having multi-user
-file access problems.</P
-><P
->Unless the kernel is "oplock aware" (SGI IRIX and Linux are
-the only two UNIXes that are at the moment) then if a local
-UNIX process accesses the file simultaneously then Samba
-has no way of telling this is occuring, so the guarentee
-to the client is broken. This can corrupt the file. Short
-answer - it you have UNIX clients accessing the same file
-as smbd locally or via NFS and you're not running Linux or
-IRIX then turn off oplocks for that file or share.</P
-><P
->"Share modes". These are modes of opening a file, that
-guarentee an invarient - such as DENY_WRITE - which means
-that if any other opens are requested with write access after
-this current open has succeeded then they should be denied
-with a "sharing violation" error message. Samba handles these
-internally inside smbd. UNIX clients accessing the same file
-ignore these invarients. Just proving that if you need simultaneous
-file access from a Windows and UNIX client you *must* have an
-application that is written to lock records correctly on both
-sides. Few applications are written like this, and even fewer
-are cross platform (UNIX and Windows) so in practice this isn't
-much of a problem.</P
-><P
->"Locking". This really means "byte range locking" - such as
-lock 10 bytes at file offset 24 for write access. This is the
-area in which well written UNIX and Windows apps will cooperate.
-Windows locks (at least from NT or above) are 64-bit unsigned
-offsets. UNIX locks are either 31 bit or 63 bit and are signed
-(the top bit is used for the sign). Samba handles these by
-first ensuring that all the Windows locks don't conflict (ie.
-if other Windows clients have competing locks then just reject
-immediately) - this allows us to support 64-bit Windows locks
-on 32-bit filesystems. Secondly any locks that are valid are
-then mapped onto UNIX fcntl byte range locks. These are the
-locks that will be seen by UNIX processes. If there is a conflict
-here the lock is rejected.</P
-><P
->Note that if a client has an oplock then it "knows" that no
-other client can have the file open so usually doesn't bother
-to send to lock request to the server - this means once again
-if you need to share files between UNIX and Windows processes
-either use IRIX or Linux, or turn off oplocks for these
-files/shares.</P
-></DIV
+>An alternative to an MS Windows NT 3.x/4.0 Domain Controller
+ </P
+></LI
+></OL
+></LI
+></OL
></DIV
><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="BROWSING-QUICK"
-></A
->Chapter 4. Quick Cross Subnet Browsing / Cross Workgroup Browsing guide</H1
-><P
->This document should be read in conjunction with Browsing and may
-be taken as the fast track guide to implementing browsing across subnets
-and / or across workgroups (or domains). WINS is the best tool for resolution
-of NetBIOS names to IP addesses. WINS is NOT involved in browse list handling
-except by way of name to address mapping.</P
-><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN392"
+NAME="AEN387"
></A
->4.1. Discussion</H2
+>3.2. Name Resolution in a pure Unix/Linux world</H2
><P
->Firstly, all MS Windows networking is based on SMB (Server Message
-Block) based messaging. SMB messaging is implemented using NetBIOS. Samba
-implements NetBIOS by encapsulating it over TCP/IP. MS Windows products can
-do likewise. NetBIOS based networking uses broadcast messaging to affect
-browse list management. When running NetBIOS over TCP/IP this uses UDP
-based messaging. UDP messages can be broadcast or unicast.</P
+>The key configuration files covered in this section are:</P
><P
->Normally, only unicast UDP messaging can be forwarded by routers. The
-"remote announce" parameter to smb.conf helps to project browse announcements
-to remote network segments via unicast UDP. Similarly, the "remote browse sync"
-parameter of smb.conf implements browse list collation using unicast UDP.</P
+></P
+><UL
+><LI
><P
->Secondly, in those networks where Samba is the only SMB server technology
-wherever possible nmbd should be configured on one (1) machine as the WINS
-server. This makes it easy to manage the browsing environment. If each network
-segment is configured with it's own Samba WINS server, then the only way to
-get cross segment browsing to work is by using the "remote announce" and
-the "remote browse sync" parameters to your smb.conf file.</P
+><TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+></P
+></LI
+><LI
><P
->If only one WINS server is used then the use of the "remote announce" and the
-"remote browse sync" parameters should NOT be necessary.</P
+><TT
+CLASS="FILENAME"
+>/etc/resolv.conf</TT
+></P
+></LI
+><LI
><P
->Samba WINS does not support MS-WINS replication. This means that when setting up
-Samba as a WINS server there must only be one nmbd configured as a WINS server
-on the network. Some sites have used multiple Samba WINS servers for redundancy
-(one server per subnet) and then used "remote browse sync" and "remote announce"
-to affect browse list collation across all segments. Note that this means
-clients will only resolve local names, and must be configured to use DNS to
-resolve names on other subnets in order to resolve the IP addresses of the
-servers they can see on other subnets. This setup is not recommended, but is
-mentioned as a practical consideration (ie: an 'if all else fails' scenario).</P
+><TT
+CLASS="FILENAME"
+>/etc/host.conf</TT
+></P
+></LI
+><LI
><P
->Lastly, take note that browse lists are a collection of unreliable broadcast
-messages that are repeated at intervals of not more than 15 minutes. This means
-that it will take time to establish a browse list and it can take up to 45
-minutes to stabilise, particularly across network segments.</P
-></DIV
+><TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+></P
+></LI
+></UL
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN400"
+NAME="AEN403"
></A
->4.2. Use of the "Remote Announce" parameter</H2
+>3.2.1. <TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+></H3
><P
->The "remote announce" parameter of smb.conf can be used to forcibly ensure
-that all the NetBIOS names on a network get announced to a remote network.
-The syntax of the "remote announce" parameter is:
-<PRE
-CLASS="PROGRAMLISTING"
-> remote announce = a.b.c.d [e.f.g.h] ...</PRE
->
-_or_
-<PRE
+>Contains a static list of IP Addresses and names.
+eg:</P
+><P
+><PRE
CLASS="PROGRAMLISTING"
-> remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ...</PRE
->
-
-where:
-<P
+> 127.0.0.1 localhost localhost.localdomain
+ 192.168.1.1 bigbox.caldera.com bigbox alias4box</PRE
></P
-><DIV
-CLASS="VARIABLELIST"
-><DL
-><DT
->a.b.c.d and e.f.g.h</DT
-><DD
><P
->is either the LMB (Local Master Browser) IP address
-or the broadcst address of the remote network.
-ie: the LMB is at 192.168.1.10, or the address
-could be given as 192.168.1.255 where the netmask
-is assumed to be 24 bits (255.255.255.0).
-When the remote announcement is made to the broadcast
-address of the remote network every host will receive
-our announcements. This is noisy and therefore
-undesirable but may be necessary if we do NOT know
-the IP address of the remote LMB.</P
-></DD
-><DT
->WORKGROUP</DT
-><DD
+>The purpose of <TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+> is to provide a
+name resolution mechanism so that uses do not need to remember
+IP addresses.</P
><P
->is optional and can be either our own workgroup
-or that of the remote network. If you use the
-workgroup name of the remote network then our
-NetBIOS machine names will end up looking like
-they belong to that workgroup, this may cause
-name resolution problems and should be avoided.</P
-></DD
-></DL
-></DIV
-> </P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN414"
-></A
->4.3. Use of the "Remote Browse Sync" parameter</H2
+>Network packets that are sent over the physical network transport
+layer communicate not via IP addresses but rather using the Media
+Access Control address, or MAC address. IP Addresses are currently
+32 bits in length and are typically presented as four (4) decimal
+numbers that are separated by a dot (or period). eg: 168.192.1.1</P
+><P
+>MAC Addresses use 48 bits (or 6 bytes) and are typically represented
+as two digit hexadecimal numbers separated by colons. eg:
+40:8e:0a:12:34:56</P
><P
->The "remote browse sync" parameter of smb.conf is used to announce to
-another LMB that it must synchronise it's NetBIOS name list with our
-Samba LMB. It works ONLY if the Samba server that has this option is
-simultaneously the LMB on it's network segment.</P
+>Every network interfrace must have an MAC address. Associated with
+a MAC address there may be one or more IP addresses. There is NO
+relationship between an IP address and a MAC address, all such assignments
+are arbitary or discretionary in nature. At the most basic level all
+network communications takes place using MAC addressing. Since MAC
+addresses must be globally unique, and generally remains fixed for
+any particular interface, the assignment of an IP address makes sense
+from a network management perspective. More than one IP address can
+be assigned per MAC address. One address must be the primary IP address,
+this is the address that will be returned in the ARP reply.</P
><P
->The syntax of the "remote browse sync" parameter is:
-<PRE
-CLASS="PROGRAMLISTING"
-> remote browse sync = a.b.c.d</PRE
->
-
-where a.b.c.d is either the IP address of the remote LMB or else is the network broadcast address of the remote segment.</P
+>When a user or a process wants to communicate with another machine
+the protocol implementation ensures that the "machine name" or "host
+name" is resolved to an IP address in a manner that is controlled
+by the TCP/IP configuration control files. The file
+<TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+> is one such file.</P
+><P
+>When the IP address of the destination interface has been
+determined a protocol called ARP/RARP is used to identify
+the MAC address of the target interface. ARP stands for Address
+Resolution Protocol, and is a broadcast oriented method that
+uses UDP (User Datagram Protocol) to send a request to all
+interfaces on the local network segment using the all 1's MAC
+address. Network interfaces are programmed to respond to two
+MAC addresses only; their own unique address and the address
+ff:ff:ff:ff:ff:ff. The reply packet from an ARP request will
+contain the MAC address and the primary IP address for each
+interface.</P
+><P
+>The <TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+> file is foundational to all
+Unix/Linux TCP/IP installations and as a minumum will contain
+the localhost and local network interface IP addresses and the
+primary names by which they are known within the local machine.
+This file helps to prime the pump so that a basic level of name
+resolution can exist before any other method of name resolution
+becomes available.</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
NAME="AEN419"
></A
->4.4. Use of WINS</H2
-><P
->Use of WINS (either Samba WINS _or_ MS Windows NT Server WINS) is highly
-recommended. Every NetBIOS machine registers it's name together with a
-name_type value for each of of several types of service it has available.
-eg: It registers it's name directly as a unique (the type 0x03) name.
-It also registers it's name if it is running the lanmanager compatible
-server service (used to make shares and printers available to other users)
-by registering the server (the type 0x20) name.</P
-><P
->All NetBIOS names are up to 15 characters in length. The name_type variable
-is added to the end of the name - thus creating a 16 character name. Any
-name that is shorter than 15 characters is padded with spaces to the 15th
-character. ie: All NetBIOS names are 16 characters long (including the
-name_type information).</P
-><P
->WINS can store these 16 character names as they get registered. A client
-that wants to log onto the network can ask the WINS server for a list
-of all names that have registered the NetLogon service name_type. This saves
-broadcast traffic and greatly expedites logon processing. Since broadcast
-name resolution can not be used across network segments this type of
-information can only be provided via WINS _or_ via statically configured
-"lmhosts" files that must reside on all clients in the absence of WINS.</P
-><P
->WINS also serves the purpose of forcing browse list synchronisation by all
-LMB's. LMB's must synchronise their browse list with the DMB (domain master
-browser) and WINS helps the LMB to identify it's DMB. By definition this
-will work only within a single workgroup. Note that the domain master browser
-has NOTHING to do with what is referred to as an MS Windows NT Domain. The
-later is a reference to a security environment while the DMB refers to the
-master controller for browse list information only.</P
-><P
->Use of WINS will work correctly only if EVERY client TCP/IP protocol stack
-has been configured to use the WINS server/s. Any client that has not been
-configured to use the WINS server will continue to use only broadcast based
-name registration so that WINS may NEVER get to know about it. In any case,
-machines that have not registered with a WINS server will fail name to address
-lookup attempts by other clients and will therefore cause workstation access
-errors.</P
-><P
->To configure Samba as a WINS server just add "wins support = yes" to the
-smb.conf file [globals] section.</P
-><P
->To configure Samba to register with a WINS server just add
-"wins server = a.b.c.d" to your smb.conf file [globals] section.</P
+>3.2.2. <TT
+CLASS="FILENAME"
+>/etc/resolv.conf</TT
+></H3
><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->DO NOT EVER</I
-></SPAN
-> use both "wins support = yes" together with "wins server = a.b.c.d"
-particularly not using it's own IP address.</P
+>This file tells the name resolution libraries:</P
+><P
+></P
+><UL
+><LI
+><P
+>The name of the domain to which the machine
+ belongs
+ </P
+></LI
+><LI
+><P
+>The name(s) of any domains that should be
+ automatically searched when trying to resolve unqualified
+ host names to their IP address
+ </P
+></LI
+><LI
+><P
+>The name or IP address of available Domain
+ Name Servers that may be asked to perform name to address
+ translation lookups
+ </P
+></LI
+></UL
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
NAME="AEN430"
></A
->4.5. Do NOT use more than one (1) protocol on MS Windows machines</H2
-><P
->A very common cause of browsing problems results from installing more than
-one protocol on an MS Windows machine.</P
+>3.2.3. <TT
+CLASS="FILENAME"
+>/etc/host.conf</TT
+></H3
><P
->Every NetBIOS machine take part in a process of electing the LMB (and DMB)
-every 15 minutes. A set of election criteria is used to determine the order
-of precidence for winning this election process. A machine running Samba or
-Windows NT will be biased so that the most suitable machine will predictably
-win and thus retain it's role.</P
+><TT
+CLASS="FILENAME"
+>/etc/host.conf</TT
+> is the primary means by
+which the setting in /etc/resolv.conf may be affected. It is a
+critical configuration file. This file controls the order by
+which name resolution may procede. The typical structure is:</P
><P
->The election process is "fought out" so to speak over every NetBIOS network
-interface. In the case of a Windows 9x machine that has both TCP/IP and IPX
-installed and has NetBIOS enabled over both protocols the election will be
-decided over both protocols. As often happens, if the Windows 9x machine is
-the only one with both protocols then the LMB may be won on the NetBIOS
-interface over the IPX protocol. Samba will then lose the LMB role as Windows
-9x will insist it knows who the LMB is. Samba will then cease to function
-as an LMB and thus browse list operation on all TCP/IP only machines will
-fail.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> order hosts,bind
+ multi on</PRE
+></P
><P
->The safest rule of all to follow it this - USE ONLY ONE PROTOCOL!</P
+>then both addresses should be returned. Please refer to the
+man page for host.conf for further details.</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN436"
+NAME="AEN438"
></A
->4.6. Name Resolution Order</H2
+>3.2.4. <TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+></H3
><P
->Resolution of NetBIOS names to IP addresses can take place using a number
-of methods. The only ones that can provide NetBIOS name_type information
-are:
-<P
-></P
-><TABLE
-BORDER="0"
-><TBODY
-><TR
-><TD
->WINS: the best tool!</TD
-></TR
-><TR
-><TD
->LMHOSTS: is static and hard to maintain.</TD
-></TR
-><TR
-><TD
->Broadcast: uses UDP and can not resolve names across remote segments.</TD
-></TR
-></TBODY
-></TABLE
+>This file controls the actual name resolution targets. The
+file typically has resolver object specifications as follows:</P
><P
-></P
+><PRE
+CLASS="PROGRAMLISTING"
+> # /etc/nsswitch.conf
+ #
+ # Name Service Switch configuration file.
+ #
+
+ passwd: compat
+ # Alternative entries for password authentication are:
+ # passwd: compat files nis ldap winbind
+ shadow: compat
+ group: compat
+
+ hosts: files nis dns
+ # Alternative entries for host name resolution are:
+ # hosts: files dns nis nis+ hesoid db compat ldap wins
+ networks: nis files dns
+
+ ethers: nis files
+ protocols: nis files
+ rpc: nis files
+ services: nis files</PRE
></P
><P
->Alternative means of name resolution includes:
-<P
-></P
-><TABLE
-BORDER="0"
-><TBODY
-><TR
-><TD
->/etc/hosts: is static, hard to maintain, and lacks name_type info</TD
-></TR
-><TR
-><TD
->DNS: is a good choice but lacks essential name_type info.</TD
-></TR
-></TBODY
-></TABLE
+>Of course, each of these mechanisms requires that the appropriate
+facilities and/or services are correctly configured.</P
><P
-></P
-></P
+>It should be noted that unless a network request/message must be
+sent, TCP/IP networks are silent. All TCP/IP communications assumes a
+principal of speaking only when necessary.</P
><P
->Many sites want to restrict DNS lookups and want to avoid broadcast name
-resolution traffic. The "name resolve order" parameter is of great help here.
-The syntax of the "name resolve order" parameter is:
-<PRE
-CLASS="PROGRAMLISTING"
-> name resolve order = wins lmhosts bcast host</PRE
->
-_or_
-<PRE
-CLASS="PROGRAMLISTING"
-> name resolve order = wins lmhosts (eliminates bcast and host)</PRE
->
-The default is:
-<PRE
-CLASS="PROGRAMLISTING"
-> name resolve order = host lmhost wins bcast</PRE
->.
-where "host" refers the the native methods used by the Unix system
-to implement the gethostbyname() function call. This is normally
-controlled by <TT
+>Samba version 2.2.0 will add Linux support for extensions to
+the name service switch infrastructure so that linux clients will
+be able to obtain resolution of MS Windows NetBIOS names to IP
+Addresses. To gain this functionality Samba needs to be compiled
+with appropriate arguments to the make command (ie: <B
+CLASS="COMMAND"
+>make
+nsswitch/libnss_wins.so</B
+>). The resulting library should
+then be installed in the <TT
CLASS="FILENAME"
->/etc/host.conf</TT
->, <TT
+>/lib</TT
+> directory and
+the "wins" parameter needs to be added to the "hosts:" line in
+the <TT
CLASS="FILENAME"
>/etc/nsswitch.conf</TT
-> and <TT
-CLASS="FILENAME"
->/etc/resolv.conf</TT
->.</P
+> file. At this point it
+will be possible to ping any MS Windows machine by it's NetBIOS
+machine name, so long as that machine is within the workgroup to
+which both the samba machine and the MS Windows machine belong.</P
></DIV
></DIV
><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="PWENCRYPT"
-></A
->Chapter 5. LanMan and NT Password Encryption in Samba</H1
-><DIV
CLASS="SECT1"
-><H2
+><HR><H2
CLASS="SECT1"
><A
-NAME="AEN472"
+NAME="AEN450"
></A
->5.1. Introduction</H2
+>3.3. Name resolution as used within MS Windows networking</H2
><P
->Newer windows clients send encrypted passwords over
- the wire, instead of plain text passwords. The newest clients
- will only send encrypted passwords and refuse to send plain text
- passwords, unless their registry is tweaked.</P
-><P
->These passwords can't be converted to unix style encrypted
- passwords. Because of that you can't use the standard unix
- user database, and you have to store the Lanman and NT hashes
- somewhere else. For more information, see the documentation
- about the <B
-CLASS="COMMAND"
->passdb backend = </B
-> parameter.
- </P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN477"
-></A
->5.2. Important Notes About Security</H2
-><P
->The unix and SMB password encryption techniques seem similar
- on the surface. This similarity is, however, only skin deep. The unix
- scheme typically sends clear text passwords over the network when
- logging in. This is bad. The SMB encryption scheme never sends the
- cleartext password over the network but it does store the 16 byte
- hashed values on disk. This is also bad. Why? Because the 16 byte hashed
- values are a "password equivalent". You cannot derive the user's
- password from them, but they could potentially be used in a modified
- client to gain access to a server. This would require considerable
- technical knowledge on behalf of the attacker but is perfectly possible.
- You should thus treat the smbpasswd file as though it contained the
- cleartext passwords of all your users. Its contents must be kept
- secret, and the file should be protected accordingly.</P
-><P
->Ideally we would like a password scheme which neither requires
- plain text passwords on the net or on disk. Unfortunately this
- is not available as Samba is stuck with being compatible with
- other SMB systems (WinNT, WfWg, Win95 etc). </P
-><DIV
-CLASS="WARNING"
-><P
-></P
-><TABLE
-CLASS="WARNING"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/warning.gif"
-HSPACE="5"
-ALT="Warning"></TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
-><P
->Note that Windows NT 4.0 Service pack 3 changed the
- default for permissible authentication so that plaintext
- passwords are <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->never</I
-></SPAN
-> sent over the wire.
- The solution to this is either to switch to encrypted passwords
- with Samba or edit the Windows NT registry to re-enable plaintext
- passwords. See the document WinNT.txt for details on how to do
- this.</P
+>MS Windows networking is predicated about the name each machine
+is given. This name is known variously (and inconsistently) as
+the "computer name", "machine name", "networking name", "netbios name",
+"SMB name". All terms mean the same thing with the exception of
+"netbios name" which can apply also to the name of the workgroup or the
+domain name. The terms "workgroup" and "domain" are really just a
+simply name with which the machine is associated. All NetBIOS names
+are exactly 16 characters in length. The 16th character is reserved.
+It is used to store a one byte value that indicates service level
+information for the NetBIOS name that is registered. A NetBIOS machine
+name is therefore registered for each service type that is provided by
+the client/server.</P
><P
->Other Microsoft operating systems which also exhibit
- this behavior includes</P
+>The following are typical NetBIOS name/service type registrations:</P
><P
+><PRE
+CLASS="PROGRAMLISTING"
+> Unique NetBIOS Names:
+ MACHINENAME<00> = Server Service is running on MACHINENAME
+ MACHINENAME<03> = Generic Machine Name (NetBIOS name)
+ MACHINENAME<20> = LanMan Server service is running on MACHINENAME
+ WORKGROUP<1b> = Domain Master Browser
+
+ Group Names:
+ WORKGROUP<03> = Generic Name registered by all members of WORKGROUP
+ WORKGROUP<1c> = Domain Controllers / Netlogon Servers
+ WORKGROUP<1d> = Local Master Browsers
+ WORKGROUP<1e> = Internet Name Resolvers</PRE
></P
-><UL
-><LI
><P
->MS DOS Network client 3.0 with
- the basic network redirector installed</P
-></LI
-><LI
+>It should be noted that all NetBIOS machines register their own
+names as per the above. This is in vast contrast to TCP/IP
+installations where traditionally the system administrator will
+determine in the /etc/hosts or in the DNS database what names
+are associated with each IP address.</P
><P
->Windows 95 with the network redirector
- update installed</P
-></LI
-><LI
+>One further point of clarification should be noted, the <TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+>
+file and the DNS records do not provide the NetBIOS name type information
+that MS Windows clients depend on to locate the type of service that may
+be needed. An example of this is what happens when an MS Windows client
+wants to locate a domain logon server. It find this service and the IP
+address of a server that provides it by performing a lookup (via a
+NetBIOS broadcast) for enumeration of all machines that have
+registered the name type *<1c>. A logon request is then sent to each
+IP address that is returned in the enumerated list of IP addresses. Which
+ever machine first replies then ends up providing the logon services.</P
><P
->Windows 98 [se]</P
-></LI
-><LI
+>The name "workgroup" or "domain" really can be confusing since these
+have the added significance of indicating what is the security
+architecture of the MS Windows network. The term "workgroup" indicates
+that the primary nature of the network environment is that of a
+peer-to-peer design. In a WORKGROUP all machines are responsible for
+their own security, and generally such security is limited to use of
+just a password (known as SHARE MODE security). In most situations
+with peer-to-peer networking the users who control their own machines
+will simply opt to have no security at all. It is possible to have
+USER MODE security in a WORKGROUP environment, thus requiring use
+of a user name and a matching password.</P
><P
->Windows 2000</P
-></LI
-></UL
+>MS Windows networking is thus predetermined to use machine names
+for all local and remote machine message passing. The protocol used is
+called Server Message Block (SMB) and this is implemented using
+the NetBIOS protocol (Network Basic Input Output System). NetBIOS can
+be encapsulated using LLC (Logical Link Control) protocol - in which case
+the resulting protocol is called NetBEUI (Network Basic Extended User
+Interface). NetBIOS can also be run over IPX (Internetworking Packet
+Exchange) protocol as used by Novell NetWare, and it can be run
+over TCP/IP protocols - in which case the resulting protocol is called
+NBT or NetBT, the NetBIOS over TCP/IP.</P
><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Note :</I
-></SPAN
->All current release of
- Microsoft SMB/CIFS clients support authentication via the
- SMB Challenge/Response mechanism described here. Enabling
- clear text authentication does not disable the ability
- of the client to participate in encrypted authentication.</P
-></TD
-></TR
-></TABLE
-></DIV
+>MS Windows machines use a complex array of name resolution mechanisms.
+Since we are primarily concerned with TCP/IP this demonstration is
+limited to this area.</P
><DIV
CLASS="SECT2"
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN496"
+NAME="AEN462"
></A
->5.2.1. Advantages of SMB Encryption</H3
+>3.3.1. The NetBIOS Name Cache</H3
><P
-></P
-><UL
-><LI
+>All MS Windows machines employ an in memory buffer in which is
+stored the NetBIOS names and IP addresses for all external
+machines that that machine has communicated with over the
+past 10-15 minutes. It is more efficient to obtain an IP address
+for a machine from the local cache than it is to go through all the
+configured name resolution mechanisms.</P
><P
->plain text passwords are not passed across
- the network. Someone using a network sniffer cannot just
- record passwords going to the SMB server.</P
-></LI
-><LI
+>If a machine whose name is in the local name cache has been shut
+down before the name had been expired and flushed from the cache, then
+an attempt to exchange a message with that machine will be subject
+to time-out delays. i.e.: Its name is in the cache, so a name resolution
+lookup will succeed, but the machine can not respond. This can be
+frustrating for users - but it is a characteristic of the protocol.</P
><P
->WinNT doesn't like talking to a server
- that isn't using SMB encrypted passwords. It will refuse
- to browse the server if the server is also in user level
- security mode. It will insist on prompting the user for the
- password on each connection, which is very annoying. The
- only things you can do to stop this is to use SMB encryption.
- </P
-></LI
-></UL
+>The MS Windows utility that allows examination of the NetBIOS
+name cache is called "nbtstat". The Samba equivalent of this
+is called "nmblookup".</P
></DIV
><DIV
CLASS="SECT2"
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN503"
+NAME="AEN467"
></A
->5.2.2. Advantages of non-encrypted passwords</H3
-><P
-></P
-><UL
-><LI
+>3.3.2. The LMHOSTS file</H3
><P
->plain text passwords are not kept
- on disk. </P
-></LI
-><LI
+>This file is usually located in MS Windows NT 4.0 or
+2000 in <TT
+CLASS="FILENAME"
+>C:\WINNT\SYSTEM32\DRIVERS\ETC</TT
+> and contains
+the IP Address and the machine name in matched pairs. The
+<TT
+CLASS="FILENAME"
+>LMHOSTS</TT
+> file performs NetBIOS name
+to IP address mapping oriented.</P
><P
->uses same password file as other unix
- services such as login and ftp</P
-></LI
-><LI
+>It typically looks like:</P
><P
->you are probably already using other
- services (such as telnet and ftp) which send plain text
- passwords over the net, so sending them for SMB isn't
- such a big deal.</P
-></LI
-></UL
-></DIV
+><PRE
+CLASS="PROGRAMLISTING"
+> # Copyright (c) 1998 Microsoft Corp.
+ #
+ # This is a sample LMHOSTS file used by the Microsoft Wins Client (NetBIOS
+ # over TCP/IP) stack for Windows98
+ #
+ # This file contains the mappings of IP addresses to NT computernames
+ # (NetBIOS) names. Each entry should be kept on an individual line.
+ # The IP address should be placed in the first column followed by the
+ # corresponding computername. The address and the comptername
+ # should be separated by at least one space or tab. The "#" character
+ # is generally used to denote the start of a comment (see the exceptions
+ # below).
+ #
+ # This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
+ # files and offers the following extensions:
+ #
+ # #PRE
+ # #DOM:<domain>
+ # #INCLUDE <filename>
+ # #BEGIN_ALTERNATE
+ # #END_ALTERNATE
+ # \0xnn (non-printing character support)
+ #
+ # Following any entry in the file with the characters "#PRE" will cause
+ # the entry to be preloaded into the name cache. By default, entries are
+ # not preloaded, but are parsed only after dynamic name resolution fails.
+ #
+ # Following an entry with the "#DOM:<domain>" tag will associate the
+ # entry with the domain specified by <domain>. This affects how the
+ # browser and logon services behave in TCP/IP environments. To preload
+ # the host name associated with #DOM entry, it is necessary to also add a
+ # #PRE to the line. The <domain> is always preloaded although it will not
+ # be shown when the name cache is viewed.
+ #
+ # Specifying "#INCLUDE <filename>" will force the RFC NetBIOS (NBT)
+ # software to seek the specified <filename> and parse it as if it were
+ # local. <filename> is generally a UNC-based name, allowing a
+ # centralized lmhosts file to be maintained on a server.
+ # It is ALWAYS necessary to provide a mapping for the IP address of the
+ # server prior to the #INCLUDE. This mapping must use the #PRE directive.
+ # In addtion the share "public" in the example below must be in the
+ # LanManServer list of "NullSessionShares" in order for client machines to
+ # be able to read the lmhosts file successfully. This key is under
+ # \machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionshares
+ # in the registry. Simply add "public" to the list found there.
+ #
+ # The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
+ # statements to be grouped together. Any single successful include
+ # will cause the group to succeed.
+ #
+ # Finally, non-printing characters can be embedded in mappings by
+ # first surrounding the NetBIOS name in quotations, then using the
+ # \0xnn notation to specify a hex value for a non-printing character.
+ #
+ # The following example illustrates all of these extensions:
+ #
+ # 102.54.94.97 rhino #PRE #DOM:networking #net group's DC
+ # 102.54.94.102 "appname \0x14" #special app server
+ # 102.54.94.123 popular #PRE #source server
+ # 102.54.94.117 localsrv #PRE #needed for the include
+ #
+ # #BEGIN_ALTERNATE
+ # #INCLUDE \\localsrv\public\lmhosts
+ # #INCLUDE \\rhino\public\lmhosts
+ # #END_ALTERNATE
+ #
+ # In the above example, the "appname" server contains a special
+ # character in its name, the "popular" and "localsrv" server names are
+ # preloaded, and the "rhino" server name is specified so it can be used
+ # to later #INCLUDE a centrally maintained lmhosts file if the "localsrv"
+ # system is unavailable.
+ #
+ # Note that the whole file is parsed including comments on each lookup,
+ # so keeping the number of comments to a minimum will improve performance.
+ # Therefore it is not advisable to simply add lmhosts file entries onto the
+ # end of this file.</PRE
+></P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN512"
+NAME="AEN475"
></A
->5.3. The smbpasswd Command</H2
+>3.3.3. HOSTS file</H3
><P
->The smbpasswd command maintains the two 32 byte password fields
- in the smbpasswd file. If you wish to make it similar to the unix
- <B
-CLASS="COMMAND"
->passwd</B
-> or <B
-CLASS="COMMAND"
->yppasswd</B
-> programs,
- install it in <TT
+>This file is usually located in MS Windows NT 4.0 or 2000 in
+<TT
CLASS="FILENAME"
->/usr/local/samba/bin/</TT
-> (or your
- main Samba binary directory).</P
-><P
-><B
-CLASS="COMMAND"
->smbpasswd</B
-> now works in a client-server mode
- where it contacts the local smbd to change the user's password on its
- behalf. This has enormous benefits - as follows.</P
+>C:\WINNT\SYSTEM32\DRIVERS\ETC</TT
+> and contains
+the IP Address and the IP hostname in matched pairs. It can be
+used by the name resolution infrastructure in MS Windows, depending
+on how the TCP/IP environment is configured. This file is in
+every way the equivalent of the Unix/Linux <TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+> file.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN480"
+></A
+>3.3.4. DNS Lookup</H3
><P
-><B
-CLASS="COMMAND"
->smbpasswd</B
-> now has the capability
- to change passwords on Windows NT servers (this only works when
- the request is sent to the NT Primary Domain Controller if you
- are changing an NT Domain user's password).</P
+>This capability is configured in the TCP/IP setup area in the network
+configuration facility. If enabled an elaborate name resolution sequence
+is followed the precise nature of which isdependant on what the NetBIOS
+Node Type parameter is configured to. A Node Type of 0 means use
+NetBIOS broadcast (over UDP broadcast) is first used if the name
+that is the subject of a name lookup is not found in the NetBIOS name
+cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to
+Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the
+WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast
+lookup is used.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN483"
+></A
+>3.3.5. WINS Lookup</H3
><P
->To run smbpasswd as a normal user just type :</P
+>A WINS (Windows Internet Name Server) service is the equivaent of the
+rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores
+the names and IP addresses that are registered by a Windows client
+if the TCP/IP setup has been given at least one WINS Server IP Address.</P
><P
-><TT
-CLASS="PROMPT"
->$ </TT
-><TT
-CLASS="USERINPUT"
-><B
->smbpasswd</B
-></TT
-></P
+>To configure Samba to be a WINS server the following parameter needs
+to be added to the <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> file:</P
><P
-><TT
-CLASS="PROMPT"
->Old SMB password: </TT
-><TT
-CLASS="USERINPUT"
-><B
-><type old value here -
- or hit return if there was no old password></B
-></TT
+><PRE
+CLASS="PROGRAMLISTING"
+> wins support = Yes</PRE
></P
><P
-><TT
-CLASS="PROMPT"
->New SMB Password: </TT
-><TT
-CLASS="USERINPUT"
-><B
-><type new value>
- </B
-></TT
+>To configure Samba to use a WINS server the following parameters are
+needed in the smb.conf file:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> wins support = No
+ wins server = xxx.xxx.xxx.xxx</PRE
></P
><P
-><TT
-CLASS="PROMPT"
->Repeat New SMB Password: </TT
-><TT
-CLASS="USERINPUT"
-><B
-><re-type new value
- </B
+>where <TT
+CLASS="REPLACEABLE"
+><I
+>xxx.xxx.xxx.xxx</I
></TT
-></P
+> is the IP address
+of the WINS server.</P
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN495"
+></A
+>3.4. How browsing functions and how to deploy stable and
+dependable browsing using Samba</H2
><P
->If the old value does not match the current value stored for
- that user, or the two new values do not match each other, then the
- password will not be changed.</P
+>As stated above, MS Windows machines register their NetBIOS names
+(i.e.: the machine name for each service type in operation) on start
+up. Also, as stated above, the exact method by which this name registration
+takes place is determined by whether or not the MS Windows client/server
+has been given a WINS server address, whether or not LMHOSTS lookup
+is enabled, or if DNS for NetBIOS name resolution is enabled, etc.</P
><P
->If invoked by an ordinary user it will only allow the user
- to change his or her own Samba password.</P
+>In the case where there is no WINS server all name registrations as
+well as name lookups are done by UDP broadcast. This isolates name
+resolution to the local subnet, unless LMHOSTS is used to list all
+names and IP addresses. In such situations Samba provides a means by
+which the samba server name may be forcibly injected into the browse
+list of a remote MS Windows network (using the "remote announce" parameter).</P
><P
->If run by the root user smbpasswd may take an optional
- argument, specifying the user name whose SMB password you wish to
- change. Note that when run as root smbpasswd does not prompt for
- or check the old password value, thus allowing root to set passwords
- for users who have forgotten their passwords.</P
+>Where a WINS server is used, the MS Windows client will use UDP
+unicast to register with the WINS server. Such packets can be routed
+and thus WINS allows name resolution to function across routed networks.</P
><P
-><B
-CLASS="COMMAND"
->smbpasswd</B
-> is designed to work in the same way
- and be familiar to UNIX users who use the <B
-CLASS="COMMAND"
->passwd</B
-> or
- <B
-CLASS="COMMAND"
->yppasswd</B
-> commands.</P
+>During the startup process an election will take place to create a
+local master browser if one does not already exist. On each NetBIOS network
+one machine will be elected to function as the domain master browser. This
+domain browsing has nothing to do with MS security domain control.
+Instead, the domain master browser serves the role of contacting each local
+master browser (found by asking WINS or from LMHOSTS) and exchanging browse
+list contents. This way every master browser will eventually obtain a complete
+list of all machines that are on the network. Every 11-15 minutes an election
+is held to determine which machine will be the master browser. By the nature of
+the election criteria used, the machine with the highest uptime, or the
+most senior protocol version, or other criteria, will win the election
+as domain master browser.</P
><P
->For more details on using <B
-CLASS="COMMAND"
->smbpasswd</B
-> refer
- to the man page which will always be the definitive reference.</P
-></DIV
-></DIV
+>Clients wishing to browse the network make use of this list, but also depend
+on the availability of correct name resolution to the respective IP
+address/addresses. </P
+><P
+>Any configuration that breaks name resolution and/or browsing intrinsics
+will annoy users because they will have to put up with protracted
+inability to use the network services.</P
+><P
+>Samba supports a feature that allows forced synchonisation
+of browse lists across routed networks using the "remote
+browse sync" parameter in the smb.conf file. This causes Samba
+to contact the local master browser on a remote network and
+to request browse list synchronisation. This effectively bridges
+two networks that are separated by routers. The two remote
+networks may use either broadcast based name resolution or WINS
+based name resolution, but it should be noted that the "remote
+browse sync" parameter provides browse list synchronisation - and
+that is distinct from name to address resolution, in other
+words, for cross subnet browsing to function correctly it is
+essential that a name to address resolution mechanism be provided.
+This mechanism could be via DNS, <TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+>,
+and so on.</P
></DIV
><DIV
-CLASS="PART"
-><A
-NAME="AEN544"
-></A
-><DIV
-CLASS="TITLEPAGE"
-><H1
-CLASS="TITLE"
->II. Type of installation</H1
-><DIV
-CLASS="PARTINTRO"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN546"
+NAME="AEN505"
></A
-><H1
->Introduction</H1
+>3.5. MS Windows security options and how to configure
+Samba for seemless integration</H2
><P
->This part contains information on using samba in a (NT 4 or ADS) domain.
-If you wish to run samba as a domain member or DC, read the appropriate chapter in
-this part.</P
-></DIV
-><DIV
-CLASS="TOC"
-><DL
-><DT
-><B
->Table of Contents</B
-></DT
-><DT
->6. <A
-HREF="#SAMBA-PDC"
->How to Configure Samba as a NT4 Primary Domain Controller</A
-></DT
-><DD
-><DL
-><DT
->6.1. <A
-HREF="#AEN566"
->Prerequisite Reading</A
-></DT
-><DT
->6.2. <A
-HREF="#AEN572"
->Background</A
-></DT
-><DT
->6.3. <A
-HREF="#AEN611"
->Configuring the Samba Domain Controller</A
-></DT
-><DT
->6.4. <A
-HREF="#AEN654"
->Creating Machine Trust Accounts and Joining Clients to the
-Domain</A
-></DT
-><DD
-><DL
-><DT
->6.4.1. <A
-HREF="#AEN673"
->Manual Creation of Machine Trust Accounts</A
-></DT
-><DT
->6.4.2. <A
-HREF="#AEN714"
->"On-the-Fly" Creation of Machine Trust Accounts</A
-></DT
-><DT
->6.4.3. <A
-HREF="#AEN723"
->Joining the Client to the Domain</A
-></DT
-></DL
-></DD
-><DT
->6.5. <A
-HREF="#AEN738"
->Common Problems and Errors</A
-></DT
-><DT
->6.6. <A
-HREF="#AEN786"
->System Policies and Profiles</A
-></DT
-><DT
->6.7. <A
-HREF="#AEN830"
->What other help can I get?</A
-></DT
-><DT
->6.8. <A
-HREF="#AEN944"
->Domain Control for Windows 9x/ME</A
-></DT
-><DD
-><DL
-><DT
->6.8.1. <A
-HREF="#AEN970"
->Configuration Instructions: Network Logons</A
-></DT
-><DT
->6.8.2. <A
-HREF="#AEN989"
->Configuration Instructions: Setting up Roaming User Profiles</A
-></DT
-></DL
-></DD
-><DT
->6.9. <A
-HREF="#AEN1082"
->DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</A
-></DT
-></DL
-></DD
-><DT
->7. <A
-HREF="#SAMBA-BDC"
->How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</A
-></DT
-><DD
-><DL
-><DT
->7.1. <A
-HREF="#AEN1118"
->Prerequisite Reading</A
-></DT
-><DT
->7.2. <A
-HREF="#AEN1122"
->Background</A
-></DT
-><DT
->7.3. <A
-HREF="#AEN1130"
->What qualifies a Domain Controller on the network?</A
-></DT
-><DD
-><DL
-><DT
->7.3.1. <A
-HREF="#AEN1133"
->How does a Workstation find its domain controller?</A
-></DT
-><DT
->7.3.2. <A
-HREF="#AEN1136"
->When is the PDC needed?</A
-></DT
-></DL
-></DD
-><DT
->7.4. <A
-HREF="#AEN1139"
->Can Samba be a Backup Domain Controller?</A
-></DT
-><DT
->7.5. <A
-HREF="#AEN1143"
->How do I set up a Samba BDC?</A
-></DT
-><DD
-><DL
-><DT
->7.5.1. <A
-HREF="#AEN1160"
->How do I replicate the smbpasswd file?</A
-></DT
-></DL
-></DD
-></DL
-></DD
-><DT
->8. <A
-HREF="#ADS"
->Samba as a ADS domain member</A
-></DT
-><DD
-><DL
-><DT
->8.1. <A
-HREF="#AEN1178"
->Installing the required packages for Debian</A
-></DT
-><DT
->8.2. <A
-HREF="#AEN1184"
->Installing the required packages for RedHat</A
-></DT
-><DT
->8.3. <A
-HREF="#AEN1193"
->Compile Samba</A
-></DT
-><DT
->8.4. <A
-HREF="#AEN1205"
->Setup your /etc/krb5.conf</A
-></DT
-><DT
->8.5. <A
-HREF="#AEN1215"
->Create the computer account</A
-></DT
-><DD
-><DL
-><DT
->8.5.1. <A
-HREF="#AEN1219"
->Possible errors</A
-></DT
-></DL
-></DD
-><DT
->8.6. <A
-HREF="#AEN1231"
->Test your server setup</A
-></DT
-><DT
->8.7. <A
-HREF="#AEN1236"
->Testing with smbclient</A
-></DT
-><DT
->8.8. <A
-HREF="#AEN1239"
->Notes</A
-></DT
-></DL
-></DD
-><DT
->9. <A
-HREF="#DOMAIN-SECURITY"
->Samba as a NT4 domain member</A
-></DT
-><DD
-><DL
-><DT
->9.1. <A
-HREF="#AEN1261"
->Joining an NT Domain with Samba 2.2</A
-></DT
-><DT
->9.2. <A
-HREF="#AEN1325"
->Samba and Windows 2000 Domains</A
-></DT
-><DT
->9.3. <A
-HREF="#AEN1330"
->Why is this better than security = server?</A
-></DT
-></DL
-></DD
-></DL
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="SAMBA-PDC"
-></A
->Chapter 6. How to Configure Samba as a NT4 Primary Domain Controller</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN566"
-></A
->6.1. Prerequisite Reading</H2
-><P
->Before you continue reading in this chapter, please make sure
-that you are comfortable with configuring basic files services
-in smb.conf and how to enable and administer password
-encryption in Samba. Theses two topics are covered in the
-<A
-HREF="smb.conf.5.html"
-TARGET="_top"
-><TT
-CLASS="FILENAME"
->smb.conf(5)</TT
-></A
->
-manpage and the <A
-HREF="ENCRYPTION.html"
-TARGET="_top"
->Encryption chapter</A
->
-of this HOWTO Collection.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN572"
-></A
->6.2. Background</H2
-><DIV
-CLASS="NOTE"
-><P
-></P
-><TABLE
-CLASS="NOTE"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/note.gif"
-HSPACE="5"
-ALT="Note"></TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
-><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Author's Note:</I
-></SPAN
-> This document is a combination
-of David Bannon's "Samba 2.2 PDC HOWTO" and "Samba NT Domain FAQ".
-Both documents are superseded by this one.</P
-></TD
-></TR
-></TABLE
-></DIV
+>MS Windows clients may use encrypted passwords as part of a
+challenege/response authentication model (a.k.a. NTLMv1) or
+alone, or clear text strings for simple password based
+authentication. It should be realized that with the SMB
+protocol the password is passed over the network either
+in plain text or encrypted, but not both in the same
+authentication requets.</P
><P
->Versions of Samba prior to release 2.2 had marginal capabilities to act
-as a Windows NT 4.0 Primary Domain Controller
-
-(PDC). With Samba 2.2.0, we are proud to announce official support for
-Windows NT 4.0-style domain logons from Windows NT 4.0 and Windows
-2000 clients. This article outlines the steps
-necessary for configuring Samba as a PDC. It is necessary to have a
-working Samba server prior to implementing the PDC functionality. If
-you have not followed the steps outlined in <A
-HREF="UNIX_INSTALL.html"
-TARGET="_top"
-> UNIX_INSTALL.html</A
->, please make sure
-that your server is configured correctly before proceeding. Another
-good resource in the <A
-HREF="smb.conf.5.html"
-TARGET="_top"
->smb.conf(5) man
-page</A
->. The following functionality should work in 2.2:</P
+>When encrypted passwords are used a password that has been
+entered by the user is encrypted in two ways:</P
><P
></P
><UL
><LI
><P
-> domain logons for Windows NT 4.0/2000 clients.
- </P
-></LI
-><LI
-><P
-> placing a Windows 9x client in user level security
- </P
-></LI
-><LI
-><P
-> retrieving a list of users and groups from a Samba PDC to
- Windows 9x/NT/2000 clients
- </P
-></LI
-><LI
-><P
-> roving (roaming) user profiles
+>An MD4 hash of the UNICODE of the password
+ string. This is known as the NT hash.
</P
></LI
><LI
><P
-> Windows NT 4.0-style system policies
+>The password is converted to upper case,
+ and then padded or trucated to 14 bytes. This string is
+ then appended with 5 bytes of NULL characters and split to
+ form two 56 bit DES keys to encrypt a "magic" 8 byte value.
+ The resulting 16 bytes for the LanMan hash.
</P
></LI
></UL
><P
->The following pieces of functionality are not included in the 2.2 release:</P
-><P
-></P
-><UL
-><LI
+>You should refer to the <A
+HREF="ENCRYPTION.html"
+TARGET="_top"
+>Password Encryption</A
+> chapter in this HOWTO collection
+for more details on the inner workings</P
><P
-> Windows NT 4 domain trusts
- </P
-></LI
-><LI
+>MS Windows 95 pre-service pack 1, MS Windows NT versions 3.x
+and version 4.0 pre-service pack 3 will use either mode of
+password authentication. All versions of MS Windows that follow
+these versions no longer support plain text passwords by default.</P
><P
-> SAM replication with Windows NT 4.0 Domain Controllers
- (i.e. a Samba PDC and a Windows NT BDC or vice versa)
- </P
-></LI
-><LI
+>MS Windows clients have a habit of dropping network mappings that
+have been idle for 10 minutes or longer. When the user attempts to
+use the mapped drive connection that has been dropped, the client
+re-establishes the connection using
+a cached copy of the password.</P
><P
-> Adding users via the User Manager for Domains
- </P
-></LI
-><LI
+>When Microsoft changed the default password mode, they dropped support for
+caching of the plain text password. This means that when the registry
+parameter is changed to re-enable use of plain text passwords it appears to
+work, but when a dropped mapping attempts to revalidate it will fail if
+the remote authentication server does not support encrypted passwords.
+This means that it is definitely not a good idea to re-enable plain text
+password support in such clients.</P
><P
-> Acting as a Windows 2000 Domain Controller (i.e. Kerberos and
- Active Directory)
- </P
-></LI
-></UL
+>The following parameters can be used to work around the
+issue of Windows 9x client upper casing usernames and
+password before transmitting them to the SMB server
+when using clear text authentication.</P
><P
->Please note that Windows 9x clients are not true members of a domain
-for reasons outlined in this article. Therefore the protocol for
-support Windows 9x-style domain logons is completely different
-from NT4 domain logons and has been officially supported for some
-time.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> <A
+HREF="smb.conf.5.html#PASSWORDLEVEL"
+TARGET="_top"
+>passsword level</A
+> = <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+>
+ <A
+HREF="smb.conf.5.html#USERNAMELEVEL"
+TARGET="_top"
+>username level</A
+> = <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+></PRE
+></P
><P
->Implementing a Samba PDC can basically be divided into 2 broad
-steps.</P
+>By default Samba will lower case the username before attempting
+to lookup the user in the database of local system accounts.
+Because UNIX usernames conventionally only contain lower case
+character, the <TT
+CLASS="PARAMETER"
+><I
+>username level</I
+></TT
+> parameter
+is rarely even needed.</P
+><P
+>However, password on UNIX systems often make use of mixed case
+characters. This means that in order for a user on a Windows 9x
+client to connect to a Samba server using clear text authentication,
+the <TT
+CLASS="PARAMETER"
+><I
+>password level</I
+></TT
+> must be set to the maximum
+number of upper case letter which <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>could</I
+></SPAN
+> appear
+is a password. Note that is the server OS uses the traditional
+DES version of crypt(), then a <TT
+CLASS="PARAMETER"
+><I
+>password level</I
+></TT
+>
+of 8 will result in case insensitive passwords as seen from Windows
+users. This will also result in longer login times as Samba
+hash to compute the permutations of the password string and
+try them one by one until a match is located (or all combinations fail).</P
+><P
+>The best option to adopt is to enable support for encrypted passwords
+where ever Samba is used. There are three configuration possibilities
+for support of encrypted passwords:</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN533"
+></A
+>3.5.1. Use MS Windows NT as an authentication server</H3
+><P
+>This method involves the additions of the following parameters
+in the smb.conf file:</P
><P
+><PRE
+CLASS="PROGRAMLISTING"
+> encrypt passwords = Yes
+ security = server
+ password server = "NetBIOS_name_of_PDC"</PRE
></P
-><OL
-TYPE="1"
+><P
+>There are two ways of identifying whether or not a username and
+password pair was valid or not. One uses the reply information provided
+as part of the authentication messaging process, the other uses
+just and error code.</P
+><P
+>The down-side of this mode of configuration is the fact that
+for security reasons Samba will send the password server a bogus
+username and a bogus password and if the remote server fails to
+reject the username and password pair then an alternative mode
+of identification of validation is used. Where a site uses password
+lock out after a certain number of failed authentication attempts
+this will result in user lockouts.</P
+><P
+>Use of this mode of authentication does require there to be
+a standard Unix account for the user, this account can be blocked
+to prevent logons by other than MS Windows clients.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN541"
+></A
+>3.5.2. Make Samba a member of an MS Windows NT security domain</H3
+><P
+>This method involves additon of the following paramters in the smb.conf file:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> encrypt passwords = Yes
+ security = domain
+ workgroup = "name of NT domain"
+ password server = *</PRE
+></P
+><P
+>The use of the "*" argument to "password server" will cause samba
+to locate the domain controller in a way analogous to the way
+this is done within MS Windows NT.</P
+><P
+>In order for this method to work the Samba server needs to join the
+MS Windows NT security domain. This is done as follows:</P
+><P
+></P
+><UL
><LI
><P
-> Configuring the Samba PDC
+>On the MS Windows NT domain controller using
+ the Server Manager add a machine account for the Samba server.
</P
></LI
><LI
><P
-> Creating machine trust accounts and joining clients
- to the domain
+>Next, on the Linux system execute:
+ <B
+CLASS="COMMAND"
+>smbpasswd -r PDC_NAME -j DOMAIN_NAME</B
+>
</P
></LI
-></OL
+></UL
><P
->There are other minor details such as user profiles, system
-policies, etc... However, these are not necessarily specific
-to a Samba PDC as much as they are related to Windows NT networking
-concepts. They will be mentioned only briefly here.</P
+>Use of this mode of authentication does require there to be
+a standard Unix account for the user in order to assign
+a uid once the account has been authenticated by the remote
+Windows DC. This account can be blocked to prevent logons by
+other than MS Windows clients by things such as setting an invalid
+shell in the <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entry.</P
+><P
+>An alternative to assigning UIDs to Windows users on a
+Samba member server is presented in the <A
+HREF="winbind.html"
+TARGET="_top"
+>Winbind Overview</A
+> chapter in
+this HOWTO collection.</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN611"
+NAME="AEN558"
></A
->6.3. Configuring the Samba Domain Controller</H2
+>3.5.3. Configure Samba as an authentication server</H3
><P
->The first step in creating a working Samba PDC is to
-understand the parameters necessary in smb.conf. I will not
-attempt to re-explain the parameters here as they are more that
-adequately covered in <A
-HREF="smb.conf.5.html"
-TARGET="_top"
-> the smb.conf
-man page</A
->. For convenience, the parameters have been
-linked with the actual smb.conf description.</P
+>This mode of authentication demands that there be on the
+Unix/Linux system both a Unix style account as well as an
+smbpasswd entry for the user. The Unix system account can be
+locked if required as only the encrypted password will be
+used for SMB client authentication.</P
><P
->Here is an example <TT
-CLASS="FILENAME"
->smb.conf</TT
-> for acting as a PDC:</P
+>This method involves addition of the following parameters to
+the smb.conf file:</P
><P
><PRE
CLASS="PROGRAMLISTING"
->[global]
- ; Basic server settings
- <A
-HREF="smb.conf.5.html#NETBIOSNAME"
-TARGET="_top"
->netbios name</A
-> = <TT
-CLASS="REPLACEABLE"
-><I
->POGO</I
-></TT
->
- <A
-HREF="smb.conf.5.html#WORKGROUP"
-TARGET="_top"
->workgroup</A
-> = <TT
-CLASS="REPLACEABLE"
-><I
->NARNIA</I
-></TT
->
+>## please refer to the Samba PDC HOWTO chapter later in
+## this collection for more details
+[global]
+ encrypt passwords = Yes
+ security = user
+ domain logons = Yes
+ ; an OS level of 33 or more is recommended
+ os level = 33
- ; we should act as the domain and local master browser
- <A
-HREF="smb.conf.5.html#OSLEVEL"
-TARGET="_top"
->os level</A
-> = 64
- <A
-HREF="smb.conf.5.html#PERFERREDMASTER"
-TARGET="_top"
->preferred master</A
-> = yes
- <A
-HREF="smb.conf.5.html#DOMAINMASTER"
-TARGET="_top"
->domain master</A
-> = yes
- <A
-HREF="smb.conf.5.html#LOCALMASTER"
-TARGET="_top"
->local master</A
-> = yes
-
- ; security settings (must user security = user)
- <A
-HREF="smb.conf.5.html#SECURITYEQUALSUSER"
-TARGET="_top"
->security</A
-> = user
-
- ; encrypted passwords are a requirement for a PDC
- <A
-HREF="smb.conf.5.html#ENCRYPTPASSWORDS"
-TARGET="_top"
->encrypt passwords</A
-> = yes
-
- ; support domain logons
- <A
-HREF="smb.conf.5.html#DOMAINLOGONS"
-TARGET="_top"
->domain logons</A
-> = yes
-
- ; where to store user profiles?
- <A
-HREF="smb.conf.5.html#LOGONPATH"
-TARGET="_top"
->logon path</A
-> = \\%N\profiles\%u
-
- ; where is a user's home directory and where should it
- ; be mounted at?
- <A
-HREF="smb.conf.5.html#LOGONDRIVE"
-TARGET="_top"
->logon drive</A
-> = H:
- <A
-HREF="smb.conf.5.html#LOGONHOME"
-TARGET="_top"
->logon home</A
-> = \\homeserver\%u
-
- ; specify a generic logon script for all users
- ; this is a relative **DOS** path to the [netlogon] share
- <A
-HREF="smb.conf.5.html#LOGONSCRIPT"
-TARGET="_top"
->logon script</A
-> = logon.cmd
-
-; necessary share for domain controller
-[netlogon]
- <A
-HREF="smb.conf.5.html#PATH"
-TARGET="_top"
->path</A
-> = /usr/local/samba/lib/netlogon
- <A
-HREF="smb.conf.5.html#READONLY"
-TARGET="_top"
->read only</A
-> = yes
- <A
-HREF="smb.conf.5.html#WRITELIST"
-TARGET="_top"
->write list</A
-> = <TT
-CLASS="REPLACEABLE"
-><I
->ntadmin</I
-></TT
->
-
-; share for storing user profiles
-[profiles]
- <A
-HREF="smb.conf.5.html#PATH"
-TARGET="_top"
->path</A
-> = /export/smb/ntprofile
- <A
-HREF="smb.conf.5.html#READONLY"
-TARGET="_top"
->read only</A
-> = no
- <A
-HREF="smb.conf.5.html#CREATEMASK"
-TARGET="_top"
->create mask</A
-> = 0600
- <A
-HREF="smb.conf.5.html#DIRECTORYMASK"
-TARGET="_top"
->directory mask</A
-> = 0700</PRE
+[NETLOGON]
+ path = /somewhare/in/file/system
+ read only = yes</PRE
></P
><P
->There are a couple of points to emphasize in the above configuration.</P
-><P
-></P
-><UL
-><LI
+>in order for this method to work a Unix system account needs
+to be created for each user, as well as for each MS Windows NT/2000
+machine. The following structure is required.</P
+><DIV
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
+><A
+NAME="AEN565"
+></A
+>3.5.3.1. Users</H4
><P
-> Encrypted passwords must be enabled. For more details on how
- to do this, refer to <A
-HREF="ENCRYPTION.html"
-TARGET="_top"
->ENCRYPTION.html</A
->.
- </P
-></LI
-><LI
+>A user account that may provide a home directory should be
+created. The following Linux system commands are typical of
+the procedure for creating an account.</P
><P
-> The server must support domain logons and a
- <TT
-CLASS="FILENAME"
->[netlogon]</TT
-> share
- </P
-></LI
-><LI
+><PRE
+CLASS="PROGRAMLISTING"
+> # useradd -s /bin/bash -d /home/"userid" -m "userid"
+ # passwd "userid"
+ Enter Password: <pw>
+
+ # smbpasswd -a "userid"
+ Enter Password: <pw></PRE
+></P
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
+><A
+NAME="AEN570"
+></A
+>3.5.3.2. MS Windows NT Machine Accounts</H4
><P
-> The server must be the domain master browser in order for Windows
- client to locate the server as a DC. Please refer to the various
- Network Browsing documentation included with this distribution for
- details.
- </P
-></LI
-></UL
+>These are required only when Samba is used as a domain
+controller. Refer to the Samba-PDC-HOWTO for more details.</P
><P
->As Samba 2.2 does not offer a complete implementation of group mapping
-between Windows NT groups and Unix groups (this is really quite
-complicated to explain in a short space), you should refer to the
-<A
-HREF="smb.conf.5.html#DOMAINADMINGROUP"
-TARGET="_top"
->domain admin
-group</A
-> smb.conf parameter for information of creating "Domain
-Admins" style accounts.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> # useradd -s /bin/false -d /dev/null "machine_name"\$
+ # passwd -l "machine_name"\$
+ # smbpasswd -a -m "machine_name"</PRE
+></P
+></DIV
+></DIV
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN654"
+NAME="AEN575"
></A
->6.4. Creating Machine Trust Accounts and Joining Clients to the
-Domain</H2
+>3.6. Conclusions</H2
><P
->A machine trust account is a Samba account that is used to
-authenticate a client machine (rather than a user) to the Samba
-server. In Windows terminology, this is known as a "Computer
-Account."</P
-><P
->The password of a machine trust account acts as the shared secret for
-secure communication with the Domain Controller. This is a security
-feature to prevent an unauthorized machine with the same NetBIOS name
-from joining the domain and gaining access to domain user/group
-accounts. Windows NT and 2000 clients use machine trust accounts, but
-Windows 9x clients do not. Hence, a Windows 9x client is never a true
-member of a domain because it does not possess a machine trust
-account, and thus has no shared secret with the domain controller.</P
+>Samba provides a flexible means to operate as...</P
><P
->A Windows PDC stores each machine trust account in the Windows
-Registry. A Samba PDC, however, stores each machine trust account
-in two parts, as follows:
-
-<P
></P
><UL
><LI
><P
->A Samba account, stored in the same location as user
- LanMan and NT password hashes (currently
- <TT
-CLASS="FILENAME"
->smbpasswd</TT
->). The Samba account
- possesses and uses only the NT password hash.</P
-></LI
-><LI
-><P
->A corresponding Unix account, typically stored in
- <TT
-CLASS="FILENAME"
->/etc/passwd</TT
->. (Future releases will alleviate the need to
- create <TT
-CLASS="FILENAME"
->/etc/passwd</TT
-> entries.) </P
+>A Stand-alone server - No special action is needed
+ other than to create user accounts. Stand-alone servers do NOT
+ provide network logon services, meaning that machines that use this
+ server do NOT perform a domain logon but instead make use only of
+ the MS Windows logon which is local to the MS Windows
+ workstation/server.
+ </P
></LI
-></UL
-></P
-><P
->There are two ways to create machine trust accounts:</P
-><P
-></P
-><UL
><LI
><P
-> Manual creation. Both the Samba and corresponding
- Unix account are created by hand.</P
+>An MS Windows NT 3.x/4.0 security domain member.
+ </P
></LI
><LI
><P
-> "On-the-fly" creation. The Samba machine trust
- account is automatically created by Samba at the time the client
- is joined to the domain. (For security, this is the
- recommended method.) The corresponding Unix account may be
- created automatically or manually. </P
+>An alternative to an MS Windows NT 3.x/4.0
+ Domain Controller.
+ </P
></LI
></UL
+></DIV
+></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="PAM"
+></A
+>Chapter 4. Configuring PAM for distributed but centrally
+managed authentication</H1
+><DIV
+CLASS="SECT1"
+><H2
+CLASS="SECT1"
><A
-NAME="AEN673"
+NAME="AEN596"
></A
->6.4.1. Manual Creation of Machine Trust Accounts</H3
+>4.1. Samba and PAM</H2
><P
->The first step in manually creating a machine trust account is to
-manually create the corresponding Unix account in
-<TT
+>A number of Unix systems (eg: Sun Solaris), as well as the
+xxxxBSD family and Linux, now utilize the Pluggable Authentication
+Modules (PAM) facility to provide all authentication,
+authorization and resource control services. Prior to the
+introduction of PAM, a decision to use an alternative to
+the system password database (<TT
CLASS="FILENAME"
>/etc/passwd</TT
->. This can be done using
+>)
+would require the provision of alternatives for all programs that provide
+security services. Such a choice would involve provision of
+alternatives to such programs as: <B
+CLASS="COMMAND"
+>login</B
+>,
<B
CLASS="COMMAND"
->vipw</B
-> or other 'add user' command that is normally
-used to create new Unix accounts. The following is an example for a
-Linux based Samba server:</P
-><P
-> <TT
-CLASS="PROMPT"
->root# </TT
-><B
+>passwd</B
+>, <B
CLASS="COMMAND"
->/usr/sbin/useradd -g 100 -d /dev/null -c <TT
-CLASS="REPLACEABLE"
-><I
->"machine
-nickname"</I
-></TT
-> -s /bin/false <TT
-CLASS="REPLACEABLE"
-><I
->machine_name</I
-></TT
->$ </B
-></P
+>chown</B
+>, etc.</P
><P
-><TT
-CLASS="PROMPT"
->root# </TT
-><B
-CLASS="COMMAND"
->passwd -l <TT
-CLASS="REPLACEABLE"
-><I
->machine_name</I
-></TT
->$</B
+>PAM provides a mechanism that disconnects these security programs
+from the underlying authentication/authorization infrastructure.
+PAM is configured either through one file <TT
+CLASS="FILENAME"
+>/etc/pam.conf</TT
+> (Solaris),
+or by editing individual files that are located in <TT
+CLASS="FILENAME"
+>/etc/pam.d</TT
+>.</P
+><P
+>The following is an example <TT
+CLASS="FILENAME"
+>/etc/pam.d/login</TT
+> configuration file.
+This example had all options been uncommented is probably not usable
+as it stacks many conditions before allowing successful completion
+of the login process. Essentially all conditions can be disabled
+by commenting them out except the calls to <TT
+CLASS="FILENAME"
+>pam_pwdb.so</TT
+>.</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>#%PAM-1.0
+# The PAM configuration file for the `login' service
+#
+auth required pam_securetty.so
+auth required pam_nologin.so
+# auth required pam_dialup.so
+# auth optional pam_mail.so
+auth required pam_pwdb.so shadow md5
+# account requisite pam_time.so
+account required pam_pwdb.so
+session required pam_pwdb.so
+# session optional pam_lastlog.so
+# password required pam_cracklib.so retry=3
+password required pam_pwdb.so shadow md5</PRE
></P
><P
->On *BSD systems, this can be done using the 'chpass' utility:</P
+>PAM allows use of replacable modules. Those available on a
+sample system include:</P
><P
-><TT
-CLASS="PROMPT"
->root# </TT
-><B
-CLASS="COMMAND"
->chpass -a "<TT
-CLASS="REPLACEABLE"
-><I
->machine_name</I
-></TT
->$:*:101:100::0:0:Workstation <TT
-CLASS="REPLACEABLE"
-><I
->machine_name</I
-></TT
->:/dev/null:/sbin/nologin"</B
+><PRE
+CLASS="PROGRAMLISTING"
+>$ /bin/ls /lib/security
+pam_access.so pam_ftp.so pam_limits.so
+pam_ncp_auth.so pam_rhosts_auth.so pam_stress.so
+pam_cracklib.so pam_group.so pam_listfile.so
+pam_nologin.so pam_rootok.so pam_tally.so
+pam_deny.so pam_issue.so pam_mail.so
+pam_permit.so pam_securetty.so pam_time.so
+pam_dialup.so pam_lastlog.so pam_mkhomedir.so
+pam_pwdb.so pam_shells.so pam_unix.so
+pam_env.so pam_ldap.so pam_motd.so
+pam_radius.so pam_smbpass.so pam_unix_acct.so
+pam_wheel.so pam_unix_auth.so pam_unix_passwd.so
+pam_userdb.so pam_warn.so pam_unix_session.so</PRE
></P
><P
->The <TT
+>The following example for the login program replaces the use of
+the <TT
+CLASS="FILENAME"
+>pam_pwdb.so</TT
+> module which uses the system
+password database (<TT
CLASS="FILENAME"
>/etc/passwd</TT
-> entry will list the machine name
-with a "$" appended, won't have a password, will have a null shell and no
-home directory. For example a machine named 'doppy' would have an
+>,
<TT
CLASS="FILENAME"
->/etc/passwd</TT
-> entry like this:</P
+>/etc/shadow</TT
+>, <TT
+CLASS="FILENAME"
+>/etc/group</TT
+>) with
+the module <TT
+CLASS="FILENAME"
+>pam_smbpass.so</TT
+> which uses the Samba
+database which contains the Microsoft MD4 encrypted password
+hashes. This database is stored in either
+<TT
+CLASS="FILENAME"
+>/usr/local/samba/private/smbpasswd</TT
+>,
+<TT
+CLASS="FILENAME"
+>/etc/samba/smbpasswd</TT
+>, or in
+<TT
+CLASS="FILENAME"
+>/etc/samba.d/smbpasswd</TT
+>, depending on the
+Samba implementation for your Unix/Linux system. The
+<TT
+CLASS="FILENAME"
+>pam_smbpass.so</TT
+> module is provided by
+Samba version 2.2.1 or later. It can be compiled by specifying the
+<B
+CLASS="COMMAND"
+>--with-pam_smbpass</B
+> options when running Samba's
+<TT
+CLASS="FILENAME"
+>configure</TT
+> script. For more information
+on the <TT
+CLASS="FILENAME"
+>pam_smbpass</TT
+> module, see the documentation
+in the <TT
+CLASS="FILENAME"
+>source/pam_smbpass</TT
+> directory of the Samba
+source distribution.</P
><P
><PRE
CLASS="PROGRAMLISTING"
->doppy$:x:505:501:<TT
-CLASS="REPLACEABLE"
-><I
->machine_nickname</I
-></TT
->:/dev/null:/bin/false</PRE
+>#%PAM-1.0
+# The PAM configuration file for the `login' service
+#
+auth required pam_smbpass.so nodelay
+account required pam_smbpass.so nodelay
+session required pam_smbpass.so nodelay
+password required pam_smbpass.so nodelay</PRE
></P
><P
->Above, <TT
-CLASS="REPLACEABLE"
-><I
->machine_nickname</I
-></TT
-> can be any
-descriptive name for the client, i.e., BasementComputer.
-<TT
-CLASS="REPLACEABLE"
-><I
->machine_name</I
-></TT
-> absolutely must be the NetBIOS
-name of the client to be joined to the domain. The "$" must be
-appended to the NetBIOS name of the client or Samba will not recognize
-this as a machine trust account.</P
+>The following is the PAM configuration file for a particular
+Linux system. The default condition uses <TT
+CLASS="FILENAME"
+>pam_pwdb.so</TT
+>.</P
><P
->Now that the corresponding Unix account has been created, the next step is to create
-the Samba account for the client containing the well-known initial
-machine trust account password. This can be done using the <A
-HREF="smbpasswd.8.html"
-TARGET="_top"
-><B
-CLASS="COMMAND"
->smbpasswd(8)</B
-></A
-> command
-as shown here:</P
+><PRE
+CLASS="PROGRAMLISTING"
+>#%PAM-1.0
+# The PAM configuration file for the `samba' service
+#
+auth required /lib/security/pam_pwdb.so nullok nodelay shadow audit
+account required /lib/security/pam_pwdb.so audit nodelay
+session required /lib/security/pam_pwdb.so nodelay
+password required /lib/security/pam_pwdb.so shadow md5</PRE
+></P
><P
-><TT
-CLASS="PROMPT"
->root# </TT
-><B
-CLASS="COMMAND"
->smbpasswd -a -m <TT
-CLASS="REPLACEABLE"
-><I
->machine_name</I
-></TT
-></B
-></P
-><P
->where <TT
-CLASS="REPLACEABLE"
-><I
->machine_name</I
-></TT
-> is the machine's NetBIOS
-name. The RID of the new machine account is generated from the UID of
-the corresponding Unix account.</P
-><DIV
-CLASS="WARNING"
+>In the following example the decision has been made to use the
+smbpasswd database even for basic samba authentication. Such a
+decision could also be made for the passwd program and would
+thus allow the smbpasswd passwords to be changed using the passwd
+program.</P
><P
+><PRE
+CLASS="PROGRAMLISTING"
+>#%PAM-1.0
+# The PAM configuration file for the `samba' service
+#
+auth required /lib/security/pam_smbpass.so nodelay
+account required /lib/security/pam_pwdb.so audit nodelay
+session required /lib/security/pam_pwdb.so nodelay
+password required /lib/security/pam_smbpass.so nodelay smbconf=/etc/samba.d/smb.conf</PRE
></P
-><TABLE
-CLASS="WARNING"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/warning.gif"
-HSPACE="5"
-ALT="Warning"></TD
-><TH
-ALIGN="LEFT"
-VALIGN="CENTER"
-><B
->Join the client to the domain immediately</B
-></TH
-></TR
-><TR
-><TD
-> </TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
><P
-> Manually creating a machine trust account using this method is the
- equivalent of creating a machine trust account on a Windows NT PDC using
- the "Server Manager". From the time at which the account is created
- to the time which the client joins the domain and changes the password,
- your domain is vulnerable to an intruder joining your domain using a
- a machine with the same NetBIOS name. A PDC inherently trusts
- members of the domain and will serve out a large degree of user
- information to such clients. You have been warned!
- </P
-></TD
-></TR
-></TABLE
-></DIV
+>Note: PAM allows stacking of authentication mechanisms. It is
+also possible to pass information obtained within one PAM module through
+to the next module in the PAM stack. Please refer to the documentation for
+your particular system implementation for details regarding the specific
+capabilities of PAM in this environment. Some Linux implmentations also
+provide the <TT
+CLASS="FILENAME"
+>pam_stack.so</TT
+> module that allows all
+authentication to be configured in a single central file. The
+<TT
+CLASS="FILENAME"
+>pam_stack.so</TT
+> method has some very devoted followers
+on the basis that it allows for easier administration. As with all issues in
+life though, every decision makes trade-offs, so you may want examine the
+PAM documentation for further helpful information.</P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN714"
+NAME="AEN640"
></A
->6.4.2. "On-the-Fly" Creation of Machine Trust Accounts</H3
-><P
->The second (and recommended) way of creating machine trust accounts is
-simply to allow the Samba server to create them as needed when the client
-is joined to the domain. </P
+>4.2. Distributed Authentication</H2
><P
->Since each Samba machine trust account requires a corresponding
-Unix account, a method for automatically creating the
-Unix account is usually supplied; this requires configuration of the
+>The astute administrator will realize from this that the
+combination of <TT
+CLASS="FILENAME"
+>pam_smbpass.so</TT
+>,
+<B
+CLASS="COMMAND"
+>winbindd</B
+>, and <B
+CLASS="COMMAND"
+>rsync</B
+> (see
<A
-HREF="smb.conf.5.html#ADDUSERSCRIPT"
+HREF="http://rsync.samba.org/"
TARGET="_top"
->add user script</A
->
-option in <TT
-CLASS="FILENAME"
->smb.conf</TT
->. This
-method is not required, however; corresponding Unix accounts may also
-be created manually.</P
-><P
->Below is an example for a RedHat 6.2 Linux system.</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->[global]
- # <...remainder of parameters...>
- add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u </PRE
-></P
+>http://rsync.samba.org/</A
+>)
+will allow the establishment of a centrally managed, distributed
+user/password database that can also be used by all
+PAM (eg: Linux) aware programs and applications. This arrangement
+can have particularly potent advantages compared with the
+use of Microsoft Active Directory Service (ADS) in so far as
+reduction of wide area network authentication traffic.</P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN723"
+NAME="AEN647"
></A
->6.4.3. Joining the Client to the Domain</H3
-><P
->The procedure for joining a client to the domain varies with the
-version of Windows.</P
-><P
-></P
-><UL
-><LI
-><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Windows 2000</I
-></SPAN
-></P
+>4.3. PAM Configuration in smb.conf</H2
><P
-> When the user elects to join the client to a domain, Windows prompts for
- an account and password that is privileged to join the domain. A
- Samba administrative account (i.e., a Samba account that has root
- privileges on the Samba server) must be entered here; the
- operation will fail if an ordinary user account is given.
- The password for this account should be
- set to a different password than the associated
- <TT
-CLASS="FILENAME"
->/etc/passwd</TT
-> entry, for security
- reasons. </P
+>There is an option in smb.conf called <A
+HREF="smb.conf.5.html#OBEYPAMRESTRICTIONS"
+TARGET="_top"
+>obey pam restrictions</A
+>.
+The following is from the on-line help for this option in SWAT;</P
><P
->The session key of the Samba administrative account acts as an
- encryption key for setting the password of the machine trust
- account. The machine trust account will be created on-the-fly, or
- updated if it already exists.</P
-></LI
-><LI
+>When Samba 2.2 is configure to enable PAM support (i.e.
+<TT
+CLASS="CONSTANT"
+>--with-pam</TT
+>), this parameter will
+control whether or not Samba should obey PAM's account
+and session management directives. The default behavior
+is to use PAM for clear text authentication only and to
+ignore any account or session management. Note that Samba always
+ignores PAM for authentication in the case of
+<A
+HREF="smb.conf.5.html#ENCRYPTPASSWORDS"
+TARGET="_top"
+>encrypt passwords = yes</A
+>.
+The reason is that PAM modules cannot support the challenge/response
+authentication mechanism needed in the presence of SMB
+password encryption. </P
><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Windows NT</I
-></SPAN
+>Default: <B
+CLASS="COMMAND"
+>obey pam restrictions = no</B
></P
-><P
-> If the machine trust account was created manually, on the
- Identification Changes menu enter the domain name, but do not
- check the box "Create a Computer Account in the Domain." In this case,
- the existing machine trust account is used to join the machine to
- the domain.</P
-><P
-> If the machine trust account is to be created
- on-the-fly, on the Identification Changes menu enter the domain
- name, and check the box "Create a Computer Account in the Domain." In
- this case, joining the domain proceeds as above for Windows 2000
- (i.e., you must supply a Samba administrative account when
- prompted).</P
-></LI
-></UL
></DIV
></DIV
><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="MSDFS"
+></A
+>Chapter 5. Hosting a Microsoft Distributed File System tree on Samba</H1
+><DIV
CLASS="SECT1"
-><HR><H2
+><H2
CLASS="SECT1"
><A
-NAME="AEN738"
+NAME="AEN667"
></A
->6.5. Common Problems and Errors</H2
+>5.1. Instructions</H2
><P
-></P
+>The Distributed File System (or Dfs) provides a means of
+ separating the logical view of files and directories that users
+ see from the actual physical locations of these resources on the
+ network. It allows for higher availability, smoother storage expansion,
+ load balancing etc. For more information about Dfs, refer to <A
+HREF="http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp"
+TARGET="_top"
+> Microsoft documentation</A
+>. </P
><P
-></P
-><UL
-><LI
+>This document explains how to host a Dfs tree on a Unix
+ machine (for Dfs-aware clients to browse) using Samba.</P
><P
-> <SPAN
-CLASS="emphasis"
+>To enable SMB-based DFS for Samba, configure it with the
+ <TT
+CLASS="PARAMETER"
><I
-CLASS="EMPHASIS"
->I cannot include a '$' in a machine name.</I
-></SPAN
->
- </P
-><P
-> A 'machine name' in (typically) <TT
+>--with-msdfs</I
+></TT
+> option. Once built, a
+ Samba server can be made a Dfs server by setting the global
+ boolean <A
+HREF="smb.conf.5.html#HOSTMSDFS"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+> host msdfs</I
+></TT
+></A
+> parameter in the <TT
CLASS="FILENAME"
->/etc/passwd</TT
->
- of the machine name with a '$' appended. FreeBSD (and other BSD
- systems?) won't create a user with a '$' in their name.
- </P
+>smb.conf
+ </TT
+> file. You designate a share as a Dfs root using the share
+ level boolean <A
+HREF="smb.conf.5.html#MSDFSROOT"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+> msdfs root</I
+></TT
+></A
+> parameter. A Dfs root directory on
+ Samba hosts Dfs links in the form of symbolic links that point
+ to other servers. For example, a symbolic link
+ <TT
+CLASS="FILENAME"
+>junction->msdfs:storage1\share1</TT
+> in
+ the share directory acts as the Dfs junction. When Dfs-aware
+ clients attempt to access the junction link, they are redirected
+ to the storage location (in this case, \\storage1\share1).</P
><P
-> The problem is only in the program used to make the entry, once
- made, it works perfectly. So create a user without the '$' and
- use <B
-CLASS="COMMAND"
->vipw</B
-> to edit the entry, adding the '$'. Or create
- the whole entry with vipw if you like, make sure you use a
- unique User ID !
- </P
-></LI
-><LI
+>Dfs trees on Samba work with all Dfs-aware clients ranging
+ from Windows 95 to 2000.</P
><P
-> <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->I get told "You already have a connection to the Domain...."
- or "Cannot join domain, the credentials supplied conflict with an
- existing set.." when creating a machine trust account.</I
-></SPAN
->
- </P
+>Here's an example of setting up a Dfs tree on a Samba
+ server.</P
><P
-> This happens if you try to create a machine trust account from the
- machine itself and already have a connection (e.g. mapped drive)
- to a share (or IPC$) on the Samba PDC. The following command
- will remove all network drive connections:
- </P
+><PRE
+CLASS="PROGRAMLISTING"
+># The smb.conf file:
+[global]
+ netbios name = SAMBA
+ host msdfs = yes
+
+[dfs]
+ path = /export/dfsroot
+ msdfs root = yes
+ </PRE
+></P
><P
-> <TT
+>In the /export/dfsroot directory we set up our dfs links to
+ other servers on the network.</P
+><P
+><TT
CLASS="PROMPT"
->C:\WINNT\></TT
-> <B
-CLASS="COMMAND"
->net use * /d</B
->
- </P
+>root# </TT
+><TT
+CLASS="USERINPUT"
+><B
+>cd /export/dfsroot</B
+></TT
+></P
><P
-> Further, if the machine is a already a 'member of a workgroup' that
- is the same name as the domain you are joining (bad idea) you will
- get this message. Change the workgroup name to something else, it
- does not matter what, reboot, and try again.
- </P
-></LI
-><LI
+><TT
+CLASS="PROMPT"
+>root# </TT
+><TT
+CLASS="USERINPUT"
+><B
+>chown root /export/dfsroot</B
+></TT
+></P
><P
-> <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->The system can not log you on (C000019B)....</I
-></SPAN
->
- </P
+><TT
+CLASS="PROMPT"
+>root# </TT
+><TT
+CLASS="USERINPUT"
+><B
+>chmod 755 /export/dfsroot</B
+></TT
+></P
><P
->I joined the domain successfully but after upgrading
- to a newer version of the Samba code I get the message, "The system
- can not log you on (C000019B), Please try a gain or consult your
- system administrator" when attempting to logon.
- </P
+><TT
+CLASS="PROMPT"
+>root# </TT
+><TT
+CLASS="USERINPUT"
+><B
+>ln -s msdfs:storageA\\shareA linka</B
+></TT
+></P
><P
-> This occurs when the domain SID stored in
- <TT
-CLASS="FILENAME"
->private/WORKGROUP.SID</TT
-> is
- changed. For example, you remove the file and <B
-CLASS="COMMAND"
->smbd</B
-> automatically
- creates a new one. Or you are swapping back and forth between
- versions 2.0.7, TNG and the HEAD branch code (not recommended). The
- only way to correct the problem is to restore the original domain
- SID or remove the domain client from the domain and rejoin.
- </P
-></LI
-><LI
+><TT
+CLASS="PROMPT"
+>root# </TT
+><TT
+CLASS="USERINPUT"
+><B
+>ln -s msdfs:serverB\\share,serverC\\share linkb</B
+></TT
+></P
><P
-> <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->The machine trust account for this computer either does not
- exist or is not accessible.</I
-></SPAN
->
- </P
+>You should set up the permissions and ownership of
+ the directory acting as the Dfs root such that only designated
+ users can create, delete or modify the msdfs links. Also note
+ that symlink names should be all lowercase. This limitation exists
+ to have Samba avoid trying all the case combinations to get at
+ the link name. Finally set up the symbolic links to point to the
+ network shares you want, and start Samba.</P
><P
-> When I try to join the domain I get the message "The machine account
- for this computer either does not exist or is not accessible". What's
- wrong?
- </P
+>Users on Dfs-aware clients can now browse the Dfs tree
+ on the Samba server at \\samba\dfs. Accessing
+ links linka or linkb (which appear as directories to the client)
+ takes users directly to the appropriate shares on the network.</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN702"
+></A
+>5.1.1. Notes</H3
><P
-> This problem is caused by the PDC not having a suitable machine trust account.
- If you are using the <TT
-CLASS="PARAMETER"
-><I
->add user script</I
-></TT
-> method to create
- accounts then this would indicate that it has not worked. Ensure the domain
- admin user system is working.
- </P
+></P
+><UL
+><LI
><P
-> Alternatively if you are creating account entries manually then they
- have not been created correctly. Make sure that you have the entry
- correct for the machine trust account in smbpasswd file on the Samba PDC.
- If you added the account using an editor rather than using the smbpasswd
- utility, make sure that the account name is the machine NetBIOS name
- with a '$' appended to it ( i.e. computer_name$ ). There must be an entry
- in both /etc/passwd and the smbpasswd file. Some people have reported
- that inconsistent subnet masks between the Samba server and the NT
- client have caused this problem. Make sure that these are consistent
- for both client and server.
- </P
+>Windows clients need to be rebooted
+ if a previously mounted non-dfs share is made a dfs
+ root or vice versa. A better way is to introduce a
+ new share and make it the dfs root.</P
></LI
><LI
><P
-> <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->When I attempt to login to a Samba Domain from a NT4/W2K workstation,
- I get a message about my account being disabled.</I
-></SPAN
->
- </P
+>Currently there's a restriction that msdfs
+ symlink names should all be lowercase.</P
+></LI
+><LI
><P
-> This problem is caused by a PAM related bug in Samba 2.2.0. This bug is
- fixed in 2.2.1. Other symptoms could be unaccessible shares on
- NT/W2K member servers in the domain or the following error in your smbd.log:
- passdb/pampass.c:pam_account(268) PAM: UNKNOWN ERROR for User: %user%
- </P
+>For security purposes, the directory
+ acting as the root of the Dfs tree should have ownership
+ and permissions set so that only designated users can
+ modify the symbolic links in the directory.</P
+></LI
+></UL
+></DIV
+></DIV
+></DIV
+><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="UNIX-PERMISSIONS"
+></A
+>Chapter 6. UNIX Permission Bits and Windows NT Access Control Lists</H1
+><DIV
+CLASS="SECT1"
+><H2
+CLASS="SECT1"
+><A
+NAME="AEN722"
+></A
+>6.1. Viewing and changing UNIX permissions using the NT
+ security dialogs</H2
><P
-> At first be ensure to enable the useraccounts with <B
-CLASS="COMMAND"
->smbpasswd -e
- %user%</B
->, this is normally done, when you create an account.
- </P
+>New in the Samba 2.0.4 release is the ability for Windows
+ NT clients to use their native security settings dialog box to
+ view and modify the underlying UNIX permissions.</P
><P
-> In order to work around this problem in 2.2.0, configure the
- <TT
+>Note that this ability is careful not to compromise
+ the security of the UNIX host Samba is running on, and
+ still obeys all the file permission rules that a Samba
+ administrator can set.</P
+><P
+>In Samba 2.0.4 and above the default value of the
+ parameter <A
+HREF="smb.conf.5.html#NTACLSUPPORT"
+TARGET="_top"
+><TT
CLASS="PARAMETER"
><I
->account</I
+> nt acl support</I
></TT
-> control flag in
- <TT
-CLASS="FILENAME"
->/etc/pam.d/samba</TT
-> file as follows:
- </P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> account required pam_permit.so
- </PRE
-></P
-><P
-> If you want to remain backward compatibility to samba 2.0.x use
- <TT
-CLASS="FILENAME"
->pam_permit.so</TT
->, it's also possible to use
+></A
+> has been changed from
<TT
-CLASS="FILENAME"
->pam_pwdb.so</TT
->. There are some bugs if you try to
- use <TT
-CLASS="FILENAME"
->pam_unix.so</TT
->, if you need this, be ensure to use
- the most recent version of this file.
- </P
-></LI
-></UL
+CLASS="CONSTANT"
+>false</TT
+> to <TT
+CLASS="CONSTANT"
+>true</TT
+>, so
+ manipulation of permissions is turned on by default.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN786"
+NAME="AEN731"
></A
->6.6. System Policies and Profiles</H2
-><P
->Much of the information necessary to implement System Policies and
-Roving User Profiles in a Samba domain is the same as that for
-implementing these same items in a Windows NT 4.0 domain.
-You should read the white paper <A
-HREF="http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp"
-TARGET="_top"
->Implementing
-Profiles and Policies in Windows NT 4.0</A
-> available from Microsoft.</P
-><P
->Here are some additional details:</P
-><P
-></P
-><UL
-><LI
+>6.2. How to view file security on a Samba share</H2
><P
-> <SPAN
+>From an NT 4.0 client, single-click with the right
+ mouse button on any file or directory in a Samba mounted
+ drive letter or UNC path. When the menu pops-up, click
+ on the <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->What about Windows NT Policy Editor?</I
+>Properties</I
></SPAN
->
- </P
-><P
-> To create or edit <TT
-CLASS="FILENAME"
->ntconfig.pol</TT
-> you must use
- the NT Server Policy Editor, <B
-CLASS="COMMAND"
->poledit.exe</B
-> which
- is included with NT Server but <SPAN
+> entry at the bottom of
+ the menu. This brings up the normal file properties dialog
+ box, but with Samba 2.0.4 this will have a new tab along the top
+ marked <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->not NT Workstation</I
+>Security</I
></SPAN
->.
- There is a Policy Editor on a NTws
- but it is not suitable for creating <SPAN
+>. Click on this tab and you
+ will see three buttons, <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->Domain Policies</I
+>Permissions</I
></SPAN
->.
- Further, although the Windows 95
- Policy Editor can be installed on an NT Workstation/Server, it will not
- work with NT policies because the registry key that are set by the policy templates.
- However, the files from the NT Server will run happily enough on an NTws.
- You need <TT
-CLASS="FILENAME"
->poledit.exe, common.adm</TT
-> and <TT
-CLASS="FILENAME"
->winnt.adm</TT
->. It is convenient
- to put the two *.adm files in <TT
-CLASS="FILENAME"
->c:\winnt\inf</TT
-> which is where
- the binary will look for them unless told otherwise. Note also that that
- directory is 'hidden'.
- </P
-><P
-> The Windows NT policy editor is also included with the Service Pack 3 (and
- later) for Windows NT 4.0. Extract the files using <B
-CLASS="COMMAND"
->servicepackname /x</B
->,
- i.e. that's <B
-CLASS="COMMAND"
->Nt4sp6ai.exe /x</B
-> for service pack 6a. The policy editor,
- <B
-CLASS="COMMAND"
->poledit.exe</B
-> and the associated template files (*.adm) should
- be extracted as well. It is also possible to downloaded the policy template
- files for Office97 and get a copy of the policy editor. Another possible
- location is with the Zero Administration Kit available for download from Microsoft.
- </P
-></LI
-><LI
-><P
-> <SPAN
+>,
+ <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->Can Win95 do Policies?</I
+>Auditing</I
+></SPAN
+>, and <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Ownership</I
></SPAN
->
- </P
-><P
-> Install the group policy handler for Win9x to pick up group
- policies. Look on the Win98 CD in <TT
-CLASS="FILENAME"
->\tools\reskit\netadmin\poledit</TT
>.
- Install group policies on a Win9x client by double-clicking
- <TT
-CLASS="FILENAME"
->grouppol.inf</TT
->. Log off and on again a couple of
- times and see if Win98 picks up group policies. Unfortunately this needs
- to be done on every Win9x machine that uses group policies....
- </P
-><P
-> If group policies don't work one reports suggests getting the updated
- (read: working) grouppol.dll for Windows 9x. The group list is grabbed
- from /etc/group.
- </P
-></LI
-><LI
-><P
-> <SPAN
+ The <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->How do I get 'User Manager' and 'Server Manager'</I
+>Auditing</I
></SPAN
->
- </P
-><P
-> Since I don't need to buy an NT Server CD now, how do I get
- the 'User Manager for Domains', the 'Server Manager'?
- </P
+> button will cause either
+ an error message <SPAN
+CLASS="ERRORNAME"
+>A requested privilege is not held
+ by the client</SPAN
+> to appear if the user is not the
+ NT Administrator, or a dialog which is intended to allow an
+ Administrator to add auditing requirements to a file if the
+ user is logged on as the NT Administrator. This dialog is
+ non-functional with a Samba share at this time, as the only
+ useful button, the <B
+CLASS="COMMAND"
+>Add</B
+> button will not currently
+ allow a list of users to be seen.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN742"
+></A
+>6.3. Viewing file ownership</H2
><P
-> Microsoft distributes a version of these tools called nexus for
- installation on Windows 95 systems. The tools set includes
- </P
+>Clicking on the <B
+CLASS="COMMAND"
+>"Ownership"</B
+> button
+ brings up a dialog box telling you who owns the given file. The
+ owner name will be of the form :</P
><P
+><B
+CLASS="COMMAND"
+>"SERVER\user (Long name)"</B
></P
-><UL
-><LI
-><P
->Server Manager</P
-></LI
-><LI
><P
->User Manager for Domains</P
-></LI
-><LI
-><P
->Event Viewer</P
-></LI
-></UL
-><P
-> Click here to download the archived file <A
-HREF="ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE"
-TARGET="_top"
->ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE</A
+>Where <TT
+CLASS="REPLACEABLE"
+><I
+>SERVER</I
+></TT
+> is the NetBIOS name of
+ the Samba server, <TT
+CLASS="REPLACEABLE"
+><I
+>user</I
+></TT
+> is the user name of
+ the UNIX user who owns the file, and <TT
+CLASS="REPLACEABLE"
+><I
+>(Long name)</I
+></TT
>
- </P
+ is the descriptive string identifying the user (normally found in the
+ GECOS field of the UNIX password database). Click on the <B
+CLASS="COMMAND"
+>Close
+ </B
+> button to remove this dialog.</P
><P
-> The Windows NT 4.0 version of the 'User Manager for
- Domains' and 'Server Manager' are available from Microsoft via ftp
- from <A
-HREF="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE"
-TARGET="_top"
->ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE</A
+>If the parameter <TT
+CLASS="PARAMETER"
+><I
+>nt acl support</I
+></TT
>
- </P
-></LI
-></UL
+ is set to <TT
+CLASS="CONSTANT"
+>false</TT
+> then the file owner will
+ be shown as the NT user <B
+CLASS="COMMAND"
+>"Everyone"</B
+>.</P
+><P
+>The <B
+CLASS="COMMAND"
+>Take Ownership</B
+> button will not allow
+ you to change the ownership of this file to yourself (clicking on
+ it will display a dialog box complaining that the user you are
+ currently logged onto the NT client cannot be found). The reason
+ for this is that changing the ownership of a file is a privileged
+ operation in UNIX, available only to the <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>root</I
+></SPAN
+>
+ user. As clicking on this button causes NT to attempt to change
+ the ownership of a file to the current user logged into the NT
+ client this will not work with Samba at this time.</P
+><P
+>There is an NT chown command that will work with Samba
+ and allow a user with Administrator privilege connected
+ to a Samba 2.0.4 server as root to change the ownership of
+ files on both a local NTFS filesystem or remote mounted NTFS
+ or Samba drive. This is available as part of the <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Seclib
+ </I
+></SPAN
+> NT security library written by Jeremy Allison of
+ the Samba Team, available from the main Samba ftp site.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN830"
+NAME="AEN762"
></A
->6.7. What other help can I get?</H2
+>6.4. Viewing file or directory permissions</H2
><P
->There are many sources of information available in the form
-of mailing lists, RFC's and documentation. The docs that come
-with the samba distribution contain very good explanations of
-general SMB topics such as browsing.</P
+>The third button is the <B
+CLASS="COMMAND"
+>"Permissions"</B
+>
+ button. Clicking on this brings up a dialog box that shows both
+ the permissions and the UNIX owner of the file or directory.
+ The owner is displayed in the form :</P
><P
+><B
+CLASS="COMMAND"
+>"SERVER\user (Long name)"</B
></P
-><UL
-><LI
><P
-> <SPAN
-CLASS="emphasis"
+>Where <TT
+CLASS="REPLACEABLE"
><I
-CLASS="EMPHASIS"
->What are some diagnostics tools I can use to debug the domain logon
- process and where can I find them?</I
-></SPAN
+>SERVER</I
+></TT
+> is the NetBIOS name of
+ the Samba server, <TT
+CLASS="REPLACEABLE"
+><I
+>user</I
+></TT
+> is the user name of
+ the UNIX user who owns the file, and <TT
+CLASS="REPLACEABLE"
+><I
+>(Long name)</I
+></TT
>
- </P
-><P
-> One of the best diagnostic tools for debugging problems is Samba itself.
- You can use the -d option for both smbd and nmbd to specify what
- 'debug level' at which to run. See the man pages on smbd, nmbd and
- smb.conf for more information on debugging options. The debug
- level can range from 1 (the default) to 10 (100 for debugging passwords).
- </P
+ is the descriptive string identifying the user (normally found in the
+ GECOS field of the UNIX password database).</P
><P
-> Another helpful method of debugging is to compile samba using the
- <B
+>If the parameter <TT
+CLASS="PARAMETER"
+><I
+>nt acl support</I
+></TT
+>
+ is set to <TT
+CLASS="CONSTANT"
+>false</TT
+> then the file owner will
+ be shown as the NT user <B
CLASS="COMMAND"
->gcc -g </B
-> flag. This will include debug
- information in the binaries and allow you to attach gdb to the
- running smbd / nmbd process. In order to attach gdb to an smbd
- process for an NT workstation, first get the workstation to make the
- connection. Pressing ctrl-alt-delete and going down to the domain box
- is sufficient (at least, on the first time you join the domain) to
- generate a 'LsaEnumTrustedDomains'. Thereafter, the workstation
- maintains an open connection, and therefore there will be an smbd
- process running (assuming that you haven't set a really short smbd
- idle timeout) So, in between pressing ctrl alt delete, and actually
- typing in your password, you can gdb attach and continue.
- </P
+>"Everyone"</B
+> and the
+ permissions will be shown as NT "Full Control".</P
><P
-> Some useful samba commands worth investigating:
- </P
+>The permissions field is displayed differently for files
+ and directories, so I'll describe the way file permissions
+ are displayed first.</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN777"
+></A
+>6.4.1. File Permissions</H3
><P
-></P
-><UL
-><LI
+>The standard UNIX user/group/world triple and
+ the corresponding "read", "write", "execute" permissions
+ triples are mapped by Samba into a three element NT ACL
+ with the 'r', 'w', and 'x' bits mapped into the corresponding
+ NT permissions. The UNIX world permissions are mapped into
+ the global NT group <B
+CLASS="COMMAND"
+>Everyone</B
+>, followed
+ by the list of permissions allowed for UNIX world. The UNIX
+ owner and group permissions are displayed as an NT
+ <B
+CLASS="COMMAND"
+>user</B
+> icon and an NT <B
+CLASS="COMMAND"
+>local
+ group</B
+> icon respectively followed by the list
+ of permissions allowed for the UNIX user and group.</P
><P
->testparam | more</P
-></LI
-><LI
+>As many UNIX permission sets don't map into common
+ NT names such as <B
+CLASS="COMMAND"
+>"read"</B
+>, <B
+CLASS="COMMAND"
+> "change"</B
+> or <B
+CLASS="COMMAND"
+>"full control"</B
+> then
+ usually the permissions will be prefixed by the words <B
+CLASS="COMMAND"
+> "Special Access"</B
+> in the NT display list.</P
><P
->smbclient -L //{netbios name of server}</P
-></LI
-></UL
+>But what happens if the file has no permissions allowed
+ for a particular UNIX user group or world component ? In order
+ to allow "no permissions" to be seen and modified then Samba
+ overloads the NT <B
+CLASS="COMMAND"
+>"Take Ownership"</B
+> ACL attribute
+ (which has no meaning in UNIX) and reports a component with
+ no permissions as having the NT <B
+CLASS="COMMAND"
+>"O"</B
+> bit set.
+ This was chosen of course to make it look like a zero, meaning
+ zero permissions. More details on the decision behind this will
+ be given below.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN791"
+></A
+>6.4.2. Directory Permissions</H3
><P
-> An SMB enabled version of tcpdump is available from
- <A
-HREF="http://www.tcpdump.org/"
-TARGET="_top"
->http://www.tcpdup.org/</A
->.
- Ethereal, another good packet sniffer for Unix and Win32
- hosts, can be downloaded from <A
-HREF="http://www.ethereal.com/"
-TARGET="_top"
->http://www.ethereal.com</A
->.
- </P
+>Directories on an NT NTFS file system have two
+ different sets of permissions. The first set of permissions
+ is the ACL set on the directory itself, this is usually displayed
+ in the first set of parentheses in the normal <B
+CLASS="COMMAND"
+>"RW"</B
+>
+ NT style. This first set of permissions is created by Samba in
+ exactly the same way as normal file permissions are, described
+ above, and is displayed in the same way.</P
><P
-> For tracing things on the Microsoft Windows NT, Network Monitor
- (aka. netmon) is available on the Microsoft Developer Network CD's,
- the Windows NT Server install CD and the SMS CD's. The version of
- netmon that ships with SMS allows for dumping packets between any two
- computers (i.e. placing the network interface in promiscuous mode).
- The version on the NT Server install CD will only allow monitoring
- of network traffic directed to the local NT box and broadcasts on the
- local subnet. Be aware that Ethereal can read and write netmon
- formatted files.
- </P
-></LI
-><LI
+>The second set of directory permissions has no real meaning
+ in the UNIX permissions world and represents the <B
+CLASS="COMMAND"
+> "inherited"</B
+> permissions that any file created within
+ this directory would inherit.</P
><P
-> <SPAN
-CLASS="emphasis"
+>Samba synthesises these inherited permissions for NT by
+ returning as an NT ACL the UNIX permission mode that a new file
+ created by Samba on this share would receive.</P
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN798"
+></A
+>6.5. Modifying file or directory permissions</H2
+><P
+>Modifying file and directory permissions is as simple
+ as changing the displayed permissions in the dialog box, and
+ clicking the <B
+CLASS="COMMAND"
+>OK</B
+> button. However, there are
+ limitations that a user needs to be aware of, and also interactions
+ with the standard Samba permission masks and mapping of DOS
+ attributes that need to also be taken into account.</P
+><P
+>If the parameter <TT
+CLASS="PARAMETER"
><I
-CLASS="EMPHASIS"
->How do I install 'Network Monitor' on an NT Workstation
- or a Windows 9x box?</I
-></SPAN
+>nt acl support</I
+></TT
>
- </P
+ is set to <TT
+CLASS="CONSTANT"
+>false</TT
+> then any attempt to set
+ security permissions will fail with an <B
+CLASS="COMMAND"
+>"Access Denied"
+ </B
+> message.</P
><P
-> Installing netmon on an NT workstation requires a couple
- of steps. The following are for installing Netmon V4.00.349, which comes
- with Microsoft Windows NT Server 4.0, on Microsoft Windows NT
- Workstation 4.0. The process should be similar for other version of
- Windows NT / Netmon. You will need both the Microsoft Windows
- NT Server 4.0 Install CD and the Workstation 4.0 Install CD.
- </P
+>The first thing to note is that the <B
+CLASS="COMMAND"
+>"Add"</B
+>
+ button will not return a list of users in Samba 2.0.4 (it will give
+ an error message of <B
+CLASS="COMMAND"
+>"The remote procedure call failed
+ and did not execute"</B
+>). This means that you can only
+ manipulate the current user/group/world permissions listed in
+ the dialog box. This actually works quite well as these are the
+ only permissions that UNIX actually has.</P
><P
-> Initially you will need to install 'Network Monitor Tools and Agent'
- on the NT Server. To do this
- </P
+>If a permission triple (either user, group, or world)
+ is removed from the list of permissions in the NT dialog box,
+ then when the <B
+CLASS="COMMAND"
+>"OK"</B
+> button is pressed it will
+ be applied as "no permissions" on the UNIX side. If you then
+ view the permissions again the "no permissions" entry will appear
+ as the NT <B
+CLASS="COMMAND"
+>"O"</B
+> flag, as described above. This
+ allows you to add permissions back to a file or directory once
+ you have removed them from a triple component.</P
><P
-></P
-><UL
-><LI
+>As UNIX supports only the "r", "w" and "x" bits of
+ an NT ACL then if other NT security attributes such as "Delete
+ access" are selected then they will be ignored when applied on
+ the Samba server.</P
><P
->Goto Start - Settings - Control Panel -
- Network - Services - Add </P
-></LI
-><LI
+>When setting permissions on a directory the second
+ set of permissions (in the second set of parentheses) is
+ by default applied to all files within that directory. If this
+ is not what you want you must uncheck the <B
+CLASS="COMMAND"
+>"Replace
+ permissions on existing files"</B
+> checkbox in the NT
+ dialog before clicking <B
+CLASS="COMMAND"
+>"OK"</B
+>.</P
><P
->Select the 'Network Monitor Tools and Agent' and
- click on 'OK'.</P
-></LI
-><LI
+>If you wish to remove all permissions from a
+ user/group/world component then you may either highlight the
+ component and click the <B
+CLASS="COMMAND"
+>"Remove"</B
+> button,
+ or set the component to only have the special <B
+CLASS="COMMAND"
+>"Take
+ Ownership"</B
+> permission (displayed as <B
+CLASS="COMMAND"
+>"O"
+ </B
+>) highlighted.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN820"
+></A
+>6.6. Interaction with the standard Samba create mask
+ parameters</H2
><P
->Click 'OK' on the Network Control Panel.
- </P
-></LI
-><LI
+>Note that with Samba 2.0.5 there are four new parameters
+ to control this interaction. These are :</P
><P
->Insert the Windows NT Server 4.0 install CD
- when prompted.</P
-></LI
-></UL
+><TT
+CLASS="PARAMETER"
+><I
+>security mask</I
+></TT
+></P
><P
-> At this point the Netmon files should exist in
- <TT
-CLASS="FILENAME"
->%SYSTEMROOT%\System32\netmon\*.*</TT
->.
- Two subdirectories exist as well, <TT
-CLASS="FILENAME"
->parsers\</TT
->
- which contains the necessary DLL's for parsing the netmon packet
- dump, and <TT
-CLASS="FILENAME"
->captures\</TT
->.
- </P
+><TT
+CLASS="PARAMETER"
+><I
+>force security mode</I
+></TT
+></P
><P
-> In order to install the Netmon tools on an NT Workstation, you will
- first need to install the 'Network Monitor Agent' from the Workstation
- install CD.
- </P
+><TT
+CLASS="PARAMETER"
+><I
+>directory security mask</I
+></TT
+></P
><P
+><TT
+CLASS="PARAMETER"
+><I
+>force directory security mode</I
+></TT
></P
-><UL
-><LI
><P
->Goto Start - Settings - Control Panel -
- Network - Services - Add</P
-></LI
-><LI
+>Once a user clicks <B
+CLASS="COMMAND"
+>"OK"</B
+> to apply the
+ permissions Samba maps the given permissions into a user/group/world
+ r/w/x triple set, and then will check the changed permissions for a
+ file against the bits set in the <A
+HREF="smb.conf.5.html#SECURITYMASK"
+TARGET="_top"
+>
+ <TT
+CLASS="PARAMETER"
+><I
+>security mask</I
+></TT
+></A
+> parameter. Any bits that
+ were changed that are not set to '1' in this parameter are left alone
+ in the file permissions.</P
><P
->Select the 'Network Monitor Agent' and click
- on 'OK'.</P
-></LI
-><LI
+>Essentially, zero bits in the <TT
+CLASS="PARAMETER"
+><I
+>security mask</I
+></TT
+>
+ mask may be treated as a set of bits the user is <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>not</I
+></SPAN
+>
+ allowed to change, and one bits are those the user is allowed to change.
+ </P
><P
->Click 'OK' on the Network Control Panel.
- </P
-></LI
-><LI
-><P
->Insert the Windows NT Workstation 4.0 install
- CD when prompted.</P
-></LI
-></UL
+>If not set explicitly this parameter is set to the same value as
+ the <A
+HREF="smb.conf.5.html#CREATEMASK"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>create mask
+ </I
+></TT
+></A
+> parameter to provide compatibility with Samba 2.0.4
+ where this permission change facility was introduced. To allow a user to
+ modify all the user/group/world permissions on a file, set this parameter
+ to 0777.</P
><P
-> Now copy the files from the NT Server in %SYSTEMROOT%\System32\netmon\*.*
- to %SYSTEMROOT%\System32\netmon\*.* on the Workstation and set
- permissions as you deem appropriate for your site. You will need
- administrative rights on the NT box to run netmon.
- </P
+>Next Samba checks the changed permissions for a file against
+ the bits set in the <A
+HREF="smb.conf.5.html#FORCESECURITYMODE"
+TARGET="_top"
+> <TT
+CLASS="PARAMETER"
+><I
+>force security mode</I
+></TT
+></A
+> parameter. Any bits
+ that were changed that correspond to bits set to '1' in this parameter
+ are forced to be set.</P
><P
-> To install Netmon on a Windows 9x box install the network monitor agent
- from the Windows 9x CD (\admin\nettools\netmon). There is a readme
- file located with the netmon driver files on the CD if you need
- information on how to do this. Copy the files from a working
- Netmon installation.
- </P
-></LI
-><LI
+>Essentially, bits set in the <TT
+CLASS="PARAMETER"
+><I
+>force security mode
+ </I
+></TT
+> parameter may be treated as a set of bits that, when
+ modifying security on a file, the user has always set to be 'on'.</P
><P
-> The following is a list if helpful URLs and other links:
- </P
+>If not set explicitly this parameter is set to the same value
+ as the <A
+HREF="smb.conf.5.html#FORCECREATEMODE"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>force
+ create mode</I
+></TT
+></A
+> parameter to provide compatibility
+ with Samba 2.0.4 where the permission change facility was introduced.
+ To allow a user to modify all the user/group/world permissions on a file
+ with no restrictions set this parameter to 000.</P
><P
-></P
-><UL
-><LI
+>The <TT
+CLASS="PARAMETER"
+><I
+>security mask</I
+></TT
+> and <TT
+CLASS="PARAMETER"
+><I
+>force
+ security mode</I
+></TT
+> parameters are applied to the change
+ request in that order.</P
><P
->Home of Samba site <A
-HREF="http://samba.org"
-TARGET="_top"
-> http://samba.org</A
->. We have a mirror near you !</P
-></LI
-><LI
+>For a directory Samba will perform the same operations as
+ described above for a file except using the parameter <TT
+CLASS="PARAMETER"
+><I
+> directory security mask</I
+></TT
+> instead of <TT
+CLASS="PARAMETER"
+><I
+>security
+ mask</I
+></TT
+>, and <TT
+CLASS="PARAMETER"
+><I
+>force directory security mode
+ </I
+></TT
+> parameter instead of <TT
+CLASS="PARAMETER"
+><I
+>force security mode
+ </I
+></TT
+>.</P
><P
-> The <SPAN
-CLASS="emphasis"
+>The <TT
+CLASS="PARAMETER"
><I
-CLASS="EMPHASIS"
->Development</I
-></SPAN
-> document
- on the Samba mirrors might mention your problem. If so,
- it might mean that the developers are working on it.</P
-></LI
-><LI
+>directory security mask</I
+></TT
+> parameter
+ by default is set to the same value as the <TT
+CLASS="PARAMETER"
+><I
+>directory mask
+ </I
+></TT
+> parameter and the <TT
+CLASS="PARAMETER"
+><I
+>force directory security
+ mode</I
+></TT
+> parameter by default is set to the same value as
+ the <TT
+CLASS="PARAMETER"
+><I
+>force directory mode</I
+></TT
+> parameter to provide
+ compatibility with Samba 2.0.4 where the permission change facility
+ was introduced.</P
><P
->See how Scott Merrill simulates a BDC behavior at
- <A
-HREF="http://www.skippy.net/linux/smb-howto.html"
-TARGET="_top"
-> http://www.skippy.net/linux/smb-howto.html</A
->. </P
-></LI
-><LI
+>In this way Samba enforces the permission restrictions that
+ an administrator can set on a Samba share, whilst still allowing users
+ to modify the permission bits within that restriction.</P
><P
->Although 2.0.7 has almost had its day as a PDC, David Bannon will
- keep the 2.0.7 PDC pages at <A
-HREF="http://bioserve.latrobe.edu.au/samba"
+>If you want to set up a share that allows users full control
+ in modifying the permission bits on their files and directories and
+ doesn't force any particular bits to be set 'on', then set the following
+ parameters in the <A
+HREF="smb.conf.5.html"
TARGET="_top"
-> http://bioserve.latrobe.edu.au/samba</A
-> going for a while yet.</P
-></LI
-><LI
+><TT
+CLASS="FILENAME"
+>smb.conf(5)
+ </TT
+></A
+> file in that share specific section :</P
><P
->Misc links to CIFS information
- <A
-HREF="http://samba.org/cifs/"
-TARGET="_top"
->http://samba.org/cifs/</A
+><TT
+CLASS="PARAMETER"
+><I
+>security mask = 0777</I
+></TT
></P
-></LI
-><LI
><P
->NT Domains for Unix <A
-HREF="http://mailhost.cb1.com/~lkcl/ntdom/"
-TARGET="_top"
-> http://mailhost.cb1.com/~lkcl/ntdom/</A
+><TT
+CLASS="PARAMETER"
+><I
+>force security mode = 0</I
+></TT
></P
-></LI
-><LI
><P
->FTP site for older SMB specs:
- <A
-HREF="ftp://ftp.microsoft.com/developr/drg/CIFS/"
-TARGET="_top"
-> ftp://ftp.microsoft.com/developr/drg/CIFS/</A
+><TT
+CLASS="PARAMETER"
+><I
+>directory security mask = 0777</I
+></TT
></P
-></LI
-></UL
-></LI
-></UL
><P
+><TT
+CLASS="PARAMETER"
+><I
+>force directory security mode = 0</I
+></TT
></P
-><UL
-><LI
><P
-> <SPAN
-CLASS="emphasis"
+>As described, in Samba 2.0.4 the parameters :</P
+><P
+><TT
+CLASS="PARAMETER"
><I
-CLASS="EMPHASIS"
->How do I get help from the mailing lists?</I
-></SPAN
->
- </P
+>create mask</I
+></TT
+></P
><P
-> There are a number of Samba related mailing lists. Go to <A
-HREF="http://samba.org"
-TARGET="_top"
->http://samba.org</A
->, click on your nearest mirror
- and then click on <B
-CLASS="COMMAND"
->Support</B
-> and then click on <B
-CLASS="COMMAND"
-> Samba related mailing lists</B
->.
- </P
+><TT
+CLASS="PARAMETER"
+><I
+>force create mode</I
+></TT
+></P
><P
-> For questions relating to Samba TNG go to
- <A
-HREF="http://www.samba-tng.org/"
-TARGET="_top"
->http://www.samba-tng.org/</A
->
- It has been requested that you don't post questions about Samba-TNG to the
- main stream Samba lists.</P
+><TT
+CLASS="PARAMETER"
+><I
+>directory mask</I
+></TT
+></P
><P
-> If you post a message to one of the lists please observe the following guide lines :
+><TT
+CLASS="PARAMETER"
+><I
+>force directory mode</I
+></TT
+></P
+><P
+>were used instead of the parameters discussed here.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN884"
+></A
+>6.7. Interaction with the standard Samba file attribute
+ mapping</H2
+><P
+>Samba maps some of the DOS attribute bits (such as "read
+ only") into the UNIX permissions of a file. This means there can
+ be a conflict between the permission bits set via the security
+ dialog and the permission bits set by the file attribute mapping.
</P
><P
-></P
-><UL
-><LI
+>One way this can show up is if a file has no UNIX read access
+ for the owner it will show up as "read only" in the standard
+ file attributes tabbed dialog. Unfortunately this dialog is
+ the same one that contains the security info in another tab.</P
><P
-> Always remember that the developers are volunteers, they are
- not paid and they never guarantee to produce a particular feature at
- a particular time. Any time lines are 'best guess' and nothing more.
- </P
-></LI
-><LI
+>What this can mean is that if the owner changes the permissions
+ to allow themselves read access using the security dialog, clicks
+ <B
+CLASS="COMMAND"
+>"OK"</B
+> to get back to the standard attributes tab
+ dialog, and then clicks <B
+CLASS="COMMAND"
+>"OK"</B
+> on that dialog, then
+ NT will set the file permissions back to read-only (as that is what
+ the attributes still say in the dialog). This means that after setting
+ permissions and clicking <B
+CLASS="COMMAND"
+>"OK"</B
+> to get back to the
+ attributes dialog you should always hit <B
+CLASS="COMMAND"
+>"Cancel"</B
+>
+ rather than <B
+CLASS="COMMAND"
+>"OK"</B
+> to ensure that your changes
+ are not overridden.</P
+></DIV
+></DIV
+><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="PRINTING"
+></A
+>Chapter 7. Printing Support in Samba 2.2.x</H1
+><DIV
+CLASS="SECT1"
+><H2
+CLASS="SECT1"
+><A
+NAME="AEN905"
+></A
+>7.1. Introduction</H2
><P
-> Always mention what version of samba you are using and what
- operating system its running under. You should probably list the
- relevant sections of your smb.conf file, at least the options
- in [global] that affect PDC support.</P
-></LI
-><LI
+>Beginning with the 2.2.0 release, Samba supports
+the native Windows NT printing mechanisms implemented via
+MS-RPC (i.e. the SPOOLSS named pipe). Previous versions of
+Samba only supported LanMan printing calls.</P
><P
->In addition to the version, if you obtained Samba via
- CVS mention the date when you last checked it out.</P
-></LI
-><LI
+>The additional functionality provided by the new
+SPOOLSS support includes:</P
><P
-> Try and make your question clear and brief, lots of long,
- convoluted questions get deleted before they are completely read !
- Don't post html encoded messages (if you can select colour or font
- size its html).</P
-></LI
+></P
+><UL
><LI
><P
-> If you run one of those nifty 'I'm on holidays' things when
- you are away, make sure its configured to not answer mailing lists.
- </P
+>Support for downloading printer driver
+ files to Windows 95/98/NT/2000 clients upon demand.
+ </P
></LI
><LI
><P
-> Don't cross post. Work out which is the best list to post to
- and see what happens, i.e. don't post to both samba-ntdom and samba-technical.
- Many people active on the lists subscribe to more
- than one list and get annoyed to see the same message two or more times.
- Often someone will see a message and thinking it would be better dealt
- with on another, will forward it on for you.</P
+>Uploading of printer drivers via the
+ Windows NT Add Printer Wizard (APW) or the
+ Imprints tool set (refer to <A
+HREF="http://imprints.sourceforge.net"
+TARGET="_top"
+>http://imprints.sourceforge.net</A
+>).
+ </P
></LI
><LI
><P
->You might include <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->partial</I
-></SPAN
->
- log files written at a debug level set to as much as 20.
- Please don't send the entire log but enough to give the context of the
- error messages.</P
+>Support for the native MS-RPC printing
+ calls such as StartDocPrinter, EnumJobs(), etc... (See
+ the MSDN documentation at <A
+HREF="http://msdn.microsoft.com/"
+TARGET="_top"
+>http://msdn.microsoft.com/</A
+>
+ for more information on the Win32 printing API)
+ </P
></LI
><LI
><P
->(Possibly) If you have a complete netmon trace ( from the opening of
- the pipe to the error ) you can send the *.CAP file as well.</P
+>Support for NT Access Control Lists (ACL)
+ on printer objects</P
></LI
><LI
><P
->Please think carefully before attaching a document to an email.
- Consider pasting the relevant parts into the body of the message. The samba
- mailing lists go to a huge number of people, do they all need a copy of your
- smb.conf in their attach directory?</P
+>Improved support for printer queue manipulation
+ through the use of an internal databases for spooled job
+ information</P
></LI
></UL
-></LI
-><LI
><P
-> <SPAN
+>There has been some initial confusion about what all this means
+and whether or not it is a requirement for printer drivers to be
+installed on a Samba host in order to support printing from Windows
+clients. A bug existed in Samba 2.2.0 which made Windows NT/2000 clients
+require that the Samba server possess a valid driver for the printer.
+This is fixed in Samba 2.2.1 and once again, Windows NT/2000 clients
+can use the local APW for installing drivers to be used with a Samba
+served printer. This is the same behavior exhibited by Windows 9x clients.
+As a side note, Samba does not use these drivers in any way to process
+spooled files. They are utilized entirely by the clients.</P
+><P
+>The following MS KB article, may be of some help if you are dealing with
+Windows 2000 clients: <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->How do I get off the mailing lists?</I
+>How to Add Printers with No User
+Interaction in Windows 2000</I
></SPAN
->
- </P
+></P
><P
->To have your name removed from a samba mailing list, go to the
- same place you went to to get on it. Go to <A
-HREF="http://lists.samba.org/"
-TARGET="_top"
->http://lists.samba.org</A
->,
- click on your nearest mirror and then click on <B
-CLASS="COMMAND"
->Support</B
-> and
- then click on <B
-CLASS="COMMAND"
-> Samba related mailing lists</B
->. Or perhaps see
- <A
-HREF="http://lists.samba.org/mailman/roster/samba-ntdom"
+><A
+HREF="http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP"
TARGET="_top"
->here</A
->
- </P
-><P
-> Please don't post messages to the list asking to be removed, you will just
- be referred to the above address (unless that process failed in some way...)
- </P
-></LI
-></UL
+>http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP</A
+></P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN944"
+NAME="AEN927"
></A
->6.8. Domain Control for Windows 9x/ME</H2
+>7.2. Configuration</H2
><DIV
-CLASS="NOTE"
+CLASS="WARNING"
><P
></P
><TABLE
-CLASS="NOTE"
+CLASS="WARNING"
WIDTH="100%"
BORDER="0"
><TR
ALIGN="CENTER"
VALIGN="TOP"
><IMG
-SRC="/docbook-dsssl/note.gif"
+SRC="/docbook-dsssl/warning.gif"
HSPACE="5"
-ALT="Note"></TD
+ALT="Warning"></TD
+><TH
+ALIGN="LEFT"
+VALIGN="CENTER"
+><B
+>[print$] vs. [printer$]</B
+></TH
+></TR
+><TR
+><TD
+> </TD
><TD
ALIGN="LEFT"
VALIGN="TOP"
><P
->The following section contains much of the original
-DOMAIN.txt file previously included with Samba. Much of
-the material is based on what went into the book <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Special
-Edition, Using Samba</I
-></SPAN
->, by Richard Sharpe.</P
-></TD
-></TR
-></TABLE
-></DIV
+>Previous versions of Samba recommended using a share named [printer$].
+This name was taken from the printer$ service created by Windows 9x
+clients when a printer was shared. Windows 9x printer servers always have
+a printer$ service which provides read-only access via no
+password in order to support printer driver downloads.</P
><P
->A domain and a workgroup are exactly the same thing in terms of network
-browsing. The difference is that a distributable authentication
-database is associated with a domain, for secure login access to a
-network. Also, different access rights can be granted to users if they
-successfully authenticate against a domain logon server (NT server and
-other systems based on NT server support this, as does at least Samba TNG now).</P
-><P
->The SMB client logging on to a domain has an expectation that every other
-server in the domain should accept the same authentication information.
-Network browsing functionality of domains and workgroups is
-identical and is explained in BROWSING.txt. It should be noted, that browsing
-is totally orthogonal to logon support.</P
-><P
->Issues related to the single-logon network model are discussed in this
-section. Samba supports domain logons, network logon scripts, and user
-profiles for MS Windows for workgroups and MS Windows 9X/ME clients
-which will be the focus of this section.</P
-><P
->When an SMB client in a domain wishes to logon it broadcast requests for a
-logon server. The first one to reply gets the job, and validates its
-password using whatever mechanism the Samba administrator has installed.
-It is possible (but very stupid) to create a domain where the user
-database is not shared between servers, i.e. they are effectively workgroup
-servers advertising themselves as participating in a domain. This
-demonstrates how authentication is quite different from but closely
-involved with domains.</P
-><P
->Using these features you can make your clients verify their logon via
-the Samba server; make clients run a batch file when they logon to
-the network and download their preferences, desktop and start menu.</P
-><P
->Before launching into the configuration instructions, it is
-worthwhile lookingat how a Windows 9x/ME client performs a logon:</P
-><P
-></P
-><OL
-TYPE="1"
-><LI
-><P
-> The client broadcasts (to the IP broadcast address of the subnet it is in)
- a NetLogon request. This is sent to the NetBIOS name DOMAIN<1c> at the
- NetBIOS layer. The client chooses the first response it receives, which
- contains the NetBIOS name of the logon server to use in the format of
- \\SERVER.
- </P
-></LI
-><LI
-><P
-> The client then connects to that server, logs on (does an SMBsessetupX) and
- then connects to the IPC$ share (using an SMBtconX).
- </P
-></LI
-><LI
-><P
-> The client then does a NetWkstaUserLogon request, which retrieves the name
- of the user's logon script.
- </P
-></LI
-><LI
-><P
-> The client then connects to the NetLogon share and searches for this
- and if it is found and can be read, is retrieved and executed by the client.
- After this, the client disconnects from the NetLogon share.
- </P
-></LI
-><LI
-><P
-> The client then sends a NetUserGetInfo request to the server, to retrieve
- the user's home share, which is used to search for profiles. Since the
- response to the NetUserGetInfo request does not contain much more
- the user's home share, profiles for Win9X clients MUST reside in the user
- home directory.
- </P
-></LI
-><LI
-><P
-> The client then connects to the user's home share and searches for the
- user's profile. As it turns out, you can specify the user's home share as
- a sharename and path. For example, \\server\fred\.profile.
- If the profiles are found, they are implemented.
- </P
-></LI
-><LI
+>However, the initial implementation allowed for a
+parameter named <TT
+CLASS="PARAMETER"
+><I
+>printer driver location</I
+></TT
+>
+to be used on a per share basis to specify the location of
+the driver files associated with that printer. Another
+parameter named <TT
+CLASS="PARAMETER"
+><I
+>printer driver</I
+></TT
+> provided
+a means of defining the printer driver name to be sent to
+the client.</P
><P
-> The client then disconnects from the user's home share, and reconnects to
- the NetLogon share and looks for CONFIG.POL, the policies file. If this is
- found, it is read and implemented.
- </P
-></LI
-></OL
+>These parameters, including <TT
+CLASS="PARAMETER"
+><I
+>printer driver
+file</I
+></TT
+> parameter, are being deprecated and should not
+be used in new installations. For more information on this change,
+you should refer to the <A
+HREF="#MIGRATION"
+>Migration section</A
+>
+of this document.</P
+></TD
+></TR
+></TABLE
+></DIV
><DIV
CLASS="SECT2"
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN970"
+NAME="AEN938"
></A
->6.8.1. Configuration Instructions: Network Logons</H3
+>7.2.1. Creating [print$]</H3
><P
->The main difference between a PDC and a Windows 9x logon
-server configuration is that</P
+>In order to support the uploading of printer driver
+files, you must first configure a file share named [print$].
+The name of this share is hard coded in Samba's internals so
+the name is very important (print$ is the service used by
+Windows NT print servers to provide support for printer driver
+download).</P
+><P
+>You should modify the server's smb.conf file to add the global
+parameters and to create the
+following file share (of course, some of the parameter values,
+such as 'path' are arbitrary and should be replaced with
+appropriate values for your site):</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>[global]
+ ; members of the ntadmin group should be able
+ ; to add drivers and set printer properties
+ ; root is implicitly a 'printer admin'
+ printer admin = @ntadmin
+
+[print$]
+ path = /usr/local/samba/printers
+ guest ok = yes
+ browseable = yes
+ read only = yes
+ ; since this share is configured as read only, then we need
+ ; a 'write list'. Check the file system permissions to make
+ ; sure this account can copy files to the share. If this
+ ; is setup to a non-root account, then it should also exist
+ ; as a 'printer admin'
+ write list = @ntadmin,root</PRE
+></P
+><P
+>The <A
+HREF="smb.conf.5.html#WRITELIST"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>write list</I
+></TT
+></A
+> is used to allow administrative
+level user accounts to have write access in order to update files
+on the share. See the <A
+HREF="smb.conf.5.html"
+TARGET="_top"
+>smb.conf(5)
+man page</A
+> for more information on configuring file shares.</P
+><P
+>The requirement for <A
+HREF="smb.conf.5.html#GUESTOK"
+TARGET="_top"
+><B
+CLASS="COMMAND"
+>guest
+ok = yes</B
+></A
+> depends upon how your
+site is configured. If users will be guaranteed to have
+an account on the Samba host, then this is a non-issue.</P
+><DIV
+CLASS="NOTE"
><P
></P
-><UL
-><LI
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TH
+ALIGN="LEFT"
+VALIGN="CENTER"
+><B
+>Author's Note</B
+></TH
+></TR
+><TR
+><TD
+> </TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->Password encryption is not required for a Windows 9x logon server.</P
-></LI
-><LI
+>The non-issue is that if all your Windows NT users are guaranteed to be
+authenticated by the Samba server (such as a domain member server and the NT
+user has already been validated by the Domain Controller in
+order to logon to the Windows NT console), then guest access
+is not necessary. Of course, in a workgroup environment where
+you just want to be able to print without worrying about
+silly accounts and security, then configure the share for
+guest access. You'll probably want to add <A
+HREF="smb.conf.5.html#MAPTOGUEST"
+TARGET="_top"
+><B
+CLASS="COMMAND"
+>map to guest = Bad User</B
+></A
+> in the [global] section as well. Make sure
+you understand what this parameter does before using it
+though. --jerry</P
+></TD
+></TR
+></TABLE
+></DIV
><P
->Windows 9x/ME clients do not possess machine trust accounts.</P
-></LI
-></UL
+>In order for a Windows NT print server to support
+the downloading of driver files by multiple client architectures,
+it must create subdirectories within the [print$] service
+which correspond to each of the supported client architectures.
+Samba follows this model as well.</P
><P
->Therefore, a Samba PDC will also act as a Windows 9x logon
-server.</P
+>Next create the directory tree below the [print$] share
+for each architecture you wish to support.</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>[print$]-----
+ |-W32X86 ; "Windows NT x86"
+ |-WIN40 ; "Windows 95/98"
+ |-W32ALPHA ; "Windows NT Alpha_AXP"
+ |-W32MIPS ; "Windows NT R4000"
+ |-W32PPC ; "Windows NT PowerPC"</PRE
+></P
><DIV
CLASS="WARNING"
><P
ALIGN="LEFT"
VALIGN="CENTER"
><B
->security mode and master browsers</B
+>ATTENTION! REQUIRED PERMISSIONS</B
></TH
></TR
><TR
ALIGN="LEFT"
VALIGN="TOP"
><P
->There are a few comments to make in order to tie up some
-loose ends. There has been much debate over the issue of whether
-or not it is ok to configure Samba as a Domain Controller in security
-modes other than <TT
-CLASS="CONSTANT"
->USER</TT
->. The only security mode
-which will not work due to technical reasons is <TT
-CLASS="CONSTANT"
->SHARE</TT
->
-mode security. <TT
-CLASS="CONSTANT"
->DOMAIN</TT
-> and <TT
-CLASS="CONSTANT"
->SERVER</TT
->
-mode security is really just a variation on SMB user level security.</P
+>In order to currently add a new driver to you Samba host,
+one of two conditions must hold true:</P
><P
->Actually, this issue is also closely tied to the debate on whether
-or not Samba must be the domain master browser for its workgroup
-when operating as a DC. While it may technically be possible
-to configure a server as such (after all, browsing and domain logons
-are two distinctly different functions), it is not a good idea to
-so. You should remember that the DC must register the DOMAIN#1b NetBIOS
-name. This is the name used by Windows clients to locate the DC.
-Windows clients do not distinguish between the DC and the DMB.
-For this reason, it is very wise to configure the Samba DC as the DMB.</P
+></P
+><UL
+><LI
><P
->Now back to the issue of configuring a Samba DC to use a mode other
-than "security = user". If a Samba host is configured to use
-another SMB server or DC in order to validate user connection
-requests, then it is a fact that some other machine on the network
-(the "password server") knows more about user than the Samba host.
-99% of the time, this other host is a domain controller. Now
-in order to operate in domain mode security, the "workgroup" parameter
-must be set to the name of the Windows NT domain (which already
-has a domain controller, right?)</P
+>The account used to connect to the Samba host
+ must have a uid of 0 (i.e. a root account)</P
+></LI
+><LI
><P
->Therefore configuring a Samba box as a DC for a domain that
-already by definition has a PDC is asking for trouble.
-Therefore, you should always configure the Samba DC to be the DMB
-for its domain.</P
+>The account used to connect to the Samba host
+ must be a member of the <A
+HREF="smb.conf.5.html#PRINTERADMIN"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>printer
+ admin</I
+></TT
+></A
+> list.</P
+></LI
+></UL
+><P
+>Of course, the connected account must still possess access
+to add files to the subdirectories beneath [print$]. Remember
+that all file shares are set to 'read only' by default.</P
></TD
></TR
></TABLE
></DIV
+><P
+>Once you have created the required [print$] service and
+associated subdirectories, simply log onto the Samba server using
+a root (or <TT
+CLASS="PARAMETER"
+><I
+>printer admin</I
+></TT
+>) account
+from a Windows NT 4.0/2k client. Open "Network Neighbourhood" or
+"My Network Places" and browse for the Samba host. Once you have located
+the server, navigate to the "Printers..." folder.
+You should see an initial listing of printers
+that matches the printer shares defined on your Samba host.</P
></DIV
><DIV
CLASS="SECT2"
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN989"
+NAME="AEN973"
></A
->6.8.2. Configuration Instructions: Setting up Roaming User Profiles</H3
-><DIV
-CLASS="WARNING"
+>7.2.2. Setting Drivers for Existing Printers</H3
><P
-></P
-><TABLE
-CLASS="WARNING"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/warning.gif"
-HSPACE="5"
-ALT="Warning"></TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
+>The initial listing of printers in the Samba host's
+Printers folder will have no real printer driver assigned
+to them. By default, in Samba 2.2.0 this driver name was set to
+<SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>NO PRINTER DRIVER AVAILABLE FOR THIS PRINTER</I
+></SPAN
+>.
+Later versions changed this to a NULL string to allow the use
+tof the local Add Printer Wizard on NT/2000 clients.
+Attempting to view the printer properties for a printer
+which has this default driver assigned will result in
+the error message:</P
><P
><SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->NOTE!</I
+>Device settings cannot be displayed. The driver
+for the specified printer is not installed, only spooler
+properties will be displayed. Do you want to install the
+driver now?</I
></SPAN
-> Roaming profiles support is different
-for Win9X and WinNT.</P
-></TD
-></TR
-></TABLE
-></DIV
-><P
->Before discussing how to configure roaming profiles, it is useful to see how
-Win9X and WinNT clients implement these features.</P
-><P
->Win9X clients send a NetUserGetInfo request to the server to get the user's
-profiles location. However, the response does not have room for a separate
-profiles location field, only the user's home share. This means that Win9X
-profiles are restricted to being in the user's home directory.</P
-><P
->WinNT clients send a NetSAMLogon RPC request, which contains many fields,
-including a separate field for the location of the user's profiles.
-This means that support for profiles is different for Win9X and WinNT.</P
-><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
-><A
-NAME="AEN997"
-></A
->6.8.2.1. Windows NT Configuration</H4
-><P
->To support WinNT clients, in the [global] section of smb.conf set the
-following (for example):</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath</PRE
></P
><P
->The default for this option is \\%N\%U\profile, namely
-\\sambaserver\username\profile. The \\N%\%U service is created
-automatically by the [homes] service.
-If you are using a samba server for the profiles, you _must_ make the
-share specified in the logon path browseable. </P
-><DIV
-CLASS="NOTE"
+>Click "No" in the error dialog and you will be presented with
+the printer properties window. The way to assign a driver to a
+printer is to either</P
><P
></P
-><TABLE
-CLASS="NOTE"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/note.gif"
-HSPACE="5"
-ALT="Note"></TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
+><UL
+><LI
><P
->[lkcl 26aug96 - we have discovered a problem where Windows clients can
-maintain a connection to the [homes] share in between logins. The
-[homes] share must NOT therefore be used in a profile path.]</P
-></TD
-></TR
-></TABLE
-></DIV
-></DIV
-><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
-><A
-NAME="AEN1005"
-></A
->6.8.2.2. Windows 9X Configuration</H4
+>Use the "New Driver..." button to install
+ a new printer driver, or</P
+></LI
+><LI
><P
->To support Win9X clients, you must use the "logon home" parameter. Samba has
-now been fixed so that "net use/home" now works as well, and it, too, relies
-on the "logon home" parameter.</P
+>Select a driver from the popup list of
+ installed drivers. Initially this list will be empty.</P
+></LI
+></UL
><P
->By using the logon home parameter, you are restricted to putting Win9X
-profiles in the user's home directory. But wait! There is a trick you
-can use. If you set the following in the [global] section of your
-smb.conf file:</P
+>If you wish to install printer drivers for client
+operating systems other than "Windows NT x86", you will need
+to use the "Sharing" tab of the printer properties dialog.</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->logon home = \\%L\%U\.profiles</PRE
-></P
+>Assuming you have connected with a root account, you
+will also be able modify other printer properties such as
+ACLs and device settings using this dialog box.</P
><P
->then your Win9X clients will dutifully put their clients in a subdirectory
-of your home directory called .profiles (thus making them hidden).</P
+>A few closing comments for this section, it is possible
+on a Windows NT print server to have printers
+listed in the Printers folder which are not shared. Samba does
+not make this distinction. By definition, the only printers of
+which Samba is aware are those which are specified as shares in
+<TT
+CLASS="FILENAME"
+>smb.conf</TT
+>.</P
><P
->Not only that, but 'net use/home' will also work, because of a feature in
-Win9X. It removes any directory stuff off the end of the home directory area
-and only uses the server and share portion. That is, it looks like you
-specified \\%L\%U for "logon home".</P
+>Another interesting side note is that Windows NT clients do
+not use the SMB printer share, but rather can print directly
+to any printer on another Windows NT host using MS-RPC. This
+of course assumes that the printing client has the necessary
+privileges on the remote host serving the printer. The default
+permissions assigned by Windows NT to a printer gives the "Print"
+permissions to the "Everyone" well-known group.</P
></DIV
><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN1013"
+NAME="AEN990"
></A
->6.8.2.3. Win9X and WinNT Configuration</H4
+>7.2.3. Support a large number of printers</H3
><P
->You can support profiles for both Win9X and WinNT clients by setting both the
-"logon home" and "logon path" parameters. For example:</P
+>One issue that has arisen during the development
+phase of Samba 2.2 is the need to support driver downloads for
+100's of printers. Using the Windows NT APW is somewhat
+awkward to say the list. If more than one printer are using the
+same driver, the <A
+HREF="rpcclient.1.html"
+TARGET="_top"
+><B
+CLASS="COMMAND"
+>rpcclient's
+setdriver command</B
+></A
+> can be used to set the driver
+associated with an installed driver. The following is example
+of how this could be accomplished:</P
><P
><PRE
CLASS="PROGRAMLISTING"
->logon home = \\%L\%U\.profiles
-logon path = \\%L\profiles\%U</PRE
-></P
-><DIV
-CLASS="NOTE"
-><P
+>
+<TT
+CLASS="PROMPT"
+>$ </TT
+>rpcclient pogo -U root%secret -c "enumdrivers"
+Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
+
+[Windows NT x86]
+Printer Driver Info 1:
+ Driver Name: [HP LaserJet 4000 Series PS]
+
+Printer Driver Info 1:
+ Driver Name: [HP LaserJet 2100 Series PS]
+
+Printer Driver Info 1:
+ Driver Name: [HP LaserJet 4Si/4SiMX PS]
+
+<TT
+CLASS="PROMPT"
+>$ </TT
+>rpcclient pogo -U root%secret -c "enumprinters"
+Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
+ flags:[0x800000]
+ name:[\\POGO\hp-print]
+ description:[POGO\\POGO\hp-print,NO DRIVER AVAILABLE FOR THIS PRINTER,]
+ comment:[]
+
+<TT
+CLASS="PROMPT"
+>$ </TT
+>rpcclient pogo -U root%secret \
+<TT
+CLASS="PROMPT"
+>> </TT
+> -c "setdriver hp-print \"HP LaserJet 4000 Series PS\""
+Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
+Successfully set hp-print to driver HP LaserJet 4000 Series PS.</PRE
></P
-><TABLE
-CLASS="NOTE"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/note.gif"
-HSPACE="5"
-ALT="Note"></TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
-><P
->I have not checked what 'net use /home' does on NT when "logon home" is
-set as above.</P
-></TD
-></TR
-></TABLE
-></DIV
></DIV
><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN1020"
+NAME="AEN1001"
></A
->6.8.2.4. Windows 9X Profile Setup</H4
-><P
->When a user first logs in on Windows 9X, the file user.DAT is created,
-as are folders "Start Menu", "Desktop", "Programs" and "Nethood".
-These directories and their contents will be merged with the local
-versions stored in c:\windows\profiles\username on subsequent logins,
-taking the most recent from each. You will need to use the [global]
-options "preserve case = yes", "short preserve case = yes" and
-"case sensitive = no" in order to maintain capital letters in shortcuts
-in any of the profile folders.</P
+>7.2.4. Adding New Printers via the Windows NT APW</H3
><P
->The user.DAT file contains all the user's preferences. If you wish to
-enforce a set of preferences, rename their user.DAT file to user.MAN,
-and deny them write access to this file.</P
+>By default, Samba offers all printer shares defined in <TT
+CLASS="FILENAME"
+>smb.conf</TT
+>
+in the "Printers..." folder. Also existing in this folder is the Windows NT
+Add Printer Wizard icon. The APW will be show only if</P
><P
></P
-><OL
-TYPE="1"
-><LI
-><P
-> On the Windows 95 machine, go to Control Panel | Passwords and
- select the User Profiles tab. Select the required level of
- roaming preferences. Press OK, but do _not_ allow the computer
- to reboot.
- </P
-></LI
+><UL
><LI
><P
-> On the Windows 95 machine, go to Control Panel | Network |
- Client for Microsoft Networks | Preferences. Select 'Log on to
- NT Domain'. Then, ensure that the Primary Logon is 'Client for
- Microsoft Networks'. Press OK, and this time allow the computer
- to reboot.
+>The connected user is able to successfully
+ execute an OpenPrinterEx(\\server) with administrative
+ privileges (i.e. root or <TT
+CLASS="PARAMETER"
+><I
+>printer admin</I
+></TT
+>).
</P
></LI
-></OL
-><P
->Under Windows 95, Profiles are downloaded from the Primary Logon.
-If you have the Primary Logon as 'Client for Novell Networks', then
-the profiles and logon script will be downloaded from your Novell
-Server. If you have the Primary Logon as 'Windows Logon', then the
-profiles will be loaded from the local machine - a bit against the
-concept of roaming profiles, if you ask me.</P
-><P
->You will now find that the Microsoft Networks Login box contains
-[user, password, domain] instead of just [user, password]. Type in
-the samba server's domain name (or any other domain known to exist,
-but bear in mind that the user will be authenticated against this
-domain and profiles downloaded from it, if that domain logon server
-supports it), user name and user's password.</P
-><P
->Once the user has been successfully validated, the Windows 95 machine
-will inform you that 'The user has not logged on before' and asks you
-if you wish to save the user's preferences? Select 'yes'.</P
-><P
->Once the Windows 95 client comes up with the desktop, you should be able
-to examine the contents of the directory specified in the "logon path"
-on the samba server and verify that the "Desktop", "Start Menu",
-"Programs" and "Nethood" folders have been created.</P
-><P
->These folders will be cached locally on the client, and updated when
-the user logs off (if you haven't made them read-only by then :-).
-You will find that if the user creates further folders or short-cuts,
-that the client will merge the profile contents downloaded with the
-contents of the profile directory already on the local client, taking
-the newest folders and short-cuts from each set.</P
-><P
->If you have made the folders / files read-only on the samba server,
-then you will get errors from the w95 machine on logon and logout, as
-it attempts to merge the local and the remote profile. Basically, if
-you have any errors reported by the w95 machine, check the Unix file
-permissions and ownership rights on the profile directory contents,
-on the samba server.</P
-><P
->If you have problems creating user profiles, you can reset the user's
-local desktop cache, as shown below. When this user then next logs in,
-they will be told that they are logging in "for the first time".</P
-><P
-></P
-><OL
-TYPE="1"
><LI
><P
-> instead of logging in under the [user, password, domain] dialog,
- press escape.
+><A
+HREF="smb.conf.5.html#SHOWADDPRINTERWIZARD"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>show
+ add printer wizard = yes</I
+></TT
+></A
+> (the default).
</P
></LI
-><LI
-><P
-> run the regedit.exe program, and look in:
- </P
-><P
-> HKEY_LOCAL_MACHINE\Windows\CurrentVersion\ProfileList
- </P
+></UL
><P
-> you will find an entry, for each user, of ProfilePath. Note the
- contents of this key (likely to be c:\windows\profiles\username),
- then delete the key ProfilePath for the required user.
- </P
+>In order to be able to use the APW to successfully add a printer to a Samba
+server, the <A
+HREF="smb.conf.5.html#ADDPRINTERCOMMAND"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>add
+printer command</I
+></TT
+></A
+> must have a defined value. The program
+hook must successfully add the printer to the system (i.e.
+<TT
+CLASS="FILENAME"
+>/etc/printcap</TT
+> or appropriate files) and
+<TT
+CLASS="FILENAME"
+>smb.conf</TT
+> if necessary.</P
><P
-> [Exit the registry editor].
- </P
-></LI
-><LI
+>When using the APW from a client, if the named printer share does
+not exist, <B
+CLASS="COMMAND"
+>smbd</B
+> will execute the <TT
+CLASS="PARAMETER"
+><I
+>add printer
+command</I
+></TT
+> and reparse to the <TT
+CLASS="FILENAME"
+>smb.conf</TT
+>
+to attempt to locate the new printer share. If the share is still not defined,
+an error of "Access Denied" is returned to the client. Note that the
+<TT
+CLASS="PARAMETER"
+><I
+>add printer program</I
+></TT
+> is executed under the context
+of the connected user, not necessarily a root account.</P
><P
-> <SPAN
-CLASS="emphasis"
+>There is a complementary <A
+HREF="smb.conf.5.html#DELETEPRINTERCOMMAND"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
><I
-CLASS="EMPHASIS"
->WARNING</I
-></SPAN
-> - before deleting the contents of the
- directory listed in
- the ProfilePath (this is likely to be c:\windows\profiles\username),
- ask them if they have any important files stored on their desktop
- or in their start menu. delete the contents of the directory
- ProfilePath (making a backup if any of the files are needed).
- </P
+>delete
+printer command</I
+></TT
+></A
+> for removing entries from the "Printers..."
+folder.</P
><P
-> This will have the effect of removing the local (read-only hidden
- system file) user.DAT in their profile directory, as well as the
- local "desktop", "nethood", "start menu" and "programs" folders.
- </P
-></LI
+>The following is an example <A
+HREF="smb.conf.5.html#ADDPRINTERCOMMAN"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>add printer command</I
+></TT
+></A
+> script. It adds the appropriate entries to <TT
+CLASS="FILENAME"
+>/etc/printcap.local</TT
+> (change that to what you need) and returns a line of 'Done' which is needed for the whole process to work.</P
+><PRE
+CLASS="PROGRAMLISTING"
+>#!/bin/sh
+
+# Script to insert a new printer entry into printcap.local
+#
+# $1, printer name, used as the descriptive name
+# $2, share name, used as the printer name for Linux
+# $3, port name
+# $4, driver name
+# $5, location, used for the device file of the printer
+# $6, win9x location
+
+#
+# Make sure we use the location that RedHat uses for local printer defs
+PRINTCAP=/etc/printcap.local
+DATE=`date +%Y%m%d-%H%M%S`
+LP=lp
+RESTART="service lpd restart"
+
+# Keep a copy
+cp $PRINTCAP $PRINTCAP.$DATE
+# Add the printer to $PRINTCAP
+echo "" >> $PRINTCAP
+echo "$2|$1:\\" >> $PRINTCAP
+echo " :sd=/var/spool/lpd/$2:\\" >> $PRINTCAP
+echo " :mx=0:ml=0:sh:\\" >> $PRINTCAP
+echo " :lp=/usr/local/samba/var/print/$5.prn:" >> $PRINTCAP
+
+touch "/usr/local/samba/var/print/$5.prn" >> /tmp/printadd.$$ 2>&1
+chown $LP "/usr/local/samba/var/print/$5.prn" >> /tmp/printadd.$$ 2>&1
+
+mkdir /var/spool/lpd/$2
+chmod 700 /var/spool/lpd/$2
+chown $LP /var/spool/lpd/$2
+#echo $1 >> "/usr/local/samba/var/print/$5.prn"
+#echo $2 >> "/usr/local/samba/var/print/$5.prn"
+#echo $3 >> "/usr/local/samba/var/print/$5.prn"
+#echo $4 >> "/usr/local/samba/var/print/$5.prn"
+#echo $5 >> "/usr/local/samba/var/print/$5.prn"
+#echo $6 >> "/usr/local/samba/var/print/$5.prn"
+$RESTART >> "/usr/local/samba/var/print/$5.prn"
+# Not sure if this is needed
+touch /usr/local/samba/lib/smb.conf
+#
+# You need to return a value, but I am not sure what it means.
+#
+echo "Done"
+exit 0</PRE
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1031"
+></A
+>7.2.5. Samba and Printer Ports</H3
+><P
+>Windows NT/2000 print servers associate a port with each printer. These normally
+take the form of LPT1:, COM1:, FILE:, etc... Samba must also support the
+concept of ports associated with a printer. By default, only one printer port,
+named "Samba Printer Port", exists on a system. Samba does not really a port in
+order to print, rather it is a requirement of Windows clients. </P
+><P
+>Note that Samba does not support the concept of "Printer Pooling" internally
+either. This is when a logical printer is assigned to multiple ports as
+a form of load balancing or fail over.</P
+><P
+>If you require that multiple ports be defined for some reason,
+<TT
+CLASS="FILENAME"
+>smb.conf</TT
+> possesses a <A
+HREF="smb.conf.5.html#ENUMPORTSCOMMAND"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>enumports
+command</I
+></TT
+></A
+> which can be used to define an external program
+that generates a listing of ports on a system.</P
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN1039"
+></A
+>7.3. The Imprints Toolset</H2
+><P
+>The Imprints tool set provides a UNIX equivalent of the
+ Windows NT Add Printer Wizard. For complete information, please
+ refer to the Imprints web site at <A
+HREF="http://imprints.sourceforge.net/"
+TARGET="_top"
+> http://imprints.sourceforge.net/</A
+> as well as the documentation
+ included with the imprints source distribution. This section will
+ only provide a brief introduction to the features of Imprints.</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1043"
+></A
+>7.3.1. What is Imprints?</H3
+><P
+>Imprints is a collection of tools for supporting the goals
+ of</P
+><P
+></P
+><UL
><LI
><P
-> search for the user's .PWL password-caching file in the c:\windows
- directory, and delete it.
- </P
+>Providing a central repository information
+ regarding Windows NT and 95/98 printer driver packages</P
></LI
><LI
><P
-> log off the windows 95 client.
- </P
+>Providing the tools necessary for creating
+ the Imprints printer driver packages.</P
></LI
><LI
><P
-> check the contents of the profile path (see "logon path" described
- above), and delete the user.DAT or user.MAN file for the user,
- making a backup if required.
- </P
+>Providing an installation client which
+ will obtain and install printer drivers on remote Samba
+ and Windows NT 4 print servers.</P
></LI
-></OL
-><P
->If all else fails, increase samba's debug log levels to between 3 and 10,
-and / or run a packet trace program such as tcpdump or netmon.exe, and
-look for any error reports.</P
+></UL
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1053"
+></A
+>7.3.2. Creating Printer Driver Packages</H3
><P
->If you have access to an NT server, then first set up roaming profiles
-and / or netlogons on the NT server. Make a packet trace, or examine
-the example packet traces provided with NT server, and see what the
-differences are with the equivalent samba trace.</P
+>The process of creating printer driver packages is beyond
+ the scope of this document (refer to Imprints.txt also included
+ with the Samba distribution for more information). In short,
+ an Imprints driver package is a gzipped tarball containing the
+ driver files, related INF files, and a control file needed by the
+ installation client.</P
></DIV
><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
NAME="AEN1056"
></A
->6.8.2.5. Windows NT Workstation 4.0</H4
+>7.3.3. The Imprints server</H3
><P
->When a user first logs in to a Windows NT Workstation, the profile
-NTuser.DAT is created. The profile location can be now specified
-through the "logon path" parameter. </P
+>The Imprints server is really a database server that
+ may be queried via standard HTTP mechanisms. Each printer
+ entry in the database has an associated URL for the actual
+ downloading of the package. Each package is digitally signed
+ via GnuPG which can be used to verify that package downloaded
+ is actually the one referred in the Imprints database. It is
+ <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>not</I
+></SPAN
+> recommended that this security check
+ be disabled.</P
+></DIV
><DIV
-CLASS="NOTE"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1060"
+></A
+>7.3.4. The Installation Client</H3
><P
-></P
-><TABLE
-CLASS="NOTE"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/note.gif"
-HSPACE="5"
-ALT="Note"></TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
+>More information regarding the Imprints installation client
+ is available in the <TT
+CLASS="FILENAME"
+>Imprints-Client-HOWTO.ps</TT
+>
+ file included with the imprints source package.</P
><P
->[lkcl 10aug97 - i tried setting the path to
-\\samba-server\homes\profile, and discovered that this fails because
-a background process maintains the connection to the [homes] share
-which does _not_ close down in between user logins. you have to
-have \\samba-server\%L\profile, where user is the username created
-from the [homes] share].</P
-></TD
-></TR
-></TABLE
-></DIV
+>The Imprints installation client comes in two forms.</P
><P
->There is a parameter that is now available for use with NT Profiles:
-"logon drive". This should be set to "h:" or any other drive, and
-should be used in conjunction with the new "logon home" parameter.</P
+></P
+><UL
+><LI
><P
->The entry for the NT 4.0 profile is a _directory_ not a file. The NT
-help on profiles mentions that a directory is also created with a .PDS
-extension. The user, while logging in, must have write permission to
-create the full profile path (and the folder with the .PDS extension)
-[lkcl 10aug97 - i found that the creation of the .PDS directory failed,
-and had to create these manually for each user, with a shell script.
-also, i presume, but have not tested, that the full profile path must
-be browseable just as it is for w95, due to the manner in which they
-attempt to create the full profile path: test existence of each path
-component; create path component].</P
+>a set of command line Perl scripts</P
+></LI
+><LI
><P
->In the profile directory, NT creates more folders than 95. It creates
-"Application Data" and others, as well as "Desktop", "Nethood",
-"Start Menu" and "Programs". The profile itself is stored in a file
-NTuser.DAT. Nothing appears to be stored in the .PDS directory, and
-its purpose is currently unknown.</P
+>a GTK+ based graphical interface to
+ the command line perl scripts</P
+></LI
+></UL
><P
->You can use the System Control Panel to copy a local profile onto
-a samba server (see NT Help on profiles: it is also capable of firing
-up the correct location in the System Control Panel for you). The
-NT Help file also mentions that renaming NTuser.DAT to NTuser.MAN
-turns a profile into a mandatory one.</P
-><DIV
-CLASS="NOTE"
+>The installation client (in both forms) provides a means
+ of querying the Imprints database server for a matching
+ list of known printer model names as well as a means to
+ download and install the drivers on remote Samba and Windows
+ NT print servers.</P
+><P
+>The basic installation process is in four steps and
+ perl code is wrapped around <B
+CLASS="COMMAND"
+>smbclient</B
+>
+ and <B
+CLASS="COMMAND"
+>rpcclient</B
+>.</P
><P
+><PRE
+CLASS="PROGRAMLISTING"
+>
+foreach (supported architecture for a given driver)
+{
+ 1. rpcclient: Get the appropriate upload directory
+ on the remote server
+ 2. smbclient: Upload the driver files
+ 3. rpcclient: Issues an AddPrinterDriver() MS-RPC
+}
+
+4. rpcclient: Issue an AddPrinterEx() MS-RPC to actually
+ create the printer</PRE
></P
-><TABLE
-CLASS="NOTE"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/note.gif"
-HSPACE="5"
-ALT="Note"></TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
><P
->[lkcl 10aug97 - i notice that NT Workstation tells me that it is
-downloading a profile from a slow link. whether this is actually the
-case, or whether there is some configuration issue, as yet unknown,
-that makes NT Workstation _think_ that the link is a slow one is a
-matter to be resolved].</P
+>One of the problems encountered when implementing
+ the Imprints tool set was the name space issues between
+ various supported client architectures. For example, Windows
+ NT includes a driver named "Apple LaserWriter II NTX v51.8"
+ and Windows 95 calls its version of this driver "Apple
+ LaserWriter II NTX"</P
><P
->[lkcl 20aug97 - after samba digest correspondence, one user found, and
-another confirmed, that profiles cannot be loaded from a samba server
-unless "security = user" and "encrypt passwords = yes" (see the file
-ENCRYPTION.txt) or "security = server" and "password server = ip.address.
-of.yourNTserver" are used. Either of these options will allow the NT
-workstation to access the samba server using LAN manager encrypted
-passwords, without the user intervention normally required by NT
-workstation for clear-text passwords].</P
+>The problem is how to know what client drivers have
+ been uploaded for a printer. As astute reader will remember
+ that the Windows NT Printer Properties dialog only includes
+ space for one printer driver name. A quick look in the
+ Windows NT 4.0 system registry at</P
><P
->[lkcl 25aug97 - more comments received about NT profiles: the case of
-the profile _matters_. the file _must_ be called NTuser.DAT or, for
-a mandatory profile, NTuser.MAN].</P
-></TD
-></TR
-></TABLE
+><TT
+CLASS="FILENAME"
+>HKLM\System\CurrentControlSet\Control\Print\Environment
+ </TT
+></P
+><P
+>will reveal that Windows NT always uses the NT driver
+ name. This is ok as Windows NT always requires that at least
+ the Windows NT version of the printer driver is present.
+ However, Samba does not have the requirement internally.
+ Therefore, how can you use the NT driver name if is has not
+ already been installed?</P
+><P
+>The way of sidestepping this limitation is to require
+ that all Imprints printer driver packages include both the Intel
+ Windows NT and 95/98 printer drivers and that NT driver is
+ installed first.</P
></DIV
></DIV
><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN1069"
+NAME="AEN1082"
></A
->6.8.2.6. Windows NT Server</H4
-><P
->There is nothing to stop you specifying any path that you like for the
-location of users' profiles. Therefore, you could specify that the
-profile be stored on a samba server, or any other SMB server, as long as
-that SMB server supports encrypted passwords.</P
-></DIV
-><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
-><A
-NAME="AEN1072"
+>7.4. <A
+NAME="MIGRATION"
></A
->6.8.2.7. Sharing Profiles between W95 and NT Workstation 4.0</H4
+>Migration to from Samba 2.0.x to 2.2.x</H2
+><P
+>Given that printer driver management has changed (we hope improved) in
+2.2 over prior releases, migration from an existing setup to 2.2 can
+follow several paths. Here are the possible scenarios for
+migration:</P
+><P
+></P
+><UL
+><LI
+><P
+>If you do not desire the new Windows NT
+ print driver support, nothing needs to be done.
+ All existing parameters work the same.</P
+></LI
+><LI
+><P
+>If you want to take advantage of NT printer
+ driver support but do not want to migrate the
+ 9x drivers to the new setup, the leave the existing
+ <TT
+CLASS="FILENAME"
+>printers.def</TT
+> file. When smbd attempts
+ to locate a
+ 9x driver for the printer in the TDB and fails it
+ will drop down to using the printers.def (and all
+ associated parameters). The <B
+CLASS="COMMAND"
+>make_printerdef</B
+>
+ tool will also remain for backwards compatibility but will
+ be removed in the next major release.</P
+></LI
+><LI
+><P
+>If you install a Windows 9x driver for a printer
+ on your Samba host (in the printing TDB), this information will
+ take precedence and the three old printing parameters
+ will be ignored (including print driver location).</P
+></LI
+><LI
+><P
+>If you want to migrate an existing <TT
+CLASS="FILENAME"
+>printers.def</TT
+>
+ file into the new setup, the current only solution is to use the Windows
+ NT APW to install the NT drivers and the 9x drivers. This can be scripted
+ using <B
+CLASS="COMMAND"
+>smbclient</B
+> and <B
+CLASS="COMMAND"
+>rpcclient</B
+>. See the
+ Imprints installation client at <A
+HREF="http://imprints.sourceforge.net/"
+TARGET="_top"
+>http://imprints.sourceforge.net/</A
+>
+ for an example.
+ </P
+></LI
+></UL
><DIV
CLASS="WARNING"
><P
ALIGN="LEFT"
VALIGN="CENTER"
><B
->Potentially outdated or incorrect material follows</B
+>Achtung!</B
></TH
></TR
><TR
ALIGN="LEFT"
VALIGN="TOP"
><P
->I think this is all bogus, but have not deleted it. (Richard Sharpe)</P
-></TD
-></TR
-></TABLE
-></DIV
-><P
->The default logon path is \\%N\%U. NT Workstation will attempt to create
-a directory "\\samba-server\username.PDS" if you specify the logon path
-as "\\samba-server\username" with the NT User Manager. Therefore, you
-will need to specify (for example) "\\samba-server\username\profile".
-NT 4.0 will attempt to create "\\samba-server\username\profile.PDS", which
-is more likely to succeed.</P
+>The following <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> parameters are considered to
+be deprecated and will be removed soon. Do not use them in new
+installations</P
><P
->If you then want to share the same Start Menu / Desktop with W95, you will
-need to specify "logon path = \\samba-server\username\profile" [lkcl 10aug97
-this has its drawbacks: i created a shortcut to telnet.exe, which attempts
-to run from the c:\winnt\system32 directory. this directory is obviously
-unlikely to exist on a Win95-only host].</P
+></P
+><UL
+><LI
><P
-> If you have this set up correctly, you will find separate user.DAT and
-NTuser.DAT files in the same profile directory.</P
-><DIV
-CLASS="NOTE"
+><TT
+CLASS="PARAMETER"
+><I
+>printer driver file (G)</I
+></TT
+>
+ </P
+></LI
+><LI
><P
-></P
-><TABLE
-CLASS="NOTE"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/note.gif"
-HSPACE="5"
-ALT="Note"></TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
+><TT
+CLASS="PARAMETER"
+><I
+>printer driver (S)</I
+></TT
+>
+ </P
+></LI
+><LI
><P
->[lkcl 25aug97 - there are some issues to resolve with downloading of
-NT profiles, probably to do with time/date stamps. i have found that
-NTuser.DAT is never updated on the workstation after the first time that
-it is copied to the local workstation profile directory. this is in
-contrast to w95, where it _does_ transfer / update profiles correctly].</P
+><TT
+CLASS="PARAMETER"
+><I
+>printer driver location (S)</I
+></TT
+>
+ </P
+></LI
+></UL
></TD
></TR
></TABLE
></DIV
+><P
+>The have been two new parameters add in Samba 2.2.2 to for
+better support of Samba 2.0.x backwards capability (<TT
+CLASS="PARAMETER"
+><I
+>disable
+spoolss</I
+></TT
+>) and for using local printers drivers on Windows
+NT/2000 clients (<TT
+CLASS="PARAMETER"
+><I
+>use client driver</I
+></TT
+>). Both of
+these options are described in the smb.coinf(5) man page and are
+disabled by default.</P
></DIV
></DIV
-></DIV
+><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="PRINTINGDEBUG"
+></A
+>Chapter 8. Debugging Printing Problems</H1
><DIV
CLASS="SECT1"
-><HR><H2
+><H2
CLASS="SECT1"
><A
-NAME="AEN1082"
+NAME="AEN1128"
></A
->6.9. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</H2
-><DIV
-CLASS="WARNING"
+>8.1. Introduction</H2
><P
-></P
-><TABLE
-CLASS="WARNING"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/warning.gif"
-HSPACE="5"
-ALT="Warning"></TD
-><TH
-ALIGN="LEFT"
-VALIGN="CENTER"
-><B
->Possibly Outdated Material</B
-></TH
-></TR
-><TR
-><TD
-> </TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
-><P
-> This appendix was originally authored by John H Terpstra of
- the Samba Team and is included here for posterity.
- </P
-></TD
-></TR
-></TABLE
-></DIV
-><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->NOTE :</I
-></SPAN
->
-The term "Domain Controller" and those related to it refer to one specific
-method of authentication that can underly an SMB domain. Domain Controllers
-prior to Windows NT Server 3.1 were sold by various companies and based on
-private extensions to the LAN Manager 2.1 protocol. Windows NT introduced
-Microsoft-specific ways of distributing the user authentication database.
-See DOMAIN.txt for examples of how Samba can participate in or create
-SMB domains based on shared authentication database schemes other than the
-Windows NT SAM.</P
-><P
->Windows NT Server can be installed as either a plain file and print server
-(WORKGROUP workstation or server) or as a server that participates in Domain
-Control (DOMAIN member, Primary Domain controller or Backup Domain controller).
-The same is true for OS/2 Warp Server, Digital Pathworks and other similar
-products, all of which can participate in Domain Control along with Windows NT.</P
-><P
->To many people these terms can be confusing, so let's try to clear the air.</P
-><P
->Every Windows NT system (workstation or server) has a registry database.
-The registry contains entries that describe the initialization information
-for all services (the equivalent of Unix Daemons) that run within the Windows
-NT environment. The registry also contains entries that tell application
-software where to find dynamically loadable libraries that they depend upon.
-In fact, the registry contains entries that describes everything that anything
-may need to know to interact with the rest of the system.</P
-><P
->The registry files can be located on any Windows NT machine by opening a
-command prompt and typing:</P
-><P
-><TT
-CLASS="PROMPT"
->C:\WINNT\></TT
-> dir %SystemRoot%\System32\config</P
-><P
->The environment variable %SystemRoot% value can be obtained by typing:</P
-><P
-><TT
-CLASS="PROMPT"
->C:\WINNT></TT
->echo %SystemRoot%</P
+>This is a short description of how to debug printing problems with
+Samba. This describes how to debug problems with printing from a SMB
+client to a Samba server, not the other way around. For the reverse
+see the examples/printing directory.</P
><P
->The active parts of the registry that you may want to be familiar with are
-the files called: default, system, software, sam and security.</P
+>Ok, so you want to print to a Samba server from your PC. The first
+thing you need to understand is that Samba does not actually do any
+printing itself, it just acts as a middleman between your PC client
+and your Unix printing subsystem. Samba receives the file from the PC
+then passes the file to a external "print command". What print command
+you use is up to you.</P
><P
->In a domain environment, Microsoft Windows NT domain controllers participate
-in replication of the SAM and SECURITY files so that all controllers within
-the domain have an exactly identical copy of each.</P
+>The whole things is controlled using options in smb.conf. The most
+relevant options (which you should look up in the smb.conf man page)
+are:</P
><P
->The Microsoft Windows NT system is structured within a security model that
-says that all applications and services must authenticate themselves before
-they can obtain permission from the security manager to do what they set out
-to do.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> [global]
+ print command - send a file to a spooler
+ lpq command - get spool queue status
+ lprm command - remove a job
+ [printers]
+ path = /var/spool/lpd/samba</PRE
+></P
><P
->The Windows NT User database also resides within the registry. This part of
-the registry contains the user's security identifier, home directory, group
-memberships, desktop profile, and so on.</P
+>The following are nice to know about:</P
><P
->Every Windows NT system (workstation as well as server) will have its own
-registry. Windows NT Servers that participate in Domain Security control
-have a database that they share in common - thus they do NOT own an
-independent full registry database of their own, as do Workstations and
-plain Servers.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> queuepause command - stop a printer or print queue
+ queueresume command - start a printer or print queue</PRE
+></P
><P
->The User database is called the SAM (Security Access Manager) database and
-is used for all user authentication as well as for authentication of inter-
-process authentication (i.e. to ensure that the service action a user has
-requested is permitted within the limits of that user's privileges).</P
+>Example:</P
><P
->The Samba team have produced a utility that can dump the Windows NT SAM into
-smbpasswd format: see ENCRYPTION.txt for information on smbpasswd and
-/pub/samba/pwdump on your nearest Samba mirror for the utility. This
-facility is useful but cannot be easily used to implement SAM replication
-to Samba systems.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> print command = /usr/bin/lpr -r -P%p %s
+ lpq command = /usr/bin/lpq -P%p %s
+ lprm command = /usr/bin/lprm -P%p %j
+ queuepause command = /usr/sbin/lpc -P%p stop
+ queuepause command = /usr/sbin/lpc -P%p start</PRE
+></P
><P
->Windows for Workgroups, Windows 95, and Windows NT Workstations and Servers
-can participate in a Domain security system that is controlled by Windows NT
-servers that have been correctly configured. Almost every domain will have
-ONE Primary Domain Controller (PDC). It is desirable that each domain will
-have at least one Backup Domain Controller (BDC).</P
+>Samba should set reasonable defaults for these depending on your
+system type, but it isn't clairvoyant. It is not uncommon that you
+have to tweak these for local conditions. The commands should
+always have fully specified pathnames, as the smdb may not have
+the correct PATH values.</P
><P
->The PDC and BDCs then participate in replication of the SAM database so that
-each Domain Controlling participant will have an up to date SAM component
-within its registry.</P
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="SAMBA-BDC"
-></A
->Chapter 7. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN1118"
-></A
->7.1. Prerequisite Reading</H2
+>When you send a job to Samba to be printed, it will make a temporary
+copy of it in the directory specified in the [printers] section.
+and it should be periodically cleaned out. The lpr -r option
+requests that the temporary copy be removed after printing; If
+printing fails then you might find leftover files in this directory,
+and it should be periodically cleaned out. Samba used the lpq
+command to determine the "job number" assigned to your print job
+by the spooler.</P
><P
->Before you continue reading in this chapter, please make sure
-that you are comfortable with configuring a Samba PDC
-as described in the <A
-HREF="Samba-PDC-HOWTO.html"
-TARGET="_top"
->Samba-PDC-HOWTO</A
->.</P
+>The %>letter< are "macros" that get dynamically replaced with appropriate
+values when they are used. The %s gets replaced with the name of the spool
+file that Samba creates and the %p gets replaced with the name of the
+printer. The %j gets replaced with the "job number" which comes from
+the lpq output.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1122"
+NAME="AEN1144"
></A
->7.2. Background</H2
+>8.2. Debugging printer problems</H2
><P
->What is a Domain Controller? It is a machine that is able to answer
-logon requests from workstations in a Windows NT Domain. Whenever a
-user logs into a Windows NT Workstation, the workstation connects to a
-Domain Controller and asks him whether the username and password the
-user typed in is correct. The Domain Controller replies with a lot of
-information about the user, for example the place where the users
-profile is stored, the users full name of the user. All this
-information is stored in the NT user database, the so-called SAM.</P
+>One way to debug printing problems is to start by replacing these
+command with shell scripts that record the arguments and the contents
+of the print file. A simple example of this kind of things might
+be:</P
><P
->There are two kinds of Domain Controller in a NT 4 compatible Domain:
-A Primary Domain Controller (PDC) and one or more Backup Domain
-Controllers (BDC). The PDC contains the master copy of the
-SAM. Whenever the SAM has to change, for example when a user changes
-his password, this change has to be done on the PDC. A Backup Domain
-Controller is a machine that maintains a read-only copy of the
-SAM. This way it is able to reply to logon requests and authenticate
-users in case the PDC is not available. During this time no changes to
-the SAM are possible. Whenever changes to the SAM are done on the PDC,
-all BDC receive the changes from the PDC.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> print command = /tmp/saveprint %p %s
+
+ #!/bin/saveprint
+ # we make sure that we are the right user
+ /usr/bin/id -p >/tmp/tmp.print
+ # we run the command and save the error messages
+ # replace the command with the one appropriate for your system
+ /usr/bin/lpr -r -P$1 $2 2>>&/tmp/tmp.print</PRE
+></P
><P
->Since version 2.2 Samba officially supports domain logons for all
-current Windows Clients, including Windows 2000 and XP. This text
-assumes the domain to be named SAMBA. To be able to act as a PDC, some
-parameters in the [global]-section of the smb.conf have to be set:</P
+>Then you print a file and try removing it. You may find that the
+print queue needs to be stopped in order to see the queue status
+and remove the job:</P
><P
><PRE
CLASS="PROGRAMLISTING"
->workgroup = SAMBA
-domain master = yes
-domain logons = yes</PRE
+> h4: {42} % echo hi >/tmp/hi
+h4: {43} % smbclient //localhost/lw4
+added interface ip=10.0.0.4 bcast=10.0.0.255 nmask=255.255.255.0
+Password:
+Domain=[ASTART] OS=[Unix] Server=[Samba 2.0.7]
+smb: \> print /tmp/hi
+putting file /tmp/hi as hi-17534 (0.0 kb/s) (average 0.0 kb/s)
+smb: \> queue
+1049 3 hi-17534
+smb: \> cancel 1049
+Error cancelling job 1049 : code 0
+smb: \> cancel 1049
+Job 1049 cancelled
+smb: \> queue
+smb: \> exit</PRE
></P
><P
->Several other things like a [homes] and a [netlogon] share also may be
-set along with settings for the profile path, the users home drive and
-others. This will not be covered in this document.</P
+>The 'code 0' indicates that the job was removed. The comment
+by the smbclient is a bit misleading on this.
+You can observe the command output and then and look at the
+/tmp/tmp.print file to see what the results are. You can quickly
+find out if the problem is with your printing system. Often people
+have problems with their /etc/printcap file or permissions on
+various print queues.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1130"
+NAME="AEN1153"
></A
->7.3. What qualifies a Domain Controller on the network?</H2
+>8.3. What printers do I have?</H2
><P
->Every machine that is a Domain Controller for the domain SAMBA has to
-register the NetBIOS group name SAMBA#1c with the WINS server and/or
-by broadcast on the local network. The PDC also registers the unique
-NetBIOS name SAMBA#1b with the WINS server. The name type #1b is
-normally reserved for the domain master browser, a role that has
-nothing to do with anything related to authentication, but the
-Microsoft Domain implementation requires the domain master browser to
-be on the same machine as the PDC.</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1133"
-></A
->7.3.1. How does a Workstation find its domain controller?</H3
+>You can use the 'testprns' program to check to see if the printer
+name you are using is recognized by Samba. For example, you can
+use:</P
><P
->A NT workstation in the domain SAMBA that wants a local user to be
-authenticated has to find the domain controller for SAMBA. It does
-this by doing a NetBIOS name query for the group name SAMBA#1c. It
-assumes that each of the machines it gets back from the queries is a
-domain controller and can answer logon requests. To not open security
-holes both the workstation and the selected (TODO: How is the DC
-chosen) domain controller authenticate each other. After that the
-workstation sends the user's credentials (his name and password) to
-the domain controller, asking for approval.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1136"
-></A
->7.3.2. When is the PDC needed?</H3
+><PRE
+CLASS="PROGRAMLISTING"
+> testprns printer /etc/printcap</PRE
+></P
><P
->Whenever a user wants to change his password, this has to be done on
-the PDC. To find the PDC, the workstation does a NetBIOS name query
-for SAMBA#1b, assuming this machine maintains the master copy of the
-SAM. The workstation contacts the PDC, both mutually authenticate and
-the password change is done.</P
-></DIV
+>Samba can get its printcap information from a file or from a program.
+You can try the following to see the format of the extracted
+information:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> testprns -a printer /etc/printcap
+
+ testprns -a printer '|/bin/cat printcap'</PRE
+></P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1139"
+NAME="AEN1161"
></A
->7.4. Can Samba be a Backup Domain Controller?</H2
+>8.4. Setting up printcap and print servers</H2
><P
->With version 2.2, no. The native NT SAM replication protocols have
-not yet been fully implemented. The Samba Team is working on
-understanding and implementing the protocols, but this work has not
-been finished for version 2.2.</P
+>You may need to set up some printcaps for your Samba system to use.
+It is strongly recommended that you use the facilities provided by
+the print spooler to set up queues and printcap information.</P
><P
->Can I get the benefits of a BDC with Samba? Yes. The main reason for
-implementing a BDC is availability. If the PDC is a Samba machine,
-a second Samba machine can be set up to
-service logon requests whenever the PDC is down.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1143"
-></A
->7.5. How do I set up a Samba BDC?</H2
+>Samba requires either a printcap or program to deliver printcap
+information. This printcap information has the format:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> name|alias1|alias2...:option=value:...</PRE
+></P
+><P
+>For almost all printing systems, the printer 'name' must be composed
+only of alphanumeric or underscore '_' characters. Some systems also
+allow hyphens ('-') as well. An alias is an alternative name for the
+printer, and an alias with a space in it is used as a 'comment'
+about the printer. The printcap format optionally uses a \ at the end of lines
+to extend the printcap to multiple lines.</P
+><P
+>Here are some examples of printcap files:</P
><P
->Several things have to be done:</P
><P
></P
-><UL
+><OL
+TYPE="1"
><LI
><P
->The domain SID has to be the same on the PDC and the BDC. This used to
-be stored in the file private/MACHINE.SID. This file is not created
-anymore since Samba 2.2.5 or even earlier. Nowadays the domain SID is
-stored in the file private/secrets.tdb. Simply copying the secrets.tdb
-from the PDC to the BDC does not work, as the BDC would
-generate a new SID for itself and override the domain SID with this
-new BDC SID.</P
+>pr just printer name</P
+></LI
+><LI
><P
->To retrieve the domain SID from the PDC or an existing BDC and store it in the
-secrets.tdb, execute 'net rpc getsid' on the BDC.</P
+>pr|alias printer name and alias</P
></LI
><LI
><P
->The Unix user database has to be synchronized from the PDC to the
-BDC. This means that both the /etc/passwd and /etc/group have to be
-replicated from the PDC to the BDC. This can be done manually
-whenever changes are made, or the PDC is set up as a NIS master
-server and the BDC as a NIS slave server. To set up the BDC as a
-mere NIS client would not be enough, as the BDC would not be able to
-access its user database in case of a PDC failure.</P
+>pr|My Printer printer name, alias used as comment</P
></LI
><LI
><P
->The Samba password database in the file private/smbpasswd has to be
-replicated from the PDC to the BDC. This is a bit tricky, see the
-next section.</P
+>pr:sh:\ Same as pr:sh:cm= testing
+ :cm= \
+ testing</P
></LI
><LI
><P
->Any netlogon share has to be replicated from the PDC to the
-BDC. This can be done manually whenever login scripts are changed,
-or it can be done automatically together with the smbpasswd
-synchronization.</P
+>pr:sh Same as pr:sh:cm= testing
+ :cm= testing</P
></LI
-></UL
+></OL
+></P
><P
->Finally, the BDC has to be found by the workstations. This can be done
-by setting</P
+>Samba reads the printcap information when first started. If you make
+changes in the printcap information, then you must do the following:</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->workgroup = samba
-domain master = no
-domain logons = yes</PRE
></P
+><OL
+TYPE="1"
+><LI
><P
->in the [global]-section of the smb.conf of the BDC. This makes the BDC
-only register the name SAMBA#1c with the WINS server. This is no
-problem as the name SAMBA#1c is a NetBIOS group name that is meant to
-be registered by more than one machine. The parameter 'domain master =
-no' forces the BDC not to register SAMBA#1b which as a unique NetBIOS
-name is reserved for the Primary Domain Controller.</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1160"
-></A
->7.5.1. How do I replicate the smbpasswd file?</H3
+>make sure that the print spooler is aware of these changes.
+The LPRng system uses the 'lpc reread' command to do this.</P
+></LI
+><LI
><P
->Replication of the smbpasswd file is sensitive. It has to be done
-whenever changes to the SAM are made. Every user's password change is
-done in the smbpasswd file and has to be replicated to the BDC. So
-replicating the smbpasswd file very often is necessary.</P
+>make sure that the spool queues, etc., exist and have the
+correct permissions. The LPRng system uses the 'checkpc -f'
+command to do this.</P
+></LI
+><LI
><P
->As the smbpasswd file contains plain text password equivalents, it
-must not be sent unencrypted over the wire. The best way to set up
-smbpasswd replication from the PDC to the BDC is to use the utility
-rsync. rsync can use ssh as a transport. ssh itself can be set up to
-accept *only* rsync transfer without requiring the user to type a
-password.</P
-></DIV
-></DIV
+>You now should send a SIGHUP signal to the smbd server to have
+it reread the printcap information.</P
+></LI
+></OL
></DIV
><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="ADS"
-></A
->Chapter 8. Samba as a ADS domain member</H1
-><P
->This is a VERY ROUGH guide to setting up the current (November 2001)
-pre-alpha version of Samba 3.0 with kerberos authentication against a
-Windows2000 KDC. The procedures listed here are likely to change as
-the code develops.</P
-><P
->Pieces you need before you begin:
-<P
-></P
-><TABLE
-BORDER="0"
-><TBODY
-><TR
-><TD
->a Windows 2000 server.</TD
-></TR
-><TR
-><TD
->samba 3.0 or higher.</TD
-></TR
-><TR
-><TD
->the MIT kerberos development libraries (either install from the above sources or use a package). The heimdal libraries will not work.</TD
-></TR
-><TR
-><TD
->the OpenLDAP development libraries.</TD
-></TR
-></TBODY
-></TABLE
-><P
-></P
-></P
-><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1178"
+NAME="AEN1189"
></A
->8.1. Installing the required packages for Debian</H2
+>8.5. Job sent, no output</H2
><P
->On Debian you need to install the following packages:
-<P
-></P
-><TABLE
-BORDER="0"
-><TBODY
-><TR
-><TD
->libkrb5-dev</TD
-></TR
-><TR
-><TD
->krb5-user</TD
-></TR
-></TBODY
-></TABLE
+>This is the most frustrating part of printing. You may have sent the
+job, verified that the job was forwarded, set up a wrapper around
+the command to send the file, but there was no output from the printer.</P
+><P
+>First, check to make sure that the job REALLY is getting to the
+right print queue. If you are using a BSD or LPRng print spooler,
+you can temporarily stop the printing of jobs. Jobs can still be
+submitted, but they will not be printed. Use:</P
><P
+><PRE
+CLASS="PROGRAMLISTING"
+> lpc -Pprinter stop</PRE
></P
+><P
+>Now submit a print job and then use 'lpq -Pprinter' to see if the
+job is in the print queue. If it is not in the print queue then
+you will have to find out why it is not being accepted for printing.</P
+><P
+>Next, you may want to check to see what the format of the job really
+was. With the assistance of the system administrator you can view
+the submitted jobs files. You may be surprised to find that these
+are not in what you would expect to call a printable format.
+You can use the UNIX 'file' utitily to determine what the job
+format actually is:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> cd /var/spool/lpd/printer # spool directory of print jobs
+ ls # find job files
+ file dfA001myhost</PRE
></P
+><P
+>You should make sure that your printer supports this format OR that
+your system administrator has installed a 'print filter' that will
+convert the file to a format appropriate for your printer.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1184"
+NAME="AEN1200"
></A
->8.2. Installing the required packages for RedHat</H2
+>8.6. Job sent, strange output</H2
><P
->On RedHat this means you should have at least:
-<P
-></P
-><TABLE
-BORDER="0"
-><TBODY
-><TR
-><TD
->krb5-workstation (for kinit)</TD
-></TR
-><TR
-><TD
->krb5-libs (for linking with)</TD
-></TR
-><TR
-><TD
->krb5-devel (because you are compiling from source)</TD
-></TR
-></TBODY
-></TABLE
-><P
-></P
-></P
-><P
->in addition to the standard development environment.</P
-><P
->Note that these are not standard on a RedHat install, and you may need
-to get them off CD2.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1193"
-></A
->8.3. Compile Samba</H2
+>Once you have the job printing, you can then start worrying about
+making it print nicely.</P
><P
->If your kerberos libraries are in a non-standard location then
- remember to add the configure option --with-krb5=DIR.</P
+>The most common problem is extra pages of output: banner pages
+OR blank pages at the end.</P
><P
->After you run configure make sure that include/config.h contains
- lines like this:</P
+>If you are getting banner pages, check and make sure that the
+printcap option or printer option is configured for no banners.
+If you have a printcap, this is the :sh (suppress header or banner
+page) option. You should have the following in your printer.</P
><P
><PRE
CLASS="PROGRAMLISTING"
->#define HAVE_KRB5 1
-#define HAVE_LDAP 1</PRE
+> printer: ... :sh</PRE
></P
><P
->If it doesn't then configure did not find your krb5 libraries or
- your ldap libraries. Look in config.log to figure out why and fix
- it.</P
+>If you have this option and are still getting banner pages, there
+is a strong chance that your printer is generating them for you
+automatically. You should make sure that banner printing is disabled
+for the printer. This usually requires using the printer setup software
+or procedures supplied by the printer manufacturer.</P
><P
->Then compile and install Samba as usual. You must use at least the
- following 3 options in smb.conf:</P
+>If you get an extra page of output, this could be due to problems
+with your job format, or if you are generating PostScript jobs,
+incorrect setting on your printer driver on the MicroSoft client.
+For example, under Win95 there is a option:</P
><P
><PRE
CLASS="PROGRAMLISTING"
-> realm = YOUR.KERBEROS.REALM
- ads server = your.kerberos.server
- security = ADS
- encrypt passwords = yes</PRE
+> Printers|Printer Name|(Right Click)Properties|Postscript|Advanced|</PRE
></P
><P
->Strictly speaking, you can omit the realm name and you can use an IP
- address for the ads server. In that case Samba will auto-detect these.</P
-><P
->You do *not* need a smbpasswd file, although it won't do any harm
- and if you have one then Samba will be able to fall back to normal
- password security for older clients. I expect that the above
- required options will change soon when we get better active
- directory integration.</P
+>that allows you to choose if a Ctrl-D is appended to all jobs.
+This is a very bad thing to do, as most spooling systems will
+automatically add a ^D to the end of the job if it is detected as
+PostScript. The multiple ^D may cause an additional page of output.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1205"
+NAME="AEN1212"
></A
->8.4. Setup your /etc/krb5.conf</H2
-><P
->The minimal configuration for krb5.conf is:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> [realms]
- YOUR.KERBEROS.REALM = {
- kdc = your.kerberos.server
- }</PRE
-></P
-><P
->Test your config by doing a "kinit USERNAME@REALM" and making sure that
- your password is accepted by the Win2000 KDC. </P
-><P
->NOTE: The realm must be uppercase. </P
+>8.7. Raw PostScript printed</H2
><P
->You also must ensure that you can do a reverse DNS lookup on the IP
-address of your KDC. Also, the name that this reverse lookup maps to
-must either be the netbios name of the KDC (ie. the hostname with no
-domain attached) or it can alternatively be the netbios name
-followed by the realm. </P
-><P
->The easiest way to ensure you get this right is to add a /etc/hosts
-entry mapping the IP address of your KDC to its netbios name. If you
-don't get this right then you will get a "local error" when you try
-to join the realm.</P
-><P
->If all you want is kerberos support in smbclient then you can skip
-straight to step 5 now. Step 3 is only needed if you want kerberos
-support in smbd.</P
+>This is a problem that is usually caused by either the print spooling
+system putting information at the start of the print job that makes
+the printer think the job is a text file, or your printer simply
+does not support PostScript. You may need to enable 'Automatic
+Format Detection' on your printer.</P
></DIV
><DIV
CLASS="SECT1"
><A
NAME="AEN1215"
></A
->8.5. Create the computer account</H2
-><P
->Do a "kinit" as a user that has authority to change arbitrary
-passwords on the KDC ("Administrator" is a good choice). Then as a
-user that has write permission on the Samba private directory
-(usually root) run:
-<B
-CLASS="COMMAND"
->net ads join</B
-></P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1219"
-></A
->8.5.1. Possible errors</H3
-><P
-><P
-></P
-><DIV
-CLASS="VARIABLELIST"
-><DL
-><DT
->"bash: kinit: command not found"</DT
-><DD
-><P
->kinit is in the krb5-workstation RPM on RedHat systems, and is in /usr/kerberos/bin, so it won't be in the path until you log in again (or open a new terminal)</P
-></DD
-><DT
->"ADS support not compiled in"</DT
-><DD
-><P
->Samba must be reconfigured (remove config.cache) and recompiled (make clean all install) after the kerberos libs and headers are installed.</P
-></DD
-></DL
-></DIV
-></P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1231"
-></A
->8.6. Test your server setup</H2
+>8.8. Advanced Printing</H2
><P
->On a Windows 2000 client try <B
-CLASS="COMMAND"
->net use * \\server\share</B
->. You should
-be logged in with kerberos without needing to know a password. If
-this fails then run <B
-CLASS="COMMAND"
->klist tickets</B
->. Did you get a ticket for the
-server? Does it have an encoding type of DES-CBC-MD5 ? </P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1236"
-></A
->8.7. Testing with smbclient</H2
-><P
->On your Samba server try to login to a Win2000 server or your Samba
-server using smbclient and kerberos. Use smbclient as usual, but
-specify the -k option to choose kerberos authentication.</P
+>Note that you can do some pretty magic things by using your
+imagination with the "print command" option and some shell scripts.
+Doing print accounting is easy by passing the %U option to a print
+command shell script. You could even make the print command detect
+the type of output and its size and send it to an appropriate
+printer.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1239"
+NAME="AEN1218"
></A
->8.8. Notes</H2
-><P
->You must change administrator password at least once after DC install,
- to create the right encoding types</P
+>8.9. Real debugging</H2
><P
->w2k doesn't seem to create the _kerberos._udp and _ldap._tcp in
- their defaults DNS setup. Maybe fixed in service packs?</P
+>If the above debug tips don't help, then maybe you need to bring in
+the bug guns, system tracing. See Tracing.txt in this directory.</P
></DIV
></DIV
><DIV
CLASS="CHAPTER"
><HR><H1
><A
-NAME="DOMAIN-SECURITY"
+NAME="SECURITYLEVELS"
></A
->Chapter 9. Samba as a NT4 domain member</H1
+>Chapter 9. Security levels</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN1261"
+NAME="AEN1231"
></A
->9.1. Joining an NT Domain with Samba 2.2</H2
-><P
->Assume you have a Samba 2.x server with a NetBIOS name of
- <TT
-CLASS="CONSTANT"
->SERV1</TT
-> and are joining an NT domain called
- <TT
-CLASS="CONSTANT"
->DOM</TT
->, which has a PDC with a NetBIOS name
- of <TT
-CLASS="CONSTANT"
->DOMPDC</TT
-> and two backup domain controllers
- with NetBIOS names <TT
-CLASS="CONSTANT"
->DOMBDC1</TT
-> and <TT
-CLASS="CONSTANT"
->DOMBDC2
- </TT
->.</P
+>9.1. Introduction</H2
><P
->In order to join the domain, first stop all Samba daemons
- and run the command:</P
+>Samba supports the following options to the global smb.conf parameter</P
><P
+><PRE
+CLASS="PROGRAMLISTING"
+>[global]
+<A
+HREF="smb.conf.5.html#SECURITY"
+TARGET="_top"
><TT
-CLASS="PROMPT"
->root# </TT
-><TT
-CLASS="USERINPUT"
-><B
->smbpasswd -j DOM -r DOMPDC
- -U<TT
-CLASS="REPLACEABLE"
+CLASS="PARAMETER"
><I
->Administrator%password</I
-></TT
-></B
+>security</I
></TT
+></A
+> = [share|user(default)|domain|ads]</PRE
></P
><P
->as we are joining the domain DOM and the PDC for that domain
- (the only machine that has write access to the domain SAM database)
- is DOMPDC. The <TT
-CLASS="REPLACEABLE"
-><I
->Administrator%password</I
-></TT
-> is
- the login name and password for an account which has the necessary
- privilege to add machines to the domain. If this is successful
- you will see the message:</P
-><P
-><TT
-CLASS="COMPUTEROUTPUT"
+>Please refer to the smb.conf man page for usage information and to the document
+<A
+HREF="DOMAIN_MEMBER.html"
+TARGET="_top"
+>DOMAIN_MEMBER.html</A
+> for further background details
+on domain mode security. The Windows 2000 Kerberos domain security model
+(security = ads) is described in the <A
+HREF="ADS-HOWTO.html"
+TARGET="_top"
+>ADS-HOWTO.html</A
+>.</P
+><P
+>Of the above, "security = server" means that Samba reports to clients that
+it is running in "user mode" but actually passes off all authentication
+requests to another "user mode" server. This requires an additional
+parameter "password server =" that points to the real authentication server.
+That real authentication server can be another Samba server or can be a
+Windows NT server, the later natively capable of encrypted password support.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN1242"
+></A
+>9.2. More complete description of security levels</H2
+><P
+>A SMB server tells the client at startup what "security level" it is
+running. There are two options "share level" and "user level". Which
+of these two the client receives affects the way the client then tries
+to authenticate itself. It does not directly affect (to any great
+extent) the way the Samba server does security. I know this is
+strange, but it fits in with the client/server approach of SMB. In SMB
+everything is initiated and controlled by the client, and the server
+can only tell the client what is available and whether an action is
+allowed. </P
+><P
+>I'll describe user level security first, as its simpler. In user level
+security the client will send a "session setup" command directly after
+the protocol negotiation. This contains a username and password. The
+server can either accept or reject that username/password
+combination. Note that at this stage the server has no idea what
+share the client will eventually try to connect to, so it can't base
+the "accept/reject" on anything other than:</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+>the username/password</P
+></LI
+><LI
+><P
+>the machine that the client is coming from</P
+></LI
+></OL
+><P
+>If the server accepts the username/password then the client expects to
+be able to mount any share (using a "tree connection") without
+specifying a password. It expects that all access rights will be as
+the username/password specified in the "session setup". </P
+><P
+>It is also possible for a client to send multiple "session setup"
+requests. When the server responds it gives the client a "uid" to use
+as an authentication tag for that username/password. The client can
+maintain multiple authentication contexts in this way (WinDD is an
+example of an application that does this)</P
+><P
+>Ok, now for share level security. In share level security the client
+authenticates itself separately for each share. It will send a
+password along with each "tree connection" (share mount). It does not
+explicitly send a username with this operation. The client is
+expecting a password to be associated with each share, independent of
+the user. This means that samba has to work out what username the
+client probably wants to use. It is never explicitly sent the
+username. Some commercial SMB servers such as NT actually associate
+passwords directly with shares in share level security, but samba
+always uses the unix authentication scheme where it is a
+username/password that is authenticated, not a "share/password".</P
+><P
+>Many clients send a "session setup" even if the server is in share
+level security. They normally send a valid username but no
+password. Samba records this username in a list of "possible
+usernames". When the client then does a "tree connection" it also adds
+to this list the name of the share they try to connect to (useful for
+home directories) and any users listed in the "user =" smb.conf
+line. The password is then checked in turn against these "possible
+usernames". If a match is found then the client is authenticated as
+that user.</P
+><P
+>Finally "server level" security. In server level security the samba
+server reports to the client that it is in user level security. The
+client then does a "session setup" as described earlier. The samba
+server takes the username/password that the client sends and attempts
+to login to the "password server" by sending exactly the same
+username/password that it got from the client. If that server is in
+user level security and accepts the password then samba accepts the
+clients connection. This allows the samba server to use another SMB
+server as the "password server". </P
+><P
+>You should also note that at the very start of all this, where the
+server tells the client what security level it is in, it also tells
+the client if it supports encryption. If it does then it supplies the
+client with a random "cryptkey". The client will then send all
+passwords in encrypted form. You have to compile samba with encryption
+enabled to support this feature, and you have to maintain a separate
+smbpasswd file with SMB style encrypted passwords. It is
+cryptographically impossible to translate from unix style encryption
+to SMB style encryption, although there are some fairly simple management
+schemes by which the two could be kept in sync.</P
+></DIV
+></DIV
+><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="DOMAIN-SECURITY"
+></A
+>Chapter 10. security = domain in Samba 2.x</H1
+><DIV
+CLASS="SECT1"
+><H2
+CLASS="SECT1"
+><A
+NAME="AEN1275"
+></A
+>10.1. Joining an NT Domain with Samba 2.2</H2
+><P
+>Assume you have a Samba 2.x server with a NetBIOS name of
+ <TT
+CLASS="CONSTANT"
+>SERV1</TT
+> and are joining an NT domain called
+ <TT
+CLASS="CONSTANT"
+>DOM</TT
+>, which has a PDC with a NetBIOS name
+ of <TT
+CLASS="CONSTANT"
+>DOMPDC</TT
+> and two backup domain controllers
+ with NetBIOS names <TT
+CLASS="CONSTANT"
+>DOMBDC1</TT
+> and <TT
+CLASS="CONSTANT"
+>DOMBDC2
+ </TT
+>.</P
+><P
+>In order to join the domain, first stop all Samba daemons
+ and run the command:</P
+><P
+><TT
+CLASS="PROMPT"
+>root# </TT
+><TT
+CLASS="USERINPUT"
+><B
+>smbpasswd -j DOM -r DOMPDC
+ -U<TT
+CLASS="REPLACEABLE"
+><I
+>Administrator%password</I
+></TT
+></B
+></TT
+></P
+><P
+>as we are joining the domain DOM and the PDC for that domain
+ (the only machine that has write access to the domain SAM database)
+ is DOMPDC. The <TT
+CLASS="REPLACEABLE"
+><I
+>Administrator%password</I
+></TT
+> is
+ the login name and password for an account which has the necessary
+ privilege to add machines to the domain. If this is successful
+ you will see the message:</P
+><P
+><TT
+CLASS="COMPUTEROUTPUT"
>smbpasswd: Joined domain DOM.</TT
>
</P
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1325"
+NAME="AEN1339"
></A
->9.2. Samba and Windows 2000 Domains</H2
+>10.2. Samba and Windows 2000 Domains</H2
><P
>Many people have asked regarding the state of Samba's ability to participate in
-a Windows 2000 Domain. Samba 3.0 is able to act as a member server of a Windows
+a Windows 2000 Domain. Samba 2.2 is able to act as a member server of a Windows
2000 domain operating in mixed or native mode.</P
><P
>There is much confusion between the circumstances that require a "mixed" mode
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1330"
+NAME="AEN1344"
></A
->9.3. Why is this better than security = server?</H2
+>10.3. Why is this better than security = server?</H2
><P
>Currently, domain security in Samba doesn't free you from
having to create local Unix users to represent the users attaching
>.</P
></DIV
></DIV
-></DIV
><DIV
-CLASS="PART"
+CLASS="CHAPTER"
+><HR><H1
><A
-NAME="AEN1346"
+NAME="WINBIND"
></A
+>Chapter 11. Unified Logons between Windows NT and UNIX using Winbind</H1
><DIV
-CLASS="TITLEPAGE"
-><H1
-CLASS="TITLE"
->III. Optional configuration</H1
-><DIV
-CLASS="PARTINTRO"
+CLASS="SECT1"
+><H2
+CLASS="SECT1"
><A
-NAME="AEN1348"
+NAME="AEN1397"
></A
-><H1
->Introduction</H1
+>11.1. Abstract</H2
><P
->Samba has several features that you might want or might not want to use. The chapters in this
-part each cover one specific feature.</P
+>Integration of UNIX and Microsoft Windows NT through
+ a unified logon has been considered a "holy grail" in heterogeneous
+ computing environments for a long time. We present
+ <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>winbind</I
+></SPAN
+>, a component of the Samba suite
+ of programs as a solution to the unified logon problem. Winbind
+ uses a UNIX implementation
+ of Microsoft RPC calls, Pluggable Authentication Modules, and the Name
+ Service Switch to allow Windows NT domain users to appear and operate
+ as UNIX users on a UNIX machine. This paper describes the winbind
+ system, explaining the functionality it provides, how it is configured,
+ and how it works internally.</P
></DIV
><DIV
-CLASS="TOC"
-><DL
-><DT
-><B
->Table of Contents</B
-></DT
-><DT
->10. <A
-HREF="#INTEGRATE-MS-NETWORKS"
->Integrating MS Windows networks with Samba</A
-></DT
-><DD
-><DL
-><DT
->10.1. <A
-HREF="#AEN1362"
->Agenda</A
-></DT
-><DT
->10.2. <A
-HREF="#AEN1384"
->Name Resolution in a pure Unix/Linux world</A
-></DT
-><DD
-><DL
-><DT
->10.2.1. <A
-HREF="#AEN1400"
-><TT
-CLASS="FILENAME"
->/etc/hosts</TT
-></A
-></DT
-><DT
->10.2.2. <A
-HREF="#AEN1416"
-><TT
-CLASS="FILENAME"
->/etc/resolv.conf</TT
-></A
-></DT
-><DT
->10.2.3. <A
-HREF="#AEN1427"
-><TT
-CLASS="FILENAME"
->/etc/host.conf</TT
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN1401"
></A
-></DT
-><DT
->10.2.4. <A
-HREF="#AEN1435"
-><TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
-></A
-></DT
-></DL
-></DD
-><DT
->10.3. <A
-HREF="#AEN1447"
->Name resolution as used within MS Windows networking</A
-></DT
-><DD
-><DL
-><DT
->10.3.1. <A
-HREF="#AEN1459"
->The NetBIOS Name Cache</A
-></DT
-><DT
->10.3.2. <A
-HREF="#AEN1464"
->The LMHOSTS file</A
-></DT
-><DT
->10.3.3. <A
-HREF="#AEN1472"
->HOSTS file</A
-></DT
-><DT
->10.3.4. <A
-HREF="#AEN1477"
->DNS Lookup</A
-></DT
-><DT
->10.3.5. <A
-HREF="#AEN1480"
->WINS Lookup</A
-></DT
-></DL
-></DD
-><DT
->10.4. <A
-HREF="#AEN1492"
->How browsing functions and how to deploy stable and
-dependable browsing using Samba</A
-></DT
-><DT
->10.5. <A
-HREF="#AEN1502"
->MS Windows security options and how to configure
-Samba for seemless integration</A
-></DT
-><DD
-><DL
-><DT
->10.5.1. <A
-HREF="#AEN1530"
->Use MS Windows NT as an authentication server</A
-></DT
-><DT
->10.5.2. <A
-HREF="#AEN1538"
->Make Samba a member of an MS Windows NT security domain</A
-></DT
-><DT
->10.5.3. <A
-HREF="#AEN1555"
->Configure Samba as an authentication server</A
-></DT
-></DL
-></DD
-><DT
->10.6. <A
-HREF="#AEN1572"
->Conclusions</A
-></DT
-></DL
-></DD
-><DT
->11. <A
-HREF="#UNIX-PERMISSIONS"
->UNIX Permission Bits and Windows NT Access Control Lists</A
-></DT
-><DD
-><DL
-><DT
->11.1. <A
-HREF="#AEN1593"
->Viewing and changing UNIX permissions using the NT
- security dialogs</A
-></DT
-><DT
->11.2. <A
-HREF="#AEN1602"
->How to view file security on a Samba share</A
-></DT
-><DT
->11.3. <A
-HREF="#AEN1613"
->Viewing file ownership</A
-></DT
-><DT
->11.4. <A
-HREF="#AEN1633"
->Viewing file or directory permissions</A
-></DT
-><DD
-><DL
-><DT
->11.4.1. <A
-HREF="#AEN1648"
->File Permissions</A
-></DT
-><DT
->11.4.2. <A
-HREF="#AEN1662"
->Directory Permissions</A
-></DT
-></DL
-></DD
-><DT
->11.5. <A
-HREF="#AEN1669"
->Modifying file or directory permissions</A
-></DT
-><DT
->11.6. <A
-HREF="#AEN1691"
->Interaction with the standard Samba create mask
- parameters</A
-></DT
-><DT
->11.7. <A
-HREF="#AEN1755"
->Interaction with the standard Samba file attribute
- mapping</A
-></DT
-></DL
-></DD
-><DT
->12. <A
-HREF="#PAM"
->Configuring PAM for distributed but centrally
-managed authentication</A
-></DT
-><DD
-><DL
-><DT
->12.1. <A
-HREF="#AEN1776"
->Samba and PAM</A
-></DT
-><DT
->12.2. <A
-HREF="#AEN1820"
->Distributed Authentication</A
-></DT
-><DT
->12.3. <A
-HREF="#AEN1827"
->PAM Configuration in smb.conf</A
-></DT
-></DL
-></DD
-><DT
->13. <A
-HREF="#MSDFS"
->Hosting a Microsoft Distributed File System tree on Samba</A
-></DT
-><DD
-><DL
-><DT
->13.1. <A
-HREF="#AEN1847"
->Instructions</A
-></DT
-><DD
-><DL
-><DT
->13.1.1. <A
-HREF="#AEN1882"
->Notes</A
-></DT
-></DL
-></DD
-></DL
-></DD
-><DT
->14. <A
-HREF="#PRINTING"
->Printing Support</A
-></DT
-><DD
-><DL
-><DT
->14.1. <A
-HREF="#AEN1908"
->Introduction</A
-></DT
-><DT
->14.2. <A
-HREF="#AEN1930"
->Configuration</A
-></DT
-><DD
-><DL
-><DT
->14.2.1. <A
-HREF="#AEN1938"
->Creating [print$]</A
-></DT
-><DT
->14.2.2. <A
-HREF="#AEN1973"
->Setting Drivers for Existing Printers</A
-></DT
-><DT
->14.2.3. <A
-HREF="#AEN1989"
->Support a large number of printers</A
-></DT
-><DT
->14.2.4. <A
-HREF="#AEN2000"
->Adding New Printers via the Windows NT APW</A
-></DT
-><DT
->14.2.5. <A
-HREF="#AEN2030"
->Samba and Printer Ports</A
-></DT
-></DL
-></DD
-><DT
->14.3. <A
-HREF="#AEN2038"
->The Imprints Toolset</A
-></DT
-><DD
-><DL
-><DT
->14.3.1. <A
-HREF="#AEN2042"
->What is Imprints?</A
-></DT
-><DT
->14.3.2. <A
-HREF="#AEN2052"
->Creating Printer Driver Packages</A
-></DT
-><DT
->14.3.3. <A
-HREF="#AEN2055"
->The Imprints server</A
-></DT
-><DT
->14.3.4. <A
-HREF="#AEN2059"
->The Installation Client</A
-></DT
-></DL
-></DD
-><DT
->14.4. <A
-HREF="#AEN2081"
->Diagnosis</A
-></DT
-><DD
-><DL
-><DT
->14.4.1. <A
-HREF="#AEN2083"
->Introduction</A
-></DT
-><DT
->14.4.2. <A
-HREF="#AEN2099"
->Debugging printer problems</A
-></DT
-><DT
->14.4.3. <A
-HREF="#AEN2108"
->What printers do I have?</A
-></DT
-><DT
->14.4.4. <A
-HREF="#AEN2116"
->Setting up printcap and print servers</A
-></DT
-><DT
->14.4.5. <A
-HREF="#AEN2144"
->Job sent, no output</A
-></DT
-><DT
->14.4.6. <A
-HREF="#AEN2155"
->Job sent, strange output</A
-></DT
-><DT
->14.4.7. <A
-HREF="#AEN2167"
->Raw PostScript printed</A
-></DT
-><DT
->14.4.8. <A
-HREF="#AEN2170"
->Advanced Printing</A
-></DT
-><DT
->14.4.9. <A
-HREF="#AEN2173"
->Real debugging</A
-></DT
-></DL
-></DD
-></DL
-></DD
-><DT
->15. <A
-HREF="#SECURITYLEVELS"
->Security levels</A
-></DT
-><DD
-><DL
-><DT
->15.1. <A
-HREF="#AEN2186"
->Introduction</A
-></DT
-><DT
->15.2. <A
-HREF="#AEN2197"
->More complete description of security levels</A
-></DT
-></DL
-></DD
-><DT
->16. <A
-HREF="#WINBIND"
->Unified Logons between Windows NT and UNIX using Winbind</A
-></DT
-><DD
-><DL
-><DT
->16.1. <A
-HREF="#AEN2249"
->Abstract</A
-></DT
-><DT
->16.2. <A
-HREF="#AEN2253"
->Introduction</A
-></DT
-><DT
->16.3. <A
-HREF="#AEN2266"
->What Winbind Provides</A
-></DT
-><DD
-><DL
-><DT
->16.3.1. <A
-HREF="#AEN2273"
->Target Uses</A
-></DT
-></DL
-></DD
-><DT
->16.4. <A
-HREF="#AEN2277"
->How Winbind Works</A
-></DT
-><DD
-><DL
-><DT
->16.4.1. <A
-HREF="#AEN2282"
->Microsoft Remote Procedure Calls</A
-></DT
-><DT
->16.4.2. <A
-HREF="#AEN2286"
->Name Service Switch</A
-></DT
-><DT
->16.4.3. <A
-HREF="#AEN2302"
->Pluggable Authentication Modules</A
-></DT
-><DT
->16.4.4. <A
-HREF="#AEN2310"
->User and Group ID Allocation</A
-></DT
-><DT
->16.4.5. <A
-HREF="#AEN2314"
->Result Caching</A
-></DT
-></DL
-></DD
-><DT
->16.5. <A
-HREF="#AEN2317"
->Installation and Configuration</A
-></DT
-><DD
-><DL
-><DT
->16.5.1. <A
-HREF="#AEN2324"
->Introduction</A
-></DT
-><DT
->16.5.2. <A
-HREF="#AEN2337"
->Requirements</A
-></DT
-><DT
->16.5.3. <A
-HREF="#AEN2351"
->Testing Things Out</A
-></DT
-></DL
-></DD
-><DT
->16.6. <A
-HREF="#AEN2566"
->Limitations</A
-></DT
-><DT
->16.7. <A
-HREF="#AEN2576"
->Conclusion</A
-></DT
-></DL
-></DD
-><DT
->17. <A
-HREF="#PDB-MYSQL"
->Passdb MySQL plugin</A
-></DT
-><DD
-><DL
-><DT
->17.1. <A
-HREF="#AEN2590"
->Building</A
-></DT
-><DT
->17.2. <A
-HREF="#AEN2596"
->Configuring</A
-></DT
-><DT
->17.3. <A
-HREF="#AEN2611"
->Using plaintext passwords or encrypted password</A
-></DT
-><DT
->17.4. <A
-HREF="#AEN2616"
->Getting non-column data from the table</A
-></DT
-></DL
-></DD
-><DT
->18. <A
-HREF="#PDB-XML"
->Passdb XML plugin</A
-></DT
-><DD
-><DL
-><DT
->18.1. <A
-HREF="#AEN2635"
->Building</A
-></DT
-><DT
->18.2. <A
-HREF="#AEN2641"
->Usage</A
-></DT
-></DL
-></DD
-><DT
->19. <A
-HREF="#SAMBA-LDAP-HOWTO"
->Storing Samba's User/Machine Account information in an LDAP Directory</A
-></DT
-><DD
-><DL
-><DT
->19.1. <A
-HREF="#AEN2664"
->Purpose</A
-></DT
-><DT
->19.2. <A
-HREF="#AEN2684"
->Introduction</A
-></DT
-><DT
->19.3. <A
-HREF="#AEN2713"
->Supported LDAP Servers</A
-></DT
-><DT
->19.4. <A
-HREF="#AEN2718"
->Schema and Relationship to the RFC 2307 posixAccount</A
-></DT
-><DT
->19.5. <A
-HREF="#AEN2730"
->Configuring Samba with LDAP</A
-></DT
-><DD
-><DL
-><DT
->19.5.1. <A
-HREF="#AEN2732"
->OpenLDAP configuration</A
-></DT
-><DT
->19.5.2. <A
-HREF="#AEN2749"
->Configuring Samba</A
-></DT
-></DL
-></DD
-><DT
->19.6. <A
-HREF="#AEN2777"
->Accounts and Groups management</A
-></DT
-><DT
->19.7. <A
-HREF="#AEN2782"
->Security and sambaAccount</A
-></DT
-><DT
->19.8. <A
-HREF="#AEN2802"
->LDAP specials attributes for sambaAccounts</A
-></DT
-><DT
->19.9. <A
-HREF="#AEN2872"
->Example LDIF Entries for a sambaAccount</A
-></DT
-><DT
->19.10. <A
-HREF="#AEN2880"
->Comments</A
-></DT
-></DL
-></DD
-><DT
->20. <A
-HREF="#CVS-ACCESS"
->HOWTO Access Samba source code via CVS</A
-></DT
-><DD
-><DL
-><DT
->20.1. <A
-HREF="#AEN2891"
->Introduction</A
-></DT
-><DT
->20.2. <A
-HREF="#AEN2896"
->CVS Access to samba.org</A
-></DT
-><DD
-><DL
-><DT
->20.2.1. <A
-HREF="#AEN2899"
->Access via CVSweb</A
-></DT
-><DT
->20.2.2. <A
-HREF="#AEN2904"
->Access via cvs</A
-></DT
-></DL
-></DD
-></DL
-></DD
-><DT
->21. <A
-HREF="#GROUPMAPPING"
->Group mapping HOWTO</A
-></DT
-><DT
->22. <A
-HREF="#SPEED"
->Samba performance issues</A
-></DT
-><DD
-><DL
-><DT
->22.1. <A
-HREF="#AEN2982"
->Comparisons</A
-></DT
-><DT
->22.2. <A
-HREF="#AEN2988"
->Oplocks</A
-></DT
-><DD
-><DL
-><DT
->22.2.1. <A
-HREF="#AEN2990"
->Overview</A
-></DT
-><DT
->22.2.2. <A
-HREF="#AEN2998"
->Level2 Oplocks</A
-></DT
-><DT
->22.2.3. <A
-HREF="#AEN3004"
->Old 'fake oplocks' option - deprecated</A
-></DT
-></DL
-></DD
-><DT
->22.3. <A
-HREF="#AEN3008"
->Socket options</A
-></DT
-><DT
->22.4. <A
-HREF="#AEN3015"
->Read size</A
-></DT
-><DT
->22.5. <A
-HREF="#AEN3020"
->Max xmit</A
-></DT
-><DT
->22.6. <A
-HREF="#AEN3025"
->Locking</A
-></DT
-><DT
->22.7. <A
-HREF="#AEN3029"
->Share modes</A
-></DT
-><DT
->22.8. <A
-HREF="#AEN3034"
->Log level</A
-></DT
-><DT
->22.9. <A
-HREF="#AEN3037"
->Wide lines</A
-></DT
-><DT
->22.10. <A
-HREF="#AEN3040"
->Read raw</A
-></DT
-><DT
->22.11. <A
-HREF="#AEN3045"
->Write raw</A
-></DT
-><DT
->22.12. <A
-HREF="#AEN3049"
->Read prediction</A
-></DT
-><DT
->22.13. <A
-HREF="#AEN3056"
->Memory mapping</A
-></DT
-><DT
->22.14. <A
-HREF="#AEN3061"
->Slow Clients</A
-></DT
-><DT
->22.15. <A
-HREF="#AEN3065"
->Slow Logins</A
-></DT
-><DT
->22.16. <A
-HREF="#AEN3068"
->Client tuning</A
-></DT
-><DT
->22.17. <A
-HREF="#AEN3100"
->My Results</A
-></DT
-></DL
-></DD
-></DL
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="INTEGRATE-MS-NETWORKS"
-></A
->Chapter 10. Integrating MS Windows networks with Samba</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN1362"
-></A
->10.1. Agenda</H2
-><P
->To identify the key functional mechanisms of MS Windows networking
-to enable the deployment of Samba as a means of extending and/or
-replacing MS Windows NT/2000 technology.</P
-><P
->We will examine:</P
-><P
-></P
-><OL
-TYPE="1"
-><LI
-><P
->Name resolution in a pure Unix/Linux TCP/IP
- environment
- </P
-></LI
-><LI
-><P
->Name resolution as used within MS Windows
- networking
- </P
-></LI
-><LI
-><P
->How browsing functions and how to deploy stable
- and dependable browsing using Samba
- </P
-></LI
-><LI
-><P
->MS Windows security options and how to
- configure Samba for seemless integration
- </P
-></LI
-><LI
-><P
->Configuration of Samba as:</P
-><P
-></P
-><OL
-TYPE="a"
-><LI
-><P
->A stand-alone server</P
-></LI
-><LI
-><P
->An MS Windows NT 3.x/4.0 security domain member
- </P
-></LI
-><LI
-><P
->An alternative to an MS Windows NT 3.x/4.0 Domain Controller
- </P
-></LI
-></OL
-></LI
-></OL
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1384"
-></A
->10.2. Name Resolution in a pure Unix/Linux world</H2
-><P
->The key configuration files covered in this section are:</P
-><P
-></P
-><UL
-><LI
-><P
-><TT
-CLASS="FILENAME"
->/etc/hosts</TT
-></P
-></LI
-><LI
-><P
-><TT
-CLASS="FILENAME"
->/etc/resolv.conf</TT
-></P
-></LI
-><LI
-><P
-><TT
-CLASS="FILENAME"
->/etc/host.conf</TT
-></P
-></LI
-><LI
-><P
-><TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
-></P
-></LI
-></UL
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1400"
-></A
->10.2.1. <TT
-CLASS="FILENAME"
->/etc/hosts</TT
-></H3
-><P
->Contains a static list of IP Addresses and names.
-eg:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> 127.0.0.1 localhost localhost.localdomain
- 192.168.1.1 bigbox.caldera.com bigbox alias4box</PRE
-></P
-><P
->The purpose of <TT
-CLASS="FILENAME"
->/etc/hosts</TT
-> is to provide a
-name resolution mechanism so that uses do not need to remember
-IP addresses.</P
-><P
->Network packets that are sent over the physical network transport
-layer communicate not via IP addresses but rather using the Media
-Access Control address, or MAC address. IP Addresses are currently
-32 bits in length and are typically presented as four (4) decimal
-numbers that are separated by a dot (or period). eg: 168.192.1.1</P
-><P
->MAC Addresses use 48 bits (or 6 bytes) and are typically represented
-as two digit hexadecimal numbers separated by colons. eg:
-40:8e:0a:12:34:56</P
-><P
->Every network interfrace must have an MAC address. Associated with
-a MAC address there may be one or more IP addresses. There is NO
-relationship between an IP address and a MAC address, all such assignments
-are arbitary or discretionary in nature. At the most basic level all
-network communications takes place using MAC addressing. Since MAC
-addresses must be globally unique, and generally remains fixed for
-any particular interface, the assignment of an IP address makes sense
-from a network management perspective. More than one IP address can
-be assigned per MAC address. One address must be the primary IP address,
-this is the address that will be returned in the ARP reply.</P
-><P
->When a user or a process wants to communicate with another machine
-the protocol implementation ensures that the "machine name" or "host
-name" is resolved to an IP address in a manner that is controlled
-by the TCP/IP configuration control files. The file
-<TT
-CLASS="FILENAME"
->/etc/hosts</TT
-> is one such file.</P
-><P
->When the IP address of the destination interface has been
-determined a protocol called ARP/RARP is used to identify
-the MAC address of the target interface. ARP stands for Address
-Resolution Protocol, and is a broadcast oriented method that
-uses UDP (User Datagram Protocol) to send a request to all
-interfaces on the local network segment using the all 1's MAC
-address. Network interfaces are programmed to respond to two
-MAC addresses only; their own unique address and the address
-ff:ff:ff:ff:ff:ff. The reply packet from an ARP request will
-contain the MAC address and the primary IP address for each
-interface.</P
-><P
->The <TT
-CLASS="FILENAME"
->/etc/hosts</TT
-> file is foundational to all
-Unix/Linux TCP/IP installations and as a minumum will contain
-the localhost and local network interface IP addresses and the
-primary names by which they are known within the local machine.
-This file helps to prime the pump so that a basic level of name
-resolution can exist before any other method of name resolution
-becomes available.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1416"
-></A
->10.2.2. <TT
-CLASS="FILENAME"
->/etc/resolv.conf</TT
-></H3
-><P
->This file tells the name resolution libraries:</P
-><P
-></P
-><UL
-><LI
-><P
->The name of the domain to which the machine
- belongs
- </P
-></LI
-><LI
-><P
->The name(s) of any domains that should be
- automatically searched when trying to resolve unqualified
- host names to their IP address
- </P
-></LI
-><LI
-><P
->The name or IP address of available Domain
- Name Servers that may be asked to perform name to address
- translation lookups
- </P
-></LI
-></UL
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1427"
-></A
->10.2.3. <TT
-CLASS="FILENAME"
->/etc/host.conf</TT
-></H3
-><P
-><TT
-CLASS="FILENAME"
->/etc/host.conf</TT
-> is the primary means by
-which the setting in /etc/resolv.conf may be affected. It is a
-critical configuration file. This file controls the order by
-which name resolution may procede. The typical structure is:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> order hosts,bind
- multi on</PRE
-></P
-><P
->then both addresses should be returned. Please refer to the
-man page for host.conf for further details.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1435"
-></A
->10.2.4. <TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
-></H3
-><P
->This file controls the actual name resolution targets. The
-file typically has resolver object specifications as follows:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> # /etc/nsswitch.conf
- #
- # Name Service Switch configuration file.
- #
-
- passwd: compat
- # Alternative entries for password authentication are:
- # passwd: compat files nis ldap winbind
- shadow: compat
- group: compat
-
- hosts: files nis dns
- # Alternative entries for host name resolution are:
- # hosts: files dns nis nis+ hesoid db compat ldap wins
- networks: nis files dns
-
- ethers: nis files
- protocols: nis files
- rpc: nis files
- services: nis files</PRE
-></P
-><P
->Of course, each of these mechanisms requires that the appropriate
-facilities and/or services are correctly configured.</P
-><P
->It should be noted that unless a network request/message must be
-sent, TCP/IP networks are silent. All TCP/IP communications assumes a
-principal of speaking only when necessary.</P
-><P
->Starting with version 2.2.0 samba has Linux support for extensions to
-the name service switch infrastructure so that linux clients will
-be able to obtain resolution of MS Windows NetBIOS names to IP
-Addresses. To gain this functionality Samba needs to be compiled
-with appropriate arguments to the make command (ie: <B
-CLASS="COMMAND"
->make
-nsswitch/libnss_wins.so</B
->). The resulting library should
-then be installed in the <TT
-CLASS="FILENAME"
->/lib</TT
-> directory and
-the "wins" parameter needs to be added to the "hosts:" line in
-the <TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
-> file. At this point it
-will be possible to ping any MS Windows machine by it's NetBIOS
-machine name, so long as that machine is within the workgroup to
-which both the samba machine and the MS Windows machine belong.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1447"
-></A
->10.3. Name resolution as used within MS Windows networking</H2
-><P
->MS Windows networking is predicated about the name each machine
-is given. This name is known variously (and inconsistently) as
-the "computer name", "machine name", "networking name", "netbios name",
-"SMB name". All terms mean the same thing with the exception of
-"netbios name" which can apply also to the name of the workgroup or the
-domain name. The terms "workgroup" and "domain" are really just a
-simply name with which the machine is associated. All NetBIOS names
-are exactly 16 characters in length. The 16th character is reserved.
-It is used to store a one byte value that indicates service level
-information for the NetBIOS name that is registered. A NetBIOS machine
-name is therefore registered for each service type that is provided by
-the client/server.</P
-><P
->The following are typical NetBIOS name/service type registrations:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> Unique NetBIOS Names:
- MACHINENAME<00> = Server Service is running on MACHINENAME
- MACHINENAME<03> = Generic Machine Name (NetBIOS name)
- MACHINENAME<20> = LanMan Server service is running on MACHINENAME
- WORKGROUP<1b> = Domain Master Browser
-
- Group Names:
- WORKGROUP<03> = Generic Name registered by all members of WORKGROUP
- WORKGROUP<1c> = Domain Controllers / Netlogon Servers
- WORKGROUP<1d> = Local Master Browsers
- WORKGROUP<1e> = Internet Name Resolvers</PRE
-></P
-><P
->It should be noted that all NetBIOS machines register their own
-names as per the above. This is in vast contrast to TCP/IP
-installations where traditionally the system administrator will
-determine in the /etc/hosts or in the DNS database what names
-are associated with each IP address.</P
-><P
->One further point of clarification should be noted, the <TT
-CLASS="FILENAME"
->/etc/hosts</TT
->
-file and the DNS records do not provide the NetBIOS name type information
-that MS Windows clients depend on to locate the type of service that may
-be needed. An example of this is what happens when an MS Windows client
-wants to locate a domain logon server. It find this service and the IP
-address of a server that provides it by performing a lookup (via a
-NetBIOS broadcast) for enumeration of all machines that have
-registered the name type *<1c>. A logon request is then sent to each
-IP address that is returned in the enumerated list of IP addresses. Which
-ever machine first replies then ends up providing the logon services.</P
-><P
->The name "workgroup" or "domain" really can be confusing since these
-have the added significance of indicating what is the security
-architecture of the MS Windows network. The term "workgroup" indicates
-that the primary nature of the network environment is that of a
-peer-to-peer design. In a WORKGROUP all machines are responsible for
-their own security, and generally such security is limited to use of
-just a password (known as SHARE MODE security). In most situations
-with peer-to-peer networking the users who control their own machines
-will simply opt to have no security at all. It is possible to have
-USER MODE security in a WORKGROUP environment, thus requiring use
-of a user name and a matching password.</P
-><P
->MS Windows networking is thus predetermined to use machine names
-for all local and remote machine message passing. The protocol used is
-called Server Message Block (SMB) and this is implemented using
-the NetBIOS protocol (Network Basic Input Output System). NetBIOS can
-be encapsulated using LLC (Logical Link Control) protocol - in which case
-the resulting protocol is called NetBEUI (Network Basic Extended User
-Interface). NetBIOS can also be run over IPX (Internetworking Packet
-Exchange) protocol as used by Novell NetWare, and it can be run
-over TCP/IP protocols - in which case the resulting protocol is called
-NBT or NetBT, the NetBIOS over TCP/IP.</P
-><P
->MS Windows machines use a complex array of name resolution mechanisms.
-Since we are primarily concerned with TCP/IP this demonstration is
-limited to this area.</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1459"
-></A
->10.3.1. The NetBIOS Name Cache</H3
-><P
->All MS Windows machines employ an in memory buffer in which is
-stored the NetBIOS names and IP addresses for all external
-machines that that machine has communicated with over the
-past 10-15 minutes. It is more efficient to obtain an IP address
-for a machine from the local cache than it is to go through all the
-configured name resolution mechanisms.</P
-><P
->If a machine whose name is in the local name cache has been shut
-down before the name had been expired and flushed from the cache, then
-an attempt to exchange a message with that machine will be subject
-to time-out delays. i.e.: Its name is in the cache, so a name resolution
-lookup will succeed, but the machine can not respond. This can be
-frustrating for users - but it is a characteristic of the protocol.</P
-><P
->The MS Windows utility that allows examination of the NetBIOS
-name cache is called "nbtstat". The Samba equivalent of this
-is called "nmblookup".</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1464"
-></A
->10.3.2. The LMHOSTS file</H3
-><P
->This file is usually located in MS Windows NT 4.0 or
-2000 in <TT
-CLASS="FILENAME"
->C:\WINNT\SYSTEM32\DRIVERS\ETC</TT
-> and contains
-the IP Address and the machine name in matched pairs. The
-<TT
-CLASS="FILENAME"
->LMHOSTS</TT
-> file performs NetBIOS name
-to IP address mapping oriented.</P
-><P
->It typically looks like:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> # Copyright (c) 1998 Microsoft Corp.
- #
- # This is a sample LMHOSTS file used by the Microsoft Wins Client (NetBIOS
- # over TCP/IP) stack for Windows98
- #
- # This file contains the mappings of IP addresses to NT computernames
- # (NetBIOS) names. Each entry should be kept on an individual line.
- # The IP address should be placed in the first column followed by the
- # corresponding computername. The address and the comptername
- # should be separated by at least one space or tab. The "#" character
- # is generally used to denote the start of a comment (see the exceptions
- # below).
- #
- # This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
- # files and offers the following extensions:
- #
- # #PRE
- # #DOM:<domain>
- # #INCLUDE <filename>
- # #BEGIN_ALTERNATE
- # #END_ALTERNATE
- # \0xnn (non-printing character support)
- #
- # Following any entry in the file with the characters "#PRE" will cause
- # the entry to be preloaded into the name cache. By default, entries are
- # not preloaded, but are parsed only after dynamic name resolution fails.
- #
- # Following an entry with the "#DOM:<domain>" tag will associate the
- # entry with the domain specified by <domain>. This affects how the
- # browser and logon services behave in TCP/IP environments. To preload
- # the host name associated with #DOM entry, it is necessary to also add a
- # #PRE to the line. The <domain> is always preloaded although it will not
- # be shown when the name cache is viewed.
- #
- # Specifying "#INCLUDE <filename>" will force the RFC NetBIOS (NBT)
- # software to seek the specified <filename> and parse it as if it were
- # local. <filename> is generally a UNC-based name, allowing a
- # centralized lmhosts file to be maintained on a server.
- # It is ALWAYS necessary to provide a mapping for the IP address of the
- # server prior to the #INCLUDE. This mapping must use the #PRE directive.
- # In addtion the share "public" in the example below must be in the
- # LanManServer list of "NullSessionShares" in order for client machines to
- # be able to read the lmhosts file successfully. This key is under
- # \machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionshares
- # in the registry. Simply add "public" to the list found there.
- #
- # The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
- # statements to be grouped together. Any single successful include
- # will cause the group to succeed.
- #
- # Finally, non-printing characters can be embedded in mappings by
- # first surrounding the NetBIOS name in quotations, then using the
- # \0xnn notation to specify a hex value for a non-printing character.
- #
- # The following example illustrates all of these extensions:
- #
- # 102.54.94.97 rhino #PRE #DOM:networking #net group's DC
- # 102.54.94.102 "appname \0x14" #special app server
- # 102.54.94.123 popular #PRE #source server
- # 102.54.94.117 localsrv #PRE #needed for the include
- #
- # #BEGIN_ALTERNATE
- # #INCLUDE \\localsrv\public\lmhosts
- # #INCLUDE \\rhino\public\lmhosts
- # #END_ALTERNATE
- #
- # In the above example, the "appname" server contains a special
- # character in its name, the "popular" and "localsrv" server names are
- # preloaded, and the "rhino" server name is specified so it can be used
- # to later #INCLUDE a centrally maintained lmhosts file if the "localsrv"
- # system is unavailable.
- #
- # Note that the whole file is parsed including comments on each lookup,
- # so keeping the number of comments to a minimum will improve performance.
- # Therefore it is not advisable to simply add lmhosts file entries onto the
- # end of this file.</PRE
-></P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1472"
-></A
->10.3.3. HOSTS file</H3
-><P
->This file is usually located in MS Windows NT 4.0 or 2000 in
-<TT
-CLASS="FILENAME"
->C:\WINNT\SYSTEM32\DRIVERS\ETC</TT
-> and contains
-the IP Address and the IP hostname in matched pairs. It can be
-used by the name resolution infrastructure in MS Windows, depending
-on how the TCP/IP environment is configured. This file is in
-every way the equivalent of the Unix/Linux <TT
-CLASS="FILENAME"
->/etc/hosts</TT
-> file.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1477"
-></A
->10.3.4. DNS Lookup</H3
-><P
->This capability is configured in the TCP/IP setup area in the network
-configuration facility. If enabled an elaborate name resolution sequence
-is followed the precise nature of which isdependant on what the NetBIOS
-Node Type parameter is configured to. A Node Type of 0 means use
-NetBIOS broadcast (over UDP broadcast) is first used if the name
-that is the subject of a name lookup is not found in the NetBIOS name
-cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to
-Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the
-WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast
-lookup is used.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1480"
-></A
->10.3.5. WINS Lookup</H3
-><P
->A WINS (Windows Internet Name Server) service is the equivaent of the
-rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores
-the names and IP addresses that are registered by a Windows client
-if the TCP/IP setup has been given at least one WINS Server IP Address.</P
-><P
->To configure Samba to be a WINS server the following parameter needs
-to be added to the <TT
-CLASS="FILENAME"
->smb.conf</TT
-> file:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> wins support = Yes</PRE
-></P
-><P
->To configure Samba to use a WINS server the following parameters are
-needed in the smb.conf file:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> wins support = No
- wins server = xxx.xxx.xxx.xxx</PRE
-></P
-><P
->where <TT
-CLASS="REPLACEABLE"
-><I
->xxx.xxx.xxx.xxx</I
-></TT
-> is the IP address
-of the WINS server.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1492"
-></A
->10.4. How browsing functions and how to deploy stable and
-dependable browsing using Samba</H2
-><P
->As stated above, MS Windows machines register their NetBIOS names
-(i.e.: the machine name for each service type in operation) on start
-up. Also, as stated above, the exact method by which this name registration
-takes place is determined by whether or not the MS Windows client/server
-has been given a WINS server address, whether or not LMHOSTS lookup
-is enabled, or if DNS for NetBIOS name resolution is enabled, etc.</P
-><P
->In the case where there is no WINS server all name registrations as
-well as name lookups are done by UDP broadcast. This isolates name
-resolution to the local subnet, unless LMHOSTS is used to list all
-names and IP addresses. In such situations Samba provides a means by
-which the samba server name may be forcibly injected into the browse
-list of a remote MS Windows network (using the "remote announce" parameter).</P
-><P
->Where a WINS server is used, the MS Windows client will use UDP
-unicast to register with the WINS server. Such packets can be routed
-and thus WINS allows name resolution to function across routed networks.</P
-><P
->During the startup process an election will take place to create a
-local master browser if one does not already exist. On each NetBIOS network
-one machine will be elected to function as the domain master browser. This
-domain browsing has nothing to do with MS security domain control.
-Instead, the domain master browser serves the role of contacting each local
-master browser (found by asking WINS or from LMHOSTS) and exchanging browse
-list contents. This way every master browser will eventually obtain a complete
-list of all machines that are on the network. Every 11-15 minutes an election
-is held to determine which machine will be the master browser. By the nature of
-the election criteria used, the machine with the highest uptime, or the
-most senior protocol version, or other criteria, will win the election
-as domain master browser.</P
-><P
->Clients wishing to browse the network make use of this list, but also depend
-on the availability of correct name resolution to the respective IP
-address/addresses. </P
-><P
->Any configuration that breaks name resolution and/or browsing intrinsics
-will annoy users because they will have to put up with protracted
-inability to use the network services.</P
-><P
->Samba supports a feature that allows forced synchonisation
-of browse lists across routed networks using the "remote
-browse sync" parameter in the smb.conf file. This causes Samba
-to contact the local master browser on a remote network and
-to request browse list synchronisation. This effectively bridges
-two networks that are separated by routers. The two remote
-networks may use either broadcast based name resolution or WINS
-based name resolution, but it should be noted that the "remote
-browse sync" parameter provides browse list synchronisation - and
-that is distinct from name to address resolution, in other
-words, for cross subnet browsing to function correctly it is
-essential that a name to address resolution mechanism be provided.
-This mechanism could be via DNS, <TT
-CLASS="FILENAME"
->/etc/hosts</TT
->,
-and so on.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1502"
-></A
->10.5. MS Windows security options and how to configure
-Samba for seemless integration</H2
-><P
->MS Windows clients may use encrypted passwords as part of a
-challenege/response authentication model (a.k.a. NTLMv1) or
-alone, or clear text strings for simple password based
-authentication. It should be realized that with the SMB
-protocol the password is passed over the network either
-in plain text or encrypted, but not both in the same
-authentication requets.</P
-><P
->When encrypted passwords are used a password that has been
-entered by the user is encrypted in two ways:</P
-><P
-></P
-><UL
-><LI
-><P
->An MD4 hash of the UNICODE of the password
- string. This is known as the NT hash.
- </P
-></LI
-><LI
-><P
->The password is converted to upper case,
- and then padded or trucated to 14 bytes. This string is
- then appended with 5 bytes of NULL characters and split to
- form two 56 bit DES keys to encrypt a "magic" 8 byte value.
- The resulting 16 bytes for the LanMan hash.
- </P
-></LI
-></UL
-><P
->You should refer to the <A
-HREF="ENCRYPTION.html"
-TARGET="_top"
->Password Encryption</A
-> chapter in this HOWTO collection
-for more details on the inner workings</P
-><P
->MS Windows 95 pre-service pack 1, MS Windows NT versions 3.x
-and version 4.0 pre-service pack 3 will use either mode of
-password authentication. All versions of MS Windows that follow
-these versions no longer support plain text passwords by default.</P
-><P
->MS Windows clients have a habit of dropping network mappings that
-have been idle for 10 minutes or longer. When the user attempts to
-use the mapped drive connection that has been dropped, the client
-re-establishes the connection using
-a cached copy of the password.</P
-><P
->When Microsoft changed the default password mode, they dropped support for
-caching of the plain text password. This means that when the registry
-parameter is changed to re-enable use of plain text passwords it appears to
-work, but when a dropped mapping attempts to revalidate it will fail if
-the remote authentication server does not support encrypted passwords.
-This means that it is definitely not a good idea to re-enable plain text
-password support in such clients.</P
-><P
->The following parameters can be used to work around the
-issue of Windows 9x client upper casing usernames and
-password before transmitting them to the SMB server
-when using clear text authentication.</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> <A
-HREF="smb.conf.5.html#PASSWORDLEVEL"
-TARGET="_top"
->passsword level</A
-> = <TT
-CLASS="REPLACEABLE"
-><I
->integer</I
-></TT
->
- <A
-HREF="smb.conf.5.html#USERNAMELEVEL"
-TARGET="_top"
->username level</A
-> = <TT
-CLASS="REPLACEABLE"
-><I
->integer</I
-></TT
-></PRE
-></P
-><P
->By default Samba will lower case the username before attempting
-to lookup the user in the database of local system accounts.
-Because UNIX usernames conventionally only contain lower case
-character, the <TT
-CLASS="PARAMETER"
-><I
->username level</I
-></TT
-> parameter
-is rarely even needed.</P
-><P
->However, password on UNIX systems often make use of mixed case
-characters. This means that in order for a user on a Windows 9x
-client to connect to a Samba server using clear text authentication,
-the <TT
-CLASS="PARAMETER"
-><I
->password level</I
-></TT
-> must be set to the maximum
-number of upper case letter which <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->could</I
-></SPAN
-> appear
-is a password. Note that is the server OS uses the traditional
-DES version of crypt(), then a <TT
-CLASS="PARAMETER"
-><I
->password level</I
-></TT
->
-of 8 will result in case insensitive passwords as seen from Windows
-users. This will also result in longer login times as Samba
-hash to compute the permutations of the password string and
-try them one by one until a match is located (or all combinations fail).</P
-><P
->The best option to adopt is to enable support for encrypted passwords
-where ever Samba is used. There are three configuration possibilities
-for support of encrypted passwords:</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1530"
-></A
->10.5.1. Use MS Windows NT as an authentication server</H3
-><P
->This method involves the additions of the following parameters
-in the smb.conf file:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> encrypt passwords = Yes
- security = server
- password server = "NetBIOS_name_of_PDC"</PRE
-></P
-><P
->There are two ways of identifying whether or not a username and
-password pair was valid or not. One uses the reply information provided
-as part of the authentication messaging process, the other uses
-just and error code.</P
-><P
->The down-side of this mode of configuration is the fact that
-for security reasons Samba will send the password server a bogus
-username and a bogus password and if the remote server fails to
-reject the username and password pair then an alternative mode
-of identification of validation is used. Where a site uses password
-lock out after a certain number of failed authentication attempts
-this will result in user lockouts.</P
-><P
->Use of this mode of authentication does require there to be
-a standard Unix account for the user, this account can be blocked
-to prevent logons by other than MS Windows clients.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1538"
-></A
->10.5.2. Make Samba a member of an MS Windows NT security domain</H3
-><P
->This method involves additon of the following paramters in the smb.conf file:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> encrypt passwords = Yes
- security = domain
- workgroup = "name of NT domain"
- password server = *</PRE
-></P
-><P
->The use of the "*" argument to "password server" will cause samba
-to locate the domain controller in a way analogous to the way
-this is done within MS Windows NT.</P
-><P
->In order for this method to work the Samba server needs to join the
-MS Windows NT security domain. This is done as follows:</P
-><P
-></P
-><UL
-><LI
-><P
->On the MS Windows NT domain controller using
- the Server Manager add a machine account for the Samba server.
- </P
-></LI
-><LI
-><P
->Next, on the Linux system execute:
- <B
-CLASS="COMMAND"
->smbpasswd -r PDC_NAME -j DOMAIN_NAME</B
->
- </P
-></LI
-></UL
-><P
->Use of this mode of authentication does require there to be
-a standard Unix account for the user in order to assign
-a uid once the account has been authenticated by the remote
-Windows DC. This account can be blocked to prevent logons by
-other than MS Windows clients by things such as setting an invalid
-shell in the <TT
-CLASS="FILENAME"
->/etc/passwd</TT
-> entry.</P
-><P
->An alternative to assigning UIDs to Windows users on a
-Samba member server is presented in the <A
-HREF="winbind.html"
-TARGET="_top"
->Winbind Overview</A
-> chapter in
-this HOWTO collection.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1555"
-></A
->10.5.3. Configure Samba as an authentication server</H3
-><P
->This mode of authentication demands that there be on the
-Unix/Linux system both a Unix style account as well as an
-smbpasswd entry for the user. The Unix system account can be
-locked if required as only the encrypted password will be
-used for SMB client authentication.</P
-><P
->This method involves addition of the following parameters to
-the smb.conf file:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->## please refer to the Samba PDC HOWTO chapter later in
-## this collection for more details
-[global]
- encrypt passwords = Yes
- security = user
- domain logons = Yes
- ; an OS level of 33 or more is recommended
- os level = 33
-
-[NETLOGON]
- path = /somewhare/in/file/system
- read only = yes</PRE
-></P
-><P
->in order for this method to work a Unix system account needs
-to be created for each user, as well as for each MS Windows NT/2000
-machine. The following structure is required.</P
-><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
-><A
-NAME="AEN1562"
-></A
->10.5.3.1. Users</H4
-><P
->A user account that may provide a home directory should be
-created. The following Linux system commands are typical of
-the procedure for creating an account.</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> # useradd -s /bin/bash -d /home/"userid" -m "userid"
- # passwd "userid"
- Enter Password: <pw>
-
- # smbpasswd -a "userid"
- Enter Password: <pw></PRE
-></P
-></DIV
-><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
-><A
-NAME="AEN1567"
-></A
->10.5.3.2. MS Windows NT Machine Accounts</H4
-><P
->These are required only when Samba is used as a domain
-controller. Refer to the Samba-PDC-HOWTO for more details.</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> # useradd -s /bin/false -d /dev/null "machine_name"\$
- # passwd -l "machine_name"\$
- # smbpasswd -a -m "machine_name"</PRE
-></P
-></DIV
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1572"
-></A
->10.6. Conclusions</H2
-><P
->Samba provides a flexible means to operate as...</P
-><P
-></P
-><UL
-><LI
-><P
->A Stand-alone server - No special action is needed
- other than to create user accounts. Stand-alone servers do NOT
- provide network logon services, meaning that machines that use this
- server do NOT perform a domain logon but instead make use only of
- the MS Windows logon which is local to the MS Windows
- workstation/server.
- </P
-></LI
-><LI
-><P
->An MS Windows NT 3.x/4.0 security domain member.
- </P
-></LI
-><LI
-><P
->An alternative to an MS Windows NT 3.x/4.0
- Domain Controller.
- </P
-></LI
-></UL
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="UNIX-PERMISSIONS"
-></A
->Chapter 11. UNIX Permission Bits and Windows NT Access Control Lists</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN1593"
-></A
->11.1. Viewing and changing UNIX permissions using the NT
- security dialogs</H2
-><P
->New in the Samba 2.0.4 release is the ability for Windows
- NT clients to use their native security settings dialog box to
- view and modify the underlying UNIX permissions.</P
-><P
->Note that this ability is careful not to compromise
- the security of the UNIX host Samba is running on, and
- still obeys all the file permission rules that a Samba
- administrator can set.</P
-><P
->In Samba 2.0.4 and above the default value of the
- parameter <A
-HREF="smb.conf.5.html#NTACLSUPPORT"
-TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
-> nt acl support</I
-></TT
-></A
-> has been changed from
- <TT
-CLASS="CONSTANT"
->false</TT
-> to <TT
-CLASS="CONSTANT"
->true</TT
->, so
- manipulation of permissions is turned on by default.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1602"
-></A
->11.2. How to view file security on a Samba share</H2
-><P
->From an NT 4.0 client, single-click with the right
- mouse button on any file or directory in a Samba mounted
- drive letter or UNC path. When the menu pops-up, click
- on the <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Properties</I
-></SPAN
-> entry at the bottom of
- the menu. This brings up the normal file properties dialog
- box, but with Samba 2.0.4 this will have a new tab along the top
- marked <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Security</I
-></SPAN
->. Click on this tab and you
- will see three buttons, <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Permissions</I
-></SPAN
->,
- <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Auditing</I
-></SPAN
->, and <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Ownership</I
-></SPAN
->.
- The <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Auditing</I
-></SPAN
-> button will cause either
- an error message <SPAN
-CLASS="ERRORNAME"
->A requested privilege is not held
- by the client</SPAN
-> to appear if the user is not the
- NT Administrator, or a dialog which is intended to allow an
- Administrator to add auditing requirements to a file if the
- user is logged on as the NT Administrator. This dialog is
- non-functional with a Samba share at this time, as the only
- useful button, the <B
-CLASS="COMMAND"
->Add</B
-> button will not currently
- allow a list of users to be seen.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1613"
-></A
->11.3. Viewing file ownership</H2
-><P
->Clicking on the <B
-CLASS="COMMAND"
->"Ownership"</B
-> button
- brings up a dialog box telling you who owns the given file. The
- owner name will be of the form :</P
-><P
-><B
-CLASS="COMMAND"
->"SERVER\user (Long name)"</B
-></P
-><P
->Where <TT
-CLASS="REPLACEABLE"
-><I
->SERVER</I
-></TT
-> is the NetBIOS name of
- the Samba server, <TT
-CLASS="REPLACEABLE"
-><I
->user</I
-></TT
-> is the user name of
- the UNIX user who owns the file, and <TT
-CLASS="REPLACEABLE"
-><I
->(Long name)</I
-></TT
->
- is the descriptive string identifying the user (normally found in the
- GECOS field of the UNIX password database). Click on the <B
-CLASS="COMMAND"
->Close
- </B
-> button to remove this dialog.</P
-><P
->If the parameter <TT
-CLASS="PARAMETER"
-><I
->nt acl support</I
-></TT
->
- is set to <TT
-CLASS="CONSTANT"
->false</TT
-> then the file owner will
- be shown as the NT user <B
-CLASS="COMMAND"
->"Everyone"</B
->.</P
-><P
->The <B
-CLASS="COMMAND"
->Take Ownership</B
-> button will not allow
- you to change the ownership of this file to yourself (clicking on
- it will display a dialog box complaining that the user you are
- currently logged onto the NT client cannot be found). The reason
- for this is that changing the ownership of a file is a privileged
- operation in UNIX, available only to the <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->root</I
-></SPAN
->
- user. As clicking on this button causes NT to attempt to change
- the ownership of a file to the current user logged into the NT
- client this will not work with Samba at this time.</P
-><P
->There is an NT chown command that will work with Samba
- and allow a user with Administrator privilege connected
- to a Samba 2.0.4 server as root to change the ownership of
- files on both a local NTFS filesystem or remote mounted NTFS
- or Samba drive. This is available as part of the <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Seclib
- </I
-></SPAN
-> NT security library written by Jeremy Allison of
- the Samba Team, available from the main Samba ftp site.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1633"
-></A
->11.4. Viewing file or directory permissions</H2
-><P
->The third button is the <B
-CLASS="COMMAND"
->"Permissions"</B
->
- button. Clicking on this brings up a dialog box that shows both
- the permissions and the UNIX owner of the file or directory.
- The owner is displayed in the form :</P
-><P
-><B
-CLASS="COMMAND"
->"SERVER\user (Long name)"</B
-></P
-><P
->Where <TT
-CLASS="REPLACEABLE"
-><I
->SERVER</I
-></TT
-> is the NetBIOS name of
- the Samba server, <TT
-CLASS="REPLACEABLE"
-><I
->user</I
-></TT
-> is the user name of
- the UNIX user who owns the file, and <TT
-CLASS="REPLACEABLE"
-><I
->(Long name)</I
-></TT
->
- is the descriptive string identifying the user (normally found in the
- GECOS field of the UNIX password database).</P
-><P
->If the parameter <TT
-CLASS="PARAMETER"
-><I
->nt acl support</I
-></TT
->
- is set to <TT
-CLASS="CONSTANT"
->false</TT
-> then the file owner will
- be shown as the NT user <B
-CLASS="COMMAND"
->"Everyone"</B
-> and the
- permissions will be shown as NT "Full Control".</P
-><P
->The permissions field is displayed differently for files
- and directories, so I'll describe the way file permissions
- are displayed first.</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1648"
-></A
->11.4.1. File Permissions</H3
-><P
->The standard UNIX user/group/world triple and
- the corresponding "read", "write", "execute" permissions
- triples are mapped by Samba into a three element NT ACL
- with the 'r', 'w', and 'x' bits mapped into the corresponding
- NT permissions. The UNIX world permissions are mapped into
- the global NT group <B
-CLASS="COMMAND"
->Everyone</B
->, followed
- by the list of permissions allowed for UNIX world. The UNIX
- owner and group permissions are displayed as an NT
- <B
-CLASS="COMMAND"
->user</B
-> icon and an NT <B
-CLASS="COMMAND"
->local
- group</B
-> icon respectively followed by the list
- of permissions allowed for the UNIX user and group.</P
-><P
->As many UNIX permission sets don't map into common
- NT names such as <B
-CLASS="COMMAND"
->"read"</B
->, <B
-CLASS="COMMAND"
-> "change"</B
-> or <B
-CLASS="COMMAND"
->"full control"</B
-> then
- usually the permissions will be prefixed by the words <B
-CLASS="COMMAND"
-> "Special Access"</B
-> in the NT display list.</P
-><P
->But what happens if the file has no permissions allowed
- for a particular UNIX user group or world component ? In order
- to allow "no permissions" to be seen and modified then Samba
- overloads the NT <B
-CLASS="COMMAND"
->"Take Ownership"</B
-> ACL attribute
- (which has no meaning in UNIX) and reports a component with
- no permissions as having the NT <B
-CLASS="COMMAND"
->"O"</B
-> bit set.
- This was chosen of course to make it look like a zero, meaning
- zero permissions. More details on the decision behind this will
- be given below.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN1662"
-></A
->11.4.2. Directory Permissions</H3
-><P
->Directories on an NT NTFS file system have two
- different sets of permissions. The first set of permissions
- is the ACL set on the directory itself, this is usually displayed
- in the first set of parentheses in the normal <B
-CLASS="COMMAND"
->"RW"</B
->
- NT style. This first set of permissions is created by Samba in
- exactly the same way as normal file permissions are, described
- above, and is displayed in the same way.</P
-><P
->The second set of directory permissions has no real meaning
- in the UNIX permissions world and represents the <B
-CLASS="COMMAND"
-> "inherited"</B
-> permissions that any file created within
- this directory would inherit.</P
-><P
->Samba synthesises these inherited permissions for NT by
- returning as an NT ACL the UNIX permission mode that a new file
- created by Samba on this share would receive.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1669"
-></A
->11.5. Modifying file or directory permissions</H2
-><P
->Modifying file and directory permissions is as simple
- as changing the displayed permissions in the dialog box, and
- clicking the <B
-CLASS="COMMAND"
->OK</B
-> button. However, there are
- limitations that a user needs to be aware of, and also interactions
- with the standard Samba permission masks and mapping of DOS
- attributes that need to also be taken into account.</P
-><P
->If the parameter <TT
-CLASS="PARAMETER"
-><I
->nt acl support</I
-></TT
->
- is set to <TT
-CLASS="CONSTANT"
->false</TT
-> then any attempt to set
- security permissions will fail with an <B
-CLASS="COMMAND"
->"Access Denied"
- </B
-> message.</P
-><P
->The first thing to note is that the <B
-CLASS="COMMAND"
->"Add"</B
->
- button will not return a list of users in Samba 2.0.4 (it will give
- an error message of <B
-CLASS="COMMAND"
->"The remote procedure call failed
- and did not execute"</B
->). This means that you can only
- manipulate the current user/group/world permissions listed in
- the dialog box. This actually works quite well as these are the
- only permissions that UNIX actually has.</P
-><P
->If a permission triple (either user, group, or world)
- is removed from the list of permissions in the NT dialog box,
- then when the <B
-CLASS="COMMAND"
->"OK"</B
-> button is pressed it will
- be applied as "no permissions" on the UNIX side. If you then
- view the permissions again the "no permissions" entry will appear
- as the NT <B
-CLASS="COMMAND"
->"O"</B
-> flag, as described above. This
- allows you to add permissions back to a file or directory once
- you have removed them from a triple component.</P
-><P
->As UNIX supports only the "r", "w" and "x" bits of
- an NT ACL then if other NT security attributes such as "Delete
- access" are selected then they will be ignored when applied on
- the Samba server.</P
-><P
->When setting permissions on a directory the second
- set of permissions (in the second set of parentheses) is
- by default applied to all files within that directory. If this
- is not what you want you must uncheck the <B
-CLASS="COMMAND"
->"Replace
- permissions on existing files"</B
-> checkbox in the NT
- dialog before clicking <B
-CLASS="COMMAND"
->"OK"</B
->.</P
-><P
->If you wish to remove all permissions from a
- user/group/world component then you may either highlight the
- component and click the <B
-CLASS="COMMAND"
->"Remove"</B
-> button,
- or set the component to only have the special <B
-CLASS="COMMAND"
->"Take
- Ownership"</B
-> permission (displayed as <B
-CLASS="COMMAND"
->"O"
- </B
->) highlighted.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN1691"
-></A
->11.6. Interaction with the standard Samba create mask
- parameters</H2
-><P
->Note that with Samba 2.0.5 there are four new parameters
- to control this interaction. These are :</P
+>11.2. Introduction</H2
><P
-><TT
-CLASS="PARAMETER"
-><I
->security mask</I
-></TT
-></P
+>It is well known that UNIX and Microsoft Windows NT have
+ different models for representing user and group information and
+ use different technologies for implementing them. This fact has
+ made it difficult to integrate the two systems in a satisfactory
+ manner.</P
><P
-><TT
-CLASS="PARAMETER"
-><I
->force security mode</I
-></TT
-></P
+>One common solution in use today has been to create
+ identically named user accounts on both the UNIX and Windows systems
+ and use the Samba suite of programs to provide file and print services
+ between the two. This solution is far from perfect however, as
+ adding and deleting users on both sets of machines becomes a chore
+ and two sets of passwords are required both of which
+ can lead to synchronization problems between the UNIX and Windows
+ systems and confusion for users.</P
><P
-><TT
-CLASS="PARAMETER"
-><I
->directory security mask</I
-></TT
-></P
+>We divide the unified logon problem for UNIX machines into
+ three smaller problems:</P
><P
-><TT
-CLASS="PARAMETER"
-><I
->force directory security mode</I
-></TT
></P
+><UL
+><LI
><P
->Once a user clicks <B
-CLASS="COMMAND"
->"OK"</B
-> to apply the
- permissions Samba maps the given permissions into a user/group/world
- r/w/x triple set, and then will check the changed permissions for a
- file against the bits set in the <A
-HREF="smb.conf.5.html#SECURITYMASK"
-TARGET="_top"
->
- <TT
-CLASS="PARAMETER"
-><I
->security mask</I
-></TT
-></A
-> parameter. Any bits that
- were changed that are not set to '1' in this parameter are left alone
- in the file permissions.</P
-><P
->Essentially, zero bits in the <TT
-CLASS="PARAMETER"
-><I
->security mask</I
-></TT
->
- mask may be treated as a set of bits the user is <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->not</I
-></SPAN
->
- allowed to change, and one bits are those the user is allowed to change.
- </P
-><P
->If not set explicitly this parameter is set to the same value as
- the <A
-HREF="smb.conf.5.html#CREATEMASK"
-TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->create mask
- </I
-></TT
-></A
-> parameter to provide compatibility with Samba 2.0.4
- where this permission change facility was introduced. To allow a user to
- modify all the user/group/world permissions on a file, set this parameter
- to 0777.</P
+>Obtaining Windows NT user and group information
+ </P
+></LI
+><LI
><P
->Next Samba checks the changed permissions for a file against
- the bits set in the <A
-HREF="smb.conf.5.html#FORCESECURITYMODE"
-TARGET="_top"
-> <TT
-CLASS="PARAMETER"
-><I
->force security mode</I
-></TT
-></A
-> parameter. Any bits
- that were changed that correspond to bits set to '1' in this parameter
- are forced to be set.</P
+>Authenticating Windows NT users
+ </P
+></LI
+><LI
><P
->Essentially, bits set in the <TT
-CLASS="PARAMETER"
-><I
->force security mode
- </I
-></TT
-> parameter may be treated as a set of bits that, when
- modifying security on a file, the user has always set to be 'on'.</P
+>Password changing for Windows NT users
+ </P
+></LI
+></UL
><P
->If not set explicitly this parameter is set to the same value
- as the <A
-HREF="smb.conf.5.html#FORCECREATEMODE"
-TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->force
- create mode</I
-></TT
+>Ideally, a prospective solution to the unified logon problem
+ would satisfy all the above components without duplication of
+ information on the UNIX machines and without creating additional
+ tasks for the system administrator when maintaining users and
+ groups on either system. The winbind system provides a simple
+ and elegant solution to all three components of the unified logon
+ problem.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN1414"
></A
-> parameter to provide compatibility
- with Samba 2.0.4 where the permission change facility was introduced.
- To allow a user to modify all the user/group/world permissions on a file
- with no restrictions set this parameter to 000.</P
+>11.3. What Winbind Provides</H2
><P
->The <TT
-CLASS="PARAMETER"
-><I
->security mask</I
-></TT
-> and <TT
-CLASS="PARAMETER"
-><I
->force
- security mode</I
-></TT
-> parameters are applied to the change
- request in that order.</P
+>Winbind unifies UNIX and Windows NT account management by
+ allowing a UNIX box to become a full member of a NT domain. Once
+ this is done the UNIX box will see NT users and groups as if
+ they were native UNIX users and groups, allowing the NT domain
+ to be used in much the same manner that NIS+ is used within
+ UNIX-only environments.</P
><P
->For a directory Samba will perform the same operations as
- described above for a file except using the parameter <TT
-CLASS="PARAMETER"
-><I
-> directory security mask</I
-></TT
-> instead of <TT
-CLASS="PARAMETER"
-><I
->security
- mask</I
-></TT
->, and <TT
-CLASS="PARAMETER"
-><I
->force directory security mode
- </I
-></TT
-> parameter instead of <TT
-CLASS="PARAMETER"
-><I
->force security mode
- </I
-></TT
->.</P
+>The end result is that whenever any
+ program on the UNIX machine asks the operating system to lookup
+ a user or group name, the query will be resolved by asking the
+ NT domain controller for the specified domain to do the lookup.
+ Because Winbind hooks into the operating system at a low level
+ (via the NSS name resolution modules in the C library) this
+ redirection to the NT domain controller is completely
+ transparent.</P
><P
->The <TT
-CLASS="PARAMETER"
-><I
->directory security mask</I
-></TT
-> parameter
- by default is set to the same value as the <TT
-CLASS="PARAMETER"
-><I
->directory mask
- </I
-></TT
-> parameter and the <TT
-CLASS="PARAMETER"
-><I
->force directory security
- mode</I
-></TT
-> parameter by default is set to the same value as
- the <TT
-CLASS="PARAMETER"
-><I
->force directory mode</I
-></TT
-> parameter to provide
- compatibility with Samba 2.0.4 where the permission change facility
- was introduced.</P
+>Users on the UNIX machine can then use NT user and group
+ names as they would use "native" UNIX names. They can chown files
+ so that they are owned by NT domain users or even login to the
+ UNIX machine and run a UNIX X-Window session as a domain user.</P
><P
->In this way Samba enforces the permission restrictions that
- an administrator can set on a Samba share, whilst still allowing users
- to modify the permission bits within that restriction.</P
+>The only obvious indication that Winbind is being used is
+ that user and group names take the form DOMAIN\user and
+ DOMAIN\group. This is necessary as it allows Winbind to determine
+ that redirection to a domain controller is wanted for a particular
+ lookup and which trusted domain is being referenced.</P
><P
->If you want to set up a share that allows users full control
- in modifying the permission bits on their files and directories and
- doesn't force any particular bits to be set 'on', then set the following
- parameters in the <A
-HREF="smb.conf.5.html"
-TARGET="_top"
-><TT
-CLASS="FILENAME"
->smb.conf(5)
- </TT
+>Additionally, Winbind provides an authentication service
+ that hooks into the Pluggable Authentication Modules (PAM) system
+ to provide authentication via a NT domain to any PAM enabled
+ applications. This capability solves the problem of synchronizing
+ passwords between systems since all passwords are stored in a single
+ location (on the domain controller).</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1421"
></A
-> file in that share specific section :</P
+>11.3.1. Target Uses</H3
><P
-><TT
-CLASS="PARAMETER"
-><I
->security mask = 0777</I
-></TT
-></P
+>Winbind is targeted at organizations that have an
+ existing NT based domain infrastructure into which they wish
+ to put UNIX workstations or servers. Winbind will allow these
+ organizations to deploy UNIX workstations without having to
+ maintain a separate account infrastructure. This greatly
+ simplifies the administrative overhead of deploying UNIX
+ workstations into a NT based organization.</P
><P
-><TT
-CLASS="PARAMETER"
-><I
->force security mode = 0</I
-></TT
-></P
+>Another interesting way in which we expect Winbind to
+ be used is as a central part of UNIX based appliances. Appliances
+ that provide file and print services to Microsoft based networks
+ will be able to use Winbind to provide seamless integration of
+ the appliance into the domain.</P
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN1425"
+></A
+>11.4. How Winbind Works</H2
><P
-><TT
-CLASS="PARAMETER"
-><I
->directory security mask = 0777</I
-></TT
-></P
+>The winbind system is designed around a client/server
+ architecture. A long running <B
+CLASS="COMMAND"
+>winbindd</B
+> daemon
+ listens on a UNIX domain socket waiting for requests
+ to arrive. These requests are generated by the NSS and PAM
+ clients and processed sequentially.</P
><P
-><TT
-CLASS="PARAMETER"
-><I
->force directory security mode = 0</I
-></TT
-></P
+>The technologies used to implement winbind are described
+ in detail below.</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1430"
+></A
+>11.4.1. Microsoft Remote Procedure Calls</H3
><P
->As described, in Samba 2.0.4 the parameters :</P
+>Over the last two years, efforts have been underway
+ by various Samba Team members to decode various aspects of
+ the Microsoft Remote Procedure Call (MSRPC) system. This
+ system is used for most network related operations between
+ Windows NT machines including remote management, user authentication
+ and print spooling. Although initially this work was done
+ to aid the implementation of Primary Domain Controller (PDC)
+ functionality in Samba, it has also yielded a body of code which
+ can be used for other purposes.</P
><P
-><TT
-CLASS="PARAMETER"
-><I
->create mask</I
-></TT
-></P
+>Winbind uses various MSRPC calls to enumerate domain users
+ and groups and to obtain detailed information about individual
+ users or groups. Other MSRPC calls can be used to authenticate
+ NT domain users and to change user passwords. By directly querying
+ a Windows PDC for user and group information, winbind maps the
+ NT account information onto UNIX user and group names.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1434"
+></A
+>11.4.2. Name Service Switch</H3
+><P
+>The Name Service Switch, or NSS, is a feature that is
+ present in many UNIX operating systems. It allows system
+ information such as hostnames, mail aliases and user information
+ to be resolved from different sources. For example, a standalone
+ UNIX workstation may resolve system information from a series of
+ flat files stored on the local filesystem. A networked workstation
+ may first attempt to resolve system information from local files,
+ and then consult a NIS database for user information or a DNS server
+ for hostname information.</P
+><P
+>The NSS application programming interface allows winbind
+ to present itself as a source of system information when
+ resolving UNIX usernames and groups. Winbind uses this interface,
+ and information obtained from a Windows NT server using MSRPC
+ calls to provide a new source of account enumeration. Using standard
+ UNIX library calls, one can enumerate the users and groups on
+ a UNIX machine running winbind and see all users and groups in
+ a NT domain plus any trusted domain as though they were local
+ users and groups.</P
><P
-><TT
-CLASS="PARAMETER"
-><I
->force create mode</I
-></TT
-></P
+>The primary control file for NSS is
+ <TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+>.
+ When a UNIX application makes a request to do a lookup
+ the C library looks in <TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+>
+ for a line which matches the service type being requested, for
+ example the "passwd" service type is used when user or group names
+ are looked up. This config line species which implementations
+ of that service should be tried and in what order. If the passwd
+ config line is:</P
><P
-><TT
-CLASS="PARAMETER"
-><I
->directory mask</I
-></TT
+><B
+CLASS="COMMAND"
+>passwd: files example</B
></P
><P
-><TT
-CLASS="PARAMETER"
-><I
->force directory mode</I
-></TT
-></P
+>then the C library will first load a module called
+ <TT
+CLASS="FILENAME"
+>/lib/libnss_files.so</TT
+> followed by
+ the module <TT
+CLASS="FILENAME"
+>/lib/libnss_example.so</TT
+>. The
+ C library will dynamically load each of these modules in turn
+ and call resolver functions within the modules to try to resolve
+ the request. Once the request is resolved the C library returns the
+ result to the application.</P
><P
->were used instead of the parameters discussed here.</P
+>This NSS interface provides a very easy way for Winbind
+ to hook into the operating system. All that needs to be done
+ is to put <TT
+CLASS="FILENAME"
+>libnss_winbind.so</TT
+> in <TT
+CLASS="FILENAME"
+>/lib/</TT
+>
+ then add "winbind" into <TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+> at
+ the appropriate place. The C library will then call Winbind to
+ resolve user and group names.</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN1755"
+NAME="AEN1450"
></A
->11.7. Interaction with the standard Samba file attribute
- mapping</H2
+>11.4.3. Pluggable Authentication Modules</H3
><P
->Samba maps some of the DOS attribute bits (such as "read
- only") into the UNIX permissions of a file. This means there can
- be a conflict between the permission bits set via the security
- dialog and the permission bits set by the file attribute mapping.
- </P
+>Pluggable Authentication Modules, also known as PAM,
+ is a system for abstracting authentication and authorization
+ technologies. With a PAM module it is possible to specify different
+ authentication methods for different system applications without
+ having to recompile these applications. PAM is also useful
+ for implementing a particular policy for authorization. For example,
+ a system administrator may only allow console logins from users
+ stored in the local password file but only allow users resolved from
+ a NIS database to log in over the network.</P
><P
->One way this can show up is if a file has no UNIX read access
- for the owner it will show up as "read only" in the standard
- file attributes tabbed dialog. Unfortunately this dialog is
- the same one that contains the security info in another tab.</P
+>Winbind uses the authentication management and password
+ management PAM interface to integrate Windows NT users into a
+ UNIX system. This allows Windows NT users to log in to a UNIX
+ machine and be authenticated against a suitable Primary Domain
+ Controller. These users can also change their passwords and have
+ this change take effect directly on the Primary Domain Controller.
+ </P
><P
->What this can mean is that if the owner changes the permissions
- to allow themselves read access using the security dialog, clicks
- <B
-CLASS="COMMAND"
->"OK"</B
-> to get back to the standard attributes tab
- dialog, and then clicks <B
-CLASS="COMMAND"
->"OK"</B
-> on that dialog, then
- NT will set the file permissions back to read-only (as that is what
- the attributes still say in the dialog). This means that after setting
- permissions and clicking <B
-CLASS="COMMAND"
->"OK"</B
-> to get back to the
- attributes dialog you should always hit <B
-CLASS="COMMAND"
->"Cancel"</B
->
- rather than <B
-CLASS="COMMAND"
->"OK"</B
-> to ensure that your changes
- are not overridden.</P
+>PAM is configured by providing control files in the directory
+ <TT
+CLASS="FILENAME"
+>/etc/pam.d/</TT
+> for each of the services that
+ require authentication. When an authentication request is made
+ by an application the PAM code in the C library looks up this
+ control file to determine what modules to load to do the
+ authentication check and in what order. This interface makes adding
+ a new authentication service for Winbind very easy, all that needs
+ to be done is that the <TT
+CLASS="FILENAME"
+>pam_winbind.so</TT
+> module
+ is copied to <TT
+CLASS="FILENAME"
+>/lib/security/</TT
+> and the PAM
+ control files for relevant services are updated to allow
+ authentication via winbind. See the PAM documentation
+ for more details.</P
></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1458"
+></A
+>11.4.4. User and Group ID Allocation</H3
+><P
+>When a user or group is created under Windows NT
+ is it allocated a numerical relative identifier (RID). This is
+ slightly different to UNIX which has a range of numbers that are
+ used to identify users, and the same range in which to identify
+ groups. It is winbind's job to convert RIDs to UNIX id numbers and
+ vice versa. When winbind is configured it is given part of the UNIX
+ user id space and a part of the UNIX group id space in which to
+ store Windows NT users and groups. If a Windows NT user is
+ resolved for the first time, it is allocated the next UNIX id from
+ the range. The same process applies for Windows NT groups. Over
+ time, winbind will have mapped all Windows NT users and groups
+ to UNIX user ids and group ids.</P
+><P
+>The results of this mapping are stored persistently in
+ an ID mapping database held in a tdb database). This ensures that
+ RIDs are mapped to UNIX IDs in a consistent way.</P
></DIV
><DIV
-CLASS="CHAPTER"
-><HR><H1
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="PAM"
+NAME="AEN1462"
></A
->Chapter 12. Configuring PAM for distributed but centrally
-managed authentication</H1
+>11.4.5. Result Caching</H3
+><P
+>An active system can generate a lot of user and group
+ name lookups. To reduce the network cost of these lookups winbind
+ uses a caching scheme based on the SAM sequence number supplied
+ by NT domain controllers. User or group information returned
+ by a PDC is cached by winbind along with a sequence number also
+ returned by the PDC. This sequence number is incremented by
+ Windows NT whenever any user or group information is modified. If
+ a cached entry has expired, the sequence number is requested from
+ the PDC and compared against the sequence number of the cached entry.
+ If the sequence numbers do not match, then the cached information
+ is discarded and up to date information is requested directly
+ from the PDC.</P
+></DIV
+></DIV
><DIV
CLASS="SECT1"
-><H2
+><HR><H2
CLASS="SECT1"
><A
-NAME="AEN1776"
+NAME="AEN1465"
></A
->12.1. Samba and PAM</H2
+>11.5. Installation and Configuration</H2
><P
->A number of Unix systems (eg: Sun Solaris), as well as the
-xxxxBSD family and Linux, now utilize the Pluggable Authentication
-Modules (PAM) facility to provide all authentication,
-authorization and resource control services. Prior to the
-introduction of PAM, a decision to use an alternative to
-the system password database (<TT
-CLASS="FILENAME"
->/etc/passwd</TT
->)
-would require the provision of alternatives for all programs that provide
-security services. Such a choice would involve provision of
-alternatives to such programs as: <B
-CLASS="COMMAND"
->login</B
->,
-<B
-CLASS="COMMAND"
->passwd</B
->, <B
-CLASS="COMMAND"
->chown</B
->, etc.</P
+>Many thanks to John Trostel <A
+HREF="mailto:jtrostel@snapserver.com"
+TARGET="_top"
+>jtrostel@snapserver.com</A
+>
+for providing the HOWTO for this section.</P
><P
->PAM provides a mechanism that disconnects these security programs
-from the underlying authentication/authorization infrastructure.
-PAM is configured either through one file <TT
-CLASS="FILENAME"
->/etc/pam.conf</TT
-> (Solaris),
-or by editing individual files that are located in <TT
+>This HOWTO describes how to get winbind services up and running
+to control access and authenticate users on your Linux box using
+the winbind services which come with SAMBA 2.2.2.</P
+><P
+>There is also some Solaris specific information in
+<TT
CLASS="FILENAME"
->/etc/pam.d</TT
->.</P
+>docs/textdocs/Solaris-Winbind-HOWTO.txt</TT
+>.
+Future revisions of this document will incorporate that
+information.</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1472"
+></A
+>11.5.1. Introduction</H3
+><P
+>This HOWTO describes the procedures used to get winbind up and
+running on my RedHat 7.1 system. Winbind is capable of providing access
+and authentication control for Windows Domain users through an NT
+or Win2K PDC for 'regular' services, such as telnet a nd ftp, as
+well for SAMBA services.</P
><P
->The following is an example <TT
-CLASS="FILENAME"
->/etc/pam.d/login</TT
-> configuration file.
-This example had all options been uncommented is probably not usable
-as it stacks many conditions before allowing successful completion
-of the login process. Essentially all conditions can be disabled
-by commenting them out except the calls to <TT
-CLASS="FILENAME"
->pam_pwdb.so</TT
->.</P
+>This HOWTO has been written from a 'RedHat-centric' perspective, so if
+you are using another distribution, you may have to modify the instructions
+somewhat to fit the way your distribution works.</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->#%PAM-1.0
-# The PAM configuration file for the `login' service
-#
-auth required pam_securetty.so
-auth required pam_nologin.so
-# auth required pam_dialup.so
-# auth optional pam_mail.so
-auth required pam_pwdb.so shadow md5
-# account requisite pam_time.so
-account required pam_pwdb.so
-session required pam_pwdb.so
-# session optional pam_lastlog.so
-# password required pam_cracklib.so retry=3
-password required pam_pwdb.so shadow md5</PRE
></P
+><UL
+><LI
><P
->PAM allows use of replacable modules. Those available on a
-sample system include:</P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Why should I to this?</I
+></SPAN
+>
+ </P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->$ /bin/ls /lib/security
-pam_access.so pam_ftp.so pam_limits.so
-pam_ncp_auth.so pam_rhosts_auth.so pam_stress.so
-pam_cracklib.so pam_group.so pam_listfile.so
-pam_nologin.so pam_rootok.so pam_tally.so
-pam_deny.so pam_issue.so pam_mail.so
-pam_permit.so pam_securetty.so pam_time.so
-pam_dialup.so pam_lastlog.so pam_mkhomedir.so
-pam_pwdb.so pam_shells.so pam_unix.so
-pam_env.so pam_ldap.so pam_motd.so
-pam_radius.so pam_smbpass.so pam_unix_acct.so
-pam_wheel.so pam_unix_auth.so pam_unix_passwd.so
-pam_userdb.so pam_warn.so pam_unix_session.so</PRE
-></P
+>This allows the SAMBA administrator to rely on the
+ authentication mechanisms on the NT/Win2K PDC for the authentication
+ of domain members. NT/Win2K users no longer need to have separate
+ accounts on the SAMBA server.
+ </P
+></LI
+><LI
><P
->The following example for the login program replaces the use of
-the <TT
-CLASS="FILENAME"
->pam_pwdb.so</TT
-> module which uses the system
-password database (<TT
-CLASS="FILENAME"
->/etc/passwd</TT
->,
-<TT
-CLASS="FILENAME"
->/etc/shadow</TT
->, <TT
-CLASS="FILENAME"
->/etc/group</TT
->) with
-the module <TT
-CLASS="FILENAME"
->pam_smbpass.so</TT
-> which uses the Samba
-database which contains the Microsoft MD4 encrypted password
-hashes. This database is stored in either
-<TT
-CLASS="FILENAME"
->/usr/local/samba/private/smbpasswd</TT
->,
-<TT
-CLASS="FILENAME"
->/etc/samba/smbpasswd</TT
->, or in
-<TT
-CLASS="FILENAME"
->/etc/samba.d/smbpasswd</TT
->, depending on the
-Samba implementation for your Unix/Linux system. The
-<TT
-CLASS="FILENAME"
->pam_smbpass.so</TT
-> module is provided by
-Samba version 2.2.1 or later. It can be compiled by specifying the
-<B
-CLASS="COMMAND"
->--with-pam_smbpass</B
-> options when running Samba's
-<TT
-CLASS="FILENAME"
->configure</TT
-> script. For more information
-on the <TT
-CLASS="FILENAME"
->pam_smbpass</TT
-> module, see the documentation
-in the <TT
-CLASS="FILENAME"
->source/pam_smbpass</TT
-> directory of the Samba
-source distribution.</P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Who should be reading this document?</I
+></SPAN
+>
+ </P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->#%PAM-1.0
-# The PAM configuration file for the `login' service
-#
-auth required pam_smbpass.so nodelay
-account required pam_smbpass.so nodelay
-session required pam_smbpass.so nodelay
-password required pam_smbpass.so nodelay</PRE
-></P
+> This HOWTO is designed for system administrators. If you are
+ implementing SAMBA on a file server and wish to (fairly easily)
+ integrate existing NT/Win2K users from your PDC onto the
+ SAMBA server, this HOWTO is for you. That said, I am no NT or PAM
+ expert, so you may find a better or easier way to accomplish
+ these tasks.
+ </P
+></LI
+></UL
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN1485"
+></A
+>11.5.2. Requirements</H3
><P
->The following is the PAM configuration file for a particular
-Linux system. The default condition uses <TT
+>If you have a samba configuration file that you are currently
+using... <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>BACK IT UP!</I
+></SPAN
+> If your system already uses PAM,
+<SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>back up the <TT
CLASS="FILENAME"
->pam_pwdb.so</TT
->.</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->#%PAM-1.0
-# The PAM configuration file for the `samba' service
-#
-auth required /lib/security/pam_pwdb.so nullok nodelay shadow audit
-account required /lib/security/pam_pwdb.so audit nodelay
-session required /lib/security/pam_pwdb.so nodelay
-password required /lib/security/pam_pwdb.so shadow md5</PRE
+>/etc/pam.d</TT
+> directory
+contents!</I
+></SPAN
+> If you haven't already made a boot disk,
+<SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>MAKE ONE NOW!</I
+></SPAN
></P
><P
->In the following example the decision has been made to use the
-smbpasswd database even for basic samba authentication. Such a
-decision could also be made for the passwd program and would
-thus allow the smbpasswd passwords to be changed using the passwd
-program.</P
+>Messing with the pam configuration files can make it nearly impossible
+to log in to yourmachine. That's why you want to be able to boot back
+into your machine in single user mode and restore your
+<TT
+CLASS="FILENAME"
+>/etc/pam.d</TT
+> back to the original state they were in if
+you get frustrated with the way things are going. ;-)</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->#%PAM-1.0
-# The PAM configuration file for the `samba' service
-#
-auth required /lib/security/pam_smbpass.so nodelay
-account required /lib/security/pam_pwdb.so audit nodelay
-session required /lib/security/pam_pwdb.so nodelay
-password required /lib/security/pam_smbpass.so nodelay smbconf=/etc/samba.d/smb.conf</PRE
-></P
+>The latest version of SAMBA (version 2.2.2 as of this writing), now
+includes a functioning winbindd daemon. Please refer to the
+<A
+HREF="http://samba.org/"
+TARGET="_top"
+>main SAMBA web page</A
+> or,
+better yet, your closest SAMBA mirror site for instructions on
+downloading the source code.</P
><P
->Note: PAM allows stacking of authentication mechanisms. It is
-also possible to pass information obtained within one PAM module through
-to the next module in the PAM stack. Please refer to the documentation for
-your particular system implementation for details regarding the specific
-capabilities of PAM in this environment. Some Linux implmentations also
-provide the <TT
+>To allow Domain users the ability to access SAMBA shares and
+files, as well as potentially other services provided by your
+SAMBA machine, PAM (pluggable authentication modules) must
+be setup properly on your machine. In order to compile the
+winbind modules, you should have at least the pam libraries resident
+on your system. For recent RedHat systems (7.1, for instance), that
+means <TT
CLASS="FILENAME"
->pam_stack.so</TT
-> module that allows all
-authentication to be configured in a single central file. The
-<TT
+>pam-0.74-22</TT
+>. For best results, it is helpful to also
+install the development packages in <TT
CLASS="FILENAME"
->pam_stack.so</TT
-> method has some very devoted followers
-on the basis that it allows for easier administration. As with all issues in
-life though, every decision makes trade-offs, so you may want examine the
-PAM documentation for further helpful information.</P
+>pam-devel-0.74-22</TT
+>.</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN1820"
+NAME="AEN1499"
></A
->12.2. Distributed Authentication</H2
+>11.5.3. Testing Things Out</H3
><P
->The astute administrator will realize from this that the
-combination of <TT
-CLASS="FILENAME"
->pam_smbpass.so</TT
+>Before starting, it is probably best to kill off all the SAMBA
+related daemons running on your server. Kill off all <B
+CLASS="COMMAND"
+>smbd</B
>,
<B
CLASS="COMMAND"
->winbindd</B
+>nmbd</B
>, and <B
CLASS="COMMAND"
->rsync</B
-> (see
-<A
-HREF="http://rsync.samba.org/"
-TARGET="_top"
->http://rsync.samba.org/</A
->)
-will allow the establishment of a centrally managed, distributed
-user/password database that can also be used by all
-PAM (eg: Linux) aware programs and applications. This arrangement
-can have particularly potent advantages compared with the
-use of Microsoft Active Directory Service (ADS) in so far as
-reduction of wide area network authentication traffic.</P
-></DIV
+>winbindd</B
+> processes that may
+be running. To use PAM, you will want to make sure that you have the
+standard PAM package (for RedHat) which supplies the <TT
+CLASS="FILENAME"
+>/etc/pam.d</TT
+>
+directory structure, including the pam modules are used by pam-aware
+services, several pam libraries, and the <TT
+CLASS="FILENAME"
+>/usr/doc</TT
+>
+and <TT
+CLASS="FILENAME"
+>/usr/man</TT
+> entries for pam. Winbind built better
+in SAMBA if the pam-devel package was also installed. This package includes
+the header files needed to compile pam-aware applications. For instance,
+my RedHat system has both <TT
+CLASS="FILENAME"
+>pam-0.74-22</TT
+> and
+<TT
+CLASS="FILENAME"
+>pam-devel-0.74-22</TT
+> RPMs installed.</P
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
><A
-NAME="AEN1827"
+NAME="AEN1510"
></A
->12.3. PAM Configuration in smb.conf</H2
+>11.5.3.1. Configure and compile SAMBA</H4
><P
->There is an option in smb.conf called <A
-HREF="smb.conf.5.html#OBEYPAMRESTRICTIONS"
-TARGET="_top"
->obey pam restrictions</A
->.
-The following is from the on-line help for this option in SWAT;</P
+>The configuration and compilation of SAMBA is pretty straightforward.
+The first three steps may not be necessary depending upon
+whether or not you have previously built the Samba binaries.</P
><P
->When Samba 2.2 is configure to enable PAM support (i.e.
+><PRE
+CLASS="PROGRAMLISTING"
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>autoconf</B
+>
<TT
-CLASS="CONSTANT"
->--with-pam</TT
->), this parameter will
-control whether or not Samba should obey PAM's account
-and session management directives. The default behavior
-is to use PAM for clear text authentication only and to
-ignore any account or session management. Note that Samba always
-ignores PAM for authentication in the case of
-<A
-HREF="smb.conf.5.html#ENCRYPTPASSWORDS"
-TARGET="_top"
->encrypt passwords = yes</A
->.
-The reason is that PAM modules cannot support the challenge/response
-authentication mechanism needed in the presence of SMB
-password encryption. </P
-><P
->Default: <B
+CLASS="PROMPT"
+>root#</TT
+> <B
CLASS="COMMAND"
->obey pam restrictions = no</B
+>make clean</B
+>
+<TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>rm config.cache</B
+>
+<TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>./configure --with-winbind</B
+>
+<TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>make</B
+>
+<TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>make install</B
+></PRE
></P
+><P
+>This will, by default, install SAMBA in <TT
+CLASS="FILENAME"
+>/usr/local/samba</TT
+>.
+See the main SAMBA documentation if you want to install SAMBA somewhere else.
+It will also build the winbindd executable and libraries. </P
></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="MSDFS"
-></A
->Chapter 13. Hosting a Microsoft Distributed File System tree on Samba</H1
><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
><A
-NAME="AEN1847"
+NAME="AEN1529"
></A
->13.1. Instructions</H2
-><P
->The Distributed File System (or Dfs) provides a means of
- separating the logical view of files and directories that users
- see from the actual physical locations of these resources on the
- network. It allows for higher availability, smoother storage expansion,
- load balancing etc. For more information about Dfs, refer to <A
-HREF="http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp"
-TARGET="_top"
-> Microsoft documentation</A
->. </P
+>11.5.3.2. Configure <TT
+CLASS="FILENAME"
+>nsswitch.conf</TT
+> and the
+winbind libraries</H4
><P
->This document explains how to host a Dfs tree on a Unix
- machine (for Dfs-aware clients to browse) using Samba.</P
+>The libraries needed to run the <B
+CLASS="COMMAND"
+>winbindd</B
+> daemon
+through nsswitch need to be copied to their proper locations, so</P
><P
->To enable SMB-based DFS for Samba, configure it with the
- <TT
-CLASS="PARAMETER"
-><I
->--with-msdfs</I
-></TT
-> option. Once built, a
- Samba server can be made a Dfs server by setting the global
- boolean <A
-HREF="smb.conf.5.html#HOSTMSDFS"
-TARGET="_top"
><TT
-CLASS="PARAMETER"
-><I
-> host msdfs</I
-></TT
-></A
-> parameter in the <TT
-CLASS="FILENAME"
->smb.conf
- </TT
-> file. You designate a share as a Dfs root using the share
- level boolean <A
-HREF="smb.conf.5.html#MSDFSROOT"
-TARGET="_top"
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>cp ../samba/source/nsswitch/libnss_winbind.so /lib</B
+></P
+><P
+>I also found it necessary to make the following symbolic link:</P
+><P
><TT
-CLASS="PARAMETER"
-><I
-> msdfs root</I
-></TT
-></A
-> parameter. A Dfs root directory on
- Samba hosts Dfs links in the form of symbolic links that point
- to other servers. For example, a symbolic link
- <TT
-CLASS="FILENAME"
->junction->msdfs:storage1\share1</TT
-> in
- the share directory acts as the Dfs junction. When Dfs-aware
- clients attempt to access the junction link, they are redirected
- to the storage location (in this case, \\storage1\share1).</P
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2</B
+></P
><P
->Dfs trees on Samba work with all Dfs-aware clients ranging
- from Windows 95 to 2000.</P
+>And, in the case of Sun solaris:</P
><P
->Here's an example of setting up a Dfs tree on a Samba
- server.</P
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>ln -s /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1</B
+>
+<TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.1</B
+>
+<TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.2</B
+></P
+><P
+>Now, as root you need to edit <TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+> to
+allow user and group entries to be visible from the <B
+CLASS="COMMAND"
+>winbindd</B
+>
+daemon. My <TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+> file look like
+this after editing:</P
><P
><PRE
CLASS="PROGRAMLISTING"
-># The smb.conf file:
-[global]
- netbios name = SAMBA
- host msdfs = yes
-
-[dfs]
- path = /export/dfsroot
- msdfs root = yes
- </PRE
+> passwd: files winbind
+ shadow: files
+ group: files winbind</PRE
></P
><P
->In the /export/dfsroot directory we set up our dfs links to
- other servers on the network.</P
+>
+The libraries needed by the winbind daemon will be automatically
+entered into the <B
+CLASS="COMMAND"
+>ldconfig</B
+> cache the next time
+your system reboots, but it
+is faster (and you don't need to reboot) if you do it manually:</P
><P
><TT
CLASS="PROMPT"
->root# </TT
-><TT
-CLASS="USERINPUT"
-><B
->cd /export/dfsroot</B
-></TT
+>root#</TT
+> <B
+CLASS="COMMAND"
+>/sbin/ldconfig -v | grep winbind</B
></P
><P
-><TT
-CLASS="PROMPT"
->root# </TT
-><TT
-CLASS="USERINPUT"
-><B
->chown root /export/dfsroot</B
-></TT
-></P
+>This makes <TT
+CLASS="FILENAME"
+>libnss_winbind</TT
+> available to winbindd
+and echos back a check to you.</P
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
+><A
+NAME="AEN1562"
+></A
+>11.5.3.3. Configure smb.conf</H4
><P
-><TT
-CLASS="PROMPT"
->root# </TT
-><TT
-CLASS="USERINPUT"
-><B
->chmod 755 /export/dfsroot</B
-></TT
+>Several parameters are needed in the smb.conf file to control
+the behavior of <B
+CLASS="COMMAND"
+>winbindd</B
+>. Configure
+<TT
+CLASS="FILENAME"
+>smb.conf</TT
+> These are described in more detail in
+the <A
+HREF="winbindd.8.html"
+TARGET="_top"
+>winbindd(8)</A
+> man page. My
+<TT
+CLASS="FILENAME"
+>smb.conf</TT
+> file was modified to
+include the following entries in the [global] section:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>[global]
+ <...>
+ # separate domain and username with '+', like DOMAIN+username
+ <A
+HREF="winbindd.8.html#WINBINDSEPARATOR"
+TARGET="_top"
+>winbind separator</A
+> = +
+ # use uids from 10000 to 20000 for domain users
+ <A
+HREF="winbindd.8.html#WINBINDUID"
+TARGET="_top"
+>winbind uid</A
+> = 10000-20000
+ # use gids from 10000 to 20000 for domain groups
+ <A
+HREF="winbindd.8.html#WINBINDGID"
+TARGET="_top"
+>winbind gid</A
+> = 10000-20000
+ # allow enumeration of winbind users and groups
+ <A
+HREF="winbindd.8.html#WINBINDENUMUSERS"
+TARGET="_top"
+>winbind enum users</A
+> = yes
+ <A
+HREF="winbindd.8.html#WINBINDENUMGROUP"
+TARGET="_top"
+>winbind enum groups</A
+> = yes
+ # give winbind users a real shell (only needed if they have telnet access)
+ <A
+HREF="winbindd.8.html#TEMPLATEHOMEDIR"
+TARGET="_top"
+>template homedir</A
+> = /home/winnt/%D/%U
+ <A
+HREF="winbindd.8.html#TEMPLATESHELL"
+TARGET="_top"
+>template shell</A
+> = /bin/bash</PRE
></P
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
+><A
+NAME="AEN1578"
+></A
+>11.5.3.4. Join the SAMBA server to the PDC domain</H4
><P
-><TT
-CLASS="PROMPT"
->root# </TT
-><TT
-CLASS="USERINPUT"
-><B
->ln -s msdfs:storageA\\shareA linka</B
+>Enter the following command to make the SAMBA server join the
+PDC domain, where <TT
+CLASS="REPLACEABLE"
+><I
+>DOMAIN</I
></TT
-></P
+> is the name of
+your Windows domain and <TT
+CLASS="REPLACEABLE"
+><I
+>Administrator</I
+></TT
+> is
+a domain user who has administrative privileges in the domain.</P
><P
><TT
CLASS="PROMPT"
->root# </TT
-><TT
-CLASS="USERINPUT"
-><B
->ln -s msdfs:serverB\\share,serverC\\share linkb</B
-></TT
+>root#</TT
+> <B
+CLASS="COMMAND"
+>/usr/local/samba/bin/net rpc join -s PDC -U Administrator</B
></P
><P
->You should set up the permissions and ownership of
- the directory acting as the Dfs root such that only designated
- users can create, delete or modify the msdfs links. Also note
- that symlink names should be all lowercase. This limitation exists
- to have Samba avoid trying all the case combinations to get at
- the link name. Finally set up the symbolic links to point to the
- network shares you want, and start Samba.</P
-><P
->Users on Dfs-aware clients can now browse the Dfs tree
- on the Samba server at \\samba\dfs. Accessing
- links linka or linkb (which appear as directories to the client)
- takes users directly to the appropriate shares on the network.</P
+>The proper response to the command should be: "Joined the domain
+<TT
+CLASS="REPLACEABLE"
+><I
+>DOMAIN</I
+></TT
+>" where <TT
+CLASS="REPLACEABLE"
+><I
+>DOMAIN</I
+></TT
+>
+is your DOMAIN name.</P
+></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
><A
-NAME="AEN1882"
+NAME="AEN1589"
></A
->13.1.1. Notes</H3
+>11.5.3.5. Start up the winbindd daemon and test it!</H4
><P
-></P
-><UL
-><LI
+>Eventually, you will want to modify your smb startup script to
+automatically invoke the winbindd daemon when the other parts of
+SAMBA start, but it is possible to test out just the winbind
+portion first. To start up winbind services, enter the following
+command as root:</P
><P
->Windows clients need to be rebooted
- if a previously mounted non-dfs share is made a dfs
- root or vice versa. A better way is to introduce a
- new share and make it the dfs root.</P
-></LI
-><LI
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>/usr/local/samba/bin/winbindd</B
+></P
><P
->Currently there's a restriction that msdfs
- symlink names should all be lowercase.</P
-></LI
-><LI
+>I'm always paranoid and like to make sure the daemon
+is really running...</P
><P
->For security purposes, the directory
- acting as the root of the Dfs tree should have ownership
- and permissions set so that only designated users can
- modify the symbolic links in the directory.</P
-></LI
-></UL
-></DIV
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="PRINTING"
-></A
->Chapter 14. Printing Support</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN1908"
-></A
->14.1. Introduction</H2
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>ps -ae | grep winbindd</B
+></P
><P
->Beginning with the 2.2.0 release, Samba supports
-the native Windows NT printing mechanisms implemented via
-MS-RPC (i.e. the SPOOLSS named pipe). Previous versions of
-Samba only supported LanMan printing calls.</P
+>This command should produce output like this, if the daemon is running</P
><P
->The additional functionality provided by the new
-SPOOLSS support includes:</P
+>3025 ? 00:00:00 winbindd</P
+><P
+>Now... for the real test, try to get some information about the
+users on your PDC</P
><P
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>/usr/local/samba/bin/wbinfo -u</B
></P
-><UL
-><LI
><P
->Support for downloading printer driver
- files to Windows 95/98/NT/2000 clients upon demand.
- </P
-></LI
-><LI
+>
+This should echo back a list of users on your Windows users on
+your PDC. For example, I get the following response:</P
><P
->Uploading of printer drivers via the
- Windows NT Add Printer Wizard (APW) or the
- Imprints tool set (refer to <A
-HREF="http://imprints.sourceforge.net"
-TARGET="_top"
->http://imprints.sourceforge.net</A
->).
- </P
-></LI
-><LI
+><PRE
+CLASS="PROGRAMLISTING"
+>CEO+Administrator
+CEO+burdell
+CEO+Guest
+CEO+jt-ad
+CEO+krbtgt
+CEO+TsInternetUser</PRE
+></P
><P
->Support for the native MS-RPC printing
- calls such as StartDocPrinter, EnumJobs(), etc... (See
- the MSDN documentation at <A
-HREF="http://msdn.microsoft.com/"
-TARGET="_top"
->http://msdn.microsoft.com/</A
->
- for more information on the Win32 printing API)
- </P
-></LI
-><LI
+>Obviously, I have named my domain 'CEO' and my <TT
+CLASS="PARAMETER"
+><I
+>winbind
+separator</I
+></TT
+> is '+'.</P
><P
->Support for NT Access Control Lists (ACL)
- on printer objects</P
-></LI
-><LI
+>You can do the same sort of thing to get group information from
+the PDC:</P
><P
->Improved support for printer queue manipulation
- through the use of an internal databases for spooled job
- information</P
-></LI
-></UL
+><PRE
+CLASS="PROGRAMLISTING"
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>/usr/local/samba/bin/wbinfo -g</B
+>
+CEO+Domain Admins
+CEO+Domain Users
+CEO+Domain Guests
+CEO+Domain Computers
+CEO+Domain Controllers
+CEO+Cert Publishers
+CEO+Schema Admins
+CEO+Enterprise Admins
+CEO+Group Policy Creator Owners</PRE
+></P
><P
->There has been some initial confusion about what all this means
-and whether or not it is a requirement for printer drivers to be
-installed on a Samba host in order to support printing from Windows
-clients. As a side note, Samba does not use these drivers in any way to process
-spooled files. They are utilized entirely by the clients.</P
+>The function 'getent' can now be used to get unified
+lists of both local and PDC users and groups.
+Try the following command:</P
><P
->The following MS KB article, may be of some help if you are dealing with
-Windows 2000 clients: <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->How to Add Printers with No User
-Interaction in Windows 2000</I
-></SPAN
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>getent passwd</B
></P
><P
-><A
-HREF="http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP"
-TARGET="_top"
->http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP</A
+>You should get a list that looks like your <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+>
+list followed by the domain users with their new uids, gids, home
+directories and default shells.</P
+><P
+>The same thing can be done for groups with the command</P
+><P
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>getent group</B
></P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
><A
-NAME="AEN1930"
+NAME="AEN1625"
></A
->14.2. Configuration</H2
+>11.5.3.6. Fix the init.d startup scripts</H4
><DIV
-CLASS="WARNING"
-><P
-></P
-><TABLE
-CLASS="WARNING"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/warning.gif"
-HSPACE="5"
-ALT="Warning"></TD
-><TH
-ALIGN="LEFT"
-VALIGN="CENTER"
-><B
->[print$] vs. [printer$]</B
-></TH
-></TR
-><TR
-><TD
-> </TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
+CLASS="SECT4"
+><H5
+CLASS="SECT4"
+><A
+NAME="AEN1627"
+></A
+>11.5.3.6.1. Linux</H5
><P
->Previous versions of Samba recommended using a share named [printer$].
-This name was taken from the printer$ service created by Windows 9x
-clients when a printer was shared. Windows 9x printer servers always have
-a printer$ service which provides read-only access via no
-password in order to support printer driver downloads.</P
+>The <B
+CLASS="COMMAND"
+>winbindd</B
+> daemon needs to start up after the
+<B
+CLASS="COMMAND"
+>smbd</B
+> and <B
+CLASS="COMMAND"
+>nmbd</B
+> daemons are running.
+To accomplish this task, you need to modify the startup scripts of your system. They are located at <TT
+CLASS="FILENAME"
+>/etc/init.d/smb</TT
+> in RedHat and
+<TT
+CLASS="FILENAME"
+>/etc/init.d/samba</TT
+> in Debian.
+script to add commands to invoke this daemon in the proper sequence. My
+startup script starts up <B
+CLASS="COMMAND"
+>smbd</B
+>,
+<B
+CLASS="COMMAND"
+>nmbd</B
+>, and <B
+CLASS="COMMAND"
+>winbindd</B
+> from the
+<TT
+CLASS="FILENAME"
+>/usr/local/samba/bin</TT
+> directory directly. The 'start'
+function in the script looks like this:</P
><P
->However, the initial implementation allowed for a
-parameter named <TT
-CLASS="PARAMETER"
-><I
->printer driver location</I
-></TT
->
-to be used on a per share basis to specify the location of
-the driver files associated with that printer. Another
-parameter named <TT
-CLASS="PARAMETER"
-><I
->printer driver</I
-></TT
-> provided
-a means of defining the printer driver name to be sent to
-the client.</P
-></TD
-></TR
-></TABLE
+><PRE
+CLASS="PROGRAMLISTING"
+>start() {
+ KIND="SMB"
+ echo -n $"Starting $KIND services: "
+ daemon /usr/local/samba/bin/smbd $SMBDOPTIONS
+ RETVAL=$?
+ echo
+ KIND="NMB"
+ echo -n $"Starting $KIND services: "
+ daemon /usr/local/samba/bin/nmbd $NMBDOPTIONS
+ RETVAL2=$?
+ echo
+ KIND="Winbind"
+ echo -n $"Starting $KIND services: "
+ daemon /usr/local/samba/bin/winbindd
+ RETVAL3=$?
+ echo
+ [ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] && touch /var/lock/subsys/smb || \
+ RETVAL=1
+ return $RETVAL
+}</PRE
+></P
+><P
+>The 'stop' function has a corresponding entry to shut down the
+services and look s like this:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>stop() {
+ KIND="SMB"
+ echo -n $"Shutting down $KIND services: "
+ killproc smbd
+ RETVAL=$?
+ echo
+ KIND="NMB"
+ echo -n $"Shutting down $KIND services: "
+ killproc nmbd
+ RETVAL2=$?
+ echo
+ KIND="Winbind"
+ echo -n $"Shutting down $KIND services: "
+ killproc winbindd
+ RETVAL3=$?
+ [ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] && rm -f /var/lock/subsys/smb
+ echo ""
+ return $RETVAL
+}</PRE
+></P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT4"
+><HR><H5
+CLASS="SECT4"
><A
-NAME="AEN1938"
+NAME="AEN1644"
></A
->14.2.1. Creating [print$]</H3
-><P
->In order to support the uploading of printer driver
-files, you must first configure a file share named [print$].
-The name of this share is hard coded in Samba's internals so
-the name is very important (print$ is the service used by
-Windows NT print servers to provide support for printer driver
-download).</P
+>11.5.3.6.2. Solaris</H5
><P
->You should modify the server's smb.conf file to add the global
-parameters and to create the
-following file share (of course, some of the parameter values,
-such as 'path' are arbitrary and should be replaced with
-appropriate values for your site):</P
+>On solaris, you need to modify the
+<TT
+CLASS="FILENAME"
+>/etc/init.d/samba.server</TT
+> startup script. It usually
+only starts smbd and nmbd but should now start winbindd too. If you
+have samba installed in <TT
+CLASS="FILENAME"
+>/usr/local/samba/bin</TT
+>,
+the file could contains something like this:</P
><P
><PRE
CLASS="PROGRAMLISTING"
->[global]
- ; members of the ntadmin group should be able
- ; to add drivers and set printer properties
- ; root is implicitly a 'printer admin'
- printer admin = @ntadmin
+>##
+## samba.server
+##
-[print$]
- path = /usr/local/samba/printers
- guest ok = yes
- browseable = yes
- read only = yes
- ; since this share is configured as read only, then we need
- ; a 'write list'. Check the file system permissions to make
- ; sure this account can copy files to the share. If this
- ; is setup to a non-root account, then it should also exist
- ; as a 'printer admin'
- write list = @ntadmin,root</PRE
+if [ ! -d /usr/bin ]
+then # /usr not mounted
+ exit
+fi
+
+killproc() { # kill the named process(es)
+ pid=`/usr/bin/ps -e |
+ /usr/bin/grep -w $1 |
+ /usr/bin/sed -e 's/^ *//' -e 's/ .*//'`
+ [ "$pid" != "" ] && kill $pid
+}
+
+# Start/stop processes required for samba server
+
+case "$1" in
+
+'start')
+#
+# Edit these lines to suit your installation (paths, workgroup, host)
+#
+echo Starting SMBD
+ /usr/local/samba/bin/smbd -D -s \
+ /usr/local/samba/smb.conf
+
+echo Starting NMBD
+ /usr/local/samba/bin/nmbd -D -l \
+ /usr/local/samba/var/log -s /usr/local/samba/smb.conf
+
+echo Starting Winbind Daemon
+ /usr/local/samba/bin/winbindd
+ ;;
+
+'stop')
+ killproc nmbd
+ killproc smbd
+ killproc winbindd
+ ;;
+
+*)
+ echo "Usage: /etc/init.d/samba.server { start | stop }"
+ ;;
+esac</PRE
></P
-><P
->The <A
-HREF="smb.conf.5.html#WRITELIST"
-TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->write list</I
-></TT
+></DIV
+><DIV
+CLASS="SECT4"
+><HR><H5
+CLASS="SECT4"
+><A
+NAME="AEN1651"
></A
-> is used to allow administrative
-level user accounts to have write access in order to update files
-on the share. See the <A
-HREF="smb.conf.5.html"
-TARGET="_top"
->smb.conf(5)
-man page</A
-> for more information on configuring file shares.</P
+>11.5.3.6.3. Restarting</H5
><P
->The requirement for <A
-HREF="smb.conf.5.html#GUESTOK"
-TARGET="_top"
-><B
+>If you restart the <B
CLASS="COMMAND"
->guest
-ok = yes</B
-></A
-> depends upon how your
-site is configured. If users will be guaranteed to have
-an account on the Samba host, then this is a non-issue.</P
+>smbd</B
+>, <B
+CLASS="COMMAND"
+>nmbd</B
+>,
+and <B
+CLASS="COMMAND"
+>winbindd</B
+> daemons at this point, you
+should be able to connect to the samba server as a domain member just as
+if you were a local user.</P
+></DIV
+></DIV
><DIV
-CLASS="NOTE"
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
+><A
+NAME="AEN1657"
+></A
+>11.5.3.7. Configure Winbind and PAM</H4
+><P
+>If you have made it this far, you know that winbindd and samba are working
+together. If you want to use winbind to provide authentication for other
+services, keep reading. The pam configuration files need to be altered in
+this step. (Did you remember to make backups of your original
+<TT
+CLASS="FILENAME"
+>/etc/pam.d</TT
+> files? If not, do it now.)</P
+><P
+>You will need a pam module to use winbindd with these other services. This
+module will be compiled in the <TT
+CLASS="FILENAME"
+>../source/nsswitch</TT
+> directory
+by invoking the command</P
><P
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
+CLASS="COMMAND"
+>make nsswitch/pam_winbind.so</B
></P
-><TABLE
-CLASS="NOTE"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/note.gif"
-HSPACE="5"
-ALT="Note"></TD
-><TH
-ALIGN="LEFT"
-VALIGN="CENTER"
-><B
->Author's Note</B
-></TH
-></TR
-><TR
-><TD
-> </TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
><P
->The non-issue is that if all your Windows NT users are guaranteed to be
-authenticated by the Samba server (such as a domain member server and the NT
-user has already been validated by the Domain Controller in
-order to logon to the Windows NT console), then guest access
-is not necessary. Of course, in a workgroup environment where
-you just want to be able to print without worrying about
-silly accounts and security, then configure the share for
-guest access. You'll probably want to add <A
-HREF="smb.conf.5.html#MAPTOGUEST"
-TARGET="_top"
-><B
+>from the <TT
+CLASS="FILENAME"
+>../source</TT
+> directory. The
+<TT
+CLASS="FILENAME"
+>pam_winbind.so</TT
+> file should be copied to the location of
+your other pam security modules. On my RedHat system, this was the
+<TT
+CLASS="FILENAME"
+>/lib/security</TT
+> directory. On Solaris, the pam security
+modules reside in <TT
+CLASS="FILENAME"
+>/usr/lib/security</TT
+>.</P
+><P
+><TT
+CLASS="PROMPT"
+>root#</TT
+> <B
CLASS="COMMAND"
->map to guest = Bad User</B
+>cp ../samba/source/nsswitch/pam_winbind.so /lib/security</B
+></P
+><DIV
+CLASS="SECT4"
+><HR><H5
+CLASS="SECT4"
+><A
+NAME="AEN1674"
></A
-> in the [global] section as well. Make sure
-you understand what this parameter does before using it
-though. --jerry</P
-></TD
-></TR
-></TABLE
-></DIV
+>11.5.3.7.1. Linux/FreeBSD-specific PAM configuration</H5
><P
->In order for a Windows NT print server to support
-the downloading of driver files by multiple client architectures,
-it must create subdirectories within the [print$] service
-which correspond to each of the supported client architectures.
-Samba follows this model as well.</P
+>The <TT
+CLASS="FILENAME"
+>/etc/pam.d/samba</TT
+> file does not need to be changed. I
+just left this fileas it was:</P
><P
->Next create the directory tree below the [print$] share
-for each architecture you wish to support.</P
+><PRE
+CLASS="PROGRAMLISTING"
+>auth required /lib/security/pam_stack.so service=system-auth
+account required /lib/security/pam_stack.so service=system-auth</PRE
+></P
+><P
+>The other services that I modified to allow the use of winbind
+as an authentication service were the normal login on the console (or a terminal
+session), telnet logins, and ftp service. In order to enable these
+services, you may first need to change the entries in
+<TT
+CLASS="FILENAME"
+>/etc/xinetd.d</TT
+> (or <TT
+CLASS="FILENAME"
+>/etc/inetd.conf</TT
+>).
+RedHat 7.1 uses the new xinetd.d structure, in this case you need
+to change the lines in <TT
+CLASS="FILENAME"
+>/etc/xinetd.d/telnet</TT
+>
+and <TT
+CLASS="FILENAME"
+>/etc/xinetd.d/wu-ftp</TT
+> from </P
><P
><PRE
CLASS="PROGRAMLISTING"
->[print$]-----
- |-W32X86 ; "Windows NT x86"
- |-WIN40 ; "Windows 95/98"
- |-W32ALPHA ; "Windows NT Alpha_AXP"
- |-W32MIPS ; "Windows NT R4000"
- |-W32PPC ; "Windows NT PowerPC"</PRE
+>enable = no</PRE
></P
-><DIV
-CLASS="WARNING"
><P
+>to</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>enable = yes</PRE
></P
-><TABLE
-CLASS="WARNING"
-WIDTH="100%"
-BORDER="0"
-><TR
-><TD
-WIDTH="25"
-ALIGN="CENTER"
-VALIGN="TOP"
-><IMG
-SRC="/docbook-dsssl/warning.gif"
-HSPACE="5"
-ALT="Warning"></TD
-><TH
-ALIGN="LEFT"
-VALIGN="CENTER"
-><B
->ATTENTION! REQUIRED PERMISSIONS</B
-></TH
-></TR
-><TR
-><TD
-> </TD
-><TD
-ALIGN="LEFT"
-VALIGN="TOP"
><P
->In order to currently add a new driver to you Samba host,
-one of two conditions must hold true:</P
+>
+For ftp services to work properly, you will also need to either
+have individual directories for the domain users already present on
+the server, or change the home directory template to a general
+directory for all domain users. These can be easily set using
+the <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> global entry
+<B
+CLASS="COMMAND"
+>template homedir</B
+>.</P
+><P
+>The <TT
+CLASS="FILENAME"
+>/etc/pam.d/ftp</TT
+> file can be changed
+to allow winbind ftp access in a manner similar to the
+samba file. My <TT
+CLASS="FILENAME"
+>/etc/pam.d/ftp</TT
+> file was
+changed to look like this:</P
><P
+><PRE
+CLASS="PROGRAMLISTING"
+>auth required /lib/security/pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed
+auth sufficient /lib/security/pam_winbind.so
+auth required /lib/security/pam_stack.so service=system-auth
+auth required /lib/security/pam_shells.so
+account sufficient /lib/security/pam_winbind.so
+account required /lib/security/pam_stack.so service=system-auth
+session required /lib/security/pam_stack.so service=system-auth</PRE
></P
-><UL
-><LI
><P
->The account used to connect to the Samba host
- must have a uid of 0 (i.e. a root account)</P
-></LI
-><LI
+>The <TT
+CLASS="FILENAME"
+>/etc/pam.d/login</TT
+> file can be changed nearly the
+same way. It now looks like this:</P
><P
->The account used to connect to the Samba host
- must be a member of the <A
-HREF="smb.conf.5.html#PRINTERADMIN"
-TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->printer
- admin</I
-></TT
+><PRE
+CLASS="PROGRAMLISTING"
+>auth required /lib/security/pam_securetty.so
+auth sufficient /lib/security/pam_winbind.so
+auth sufficient /lib/security/pam_unix.so use_first_pass
+auth required /lib/security/pam_stack.so service=system-auth
+auth required /lib/security/pam_nologin.so
+account sufficient /lib/security/pam_winbind.so
+account required /lib/security/pam_stack.so service=system-auth
+password required /lib/security/pam_stack.so service=system-auth
+session required /lib/security/pam_stack.so service=system-auth
+session optional /lib/security/pam_console.so</PRE
+></P
+><P
+>In this case, I added the <B
+CLASS="COMMAND"
+>auth sufficient /lib/security/pam_winbind.so</B
+>
+lines as before, but also added the <B
+CLASS="COMMAND"
+>required pam_securetty.so</B
+>
+above it, to disallow root logins over the network. I also added a
+<B
+CLASS="COMMAND"
+>sufficient /lib/security/pam_unix.so use_first_pass</B
+>
+line after the <B
+CLASS="COMMAND"
+>winbind.so</B
+> line to get rid of annoying
+double prompts for passwords.</P
+></DIV
+><DIV
+CLASS="SECT4"
+><HR><H5
+CLASS="SECT4"
+><A
+NAME="AEN1707"
></A
-> list.</P
-></LI
-></UL
+>11.5.3.7.2. Solaris-specific configuration</H5
+><P
+>The /etc/pam.conf needs to be changed. I changed this file so that my Domain
+users can logon both locally as well as telnet.The following are the changes
+that I made.You can customize the pam.conf file as per your requirements,but
+be sure of those changes because in the worst case it will leave your system
+nearly impossible to boot.</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>#
+#ident "@(#)pam.conf 1.14 99/09/16 SMI"
+#
+# Copyright (c) 1996-1999, Sun Microsystems, Inc.
+# All Rights Reserved.
+#
+# PAM configuration
+#
+# Authentication management
+#
+login auth required /usr/lib/security/pam_winbind.so
+login auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
+login auth required /usr/lib/security/$ISA/pam_dial_auth.so.1 try_first_pass
+#
+rlogin auth sufficient /usr/lib/security/pam_winbind.so
+rlogin auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
+rlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
+#
+dtlogin auth sufficient /usr/lib/security/pam_winbind.so
+dtlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
+#
+rsh auth required /usr/lib/security/$ISA/pam_rhosts_auth.so.1
+other auth sufficient /usr/lib/security/pam_winbind.so
+other auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
+#
+# Account management
+#
+login account sufficient /usr/lib/security/pam_winbind.so
+login account requisite /usr/lib/security/$ISA/pam_roles.so.1
+login account required /usr/lib/security/$ISA/pam_unix.so.1
+#
+dtlogin account sufficient /usr/lib/security/pam_winbind.so
+dtlogin account requisite /usr/lib/security/$ISA/pam_roles.so.1
+dtlogin account required /usr/lib/security/$ISA/pam_unix.so.1
+#
+other account sufficient /usr/lib/security/pam_winbind.so
+other account requisite /usr/lib/security/$ISA/pam_roles.so.1
+other account required /usr/lib/security/$ISA/pam_unix.so.1
+#
+# Session management
+#
+other session required /usr/lib/security/$ISA/pam_unix.so.1
+#
+# Password management
+#
+#other password sufficient /usr/lib/security/pam_winbind.so
+other password required /usr/lib/security/$ISA/pam_unix.so.1
+dtsession auth required /usr/lib/security/$ISA/pam_unix.so.1
+#
+# Support for Kerberos V5 authentication (uncomment to use Kerberos)
+#
+#rlogin auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+#login auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+#dtlogin auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+#other auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+#dtlogin account optional /usr/lib/security/$ISA/pam_krb5.so.1
+#other account optional /usr/lib/security/$ISA/pam_krb5.so.1
+#other session optional /usr/lib/security/$ISA/pam_krb5.so.1
+#other password optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass</PRE
+></P
><P
->Of course, the connected account must still possess access
-to add files to the subdirectories beneath [print$]. Remember
-that all file shares are set to 'read only' by default.</P
-></TD
-></TR
-></TABLE
-></DIV
+>I also added a try_first_pass line after the winbind.so line to get rid of
+annoying double prompts for passwords.</P
><P
->Once you have created the required [print$] service and
-associated subdirectories, simply log onto the Samba server using
-a root (or <TT
-CLASS="PARAMETER"
-><I
->printer admin</I
-></TT
->) account
-from a Windows NT 4.0/2k client. Open "Network Neighbourhood" or
-"My Network Places" and browse for the Samba host. Once you have located
-the server, navigate to the "Printers..." folder.
-You should see an initial listing of printers
-that matches the printer shares defined on your Samba host.</P
+>Now restart your Samba & try connecting through your application that you
+configured in the pam.conf.</P
+></DIV
+></DIV
+></DIV
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN1973"
+NAME="AEN1714"
></A
->14.2.2. Setting Drivers for Existing Printers</H3
-><P
->The initial listing of printers in the Samba host's
-Printers folder will have no real printer driver assigned
-to them. This defaults to a NULL string to allow the use
-of the local Add Printer Wizard on NT/2000 clients.
-Attempting to view the printer properties for a printer
-which has this default driver assigned will result in
-the error message:</P
-><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Device settings cannot be displayed. The driver
-for the specified printer is not installed, only spooler
-properties will be displayed. Do you want to install the
-driver now?</I
-></SPAN
-></P
+>11.6. Limitations</H2
><P
->Click "No" in the error dialog and you will be presented with
-the printer properties window. The way to assign a driver to a
-printer is to either</P
+>Winbind has a number of limitations in its current
+ released version that we hope to overcome in future
+ releases:</P
><P
></P
><UL
><LI
><P
->Use the "New Driver..." button to install
- a new printer driver, or</P
+>Winbind is currently only available for
+ the Linux operating system, although ports to other operating
+ systems are certainly possible. For such ports to be feasible,
+ we require the C library of the target operating system to
+ support the Name Service Switch and Pluggable Authentication
+ Modules systems. This is becoming more common as NSS and
+ PAM gain support among UNIX vendors.</P
></LI
><LI
><P
->Select a driver from the popup list of
- installed drivers. Initially this list will be empty.</P
+>The mappings of Windows NT RIDs to UNIX ids
+ is not made algorithmically and depends on the order in which
+ unmapped users or groups are seen by winbind. It may be difficult
+ to recover the mappings of rid to UNIX id mapping if the file
+ containing this information is corrupted or destroyed.</P
></LI
-></UL
-><P
->If you wish to install printer drivers for client
-operating systems other than "Windows NT x86", you will need
-to use the "Sharing" tab of the printer properties dialog.</P
-><P
->Assuming you have connected with a root account, you
-will also be able modify other printer properties such as
-ACLs and device settings using this dialog box.</P
+><LI
><P
->A few closing comments for this section, it is possible
-on a Windows NT print server to have printers
-listed in the Printers folder which are not shared. Samba does
-not make this distinction. By definition, the only printers of
-which Samba is aware are those which are specified as shares in
-<TT
-CLASS="FILENAME"
->smb.conf</TT
->.</P
+>Currently the winbind PAM module does not take
+ into account possible workstation and logon time restrictions
+ that may be been set for Windows NT users.</P
+></LI
+></UL
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN1724"
+></A
+>11.7. Conclusion</H2
><P
->Another interesting side note is that Windows NT clients do
-not use the SMB printer share, but rather can print directly
-to any printer on another Windows NT host using MS-RPC. This
-of course assumes that the printing client has the necessary
-privileges on the remote host serving the printer. The default
-permissions assigned by Windows NT to a printer gives the "Print"
-permissions to the "Everyone" well-known group.</P
+>The winbind system, through the use of the Name Service
+ Switch, Pluggable Authentication Modules, and appropriate
+ Microsoft RPC calls have allowed us to provide seamless
+ integration of Microsoft Windows NT domain users on a
+ UNIX system. The result is a great reduction in the administrative
+ cost of running a mixed UNIX and NT network.</P
+></DIV
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="SAMBA-PDC"
+></A
+>Chapter 12. How to Configure Samba 2.2 as a Primary Domain Controller</H1
+><DIV
+CLASS="SECT1"
+><H2
+CLASS="SECT1"
><A
-NAME="AEN1989"
+NAME="AEN1744"
></A
->14.2.3. Support a large number of printers</H3
+>12.1. Prerequisite Reading</H2
><P
->One issue that has arisen during the development
-phase of Samba 2.2 is the need to support driver downloads for
-100's of printers. Using the Windows NT APW is somewhat
-awkward to say the list. If more than one printer are using the
-HREF="rpcclient.1.html"
+>Before you continue reading in this chapter, please make sure
+that you are comfortable with configuring basic files services
+in smb.conf and how to enable and administer password
+encryption in Samba. Theses two topics are covered in the
+<A
+HREF="smb.conf.5.html"
TARGET="_top"
-><B
-CLASS="COMMAND"
->rpcclient's
-setdriver command</B
+><TT
+CLASS="FILENAME"
+>smb.conf(5)</TT
></A
-> can be used to set the driver
-associated with an installed driver. The following is example
-of how this could be accomplished:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
>
-<TT
-CLASS="PROMPT"
->$ </TT
->rpcclient pogo -U root%secret -c "enumdrivers"
-Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
-
-[Windows NT x86]
-Printer Driver Info 1:
- Driver Name: [HP LaserJet 4000 Series PS]
-
-Printer Driver Info 1:
- Driver Name: [HP LaserJet 2100 Series PS]
-
-Printer Driver Info 1:
- Driver Name: [HP LaserJet 4Si/4SiMX PS]
-
-<TT
-CLASS="PROMPT"
->$ </TT
->rpcclient pogo -U root%secret -c "enumprinters"
-Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
- flags:[0x800000]
- name:[\\POGO\hp-print]
- description:[POGO\\POGO\hp-print,NO DRIVER AVAILABLE FOR THIS PRINTER,]
- comment:[]
-
-<TT
-CLASS="PROMPT"
->$ </TT
->rpcclient pogo -U root%secret \
-<TT
-CLASS="PROMPT"
->> </TT
-> -c "setdriver hp-print \"HP LaserJet 4000 Series PS\""
-Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
-Successfully set hp-print to driver HP LaserJet 4000 Series PS.</PRE
-></P
+manpage and the <A
+HREF="ENCRYPTION.html"
+TARGET="_top"
+>Encryption chapter</A
+>
+of this HOWTO Collection.</P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN2000"
+NAME="AEN1750"
></A
->14.2.4. Adding New Printers via the Windows NT APW</H3
+>12.2. Background</H2
+><DIV
+CLASS="NOTE"
+><P
+></P
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
+><P
+><SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Author's Note:</I
+></SPAN
+> This document is a combination
+of David Bannon's "Samba 2.2 PDC HOWTO" and "Samba NT Domain FAQ".
+Both documents are superseded by this one.</P
+></TD
+></TR
+></TABLE
+></DIV
+><P
+>Versions of Samba prior to release 2.2 had marginal capabilities to act
+as a Windows NT 4.0 Primary Domain Controller
+
+(PDC). With Samba 2.2.0, we are proud to announce official support for
+Windows NT 4.0-style domain logons from Windows NT 4.0 and Windows
+2000 clients. This article outlines the steps
+necessary for configuring Samba as a PDC. It is necessary to have a
+working Samba server prior to implementing the PDC functionality. If
+you have not followed the steps outlined in <A
+HREF="UNIX_INSTALL.html"
+TARGET="_top"
+> UNIX_INSTALL.html</A
+>, please make sure
+that your server is configured correctly before proceeding. Another
+good resource in the <A
+HREF="smb.conf.5.html"
+TARGET="_top"
+>smb.conf(5) man
+page</A
+>. The following functionality should work in 2.2:</P
><P
->By default, Samba offers all printer shares defined in <TT
-CLASS="FILENAME"
->smb.conf</TT
->
-in the "Printers..." folder. Also existing in this folder is the Windows NT
-Add Printer Wizard icon. The APW will be show only if</P
+></P
+><UL
+><LI
+><P
+> domain logons for Windows NT 4.0/2000 clients.
+ </P
+></LI
+><LI
+><P
+> placing a Windows 9x client in user level security
+ </P
+></LI
+><LI
+><P
+> retrieving a list of users and groups from a Samba PDC to
+ Windows 9x/NT/2000 clients
+ </P
+></LI
+><LI
+><P
+> roving (roaming) user profiles
+ </P
+></LI
+><LI
+><P
+> Windows NT 4.0-style system policies
+ </P
+></LI
+></UL
+><P
+>The following pieces of functionality are not included in the 2.2 release:</P
><P
></P
><UL
><LI
><P
->The connected user is able to successfully
- execute an OpenPrinterEx(\\server) with administrative
- privileges (i.e. root or <TT
-CLASS="PARAMETER"
-><I
->printer admin</I
-></TT
->).
+> Windows NT 4 domain trusts
</P
></LI
><LI
><P
-><A
-HREF="smb.conf.5.html#SHOWADDPRINTERWIZARD"
-TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->show
- add printer wizard = yes</I
-></TT
-></A
-> (the default).
+> SAM replication with Windows NT 4.0 Domain Controllers
+ (i.e. a Samba PDC and a Windows NT BDC or vice versa)
+ </P
+></LI
+><LI
+><P
+> Adding users via the User Manager for Domains
+ </P
+></LI
+><LI
+><P
+> Acting as a Windows 2000 Domain Controller (i.e. Kerberos and
+ Active Directory)
</P
></LI
></UL
><P
->In order to be able to use the APW to successfully add a printer to a Samba
-server, the <A
-HREF="smb.conf.5.html#ADDPRINTERCOMMAND"
-TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->add
-printer command</I
-></TT
+>Please note that Windows 9x clients are not true members of a domain
+for reasons outlined in this article. Therefore the protocol for
+support Windows 9x-style domain logons is completely different
+from NT4 domain logons and has been officially supported for some
+time.</P
+><P
+>Implementing a Samba PDC can basically be divided into 2 broad
+steps.</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> Configuring the Samba PDC
+ </P
+></LI
+><LI
+><P
+> Creating machine trust accounts and joining clients
+ to the domain
+ </P
+></LI
+></OL
+><P
+>There are other minor details such as user profiles, system
+policies, etc... However, these are not necessarily specific
+to a Samba PDC as much as they are related to Windows NT networking
+concepts. They will be mentioned only briefly here.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN1789"
></A
-> must have a defined value. The program
-hook must successfully add the printer to the system (i.e.
-<TT
-CLASS="FILENAME"
->/etc/printcap</TT
-> or appropriate files) and
-<TT
+>12.3. Configuring the Samba Domain Controller</H2
+><P
+>The first step in creating a working Samba PDC is to
+understand the parameters necessary in smb.conf. I will not
+attempt to re-explain the parameters here as they are more that
+adequately covered in <A
+HREF="smb.conf.5.html"
+TARGET="_top"
+> the smb.conf
+man page</A
+>. For convenience, the parameters have been
+linked with the actual smb.conf description.</P
+><P
+>Here is an example <TT
CLASS="FILENAME"
>smb.conf</TT
-> if necessary.</P
+> for acting as a PDC:</P
><P
->When using the APW from a client, if the named printer share does
-not exist, <B
-CLASS="COMMAND"
->smbd</B
-> will execute the <TT
-CLASS="PARAMETER"
+><PRE
+CLASS="PROGRAMLISTING"
+>[global]
+ ; Basic server settings
+ <A
+HREF="smb.conf.5.html#NETBIOSNAME"
+TARGET="_top"
+>netbios name</A
+> = <TT
+CLASS="REPLACEABLE"
+><I
+>POGO</I
+></TT
+>
+ <A
+HREF="smb.conf.5.html#WORKGROUP"
+TARGET="_top"
+>workgroup</A
+> = <TT
+CLASS="REPLACEABLE"
+><I
+>NARNIA</I
+></TT
+>
+
+ ; we should act as the domain and local master browser
+ <A
+HREF="smb.conf.5.html#OSLEVEL"
+TARGET="_top"
+>os level</A
+> = 64
+ <A
+HREF="smb.conf.5.html#PERFERREDMASTER"
+TARGET="_top"
+>preferred master</A
+> = yes
+ <A
+HREF="smb.conf.5.html#DOMAINMASTER"
+TARGET="_top"
+>domain master</A
+> = yes
+ <A
+HREF="smb.conf.5.html#LOCALMASTER"
+TARGET="_top"
+>local master</A
+> = yes
+
+ ; security settings (must user security = user)
+ <A
+HREF="smb.conf.5.html#SECURITYEQUALSUSER"
+TARGET="_top"
+>security</A
+> = user
+
+ ; encrypted passwords are a requirement for a PDC
+ <A
+HREF="smb.conf.5.html#ENCRYPTPASSWORDS"
+TARGET="_top"
+>encrypt passwords</A
+> = yes
+
+ ; support domain logons
+ <A
+HREF="smb.conf.5.html#DOMAINLOGONS"
+TARGET="_top"
+>domain logons</A
+> = yes
+
+ ; where to store user profiles?
+ <A
+HREF="smb.conf.5.html#LOGONPATH"
+TARGET="_top"
+>logon path</A
+> = \\%N\profiles\%u
+
+ ; where is a user's home directory and where should it
+ ; be mounted at?
+ <A
+HREF="smb.conf.5.html#LOGONDRIVE"
+TARGET="_top"
+>logon drive</A
+> = H:
+ <A
+HREF="smb.conf.5.html#LOGONHOME"
+TARGET="_top"
+>logon home</A
+> = \\homeserver\%u
+
+ ; specify a generic logon script for all users
+ ; this is a relative **DOS** path to the [netlogon] share
+ <A
+HREF="smb.conf.5.html#LOGONSCRIPT"
+TARGET="_top"
+>logon script</A
+> = logon.cmd
+
+; necessary share for domain controller
+[netlogon]
+ <A
+HREF="smb.conf.5.html#PATH"
+TARGET="_top"
+>path</A
+> = /usr/local/samba/lib/netlogon
+ <A
+HREF="smb.conf.5.html#READONLY"
+TARGET="_top"
+>read only</A
+> = yes
+ <A
+HREF="smb.conf.5.html#WRITELIST"
+TARGET="_top"
+>write list</A
+> = <TT
+CLASS="REPLACEABLE"
><I
->add printer
-command</I
+>ntadmin</I
></TT
-> and reparse to the <TT
-CLASS="FILENAME"
->smb.conf</TT
>
-to attempt to locate the new printer share. If the share is still not defined,
-an error of "Access Denied" is returned to the client. Note that the
-<TT
-CLASS="PARAMETER"
-><I
->add printer program</I
-></TT
-> is executed under the context
-of the connected user, not necessarily a root account.</P
-><P
->There is a complementary <A
-HREF="smb.conf.5.html#DELETEPRINTERCOMMAND"
+
+; share for storing user profiles
+[profiles]
+ <A
+HREF="smb.conf.5.html#PATH"
TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->delete
-printer command</I
-></TT
-></A
-> for removing entries from the "Printers..."
-folder.</P
-><P
->The following is an example <A
-HREF="smb.conf.5.html#ADDPRINTERCOMMAN"
+>path</A
+> = /export/smb/ntprofile
+ <A
+HREF="smb.conf.5.html#READONLY"
TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->add printer command</I
-></TT
-></A
-> script. It adds the appropriate entries to <TT
-CLASS="FILENAME"
->/etc/printcap.local</TT
-> (change that to what you need) and returns a line of 'Done' which is needed for the whole process to work.</P
-><PRE
-CLASS="PROGRAMLISTING"
->#!/bin/sh
-
-# Script to insert a new printer entry into printcap.local
-#
-# $1, printer name, used as the descriptive name
-# $2, share name, used as the printer name for Linux
-# $3, port name
-# $4, driver name
-# $5, location, used for the device file of the printer
-# $6, win9x location
-
-#
-# Make sure we use the location that RedHat uses for local printer defs
-PRINTCAP=/etc/printcap.local
-DATE=`date +%Y%m%d-%H%M%S`
-LP=lp
-RESTART="service lpd restart"
-
-# Keep a copy
-cp $PRINTCAP $PRINTCAP.$DATE
-# Add the printer to $PRINTCAP
-echo "" >> $PRINTCAP
-echo "$2|$1:\\" >> $PRINTCAP
-echo " :sd=/var/spool/lpd/$2:\\" >> $PRINTCAP
-echo " :mx=0:ml=0:sh:\\" >> $PRINTCAP
-echo " :lp=/usr/local/samba/var/print/$5.prn:" >> $PRINTCAP
-
-touch "/usr/local/samba/var/print/$5.prn" >> /tmp/printadd.$$ 2>&1
-chown $LP "/usr/local/samba/var/print/$5.prn" >> /tmp/printadd.$$ 2>&1
-
-mkdir /var/spool/lpd/$2
-chmod 700 /var/spool/lpd/$2
-chown $LP /var/spool/lpd/$2
-#echo $1 >> "/usr/local/samba/var/print/$5.prn"
-#echo $2 >> "/usr/local/samba/var/print/$5.prn"
-#echo $3 >> "/usr/local/samba/var/print/$5.prn"
-#echo $4 >> "/usr/local/samba/var/print/$5.prn"
-#echo $5 >> "/usr/local/samba/var/print/$5.prn"
-#echo $6 >> "/usr/local/samba/var/print/$5.prn"
-$RESTART >> "/usr/local/samba/var/print/$5.prn"
-# Not sure if this is needed
-touch /usr/local/samba/lib/smb.conf
-#
-# You need to return a value, but I am not sure what it means.
-#
-echo "Done"
-exit 0</PRE
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2030"
-></A
->14.2.5. Samba and Printer Ports</H3
-><P
->Windows NT/2000 print servers associate a port with each printer. These normally
-take the form of LPT1:, COM1:, FILE:, etc... Samba must also support the
-concept of ports associated with a printer. By default, only one printer port,
-named "Samba Printer Port", exists on a system. Samba does not really a port in
-order to print, rather it is a requirement of Windows clients. </P
-><P
->Note that Samba does not support the concept of "Printer Pooling" internally
-either. This is when a logical printer is assigned to multiple ports as
-a form of load balancing or fail over.</P
-><P
->If you require that multiple ports be defined for some reason,
-<TT
-CLASS="FILENAME"
->smb.conf</TT
-> possesses a <A
-HREF="smb.conf.5.html#ENUMPORTSCOMMAND"
+>read only</A
+> = no
+ <A
+HREF="smb.conf.5.html#CREATEMASK"
TARGET="_top"
-><TT
-CLASS="PARAMETER"
-><I
->enumports
-command</I
-></TT
-></A
-> which can be used to define an external program
-that generates a listing of ports on a system.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN2038"
-></A
->14.3. The Imprints Toolset</H2
-><P
->The Imprints tool set provides a UNIX equivalent of the
- Windows NT Add Printer Wizard. For complete information, please
- refer to the Imprints web site at <A
-HREF="http://imprints.sourceforge.net/"
+>create mask</A
+> = 0600
+ <A
+HREF="smb.conf.5.html#DIRECTORYMASK"
TARGET="_top"
-> http://imprints.sourceforge.net/</A
-> as well as the documentation
- included with the imprints source distribution. This section will
- only provide a brief introduction to the features of Imprints.</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2042"
-></A
->14.3.1. What is Imprints?</H3
+>directory mask</A
+> = 0700</PRE
+></P
><P
->Imprints is a collection of tools for supporting the goals
- of</P
+>There are a couple of points to emphasize in the above configuration.</P
><P
></P
><UL
><LI
><P
->Providing a central repository information
- regarding Windows NT and 95/98 printer driver packages</P
+> Encrypted passwords must be enabled. For more details on how
+ to do this, refer to <A
+HREF="ENCRYPTION.html"
+TARGET="_top"
+>ENCRYPTION.html</A
+>.
+ </P
></LI
><LI
><P
->Providing the tools necessary for creating
- the Imprints printer driver packages.</P
+> The server must support domain logons and a
+ <TT
+CLASS="FILENAME"
+>[netlogon]</TT
+> share
+ </P
></LI
><LI
><P
->Providing an installation client which
- will obtain and install printer drivers on remote Samba
- and Windows NT 4 print servers.</P
+> The server must be the domain master browser in order for Windows
+ client to locate the server as a DC. Please refer to the various
+ Network Browsing documentation included with this distribution for
+ details.
+ </P
></LI
></UL
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2052"
-></A
->14.3.2. Creating Printer Driver Packages</H3
-><P
->The process of creating printer driver packages is beyond
- the scope of this document (refer to Imprints.txt also included
- with the Samba distribution for more information). In short,
- an Imprints driver package is a gzipped tarball containing the
- driver files, related INF files, and a control file needed by the
- installation client.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2055"
-></A
->14.3.3. The Imprints server</H3
><P
->The Imprints server is really a database server that
- may be queried via standard HTTP mechanisms. Each printer
- entry in the database has an associated URL for the actual
- downloading of the package. Each package is digitally signed
- via GnuPG which can be used to verify that package downloaded
- is actually the one referred in the Imprints database. It is
- <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->not</I
-></SPAN
-> recommended that this security check
- be disabled.</P
+>As Samba 2.2 does not offer a complete implementation of group mapping
+between Windows NT groups and Unix groups (this is really quite
+complicated to explain in a short space), you should refer to the
+<A
+HREF="smb.conf.5.html#DOMAINADMINGROUP"
+TARGET="_top"
+>domain admin
+group</A
+> smb.conf parameter for information of creating "Domain
+Admins" style accounts.</P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN2059"
+NAME="AEN1832"
></A
->14.3.4. The Installation Client</H3
+>12.4. Creating Machine Trust Accounts and Joining Clients to the
+Domain</H2
><P
->More information regarding the Imprints installation client
- is available in the <TT
-CLASS="FILENAME"
->Imprints-Client-HOWTO.ps</TT
->
- file included with the imprints source package.</P
+>A machine trust account is a Samba account that is used to
+authenticate a client machine (rather than a user) to the Samba
+server. In Windows terminology, this is known as a "Computer
+Account."</P
><P
->The Imprints installation client comes in two forms.</P
+>The password of a machine trust account acts as the shared secret for
+secure communication with the Domain Controller. This is a security
+feature to prevent an unauthorized machine with the same NetBIOS name
+from joining the domain and gaining access to domain user/group
+accounts. Windows NT and 2000 clients use machine trust accounts, but
+Windows 9x clients do not. Hence, a Windows 9x client is never a true
+member of a domain because it does not possess a machine trust
+account, and thus has no shared secret with the domain controller.</P
><P
+>A Windows PDC stores each machine trust account in the Windows
+Registry. A Samba PDC, however, stores each machine trust account
+in two parts, as follows:
+
+<P
></P
><UL
><LI
><P
->a set of command line Perl scripts</P
+>A Samba account, stored in the same location as user
+ LanMan and NT password hashes (currently
+ <TT
+CLASS="FILENAME"
+>smbpasswd</TT
+>). The Samba account
+ possesses and uses only the NT password hash.</P
></LI
><LI
><P
->a GTK+ based graphical interface to
- the command line perl scripts</P
+>A corresponding Unix account, typically stored in
+ <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+>. (Future releases will alleviate the need to
+ create <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entries.) </P
></LI
></UL
-><P
->The installation client (in both forms) provides a means
- of querying the Imprints database server for a matching
- list of known printer model names as well as a means to
- download and install the drivers on remote Samba and Windows
- NT print servers.</P
-><P
->The basic installation process is in four steps and
- perl code is wrapped around <B
-CLASS="COMMAND"
->smbclient</B
->
- and <B
-CLASS="COMMAND"
->rpcclient</B
->.</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->
-foreach (supported architecture for a given driver)
-{
- 1. rpcclient: Get the appropriate upload directory
- on the remote server
- 2. smbclient: Upload the driver files
- 3. rpcclient: Issues an AddPrinterDriver() MS-RPC
-}
-
-4. rpcclient: Issue an AddPrinterEx() MS-RPC to actually
- create the printer</PRE
></P
><P
->One of the problems encountered when implementing
- the Imprints tool set was the name space issues between
- various supported client architectures. For example, Windows
- NT includes a driver named "Apple LaserWriter II NTX v51.8"
- and Windows 95 calls its version of this driver "Apple
- LaserWriter II NTX"</P
-><P
->The problem is how to know what client drivers have
- been uploaded for a printer. As astute reader will remember
- that the Windows NT Printer Properties dialog only includes
- space for one printer driver name. A quick look in the
- Windows NT 4.0 system registry at</P
+>There are two ways to create machine trust accounts:</P
><P
-><TT
-CLASS="FILENAME"
->HKLM\System\CurrentControlSet\Control\Print\Environment
- </TT
></P
+><UL
+><LI
><P
->will reveal that Windows NT always uses the NT driver
- name. This is ok as Windows NT always requires that at least
- the Windows NT version of the printer driver is present.
- However, Samba does not have the requirement internally.
- Therefore, how can you use the NT driver name if is has not
- already been installed?</P
+> Manual creation. Both the Samba and corresponding
+ Unix account are created by hand.</P
+></LI
+><LI
><P
->The way of sidestepping this limitation is to require
- that all Imprints printer driver packages include both the Intel
- Windows NT and 95/98 printer drivers and that NT driver is
- installed first.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN2081"
-></A
->14.4. Diagnosis</H2
+> "On-the-fly" creation. The Samba machine trust
+ account is automatically created by Samba at the time the client
+ is joined to the domain. (For security, this is the
+ recommended method.) The corresponding Unix account may be
+ created automatically or manually. </P
+></LI
+></UL
><DIV
CLASS="SECT2"
-><H3
+><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2083"
+NAME="AEN1851"
></A
->14.4.1. Introduction</H3
-><P
->This is a short description of how to debug printing problems with
-Samba. This describes how to debug problems with printing from a SMB
-client to a Samba server, not the other way around. For the reverse
-see the examples/printing directory.</P
-><P
->Ok, so you want to print to a Samba server from your PC. The first
-thing you need to understand is that Samba does not actually do any
-printing itself, it just acts as a middleman between your PC client
-and your Unix printing subsystem. Samba receives the file from the PC
-then passes the file to a external "print command". What print command
-you use is up to you.</P
+>12.4.1. Manual Creation of Machine Trust Accounts</H3
><P
->The whole things is controlled using options in smb.conf. The most
-relevant options (which you should look up in the smb.conf man page)
-are:</P
+>The first step in manually creating a machine trust account is to
+manually create the corresponding Unix account in
+<TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+>. This can be done using
+<B
+CLASS="COMMAND"
+>vipw</B
+> or other 'add user' command that is normally
+used to create new Unix accounts. The following is an example for a
+Linux based Samba server:</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> [global]
- print command - send a file to a spooler
- lpq command - get spool queue status
- lprm command - remove a job
- [printers]
- path = /var/spool/lpd/samba</PRE
+> <TT
+CLASS="PROMPT"
+>root# </TT
+><B
+CLASS="COMMAND"
+>/usr/sbin/useradd -g 100 -d /dev/null -c <TT
+CLASS="REPLACEABLE"
+><I
+>"machine
+nickname"</I
+></TT
+> -s /bin/false <TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+>$ </B
></P
><P
->The following are nice to know about:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> queuepause command - stop a printer or print queue
- queueresume command - start a printer or print queue</PRE
+><TT
+CLASS="PROMPT"
+>root# </TT
+><B
+CLASS="COMMAND"
+>passwd -l <TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+>$</B
></P
><P
->Example:</P
+>The <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entry will list the machine name
+with a "$" appended, won't have a password, will have a null shell and no
+home directory. For example a machine named 'doppy' would have an
+<TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entry like this:</P
><P
><PRE
CLASS="PROGRAMLISTING"
-> print command = /usr/bin/lpr -r -P%p %s
- lpq command = /usr/bin/lpq -P%p %s
- lprm command = /usr/bin/lprm -P%p %j
- queuepause command = /usr/sbin/lpc -P%p stop
- queuepause command = /usr/sbin/lpc -P%p start</PRE
+>doppy$:x:505:501:<TT
+CLASS="REPLACEABLE"
+><I
+>machine_nickname</I
+></TT
+>:/dev/null:/bin/false</PRE
></P
><P
->Samba should set reasonable defaults for these depending on your
-system type, but it isn't clairvoyant. It is not uncommon that you
-have to tweak these for local conditions. The commands should
-always have fully specified pathnames, as the smdb may not have
-the correct PATH values.</P
-><P
->When you send a job to Samba to be printed, it will make a temporary
-copy of it in the directory specified in the [printers] section.
-and it should be periodically cleaned out. The lpr -r option
-requests that the temporary copy be removed after printing; If
-printing fails then you might find leftover files in this directory,
-and it should be periodically cleaned out. Samba used the lpq
-command to determine the "job number" assigned to your print job
-by the spooler.</P
+>Above, <TT
+CLASS="REPLACEABLE"
+><I
+>machine_nickname</I
+></TT
+> can be any
+descriptive name for the client, i.e., BasementComputer.
+<TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+> absolutely must be the NetBIOS
+name of the client to be joined to the domain. The "$" must be
+appended to the NetBIOS name of the client or Samba will not recognize
+this as a machine trust account.</P
><P
->The %>letter< are "macros" that get dynamically replaced with appropriate
-values when they are used. The %s gets replaced with the name of the spool
-file that Samba creates and the %p gets replaced with the name of the
-printer. The %j gets replaced with the "job number" which comes from
-the lpq output.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2099"
+>Now that the corresponding Unix account has been created, the next step is to create
+the Samba account for the client containing the well-known initial
+machine trust account password. This can be done using the <A
+HREF="smbpasswd.8.html"
+TARGET="_top"
+><B
+CLASS="COMMAND"
+>smbpasswd(8)</B
></A
->14.4.2. Debugging printer problems</H3
-><P
->One way to debug printing problems is to start by replacing these
-command with shell scripts that record the arguments and the contents
-of the print file. A simple example of this kind of things might
-be:</P
+> command
+as shown here:</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> print command = /tmp/saveprint %p %s
-
- #!/bin/saveprint
- # we make sure that we are the right user
- /usr/bin/id -p >/tmp/tmp.print
- # we run the command and save the error messages
- # replace the command with the one appropriate for your system
- /usr/bin/lpr -r -P$1 $2 2>>&/tmp/tmp.print</PRE
+><TT
+CLASS="PROMPT"
+>root# </TT
+><B
+CLASS="COMMAND"
+>smbpasswd -a -m <TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+></B
></P
><P
->Then you print a file and try removing it. You may find that the
-print queue needs to be stopped in order to see the queue status
-and remove the job:</P
+>where <TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+> is the machine's NetBIOS
+name. The RID of the new machine account is generated from the UID of
+the corresponding Unix account.</P
+><DIV
+CLASS="WARNING"
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> h4: {42} % echo hi >/tmp/hi
-h4: {43} % smbclient //localhost/lw4
-added interface ip=10.0.0.4 bcast=10.0.0.255 nmask=255.255.255.0
-Password:
-Domain=[ASTART] OS=[Unix] Server=[Samba 2.0.7]
-smb: \> print /tmp/hi
-putting file /tmp/hi as hi-17534 (0.0 kb/s) (average 0.0 kb/s)
-smb: \> queue
-1049 3 hi-17534
-smb: \> cancel 1049
-Error cancelling job 1049 : code 0
-smb: \> cancel 1049
-Job 1049 cancelled
-smb: \> queue
-smb: \> exit</PRE
></P
+><TABLE
+CLASS="WARNING"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/warning.gif"
+HSPACE="5"
+ALT="Warning"></TD
+><TH
+ALIGN="LEFT"
+VALIGN="CENTER"
+><B
+>Join the client to the domain immediately</B
+></TH
+></TR
+><TR
+><TD
+> </TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->The 'code 0' indicates that the job was removed. The comment
-by the smbclient is a bit misleading on this.
-You can observe the command output and then and look at the
-/tmp/tmp.print file to see what the results are. You can quickly
-find out if the problem is with your printing system. Often people
-have problems with their /etc/printcap file or permissions on
-various print queues.</P
+> Manually creating a machine trust account using this method is the
+ equivalent of creating a machine trust account on a Windows NT PDC using
+ the "Server Manager". From the time at which the account is created
+ to the time which the client joins the domain and changes the password,
+ your domain is vulnerable to an intruder joining your domain using a
+ a machine with the same NetBIOS name. A PDC inherently trusts
+ members of the domain and will serve out a large degree of user
+ information to such clients. You have been warned!
+ </P
+></TD
+></TR
+></TABLE
+></DIV
></DIV
><DIV
CLASS="SECT2"
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2108"
+NAME="AEN1886"
></A
->14.4.3. What printers do I have?</H3
+>12.4.2. "On-the-Fly" Creation of Machine Trust Accounts</H3
><P
->You can use the 'testprns' program to check to see if the printer
-name you are using is recognized by Samba. For example, you can
-use:</P
+>The second (and recommended) way of creating machine trust accounts is
+simply to allow the Samba server to create them as needed when the client
+is joined to the domain. </P
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> testprns printer /etc/printcap</PRE
-></P
+>Since each Samba machine trust account requires a corresponding
+Unix account, a method for automatically creating the
+Unix account is usually supplied; this requires configuration of the
+<A
+HREF="smb.conf.5.html#ADDUSERSCRIPT"
+TARGET="_top"
+>add user script</A
+>
+option in <TT
+CLASS="FILENAME"
+>smb.conf</TT
+>. This
+method is not required, however; corresponding Unix accounts may also
+be created manually.</P
><P
->Samba can get its printcap information from a file or from a program.
-You can try the following to see the format of the extracted
-information:</P
+>Below is an example for a RedHat 6.2 Linux system.</P
><P
><PRE
CLASS="PROGRAMLISTING"
-> testprns -a printer /etc/printcap
-
- testprns -a printer '|/bin/cat printcap'</PRE
+>[global]
+ # <...remainder of parameters...>
+ add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u </PRE
></P
></DIV
><DIV
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2116"
+NAME="AEN1895"
></A
->14.4.4. Setting up printcap and print servers</H3
-><P
->You may need to set up some printcaps for your Samba system to use.
-It is strongly recommended that you use the facilities provided by
-the print spooler to set up queues and printcap information.</P
-><P
->Samba requires either a printcap or program to deliver printcap
-information. This printcap information has the format:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> name|alias1|alias2...:option=value:...</PRE
-></P
-><P
->For almost all printing systems, the printer 'name' must be composed
-only of alphanumeric or underscore '_' characters. Some systems also
-allow hyphens ('-') as well. An alias is an alternative name for the
-printer, and an alias with a space in it is used as a 'comment'
-about the printer. The printcap format optionally uses a \ at the end of lines
-to extend the printcap to multiple lines.</P
-><P
->Here are some examples of printcap files:</P
+>12.4.3. Joining the Client to the Domain</H3
><P
+>The procedure for joining a client to the domain varies with the
+version of Windows.</P
><P
></P
-><OL
-TYPE="1"
-><LI
-><P
->pr just printer name</P
-></LI
+><UL
><LI
><P
->pr|alias printer name and alias</P
-></LI
-><LI
+><SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Windows 2000</I
+></SPAN
+></P
><P
->pr|My Printer printer name, alias used as comment</P
-></LI
-><LI
+> When the user elects to join the client to a domain, Windows prompts for
+ an account and password that is privileged to join the domain. A
+ Samba administrative account (i.e., a Samba account that has root
+ privileges on the Samba server) must be entered here; the
+ operation will fail if an ordinary user account is given.
+ The password for this account should be
+ set to a different password than the associated
+ <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entry, for security
+ reasons. </P
><P
->pr:sh:\ Same as pr:sh:cm= testing
- :cm= \
- testing</P
+>The session key of the Samba administrative account acts as an
+ encryption key for setting the password of the machine trust
+ account. The machine trust account will be created on-the-fly, or
+ updated if it already exists.</P
></LI
><LI
><P
->pr:sh Same as pr:sh:cm= testing
- :cm= testing</P
-></LI
-></OL
-></P
-><P
->Samba reads the printcap information when first started. If you make
-changes in the printcap information, then you must do the following:</P
-><P
+><SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Windows NT</I
+></SPAN
></P
-><OL
-TYPE="1"
-><LI
-><P
->make sure that the print spooler is aware of these changes.
-The LPRng system uses the 'lpc reread' command to do this.</P
-></LI
-><LI
><P
->make sure that the spool queues, etc., exist and have the
-correct permissions. The LPRng system uses the 'checkpc -f'
-command to do this.</P
-></LI
-><LI
+> If the machine trust account was created manually, on the
+ Identification Changes menu enter the domain name, but do not
+ check the box "Create a Computer Account in the Domain." In this case,
+ the existing machine trust account is used to join the machine to
+ the domain.</P
><P
->You now should send a SIGHUP signal to the smbd server to have
-it reread the printcap information.</P
+> If the machine trust account is to be created
+ on-the-fly, on the Identification Changes menu enter the domain
+ name, and check the box "Create a Computer Account in the Domain." In
+ this case, joining the domain proceeds as above for Windows 2000
+ (i.e., you must supply a Samba administrative account when
+ prompted).</P
></LI
-></OL
+></UL
+></DIV
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2144"
-></A
->14.4.5. Job sent, no output</H3
-><P
->This is the most frustrating part of printing. You may have sent the
-job, verified that the job was forwarded, set up a wrapper around
-the command to send the file, but there was no output from the printer.</P
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN1910"
+></A
+>12.5. Common Problems and Errors</H2
><P
->First, check to make sure that the job REALLY is getting to the
-right print queue. If you are using a BSD or LPRng print spooler,
-you can temporarily stop the printing of jobs. Jobs can still be
-submitted, but they will not be printed. Use:</P
+></P
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> lpc -Pprinter stop</PRE
></P
+><UL
+><LI
><P
->Now submit a print job and then use 'lpq -Pprinter' to see if the
-job is in the print queue. If it is not in the print queue then
-you will have to find out why it is not being accepted for printing.</P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>I cannot include a '$' in a machine name.</I
+></SPAN
+>
+ </P
><P
->Next, you may want to check to see what the format of the job really
-was. With the assistance of the system administrator you can view
-the submitted jobs files. You may be surprised to find that these
-are not in what you would expect to call a printable format.
-You can use the UNIX 'file' utitily to determine what the job
-format actually is:</P
+> A 'machine name' in (typically) <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+>
+ of the machine name with a '$' appended. FreeBSD (and other BSD
+ systems?) won't create a user with a '$' in their name.
+ </P
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> cd /var/spool/lpd/printer # spool directory of print jobs
- ls # find job files
- file dfA001myhost</PRE
-></P
+> The problem is only in the program used to make the entry, once
+ made, it works perfectly. So create a user without the '$' and
+ use <B
+CLASS="COMMAND"
+>vipw</B
+> to edit the entry, adding the '$'. Or create
+ the whole entry with vipw if you like, make sure you use a
+ unique User ID !
+ </P
+></LI
+><LI
><P
->You should make sure that your printer supports this format OR that
-your system administrator has installed a 'print filter' that will
-convert the file to a format appropriate for your printer.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2155"
-></A
->14.4.6. Job sent, strange output</H3
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>I get told "You already have a connection to the Domain...."
+ or "Cannot join domain, the credentials supplied conflict with an
+ existing set.." when creating a machine trust account.</I
+></SPAN
+>
+ </P
><P
->Once you have the job printing, you can then start worrying about
-making it print nicely.</P
+> This happens if you try to create a machine trust account from the
+ machine itself and already have a connection (e.g. mapped drive)
+ to a share (or IPC$) on the Samba PDC. The following command
+ will remove all network drive connections:
+ </P
><P
->The most common problem is extra pages of output: banner pages
-OR blank pages at the end.</P
+> <TT
+CLASS="PROMPT"
+>C:\WINNT\></TT
+> <B
+CLASS="COMMAND"
+>net use * /d</B
+>
+ </P
><P
->If you are getting banner pages, check and make sure that the
-printcap option or printer option is configured for no banners.
-If you have a printcap, this is the :sh (suppress header or banner
-page) option. You should have the following in your printer.</P
+> Further, if the machine is a already a 'member of a workgroup' that
+ is the same name as the domain you are joining (bad idea) you will
+ get this message. Change the workgroup name to something else, it
+ does not matter what, reboot, and try again.
+ </P
+></LI
+><LI
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> printer: ... :sh</PRE
-></P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>The system can not log you on (C000019B)....</I
+></SPAN
+>
+ </P
><P
->If you have this option and are still getting banner pages, there
-is a strong chance that your printer is generating them for you
-automatically. You should make sure that banner printing is disabled
-for the printer. This usually requires using the printer setup software
-or procedures supplied by the printer manufacturer.</P
+>I joined the domain successfully but after upgrading
+ to a newer version of the Samba code I get the message, "The system
+ can not log you on (C000019B), Please try a gain or consult your
+ system administrator" when attempting to logon.
+ </P
><P
->If you get an extra page of output, this could be due to problems
-with your job format, or if you are generating PostScript jobs,
-incorrect setting on your printer driver on the MicroSoft client.
-For example, under Win95 there is a option:</P
+> This occurs when the domain SID stored in
+ <TT
+CLASS="FILENAME"
+>private/WORKGROUP.SID</TT
+> is
+ changed. For example, you remove the file and <B
+CLASS="COMMAND"
+>smbd</B
+> automatically
+ creates a new one. Or you are swapping back and forth between
+ versions 2.0.7, TNG and the HEAD branch code (not recommended). The
+ only way to correct the problem is to restore the original domain
+ SID or remove the domain client from the domain and rejoin.
+ </P
+></LI
+><LI
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> Printers|Printer Name|(Right Click)Properties|Postscript|Advanced|</PRE
-></P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>The machine trust account for this computer either does not
+ exist or is not accessible.</I
+></SPAN
+>
+ </P
><P
->that allows you to choose if a Ctrl-D is appended to all jobs.
-This is a very bad thing to do, as most spooling systems will
-automatically add a ^D to the end of the job if it is detected as
-PostScript. The multiple ^D may cause an additional page of output.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2167"
-></A
->14.4.7. Raw PostScript printed</H3
+> When I try to join the domain I get the message "The machine account
+ for this computer either does not exist or is not accessible". What's
+ wrong?
+ </P
><P
->This is a problem that is usually caused by either the print spooling
-system putting information at the start of the print job that makes
-the printer think the job is a text file, or your printer simply
-does not support PostScript. You may need to enable 'Automatic
-Format Detection' on your printer.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2170"
-></A
->14.4.8. Advanced Printing</H3
+> This problem is caused by the PDC not having a suitable machine trust account.
+ If you are using the <TT
+CLASS="PARAMETER"
+><I
+>add user script</I
+></TT
+> method to create
+ accounts then this would indicate that it has not worked. Ensure the domain
+ admin user system is working.
+ </P
><P
->Note that you can do some pretty magic things by using your
-imagination with the "print command" option and some shell scripts.
-Doing print accounting is easy by passing the %U option to a print
-command shell script. You could even make the print command detect
-the type of output and its size and send it to an appropriate
-printer.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2173"
-></A
->14.4.9. Real debugging</H3
+> Alternatively if you are creating account entries manually then they
+ have not been created correctly. Make sure that you have the entry
+ correct for the machine trust account in smbpasswd file on the Samba PDC.
+ If you added the account using an editor rather than using the smbpasswd
+ utility, make sure that the account name is the machine NetBIOS name
+ with a '$' appended to it ( i.e. computer_name$ ). There must be an entry
+ in both /etc/passwd and the smbpasswd file. Some people have reported
+ that inconsistent subnet masks between the Samba server and the NT
+ client have caused this problem. Make sure that these are consistent
+ for both client and server.
+ </P
+></LI
+><LI
><P
->If the above debug tips don't help, then maybe you need to bring in
-the bug guns, system tracing. See Tracing.txt in this directory.</P
-></DIV
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="SECURITYLEVELS"
-></A
->Chapter 15. Security levels</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN2186"
-></A
->15.1. Introduction</H2
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>When I attempt to login to a Samba Domain from a NT4/W2K workstation,
+ I get a message about my account being disabled.</I
+></SPAN
+>
+ </P
><P
->Samba supports the following options to the global smb.conf parameter</P
+> This problem is caused by a PAM related bug in Samba 2.2.0. This bug is
+ fixed in 2.2.1. Other symptoms could be unaccessible shares on
+ NT/W2K member servers in the domain or the following error in your smbd.log:
+ passdb/pampass.c:pam_account(268) PAM: UNKNOWN ERROR for User: %user%
+ </P
+><P
+> At first be ensure to enable the useraccounts with <B
+CLASS="COMMAND"
+>smbpasswd -e
+ %user%</B
+>, this is normally done, when you create an account.
+ </P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->[global]
-<A
-HREF="smb.conf.5.html#SECURITY"
-TARGET="_top"
-><TT
+> In order to work around this problem in 2.2.0, configure the
+ <TT
CLASS="PARAMETER"
><I
->security</I
+>account</I
></TT
-></A
-> = [share|user(default)|server|domain|ads]</PRE
-></P
+> control flag in
+ <TT
+CLASS="FILENAME"
+>/etc/pam.d/samba</TT
+> file as follows:
+ </P
><P
->Please refer to the smb.conf man page for usage information and to the document
-<A
-HREF="DOMAIN_MEMBER.html"
-TARGET="_top"
->DOMAIN_MEMBER.html</A
-> for further background details
-on domain mode security. The Windows 2000 Kerberos domain security model
-(security = ads) is described in the <A
-HREF="ADS-HOWTO.html"
-TARGET="_top"
->ADS-HOWTO.html</A
->.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> account required pam_permit.so
+ </PRE
+></P
><P
->Of the above, "security = server" means that Samba reports to clients that
-it is running in "user mode" but actually passes off all authentication
-requests to another "user mode" server. This requires an additional
-parameter "password server =" that points to the real authentication server.
-That real authentication server can be another Samba server or can be a
-Windows NT server, the later natively capable of encrypted password support.</P
+> If you want to remain backward compatibility to samba 2.0.x use
+ <TT
+CLASS="FILENAME"
+>pam_permit.so</TT
+>, it's also possible to use
+ <TT
+CLASS="FILENAME"
+>pam_pwdb.so</TT
+>. There are some bugs if you try to
+ use <TT
+CLASS="FILENAME"
+>pam_unix.so</TT
+>, if you need this, be ensure to use
+ the most recent version of this file.
+ </P
+></LI
+></UL
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2197"
+NAME="AEN1958"
></A
->15.2. More complete description of security levels</H2
+>12.6. System Policies and Profiles</H2
><P
->A SMB server tells the client at startup what "security level" it is
-running. There are two options "share level" and "user level". Which
-of these two the client receives affects the way the client then tries
-to authenticate itself. It does not directly affect (to any great
-extent) the way the Samba server does security. I know this is
-strange, but it fits in with the client/server approach of SMB. In SMB
-everything is initiated and controlled by the client, and the server
-can only tell the client what is available and whether an action is
-allowed. </P
+>Much of the information necessary to implement System Policies and
+Roving User Profiles in a Samba domain is the same as that for
+implementing these same items in a Windows NT 4.0 domain.
+You should read the white paper <A
+HREF="http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp"
+TARGET="_top"
+>Implementing
+Profiles and Policies in Windows NT 4.0</A
+> available from Microsoft.</P
><P
->I'll describe user level security first, as its simpler. In user level
-security the client will send a "session setup" command directly after
-the protocol negotiation. This contains a username and password. The
-server can either accept or reject that username/password
-combination. Note that at this stage the server has no idea what
-share the client will eventually try to connect to, so it can't base
-the "accept/reject" on anything other than:</P
+>Here are some additional details:</P
><P
></P
-><OL
-TYPE="1"
-><LI
-><P
->the username/password</P
-></LI
+><UL
><LI
><P
->the machine that the client is coming from</P
-></LI
-></OL
-><P
->If the server accepts the username/password then the client expects to
-be able to mount any share (using a "tree connection") without
-specifying a password. It expects that all access rights will be as
-the username/password specified in the "session setup". </P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>What about Windows NT Policy Editor?</I
+></SPAN
+>
+ </P
><P
->It is also possible for a client to send multiple "session setup"
-requests. When the server responds it gives the client a "uid" to use
-as an authentication tag for that username/password. The client can
-maintain multiple authentication contexts in this way (WinDD is an
-example of an application that does this)</P
+> To create or edit <TT
+CLASS="FILENAME"
+>ntconfig.pol</TT
+> you must use
+ the NT Server Policy Editor, <B
+CLASS="COMMAND"
+>poledit.exe</B
+> which
+ is included with NT Server but <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>not NT Workstation</I
+></SPAN
+>.
+ There is a Policy Editor on a NTws
+ but it is not suitable for creating <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Domain Policies</I
+></SPAN
+>.
+ Further, although the Windows 95
+ Policy Editor can be installed on an NT Workstation/Server, it will not
+ work with NT policies because the registry key that are set by the policy templates.
+ However, the files from the NT Server will run happily enough on an NTws.
+ You need <TT
+CLASS="FILENAME"
+>poledit.exe, common.adm</TT
+> and <TT
+CLASS="FILENAME"
+>winnt.adm</TT
+>. It is convenient
+ to put the two *.adm files in <TT
+CLASS="FILENAME"
+>c:\winnt\inf</TT
+> which is where
+ the binary will look for them unless told otherwise. Note also that that
+ directory is 'hidden'.
+ </P
><P
->Ok, now for share level security. In share level security the client
-authenticates itself separately for each share. It will send a
-password along with each "tree connection" (share mount). It does not
-explicitly send a username with this operation. The client is
-expecting a password to be associated with each share, independent of
-the user. This means that samba has to work out what username the
-client probably wants to use. It is never explicitly sent the
-username. Some commercial SMB servers such as NT actually associate
-passwords directly with shares in share level security, but samba
-always uses the unix authentication scheme where it is a
-username/password that is authenticated, not a "share/password".</P
+> The Windows NT policy editor is also included with the Service Pack 3 (and
+ later) for Windows NT 4.0. Extract the files using <B
+CLASS="COMMAND"
+>servicepackname /x</B
+>,
+ i.e. that's <B
+CLASS="COMMAND"
+>Nt4sp6ai.exe /x</B
+> for service pack 6a. The policy editor,
+ <B
+CLASS="COMMAND"
+>poledit.exe</B
+> and the associated template files (*.adm) should
+ be extracted as well. It is also possible to downloaded the policy template
+ files for Office97 and get a copy of the policy editor. Another possible
+ location is with the Zero Administration Kit available for download from Microsoft.
+ </P
+></LI
+><LI
><P
->Many clients send a "session setup" even if the server is in share
-level security. They normally send a valid username but no
-password. Samba records this username in a list of "possible
-usernames". When the client then does a "tree connection" it also adds
-to this list the name of the share they try to connect to (useful for
-home directories) and any users listed in the "user =" smb.conf
-line. The password is then checked in turn against these "possible
-usernames". If a match is found then the client is authenticated as
-that user.</P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Can Win95 do Policies?</I
+></SPAN
+>
+ </P
><P
->Finally "server level" security. In server level security the samba
-server reports to the client that it is in user level security. The
-client then does a "session setup" as described earlier. The samba
-server takes the username/password that the client sends and attempts
-to login to the "password server" by sending exactly the same
-username/password that it got from the client. If that server is in
-user level security and accepts the password then samba accepts the
-clients connection. This allows the samba server to use another SMB
-server as the "password server". </P
+> Install the group policy handler for Win9x to pick up group
+ policies. Look on the Win98 CD in <TT
+CLASS="FILENAME"
+>\tools\reskit\netadmin\poledit</TT
+>.
+ Install group policies on a Win9x client by double-clicking
+ <TT
+CLASS="FILENAME"
+>grouppol.inf</TT
+>. Log off and on again a couple of
+ times and see if Win98 picks up group policies. Unfortunately this needs
+ to be done on every Win9x machine that uses group policies....
+ </P
><P
->You should also note that at the very start of all this, where the
-server tells the client what security level it is in, it also tells
-the client if it supports encryption. If it does then it supplies the
-client with a random "cryptkey". The client will then send all
-passwords in encrypted form. You have to compile samba with encryption
-enabled to support this feature, and you have to maintain a separate
-smbpasswd file with SMB style encrypted passwords. It is
-cryptographically impossible to translate from unix style encryption
-to SMB style encryption, although there are some fairly simple management
-schemes by which the two could be kept in sync.</P
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="WINBIND"
-></A
->Chapter 16. Unified Logons between Windows NT and UNIX using Winbind</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN2249"
-></A
->16.1. Abstract</H2
+> If group policies don't work one reports suggests getting the updated
+ (read: working) grouppol.dll for Windows 9x. The group list is grabbed
+ from /etc/group.
+ </P
+></LI
+><LI
><P
->Integration of UNIX and Microsoft Windows NT through
- a unified logon has been considered a "holy grail" in heterogeneous
- computing environments for a long time. We present
- <SPAN
+> <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->winbind</I
+>How do I get 'User Manager' and 'Server Manager'</I
></SPAN
->, a component of the Samba suite
- of programs as a solution to the unified logon problem. Winbind
- uses a UNIX implementation
- of Microsoft RPC calls, Pluggable Authentication Modules, and the Name
- Service Switch to allow Windows NT domain users to appear and operate
- as UNIX users on a UNIX machine. This paper describes the winbind
- system, explaining the functionality it provides, how it is configured,
- and how it works internally.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN2253"
-></A
->16.2. Introduction</H2
-><P
->It is well known that UNIX and Microsoft Windows NT have
- different models for representing user and group information and
- use different technologies for implementing them. This fact has
- made it difficult to integrate the two systems in a satisfactory
- manner.</P
+>
+ </P
><P
->One common solution in use today has been to create
- identically named user accounts on both the UNIX and Windows systems
- and use the Samba suite of programs to provide file and print services
- between the two. This solution is far from perfect however, as
- adding and deleting users on both sets of machines becomes a chore
- and two sets of passwords are required both of which
- can lead to synchronization problems between the UNIX and Windows
- systems and confusion for users.</P
+> Since I don't need to buy an NT Server CD now, how do I get
+ the 'User Manager for Domains', the 'Server Manager'?
+ </P
><P
->We divide the unified logon problem for UNIX machines into
- three smaller problems:</P
+> Microsoft distributes a version of these tools called nexus for
+ installation on Windows 95 systems. The tools set includes
+ </P
><P
></P
><UL
><LI
><P
->Obtaining Windows NT user and group information
- </P
+>Server Manager</P
></LI
><LI
><P
->Authenticating Windows NT users
- </P
+>User Manager for Domains</P
></LI
><LI
><P
->Password changing for Windows NT users
- </P
+>Event Viewer</P
></LI
></UL
><P
->Ideally, a prospective solution to the unified logon problem
- would satisfy all the above components without duplication of
- information on the UNIX machines and without creating additional
- tasks for the system administrator when maintaining users and
- groups on either system. The winbind system provides a simple
- and elegant solution to all three components of the unified logon
- problem.</P
+> Click here to download the archived file <A
+HREF="ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE"
+TARGET="_top"
+>ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE</A
+>
+ </P
+><P
+> The Windows NT 4.0 version of the 'User Manager for
+ Domains' and 'Server Manager' are available from Microsoft via ftp
+ from <A
+HREF="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE"
+TARGET="_top"
+>ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE</A
+>
+ </P
+></LI
+></UL
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2266"
+NAME="AEN2002"
></A
->16.3. What Winbind Provides</H2
-><P
->Winbind unifies UNIX and Windows NT account management by
- allowing a UNIX box to become a full member of a NT domain. Once
- this is done the UNIX box will see NT users and groups as if
- they were native UNIX users and groups, allowing the NT domain
- to be used in much the same manner that NIS+ is used within
- UNIX-only environments.</P
+>12.7. What other help can I get?</H2
><P
->The end result is that whenever any
- program on the UNIX machine asks the operating system to lookup
- a user or group name, the query will be resolved by asking the
- NT domain controller for the specified domain to do the lookup.
- Because Winbind hooks into the operating system at a low level
- (via the NSS name resolution modules in the C library) this
- redirection to the NT domain controller is completely
- transparent.</P
+>There are many sources of information available in the form
+of mailing lists, RFC's and documentation. The docs that come
+with the samba distribution contain very good explanations of
+general SMB topics such as browsing.</P
><P
->Users on the UNIX machine can then use NT user and group
- names as they would use "native" UNIX names. They can chown files
- so that they are owned by NT domain users or even login to the
- UNIX machine and run a UNIX X-Window session as a domain user.</P
+></P
+><UL
+><LI
><P
->The only obvious indication that Winbind is being used is
- that user and group names take the form DOMAIN\user and
- DOMAIN\group. This is necessary as it allows Winbind to determine
- that redirection to a domain controller is wanted for a particular
- lookup and which trusted domain is being referenced.</P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>What are some diagnostics tools I can use to debug the domain logon
+ process and where can I find them?</I
+></SPAN
+>
+ </P
><P
->Additionally, Winbind provides an authentication service
- that hooks into the Pluggable Authentication Modules (PAM) system
- to provide authentication via a NT domain to any PAM enabled
- applications. This capability solves the problem of synchronizing
- passwords between systems since all passwords are stored in a single
- location (on the domain controller).</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2273"
-></A
->16.3.1. Target Uses</H3
+> One of the best diagnostic tools for debugging problems is Samba itself.
+ You can use the -d option for both smbd and nmbd to specify what
+ 'debug level' at which to run. See the man pages on smbd, nmbd and
+ smb.conf for more information on debugging options. The debug
+ level can range from 1 (the default) to 10 (100 for debugging passwords).
+ </P
><P
->Winbind is targeted at organizations that have an
- existing NT based domain infrastructure into which they wish
- to put UNIX workstations or servers. Winbind will allow these
- organizations to deploy UNIX workstations without having to
- maintain a separate account infrastructure. This greatly
- simplifies the administrative overhead of deploying UNIX
- workstations into a NT based organization.</P
+> Another helpful method of debugging is to compile samba using the
+ <B
+CLASS="COMMAND"
+>gcc -g </B
+> flag. This will include debug
+ information in the binaries and allow you to attach gdb to the
+ running smbd / nmbd process. In order to attach gdb to an smbd
+ process for an NT workstation, first get the workstation to make the
+ connection. Pressing ctrl-alt-delete and going down to the domain box
+ is sufficient (at least, on the first time you join the domain) to
+ generate a 'LsaEnumTrustedDomains'. Thereafter, the workstation
+ maintains an open connection, and therefore there will be an smbd
+ process running (assuming that you haven't set a really short smbd
+ idle timeout) So, in between pressing ctrl alt delete, and actually
+ typing in your password, you can gdb attach and continue.
+ </P
><P
->Another interesting way in which we expect Winbind to
- be used is as a central part of UNIX based appliances. Appliances
- that provide file and print services to Microsoft based networks
- will be able to use Winbind to provide seamless integration of
- the appliance into the domain.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN2277"
-></A
->16.4. How Winbind Works</H2
+> Some useful samba commands worth investigating:
+ </P
><P
->The winbind system is designed around a client/server
- architecture. A long running <B
-CLASS="COMMAND"
->winbindd</B
-> daemon
- listens on a UNIX domain socket waiting for requests
- to arrive. These requests are generated by the NSS and PAM
- clients and processed sequentially.</P
+></P
+><UL
+><LI
><P
->The technologies used to implement winbind are described
- in detail below.</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2282"
-></A
->16.4.1. Microsoft Remote Procedure Calls</H3
+>testparam | more</P
+></LI
+><LI
><P
->Over the last two years, efforts have been underway
- by various Samba Team members to decode various aspects of
- the Microsoft Remote Procedure Call (MSRPC) system. This
- system is used for most network related operations between
- Windows NT machines including remote management, user authentication
- and print spooling. Although initially this work was done
- to aid the implementation of Primary Domain Controller (PDC)
- functionality in Samba, it has also yielded a body of code which
- can be used for other purposes.</P
+>smbclient -L //{netbios name of server}</P
+></LI
+></UL
><P
->Winbind uses various MSRPC calls to enumerate domain users
- and groups and to obtain detailed information about individual
- users or groups. Other MSRPC calls can be used to authenticate
- NT domain users and to change user passwords. By directly querying
- a Windows PDC for user and group information, winbind maps the
- NT account information onto UNIX user and group names.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2286"
-></A
->16.4.2. Name Service Switch</H3
+> An SMB enabled version of tcpdump is available from
+ <A
+HREF="http://www.tcpdump.org/"
+TARGET="_top"
+>http://www.tcpdup.org/</A
+>.
+ Ethereal, another good packet sniffer for Unix and Win32
+ hosts, can be downloaded from <A
+HREF="http://www.ethereal.com/"
+TARGET="_top"
+>http://www.ethereal.com</A
+>.
+ </P
><P
->The Name Service Switch, or NSS, is a feature that is
- present in many UNIX operating systems. It allows system
- information such as hostnames, mail aliases and user information
- to be resolved from different sources. For example, a standalone
- UNIX workstation may resolve system information from a series of
- flat files stored on the local filesystem. A networked workstation
- may first attempt to resolve system information from local files,
- and then consult a NIS database for user information or a DNS server
- for hostname information.</P
+> For tracing things on the Microsoft Windows NT, Network Monitor
+ (aka. netmon) is available on the Microsoft Developer Network CD's,
+ the Windows NT Server install CD and the SMS CD's. The version of
+ netmon that ships with SMS allows for dumping packets between any two
+ computers (i.e. placing the network interface in promiscuous mode).
+ The version on the NT Server install CD will only allow monitoring
+ of network traffic directed to the local NT box and broadcasts on the
+ local subnet. Be aware that Ethereal can read and write netmon
+ formatted files.
+ </P
+></LI
+><LI
><P
->The NSS application programming interface allows winbind
- to present itself as a source of system information when
- resolving UNIX usernames and groups. Winbind uses this interface,
- and information obtained from a Windows NT server using MSRPC
- calls to provide a new source of account enumeration. Using standard
- UNIX library calls, one can enumerate the users and groups on
- a UNIX machine running winbind and see all users and groups in
- a NT domain plus any trusted domain as though they were local
- users and groups.</P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>How do I install 'Network Monitor' on an NT Workstation
+ or a Windows 9x box?</I
+></SPAN
+>
+ </P
><P
->The primary control file for NSS is
- <TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
->.
- When a UNIX application makes a request to do a lookup
- the C library looks in <TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
->
- for a line which matches the service type being requested, for
- example the "passwd" service type is used when user or group names
- are looked up. This config line species which implementations
- of that service should be tried and in what order. If the passwd
- config line is:</P
+> Installing netmon on an NT workstation requires a couple
+ of steps. The following are for installing Netmon V4.00.349, which comes
+ with Microsoft Windows NT Server 4.0, on Microsoft Windows NT
+ Workstation 4.0. The process should be similar for other version of
+ Windows NT / Netmon. You will need both the Microsoft Windows
+ NT Server 4.0 Install CD and the Workstation 4.0 Install CD.
+ </P
><P
-><B
-CLASS="COMMAND"
->passwd: files example</B
-></P
+> Initially you will need to install 'Network Monitor Tools and Agent'
+ on the NT Server. To do this
+ </P
><P
->then the C library will first load a module called
- <TT
-CLASS="FILENAME"
->/lib/libnss_files.so</TT
-> followed by
- the module <TT
-CLASS="FILENAME"
->/lib/libnss_example.so</TT
->. The
- C library will dynamically load each of these modules in turn
- and call resolver functions within the modules to try to resolve
- the request. Once the request is resolved the C library returns the
- result to the application.</P
+></P
+><UL
+><LI
><P
->This NSS interface provides a very easy way for Winbind
- to hook into the operating system. All that needs to be done
- is to put <TT
-CLASS="FILENAME"
->libnss_winbind.so</TT
-> in <TT
-CLASS="FILENAME"
->/lib/</TT
->
- then add "winbind" into <TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
-> at
- the appropriate place. The C library will then call Winbind to
- resolve user and group names.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2302"
-></A
->16.4.3. Pluggable Authentication Modules</H3
+>Goto Start - Settings - Control Panel -
+ Network - Services - Add </P
+></LI
+><LI
><P
->Pluggable Authentication Modules, also known as PAM,
- is a system for abstracting authentication and authorization
- technologies. With a PAM module it is possible to specify different
- authentication methods for different system applications without
- having to recompile these applications. PAM is also useful
- for implementing a particular policy for authorization. For example,
- a system administrator may only allow console logins from users
- stored in the local password file but only allow users resolved from
- a NIS database to log in over the network.</P
+>Select the 'Network Monitor Tools and Agent' and
+ click on 'OK'.</P
+></LI
+><LI
><P
->Winbind uses the authentication management and password
- management PAM interface to integrate Windows NT users into a
- UNIX system. This allows Windows NT users to log in to a UNIX
- machine and be authenticated against a suitable Primary Domain
- Controller. These users can also change their passwords and have
- this change take effect directly on the Primary Domain Controller.
+>Click 'OK' on the Network Control Panel.
</P
+></LI
+><LI
><P
->PAM is configured by providing control files in the directory
- <TT
+>Insert the Windows NT Server 4.0 install CD
+ when prompted.</P
+></LI
+></UL
+><P
+> At this point the Netmon files should exist in
+ <TT
CLASS="FILENAME"
->/etc/pam.d/</TT
-> for each of the services that
- require authentication. When an authentication request is made
- by an application the PAM code in the C library looks up this
- control file to determine what modules to load to do the
- authentication check and in what order. This interface makes adding
- a new authentication service for Winbind very easy, all that needs
- to be done is that the <TT
+>%SYSTEMROOT%\System32\netmon\*.*</TT
+>.
+ Two subdirectories exist as well, <TT
CLASS="FILENAME"
->pam_winbind.so</TT
-> module
- is copied to <TT
+>parsers\</TT
+>
+ which contains the necessary DLL's for parsing the netmon packet
+ dump, and <TT
CLASS="FILENAME"
->/lib/security/</TT
-> and the PAM
- control files for relevant services are updated to allow
- authentication via winbind. See the PAM documentation
- for more details.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2310"
-></A
->16.4.4. User and Group ID Allocation</H3
+>captures\</TT
+>.
+ </P
><P
->When a user or group is created under Windows NT
- is it allocated a numerical relative identifier (RID). This is
- slightly different to UNIX which has a range of numbers that are
- used to identify users, and the same range in which to identify
- groups. It is winbind's job to convert RIDs to UNIX id numbers and
- vice versa. When winbind is configured it is given part of the UNIX
- user id space and a part of the UNIX group id space in which to
- store Windows NT users and groups. If a Windows NT user is
- resolved for the first time, it is allocated the next UNIX id from
- the range. The same process applies for Windows NT groups. Over
- time, winbind will have mapped all Windows NT users and groups
- to UNIX user ids and group ids.</P
+> In order to install the Netmon tools on an NT Workstation, you will
+ first need to install the 'Network Monitor Agent' from the Workstation
+ install CD.
+ </P
><P
->The results of this mapping are stored persistently in
- an ID mapping database held in a tdb database). This ensures that
- RIDs are mapped to UNIX IDs in a consistent way.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2314"
-></A
->16.4.5. Result Caching</H3
+></P
+><UL
+><LI
><P
->An active system can generate a lot of user and group
- name lookups. To reduce the network cost of these lookups winbind
- uses a caching scheme based on the SAM sequence number supplied
- by NT domain controllers. User or group information returned
- by a PDC is cached by winbind along with a sequence number also
- returned by the PDC. This sequence number is incremented by
- Windows NT whenever any user or group information is modified. If
- a cached entry has expired, the sequence number is requested from
- the PDC and compared against the sequence number of the cached entry.
- If the sequence numbers do not match, then the cached information
- is discarded and up to date information is requested directly
- from the PDC.</P
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN2317"
-></A
->16.5. Installation and Configuration</H2
+>Goto Start - Settings - Control Panel -
+ Network - Services - Add</P
+></LI
+><LI
><P
->Many thanks to John Trostel <A
-HREF="mailto:jtrostel@snapserver.com"
-TARGET="_top"
->jtrostel@snapserver.com</A
->
-for providing the HOWTO for this section.</P
+>Select the 'Network Monitor Agent' and click
+ on 'OK'.</P
+></LI
+><LI
><P
->This HOWTO describes how to get winbind services up and running
-to control access and authenticate users on your Linux box using
-the winbind services which come with SAMBA 2.2.2.</P
+>Click 'OK' on the Network Control Panel.
+ </P
+></LI
+><LI
><P
->There is also some Solaris specific information in
-<TT
-CLASS="FILENAME"
->docs/textdocs/Solaris-Winbind-HOWTO.txt</TT
->.
-Future revisions of this document will incorporate that
-information.</P
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2324"
-></A
->16.5.1. Introduction</H3
+>Insert the Windows NT Workstation 4.0 install
+ CD when prompted.</P
+></LI
+></UL
><P
->This HOWTO describes the procedures used to get winbind up and
-running on my RedHat 7.1 system. Winbind is capable of providing access
-and authentication control for Windows Domain users through an NT
-or Win2K PDC for 'regular' services, such as telnet a nd ftp, as
-well for SAMBA services.</P
+> Now copy the files from the NT Server in %SYSTEMROOT%\System32\netmon\*.*
+ to %SYSTEMROOT%\System32\netmon\*.* on the Workstation and set
+ permissions as you deem appropriate for your site. You will need
+ administrative rights on the NT box to run netmon.
+ </P
+><P
+> To install Netmon on a Windows 9x box install the network monitor agent
+ from the Windows 9x CD (\admin\nettools\netmon). There is a readme
+ file located with the netmon driver files on the CD if you need
+ information on how to do this. Copy the files from a working
+ Netmon installation.
+ </P
+></LI
+><LI
><P
->This HOWTO has been written from a 'RedHat-centric' perspective, so if
-you are using another distribution, you may have to modify the instructions
-somewhat to fit the way your distribution works.</P
+> The following is a list if helpful URLs and other links:
+ </P
><P
></P
><UL
><LI
><P
-> <SPAN
+>Home of Samba site <A
+HREF="http://samba.org"
+TARGET="_top"
+> http://samba.org</A
+>. We have a mirror near you !</P
+></LI
+><LI
+><P
+> The <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->Why should I to this?</I
+>Development</I
></SPAN
->
- </P
+> document
+ on the Samba mirrors might mention your problem. If so,
+ it might mean that the developers are working on it.</P
+></LI
+><LI
><P
->This allows the SAMBA administrator to rely on the
- authentication mechanisms on the NT/Win2K PDC for the authentication
- of domain members. NT/Win2K users no longer need to have separate
- accounts on the SAMBA server.
- </P
+>See how Scott Merrill simulates a BDC behavior at
+ <A
+HREF="http://www.skippy.net/linux/smb-howto.html"
+TARGET="_top"
+> http://www.skippy.net/linux/smb-howto.html</A
+>. </P
+></LI
+><LI
+><P
+>Although 2.0.7 has almost had its day as a PDC, David Bannon will
+ keep the 2.0.7 PDC pages at <A
+HREF="http://bioserve.latrobe.edu.au/samba"
+TARGET="_top"
+> http://bioserve.latrobe.edu.au/samba</A
+> going for a while yet.</P
+></LI
+><LI
+><P
+>Misc links to CIFS information
+ <A
+HREF="http://samba.org/cifs/"
+TARGET="_top"
+>http://samba.org/cifs/</A
+></P
+></LI
+><LI
+><P
+>NT Domains for Unix <A
+HREF="http://mailhost.cb1.com/~lkcl/ntdom/"
+TARGET="_top"
+> http://mailhost.cb1.com/~lkcl/ntdom/</A
+></P
+></LI
+><LI
+><P
+>FTP site for older SMB specs:
+ <A
+HREF="ftp://ftp.microsoft.com/developr/drg/CIFS/"
+TARGET="_top"
+> ftp://ftp.microsoft.com/developr/drg/CIFS/</A
+></P
+></LI
+></UL
></LI
+></UL
+><P
+></P
+><UL
><LI
><P
> <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
->Who should be reading this document?</I
+>How do I get help from the mailing lists?</I
></SPAN
>
</P
><P
-> This HOWTO is designed for system administrators. If you are
- implementing SAMBA on a file server and wish to (fairly easily)
- integrate existing NT/Win2K users from your PDC onto the
- SAMBA server, this HOWTO is for you. That said, I am no NT or PAM
- expert, so you may find a better or easier way to accomplish
- these tasks.
+> There are a number of Samba related mailing lists. Go to <A
+HREF="http://samba.org"
+TARGET="_top"
+>http://samba.org</A
+>, click on your nearest mirror
+ and then click on <B
+CLASS="COMMAND"
+>Support</B
+> and then click on <B
+CLASS="COMMAND"
+> Samba related mailing lists</B
+>.
+ </P
+><P
+> For questions relating to Samba TNG go to
+ <A
+HREF="http://www.samba-tng.org/"
+TARGET="_top"
+>http://www.samba-tng.org/</A
+>
+ It has been requested that you don't post questions about Samba-TNG to the
+ main stream Samba lists.</P
+><P
+> If you post a message to one of the lists please observe the following guide lines :
</P
-></LI
-></UL
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2337"
-></A
->16.5.2. Requirements</H3
><P
->If you have a samba configuration file that you are currently
-using... <SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->BACK IT UP!</I
-></SPAN
-> If your system already uses PAM,
-<SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->back up the <TT
-CLASS="FILENAME"
->/etc/pam.d</TT
-> directory
-contents!</I
-></SPAN
-> If you haven't already made a boot disk,
-<SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->MAKE ONE NOW!</I
-></SPAN
></P
+><UL
+><LI
><P
->Messing with the pam configuration files can make it nearly impossible
-to log in to yourmachine. That's why you want to be able to boot back
-into your machine in single user mode and restore your
-<TT
-CLASS="FILENAME"
->/etc/pam.d</TT
-> back to the original state they were in if
-you get frustrated with the way things are going. ;-)</P
+> Always remember that the developers are volunteers, they are
+ not paid and they never guarantee to produce a particular feature at
+ a particular time. Any time lines are 'best guess' and nothing more.
+ </P
+></LI
+><LI
><P
->The latest version of SAMBA (version 3.0 as of this writing), now
-includes a functioning winbindd daemon. Please refer to the
-<A
-HREF="http://samba.org/"
-TARGET="_top"
->main SAMBA web page</A
-> or,
-better yet, your closest SAMBA mirror site for instructions on
-downloading the source code.</P
+> Always mention what version of samba you are using and what
+ operating system its running under. You should probably list the
+ relevant sections of your smb.conf file, at least the options
+ in [global] that affect PDC support.</P
+></LI
+><LI
><P
->To allow Domain users the ability to access SAMBA shares and
-files, as well as potentially other services provided by your
-SAMBA machine, PAM (pluggable authentication modules) must
-be setup properly on your machine. In order to compile the
-winbind modules, you should have at least the pam libraries resident
-on your system. For recent RedHat systems (7.1, for instance), that
-means <TT
-CLASS="FILENAME"
->pam-0.74-22</TT
->. For best results, it is helpful to also
-install the development packages in <TT
-CLASS="FILENAME"
->pam-devel-0.74-22</TT
->.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2351"
-></A
->16.5.3. Testing Things Out</H3
+>In addition to the version, if you obtained Samba via
+ CVS mention the date when you last checked it out.</P
+></LI
+><LI
><P
->Before starting, it is probably best to kill off all the SAMBA
-related daemons running on your server. Kill off all <B
-CLASS="COMMAND"
->smbd</B
->,
-<B
-CLASS="COMMAND"
->nmbd</B
->, and <B
-CLASS="COMMAND"
->winbindd</B
-> processes that may
-be running. To use PAM, you will want to make sure that you have the
-standard PAM package (for RedHat) which supplies the <TT
-CLASS="FILENAME"
->/etc/pam.d</TT
->
-directory structure, including the pam modules are used by pam-aware
-services, several pam libraries, and the <TT
-CLASS="FILENAME"
->/usr/doc</TT
->
-and <TT
-CLASS="FILENAME"
->/usr/man</TT
-> entries for pam. Winbind built better
-in SAMBA if the pam-devel package was also installed. This package includes
-the header files needed to compile pam-aware applications. For instance,
-my RedHat system has both <TT
-CLASS="FILENAME"
->pam-0.74-22</TT
-> and
-<TT
-CLASS="FILENAME"
->pam-devel-0.74-22</TT
-> RPMs installed.</P
-><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
-><A
-NAME="AEN2362"
-></A
->16.5.3.1. Configure and compile SAMBA</H4
+> Try and make your question clear and brief, lots of long,
+ convoluted questions get deleted before they are completely read !
+ Don't post html encoded messages (if you can select colour or font
+ size its html).</P
+></LI
+><LI
><P
->The configuration and compilation of SAMBA is pretty straightforward.
-The first three steps may not be necessary depending upon
-whether or not you have previously built the Samba binaries.</P
+> If you run one of those nifty 'I'm on holidays' things when
+ you are away, make sure its configured to not answer mailing lists.
+ </P
+></LI
+><LI
><P
-><PRE
-CLASS="PROGRAMLISTING"
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->autoconf</B
->
-<TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->make clean</B
+> Don't cross post. Work out which is the best list to post to
+ and see what happens, i.e. don't post to both samba-ntdom and samba-technical.
+ Many people active on the lists subscribe to more
+ than one list and get annoyed to see the same message two or more times.
+ Often someone will see a message and thinking it would be better dealt
+ with on another, will forward it on for you.</P
+></LI
+><LI
+><P
+>You might include <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>partial</I
+></SPAN
>
-<TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->rm config.cache</B
+ log files written at a debug level set to as much as 20.
+ Please don't send the entire log but enough to give the context of the
+ error messages.</P
+></LI
+><LI
+><P
+>(Possibly) If you have a complete netmon trace ( from the opening of
+ the pipe to the error ) you can send the *.CAP file as well.</P
+></LI
+><LI
+><P
+>Please think carefully before attaching a document to an email.
+ Consider pasting the relevant parts into the body of the message. The samba
+ mailing lists go to a huge number of people, do they all need a copy of your
+ smb.conf in their attach directory?</P
+></LI
+></UL
+></LI
+><LI
+><P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>How do I get off the mailing lists?</I
+></SPAN
>
-<TT
-CLASS="PROMPT"
->root#</TT
-> <B
+ </P
+><P
+>To have your name removed from a samba mailing list, go to the
+ same place you went to to get on it. Go to <A
+HREF="http://lists.samba.org/"
+TARGET="_top"
+>http://lists.samba.org</A
+>,
+ click on your nearest mirror and then click on <B
CLASS="COMMAND"
->./configure --with-winbind</B
->
-<TT
-CLASS="PROMPT"
->root#</TT
-> <B
+>Support</B
+> and
+ then click on <B
CLASS="COMMAND"
->make</B
+> Samba related mailing lists</B
+>. Or perhaps see
+ <A
+HREF="http://lists.samba.org/mailman/roster/samba-ntdom"
+TARGET="_top"
+>here</A
>
-<TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->make install</B
-></PRE
-></P
+ </P
><P
->This will, by default, install SAMBA in <TT
-CLASS="FILENAME"
->/usr/local/samba</TT
->.
-See the main SAMBA documentation if you want to install SAMBA somewhere else.
-It will also build the winbindd executable and libraries. </P
+> Please don't post messages to the list asking to be removed, you will just
+ be referred to the above address (unless that process failed in some way...)
+ </P
+></LI
+></UL
></DIV
><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN2381"
+NAME="AEN2116"
></A
->16.5.3.2. Configure <TT
-CLASS="FILENAME"
->nsswitch.conf</TT
-> and the
-winbind libraries</H4
-><P
->The libraries needed to run the <B
-CLASS="COMMAND"
->winbindd</B
-> daemon
-through nsswitch need to be copied to their proper locations, so</P
+>12.8. Domain Control for Windows 9x/ME</H2
+><DIV
+CLASS="NOTE"
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->cp ../samba/source/nsswitch/libnss_winbind.so /lib</B
></P
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->I also found it necessary to make the following symbolic link:</P
+>The following section contains much of the original
+DOMAIN.txt file previously included with Samba. Much of
+the material is based on what went into the book <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Special
+Edition, Using Samba</I
+></SPAN
+>, by Richard Sharpe.</P
+></TD
+></TR
+></TABLE
+></DIV
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2</B
-></P
+>A domain and a workgroup are exactly the same thing in terms of network
+browsing. The difference is that a distributable authentication
+database is associated with a domain, for secure login access to a
+network. Also, different access rights can be granted to users if they
+successfully authenticate against a domain logon server (NT server and
+other systems based on NT server support this, as does at least Samba TNG now).</P
><P
->And, in the case of Sun solaris:</P
+>The SMB client logging on to a domain has an expectation that every other
+server in the domain should accept the same authentication information.
+Network browsing functionality of domains and workgroups is
+identical and is explained in BROWSING.txt. It should be noted, that browsing
+is totally orthogonal to logon support.</P
+><P
+>Issues related to the single-logon network model are discussed in this
+section. Samba supports domain logons, network logon scripts, and user
+profiles for MS Windows for workgroups and MS Windows 9X/ME clients
+which will be the focus of this section.</P
+><P
+>When an SMB client in a domain wishes to logon it broadcast requests for a
+logon server. The first one to reply gets the job, and validates its
+password using whatever mechanism the Samba administrator has installed.
+It is possible (but very stupid) to create a domain where the user
+database is not shared between servers, i.e. they are effectively workgroup
+servers advertising themselves as participating in a domain. This
+demonstrates how authentication is quite different from but closely
+involved with domains.</P
+><P
+>Using these features you can make your clients verify their logon via
+the Samba server; make clients run a batch file when they logon to
+the network and download their preferences, desktop and start menu.</P
+><P
+>Before launching into the configuration instructions, it is
+worthwhile lookingat how a Windows 9x/ME client performs a logon:</P
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->ln -s /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1</B
->
-<TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.1</B
->
-<TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.2</B
></P
+><OL
+TYPE="1"
+><LI
><P
->Now, as root you need to edit <TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
-> to
-allow user and group entries to be visible from the <B
-CLASS="COMMAND"
->winbindd</B
->
-daemon. My <TT
-CLASS="FILENAME"
->/etc/nsswitch.conf</TT
-> file look like
-this after editing:</P
+> The client broadcasts (to the IP broadcast address of the subnet it is in)
+ a NetLogon request. This is sent to the NetBIOS name DOMAIN<1c> at the
+ NetBIOS layer. The client chooses the first response it receives, which
+ contains the NetBIOS name of the logon server to use in the format of
+ \\SERVER.
+ </P
+></LI
+><LI
+><P
+> The client then connects to that server, logs on (does an SMBsessetupX) and
+ then connects to the IPC$ share (using an SMBtconX).
+ </P
+></LI
+><LI
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> passwd: files winbind
- shadow: files
- group: files winbind</PRE
-></P
+> The client then does a NetWkstaUserLogon request, which retrieves the name
+ of the user's logon script.
+ </P
+></LI
+><LI
><P
->
-The libraries needed by the winbind daemon will be automatically
-entered into the <B
-CLASS="COMMAND"
->ldconfig</B
-> cache the next time
-your system reboots, but it
-is faster (and you don't need to reboot) if you do it manually:</P
+> The client then connects to the NetLogon share and searches for this
+ and if it is found and can be read, is retrieved and executed by the client.
+ After this, the client disconnects from the NetLogon share.
+ </P
+></LI
+><LI
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->/sbin/ldconfig -v | grep winbind</B
-></P
+> The client then sends a NetUserGetInfo request to the server, to retrieve
+ the user's home share, which is used to search for profiles. Since the
+ response to the NetUserGetInfo request does not contain much more
+ the user's home share, profiles for Win9X clients MUST reside in the user
+ home directory.
+ </P
+></LI
+><LI
><P
->This makes <TT
-CLASS="FILENAME"
->libnss_winbind</TT
-> available to winbindd
-and echos back a check to you.</P
-></DIV
+> The client then connects to the user's home share and searches for the
+ user's profile. As it turns out, you can specify the user's home share as
+ a sharename and path. For example, \\server\fred\.profile.
+ If the profiles are found, they are implemented.
+ </P
+></LI
+><LI
+><P
+> The client then disconnects from the user's home share, and reconnects to
+ the NetLogon share and looks for CONFIG.POL, the policies file. If this is
+ found, it is read and implemented.
+ </P
+></LI
+></OL
><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN2414"
+NAME="AEN2142"
></A
->16.5.3.3. Configure smb.conf</H4
+>12.8.1. Configuration Instructions: Network Logons</H3
><P
->Several parameters are needed in the smb.conf file to control
-the behavior of <B
-CLASS="COMMAND"
->winbindd</B
->. Configure
-<TT
-CLASS="FILENAME"
->smb.conf</TT
-> These are described in more detail in
-the <A
-HREF="winbindd.8.html"
-TARGET="_top"
->winbindd(8)</A
-> man page. My
-<TT
-CLASS="FILENAME"
->smb.conf</TT
-> file was modified to
-include the following entries in the [global] section:</P
+>The main difference between a PDC and a Windows 9x logon
+server configuration is that</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->[global]
- <...>
- # separate domain and username with '+', like DOMAIN+username
- <A
-HREF="winbindd.8.html#WINBINDSEPARATOR"
-TARGET="_top"
->winbind separator</A
-> = +
- # use uids from 10000 to 20000 for domain users
- <A
-HREF="winbindd.8.html#WINBINDUID"
-TARGET="_top"
->winbind uid</A
-> = 10000-20000
- # use gids from 10000 to 20000 for domain groups
- <A
-HREF="winbindd.8.html#WINBINDGID"
-TARGET="_top"
->winbind gid</A
-> = 10000-20000
- # allow enumeration of winbind users and groups
- <A
-HREF="winbindd.8.html#WINBINDENUMUSERS"
-TARGET="_top"
->winbind enum users</A
-> = yes
- <A
-HREF="winbindd.8.html#WINBINDENUMGROUP"
-TARGET="_top"
->winbind enum groups</A
-> = yes
- # give winbind users a real shell (only needed if they have telnet access)
- <A
-HREF="winbindd.8.html#TEMPLATEHOMEDIR"
-TARGET="_top"
->template homedir</A
-> = /home/winnt/%D/%U
- <A
-HREF="winbindd.8.html#TEMPLATESHELL"
-TARGET="_top"
->template shell</A
-> = /bin/bash</PRE
></P
-></DIV
-><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
-><A
-NAME="AEN2430"
-></A
->16.5.3.4. Join the SAMBA server to the PDC domain</H4
+><UL
+><LI
><P
->Enter the following command to make the SAMBA server join the
-PDC domain, where <TT
-CLASS="REPLACEABLE"
-><I
->DOMAIN</I
-></TT
-> is the name of
-your Windows domain and <TT
-CLASS="REPLACEABLE"
-><I
->Administrator</I
-></TT
-> is
-a domain user who has administrative privileges in the domain.</P
+>Password encryption is not required for a Windows 9x logon server.</P
+></LI
+><LI
+><P
+>Windows 9x/ME clients do not possess machine trust accounts.</P
+></LI
+></UL
+><P
+>Therefore, a Samba PDC will also act as a Windows 9x logon
+server.</P
+><DIV
+CLASS="WARNING"
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->/usr/local/samba/bin/net rpc join -S PDC -U Administrator</B
></P
+><TABLE
+CLASS="WARNING"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/warning.gif"
+HSPACE="5"
+ALT="Warning"></TD
+><TH
+ALIGN="LEFT"
+VALIGN="CENTER"
+><B
+>security mode and master browsers</B
+></TH
+></TR
+><TR
+><TD
+> </TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->The proper response to the command should be: "Joined the domain
-<TT
-CLASS="REPLACEABLE"
-><I
->DOMAIN</I
-></TT
->" where <TT
-CLASS="REPLACEABLE"
-><I
->DOMAIN</I
-></TT
->
-is your DOMAIN name.</P
+>There are a few comments to make in order to tie up some
+loose ends. There has been much debate over the issue of whether
+or not it is ok to configure Samba as a Domain Controller in security
+modes other than <TT
+CLASS="CONSTANT"
+>USER</TT
+>. The only security mode
+which will not work due to technical reasons is <TT
+CLASS="CONSTANT"
+>SHARE</TT
+>
+mode security. <TT
+CLASS="CONSTANT"
+>DOMAIN</TT
+> and <TT
+CLASS="CONSTANT"
+>SERVER</TT
+>
+mode security is really just a variation on SMB user level security.</P
+><P
+>Actually, this issue is also closely tied to the debate on whether
+or not Samba must be the domain master browser for its workgroup
+when operating as a DC. While it may technically be possible
+to configure a server as such (after all, browsing and domain logons
+are two distinctly different functions), it is not a good idea to
+so. You should remember that the DC must register the DOMAIN#1b NetBIOS
+name. This is the name used by Windows clients to locate the DC.
+Windows clients do not distinguish between the DC and the DMB.
+For this reason, it is very wise to configure the Samba DC as the DMB.</P
+><P
+>Now back to the issue of configuring a Samba DC to use a mode other
+than "security = user". If a Samba host is configured to use
+another SMB server or DC in order to validate user connection
+requests, then it is a fact that some other machine on the network
+(the "password server") knows more about user than the Samba host.
+99% of the time, this other host is a domain controller. Now
+in order to operate in domain mode security, the "workgroup" parameter
+must be set to the name of the Windows NT domain (which already
+has a domain controller, right?)</P
+><P
+>Therefore configuring a Samba box as a DC for a domain that
+already by definition has a PDC is asking for trouble.
+Therefore, you should always configure the Samba DC to be the DMB
+for its domain.</P
+></TD
+></TR
+></TABLE
+></DIV
></DIV
><DIV
-CLASS="SECT3"
-><HR><H4
-CLASS="SECT3"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN2441"
+NAME="AEN2161"
></A
->16.5.3.5. Start up the winbindd daemon and test it!</H4
-><P
->Eventually, you will want to modify your smb startup script to
-automatically invoke the winbindd daemon when the other parts of
-SAMBA start, but it is possible to test out just the winbind
-portion first. To start up winbind services, enter the following
-command as root:</P
-><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->/usr/local/samba/bin/winbindd</B
-></P
-><P
->I'm always paranoid and like to make sure the daemon
-is really running...</P
+>12.8.2. Configuration Instructions: Setting up Roaming User Profiles</H3
+><DIV
+CLASS="WARNING"
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->ps -ae | grep winbindd</B
></P
+><TABLE
+CLASS="WARNING"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/warning.gif"
+HSPACE="5"
+ALT="Warning"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->This command should produce output like this, if the daemon is running</P
-><P
->3025 ? 00:00:00 winbindd</P
-><P
->Now... for the real test, try to get some information about the
-users on your PDC</P
-><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->/usr/local/samba/bin/wbinfo -u</B
-></P
+><SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>NOTE!</I
+></SPAN
+> Roaming profiles support is different
+for Win9X and WinNT.</P
+></TD
+></TR
+></TABLE
+></DIV
><P
->
-This should echo back a list of users on your Windows users on
-your PDC. For example, I get the following response:</P
+>Before discussing how to configure roaming profiles, it is useful to see how
+Win9X and WinNT clients implement these features.</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->CEO+Administrator
-CEO+burdell
-CEO+Guest
-CEO+jt-ad
-CEO+krbtgt
-CEO+TsInternetUser</PRE
-></P
+>Win9X clients send a NetUserGetInfo request to the server to get the user's
+profiles location. However, the response does not have room for a separate
+profiles location field, only the user's home share. This means that Win9X
+profiles are restricted to being in the user's home directory.</P
><P
->Obviously, I have named my domain 'CEO' and my <TT
-CLASS="PARAMETER"
-><I
->winbind
-separator</I
-></TT
-> is '+'.</P
+>WinNT clients send a NetSAMLogon RPC request, which contains many fields,
+including a separate field for the location of the user's profiles.
+This means that support for profiles is different for Win9X and WinNT.</P
+><DIV
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
+><A
+NAME="AEN2169"
+></A
+>12.8.2.1. Windows NT Configuration</H4
><P
->You can do the same sort of thing to get group information from
-the PDC:</P
+>To support WinNT clients, in the [global] section of smb.conf set the
+following (for example):</P
><P
><PRE
CLASS="PROGRAMLISTING"
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->/usr/local/samba/bin/wbinfo -g</B
->
-CEO+Domain Admins
-CEO+Domain Users
-CEO+Domain Guests
-CEO+Domain Computers
-CEO+Domain Controllers
-CEO+Cert Publishers
-CEO+Schema Admins
-CEO+Enterprise Admins
-CEO+Group Policy Creator Owners</PRE
+>logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath</PRE
></P
><P
->The function 'getent' can now be used to get unified
-lists of both local and PDC users and groups.
-Try the following command:</P
+>The default for this option is \\%N\%U\profile, namely
+\\sambaserver\username\profile. The \\N%\%U service is created
+automatically by the [homes] service.
+If you are using a samba server for the profiles, you _must_ make the
+share specified in the logon path browseable. </P
+><DIV
+CLASS="NOTE"
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->getent passwd</B
></P
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->You should get a list that looks like your <TT
-CLASS="FILENAME"
->/etc/passwd</TT
->
-list followed by the domain users with their new uids, gids, home
-directories and default shells.</P
-><P
->The same thing can be done for groups with the command</P
-><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->getent group</B
-></P
+>[lkcl 26aug96 - we have discovered a problem where Windows clients can
+maintain a connection to the [homes] share in between logins. The
+[homes] share must NOT therefore be used in a profile path.]</P
+></TD
+></TR
+></TABLE
+></DIV
></DIV
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2477"
-></A
->16.5.3.6. Fix the init.d startup scripts</H4
-><DIV
-CLASS="SECT4"
-><H5
-CLASS="SECT4"
-><A
-NAME="AEN2479"
+NAME="AEN2177"
></A
->16.5.3.6.1. Linux</H5
-><P
->The <B
-CLASS="COMMAND"
->winbindd</B
-> daemon needs to start up after the
-<B
-CLASS="COMMAND"
->smbd</B
-> and <B
-CLASS="COMMAND"
->nmbd</B
-> daemons are running.
-To accomplish this task, you need to modify the startup scripts of your system. They are located at <TT
-CLASS="FILENAME"
->/etc/init.d/smb</TT
-> in RedHat and
-<TT
-CLASS="FILENAME"
->/etc/init.d/samba</TT
-> in Debian.
-script to add commands to invoke this daemon in the proper sequence. My
-startup script starts up <B
-CLASS="COMMAND"
->smbd</B
->,
-<B
-CLASS="COMMAND"
->nmbd</B
->, and <B
-CLASS="COMMAND"
->winbindd</B
-> from the
-<TT
-CLASS="FILENAME"
->/usr/local/samba/bin</TT
-> directory directly. The 'start'
-function in the script looks like this:</P
+>12.8.2.2. Windows 9X Configuration</H4
><P
-><PRE
-CLASS="PROGRAMLISTING"
->start() {
- KIND="SMB"
- echo -n $"Starting $KIND services: "
- daemon /usr/local/samba/bin/smbd $SMBDOPTIONS
- RETVAL=$?
- echo
- KIND="NMB"
- echo -n $"Starting $KIND services: "
- daemon /usr/local/samba/bin/nmbd $NMBDOPTIONS
- RETVAL2=$?
- echo
- KIND="Winbind"
- echo -n $"Starting $KIND services: "
- daemon /usr/local/samba/bin/winbindd
- RETVAL3=$?
- echo
- [ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] && touch /var/lock/subsys/smb || \
- RETVAL=1
- return $RETVAL
-}</PRE
-></P
+>To support Win9X clients, you must use the "logon home" parameter. Samba has
+now been fixed so that "net use/home" now works as well, and it, too, relies
+on the "logon home" parameter.</P
><P
->The 'stop' function has a corresponding entry to shut down the
-services and look s like this:</P
+>By using the logon home parameter, you are restricted to putting Win9X
+profiles in the user's home directory. But wait! There is a trick you
+can use. If you set the following in the [global] section of your
+smb.conf file:</P
><P
><PRE
CLASS="PROGRAMLISTING"
->stop() {
- KIND="SMB"
- echo -n $"Shutting down $KIND services: "
- killproc smbd
- RETVAL=$?
- echo
- KIND="NMB"
- echo -n $"Shutting down $KIND services: "
- killproc nmbd
- RETVAL2=$?
- echo
- KIND="Winbind"
- echo -n $"Shutting down $KIND services: "
- killproc winbindd
- RETVAL3=$?
- [ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] && rm -f /var/lock/subsys/smb
- echo ""
- return $RETVAL
-}</PRE
+>logon home = \\%L\%U\.profiles</PRE
></P
+><P
+>then your Win9X clients will dutifully put their clients in a subdirectory
+of your home directory called .profiles (thus making them hidden).</P
+><P
+>Not only that, but 'net use/home' will also work, because of a feature in
+Win9X. It removes any directory stuff off the end of the home directory area
+and only uses the server and share portion. That is, it looks like you
+specified \\%L\%U for "logon home".</P
></DIV
><DIV
-CLASS="SECT4"
-><HR><H5
-CLASS="SECT4"
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
><A
-NAME="AEN2496"
+NAME="AEN2185"
></A
->16.5.3.6.2. Solaris</H5
+>12.8.2.3. Win9X and WinNT Configuration</H4
><P
->On solaris, you need to modify the
-<TT
-CLASS="FILENAME"
->/etc/init.d/samba.server</TT
-> startup script. It usually
-only starts smbd and nmbd but should now start winbindd too. If you
-have samba installed in <TT
-CLASS="FILENAME"
->/usr/local/samba/bin</TT
->,
-the file could contains something like this:</P
+>You can support profiles for both Win9X and WinNT clients by setting both the
+"logon home" and "logon path" parameters. For example:</P
><P
><PRE
CLASS="PROGRAMLISTING"
->##
-## samba.server
-##
-
-if [ ! -d /usr/bin ]
-then # /usr not mounted
- exit
-fi
-
-killproc() { # kill the named process(es)
- pid=`/usr/bin/ps -e |
- /usr/bin/grep -w $1 |
- /usr/bin/sed -e 's/^ *//' -e 's/ .*//'`
- [ "$pid" != "" ] && kill $pid
-}
-
-# Start/stop processes required for samba server
-
-case "$1" in
-
-'start')
-#
-# Edit these lines to suit your installation (paths, workgroup, host)
-#
-echo Starting SMBD
- /usr/local/samba/bin/smbd -D -s \
- /usr/local/samba/smb.conf
-
-echo Starting NMBD
- /usr/local/samba/bin/nmbd -D -l \
- /usr/local/samba/var/log -s /usr/local/samba/smb.conf
-
-echo Starting Winbind Daemon
- /usr/local/samba/bin/winbindd
- ;;
-
-'stop')
- killproc nmbd
- killproc smbd
- killproc winbindd
- ;;
-
-*)
- echo "Usage: /etc/init.d/samba.server { start | stop }"
- ;;
-esac</PRE
+>logon home = \\%L\%U\.profiles
+logon path = \\%L\profiles\%U</PRE
+></P
+><DIV
+CLASS="NOTE"
+><P
></P
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
+><P
+>I have not checked what 'net use /home' does on NT when "logon home" is
+set as above.</P
+></TD
+></TR
+></TABLE
+></DIV
></DIV
><DIV
-CLASS="SECT4"
-><HR><H5
-CLASS="SECT4"
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
><A
-NAME="AEN2503"
+NAME="AEN2192"
></A
->16.5.3.6.3. Restarting</H5
+>12.8.2.4. Windows 9X Profile Setup</H4
+><P
+>When a user first logs in on Windows 9X, the file user.DAT is created,
+as are folders "Start Menu", "Desktop", "Programs" and "Nethood".
+These directories and their contents will be merged with the local
+versions stored in c:\windows\profiles\username on subsequent logins,
+taking the most recent from each. You will need to use the [global]
+options "preserve case = yes", "short preserve case = yes" and
+"case sensitive = no" in order to maintain capital letters in shortcuts
+in any of the profile folders.</P
+><P
+>The user.DAT file contains all the user's preferences. If you wish to
+enforce a set of preferences, rename their user.DAT file to user.MAN,
+and deny them write access to this file.</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> On the Windows 95 machine, go to Control Panel | Passwords and
+ select the User Profiles tab. Select the required level of
+ roaming preferences. Press OK, but do _not_ allow the computer
+ to reboot.
+ </P
+></LI
+><LI
+><P
+> On the Windows 95 machine, go to Control Panel | Network |
+ Client for Microsoft Networks | Preferences. Select 'Log on to
+ NT Domain'. Then, ensure that the Primary Logon is 'Client for
+ Microsoft Networks'. Press OK, and this time allow the computer
+ to reboot.
+ </P
+></LI
+></OL
+><P
+>Under Windows 95, Profiles are downloaded from the Primary Logon.
+If you have the Primary Logon as 'Client for Novell Networks', then
+the profiles and logon script will be downloaded from your Novell
+Server. If you have the Primary Logon as 'Windows Logon', then the
+profiles will be loaded from the local machine - a bit against the
+concept of roaming profiles, if you ask me.</P
+><P
+>You will now find that the Microsoft Networks Login box contains
+[user, password, domain] instead of just [user, password]. Type in
+the samba server's domain name (or any other domain known to exist,
+but bear in mind that the user will be authenticated against this
+domain and profiles downloaded from it, if that domain logon server
+supports it), user name and user's password.</P
+><P
+>Once the user has been successfully validated, the Windows 95 machine
+will inform you that 'The user has not logged on before' and asks you
+if you wish to save the user's preferences? Select 'yes'.</P
+><P
+>Once the Windows 95 client comes up with the desktop, you should be able
+to examine the contents of the directory specified in the "logon path"
+on the samba server and verify that the "Desktop", "Start Menu",
+"Programs" and "Nethood" folders have been created.</P
+><P
+>These folders will be cached locally on the client, and updated when
+the user logs off (if you haven't made them read-only by then :-).
+You will find that if the user creates further folders or short-cuts,
+that the client will merge the profile contents downloaded with the
+contents of the profile directory already on the local client, taking
+the newest folders and short-cuts from each set.</P
+><P
+>If you have made the folders / files read-only on the samba server,
+then you will get errors from the w95 machine on logon and logout, as
+it attempts to merge the local and the remote profile. Basically, if
+you have any errors reported by the w95 machine, check the Unix file
+permissions and ownership rights on the profile directory contents,
+on the samba server.</P
+><P
+>If you have problems creating user profiles, you can reset the user's
+local desktop cache, as shown below. When this user then next logs in,
+they will be told that they are logging in "for the first time".</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> instead of logging in under the [user, password, domain] dialog,
+ press escape.
+ </P
+></LI
+><LI
+><P
+> run the regedit.exe program, and look in:
+ </P
+><P
+> HKEY_LOCAL_MACHINE\Windows\CurrentVersion\ProfileList
+ </P
+><P
+> you will find an entry, for each user, of ProfilePath. Note the
+ contents of this key (likely to be c:\windows\profiles\username),
+ then delete the key ProfilePath for the required user.
+ </P
+><P
+> [Exit the registry editor].
+ </P
+></LI
+><LI
+><P
+> <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>WARNING</I
+></SPAN
+> - before deleting the contents of the
+ directory listed in
+ the ProfilePath (this is likely to be c:\windows\profiles\username),
+ ask them if they have any important files stored on their desktop
+ or in their start menu. delete the contents of the directory
+ ProfilePath (making a backup if any of the files are needed).
+ </P
+><P
+> This will have the effect of removing the local (read-only hidden
+ system file) user.DAT in their profile directory, as well as the
+ local "desktop", "nethood", "start menu" and "programs" folders.
+ </P
+></LI
+><LI
><P
->If you restart the <B
-CLASS="COMMAND"
->smbd</B
->, <B
-CLASS="COMMAND"
->nmbd</B
->,
-and <B
-CLASS="COMMAND"
->winbindd</B
-> daemons at this point, you
-should be able to connect to the samba server as a domain member just as
-if you were a local user.</P
-></DIV
+> search for the user's .PWL password-caching file in the c:\windows
+ directory, and delete it.
+ </P
+></LI
+><LI
+><P
+> log off the windows 95 client.
+ </P
+></LI
+><LI
+><P
+> check the contents of the profile path (see "logon path" described
+ above), and delete the user.DAT or user.MAN file for the user,
+ making a backup if required.
+ </P
+></LI
+></OL
+><P
+>If all else fails, increase samba's debug log levels to between 3 and 10,
+and / or run a packet trace program such as tcpdump or netmon.exe, and
+look for any error reports.</P
+><P
+>If you have access to an NT server, then first set up roaming profiles
+and / or netlogons on the NT server. Make a packet trace, or examine
+the example packet traces provided with NT server, and see what the
+differences are with the equivalent samba trace.</P
></DIV
><DIV
CLASS="SECT3"
><HR><H4
CLASS="SECT3"
><A
-NAME="AEN2509"
+NAME="AEN2228"
></A
->16.5.3.7. Configure Winbind and PAM</H4
-><P
->If you have made it this far, you know that winbindd and samba are working
-together. If you want to use winbind to provide authentication for other
-services, keep reading. The pam configuration files need to be altered in
-this step. (Did you remember to make backups of your original
-<TT
-CLASS="FILENAME"
->/etc/pam.d</TT
-> files? If not, do it now.)</P
+>12.8.2.5. Windows NT Workstation 4.0</H4
><P
->You will need a pam module to use winbindd with these other services. This
-module will be compiled in the <TT
-CLASS="FILENAME"
->../source/nsswitch</TT
-> directory
-by invoking the command</P
+>When a user first logs in to a Windows NT Workstation, the profile
+NTuser.DAT is created. The profile location can be now specified
+through the "logon path" parameter. </P
+><DIV
+CLASS="NOTE"
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->make nsswitch/pam_winbind.so</B
></P
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->from the <TT
-CLASS="FILENAME"
->../source</TT
-> directory. The
-<TT
-CLASS="FILENAME"
->pam_winbind.so</TT
-> file should be copied to the location of
-your other pam security modules. On my RedHat system, this was the
-<TT
-CLASS="FILENAME"
->/lib/security</TT
-> directory. On Solaris, the pam security
-modules reside in <TT
-CLASS="FILENAME"
->/usr/lib/security</TT
->.</P
+>[lkcl 10aug97 - i tried setting the path to
+\\samba-server\homes\profile, and discovered that this fails because
+a background process maintains the connection to the [homes] share
+which does _not_ close down in between user logins. you have to
+have \\samba-server\%L\profile, where user is the username created
+from the [homes] share].</P
+></TD
+></TR
+></TABLE
+></DIV
><P
-><TT
-CLASS="PROMPT"
->root#</TT
-> <B
-CLASS="COMMAND"
->cp ../samba/source/nsswitch/pam_winbind.so /lib/security</B
-></P
-><DIV
-CLASS="SECT4"
-><HR><H5
-CLASS="SECT4"
-><A
-NAME="AEN2526"
-></A
->16.5.3.7.1. Linux/FreeBSD-specific PAM configuration</H5
+>There is a parameter that is now available for use with NT Profiles:
+"logon drive". This should be set to "h:" or any other drive, and
+should be used in conjunction with the new "logon home" parameter.</P
><P
->The <TT
-CLASS="FILENAME"
->/etc/pam.d/samba</TT
-> file does not need to be changed. I
-just left this fileas it was:</P
+>The entry for the NT 4.0 profile is a _directory_ not a file. The NT
+help on profiles mentions that a directory is also created with a .PDS
+extension. The user, while logging in, must have write permission to
+create the full profile path (and the folder with the .PDS extension)
+[lkcl 10aug97 - i found that the creation of the .PDS directory failed,
+and had to create these manually for each user, with a shell script.
+also, i presume, but have not tested, that the full profile path must
+be browseable just as it is for w95, due to the manner in which they
+attempt to create the full profile path: test existence of each path
+component; create path component].</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->auth required /lib/security/pam_stack.so service=system-auth
-account required /lib/security/pam_stack.so service=system-auth</PRE
-></P
+>In the profile directory, NT creates more folders than 95. It creates
+"Application Data" and others, as well as "Desktop", "Nethood",
+"Start Menu" and "Programs". The profile itself is stored in a file
+NTuser.DAT. Nothing appears to be stored in the .PDS directory, and
+its purpose is currently unknown.</P
><P
->The other services that I modified to allow the use of winbind
-as an authentication service were the normal login on the console (or a terminal
-session), telnet logins, and ftp service. In order to enable these
-services, you may first need to change the entries in
-<TT
-CLASS="FILENAME"
->/etc/xinetd.d</TT
-> (or <TT
-CLASS="FILENAME"
->/etc/inetd.conf</TT
->).
-RedHat 7.1 uses the new xinetd.d structure, in this case you need
-to change the lines in <TT
-CLASS="FILENAME"
->/etc/xinetd.d/telnet</TT
->
-and <TT
-CLASS="FILENAME"
->/etc/xinetd.d/wu-ftp</TT
-> from </P
+>You can use the System Control Panel to copy a local profile onto
+a samba server (see NT Help on profiles: it is also capable of firing
+up the correct location in the System Control Panel for you). The
+NT Help file also mentions that renaming NTuser.DAT to NTuser.MAN
+turns a profile into a mandatory one.</P
+><DIV
+CLASS="NOTE"
><P
-><PRE
-CLASS="PROGRAMLISTING"
->enable = no</PRE
></P
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->to</P
+>[lkcl 10aug97 - i notice that NT Workstation tells me that it is
+downloading a profile from a slow link. whether this is actually the
+case, or whether there is some configuration issue, as yet unknown,
+that makes NT Workstation _think_ that the link is a slow one is a
+matter to be resolved].</P
+><P
+>[lkcl 20aug97 - after samba digest correspondence, one user found, and
+another confirmed, that profiles cannot be loaded from a samba server
+unless "security = user" and "encrypt passwords = yes" (see the file
+ENCRYPTION.txt) or "security = server" and "password server = ip.address.
+of.yourNTserver" are used. Either of these options will allow the NT
+workstation to access the samba server using LAN manager encrypted
+passwords, without the user intervention normally required by NT
+workstation for clear-text passwords].</P
+><P
+>[lkcl 25aug97 - more comments received about NT profiles: the case of
+the profile _matters_. the file _must_ be called NTuser.DAT or, for
+a mandatory profile, NTuser.MAN].</P
+></TD
+></TR
+></TABLE
+></DIV
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
+><A
+NAME="AEN2241"
+></A
+>12.8.2.6. Windows NT Server</H4
+><P
+>There is nothing to stop you specifying any path that you like for the
+location of users' profiles. Therefore, you could specify that the
+profile be stored on a samba server, or any other SMB server, as long as
+that SMB server supports encrypted passwords.</P
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H4
+CLASS="SECT3"
+><A
+NAME="AEN2244"
+></A
+>12.8.2.7. Sharing Profiles between W95 and NT Workstation 4.0</H4
+><DIV
+CLASS="WARNING"
><P
-><PRE
-CLASS="PROGRAMLISTING"
->enable = yes</PRE
></P
+><TABLE
+CLASS="WARNING"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/warning.gif"
+HSPACE="5"
+ALT="Warning"></TD
+><TH
+ALIGN="LEFT"
+VALIGN="CENTER"
+><B
+>Potentially outdated or incorrect material follows</B
+></TH
+></TR
+><TR
+><TD
+> </TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->
-For ftp services to work properly, you will also need to either
-have individual directories for the domain users already present on
-the server, or change the home directory template to a general
-directory for all domain users. These can be easily set using
-the <TT
-CLASS="FILENAME"
->smb.conf</TT
-> global entry
-<B
-CLASS="COMMAND"
->template homedir</B
->.</P
+>I think this is all bogus, but have not deleted it. (Richard Sharpe)</P
+></TD
+></TR
+></TABLE
+></DIV
><P
->The <TT
-CLASS="FILENAME"
->/etc/pam.d/ftp</TT
-> file can be changed
-to allow winbind ftp access in a manner similar to the
-samba file. My <TT
-CLASS="FILENAME"
->/etc/pam.d/ftp</TT
-> file was
-changed to look like this:</P
+>The default logon path is \\%N\%U. NT Workstation will attempt to create
+a directory "\\samba-server\username.PDS" if you specify the logon path
+as "\\samba-server\username" with the NT User Manager. Therefore, you
+will need to specify (for example) "\\samba-server\username\profile".
+NT 4.0 will attempt to create "\\samba-server\username\profile.PDS", which
+is more likely to succeed.</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->auth required /lib/security/pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed
-auth sufficient /lib/security/pam_winbind.so
-auth required /lib/security/pam_stack.so service=system-auth
-auth required /lib/security/pam_shells.so
-account sufficient /lib/security/pam_winbind.so
-account required /lib/security/pam_stack.so service=system-auth
-session required /lib/security/pam_stack.so service=system-auth</PRE
-></P
+>If you then want to share the same Start Menu / Desktop with W95, you will
+need to specify "logon path = \\samba-server\username\profile" [lkcl 10aug97
+this has its drawbacks: i created a shortcut to telnet.exe, which attempts
+to run from the c:\winnt\system32 directory. this directory is obviously
+unlikely to exist on a Win95-only host].</P
><P
->The <TT
-CLASS="FILENAME"
->/etc/pam.d/login</TT
-> file can be changed nearly the
-same way. It now looks like this:</P
+> If you have this set up correctly, you will find separate user.DAT and
+NTuser.DAT files in the same profile directory.</P
+><DIV
+CLASS="NOTE"
><P
-><PRE
-CLASS="PROGRAMLISTING"
->auth required /lib/security/pam_securetty.so
-auth sufficient /lib/security/pam_winbind.so
-auth sufficient /lib/security/pam_unix.so use_first_pass
-auth required /lib/security/pam_stack.so service=system-auth
-auth required /lib/security/pam_nologin.so
-account sufficient /lib/security/pam_winbind.so
-account required /lib/security/pam_stack.so service=system-auth
-password required /lib/security/pam_stack.so service=system-auth
-session required /lib/security/pam_stack.so service=system-auth
-session optional /lib/security/pam_console.so</PRE
></P
+><TABLE
+CLASS="NOTE"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/note.gif"
+HSPACE="5"
+ALT="Note"></TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->In this case, I added the <B
-CLASS="COMMAND"
->auth sufficient /lib/security/pam_winbind.so</B
->
-lines as before, but also added the <B
-CLASS="COMMAND"
->required pam_securetty.so</B
->
-above it, to disallow root logins over the network. I also added a
-<B
-CLASS="COMMAND"
->sufficient /lib/security/pam_unix.so use_first_pass</B
->
-line after the <B
-CLASS="COMMAND"
->winbind.so</B
-> line to get rid of annoying
-double prompts for passwords.</P
+>[lkcl 25aug97 - there are some issues to resolve with downloading of
+NT profiles, probably to do with time/date stamps. i have found that
+NTuser.DAT is never updated on the workstation after the first time that
+it is copied to the local workstation profile directory. this is in
+contrast to w95, where it _does_ transfer / update profiles correctly].</P
+></TD
+></TR
+></TABLE
+></DIV
+></DIV
+></DIV
></DIV
><DIV
-CLASS="SECT4"
-><HR><H5
-CLASS="SECT4"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN2559"
+NAME="AEN2254"
></A
->16.5.3.7.2. Solaris-specific configuration</H5
-><P
->The /etc/pam.conf needs to be changed. I changed this file so that my Domain
-users can logon both locally as well as telnet.The following are the changes
-that I made.You can customize the pam.conf file as per your requirements,but
-be sure of those changes because in the worst case it will leave your system
-nearly impossible to boot.</P
+>12.9. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</H2
+><DIV
+CLASS="WARNING"
><P
-><PRE
-CLASS="PROGRAMLISTING"
->#
-#ident "@(#)pam.conf 1.14 99/09/16 SMI"
-#
-# Copyright (c) 1996-1999, Sun Microsystems, Inc.
-# All Rights Reserved.
-#
-# PAM configuration
-#
-# Authentication management
-#
-login auth required /usr/lib/security/pam_winbind.so
-login auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
-login auth required /usr/lib/security/$ISA/pam_dial_auth.so.1 try_first_pass
-#
-rlogin auth sufficient /usr/lib/security/pam_winbind.so
-rlogin auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
-rlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
-#
-dtlogin auth sufficient /usr/lib/security/pam_winbind.so
-dtlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
-#
-rsh auth required /usr/lib/security/$ISA/pam_rhosts_auth.so.1
-other auth sufficient /usr/lib/security/pam_winbind.so
-other auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
-#
-# Account management
-#
-login account sufficient /usr/lib/security/pam_winbind.so
-login account requisite /usr/lib/security/$ISA/pam_roles.so.1
-login account required /usr/lib/security/$ISA/pam_unix.so.1
-#
-dtlogin account sufficient /usr/lib/security/pam_winbind.so
-dtlogin account requisite /usr/lib/security/$ISA/pam_roles.so.1
-dtlogin account required /usr/lib/security/$ISA/pam_unix.so.1
-#
-other account sufficient /usr/lib/security/pam_winbind.so
-other account requisite /usr/lib/security/$ISA/pam_roles.so.1
-other account required /usr/lib/security/$ISA/pam_unix.so.1
-#
-# Session management
-#
-other session required /usr/lib/security/$ISA/pam_unix.so.1
-#
-# Password management
-#
-#other password sufficient /usr/lib/security/pam_winbind.so
-other password required /usr/lib/security/$ISA/pam_unix.so.1
-dtsession auth required /usr/lib/security/$ISA/pam_unix.so.1
-#
-# Support for Kerberos V5 authentication (uncomment to use Kerberos)
-#
-#rlogin auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
-#login auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
-#dtlogin auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
-#other auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
-#dtlogin account optional /usr/lib/security/$ISA/pam_krb5.so.1
-#other account optional /usr/lib/security/$ISA/pam_krb5.so.1
-#other session optional /usr/lib/security/$ISA/pam_krb5.so.1
-#other password optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass</PRE
></P
+><TABLE
+CLASS="WARNING"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/warning.gif"
+HSPACE="5"
+ALT="Warning"></TD
+><TH
+ALIGN="LEFT"
+VALIGN="CENTER"
+><B
+>Possibly Outdated Material</B
+></TH
+></TR
+><TR
+><TD
+> </TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
+><P
+> This appendix was originally authored by John H Terpstra of
+ the Samba Team and is included here for posterity.
+ </P
+></TD
+></TR
+></TABLE
+></DIV
+><P
+><SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>NOTE :</I
+></SPAN
+>
+The term "Domain Controller" and those related to it refer to one specific
+method of authentication that can underly an SMB domain. Domain Controllers
+prior to Windows NT Server 3.1 were sold by various companies and based on
+private extensions to the LAN Manager 2.1 protocol. Windows NT introduced
+Microsoft-specific ways of distributing the user authentication database.
+See DOMAIN.txt for examples of how Samba can participate in or create
+SMB domains based on shared authentication database schemes other than the
+Windows NT SAM.</P
+><P
+>Windows NT Server can be installed as either a plain file and print server
+(WORKGROUP workstation or server) or as a server that participates in Domain
+Control (DOMAIN member, Primary Domain controller or Backup Domain controller).
+The same is true for OS/2 Warp Server, Digital Pathworks and other similar
+products, all of which can participate in Domain Control along with Windows NT.</P
><P
->I also added a try_first_pass line after the winbind.so line to get rid of
-annoying double prompts for passwords.</P
+>To many people these terms can be confusing, so let's try to clear the air.</P
><P
->Now restart your Samba & try connecting through your application that you
-configured in the pam.conf.</P
-></DIV
-></DIV
-></DIV
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN2566"
-></A
->16.6. Limitations</H2
+>Every Windows NT system (workstation or server) has a registry database.
+The registry contains entries that describe the initialization information
+for all services (the equivalent of Unix Daemons) that run within the Windows
+NT environment. The registry also contains entries that tell application
+software where to find dynamically loadable libraries that they depend upon.
+In fact, the registry contains entries that describes everything that anything
+may need to know to interact with the rest of the system.</P
><P
->Winbind has a number of limitations in its current
- released version that we hope to overcome in future
- releases:</P
+>The registry files can be located on any Windows NT machine by opening a
+command prompt and typing:</P
><P
-></P
-><UL
-><LI
+><TT
+CLASS="PROMPT"
+>C:\WINNT\></TT
+> dir %SystemRoot%\System32\config</P
><P
->Winbind is currently only available for
- the Linux operating system, although ports to other operating
- systems are certainly possible. For such ports to be feasible,
- we require the C library of the target operating system to
- support the Name Service Switch and Pluggable Authentication
- Modules systems. This is becoming more common as NSS and
- PAM gain support among UNIX vendors.</P
-></LI
-><LI
+>The environment variable %SystemRoot% value can be obtained by typing:</P
><P
->The mappings of Windows NT RIDs to UNIX ids
- is not made algorithmically and depends on the order in which
- unmapped users or groups are seen by winbind. It may be difficult
- to recover the mappings of rid to UNIX id mapping if the file
- containing this information is corrupted or destroyed.</P
-></LI
-><LI
+><TT
+CLASS="PROMPT"
+>C:\WINNT></TT
+>echo %SystemRoot%</P
><P
->Currently the winbind PAM module does not take
- into account possible workstation and logon time restrictions
- that may be been set for Windows NT users.</P
-></LI
-></UL
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN2576"
-></A
->16.7. Conclusion</H2
+>The active parts of the registry that you may want to be familiar with are
+the files called: default, system, software, sam and security.</P
><P
->The winbind system, through the use of the Name Service
- Switch, Pluggable Authentication Modules, and appropriate
- Microsoft RPC calls have allowed us to provide seamless
- integration of Microsoft Windows NT domain users on a
- UNIX system. The result is a great reduction in the administrative
- cost of running a mixed UNIX and NT network.</P
+>In a domain environment, Microsoft Windows NT domain controllers participate
+in replication of the SAM and SECURITY files so that all controllers within
+the domain have an exactly identical copy of each.</P
+><P
+>The Microsoft Windows NT system is structured within a security model that
+says that all applications and services must authenticate themselves before
+they can obtain permission from the security manager to do what they set out
+to do.</P
+><P
+>The Windows NT User database also resides within the registry. This part of
+the registry contains the user's security identifier, home directory, group
+memberships, desktop profile, and so on.</P
+><P
+>Every Windows NT system (workstation as well as server) will have its own
+registry. Windows NT Servers that participate in Domain Security control
+have a database that they share in common - thus they do NOT own an
+independent full registry database of their own, as do Workstations and
+plain Servers.</P
+><P
+>The User database is called the SAM (Security Access Manager) database and
+is used for all user authentication as well as for authentication of inter-
+process authentication (i.e. to ensure that the service action a user has
+requested is permitted within the limits of that user's privileges).</P
+><P
+>The Samba team have produced a utility that can dump the Windows NT SAM into
+smbpasswd format: see ENCRYPTION.txt for information on smbpasswd and
+/pub/samba/pwdump on your nearest Samba mirror for the utility. This
+facility is useful but cannot be easily used to implement SAM replication
+to Samba systems.</P
+><P
+>Windows for Workgroups, Windows 95, and Windows NT Workstations and Servers
+can participate in a Domain security system that is controlled by Windows NT
+servers that have been correctly configured. Almost every domain will have
+ONE Primary Domain Controller (PDC). It is desirable that each domain will
+have at least one Backup Domain Controller (BDC).</P
+><P
+>The PDC and BDCs then participate in replication of the SAM database so that
+each Domain Controlling participant will have an up to date SAM component
+within its registry.</P
></DIV
></DIV
><DIV
CLASS="CHAPTER"
><HR><H1
><A
-NAME="PDB-MYSQL"
+NAME="SAMBA-BDC"
></A
->Chapter 17. Passdb MySQL plugin</H1
+>Chapter 13. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN2590"
+NAME="AEN2290"
></A
->17.1. Building</H2
+>13.1. Prerequisite Reading</H2
><P
->To build the plugin, run <B
-CLASS="COMMAND"
->make bin/pdb_mysql.so</B
->
-in the <TT
-CLASS="FILENAME"
->source/</TT
-> directory of samba distribution. </P
-><P
->Next, copy pdb_mysql.so to any location you want. I
-strongly recommend installing it in $PREFIX/lib or /usr/lib/samba/</P
+>Before you continue reading in this chapter, please make sure
+that you are comfortable with configuring a Samba PDC
+as described in the <A
+HREF="Samba-PDC-HOWTO.html"
+TARGET="_top"
+>Samba-PDC-HOWTO</A
+>.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2596"
+NAME="AEN2294"
></A
->17.2. Configuring</H2
+>13.2. Background</H2
><P
->This plugin lacks some good documentation, but here is some short info:</P
-><P
->Add a the following to the <B
-CLASS="COMMAND"
->passdb backend</B
-> variable in your <TT
-CLASS="FILENAME"
->smb.conf</TT
->:
-<PRE
-CLASS="PROGRAMLISTING"
->passdb backend = [other-plugins] plugin:/location/to/pdb_mysql.so:identifier [other-plugins]</PRE
-></P
+>What is a Domain Controller? It is a machine that is able to answer
+logon requests from workstations in a Windows NT Domain. Whenever a
+user logs into a Windows NT Workstation, the workstation connects to a
+Domain Controller and asks him whether the username and password the
+user typed in is correct. The Domain Controller replies with a lot of
+information about the user, for example the place where the users
+profile is stored, the users full name of the user. All this
+information is stored in the NT user database, the so-called SAM.</P
><P
->The identifier can be any string you like, as long as it doesn't collide with
-the identifiers of other plugins or other instances of pdb_mysql. If you
-specify multiple pdb_mysql.so entries in 'passdb backend', you also need to
-use different identifiers!</P
+>There are two kinds of Domain Controller in a NT 4 compatible Domain:
+A Primary Domain Controller (PDC) and one or more Backup Domain
+Controllers (BDC). The PDC contains the master copy of the
+SAM. Whenever the SAM has to change, for example when a user changes
+his password, this change has to be done on the PDC. A Backup Domain
+Controller is a machine that maintains a read-only copy of the
+SAM. This way it is able to reply to logon requests and authenticate
+users in case the PDC is not available. During this time no changes to
+the SAM are possible. Whenever changes to the SAM are done on the PDC,
+all BDC receive the changes from the PDC.</P
><P
->Additional options can be given thru the smb.conf file in the [global] section.</P
+>Since version 2.2 Samba officially supports domain logons for all
+current Windows Clients, including Windows 2000 and XP. This text
+assumes the domain to be named SAMBA. To be able to act as a PDC, some
+parameters in the [global]-section of the smb.conf have to be set:</P
><P
><PRE
CLASS="PROGRAMLISTING"
->identifier:mysql host - host name, defaults to 'localhost'
-identifier:mysql password
-identifier:mysql user - defaults to 'samba'
-identifier:mysql database - defaults to 'samba'
-identifier:mysql port - defaults to 3306
-identifier:table - Name of the table containing users</PRE
+>workgroup = SAMBA
+domain master = yes
+domain logons = yes</PRE
></P
><P
->Names of the columns in this table(I've added column types those columns should have first):</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->identifier:logon time column - int(9)
-identifier:logoff time column - int(9)
-identifier:kickoff time column - int(9)
-identifier:pass last set time column - int(9)
-identifier:pass can change time column - int(9)
-identifier:pass must change time column - int(9)
-identifier:username column - varchar(255) - unix username
-identifier:domain column - varchar(255) - NT domain user is part of
-identifier:nt username column - varchar(255) - NT username
-identifier:fullname column - varchar(255) - Full name of user
-identifier:home dir column - varchar(255) - Unix homedir path
-identifier:dir drive column - varchar(2) - Directory drive path (eg: 'H:')
-identifier:logon script column - varchar(255) - Batch file to run on client side when logging on
-identifier:profile path column - varchar(255) - Path of profile
-identifier:acct desc column - varchar(255) - Some ASCII NT user data
-identifier:workstations column - varchar(255) - Workstations user can logon to (or NULL for all)
-identifier:unknown string column - varchar(255) - unknown string
-identifier:munged dial column - varchar(255) - ?
-identifier:uid column - int(9) - Unix user ID (uid)
-identifier:gid column - int(9) - Unix user group (gid)
-identifier:user sid column - varchar(255) - NT user SID
-identifier:group sid column - varchar(255) - NT group ID
-identifier:lanman pass column - varchar(255) - encrypted lanman password
-identifier:nt pass column - varchar(255) - encrypted nt passwd
-identifier:plaintext pass column - varchar(255) - plaintext password
-identifier:acct control column - int(9) - nt user data
-identifier:unknown 3 column - int(9) - unknown
-identifier:logon divs column - int(9) - ?
-identifier:hours len column - int(9) - ?
-identifier:unknown 5 column - int(9) - unknown
-identifier:unknown 6 column - int(9) - unknown</PRE
-></P
-><P
->Eventually, you can put a colon (:) after the name of each column, which
-should specify the column to update when updating the table. You can also
-specify nothing behind the colon - then the data from the field will not be
-updated. </P
+>Several other things like a [homes] and a [netlogon] share also may be
+set along with settings for the profile path, the users home drive and
+others. This will not be covered in this document.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2611"
+NAME="AEN2302"
+></A
+>13.3. What qualifies a Domain Controller on the network?</H2
+><P
+>Every machine that is a Domain Controller for the domain SAMBA has to
+register the NetBIOS group name SAMBA#1c with the WINS server and/or
+by broadcast on the local network. The PDC also registers the unique
+NetBIOS name SAMBA#1b with the WINS server. The name type #1b is
+normally reserved for the domain master browser, a role that has
+nothing to do with anything related to authentication, but the
+Microsoft Domain implementation requires the domain master browser to
+be on the same machine as the PDC.</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN2305"
+></A
+>13.3.1. How does a Workstation find its domain controller?</H3
+><P
+>A NT workstation in the domain SAMBA that wants a local user to be
+authenticated has to find the domain controller for SAMBA. It does
+this by doing a NetBIOS name query for the group name SAMBA#1c. It
+assumes that each of the machines it gets back from the queries is a
+domain controller and can answer logon requests. To not open security
+holes both the workstation and the selected (TODO: How is the DC
+chosen) domain controller authenticate each other. After that the
+workstation sends the user's credentials (his name and password) to
+the domain controller, asking for approval.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN2308"
></A
->17.3. Using plaintext passwords or encrypted password</H2
+>13.3.2. When is the PDC needed?</H3
><P
->I strongly discourage the use of plaintext passwords, however, you can use them:</P
+>Whenever a user wants to change his password, this has to be done on
+the PDC. To find the PDC, the workstation does a NetBIOS name query
+for SAMBA#1b, assuming this machine maintains the master copy of the
+SAM. The workstation contacts the PDC, both mutually authenticate and
+the password change is done.</P
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2311"
+></A
+>13.4. Can Samba be a Backup Domain Controller?</H2
><P
->If you would like to use plaintext passwords, set 'identifier:lanman pass column' and 'identifier:nt pass column' to 'NULL' (without the quotes) and 'identifier:plaintext pass column' to the name of the column containing the plaintext passwords. </P
+>With version 2.2, no. The native NT SAM replication protocols have
+not yet been fully implemented. The Samba Team is working on
+understanding and implementing the protocols, but this work has not
+been finished for version 2.2.</P
><P
->If you use encrypted passwords, set the 'identifier:plaintext pass column' to 'NULL' (without the quotes). This is the default.</P
+>Can I get the benefits of a BDC with Samba? Yes. The main reason for
+implementing a BDC is availability. If the PDC is a Samba machine,
+a second Samba machine can be set up to
+service logon requests whenever the PDC is down.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2616"
+NAME="AEN2315"
></A
->17.4. Getting non-column data from the table</H2
+>13.5. How do I set up a Samba BDC?</H2
+><P
+>Several things have to be done:</P
+><P
+></P
+><UL
+><LI
+><P
+>The domain SID has to be the same on the PDC and the BDC. This used to
+be stored in the file private/MACHINE.SID. This file is not created
+anymore since Samba 2.2.5 or even earlier. Nowadays the domain SID is
+stored in the file private/secrets.tdb. Simply copying the secrets.tdb
+from the PDC to the BDC does not work, as the BDC would
+generate a new SID for itself and override the domain SID with this
+new BDC SID.</P
+><P
+>To retrieve the domain SID from the PDC or an existing BDC and store it in the
+secrets.tdb, execute 'net rpc getsid' on the BDC.</P
+></LI
+><LI
+><P
+>The Unix user database has to be synchronized from the PDC to the
+BDC. This means that both the /etc/passwd and /etc/group have to be
+replicated from the PDC to the BDC. This can be done manually
+whenever changes are made, or the PDC is set up as a NIS master
+server and the BDC as a NIS slave server. To set up the BDC as a
+mere NIS client would not be enough, as the BDC would not be able to
+access its user database in case of a PDC failure.</P
+></LI
+><LI
+><P
+>The Samba password database in the file private/smbpasswd has to be
+replicated from the PDC to the BDC. This is a bit tricky, see the
+next section.</P
+></LI
+><LI
><P
->It is possible to have not all data in the database and making some 'constant'.</P
+>Any netlogon share has to be replicated from the PDC to the
+BDC. This can be done manually whenever login scripts are changed,
+or it can be done automatically together with the smbpasswd
+synchronization.</P
+></LI
+></UL
><P
->For example, you can set 'identifier:fullname column' to :
-<B
-CLASS="COMMAND"
->CONCAT(First_name,' ',Sur_name)</B
-></P
+>Finally, the BDC has to be found by the workstations. This can be done
+by setting</P
><P
->Or, set 'identifier:workstations column' to :
-<B
-CLASS="COMMAND"
->NULL</B
+><PRE
+CLASS="PROGRAMLISTING"
+>workgroup = samba
+domain master = no
+domain logons = yes</PRE
></P
><P
->See the MySQL documentation for more language constructs.</P
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="PDB-XML"
-></A
->Chapter 18. Passdb XML plugin</H1
+>in the [global]-section of the smb.conf of the BDC. This makes the BDC
+only register the name SAMBA#1c with the WINS server. This is no
+problem as the name SAMBA#1c is a NetBIOS group name that is meant to
+be registered by more than one machine. The parameter 'domain master =
+no' forces the BDC not to register SAMBA#1b which as a unique NetBIOS
+name is reserved for the Primary Domain Controller.</P
><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN2635"
+NAME="AEN2332"
></A
->18.1. Building</H2
+>13.5.1. How do I replicate the smbpasswd file?</H3
><P
->This module requires libxml2 to be installed.</P
+>Replication of the smbpasswd file is sensitive. It has to be done
+whenever changes to the SAM are made. Every user's password change is
+done in the smbpasswd file and has to be replicated to the BDC. So
+replicating the smbpasswd file very often is necessary.</P
><P
->To build pdb_xml, run: <B
-CLASS="COMMAND"
->make bin/pdb_xml.so</B
-> in
-the directory <TT
-CLASS="FILENAME"
->source/</TT
->. </P
+>As the smbpasswd file contains plain text password equivalents, it
+must not be sent unencrypted over the wire. The best way to set up
+smbpasswd replication from the PDC to the BDC is to use the utility
+rsync. rsync can use ssh as a transport. ssh itself can be set up to
+accept *only* rsync transfer without requiring the user to type a
+password.</P
></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN2641"
-></A
->18.2. Usage</H2
-><P
->The usage of pdb_xml is pretty straightforward. To export data, use:
-
-<B
-CLASS="COMMAND"
->pdbedit -e plugin:/usr/lib/samba/pdb_xml.so:filename</B
->
-
-(where filename is the name of the file to put the data in)</P
-><P
->To import data, use:
-<B
-CLASS="COMMAND"
->pdbedit -i plugin:/usr/lib/samba/pdb_xml.so:filename -e current-pdb</B
->
-
-Where filename is the name to read the data from and current-pdb to put it in.</P
></DIV
></DIV
><DIV
><A
NAME="SAMBA-LDAP-HOWTO"
></A
->Chapter 19. Storing Samba's User/Machine Account information in an LDAP Directory</H1
+>Chapter 14. Storing Samba's User/Machine Account information in an LDAP Directory</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN2664"
+NAME="AEN2353"
></A
->19.1. Purpose</H2
+>14.1. Purpose</H2
><P
>This document describes how to use an LDAP directory for storing Samba user
account information traditionally stored in the smbpasswd(5) file. It is
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2684"
+NAME="AEN2373"
></A
->19.2. Introduction</H2
+>14.2. Introduction</H2
><P
>Traditionally, when configuring <A
HREF="smb.conf.5.html#ENCRYPTPASSWORDS"
comfortable with using an smbpasswd file, simply replace "smbpasswd" with
"LDAP directory" in all the documentation.</P
><P
->There are a few points to stress about what the <TT
+>There are a few points to stress about what the <TT
+CLASS="PARAMETER"
+><I
+>--with-ldapsam</I
+></TT
+>
+does not provide. The LDAP support referred to in the this documentation does not
+include:</P
+><P
+></P
+><UL
+><LI
+><P
+>A means of retrieving user account information from
+ an Windows 2000 Active Directory server.</P
+></LI
+><LI
+><P
+>A means of replacing /etc/passwd.</P
+></LI
+></UL
+><P
+>The second item can be accomplished by using LDAP NSS and PAM modules. LGPL
+versions of these libraries can be obtained from PADL Software
+(<A
+HREF="http://www.padl.com/"
+TARGET="_top"
+>http://www.padl.com/</A
+>). However,
+the details of configuring these packages are beyond the scope of this document.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2402"
+></A
+>14.3. Supported LDAP Servers</H2
+><P
+>The LDAP samdb code in 2.2.3 has been developed and tested using the OpenLDAP
+2.0 server and client libraries. The same code should be able to work with
+Netscape's Directory Server and client SDK. However, due to lack of testing
+so far, there are bound to be compile errors and bugs. These should not be
+hard to fix. If you are so inclined, please be sure to forward all patches to
+<A
+HREF="samba-patches@samba.org"
+TARGET="_top"
+>samba-patches@samba.org</A
+> and
+<A
+HREF="jerry@samba.org"
+TARGET="_top"
+>jerry@samba.org</A
+>.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2407"
+></A
+>14.4. Schema and Relationship to the RFC 2307 posixAccount</H2
+><P
+>Samba 2.2.3 includes the necessary schema file for OpenLDAP 2.0 in
+<TT
+CLASS="FILENAME"
+>examples/LDAP/samba.schema</TT
+>. (Note that this schema
+file has been modified since the experimental support initially included
+in 2.2.2). The sambaAccount objectclass is given here:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>objectclass ( 1.3.1.5.1.4.1.7165.2.2.2 NAME 'sambaAccount' SUP top STRUCTURAL
+ DESC 'Samba Account'
+ MUST ( uid $ rid )
+ MAY ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $
+ logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
+ displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
+ description $ userWorkstations $ primaryGroupID $ domain ))</PRE
+></P
+><P
+>The samba.schema file has been formatted for OpenLDAP 2.0. The OID's are
+owned by the Samba Team and as such is legal to be openly published.
+If you translate the schema to be used with Netscape DS, please
+submit the modified schema file as a patch to <A
+HREF="jerry@samba.org"
+TARGET="_top"
+>jerry@samba.org</A
+></P
+><P
+>Just as the smbpasswd file is mean to store information which supplements a
+user's <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entry, so is the sambaAccount object
+meant to supplement the UNIX user account information. A sambaAccount is a
+<TT
+CLASS="CONSTANT"
+>STRUCTURAL</TT
+> objectclass so it can be stored individually
+in the directory. However, there are several fields (e.g. uid) which overlap
+with the posixAccount objectclass outlined in RFC2307. This is by design.</P
+><P
+>In order to store all user account information (UNIX and Samba) in the directory,
+it is necessary to use the sambaAccount and posixAccount objectclasses in
+combination. However, smbd will still obtain the user's UNIX account
+information via the standard C library calls (e.g. getpwnam(), et. al.).
+This means that the Samba server must also have the LDAP NSS library installed
+and functioning correctly. This division of information makes it possible to
+store all Samba account information in LDAP, but still maintain UNIX account
+information in NIS while the network is transitioning to a full LDAP infrastructure.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2419"
+></A
+>14.5. Configuring Samba with LDAP</H2
+><DIV
+CLASS="SECT2"
+><H3
+CLASS="SECT2"
+><A
+NAME="AEN2421"
+></A
+>14.5.1. OpenLDAP configuration</H3
+><P
+>To include support for the sambaAccount object in an OpenLDAP directory
+server, first copy the samba.schema file to slapd's configuration directory.</P
+><P
+><TT
+CLASS="PROMPT"
+>root# </TT
+><B
+CLASS="COMMAND"
+>cp samba.schema /etc/openldap/schema/</B
+></P
+><P
+>Next, include the <TT
+CLASS="FILENAME"
+>samba.schema</TT
+> file in <TT
+CLASS="FILENAME"
+>slapd.conf</TT
+>.
+The sambaAccount object contains two attributes which depend upon other schema
+files. The 'uid' attribute is defined in <TT
+CLASS="FILENAME"
+>cosine.schema</TT
+> and
+the 'displayName' attribute is defined in the <TT
+CLASS="FILENAME"
+>inetorgperson.schema</TT
+>
+file. Both of these must be included before the <TT
+CLASS="FILENAME"
+>samba.schema</TT
+> file.</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>## /etc/openldap/slapd.conf
+
+## schema files (core.schema is required by default)
+include /etc/openldap/schema/core.schema
+
+## needed for sambaAccount
+include /etc/openldap/schema/cosine.schema
+include /etc/openldap/schema/inetorgperson.schema
+include /etc/openldap/schema/samba.schema
+
+## uncomment this line if you want to support the RFC2307 (NIS) schema
+## include /etc/openldap/schema/nis.schema
+
+....</PRE
+></P
+><P
+>It is recommended that you maintain some indices on some of the most usefull attributes,
+like in the following example, to speed up searches made on sambaAccount objectclasses
+(and possibly posixAccount and posixGroup as well).</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+># Indices to maintain
+## required by OpenLDAP 2.0
+index objectclass eq
+
+## support pb_getsampwnam()
+index uid pres,eq
+## support pdb_getsambapwrid()
+index rid eq
+
+## uncomment these if you are storing posixAccount and
+## posixGroup entries in the directory as well
+##index uidNumber eq
+##index gidNumber eq
+##index cn eq
+##index memberUid eq</PRE
+></P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN2438"
+></A
+>14.5.2. Configuring Samba</H3
+><P
+>The following parameters are available in smb.conf only with <TT
CLASS="PARAMETER"
><I
>--with-ldapsam</I
></TT
>
-does not provide. The LDAP support referred to in the this documentation does not
-include:</P
+was included with compiling Samba.</P
><P
></P
><UL
><LI
><P
->A means of retrieving user account information from
- an Windows 2000 Active Directory server.</P
+><A
+HREF="smb.conf.5.html#LDAPSSL"
+TARGET="_top"
+>ldap ssl</A
+></P
></LI
><LI
><P
->A means of replacing /etc/passwd.</P
+><A
+HREF="smb.conf.5.html#LDAPSERVER"
+TARGET="_top"
+>ldap server</A
+></P
></LI
-></UL
+><LI
><P
->The second item can be accomplished by using LDAP NSS and PAM modules. LGPL
-versions of these libraries can be obtained from PADL Software
-(<A
-HREF="http://www.padl.com/"
+><A
+HREF="smb.conf.5.html#LDAPADMINDN"
TARGET="_top"
->http://www.padl.com/</A
->). However,
-the details of configuring these packages are beyond the scope of this document.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+>ldap admin dn</A
+></P
+></LI
+><LI
+><P
><A
-NAME="AEN2713"
-></A
->19.3. Supported LDAP Servers</H2
+HREF="smb.conf.5.html#LDAPSUFFIX"
+TARGET="_top"
+>ldap suffix</A
+></P
+></LI
+><LI
><P
->The LDAP samdb code in 2.2.3 has been developed and tested using the OpenLDAP
-2.0 server and client libraries. The same code should be able to work with
-Netscape's Directory Server and client SDK. However, due to lack of testing
-so far, there are bound to be compile errors and bugs. These should not be
-hard to fix. If you are so inclined, please be sure to forward all patches to
-<A
-HREF="samba-patches@samba.org"
+><A
+HREF="smb.conf.5.html#LDAPFILTER"
TARGET="_top"
->samba-patches@samba.org</A
-> and
-<A
-HREF="jerry@samba.org"
+>ldap filter</A
+></P
+></LI
+><LI
+><P
+><A
+HREF="smb.conf.5.html#LDAPPORT"
TARGET="_top"
->jerry@samba.org</A
->.</P
+>ldap port</A
+></P
+></LI
+></UL
+><P
+>These are described in the <A
+HREF="smb.conf.5.html"
+TARGET="_top"
+>smb.conf(5)</A
+> man
+page and so will not be repeated here. However, a sample smb.conf file for
+use with an LDAP directory could appear as</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>## /usr/local/samba/lib/smb.conf
+[global]
+ security = user
+ encrypt passwords = yes
+
+ netbios name = TASHTEGO
+ workgroup = NARNIA
+
+ # ldap related parameters
+
+ # define the DN to use when binding to the directory servers
+ # The password for this DN is not stored in smb.conf. Rather it
+ # must be set by using 'smbpasswd -w <TT
+CLASS="REPLACEABLE"
+><I
+>secretpw</I
+></TT
+>' to store the
+ # passphrase in the secrets.tdb file. If the "ldap admin dn" values
+ # changes, this password will need to be reset.
+ ldap admin dn = "cn=Samba Manager,ou=people,dc=samba,dc=org"
+
+ # specify the LDAP server's hostname (defaults to locahost)
+ ldap server = ahab.samba.org
+
+ # Define the SSL option when connecting to the directory
+ # ('off', 'start tls', or 'on' (default))
+ ldap ssl = start tls
+
+ # define the port to use in the LDAP session (defaults to 636 when
+ # "ldap ssl = on")
+ ldap port = 389
+
+ # specify the base DN to use when searching the directory
+ ldap suffix = "ou=people,dc=samba,dc=org"
+
+ # generally the default ldap search filter is ok
+ # ldap filter = "(&(uid=%u)(objectclass=sambaAccount))"</PRE
+></P
+></DIV
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2718"
+NAME="AEN2466"
></A
->19.4. Schema and Relationship to the RFC 2307 posixAccount</H2
-><P
->Samba 2.2.3 includes the necessary schema file for OpenLDAP 2.0 in
-<TT
-CLASS="FILENAME"
->examples/LDAP/samba.schema</TT
->. (Note that this schema
-file has been modified since the experimental support initially included
-in 2.2.2). The sambaAccount objectclass is given here:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->objectclass ( 1.3.1.5.1.4.1.7165.2.2.2 NAME 'sambaAccount' SUP top STRUCTURAL
- DESC 'Samba Account'
- MUST ( uid $ rid )
- MAY ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $
- logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
- displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
- description $ userWorkstations $ primaryGroupID $ domain ))</PRE
-></P
+>14.6. Accounts and Groups management</H2
><P
->The samba.schema file has been formatted for OpenLDAP 2.0. The OID's are
-owned by the Samba Team and as such is legal to be openly published.
-If you translate the schema to be used with Netscape DS, please
-submit the modified schema file as a patch to <A
-HREF="jerry@samba.org"
-TARGET="_top"
->jerry@samba.org</A
-></P
+>As users accounts are managed thru the sambaAccount objectclass, you should
+modify you existing administration tools to deal with sambaAccount attributes.</P
><P
->Just as the smbpasswd file is mean to store information which supplements a
-user's <TT
-CLASS="FILENAME"
->/etc/passwd</TT
-> entry, so is the sambaAccount object
-meant to supplement the UNIX user account information. A sambaAccount is a
-<TT
-CLASS="CONSTANT"
->STRUCTURAL</TT
-> objectclass so it can be stored individually
-in the directory. However, there are several fields (e.g. uid) which overlap
-with the posixAccount objectclass outlined in RFC2307. This is by design.</P
+>Machines accounts are managed with the sambaAccount objectclass, just
+like users accounts. However, it's up to you to stored thoses accounts
+in a different tree of you LDAP namespace: you should use
+"ou=Groups,dc=plainjoe,dc=org" to store groups and
+"ou=People,dc=plainjoe,dc=org" to store users. Just configure your
+NSS and PAM accordingly (usually, in the /etc/ldap.conf configuration
+file).</P
><P
->In order to store all user account information (UNIX and Samba) in the directory,
-it is necessary to use the sambaAccount and posixAccount objectclasses in
-combination. However, smbd will still obtain the user's UNIX account
-information via the standard C library calls (e.g. getpwnam(), et. al.).
-This means that the Samba server must also have the LDAP NSS library installed
-and functioning correctly. This division of information makes it possible to
-store all Samba account information in LDAP, but still maintain UNIX account
-information in NIS while the network is transitioning to a full LDAP infrastructure.</P
+>In Samba release 2.2.3, the group management system is based on posix
+groups. This meand that Samba make usage of the posixGroup objectclass.
+For now, there is no NT-like group system management (global and local
+groups).</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2730"
-></A
->19.5. Configuring Samba with LDAP</H2
-><DIV
-CLASS="SECT2"
-><H3
-CLASS="SECT2"
-><A
-NAME="AEN2732"
+NAME="AEN2471"
></A
->19.5.1. OpenLDAP configuration</H3
+>14.7. Security and sambaAccount</H2
><P
->To include support for the sambaAccount object in an OpenLDAP directory
-server, first copy the samba.schema file to slapd's configuration directory.</P
+>There are two important points to remember when discussing the security
+of sambaAccount entries in the directory.</P
><P
-><TT
-CLASS="PROMPT"
->root# </TT
-><B
+></P
+><UL
+><LI
+><P
+><SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Never</I
+></SPAN
+> retrieve the lmPassword or
+ ntPassword attribute values over an unencrypted LDAP session.</P
+></LI
+><LI
+><P
+><SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Never</I
+></SPAN
+> allow non-admin users to
+ view the lmPassword or ntPassword attribute values.</P
+></LI
+></UL
+><P
+>These password hashes are clear text equivalents and can be used to impersonate
+the user without deriving the original clear text strings. For more information
+on the details of LM/NT password hashes, refer to the <A
+HREF="ENCRYPTION.html"
+TARGET="_top"
+>ENCRYPTION chapter</A
+> of the Samba-HOWTO-Collection.</P
+><P
+>To remedy the first security issue, the "ldap ssl" smb.conf parameter defaults
+to require an encrypted session (<B
+CLASS="COMMAND"
+>ldap ssl = on</B
+>) using
+the default port of 636
+when contacting the directory server. When using an OpenLDAP 2.0 server, it
+is possible to use the use the StartTLS LDAP extended operation in the place of
+LDAPS. In either case, you are strongly discouraged to disable this security
+(<B
CLASS="COMMAND"
->cp samba.schema /etc/openldap/schema/</B
-></P
+>ldap ssl = off</B
+>).</P
><P
->Next, include the <TT
-CLASS="FILENAME"
->samba.schema</TT
-> file in <TT
+>Note that the LDAPS protocol is deprecated in favor of the LDAPv3 StartTLS
+extended operation. However, the OpenLDAP library still provides support for
+the older method of securing communication between clients and servers.</P
+><P
+>The second security precaution is to prevent non-administrative users from
+harvesting password hashes from the directory. This can be done using the
+following ACL in <TT
CLASS="FILENAME"
>slapd.conf</TT
->.
-The sambaAccount object contains two attributes which depend upon other schema
-files. The 'uid' attribute is defined in <TT
-CLASS="FILENAME"
->cosine.schema</TT
-> and
-the 'displayName' attribute is defined in the <TT
-CLASS="FILENAME"
->inetorgperson.schema</TT
->
-file. Both of these must be included before the <TT
-CLASS="FILENAME"
->samba.schema</TT
-> file.</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->## /etc/openldap/slapd.conf
-
-## schema files (core.schema is required by default)
-include /etc/openldap/schema/core.schema
-
-## needed for sambaAccount
-include /etc/openldap/schema/cosine.schema
-include /etc/openldap/schema/inetorgperson.schema
-include /etc/openldap/schema/samba.schema
-
-## uncomment this line if you want to support the RFC2307 (NIS) schema
-## include /etc/openldap/schema/nis.schema
-
-....</PRE
-></P
-><P
->It is recommended that you maintain some indices on some of the most usefull attributes,
-like in the following example, to speed up searches made on sambaAccount objectclasses
-(and possibly posixAccount and posixGroup as well).</P
+>:</P
><P
><PRE
CLASS="PROGRAMLISTING"
-># Indices to maintain
-## required by OpenLDAP 2.0
-index objectclass eq
-
-## support pb_getsampwnam()
-index uid pres,eq
-## support pdb_getsambapwrid()
-index rid eq
-
-## uncomment these if you are storing posixAccount and
-## posixGroup entries in the directory as well
-##index uidNumber eq
-##index gidNumber eq
-##index cn eq
-##index memberUid eq</PRE
+>## allow the "ldap admin dn" access, but deny everyone else
+access to attrs=lmPassword,ntPassword
+ by dn="cn=Samba Admin,ou=people,dc=plainjoe,dc=org" write
+ by * none</PRE
></P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN2749"
+NAME="AEN2491"
></A
->19.5.2. Configuring Samba</H3
+>14.8. LDAP specials attributes for sambaAccounts</H2
><P
->The following parameters are available in smb.conf only with <TT
-CLASS="PARAMETER"
-><I
->--with-ldapsam</I
-></TT
->
-was included with compiling Samba.</P
+>The sambaAccount objectclass is composed of the following attributes:</P
><P
></P
><UL
><LI
><P
-><A
-HREF="smb.conf.5.html#LDAPSSL"
-TARGET="_top"
->ldap ssl</A
-></P
+><TT
+CLASS="CONSTANT"
+>lmPassword</TT
+>: the LANMAN password 16-byte hash stored as a character
+ representation of a hexidecimal string.</P
></LI
><LI
><P
-><A
-HREF="smb.conf.5.html#LDAPSERVER"
-TARGET="_top"
->ldap server</A
-></P
+><TT
+CLASS="CONSTANT"
+>ntPassword</TT
+>: the NT password hash 16-byte stored as a character
+ representation of a hexidecimal string.</P
></LI
><LI
><P
-><A
-HREF="smb.conf.5.html#LDAPADMINDN"
-TARGET="_top"
->ldap admin dn</A
-></P
+><TT
+CLASS="CONSTANT"
+>pwdLastSet</TT
+>: The integer time in seconds since 1970 when the
+ <TT
+CLASS="CONSTANT"
+>lmPassword</TT
+> and <TT
+CLASS="CONSTANT"
+>ntPassword</TT
+> attributes were last set.
+ </P
></LI
><LI
><P
-><A
-HREF="smb.conf.5.html#LDAPSUFFIX"
-TARGET="_top"
->ldap suffix</A
-></P
+><TT
+CLASS="CONSTANT"
+>acctFlags</TT
+>: string of 11 characters surrounded by square brackets []
+ representing account flags such as U (user), W(workstation), X(no password expiration), and
+ D(disabled).</P
></LI
><LI
><P
-><A
-HREF="smb.conf.5.html#LDAPFILTER"
+><TT
+CLASS="CONSTANT"
+>logonTime</TT
+>: Integer value currently unused</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>logoffTime</TT
+>: Integer value currently unused</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>kickoffTime</TT
+>: Integer value currently unused</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>pwdCanChange</TT
+>: Integer value currently unused</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>pwdMustChange</TT
+>: Integer value currently unused</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>homeDrive</TT
+>: specifies the drive letter to which to map the
+ UNC path specified by homeDirectory. The drive letter must be specified in the form "X:"
+ where X is the letter of the drive to map. Refer to the "logon drive" parameter in the
+ smb.conf(5) man page for more information.</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>scriptPath</TT
+>: The scriptPath property specifies the path of
+ the user's logon script, .CMD, .EXE, or .BAT file. The string can be null. The path
+ is relative to the netlogon share. Refer to the "logon script" parameter in the
+ smb.conf(5) man page for more information.</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>profilePath</TT
+>: specifies a path to the user's profile.
+ This value can be a null string, a local absolute path, or a UNC path. Refer to the
+ "logon path" parameter in the smb.conf(5) man page for more information.</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>smbHome</TT
+>: The homeDirectory property specifies the path of
+ the home directory for the user. The string can be null. If homeDrive is set and specifies
+ a drive letter, homeDirectory should be a UNC path. The path must be a network
+ UNC path of the form \\server\share\directory. This value can be a null string.
+ Refer to the "logon home" parameter in the smb.conf(5) man page for more information.
+ </P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>userWorkstation</TT
+>: character string value currently unused.
+ </P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>rid</TT
+>: the integer representation of the user's relative identifier
+ (RID).</P
+></LI
+><LI
+><P
+><TT
+CLASS="CONSTANT"
+>primaryGroupID</TT
+>: the relative identifier (RID) of the primary group
+ of the user.</P
+></LI
+></UL
+><P
+>The majority of these parameters are only used when Samba is acting as a PDC of
+a domain (refer to the <A
+HREF="Samba-PDC-HOWTO.html"
TARGET="_top"
->ldap filter</A
+>Samba-PDC-HOWTO</A
+> for details on
+how to configure Samba as a Primary Domain Controller). The following four attributes
+are only stored with the sambaAccount entry if the values are non-default values:</P
+><P
></P
+><UL
+><LI
+><P
+>smbHome</P
+></LI
+><LI
+><P
+>scriptPath</P
></LI
><LI
><P
-><A
-HREF="smb.conf.5.html#LDAPPORT"
-TARGET="_top"
->ldap port</A
-></P
+>logonPath</P
></LI
-></UL
+><LI
><P
->These are described in the <A
-HREF="smb.conf.5.html"
-TARGET="_top"
->smb.conf(5)</A
-> man
-page and so will not be repeated here. However, a sample smb.conf file for
-use with an LDAP directory could appear as</P
+>homeDrive</P
+></LI
+></UL
><P
-><PRE
-CLASS="PROGRAMLISTING"
->## /usr/local/samba/lib/smb.conf
-[global]
- security = user
- encrypt passwords = yes
-
- netbios name = TASHTEGO
- workgroup = NARNIA
-
- # ldap related parameters
-
- # define the DN to use when binding to the directory servers
- # The password for this DN is not stored in smb.conf. Rather it
- # must be set by using 'smbpasswd -w <TT
-CLASS="REPLACEABLE"
+>These attributes are only stored with the sambaAccount entry if
+the values are non-default values. For example, assume TASHTEGO has now been
+configured as a PDC and that <B
+CLASS="COMMAND"
+>logon home = \\%L\%u</B
+> was defined in
+its <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> file. When a user named "becky" logons to the domain,
+the <TT
+CLASS="PARAMETER"
><I
->secretpw</I
+>logon home</I
></TT
->' to store the
- # passphrase in the secrets.tdb file. If the "ldap admin dn" values
- # changes, this password will need to be reset.
- ldap admin dn = "cn=Samba Manager,ou=people,dc=samba,dc=org"
-
- # specify the LDAP server's hostname (defaults to locahost)
- ldap server = ahab.samba.org
-
- # Define the SSL option when connecting to the directory
- # ('off', 'start tls', or 'on' (default))
- ldap ssl = start tls
-
- # define the port to use in the LDAP session (defaults to 636 when
- # "ldap ssl = on")
- ldap port = 389
-
- # specify the base DN to use when searching the directory
- ldap suffix = "ou=people,dc=samba,dc=org"
-
- # generally the default ldap search filter is ok
- # ldap filter = "(&(uid=%u)(objectclass=sambaAccount))"</PRE
-></P
-></DIV
+> string is expanded to \\TASHTEGO\becky.
+If the smbHome attribute exists in the entry "uid=becky,ou=people,dc=samba,dc=org",
+this value is used. However, if this attribute does not exist, then the value
+of the <TT
+CLASS="PARAMETER"
+><I
+>logon home</I
+></TT
+> parameter is used in its place. Samba
+will only write the attribute value to the directory entry is the value is
+something other than the default (e.g. \\MOBY\becky).</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2777"
+NAME="AEN2561"
></A
->19.6. Accounts and Groups management</H2
+>14.9. Example LDIF Entries for a sambaAccount</H2
><P
->As users accounts are managed thru the sambaAccount objectclass, you should
-modify you existing administration tools to deal with sambaAccount attributes.</P
+>The following is a working LDIF with the inclusion of the posixAccount objectclass:</P
><P
->Machines accounts are managed with the sambaAccount objectclass, just
-like users accounts. However, it's up to you to stored thoses accounts
-in a different tree of you LDAP namespace: you should use
-"ou=Groups,dc=plainjoe,dc=org" to store groups and
-"ou=People,dc=plainjoe,dc=org" to store users. Just configure your
-NSS and PAM accordingly (usually, in the /etc/ldap.conf configuration
-file).</P
+><PRE
+CLASS="PROGRAMLISTING"
+>dn: uid=guest2, ou=people,dc=plainjoe,dc=org
+ntPassword: 878D8014606CDA29677A44EFA1353FC7
+pwdMustChange: 2147483647
+primaryGroupID: 1201
+lmPassword: 552902031BEDE9EFAAD3B435B51404EE
+pwdLastSet: 1010179124
+logonTime: 0
+objectClass: sambaAccount
+uid: guest2
+kickoffTime: 2147483647
+acctFlags: [UX ]
+logoffTime: 2147483647
+rid: 19006
+pwdCanChange: 0</PRE
+></P
><P
->In Samba release 2.2.3, the group management system is based on posix
-groups. This meand that Samba make usage of the posixGroup objectclass.
-For now, there is no NT-like group system management (global and local
-groups).</P
+>The following is an LDIF entry for using both the sambaAccount and
+posixAccount objectclasses:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>dn: uid=gcarter, ou=people,dc=plainjoe,dc=org
+logonTime: 0
+displayName: Gerald Carter
+lmPassword: 552902031BEDE9EFAAD3B435B51404EE
+primaryGroupID: 1201
+objectClass: posixAccount
+objectClass: sambaAccount
+acctFlags: [UX ]
+userPassword: {crypt}BpM2ej8Rkzogo
+uid: gcarter
+uidNumber: 9000
+cn: Gerald Carter
+loginShell: /bin/bash
+logoffTime: 2147483647
+gidNumber: 100
+kickoffTime: 2147483647
+pwdLastSet: 1010179230
+rid: 19000
+homeDirectory: /home/tashtego/gcarter
+pwdCanChange: 0
+pwdMustChange: 2147483647
+ntPassword: 878D8014606CDA29677A44EFA1353FC7</PRE
+></P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2782"
+NAME="AEN2569"
></A
->19.7. Security and sambaAccount</H2
-><P
->There are two important points to remember when discussing the security
-of sambaAccount entries in the directory.</P
-><P
-></P
-><UL
-><LI
-><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Never</I
-></SPAN
-> retrieve the lmPassword or
- ntPassword attribute values over an unencrypted LDAP session.</P
-></LI
-><LI
-><P
-><SPAN
-CLASS="emphasis"
-><I
-CLASS="EMPHASIS"
->Never</I
-></SPAN
-> allow non-admin users to
- view the lmPassword or ntPassword attribute values.</P
-></LI
-></UL
+>14.10. Comments</H2
><P
->These password hashes are clear text equivalents and can be used to impersonate
-the user without deriving the original clear text strings. For more information
-on the details of LM/NT password hashes, refer to the <A
-HREF="ENCRYPTION.html"
+>Please mail all comments regarding this HOWTO to <A
+HREF="mailto:jerry@samba.org"
TARGET="_top"
->ENCRYPTION chapter</A
-> of the Samba-HOWTO-Collection.</P
+>jerry@samba.org</A
+>. This documents was
+last updated to reflect the Samba 2.2.3 release. </P
+></DIV
+></DIV
+><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="ADS"
+></A
+>Chapter 15. Using samba 3.0 with ActiveDirectory support</H1
><P
->To remedy the first security issue, the "ldap ssl" smb.conf parameter defaults
-to require an encrypted session (<B
-CLASS="COMMAND"
->ldap ssl = on</B
->) using
-the default port of 636
-when contacting the directory server. When using an OpenLDAP 2.0 server, it
-is possible to use the use the StartTLS LDAP extended operation in the place of
-LDAPS. In either case, you are strongly discouraged to disable this security
-(<B
-CLASS="COMMAND"
->ldap ssl = off</B
->).</P
+>This is a VERY ROUGH guide to setting up the current (November 2001)
+pre-alpha version of Samba 3.0 with kerberos authentication against a
+Windows2000 KDC. The procedures listed here are likely to change as
+the code develops.</P
><P
->Note that the LDAPS protocol is deprecated in favor of the LDAPv3 StartTLS
-extended operation. However, the OpenLDAP library still provides support for
-the older method of securing communication between clients and servers.</P
+>Pieces you need before you begin:
+<P
+></P
+><TABLE
+BORDER="0"
+><TBODY
+><TR
+><TD
+>a Windows 2000 server.</TD
+></TR
+><TR
+><TD
+>samba 3.0 or higher.</TD
+></TR
+><TR
+><TD
+>the MIT kerberos development libraries (either install from the above sources or use a package). The heimdal libraries will not work.</TD
+></TR
+><TR
+><TD
+>the OpenLDAP development libraries.</TD
+></TR
+></TBODY
+></TABLE
><P
->The second security precaution is to prevent non-administrative users from
-harvesting password hashes from the directory. This can be done using the
-following ACL in <TT
-CLASS="FILENAME"
->slapd.conf</TT
->:</P
+></P
+></P
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2587"
+></A
+>15.1. Installing the required packages for Debian</H2
+><P
+>On Debian you need to install the following packages:
+<P
+></P
+><TABLE
+BORDER="0"
+><TBODY
+><TR
+><TD
+>libkrb5-dev</TD
+></TR
+><TR
+><TD
+>krb5-user</TD
+></TR
+></TBODY
+></TABLE
><P
-><PRE
-CLASS="PROGRAMLISTING"
->## allow the "ldap admin dn" access, but deny everyone else
-access to attrs=lmPassword,ntPassword
- by dn="cn=Samba Admin,ou=people,dc=plainjoe,dc=org" write
- by * none</PRE
+></P
></P
></DIV
><DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2802"
+NAME="AEN2593"
></A
->19.8. LDAP specials attributes for sambaAccounts</H2
+>15.2. Installing the required packages for RedHat</H2
><P
->The sambaAccount objectclass is composed of the following attributes:</P
+>On RedHat this means you should have at least:
+<P
+></P
+><TABLE
+BORDER="0"
+><TBODY
+><TR
+><TD
+>krb5-workstation (for kinit)</TD
+></TR
+><TR
+><TD
+>krb5-libs (for linking with)</TD
+></TR
+><TR
+><TD
+>krb5-devel (because you are compiling from source)</TD
+></TR
+></TBODY
+></TABLE
><P
></P
-><UL
-><LI
+></P
><P
-><TT
-CLASS="CONSTANT"
->lmPassword</TT
->: the LANMAN password 16-byte hash stored as a character
- representation of a hexidecimal string.</P
-></LI
-><LI
+>in addition to the standard development environment.</P
><P
-><TT
-CLASS="CONSTANT"
->ntPassword</TT
->: the NT password hash 16-byte stored as a character
- representation of a hexidecimal string.</P
-></LI
-><LI
+>Note that these are not standard on a RedHat install, and you may need
+to get them off CD2.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2602"
+></A
+>15.3. Compile Samba</H2
><P
-><TT
-CLASS="CONSTANT"
->pwdLastSet</TT
->: The integer time in seconds since 1970 when the
- <TT
-CLASS="CONSTANT"
->lmPassword</TT
-> and <TT
-CLASS="CONSTANT"
->ntPassword</TT
-> attributes were last set.
- </P
-></LI
-><LI
+>If your kerberos libraries are in a non-standard location then
+ remember to add the configure option --with-krb5=DIR.</P
><P
-><TT
-CLASS="CONSTANT"
->acctFlags</TT
->: string of 11 characters surrounded by square brackets []
- representing account flags such as U (user), W(workstation), X(no password expiration), and
- D(disabled).</P
-></LI
-><LI
+>After you run configure make sure that include/config.h contains
+ lines like this:</P
><P
-><TT
-CLASS="CONSTANT"
->logonTime</TT
->: Integer value currently unused</P
-></LI
-><LI
+><PRE
+CLASS="PROGRAMLISTING"
+>#define HAVE_KRB5 1
+#define HAVE_LDAP 1</PRE
+></P
><P
-><TT
-CLASS="CONSTANT"
->logoffTime</TT
->: Integer value currently unused</P
-></LI
-><LI
+>If it doesn't then configure did not find your krb5 libraries or
+ your ldap libraries. Look in config.log to figure out why and fix
+ it.</P
><P
-><TT
-CLASS="CONSTANT"
->kickoffTime</TT
->: Integer value currently unused</P
-></LI
-><LI
+>Then compile and install Samba as usual. You must use at least the
+ following 3 options in smb.conf:</P
><P
-><TT
-CLASS="CONSTANT"
->pwdCanChange</TT
->: Integer value currently unused</P
-></LI
-><LI
+><PRE
+CLASS="PROGRAMLISTING"
+> realm = YOUR.KERBEROS.REALM
+ ads server = your.kerberos.server
+ security = ADS
+ encrypt passwords = yes</PRE
+></P
><P
-><TT
-CLASS="CONSTANT"
->pwdMustChange</TT
->: Integer value currently unused</P
-></LI
-><LI
+>Strictly speaking, you can omit the realm name and you can use an IP
+ address for the ads server. In that case Samba will auto-detect these.</P
><P
-><TT
-CLASS="CONSTANT"
->homeDrive</TT
->: specifies the drive letter to which to map the
- UNC path specified by homeDirectory. The drive letter must be specified in the form "X:"
- where X is the letter of the drive to map. Refer to the "logon drive" parameter in the
- smb.conf(5) man page for more information.</P
-></LI
-><LI
+>You do *not* need a smbpasswd file, although it won't do any harm
+ and if you have one then Samba will be able to fall back to normal
+ password security for older clients. I expect that the above
+ required options will change soon when we get better active
+ directory integration.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2614"
+></A
+>15.4. Setup your /etc/krb5.conf</H2
><P
-><TT
-CLASS="CONSTANT"
->scriptPath</TT
->: The scriptPath property specifies the path of
- the user's logon script, .CMD, .EXE, or .BAT file. The string can be null. The path
- is relative to the netlogon share. Refer to the "logon script" parameter in the
- smb.conf(5) man page for more information.</P
-></LI
-><LI
+>The minimal configuration for krb5.conf is:</P
><P
-><TT
-CLASS="CONSTANT"
->profilePath</TT
->: specifies a path to the user's profile.
- This value can be a null string, a local absolute path, or a UNC path. Refer to the
- "logon path" parameter in the smb.conf(5) man page for more information.</P
-></LI
-><LI
+><PRE
+CLASS="PROGRAMLISTING"
+> [realms]
+ YOUR.KERBEROS.REALM = {
+ kdc = your.kerberos.server
+ }</PRE
+></P
><P
-><TT
-CLASS="CONSTANT"
->smbHome</TT
->: The homeDirectory property specifies the path of
- the home directory for the user. The string can be null. If homeDrive is set and specifies
- a drive letter, homeDirectory should be a UNC path. The path must be a network
- UNC path of the form \\server\share\directory. This value can be a null string.
- Refer to the "logon home" parameter in the smb.conf(5) man page for more information.
- </P
-></LI
-><LI
+>Test your config by doing a "kinit USERNAME@REALM" and making sure that
+ your password is accepted by the Win2000 KDC. </P
><P
-><TT
-CLASS="CONSTANT"
->userWorkstation</TT
->: character string value currently unused.
- </P
-></LI
-><LI
+>NOTE: The realm must be uppercase. </P
><P
-><TT
-CLASS="CONSTANT"
->rid</TT
->: the integer representation of the user's relative identifier
- (RID).</P
-></LI
-><LI
+>You also must ensure that you can do a reverse DNS lookup on the IP
+address of your KDC. Also, the name that this reverse lookup maps to
+must either be the netbios name of the KDC (ie. the hostname with no
+domain attached) or it can alternatively be the netbios name
+followed by the realm. </P
><P
-><TT
-CLASS="CONSTANT"
->primaryGroupID</TT
->: the relative identifier (RID) of the primary group
- of the user.</P
-></LI
-></UL
+>The easiest way to ensure you get this right is to add a /etc/hosts
+entry mapping the IP address of your KDC to its netbios name. If you
+don't get this right then you will get a "local error" when you try
+to join the realm.</P
><P
->The majority of these parameters are only used when Samba is acting as a PDC of
-a domain (refer to the <A
-HREF="Samba-PDC-HOWTO.html"
-TARGET="_top"
->Samba-PDC-HOWTO</A
-> for details on
-how to configure Samba as a Primary Domain Controller). The following four attributes
-are only stored with the sambaAccount entry if the values are non-default values:</P
+>If all you want is kerberos support in smbclient then you can skip
+straight to step 5 now. Step 3 is only needed if you want kerberos
+support in smbd.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2624"
+></A
+>15.5. Create the computer account</H2
><P
-></P
-><UL
-><LI
+>Do a "kinit" as a user that has authority to change arbitrary
+passwords on the KDC ("Administrator" is a good choice). Then as a
+user that has write permission on the Samba private directory
+(usually root) run:
+<B
+CLASS="COMMAND"
+>net ads join</B
+></P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN2628"
+></A
+>15.5.1. Possible errors</H3
><P
->smbHome</P
-></LI
-><LI
><P
->scriptPath</P
-></LI
-><LI
+></P
+><DIV
+CLASS="VARIABLELIST"
+><DL
+><DT
+>"bash: kinit: command not found"</DT
+><DD
><P
->logonPath</P
-></LI
-><LI
+>kinit is in the krb5-workstation RPM on RedHat systems, and is in /usr/kerberos/bin, so it won't be in the path until you log in again (or open a new terminal)</P
+></DD
+><DT
+>"ADS support not compiled in"</DT
+><DD
><P
->homeDrive</P
-></LI
-></UL
+>Samba must be reconfigured (remove config.cache) and recompiled (make clean all install) after the kerberos libs and headers are installed.</P
+></DD
+></DL
+></DIV
+></P
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2640"
+></A
+>15.6. Test your server setup</H2
><P
->These attributes are only stored with the sambaAccount entry if
-the values are non-default values. For example, assume TASHTEGO has now been
-configured as a PDC and that <B
+>On a Windows 2000 client try <B
CLASS="COMMAND"
->logon home = \\%L\%u</B
-> was defined in
-its <TT
-CLASS="FILENAME"
->smb.conf</TT
-> file. When a user named "becky" logons to the domain,
-the <TT
-CLASS="PARAMETER"
-><I
->logon home</I
-></TT
-> string is expanded to \\TASHTEGO\becky.
-If the smbHome attribute exists in the entry "uid=becky,ou=people,dc=samba,dc=org",
-this value is used. However, if this attribute does not exist, then the value
-of the <TT
-CLASS="PARAMETER"
-><I
->logon home</I
-></TT
-> parameter is used in its place. Samba
-will only write the attribute value to the directory entry is the value is
-something other than the default (e.g. \\MOBY\becky).</P
+>net use * \\server\share</B
+>. You should
+be logged in with kerberos without needing to know a password. If
+this fails then run <B
+CLASS="COMMAND"
+>klist tickets</B
+>. Did you get a ticket for the
+server? Does it have an encoding type of DES-CBC-MD5 ? </P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2872"
+NAME="AEN2645"
></A
->19.9. Example LDIF Entries for a sambaAccount</H2
-><P
->The following is a working LDIF with the inclusion of the posixAccount objectclass:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
->dn: uid=guest2, ou=people,dc=plainjoe,dc=org
-ntPassword: 878D8014606CDA29677A44EFA1353FC7
-pwdMustChange: 2147483647
-primaryGroupID: 1201
-lmPassword: 552902031BEDE9EFAAD3B435B51404EE
-pwdLastSet: 1010179124
-logonTime: 0
-objectClass: sambaAccount
-uid: guest2
-kickoffTime: 2147483647
-acctFlags: [UX ]
-logoffTime: 2147483647
-rid: 19006
-pwdCanChange: 0</PRE
-></P
-><P
->The following is an LDIF entry for using both the sambaAccount and
-posixAccount objectclasses:</P
+>15.7. Testing with smbclient</H2
><P
-><PRE
-CLASS="PROGRAMLISTING"
->dn: uid=gcarter, ou=people,dc=plainjoe,dc=org
-logonTime: 0
-displayName: Gerald Carter
-lmPassword: 552902031BEDE9EFAAD3B435B51404EE
-primaryGroupID: 1201
-objectClass: posixAccount
-objectClass: sambaAccount
-acctFlags: [UX ]
-userPassword: {crypt}BpM2ej8Rkzogo
-uid: gcarter
-uidNumber: 9000
-cn: Gerald Carter
-loginShell: /bin/bash
-logoffTime: 2147483647
-gidNumber: 100
-kickoffTime: 2147483647
-pwdLastSet: 1010179230
-rid: 19000
-homeDirectory: /home/tashtego/gcarter
-pwdCanChange: 0
-pwdMustChange: 2147483647
-ntPassword: 878D8014606CDA29677A44EFA1353FC7</PRE
-></P
+>On your Samba server try to login to a Win2000 server or your Samba
+server using smbclient and kerberos. Use smbclient as usual, but
+specify the -k option to choose kerberos authentication.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2880"
+NAME="AEN2648"
></A
->19.10. Comments</H2
+>15.8. Notes</H2
><P
->Please mail all comments regarding this HOWTO to <A
-HREF="mailto:jerry@samba.org"
-TARGET="_top"
->jerry@samba.org</A
->. This documents was
-last updated to reflect the Samba 2.2.3 release. </P
+>You must change administrator password at least once after DC install,
+ to create the right encoding types</P
+><P
+>w2k doesn't seem to create the _kerberos._udp and _ldap._tcp in
+ their defaults DNS setup. Maybe fixed in service packs?</P
></DIV
></DIV
><DIV
CLASS="CHAPTER"
><HR><H1
><A
-NAME="CVS-ACCESS"
+NAME="IMPROVED-BROWSING"
></A
->Chapter 20. HOWTO Access Samba source code via CVS</H1
+>Chapter 16. Improved browsing in samba</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN2891"
+NAME="AEN2659"
></A
->20.1. Introduction</H2
+>16.1. Overview of browsing</H2
><P
->Samba is developed in an open environment. Developers use CVS
-(Concurrent Versioning System) to "checkin" (also known as
-"commit") new source code. Samba's various CVS branches can
-be accessed via anonymous CVS using the instructions
-detailed in this chapter.</P
+>SMB networking provides a mechanism by which clients can access a list
+of machines in a network, a so-called "browse list". This list
+contains machines that are ready to offer file and/or print services
+to other machines within the network. Thus it does not include
+machines which aren't currently able to do server tasks. The browse
+list is heavily used by all SMB clients. Configuration of SMB
+browsing has been problematic for some Samba users, hence this
+document.</P
><P
->This document is a modified version of the instructions found at
-<A
-HREF="http://samba.org/samba/cvs.html"
-TARGET="_top"
->http://samba.org/samba/cvs.html</A
-></P
+>Browsing will NOT work if name resolution from NetBIOS names to IP
+addresses does not function correctly. Use of a WINS server is highly
+recommended to aid the resolution of NetBIOS (SMB) names to IP addresses.
+WINS allows remote segment clients to obtain NetBIOS name_type information
+that can NOT be provided by any other means of name resolution.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2663"
+></A
+>16.2. Browsing support in samba</H2
+><P
+>Samba now fully supports browsing. The browsing is supported by nmbd
+and is also controlled by options in the smb.conf file (see smb.conf(5)).</P
+><P
+>Samba can act as a local browse master for a workgroup and the ability
+for samba to support domain logons and scripts is now available. See
+DOMAIN.txt for more information on domain logons.</P
+><P
+>Samba can also act as a domain master browser for a workgroup. This
+means that it will collate lists from local browse masters into a
+wide area network server list. In order for browse clients to
+resolve the names they may find in this list, it is recommended that
+both samba and your clients use a WINS server.</P
+><P
+>Note that you should NOT set Samba to be the domain master for a
+workgroup that has the same name as an NT Domain: on each wide area
+network, you must only ever have one domain master browser per workgroup,
+regardless of whether it is NT, Samba or any other type of domain master
+that is providing this service.</P
+><P
+>[Note that nmbd can be configured as a WINS server, but it is not
+necessary to specifically use samba as your WINS server. NTAS can
+be configured as your WINS server. In a mixed NT server and
+samba environment on a Wide Area Network, it is recommended that
+you use the NT server's WINS server capabilities. In a samba-only
+environment, it is recommended that you use one and only one nmbd
+as your WINS server].</P
+><P
+>To get browsing to work you need to run nmbd as usual, but will need
+to use the "workgroup" option in smb.conf to control what workgroup
+Samba becomes a part of.</P
+><P
+>Samba also has a useful option for a Samba server to offer itself for
+browsing on another subnet. It is recommended that this option is only
+used for 'unusual' purposes: announcements over the internet, for
+example. See "remote announce" in the smb.conf man page. </P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2672"
+></A
+>16.3. Problem resolution</H2
+><P
+>If something doesn't work then hopefully the log.nmb file will help
+you track down the problem. Try a debug level of 2 or 3 for finding
+problems. Also note that the current browse list usually gets stored
+in text form in a file called browse.dat.</P
+><P
+>Note that if it doesn't work for you, then you should still be able to
+type the server name as \\SERVER in filemanager then hit enter and
+filemanager should display the list of available shares.</P
+><P
+>Some people find browsing fails because they don't have the global
+"guest account" set to a valid account. Remember that the IPC$
+connection that lists the shares is done as guest, and thus you must
+have a valid guest account.</P
+><P
+>Also, a lot of people are getting bitten by the problem of too many
+parameters on the command line of nmbd in inetd.conf. This trick is to
+not use spaces between the option and the parameter (eg: -d2 instead
+of -d 2), and to not use the -B and -N options. New versions of nmbd
+are now far more likely to correctly find your broadcast and network
+address, so in most cases these aren't needed.</P
+><P
+>The other big problem people have is that their broadcast address,
+netmask or IP address is wrong (specified with the "interfaces" option
+in smb.conf)</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2896"
+NAME="AEN2679"
></A
->20.2. CVS Access to samba.org</H2
+>16.4. Browsing across subnets</H2
+><P
+>With the release of Samba 1.9.17(alpha1 and above) Samba has been
+updated to enable it to support the replication of browse lists
+across subnet boundaries. New code and options have been added to
+achieve this. This section describes how to set this feature up
+in different settings.</P
+><P
+>To see browse lists that span TCP/IP subnets (ie. networks separated
+by routers that don't pass broadcast traffic) you must set up at least
+one WINS server. The WINS server acts as a DNS for NetBIOS names, allowing
+NetBIOS name to IP address translation to be done by doing a direct
+query of the WINS server. This is done via a directed UDP packet on
+port 137 to the WINS server machine. The reason for a WINS server is
+that by default, all NetBIOS name to IP address translation is done
+by broadcasts from the querying machine. This means that machines
+on one subnet will not be able to resolve the names of machines on
+another subnet without using a WINS server.</P
><P
->The machine samba.org runs a publicly accessible CVS
-repository for access to the source code of several packages,
-including samba, rsync and jitterbug. There are two main ways of
-accessing the CVS server on this host.</P
+>Remember, for browsing across subnets to work correctly, all machines,
+be they Windows 95, Windows NT, or Samba servers must have the IP address
+of a WINS server given to them by a DHCP server, or by manual configuration
+(for Win95 and WinNT, this is in the TCP/IP Properties, under Network
+settings) for Samba this is in the smb.conf file.</P
><DIV
CLASS="SECT2"
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN2899"
+NAME="AEN2684"
></A
->20.2.1. Access via CVSweb</H3
+>16.4.1. How does cross subnet browsing work ?</H3
><P
->You can access the source code via your
-favourite WWW browser. This allows you to access the contents of
-individual files in the repository and also to look at the revision
-history and commit logs of individual files. You can also ask for a diff
-listing between any two versions on the repository.</P
+>Cross subnet browsing is a complicated dance, containing multiple
+moving parts. It has taken Microsoft several years to get the code
+that achieves this correct, and Samba lags behind in some areas.
+However, with the 1.9.17 release, Samba is capable of cross subnet
+browsing when configured correctly.</P
><P
->Use the URL : <A
-HREF="http://samba.org/cgi-bin/cvsweb"
-TARGET="_top"
->http://samba.org/cgi-bin/cvsweb</A
+>Consider a network set up as follows :</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> (DMB)
+ N1_A N1_B N1_C N1_D N1_E
+ | | | | |
+ -------------------------------------------------------
+ | subnet 1 |
+ +---+ +---+
+ |R1 | Router 1 Router 2 |R2 |
+ +---+ +---+
+ | |
+ | subnet 2 subnet 3 |
+ -------------------------- ------------------------------------
+ | | | | | | | |
+ N2_A N2_B N2_C N2_D N3_A N3_B N3_C N3_D
+ (WINS)</PRE
></P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2904"
-></A
->20.2.2. Access via cvs</H3
><P
->You can also access the source code via a
-normal cvs client. This gives you much more control over you can
-do with the repository and allows you to checkout whole source trees
-and keep them up to date via normal cvs commands. This is the
-preferred method of access if you are a developer and not
-just a casual browser.</P
+>Consisting of 3 subnets (1, 2, 3) connected by two routers
+(R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines
+on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume
+for the moment that all these machines are configured to be in the
+same workgroup (for simplicities sake). Machine N1_C on subnet 1
+is configured as Domain Master Browser (ie. it will collate the
+browse lists for the workgroup). Machine N2_D is configured as
+WINS server and all the other machines are configured to register
+their NetBIOS names with it.</P
><P
->To download the latest cvs source code, point your
-browser at the URL : <A
-HREF="http://www.cyclic.com/"
-TARGET="_top"
->http://www.cyclic.com/</A
->.
-and click on the 'How to get cvs' link. CVS is free software under
-the GNU GPL (as is Samba). Note that there are several graphical CVS clients
-which provide a graphical interface to the sometimes mundane CVS commands.
-Links to theses clients are also available from http://www.cyclic.com.</P
+>As all these machines are booted up, elections for master browsers
+will take place on each of the three subnets. Assume that machine
+N1_C wins on subnet 1, N2_B wins on subnet 2, and N3_D wins on
+subnet 3 - these machines are known as local master browsers for
+their particular subnet. N1_C has an advantage in winning as the
+local master browser on subnet 1 as it is set up as Domain Master
+Browser.</P
><P
->To gain access via anonymous cvs use the following steps.
-For this example it is assumed that you want a copy of the
-samba source code. For the other source code repositories
-on this system just substitute the correct package name</P
+>On each of the three networks, machines that are configured to
+offer sharing services will broadcast that they are offering
+these services. The local master browser on each subnet will
+receive these broadcasts and keep a record of the fact that
+the machine is offering a service. This list of records is
+the basis of the browse list. For this case, assume that
+all the machines are configured to offer services so all machines
+will be on the browse list.</P
+><P
+>For each network, the local master browser on that network is
+considered 'authoritative' for all the names it receives via
+local broadcast. This is because a machine seen by the local
+master browser via a local broadcast must be on the same
+network as the local master browser and thus is a 'trusted'
+and 'verifiable' resource. Machines on other networks that
+the local master browsers learn about when collating their
+browse lists have not been directly seen - these records are
+called 'non-authoritative'.</P
+><P
+>At this point the browse lists look as follows (these are
+the machines you would see in your network neighborhood if
+you looked in it on a particular network right now).</P
><P
+><PRE
+CLASS="PROGRAMLISTING"
+>Subnet Browse Master List
+------ ------------- ----
+Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E
+
+Subnet2 N2_B N2_A, N2_B, N2_C, N2_D
+
+Subnet3 N3_D N3_A, N3_B, N3_C, N3_D</PRE
></P
-><OL
-TYPE="1"
-><LI
><P
-> Install a recent copy of cvs. All you really need is a
- copy of the cvs client binary.
- </P
-></LI
-><LI
+>Note that at this point all the subnets are separate, no
+machine is seen across any of the subnets.</P
><P
-> Run the command
- </P
+>Now examine subnet 2. As soon as N2_B has become the local
+master browser it looks for a Domain master browser to synchronize
+its browse list with. It does this by querying the WINS server
+(N2_D) for the IP address associated with the NetBIOS name
+WORKGROUP>1B<. This name was registerd by the Domain master
+browser (N1_C) with the WINS server as soon as it was booted.</P
><P
-> <B
-CLASS="COMMAND"
->cvs -d :pserver:cvs@samba.org:/cvsroot login</B
->
- </P
+>Once N2_B knows the address of the Domain master browser it
+tells it that is the local master browser for subnet 2 by
+sending a MasterAnnouncement packet as a UDP port 138 packet.
+It then synchronizes with it by doing a NetServerEnum2 call. This
+tells the Domain Master Browser to send it all the server
+names it knows about. Once the domain master browser receives
+the MasterAnnouncement packet it schedules a synchronization
+request to the sender of that packet. After both synchronizations
+are done the browse lists look like :</P
><P
-> When it asks you for a password type <TT
-CLASS="USERINPUT"
-><B
->cvs</B
-></TT
->.
- </P
-></LI
-><LI
+><PRE
+CLASS="PROGRAMLISTING"
+>Subnet Browse Master List
+------ ------------- ----
+Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E,
+ N2_A(*), N2_B(*), N2_C(*), N2_D(*)
+
+Subnet2 N2_B N2_A, N2_B, N2_C, N2_D
+ N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
+
+Subnet3 N3_D N3_A, N3_B, N3_C, N3_D
+
+Servers with a (*) after them are non-authoritative names.</PRE
+></P
><P
-> Run the command
- </P
+>At this point users looking in their network neighborhood on
+subnets 1 or 2 will see all the servers on both, users on
+subnet 3 will still only see the servers on their own subnet.</P
><P
-> <B
-CLASS="COMMAND"
->cvs -d :pserver:cvs@samba.org:/cvsroot co samba</B
->
- </P
+>The same sequence of events that occured for N2_B now occurs
+for the local master browser on subnet 3 (N3_D). When it
+synchronizes browse lists with the domain master browser (N1_A)
+it gets both the server entries on subnet 1, and those on
+subnet 2. After N3_D has synchronized with N1_C and vica-versa
+the browse lists look like.</P
><P
-> This will create a directory called samba containing the
- latest samba source code (i.e. the HEAD tagged cvs branch). This
- currently corresponds to the 3.0 development tree.
- </P
+><PRE
+CLASS="PROGRAMLISTING"
+>Subnet Browse Master List
+------ ------------- ----
+Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E,
+ N2_A(*), N2_B(*), N2_C(*), N2_D(*),
+ N3_A(*), N3_B(*), N3_C(*), N3_D(*)
+
+Subnet2 N2_B N2_A, N2_B, N2_C, N2_D
+ N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
+
+Subnet3 N3_D N3_A, N3_B, N3_C, N3_D
+ N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*),
+ N2_A(*), N2_B(*), N2_C(*), N2_D(*)
+
+Servers with a (*) after them are non-authoritative names.</PRE
+></P
><P
-> CVS branches other HEAD can be obtained by using the <TT
-CLASS="PARAMETER"
-><I
->-r</I
-></TT
->
- and defining a tag name. A list of branch tag names can be found on the
- "Development" page of the samba web site. A common request is to obtain the
- latest 2.2 release code. This could be done by using the following command.
- </P
+>At this point users looking in their network neighborhood on
+subnets 1 or 3 will see all the servers on all sunbets, users on
+subnet 2 will still only see the servers on subnets 1 and 2, but not 3.</P
+><P
+>Finally, the local master browser for subnet 2 (N2_B) will sync again
+with the domain master browser (N1_C) and will recieve the missing
+server entries. Finally - and as a steady state (if no machines
+are removed or shut off) the browse lists will look like :</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>Subnet Browse Master List
+------ ------------- ----
+Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E,
+ N2_A(*), N2_B(*), N2_C(*), N2_D(*),
+ N3_A(*), N3_B(*), N3_C(*), N3_D(*)
+
+Subnet2 N2_B N2_A, N2_B, N2_C, N2_D
+ N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
+ N3_A(*), N3_B(*), N3_C(*), N3_D(*)
+
+Subnet3 N3_D N3_A, N3_B, N3_C, N3_D
+ N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*),
+ N2_A(*), N2_B(*), N2_C(*), N2_D(*)
+
+Servers with a (*) after them are non-authoritative names.</PRE
+></P
+><P
+>Synchronizations between the domain master browser and local
+master browsers will continue to occur, but this should be a
+steady state situation.</P
+><P
+>If either router R1 or R2 fails the following will occur:</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
><P
-> <B
-CLASS="COMMAND"
->cvs -d :pserver:cvs@samba.org:/cvsroot co -r SAMBA_2_2 samba</B
->
+> Names of computers on each side of the inaccessible network fragments
+ will be maintained for as long as 36 minutes, in the network neighbourhood
+ lists.
</P
></LI
><LI
><P
-> Whenever you want to merge in the latest code changes use
- the following command from within the samba directory:
+> Attempts to connect to these inaccessible computers will fail, but the
+ names will not be removed from the network neighbourhood lists.
</P
+></LI
+><LI
><P
-> <B
-CLASS="COMMAND"
->cvs update -d -P</B
->
+> If one of the fragments is cut off from the WINS server, it will only
+ be able to access servers on its local subnet, by using subnet-isolated
+ broadcast NetBIOS name resolution. The effects are similar to that of
+ losing access to a DNS server.
</P
></LI
></OL
></DIV
></DIV
-></DIV
><DIV
-CLASS="CHAPTER"
-><HR><H1
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="GROUPMAPPING"
+NAME="AEN2719"
></A
->Chapter 21. Group mapping HOWTO</H1
+>16.5. Setting up a WINS server</H2
><P
->
-Starting with Samba 3.0 alpha 2, a new group mapping function is available. The
-current method (likely to change) to manage the groups is a new command called
-<B
-CLASS="COMMAND"
->smbgroupedit</B
->.</P
+>Either a Samba machine or a Windows NT Server machine may be set up
+as a WINS server. To set a Samba machine to be a WINS server you must
+add the following option to the smb.conf file on the selected machine :
+in the [globals] section add the line </P
><P
->The first immediate reason to use the group mapping on a PDC, is that
-the <B
+><B
CLASS="COMMAND"
->domain admin group</B
-> of <TT
-CLASS="FILENAME"
->smb.conf</TT
-> is
-now gone. This parameter was used to give the listed users local admin rights
-on their workstations. It was some magic stuff that simply worked but didn't
-scale very well for complex setups.</P
-><P
->Let me explain how it works on NT/W2K, to have this magic fade away.
-When installing NT/W2K on a computer, the installer program creates some users
-and groups. Notably the 'Administrators' group, and gives to that group some
-privileges like the ability to change the date and time or to kill any process
-(or close too) running on the local machine. The 'Administrator' user is a
-member of the 'Administrators' group, and thus 'inherit' the 'Administrators'
-group privileges. If a 'joe' user is created and become a member of the
-'Administrator' group, 'joe' has exactly the same rights as 'Administrator'.</P
-><P
->When a NT/W2K machine is joined to a domain, during that phase, the "Domain
-Administrators' group of the PDC is added to the 'Administrators' group of the
-workstation. Every members of the 'Domain Administrators' group 'inherit' the
-rights of the 'Administrators' group when logging on the workstation.</P
-><P
->You are now wondering how to make some of your samba PDC users members of the
-'Domain Administrators' ? That's really easy.</P
-><P
+> wins support = yes</B
></P
-><OL
-TYPE="1"
-><LI
-><P
->create a unix group (usually in <TT
-CLASS="FILENAME"
->/etc/group</TT
->), let's call it domadm</P
-></LI
-><LI
-><P
->add to this group the users that must be Administrators. For example if you want joe,john and mary, your entry in <TT
-CLASS="FILENAME"
->/etc/group</TT
-> will look like:</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->domadm:x:502:joe,john,mary</PRE
-></P
-></LI
-><LI
+>Versions of Samba previous to 1.9.17 had this parameter default to
+yes. If you have any older versions of Samba on your network it is
+strongly suggested you upgrade to 1.9.17 or above, or at the very
+least set the parameter to 'no' on all these machines.</P
><P
->Map this domadm group to the <B
+>Machines with "<B
CLASS="COMMAND"
->domain admins</B
-> group by running the command:</P
+>wins support = yes</B
+>" will keep a list of
+all NetBIOS names registered with them, acting as a DNS for NetBIOS names.</P
><P
-><B
+>You should set up only ONE wins server. Do NOT set the
+"<B
CLASS="COMMAND"
->smbgroupedit -c "Domain Admins" -u domadm</B
-></P
-></LI
-></OL
+>wins support = yes</B
+>" option on more than one Samba
+server.</P
><P
->You're set, joe, john and mary are domain administrators !</P
+>To set up a Windows NT Server as a WINS server you need to set up
+the WINS service - see your NT documentation for details. Note that
+Windows NT WINS Servers can replicate to each other, allowing more
+than one to be set up in a complex subnet environment. As Microsoft
+refuse to document these replication protocols Samba cannot currently
+participate in these replications. It is possible in the future that
+a Samba->Samba WINS replication protocol may be defined, in which
+case more than one Samba machine could be set up as a WINS server
+but currently only one Samba server should have the "wins support = yes"
+parameter set.</P
><P
->Like the Domain Admins group, you can map any arbitrary Unix group to any NT
-group. You can also make any Unix group a domain group. For example, on a domain
-member machine (an NT/W2K or a samba server running winbind), you would like to
-give access to a certain directory to some users who are member of a group on
-your samba PDC. Flag that group as a domain group by running:</P
+>After the WINS server has been configured you must ensure that all
+machines participating on the network are configured with the address
+of this WINS server. If your WINS server is a Samba machine, fill in
+the Samba machine IP address in the "Primary WINS Server" field of
+the "Control Panel->Network->Protocols->TCP->WINS Server" dialogs
+in Windows 95 or Windows NT. To tell a Samba server the IP address
+of the WINS server add the following line to the [global] section of
+all smb.conf files :</P
><P
><B
CLASS="COMMAND"
->smbgroupedit -a unixgroup -td</B
+> wins server = >name or IP address<</B
></P
><P
->You can list the various groups in the mapping database like this</P
+>where >name or IP address< is either the DNS name of the WINS server
+machine or its IP address.</P
><P
-><B
+>Note that this line MUST NOT BE SET in the smb.conf file of the Samba
+server acting as the WINS server itself. If you set both the
+"<B
CLASS="COMMAND"
->smbgroupedit -v</B
-></P
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="SPEED"
-></A
->Chapter 22. Samba performance issues</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN2982"
-></A
->22.1. Comparisons</H2
-><P
->The Samba server uses TCP to talk to the client. Thus if you are
-trying to see if it performs well you should really compare it to
-programs that use the same protocol. The most readily available
-programs for file transfer that use TCP are ftp or another TCP based
-SMB server.</P
-><P
->If you want to test against something like a NT or WfWg server then
-you will have to disable all but TCP on either the client or
-server. Otherwise you may well be using a totally different protocol
-(such as Netbeui) and comparisons may not be valid.</P
-><P
->Generally you should find that Samba performs similarly to ftp at raw
-transfer speed. It should perform quite a bit faster than NFS,
-although this very much depends on your system.</P
+>wins support = yes</B
+>" option and the
+"<B
+CLASS="COMMAND"
+>wins server = >name<</B
+>" option then
+nmbd will fail to start.</P
><P
->Several people have done comparisons between Samba and Novell, NFS or
-WinNT. In some cases Samba performed the best, in others the worst. I
-suspect the biggest factor is not Samba vs some other system but the
-hardware and drivers used on the various systems. Given similar
-hardware Samba should certainly be competitive in speed with other
-systems.</P
+>There are two possible scenarios for setting up cross subnet browsing.
+The first details setting up cross subnet browsing on a network containing
+Windows 95, Samba and Windows NT machines that are not configured as
+part of a Windows NT Domain. The second details setting up cross subnet
+browsing on networks that contain NT Domains.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN2988"
-></A
->22.2. Oplocks</H2
-><DIV
-CLASS="SECT2"
-><H3
-CLASS="SECT2"
-><A
-NAME="AEN2990"
+NAME="AEN2738"
></A
->22.2.1. Overview</H3
+>16.6. Setting up Browsing in a WORKGROUP</H2
><P
->Oplocks are the way that SMB clients get permission from a server to
-locally cache file operations. If a server grants an oplock
-(opportunistic lock) then the client is free to assume that it is the
-only one accessing the file and it will agressively cache file
-data. With some oplock types the client may even cache file open/close
-operations. This can give enormous performance benefits.</P
+>To set up cross subnet browsing on a network containing machines
+in up to be in a WORKGROUP, not an NT Domain you need to set up one
+Samba server to be the Domain Master Browser (note that this is *NOT*
+the same as a Primary Domain Controller, although in an NT Domain the
+same machine plays both roles). The role of a Domain master browser is
+to collate the browse lists from local master browsers on all the
+subnets that have a machine participating in the workgroup. Without
+one machine configured as a domain master browser each subnet would
+be an isolated workgroup, unable to see any machines on any other
+subnet. It is the presense of a domain master browser that makes
+cross subnet browsing possible for a workgroup.</P
><P
->With the release of Samba 1.9.18 we now correctly support opportunistic
-locks. This is turned on by default, and can be turned off on a share-
-by-share basis by setting the parameter :</P
+>In an WORKGROUP environment the domain master browser must be a
+Samba server, and there must only be one domain master browser per
+workgroup name. To set up a Samba server as a domain master browser,
+set the following option in the [global] section of the smb.conf file :</P
><P
><B
CLASS="COMMAND"
->oplocks = False</B
+> domain master = yes</B
></P
><P
->We recommend that you leave oplocks on however, as current benchmark
-tests with NetBench seem to give approximately a 30% improvement in
-speed with them on. This is on average however, and the actual
-improvement seen can be orders of magnitude greater, depending on
-what the client redirector is doing.</P
+>The domain master browser should also preferrably be the local master
+browser for its own subnet. In order to achieve this set the following
+options in the [global] section of the smb.conf file :</P
><P
->Previous to Samba 1.9.18 there was a 'fake oplocks' option. This
-option has been left in the code for backwards compatibility reasons
-but it's use is now deprecated. A short summary of what the old
-code did follows.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN2998"
-></A
->22.2.2. Level2 Oplocks</H3
+><PRE
+CLASS="PROGRAMLISTING"
+> domain master = yes
+ local master = yes
+ preferred master = yes
+ os level = 65</PRE
+></P
+><P
+>The domain master browser may be the same machine as the WINS
+server, if you require.</P
><P
->With Samba 2.0.5 a new capability - level2 (read only) oplocks is
-supported (although the option is off by default - see the smb.conf
-man page for details). Turning on level2 oplocks (on a share-by-share basis)
-by setting the parameter :</P
+>Next, you should ensure that each of the subnets contains a
+machine that can act as a local master browser for the
+workgroup. Any NT machine should be able to do this, as will
+Windows 95 machines (although these tend to get rebooted more
+often, so it's not such a good idea to use these). To make a
+Samba server a local master browser set the following
+options in the [global] section of the smb.conf file :</P
><P
-><B
-CLASS="COMMAND"
->level2 oplocks = true</B
+><PRE
+CLASS="PROGRAMLISTING"
+> domain master = no
+ local master = yes
+ preferred master = yes
+ os level = 65</PRE
></P
><P
->should speed concurrent access to files that are not commonly written
-to, such as application serving shares (ie. shares that contain common
-.EXE files - such as a Microsoft Office share) as it allows clients to
-read-ahread cache copies of these files.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN3004"
-></A
->22.2.3. Old 'fake oplocks' option - deprecated</H3
+>Do not do this for more than one Samba server on each subnet,
+or they will war with each other over which is to be the local
+master browser.</P
><P
->Samba can also fake oplocks, by granting a oplock whenever a client
-asks for one. This is controlled using the smb.conf option "fake
-oplocks". If you set "fake oplocks = yes" then you are telling the
-client that it may agressively cache the file data for all opens.</P
+>The "local master" parameter allows Samba to act as a local master
+browser. The "preferred master" causes nmbd to force a browser
+election on startup and the "os level" parameter sets Samba high
+enough so that it should win any browser elections.</P
><P
->Enabling 'fake oplocks' on all read-only shares or shares that you know
-will only be accessed from one client at a time you will see a big
-performance improvement on many operations. If you enable this option
-on shares where multiple clients may be accessing the files read-write
-at the same time you can get data corruption.</P
-></DIV
+>If you have an NT machine on the subnet that you wish to
+be the local master browser then you can disable Samba from
+becoming a local master browser by setting the following
+options in the [global] section of the smb.conf file :</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> domain master = no
+ local master = no
+ preferred master = no
+ os level = 0</PRE
+></P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3008"
+NAME="AEN2756"
></A
->22.3. Socket options</H2
+>16.7. Setting up Browsing in a DOMAIN</H2
><P
->There are a number of socket options that can greatly affect the
-performance of a TCP based server like Samba.</P
+>If you are adding Samba servers to a Windows NT Domain then
+you must not set up a Samba server as a domain master browser.
+By default, a Windows NT Primary Domain Controller for a Domain
+name is also the Domain master browser for that name, and many
+things will break if a Samba server registers the Domain master
+browser NetBIOS name (DOMAIN>1B<) with WINS instead of the PDC.</P
><P
->The socket options that Samba uses are settable both on the command
-line with the -O option, or in the smb.conf file.</P
+>For subnets other than the one containing the Windows NT PDC
+you may set up Samba servers as local master browsers as
+described. To make a Samba server a local master browser set
+the following options in the [global] section of the smb.conf
+file :</P
><P
->The "socket options" section of the smb.conf manual page describes how
-to set these and gives recommendations.</P
+><PRE
+CLASS="PROGRAMLISTING"
+> domain master = no
+ local master = yes
+ preferred master = yes
+ os level = 65</PRE
+></P
><P
->Getting the socket options right can make a big difference to your
-performance, but getting them wrong can degrade it by just as
-much. The correct settings are very dependent on your local network.</P
+>If you wish to have a Samba server fight the election with machines
+on the same subnet you may set the "os level" parameter to lower
+levels. By doing this you can tune the order of machines that
+will become local master browsers if they are running. For
+more details on this see the section "FORCING SAMBA TO BE THE MASTER"
+below.</P
><P
->The socket option TCP_NODELAY is the one that seems to make the
-biggest single difference for most networks. Many people report that
-adding "socket options = TCP_NODELAY" doubles the read performance of
-a Samba drive. The best explanation I have seen for this is that the
-Microsoft TCP/IP stack is slow in sending tcp ACKs.</P
+>If you have Windows NT machines that are members of the domain
+on all subnets, and you are sure they will always be running then
+you can disable Samba from taking part in browser elections and
+ever becoming a local master browser by setting following options
+in the [global] section of the smb.conf file :</P
+><P
+><B
+CLASS="COMMAND"
+> domain master = no
+ local master = no
+ preferred master = no
+ os level = 0</B
+></P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3015"
+NAME="AEN2766"
></A
->22.4. Read size</H2
+>16.8. Forcing samba to be the master</H2
><P
->The option "read size" affects the overlap of disk reads/writes with
-network reads/writes. If the amount of data being transferred in
-several of the SMB commands (currently SMBwrite, SMBwriteX and
-SMBreadbraw) is larger than this value then the server begins writing
-the data before it has received the whole packet from the network, or
-in the case of SMBreadbraw, it begins writing to the network before
-all the data has been read from disk.</P
+>Who becomes the "master browser" is determined by an election process
+using broadcasts. Each election packet contains a number of parameters
+which determine what precedence (bias) a host should have in the
+election. By default Samba uses a very low precedence and thus loses
+elections to just about anyone else.</P
><P
->This overlapping works best when the speeds of disk and network access
-are similar, having very little effect when the speed of one is much
-greater than the other.</P
+>If you want Samba to win elections then just set the "os level" global
+option in smb.conf to a higher number. It defaults to 0. Using 34
+would make it win all elections over every other system (except other
+samba systems!)</P
><P
->The default value is 16384, but very little experimentation has been
-done yet to determine the optimal value, and it is likely that the best
-value will vary greatly between systems anyway. A value over 65536 is
-pointless and will cause you to allocate memory unnecessarily.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3020"
-></A
->22.5. Max xmit</H2
+>A "os level" of 2 would make it beat WfWg and Win95, but not NTAS. A
+NTAS domain controller uses level 32.</P
><P
->At startup the client and server negotiate a "maximum transmit" size,
-which limits the size of nearly all SMB commands. You can set the
-maximum size that Samba will negotiate using the "max xmit = " option
-in smb.conf. Note that this is the maximum size of SMB request that
-Samba will accept, but not the maximum size that the *client* will accept.
-The client maximum receive size is sent to Samba by the client and Samba
-honours this limit.</P
+>The maximum os level is 255</P
><P
->It defaults to 65536 bytes (the maximum), but it is possible that some
-clients may perform better with a smaller transmit unit. Trying values
-of less than 2048 is likely to cause severe problems.</P
+>If you want samba to force an election on startup, then set the
+"preferred master" global option in smb.conf to "yes". Samba will
+then have a slight advantage over other potential master browsers
+that are not preferred master browsers. Use this parameter with
+care, as if you have two hosts (whether they are windows 95 or NT or
+samba) on the same local subnet both set with "preferred master" to
+"yes", then periodically and continually they will force an election
+in order to become the local master browser.</P
><P
->In most cases the default is the best option.</P
+>If you want samba to be a "domain master browser", then it is
+recommended that you also set "preferred master" to "yes", because
+samba will not become a domain master browser for the whole of your
+LAN or WAN if it is not also a local master browser on its own
+broadcast isolated subnet.</P
+><P
+>It is possible to configure two samba servers to attempt to become
+the domain master browser for a domain. The first server that comes
+up will be the domain master browser. All other samba servers will
+attempt to become the domain master browser every 5 minutes. They
+will find that another samba server is already the domain master
+browser and will fail. This provides automatic redundancy, should
+the current domain master browser fail.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3025"
+NAME="AEN2775"
></A
->22.6. Locking</H2
+>16.9. Making samba the domain master</H2
><P
->By default Samba does not implement strict locking on each read/write
-call (although it did in previous versions). If you enable strict
-locking (using "strict locking = yes") then you may find that you
-suffer a severe performance hit on some systems.</P
+>The domain master is responsible for collating the browse lists of
+multiple subnets so that browsing can occur between subnets. You can
+make samba act as the domain master by setting "domain master = yes"
+in smb.conf. By default it will not be a domain master.</P
><P
->The performance hit will probably be greater on NFS mounted
-filesystems, but could be quite high even on local disks.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3029"
-></A
->22.7. Share modes</H2
+>Note that you should NOT set Samba to be the domain master for a
+workgroup that has the same name as an NT Domain.</P
><P
->Some people find that opening files is very slow. This is often
-because of the "share modes" code needed to fully implement the dos
-share modes stuff. You can disable this code using "share modes =
-no". This will gain you a lot in opening and closing files but will
-mean that (in some cases) the system won't force a second user of a
-file to open the file read-only if the first has it open
-read-write. For many applications that do their own locking this
-doesn't matter, but for some it may. Most Windows applications
-depend heavily on "share modes" working correctly and it is
-recommended that the Samba share mode support be left at the
-default of "on".</P
+>When samba is the domain master and the master browser it will listen
+for master announcements (made roughly every twelve minutes) from local
+master browsers on other subnets and then contact them to synchronise
+browse lists.</P
><P
->The share mode code in Samba has been re-written in the 1.9.17
-release following tests with the Ziff-Davis NetBench PC Benchmarking
-tool. It is now believed that Samba 1.9.17 implements share modes
-similarly to Windows NT.</P
+>If you want samba to be the domain master then I suggest you also set
+the "os level" high enough to make sure it wins elections, and set
+"preferred master" to "yes", to get samba to force an election on
+startup.</P
+><P
+>Note that all your servers (including samba) and clients should be
+using a WINS server to resolve NetBIOS names. If your clients are only
+using broadcasting to resolve NetBIOS names, then two things will occur:</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> your local master browsers will be unable to find a domain master
+ browser, as it will only be looking on the local subnet.
+ </P
+></LI
+><LI
+><P
+> if a client happens to get hold of a domain-wide browse list, and
+ a user attempts to access a host in that list, it will be unable to
+ resolve the NetBIOS name of that host.
+ </P
+></LI
+></OL
+><P
+>If, however, both samba and your clients are using a WINS server, then:</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> your local master browsers will contact the WINS server and, as long as
+ samba has registered that it is a domain master browser with the WINS
+ server, your local master browser will receive samba's ip address
+ as its domain master browser.
+ </P
+></LI
+><LI
><P
->NOTE: In the most recent versions of Samba there is an option to use
-shared memory via mmap() to implement the share modes. This makes
-things much faster. See the Makefile for how to enable this.</P
+> when a client receives a domain-wide browse list, and a user attempts
+ to access a host in that list, it will contact the WINS server to
+ resolve the NetBIOS name of that host. as long as that host has
+ registered its NetBIOS name with the same WINS server, the user will
+ be able to see that host.
+ </P
+></LI
+></OL
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3034"
+NAME="AEN2793"
></A
->22.8. Log level</H2
+>16.10. Note about broadcast addresses</H2
><P
->If you set the log level (also known as "debug level") higher than 2
-then you may suffer a large drop in performance. This is because the
-server flushes the log file after each operation, which can be very
-expensive. </P
+>If your network uses a "0" based broadcast address (for example if it
+ends in a 0) then you will strike problems. Windows for Workgroups
+does not seem to support a 0's broadcast and you will probably find
+that browsing and name lookups won't work.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3037"
+NAME="AEN2796"
></A
->22.9. Wide lines</H2
+>16.11. Multiple interfaces</H2
><P
->The "wide links" option is now enabled by default, but if you disable
-it (for better security) then you may suffer a performance hit in
-resolving filenames. The performance loss is lessened if you have
-"getwd cache = yes", which is now the default.</P
+>Samba now supports machines with multiple network interfaces. If you
+have multiple interfaces then you will need to use the "interfaces"
+option in smb.conf to configure them. See smb.conf(5) for details.</P
+></DIV
></DIV
><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="SPEED"
+></A
+>Chapter 17. Samba performance issues</H1
+><DIV
CLASS="SECT1"
-><HR><H2
+><H2
CLASS="SECT1"
><A
-NAME="AEN3040"
+NAME="AEN2814"
></A
->22.10. Read raw</H2
+>17.1. Comparisons</H2
><P
->The "read raw" operation is designed to be an optimised, low-latency
-file read operation. A server may choose to not support it,
-however. and Samba makes support for "read raw" optional, with it
-being enabled by default.</P
+>The Samba server uses TCP to talk to the client. Thus if you are
+trying to see if it performs well you should really compare it to
+programs that use the same protocol. The most readily available
+programs for file transfer that use TCP are ftp or another TCP based
+SMB server.</P
><P
->In some cases clients don't handle "read raw" very well and actually
-get lower performance using it than they get using the conventional
-read operations. </P
+>If you want to test against something like a NT or WfWg server then
+you will have to disable all but TCP on either the client or
+server. Otherwise you may well be using a totally different protocol
+(such as Netbeui) and comparisons may not be valid.</P
><P
->So you might like to try "read raw = no" and see what happens on your
-network. It might lower, raise or not affect your performance. Only
-testing can really tell.</P
+>Generally you should find that Samba performs similarly to ftp at raw
+transfer speed. It should perform quite a bit faster than NFS,
+although this very much depends on your system.</P
+><P
+>Several people have done comparisons between Samba and Novell, NFS or
+WinNT. In some cases Samba performed the best, in others the worst. I
+suspect the biggest factor is not Samba vs some other system but the
+hardware and drivers used on the various systems. Given similar
+hardware Samba should certainly be competitive in speed with other
+systems.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3045"
+NAME="AEN2820"
></A
->22.11. Write raw</H2
-><P
->The "write raw" operation is designed to be an optimised, low-latency
-file write operation. A server may choose to not support it,
-however. and Samba makes support for "write raw" optional, with it
-being enabled by default.</P
-><P
->Some machines may find "write raw" slower than normal write, in which
-case you may wish to change this option.</P
-></DIV
+>17.2. Oplocks</H2
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><H3
+CLASS="SECT2"
><A
-NAME="AEN3049"
+NAME="AEN2822"
></A
->22.12. Read prediction</H2
+>17.2.1. Overview</H3
><P
->Samba can do read prediction on some of the SMB commands. Read
-prediction means that Samba reads some extra data on the last file it
-read while waiting for the next SMB command to arrive. It can then
-respond more quickly when the next read request arrives.</P
+>Oplocks are the way that SMB clients get permission from a server to
+locally cache file operations. If a server grants an oplock
+(opportunistic lock) then the client is free to assume that it is the
+only one accessing the file and it will agressively cache file
+data. With some oplock types the client may even cache file open/close
+operations. This can give enormous performance benefits.</P
><P
->This is disabled by default. You can enable it by using "read
-prediction = yes".</P
+>With the release of Samba 1.9.18 we now correctly support opportunistic
+locks. This is turned on by default, and can be turned off on a share-
+by-share basis by setting the parameter :</P
><P
->Note that read prediction is only used on files that were opened read
-only.</P
+><B
+CLASS="COMMAND"
+>oplocks = False</B
+></P
><P
->Read prediction should particularly help for those silly clients (such
-as "Write" under NT) which do lots of very small reads on a file.</P
+>We recommend that you leave oplocks on however, as current benchmark
+tests with NetBench seem to give approximately a 30% improvement in
+speed with them on. This is on average however, and the actual
+improvement seen can be orders of magnitude greater, depending on
+what the client redirector is doing.</P
><P
->Samba will not read ahead more data than the amount specified in the
-"read size" option. It always reads ahead on 1k block boundaries.</P
+>Previous to Samba 1.9.18 there was a 'fake oplocks' option. This
+option has been left in the code for backwards compatibility reasons
+but it's use is now deprecated. A short summary of what the old
+code did follows.</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN3056"
+NAME="AEN2830"
></A
->22.13. Memory mapping</H2
+>17.2.2. Level2 Oplocks</H3
><P
->Samba supports reading files via memory mapping them. One some
-machines this can give a large boost to performance, on others it
-makes not difference at all, and on some it may reduce performance.</P
+>With Samba 2.0.5 a new capability - level2 (read only) oplocks is
+supported (although the option is off by default - see the smb.conf
+man page for details). Turning on level2 oplocks (on a share-by-share basis)
+by setting the parameter :</P
><P
->To enable you you have to recompile Samba with the -DUSE_MMAP option
-on the FLAGS line of the Makefile.</P
+><B
+CLASS="COMMAND"
+>level2 oplocks = true</B
+></P
><P
->Note that memory mapping is only used on files opened read only, and
-is not used by the "read raw" operation. Thus you may find memory
-mapping is more effective if you disable "read raw" using "read raw =
-no".</P
+>should speed concurrent access to files that are not commonly written
+to, such as application serving shares (ie. shares that contain common
+.EXE files - such as a Microsoft Office share) as it allows clients to
+read-ahread cache copies of these files.</P
></DIV
><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
><A
-NAME="AEN3061"
+NAME="AEN2836"
></A
->22.14. Slow Clients</H2
+>17.2.3. Old 'fake oplocks' option - deprecated</H3
><P
->One person has reported that setting the protocol to COREPLUS rather
-than LANMAN2 gave a dramatic speed improvement (from 10k/s to 150k/s).</P
+>Samba can also fake oplocks, by granting a oplock whenever a client
+asks for one. This is controlled using the smb.conf option "fake
+oplocks". If you set "fake oplocks = yes" then you are telling the
+client that it may agressively cache the file data for all opens.</P
><P
->I suspect that his PC's (386sx16 based) were asking for more data than
-they could chew. I suspect a similar speed could be had by setting
-"read raw = no" and "max xmit = 2048", instead of changing the
-protocol. Lowering the "read size" might also help.</P
+>Enabling 'fake oplocks' on all read-only shares or shares that you know
+will only be accessed from one client at a time you will see a big
+performance improvement on many operations. If you enable this option
+on shares where multiple clients may be accessing the files read-write
+at the same time you can get data corruption.</P
></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3065"
-></A
->22.15. Slow Logins</H2
-><P
->Slow logins are almost always due to the password checking time. Using
-the lowest practical "password level" will improve things a lot. You
-could also enable the "UFC crypt" option in the Makefile.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3068"
+NAME="AEN2840"
></A
->22.16. Client tuning</H2
-><P
->Often a speed problem can be traced to the client. The client (for
-example Windows for Workgroups) can often be tuned for better TCP
-performance.</P
-><P
->See your client docs for details. In particular, I have heard rumours
-that the WfWg options TCPWINDOWSIZE and TCPSEGMENTSIZE can have a
-large impact on performance.</P
-><P
->Also note that some people have found that setting DefaultRcvWindow in
-the [MSTCP] section of the SYSTEM.INI file under WfWg to 3072 gives a
-big improvement. I don't know why.</P
-><P
->My own experience wth DefaultRcvWindow is that I get much better
-performance with a large value (16384 or larger). Other people have
-reported that anything over 3072 slows things down enourmously. One
-person even reported a speed drop of a factor of 30 when he went from
-3072 to 8192. I don't know why.</P
-><P
->It probably depends a lot on your hardware, and the type of unix box
-you have at the other end of the link.</P
-><P
->Paul Cochrane has done some testing on client side tuning and come
-to the following conclusions:</P
-><P
->Install the W2setup.exe file from www.microsoft.com. This is an
-update for the winsock stack and utilities which improve performance.</P
-><P
->Configure the win95 TCPIP registry settings to give better
-perfomance. I use a program called MTUSPEED.exe which I got off the
-net. There are various other utilities of this type freely available.
-The setting which give the best performance for me are:</P
-><P
-></P
-><OL
-TYPE="1"
-><LI
-><P
->MaxMTU Remove</P
-></LI
-><LI
-><P
->RWIN Remove</P
-></LI
-><LI
-><P
->MTUAutoDiscover Disable</P
-></LI
-><LI
-><P
->MTUBlackHoleDetect Disable</P
-></LI
-><LI
-><P
->Time To Live Enabled</P
-></LI
-><LI
-><P
->Time To Live - HOPS 32</P
-></LI
-><LI
-><P
->NDI Cache Size 0</P
-></LI
-></OL
-><P
->I tried virtually all of the items mentioned in the document and
-the only one which made a difference to me was the socket options. It
-turned out I was better off without any!!!!!</P
-><P
->In terms of overall speed of transfer, between various win95 clients
-and a DX2-66 20MB server with a crappy NE2000 compatible and old IDE
-drive (Kernel 2.0.30). The transfer rate was reasonable for 10 baseT.</P
+>17.3. Socket options</H2
><P
->FIXME
-The figures are: Put Get
-P166 client 3Com card: 420-440kB/s 500-520kB/s
-P100 client 3Com card: 390-410kB/s 490-510kB/s
-DX4-75 client NE2000: 370-380kB/s 330-350kB/s</P
+>There are a number of socket options that can greatly affect the
+performance of a TCP based server like Samba.</P
><P
->I based these test on transfer two files a 4.5MB text file and a 15MB
-textfile. The results arn't bad considering the hardware Samba is
-running on. It's a crap machine!!!!</P
+>The socket options that Samba uses are settable both on the command
+line with the -O option, or in the smb.conf file.</P
><P
->The updates mentioned in 1 and 2 brought up the transfer rates from
-just over 100kB/s in some clients.</P
+>The "socket options" section of the smb.conf manual page describes how
+to set these and gives recommendations.</P
><P
->A new client is a P333 connected via a 100MB/s card and hub. The
-transfer rates from this were good: 450-500kB/s on put and 600+kB/s
-on get.</P
+>Getting the socket options right can make a big difference to your
+performance, but getting them wrong can degrade it by just as
+much. The correct settings are very dependent on your local network.</P
><P
->Looking at standard FTP throughput, Samba is a bit slower (100kB/s
-upwards). I suppose there is more going on in the samba protocol, but
-if it could get up to the rate of FTP the perfomance would be quite
-staggering.</P
+>The socket option TCP_NODELAY is the one that seems to make the
+biggest single difference for most networks. Many people report that
+adding "socket options = TCP_NODELAY" doubles the read performance of
+a Samba drive. The best explanation I have seen for this is that the
+Microsoft TCP/IP stack is slow in sending tcp ACKs.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3100"
+NAME="AEN2847"
></A
->22.17. My Results</H2
-><P
->Some people want to see real numbers in a document like this, so here
-they are. I have a 486sx33 client running WfWg 3.11 with the 3.11b
-tcp/ip stack. It has a slow IDE drive and 20Mb of ram. It has a SMC
-Elite-16 ISA bus ethernet card. The only WfWg tuning I've done is to
-set DefaultRcvWindow in the [MSTCP] section of system.ini to 16384. My
-server is a 486dx3-66 running Linux. It also has 20Mb of ram and a SMC
-Elite-16 card. You can see my server config in the examples/tridge/
-subdirectory of the distribution.</P
+>17.4. Read size</H2
><P
->I get 490k/s on reading a 8Mb file with copy.
-I get 441k/s writing the same file to the samba server.</P
+>The option "read size" affects the overlap of disk reads/writes with
+network reads/writes. If the amount of data being transferred in
+several of the SMB commands (currently SMBwrite, SMBwriteX and
+SMBreadbraw) is larger than this value then the server begins writing
+the data before it has received the whole packet from the network, or
+in the case of SMBreadbraw, it begins writing to the network before
+all the data has been read from disk.</P
><P
->Of course, there's a lot more to benchmarks than 2 raw throughput
-figures, but it gives you a ballpark figure.</P
+>This overlapping works best when the speeds of disk and network access
+are similar, having very little effect when the speed of one is much
+greater than the other.</P
><P
->I've also tested Win95 and WinNT, and found WinNT gave me the best
-speed as a samba client. The fastest client of all (for me) is
-smbclient running on another linux box. Maybe I'll add those results
-here someday ...</P
-></DIV
-></DIV
+>The default value is 16384, but very little experimentation has been
+done yet to determine the optimal value, and it is likely that the best
+value will vary greatly between systems anyway. A value over 65536 is
+pointless and will cause you to allocate memory unnecessarily.</P
></DIV
><DIV
-CLASS="PART"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN3106"
+NAME="AEN2852"
></A
+>17.5. Max xmit</H2
+><P
+>At startup the client and server negotiate a "maximum transmit" size,
+which limits the size of nearly all SMB commands. You can set the
+maximum size that Samba will negotiate using the "max xmit = " option
+in smb.conf. Note that this is the maximum size of SMB request that
+Samba will accept, but not the maximum size that the *client* will accept.
+The client maximum receive size is sent to Samba by the client and Samba
+honours this limit.</P
+><P
+>It defaults to 65536 bytes (the maximum), but it is possible that some
+clients may perform better with a smaller transmit unit. Trying values
+of less than 2048 is likely to cause severe problems.</P
+><P
+>In most cases the default is the best option.</P
+></DIV
><DIV
-CLASS="TITLEPAGE"
-><H1
-CLASS="TITLE"
->IV. Appendixes</H1
-><DIV
-CLASS="TOC"
-><DL
-><DT
-><B
->Table of Contents</B
-></DT
-><DT
->23. <A
-HREF="#PORTABILITY"
->Portability</A
-></DT
-><DD
-><DL
-><DT
->23.1. <A
-HREF="#AEN3115"
->HPUX</A
-></DT
-><DT
->23.2. <A
-HREF="#AEN3121"
->SCO Unix</A
-></DT
-><DT
->23.3. <A
-HREF="#AEN3125"
->DNIX</A
-></DT
-><DT
->23.4. <A
-HREF="#AEN3154"
->RedHat Linux Rembrandt-II</A
-></DT
-></DL
-></DD
-><DT
->24. <A
-HREF="#OTHER-CLIENTS"
->Samba and other CIFS clients</A
-></DT
-><DD
-><DL
-><DT
->24.1. <A
-HREF="#AEN3175"
->Macintosh clients?</A
-></DT
-><DT
->24.2. <A
-HREF="#AEN3184"
->OS2 Client</A
-></DT
-><DD
-><DL
-><DT
->24.2.1. <A
-HREF="#AEN3186"
->How can I configure OS/2 Warp Connect or
- OS/2 Warp 4 as a client for Samba?</A
-></DT
-><DT
->24.2.2. <A
-HREF="#AEN3201"
->How can I configure OS/2 Warp 3 (not Connect),
- OS/2 1.2, 1.3 or 2.x for Samba?</A
-></DT
-><DT
->24.2.3. <A
-HREF="#AEN3210"
->Are there any other issues when OS/2 (any version)
- is used as a client?</A
-></DT
-><DT
->24.2.4. <A
-HREF="#AEN3214"
->How do I get printer driver download working
- for OS/2 clients?</A
-></DT
-></DL
-></DD
-><DT
->24.3. <A
-HREF="#AEN3224"
->Windows for Workgroups</A
-></DT
-><DD
-><DL
-><DT
->24.3.1. <A
-HREF="#AEN3226"
->Use latest TCP/IP stack from Microsoft</A
-></DT
-><DT
->24.3.2. <A
-HREF="#AEN3231"
->Delete .pwl files after password change</A
-></DT
-><DT
->24.3.3. <A
-HREF="#AEN3236"
->Configure WfW password handling</A
-></DT
-><DT
->24.3.4. <A
-HREF="#AEN3240"
->Case handling of passwords</A
-></DT
-></DL
-></DD
-><DT
->24.4. <A
-HREF="#AEN3245"
->Windows '95/'98</A
-></DT
-><DT
->24.5. <A
-HREF="#AEN3261"
->Windows 2000 Service Pack 2</A
-></DT
-></DL
-></DD
-><DT
->25. <A
-HREF="#BUGREPORT"
->Reporting Bugs</A
-></DT
-><DD
-><DL
-><DT
->25.1. <A
-HREF="#AEN3285"
->Introduction</A
-></DT
-><DT
->25.2. <A
-HREF="#AEN3295"
->General info</A
-></DT
-><DT
->25.3. <A
-HREF="#AEN3301"
->Debug levels</A
-></DT
-><DT
->25.4. <A
-HREF="#AEN3318"
->Internal errors</A
-></DT
-><DT
->25.5. <A
-HREF="#AEN3328"
->Attaching to a running process</A
-></DT
-><DT
->25.6. <A
-HREF="#AEN3331"
->Patches</A
-></DT
-></DL
-></DD
-><DT
->26. <A
-HREF="#DIAGNOSIS"
->Diagnosing your samba server</A
-></DT
-><DD
-><DL
-><DT
->26.1. <A
-HREF="#AEN3354"
->Introduction</A
-></DT
-><DT
->26.2. <A
-HREF="#AEN3359"
->Assumptions</A
-></DT
-><DT
->26.3. <A
-HREF="#AEN3369"
->Tests</A
-></DT
-><DD
-><DL
-><DT
->26.3.1. <A
-HREF="#AEN3371"
->Test 1</A
-></DT
-><DT
->26.3.2. <A
-HREF="#AEN3377"
->Test 2</A
-></DT
-><DT
->26.3.3. <A
-HREF="#AEN3383"
->Test 3</A
-></DT
-><DT
->26.3.4. <A
-HREF="#AEN3398"
->Test 4</A
-></DT
-><DT
->26.3.5. <A
-HREF="#AEN3403"
->Test 5</A
-></DT
-><DT
->26.3.6. <A
-HREF="#AEN3409"
->Test 6</A
-></DT
-><DT
->26.3.7. <A
-HREF="#AEN3417"
->Test 7</A
-></DT
-><DT
->26.3.8. <A
-HREF="#AEN3443"
->Test 8</A
-></DT
-><DT
->26.3.9. <A
-HREF="#AEN3460"
->Test 9</A
-></DT
-><DT
->26.3.10. <A
-HREF="#AEN3468"
->Test 10</A
-></DT
-><DT
->26.3.11. <A
-HREF="#AEN3474"
->Test 11</A
-></DT
-></DL
-></DD
-><DT
->26.4. <A
-HREF="#AEN3479"
->Still having troubles?</A
-></DT
-></DL
-></DD
-></DL
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2857"
+></A
+>17.6. Locking</H2
+><P
+>By default Samba does not implement strict locking on each read/write
+call (although it did in previous versions). If you enable strict
+locking (using "strict locking = yes") then you may find that you
+suffer a severe performance hit on some systems.</P
+><P
+>The performance hit will probably be greater on NFS mounted
+filesystems, but could be quite high even on local disks.</P
></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2861"
+></A
+>17.7. Share modes</H2
+><P
+>Some people find that opening files is very slow. This is often
+because of the "share modes" code needed to fully implement the dos
+share modes stuff. You can disable this code using "share modes =
+no". This will gain you a lot in opening and closing files but will
+mean that (in some cases) the system won't force a second user of a
+file to open the file read-only if the first has it open
+read-write. For many applications that do their own locking this
+doesn't matter, but for some it may. Most Windows applications
+depend heavily on "share modes" working correctly and it is
+recommended that the Samba share mode support be left at the
+default of "on".</P
+><P
+>The share mode code in Samba has been re-written in the 1.9.17
+release following tests with the Ziff-Davis NetBench PC Benchmarking
+tool. It is now believed that Samba 1.9.17 implements share modes
+similarly to Windows NT.</P
+><P
+>NOTE: In the most recent versions of Samba there is an option to use
+shared memory via mmap() to implement the share modes. This makes
+things much faster. See the Makefile for how to enable this.</P
></DIV
><DIV
-CLASS="CHAPTER"
-><HR><H1
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="PORTABILITY"
+NAME="AEN2866"
></A
->Chapter 23. Portability</H1
+>17.8. Log level</H2
><P
->Samba works on a wide range of platforms but the interface all the
-platforms provide is not always compatible. This chapter contains
-platform-specific information about compiling and using samba.</P
+>If you set the log level (also known as "debug level") higher than 2
+then you may suffer a large drop in performance. This is because the
+server flushes the log file after each operation, which can be very
+expensive. </P
+></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3115"
+NAME="AEN2869"
></A
->23.1. HPUX</H2
+>17.9. Wide lines</H2
><P
->HP's implementation of supplementary groups is, er, non-standard (for
-hysterical reasons). There are two group files, /etc/group and
-/etc/logingroup; the system maps UIDs to numbers using the former, but
-initgroups() reads the latter. Most system admins who know the ropes
-symlink /etc/group to /etc/logingroup (hard link doesn't work for reasons
-too stupid to go into here). initgroups() will complain if one of the
-groups you're in in /etc/logingroup has what it considers to be an invalid
-ID, which means outside the range [0..UID_MAX], where UID_MAX is (I think)
-60000 currently on HP-UX. This precludes -2 and 65534, the usual 'nobody'
-GIDs.</P
+>The "wide links" option is now enabled by default, but if you disable
+it (for better security) then you may suffer a performance hit in
+resolving filenames. The performance loss is lessened if you have
+"getwd cache = yes", which is now the default.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2872"
+></A
+>17.10. Read raw</H2
><P
->If you encounter this problem, make sure that the programs that are failing
-to initgroups() be run as users not in any groups with GIDs outside the
-allowed range.</P
+>The "read raw" operation is designed to be an optimised, low-latency
+file read operation. A server may choose to not support it,
+however. and Samba makes support for "read raw" optional, with it
+being enabled by default.</P
><P
->This is documented in the HP manual pages under setgroups(2) and passwd(4).</P
+>In some cases clients don't handle "read raw" very well and actually
+get lower performance using it than they get using the conventional
+read operations. </P
><P
->On HPUX you must use gcc or the HP Ansi compiler. The free compiler
-that comes with HP-UX is not Ansi compliant and cannot compile
-Samba.</P
+>So you might like to try "read raw = no" and see what happens on your
+network. It might lower, raise or not affect your performance. Only
+testing can really tell.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3121"
+NAME="AEN2877"
></A
->23.2. SCO Unix</H2
+>17.11. Write raw</H2
><P
->
-If you run an old version of SCO Unix then you may need to get important
-TCP/IP patches for Samba to work correctly. Without the patch, you may
-encounter corrupt data transfers using samba.</P
+>The "write raw" operation is designed to be an optimised, low-latency
+file write operation. A server may choose to not support it,
+however. and Samba makes support for "write raw" optional, with it
+being enabled by default.</P
><P
->The patch you need is UOD385 Connection Drivers SLS. It is available from
-SCO (ftp.sco.com, directory SLS, files uod385a.Z and uod385a.ltr.Z).</P
+>Some machines may find "write raw" slower than normal write, in which
+case you may wish to change this option.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3125"
+NAME="AEN2881"
></A
->23.3. DNIX</H2
+>17.12. Read prediction</H2
><P
->DNIX has a problem with seteuid() and setegid(). These routines are
-needed for Samba to work correctly, but they were left out of the DNIX
-C library for some reason.</P
+>Samba can do read prediction on some of the SMB commands. Read
+prediction means that Samba reads some extra data on the last file it
+read while waiting for the next SMB command to arrive. It can then
+respond more quickly when the next read request arrives.</P
><P
->For this reason Samba by default defines the macro NO_EID in the DNIX
-section of includes.h. This works around the problem in a limited way,
-but it is far from ideal, some things still won't work right.</P
+>This is disabled by default. You can enable it by using "read
+prediction = yes".</P
><P
->
-To fix the problem properly you need to assemble the following two
-functions and then either add them to your C library or link them into
-Samba.</P
+>Note that read prediction is only used on files that were opened read
+only.</P
><P
->
-put this in the file <TT
-CLASS="FILENAME"
->setegid.s</TT
->:</P
+>Read prediction should particularly help for those silly clients (such
+as "Write" under NT) which do lots of very small reads on a file.</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> .globl _setegid
-_setegid:
- moveq #47,d0
- movl #100,a0
- moveq #1,d1
- movl 4(sp),a1
- trap #9
- bccs 1$
- jmp cerror
-1$:
- clrl d0
- rts</PRE
-></P
+>Samba will not read ahead more data than the amount specified in the
+"read size" option. It always reads ahead on 1k block boundaries.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2888"
+></A
+>17.13. Memory mapping</H2
><P
->put this in the file <TT
-CLASS="FILENAME"
->seteuid.s</TT
->:</P
+>Samba supports reading files via memory mapping them. One some
+machines this can give a large boost to performance, on others it
+makes not difference at all, and on some it may reduce performance.</P
+><P
+>To enable you you have to recompile Samba with the -DUSE_MMAP option
+on the FLAGS line of the Makefile.</P
+><P
+>Note that memory mapping is only used on files opened read only, and
+is not used by the "read raw" operation. Thus you may find memory
+mapping is more effective if you disable "read raw" using "read raw =
+no".</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2893"
+></A
+>17.14. Slow Clients</H2
+><P
+>One person has reported that setting the protocol to COREPLUS rather
+than LANMAN2 gave a dramatic speed improvement (from 10k/s to 150k/s).</P
+><P
+>I suspect that his PC's (386sx16 based) were asking for more data than
+they could chew. I suspect a similar speed could be had by setting
+"read raw = no" and "max xmit = 2048", instead of changing the
+protocol. Lowering the "read size" might also help.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2897"
+></A
+>17.15. Slow Logins</H2
+><P
+>Slow logins are almost always due to the password checking time. Using
+the lowest practical "password level" will improve things a lot. You
+could also enable the "UFC crypt" option in the Makefile.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN2900"
+></A
+>17.16. Client tuning</H2
+><P
+>Often a speed problem can be traced to the client. The client (for
+example Windows for Workgroups) can often be tuned for better TCP
+performance.</P
+><P
+>See your client docs for details. In particular, I have heard rumours
+that the WfWg options TCPWINDOWSIZE and TCPSEGMENTSIZE can have a
+large impact on performance.</P
+><P
+>Also note that some people have found that setting DefaultRcvWindow in
+the [MSTCP] section of the SYSTEM.INI file under WfWg to 3072 gives a
+big improvement. I don't know why.</P
+><P
+>My own experience wth DefaultRcvWindow is that I get much better
+performance with a large value (16384 or larger). Other people have
+reported that anything over 3072 slows things down enourmously. One
+person even reported a speed drop of a factor of 30 when he went from
+3072 to 8192. I don't know why.</P
+><P
+>It probably depends a lot on your hardware, and the type of unix box
+you have at the other end of the link.</P
+><P
+>Paul Cochrane has done some testing on client side tuning and come
+to the following conclusions:</P
+><P
+>Install the W2setup.exe file from www.microsoft.com. This is an
+update for the winsock stack and utilities which improve performance.</P
+><P
+>Configure the win95 TCPIP registry settings to give better
+perfomance. I use a program called MTUSPEED.exe which I got off the
+net. There are various other utilities of this type freely available.
+The setting which give the best performance for me are:</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
-> .globl _seteuid
-_seteuid:
- moveq #47,d0
- movl #100,a0
- moveq #0,d1
- movl 4(sp),a1
- trap #9
- bccs 1$
- jmp cerror
-1$:
- clrl d0
- rts</PRE
></P
+><OL
+TYPE="1"
+><LI
+><P
+>MaxMTU Remove</P
+></LI
+><LI
+><P
+>RWIN Remove</P
+></LI
+><LI
+><P
+>MTUAutoDiscover Disable</P
+></LI
+><LI
+><P
+>MTUBlackHoleDetect Disable</P
+></LI
+><LI
><P
->after creating the above files you then assemble them using</P
+>Time To Live Enabled</P
+></LI
+><LI
><P
-><B
-CLASS="COMMAND"
->as seteuid.s</B
-></P
+>Time To Live - HOPS 32</P
+></LI
+><LI
><P
-><B
-CLASS="COMMAND"
->as setegid.s</B
-></P
+>NDI Cache Size 0</P
+></LI
+></OL
><P
->that should produce the files <TT
-CLASS="FILENAME"
->seteuid.o</TT
-> and
-<TT
-CLASS="FILENAME"
->setegid.o</TT
-></P
+>I tried virtually all of the items mentioned in the document and
+the only one which made a difference to me was the socket options. It
+turned out I was better off without any!!!!!</P
><P
->then you need to add these to the LIBSM line in the DNIX section of
-the Samba Makefile. Your LIBSM line will then look something like this:</P
+>In terms of overall speed of transfer, between various win95 clients
+and a DX2-66 20MB server with a crappy NE2000 compatible and old IDE
+drive (Kernel 2.0.30). The transfer rate was reasonable for 10 baseT.</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->LIBSM = setegid.o seteuid.o -ln</PRE
-></P
+>FIXME
+The figures are: Put Get
+P166 client 3Com card: 420-440kB/s 500-520kB/s
+P100 client 3Com card: 390-410kB/s 490-510kB/s
+DX4-75 client NE2000: 370-380kB/s 330-350kB/s</P
><P
->
-You should then remove the line:</P
+>I based these test on transfer two files a 4.5MB text file and a 15MB
+textfile. The results arn't bad considering the hardware Samba is
+running on. It's a crap machine!!!!</P
><P
-><PRE
-CLASS="PROGRAMLISTING"
->#define NO_EID</PRE
-></P
+>The updates mentioned in 1 and 2 brought up the transfer rates from
+just over 100kB/s in some clients.</P
><P
->from the DNIX section of <TT
-CLASS="FILENAME"
->includes.h</TT
-></P
+>A new client is a P333 connected via a 100MB/s card and hub. The
+transfer rates from this were good: 450-500kB/s on put and 600+kB/s
+on get.</P
+><P
+>Looking at standard FTP throughput, Samba is a bit slower (100kB/s
+upwards). I suppose there is more going on in the samba protocol, but
+if it could get up to the rate of FTP the perfomance would be quite
+staggering.</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3154"
+NAME="AEN2932"
></A
->23.4. RedHat Linux Rembrandt-II</H2
+>17.17. My Results</H2
><P
->By default RedHat Rembrandt-II during installation adds an
-entry to /etc/hosts as follows:
-<PRE
-CLASS="PROGRAMLISTING"
-> 127.0.0.1 loopback "hostname"."domainname"</PRE
-></P
+>Some people want to see real numbers in a document like this, so here
+they are. I have a 486sx33 client running WfWg 3.11 with the 3.11b
+tcp/ip stack. It has a slow IDE drive and 20Mb of ram. It has a SMC
+Elite-16 ISA bus ethernet card. The only WfWg tuning I've done is to
+set DefaultRcvWindow in the [MSTCP] section of system.ini to 16384. My
+server is a 486dx3-66 running Linux. It also has 20Mb of ram and a SMC
+Elite-16 card. You can see my server config in the examples/tridge/
+subdirectory of the distribution.</P
+><P
+>I get 490k/s on reading a 8Mb file with copy.
+I get 441k/s writing the same file to the samba server.</P
><P
->This causes Samba to loop back onto the loopback interface.
-The result is that Samba fails to communicate correctly with
-the world and therefor may fail to correctly negotiate who
-is the master browse list holder and who is the master browser.</P
+>Of course, there's a lot more to benchmarks than 2 raw throughput
+figures, but it gives you a ballpark figure.</P
><P
->Corrective Action: Delete the entry after the word loopback
- in the line starting 127.0.0.1</P
+>I've also tested Win95 and WinNT, and found WinNT gave me the best
+speed as a samba client. The fastest client of all (for me) is
+smbclient running on another linux box. Maybe I'll add those results
+here someday ...</P
></DIV
></DIV
><DIV
><A
NAME="OTHER-CLIENTS"
></A
->Chapter 24. Samba and other CIFS clients</H1
+>Chapter 18. Samba and other CIFS clients</H1
><P
>This chapter contains client-specific information.</P
><DIV
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3175"
+NAME="AEN2953"
></A
->24.1. Macintosh clients?</H2
+>18.1. Macintosh clients?</H2
><P
>Yes. <A
HREF="http://www.thursby.com/"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3184"
+NAME="AEN2962"
></A
->24.2. OS2 Client</H2
+>18.2. OS2 Client</H2
><DIV
CLASS="SECT2"
><H3
CLASS="SECT2"
><A
-NAME="AEN3186"
+NAME="AEN2964"
></A
->24.2.1. How can I configure OS/2 Warp Connect or
+>18.2.1. How can I configure OS/2 Warp Connect or
OS/2 Warp 4 as a client for Samba?</H3
><P
>A more complete answer to this question can be
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN3201"
+NAME="AEN2979"
></A
->24.2.2. How can I configure OS/2 Warp 3 (not Connect),
+>18.2.2. How can I configure OS/2 Warp 3 (not Connect),
OS/2 1.2, 1.3 or 2.x for Samba?</H3
><P
>You can use the free Microsoft LAN Manager 2.2c Client
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN3210"
+NAME="AEN2988"
></A
->24.2.3. Are there any other issues when OS/2 (any version)
+>18.2.3. Are there any other issues when OS/2 (any version)
is used as a client?</H3
><P
>When you do a NET VIEW or use the "File and Print
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN3214"
+NAME="AEN2992"
></A
->24.2.4. How do I get printer driver download working
+>18.2.4. How do I get printer driver download working
for OS/2 clients?</H3
><P
>First, create a share called [PRINTDRV] that is
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3224"
+NAME="AEN3002"
></A
->24.3. Windows for Workgroups</H2
+>18.3. Windows for Workgroups</H2
><DIV
CLASS="SECT2"
><H3
CLASS="SECT2"
><A
-NAME="AEN3226"
+NAME="AEN3004"
></A
->24.3.1. Use latest TCP/IP stack from Microsoft</H3
+>18.3.1. Use latest TCP/IP stack from Microsoft</H3
><P
>Use the latest TCP/IP stack from microsoft if you use Windows
for workgroups.</P
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN3231"
+NAME="AEN3009"
></A
->24.3.2. Delete .pwl files after password change</H3
+>18.3.2. Delete .pwl files after password change</H3
><P
>WfWg does a lousy job with passwords. I find that if I change my
password on either the unix box or the PC the safest thing to do is to
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN3236"
+NAME="AEN3014"
></A
->24.3.3. Configure WfW password handling</H3
+>18.3.3. Configure WfW password handling</H3
><P
>There is a program call admincfg.exe
on the last disk (disk 8) of the WFW 3.11 disk set. To install it
><HR><H3
CLASS="SECT2"
><A
-NAME="AEN3240"
+NAME="AEN3018"
></A
->24.3.4. Case handling of passwords</H3
+>18.3.4. Case handling of passwords</H3
><P
>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <A
HREF="smb.conf.5.html"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3245"
+NAME="AEN3023"
></A
->24.4. Windows '95/'98</H2
+>18.4. Windows '95/'98</H2
><P
>When using Windows 95 OEM SR2 the following updates are recommended where Samba
is being used. Please NOTE that the above change will affect you once these
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3261"
+NAME="AEN3039"
></A
->24.5. Windows 2000 Service Pack 2</H2
+>18.5. Windows 2000 Service Pack 2</H2
><P
>
There are several annoyances with Windows 2000 SP2. One of which
CLASS="CHAPTER"
><HR><H1
><A
-NAME="BUGREPORT"
+NAME="CVS-ACCESS"
></A
->Chapter 25. Reporting Bugs</H1
+>Chapter 19. HOWTO Access Samba source code via CVS</H1
><DIV
CLASS="SECT1"
><H2
CLASS="SECT1"
><A
-NAME="AEN3285"
+NAME="AEN3063"
></A
->25.1. Introduction</H2
+>19.1. Introduction</H2
+><P
+>Samba is developed in an open environment. Developers use CVS
+(Concurrent Versioning System) to "checkin" (also known as
+"commit") new source code. Samba's various CVS branches can
+be accessed via anonymous CVS using the instructions
+detailed in this chapter.</P
><P
->The email address for bug reports for stable releases is <A
-HREF="samba@samba.org"
+>This document is a modified version of the instructions found at
+<A
+HREF="http://samba.org/samba/cvs.html"
TARGET="_top"
->samba@samba.org</A
->.
-Bug reports for alpha releases should go to <A
-HREF="mailto:samba-technical@samba.org"
+>http://samba.org/samba/cvs.html</A
+></P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN3068"
+></A
+>19.2. CVS Access to samba.org</H2
+><P
+>The machine samba.org runs a publicly accessible CVS
+repository for access to the source code of several packages,
+including samba, rsync and jitterbug. There are two main ways of
+accessing the CVS server on this host.</P
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN3071"
+></A
+>19.2.1. Access via CVSweb</H3
+><P
+>You can access the source code via your
+favourite WWW browser. This allows you to access the contents of
+individual files in the repository and also to look at the revision
+history and commit logs of individual files. You can also ask for a diff
+listing between any two versions on the repository.</P
+><P
+>Use the URL : <A
+HREF="http://samba.org/cgi-bin/cvsweb"
TARGET="_top"
->samba-technical@samba.org</A
->.</P
+>http://samba.org/cgi-bin/cvsweb</A
+></P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H3
+CLASS="SECT2"
+><A
+NAME="AEN3076"
+></A
+>19.2.2. Access via cvs</H3
+><P
+>You can also access the source code via a
+normal cvs client. This gives you much more control over you can
+do with the repository and allows you to checkout whole source trees
+and keep them up to date via normal cvs commands. This is the
+preferred method of access if you are a developer and not
+just a casual browser.</P
+><P
+>To download the latest cvs source code, point your
+browser at the URL : <A
+HREF="http://www.cyclic.com/"
+TARGET="_top"
+>http://www.cyclic.com/</A
+>.
+and click on the 'How to get cvs' link. CVS is free software under
+the GNU GPL (as is Samba). Note that there are several graphical CVS clients
+which provide a graphical interface to the sometimes mundane CVS commands.
+Links to theses clients are also available from http://www.cyclic.com.</P
+><P
+>To gain access via anonymous cvs use the following steps.
+For this example it is assumed that you want a copy of the
+samba source code. For the other source code repositories
+on this system just substitute the correct package name</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> Install a recent copy of cvs. All you really need is a
+ copy of the cvs client binary.
+ </P
+></LI
+><LI
+><P
+> Run the command
+ </P
+><P
+> <B
+CLASS="COMMAND"
+>cvs -d :pserver:cvs@samba.org:/cvsroot login</B
+>
+ </P
+><P
+> When it asks you for a password type <TT
+CLASS="USERINPUT"
+><B
+>cvs</B
+></TT
+>.
+ </P
+></LI
+><LI
+><P
+> Run the command
+ </P
+><P
+> <B
+CLASS="COMMAND"
+>cvs -d :pserver:cvs@samba.org:/cvsroot co samba</B
+>
+ </P
+><P
+> This will create a directory called samba containing the
+ latest samba source code (i.e. the HEAD tagged cvs branch). This
+ currently corresponds to the 3.0 development tree.
+ </P
+><P
+> CVS branches other HEAD can be obtained by using the <TT
+CLASS="PARAMETER"
+><I
+>-r</I
+></TT
+>
+ and defining a tag name. A list of branch tag names can be found on the
+ "Development" page of the samba web site. A common request is to obtain the
+ latest 2.2 release code. This could be done by using the following command.
+ </P
+><P
+> <B
+CLASS="COMMAND"
+>cvs -d :pserver:cvs@samba.org:/cvsroot co -r SAMBA_2_2 samba</B
+>
+ </P
+></LI
+><LI
+><P
+> Whenever you want to merge in the latest code changes use
+ the following command from within the samba directory:
+ </P
+><P
+> <B
+CLASS="COMMAND"
+>cvs update -d -P</B
+>
+ </P
+></LI
+></OL
+></DIV
+></DIV
+></DIV
+><DIV
+CLASS="CHAPTER"
+><HR><H1
+><A
+NAME="BUGREPORT"
+></A
+>Chapter 20. Reporting Bugs</H1
+><DIV
+CLASS="SECT1"
+><H2
+CLASS="SECT1"
+><A
+NAME="AEN3111"
+></A
+>20.1. Introduction</H2
+><P
+>The email address for bug reports is samba@samba.org</P
><P
>Please take the time to read this file before you submit a bug
report. Also, please see if it has changed between releases, as we
><P
>You may also like to look though the recent mailing list archives,
which are conveniently accessible on the Samba web pages
-at <A
-HREF="http://samba.org/samba/"
-TARGET="_top"
->http://samba.org/samba/</A
->.</P
+at http://samba.org/samba/ </P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3295"
+NAME="AEN3118"
></A
->25.2. General info</H2
+>20.2. General info</H2
><P
>Before submitting a bug report check your config for silly
errors. Look in your log files for obvious messages that tell you that
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3301"
+NAME="AEN3124"
></A
->25.3. Debug levels</H2
+>20.3. Debug levels</H2
><P
>If the bug has anything to do with Samba behaving incorrectly as a
server (like refusing to open a file) then the log files will probably
>log level =</B
> value is increased you will record
a significantly increasing level of debugging information. For most
-debugging operations you may not need a setting higher than 3. Nearly
-all bugs can be tracked at a setting of 10, but be prepared for a VERY
-large volume of log data.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3318"
-></A
->25.4. Internal errors</H2
-><P
->If you get a "INTERNAL ERROR" message in your log files it means that
-Samba got an unexpected signal while running. It is probably a
-segmentation fault and almost certainly means a bug in Samba (unless
-you have faulty hardware or system software)</P
-><P
->If the message came from smbd then it will probably be accompanied by
-a message which details the last SMB message received by smbd. This
-info is often very useful in tracking down the problem so please
-include it in your bug report.</P
-><P
->You should also detail how to reproduce the problem, if
-possible. Please make this reasonably detailed.</P
-><P
->You may also find that a core file appeared in a "corefiles"
-subdirectory of the directory where you keep your samba log
-files. This file is the most useful tool for tracking down the bug. To
-use it you do this:</P
-><P
-><B
-CLASS="COMMAND"
->gdb smbd core</B
-></P
-><P
->adding appropriate paths to smbd and core so gdb can find them. If you
-don't have gdb then try "dbx". Then within the debugger use the
-command "where" to give a stack trace of where the problem
-occurred. Include this in your mail.</P
-><P
->If you known any assembly language then do a "disass" of the routine
-where the problem occurred (if its in a library routine then
-disassemble the routine that called it) and try to work out exactly
-where the problem is by looking at the surrounding code. Even if you
-don't know assembly then incuding this info in the bug report can be
-useful. </P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3328"
-></A
->25.5. Attaching to a running process</H2
-><P
->Unfortunately some unixes (in particular some recent linux kernels)
-refuse to dump a core file if the task has changed uid (which smbd
-does often). To debug with this sort of system you could try to attach
-to the running process using "gdb smbd PID" where you get PID from
-smbstatus. Then use "c" to continue and try to cause the core dump
-using the client. The debugger should catch the fault and tell you
-where it occurred.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3331"
-></A
->25.6. Patches</H2
-><P
->The best sort of bug report is one that includes a fix! If you send us
-patches please use <B
-CLASS="COMMAND"
->diff -u</B
-> format if your version of
-diff supports it, otherwise use <B
-CLASS="COMMAND"
->diff -c4</B
->. Make sure
-your do the diff against a clean version of the source and let me know
-exactly what version you used. </P
-></DIV
-></DIV
-><DIV
-CLASS="CHAPTER"
-><HR><H1
-><A
-NAME="DIAGNOSIS"
-></A
->Chapter 26. Diagnosing your samba server</H1
-><DIV
-CLASS="SECT1"
-><H2
-CLASS="SECT1"
-><A
-NAME="AEN3354"
-></A
->26.1. Introduction</H2
-><P
->This file contains a list of tests you can perform to validate your
-Samba server. It also tells you what the likely cause of the problem
-is if it fails any one of these steps. If it passes all these tests
-then it is probably working fine.</P
-><P
->You should do ALL the tests, in the order shown. We have tried to
-carefully choose them so later tests only use capabilities verified in
-the earlier tests.</P
-><P
->If you send one of the samba mailing lists an email saying "it doesn't work"
-and you have not followed this test procedure then you should not be surprised
-your email is ignored.</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3359"
-></A
->26.2. Assumptions</H2
-><P
->In all of the tests it is assumed you have a Samba server called
-BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP.</P
-><P
->The procedure is similar for other types of clients.</P
-><P
->It is also assumed you know the name of an available share in your
-smb.conf. I will assume this share is called "tmp". You can add a
-"tmp" share like by adding the following to smb.conf:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> [tmp]
- comment = temporary files
- path = /tmp
- read only = yes </PRE
-></P
-><P
->THESE TESTS ASSUME VERSION 3.0.0 OR LATER OF THE SAMBA SUITE. SOME
-COMMANDS SHOWN DID NOT EXIST IN EARLIER VERSIONS</P
-><P
->Please pay attention to the error messages you receive. If any error message
-reports that your server is being unfriendly you should first check that you
-IP name resolution is correctly set up. eg: Make sure your /etc/resolv.conf
-file points to name servers that really do exist.</P
-><P
->Also, if you do not have DNS server access for name resolution please check
-that the settings for your smb.conf file results in "dns proxy = no". The
-best way to check this is with "testparm smb.conf"</P
-></DIV
-><DIV
-CLASS="SECT1"
-><HR><H2
-CLASS="SECT1"
-><A
-NAME="AEN3369"
-></A
->26.3. Tests</H2
-><DIV
-CLASS="SECT2"
-><H3
-CLASS="SECT2"
-><A
-NAME="AEN3371"
-></A
->26.3.1. Test 1</H3
-><P
->In the directory in which you store your smb.conf file, run the command
-"testparm smb.conf". If it reports any errors then your smb.conf
-configuration file is faulty.</P
-><P
->Note: Your smb.conf file may be located in: <TT
-CLASS="FILENAME"
->/etc/samba</TT
->
- Or in: <TT
-CLASS="FILENAME"
->/usr/local/samba/lib</TT
-></P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN3377"
-></A
->26.3.2. Test 2</H3
-><P
->Run the command "ping BIGSERVER" from the PC and "ping ACLIENT" from
-the unix box. If you don't get a valid response then your TCP/IP
-software is not correctly installed. </P
-><P
->Note that you will need to start a "dos prompt" window on the PC to
-run ping.</P
-><P
->If you get a message saying "host not found" or similar then your DNS
-software or /etc/hosts file is not correctly setup. It is possible to
-run samba without DNS entries for the server and client, but I assume
-you do have correct entries for the remainder of these tests. </P
-><P
->Another reason why ping might fail is if your host is running firewall
-software. You will need to relax the rules to let in the workstation
-in question, perhaps by allowing access from another subnet (on Linux
-this is done via the ipfwadm program.)</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN3383"
-></A
->26.3.3. Test 3</H3
-><P
->Run the command "smbclient -L BIGSERVER" on the unix box. You
-should get a list of available shares back. </P
-><P
->If you get a error message containing the string "Bad password" then
-you probably have either an incorrect "hosts allow", "hosts deny" or
-"valid users" line in your smb.conf, or your guest account is not
-valid. Check what your guest account is using "testparm" and
-temporarily remove any "hosts allow", "hosts deny", "valid users" or
-"invalid users" lines.</P
-><P
->If you get a "connection refused" response then the smbd server may
-not be running. If you installed it in inetd.conf then you probably edited
-that file incorrectly. If you installed it as a daemon then check that
-it is running, and check that the netbios-ssn port is in a LISTEN
-state using "netstat -a".</P
-><P
->If you get a "session request failed" then the server refused the
-connection. If it says "Your server software is being unfriendly" then
-its probably because you have invalid command line parameters to smbd,
-or a similar fatal problem with the initial startup of smbd. Also
-check your config file (smb.conf) for syntax errors with "testparm"
-and that the various directories where samba keeps its log and lock
-files exist.</P
-><P
->There are a number of reasons for which smbd may refuse or decline
-a session request. The most common of these involve one or more of
-the following smb.conf file entries:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> hosts deny = ALL
- hosts allow = xxx.xxx.xxx.xxx/yy
- bind interfaces only = Yes</PRE
-></P
-><P
->In the above, no allowance has been made for any session requests that
-will automatically translate to the loopback adaptor address 127.0.0.1.
-To solve this problem change these lines to:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> hosts deny = ALL
- hosts allow = xxx.xxx.xxx.xxx/yy 127.</PRE
-></P
-><P
->Do NOT use the "bind interfaces only" parameter where you may wish to
-use the samba password change facility, or where smbclient may need to
-access local service for name resolution or for local resource
-connections. (Note: the "bind interfaces only" parameter deficiency
-where it will not allow connections to the loopback address will be
-fixed soon).</P
-><P
->Another common cause of these two errors is having something already running
-on port 139, such as Samba (ie: smbd is running from inetd already) or
-something like Digital's Pathworks. Check your inetd.conf file before trying
-to start smbd as a daemon, it can avoid a lot of frustration!</P
-><P
->And yet another possible cause for failure of TEST 3 is when the subnet mask
-and / or broadcast address settings are incorrect. Please check that the
-network interface IP Address / Broadcast Address / Subnet Mask settings are
-correct and that Samba has correctly noted these in the log.nmb file.</P
+debugging operations you may not need a setting higher than 3. Nearly
+all bugs can be tracked at a setting of 10, but be prepared for a VERY
+large volume of log data.</P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN3398"
+NAME="AEN3141"
></A
->26.3.4. Test 4</H3
+>20.4. Internal errors</H2
><P
->Run the command "nmblookup -B BIGSERVER __SAMBA__". You should get the
-IP address of your Samba server back.</P
+>If you get a "INTERNAL ERROR" message in your log files it means that
+Samba got an unexpected signal while running. It is probably a
+segmentation fault and almost certainly means a bug in Samba (unless
+you have faulty hardware or system software)</P
><P
->If you don't then nmbd is incorrectly installed. Check your inetd.conf
-if you run it from there, or that the daemon is running and listening
-to udp port 137.</P
+>If the message came from smbd then it will probably be accompanied by
+a message which details the last SMB message received by smbd. This
+info is often very useful in tracking down the problem so please
+include it in your bug report.</P
><P
->One common problem is that many inetd implementations can't take many
-parameters on the command line. If this is the case then create a
-one-line script that contains the right parameters and run that from
-inetd.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN3403"
-></A
->26.3.5. Test 5</H3
+>You should also detail how to reproduce the problem, if
+possible. Please make this reasonably detailed.</P
><P
->run the command <B
+>You may also find that a core file appeared in a "corefiles"
+subdirectory of the directory where you keep your samba log
+files. This file is the most useful tool for tracking down the bug. To
+use it you do this:</P
+><P
+><B
CLASS="COMMAND"
->nmblookup -B ACLIENT '*'</B
+>gdb smbd core</B
></P
><P
->You should get the PCs IP address back. If you don't then the client
-software on the PC isn't installed correctly, or isn't started, or you
-got the name of the PC wrong. </P
+>adding appropriate paths to smbd and core so gdb can find them. If you
+don't have gdb then try "dbx". Then within the debugger use the
+command "where" to give a stack trace of where the problem
+occurred. Include this in your mail.</P
><P
->If ACLIENT doesn't resolve via DNS then use the IP address of the
-client in the above test.</P
+>If you known any assembly language then do a "disass" of the routine
+where the problem occurred (if its in a library routine then
+disassemble the routine that called it) and try to work out exactly
+where the problem is by looking at the surrounding code. Even if you
+don't know assembly then incuding this info in the bug report can be
+useful. </P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN3409"
+NAME="AEN3151"
></A
->26.3.6. Test 6</H3
-><P
->Run the command <B
-CLASS="COMMAND"
->nmblookup -d 2 '*'</B
-></P
-><P
->This time we are trying the same as the previous test but are trying
-it via a broadcast to the default broadcast address. A number of
-Netbios/TCPIP hosts on the network should respond, although Samba may
-not catch all of the responses in the short time it listens. You
-should see "got a positive name query response" messages from several
-hosts.</P
-><P
->If this doesn't give a similar result to the previous test then
-nmblookup isn't correctly getting your broadcast address through its
-automatic mechanism. In this case you should experiment use the
-"interfaces" option in smb.conf to manually configure your IP
-address, broadcast and netmask. </P
-><P
->If your PC and server aren't on the same subnet then you will need to
-use the -B option to set the broadcast address to the that of the PCs
-subnet.</P
+>20.5. Attaching to a running process</H2
><P
->This test will probably fail if your subnet mask and broadcast address are
-not correct. (Refer to TEST 3 notes above).</P
+>Unfortunately some unixes (in particular some recent linux kernels)
+refuse to dump a core file if the task has changed uid (which smbd
+does often). To debug with this sort of system you could try to attach
+to the running process using "gdb smbd PID" where you get PID from
+smbstatus. Then use "c" to continue and try to cause the core dump
+using the client. The debugger should catch the fault and tell you
+where it occurred.</P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN3417"
+NAME="AEN3154"
></A
->26.3.7. Test 7</H3
-><P
->Run the command <B
-CLASS="COMMAND"
->smbclient //BIGSERVER/TMP</B
->. You should
-then be prompted for a password. You should use the password of the account
-you are logged into the unix box with. If you want to test with
-another account then add the -U >accountname< option to the end of
-the command line. eg:
-<B
-CLASS="COMMAND"
->smbclient //bigserver/tmp -Ujohndoe</B
-></P
-><P
->Note: It is possible to specify the password along with the username
-as follows:
-<B
-CLASS="COMMAND"
->smbclient //bigserver/tmp -Ujohndoe%secret</B
-></P
-><P
->Once you enter the password you should get the "smb>" prompt. If you
-don't then look at the error message. If it says "invalid network
-name" then the service "tmp" is not correctly setup in your smb.conf.</P
-><P
->If it says "bad password" then the likely causes are:</P
-><P
-></P
-><OL
-TYPE="1"
-><LI
-><P
-> you have shadow passords (or some other password system) but didn't
- compile in support for them in smbd
- </P
-></LI
-><LI
-><P
-> your "valid users" configuration is incorrect
- </P
-></LI
-><LI
-><P
-> you have a mixed case password and you haven't enabled the "password
- level" option at a high enough level
- </P
-></LI
-><LI
-><P
-> the "path =" line in smb.conf is incorrect. Check it with testparm
- </P
-></LI
-><LI
-><P
-> you enabled password encryption but didn't create the SMB encrypted
- password file
- </P
-></LI
-></OL
+>20.6. Patches</H2
><P
->Once connected you should be able to use the commands
-<B
-CLASS="COMMAND"
->dir</B
-> <B
-CLASS="COMMAND"
->get</B
-> <B
-CLASS="COMMAND"
->put</B
-> etc.
-Type <B
+>The best sort of bug report is one that includes a fix! If you send us
+patches please use <B
CLASS="COMMAND"
->help >command<</B
-> for instructions. You should
-especially check that the amount of free disk space shown is correct
-when you type <B
+>diff -u</B
+> format if your version of
+diff supports it, otherwise use <B
CLASS="COMMAND"
->dir</B
->.</P
+>diff -c4</B
+>. Make sure
+your do the diff against a clean version of the source and let me know
+exactly what version you used. </P
+></DIV
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="CHAPTER"
+><HR><H1
><A
-NAME="AEN3443"
+NAME="GROUPMAPPING"
></A
->26.3.8. Test 8</H3
+>Chapter 21. Group mapping HOWTO</H1
><P
->On the PC type the command <B
+>
+Starting with Samba 3.0 alpha 2, a new group mapping function is available. The
+current method (likely to change) to manage the groups is a new command called
+<B
CLASS="COMMAND"
->net view \\BIGSERVER</B
->. You will
-need to do this from within a "dos prompt" window. You should get back a
-list of available shares on the server.</P
+>smbgroupedit</B
+>.</P
><P
->If you get a "network name not found" or similar error then netbios
-name resolution is not working. This is usually caused by a problem in
-nmbd. To overcome it you could do one of the following (you only need
-to choose one of them):</P
+>The first immediate reason to use the group mapping on a PDC, is that
+the <B
+CLASS="COMMAND"
+>domain admin group</B
+> of <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> is
+now gone. This parameter was used to give the listed users local admin rights
+on their workstations. It was some magic stuff that simply worked but didn't
+scale very well for complex setups.</P
+><P
+>Let me explain how it works on NT/W2K, to have this magic fade away.
+When installing NT/W2K on a computer, the installer program creates some users
+and groups. Notably the 'Administrators' group, and gives to that group some
+privileges like the ability to change the date and time or to kill any process
+(or close too) running on the local machine. The 'Administrator' user is a
+member of the 'Administrators' group, and thus 'inherit' the 'Administrators'
+group privileges. If a 'joe' user is created and become a member of the
+'Administrator' group, 'joe' has exactly the same rights as 'Administrator'.</P
+><P
+>When a NT/W2K machine is joined to a domain, during that phase, the "Domain
+Administrators' group of the PDC is added to the 'Administrators' group of the
+workstation. Every members of the 'Domain Administrators' group 'inherit' the
+rights of the 'Administrators' group when logging on the workstation.</P
+><P
+>You are now wondering how to make some of your samba PDC users members of the
+'Domain Administrators' ? That's really easy.</P
><P
></P
><OL
TYPE="1"
><LI
><P
-> fixup the nmbd installation</P
+>create a unix group (usually in <TT
+CLASS="FILENAME"
+>/etc/group</TT
+>), let's call it domadm</P
></LI
><LI
><P
-> add the IP address of BIGSERVER to the "wins server" box in the
- advanced tcp/ip setup on the PC.</P
+>add to this group the users that must be Administrators. For example if you want joe,john and mary, your entry in <TT
+CLASS="FILENAME"
+>/etc/group</TT
+> will look like:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>domadm:x:502:joe,john,mary</PRE
+></P
></LI
><LI
><P
-> enable windows name resolution via DNS in the advanced section of
- the tcp/ip setup</P
-></LI
-><LI
+>Map this domadm group to the <B
+CLASS="COMMAND"
+>domain admins</B
+> group by running the command:</P
><P
-> add BIGSERVER to your lmhosts file on the PC.</P
+><B
+CLASS="COMMAND"
+>smbgroupedit -c "Domain Admins" -u domadm</B
+></P
></LI
></OL
><P
->If you get a "invalid network name" or "bad password error" then the
-same fixes apply as they did for the "smbclient -L" test above. In
-particular, make sure your "hosts allow" line is correct (see the man
-pages)</P
-><P
->Also, do not overlook that fact that when the workstation requests the
-connection to the samba server it will attempt to connect using the
-name with which you logged onto your Windows machine. You need to make
-sure that an account exists on your Samba server with that exact same
-name and password.</P
+>You're set, joe, john and mary are domain administrators !</P
><P
->If you get "specified computer is not receiving requests" or similar
-it probably means that the host is not contactable via tcp services.
-Check to see if the host is running tcp wrappers, and if so add an entry in
-the hosts.allow file for your client (or subnet, etc.)</P
-></DIV
-><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
-><A
-NAME="AEN3460"
-></A
->26.3.9. Test 9</H3
+>Like the Domain Admins group, you can map any arbitrary Unix group to any NT
+group. You can also make any Unix group a domain group. For example, on a domain
+member machine (an NT/W2K or a samba server running winbind), you would like to
+give access to a certain directory to some users who are member of a group on
+your samba PDC. Flag that group as a domain group by running:</P
><P
->Run the command <B
+><B
CLASS="COMMAND"
->net use x: \\BIGSERVER\TMP</B
->. You should
-be prompted for a password then you should get a "command completed
-successfully" message. If not then your PC software is incorrectly
-installed or your smb.conf is incorrect. make sure your "hosts allow"
-and other config lines in smb.conf are correct.</P
+>smbgroupedit -a unixgroup -td</B
+></P
><P
->It's also possible that the server can't work out what user name to
-connect you as. To see if this is the problem add the line "user =
-USERNAME" to the [tmp] section of smb.conf where "USERNAME" is the
-username corresponding to the password you typed. If you find this
-fixes things you may need the username mapping option. </P
+>You can list the various groups in the mapping database like this</P
><P
->It might also be the case that your client only sends encrypted passwords
-and you have <B
+><B
CLASS="COMMAND"
->encrypt passwords = no</B
-> in <TT
-CLASS="FILENAME"
->smb.conf</TT
->.
-Turn it back on to fix.</P
+>smbgroupedit -v</B
+></P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="CHAPTER"
+><HR><H1
><A
-NAME="AEN3468"
+NAME="PORTABILITY"
></A
->26.3.10. Test 10</H3
+>Chapter 22. Portability</H1
><P
->Run the command <B
-CLASS="COMMAND"
->nmblookup -M TESTGROUP</B
-> where
-TESTGROUP is the name of the workgroup that your Samba server and
-Windows PCs belong to. You should get back the IP address of the
-master browser for that workgroup.</P
+>Samba works on a wide range of platforms but the interface all the
+platforms provide is not always compatible. This chapter contains
+platform-specific information about compiling and using samba.</P
+><DIV
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
+><A
+NAME="AEN3201"
+></A
+>22.1. HPUX</H2
><P
->If you don't then the election process has failed. Wait a minute to
-see if it is just being slow then try again. If it still fails after
-that then look at the browsing options you have set in smb.conf. Make
-sure you have <B
-CLASS="COMMAND"
->preferred master = yes</B
-> to ensure that
-an election is held at startup.</P
+>HP's implementation of supplementary groups is, er, non-standard (for
+hysterical reasons). There are two group files, /etc/group and
+/etc/logingroup; the system maps UIDs to numbers using the former, but
+initgroups() reads the latter. Most system admins who know the ropes
+symlink /etc/group to /etc/logingroup (hard link doesn't work for reasons
+too stupid to go into here). initgroups() will complain if one of the
+groups you're in in /etc/logingroup has what it considers to be an invalid
+ID, which means outside the range [0..UID_MAX], where UID_MAX is (I think)
+60000 currently on HP-UX. This precludes -2 and 65534, the usual 'nobody'
+GIDs.</P
+><P
+>If you encounter this problem, make sure that the programs that are failing
+to initgroups() be run as users not in any groups with GIDs outside the
+allowed range.</P
+><P
+>This is documented in the HP manual pages under setgroups(2) and passwd(4).</P
></DIV
><DIV
-CLASS="SECT2"
-><HR><H3
-CLASS="SECT2"
+CLASS="SECT1"
+><HR><H2
+CLASS="SECT1"
><A
-NAME="AEN3474"
+NAME="AEN3206"
></A
->26.3.11. Test 11</H3
+>22.2. SCO Unix</H2
><P
->From file manager try to browse the server. Your samba server should
-appear in the browse list of your local workgroup (or the one you
-specified in smb.conf). You should be able to double click on the name
-of the server and get a list of shares. If you get a "invalid
-password" error when you do then you are probably running WinNT and it
-is refusing to browse a server that has no encrypted password
-capability and is in user level security mode. In this case either set
-<B
-CLASS="COMMAND"
->security = server</B
-> AND
-<B
-CLASS="COMMAND"
->password server = Windows_NT_Machine</B
-> in your
-smb.conf file, or enable encrypted passwords AFTER compiling in support
-for encrypted passwords (refer to the Makefile).</P
-></DIV
+>
+If you run an old version of SCO Unix then you may need to get important
+TCP/IP patches for Samba to work correctly. Without the patch, you may
+encounter corrupt data transfers using samba.</P
+><P
+>The patch you need is UOD385 Connection Drivers SLS. It is available from
+SCO (ftp.sco.com, directory SLS, files uod385a.Z and uod385a.ltr.Z).</P
></DIV
><DIV
CLASS="SECT1"
><HR><H2
CLASS="SECT1"
><A
-NAME="AEN3479"
+NAME="AEN3210"
></A
->26.4. Still having troubles?</H2
+>22.3. DNIX</H2
><P
->Try the mailing list or newsgroup, or use the ethereal utility to
-sniff the problem. The official samba mailing list can be reached at
-<A
-HREF="mailto:samba@samba.org"
-TARGET="_top"
->samba@samba.org</A
->. To find
-out more about samba and how to subscribe to the mailing list check
-out the samba web page at
-<A
-HREF="http://samba.org/samba"
-TARGET="_top"
->http://samba.org/samba</A
+>DNIX has a problem with seteuid() and setegid(). These routines are
+needed for Samba to work correctly, but they were left out of the DNIX
+C library for some reason.</P
+><P
+>For this reason Samba by default defines the macro NO_EID in the DNIX
+section of includes.h. This works around the problem in a limited way,
+but it is far from ideal, some things still won't work right.</P
+><P
+>
+To fix the problem properly you need to assemble the following two
+functions and then either add them to your C library or link them into
+Samba.</P
+><P
+>
+put this in the file <TT
+CLASS="FILENAME"
+>setegid.s</TT
+>:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> .globl _setegid
+_setegid:
+ moveq #47,d0
+ movl #100,a0
+ moveq #1,d1
+ movl 4(sp),a1
+ trap #9
+ bccs 1$
+ jmp cerror
+1$:
+ clrl d0
+ rts</PRE
></P
><P
->Also look at the other docs in the Samba package!</P
-></DIV
+>put this in the file <TT
+CLASS="FILENAME"
+>seteuid.s</TT
+>:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> .globl _seteuid
+_seteuid:
+ moveq #47,d0
+ movl #100,a0
+ moveq #0,d1
+ movl 4(sp),a1
+ trap #9
+ bccs 1$
+ jmp cerror
+1$:
+ clrl d0
+ rts</PRE
+></P
+><P
+>after creating the above files you then assemble them using</P
+><P
+><B
+CLASS="COMMAND"
+>as seteuid.s</B
+></P
+><P
+><B
+CLASS="COMMAND"
+>as setegid.s</B
+></P
+><P
+>that should produce the files <TT
+CLASS="FILENAME"
+>seteuid.o</TT
+> and
+<TT
+CLASS="FILENAME"
+>setegid.o</TT
+></P
+><P
+>then you need to add these to the LIBSM line in the DNIX section of
+the Samba Makefile. Your LIBSM line will then look something like this:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>LIBSM = setegid.o seteuid.o -ln</PRE
+></P
+><P
+>
+You should then remove the line:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>#define NO_EID</PRE
+></P
+><P
+>from the DNIX section of <TT
+CLASS="FILENAME"
+>includes.h</TT
+></P
></DIV
></DIV
></DIV
--- /dev/null
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<HTML
+><HEAD
+><TITLE
+>SAMBA Project Documentation</TITLE
+><META
+NAME="GENERATOR"
+CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
+"><LINK
+REL="NEXT"
+TITLE="How to Install and Test SAMBA"
+HREF="install.html"></HEAD
+><BODY
+CLASS="BOOK"
+BGCOLOR="#FFFFFF"
+TEXT="#000000"
+LINK="#0000FF"
+VLINK="#840084"
+ALINK="#0000FF"
+><DIV
+CLASS="BOOK"
+><A
+NAME="SAMBA-PROJECT-DOCUMENTATION"><DIV
+CLASS="TITLEPAGE"
+><H1
+CLASS="TITLE"
+><A
+NAME="SAMBA-PROJECT-DOCUMENTATION">SAMBA Project Documentation</H1
+><H3
+CLASS="AUTHOR"
+><A
+NAME="AEN4">SAMBA Team</H3
+><HR></DIV
+><H1
+><A
+NAME="AEN8">Abstract</H1
+><P
+><SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>Last Update</I
+></SPAN
+> : Thu Aug 15 12:48:45 CDT 2002</P
+><P
+>This book is a collection of HOWTOs added to Samba documentation over the years.
+I try to ensure that all are current, but sometimes the is a larger job
+than one person can maintain. The most recent version of this document
+can be found at <A
+HREF="http://www.samba.org/"
+TARGET="_top"
+>http://www.samba.org/</A
+>
+on the "Documentation" page. Please send updates to <A
+HREF="mailto:jerry@samba.org"
+TARGET="_top"
+>jerry@samba.org</A
+>.</P
+><P
+>This documentation is distributed under the GNU General Public License (GPL)
+version 2. A copy of the license is included with the Samba source
+distribution. A copy can be found on-line at <A
+HREF="http://www.fsf.org/licenses/gpl.txt"
+TARGET="_top"
+>http://www.fsf.org/licenses/gpl.txt</A
+></P
+><P
+>Cheers, jerry</P
+><DIV
+CLASS="TOC"
+><DL
+><DT
+><B
+>Table of Contents</B
+></DT
+><DT
+>1. <A
+HREF="install.html"
+>How to Install and Test SAMBA</A
+></DT
+><DD
+><DL
+><DT
+>1.1. <A
+HREF="install.html#AEN20"
+>Step 0: Read the man pages</A
+></DT
+><DT
+>1.2. <A
+HREF="install.html#AEN28"
+>Step 1: Building the Binaries</A
+></DT
+><DT
+>1.3. <A
+HREF="install.html#AEN56"
+>Step 2: The all important step</A
+></DT
+><DT
+>1.4. <A
+HREF="install.html#AEN60"
+>Step 3: Create the smb configuration file.</A
+></DT
+><DT
+>1.5. <A
+HREF="install.html#AEN74"
+>Step 4: Test your config file with
+ <B
+CLASS="COMMAND"
+>testparm</B
+></A
+></DT
+><DT
+>1.6. <A
+HREF="install.html#AEN80"
+>Step 5: Starting the smbd and nmbd</A
+></DT
+><DD
+><DL
+><DT
+>1.6.1. <A
+HREF="install.html#AEN90"
+>Step 5a: Starting from inetd.conf</A
+></DT
+><DT
+>1.6.2. <A
+HREF="install.html#AEN119"
+>Step 5b. Alternative: starting it as a daemon</A
+></DT
+></DL
+></DD
+><DT
+>1.7. <A
+HREF="install.html#AEN135"
+>Step 6: Try listing the shares available on your
+ server</A
+></DT
+><DT
+>1.8. <A
+HREF="install.html#AEN144"
+>Step 7: Try connecting with the unix client</A
+></DT
+><DT
+>1.9. <A
+HREF="install.html#AEN160"
+>Step 8: Try connecting from a DOS, WfWg, Win9x, WinNT,
+ Win2k, OS/2, etc... client</A
+></DT
+><DT
+>1.10. <A
+HREF="install.html#AEN174"
+>What If Things Don't Work?</A
+></DT
+><DD
+><DL
+><DT
+>1.10.1. <A
+HREF="install.html#AEN179"
+>Diagnosing Problems</A
+></DT
+><DT
+>1.10.2. <A
+HREF="install.html#AEN183"
+>Scope IDs</A
+></DT
+><DT
+>1.10.3. <A
+HREF="install.html#AEN186"
+>Choosing the Protocol Level</A
+></DT
+><DT
+>1.10.4. <A
+HREF="install.html#AEN195"
+>Printing from UNIX to a Client PC</A
+></DT
+><DT
+>1.10.5. <A
+HREF="install.html#AEN200"
+>Locking</A
+></DT
+><DT
+>1.10.6. <A
+HREF="install.html#AEN209"
+>Mapping Usernames</A
+></DT
+></DL
+></DD
+></DL
+></DD
+><DT
+>2. <A
+HREF="diagnosis.html"
+>Diagnosing your samba server</A
+></DT
+><DD
+><DL
+><DT
+>2.1. <A
+HREF="diagnosis.html#AEN223"
+>Introduction</A
+></DT
+><DT
+>2.2. <A
+HREF="diagnosis.html#AEN228"
+>Assumptions</A
+></DT
+><DT
+>2.3. <A
+HREF="diagnosis.html#AEN238"
+>Tests</A
+></DT
+><DD
+><DL
+><DT
+>2.3.1. <A
+HREF="diagnosis.html#AEN240"
+>Test 1</A
+></DT
+><DT
+>2.3.2. <A
+HREF="diagnosis.html#AEN246"
+>Test 2</A
+></DT
+><DT
+>2.3.3. <A
+HREF="diagnosis.html#AEN252"
+>Test 3</A
+></DT
+><DT
+>2.3.4. <A
+HREF="diagnosis.html#AEN267"
+>Test 4</A
+></DT
+><DT
+>2.3.5. <A
+HREF="diagnosis.html#AEN272"
+>Test 5</A
+></DT
+><DT
+>2.3.6. <A
+HREF="diagnosis.html#AEN278"
+>Test 6</A
+></DT
+><DT
+>2.3.7. <A
+HREF="diagnosis.html#AEN286"
+>Test 7</A
+></DT
+><DT
+>2.3.8. <A
+HREF="diagnosis.html#AEN312"
+>Test 8</A
+></DT
+><DT
+>2.3.9. <A
+HREF="diagnosis.html#AEN329"
+>Test 9</A
+></DT
+><DT
+>2.3.10. <A
+HREF="diagnosis.html#AEN334"
+>Test 10</A
+></DT
+><DT
+>2.3.11. <A
+HREF="diagnosis.html#AEN340"
+>Test 11</A
+></DT
+></DL
+></DD
+><DT
+>2.4. <A
+HREF="diagnosis.html#AEN345"
+>Still having troubles?</A
+></DT
+></DL
+></DD
+><DT
+>3. <A
+HREF="integrate-ms-networks.html"
+>Integrating MS Windows networks with Samba</A
+></DT
+><DD
+><DL
+><DT
+>3.1. <A
+HREF="integrate-ms-networks.html#AEN362"
+>Agenda</A
+></DT
+><DT
+>3.2. <A
+HREF="integrate-ms-networks.html#AEN384"
+>Name Resolution in a pure Unix/Linux world</A
+></DT
+><DD
+><DL
+><DT
+>3.2.1. <A
+HREF="integrate-ms-networks.html#AEN400"
+><TT
+CLASS="FILENAME"
+>/etc/hosts</TT
+></A
+></DT
+><DT
+>3.2.2. <A
+HREF="integrate-ms-networks.html#AEN416"
+><TT
+CLASS="FILENAME"
+>/etc/resolv.conf</TT
+></A
+></DT
+><DT
+>3.2.3. <A
+HREF="integrate-ms-networks.html#AEN427"
+><TT
+CLASS="FILENAME"
+>/etc/host.conf</TT
+></A
+></DT
+><DT
+>3.2.4. <A
+HREF="integrate-ms-networks.html#AEN435"
+><TT
+CLASS="FILENAME"
+>/etc/nsswitch.conf</TT
+></A
+></DT
+></DL
+></DD
+><DT
+>3.3. <A
+HREF="integrate-ms-networks.html#AEN447"
+>Name resolution as used within MS Windows networking</A
+></DT
+><DD
+><DL
+><DT
+>3.3.1. <A
+HREF="integrate-ms-networks.html#AEN459"
+>The NetBIOS Name Cache</A
+></DT
+><DT
+>3.3.2. <A
+HREF="integrate-ms-networks.html#AEN464"
+>The LMHOSTS file</A
+></DT
+><DT
+>3.3.3. <A
+HREF="integrate-ms-networks.html#AEN472"
+>HOSTS file</A
+></DT
+><DT
+>3.3.4. <A
+HREF="integrate-ms-networks.html#AEN477"
+>DNS Lookup</A
+></DT
+><DT
+>3.3.5. <A
+HREF="integrate-ms-networks.html#AEN480"
+>WINS Lookup</A
+></DT
+></DL
+></DD
+><DT
+>3.4. <A
+HREF="integrate-ms-networks.html#AEN492"
+>How browsing functions and how to deploy stable and
+dependable browsing using Samba</A
+></DT
+><DT
+>3.5. <A
+HREF="integrate-ms-networks.html#AEN502"
+>MS Windows security options and how to configure
+Samba for seemless integration</A
+></DT
+><DD
+><DL
+><DT
+>3.5.1. <A
+HREF="integrate-ms-networks.html#AEN530"
+>Use MS Windows NT as an authentication server</A
+></DT
+><DT
+>3.5.2. <A
+HREF="integrate-ms-networks.html#AEN538"
+>Make Samba a member of an MS Windows NT security domain</A
+></DT
+><DT
+>3.5.3. <A
+HREF="integrate-ms-networks.html#AEN555"
+>Configure Samba as an authentication server</A
+></DT
+></DL
+></DD
+><DT
+>3.6. <A
+HREF="integrate-ms-networks.html#AEN572"
+>Conclusions</A
+></DT
+></DL
+></DD
+><DT
+>4. <A
+HREF="pam.html"
+>Configuring PAM for distributed but centrally
+managed authentication</A
+></DT
+><DD
+><DL
+><DT
+>4.1. <A
+HREF="pam.html#AEN593"
+>Samba and PAM</A
+></DT
+><DT
+>4.2. <A
+HREF="pam.html#AEN637"
+>Distributed Authentication</A
+></DT
+><DT
+>4.3. <A
+HREF="pam.html#AEN644"
+>PAM Configuration in smb.conf</A
+></DT
+></DL
+></DD
+><DT
+>5. <A
+HREF="msdfs.html"
+>Hosting a Microsoft Distributed File System tree on Samba</A
+></DT
+><DD
+><DL
+><DT
+>5.1. <A
+HREF="msdfs.html#AEN664"
+>Instructions</A
+></DT
+><DD
+><DL
+><DT
+>5.1.1. <A
+HREF="msdfs.html#AEN699"
+>Notes</A
+></DT
+></DL
+></DD
+></DL
+></DD
+><DT
+>6. <A
+HREF="unix-permissions.html"
+>UNIX Permission Bits and Windows NT Access Control Lists</A
+></DT
+><DD
+><DL
+><DT
+>6.1. <A
+HREF="unix-permissions.html#AEN719"
+>Viewing and changing UNIX permissions using the NT
+ security dialogs</A
+></DT
+><DT
+>6.2. <A
+HREF="unix-permissions.html#AEN728"
+>How to view file security on a Samba share</A
+></DT
+><DT
+>6.3. <A
+HREF="unix-permissions.html#AEN739"
+>Viewing file ownership</A
+></DT
+><DT
+>6.4. <A
+HREF="unix-permissions.html#AEN759"
+>Viewing file or directory permissions</A
+></DT
+><DD
+><DL
+><DT
+>6.4.1. <A
+HREF="unix-permissions.html#AEN774"
+>File Permissions</A
+></DT
+><DT
+>6.4.2. <A
+HREF="unix-permissions.html#AEN788"
+>Directory Permissions</A
+></DT
+></DL
+></DD
+><DT
+>6.5. <A
+HREF="unix-permissions.html#AEN795"
+>Modifying file or directory permissions</A
+></DT
+><DT
+>6.6. <A
+HREF="unix-permissions.html#AEN817"
+>Interaction with the standard Samba create mask
+ parameters</A
+></DT
+><DT
+>6.7. <A
+HREF="unix-permissions.html#AEN881"
+>Interaction with the standard Samba file attribute
+ mapping</A
+></DT
+></DL
+></DD
+><DT
+>7. <A
+HREF="printing.html"
+>Printing Support in Samba 2.2.x</A
+></DT
+><DD
+><DL
+><DT
+>7.1. <A
+HREF="printing.html#AEN902"
+>Introduction</A
+></DT
+><DT
+>7.2. <A
+HREF="printing.html#AEN924"
+>Configuration</A
+></DT
+><DD
+><DL
+><DT
+>7.2.1. <A
+HREF="printing.html#AEN935"
+>Creating [print$]</A
+></DT
+><DT
+>7.2.2. <A
+HREF="printing.html#AEN970"
+>Setting Drivers for Existing Printers</A
+></DT
+><DT
+>7.2.3. <A
+HREF="printing.html#AEN987"
+>Support a large number of printers</A
+></DT
+><DT
+>7.2.4. <A
+HREF="printing.html#AEN998"
+>Adding New Printers via the Windows NT APW</A
+></DT
+><DT
+>7.2.5. <A
+HREF="printing.html#AEN1028"
+>Samba and Printer Ports</A
+></DT
+></DL
+></DD
+><DT
+>7.3. <A
+HREF="printing.html#AEN1036"
+>The Imprints Toolset</A
+></DT
+><DD
+><DL
+><DT
+>7.3.1. <A
+HREF="printing.html#AEN1040"
+>What is Imprints?</A
+></DT
+><DT
+>7.3.2. <A
+HREF="printing.html#AEN1050"
+>Creating Printer Driver Packages</A
+></DT
+><DT
+>7.3.3. <A
+HREF="printing.html#AEN1053"
+>The Imprints server</A
+></DT
+><DT
+>7.3.4. <A
+HREF="printing.html#AEN1057"
+>The Installation Client</A
+></DT
+></DL
+></DD
+><DT
+>7.4. <A
+HREF="printing.html#AEN1079"
+><A
+NAME="MIGRATION"
+></A
+>Migration to from Samba 2.0.x to 2.2.x</A
+></DT
+></DL
+></DD
+><DT
+>8. <A
+HREF="printingdebug.html"
+>Debugging Printing Problems</A
+></DT
+><DD
+><DL
+><DT
+>8.1. <A
+HREF="printingdebug.html#AEN1125"
+>Introduction</A
+></DT
+><DT
+>8.2. <A
+HREF="printingdebug.html#AEN1141"
+>Debugging printer problems</A
+></DT
+><DT
+>8.3. <A
+HREF="printingdebug.html#AEN1150"
+>What printers do I have?</A
+></DT
+><DT
+>8.4. <A
+HREF="printingdebug.html#AEN1158"
+>Setting up printcap and print servers</A
+></DT
+><DT
+>8.5. <A
+HREF="printingdebug.html#AEN1186"
+>Job sent, no output</A
+></DT
+><DT
+>8.6. <A
+HREF="printingdebug.html#AEN1197"
+>Job sent, strange output</A
+></DT
+><DT
+>8.7. <A
+HREF="printingdebug.html#AEN1209"
+>Raw PostScript printed</A
+></DT
+><DT
+>8.8. <A
+HREF="printingdebug.html#AEN1212"
+>Advanced Printing</A
+></DT
+><DT
+>8.9. <A
+HREF="printingdebug.html#AEN1215"
+>Real debugging</A
+></DT
+></DL
+></DD
+><DT
+>9. <A
+HREF="securitylevels.html"
+>Security levels</A
+></DT
+><DD
+><DL
+><DT
+>9.1. <A
+HREF="securitylevels.html#AEN1228"
+>Introduction</A
+></DT
+><DT
+>9.2. <A
+HREF="securitylevels.html#AEN1239"
+>More complete description of security levels</A
+></DT
+></DL
+></DD
+><DT
+>10. <A
+HREF="domain-security.html"
+>security = domain in Samba 2.x</A
+></DT
+><DD
+><DL
+><DT
+>10.1. <A
+HREF="domain-security.html#AEN1272"
+>Joining an NT Domain with Samba 2.2</A
+></DT
+><DT
+>10.2. <A
+HREF="domain-security.html#AEN1336"
+>Samba and Windows 2000 Domains</A
+></DT
+><DT
+>10.3. <A
+HREF="domain-security.html#AEN1341"
+>Why is this better than security = server?</A
+></DT
+></DL
+></DD
+><DT
+>11. <A
+HREF="winbind.html"
+>Unified Logons between Windows NT and UNIX using Winbind</A
+></DT
+><DD
+><DL
+><DT
+>11.1. <A
+HREF="winbind.html#AEN1394"
+>Abstract</A
+></DT
+><DT
+>11.2. <A
+HREF="winbind.html#AEN1398"
+>Introduction</A
+></DT
+><DT
+>11.3. <A
+HREF="winbind.html#AEN1411"
+>What Winbind Provides</A
+></DT
+><DD
+><DL
+><DT
+>11.3.1. <A
+HREF="winbind.html#AEN1418"
+>Target Uses</A
+></DT
+></DL
+></DD
+><DT
+>11.4. <A
+HREF="winbind.html#AEN1422"
+>How Winbind Works</A
+></DT
+><DD
+><DL
+><DT
+>11.4.1. <A
+HREF="winbind.html#AEN1427"
+>Microsoft Remote Procedure Calls</A
+></DT
+><DT
+>11.4.2. <A
+HREF="winbind.html#AEN1431"
+>Name Service Switch</A
+></DT
+><DT
+>11.4.3. <A
+HREF="winbind.html#AEN1447"
+>Pluggable Authentication Modules</A
+></DT
+><DT
+>11.4.4. <A
+HREF="winbind.html#AEN1455"
+>User and Group ID Allocation</A
+></DT
+><DT
+>11.4.5. <A
+HREF="winbind.html#AEN1459"
+>Result Caching</A
+></DT
+></DL
+></DD
+><DT
+>11.5. <A
+HREF="winbind.html#AEN1462"
+>Installation and Configuration</A
+></DT
+><DD
+><DL
+><DT
+>11.5.1. <A
+HREF="winbind.html#AEN1469"
+>Introduction</A
+></DT
+><DT
+>11.5.2. <A
+HREF="winbind.html#AEN1482"
+>Requirements</A
+></DT
+><DT
+>11.5.3. <A
+HREF="winbind.html#AEN1496"
+>Testing Things Out</A
+></DT
+></DL
+></DD
+><DT
+>11.6. <A
+HREF="winbind.html#AEN1711"
+>Limitations</A
+></DT
+><DT
+>11.7. <A
+HREF="winbind.html#AEN1721"
+>Conclusion</A
+></DT
+></DL
+></DD
+><DT
+>12. <A
+HREF="samba-pdc.html"
+>How to Configure Samba 2.2 as a Primary Domain Controller</A
+></DT
+><DD
+><DL
+><DT
+>12.1. <A
+HREF="samba-pdc.html#AEN1741"
+>Prerequisite Reading</A
+></DT
+><DT
+>12.2. <A
+HREF="samba-pdc.html#AEN1747"
+>Background</A
+></DT
+><DT
+>12.3. <A
+HREF="samba-pdc.html#AEN1786"
+>Configuring the Samba Domain Controller</A
+></DT
+><DT
+>12.4. <A
+HREF="samba-pdc.html#AEN1829"
+>Creating Machine Trust Accounts and Joining Clients to the
+Domain</A
+></DT
+><DD
+><DL
+><DT
+>12.4.1. <A
+HREF="samba-pdc.html#AEN1848"
+>Manual Creation of Machine Trust Accounts</A
+></DT
+><DT
+>12.4.2. <A
+HREF="samba-pdc.html#AEN1883"
+>"On-the-Fly" Creation of Machine Trust Accounts</A
+></DT
+><DT
+>12.4.3. <A
+HREF="samba-pdc.html#AEN1892"
+>Joining the Client to the Domain</A
+></DT
+></DL
+></DD
+><DT
+>12.5. <A
+HREF="samba-pdc.html#AEN1907"
+>Common Problems and Errors</A
+></DT
+><DT
+>12.6. <A
+HREF="samba-pdc.html#AEN1955"
+>System Policies and Profiles</A
+></DT
+><DT
+>12.7. <A
+HREF="samba-pdc.html#AEN1999"
+>What other help can I get?</A
+></DT
+><DT
+>12.8. <A
+HREF="samba-pdc.html#AEN2113"
+>Domain Control for Windows 9x/ME</A
+></DT
+><DD
+><DL
+><DT
+>12.8.1. <A
+HREF="samba-pdc.html#AEN2139"
+>Configuration Instructions: Network Logons</A
+></DT
+><DT
+>12.8.2. <A
+HREF="samba-pdc.html#AEN2158"
+>Configuration Instructions: Setting up Roaming User Profiles</A
+></DT
+></DL
+></DD
+><DT
+>12.9. <A
+HREF="samba-pdc.html#AEN2251"
+>DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</A
+></DT
+></DL
+></DD
+><DT
+>13. <A
+HREF="samba-bdc.html"
+>How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</A
+></DT
+><DD
+><DL
+><DT
+>13.1. <A
+HREF="samba-bdc.html#AEN2287"
+>Prerequisite Reading</A
+></DT
+><DT
+>13.2. <A
+HREF="samba-bdc.html#AEN2291"
+>Background</A
+></DT
+><DT
+>13.3. <A
+HREF="samba-bdc.html#AEN2299"
+>What qualifies a Domain Controller on the network?</A
+></DT
+><DD
+><DL
+><DT
+>13.3.1. <A
+HREF="samba-bdc.html#AEN2302"
+>How does a Workstation find its domain controller?</A
+></DT
+><DT
+>13.3.2. <A
+HREF="samba-bdc.html#AEN2305"
+>When is the PDC needed?</A
+></DT
+></DL
+></DD
+><DT
+>13.4. <A
+HREF="samba-bdc.html#AEN2308"
+>Can Samba be a Backup Domain Controller?</A
+></DT
+><DT
+>13.5. <A
+HREF="samba-bdc.html#AEN2312"
+>How do I set up a Samba BDC?</A
+></DT
+><DD
+><DL
+><DT
+>13.5.1. <A
+HREF="samba-bdc.html#AEN2329"
+>How do I replicate the smbpasswd file?</A
+></DT
+></DL
+></DD
+></DL
+></DD
+><DT
+>14. <A
+HREF="samba-ldap-howto.html"
+>Storing Samba's User/Machine Account information in an LDAP Directory</A
+></DT
+><DD
+><DL
+><DT
+>14.1. <A
+HREF="samba-ldap-howto.html#AEN2350"
+>Purpose</A
+></DT
+><DT
+>14.2. <A
+HREF="samba-ldap-howto.html#AEN2370"
+>Introduction</A
+></DT
+><DT
+>14.3. <A
+HREF="samba-ldap-howto.html#AEN2399"
+>Supported LDAP Servers</A
+></DT
+><DT
+>14.4. <A
+HREF="samba-ldap-howto.html#AEN2404"
+>Schema and Relationship to the RFC 2307 posixAccount</A
+></DT
+><DT
+>14.5. <A
+HREF="samba-ldap-howto.html#AEN2416"
+>Configuring Samba with LDAP</A
+></DT
+><DD
+><DL
+><DT
+>14.5.1. <A
+HREF="samba-ldap-howto.html#AEN2418"
+>OpenLDAP configuration</A
+></DT
+><DT
+>14.5.2. <A
+HREF="samba-ldap-howto.html#AEN2435"
+>Configuring Samba</A
+></DT
+></DL
+></DD
+><DT
+>14.6. <A
+HREF="samba-ldap-howto.html#AEN2463"
+>Accounts and Groups management</A
+></DT
+><DT
+>14.7. <A
+HREF="samba-ldap-howto.html#AEN2468"
+>Security and sambaAccount</A
+></DT
+><DT
+>14.8. <A
+HREF="samba-ldap-howto.html#AEN2488"
+>LDAP specials attributes for sambaAccounts</A
+></DT
+><DT
+>14.9. <A
+HREF="samba-ldap-howto.html#AEN2558"
+>Example LDIF Entries for a sambaAccount</A
+></DT
+><DT
+>14.10. <A
+HREF="samba-ldap-howto.html#AEN2566"
+>Comments</A
+></DT
+></DL
+></DD
+><DT
+>15. <A
+HREF="improved-browsing.html"
+>Improved browsing in samba</A
+></DT
+><DD
+><DL
+><DT
+>15.1. <A
+HREF="improved-browsing.html#AEN2577"
+>Overview of browsing</A
+></DT
+><DT
+>15.2. <A
+HREF="improved-browsing.html#AEN2581"
+>Browsing support in samba</A
+></DT
+><DT
+>15.3. <A
+HREF="improved-browsing.html#AEN2590"
+>Problem resolution</A
+></DT
+><DT
+>15.4. <A
+HREF="improved-browsing.html#AEN2597"
+>Browsing across subnets</A
+></DT
+><DD
+><DL
+><DT
+>15.4.1. <A
+HREF="improved-browsing.html#AEN2602"
+>How does cross subnet browsing work ?</A
+></DT
+></DL
+></DD
+><DT
+>15.5. <A
+HREF="improved-browsing.html#AEN2637"
+>Setting up a WINS server</A
+></DT
+><DT
+>15.6. <A
+HREF="improved-browsing.html#AEN2656"
+>Setting up Browsing in a WORKGROUP</A
+></DT
+><DT
+>15.7. <A
+HREF="improved-browsing.html#AEN2674"
+>Setting up Browsing in a DOMAIN</A
+></DT
+><DT
+>15.8. <A
+HREF="improved-browsing.html#AEN2684"
+>Forcing samba to be the master</A
+></DT
+><DT
+>15.9. <A
+HREF="improved-browsing.html#AEN2693"
+>Making samba the domain master</A
+></DT
+><DT
+>15.10. <A
+HREF="improved-browsing.html#AEN2711"
+>Note about broadcast addresses</A
+></DT
+><DT
+>15.11. <A
+HREF="improved-browsing.html#AEN2714"
+>Multiple interfaces</A
+></DT
+></DL
+></DD
+><DT
+>16. <A
+HREF="speed.html"
+>Samba performance issues</A
+></DT
+><DD
+><DL
+><DT
+>16.1. <A
+HREF="speed.html#AEN2732"
+>Comparisons</A
+></DT
+><DT
+>16.2. <A
+HREF="speed.html#AEN2738"
+>Oplocks</A
+></DT
+><DD
+><DL
+><DT
+>16.2.1. <A
+HREF="speed.html#AEN2740"
+>Overview</A
+></DT
+><DT
+>16.2.2. <A
+HREF="speed.html#AEN2748"
+>Level2 Oplocks</A
+></DT
+><DT
+>16.2.3. <A
+HREF="speed.html#AEN2754"
+>Old 'fake oplocks' option - deprecated</A
+></DT
+></DL
+></DD
+><DT
+>16.3. <A
+HREF="speed.html#AEN2758"
+>Socket options</A
+></DT
+><DT
+>16.4. <A
+HREF="speed.html#AEN2765"
+>Read size</A
+></DT
+><DT
+>16.5. <A
+HREF="speed.html#AEN2770"
+>Max xmit</A
+></DT
+><DT
+>16.6. <A
+HREF="speed.html#AEN2775"
+>Locking</A
+></DT
+><DT
+>16.7. <A
+HREF="speed.html#AEN2779"
+>Share modes</A
+></DT
+><DT
+>16.8. <A
+HREF="speed.html#AEN2784"
+>Log level</A
+></DT
+><DT
+>16.9. <A
+HREF="speed.html#AEN2787"
+>Wide lines</A
+></DT
+><DT
+>16.10. <A
+HREF="speed.html#AEN2790"
+>Read raw</A
+></DT
+><DT
+>16.11. <A
+HREF="speed.html#AEN2795"
+>Write raw</A
+></DT
+><DT
+>16.12. <A
+HREF="speed.html#AEN2799"
+>Read prediction</A
+></DT
+><DT
+>16.13. <A
+HREF="speed.html#AEN2806"
+>Memory mapping</A
+></DT
+><DT
+>16.14. <A
+HREF="speed.html#AEN2811"
+>Slow Clients</A
+></DT
+><DT
+>16.15. <A
+HREF="speed.html#AEN2815"
+>Slow Logins</A
+></DT
+><DT
+>16.16. <A
+HREF="speed.html#AEN2818"
+>Client tuning</A
+></DT
+><DT
+>16.17. <A
+HREF="speed.html#AEN2850"
+>My Results</A
+></DT
+></DL
+></DD
+><DT
+>17. <A
+HREF="other-clients.html"
+>Samba and other CIFS clients</A
+></DT
+><DD
+><DL
+><DT
+>17.1. <A
+HREF="other-clients.html#AEN2871"
+>Macintosh clients?</A
+></DT
+><DT
+>17.2. <A
+HREF="other-clients.html#AEN2880"
+>OS2 Client</A
+></DT
+><DD
+><DL
+><DT
+>17.2.1. <A
+HREF="other-clients.html#AEN2882"
+>How can I configure OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba?</A
+></DT
+><DT
+>17.2.2. <A
+HREF="other-clients.html#AEN2897"
+>How can I configure OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba?</A
+></DT
+><DT
+>17.2.3. <A
+HREF="other-clients.html#AEN2906"
+>Are there any other issues when OS/2 (any version)
+ is used as a client?</A
+></DT
+><DT
+>17.2.4. <A
+HREF="other-clients.html#AEN2910"
+>How do I get printer driver download working
+ for OS/2 clients?</A
+></DT
+></DL
+></DD
+><DT
+>17.3. <A
+HREF="other-clients.html#AEN2920"
+>Windows for Workgroups</A
+></DT
+><DD
+><DL
+><DT
+>17.3.1. <A
+HREF="other-clients.html#AEN2922"
+>Use latest TCP/IP stack from Microsoft</A
+></DT
+><DT
+>17.3.2. <A
+HREF="other-clients.html#AEN2927"
+>Delete .pwl files after password change</A
+></DT
+><DT
+>17.3.3. <A
+HREF="other-clients.html#AEN2932"
+>Configure WfW password handling</A
+></DT
+><DT
+>17.3.4. <A
+HREF="other-clients.html#AEN2936"
+>Case handling of passwords</A
+></DT
+></DL
+></DD
+><DT
+>17.4. <A
+HREF="other-clients.html#AEN2941"
+>Windows '95/'98</A
+></DT
+><DT
+>17.5. <A
+HREF="other-clients.html#AEN2957"
+>Windows 2000 Service Pack 2</A
+></DT
+></DL
+></DD
+><DT
+>18. <A
+HREF="cvs-access.html"
+>HOWTO Access Samba source code via CVS</A
+></DT
+><DD
+><DL
+><DT
+>18.1. <A
+HREF="cvs-access.html#AEN2981"
+>Introduction</A
+></DT
+><DT
+>18.2. <A
+HREF="cvs-access.html#AEN2986"
+>CVS Access to samba.org</A
+></DT
+><DD
+><DL
+><DT
+>18.2.1. <A
+HREF="cvs-access.html#AEN2989"
+>Access via CVSweb</A
+></DT
+><DT
+>18.2.2. <A
+HREF="cvs-access.html#AEN2994"
+>Access via cvs</A
+></DT
+></DL
+></DD
+></DL
+></DD
+><DT
+>19. <A
+HREF="bugreport.html"
+>Reporting Bugs</A
+></DT
+><DD
+><DL
+><DT
+>19.1. <A
+HREF="bugreport.html#AEN3029"
+>Introduction</A
+></DT
+><DT
+>19.2. <A
+HREF="bugreport.html#AEN3036"
+>General info</A
+></DT
+><DT
+>19.3. <A
+HREF="bugreport.html#AEN3042"
+>Debug levels</A
+></DT
+><DT
+>19.4. <A
+HREF="bugreport.html#AEN3059"
+>Internal errors</A
+></DT
+><DT
+>19.5. <A
+HREF="bugreport.html#AEN3069"
+>Attaching to a running process</A
+></DT
+><DT
+>19.6. <A
+HREF="bugreport.html#AEN3072"
+>Patches</A
+></DT
+></DL
+></DD
+><DT
+>20. <A
+HREF="groupmapping.html"
+>Group mapping HOWTO</A
+></DT
+><DT
+>21. <A
+HREF="portability.html"
+>Portability</A
+></DT
+><DD
+><DL
+><DT
+>21.1. <A
+HREF="portability.html#AEN3119"
+>HPUX</A
+></DT
+><DT
+>21.2. <A
+HREF="portability.html#AEN3124"
+>SCO Unix</A
+></DT
+><DT
+>21.3. <A
+HREF="portability.html#AEN3128"
+>DNIX</A
+></DT
+></DL
+></DD
+></DL
+></DIV
+></DIV
+><DIV
+CLASS="NAVFOOTER"
+><HR
+ALIGN="LEFT"
+WIDTH="100%"><TABLE
+SUMMARY="Footer navigation table"
+WIDTH="100%"
+BORDER="0"
+CELLPADDING="0"
+CELLSPACING="0"
+><TR
+><TD
+WIDTH="33%"
+ALIGN="left"
+VALIGN="top"
+> </TD
+><TD
+WIDTH="34%"
+ALIGN="center"
+VALIGN="top"
+> </TD
+><TD
+WIDTH="33%"
+ALIGN="right"
+VALIGN="top"
+><A
+HREF="install.html"
+ACCESSKEY="N"
+>Next</A
+></TD
+></TR
+><TR
+><TD
+WIDTH="33%"
+ALIGN="left"
+VALIGN="top"
+> </TD
+><TD
+WIDTH="34%"
+ALIGN="center"
+VALIGN="top"
+> </TD
+><TD
+WIDTH="33%"
+ALIGN="right"
+VALIGN="top"
+>How to Install and Test SAMBA</TD
+></TR
+></TABLE
+></DIV
+></BODY
+></HTML
+>
\ No newline at end of file
--- /dev/null
+<HTML
+><HEAD
+><TITLE
+>How to Configure Samba 2.2 as a Primary Domain Controller</TITLE
+><META
+NAME="GENERATOR"
+CONTENT="Modular DocBook HTML Stylesheet Version 1.57"></HEAD
+><BODY
+CLASS="ARTICLE"
+BGCOLOR="#FFFFFF"
+TEXT="#000000"
+LINK="#0000FF"
+VLINK="#840084"
+ALINK="#0000FF"
+><DIV
+CLASS="ARTICLE"
+><DIV
+CLASS="TITLEPAGE"
+><H1
+CLASS="TITLE"
+><A
+NAME="SAMBA-PDC"
+>How to Configure Samba 2.2 as a Primary Domain Controller</A
+></H1
+><HR></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN3"
+>Prerequisite Reading</A
+></H1
+><P
+>Before you continue reading in this chapter, please make sure
+that you are comfortable with configuring basic files services
+in smb.conf and how to enable and administer password
+encryption in Samba. Theses two topics are covered in the
+<A
+HREF="smb.conf.5.html"
+TARGET="_top"
+><TT
+CLASS="FILENAME"
+>smb.conf(5)</TT
+></A
+>
+manpage and the <A
+HREF="ENCRYPTION.html"
+TARGET="_top"
+>Encryption chapter</A
+>
+of this HOWTO Collection.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN9"
+>Background</A
+></H1
+><DIV
+CLASS="NOTE"
+><BLOCKQUOTE
+CLASS="NOTE"
+><P
+><B
+>Note: </B
+><I
+CLASS="EMPHASIS"
+>Author's Note:</I
+> This document is a combination
+of David Bannon's "Samba 2.2 PDC HOWTO" and "Samba NT Domain FAQ".
+Both documents are superseded by this one.</P
+></BLOCKQUOTE
+></DIV
+><P
+>Versions of Samba prior to release 2.2 had marginal capabilities to act
+as a Windows NT 4.0 Primary Domain Controller
+
+(PDC). With Samba 2.2.0, we are proud to announce official support for
+Windows NT 4.0-style domain logons from Windows NT 4.0 and Windows
+2000 clients. This article outlines the steps
+necessary for configuring Samba as a PDC. It is necessary to have a
+working Samba server prior to implementing the PDC functionality. If
+you have not followed the steps outlined in <A
+HREF="UNIX_INSTALL.html"
+TARGET="_top"
+> UNIX_INSTALL.html</A
+>, please make sure
+that your server is configured correctly before proceeding. Another
+good resource in the <A
+HREF="smb.conf.5.html"
+TARGET="_top"
+>smb.conf(5) man
+page</A
+>. The following functionality should work in 2.2:</P
+><P
+></P
+><UL
+><LI
+><P
+> domain logons for Windows NT 4.0/2000 clients.
+ </P
+></LI
+><LI
+><P
+> placing a Windows 9x client in user level security
+ </P
+></LI
+><LI
+><P
+> retrieving a list of users and groups from a Samba PDC to
+ Windows 9x/NT/2000 clients
+ </P
+></LI
+><LI
+><P
+> roving (roaming) user profiles
+ </P
+></LI
+><LI
+><P
+> Windows NT 4.0-style system policies
+ </P
+></LI
+></UL
+><P
+>The following pieces of functionality are not included in the 2.2 release:</P
+><P
+></P
+><UL
+><LI
+><P
+> Windows NT 4 domain trusts
+ </P
+></LI
+><LI
+><P
+> SAM replication with Windows NT 4.0 Domain Controllers
+ (i.e. a Samba PDC and a Windows NT BDC or vice versa)
+ </P
+></LI
+><LI
+><P
+> Adding users via the User Manager for Domains
+ </P
+></LI
+><LI
+><P
+> Acting as a Windows 2000 Domain Controller (i.e. Kerberos and
+ Active Directory)
+ </P
+></LI
+></UL
+><P
+>Please note that Windows 9x clients are not true members of a domain
+for reasons outlined in this article. Therefore the protocol for
+support Windows 9x-style domain logons is completely different
+from NT4 domain logons and has been officially supported for some
+time.</P
+><P
+>Implementing a Samba PDC can basically be divided into 2 broad
+steps.</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> Configuring the Samba PDC
+ </P
+></LI
+><LI
+><P
+> Creating machine trust accounts and joining clients
+ to the domain
+ </P
+></LI
+></OL
+><P
+>There are other minor details such as user profiles, system
+policies, etc... However, these are not necessarily specific
+to a Samba PDC as much as they are related to Windows NT networking
+concepts. They will be mentioned only briefly here.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN48"
+>Configuring the Samba Domain Controller</A
+></H1
+><P
+>The first step in creating a working Samba PDC is to
+understand the parameters necessary in smb.conf. I will not
+attempt to re-explain the parameters here as they are more that
+adequately covered in <A
+HREF="smb.conf.5.html"
+TARGET="_top"
+> the smb.conf
+man page</A
+>. For convenience, the parameters have been
+linked with the actual smb.conf description.</P
+><P
+>Here is an example <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> for acting as a PDC:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>[global]
+ ; Basic server settings
+ <A
+HREF="smb.conf.5.html#NETBIOSNAME"
+TARGET="_top"
+>netbios name</A
+> = <TT
+CLASS="REPLACEABLE"
+><I
+>POGO</I
+></TT
+>
+ <A
+HREF="smb.conf.5.html#WORKGROUP"
+TARGET="_top"
+>workgroup</A
+> = <TT
+CLASS="REPLACEABLE"
+><I
+>NARNIA</I
+></TT
+>
+
+ ; we should act as the domain and local master browser
+ <A
+HREF="smb.conf.5.html#OSLEVEL"
+TARGET="_top"
+>os level</A
+> = 64
+ <A
+HREF="smb.conf.5.html#PERFERREDMASTER"
+TARGET="_top"
+>preferred master</A
+> = yes
+ <A
+HREF="smb.conf.5.html#DOMAINMASTER"
+TARGET="_top"
+>domain master</A
+> = yes
+ <A
+HREF="smb.conf.5.html#LOCALMASTER"
+TARGET="_top"
+>local master</A
+> = yes
+
+ ; security settings (must user security = user)
+ <A
+HREF="smb.conf.5.html#SECURITYEQUALSUSER"
+TARGET="_top"
+>security</A
+> = user
+
+ ; encrypted passwords are a requirement for a PDC
+ <A
+HREF="smb.conf.5.html#ENCRYPTPASSWORDS"
+TARGET="_top"
+>encrypt passwords</A
+> = yes
+
+ ; support domain logons
+ <A
+HREF="smb.conf.5.html#DOMAINLOGONS"
+TARGET="_top"
+>domain logons</A
+> = yes
+
+ ; where to store user profiles?
+ <A
+HREF="smb.conf.5.html#LOGONPATH"
+TARGET="_top"
+>logon path</A
+> = \\%N\profiles\%u
+
+ ; where is a user's home directory and where should it
+ ; be mounted at?
+ <A
+HREF="smb.conf.5.html#LOGONDRIVE"
+TARGET="_top"
+>logon drive</A
+> = H:
+ <A
+HREF="smb.conf.5.html#LOGONHOME"
+TARGET="_top"
+>logon home</A
+> = \\homeserver\%u
+
+ ; specify a generic logon script for all users
+ ; this is a relative **DOS** path to the [netlogon] share
+ <A
+HREF="smb.conf.5.html#LOGONSCRIPT"
+TARGET="_top"
+>logon script</A
+> = logon.cmd
+
+; necessary share for domain controller
+[netlogon]
+ <A
+HREF="smb.conf.5.html#PATH"
+TARGET="_top"
+>path</A
+> = /usr/local/samba/lib/netlogon
+ <A
+HREF="smb.conf.5.html#READONLY"
+TARGET="_top"
+>read only</A
+> = yes
+ <A
+HREF="smb.conf.5.html#WRITELIST"
+TARGET="_top"
+>write list</A
+> = <TT
+CLASS="REPLACEABLE"
+><I
+>ntadmin</I
+></TT
+>
+
+; share for storing user profiles
+[profiles]
+ <A
+HREF="smb.conf.5.html#PATH"
+TARGET="_top"
+>path</A
+> = /export/smb/ntprofile
+ <A
+HREF="smb.conf.5.html#READONLY"
+TARGET="_top"
+>read only</A
+> = no
+ <A
+HREF="smb.conf.5.html#CREATEMASK"
+TARGET="_top"
+>create mask</A
+> = 0600
+ <A
+HREF="smb.conf.5.html#DIRECTORYMASK"
+TARGET="_top"
+>directory mask</A
+> = 0700</PRE
+></P
+><P
+>There are a couple of points to emphasize in the above configuration.</P
+><P
+></P
+><UL
+><LI
+><P
+> Encrypted passwords must be enabled. For more details on how
+ to do this, refer to <A
+HREF="ENCRYPTION.html"
+TARGET="_top"
+>ENCRYPTION.html</A
+>.
+ </P
+></LI
+><LI
+><P
+> The server must support domain logons and a
+ <TT
+CLASS="FILENAME"
+>[netlogon]</TT
+> share
+ </P
+></LI
+><LI
+><P
+> The server must be the domain master browser in order for Windows
+ client to locate the server as a DC. Please refer to the various
+ Network Browsing documentation included with this distribution for
+ details.
+ </P
+></LI
+></UL
+><P
+>As Samba 2.2 does not offer a complete implementation of group mapping
+between Windows NT groups and Unix groups (this is really quite
+complicated to explain in a short space), you should refer to the
+<A
+HREF="smb.conf.5.html#DOMAINADMINGROUP"
+TARGET="_top"
+>domain admin
+group</A
+> smb.conf parameter for information of creating "Domain
+Admins" style accounts.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN91"
+>Creating Machine Trust Accounts and Joining Clients to the
+Domain</A
+></H1
+><P
+>A machine trust account is a Samba account that is used to
+authenticate a client machine (rather than a user) to the Samba
+server. In Windows terminology, this is known as a "Computer
+Account."</P
+><P
+>The password of a machine trust account acts as the shared secret for
+secure communication with the Domain Controller. This is a security
+feature to prevent an unauthorized machine with the same NetBIOS name
+from joining the domain and gaining access to domain user/group
+accounts. Windows NT and 2000 clients use machine trust accounts, but
+Windows 9x clients do not. Hence, a Windows 9x client is never a true
+member of a domain because it does not possess a machine trust
+account, and thus has no shared secret with the domain controller.</P
+><P
+>A Windows PDC stores each machine trust account in the Windows
+Registry. A Samba PDC, however, stores each machine trust account
+in two parts, as follows:
+
+<P
+></P
+><UL
+><LI
+><P
+>A Samba account, stored in the same location as user
+ LanMan and NT password hashes (currently
+ <TT
+CLASS="FILENAME"
+>smbpasswd</TT
+>). The Samba account
+ possesses and uses only the NT password hash.</P
+></LI
+><LI
+><P
+>A corresponding Unix account, typically stored in
+ <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+>. (Future releases will alleviate the need to
+ create <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entries.) </P
+></LI
+></UL
+></P
+><P
+>There are two ways to create machine trust accounts:</P
+><P
+></P
+><UL
+><LI
+><P
+> Manual creation. Both the Samba and corresponding
+ Unix account are created by hand.</P
+></LI
+><LI
+><P
+> "On-the-fly" creation. The Samba machine trust
+ account is automatically created by Samba at the time the client
+ is joined to the domain. (For security, this is the
+ recommended method.) The corresponding Unix account may be
+ created automatically or manually. </P
+></LI
+></UL
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN110"
+>Manual Creation of Machine Trust Accounts</A
+></H2
+><P
+>The first step in manually creating a machine trust account is to
+manually create the corresponding Unix account in
+<TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+>. This can be done using
+<B
+CLASS="COMMAND"
+>vipw</B
+> or other 'add user' command that is normally
+used to create new Unix accounts. The following is an example for a
+Linux based Samba server:</P
+><P
+> <TT
+CLASS="PROMPT"
+>root# </TT
+><B
+CLASS="COMMAND"
+>/usr/sbin/useradd -g 100 -d /dev/null -c <TT
+CLASS="REPLACEABLE"
+><I
+>"machine
+nickname"</I
+></TT
+> -s /bin/false <TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+>$ </B
+></P
+><P
+><TT
+CLASS="PROMPT"
+>root# </TT
+><B
+CLASS="COMMAND"
+>passwd -l <TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+>$</B
+></P
+><P
+>The <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entry will list the machine name
+with a "$" appended, won't have a password, will have a null shell and no
+home directory. For example a machine named 'doppy' would have an
+<TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entry like this:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>doppy$:x:505:501:<TT
+CLASS="REPLACEABLE"
+><I
+>machine_nickname</I
+></TT
+>:/dev/null:/bin/false</PRE
+></P
+><P
+>Above, <TT
+CLASS="REPLACEABLE"
+><I
+>machine_nickname</I
+></TT
+> can be any
+descriptive name for the client, i.e., BasementComputer.
+<TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+> absolutely must be the NetBIOS
+name of the client to be joined to the domain. The "$" must be
+appended to the NetBIOS name of the client or Samba will not recognize
+this as a machine trust account.</P
+><P
+>Now that the corresponding Unix account has been created, the next step is to create
+the Samba account for the client containing the well-known initial
+machine trust account password. This can be done using the <A
+HREF="smbpasswd.8.html"
+TARGET="_top"
+><B
+CLASS="COMMAND"
+>smbpasswd(8)</B
+></A
+> command
+as shown here:</P
+><P
+><TT
+CLASS="PROMPT"
+>root# </TT
+><B
+CLASS="COMMAND"
+>smbpasswd -a -m <TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+></B
+></P
+><P
+>where <TT
+CLASS="REPLACEABLE"
+><I
+>machine_name</I
+></TT
+> is the machine's NetBIOS
+name. The RID of the new machine account is generated from the UID of
+the corresponding Unix account.</P
+><DIV
+CLASS="WARNING"
+><P
+></P
+><TABLE
+CLASS="WARNING"
+BORDER="1"
+WIDTH="100%"
+><TR
+><TD
+ALIGN="CENTER"
+><B
+>Join the client to the domain immediately</B
+></TD
+></TR
+><TR
+><TD
+ALIGN="LEFT"
+><P
+> Manually creating a machine trust account using this method is the
+ equivalent of creating a machine trust account on a Windows NT PDC using
+ the "Server Manager". From the time at which the account is created
+ to the time which the client joins the domain and changes the password,
+ your domain is vulnerable to an intruder joining your domain using a
+ a machine with the same NetBIOS name. A PDC inherently trusts
+ members of the domain and will serve out a large degree of user
+ information to such clients. You have been warned!
+ </P
+></TD
+></TR
+></TABLE
+></DIV
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN145"
+>"On-the-Fly" Creation of Machine Trust Accounts</A
+></H2
+><P
+>The second (and recommended) way of creating machine trust accounts is
+simply to allow the Samba server to create them as needed when the client
+is joined to the domain. </P
+><P
+>Since each Samba machine trust account requires a corresponding
+Unix account, a method for automatically creating the
+Unix account is usually supplied; this requires configuration of the
+<A
+HREF="smb.conf.5.html#ADDUSERSCRIPT"
+TARGET="_top"
+>add user script</A
+>
+option in <TT
+CLASS="FILENAME"
+>smb.conf</TT
+>. This
+method is not required, however; corresponding Unix accounts may also
+be created manually.</P
+><P
+>Below is an example for a RedHat 6.2 Linux system.</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>[global]
+ # <...remainder of parameters...>
+ add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u </PRE
+></P
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN154"
+>Joining the Client to the Domain</A
+></H2
+><P
+>The procedure for joining a client to the domain varies with the
+version of Windows.</P
+><P
+></P
+><UL
+><LI
+><P
+><I
+CLASS="EMPHASIS"
+>Windows 2000</I
+></P
+><P
+> When the user elects to join the client to a domain, Windows prompts for
+ an account and password that is privileged to join the domain. A
+ Samba administrative account (i.e., a Samba account that has root
+ privileges on the Samba server) must be entered here; the
+ operation will fail if an ordinary user account is given.
+ The password for this account should be
+ set to a different password than the associated
+ <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+> entry, for security
+ reasons. </P
+><P
+>The session key of the Samba administrative account acts as an
+ encryption key for setting the password of the machine trust
+ account. The machine trust account will be created on-the-fly, or
+ updated if it already exists.</P
+></LI
+><LI
+><P
+><I
+CLASS="EMPHASIS"
+>Windows NT</I
+></P
+><P
+> If the machine trust account was created manually, on the
+ Identification Changes menu enter the domain name, but do not
+ check the box "Create a Computer Account in the Domain." In this case,
+ the existing machine trust account is used to join the machine to
+ the domain.</P
+><P
+> If the machine trust account is to be created
+ on-the-fly, on the Identification Changes menu enter the domain
+ name, and check the box "Create a Computer Account in the Domain." In
+ this case, joining the domain proceeds as above for Windows 2000
+ (i.e., you must supply a Samba administrative account when
+ prompted).</P
+></LI
+></UL
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN169"
+>Common Problems and Errors</A
+></H1
+><P
+></P
+><P
+></P
+><UL
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>I cannot include a '$' in a machine name.</I
+>
+ </P
+><P
+> A 'machine name' in (typically) <TT
+CLASS="FILENAME"
+>/etc/passwd</TT
+>
+ of the machine name with a '$' appended. FreeBSD (and other BSD
+ systems?) won't create a user with a '$' in their name.
+ </P
+><P
+> The problem is only in the program used to make the entry, once
+ made, it works perfectly. So create a user without the '$' and
+ use <B
+CLASS="COMMAND"
+>vipw</B
+> to edit the entry, adding the '$'. Or create
+ the whole entry with vipw if you like, make sure you use a
+ unique User ID !
+ </P
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>I get told "You already have a connection to the Domain...."
+ or "Cannot join domain, the credentials supplied conflict with an
+ existing set.." when creating a machine trust account.</I
+>
+ </P
+><P
+> This happens if you try to create a machine trust account from the
+ machine itself and already have a connection (e.g. mapped drive)
+ to a share (or IPC$) on the Samba PDC. The following command
+ will remove all network drive connections:
+ </P
+><P
+> <TT
+CLASS="PROMPT"
+>C:\WINNT\></TT
+> <B
+CLASS="COMMAND"
+>net use * /d</B
+>
+ </P
+><P
+> Further, if the machine is a already a 'member of a workgroup' that
+ is the same name as the domain you are joining (bad idea) you will
+ get this message. Change the workgroup name to something else, it
+ does not matter what, reboot, and try again.
+ </P
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>The system can not log you on (C000019B)....</I
+>
+ </P
+><P
+>I joined the domain successfully but after upgrading
+ to a newer version of the Samba code I get the message, "The system
+ can not log you on (C000019B), Please try a gain or consult your
+ system administrator" when attempting to logon.
+ </P
+><P
+> This occurs when the domain SID stored in
+ <TT
+CLASS="FILENAME"
+>private/WORKGROUP.SID</TT
+> is
+ changed. For example, you remove the file and <B
+CLASS="COMMAND"
+>smbd</B
+> automatically
+ creates a new one. Or you are swapping back and forth between
+ versions 2.0.7, TNG and the HEAD branch code (not recommended). The
+ only way to correct the problem is to restore the original domain
+ SID or remove the domain client from the domain and rejoin.
+ </P
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>The machine trust account for this computer either does not
+ exist or is not accessible.</I
+>
+ </P
+><P
+> When I try to join the domain I get the message "The machine account
+ for this computer either does not exist or is not accessible". What's
+ wrong?
+ </P
+><P
+> This problem is caused by the PDC not having a suitable machine trust account.
+ If you are using the <TT
+CLASS="PARAMETER"
+><I
+>add user script</I
+></TT
+> method to create
+ accounts then this would indicate that it has not worked. Ensure the domain
+ admin user system is working.
+ </P
+><P
+> Alternatively if you are creating account entries manually then they
+ have not been created correctly. Make sure that you have the entry
+ correct for the machine trust account in smbpasswd file on the Samba PDC.
+ If you added the account using an editor rather than using the smbpasswd
+ utility, make sure that the account name is the machine NetBIOS name
+ with a '$' appended to it ( i.e. computer_name$ ). There must be an entry
+ in both /etc/passwd and the smbpasswd file. Some people have reported
+ that inconsistent subnet masks between the Samba server and the NT
+ client have caused this problem. Make sure that these are consistent
+ for both client and server.
+ </P
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>When I attempt to login to a Samba Domain from a NT4/W2K workstation,
+ I get a message about my account being disabled.</I
+>
+ </P
+><P
+> This problem is caused by a PAM related bug in Samba 2.2.0. This bug is
+ fixed in 2.2.1. Other symptoms could be unaccessible shares on
+ NT/W2K member servers in the domain or the following error in your smbd.log:
+ passdb/pampass.c:pam_account(268) PAM: UNKNOWN ERROR for User: %user%
+ </P
+><P
+> At first be ensure to enable the useraccounts with <B
+CLASS="COMMAND"
+>smbpasswd -e
+ %user%</B
+>, this is normally done, when you create an account.
+ </P
+><P
+> In order to work around this problem in 2.2.0, configure the
+ <TT
+CLASS="PARAMETER"
+><I
+>account</I
+></TT
+> control flag in
+ <TT
+CLASS="FILENAME"
+>/etc/pam.d/samba</TT
+> file as follows:
+ </P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> account required pam_permit.so
+ </PRE
+></P
+><P
+> If you want to remain backward compatibility to samba 2.0.x use
+ <TT
+CLASS="FILENAME"
+>pam_permit.so</TT
+>, it's also possible to use
+ <TT
+CLASS="FILENAME"
+>pam_pwdb.so</TT
+>. There are some bugs if you try to
+ use <TT
+CLASS="FILENAME"
+>pam_unix.so</TT
+>, if you need this, be ensure to use
+ the most recent version of this file.
+ </P
+></LI
+></UL
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN217"
+>System Policies and Profiles</A
+></H1
+><P
+>Much of the information necessary to implement System Policies and
+Roving User Profiles in a Samba domain is the same as that for
+implementing these same items in a Windows NT 4.0 domain.
+You should read the white paper <A
+HREF="http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp"
+TARGET="_top"
+>Implementing
+Profiles and Policies in Windows NT 4.0</A
+> available from Microsoft.</P
+><P
+>Here are some additional details:</P
+><P
+></P
+><UL
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>What about Windows NT Policy Editor?</I
+>
+ </P
+><P
+> To create or edit <TT
+CLASS="FILENAME"
+>ntconfig.pol</TT
+> you must use
+ the NT Server Policy Editor, <B
+CLASS="COMMAND"
+>poledit.exe</B
+> which
+ is included with NT Server but <I
+CLASS="EMPHASIS"
+>not NT Workstation</I
+>.
+ There is a Policy Editor on a NTws
+ but it is not suitable for creating <I
+CLASS="EMPHASIS"
+>Domain Policies</I
+>.
+ Further, although the Windows 95
+ Policy Editor can be installed on an NT Workstation/Server, it will not
+ work with NT policies because the registry key that are set by the policy templates.
+ However, the files from the NT Server will run happily enough on an NTws.
+ You need <TT
+CLASS="FILENAME"
+>poledit.exe, common.adm</TT
+> and <TT
+CLASS="FILENAME"
+>winnt.adm</TT
+>. It is convenient
+ to put the two *.adm files in <TT
+CLASS="FILENAME"
+>c:\winnt\inf</TT
+> which is where
+ the binary will look for them unless told otherwise. Note also that that
+ directory is 'hidden'.
+ </P
+><P
+> The Windows NT policy editor is also included with the Service Pack 3 (and
+ later) for Windows NT 4.0. Extract the files using <B
+CLASS="COMMAND"
+>servicepackname /x</B
+>,
+ i.e. that's <B
+CLASS="COMMAND"
+>Nt4sp6ai.exe /x</B
+> for service pack 6a. The policy editor,
+ <B
+CLASS="COMMAND"
+>poledit.exe</B
+> and the associated template files (*.adm) should
+ be extracted as well. It is also possible to downloaded the policy template
+ files for Office97 and get a copy of the policy editor. Another possible
+ location is with the Zero Administration Kit available for download from Microsoft.
+ </P
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>Can Win95 do Policies?</I
+>
+ </P
+><P
+> Install the group policy handler for Win9x to pick up group
+ policies. Look on the Win98 CD in <TT
+CLASS="FILENAME"
+>\tools\reskit\netadmin\poledit</TT
+>.
+ Install group policies on a Win9x client by double-clicking
+ <TT
+CLASS="FILENAME"
+>grouppol.inf</TT
+>. Log off and on again a couple of
+ times and see if Win98 picks up group policies. Unfortunately this needs
+ to be done on every Win9x machine that uses group policies....
+ </P
+><P
+> If group policies don't work one reports suggests getting the updated
+ (read: working) grouppol.dll for Windows 9x. The group list is grabbed
+ from /etc/group.
+ </P
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>How do I get 'User Manager' and 'Server Manager'</I
+>
+ </P
+><P
+> Since I don't need to buy an NT Server CD now, how do I get
+ the 'User Manager for Domains', the 'Server Manager'?
+ </P
+><P
+> Microsoft distributes a version of these tools called nexus for
+ installation on Windows 95 systems. The tools set includes
+ </P
+><P
+></P
+><UL
+><LI
+><P
+>Server Manager</P
+></LI
+><LI
+><P
+>User Manager for Domains</P
+></LI
+><LI
+><P
+>Event Viewer</P
+></LI
+></UL
+><P
+> Click here to download the archived file <A
+HREF="ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE"
+TARGET="_top"
+>ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE</A
+>
+ </P
+><P
+> The Windows NT 4.0 version of the 'User Manager for
+ Domains' and 'Server Manager' are available from Microsoft via ftp
+ from <A
+HREF="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE"
+TARGET="_top"
+>ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE</A
+>
+ </P
+></LI
+></UL
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN261"
+>What other help can I get?</A
+></H1
+><P
+>There are many sources of information available in the form
+of mailing lists, RFC's and documentation. The docs that come
+with the samba distribution contain very good explanations of
+general SMB topics such as browsing.</P
+><P
+></P
+><UL
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>What are some diagnostics tools I can use to debug the domain logon
+ process and where can I find them?</I
+>
+ </P
+><P
+> One of the best diagnostic tools for debugging problems is Samba itself.
+ You can use the -d option for both smbd and nmbd to specify what
+ 'debug level' at which to run. See the man pages on smbd, nmbd and
+ smb.conf for more information on debugging options. The debug
+ level can range from 1 (the default) to 10 (100 for debugging passwords).
+ </P
+><P
+> Another helpful method of debugging is to compile samba using the
+ <B
+CLASS="COMMAND"
+>gcc -g </B
+> flag. This will include debug
+ information in the binaries and allow you to attach gdb to the
+ running smbd / nmbd process. In order to attach gdb to an smbd
+ process for an NT workstation, first get the workstation to make the
+ connection. Pressing ctrl-alt-delete and going down to the domain box
+ is sufficient (at least, on the first time you join the domain) to
+ generate a 'LsaEnumTrustedDomains'. Thereafter, the workstation
+ maintains an open connection, and therefore there will be an smbd
+ process running (assuming that you haven't set a really short smbd
+ idle timeout) So, in between pressing ctrl alt delete, and actually
+ typing in your password, you can gdb attach and continue.
+ </P
+><P
+> Some useful samba commands worth investigating:
+ </P
+><P
+></P
+><UL
+><LI
+><P
+>testparam | more</P
+></LI
+><LI
+><P
+>smbclient -L //{netbios name of server}</P
+></LI
+></UL
+><P
+> An SMB enabled version of tcpdump is available from
+ <A
+HREF="http://www.tcpdump.org/"
+TARGET="_top"
+>http://www.tcpdup.org/</A
+>.
+ Ethereal, another good packet sniffer for Unix and Win32
+ hosts, can be downloaded from <A
+HREF="http://www.ethereal.com/"
+TARGET="_top"
+>http://www.ethereal.com</A
+>.
+ </P
+><P
+> For tracing things on the Microsoft Windows NT, Network Monitor
+ (aka. netmon) is available on the Microsoft Developer Network CD's,
+ the Windows NT Server install CD and the SMS CD's. The version of
+ netmon that ships with SMS allows for dumping packets between any two
+ computers (i.e. placing the network interface in promiscuous mode).
+ The version on the NT Server install CD will only allow monitoring
+ of network traffic directed to the local NT box and broadcasts on the
+ local subnet. Be aware that Ethereal can read and write netmon
+ formatted files.
+ </P
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>How do I install 'Network Monitor' on an NT Workstation
+ or a Windows 9x box?</I
+>
+ </P
+><P
+> Installing netmon on an NT workstation requires a couple
+ of steps. The following are for installing Netmon V4.00.349, which comes
+ with Microsoft Windows NT Server 4.0, on Microsoft Windows NT
+ Workstation 4.0. The process should be similar for other version of
+ Windows NT / Netmon. You will need both the Microsoft Windows
+ NT Server 4.0 Install CD and the Workstation 4.0 Install CD.
+ </P
+><P
+> Initially you will need to install 'Network Monitor Tools and Agent'
+ on the NT Server. To do this
+ </P
+><P
+></P
+><UL
+><LI
+><P
+>Goto Start - Settings - Control Panel -
+ Network - Services - Add </P
+></LI
+><LI
+><P
+>Select the 'Network Monitor Tools and Agent' and
+ click on 'OK'.</P
+></LI
+><LI
+><P
+>Click 'OK' on the Network Control Panel.
+ </P
+></LI
+><LI
+><P
+>Insert the Windows NT Server 4.0 install CD
+ when prompted.</P
+></LI
+></UL
+><P
+> At this point the Netmon files should exist in
+ <TT
+CLASS="FILENAME"
+>%SYSTEMROOT%\System32\netmon\*.*</TT
+>.
+ Two subdirectories exist as well, <TT
+CLASS="FILENAME"
+>parsers\</TT
+>
+ which contains the necessary DLL's for parsing the netmon packet
+ dump, and <TT
+CLASS="FILENAME"
+>captures\</TT
+>.
+ </P
+><P
+> In order to install the Netmon tools on an NT Workstation, you will
+ first need to install the 'Network Monitor Agent' from the Workstation
+ install CD.
+ </P
+><P
+></P
+><UL
+><LI
+><P
+>Goto Start - Settings - Control Panel -
+ Network - Services - Add</P
+></LI
+><LI
+><P
+>Select the 'Network Monitor Agent' and click
+ on 'OK'.</P
+></LI
+><LI
+><P
+>Click 'OK' on the Network Control Panel.
+ </P
+></LI
+><LI
+><P
+>Insert the Windows NT Workstation 4.0 install
+ CD when prompted.</P
+></LI
+></UL
+><P
+> Now copy the files from the NT Server in %SYSTEMROOT%\System32\netmon\*.*
+ to %SYSTEMROOT%\System32\netmon\*.* on the Workstation and set
+ permissions as you deem appropriate for your site. You will need
+ administrative rights on the NT box to run netmon.
+ </P
+><P
+> To install Netmon on a Windows 9x box install the network monitor agent
+ from the Windows 9x CD (\admin\nettools\netmon). There is a readme
+ file located with the netmon driver files on the CD if you need
+ information on how to do this. Copy the files from a working
+ Netmon installation.
+ </P
+></LI
+><LI
+><P
+> The following is a list if helpful URLs and other links:
+ </P
+><P
+></P
+><UL
+><LI
+><P
+>Home of Samba site <A
+HREF="http://samba.org"
+TARGET="_top"
+> http://samba.org</A
+>. We have a mirror near you !</P
+></LI
+><LI
+><P
+> The <I
+CLASS="EMPHASIS"
+>Development</I
+> document
+ on the Samba mirrors might mention your problem. If so,
+ it might mean that the developers are working on it.</P
+></LI
+><LI
+><P
+>See how Scott Merrill simulates a BDC behavior at
+ <A
+HREF="http://www.skippy.net/linux/smb-howto.html"
+TARGET="_top"
+> http://www.skippy.net/linux/smb-howto.html</A
+>. </P
+></LI
+><LI
+><P
+>Although 2.0.7 has almost had its day as a PDC, David Bannon will
+ keep the 2.0.7 PDC pages at <A
+HREF="http://bioserve.latrobe.edu.au/samba"
+TARGET="_top"
+> http://bioserve.latrobe.edu.au/samba</A
+> going for a while yet.</P
+></LI
+><LI
+><P
+>Misc links to CIFS information
+ <A
+HREF="http://samba.org/cifs/"
+TARGET="_top"
+>http://samba.org/cifs/</A
+></P
+></LI
+><LI
+><P
+>NT Domains for Unix <A
+HREF="http://mailhost.cb1.com/~lkcl/ntdom/"
+TARGET="_top"
+> http://mailhost.cb1.com/~lkcl/ntdom/</A
+></P
+></LI
+><LI
+><P
+>FTP site for older SMB specs:
+ <A
+HREF="ftp://ftp.microsoft.com/developr/drg/CIFS/"
+TARGET="_top"
+> ftp://ftp.microsoft.com/developr/drg/CIFS/</A
+></P
+></LI
+></UL
+></LI
+></UL
+><P
+></P
+><UL
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>How do I get help from the mailing lists?</I
+>
+ </P
+><P
+> There are a number of Samba related mailing lists. Go to <A
+HREF="http://samba.org"
+TARGET="_top"
+>http://samba.org</A
+>, click on your nearest mirror
+ and then click on <B
+CLASS="COMMAND"
+>Support</B
+> and then click on <B
+CLASS="COMMAND"
+> Samba related mailing lists</B
+>.
+ </P
+><P
+> For questions relating to Samba TNG go to
+ <A
+HREF="http://www.samba-tng.org/"
+TARGET="_top"
+>http://www.samba-tng.org/</A
+>
+ It has been requested that you don't post questions about Samba-TNG to the
+ main stream Samba lists.</P
+><P
+> If you post a message to one of the lists please observe the following guide lines :
+ </P
+><P
+></P
+><UL
+><LI
+><P
+> Always remember that the developers are volunteers, they are
+ not paid and they never guarantee to produce a particular feature at
+ a particular time. Any time lines are 'best guess' and nothing more.
+ </P
+></LI
+><LI
+><P
+> Always mention what version of samba you are using and what
+ operating system its running under. You should probably list the
+ relevant sections of your smb.conf file, at least the options
+ in [global] that affect PDC support.</P
+></LI
+><LI
+><P
+>In addition to the version, if you obtained Samba via
+ CVS mention the date when you last checked it out.</P
+></LI
+><LI
+><P
+> Try and make your question clear and brief, lots of long,
+ convoluted questions get deleted before they are completely read !
+ Don't post html encoded messages (if you can select colour or font
+ size its html).</P
+></LI
+><LI
+><P
+> If you run one of those nifty 'I'm on holidays' things when
+ you are away, make sure its configured to not answer mailing lists.
+ </P
+></LI
+><LI
+><P
+> Don't cross post. Work out which is the best list to post to
+ and see what happens, i.e. don't post to both samba-ntdom and samba-technical.
+ Many people active on the lists subscribe to more
+ than one list and get annoyed to see the same message two or more times.
+ Often someone will see a message and thinking it would be better dealt
+ with on another, will forward it on for you.</P
+></LI
+><LI
+><P
+>You might include <I
+CLASS="EMPHASIS"
+>partial</I
+>
+ log files written at a debug level set to as much as 20.
+ Please don't send the entire log but enough to give the context of the
+ error messages.</P
+></LI
+><LI
+><P
+>(Possibly) If you have a complete netmon trace ( from the opening of
+ the pipe to the error ) you can send the *.CAP file as well.</P
+></LI
+><LI
+><P
+>Please think carefully before attaching a document to an email.
+ Consider pasting the relevant parts into the body of the message. The samba
+ mailing lists go to a huge number of people, do they all need a copy of your
+ smb.conf in their attach directory?</P
+></LI
+></UL
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>How do I get off the mailing lists?</I
+>
+ </P
+><P
+>To have your name removed from a samba mailing list, go to the
+ same place you went to to get on it. Go to <A
+HREF="http://lists.samba.org/"
+TARGET="_top"
+>http://lists.samba.org</A
+>,
+ click on your nearest mirror and then click on <B
+CLASS="COMMAND"
+>Support</B
+> and
+ then click on <B
+CLASS="COMMAND"
+> Samba related mailing lists</B
+>. Or perhaps see
+ <A
+HREF="http://lists.samba.org/mailman/roster/samba-ntdom"
+TARGET="_top"
+>here</A
+>
+ </P
+><P
+> Please don't post messages to the list asking to be removed, you will just
+ be referred to the above address (unless that process failed in some way...)
+ </P
+></LI
+></UL
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN375"
+>Domain Control for Windows 9x/ME</A
+></H1
+><DIV
+CLASS="NOTE"
+><BLOCKQUOTE
+CLASS="NOTE"
+><P
+><B
+>Note: </B
+>The following section contains much of the original
+DOMAIN.txt file previously included with Samba. Much of
+the material is based on what went into the book <I
+CLASS="EMPHASIS"
+>Special
+Edition, Using Samba</I
+>, by Richard Sharpe.</P
+></BLOCKQUOTE
+></DIV
+><P
+>A domain and a workgroup are exactly the same thing in terms of network
+browsing. The difference is that a distributable authentication
+database is associated with a domain, for secure login access to a
+network. Also, different access rights can be granted to users if they
+successfully authenticate against a domain logon server (NT server and
+other systems based on NT server support this, as does at least Samba TNG now).</P
+><P
+>The SMB client logging on to a domain has an expectation that every other
+server in the domain should accept the same authentication information.
+Network browsing functionality of domains and workgroups is
+identical and is explained in BROWSING.txt. It should be noted, that browsing
+is totally orthogonal to logon support.</P
+><P
+>Issues related to the single-logon network model are discussed in this
+section. Samba supports domain logons, network logon scripts, and user
+profiles for MS Windows for workgroups and MS Windows 9X/ME clients
+which will be the focus of this section.</P
+><P
+>When an SMB client in a domain wishes to logon it broadcast requests for a
+logon server. The first one to reply gets the job, and validates its
+password using whatever mechanism the Samba administrator has installed.
+It is possible (but very stupid) to create a domain where the user
+database is not shared between servers, i.e. they are effectively workgroup
+servers advertising themselves as participating in a domain. This
+demonstrates how authentication is quite different from but closely
+involved with domains.</P
+><P
+>Using these features you can make your clients verify their logon via
+the Samba server; make clients run a batch file when they logon to
+the network and download their preferences, desktop and start menu.</P
+><P
+>Before launching into the configuration instructions, it is
+worthwhile lookingat how a Windows 9x/ME client performs a logon:</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> The client broadcasts (to the IP broadcast address of the subnet it is in)
+ a NetLogon request. This is sent to the NetBIOS name DOMAIN<1c> at the
+ NetBIOS layer. The client chooses the first response it receives, which
+ contains the NetBIOS name of the logon server to use in the format of
+ \\SERVER.
+ </P
+></LI
+><LI
+><P
+> The client then connects to that server, logs on (does an SMBsessetupX) and
+ then connects to the IPC$ share (using an SMBtconX).
+ </P
+></LI
+><LI
+><P
+> The client then does a NetWkstaUserLogon request, which retrieves the name
+ of the user's logon script.
+ </P
+></LI
+><LI
+><P
+> The client then connects to the NetLogon share and searches for this
+ and if it is found and can be read, is retrieved and executed by the client.
+ After this, the client disconnects from the NetLogon share.
+ </P
+></LI
+><LI
+><P
+> The client then sends a NetUserGetInfo request to the server, to retrieve
+ the user's home share, which is used to search for profiles. Since the
+ response to the NetUserGetInfo request does not contain much more
+ the user's home share, profiles for Win9X clients MUST reside in the user
+ home directory.
+ </P
+></LI
+><LI
+><P
+> The client then connects to the user's home share and searches for the
+ user's profile. As it turns out, you can specify the user's home share as
+ a sharename and path. For example, \\server\fred\.profile.
+ If the profiles are found, they are implemented.
+ </P
+></LI
+><LI
+><P
+> The client then disconnects from the user's home share, and reconnects to
+ the NetLogon share and looks for CONFIG.POL, the policies file. If this is
+ found, it is read and implemented.
+ </P
+></LI
+></OL
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN401"
+>Configuration Instructions: Network Logons</A
+></H2
+><P
+>The main difference between a PDC and a Windows 9x logon
+server configuration is that</P
+><P
+></P
+><UL
+><LI
+><P
+>Password encryption is not required for a Windows 9x logon server.</P
+></LI
+><LI
+><P
+>Windows 9x/ME clients do not possess machine trust accounts.</P
+></LI
+></UL
+><P
+>Therefore, a Samba PDC will also act as a Windows 9x logon
+server.</P
+><DIV
+CLASS="WARNING"
+><P
+></P
+><TABLE
+CLASS="WARNING"
+BORDER="1"
+WIDTH="100%"
+><TR
+><TD
+ALIGN="CENTER"
+><B
+>security mode and master browsers</B
+></TD
+></TR
+><TR
+><TD
+ALIGN="LEFT"
+><P
+>There are a few comments to make in order to tie up some
+loose ends. There has been much debate over the issue of whether
+or not it is ok to configure Samba as a Domain Controller in security
+modes other than <TT
+CLASS="CONSTANT"
+>USER</TT
+>. The only security mode
+which will not work due to technical reasons is <TT
+CLASS="CONSTANT"
+>SHARE</TT
+>
+mode security. <TT
+CLASS="CONSTANT"
+>DOMAIN</TT
+> and <TT
+CLASS="CONSTANT"
+>SERVER</TT
+>
+mode security is really just a variation on SMB user level security.</P
+><P
+>Actually, this issue is also closely tied to the debate on whether
+or not Samba must be the domain master browser for its workgroup
+when operating as a DC. While it may technically be possible
+to configure a server as such (after all, browsing and domain logons
+are two distinctly different functions), it is not a good idea to
+so. You should remember that the DC must register the DOMAIN#1b NetBIOS
+name. This is the name used by Windows clients to locate the DC.
+Windows clients do not distinguish between the DC and the DMB.
+For this reason, it is very wise to configure the Samba DC as the DMB.</P
+><P
+>Now back to the issue of configuring a Samba DC to use a mode other
+than "security = user". If a Samba host is configured to use
+another SMB server or DC in order to validate user connection
+requests, then it is a fact that some other machine on the network
+(the "password server") knows more about user than the Samba host.
+99% of the time, this other host is a domain controller. Now
+in order to operate in domain mode security, the "workgroup" parameter
+must be set to the name of the Windows NT domain (which already
+has a domain controller, right?)</P
+><P
+>Therefore configuring a Samba box as a DC for a domain that
+already by definition has a PDC is asking for trouble.
+Therefore, you should always configure the Samba DC to be the DMB
+for its domain.</P
+></TD
+></TR
+></TABLE
+></DIV
+></DIV
+><DIV
+CLASS="SECT2"
+><HR><H2
+CLASS="SECT2"
+><A
+NAME="AEN420"
+>Configuration Instructions: Setting up Roaming User Profiles</A
+></H2
+><DIV
+CLASS="WARNING"
+><P
+></P
+><TABLE
+CLASS="WARNING"
+BORDER="1"
+WIDTH="100%"
+><TR
+><TD
+ALIGN="CENTER"
+><B
+>Warning</B
+></TD
+></TR
+><TR
+><TD
+ALIGN="LEFT"
+><P
+><I
+CLASS="EMPHASIS"
+>NOTE!</I
+> Roaming profiles support is different
+for Win9X and WinNT.</P
+></TD
+></TR
+></TABLE
+></DIV
+><P
+>Before discussing how to configure roaming profiles, it is useful to see how
+Win9X and WinNT clients implement these features.</P
+><P
+>Win9X clients send a NetUserGetInfo request to the server to get the user's
+profiles location. However, the response does not have room for a separate
+profiles location field, only the user's home share. This means that Win9X
+profiles are restricted to being in the user's home directory.</P
+><P
+>WinNT clients send a NetSAMLogon RPC request, which contains many fields,
+including a separate field for the location of the user's profiles.
+This means that support for profiles is different for Win9X and WinNT.</P
+><DIV
+CLASS="SECT3"
+><HR><H3
+CLASS="SECT3"
+><A
+NAME="AEN428"
+>Windows NT Configuration</A
+></H3
+><P
+>To support WinNT clients, in the [global] section of smb.conf set the
+following (for example):</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath</PRE
+></P
+><P
+>The default for this option is \\%N\%U\profile, namely
+\\sambaserver\username\profile. The \\N%\%U service is created
+automatically by the [homes] service.
+If you are using a samba server for the profiles, you _must_ make the
+share specified in the logon path browseable. </P
+><DIV
+CLASS="NOTE"
+><BLOCKQUOTE
+CLASS="NOTE"
+><P
+><B
+>Note: </B
+>[lkcl 26aug96 - we have discovered a problem where Windows clients can
+maintain a connection to the [homes] share in between logins. The
+[homes] share must NOT therefore be used in a profile path.]</P
+></BLOCKQUOTE
+></DIV
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H3
+CLASS="SECT3"
+><A
+NAME="AEN436"
+>Windows 9X Configuration</A
+></H3
+><P
+>To support Win9X clients, you must use the "logon home" parameter. Samba has
+now been fixed so that "net use/home" now works as well, and it, too, relies
+on the "logon home" parameter.</P
+><P
+>By using the logon home parameter, you are restricted to putting Win9X
+profiles in the user's home directory. But wait! There is a trick you
+can use. If you set the following in the [global] section of your
+smb.conf file:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>logon home = \\%L\%U\.profiles</PRE
+></P
+><P
+>then your Win9X clients will dutifully put their clients in a subdirectory
+of your home directory called .profiles (thus making them hidden).</P
+><P
+>Not only that, but 'net use/home' will also work, because of a feature in
+Win9X. It removes any directory stuff off the end of the home directory area
+and only uses the server and share portion. That is, it looks like you
+specified \\%L\%U for "logon home".</P
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H3
+CLASS="SECT3"
+><A
+NAME="AEN444"
+>Win9X and WinNT Configuration</A
+></H3
+><P
+>You can support profiles for both Win9X and WinNT clients by setting both the
+"logon home" and "logon path" parameters. For example:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>logon home = \\%L\%U\.profiles
+logon path = \\%L\profiles\%U</PRE
+></P
+><DIV
+CLASS="NOTE"
+><BLOCKQUOTE
+CLASS="NOTE"
+><P
+><B
+>Note: </B
+>I have not checked what 'net use /home' does on NT when "logon home" is
+set as above.</P
+></BLOCKQUOTE
+></DIV
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H3
+CLASS="SECT3"
+><A
+NAME="AEN451"
+>Windows 9X Profile Setup</A
+></H3
+><P
+>When a user first logs in on Windows 9X, the file user.DAT is created,
+as are folders "Start Menu", "Desktop", "Programs" and "Nethood".
+These directories and their contents will be merged with the local
+versions stored in c:\windows\profiles\username on subsequent logins,
+taking the most recent from each. You will need to use the [global]
+options "preserve case = yes", "short preserve case = yes" and
+"case sensitive = no" in order to maintain capital letters in shortcuts
+in any of the profile folders.</P
+><P
+>The user.DAT file contains all the user's preferences. If you wish to
+enforce a set of preferences, rename their user.DAT file to user.MAN,
+and deny them write access to this file.</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> On the Windows 95 machine, go to Control Panel | Passwords and
+ select the User Profiles tab. Select the required level of
+ roaming preferences. Press OK, but do _not_ allow the computer
+ to reboot.
+ </P
+></LI
+><LI
+><P
+> On the Windows 95 machine, go to Control Panel | Network |
+ Client for Microsoft Networks | Preferences. Select 'Log on to
+ NT Domain'. Then, ensure that the Primary Logon is 'Client for
+ Microsoft Networks'. Press OK, and this time allow the computer
+ to reboot.
+ </P
+></LI
+></OL
+><P
+>Under Windows 95, Profiles are downloaded from the Primary Logon.
+If you have the Primary Logon as 'Client for Novell Networks', then
+the profiles and logon script will be downloaded from your Novell
+Server. If you have the Primary Logon as 'Windows Logon', then the
+profiles will be loaded from the local machine - a bit against the
+concept of roaming profiles, if you ask me.</P
+><P
+>You will now find that the Microsoft Networks Login box contains
+[user, password, domain] instead of just [user, password]. Type in
+the samba server's domain name (or any other domain known to exist,
+but bear in mind that the user will be authenticated against this
+domain and profiles downloaded from it, if that domain logon server
+supports it), user name and user's password.</P
+><P
+>Once the user has been successfully validated, the Windows 95 machine
+will inform you that 'The user has not logged on before' and asks you
+if you wish to save the user's preferences? Select 'yes'.</P
+><P
+>Once the Windows 95 client comes up with the desktop, you should be able
+to examine the contents of the directory specified in the "logon path"
+on the samba server and verify that the "Desktop", "Start Menu",
+"Programs" and "Nethood" folders have been created.</P
+><P
+>These folders will be cached locally on the client, and updated when
+the user logs off (if you haven't made them read-only by then :-).
+You will find that if the user creates further folders or short-cuts,
+that the client will merge the profile contents downloaded with the
+contents of the profile directory already on the local client, taking
+the newest folders and short-cuts from each set.</P
+><P
+>If you have made the folders / files read-only on the samba server,
+then you will get errors from the w95 machine on logon and logout, as
+it attempts to merge the local and the remote profile. Basically, if
+you have any errors reported by the w95 machine, check the Unix file
+permissions and ownership rights on the profile directory contents,
+on the samba server.</P
+><P
+>If you have problems creating user profiles, you can reset the user's
+local desktop cache, as shown below. When this user then next logs in,
+they will be told that they are logging in "for the first time".</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+> instead of logging in under the [user, password, domain] dialog,
+ press escape.
+ </P
+></LI
+><LI
+><P
+> run the regedit.exe program, and look in:
+ </P
+><P
+> HKEY_LOCAL_MACHINE\Windows\CurrentVersion\ProfileList
+ </P
+><P
+> you will find an entry, for each user, of ProfilePath. Note the
+ contents of this key (likely to be c:\windows\profiles\username),
+ then delete the key ProfilePath for the required user.
+ </P
+><P
+> [Exit the registry editor].
+ </P
+></LI
+><LI
+><P
+> <I
+CLASS="EMPHASIS"
+>WARNING</I
+> - before deleting the contents of the
+ directory listed in
+ the ProfilePath (this is likely to be c:\windows\profiles\username),
+ ask them if they have any important files stored on their desktop
+ or in their start menu. delete the contents of the directory
+ ProfilePath (making a backup if any of the files are needed).
+ </P
+><P
+> This will have the effect of removing the local (read-only hidden
+ system file) user.DAT in their profile directory, as well as the
+ local "desktop", "nethood", "start menu" and "programs" folders.
+ </P
+></LI
+><LI
+><P
+> search for the user's .PWL password-caching file in the c:\windows
+ directory, and delete it.
+ </P
+></LI
+><LI
+><P
+> log off the windows 95 client.
+ </P
+></LI
+><LI
+><P
+> check the contents of the profile path (see "logon path" described
+ above), and delete the user.DAT or user.MAN file for the user,
+ making a backup if required.
+ </P
+></LI
+></OL
+><P
+>If all else fails, increase samba's debug log levels to between 3 and 10,
+and / or run a packet trace program such as tcpdump or netmon.exe, and
+look for any error reports.</P
+><P
+>If you have access to an NT server, then first set up roaming profiles
+and / or netlogons on the NT server. Make a packet trace, or examine
+the example packet traces provided with NT server, and see what the
+differences are with the equivalent samba trace.</P
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H3
+CLASS="SECT3"
+><A
+NAME="AEN487"
+>Windows NT Workstation 4.0</A
+></H3
+><P
+>When a user first logs in to a Windows NT Workstation, the profile
+NTuser.DAT is created. The profile location can be now specified
+through the "logon path" parameter. </P
+><DIV
+CLASS="NOTE"
+><BLOCKQUOTE
+CLASS="NOTE"
+><P
+><B
+>Note: </B
+>[lkcl 10aug97 - i tried setting the path to
+\\samba-server\homes\profile, and discovered that this fails because
+a background process maintains the connection to the [homes] share
+which does _not_ close down in between user logins. you have to
+have \\samba-server\%L\profile, where user is the username created
+from the [homes] share].</P
+></BLOCKQUOTE
+></DIV
+><P
+>There is a parameter that is now available for use with NT Profiles:
+"logon drive". This should be set to "h:" or any other drive, and
+should be used in conjunction with the new "logon home" parameter.</P
+><P
+>The entry for the NT 4.0 profile is a _directory_ not a file. The NT
+help on profiles mentions that a directory is also created with a .PDS
+extension. The user, while logging in, must have write permission to
+create the full profile path (and the folder with the .PDS extension)
+[lkcl 10aug97 - i found that the creation of the .PDS directory failed,
+and had to create these manually for each user, with a shell script.
+also, i presume, but have not tested, that the full profile path must
+be browseable just as it is for w95, due to the manner in which they
+attempt to create the full profile path: test existence of each path
+component; create path component].</P
+><P
+>In the profile directory, NT creates more folders than 95. It creates
+"Application Data" and others, as well as "Desktop", "Nethood",
+"Start Menu" and "Programs". The profile itself is stored in a file
+NTuser.DAT. Nothing appears to be stored in the .PDS directory, and
+its purpose is currently unknown.</P
+><P
+>You can use the System Control Panel to copy a local profile onto
+a samba server (see NT Help on profiles: it is also capable of firing
+up the correct location in the System Control Panel for you). The
+NT Help file also mentions that renaming NTuser.DAT to NTuser.MAN
+turns a profile into a mandatory one.</P
+><DIV
+CLASS="NOTE"
+><BLOCKQUOTE
+CLASS="NOTE"
+><P
+><B
+>Note: </B
+>[lkcl 10aug97 - i notice that NT Workstation tells me that it is
+downloading a profile from a slow link. whether this is actually the
+case, or whether there is some configuration issue, as yet unknown,
+that makes NT Workstation _think_ that the link is a slow one is a
+matter to be resolved].</P
+><P
+>[lkcl 20aug97 - after samba digest correspondence, one user found, and
+another confirmed, that profiles cannot be loaded from a samba server
+unless "security = user" and "encrypt passwords = yes" (see the file
+ENCRYPTION.txt) or "security = server" and "password server = ip.address.
+of.yourNTserver" are used. Either of these options will allow the NT
+workstation to access the samba server using LAN manager encrypted
+passwords, without the user intervention normally required by NT
+workstation for clear-text passwords].</P
+><P
+>[lkcl 25aug97 - more comments received about NT profiles: the case of
+the profile _matters_. the file _must_ be called NTuser.DAT or, for
+a mandatory profile, NTuser.MAN].</P
+></BLOCKQUOTE
+></DIV
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H3
+CLASS="SECT3"
+><A
+NAME="AEN500"
+>Windows NT Server</A
+></H3
+><P
+>There is nothing to stop you specifying any path that you like for the
+location of users' profiles. Therefore, you could specify that the
+profile be stored on a samba server, or any other SMB server, as long as
+that SMB server supports encrypted passwords.</P
+></DIV
+><DIV
+CLASS="SECT3"
+><HR><H3
+CLASS="SECT3"
+><A
+NAME="AEN503"
+>Sharing Profiles between W95 and NT Workstation 4.0</A
+></H3
+><DIV
+CLASS="WARNING"
+><P
+></P
+><TABLE
+CLASS="WARNING"
+BORDER="1"
+WIDTH="100%"
+><TR
+><TD
+ALIGN="CENTER"
+><B
+>Potentially outdated or incorrect material follows</B
+></TD
+></TR
+><TR
+><TD
+ALIGN="LEFT"
+><P
+>I think this is all bogus, but have not deleted it. (Richard Sharpe)</P
+></TD
+></TR
+></TABLE
+></DIV
+><P
+>The default logon path is \\%N\%U. NT Workstation will attempt to create
+a directory "\\samba-server\username.PDS" if you specify the logon path
+as "\\samba-server\username" with the NT User Manager. Therefore, you
+will need to specify (for example) "\\samba-server\username\profile".
+NT 4.0 will attempt to create "\\samba-server\username\profile.PDS", which
+is more likely to succeed.</P
+><P
+>If you then want to share the same Start Menu / Desktop with W95, you will
+need to specify "logon path = \\samba-server\username\profile" [lkcl 10aug97
+this has its drawbacks: i created a shortcut to telnet.exe, which attempts
+to run from the c:\winnt\system32 directory. this directory is obviously
+unlikely to exist on a Win95-only host].</P
+><P
+> If you have this set up correctly, you will find separate user.DAT and
+NTuser.DAT files in the same profile directory.</P
+><DIV
+CLASS="NOTE"
+><BLOCKQUOTE
+CLASS="NOTE"
+><P
+><B
+>Note: </B
+>[lkcl 25aug97 - there are some issues to resolve with downloading of
+NT profiles, probably to do with time/date stamps. i have found that
+NTuser.DAT is never updated on the workstation after the first time that
+it is copied to the local workstation profile directory. this is in
+contrast to w95, where it _does_ transfer / update profiles correctly].</P
+></BLOCKQUOTE
+></DIV
+></DIV
+></DIV
+></DIV
+><DIV
+CLASS="SECT1"
+><HR><H1
+CLASS="SECT1"
+><A
+NAME="AEN513"
+>DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba</A
+></H1
+><DIV
+CLASS="WARNING"
+><P
+></P
+><TABLE
+CLASS="WARNING"
+BORDER="1"
+WIDTH="100%"
+><TR
+><TD
+ALIGN="CENTER"
+><B
+>Possibly Outdated Material</B
+></TD
+></TR
+><TR
+><TD
+ALIGN="LEFT"
+><P
+> This appendix was originally authored by John H Terpstra of
+ the Samba Team and is included here for posterity.
+ </P
+></TD
+></TR
+></TABLE
+></DIV
+><P
+><I
+CLASS="EMPHASIS"
+>NOTE :</I
+>
+The term "Domain Controller" and those related to it refer to one specific
+method of authentication that can underly an SMB domain. Domain Controllers
+prior to Windows NT Server 3.1 were sold by various companies and based on
+private extensions to the LAN Manager 2.1 protocol. Windows NT introduced
+Microsoft-specific ways of distributing the user authentication database.
+See DOMAIN.txt for examples of how Samba can participate in or create
+SMB domains based on shared authentication database schemes other than the
+Windows NT SAM.</P
+><P
+>Windows NT Server can be installed as either a plain file and print server
+(WORKGROUP workstation or server) or as a server that participates in Domain
+Control (DOMAIN member, Primary Domain controller or Backup Domain controller).
+The same is true for OS/2 Warp Server, Digital Pathworks and other similar
+products, all of which can participate in Domain Control along with Windows NT.</P
+><P
+>To many people these terms can be confusing, so let's try to clear the air.</P
+><P
+>Every Windows NT system (workstation or server) has a registry database.
+The registry contains entries that describe the initialization information
+for all services (the equivalent of Unix Daemons) that run within the Windows
+NT environment. The registry also contains entries that tell application
+software where to find dynamically loadable libraries that they depend upon.
+In fact, the registry contains entries that describes everything that anything
+may need to know to interact with the rest of the system.</P
+><P
+>The registry files can be located on any Windows NT machine by opening a
+command prompt and typing:</P
+><P
+><TT
+CLASS="PROMPT"
+>C:\WINNT\></TT
+> dir %SystemRoot%\System32\config</P
+><P
+>The environment variable %SystemRoot% value can be obtained by typing:</P
+><P
+><TT
+CLASS="PROMPT"
+>C:\WINNT></TT
+>echo %SystemRoot%</P
+><P
+>The active parts of the registry that you may want to be familiar with are
+the files called: default, system, software, sam and security.</P
+><P
+>In a domain environment, Microsoft Windows NT domain controllers participate
+in replication of the SAM and SECURITY files so that all controllers within
+the domain have an exactly identical copy of each.</P
+><P
+>The Microsoft Windows NT system is structured within a security model that
+says that all applications and services must authenticate themselves before
+they can obtain permission from the security manager to do what they set out
+to do.</P
+><P
+>The Windows NT User database also resides within the registry. This part of
+the registry contains the user's security identifier, home directory, group
+memberships, desktop profile, and so on.</P
+><P
+>Every Windows NT system (workstation as well as server) will have its own
+registry. Windows NT Servers that participate in Domain Security control
+have a database that they share in common - thus they do NOT own an
+independent full registry database of their own, as do Workstations and
+plain Servers.</P
+><P
+>The User database is called the SAM (Security Access Manager) database and
+is used for all user authentication as well as for authentication of inter-
+process authentication (i.e. to ensure that the service action a user has
+requested is permitted within the limits of that user's privileges).</P
+><P
+>The Samba team have produced a utility that can dump the Windows NT SAM into
+smbpasswd format: see ENCRYPTION.txt for information on smbpasswd and
+/pub/samba/pwdump on your nearest Samba mirror for the utility. This
+facility is useful but cannot be easily used to implement SAM replication
+to Samba systems.</P
+><P
+>Windows for Workgroups, Windows 95, and Windows NT Workstations and Servers
+can participate in a Domain security system that is controlled by Windows NT
+servers that have been correctly configured. Almost every domain will have
+ONE Primary Domain Controller (PDC). It is desirable that each domain will
+have at least one Backup Domain Controller (BDC).</P
+><P
+>The PDC and BDCs then participate in replication of the SAM database so that
+each Domain Controlling participant will have an up to date SAM component
+within its registry.</P
+></DIV
+></DIV
+></BODY
+></HTML
+>
\ No newline at end of file
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="General installation"
-HREF="introduction.html"><LINK
REL="PREVIOUS"
-TITLE="Oplocks"
-HREF="oplocks.html"><LINK
+TITLE="Improved browsing in samba"
+HREF="improved-browsing.html"><LINK
REL="NEXT"
-TITLE="LanMan and NT Password Encryption in Samba"
-HREF="pwencrypt.html"></HEAD
+TITLE="Samba performance issues"
+HREF="speed.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="oplocks.html"
+HREF="improved-browsing.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="pwencrypt.html"
+HREF="speed.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="BROWSING-QUICK"
></A
->Chapter 4. Quick Cross Subnet Browsing / Cross Workgroup Browsing guide</H1
+>Chapter 16. Quick Cross Subnet Browsing / Cross Workgroup Browsing guide</H1
><P
>This document should be read in conjunction with Browsing and may
be taken as the fast track guide to implementing browsing across subnets
><H1
CLASS="SECT1"
><A
-NAME="AEN393"
+NAME="AEN2665"
></A
->4.1. Discussion</H1
+>16.1. Discussion</H1
><P
>Firstly, all MS Windows networking is based on SMB (Server Message
Block) based messaging. SMB messaging is implemented using NetBIOS. Samba
><H1
CLASS="SECT1"
><A
-NAME="AEN401"
+NAME="AEN2673"
></A
->4.2. Use of the "Remote Announce" parameter</H1
+>16.2. Use of the "Remote Announce" parameter</H1
><P
>The "remote announce" parameter of smb.conf can be used to forcibly ensure
that all the NetBIOS names on a network get announced to a remote network.
><H1
CLASS="SECT1"
><A
-NAME="AEN415"
+NAME="AEN2687"
></A
->4.3. Use of the "Remote Browse Sync" parameter</H1
+>16.3. Use of the "Remote Browse Sync" parameter</H1
><P
>The "remote browse sync" parameter of smb.conf is used to announce to
another LMB that it must synchronise it's NetBIOS name list with our
><H1
CLASS="SECT1"
><A
-NAME="AEN420"
+NAME="AEN2692"
></A
->4.4. Use of WINS</H1
+>16.4. Use of WINS</H1
><P
>Use of WINS (either Samba WINS _or_ MS Windows NT Server WINS) is highly
recommended. Every NetBIOS machine registers it's name together with a
><H1
CLASS="SECT1"
><A
-NAME="AEN431"
+NAME="AEN2703"
></A
->4.5. Do NOT use more than one (1) protocol on MS Windows machines</H1
+>16.5. Do NOT use more than one (1) protocol on MS Windows machines</H1
><P
>A very common cause of browsing problems results from installing more than
one protocol on an MS Windows machine.</P
><H1
CLASS="SECT1"
><A
-NAME="AEN437"
+NAME="AEN2709"
></A
->4.6. Name Resolution Order</H1
+>16.6. Name Resolution Order</H1
><P
>Resolution of NetBIOS names to IP addresses can take place using a number
of methods. The only ones that can provide NetBIOS name_type information
ALIGN="left"
VALIGN="top"
><A
-HREF="oplocks.html"
+HREF="improved-browsing.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="pwencrypt.html"
+HREF="speed.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Oplocks</TD
+>Improved browsing in samba</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="introduction.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->LanMan and NT Password Encryption in Samba</TD
+>Samba performance issues</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Appendixes"
-HREF="appendixes.html"><LINK
REL="PREVIOUS"
-TITLE="Samba and other CIFS clients"
-HREF="other-clients.html"><LINK
+TITLE="HOWTO Access Samba source code via CVS"
+HREF="cvs-access.html"><LINK
REL="NEXT"
-TITLE="Diagnosing your samba server"
-HREF="diagnosis.html"></HEAD
+TITLE="Group mapping HOWTO"
+HREF="groupmapping.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="other-clients.html"
+HREF="cvs-access.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="diagnosis.html"
+HREF="groupmapping.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="BUGREPORT"
></A
->Chapter 26. Reporting Bugs</H1
+>Chapter 19. Reporting Bugs</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3368"
+NAME="AEN2921"
></A
->26.1. Introduction</H1
+>19.1. Introduction</H1
><P
->The email address for bug reports for stable releases is <A
-HREF="samba@samba.org"
-TARGET="_top"
->samba@samba.org</A
->.
-Bug reports for alpha releases should go to <A
-HREF="mailto:samba-technical@samba.org"
-TARGET="_top"
->samba-technical@samba.org</A
->.</P
+>The email address for bug reports is samba@samba.org</P
><P
>Please take the time to read this file before you submit a bug
report. Also, please see if it has changed between releases, as we
><P
>You may also like to look though the recent mailing list archives,
which are conveniently accessible on the Samba web pages
-at <A
-HREF="http://samba.org/samba/"
-TARGET="_top"
->http://samba.org/samba/</A
->.</P
+at http://samba.org/samba/ </P
></DIV
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3378"
+NAME="AEN2928"
></A
->26.2. General info</H1
+>19.2. General info</H1
><P
>Before submitting a bug report check your config for silly
errors. Look in your log files for obvious messages that tell you that
><H1
CLASS="SECT1"
><A
-NAME="AEN3384"
+NAME="AEN2934"
></A
->26.3. Debug levels</H1
+>19.3. Debug levels</H1
><P
>If the bug has anything to do with Samba behaving incorrectly as a
server (like refusing to open a file) then the log files will probably
><H1
CLASS="SECT1"
><A
-NAME="AEN3401"
+NAME="AEN2951"
></A
->26.4. Internal errors</H1
+>19.4. Internal errors</H1
><P
>If you get a "INTERNAL ERROR" message in your log files it means that
Samba got an unexpected signal while running. It is probably a
><H1
CLASS="SECT1"
><A
-NAME="AEN3411"
+NAME="AEN2961"
></A
->26.5. Attaching to a running process</H1
+>19.5. Attaching to a running process</H1
><P
>Unfortunately some unixes (in particular some recent linux kernels)
refuse to dump a core file if the task has changed uid (which smbd
><H1
CLASS="SECT1"
><A
-NAME="AEN3414"
+NAME="AEN2964"
></A
->26.6. Patches</H1
+>19.6. Patches</H1
><P
>The best sort of bug report is one that includes a fix! If you send us
patches please use <B
ALIGN="left"
VALIGN="top"
><A
-HREF="other-clients.html"
+HREF="cvs-access.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="diagnosis.html"
+HREF="groupmapping.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Samba and other CIFS clients</TD
+>HOWTO Access Samba source code via CVS</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="appendixes.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Diagnosing your samba server</TD
+>Group mapping HOWTO</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="Storing Samba's User/Machine Account information in an LDAP Directory"
-HREF="samba-ldap-howto.html"><LINK
+TITLE="Samba performance issues"
+HREF="speed.html"><LINK
REL="NEXT"
-TITLE="Group mapping HOWTO"
-HREF="groupmapping.html"></HEAD
+TITLE="Reporting Bugs"
+HREF="bugreport.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="samba-ldap-howto.html"
+HREF="speed.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="groupmapping.html"
+HREF="bugreport.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="CVS-ACCESS"
></A
->Chapter 21. HOWTO Access Samba source code via CVS</H1
+>Chapter 18. HOWTO Access Samba source code via CVS</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN2974"
+NAME="AEN2873"
></A
->21.1. Introduction</H1
+>18.1. Introduction</H1
><P
>Samba is developed in an open environment. Developers use CVS
(Concurrent Versioning System) to "checkin" (also known as
><H1
CLASS="SECT1"
><A
-NAME="AEN2979"
+NAME="AEN2878"
></A
->21.2. CVS Access to samba.org</H1
+>18.2. CVS Access to samba.org</H1
><P
>The machine samba.org runs a publicly accessible CVS
repository for access to the source code of several packages,
><H2
CLASS="SECT2"
><A
-NAME="AEN2982"
+NAME="AEN2881"
></A
->21.2.1. Access via CVSweb</H2
+>18.2.1. Access via CVSweb</H2
><P
>You can access the source code via your
favourite WWW browser. This allows you to access the contents of
><H2
CLASS="SECT2"
><A
-NAME="AEN2987"
+NAME="AEN2886"
></A
->21.2.2. Access via cvs</H2
+>18.2.2. Access via cvs</H2
><P
>You can also access the source code via a
normal cvs client. This gives you much more control over you can
ALIGN="left"
VALIGN="top"
><A
-HREF="samba-ldap-howto.html"
+HREF="speed.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="groupmapping.html"
+HREF="bugreport.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Storing Samba's User/Machine Account information in an LDAP Directory</TD
+>Samba performance issues</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Group mapping HOWTO</TD
+>Reporting Bugs</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Appendixes"
-HREF="appendixes.html"><LINK
REL="PREVIOUS"
-TITLE="Reporting Bugs"
-HREF="bugreport.html"></HEAD
+TITLE="Samba and other CIFS clients"
+HREF="other-clients.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="bugreport.html"
+HREF="other-clients.html"
ACCESSKEY="P"
>Prev</A
></TD
><A
NAME="DIAGNOSIS"
></A
->Chapter 27. Diagnosing your samba server</H1
+>Chapter 23. Diagnosing your samba server</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3437"
+NAME="AEN3184"
></A
->27.1. Introduction</H1
+>23.1. Introduction</H1
><P
>This file contains a list of tests you can perform to validate your
Samba server. It also tells you what the likely cause of the problem
is if it fails any one of these steps. If it passes all these tests
then it is probably working fine.</P
><P
->You should do ALL the tests, in the order shown. We have tried to
+>You should do ALL the tests, in the order shown. I have tried to
carefully choose them so later tests only use capabilities verified in
the earlier tests.</P
><P
->If you send one of the samba mailing lists an email saying "it doesn't work"
-and you have not followed this test procedure then you should not be surprised
-your email is ignored.</P
+>If you send me an email saying "it doesn't work" and you have not
+followed this test procedure then you should not be surprised if I
+ignore your email.</P
></DIV
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3442"
+NAME="AEN3189"
></A
->27.2. Assumptions</H1
+>23.2. Assumptions</H1
><P
->In all of the tests it is assumed you have a Samba server called
-BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP.</P
+>In all of the tests I assume you have a Samba server called BIGSERVER
+and a PC called ACLIENT both in workgroup TESTGROUP. I also assume the
+PC is running windows for workgroups with a recent copy of the
+microsoft tcp/ip stack. Alternatively, your PC may be running Windows
+95 or Windows NT (Workstation or Server).</P
><P
>The procedure is similar for other types of clients.</P
><P
->It is also assumed you know the name of an available share in your
+>I also assume you know the name of an available share in your
smb.conf. I will assume this share is called "tmp". You can add a
"tmp" share like by adding the following to smb.conf:</P
><P
read only = yes </PRE
></P
><P
->THESE TESTS ASSUME VERSION 3.0.0 OR LATER OF THE SAMBA SUITE. SOME
+>THESE TESTS ASSUME VERSION 2.0.6 OR LATER OF THE SAMBA SUITE. SOME
COMMANDS SHOWN DID NOT EXIST IN EARLIER VERSIONS</P
><P
>Please pay attention to the error messages you receive. If any error message
><H1
CLASS="SECT1"
><A
-NAME="AEN3452"
+NAME="AEN3199"
></A
->27.3. Tests</H1
+>23.3. Tests</H1
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN3454"
+NAME="AEN3201"
></A
->27.3.1. Test 1</H2
+>23.3.1. Test 1</H2
><P
>In the directory in which you store your smb.conf file, run the command
"testparm smb.conf". If it reports any errors then your smb.conf
><P
>Note: Your smb.conf file may be located in: <TT
CLASS="FILENAME"
->/etc/samba</TT
+>/etc</TT
>
Or in: <TT
CLASS="FILENAME"
><H2
CLASS="SECT2"
><A
-NAME="AEN3460"
+NAME="AEN3207"
></A
->27.3.2. Test 2</H2
+>23.3.2. Test 2</H2
><P
>Run the command "ping BIGSERVER" from the PC and "ping ACLIENT" from
the unix box. If you don't get a valid response then your TCP/IP
><H2
CLASS="SECT2"
><A
-NAME="AEN3466"
+NAME="AEN3213"
></A
->27.3.3. Test 3</H2
+>23.3.3. Test 3</H2
><P
>Run the command "smbclient -L BIGSERVER" on the unix box. You
should get a list of available shares back. </P
><H2
CLASS="SECT2"
><A
-NAME="AEN3481"
+NAME="AEN3228"
></A
->27.3.4. Test 4</H2
+>23.3.4. Test 4</H2
><P
>Run the command "nmblookup -B BIGSERVER __SAMBA__". You should get the
IP address of your Samba server back.</P
><H2
CLASS="SECT2"
><A
-NAME="AEN3486"
+NAME="AEN3233"
></A
->27.3.5. Test 5</H2
+>23.3.5. Test 5</H2
><P
>run the command <B
CLASS="COMMAND"
><H2
CLASS="SECT2"
><A
-NAME="AEN3492"
+NAME="AEN3239"
></A
->27.3.6. Test 6</H2
+>23.3.6. Test 6</H2
><P
>Run the command <B
CLASS="COMMAND"
><H2
CLASS="SECT2"
><A
-NAME="AEN3500"
+NAME="AEN3247"
></A
->27.3.7. Test 7</H2
+>23.3.7. Test 7</H2
><P
>Run the command <B
CLASS="COMMAND"
><H2
CLASS="SECT2"
><A
-NAME="AEN3526"
+NAME="AEN3273"
></A
->27.3.8. Test 8</H2
+>23.3.8. Test 8</H2
><P
>On the PC type the command <B
CLASS="COMMAND"
><H2
CLASS="SECT2"
><A
-NAME="AEN3543"
+NAME="AEN3290"
></A
->27.3.9. Test 9</H2
+>23.3.9. Test 9</H2
><P
>Run the command <B
CLASS="COMMAND"
><H2
CLASS="SECT2"
><A
-NAME="AEN3551"
+NAME="AEN3298"
></A
->27.3.10. Test 10</H2
+>23.3.10. Test 10</H2
><P
>Run the command <B
CLASS="COMMAND"
><H2
CLASS="SECT2"
><A
-NAME="AEN3557"
+NAME="AEN3304"
></A
->27.3.11. Test 11</H2
+>23.3.11. Test 11</H2
><P
>From file manager try to browse the server. Your samba server should
appear in the browse list of your local workgroup (or the one you
><H1
CLASS="SECT1"
><A
-NAME="AEN3562"
+NAME="AEN3309"
></A
->27.4. Still having troubles?</H1
+>23.4. Still having troubles?</H1
><P
>Try the mailing list or newsgroup, or use the ethereal utility to
sniff the problem. The official samba mailing list can be reached at
ALIGN="left"
VALIGN="top"
><A
-HREF="bugreport.html"
+HREF="other-clients.html"
ACCESSKEY="P"
>Prev</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Reporting Bugs</TD
+>Samba and other CIFS clients</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="appendixes.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
<HTML
><HEAD
><TITLE
->Samba as a NT4 domain member</TITLE
+>security = domain in Samba 2.x</TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet Version 1.77"><LINK
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Type of installation"
-HREF="type.html"><LINK
REL="PREVIOUS"
-TITLE="Samba as a ADS domain member"
-HREF="ads.html"><LINK
+TITLE="Security levels"
+HREF="securitylevels.html"><LINK
REL="NEXT"
-TITLE="Optional configuration"
-HREF="optional.html"></HEAD
+TITLE="Unified Logons between Windows NT and UNIX using Winbind"
+HREF="winbind.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="ads.html"
+HREF="securitylevels.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="optional.html"
+HREF="winbind.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="DOMAIN-SECURITY"
></A
->Chapter 10. Samba as a NT4 domain member</H1
+>Chapter 9. security = domain in Samba 2.x</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN1286"
+NAME="AEN1133"
></A
->10.1. Joining an NT Domain with Samba 2.2</H1
+>9.1. Joining an NT Domain with Samba 2.2</H1
><P
>Assume you have a Samba 2.x server with a NetBIOS name of
<TT
><H1
CLASS="SECT1"
><A
-NAME="AEN1350"
+NAME="AEN1197"
></A
->10.2. Samba and Windows 2000 Domains</H1
+>9.2. Samba and Windows 2000 Domains</H1
><P
>Many people have asked regarding the state of Samba's ability to participate in
-a Windows 2000 Domain. Samba 3.0 is able to act as a member server of a Windows
+a Windows 2000 Domain. Samba 2.2 is able to act as a member server of a Windows
2000 domain operating in mixed or native mode.</P
><P
>There is much confusion between the circumstances that require a "mixed" mode
><H1
CLASS="SECT1"
><A
-NAME="AEN1355"
+NAME="AEN1202"
></A
->10.3. Why is this better than security = server?</H1
+>9.3. Why is this better than security = server?</H1
><P
>Currently, domain security in Samba doesn't free you from
having to create local Unix users to represent the users attaching
ALIGN="left"
VALIGN="top"
><A
-HREF="ads.html"
+HREF="securitylevels.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="optional.html"
+HREF="winbind.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Samba as a ADS domain member</TD
+>Security levels</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="type.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Optional configuration</TD
+>Unified Logons between Windows NT and UNIX using Winbind</TD
></TR
></TABLE
></DIV
><H2
>VERSION</H2
><P
->This man page is correct for version 3.0 of
+>This man page is correct for version 2.2 of
the Samba suite.</P
></DIV
><DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="HOWTO Access Samba source code via CVS"
-HREF="cvs-access.html"><LINK
+TITLE="Reporting Bugs"
+HREF="bugreport.html"><LINK
REL="NEXT"
-TITLE="Samba performance issues"
-HREF="speed.html"></HEAD
+TITLE="Portability"
+HREF="portability.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="cvs-access.html"
+HREF="bugreport.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="speed.html"
+HREF="portability.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="GROUPMAPPING"
></A
->Chapter 22. Group mapping HOWTO</H1
+>Chapter 20. Group mapping HOWTO</H1
><P
>
Starting with Samba 3.0 alpha 2, a new group mapping function is available. The
ALIGN="left"
VALIGN="top"
><A
-HREF="cvs-access.html"
+HREF="bugreport.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="speed.html"
+HREF="portability.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->HOWTO Access Samba source code via CVS</TD
+>Reporting Bugs</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Samba performance issues</TD
+>Portability</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="General installation"
-HREF="introduction.html"><LINK
REL="PREVIOUS"
-TITLE="How to Install and Test SAMBA"
-HREF="install.html"><LINK
+TITLE="Using samba 3.0 with ActiveDirectory support"
+HREF="ads.html"><LINK
REL="NEXT"
-TITLE="Oplocks"
-HREF="oplocks.html"></HEAD
+TITLE="Quick Cross Subnet Browsing / Cross Workgroup Browsing guide"
+HREF="browsing-quick.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="install.html"
+HREF="ads.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="oplocks.html"
+HREF="browsing-quick.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="IMPROVED-BROWSING"
></A
->Chapter 2. Improved browsing in samba</H1
+>Chapter 15. Improved browsing in samba</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN229"
+NAME="AEN2517"
></A
->2.1. Overview of browsing</H1
+>15.1. Overview of browsing</H1
><P
>SMB networking provides a mechanism by which clients can access a list
of machines in a network, a so-called "browse list". This list
><H1
CLASS="SECT1"
><A
-NAME="AEN233"
+NAME="AEN2521"
></A
->2.2. Browsing support in samba</H1
+>15.2. Browsing support in samba</H1
><P
>Samba now fully supports browsing. The browsing is supported by nmbd
and is also controlled by options in the smb.conf file (see smb.conf(5)).</P
><H1
CLASS="SECT1"
><A
-NAME="AEN242"
+NAME="AEN2530"
></A
->2.3. Problem resolution</H1
+>15.3. Problem resolution</H1
><P
>If something doesn't work then hopefully the log.nmb file will help
you track down the problem. Try a debug level of 2 or 3 for finding
><H1
CLASS="SECT1"
><A
-NAME="AEN249"
+NAME="AEN2537"
></A
->2.4. Browsing across subnets</H1
+>15.4. Browsing across subnets</H1
><P
>With the release of Samba 1.9.17(alpha1 and above) Samba has been
updated to enable it to support the replication of browse lists
><H2
CLASS="SECT2"
><A
-NAME="AEN254"
+NAME="AEN2542"
></A
->2.4.1. How does cross subnet browsing work ?</H2
+>15.4.1. How does cross subnet browsing work ?</H2
><P
>Cross subnet browsing is a complicated dance, containing multiple
moving parts. It has taken Microsoft several years to get the code
><H1
CLASS="SECT1"
><A
-NAME="AEN289"
+NAME="AEN2577"
></A
->2.5. Setting up a WINS server</H1
+>15.5. Setting up a WINS server</H1
><P
>Either a Samba machine or a Windows NT Server machine may be set up
as a WINS server. To set a Samba machine to be a WINS server you must
><P
><B
CLASS="COMMAND"
->wins server = >name or IP address<</B
+> wins server = >name or IP address<</B
></P
><P
>where >name or IP address< is either the DNS name of the WINS server
><H1
CLASS="SECT1"
><A
-NAME="AEN308"
+NAME="AEN2596"
></A
->2.6. Setting up Browsing in a WORKGROUP</H1
+>15.6. Setting up Browsing in a WORKGROUP</H1
><P
>To set up cross subnet browsing on a network containing machines
in up to be in a WORKGROUP, not an NT Domain you need to set up one
><P
><B
CLASS="COMMAND"
->domain master = yes</B
+> domain master = yes</B
></P
><P
>The domain master browser should also preferrably be the local master
><H1
CLASS="SECT1"
><A
-NAME="AEN326"
+NAME="AEN2614"
></A
->2.7. Setting up Browsing in a DOMAIN</H1
+>15.7. Setting up Browsing in a DOMAIN</H1
><P
>If you are adding Samba servers to a Windows NT Domain then
you must not set up a Samba server as a domain master browser.
><H1
CLASS="SECT1"
><A
-NAME="AEN336"
+NAME="AEN2624"
></A
->2.8. Forcing samba to be the master</H1
+>15.8. Forcing samba to be the master</H1
><P
>Who becomes the "master browser" is determined by an election process
using broadcasts. Each election packet contains a number of parameters
><H1
CLASS="SECT1"
><A
-NAME="AEN345"
+NAME="AEN2633"
></A
->2.9. Making samba the domain master</H1
+>15.9. Making samba the domain master</H1
><P
>The domain master is responsible for collating the browse lists of
multiple subnets so that browsing can occur between subnets. You can
><H1
CLASS="SECT1"
><A
-NAME="AEN363"
+NAME="AEN2651"
></A
->2.10. Note about broadcast addresses</H1
+>15.10. Note about broadcast addresses</H1
><P
>If your network uses a "0" based broadcast address (for example if it
ends in a 0) then you will strike problems. Windows for Workgroups
><H1
CLASS="SECT1"
><A
-NAME="AEN366"
+NAME="AEN2654"
></A
->2.11. Multiple interfaces</H1
+>15.11. Multiple interfaces</H1
><P
>Samba now supports machines with multiple network interfaces. If you
have multiple interfaces then you will need to use the "interfaces"
ALIGN="left"
VALIGN="top"
><A
-HREF="install.html"
+HREF="ads.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="oplocks.html"
+HREF="browsing-quick.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->How to Install and Test SAMBA</TD
+>Using samba 3.0 with ActiveDirectory support</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="introduction.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Oplocks</TD
+>Quick Cross Subnet Browsing / Cross Workgroup Browsing guide</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="General installation"
-HREF="introduction.html"><LINK
REL="PREVIOUS"
-TITLE="General installation"
-HREF="introduction.html"><LINK
+TITLE="SAMBA Project Documentation"
+HREF="samba-howto-collection.html"><LINK
REL="NEXT"
-TITLE="Improved browsing in samba"
-HREF="improved-browsing.html"></HEAD
+TITLE="Integrating MS Windows networks with Samba"
+HREF="integrate-ms-networks.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="introduction.html"
+HREF="samba-howto-collection.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="improved-browsing.html"
+HREF="integrate-ms-networks.html"
ACCESSKEY="N"
>Next</A
></TD
><H1
CLASS="SECT1"
><A
-NAME="AEN26"
+NAME="AEN20"
></A
->1.1. Read the man pages</H1
+>1.1. Step 0: Read the man pages</H1
><P
>The man pages distributed with SAMBA contain
lots of useful info that will help to get you started.
><TT
CLASS="USERINPUT"
><B
->man smbd.8</B
-></TT
->
- or
- <TT
-CLASS="PROMPT"
->$ </TT
-><TT
-CLASS="USERINPUT"
-><B
>nroff -man smbd.8 | more
</B
></TT
-> on older unixes.</P
+></P
><P
>Other sources of information are pointed to
by the Samba web site,<A
><H1
CLASS="SECT1"
><A
-NAME="AEN36"
+NAME="AEN28"
></A
->1.2. Building the Binaries</H1
+>1.2. Step 1: Building the Binaries</H1
><P
>To do this, first run the program <B
CLASS="COMMAND"
><H1
CLASS="SECT1"
><A
-NAME="AEN64"
+NAME="AEN56"
></A
->1.3. The all important step</H1
+>1.3. Step 2: The all important step</H1
><P
>At this stage you must fetch yourself a
coffee or other drink you find stimulating. Getting the rest
><H1
CLASS="SECT1"
><A
-NAME="AEN68"
+NAME="AEN60"
></A
->1.4. Create the smb configuration file.</H1
+>1.4. Step 3: Create the smb configuration file.</H1
><P
>There are sample configuration files in the examples
subdirectory in the distribution. I suggest you read them
><H1
CLASS="SECT1"
><A
-NAME="AEN82"
+NAME="AEN74"
></A
->1.5. Test your config file with
+>1.5. Step 4: Test your config file with
<B
CLASS="COMMAND"
>testparm</B
><P
>Make sure it runs OK and that the services look
reasonable before proceeding. </P
-><P
->Always run testparm again when you change
- <TT
-CLASS="FILENAME"
->smb.conf</TT
->!</P
></DIV
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN90"
+NAME="AEN80"
></A
->1.6. Starting the smbd and nmbd</H1
+>1.6. Step 5: Starting the smbd and nmbd</H1
><P
>You must choose to start smbd and nmbd either
as daemons or from <B
><H2
CLASS="SECT2"
><A
-NAME="AEN100"
+NAME="AEN90"
></A
->1.6.1. Starting from inetd.conf</H2
+>1.6.1. Step 5a: Starting from inetd.conf</H2
><P
>NOTE; The following will be different if
you use NIS or NIS+ to distributed services maps.</P
><H2
CLASS="SECT2"
><A
-NAME="AEN129"
+NAME="AEN119"
></A
->1.6.2. Alternative: starting it as a daemon</H2
+>1.6.2. Step 5b. Alternative: starting it as a daemon</H2
><P
>To start the server as a daemon you should create
a script something like this one, perhaps calling
><H1
CLASS="SECT1"
><A
-NAME="AEN145"
+NAME="AEN135"
></A
->1.7. Try listing the shares available on your
+>1.7. Step 6: Try listing the shares available on your
server</H1
><P
><TT
><H1
CLASS="SECT1"
><A
-NAME="AEN154"
+NAME="AEN144"
></A
->1.8. Try connecting with the unix client</H1
+>1.8. Step 7: Try connecting with the unix client</H1
><P
><TT
CLASS="PROMPT"
><H1
CLASS="SECT1"
><A
-NAME="AEN170"
+NAME="AEN160"
></A
->1.9. Try connecting from a DOS, WfWg, Win9x, WinNT,
+>1.9. Step 8: Try connecting from a DOS, WfWg, Win9x, WinNT,
Win2k, OS/2, etc... client</H1
><P
>Try mounting disks. eg:</P
><H1
CLASS="SECT1"
><A
-NAME="AEN184"
+NAME="AEN174"
></A
>1.10. What If Things Don't Work?</H1
><P
><H2
CLASS="SECT2"
><A
-NAME="AEN189"
+NAME="AEN179"
></A
>1.10.1. Diagnosing Problems</H2
><P
->If you have installation problems then go to the
- <A
-HREF="Diagnosis.html"
-TARGET="_top"
->Diagnosis</A
-> chapter to try to find the
+>If you have installation problems then go to
+ <TT
+CLASS="FILENAME"
+>DIAGNOSIS.txt</TT
+> to try to find the
problem.</P
></DIV
><DIV
><H2
CLASS="SECT2"
><A
-NAME="AEN193"
+NAME="AEN183"
></A
>1.10.2. Scope IDs</H2
><P
><H2
CLASS="SECT2"
><A
-NAME="AEN196"
+NAME="AEN186"
></A
>1.10.3. Choosing the Protocol Level</H2
><P
><H2
CLASS="SECT2"
><A
-NAME="AEN205"
+NAME="AEN195"
></A
>1.10.4. Printing from UNIX to a Client PC</H2
><P
><H2
CLASS="SECT2"
><A
-NAME="AEN210"
+NAME="AEN200"
></A
>1.10.5. Locking</H2
><P
><H2
CLASS="SECT2"
><A
-NAME="AEN219"
+NAME="AEN209"
></A
>1.10.6. Mapping Usernames</H2
><P
ALIGN="left"
VALIGN="top"
><A
-HREF="introduction.html"
+HREF="samba-howto-collection.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="improved-browsing.html"
+HREF="integrate-ms-networks.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->General installation</TD
+>SAMBA Project Documentation</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="introduction.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Improved browsing in samba</TD
+>Integrating MS Windows networks with Samba</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
+TITLE="How to Install and Test SAMBA"
+HREF="install.html"><LINK
REL="NEXT"
-TITLE="UNIX Permission Bits and Windows NT Access Control Lists"
-HREF="unix-permissions.html"></HEAD
+TITLE="Configuring PAM for distributed but centrally
+managed authentication"
+HREF="pam.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="optional.html"
+HREF="install.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="unix-permissions.html"
+HREF="pam.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="INTEGRATE-MS-NETWORKS"
></A
->Chapter 11. Integrating MS Windows networks with Samba</H1
+>Chapter 2. Integrating MS Windows networks with Samba</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN1387"
+NAME="AEN223"
></A
->11.1. Agenda</H1
+>2.1. Agenda</H1
><P
>To identify the key functional mechanisms of MS Windows networking
to enable the deployment of Samba as a means of extending and/or
><H1
CLASS="SECT1"
><A
-NAME="AEN1409"
+NAME="AEN245"
></A
->11.2. Name Resolution in a pure Unix/Linux world</H1
+>2.2. Name Resolution in a pure Unix/Linux world</H1
><P
>The key configuration files covered in this section are:</P
><P
><H2
CLASS="SECT2"
><A
-NAME="AEN1425"
+NAME="AEN261"
></A
->11.2.1. <TT
+>2.2.1. <TT
CLASS="FILENAME"
>/etc/hosts</TT
></H2
><H2
CLASS="SECT2"
><A
-NAME="AEN1441"
+NAME="AEN277"
></A
->11.2.2. <TT
+>2.2.2. <TT
CLASS="FILENAME"
>/etc/resolv.conf</TT
></H2
><H2
CLASS="SECT2"
><A
-NAME="AEN1452"
+NAME="AEN288"
></A
->11.2.3. <TT
+>2.2.3. <TT
CLASS="FILENAME"
>/etc/host.conf</TT
></H2
><H2
CLASS="SECT2"
><A
-NAME="AEN1460"
+NAME="AEN296"
></A
->11.2.4. <TT
+>2.2.4. <TT
CLASS="FILENAME"
>/etc/nsswitch.conf</TT
></H2
sent, TCP/IP networks are silent. All TCP/IP communications assumes a
principal of speaking only when necessary.</P
><P
->Starting with version 2.2.0 samba has Linux support for extensions to
+>Samba version 2.2.0 will add Linux support for extensions to
the name service switch infrastructure so that linux clients will
be able to obtain resolution of MS Windows NetBIOS names to IP
Addresses. To gain this functionality Samba needs to be compiled
><H1
CLASS="SECT1"
><A
-NAME="AEN1472"
+NAME="AEN308"
></A
->11.3. Name resolution as used within MS Windows networking</H1
+>2.3. Name resolution as used within MS Windows networking</H1
><P
>MS Windows networking is predicated about the name each machine
is given. This name is known variously (and inconsistently) as
><H2
CLASS="SECT2"
><A
-NAME="AEN1484"
+NAME="AEN320"
></A
->11.3.1. The NetBIOS Name Cache</H2
+>2.3.1. The NetBIOS Name Cache</H2
><P
>All MS Windows machines employ an in memory buffer in which is
stored the NetBIOS names and IP addresses for all external
><H2
CLASS="SECT2"
><A
-NAME="AEN1489"
+NAME="AEN325"
></A
->11.3.2. The LMHOSTS file</H2
+>2.3.2. The LMHOSTS file</H2
><P
>This file is usually located in MS Windows NT 4.0 or
2000 in <TT
><H2
CLASS="SECT2"
><A
-NAME="AEN1497"
+NAME="AEN333"
></A
->11.3.3. HOSTS file</H2
+>2.3.3. HOSTS file</H2
><P
>This file is usually located in MS Windows NT 4.0 or 2000 in
<TT
><H2
CLASS="SECT2"
><A
-NAME="AEN1502"
+NAME="AEN338"
></A
->11.3.4. DNS Lookup</H2
+>2.3.4. DNS Lookup</H2
><P
>This capability is configured in the TCP/IP setup area in the network
configuration facility. If enabled an elaborate name resolution sequence
><H2
CLASS="SECT2"
><A
-NAME="AEN1505"
+NAME="AEN341"
></A
->11.3.5. WINS Lookup</H2
+>2.3.5. WINS Lookup</H2
><P
>A WINS (Windows Internet Name Server) service is the equivaent of the
rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores
><H1
CLASS="SECT1"
><A
-NAME="AEN1517"
+NAME="AEN353"
></A
->11.4. How browsing functions and how to deploy stable and
+>2.4. How browsing functions and how to deploy stable and
dependable browsing using Samba</H1
><P
>As stated above, MS Windows machines register their NetBIOS names
><H1
CLASS="SECT1"
><A
-NAME="AEN1527"
+NAME="AEN363"
></A
->11.5. MS Windows security options and how to configure
+>2.5. MS Windows security options and how to configure
Samba for seemless integration</H1
><P
>MS Windows clients may use encrypted passwords as part of a
><H2
CLASS="SECT2"
><A
-NAME="AEN1555"
+NAME="AEN391"
></A
->11.5.1. Use MS Windows NT as an authentication server</H2
+>2.5.1. Use MS Windows NT as an authentication server</H2
><P
>This method involves the additions of the following parameters
in the smb.conf file:</P
><H2
CLASS="SECT2"
><A
-NAME="AEN1563"
+NAME="AEN399"
></A
->11.5.2. Make Samba a member of an MS Windows NT security domain</H2
+>2.5.2. Make Samba a member of an MS Windows NT security domain</H2
><P
>This method involves additon of the following paramters in the smb.conf file:</P
><P
><H2
CLASS="SECT2"
><A
-NAME="AEN1580"
+NAME="AEN416"
></A
->11.5.3. Configure Samba as an authentication server</H2
+>2.5.3. Configure Samba as an authentication server</H2
><P
>This mode of authentication demands that there be on the
Unix/Linux system both a Unix style account as well as an
><H3
CLASS="SECT3"
><A
-NAME="AEN1587"
+NAME="AEN423"
></A
->11.5.3.1. Users</H3
+>2.5.3.1. Users</H3
><P
>A user account that may provide a home directory should be
created. The following Linux system commands are typical of
><H3
CLASS="SECT3"
><A
-NAME="AEN1592"
+NAME="AEN428"
></A
->11.5.3.2. MS Windows NT Machine Accounts</H3
+>2.5.3.2. MS Windows NT Machine Accounts</H3
><P
>These are required only when Samba is used as a domain
controller. Refer to the Samba-PDC-HOWTO for more details.</P
><H1
CLASS="SECT1"
><A
-NAME="AEN1597"
+NAME="AEN433"
></A
->11.6. Conclusions</H1
+>2.6. Conclusions</H1
><P
>Samba provides a flexible means to operate as...</P
><P
ALIGN="left"
VALIGN="top"
><A
-HREF="optional.html"
+HREF="install.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="unix-permissions.html"
+HREF="pam.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Optional configuration</TD
+>How to Install and Test SAMBA</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->UNIX Permission Bits and Windows NT Access Control Lists</TD
+>Configuring PAM for distributed but centrally
+managed authentication</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
TITLE="Configuring PAM for distributed but centrally
managed authentication"
HREF="pam.html"><LINK
REL="NEXT"
-TITLE="Printing Support"
-HREF="printing.html"></HEAD
+TITLE="UNIX Permission Bits and Windows NT Access Control Lists"
+HREF="unix-permissions.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="right"
VALIGN="bottom"
><A
-HREF="printing.html"
+HREF="unix-permissions.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="MSDFS"
></A
->Chapter 14. Hosting a Microsoft Distributed File System tree on Samba</H1
+>Chapter 4. Hosting a Microsoft Distributed File System tree on Samba</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN1872"
+NAME="AEN525"
></A
->14.1. Instructions</H1
+>4.1. Instructions</H1
><P
>The Distributed File System (or Dfs) provides a means of
separating the logical view of files and directories that users
><H2
CLASS="SECT2"
><A
-NAME="AEN1907"
+NAME="AEN560"
></A
->14.1.1. Notes</H2
+>4.1.1. Notes</H2
><P
></P
><UL
ALIGN="right"
VALIGN="top"
><A
-HREF="printing.html"
+HREF="unix-permissions.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Printing Support</TD
+>UNIX Permission Bits and Windows NT Access Control Lists</TD
></TR
></TABLE
></DIV
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
<HTML
><HEAD
><TITLE
>nmbd</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
+"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
ALINK="#0000FF"
><H1
><A
-NAME="NMBD"
-></A
->nmbd</H1
+NAME="NMBD">nmbd</H1
><DIV
CLASS="REFNAMEDIV"
><A
><DIV
CLASS="REFSYNOPSISDIV"
><A
-NAME="AEN8"
-></A
-><H2
+NAME="AEN8"><H2
>Synopsis</H2
><P
><B
CLASS="COMMAND"
>nmbd</B
-> [-D] [-a] [-i] [-o] [-h] [-V] [-d <debug level>] [-H <lmhosts file>] [-l <log directory>] [-n <primary netbios name>] [-p <port number>] [-s <configuration file>]</P
+> [-D] [-a] [-i] [-o] [-h] [-V] [-d <debug level>] [-H <lmhosts file>] [-l <log directory>] [-n <primary netbios name>] [-p <port number>] [-s <configuration file>]</P
></DIV
><DIV
CLASS="REFSECT1"
specified it will respond with the IP number of the host it
is running on. Its "own NetBIOS name" is by
default the primary DNS name of the host it is running on,
- but this can be overridden with the <SPAN
-CLASS="emphasis"
-><I
+ but this can be overridden with the <I
CLASS="EMPHASIS"
>-n</I
-></SPAN
>
option (see OPTIONS below). Thus <B
CLASS="COMMAND"
>.</P
></DD
><DT
->-H <filename></DT
+>-H <filename></DT
><DD
><P
>NetBIOS lmhosts file. The lmhosts
></A
>
to resolve any NetBIOS name queries needed by the server. Note
- that the contents of this file are <SPAN
-CLASS="emphasis"
-><I
+ that the contents of this file are <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
>
used by <B
CLASS="COMMAND"
>nmbd</B
> to answer any name queries.
Adding a line to this file affects name NetBIOS resolution
- from this host <SPAN
-CLASS="emphasis"
-><I
+ from this host <I
CLASS="EMPHASIS"
>ONLY</I
-></SPAN
>.</P
><P
>The default path to this file is compiled into
>.</P
></DD
><DT
->-d <debug level></DT
+>-d <debug level></DT
><DD
><P
>debuglevel is an integer
> file.</P
></DD
><DT
->-l <log directory></DT
+>-l <log directory></DT
><DD
><P
>The -l parameter specifies a directory
<TT
CLASS="FILENAME"
>/var/log/log.nmb</TT
->. <SPAN
-CLASS="emphasis"
-><I
+>. <I
CLASS="EMPHASIS"
>Beware:</I
-></SPAN
>
If the directory specified does not exist, <B
CLASS="COMMAND"
</P
></DD
><DT
->-n <primary NetBIOS name></DT
+>-n <primary NetBIOS name></DT
><DD
><P
>This option allows you to override
>.</P
></DD
><DT
->-p <UDP port number></DT
+>-p <UDP port number></DT
><DD
><P
>UDP port number is a positive integer value.
won't need help!</P
></DD
><DT
->-s <configuration file></DT
+>-s <configuration file></DT
><DD
><P
>The default configuration file name
>If <B
CLASS="COMMAND"
>nmbd</B
-> is acting as a <SPAN
-CLASS="emphasis"
-><I
+> is acting as a <I
CLASS="EMPHASIS"
> browse master</I
-></SPAN
> (see the <A
HREF="smb.conf.5.html#LOCALMASTER"
TARGET="_top"
CLASS="COMMAND"
>nmbd</B
> process it is recommended
- that SIGKILL (-9) <SPAN
-CLASS="emphasis"
-><I
+ that SIGKILL (-9) <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
> be used, except as a last
resort, as this may leave the name database in an inconsistent state.
The correct way to terminate <B
><B
CLASS="COMMAND"
>nmblookup</B
-> [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] [-f] {name}</P
+> [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] {name}</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN25"
+NAME="AEN24"
></A
><H2
>DESCRIPTION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN31"
+NAME="AEN30"
></A
><H2
>OPTIONS</H2
> pair that is the normal output.</P
></DD
><DT
->-f</DT
-><DD
-><P
-> Show which flags apply to the name that has been looked up. Possible
- answers are zero or more of: Response, Authoritative,
- Truncated, Recursion_Desired, Recursion_Available, Broadcast.
- </P
-></DD
-><DT
>name</DT
><DD
><P
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN115"
+NAME="AEN110"
></A
><H2
>EXAMPLES</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN127"
+NAME="AEN122"
></A
><H2
>VERSION</H2
><P
->This man page is correct for version 3.0 of
+>This man page is correct for version 2.2 of
the Samba suite.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN130"
+NAME="AEN125"
></A
><H2
>SEE ALSO</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN137"
+NAME="AEN132"
></A
><H2
>AUTHOR</H2
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Appendixes"
-HREF="appendixes.html"><LINK
REL="PREVIOUS"
TITLE="Portability"
HREF="portability.html"><LINK
REL="NEXT"
-TITLE="Reporting Bugs"
-HREF="bugreport.html"></HEAD
+TITLE="Diagnosing your samba server"
+HREF="diagnosis.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="right"
VALIGN="bottom"
><A
-HREF="bugreport.html"
+HREF="diagnosis.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="OTHER-CLIENTS"
></A
->Chapter 25. Samba and other CIFS clients</H1
+>Chapter 22. Samba and other CIFS clients</H1
><P
>This chapter contains client-specific information.</P
><DIV
><H1
CLASS="SECT1"
><A
-NAME="AEN3258"
+NAME="AEN3070"
></A
->25.1. Macintosh clients?</H1
+>22.1. Macintosh clients?</H1
><P
>Yes. <A
HREF="http://www.thursby.com/"
><H1
CLASS="SECT1"
><A
-NAME="AEN3267"
+NAME="AEN3079"
></A
->25.2. OS2 Client</H1
+>22.2. OS2 Client</H1
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN3269"
+NAME="AEN3081"
></A
->25.2.1. How can I configure OS/2 Warp Connect or
+>22.2.1. How can I configure OS/2 Warp Connect or
OS/2 Warp 4 as a client for Samba?</H2
><P
>A more complete answer to this question can be
><H2
CLASS="SECT2"
><A
-NAME="AEN3284"
+NAME="AEN3096"
></A
->25.2.2. How can I configure OS/2 Warp 3 (not Connect),
+>22.2.2. How can I configure OS/2 Warp 3 (not Connect),
OS/2 1.2, 1.3 or 2.x for Samba?</H2
><P
>You can use the free Microsoft LAN Manager 2.2c Client
><H2
CLASS="SECT2"
><A
-NAME="AEN3293"
+NAME="AEN3105"
></A
->25.2.3. Are there any other issues when OS/2 (any version)
+>22.2.3. Are there any other issues when OS/2 (any version)
is used as a client?</H2
><P
>When you do a NET VIEW or use the "File and Print
><H2
CLASS="SECT2"
><A
-NAME="AEN3297"
+NAME="AEN3109"
></A
->25.2.4. How do I get printer driver download working
+>22.2.4. How do I get printer driver download working
for OS/2 clients?</H2
><P
>First, create a share called [PRINTDRV] that is
><H1
CLASS="SECT1"
><A
-NAME="AEN3307"
+NAME="AEN3119"
></A
->25.3. Windows for Workgroups</H1
+>22.3. Windows for Workgroups</H1
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN3309"
+NAME="AEN3121"
></A
->25.3.1. Use latest TCP/IP stack from Microsoft</H2
+>22.3.1. Use latest TCP/IP stack from Microsoft</H2
><P
>Use the latest TCP/IP stack from microsoft if you use Windows
for workgroups.</P
><H2
CLASS="SECT2"
><A
-NAME="AEN3314"
+NAME="AEN3126"
></A
->25.3.2. Delete .pwl files after password change</H2
+>22.3.2. Delete .pwl files after password change</H2
><P
>WfWg does a lousy job with passwords. I find that if I change my
password on either the unix box or the PC the safest thing to do is to
><H2
CLASS="SECT2"
><A
-NAME="AEN3319"
+NAME="AEN3131"
></A
->25.3.3. Configure WfW password handling</H2
+>22.3.3. Configure WfW password handling</H2
><P
>There is a program call admincfg.exe
on the last disk (disk 8) of the WFW 3.11 disk set. To install it
><H2
CLASS="SECT2"
><A
-NAME="AEN3323"
+NAME="AEN3135"
></A
->25.3.4. Case handling of passwords</H2
+>22.3.4. Case handling of passwords</H2
><P
>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <A
HREF="smb.conf.5.html"
><H1
CLASS="SECT1"
><A
-NAME="AEN3328"
+NAME="AEN3140"
></A
->25.4. Windows '95/'98</H1
+>22.4. Windows '95/'98</H1
><P
>When using Windows 95 OEM SR2 the following updates are recommended where Samba
is being used. Please NOTE that the above change will affect you once these
><H1
CLASS="SECT1"
><A
-NAME="AEN3344"
+NAME="AEN3156"
></A
->25.5. Windows 2000 Service Pack 2</H1
+>22.5. Windows 2000 Service Pack 2</H1
><P
>
There are several annoyances with Windows 2000 SP2. One of which
ALIGN="right"
VALIGN="top"
><A
-HREF="bugreport.html"
+HREF="diagnosis.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="appendixes.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Reporting Bugs</TD
+>Diagnosing your samba server</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="UNIX Permission Bits and Windows NT Access Control Lists"
-HREF="unix-permissions.html"><LINK
+TITLE="Integrating MS Windows networks with Samba"
+HREF="integrate-ms-networks.html"><LINK
REL="NEXT"
TITLE="Hosting a Microsoft Distributed File System tree on Samba"
HREF="msdfs.html"></HEAD
ALIGN="left"
VALIGN="bottom"
><A
-HREF="unix-permissions.html"
+HREF="integrate-ms-networks.html"
ACCESSKEY="P"
>Prev</A
></TD
><A
NAME="PAM"
></A
->Chapter 13. Configuring PAM for distributed but centrally
+>Chapter 3. Configuring PAM for distributed but centrally
managed authentication</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN1801"
+NAME="AEN454"
></A
->13.1. Samba and PAM</H1
+>3.1. Samba and PAM</H1
><P
>A number of Unix systems (eg: Sun Solaris), as well as the
xxxxBSD family and Linux, now utilize the Pluggable Authentication
><H1
CLASS="SECT1"
><A
-NAME="AEN1845"
+NAME="AEN498"
></A
->13.2. Distributed Authentication</H1
+>3.2. Distributed Authentication</H1
><P
>The astute administrator will realize from this that the
combination of <TT
><H1
CLASS="SECT1"
><A
-NAME="AEN1852"
+NAME="AEN505"
></A
->13.3. PAM Configuration in smb.conf</H1
+>3.3. PAM Configuration in smb.conf</H1
><P
>There is an option in smb.conf called <A
HREF="smb.conf.5.html#OBEYPAMRESTRICTIONS"
ALIGN="left"
VALIGN="top"
><A
-HREF="unix-permissions.html"
+HREF="integrate-ms-networks.html"
ACCESSKEY="P"
>Prev</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->UNIX Permission Bits and Windows NT Access Control Lists</TD
+>Integrating MS Windows networks with Samba</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML
><HEAD
><TITLE
>pdbedit</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
-"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
ALINK="#0000FF"
><H1
><A
-NAME="PDBEDIT">pdbedit</H1
+NAME="PDBEDIT"
+></A
+>pdbedit</H1
><DIV
CLASS="REFNAMEDIV"
><A
><DIV
CLASS="REFSYNOPSISDIV"
><A
-NAME="AEN8"><H2
+NAME="AEN8"
+></A
+><H2
>Synopsis</H2
><P
><B
CLASS="COMMAND"
>pdbedit</B
-> [-l] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-m] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-d debuglevel] [-s configfile] [-P account-policy] [-V value]</P
+> [-l] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-d drive] [-s script] [-p profile] [-a] [-m] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-D debuglevel]</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN30"
+NAME="AEN27"
></A
><H2
>DESCRIPTION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN37"
+NAME="AEN34"
></A
><H2
>OPTIONS</H2
>pdbedit -l</B
></P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
> sorce:500:Simo Sorce
samba:45:Test User
</PRE
-></TD
-></TR
-></TABLE
></P
></DD
><DT
>pdbedit -l -v</B
></P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
> ---------------
Logon Script:
Profile Path: \\BERSERKER\profile
</PRE
-></TD
-></TR
-></TABLE
></P
></DD
><DT
>pdbedit -l -w</B
></P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
> sorce:500:508818B733CE64BEAAD3B435B51404EE:D2A2418EFC466A8A0F6B1DBB5C3DB80C:[UX ]:LCT-00000000:
samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:BC281CE3F53B6A5146629CD4751D3490:[UX ]:LCT-3BFA1E8D:
</PRE
-></TD
-></TR
-></TABLE
></P
></DD
><DT
><P
>This option specifies the username to be
used for the operation requested (listing, adding, removing).
- It is <I
+ It is <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>required</I
+></SPAN
> in add, remove and modify
- operations and <I
+ operations and <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>optional</I
+></SPAN
> in list
operations.</P
></DD
</P
></DD
><DT
->-D drive</DT
+>-d drive</DT
><DD
><P
>This option can be used while adding or
</P
></DD
><DT
->-S script</DT
+>-s script</DT
><DD
><P
>This option can be used while adding or
CLASS="COMMAND"
>pdbedit -a -u sorce</B
>
- <TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
-><PRE
+ <PRE
CLASS="PROGRAMLISTING"
>new password:
retype new password</PRE
-></TD
-></TR
-></TABLE
>
</P
></DD
>pdbedit -b xml:/root/pdb-backup.xml -l</B
></P
></DD
-><DT
->-P account-policy</DT
-><DD
-><P
->Display an account policy</P
-><P
->Valid policies are: minimum password age, reset count minutes, disconnect time,
- user must logon to change password, password history, lockout duration, min password length,
- maximum password age and bad lockout attempt.</P
-><P
->Example: <B
-CLASS="COMMAND"
->pdbedit -P "bad lockout attempt"</B
-></P
-><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
-><PRE
-CLASS="PROGRAMLISTING"
-> account policy value for bad lockout attempt is 0
- </PRE
-></TD
-></TR
-></TABLE
-></P
-></DD
-><DT
->-V account-policy-value</DT
-><DD
-><P
->Sets an account policy to a specified value.
- This option may only be used in conjunction
- with the <TT
-CLASS="PARAMETER"
-><I
->-P</I
-></TT
-> option.
- </P
-><P
->Example: <B
-CLASS="COMMAND"
->pdbedit -P "bad lockout attempt" -V 3</B
-></P
-><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
-><PRE
-CLASS="PROGRAMLISTING"
-> account policy value for bad lockout attempt was 0
- account policy value for bad lockout attempt is now 3
- </PRE
-></TD
-></TR
-></TABLE
-></P
-></DD
-><DT
->-d|--debug=debuglevel</DT
-><DD
-><P
-><TT
-CLASS="REPLACEABLE"
-><I
->debuglevel</I
-></TT
-> is an integer
-from 0 to 10. The default value if this parameter is
-not specified is zero.</P
-><P
->The higher this value, the more detail will be
-logged to the log files about the activities of the
-server. At level 0, only critical errors and serious
-warnings will be logged. Level 1 is a reasonable level for
-day to day running - it generates a small amount of
-information about operations carried out.</P
-><P
->Levels above 1 will generate considerable
-amounts of log data, and should only be used when
-investigating a problem. Levels above 3 are designed for
-use only by developers and generate HUGE amounts of log
-data, most of which is extremely cryptic.</P
-><P
->Note that specifying this parameter here will
-override the <A
-HREF="smb.conf.5.html#loglevel"
-TARGET="_top"
->log
-level</A
-> parameter in the <A
-HREF="smb.conf.5.html"
-TARGET="_top"
-><TT
-CLASS="FILENAME"
->smb.conf(5)</TT
-></A
-> file.</P
-></DD
-><DT
->-h|--help</DT
-><DD
-><P
->Print a summary of command line options.</P
-></DD
-><DT
->-s <configuration file></DT
-><DD
-><P
->The file specified contains the
-configuration details required by the server. The
-information in this file includes server-specific
-information such as what printcap file to use, as well
-as descriptions of all the services that the server is
-to provide. See <A
-HREF="smb.conf.5.html"
-TARGET="_top"
-><TT
-CLASS="FILENAME"
->smb.conf(5)</TT
-></A
-> for more information.
-The default configuration file name is determined at
-compile time.</P
-></DD
></DL
></DIV
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN182"
+NAME="AEN140"
></A
><H2
>NOTES</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN185"
+NAME="AEN143"
></A
><H2
>VERSION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN188"
+NAME="AEN146"
></A
><H2
>SEE ALSO</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN193"
+NAME="AEN151"
></A
><H2
>AUTHOR</H2
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Appendixes"
-HREF="appendixes.html"><LINK
REL="PREVIOUS"
-TITLE="Appendixes"
-HREF="appendixes.html"><LINK
+TITLE="Group mapping HOWTO"
+HREF="groupmapping.html"><LINK
REL="NEXT"
TITLE="Samba and other CIFS clients"
HREF="other-clients.html"></HEAD
ALIGN="left"
VALIGN="bottom"
><A
-HREF="appendixes.html"
+HREF="groupmapping.html"
ACCESSKEY="P"
>Prev</A
></TD
><A
NAME="PORTABILITY"
></A
->Chapter 24. Portability</H1
+>Chapter 21. Portability</H1
><P
>Samba works on a wide range of platforms but the interface all the
platforms provide is not always compatible. This chapter contains
><H1
CLASS="SECT1"
><A
-NAME="AEN3198"
+NAME="AEN3011"
></A
->24.1. HPUX</H1
+>21.1. HPUX</H1
><P
>HP's implementation of supplementary groups is, er, non-standard (for
hysterical reasons). There are two group files, /etc/group and
allowed range.</P
><P
>This is documented in the HP manual pages under setgroups(2) and passwd(4).</P
-><P
->On HPUX you must use gcc or the HP Ansi compiler. The free compiler
-that comes with HP-UX is not Ansi compliant and cannot compile
-Samba.</P
></DIV
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3204"
+NAME="AEN3016"
></A
->24.2. SCO Unix</H1
+>21.2. SCO Unix</H1
><P
>
If you run an old version of SCO Unix then you may need to get important
><H1
CLASS="SECT1"
><A
-NAME="AEN3208"
+NAME="AEN3020"
></A
->24.3. DNIX</H1
+>21.3. DNIX</H1
><P
>DNIX has a problem with seteuid() and setegid(). These routines are
needed for Samba to work correctly, but they were left out of the DNIX
><H1
CLASS="SECT1"
><A
-NAME="AEN3237"
+NAME="AEN3049"
></A
->24.4. RedHat Linux Rembrandt-II</H1
+>21.4. RedHat Linux Rembrandt-II</H1
><P
>By default RedHat Rembrandt-II during installation adds an
entry to /etc/hosts as follows:
ALIGN="left"
VALIGN="top"
><A
-HREF="appendixes.html"
+HREF="groupmapping.html"
ACCESSKEY="P"
>Prev</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Appendixes</TD
+>Group mapping HOWTO</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="appendixes.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
<HTML
><HEAD
><TITLE
->Printing Support</TITLE
+>Printing Support in Samba 2.2.x</TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet Version 1.77"><LINK
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="Hosting a Microsoft Distributed File System tree on Samba"
-HREF="msdfs.html"><LINK
+TITLE="UNIX Permission Bits and Windows NT Access Control Lists"
+HREF="unix-permissions.html"><LINK
REL="NEXT"
-TITLE="Unified Logons between Windows NT and UNIX using Winbind"
-HREF="winbind.html"></HEAD
+TITLE="Debugging Printing Problems"
+HREF="printingdebug.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="msdfs.html"
+HREF="unix-permissions.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="winbind.html"
+HREF="printingdebug.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="PRINTING"
></A
->Chapter 15. Printing Support</H1
+>Chapter 6. Printing Support in Samba 2.2.x</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN1933"
+NAME="AEN763"
></A
->15.1. Introduction</H1
+>6.1. Introduction</H1
><P
>Beginning with the 2.2.0 release, Samba supports
the native Windows NT printing mechanisms implemented via
>There has been some initial confusion about what all this means
and whether or not it is a requirement for printer drivers to be
installed on a Samba host in order to support printing from Windows
-clients. As a side note, Samba does not use these drivers in any way to process
+clients. A bug existed in Samba 2.2.0 which made Windows NT/2000 clients
+require that the Samba server possess a valid driver for the printer.
+This is fixed in Samba 2.2.1 and once again, Windows NT/2000 clients
+can use the local APW for installing drivers to be used with a Samba
+served printer. This is the same behavior exhibited by Windows 9x clients.
+As a side note, Samba does not use these drivers in any way to process
spooled files. They are utilized entirely by the clients.</P
><P
>The following MS KB article, may be of some help if you are dealing with
><H1
CLASS="SECT1"
><A
-NAME="AEN1955"
+NAME="AEN785"
></A
->15.2. Configuration</H1
+>6.2. Configuration</H1
><DIV
CLASS="WARNING"
><P
> provided
a means of defining the printer driver name to be sent to
the client.</P
+><P
+>These parameters, including <TT
+CLASS="PARAMETER"
+><I
+>printer driver
+file</I
+></TT
+> parameter, are being deprecated and should not
+be used in new installations. For more information on this change,
+you should refer to the <A
+HREF="printing.html#MIGRATION"
+>Migration section</A
+>
+of this document.</P
></TD
></TR
></TABLE
><H2
CLASS="SECT2"
><A
-NAME="AEN1963"
+NAME="AEN796"
></A
->15.2.1. Creating [print$]</H2
+>6.2.1. Creating [print$]</H2
><P
>In order to support the uploading of printer driver
files, you must first configure a file share named [print$].
><H2
CLASS="SECT2"
><A
-NAME="AEN1998"
+NAME="AEN831"
></A
->15.2.2. Setting Drivers for Existing Printers</H2
+>6.2.2. Setting Drivers for Existing Printers</H2
><P
>The initial listing of printers in the Samba host's
Printers folder will have no real printer driver assigned
-to them. This defaults to a NULL string to allow the use
-of the local Add Printer Wizard on NT/2000 clients.
+to them. By default, in Samba 2.2.0 this driver name was set to
+<SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>NO PRINTER DRIVER AVAILABLE FOR THIS PRINTER</I
+></SPAN
+>.
+Later versions changed this to a NULL string to allow the use
+tof the local Add Printer Wizard on NT/2000 clients.
Attempting to view the printer properties for a printer
which has this default driver assigned will result in
the error message:</P
><H2
CLASS="SECT2"
><A
-NAME="AEN2014"
+NAME="AEN848"
></A
->15.2.3. Support a large number of printers</H2
+>6.2.3. Support a large number of printers</H2
><P
>One issue that has arisen during the development
phase of Samba 2.2 is the need to support driver downloads for
><H2
CLASS="SECT2"
><A
-NAME="AEN2025"
+NAME="AEN859"
></A
->15.2.4. Adding New Printers via the Windows NT APW</H2
+>6.2.4. Adding New Printers via the Windows NT APW</H2
><P
>By default, Samba offers all printer shares defined in <TT
CLASS="FILENAME"
><H2
CLASS="SECT2"
><A
-NAME="AEN2055"
+NAME="AEN889"
></A
->15.2.5. Samba and Printer Ports</H2
+>6.2.5. Samba and Printer Ports</H2
><P
>Windows NT/2000 print servers associate a port with each printer. These normally
take the form of LPT1:, COM1:, FILE:, etc... Samba must also support the
><H1
CLASS="SECT1"
><A
-NAME="AEN2063"
+NAME="AEN897"
></A
->15.3. The Imprints Toolset</H1
+>6.3. The Imprints Toolset</H1
><P
>The Imprints tool set provides a UNIX equivalent of the
Windows NT Add Printer Wizard. For complete information, please
><H2
CLASS="SECT2"
><A
-NAME="AEN2067"
+NAME="AEN901"
></A
->15.3.1. What is Imprints?</H2
+>6.3.1. What is Imprints?</H2
><P
>Imprints is a collection of tools for supporting the goals
of</P
><H2
CLASS="SECT2"
><A
-NAME="AEN2077"
+NAME="AEN911"
></A
->15.3.2. Creating Printer Driver Packages</H2
+>6.3.2. Creating Printer Driver Packages</H2
><P
>The process of creating printer driver packages is beyond
the scope of this document (refer to Imprints.txt also included
><H2
CLASS="SECT2"
><A
-NAME="AEN2080"
+NAME="AEN914"
></A
->15.3.3. The Imprints server</H2
+>6.3.3. The Imprints server</H2
><P
>The Imprints server is really a database server that
may be queried via standard HTTP mechanisms. Each printer
><H2
CLASS="SECT2"
><A
-NAME="AEN2084"
+NAME="AEN918"
></A
->15.3.4. The Installation Client</H2
+>6.3.4. The Installation Client</H2
><P
>More information regarding the Imprints installation client
is available in the <TT
><H1
CLASS="SECT1"
><A
-NAME="AEN2106"
+NAME="AEN940"
></A
->15.4. Diagnosis</H1
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2108"
+>6.4. <A
+NAME="MIGRATION"
></A
->15.4.1. Introduction</H2
-><P
->This is a short description of how to debug printing problems with
-Samba. This describes how to debug problems with printing from a SMB
-client to a Samba server, not the other way around. For the reverse
-see the examples/printing directory.</P
+>Migration to from Samba 2.0.x to 2.2.x</H1
><P
->Ok, so you want to print to a Samba server from your PC. The first
-thing you need to understand is that Samba does not actually do any
-printing itself, it just acts as a middleman between your PC client
-and your Unix printing subsystem. Samba receives the file from the PC
-then passes the file to a external "print command". What print command
-you use is up to you.</P
+>Given that printer driver management has changed (we hope improved) in
+2.2 over prior releases, migration from an existing setup to 2.2 can
+follow several paths. Here are the possible scenarios for
+migration:</P
><P
->The whole things is controlled using options in smb.conf. The most
-relevant options (which you should look up in the smb.conf man page)
-are:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> [global]
- print command - send a file to a spooler
- lpq command - get spool queue status
- lprm command - remove a job
- [printers]
- path = /var/spool/lpd/samba</PRE
-></P
-><P
->The following are nice to know about:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> queuepause command - stop a printer or print queue
- queueresume command - start a printer or print queue</PRE
></P
-><P
->Example:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> print command = /usr/bin/lpr -r -P%p %s
- lpq command = /usr/bin/lpq -P%p %s
- lprm command = /usr/bin/lprm -P%p %j
- queuepause command = /usr/sbin/lpc -P%p stop
- queuepause command = /usr/sbin/lpc -P%p start</PRE
-></P
-><P
->Samba should set reasonable defaults for these depending on your
-system type, but it isn't clairvoyant. It is not uncommon that you
-have to tweak these for local conditions. The commands should
-always have fully specified pathnames, as the smdb may not have
-the correct PATH values.</P
-><P
->When you send a job to Samba to be printed, it will make a temporary
-copy of it in the directory specified in the [printers] section.
-and it should be periodically cleaned out. The lpr -r option
-requests that the temporary copy be removed after printing; If
-printing fails then you might find leftover files in this directory,
-and it should be periodically cleaned out. Samba used the lpq
-command to determine the "job number" assigned to your print job
-by the spooler.</P
-><P
->The %>letter< are "macros" that get dynamically replaced with appropriate
-values when they are used. The %s gets replaced with the name of the spool
-file that Samba creates and the %p gets replaced with the name of the
-printer. The %j gets replaced with the "job number" which comes from
-the lpq output.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2124"
-></A
->15.4.2. Debugging printer problems</H2
-><P
->One way to debug printing problems is to start by replacing these
-command with shell scripts that record the arguments and the contents
-of the print file. A simple example of this kind of things might
-be:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> print command = /tmp/saveprint %p %s
-
- #!/bin/saveprint
- # we make sure that we are the right user
- /usr/bin/id -p >/tmp/tmp.print
- # we run the command and save the error messages
- # replace the command with the one appropriate for your system
- /usr/bin/lpr -r -P$1 $2 2>>&/tmp/tmp.print</PRE
-></P
-><P
->Then you print a file and try removing it. You may find that the
-print queue needs to be stopped in order to see the queue status
-and remove the job:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> h4: {42} % echo hi >/tmp/hi
-h4: {43} % smbclient //localhost/lw4
-added interface ip=10.0.0.4 bcast=10.0.0.255 nmask=255.255.255.0
-Password:
-Domain=[ASTART] OS=[Unix] Server=[Samba 2.0.7]
-smb: \> print /tmp/hi
-putting file /tmp/hi as hi-17534 (0.0 kb/s) (average 0.0 kb/s)
-smb: \> queue
-1049 3 hi-17534
-smb: \> cancel 1049
-Error cancelling job 1049 : code 0
-smb: \> cancel 1049
-Job 1049 cancelled
-smb: \> queue
-smb: \> exit</PRE
-></P
-><P
->The 'code 0' indicates that the job was removed. The comment
-by the smbclient is a bit misleading on this.
-You can observe the command output and then and look at the
-/tmp/tmp.print file to see what the results are. You can quickly
-find out if the problem is with your printing system. Often people
-have problems with their /etc/printcap file or permissions on
-various print queues.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2133"
-></A
->15.4.3. What printers do I have?</H2
-><P
->You can use the 'testprns' program to check to see if the printer
-name you are using is recognized by Samba. For example, you can
-use:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> testprns printer /etc/printcap</PRE
-></P
-><P
->Samba can get its printcap information from a file or from a program.
-You can try the following to see the format of the extracted
-information:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> testprns -a printer /etc/printcap
-
- testprns -a printer '|/bin/cat printcap'</PRE
-></P
-></DIV
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2141"
-></A
->15.4.4. Setting up printcap and print servers</H2
-><P
->You may need to set up some printcaps for your Samba system to use.
-It is strongly recommended that you use the facilities provided by
-the print spooler to set up queues and printcap information.</P
-><P
->Samba requires either a printcap or program to deliver printcap
-information. This printcap information has the format:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> name|alias1|alias2...:option=value:...</PRE
-></P
-><P
->For almost all printing systems, the printer 'name' must be composed
-only of alphanumeric or underscore '_' characters. Some systems also
-allow hyphens ('-') as well. An alias is an alternative name for the
-printer, and an alias with a space in it is used as a 'comment'
-about the printer. The printcap format optionally uses a \ at the end of lines
-to extend the printcap to multiple lines.</P
-><P
->Here are some examples of printcap files:</P
-><P
-><P
-></P
-><OL
-TYPE="1"
+><UL
><LI
><P
->pr just printer name</P
+>If you do not desire the new Windows NT
+ print driver support, nothing needs to be done.
+ All existing parameters work the same.</P
></LI
><LI
><P
->pr|alias printer name and alias</P
+>If you want to take advantage of NT printer
+ driver support but do not want to migrate the
+ 9x drivers to the new setup, the leave the existing
+ <TT
+CLASS="FILENAME"
+>printers.def</TT
+> file. When smbd attempts
+ to locate a
+ 9x driver for the printer in the TDB and fails it
+ will drop down to using the printers.def (and all
+ associated parameters). The <B
+CLASS="COMMAND"
+>make_printerdef</B
+>
+ tool will also remain for backwards compatibility but will
+ be removed in the next major release.</P
></LI
><LI
><P
->pr|My Printer printer name, alias used as comment</P
+>If you install a Windows 9x driver for a printer
+ on your Samba host (in the printing TDB), this information will
+ take precedence and the three old printing parameters
+ will be ignored (including print driver location).</P
></LI
><LI
><P
->pr:sh:\ Same as pr:sh:cm= testing
- :cm= \
- testing</P
+>If you want to migrate an existing <TT
+CLASS="FILENAME"
+>printers.def</TT
+>
+ file into the new setup, the current only solution is to use the Windows
+ NT APW to install the NT drivers and the 9x drivers. This can be scripted
+ using <B
+CLASS="COMMAND"
+>smbclient</B
+> and <B
+CLASS="COMMAND"
+>rpcclient</B
+>. See the
+ Imprints installation client at <A
+HREF="http://imprints.sourceforge.net/"
+TARGET="_top"
+>http://imprints.sourceforge.net/</A
+>
+ for an example.
+ </P
></LI
-><LI
+></UL
+><DIV
+CLASS="WARNING"
><P
->pr:sh Same as pr:sh:cm= testing
- :cm= testing</P
-></LI
-></OL
></P
+><TABLE
+CLASS="WARNING"
+WIDTH="100%"
+BORDER="0"
+><TR
+><TD
+WIDTH="25"
+ALIGN="CENTER"
+VALIGN="TOP"
+><IMG
+SRC="/docbook-dsssl/warning.gif"
+HSPACE="5"
+ALT="Warning"></TD
+><TH
+ALIGN="LEFT"
+VALIGN="CENTER"
+><B
+>Achtung!</B
+></TH
+></TR
+><TR
+><TD
+> </TD
+><TD
+ALIGN="LEFT"
+VALIGN="TOP"
><P
->Samba reads the printcap information when first started. If you make
-changes in the printcap information, then you must do the following:</P
+>The following <TT
+CLASS="FILENAME"
+>smb.conf</TT
+> parameters are considered to
+be deprecated and will be removed soon. Do not use them in new
+installations</P
><P
></P
-><OL
-TYPE="1"
+><UL
><LI
><P
->make sure that the print spooler is aware of these changes.
-The LPRng system uses the 'lpc reread' command to do this.</P
+><TT
+CLASS="PARAMETER"
+><I
+>printer driver file (G)</I
+></TT
+>
+ </P
></LI
><LI
><P
->make sure that the spool queues, etc., exist and have the
-correct permissions. The LPRng system uses the 'checkpc -f'
-command to do this.</P
+><TT
+CLASS="PARAMETER"
+><I
+>printer driver (S)</I
+></TT
+>
+ </P
></LI
><LI
><P
->You now should send a SIGHUP signal to the smbd server to have
-it reread the printcap information.</P
+><TT
+CLASS="PARAMETER"
+><I
+>printer driver location (S)</I
+></TT
+>
+ </P
></LI
-></OL
-></DIV
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2169"
-></A
->15.4.5. Job sent, no output</H2
-><P
->This is the most frustrating part of printing. You may have sent the
-job, verified that the job was forwarded, set up a wrapper around
-the command to send the file, but there was no output from the printer.</P
-><P
->First, check to make sure that the job REALLY is getting to the
-right print queue. If you are using a BSD or LPRng print spooler,
-you can temporarily stop the printing of jobs. Jobs can still be
-submitted, but they will not be printed. Use:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> lpc -Pprinter stop</PRE
-></P
-><P
->Now submit a print job and then use 'lpq -Pprinter' to see if the
-job is in the print queue. If it is not in the print queue then
-you will have to find out why it is not being accepted for printing.</P
-><P
->Next, you may want to check to see what the format of the job really
-was. With the assistance of the system administrator you can view
-the submitted jobs files. You may be surprised to find that these
-are not in what you would expect to call a printable format.
-You can use the UNIX 'file' utitily to determine what the job
-format actually is:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> cd /var/spool/lpd/printer # spool directory of print jobs
- ls # find job files
- file dfA001myhost</PRE
-></P
-><P
->You should make sure that your printer supports this format OR that
-your system administrator has installed a 'print filter' that will
-convert the file to a format appropriate for your printer.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2180"
-></A
->15.4.6. Job sent, strange output</H2
-><P
->Once you have the job printing, you can then start worrying about
-making it print nicely.</P
-><P
->The most common problem is extra pages of output: banner pages
-OR blank pages at the end.</P
-><P
->If you are getting banner pages, check and make sure that the
-printcap option or printer option is configured for no banners.
-If you have a printcap, this is the :sh (suppress header or banner
-page) option. You should have the following in your printer.</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> printer: ... :sh</PRE
-></P
-><P
->If you have this option and are still getting banner pages, there
-is a strong chance that your printer is generating them for you
-automatically. You should make sure that banner printing is disabled
-for the printer. This usually requires using the printer setup software
-or procedures supplied by the printer manufacturer.</P
-><P
->If you get an extra page of output, this could be due to problems
-with your job format, or if you are generating PostScript jobs,
-incorrect setting on your printer driver on the MicroSoft client.
-For example, under Win95 there is a option:</P
-><P
-><PRE
-CLASS="PROGRAMLISTING"
-> Printers|Printer Name|(Right Click)Properties|Postscript|Advanced|</PRE
-></P
-><P
->that allows you to choose if a Ctrl-D is appended to all jobs.
-This is a very bad thing to do, as most spooling systems will
-automatically add a ^D to the end of the job if it is detected as
-PostScript. The multiple ^D may cause an additional page of output.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2192"
-></A
->15.4.7. Raw PostScript printed</H2
-><P
->This is a problem that is usually caused by either the print spooling
-system putting information at the start of the print job that makes
-the printer think the job is a text file, or your printer simply
-does not support PostScript. You may need to enable 'Automatic
-Format Detection' on your printer.</P
-></DIV
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2195"
-></A
->15.4.8. Advanced Printing</H2
-><P
->Note that you can do some pretty magic things by using your
-imagination with the "print command" option and some shell scripts.
-Doing print accounting is easy by passing the %U option to a print
-command shell script. You could even make the print command detect
-the type of output and its size and send it to an appropriate
-printer.</P
+></UL
+></TD
+></TR
+></TABLE
></DIV
-><DIV
-CLASS="SECT2"
-><H2
-CLASS="SECT2"
-><A
-NAME="AEN2198"
-></A
->15.4.9. Real debugging</H2
><P
->If the above debug tips don't help, then maybe you need to bring in
-the bug guns, system tracing. See Tracing.txt in this directory.</P
-></DIV
+>The have been two new parameters add in Samba 2.2.2 to for
+better support of Samba 2.0.x backwards capability (<TT
+CLASS="PARAMETER"
+><I
+>disable
+spoolss</I
+></TT
+>) and for using local printers drivers on Windows
+NT/2000 clients (<TT
+CLASS="PARAMETER"
+><I
+>use client driver</I
+></TT
+>). Both of
+these options are described in the smb.coinf(5) man page and are
+disabled by default.</P
></DIV
></DIV
><DIV
ALIGN="left"
VALIGN="top"
><A
-HREF="msdfs.html"
+HREF="unix-permissions.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="winbind.html"
+HREF="printingdebug.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Hosting a Microsoft Distributed File System tree on Samba</TD
+>UNIX Permission Bits and Windows NT Access Control Lists</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Unified Logons between Windows NT and UNIX using Winbind</TD
+>Debugging Printing Problems</TD
></TR
></TABLE
></DIV
--- /dev/null
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<HTML
+><HEAD
+><TITLE
+>Debugging Printing Problems</TITLE
+><META
+NAME="GENERATOR"
+CONTENT="Modular DocBook HTML Stylesheet Version 1.77"><LINK
+REL="HOME"
+TITLE="SAMBA Project Documentation"
+HREF="samba-howto-collection.html"><LINK
+REL="PREVIOUS"
+TITLE="Printing Support in Samba 2.2.x"
+HREF="printing.html"><LINK
+REL="NEXT"
+TITLE="Security levels"
+HREF="securitylevels.html"></HEAD
+><BODY
+CLASS="CHAPTER"
+BGCOLOR="#FFFFFF"
+TEXT="#000000"
+LINK="#0000FF"
+VLINK="#840084"
+ALINK="#0000FF"
+><DIV
+CLASS="NAVHEADER"
+><TABLE
+SUMMARY="Header navigation table"
+WIDTH="100%"
+BORDER="0"
+CELLPADDING="0"
+CELLSPACING="0"
+><TR
+><TH
+COLSPAN="3"
+ALIGN="center"
+>SAMBA Project Documentation</TH
+></TR
+><TR
+><TD
+WIDTH="10%"
+ALIGN="left"
+VALIGN="bottom"
+><A
+HREF="printing.html"
+ACCESSKEY="P"
+>Prev</A
+></TD
+><TD
+WIDTH="80%"
+ALIGN="center"
+VALIGN="bottom"
+></TD
+><TD
+WIDTH="10%"
+ALIGN="right"
+VALIGN="bottom"
+><A
+HREF="securitylevels.html"
+ACCESSKEY="N"
+>Next</A
+></TD
+></TR
+></TABLE
+><HR
+ALIGN="LEFT"
+WIDTH="100%"></DIV
+><DIV
+CLASS="CHAPTER"
+><H1
+><A
+NAME="PRINTINGDEBUG"
+></A
+>Chapter 7. Debugging Printing Problems</H1
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN986"
+></A
+>7.1. Introduction</H1
+><P
+>This is a short description of how to debug printing problems with
+Samba. This describes how to debug problems with printing from a SMB
+client to a Samba server, not the other way around. For the reverse
+see the examples/printing directory.</P
+><P
+>Ok, so you want to print to a Samba server from your PC. The first
+thing you need to understand is that Samba does not actually do any
+printing itself, it just acts as a middleman between your PC client
+and your Unix printing subsystem. Samba receives the file from the PC
+then passes the file to a external "print command". What print command
+you use is up to you.</P
+><P
+>The whole things is controlled using options in smb.conf. The most
+relevant options (which you should look up in the smb.conf man page)
+are:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> [global]
+ print command - send a file to a spooler
+ lpq command - get spool queue status
+ lprm command - remove a job
+ [printers]
+ path = /var/spool/lpd/samba</PRE
+></P
+><P
+>The following are nice to know about:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> queuepause command - stop a printer or print queue
+ queueresume command - start a printer or print queue</PRE
+></P
+><P
+>Example:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> print command = /usr/bin/lpr -r -P%p %s
+ lpq command = /usr/bin/lpq -P%p %s
+ lprm command = /usr/bin/lprm -P%p %j
+ queuepause command = /usr/sbin/lpc -P%p stop
+ queuepause command = /usr/sbin/lpc -P%p start</PRE
+></P
+><P
+>Samba should set reasonable defaults for these depending on your
+system type, but it isn't clairvoyant. It is not uncommon that you
+have to tweak these for local conditions. The commands should
+always have fully specified pathnames, as the smdb may not have
+the correct PATH values.</P
+><P
+>When you send a job to Samba to be printed, it will make a temporary
+copy of it in the directory specified in the [printers] section.
+and it should be periodically cleaned out. The lpr -r option
+requests that the temporary copy be removed after printing; If
+printing fails then you might find leftover files in this directory,
+and it should be periodically cleaned out. Samba used the lpq
+command to determine the "job number" assigned to your print job
+by the spooler.</P
+><P
+>The %>letter< are "macros" that get dynamically replaced with appropriate
+values when they are used. The %s gets replaced with the name of the spool
+file that Samba creates and the %p gets replaced with the name of the
+printer. The %j gets replaced with the "job number" which comes from
+the lpq output.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1002"
+></A
+>7.2. Debugging printer problems</H1
+><P
+>One way to debug printing problems is to start by replacing these
+command with shell scripts that record the arguments and the contents
+of the print file. A simple example of this kind of things might
+be:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> print command = /tmp/saveprint %p %s
+
+ #!/bin/saveprint
+ # we make sure that we are the right user
+ /usr/bin/id -p >/tmp/tmp.print
+ # we run the command and save the error messages
+ # replace the command with the one appropriate for your system
+ /usr/bin/lpr -r -P$1 $2 2>>&/tmp/tmp.print</PRE
+></P
+><P
+>Then you print a file and try removing it. You may find that the
+print queue needs to be stopped in order to see the queue status
+and remove the job:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> h4: {42} % echo hi >/tmp/hi
+h4: {43} % smbclient //localhost/lw4
+added interface ip=10.0.0.4 bcast=10.0.0.255 nmask=255.255.255.0
+Password:
+Domain=[ASTART] OS=[Unix] Server=[Samba 2.0.7]
+smb: \> print /tmp/hi
+putting file /tmp/hi as hi-17534 (0.0 kb/s) (average 0.0 kb/s)
+smb: \> queue
+1049 3 hi-17534
+smb: \> cancel 1049
+Error cancelling job 1049 : code 0
+smb: \> cancel 1049
+Job 1049 cancelled
+smb: \> queue
+smb: \> exit</PRE
+></P
+><P
+>The 'code 0' indicates that the job was removed. The comment
+by the smbclient is a bit misleading on this.
+You can observe the command output and then and look at the
+/tmp/tmp.print file to see what the results are. You can quickly
+find out if the problem is with your printing system. Often people
+have problems with their /etc/printcap file or permissions on
+various print queues.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1011"
+></A
+>7.3. What printers do I have?</H1
+><P
+>You can use the 'testprns' program to check to see if the printer
+name you are using is recognized by Samba. For example, you can
+use:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> testprns printer /etc/printcap</PRE
+></P
+><P
+>Samba can get its printcap information from a file or from a program.
+You can try the following to see the format of the extracted
+information:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> testprns -a printer /etc/printcap
+
+ testprns -a printer '|/bin/cat printcap'</PRE
+></P
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1019"
+></A
+>7.4. Setting up printcap and print servers</H1
+><P
+>You may need to set up some printcaps for your Samba system to use.
+It is strongly recommended that you use the facilities provided by
+the print spooler to set up queues and printcap information.</P
+><P
+>Samba requires either a printcap or program to deliver printcap
+information. This printcap information has the format:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> name|alias1|alias2...:option=value:...</PRE
+></P
+><P
+>For almost all printing systems, the printer 'name' must be composed
+only of alphanumeric or underscore '_' characters. Some systems also
+allow hyphens ('-') as well. An alias is an alternative name for the
+printer, and an alias with a space in it is used as a 'comment'
+about the printer. The printcap format optionally uses a \ at the end of lines
+to extend the printcap to multiple lines.</P
+><P
+>Here are some examples of printcap files:</P
+><P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+>pr just printer name</P
+></LI
+><LI
+><P
+>pr|alias printer name and alias</P
+></LI
+><LI
+><P
+>pr|My Printer printer name, alias used as comment</P
+></LI
+><LI
+><P
+>pr:sh:\ Same as pr:sh:cm= testing
+ :cm= \
+ testing</P
+></LI
+><LI
+><P
+>pr:sh Same as pr:sh:cm= testing
+ :cm= testing</P
+></LI
+></OL
+></P
+><P
+>Samba reads the printcap information when first started. If you make
+changes in the printcap information, then you must do the following:</P
+><P
+></P
+><OL
+TYPE="1"
+><LI
+><P
+>make sure that the print spooler is aware of these changes.
+The LPRng system uses the 'lpc reread' command to do this.</P
+></LI
+><LI
+><P
+>make sure that the spool queues, etc., exist and have the
+correct permissions. The LPRng system uses the 'checkpc -f'
+command to do this.</P
+></LI
+><LI
+><P
+>You now should send a SIGHUP signal to the smbd server to have
+it reread the printcap information.</P
+></LI
+></OL
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1047"
+></A
+>7.5. Job sent, no output</H1
+><P
+>This is the most frustrating part of printing. You may have sent the
+job, verified that the job was forwarded, set up a wrapper around
+the command to send the file, but there was no output from the printer.</P
+><P
+>First, check to make sure that the job REALLY is getting to the
+right print queue. If you are using a BSD or LPRng print spooler,
+you can temporarily stop the printing of jobs. Jobs can still be
+submitted, but they will not be printed. Use:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> lpc -Pprinter stop</PRE
+></P
+><P
+>Now submit a print job and then use 'lpq -Pprinter' to see if the
+job is in the print queue. If it is not in the print queue then
+you will have to find out why it is not being accepted for printing.</P
+><P
+>Next, you may want to check to see what the format of the job really
+was. With the assistance of the system administrator you can view
+the submitted jobs files. You may be surprised to find that these
+are not in what you would expect to call a printable format.
+You can use the UNIX 'file' utitily to determine what the job
+format actually is:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> cd /var/spool/lpd/printer # spool directory of print jobs
+ ls # find job files
+ file dfA001myhost</PRE
+></P
+><P
+>You should make sure that your printer supports this format OR that
+your system administrator has installed a 'print filter' that will
+convert the file to a format appropriate for your printer.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1058"
+></A
+>7.6. Job sent, strange output</H1
+><P
+>Once you have the job printing, you can then start worrying about
+making it print nicely.</P
+><P
+>The most common problem is extra pages of output: banner pages
+OR blank pages at the end.</P
+><P
+>If you are getting banner pages, check and make sure that the
+printcap option or printer option is configured for no banners.
+If you have a printcap, this is the :sh (suppress header or banner
+page) option. You should have the following in your printer.</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> printer: ... :sh</PRE
+></P
+><P
+>If you have this option and are still getting banner pages, there
+is a strong chance that your printer is generating them for you
+automatically. You should make sure that banner printing is disabled
+for the printer. This usually requires using the printer setup software
+or procedures supplied by the printer manufacturer.</P
+><P
+>If you get an extra page of output, this could be due to problems
+with your job format, or if you are generating PostScript jobs,
+incorrect setting on your printer driver on the MicroSoft client.
+For example, under Win95 there is a option:</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+> Printers|Printer Name|(Right Click)Properties|Postscript|Advanced|</PRE
+></P
+><P
+>that allows you to choose if a Ctrl-D is appended to all jobs.
+This is a very bad thing to do, as most spooling systems will
+automatically add a ^D to the end of the job if it is detected as
+PostScript. The multiple ^D may cause an additional page of output.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1070"
+></A
+>7.7. Raw PostScript printed</H1
+><P
+>This is a problem that is usually caused by either the print spooling
+system putting information at the start of the print job that makes
+the printer think the job is a text file, or your printer simply
+does not support PostScript. You may need to enable 'Automatic
+Format Detection' on your printer.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1073"
+></A
+>7.8. Advanced Printing</H1
+><P
+>Note that you can do some pretty magic things by using your
+imagination with the "print command" option and some shell scripts.
+Doing print accounting is easy by passing the %U option to a print
+command shell script. You could even make the print command detect
+the type of output and its size and send it to an appropriate
+printer.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1076"
+></A
+>7.9. Real debugging</H1
+><P
+>If the above debug tips don't help, then maybe you need to bring in
+the bug guns, system tracing. See Tracing.txt in this directory.</P
+></DIV
+></DIV
+><DIV
+CLASS="NAVFOOTER"
+><HR
+ALIGN="LEFT"
+WIDTH="100%"><TABLE
+SUMMARY="Footer navigation table"
+WIDTH="100%"
+BORDER="0"
+CELLPADDING="0"
+CELLSPACING="0"
+><TR
+><TD
+WIDTH="33%"
+ALIGN="left"
+VALIGN="top"
+><A
+HREF="printing.html"
+ACCESSKEY="P"
+>Prev</A
+></TD
+><TD
+WIDTH="34%"
+ALIGN="center"
+VALIGN="top"
+><A
+HREF="samba-howto-collection.html"
+ACCESSKEY="H"
+>Home</A
+></TD
+><TD
+WIDTH="33%"
+ALIGN="right"
+VALIGN="top"
+><A
+HREF="securitylevels.html"
+ACCESSKEY="N"
+>Next</A
+></TD
+></TR
+><TR
+><TD
+WIDTH="33%"
+ALIGN="left"
+VALIGN="top"
+>Printing Support in Samba 2.2.x</TD
+><TD
+WIDTH="34%"
+ALIGN="center"
+VALIGN="top"
+> </TD
+><TD
+WIDTH="33%"
+ALIGN="right"
+VALIGN="top"
+>Security levels</TD
+></TR
+></TABLE
+></DIV
+></BODY
+></HTML
+>
\ No newline at end of file
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
<HTML
><HEAD
><TITLE
>rpcclient</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
+"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
ALINK="#0000FF"
><H1
><A
-NAME="RPCCLIENT"
-></A
->rpcclient</H1
+NAME="RPCCLIENT">rpcclient</H1
><DIV
CLASS="REFNAMEDIV"
><A
><DIV
CLASS="REFSYNOPSISDIV"
><A
-NAME="AEN8"
-></A
-><H2
+NAME="AEN8"><H2
>Synopsis</H2
><P
><B
CLASS="COMMAND"
>rpcclient</B
-> [-A authfile] [-c <command string>] [-d debuglevel] [-h] [-l logfile] [-N] [-s <smb config file>] [-U username[%password]] [-W workgroup] [-N] [-I destinationIP] {server}</P
+> [-A authfile] [-c <command string>] [-d debuglevel] [-h] [-l logfile] [-N] [-s <smb config file>] [-U username[%password]] [-W workgroup] [-N] [-I destinationIP] {server}</P
></DIV
><DIV
CLASS="REFSECT1"
password used in the connection. The format of the file is
</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
-> username = <value>
- password = <value>
- domain = <value>
+> username = <value>
+ password = <value>
+ domain = <value>
</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Make certain that the permissions on the file restrict
below)) </P
></DD
><DT
->-d|--debug=debuglevel</DT
-><DD
-><P
-><TT
-CLASS="REPLACEABLE"
-><I
->debuglevel</I
-></TT
-> is an integer
-from 0 to 10. The default value if this parameter is
-not specified is zero.</P
-><P
->The higher this value, the more detail will be
-logged to the log files about the activities of the
-server. At level 0, only critical errors and serious
-warnings will be logged. Level 1 is a reasonable level for
-day to day running - it generates a small amount of
-information about operations carried out.</P
-><P
->Levels above 1 will generate considerable
-amounts of log data, and should only be used when
-investigating a problem. Levels above 3 are designed for
-use only by developers and generate HUGE amounts of log
-data, most of which is extremely cryptic.</P
-><P
->Note that specifying this parameter here will
-override the <A
-HREF="smb.conf.5.html#loglevel"
-TARGET="_top"
->log
-level</A
-> parameter in the <A
-HREF="smb.conf.5.html"
-TARGET="_top"
-><TT
-CLASS="FILENAME"
->smb.conf(5)</TT
-></A
-> file.</P
-></DD
-><DT
->-h|--help</DT
-><DD
-><P
->Print a summary of command line options.</P
-></DD
-><DT
>-I IP-address</DT
><DD
><P
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN107"
+NAME="AEN92"
></A
><H2
>COMMANDS</H2
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>LSARPC</I
-></SPAN
></P
><P
></P
><P
> </P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SAMR</I
-></SPAN
></P
><P
></P
><P
> </P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SPOOLSS</I
-></SPAN
></P
><P
></P
><P
><B
CLASS="COMMAND"
->adddriver <arch> <config></B
+>adddriver <arch> <config></B
>
- Execute an AddPrinterDriver() RPC to install the printer driver
information on the server. Note that the driver files should
> parameter is defined as
follows: </P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
> Long Printer Name:\
Default Data Type:\
Comma Separated list of Files
</PRE
+></TD
+></TR
+></TABLE
></P
><P
>Any empty fields should be enter as the string "NULL". </P
><P
><B
CLASS="COMMAND"
->addprinter <printername>
- <sharename> <drivername> <port></B
+>addprinter <printername>
+ <sharename> <drivername> <port></B
>
- Add a printer on the remote server. This printer
will be automatically shared. Be aware that the printer driver
><P
><B
CLASS="COMMAND"
->enumjobs <printer></B
+>enumjobs <printer></B
>
- List the jobs and status of a given printer.
This command corresponds to the MS Platform SDK EnumJobs()
><P
><B
CLASS="COMMAND"
->getdata <printername></B
+>getdata <printername></B
>
- Retrieve the data for a given printer setting. See
the <B
><P
><B
CLASS="COMMAND"
->getdriver <printername></B
+>getdriver <printername></B
>
- Retrieve the printer driver information (such as driver file,
config file, dependent files, etc...) for
><P
><B
CLASS="COMMAND"
->getdriverdir <arch></B
+>getdriverdir <arch></B
>
- Execute a GetPrinterDriverDirectory()
RPC to retrieve the SMB share name and subdirectory for
><P
><B
CLASS="COMMAND"
->getprinter <printername></B
+>getprinter <printername></B
>
- Retrieve the current printer information. This command
corresponds to the GetPrinter() MS Platform SDK function.
><P
><B
CLASS="COMMAND"
->openprinter <printername></B
+>openprinter <printername></B
>
- Execute an OpenPrinterEx() and ClosePrinter() RPC
against a given printer. </P
><P
><B
CLASS="COMMAND"
->setdriver <printername>
- <drivername></B
+>setdriver <printername>
+ <drivername></B
>
- Execute a SetPrinter() command to update the printer driver
associated with an installed printer. The printer driver must
></LI
></UL
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>GENERAL OPTIONS</I
-></SPAN
></P
><P
></P
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN227"
+NAME="AEN212"
></A
><H2
>BUGS</H2
><P
>From Luke Leighton's original rpcclient man page:</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>"WARNING!</I
-></SPAN
> The MSRPC over SMB code has
been developed from examining Network traces. No documentation is
available from the original creators (Microsoft) on how MSRPC over
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN237"
+NAME="AEN222"
></A
><H2
>VERSION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN240"
+NAME="AEN225"
></A
><H2
>AUTHOR</H2
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Type of installation"
-HREF="type.html"><LINK
REL="PREVIOUS"
-TITLE="How to Configure Samba as a NT4 Primary Domain Controller"
+TITLE="How to Configure Samba 2.2 as a Primary Domain Controller"
HREF="samba-pdc.html"><LINK
REL="NEXT"
-TITLE="Samba as a ADS domain member"
-HREF="ads.html"></HEAD
+TITLE="Storing Samba's User/Machine Account information in an LDAP Directory"
+HREF="samba-ldap-howto.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="right"
VALIGN="bottom"
><A
-HREF="ads.html"
+HREF="samba-ldap-howto.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="SAMBA-BDC"
></A
->Chapter 8. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</H1
+>Chapter 12. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN1143"
+NAME="AEN2148"
></A
->8.1. Prerequisite Reading</H1
+>12.1. Prerequisite Reading</H1
><P
>Before you continue reading in this chapter, please make sure
that you are comfortable with configuring a Samba PDC
><H1
CLASS="SECT1"
><A
-NAME="AEN1147"
+NAME="AEN2152"
></A
->8.2. Background</H1
+>12.2. Background</H1
><P
>What is a Domain Controller? It is a machine that is able to answer
logon requests from workstations in a Windows NT Domain. Whenever a
><H1
CLASS="SECT1"
><A
-NAME="AEN1155"
+NAME="AEN2160"
></A
->8.3. What qualifies a Domain Controller on the network?</H1
+>12.3. What qualifies a Domain Controller on the network?</H1
><P
>Every machine that is a Domain Controller for the domain SAMBA has to
register the NetBIOS group name SAMBA#1c with the WINS server and/or
><H2
CLASS="SECT2"
><A
-NAME="AEN1158"
+NAME="AEN2163"
></A
->8.3.1. How does a Workstation find its domain controller?</H2
+>12.3.1. How does a Workstation find its domain controller?</H2
><P
>A NT workstation in the domain SAMBA that wants a local user to be
authenticated has to find the domain controller for SAMBA. It does
><H2
CLASS="SECT2"
><A
-NAME="AEN1161"
+NAME="AEN2166"
></A
->8.3.2. When is the PDC needed?</H2
+>12.3.2. When is the PDC needed?</H2
><P
>Whenever a user wants to change his password, this has to be done on
the PDC. To find the PDC, the workstation does a NetBIOS name query
><H1
CLASS="SECT1"
><A
-NAME="AEN1164"
+NAME="AEN2169"
></A
->8.4. Can Samba be a Backup Domain Controller?</H1
+>12.4. Can Samba be a Backup Domain Controller?</H1
><P
>With version 2.2, no. The native NT SAM replication protocols have
not yet been fully implemented. The Samba Team is working on
><H1
CLASS="SECT1"
><A
-NAME="AEN1168"
+NAME="AEN2173"
></A
->8.5. How do I set up a Samba BDC?</H1
+>12.5. How do I set up a Samba BDC?</H1
><P
>Several things have to be done:</P
><P
><H2
CLASS="SECT2"
><A
-NAME="AEN1185"
+NAME="AEN2190"
></A
->8.5.1. How do I replicate the smbpasswd file?</H2
+>12.5.1. How do I replicate the smbpasswd file?</H2
><P
>Replication of the smbpasswd file is sensitive. It has to be done
whenever changes to the SAM are made. Every user's password change is
ALIGN="right"
VALIGN="top"
><A
-HREF="ads.html"
+HREF="samba-ldap-howto.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->How to Configure Samba as a NT4 Primary Domain Controller</TD
+>How to Configure Samba 2.2 as a Primary Domain Controller</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="type.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Samba as a ADS domain member</TD
+>Storing Samba's User/Machine Account information in an LDAP Directory</TD
></TR
></TABLE
></DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="Stackable VFS modules"
-HREF="vfs.html"><LINK
+TITLE="How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain"
+HREF="samba-bdc.html"><LINK
REL="NEXT"
-TITLE="HOWTO Access Samba source code via CVS"
-HREF="cvs-access.html"></HEAD
+TITLE="Using samba 3.0 with ActiveDirectory support"
+HREF="ads.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="vfs.html"
+HREF="samba-bdc.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="cvs-access.html"
+HREF="ads.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="SAMBA-LDAP-HOWTO"
></A
->Chapter 20. Storing Samba's User/Machine Account information in an LDAP Directory</H1
+>Chapter 13. Storing Samba's User/Machine Account information in an LDAP Directory</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN2747"
+NAME="AEN2211"
></A
->20.1. Purpose</H1
+>13.1. Purpose</H1
><P
>This document describes how to use an LDAP directory for storing Samba user
account information traditionally stored in the smbpasswd(5) file. It is
><H1
CLASS="SECT1"
><A
-NAME="AEN2767"
+NAME="AEN2231"
></A
->20.2. Introduction</H1
+>13.2. Introduction</H1
><P
>Traditionally, when configuring <A
HREF="smb.conf.5.html#ENCRYPTPASSWORDS"
><H1
CLASS="SECT1"
><A
-NAME="AEN2796"
+NAME="AEN2260"
></A
->20.3. Supported LDAP Servers</H1
+>13.3. Supported LDAP Servers</H1
><P
>The LDAP samdb code in 2.2.3 has been developed and tested using the OpenLDAP
2.0 server and client libraries. The same code should be able to work with
><H1
CLASS="SECT1"
><A
-NAME="AEN2801"
+NAME="AEN2265"
></A
->20.4. Schema and Relationship to the RFC 2307 posixAccount</H1
+>13.4. Schema and Relationship to the RFC 2307 posixAccount</H1
><P
>Samba 2.2.3 includes the necessary schema file for OpenLDAP 2.0 in
<TT
><H1
CLASS="SECT1"
><A
-NAME="AEN2813"
+NAME="AEN2277"
></A
->20.5. Configuring Samba with LDAP</H1
+>13.5. Configuring Samba with LDAP</H1
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN2815"
+NAME="AEN2279"
></A
->20.5.1. OpenLDAP configuration</H2
+>13.5.1. OpenLDAP configuration</H2
><P
>To include support for the sambaAccount object in an OpenLDAP directory
server, first copy the samba.schema file to slapd's configuration directory.</P
><H2
CLASS="SECT2"
><A
-NAME="AEN2832"
+NAME="AEN2296"
></A
->20.5.2. Configuring Samba</H2
+>13.5.2. Configuring Samba</H2
><P
>The following parameters are available in smb.conf only with <TT
CLASS="PARAMETER"
><H1
CLASS="SECT1"
><A
-NAME="AEN2860"
+NAME="AEN2324"
></A
->20.6. Accounts and Groups management</H1
+>13.6. Accounts and Groups management</H1
><P
>As users accounts are managed thru the sambaAccount objectclass, you should
modify you existing administration tools to deal with sambaAccount attributes.</P
><H1
CLASS="SECT1"
><A
-NAME="AEN2865"
+NAME="AEN2329"
></A
->20.7. Security and sambaAccount</H1
+>13.7. Security and sambaAccount</H1
><P
>There are two important points to remember when discussing the security
of sambaAccount entries in the directory.</P
><H1
CLASS="SECT1"
><A
-NAME="AEN2885"
+NAME="AEN2349"
></A
->20.8. LDAP specials attributes for sambaAccounts</H1
+>13.8. LDAP specials attributes for sambaAccounts</H1
><P
>The sambaAccount objectclass is composed of the following attributes:</P
><P
><H1
CLASS="SECT1"
><A
-NAME="AEN2955"
+NAME="AEN2419"
></A
->20.9. Example LDIF Entries for a sambaAccount</H1
+>13.9. Example LDIF Entries for a sambaAccount</H1
><P
>The following is a working LDIF with the inclusion of the posixAccount objectclass:</P
><P
><H1
CLASS="SECT1"
><A
-NAME="AEN2963"
+NAME="AEN2427"
></A
->20.10. Comments</H1
+>13.10. Comments</H1
><P
>Please mail all comments regarding this HOWTO to <A
HREF="mailto:jerry@samba.org"
ALIGN="left"
VALIGN="top"
><A
-HREF="vfs.html"
+HREF="samba-bdc.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="cvs-access.html"
+HREF="ads.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Stackable VFS modules</TD
+>How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->HOWTO Access Samba source code via CVS</TD
+>Using samba 3.0 with ActiveDirectory support</TD
></TR
></TABLE
></DIV
<HTML
><HEAD
><TITLE
->User and Share security level (for servers not in a domain)</TITLE
+>Security levels</TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet Version 1.77"><LINK
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Type of installation"
-HREF="type.html"><LINK
REL="PREVIOUS"
-TITLE="Type of installation"
-HREF="type.html"><LINK
+TITLE="Debugging Printing Problems"
+HREF="printingdebug.html"><LINK
REL="NEXT"
-TITLE="How to Configure Samba as a NT4 Primary Domain Controller"
-HREF="samba-pdc.html"></HEAD
+TITLE="security = domain in Samba 2.x"
+HREF="domain-security.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="type.html"
+HREF="printingdebug.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="samba-pdc.html"
+HREF="domain-security.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="SECURITYLEVELS"
></A
->Chapter 6. User and Share security level (for servers not in a domain)</H1
+>Chapter 8. Security levels</H1
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1089"
+></A
+>8.1. Introduction</H1
+><P
+>Samba supports the following options to the global smb.conf parameter</P
+><P
+><PRE
+CLASS="PROGRAMLISTING"
+>[global]
+<A
+HREF="smb.conf.5.html#SECURITY"
+TARGET="_top"
+><TT
+CLASS="PARAMETER"
+><I
+>security</I
+></TT
+></A
+> = [share|user(default)|domain|ads]</PRE
+></P
+><P
+>Please refer to the smb.conf man page for usage information and to the document
+<A
+HREF="DOMAIN_MEMBER.html"
+TARGET="_top"
+>DOMAIN_MEMBER.html</A
+> for further background details
+on domain mode security. The Windows 2000 Kerberos domain security model
+(security = ads) is described in the <A
+HREF="ADS-HOWTO.html"
+TARGET="_top"
+>ADS-HOWTO.html</A
+>.</P
+><P
+>Of the above, "security = server" means that Samba reports to clients that
+it is running in "user mode" but actually passes off all authentication
+requests to another "user mode" server. This requires an additional
+parameter "password server =" that points to the real authentication server.
+That real authentication server can be another Samba server or can be a
+Windows NT server, the later natively capable of encrypted password support.</P
+></DIV
+><DIV
+CLASS="SECT1"
+><H1
+CLASS="SECT1"
+><A
+NAME="AEN1100"
+></A
+>8.2. More complete description of security levels</H1
><P
>A SMB server tells the client at startup what "security level" it is
running. There are two options "share level" and "user level". Which
cryptographically impossible to translate from unix style encryption
to SMB style encryption, although there are some fairly simple management
schemes by which the two could be kept in sync.</P
-><P
->"security = server" means that Samba reports to clients that
-it is running in "user mode" but actually passes off all authentication
-requests to another "user mode" server. This requires an additional
-parameter "password server =" that points to the real authentication server.
-That real authentication server can be another Samba server or can be a
-Windows NT server, the later natively capable of encrypted password support.</P
+></DIV
></DIV
><DIV
CLASS="NAVFOOTER"
ALIGN="left"
VALIGN="top"
><A
-HREF="type.html"
+HREF="printingdebug.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="samba-pdc.html"
+HREF="domain-security.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Type of installation</TD
+>Debugging Printing Problems</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="type.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->How to Configure Samba as a NT4 Primary Domain Controller</TD
+>security = domain in Samba 2.x</TD
></TR
></TABLE
></DIV
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML
><HEAD
><TITLE
>smb.conf</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
-"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
ALINK="#0000FF"
><H1
><A
-NAME="SMB.CONF">smb.conf</H1
+NAME="SMB.CONF"
+></A
+>smb.conf</H1
><DIV
CLASS="REFNAMEDIV"
><A
><P
>There are three special sections, [global],
[homes] and [printers], which are
- described under <I
+ described under <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>special sections</I
+></SPAN
>. The
following notes apply to ordinary section descriptions.</P
><P
printable services (used by the client to access print services
on the host running the server).</P
><P
->Sections may be designated <I
+>Sections may be designated <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>guest</I
+></SPAN
> services,
in which case no password is required to access them. A specified
- UNIX <I
+ UNIX <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>guest account</I
+></SPAN
> is used to define access
privileges in this case.</P
><P
>/home/bar</TT
>.
The share is accessed via the share name "foo":</P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="100%"
-><TR
-><TD
><PRE
CLASS="SCREEN"
> <TT
</TT
>
</PRE
-></TD
-></TR
-></TABLE
><P
>The following sample section defines a printable share.
The share is readonly, but printable. That is, the only write
access permitted is via calls to open, write to and close a
- spool file. The <I
+ spool file. The <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>guest ok</I
+></SPAN
> parameter means
access will be permitted as the default guest user (specified
elsewhere):</P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="100%"
-><TR
-><TD
><PRE
CLASS="SCREEN"
> <TT
</TT
>
</PRE
-></TD
-></TR
-></TABLE
></DIV
><DIV
CLASS="REFSECT1"
></LI
></UL
><P
->If you decide to use a <I
+>If you decide to use a <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>path =</I
+></SPAN
> line
in your [homes] section then you may find it useful
to use the %S macro. For example :</P
a normal service section can specify, though some make more sense
than others. The following is a typical and suitable [homes]
section:</P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="100%"
-><TR
-><TD
><PRE
CLASS="SCREEN"
> <TT
</TT
>
</PRE
-></TD
-></TR
-></TABLE
><P
>An important point is that if guest access is specified
in the [homes] section, all home directories will be
- visible to all clients <I
+ visible to all clients <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>without a password</I
+></SPAN
>.
In the very unlikely event that this is actually desirable, it
- would be wise to also specify <I
+ would be wise to also specify <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>read only
access</I
+></SPAN
>.</P
><P
->Note that the <I
+>Note that the <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>browseable</I
+></SPAN
> flag for
auto home directories will be inherited from the global browseable
flag, not the [homes] browseable flag. This is useful as
- it means setting <I
+ it means setting <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>browseable = no</I
+></SPAN
> in
the [homes] section will hide the [homes] share but make
any auto home directories visible.</P
world-writeable spool directory with the sticky bit set on
it. A typical [printers] entry would look like
this:</P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="100%"
-><TR
-><TD
><PRE
CLASS="SCREEN"
><TT
printable = yes
</TT
></PRE
-></TD
-></TR
-></TABLE
><P
>All aliases given for a printer in the printcap file
are legitimate printer names as far as the server is concerned.
If your printing subsystem doesn't work like that, you will have
to set up a pseudo-printcap. This is a file consisting of one or
more lines like this:</P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="100%"
-><TR
-><TD
><PRE
CLASS="SCREEN"
> <TT
</TT
>
</PRE
-></TD
-></TR
-></TABLE
><P
>Each alias should be an acceptable printer name for
your printing subsystem. In the [global] section, specify
>parameters define the specific attributes of sections.</P
><P
>Some parameters are specific to the [global] section
- (e.g., <I
+ (e.g., <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>security</I
+></SPAN
>). Some parameters are usable
- in all sections (e.g., <I
+ in all sections (e.g., <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>create mode</I
+></SPAN
>). All others
are permissible only in normal sections. For the purposes of the
following descriptions the [homes] and [printers]
- sections will be considered normal. The letter <I
+ sections will be considered normal. The letter <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>G</I
+></SPAN
>
in parentheses indicates that a parameter is specific to the
- [global] section. The letter <I
+ [global] section. The letter <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>S</I
+></SPAN
>
indicates that a parameter can be specified in a service specific
- section. Note that all <I
+ section. Note that all <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>S</I
+></SPAN
> parameters can also be specified in
the [global] section - in which case they will define
the default behavior for all services.</P
CLASS="VARIABLELIST"
><DL
><DT
+>%S</DT
+><DD
+><P
+>the name of the current service, if any.</P
+></DD
+><DT
+>%P</DT
+><DD
+><P
+>the root directory of the current service,
+ if any.</P
+></DD
+><DT
+>%u</DT
+><DD
+><P
+>user name of the current service, if any.</P
+></DD
+><DT
+>%g</DT
+><DD
+><P
+>primary group name of %u.</P
+></DD
+><DT
>%U</DT
><DD
><P
>primary group name of %U.</P
></DD
><DT
+>%H</DT
+><DD
+><P
+>the home directory of the user given
+ by %u.</P
+></DD
+><DT
+>%v</DT
+><DD
+><P
+>the Samba version.</P
+></DD
+><DT
>%h</DT
><DD
><P
</P
></DD
><DT
+>%N</DT
+><DD
+><P
+>the name of your NIS home directory server.
+ This is obtained from your NIS auto.map entry. If you have
+ not compiled Samba with the <SPAN
+CLASS="emphasis"
+><I
+CLASS="EMPHASIS"
+>--with-automount</I
+></SPAN
+>
+ option then this value will be the same as %L.</P
+></DD
+><DT
+>%p</DT
+><DD
+><P
+>the path of the service's home directory,
+ obtained from your NIS auto.map entry. The NIS auto.map entry
+ is split up as "%N:%p".</P
+></DD
+><DT
>%R</DT
><DD
><P
>the current date and time.</P
></DD
><DT
->%D</DT
-><DD
-><P
->Name of the domain or workgroup of the current user.</P
-></DD
-><DT
>%$(<TT
CLASS="REPLACEABLE"
><I
></DL
></DIV
><P
->The following substitutes apply only to some configuration options(only those
- that are used when a connection has been established):</P
-><P
-></P
-><DIV
-CLASS="VARIABLELIST"
-><DL
-><DT
->%S</DT
-><DD
-><P
->the name of the current service, if any.</P
-></DD
-><DT
->%P</DT
-><DD
-><P
->the root directory of the current service,
- if any.</P
-></DD
-><DT
->%u</DT
-><DD
-><P
->user name of the current service, if any.</P
-></DD
-><DT
->%g</DT
-><DD
-><P
->primary group name of %u.</P
-></DD
-><DT
->%H</DT
-><DD
-><P
->the home directory of the user given
- by %u.</P
-></DD
-><DT
->%N</DT
-><DD
-><P
->the name of your NIS home directory server.
- This is obtained from your NIS auto.map entry. If you have
- not compiled Samba with the <I
-CLASS="EMPHASIS"
->--with-automount</I
->
- option then this value will be the same as %L.</P
-></DD
-><DT
->%p</DT
-><DD
-><P
->the path of the service's home directory,
- obtained from your NIS auto.map entry. The NIS auto.map entry
- is split up as "%N:%p".</P
-></DD
-></DL
-></DIV
-><P
>There are some quite creative things that can be done
with these substitutions and other smb.conf options.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN205"
+NAME="AEN203"
></A
><H2
>NAME MANGLING</H2
> controls if names that have characters that
aren't of the "default" case are mangled. For example,
if this is yes then a name like "Mail" would be mangled.
- Default <I
+ Default <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no</I
+></SPAN
>.</P
></DD
><DT
><P
>controls whether filenames are case sensitive. If
they aren't then Samba must do a filename search and match on passed
- names. Default <I
+ names. Default <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no</I
+></SPAN
>.</P
></DD
><DT
><DD
><P
>controls what the default case is for new
- filenames. Default <I
+ filenames. Default <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>lower</I
+></SPAN
>.</P
></DD
><DT
><P
>controls if new files are created with the
case that the client passes, or if they are forced to be the
- "default" case. Default <I
+ "default" case. Default <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>yes</I
+></SPAN
>.
</P
></DD
upper case, or if they are forced to be the "default"
case. This option can be use with "preserve case = yes"
to permit long filenames to retain their case, while short names
- are lowercased. Default <I
+ are lowercased. Default <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>yes</I
+></SPAN
>.</P
></DD
></DL
></DIV
><P
->By default, Samba 3.0 has the same semantics as a Windows
+>By default, Samba 2.2 has the same semantics as a Windows
NT server, in that it is case insensitive but case preserving.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN238"
+NAME="AEN236"
></A
><H2
>NOTE ABOUT USERNAME/PASSWORD VALIDATION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN257"
+NAME="AEN255"
></A
><H2
>COMPLETE LIST OF GLOBAL PARAMETERS</H2
><LI
><P
><A
-HREF="#LDAPTRUSTIDS"
-><TT
-CLASS="PARAMETER"
-><I
->ldap trust ids</I
-></TT
-></A
-></P
-></LI
-><LI
-><P
-><A
HREF="#LMANNOUNCE"
><TT
CLASS="PARAMETER"
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN1013"
+NAME="AEN1007"
></A
><H2
>COMPLETE LIST OF SERVICE PARAMETERS</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN1513"
+NAME="AEN1507"
></A
><H2
>EXPLANATION OF EACH PARAMETER</H2
>abort shutdown script (G)</DT
><DD
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>This parameter only exists in the HEAD cvs branch</I
+></SPAN
>
This a full path name to a script called by
<A
><P
>This command will be run as user.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>None</I
+></SPAN
>.</P
><P
>Example: <B
></A
></P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
><P
>Example: <B
>.
</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
><P
>Example: <B
><P
>Default: <B
CLASS="COMMAND"
->add machine script = <empty string>
+>add machine script = <empty string>
</B
></P
><P
><DD
><P
>This is the full pathname to a script that will
- be run <I
+ be run <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
> by <A
HREF="smbd.8.html"
TARGET="_top"
TARGET="_top"
>smbd</A
> to create the required UNIX users
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>ON DEMAND</I
+></SPAN
> when a user accesses the Samba server.</P
><P
>In order to use this option, <A
TARGET="_top"
>smbd</A
>
- must <I
+ must <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NOT</I
+></SPAN
> be set to <TT
CLASS="PARAMETER"
><I
CLASS="COMMAND"
>smbd</B
> will
- call the specified script <I
+ call the specified script <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
>, expanding
any <TT
CLASS="PARAMETER"
><P
>Default: <B
CLASS="COMMAND"
->add user script = <empty string>
+>add user script = <empty string>
</B
></P
><P
><DD
><P
>This is the full pathname to a script that will
- be run <I
+ be run <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
> by <A
HREF="smbd.8.html"
TARGET="_top"
this list will be able to do anything they like on the share,
irrespective of file permissions.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no admin users</I
+></SPAN
></P
><P
>Example: <B
TARGET="_top"
>smbd(8)</A
>
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
>. Any <TT
CLASS="PARAMETER"
><I
><P
>This specifies the major and minor version numbers
that nmbd will use when announcing itself as a server. The default
- is 4.9. Do not change this parameter unless you have a specific
+ is 4.2. Do not change this parameter unless you have a specific
need to set a Samba server to be a downlevel server.</P
><P
>Default: <B
CLASS="COMMAND"
->announce version = 4.9</B
+>announce version = 4.5</B
></P
><P
>Example: <B
><P
>Default: <B
CLASS="COMMAND"
->auth methods = <empty string></B
+>auth methods = <empty string></B
></P
><P
>Example: <B
><I
>available = no</I
></TT
->, then <I
+>, then <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>ALL</I
+></SPAN
>
attempts to connect to the service will fail. Such failures are
logged.</P
><DD
><P
>This global parameter allows the Samba admin
- to limit what interfaces on a machine will serve SMB requests. It
+ to limit what interfaces on a machine will serve SMB requests. If
affects file service <A
HREF="smbd.8.html"
TARGET="_top"
>interfaces</I
></TT
> list. IP Source address spoofing
- does defeat this simple check, however, so it must not be used
+ does defeat this simple check, however so it must not be used
seriously as a security feature for <B
CLASS="COMMAND"
>nmbd</B
>bind interfaces only</I
></TT
> is set then
- unless the network address <I
+ unless the network address <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>127.0.0.1</I
+></SPAN
> is added
to the <TT
CLASS="PARAMETER"
CLASS="COMMAND"
>smbpasswd</B
>
- by default connects to the <I
+ by default connects to the <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>localhost - 127.0.0.1</I
+></SPAN
>
address as an SMB client to issue the password change request. If
<TT
>bind interfaces only</I
></TT
> is set then unless the
- network address <I
+ network address <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>127.0.0.1</I
+></SPAN
> is added to the
<TT
CLASS="PARAMETER"
CLASS="COMMAND"
>nmbd</B
> at the address
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>127.0.0.1</I
+></SPAN
> to determine if they are running.
- Not adding <I
+ Not adding <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>127.0.0.1</I
+></SPAN
> will cause <B
CLASS="COMMAND"
> smbd</B
request has a time limit associated with it.</P
><P
>If this parameter is set and the lock range requested
- cannot be immediately satisfied, samba will internally
+ cannot be immediately satisfied, Samba 2.2 will internally
queue the lock request, and periodically attempt to obtain
the lock until the timeout period expires.</P
><P
CLASS="CONSTANT"
>no</TT
>, then
- samba will behave as previous versions of Samba would and
+ Samba 2.2 will behave as previous versions of Samba would and
will fail the lock request immediately if the lock range
cannot be obtained.</P
><P
><DD
><P
>See the discussion in the section <A
-HREF="#AEN205"
+HREF="#AEN203"
>NAME MANGLING</A
>.</P
><P
>.
</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
><P
>Example: <B
></A
> parameter.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>No comment string</I
+></SPAN
></P
><P
>Example: <B
copied must occur earlier in the configuration file than the
service doing the copying.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no value</I
+></SPAN
></P
><P
>Example: <B
calculated according to the mapping from DOS modes to UNIX
permissions, and the resulting UNIX mode is then bit-wise 'AND'ed
with this parameter. This parameter may be thought of as a bit-wise
- MASK for the UNIX modes of a file. Any bit <I
+ MASK for the UNIX modes of a file. Any bit <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not</I
+></SPAN
>
set here will be removed from the modes set on a file when it is
created.</P
>csc policy (S)</DT
><DD
><P
->This stands for <I
+>This stands for <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>client-side caching
policy</I
+></SPAN
>, and specifies how clients capable of offline
caching will cache the files in the share. The valid values
are: manual, documents, programs, disable.</P
>debug timestamp (G)</DT
><DD
><P
->Samba debug log messages are timestamped
+>Samba 2.2 debug log messages are timestamped
by default. If you are running at a high <A
HREF="#DEBUGLEVEL"
> <TT
><DD
><P
>See the section on <A
-HREF="#AEN205"
+HREF="#AEN203"
> NAME MANGLING</A
>. Also note the <A
HREF="#SHORTPRESERVECASE"
><P
>This parameter specifies the name of a service
which will be connected to if the service actually requested cannot
- be found. Note that the square brackets are <I
+ be found. Note that the square brackets are <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NOT</I
+></SPAN
>
given in the parameter value (see example below).</P
><P
><P
>Example:</P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
>[global]
[pub]
path = /%S
</PRE
-></TD
-></TR
-></TABLE
></P
></DD
><DT
><DD
><P
>This is the full pathname to a script that will
- be run <I
+ be run <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
> by <A
HREF="smbd.8.html"
TARGET="_top"
></A
></P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
><P
>Example: <B
>.
</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
><P
>Example: <B
><P
>Default: <B
CLASS="COMMAND"
->delete user script = <empty string>
+>delete user script = <empty string>
</B
></P
><P
TARGET="_top"
>smbd(8)</A
>
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
>. Any <TT
CLASS="PARAMETER"
><I
third return value can give the block size in bytes. The default
blocksize is 1024 bytes.</P
><P
->Note: Your script should <I
+>Note: Your script should <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NOT</I
+></SPAN
> be setuid or
setgid and should be owned by (and writeable only by) root!</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>By default internal routines for
determining the disk capacity and remaining space will be used.
</I
+></SPAN
></P
><P
>Example: <B
><P
>Where the script dfree (which must be made executable) could be:</P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
>
#!/bin/sh
df $1 | tail -1 | awk '{print $2" "$4}'
</PRE
-></TD
-></TR
-></TABLE
></P
><P
>or perhaps (on Sys V based systems):</P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
>
#!/bin/sh
/usr/bin/df -k $1 | tail -1 | awk '{print $3" "$5}'
</PRE
-></TD
-></TR
-></TABLE
></P
><P
>Note that you may have to replace the command names
calculated according to the mapping from DOS modes to UNIX permissions,
and the resulting UNIX mode is then bit-wise 'AND'ed with this
parameter. This parameter may be thought of as a bit-wise MASK for
- the UNIX modes of a directory. Any bit <I
+ the UNIX modes of a directory. Any bit <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not</I
+></SPAN
> set
here will be removed from the modes set on a directory when it is
created.</P
meaning a user is allowed to modify all the user/group/world
permissions on a directory.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that users who can access the
Samba server through other means can easily bypass this restriction,
so it is primarily useful for standalone "appliance" systems.
Wizard or by using the NT printer properties dialog window. It will
also disable the capability of Windows NT/2000 clients to download
print drivers from the Samba host upon demand.
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>Be very careful about enabling this parameter.</I
+></SPAN
>
</P
><P
>workgroup</I
></TT
></A
-> it is in. Samba 2.2
+> it is in. Samba 2.2 also
has limited capability to act as a domain controller for Windows
NT 4 Domains. For more details on setting up this feature see
the Samba-PDC-HOWTO included in the <TT
>.
Experimentation is the best policy :-) </P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none (i.e., all directories are OK
to descend)</I
+></SPAN
></P
><P
>Example: <B
to standard output. This listing will then be used in response
to the level 1 and 2 EnumPorts() RPC.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no enumports command</I
+></SPAN
></P
><P
>Example: <B
><DD
><P
>This parameter specifies a set of UNIX mode bit
- permissions that will <I
+ permissions that will <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>always</I
+></SPAN
> be set on a
file created by Samba. This is done by bitwise 'OR'ing these bits onto
the mode bits of a file that is being created or having its
><DD
><P
>This parameter specifies a set of UNIX mode bit
- permissions that will <I
+ permissions that will <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>always</I
+></SPAN
> be set on a directory
created by Samba. This is done by bitwise 'OR'ing these bits onto the
mode bits of a directory that is being created. The default for this
allows a user to modify all the user/group/world permissions on a
directory without restrictions.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that users who can access the
Samba server through other means can easily bypass this restriction,
so it is primarily useful for standalone "appliance" systems.
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no forced group</I
+></SPAN
></P
><P
>Example: <B
and allows a user to modify all the user/group/world permissions on a file,
with no restrictions.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that users who can access
the Samba server through other means can easily bypass this restriction,
so it is primarily useful for standalone "appliance" systems.
></A
></P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no forced user</I
+></SPAN
></P
><P
>Example: <B
> lp(1)</B
>.</P
><P
->This parameter does not accept % macros, because
+>This paramater does not accept % macros, because
many parts of the system require this value to be
constant for correct operation.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>specified at compile time, usually
"nobody"</I
+></SPAN
></P
><P
>Example: <B
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no file are hidden</I
+></SPAN
></P
><P
>Example: <B
that copes with different map formats and also Amd (another
automounter) maps.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE :</I
+></SPAN
>A working NIS client is required on
the system for this option to work.</P
><P
><P
>Default: <B
CLASS="COMMAND"
->homedir map = <empty string></B
+>homedir map = <empty string></B
></P
><P
>Example: <B
><P
>You can also specify hosts by network/netmask pairs and
by netgroup names if your system supports netgroups. The
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>EXCEPT</I
+></SPAN
> keyword can also be used to limit a
wildcard list. The following examples may provide some help:</P
><P
> for a way of testing your host access to see if it does
what you expect.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none (i.e., all hosts permitted access)
</I
+></SPAN
></P
><P
>Example: <B
>hosts allow</I
></TT
>
- - hosts listed here are <I
+ - hosts listed here are <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NOT</I
+></SPAN
> permitted access to
services unless the specific services have their own lists to override
this one. Where the lists conflict, the <TT
>
list takes precedence.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none (i.e., no hosts specifically excluded)
</I
+></SPAN
></P
><P
>Example: <B
> may be useful for NT clients which will
not supply passwords to Samba.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE :</I
+></SPAN
> The use of <TT
CLASS="PARAMETER"
><I
></TT
> option be only used if you really
know what you are doing, or perhaps on a home network where you trust
- your spouse and kids. And only if you <I
+ your spouse and kids. And only if you <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>really</I
+></SPAN
> trust
them :-).</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no host equivalences</I
+></SPAN
></P
><P
>Example: <B
>.
</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no file included</I
+></SPAN
></P
><P
>Example: <B
</A
> as usual.</P
><P
->Note that the setuid bit is <I
+>Note that the setuid bit is <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>never</I
+></SPAN
> set via
inheritance (the code explicitly prohibits this).</P
><P
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>all active interfaces except 127.0.0.1
that are broadcast capable</I
+></SPAN
></P
></DD
><DT
><DD
><P
>This is a list of users that should not be allowed
- to login to this service. This is really a <I
+ to login to this service. This is really a <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>paranoid</I
+></SPAN
>
check to absolutely ensure an improper setting does not breach
your security.</P
so the value <TT
CLASS="PARAMETER"
><I
->+&group</I
+>+&group</I
></TT
> means check the
UNIX group database, followed by the NIS netgroup database, and
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no invalid users</I
+></SPAN
></P
><P
>Example: <B
>
</A
> has oplocked. This allows complete data consistency between
- SMB/CIFS, NFS and local file access (and is a <I
+ SMB/CIFS, NFS and local file access (and is a <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>very</I
+></SPAN
>
cool feature :-).</P
><P
page for more information on how to accmplish this.
</P
><P
->Default : <I
+>Default : <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
></DD
><DT
><P
>Default : <B
CLASS="COMMAND"
->ldap filter = (&(uid=%u)(objectclass=sambaAccount))</B
+>ldap filter = (&(uid=%u)(objectclass=sambaAccount))</B
></P
></DD
><DT
><P
>This option is used to define whether or not Samba should
use SSL when connecting to the ldap server
- This is <I
+ This is <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NOT</I
+></SPAN
> related to
Samba's previous SSL support which was enabled by specifying the
<B
><TT
CLASS="PARAMETER"
><I
->Off</I
+>On</I
></TT
-> = Never use SSL when querying the directory.</P
-></LI
-><LI
-><P
-><TT
+> = Always use SSL when contacting the
+ <TT
CLASS="PARAMETER"
><I
->Start_tls</I
+>ldap server</I
></TT
-> = Use the LDAPv3 StartTLS extended operation
- (RFC2830) for communicating with the directory server.</P
+>.</P
></LI
><LI
><P
><TT
CLASS="PARAMETER"
><I
->On</I
-></TT
-> =
- Use SSL on the ldaps port when contacting the
- <TT
-CLASS="PARAMETER"
-><I
->ldap server</I
+>Off</I
></TT
->. Only
- available when the backwards-compatiblity <B
-CLASS="COMMAND"
-> --with-ldapsam</B
-> option is specified
- to configure. See <A
-HREF="#PASSDBBACKEND"
+> = Never use SSL when querying the directory.</P
+></LI
+><LI
+><P
><TT
CLASS="PARAMETER"
><I
->passdb backend</I
+>Start_tls</I
></TT
-></A
-></P
+> = Use the LDAPv3 StartTLS extended operation
+ (RFC2830) for communicating with the directory server.</P
></LI
></UL
><P
>Default : <B
CLASS="COMMAND"
->ldap ssl = start_tls</B
+>ldap ssl = on</B
></P
></DD
><DT
>ldap suffix (G)</DT
><DD
><P
->Specifies where user and machine accounts are added to the tree. Can be overriden by <B
-CLASS="COMMAND"
->ldap user suffix</B
-> and <B
-CLASS="COMMAND"
->ldap machine suffix</B
->. It also used as the base dn for all ldap searches. </P
-><P
->Default : <I
+>Default : <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
></DD
><DT
>It specifies where users are added to the tree.
</P
><P
->Default : <I
+>Default : <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
></DD
><DT
added to the ldap tree.
</P
><P
->Default : <I
+>Default : <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
></DD
><DT
></DD
><DT
><A
-NAME="LDAPTRUSTIDS"
-></A
->ldap trust ids (G)</DT
-><DD
-><P
->Normally, Samba validates each entry
- in the LDAP server against getpwnam(). This allows
- LDAP to be used for Samba with the unix system using
- NIS (for example) and also ensures that Samba does not
- present accounts that do not otherwise exist. </P
-><P
->This option is used to disable this functionality, and
- instead to rely on the presence of the appropriate
- attributes in LDAP directly, which can result in a
- significant performance boost in some situations.
- Setting this option to yes effectivly assumes
- that the local machine is running <B
-CLASS="COMMAND"
->nss_ldap</B
-> against the
- same LDAP server.</P
-><P
->Default: <B
-CLASS="COMMAND"
->ldap trust ids = No</B
-></P
-></DD
-><DT
-><A
NAME="LEVEL2OPLOCKS"
></A
>level2 oplocks (S)</DT
CLASS="CONSTANT"
>yes</TT
> doesn't
- mean that Samba will <I
+ mean that Samba will <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>become</I
+></SPAN
> the local master
browser on a subnet, just that <B
CLASS="COMMAND"
>nmbd</B
-> will <I
+> will <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
> participate</I
+></SPAN
> in elections for local master browser.</P
><P
>Setting this value to <TT
CLASS="COMMAND"
>nmbd</B
>
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>never</I
+></SPAN
> to become a local master browser.</P
><P
>Default: <B
>, real locking will be performed
by the server.</P
><P
->This option <I
+>This option <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>may</I
+></SPAN
> be useful for read-only
- filesystems which <I
+ filesystems which <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>may</I
+></SPAN
> not need locking (such as
CDROM drives), although setting this parameter of <TT
CLASS="CONSTANT"
CLASS="FILENAME"
>smb.conf</TT
> file. This parameter has been
- extended since the 2.2.x series, now it allow to specify the debug
+ extended since 2.2.x series, now it allow to specify the debug
level for multiple debug classes. This is to give greater
flexibility in the configuration of the system.</P
><P
>Thereafter, the directories and any of the contents can,
if required, be made read-only. It is not advisable that the
NTuser.dat file be made read-only - rename it to NTuser.man to
- achieve the desired effect (a <I
+ achieve the desired effect (a <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>MAN</I
+></SPAN
>datory
profile). </P
><P
>This option is only useful if Samba is set up as a logon
server.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no logon script defined</I
+></SPAN
></P
><P
>Example: <B
></A
> parameter.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>depends on the setting of <TT
CLASS="PARAMETER"
> printing</I
></TT
></I
+></SPAN
></P
><P
>Example: <B
></A
> parameter.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>depends on the setting of <TT
CLASS="PARAMETER"
</I
></TT
></I
+></SPAN
></P
><P
>Example 1: <B
><P
>Default: <B
CLASS="COMMAND"
->magic output = <magic script name>.out
+>magic output = <magic script name>.out
</B
></P
><P
>Note that some shells are unable to interpret scripts
containing CR/LF instead of CR as
the end-of-line marker. Magic scripts must be executable
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>as is</I
+></SPAN
> on the host, which for some hosts and
some shells will require filtering at the DOS end.</P
><P
->Magic scripts are <I
+>Magic scripts are <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>EXPERIMENTAL</I
+></SPAN
> and
- should <I
+ should <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NOT</I
+></SPAN
> be relied upon.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>None. Magic scripts disabled.</I
+></SPAN
></P
><P
>Example: <B
><DD
><P
>See the section on <A
-HREF="#AEN205"
+HREF="#AEN203"
> NAME MANGLING</A
></P
><P
> off the ends of filenames on some CDROMs (only visible
under some UNIXes). To do this use a map of (*;1 *;).</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no mangled map</I
+></SPAN
></P
><P
>Example: <B
or whether non-DOS names should simply be ignored.</P
><P
>See the section on <A
-HREF="#AEN205"
+HREF="#AEN203"
> NAME MANGLING</A
> for details on how to control the mangling process.</P
><P
a better algorithm (generates less collisions) in the names.
However, many Win32 applications store the mangled names and so
changing to the new algorithm must not be done
- lightly as these applications may break unless reinstalled.</P
+ lightly as these applications may break unless reinstalled.
+ New installations of Samba may set the default to hash2.</P
><P
>Default: <B
CLASS="COMMAND"
->mangling method = hash2</B
-></P
-><P
->Example: <B
-CLASS="COMMAND"
>mangling method = hash</B
></P
-></DD
-><DT
-><A
-NAME="MANGLEPREFIX"
-></A
->mangle prefix (G)</DT
-><DD
-><P
-> controls the number of prefix
- characters from the original name used when generating
- the mangled names. A larger value will give a weaker
- hash and therefore more name collisions. The minimum
- value is 1 and the maximum value is 6.</P
-><P
->Default: <B
-CLASS="COMMAND"
->mangle prefix = 1</B
-></P
><P
>Example: <B
CLASS="COMMAND"
->mangle prefix = 4</B
+>mangling method = hash2</B
></P
></DD
><DT
><DD
><P
>This controls what character is used as
- the <I
+ the <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>magic</I
+></SPAN
> character in <A
-HREF="#AEN205"
+HREF="#AEN203"
>name mangling</A
>. The default is a '~'
but this may interfere with some software. Use this option to set
will not know the reason they cannot access files they think
they should - there will have been no message given to them
that they got their password wrong. Helpdesk services will
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>hate</I
+></SPAN
> you if you set the <TT
CLASS="PARAMETER"
><I
></TT
> modes other than
share. This is because in these modes the name of the resource being
- requested is <I
+ requested is <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not</I
+></SPAN
> sent to the server until after
the server has successfully authenticated the client so the server
cannot make authentication decisions at the correct time (connection
><TT
CLASS="CONSTANT"
>LANMAN1</TT
->: First <I
+>: First <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
> modern</I
+></SPAN
> version of the protocol. Long filename
support.</P
></LI
CLASS="COMMAND"
>xedit</B
>, then
- removes it afterwards. <I
+ removes it afterwards. <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NOTE THAT IT IS VERY IMPORTANT
THAT THIS COMMAND RETURN IMMEDIATELY</I
+></SPAN
>. That's why I
have the '&' on the end. If it doesn't return immediately then
your PCs may freeze when sending messages (they should recover
><B
CLASS="COMMAND"
>message command = /bin/mail -s 'message from %f on
- %m' root < %s; rm %s</B
+ %m' root < %s; rm %s</B
></P
><P
>If you don't have a message command then the message
>message command = rm %s</B
></P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no message command</I
+></SPAN
></P
><P
>Example: <B
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>empty string (no additional names)</I
+></SPAN
></P
><P
>Example: <B
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>machine DNS name</I
+></SPAN
></P
><P
>Example: <B
><P
>Default: <B
CLASS="COMMAND"
->non unix account range = <empty string>
+>non unix account range = <empty string>
</B
></P
><P
is the amount of time Samba will wait before sending an oplock break
request to such (broken) clients.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ
AND UNDERSTOOD THE SAMBA OPLOCK CODE</I
+></SPAN
>.</P
><P
>Default: <B
>oplock contention limit (S)</DT
><DD
><P
->This is a <I
+>This is a <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>very</I
+></SPAN
> advanced
<A
HREF="smbd.8.html"
> to behave in a similar
way to Windows NT.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ
AND UNDERSTOOD THE SAMBA OPLOCK CODE</I
+></SPAN
>.</P
><P
>Default: <B
></TT
> in the local broadcast area.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note :</I
+></SPAN
>By default, Samba will win
a local master browsing election over all Microsoft operating
systems except a Windows NT 4.0/2000 Domain Controller. This
path to a file containing a mapping of Windows NT printer driver
names to OS/2 printer driver names. The format is:</P
><P
-><nt driver name> = <os2 driver
- name>.<device name></P
+><nt driver name> = <os2 driver
+ name>.<device name></P
><P
>For example, a valid entry using the HP LaserJet 5
printer driver would appear as <B
><P
>Default: <B
CLASS="COMMAND"
->os2 driver map = <empty string>
+>os2 driver map = <empty string>
</B
></P
></DD
><P
>Default: <B
CLASS="COMMAND"
->panic action = <empty string></B
+>panic action = <empty string></B
></P
><P
>Example: <B
><P
>This option allows the administrator to chose which backends to retrieve and store passwords with. This allows (for example) both
smbpasswd and tdbsam to be used without a recompile.
- Multiple backends can be specified, separated by spaces. The backends will be searched in the order they are specified. New users are always added to the first backend specified.
+ Multiple backends can be specified, seperated by spaces. The backends will be searched in the order they are specified. New users are always added to the first backend specified.
Experimental backends must still be selected
(eg --with-tdbsam) at configure time.
</P
>ldap://localhost</B
>)</P
><P
->Note: In this module, any account without a matching POSIX account is regarded
- as 'non unix'. </P
-><P
>See also <A
HREF="#NONUNIXACCOUNTRANGE"
> <TT
CLASS="PARAMETER"
><I
->non unix account
- range</I
+>non unix account range</I
></TT
></A
></P
-><P
->LDAP connections should be secured where
- possible. This may be done using either
- Start-TLS (see <A
-HREF="#LDAPSSL"
-> <TT
-CLASS="PARAMETER"
-><I
->ldap ssl</I
-></TT
-></A
->) or by
- specifying <TT
-CLASS="PARAMETER"
-><I
->ldaps://</I
-></TT
-> in
- the URL argument.
- </P
></LI
><LI
><P
>passwd chat (G)</DT
><DD
><P
->This string controls the <I
+>This string controls the <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>"chat"</I
+></SPAN
>
conversation that takes places between <A
HREF="smbd.8.html"
CLASS="CONSTANT"
>yes</TT
>. This
- sequence is then called <I
+ sequence is then called <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
> when the SMB password
in the smbpasswd file is being changed, without access to the old
password cleartext. This means that root must be able to reset the user's password
><DD
><P
>This boolean specifies if the passwd chat script
- parameter is run in <I
+ parameter is run in <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>debug</I
+></SPAN
> mode. In this mode the
strings passed to and received from the passwd chat are printed
in the <A
will be replaced with the user name. The user name is checked for
existence before calling the password changing program.</P
><P
->Also note that many passwd programs insist in <I
+>Also note that many passwd programs insist in <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>reasonable
</I
+></SPAN
> passwords, such as a minimum length, or the inclusion
of mixed case chars and digits. This can pose a problem as some clients
(such as Windows for Workgroups) uppercase the password before sending
it.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that if the <TT
CLASS="PARAMETER"
><I
CLASS="CONSTANT"
>yes
</TT
-> then this program is called <I
+> then this program is called <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
>
before the SMB password in the <A
HREF="smbpasswd.5.html"
>unix password sync</I
></TT
> parameter
- is set this parameter <I
+ is set this parameter <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>MUST USE ABSOLUTE PATHS</I
+></SPAN
>
- for <I
+ for <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>ALL</I
+></SPAN
> programs called, and must be examined
for security implications. Note that by default <TT
CLASS="PARAMETER"
the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in
user level security mode.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE:</I
+></SPAN
> Using a password server
means your UNIX box (running Samba) is only as secure as your
- password server. <I
+ password server. <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>DO NOT CHOOSE A PASSWORD SERVER THAT
YOU DON'T COMPLETELY TRUST</I
+></SPAN
>.</P
><P
>Never point a Samba server at itself for password
Primary or Backup Domain controllers to authenticate against by
doing a query for the name <TT
CLASS="CONSTANT"
->WORKGROUP<1C></TT
+>WORKGROUP<1C></TT
>
and then contacting each server returned in the list of IP
addresses from the name resolution source. </P
><P
->If the list of servers contains both names and the '*'
- character, the list is treated as a list of preferred
- domain controllers, but an auto lookup of all remaining DC's
- will be added to the list as well. Samba will not attempt to optimize
- this list by locating the closest DC.</P
-><P
>If the <TT
CLASS="PARAMETER"
><I
><P
>Default: <B
CLASS="COMMAND"
->password server = <empty string></B
+>password server = <empty string></B
>
</P
><P
>Example: <B
CLASS="COMMAND"
->password server = NT-PDC, NT-BDC1, NT-BDC2, *
+>password server = NT-PDC, NT-BDC1, NT-BDC2
</B
></P
><P
></A
> if one was specified.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none</I
+></SPAN
></P
><P
>Example: <B
</A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none (no command executed)</I
+></SPAN
>
</P
><P
>Example: <B
CLASS="COMMAND"
>postexec = echo \"%u disconnected from %S
- from %m (%I)\" >> /tmp/log</B
+ from %m (%I)\" >> /tmp/log</B
></P
></DD
><DT
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none (no command executed)</I
+></SPAN
></P
><P
>Example: <B
CLASS="COMMAND"
>preexec = echo \"%u connected to %S from %m
- (%I)\" >> /tmp/log</B
+ (%I)\" >> /tmp/log</B
></P
></DD
><DT
></A
> option is easier.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no preloaded services</I
+></SPAN
></P
><P
>Example: <B
></P
><P
>See the section on <A
-HREF="#AEN205"
+HREF="#AEN203"
>NAME
MANGLING</A
> for a fuller discussion.</P
>%z - the size of the spooled
print job (in bytes)</P
><P
->The print command <I
+>The print command <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>MUST</I
+></SPAN
> contain at least
one occurrence of <TT
CLASS="PARAMETER"
><P
><B
CLASS="COMMAND"
->print command = echo Printing %s >>
+>print command = echo Printing %s >>
/tmp/print.log; lpr -P %p %s; rm %s</B
></P
><P
><P
>A minimal printcap file would look something like this:</P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
> print1|My Printer 1
print4|My Printer 4
print5|My Printer 5
</PRE
-></TD
-></TR
-></TABLE
></P
><P
>where the '|' separates aliases of a printer. The fact
that the second alias has a space in it gives a hint to Samba
that it's a comment.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE</I
+></SPAN
>: Under AIX the default printcap
name is <TT
CLASS="FILENAME"
><P
>Default: <B
CLASS="COMMAND"
->printer admin = <empty string></B
+>printer admin = <empty string></B
>
</P
><P
>printer driver (S)</DT
><DD
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note :</I
+></SPAN
>This is a deprecated
parameter and will be removed in the next major release
following version 2.2. Please see the instructions in
>printer driver file (G)</DT
><DD
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note :</I
+></SPAN
>This is a deprecated
parameter and will be removed in the next major release
following version 2.2. Please see the instructions in
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>None (set in compile).</I
+></SPAN
></P
><P
>Example: <B
>printer driver location (S)</DT
><DD
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note :</I
+></SPAN
>This is a deprecated
parameter and will be removed in the next major release
following version 2.2. Please see the instructions in
name given will be used for any printable service that does
not have its own printer name specified.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>none (but may be <TT
CLASS="CONSTANT"
>lp</TT
>
on many systems)</I
+></SPAN
></P
><P
>Example: <B
path in the command as the PATH may not be available to the
server.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>depends on the setting of <TT
CLASS="PARAMETER"
</I
></TT
></I
+></SPAN
></P
><P
>Example: <B
path in the command as the PATH may not be available to the
server.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>depends on the setting of <A
HREF="#PRINTING"
></TT
></A
></I
+></SPAN
>
</P
><P
><P
>Default: <B
CLASS="COMMAND"
->read list = <empty string></B
+>read list = <empty string></B
></P
><P
>Example: <B
CLASS="COMMAND"
>printable = yes</B
>)
- will <I
+ will <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>ALWAYS</I
+></SPAN
> allow writing to the directory
(user privileges permitting), but only via spooling operations.</P
><P
><P
>Default: <B
CLASS="COMMAND"
->remote announce = <empty string>
+>remote announce = <empty string>
</B
></P
></DD
><P
>Default: <B
CLASS="COMMAND"
->remote browse sync = <empty string>
+>remote browse sync = <empty string>
</B
></P
></DD
>restrict anonymous (G)</DT
><DD
><P
->This is a integer parameter, and
- mirrors as much as possible the functinality the
- <TT
+>This is a boolean parameter. If it is <TT
CLASS="CONSTANT"
->RestrictAnonymous</TT
->
- registry key does on NT/Win2k. </P
+>yes</TT
+>, then
+ anonymous access to the server will be restricted, namely in the
+ case where the server is expecting the client to send a username,
+ but it doesn't. Setting it to <TT
+CLASS="CONSTANT"
+>yes</TT
+> will force these anonymous
+ connections to be denied, and the client will be required to always
+ supply a username and password when connecting. Use of this parameter
+ is only recommended for homogeneous NT client environments.</P
+><P
+>This parameter makes the use of macro expansions that rely
+ on the username (%U, %G, etc) consistent. NT 4.0
+ likes to use anonymous connections when refreshing the share list,
+ and this is a way to work around that.</P
+><P
+>When restrict anonymous is <TT
+CLASS="CONSTANT"
+>yes</TT
+>, all anonymous connections
+ are denied no matter what they are for. This can effect the ability
+ of a machine to access the Samba Primary Domain Controller to revalidate
+ its machine account after someone else has logged on the client
+ interactively. The NT client will display a message saying that
+ the machine's account in the domain doesn't exist or the password is
+ bad. The best way to deal with this is to reboot NT client machines
+ between interactive logons, using "Shutdown and Restart", rather
+ than "Close all programs and logon as a different user".</P
><P
>Default: <B
CLASS="COMMAND"
->restrict anonymous = 0</B
+>restrict anonymous = no</B
></P
></DD
><DT
>root directory</I
></TT
>
- option, <I
+ option, <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>including</I
+></SPAN
> some files needed for
complete operation of the server. To maintain full operability
of the server you will need to mirror some system files
><P
>Default: <B
CLASS="COMMAND"
->root postexec = <empty string>
+>root postexec = <empty string>
</B
></P
></DD
><P
>Default: <B
CLASS="COMMAND"
->root preexec = <empty string>
+>root preexec = <empty string>
</B
></P
></DD
>It is possible to use <B
CLASS="COMMAND"
>smbd</B
-> in a <I
+> in a <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
> hybrid mode</I
+></SPAN
> where it is offers both user and share
level security under different <A
HREF="#NETBIOSALIASES"
><A
NAME="SECURITYEQUALSSHARE"
></A
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SECURITY = SHARE
</I
+></SPAN
></P
><P
>When clients connect to a share level security server they
>Note that <B
CLASS="COMMAND"
>smbd</B
-> <I
+> <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>ALWAYS</I
+></SPAN
>
uses a valid UNIX user to act on behalf of the client, even in
<B
></LI
><LI
><P
->If the client did a previous <I
+>If the client did a previous <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>logon
</I
+></SPAN
> request (the SessionSetup SMB call) then the
username sent in this SMB will be added as a potential username.
</P
>, then this
guest user will be used, otherwise access is denied.</P
><P
->Note that it can be <I
+>Note that it can be <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>very</I
+></SPAN
> confusing
in share-level security as to which UNIX username will eventually
be used in granting access.</P
><P
>See also the section <A
-HREF="#AEN238"
+HREF="#AEN236"
> NOTE ABOUT USERNAME/PASSWORD VALIDATION</A
>.</P
><P
><A
NAME="SECURITYEQUALSUSER"
></A
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SECURITY = USER
</I
+></SPAN
></P
><P
>This is the default security setting in Samba 2.2.
may change the UNIX user to use on this connection, but only after
the user has been successfully authenticated.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that the name of the resource being
- requested is <I
+ requested is <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not</I
+></SPAN
> sent to the server until after
the server has successfully authenticated the client. This is why
guest shares don't work in user level security without allowing
> parameter for details on doing this.</P
><P
>See also the section <A
-HREF="#AEN238"
+HREF="#AEN236"
> NOTE ABOUT USERNAME/PASSWORD VALIDATION</A
>.</P
><P
><A
NAME="SECURITYEQUALSSERVER"
></A
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SECURITY = SERVER
</I
+></SPAN
></P
><P
>In this mode Samba will try to validate the username/password
> for details on how to set this
up.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that from the client's point of
view <B
CLASS="COMMAND"
with the authentication, it does not in any way affect what the
client sees.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that the name of the resource being
- requested is <I
+ requested is <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not</I
+></SPAN
> sent to the server until after
the server has successfully authenticated the client. This is why
guest shares don't work in user level security without allowing
> parameter for details on doing this.</P
><P
>See also the section <A
-HREF="#AEN238"
+HREF="#AEN236"
> NOTE ABOUT USERNAME/PASSWORD VALIDATION</A
>.</P
><P
><A
NAME="SECURITYEQUALSDOMAIN"
></A
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>SECURITY = DOMAIN
</I
+></SPAN
></P
><P
>This mode will only work correctly if <A
it to a Windows NT Primary or Backup Domain Controller, in exactly
the same way that a Windows NT Server would do.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that a valid UNIX user must still
exist as well as the account on the Domain Controller to allow
Samba to have a valid UNIX account to map file access to.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that from the client's point
of view <B
CLASS="COMMAND"
>. It only affects how the server deals with the authentication,
it does not in any way affect what the client sees.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that the name of the resource being
- requested is <I
+ requested is <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not</I
+></SPAN
> sent to the server until after
the server has successfully authenticated the client. This is why
guest shares don't work in user level security without allowing
</A
> parameter for details on doing this.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>BUG:</I
+></SPAN
> There is currently a bug in the
implementation of <B
CLASS="COMMAND"
Domain Controller. This issue will be addressed in a future release.</P
><P
>See also the section <A
-HREF="#AEN238"
+HREF="#AEN236"
> NOTE ABOUT USERNAME/PASSWORD VALIDATION</A
>.</P
><P
a user to modify all the user/group/world permissions on a file.
</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that users who can access the
Samba server through other means can easily bypass this
restriction, so it is primarily useful for standalone
>This option gives full share compatibility and enabled
by default.</P
><P
->You should <I
+>You should <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NEVER</I
+></SPAN
> turn this parameter
off as many Windows applications will break if you do so.</P
><P
names are lowered. </P
><P
>See the section on <A
-HREF="#AEN205"
+HREF="#AEN203"
> NAME MANGLING</A
>.</P
><P
></TT
>
parameter will always cause the OpenPrinterEx() on the server
- to fail. Thus the APW icon will never be displayed. <I
+ to fail. Thus the APW icon will never be displayed. <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
> Note :</I
+></SPAN
>This does not prevent the same user from having
administrative privilege on an individual printer.</P
><P
>shutdown script (G)</DT
><DD
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>This parameter only exists in the HEAD cvs branch</I
+></SPAN
>
This a full path name to a script called by
<A
>%r</I
></TT
> will be substituted with the
- switch <I
+ switch <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>-r</I
+></SPAN
>. It means reboot after shutdown
for NT.
</P
>%f</I
></TT
> will be substituted with the
- switch <I
+ switch <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>-f</I
+></SPAN
>. It means force the shutdown
even if applications do not respond for NT.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>None</I
+></SPAN
>.</P
><P
>Example: <B
></P
><P
>Shutdown script example:
- <TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
-><PRE
+ <PRE
CLASS="PROGRAMLISTING"
> #!/bin/bash
/sbin/shutdown $3 $4 +$time $1 &
</PRE
-></TD
-></TR
-></TABLE
>
Shutdown does not return so we need to launch it in background.
</P
></LI
></UL
><P
->Those marked with a <I
+>Those marked with a <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>'*'</I
+></SPAN
> take an integer
argument. The others can optionally take a 1 or 0 argument to enable
or disable the option, by default they will be enabled if you
>SAMBA_NETBIOS_NAME = myhostname</B
></P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>No default value</I
+></SPAN
></P
><P
>Examples: <B
><P
> This variable controls controls whether samba will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000sp2 clients to agree upon an authentication mechanism. As of samba 3.0alpha it must be set to "no" for these clients to join a samba domain controller. It can be set to "yes" to allow samba to participate in an AD domain controlled by a Windows2000 domain controller.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>use spnego = yes</I
+></SPAN
></P
></DD
><DT
><DD
><P
>Specifies whether Samba should try
- to use unicode on the wire by default. Note: This does NOT
- mean that samba will assume that the unix machine uses unicode!
+ to use unicode on the wire by default.
</P
><P
>Default: <B
CLASS="COMMAND"
>unix charset = ASCII</B
></P
-><P
->Example: <B
-CLASS="COMMAND"
->unix charset = UTF8</B
-></P
></DD
><DT
><A
>passwd
program</I
></TT
->parameter is called <I
+>parameter is called <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>AS ROOT</I
+></SPAN
> -
to allow the new UNIX password to be set without access to the
old UNIX password (as the SMB password change code has no
>If this parameter is enabled for a printer, then any attempt
to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped
to PRINTER_ACCESS_USE instead. Thus allowing the OpenPrinterEx()
- call to succeed. <I
+ call to succeed. <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>This parameter MUST not be able enabled
on a print share which has valid print driver installed on the Samba
server.</I
+></SPAN
></P
><P
>See also <A
will be read to find the names of hosts and users who will be allowed
access without specifying a password.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE:</I
+></SPAN
> The use of <TT
CLASS="PARAMETER"
><I
search.</P
><P
>See the section <A
-HREF="#AEN238"
+HREF="#AEN236"
>NOTE ABOUT
USERNAME/PASSWORD VALIDATION</A
> for more information on how
>Default: <B
CLASS="COMMAND"
>The guest account if a guest service,
- else <empty string>.</B
+ else <empty string>.</B
></P
><P
>Examples:<B
'!' to tell Samba to stop processing if it gets a match on
that line.</P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
> !sys = mary fred
guest = *
</PRE
-></TD
-></TR
-></TABLE
></P
><P
>Note that the remapping is applied to all occurrences
trouble deleting print jobs as PrintManager under WfWg will think
they don't own the print job.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no username map</I
+></SPAN
></P
><P
>Example: <B
>/var/run/utmp</TT
> on Linux).</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no utmp directory</I
+></SPAN
></P
><P
>Example: <B
>/var/run/wtmp</TT
> on Linux).</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no wtmp directory</I
+></SPAN
></P
><P
>Example: <B
></A
></P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>No valid users list (anyone can login)
</I
+></SPAN
></P
><P
>Example: <B
or directories as in DOS wildcards.</P
><P
>Each entry must be a unix path, not a DOS path and
- must <I
+ must <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not</I
+></SPAN
> include the unix directory
separator '/'.</P
><P
is important to be aware of is Samba's behaviour when
trying to delete a directory. If a directory that is
to be deleted contains nothing but veto files this
- deletion will <I
+ deletion will <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>fail</I
+></SPAN
> unless you also set
the <TT
CLASS="PARAMETER"
></A
>.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>No files or directories are vetoed.
</I
+></SPAN
></P
><P
->Examples:<TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="90%"
-><TR
-><TD
-><PRE
+>Examples:<PRE
CLASS="PROGRAMLISTING"
>; Veto any files containing the word Security,
; any ending in .tmp, and any directory containing the
; Veto the Apple specific files that a NetAtalk server
; creates.
veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/</PRE
-></TD
-></TR
-></TABLE
></P
></DD
><DT
>
parameter.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>No files are vetoed for oplock
grants</I
+></SPAN
></P
><P
>You might want to do this on files that you know will
>vfs object (S)</DT
><DD
><P
->This parameter specifies a shared object files that
- are used for Samba VFS I/O operations. By default, normal
+>This parameter specifies a shared object file that
+ is used for Samba VFS I/O operations. By default, normal
disk I/O operations are used but these can be overloaded
- with one or more VFS objects. </P
+ with a VFS object. The Samba VFS layer is new to Samba 2.2 and
+ must be enabled at compile time with --with-vfs.</P
><P
->Default : <I
+>Default : <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no value</I
+></SPAN
></P
></DD
><DT
><DD
><P
>This parameter allows parameters to be passed
- to the vfs layer at initialization time.
- See also <A
+ to the vfs layer at initialization time. The Samba VFS layer
+ is new to Samba 2.2 and must be enabled at compile time
+ with --with-vfs. See also <A
HREF="#VFSOBJECT"
><TT
CLASS="PARAMETER"
></A
>.</P
><P
->Default : <I
+>Default : <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>no value</I
+></SPAN
></P
></DD
><DT
returned for a share. Useful for CDROMs with installation programs
that insist on a particular volume label.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>the name of the share</I
+></SPAN
></P
></DD
><DT
> system call
will not return any data. </P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Warning:</I
+></SPAN
> Turning off user
enumeration may cause some programs to behave oddly. For
example, the finger program relies on having access to the
> system
call will not return any data. </P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Warning:</I
+></SPAN
> Turning off group
enumeration may cause some programs to behave oddly.
</P
><P
>Default: <B
CLASS="COMMAND"
->winbind gid = <empty string>
+>winbind gid = <empty string>
</B
></P
><P
><P
>Default: <B
CLASS="COMMAND"
->winbind uid = <empty string>
+>winbind uid = <empty string>
</B
></P
><P
><P
>Default: <B
CLASS="COMMAND"
->winbind use default domain = <no>
+>winbind use default domain = <no>
</B
></P
><P
>You should point this at your WINS server if you have a
multi-subnetted network.</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>NOTE</I
+></SPAN
>. You need to set up Samba to point
to a WINS server if you have multiple subnets and wish cross-subnet
browsing to work correctly.</P
>
in the docs/ directory of your Samba source distribution.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not enabled</I
+></SPAN
></P
><P
>Example: <B
CLASS="COMMAND"
>nmbd</B
> to be your WINS server.
- Note that you should <I
+ Note that you should <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NEVER</I
+></SPAN
> set this to <TT
CLASS="CONSTANT"
>yes</TT
>
setting.</P
><P
->Default: <I
+>Default: <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>set at compile time to WORKGROUP</I
+></SPAN
></P
><P
>Example: <B
><P
>If this integer parameter is set to non-zero value,
Samba will create an in-memory cache for each oplocked file
- (it does <I
+ (it does <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>not</I
+></SPAN
> do this for
non-oplocked files). All writes that the client does not request
to be flushed directly to disk will be stored in this cache if possible.
><P
>Default: <B
CLASS="COMMAND"
->write list = <empty string>
+>write list = <empty string>
</B
></P
><P
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN6147"
+NAME="AEN6113"
></A
><H2
>WARNINGS</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN6153"
+NAME="AEN6119"
></A
><H2
>VERSION</H2
><P
->This man page is correct for version 3.0 of
+>This man page is correct for version 2.2 of
the Samba suite.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN6156"
+NAME="AEN6122"
></A
><H2
>SEE ALSO</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN6176"
+NAME="AEN6142"
></A
><H2
>AUTHOR</H2
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
<HTML
><HEAD
><TITLE
>smbclient</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
+"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
ALINK="#0000FF"
><H1
><A
-NAME="SMBCLIENT"
-></A
->smbclient</H1
+NAME="SMBCLIENT">smbclient</H1
><DIV
CLASS="REFNAMEDIV"
><A
><DIV
CLASS="REFSYNOPSISDIV"
><A
-NAME="AEN8"
-></A
-><H2
+NAME="AEN8"><H2
>Synopsis</H2
><P
><B
CLASS="COMMAND"
>smbclient</B
-> {servicename} [password] [-b <buffer size>] [-d debuglevel] [-D Directory] [-U username] [-W workgroup] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-l logfile] [-L <netbios name>] [-I destinationIP] [-E] [-c <command string>] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-T<c|x>IXFqgbNan]</P
+> {servicename} [password] [-b <buffer size>] [-d debuglevel] [-D Directory] [-U username] [-W workgroup] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-l logfile] [-L <netbios name>] [-I destinationIP] [-E] [-c <command string>] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-T<c|x>IXFqgbNan]</P
></DIV
><DIV
CLASS="REFSECT1"
options. </P
></DD
><DT
->-R <name resolve order></DT
+>-R <name resolve order></DT
><DD
><P
>This option is used by the programs in the Samba
> for a description of how to handle incoming
WinPopup messages in Samba. </P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
-></SPAN
>: Copy WinPopup into the startup group
on your WfWg PCs if you want them to always be able to receive
messages. </P
CLASS="FILENAME"
>rfc1002.txt</TT
>.
- NetBIOS scopes are <SPAN
-CLASS="emphasis"
-><I
+ NetBIOS scopes are <I
CLASS="EMPHASIS"
>very</I
-></SPAN
> rarely used, only set
this parameter if you are the system administrator in charge of all
the NetBIOS systems you communicate with. </P
><I
>debuglevel</I
></TT
-> is set to the letter 'A', then <SPAN
-CLASS="emphasis"
-><I
+> is set to the letter 'A', then <I
CLASS="EMPHASIS"
>all
</I
-></SPAN
> debug messages will be printed. This setting
- is for developers only (and people who <SPAN
-CLASS="emphasis"
-><I
+ is for developers only (and people who <I
CLASS="EMPHASIS"
>really</I
-></SPAN
> want
to know how the code works internally). </P
><P
password used in the connection. The format of the file is
</P
><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="90%"
+><TR
+><TD
><PRE
CLASS="PROGRAMLISTING"
->username = <value>
-password = <value>
-domain = <value>
+>username = <value>
+password = <value>
+domain = <value>
</PRE
+></TD
+></TR
+></TABLE
></P
><P
>If the domain parameter is missing the current workgroup name
> how to interpret
filenames coming from the remote server. Usually Asian language
multibyte UNIX implementations use different character sets than
- SMB/CIFS servers (<SPAN
-CLASS="emphasis"
-><I
+ SMB/CIFS servers (<I
CLASS="EMPHASIS"
>EUC</I
-></SPAN
-> instead of <SPAN
-CLASS="emphasis"
-><I
+> instead of <I
CLASS="EMPHASIS"
> SJIS</I
-></SPAN
> for example). Setting this parameter will let
<B
CLASS="COMMAND"
></LI
></UL
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Tar Long File Names</I
-></SPAN
></P
><P
><B
files in the archive with relative names, not absolute names.
</P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Tar Filenames</I
-></SPAN
></P
><P
>All file names can be given as DOS path names (with '\'
as the component separator) or as UNIX path names (with '/' as
the component separator). </P
><P
-><SPAN
-CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Examples</I
-></SPAN
></P
><P
>Restore from tar file <TT
><P
><TT
CLASS="PROMPT"
->smb:\> </TT
+>smb:\> </TT
></P
><P
>The backslash ("\") indicates the current working directory
><P
>Parameters shown in square brackets (e.g., "[parameter]") are
optional. If not given, the command will use suitable defaults. Parameters
- shown in angle brackets (e.g., "<parameter>") are required.
+ shown in angle brackets (e.g., "<parameter>") are required.
</P
><P
>Note that all commands operating on the server are actually
directory on the server will be reported. </P
></DD
><DT
->del <mask></DT
+>del <mask></DT
><DD
><P
>The client will request that the server attempt
directory on the server. </P
></DD
><DT
->dir <mask></DT
+>dir <mask></DT
><DD
><P
>A list of the files matching <TT
from the program. </P
></DD
><DT
->get <remote file name> [local file name]</DT
+>get <remote file name> [local file name]</DT
><DD
><P
>Copy the file called <TT
lowercase filenames are the norm on UNIX systems. </P
></DD
><DT
->ls <mask></DT
+>ls <mask></DT
><DD
><P
>See the dir command above. </P
></DD
><DT
->mask <mask></DT
+>mask <mask></DT
><DD
><P
>This command allows the user to set up a mask
mask back to "*" after using the mget or mput commands. </P
></DD
><DT
->md <directory name></DT
+>md <directory name></DT
><DD
><P
>See the mkdir command. </P
></DD
><DT
->mget <mask></DT
+>mget <mask></DT
><DD
><P
>Copy all files matching <TT
> are binary. See also the lowercase command. </P
></DD
><DT
->mkdir <directory name></DT
+>mkdir <directory name></DT
><DD
><P
>Create a new directory on the server (user access
privileges permitting) with the specified name. </P
></DD
><DT
->mput <mask></DT
+>mput <mask></DT
><DD
><P
>Copy all files matching <TT
are binary. </P
></DD
><DT
->print <file name></DT
+>print <file name></DT
><DD
><P
>Print the specified file from the local machine
>See also the printmode command.</P
></DD
><DT
->printmode <graphics or text></DT
+>printmode <graphics or text></DT
><DD
><P
>Set the print mode to suit either binary data
</P
></DD
><DT
->put <local file name> [remote file name]</DT
+>put <local file name> [remote file name]</DT
><DD
><P
>Copy the file called <TT
>See the exit command. </P
></DD
><DT
->rd <directory name></DT
+>rd <directory name></DT
><DD
><P
>See the rmdir command. </P
using the mask command will be ignored. </P
></DD
><DT
->rm <mask></DT
+>rm <mask></DT
><DD
><P
>Remove all files matching <TT
working directory on the server. </P
></DD
><DT
->rmdir <directory name></DT
+>rmdir <directory name></DT
><DD
><P
>Remove the specified directory (user access
privileges permitting) from the server. </P
></DD
><DT
->setmode <filename> <perm=[+|\-]rsha></DT
+>setmode <filename> <perm=[+|\-]rsha></DT
><DD
><P
>A version of the DOS attrib command to set
</P
></DD
><DT
->tar <c|x>[IXbgNa]</DT
+>tar <c|x>[IXbgNa]</DT
><DD
><P
>Performs a tar operation - see the <TT
</P
></DD
><DT
->blocksize <blocksize></DT
+>blocksize <blocksize></DT
><DD
><P
>Blocksize. Must be followed by a valid (greater
>*TBLOCK (usually 512 byte) blocks. </P
></DD
><DT
->tarmode <full|inc|reset|noreset></DT
+>tarmode <full|inc|reset|noreset></DT
><DD
><P
>Changes tar's behavior with regard to archive
> /usr/samba/bin/</TT
> directory, this directory readable
by all, writeable only by root. The client program itself should
- be executable by all. The client should <SPAN
-CLASS="emphasis"
-><I
+ be executable by all. The client should <I
CLASS="EMPHASIS"
>NOT</I
-></SPAN
> be
setuid or setgid! </P
><P
><H2
>VERSION</H2
><P
->This man page is correct for version 3.0 of
+>This man page is correct for version 2.2 of
the Samba suite.</P
></DIV
><DIV
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML
><HEAD
><TITLE
>smbpasswd</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
-"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
ALINK="#0000FF"
><H1
><A
-NAME="SMBPASSWD">smbpasswd</H1
+NAME="SMBPASSWD"
+></A
+>smbpasswd</H1
><DIV
CLASS="REFNAMEDIV"
><A
><DIV
CLASS="REFSYNOPSISDIV"
><A
-NAME="AEN8"><H2
+NAME="AEN8"
+></A
+><H2
>Synopsis</H2
><P
><B
CLASS="COMMAND"
>smbpasswd</B
-> [-a] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-i] [-L] [username]</P
+> [-a] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [username]</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN27"
+NAME="AEN25"
></A
><H2
>DESCRIPTION</H2
> suite.</P
><P
>The smbpasswd program has several different
- functions, depending on whether it is run by the <I
+ functions, depending on whether it is run by the <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>root</I
+></SPAN
>
user or not. When run as a normal user it allows the user to change
the password used for their SMB sessions on any machines that store
CLASS="COMMAND"
>smbpasswd</B
> differs from how the passwd program works
- however in that it is not <I
+ however in that it is not <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>setuid root</I
+></SPAN
> but works in
a client-server mode and communicates with a locally running
<B
was typed correctly. No passwords will be echoed on the screen
whilst being typed. If you have a blank SMB password (specified by
the string "NO PASSWORD" in the smbpasswd file) then just press
- the <Enter> key when asked for your old password. </P
+ the <Enter> key when asked for your old password. </P
><P
>smbpasswd can also be used by a normal user to change their
SMB password on remote machines, such as Windows NT Primary Domain
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN43"
+NAME="AEN41"
></A
><H2
>OPTIONS</H2
><P
>This option specifies that the username
following should be added to the local smbpasswd file, with the
- new password typed (type <Enter> for the old password). This
+ new password typed (type <Enter> for the old password). This
option is ignored if the username following already exists in
the smbpasswd file and it is treated like a regular change
password command. Note that the default passdb backends require
copy of the user account database and will not allow the password
change).</P
><P
+><SPAN
+CLASS="emphasis"
><I
CLASS="EMPHASIS"
>Note</I
+></SPAN
> that Windows 95/98 do not have
a real password database so it is not possible to change passwords
specifying a Win95/98 machine as remote machine target. </P
</P
></DD
><DT
->-i</DT
-><DD
-><P
->This option tells smbpasswd that the account
- being changed is an interdomain trust account. Currently this is used
- when Samba is being used as an NT Primary Domain Controller.
- The account contains the info about another trusted domain.</P
-><P
->This option is only available when running smbpasswd as root.
- </P
-></DD
-><DT
->-L</DT
-><DD
-><P
->Run in local mode.</P
-></DD
-><DT
>username</DT
><DD
><P
>This specifies the username for all of the
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>root only</I
+></SPAN
> options to operate on. Only root
can specify this parameter as only root has the permission needed
to modify attributes directly in the local smbpasswd file.
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN173"
+NAME="AEN162"
></A
><H2
>NOTES</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN183"
+NAME="AEN172"
></A
><H2
>VERSION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN186"
+NAME="AEN175"
></A
><H2
>SEE ALSO</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN192"
+NAME="AEN181"
></A
><H2
>AUTHOR</H2
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML
><HEAD
><TITLE
>smbsh</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
-"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
ALINK="#0000FF"
><H1
><A
-NAME="SMBSH">smbsh</H1
+NAME="SMBSH"
+></A
+>smbsh</H1
><DIV
CLASS="REFNAMEDIV"
><A
><DIV
CLASS="REFSYNOPSISDIV"
><A
-NAME="AEN8"><H2
+NAME="AEN8"
+></A
+><H2
>Synopsis</H2
><P
><B
CLASS="COMMAND"
>smbsh</B
-> [-W workgroup] [-U username] [-P prefix] [-R <name resolve order>] [-d <debug level>] [-l logfile] [-L libdir]</P
+> [-W workgroup] [-U username] [-P prefix] [-R <name resolve order>] [-d <debug level>] [-l logfile] [-L libdir]</P
></DIV
><DIV
CLASS="REFSECT1"
>This option allows
the user to set the directory prefix for SMB access. The
default value if this option is not specified is
- <I
+ <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>smb</I
+></SPAN
>.
</P
></DD
><DT
->-R <name resolve order></DT
+>-R <name resolve order></DT
><DD
><P
>This option is used to determine what naming
order. </P
></DD
><DT
->-d <debug level></DT
+>-d <debug level></DT
><DD
><P
>debug level is an integer from 0 to 10.</P
that authenticates you to the machine running the Windows NT
operating system.</P
><P
-><TABLE
-BORDER="0"
-BGCOLOR="#E0E0E0"
-WIDTH="100%"
-><TR
-><TD
><PRE
CLASS="PROGRAMLISTING"
> <TT
></TT
>
</PRE
-></TD
-></TR
-></TABLE
></P
><P
>Any dynamically linked command you execute from
the workgroup MYGROUP. The command
<B
CLASS="COMMAND"
->ls /smb/MYGROUP/<machine-name></B
+>ls /smb/MYGROUP/<machine-name></B
> will show the share
names for that machine. You could then, for example, use the <B
CLASS="COMMAND"
><H2
>VERSION</H2
><P
->This man page is correct for version 3.0 of
+>This man page is correct for version 2.2 of
the Samba suite.</P
></DIV
><DIV
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="Group mapping HOWTO"
-HREF="groupmapping.html"><LINK
+TITLE="Quick Cross Subnet Browsing / Cross Workgroup Browsing guide"
+HREF="browsing-quick.html"><LINK
REL="NEXT"
-TITLE="Appendixes"
-HREF="appendixes.html"></HEAD
+TITLE="HOWTO Access Samba source code via CVS"
+HREF="cvs-access.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="groupmapping.html"
+HREF="browsing-quick.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="appendixes.html"
+HREF="cvs-access.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="SPEED"
></A
->Chapter 23. Samba performance issues</H1
+>Chapter 17. Samba performance issues</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN3065"
+NAME="AEN2742"
></A
->23.1. Comparisons</H1
+>17.1. Comparisons</H1
><P
>The Samba server uses TCP to talk to the client. Thus if you are
trying to see if it performs well you should really compare it to
><H1
CLASS="SECT1"
><A
-NAME="AEN3071"
+NAME="AEN2748"
></A
->23.2. Oplocks</H1
+>17.2. Oplocks</H1
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN3073"
+NAME="AEN2750"
></A
->23.2.1. Overview</H2
+>17.2.1. Overview</H2
><P
>Oplocks are the way that SMB clients get permission from a server to
locally cache file operations. If a server grants an oplock
><H2
CLASS="SECT2"
><A
-NAME="AEN3081"
+NAME="AEN2758"
></A
->23.2.2. Level2 Oplocks</H2
+>17.2.2. Level2 Oplocks</H2
><P
>With Samba 2.0.5 a new capability - level2 (read only) oplocks is
supported (although the option is off by default - see the smb.conf
><H2
CLASS="SECT2"
><A
-NAME="AEN3087"
+NAME="AEN2764"
></A
->23.2.3. Old 'fake oplocks' option - deprecated</H2
+>17.2.3. Old 'fake oplocks' option - deprecated</H2
><P
>Samba can also fake oplocks, by granting a oplock whenever a client
asks for one. This is controlled using the smb.conf option "fake
><H1
CLASS="SECT1"
><A
-NAME="AEN3091"
+NAME="AEN2768"
></A
->23.3. Socket options</H1
+>17.3. Socket options</H1
><P
>There are a number of socket options that can greatly affect the
performance of a TCP based server like Samba.</P
><H1
CLASS="SECT1"
><A
-NAME="AEN3098"
+NAME="AEN2775"
></A
->23.4. Read size</H1
+>17.4. Read size</H1
><P
>The option "read size" affects the overlap of disk reads/writes with
network reads/writes. If the amount of data being transferred in
><H1
CLASS="SECT1"
><A
-NAME="AEN3103"
+NAME="AEN2780"
></A
->23.5. Max xmit</H1
+>17.5. Max xmit</H1
><P
>At startup the client and server negotiate a "maximum transmit" size,
which limits the size of nearly all SMB commands. You can set the
><H1
CLASS="SECT1"
><A
-NAME="AEN3108"
+NAME="AEN2785"
></A
->23.6. Locking</H1
+>17.6. Locking</H1
><P
>By default Samba does not implement strict locking on each read/write
call (although it did in previous versions). If you enable strict
><H1
CLASS="SECT1"
><A
-NAME="AEN3112"
+NAME="AEN2789"
></A
->23.7. Share modes</H1
+>17.7. Share modes</H1
><P
>Some people find that opening files is very slow. This is often
because of the "share modes" code needed to fully implement the dos
><H1
CLASS="SECT1"
><A
-NAME="AEN3117"
+NAME="AEN2794"
></A
->23.8. Log level</H1
+>17.8. Log level</H1
><P
>If you set the log level (also known as "debug level") higher than 2
then you may suffer a large drop in performance. This is because the
><H1
CLASS="SECT1"
><A
-NAME="AEN3120"
+NAME="AEN2797"
></A
->23.9. Wide lines</H1
+>17.9. Wide lines</H1
><P
>The "wide links" option is now enabled by default, but if you disable
it (for better security) then you may suffer a performance hit in
><H1
CLASS="SECT1"
><A
-NAME="AEN3123"
+NAME="AEN2800"
></A
->23.10. Read raw</H1
+>17.10. Read raw</H1
><P
>The "read raw" operation is designed to be an optimised, low-latency
file read operation. A server may choose to not support it,
><H1
CLASS="SECT1"
><A
-NAME="AEN3128"
+NAME="AEN2805"
></A
->23.11. Write raw</H1
+>17.11. Write raw</H1
><P
>The "write raw" operation is designed to be an optimised, low-latency
file write operation. A server may choose to not support it,
><H1
CLASS="SECT1"
><A
-NAME="AEN3132"
+NAME="AEN2809"
></A
->23.12. Read prediction</H1
+>17.12. Read prediction</H1
><P
>Samba can do read prediction on some of the SMB commands. Read
prediction means that Samba reads some extra data on the last file it
><H1
CLASS="SECT1"
><A
-NAME="AEN3139"
+NAME="AEN2816"
></A
->23.13. Memory mapping</H1
+>17.13. Memory mapping</H1
><P
>Samba supports reading files via memory mapping them. One some
machines this can give a large boost to performance, on others it
><H1
CLASS="SECT1"
><A
-NAME="AEN3144"
+NAME="AEN2821"
></A
->23.14. Slow Clients</H1
+>17.14. Slow Clients</H1
><P
>One person has reported that setting the protocol to COREPLUS rather
than LANMAN2 gave a dramatic speed improvement (from 10k/s to 150k/s).</P
><H1
CLASS="SECT1"
><A
-NAME="AEN3148"
+NAME="AEN2825"
></A
->23.15. Slow Logins</H1
+>17.15. Slow Logins</H1
><P
>Slow logins are almost always due to the password checking time. Using
the lowest practical "password level" will improve things a lot. You
><H1
CLASS="SECT1"
><A
-NAME="AEN3151"
+NAME="AEN2828"
></A
->23.16. Client tuning</H1
+>17.16. Client tuning</H1
><P
>Often a speed problem can be traced to the client. The client (for
example Windows for Workgroups) can often be tuned for better TCP
><H1
CLASS="SECT1"
><A
-NAME="AEN3183"
+NAME="AEN2860"
></A
->23.17. My Results</H1
+>17.17. My Results</H1
><P
>Some people want to see real numbers in a document like this, so here
they are. I have a 486sx33 client running WfWg 3.11 with the 3.11b
ALIGN="left"
VALIGN="top"
><A
-HREF="groupmapping.html"
+HREF="browsing-quick.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="appendixes.html"
+HREF="cvs-access.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Group mapping HOWTO</TD
+>Quick Cross Subnet Browsing / Cross Workgroup Browsing guide</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Appendixes</TD
+>HOWTO Access Samba source code via CVS</TD
></TR
></TABLE
></DIV
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML
><HEAD
><TITLE
>testparm</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
-"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.77"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
ALINK="#0000FF"
><H1
><A
-NAME="TESTPARM">testparm</H1
+NAME="TESTPARM"
+></A
+>testparm</H1
><DIV
CLASS="REFNAMEDIV"
><A
><DIV
CLASS="REFSYNOPSISDIV"
><A
-NAME="AEN8"><H2
+NAME="AEN8"
+></A
+><H2
>Synopsis</H2
><P
><B
CLASS="COMMAND"
>testparm</B
-> [-s] [-h] [-v] [-L <servername>] [-t <encoding>] {config filename} [hostname hostIP]</P
+> [-s] [-h] [-v] [-L <servername>] {config filename} [hostname hostIP]</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN18"
+NAME="AEN17"
></A
><H2
>DESCRIPTION</H2
</B
> will successfully load the configuration file.</P
><P
->Note that this is <I
+>Note that this is <SPAN
+CLASS="emphasis"
+><I
CLASS="EMPHASIS"
>NOT</I
+></SPAN
> a guarantee that
the services specified in the configuration file will be
available or will operate as expected. </P
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN33"
+NAME="AEN32"
></A
><H2
>OPTIONS</H2
their defaults.</P
></DD
><DT
->-t encoding</DT
-><DD
-><P
-> Output data in specified encoding.
- </P
-></DD
-><DT
>configfilename</DT
><DD
><P
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN77"
+NAME="AEN72"
></A
><H2
>FILES</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN86"
+NAME="AEN81"
></A
><H2
>DIAGNOSTICS</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN89"
+NAME="AEN84"
></A
><H2
>VERSION</H2
><P
->This man page is correct for version 3.0 of
+>This man page is correct for version 2.2 of
the Samba suite.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN92"
+NAME="AEN87"
></A
><H2
>SEE ALSO</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN99"
+NAME="AEN94"
></A
><H2
>AUTHOR</H2
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="Integrating MS Windows networks with Samba"
-HREF="integrate-ms-networks.html"><LINK
+TITLE="Hosting a Microsoft Distributed File System tree on Samba"
+HREF="msdfs.html"><LINK
REL="NEXT"
-TITLE="Configuring PAM for distributed but centrally
-managed authentication"
-HREF="pam.html"></HEAD
+TITLE="Printing Support in Samba 2.2.x"
+HREF="printing.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="integrate-ms-networks.html"
+HREF="msdfs.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="pam.html"
+HREF="printing.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="UNIX-PERMISSIONS"
></A
->Chapter 12. UNIX Permission Bits and Windows NT Access Control Lists</H1
+>Chapter 5. UNIX Permission Bits and Windows NT Access Control Lists</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN1618"
+NAME="AEN580"
></A
->12.1. Viewing and changing UNIX permissions using the NT
+>5.1. Viewing and changing UNIX permissions using the NT
security dialogs</H1
><P
>New in the Samba 2.0.4 release is the ability for Windows
><H1
CLASS="SECT1"
><A
-NAME="AEN1627"
+NAME="AEN589"
></A
->12.2. How to view file security on a Samba share</H1
+>5.2. How to view file security on a Samba share</H1
><P
>From an NT 4.0 client, single-click with the right
mouse button on any file or directory in a Samba mounted
><H1
CLASS="SECT1"
><A
-NAME="AEN1638"
+NAME="AEN600"
></A
->12.3. Viewing file ownership</H1
+>5.3. Viewing file ownership</H1
><P
>Clicking on the <B
CLASS="COMMAND"
><H1
CLASS="SECT1"
><A
-NAME="AEN1658"
+NAME="AEN620"
></A
->12.4. Viewing file or directory permissions</H1
+>5.4. Viewing file or directory permissions</H1
><P
>The third button is the <B
CLASS="COMMAND"
><H2
CLASS="SECT2"
><A
-NAME="AEN1673"
+NAME="AEN635"
></A
->12.4.1. File Permissions</H2
+>5.4.1. File Permissions</H2
><P
>The standard UNIX user/group/world triple and
the corresponding "read", "write", "execute" permissions
><H2
CLASS="SECT2"
><A
-NAME="AEN1687"
+NAME="AEN649"
></A
->12.4.2. Directory Permissions</H2
+>5.4.2. Directory Permissions</H2
><P
>Directories on an NT NTFS file system have two
different sets of permissions. The first set of permissions
><H1
CLASS="SECT1"
><A
-NAME="AEN1694"
+NAME="AEN656"
></A
->12.5. Modifying file or directory permissions</H1
+>5.5. Modifying file or directory permissions</H1
><P
>Modifying file and directory permissions is as simple
as changing the displayed permissions in the dialog box, and
><H1
CLASS="SECT1"
><A
-NAME="AEN1716"
+NAME="AEN678"
></A
->12.6. Interaction with the standard Samba create mask
+>5.6. Interaction with the standard Samba create mask
parameters</H1
><P
>Note that with Samba 2.0.5 there are four new parameters
><H1
CLASS="SECT1"
><A
-NAME="AEN1780"
+NAME="AEN742"
></A
->12.7. Interaction with the standard Samba file attribute
+>5.7. Interaction with the standard Samba file attribute
mapping</H1
><P
>Samba maps some of the DOS attribute bits (such as "read
ALIGN="left"
VALIGN="top"
><A
-HREF="integrate-ms-networks.html"
+HREF="msdfs.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="pam.html"
+HREF="printing.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Integrating MS Windows networks with Samba</TD
+>Hosting a Microsoft Distributed File System tree on Samba</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Configuring PAM for distributed but centrally
-managed authentication</TD
+>Printing Support in Samba 2.2.x</TD
></TR
></TABLE
></DIV
><B
CLASS="COMMAND"
>wbinfo</B
-> [-u] [-g] [-i ip] [-N netbios-name] [-n name] [-s sid] [-U uid] [-G gid] [-S sid] [-Y sid] [-t] [-m] [-r user] [-a user%password] [-A user%password] [-p]</P
+> [-u] [-g] [-h name] [-i ip] [-n name] [-s sid] [-U uid] [-G gid] [-S sid] [-Y sid] [-t] [-m] [-r user] [-a user%password] [-A user%password]</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN27"
+NAME="AEN26"
></A
><H2
>DESCRIPTION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN38"
+NAME="AEN37"
></A
><H2
>OPTIONS</H2
>. </P
></DD
><DT
->-N name</DT
+>-h name</DT
><DD
><P
>The <TT
CLASS="PARAMETER"
><I
->-N</I
+>-h</I
></TT
> option
queries <B
</P
></DD
><DT
->-I ip</DT
+>-i ip</DT
><DD
><P
>The <TT
CLASS="PARAMETER"
><I
->-I</I
+>-i</I
></TT
> option
queries <B
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN120"
+NAME="AEN119"
></A
><H2
>EXIT STATUS</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN125"
+NAME="AEN124"
></A
><H2
>VERSION</H2
><P
->This man page is correct for version 3.0 of
+>This man page is correct for version 2.2 of
the Samba suite.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN128"
+NAME="AEN127"
></A
><H2
>SEE ALSO</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN133"
+NAME="AEN132"
></A
><H2
>AUTHOR</H2
--- /dev/null
+<HTML>\r
+<HEAD>\r
+<TITLE>Peter Karrer Announces SLIP for WFW</TITLE>\r
+</HEAD>\r
+<BODY>\r
+<H1><I>Winserve</I></H1>\r
+<HR>\r
+<H2><I>Peter Karrer Announces SLIP for WFW</I></H2>\r
+[NEW 03-22-95)\r
+<HR>\r
+<B>Hello,</B>\r
+<P>\r
+I've discovered a way to run WfW's TCP/IP-32 over a SLIP packet driver. This\r
+allows WfW users to do Windows networking over dialup lines just like it is\r
+possible with NT and the Windows 95 beta!\r
+<P>\r
+For instance, you can mount Microsoft's FTP server as a network drive in File\r
+Manager or connect to an MS Mail post office over the Internet. Of course,\r
+the usual Internet stuff works as well. Another interesting site is\r
+WINSERVE.001; check out www.winserve.com.\r
+<HR>\r
+This method should work with any class 1 (Ethernet II) packet driver. However,\r
+I'm not in a position to try anything else than SLIPPER/CSLIPPER. \r
+<HR>\r
+<H3>Files you need:</H3>\r
+<B>WFWT32.EXE:</B> ftp://ftp.microsoft.com/bussys/msclient/wfw/wfwt32.exe\r
+<P>\r
+ Microsoft's free TCP/IP for WfW. It's a self-extracting archive which\r
+ should be executed in an empty directory.\r
+<P>\r
+<B>SLIPPER.EXE:</B> ftp://biocserver.bioc.cwru.edu/pub/dos/slipper/slippr15.zip\r
+<P>\r
+ Peter Tattam's SLIP packet driver. CSLIPPER.EXE is a variant which supports\r
+ VJ header compression.\r
+<P>\r
+<B>PDETHER.EXE:</B> ftp://sjf-lwp.idz.sjf.novell.com/odi/pdether/pde105.zip\r
+<P>\r
+ Don Provan's ODI-over-Packet Driver shim. This *must* be version 1.05 (or\r
+ above).\r
+<P>\r
+<B>LSL.COM:</B>\r
+<P>\r
+ Novell's LAN Support Layer. If you're an owner of Windows 3.10, you'll\r
+ have it on one of your install disks. Use "expand a:lsl.co_ lsl.com" to\r
+ expand it. Microsoft has stopped bundling LSL.COM with WfW 3.11, though.\r
+ The newest version of LSL.COM can be downloaded as part of\r
+ ftp://ftp.novell.com/pub/netware/nwos/dosclnt12/vlms/vlmup2.exe.\r
+ However, it's not clear if this one may be legally used outside Netware\r
+ environments.\r
+<P>\r
+<B>NET.CFG:</B>\r
+<P>\r
+ A configuration file for LSL and PDETHER. It should contain the following\r
+ text:\r
+<P>\r
+<PRE>\r
+Link Support\r
+ Buffers 8 1600\r
+Link Driver PDETHER\r
+ Int 60\r
+ Frame Ethernet_II\r
+ Protocol IP 800 Ethernet_II\r
+ Protocol ARP 806 Ethernet_II\r
+ Protocol RARP 8035 Ethernet_II\r
+</PRE> \r
+<P>\r
+<B>DISCOMX.COM:</B>\r
+<P>\r
+ A little hack of mine to disable the COM port used by the SLIP packet driver.\r
+ Usage is e.g. "discomx 2" to disable COM2. This should be run before\r
+ starting WfW, otherwise you'll get "device conflict" messages. Here it is:\r
+<P><PRE>\r
+begin 644 discomx.com\r
+F,=N)V8H.@`"P(+^!`/.N3XH="=MT!DN`XP/1XS')!R:)CP`$S2``\r
+`\r
+end\r
+ </PRE>\r
+ (Save this text to disk as <I>filename</I>, then run "uudecode <I>filename</I>".\r
+ uudecode can be found, for instance, at\r
+ ftp://ftp.switch.ch/mirror/simtel/msdos/starter/uudecode.com )\r
+<P>\r
+<B>LMHOSTS:</B>\r
+ <P> \r
+ An optional file which should be stored in your Windows subdirectory. It is\r
+ used to map NetBIOS computer names to IP addresses. Example:\r
+<P>\r
+<PRE>\r
+198.105.232.1 ftp #PRE # ftp.microsoft.com\r
+204.118.34.11 winserve.001 #PRE # Winserve\r
+</PRE>\r
+<HR>\r
+<H3>How to install it:</H3>\r
+<P>\r
+<UL>\r
+<LI>Put the files mentioned above into a directory, e.g. C:\SLIP.\r
+<P>\r
+<LI>Put the following lines into AUTOEXEC.BAT:\r
+<P><PRE>\r
+ cd \slip\r
+ slipper com1 vec=60 baud=57600 ether (may vary with your modem setup)\r
+ lsl\r
+ pdether\r
+ discomx 1 (must correspond to SLIPPER's COM port)\r
+</PRE>\r
+ (If you use another vec= setting, you must update that in NET.CFG as well.)\r
+ Use CSLIPPER instead of SLIPPER if your SLIP provider supports VJC.\r
+<P>\r
+<LI>Start WfW.\r
+<UL>\r
+<LI>Under Windows Setup, choose "Change Network Settings".\r
+<LI>Select "Install Microsoft Windows Network". \r
+<LI>In "Drivers...", choose "Add Adapter"\r
+ and install the "IPXODI Support driver (Ethernet) [ODI/NDIS3]". \r
+<LI>In "Add Protocols...", select "Unlisted or Updated Protocol". When asked for a\r
+ driver disk, enter the directory where you expanded WFWT32.EXE. \r
+<LI>Configure TCP/IP (IP address, enable LMHOSTS lookup, try 204.118.34.11 as primary\r
+ WINS server). Remove all other protocols (NetBEUI, IPX/SPX).\r
+</UL>\r
+<P>\r
+<LI>Windows will probably update the first lines of AUTOEXEC.BAT with\r
+<P>\r
+<PRE>\r
+ c:\windows\net start\r
+ c:\windows\odihlp.exe.\r
+</PRE>\r
+ The "odihlp" line must be moved behind the "pdether" line.\r
+<P>\r
+<LI>Windows will also update NET.CFG with some "Frame" lines. These must\r
+ be removed (except "Frame Ethernet_II").\r
+<P>\r
+<LI>Somehow, you will have to dial in to your SLIP provider. I do it manually\r
+ before slipper (or cslipper) gets loaded, using a DOS-based terminal program.\r
+ But there are some automatic dialers around. I've seen recommendations for\r
+ ftp://mvmpc9.ciw.uni-karlsruhe.de/x-slip/slip_it.exe. \r
+<P>\r
+<LI>To connect to Microsoft's FTP server (or Winserve) go into File Manager,\r
+ choose "Connect Network drive" and enter "\\ftp" or "\\winserve.001" into\r
+ the "Path:" field.\r
+</UL>\r
+<HR>\r
+<H3>How it works:</H3>\r
+<P>\r
+Microsoft's TCP/IP-32 requires an NDIS3 interface. NDIS is Microsoft's way\r
+to interface with a network.\r
+<P>\r
+WfW also contains an NDIS3-over-ODI "shim", whose real mode component is\r
+ODIHLP.EXE. ODI is Novell's way to interface with a network.\r
+<P>\r
+SLIPPER is a Packet Driver (PD) for use over serial lines. PDs are everybody\r
+else's way to interface with a network. SLIPPER's "ether" option makes it\r
+look like an Ethernet PD to applications using it. \r
+<P>\r
+A "shim" is a program which simulates a network application programming\r
+interface on top of another.\r
+<P>\r
+There is no NDIS SLIP driver which would work with WfW.\r
+<P>\r
+There is no NDIS-over-PD shim.\r
+<P>\r
+However, there's an ODI-over-PD shim (PDETHER) and an NDIS-over-ODI shim\r
+(ODIHLP etc.)\r
+<P>\r
+OK, so let's do NDIS-over-ODI-over-PD!\r
+ <P>\r
+This should have worked all the time; however, a non-feature in PDETHER\r
+versions < 1.05 has prevented the method from functioning until now.\r
+<HR>\r
+<B>Questions, suggestions etc. please to\r
+<P>\r
+<PRE>\r
+Peter Karrer pkarrer@ife.ee.ethz.ch\r
+</PRE>\r
+</B>\r
+</BODY>\r
+</HTML>\r
REL="HOME"
TITLE="SAMBA Project Documentation"
HREF="samba-howto-collection.html"><LINK
-REL="UP"
-TITLE="Optional configuration"
-HREF="optional.html"><LINK
REL="PREVIOUS"
-TITLE="Printing Support"
-HREF="printing.html"><LINK
+TITLE="security = domain in Samba 2.x"
+HREF="domain-security.html"><LINK
REL="NEXT"
-TITLE="Passdb MySQL plugin"
-HREF="pdb-mysql.html"></HEAD
+TITLE="How to Configure Samba 2.2 as a Primary Domain Controller"
+HREF="samba-pdc.html"></HEAD
><BODY
CLASS="CHAPTER"
BGCOLOR="#FFFFFF"
ALIGN="left"
VALIGN="bottom"
><A
-HREF="printing.html"
+HREF="domain-security.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="bottom"
><A
-HREF="pdb-mysql.html"
+HREF="samba-pdc.html"
ACCESSKEY="N"
>Next</A
></TD
><A
NAME="WINBIND"
></A
->Chapter 16. Unified Logons between Windows NT and UNIX using Winbind</H1
+>Chapter 10. Unified Logons between Windows NT and UNIX using Winbind</H1
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN2238"
+NAME="AEN1255"
></A
->16.1. Abstract</H1
+>10.1. Abstract</H1
><P
>Integration of UNIX and Microsoft Windows NT through
a unified logon has been considered a "holy grail" in heterogeneous
><H1
CLASS="SECT1"
><A
-NAME="AEN2242"
+NAME="AEN1259"
></A
->16.2. Introduction</H1
+>10.2. Introduction</H1
><P
>It is well known that UNIX and Microsoft Windows NT have
different models for representing user and group information and
><H1
CLASS="SECT1"
><A
-NAME="AEN2255"
+NAME="AEN1272"
></A
->16.3. What Winbind Provides</H1
+>10.3. What Winbind Provides</H1
><P
>Winbind unifies UNIX and Windows NT account management by
allowing a UNIX box to become a full member of a NT domain. Once
><H2
CLASS="SECT2"
><A
-NAME="AEN2262"
+NAME="AEN1279"
></A
->16.3.1. Target Uses</H2
+>10.3.1. Target Uses</H2
><P
>Winbind is targeted at organizations that have an
existing NT based domain infrastructure into which they wish
><H1
CLASS="SECT1"
><A
-NAME="AEN2266"
+NAME="AEN1283"
></A
->16.4. How Winbind Works</H1
+>10.4. How Winbind Works</H1
><P
>The winbind system is designed around a client/server
architecture. A long running <B
><H2
CLASS="SECT2"
><A
-NAME="AEN2271"
+NAME="AEN1288"
></A
->16.4.1. Microsoft Remote Procedure Calls</H2
+>10.4.1. Microsoft Remote Procedure Calls</H2
><P
>Over the last two years, efforts have been underway
by various Samba Team members to decode various aspects of
><H2
CLASS="SECT2"
><A
-NAME="AEN2275"
+NAME="AEN1292"
></A
->16.4.2. Name Service Switch</H2
+>10.4.2. Name Service Switch</H2
><P
>The Name Service Switch, or NSS, is a feature that is
present in many UNIX operating systems. It allows system
><H2
CLASS="SECT2"
><A
-NAME="AEN2291"
+NAME="AEN1308"
></A
->16.4.3. Pluggable Authentication Modules</H2
+>10.4.3. Pluggable Authentication Modules</H2
><P
>Pluggable Authentication Modules, also known as PAM,
is a system for abstracting authentication and authorization
><H2
CLASS="SECT2"
><A
-NAME="AEN2299"
+NAME="AEN1316"
></A
->16.4.4. User and Group ID Allocation</H2
+>10.4.4. User and Group ID Allocation</H2
><P
>When a user or group is created under Windows NT
is it allocated a numerical relative identifier (RID). This is
><H2
CLASS="SECT2"
><A
-NAME="AEN2303"
+NAME="AEN1320"
></A
->16.4.5. Result Caching</H2
+>10.4.5. Result Caching</H2
><P
>An active system can generate a lot of user and group
name lookups. To reduce the network cost of these lookups winbind
><H1
CLASS="SECT1"
><A
-NAME="AEN2306"
+NAME="AEN1323"
></A
->16.5. Installation and Configuration</H1
+>10.5. Installation and Configuration</H1
><P
>Many thanks to John Trostel <A
HREF="mailto:jtrostel@snapserver.com"
><H2
CLASS="SECT2"
><A
-NAME="AEN2313"
+NAME="AEN1330"
></A
->16.5.1. Introduction</H2
+>10.5.1. Introduction</H2
><P
>This HOWTO describes the procedures used to get winbind up and
running on my RedHat 7.1 system. Winbind is capable of providing access
><H2
CLASS="SECT2"
><A
-NAME="AEN2326"
+NAME="AEN1343"
></A
->16.5.2. Requirements</H2
+>10.5.2. Requirements</H2
><P
>If you have a samba configuration file that you are currently
using... <SPAN
> back to the original state they were in if
you get frustrated with the way things are going. ;-)</P
><P
->The latest version of SAMBA (version 3.0 as of this writing), now
+>The latest version of SAMBA (version 2.2.2 as of this writing), now
includes a functioning winbindd daemon. Please refer to the
<A
HREF="http://samba.org/"
><H2
CLASS="SECT2"
><A
-NAME="AEN2340"
+NAME="AEN1357"
></A
->16.5.3. Testing Things Out</H2
+>10.5.3. Testing Things Out</H2
><P
>Before starting, it is probably best to kill off all the SAMBA
related daemons running on your server. Kill off all <B
><H3
CLASS="SECT3"
><A
-NAME="AEN2351"
+NAME="AEN1368"
></A
->16.5.3.1. Configure and compile SAMBA</H3
+>10.5.3.1. Configure and compile SAMBA</H3
><P
>The configuration and compilation of SAMBA is pretty straightforward.
The first three steps may not be necessary depending upon
><H3
CLASS="SECT3"
><A
-NAME="AEN2370"
+NAME="AEN1387"
></A
->16.5.3.2. Configure <TT
+>10.5.3.2. Configure <TT
CLASS="FILENAME"
>nsswitch.conf</TT
> and the
><H3
CLASS="SECT3"
><A
-NAME="AEN2403"
+NAME="AEN1420"
></A
->16.5.3.3. Configure smb.conf</H3
+>10.5.3.3. Configure smb.conf</H3
><P
>Several parameters are needed in the smb.conf file to control
the behavior of <B
><H3
CLASS="SECT3"
><A
-NAME="AEN2419"
+NAME="AEN1436"
></A
->16.5.3.4. Join the SAMBA server to the PDC domain</H3
+>10.5.3.4. Join the SAMBA server to the PDC domain</H3
><P
>Enter the following command to make the SAMBA server join the
PDC domain, where <TT
>root#</TT
> <B
CLASS="COMMAND"
->/usr/local/samba/bin/net rpc join -S PDC -U Administrator</B
+>/usr/local/samba/bin/net rpc join -s PDC -U Administrator</B
></P
><P
>The proper response to the command should be: "Joined the domain
><H3
CLASS="SECT3"
><A
-NAME="AEN2430"
+NAME="AEN1447"
></A
->16.5.3.5. Start up the winbindd daemon and test it!</H3
+>10.5.3.5. Start up the winbindd daemon and test it!</H3
><P
>Eventually, you will want to modify your smb startup script to
automatically invoke the winbindd daemon when the other parts of
><H3
CLASS="SECT3"
><A
-NAME="AEN2466"
+NAME="AEN1483"
></A
->16.5.3.6. Fix the init.d startup scripts</H3
+>10.5.3.6. Fix the init.d startup scripts</H3
><DIV
CLASS="SECT4"
><H4
CLASS="SECT4"
><A
-NAME="AEN2468"
+NAME="AEN1485"
></A
->16.5.3.6.1. Linux</H4
+>10.5.3.6.1. Linux</H4
><P
>The <B
CLASS="COMMAND"
><H4
CLASS="SECT4"
><A
-NAME="AEN2485"
+NAME="AEN1502"
></A
->16.5.3.6.2. Solaris</H4
+>10.5.3.6.2. Solaris</H4
><P
>On solaris, you need to modify the
<TT
><H4
CLASS="SECT4"
><A
-NAME="AEN2492"
+NAME="AEN1509"
></A
->16.5.3.6.3. Restarting</H4
+>10.5.3.6.3. Restarting</H4
><P
>If you restart the <B
CLASS="COMMAND"
><H3
CLASS="SECT3"
><A
-NAME="AEN2498"
+NAME="AEN1515"
></A
->16.5.3.7. Configure Winbind and PAM</H3
+>10.5.3.7. Configure Winbind and PAM</H3
><P
>If you have made it this far, you know that winbindd and samba are working
together. If you want to use winbind to provide authentication for other
><H4
CLASS="SECT4"
><A
-NAME="AEN2515"
+NAME="AEN1532"
></A
->16.5.3.7.1. Linux/FreeBSD-specific PAM configuration</H4
+>10.5.3.7.1. Linux/FreeBSD-specific PAM configuration</H4
><P
>The <TT
CLASS="FILENAME"
><H4
CLASS="SECT4"
><A
-NAME="AEN2548"
+NAME="AEN1565"
></A
->16.5.3.7.2. Solaris-specific configuration</H4
+>10.5.3.7.2. Solaris-specific configuration</H4
><P
>The /etc/pam.conf needs to be changed. I changed this file so that my Domain
users can logon both locally as well as telnet.The following are the changes
><H1
CLASS="SECT1"
><A
-NAME="AEN2555"
+NAME="AEN1572"
></A
->16.6. Limitations</H1
+>10.6. Limitations</H1
><P
>Winbind has a number of limitations in its current
released version that we hope to overcome in future
><H1
CLASS="SECT1"
><A
-NAME="AEN2565"
+NAME="AEN1582"
></A
->16.7. Conclusion</H1
+>10.7. Conclusion</H1
><P
>The winbind system, through the use of the Name Service
Switch, Pluggable Authentication Modules, and appropriate
ALIGN="left"
VALIGN="top"
><A
-HREF="printing.html"
+HREF="domain-security.html"
ACCESSKEY="P"
>Prev</A
></TD
ALIGN="right"
VALIGN="top"
><A
-HREF="pdb-mysql.html"
+HREF="samba-pdc.html"
ACCESSKEY="N"
>Next</A
></TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
->Printing Support</TD
+>security = domain in Samba 2.x</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
-><A
-HREF="optional.html"
-ACCESSKEY="U"
->Up</A
-></TD
+> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
->Passdb MySQL plugin</TD
+>How to Configure Samba 2.2 as a Primary Domain Controller</TD
></TR
></TABLE
></DIV
><B
CLASS="COMMAND"
>winbindd</B
-> [-i] [-B] [-d <debug level>] [-s <smb config file>] [-n]</P
+> [-i] [-d <debug level>] [-s <smb config file>]</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN16"
+NAME="AEN14"
></A
><H2
>DESCRIPTION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN59"
+NAME="AEN57"
></A
><H2
>OPTIONS</H2
>winbindd</B
> is required. </P
></DD
-><DT
->-n</DT
-><DD
-><P
->Disable caching. This means winbindd will
- always have to wait for a response from the domain controller
- before it can respond to a client and this thus makes things
- slower. The results will however be more accurate, since
- results from the cache might not be up-to-date. This
- might also temporarily hang winbindd if the DC doesn't respond.
- </P
-></DD
-><DT
->-B</DT
-><DD
-><P
->Dual daemon mode. This means winbindd will run
- as 2 threads. The first will answer all requests from the cache,
- thus making responses to clients faster. The other will
- update the cache for the query that the first has just responded.
- Advantage of this is that responses are accurate and fast.
- </P
-></DD
-><DT
->-s|--conf=smb.conf</DT
-><DD
-><P
->Specifies the location of the all-important
- <TT
-CLASS="FILENAME"
->smb.conf</TT
-> file. </P
-></DD
></DL
></DIV
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN85"
+NAME="AEN70"
></A
><H2
>NAME AND ID RESOLUTION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN91"
+NAME="AEN76"
></A
><H2
>CONFIGURATION</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN133"
+NAME="AEN118"
></A
><H2
>EXAMPLE SETUP</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN172"
+NAME="AEN157"
></A
><H2
>NOTES</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN188"
+NAME="AEN173"
></A
><H2
>SIGNALS</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN205"
+NAME="AEN190"
></A
><H2
>FILES</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN234"
+NAME="AEN219"
></A
><H2
>VERSION</H2
><P
->This man page is correct for version 3.0 of
+>This man page is correct for version 2.2 of
the Samba suite.</P
></DIV
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN237"
+NAME="AEN222"
></A
><H2
>SEE ALSO</H2
><DIV
CLASS="REFSECT1"
><A
-NAME="AEN244"
+NAME="AEN229"
></A
><H2
>AUTHOR</H2
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "FINDSMB" "1" "05 November 2002" "" ""
+.TH "FINDSMB" "1" "26 November 2002" "" ""
.SH NAME
findsmb \- list info about machines that respond to SMB name queries on a subnet
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "LMHOSTS" "5" "05 November 2002" "" ""
+.TH "LMHOSTS" "5" "01 October 2002" "" ""
.SH NAME
lmhosts \- The Samba NetBIOS hosts file
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "NET" "8" "05 November 2002" "" ""
+.TH "NET" "8" "03 October 2002" "" ""
.SH NAME
net \- Tool for administration of Samba and remote CIFS servers.
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "NMBD" "8" "05 November 2002" "" ""
+.TH "NMBD" "8" "26 November 2002" "" ""
.SH NAME
nmbd \- NetBIOS name server to provide NetBIOS over IP naming services to clients
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "NMBLOOKUP" "1" "05 November 2002" "" ""
+.TH "NMBLOOKUP" "1" "26 November 2002" "" ""
.SH NAME
nmblookup \- NetBIOS over TCP/IP client used to lookup NetBIOS names
.SH SYNOPSIS
account policy value for bad lockout attempt is now 3
.fi
-.TP
-\fB-d|--debug=debuglevel\fR
-\fIdebuglevel\fR is an integer
-from 0 to 10. The default value if this parameter is
-not specified is zero.
-
-The higher this value, the more detail will be
-logged to the log files about the activities of the
-server. At level 0, only critical errors and serious
-warnings will be logged. Level 1 is a reasonable level for
-day to day running - it generates a small amount of
-information about operations carried out.
-
-Levels above 1 will generate considerable
-amounts of log data, and should only be used when
-investigating a problem. Levels above 3 are designed for
-use only by developers and generate HUGE amounts of log
-data, most of which is extremely cryptic.
-
-Note that specifying this parameter here will
-override the log
-level file.
-.TP
-\fB-h|--help\fR
-Print a summary of command line options.
-.TP
-\fB-s <configuration file>\fR
-The file specified contains the
-configuration details required by the server. The
-information in this file includes server-specific
-information such as what printcap file to use, as well
-as descriptions of all the services that the server is
-to provide. See \fIsmb.conf(5)\fR for more information.
-The default configuration file name is determined at
-compile time.
.SH "NOTES"
.PP
This command may be used only by root.
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "RPCCLIENT" "1" "05 November 2002" "" ""
+.TH "RPCCLIENT" "1" "26 November 2002" "" ""
.SH NAME
rpcclient \- tool for executing client side MS-RPC functions
.SH SYNOPSIS
execute semicolon separated commands (listed
below))
.TP
-\fB-d|--debug=debuglevel\fR
-\fIdebuglevel\fR is an integer
-from 0 to 10. The default value if this parameter is
-not specified is zero.
-
-The higher this value, the more detail will be
-logged to the log files about the activities of the
-server. At level 0, only critical errors and serious
-warnings will be logged. Level 1 is a reasonable level for
-day to day running - it generates a small amount of
-information about operations carried out.
-
-Levels above 1 will generate considerable
-amounts of log data, and should only be used when
-investigating a problem. Levels above 3 are designed for
-use only by developers and generate HUGE amounts of log
-data, most of which is extremely cryptic.
-
-Note that specifying this parameter here will
-override the log
-level file.
-.TP
-\fB-h|--help\fR
-Print a summary of command line options.
-.TP
\fB-I IP-address\fR
\fIIP address\fR is the address of the server to connect to.
It should be specified in standard "a.b.c.d" notation.
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SAMBA" "7" "05 November 2002" "" ""
+.TH "SAMBA" "7" "01 October 2002" "" ""
.SH NAME
SAMBA \- A Windows SMB/CIFS fileserver for UNIX
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBCACLS" "1" "05 November 2002" "" ""
+.TH "SMBCACLS" "1" "01 October 2002" "" ""
.SH NAME
smbcacls \- Set or get ACLs on an NT file or directory names
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBCLIENT" "1" "05 November 2002" "" ""
+.TH "SMBCLIENT" "1" "26 November 2002" "" ""
.SH NAME
smbclient \- ftp-like client to access SMB/CIFS resources on servers
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBCONTROL" "1" "05 November 2002" "" ""
+.TH "SMBCONTROL" "1" "01 October 2002" "" ""
.SH NAME
smbcontrol \- send messages to smbd, nmbd or winbindd processes
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBGROUPEDIT" "8" "05 November 2002" "" ""
+.TH "SMBGROUPEDIT" "8" "01 October 2002" "" ""
.SH NAME
smbgroupedit \- Query/set/change UNIX - Windows NT group mapping
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBMNT" "8" "05 November 2002" "" ""
+.TH "SMBMNT" "8" "01 October 2002" "" ""
.SH NAME
smbmnt \- helper utility for mounting SMB filesystems
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBMOUNT" "8" "05 November 2002" "" ""
+.TH "SMBMOUNT" "8" "01 October 2002" "" ""
.SH NAME
smbmount \- mount an smbfs filesystem
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBPASSWD" "5" "05 November 2002" "" ""
+.TH "SMBPASSWD" "5" "26 November 2002" "" ""
.SH NAME
smbpasswd \- The Samba encrypted password file
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBSPOOL" "8" "05 November 2002" "" ""
+.TH "SMBSPOOL" "8" "01 October 2002" "" ""
.SH NAME
smbspool \- send a print file to an SMB printer
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBSTATUS" "1" "05 November 2002" "" ""
+.TH "SMBSTATUS" "1" "01 October 2002" "" ""
.SH NAME
smbstatus \- report on current Samba connections
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBTAR" "1" "05 November 2002" "" ""
+.TH "SMBTAR" "1" "01 October 2002" "" ""
.SH NAME
smbtar \- shell script for backing up SMB/CIFS shares directly to UNIX tape drives
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBUMOUNT" "8" "05 November 2002" "" ""
+.TH "SMBUMOUNT" "8" "01 October 2002" "" ""
.SH NAME
smbumount \- smbfs umount for normal users
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SWAT" "8" "05 November 2002" "" ""
+.TH "SWAT" "8" "01 October 2002" "" ""
.SH NAME
swat \- Samba Web Administration Tool
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "TESTPRNS" "1" "05 November 2002" "" ""
+.TH "TESTPRNS" "1" "01 October 2002" "" ""
.SH NAME
testprns \- check printer name for validity with smbd
.SH SYNOPSIS
Execute the specified (colon-separated) commands.
See below for the commands that are available.
.TP
-\fB-d|--debug=debuglevel\fR
-\fIdebuglevel\fR is an integer
-from 0 to 10. The default value if this parameter is
-not specified is zero.
-
-The higher this value, the more detail will be
-logged to the log files about the activities of the
-server. At level 0, only critical errors and serious
-warnings will be logged. Level 1 is a reasonable level for
-day to day running - it generates a small amount of
-information about operations carried out.
-
-Levels above 1 will generate considerable
-amounts of log data, and should only be used when
-investigating a problem. Levels above 3 are designed for
-use only by developers and generate HUGE amounts of log
-data, most of which is extremely cryptic.
-
-Note that specifying this parameter here will
-override the log
-level file.
-.TP
-\fB-h|--help\fR
-Print a summary of command line options.
-.TP
\fB-l|--logfile=logbasename\fR
File name for log/debug files. The extension
\&'.client' will be appended. The log file is never removed
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "WBINFO" "1" "05 November 2002" "" ""
+.TH "WBINFO" "1" "26 November 2002" "" ""
.SH NAME
wbinfo \- Query information from winbind daemon
.SH SYNOPSIS
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "WINBINDD" "8" "05 November 2002" "" ""
+.TH "WINBINDD" "8" "26 November 2002" "" ""
.SH NAME
winbindd \- Name Service Switch daemon for resolving names from NT servers
.SH SYNOPSIS
--- /dev/null
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+<HEAD>
+<TITLE>SAMBA - opening windows to a wider world</TITLE>
+<META HTTP-EQUIV="Content-Type" content="text/html; charset=iso-8859-1">
+<META NAME="keywords" CONTENT="Samba,SMB,CIFS">
+<META NAME="description" CONTENT="Home of Samba, the SMB file server.">
+</HEAD>
+<BODY BGCOLOR="#ffffff" TEXT="#000000" VLINK="#292555" LINK="#292555" ALINK="#cc0033">
+
+
+<TABLE BORDER=0 WIDTH="85%" ALIGN="CENTER">
+ <tr VALIGN="middle">
+ <td ALIGN="left">
+ <ul>
+ <li><font size="-1"><a href="http://www.samba.org/samba/samba.html">home</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/index.html">mirrors</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/search.html">search</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/whatsnew/">announcements</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/archives.html">mailing lists</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/docs/">documentation</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/books.html">books</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/download.html">download</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/donations.html">donations</a></font>
+ </ul>
+ </td>
+ <td align="center">
+ <a href="http://www.samba.org/samba/samba.html"><img src="http://www.samba.org/samba/images/slmed.gif"
+ width="226" height="107" border="0" alt="samba"></a>
+ </td>
+ <td align="left">
+ <ul>
+ <li><font size="-1"><a href="http://www.samba.org/samba/contacts.html">Contacts</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/team.html">Samba Team</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/devel/">development</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/support/">support</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/GUI/">gui interfaces</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/thanks.html">thanks</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/vendors/">vendors</a></font>
+ <li><font size="-1"><a href="http://samba-survey.sernet.de/">survey</a></font>
+ <li><font size="-1"><a href="http://www.samba.org/samba/tshirt.html">t-shirts, etc</a></font>
+ </ul>
+ </td>
+ </tr>
+
+ <TR ALIGN="center">
+ <TD COLSPAN="3"><BR>
+ <img src="http://www.samba.org/samba/images/bar1.gif" WIDTH="493" HEIGHT="26"
+ BORDER="0"
+ alt="=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=">
+ <br><br><br>
+ </TD>
+ </TR>
+
+<tr><td></td><TD ALIGN="left">
+
+
+<h3>Roadmap to 3.0</h3>
+<p><em>Page Last Updated</em> : $Date: 2002/11/01 15:24:20 $</em>
+<p><em>Estimated shipdate</em> : When it is ready.
+<p><em>Current Alpha Release</em> : <a href="http://www.samba.org/samba/ftp/alpha/samba-3.0alpha20.tar.gz">Samba-3.0alpha20</a>
+<p><em>Goals for 3.0alpha21 Release</em> :
+<ul>
+ <li>Produce RPMs for next alpha snapshot
+</ul>
+
+<h3>Road to 3.0</h3>
+
+<ul>
+ <li>(26th Sept, 2002) <em>SAMBA_3_0 cvs branch</em>
+ <p>With the release of 3.0alpha20, the SAMBA_3_0 cvs branch is now being
+ officially maintained in an effort to stablize certain features. If you would
+ like to continue to test the soon-to-be-3.0 codease, please use this branch
+ tag when checking out the cvs tree.
+</ul>
+
+<h3>Roadmap Overview</h3>
+
+<p>This is a feature list/roadmap for the 3.0 release. A lot of discussion
+has gone on about this. Implementation is a separate discussion :-)
+If a feature is already done, I marked it as "Req". It should be obvious
+from this roadmap that one the major hurdles for releasing the 3.0 code base
+is the completion of documentation updates.
+
+<ul>
+ <li>X = done
+ <li>o = TODO
+ <li>- = unknown
+</ul>
+
+<p>
+Some features have been through basic testing that have
+<b>o</b>'s beneath testing column since we are not done.
+Items are ordered by maturity, not by importance. If it
+is marked as <em>Required</em>, then it must be completed
+for a stable 3.0 release.
+
+<p>
+<table border="0" width="100%">
+ <tr>
+ <td width=50%><h3>Feature</h3></td>
+ <td align=center><h3>Required?</h3></td>
+ <td align=center><h3>Code</h3></td>
+ <td align=center><h3>Test</h3></td>
+ <td align=center><h3>Document</h3></td>
+ </tr>
+
+ <tr>
+ <td><em><u>Release Delaying Features</u></em></td>
+ </tr>
+
+ <tr>
+ <td width=50%>UNICODE support</td>
+ <td align=center>yes</td>
+ <td align=center>X</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>Windows 2000 AD client support</td>
+ <td align=center>yes</td>
+ <td align=center>X</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>winbind dual-daemon implementation</td>
+ <td align=center>yes</td>
+ <td align=center>X</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>pluggable passdb support</td>
+ <td align=center>yes</td>
+ <td align=center>X</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>Windows NT 4.0 Style Trust Relationship</td>
+ <td align=center>yes</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>NTLMv2</td>
+ <td align=center>yes</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>One Time Migration script from a Windows NT
+ 4.0 PDC to a Samba PDC</td>
+ <td align=center>yes</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>Winbind working with Samba PDC</td>
+ <td align=center>yes</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>Loadable RPC implementations</td>
+ <td align=center>yes</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>hook for utilizing a centralized winbindd id map database</td>
+ <td align=center>yes</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>Group Mapping support(privileges need some work, etc...)</td>
+ <td align=center>yes</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td><em><u>Non-Release Delaying Features</u></em></td>
+ </tr>
+
+ <tr>
+ <td width=50%>Stackable VFS</td>
+ <td align=center>no</td>
+ <td align=center>X</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>Publishing printers in AD (probably will make 3.0 but will not delay release)</td>
+ <td align=center>no</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ <td align=center>o</td>
+ </tr>
+
+ <tr>
+ <td width=50%>SAM replication (full implementation still lacks
+ some decoding work; post 3.0)</td>
+ <td align=center>no</td>
+ <td align=center>-</td>
+ <td align=center>-</td>
+ <td align=center>-</td>
+ </tr>
+
+ <tr>
+ <td width=50%>SMB signing (needs more research; not a show stopper)</td>
+ <td align=center>no</td>
+ <td align=center>-</td>
+ <td align=center>-</td>
+ <td align=center>-</td>
+ </tr>
+
+ <tr>
+ <td width=50%>schannel, ntlmv2 sign & seal (needs more research)</td>
+ <td align=center>no</td>
+ <td align=center>-</td>
+ <td align=center>-</td>
+ <td align=center>-</td>
+ </tr>
+
+</table>
+
+
+<p>
+Plus the following interesting, but non-show stopping projects
+
+<ul>
+ <li>background updates of print queues via a dedicated process
+ <li>WINS replication with Windows NT WINS servers
+ <li>alternative backend for WINS database
+</ul>
+
+
+
+</td>
+<td></td>
+</tr>
+
+ <TR ALIGN="center">
+ <TD COLSPAN="3"><BR><BR><BR><img src="http://www.samba.org/samba/images/bar1.gif" WIDTH="493" HEIGHT="26" BORDER="0" alt="=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-="></TD>
+ </TR>
+ <TR>
+ <TD COLSPAN="3" ALIGN="center">
+ <em>samba - opening windows to a wider world</em>
+ </TD>
+ </TR>
+</TABLE>
+
+<table align="center">
+<tr><td>
+<form method="post" action="http://de.samba.org/cgi-bin/htsearch">
+<input type="text" size="30" name="words" value="">
+<input type="submit" value="Search">
+</form>
+</td>
+</tr></table>
+
+
+</BODY>
+</HTML>
+
+There are Six (6) Extracts here from mail in the Samba Mailing List.
+The key contribution here is from Kurt Pfeifle.
+
+I added them to this repository in the hope that someone would find the information helpful.
+
+John T. <jht@samba.org>
+
+==============================================================================
+<<< EXTANT 1 >>>
+==============================================================================
+Subject: Print Filtering Mechanism Explained
+============================================
+
Date: Sun, 22 Sep 2002 15:38:02 +0200
From: "Kurt Pfeifle" <kpfeifle@danka.de>
Reply-To: kpfeifle@danka.de
can possibly tweak it to their needs.
+==============================================================================
+<<< EXTANT 2 >>>
+==============================================================================
+Subject: Print Drivers and Devices with CUPS
+============================================
+
+CUPS ships a well-working Laserjet driver. Install it (as root) with
+
+ "lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -m laserjet.ppd"
+
+(The "-m" switch will retrieve the "laserjet.ppd" from the standard repository
+for not-yet-installed-PPDs, which CUPS keeps at "/usr/share/cups/model/". Alter-
+natively, you may use "-P /absolute/filesystem/path/to/where/there/is/PPD/your.ppd")
+
+You didn't state if the print system is working on the Linux side of things.
+Even if it does -- to print from Windows, involves some more steps....
+
+But let me first point out some more general things about printer "drivers"
+for Linux/Unix (yes, and for Mac OS X now!), be it you use CUPS or one of
+the venerable (I'd even call them "ancient" and "rusty" now...) printing
+systems.
+
+You -- and everybody else, for that matter -- should always also consult the
+database on linuxprinting.org for all recommendations about "which driver
+is best used for which printer":
+
+ http://www.linuxprinting.org/printer_list.cgi
+
+There select your model and click on "Show". You'll arrive at a page listing
+all drivers working with your model. There will always be *one* "recommended"
+one. Try this one first. In your case ("HP LaserJet 4 Plus"), you'll arrive
+here:
+
+ http://www.linuxprinting.org/show_printer.cgi?recnum=75104
+
+The recommended driver is "ljet4". It has a link to the page for the ljet4
+driver too:
+
+ http://www.linuxprinting.org/show_driver.cgi?driver=ljet4
+
+On the driver's page, you'll find various important and detailed infos about
+how to use that driver within various spoolers. You can generate a PPD for
+CUPS. The PPD contains all the info about how to use your model and the driver;
+this is, once installed, working transparently for the user -- you'll only
+need to choose resolution, paper size etc. from the web-based menu or from
+the print dialog GUI or from the commandline...
+
+On the driver's page, choose to use the "PPD-O-Matic" online PPD generator
+program. Select your model and click "Generate PPD file". When you safe the
+appearing ASCII text file, don't use "cut'n'past" (as it will possible corrupt
+line endings and tabs), but use "Save as..." in your browser's menu. Save it
+at "/some/path/on/your/filesystem/somewhere/my-name-for-my-printer.ppd"
+
+Then install the printer:
+
+ "lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -P /some/path/on/your/filesystem/somewhere/my-name-for-my-printer.ppd"
+
+Note, that for all the "Foomatic-PPDs" from Linuxprinting.org, you also need
+a special "CUPS filter" named "cupsomatic". Get the latest version of
+"cupsomatic" from
+
+ http://www.linuxprinting.org/cupsomatic
+
+This needs to be copied to "/usr/lib/cups/filter/cupsomatic" and be made world
+executable. This filter is needed to read and act upon the specially encoded
+Foomatic comments, embedded in the printfile, which in turn are used to
+construct (transparently for you, the user) the complicated ghostscript command
+line needed for your printer/driver combo.
+
+You can have a look at all the options for the Ghostscript commandline supported
+by your printer and the ljet4 driver by going to the section "Execution details",
+selecting your model (Laserjet 4 Plus) and clicking on "Show execution details".
+This will bring up this web page:
+
+ http://www.linuxprinting.org/execution.cgi?driver=ljet4&printer=75104&.submit=Show+execution+details
+
+The ingenious thing is this: the database is kept very current. If there
+is a bug fix and an improvement somewhere in the database, you will
+always get the most current and stable and feature-rich driver by following
+the steps described above... Till Kamppeter from MandrakeSoft is doing an
+excellent job here, and too few people still know about it. (So if you use
+it often, please send him a note of your appreciation sometime...)
+
+(The latest and greatest improvement now is support for "custom page sizes"
+for all those printers which support it...)
+
+"cupsomatic" is documented here:
+
+ http://www.linuxprinting.org/cups-doc.html
+
+More printing tutorial info may be found here:
+
+ http://www.linuxprinting.org/kpfeifle/LinuxKongress2002/Tutorial/
+
+Note, that *all* the Foomatic drivers listed on Linuxprinting.org (now
+approaching the "all-time high" number of 1.000 for the supported models)
+are using a special filtering chain involving Ghostscript, as described
+in great detail in the Samba CVS sources (for 2.2.x) in
+
+ docs/textdocs/CUPS-PrintingInfo.txt
+
+To sum it up:
+
+* having a "foomatic+<something>" PPD is not enough to print with CUPS
+ (but it is *one* important component)
+* you also need the "cupsomatic" filter script (Perl) in "/usr/lib/cups/filters/"
+* you need Perl to make cupsomatic run
+* you also need Ghostscript (because it is called and controlled by the
+ PPD/cupsomatic combo in a way to fit your printermodel/driver combo...)
+* your Ghostscript *must*, depending on the driver/model, contain support
+ for a certain "device" (as shown by "gs -h")
+
+In the case of the "hpijs" driver, you need a Ghostscript version, which
+is showing a "ijs" amongst its supported devices in "gs -h". In the case of
+"hpijs+foomatic", a valid ghostscript commandline would be reading like this:
+
+ gs -q -dBATCH -dPARANOIDSAFER -dQUIET -dNOPAUSE -sDEVICE=ijs \
+ -sIjsServer=hpijs<PageSize> -dDuplex=<Duplex> <Model> \
+ -r<Resolution>,PS:MediaPosition=<InputSlot> -dIjsUseOutputFD \
+ -sOutputFile=- -
+
+Note, that with CUPS and the "hpijs+foomatic" PPD (plus Perl and cupsomatic)
+you don't need to remember this. You can choose the available print options
+thru a GUI print command (like "glp" from ESP's commercially supported
+PrintPro software, or KDE's "kprinter", or GNOME's "gtklp" or the independent
+"xpp") or the CUPS web interface via human-readable drop-down selection
+menus.....
+
+If you use "ESP Ghostscript" (also under the GPL, provided by Easy Software
+Products, the makers of CUPS, downloadable from http://www.cups.org/software.html,
+co-maintained by the developers of linuxprinting.org), you are guaranteed to
+have in use the most uptodate, bug-fixed, enhanced and stable version of a Free
+Ghostscript. It contains support for ~300 devices, whereas plain vanilla
+GNU Ghostscript 7.05 only has ~200....
+
+>>/ However, I can only print a Cups test page, from the web interface. when I
+/>>/ try to print a windows test page, it acts like the job was never sent.
+/
+ * Can you print "standard" jobs from the CUPS machine?
+
+ * Are the jobs from Windows visible in the Web interface on CUPS
+ (http://localhost:631/)?
+
+*Most important:* What kind of printer driver are you using on the Windows clients???
+
+You can try to get a more detailed debugging info by setting "LogLevel debug" in
+"/etc/cups/cupsd.conf", re-start cupsd and investigate "/var/log/cups/error_log"
+for the whereabouts of your Windows-originating printjobs:
+
+ * what does the "auto-typing" line say? which is the "MIME type" CUPS thinks
+ is arriving from the Windows clients?
+ * are there "filter" available for this MIME type?
+ * are there "filter rules" defined in "/etc/cups/mime.convs" for this MIME type?
+
+==============================================================================
+<<< EXTANT 3 >>>
+==============================================================================
+Subject: Printer Drivers
+========================
+
+>> Where can I find a program or how can I configure my samba server in order
+>> to limit the number of pages to be printed by users.
+
+The feature you want is dependent on the real print subsystem
+you're using. Samba's part is always to receive the job files
+from the clients (filtered *or* unfiltered) and hand it over
+to this printing subsystem.
+
+Of course one could "hack" things with one's own scripts.
+
+But there is CUPS (Common Unix Printing System). CUPS supports "quotas".
+Quotas can be based on sizes of jobs or on the number of pages or both,
+and are spanning any time period you want.
+
+This is an example command how root would set a print quota in CUPS,
+assuming an existing printer named "quotaprinter":
+
+ lpadmin -p quotaprinter -o job-quota-period=604800 -o job-k-limit=1024 -o job-page-limit=100
+
+This would limit every single user to print 100 pages or 1024 KB of
+data (whichever comes first) within the last 604.800 seconds ( = 1 week).
+
+For CUPS to count correctly, the printfile needs to pass the CUPS
+"pstops" filter, otherwise it uses a "dummy" count of "1". (Some
+printfiles don't pass it -- f.e. image files -- but then those are
+mostly 1 page jobs anyway). This also means, proprietary drivers for
+the target printer running on the client computers and CUPS/Samba
+then spooling these files as "raw" (i.e. leaving them untouched, not
+filtering them), will be counted as "1-pagers" too!
+
+You need to send PostScript from the clients (i.e. run a PostScript
+driver there) for having the chance to get accounting done. If the
+printer is a non-PostScript model, you need to let CUPS do the job to
+convert the file to a print-ready format for the target printer. This
+will be working for currently ~1.000 different printer models, see
+
+ http://www.linuxprinting.org/printer_list.cgi
+
+Before CUPS-1.1.16 your only option was to use the Adobe PostScript
+Driver on the Windows clients. The output of this driver was not always
+passed thru the "pstops" filter on the CUPS/Samba side, and therefor was
+not counted correctly (the reason is that it often --- depending on the
+"PPD" being used --- did write a "PJL"-header in front of the real
+PostScript which made CUPS to skip the pstops and go directy to
+the "pstoraster" stage).
+
+ From CUPS-1.1.16 onward you can use the "CUPS PostScript Driver
+for Windows NT/2K/XP clients" (it is tagged in the download area of
+http://www.cups.org/ as the "cups-samba-1.1.16.tar.gz" package).
+It is *not* working for Win9x/ME clients. But it....
+
+ ...it guarantees to not write an PJL-header;
+ ...it guarantees to still read and support all PJL-options named
+ in the driver PPD with its own means;
+ ...it guarantees the file going thru the "pstops" filter on the
+ CUPS/Samba server;
+ ...it guarantees to page-count correctly the printfile...
+
+You can read more about the setup of this combination in the
+manpage for "cupsaddsmb" (only present with CUPS installed, only
+current with CUPS 1.1.16).
+
+These are the items CUPS logs in the "page_log" for every single
+*page* of a job:
+
+* Printer name
+* User name
+* Job ID
+* Time of printing
+* the page number
+* the number of copies
+* a billing info string (optional)
+
+Here is an extract of my CUPS server's page_log file to illustrate
+the format and included items:
+
+infotec_IS2027 kurt 40 [22/Nov/2002:13:18:03 +0100] 1 2 #marketing
+infotec_IS2027 kurt 40 [22/Nov/2002:13:18:03 +0100] 2 2 #marketing
+infotec_IS2027 kurt 40 [22/Nov/2002:13:18:03 +0100] 3 2 #marketing
+infotec_IS2027 kurt 40 [22/Nov/2002:13:18:03 +0100] 4 2 #marketing
+infotec_IS2027 kurt 40 [22/Nov/2002:13:18:03 +0100] 5 2 #marketing
+infotec_IS2027 kurt 40 [22/Nov/2002:13:18:03 +0100] 6 2 #marketing
+
+This was Job ID "40", printed on "infotec_IS2027" by user "kurt",
+a 6-page job printed in 2 copies and billed to "#marketing"...
+
+Which flaws or shortcomings are there?
+
+ * the ones named above;
+ * CUPS really counts the job pages being *processsed in software*
+ (going thru the "RIP") rather than the physical sheets successfully
+ leaving the printing device -- if there is a jam while printing
+ the 5th sheet out of 1000 and the job is aborted by the printer,
+ the "page count" will still show the figure of 1000 for that
+ job;
+ * all quotas are the same for all users (no flexibility to
+ give the boss a higher quota than the clerk)
+ * no support for groups;
+ * no means to read out the current balance or "used-up"
+ number of current quota;
+ * a user having used up 99 sheets of 100 quota will still be
+ able to send and print a 1.000 sheet job;
+ * a user being denied a job because of a filled-up quota
+ doesn't get a meaningful error message from CUPS other than
+ "client-error-not-possible".
+
+But this is the best system out there currently. And there are
+huge improvements under development:
+
+--> page counting will go into the "backends" (these talk directly
+ to the printer and will increase the count in sync with the
+ actual printing process -- a jam at the 5th sheet will lead
+ to a stop in the counting...)
+
+--> quotas will be handled more flexibly;
+
+--> probably there will be support for users to inquire their
+ "accounts" in advance;
+
+--> probably there will be support for some other tools around
+ this topic...
+
+Other than the current stage of the CUPS development, I don't
+know any other ready-to-use tool which you could consider.
+
+
+==============================================================================
+<<< EXTANT 4 >>>
+==============================================================================
+Subject: More on CUPS Print Drivers
+===================================
+
+>> If you could get around the EULA, then you could package preinitialized
+>> drivers and write the information to smbd's tdbs. We have support for
+>> storing driver initialization data already.
+>
+> Have you heard that you can get CUPS printer drivers exactly for that
+> from cups.org? If they are good drivers, this could be very interesting.
+
+Hi, all,
+
+I'll give you some more info about the PostScript driver Volker mentioned
+above here as a reference. (Maybe one day before the 3.0 release it will
+end up as a worked-out paragraph inside the HOWTO collection):
+
+You can download the driver files from http://www.cups.org/software.html. It
+is a separate package from the CUPS base software files, tagged as "CUPS 1.1.16
+Windows NT/2k/XP Printer Driver for SAMBA (tar.gz, 192k)". The filename to
+download is "cups-samba-1.1.16.tar.gz". Upon untar-/unzip-ping it will reveal
+the files
+
+ cups-samba.install
+ cups-samba.license
+ cups-samba.readme
+ cups-samba.remove
+ cups-samba.ss
+
+These have been packaged with the ESP meta packager software "EPM". The
+*.install and *.remove files are simple shell script, which untars the
+*.ss (which is nothing else than a tar-archive) and puts its contents
+into "/usr/share/cups/drivers/". Its contents are 3 files:
+
+ cupsdrvr.dll
+ cupsui.dll
+ cups.hlp
+
+[ ATTENTION: due to a bug the current release puts the "cups.hlp" into
+ "/usr/share/drivers/" instead of "/usr/share/cups/drivers/". To work
+ around this, copy/move the file after running the "./cups-samba.install"
+ script manually to the right place:
+
+ "cp /usr/share/drivers/cups.hlp /usr/share/cups/drivers/" ]
+
+This new CUPS PostScript driver is currently binary-only, but free (as in
+free beer); no source code is provided (yet). The reason is this: it has
+been developed with the help of the Microsoft Driver Developer Kit (DDK)
+and compiled with Microsoft Visual Studio 6. It is not clear to the driver
+developers if they are allowed to distribute the whole of the source code
+as Free Software. However, they will likely release the "diff" in source
+code under the GPL, so anybody with a license of Visual Studio and a DDK
+will be able to compile for him/herself.
+
+Once you have run the install script (and possibly manually moved the
+"cups.hlp" file to "/usr/share/cups/drivers/"), the driver is ready to be
+put into Samba's [print$] share (which often maps to "/etc/samba/drivers/"
+and contains a subdir tree with WIN40 and W32X86 branches), by running
+"cupsaddsmb" (see also "man cupsaddsmb" for CUPS 1.1.16). [Don't forget to
+put root into the smbpasswd file by running "smbpasswd" should you run
+this whole procedure for the first time.] Once the driver files are in the
+[print$] share, they are ready to be downloaded and installed by the
+Win NT/2k/XP clients.
+
+NOTE 1: Win 9x/ME clients won't work with this driver. For these you'd
+ still need to use the ADOBE*.* drivers as previously.
+
+NOTE 2: It is not harming if you've still the ADOBE*.* driver files from
+ previous installations in the "/usr/share/cups/drivers/" directory.
+ The new cupsaddsmb (from 1.1.16) will automatically use the
+ "newest" installed driver (which here then is the CUPS drivers).
+
+NOTE 3: Should your Win clients have had the old ADOBE*.* files and the
+ Adobe PostScript drivers installed, the download and installation
+ of the new CUPS PostScript driver for Windows NT/2k/XP will fail
+ at first.
+ It is not enough to "delete" the printer (as the driver files
+ will still be kept by the clients and re-used if you try to
+ re-install the printer). To really get rid of the Adobe driver
+ files on the clients, open the "Printers" folder (possibly via
+ "Start --> Settings --> Control Panel --> Printers"), right-click
+ onto the folder background and select "Server Properties". A
+ new dialog opens; select the "Drivers" tab; on the list select
+ the driver you want to delete and click on the "Delete" button.
+ (This will only work if there is no single printer left which
+ uses that particular driver -- you need to "delete" all printers
+ using this driver in the "Printers" folder first...)
+
+NOTE 4: Once you have successfully downloaded the CUPS PostScript driver
+ to a client, you can easily switch all printers to this one
+ by proceeding as described elsewhere in the "Samba HOWTO
+ Collection" to change a driver for an existing printer....
+
+
+What are the benefits with the "CUPS PostScript driver for Windows NT/2k/XP"
+as compared to the Adobe drivers?
+
+* no hassle with the Adobe EULA; no hassle with the question "where do I
+ get the ADOBE*.* driver files from?"
+
+* the Adobe drivers (depending on the printer PPD associated with them)
+ often put a PJL header in front of the core PostScript part of the print
+ file (thus the file starts with "<1B>%-12345X" or "<escape>%-12345X"
+ instead of "%!PS"). This leads to the CUPS daemon autotyping the
+ arriving file as a print-ready file, not requiring a pass thru the
+ "pstops" filter (to speak more technical, it is not regarded as the
+ generic MIME type "application/postscript", but as the more special
+ MIME type "application/cups.vnd-postscript"), which therefore also
+ leads to the page accounting in "/var/log/cups/page_log" not receiving
+ the exact mumber of pages; instead the dummy page number of "1" is
+ logged in a standard setup...)
+
+* the Adobe driver has more options to "mis-configure" the PostScript
+ generated by it (like setting it inadvertedly to "Optimize for Speed",
+ instead of "Optimize for Portability", which could lead to CUPS being
+ unable to process it....)
+
+* the CUPS PostScript driver output sent by Windows clients to the CUPS
+ server will be guaranteed to be auto-typed as generic MIME type
+ "application/postscript", thusly passing thru the CUPS "pstops" filter
+ and logging the correct number of pages in the page_log for accounting
+ and quota purposes...
+
+* the CUPS PostScript driver supports the sending of additional print
+ options by the Win NT/2k/XP clients, such as naming the CUPS standard
+ banner pages (or the custom ones, should they be installed at the time
+ of driver download), using the CUPS "page-label" option, setting a
+ job-priority and setting the scheduled time of printing (with the option
+ to support additional useful IPP job attributes in the future).
+
+* the CUPS PostScript driver supports the inclusion of the new
+ "*cupsJobTicket" comments at the beginnig of the PostScript file (which
+ could be used in the future for all sort of beneficial extensions on
+ the CUPS side, but which will not disturb any other application as those
+ will regard it as a comment and simply ignore it).
+
+* the CUPS PostScript driver will be the heart of the fully fledged CUPS
+ IPP client for Windows NT/2k/XP to be released soon (probably alongside
+ the first Beta release for CUPS 1.2).
+
+==============================================================================
+<<< EXTANT 5 >>>
+==============================================================================
+Subject: Printing with Bells and Whistles
+=========================================
+
+May I suggest a radically different approach to your problem?
+
+* Let the Windows Clients use a PostScript driver, to produce
+ PostScript as their print output sent towards the Samba print
+ server (just like any Linux or Unix Client would also use
+ PostScript to send to the server...)
+
+* make the Unix printing subsystem which is underneath Samba
+ convert the incoming PostScript files to the native print
+ format of the target printers (would likely be PCL?
+ I understand you have mainly HP models?)
+
+* You're afraid, that this would just mean a *Generic* PostScript
+ driver for the clients? With no Simplex/Duplex selection,
+ no paper tray choice? But you need them to be able to set up
+ their jobs, ringing all the bells and whistles of the printers?
+
+ --> Not possible with traditional spooling systems!
+
+ --> But perfectly supported by CUPS (which uses "PPD" files to
+ describe how to control the print options for PostScript and
+ non-PostScript devices alike...
+
+ CUPS PPDs are working perfectly on Windows
+ clients who use Adobe PostScript drivers (or the new CUPS
+ PostScript driver for Windows NT/2K/XP). Clients can use
+ them to setup the job to their liking and CUPS will use
+ the received job options to make the (PCL-, ESC/P- or
+ PostScript-) printer behave as required.
+
+* You want to have the additional benefit of page count logging
+ and accounting? In this case the CUPS PostScript driver
+ is the best choice (better than the Adobe one).
+
+* You want to make the drivers downloadable for the clients?
+ "cupsaddsmb" is your friend. It will setup the [print$]
+ share on the Samba host to be ready to serve the clients
+ for a "point and print" driver installation...
+
+"What strings are attached?", I hear you asking...
+
+You are right, there are some. But, given the sheer CPU power
+you can buy nowadays in German supermarkets, these can be
+overcome easily.
+
+The strings: Well, if the
+CUPS/Samba side will have to print a *lot* onto 40 printers
+serving 500 users, you probably will need to set up a second
+server (which can do automatic load balancing with the first
+one, plus a degree of fail-over mechanism). Converting the
+incoming PostScript jobs, "interpreting" them for
+non-PostScript printers, amounts to the work of a "RIP"
+(Raster Image Processor) done in software. This requires
+more CPU and RAM than for the mere "raw spooling" task
+your current setup is solving... It all depends on the
+avarage and peak printing load the server should be
+able to handle....
+
+==============================================================================
+<<< EXTANT 6 >>>
+==============================================================================
+Subject: Deletion of CUPS spool files
+=====================================
+
+From samba-technical-admin@lists.samba.org Thu Dec 5 17:18:48 2002
+Zdenek Niederle wrote on Samba-digest:
+
+> Message: 1
+> From: Zdenek Niederle <zniederle@collicutt.com>
+> Organization: Collicutt Hanover
+> To: samba-technical@lists.samba.org
+> Subject: Clean up of spool files
+> Date: Wed, 4 Dec 2002 15:13:15 -0700
+>
+> I'm using Samba 2.2.5 and CUPS to handle printing on our network.
+> Unfortunately, the smbprn.xxxxxx spool files are not being cleaned up and
+> instead are quickly filling the spool directory. Is their a setting or
+> option to ensure the files are cleaned up once sent to the printer? I am
+> aware that using a cron job would work but this can't be the best solution.
+>
+> Thanks.
+
+
+Hi, Zdenek,
+
+you need to be aware, that the Samba print files pass thru 2
+different "spool" directories. Once the incoming directory
+managed by Samba, (set f.e. in the "path = /var/spool/samba"
+directive in the [printers] section of "smb.conf"). Second is
+the spool directory of your UNIX print subsystem. For CUPS it is
+normally "/var/spool/cups/", as set by the cupsd.conf directive
+"RequestRoot /var/spool/cups".
+
+I am not sure, which one of your directories keeps the files.
+ From what you say, it is most likely the Samba part.
+
+For the CUPS part, you may want to consult:
+
+ http://localhost:631/sam.html#PreserveJobFiles and
+ http://localhost:631/sam.html#PreserveJobHistory and
+ http://localhost:631/sam.html#MaxJobs
+
+There are the settings described for your CUPS daemon, which
+could lead to completed job files not being deleted.
+
+"PreserveJobHistory Yes" -- keeps some details of jobs in
+cupsd's mind (well it keeps the "c12345", "c12346" etc. files
+in the CUPS spool directory, which do a similar job as the
+old-fashioned BSD-LPD control files). This is set to "Yes"
+as a default.
+
+"PreserveJobFiles Yes" -- keeps the job files themselves in
+cupsd's mind (well it keeps the "d12345", "d12346" etc. files
+in the CUPS spool directory...). This is set to "No" as the
+CUPS default.
+
+"MaxJobs 500" -- this directive controls the maximum number
+of jobs that are kept in memory. Once the number of jobs
+reaches the limit, the oldest completed job is automatically
+purged from the system to make room for the new one. If all
+of the known jobs are still pending or active then the new
+job will be rejected. Setting the maximum to 0 disables this
+functionality. The default setting is 0.
+
+(There are also additional settings for "MaxJobsPerUser" and
+"MaxJobsPerPrinter"...)
+
+For everything to work as announced, you need to have three
+things:
+
+ * a Samba-smbd which is compiled against "libcups" (Check
+ on Linux by running "ldd `which smbd`")
+
+ * a Samba-smb.conf setting of "printing = cups"
+
+ * another Samba-smb.conf setting of "printcap = cups"
+
+Note, that in this case all other manually set printing-related
+commands (like "print command", "lpq command", "lprm command",
+"lppause command" or "lpresume command") are ignored and they
+should normally have no influence what-so-ever on your printing.
+
+If you want to do things manually, replace the "printing = cups"
+by "printing = bsd". Then your manually set commands may work
+(haven't tested this), and a "print command = lp -d %P %s; rm %s"
+may do what you need.
+
+You forgot to mention the CUPS version you're using. If you did
+set things up as described in the man pages, then the Samba
+spool files should be deleted. Otherwise it may be a bug. On
+the CUPS side, you can control the behaviour as described
+above.
+
+If you have more problems, post the output of these commands:
+
+ grep -v ^# /etc/cups/cupsd.conf | grep -v ^$
+ grep -v ^# /etc/samba/smb.conf | grep -v ^$ | grep -v "^;"
+
+(adapt paths as needed). These commands sanitize the files
+and cut out the empty lines and lines with comments, providing
+the "naked settings" in a compact way.
+
+Cheers,
+Kurt
+
!==
This is a quick and dirty means of storing smbpasswd entries
-in LDAP. Samba 2.2.x does not have any ability to grab
+in smbpasswd. Samba 2.2.x does not have any ability to grab
this information directly from LDAP so you will need to
periodically generate an smbpasswd from an ldapsearch
"(objectclass=smbPasswordEntry)".
.libs
*.so
-*.o
-Makefile
testsmbc: testsmbc.o
@echo Linking testsmbc
- @$(CC) $(CFLAGS) $(LDFLAGS) -o $@ $< -lsmbclient -L/usr/local/lib
+ @$(CC) $(CFLAGS) $(LDFLAGS) -o $@ $< -lsmbclient
testsmbc-static: testsmbc.o
@echo Linking testsmbc
/*
- Unix SMB/CIFS implementation.
+ Unix SMB/Netbios implementation.
+ Version 2.0
SMB client library test program
Copyright (C) Andrew Tridgell 1998
Copyright (C) Richard Sharpe 2000
if (argc > 1) {
- if ((dh1 = smbc_opendir(argv[1]))<1) {
+ /* Try to list the print jobs ... */
- fprintf(stderr, "Could not open directory: %s: %s\n",
- argv[1], strerror(errno));
+ if (smbc_list_print_jobs("smb://samba/pclp", print_list_fn) < 0) {
+
+ fprintf(stderr, "Could not list print jobs: %s, %d\n", strerror(errno), errno);
+ exit(1);
+
+ }
+
+ /* Try to delete the last job listed */
+
+ if (global_id > 0) {
+
+ fprintf(stdout, "Trying to delete print job %u\n", global_id);
+
+ if (smbc_unlink_print_job("smb://samba/pclp", global_id) < 0) {
+
+ fprintf(stderr, "Failed to unlink job id %u, %s, %u\n", global_id,
+ strerror(errno), errno);
+
+ exit(1);
+
+ }
+
+ }
+
+ /* Try to print a file ... */
+
+ if (smbc_print_file("smb://samba/public/testfile2.txt", "smb://samba/pclp") < 0) {
+
+ fprintf(stderr, "Failed to print job: %s %u\n", strerror(errno), errno);
+ exit(1);
+
+ }
+
+ /* Try to delete argv[1] as a file ... */
+
+ if (smbc_unlink(argv[1]) < 0) {
+
+ fprintf(stderr, "Could not unlink: %s, %s, %d\n",
+ argv[1], strerror(errno), errno);
+
+ exit(0);
+
+ }
+
+ if ((dh1 = smbc_opendir("smb://"))<1) {
+
+ fprintf(stderr, "Could not open directory: smb://: %s\n",
+ strerror(errno));
+
+ exit(1);
+
+ }
+
+ if ((dh2 = smbc_opendir("smb://sambanet")) < 0) {
+
+ fprintf(stderr, "Could not open directory: smb://sambanet: %s\n",
+ strerror(errno));
+
+ exit(1);
+
+ }
+
+ if ((dh3 = smbc_opendir("smb://samba")) < 0) {
+
+ fprintf(stderr, "Could not open directory: smb://samba: %s\n",
+ strerror(errno));
exit(1);
dirp = (char *)dirbuf;
+ if ((dirc = smbc_getdents(dh2, (struct smbc_dirent *)dirp,
+ sizeof(dirbuf))) < 0) {
+
+ fprintf(stderr, "Problems getting directory entries: %s\n",
+ strerror(errno));
+
+ exit(1);
+
+ }
+
+ /* Now, process the list of names ... */
+
+ fprintf(stdout, "\nDirectory listing, size = %u\n", dirc);
+
+ while (dirc > 0) {
+
+ dsize = ((struct smbc_dirent *)dirp)->dirlen;
+ fprintf(stdout, "Dir Ent, Type: %u, Name: %s, Comment: %s\n",
+ ((struct smbc_dirent *)dirp)->smbc_type,
+ ((struct smbc_dirent *)dirp)->name,
+ ((struct smbc_dirent *)dirp)->comment);
+
+ dirp += dsize;
+ (char *)dirc -= dsize;
+
+ }
+
+ dirp = (char *)dirbuf;
+
+ if ((dirc = smbc_getdents(dh3, (struct smbc_dirent *)dirp,
+ sizeof(dirbuf))) < 0) {
+
+ fprintf(stderr, "Problems getting directory entries: %s\n",
+ strerror(errno));
+
+ exit(1);
+
+ }
+
+ /* Now, process the list of names ... */
+
+ fprintf(stdout, "Directory listing, size = %u\n", dirc);
+
+ while (dirc > 0) {
+
+ dsize = ((struct smbc_dirent *)dirp)->dirlen;
+ fprintf(stdout, "\nDir Ent, Type: %u, Name: %s, Comment: %s\n",
+ ((struct smbc_dirent *)dirp)->smbc_type,
+ ((struct smbc_dirent *)dirp)->name,
+ ((struct smbc_dirent *)dirp)->comment);
+
+ (char *)dirp += dsize;
+ (char *)dirc -= dsize;
+
+ }
+
exit(1);
}
/* Ensure that the dialog box is destroyed when the user clicks ok. */
gtk_signal_connect_object (GTK_OBJECT (okay_button), "clicked",
- GTK_SIGNAL_FUNC (gtk_widget_destroy),
- GTK_OBJECT(dialog));
+ GTK_SIGNAL_FUNC (gtk_widget_destroy), dialog);
gtk_container_add (GTK_CONTAINER (GTK_DIALOG(dialog)->action_area),
okay_button);
/* Now, get the items in smb:/// and add them to the tree */
+ dirp = (struct smbc_dirent *)dirbuf;
+
while ((err = smbc_getdents(dh, (struct smbc_dirent *)dirbuf,
sizeof(dirbuf))) != 0) {
}
- dirp = (struct smbc_dirent *)dirbuf;
-
fprintf(stdout, "Dir len: %u\n", err);
while (err > 0) { /* Extract each entry and make a sub-tree */
--- /dev/null
+ntlogon.py v0.8b Copyright 2002 by Timothy (rhacer) Grant
+This programme is released under the terms of the GNU Public License
+This programme has NO WARRANTY of any kind, use at your own risk.
+
+===================
+CHANGES SINCE v0.7b
+===================
+included patch that made machine name %m a macro substitution value.
+Thanks to: Nick Lopez <kimo_sabe@atdot.org>
+
+==================
+CHANGES SINCE v0.6
+==================
+PLEASE NOT THAT I AM CONSIDERING THIS A BETA UNTIL I GET SOME FEEDBACK
+FROM USERS ON WHETHER THE MACRO FEATURE WORKS FOR THEM.
+
+added the ability to define substitution macros: see the useage section
+
+removed the large docstring from the file and moved the information to
+the USEAGE section of this file
+
+cleaned up the code and made more flexible
+
+improved the code comments
+
+==================
+CHANGES SINCE v0.5
+==================
+added a -v --version switch
+
+added a --pause switch which will put a pause statement between each
+non-blank line of the script.
+
+===============
+A PERSONAL NOTE
+===============
+When I originally posted v0.5 on Freshmeat, I really expected *some*
+feedback. To date this little script has been downloaded over 700 times, but
+absolutely nobody has sent me an e-mail to tell me if it is useful, or if
+it is absolutely the stupidest waste of bandwidth they have ever seen.
+I'd really love to know if even one person other than me and the other techs
+here at Avalon have found it useful.
+
+Thanks.
+ rhacer (rhacer@craigelachie.org)
+
+September 27, 2000
+Thanks to those that did respond to my plea! I'd still love to hear from
+any other users!
+
+============
+INTRODUCTION
+============
+As my experience with Linux and Samba increased, I had no trouble whipping up
+a custom Perl, Python or Bash script to create Samba Logon Scripts, but I
+noticed that I changed things from place to place, and that my users had *no*
+chance of ever figuring out how to modify those scripts themselves.
+
+In an attempt to create a company wide standard that both my co-workers and my
+customers could *easily* modify I hit upon the scheme I used here.
+
+I settled on an INI file feel, because most who have experience with Win boxes
+have some concept of INI files.
+
+============
+INSTALLATION
+============
+The distribution archive contains three files:
+
+README This file
+ntlogon.py The actual Python script (place in /usr/local/samba/bin)
+ntlogon.conf A sample configuration file (place in /etc)
+
+This script was created using Python v1.5.2, and I believe it uses only
+standard libraries.
+
+Your smb.conf file needs to contain a netlogon section similar to the
+following (These settings *are not* normal on a RH box. These settings
+are all based on the excellent book that I learned Samba from: Samba
+Integrating Unix and Windows by John D. Blair. It is somewhat out of
+date now, but that's the history of the strange file locations):
+
+[netlogon]
+ path = /usr/local/samba/netlogon
+ writeable = no
+ guest ok = no
+ root preexec = /usr/local/samba/bin/ntlogon --user=%U --os=%m
+ root postexec = rm /usr/local/samba/netlogon/%U.bat
+
+======
+USEAGE
+======
+PLEASE SEE NTLOGON.CONF FOR A DETAILED CONFIGURATION EXAMPLE
+
+This programme will build a Windows NT logon script for users connecting
+to a Samba server. Samba macros that are curently understood:
+
+ %U user name
+ %G group name
+ %a machine architecture
+ %m machine netbios name
+
+This programme reads a configuration that looks strikingly similar to both
+the Samba configuration file, and a DOS "boot menu" AUTOEXEC.BAT file.
+
+The default file name is /etc/ntlogon.conf (though I really think it ought
+to be called ntlogon.batch!) You may change the filename by using the -f
+or --templatefile startup option.
+
+The default netlogon directory is /usr/local/samba/netlogon though this
+can be changed with the -d or --dir startup option.
+
+The default batch file name generated is username.bat if no username is
+specified the default value is logon.bat (e.g., if --user=fred is specified
+on the command line then the logon script generated will be stored in
+fred.bat)
+
+Use the --debug option to print the logon script to screen instead of the
+output file
+
+Use the --pause option to place a pause statement between each line of the
+script to assist in debugging a logon script.
+
+The file is divided into sections that have headers in square brackets
+
+[Global]
+[User-username]
+[Group-groupname]
+[OS-osname]
+
+The file may also contain user defined substitution macros. They are
+defined by placing the macro name on the left side of an equal sign,
+and the substitution text on the right side of the equal sign. They
+are also case sensitive:
+
+MAINDRIVE = G:
+USERDRIVE = U:
+SERVERNAME = myservername
+
+They are referenced by prepending a "%" sign to the variable name:
+
+NET USE %MAINDRIVE \\\\servername\\mainshare /YES
+NET USE %USERDRIVE \\\\%SERVERNAME\\usershare /YES
+
+==============
+SPECIAL THANKS
+==============
+Nick Lopez <kimo_sabe@atdot.org> for the net bios name patch.
+
+===================
+CONTACT INFORMATION
+===================
+Author : Timothy (rhacer) Grant
+
+I can be reached at tjg@craigelachie.org
+ntlogon website www.craigelachie.org/rhacer/ntlogon
+
+Please feel free to contact me with any suggestions, improvements, bugs you
+might find.
+
--- /dev/null
+# Everything in the Global section applies to all users logging on to the
+# network
+[Global]
+
+#Some substitution macro definitions
+MAINDRIVE = G:
+USERDRIVE = U:
+SERVERNAME = myservername
+
+@ECHO "Welcome to our network!!!"
+NET TIME \\servername /SET /YES
+NET USE %MAINDRIVE \\%SERVERNAME\globalshare /YES
+
+# Map the private user area in the global section so we don't have to
+# create individual user entries for each user!
+NET USE %USERDRIVE \\servername\%U /YES
+
+# Group entries, User entries and OS entries each start with the
+# keyword followed by a dash followed by--appropriately enough the Group
+# name, the User name, or the OS name.
+[Group-admin]
+@ECHO "Welcome administrators!"
+NET USE G: \\servername\adminshare1 /YES
+NET USE I: \\servername\adminshare2 /YES
+
+[Group-peons]
+@ECHO "Be grateful we let you use computers!"
+NET USE G: \\servername\peonshare1 /YES
+
+[Group-hackers]
+@ECHO "What can I do for you today great one?"
+NET USE G: \\servername\hackershare1 /YES
+NET USE I: \\servername\adminshare2 /YES
+
+[User-fred]
+@ECHO "Hello there Fred!"
+NET USE F: \\servername\fredsspecialshare /YES
+
+[OS-WfWg]
+@ECHO "Time to upgrade isn't it?"
+
+# End configuration file
+
+X = Will this break?
--- /dev/null
+#!/usr/bin/env python
+"""
+ntlogon.py written by Timothy (rhacer) Grant
+
+Copyright 1999 - 2002 by Timothy Grant
+
+is distributed under the terms of the GNU Public License.
+
+The format for the configuration file is as follows:
+
+While there is some room for confusion, we attempt to process things in
+order of specificity: Global first, Group second, User third, OS Type
+forth. This order can be debated forever, but it seems to make the most
+sense.
+
+# Everything in the Global section applies to all users logging on to the
+# network
+[Global]
+@ECHO "Welcome to our network!!!"
+NET TIME \\\\servername /SET /YES
+NET USE F: \\\\servername\\globalshare /YES
+
+# Map the private user area in the global section so we don't have to
+# create individual user entries for each user!
+NET USE U: \\\\servername\\%U /YES
+
+# Group entries, User entries and OS entries each start with the
+# keyword followed by a dash followed by--appropriately enough the Group
+# name, the User name, or the OS name.
+[Group-admin]
+@ECHO "Welcome administrators!"
+NET USE G: \\\\servername\\adminshare1 /YES
+NET USE I: \\\\servername\\adminshare2 /YES
+
+[Group-peons]
+@ECHO "Be grateful we let you use computers!"
+NET USE G: \\\\servername\\peonshare1 /YES
+
+[Group-hackers]
+@ECHO "What can I do for you today great one?"
+NET USE G: \\\\servername\\hackershare1 /YES
+NET USE I: \\\\servername\\adminshare2 /YES
+
+[User-fred]
+@ECHO "Hello there Fred!"
+NET USE F: \\\\servername\\fredsspecialshare /YES
+
+[OS-WfWg]
+@ECHO "Time to upgrade it?"
+
+# End configuration file
+
+usage: ntlogon [-g | --group=groupname]
+ [-u | --user=username]
+ [-o | --os=osname]
+ [-m | --machine=netbiosname]
+ [-f | --templatefile=filename]
+ [-d | --dir=netlogon directory]
+ [-v | --version]
+ [-h | --help]
+ [--pause]
+ [--debug]
+"""
+#
+#" This quote mark is an artifact of the inability of my editor to
+# correctly colour code anything after the triple-quoted docstring.
+# if your editor does not have this flaw, feel free to remove it.
+
+
+import sys
+import getopt
+import re
+import string
+import os
+
+version = "ntlogon.py v0.8"
+
+def buildScript(buf, sections, group, user, ostype, machine, debug, pause):
+ """
+ buildScript() Takes the contents of the template file and builds
+ a DOS batch file to be executed as an NT logon script. It does this
+ by determining which sections of the configuration file should be included
+ and creating a list object that contains each line contained in each
+ included section. The list object is then returned to the calling
+ routine.
+
+ All comments (#) are removed. A REM is inserted to show
+ which section of the configuration file each line comes from.
+ We leave blanklines as they are sometimes useful for debugging
+
+ We also replace all of the Samba macros (e.g., %U, %G, %a, %m) with their
+ expanded versions which have been passed to us by smbd
+ """
+ hdrstring = ''
+ script = []
+
+ #
+ # These are the Samba macros that we currently know about.
+ # any user defined macros will also be added to this dictionary.
+ # We do not store the % sign as part of the macro name.
+ # The replace routine will prepend the % sign to all possible
+ # replacements.
+ #
+ macros = {
+ 'U': user,
+ 'G': group,
+ 'a': ostype,
+ 'm': machine
+ }
+
+ #
+ # Process each section defined in the list sections
+ #
+ for s in sections:
+ # print 'searching for: ' + s
+
+ idx = 0
+
+ while idx < len(buf):
+ ln = buf[idx]
+
+ #
+ # We need to set up a regex for each possible section we
+ # know about. This is slightly complicated due to the fact
+ # that section headers contain user defined text.
+ #
+ if s == 'Global':
+ hdrstring = '\[ *' + s + ' *\]'
+ elif s == 'Group':
+ hdrstring = '\[ *' + s + ' *- *' + group + ' *\]'
+ elif s == 'User':
+ hdrstring = '\[ *' + s + ' *- *' + user + ' *\]'
+ elif s == 'OS':
+ hdrstring = '\[ *' + s + ' *- *' + ostype + ' *\]'
+ elif s == 'Machine':
+ hdrstring = '\[ *' + s + ' *- *' + machine + ' *\]'
+
+ #
+ # See if we have found a section header
+ #
+ if re.search(r'(?i)' + hdrstring, ln):
+ idx = idx + 1 # increment the counter to move to the next
+ # line.
+
+ x = re.match(r'([^#\r\n]*)', ln) # Determine the section
+ # name and strip out CR/LF
+ # and comment information
+
+ if debug:
+ print 'rem ' + x.group(1) + ' commands'
+ else:
+ # create the rem at the beginning of each section of the
+ # logon script.
+ script.append('rem ' + x.group(1) + ' commands')
+
+ #
+ # process each line until we have found another section
+ # header
+ #
+ while not re.search(r'.*\[.*\].*', buf[idx]):
+
+ #
+ # strip comments and line endings
+ #
+ x = re.match(r'([^#\r\n]*)', buf[idx])
+
+ if string.strip(x.group(1)) != '' :
+ # if there is still content after stripping comments and
+ # line endings then this is a line to process
+
+ line = x.group(1)
+
+ #
+ # Check to see if this is a macro definition line
+ #
+ vardef = re.match(r'(.*)=(.*)', line)
+
+ if vardef:
+ varname = string.strip(vardef.group(1)) # Strip leading and
+ varsub = string.strip(vardef.group(2)) # and trailing spaces
+
+ if varname == '':
+ print "Error: No substition name specified line: %d" % idx
+ sys.exit(1)
+
+ if varsub == '':
+ print "Error: No substitution text provided line: %d" % idx
+ sys.exit(1)
+
+ if macros.has_key(varname):
+ print "Warning: macro %s redefined line: %d" % (varname, idx)
+
+ macros[varname] = varsub
+ idx = idx + 1
+ continue
+
+ #
+ # Replace all the macros that we currently
+ # know about.
+ #
+ # Iterate over the dictionary that contains all known
+ # macro substitutions.
+ #
+ # We test for a macro name by prepending % to each dictionary
+ # key.
+ #
+ for varname in macros.keys():
+ line = re.sub(r'%' + varname + r'(\W)',
+ macros[varname] + r'\1', line)
+
+ if debug:
+ print line
+ if pause:
+ print 'pause'
+ else:
+ script.append(line)
+
+ idx = idx + 1
+
+ if idx == len(buf):
+ break # if we have reached the end of the file
+ # stop processing.
+
+ idx = idx + 1 # increment the line counter
+
+ if debug:
+ print ''
+ else:
+ script.append('')
+
+ return script
+
+# End buildScript()
+
+def run():
+ """
+ run() everything starts here. The main routine reads the command line
+ arguments, opens and reads the configuration file.
+ """
+ configfile = '/etc/ntlogon.conf' # Default configuration file
+ group = '' # Default group
+ user = '' # Default user
+ ostype = '' # Default os
+ machine = '' # Default machine type
+ outfile = 'logon.bat' # Default batch file name
+ # this file name WILL take on the form
+ # username.bat if a username is specified
+ debug = 0 # Default debugging mode
+ pause = 0 # Default pause mode
+ outdir = '/usr/local/samba/netlogon/' # Default netlogon directory
+
+ sections = ['Global', 'Machine', 'OS', 'Group', 'User'] # Currently supported
+ # configuration file
+ # sections
+
+ options, args = getopt.getopt(sys.argv[1:], 'd:f:g:ho:u:m:v',
+ ['templatefile=',
+ 'group=',
+ 'help',
+ 'os=',
+ 'user=',
+ 'machine=',
+ 'dir=',
+ 'version',
+ 'pause',
+ 'debug'])
+
+ #
+ # Process the command line arguments
+ #
+ for i in options:
+ # template file to process
+ if (i[0] == '-f') or (i[0] == '--templatefile'):
+ configfile = i[1]
+ # print 'configfile = ' + configfile
+
+ # define the group to be used
+ elif (i[0] == '-g') or (i[0] == '--group'):
+ group = i[1]
+ # print 'group = ' + group
+
+ # define the os type
+ elif (i[0] == '-o') or (i[0] == '--os'):
+ ostype = i[1]
+ # print 'os = ' + os
+
+ # define the user
+ elif (i[0] == '-u') or (i[0] == '--user'):
+ user = i[1]
+ outfile = user + '.bat' # Setup the output file name
+ # print 'user = ' + user
+
+ # define the machine
+ elif (i[0] == '-m') or (i[0] == '--machine'):
+ machine = i[1]
+
+ # define the netlogon directory
+ elif (i[0] == '-d') or (i[0] == '--dir'):
+ outdir = i[1]
+ # print 'outdir = ' + outdir
+
+ # if we are asked to turn on debug info, do so.
+ elif (i[0] == '--debug'):
+ debug = 1
+ # print 'debug = ' + debug
+
+ # if we are asked to turn on the automatic pause functionality, do so
+ elif (i[0] == '--pause'):
+ pause = 1
+ # print 'pause = ' + pause
+
+ # if we are asked for the version number, print it.
+ elif (i[0] == '-v') or (i[0] == '--version'):
+ print version
+ sys.exit(0)
+
+ # if we are asked for help print the docstring.
+ elif (i[0] == '-h') or (i[0] == '--help'):
+ print __doc__
+ sys.exit(0)
+
+ #
+ # open the configuration file
+ #
+ try:
+ iFile = open(configfile, 'r')
+ except IOError:
+ print 'Unable to open configuration file: ' + configfile
+ sys.exit(1)
+
+
+ #
+ # open the output file
+ #
+ if not debug:
+ try:
+ oFile = open(outdir + outfile, 'w')
+ except IOError:
+ print 'Unable to open logon script file: ' + outdir + outfile
+ sys.exit(1)
+
+ buf = iFile.readlines() # read in the entire configuration file
+
+ #
+ # call the script building routine
+ #
+ script = buildScript(buf, sections, group, user, ostype, machine, debug, pause)
+
+ #
+ # write out the script file
+ #
+ if not debug:
+ for ln in script:
+ oFile.write(ln + '\r\n')
+ if pause:
+ if string.strip(ln) != '': # Because whitespace
+ oFile.write('pause' + '\r\n') # is a useful tool, we
+ # don't put pauses after
+ # an empty line.
+
+
+# End run()
+
+#
+# immediate-mode commands, for drag-and-drop or execfile() execution
+#
+if __name__ == '__main__':
+ run()
+else:
+ print "Module ntlogon.py imported."
+ print "To run, type: ntlogon.run()"
+ print "To reload after changes to the source, type: reload(ntlogon)"
+
+#
+# End NTLogon.py
+#
README for Samba Password Database (PDB) examples
====================================================
-Jelmer Vernooij <jelmer@nl.linux.org>
-Stefan (metze) Metzmacher <metze@metzemix.de>
+8-8-2002 Jelmer Vernooij <jelmer@samba.org>
+
+Added mysql and xml modules. See README in xml/ and mysql/ for details.
+
+21-6-2002 Stefan (metze) Metzmacher <metze@metzemix.de>
+
+I have added an interface versioning.
+
+Every module MUST have a pdb_version() function.
+
+this is defined in include/passdb.h:
+#define PDB_MODULE_VERSIONING_MAGIC \
+int pdb_version(void)\
+{\
+ return PASSDB_INTERFACE_VERSION;\
+}
+
+You MUST add this line inside a module:
+PDB_MODULE_VERSIONING_MAGIC
+
+21-6-2002 Stefan (metze) Metzmacher <metze@metzemix.de>
+
+The pdb_interface was changed:
+
+this function are deleted:
+static BOOL testsam_getsampwrid (struct pdb_methods *methods, SAM_ACCOUNT *user, uint32 rid)
+
+this function are added:
+static BOOL testsam_getsampwsid (struct pdb_methods *methods, SAM_ACCOUNT *user, DOM_SID sid)
+
+In the SAM_ACCOUNT struct:
+
+this fields are deleted:
+uint32 user_rid;
+uint32 group_rid;
+
+this fields are added:
+DOM_SID user_sid;
+DOM_SID group_sid;
+
+15-2-2002 Jelmer Vernooij <jelmer@nl.linux.org>
The pdb_test.c file in this directory contains a very basic example of
a pdb plugin. It just prints the name of the function that is executed using
To debug passdb backends, try to run gdb on the 'pdbedit' executable. That's really much easier than restarting smbd constantly and attaching with your debugger.
New passdb plugins should go into the samba lib directory, (/usr/lib/samba/ for
-most distributions). An example would be: /usr/lib/samba/test.so
+most distributions) and should be prefixed with 'pdb_'. An example would be:
+/usr/lib/samba/pdb_test.so
#undef DBGC_CLASS
#define DBGC_CLASS testsam_debug_level
+/* define the version of the passdb interface */
+PDB_MODULE_VERSIONING_MAGIC
+
/***************************************************************
Start enumeration of the passwd list.
****************************************************************/
return NT_STATUS_NOT_IMPLEMENTED;
}
-NTSTATUS testsam_init(PDB_CONTEXT *pdb_context, PDB_METHODS **pdb_method, const char *location)
+NTSTATUS pdb_init(PDB_CONTEXT *pdb_context, PDB_METHODS **pdb_method, const char *location)
{
NTSTATUS nt_status;
return NT_STATUS_OK;
}
-
-int init_module(void);
-
-int init_module() {
- if(smb_register_passdb("testsam", testsam_init, PASSDB_INTERFACE_VERSION))
- return 0;
-
- return 1;
-}
+++ /dev/null
-#!/bin/sh
-
-# This script is an input filter for printcap printing on a unix machine. It
-# uses the smbclient program to print the file to the specified smb-based
-# server and service.
-# For example you could have a printcap entry like this
-#
-# smb:lp=/dev/null:sd=/usr/spool/smb:sh:if=/usr/local/samba/smbprint
-#
-# which would create a unix printer called "smb" that will print via this
-# script. You will need to create the spool directory /usr/spool/smb with
-# appropriate permissions and ownerships for your system.
-
-# Set these to the server and service you wish to print to
-# In this example I have a WfWg PC called "lapland" that has a printer
-# exported called "printer" with no password.
-
-#
-# Script further altered by hamiltom@ecnz.co.nz (Michael Hamilton)
-# so that the server, service, and password can be read from
-# a /usr/var/spool/lpd/PRINTNAME/.config file.
-#
-# Script further modified by Richard Sharpe to fix some things.
-# Get rid of the -x on the first line, and add parameters
-#
-# -t now causes translate to be used when sending files
-#
-# In order for this to work the /etc/printcap entry must include an
-# accounting file (af=...):
-#
-# cdcolour:\
-# :cm=CD IBM Colorjet on 6th:\
-# :sd=/var/spool/lpd/cdcolour:\
-# :af=/var/spool/lpd/cdcolour/acct:\
-# :if=/usr/local/etc/smbprint:\
-# :mx=0:\
-# :lp=/dev/null:
-#
-# The /usr/var/spool/lpd/PRINTNAME/.config file should contain:
-# server=PC_SERVER
-# service=PR_SHARENAME
-# password="password"
-#
-# E.g.
-# server=PAULS_PC
-# service=CJET_371
-# password=""
-
-#
-# Debugging log file, change to /dev/null if you like.
-#
-logfile=/tmp/smb-print.log
-# logfile=/dev/null
-
-
-#
-# The last parameter to the filter is the accounting file name.
-# Extract the directory name from the file name.
-# Concat this with /.config to get the config file.
-#
-TRANS=0
-eval acct_file=\${$#}
-spool_dir=`dirname $acct_file`
-config_file=$spool_dir/.config
-
-# Should read the following variables set in the config file:
-# server
-# service
-# password
-eval `cat $config_file`
-
-while getopts t c; do
- case $c in
- t)
- TRANS=1
- ;;
-
- '?') # Bad parameters, ignore it ...
- ;;
- esac
-done
-#
-# Some debugging help, change the >> to > if you want to same space.
-#
-echo "server $server, service $service" >> $logfile
-
-(
-# NOTE You may wish to add the line `echo translate' if you want automatic
-# CR/LF translation when printing.
- if [ $TRANS -eq 1 ]; then
- echo translate
- fi
- echo "print -"
- cat
-) | /usr/local/samba/bin/smbclient "\\\\$server\\$service" $password -U $server -N -P >> $logfile
+++ /dev/null
-CC = @CC@
-CFLAGS = @CFLAGS@
-CPPFLAGS = @CPPFLAGS@
-LDFLAGS = @LDFLAGS@
-LDSHFLAGS = -shared
-srcdir = @builddir@
-FLAGS = $(CFLAGS) -Iinclude -I$(srcdir)/include -I$(srcdir)/ubiqx -I$(srcdir)/smbwrapper -I. $(CPPFLAGS) -I$(srcdir)
-
-SAM_OBJS = sam_skel.so
-
-# Default target
-
-default: $(SAM_OBJS)
-
-# Pattern rules
-
-%.so: %.o
- $(CC) $(LDSHFLAGS) $(LDFLAGS) -o $@ $<
-
-%.o: %.c
- $(CC) $(FLAGS) -c $<
-
-# Misc targets
-
-clean:
- rm -rf .libs
- rm -f core *~ *% *.bak \
- $(SAM_OBJ) $(SAM_OBJS)
+++ /dev/null
-README for Samba SAM Database examples
-====================================================
-26-08-2002 Stefan (metze) Metzmacher <metze@metzemix.de>
-
-Every module MUST have a sam_version() function.
-
-this is defined in include/sam.h:
-#define SAM_MODULE_VERSIONING_MAGIC \
-int sam_version(void)\
-{\
- return SAM_INTERFACE_VERSION;\
-}
-
-You MUST add this line inside a module:
-SAM_MODULE_VERSIONING_MAGIC
-
-
-The sam_skel.c file in this directory contains a very basic example of
-a SAM plugin. It just prints the name of the function that is executed using
-DEBUG. Maybe it's nice to include some of the arguments to the function in the
-future too..
-
-New SAM plugins should go into the samba lib directory, (/usr/lib/samba/
-for most distributions) and should be prefixed with 'sam_' and should go into the
-subdir sam/. The SAM subsystem will search in /usr/lib/samba/sam and fall back to
-/usr/lib/samba/ .
-An example path would be:
-/usr/lib/samba/sam/sam_skel.so
-
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- this is a skeleton for SAM backend modules.
-
- Copyright (C) Stefan (metze) Metzmacher 2002
- Copyright (C) Jelmer Vernooij 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-static int sam_skel_debug_level = DBGC_SAM;
-
-#undef DBGC_CLASS
-#define DBGC_CLASS sam_skel_debug_level
-
-/* define the version of the SAM interface */
-SAM_MODULE_VERSIONING_MAGIC
-
-/* General API */
-
-NTSTATUS sam_skel_get_sec_desc(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const DOM_SID *sid, SEC_DESC **sd)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_set_sec_desc(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const DOM_SID *sid, const SEC_DESC *sd)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-NTSTATUS sam_skel_lookup_sid(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const DOM_SID *sid, char **name, uint32 *type)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_lookup_name(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const char *name, DOM_SID **sid, uint32 *type)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-/* Domain API */
-
-NTSTATUS sam_skel_update_domain(const SAM_METHODS *sam_methods, const SAM_DOMAIN_HANDLE *domain)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_get_domain_handle(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, SAM_DOMAIN_HANDLE **domain)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-/* Account API */
-
-NTSTATUS sam_skel_create_account(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *group_name, uint16 acct_ctrl, SAM_ACCOUNT_HANDLE **account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_add_account(const SAM_METHODS *sam_methods, const SAM_ACCOUNT_HANDLE *account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_update_account(const SAM_METHODS *sam_methods, const SAM_ACCOUNT_HANDLE *account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_delete_account(const SAM_METHODS *sam_methods, const SAM_ACCOUNT_HANDLE *account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_enum_accounts(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint16 acct_ctrl, uint32 *account_count, SAM_ACCOUNT_ENUM **accounts)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-NTSTATUS sam_skel_get_account_by_sid(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *accountsid, SAM_ACCOUNT_HANDLE **account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_get_account_by_name(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *name, SAM_ACCOUNT_HANDLE **account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-/* Group API */
-
-NTSTATUS sam_skel_create_group(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *account_name, uint16 group_ctrl, SAM_GROUP_HANDLE **group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_add_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_update_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_delete_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_enum_groups(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint16 group_ctrl, uint32 *groups_count, SAM_GROUP_ENUM **groups)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_get_group_by_sid(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *groupsid, SAM_GROUP_HANDLE **group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_get_group_by_name(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *name, SAM_GROUP_HANDLE **group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-NTSTATUS sam_skel_add_member_to_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_delete_member_from_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_skel_enum_groupmembers(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group, uint32 *members_count, SAM_GROUP_MEMBER **members)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-NTSTATUS sam_skel_get_groups_of_sid(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const DOM_SID **sids, uint16 group_ctrl, uint32 *group_count, SAM_GROUP_ENUM **groups)
-{
- DEBUG(0,("sam_skel: %s was called!\n",__FUNCTION__));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_init(SAM_METHODS *sam_methods, const char *module_params)
-{
- /* Functions your SAM module doesn't provide should be set
- * to NULL */
-
- sam_methods->sam_get_sec_desc = sam_skel_get_sec_desc;
- sam_methods->sam_set_sec_desc = sam_skel_set_sec_desc;
-
- sam_methods->sam_lookup_sid = sam_skel_lookup_sid;
- sam_methods->sam_lookup_name = sam_skel_lookup_name;
-
- /* Domain API */
-
- sam_methods->sam_update_domain = sam_skel_update_domain;
- sam_methods->sam_get_domain_handle = sam_skel_get_domain_handle;
-
- /* Account API */
-
- sam_methods->sam_create_account = sam_skel_create_account;
- sam_methods->sam_add_account = sam_skel_add_account;
- sam_methods->sam_update_account = sam_skel_update_account;
- sam_methods->sam_delete_account = sam_skel_delete_account;
- sam_methods->sam_enum_accounts = sam_skel_enum_accounts;
-
- sam_methods->sam_get_account_by_sid = sam_skel_get_account_by_sid;
- sam_methods->sam_get_account_by_name = sam_skel_get_account_by_name;
-
- /* Group API */
-
- sam_methods->sam_create_group = sam_skel_create_group;
- sam_methods->sam_add_group = sam_skel_add_group;
- sam_methods->sam_update_group = sam_skel_update_group;
- sam_methods->sam_delete_group = sam_skel_delete_group;
- sam_methods->sam_enum_groups = sam_skel_enum_groups;
- sam_methods->sam_get_group_by_sid = sam_skel_get_group_by_sid;
- sam_methods->sam_get_group_by_name = sam_skel_get_group_by_name;
-
- sam_methods->sam_add_member_to_group = sam_skel_add_member_to_group;
- sam_methods->sam_delete_member_from_group = sam_skel_delete_member_from_group;
- sam_methods->sam_enum_groupmembers = sam_skel_enum_groupmembers;
-
- sam_methods->sam_get_groups_of_sid = sam_skel_get_groups_of_sid;
-
- sam_methods->free_private_data = NULL;
-
-
- sam_skel_debug_level = debug_add_class("sam_skel");
- if (sam_skel_debug_level == -1) {
- sam_skel_debug_level = DBGC_SAM;
- DEBUG(0, ("sam_skel: Couldn't register custom debugging class!\n"));
- } else DEBUG(2, ("sam_skel: Debug class number of 'sam_skel': %d\n", sam_skel_debug_level));
-
- if(module_params)
- DEBUG(0, ("Starting 'sam_skel' with parameters '%s' for domain %s\n", module_params, sam_methods->domain_name));
- else
- DEBUG(0, ("Starting 'sam_skel' for domain %s without paramters\n", sam_methods->domain_name));
-
- return NT_STATUS_OK;
-}
Source: ftp://ftp.samba.org/pub/samba/%{Name}-%{Version}.tar.gz
+
%Package doc
Group : Server/Network
%Prep
%setup
-
for i in {cvs.,change-}log; do [ ! -f ../$i ] || mv ../$i source; done
mv swat/help/welcome.html docs
autoconf
CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="-s" ./configure \
- --prefix='$(DESTDIR)/usr' \
- --localstatedir='$(DESTDIR)/var' \
- --libdir='$(DESTDIR)%{EtcSamba}' \
- --sbindir='$(DESTDIR)/usr/sbin' \
+ --prefix=/usr \
+ --localstatedir=/var \
+ --libdir=/usr/lib/samba \
+ --sbindir=/usr/sbin \
+ --with-configdir='%{EtcSamba}' \
--with-privatedir='$(LIBDIR)' \
- --with-lockdir='$(DESTDIR)/var/lock/samba.d' \
- --with-swatdir='$(DESTDIR)/usr/share/swat' \
+ --with-lockdir=/var/lock/samba.d \
+ --with-swatdir=/usr/share/swat \
--with-smbmount \
--with-pam \
--with-tdbsam \
--with-smbwrapper \
--with-libsmbclient \
--with-acl-support \
- --with-sambabook=$(DESTDIR)/usr/share/swat/using_samba
-
-# Temp disabled - add later - JHT
-# --with-pam_smbpass \
-# --with-nisplus-home \
+ --with-sambabook=/usr/share/swat/using_samba
-make all nsswitch/libnss_wins.so nsswitch/libnss_winbind.so torture nsswitch/pam_winbind.so everything
+make all nsswitch/libnss_wins.so nsswitch/libnss_winbind.so torture nsswitch/pam_winbind.so modules everything pam_smbpass
(cd tdb; make tdbdump tdbtest tdbtorture tdbtool)
-cd ../examples/VFS
-#CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="-s" ./configure \
-# --prefix='$(DESTDIR)/usr' \
-# --localstatedir='$(DESTDIR)/var' \
-# --libdir='$(DESTDIR)%{EtcSamba}' \
-# --sbindir='$(DESTDIR)/usr/sbin'
-make
-
%Install
%{mkDESTDIR}
VVS=packaging/%{Vendor}/%{Dist}
mkdir -p $DESTDIR/etc/{{rc.d/init,logrotate,pam}.d,sysconfig/daemons}
-mkdir -p $DESTDIR%{EtcSamba}/codepages/src
+mkdir -p $DESTDIR%{EtcSamba}
mkdir -p $DESTDIR/etc/skel/Samba
mkdir -p $DESTDIR/home/samba
mkdir -p $DESTDIR/lib/security
-mkdir -p $DESTDIR/lib/samba
mkdir -p $DESTDIR/%{LSBservedir}/{netlogon,profiles,Public}
mkdir -p $DESTDIR%{NKinetdir}
mkdir -p $DESTDIR/{sbin,bin,usr/{sbin,bin}}
mkdir -p $DESTDIR/%{SVIdir}
-mkdir -p $DESTDIR/usr/{include,lib}
+mkdir -p $DESTDIR/usr/{include,lib/samba/vfs}
mkdir -p $DESTDIR/usr/share/samba/codepages/src
mkdir -p $DESTDIR/usr/share/swat/using_samba/{gifs,figs}
mkdir -p $DESTDIR/var/{lo{ck,g}/samba.d,spool/samba}
-make -C source install installclientlib
+make -C source DESTDIR=$RPM_BUILD_ROOT install-everything installclientlib
strip $DESTDIR/usr/bin/smb{mount,mnt,umount}
# Add links for mount.smbfs
install -m 755 source/tdb/$i $DESTDIR/usr/sbin
done
-# Add VFS Modules
-for i in audit.so recycle.so netatalk.so skel.so
-do
- install -m755 examples/VFS/$i $DESTDIR/lib/samba
-done
-
-#mv $DESTDIR/usr/bin/{make,add,conv}* $DESTDIR/usr/sbin
-
-#cp -p source/codepages/codepage_def.??? $DESTDIR%{EtcSamba}/codepages/src
-
# Install the nsswitch library extension file
cp -p source/nsswitch/libnss_wins.so $DESTDIR/lib
cp -p source/nsswitch/libnss_winbind.so $DESTDIR/lib
cp -p source/nsswitch/pam_winbind.so $DESTDIR/lib/security
+cp -p source/bin/pam_smbpass.so $DESTDIR/lib/security
# Make link for wins resolver
( cd $DESTDIR/lib; ln -s libnss_wins.so libnss_wins.so.2 )
# Add libsmbclient.a support stuff
install -m 755 source/bin/libsmbclient.a $DESTDIR/usr/lib
+# Add smbwrapper support
+install -m 755 source/bin/smbsh $DESTDIR/usr/bin
+install -m 755 source/bin/smbwrapper.so $DESTDIR/usr/lib
+
+# Ancilliary support files
cp -p $VVS/samba.init $DESTDIR/etc/rc.d/init.d/samba
ln -s /etc/rc.d/init.d/samba $DESTDIR/usr/sbin
-
cp -p $VVS/smb.conf.sample $DESTDIR%{EtcSamba}/smb.conf.sample
cp -p $VVS/smbusers $DESTDIR%{EtcSamba}
cp -p $VVS/findsmb $DESTDIR/usr/bin
%{_defaultdocdir}/samba-[^/]+/(COPYING|README$) base
libnss_* base
pam_* base
+vfs_* base
+pdb_* base
+smbsh base
+smbwrapper.so base
%{_defaultdocdir}/samba-[^/]+/(COPYING|README$) base
%{_defaultdocdir}/samba- doc
smb(mount|mnt|umount) smbfs
%Post
/usr/lib/LSB/init-install %{Name}
+ldconfig
%Post -n swat
%{NKinetdReload}
[ $# -lt 1 ] && echo "Usage: $0 <Samba version>" && exit 1
-VERSION=$1cvs
-RELEASE=`date +%Y%m%d`
+VERSION=$1
+RELEASE=0.`date +%Y%m%d`
shift
# Replace PRELEASE and PVERSION with release number in all files ending with
Source: ftp://samba.org/pub/samba/samba-%{source_ver}.tar.bz2
URL: http://www.samba.org
Source1: samba.log
+Source2: mount.smb
Source3: samba.xinetd
Source4: swat_48.xpm.bz2
Source5: swat_32.xpm.bz2
%endif
Source10: samba-print-pdf.sh.bz2
Patch1: smbw.patch.bz2
+Patch2: samba-glibc21.patch.bz2
+#Patch3: network-recycle_bin.patch.bz2
Patch5: samba-2.2.0-gawk.patch.bz2
Patch12: samba-2.2.0-buildroot.patch.bz2
+#Patch16: samba-mkdir.patch.bz2
Patch17: samba-3.0-smbmount-sbin.patch.bz2
+#Patches 20-22 to get packaging synced from 2.2.2 to 3.0
+Patch20: samba-3.0-smb.conf.patch.bz2
+Patch21: samba-3.0-winbind.init.patch.bz2
+Patch22: samba-3.0-system-auth-winbind.patch.bz2
+Patch23: samba-3alpha20-destdir.patch.bz2
+#Patch24: samba-3.0alpha13-installman.patch.bz2
+Patch25: samba-3.0alpha13-config_lang.patch.bz2
+#Patch 26 belongs with 20-22
+Patch26: samba-3.0-smb.init.patch.bz2
Requires: pam >= 0.64, samba-common = %{version}
BuildRequires: pam-devel autoconf readline-devel
%if %build_acl
%else
%setup -q -n %{pkg_name}-%{source_ver}
%endif
+#%patch111 -p1
%patch1 -p1 -b .smbw
+#%patch3 -p1 -b .net-r_bin
%patch5 -p1 -b .gawk
+#%patch6 -p1
%patch12 -p1 -b .buildroot
%patch17 -p1 -b .sbin
+%patch20 -p1 -b .samba222
+%patch21 -p1 -b .samba222
+%patch22 -p1 -b .samba222
+%patch23 -p1 -b .destdir
+#%patch24 -p1 -b .langen
+%patch25 -p1 -b .multilang
+%patch26 -p1 -b .samba222
cp %{SOURCE7} .
# Make a copy of examples so that we have a clean one for doc:
%dir /var/log/%{name}
%attr(1777,root,root) %dir /var/spool/%{name}
%dir %{_datadir}/%{name}/scripts
-%attr(0755,root,root) %{_datadir}/%{name}/scripts/print-pdf
+#%attr(0755,root,root) %{_datadir}/%{name}/scripts/print-pdf
#%attr(0750,root,root) %{_datadir}/%{name}/scripts/smbldap*.pl
#%attr(0640,root,root) %config(noreplace) %{_sysconfdir}/%{name}/smbldap_conf.pm
#%attr(0644,root,root) %{_datadir}/%{name}/scripts/smbldap_tools.pm
%dir /var/cache/%{name}
%dir /var/log/%{name}
%dir /var/run/%{name}
+#%{_bindir}/make_smbcodepage
+#%{_bindir}/make_unicodemap
%{_bindir}/testparm%{samba_major}
%{_bindir}/testprns%{samba_major}
+#%{_bindir}/make_printerdef
%{_bindir}/rpcclient%{samba_major}
%{_bindir}/smbsh%{samba_major}
%{_bindir}/smbpasswd%{samba_major}
%attr(-,root,root) %config(noreplace) /etc/%{name}/smb-winbind.conf
%attr(-,root,root) %config(noreplace) /etc/%{name}/lmhosts
%attr(-,root,root) /var/lib/%{name}/codepages
+%{_mandir}/man1/make_smbcodepage*.1*
+%{_mandir}/man1/make_unicodemap*.1*
%{_mandir}/man1/testparm*.1*
%{_mandir}/man1/smbsh*.1*
%{_mandir}/man1/testprns*.1*
mdkstatus
;;
condrestart)
- [ -f /var/lock/subsys/winbind ] && restart || :
+ [ -f /var/lock/subsys/winbindd ] && restart || :
;;
*)
echo "Usage: $0 {start|stop|restart|status|condrestart}"
# Note: Under this directory rpm expects to find the same directories that are under the
# /usr/src/redhat directory
#
-if [ -x ~/.rpmmacros ]; then
+if [ -r ~/.rpmmacros ]; then
TOPDIR=`awk '/topdir/ {print $2}' < ~/.rpmmacros`
if [ z$TOPDIR <> "z" ]; then
SPECDIR=${TOPDIR}/SPECS
BIN_PROGS2 = bin/smbcontrol@EXEEXT@ bin/smbtree@EXEEXT@ bin/tdbbackup@EXEEXT@ \
bin/nmblookup@EXEEXT@ bin/pdbedit@EXEEXT@
BIN_PROGS3 = bin/smbpasswd@EXEEXT@ bin/rpcclient@EXEEXT@ bin/smbcacls@EXEEXT@ \
- bin/profiles@EXEEXT@ bin/smbgroupedit@EXEEXT@ bin/ntlm_auth@EXEEXT@ \
- bin/editreg@EXEEXT@
+ bin/smbgroupedit@EXEEXT@
TORTURE_PROGS = bin/smbtorture@EXEEXT@ bin/msgtest@EXEEXT@ \
bin/masktest@EXEEXT@ bin/locktest@EXEEXT@ \
VFS_MODULES = bin/vfs_audit.@SHLIBEXT@ bin/vfs_recycle.@SHLIBEXT@ bin/vfs_netatalk.@SHLIBEXT@
PDB_MODULES = @MODULE_MYSQL@ @MODULE_XML@
-MODULES = bin/developer.@SHLIBEXT@
######################################################################
# object file lists
lib/md5.o lib/hmacmd5.o lib/iconv.o lib/smbpasswd.o \
nsswitch/wb_client.o nsswitch/wb_common.o \
lib/pam_errors.o intl/lang_tdb.o lib/account_pol.o \
- lib/adt_tree.o lib/gencache.o $(TDB_OBJ) \
- lib/module.o
+ lib/adt_tree.o lib/gencache.o $(TDB_OBJ)
LIB_SMBD_OBJ = lib/system_smbd.o lib/util_smbd.o
libsmb/smberr.o libsmb/credentials.o libsmb/pwd_cache.o \
libsmb/clioplock.o libsmb/errormap.o libsmb/clirap2.o \
libsmb/passchange.o libsmb/unexpected.o libsmb/doserr.o \
- libsmb/namecache.o libsmb/trustdom_cache.o $(RPC_PARSE_OBJ1)
+ libsmb/namecache.o $(RPC_PARSE_OBJ1)
LIBMSRPC_OBJ = rpc_client/cli_lsarpc.o rpc_client/cli_samr.o \
rpc_client/cli_netlogon.o rpc_client/cli_srvsvc.o \
rpc_client/cli_wkssvc.o rpc_client/cli_dfs.o \
rpc_client/cli_reg.o rpc_client/cli_pipe.o \
rpc_client/cli_spoolss.o rpc_client/cli_spoolss_notify.o \
- rpc_client/cli_ds.o libsmb/namequery_dc.o
+ rpc_client/cli_ds.o
LIBMSRPC_SERVER_OBJ = libsmb/trust_passwd.o
$(REGOBJS_OBJ)
-RPC_CLIENT_OBJ = rpc_client/cli_pipe.o
+RPC_CLIENT_OBJ = rpc_client/cli_pipe.o
LOCKING_OBJ = locking/locking.o locking/brlock.o locking/posix.o
PASSDB_OBJ = $(PASSDB_GET_SET_OBJ) passdb/passdb.o passdb/pdb_interface.o \
passdb/machine_sid.o passdb/pdb_smbpasswd.o \
- passdb/pdb_tdb.o passdb/pdb_ldap.o \
+ passdb/pdb_tdb.o passdb/pdb_ldap.o passdb/pdb_plugin.o \
passdb/pdb_unix.o passdb/util_sam_sid.o \
passdb/pdb_compat.o passdb/pdb_nisplus.o
-XML_OBJ = modules/xml.o
-MYSQL_OBJ = modules/mysql.o
-DEVEL_HELP_OBJ = modules/developer.o
-
-SAM_STATIC_MODULES = sam/sam_plugin.o sam/sam_skel.o sam/sam_ads.o
-
-SAM_OBJ = sam/account.o sam/get_set_account.o sam/get_set_group.o \
- sam/get_set_domain.o sam/interface.o $(SAM_STATIC_MODULES)
-
-SAMTEST_OBJ = torture/samtest.o torture/cmd_sam.o $(SAM_OBJ) $(LIB_OBJ) $(PARAM_OBJ) $(LIBSMB_OBJ) $(UBIQX_OBJ) $(READLINE_OBJ) lib/util_seaccess.o $(LIBADS_OBJ) $(PASSDB_OBJ) $(SECRETS_OBJ) $(GROUPDB_OBJ)
+PDB_XML_OBJ = passdb/pdb_xml.o
+PDB_MYSQL_OBJ = passdb/pdb_mysql.o
GROUPDB_OBJ = groupdb/mapping.o
SMBCACLS_OBJ = utils/smbcacls.o $(LOCKING_OBJ) $(LIBSMB_OBJ) $(PARAM_OBJ) \
$(UBIQX_OBJ) $(LIB_OBJ) $(RPC_PARSE_OBJ) $(PASSDB_GET_SET_OBJ) \
- $(LIBMSRPC_OBJ) $(SECRETS_OBJ)
+ $(LIBMSRPC_OBJ)
TALLOCTORT_OBJ = lib/talloctort.o $(LIB_OBJ) $(PARAM_OBJ) $(UBIQX_OBJ)
$(PRINTING_OBJ) $(PRINTBACKEND_OBJ) $(OPLOCK_OBJ) $(NOTIFY_OBJ) \
$(QUOTAOBJS) $(PASSDB_OBJ) $(GROUPDB_OBJ) $(MSDFS_OBJ) \
$(READLINE_OBJ) $(PROFILE_OBJ) $(LIBADS_OBJ) $(LIBADS_SERVER_OBJ) \
- $(LIB_SMBD_OBJ) $(SAM_OBJ) $(REGISTRY_OBJ) $(POPT_LIB_OBJ)
+ $(LIB_SMBD_OBJ) $(REGISTRY_OBJ) $(POPT_LIB_OBJ)
NSS_OBJ_0 = nsswitch/wins.o $(PARAM_OBJ) $(UBIQX_OBJ) $(LIBSMB_OBJ) \
$(LIB_OBJ) $(NSSWINS_OBJ)
TDBBACKUP_OBJ = tdb/tdbbackup.o $(TDBBASE_OBJ)
-NTLM_AUTH_OBJ = utils/ntlm_auth.o $(POPT_LIB_OBJ)
-
######################################################################
# now the rules...
######################################################################
wins : SHOWFLAGS nsswitch/libnss_wins.@SHLIBEXT@
-modules: SHOWFLAGS proto_exists $(VFS_MODULES) $(PDB_MODULES) $(MODULES)
+modules: SHOWFLAGS proto_exists $(VFS_MODULES) $(PDB_MODULES)
-everything: all libsmbclient debug2html smbfilter talloctort
+everything: all libsmbclient debug2html smbfilter talloctort modules
.SUFFIXES:
.SUFFIXES: .c .o .po .po32 .lo
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(NET_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @BUILD_POPT@
-bin/profiles@EXEEXT@: utils/profiles.o bin/.dummy
- @echo Linking $@
- @$(CC) $(FLAGS) -o $@ utils/profiles.o $(LDFLAGS) $(LIBS)
-
-bin/editreg@EXEEXT@: utils/editreg.o bin/.dummy
- @echo Linking $@
- @$(CC) $(FLAGS) -o $@ utils/editreg.o $(LDFLAGS) $(LIBS)
-
bin/smbspool@EXEEXT@: $(CUPS_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(CUPS_OBJ) $(LDFLAGS) $(LIBS)
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(PDBEDIT_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @BUILD_POPT@
-bin/samtest@EXEEXT@: $(SAMTEST_OBJ) @BUILD_POPT@ bin/.dummy
- @echo Linking $@
- @$(CC) $(FLAGS) -o $@ $(SAMTEST_OBJ) $(LDFLAGS) $(DYNEXP) $(TERMLDFLAGS) $(TERMLIBS) $(DYNEXP) $(LIBS) @BUILD_POPT@
-
bin/smbgroupedit@EXEEXT@: $(SMBGROUPEDIT_OBJ) bin/.dummy
@echo Linking $@
@$(CC) $(FLAGS) -o $@ $(SMBGROUPEDIT_OBJ) $(LDFLAGS) $(LIBS)
@$(SHLD) $(LDSHFLAGS) -o $@ $(PAM_WINBIND_OBJ) \
@SONAMEFLAG@`basename $@` -lpam
-bin/mysql.@SHLIBEXT@: $(MYSQL_OBJ)
- @echo "Building plugin $@"
- @$(SHLD) $(LDSHFLAGS) -o $@ $(MYSQL_OBJ) @MYSQL_LIBS@ \
- @SONAMEFLAG@`basename $@`
-
-bin/developer.@SHLIBEXT@: $(DEVEL_HELP_OBJ)
+bin/pdb_mysql.@SHLIBEXT@: $(PDB_MYSQL_OBJ)
@echo "Building plugin $@"
- @$(SHLD) $(LDSHFLAGS) -o $@ $(DEVEL_HELP_OBJ) \
+ @$(SHLD) $(LDSHFLAGS) -o $@ $(PDB_MYSQL_OBJ) @MYSQL_LIBS@ \
@SONAMEFLAG@`basename $@`
-bin/xml.@SHLIBEXT@: $(XML_OBJ)
+bin/pdb_xml.@SHLIBEXT@: $(PDB_XML_OBJ)
@echo "Building plugin $@"
- @$(SHLD) $(LDSHFLAGS) -o $@ $(XML_OBJ) @XML_LIBS@ \
+ @$(SHLD) $(LDSHFLAGS) -o $@ $(PDB_XML_OBJ) @XML_LIBS@ \
@SONAMEFLAG@`basename $@`
bin/vfs_audit.@SHLIBEXT@: $(VFS_AUDIT_OBJ)
@$(LINK) -o $@ $(WBINFO_OBJ) $(PARAM_OBJ) $(LIB_OBJ) \
$(UBIQX_OBJ) $(SECRETS_OBJ) $(LIBS) @BUILD_POPT@
-bin/ntlm_auth@EXEEXT@: $(NTLM_AUTH_OBJ) $(PARAM_OBJ) $(LIB_OBJ) \
- $(UBIQX_OBJ) @BUILD_POPT@ bin/.dummy
- @echo Linking $@
- @$(LINK) -o $@ $(NTLM_AUTH_OBJ) $(PARAM_OBJ) $(LIB_OBJ) \
- $(UBIQX_OBJ) $(LIBS) @BUILD_POPT@
-
bin/pam_smbpass.@SHLIBEXT@: $(PAM_SMBPASS_PICOOBJ)
@echo "Linking shared library $@"
$(SHLD) $(LDSHFLAGS) -o $@ $(PAM_SMBPASS_PICOOBJ) -lpam $(DYNEXP) $(LIBS) -lc
install: installbin installman installscripts installdat installswat
+install-everything: install installmodules
+
# DESTDIR is used here to prevent packagers wasting their time
# duplicating the Makefile. Remove it and you will have the privelege
# of package each samba release for muliple versions of multiple
@$(SHELL) $(srcdir)/script/uninstallbin.sh $(INSTALLPERMS) $(DESTDIR)$(BASEDIR) $(DESTDIR)$(BINDIR) $(DESTDIR)$(LIBDIR) $(DESTDIR)$(VARDIR) $(DESTDIR)$(BIN_PROGS)
uninstallmodules:
- @$(SHELL) $(srcdir)/script/uninstallmodules.sh $(INSTALLPERMS) $(DESTDIR)$(BASEDIR) $(DESTDIR)$(VFSLIBDIR) $(DESTDIR)$(VFS_MODULES)
- @$(SHELL) $(srcdir)/script/uninstallmodules.sh $(INSTALLPERMS) $(DESTDIR)$(BASEDIR) $(DESTDIR)$(PDBLIBDIR) $(DESTDIR)$(PDB_MODULES)
- @$(SHELL) $(srcdir)/script/uninstallmodules.sh $(INSTALLPERMS) $(DESTDIR)$(BASEDIR) $(DESTDIR)$(LIBDIR) $(DESTDIR)$(MODULES)
+ @$(SHELL) $(srcdir)/script/uninstallmodules.sh $(INSTALLPERMS) $(DESTDIR)$(BASEDIR) $(DESTDIR)$(PDBLIBDIR) $(DESTDIR)$(VFS_MODULES)
+ @$(SHELL) $(srcdir)/script/uninstallmodules.sh $(INSTALLPERMS) $(DESTDIR)$(BASEDIR) $(DESTDIR)$(VFSLIBDIR) $(DESTDIR)$(PDB_MODULES)
uninstallscripts:
@$(SHELL) $(srcdir)/script/uninstallscripts.sh $(INSTALLPERMS) $(DESTDIR)$(BINDIR) $(SCRIPTS)
clean: delheaders python_clean
-rm -f core */*~ *~ */*.o */*.po */*.po32 */*.@SHLIBEXT@ \
- $(TOPFILES) $(BIN_PROGS) $(SBIN_PROGS) $(MODULES) .headers.stamp
+ $(TOPFILES) $(BIN_PROGS) $(SBIN_PROGS) $(VFS_MODULES) $(PDB_MODULES) .headers.stamp
# Making this target will just make sure that the prototype files
# exist, not necessarily that they are up to date. Since they're
ctags `find $(srcdir) -name "*.[ch]" | grep -v /CVS/`
realclean: clean delheaders
- -rm -f config.log $(BIN_PROGS) $(MODULES) $(SBIN_PROGS) bin/.dummy script/findsmb
+ -rm -f config.log $(BIN_PROGS) $(SBIN_PROGS) bin/.dummy script/findsmb
distclean: realclean
-rm -f include/stamp-h
result = cli_nt_setup_creds(*cli, sec_chan, trust_passwd, &neg_flags, 2);
if (!NT_STATUS_IS_OK(result)) {
- DEBUG(0,("connect_to_domain_password_server: unable to setup the NETLOGON credentials to machine \
+ DEBUG(0,("connect_to_domain_password_server: unable to setup the PDC credentials to machine \
%s. Error was : %s.\n", remote_machine, nt_errstr(result)));
cli_nt_session_close(*cli);
cli_ulogoff(*cli);
We have been asked to dynamically determine the IP addresses of
the PDC and BDC's for DOMAIN, and query them in turn.
************************************************************************/
-static NTSTATUS find_connect_dc(struct cli_state **cli,
+static NTSTATUS find_connect_pdc(struct cli_state **cli,
const char *domain,
const char *setup_creds_as,
uint16 sec_chan,
unsigned char *trust_passwd,
time_t last_change_time)
{
- struct in_addr dc_ip;
- fstring srv_name;
+ struct in_addr *ip_list = NULL;
+ int count = 0;
+ int i;
+ NTSTATUS nt_status = NT_STATUS_NO_LOGON_SERVERS;
+ time_t time_now = time(NULL);
+ BOOL use_pdc_only = False;
+ BOOL list_ordered;
- if ( !rpc_find_dc(lp_workgroup(), srv_name, &dc_ip) ) {
- DEBUG(0,("find_connect_dc: Failed to find an DCs for %s\n", lp_workgroup()));
- return NT_STATUS_NO_LOGON_SERVERS;
+ /*
+ * If the time the machine password has changed
+ * was less than an hour ago then we need to contact
+ * the PDC only, as we cannot be sure domain replication
+ * has yet taken place. Bug found by Gerald (way to go
+ * Gerald !). JRA.
+ */
+
+ if (time_now - last_change_time < 3600)
+ use_pdc_only = True;
+
+ if (use_pdc_only) {
+ struct in_addr pdc_ip;
+
+ if (!get_pdc_ip(domain, &pdc_ip))
+ return NT_STATUS_NO_LOGON_SERVERS;
+
+ if ((ip_list = (struct in_addr *)
+ malloc(sizeof(struct in_addr))) == NULL)
+ return NT_STATUS_NO_MEMORY;
+
+ ip_list[0] = pdc_ip;
+ count = 1;
+
+ } else {
+ if (!get_dc_list(domain, &ip_list, &count, &list_ordered))
+ return NT_STATUS_NO_LOGON_SERVERS;
}
-
- return attempt_connect_to_dc( cli, domain, &dc_ip, setup_creds_as,
- sec_chan, trust_passwd );
+
+ /*
+ * Firstly try and contact a PDC/BDC who has the same
+ * network address as any of our interfaces.
+ */
+ for(i = 0; i < count; i++) {
+ if( !list_ordered && !is_local_net(ip_list[i]) )
+ continue;
+
+ if(NT_STATUS_IS_OK(nt_status =
+ attempt_connect_to_dc(cli, domain,
+ &ip_list[i], setup_creds_as,
+ sec_chan, trust_passwd)))
+ break;
+
+ zero_ip(&ip_list[i]); /* Tried and failed. */
+ }
+
+ /*
+ * Secondly try and contact a random PDC/BDC.
+ */
+ if(!NT_STATUS_IS_OK(nt_status)) {
+ i = (sys_random() % count);
+
+ if (!is_zero_ip(ip_list[i])) {
+ if (!NT_STATUS_IS_OK(nt_status =
+ attempt_connect_to_dc(cli, domain,
+ &ip_list[i], setup_creds_as,
+ sec_chan, trust_passwd)))
+ zero_ip(&ip_list[i]); /* Tried and failed. */
+ }
+ }
+
+ /*
+ * Finally go through the IP list in turn, ignoring any addresses
+ * we have already tried.
+ */
+ if(!NT_STATUS_IS_OK(nt_status)) {
+ /*
+ * Try and connect to any of the other IP addresses in the PDC/BDC list.
+ * Note that from a WINS server the #1 IP address is the PDC.
+ */
+ for(i = 0; i < count; i++) {
+ if (is_zero_ip(ip_list[i]))
+ continue;
+
+ if (NT_STATUS_IS_OK(nt_status = attempt_connect_to_dc(cli, domain,
+ &ip_list[i], setup_creds_as, sec_chan, trust_passwd)))
+ break;
+ }
+ }
+
+ SAFE_FREE(ip_list);
+ return nt_status;
}
/***********************************************************************
while (!NT_STATUS_IS_OK(nt_status) &&
next_token(&server,remote_machine,LIST_SEP,sizeof(remote_machine))) {
if(lp_security() != SEC_ADS && strequal(remote_machine, "*")) {
- nt_status = find_connect_dc(&cli, domain, setup_creds_as, sec_chan, trust_passwd, last_change_time);
+ nt_status = find_connect_pdc(&cli, domain, setup_creds_as, sec_chan, trust_passwd, last_change_time);
} else {
int i;
BOOL retry = True;
-*.so
.dummy
.libs
-debug2html
locktest
locktest2
make_printerdef
nmbd
nmblookup
nsstest
-ntlm_auth
pdbedit
-profiles
rpcclient
samsync
-samtest
smbcacls
smbcacls
smbclient
tdbbackup
testparm
testprns
-vfstest
wbinfo
winbindd
wrepld
-editreg
+vfstest
+samtest
--with-pam Include PAM support (default=no)"
ac_help="$ac_help
--with-pam_smbpass Build a PAM module to allow other applications to use our smbpasswd file (default=no)"
-ac_help="$ac_help
- --with-sam Build new (experimental) SAM database (default=no)"
ac_help="$ac_help
--with-ldapsam Include LDAP SAM 2.2 compatible configuration (default=no)"
ac_help="$ac_help
# Extract the first word of "gcc", so it can be a program name with args.
set dummy gcc; ac_word=$2
echo $ac_n "checking for $ac_word""... $ac_c" 1>&6
-echo "configure:843: checking for $ac_word" >&5
+echo "configure:841: checking for $ac_word" >&5
if eval "test \"`echo '$''{'ac_cv_prog_CC'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
# Extract the first word of "cc", so it can be a program name with args.
set dummy cc; ac_word=$2
echo $ac_n "checking for $ac_word""... $ac_c" 1>&6
-echo "configure:873: checking for $ac_word" >&5
+echo "configure:871: checking for $ac_word" >&5
if eval "test \"`echo '$''{'ac_cv_prog_CC'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
# Extract the first word of "cl", so it can be a program name with args.
set dummy cl; ac_word=$2
echo $ac_n "checking for $ac_word""... $ac_c" 1>&6
-echo "configure:924: checking for $ac_word" >&5
+echo "configure:922: checking for $ac_word" >&5
if eval "test \"`echo '$''{'ac_cv_prog_CC'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
fi
echo $ac_n "checking whether the C compiler ($CC $CFLAGS $LDFLAGS) works""... $ac_c" 1>&6
-echo "configure:956: checking whether the C compiler ($CC $CFLAGS $LDFLAGS) works" >&5
+echo "configure:954: checking whether the C compiler ($CC $CFLAGS $LDFLAGS) works" >&5
ac_ext=c
# CFLAGS is not in ac_cpp because -g, -O, etc. are not valid cpp options.
cat > conftest.$ac_ext << EOF
-#line 967 "configure"
+#line 965 "configure"
#include "confdefs.h"
main(){return(0);}
EOF
-if { (eval echo configure:972: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:970: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
ac_cv_prog_cc_works=yes
# If we can't run a trivial program, we are probably using a cross compiler.
if (./conftest; exit) 2>/dev/null; then
{ echo "configure: error: installation or configuration problem: C compiler cannot create executables." 1>&2; exit 1; }
fi
echo $ac_n "checking whether the C compiler ($CC $CFLAGS $LDFLAGS) is a cross-compiler""... $ac_c" 1>&6
-echo "configure:998: checking whether the C compiler ($CC $CFLAGS $LDFLAGS) is a cross-compiler" >&5
+echo "configure:996: checking whether the C compiler ($CC $CFLAGS $LDFLAGS) is a cross-compiler" >&5
echo "$ac_t""$ac_cv_prog_cc_cross" 1>&6
cross_compiling=$ac_cv_prog_cc_cross
echo $ac_n "checking whether we are using GNU C""... $ac_c" 1>&6
-echo "configure:1003: checking whether we are using GNU C" >&5
+echo "configure:1001: checking whether we are using GNU C" >&5
if eval "test \"`echo '$''{'ac_cv_prog_gcc'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
yes;
#endif
EOF
-if { ac_try='${CC-cc} -E conftest.c'; { (eval echo configure:1012: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }; } | egrep yes >/dev/null 2>&1; then
+if { ac_try='${CC-cc} -E conftest.c'; { (eval echo configure:1010: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }; } | egrep yes >/dev/null 2>&1; then
ac_cv_prog_gcc=yes
else
ac_cv_prog_gcc=no
ac_save_CFLAGS="$CFLAGS"
CFLAGS=
echo $ac_n "checking whether ${CC-cc} accepts -g""... $ac_c" 1>&6
-echo "configure:1031: checking whether ${CC-cc} accepts -g" >&5
+echo "configure:1029: checking whether ${CC-cc} accepts -g" >&5
if eval "test \"`echo '$''{'ac_cv_prog_cc_g'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
# ./install, which can be erroneously created by make from ./install.sh.
echo $ac_n "checking for a BSD compatible install""... $ac_c" 1>&6
-echo "configure:1093: checking for a BSD compatible install" >&5
+echo "configure:1091: checking for a BSD compatible install" >&5
if test -z "$INSTALL"; then
if eval "test \"`echo '$''{'ac_cv_path_install'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-for ac_prog in mawk gawk nawk awk
+for ac_prog in gawk mawk nawk awk
do
# Extract the first word of "$ac_prog", so it can be a program name with args.
set dummy $ac_prog; ac_word=$2
echo $ac_n "checking for $ac_word""... $ac_c" 1>&6
-echo "configure:1150: checking for $ac_word" >&5
+echo "configure:1148: checking for $ac_word" >&5
if eval "test \"`echo '$''{'ac_cv_prog_AWK'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
LD=ld
echo $ac_n "checking if the linker ($LD) is GNU ld""... $ac_c" 1>&6
-echo "configure:1182: checking if the linker ($LD) is GNU ld" >&5
+echo "configure:1180: checking if the linker ($LD) is GNU ld" >&5
if eval "test \"`echo '$''{'ac_cv_prog_gnu_ld'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
echo $ac_n "checking for POSIXized ISC""... $ac_c" 1>&6
-echo "configure:1198: checking for POSIXized ISC" >&5
+echo "configure:1196: checking for POSIXized ISC" >&5
if test -d /etc/conf/kconfig.d &&
grep _POSIX_VERSION /usr/include/sys/unistd.h >/dev/null 2>&1
then
echo $ac_n "checking for Cygwin environment""... $ac_c" 1>&6
-echo "configure:1220: checking for Cygwin environment" >&5
+echo "configure:1218: checking for Cygwin environment" >&5
if eval "test \"`echo '$''{'ac_cv_cygwin'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 1225 "configure"
+#line 1223 "configure"
#include "confdefs.h"
int main() {
return __CYGWIN__;
; return 0; }
EOF
-if { (eval echo configure:1236: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:1234: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_cygwin=yes
else
CYGWIN=
test "$ac_cv_cygwin" = yes && CYGWIN=yes
echo $ac_n "checking for mingw32 environment""... $ac_c" 1>&6
-echo "configure:1253: checking for mingw32 environment" >&5
+echo "configure:1251: checking for mingw32 environment" >&5
if eval "test \"`echo '$''{'ac_cv_mingw32'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 1258 "configure"
+#line 1256 "configure"
#include "confdefs.h"
int main() {
return __MINGW32__;
; return 0; }
EOF
-if { (eval echo configure:1265: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:1263: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_mingw32=yes
else
echo $ac_n "checking for executable suffix""... $ac_c" 1>&6
-echo "configure:1284: checking for executable suffix" >&5
+echo "configure:1282: checking for executable suffix" >&5
if eval "test \"`echo '$''{'ac_cv_exeext'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
rm -f conftest*
echo 'int main () { return 0; }' > conftest.$ac_ext
ac_cv_exeext=
- if { (eval echo configure:1294: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; }; then
+ if { (eval echo configure:1292: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; }; then
for file in conftest.*; do
case $file in
- *.$ac_ext | *.c | *.o | *.obj) ;;
+ *.c | *.o | *.obj) ;;
*) ac_cv_exeext=`echo $file | sed -e s/conftest//` ;;
esac
done
if test "x$CC" != xcc; then
echo $ac_n "checking whether $CC and cc understand -c and -o together""... $ac_c" 1>&6
-echo "configure:1317: checking whether $CC and cc understand -c and -o together" >&5
+echo "configure:1315: checking whether $CC and cc understand -c and -o together" >&5
else
echo $ac_n "checking whether cc understands -c and -o together""... $ac_c" 1>&6
-echo "configure:1320: checking whether cc understands -c and -o together" >&5
+echo "configure:1318: checking whether cc understands -c and -o together" >&5
fi
set dummy $CC; ac_cc="`echo $2 |
sed -e 's/[^a-zA-Z0-9_]/_/g' -e 's/^[0-9]/_/'`"
# We do the test twice because some compilers refuse to overwrite an
# existing .o file with -o, though they will create one.
ac_try='${CC-cc} -c conftest.c -o conftest.o 1>&5'
-if { (eval echo configure:1332: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; } &&
- test -f conftest.o && { (eval echo configure:1333: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; };
+if { (eval echo configure:1330: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; } &&
+ test -f conftest.o && { (eval echo configure:1331: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; };
then
eval ac_cv_prog_cc_${ac_cc}_c_o=yes
if test "x$CC" != xcc; then
# Test first that cc exists at all.
- if { ac_try='cc -c conftest.c 1>&5'; { (eval echo configure:1338: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }; }; then
+ if { ac_try='cc -c conftest.c 1>&5'; { (eval echo configure:1336: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }; }; then
ac_try='cc -c conftest.c -o conftest.o 1>&5'
- if { (eval echo configure:1340: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; } &&
- test -f conftest.o && { (eval echo configure:1341: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; };
+ if { (eval echo configure:1338: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; } &&
+ test -f conftest.o && { (eval echo configure:1339: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; };
then
# cc works too.
:
echo $ac_n "checking that the C compiler understands volatile""... $ac_c" 1>&6
-echo "configure:1375: checking that the C compiler understands volatile" >&5
+echo "configure:1373: checking that the C compiler understands volatile" >&5
if eval "test \"`echo '$''{'samba_cv_volatile'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 1381 "configure"
+#line 1379 "configure"
#include "confdefs.h"
#include <sys/types.h>
int main() {
volatile int i = 0
; return 0; }
EOF
-if { (eval echo configure:1388: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:1386: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_volatile=yes
else
fi
echo $ac_n "checking host system type""... $ac_c" 1>&6
-echo "configure:1437: checking host system type" >&5
+echo "configure:1435: checking host system type" >&5
host_alias=$host
case "$host_alias" in
echo "$ac_t""$host" 1>&6
echo $ac_n "checking target system type""... $ac_c" 1>&6
-echo "configure:1458: checking target system type" >&5
+echo "configure:1456: checking target system type" >&5
target_alias=$target
case "$target_alias" in
echo "$ac_t""$target" 1>&6
echo $ac_n "checking build system type""... $ac_c" 1>&6
-echo "configure:1476: checking build system type" >&5
+echo "configure:1474: checking build system type" >&5
build_alias=$build
case "$build_alias" in
echo $ac_n "checking config.cache system type""... $ac_c" 1>&6
-echo "configure:1510: checking config.cache system type" >&5
+echo "configure:1508: checking config.cache system type" >&5
if { test x"${ac_cv_host_system_type+set}" = x"set" &&
test x"$ac_cv_host_system_type" != x"$host"; } ||
{ test x"${ac_cv_build_system_type+set}" = x"set" &&
*hpux*)
echo $ac_n "checking whether ${CC-cc} accepts -Ae""... $ac_c" 1>&6
-echo "configure:1538: checking whether ${CC-cc} accepts -Ae" >&5
+echo "configure:1536: checking whether ${CC-cc} accepts -Ae" >&5
if eval "test \"`echo '$''{'ac_cv_prog_cc_Ae'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
*sysv4*)
if test $host = mips-sni-sysv4 ; then
echo $ac_n "checking for LFS support""... $ac_c" 1>&6
-echo "configure:1699: checking for LFS support" >&5
+echo "configure:1697: checking for LFS support" >&5
old_CPPFLAGS="$CPPFLAGS"
CPPFLAGS="-D_LARGEFILE64_SOURCE $CPPFLAGS"
if test "$cross_compiling" = yes; then
SINIX_LFS_SUPPORT=cross
else
cat > conftest.$ac_ext <<EOF
-#line 1706 "configure"
+#line 1704 "configure"
#include "confdefs.h"
#include <unistd.h>
#endif
}
EOF
-if { (eval echo configure:1718: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:1716: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
SINIX_LFS_SUPPORT=yes
else
#
*linux*)
echo $ac_n "checking for LFS support""... $ac_c" 1>&6
-echo "configure:1749: checking for LFS support" >&5
+echo "configure:1747: checking for LFS support" >&5
old_CPPFLAGS="$CPPFLAGS"
CPPFLAGS="-D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE $CPPFLAGS"
if test "$cross_compiling" = yes; then
LINUX_LFS_SUPPORT=cross
else
cat > conftest.$ac_ext <<EOF
-#line 1756 "configure"
+#line 1754 "configure"
#include "confdefs.h"
#include <unistd.h>
}
EOF
-if { (eval echo configure:1794: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:1792: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
LINUX_LFS_SUPPORT=yes
else
*hurd*)
echo $ac_n "checking for LFS support""... $ac_c" 1>&6
-echo "configure:1827: checking for LFS support" >&5
+echo "configure:1825: checking for LFS support" >&5
old_CPPFLAGS="$CPPFLAGS"
CPPFLAGS="-D_LARGEFILE64_SOURCE -D_GNU_SOURCE $CPPFLAGS"
if test "$cross_compiling" = yes; then
GLIBC_LFS_SUPPORT=cross
else
cat > conftest.$ac_ext <<EOF
-#line 1834 "configure"
+#line 1832 "configure"
#include "confdefs.h"
#include <unistd.h>
#endif
}
EOF
-if { (eval echo configure:1846: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:1844: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
GLIBC_LFS_SUPPORT=yes
else
esac
echo $ac_n "checking for inline""... $ac_c" 1>&6
-echo "configure:1876: checking for inline" >&5
+echo "configure:1874: checking for inline" >&5
if eval "test \"`echo '$''{'ac_cv_c_inline'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
ac_cv_c_inline=no
for ac_kw in inline __inline__ __inline; do
cat > conftest.$ac_ext <<EOF
-#line 1883 "configure"
+#line 1881 "configure"
#include "confdefs.h"
int main() {
} $ac_kw foo() {
; return 0; }
EOF
-if { (eval echo configure:1890: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:1888: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_c_inline=$ac_kw; break
else
esac
echo $ac_n "checking how to run the C preprocessor""... $ac_c" 1>&6
-echo "configure:1916: checking how to run the C preprocessor" >&5
+echo "configure:1914: checking how to run the C preprocessor" >&5
# On Suns, sometimes $CPP names a directory.
if test -n "$CPP" && test -d "$CPP"; then
CPP=
# On the NeXT, cc -E runs the code through the compiler's parser,
# not just through cpp.
cat > conftest.$ac_ext <<EOF
-#line 1931 "configure"
+#line 1929 "configure"
#include "confdefs.h"
#include <assert.h>
Syntax Error
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:1937: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:1935: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
:
rm -rf conftest*
CPP="${CC-cc} -E -traditional-cpp"
cat > conftest.$ac_ext <<EOF
-#line 1948 "configure"
+#line 1946 "configure"
#include "confdefs.h"
#include <assert.h>
Syntax Error
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:1954: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:1952: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
:
rm -rf conftest*
CPP="${CC-cc} -nologo -E"
cat > conftest.$ac_ext <<EOF
-#line 1965 "configure"
+#line 1963 "configure"
#include "confdefs.h"
#include <assert.h>
Syntax Error
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:1971: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:1969: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
:
echo "$ac_t""$CPP" 1>&6
echo $ac_n "checking for ANSI C header files""... $ac_c" 1>&6
-echo "configure:1996: checking for ANSI C header files" >&5
+echo "configure:1994: checking for ANSI C header files" >&5
if eval "test \"`echo '$''{'ac_cv_header_stdc'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2001 "configure"
+#line 1999 "configure"
#include "confdefs.h"
#include <stdlib.h>
#include <stdarg.h>
#include <float.h>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2009: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2007: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
if test $ac_cv_header_stdc = yes; then
# SunOS 4.x string.h does not declare mem*, contrary to ANSI.
cat > conftest.$ac_ext <<EOF
-#line 2026 "configure"
+#line 2024 "configure"
#include "confdefs.h"
#include <string.h>
EOF
if test $ac_cv_header_stdc = yes; then
# ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
cat > conftest.$ac_ext <<EOF
-#line 2044 "configure"
+#line 2042 "configure"
#include "confdefs.h"
#include <stdlib.h>
EOF
:
else
cat > conftest.$ac_ext <<EOF
-#line 2065 "configure"
+#line 2063 "configure"
#include "confdefs.h"
#include <ctype.h>
#define ISLOWER(c) ('a' <= (c) && (c) <= 'z')
exit (0); }
EOF
-if { (eval echo configure:2076: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:2074: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
:
else
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr that defines DIR""... $ac_c" 1>&6
-echo "configure:2104: checking for $ac_hdr that defines DIR" >&5
+echo "configure:2102: checking for $ac_hdr that defines DIR" >&5
if eval "test \"`echo '$''{'ac_cv_header_dirent_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2109 "configure"
+#line 2107 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <$ac_hdr>
DIR *dirp = 0;
; return 0; }
EOF
-if { (eval echo configure:2117: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:2115: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
eval "ac_cv_header_dirent_$ac_safe=yes"
else
# Two versions of opendir et al. are in -ldir and -lx on SCO Xenix.
if test $ac_header_dirent = dirent.h; then
echo $ac_n "checking for opendir in -ldir""... $ac_c" 1>&6
-echo "configure:2142: checking for opendir in -ldir" >&5
+echo "configure:2140: checking for opendir in -ldir" >&5
ac_lib_var=`echo dir'_'opendir | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-ldir $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 2150 "configure"
+#line 2148 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
opendir()
; return 0; }
EOF
-if { (eval echo configure:2161: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:2159: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
else
echo $ac_n "checking for opendir in -lx""... $ac_c" 1>&6
-echo "configure:2183: checking for opendir in -lx" >&5
+echo "configure:2181: checking for opendir in -lx" >&5
ac_lib_var=`echo x'_'opendir | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lx $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 2191 "configure"
+#line 2189 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
opendir()
; return 0; }
EOF
-if { (eval echo configure:2202: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:2200: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
fi
echo $ac_n "checking whether time.h and sys/time.h may both be included""... $ac_c" 1>&6
-echo "configure:2225: checking whether time.h and sys/time.h may both be included" >&5
+echo "configure:2223: checking whether time.h and sys/time.h may both be included" >&5
if eval "test \"`echo '$''{'ac_cv_header_time'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2230 "configure"
+#line 2228 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/time.h>
struct tm *tp;
; return 0; }
EOF
-if { (eval echo configure:2239: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:2237: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_header_time=yes
else
fi
echo $ac_n "checking for sys/wait.h that is POSIX.1 compatible""... $ac_c" 1>&6
-echo "configure:2260: checking for sys/wait.h that is POSIX.1 compatible" >&5
+echo "configure:2258: checking for sys/wait.h that is POSIX.1 compatible" >&5
if eval "test \"`echo '$''{'ac_cv_header_sys_wait_h'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2265 "configure"
+#line 2263 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/wait.h>
s = WIFEXITED (s) ? WEXITSTATUS (s) : 1;
; return 0; }
EOF
-if { (eval echo configure:2281: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:2279: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_header_sys_wait_h=yes
else
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2305: checking for $ac_hdr" >&5
+echo "configure:2303: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2310 "configure"
+#line 2308 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2315: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2313: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2345: checking for $ac_hdr" >&5
+echo "configure:2343: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2350 "configure"
+#line 2348 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2355: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2353: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2385: checking for $ac_hdr" >&5
+echo "configure:2383: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2390 "configure"
+#line 2388 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2395: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2393: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2425: checking for $ac_hdr" >&5
+echo "configure:2423: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2430 "configure"
+#line 2428 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2435: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2433: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2465: checking for $ac_hdr" >&5
+echo "configure:2463: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2470 "configure"
+#line 2468 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2475: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2473: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2505: checking for $ac_hdr" >&5
+echo "configure:2503: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2510 "configure"
+#line 2508 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2515: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2513: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2545: checking for $ac_hdr" >&5
+echo "configure:2543: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2550 "configure"
+#line 2548 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2555: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2553: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2585: checking for $ac_hdr" >&5
+echo "configure:2583: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2590 "configure"
+#line 2588 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2595: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2593: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2625: checking for $ac_hdr" >&5
+echo "configure:2623: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2630 "configure"
+#line 2628 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2635: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2633: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
case "$host_os" in
*hpux*)
cat > conftest.$ac_ext <<EOF
-#line 2669 "configure"
+#line 2667 "configure"
#include "confdefs.h"
#include <shadow.h>
int main() {
struct spwd testme
; return 0; }
EOF
-if { (eval echo configure:2676: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:2674: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_header_shadow_h=yes
else
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2698: checking for $ac_hdr" >&5
+echo "configure:2696: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2703 "configure"
+#line 2701 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2708: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2706: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2738: checking for $ac_hdr" >&5
+echo "configure:2736: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2743 "configure"
+#line 2741 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2748: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2746: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2778: checking for $ac_hdr" >&5
+echo "configure:2776: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2783 "configure"
+#line 2781 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2788: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2786: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2818: checking for $ac_hdr" >&5
+echo "configure:2816: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2823 "configure"
+#line 2821 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2828: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2826: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2858: checking for $ac_hdr" >&5
+echo "configure:2856: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2863 "configure"
+#line 2861 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2868: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2866: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2900: checking for $ac_hdr" >&5
+echo "configure:2898: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2905 "configure"
+#line 2903 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2910: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2908: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2942: checking for $ac_hdr" >&5
+echo "configure:2940: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2947 "configure"
+#line 2945 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2952: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2950: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:2984: checking for $ac_hdr" >&5
+echo "configure:2982: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 2989 "configure"
+#line 2987 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:2994: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:2992: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:3024: checking for $ac_hdr" >&5
+echo "configure:3022: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3029 "configure"
+#line 3027 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:3034: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:3032: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
echo $ac_n "checking size of int""... $ac_c" 1>&6
-echo "configure:3062: checking size of int" >&5
+echo "configure:3060: checking size of int" >&5
if eval "test \"`echo '$''{'ac_cv_sizeof_int'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
ac_cv_sizeof_int=cross
else
cat > conftest.$ac_ext <<EOF
-#line 3070 "configure"
+#line 3068 "configure"
#include "confdefs.h"
#include <stdio.h>
-#include <sys/types.h>
-main()
+int main()
{
FILE *f=fopen("conftestval", "w");
- if (!f) exit(1);
+ if (!f) return(1);
fprintf(f, "%d\n", sizeof(int));
- exit(0);
+ return(0);
}
EOF
-if { (eval echo configure:3082: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:3079: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
ac_cv_sizeof_int=`cat conftestval`
else
echo $ac_n "checking size of long""... $ac_c" 1>&6
-echo "configure:3102: checking size of long" >&5
+echo "configure:3099: checking size of long" >&5
if eval "test \"`echo '$''{'ac_cv_sizeof_long'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
ac_cv_sizeof_long=cross
else
cat > conftest.$ac_ext <<EOF
-#line 3110 "configure"
+#line 3107 "configure"
#include "confdefs.h"
#include <stdio.h>
-#include <sys/types.h>
-main()
+int main()
{
FILE *f=fopen("conftestval", "w");
- if (!f) exit(1);
+ if (!f) return(1);
fprintf(f, "%d\n", sizeof(long));
- exit(0);
+ return(0);
}
EOF
-if { (eval echo configure:3122: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:3118: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
ac_cv_sizeof_long=`cat conftestval`
else
echo $ac_n "checking size of short""... $ac_c" 1>&6
-echo "configure:3142: checking size of short" >&5
+echo "configure:3138: checking size of short" >&5
if eval "test \"`echo '$''{'ac_cv_sizeof_short'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
ac_cv_sizeof_short=cross
else
cat > conftest.$ac_ext <<EOF
-#line 3150 "configure"
+#line 3146 "configure"
#include "confdefs.h"
#include <stdio.h>
-#include <sys/types.h>
-main()
+int main()
{
FILE *f=fopen("conftestval", "w");
- if (!f) exit(1);
+ if (!f) return(1);
fprintf(f, "%d\n", sizeof(short));
- exit(0);
+ return(0);
}
EOF
-if { (eval echo configure:3162: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:3157: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
ac_cv_sizeof_short=`cat conftestval`
else
echo $ac_n "checking for working const""... $ac_c" 1>&6
-echo "configure:3183: checking for working const" >&5
+echo "configure:3178: checking for working const" >&5
if eval "test \"`echo '$''{'ac_cv_c_const'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3188 "configure"
+#line 3183 "configure"
#include "confdefs.h"
int main() {
; return 0; }
EOF
-if { (eval echo configure:3237: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:3232: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_c_const=yes
else
fi
echo $ac_n "checking for inline""... $ac_c" 1>&6
-echo "configure:3258: checking for inline" >&5
+echo "configure:3253: checking for inline" >&5
if eval "test \"`echo '$''{'ac_cv_c_inline'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
ac_cv_c_inline=no
for ac_kw in inline __inline__ __inline; do
cat > conftest.$ac_ext <<EOF
-#line 3265 "configure"
+#line 3260 "configure"
#include "confdefs.h"
int main() {
} $ac_kw foo() {
; return 0; }
EOF
-if { (eval echo configure:3272: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:3267: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_c_inline=$ac_kw; break
else
esac
echo $ac_n "checking whether byte ordering is bigendian""... $ac_c" 1>&6
-echo "configure:3298: checking whether byte ordering is bigendian" >&5
+echo "configure:3293: checking whether byte ordering is bigendian" >&5
if eval "test \"`echo '$''{'ac_cv_c_bigendian'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
ac_cv_c_bigendian=unknown
# See if sys/param.h defines the BYTE_ORDER macro.
cat > conftest.$ac_ext <<EOF
-#line 3305 "configure"
+#line 3300 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/param.h>
#endif
; return 0; }
EOF
-if { (eval echo configure:3316: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:3311: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
# It does; now see whether it defined to BIG_ENDIAN or not.
cat > conftest.$ac_ext <<EOF
-#line 3320 "configure"
+#line 3315 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/param.h>
#endif
; return 0; }
EOF
-if { (eval echo configure:3331: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:3326: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_c_bigendian=yes
else
{ echo "configure: error: can not run test program while cross compiling" 1>&2; exit 1; }
else
cat > conftest.$ac_ext <<EOF
-#line 3351 "configure"
+#line 3346 "configure"
#include "confdefs.h"
main () {
/* Are we little or big endian? From Harbison&Steele. */
exit (u.c[sizeof (long) - 1] == 1);
}
EOF
-if { (eval echo configure:3364: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:3359: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
ac_cv_c_bigendian=no
else
fi
echo $ac_n "checking whether char is unsigned""... $ac_c" 1>&6
-echo "configure:3388: checking whether char is unsigned" >&5
+echo "configure:3383: checking whether char is unsigned" >&5
if eval "test \"`echo '$''{'ac_cv_c_char_unsigned'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
if test "$GCC" = yes; then
# GCC predefines this symbol on systems where it applies.
cat > conftest.$ac_ext <<EOF
-#line 3395 "configure"
+#line 3390 "configure"
#include "confdefs.h"
#ifdef __CHAR_UNSIGNED__
yes
{ echo "configure: error: can not run test program while cross compiling" 1>&2; exit 1; }
else
cat > conftest.$ac_ext <<EOF
-#line 3417 "configure"
+#line 3412 "configure"
#include "confdefs.h"
/* volatile prevents gcc2 from optimizing the test away on sparcs. */
#if !defined(__STDC__) || __STDC__ != 1
volatile char c = 255; exit(c < 0);
}
EOF
-if { (eval echo configure:3427: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:3422: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
ac_cv_c_char_unsigned=yes
else
echo $ac_n "checking return type of signal handlers""... $ac_c" 1>&6
-echo "configure:3452: checking return type of signal handlers" >&5
+echo "configure:3447: checking return type of signal handlers" >&5
if eval "test \"`echo '$''{'ac_cv_type_signal'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3457 "configure"
+#line 3452 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <signal.h>
int i;
; return 0; }
EOF
-if { (eval echo configure:3474: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:3469: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_type_signal=void
else
echo $ac_n "checking for uid_t in sys/types.h""... $ac_c" 1>&6
-echo "configure:3493: checking for uid_t in sys/types.h" >&5
+echo "configure:3488: checking for uid_t in sys/types.h" >&5
if eval "test \"`echo '$''{'ac_cv_type_uid_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3498 "configure"
+#line 3493 "configure"
#include "confdefs.h"
#include <sys/types.h>
EOF
fi
echo $ac_n "checking for mode_t""... $ac_c" 1>&6
-echo "configure:3527: checking for mode_t" >&5
+echo "configure:3522: checking for mode_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_mode_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3532 "configure"
+#line 3527 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
fi
echo $ac_n "checking for off_t""... $ac_c" 1>&6
-echo "configure:3560: checking for off_t" >&5
+echo "configure:3555: checking for off_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_off_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3565 "configure"
+#line 3560 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
fi
echo $ac_n "checking for size_t""... $ac_c" 1>&6
-echo "configure:3593: checking for size_t" >&5
+echo "configure:3588: checking for size_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_size_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3598 "configure"
+#line 3593 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
fi
echo $ac_n "checking for pid_t""... $ac_c" 1>&6
-echo "configure:3626: checking for pid_t" >&5
+echo "configure:3621: checking for pid_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_pid_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3631 "configure"
+#line 3626 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
fi
echo $ac_n "checking for st_rdev in struct stat""... $ac_c" 1>&6
-echo "configure:3659: checking for st_rdev in struct stat" >&5
+echo "configure:3654: checking for st_rdev in struct stat" >&5
if eval "test \"`echo '$''{'ac_cv_struct_st_rdev'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3664 "configure"
+#line 3659 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/stat.h>
struct stat s; s.st_rdev;
; return 0; }
EOF
-if { (eval echo configure:3672: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:3667: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_struct_st_rdev=yes
else
fi
echo $ac_n "checking for d_off in dirent""... $ac_c" 1>&6
-echo "configure:3693: checking for d_off in dirent" >&5
+echo "configure:3688: checking for d_off in dirent" >&5
if eval "test \"`echo '$''{'ac_cv_dirent_d_off'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3698 "configure"
+#line 3693 "configure"
#include "confdefs.h"
#include <unistd.h>
struct dirent d; d.d_off;
; return 0; }
EOF
-if { (eval echo configure:3708: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:3703: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_dirent_d_off=yes
else
fi
echo $ac_n "checking for ino_t""... $ac_c" 1>&6
-echo "configure:3729: checking for ino_t" >&5
+echo "configure:3724: checking for ino_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_ino_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3734 "configure"
+#line 3729 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
fi
echo $ac_n "checking for loff_t""... $ac_c" 1>&6
-echo "configure:3762: checking for loff_t" >&5
+echo "configure:3757: checking for loff_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_loff_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3767 "configure"
+#line 3762 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
fi
echo $ac_n "checking for offset_t""... $ac_c" 1>&6
-echo "configure:3795: checking for offset_t" >&5
+echo "configure:3790: checking for offset_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_offset_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3800 "configure"
+#line 3795 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
fi
echo $ac_n "checking for ssize_t""... $ac_c" 1>&6
-echo "configure:3828: checking for ssize_t" >&5
+echo "configure:3823: checking for ssize_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_ssize_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3833 "configure"
+#line 3828 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
fi
echo $ac_n "checking for wchar_t""... $ac_c" 1>&6
-echo "configure:3861: checking for wchar_t" >&5
+echo "configure:3856: checking for wchar_t" >&5
if eval "test \"`echo '$''{'ac_cv_type_wchar_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3866 "configure"
+#line 3861 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if STDC_HEADERS
# Extract the first word of "cups-config", so it can be a program name with args.
set dummy cups-config; ac_word=$2
echo $ac_n "checking for $ac_word""... $ac_c" 1>&6
-echo "configure:3908: checking for $ac_word" >&5
+echo "configure:3903: checking for $ac_word" >&5
if eval "test \"`echo '$''{'ac_cv_path_CUPS_CONFIG'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
for ac_func in dlopen
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:3957: checking for $ac_func" >&5
+echo "configure:3952: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 3962 "configure"
+#line 3957 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:3985: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:3980: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
if test x"$ac_cv_func_dlopen" = x"no"; then
echo $ac_n "checking for dlopen in -ldl""... $ac_c" 1>&6
-echo "configure:4011: checking for dlopen in -ldl" >&5
+echo "configure:4006: checking for dlopen in -ldl" >&5
ac_lib_var=`echo dl'_'dlopen | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-ldl $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 4019 "configure"
+#line 4014 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
dlopen()
; return 0; }
EOF
-if { (eval echo configure:4030: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:4025: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
############################################
# check if the compiler can do immediate structures
echo $ac_n "checking for immediate structures""... $ac_c" 1>&6
-echo "configure:4060: checking for immediate structures" >&5
+echo "configure:4055: checking for immediate structures" >&5
if eval "test \"`echo '$''{'samba_cv_immediate_structures'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4066 "configure"
+#line 4061 "configure"
#include "confdefs.h"
#include <stdio.h>
; return 0; }
EOF
-if { (eval echo configure:4084: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4079: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_immediate_structures=yes
else
############################################
# check for unix domain sockets
echo $ac_n "checking for unix domain sockets""... $ac_c" 1>&6
-echo "configure:4107: checking for unix domain sockets" >&5
+echo "configure:4102: checking for unix domain sockets" >&5
if eval "test \"`echo '$''{'samba_cv_unixsocket'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4113 "configure"
+#line 4108 "configure"
#include "confdefs.h"
#include <sys/types.h>
; return 0; }
EOF
-if { (eval echo configure:4128: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4123: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_unixsocket=yes
else
echo $ac_n "checking for socklen_t type""... $ac_c" 1>&6
-echo "configure:4150: checking for socklen_t type" >&5
+echo "configure:4145: checking for socklen_t type" >&5
if eval "test \"`echo '$''{'samba_cv_socklen_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4156 "configure"
+#line 4151 "configure"
#include "confdefs.h"
#include <sys/types.h>
socklen_t i = 0
; return 0; }
EOF
-if { (eval echo configure:4169: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4164: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_socklen_t=yes
else
fi
echo $ac_n "checking for sig_atomic_t type""... $ac_c" 1>&6
-echo "configure:4190: checking for sig_atomic_t type" >&5
+echo "configure:4185: checking for sig_atomic_t type" >&5
if eval "test \"`echo '$''{'samba_cv_sig_atomic_t'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4196 "configure"
+#line 4191 "configure"
#include "confdefs.h"
#include <sys/types.h>
sig_atomic_t i = 0
; return 0; }
EOF
-if { (eval echo configure:4209: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4204: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_sig_atomic_t=yes
else
# stupid headers have the functions but no declaration. grrrr.
echo $ac_n "checking for errno declaration""... $ac_c" 1>&6
-echo "configure:4232: checking for errno declaration" >&5
+echo "configure:4227: checking for errno declaration" >&5
if eval "test \"`echo '$''{'ac_cv_have_errno_decl'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4238 "configure"
+#line 4233 "configure"
#include "confdefs.h"
#include <errno.h>
int main() {
int i = (int)errno
; return 0; }
EOF
-if { (eval echo configure:4245: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4240: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_have_errno_decl=yes
else
echo $ac_n "checking for setresuid declaration""... $ac_c" 1>&6
-echo "configure:4267: checking for setresuid declaration" >&5
+echo "configure:4262: checking for setresuid declaration" >&5
if eval "test \"`echo '$''{'ac_cv_have_setresuid_decl'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4273 "configure"
+#line 4268 "configure"
#include "confdefs.h"
#include <unistd.h>
int main() {
int i = (int)setresuid
; return 0; }
EOF
-if { (eval echo configure:4280: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4275: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_have_setresuid_decl=yes
else
echo $ac_n "checking for setresgid declaration""... $ac_c" 1>&6
-echo "configure:4302: checking for setresgid declaration" >&5
+echo "configure:4297: checking for setresgid declaration" >&5
if eval "test \"`echo '$''{'ac_cv_have_setresgid_decl'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4308 "configure"
+#line 4303 "configure"
#include "confdefs.h"
#include <unistd.h>
int main() {
int i = (int)setresgid
; return 0; }
EOF
-if { (eval echo configure:4315: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4310: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_have_setresgid_decl=yes
else
echo $ac_n "checking for asprintf declaration""... $ac_c" 1>&6
-echo "configure:4337: checking for asprintf declaration" >&5
+echo "configure:4332: checking for asprintf declaration" >&5
if eval "test \"`echo '$''{'ac_cv_have_asprintf_decl'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4343 "configure"
+#line 4338 "configure"
#include "confdefs.h"
#include <stdio.h>
int main() {
int i = (int)asprintf
; return 0; }
EOF
-if { (eval echo configure:4350: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4345: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_have_asprintf_decl=yes
else
echo $ac_n "checking for vasprintf declaration""... $ac_c" 1>&6
-echo "configure:4372: checking for vasprintf declaration" >&5
+echo "configure:4367: checking for vasprintf declaration" >&5
if eval "test \"`echo '$''{'ac_cv_have_vasprintf_decl'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4378 "configure"
+#line 4373 "configure"
#include "confdefs.h"
#include <stdio.h>
int main() {
int i = (int)vasprintf
; return 0; }
EOF
-if { (eval echo configure:4385: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4380: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_have_vasprintf_decl=yes
else
echo $ac_n "checking for vsnprintf declaration""... $ac_c" 1>&6
-echo "configure:4407: checking for vsnprintf declaration" >&5
+echo "configure:4402: checking for vsnprintf declaration" >&5
if eval "test \"`echo '$''{'ac_cv_have_vsnprintf_decl'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4413 "configure"
+#line 4408 "configure"
#include "confdefs.h"
#include <stdio.h>
int main() {
int i = (int)vsnprintf
; return 0; }
EOF
-if { (eval echo configure:4420: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4415: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_have_vsnprintf_decl=yes
else
echo $ac_n "checking for snprintf declaration""... $ac_c" 1>&6
-echo "configure:4442: checking for snprintf declaration" >&5
+echo "configure:4437: checking for snprintf declaration" >&5
if eval "test \"`echo '$''{'ac_cv_have_snprintf_decl'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4448 "configure"
+#line 4443 "configure"
#include "confdefs.h"
#include <stdio.h>
int main() {
int i = (int)snprintf
; return 0; }
EOF
-if { (eval echo configure:4455: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:4450: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
ac_cv_have_snprintf_decl=yes
else
# and glibc has setresuid under linux but the function does
# nothing until kernel 2.1.44! very dumb.
echo $ac_n "checking for real setresuid""... $ac_c" 1>&6
-echo "configure:4479: checking for real setresuid" >&5
+echo "configure:4474: checking for real setresuid" >&5
if eval "test \"`echo '$''{'samba_cv_have_setresuid'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_have_setresuid=cross
else
cat > conftest.$ac_ext <<EOF
-#line 4488 "configure"
+#line 4483 "configure"
#include "confdefs.h"
#include <errno.h>
main() { setresuid(1,1,1); setresuid(2,2,2); exit(errno==EPERM?0:1);}
EOF
-if { (eval echo configure:4493: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:4488: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_have_setresuid=yes
else
# Do the same check for setresguid...
#
echo $ac_n "checking for real setresgid""... $ac_c" 1>&6
-echo "configure:4518: checking for real setresgid" >&5
+echo "configure:4513: checking for real setresgid" >&5
if eval "test \"`echo '$''{'samba_cv_have_setresgid'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_have_setresgid=cross
else
cat > conftest.$ac_ext <<EOF
-#line 4527 "configure"
+#line 4522 "configure"
#include "confdefs.h"
#include <unistd.h>
#include <errno.h>
main() { errno = 0; setresgid(1,1,1); exit(errno != 0 ? (errno==EPERM ? 0 : 1) : 0);}
EOF
-if { (eval echo configure:4533: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:4528: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_have_setresgid=yes
else
fi
echo $ac_n "checking for 8-bit clean memcmp""... $ac_c" 1>&6
-echo "configure:4556: checking for 8-bit clean memcmp" >&5
+echo "configure:4551: checking for 8-bit clean memcmp" >&5
if eval "test \"`echo '$''{'ac_cv_func_memcmp_clean'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
ac_cv_func_memcmp_clean=no
else
cat > conftest.$ac_ext <<EOF
-#line 4564 "configure"
+#line 4559 "configure"
#include "confdefs.h"
main()
}
EOF
-if { (eval echo configure:4574: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:4569: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
ac_cv_func_memcmp_clean=yes
else
for ac_func in crypt
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:4597: checking for $ac_func" >&5
+echo "configure:4592: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4602 "configure"
+#line 4597 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:4625: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:4620: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
if test x"$ac_cv_func_crypt" = x"no"; then
echo $ac_n "checking for crypt in -lcrypt""... $ac_c" 1>&6
-echo "configure:4651: checking for crypt in -lcrypt" >&5
+echo "configure:4646: checking for crypt in -lcrypt" >&5
ac_lib_var=`echo crypt'_'crypt | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lcrypt $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 4659 "configure"
+#line 4654 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
crypt()
; return 0; }
EOF
-if { (eval echo configure:4670: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:4665: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
# test for where we get readline() from
echo $ac_n "checking whether to use readline""... $ac_c" 1>&6
-echo "configure:4703: checking whether to use readline" >&5
+echo "configure:4698: checking whether to use readline" >&5
# Check whether --with-readline or --without-readline was given.
if test "${with_readline+set}" = set; then
withval="$with_readline"
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:4715: checking for $ac_hdr" >&5
+echo "configure:4710: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4720 "configure"
+#line 4715 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:4725: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:4720: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:4755: checking for $ac_hdr" >&5
+echo "configure:4750: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4760 "configure"
+#line 4755 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:4765: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:4760: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:4796: checking for $ac_hdr" >&5
+echo "configure:4791: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4801 "configure"
+#line 4796 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:4806: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:4801: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
for termlib in ncurses curses termcap terminfo termlib; do
echo $ac_n "checking for tgetent in -l${termlib}""... $ac_c" 1>&6
-echo "configure:4829: checking for tgetent in -l${termlib}" >&5
+echo "configure:4824: checking for tgetent in -l${termlib}" >&5
ac_lib_var=`echo ${termlib}'_'tgetent | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-l${termlib} $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 4837 "configure"
+#line 4832 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
tgetent()
; return 0; }
EOF
-if { (eval echo configure:4848: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:4843: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
done
echo $ac_n "checking for rl_callback_handler_install in -lreadline""... $ac_c" 1>&6
-echo "configure:4870: checking for rl_callback_handler_install in -lreadline" >&5
+echo "configure:4865: checking for rl_callback_handler_install in -lreadline" >&5
ac_lib_var=`echo readline'_'rl_callback_handler_install | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lreadline $TERMLIBS $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 4878 "configure"
+#line 4873 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
rl_callback_handler_install()
; return 0; }
EOF
-if { (eval echo configure:4889: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:4884: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:4940: checking for $ac_hdr" >&5
+echo "configure:4935: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4945 "configure"
+#line 4940 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:4950: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:4945: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:4980: checking for $ac_hdr" >&5
+echo "configure:4975: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 4985 "configure"
+#line 4980 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:4990: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:4985: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:5021: checking for $ac_hdr" >&5
+echo "configure:5016: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5026 "configure"
+#line 5021 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:5031: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:5026: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
for termlib in ncurses curses termcap terminfo termlib; do
echo $ac_n "checking for tgetent in -l${termlib}""... $ac_c" 1>&6
-echo "configure:5054: checking for tgetent in -l${termlib}" >&5
+echo "configure:5049: checking for tgetent in -l${termlib}" >&5
ac_lib_var=`echo ${termlib}'_'tgetent | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-l${termlib} $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 5062 "configure"
+#line 5057 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
tgetent()
; return 0; }
EOF
-if { (eval echo configure:5073: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5068: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
done
echo $ac_n "checking for rl_callback_handler_install in -lreadline""... $ac_c" 1>&6
-echo "configure:5095: checking for rl_callback_handler_install in -lreadline" >&5
+echo "configure:5090: checking for rl_callback_handler_install in -lreadline" >&5
ac_lib_var=`echo readline'_'rl_callback_handler_install | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lreadline $TERMLIBS $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 5103 "configure"
+#line 5098 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
rl_callback_handler_install()
; return 0; }
EOF
-if { (eval echo configure:5114: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5109: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
# code will generate warnings on one of them unless we have a few
# special cases.
echo $ac_n "checking for rl_completion_matches in -lreadline""... $ac_c" 1>&6
-echo "configure:5164: checking for rl_completion_matches in -lreadline" >&5
+echo "configure:5159: checking for rl_completion_matches in -lreadline" >&5
ac_lib_var=`echo readline'_'rl_completion_matches | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lreadline $TERMLIBS $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 5172 "configure"
+#line 5167 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
rl_completion_matches()
; return 0; }
EOF
-if { (eval echo configure:5183: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5178: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in connect
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5216: checking for $ac_func" >&5
+echo "configure:5211: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5221 "configure"
+#line 5216 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5244: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5239: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
case "$LIBS" in
*-lnsl*) ;;
*) echo $ac_n "checking for printf in -lnsl_s""... $ac_c" 1>&6
-echo "configure:5272: checking for printf in -lnsl_s" >&5
+echo "configure:5267: checking for printf in -lnsl_s" >&5
ac_lib_var=`echo nsl_s'_'printf | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lnsl_s $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 5280 "configure"
+#line 5275 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
printf()
; return 0; }
EOF
-if { (eval echo configure:5291: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5286: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
case "$LIBS" in
*-lnsl*) ;;
*) echo $ac_n "checking for printf in -lnsl""... $ac_c" 1>&6
-echo "configure:5322: checking for printf in -lnsl" >&5
+echo "configure:5317: checking for printf in -lnsl" >&5
ac_lib_var=`echo nsl'_'printf | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lnsl $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 5330 "configure"
+#line 5325 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
printf()
; return 0; }
EOF
-if { (eval echo configure:5341: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5336: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
case "$LIBS" in
*-lsocket*) ;;
*) echo $ac_n "checking for connect in -lsocket""... $ac_c" 1>&6
-echo "configure:5372: checking for connect in -lsocket" >&5
+echo "configure:5367: checking for connect in -lsocket" >&5
ac_lib_var=`echo socket'_'connect | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsocket $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 5380 "configure"
+#line 5375 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
connect()
; return 0; }
EOF
-if { (eval echo configure:5391: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5386: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
case "$LIBS" in
*-linet*) ;;
*) echo $ac_n "checking for connect in -linet""... $ac_c" 1>&6
-echo "configure:5422: checking for connect in -linet" >&5
+echo "configure:5417: checking for connect in -linet" >&5
ac_lib_var=`echo inet'_'connect | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-linet $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 5430 "configure"
+#line 5425 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
connect()
; return 0; }
EOF
-if { (eval echo configure:5441: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5436: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in yp_get_default_domain
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5485: checking for $ac_func" >&5
+echo "configure:5480: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5490 "configure"
+#line 5485 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5513: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5508: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
if test x"$ac_cv_func_yp_get_default_domain" = x"no"; then
echo $ac_n "checking for yp_get_default_domain in -lnsl""... $ac_c" 1>&6
-echo "configure:5539: checking for yp_get_default_domain in -lnsl" >&5
+echo "configure:5534: checking for yp_get_default_domain in -lnsl" >&5
ac_lib_var=`echo nsl'_'yp_get_default_domain | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lnsl $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 5547 "configure"
+#line 5542 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
yp_get_default_domain()
; return 0; }
EOF
-if { (eval echo configure:5558: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5553: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in execl
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5588: checking for $ac_func" >&5
+echo "configure:5583: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5593 "configure"
+#line 5588 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5616: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5611: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in dlopen dlclose dlsym dlerror waitpid getcwd strdup strndup strnlen strtoul strerror chown fchown chmod fchmod chroot link mknod mknod64
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5647: checking for $ac_func" >&5
+echo "configure:5642: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5652 "configure"
+#line 5647 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5675: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5670: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in fstat strchr utime utimes getrlimit fsync bzero memset strlcpy strlcat setpgid
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5702: checking for $ac_func" >&5
+echo "configure:5697: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5707 "configure"
+#line 5702 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5730: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5725: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in memmove vsnprintf snprintf asprintf vasprintf setsid glob strpbrk pipe crypt16 getauthuid
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5757: checking for $ac_func" >&5
+echo "configure:5752: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5762 "configure"
+#line 5757 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5785: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5780: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in strftime sigprocmask sigblock sigaction sigset innetgr setnetgrent getnetgrent endnetgrent
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5812: checking for $ac_func" >&5
+echo "configure:5807: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5817 "configure"
+#line 5812 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5840: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5835: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in initgroups select poll rdchk getgrnam getgrent pathconf realpath
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5867: checking for $ac_func" >&5
+echo "configure:5862: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5872 "configure"
+#line 5867 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5895: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5890: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in setpriv setgidx setuidx setgroups sysconf mktime rename ftruncate stat64 fstat64
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5922: checking for $ac_func" >&5
+echo "configure:5917: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5927 "configure"
+#line 5922 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:5950: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:5945: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in lstat64 fopen64 atexit grantpt dup2 lseek64 ftruncate64 readdir64
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:5977: checking for $ac_func" >&5
+echo "configure:5972: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 5982 "configure"
+#line 5977 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6005: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6000: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in fseek64 fseeko64 ftell64 ftello64 setluid getpwanam setlinebuf
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6032: checking for $ac_func" >&5
+echo "configure:6027: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6037 "configure"
+#line 6032 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6060: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6055: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in srandom random srand rand setenv usleep strcasecmp fcvt fcvtl symlink readlink
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6087: checking for $ac_func" >&5
+echo "configure:6082: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6092 "configure"
+#line 6087 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6115: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6110: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in syslog vsyslog getgrouplist timegm
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6142: checking for $ac_func" >&5
+echo "configure:6137: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6147 "configure"
+#line 6142 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6170: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6165: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in setbuffer shmget shm_open
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6198: checking for $ac_func" >&5
+echo "configure:6193: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6203 "configure"
+#line 6198 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6226: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6221: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in syscall
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6255: checking for $ac_func" >&5
+echo "configure:6250: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6260 "configure"
+#line 6255 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6283: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6278: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in _dup _dup2 _opendir _readdir _seekdir _telldir _closedir
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6311: checking for $ac_func" >&5
+echo "configure:6306: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6316 "configure"
+#line 6311 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6339: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6334: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in __dup __dup2 __opendir __readdir __seekdir __telldir __closedir
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6366: checking for $ac_func" >&5
+echo "configure:6361: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6371 "configure"
+#line 6366 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6394: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6389: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in __getcwd _getcwd
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6421: checking for $ac_func" >&5
+echo "configure:6416: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6426 "configure"
+#line 6421 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6449: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6444: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in __xstat __fxstat __lxstat
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6476: checking for $ac_func" >&5
+echo "configure:6471: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6481 "configure"
+#line 6476 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6504: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6499: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in _stat _lstat _fstat __stat __lstat __fstat
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6531: checking for $ac_func" >&5
+echo "configure:6526: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6536 "configure"
+#line 6531 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6559: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6554: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in _acl __acl _facl __facl _open __open _chdir __chdir
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6586: checking for $ac_func" >&5
+echo "configure:6581: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6591 "configure"
+#line 6586 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6614: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6609: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in _close __close _fchdir __fchdir _fcntl __fcntl
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6641: checking for $ac_func" >&5
+echo "configure:6636: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6646 "configure"
+#line 6641 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6669: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6664: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in getdents _getdents __getdents _lseek __lseek _read __read
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6696: checking for $ac_func" >&5
+echo "configure:6691: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6701 "configure"
+#line 6696 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6724: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6719: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in _write __write _fork __fork
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6751: checking for $ac_func" >&5
+echo "configure:6746: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6756 "configure"
+#line 6751 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6779: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6774: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in _stat64 __stat64 _fstat64 __fstat64 _lstat64 __lstat64
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6806: checking for $ac_func" >&5
+echo "configure:6801: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6811 "configure"
+#line 6806 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6834: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6829: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in __sys_llseek llseek _llseek __llseek readdir64 _readdir64 __readdir64
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6861: checking for $ac_func" >&5
+echo "configure:6856: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6866 "configure"
+#line 6861 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6889: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6884: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in pread _pread __pread pread64 _pread64 __pread64
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6916: checking for $ac_func" >&5
+echo "configure:6911: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6921 "configure"
+#line 6916 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6944: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6939: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in pwrite _pwrite __pwrite pwrite64 _pwrite64 __pwrite64
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:6971: checking for $ac_func" >&5
+echo "configure:6966: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 6976 "configure"
+#line 6971 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:6999: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:6994: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
for ac_func in open64 _open64 __open64 creat64
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7026: checking for $ac_func" >&5
+echo "configure:7021: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7031 "configure"
+#line 7026 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7054: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7049: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
if test x$ac_cv_func_stat64 = xno ; then
echo $ac_n "checking for stat64 in <sys/stat.h>""... $ac_c" 1>&6
-echo "configure:7085: checking for stat64 in <sys/stat.h>" >&5
+echo "configure:7080: checking for stat64 in <sys/stat.h>" >&5
cat > conftest.$ac_ext <<EOF
-#line 7087 "configure"
+#line 7082 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
struct stat64 st64; exit(stat64(".",&st64));
; return 0; }
EOF
-if { (eval echo configure:7099: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7094: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
ac_cv_func_stat64=yes
else
if test x$ac_cv_func_lstat64 = xno ; then
echo $ac_n "checking for lstat64 in <sys/stat.h>""... $ac_c" 1>&6
-echo "configure:7118: checking for lstat64 in <sys/stat.h>" >&5
+echo "configure:7113: checking for lstat64 in <sys/stat.h>" >&5
cat > conftest.$ac_ext <<EOF
-#line 7120 "configure"
+#line 7115 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
struct stat64 st64; exit(lstat64(".",&st64));
; return 0; }
EOF
-if { (eval echo configure:7132: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7127: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
ac_cv_func_lstat64=yes
else
if test x$ac_cv_func_fstat64 = xno ; then
echo $ac_n "checking for fstat64 in <sys/stat.h>""... $ac_c" 1>&6
-echo "configure:7151: checking for fstat64 in <sys/stat.h>" >&5
+echo "configure:7146: checking for fstat64 in <sys/stat.h>" >&5
cat > conftest.$ac_ext <<EOF
-#line 7153 "configure"
+#line 7148 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
struct stat64 st64; exit(fstat64(0,&st64));
; return 0; }
EOF
-if { (eval echo configure:7165: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7160: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
ac_cv_func_fstat64=yes
else
#####################################
# we might need the resolv library on some systems
echo $ac_n "checking for dn_expand in -lresolv""... $ac_c" 1>&6
-echo "configure:7185: checking for dn_expand in -lresolv" >&5
+echo "configure:7180: checking for dn_expand in -lresolv" >&5
ac_lib_var=`echo resolv'_'dn_expand | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lresolv $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 7193 "configure"
+#line 7188 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
dn_expand()
; return 0; }
EOF
-if { (eval echo configure:7204: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7199: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
*-lsecurity*) for ac_func in putprpwnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7242: checking for $ac_func" >&5
+echo "configure:7237: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7247 "configure"
+#line 7242 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7270: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7265: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for putprpwnam in -lsecurity""... $ac_c" 1>&6
-echo "configure:7295: checking for putprpwnam in -lsecurity" >&5
+echo "configure:7290: checking for putprpwnam in -lsecurity" >&5
ac_lib_var=`echo security'_'putprpwnam | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsecurity $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 7303 "configure"
+#line 7298 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
putprpwnam()
; return 0; }
EOF
-if { (eval echo configure:7314: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7309: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in putprpwnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7344: checking for $ac_func" >&5
+echo "configure:7339: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7349 "configure"
+#line 7344 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7372: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7367: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsec*) for ac_func in putprpwnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7403: checking for $ac_func" >&5
+echo "configure:7398: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7408 "configure"
+#line 7403 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7431: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7426: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for putprpwnam in -lsec""... $ac_c" 1>&6
-echo "configure:7456: checking for putprpwnam in -lsec" >&5
+echo "configure:7451: checking for putprpwnam in -lsec" >&5
ac_lib_var=`echo sec'_'putprpwnam | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsec $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 7464 "configure"
+#line 7459 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
putprpwnam()
; return 0; }
EOF
-if { (eval echo configure:7475: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7470: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in putprpwnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7505: checking for $ac_func" >&5
+echo "configure:7500: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7510 "configure"
+#line 7505 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7533: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7528: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsecurity*) for ac_func in set_auth_parameters
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7565: checking for $ac_func" >&5
+echo "configure:7560: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7570 "configure"
+#line 7565 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7593: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7588: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for set_auth_parameters in -lsecurity""... $ac_c" 1>&6
-echo "configure:7618: checking for set_auth_parameters in -lsecurity" >&5
+echo "configure:7613: checking for set_auth_parameters in -lsecurity" >&5
ac_lib_var=`echo security'_'set_auth_parameters | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsecurity $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 7626 "configure"
+#line 7621 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
set_auth_parameters()
; return 0; }
EOF
-if { (eval echo configure:7637: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7632: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in set_auth_parameters
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7667: checking for $ac_func" >&5
+echo "configure:7662: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7672 "configure"
+#line 7667 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7695: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7690: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsec*) for ac_func in set_auth_parameters
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7726: checking for $ac_func" >&5
+echo "configure:7721: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7731 "configure"
+#line 7726 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7754: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7749: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for set_auth_parameters in -lsec""... $ac_c" 1>&6
-echo "configure:7779: checking for set_auth_parameters in -lsec" >&5
+echo "configure:7774: checking for set_auth_parameters in -lsec" >&5
ac_lib_var=`echo sec'_'set_auth_parameters | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsec $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 7787 "configure"
+#line 7782 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
set_auth_parameters()
; return 0; }
EOF
-if { (eval echo configure:7798: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7793: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in set_auth_parameters
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7828: checking for $ac_func" >&5
+echo "configure:7823: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7833 "configure"
+#line 7828 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7856: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7851: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lgen*) for ac_func in getspnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7889: checking for $ac_func" >&5
+echo "configure:7884: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7894 "configure"
+#line 7889 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:7917: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7912: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for getspnam in -lgen""... $ac_c" 1>&6
-echo "configure:7942: checking for getspnam in -lgen" >&5
+echo "configure:7937: checking for getspnam in -lgen" >&5
ac_lib_var=`echo gen'_'getspnam | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lgen $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 7950 "configure"
+#line 7945 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
getspnam()
; return 0; }
EOF
-if { (eval echo configure:7961: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:7956: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in getspnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:7991: checking for $ac_func" >&5
+echo "configure:7986: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 7996 "configure"
+#line 7991 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8019: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8014: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsecurity*) for ac_func in getspnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8051: checking for $ac_func" >&5
+echo "configure:8046: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8056 "configure"
+#line 8051 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8079: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8074: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for getspnam in -lsecurity""... $ac_c" 1>&6
-echo "configure:8104: checking for getspnam in -lsecurity" >&5
+echo "configure:8099: checking for getspnam in -lsecurity" >&5
ac_lib_var=`echo security'_'getspnam | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsecurity $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 8112 "configure"
+#line 8107 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
getspnam()
; return 0; }
EOF
-if { (eval echo configure:8123: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8118: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in getspnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8153: checking for $ac_func" >&5
+echo "configure:8148: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8158 "configure"
+#line 8153 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8181: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8176: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsec*) for ac_func in getspnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8212: checking for $ac_func" >&5
+echo "configure:8207: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8217 "configure"
+#line 8212 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8240: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8235: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for getspnam in -lsec""... $ac_c" 1>&6
-echo "configure:8265: checking for getspnam in -lsec" >&5
+echo "configure:8260: checking for getspnam in -lsec" >&5
ac_lib_var=`echo sec'_'getspnam | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsec $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 8273 "configure"
+#line 8268 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
getspnam()
; return 0; }
EOF
-if { (eval echo configure:8284: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8279: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in getspnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8314: checking for $ac_func" >&5
+echo "configure:8309: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8319 "configure"
+#line 8314 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8342: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8337: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsecurity*) for ac_func in bigcrypt
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8374: checking for $ac_func" >&5
+echo "configure:8369: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8379 "configure"
+#line 8374 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8402: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8397: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for bigcrypt in -lsecurity""... $ac_c" 1>&6
-echo "configure:8427: checking for bigcrypt in -lsecurity" >&5
+echo "configure:8422: checking for bigcrypt in -lsecurity" >&5
ac_lib_var=`echo security'_'bigcrypt | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsecurity $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 8435 "configure"
+#line 8430 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
bigcrypt()
; return 0; }
EOF
-if { (eval echo configure:8446: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8441: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in bigcrypt
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8476: checking for $ac_func" >&5
+echo "configure:8471: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8481 "configure"
+#line 8476 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8504: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8499: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsec*) for ac_func in bigcrypt
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8535: checking for $ac_func" >&5
+echo "configure:8530: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8540 "configure"
+#line 8535 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8563: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8558: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for bigcrypt in -lsec""... $ac_c" 1>&6
-echo "configure:8588: checking for bigcrypt in -lsec" >&5
+echo "configure:8583: checking for bigcrypt in -lsec" >&5
ac_lib_var=`echo sec'_'bigcrypt | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsec $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 8596 "configure"
+#line 8591 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
bigcrypt()
; return 0; }
EOF
-if { (eval echo configure:8607: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8602: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in bigcrypt
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8637: checking for $ac_func" >&5
+echo "configure:8632: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8642 "configure"
+#line 8637 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8665: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8660: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsecurity*) for ac_func in getprpwnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8697: checking for $ac_func" >&5
+echo "configure:8692: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8702 "configure"
+#line 8697 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8725: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8720: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for getprpwnam in -lsecurity""... $ac_c" 1>&6
-echo "configure:8750: checking for getprpwnam in -lsecurity" >&5
+echo "configure:8745: checking for getprpwnam in -lsecurity" >&5
ac_lib_var=`echo security'_'getprpwnam | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsecurity $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 8758 "configure"
+#line 8753 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
getprpwnam()
; return 0; }
EOF
-if { (eval echo configure:8769: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8764: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in getprpwnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8799: checking for $ac_func" >&5
+echo "configure:8794: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8804 "configure"
+#line 8799 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8827: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8822: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
*-lsec*) for ac_func in getprpwnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8858: checking for $ac_func" >&5
+echo "configure:8853: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8863 "configure"
+#line 8858 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8886: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8881: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
;;
*) echo $ac_n "checking for getprpwnam in -lsec""... $ac_c" 1>&6
-echo "configure:8911: checking for getprpwnam in -lsec" >&5
+echo "configure:8906: checking for getprpwnam in -lsec" >&5
ac_lib_var=`echo sec'_'getprpwnam | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsec $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 8919 "configure"
+#line 8914 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
getprpwnam()
; return 0; }
EOF
-if { (eval echo configure:8930: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8925: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in getprpwnam
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:8960: checking for $ac_func" >&5
+echo "configure:8955: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 8965 "configure"
+#line 8960 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:8988: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:8983: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
# Assume non-shared by default and override below
BLDSHARED="false"
echo $ac_n "checking ability to build shared libraries""... $ac_c" 1>&6
-echo "configure:9032: checking ability to build shared libraries" >&5
+echo "configure:9027: checking ability to build shared libraries" >&5
# and these are for particular systems
case "$host_os" in
*dgux*) # Extract the first word of "groff", so it can be a program name with args.
set dummy groff; ac_word=$2
echo $ac_n "checking for $ac_word""... $ac_c" 1>&6
-echo "configure:9227: checking for $ac_word" >&5
+echo "configure:9222: checking for $ac_word" >&5
if eval "test \"`echo '$''{'ac_cv_prog_ROFF'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
echo "$ac_t""$BLDSHARED" 1>&6
echo $ac_n "checking linker flags for shared libraries""... $ac_c" 1>&6
-echo "configure:9309: checking linker flags for shared libraries" >&5
+echo "configure:9304: checking linker flags for shared libraries" >&5
echo "$ac_t""$LDSHFLAGS" 1>&6
echo $ac_n "checking compiler flags for position-independent code""... $ac_c" 1>&6
-echo "configure:9312: checking compiler flags for position-independent code" >&5
+echo "configure:9307: checking compiler flags for position-independent code" >&5
echo "$ac_t""$PICFLAGS" 1>&6
#######################################################
# test whether building a shared library actually works
if test $BLDSHARED = true; then
echo $ac_n "checking whether building shared libraries actually works""... $ac_c" 1>&6
-echo "configure:9319: checking whether building shared libraries actually works" >&5
+echo "configure:9314: checking whether building shared libraries actually works" >&5
if eval "test \"`echo '$''{'ac_cv_shlib_works'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
################
echo $ac_n "checking for long long""... $ac_c" 1>&6
-echo "configure:9357: checking for long long" >&5
+echo "configure:9352: checking for long long" >&5
if eval "test \"`echo '$''{'samba_cv_have_longlong'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_have_longlong=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9366 "configure"
+#line 9361 "configure"
#include "confdefs.h"
#include <stdio.h>
main() { long long x = 1000000; x *= x; exit(((x/1000000) == 1000000)? 0: 1); }
EOF
-if { (eval echo configure:9371: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9366: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_have_longlong=yes
else
# AIX needs this.
echo $ac_n "checking for LL suffix on long long integers""... $ac_c" 1>&6
-echo "configure:9398: checking for LL suffix on long long integers" >&5
+echo "configure:9393: checking for LL suffix on long long integers" >&5
if eval "test \"`echo '$''{'samba_cv_compiler_supports_ll'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 9404 "configure"
+#line 9399 "configure"
#include "confdefs.h"
#include <stdio.h>
int main() {
long long i = 0x8000000000LL
; return 0; }
EOF
-if { (eval echo configure:9411: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:9406: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_compiler_supports_ll=yes
else
echo $ac_n "checking for 64 bit off_t""... $ac_c" 1>&6
-echo "configure:9433: checking for 64 bit off_t" >&5
+echo "configure:9428: checking for 64 bit off_t" >&5
if eval "test \"`echo '$''{'samba_cv_SIZEOF_OFF_T'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_SIZEOF_OFF_T=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9442 "configure"
+#line 9437 "configure"
#include "confdefs.h"
#include <stdio.h>
#include <sys/stat.h>
main() { exit((sizeof(off_t) == 8) ? 0 : 1); }
EOF
-if { (eval echo configure:9448: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9443: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_SIZEOF_OFF_T=yes
else
fi
echo $ac_n "checking for off64_t""... $ac_c" 1>&6
-echo "configure:9471: checking for off64_t" >&5
+echo "configure:9466: checking for off64_t" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_OFF64_T'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_OFF64_T=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9480 "configure"
+#line 9475 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
#include <sys/stat.h>
main() { struct stat64 st; off64_t s; if (sizeof(off_t) == sizeof(off64_t)) exit(1); exit((lstat64("/dev/null", &st)==0)?0:1); }
EOF
-if { (eval echo configure:9490: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9485: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_OFF64_T=yes
else
fi
echo $ac_n "checking for 64 bit ino_t""... $ac_c" 1>&6
-echo "configure:9513: checking for 64 bit ino_t" >&5
+echo "configure:9508: checking for 64 bit ino_t" >&5
if eval "test \"`echo '$''{'samba_cv_SIZEOF_INO_T'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_SIZEOF_INO_T=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9522 "configure"
+#line 9517 "configure"
#include "confdefs.h"
#include <stdio.h>
#include <sys/stat.h>
main() { exit((sizeof(ino_t) == 8) ? 0 : 1); }
EOF
-if { (eval echo configure:9528: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9523: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_SIZEOF_INO_T=yes
else
fi
echo $ac_n "checking for ino64_t""... $ac_c" 1>&6
-echo "configure:9551: checking for ino64_t" >&5
+echo "configure:9546: checking for ino64_t" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_INO64_T'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_INO64_T=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9560 "configure"
+#line 9555 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
#include <sys/stat.h>
main() { struct stat64 st; ino64_t s; if (sizeof(ino_t) == sizeof(ino64_t)) exit(1); exit((lstat64("/dev/null", &st)==0)?0:1); }
EOF
-if { (eval echo configure:9570: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9565: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_INO64_T=yes
else
fi
echo $ac_n "checking for dev64_t""... $ac_c" 1>&6
-echo "configure:9593: checking for dev64_t" >&5
+echo "configure:9588: checking for dev64_t" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_DEV64_T'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_DEV64_T=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9602 "configure"
+#line 9597 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
#include <sys/stat.h>
main() { struct stat64 st; dev64_t s; if (sizeof(dev_t) == sizeof(dev64_t)) exit(1); exit((lstat64("/dev/null", &st)==0)?0:1); }
EOF
-if { (eval echo configure:9612: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9607: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_DEV64_T=yes
else
fi
echo $ac_n "checking for struct dirent64""... $ac_c" 1>&6
-echo "configure:9635: checking for struct dirent64" >&5
+echo "configure:9630: checking for struct dirent64" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_STRUCT_DIRENT64'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 9641 "configure"
+#line 9636 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
struct dirent64 de;
; return 0; }
EOF
-if { (eval echo configure:9653: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:9648: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_STRUCT_DIRENT64=yes
else
fi
echo $ac_n "checking for major macro""... $ac_c" 1>&6
-echo "configure:9674: checking for major macro" >&5
+echo "configure:9669: checking for major macro" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_DEVICE_MAJOR_FN'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_DEVICE_MAJOR_FN=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9683 "configure"
+#line 9678 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
#include <sys/types.h>
main() { dev_t dev; int i = major(dev); return 0; }
EOF
-if { (eval echo configure:9692: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9687: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_DEVICE_MAJOR_FN=yes
else
fi
echo $ac_n "checking for minor macro""... $ac_c" 1>&6
-echo "configure:9715: checking for minor macro" >&5
+echo "configure:9710: checking for minor macro" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_DEVICE_MINOR_FN'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_DEVICE_MINOR_FN=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9724 "configure"
+#line 9719 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
#include <sys/types.h>
main() { dev_t dev; int i = minor(dev); return 0; }
EOF
-if { (eval echo configure:9733: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9728: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_DEVICE_MINOR_FN=yes
else
fi
echo $ac_n "checking for unsigned char""... $ac_c" 1>&6
-echo "configure:9756: checking for unsigned char" >&5
+echo "configure:9751: checking for unsigned char" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UNSIGNED_CHAR'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_UNSIGNED_CHAR=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9765 "configure"
+#line 9760 "configure"
#include "confdefs.h"
#include <stdio.h>
main() { char c; c=250; exit((c > 0)?0:1); }
EOF
-if { (eval echo configure:9770: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9765: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_UNSIGNED_CHAR=yes
else
fi
echo $ac_n "checking for sin_len in sock""... $ac_c" 1>&6
-echo "configure:9793: checking for sin_len in sock" >&5
+echo "configure:9788: checking for sin_len in sock" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SOCK_SIN_LEN'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 9799 "configure"
+#line 9794 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/socket.h>
struct sockaddr_in sock; sock.sin_len = sizeof(sock);
; return 0; }
EOF
-if { (eval echo configure:9808: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:9803: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_SOCK_SIN_LEN=yes
else
fi
echo $ac_n "checking whether seekdir returns void""... $ac_c" 1>&6
-echo "configure:9829: checking whether seekdir returns void" >&5
+echo "configure:9824: checking whether seekdir returns void" >&5
if eval "test \"`echo '$''{'samba_cv_SEEKDIR_RETURNS_VOID'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 9835 "configure"
+#line 9830 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <dirent.h>
return 0;
; return 0; }
EOF
-if { (eval echo configure:9844: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:9839: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_SEEKDIR_RETURNS_VOID=yes
else
fi
echo $ac_n "checking for __FUNCTION__ macro""... $ac_c" 1>&6
-echo "configure:9865: checking for __FUNCTION__ macro" >&5
+echo "configure:9860: checking for __FUNCTION__ macro" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_FUNCTION_MACRO'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 9871 "configure"
+#line 9866 "configure"
#include "confdefs.h"
#include <stdio.h>
int main() {
printf("%s\n", __FUNCTION__);
; return 0; }
EOF
-if { (eval echo configure:9878: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:9873: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_FUNCTION_MACRO=yes
else
fi
echo $ac_n "checking if gettimeofday takes tz argument""... $ac_c" 1>&6
-echo "configure:9899: checking if gettimeofday takes tz argument" >&5
+echo "configure:9894: checking if gettimeofday takes tz argument" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_GETTIMEOFDAY_TZ'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_GETTIMEOFDAY_TZ=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9908 "configure"
+#line 9903 "configure"
#include "confdefs.h"
#include <sys/time.h>
#include <unistd.h>
main() { struct timeval tv; exit(gettimeofday(&tv, NULL));}
EOF
-if { (eval echo configure:9915: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:9910: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_GETTIMEOFDAY_TZ=yes
else
fi
echo $ac_n "checking for __va_copy""... $ac_c" 1>&6
-echo "configure:9938: checking for __va_copy" >&5
+echo "configure:9933: checking for __va_copy" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_VA_COPY'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 9944 "configure"
+#line 9939 "configure"
#include "confdefs.h"
#include <stdarg.h>
va_list ap1,ap2;
__va_copy(ap1,ap2);
; return 0; }
EOF
-if { (eval echo configure:9952: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:9947: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_VA_COPY=yes
else
fi
echo $ac_n "checking for C99 vsnprintf""... $ac_c" 1>&6
-echo "configure:9973: checking for C99 vsnprintf" >&5
+echo "configure:9968: checking for C99 vsnprintf" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_C99_VSNPRINTF'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_C99_VSNPRINTF=cross
else
cat > conftest.$ac_ext <<EOF
-#line 9982 "configure"
+#line 9977 "configure"
#include "confdefs.h"
#include <sys/types.h>
main() { foo("hello"); }
EOF
-if { (eval echo configure:10009: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:10004: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_C99_VSNPRINTF=yes
else
fi
echo $ac_n "checking for broken readdir""... $ac_c" 1>&6
-echo "configure:10032: checking for broken readdir" >&5
+echo "configure:10027: checking for broken readdir" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_BROKEN_READDIR'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_BROKEN_READDIR=cross
else
cat > conftest.$ac_ext <<EOF
-#line 10041 "configure"
+#line 10036 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <dirent.h>
if (di && di->d_name[-2] == '.' && di->d_name[-1] == 0 &&
di->d_name[0] == 0) exit(0); exit(1);}
EOF
-if { (eval echo configure:10049: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:10044: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_BROKEN_READDIR=yes
else
fi
echo $ac_n "checking for utimbuf""... $ac_c" 1>&6
-echo "configure:10072: checking for utimbuf" >&5
+echo "configure:10067: checking for utimbuf" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UTIMBUF'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10078 "configure"
+#line 10073 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utime.h>
struct utimbuf tbuf; tbuf.actime = 0; tbuf.modtime = 1; exit(utime("foo.c",&tbuf));
; return 0; }
EOF
-if { (eval echo configure:10086: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10081: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UTIMBUF=yes
else
for ac_func in pututline pututxline updwtmp updwtmpx getutmpx
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:10110: checking for $ac_func" >&5
+echo "configure:10105: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10115 "configure"
+#line 10110 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:10138: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:10133: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
echo $ac_n "checking for ut_name in utmp""... $ac_c" 1>&6
-echo "configure:10164: checking for ut_name in utmp" >&5
+echo "configure:10159: checking for ut_name in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_NAME'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10170 "configure"
+#line 10165 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; ut.ut_name[0] = 'a';
; return 0; }
EOF
-if { (eval echo configure:10178: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10173: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_NAME=yes
else
fi
echo $ac_n "checking for ut_user in utmp""... $ac_c" 1>&6
-echo "configure:10199: checking for ut_user in utmp" >&5
+echo "configure:10194: checking for ut_user in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_USER'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10205 "configure"
+#line 10200 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; ut.ut_user[0] = 'a';
; return 0; }
EOF
-if { (eval echo configure:10213: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10208: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_USER=yes
else
fi
echo $ac_n "checking for ut_id in utmp""... $ac_c" 1>&6
-echo "configure:10234: checking for ut_id in utmp" >&5
+echo "configure:10229: checking for ut_id in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_ID'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10240 "configure"
+#line 10235 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; ut.ut_id[0] = 'a';
; return 0; }
EOF
-if { (eval echo configure:10248: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10243: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_ID=yes
else
fi
echo $ac_n "checking for ut_host in utmp""... $ac_c" 1>&6
-echo "configure:10269: checking for ut_host in utmp" >&5
+echo "configure:10264: checking for ut_host in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_HOST'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10275 "configure"
+#line 10270 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; ut.ut_host[0] = 'a';
; return 0; }
EOF
-if { (eval echo configure:10283: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10278: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_HOST=yes
else
fi
echo $ac_n "checking for ut_time in utmp""... $ac_c" 1>&6
-echo "configure:10304: checking for ut_time in utmp" >&5
+echo "configure:10299: checking for ut_time in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_TIME'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10310 "configure"
+#line 10305 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; time_t t; ut.ut_time = t;
; return 0; }
EOF
-if { (eval echo configure:10318: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10313: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_TIME=yes
else
fi
echo $ac_n "checking for ut_tv in utmp""... $ac_c" 1>&6
-echo "configure:10339: checking for ut_tv in utmp" >&5
+echo "configure:10334: checking for ut_tv in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_TV'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10345 "configure"
+#line 10340 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; struct timeval tv; ut.ut_tv = tv;
; return 0; }
EOF
-if { (eval echo configure:10353: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10348: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_TV=yes
else
fi
echo $ac_n "checking for ut_type in utmp""... $ac_c" 1>&6
-echo "configure:10374: checking for ut_type in utmp" >&5
+echo "configure:10369: checking for ut_type in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_TYPE'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10380 "configure"
+#line 10375 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; ut.ut_type = 0;
; return 0; }
EOF
-if { (eval echo configure:10388: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10383: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_TYPE=yes
else
fi
echo $ac_n "checking for ut_pid in utmp""... $ac_c" 1>&6
-echo "configure:10409: checking for ut_pid in utmp" >&5
+echo "configure:10404: checking for ut_pid in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_PID'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10415 "configure"
+#line 10410 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; ut.ut_pid = 0;
; return 0; }
EOF
-if { (eval echo configure:10423: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10418: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_PID=yes
else
fi
echo $ac_n "checking for ut_exit in utmp""... $ac_c" 1>&6
-echo "configure:10444: checking for ut_exit in utmp" >&5
+echo "configure:10439: checking for ut_exit in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_EXIT'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10450 "configure"
+#line 10445 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; ut.ut_exit.e_exit = 0;
; return 0; }
EOF
-if { (eval echo configure:10458: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10453: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_EXIT=yes
else
fi
echo $ac_n "checking for ut_addr in utmp""... $ac_c" 1>&6
-echo "configure:10479: checking for ut_addr in utmp" >&5
+echo "configure:10474: checking for ut_addr in utmp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UT_UT_ADDR'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10485 "configure"
+#line 10480 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp ut; ut.ut_addr = 0;
; return 0; }
EOF
-if { (eval echo configure:10493: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10488: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UT_UT_ADDR=yes
else
if test x$ac_cv_func_pututline = xyes ; then
echo $ac_n "checking whether pututline returns pointer""... $ac_c" 1>&6
-echo "configure:10515: checking whether pututline returns pointer" >&5
+echo "configure:10510: checking whether pututline returns pointer" >&5
if eval "test \"`echo '$''{'samba_cv_PUTUTLINE_RETURNS_UTMP'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10521 "configure"
+#line 10516 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmp.h>
struct utmp utarg; struct utmp *utreturn; utreturn = pututline(&utarg);
; return 0; }
EOF
-if { (eval echo configure:10529: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10524: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_PUTUTLINE_RETURNS_UTMP=yes
else
fi
echo $ac_n "checking for ut_syslen in utmpx""... $ac_c" 1>&6
-echo "configure:10551: checking for ut_syslen in utmpx" >&5
+echo "configure:10546: checking for ut_syslen in utmpx" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UX_UT_SYSLEN'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10557 "configure"
+#line 10552 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <utmpx.h>
struct utmpx ux; ux.ut_syslen = 0;
; return 0; }
EOF
-if { (eval echo configure:10565: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10560: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UX_UT_SYSLEN=yes
else
#################################################
# check for libiconv support
echo $ac_n "checking whether to use libiconv""... $ac_c" 1>&6
-echo "configure:10589: checking whether to use libiconv" >&5
+echo "configure:10584: checking whether to use libiconv" >&5
# Check whether --with-libiconv or --without-libiconv was given.
if test "${with_libiconv+set}" = set; then
withval="$with_libiconv"
CFLAGS="$CFLAGS -I$withval/include"
LDFLAGS="$LDFLAGS -L$withval/lib"
echo $ac_n "checking for iconv_open in -liconv""... $ac_c" 1>&6
-echo "configure:10602: checking for iconv_open in -liconv" >&5
+echo "configure:10597: checking for iconv_open in -liconv" >&5
ac_lib_var=`echo iconv'_'iconv_open | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-liconv $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 10610 "configure"
+#line 10605 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
iconv_open()
; return 0; }
EOF
-if { (eval echo configure:10621: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:10616: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
############
# check for iconv in libc
echo $ac_n "checking for working iconv""... $ac_c" 1>&6
-echo "configure:10664: checking for working iconv" >&5
+echo "configure:10659: checking for working iconv" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_NATIVE_ICONV'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_NATIVE_ICONV=cross
else
cat > conftest.$ac_ext <<EOF
-#line 10673 "configure"
+#line 10668 "configure"
#include "confdefs.h"
#include <iconv.h>
}
EOF
-if { (eval echo configure:10684: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:10679: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_NATIVE_ICONV=yes
else
echo $ac_n "checking for Linux kernel oplocks""... $ac_c" 1>&6
-echo "configure:10708: checking for Linux kernel oplocks" >&5
+echo "configure:10703: checking for Linux kernel oplocks" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_KERNEL_OPLOCKS_LINUX'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_KERNEL_OPLOCKS_LINUX=cross
else
cat > conftest.$ac_ext <<EOF
-#line 10717 "configure"
+#line 10712 "configure"
#include "confdefs.h"
#include <sys/types.h>
}
EOF
-if { (eval echo configure:10731: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:10726: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_KERNEL_OPLOCKS_LINUX=yes
else
fi
echo $ac_n "checking for kernel change notify support""... $ac_c" 1>&6
-echo "configure:10754: checking for kernel change notify support" >&5
+echo "configure:10749: checking for kernel change notify support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_KERNEL_CHANGE_NOTIFY'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_KERNEL_CHANGE_NOTIFY=cross
else
cat > conftest.$ac_ext <<EOF
-#line 10763 "configure"
+#line 10758 "configure"
#include "confdefs.h"
#include <sys/types.h>
}
EOF
-if { (eval echo configure:10777: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:10772: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_KERNEL_CHANGE_NOTIFY=yes
else
fi
echo $ac_n "checking for kernel share modes""... $ac_c" 1>&6
-echo "configure:10800: checking for kernel share modes" >&5
+echo "configure:10795: checking for kernel share modes" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_KERNEL_SHARE_MODES'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_KERNEL_SHARE_MODES=cross
else
cat > conftest.$ac_ext <<EOF
-#line 10809 "configure"
+#line 10804 "configure"
#include "confdefs.h"
#include <sys/types.h>
}
EOF
-if { (eval echo configure:10825: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:10820: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_KERNEL_SHARE_MODES=yes
else
echo $ac_n "checking for IRIX kernel oplock type definitions""... $ac_c" 1>&6
-echo "configure:10851: checking for IRIX kernel oplock type definitions" >&5
+echo "configure:10846: checking for IRIX kernel oplock type definitions" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_KERNEL_OPLOCKS_IRIX'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10857 "configure"
+#line 10852 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <fcntl.h>
oplock_stat_t t; t.os_state = OP_REVOKE; t.os_dev = 1; t.os_ino = 1;
; return 0; }
EOF
-if { (eval echo configure:10865: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10860: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_KERNEL_OPLOCKS_IRIX=yes
else
fi
echo $ac_n "checking for irix specific capabilities""... $ac_c" 1>&6
-echo "configure:10886: checking for irix specific capabilities" >&5
+echo "configure:10881: checking for irix specific capabilities" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_IRIX_SPECIFIC_CAPABILITIES'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_IRIX_SPECIFIC_CAPABILITIES=cross
else
cat > conftest.$ac_ext <<EOF
-#line 10895 "configure"
+#line 10890 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/capability.h>
}
EOF
-if { (eval echo configure:10910: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:10905: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_IRIX_SPECIFIC_CAPABILITIES=yes
else
#
echo $ac_n "checking for int16 typedef included by rpc/rpc.h""... $ac_c" 1>&6
-echo "configure:10938: checking for int16 typedef included by rpc/rpc.h" >&5
+echo "configure:10933: checking for int16 typedef included by rpc/rpc.h" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_INT16_FROM_RPC_RPC_H'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10944 "configure"
+#line 10939 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if defined(HAVE_RPC_RPC_H)
int16 testvar;
; return 0; }
EOF
-if { (eval echo configure:10954: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10949: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_INT16_FROM_RPC_RPC_H=yes
else
fi
echo $ac_n "checking for uint16 typedef included by rpc/rpc.h""... $ac_c" 1>&6
-echo "configure:10975: checking for uint16 typedef included by rpc/rpc.h" >&5
+echo "configure:10970: checking for uint16 typedef included by rpc/rpc.h" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UINT16_FROM_RPC_RPC_H'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 10981 "configure"
+#line 10976 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if defined(HAVE_RPC_RPC_H)
uint16 testvar;
; return 0; }
EOF
-if { (eval echo configure:10991: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:10986: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UINT16_FROM_RPC_RPC_H=yes
else
fi
echo $ac_n "checking for int32 typedef included by rpc/rpc.h""... $ac_c" 1>&6
-echo "configure:11012: checking for int32 typedef included by rpc/rpc.h" >&5
+echo "configure:11007: checking for int32 typedef included by rpc/rpc.h" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_INT32_FROM_RPC_RPC_H'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 11018 "configure"
+#line 11013 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if defined(HAVE_RPC_RPC_H)
int32 testvar;
; return 0; }
EOF
-if { (eval echo configure:11028: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:11023: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_INT32_FROM_RPC_RPC_H=yes
else
fi
echo $ac_n "checking for uint32 typedef included by rpc/rpc.h""... $ac_c" 1>&6
-echo "configure:11049: checking for uint32 typedef included by rpc/rpc.h" >&5
+echo "configure:11044: checking for uint32 typedef included by rpc/rpc.h" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_UINT32_FROM_RPC_RPC_H'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 11055 "configure"
+#line 11050 "configure"
#include "confdefs.h"
#include <sys/types.h>
#if defined(HAVE_RPC_RPC_H)
uint32 testvar;
; return 0; }
EOF
-if { (eval echo configure:11065: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:11060: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_UINT32_FROM_RPC_RPC_H=yes
else
echo $ac_n "checking for conflicting AUTH_ERROR define in rpc/rpc.h""... $ac_c" 1>&6
-echo "configure:11087: checking for conflicting AUTH_ERROR define in rpc/rpc.h" >&5
+echo "configure:11082: checking for conflicting AUTH_ERROR define in rpc/rpc.h" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_RPC_AUTH_ERROR_CONFLICT'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 11093 "configure"
+#line 11088 "configure"
#include "confdefs.h"
#include <sys/types.h>
#ifdef HAVE_SYS_SECURITY_H
int testvar;
; return 0; }
EOF
-if { (eval echo configure:11107: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:11102: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_RPC_AUTH_ERROR_CONFLICT=no
else
fi
echo $ac_n "checking for test routines""... $ac_c" 1>&6
-echo "configure:11128: checking for test routines" >&5
+echo "configure:11123: checking for test routines" >&5
if test "$cross_compiling" = yes; then
echo "configure: warning: cannot run when cross-compiling" 1>&2
else
cat > conftest.$ac_ext <<EOF
-#line 11133 "configure"
+#line 11128 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/trivial.c"
EOF
-if { (eval echo configure:11137: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11132: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
echo "$ac_t""yes" 1>&6
else
echo $ac_n "checking for ftruncate extend""... $ac_c" 1>&6
-echo "configure:11151: checking for ftruncate extend" >&5
+echo "configure:11146: checking for ftruncate extend" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_FTRUNCATE_EXTEND'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_FTRUNCATE_EXTEND=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11160 "configure"
+#line 11155 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/ftruncate.c"
EOF
-if { (eval echo configure:11164: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11159: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_FTRUNCATE_EXTEND=yes
else
fi
echo $ac_n "checking for AF_LOCAL socket support""... $ac_c" 1>&6
-echo "configure:11187: checking for AF_LOCAL socket support" >&5
+echo "configure:11182: checking for AF_LOCAL socket support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_WORKING_AF_LOCAL'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_WORKING_AF_LOCAL=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11196 "configure"
+#line 11191 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/unixsock.c"
EOF
-if { (eval echo configure:11200: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11195: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_WORKING_AF_LOCAL=yes
else
fi
echo $ac_n "checking for broken getgroups""... $ac_c" 1>&6
-echo "configure:11224: checking for broken getgroups" >&5
+echo "configure:11219: checking for broken getgroups" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_BROKEN_GETGROUPS'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_BROKEN_GETGROUPS=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11233 "configure"
+#line 11228 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/getgroups.c"
EOF
-if { (eval echo configure:11237: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11232: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_BROKEN_GETGROUPS=yes
else
fi
echo $ac_n "checking whether getpass should be replaced""... $ac_c" 1>&6
-echo "configure:11260: checking whether getpass should be replaced" >&5
+echo "configure:11255: checking whether getpass should be replaced" >&5
if eval "test \"`echo '$''{'samba_cv_REPLACE_GETPASS'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
SAVE_CPPFLAGS="$CPPFLAGS"
CPPFLAGS="$CPPFLAGS -I${srcdir-.}/ -I${srcdir-.}/include -I${srcdir-.}/ubiqx -I${srcdir-.}/popt -I${srcdir-.}/smbwrapper"
cat > conftest.$ac_ext <<EOF
-#line 11268 "configure"
+#line 11263 "configure"
#include "confdefs.h"
#define REPLACE_GETPASS 1
; return 0; }
EOF
-if { (eval echo configure:11281: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:11276: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_REPLACE_GETPASS=yes
else
fi
echo $ac_n "checking for broken inet_ntoa""... $ac_c" 1>&6
-echo "configure:11304: checking for broken inet_ntoa" >&5
+echo "configure:11299: checking for broken inet_ntoa" >&5
if eval "test \"`echo '$''{'samba_cv_REPLACE_INET_NTOA'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_REPLACE_INET_NTOA=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11313 "configure"
+#line 11308 "configure"
#include "confdefs.h"
#include <stdio.h>
strcmp(inet_ntoa(ip),"120.86.52.18")) { exit(0); }
exit(1);}
EOF
-if { (eval echo configure:11327: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11322: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_REPLACE_INET_NTOA=yes
else
fi
echo $ac_n "checking for secure mkstemp""... $ac_c" 1>&6
-echo "configure:11350: checking for secure mkstemp" >&5
+echo "configure:11345: checking for secure mkstemp" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SECURE_MKSTEMP'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_SECURE_MKSTEMP=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11359 "configure"
+#line 11354 "configure"
#include "confdefs.h"
#include <stdlib.h>
#include <sys/types.h>
exit(0);
}
EOF
-if { (eval echo configure:11376: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11371: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_SECURE_MKSTEMP=yes
else
fi
echo $ac_n "checking for sysconf(_SC_NGROUPS_MAX)""... $ac_c" 1>&6
-echo "configure:11399: checking for sysconf(_SC_NGROUPS_MAX)" >&5
+echo "configure:11394: checking for sysconf(_SC_NGROUPS_MAX)" >&5
if eval "test \"`echo '$''{'samba_cv_SYSCONF_SC_NGROUPS_MAX'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_SYSCONF_SC_NGROUPS_MAX=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11408 "configure"
+#line 11403 "configure"
#include "confdefs.h"
#include <unistd.h>
main() { exit(sysconf(_SC_NGROUPS_MAX) == -1 ? 1 : 0); }
EOF
-if { (eval echo configure:11413: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11408: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_SYSCONF_SC_NGROUPS_MAX=yes
else
fi
echo $ac_n "checking for root""... $ac_c" 1>&6
-echo "configure:11436: checking for root" >&5
+echo "configure:11431: checking for root" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_ROOT'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_ROOT=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11445 "configure"
+#line 11440 "configure"
#include "confdefs.h"
main() { exit(getuid() != 0); }
EOF
-if { (eval echo configure:11449: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11444: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_ROOT=yes
else
# look for a method of finding the list of network interfaces
iface=no;
echo $ac_n "checking for iface AIX""... $ac_c" 1>&6
-echo "configure:11477: checking for iface AIX" >&5
+echo "configure:11472: checking for iface AIX" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_IFACE_AIX'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_IFACE_AIX=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11486 "configure"
+#line 11481 "configure"
#include "confdefs.h"
#define HAVE_IFACE_AIX 1
#include "confdefs.h"
#include "${srcdir-.}/lib/interfaces.c"
EOF
-if { (eval echo configure:11494: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11489: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_IFACE_AIX=yes
else
if test $iface = no; then
echo $ac_n "checking for iface ifconf""... $ac_c" 1>&6
-echo "configure:11518: checking for iface ifconf" >&5
+echo "configure:11513: checking for iface ifconf" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_IFACE_IFCONF'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_IFACE_IFCONF=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11527 "configure"
+#line 11522 "configure"
#include "confdefs.h"
#define HAVE_IFACE_IFCONF 1
#include "confdefs.h"
#include "${srcdir-.}/lib/interfaces.c"
EOF
-if { (eval echo configure:11535: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11530: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_IFACE_IFCONF=yes
else
if test $iface = no; then
echo $ac_n "checking for iface ifreq""... $ac_c" 1>&6
-echo "configure:11560: checking for iface ifreq" >&5
+echo "configure:11555: checking for iface ifreq" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_IFACE_IFREQ'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_IFACE_IFREQ=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11569 "configure"
+#line 11564 "configure"
#include "confdefs.h"
#define HAVE_IFACE_IFREQ 1
#include "confdefs.h"
#include "${srcdir-.}/lib/interfaces.c"
EOF
-if { (eval echo configure:11577: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11572: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_IFACE_IFREQ=yes
else
seteuid=no;
if test $seteuid = no; then
echo $ac_n "checking for setresuid""... $ac_c" 1>&6
-echo "configure:11606: checking for setresuid" >&5
+echo "configure:11601: checking for setresuid" >&5
if eval "test \"`echo '$''{'samba_cv_USE_SETRESUID'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_USE_SETRESUID=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11615 "configure"
+#line 11610 "configure"
#include "confdefs.h"
#define AUTOCONF_TEST 1
#include "confdefs.h"
#include "${srcdir-.}/lib/util_sec.c"
EOF
-if { (eval echo configure:11623: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11618: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_USE_SETRESUID=yes
else
if test $seteuid = no; then
echo $ac_n "checking for setreuid""... $ac_c" 1>&6
-echo "configure:11649: checking for setreuid" >&5
+echo "configure:11644: checking for setreuid" >&5
if eval "test \"`echo '$''{'samba_cv_USE_SETREUID'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_USE_SETREUID=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11658 "configure"
+#line 11653 "configure"
#include "confdefs.h"
#define AUTOCONF_TEST 1
#include "confdefs.h"
#include "${srcdir-.}/lib/util_sec.c"
EOF
-if { (eval echo configure:11666: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11661: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_USE_SETREUID=yes
else
if test $seteuid = no; then
echo $ac_n "checking for seteuid""... $ac_c" 1>&6
-echo "configure:11691: checking for seteuid" >&5
+echo "configure:11686: checking for seteuid" >&5
if eval "test \"`echo '$''{'samba_cv_USE_SETEUID'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_USE_SETEUID=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11700 "configure"
+#line 11695 "configure"
#include "confdefs.h"
#define AUTOCONF_TEST 1
#include "confdefs.h"
#include "${srcdir-.}/lib/util_sec.c"
EOF
-if { (eval echo configure:11708: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11703: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_USE_SETEUID=yes
else
if test $seteuid = no; then
echo $ac_n "checking for setuidx""... $ac_c" 1>&6
-echo "configure:11733: checking for setuidx" >&5
+echo "configure:11728: checking for setuidx" >&5
if eval "test \"`echo '$''{'samba_cv_USE_SETUIDX'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_USE_SETUIDX=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11742 "configure"
+#line 11737 "configure"
#include "confdefs.h"
#define AUTOCONF_TEST 1
#include "confdefs.h"
#include "${srcdir-.}/lib/util_sec.c"
EOF
-if { (eval echo configure:11750: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11745: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_USE_SETUIDX=yes
else
echo $ac_n "checking for working mmap""... $ac_c" 1>&6
-echo "configure:11775: checking for working mmap" >&5
+echo "configure:11770: checking for working mmap" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_MMAP'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_MMAP=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11784 "configure"
+#line 11779 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/shared_mmap.c"
EOF
-if { (eval echo configure:11788: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11783: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_MMAP=yes
else
fi
echo $ac_n "checking for ftruncate needs root""... $ac_c" 1>&6
-echo "configure:11811: checking for ftruncate needs root" >&5
+echo "configure:11806: checking for ftruncate needs root" >&5
if eval "test \"`echo '$''{'samba_cv_FTRUNCATE_NEEDS_ROOT'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_FTRUNCATE_NEEDS_ROOT=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11820 "configure"
+#line 11815 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/ftruncroot.c"
EOF
-if { (eval echo configure:11824: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11819: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_FTRUNCATE_NEEDS_ROOT=yes
else
fi
echo $ac_n "checking for fcntl locking""... $ac_c" 1>&6
-echo "configure:11847: checking for fcntl locking" >&5
+echo "configure:11842: checking for fcntl locking" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_FCNTL_LOCK'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_FCNTL_LOCK=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11856 "configure"
+#line 11851 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/fcntl_lock.c"
EOF
-if { (eval echo configure:11860: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11855: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_FCNTL_LOCK=yes
else
fi
echo $ac_n "checking for broken (glibc2.1/x86) 64 bit fcntl locking""... $ac_c" 1>&6
-echo "configure:11883: checking for broken (glibc2.1/x86) 64 bit fcntl locking" >&5
+echo "configure:11878: checking for broken (glibc2.1/x86) 64 bit fcntl locking" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_BROKEN_FCNTL64_LOCKS'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_BROKEN_FCNTL64_LOCKS=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11892 "configure"
+#line 11887 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/fcntl_lock64.c"
EOF
-if { (eval echo configure:11896: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11891: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_BROKEN_FCNTL64_LOCKS=yes
else
echo $ac_n "checking for 64 bit fcntl locking""... $ac_c" 1>&6
-echo "configure:11921: checking for 64 bit fcntl locking" >&5
+echo "configure:11916: checking for 64 bit fcntl locking" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_STRUCT_FLOCK64'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_STRUCT_FLOCK64=cross
else
cat > conftest.$ac_ext <<EOF
-#line 11930 "configure"
+#line 11925 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
#endif
}
EOF
-if { (eval echo configure:11954: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:11949: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_STRUCT_FLOCK64=yes
else
fi
echo $ac_n "checking for st_blocks in struct stat""... $ac_c" 1>&6
-echo "configure:11979: checking for st_blocks in struct stat" >&5
+echo "configure:11974: checking for st_blocks in struct stat" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_STAT_ST_BLOCKS'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 11985 "configure"
+#line 11980 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/stat.h>
struct stat st; st.st_blocks = 0;
; return 0; }
EOF
-if { (eval echo configure:11994: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:11989: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_STAT_ST_BLOCKS=yes
else
fi
echo $ac_n "checking for st_blksize in struct stat""... $ac_c" 1>&6
-echo "configure:12015: checking for st_blksize in struct stat" >&5
+echo "configure:12010: checking for st_blksize in struct stat" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_STAT_ST_BLKSIZE'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 12021 "configure"
+#line 12016 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/stat.h>
struct stat st; st.st_blksize = 0;
; return 0; }
EOF
-if { (eval echo configure:12030: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:12025: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_STAT_ST_BLKSIZE=yes
else
case "$host_os" in
*linux*)
echo $ac_n "checking for broken RedHat 7.2 system header files""... $ac_c" 1>&6
-echo "configure:12053: checking for broken RedHat 7.2 system header files" >&5
+echo "configure:12048: checking for broken RedHat 7.2 system header files" >&5
if eval "test \"`echo '$''{'samba_cv_BROKEN_REDHAT_7_SYSTEM_HEADERS'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 12059 "configure"
+#line 12054 "configure"
#include "confdefs.h"
#ifdef HAVE_SYS_VFS_H
int i;
; return 0; }
EOF
-if { (eval echo configure:12073: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:12068: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_BROKEN_REDHAT_7_SYSTEM_HEADERS=no
else
esac
echo $ac_n "checking for broken nisplus include files""... $ac_c" 1>&6
-echo "configure:12096: checking for broken nisplus include files" >&5
+echo "configure:12091: checking for broken nisplus include files" >&5
if eval "test \"`echo '$''{'samba_cv_BROKEN_NISPLUS_INCLUDE_FILES'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 12102 "configure"
+#line 12097 "configure"
#include "confdefs.h"
#include <sys/acl.h>
#if defined(HAVE_RPCSVC_NIS_H)
int i;
; return 0; }
EOF
-if { (eval echo configure:12112: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:12107: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_BROKEN_NISPLUS_INCLUDE_FILES=no
else
#################################################
# check for smbwrapper support
echo $ac_n "checking whether to use smbwrapper""... $ac_c" 1>&6
-echo "configure:12136: checking whether to use smbwrapper" >&5
+echo "configure:12131: checking whether to use smbwrapper" >&5
# Check whether --with-smbwrapper or --without-smbwrapper was given.
if test "${with_smbwrapper+set}" = set; then
withval="$with_smbwrapper"
#################################################
# check for AFS clear-text auth support
echo $ac_n "checking whether to use AFS clear-text auth""... $ac_c" 1>&6
-echo "configure:12185: checking whether to use AFS clear-text auth" >&5
+echo "configure:12180: checking whether to use AFS clear-text auth" >&5
# Check whether --with-afs or --without-afs was given.
if test "${with_afs+set}" = set; then
withval="$with_afs"
#################################################
# check for the DFS clear-text auth system
echo $ac_n "checking whether to use DFS clear-text auth""... $ac_c" 1>&6
-echo "configure:12211: checking whether to use DFS clear-text auth" >&5
+echo "configure:12206: checking whether to use DFS clear-text auth" >&5
# Check whether --with-dfs or --without-dfs was given.
if test "${with_dfs+set}" = set; then
withval="$with_dfs"
with_ads_support=yes
echo $ac_n "checking whether to use Active Directory""... $ac_c" 1>&6
-echo "configure:12238: checking whether to use Active Directory" >&5
+echo "configure:12233: checking whether to use Active Directory" >&5
# Check whether --with-ads or --without-ads was given.
if test "${with_ads+set}" = set; then
#################################################
# check for location of Kerberos 5 install
echo $ac_n "checking for kerberos 5 install path""... $ac_c" 1>&6
-echo "configure:12266: checking for kerberos 5 install path" >&5
+echo "configure:12261: checking for kerberos 5 install path" >&5
# Check whether --with-krb5 or --without-krb5 was given.
if test "${with_krb5+set}" = set; then
withval="$with_krb5"
#################################################
# see if this box has the SuSE location for the heimdal kerberos implementation
echo $ac_n "checking for /usr/include/heimdal""... $ac_c" 1>&6
-echo "configure:12294: checking for /usr/include/heimdal" >&5
+echo "configure:12289: checking for /usr/include/heimdal" >&5
if test -d /usr/include/heimdal; then
CFLAGS="$CFLAGS -I/usr/include/heimdal"
CPPFLAGS="$CPPFLAGS -I/usr/include/heimdal"
#################################################
# see if this box has the RedHat location for kerberos
echo $ac_n "checking for /usr/kerberos""... $ac_c" 1>&6
-echo "configure:12309: checking for /usr/kerberos" >&5
+echo "configure:12304: checking for /usr/kerberos" >&5
if test -d /usr/kerberos; then
LDFLAGS="$LDFLAGS -L/usr/kerberos/lib"
CFLAGS="$CFLAGS -I/usr/kerberos/include"
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:12328: checking for $ac_hdr" >&5
+echo "configure:12323: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 12333 "configure"
+#line 12328 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:12338: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:12333: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
do
ac_safe=`echo "$ac_hdr" | sed 'y%./+-%__p_%'`
echo $ac_n "checking for $ac_hdr""... $ac_c" 1>&6
-echo "configure:12371: checking for $ac_hdr" >&5
+echo "configure:12366: checking for $ac_hdr" >&5
if eval "test \"`echo '$''{'ac_cv_header_$ac_safe'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 12376 "configure"
+#line 12371 "configure"
#include "confdefs.h"
#include <$ac_hdr>
EOF
ac_try="$ac_cpp conftest.$ac_ext >/dev/null 2>conftest.out"
-{ (eval echo configure:12381: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
+{ (eval echo configure:12376: \"$ac_try\") 1>&5; (eval $ac_try) 2>&5; }
ac_err=`grep -v '^ *+' conftest.out | grep -v "^conftest.${ac_ext}\$"`
if test -z "$ac_err"; then
rm -rf conftest*
##################################################################
# we might need the k5crypto and com_err libraries on some systems
echo $ac_n "checking for _et_list in -lcom_err""... $ac_c" 1>&6
-echo "configure:12411: checking for _et_list in -lcom_err" >&5
+echo "configure:12406: checking for _et_list in -lcom_err" >&5
ac_lib_var=`echo com_err'_'_et_list | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lcom_err $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 12419 "configure"
+#line 12414 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
_et_list()
; return 0; }
EOF
-if { (eval echo configure:12430: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:12425: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
fi
echo $ac_n "checking for krb5_encrypt_data in -lk5crypto""... $ac_c" 1>&6
-echo "configure:12451: checking for krb5_encrypt_data in -lk5crypto" >&5
+echo "configure:12446: checking for krb5_encrypt_data in -lk5crypto" >&5
ac_lib_var=`echo k5crypto'_'krb5_encrypt_data | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lk5crypto $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 12459 "configure"
+#line 12454 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
krb5_encrypt_data()
; return 0; }
EOF
-if { (eval echo configure:12470: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:12465: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
# now see if we can find the krb5 libs in standard paths
# or as specified above
echo $ac_n "checking for krb5_mk_req_extended in -lkrb5""... $ac_c" 1>&6
-echo "configure:12495: checking for krb5_mk_req_extended in -lkrb5" >&5
+echo "configure:12490: checking for krb5_mk_req_extended in -lkrb5" >&5
ac_lib_var=`echo krb5'_'krb5_mk_req_extended | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lkrb5 $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 12503 "configure"
+#line 12498 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
krb5_mk_req_extended()
; return 0; }
EOF
-if { (eval echo configure:12514: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:12509: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
########################################################
# now see if we can find the gssapi libs in standard paths
echo $ac_n "checking for gss_display_status in -lgssapi_krb5""... $ac_c" 1>&6
-echo "configure:12542: checking for gss_display_status in -lgssapi_krb5" >&5
+echo "configure:12537: checking for gss_display_status in -lgssapi_krb5" >&5
ac_lib_var=`echo gssapi_krb5'_'gss_display_status | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lgssapi_krb5 $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 12550 "configure"
+#line 12545 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
gss_display_status()
; return 0; }
EOF
-if { (eval echo configure:12561: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:12556: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
with_ldap_support=yes
echo $ac_n "checking whether to use LDAP""... $ac_c" 1>&6
-echo "configure:12592: checking whether to use LDAP" >&5
+echo "configure:12587: checking whether to use LDAP" >&5
# Check whether --with-ldap or --without-ldap was given.
if test "${with_ldap+set}" = set; then
# we might need the lber lib on some systems. To avoid link errors
# this test must be before the libldap test
echo $ac_n "checking for ber_scanf in -llber""... $ac_c" 1>&6
-echo "configure:12613: checking for ber_scanf in -llber" >&5
+echo "configure:12608: checking for ber_scanf in -llber" >&5
ac_lib_var=`echo lber'_'ber_scanf | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-llber $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 12621 "configure"
+#line 12616 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
ber_scanf()
; return 0; }
EOF
-if { (eval echo configure:12632: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:12627: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
# now see if we can find the ldap libs in standard paths
if test x$have_ldap != xyes; then
echo $ac_n "checking for ldap_domain2hostlist in -lldap""... $ac_c" 1>&6
-echo "configure:12657: checking for ldap_domain2hostlist in -lldap" >&5
+echo "configure:12652: checking for ldap_domain2hostlist in -lldap" >&5
ac_lib_var=`echo ldap'_'ldap_domain2hostlist | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lldap $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 12665 "configure"
+#line 12660 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
ldap_domain2hostlist()
; return 0; }
EOF
-if { (eval echo configure:12676: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:12671: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
for ac_func in ldap_set_rebind_proc
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:12707: checking for $ac_func" >&5
+echo "configure:12702: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 12712 "configure"
+#line 12707 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:12735: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:12730: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
done
echo $ac_n "checking whether ldap_set_rebind_proc takes 3 arguments""... $ac_c" 1>&6
-echo "configure:12760: checking whether ldap_set_rebind_proc takes 3 arguments" >&5
+echo "configure:12755: checking whether ldap_set_rebind_proc takes 3 arguments" >&5
if eval "test \"`echo '$''{'pam_ldap_cv_ldap_set_rebind_proc'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 12766 "configure"
+#line 12761 "configure"
#include "confdefs.h"
#include <lber.h>
ldap_set_rebind_proc(0, 0, 0);
; return 0; }
EOF
-if { (eval echo configure:12775: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:12770: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
pam_ldap_cv_ldap_set_rebind_proc=3
else
# Extract the first word of "mysql_config", so it can be a program name with args.
set dummy mysql_config; ac_word=$2
echo $ac_n "checking for $ac_word""... $ac_c" 1>&6
-echo "configure:12839: checking for $ac_word" >&5
+echo "configure:12834: checking for $ac_word" >&5
if eval "test \"`echo '$''{'ac_cv_path_MYSQL_CONFIG'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
min_mysql_version=0.11.0
echo $ac_n "checking for MYSQL - version >= $min_mysql_version""... $ac_c" 1>&6
-echo "configure:12874: checking for MYSQL - version >= $min_mysql_version" >&5
+echo "configure:12869: checking for MYSQL - version >= $min_mysql_version" >&5
no_mysql=""
if test "$MYSQL_CONFIG" = "no" ; then
no_mysql=yes
echo $ac_n "cross compiling; assumed OK... $ac_c"
else
cat > conftest.$ac_ext <<EOF
-#line 12898 "configure"
+#line 12893 "configure"
#include "confdefs.h"
#include <stdio.h>
EOF
-if { (eval echo configure:12959: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:12954: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
:
else
fi
if test "x$no_mysql" = x ; then
echo "$ac_t""yes" 1>&6
- MODULE_MYSQL=bin/mysql.so
+ MODULE_MYSQL=bin/pdb_mysql.so
else
echo "$ac_t""no" 1>&6
if test "$MYSQL_CONFIG" = "no" ; then
CFLAGS="$CFLAGS $MYSQL_CFLAGS"
LIBS="$LIBS $MYSQL_LIBS"
cat > conftest.$ac_ext <<EOF
-#line 12993 "configure"
+#line 12988 "configure"
#include "confdefs.h"
#include <stdio.h>
return 0;
; return 0; }
EOF
-if { (eval echo configure:13008: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:13003: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
echo "*** The test program compiled, but did not run. This usually means"
echo "*** that the run-time linker is not finding MYSQL or finding the wrong"
# Extract the first word of "xml2-config", so it can be a program name with args.
set dummy xml2-config; ac_word=$2
echo $ac_n "checking for $ac_word""... $ac_c" 1>&6
-echo "configure:13088: checking for $ac_word" >&5
+echo "configure:13083: checking for $ac_word" >&5
if eval "test \"`echo '$''{'ac_cv_path_XML2_CONFIG'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
min_xml_version=2.0.0
echo $ac_n "checking for libxml - version >= $min_xml_version""... $ac_c" 1>&6
-echo "configure:13123: checking for libxml - version >= $min_xml_version" >&5
+echo "configure:13118: checking for libxml - version >= $min_xml_version" >&5
no_xml=""
if test "$XML2_CONFIG" = "no" ; then
no_xml=yes
echo $ac_n "cross compiling; assumed OK... $ac_c"
else
cat > conftest.$ac_ext <<EOF
-#line 13146 "configure"
+#line 13141 "configure"
#include "confdefs.h"
#include <stdlib.h>
}
EOF
-if { (eval echo configure:13225: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:13220: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
:
else
if test "x$no_xml" = x ; then
echo "$ac_t""yes (version $xml_config_major_version.$xml_config_minor_version.$xml_config_micro_version)" 1>&6
- MODULE_XML=bin/xml.so
+ MODULE_XML=bin/pdb_xml.so
else
echo "$ac_t""no" 1>&6
if test "$XML2_CONFIG" = "no" ; then
CFLAGS="$CFLAGS $XML_CFLAGS"
LIBS="$LIBS $XML_LIBS"
cat > conftest.$ac_ext <<EOF
-#line 13260 "configure"
+#line 13255 "configure"
#include "confdefs.h"
#include <libxml/xmlversion.h>
LIBXML_TEST_VERSION; return 0;
; return 0; }
EOF
-if { (eval echo configure:13270: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:13265: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
echo "*** The test program compiled, but did not run. This usually means"
echo "*** that the run-time linker is not finding LIBXML or finding the wrong"
#################################################
# check for automount support
echo $ac_n "checking whether to use automount""... $ac_c" 1>&6
-echo "configure:13310: checking whether to use automount" >&5
+echo "configure:13305: checking whether to use automount" >&5
# Check whether --with-automount or --without-automount was given.
if test "${with_automount+set}" = set; then
withval="$with_automount"
#################################################
# check for smbmount support
echo $ac_n "checking whether to use smbmount""... $ac_c" 1>&6
-echo "configure:13335: checking whether to use smbmount" >&5
+echo "configure:13330: checking whether to use smbmount" >&5
# Check whether --with-smbmount or --without-smbmount was given.
if test "${with_smbmount+set}" = set; then
withval="$with_smbmount"
# check for a PAM clear-text auth, accounts, password and session support
with_pam_for_crypt=no
echo $ac_n "checking whether to use PAM""... $ac_c" 1>&6
-echo "configure:13370: checking whether to use PAM" >&5
+echo "configure:13365: checking whether to use PAM" >&5
# Check whether --with-pam or --without-pam was given.
if test "${with_pam+set}" = set; then
withval="$with_pam"
# we can't build a pam module if we don't have pam.
echo $ac_n "checking for pam_get_data in -lpam""... $ac_c" 1>&6
-echo "configure:13396: checking for pam_get_data in -lpam" >&5
+echo "configure:13391: checking for pam_get_data in -lpam" >&5
ac_lib_var=`echo pam'_'pam_get_data | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lpam $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 13404 "configure"
+#line 13399 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
pam_get_data()
; return 0; }
EOF
-if { (eval echo configure:13415: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:13410: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
#################################################
# check for pam_smbpass support
echo $ac_n "checking whether to use pam_smbpass""... $ac_c" 1>&6
-echo "configure:13442: checking whether to use pam_smbpass" >&5
+echo "configure:13437: checking whether to use pam_smbpass" >&5
# Check whether --with-pam_smbpass or --without-pam_smbpass was given.
if test "${with_pam_smbpass+set}" = set; then
withval="$with_pam_smbpass"
for ac_func in crypt
do
echo $ac_n "checking for $ac_func""... $ac_c" 1>&6
-echo "configure:13478: checking for $ac_func" >&5
+echo "configure:13473: checking for $ac_func" >&5
if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 13483 "configure"
+#line 13478 "configure"
#include "confdefs.h"
/* System header to define __stub macros and hopefully few prototypes,
which can conflict with char $ac_func(); below. */
; return 0; }
EOF
-if { (eval echo configure:13506: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:13501: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_func_$ac_func=yes"
else
if test x"$ac_cv_func_crypt" = x"no"; then
echo $ac_n "checking for crypt in -lcrypt""... $ac_c" 1>&6
-echo "configure:13532: checking for crypt in -lcrypt" >&5
+echo "configure:13527: checking for crypt in -lcrypt" >&5
ac_lib_var=`echo crypt'_'crypt | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lcrypt $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 13540 "configure"
+#line 13535 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
crypt()
; return 0; }
EOF
-if { (eval echo configure:13551: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:13546: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
##
if test $with_pam_for_crypt = no; then
echo $ac_n "checking for a crypt that needs truncated salt""... $ac_c" 1>&6
-echo "configure:13586: checking for a crypt that needs truncated salt" >&5
+echo "configure:13581: checking for a crypt that needs truncated salt" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_TRUNCATED_SALT'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
samba_cv_HAVE_TRUNCATED_SALT=cross
else
cat > conftest.$ac_ext <<EOF
-#line 13597 "configure"
+#line 13592 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/crypttest.c"
EOF
-if { (eval echo configure:13601: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:13596: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
samba_cv_HAVE_TRUNCATED_SALT=no
else
fi
fi
-# New experimental SAM system
-
-echo $ac_n "checking whether to build the new (experimental) SAM database""... $ac_c" 1>&6
-echo "configure:13628: checking whether to build the new (experimental) SAM database" >&5
-# Check whether --with-sam or --without-sam was given.
-if test "${with_sam+set}" = set; then
- withval="$with_sam"
- case "$withval" in
- yes)
- echo "$ac_t""yes" 1>&6
- cat >> confdefs.h <<\EOF
-#define WITH_SAM 1
-EOF
-
- ;;
- *)
- echo "$ac_t""no" 1>&6
- ;;
- esac
-else
- echo "$ac_t""no" 1>&6
-
-fi
-
-
-
########################################################################################
##
## TESTS FOR SAM BACKENDS. KEEP THESE GROUPED TOGETHER
#################################################
# check for a LDAP password database configuration backwards compatibility
echo $ac_n "checking whether to use LDAP SAM 2.2 compatible configuration""... $ac_c" 1>&6
-echo "configure:13660: checking whether to use LDAP SAM 2.2 compatible configuration" >&5
+echo "configure:13629: checking whether to use LDAP SAM 2.2 compatible configuration" >&5
# Check whether --with-ldapsam or --without-ldapsam was given.
if test "${with_ldapsam+set}" = set; then
withval="$with_ldapsam"
#################################################
# check for a TDB password database
echo $ac_n "checking whether to use TDB SAM database""... $ac_c" 1>&6
-echo "configure:13685: checking whether to use TDB SAM database" >&5
+echo "configure:13654: checking whether to use TDB SAM database" >&5
# Check whether --with-tdbsam or --without-tdbsam was given.
if test "${with_tdbsam+set}" = set; then
withval="$with_tdbsam"
#################################################
# check for a NISPLUS password database
echo $ac_n "checking whether to use NISPLUS SAM database""... $ac_c" 1>&6
-echo "configure:13710: checking whether to use NISPLUS SAM database" >&5
+echo "configure:13679: checking whether to use NISPLUS SAM database" >&5
# Check whether --with-nisplussam or --without-nisplussam was given.
if test "${with_nisplussam+set}" = set; then
withval="$with_nisplussam"
#################################################
# check for a NISPLUS_HOME support
echo $ac_n "checking whether to use NISPLUS_HOME""... $ac_c" 1>&6
-echo "configure:13741: checking whether to use NISPLUS_HOME" >&5
+echo "configure:13710: checking whether to use NISPLUS_HOME" >&5
# Check whether --with-nisplus-home or --without-nisplus-home was given.
if test "${with_nisplus_home+set}" = set; then
withval="$with_nisplus_home"
#################################################
# check for syslog logging
echo $ac_n "checking whether to use syslog logging""... $ac_c" 1>&6
-echo "configure:13766: checking whether to use syslog logging" >&5
+echo "configure:13735: checking whether to use syslog logging" >&5
# Check whether --with-syslog or --without-syslog was given.
if test "${with_syslog+set}" = set; then
withval="$with_syslog"
#################################################
# check for a shared memory profiling support
echo $ac_n "checking whether to use profiling""... $ac_c" 1>&6
-echo "configure:13791: checking whether to use profiling" >&5
+echo "configure:13760: checking whether to use profiling" >&5
# Check whether --with-profiling-data or --without-profiling-data was given.
if test "${with_profiling_data+set}" = set; then
withval="$with_profiling_data"
QUOTAOBJS=smbd/noquotas.o
echo $ac_n "checking whether to support disk-quotas""... $ac_c" 1>&6
-echo "configure:13819: checking whether to support disk-quotas" >&5
+echo "configure:13788: checking whether to support disk-quotas" >&5
# Check whether --with-quotas or --without-quotas was given.
if test "${with_quotas+set}" = set; then
withval="$with_quotas"
*linux*)
# Check for kernel 2.4.x quota braindamage...
echo $ac_n "checking for linux 2.4.x quota braindamage..""... $ac_c" 1>&6
-echo "configure:13830: checking for linux 2.4.x quota braindamage.." >&5
+echo "configure:13799: checking for linux 2.4.x quota braindamage.." >&5
if eval "test \"`echo '$''{'samba_cv_linux_2_4_quota_braindamage'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 13836 "configure"
+#line 13805 "configure"
#include "confdefs.h"
#include <stdio.h>
#include <sys/types.h>
struct mem_dqblk D;
; return 0; }
EOF
-if { (eval echo configure:13848: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:13817: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_linux_2_4_quota_braindamage=yes
else
# check for experimental utmp accounting
echo $ac_n "checking whether to support utmp accounting""... $ac_c" 1>&6
-echo "configure:13897: checking whether to support utmp accounting" >&5
+echo "configure:13866: checking whether to support utmp accounting" >&5
# Check whether --with-utmp or --without-utmp was given.
if test "${with_utmp+set}" = set; then
withval="$with_utmp"
#################################################
# choose native language(s) of man pages
echo $ac_n "checking chosen man pages' language(s)""... $ac_c" 1>&6
-echo "configure:13922: checking chosen man pages' language(s)" >&5
+echo "configure:13891: checking chosen man pages' language(s)" >&5
# Check whether --with-manpages-langs or --without-manpages-langs was given.
if test "${with_manpages_langs+set}" = set; then
withval="$with_manpages_langs"
LIBSMBCLIENT_SHARED=
LIBSMBCLIENT=
echo $ac_n "checking whether to build the libsmbclient shared library""... $ac_c" 1>&6
-echo "configure:13953: checking whether to build the libsmbclient shared library" >&5
+echo "configure:13922: checking whether to build the libsmbclient shared library" >&5
# Check whether --with-libsmbclient or --without-libsmbclient was given.
if test "${with_libsmbclient+set}" = set; then
withval="$with_libsmbclient"
#################################################
# these tests are taken from the GNU fileutils package
echo "checking how to get filesystem space usage" 1>&6
-echo "configure:13981: checking how to get filesystem space usage" >&5
+echo "configure:13950: checking how to get filesystem space usage" >&5
space=no
# Test for statvfs64.
if test $space = no; then
# SVR4
echo $ac_n "checking statvfs64 function (SVR4)""... $ac_c" 1>&6
-echo "configure:13988: checking statvfs64 function (SVR4)" >&5
+echo "configure:13957: checking statvfs64 function (SVR4)" >&5
if eval "test \"`echo '$''{'fu_cv_sys_stat_statvfs64'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
fu_cv_sys_stat_statvfs64=cross
else
cat > conftest.$ac_ext <<EOF
-#line 13996 "configure"
+#line 13965 "configure"
#include "confdefs.h"
#if defined(HAVE_UNISTD_H)
exit (statvfs64 (".", &fsd));
}
EOF
-if { (eval echo configure:14010: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:13979: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
fu_cv_sys_stat_statvfs64=yes
else
if test $space = no; then
# SVR4
echo $ac_n "checking statvfs function (SVR4)""... $ac_c" 1>&6
-echo "configure:14043: checking statvfs function (SVR4)" >&5
+echo "configure:14012: checking statvfs function (SVR4)" >&5
if eval "test \"`echo '$''{'fu_cv_sys_stat_statvfs'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14048 "configure"
+#line 14017 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/statvfs.h>
struct statvfs fsd; statvfs (0, &fsd);
; return 0; }
EOF
-if { (eval echo configure:14056: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14025: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
fu_cv_sys_stat_statvfs=yes
else
if test $space = no; then
# DEC Alpha running OSF/1
echo $ac_n "checking for 3-argument statfs function (DEC OSF/1)""... $ac_c" 1>&6
-echo "configure:14081: checking for 3-argument statfs function (DEC OSF/1)" >&5
+echo "configure:14050: checking for 3-argument statfs function (DEC OSF/1)" >&5
if eval "test \"`echo '$''{'fu_cv_sys_stat_statfs3_osf1'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
fu_cv_sys_stat_statfs3_osf1=no
else
cat > conftest.$ac_ext <<EOF
-#line 14089 "configure"
+#line 14058 "configure"
#include "confdefs.h"
#include <sys/param.h>
exit (statfs (".", &fsd, sizeof (struct statfs)));
}
EOF
-if { (eval echo configure:14102: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:14071: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
fu_cv_sys_stat_statfs3_osf1=yes
else
if test $space = no; then
# AIX
echo $ac_n "checking for two-argument statfs with statfs.bsize member (AIX, 4.3BSD)""... $ac_c" 1>&6
-echo "configure:14129: checking for two-argument statfs with statfs.bsize member (AIX, 4.3BSD)" >&5
+echo "configure:14098: checking for two-argument statfs with statfs.bsize member (AIX, 4.3BSD)" >&5
if eval "test \"`echo '$''{'fu_cv_sys_stat_statfs2_bsize'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
fu_cv_sys_stat_statfs2_bsize=no
else
cat > conftest.$ac_ext <<EOF
-#line 14137 "configure"
+#line 14106 "configure"
#include "confdefs.h"
#ifdef HAVE_SYS_PARAM_H
exit (statfs (".", &fsd));
}
EOF
-if { (eval echo configure:14156: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:14125: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
fu_cv_sys_stat_statfs2_bsize=yes
else
if test $space = no; then
# SVR3
echo $ac_n "checking for four-argument statfs (AIX-3.2.5, SVR3)""... $ac_c" 1>&6
-echo "configure:14183: checking for four-argument statfs (AIX-3.2.5, SVR3)" >&5
+echo "configure:14152: checking for four-argument statfs (AIX-3.2.5, SVR3)" >&5
if eval "test \"`echo '$''{'fu_cv_sys_stat_statfs4'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
fu_cv_sys_stat_statfs4=no
else
cat > conftest.$ac_ext <<EOF
-#line 14191 "configure"
+#line 14160 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/statfs.h>
exit (statfs (".", &fsd, sizeof fsd, 0));
}
EOF
-if { (eval echo configure:14201: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:14170: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
fu_cv_sys_stat_statfs4=yes
else
if test $space = no; then
# 4.4BSD and NetBSD
echo $ac_n "checking for two-argument statfs with statfs.fsize member (4.4BSD and NetBSD)""... $ac_c" 1>&6
-echo "configure:14228: checking for two-argument statfs with statfs.fsize member (4.4BSD and NetBSD)" >&5
+echo "configure:14197: checking for two-argument statfs with statfs.fsize member (4.4BSD and NetBSD)" >&5
if eval "test \"`echo '$''{'fu_cv_sys_stat_statfs2_fsize'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
fu_cv_sys_stat_statfs2_fsize=no
else
cat > conftest.$ac_ext <<EOF
-#line 14236 "configure"
+#line 14205 "configure"
#include "confdefs.h"
#include <sys/types.h>
#ifdef HAVE_SYS_PARAM_H
exit (statfs (".", &fsd));
}
EOF
-if { (eval echo configure:14252: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:14221: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
fu_cv_sys_stat_statfs2_fsize=yes
else
if test $space = no; then
# Ultrix
echo $ac_n "checking for two-argument statfs with struct fs_data (Ultrix)""... $ac_c" 1>&6
-echo "configure:14279: checking for two-argument statfs with struct fs_data (Ultrix)" >&5
+echo "configure:14248: checking for two-argument statfs with struct fs_data (Ultrix)" >&5
if eval "test \"`echo '$''{'fu_cv_sys_stat_fs_data'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
fu_cv_sys_stat_fs_data=no
else
cat > conftest.$ac_ext <<EOF
-#line 14287 "configure"
+#line 14256 "configure"
#include "confdefs.h"
#include <sys/types.h>
#ifdef HAVE_SYS_PARAM_H
exit (statfs (".", &fsd) != 1);
}
EOF
-if { (eval echo configure:14307: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:14276: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
fu_cv_sys_stat_fs_data=yes
else
# file support.
#
echo $ac_n "checking if large file support can be enabled""... $ac_c" 1>&6
-echo "configure:14340: checking if large file support can be enabled" >&5
+echo "configure:14309: checking if large file support can be enabled" >&5
cat > conftest.$ac_ext <<EOF
-#line 14342 "configure"
+#line 14311 "configure"
#include "confdefs.h"
#if defined(HAVE_LONGLONG) && (defined(HAVE_OFF64_T) || (defined(SIZEOF_OFF_T) && (SIZEOF_OFF_T == 8)))
int i
; return 0; }
EOF
-if { (eval echo configure:14355: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:14324: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_HAVE_EXPLICIT_LARGEFILE_SUPPORT=yes
else
# check for ACL support
echo $ac_n "checking whether to support ACLs""... $ac_c" 1>&6
-echo "configure:14420: checking whether to support ACLs" >&5
+echo "configure:14389: checking whether to support ACLs" >&5
# Check whether --with-acl-support or --without-acl-support was given.
if test "${with_acl_support+set}" = set; then
withval="$with_acl_support"
;;
*)
echo $ac_n "checking for acl_get_file in -lacl""... $ac_c" 1>&6
-echo "configure:14473: checking for acl_get_file in -lacl" >&5
+echo "configure:14442: checking for acl_get_file in -lacl" >&5
ac_lib_var=`echo acl'_'acl_get_file | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lacl $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 14481 "configure"
+#line 14450 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
acl_get_file()
; return 0; }
EOF
-if { (eval echo configure:14492: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14461: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
fi
echo $ac_n "checking for ACL support""... $ac_c" 1>&6
-echo "configure:14520: checking for ACL support" >&5
+echo "configure:14489: checking for ACL support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_POSIX_ACLS'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14526 "configure"
+#line 14495 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/acl.h>
acl_t acl; int entry_id; acl_entry_t *entry_p; return acl_get_entry( acl, entry_id, entry_p);
; return 0; }
EOF
-if { (eval echo configure:14534: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14503: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_POSIX_ACLS=yes
else
EOF
echo $ac_n "checking for acl_get_perm_np""... $ac_c" 1>&6
-echo "configure:14554: checking for acl_get_perm_np" >&5
+echo "configure:14523: checking for acl_get_perm_np" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_ACL_GET_PERM_NP'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14560 "configure"
+#line 14529 "configure"
#include "confdefs.h"
#include <sys/types.h>
#include <sys/acl.h>
acl_permset_t permset_d; acl_perm_t perm; return acl_get_perm_np( permset_d, perm);
; return 0; }
EOF
-if { (eval echo configure:14568: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14537: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_ACL_GET_PERM_NP=yes
else
with_sendfile_support=yes
echo $ac_n "checking whether to check to support sendfile""... $ac_c" 1>&6
-echo "configure:14614: checking whether to check to support sendfile" >&5
+echo "configure:14583: checking whether to check to support sendfile" >&5
# Check whether --with-sendfile-support or --without-sendfile-support was given.
if test "${with_sendfile_support+set}" = set; then
withval="$with_sendfile_support"
case "$host_os" in
*linux*)
echo $ac_n "checking for linux sendfile64 support""... $ac_c" 1>&6
-echo "configure:14626: checking for linux sendfile64 support" >&5
+echo "configure:14595: checking for linux sendfile64 support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SENDFILE64'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14632 "configure"
+#line 14601 "configure"
#include "confdefs.h"
#include <sys/sendfile.h>
int main() {
; return 0; }
EOF
-if { (eval echo configure:14644: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14613: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_SENDFILE64=yes
else
echo "$ac_t""$samba_cv_HAVE_SENDFILE64" 1>&6
echo $ac_n "checking for linux sendfile support""... $ac_c" 1>&6
-echo "configure:14659: checking for linux sendfile support" >&5
+echo "configure:14628: checking for linux sendfile support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SENDFILE'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14665 "configure"
+#line 14634 "configure"
#include "confdefs.h"
#include <sys/sendfile.h>
int main() {
; return 0; }
EOF
-if { (eval echo configure:14677: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14646: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_SENDFILE=yes
else
# Try and cope with broken Linux sendfile....
echo $ac_n "checking for broken linux sendfile support""... $ac_c" 1>&6
-echo "configure:14693: checking for broken linux sendfile support" >&5
+echo "configure:14662: checking for broken linux sendfile support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_BROKEN_LINUX_SENDFILE'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14699 "configure"
+#line 14668 "configure"
#include "confdefs.h"
\
#if defined(_FILE_OFFSET_BITS) && (_FILE_OFFSET_BITS == 64)
; return 0; }
EOF
-if { (eval echo configure:14715: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14684: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_BROKEN_LINUX_SENDFILE=yes
else
;;
*freebsd*)
echo $ac_n "checking for freebsd sendfile support""... $ac_c" 1>&6
-echo "configure:14771: checking for freebsd sendfile support" >&5
+echo "configure:14740: checking for freebsd sendfile support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SENDFILE'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14777 "configure"
+#line 14746 "configure"
#include "confdefs.h"
\
#include <sys/types.h>
; return 0; }
EOF
-if { (eval echo configure:14799: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14768: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_SENDFILE=yes
else
*hpux*)
echo $ac_n "checking for hpux sendfile64 support""... $ac_c" 1>&6
-echo "configure:14833: checking for hpux sendfile64 support" >&5
+echo "configure:14802: checking for hpux sendfile64 support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SENDFILE64'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14839 "configure"
+#line 14808 "configure"
#include "confdefs.h"
\
#include <sys/socket.h>
; return 0; }
EOF
-if { (eval echo configure:14859: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14828: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_SENDFILE64=yes
else
fi
echo $ac_n "checking for hpux sendfile support""... $ac_c" 1>&6
-echo "configure:14890: checking for hpux sendfile support" >&5
+echo "configure:14859: checking for hpux sendfile support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SENDFILE'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 14896 "configure"
+#line 14865 "configure"
#include "confdefs.h"
\
#include <sys/socket.h>
; return 0; }
EOF
-if { (eval echo configure:14916: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14885: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_SENDFILE=yes
else
*solaris*)
echo $ac_n "checking for sendfilev in -lsendfile""... $ac_c" 1>&6
-echo "configure:14949: checking for sendfilev in -lsendfile" >&5
+echo "configure:14918: checking for sendfilev in -lsendfile" >&5
ac_lib_var=`echo sendfile'_'sendfilev | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lsendfile $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 14957 "configure"
+#line 14926 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
sendfilev()
; return 0; }
EOF
-if { (eval echo configure:14968: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14937: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
fi
echo $ac_n "checking for solaris sendfilev64 support""... $ac_c" 1>&6
-echo "configure:14996: checking for solaris sendfilev64 support" >&5
+echo "configure:14965: checking for solaris sendfilev64 support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SENDFILEV64'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 15002 "configure"
+#line 14971 "configure"
#include "confdefs.h"
\
#include <sys/sendfile.h>
; return 0; }
EOF
-if { (eval echo configure:15029: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:14998: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_SENDFILEV64=yes
else
fi
echo $ac_n "checking for solaris sendfilev support""... $ac_c" 1>&6
-echo "configure:15061: checking for solaris sendfilev support" >&5
+echo "configure:15030: checking for solaris sendfilev support" >&5
if eval "test \"`echo '$''{'samba_cv_HAVE_SENDFILEV'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 15067 "configure"
+#line 15036 "configure"
#include "confdefs.h"
\
#include <sys/sendfile.h>
; return 0; }
EOF
-if { (eval echo configure:15094: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:15063: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
samba_cv_HAVE_SENDFILEV=yes
else
# build and install client programs, sbin programs and shared libraries
echo $ac_n "checking whether to build winbind""... $ac_c" 1>&6
-echo "configure:15146: checking whether to build winbind" >&5
+echo "configure:15115: checking whether to build winbind" >&5
# Initially, the value of $host_os decides whether winbind is supported
# [#include <pwd.h>])
echo $ac_n "checking whether struct passwd has pw_comment""... $ac_c" 1>&6
-echo "configure:15230: checking whether struct passwd has pw_comment" >&5
+echo "configure:15199: checking whether struct passwd has pw_comment" >&5
if eval "test \"`echo '$''{'samba_cv_passwd_pw_comment'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 15236 "configure"
+#line 15205 "configure"
#include "confdefs.h"
#include <pwd.h>
int main() {
struct passwd p; p.pw_comment;
; return 0; }
EOF
-if { (eval echo configure:15243: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:15212: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_passwd_pw_comment=yes
else
# [#include <pwd.h>])
echo $ac_n "checking whether struct passwd has pw_age""... $ac_c" 1>&6
-echo "configure:15268: checking whether struct passwd has pw_age" >&5
+echo "configure:15237: checking whether struct passwd has pw_age" >&5
if eval "test \"`echo '$''{'samba_cv_passwd_pw_age'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
else
cat > conftest.$ac_ext <<EOF
-#line 15274 "configure"
+#line 15243 "configure"
#include "confdefs.h"
#include <pwd.h>
int main() {
struct passwd p; p.pw_age;
; return 0; }
EOF
-if { (eval echo configure:15281: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
+if { (eval echo configure:15250: \"$ac_compile\") 1>&5; (eval $ac_compile) 2>&5; }; then
rm -rf conftest*
samba_cv_passwd_pw_age=yes
else
if test x"$INCLUDED_POPT" != x"yes"; then
echo $ac_n "checking for poptGetContext in -lpopt""... $ac_c" 1>&6
-echo "configure:15320: checking for poptGetContext in -lpopt" >&5
+echo "configure:15289: checking for poptGetContext in -lpopt" >&5
ac_lib_var=`echo popt'_'poptGetContext | sed 'y%./+-%__p_%'`
if eval "test \"`echo '$''{'ac_cv_lib_$ac_lib_var'+set}'`\" = set"; then
echo $ac_n "(cached) $ac_c" 1>&6
ac_save_LIBS="$LIBS"
LIBS="-lpopt $LIBS"
cat > conftest.$ac_ext <<EOF
-#line 15328 "configure"
+#line 15297 "configure"
#include "confdefs.h"
/* Override any gcc2 internal prototype to avoid an error. */
/* We use char because int might match the return type of a gcc2
poptGetContext()
; return 0; }
EOF
-if { (eval echo configure:15339: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
+if { (eval echo configure:15308: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then
rm -rf conftest*
eval "ac_cv_lib_$ac_lib_var=yes"
else
fi
echo $ac_n "checking whether to use included popt""... $ac_c" 1>&6
-echo "configure:15363: checking whether to use included popt" >&5
+echo "configure:15332: checking whether to use included popt" >&5
if test x"$INCLUDED_POPT" = x"yes"; then
echo "$ac_t""yes" 1>&6
BUILD_POPT='$(POPT_OBJS)'
# final configure stuff
echo $ac_n "checking configure summary""... $ac_c" 1>&6
-echo "configure:15417: checking configure summary" >&5
+echo "configure:15386: checking configure summary" >&5
if test "$cross_compiling" = yes; then
echo "configure: warning: cannot run when cross-compiling" 1>&2
else
cat > conftest.$ac_ext <<EOF
-#line 15422 "configure"
+#line 15391 "configure"
#include "confdefs.h"
#include "${srcdir-.}/tests/summary.c"
EOF
-if { (eval echo configure:15426: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
+if { (eval echo configure:15395: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext} && (./conftest; exit) 2>/dev/null
then
echo "$ac_t""yes" 1>&6
else
########################################################
# Compile with MySQL support?
-AM_PATH_MYSQL([0.11.0],[MODULE_MYSQL=bin/mysql.so],[MODULE_MYSQL=])
+AM_PATH_MYSQL([0.11.0],[MODULE_MYSQL=bin/pdb_mysql.so],[MODULE_MYSQL=])
CFLAGS="$CFLAGS $MYSQL_CFLAGS"
AC_SUBST(MODULE_MYSQL)
########################################################
# Compile with XML support?
-AM_PATH_XML2([2.0.0],[MODULE_XML=bin/xml.so],[MODULE_XML=])
+AM_PATH_XML2([2.0.0],[MODULE_XML=bin/pdb_xml.so],[MODULE_XML=])
CFLAGS="$CFLAGS $XML_CFLAGS"
AC_SUBST(MODULE_XML)
fi
fi
-# New experimental SAM system
-
-AC_MSG_CHECKING([whether to build the new (experimental) SAM database])
-AC_ARG_WITH(sam,
-[ --with-sam Build new (experimental) SAM database (default=no)],
-[ case "$withval" in
- yes)
- AC_MSG_RESULT(yes)
- AC_DEFINE(WITH_SAM,1,[Whether to build the new (experimental) SAM database])
- ;;
- *)
- AC_MSG_RESULT(no)
- ;;
- esac ],
- AC_MSG_RESULT(no)
-)
-
-
########################################################################################
##
## TESTS FOR SAM BACKENDS. KEEP THESE GROUPED TOGETHER
Unix SMB/CIFS implementation.
charset defines
Copyright (C) Andrew Tridgell 2001
- Copyright (C) Jelmer Vernooij 2002
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
typedef enum {CH_UCS2=0, CH_UNIX=1, CH_DISPLAY=2, CH_DOS=3, CH_UTF8=4} charset_t;
#define NUM_CHARSETS 5
-
-/*
- * for each charset we have a function that pulls from that charset to
- * a ucs2 buffer, and a function that pushes to a ucs2 buffer
- * */
-
-struct charset_functions {
- char *name;
- size_t (*pull)(void *, char **inbuf, size_t *inbytesleft,
- char **outbuf, size_t *outbytesleft);
- size_t (*push)(void *, char **inbuf, size_t *inbytesleft,
- char **outbuf, size_t *outbytesleft);
- struct charset_functions *prev, *next;
-};
-
/* Whether crypt needs truncated salt */
#undef HAVE_TRUNCATED_SALT
-/* Whether to build the new (experimental) SAM database */
-#undef WITH_SAM
-
/* Whether to include 2.2 compatibel LDAP SAM configuration */
#undef WITH_LDAP_SAMCONFIG
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- GUMS structures
- Copyright (C) Simo Sorce 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#ifndef _GUMS_H
-#define _GUMS_H
-
-#define GUMS_VERSION_MAJOR 0
-#define GUMS_VERSION_MINOR 1
-
-#define GUMS_OBJ_DOMAIN 1
-#define GUMS_OBJ_NORMAL_USER 2
-#define GUMS_OBJ_GROUP 3
-#define GUMS_OBJ_ALIAS 4
-#define GUMS_OBJ_WORKSTATION_TRUST 5
-#define GUMS_OBJ_SERVER_TRUST 6
-#define GUMS_OBJ_DOMAIN_TRUST 7
-
-typedef struct gums_user
-{
- DOM_SID *group_sid; /* Primary Group SID */
-
- NTTIME *logon_time; /* logon time */
- NTTIME *logoff_time; /* logoff time */
- NTTIME *kickoff_time; /* kickoff time */
- NTTIME *pass_last_set_time; /* password last set time */
- NTTIME *pass_can_change_time; /* password can change time */
- NTTIME *pass_must_change_time; /* password must change time */
-
- char *full_name; /* user's full name string */
- char *home_dir; /* home directory string */
- char *dir_drive; /* home directory drive string */
- char *logon_script; /* logon script string */
- char *profile_path; /* profile path string */
- char *workstations; /* login from workstations string */
- char *unknown_str; /* don't know what this is, yet. */
- char *munged_dial; /* munged path name and dial-back tel number */
-
- DATA_BLOB *lm_pw; /* .data is Null if no password */
- DATA_BLOB *nt_pw; /* .data is Null if no password */
-
- uint32 unknown_3; /* 0x00ff ffff */
-
- uint16 logon_divs; /* 168 - number of hours in a week */
- uint32 hours_len; /* normally 21 bytes */
- uint8 hours[MAX_HOURS_LEN];
-
- uint32 unknown_5; /* 0x0002 0000 */
- uint32 unknown_6; /* 0x0000 04ec */
-
-} GUMS_USER;
-
-typedef struct gums_group
-{
- uint32 count; /* Number of SIDs */
- DOM_SID *members; /* SID array */
-
-} GUMS_GROUP;
-
-union gums_obj_p {
- gums_user *user;
- gums_group *group;
- gums_group *alias;
-}
-
-typedef struct gums_object
-{
- TALLOC_CTX *mem_ctx;
-
- uint32 type; /* Object Type */
- uint32 version; /* Object Version */
- uint32 seq_num; /* Object Sequence Number */
-
- SEC_DESC *sec_desc; /* Security Descriptor */
-
- DOM_SID *sid; /* Object Sid */
- char *name; /* Object Name */
- char *description; /* Object Description */
-
- union gums_obj_p data; /* Object Specific data */
-
-} GUMS_OBJECT;
-
-typedef struct gums_data_set
-{
- int type; /* GUMS_SET_xxx */
- void *data;
-
-} GUMS_DATA_SET;
-
-typedef struct gums_commit_set
-{
- TALLOC_CTX *mem_ctx;
-
- uint32 type; /* Object type */
- DOM_SID sid; /* Object Sid */
- uint32 count; /* number of changes */
- GUMS_DATA_SET *data;
-} GUMS_COMMIT_SET;
-
-typedef struct gums_privilege
-{
- TALLOC_CTX *mem_ctx;
-
- uint32 type; /* Object Type */
- uint32 version; /* Object Version */
- uint32 seq_num; /* Object Sequence Number */
-
- LUID_ATTR *privilege; /* Privilege Type */
- char *name; /* Object Name */
- char *description; /* Object Description */
-
- uint32 count;
- DOM_SID *members;
-
-} GUMS_PRIVILEGE;
-
-
-typedef struct gums_functions
-{
- /* Generic object functions */
-
- NTSTATUS (*get_domain_sid) (DOM_SID **sid, const char* name);
- NTSTATUS (*set_domain_sid) (const DOM_SID *sid);
-
- NTSTATUS (*get_sequence_number) (void);
-
- NTSTATUS (*new_object) (DOM_SID **sid, const char *name, const int obj_type);
- NTSTATUS (*delete_object) (const DOM_SID *sid);
-
- NTSTATUS (*get_object_from_sid) (GUMS_OBJECT **object, const DOM_SID *sid, const int obj_type);
- NTSTATUS (*get_sid_from_name) (GUMS_OBJECT **object, const char *name);
- /* This function is used to get the list of all objects changed since b_time, it is
- used to support PDC<->BDC synchronization */
- NTSTATUS (*get_updated_objects) (GUMS_OBJECT **objects, const NTTIME base_time);
-
- NTSTATUS (*enumerate_objects_start) (void *handle, const DOM_SID *sid, const int obj_type);
- NTSTATUS (*enumerate_objects_get_next) (GUMS_OBJECT **object, void *handle);
- NTSTATUS (*enumerate_objects_stop) (void *handle);
-
- /* This function MUST be used ONLY by PDC<->BDC replication code or recovery tools.
- Never use this function to update an object in the database, use set_object_values() */
- NTSTATUS (*set_object) (const GUMS_OBJECT *object);
-
- /* set object values function */
- NTSTATUS (*set_object_values) (DOM_SID *sid, uint32 count, GUMS_DATA_SET *data_set);
-
- /* Group related functions */
- NTSTATUS (*add_memberss_to_group) (const DOM_SID *group, const DOM_SID **members);
- NTSTATUS (*delete_members_from_group) (const DOM_SID *group, const DOM_SID **members);
- NTSTATUS (*enumerate_group_members) (DOM_SID **members, const DOM_SID *sid, const int type);
-
- NTSTATUS (*get_sid_groups) (DOM_SID **groups, const DOM_SID *sid);
-
- NTSTATUS (*lock_sid) (const DOM_SID *sid);
- NTSTATUS (*unlock_sid) (const DOM_SID *sid);
-
- /* privileges related functions */
-
- NTSTATUS (*add_members_to_privilege) (const LUID_ATTR *priv, const DOM_SID **members);
- NTSTATUS (*delete_members_from_privilege) (const LUID_ATTR *priv, const DOM_SID **members);
- NTSTATUS (*enumerate_privilege_members) (DOM_SID **members, const LUID_ATTR *priv);
- NTSTATUS (*get_sid_privileges) (DOM_SID **privs, const DOM_SID *sid);
- /* warning!: set_privilege will overwrite a prior existing privilege if such exist */
- NTSTATUS (*set_privilege) (GUMS_PRIVILEGE *priv);
-
-} GUMS_FUNCTIONS;
-
-/* define value types */
-
-#define GUMS_SET_PRIMARY_GROUP 1
-#define GUMS_SET_SEC_DESC 2
-
-/* user specific type values */
-#define GUMS_SET_LOGON_TIME 10 /* keep NTTIME consecutive */
-#define GUMS_SET_LOGOFF_TIME 11 /* too ease checking */
-#define GUMS_SET_KICKOFF_TIME 13
-#define GUMS_SET_PASS_LAST_SET_TIME 14
-#define GUMS_SET_PASS_CAN_CHANGE_TIME 15
-#define GUMS_SET_PASS_MUST_CHANGE_TIME 16 /* NTTIME end */
-
-#define GUMS_SET_NAME 20 /* keep strings consecutive */
-#define GUMS_SET_DESCRIPTION 21 /* too ease checking */
-#define GUMS_SET_FULL_NAME 22
-#define GUMS_SET_HOME_DIRECTORY 23
-#define GUMS_SET_DRIVE 24
-#define GUMS_SET_LOGON_SCRIPT 25
-#define GUMS_SET_PROFILE_PATH 26
-#define GUMS_SET_WORKSTATIONS 27
-#define GUMS_SET_UNKNOWN_STRING 28
-#define GUMS_SET_MUNGED_DIAL 29 /* strings end */
-
-#define GUMS_SET_LM_PASSWORD 40
-#define GUMS_SET_NT_PASSWORD 41
-#define GUMS_SET_PLAINTEXT_PASSWORD 42
-#define GUMS_SET_UNKNOWN_3 43
-#define GUMS_SET_LOGON_DIVS 44
-#define GUMS_SET_HOURS_LEN 45
-#define GUMS_SET_HOURS 46
-#define GUMS_SET_UNKNOWN_5 47
-#define GUMS_SET_UNKNOWN_6 48
-
-#define GUMS_SET_MUST_CHANGE_PASS 50
-#define GUMS_SET_CANNOT_CHANGE_PASS 51
-#define GUMS_SET_PASS_NEVER_EXPIRE 52
-#define GUMS_SET_ACCOUNT_DISABLED 53
-#define GUMS_SET_ACCOUNT_LOCKOUT 54
-
-/*group specific type values */
-#define GUMS_ADD_SID_LIST 60
-#define GUMS_DEL_SID_LIST 61
-#define GUMS_SET_SID_LIST 62
-
-#endif /* _GUMS_H */
#include "passdb.h"
-#include "sam.h"
-
#include "session.h"
#include "asn_1.h"
* \ingroup libsmbclient
* Data structures, types, and constants
*/
-/** \defgroup callback Callback function types
-* \ingroup libsmbclient
-* Callback functions
-*/
/** \defgroup file File Functions
* \ingroup libsmbclient
* Functions used to access individual file contents
* \ingroup libsmbclient
* Functions used to access printing functionality
*/
-/** \defgroup misc Miscellaneous Functions
+/** \defgroup attribute Miscellaneous Functions
* \ingroup libsmbclient
* Functions that don't fit in to other categories
*/
#include <sys/stat.h>
#include <fcntl.h>
+#define SMBC_MAX_NAME 1023
#define SMBC_WORKGROUP 1
#define SMBC_SERVER 2
#define SMBC_FILE_SHARE 3
#define SMBC_FILE 8
#define SMBC_LINK 9
+#define SMBC_FILE_MODE (S_IFREG | 0444)
+#define SMBC_DIR_MODE (S_IFDIR | 0555)
+
+#define SMBC_MAX_FD 10000
+
+
/**@ingroup structure
* Structure that represents a directory entry.
*
char name[1];
};
+#ifndef _CLIENT_H
/**@ingroup structure
* Structure that represents a print job.
*
*/
-#ifndef _CLIENT_H
struct print_job_info
{
/** numeric ID of the print job
*/
time_t t;
};
-#endif /* _CLIENT_H */
-
-
-/**@ingroup structure
- * Server handle
- */
-typedef struct _SMBCSRV SMBCSRV;
+#endif /* ifndef _CLIENT_H */
/**@ingroup structure
- * File or directory handle
- */
-typedef struct _SMBCFILE SMBCFILE;
-
-/**@ingroup structure
- * File or directory handle
- */
-typedef struct _SMBCCTX SMBCCTX;
-
-
-
-
-
-/**@ingroup callback
* Authentication callback function type.
*
* Type for the the authentication function called by the library to
char *pw, int pwlen);
-/**@ingroup callback
+/**@ingroup structure
* Print job info callback function type.
*
* @param i pointer to print job information structure
*
*/
-typedef void (*smbc_list_print_job_fn)(struct print_job_info *i);
-
-
-/**@ingroup callback
- * Check if a server is still good
- *
- * @param c pointer to smb context
- *
- * @param srv pointer to server to check
- *
- * @return 0 when connection is good. 1 on error.
- *
- */
-typedef int (*smbc_check_server_fn)(SMBCCTX * c, SMBCSRV *srv);
-
-/**@ingroup callback
- * Remove a server if unused
- *
- * @param c pointer to smb context
- *
- * @param srv pointer to server to remove
- *
- * @return 0 on success. 1 on failure.
- *
- */
-typedef int (*smbc_remove_unused_server_fn)(SMBCCTX * c, SMBCSRV *srv);
+typedef void (*smbc_get_print_job_info)(struct print_job_info *i);
+typedef struct _SMBCSRV {
+ struct cli_state cli;
+ dev_t dev;
+ BOOL no_pathinfo2;
+ int server_fd;
-/**@ingroup callback
- * Add a server to the cache system
- *
- * @param c pointer to smb context
- *
- * @param srv pointer to server to add
- *
- * @param server server name
- *
- * @param share share name
- *
- * @param workgroup workgroup used to connect
- *
- * @param username username used to connect
- *
- * @return 0 on success. 1 on failure.
- *
- */
-typedef int (*smbc_add_cached_srv_fn) (SMBCCTX * c, SMBCSRV *srv,
- char * server, char * share,
- char * workgroup, char * username);
-
-
-/**@ingroup callback
- * Look up a server in the cache system
- *
- * @param c pointer to smb context
- *
- * @param server server name to match
- *
- * @param share share name to match
- *
- * @param workgroup workgroup to match
- *
- * @param username username to match
- *
- * @return pointer to SMBCSRV on success. NULL on failure.
- *
- */
-typedef SMBCSRV * (*smbc_get_cached_srv_fn) (SMBCCTX * c, char * server,
- char * share, char * workgroup, char * username);
-
-
-/**@ingroup callback
- * Check if a server is still good
- *
- * @param c pointer to smb context
- *
- * @param srv pointer to server to remove
- *
- * @return 0 when found and removed. 1 on failure.
- *
- */
-typedef int (*smbc_remove_cached_srv_fn)(SMBCCTX * c, SMBCSRV *srv);
+ struct _SMBCSRV *next, *prev;
+
+} SMBCSRV;
+/*
+ * Keep directory entries in a list
+ */
+struct smbc_dir_list {
+ struct smbc_dir_list *next;
+ struct smbc_dirent *dirent;
+};
-/**@ingroup callback
- * Try to remove all servers from the cache system and disconnect
- *
- * @param c pointer to smb context
- *
- * @return 0 when found and removed. 1 on failure.
- *
+/*
+ * Structure for open file management
*/
-typedef int (*smbc_purge_cached_fn) (SMBCCTX * c);
-
-
-
+typedef struct _SMBCFILE {
+ int cli_fd;
+ char *fname;
+ off_t offset;
+ SMBCSRV *srv;
+ BOOL file;
+ struct smbc_dir_list *dir_list, *dir_end, *dir_next;
+ int dir_type, dir_error;
+
+ struct _SMBCFILE *next, *prev;
+} SMBCFILE;
/**@ingroup structure
* Structure that contains a client context information
- * This structure is know as SMBCCTX
*/
-struct _SMBCCTX {
+typedef struct _SMBCCTX {
/** debug level
*/
int debug;
/** callable functions for files:
* For usage and return values see the smbc_* functions
*/
- SMBCFILE * (*open) (SMBCCTX *c, const char *fname, int flags, mode_t mode);
- SMBCFILE * (*creat) (SMBCCTX *c, const char *path, mode_t mode);
- ssize_t (*read) (SMBCCTX *c, SMBCFILE *file, void *buf, size_t count);
- ssize_t (*write) (SMBCCTX *c, SMBCFILE *file, void *buf, size_t count);
- int (*unlink) (SMBCCTX *c, const char *fname);
- int (*rename) (SMBCCTX *ocontext, const char *oname,
- SMBCCTX *ncontext, const char *nname);
- off_t (*lseek) (SMBCCTX *c, SMBCFILE * file, off_t offset, int whence);
- int (*stat) (SMBCCTX *c, const char *fname, struct stat *st);
- int (*fstat) (SMBCCTX *c, SMBCFILE *file, struct stat *st);
- int (*close) (SMBCCTX *c, SMBCFILE *file);
+ SMBCFILE * (*open) (struct _SMBCCTX *c, const char *fname, int flags, mode_t mode);
+ SMBCFILE * (*creat) (struct _SMBCCTX *c, const char *path, mode_t mode);
+ ssize_t (*read) (struct _SMBCCTX *c, SMBCFILE *file, void *buf, size_t count);
+ ssize_t (*write) (struct _SMBCCTX *c, SMBCFILE *file, void *buf, size_t count);
+ int (*unlink) (struct _SMBCCTX *c, const char *fname);
+ int (*rename) (struct _SMBCCTX *ocontext, const char *oname,
+ struct _SMBCCTX *ncontext, const char *nname);
+ off_t (*lseek) (struct _SMBCCTX *c, SMBCFILE * file, off_t offset, int whence);
+ int (*stat) (struct _SMBCCTX *c, const char *fname, struct stat *st);
+ int (*fstat) (struct _SMBCCTX *c, SMBCFILE *file, struct stat *st);
+ int (*close) (struct _SMBCCTX *c, SMBCFILE *file);
/** callable functions for dirs
*/
- SMBCFILE * (*opendir) (SMBCCTX *c, const char *fname);
- int (*closedir)(SMBCCTX *c, SMBCFILE *dir);
- struct smbc_dirent * (*readdir)(SMBCCTX *c, SMBCFILE *dir);
- int (*getdents)(SMBCCTX *c, SMBCFILE *dir,
+ SMBCFILE * (*opendir) (struct _SMBCCTX *c, const char *fname);
+ int (*closedir)(struct _SMBCCTX *c, SMBCFILE *dir);
+ struct smbc_dirent * (*readdir)(struct _SMBCCTX *c, SMBCFILE *dir);
+ int (*getdents)(struct _SMBCCTX *c, SMBCFILE *dir,
struct smbc_dirent *dirp, int count);
- int (*mkdir) (SMBCCTX *c, const char *fname, mode_t mode);
- int (*rmdir) (SMBCCTX *c, const char *fname);
- off_t (*telldir) (SMBCCTX *c, SMBCFILE *dir);
- int (*lseekdir)(SMBCCTX *c, SMBCFILE *dir, off_t offset);
- int (*fstatdir)(SMBCCTX *c, SMBCFILE *dir, struct stat *st);
+ int (*mkdir) (struct _SMBCCTX *c, const char *fname, mode_t mode);
+ int (*rmdir) (struct _SMBCCTX *c, const char *fname);
+ off_t (*telldir) (struct _SMBCCTX *c, SMBCFILE *dir);
+ int (*lseekdir)(struct _SMBCCTX *c, SMBCFILE *dir, off_t offset);
+ int (*fstatdir)(struct _SMBCCTX *c, SMBCFILE *dir, struct stat *st);
/** callable functions for printing
*/
- int (*print_file)(SMBCCTX *c_file, const char *fname,
- SMBCCTX *c_print, const char *printq);
- SMBCFILE * (*open_print_job)(SMBCCTX *c, const char *fname);
- int (*list_print_jobs)(SMBCCTX *c, const char *fname, smbc_list_print_job_fn fn);
- int (*unlink_print_job)(SMBCCTX *c, const char *fname, int id);
+ int (*print_file)(struct _SMBCCTX *c_file, const char *fname,
+ struct _SMBCCTX *c_print, const char *printq);
+ SMBCFILE * (*open_print_job)(struct _SMBCCTX *c, const char *fname);
+ int (*list_print_jobs)(struct _SMBCCTX *c, const char *fname, void (*fn)(struct print_job_info *));
+ int (*unlink_print_job)(struct _SMBCCTX *c, const char *fname, int id);
/** Callbacks
- * These callbacks _always_ have to be initialized because they will not be checked
+ * These callbacks _always_ have to be intialized because they will not be checked
* at dereference for increased speed.
*/
struct _smbc_callbacks {
/** check if a server is still good
*/
- smbc_check_server_fn check_server_fn;
+ int (*check_server_fn)(struct _SMBCCTX * c, SMBCSRV *srv);
/** remove a server if unused
*/
- smbc_remove_unused_server_fn remove_unused_server_fn;
+ int (*remove_unused_server_fn)(struct _SMBCCTX * c, SMBCSRV *srv);
/** Cache subsystem
* For an example cache system see samba/source/libsmb/libsmb_cache.c
/** server cache addition
*/
- smbc_add_cached_srv_fn add_cached_srv_fn;
-
+ int (*add_cached_srv_fn) (struct _SMBCCTX * c, SMBCSRV *srv,
+ char * server, char * share,
+ char * workgroup, char * username);
/** server cache lookup
*/
- smbc_get_cached_srv_fn get_cached_srv_fn;
-
+ SMBCSRV * (*get_cached_srv_fn) (struct _SMBCCTX * c, char * server,
+ char * share, char * workgroup, char * username);
/** server cache removal
*/
- smbc_remove_cached_srv_fn remove_cached_srv_fn;
+ int (*remove_cached_srv_fn)(struct _SMBCCTX * c, SMBCSRV *srv);
/** server cache purging, try to remove all cached servers (disconnect)
*/
- smbc_purge_cached_fn purge_cached_fn;
+ int (*purge_cached_fn) (struct _SMBCCTX * c);
+
} callbacks;
*/
struct smbc_server_cache * server_cache;
- /** INTERNAL DATA
- * do _NOT_ touch this from your program !
+ /** INTERNAL functions
+ * do _NOT_ touch these from your program !
+ */
+
+ /** INTERNAL: is this handle initialized ?
+ */
+ int _initialized;
+
+ /** INTERNAL: dirent pointer location
*/
- struct smbc_internal_data * internal;
+ char _dirent[512];
+
+ /** INTERNAL: server connection list
+ */
+ SMBCSRV * _servers;
-};
+ /** INTERNAL: open file/dir list
+ */
+ SMBCFILE * _files;
+
+} SMBCCTX;
/**@ingroup misc
* - EINVAL fname was NULL or smbc_init not called
* - EACCES ???
*/
-int smbc_list_print_jobs(const char *purl, smbc_list_print_job_fn fn);
+int smbc_list_print_jobs(const char *purl, smbc_get_print_job_info fn);
/**@ingroup print
* Delete a print job
#define PASSDB_INTERFACE_VERSION 4
+/* use this inside a passdb module */
+#define PDB_MODULE_VERSIONING_MAGIC \
+int pdb_version(void)\
+{\
+ return PASSDB_INTERFACE_VERSION;\
+}
+
typedef struct pdb_context
{
struct pdb_methods *pdb_methods;
char *name;
/* Function to create a member of the pdb_methods list */
pdb_init_function init;
- struct pdb_init_function_entry *prev, *next;
};
#endif /* _PASSDB_H */
+++ /dev/null
-#ifndef _RPC_CLIENT_PROTO_H_
-#define _RPC_CLIENT_PROTO_H_
-/* This file is automatically generated with "make proto". DO NOT EDIT */
-
-
-/*The following definitions come from lib/util_list.c */
-
-BOOL copy_policy_hnd (POLICY_HND *dest, const POLICY_HND *src);
-BOOL compare_rpc_hnd_node(const RPC_HND_NODE *x,
- const RPC_HND_NODE *y);
-BOOL RpcHndList_set_connection(const POLICY_HND *hnd,
- struct cli_connection *con);
-BOOL RpcHndList_del_connection(const POLICY_HND *hnd);
-struct cli_connection* RpcHndList_get_connection(const POLICY_HND *hnd);
-
-/*The following definitions come from rpc_client/cli_connect.c */
-
-void init_connections(void);
-void free_connections(void);
-void cli_connection_free(struct cli_connection *con);
-void cli_connection_unlink(struct cli_connection *con);
-BOOL cli_connection_init(const char *srv_name, char *pipe_name,
- struct cli_connection **con);
-BOOL cli_connection_init_auth(const char *srv_name, char *pipe_name,
- struct cli_connection **con,
- cli_auth_fns * auth, void *auth_creds);
-struct _cli_auth_fns *cli_conn_get_authfns(struct cli_connection *con);
-void *cli_conn_get_auth_creds(struct cli_connection *con);
-BOOL rpc_hnd_pipe_req(const POLICY_HND * hnd, uint8 op_num,
- prs_struct * data, prs_struct * rdata);
-BOOL rpc_con_pipe_req(struct cli_connection *con, uint8 op_num,
- prs_struct * data, prs_struct * rdata);
-BOOL rpc_con_ok(struct cli_connection *con);
-
-/*The following definitions come from rpc_client/cli_login.c */
-
-BOOL cli_nt_setup_creds(struct cli_state *cli, unsigned char mach_pwd[16]);
-BOOL cli_nt_srv_pwset(struct cli_state *cli, unsigned char *new_hashof_mach_pwd);
-BOOL cli_nt_login_interactive(struct cli_state *cli, char *domain, char *username,
- uint32 smb_userid_low, char *password,
- NET_ID_INFO_CTR *ctr, NET_USER_INFO_3 *user_info3);
-BOOL cli_nt_login_network(struct cli_state *cli, char *domain, char *username,
- uint32 smb_userid_low, char lm_chal[8],
- char *lm_chal_resp, char *nt_chal_resp,
- NET_ID_INFO_CTR *ctr, NET_USER_INFO_3 *user_info3);
-BOOL cli_nt_logoff(struct cli_state *cli, NET_ID_INFO_CTR *ctr);
-
-/*The following definitions come from rpc_client/cli_lsarpc.c */
-
-BOOL do_lsa_open_policy(struct cli_state *cli,
- char *system_name, POLICY_HND *hnd,
- BOOL sec_qos);
-BOOL do_lsa_query_info_pol(struct cli_state *cli,
- POLICY_HND *hnd, uint16 info_class,
- fstring domain_name, DOM_SID *domain_sid);
-BOOL do_lsa_close(struct cli_state *cli, POLICY_HND *hnd);
-BOOL cli_lsa_get_domain_sid(struct cli_state *cli, char *server);
-uint32 lsa_open_policy(const char *system_name, POLICY_HND *hnd,
- BOOL sec_qos, uint32 des_access);
-uint32 lsa_lookup_sids(POLICY_HND *hnd, int num_sids, DOM_SID *sids,
- char ***names, uint32 **types, int *num_names);
-uint32 lsa_lookup_names(POLICY_HND *hnd, int num_names, char **names,
- DOM_SID **sids, uint32 **types, int *num_sids);
-
-/*The following definitions come from rpc_client/cli_netlogon.c */
-
-BOOL cli_net_logon_ctrl2(struct cli_state *cli, uint32 status_level);
-BOOL cli_net_auth2(struct cli_state *cli, uint16 sec_chan,
- uint32 neg_flags, DOM_CHAL *srv_chal);
-BOOL cli_net_req_chal(struct cli_state *cli, DOM_CHAL *clnt_chal, DOM_CHAL *srv_chal);
-BOOL cli_net_srv_pwset(struct cli_state *cli, uint8 hashed_mach_pwd[16]);
-BOOL cli_net_sam_logon(struct cli_state *cli, NET_ID_INFO_CTR *ctr, NET_USER_INFO_3 *user_info3);
-BOOL cli_net_sam_logoff(struct cli_state *cli, NET_ID_INFO_CTR *ctr);
-BOOL change_trust_account_password( char *domain, char *remote_machine_list);
-
-/*The following definitions come from rpc_client/cli_pipe.c */
-
-BOOL rpc_api_pipe_req(struct cli_state *cli, uint8 op_num,
- prs_struct *data, prs_struct *rdata);
-BOOL rpc_pipe_bind(struct cli_state *cli, char *pipe_name, char *my_name);
-void cli_nt_set_ntlmssp_flgs(struct cli_state *cli, uint32 ntlmssp_flgs);
-BOOL cli_nt_session_open(struct cli_state *cli, char *pipe_name);
-void cli_nt_session_close(struct cli_state *cli);
-
-/*The following definitions come from rpc_client/cli_reg.c */
-
-BOOL do_reg_connect(struct cli_state *cli, char *full_keyname, char *key_name,
- POLICY_HND *reg_hnd);
-BOOL do_reg_open_hklm(struct cli_state *cli, uint16 unknown_0, uint32 level,
- POLICY_HND *hnd);
-BOOL do_reg_open_hku(struct cli_state *cli, uint16 unknown_0, uint32 level,
- POLICY_HND *hnd);
-BOOL do_reg_flush_key(struct cli_state *cli, POLICY_HND *hnd);
-BOOL do_reg_query_key(struct cli_state *cli, POLICY_HND *hnd,
- char *class, uint32 *class_len,
- uint32 *num_subkeys, uint32 *max_subkeylen,
- uint32 *max_subkeysize, uint32 *num_values,
- uint32 *max_valnamelen, uint32 *max_valbufsize,
- uint32 *sec_desc, NTTIME *mod_time);
-BOOL do_reg_unknown_1a(struct cli_state *cli, POLICY_HND *hnd, uint32 *unk);
-BOOL do_reg_query_info(struct cli_state *cli, POLICY_HND *hnd,
- char *key_value, uint32* key_type);
-BOOL do_reg_set_key_sec(struct cli_state *cli, POLICY_HND *hnd, SEC_DESC_BUF *sec_desc_buf);
-BOOL do_reg_get_key_sec(struct cli_state *cli, POLICY_HND *hnd, uint32 *sec_buf_size, SEC_DESC_BUF **ppsec_desc_buf);
-BOOL do_reg_delete_val(struct cli_state *cli, POLICY_HND *hnd, char *val_name);
-BOOL do_reg_delete_key(struct cli_state *cli, POLICY_HND *hnd, char *key_name);
-BOOL do_reg_create_key(struct cli_state *cli, POLICY_HND *hnd,
- char *key_name, char *key_class,
- SEC_ACCESS *sam_access,
- POLICY_HND *key);
-BOOL do_reg_enum_key(struct cli_state *cli, POLICY_HND *hnd,
- int key_index, char *key_name,
- uint32 *unk_1, uint32 *unk_2,
- time_t *mod_time);
-BOOL do_reg_create_val(struct cli_state *cli, POLICY_HND *hnd,
- char *val_name, uint32 type, BUFFER3 *data);
-BOOL do_reg_enum_val(struct cli_state *cli, POLICY_HND *hnd,
- int val_index, int max_valnamelen, int max_valbufsize,
- fstring val_name,
- uint32 *val_type, BUFFER2 *value);
-BOOL do_reg_open_entry(struct cli_state *cli, POLICY_HND *hnd,
- char *key_name, uint32 unk_0,
- POLICY_HND *key_hnd);
-BOOL do_reg_close(struct cli_state *cli, POLICY_HND *hnd);
-
-/*The following definitions come from rpc_client/cli_samr.c */
-
-BOOL get_samr_query_usergroups(struct cli_state *cli,
- POLICY_HND *pol_open_domain, uint32 user_rid,
- uint32 *num_groups, DOM_GID *gid);
-BOOL get_samr_query_userinfo(struct cli_state *cli,
- POLICY_HND *pol_open_domain,
- uint32 info_level,
- uint32 user_rid, SAM_USER_INFO_21 *usr);
-BOOL do_samr_chgpasswd_user(struct cli_state *cli,
- char *srv_name, char *user_name,
- char nt_newpass[516], uchar nt_oldhash[16],
- char lm_newpass[516], uchar lm_oldhash[16]);
-BOOL do_samr_unknown_38(struct cli_state *cli, char *srv_name);
-BOOL do_samr_query_dom_info(struct cli_state *cli,
- POLICY_HND *domain_pol, uint16 switch_value);
-BOOL do_samr_enum_dom_users(struct cli_state *cli,
- POLICY_HND *pol, uint16 num_entries, uint16 unk_0,
- uint16 acb_mask, uint16 unk_1, uint32 size,
- struct acct_info **sam,
- int *num_sam_users);
-BOOL do_samr_connect(struct cli_state *cli,
- char *srv_name, uint32 unknown_0,
- POLICY_HND *connect_pol);
-BOOL do_samr_open_user(struct cli_state *cli,
- POLICY_HND *pol, uint32 unk_0, uint32 rid,
- POLICY_HND *user_pol);
-BOOL do_samr_open_domain(struct cli_state *cli,
- POLICY_HND *connect_pol, uint32 rid, DOM_SID *sid,
- POLICY_HND *domain_pol);
-BOOL do_samr_query_unknown_12(struct cli_state *cli,
- POLICY_HND *pol, uint32 rid, uint32 num_gids, uint32 *gids,
- uint32 *num_aliases,
- fstring als_names [MAX_LOOKUP_SIDS],
- uint32 num_als_users[MAX_LOOKUP_SIDS]);
-BOOL do_samr_query_usergroups(struct cli_state *cli,
- POLICY_HND *pol, uint32 *num_groups, DOM_GID *gid);
-BOOL do_samr_query_userinfo(struct cli_state *cli,
- POLICY_HND *pol, uint16 switch_value, void* usr);
-BOOL do_samr_close(struct cli_state *cli, POLICY_HND *hnd);
-
-/*The following definitions come from rpc_client/cli_spoolss_notify.c */
-
-BOOL spoolss_disconnect_from_client( struct cli_state *cli);
-BOOL spoolss_connect_to_client( struct cli_state *cli, char *remote_machine);
-BOOL cli_spoolss_reply_open_printer(struct cli_state *cli, char *printer, uint32 localprinter, uint32 type, uint32 *status, POLICY_HND *handle);
-BOOL cli_spoolss_reply_rrpcn(struct cli_state *cli, POLICY_HND *handle,
- uint32 change_low, uint32 change_high, uint32 *status);
-BOOL cli_spoolss_reply_close_printer(struct cli_state *cli, POLICY_HND *handle, uint32 *status);
-
-/*The following definitions come from rpc_client/cli_srvsvc.c */
-
-BOOL do_srv_net_srv_conn_enum(struct cli_state *cli,
- char *server_name, char *qual_name,
- uint32 switch_value, SRV_CONN_INFO_CTR *ctr,
- uint32 preferred_len,
- ENUM_HND *hnd);
-BOOL do_srv_net_srv_sess_enum(struct cli_state *cli,
- char *server_name, char *qual_name,
- uint32 switch_value, SRV_SESS_INFO_CTR *ctr,
- uint32 preferred_len,
- ENUM_HND *hnd);
-BOOL do_srv_net_srv_share_enum(struct cli_state *cli,
- char *server_name,
- uint32 switch_value, SRV_R_NET_SHARE_ENUM *r_o,
- uint32 preferred_len, ENUM_HND *hnd);
-BOOL do_srv_net_srv_file_enum(struct cli_state *cli,
- char *server_name, char *qual_name,
- uint32 switch_value, SRV_FILE_INFO_CTR *ctr,
- uint32 preferred_len,
- ENUM_HND *hnd);
-BOOL do_srv_net_srv_get_info(struct cli_state *cli,
- char *server_name, uint32 switch_value, SRV_INFO_CTR *ctr);
-
-/*The following definitions come from rpc_client/cli_use.c */
-
-void init_cli_use(void);
-void free_cli_use(void);
-struct cli_state *cli_net_use_add(const char *srv_name,
- const struct ntuser_creds *usr_creds,
- BOOL reuse, BOOL *is_new);
-BOOL cli_net_use_del(const char *srv_name,
- const struct ntuser_creds *usr_creds,
- BOOL force_close, BOOL *connection_closed);
-void cli_net_use_enum(uint32 *num_cons, struct use_info ***use);
-void cli_use_wait_keyboard(void);
-
-/*The following definitions come from rpc_client/cli_wkssvc.c */
-
-BOOL do_wks_query_info(struct cli_state *cli,
- char *server_name, uint32 switch_value,
- WKS_INFO_100 *wks100);
-
-/*The following definitions come from rpc_client/ncacn_np_use.c */
-
-BOOL ncacn_np_use_del(const char *srv_name, const char *pipe_name,
- const vuser_key * key,
- BOOL force_close, BOOL *connection_closed);
-struct ncacn_np *ncacn_np_initialise(struct ncacn_np *msrpc,
- const vuser_key * key);
-struct ncacn_np *ncacn_np_use_add(const char *pipe_name,
- const vuser_key * key,
- const char *srv_name,
- const struct ntuser_creds *ntc,
- BOOL reuse, BOOL *is_new_connection);
-#endif /* _PROTO_H_ */
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- SAM structures
- Copyright (C) Kai Krueger 2002
- Copyright (C) Stefan (metze) Metzmacher 2002
- Copyright (C) Simo Sorce 2002
- Copyright (C) Andrew Bartlett 2002
- Copyright (C) Jelmer Vernooij 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#ifndef _SAM_H
-#define _SAM_H
-
-/* We want to track down bugs early */
-#if 1
-#define SAM_ASSERT(x) SMB_ASSERT(x)
-#else
-#define SAM_ASSERT(x) while (0) { \
- if (!(x)) {
- DEBUG(0, ("SAM_ASSERT failed!\n"))
- return NT_STATUS_FAIL_CHECK;\
- } \
- }
-#endif
-
-
-/* let it be 0 until we have a stable interface --metze */
-#define SAM_INTERFACE_VERSION 0
-
-/* use this inside a passdb module */
-#define SAM_MODULE_VERSIONING_MAGIC \
-int sam_version(void)\
-{\
- return SAM_INTERFACE_VERSION;\
-}
-
-/* Backend to use by default when no backend was specified */
-#define SAM_DEFAULT_BACKEND "plugin"
-
-typedef struct sam_domain_handle {
- TALLOC_CTX *mem_ctx;
- uint32 access_granted;
- const struct sam_methods *current_sam_methods; /* sam_methods creating this handle */
- void (*free_fn)(struct sam_domain_handle **);
- struct domain_data {
- DOM_SID sid; /*SID of the domain. Should not be changed */
- char *name; /* Name of the domain */
- char *servername; /* */
- NTTIME max_passwordage; /* time till next password expiration */
- NTTIME min_passwordage; /* time till password can be changed again */
- NTTIME lockout_duration; /* time till login is allowed again after lockout*/
- NTTIME reset_count; /* time till bad login counter is reset */
- uint16 min_passwordlength; /* minimum number of characters for a password */
- uint16 password_history; /* number of passwords stored in history */
- uint16 lockout_count; /* number of bad login attempts before lockout */
- BOOL force_logoff; /* force logoff after logon hours have expired */
- BOOL login_pwdchange; /* Users need to logon to change their password */
- uint32 num_accounts; /* number of accounts in the domain */
- uint32 num_groups; /* number of global groups */
- uint32 num_aliases; /* number of local groups */
- uint32 sam_sequence_number; /* global sequence number */
- } private;
-} SAM_DOMAIN_HANDLE;
-
-typedef struct sam_account_handle {
- TALLOC_CTX *mem_ctx;
- uint32 access_granted;
- const struct sam_methods *current_sam_methods; /* sam_methods creating this handle */
- void (*free_fn)(struct sam_account_handle **);
- struct sam_account_data {
- uint32 init_flag;
- NTTIME logon_time; /* logon time */
- NTTIME logoff_time; /* logoff time */
- NTTIME kickoff_time; /* kickoff time */
- NTTIME pass_last_set_time; /* password last set time */
- NTTIME pass_can_change_time; /* password can change time */
- NTTIME pass_must_change_time; /* password must change time */
- char * account_name; /* account_name string */
- SAM_DOMAIN_HANDLE * domain; /* domain of account */
- char *full_name; /* account's full name string */
- char *unix_home_dir; /* UNIX home directory string */
- char *home_dir; /* home directory string */
- char *dir_drive; /* home directory drive string */
- char *logon_script; /* logon script string */
- char *profile_path; /* profile path string */
- char *acct_desc; /* account description string */
- char *workstations; /* login from workstations string */
- char *unknown_str; /* don't know what this is, yet. */
- char *munged_dial; /* munged path name and dial-back tel number */
- DOM_SID account_sid; /* Primary Account SID */
- DOM_SID group_sid; /* Primary Group SID */
- DATA_BLOB lm_pw; /* .data is Null if no password */
- DATA_BLOB nt_pw; /* .data is Null if no password */
- char *plaintext_pw; /* if Null not available */
- uint16 acct_ctrl; /* account info (ACB_xxxx bit-mask) */
- uint32 unknown_1; /* 0x00ff ffff */
- uint16 logon_divs; /* 168 - number of hours in a week */
- uint32 hours_len; /* normally 21 bytes */
- uint8 hours[MAX_HOURS_LEN];
- uint32 unknown_2; /* 0x0002 0000 */
- uint32 unknown_3; /* 0x0000 04ec */
- } private;
-} SAM_ACCOUNT_HANDLE;
-
-typedef struct sam_group_handle {
- TALLOC_CTX *mem_ctx;
- uint32 access_granted;
- const struct sam_methods *current_sam_methods; /* sam_methods creating this handle */
- void (*free_fn)(struct sam_group_handle **);
- struct sam_group_data {
- char *group_name;
- char *group_desc;
- DOM_SID sid;
- uint16 group_ctrl; /* specifies if the group is a local group or a global group */
- uint32 num_members;
- } private;
-} SAM_GROUP_HANDLE;
-
-
-typedef struct sam_group_member {
- DOM_SID sid;
- BOOL group; /* specifies if it is a group or a account */
-} SAM_GROUP_MEMBER;
-
-typedef struct sam_account_enum {
- DOM_SID sid;
- char *account_name;
- char *full_name;
- char *account_desc;
- uint16 acct_ctrl;
-} SAM_ACCOUNT_ENUM;
-
-typedef struct sam_group_enum {
- DOM_SID sid;
- char *group_name;
- char *group_desc;
- uint16 group_ctrl;
-} SAM_GROUP_ENUM;
-
-
-/* bits for group_ctrl: to spezify if the group is global group or alias */
-#define GCB_LOCAL_GROUP 0x0001
-#define GCB_ALIAS_GROUP (GCB_LOCAL_GROUP |GCB_BUILTIN)
-#define GCB_GLOBAL_GROUP 0x0002
-#define GCB_BUILTIN 0x1000
-
-typedef struct sam_context
-{
- struct sam_methods *methods;
- TALLOC_CTX *mem_ctx;
-
- void (*free_fn)(struct sam_context **);
-} SAM_CONTEXT;
-
-typedef struct sam_methods
-{
- struct sam_context *parent;
- struct sam_methods *next;
- struct sam_methods *prev;
- const char *backendname;
- const char *domain_name;
- DOM_SID domain_sid;
- void *private_data;
-
- /* General API */
-
- NTSTATUS (*sam_get_sec_desc) (const struct sam_methods *, const NT_USER_TOKEN *access_token, const DOM_SID *sid, SEC_DESC **sd);
- NTSTATUS (*sam_set_sec_desc) (const struct sam_methods *, const NT_USER_TOKEN *access_token, const DOM_SID *sid, const SEC_DESC *sd);
-
- NTSTATUS (*sam_lookup_sid) (const struct sam_methods *, const NT_USER_TOKEN *access_token, TALLOC_CTX *mem_ctx, const DOM_SID *sid, char **name, uint32 *type);
- NTSTATUS (*sam_lookup_name) (const struct sam_methods *, const NT_USER_TOKEN *access_token, const char *name, DOM_SID *sid, uint32 *type);
-
- /* Domain API */
-
- NTSTATUS (*sam_update_domain) (const struct sam_methods *, const SAM_DOMAIN_HANDLE *domain);
- NTSTATUS (*sam_get_domain_handle) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint32 access_desired, SAM_DOMAIN_HANDLE **domain);
-
- /* Account API */
-
- NTSTATUS (*sam_create_account) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *account_name, uint16 acct_ctrl, SAM_ACCOUNT_HANDLE **account);
- NTSTATUS (*sam_add_account) (const struct sam_methods *, const SAM_ACCOUNT_HANDLE *account);
- NTSTATUS (*sam_update_account) (const struct sam_methods *, const SAM_ACCOUNT_HANDLE *account);
- NTSTATUS (*sam_delete_account) (const struct sam_methods *, const SAM_ACCOUNT_HANDLE *account);
- NTSTATUS (*sam_enum_accounts) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint16 acct_ctrl, uint32 *account_count, SAM_ACCOUNT_ENUM **accounts);
-
- NTSTATUS (*sam_get_account_by_sid) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *accountsid, SAM_ACCOUNT_HANDLE **account);
- NTSTATUS (*sam_get_account_by_name) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *name, SAM_ACCOUNT_HANDLE **account);
-
- /* Group API */
-
- NTSTATUS (*sam_create_group) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *group_name, uint16 group_ctrl, SAM_GROUP_HANDLE **group);
- NTSTATUS (*sam_add_group) (const struct sam_methods *, const SAM_GROUP_HANDLE *group);
- NTSTATUS (*sam_update_group) (const struct sam_methods *, const SAM_GROUP_HANDLE *group);
- NTSTATUS (*sam_delete_group) (const struct sam_methods *, const SAM_GROUP_HANDLE *group);
- NTSTATUS (*sam_enum_groups) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint16 group_ctrl, uint32 *groups_count, SAM_GROUP_ENUM **groups);
- NTSTATUS (*sam_get_group_by_sid) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *groupsid, SAM_GROUP_HANDLE **group);
- NTSTATUS (*sam_get_group_by_name) (const struct sam_methods *, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *name, SAM_GROUP_HANDLE **group);
-
- NTSTATUS (*sam_add_member_to_group) (const struct sam_methods *, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member);
- NTSTATUS (*sam_delete_member_from_group) (const struct sam_methods *, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member);
- NTSTATUS (*sam_enum_groupmembers) (const struct sam_methods *, const SAM_GROUP_HANDLE *group, uint32 *members_count, SAM_GROUP_MEMBER **members);
-
- NTSTATUS (*sam_get_groups_of_sid) (const struct sam_methods *, const NT_USER_TOKEN *access_token, const DOM_SID **sids, uint16 group_ctrl, uint32 *group_count, SAM_GROUP_ENUM **groups);
-
- void (*free_private_data)(void **);
-} SAM_METHODS;
-
-typedef NTSTATUS (*sam_init_function)(SAM_METHODS *, const char *);
-
-struct sam_init_function_entry {
- char *module_name;
- /* Function to create a member of the sam_methods list */
- sam_init_function init;
-};
-
-typedef struct sam_backend_entry {
- char *module_name;
- char *module_params;
- char *domain_name;
- DOM_SID *domain_sid;
-} SAM_BACKEND_ENTRY;
-
-
-#endif /* _SAM_H */
#define MAX_HOURS_LEN 32
-/*
- * window during which we must talk to the PDC to avoid
- * sam sync delays; expressed in seconds (15 minutes is the
- * default period for SAM replication under Windows NT 4.0
- */
-#define SAM_SYNC_WINDOW 900
-
-
#ifndef MAXSUBAUTHS
#define MAXSUBAUTHS 15 /* max sub authorities in a SID */
#endif
-#define VERSION "post3.0-HEAD"
+#define VERSION "3.0alpha22cvs"
+++ /dev/null
-/*
- Unix SMB/Netbios implementation.
- Version 1.9.
- Groupname handling
- Copyright (C) Jeremy Allison 1998.
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-/*
- * UNIX gid and Local or Domain SID resolution. This module resolves
- * only those entries in the map files, it is *NOT* responsible for
- * resolving UNIX groups not listed: that is an entirely different
- * matter, altogether...
- */
-
-/*
- *
- *
-
- format of the file is:
-
- unixname NT Group name
- unixname Domain Admins (well-known Domain Group)
- unixname DOMAIN_NAME\NT Group name
- unixname OTHER_DOMAIN_NAME\NT Group name
- unixname DOMAIN_NAME\Domain Admins (well-known Domain Group)
- ....
-
- if the DOMAIN_NAME\ component is left off, then your own domain is assumed.
-
- *
- *
- */
-
-
-#include "includes.h"
-extern int DEBUGLEVEL;
-
-extern fstring global_myworkgroup;
-extern DOM_SID global_member_sid;
-extern fstring global_sam_name;
-extern DOM_SID global_sam_sid;
-extern DOM_SID global_sid_S_1_5_20;
-
-/*******************************************************************
- converts UNIX uid to an NT User RID. NOTE: IS SOMETHING SPECIFIC TO SAMBA
- ********************************************************************/
-static uid_t pwdb_user_rid_to_uid(uint32 user_rid)
-{
- return ((user_rid & (~RID_TYPE_USER))- 1000)/RID_MULTIPLIER;
-}
-
-/*******************************************************************
- converts NT Group RID to a UNIX uid. NOTE: IS SOMETHING SPECIFIC TO SAMBA
- ********************************************************************/
-static uint32 pwdb_group_rid_to_gid(uint32 group_rid)
-{
- return ((group_rid & (~RID_TYPE_GROUP))- 1000)/RID_MULTIPLIER;
-}
-
-/*******************************************************************
- converts NT Alias RID to a UNIX uid. NOTE: IS SOMETHING SPECIFIC TO SAMBA
- ********************************************************************/
-static uint32 pwdb_alias_rid_to_gid(uint32 alias_rid)
-{
- return ((alias_rid & (~RID_TYPE_ALIAS))- 1000)/RID_MULTIPLIER;
-}
-
-/*******************************************************************
- converts NT Group RID to a UNIX uid. NOTE: IS SOMETHING SPECIFIC TO SAMBA
- ********************************************************************/
-static uint32 pwdb_gid_to_group_rid(uint32 gid)
-{
- uint32 grp_rid = ((((gid)*RID_MULTIPLIER) + 1000) | RID_TYPE_GROUP);
- return grp_rid;
-}
-
-/******************************************************************
- converts UNIX gid to an NT Alias RID. NOTE: IS SOMETHING SPECIFIC TO SAMBA
- ********************************************************************/
-static uint32 pwdb_gid_to_alias_rid(uint32 gid)
-{
- uint32 alias_rid = ((((gid)*RID_MULTIPLIER) + 1000) | RID_TYPE_ALIAS);
- return alias_rid;
-}
-
-/*******************************************************************
- converts UNIX uid to an NT User RID. NOTE: IS SOMETHING SPECIFIC TO SAMBA
- ********************************************************************/
-static uint32 pwdb_uid_to_user_rid(uint32 uid)
-{
- uint32 user_rid = ((((uid)*RID_MULTIPLIER) + 1000) | RID_TYPE_USER);
- return user_rid;
-}
-
-/******************************************************************
- converts SID + SID_NAME_USE type to a UNIX id. the Domain SID is,
- and can only be, our own SID.
- ********************************************************************/
-static BOOL pwdb_sam_sid_to_unixid(DOM_SID *sid, uint8 type, uint32 *id)
-{
- DOM_SID tmp_sid;
- uint32 rid;
-
- sid_copy(&tmp_sid, sid);
- sid_split_rid(&tmp_sid, &rid);
- if (!sid_equal(&global_sam_sid, &tmp_sid))
- {
- return False;
- }
-
- switch (type)
- {
- case SID_NAME_USER:
- {
- *id = pwdb_user_rid_to_uid(rid);
- return True;
- }
- case SID_NAME_ALIAS:
- {
- *id = pwdb_alias_rid_to_gid(rid);
- return True;
- }
- case SID_NAME_DOM_GRP:
- case SID_NAME_WKN_GRP:
- {
- *id = pwdb_group_rid_to_gid(rid);
- return True;
- }
- }
- return False;
-}
-
-/******************************************************************
- converts UNIX gid + SID_NAME_USE type to a SID. the Domain SID is,
- and can only be, our own SID.
- ********************************************************************/
-static BOOL pwdb_unixid_to_sam_sid(uint32 id, uint8 type, DOM_SID *sid)
-{
- sid_copy(sid, &global_sam_sid);
- switch (type)
- {
- case SID_NAME_USER:
- {
- sid_append_rid(sid, pwdb_uid_to_user_rid(id));
- return True;
- }
- case SID_NAME_ALIAS:
- {
- sid_append_rid(sid, pwdb_gid_to_alias_rid(id));
- return True;
- }
- case SID_NAME_DOM_GRP:
- case SID_NAME_WKN_GRP:
- {
- sid_append_rid(sid, pwdb_gid_to_group_rid(id));
- return True;
- }
- }
- return False;
-}
-
-/*******************************************************************
- Decides if a RID is a well known RID.
- ********************************************************************/
-static BOOL pwdb_rid_is_well_known(uint32 rid)
-{
- return (rid < 1000);
-}
-
-/*******************************************************************
- determines a rid's type. NOTE: THIS IS SOMETHING SPECIFIC TO SAMBA
- ********************************************************************/
-static uint32 pwdb_rid_type(uint32 rid)
-{
- /* lkcl i understand that NT attaches an enumeration to a RID
- * such that it can be identified as either a user, group etc
- * type: SID_ENUM_TYPE.
- */
- if (pwdb_rid_is_well_known(rid))
- {
- /*
- * The only well known user RIDs are DOMAIN_USER_RID_ADMIN
- * and DOMAIN_USER_RID_GUEST.
- */
- if (rid == DOMAIN_USER_RID_ADMIN || rid == DOMAIN_USER_RID_GUEST)
- {
- return RID_TYPE_USER;
- }
- if (DOMAIN_GROUP_RID_ADMINS <= rid && rid <= DOMAIN_GROUP_RID_GUESTS)
- {
- return RID_TYPE_GROUP;
- }
- if (BUILTIN_ALIAS_RID_ADMINS <= rid && rid <= BUILTIN_ALIAS_RID_REPLICATOR)
- {
- return RID_TYPE_ALIAS;
- }
- }
- return (rid & RID_TYPE_MASK);
-}
-
-/*******************************************************************
- checks whether rid is a user rid. NOTE: THIS IS SOMETHING SPECIFIC TO SAMBA
- ********************************************************************/
-BOOL pwdb_rid_is_user(uint32 rid)
-{
- return pwdb_rid_type(rid) == RID_TYPE_USER;
-}
-
-/**************************************************************************
- Groupname map functionality. The code loads a groupname map file and
- (currently) loads it into a linked list. This is slow and memory
- hungry, but can be changed into a more efficient storage format
- if the demands on it become excessive.
-***************************************************************************/
-
-typedef struct name_map
-{
- ubi_slNode next;
- DOM_NAME_MAP grp;
-
-} name_map_entry;
-
-static ubi_slList groupname_map_list;
-static ubi_slList aliasname_map_list;
-static ubi_slList ntusrname_map_list;
-
-static void delete_name_entry(name_map_entry *gmep)
-{
- if (gmep->grp.nt_name)
- {
- free(gmep->grp.nt_name);
- }
- if (gmep->grp.nt_domain)
- {
- free(gmep->grp.nt_domain);
- }
- if (gmep->grp.unix_name)
- {
- free(gmep->grp.unix_name);
- }
- free((char*)gmep);
-}
-
-/**************************************************************************
- Delete all the entries in the name map list.
-***************************************************************************/
-
-static void delete_map_list(ubi_slList *map_list)
-{
- name_map_entry *gmep;
-
- while ((gmep = (name_map_entry *)ubi_slRemHead(map_list )) != NULL)
- {
- delete_name_entry(gmep);
- }
-}
-
-
-/**************************************************************************
- makes a group sid out of a domain sid and a _unix_ gid.
-***************************************************************************/
-static BOOL make_mydomain_sid(DOM_NAME_MAP *grp, DOM_MAP_TYPE type)
-{
- int ret = False;
- fstring sid_str;
-
- if (!map_domain_name_to_sid(&grp->sid, &(grp->nt_domain)))
- {
- DEBUG(0,("make_mydomain_sid: unknown domain %s\n",
- grp->nt_domain));
- return False;
- }
-
- if (sid_equal(&grp->sid, &global_sid_S_1_5_20))
- {
- /*
- * only builtin aliases are recognised in S-1-5-20
- */
- DEBUG(10,("make_mydomain_sid: group %s in builtin domain\n",
- grp->nt_name));
-
- if (lookup_builtin_alias_name(grp->nt_name, "BUILTIN", &grp->sid, &grp->type) != 0x0)
- {
- DEBUG(0,("unix group %s mapped to an unrecognised BUILTIN domain name %s\n",
- grp->unix_name, grp->nt_name));
- return False;
- }
- ret = True;
- }
- else if (lookup_wk_user_name(grp->nt_name, grp->nt_domain, &grp->sid, &grp->type) == 0x0)
- {
- if (type != DOM_MAP_USER)
- {
- DEBUG(0,("well-known NT user %s\\%s listed in wrong map file\n",
- grp->nt_domain, grp->nt_name));
- return False;
- }
- ret = True;
- }
- else if (lookup_wk_group_name(grp->nt_name, grp->nt_domain, &grp->sid, &grp->type) == 0x0)
- {
- if (type != DOM_MAP_DOMAIN)
- {
- DEBUG(0,("well-known NT group %s\\%s listed in wrong map file\n",
- grp->nt_domain, grp->nt_name));
- return False;
- }
- ret = True;
- }
- else
- {
- switch (type)
- {
- case DOM_MAP_USER:
- {
- grp->type = SID_NAME_USER;
- break;
- }
- case DOM_MAP_DOMAIN:
- {
- grp->type = SID_NAME_DOM_GRP;
- break;
- }
- case DOM_MAP_LOCAL:
- {
- grp->type = SID_NAME_ALIAS;
- break;
- }
- }
-
- ret = pwdb_unixid_to_sam_sid(grp->unix_id, grp->type, &grp->sid);
- }
-
- sid_to_string(sid_str, &grp->sid);
- DEBUG(10,("nt name %s\\%s gid %d mapped to %s\n",
- grp->nt_domain, grp->nt_name, grp->unix_id, sid_str));
- return ret;
-}
-
-/**************************************************************************
- makes a group sid out of an nt domain, nt group name or a unix group name.
-***************************************************************************/
-static BOOL unix_name_to_nt_name_info(DOM_NAME_MAP *map, DOM_MAP_TYPE type)
-{
- /*
- * Attempt to get the unix gid_t for this name.
- */
-
- DEBUG(5,("unix_name_to_nt_name_info: unix_name:%s\n", map->unix_name));
-
- if (type == DOM_MAP_USER)
- {
- const struct passwd *pwptr = Get_Pwnam(map->unix_name, False);
- if (pwptr == NULL)
- {
- DEBUG(0,("unix_name_to_nt_name_info: Get_Pwnam for user %s\
-failed. Error was %s.\n", map->unix_name, strerror(errno) ));
- return False;
- }
-
- map->unix_id = (uint32)pwptr->pw_uid;
- }
- else
- {
- struct group *gptr = getgrnam(map->unix_name);
- if (gptr == NULL)
- {
- DEBUG(0,("unix_name_to_nt_name_info: getgrnam for group %s\
-failed. Error was %s.\n", map->unix_name, strerror(errno) ));
- return False;
- }
-
- map->unix_id = (uint32)gptr->gr_gid;
- }
-
- DEBUG(5,("unix_name_to_nt_name_info: unix gid:%d\n", map->unix_id));
-
- /*
- * Now map the name to an NT SID+RID.
- */
-
- if (map->nt_domain != NULL && !strequal(map->nt_domain, global_sam_name))
- {
- /* Must add client-call lookup code here, to
- * resolve remote domain's sid and the group's rid,
- * in that domain.
- *
- * NOTE: it is _incorrect_ to put code here that assumes
- * we are responsible for lookups for foriegn domains' RIDs.
- *
- * for foriegn domains for which we are *NOT* the PDC, all
- * we can be responsible for is the unix gid_t to which
- * the foriegn SID+rid maps to, on this _local_ machine.
- * we *CANNOT* make any short-cuts or assumptions about
- * RIDs in a foriegn domain.
- */
-
- if (!map_domain_name_to_sid(&map->sid, &(map->nt_domain)))
- {
- DEBUG(0,("unix_name_to_nt_name_info: no known sid for %s\n",
- map->nt_domain));
- return False;
- }
- }
-
- return make_mydomain_sid(map, type);
-}
-
-static BOOL make_name_entry(name_map_entry **new_ep,
- char *nt_domain, char *nt_group, char *unix_group,
- DOM_MAP_TYPE type)
-{
- /*
- * Create the list entry and add it onto the list.
- */
-
- DEBUG(5,("make_name_entry:%s,%s,%s\n", nt_domain, nt_group, unix_group));
-
- (*new_ep) = (name_map_entry *)malloc(sizeof(name_map_entry));
- if ((*new_ep) == NULL)
- {
- DEBUG(0,("make_name_entry: malloc fail for name_map_entry.\n"));
- return False;
- }
-
- ZERO_STRUCTP(*new_ep);
-
- (*new_ep)->grp.nt_name = strdup(nt_group );
- (*new_ep)->grp.nt_domain = strdup(nt_domain );
- (*new_ep)->grp.unix_name = strdup(unix_group);
-
- if ((*new_ep)->grp.nt_name == NULL ||
- (*new_ep)->grp.unix_name == NULL)
- {
- DEBUG(0,("make_name_entry: malloc fail for names in name_map_entry.\n"));
- delete_name_entry((*new_ep));
- return False;
- }
-
- /*
- * look up the group names, make the Group-SID and unix gid
- */
-
- if (!unix_name_to_nt_name_info(&(*new_ep)->grp, type))
- {
- delete_name_entry((*new_ep));
- return False;
- }
-
- return True;
-}
-
-/**************************************************************************
- Load a name map file. Sets last accessed timestamp.
-***************************************************************************/
-static ubi_slList *load_name_map(DOM_MAP_TYPE type)
-{
- static time_t groupmap_file_last_modified = (time_t)0;
- static time_t aliasmap_file_last_modified = (time_t)0;
- static time_t ntusrmap_file_last_modified = (time_t)0;
- static BOOL initialised_group = False;
- static BOOL initialised_alias = False;
- static BOOL initialised_ntusr = False;
- char *groupname_map_file = lp_groupname_map();
- char *aliasname_map_file = lp_aliasname_map();
- char *ntusrname_map_file = lp_ntusrname_map();
-
- FILE *fp;
- char *s;
- pstring buf;
- name_map_entry *new_ep;
-
- time_t *file_last_modified = NULL;
- int *initialised = NULL;
- char *map_file = NULL;
- ubi_slList *map_list = NULL;
-
- switch (type)
- {
- case DOM_MAP_DOMAIN:
- {
- file_last_modified = &groupmap_file_last_modified;
- initialised = &initialised_group;
- map_file = groupname_map_file;
- map_list = &groupname_map_list;
-
- break;
- }
- case DOM_MAP_LOCAL:
- {
- file_last_modified = &aliasmap_file_last_modified;
- initialised = &initialised_alias;
- map_file = aliasname_map_file;
- map_list = &aliasname_map_list;
-
- break;
- }
- case DOM_MAP_USER:
- {
- file_last_modified = &ntusrmap_file_last_modified;
- initialised = &initialised_ntusr;
- map_file = ntusrname_map_file;
- map_list = &ntusrname_map_list;
-
- break;
- }
- }
-
- if (!(*initialised))
- {
- DEBUG(10,("initialising map %s\n", map_file));
- ubi_slInitList(map_list);
- (*initialised) = True;
- }
-
- if (!*map_file)
- {
- return map_list;
- }
-
- /*
- * Load the file.
- */
-
- fp = open_file_if_modified(map_file, "r", file_last_modified);
- if (!fp)
- {
- return map_list;
- }
-
- /*
- * Throw away any previous list.
- */
- delete_map_list(map_list);
-
- DEBUG(4,("load_name_map: Scanning name map %s\n",map_file));
-
- while ((s = fgets_slash(buf, sizeof(buf), fp)) != NULL)
- {
- pstring unixname;
- pstring nt_name;
- fstring nt_domain;
- fstring ntname;
- char *p;
-
- DEBUG(10,("Read line |%s|\n", s));
-
- memset(nt_name, 0, sizeof(nt_name));
-
- if (!*s || strchr("#;",*s))
- continue;
-
- if (!next_token(&s,unixname, "\t\n\r=", sizeof(unixname)))
- continue;
-
- if (!next_token(&s,nt_name, "\t\n\r=", sizeof(nt_name)))
- continue;
-
- trim_string(unixname, " ", " ");
- trim_string(nt_name, " ", " ");
-
- if (!*nt_name)
- continue;
-
- if (!*unixname)
- continue;
-
- p = strchr(nt_name, '\\');
-
- if (p == NULL)
- {
- memset(nt_domain, 0, sizeof(nt_domain));
- fstrcpy(ntname, nt_name);
- }
- else
- {
- *p = 0;
- p++;
- fstrcpy(nt_domain, nt_name);
- fstrcpy(ntname , p);
- }
-
- if (make_name_entry(&new_ep, nt_domain, ntname, unixname, type))
- {
- ubi_slAddTail(map_list, (ubi_slNode *)new_ep);
- DEBUG(5,("unixname = %s, ntname = %s\\%s type = %d\n",
- new_ep->grp.unix_name,
- new_ep->grp.nt_domain,
- new_ep->grp.nt_name,
- new_ep->grp.type));
- }
- }
-
- DEBUG(10,("load_name_map: Added %ld entries to name map.\n",
- ubi_slCount(map_list)));
-
- fclose(fp);
-
- return map_list;
-}
-
-static void copy_grp_map_entry(DOM_NAME_MAP *grp, const DOM_NAME_MAP *from)
-{
- sid_copy(&grp->sid, &from->sid);
- grp->unix_id = from->unix_id;
- grp->nt_name = from->nt_name;
- grp->nt_domain = from->nt_domain;
- grp->unix_name = from->unix_name;
- grp->type = from->type;
-}
-
-#if 0
-/***********************************************************
- Lookup unix name.
-************************************************************/
-static BOOL map_unixname(DOM_MAP_TYPE type,
- char *unixname, DOM_NAME_MAP *grp_info)
-{
- name_map_entry *gmep;
- ubi_slList *map_list;
-
- /*
- * Initialise and load if not already loaded.
- */
- map_list = load_name_map(type);
-
- for (gmep = (name_map_entry *)ubi_slFirst(map_list);
- gmep != NULL;
- gmep = (name_map_entry *)ubi_slNext(gmep ))
- {
- if (strequal(gmep->grp.unix_name, unixname))
- {
- copy_grp_map_entry(grp_info, &gmep->grp);
- DEBUG(7,("map_unixname: Mapping unix name %s to nt group %s.\n",
- gmep->grp.unix_name, gmep->grp.nt_name ));
- return True;
- }
- }
-
- return False;
-}
-
-#endif
-
-/***********************************************************
- Lookup nt name.
-************************************************************/
-static BOOL map_ntname(DOM_MAP_TYPE type, char *ntname, char *ntdomain,
- DOM_NAME_MAP *grp_info)
-{
- name_map_entry *gmep;
- ubi_slList *map_list;
-
- /*
- * Initialise and load if not already loaded.
- */
- map_list = load_name_map(type);
-
- for (gmep = (name_map_entry *)ubi_slFirst(map_list);
- gmep != NULL;
- gmep = (name_map_entry *)ubi_slNext(gmep ))
- {
- if (strequal(gmep->grp.nt_name , ntname) &&
- strequal(gmep->grp.nt_domain, ntdomain))
- {
- copy_grp_map_entry(grp_info, &gmep->grp);
- DEBUG(7,("map_ntname: Mapping unix name %s to nt name %s.\n",
- gmep->grp.unix_name, gmep->grp.nt_name ));
- return True;
- }
- }
-
- return False;
-}
-
-
-/***********************************************************
- Lookup by SID
-************************************************************/
-static BOOL map_sid(DOM_MAP_TYPE type,
- DOM_SID *psid, DOM_NAME_MAP *grp_info)
-{
- name_map_entry *gmep;
- ubi_slList *map_list;
-
- /*
- * Initialise and load if not already loaded.
- */
- map_list = load_name_map(type);
-
- for (gmep = (name_map_entry *)ubi_slFirst(map_list);
- gmep != NULL;
- gmep = (name_map_entry *)ubi_slNext(gmep ))
- {
- if (sid_equal(&gmep->grp.sid, psid))
- {
- copy_grp_map_entry(grp_info, &gmep->grp);
- DEBUG(7,("map_sid: Mapping unix name %s to nt name %s.\n",
- gmep->grp.unix_name, gmep->grp.nt_name ));
- return True;
- }
- }
-
- return False;
-}
-
-/***********************************************************
- Lookup by gid_t.
-************************************************************/
-static BOOL map_unixid(DOM_MAP_TYPE type, uint32 unix_id, DOM_NAME_MAP *grp_info)
-{
- name_map_entry *gmep;
- ubi_slList *map_list;
-
- /*
- * Initialise and load if not already loaded.
- */
- map_list = load_name_map(type);
-
- for (gmep = (name_map_entry *)ubi_slFirst(map_list);
- gmep != NULL;
- gmep = (name_map_entry *)ubi_slNext(gmep ))
- {
- fstring sid_str;
- sid_to_string(sid_str, &gmep->grp.sid);
- DEBUG(10,("map_unixid: enum entry unix group %s %d nt %s %s\n",
- gmep->grp.unix_name, gmep->grp.unix_id, gmep->grp.nt_name, sid_str));
- if (gmep->grp.unix_id == unix_id)
- {
- copy_grp_map_entry(grp_info, &gmep->grp);
- DEBUG(7,("map_unixid: Mapping unix name %s to nt name %s type %d\n",
- gmep->grp.unix_name, gmep->grp.nt_name, gmep->grp.type));
- return True;
- }
- }
-
- return False;
-}
-
-/***********************************************************
- *
- * Call four functions to resolve unix group ids and either
- * local group SIDs or domain group SIDs listed in the local group
- * or domain group map files.
- *
- * Note that it is *NOT* the responsibility of these functions to
- * resolve entries that are not in the map files.
- *
- * Any SID can be in the map files (i.e from any Domain).
- *
- ***********************************************************/
-
-#if 0
-
-/***********************************************************
- Lookup a UNIX Group entry by name.
-************************************************************/
-BOOL map_unix_group_name(char *group_name, DOM_NAME_MAP *grp_info)
-{
- return map_unixname(DOM_MAP_DOMAIN, group_name, grp_info);
-}
-
-/***********************************************************
- Lookup a UNIX Alias entry by name.
-************************************************************/
-BOOL map_unix_alias_name(char *alias_name, DOM_NAME_MAP *grp_info)
-{
- return map_unixname(DOM_MAP_LOCAL, alias_name, grp_info);
-}
-
-/***********************************************************
- Lookup an Alias name entry
-************************************************************/
-BOOL map_nt_alias_name(char *ntalias_name, char *nt_domain, DOM_NAME_MAP *grp_info)
-{
- return map_ntname(DOM_MAP_LOCAL, ntalias_name, nt_domain, grp_info);
-}
-
-/***********************************************************
- Lookup a Group entry
-************************************************************/
-BOOL map_nt_group_name(char *ntgroup_name, char *nt_domain, DOM_NAME_MAP *grp_info)
-{
- return map_ntname(DOM_MAP_DOMAIN, ntgroup_name, nt_domain, grp_info);
-}
-
-#endif
-
-/***********************************************************
- Lookup a Username entry by name.
-************************************************************/
-static BOOL map_nt_username(char *nt_name, char *nt_domain, DOM_NAME_MAP *grp_info)
-{
- return map_ntname(DOM_MAP_USER, nt_name, nt_domain, grp_info);
-}
-
-/***********************************************************
- Lookup a Username entry by SID.
-************************************************************/
-static BOOL map_username_sid(DOM_SID *sid, DOM_NAME_MAP *grp_info)
-{
- return map_sid(DOM_MAP_USER, sid, grp_info);
-}
-
-/***********************************************************
- Lookup a Username SID entry by uid.
-************************************************************/
-static BOOL map_username_uid(uid_t gid, DOM_NAME_MAP *grp_info)
-{
- return map_unixid(DOM_MAP_USER, (uint32)gid, grp_info);
-}
-
-/***********************************************************
- Lookup an Alias SID entry by name.
-************************************************************/
-BOOL map_alias_sid(DOM_SID *psid, DOM_NAME_MAP *grp_info)
-{
- return map_sid(DOM_MAP_LOCAL, psid, grp_info);
-}
-
-/***********************************************************
- Lookup a Group entry by sid.
-************************************************************/
-BOOL map_group_sid(DOM_SID *psid, DOM_NAME_MAP *grp_info)
-{
- return map_sid(DOM_MAP_DOMAIN, psid, grp_info);
-}
-
-/***********************************************************
- Lookup an Alias SID entry by gid_t.
-************************************************************/
-static BOOL map_alias_gid(gid_t gid, DOM_NAME_MAP *grp_info)
-{
- return map_unixid(DOM_MAP_LOCAL, (uint32)gid, grp_info);
-}
-
-/***********************************************************
- Lookup a Group SID entry by gid_t.
-************************************************************/
-static BOOL map_group_gid( gid_t gid, DOM_NAME_MAP *grp_info)
-{
- return map_unixid(DOM_MAP_DOMAIN, (uint32)gid, grp_info);
-}
-
-
-/************************************************************************
- Routine to look up User details by UNIX name
-*************************************************************************/
-BOOL lookupsmbpwnam(const char *unix_usr_name, DOM_NAME_MAP *grp)
-{
- uid_t uid;
- DEBUG(10,("lookupsmbpwnam: unix user name %s\n", unix_usr_name));
- if (nametouid(unix_usr_name, &uid))
- {
- return lookupsmbpwuid(uid, grp);
- }
- else
- {
- return False;
- }
-}
-
-/************************************************************************
- Routine to look up a remote nt name
-*************************************************************************/
-static BOOL lookup_remote_ntname(const char *ntname, DOM_SID *sid, uint8 *type)
-{
- struct cli_state cli;
- POLICY_HND lsa_pol;
- fstring srv_name;
- extern struct ntuser_creds *usr_creds;
- struct ntuser_creds usr;
-
- BOOL res3 = True;
- BOOL res4 = True;
- uint32 num_sids;
- DOM_SID *sids;
- uint8 *types;
- char *names[1];
-
- usr_creds = &usr;
-
- ZERO_STRUCT(usr);
- pwd_set_nullpwd(&usr.pwd);
-
- DEBUG(5,("lookup_remote_ntname: %s\n", ntname));
-
- if (!cli_connect_serverlist(&cli, lp_passwordserver()))
- {
- return False;
- }
-
- names[0] = ntname;
-
- fstrcpy(srv_name, "\\\\");
- fstrcat(srv_name, cli.desthost);
- strupper(srv_name);
-
- /* lookup domain controller; receive a policy handle */
- res3 = res3 ? lsa_open_policy( srv_name,
- &lsa_pol, True) : False;
-
- /* send lsa lookup sids call */
- res4 = res3 ? lsa_lookup_names( &lsa_pol,
- 1, names,
- &sids, &types, &num_sids) : False;
-
- res3 = res3 ? lsa_close(&lsa_pol) : False;
-
- if (res4 && res3 && sids != NULL && types != NULL)
- {
- sid_copy(sid, &sids[0]);
- *type = types[0];
- }
- else
- {
- res3 = False;
- }
- if (types != NULL)
- {
- free(types);
- }
-
- if (sids != NULL)
- {
- free(sids);
- }
-
- return res3 && res4;
-}
-
-/************************************************************************
- Routine to look up a remote nt name
-*************************************************************************/
-static BOOL get_sid_and_type(const char *fullntname, uint8 expected_type,
- DOM_NAME_MAP *gmep)
-{
- /*
- * check with the PDC to see if it owns the name. if so,
- * the SID is resolved with the PDC database.
- */
-
- if (lp_server_role() == ROLE_DOMAIN_MEMBER)
- {
- if (lookup_remote_ntname(fullntname, &gmep->sid, &gmep->type))
- {
- if (sid_front_equal(&gmep->sid, &global_member_sid) &&
- strequal(gmep->nt_domain, global_myworkgroup) &&
- gmep->type == expected_type)
- {
- return True;
- }
- return False;
- }
- }
-
- /*
- * ... otherwise, it's one of ours. map the sid ourselves,
- * which can only happen in our own SAM database.
- */
-
- if (!strequal(gmep->nt_domain, global_sam_name))
- {
- return False;
- }
- if (!pwdb_unixid_to_sam_sid(gmep->unix_id, gmep->type, &gmep->sid))
- {
- return False;
- }
-
- return True;
-}
-
-/*
- * used by lookup functions below
- */
-
-static fstring nt_name;
-static fstring unix_name;
-static fstring nt_domain;
-
-/*************************************************************************
- looks up a uid, returns User Information.
-*************************************************************************/
-BOOL lookupsmbpwuid(uid_t uid, DOM_NAME_MAP *gmep)
-{
- DEBUG(10,("lookupsmbpwuid: unix uid %d\n", uid));
- if (map_username_uid(uid, gmep))
- {
- return True;
- }
-#if 0
- if (lp_server_role() != ROLE_DOMAIN_NONE)
-#endif
- {
- gmep->nt_name = nt_name;
- gmep->unix_name = unix_name;
- gmep->nt_domain = nt_domain;
-
- gmep->unix_id = (uint32)uid;
-
- /*
- * ok, assume it's one of ours. then double-check it
- * if we are a member of a domain
- */
-
- gmep->type = SID_NAME_USER;
- fstrcpy(gmep->nt_name, uidtoname(uid));
- fstrcpy(gmep->unix_name, gmep->nt_name);
-
- /*
- * here we should do a LsaLookupNames() call
- * to check the status of the name with the PDC.
- * if the PDC know nothing of the name, it's ours.
- */
-
- if (lp_server_role() == ROLE_DOMAIN_MEMBER)
- {
-#if 0
- lsa_lookup_names(global_myworkgroup, gmep->nt_name, &gmep->sid...);
-#endif
- }
-
- /*
- * ok, it's one of ours.
- */
-
- gmep->nt_domain = global_sam_name;
- pwdb_unixid_to_sam_sid(gmep->unix_id, gmep->type, &gmep->sid);
-
- return True;
- }
-
- /* oops. */
-
- return False;
-}
-
-/*************************************************************************
- looks up by NT name, returns User Information.
-*************************************************************************/
-BOOL lookupsmbpwntnam(const char *fullntname, DOM_NAME_MAP *gmep)
-{
- DEBUG(10,("lookupsmbpwntnam: nt user name %s\n", fullntname));
-
- if (!split_domain_name(fullntname, nt_domain, nt_name))
- {
- return False;
- }
-
- if (map_nt_username(nt_name, nt_domain, gmep))
- {
- return True;
- }
- if (lp_server_role() != ROLE_DOMAIN_NONE)
- {
- uid_t uid;
- gmep->nt_name = nt_name;
- gmep->unix_name = unix_name;
- gmep->nt_domain = nt_domain;
-
- /*
- * ok, it's one of ours. we therefore "create" an nt user named
- * after the unix user. this is the point where "appliance mode"
- * should get its teeth in, as unix users won't really exist,
- * they will only be numbers...
- */
-
- gmep->type = SID_NAME_USER;
- fstrcpy(gmep->unix_name, gmep->nt_name);
- if (!nametouid(gmep->unix_name, &uid))
- {
- return False;
- }
- gmep->unix_id = (uint32)uid;
-
- return get_sid_and_type(fullntname, gmep->type, gmep);
- }
-
- /* oops. */
-
- return False;
-}
-
-/*************************************************************************
- looks up by RID, returns User Information.
-*************************************************************************/
-BOOL lookupsmbpwsid(DOM_SID *sid, DOM_NAME_MAP *gmep)
-{
- fstring sid_str;
- sid_to_string(sid_str, sid);
- DEBUG(10,("lookupsmbpwsid: nt sid %s\n", sid_str));
-
- if (map_username_sid(sid, gmep))
- {
- return True;
- }
- if (lp_server_role() != ROLE_DOMAIN_NONE)
- {
- gmep->nt_name = nt_name;
- gmep->unix_name = unix_name;
- gmep->nt_domain = nt_domain;
-
- /*
- * here we should do a LsaLookupNames() call
- * to check the status of the name with the PDC.
- * if the PDC know nothing of the name, it's ours.
- */
-
- if (lp_server_role() == ROLE_DOMAIN_MEMBER)
- {
-#if 0
- if (lookup_remote_sid(global_myworkgroup, gmep->sid, gmep->nt_name, gmep->nt_domain...);
-#endif
- }
-
- /*
- * ok, it's one of ours. we therefore "create" an nt user named
- * after the unix user. this is the point where "appliance mode"
- * should get its teeth in, as unix users won't really exist,
- * they will only be numbers...
- */
-
- gmep->type = SID_NAME_USER;
- sid_copy(&gmep->sid, sid);
- if (!pwdb_sam_sid_to_unixid(&gmep->sid, gmep->type, &gmep->unix_id))
- {
- return False;
- }
- fstrcpy(gmep->nt_name, uidtoname((uid_t)gmep->unix_id));
- fstrcpy(gmep->unix_name, gmep->nt_name);
- gmep->nt_domain = global_sam_name;
-
- return True;
- }
-
- /* oops. */
-
- return False;
-}
-
-/************************************************************************
- Routine to look up group / alias / well-known group RID by UNIX name
-*************************************************************************/
-BOOL lookupsmbgrpnam(const char *unix_grp_name, DOM_NAME_MAP *grp)
-{
- gid_t gid;
- DEBUG(10,("lookupsmbgrpnam: unix user group %s\n", unix_grp_name));
- if (nametogid(unix_grp_name, &gid))
- {
- return lookupsmbgrpgid(gid, grp);
- }
- else
- {
- return False;
- }
-}
-
-/*************************************************************************
- looks up a SID, returns name map entry
-*************************************************************************/
-BOOL lookupsmbgrpsid(DOM_SID *sid, DOM_NAME_MAP *gmep)
-{
- fstring sid_str;
- sid_to_string(sid_str, sid);
- DEBUG(10,("lookupsmbgrpsid: nt sid %s\n", sid_str));
-
- if (map_alias_sid(sid, gmep))
- {
- return True;
- }
- if (map_group_sid(sid, gmep))
- {
- return True;
- }
- if (lp_server_role() != ROLE_DOMAIN_NONE)
- {
- gmep->nt_name = nt_name;
- gmep->unix_name = unix_name;
- gmep->nt_domain = nt_domain;
-
- /*
- * here we should do a LsaLookupNames() call
- * to check the status of the name with the PDC.
- * if the PDC know nothing of the name, it's ours.
- */
-
- if (lp_server_role() == ROLE_DOMAIN_MEMBER)
- {
-#if 0
- lsa_lookup_sids(global_myworkgroup, gmep->sid, gmep->nt_name, gmep->nt_domain...);
-#endif
- }
-
- /*
- * ok, it's one of ours. we therefore "create" an nt group or
- * alias name named after the unix group. this is the point
- * where "appliance mode" should get its teeth in, as unix
- * groups won't really exist, they will only be numbers...
- */
-
- /* name is not explicitly mapped
- * with map files or the PDC
- * so we are responsible for it...
- */
-
- if (lp_server_role() == ROLE_DOMAIN_MEMBER)
- {
- /* ... as a LOCAL group. */
- gmep->type = SID_NAME_ALIAS;
- }
- else
- {
- /* ... as a DOMAIN group. */
- gmep->type = SID_NAME_DOM_GRP;
- }
-
- sid_copy(&gmep->sid, sid);
- if (!pwdb_sam_sid_to_unixid(&gmep->sid, gmep->type, &gmep->unix_id))
- {
- return False;
- }
- fstrcpy(gmep->nt_name, gidtoname((gid_t)gmep->unix_id));
- fstrcpy(gmep->unix_name, gmep->nt_name);
- gmep->nt_domain = global_sam_name;
-
- return True;
- }
-
- /* oops */
- return False;
-}
-
-/*************************************************************************
- looks up a gid, returns RID and type local, domain or well-known domain group
-*************************************************************************/
-BOOL lookupsmbgrpgid(gid_t gid, DOM_NAME_MAP *gmep)
-{
- DEBUG(10,("lookupsmbgrpgid: unix gid %d\n", (int)gid));
- if (map_alias_gid(gid, gmep))
- {
- return True;
- }
- if (map_group_gid(gid, gmep))
- {
- return True;
- }
- if (lp_server_role() != ROLE_DOMAIN_NONE)
- {
- gmep->nt_name = nt_name;
- gmep->unix_name = unix_name;
- gmep->nt_domain = nt_domain;
-
- gmep->unix_id = (uint32)gid;
-
- /*
- * here we should do a LsaLookupNames() call
- * to check the status of the name with the PDC.
- * if the PDC know nothing of the name, it's ours.
- */
-
- if (lp_server_role() == ROLE_DOMAIN_MEMBER)
- {
-#if 0
- if (lsa_lookup_names(global_myworkgroup, gmep->nt_name, &gmep->sid...);
- {
- return True;
- }
-#endif
- }
-
- /*
- * ok, it's one of ours. we therefore "create" an nt group or
- * alias name named after the unix group. this is the point
- * where "appliance mode" should get its teeth in, as unix
- * groups won't really exist, they will only be numbers...
- */
-
- /* name is not explicitly mapped
- * with map files or the PDC
- * so we are responsible for it...
- */
-
- if (lp_server_role() == ROLE_DOMAIN_MEMBER)
- {
- /* ... as a LOCAL group. */
- gmep->type = SID_NAME_ALIAS;
- }
- else
- {
- /* ... as a DOMAIN group. */
- gmep->type = SID_NAME_DOM_GRP;
- }
- fstrcpy(gmep->nt_name, gidtoname(gid));
- fstrcpy(gmep->unix_name, gmep->nt_name);
-
- return get_sid_and_type(gmep->nt_name, gmep->type, gmep);
- }
-
- /* oops */
- return False;
-}
-
/**
- * Set an entry in the cache file. If there's no such
- * one, then add it.
+ * Add one entry to the cache file.
+ * (it part of tridge's proposed API)
*
* @param key string that represents a key of this entry
* @param value text representation value being cached
* false on the attempt's failure
**/
-BOOL gencache_set(const char *keystr, const char *value, time_t timeout)
+BOOL gencache_add(const char *keystr, const char *value, time_t timeout)
{
int ret;
TDB_DATA keybuf, databuf;
= %s (%d seconds %s)\n", keybuf.dptr, value, ctime(&timeout),
(int)(timeout - time(NULL)), timeout > time(NULL) ? "ahead" : "in the past"));
- ret = tdb_store(cache, keybuf, databuf, 0);
+ ret = tdb_store(cache, keybuf, databuf, TDB_INSERT);
SAFE_FREE(valstr);
SAFE_FREE(keybuf.dptr);
SAFE_FREE(databuf.dptr);
/**
* Set existing entry to the cache file.
+ * (it part of tridge's proposed API)
*
* @param key string that represents a key of this entry
* @param value text representation value being cached
* false on the attempt's failure
**/
-BOOL gencache_set_only(const char *keystr, const char *valstr, time_t timeout)
+BOOL gencache_set(const char *keystr, const char *valstr, time_t timeout)
{
int ret = -1;
TDB_DATA keybuf, databuf;
/**
* Delete one entry from the cache file.
+ * (it part of tridge's proposed API)
*
* @param key string that represents a key of this entry
*
/**
* Get existing entry from the cache file.
+ * (it part of tridge's proposed API)
*
* @param key string that represents a key of this entry
* @param value buffer that is allocated and filled with the entry value
- * buffer's disposing must be done outside
+ * buffer's disposing is done outside
* @param timeout pointer to a time_t that is filled with entry's
* timeout
*
*
* @param fn pointer to the function that will be supplied with each single
* matching cache entry (key, value and timeout) as an arguments
- * @param data void pointer to an arbitrary data that is passed directly to the fn
- * function on each call
* @param keystr_pattern pattern the existing entries' keys are matched to
*
**/
-void gencache_iterate(void (*fn)(const char* key, const char *value, time_t timeout, void* dptr),
- void* data, const char* keystr_pattern)
+void gencache_iterate(void (*fn)(const char* key, const char *value, time_t timeout),
+ const char* keystr_pattern)
{
TDB_LIST_NODE *node, *first_node;
TDB_DATA databuf;
if (!gencache_init()) return;
- DEBUG(5, ("Searching cache keys with pattern %s\n", keystr_pattern));
+ DEBUG(5, ("Searching cache keys with pattern %s", keystr_pattern));
node = tdb_search_keys(cache, keystr_pattern);
first_node = node;
DEBUG(10, ("Calling function with arguments (key = %s, value = %s, timeout = %s)\n",
keystr, valstr, ctime(&timeout)));
- fn(keystr, valstr, timeout, data);
+ fn(keystr, valstr, timeout);
SAFE_FREE(valstr);
SAFE_FREE(entry);
tdb_search_list_free(first_node);
}
-
Unix SMB/CIFS implementation.
minimal iconv implementation
Copyright (C) Andrew Tridgell 2001
- Copyright (C) Jelmer Vernooij 2002
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
static size_t ascii_push(void *,char **, size_t *, char **, size_t *);
static size_t utf8_pull(void *,char **, size_t *, char **, size_t *);
static size_t utf8_push(void *,char **, size_t *, char **, size_t *);
+static size_t weird_pull(void *,char **, size_t *, char **, size_t *);
+static size_t weird_push(void *,char **, size_t *, char **, size_t *);
static size_t ucs2hex_pull(void *,char **, size_t *, char **, size_t *);
static size_t ucs2hex_push(void *,char **, size_t *, char **, size_t *);
static size_t iconv_copy(void *,char **, size_t *, char **, size_t *);
-struct charset_functions builtin_functions[] = {
- {"UCS-2LE", iconv_copy, iconv_copy},
- {"UTF8", utf8_pull, utf8_push},
- {"ASCII", ascii_pull, ascii_push},
- {"UCS2-HEX", ucs2hex_pull, ucs2hex_push},
- {NULL, NULL, NULL}
+/*
+ for each charset we have a function that pulls from that charset to
+ a ucs2 buffer, and a function that pushes to a ucs2 buffer
+*/
+static struct {
+ char *name;
+ size_t (*pull)(void *, char **inbuf, size_t *inbytesleft,
+ char **outbuf, size_t *outbytesleft);
+ size_t (*push)(void *, char **inbuf, size_t *inbytesleft,
+ char **outbuf, size_t *outbytesleft);
+} charsets[] = {
+ {"UCS-2LE", iconv_copy, iconv_copy},
+ {"UTF8", utf8_pull, utf8_push},
+ {"ASCII", ascii_pull, ascii_push},
+ {"WEIRD", weird_pull, weird_push},
+ {"UCS2-HEX", ucs2hex_pull, ucs2hex_push},
+ {NULL, NULL, NULL}
};
-static struct charset_functions *charsets = NULL;
-
-BOOL smb_register_charset(struct charset_functions *funcs)
-{
- struct charset_functions *c = charsets;
-
- DEBUG(5, ("Attempting to register new charset %s\n", funcs->name));
- /* Check whether we already have this charset... */
- while(c) {
- if(!strcasecmp(c->name, funcs->name)){
- DEBUG(2, ("Duplicate charset %s, not registering\n", funcs->name));
- return False;
- }
- c = c->next;
- }
-
- funcs->next = funcs->prev = NULL;
- DEBUG(5, ("Registered charset %s\n", funcs->name));
- DLIST_ADD(charsets, funcs);
- return True;
-}
-
-void lazy_initialize_iconv(void)
-{
- static BOOL initialized = False;
- int i;
-
- if (!initialized) {
- initialized = True;
- for(i = 0; builtin_functions[i].name; i++)
- smb_register_charset(&builtin_functions[i]);
- }
-}
/* if there was an error then reset the internal state,
this ensures that we don't have a shift state remaining for
smb_iconv_t smb_iconv_open(const char *tocode, const char *fromcode)
{
smb_iconv_t ret;
- struct charset_functions *from, *to;
-
- lazy_initialize_iconv();
- from = charsets;
- to = charsets;
+ int from, to;
ret = (smb_iconv_t)malloc(sizeof(*ret));
if (!ret) {
return ret;
}
- while (from) {
- if (strcasecmp(from->name, fromcode) == 0) break;
- from = from->next;
+ for (from=0; charsets[from].name; from++) {
+ if (strcasecmp(charsets[from].name, fromcode) == 0) break;
}
-
- while (to) {
- if (strcasecmp(to->name, tocode) == 0) break;
- to = to->next;
+ for (to=0; charsets[to].name; to++) {
+ if (strcasecmp(charsets[to].name, tocode) == 0) break;
}
#ifdef HAVE_NATIVE_ICONV
- if (!from) {
+ if (!charsets[from].name) {
ret->pull = sys_iconv;
ret->cd_pull = iconv_open("UCS-2LE", fromcode);
if (ret->cd_pull == (iconv_t)-1) goto failed;
}
-
- if (!to) {
+ if (!charsets[to].name) {
ret->push = sys_iconv;
ret->cd_push = iconv_open(tocode, "UCS-2LE");
if (ret->cd_push == (iconv_t)-1) goto failed;
}
#else
- if (!from || !to) {
+ if (!charsets[from].name || !charsets[to].name) {
goto failed;
}
#endif
/* check for conversion to/from ucs2 */
- if (strcasecmp(fromcode, "UCS-2LE") == 0 && to) {
- ret->direct = to->push;
+ if (from == 0 && charsets[to].name) {
+ ret->direct = charsets[to].push;
return ret;
}
- if (strcasecmp(tocode, "UCS-2LE") == 0 && from) {
- ret->direct = from->pull;
+ if (to == 0 && charsets[from].name) {
+ ret->direct = charsets[from].pull;
return ret;
}
#ifdef HAVE_NATIVE_ICONV
- if (strcasecmp(fromcode, "UCS-2LE") == 0) {
+ if (from == 0) {
ret->direct = sys_iconv;
ret->cd_direct = ret->cd_push;
ret->cd_push = NULL;
return ret;
}
- if (strcasecmp(tocode, "UCS-2LE") == 0) {
+ if (to == 0) {
ret->direct = sys_iconv;
ret->cd_direct = ret->cd_pull;
ret->cd_pull = NULL;
#endif
/* the general case has to go via a buffer */
- if (!ret->pull) ret->pull = from->pull;
- if (!ret->push) ret->push = to->push;
+ if (!ret->pull) ret->pull = charsets[from].pull;
+ if (!ret->push) ret->push = charsets[to].push;
return ret;
failed:
}
+/* the "weird" character set is very useful for testing multi-byte
+ support and finding bugs. Don't use on a production system!
+*/
+static struct {
+ char from;
+ char *to;
+ int len;
+} weird_table[] = {
+ {'q', "^q^", 3},
+ {'Q', "^Q^", 3},
+ {0, NULL}
+};
+
+static size_t weird_pull(void *cd, char **inbuf, size_t *inbytesleft,
+ char **outbuf, size_t *outbytesleft)
+{
+ while (*inbytesleft >= 1 && *outbytesleft >= 2) {
+ int i;
+ int done = 0;
+ for (i=0;weird_table[i].from;i++) {
+ if (strncmp((*inbuf),
+ weird_table[i].to,
+ weird_table[i].len) == 0) {
+ if (*inbytesleft < weird_table[i].len) {
+ DEBUG(0,("ERROR: truncated weird string\n"));
+ /* smb_panic("weird_pull"); */
+
+ } else {
+ (*outbuf)[0] = weird_table[i].from;
+ (*outbuf)[1] = 0;
+ (*inbytesleft) -= weird_table[i].len;
+ (*outbytesleft) -= 2;
+ (*inbuf) += weird_table[i].len;
+ (*outbuf) += 2;
+ done = 1;
+ break;
+ }
+ }
+ }
+ if (done) continue;
+ (*outbuf)[0] = (*inbuf)[0];
+ (*outbuf)[1] = 0;
+ (*inbytesleft) -= 1;
+ (*outbytesleft) -= 2;
+ (*inbuf) += 1;
+ (*outbuf) += 2;
+ }
+
+ if (*inbytesleft > 0) {
+ errno = E2BIG;
+ return -1;
+ }
+
+ return 0;
+}
+
+static size_t weird_push(void *cd, char **inbuf, size_t *inbytesleft,
+ char **outbuf, size_t *outbytesleft)
+{
+ int ir_count=0;
+
+ while (*inbytesleft >= 2 && *outbytesleft >= 1) {
+ int i;
+ int done=0;
+ for (i=0;weird_table[i].from;i++) {
+ if ((*inbuf)[0] == weird_table[i].from &&
+ (*inbuf)[1] == 0) {
+ if (*outbytesleft < weird_table[i].len) {
+ DEBUG(0,("No room for weird character\n"));
+ /* smb_panic("weird_push"); */
+ } else {
+ memcpy(*outbuf, weird_table[i].to,
+ weird_table[i].len);
+ (*inbytesleft) -= 2;
+ (*outbytesleft) -= weird_table[i].len;
+ (*inbuf) += 2;
+ (*outbuf) += weird_table[i].len;
+ done = 1;
+ break;
+ }
+ }
+ }
+ if (done) continue;
+
+ (*outbuf)[0] = (*inbuf)[0];
+ if ((*inbuf)[1]) ir_count++;
+ (*inbytesleft) -= 2;
+ (*outbytesleft) -= 1;
+ (*inbuf) += 2;
+ (*outbuf) += 1;
+ }
+
+ if (*inbytesleft == 1) {
+ errno = EINVAL;
+ return -1;
+ }
+
+ if (*inbytesleft > 1) {
+ errno = E2BIG;
+ return -1;
+ }
+
+ return ir_count;
+}
+
static size_t iconv_copy(void *cd, char **inbuf, size_t *inbytesleft,
char **outbuf, size_t *outbytesleft)
{
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- module loading system
-
- Copyright (C) Jelmer Vernooij 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-#ifdef HAVE_DLOPEN
-NTSTATUS smb_load_module(const char *module_name)
-{
- void *handle;
- init_module_function *init;
- NTSTATUS nt_status;
-
- /* Always try to use LAZY symbol resolving; if the plugin has
- * backwards compatibility, there might be symbols in the
- * plugin referencing to old (removed) functions
- */
- handle = sys_dlopen(module_name, RTLD_LAZY);
-
- if(!handle) {
- DEBUG(0, ("Error loading module '%s': %s\n", module_name, sys_dlerror()));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- init = sys_dlsym(handle, "init_module");
-
- if(!init) {
- DEBUG(0, ("Error trying to resolve symbol 'init_module' in %s: %s\n", module_name, sys_dlerror()));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- nt_status = init();
-
- DEBUG(2, ("Module '%s' loaded\n", module_name));
-
- return nt_status;
-}
-
-/* Load all modules in list and return number of
- * modules that has been successfully loaded */
-int smb_load_modules(const char **modules)
-{
- int i;
- int success = 0;
-
- for(i = 0; modules[i]; i++){
- if(NT_STATUS_IS_OK(smb_load_module(modules[i]))) {
- success++;
- }
- }
-
- DEBUG(2, ("%d modules successfully loaded\n", success));
-
- return success;
-}
-
-#else /* HAVE_DLOPEN */
-
-NTSTATUS smb_load_module(const char *module_name)
-{
- DEBUG(0,("This samba executable has not been build with plugin support"));
- return NT_STATUS_NOT_SUPPORTED;
-}
-
-int smb_load_modules(const char **modules)
-{
- DEBUG(0,("This samba executable has not been build with plugin support"));
- return -1;
-}
-
-#endif /* HAVE_DLOPEN */
#ifndef HAVE_TIMEGM
/*
- yes, I know this looks insane, but its really needed. The function in the
- Linux timegm() manpage does not work on solaris.
+ see the timegm man page on linux
*/
time_t timegm(struct tm *tm)
{
- struct tm tm2, tm3;
- time_t t;
-
- tm2 = *tm;
-
- t = mktime(&tm2);
- tm3 = *localtime(&t);
- tm2 = *tm;
- tm2.tm_isdst = tm3.tm_isdst;
- t = mktime(&tm2);
- t -= TimeDiff(t);
-
- return t;
+ time_t ret;
+ char *tz;
+ char *tzvar;
+
+ tz = getenv("TZ");
+ putenv("TZ=");
+ tzset();
+ ret = mktime(tm);
+ if (tz) {
+ asprintf(&tzvar, "TZ=%s", tz);
+ putenv(tzvar);
+ safe_free(tzvar);
+ } else {
+ putenv("TZ");
+ }
+ tzset();
+ return ret;
}
#endif
return True;
}
-
-#define IPSTR_LIST_SEP ","
-
-/**
- * Add ip string representation to ipstr list. Used also
- * as part of @function ipstr_list_make
- *
- * @param ipstr_list pointer to string containing ip list;
- * MUST BE already allocated and IS reallocated if necessary
- * @param ipstr_size pointer to current size of ipstr_list (might be changed
- * as a result of reallocation)
- * @param ip IP address which is to be added to list
- * @return pointer to string appended with new ip and possibly
- * reallocated to new length
- **/
-
-char* ipstr_list_add(char** ipstr_list, const struct in_addr *ip)
-{
- char* new_ipstr = NULL;
-
- /* arguments checking */
- if (!ipstr_list || !ip) return NULL;
-
- /* attempt to convert ip to a string and append colon separator to it */
- if (*ipstr_list) {
- asprintf(&new_ipstr, "%s%s%s", *ipstr_list, IPSTR_LIST_SEP,inet_ntoa(*ip));
- SAFE_FREE(*ipstr_list);
- } else {
- asprintf(&new_ipstr, "%s", inet_ntoa(*ip));
- }
- *ipstr_list = new_ipstr;
- return *ipstr_list;
-}
-
-
-/**
- * Allocate and initialise an ipstr list using ip adresses
- * passed as arguments.
- *
- * @param ipstr_list pointer to string meant to be allocated and set
- * @param ip_list array of ip addresses to place in the list
- * @param ip_count number of addresses stored in ip_list
- * @return pointer to allocated ip string
- **/
-
-char* ipstr_list_make(char** ipstr_list, const struct in_addr* ip_list, int ip_count)
-{
- int i;
-
- /* arguments checking */
- if (!ip_list && !ipstr_list) return 0;
-
- *ipstr_list = NULL;
-
- /* process ip addresses given as arguments */
- for (i = 0; i < ip_count; i++)
- *ipstr_list = ipstr_list_add(ipstr_list, &ip_list[i]);
-
- return (*ipstr_list);
-}
-
-
-/**
- * Parse given ip string list into array of ip addresses
- * (as in_addr structures)
- *
- * @param ipstr ip string list to be parsed
- * @param ip_list pointer to array of ip addresses which is
- * allocated by this function and must be freed by caller
- * @return number of succesfully parsed addresses
- **/
-
-int ipstr_list_parse(const char* ipstr_list, struct in_addr** ip_list)
-{
- fstring token_str;
- int count;
-
- if (!ipstr_list || !ip_list) return 0;
-
- for (*ip_list = NULL, count = 0;
- next_token(&ipstr_list, token_str, IPSTR_LIST_SEP, FSTRING_LEN);
- count++) {
-
- struct in_addr addr;
-
- /* convert single token to ip address */
- if ( (addr.s_addr = inet_addr(token_str)) == INADDR_NONE )
- break;
-
- /* prepare place for another in_addr structure */
- *ip_list = Realloc(*ip_list, (count + 1) * sizeof(struct in_addr));
- if (!*ip_list) return -1;
-
- (*ip_list)[count] = addr;
- }
-
- return count;
-}
-
-
-/**
- * Safely free ip string list
- *
- * @param ipstr_list ip string list to be freed
- **/
-
-void ipstr_list_free(char* ipstr_list)
-{
- SAFE_FREE(ipstr_list);
-}
-
-
-/***********************************************************
- Unescape a URL encoded string, in place.
-***********************************************************/
-
-void rfc1738_unescape(char *buf)
-{
- char *p=buf;
-
- while ((p=strchr_m(p,'+')))
- *p = ' ';
-
- p = buf;
-
- while (p && *p && (p=strchr_m(p,'%'))) {
- int c1 = p[1];
- int c2 = p[2];
-
- if (c1 >= '0' && c1 <= '9')
- c1 = c1 - '0';
- else if (c1 >= 'A' && c1 <= 'F')
- c1 = 10 + c1 - 'A';
- else if (c1 >= 'a' && c1 <= 'f')
- c1 = 10 + c1 - 'a';
- else {p++; continue;}
-
- if (c2 >= '0' && c2 <= '9')
- c2 = c2 - '0';
- else if (c2 >= 'A' && c2 <= 'F')
- c2 = 10 + c2 - 'A';
- else if (c2 >= 'a' && c2 <= 'f')
- c2 = 10 + c2 - 'a';
- else {p++; continue;}
-
- *p = (c1<<4) | c2;
-
- memmove(p+1, p+3, strlen(p+3)+1);
- p++;
- }
-}
-
#ifdef VALGRIND
size_t valgrind_strlen(const char *s)
{
return count;
}
#endif
+
return atype;
}
-/*
-translated the GROUP_CTRL Flags to GroupType (groupType)
-*/
-uint32 ads_gcb2gtype(uint16 gcb)
-{
- uint32 gtype = 0x00000000;
-
- if (gcb & GCB_ALIAS_GROUP) gtype |= GTYPE_SECURITY_BUILTIN_LOCAL_GROUP;
- else if(gcb & GCB_LOCAL_GROUP) gtype |= GTYPE_SECURITY_DOMAIN_LOCAL_GROUP;
- if (gcb & GCB_GLOBAL_GROUP) gtype |= GTYPE_SECURITY_GLOBAL_GROUP;
-
- return gtype;
-}
-
-/*
-translated the GroupType (groupType) to GROUP_CTRL Flags
-*/
-uint16 ads_gtype2gcb(uint32 gtype)
-{
- uint16 gcb = 0x0000;
-
- switch(gtype) {
- case GTYPE_SECURITY_BUILTIN_LOCAL_GROUP:
- gcb = GCB_ALIAS_GROUP;
- break;
- case GTYPE_SECURITY_DOMAIN_LOCAL_GROUP:
- gcb = GCB_LOCAL_GROUP;
- break;
- case GTYPE_SECURITY_GLOBAL_GROUP:
- gcb = GCB_GLOBAL_GROUP;
- break;
-
- case GTYPE_DISTRIBUTION_GLOBAL_GROUP:
- gcb = GCB_GLOBAL_GROUP;
- break;
- case GTYPE_DISTRIBUTION_DOMAIN_LOCAL_GROUP:
- gcb = GCB_LOCAL_GROUP;
- break;
- case GTYPE_DISTRIBUTION_UNIVERSAL_GROUP:
- gcb = GCB_GLOBAL_GROUP;
- break;
- }
-
- return gcb;
-}
-
/*
get the accountType from the groupType
*/
krb5_ticket *tkt = NULL;
krb5_data salt;
krb5_encrypt_block eblock;
- int ret, i;
+ int ret;
krb5_keyblock * key;
krb5_principal host_princ;
char *host_princ_s;
fstring myname;
char *password_s;
krb5_data password;
- krb5_enctype *enctypes = NULL;
if (!secrets_init()) {
DEBUG(1,("secrets_init failed\n"));
ret = krb5_set_default_realm(context, ads->auth.realm);
if (ret) {
DEBUG(1,("krb5_set_default_realm failed (%s)\n", error_message(ret)));
+ ads_destroy(&ads);
return NT_STATUS_LOGON_FAILURE;
}
return NT_STATUS_NO_MEMORY;
}
- if ((ret = krb5_get_permitted_enctypes(context, &enctypes))) {
- DEBUG(1,("krb5_get_permitted_enctypes failed (%s)\n",
- error_message(ret)));
+ krb5_use_enctype(context, &eblock, ENCTYPE_DES_CBC_MD5);
+
+ ret = krb5_string_to_key(context, &eblock, key, &password, &salt);
+ if (ret) {
+ DEBUG(1,("krb5_string_to_key failed (%s)\n", error_message(ret)));
return NT_STATUS_LOGON_FAILURE;
}
- /* we need to setup a auth context with each possible encoding type in turn */
- for (i=0;enctypes[i];i++) {
- krb5_use_enctype(context, &eblock, enctypes[i]);
-
- ret = krb5_string_to_key(context, &eblock, key, &password, &salt);
- if (ret) {
- continue;
- }
+ krb5_auth_con_setuseruserkey(context, auth_context, key);
- krb5_auth_con_setuseruserkey(context, auth_context, key);
+ packet.length = ticket->length;
+ packet.data = (krb5_pointer)ticket->data;
- packet.length = ticket->length;
- packet.data = (krb5_pointer)ticket->data;
-
- if (!(ret = krb5_rd_req(context, &auth_context, &packet,
- NULL, keytab, NULL, &tkt))) {
- krb5_free_ktypes(context, enctypes);
- break;
- }
- }
+#if 0
+ file_save("/tmp/ticket.dat", ticket->data, ticket->length);
+#endif
- if (!enctypes[i]) {
+ if ((ret = krb5_rd_req(context, &auth_context, &packet,
+ NULL, keytab, NULL, &tkt))) {
DEBUG(3,("krb5_rd_req with auth failed (%s)\n",
error_message(ret)));
return NT_STATUS_LOGON_FAILURE;
}
-#if 0
- file_save("/tmp/ticket.dat", ticket->data, ticket->length);
-#endif
-
-
if (tkt->enc_part2) {
*auth_data = data_blob(tkt->enc_part2->authorization_data[0]->contents,
tkt->enc_part2->authorization_data[0]->length);
#include "includes.h"
-#include "../include/libsmb_internal.h"
+/*
+ * Define this to get the real SMBCFILE and SMBCSRV structures
+ */
+#define _SMBC_INTERNAL
+#include "../include/libsmbclient.h"
struct smbc_compat_fdlist {
SMBCFILE * file;
return (int) file;
}
-int smbc_list_print_jobs(const char *purl, smbc_list_print_job_fn fn)
+int smbc_list_print_jobs(const char *purl, smbc_get_print_job_info fn)
{
return statcont->list_print_jobs(statcont, purl, fn);
}
#include "includes.h"
-#include "../include/libsmb_internal.h"
+#include "../include/libsmbclient.h"
/*
* Functions exported by libsmb_cache.c that we need here
}
/*
- * Remove a server from the cached server list it's unused.
+ * Remove a server from the list server_table if it's unused.
* On success, 0 is returned. 1 is returned if the server could not be removed.
*
* Also useable outside libsmbclient
SMBCFILE * file;
/* are we being fooled ? */
- if (!context || !context->internal ||
- !context->internal->_initialized || !srv) return 1;
+ if (!context || !context->_initialized || !srv) return 1;
/* Check all open files/directories for a relation with this server */
- for (file = context->internal->_files; file; file=file->next) {
+ for (file = context->_files; file; file=file->next) {
if (file->srv == srv) {
/* Still used */
DEBUG(3, ("smbc_remove_usused_server: %p still used by %p.\n",
}
}
- DLIST_REMOVE(context->internal->_servers, srv);
+ DLIST_REMOVE(context->_servers, srv);
cli_shutdown(&srv->cli);
SMBCFILE *file = NULL;
int fd;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL; /* Best I can think of ... */
return NULL;
file->offset = 0;
file->file = True;
- DLIST_ADD(context->internal->_files, file);
+ DLIST_ADD(context->_files, file);
return file;
}
static SMBCFILE *smbc_creat_ctx(SMBCCTX *context, const char *path, mode_t mode)
{
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return NULL;
{
int ret;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
DEBUG(4, ("smbc_read(%p, %d)\n", file, (int)count));
- if (!file || !DLIST_CONTAINS(context->internal->_files, file)) {
+ if (!file || !DLIST_CONTAINS(context->_files, file)) {
errno = EBADF;
return -1;
{
int ret;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || context->_initialized) {
errno = EINVAL;
return -1;
}
- if (!file || !DLIST_CONTAINS(context->internal->_files, file)) {
+ if (!file || !DLIST_CONTAINS(context->_files, file)) {
errno = EBADF;
return -1;
{
SMBCSRV *srv;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
}
- if (!file || !DLIST_CONTAINS(context->internal->_files, file)) {
+ if (!file || !DLIST_CONTAINS(context->_files, file)) {
errno = EBADF;
return -1;
* from the server cache if unused */
errno = smbc_errno(context, &file->srv->cli);
srv = file->srv;
- DLIST_REMOVE(context->internal->_files, file);
+ DLIST_REMOVE(context->_files, file);
SAFE_FREE(file->fname);
SAFE_FREE(file);
context->callbacks.remove_unused_server_fn(context, srv);
* from the server cache if unused */
errno = smbc_errno(context, &file->srv->cli);
srv = file->srv;
- DLIST_REMOVE(context->internal->_files, file);
+ DLIST_REMOVE(context->_files, file);
SAFE_FREE(file->fname);
SAFE_FREE(file);
context->callbacks.remove_unused_server_fn(context, srv);
return -1;
}
- DLIST_REMOVE(context->internal->_files, file);
+ DLIST_REMOVE(context->_files, file);
SAFE_FREE(file->fname);
SAFE_FREE(file);
SMB_INO_T *ino)
{
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
pstring path;
SMBCSRV *srv = NULL;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || context->_initialized) {
errno = EINVAL; /* Best I can think of ... */
return -1;
pstring path1, path2;
SMBCSRV *srv = NULL;
- if (!ocontext || !ncontext ||
- !ocontext->internal || !ncontext->internal ||
- !ocontext->internal->_initialized ||
- !ncontext->internal->_initialized) {
+ if (!ocontext || !ncontext ||
+ !ocontext->_initialized || !ncontext->_initialized) {
errno = EINVAL; /* Best I can think of ... */
return -1;
{
size_t size;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
}
- if (!file || !DLIST_CONTAINS(context->internal->_files, file)) {
+ if (!file || !DLIST_CONTAINS(context->_files, file)) {
errno = EBADF;
return -1;
ino_t smbc_inode(SMBCCTX *context, const char *name)
{
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
uint16 mode = 0;
SMB_INO_T ino = 0;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL; /* Best I can think of ... */
return -1;
uint16 mode;
SMB_INO_T ino = 0;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
}
- if (!file || !DLIST_CONTAINS(context->internal->_files, file)) {
+ if (!file || !DLIST_CONTAINS(context->_files, file)) {
errno = EBADF;
return -1;
ZERO_STRUCTP(dirent);
+ ZERO_STRUCTP(dirent);
+
+
if (dir->dir_list == NULL) {
dir->dir_list = malloc(sizeof(struct smbc_dir_list));
dirent_type = SMBC_FILE_SHARE; /* FIXME, error? */
break;
}
+ ZERO_STRUCTP(dir->dir_list);
+
}
else dirent_type = dir->dir_type;
SMBCSRV *srv = NULL;
SMBCFILE *dir = NULL;
struct in_addr rem_ip;
+ int slot = 0;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return NULL;
return NULL;
}
+ ZERO_STRUCTP(dir->dir_end);
dir->srv = srv;
}
- DLIST_ADD(context->internal->_files, dir);
+ DLIST_ADD(context->_files, dir);
return dir;
}
static int smbc_closedir_ctx(SMBCCTX *context, SMBCFILE *dir)
{
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
}
- if (!dir || !DLIST_CONTAINS(context->internal->_files, dir)) {
+ if (!dir || !DLIST_CONTAINS(context->_files, dir)) {
errno = EBADF;
return -1;
smbc_remove_dir(dir); /* Clean it up */
- DLIST_REMOVE(context->internal->_files, dir);
+ DLIST_REMOVE(context->_files, dir);
if (dir) {
/* Check that all is ok first ... */
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return NULL;
}
- if (!dir || !DLIST_CONTAINS(context->internal->_files, dir)) {
+ if (!dir || !DLIST_CONTAINS(context->_files, dir)) {
errno = EBADF;
return NULL;
/* Hmmm, do I even need to copy it? */
- memcpy(context->internal->_dirent, dirent, dirent->dirlen); /* Copy the dirent */
- dirp = (struct smbc_dirent *)context->internal->_dirent;
+ memcpy(context->_dirent, dirent, dirent->dirlen); /* Copy the dirent */
+ dirp = (struct smbc_dirent *)context->_dirent;
dirp->comment = (char *)(&dirp->name + dirent->namelen + 1);
dir->dir_next = dir->dir_next->next;
- return (struct smbc_dirent *)context->internal->_dirent;
+ return (struct smbc_dirent *)context->_dirent;
}
}
/* Check that all is ok first ... */
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
}
- if (!dir || !DLIST_CONTAINS(context->internal->_files, dir)) {
+ if (!dir || !DLIST_CONTAINS(context->_files, dir)) {
errno = EBADF;
return -1;
fstring server, share, user, password, workgroup;
pstring path;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
fstring server, share, user, password, workgroup;
pstring path;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
static off_t smbc_telldir_ctx(SMBCCTX *context, SMBCFILE *dir)
{
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
}
- if (!dir || !DLIST_CONTAINS(context->internal->_files, dir)) {
+ if (!dir || !DLIST_CONTAINS(context->_files, dir)) {
errno = EBADF;
return -1;
struct smbc_dirent *dirent = (struct smbc_dirent *)offset;
struct smbc_dir_list *list_ent = NULL;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
static int smbc_fstatdir_ctx(SMBCCTX *context, SMBCFILE *dir, struct stat *st)
{
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (context || !context->_initialized) {
errno = EINVAL;
return -1;
fstring server, share, user, password;
pstring path;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || context->_initialized) {
errno = EINVAL;
return NULL;
int bytes, saverr, tot_bytes = 0;
char buf[4096];
- if (!c_file || !c_file->internal->_initialized || !c_print ||
- !c_print->internal->_initialized) {
+ if (!c_file || !c_file->_initialized || !c_print ||
+ !c_print->_initialized) {
errno = EINVAL;
return -1;
* Routine to list print jobs on a printer share ...
*/
-static int smbc_list_print_jobs_ctx(SMBCCTX *context, const char *fname, smbc_list_print_job_fn fn)
+static int smbc_list_print_jobs_ctx(SMBCCTX *context, const char *fname, void (*fn)(struct print_job_info *))
{
SMBCSRV *srv;
fstring server, share, user, password, workgroup;
pstring path;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
}
- if (cli_print_queue(&srv->cli, (void (*)(struct print_job_info *))fn) < 0) {
+ if (cli_print_queue(&srv->cli, fn) < 0) {
errno = smbc_errno(context, &srv->cli);
return -1;
pstring path;
int err;
- if (!context || !context->internal ||
- !context->internal->_initialized) {
+ if (!context || !context->_initialized) {
errno = EINVAL;
return -1;
{
SMBCCTX * context;
- context = malloc(sizeof(SMBCCTX));
+ context = malloc(sizeof(*context));
if (!context) {
errno = ENOMEM;
return NULL;
}
-
+
ZERO_STRUCTP(context);
- context->internal = malloc(sizeof(struct smbc_internal_data));
- if (!context->internal) {
- errno = ENOMEM;
- return NULL;
- }
-
- ZERO_STRUCTP(context->internal);
-
-
/* ADD REASONABLE DEFAULTS */
context->debug = 0;
context->timeout = 20000; /* 20 seconds */
SMBCFILE * f;
DEBUG(1,("Performing aggressive shutdown.\n"));
- f = context->internal->_files;
+ f = context->_files;
while (f) {
context->close(context, f);
f = f->next;
}
- context->internal->_files = NULL;
+ context->_files = NULL;
/* First try to remove the servers the nice way. */
if (context->callbacks.purge_cached_fn(context)) {
SMBCSRV * s;
DEBUG(1, ("Could not purge all servers, Nice way shutdown failed.\n"));
- s = context->internal->_servers;
+ s = context->_servers;
while (s) {
cli_shutdown(&s->cli);
context->callbacks.remove_cached_srv_fn(context, s);
SAFE_FREE(s);
s = s->next;
}
- context->internal->_servers = NULL;
+ context->_servers = NULL;
}
}
else {
errno = EBUSY;
return 1;
}
- if (context->internal->_servers) {
+ if (context->_servers) {
DEBUG(1, ("Active servers in context, free_context failed.\n"));
errno = EBUSY;
return 1;
}
- if (context->internal->_files) {
+ if (context->_files) {
DEBUG(1, ("Active files in context, free_context failed.\n"));
errno = EBUSY;
return 1;
SAFE_FREE(context->user);
DEBUG(3, ("Context %p succesfully freed\n", context));
- SAFE_FREE(context->internal);
SAFE_FREE(context);
return 0;
}
int pid;
char *user = NULL, *home = NULL;
- if (!context || !context->internal) {
+ if (!context) {
errno = EBADF;
return NULL;
}
/* Do not initialise the same client twice */
- if (context->internal->_initialized) {
+ if (context->_initialized) {
return 0;
}
* FIXME: Should we check the function pointers here?
*/
- context->internal->_initialized = 1;
+ context->_initialized = 1;
return context;
}
/*
Unix SMB/CIFS implementation.
- NetBIOS name cache module on top of gencache mechanism.
-
- Copyright (C) Tim Potter 2002
- Copyright (C) Rafal Szczesniak 2002
+ NetBIOS name cache module.
+
+ Copyright (C) Tim Potter, 2002
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
#include "includes.h"
-#define NBTKEY_FMT "NBT/%s#%02X"
+static BOOL done_namecache_init;
+static BOOL enable_namecache;
+static TDB_CONTEXT *namecache_tdb;
+struct nc_value {
+ time_t expiry; /* When entry expires */
+ int count; /* Number of addresses */
+ struct in_addr ip_list[1]; /* Address list */
+};
-/**
- * Initialise namecache system. Function calls gencache
- * initialisation function to perform necessary actions
- *
- * @return true upon successful initialisation of the cache or
- * false on failure
- **/
+/* Initialise namecache system */
BOOL namecache_enable(void)
{
- /*
- * Check if name caching disabled by setting the name cache
- * timeout to zero.
- */
+ /* Check if we have been here before, or name caching disabled
+ by setting the name cache timeout to zero. */
+
+ if (done_namecache_init)
+ return False;
+
+ done_namecache_init = True;
if (lp_name_cache_timeout() == 0) {
- DEBUG(5, ("namecache_enable: disabling netbios name cache\n"));
+ DEBUG(5, ("namecache_init: disabling netbios name cache\n"));
return False;
}
- /* Init namecache by calling gencache initialisation */
+ /* Open namecache tdb in read/write or readonly mode */
- if (!gencache_init()) {
- DEBUG(2, ("namecache_enable: Couldn't initialise namecache on top of gencache.\n"));
+ namecache_tdb = tdb_open_log(
+ lock_path("namecache.tdb"), 0,
+ TDB_DEFAULT, O_RDWR | O_CREAT, 0644);
+
+ if (!namecache_tdb) {
+ DEBUG(5, ("namecache_init: could not open %s\n",
+ lock_path("namecache.tdb")));
return False;
}
- /* I leave it for now, though I don't think we really need this (mimir, 27.09.2002) */
- DEBUG(5, ("namecache_enable: enabling netbios namecache, timeout %d "
+ DEBUG(5, ("namecache_init: enabling netbios namecache, timeout %d "
"seconds\n", lp_name_cache_timeout()));
+ enable_namecache = True;
+
return True;
}
+/* Return a key for a name and name type. The caller must free
+ retval.dptr when finished. */
-/**
- * Shutdown namecache. Routine calls gencache close function
- * to safely close gencache file.
- *
- * @return true upon successful shutdown of the cache or
- * false on failure
- **/
-
-BOOL namecache_shutdown(void)
+static TDB_DATA namecache_key(const char *name, int name_type)
{
- if (!gencache_shutdown()) {
- DEBUG(2, ("namecache_shutdown: Couldn't close namecache on top of gencache.\n"));
- return False;
- }
-
- DEBUG(5, ("namecache_shutdown: netbios namecache closed successfully.\n"));
- return True;
-}
+ TDB_DATA retval;
+ char *keystr;
+ asprintf(&keystr, "%s#%02X", strupper_static(name), name_type);
-/**
- * Generates a key for netbios name lookups on basis of
- * netbios name and type.
- * The caller must free returned key string when finished.
- *
- * @param name netbios name string (case insensitive)
- * @param name_type netbios type of the name being looked up
- *
- * @return string consisted of uppercased name and appended
- * type number
- */
+ retval.dsize = strlen(keystr) + 1;
+ retval.dptr = keystr;
-static char* namecache_key(const char *name, int name_type)
+ return retval;
+}
+
+/* Return a data value for an IP list. The caller must free
+ retval.dptr when finished. */
+
+static TDB_DATA namecache_value(struct in_addr *ip_list, int num_names,
+ time_t expiry)
{
- char *keystr;
- asprintf(&keystr, NBTKEY_FMT, strupper_static(name), name_type);
+ TDB_DATA retval;
+ struct nc_value *value;
+ int size = sizeof(struct nc_value);
- return keystr;
-}
+ if (num_names > 0)
+ size += sizeof(struct in_addr) * (num_names-1);
+
+ value = (struct nc_value *)malloc(size);
+
+ memset(value, 0, size);
+
+ value->expiry = expiry;
+ value->count = num_names;
+ if (ip_list)
+ memcpy(value->ip_list, ip_list, sizeof(struct in_addr) * num_names);
-/**
- * Store a name(s) in the name cache
- *
- * @param name netbios names array
- * @param name_type integer netbios name type
- * @param num_names number of names being stored
- * @param ip_list array of in_addr structures containing
- * ip addresses being stored
- **/
+ retval.dptr = (char *)value;
+ retval.dsize = size;
-BOOL namecache_store(const char *name, int name_type,
- int num_names, struct in_addr *ip_list)
+ return retval;
+}
+
+/* Store a name in the name cache */
+
+void namecache_store(const char *name, int name_type,
+ int num_names, struct in_addr *ip_list)
{
+ TDB_DATA key, value;
time_t expiry;
- char *key, *value_string;
int i;
- /*
- * we use gecache call to avoid annoying debug messages about
- * initialised namecache again and again...
- */
- if (!gencache_init()) return False;
+ if (!enable_namecache)
+ return;
DEBUG(5, ("namecache_store: storing %d address%s for %s#%02x: ",
- num_names, num_names == 1 ? "": "es", name, name_type));
+ num_names, num_names == 1 ? "": "es", name, name_type));
for (i = 0; i < num_names; i++)
DEBUGADD(5, ("%s%s", inet_ntoa(ip_list[i]),
- i == (num_names - 1) ? "" : ", "));
+ i == (num_names - 1) ? "" : ", "));
DEBUGADD(5, ("\n"));
key = namecache_key(name, name_type);
- /*
- * Cache pdc location or dc lists for only a little while
- * otherwise if we lock on to a bad DC we can potentially be
- * out of action for the entire cache timeout time!
- */
+ /* Cache pdc location or dc lists for only a little while
+ otherwise if we lock on to a bad DC we can potentially be
+ out of action for the entire cache timeout time! */
- if (name_type == 0x1b || name_type == 0x1c)
+ if (name_type != 0x1b || name_type != 0x1c)
expiry = time(NULL) + 10;
else
expiry = time(NULL) + lp_name_cache_timeout();
- /*
- * Generate string representation of ip addresses list
- * First, store the number of ip addresses and then
- * place each single ip
- */
- ipstr_list_make(&value_string, ip_list, num_names);
-
- /* set the entry */
- return (gencache_set(key, value_string, expiry));
-}
+ value = namecache_value(ip_list, num_names, expiry);
+ tdb_store(namecache_tdb, key, value, TDB_REPLACE);
+
+ free(key.dptr);
+ free(value.dptr);
+}
-/**
- * Look up a name in the cache.
- *
- * @param name netbios name to look up for
- * @param name_type netbios name type of @param name
- * @param ip_list mallocated list of IP addresses if found in the cache,
- * NULL otherwise
- * @param num_names number of entries found
- *
- * @return true upon successful fetch or
- * false if name isn't found in the cache or has expired
- **/
+/* Look up a name in the name cache. Return a mallocated list of IP
+ addresses if the name is contained in the cache. */
BOOL namecache_fetch(const char *name, int name_type, struct in_addr **ip_list,
- int *num_names)
+ int *num_names)
{
- char *key, *value;
- time_t timeout;
+ TDB_DATA key, value;
+ struct nc_value *data = NULL;
+ time_t now;
+ int i;
+ *ip_list = NULL;
*num_names = 0;
- /* exit now if null pointers were passed as they're required further */
- if (!ip_list || !num_names) return False;
-
- if (!gencache_init())
+ if (!enable_namecache)
return False;
- /*
- * Use gencache interface - lookup the key
- */
+ /* Read value */
+
key = namecache_key(name, name_type);
- if (!gencache_get(key, &value, &timeout)) {
- DEBUG(5, ("no entry for %s#%02X found.\n", name, name_type));
- SAFE_FREE(key);
- return False;
- } else {
- DEBUG(5, ("name %s#%02X found.\n", name, name_type));
- }
-
- /*
- * Split up the stored value into the list of IP adresses
- */
- *num_names = ipstr_list_parse(value, ip_list);
+ value = tdb_fetch(namecache_tdb, key);
- SAFE_FREE(key);
- SAFE_FREE(value);
- return *num_names > 0; /* true only if some ip has been fetched */
-}
+ if (!value.dptr) {
+ DEBUG(5, ("namecache_fetch: %s#%02x not found\n",
+ name, name_type));
+ goto done;
+ }
+ data = (struct nc_value *)value.dptr;
-/**
- * Delete single namecache entry. Look at the
- * gencache_iterate definition.
- *
- **/
+ /* Check expiry time */
-static void flush_netbios_name(const char* key, const char *value, time_t timeout, void* dptr)
-{
- gencache_del(key);
- DEBUG(5, ("Deleting entry %s\n", key));
-}
+ now = time(NULL);
+
+ if (now > data->expiry) {
+
+ DEBUG(5, ("namecache_fetch: entry for %s#%02x expired\n",
+ name, name_type));
+
+ tdb_delete(namecache_tdb, key);
+ value = tdb_null;
-/**
- * Flush all names from the name cache.
- * It's done by gencache_iterate()
- *
- * @return True upon successful deletion or
- * False in case of an error
- **/
+ goto done;
+ }
+
+ if ((data->expiry - now) > lp_name_cache_timeout()) {
+
+ /* Someone may have changed the system time on us */
+
+ DEBUG(5, ("namecache_fetch: entry for %s#%02x has bad expiry\n",
+ name, name_type));
+
+ tdb_delete(namecache_tdb, key);
+
+ value = tdb_null;
+
+ goto done;
+ }
+
+ /* Extract and return namelist */
+
+ DEBUG(5, ("namecache_fetch: returning %d address%s for %s#%02x: ",
+ data->count, data->count == 1 ? "" : "es", name, name_type));
+
+ if (data->count) {
+
+ *ip_list = (struct in_addr *)malloc(
+ sizeof(struct in_addr) * data->count);
+
+ memcpy(*ip_list, data->ip_list, sizeof(struct in_addr) * data->count);
+
+ *num_names = data->count;
+
+ for (i = 0; i < *num_names; i++)
+ DEBUGADD(5, ("%s%s", inet_ntoa((*ip_list)[i]),
+ i == (*num_names - 1) ? "" : ", "));
+
+ }
+
+ DEBUGADD(5, ("\n"));
+
+done:
+ SAFE_FREE(key.dptr);
+ SAFE_FREE(data);
+
+ return value.dsize > 0;
+}
+
+/* Flush all names from the name cache */
void namecache_flush(void)
{
- if (!gencache_init())
+ int result;
+
+ if (!namecache_tdb)
return;
- /*
- * iterate through each NBT cache's entry and flush it
- * by flush_netbios_name function
- */
- gencache_iterate(flush_netbios_name, NULL, "NBT/*");
- DEBUG(5, ("Namecache flushed\n"));
-}
+ result = tdb_traverse(namecache_tdb, tdb_traverse_delete_fn, NULL);
+ if (result == -1)
+ DEBUG(5, ("namecache_flush: error deleting cache entries\n"));
+ else
+ DEBUG(5, ("namecache_flush: deleted %d cache entr%s\n",
+ result, result == 1 ? "y" : "ies"));
+}
if (resolve_hosts(name, return_iplist, return_count)) {
result = True;
goto done;
+ } else {
+
+ /* Store negative lookup result */
+
+ namecache_store(name, name_type, 0, NULL);
}
}
} else if(strequal( tok, "lmhosts")) {
}
/* Save in name cache */
- for (i = 0; i < *return_count && DEBUGLEVEL == 100; i++)
- DEBUG(100, ("Storing name %s of type %d (ip: %s)\n", name,
- name_type, inet_ntoa((*return_iplist)[i])));
-
+
namecache_store(name, name_type, *return_count, *return_iplist);
/* Display some debugging info */
BOOL lookup_dc_name(const char *srcname, const char *domain,
struct in_addr *dc_ip, char *ret_name)
{
+#if !defined(I_HATE_WINDOWS_REPLY_CODE)
fstring dc_name;
BOOL ret;
}
return False;
+
+#else /* defined(I_HATE_WINDOWS_REPLY_CODE) */
+
+JRA - This code is broken with BDC rollover - we need to do a full
+NT GETDC call, UNICODE, NT domain SID and uncle tom cobbley and all...
+
+ int retries = 3;
+ int retry_time = 2000;
+ struct timeval tval;
+ struct packet_struct p;
+ struct dgram_packet *dgram = &p.packet.dgram;
+ char *ptr,*p2;
+ char tmp[4];
+ int len;
+ struct sockaddr_in sock_name;
+ int sock_len = sizeof(sock_name);
+ const char *mailslot = NET_LOGON_MAILSLOT;
+ char *mailslot_name;
+ char buffer[1024];
+ char *bufp;
+ int dgm_id = generate_trn_id();
+ int sock = open_socket_in(SOCK_DGRAM, 0, 3, interpret_addr(lp_socket_address()), True );
+
+ if(sock == -1)
+ return False;
+
+ /* Find out the transient UDP port we have been allocated. */
+ if(getsockname(sock, (struct sockaddr *)&sock_name, &sock_len)<0) {
+ DEBUG(0,("lookup_pdc_name: Failed to get local UDP port. Error was %s\n",
+ strerror(errno)));
+ close(sock);
+ return False;
+ }
+
+ /*
+ * Create the request data.
+ */
+
+ memset(buffer,'\0',sizeof(buffer));
+ bufp = buffer;
+ SSVAL(bufp,0,QUERYFORPDC);
+ bufp += 2;
+ fstrcpy(bufp,srcname);
+ bufp += (strlen(bufp) + 1);
+ slprintf(bufp, sizeof(fstring)-1, "\\MAILSLOT\\NET\\GETDC%d", dgm_id);
+ mailslot_name = bufp;
+ bufp += (strlen(bufp) + 1);
+ bufp = ALIGN2(bufp, buffer);
+ bufp += push_ucs2(NULL, bufp, srcname, sizeof(buffer) - (bufp - buffer), STR_TERMINATE);
+
+ SIVAL(bufp,0,1);
+ SSVAL(bufp,4,0xFFFF);
+ SSVAL(bufp,6,0xFFFF);
+ bufp += 8;
+ len = PTR_DIFF(bufp,buffer);
+
+ memset((char *)&p,'\0',sizeof(p));
+
+ /* DIRECT GROUP or UNIQUE datagram. */
+ dgram->header.msg_type = 0x10;
+ dgram->header.flags.node_type = M_NODE;
+ dgram->header.flags.first = True;
+ dgram->header.flags.more = False;
+ dgram->header.dgm_id = dgm_id;
+ dgram->header.source_ip = *iface_ip(*pdc_ip);
+ dgram->header.source_port = ntohs(sock_name.sin_port);
+ dgram->header.dgm_length = 0; /* Let build_dgram() handle this. */
+ dgram->header.packet_offset = 0;
+
+ make_nmb_name(&dgram->source_name,srcname,0);
+ make_nmb_name(&dgram->dest_name,domain,0x1C);
+
+ ptr = &dgram->data[0];
+
+ /* Setup the smb part. */
+ ptr -= 4; /* XXX Ugliness because of handling of tcp SMB length. */
+ memcpy(tmp,ptr,4);
+ set_message(ptr,17,17 + len,True);
+ memcpy(ptr,tmp,4);
+
+ CVAL(ptr,smb_com) = SMBtrans;
+ SSVAL(ptr,smb_vwv1,len);
+ SSVAL(ptr,smb_vwv11,len);
+ SSVAL(ptr,smb_vwv12,70 + strlen(mailslot));
+ SSVAL(ptr,smb_vwv13,3);
+ SSVAL(ptr,smb_vwv14,1);
+ SSVAL(ptr,smb_vwv15,1);
+ SSVAL(ptr,smb_vwv16,2);
+ p2 = smb_buf(ptr);
+ pstrcpy(p2,mailslot);
+ p2 = skip_string(p2,1);
+
+ memcpy(p2,buffer,len);
+ p2 += len;
+
+ dgram->datasize = PTR_DIFF(p2,ptr+4); /* +4 for tcp length. */
+
+ p.ip = *pdc_ip;
+ p.port = DGRAM_PORT;
+ p.fd = sock;
+ p.timestamp = time(NULL);
+ p.packet_type = DGRAM_PACKET;
+
+ GetTimeOfDay(&tval);
+
+ if (!send_packet(&p)) {
+ DEBUG(0,("lookup_pdc_name: send_packet failed.\n"));
+ close(sock);
+ return False;
+ }
+
+ retries--;
+
+ while (1) {
+ struct timeval tval2;
+ struct packet_struct *p_ret;
+
+ GetTimeOfDay(&tval2);
+ if (TvalDiff(&tval,&tval2) > retry_time) {
+ if (!retries)
+ break;
+ if (!send_packet(&p)) {
+ DEBUG(0,("lookup_pdc_name: send_packet failed.\n"));
+ close(sock);
+ return False;
+ }
+ GetTimeOfDay(&tval);
+ retries--;
+ }
+
+ if ((p_ret = receive_dgram_packet(sock,90,mailslot_name))) {
+ struct dgram_packet *dgram2 = &p_ret->packet.dgram;
+ char *buf;
+ char *buf2;
+
+ buf = &dgram2->data[0];
+ buf -= 4;
+
+ if (CVAL(buf,smb_com) != SMBtrans) {
+ DEBUG(0,("lookup_pdc_name: datagram type %u != SMBtrans(%u)\n", (unsigned int)
+ CVAL(buf,smb_com), (unsigned int)SMBtrans ));
+ free_packet(p_ret);
+ continue;
+ }
+
+ len = SVAL(buf,smb_vwv11);
+ buf2 = smb_base(buf) + SVAL(buf,smb_vwv12);
+
+ if (len <= 0) {
+ DEBUG(0,("lookup_pdc_name: datagram len < 0 (%d)\n", len ));
+ free_packet(p_ret);
+ continue;
+ }
+
+ DEBUG(4,("lookup_pdc_name: datagram reply from %s to %s IP %s for %s of type %d len=%d\n",
+ nmb_namestr(&dgram2->source_name),nmb_namestr(&dgram2->dest_name),
+ inet_ntoa(p_ret->ip), smb_buf(buf),SVAL(buf2,0),len));
+
+ if(SVAL(buf2,0) != QUERYFORPDC_R) {
+ DEBUG(0,("lookup_pdc_name: datagram type (%u) != QUERYFORPDC_R(%u)\n",
+ (unsigned int)SVAL(buf,0), (unsigned int)QUERYFORPDC_R ));
+ free_packet(p_ret);
+ continue;
+ }
+
+ buf2 += 2;
+ /* Note this is safe as it is a bounded strcpy. */
+ fstrcpy(ret_name, buf2);
+ ret_name[sizeof(fstring)-1] = '\0';
+ close(sock);
+ free_packet(p_ret);
+ return True;
+ }
+ }
+
+ close(sock);
+ return False;
+#endif /* defined(I_HATE_WINDOWS_REPLY_CODE) */
}
/********************************************************
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- Samba module with developer tools
- Copyright (C) Andrew Tridgell 2001
- Copyright (C) Jelmer Vernooij 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-static struct {
- char from;
- char *to;
- int len;
-} weird_table[] = {
- {'q', "^q^", 3},
- {'Q', "^Q^", 3},
- {0, NULL}
-};
-
-static size_t weird_pull(void *cd, char **inbuf, size_t *inbytesleft,
- char **outbuf, size_t *outbytesleft)
-{
- while (*inbytesleft >= 1 && *outbytesleft >= 2) {
- int i;
- int done = 0;
- for (i=0;weird_table[i].from;i++) {
- if (strncmp((*inbuf),
- weird_table[i].to,
- weird_table[i].len) == 0) {
- if (*inbytesleft < weird_table[i].len) {
- DEBUG(0,("ERROR: truncated weird string\n"));
- /* smb_panic("weird_pull"); */
-
- } else {
- (*outbuf)[0] = weird_table[i].from;
- (*outbuf)[1] = 0;
- (*inbytesleft) -= weird_table[i].len;
- (*outbytesleft) -= 2;
- (*inbuf) += weird_table[i].len;
- (*outbuf) += 2;
- done = 1;
- break;
- }
- }
- }
- if (done) continue;
- (*outbuf)[0] = (*inbuf)[0];
- (*outbuf)[1] = 0;
- (*inbytesleft) -= 1;
- (*outbytesleft) -= 2;
- (*inbuf) += 1;
- (*outbuf) += 2;
- }
-
- if (*inbytesleft > 0) {
- errno = E2BIG;
- return -1;
- }
-
- return 0;
-}
-
-static size_t weird_push(void *cd, char **inbuf, size_t *inbytesleft,
- char **outbuf, size_t *outbytesleft)
-{
- int ir_count=0;
-
- while (*inbytesleft >= 2 && *outbytesleft >= 1) {
- int i;
- int done=0;
- for (i=0;weird_table[i].from;i++) {
- if ((*inbuf)[0] == weird_table[i].from &&
- (*inbuf)[1] == 0) {
- if (*outbytesleft < weird_table[i].len) {
- DEBUG(0,("No room for weird character\n"));
- /* smb_panic("weird_push"); */
- } else {
- memcpy(*outbuf, weird_table[i].to,
- weird_table[i].len);
- (*inbytesleft) -= 2;
- (*outbytesleft) -= weird_table[i].len;
- (*inbuf) += 2;
- (*outbuf) += weird_table[i].len;
- done = 1;
- break;
- }
- }
- }
- if (done) continue;
-
- (*outbuf)[0] = (*inbuf)[0];
- if ((*inbuf)[1]) ir_count++;
- (*inbytesleft) -= 2;
- (*outbytesleft) -= 1;
- (*inbuf) += 2;
- (*outbuf) += 1;
- }
-
- if (*inbytesleft == 1) {
- errno = EINVAL;
- return -1;
- }
-
- if (*inbytesleft > 1) {
- errno = E2BIG;
- return -1;
- }
-
- return ir_count;
-}
-
-struct charset_functions weird_functions = {"WEIRD", weird_pull, weird_push};
-
-int init_module(void)
-{
- smb_register_charset(&weird_functions);
- return 0;
-}
typedef struct recycle_bin_struct
{
- TALLOC_CTX *mem_ctx;
+ TALLOC_CTX *ctx;
char *repository; /* name of the recycle bin directory */
BOOL keep_dir_tree; /* keep directory structure of deleted file in recycle bin */
BOOL versions; /* create versions of deleted files with identical name */
SMB_OFF_T maxsize; /* maximum file size to be saved */
} recycle_bin_struct;
-typedef struct recycle_bin_connections {
- int conn;
- recycle_bin_struct *data;
- struct recycle_bin_connections *next;
-} recycle_bin_connections;
-
-typedef struct recycle_bin_private_data {
- TALLOC_CTX *mem_ctx;
- recycle_bin_connections *conns;
-} recycle_bin_private_data;
-
-struct smb_vfs_handle_struct *recycle_bin_private_handle;
-
/* VFS operations */
static struct vfs_ops default_vfs_ops; /* For passthrough operation */
{NULL, SMB_VFS_OP_NOOP, SMB_VFS_LAYER_NOOP}
};
+static BOOL check_bool_param(const char *value)
+{
+ if (strwicmp(value, "yes") == 0 ||
+ strwicmp(value, "true") == 0 ||
+ strwicmp(value, "1") == 0)
+ return True;
+
+ return False;
+}
+
/**
* VFS initialisation function.
*
vfs_op_tuple *vfs_init(int *vfs_version, struct vfs_ops *def_vfs_ops,
struct smb_vfs_handle_struct *vfs_handle)
{
- TALLOC_CTX *mem_ctx = NULL;
-
DEBUG(10, ("Initializing VFS module recycle\n"));
*vfs_version = SMB_VFS_INTERFACE_VERSION;
memcpy(&default_vfs_ops, def_vfs_ops, sizeof(struct vfs_ops));
DEBUG(0, ("vfs_recycle: Debug class number of 'vfs_recycle': %d\n", vfs_recycle_debug_level));
}
- recycle_bin_private_handle = vfs_handle;
- if (!(mem_ctx = talloc_init_named("recycle bin data"))) {
- DEBUG(0, ("Failed to allocate memory in VFS module recycle_bin\n"));
- return NULL;
- }
-
- recycle_bin_private_handle->data = talloc(mem_ctx, sizeof(recycle_bin_private_data));
- if (recycle_bin_private_handle->data == NULL) {
- DEBUG(0, ("Failed to allocate memory in VFS module recycle_bin\n"));
- return NULL;
- }
- ((recycle_bin_private_data *)(recycle_bin_private_handle->data))->mem_ctx = mem_ctx;
- ((recycle_bin_private_data *)(recycle_bin_private_handle->data))->conns = NULL;
-
return recycle_ops;
}
* VFS finalization function.
*
**/
-void vfs_done(void)
+void vfs_done(connection_struct *conn)
{
- recycle_bin_private_data *recdata;
- recycle_bin_connections *recconn;
-
- DEBUG(10, ("Unloading/Cleaning VFS module recycle bin\n"));
-
- if (recycle_bin_private_handle)
- recdata = (recycle_bin_private_data *)(recycle_bin_private_handle->data);
- else {
- DEBUG(0, ("Recycle bin not initialized!\n"));
- return;
- }
-
- if (recdata) {
- if (recdata->conns) {
- recconn = recdata->conns;
- while (recconn) {
- talloc_destroy(recconn->data->mem_ctx);
- recconn = recconn->next;
- }
- }
- if (recdata->mem_ctx) {
- talloc_destroy(recdata->mem_ctx);
- }
- recdata = NULL;
- }
+ DEBUG(10,("Called for connection %d\n", SNUM(conn)));
}
static int recycle_connect(struct connection_struct *conn, const char *service, const char *user)
{
TALLOC_CTX *ctx = NULL;
recycle_bin_struct *recbin;
- recycle_bin_connections *recconn;
- recycle_bin_connections *recconnbase;
- recycle_bin_private_data *recdata;
+ char *servicename;
char *tmp_str;
DEBUG(10, ("Called for service %s (%d) as user %s\n", service, SNUM(conn), user));
- if (recycle_bin_private_handle)
- recdata = (recycle_bin_private_data *)(recycle_bin_private_handle->data);
- else {
- DEBUG(0, ("Recycle bin not initialized!\n"));
- return -1;
- }
-
- if (!(ctx = talloc_init_named("recycle bin connection"))) {
+ if (!(ctx = talloc_init_named("recycle bin"))) {
DEBUG(0, ("Failed to allocate memory in VFS module recycle_bin\n"));
- return -1;
+ return 0;
}
- recbin = talloc(ctx, sizeof(recycle_bin_struct));
- if (recbin == NULL) {
+ recbin = talloc(ctx,sizeof(recycle_bin_struct));
+ if ( recbin == NULL) {
DEBUG(0, ("Failed to allocate memory in VFS module recycle_bin\n"));
return -1;
}
- recbin->mem_ctx = ctx;
+ recbin->ctx = ctx;
/* Set defaults */
- recbin->repository = talloc_strdup(recbin->mem_ctx, ".recycle");
+ recbin->repository = talloc_strdup(ctx, ".recycle");
ALLOC_CHECK(recbin->repository, error);
recbin->keep_dir_tree = False;
recbin->versions = False;
recbin->maxsize = 0;
/* parse configuration options */
- if ((tmp_str = lp_parm_string(SNUM(conn), "vfs_recycle_bin", "repository")) != NULL) {
- recbin->repository = talloc_sub_conn(recbin->mem_ctx, conn, tmp_str);
+ servicename = talloc_strdup(recbin->ctx, lp_servicename(SNUM(conn)));
+ DEBUG(10, ("servicename = %s\n",servicename));
+ if ((tmp_str = lp_parm_string(servicename, "vfs_recycle_bin", "repository")) != NULL) {
+ recbin->repository = talloc_sub_conn(ctx, conn, tmp_str);
ALLOC_CHECK(recbin->repository, error);
trim_string(recbin->repository, "/", "/");
DEBUG(5, ("recycle.bin: repository = %s\n", recbin->repository));
}
-
- recbin->keep_dir_tree = lp_parm_bool(SNUM(conn), "vfs_recycle_bin", "keeptree");
- DEBUG(5, ("recycle.bin: keeptree = %d\n", recbin->keep_dir_tree));
-
- recbin->versions = lp_parm_bool(SNUM(conn), "vfs_recycle_bin", "versions");
- DEBUG(5, ("recycle.bin: versions = %d\n", recbin->versions));
-
- recbin->touch = lp_parm_bool(SNUM(conn), "vfs_recycle_bin", "touch");
- DEBUG(5, ("recycle.bin: touch = %d\n", recbin->touch));
-
- recbin->maxsize = lp_parm_ulong(SNUM(conn), "vfs_recycle_bin", "maxsize");
- if (recbin->maxsize == 0) {
- recbin->maxsize = -1;
- DEBUG(5, ("recycle.bin: maxsize = -infinite-\n"));
- } else {
- DEBUG(5, ("recycle.bin: maxsize = %ld\n", (long int)recbin->maxsize));
+ if ((tmp_str = lp_parm_string(servicename, "vfs_recycle_bin", "keeptree")) != NULL) {
+ if (check_bool_param(tmp_str) == True)
+ recbin->keep_dir_tree = True;
+ DEBUG(5, ("recycle.bin: keeptree = %s\n", tmp_str));
+ }
+ if ((tmp_str = lp_parm_string(servicename, "vfs_recycle_bin", "versions")) != NULL) {
+ if (check_bool_param(tmp_str) == True)
+ recbin->versions = True;
+ DEBUG(5, ("recycle.bin: versions = %s\n", tmp_str));
+ }
+ if ((tmp_str = lp_parm_string(servicename, "vfs_recycle_bin", "touch")) != NULL) {
+ if (check_bool_param(tmp_str) == True)
+ recbin->touch = True;
+ DEBUG(5, ("recycle.bin: touch = %s\n", tmp_str));
+ }
+ if ((tmp_str = lp_parm_string(servicename, "vfs_recycle_bin", "maxsize")) != NULL) {
+ recbin->maxsize = strtoul(tmp_str, NULL, 10);
+ if (recbin->maxsize == 0) {
+ recbin->maxsize = -1;
+ DEBUG(5, ("recycle.bin: maxsize = -infinite-\n"));
+ } else {
+ DEBUG(5, ("recycle.bin: maxsize = %ld\n", (long int)recbin->maxsize));
+ }
}
-
- if ((tmp_str = lp_parm_string(SNUM(conn), "vfs_recycle_bin", "exclude")) != NULL) {
- recbin->exclude = talloc_strdup(recbin->mem_ctx, tmp_str);
+ if ((tmp_str = lp_parm_string(servicename, "vfs_recycle_bin", "exclude")) != NULL) {
+ recbin->exclude = talloc_strdup(ctx, tmp_str);
ALLOC_CHECK(recbin->exclude, error);
DEBUG(5, ("recycle.bin: exclude = %s\n", recbin->exclude));
}
- if ((tmp_str = lp_parm_string(SNUM(conn), "vfs_recycle_bin", "exclude_dir")) != NULL) {
- recbin->exclude_dir = talloc_strdup(recbin->mem_ctx, tmp_str);
+ if ((tmp_str = lp_parm_string(servicename,"vfs_recycle_bin", "exclude_dir")) != NULL) {
+ recbin->exclude_dir = talloc_strdup(ctx, tmp_str);
ALLOC_CHECK(recbin->exclude_dir, error);
DEBUG(5, ("recycle.bin: exclude_dir = %s\n", recbin->exclude_dir));
}
- if ((tmp_str = lp_parm_string(SNUM(conn), "vfs_recycle_bin", "noversions")) != NULL) {
- recbin->noversions = talloc_strdup(recbin->mem_ctx, tmp_str);
+ if ((tmp_str = lp_parm_string(servicename,"vfs_recycle_bin", "noversions")) != NULL) {
+ recbin->noversions = talloc_strdup(ctx, tmp_str);
ALLOC_CHECK(recbin->noversions, error);
DEBUG(5, ("recycle.bin: noversions = %s\n", recbin->noversions));
}
- recconn = talloc(recdata->mem_ctx, sizeof(recycle_bin_connections));
- if (recconn == NULL) {
- DEBUG(0, ("Failed to allocate memory in VFS module recycle_bin\n"));
- goto error;
- }
- recconn->conn = SNUM(conn);
- recconn->data = recbin;
- recconn->next = NULL;
- if (recdata->conns) {
- recconnbase = recdata->conns;
- while (recconnbase->next != NULL) recconnbase = recconnbase->next;
- recconnbase->next = recconn;
- } else {
- recdata->conns = recconn;
- }
+ conn->vfs_private = (void *)recbin;
return default_vfs_ops.connect(conn, service, user);
error:
static void recycle_disconnect(struct connection_struct *conn)
{
- recycle_bin_private_data *recdata;
- recycle_bin_connections *recconn;
-
DEBUG(10, ("Disconnecting VFS module recycle bin\n"));
-
- if (recycle_bin_private_handle)
- recdata = (recycle_bin_private_data *)(recycle_bin_private_handle->data);
- else {
- DEBUG(0, ("Recycle bin not initialized!\n"));
- return;
- }
-
- if (recdata) {
- if (recdata->conns) {
- if (recdata->conns->conn == SNUM(conn)) {
- talloc_destroy(recdata->conns->data->mem_ctx);
- recdata->conns = recdata->conns->next;
- } else {
- recconn = recdata->conns;
- while (recconn->next) {
- if (recconn->next->conn == SNUM(conn)) {
- talloc_destroy(recconn->next->data->mem_ctx);
- recconn->next = recconn->next->next;
- break;
- }
- recconn = recconn->next;
- }
- }
- }
+ if (conn->vfs_private) {
+ talloc_destroy(((recycle_bin_struct *)conn->vfs_private)->ctx);
+ conn->vfs_private = NULL;
}
default_vfs_ops.disconnect(conn);
}
**/
static int recycle_unlink(connection_struct *conn, const char *inname)
{
- recycle_bin_private_data *recdata;
- recycle_bin_connections *recconn;
recycle_bin_struct *recbin;
char *file_name = NULL;
char *path_name = NULL;
char *final_name = NULL;
char *base;
int i;
-/* SMB_BIG_UINT dfree, dsize, bsize; */
- SMB_OFF_T file_size; /* space_avail; */
+ SMB_BIG_UINT dfree, dsize, bsize;
+ SMB_OFF_T file_size, space_avail;
BOOL exist;
int rc = -1;
file_name = strdup(inname);
ALLOC_CHECK(file_name, done);
- recbin = NULL;
- if (recycle_bin_private_handle) {
- recdata = (recycle_bin_private_data *)(recycle_bin_private_handle->data);
- if (recdata) {
- if (recdata->conns) {
- recconn = recdata->conns;
- while (recconn && recconn->conn != SNUM(conn)) recconn = recconn->next;
- if (recconn != NULL) {
- recbin = recconn->data;
- }
- }
- }
- }
- if (recbin == NULL) {
+ if (conn->vfs_private)
+ recbin = (recycle_bin_struct *)conn->vfs_private;
+ else {
DEBUG(0, ("Recycle bin not initialized!\n"));
rc = default_vfs_ops.unlink(conn, file_name);
goto done;
Boston, MA 02111-1307, USA.
*/
-#include "winbind_client.h"
+#include "winbind_nss_config.h"
+#include "winbindd_nss.h"
/* Global variables. These are effectively the client state information */
void init_request(struct winbindd_request *request, int request_type)
{
+ static char *domain_env;
+ static BOOL initialised;
+
request->length = sizeof(struct winbindd_request);
request->cmd = (enum winbindd_cmd)request_type;
request->pid = getpid();
+ request->domain[0] = '\0';
+
+ if (!initialised) {
+ initialised = True;
+ domain_env = getenv(WINBINDD_DOMAIN_ENV);
+ }
+ if (domain_env) {
+ strncpy(request->domain, domain_env,
+ sizeof(request->domain) - 1);
+ request->domain[sizeof(request->domain) - 1] = '\0';
+ }
}
/* Initialise a response structure */
/* Process request */
/* Ensure null termination of entire request */
- state->request.null_term = '\0';
+ state->request.domain[sizeof(state->request.domain)-1]='\0';
state->pid = state->request.pid;
/* Initialise fd lists for select() */
listen_sock = open_winbindd_socket();
-
- if (listen_sock == -1) {
- perror("open_winbind_socket");
- exit(1);
- }
-
maxfd = listen_sock;
FD_ZERO(&r_fds);
process_loop();
- trustdom_cache_shutdown();
uni_group_cache_shutdown();
return 0;
}
return True;
}
+/*
+ find the DC for a domain using methods appropriate for a RPC domain
+*/
+static BOOL cm_rpc_find_dc(const char *domain, struct in_addr *dc_ip, fstring srv_name)
+{
+ struct in_addr *ip_list = NULL;
+ int count, i;
+ BOOL list_ordered;
+
+ if (!get_dc_list(domain, &ip_list, &count, &list_ordered)) {
+ struct in_addr pdc_ip;
+
+ if (!get_pdc_ip(domain, &pdc_ip)) {
+ DEBUG(3, ("Could not look up any DCs for domain %s\n",
+ domain));
+ return False;
+ }
+
+ ip_list = (struct in_addr *)malloc(sizeof(struct in_addr));
+
+ if (!ip_list)
+ return False;
+
+ ip_list[0] = pdc_ip;
+ count = 1;
+ }
+
+ /* Pick a nice close server, but only if the list was not ordered */
+ if (!list_ordered && (count > 1) ) {
+ qsort(ip_list, count, sizeof(struct in_addr), QSORT_CAST ip_compare);
+ }
+
+ for (i = 0; i < count; i++) {
+ if (is_zero_ip(ip_list[i]))
+ continue;
+
+ if (name_status_find(domain, 0x1c, 0x20, ip_list[i], srv_name)) {
+ *dc_ip = ip_list[i];
+ SAFE_FREE(ip_list);
+ return True;
+ }
+ }
+
+
+ SAFE_FREE(ip_list);
+
+ return False;
+}
static BOOL cm_get_dc_name(const char *domain, fstring srv_name, struct in_addr *ip_out)
}
if (!ret) {
/* fall back on rpc methods if the ADS methods fail */
- ret = rpc_find_dc(domain, srv_name, &dc_ip);
+ ret = cm_rpc_find_dc(domain, &dc_ip, srv_name);
}
if (!ret) {
for (domain = domain_list(); domain != NULL; domain = domain->next) {
struct getent_state *domain_state;
+ /* Skip domains other than WINBINDD_DOMAIN environment
+ variable */
+
+ if ((strcmp(state->request.domain, "") != 0) &&
+ !check_domain_env(state->request.domain, domain->name))
+ continue;
+
/* Create a state record for this domain */
if ((domain_state = (struct getent_state *)
ZERO_STRUCT(groups);
+ /* Skip domains other than WINBINDD_DOMAIN environment
+ variable */
+ if ((strcmp(state->request.domain, "") != 0) &&
+ !check_domain_env(state->request.domain, domain->name))
+ continue;
+
/* Get list of sam groups */
ZERO_STRUCT(groups);
fstrcpy(groups.domain_name, domain->name);
/* Update this when you change the interface. */
-#define WINBIND_INTERFACE_VERSION 6
+#define WINBIND_INTERFACE_VERSION 5
/* Socket commands */
} name;
uint32 num_entries; /* getpwent, getgrent */
} data;
- char null_term;
+ fstring domain; /* {set,get,end}{pw,gr}ent() */
};
/* Response values */
by lp_string() calling standard_sub_basic(). */
fstrcpy(current_user_info.smb_name, user_name);
+ sub_set_smb_name(user_name);
fstrcpy(current_user_info.domain, dom_name);
pstrcpy(homedir, lp_template_homedir());
for(domain = domain_list(); domain != NULL; domain = domain->next) {
struct getent_state *domain_state;
+ /*
+ * Skip domains other than WINBINDD_DOMAIN environment
+ * variable.
+ */
+
+ if ((strcmp(state->request.domain, "") != 0) &&
+ !check_domain_env(state->request.domain,
+ domain->name))
+ continue;
+
/* Create a state record for this domain */
if ((domain_state = (struct getent_state *)
struct winbindd_methods *methods;
int i;
+ /* Skip domains other than WINBINDD_DOMAIN environment
+ variable */
+
+ if ((strcmp(state->request.domain, "") != 0) &&
+ !check_domain_env(state->request.domain, domain->name))
+ continue;
+
methods = domain->methods;
/* Query display info */
int i;
result = domain->methods->trusted_domains(domain, mem_ctx, &num_domains,
- &names, &alt_names, &dom_sids);
+ &names, &alt_names, &dom_sids);
if (!NT_STATUS_IS_OK(result)) {
continue;
}
the access methods of its parent */
for(i = 0; i < num_domains; i++) {
DEBUG(10,("Found domain %s\n", names[i]));
- add_trusted_domain(names[i], alt_names?alt_names[i]:NULL,
- domain->methods, &dom_sids[i]);
-
- /* store trusted domain in the cache */
- trustdom_cache_store(names[i], alt_names ? alt_names[i] : NULL,
- &dom_sids[i], t + WINBINDD_RESCAN_FREQ);
+ add_trusted_domain(names[i],
+ alt_names?alt_names[i]:NULL,
+ domain->methods, &dom_sids[i]);
}
}
/* Add ourselves as the first entry */
domain = add_trusted_domain(lp_workgroup(), NULL, &cache_methods, NULL);
- /*
- * Now we *must* get the domain sid for our primary domain. Go into
- * a holding pattern until that is available
- */
+ /* Now we *must* get the domain sid for our primary domain. Go into
+ a holding pattern until that is available */
result = cache_methods.domain_sid(domain, &domain->sid);
while (!NT_STATUS_IS_OK(result)) {
strncpy( data_name, FAIL_PREFIX, sizeof(FAIL_PREFIX) );
strncpy( data_name + sizeof(FAIL_PREFIX) - 1, name, strlen( name ) + 1 );
+ /* First we check whether we've been given the password in already
+ encrypted form. */
+ if (strlen( p ) == 16 || (strlen( p ) == 32
+ && pdb_gethexpwd( p, (char *) hash_pass ))) {
+
+ if (!memcmp( hash_pass, pdb_get_lanman_passwd(sampass), 16 )
+ || (pdb_get_nt_passwd(sampass)
+ && !memcmp( hash_pass, pdb_get_nt_passwd(sampass), 16 )))
+ {
+ retval = PAM_SUCCESS;
+ if (data_name) { /* reset failures */
+ pam_set_data( pamh, data_name, NULL, _cleanup_failures );
+ }
+ _pam_delete( data_name );
+ memset( hash_pass, '\0', 16 );
+ return retval;
+ }
+ }
+
/*
* The password we were given wasn't an encrypted password, or it
* didn't match the one we have. We encrypt the password now and try
Copyright (C) Simo Sorce 2001
Copyright (C) Alexander Bokovoy 2002
- Copyright (C) Stefan (metze) Metzmacher 2002
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
static BOOL defaults_saved = False;
-typedef struct _param_opt_struct param_opt_struct;
-struct _param_opt_struct {
- param_opt_struct *prev, *next;
- char *key;
- char *value;
-};
-
/*
* This structure describes global (ie., server-wide) parameters.
*/
char *szSMBPasswdFile;
char *szPrivateDir;
char **szPassdbBackend;
- char **szSamBackend;
- char **szModules;
char *szPasswordServer;
char *szSocketOptions;
char *szRealm;
BOOL bKernelChangeNotify;
int restrict_anonymous;
int name_cache_timeout;
- param_opt_struct *param_opt;
}
global;
BOOL bNTAclSupport;
BOOL bUseSendfile;
BOOL bProfileAcls;
- param_opt_struct *param_opt;
char dummy[3]; /* for alignment */
}
True, /* bNTAclSupport */
False, /* bUseSendfile */
False, /* bProfileAcls */
-
- NULL, /* Parametric options */
"" /* dummy */
};
{"smb passwd file", P_STRING, P_GLOBAL, &Globals.szSMBPasswdFile, NULL, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{"private dir", P_STRING, P_GLOBAL, &Globals.szPrivateDir, NULL, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{"passdb backend", P_LIST, P_GLOBAL, &Globals.szPassdbBackend, NULL, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
- {"sam backend", P_LIST, P_GLOBAL, &Globals.szSamBackend, NULL, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{"non unix account range", P_STRING, P_GLOBAL, &Globals.szNonUnixAccountRange, handle_non_unix_account_range, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{"algorithmic rid base", P_INTEGER, P_GLOBAL, &Globals.bAlgorithmicRidBase, NULL, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{"root directory", P_STRING, P_GLOBAL, &Globals.szRootdir, NULL, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{"allow hosts", P_LIST, P_LOCAL, &sDefault.szHostsallow, NULL, NULL, FLAG_HIDE},
{"hosts deny", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_GLOBAL | FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT | FLAG_DEVELOPER},
{"deny hosts", P_LIST, P_LOCAL, &sDefault.szHostsdeny, NULL, NULL, FLAG_HIDE},
- {"modules", P_LIST, P_GLOBAL, &Globals.szModules, NULL, NULL, FLAG_BASIC | FLAG_GLOBAL},
{"Logging Options", P_SEP, P_SEPARATOR},
static FN_GLOBAL_STRING(lp_announce_version, &Globals.szAnnounceVersion)
FN_GLOBAL_LIST(lp_netbios_aliases, &Globals.szNetbiosAliases)
FN_GLOBAL_LIST(lp_passdb_backend, &Globals.szPassdbBackend)
-FN_GLOBAL_LIST(lp_sam_backend, &Globals.szSamBackend)
-FN_GLOBAL_LIST(lp_modules, &Globals.szModules)
FN_GLOBAL_STRING(lp_panic_action, &Globals.szPanicAction)
FN_GLOBAL_STRING(lp_adduser_script, &Globals.szAddUserScript)
FN_GLOBAL_STRING(lp_deluser_script, &Globals.szDelUserScript)
FN_GLOBAL_STRING(lp_wins_partners, &Globals.szWINSPartners)
FN_GLOBAL_STRING(lp_template_homedir, &Globals.szTemplateHomedir)
FN_GLOBAL_STRING(lp_template_shell, &Globals.szTemplateShell)
-FN_GLOBAL_CONST_STRING(lp_winbind_separator, &Globals.szWinbindSeparator)
+FN_GLOBAL_STRING(lp_winbind_separator, &Globals.szWinbindSeparator)
FN_GLOBAL_STRING(lp_acl_compatibility, &Globals.szAclCompat)
FN_GLOBAL_BOOL(lp_winbind_enum_users, &Globals.bWinbindEnumUsers)
FN_GLOBAL_BOOL(lp_winbind_enum_groups, &Globals.bWinbindEnumGroups)
FN_GLOBAL_BOOL(lp_algorithmic_rid_base, &Globals.bAlgorithmicRidBase)
FN_GLOBAL_INTEGER(lp_name_cache_timeout, &Globals.name_cache_timeout)
+typedef struct _param_opt_struct param_opt_struct;
+struct _param_opt_struct {
+ char *key;
+ char *value;
+ param_opt_struct *prev, *next;
+};
+
+static param_opt_struct *param_opt = NULL;
+
+/* Return parametric option from given service. Type is a part of option before ':' */
+/* Parametric option has following syntax: 'Type: option = value' */
+/* Returned value is allocated in 'lp_talloc' context */
+
+char *lp_parm_string(const char *servicename, const char *type, const char *option)
+{
+ param_opt_struct *data;
+ pstring vfskey;
+
+ if (param_opt != NULL) {
+ ZERO_STRUCT(vfskey);
+ pstr_sprintf(vfskey, "%s:%s:%s", (servicename==NULL) ? "global" : servicename,
+ type, option);
+ data = param_opt;
+ while (data) {
+ if (strcmp(data->key, vfskey) == 0) {
+ return lp_string(data->value);
+ }
+ data = data->next;
+ }
+ /* Try to fetch the same option but from globals */
+ pstr_sprintf(vfskey, "global:%s:%s", type, option);
+ data = param_opt;
+ while (data) {
+ if (strcmp(data->key, vfskey) == 0) {
+ return lp_string(data->value);
+ }
+ data = data->next;
+ }
+
+ }
+ return NULL;
+}
+
/* local prototypes */
static int map_parameter(char *pszParmName);
-static BOOL set_boolean(BOOL *pb, const char *pszParmValue);
+static BOOL set_boolean(BOOL *pb, char *pszParmValue);
static int getservicebyname(const char *pszServiceName,
service * pserviceDest);
static void copy_service(service * pserviceDest,
static BOOL do_section(char *pszSectionName);
static void init_copymap(service * pservice);
-/* This is a helper function for parametrical options support. */
-/* It returns a pointer to parametrical option value if it exists or NULL otherwise */
-/* Actual parametrical functions are quite simple */
-static const char *get_parametrics(int lookup_service, const char *type, const char *option)
-{
- char* vfskey;
- param_opt_struct *data;
-
- if (lookup_service >= iNumServices) return NULL;
-
- data = (lookup_service < 0) ?
- Globals.param_opt : ServicePtrs[lookup_service]->param_opt;
-
- asprintf(&vfskey, "%s:%s", type, option);
- while (data) {
- if (strcmp(data->key, vfskey) == 0) {
- string_free(&vfskey);
- return data->value;
- }
- data = data->next;
- }
-
- if (lookup_service >= 0) {
- /* Try to fetch the same option but from globals */
- /* but only if we are not already working with Globals */
- data = Globals.param_opt;
- while (data) {
- if (strcmp(data->key, vfskey) == 0) {
- string_free(&vfskey);
- return data->value;
- }
- data = data->next;
- }
- }
-
- string_free(&vfskey);
-
- return NULL;
-}
-
-
-/*******************************************************************
-convenience routine to return int parameters.
-********************************************************************/
-static int lp_int(const char *s)
-{
-
- if (!s) {
- DEBUG(0,("lp_int(%s): is called with NULL!\n",s));
- return (-1);
- }
-
- return atoi(s);
-}
-
-/*******************************************************************
-convenience routine to return unsigned long parameters.
-********************************************************************/
-static int lp_ulong(const char *s)
-{
-
- if (!s) {
- DEBUG(0,("lp_int(%s): is called with NULL!\n",s));
- return (-1);
- }
-
- return strtoul(s, NULL, 10);
-}
-
-/*******************************************************************
-convenience routine to return boolean parameters.
-********************************************************************/
-static BOOL lp_bool(const char *s)
-{
- BOOL ret = False;
-
- if (!s) {
- DEBUG(0,("lp_bool(%s): is called with NULL!\n",s));
- return False;
- }
-
- if (!set_boolean(&ret,s)) {
- DEBUG(0,("lp_bool(%s): value is not boolean!\n",s));
- return False;
- }
-
- return ret;
-}
-
-/*******************************************************************
-convenience routine to return enum parameters.
-********************************************************************/
-static int lp_enum(const char *s,const struct enum_list *_enum)
-{
- int i;
-
- if (!s || !_enum) {
- DEBUG(0,("lp_enum(%s,enum): is called with NULL!\n",s));
- return False;
- }
-
- for (i=0; _enum[i].name; i++) {
- if (strcasecmp(_enum[i].name,s)==0)
- return _enum[i].value;
- }
-
- DEBUG(0,("lp_enum(%s,enum): value is not in enum_list!\n",s));
- return (-1);
-}
-
-/* Return parametric option from a given service. Type is a part of option before ':' */
-/* Parametric option has following syntax: 'Type: option = value' */
-/* Returned value is allocated in 'lp_talloc' context */
-
-char *lp_parm_string(int lookup_service, const char *type, const char *option)
-{
- const char *value = get_parametrics(lookup_service, type, option);
-
- if (value)
- return lp_string(value);
-
- return NULL;
-}
-
-/* Return parametric option from a given service. Type is a part of option before ':' */
-/* Parametric option has following syntax: 'Type: option = value' */
-/* Returned value is allocated in 'lp_talloc' context */
-
-char **lp_parm_string_list(int lookup_service, const char *type, const char *option,
- const char *separator)
-{
- const char *value = get_parametrics(lookup_service, type, option);
-
- if (value)
- return str_list_make(value, separator);
-
- return NULL;
-}
-
-/* Return parametric option from a given service. Type is a part of option before ':' */
-/* Parametric option has following syntax: 'Type: option = value' */
-
-int lp_parm_int(int lookup_service, const char *type, const char *option)
-{
- const char *value = get_parametrics(lookup_service, type, option);
-
- if (value)
- return lp_int(value);
-
- return (-1);
-}
-
-/* Return parametric option from a given service. Type is a part of option before ':' */
-/* Parametric option has following syntax: 'Type: option = value' */
-
-unsigned long lp_parm_ulong(int lookup_service, const char *type, const char *option)
-{
- const char *value = get_parametrics(lookup_service, type, option);
-
- if (value)
- return lp_ulong(value);
-
- return (0);
-}
-
-/* Return parametric option from a given service. Type is a part of option before ':' */
-/* Parametric option has following syntax: 'Type: option = value' */
-
-BOOL lp_parm_bool(int lookup_service, const char *type, const char *option)
-{
- const char *value = get_parametrics(lookup_service, type, option);
-
- if (value)
- return lp_bool(value);
-
- return False;
-}
-
-/* Return parametric option from a given service. Type is a part of option before ':' */
-/* Parametric option has following syntax: 'Type: option = value' */
-
-int lp_parm_enum(int lookup_service, const char *type, const char *option,
- const struct enum_list *_enum)
-{
- const char *value = get_parametrics(lookup_service, type, option);
-
- if (value)
- return lp_enum(value, _enum);
-
- return (-1);
-}
-
/***************************************************************************
Initialise a service to the defaults.
static void free_service(service *pservice)
{
int i;
- param_opt_struct *data, *pdata;
if (!pservice)
return;
PTR_DIFF(parm_table[i].ptr, &sDefault)));
}
- DEBUG(5,("Freeing parametrics:\n"));
- data = pservice->param_opt;
- while (data) {
- DEBUG(5,("[%s = %s]\n", data->key, data->value));
- string_free(&data->key);
- string_free(&data->value);
- pdata = data->next;
- SAFE_FREE(data);
- data = pdata;
- }
ZERO_STRUCTP(pservice);
}
int i;
service tservice;
int num_to_alloc = iNumServices + 1;
- param_opt_struct *data, *pdata;
tservice = *pservice;
/* it might already exist */
if (name) {
i = getservicebyname(name, NULL);
- if (i >= 0) {
- /* Clean all parametric options for service */
- /* They will be added during parsing again */
- data = ServicePtrs[i]->param_opt;
- while (data) {
- string_free(&data->key);
- string_free(&data->value);
- pdata = data->next;
- SAFE_FREE(data);
- data = pdata;
- }
- ServicePtrs[i]->param_opt = NULL;
+ if (i >= 0)
return (i);
- }
}
/* find an invalid one */
represent a boolean.
***************************************************************************/
-static BOOL set_boolean(BOOL *pb, const char *pszParmValue)
+static BOOL set_boolean(BOOL *pb, char *pszParmValue)
{
BOOL bRetval;
{
int i;
BOOL bcopyall = (pcopymapDest == NULL);
- param_opt_struct *data, *pdata, *paramo;
- BOOL not_added;
for (i = 0; parm_table[i].label; i++)
if (parm_table[i].ptr && parm_table[i].class == P_LOCAL &&
(void *)pserviceSource->copymap,
sizeof(BOOL) * NUMPARAMETERS);
}
-
- data = pserviceSource->param_opt;
- while (data) {
- not_added = True;
- pdata = pserviceDest->param_opt;
- /* Traverse destination */
- while (pdata) {
- /* If we already have same option, override it */
- if (strcmp(pdata->key, data->key) == 0) {
- string_free(&pdata->value);
- pdata->value = strdup(data->value);
- not_added = False;
- break;
- }
- pdata = pdata->next;
- }
- if (not_added) {
- paramo = smb_xmalloc(sizeof(param_opt_struct));
- paramo->key = strdup(data->key);
- paramo->value = strdup(data->value);
- DLIST_ADD(pserviceDest->param_opt, paramo);
- }
- data = data->next;
- }
}
/***************************************************************************
void *def_ptr = NULL;
pstring vfskey;
char *sep;
- param_opt_struct *paramo, *data;
- BOOL not_added;
+ param_opt_struct *paramo;
parmnum = map_parameter(pszParmName);
if ((sep=strchr(pszParmName, ':')) != NULL) {
*sep = 0;
ZERO_STRUCT(vfskey);
- pstr_sprintf(vfskey, "%s:", pszParmName);
+ pstr_sprintf(vfskey, "%s:%s:",
+ (snum >= 0) ? lp_servicename(snum) : "global", pszParmName);
slen = strlen(vfskey);
safe_strcat(vfskey, sep+1, sizeof(pstring));
trim_string(vfskey+slen, " ", " ");
- not_added = True;
- data = (snum < 0) ? Globals.param_opt :
- ServicePtrs[snum]->param_opt;
- /* Traverse destination */
- while (data) {
- /* If we already have same option, override it */
- if (strcmp(data->key, vfskey) == 0) {
- string_free(&data->value);
- data->value = strdup(pszParmValue);
- not_added = False;
- break;
- }
- data = data->next;
- }
- if (not_added) {
- paramo = smb_xmalloc(sizeof(param_opt_struct));
- paramo->key = strdup(vfskey);
- paramo->value = strdup(pszParmValue);
- if (snum < 0) {
- DLIST_ADD(Globals.param_opt, paramo);
- } else {
- DLIST_ADD(ServicePtrs[snum]->param_opt, paramo);
- }
- }
-
+ paramo = smb_xmalloc(sizeof(param_opt_struct));
+ paramo->key = strdup(vfskey);
+ paramo->value = strdup(pszParmValue);
+ DLIST_ADD(param_opt, paramo);
*sep = ':';
return (True);
}
{
int i;
param_opt_struct *data;
+ char *s;
fprintf(f, "# Global parameters\n[global]\n");
print_parameter(&parm_table[i], parm_table[i].ptr, f);
fprintf(f, "\n");
}
- if (Globals.param_opt != NULL) {
- data = Globals.param_opt;
+ if (param_opt != NULL) {
+ data = param_opt;
while(data) {
- fprintf(f, "\t%s = %s\n", data->key, data->value);
- data = data->next;
+ if (((s=strstr(data->key, "global")) == data->key) &&
+ (*(s+strlen("global")) == ':')) {
+ fprintf(f, "\t%s = %s\n", s+strlen("global")+1, data->value);
+ }
+ data = data->next;
}
}
{
int i;
param_opt_struct *data;
+ char *s, *sn;
if (pService != &sDefault)
fprintf(f, "\n[%s]\n", pService->szService);
((char *)pService) + pdiff, f);
fprintf(f, "\n");
}
- if (pService->param_opt != NULL) {
- data = pService->param_opt;
+ if (param_opt != NULL) {
+ data = param_opt;
+ sn = (pService == &sDefault) ? "global" : pService->szService;
while(data) {
- fprintf(f, "\t%s = %s\n", data->key, data->value);
- data = data->next;
+ if (((s=strstr(data->key, sn)) == data->key) &&
+ (*(s+strlen(sn)) == ':')) {
+ fprintf(f, "\t%s = %s\n", s+strlen(sn)+1, data->value);
+ }
+ data = data->next;
}
}
}
lp_save_defaults();
}
- if (Globals.param_opt != NULL) {
- data = Globals.param_opt;
+ if (param_opt != NULL) {
+ data = param_opt;
while (data) {
- string_free(&data->key);
- string_free(&data->value);
+ SAFE_FREE(data->key);
+ SAFE_FREE(data->value);
pdata = data->next;
SAFE_FREE(data);
data = pdata;
}
- Globals.param_opt = NULL;
+ param_opt = NULL;
}
/* We get sections first, so have to start 'behind' to make up */
#define DBGC_CLASS DBGC_PASSDB
/** List of various built-in passdb modules */
-const struct {
- char *name;
- /* Function to create a member of the pdb_methods list */
- pdb_init_function init;
-} builtin_pdb_init_functions[] = {
+
+const struct pdb_init_function_entry builtin_pdb_init_functions[] = {
{ "smbpasswd", pdb_init_smbpasswd },
{ "smbpasswd_nua", pdb_init_smbpasswd_nua },
{ "tdbsam", pdb_init_tdbsam },
{ "ldapsam_nua", pdb_init_ldapsam_nua },
{ "unixsam", pdb_init_unixsam },
{ "nisplussam", pdb_init_nisplussam },
+ { "plugin", pdb_init_plugin },
{ NULL, NULL}
};
-static struct pdb_init_function_entry *backends;
-static void lazy_initialize_passdb(void);
-
-static void lazy_initialize_passdb()
-{
- int i;
- static BOOL initialised = False;
-
- if(!initialised) {
- initialised = True;
-
- for(i = 0; builtin_pdb_init_functions[i].name; i++) {
- smb_register_passdb(builtin_pdb_init_functions[i].name, builtin_pdb_init_functions[i].init, PASSDB_INTERFACE_VERSION);
- }
- }
-}
-
-BOOL smb_register_passdb(char *name, pdb_init_function init, int version)
-{
- struct pdb_init_function_entry *entry = backends;
-
- if(version != PASSDB_INTERFACE_VERSION)
- return False;
-
- DEBUG(5,("Attempting to register passdb backend %s\n", name));
-
- /* Check for duplicates */
- while(entry) {
- if(strcasecmp(name, entry->name) == 0) {
- DEBUG(0,("There already is a passdb backend registered with the name %s!\n", name));
- return False;
- }
- entry = entry->next;
- }
-
- entry = smb_xmalloc(sizeof(struct pdb_init_function_entry));
- entry->name = name;
- entry->init = init;
-
- DLIST_ADD(backends, entry);
- DEBUG(5,("Successfully added passdb backend '%s'\n", name));
- return True;
-}
-
static NTSTATUS context_setsampwent(struct pdb_context *context, BOOL update)
{
NTSTATUS ret = NT_STATUS_UNSUCCESSFUL;
{
char *module_name = smb_xstrdup(selected);
char *module_location = NULL, *p;
- struct pdb_init_function_entry *entry;
NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
-
- lazy_initialize_passdb();
-
- entry = backends;
+ int i;
p = strchr(module_name, ':');
trim_string(module_name, " ", " ");
DEBUG(5,("Attempting to find an passdb backend to match %s (%s)\n", selected, module_name));
- while(entry) {
- if (strequal(entry->name, module_name))
+ for (i = 0; builtin_pdb_init_functions[i].name; i++)
+ {
+ if (strequal(builtin_pdb_init_functions[i].name, module_name))
{
- DEBUG(5,("Found pdb backend %s\n", module_name));
- nt_status = entry->init(context, methods, module_location);
+ DEBUG(5,("Found pdb backend %s (at pos %d)\n", module_name, i));
+ nt_status = builtin_pdb_init_functions[i].init(context, methods, module_location);
if (NT_STATUS_IS_OK(nt_status)) {
DEBUG(5,("pdb backend %s has a valid init\n", selected));
} else {
return nt_status;
break; /* unreached */
}
- entry = entry->next;
}
/* No such backend found */
}
if (rc == LDAP_SERVER_DOWN) {
- DEBUG(0,("%s: LDAP server is down!\n",FUNCTION_MACRO));
+ DEBUG(0,("%s: LDAP server is down!\n",__FUNCTION__));
ldapsam_close(ldap_state);
}
}
if (rc == LDAP_SERVER_DOWN) {
- DEBUG(0,("%s: LDAP server is down!\n",FUNCTION_MACRO));
+ DEBUG(0,("%s: LDAP server is down!\n",__FUNCTION__));
ldapsam_close(ldap_state);
}
}
if (rc == LDAP_SERVER_DOWN) {
- DEBUG(0,("%s: LDAP server is down!\n",FUNCTION_MACRO));
+ DEBUG(0,("%s: LDAP server is down!\n",__FUNCTION__));
ldapsam_close(ldap_state);
}
}
if (rc == LDAP_SERVER_DOWN) {
- DEBUG(0,("%s: LDAP server is down!\n",FUNCTION_MACRO));
+ DEBUG(0,("%s: LDAP server is down!\n",__FUNCTION__));
ldapsam_close(ldap_state);
}
}
if (rc == LDAP_SERVER_DOWN) {
- DEBUG(0,("%s: LDAP server is down!\n",FUNCTION_MACRO));
+ DEBUG(0,("%s: LDAP server is down!\n",__FUNCTION__));
ldapsam_close(ldap_state);
}
#undef DBGC_CLASS
#define DBGC_CLASS mysqlsam_debug_level
+PDB_MODULE_VERSIONING_MAGIC
+
typedef struct pdb_mysql_data {
MYSQL *handle;
MYSQL_RES *pwent;
- const char *location;
+ char *location;
} pdb_mysql_data;
/* Used to construct insert and update queries */
}
-static NTSTATUS mysqlsam_init(struct pdb_context * pdb_context, struct pdb_methods ** pdb_method,
- const char *location)
+NTSTATUS pdb_init(PDB_CONTEXT * pdb_context, PDB_METHODS ** pdb_method,
+ char *location)
{
NTSTATUS nt_status;
struct pdb_mysql_data *data;
return NT_STATUS_OK;
}
-
-int init_module(void);
-
-int init_module()
-{
- if(smb_register_passdb("mysql", mysqlsam_init, PASSDB_INTERFACE_VERSION))
- return 0;
-
- return 1;
-}
/*
Unix SMB/CIFS implementation.
- Loadable san module interface.
- Copyright (C) Jelmer Vernooij 2002
- Copyright (C) Andrew Bartlett 2002
- Copyright (C) Stefan (metze) Metzmacher 2002
+ Loadable passdb module interface.
+ Copyright (C) Jelmer Vernooij 2002
+ Copyright (C) Andrew Bartlett 2002
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
#include "includes.h"
#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_SAM
+#define DBGC_CLASS DBGC_PASSDB
-NTSTATUS sam_init_plugin(SAM_METHODS *sam_methods, const char *module_params)
+NTSTATUS pdb_init_plugin(PDB_CONTEXT *pdb_context, PDB_METHODS **pdb_method, const char *location)
{
- void *dl_handle;
- char *plugin_params, *plugin_name, *p;
- sam_init_function plugin_init;
+ void * dl_handle;
+ char *plugin_location, *plugin_name, *p;
+ pdb_init_function plugin_init;
int (*plugin_version)(void);
- if (module_params == NULL) {
+ if (location == NULL) {
DEBUG(0, ("The plugin module needs an argument!\n"));
return NT_STATUS_UNSUCCESSFUL;
}
- plugin_name = smb_xstrdup(module_params);
+ plugin_name = smb_xstrdup(location);
p = strchr(plugin_name, ':');
if (p) {
*p = 0;
- plugin_params = p+1;
- trim_string(plugin_params, " ", " ");
- } else plugin_params = NULL;
+ plugin_location = p+1;
+ trim_string(plugin_location, " ", " ");
+ } else plugin_location = NULL;
trim_string(plugin_name, " ", " ");
DEBUG(5, ("Trying to load sam plugin %s\n", plugin_name));
- dl_handle = sys_dlopen(plugin_name, RTLD_NOW);
+ dl_handle = sys_dlopen(plugin_name, RTLD_NOW );
if (!dl_handle) {
DEBUG(0, ("Failed to load sam plugin %s using sys_dlopen (%s)\n", plugin_name, sys_dlerror()));
return NT_STATUS_UNSUCCESSFUL;
}
- plugin_version = sys_dlsym(dl_handle, "sam_version");
+ plugin_version = sys_dlsym(dl_handle, "pdb_version");
if (!plugin_version) {
sys_dlclose(dl_handle);
- DEBUG(0, ("Failed to find function 'sam_version' using sys_dlsym in sam plugin %s (%s)\n", plugin_name, sys_dlerror()));
+ DEBUG(0, ("Failed to find function 'pdb_version' using sys_dlsym in sam plugin %s (%s)\n", plugin_name, sys_dlerror()));
return NT_STATUS_UNSUCCESSFUL;
}
- if (plugin_version()!=SAM_INTERFACE_VERSION) {
+ if (plugin_version() != PASSDB_INTERFACE_VERSION) {
sys_dlclose(dl_handle);
- DEBUG(0, ("Wrong SAM_INTERFACE_VERSION! sam plugin has version %d and version %d is needed! Please update!\n",
- plugin_version(),SAM_INTERFACE_VERSION));
+ DEBUG(0, ("Wrong PASSDB_INTERFACE_VERSION! sam plugin has version %d and version %d is needed! Please update!\n",
+ plugin_version(),PASSDB_INTERFACE_VERSION));
return NT_STATUS_UNSUCCESSFUL;
}
- plugin_init = sys_dlsym(dl_handle, "sam_init");
+ plugin_init = sys_dlsym(dl_handle, "pdb_init");
if (!plugin_init) {
sys_dlclose(dl_handle);
- DEBUG(0, ("Failed to find function 'sam_init' using sys_dlsym in sam plugin %s (%s)\n", plugin_name, sys_dlerror()));
+ DEBUG(0, ("Failed to find function 'pdb_init' using sys_dlsym in sam plugin %s (%s)\n", plugin_name, sys_dlerror()));
return NT_STATUS_UNSUCCESSFUL;
}
- DEBUG(5, ("Starting sam plugin %s with parameters %s for domain %s\n", plugin_name, plugin_params, sam_methods->domain_name));
- return plugin_init(sam_methods, plugin_params);
+ DEBUG(5, ("Starting sam plugin %s with location %s\n", plugin_name, plugin_location));
+ return plugin_init(pdb_context, pdb_method, plugin_location);
}
#undef DBGC_CLASS
#define DBGC_CLASS xmlsam_debug_level
+PDB_MODULE_VERSIONING_MAGIC
+
static char * iota(int a) {
static char tmp[10];
return NT_STATUS_OK;
}
-NTSTATUS xmlsam_init(PDB_CONTEXT * pdb_context, PDB_METHODS ** pdb_method,
+NTSTATUS pdb_init(PDB_CONTEXT * pdb_context, PDB_METHODS ** pdb_method,
const char *location)
{
NTSTATUS nt_status;
return NT_STATUS_OK;
}
-
-int init_module(void);
-
-int init_module()
-{
- if(smb_register_passdb("xml", xmlsam_init, PASSDB_INTERFACE_VERSION))
- return 0;
-
- return 1;
-}
tdb_unlock_bystring(tdb, name);
DEBUG(10,("secrets_named_mutex: released mutex for %s\n", name ));
}
-
-/*********************************************************
- Check to see if we must talk to the PDC to avoid sam
- sync delays
- ********************************************************/
-
-BOOL must_use_pdc( const char *domain )
-{
- time_t now = time(NULL);
- time_t last_change_time;
- unsigned char passwd[16];
-
- if ( !secrets_fetch_trust_account_password(domain, passwd, &last_change_time) )
- return False;
-
- /*
- * If the time the machine password has changed
- * was less than about 15 minutes then we need to contact
- * the PDC only, as we cannot be sure domain replication
- * has yet taken place. Bug found by Gerald (way to go
- * Gerald !). JRA.
- */
-
- if ( now - last_change_time < SAM_SYNC_WINDOW )
- return True;
-
- return False;
-
-}
-
Returns a reference to None, or NULL for failure.
*/
static PyObject *pytdbunpack_item(char ch,
- char **pbuf,
- int *plen,
- PyObject *val_list)
+ char **pbuf,
+ int *plen,
+ PyObject *val_list)
{
- PyObject *unpacked;
+ PyObject *result;
if (ch == 'w') { /* 16-bit int */
- unpacked = pytdbunpack_int16(pbuf, plen);
+ result = pytdbunpack_int16(pbuf, plen);
}
else if (ch == 'd' || ch == 'p') { /* 32-bit int */
/* pointers can just come through as integers */
- unpacked = pytdbunpack_uint32(pbuf, plen);
+ result = pytdbunpack_uint32(pbuf, plen);
}
else if (ch == 'f' || ch == 'P') { /* nul-term string */
- unpacked = pytdbunpack_string(pbuf, plen, pytdb_unix_encoding);
+ result = pytdbunpack_string(pbuf, plen, pytdb_unix_encoding);
}
else if (ch == 'B') { /* length, buffer */
return pytdbunpack_buffer(pbuf, plen, val_list);
}
/* otherwise OK */
- if (!unpacked)
+ if (!result)
+ return NULL;
+ if (PyList_Append(val_list, result) == -1)
return NULL;
-
- if (PyList_Append(val_list, unpacked) == -1)
- val_list = NULL;
-
- /* PyList_Append takes a new reference to the inserted object.
- Therefore, we no longer need the original reference. */
- Py_DECREF(unpacked);
return val_list;
}
return False;
}
- if (data_left == prs_offset(data))
+ if (data_left == prs_offset(data)) {
flags |= RPC_FLG_FIRST;
-
+ callid = 0;
+ }
if (data_left < max_data)
flags |= RPC_FLG_LAST;
/*
pstrcpy(my_name, global_myname());
- if (!NT_STATUS_IS_OK(status
- = nt_token_to_group_list(p->mem_ctx,
- &domain_sid,
- server_info->ptok,
- &num_gids,
- &gids))) {
- return status;
- }
+ /*
+ * This is the point at which we get the group
+ * database - we should be getting the gid_t list
+ * from /etc/group and then turning the uids into
+ * rids and then into machine sids for this user.
+ * JRA.
+ */
+
+ gids = NULL;
+ get_domain_user_groups(p->mem_ctx, &num_gids, &gids, server_info->sam_account);
init_net_user_info3(p->mem_ctx, usr_info,
user_rid,
/* Get what we need from the password database */
switch (q_u->switch_level) {
case 0x1:
- /* When playing with usrmgr, this is necessary
- if you want immediate refresh after editing
- a user. I would like to do this after the
- setuserinfo2, but we do not have access to
- the domain handle in that call, only to the
- user handle. Where else does this hurt?
- -- Volker
- */
-#if 0
- /* We cannot do this here - it kills performace. JRA. */
- free_samr_users(info);
-#endif
case 0x2:
case 0x4:
become_root();
* So we go the easy way, only check after if the account exists.
* JFM (2/3/2001), to clear any possible bad understanding (-:
*
- * We now have separate script paramaters for adding users/machines so we
+ * We now have seperate script paramaters for adding users/machines so we
* now have some sainity-checking to match.
*/
DEBUG(0,("get_domain_user_groups: primary gid of user [%s] is not a Domain group !\n", user_name));
DEBUGADD(0,("get_domain_user_groups: You should fix it, NT doesn't like that\n"));
-
done:
*pgids=gids;
*numgroups=cur_gid;
return True;
}
-/*******************************************************************
- gets a domain user's groups from their already-calculated NT_USER_TOKEN
- ********************************************************************/
-NTSTATUS nt_token_to_group_list(TALLOC_CTX *mem_ctx, const DOM_SID *domain_sid,
- const NT_USER_TOKEN *nt_token,
- int *numgroups, DOM_GID **pgids)
-{
- DOM_GID *gids;
- int i;
-
- gids = (DOM_GID *)talloc(mem_ctx, sizeof(*gids) * nt_token->num_sids);
-
- if (!gids) {
- return NT_STATUS_NO_MEMORY;
- }
-
- *numgroups=0;
-
- for (i=PRIMARY_GROUP_SID_INDEX; i < nt_token->num_sids; i++) {
- if (sid_compare_domain(domain_sid, &nt_token->user_sids[i])==0) {
- sid_peek_rid(&nt_token->user_sids[i], &(gids[*numgroups].g_rid));
- gids[*numgroups].attr=7;
- (*numgroups)++;
- }
- }
- *pgids = gids;
- return NT_STATUS_OK;
-}
-
/*******************************************************************
Look up a local (domain) rid and return a name and type.
********************************************************************/
if (!NT_STATUS_IS_OK(result))
goto done;
+ ZERO_STRUCT(group_ctr);
+
result = cli_samr_query_groupinfo(cli, mem_ctx, &group_pol,
info_level, &group_ctr);
if (!NT_STATUS_IS_OK(result)) {
+++ /dev/null
-SAM API \r
-\r
-NTSTATUS sam_get_sec_obj(NT_USER_TOKEN *access, DOM_SID *sid, SEC_DESC **sd)\r
-NTSTATUS sam_set_sec_obj(NT_USER_TOKEN *access, DOM_SID *sid, SEC_DESC *sd)\r
-\r
-NTSTATUS sam_lookup_name(NT_USER_TOKEN *access, DOM_SID *domain, char *name, DOM_SID **sid, uint32 *type)\r
-NTSTATUS sam_lookup_sid(NT_USER_TOKEN *access, DOM_SID *sid, char **name, uint32 *type)\r
-\r
-\r
-Domain API \r
-\r
-NTSTATUS sam_update_domain(SAM_DOMAIN_HANDLE *domain)\r
-\r
-NTSTATUS sam_enum_domains(NT_USER_TOKEN *access, int32 *domain_count, DOM_SID **domains, char **domain_names)\r
-NTSTATUS sam_lookup_domain(NT_USER_TOKEN *access, char *domain, DOM_SID **domainsid)\r
-\r
-NTSTATUS sam_get_domain_by_sid(NT_USER_TOKEN *access, uint32 access_desired, DOM_SID *domainsid, SAM_DOMAIN_HANDLE **domain)\r
-\r
-\r
-User API\r
-\r
-NTSTATUS sam_create_user(NT_USER_TOKEN *access, uint32 access_desired, SAM_USER_HANDLE **user)\r
-NTSTATUS sam_add_user(SAM_USER_HANDLE *user)\r
-NTSTATUS sam_update_user(SAM_USER_HANDLE *user)\r
-NTSTATUS sam_delete_user(SAM_USER_HANDLE * user)\r
-\r
-NTSTATUS sam_enum_users(NT_USER_TOKEN *access, DOM_SID *domain, int32 *user_count, SAM_USER_ENUM **users)\r
-\r
-NTSTATUS sam_get_user_by_sid(NT_USER_TOKEN *access, uint32 access_desired, DOM_SID *usersid, SAM_USER_HANDLE **user)\r
-NTSTATUS sam_get_user_by_name(NT_USER_TOKEN *access, uint32 access_desired, char *domain, char *name, SAM_USER_HANDLE **user)\r
-\r
-\r
-Group API \r
-\r
-NTSTATUS sam_create_group(NT_USER_TOKEN *access, uint32 access_desired, uint32 typ, SAM_GROUP_HANDLE **group)\r
-NTSTATUS sam_add_group(SAM_GROUP_HANDLE *samgroup)\r
-NTSTATUS sam_update_group(SAM_GROUP_HANDLE *samgroup)\r
-NTSTATUS sam_delete_group(SAM_GROUP_HANDLE *groupsid)\r
-\r
-NTSTATUS sam_enum_groups(NT_USER_TOKEN *access, DOM_SID *domainsid, uint32 typ, uint32 *groups_count, SAM_GROUP_ENUM **groups)\r
-\r
-NTSTATUS sam_get_group_by_sid(NT_USER_TOKEN *access, uint32 access_desired, DOM_SID *groupsid, SAM_GROUP_HANDLE **group)\r
-NTSTATUS sam_get_group_by_name(NT_USER_TOKEN *access, uint32 access_desired, char *domain, char *name, SAM_GROUP_HANDLE **group)\r
-\r
-NTSTATUS sam_add_member_to_group(SAM_GROUP_HANDLE *group, SAM_GROUP_MEMBER *member)\r
-NTSTATUS sam_delete_member_from_group(SAM_GROUP_HANDLE *group, SAM_GROUP_MEMBER *member)\r
-NTSTATUS sam_enum_groupmembers(SAM_GROUP_HANLDE *group, uint32 *members_count, SAM_GROUP_MEMBER **members)\r
-\r
-NTSTATUS sam_get_groups_of_user(SAM_USER_HANDLE *user, uint32 typ, uint32 *group_count, SAM_GROUP_ENUM **groups)\r
-\r
-\r
-\r
-structures\r
-\r
-typedef _SAM_GROUP_MEMBER {\r
- DOM_SID sid; \r
- BOOL group; /* specifies if it is a group or a user */ \r
-\r
-} SAM_GROUP_MEMBER\r
-\r
-typedef struct sam_user_enum {\r
- DOM_SID sid; \r
- char *username; \r
- char *full_name; \r
- char *user_desc; \r
- uint16 acc_ctrl; \r
-} SAM_USER_ENUM;\r
-\r
-typedef struct sam_group_enum {\r
- DOM_SID sid;\r
- char *groupname;\r
- char *comment;\r
-} SAM_GROUP_ENUM\r
-\r
-NTSTATUS sam_get_domain_sid(SAM_DOMAIN_HANDLE *domain, DOM_SID **sid)\r
-NTSTATUS sam_get_domain_num_users(SAM_DOMAIN_HANDLE *domain, uint32 *num_users)\r
-NTSTATUS sam_get_domain_num_groups(SAM_DOMAIN_HANDLE *domain, uint32 *num_groups)\r
-NTSTATUS sam_get_domain_num_aliases(SAM_DOMAIN_HANDLE *domain, uint32 *num_aliases)\r
-NTSTATUS sam_{get,set}_domain_name(SAM_DOMAIN_HANDLE *domain, char **domain_name)\r
-NTSTATUS sam_{get,set}_domain_server(SAM_DOMAIN_HANDLE *domain, char **server_name)\r
-NTSTATUS sam_{get,set}_domain_max_pwdage(SAM_DOMAIN_HANDLE *domain, NTTIME *max_passwordage)\r
-NTSTATUS sam_{get,set}_domain_min_pwdage(SAM_DOMAIN_HANDLE *domain, NTTIME *min_passwordage)\r
-NTSTATUS sam_{get,set}_domain_lockout_duration(SAM_DOMAIN_HANDLE *domain, NTTIME *lockout_duration)\r
-NTSTATUS sam_{get,set}_domain_reset_count(SAM_DOMAIN_HANDLE *domain, NTTIME *reset_lockout_count)\r
-NTSTATUS sam_{get,set}_domain_min_pwdlength(SAM_DOMAIN_HANDLE *domain, uint16 *min_passwordlength)\r
-NTSTATUS sam_{get,set}_domain_pwd_history(SAM_DOMAIN_HANDLE *domain, uin16 *password_history)\r
-NTSTATUS sam_{get,set}_domain_lockout_count(SAM_DOMAIN_HANDLE *domain, uint16 *lockout_count)\r
-NTSTATUS sam_{get,set}_domain_force_logoff(SAM_DOMAIN_HANDLE *domain, BOOL *force_logoff)\r
-NTSTATUS sam_{get,set}_domain_login_pwdchange(SAM_DOMAIN_HANDLE *domain, BOOL *login_pwdchange)\r
-\r
-NTSTATUS sam_get_user_sid(SAM_USER_HANDLE *user, DOM_SID **sid)\r
-NTSTATUS sam_{get,set}_user_pgroup(SAM_USER_HANDLE *user, DOM_SID **pgroup)\r
-NTSTATUS sam_{get,set}_user_name(SAM_USER_HANDLE *user, char **username)\r
-NTSTATUS sam_{get,set}_user_fullname(SAM_USER_HANDLE *user, char** fullname)\r
-NTSTATUS sam_{get,set}_user_description(SAM_USER_HANDLE *user, char **description)\r
-NTSTATUS sam_{get,set}_user_home_dir(SAM_USER_HANDLE *user, char **home_dir)\r
-NTSTATUS sam_{get,set}_user_dir_drive(SAM_USER_HANDLE *user, char **dir_drive)\r
-NTSTATUS sam_{get,set}_user_logon_script(SAM_USER_HANDLE *user, char **logon_script)\r
-NTSTATUS sam_{get,set}_user_profile_path(SAM_USER_HANDLE *user, char **profile_path)\r
-NTSTATUS sam_{get,set}_user_workstations(SAM_USER_HANDLE *user, char **workstations)\r
-NTSTATUS sam_{get,set}_user_munged_dial(SAM_USER_HANDLE *user, char **munged_dial)\r
-NTSTATUS sam_{get,set}_user_lm_pwd(SAM_USER_HANDLE *user, DATA_BLOB *lm_pwd)\r
-NTSTATUS sam_{get,set}_user_nt_pwd(SAM_USER_HANDLE *user, DATA_BLOB *nt_pwd)\r
-NTSTATUS sam_{get,set}_user_plain_pwd(SAM_USER_HANDLE *user, DATA_BLOB *plaintext_pwd)\r
-NTSTATUS sam_{get,set}_user_acct_ctrl(SAM_USER_HANDLE *user, uint16 *acct_ctrl)\r
-NTSTATUS sam_{get,set}_user_logon_divs(SAM_USER_HANDLE *user, uint16 *logon_divs)\r
-NTSTATUS sam_{get,set}_user_hours(SAM_USER_HANDLE *user, uint32 *hours_len, uint8 **hours)\r
-NTSTATUS sam_{get,set}_user_logon_time(SAM_USER_HANDLE *user, NTTIME *logon_time)\r
-NTSTATUS sam_{get,set}_user_logoff_time(SAM_USER_HANDLE *user, NTTIME *logoff_time)\r
-NTSTATUS sam_{get,set}_user_kickoff_time(SAM_USER_HANDLE *user, NTTIME kickoff_time)\r
-NTSTATUS sam_{get,set}_user_pwd_last_set(SAM_USER_HANDLE *user, NTTIME pwd_last_set)\r
-NTSTATUS sam_{get,set}_user_pwd_can_change(SAM_USER_HANDLE *user, NTTIME pwd_can_change)\r
-NTSTATUS sam_{get,set}_user_pwd_must_change(SAM_USER_HANDLE *user, NTTIME pwd_must_change)\r
-NTSTATUS sam_{get,set}_user_unknown_1(SAM_USER_HANDLE *user, char **unknown_1)\r
-NTSTATUS sam_{get,set}_user_unknown_2(SAM_USER_HANDLE *user, uint32 *unknown_2)\r
-NTSTATUS sam_{get,set}_user_unknown_3(SAM_USER_HANDLE *user, uint32 *unknown_3)\r
-NTSTATUS sam_{get,set}_user_unknown_4(SAM_USER_HANDLE *user, uint32 *unknown_4)\r
-\r
-NTSTATUS sam_get_group_sid(SAM_GROUP_HANDLE *group, DOM_SID **sid)\r
-NTSTATUS sam_get_group_typ(SAM_GROUP_HANDLE *group, uint32 *typ)\r
-NTSTATUS sam_{get,set}_group_name(SAM_GROUP_HANDLE *group, char **group_name)\r
-NTSTATUS sam_{get,set}_group_comment(SAM_GROUP_HANDLE *group, char **comment)\r
-NTSTATUS sam_{get,set}_group_priv_set(SAM_GROUP_HANDLE *group, PRIVILEGE_SET *priv_set)
\ No newline at end of file
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- Password and authentication handling
- Copyright (C) Jeremy Allison 1996-2001
- Copyright (C) Luke Kenneth Casson Leighton 1996-1998
- Copyright (C) Gerald (Jerry) Carter 2000-2001
- Copyright (C) Andrew Bartlett 2001-2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_SAM
-
-/************************************************************
- Fill the SAM_ACCOUNT_HANDLE with default values.
- ***********************************************************/
-
-static void sam_fill_default_account(SAM_ACCOUNT_HANDLE *account)
-{
- ZERO_STRUCT(account->private); /* Don't touch the talloc context */
-
- /* Don't change these timestamp settings without a good reason.
- They are important for NT member server compatibility. */
-
- /* FIXME: We should actually call get_nt_time_max() or sthng
- * here */
- unix_to_nt_time(&(account->private.logoff_time),get_time_t_max());
- unix_to_nt_time(&(account->private.kickoff_time),get_time_t_max());
- unix_to_nt_time(&(account->private.pass_must_change_time),get_time_t_max());
- account->private.unknown_1 = 0x00ffffff; /* don't know */
- account->private.logon_divs = 168; /* hours per week */
- account->private.hours_len = 21; /* 21 times 8 bits = 168 */
- memset(account->private.hours, 0xff, account->private.hours_len); /* available at all hours */
- account->private.unknown_2 = 0x00000000; /* don't know */
- account->private.unknown_3 = 0x000004ec; /* don't know */
-}
-
-static void destroy_sam_talloc(SAM_ACCOUNT_HANDLE **account)
-{
- if (*account) {
- data_blob_clear_free(&((*account)->private.lm_pw));
- data_blob_clear_free(&((*account)->private.nt_pw));
- if((*account)->private.plaintext_pw!=NULL)
- memset((*account)->private.plaintext_pw,'\0',strlen((*account)->private.plaintext_pw));
-
- talloc_destroy((*account)->mem_ctx);
- *account = NULL;
- }
-}
-
-
-/**********************************************************************
- Alloc memory and initialises a SAM_ACCOUNT_HANDLE on supplied mem_ctx.
-***********************************************************************/
-
-NTSTATUS sam_init_account_talloc(TALLOC_CTX *mem_ctx, SAM_ACCOUNT_HANDLE **account)
-{
- SMB_ASSERT(*account != NULL);
-
- if (!mem_ctx) {
- DEBUG(0,("sam_init_account_talloc: mem_ctx was NULL!\n"));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- *account=(SAM_ACCOUNT_HANDLE *)talloc(mem_ctx, sizeof(SAM_ACCOUNT_HANDLE));
-
- if (*account==NULL) {
- DEBUG(0,("sam_init_account_talloc: error while allocating memory\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- (*account)->mem_ctx = mem_ctx;
-
- (*account)->free_fn = NULL;
-
- sam_fill_default_account(*account);
-
- return NT_STATUS_OK;
-}
-
-
-/*************************************************************
- Alloc memory and initialises a struct sam_passwd.
- ************************************************************/
-
-NTSTATUS sam_init_account(SAM_ACCOUNT_HANDLE **account)
-{
- TALLOC_CTX *mem_ctx;
- NTSTATUS nt_status;
-
- mem_ctx = talloc_init_named("sam internal SAM_ACCOUNT_HANDLE allocation");
-
- if (!mem_ctx) {
- DEBUG(0,("sam_init_account: error while doing talloc_init()\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = sam_init_account_talloc(mem_ctx, account))) {
- talloc_destroy(mem_ctx);
- return nt_status;
- }
-
- (*account)->free_fn = destroy_sam_talloc;
-
- return NT_STATUS_OK;
-}
-
-/**
- * Free the contents of the SAM_ACCOUNT_HANDLE, but not the structure.
- *
- * Also wipes the LM and NT hashes and plaintext password from
- * memory.
- *
- * @param account SAM_ACCOUNT_HANDLE to free members of.
- **/
-
-static void sam_free_account_contents(SAM_ACCOUNT_HANDLE *account)
-{
-
- /* Kill off sensitive data. Free()ed by the
- talloc mechinism */
-
- data_blob_clear_free(&(account->private.lm_pw));
- data_blob_clear_free(&(account->private.nt_pw));
- if (account->private.plaintext_pw)
- memset(account->private.plaintext_pw,'\0',strlen(account->private.plaintext_pw));
-}
-
-
-/************************************************************
- Reset the SAM_ACCOUNT_HANDLE and free the NT/LM hashes.
- ***********************************************************/
-
-NTSTATUS sam_reset_sam(SAM_ACCOUNT_HANDLE *account)
-{
- SMB_ASSERT(account != NULL);
-
- sam_free_account_contents(account);
-
- sam_fill_default_account(account);
-
- return NT_STATUS_OK;
-}
-
-
-/************************************************************
- Free the SAM_ACCOUNT_HANDLE and the member pointers.
- ***********************************************************/
-
-NTSTATUS sam_free_account(SAM_ACCOUNT_HANDLE **account)
-{
- SMB_ASSERT(*account != NULL);
-
- sam_free_account_contents(*account);
-
- if ((*account)->free_fn) {
- (*account)->free_fn(account);
- }
-
- return NT_STATUS_OK;
-}
-
-
-/**********************************************************
- Encode the account control bits into a string.
- length = length of string to encode into (including terminating
- null). length *MUST BE MORE THAN 2* !
- **********************************************************/
-
-char *sam_encode_acct_ctrl(uint16 acct_ctrl, size_t length)
-{
- static fstring acct_str;
- size_t i = 0;
-
- acct_str[i++] = '[';
-
- if (acct_ctrl & ACB_PWNOTREQ ) acct_str[i++] = 'N';
- if (acct_ctrl & ACB_DISABLED ) acct_str[i++] = 'D';
- if (acct_ctrl & ACB_HOMDIRREQ) acct_str[i++] = 'H';
- if (acct_ctrl & ACB_TEMPDUP ) acct_str[i++] = 'T';
- if (acct_ctrl & ACB_NORMAL ) acct_str[i++] = 'U';
- if (acct_ctrl & ACB_MNS ) acct_str[i++] = 'M';
- if (acct_ctrl & ACB_WSTRUST ) acct_str[i++] = 'W';
- if (acct_ctrl & ACB_SVRTRUST ) acct_str[i++] = 'S';
- if (acct_ctrl & ACB_AUTOLOCK ) acct_str[i++] = 'L';
- if (acct_ctrl & ACB_PWNOEXP ) acct_str[i++] = 'X';
- if (acct_ctrl & ACB_DOMTRUST ) acct_str[i++] = 'I';
-
- for ( ; i < length - 2 ; i++ )
- acct_str[i] = ' ';
-
- i = length - 2;
- acct_str[i++] = ']';
- acct_str[i++] = '\0';
-
- return acct_str;
-}
-
-/**********************************************************
- Decode the account control bits from a string.
- **********************************************************/
-
-uint16 sam_decode_acct_ctrl(const char *p)
-{
- uint16 acct_ctrl = 0;
- BOOL finished = False;
-
- /*
- * Check if the account type bits have been encoded after the
- * NT password (in the form [NDHTUWSLXI]).
- */
-
- if (*p != '[')
- return 0;
-
- for (p++; *p && !finished; p++) {
- switch (*p) {
- case 'N': { acct_ctrl |= ACB_PWNOTREQ ; break; /* 'N'o password. */ }
- case 'D': { acct_ctrl |= ACB_DISABLED ; break; /* 'D'isabled. */ }
- case 'H': { acct_ctrl |= ACB_HOMDIRREQ; break; /* 'H'omedir required. */ }
- case 'T': { acct_ctrl |= ACB_TEMPDUP ; break; /* 'T'emp account. */ }
- case 'U': { acct_ctrl |= ACB_NORMAL ; break; /* 'U'ser account (normal). */ }
- case 'M': { acct_ctrl |= ACB_MNS ; break; /* 'M'NS logon user account. What is this ? */ }
- case 'W': { acct_ctrl |= ACB_WSTRUST ; break; /* 'W'orkstation account. */ }
- case 'S': { acct_ctrl |= ACB_SVRTRUST ; break; /* 'S'erver account. */ }
- case 'L': { acct_ctrl |= ACB_AUTOLOCK ; break; /* 'L'ocked account. */ }
- case 'X': { acct_ctrl |= ACB_PWNOEXP ; break; /* No 'X'piry on password */ }
- case 'I': { acct_ctrl |= ACB_DOMTRUST ; break; /* 'I'nterdomain trust account. */ }
- case ' ': { break; }
- case ':':
- case '\n':
- case '\0':
- case ']':
- default: { finished = True; }
- }
- }
-
- return acct_ctrl;
-}
-
-/*************************************************************
- Routine to set 32 hex password characters from a 16 byte array.
-**************************************************************/
-
-void sam_sethexpwd(char *p, const unsigned char *pwd, uint16 acct_ctrl)
-{
- if (pwd != NULL) {
- int i;
- for (i = 0; i < 16; i++)
- slprintf(&p[i*2], 3, "%02X", pwd[i]);
- } else {
- if (acct_ctrl & ACB_PWNOTREQ)
- safe_strcpy(p, "NO PASSWORDXXXXXXXXXXXXXXXXXXXXX", 33);
- else
- safe_strcpy(p, "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX", 33);
- }
-}
-
-/*************************************************************
- Routine to get the 32 hex characters and turn them
- into a 16 byte array.
-**************************************************************/
-
-BOOL sam_gethexpwd(const char *p, unsigned char *pwd)
-{
- int i;
- unsigned char lonybble, hinybble;
- char *hexchars = "0123456789ABCDEF";
- char *p1, *p2;
-
- if (!p)
- return (False);
-
- for (i = 0; i < 32; i += 2) {
- hinybble = toupper(p[i]);
- lonybble = toupper(p[i + 1]);
-
- p1 = strchr(hexchars, hinybble);
- p2 = strchr(hexchars, lonybble);
-
- if (!p1 || !p2)
- return (False);
-
- hinybble = PTR_DIFF(p1, hexchars);
- lonybble = PTR_DIFF(p2, hexchars);
-
- pwd[i / 2] = (hinybble << 4) | lonybble;
- }
- return (True);
-}
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- SAM_ACCOUNT_HANDLE access routines
- Copyright (C) Andrew Bartlett 2002
- Copyright (C) Stefan (metze) Metzmacher 2002
- Copyright (C) Jelmer Vernooij 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_SAM
-
-NTSTATUS sam_get_account_domain_sid(const SAM_ACCOUNT_HANDLE *sampass, const DOM_SID **sid)
-{
- NTSTATUS status;
- SAM_DOMAIN_HANDLE *domain;
- SAM_ASSERT(!sampass || !sid);
-
- if (!NT_STATUS_IS_OK(status = sam_get_account_domain(sampass, &domain))){
- DEBUG(0, ("sam_get_account_domain_sid: Can't get domain for account\n"));
- return status;
- }
-
- return sam_get_domain_sid(domain, sid);
-}
-
-NTSTATUS sam_get_account_domain_name(const SAM_ACCOUNT_HANDLE *sampass, const char **domain_name)
-{
- NTSTATUS status;
- SAM_DOMAIN_HANDLE *domain;
- SAM_ASSERT(sampass && domain_name);
-
- if (!NT_STATUS_IS_OK(status = sam_get_account_domain(sampass, &domain))){
- DEBUG(0, ("sam_get_account_domain_name: Can't get domain for account\n"));
- return status;
- }
-
- return sam_get_domain_name(domain, domain_name);
-}
-
-NTSTATUS sam_get_account_acct_ctrl(const SAM_ACCOUNT_HANDLE *sampass, uint16 *acct_ctrl)
-{
- SAM_ASSERT(sampass && acct_ctrl);
-
- *acct_ctrl = sampass->private.acct_ctrl;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_logon_time(const SAM_ACCOUNT_HANDLE *sampass, NTTIME *logon_time)
-{
- SAM_ASSERT(sampass && logon_time) ;
-
- *logon_time = sampass->private.logon_time;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_logoff_time(const SAM_ACCOUNT_HANDLE *sampass, NTTIME *logoff_time)
-{
- SAM_ASSERT(sampass && logoff_time) ;
-
- *logoff_time = sampass->private.logoff_time;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_kickoff_time(const SAM_ACCOUNT_HANDLE *sampass, NTTIME *kickoff_time)
-{
- SAM_ASSERT(sampass && kickoff_time);
-
- *kickoff_time = sampass->private.kickoff_time;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_pass_last_set_time(const SAM_ACCOUNT_HANDLE *sampass, NTTIME *pass_last_set_time)
-{
- SAM_ASSERT(sampass && pass_last_set_time);
-
- *pass_last_set_time = sampass->private.pass_last_set_time;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_pass_can_change_time(const SAM_ACCOUNT_HANDLE *sampass, NTTIME *pass_can_change_time)
-{
- SAM_ASSERT(sampass && pass_can_change_time);
-
- *pass_can_change_time = sampass->private.pass_can_change_time;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_pass_must_change_time(const SAM_ACCOUNT_HANDLE *sampass, NTTIME *pass_must_change_time)
-{
- SAM_ASSERT(sampass && pass_must_change_time);
-
- *pass_must_change_time = sampass->private.pass_must_change_time;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_logon_divs(const SAM_ACCOUNT_HANDLE *sampass, uint16 *logon_divs)
-{
- SAM_ASSERT(sampass && logon_divs);
-
- *logon_divs = sampass->private.logon_divs;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_hours_len(const SAM_ACCOUNT_HANDLE *sampass, uint32 *hours_len)
-{
- SAM_ASSERT(sampass && hours_len);
-
- *hours_len = sampass->private.hours_len;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_hours(const SAM_ACCOUNT_HANDLE *sampass, const uint8 **hours)
-{
- SAM_ASSERT(sampass && hours);
-
- *hours = sampass->private.hours;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_nt_pwd(const SAM_ACCOUNT_HANDLE *sampass, DATA_BLOB *nt_pwd)
-{
- SAM_ASSERT(sampass);
-
- SMB_ASSERT((!sampass->private.nt_pw.data)
- || sampass->private.nt_pw.length == NT_HASH_LEN);
-
- *nt_pwd = sampass->private.nt_pw;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_lm_pwd(const SAM_ACCOUNT_HANDLE *sampass, DATA_BLOB *lm_pwd)
-{
- SAM_ASSERT(sampass);
-
- SMB_ASSERT((!sampass->private.lm_pw.data)
- || sampass->private.lm_pw.length == LM_HASH_LEN);
-
- *lm_pwd = sampass->private.lm_pw;
-
- return NT_STATUS_OK;
-}
-
-/* Return the plaintext password if known. Most of the time
- it isn't, so don't assume anything magic about this function.
-
- Used to pass the plaintext to sam backends that might
- want to store more than just the NTLM hashes.
-*/
-
-NTSTATUS sam_get_account_plaintext_pwd(const SAM_ACCOUNT_HANDLE *sampass, char **plain_pwd)
-{
- SAM_ASSERT(sampass && plain_pwd);
-
- *plain_pwd = sampass->private.plaintext_pw;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_sid(const SAM_ACCOUNT_HANDLE *sampass, const DOM_SID **sid)
-{
- SAM_ASSERT(sampass);
-
- *sid = &(sampass->private.account_sid);
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_pgroup(const SAM_ACCOUNT_HANDLE *sampass, const DOM_SID **sid)
-{
- SAM_ASSERT(sampass);
-
- *sid = &(sampass->private.group_sid);
-
- return NT_STATUS_OK;
-}
-
-/**
- * Get flags showing what is initalised in the SAM_ACCOUNT_HANDLE
- * @param sampass the SAM_ACCOUNT_HANDLE in question
- * @return the flags indicating the members initialised in the struct.
- **/
-
-NTSTATUS sam_get_account_init_flag(const SAM_ACCOUNT_HANDLE *sampass, uint32 *initflag)
-{
- SAM_ASSERT(sampass);
-
- *initflag = sampass->private.init_flag;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_name(const SAM_ACCOUNT_HANDLE *sampass, char **account_name)
-{
- SAM_ASSERT(sampass);
-
- *account_name = sampass->private.account_name;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_domain(const SAM_ACCOUNT_HANDLE *sampass, SAM_DOMAIN_HANDLE **domain)
-{
- SAM_ASSERT(sampass);
-
- *domain = sampass->private.domain;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_fullname(const SAM_ACCOUNT_HANDLE *sampass, char **fullname)
-{
- SAM_ASSERT(sampass);
-
- *fullname = sampass->private.full_name;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_homedir(const SAM_ACCOUNT_HANDLE *sampass, char **homedir)
-{
- SAM_ASSERT(sampass);
-
- *homedir = sampass->private.home_dir;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_unix_home_dir(const SAM_ACCOUNT_HANDLE *sampass, char **uhomedir)
-{
- SAM_ASSERT(sampass);
-
- *uhomedir = sampass->private.unix_home_dir;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_dir_drive(const SAM_ACCOUNT_HANDLE *sampass, char **dirdrive)
-{
- SAM_ASSERT(sampass);
-
- *dirdrive = sampass->private.dir_drive;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_logon_script(const SAM_ACCOUNT_HANDLE *sampass, char **logon_script)
-{
- SAM_ASSERT(sampass);
-
- *logon_script = sampass->private.logon_script;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_profile_path(const SAM_ACCOUNT_HANDLE *sampass, char **profile_path)
-{
- SAM_ASSERT(sampass);
-
- *profile_path = sampass->private.profile_path;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_description(const SAM_ACCOUNT_HANDLE *sampass, char **description)
-{
- SAM_ASSERT(sampass);
-
- *description = sampass->private.acct_desc;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_workstations(const SAM_ACCOUNT_HANDLE *sampass, char **workstations)
-{
- SAM_ASSERT(sampass);
-
- *workstations = sampass->private.workstations;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_unknown_str(const SAM_ACCOUNT_HANDLE *sampass, char **unknown_str)
-{
- SAM_ASSERT(sampass);
-
- *unknown_str = sampass->private.unknown_str;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_munged_dial(const SAM_ACCOUNT_HANDLE *sampass, char **munged_dial)
-{
- SAM_ASSERT(sampass);
-
- *munged_dial = sampass->private.munged_dial;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_unknown_1(const SAM_ACCOUNT_HANDLE *sampass, uint32 *unknown1)
-{
- SAM_ASSERT(sampass && unknown1);
-
- *unknown1 = sampass->private.unknown_1;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_unknown_2(const SAM_ACCOUNT_HANDLE *sampass, uint32 *unknown2)
-{
- SAM_ASSERT(sampass && unknown2);
-
- *unknown2 = sampass->private.unknown_2;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_unknown_3(const SAM_ACCOUNT_HANDLE *sampass, uint32 *unknown3)
-{
- SAM_ASSERT(sampass && unknown3);
-
- *unknown3 = sampass->private.unknown_3;
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Collection of set...() functions for SAM_ACCOUNT_HANDLE_INFO.
- ********************************************************************/
-
-NTSTATUS sam_set_account_acct_ctrl(SAM_ACCOUNT_HANDLE *sampass, uint16 acct_ctrl)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.acct_ctrl = acct_ctrl;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_logon_time(SAM_ACCOUNT_HANDLE *sampass, NTTIME mytime, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.logon_time = mytime;
-
-
- return NT_STATUS_UNSUCCESSFUL;
-}
-
-NTSTATUS sam_set_account_logoff_time(SAM_ACCOUNT_HANDLE *sampass, NTTIME mytime, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.logoff_time = mytime;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_kickoff_time(SAM_ACCOUNT_HANDLE *sampass, NTTIME mytime, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.kickoff_time = mytime;
-
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_pass_can_change_time(SAM_ACCOUNT_HANDLE *sampass, NTTIME mytime, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.pass_can_change_time = mytime;
-
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_pass_must_change_time(SAM_ACCOUNT_HANDLE *sampass, NTTIME mytime, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.pass_must_change_time = mytime;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_pass_last_set_time(SAM_ACCOUNT_HANDLE *sampass, NTTIME mytime)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.pass_last_set_time = mytime;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_hours_len(SAM_ACCOUNT_HANDLE *sampass, uint32 len)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.hours_len = len;
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_logon_divs(SAM_ACCOUNT_HANDLE *sampass, uint16 hours)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.logon_divs = hours;
- return NT_STATUS_OK;
-}
-
-/**
- * Set flags showing what is initalised in the SAM_ACCOUNT_HANDLE
- * @param sampass the SAM_ACCOUNT_HANDLE in question
- * @param flag The *new* flag to be set. Old flags preserved
- * this flag is only added.
- **/
-
-NTSTATUS sam_set_account_init_flag(SAM_ACCOUNT_HANDLE *sampass, uint32 flag)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.init_flag |= flag;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_sid(SAM_ACCOUNT_HANDLE *sampass, const DOM_SID *u_sid)
-{
- SAM_ASSERT(sampass && u_sid);
-
- sid_copy(&sampass->private.account_sid, u_sid);
-
- DEBUG(10, ("sam_set_account_sid: setting account sid %s\n",
- sid_string_static(&sampass->private.account_sid)));
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_sid_from_string(SAM_ACCOUNT_HANDLE *sampass, const char *u_sid)
-{
- DOM_SID new_sid;
- SAM_ASSERT(sampass && u_sid);
-
- DEBUG(10, ("sam_set_account_sid_from_string: setting account sid %s\n",
- u_sid));
-
- if (!string_to_sid(&new_sid, u_sid)) {
- DEBUG(1, ("sam_set_account_sid_from_string: %s isn't a valid SID!\n", u_sid));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- if (!NT_STATUS_IS_OK(sam_set_account_sid(sampass, &new_sid))) {
- DEBUG(1, ("sam_set_account_sid_from_string: could not set sid %s on SAM_ACCOUNT_HANDLE!\n", u_sid));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_pgroup_sid(SAM_ACCOUNT_HANDLE *sampass, const DOM_SID *g_sid)
-{
- SAM_ASSERT(sampass && g_sid);
-
- sid_copy(&sampass->private.group_sid, g_sid);
-
- DEBUG(10, ("sam_set_group_sid: setting group sid %s\n",
- sid_string_static(&sampass->private.group_sid)));
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_pgroup_string(SAM_ACCOUNT_HANDLE *sampass, const char *g_sid)
-{
- DOM_SID new_sid;
- SAM_ASSERT(sampass && g_sid);
-
- DEBUG(10, ("sam_set_group_sid_from_string: setting group sid %s\n",
- g_sid));
-
- if (!string_to_sid(&new_sid, g_sid)) {
- DEBUG(1, ("sam_set_group_sid_from_string: %s isn't a valid SID!\n", g_sid));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- if (!NT_STATUS_IS_OK(sam_set_account_pgroup_sid(sampass, &new_sid))) {
- DEBUG(1, ("sam_set_group_sid_from_string: could not set sid %s on SAM_ACCOUNT_HANDLE!\n", g_sid));
- return NT_STATUS_UNSUCCESSFUL;
- }
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the domain name.
- ********************************************************************/
-
-NTSTATUS sam_set_account_domain(SAM_ACCOUNT_HANDLE *sampass, SAM_DOMAIN_HANDLE *domain)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.domain = domain;
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's NT name.
- ********************************************************************/
-
-NTSTATUS sam_set_account_name(SAM_ACCOUNT_HANDLE *sampass, const char *account_name)
-{
- SAM_ASSERT(sampass);
-
- DEBUG(10, ("sam_set_account_name: setting nt account_name %s, was %s\n", account_name, sampass->private.account_name));
-
- sampass->private.account_name = talloc_strdup(sampass->mem_ctx, account_name);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's full name.
- ********************************************************************/
-
-NTSTATUS sam_set_account_fullname(SAM_ACCOUNT_HANDLE *sampass, const char *full_name)
-{
- SAM_ASSERT(sampass);
-
- DEBUG(10, ("sam_set_account_fullname: setting full name %s, was %s\n", full_name, sampass->private.full_name));
-
- sampass->private.full_name = talloc_strdup(sampass->mem_ctx, full_name);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's logon script.
- ********************************************************************/
-
-NTSTATUS sam_set_account_logon_script(SAM_ACCOUNT_HANDLE *sampass, const char *logon_script, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- DEBUG(10, ("sam_set_logon_script: from %s to %s\n", logon_script, sampass->private.logon_script));
-
- sampass->private.logon_script = talloc_strdup(sampass->mem_ctx, logon_script);
-
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's profile path.
- ********************************************************************/
-
-NTSTATUS sam_set_account_profile_path(SAM_ACCOUNT_HANDLE *sampass, const char *profile_path, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- DEBUG(10, ("sam_set_profile_path: setting profile path %s, was %s\n", profile_path, sampass->private.profile_path));
-
- sampass->private.profile_path = talloc_strdup(sampass->mem_ctx, profile_path);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's directory drive.
- ********************************************************************/
-
-NTSTATUS sam_set_account_dir_drive(SAM_ACCOUNT_HANDLE *sampass, const char *dir_drive, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- DEBUG(10, ("sam_set_dir_drive: setting dir drive %s, was %s\n", dir_drive,
- sampass->private.dir_drive));
-
- sampass->private.dir_drive = talloc_strdup(sampass->mem_ctx, dir_drive);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's home directory.
- ********************************************************************/
-
-NTSTATUS sam_set_account_homedir(SAM_ACCOUNT_HANDLE *sampass, const char *home_dir, BOOL store)
-{
- SAM_ASSERT(sampass);
-
- DEBUG(10, ("sam_set_homedir: setting home dir %s, was %s\n", home_dir,
- sampass->private.home_dir));
-
- sampass->private.home_dir = talloc_strdup(sampass->mem_ctx, home_dir);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's unix home directory.
- ********************************************************************/
-
-NTSTATUS sam_set_account_unix_homedir(SAM_ACCOUNT_HANDLE *sampass, const char *unix_home_dir)
-{
- SAM_ASSERT(sampass);
-
- DEBUG(10, ("sam_set_unix_homedir: setting home dir %s, was %s\n", unix_home_dir,
- sampass->private.unix_home_dir));
-
- sampass->private.unix_home_dir = talloc_strdup(sampass->mem_ctx, unix_home_dir);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's account description.
- ********************************************************************/
-
-NTSTATUS sam_set_account_acct_desc(SAM_ACCOUNT_HANDLE *sampass, const char *acct_desc)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.acct_desc = talloc_strdup(sampass->mem_ctx, acct_desc);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's workstation allowed list.
- ********************************************************************/
-
-NTSTATUS sam_set_account_workstations(SAM_ACCOUNT_HANDLE *sampass, const char *workstations)
-{
- SAM_ASSERT(sampass);
-
- DEBUG(10, ("sam_set_workstations: setting workstations %s, was %s\n", workstations,
- sampass->private.workstations));
-
- sampass->private.workstations = talloc_strdup(sampass->mem_ctx, workstations);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's 'unknown_str', whatever the heck this actually is...
- ********************************************************************/
-
-NTSTATUS sam_set_account_unknown_str(SAM_ACCOUNT_HANDLE *sampass, const char *unknown_str)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.unknown_str = talloc_strdup(sampass->mem_ctx, unknown_str);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's dial string.
- ********************************************************************/
-
-NTSTATUS sam_set_account_munged_dial(SAM_ACCOUNT_HANDLE *sampass, const char *munged_dial)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.munged_dial = talloc_strdup(sampass->mem_ctx, munged_dial);
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's NT hash.
- ********************************************************************/
-
-NTSTATUS sam_set_account_nt_pwd(SAM_ACCOUNT_HANDLE *sampass, const DATA_BLOB data)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.nt_pw = data;
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's LM hash.
- ********************************************************************/
-
-NTSTATUS sam_set_account_lm_pwd(SAM_ACCOUNT_HANDLE *sampass, const DATA_BLOB data)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.lm_pw = data;
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's plaintext password only (base procedure, see helper
- below)
- ********************************************************************/
-
-NTSTATUS sam_set_account_plaintext_pwd(SAM_ACCOUNT_HANDLE *sampass, const char *plain_pwd)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.plaintext_pw = talloc_strdup(sampass->mem_ctx, plain_pwd);
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_unknown_1(SAM_ACCOUNT_HANDLE *sampass, uint32 unkn)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.unknown_1 = unkn;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_unknown_2(SAM_ACCOUNT_HANDLE *sampass, uint32 unkn)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.unknown_2 = unkn;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_unknown_3(SAM_ACCOUNT_HANDLE *sampass, uint32 unkn)
-{
- SAM_ASSERT(sampass);
-
- sampass->private.unknown_3 = unkn;
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_account_hours(SAM_ACCOUNT_HANDLE *sampass, const uint8 *hours)
-{
- SAM_ASSERT(sampass);
-
- if (!hours) {
- memset ((char *)sampass->private.hours, 0, MAX_HOURS_LEN);
- return NT_STATUS_OK;
- }
-
- memcpy(sampass->private.hours, hours, MAX_HOURS_LEN);
-
- return NT_STATUS_OK;
-}
-
-/* Helpful interfaces to the above */
-
-/*********************************************************************
- Sets the last changed times and must change times for a normal
- password change.
- ********************************************************************/
-
-NTSTATUS sam_set_account_pass_changed_now(SAM_ACCOUNT_HANDLE *sampass)
-{
- uint32 expire;
- NTTIME temptime;
-
- SAM_ASSERT(sampass);
-
- unix_to_nt_time(&temptime, time(NULL));
- if (!NT_STATUS_IS_OK(sam_set_account_pass_last_set_time(sampass, temptime)))
- return NT_STATUS_UNSUCCESSFUL;
-
- if (!account_policy_get(AP_MAX_PASSWORD_AGE, &expire)
- || (expire==(uint32)-1)) {
-
- get_nttime_max(&temptime);
- if (!NT_STATUS_IS_OK(sam_set_account_pass_must_change_time(sampass, temptime, False)))
- return NT_STATUS_UNSUCCESSFUL;
-
- } else {
- /* FIXME: Add expire to temptime */
-
- if (!NT_STATUS_IS_OK(sam_get_account_pass_last_set_time(sampass,&temptime)) || !NT_STATUS_IS_OK(sam_set_account_pass_must_change_time(sampass, temptime,True)))
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- return NT_STATUS_OK;
-}
-
-/*********************************************************************
- Set the account's PLAINTEXT password. Used as an interface to the above.
- Also sets the last change time to NOW.
- ********************************************************************/
-
-NTSTATUS sam_set_account_passwd(SAM_ACCOUNT_HANDLE *sampass, const char *plaintext)
-{
- DATA_BLOB data;
- uchar new_lanman_p16[16];
- uchar new_nt_p16[16];
-
- SAM_ASSERT(sampass && plaintext);
-
- nt_lm_owf_gen(plaintext, new_nt_p16, new_lanman_p16);
-
- data = data_blob(new_nt_p16, 16);
- if (!NT_STATUS_IS_OK(sam_set_account_nt_pwd(sampass, data)))
- return NT_STATUS_UNSUCCESSFUL;
-
- data = data_blob(new_lanman_p16, 16);
-
- if (!NT_STATUS_IS_OK(sam_set_account_lm_pwd(sampass, data)))
- return NT_STATUS_UNSUCCESSFUL;
-
- if (!NT_STATUS_IS_OK(sam_set_account_plaintext_pwd(sampass, plaintext)))
- return NT_STATUS_UNSUCCESSFUL;
-
- if (!NT_STATUS_IS_OK(sam_set_account_pass_changed_now(sampass)))
- return NT_STATUS_UNSUCCESSFUL;
-
- return NT_STATUS_OK;
-}
-
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- SAM_DOMAIN access routines
- Copyright (C) Andrew Bartlett 2002
- Copyright (C) Stefan (metze) Metzmacher 2002
- Copyright (C) Jelmer Vernooij 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_SAM
-
-NTSTATUS sam_get_domain_sid(SAM_DOMAIN_HANDLE *domain, const DOM_SID **sid)
-{
- SAM_ASSERT(domain &&sid);
-
- *sid = &(domain->private.sid);
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_num_accounts(SAM_DOMAIN_HANDLE *domain, uint32 *num_accounts)
-{
- SAM_ASSERT(domain &&num_accounts);
-
- *num_accounts = domain->private.num_accounts;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_num_groups(SAM_DOMAIN_HANDLE *domain, uint32 *num_groups)
-{
- SAM_ASSERT(domain &&num_groups);
-
- *num_groups = domain->private.num_groups;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_num_aliases(SAM_DOMAIN_HANDLE *domain, uint32 *num_aliases)
-{
- SAM_ASSERT(domain &&num_aliases);
-
- *num_aliases = domain->private.num_aliases;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_name(SAM_DOMAIN_HANDLE *domain, const char **domain_name)
-{
- SAM_ASSERT(domain &&domain_name);
-
- *domain_name = domain->private.name;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_server(SAM_DOMAIN_HANDLE *domain, const char **server_name)
-{
- SAM_ASSERT(domain &&server_name);
-
- *server_name = domain->private.servername;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_max_pwdage(SAM_DOMAIN_HANDLE *domain, NTTIME *max_passwordage)
-{
- SAM_ASSERT(domain &&max_passwordage);
-
- *max_passwordage = domain->private.max_passwordage;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_min_pwdage(SAM_DOMAIN_HANDLE *domain, NTTIME *min_passwordage)
-{
- SAM_ASSERT(domain &&min_passwordage);
-
- *min_passwordage = domain->private.min_passwordage;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_lockout_duration(SAM_DOMAIN_HANDLE *domain, NTTIME *lockout_duration)
-{
- SAM_ASSERT(domain &&lockout_duration);
-
- *lockout_duration = domain->private.lockout_duration;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_reset_count(SAM_DOMAIN_HANDLE *domain, NTTIME *reset_lockout_count)
-{
- SAM_ASSERT(domain &&reset_lockout_count);
-
- *reset_lockout_count = domain->private.reset_count;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_min_pwdlength(SAM_DOMAIN_HANDLE *domain, uint16 *min_passwordlength)
-{
- SAM_ASSERT(domain &&min_passwordlength);
-
- *min_passwordlength = domain->private.min_passwordlength;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_pwd_history(SAM_DOMAIN_HANDLE *domain, uint16 *password_history)
-{
- SAM_ASSERT(domain &&password_history);
-
- *password_history = domain->private.password_history;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_lockout_count(SAM_DOMAIN_HANDLE *domain, uint16 *lockout_count)
-{
- SAM_ASSERT(domain &&lockout_count);
-
- *lockout_count = domain->private.lockout_count;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_domain_force_logoff(SAM_DOMAIN_HANDLE *domain, BOOL *force_logoff)
-{
- SAM_ASSERT(domain &&force_logoff);
-
- *force_logoff = domain->private.force_logoff;
-
- return NT_STATUS_OK;
-}
-
-
-NTSTATUS sam_get_domain_login_pwdchange(SAM_DOMAIN_HANDLE *domain, BOOL *login_pwdchange)
-{
- SAM_ASSERT(domain && login_pwdchange);
-
- *login_pwdchange = domain->private.login_pwdchange;
-
- return NT_STATUS_OK;
-}
-
-/* Set */
-
-NTSTATUS sam_set_domain_name(SAM_DOMAIN_HANDLE *domain, const char *domain_name)
-{
- SAM_ASSERT(domain);
-
- domain->private.name = talloc_strdup(domain->mem_ctx, domain_name);
-
- return NT_STATUS_OK;
-}
-
-
-NTSTATUS sam_set_domain_max_pwdage(SAM_DOMAIN_HANDLE *domain, NTTIME max_passwordage)
-{
- SAM_ASSERT(domain);
-
- domain->private.max_passwordage = max_passwordage;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_domain_min_pwdage(SAM_DOMAIN_HANDLE *domain, NTTIME min_passwordage)
-{
- SAM_ASSERT(domain);
-
- domain->private.min_passwordage = min_passwordage;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_domain_lockout_duration(SAM_DOMAIN_HANDLE *domain, NTTIME lockout_duration)
-{
- SAM_ASSERT(domain);
-
- domain->private.lockout_duration = lockout_duration;
-
- return NT_STATUS_OK;
-}
-NTSTATUS sam_set_domain_reset_count(SAM_DOMAIN_HANDLE *domain, NTTIME reset_lockout_count)
-{
- SAM_ASSERT(domain);
-
- domain->private.reset_count = reset_lockout_count;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_domain_min_pwdlength(SAM_DOMAIN_HANDLE *domain, uint16 min_passwordlength)
-{
- SAM_ASSERT(domain);
-
- domain->private.min_passwordlength = min_passwordlength;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_domain_pwd_history(SAM_DOMAIN_HANDLE *domain, uint16 password_history)
-{
- SAM_ASSERT(domain);
-
- domain->private.password_history = password_history;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_domain_lockout_count(SAM_DOMAIN_HANDLE *domain, uint16 lockout_count)
-{
- SAM_ASSERT(domain);
-
- domain->private.lockout_count = lockout_count;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_domain_force_logoff(SAM_DOMAIN_HANDLE *domain, BOOL force_logoff)
-{
- SAM_ASSERT(domain);
-
- domain->private.force_logoff = force_logoff;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_domain_login_pwdchange(SAM_DOMAIN_HANDLE *domain, BOOL login_pwdchange)
-{
- SAM_ASSERT(domain);
-
- domain->private.login_pwdchange = login_pwdchange;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_domain_server(SAM_DOMAIN_HANDLE *domain, const char *server_name)
-{
- SAM_ASSERT(domain);
-
- domain->private.servername = talloc_strdup(domain->mem_ctx, server_name);
-
- return NT_STATUS_OK;
-}
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- SAM_USER_HANDLE access routines
- Copyright (C) Andrew Bartlett 2002
- Copyright (C) Stefan (metze) Metzmacher 2002
- Copyright (C) Jelmer Vernooij 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_SAM
-
-/* sam group get functions */
-
-NTSTATUS sam_get_group_sid(const SAM_GROUP_HANDLE *group, const DOM_SID **sid)
-{
- SAM_ASSERT(group && sid);
-
- *sid = &(group->private.sid);
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_group_ctrl(const SAM_GROUP_HANDLE *group, uint32 *group_ctrl)
-{
- SAM_ASSERT(group && group_ctrl);
-
- *group_ctrl = group->private.group_ctrl;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_group_name(const SAM_GROUP_HANDLE *group, const char **group_name)
-{
- SAM_ASSERT(group);
-
- *group_name = group->private.group_name;
-
- return NT_STATUS_OK;
-
-}
-NTSTATUS sam_get_group_comment(const SAM_GROUP_HANDLE *group, const char **group_desc)
-{
- SAM_ASSERT(group);
-
- *group_desc = group->private.group_desc;
-
- return NT_STATUS_OK;
-}
-
-/* sam group set functions */
-
-NTSTATUS sam_set_group_sid(SAM_GROUP_HANDLE *group, const DOM_SID *sid)
-{
- SAM_ASSERT(group);
-
- if (!sid)
- ZERO_STRUCT(group->private.sid);
- else
- sid_copy(&(group->private.sid), sid);
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_group_group_ctrl(SAM_GROUP_HANDLE *group, uint32 group_ctrl)
-{
- SAM_ASSERT(group);
-
- group->private.group_ctrl = group_ctrl;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_group_name(SAM_GROUP_HANDLE *group, const char *group_name)
-{
- SAM_ASSERT(group);
-
- group->private.group_name = talloc_strdup(group->mem_ctx, group_name);
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_group_description(SAM_GROUP_HANDLE *group, const char *group_desc)
-{
- SAM_ASSERT(group);
-
- group->private.group_desc = talloc_strdup(group->mem_ctx, group_desc);
-
- return NT_STATUS_OK;
-
-}
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- SAM_GROUP_HANDLE /SAM_GROUP_ENUM helpers
-
- Copyright (C) Stefan (metze) Metzmacher 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_SAM
-
-/************************************************************
- Fill the SAM_GROUP_HANDLE with default values.
- ***********************************************************/
-
-static void sam_fill_default_group(SAM_GROUP_HANDLE *group)
-{
- ZERO_STRUCT(group->private); /* Don't touch the talloc context */
-
-}
-
-static void destroy_sam_group_handle_talloc(SAM_GROUP_HANDLE **group)
-{
- if (*group) {
-
- talloc_destroy((*group)->mem_ctx);
- *group = NULL;
- }
-}
-
-
-/**********************************************************************
- Alloc memory and initialises a SAM_GROUP_HANDLE on supplied mem_ctx.
-***********************************************************************/
-
-NTSTATUS sam_init_group_talloc(TALLOC_CTX *mem_ctx, SAM_GROUP_HANDLE **group)
-{
- SMB_ASSERT(*group != NULL);
-
- if (!mem_ctx) {
- DEBUG(0,("sam_init_group_talloc: mem_ctx was NULL!\n"));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- *group=(SAM_GROUP_HANDLE *)talloc(mem_ctx, sizeof(SAM_GROUP_HANDLE));
-
- if (*group==NULL) {
- DEBUG(0,("sam_init_group_talloc: error while allocating memory\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- (*group)->mem_ctx = mem_ctx;
-
- (*group)->free_fn = NULL;
-
- sam_fill_default_group(*group);
-
- return NT_STATUS_OK;
-}
-
-
-/*************************************************************
- Alloc memory and initialises a struct SAM_GROUP_HANDLE.
- ************************************************************/
-
-NTSTATUS sam_init_group(SAM_GROUP_HANDLE **group)
-{
- TALLOC_CTX *mem_ctx;
- NTSTATUS nt_status;
-
- mem_ctx = talloc_init_named("sam internal SAM_GROUP_HANDLE allocation");
-
- if (!mem_ctx) {
- DEBUG(0,("sam_init_group: error while doing talloc_init()\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = sam_init_group_talloc(mem_ctx, group))) {
- talloc_destroy(mem_ctx);
- return nt_status;
- }
-
- (*group)->free_fn = destroy_sam_group_handle_talloc;
-
- return NT_STATUS_OK;
-}
-
-
-/************************************************************
- Reset the SAM_GROUP_HANDLE.
- ***********************************************************/
-
-NTSTATUS sam_reset_group(SAM_GROUP_HANDLE *group)
-{
- SMB_ASSERT(group != NULL);
-
- sam_fill_default_group(group);
-
- return NT_STATUS_OK;
-}
-
-
-/************************************************************
- Free the SAM_GROUP_HANDLE and the member pointers.
- ***********************************************************/
-
-NTSTATUS sam_free_group(SAM_ACCOUNT_HANDLE **group)
-{
- SMB_ASSERT(*group != NULL);
-
- if ((*group)->free_fn) {
- (*group)->free_fn(group);
- }
-
- return NT_STATUS_OK;
-}
-
-
-/**********************************************************
- Encode the group control bits into a string.
- length = length of string to encode into (including terminating
- null). length *MUST BE MORE THAN 2* !
- **********************************************************/
-
-char *sam_encode_acct_ctrl(uint16 group_ctrl, size_t length)
-{
- static fstring group_str;
- size_t i = 0;
-
- group_str[i++] = '[';
-
- if (group_ctrl & GCB_LOCAL_GROUP ) group_str[i++] = 'L';
- if (group_ctrl & GCB_GLOBAL_GROUP ) group_str[i++] = 'G';
-
- for ( ; i < length - 2 ; i++ )
- group_str[i] = ' ';
-
- i = length - 2;
- group_str[i++] = ']';
- group_str[i++] = '\0';
-
- return group_str;
-}
-
-/**********************************************************
- Decode the group control bits from a string.
- **********************************************************/
-
-uint16 sam_decode_group_ctrl(const char *p)
-{
- uint16 group_ctrl = 0;
- BOOL finished = False;
-
- /*
- * Check if the account type bits have been encoded after the
- * NT password (in the form [NDHTUWSLXI]).
- */
-
- if (*p != '[')
- return 0;
-
- for (p++; *p && !finished; p++) {
- switch (*p) {
- case 'L': { group_ctrl |= GCB_LOCAL_GROUP; break; /* 'L'ocal Aliases Group. */ }
- case 'G': { group_ctrl |= GCB_GLOBAL_GROUP; break; /* 'G'lobal Domain Group. */ }
-
- case ' ': { break; }
- case ':':
- case '\n':
- case '\0':
- case ']':
- default: { finished = True; }
- }
- }
-
- return group_ctrl;
-}
-
+++ /dev/null
-/*
- * Unix SMB/CIFS implementation.
- * SMB parameters and setup
- * Copyright (C) Andrew Tridgell 1992-1998
- * Copyright (C) Simo Sorce 2000-2002
- * Copyright (C) Gerald Carter 2000
- * Copyright (C) Jeremy Allison 2001
- * Copyright (C) Andrew Bartlett 2002
- *
- * This program is free software; you can redistribute it and/or modify it under
- * the terms of the GNU General Public License as published by the Free
- * Software Foundation; either version 2 of the License, or (at your option)
- * any later version.
- *
- * This program is distributed in the hope that it will be useful, but WITHOUT
- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
- * more details.
- *
- * You should have received a copy of the GNU General Public License along with
- * this program; if not, write to the Free Software Foundation, Inc., 675
- * Mass Ave, Cambridge, MA 02139, USA.
- */
-
-#include "includes.h"
-
-static int tdbgumm_debug_level = DBGC_ALL;
-#undef DBGC_CLASS
-#define DBGC_CLASS tdbgumm_debug_level
-
-#define GUMM_VERSION "20021012"
-#define TDB_FILE_NAME "gums_storage.tdb"
-#define TDB_FORMAT_STRING "B"
-#define DOMAIN_PREFIX "DOMAIN_"
-#define USER_PREFIX "USER_"
-#define GROUP_PREFIX "GROUP_"
-#define SID_PREFIX "SID_"
-
-static TDB_CONTEXT *gumm_tdb = NULL;
-
-/***************************************************************
- objects enumeration.
-****************************************************************/
-
-static NTSTATUS enumerate_objects(DOM_SID **sids, const DOM_SID *sid, const int obj_type);
-{
- TDB_CONTEXT *enum_tdb = NULL;
- TDB_DATA key;
-
- /* Open tdb gums module */
- if (!(enum_tdb = tdb_open_log(TDB_FILE_NAME, 0, TDB_DEFAULT, update?(O_RDWR|O_CREAT):O_RDONLY, 0600)))
- {
- DEBUG(0, ("Unable to open/create gumm tdb database\n"));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- enum_key = tdb_firstkey(enum_tdb);
-
-
-
- tdb_close(enum_tdb);
-
- return NT_STATUS_OK;
-}
-
-
-static NTSTATUS module_init()
-{
-}
-
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- Grops and Users Management System initializations.
- Copyright (C) Simo Sorce 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-/*#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_GUMS*/
-
-#define GMV_MAJOR 0
-#define GMV_MINOR 1
-
-GUMS_FUNCTIONS *gums_storage;
-static void *dl_handle;
-
-PRIVS privs[] = {
- {PRIV_NONE, "no_privs", "No privilege"}, /* this one MUST be first */
- {PRIV_CREATE_TOKEN, "SeCreateToken", "Create Token"},
- {PRIV_ASSIGNPRIMARYTOKEN, "SeAssignPrimaryToken", "Assign Primary Token"},
- {PRIV_LOCK_MEMORY, "SeLockMemory", "Lock Memory"},
- {PRIV_INCREASE_QUOTA, "SeIncreaseQuotaPrivilege", "Increase Quota Privilege"},
- {PRIV_MACHINE_ACCOUNT, "SeMachineAccount", "Machine Account"},
- {PRIV_TCB, "SeTCB", "TCB"},
- {PRIV_SECURITY, "SeSecurityPrivilege", "Security Privilege"},
- {PRIV_TAKE_OWNERSHIP, "SeTakeOwnershipPrivilege", "Take Ownership Privilege"},
- {PRIV_LOAD_DRIVER, "SeLocalDriverPrivilege", "Local Driver Privilege"},
- {PRIV_SYSTEM_PROFILE, "SeSystemProfilePrivilege", "System Profile Privilege"},
- {PRIV_SYSTEMTIME, "SeSystemtimePrivilege", "System Time"},
- {PRIV_PROF_SINGLE_PROCESS, "SeProfileSingleProcessPrivilege", "Profile Single Process Privilege"},
- {PRIV_INC_BASE_PRIORITY, "SeIncreaseBasePriorityPrivilege", "Increase Base Priority Privilege"},
- {PRIV_CREATE_PAGEFILE, "SeCreatePagefilePrivilege", "Create Pagefile Privilege"},
- {PRIV_CREATE_PERMANENT, "SeCreatePermanent", "Create Permanent"},
- {PRIV_BACKUP, "SeBackupPrivilege", "Backup Privilege"},
- {PRIV_RESTORE, "SeRestorePrivilege", "Restore Privilege"},
- {PRIV_SHUTDOWN, "SeShutdownPrivilege", "Shutdown Privilege"},
- {PRIV_DEBUG, "SeDebugPrivilege", "Debug Privilege"},
- {PRIV_AUDIT, "SeAudit", "Audit"},
- {PRIV_SYSTEM_ENVIRONMENT, "SeSystemEnvironmentPrivilege", "System Environment Privilege"},
- {PRIV_CHANGE_NOTIFY, "SeChangeNotify", "Change Notify"},
- {PRIV_REMOTE_SHUTDOWN, "SeRemoteShutdownPrivilege", "Remote Shutdown Privilege"},
- {PRIV_UNDOCK, "SeUndock", "Undock"},
- {PRIV_SYNC_AGENT, "SeSynchronizationAgent", "Synchronization Agent"},
- {PRIV_ENABLE_DELEGATION, "SeEnableDelegation", "Enable Delegation"},
- {PRIV_ALL, "SaAllPrivs", "All Privileges"}
-};
-
-NTSTATUS gums_init(const char *module_name)
-{
- int (*module_version)(int);
- NTSTATUS (*module_init)();
-/* gums_module_init module_init;*/
- NTSTATUS ret = NT_STATUS_UNSUCCESSFUL;
-
- DEBUG(5, ("Opening gums module %s\n", module_name));
- dl_handle = sys_dlopen(module_name, RTLD_NOW);
- if (!dl_handle) {
- DEBUG(0, ("ERROR: Failed to load gums module %s, error: %s\n", module_name, sys_dlerror()));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- module_version = sys_dlsym(dl_handle, "gumm_version");
- if (!module_version) {
- DEBUG(0, ("ERROR: Failed to find gums module version!\n"));
- goto error;
- }
-
- if (module_version(GMV_MAJOR) != GUMS_VERSION_MAJOR) {
- DEBUG(0, ("ERROR: Module's major version does not match gums version!\n"));
- goto error;
- }
-
- if (module_version(GMV_MINOR) != GUMS_VERSION_MINOR) {
- DEBUG(1, ("WARNING: Module's minor version does not match gums version!\n"));
- }
-
- module_open = sys_dlsym(dl_handle, "gumm_init");
- if (!module_open) {
- DEBUG(0, ("ERROR: Failed to find gums module's init function!\n"));
- goto error;
- }
-
- DEBUG(5, ("Initializing module %s\n", module_name));
-
- ret = module_init(&gums_storage);
- goto done;
-
-error:
- ret = NT_STATUS_UNSUCCESSFUL;
- sys_dlclose(dl_handle);
-
-done:
- return ret;
-}
-
-NTSTATUS gums_unload(void)
-{
- NSTATUS ret;
- NTSTATUS (*module_finalize)();
-
- if (!dl_handle)
- return NT_STATUS_UNSUCCESSFUL;
-
- module_close = sys_dlsym(dl_handle, "gumm_finalize");
- if (!module_finalize) {
- DEBUG(0, ("ERROR: Failed to find gums module's init function!\n"));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- DEBUG(5, ("Finalizing module %s\n", module_name));
-
- ret = module_finalize();
- sys_dlclose(dl_handle);
-3
- return ret;
-}
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- GUMS structures
- Copyright (C) Simo Sorce 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-extern GUMS_FUNCTIONS *gums_storage;
-
-/* Functions to get info from a GUMS object */
-
-NTSTATUS gums_get_object_type(uint32 *type, const GUMS_OBJECT *obj)
-{
- *type = obj->type;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_object_seq_num(uint32 *version, const GUMS_OBJECT *obj)
-{
- *version = obj->version;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_sec_desc(SEC_DESC **sec_desc, const GUMS_OBJECT *obj)
-{
- *sec_desc = obj->sec_desc;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_object_sid(DOM_SID **sid, const GUMS_OBJECT *obj)
-{
- *sid = obj->sid;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_object_name(char **name, const GUMS_OBJECT *obj)
-{
- *name = obj->name;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_object_description(char **description, const GUMS_OBJECT *obj)
-{
- *description = obj->description;
- return NT_STATUS_OK;
-}
-
-/* User specific functions */
-
-NTSTATUS gums_get_object_privileges(PRIVILEGE_SET **priv_set, const GUMS_OBJECT *obj)
-{
- if (!priv_set)
- return NT_STATUS_INVALID_PARAMETER;
-
- *priv_set = obj->priv_set;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_pri_group(DOM_SID **sid, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!sid)
- return NT_STATUS_INVALID_PARAMETER;
-
- *sid = ((GUMS_USER *)(obj->data))->group_sid;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_nt_pwd(DATA_BLOB **nt_pwd, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!nt_pwd)
- return NT_STATUS_INVALID_PARAMETER;
-
- *nt_pwd = ((GUMS_USER *)(obj->data))->nt_pw;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_lm_pwd(DATA_BLOB **lm_pwd, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!lm_pwd)
- return NT_STATUS_INVALID_PARAMETER;
-
- *lm_pwd = ((GUMS_USER *)(obj->data))->lm_pw;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_fullname(char **fullname, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!fullname)
- return NT_STATUS_INVALID_PARAMETER;
-
- *fullname = ((GUMS_USER *)(obj->data))->full_name;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_homedir(char **homedir, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!homedir)
- return NT_STATUS_INVALID_PARAMETER;
-
- *homedir = ((GUMS_USER *)(obj->data))->home_dir;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_dir_drive(char **dirdrive, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!dirdrive)
- return NT_STATUS_INVALID_PARAMETER;
-
- *dirdrive = ((GUMS_USER *)(obj->data))->dir_drive;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_logon_script(char **logon_script, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!logon_script)
- return NT_STATUS_INVALID_PARAMETER;
-
- *logon_script = ((GUMS_USER *)(obj->data))->logon_script;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_profile_path(char **profile_path, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!profile_path)
- return NT_STATUS_INVALID_PARAMETER;
-
- *profile_path = ((GUMS_USER *)(obj->data))->profile_path;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_workstations(char **workstations, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!workstations)
- return NT_STATUS_INVALID_PARAMETER;
-
- *workstations = ((GUMS_USER *)(obj->data))->workstations;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_unknown_str(char **unknown_str, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!unknown_str)
- return NT_STATUS_INVALID_PARAMETER;
-
- *unknown_str = ((GUMS_USER *)(obj->data))->unknown_str;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_munged_dial(char **munged_dial, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!munged_dial)
- return NT_STATUS_INVALID_PARAMETER;
-
- *munged_dial = ((GUMS_USER *)(obj->data))->munged_dial;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_logon_time(NTTIME **logon_time, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!logon_time)
- return NT_STATUS_INVALID_PARAMETER;
-
- *logon_time = ((GUMS_USER *)(obj->data))->logon_time;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_logoff_time(NTTIME **logoff_time, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!logoff_time)
- return NT_STATUS_INVALID_PARAMETER;
-
- *logoff_time = ((GUMS_USER *)(obj->data))->logoff_time;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_kickoff_time(NTTIME **kickoff_time, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!kickoff_time)
- return NT_STATUS_INVALID_PARAMETER;
-
- *kickoff_time = ((GUMS_USER *)(obj->data))->kickoff_time;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_pass_last_set_time(NTTIME **pass_last_set_time, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!pass_last_set_time)
- return NT_STATUS_INVALID_PARAMETER;
-
- *pass_last_set_time = ((GUMS_USER *)(obj->data))->pass_last_set_time;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_pass_can_change_time(NTTIME **pass_can_change_time, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!pass_can_change_time)
- return NT_STATUS_INVALID_PARAMETER;
-
- *pass_can_change_time = ((GUMS_USER *)(obj->data))->pass_can_change_time;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_pass_must_change_time(NTTIME **pass_must_change_time, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!pass_must_change_time)
- return NT_STATUS_INVALID_PARAMETER;
-
- *pass_must_change_time = ((GUMS_USER *)(obj->data))->pass_must_change_time;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_logon_divs(uint16 *logon_divs, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!logon_divs)
- return NT_STATUS_INVALID_PARAMETER;
-
- *logon_divs = ((GUMS_USER *)(obj->data))->logon_divs;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_hours_len(uint32 *hours_len, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!hours_len)
- return NT_STATUS_INVALID_PARAMETER;
-
- *hours_len = ((GUMS_USER *)(obj->data))->hours_len;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_hours(uint8 **hours, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!hours)
- return NT_STATUS_INVALID_PARAMETER;
-
- *hours = ((GUMS_USER *)(obj->data))->hours;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_unknown_3(uint32 *unknown3, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!unknown3)
- return NT_STATUS_INVALID_PARAMETER;
-
- *unknown3 = ((GUMS_USER *)(obj->data))->unknown_3;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_unknown_5(uint32 *unknown5, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!unknown5)
- return NT_STATUS_INVALID_PARAMETER;
-
- *unknown5 = ((GUMS_USER *)(obj->data))->unknown_5;
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_get_user_unknown_6(uint32 *unknown6, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!unknown6)
- return NT_STATUS_INVALID_PARAMETER;
-
- *unknown6 = ((GUMS_USER *)(obj->data))->unknown_6;
- return NT_STATUS_OK;
-}
-
-/* Group specific functions */
-
-NTSTATUS gums_get_group_members(uint32 *count, DOM_SID **members, const GUMS_OBJECT *obj)
-{
- if (obj->type != GUMS_OBJ_GROUP &&
- obj->type != GUMS_OBJ_ALIAS)
- return NT_STATUS_OBJECT_TYPE_MISMATCH;
- if (!members)
- return NT_STATUS_INVALID_PARAMETER;
-
- *count = ((GUMS_GROUP *)(obj->data))->count;
- *members = ((GUMS_GROUP *)(obj->data))->members;
- return NT_STATUS_OK;
-}
-
-/* set functions */
-
-NTSTATUS gums_create_data_set(GUMS_COMMIT_SET **com_set, TALLOC_CTX *ctx, DOM_SID *sid, uint32 type)
-{
- TALLOC_CTX *mem_ctx;
- GUMS_COMMIT_SET *set;
-
- mem_ctx = talloc_init_named("commit_set");
- if (mem_ctx == NULL)
- return NT_STATUS_NO_MEMORY;
- set = (GUMS_COMMIT_SET *)talloc(mem_ctx, sizeof(GUMS_COMMIT_SET));
- if (set == NULL) {
- talloc_destroy(mem_ctx);
- return NT_STATUS_NO_MEMORY;
- }
-
- set->mem_ctx = mem_ctx;
- set->type = type;
- sid_copy(&(set->sid), sid);
- set->count = 0;
- set->data = NULL;
- *com_set = set;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_set_sec_desc(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, SEC_DESC *sec_desc)
-{
- GUMS_DATA_SET *data_set;
- SEC_DESC *new_sec_desc;
-
- if (!mem_ctx || !com_set || !sec_desc)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = GUMS_SET_SEC_DESC;
- new_sec_desc = dup_sec_desc(mem_ctx, sec_desc);
- if (new_sec_desc == NULL)
- return NT_STATUS_NO_MEMORY;
-
- (SEC_DESC *)(data_set->data) = new_sec_desc;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_add_privilege(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, LUID_ATTR priv)
-{
- GUMS_DATA_SET *data_set;
- LUID_ATTR *new_priv;
-
- if (!mem_ctx || !com_set)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = GUMS_ADD_PRIVILEGE;
- if (NT_STATUS_IS_ERR(dupalloc_luid_attr(mem_ctx, &new_priv, priv)))
- return NT_STATUS_NO_MEMORY;
-
- (SEC_DESC *)(data_set->data) = new_priv;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_del_privilege(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, LUID_ATTR priv)
-{
- GUMS_DATA_SET *data_set;
- LUID_ATTR *new_priv;
-
- if (!mem_ctx || !com_set)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = GUMS_DEL_PRIVILEGE;
- if (NT_STATUS_IS_ERR(dupalloc_luid_attr(mem_ctx, &new_priv, priv)))
- return NT_STATUS_NO_MEMORY;
-
- (SEC_DESC *)(data_set->data) = new_priv;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_set_privilege_set(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, PRIVILEGE_SET *priv_set)
-{
- GUMS_DATA_SET *data_set;
- PRIVILEGE_SET *new_priv_set;
-
- if (!mem_ctx || !com_set || !priv_set)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = GUMS_SET_SEC_DESC;
- if (NT_STATUS_IS_ERR(dup_priv_set(&new_priv_set, mem_ctx, priv_set)))
- return NT_STATUS_NO_MEMORY;
-
- (SEC_DESC *)(data_set->data) = new_priv_set;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_set_string(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, uint32 type, char *str)
-{
- GUMS_DATA_SET *data_set;
- char *new_str;
-
- if (!mem_ctx || !com_set || !str || type < GUMS_SET_NAME || type > GUMS_SET_MUNGED_DIAL)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = type;
- new_str = talloc_strdup(mem_ctx, str);
- if (new_str == NULL)
- return NT_STATUS_NO_MEMORY;
-
- (char *)(data_set->data) = new_str;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_set_name(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *name)
-{
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, name);
-}
-
-NTSTATUS gums_set_description(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *desc)
-{
- return gums_set_string(mem_ctx, com_set, GUMS_SET_DESCRIPTION, desc);
-}
-
-NTSTATUS gums_set_full_name(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *full_name)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, full_name);
-}
-
-NTSTATUS gums_set_home_directory(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *home_dir)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, home_dir);
-}
-
-NTSTATUS gums_set_drive(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *drive)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, drive);
-}
-
-NTSTATUS gums_set_logon_script(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *logon_script)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, logon_script);
-}
-
-NTSTATUS gums_set_profile_path(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *prof_path)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, prof_path);
-}
-
-NTSTATUS gums_set_workstations(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *wks)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, wks);
-}
-
-NTSTATUS gums_set_unknown_string(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *unkn_str)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, unkn_str);
-}
-
-NTSTATUS gums_set_munged_dial(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, char *munged_dial)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_string(mem_ctx, com_set, GUMS_SET_NAME, munged_dial);
-}
-
-NTSTATUS gums_set_nttime(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, uint32 type, NTTIME *time)
-{
- GUMS_DATA_SET *data_set;
- NTTIME *new_time;
-
- if (!mem_ctx || !com_set || !time || type < GUMS_SET_LOGON_TIME || type > GUMS_SET_PASS_MUST_CHANGE_TIME)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = type;
- new_time = talloc(mem_ctx, sizeof(NTTIME));
- if (new_time == NULL)
- return NT_STATUS_NO_MEMORY;
-
- new_time->low = time->low;
- new_time->high = time->high;
- (char *)(data_set->data) = new_time;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_set_logon_time(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, NTTIME *logon_time)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_nttime(mem_ctx, com_set, GUMS_SET_LOGON_TIME, logon_time);
-}
-
-NTSTATUS gums_set_logoff_time(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, NTTIME *logoff_time)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_nttime(mem_ctx, com_set, GUMS_SET_LOGOFF_TIME, logoff_time);
-}
-
-NTSTATUS gums_set_kickoff_time(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, NTTIME *kickoff_time)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_nttime(mem_ctx, com_set, GUMS_SET_KICKOFF_TIME, kickoff_time);
-}
-
-NTSTATUS gums_set_pass_last_set_time(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, NTTIME *pls_time)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_nttime(mem_ctx, com_set, GUMS_SET_LOGON_TIME, pls_time);
-}
-
-NTSTATUS gums_set_pass_can_change_time(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, NTTIME *pcc_time)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_nttime(mem_ctx, com_set, GUMS_SET_LOGON_TIME, pcc_time);
-}
-
-NTSTATUS gums_set_pass_must_change_time(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, NTTIME *pmc_time)
-{
- if (com_set->type != GUMS_OBJ_NORMAL_USER)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_set_nttime(mem_ctx, com_set, GUMS_SET_LOGON_TIME, pmc_time);
-}
-
-NTSTATUS gums_add_sids_to_group(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, const DOM_SID **sids, const uint32 count)
-{
- GUMS_DATA_SET *data_set;
- DOM_SID **new_sids;
- int i;
-
- if (!mem_ctx || !com_set || !sids)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = GUMS_ADD_SID_LIST;
- new_sids = (DOM_SID **)talloc(mem_ctx, (sizeof(void *) * count));
- if (new_sids == NULL)
- return NT_STATUS_NO_MEMORY;
- for (i = 0; i < count; i++) {
- new_sids[i] = sid_dup_talloc(mem_ctx, sids[i]);
- if (new_sids[i] == NULL)
- return NT_STATUS_NO_MEMORY;
- }
-
- (SEC_DESC *)(data_set->data) = new_sids;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_add_users_to_group(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, const DOM_SID **sids, const uint32 count)
-{
- if (!mem_ctx || !com_set || !sids)
- return NT_STATUS_INVALID_PARAMETER;
- if (com_set->type != GUMS_OBJ_GROUP || com_set->type != GUMS_OBJ_ALIAS)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_add_sids_to_group(mem_ctx, com_set, sids, count);
-}
-
-NTSTATUS gums_add_groups_to_group(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, const DOM_SID **sids, const uint32 count)
-{
- if (!mem_ctx || !com_set || !sids)
- return NT_STATUS_INVALID_PARAMETER;
- if (com_set->type != GUMS_OBJ_ALIAS)
- return NT_STATUS_INVALID_PARAMETER;
-
- return gums_add_sids_to_group(mem_ctx, com_set, sids, count);
-}
-
-NTSTATUS gums_del_sids_from_group(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, const DOM_SID **sids, const uint32 count)
-{
- GUMS_DATA_SET *data_set;
- DOM_SID **new_sids;
- int i;
-
- if (!mem_ctx || !com_set || !sids)
- return NT_STATUS_INVALID_PARAMETER;
- if (com_set->type != GUMS_OBJ_GROUP || com_set->type != GUMS_OBJ_ALIAS)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = GUMS_DEL_SID_LIST;
- new_sids = (DOM_SID **)talloc(mem_ctx, (sizeof(void *) * count));
- if (new_sids == NULL)
- return NT_STATUS_NO_MEMORY;
- for (i = 0; i < count; i++) {
- new_sids[i] = sid_dup_talloc(mem_ctx, sids[i]);
- if (new_sids[i] == NULL)
- return NT_STATUS_NO_MEMORY;
- }
-
- (SEC_DESC *)(data_set->data) = new_sids;
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS gums_set_sids_in_group(TALLOC_CTX *mem_ctx, GUMS_COMMIT_SET *com_set, const DOM_SID **sids, const uint32 count)
-{
- GUMS_DATA_SET *data_set;
- DOM_SID **new_sids;
- int i;
-
- if (!mem_ctx || !com_set || !sids)
- return NT_STATUS_INVALID_PARAMETER;
- if (com_set->type != GUMS_OBJ_GROUP || com_set->type != GUMS_OBJ_ALIAS)
- return NT_STATUS_INVALID_PARAMETER;
-
- com_set->count = com_set->count + 1;
- if (com_set->count == 1) { /* first data set */
- data_set = (GUMS_DATA_SET *)talloc(mem_ctx, sizeof(GUMS_DATA_SET));
- } else {
- data_set = (GUMS_DATA_SET *)talloc_realloc(mem_ctx, com_set->data, sizeof(GUMS_DATA_SET) * com_set->count);
- }
- if (data_set == NULL)
- return NT_STATUS_NO_MEMORY;
-
- com_set->data = data_set;
- data_set = &((com_set->data)[com_set->count - 1]);
-
- data_set->type = GUMS_SET_SID_LIST;
- new_sids = (DOM_SID **)talloc(mem_ctx, (sizeof(void *) * count));
- if (new_sids == NULL)
- return NT_STATUS_NO_MEMORY;
- for (i = 0; i < count; i++) {
- new_sids[i] = sid_dup_talloc(mem_ctx, sids[i]);
- if (new_sids[i] == NULL)
- return NT_STATUS_NO_MEMORY;
- }
-
- (SEC_DESC *)(data_set->data) = new_sids;
-
- return NT_STATUS_OK;
-}
-
-
-NTSTATUS gums_commit_data(GUMS_COMMIT_SET *set)
-{
- return gums_storage->set_object_values(set->sid, set->count, set->data);
-}
-
-NTSTATUS gums_destroy_data_set(GUMS_COMMIT_SET **com_set)
-{
- talloc_destroy((*com_set)->mem_ctx);
- *com_set = NULL;
-
- return NT_STATUS_OK;
-}
-
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- GUMS backends helper functions
- Copyright (C) Simo Sorce 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-extern GUMS_FUNCTIONS *gums_storage;
-
-extern DOM_SID global_sid_World;
-extern DOM_SID global_sid_Builtin_Administrators;
-extern DOM_SID global_sid_Builtin_Power_Users;
-extern DOM_SID global_sid_Builtin_Account_Operators;
-extern DOM_SID global_sid_Builtin_Server_Operators;
-extern DOM_SID global_sid_Builtin_Print_Operators;
-extern DOM_SID global_sid_Builtin_Backup_Operators;
-extern DOM_SID global_sid_Builtin_Replicator;
-extern DOM_SID global_sid_Builtin_Users;
-extern DOM_SID global_sid_Builtin_Guests;
-
-
-/* defines */
-
-#define ALLOC_CHECK(str, ptr, err, label) do { if ((ptr) == NULL) { DEBUG(0, ("%s: out of memory!\n", str)); err = NT_STATUS_NO_MEMORY; goto label; } } while(0)
-#define NTSTATUS_CHECK(str1, str2, err, label) do { if (NT_STATUS_IS_ERR(err)) { DEBUG(0, ("%s: %s failed!\n", str1, str2)); } } while(0)
-
-/****************************************************************************
- Check if a user is a mapped group.
-
- This function will check if the group SID is mapped onto a
- system managed gid or onto a winbind manged sid.
- In the first case it will be threated like a mapped group
- and the backend should take the member list with a getgrgid
- and ignore any user that have been possibly set into the group
- object.
-
- In the second case, the group is a fully SAM managed group
- served back to the system through winbind. In this case the
- members of a Local group are "unrolled" to cope with the fact
- that unix cannot contain groups inside groups.
- The backend MUST never call any getgr* / getpw* function or
- loops with winbind may happen.
- ****************************************************************************/
-
-/*
-NTSTATUS is_mapped_group(BOOL *mapped, const DOM_SID *sid)
-{
- NTSTATUS result;
- gid_t id;
-
- /* look if mapping exist, do not make idmap alloc an uid if SID is not found * /
- result = idmap_get_gid_from_sid(&id, sid, False);
- if (NT_STATUS_IS_OK(result)) {
- *mapped = gid_is_in_winbind_range(id);
- } else {
- *mapped = False;
- }
-
- return result;
-}
-*/
-
-/****************************************************************************
- duplicate alloc luid_attr
- ****************************************************************************/
-NTSTATUS dupalloc_luid_attr(TALLOC_CTX *ctx, LUID_ATTR **new_la, LUID_ATTR old_la)
-{
- *new_la = (LUID_ATTR *)talloc(ctx, sizeof(LUID_ATTR));
- if (*new_la == NULL) {
- DEBUG(0,("dupalloc_luid_attr: could not Alloc memory to duplicate LUID_ATTR\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- (*new_la)->luid.high = old_la.luid.high;
- (*new_la)->luid.low = old_la.luid.low;
- (*new_la)->attr = old_la.attr;
-
- return NT_STATUS_OK;
-}
-
-/****************************************************************************
- initialise a privilege list
- ****************************************************************************/
-void init_privilege(PRIVILEGE_SET *priv_set)
-{
- priv_set->count=0;
- priv_set->control=0;
- priv_set->set=NULL;
-}
-
-/****************************************************************************
- add a privilege to a privilege array
- ****************************************************************************/
-NTSTATUS add_privilege(PRIVILEGE_SET *priv_set, TALLOC_CTX *ctx, LUID_ATTR set)
-{
- LUID_ATTR *new_set;
-
- /* check if the privilege is not already in the list */
- if (check_priv_in_privilege(priv_set, set))
- return NT_STATUS_UNSUCCESSFUL;
-
- /* we can allocate memory to add the new privilege */
-
- new_set=(LUID_ATTR *)talloc_realloc(ctx, priv_set->set, (priv_set->count+1)*(sizeof(LUID_ATTR)));
- if (new_set==NULL) {
- DEBUG(0,("add_privilege: could not Realloc memory to add a new privilege\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- new_set[priv_set->count].luid.high=set.luid.high;
- new_set[priv_set->count].luid.low=set.luid.low;
- new_set[priv_set->count].attr=set.attr;
-
- priv_set->count++;
- priv_set->set=new_set;
-
- return NT_STATUS_OK;
-}
-
-/****************************************************************************
- add all the privileges to a privilege array
- ****************************************************************************/
-NTSTATUS add_all_privilege(PRIVILEGE_SET *priv_set, TALLOC_CTX *ctx)
-{
- NTSTATUS result = NT_STATUS_OK;
- LUID_ATTR set;
-
- set.attr=0;
- set.luid.high=0;
-
- set.luid.low=SE_PRIV_ADD_USERS;
- result = add_privilege(priv_set, ctx, set);
- NTSTATUS_CHECK("add_all_privilege", "add_privilege", result, done);
-
- set.luid.low=SE_PRIV_ADD_MACHINES;
- result = add_privilege(priv_set, ctx, set);
- NTSTATUS_CHECK("add_all_privilege", "add_privilege", result, done);
-
- set.luid.low=SE_PRIV_PRINT_OPERATOR;
- result = add_privilege(priv_set, ctx, set);
- NTSTATUS_CHECK("add_all_privilege", "add_privilege", result, done);
-
-done:
- return result;
-}
-
-/****************************************************************************
- check if the privilege list is empty
- ****************************************************************************/
-BOOL check_empty_privilege(PRIVILEGE_SET *priv_set)
-{
- return (priv_set->count == 0);
-}
-
-/****************************************************************************
- check if the privilege is in the privilege list
- ****************************************************************************/
-BOOL check_priv_in_privilege(PRIVILEGE_SET *priv_set, LUID_ATTR set)
-{
- int i;
-
- /* if the list is empty, obviously we can't have it */
- if (check_empty_privilege(priv_set))
- return False;
-
- for (i=0; i<priv_set->count; i++) {
- LUID_ATTR *cur_set;
-
- cur_set=&priv_set->set[i];
- /* check only the low and high part. Checking the attr field has no meaning */
- if( (cur_set->luid.low==set.luid.low) && (cur_set->luid.high==set.luid.high) )
- return True;
- }
-
- return False;
-}
-
-/****************************************************************************
- remove a privilege from a privilege array
- ****************************************************************************/
-NTSTATUS remove_privilege(PRIVILEGE_SET *priv_set, TALLOC_CTX *ctx, LUID_ATTR set)
-{
- LUID_ATTR *new_set;
- LUID_ATTR *old_set;
- int i,j;
-
- /* check if the privilege is in the list */
- if (!check_priv_in_privilege(priv_set, set))
- return NT_STATUS_UNSUCCESSFUL;
-
- /* special case if it's the only privilege in the list */
- if (priv_set->count==1) {
- init_privilege(priv_set);
- return NT_STATUS_OK;
- }
-
- /*
- * the privilege is there, create a new list,
- * and copy the other privileges
- */
-
- old_set = priv_set->set;
-
- new_set=(LUID_ATTR *)talloc(ctx, (priv_set->count - 1) * (sizeof(LUID_ATTR)));
- if (new_set==NULL) {
- DEBUG(0,("remove_privilege: could not malloc memory for new privilege list\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- for (i=0, j=0; i<priv_set->count; i++) {
- if ((old_set[i].luid.low == set.luid.low) &&
- (old_set[i].luid.high == set.luid.high)) {
- continue;
- }
-
- new_set[j].luid.low = old_set[i].luid.low;
- new_set[j].luid.high = old_set[i].luid.high;
- new_set[j].attr = old_set[i].attr;
-
- j++;
- }
-
- if (j != priv_set->count - 1) {
- DEBUG(0,("remove_privilege: mismatch ! difference is not -1\n"));
- DEBUGADD(0,("old count:%d, new count:%d\n", priv_set->count, j));
- return NT_STATUS_INTERNAL_ERROR;
- }
-
- /* ok everything is fine */
-
- priv_set->count--;
- priv_set->set=new_set;
-
- return NT_STATUS_OK;
-}
-
-/****************************************************************************
- duplicates a privilege array
- ****************************************************************************/
-NTSTATUS dup_priv_set(PRIVILEGE_SET **new_priv_set, TALLOC_CTX *mem_ctx, PRIVILEGE_SET *priv_set)
-{
- LUID_ATTR *new_set;
- LUID_ATTR *old_set;
- int i;
-
- *new_priv_set = (PRIVILEGE_SET *)talloc(mem_ctx, sizeof(PRIVILEGE_SET));
- init_privilege(*new_priv_set);
-
- /* special case if there are no privileges in the list */
- if (priv_set->count == 0) {
- return NT_STATUS_OK;
- }
-
- /*
- * create a new list,
- * and copy the other privileges
- */
-
- old_set = priv_set->set;
-
- new_set = (LUID_ATTR *)talloc(mem_ctx, (priv_set->count - 1) * (sizeof(LUID_ATTR)));
- if (new_set==NULL) {
- DEBUG(0,("remove_privilege: could not malloc memory for new privilege list\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- for (i=0; i < priv_set->count; i++) {
-
- new_set[i].luid.low = old_set[i].luid.low;
- new_set[i].luid.high = old_set[i].luid.high;
- new_set[i].attr = old_set[i].attr;
- }
-
- (*new_priv_set)->count = priv_set->count;
- (*new_priv_set)->control = priv_set->control;
- (*new_priv_set)->set = new_set;
-
- return NT_STATUS_OK;
-}
-
-#define ALIAS_DEFAULT_SACL_SA_RIGHTS 0x01050013
-#define ALIAS_DEFAULT_DACL_SA_RIGHTS \
- (READ_CONTROL_ACCESS | \
- SA_RIGHT_ALIAS_LOOKUP_INFO | \
- SA_RIGHT_ALIAS_GET_MEMBERS) /* 0x0002000c */
-
-#define ALIAS_DEFAULT_SACL_SEC_ACE_FLAG (SEC_ACE_FLAG_FAILED_ACCESS | SEC_ACE_FLAG_SUCCESSFUL_ACCESS) /* 0xc0 */
-
-NTSTATUS create_builtin_alias_default_sec_desc(SEC_DESC **sec_desc, TALLOC_CTX *ctx)
-{
- DOM_SID *world = &global_sid_World;
- DOM_SID *admins = &global_sid_Builtin_Administrators;
- SEC_ACCESS sa;
- SEC_ACE sacl_ace;
- SEC_ACE dacl_aces[2];
- SEC_ACL *sacl = NULL;
- SEC_ACL *dacl = NULL;
- size_t psize;
-
- init_sec_access(&sa, ALIAS_DEFAULT_SACL_SA_RIGHTS);
- init_sec_ace(&sacl_ace, world, SEC_ACE_TYPE_SYSTEM_AUDIT, sa, ALIAS_DEFAULT_SACL_SEC_ACE_FLAG);
-
- sacl = make_sec_acl(ctx, NT4_ACL_REVISION, 1, &sacl_ace);
- if (!sacl) {
- DEBUG(0, ("build_init_sec_desc: Failed to make SEC_ACL.\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- init_sec_access(&sa, ALIAS_DEFAULT_DACL_SA_RIGHTS);
- init_sec_ace(&(dacl_aces[0]), world, SEC_ACE_TYPE_ACCESS_ALLOWED, sa, 0);
- init_sec_access(&sa, SA_RIGHT_ALIAS_ALL_ACCESS);
- init_sec_ace(&(dacl_aces[1]), admins, SEC_ACE_TYPE_ACCESS_ALLOWED, sa, 0);
-
- dacl = make_sec_acl(ctx, NT4_ACL_REVISION, 2, dacl_aces);
- if (!sacl) {
- DEBUG(0, ("build_init_sec_desc: Failed to make SEC_ACL.\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- *sec_desc = make_sec_desc(ctx, SEC_DESC_REVISION, admins, admins, sacl, dacl, &psize);
- if (!(*sec_desc)) {
- DEBUG(0,("get_share_security: Failed to make SEC_DESC.\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sec_desc_add_ace_to_dacl(SEC_DESC *sec_desc, TALLOC_CTX *ctx, DOM_SID *sid, uint32 mask)
-{
- NTSTATUS result;
- SEC_ACE *new_aces;
- unsigned num_aces;
- int i;
-
- num_aces = sec_desc->dacl->num_aces + 1;
- result = sec_ace_add_sid(ctx, &new_aces, sec_desc->dacl->ace, &num_aces, sid, mask);
- if (NT_STATUS_IS_OK(result)) {
- sec_desc->dacl->ace = new_aces;
- sec_desc->dacl->num_aces = num_aces;
- sec_desc->dacl->size = SEC_ACL_HEADER_SIZE;
- for (i = 0; i < num_aces; i++) {
- sec_desc->dacl->size += sec_desc->dacl->ace[i].size;
- }
- }
- return result;
-}
-
-NTSTATUS gums_init_builtin_groups(void)
-{
- NTSTATUS result;
- GUMS_OBJECT g_obj;
- GUMS_GROUP *g_grp;
- GUMS_PRIVILEGE g_priv;
-
- /* Build the well known Builtin Local Groups */
- g_obj.type = GUMS_OBJ_GROUP;
- g_obj.version = 1;
- g_obj.seq_num = 0;
- g_obj.mem_ctx = talloc_init_named("gums_init_backend_acct");
- if (g_obj.mem_ctx == NULL) {
- DEBUG(0, ("gums_init_backend: Out of Memory!\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- /* Administrators */
-
- /* alloc group structure */
- g_obj.data = (void *)talloc(g_obj.mem_ctx, sizeof(GUMS_OBJ_GROUP));
- ALLOC_CHECK("gums_init_backend", g_obj.data, result, done);
-
- /* make admins sid */
- g_grp = (GUMS_GROUP *)g_obj.data;
- sid_copy(g_obj.sid, &global_sid_Builtin_Administrators);
-
- /* make security descriptor */
- result = create_builtin_alias_default_sec_desc(&(g_obj.sec_desc), g_obj.mem_ctx);
- NTSTATUS_CHECK("gums_init_backend", "create_builtin_alias_default_sec_desc", result, done);
-
- /* make privilege set */
- /* From BDC join trace:
- SeSecurityPrivilege
- SeBackupPrivilege
- SeRestorePrivilege
- SeSystemtimePrivilege
- SeShutdownPrivilege
- SeRemoteShutdownPrivilege
- SeTakeOwnershipPrivilege
- SeDebugPrivilege
- SeSystemEnvironmentPrivilege
- SeSystemProfilePrivilege
- SeProfileSingleProcessPrivilege
- SeIncreaseBasePriorityPrivilege
- SeLocalDriverPrivilege
- SeCreatePagefilePrivilege
- SeIncreaseQuotaPrivilege
- */
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Administrators");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
- g_obj.description = talloc_strdup(g_obj.mem_ctx, "Members can fully administer the computer/domain");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* numebr of group members */
- g_grp->count = 0;
- g_grp->members = NULL;
-
- /* store Administrators group */
- result = gums_storage->set_object(&g_obj);
-
- /* Power Users */
- /* Domain Controllers Does NOT have power Users */
-
- sid_copy(g_obj.sid, &global_sid_Builtin_Power_Users);
-
- /* make privilege set */
- /* SE_PRIV_??? */
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Power Users");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
-/* > */ g_obj.description = talloc_strdup(g_obj.mem_ctx, "Power Users");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* store Power Users group */
- result = gums_storage->set_object(&g_obj);
-
- /* Account Operators */
-
- sid_copy(g_obj.sid, &global_sid_Builtin_Account_Operators);
-
- /* make privilege set */
- /* From BDC join trace:
- SeShutdownPrivilege
- */
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Account Operators");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
- g_obj.description = talloc_strdup(g_obj.mem_ctx, "Members can administer domain user and group accounts");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* store Account Operators group */
- result = gums_storage->set_object(&g_obj);
-
- /* Server Operators */
-
- sid_copy(g_obj.sid, &global_sid_Builtin_Server_Operators);
-
- /* make privilege set */
- /* From BDC join trace:
- SeBackupPrivilege
- SeRestorePrivilege
- SeSystemtimePrivilege
- SeShutdownPrivilege
- SeRemoteShutdownPrivilege
- */
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Server Operators");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
- g_obj.description = talloc_strdup(g_obj.mem_ctx, "Members can administer domain servers");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* store Server Operators group */
- result = gums_storage->set_object(&g_obj);
-
- /* Print Operators */
-
- sid_copy(g_obj.sid, &global_sid_Builtin_Print_Operators);
-
- /* make privilege set */
- /* From BDC join trace:
- SeShutdownPrivilege
- */
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Print Operators");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
- g_obj.description = talloc_strdup(g_obj.mem_ctx, "Members can administer domain printers");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* store Print Operators group */
- result = gums_storage->set_object(&g_obj);
-
- /* Backup Operators */
-
- sid_copy(g_obj.sid, &global_sid_Builtin_Backup_Operators);
-
- /* make privilege set */
- /* From BDC join trace:
- SeBackupPrivilege
- SeRestorePrivilege
- SeShutdownPrivilege
- */
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Backup Operators");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
- g_obj.description = talloc_strdup(g_obj.mem_ctx, "Members can bypass file security to backup files");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* store Backup Operators group */
- result = gums_storage->set_object(&g_obj);
-
- /* Replicator */
-
- sid_copy(g_obj.sid, &global_sid_Builtin_Replicator);
-
- /* make privilege set */
- /* From BDC join trace:
- SeBackupPrivilege
- SeRestorePrivilege
- SeShutdownPrivilege
- */
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Replicator");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
- g_obj.description = talloc_strdup(g_obj.mem_ctx, "Supports file replication in a domain");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* store Replicator group */
- result = gums_storage->set_object(&g_obj);
-
- /* Users */
-
- sid_copy(g_obj.sid, &global_sid_Builtin_Users);
-
- /* add ACE to sec dsec dacl */
- sec_desc_add_ace_to_dacl(g_obj.sec_desc, g_obj.mem_ctx, &global_sid_Builtin_Account_Operators, ALIAS_DEFAULT_DACL_SA_RIGHTS);
- sec_desc_add_ace_to_dacl(g_obj.sec_desc, g_obj.mem_ctx, &global_sid_Builtin_Power_Users, ALIAS_DEFAULT_DACL_SA_RIGHTS);
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Users");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
- g_obj.description = talloc_strdup(g_obj.mem_ctx, "Ordinary users");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* store Users group */
- result = gums_storage->set_object(&g_obj);
-
- /* Guests */
-
- sid_copy(g_obj.sid, &global_sid_Builtin_Guests);
-
- /* set name */
- g_obj.name = talloc_strdup(g_obj.mem_ctx, "Guests");
- ALLOC_CHECK("gums_init_backend", g_obj.name, result, done);
-
- /* set description */
- g_obj.description = talloc_strdup(g_obj.mem_ctx, "Users granted guest access to the computer/domain");
- ALLOC_CHECK("gums_init_backend", g_obj.description, result, done);
-
- /* store Guests group */
- result = gums_storage->set_object(&g_obj);
-
- /* set default privileges */
- g_priv.type = GUMS_OBJ_GROUP;
- g_priv.version = 1;
- g_priv.seq_num = 0;
- g_priv.mem_ctx = talloc_init_named("gums_init_backend_priv");
- if (g_priv.mem_ctx == NULL) {
- DEBUG(0, ("gums_init_backend: Out of Memory!\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
-
-
-done:
- talloc_destroy(g_obj.mem_ctx);
- talloc_destroy(g_priv.mem_ctx);
- return result;
-}
-
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- Password and authentication handling
- Copyright (C) Andrew Bartlett 2002
- Copyright (C) Jelmer Vernooij 2002
- Copyright (C) Stefan (metze) Metzmacher 2002
- Copyright (C) Kai Krüger 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_SAM
-
-extern DOM_SID global_sid_Builtin;
-
-/** List of various built-in sam modules */
-
-const struct sam_init_function_entry builtin_sam_init_functions[] = {
- { "plugin", sam_init_plugin },
-#ifdef HAVE_LDAP
- { "ads", sam_init_ads },
-#endif
- { "skel", sam_init_skel },
- { NULL, NULL}
-};
-
-
-static NTSTATUS sam_get_methods_by_sid(const SAM_CONTEXT *context, SAM_METHODS **sam_method, const DOM_SID *domainsid)
-{
- SAM_METHODS *tmp_methods;
-
- DEBUG(5,("sam_get_methods_by_sid: %d\n", __LINE__));
-
- /* invalid sam_context specified */
- SAM_ASSERT(context && context->methods);
-
- tmp_methods = context->methods;
-
- while (tmp_methods) {
- if (sid_equal(domainsid, &(tmp_methods->domain_sid)))
- {
- (*sam_method) = tmp_methods;
- return NT_STATUS_OK;
- }
- tmp_methods = tmp_methods->next;
- }
-
- DEBUG(3,("sam_get_methods_by_sid: There is no backend specified for domain %s\n", sid_string_static(domainsid)));
-
- return NT_STATUS_NO_SUCH_DOMAIN;
-}
-
-static NTSTATUS sam_get_methods_by_name(const SAM_CONTEXT *context, SAM_METHODS **sam_method, const char *domainname)
-{
- SAM_METHODS *tmp_methods;
-
- DEBUG(5,("sam_get_methods_by_name: %d\n", __LINE__));
-
- /* invalid sam_context specified */
- SAM_ASSERT(context && context->methods);
-
- tmp_methods = context->methods;
-
- while (tmp_methods) {
- if (strequal(domainname, tmp_methods->domain_name))
- {
- (*sam_method) = tmp_methods;
- return NT_STATUS_OK;
- }
- tmp_methods = tmp_methods->next;
- }
-
- DEBUG(3,("sam_get_methods_by_sid: There is no backend specified for domain %s\n", domainname));
-
- return NT_STATUS_NO_SUCH_DOMAIN;
-}
-
-static NTSTATUS make_sam_methods(TALLOC_CTX *mem_ctx, SAM_METHODS **methods)
-{
- *methods = talloc(mem_ctx, sizeof(SAM_METHODS));
-
- if (!*methods) {
- return NT_STATUS_NO_MEMORY;
- }
-
- ZERO_STRUCTP(*methods);
-
- return NT_STATUS_OK;
-}
-
-/******************************************************************
- Free and cleanup a sam context, any associated data and anything
- that the attached modules might have associated.
- *******************************************************************/
-
-void free_sam_context(SAM_CONTEXT **context)
-{
- SAM_METHODS *sam_selected = (*context)->methods;
-
- while (sam_selected) {
- if (sam_selected->free_private_data) {
- sam_selected->free_private_data(&(sam_selected->private_data));
- }
- sam_selected = sam_selected->next;
- }
-
- talloc_destroy((*context)->mem_ctx);
- *context = NULL;
-}
-
-/******************************************************************
- Make a backend_entry from scratch
- *******************************************************************/
-
-static NTSTATUS make_backend_entry(SAM_BACKEND_ENTRY *backend_entry, char *sam_backend_string)
-{
- char *tmp = NULL;
- char *tmp_string = sam_backend_string;
-
- DEBUG(5,("make_backend_entry: %d\n", __LINE__));
-
- SAM_ASSERT(sam_backend_string && backend_entry);
-
- backend_entry->module_name = sam_backend_string;
-
- DEBUG(5,("makeing backend_entry for %s\n", backend_entry->module_name));
-
- if ((tmp = strrchr(tmp_string, '|')) != NULL) {
- DEBUGADD(20,("a domain name has been specified\n"));
- *tmp = 0;
- backend_entry->domain_name = smb_xstrdup(tmp + 1);
- tmp_string = tmp + 1;
- }
-
- if ((tmp = strchr(tmp_string, ':')) != NULL) {
- DEBUG(20,("options for the backend have been specified\n"));
- *tmp = 0;
- backend_entry->module_params = smb_xstrdup(tmp + 1);
- tmp_string = tmp + 1;
- }
-
- if (backend_entry->domain_name == NULL) {
- DEBUG(10,("make_backend_entry: no domain was specified for sam module %s. Using default domain %s\n",
- backend_entry->module_name, lp_workgroup()));
- backend_entry->domain_name = smb_xstrdup(lp_workgroup());
- }
-
- if ((backend_entry->domain_sid = (DOM_SID *)malloc(sizeof(DOM_SID))) == NULL) {
- DEBUG(0,("make_backend_entry: failed to malloc domain_sid\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- DEBUG(10,("looking up sid for domain %s\n", backend_entry->domain_name));
-
- if (!secrets_fetch_domain_sid(backend_entry->domain_name, backend_entry->domain_sid)) {
- DEBUG(2,("make_backend_entry: There is no SID stored for domain %s. Creating a new one.\n",
- backend_entry->domain_name));
- DEBUG(0, ("FIXME in %s:%d\n", __FILE__, __LINE__));
- ZERO_STRUCTP(backend_entry->domain_sid);
- }
-
- DEBUG(5,("make_backend_entry: module name: %s, module parameters: %s, domain name: %s, domain sid: %s\n",
- backend_entry->module_name, backend_entry->module_params, backend_entry->domain_name, sid_string_static(backend_entry->domain_sid)));
-
- return NT_STATUS_OK;
-}
-
-/******************************************************************
- create sam_methods struct based on sam_backend_entry
- *****************************************************************/
-
-static NTSTATUS make_sam_methods_backend_entry(SAM_CONTEXT *context, SAM_METHODS **methods_ptr, SAM_BACKEND_ENTRY *backend_entry)
-{
- NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
- SAM_METHODS *methods;
- int i;
-
- DEBUG(5,("make_sam_methods_backend_entry: %d\n", __LINE__));
-
- if (!NT_STATUS_IS_OK(nt_status = make_sam_methods(context->mem_ctx, methods_ptr))) {
- return nt_status;
- }
-
- methods = *methods_ptr;
- methods->backendname = talloc_strdup(context->mem_ctx, backend_entry->module_name);
- methods->domain_name = talloc_strdup(context->mem_ctx, backend_entry->domain_name);
- sid_copy(&methods->domain_sid, backend_entry->domain_sid);
- methods->parent = context;
-
- DEBUG(5,("Attempting to find sam backend %s\n", backend_entry->module_name));
- for (i = 0; builtin_sam_init_functions[i].module_name; i++)
- {
- if (strequal(builtin_sam_init_functions[i].module_name, backend_entry->module_name))
- {
- DEBUG(5,("Found sam backend %s (at pos %d)\n", backend_entry->module_name, i));
- DEBUGADD(5,("initialising it with options=%s for domain %s\n", backend_entry->module_params, sid_string_static(backend_entry->domain_sid)));
- nt_status = builtin_sam_init_functions[i].init(methods, backend_entry->module_params);
- if (NT_STATUS_IS_OK(nt_status)) {
- DEBUG(5,("sam backend %s has a valid init\n", backend_entry->module_name));
- } else {
- DEBUG(2,("sam backend %s did not correctly init (error was %s)\n",
- backend_entry->module_name, nt_errstr(nt_status)));
- }
- return nt_status;
- }
- }
-
- DEBUG(2,("could not find backend %s\n", backend_entry->module_name));
-
- return NT_STATUS_INVALID_PARAMETER;
-}
-
-static NTSTATUS sam_context_check_default_backends(SAM_CONTEXT *context)
-{
- SAM_BACKEND_ENTRY entry;
- DOM_SID *global_sam_sid = get_global_sam_sid(); /* lp_workgroup doesn't play nicely with multiple domains */
- SAM_METHODS *methods, *tmpmethods;
- NTSTATUS ntstatus;
-
- DEBUG(5,("sam_context_check_default_backends: %d\n", __LINE__));
-
- /* Make sure domain lp_workgroup() is available */
-
- ntstatus = sam_get_methods_by_sid(context, &methods, &global_sid_Builtin);
-
- if (NT_STATUS_EQUAL(ntstatus, NT_STATUS_NO_SUCH_DOMAIN)) {
- DEBUG(4,("There was no backend specified for domain %s(%s); using %s\n",
- lp_workgroup(), sid_string_static(global_sam_sid), SAM_DEFAULT_BACKEND));
-
- SAM_ASSERT(global_sam_sid);
-
- entry.module_name = SAM_DEFAULT_BACKEND;
- entry.module_params = NULL;
- entry.domain_name = lp_workgroup();
- entry.domain_sid = (DOM_SID *)malloc(sizeof(DOM_SID));
- sid_copy(entry.domain_sid, global_sam_sid);
-
- if (!NT_STATUS_IS_OK(ntstatus = make_sam_methods_backend_entry(context, &methods, &entry))) {
- DEBUG(4,("make_sam_methods_backend_entry failed\n"));
- return ntstatus;
- }
-
- DLIST_ADD_END(context->methods, methods, tmpmethods);
-
- } else if (!NT_STATUS_IS_OK(ntstatus)) {
- DEBUG(2, ("sam_get_methods_by_sid failed for %s\n", lp_workgroup()));
- return ntstatus;
- }
-
- /* Make sure the BUILTIN domain is available */
-
- ntstatus = sam_get_methods_by_sid(context, &methods, global_sam_sid);
-
- if (NT_STATUS_EQUAL(ntstatus, NT_STATUS_NO_SUCH_DOMAIN)) {
- DEBUG(4,("There was no backend specified for domain BUILTIN; using %s\n",
- SAM_DEFAULT_BACKEND));
- entry.module_name = SAM_DEFAULT_BACKEND;
- entry.module_params = NULL;
- entry.domain_name = "BUILTIN";
- entry.domain_sid = (DOM_SID *)malloc(sizeof(DOM_SID));
- sid_copy(entry.domain_sid, &global_sid_Builtin);
-
- if (!NT_STATUS_IS_OK(ntstatus = make_sam_methods_backend_entry(context, &methods, &entry))) {
- DEBUG(4,("make_sam_methods_backend_entry failed\n"));
- return ntstatus;
- }
-
- DLIST_ADD_END(context->methods, methods, tmpmethods);
- } else if (!NT_STATUS_IS_OK(ntstatus)) {
- DEBUG(2, ("sam_get_methods_by_sid failed for BUILTIN\n"));
- return ntstatus;
- }
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS check_duplicate_backend_entries(SAM_BACKEND_ENTRY **backend_entries, int *nBackends)
-{
- int i, j;
-
- DEBUG(5,("check_duplicate_backend_entries: %d\n", __LINE__));
-
- for (i = 0; i < *nBackends; i++) {
- for (j = i + 1; j < *nBackends; j++) {
- if (sid_equal((*backend_entries)[i].domain_sid, (*backend_entries)[j].domain_sid)) {
- DEBUG(0,("two backend modules claim the same domain %s\n",
- sid_string_static((*backend_entries)[j].domain_sid)));
- return NT_STATUS_INVALID_PARAMETER;
- }
- }
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS make_sam_context_list(SAM_CONTEXT **context, char **sam_backends_param)
-{
- int i = 0, j = 0;
- SAM_METHODS *curmethods, *tmpmethods;
- int nBackends = 0;
- SAM_BACKEND_ENTRY *backends = NULL;
- NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
-
- DEBUG(5,("make_sam_context_from_conf: %d\n", __LINE__));
-
- if (!sam_backends_param) {
- DEBUG(1, ("no SAM backeds specified!\n"));
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = make_sam_context(context))) {
- DEBUG(4,("make_sam_context failed\n"));
- return nt_status;
- }
-
- while (sam_backends_param[nBackends])
- nBackends++;
-
- DEBUG(6,("There are %d domains listed with their backends\n", nBackends));
-
- if ((backends = (SAM_BACKEND_ENTRY *)malloc(sizeof(*backends)*nBackends)) == NULL) {
- DEBUG(0,("make_sam_context_list: failed to allocate backends\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- memset(backends, '\0', sizeof(*backends)*nBackends);
-
- for (i = 0; i < nBackends; i++) {
- DEBUG(8,("processing %s\n",sam_backends_param[i]));
- if (!NT_STATUS_IS_OK(nt_status = make_backend_entry(&backends[i], sam_backends_param[i]))) {
- DEBUG(4,("make_backend_entry failed\n"));
- for (j = 0; j < nBackends; j++) SAFE_FREE(backends[j].domain_sid);
- SAFE_FREE(backends);
- free_sam_context(context);
- return nt_status;
- }
- }
-
- if (!NT_STATUS_IS_OK(nt_status = check_duplicate_backend_entries(&backends, &nBackends))) {
- DEBUG(4,("check_duplicate_backend_entries failed\n"));
- for (j = 0; j < nBackends; j++) SAFE_FREE(backends[j].domain_sid);
- SAFE_FREE(backends);
- free_sam_context(context);
- return nt_status;
- }
-
- for (i = 0; i < nBackends; i++) {
- if (!NT_STATUS_IS_OK(nt_status = make_sam_methods_backend_entry(*context, &curmethods, &backends[i]))) {
- DEBUG(4,("make_sam_methods_backend_entry failed\n"));
- for (j = 0; j < nBackends; j++) SAFE_FREE(backends[j].domain_sid);
- SAFE_FREE(backends);
- free_sam_context(context);
- return nt_status;
- }
- DLIST_ADD_END((*context)->methods, curmethods, tmpmethods);
- }
-
- for (i = 0; i < nBackends; i++) SAFE_FREE(backends[i].domain_sid);
-
- SAFE_FREE(backends);
- return NT_STATUS_OK;
-}
-
-/******************************************************************
- Make a sam_context from scratch.
- *******************************************************************/
-
-NTSTATUS make_sam_context(SAM_CONTEXT **context)
-{
- TALLOC_CTX *mem_ctx;
-
- mem_ctx = talloc_init_named("sam_context internal allocation context");
-
- if (!mem_ctx) {
- DEBUG(0, ("make_sam_context: talloc init failed!\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- *context = talloc(mem_ctx, sizeof(**context));
- if (!*context) {
- DEBUG(0, ("make_sam_context: talloc failed!\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- ZERO_STRUCTP(*context);
-
- (*context)->mem_ctx = mem_ctx;
-
- (*context)->free_fn = free_sam_context;
-
- return NT_STATUS_OK;
-}
-
-/******************************************************************
- Return an already initialised sam_context, to facilitate backward
- compatibility (see functions below).
- *******************************************************************/
-
-static struct sam_context *sam_get_static_context(BOOL reload)
-{
- static SAM_CONTEXT *sam_context = NULL;
-
- if ((sam_context) && (reload)) {
- sam_context->free_fn(&sam_context);
- sam_context = NULL;
- }
-
- if (!sam_context) {
- if (!NT_STATUS_IS_OK(make_sam_context_list(&sam_context, lp_sam_backend()))) {
- DEBUG(4,("make_sam_context_list failed\n"));
- return NULL;
- }
-
- /* Make sure the required domains (default domain, builtin) are available */
- if (!NT_STATUS_IS_OK(sam_context_check_default_backends(sam_context))) {
- DEBUG(4,("sam_context_check_default_backends failed\n"));
- return NULL;
- }
- }
-
- return sam_context;
-}
-
-/***************************************************************
- Initialize the static context (at smbd startup etc).
-
- If uninitialised, context will auto-init on first use.
- ***************************************************************/
-
-BOOL initialize_sam(BOOL reload)
-{
- return (sam_get_static_context(reload) != NULL);
-}
-
-
-/**************************************************************
- External API. This is what the rest of the world calls...
-***************************************************************/
-
-/******************************************************************
- sam_* functions are used to link the external SAM interface
- with the internal backends. These functions lookup the appropriate
- backends for the domain and pass on to the function in sam_methods
- in the selected backend
-
- When the context parmater is NULL, the default is used.
- *******************************************************************/
-
-#define SAM_SETUP_CONTEXT if (!context) \
- context = sam_get_static_context(False);\
- if (!context) {\
- return NT_STATUS_UNSUCCESSFUL; \
- }\
-
-
-
-NTSTATUS sam_get_sec_desc(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const DOM_SID *sid, SEC_DESC **sd)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_get_sec_desc: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, sid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_get_sec_desc) {
- DEBUG(3, ("sam_get_sec_desc: sam_methods of the domain did not specify sam_get_sec_desc\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_get_sec_desc(tmp_methods, access_token, sid, sd))) {
- DEBUG(4,("sam_get_sec_desc for %s in backend %s failed\n", sid_string_static(sid), tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_set_sec_desc(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const DOM_SID *sid, const SEC_DESC *sd)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_set_sec_desc: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, sid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_set_sec_desc) {
- DEBUG(3, ("sam_set_sec_desc: sam_methods of the domain did not specify sam_set_sec_desc\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_set_sec_desc(tmp_methods, access_token, sid, sd))) {
- DEBUG(4,("sam_set_sec_desc for %s in backend %s failed\n", sid_string_static(sid), tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-
-NTSTATUS sam_lookup_name(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const char *domain, const char *name, DOM_SID *sid, uint32 *type)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_lookup_name: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_name(context, &tmp_methods, domain))) {
- DEBUG(4,("sam_get_methods_by_name failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_lookup_name) {
- DEBUG(3, ("sam_lookup_name: sam_methods of the domain did not specify sam_lookup_name\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_lookup_name(tmp_methods, access_token, name, sid, type))) {
- DEBUG(4,("sam_lookup_name for %s\\%s in backend %s failed\n",
- tmp_methods->domain_name, name, tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_lookup_sid(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, TALLOC_CTX *mem_ctx, const DOM_SID *sid, char **name, uint32 *type)
-{
- SAM_METHODS *tmp_methods;
- uint32 rid;
- NTSTATUS nt_status;
- DOM_SID domainsid;
-
- DEBUG(5,("sam_lookup_sid: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- sid_copy(&domainsid, sid);
- if (!sid_split_rid(&domainsid, &rid)) {
- DEBUG(3,("sam_lookup_sid: failed to split the sid\n"));
- return NT_STATUS_INVALID_SID;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, &domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_lookup_sid) {
- DEBUG(3, ("sam_lookup_sid: sam_methods of the domain did not specify sam_lookup_sid\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_lookup_sid(tmp_methods, access_token, mem_ctx, sid, name, type))) {
- DEBUG(4,("sam_lookup_name for %s in backend %s failed\n",
- sid_string_static(sid), tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-
-NTSTATUS sam_update_domain(const SAM_CONTEXT *context, const SAM_DOMAIN_HANDLE *domain)
-{
- const SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_update_domain: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid domain specified */
- SAM_ASSERT(domain && domain->current_sam_methods);
-
- tmp_methods = domain->current_sam_methods;
-
- if (!tmp_methods->sam_update_domain) {
- DEBUG(3, ("sam_update_domain: sam_methods of the domain did not specify sam_update_domain\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_update_domain(tmp_methods, domain))){
- DEBUG(4,("sam_update_domain in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_enum_domains(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, int32 *domain_count, DOM_SID **domains, char ***domain_names)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- SEC_DESC *sd;
- size_t sd_size;
- uint32 acc_granted;
- int i = 0;
-
- DEBUG(5,("sam_enum_domains: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid parmaters specified */
- SAM_ASSERT(domain_count && domains && domain_names);
-
- if (!NT_STATUS_IS_OK(nt_status = samr_make_sam_obj_sd(context->mem_ctx, &sd, &sd_size))) {
- DEBUG(4,("samr_make_sam_obj_sd failed\n"));
- return nt_status;
- }
-
- if (!se_access_check(sd, access_token, SA_RIGHT_SAM_ENUM_DOMAINS, &acc_granted, &nt_status)) {
- DEBUG(3,("sam_enum_domains: ACCESS DENIED\n"));
- return nt_status;
- }
-
- tmp_methods= context->methods;
- *domain_count = 0;
-
- while (tmp_methods) {
- (*domain_count)++;
- tmp_methods= tmp_methods->next;
- }
-
- DEBUG(6,("sam_enum_domains: enumerating %d domains\n", (*domain_count)));
-
- tmp_methods = context->methods;
-
- if (((*domains) = malloc( sizeof(DOM_SID) * (*domain_count))) == NULL) {
- DEBUG(0,("sam_enum_domains: Out of memory allocating domain SID list\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- if (((*domain_names) = malloc( sizeof(char*) * (*domain_count))) == NULL) {
- DEBUG(0,("sam_enum_domains: Out of memory allocating domain name list\n"));
- SAFE_FREE((*domains));
- return NT_STATUS_NO_MEMORY;
- }
-
- while (tmp_methods) {
- DEBUGADD(7,(" [%d] %s: %s\n", i, tmp_methods->domain_name, sid_string_static(&tmp_methods->domain_sid)));
- sid_copy(domains[i],&tmp_methods->domain_sid);
- *domain_names[i] = smb_xstrdup(tmp_methods->domain_name);
- i++;
- tmp_methods= tmp_methods->next;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_lookup_domain(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const char *domain, DOM_SID **domainsid)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- SEC_DESC *sd;
- size_t sd_size;
- uint32 acc_granted;
-
- DEBUG(5,("sam_lookup_domain: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid paramters */
- SAM_ASSERT(access_token && domain && domainsid);
-
- if (!NT_STATUS_IS_OK(nt_status = samr_make_sam_obj_sd(context->mem_ctx, &sd, &sd_size))) {
- DEBUG(4,("samr_make_sam_obj_sd failed\n"));
- return nt_status;
- }
-
- if (!se_access_check(sd, access_token, SA_RIGHT_SAM_OPEN_DOMAIN, &acc_granted, &nt_status)) {
- DEBUG(3,("sam_lookup_domain: ACCESS DENIED\n"));
- return nt_status;
- }
-
- tmp_methods= context->methods;
-
- while (tmp_methods) {
- if (strcmp(domain, tmp_methods->domain_name) == 0) {
- (*domainsid) = (DOM_SID *)malloc(sizeof(DOM_SID));
- sid_copy((*domainsid), &tmp_methods->domain_sid);
- return NT_STATUS_OK;
- }
- tmp_methods= tmp_methods->next;
- }
-
- return NT_STATUS_NO_SUCH_DOMAIN;
-}
-
-
-NTSTATUS sam_get_domain_by_sid(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *domainsid, SAM_DOMAIN_HANDLE **domain)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_get_domain_by_sid: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(access_token && domainsid && domain);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_get_domain_handle) {
- DEBUG(3, ("sam_get_domain_by_sid: sam_methods of the domain did not specify sam_get_domain_handle\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_get_domain_handle(tmp_methods, access_token, access_desired, domain))) {
- DEBUG(4,("sam_get_domain_handle for %s in backend %s failed\n",
- sid_string_static(domainsid), tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_create_account(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *domainsid, const char *account_name, uint16 acct_ctrl, SAM_ACCOUNT_HANDLE **account)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_create_account: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid parmaters */
- SAM_ASSERT(access_token && domainsid && account_name && account);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_create_account) {
- DEBUG(3, ("sam_create_account: sam_methods of the domain did not specify sam_create_account\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_create_account(tmp_methods, access_token, access_desired, account_name, acct_ctrl, account))) {
- DEBUG(4,("sam_create_account in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_add_account(const SAM_CONTEXT *context, const SAM_ACCOUNT_HANDLE *account)
-{
- DOM_SID domainsid;
- const DOM_SID *accountsid;
- SAM_METHODS *tmp_methods;
- uint32 rid;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_add_account: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid parmaters */
- SAM_ASSERT(account);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_account_sid(account, &accountsid))) {
- DEBUG(0,("Can't get account SID\n"));
- return nt_status;
- }
-
- sid_copy(&domainsid, accountsid);
- if (!sid_split_rid(&domainsid, &rid)) {
- DEBUG(3,("sam_get_account_by_sid: failed to split the sid\n"));
- return NT_STATUS_INVALID_SID;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, &domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_add_account) {
- DEBUG(3, ("sam_add_account: sam_methods of the domain did not specify sam_add_account\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_add_account(tmp_methods, account))){
- DEBUG(4,("sam_add_account in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_update_account(const SAM_CONTEXT *context, const SAM_ACCOUNT_HANDLE *account)
-{
- const SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_update_account: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid account specified */
- SAM_ASSERT(account && account->current_sam_methods);
-
- tmp_methods = account->current_sam_methods;
-
- if (!tmp_methods->sam_update_account) {
- DEBUG(3, ("sam_update_account: sam_methods of the domain did not specify sam_update_account\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_update_account(tmp_methods, account))){
- DEBUG(4,("sam_update_account in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_delete_account(const SAM_CONTEXT *context, const SAM_ACCOUNT_HANDLE *account)
-{
- const SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_delete_account: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid account specified */
- SAM_ASSERT(account && account->current_sam_methods);
-
- tmp_methods = account->current_sam_methods;
-
- if (!tmp_methods->sam_delete_account) {
- DEBUG(3, ("sam_delete_account: sam_methods of the domain did not specify sam_delete_account\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_delete_account(tmp_methods, account))){
- DEBUG(4,("sam_delete_account in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_enum_accounts(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const DOM_SID *domainsid, uint16 acct_ctrl, int32 *account_count, SAM_ACCOUNT_ENUM **accounts)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_enum_accounts: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(access_token && domainsid && account_count && accounts);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_enum_accounts) {
- DEBUG(3, ("sam_enum_accounts: sam_methods of the domain did not specify sam_enum_accounts\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_enum_accounts(tmp_methods, access_token, acct_ctrl, account_count, accounts))) {
- DEBUG(4,("sam_enum_accounts for domain %s in backend %s failed\n",
- tmp_methods->domain_name, tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-
-NTSTATUS sam_get_account_by_sid(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *accountsid, SAM_ACCOUNT_HANDLE **account)
-{
- SAM_METHODS *tmp_methods;
- uint32 rid;
- DOM_SID domainsid;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_get_account_by_sid: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(access_token && accountsid && account);
-
- sid_copy(&domainsid, accountsid);
- if (!sid_split_rid(&domainsid, &rid)) {
- DEBUG(3,("sam_get_account_by_sid: failed to split the sid\n"));
- return NT_STATUS_INVALID_SID;
- }
-
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, &domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_get_account_by_sid) {
- DEBUG(3, ("sam_get_account_by_sid: sam_methods of the domain did not specify sam_get_account_by_sid\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_get_account_by_sid(tmp_methods, access_token, access_desired, accountsid, account))) {
- DEBUG(4,("sam_get_account_by_sid for %s in backend %s failed\n",
- sid_string_static(accountsid), tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_account_by_name(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *domain, const char *name, SAM_ACCOUNT_HANDLE **account)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_get_account_by_name: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(access_token && domain && name && account);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_name(context, &tmp_methods, domain))) {
- DEBUG(4,("sam_get_methods_by_name failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_get_account_by_name) {
- DEBUG(3, ("sam_get_account_by_name: sam_methods of the domain did not specify sam_get_account_by_name\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_get_account_by_name(tmp_methods, access_token, access_desired, name, account))) {
- DEBUG(4,("sam_get_account_by_name for %s\\%s in backend %s failed\n",
- domain, name, tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_create_group(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *domainsid, const char *group_name, uint16 group_ctrl, SAM_GROUP_HANDLE **group)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_create_group: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(access_token && domainsid && group_name && group);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_create_group) {
- DEBUG(3, ("sam_create_group: sam_methods of the domain did not specify sam_create_group\n"));
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_create_group(tmp_methods, access_token, access_desired, group_name, group_ctrl, group))) {
- DEBUG(4,("sam_create_group in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_add_group(const SAM_CONTEXT *context, const SAM_GROUP_HANDLE *group)
-{
- DOM_SID domainsid;
- const DOM_SID *groupsid;
- SAM_METHODS *tmp_methods;
- uint32 rid;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_add_group: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(group);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_group_sid(group, &groupsid))) {
- DEBUG(0,("Can't get group SID\n"));
- return nt_status;
- }
-
- sid_copy(&domainsid, groupsid);
- if (!sid_split_rid(&domainsid, &rid)) {
- DEBUG(3,("sam_get_group_by_sid: failed to split the sid\n"));
- return NT_STATUS_INVALID_SID;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, &domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_add_group) {
- DEBUG(3, ("sam_add_group: sam_methods of the domain did not specify sam_add_group\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_add_group(tmp_methods, group))){
- DEBUG(4,("sam_add_group in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_update_group(const SAM_CONTEXT *context, const SAM_GROUP_HANDLE *group)
-{
- const SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_update_group: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid group specified */
- SAM_ASSERT(group && group->current_sam_methods);
-
- tmp_methods = group->current_sam_methods;
-
- if (!tmp_methods->sam_update_group) {
- DEBUG(3, ("sam_update_group: sam_methods of the domain did not specify sam_update_group\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_update_group(tmp_methods, group))){
- DEBUG(4,("sam_update_group in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_delete_group(const SAM_CONTEXT *context, const SAM_GROUP_HANDLE *group)
-{
- const SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_delete_group: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid group specified */
- SAM_ASSERT(group && group->current_sam_methods);
-
- tmp_methods = group->current_sam_methods;
-
- if (!tmp_methods->sam_delete_group) {
- DEBUG(3, ("sam_delete_group: sam_methods of the domain did not specify sam_delete_group\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_delete_group(tmp_methods, group))){
- DEBUG(4,("sam_delete_group in backend %s failed\n",
- tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_enum_groups(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const DOM_SID *domainsid, uint16 group_ctrl, uint32 *groups_count, SAM_GROUP_ENUM **groups)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_enum_groups: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(access_token && domainsid && groups_count && groups);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_enum_accounts) {
- DEBUG(3, ("sam_enum_groups: sam_methods of the domain did not specify sam_enum_groups\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_enum_groups(tmp_methods, access_token, group_ctrl, groups_count, groups))) {
- DEBUG(4,("sam_enum_groups for domain %s in backend %s failed\n",
- tmp_methods->domain_name, tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_group_by_sid(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *groupsid, SAM_GROUP_HANDLE **group)
-{
- SAM_METHODS *tmp_methods;
- uint32 rid;
- NTSTATUS nt_status;
- DOM_SID domainsid;
-
- DEBUG(5,("sam_get_group_by_sid: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(access_token && groupsid && group);
-
- sid_copy(&domainsid, groupsid);
- if (!sid_split_rid(&domainsid, &rid)) {
- DEBUG(3,("sam_get_group_by_sid: failed to split the sid\n"));
- return NT_STATUS_INVALID_SID;
- }
-
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_sid(context, &tmp_methods, &domainsid))) {
- DEBUG(4,("sam_get_methods_by_sid failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_get_group_by_sid) {
- DEBUG(3, ("sam_get_group_by_sid: sam_methods of the domain did not specify sam_get_group_by_sid\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_get_group_by_sid(tmp_methods, access_token, access_desired, groupsid, group))) {
- DEBUG(4,("sam_get_group_by_sid for %s in backend %s failed\n",
- sid_string_static(groupsid), tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_group_by_name(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *domain, const char *name, SAM_GROUP_HANDLE **group)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- DEBUG(5,("sam_get_group_by_name: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- SAM_ASSERT(access_token && domain && name && group);
-
- if (!NT_STATUS_IS_OK(nt_status = sam_get_methods_by_name(context, &tmp_methods, domain))) {
- DEBUG(4,("sam_get_methods_by_name failed\n"));
- return nt_status;
- }
-
- if (!tmp_methods->sam_get_group_by_name) {
- DEBUG(3, ("sam_get_group_by_name: sam_methods of the domain did not specify sam_get_group_by_name\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_get_group_by_name(tmp_methods, access_token, access_desired, name, group))) {
- DEBUG(4,("sam_get_group_by_name for %s\\%s in backend %s failed\n",
- domain, name, tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_add_member_to_group(const SAM_CONTEXT *context, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member)
-{
- const SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- SAM_SETUP_CONTEXT;
-
- /* invalid group or member specified */
- SAM_ASSERT(group && group->current_sam_methods && member);
-
- tmp_methods = group->current_sam_methods;
-
- if (!tmp_methods->sam_add_member_to_group) {
- DEBUG(3, ("sam_add_member_to_group: sam_methods of the domain did not specify sam_add_member_to_group\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_add_member_to_group(tmp_methods, group, member))) {
- DEBUG(4,("sam_add_member_to_group in backend %s failed\n", tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-
-}
-
-NTSTATUS sam_delete_member_from_group(const SAM_CONTEXT *context, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member)
-{
- const SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- SAM_SETUP_CONTEXT;
-
- /* invalid group or member specified */
- SAM_ASSERT(group && group->current_sam_methods && member);
-
- tmp_methods = group->current_sam_methods;
-
- if (!tmp_methods->sam_delete_member_from_group) {
- DEBUG(3, ("sam_delete_member_from_group: sam_methods of the domain did not specify sam_delete_member_from_group\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_delete_member_from_group(tmp_methods, group, member))) {
- DEBUG(4,("sam_delete_member_from_group in backend %s failed\n", tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_enum_groupmembers(const SAM_CONTEXT *context, const SAM_GROUP_HANDLE *group, uint32 *members_count, SAM_GROUP_MEMBER **members)
-{
- const SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- SAM_SETUP_CONTEXT;
-
- /* invalid group specified */
- SAM_ASSERT(group && group->current_sam_methods && members_count && members);
-
- tmp_methods = group->current_sam_methods;
-
- if (!tmp_methods->sam_enum_groupmembers) {
- DEBUG(3, ("sam_enum_groupmembers: sam_methods of the domain did not specify sam_enum_group_members\n"));
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_enum_groupmembers(tmp_methods, group, members_count, members))) {
- DEBUG(4,("sam_enum_groupmembers in backend %s failed\n", tmp_methods->backendname));
- return nt_status;
- }
-
- return NT_STATUS_OK;
-}
-
-NTSTATUS sam_get_groups_of_sid(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const DOM_SID **sids, uint16 group_ctrl, uint32 *group_count, SAM_GROUP_ENUM **groups)
-{
- SAM_METHODS *tmp_methods;
- NTSTATUS nt_status;
-
- uint32 tmp_group_count;
- SAM_GROUP_ENUM *tmp_groups;
-
- DEBUG(5,("sam_get_groups_of_sid: %d\n", __LINE__));
-
- SAM_SETUP_CONTEXT;
-
- /* invalid sam_context specified */
- SAM_ASSERT(access_token && sids && context && context->methods);
-
- *group_count = 0;
-
- *groups = NULL;
-
- tmp_methods= context->methods;
-
- while (tmp_methods) {
- DEBUG(5,("getting groups from domain \n"));
- if (!tmp_methods->sam_get_groups_of_sid) {
- DEBUG(3, ("sam_get_groups_of_sid: sam_methods of domain did not specify sam_get_groups_of_sid\n"));
- SAFE_FREE(*groups);
- return NT_STATUS_NOT_IMPLEMENTED;
- }
-
- if (!NT_STATUS_IS_OK(nt_status = tmp_methods->sam_get_groups_of_sid(tmp_methods, access_token, sids, group_ctrl, &tmp_group_count, &tmp_groups))) {
- DEBUG(4,("sam_get_groups_of_sid in backend %s failed\n", tmp_methods->backendname));
- SAFE_FREE(*groups);
- return nt_status;
- }
-
- *groups = Realloc(*groups, ((*group_count) + tmp_group_count) * sizeof(SAM_GROUP_ENUM));
-
- memcpy(&(*groups)[*group_count], tmp_groups, tmp_group_count);
-
- SAFE_FREE(tmp_groups);
-
- *group_count += tmp_group_count;
-
- tmp_methods = tmp_methods->next;
- }
-
- return NT_STATUS_OK;
-}
-
-
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- Active Directory SAM backend, for simulate a W2K DC in mixed mode.
-
- Copyright (C) Stefan (metze) Metzmacher 2002
- Copyright (C) Andrew Bartlett 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-
-#ifdef HAVE_LDAP
-
-static int sam_ads_debug_level = DBGC_SAM;
-
-#undef DBGC_CLASS
-#define DBGC_CLASS sam_ads_debug_level
-
-#ifndef FIXME
-#define FIXME( body ) { DEBUG(0,("FIXME: "));\
- DEBUGADD(0,(body));}
-#endif
-
-#define ADS_STATUS_OK ADS_ERROR(0)
-#define ADS_STATUS_UNSUCCESSFUL ADS_ERROR_NT(NT_STATUS_UNSUCCESSFUL)
-#define ADS_STATUS_NOT_IMPLEMENTED ADS_ERROR_NT(NT_STATUS_NOT_IMPLEMENTED)
-
-
-#define ADS_SUBTREE_BUILTIN "CN=Builtin,"
-#define ADS_SUBTREE_COMPUTERS "CN=Computers,"
-#define ADS_SUBTREE_DC "CN=Domain Controllers,"
-#define ADS_SUBTREE_USERS "CN=Users,"
-#define ADS_ROOT_TREE ""
-/* Here are private module structs and functions */
-
-typedef struct sam_ads_privates {
- ADS_STRUCT *ads_struct;
- TALLOC_CTX *mem_ctx;
- BOOL bind_plaintext;
- char *ads_bind_dn;
- char *ads_bind_pw;
- char *ldap_uri;
- /* did we need something more? */
-}SAM_ADS_PRIVATES;
-
-
-/* get only these LDAP attributes, witch we really need for an account */
-const char *account_attrs[] = { "objectSid",
- "objectGUID",
- "sAMAccountType",
- "sAMAcountName",
- "userPrincipalName",
- "accountExpires",
- "badPasswordTime",
- "badPwdCount",
- "lastLogoff",
- "lastLogon",
- "userWorkstations",
- "dBCSPwd",
- "unicodePwd",
- "pwdLastSet",
- "userAccountControl",
- "profilePath",
- "homeDrive",
- "scriptPath",
- "homeDirectory",
- "cn",
- "primaryGroupID",/* 513 */
- "nsNPAllowDialIn",/* TRUE */
- "userParameters",/* Dial Back number ...*/
- "codePage",/* 0 */
- "countryCode",/* 0 */
- "adminCount",/* 1 or 0 */
- "logonCount",/* 0 */
- "managedObjects",
- "memberOf",/* dn */
- "instanceType",/* 4 */
- "name", /* sync with cn */
- "description",
- /* "nTSecurityDescriptor", */
- NULL};
-
-/* get only these LDAP attributes, witch we really need for a group */
-const char *group_attrs[] = {"objectSid",
- /* "objectGUID", */
- "sAMAccountType",
- "sAMAcountName",
- "groupType",
- /* "member", */
- "description",
- "name", /* sync with cn */
- /* "nTSecurityDescriptor", */
- NULL};
-
-
-/***************************************************
- return our ads connection. We keep the connection
- open to make things faster
-****************************************************/
-static ADS_STATUS sam_ads_cached_connection(SAM_ADS_PRIVATES *privates)
-{
- ADS_STRUCT *ads_struct;
- ADS_STATUS ads_status;
-
- if (!privates->ads_struct) {
- privates->ads_struct = ads_init_simple();
- ads_struct = privates->ads_struct;
- ads_struct->server.ldap_uri = smb_xstrdup(privates->ldap_uri);
- if ((!privates->ads_bind_dn) || (!*privates->ads_bind_dn)) {
- ads_struct->auth.flags |= ADS_AUTH_ANON_BIND;
- } else {
- ads_struct->auth.user_name
- = smb_xstrdup(privates->ads_bind_dn);
- if (privates->ads_bind_pw) {
- ads_struct->auth.password
- = smb_xstrdup(privates->ads_bind_pw);
- }
- }
- if (privates->bind_plaintext) {
- ads_struct->auth.flags |= ADS_AUTH_SIMPLE_BIND;
- }
- } else {
- ads_struct = privates->ads_struct;
- }
-
- if (ads_struct->ld != NULL) {
- /* connection has been opened. ping server. */
- struct sockaddr_un addr;
- socklen_t len;
- int sd;
- if (ldap_get_option(ads_struct->ld, LDAP_OPT_DESC, &sd) == 0 &&
- getpeername(sd, (struct sockaddr *) &addr, &len) < 0) {
- /* the other end has died. reopen. */
- ldap_unbind_ext(ads_struct->ld, NULL, NULL);
- ads_struct->ld = NULL;
- }
- }
-
- if (ads_struct->ld != NULL) {
- DEBUG(5,("sam_ads_cached_connection: allready connected to the LDAP server\n"));
- return ADS_SUCCESS;
- }
-
- ads_status = ads_connect(ads_struct);
-
- ads_status = ads_server_info(ads_struct);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(0,("Can't set server info: %s\n",ads_errstr(ads_status)));
- /* return ads_status; */ FIXME("for now we only warn!\n");
- }
-
- DEBUG(2, ("sam_ads_cached_connection: succesful connection to the LDAP server\n"));
- return ADS_SUCCESS;
-}
-
-static ADS_STATUS sam_ads_do_search(SAM_ADS_PRIVATES *privates, const char *bind_path, int scope, const char *exp, const char **attrs, void **res)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_UNSUCCESSFUL);
-
- ads_status = sam_ads_cached_connection(privates);
- if (!ADS_ERR_OK(ads_status))
- return ads_status;
-
- return ads_do_search_retry(privates->ads_struct, bind_path, scope, exp, attrs, res);
-}
-
-
-/*********************************************
-here we have to check the update serial number
- - this is the core of the ldap cache
-*********************************************/
-static ADS_STATUS sam_ads_usn_is_valid(SAM_ADS_PRIVATES *privates, uint32 usn_in, uint32 *usn_out)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_UNSUCCESSFUL);
-
- SAM_ASSERT(privates && privates->ads_struct && usn_out);
-
- ads_status = ads_USN(privates->ads_struct, usn_out);
- if (!ADS_ERR_OK(ads_status))
- return ads_status;
-
- if (*usn_out == usn_in)
- return ADS_SUCCESS;
-
- return ads_status;
-}
-
-/***********************************************
-Initialize SAM_ACCOUNT_HANDLE from an ADS query
-************************************************/
-/* not ready :-( */
-static ADS_STATUS ads_entry2sam_account_handle(SAM_ADS_PRIVATES *privates, SAM_ACCOUNT_HANDLE *account ,void *msg)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_NO_SUCH_USER);
- NTSTATUS nt_status = NT_STATUS_NO_SUCH_USER;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- TALLOC_CTX *mem_ctx = account->mem_ctx;
- char *tmp_str = NULL;
-
- SAM_ASSERT(privates && ads_struct && account && mem_ctx && msg);
-
- FIXME("should we really use ads_pull_username()(or ads_pull_string())?\n");
- if ((account->private.account_name = ads_pull_username(ads_struct, mem_ctx, msg))==NULL) {
- DEBUG(0,("ads_pull_username failed\n"));
- return ADS_ERROR_NT(NT_STATUS_NO_SUCH_USER);
- }
-
- if ((account->private.full_name = ads_pull_string(ads_struct, mem_ctx, msg,"name"))==NULL) {
- DEBUG(3,("ads_pull_string for 'name' failed - skip\n"));
- }
-
- if ((account->private.acct_desc = ads_pull_string(ads_struct, mem_ctx, msg,"description"))!=NULL) {
- DEBUG(3,("ads_pull_string for 'acct_desc' failed - skip\n"));
- }
-
- if ((account->private.home_dir = ads_pull_string(ads_struct, mem_ctx, msg,"homeDirectory"))!=NULL) {
- DEBUG(3,("ads_pull_string for 'homeDirectory' failed - skip\n"));
- }
-
- if ((account->private.dir_drive = ads_pull_string(ads_struct, mem_ctx, msg,"homeDrive"))!=NULL) {
- DEBUG(3,("ads_pull_string for 'homeDrive' failed - skip\n"));
- }
-
- if ((account->private.profile_path = ads_pull_string(ads_struct, mem_ctx, msg,"profilePath"))!=NULL) {
- DEBUG(3,("ads_pull_string for 'profilePath' failed - skip\n"));
- }
-
- if ((account->private.logon_script = ads_pull_string(ads_struct, mem_ctx, msg,"scriptPath"))!=NULL) {
- DEBUG(3,("ads_pull_string for 'scriptPath' failed - skip\n"));
- }
-
- FIXME("check 'nsNPAllowDialIn' for munged_dial!\n");
- if ((account->private.munged_dial = ads_pull_string(ads_struct, mem_ctx, msg,"userParameters"))!=NULL) {
- DEBUG(3,("ads_pull_string for 'userParameters' failed - skip\n"));
- }
-
- if ((account->private.unix_home_dir = ads_pull_string(ads_struct, mem_ctx, msg,"msSFUHomeDrirectory"))!=NULL) {
- DEBUG(3,("ads_pull_string for 'msSFUHomeDrirectory' failed - skip\n"));
- }
-
-#if 0
- FIXME("use function intern mem_ctx for pwdLastSet\n");
- if ((tmp_str = ads_pull_string(ads_struct, mem_ctx, msg,"pwdLastSet"))!=NULL) {
- DEBUG(3,("ads_pull_string for 'pwdLastSet' failed - skip\n"));
- } else {
- account->private.pass_last_set_time = ads_parse_nttime(tmp_str);
- tmp_str = NULL;
-
- }
-#endif
-
-#if 0
-typedef struct sam_account_handle {
- TALLOC_CTX *mem_ctx;
- uint32 access_granted;
- const struct sam_methods *current_sam_methods; /* sam_methods creating this handle */
- void (*free_fn)(struct sam_account_handle **);
- struct sam_account_data {
- uint32 init_flag;
- NTTIME logon_time; /* logon time */
- NTTIME logoff_time; /* logoff time */
- NTTIME kickoff_time; /* kickoff time */
- NTTIME pass_last_set_time; /* password last set time */
- NTTIME pass_can_change_time; /* password can change time */
- NTTIME pass_must_change_time; /* password must change time */
- char * account_name; /* account_name string */
- SAM_DOMAIN_HANDLE * domain; /* domain of account */
- char *full_name; /* account's full name string */
- char *unix_home_dir; /* UNIX home directory string */
- char *home_dir; /* home directory string */
- char *dir_drive; /* home directory drive string */
- char *logon_script; /* logon script string */
- char *profile_path; /* profile path string */
- char *acct_desc; /* account description string */
- char *workstations; /* login from workstations string */
- char *unknown_str; /* don't know what this is, yet. */
- char *munged_dial; /* munged path name and dial-back tel number */
- DOM_SID account_sid; /* Primary Account SID */
- DOM_SID group_sid; /* Primary Group SID */
- DATA_BLOB lm_pw; /* .data is Null if no password */
- DATA_BLOB nt_pw; /* .data is Null if no password */
- char *plaintext_pw; /* if Null not available */
- uint16 acct_ctrl; /* account info (ACB_xxxx bit-mask) */
- uint32 unknown_1; /* 0x00ff ffff */
- uint16 logon_divs; /* 168 - number of hours in a week */
- uint32 hours_len; /* normally 21 bytes */
- uint8 hours[MAX_HOURS_LEN];
- uint32 unknown_2; /* 0x0002 0000 */
- uint32 unknown_3; /* 0x0000 04ec */
- } private;
-} SAM_ACCOUNT_HANDLE;
-#endif
-
- return ads_status;
-}
-
-
-/***********************************************
-Initialize SAM_GROUP_ENUM from an ads entry
-************************************************/
-/* not ready :-( */
-static ADS_STATUS ads_entry2sam_group_enum(SAM_ADS_PRIVATES *privates, TALLOC_CTX *mem_ctx, SAM_GROUP_ENUM **group_enum,const void *entry)
-{
- ADS_STATUS ads_status = ADS_STATUS_UNSUCCESSFUL;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- SAM_GROUP_ENUM __group_enum;
- SAM_GROUP_ENUM *_group_enum = &__group_enum;
-
- SAM_ASSERT(privates && ads_struct && mem_ctx && group_enum && entry);
-
- *group_enum = _group_enum;
-
- DEBUG(3,("sam_ads: ads_entry2sam_account_handle\n"));
-
- if (!ads_pull_sid(ads_struct, &entry, "objectSid", &(_group_enum->sid))) {
- DEBUG(0,("No sid for!?\n"));
- return ADS_STATUS_UNSUCCESSFUL;
- }
-
- if (!(_group_enum->group_name = ads_pull_string(ads_struct, mem_ctx, &entry, "sAMAccountName"))) {
- DEBUG(0,("No groupname found"));
- return ADS_STATUS_UNSUCCESSFUL;
- }
-
- if (!(_group_enum->group_desc = ads_pull_string(ads_struct, mem_ctx, &entry, "desciption"))) {
- DEBUG(0,("No description found"));
- return ADS_STATUS_UNSUCCESSFUL;
- }
-
- DEBUG(0,("sAMAccountName: %s\ndescription: %s\nobjectSid: %s\n",
- _group_enum->group_name,
- _group_enum->group_desc,
- sid_string_static(&(_group_enum->sid))
- ));
-
- return ads_status;
-}
-
-static ADS_STATUS sam_ads_access_check(SAM_ADS_PRIVATES *privates, const SEC_DESC *sd, const NT_USER_TOKEN *access_token, uint32 access_desired, uint32 *acc_granted)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_ACCESS_DENIED);
- NTSTATUS nt_status;
- uint32 my_acc_granted;
-
- SAM_ASSERT(privates && sd && access_token);
- /* acc_granted can be set to NULL */
-
- /* the steps you need are:
- 1. get_sec_desc for sid
- 2. se_map_generic(accessdesired, generic_mapping)
- 3. se_access_check() */
-
- if (!se_access_check(sd, access_token, access_desired, (acc_granted)?acc_granted:&my_acc_granted, &nt_status)) {
- DEBUG(3,("sam_ads_access_check: ACCESS DENIED\n"));
- ads_status = ADS_ERROR_NT(nt_status);
- return ads_status;
- }
- ads_status = ADS_ERROR_NT(nt_status);
- return ads_status;
-}
-
-static ADS_STATUS sam_ads_get_tree_sec_desc(SAM_ADS_PRIVATES *privates, const char *subtree, SEC_DESC **sd)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_INVALID_PARAMETER);
- ADS_STRUCT *ads_struct = privates->ads_struct;
- TALLOC_CTX *mem_ctx = privates->mem_ctx;
- char *search_path;
- void *sec_desc_res;
- void *sec_desc_msg;
- const char *sec_desc_attrs[] = {"nTSecurityDescriptor",NULL};
-
- SAM_ASSERT(privates && ads_struct && mem_ctx && sd);
- *sd = NULL;
-
- if (subtree) {
- asprintf(&search_path, "%s%s",subtree,ads_struct->config.bind_path);
- } else {
- asprintf(&search_path, "%s","");
- }
- ads_status = sam_ads_do_search(privates, search_path, LDAP_SCOPE_BASE, "(objectClass=*)", sec_desc_attrs, &sec_desc_res);
- SAFE_FREE(search_path);
- if (!ADS_ERR_OK(ads_status))
- return ads_status;
-
- if ((sec_desc_msg = ads_first_entry(ads_struct, sec_desc_res))==NULL) {
- ads_status = ADS_ERROR_NT(NT_STATUS_INVALID_PARAMETER);
- return ads_status;
- }
-
- if (!ads_pull_sd(ads_struct, mem_ctx, sec_desc_msg, sec_desc_attrs[0], sd)) {
- *sd = NULL;
- ads_status = ADS_ERROR_NT(NT_STATUS_INVALID_PARAMETER);
- return ads_status;
- }
-
- return ads_status;
-}
-
-static ADS_STATUS sam_ads_account_policy_get(SAM_ADS_PRIVATES *privates, int field, uint32 *value)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_INVALID_PARAMETER);
- ADS_STRUCT *ads_struct = privates->ads_struct;
- void *ap_res;
- void *ap_msg;
- const char *ap_attrs[] = {"minPwdLength",/* AP_MIN_PASSWORD_LEN */
- "pwdHistoryLength",/* AP_PASSWORD_HISTORY */
- "AP_USER_MUST_LOGON_TO_CHG_PASS",/* AP_USER_MUST_LOGON_TO_CHG_PASS */
- "maxPwdAge",/* AP_MAX_PASSWORD_AGE */
- "minPwdAge",/* AP_MIN_PASSWORD_AGE */
- "lockoutDuration",/* AP_LOCK_ACCOUNT_DURATION */
- "AP_RESET_COUNT_TIME",/* AP_RESET_COUNT_TIME */
- "AP_BAD_ATTEMPT_LOCKOUT",/* AP_BAD_ATTEMPT_LOCKOUT */
- "AP_TIME_TO_LOGOUT",/* AP_TIME_TO_LOGOUT */
- NULL};
- /*lockOutObservationWindow
- lockoutThreshold $ pwdProperties*/
- static uint32 ap[9];
- static uint32 ap_usn = 0;
- uint32 tmp_usn = 0;
-
- SAM_ASSERT(privates && ads_struct && value);
-
- FIXME("We need to decode all account_policy attributes!\n");
-
- ads_status = sam_ads_usn_is_valid(privates,ap_usn,&tmp_usn);
- if (!ADS_ERR_OK(ads_status)) {
- ads_status = sam_ads_do_search(privates, ads_struct->config.bind_path, LDAP_SCOPE_BASE, "(objectClass=*)", ap_attrs, &ap_res);
- if (!ADS_ERR_OK(ads_status))
- return ads_status;
-
- if (ads_count_replies(ads_struct, ap_res) != 1) {
- ads_msgfree(ads_struct, ap_res);
- return ADS_ERROR(LDAP_NO_RESULTS_RETURNED);
- }
-
- if (!(ap_msg = ads_first_entry(ads_struct, ap_res))) {
- ads_msgfree(ads_struct, ap_res);
- return ADS_ERROR(LDAP_NO_RESULTS_RETURNED);
- }
-
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[0], &ap[0])) {
- /* AP_MIN_PASSWORD_LEN */
- ap[0] = MINPASSWDLENGTH;/* 5 chars minimum */
- }
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[1], &ap[1])) {
- /* AP_PASSWORD_HISTORY */
- ap[1] = 0;/* don't keep any old password */
- }
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[2], &ap[2])) {
- /* AP_USER_MUST_LOGON_TO_CHG_PASS */
- ap[2] = 0;/* don't force user to logon */
- }
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[3], &ap[3])) {
- /* AP_MAX_PASSWORD_AGE */
- ap[3] = MAX_PASSWORD_AGE;/* 21 days */
- }
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[4], &ap[4])) {
- /* AP_MIN_PASSWORD_AGE */
- ap[4] = 0;/* 0 days */
- }
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[5], &ap[5])) {
- /* AP_LOCK_ACCOUNT_DURATION */
- ap[5] = 0;/* lockout for 0 minutes */
- }
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[6], &ap[6])) {
- /* AP_RESET_COUNT_TIME */
- ap[6] = 0;/* reset immediatly */
- }
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[7], &ap[7])) {
- /* AP_BAD_ATTEMPT_LOCKOUT */
- ap[7] = 0;/* don't lockout */
- }
- if (!ads_pull_uint32(ads_struct, ap_msg, ap_attrs[8], &ap[8])) {
- /* AP_TIME_TO_LOGOUT */
- ap[8] = -1;/* don't force logout */
- }
-
- ads_msgfree(ads_struct, ap_res);
- ap_usn = tmp_usn;
- }
-
- switch(field) {
- case AP_MIN_PASSWORD_LEN:
- *value = ap[0];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- case AP_PASSWORD_HISTORY:
- *value = ap[1];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- case AP_USER_MUST_LOGON_TO_CHG_PASS:
- *value = ap[2];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- case AP_MAX_PASSWORD_AGE:
- *value = ap[3];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- case AP_MIN_PASSWORD_AGE:
- *value = ap[4];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- case AP_LOCK_ACCOUNT_DURATION:
- *value = ap[5];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- case AP_RESET_COUNT_TIME:
- *value = ap[6];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- case AP_BAD_ATTEMPT_LOCKOUT:
- *value = ap[7];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- case AP_TIME_TO_LOGOUT:
- *value = ap[8];
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- break;
- default: *value = 0; break;
- }
-
- return ads_status;
-}
-
-
-/**********************************
-Now the functions off the SAM API
-***********************************/
-
-/* General API */
-static NTSTATUS sam_ads_get_sec_desc(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token,
- const DOM_SID *sid, SEC_DESC **sd)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_UNSUCCESSFUL);
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- TALLOC_CTX *mem_ctx;
- char *sidstr,*filter;
- void *sec_desc_res;
- void *sec_desc_msg;
- const char *sec_desc_attrs[] = {"nTSecurityDescriptor",NULL};
- fstring sid_str;
- SEC_DESC *my_sd;
-
- SAM_ASSERT(sam_method && access_token && sid && sd);
-
- ads_status = sam_ads_get_tree_sec_desc(privates, ADS_ROOT_TREE, &my_sd);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = sam_ads_access_check(privates, my_sd, access_token, GENERIC_RIGHTS_DOMAIN_READ, NULL);
-
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- sidstr = sid_binstring(sid);
- if (asprintf(&filter, "(objectSid=%s)", sidstr) == -1) {
- SAFE_FREE(sidstr);
- return NT_STATUS_NO_MEMORY;
- }
-
- SAFE_FREE(sidstr);
-
- ads_status = sam_ads_do_search(privates,ads_struct->config.bind_path,
- LDAP_SCOPE_SUBTREE, filter, sec_desc_attrs,
- &sec_desc_res);
- SAFE_FREE(filter);
-
- if (!ADS_ERR_OK(ads_status)) {
- return ads_ntstatus(ads_status);
- }
-
- if (!(mem_ctx = talloc_init_named("sec_desc parse in sam_ads"))) {
- DEBUG(1, ("talloc_init_named() failed for sec_desc parse context in sam_ads"));
- ads_msgfree(ads_struct, sec_desc_res);
- return NT_STATUS_NO_MEMORY;
- }
-
- if (ads_count_replies(ads_struct, sec_desc_res) != 1) {
- DEBUG(1,("sam_ads_get_sec_desc: duplicate or 0 results for sid %s\n",
- sid_to_string(sid_str, sid)));
- talloc_destroy(mem_ctx);
- ads_msgfree(ads_struct, sec_desc_res);
- return NT_STATUS_UNSUCCESSFUL;
- }
-
- if (!(sec_desc_msg = ads_first_entry(ads_struct, sec_desc_res))) {
- talloc_destroy(mem_ctx);
- ads_msgfree(ads_struct, sec_desc_res);
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!ads_pull_sd(ads_struct, mem_ctx, sec_desc_msg, sec_desc_attrs[0], sd)) {
- ads_status = ADS_ERROR_NT(NT_STATUS_INVALID_PARAMETER);
- talloc_destroy(mem_ctx);
- ads_msgfree(ads_struct, sec_desc_res);
- return ads_ntstatus(ads_status);
- }
-
- /* now, were we allowed to see the SD we just got? */
-
- ads_msgfree(ads_struct, sec_desc_res);
- talloc_destroy(mem_ctx);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_set_sec_desc(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token,
- const DOM_SID *sid, const SEC_DESC *sd)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-
-static NTSTATUS sam_ads_lookup_sid(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token,
- TALLOC_CTX *mem_ctx, const DOM_SID *sid, char **name,
- enum SID_NAME_USE *type)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_UNSUCCESSFUL);
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- SEC_DESC *my_sd;
-
- SAM_ASSERT(sam_method && access_token && mem_ctx && sid && name && type);
-
- ads_status = sam_ads_get_tree_sec_desc(privates, ADS_ROOT_TREE, &my_sd);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = sam_ads_access_check(privates, my_sd, access_token, GENERIC_RIGHTS_DOMAIN_READ, NULL);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- return ads_sid_to_name(ads_struct, mem_ctx, sid, name, type);
-}
-
-static NTSTATUS sam_ads_lookup_name(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token,
- const char *name, DOM_SID *sid, enum SID_NAME_USE *type)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_UNSUCCESSFUL);
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- SEC_DESC *my_sd;
-
- SAM_ASSERT(sam_method && access_token && name && sid && type);
-
- ads_status = sam_ads_get_tree_sec_desc(privates, ADS_ROOT_TREE, &my_sd);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = sam_ads_access_check(privates, my_sd, access_token, GENERIC_RIGHTS_DOMAIN_READ, NULL);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- return ads_name_to_sid(ads_struct, name, sid, type);
-}
-
-
-/* Domain API */
-
-static NTSTATUS sam_ads_update_domain(const SAM_METHODS *sam_method, const SAM_DOMAIN_HANDLE *domain)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_get_domain_handle(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token,
- const uint32 access_desired, SAM_DOMAIN_HANDLE **domain)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- TALLOC_CTX *mem_ctx = privates->mem_ctx; /*Fix me is this right??? */
- SAM_DOMAIN_HANDLE *dom_handle = NULL;
- SEC_DESC *sd;
- uint32 acc_granted;
- uint32 tmp_value;
-
- DEBUG(5,("sam_ads_get_domain_handle: %d\n",__LINE__));
-
- SAM_ASSERT(sam_method && access_token && domain);
-
- (*domain) = NULL;
-
- if ((dom_handle = talloc(mem_ctx, sizeof(SAM_DOMAIN_HANDLE))) == NULL) {
- DEBUG(0,("failed to talloc dom_handle\n"));
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- return ads_ntstatus(ads_status);
- }
-
- ZERO_STRUCTP(dom_handle);
-
- dom_handle->mem_ctx = mem_ctx; /*Fix me is this right??? */
- dom_handle->free_fn = NULL;
- dom_handle->current_sam_methods = sam_method;
-
- /* check if access can be granted as requested */
-
- ads_status = sam_ads_get_tree_sec_desc(privates, ADS_ROOT_TREE, &sd);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = sam_ads_access_check(privates, sd, access_token, access_desired, &acc_granted);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- dom_handle->access_granted = acc_granted;
-
- /* fill all the values of dom_handle */
- sid_copy(&dom_handle->private.sid, &sam_method->domain_sid);
- dom_handle->private.name = smb_xstrdup(sam_method->domain_name);
- dom_handle->private.servername = "WHOKNOWS"; /* what is the servername */
-
- /*Fix me: sam_ads_account_policy_get() return ADS_STATUS! */
- ads_status = sam_ads_account_policy_get(privates, AP_MAX_PASSWORD_AGE, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed for max password age. Useing default\n"));
- tmp_value = MAX_PASSWORD_AGE;
- }
- unix_to_nt_time_abs(&dom_handle->private.max_passwordage,tmp_value);
-
- ads_status = sam_ads_account_policy_get(privates, AP_MIN_PASSWORD_AGE, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed for min password age. Useing default\n"));
- tmp_value = 0;
- }
- unix_to_nt_time_abs(&dom_handle->private.min_passwordage, tmp_value);
-
- ads_status = sam_ads_account_policy_get(privates, AP_LOCK_ACCOUNT_DURATION, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed for lockout duration. Useing default\n"));
- tmp_value = 0;
- }
- unix_to_nt_time_abs(&dom_handle->private.lockout_duration, tmp_value);
-
- ads_status = sam_ads_account_policy_get(privates, AP_RESET_COUNT_TIME, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed for time till locout count is reset. Useing default\n"));
- tmp_value = 0;
- }
- unix_to_nt_time_abs(&dom_handle->private.reset_count, tmp_value);
-
- ads_status = sam_ads_account_policy_get(privates, AP_MIN_PASSWORD_LEN, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed for min password length. Useing default\n"));
- tmp_value = 0;
- }
- dom_handle->private.min_passwordlength = (uint16)tmp_value;
-
- ads_status = sam_ads_account_policy_get(privates, AP_PASSWORD_HISTORY, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed password history. Useing default\n"));
- tmp_value = 0;
- }
- dom_handle->private.password_history = (uint16)tmp_value;
-
- ads_status = sam_ads_account_policy_get(privates, AP_BAD_ATTEMPT_LOCKOUT, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed for bad attempts till lockout. Useing default\n"));
- tmp_value = 0;
- }
- dom_handle->private.lockout_count = (uint16)tmp_value;
-
- ads_status = sam_ads_account_policy_get(privates, AP_TIME_TO_LOGOUT, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed for force logout. Useing default\n"));
- tmp_value = -1;
- }
-
- ads_status = sam_ads_account_policy_get(privates, AP_USER_MUST_LOGON_TO_CHG_PASS, &tmp_value);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(4,("sam_ads_account_policy_get failed for user must login to change password. Useing default\n"));
- tmp_value = 0;
- }
-
- /* should the real values of num_accounts, num_groups and num_aliases be retreved?
- * I think it is to expensive to bother
- */
- dom_handle->private.num_accounts = 3;
- dom_handle->private.num_groups = 4;
- dom_handle->private.num_aliases = 5;
-
- *domain = dom_handle;
-
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
- return ads_ntstatus(ads_status);
-}
-
-/* Account API */
-static NTSTATUS sam_ads_create_account(const SAM_METHODS *sam_method,
- const NT_USER_TOKEN *access_token, uint32 access_desired,
- const char *account_name, uint16 acct_ctrl, SAM_ACCOUNT_HANDLE **account)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- SEC_DESC *sd = NULL;
- uint32 acc_granted;
-
- SAM_ASSERT(sam_method && privates && access_token && account_name && account);
-
- ads_status = sam_ads_get_tree_sec_desc(privates, ADS_SUBTREE_USERS, &sd);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = sam_ads_access_check(privates, sd, access_token, access_desired, &acc_granted);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = ADS_ERROR_NT(sam_init_account(account));
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- (*account)->access_granted = acc_granted;
-
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_add_account(const SAM_METHODS *sam_method, const SAM_ACCOUNT_HANDLE *account)
-{
- ADS_STATUS ads_status = ADS_ERROR(LDAP_NO_MEMORY);
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- TALLOC_CTX *mem_ctx = privates->mem_ctx;
- ADS_MODLIST mods;
- uint16 acct_ctrl;
- char *new_dn;
- SEC_DESC *sd;
- uint32 acc_granted;
-
- SAM_ASSERT(sam_method && account);
-
- ads_status = ADS_ERROR_NT(sam_get_account_acct_ctrl(account,&acct_ctrl));
- if (!ADS_ERR_OK(ads_status))
- goto done;
-
- if ((acct_ctrl & ACB_WSTRUST)||(acct_ctrl & ACB_SVRTRUST)) {
- /* Computer account */
- char *name,*controlstr;
- char *hostname,*host_upn,*host_spn;
- const char *objectClass[] = {"top", "person", "organizationalPerson",
- "user", "computer", NULL};
-
- ads_status = ADS_ERROR_NT(sam_get_account_name(account,&name));
- if (!ADS_ERR_OK(ads_status))
- goto done;
-
- if (!(host_upn = talloc_asprintf(mem_ctx, "%s@%s", name, ads_struct->config.realm))) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- goto done;
- }
-
- if (!(new_dn = talloc_asprintf(mem_ctx, "CN=%s,CN=Computers,%s", hostname,
- ads_struct->config.bind_path))) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- goto done;
- }
-
- if (!(controlstr = talloc_asprintf(mem_ctx, "%u", ads_acb2uf(acct_ctrl)))) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- goto done;
- }
-
- if (!(mods = ads_init_mods(mem_ctx))) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- goto done;
- }
-
- ads_status = ads_mod_str(mem_ctx, &mods, "cn", hostname);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_strlist(mem_ctx, &mods, "objectClass", objectClass);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "userPrincipalName", host_upn);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "displayName", hostname);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "sAMAccountName", name);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "userAccountControl", controlstr);
- if (!ADS_ERR_OK(ads_status))
- goto done;
-
- ads_status = ads_mod_str(mem_ctx, &mods, "servicePrincipalName", host_spn);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "dNSHostName", hostname);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "userAccountControl", controlstr);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- /* ads_status = ads_mod_str(mem_ctx, &mods, "operatingSystem", "Samba");
- if (!ADS_ERR_OK(ads_status))
- goto done;
- *//* ads_status = ads_mod_str(mem_ctx, &mods, "operatingSystemVersion", VERSION);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- */
- /* End Computer account */
- } else {
- /* User account*/
- char *upn, *controlstr;
- char *name, *fullname;
- const char *objectClass[] = {"top", "person", "organizationalPerson",
- "user", NULL};
-
- ads_status = ADS_ERROR_NT(sam_get_account_name(account,&name));
- if (!ADS_ERR_OK(ads_status))
- goto done;
-
- ads_status = ADS_ERROR_NT(sam_get_account_fullname(account,&fullname));
- if (!ADS_ERR_OK(ads_status))
- goto done;
-
- if (!(upn = talloc_asprintf(mem_ctx, "%s@%s", name, ads_struct->config.realm))) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- goto done;
- }
-
- if (!(new_dn = talloc_asprintf(mem_ctx, "CN=%s,CN=Users,%s", fullname,
- ads_struct->config.bind_path))) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- goto done;
- }
-
- if (!(controlstr = talloc_asprintf(mem_ctx, "%u", ads_acb2uf(acct_ctrl)))) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- goto done;
- }
-
- if (!(mods = ads_init_mods(mem_ctx))) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- goto done;
- }
-
- ads_status = ads_mod_str(mem_ctx, &mods, "cn", fullname);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_strlist(mem_ctx, &mods, "objectClass", objectClass);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "userPrincipalName", upn);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "displayName", fullname);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "sAMAccountName", name);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- ads_status = ads_mod_str(mem_ctx, &mods, "userAccountControl", controlstr);
- if (!ADS_ERR_OK(ads_status))
- goto done;
- }/* End User account */
-
- /* Finally at the account */
- ads_status = ads_gen_add(ads_struct, new_dn, mods);
-
-done:
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_update_account(const SAM_METHODS *sam_method, const SAM_ACCOUNT_HANDLE *account)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_delete_account(const SAM_METHODS *sam_method, const SAM_ACCOUNT_HANDLE *account)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
-
-
-
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_enum_accounts(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, uint16 acct_ctrl, uint32 *account_count, SAM_ACCOUNT_ENUM **accounts)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-#if 0
-static NTSTATUS sam_ads_get_account_by_sid(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, const uint32 access_desired, const DOM_SID *account_sid, SAM_ACCOUNT_HANDLE **account)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_UNSUCCESSFUL);
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- TALLOC_CTX *mem_ctx = privates->mem_ctx;
- SEC_DESC *sd = NULL;
- uint32 acc_granted;
-
- SAM_ASSERT(sam_method && privates && ads_struct && access_token && account_sid && account);
-
- ads_status = ADS_ERROR_NT(sam_ads_get_sec_desc(sam_method, access_token, account_sid, &my_sd));
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = sam_ads_access_check(privates, sd, access_token, access_desired, &acc_granted);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = ADS_ERROR_NT(sam_init_account(account));
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- (*account)->access_granted = acc_granted;
-
- return ads_ntstatus(ads_status);
-}
-#else
-static NTSTATUS sam_ads_get_account_by_sid(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, const uint32 access_desired, const DOM_SID *account_sid, SAM_ACCOUNT_HANDLE **account)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-#endif
-
-#if 0
-static NTSTATUS sam_ads_get_account_by_name(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, const uint32 access_desired, const char *account_name, SAM_ACCOUNT_HANDLE **account)
-{
- ADS_STATUS ads_status = ADS_ERROR_NT(NT_STATUS_UNSUCCESSFUL);
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- TALLOC_CTX *mem_ctx = privates->mem_ctx;
- SEC_DESC *sd = NULL;
- uint32 acc_granted;
-
- SAM_ASSERT(sam_method && privates && ads_struct && access_token && account_name && account);
-
- ads_status = sam_ads_get_tree_sec_desc(privates, ADS_ROOT_TREE, &sd);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = sam_ads_access_check(privates, sd, access_token, access_desired, &acc_granted);
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- ads_status = ADS_ERROR_NT(sam_init_account(account));
- if (!ADS_ERR_OK(ads_status))
- return ads_ntstatus(ads_status);
-
- (*account)->access_granted = acc_granted;
-
- return ads_ntstatus(ads_status);
-}
-#else
-static NTSTATUS sam_ads_get_account_by_name(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, const uint32 access_desired, const char *account_name, SAM_ACCOUNT_HANDLE **account)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-#endif
-
-/* Group API */
-static NTSTATUS sam_ads_create_group(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *group_name, uint16 group_ctrl, SAM_GROUP_HANDLE **group)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_add_group(const SAM_METHODS *sam_method, const SAM_GROUP_HANDLE *group)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_update_group(const SAM_METHODS *sam_method, const SAM_GROUP_HANDLE *group)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_delete_group(const SAM_METHODS *sam_method, const SAM_GROUP_HANDLE *group)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_enum_groups(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, const uint16 group_ctrl, uint32 *groups_count, SAM_GROUP_ENUM **groups)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- SAM_ADS_PRIVATES *privates = (struct sam_ads_privates *)sam_method->private_data;
- ADS_STRUCT *ads_struct = privates->ads_struct;
- TALLOC_CTX *mem_ctx = privates->mem_ctx;
- void *res = NULL;
- void *msg = NULL;
- char *filter = NULL;
- int i = 0;
-
- /* get only these LDAP attributes, witch we really need for a group */
- const char *group_enum_attrs[] = {"objectSid",
- "description",
- "sAMAcountName",
- NULL};
-
- SAM_ASSERT(sam_method && access_token && groups_count && groups);
-
- *groups_count = 0;
-
- DEBUG(3,("ads: enum_dom_groups\n"));
-
- FIXME("get only group from the wanted Type!\n");
- asprintf(&filter, "(&(objectClass=group)(groupType=%s))", "*");
- ads_status = sam_ads_do_search(privates, ads_struct->config.bind_path, LDAP_SCOPE_SUBTREE, filter, group_enum_attrs, &res);
- if (!ADS_ERR_OK(ads_status)) {
- DEBUG(1,("enum_groups ads_search: %s\n", ads_errstr(ads_status)));
- }
-
- *groups_count = ads_count_replies(ads_struct, res);
- if (*groups_count == 0) {
- DEBUG(1,("enum_groups: No groups found\n"));
- }
-
- (*groups) = talloc_zero(mem_ctx, (*groups_count) * sizeof(**groups));
- if (!*groups) {
- ads_status = ADS_ERROR_NT(NT_STATUS_NO_MEMORY);
- }
-
- for (msg = ads_first_entry(ads_struct, res); msg; msg = ads_next_entry(ads_struct, msg)) {
- uint32 grouptype;
-
- if (!ads_pull_uint32(ads_struct, msg, "groupType", &grouptype)) {
- ;
- } else {
- (*groups)->group_ctrl = ads_gtype2gcb(grouptype);
- }
-
- if (!((*groups)->group_name = ads_pull_string(ads_struct, mem_ctx, msg, "sAMAccountName"))) {
- ;
- }
-
- if (!((*groups)->group_desc = ads_pull_string(ads_struct, mem_ctx, msg, "description"))) {
- ;
- }
-
- if (!ads_pull_sid(ads_struct, msg, "objectSid", &((*groups)->sid))) {
- DEBUG(1,("No sid for group %s !?\n", (*groups)->group_name));
- continue;
- }
-
- i++;
- }
-
- (*groups_count) = i;
-
- ads_status = ADS_ERROR_NT(NT_STATUS_OK);
-
- DEBUG(3,("ads enum_dom_groups gave %d entries\n", (*groups_count)));
-
- if (res) ads_msgfree(ads_struct, res);
-
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_get_group_by_sid(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, const uint32 access_desired, const DOM_SID *groupsid, SAM_GROUP_HANDLE **group)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_get_group_by_name(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, const uint32 access_desired, const char *name, SAM_GROUP_HANDLE **group)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_add_member_to_group(const SAM_METHODS *sam_method, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_delete_member_from_group(const SAM_METHODS *sam_method, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_enum_groupmembers(const SAM_METHODS *sam_method, const SAM_GROUP_HANDLE *group, uint32 *members_count, SAM_GROUP_MEMBER **members)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-static NTSTATUS sam_ads_get_groups_of_sid(const SAM_METHODS *sam_method, const NT_USER_TOKEN *access_token, const DOM_SID **sids, const uint16 group_ctrl, uint32 *group_count, SAM_GROUP_ENUM **groups)
-{
- ADS_STATUS ads_status = ADS_STATUS_NOT_IMPLEMENTED;
- DEBUG(0,("sam_ads: %s was called!\n",FUNCTION_MACRO));
- SAM_ASSERT(sam_method);
- return ads_ntstatus(ads_status);
-}
-
-/**********************************
-Free our private data
-***********************************/
-static void sam_ads_free_private_data(void **vp)
-{
- SAM_ADS_PRIVATES **sam_ads_state = (SAM_ADS_PRIVATES **)vp;
-
- if ((*sam_ads_state)->ads_struct->ld) {
- ldap_unbind((*sam_ads_state)->ads_struct->ld);
- }
-
- ads_destroy(&((*sam_ads_state)->ads_struct));
-
- talloc_destroy((*sam_ads_state)->mem_ctx);
- FIXME("maybe we must free some other stuff here\n");
-
- *sam_ads_state = NULL;
-}
-
-
-
-/*****************************************************
-Init the ADS SAM backend
-******************************************************/
-NTSTATUS sam_init_ads(SAM_METHODS *sam_method, const char *module_params)
-{
- ADS_STATUS ads_status;
- SAM_ADS_PRIVATES *sam_ads_state;
- TALLOC_CTX *mem_ctx;
-
- SAM_ASSERT(sam_method && sam_method->parent);
-
- mem_ctx = sam_method->parent->mem_ctx;
-
- /* Here the SAM API functions of the sam_ads module */
-
- /* General API */
-
- sam_method->sam_get_sec_desc = sam_ads_get_sec_desc;
- sam_method->sam_set_sec_desc = sam_ads_set_sec_desc;
-
- sam_method->sam_lookup_sid = sam_ads_lookup_sid;
- sam_method->sam_lookup_name = sam_ads_lookup_name;
-
- /* Domain API */
-
- sam_method->sam_update_domain = sam_ads_update_domain;
- sam_method->sam_get_domain_handle = sam_ads_get_domain_handle;
-
- /* Account API */
-
- sam_method->sam_create_account = sam_ads_create_account;
- sam_method->sam_add_account = sam_ads_add_account;
- sam_method->sam_update_account = sam_ads_update_account;
- sam_method->sam_delete_account = sam_ads_delete_account;
- sam_method->sam_enum_accounts = sam_ads_enum_accounts;
-
- sam_method->sam_get_account_by_sid = sam_ads_get_account_by_sid;
- sam_method->sam_get_account_by_name = sam_ads_get_account_by_name;
-
- /* Group API */
-
- sam_method->sam_create_group = sam_ads_create_group;
- sam_method->sam_add_group = sam_ads_add_group;
- sam_method->sam_update_group = sam_ads_update_group;
- sam_method->sam_delete_group = sam_ads_delete_group;
- sam_method->sam_enum_groups = sam_ads_enum_groups;
- sam_method->sam_get_group_by_sid = sam_ads_get_group_by_sid;
- sam_method->sam_get_group_by_name = sam_ads_get_group_by_name;
-
- sam_method->sam_add_member_to_group = sam_ads_add_member_to_group;
- sam_method->sam_delete_member_from_group = sam_ads_delete_member_from_group;
- sam_method->sam_enum_groupmembers = sam_ads_enum_groupmembers;
-
- sam_method->sam_get_groups_of_sid = sam_ads_get_groups_of_sid;
-
- sam_ads_state = talloc_zero(mem_ctx, sizeof(SAM_ADS_PRIVATES));
- if (!sam_ads_state) {
- DEBUG(0, ("talloc() failed for sam_ads private_data!\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- if (!(sam_ads_state->mem_ctx = talloc_init_named("sam_ads_method"))) {
- DEBUG(0, ("talloc_init_named() failed for sam_ads_state->mem_ctx\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- sam_ads_state->ads_bind_dn = talloc_strdup(sam_ads_state->mem_ctx, lp_parm_string(NULL,"sam_ads","bind as"));
- sam_ads_state->ads_bind_pw = talloc_strdup(sam_ads_state->mem_ctx, lp_parm_string(NULL,"sam_ads","bind pw"));
-
- sam_ads_state->bind_plaintext = strequal(lp_parm_string(NULL, "sam_ads", "plaintext bind"), "yes");
-
- if (!sam_ads_state->ads_bind_dn || !sam_ads_state->ads_bind_pw) {
- DEBUG(0, ("talloc_strdup() failed for bind dn or password\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- /* Maybe we should not check the result here? Server down on startup? */
-
- if (module_params && *module_params) {
- sam_ads_state->ldap_uri = talloc_strdup(sam_ads_state->mem_ctx, module_params);
- if (!sam_ads_state->ldap_uri) {
- DEBUG(0, ("talloc_strdup() failed for bind dn or password\n"));
- return NT_STATUS_NO_MEMORY;
- }
- } else {
- sam_ads_state->ldap_uri = "ldapi://";
- }
-
- ads_status = sam_ads_cached_connection(sam_ads_state);
- if (!ADS_ERR_OK(ads_status)) {
- return ads_ntstatus(ads_status);
- }
-
- sam_method->private_data = sam_ads_state;
- sam_method->free_private_data = sam_ads_free_private_data;
-
- sam_ads_debug_level = debug_add_class("sam_ads");
- if (sam_ads_debug_level == -1) {
- sam_ads_debug_level = DBGC_ALL;
- DEBUG(0, ("sam_ads: Couldn't register custom debugging class!\n"));
- } else DEBUG(2, ("sam_ads: Debug class number of 'sam_ads': %d\n", sam_ads_debug_level));
-
- DEBUG(5, ("Initializing sam_ads\n"));
- if (module_params)
- DEBUG(10, ("Module Parameters for Domain %s[%s]: %s\n", sam_method->domain_name, sam_method->domain_name, module_params));
- return NT_STATUS_OK;
-}
-
-#else /* HAVE_LDAP */
-void sam_ads_dummy(void)
-{
- DEBUG(0,("sam_ads: not supported!\n"));
-}
-#endif /* HAVE_LDAP */
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- this is a skeleton for SAM backend modules.
-
- Copyright (C) Stefan (metze) Metzmacher 2002
- Copyright (C) Jelmer Vernooij 2002
- Copyright (C) Andrew Bartlett 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-static int sam_skel_debug_level = DBGC_SAM;
-
-#undef DBGC_CLASS
-#define DBGC_CLASS sam_skel_debug_level
-
-/* define the version of the SAM interface */
-SAM_MODULE_VERSIONING_MAGIC
-
-/* General API */
-
-static NTSTATUS sam_skel_get_sec_desc(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const DOM_SID *sid, SEC_DESC **sd)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_set_sec_desc(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const DOM_SID *sid, const SEC_DESC *sd)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-static NTSTATUS sam_skel_lookup_sid(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, TALLOC_CTX *mem_ctx, const DOM_SID *sid, char **name, uint32 *type)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_lookup_name(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const char *name, DOM_SID *sid, uint32 *type)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-/* Domain API */
-
-static NTSTATUS sam_skel_update_domain(const SAM_METHODS *sam_methods, const SAM_DOMAIN_HANDLE *domain)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_get_domain_handle(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, SAM_DOMAIN_HANDLE **domain)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-/* Account API */
-
-static NTSTATUS sam_skel_create_account(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *account_name, uint16 acct_ctrl, SAM_ACCOUNT_HANDLE **account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_add_account(const SAM_METHODS *sam_methods, const SAM_ACCOUNT_HANDLE *account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_update_account(const SAM_METHODS *sam_methods, const SAM_ACCOUNT_HANDLE *account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_delete_account(const SAM_METHODS *sam_methods, const SAM_ACCOUNT_HANDLE *account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_enum_accounts(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint16 acct_ctrl, uint32 *account_count, SAM_ACCOUNT_ENUM **accounts)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-static NTSTATUS sam_skel_get_account_by_sid(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *accountsid, SAM_ACCOUNT_HANDLE **account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_get_account_by_name(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *name, SAM_ACCOUNT_HANDLE **account)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-/* Group API */
-
-static NTSTATUS sam_skel_create_group(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *account_name, uint16 group_ctrl, SAM_GROUP_HANDLE **group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_add_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_update_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_delete_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_enum_groups(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint16 group_ctrl, uint32 *groups_count, SAM_GROUP_ENUM **groups)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_get_group_by_sid(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID *groupsid, SAM_GROUP_HANDLE **group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_get_group_by_name(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, uint32 access_desired, const char *name, SAM_GROUP_HANDLE **group)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-static NTSTATUS sam_skel_add_member_to_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_delete_member_from_group(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group, const SAM_GROUP_MEMBER *member)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS sam_skel_enum_groupmembers(const SAM_METHODS *sam_methods, const SAM_GROUP_HANDLE *group, uint32 *members_count, SAM_GROUP_MEMBER **members)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-static NTSTATUS sam_skel_get_groups_of_sid(const SAM_METHODS *sam_methods, const NT_USER_TOKEN *access_token, const DOM_SID **sids, uint16 group_ctrl, uint32 *group_count, SAM_GROUP_ENUM **groups)
-{
- DEBUG(0,("sam_skel: %s was called!\n",FUNCTION_MACRO));
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS sam_init_skel(SAM_METHODS *sam_methods, const char *module_params)
-{
- /* Functions your SAM module doesn't provide should be set
- * to NULL */
-
- sam_methods->sam_get_sec_desc = sam_skel_get_sec_desc;
- sam_methods->sam_set_sec_desc = sam_skel_set_sec_desc;
-
- sam_methods->sam_lookup_sid = sam_skel_lookup_sid;
- sam_methods->sam_lookup_name = sam_skel_lookup_name;
-
- /* Domain API */
-
- sam_methods->sam_update_domain = sam_skel_update_domain;
- sam_methods->sam_get_domain_handle = sam_skel_get_domain_handle;
-
- /* Account API */
-
- sam_methods->sam_create_account = sam_skel_create_account;
- sam_methods->sam_add_account = sam_skel_add_account;
- sam_methods->sam_update_account = sam_skel_update_account;
- sam_methods->sam_delete_account = sam_skel_delete_account;
- sam_methods->sam_enum_accounts = sam_skel_enum_accounts;
-
- sam_methods->sam_get_account_by_sid = sam_skel_get_account_by_sid;
- sam_methods->sam_get_account_by_name = sam_skel_get_account_by_name;
-
- /* Group API */
-
- sam_methods->sam_create_group = sam_skel_create_group;
- sam_methods->sam_add_group = sam_skel_add_group;
- sam_methods->sam_update_group = sam_skel_update_group;
- sam_methods->sam_delete_group = sam_skel_delete_group;
- sam_methods->sam_enum_groups = sam_skel_enum_groups;
- sam_methods->sam_get_group_by_sid = sam_skel_get_group_by_sid;
- sam_methods->sam_get_group_by_name = sam_skel_get_group_by_name;
-
- sam_methods->sam_add_member_to_group = sam_skel_add_member_to_group;
- sam_methods->sam_delete_member_from_group = sam_skel_delete_member_from_group;
- sam_methods->sam_enum_groupmembers = sam_skel_enum_groupmembers;
-
- sam_methods->sam_get_groups_of_sid = sam_skel_get_groups_of_sid;
-
- sam_methods->free_private_data = NULL;
-
-
- sam_skel_debug_level = debug_add_class("sam_skel");
- if (sam_skel_debug_level == -1) {
- sam_skel_debug_level = DBGC_SAM;
- DEBUG(0, ("sam_skel: Couldn't register custom debugging class!\n"));
- } else DEBUG(2, ("sam_skel: Debug class number of 'sam_skel': %d\n", sam_skel_debug_level));
-
- if(module_params)
- DEBUG(0, ("Starting 'sam_skel' with parameters '%s' for domain %s\n", module_params, sam_methods->domain_name));
- else
- DEBUG(0, ("Starting 'sam_skel' for domain %s without paramters\n", sam_methods->domain_name));
-
- return NT_STATUS_OK;
-}
--- /dev/null
+#!/bin/sh
+srcdir=$1
+LIBDIR=$2
+CODEPAGEDIR=$3
+BINDIR=$4
+
+shift
+shift
+shift
+shift
+
+echo Installing codepage files in $CODEPAGEDIR
+for d in $LIBDIR $CODEPAGEDIR; do
+if [ ! -d $d ]; then
+mkdir $d
+if [ ! -d $d ]; then
+ echo Failed to make directory $d
+ exit 1
+fi
+fi
+done
+
+for p in $*; do
+ if [ -f ${srcdir}/codepages/codepage_def.$p ]; then
+ echo Creating codepage file $CODEPAGEDIR/codepage.$p
+ $BINDIR/make_smbcodepage c $p ${srcdir}/codepages/codepage_def.$p $CODEPAGEDIR/codepage.$p
+ fi
+ if [ -f ${srcdir}/codepages/CP${p}.TXT ]; then
+ echo Creating unicode map $CODEPAGEDIR/unicode_map.$p
+ $BINDIR/make_unicodemap $p ${srcdir}/codepages/CP${p}.TXT $CODEPAGEDIR/unicode_map.$p
+ fi
+done
+
+
+cat << EOF
+======================================================================
+The code pages have been installed. You may uninstall them using the
+command "make uninstallcp" or make "uninstall" to uninstall binaries,
+man pages, shell scripts and code pages.
+======================================================================
+EOF
+
+exit 0
+
#!/bin/sh
-BASEDIR=$1
-SBINDIR=$2
-BINDIR=$3
-LIBDIR=$4
-VARDIR=$5
-PRIVATEDIR=$6
+while ( test -n "$1" ); do
+ if [ ! -d $1 ]; then
+ mkdir -p $1
+ fi
-for d in $BASEDIR $SBINDIR $BINDIR $LIBDIR $VARDIR $PRIVATEDIR; do
-if [ ! -d $d ]; then
-mkdir $d
-if [ ! -d $d ]; then
- echo Failed to make directory $d
- exit 1
-fi
-fi
+ if [ ! -d $1 ]; then
+ echo Failed to make directory $1
+ exit 1
+ fi
+
+ shift;
done
+
shift
shift
-for d in $BASEDIR $LIBDIR; do
-if [ ! -d $d ]; then
-mkdir $d
-if [ ! -d $d ]; then
- echo Failed to make directory $d
- exit 1
-fi
-fi
-done
-
for p in $*; do
p2=`basename $p`
echo Installing $p as $LIBDIR/$p2
--- /dev/null
+#!/bin/sh
+SRCDIR=$1
+shift
+FILES=$@
+
+if test -z $FILES; then
+ FILES=*.yo
+fi
+
+YODLDIR=$SRCDIR/../docs/yodldocs
+MANPAGEDIR=$SRCDIR/../docs/manpages
+HTMLDIR=$SRCDIR/../docs/htmldocs
+
+echo "Re-creating man pages and HTML pages from YODL sources..."
+
+if [ ! -d $MANPAGEDIR ]; then
+ echo "directory $MANPAGEDIR does not exist, are we in the right place?"
+ exit 1
+fi
+
+if [ ! -d $HTMLDIR ]; then
+ echo "directory $HTMLDIR does not exist, are we in the right place?"
+ exit 1
+fi
+
+if [ ! -d $YODLDIR ]; then
+ echo "directory $YODLDIR does not exist, are we in the right place?"
+ exit 1
+fi
+
+cd $YODLDIR
+
+for d in $FILES
+do
+
+#
+# Create the basename from the YODL manpage
+#
+ bn=`echo $d | sed -e 's/\.yo//'`
+
+ case "$d"
+ in
+ *.[0-9].yo)
+ echo "Creating man pages..."
+ echo $d
+ rm -f $bn.man
+ yodl2man $d
+ if [ ! -f $bn.man ]; then
+ echo "Failed to make man page for $d"
+ exit 1
+ fi
+ cp $bn.man ../manpages/$bn || echo "Cannot create $YODLDIR/../manpages/$bn"
+ rm -f $bn.man
+
+ echo "Creating html versions of man pages..."
+ echo $d
+ rm -f $bn.html
+ yodl2html $d
+ if [ ! -f $bn.html ]; then
+ echo "Failed to make html page for $d"
+ exit 1
+ fi
+ cp $bn.html ../htmldocs || echo "Cannot create $YODLDIR/../htmldocs/$bn.html"
+ rm -f $bn.html
+ ;;
+ *)
+#
+# Non man-page YODL docs - just make html and text.
+#
+ echo $d
+ rm -f $bn.html
+ yodl2html $d
+ if [ ! -f $bn.html ]; then
+ echo "Failed to make html page for $d"
+ exit 1
+ fi
+ cp $bn.html ../htmldocs || echo "Cannot create $YODLDIR/../htmldocs/$bn.html"
+ rm -f $bn.html
+ rm -f $bn.txt
+ yodl2txt $d
+ if [ ! -f $bn.txt ]; then
+ echo "Failed to make text page for $d"
+ exit 1
+ fi
+ cp $bn.txt ../textdocs || echo "Cannot create $YODLDIR/../textdocs/$bn.txt"
+ rm -f $bn.txt
+ ;;
+ esac
+done
+
+echo "Remember to CVS check in your changes..."
+exit 0
--- /dev/null
+#!/bin/sh
+
+CPDIR=$1
+shift
+
+if [ ! -d $CPDIR ]; then
+ echo Directory $CPDIR does not exist!
+ echo Do a "make installcp" or "make install" first.
+ exit 1
+fi
+
+for p in $*; do
+ if [ ! -f $CPDIR/unicode_map.$p ]; then
+ echo $CPDIR/unicode_map.$p does not exist!
+ else
+ echo Removing $CPDIR/unicode_map.$p
+ rm -f $CPDIR/unicode_map.$p
+ if [ -f $CPDIR/unicode_map.$p ]; then
+ echo Cannot remove $CPDIR/unicode_map.$p... does $USER have privileges?
+ fi
+ fi
+done
+
+cat << EOF
+======================================================================
+The code pages have been uninstalled. You may reinstall them using
+the command "make installcp" or "make install" to install binaries,
+man pages, shell scripts and code pages. You may recover a previous version
+(if any with "make revert").
+======================================================================
+EOF
+
+exit 0
return False;
}
- /* Load DSO's */
- if(lp_modules())
- smb_load_modules(lp_modules());
-
return True;
}
/* The parent doesn't need this socket */
smbd_process();
uni_group_cache_shutdown();
- namecache_shutdown();
exit_server("normal exit");
return(0);
}
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- SAM module functions
-
- Copyright (C) Jelmer Vernooij 2002
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-#include "samtest.h"
-
-static void print_account(SAM_ACCOUNT_HANDLE *a)
-{
- /* FIXME */
-}
-
-static NTSTATUS cmd_context(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- NTSTATUS status;
- char **plugins;
- int i;
-
- plugins = malloc(argc * sizeof(char *));
-
- for(i = 1; i < argc; i++)
- plugins[i-1] = argv[i];
-
- plugins[argc-1] = NULL;
-
- if(!NT_STATUS_IS_OK(status = make_sam_context_list(&st->context, plugins))) {
- printf("make_sam_context_list failed: %s\n", nt_errstr(status));
- SAFE_FREE(plugins);
- return status;
- }
-
- SAFE_FREE(plugins);
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_load_module(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- char *plugin_arg[2];
- NTSTATUS status;
- if (argc != 2 && argc != 3) {
- printf("Usage: load <module path> [domain-name]\n");
- return NT_STATUS_OK;
- }
-
- if (argc == 3)
- asprintf(&plugin_arg[0], "plugin:%s|%s", argv[1], argv[2]);
- else
- asprintf(&plugin_arg[0], "plugin:%s", argv[1]);
-
- plugin_arg[1] = NULL;
-
- if(!NT_STATUS_IS_OK(status = make_sam_context_list(&st->context, plugin_arg))) {
- free(plugin_arg[0]);
- return status;
- }
-
- free(plugin_arg[0]);
-
- printf("load: ok\n");
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_get_sec_desc(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_set_sec_desc(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_lookup_sid(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- char *name;
- uint32 type;
- NTSTATUS status;
- DOM_SID sid;
- if (argc != 2) {
- printf("Usage: lookup_sid <sid>\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!string_to_sid(&sid, argv[1])){
- printf("Unparseable SID specified!\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!NT_STATUS_IS_OK(status = sam_lookup_sid(st->context, st->token, mem_ctx, &sid, &name, &type))) {
- printf("sam_lookup_sid failed!\n");
- return status;
- }
-
- printf("Name: %s\n", name);
- printf("Type: %d\n", type); /* FIXME: What kind of an integer is type ? */
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_lookup_name(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- DOM_SID sid;
- uint32 type;
- NTSTATUS status;
- if (argc != 3) {
- printf("Usage: lookup_name <domain> <name>\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!NT_STATUS_IS_OK(status = sam_lookup_name(st->context, st->token, argv[1], argv[2], &sid, &type))) {
- printf("sam_lookup_name failed!\n");
- return status;
- }
-
- printf("SID: %s\n", sid_string_static(&sid));
- printf("Type: %d\n", type);
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_lookup_account(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_lookup_group(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_lookup_domain(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- DOM_SID *sid;
- NTSTATUS status;
- if (argc != 2) {
- printf("Usage: lookup_domain <domain>\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!NT_STATUS_IS_OK(status = sam_lookup_domain(st->context, st->token, argv[1], &sid))) {
- printf("sam_lookup_name failed!\n");
- return status;
- }
-
- printf("SID: %s\n", sid_string_static(sid));
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_enum_domains(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- int32 domain_count, i;
- DOM_SID *domain_sids;
- char **domain_names;
- NTSTATUS status;
-
- if (!NT_STATUS_IS_OK(status = sam_enum_domains(st->context, st->token, &domain_count, &domain_sids, &domain_names))) {
- printf("sam_enum_domains failed!\n");
- return status;
- }
-
- if (domain_count == 0) {
- printf("No domains found!\n");
- return NT_STATUS_OK;
- }
-
- for (i = 0; i < domain_count; i++) {
- printf("%s %s\n", domain_names[i], sid_string_static(&domain_sids[i]));
- }
-
- SAFE_FREE(domain_sids);
- SAFE_FREE(domain_names);
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_update_domain(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_show_domain(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- NTSTATUS status;
- DOM_SID sid;
- SAM_DOMAIN_HANDLE *domain;
- uint32 tmp_uint32;
- uint16 tmp_uint16;
- NTTIME tmp_nttime;
- BOOL tmp_bool;
- const char *tmp_string;
-
- if (argc != 2) {
- printf("Usage: show_domain <sid>\n");
- return status;
- }
-
- if (!string_to_sid(&sid, argv[1])){
- printf("Unparseable SID specified!\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_by_sid(st->context, st->token, GENERIC_RIGHTS_DOMAIN_ALL_ACCESS, &sid, &domain))) {
- printf("sam_get_domain_by_sid failed\n");
- return status;
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_num_accounts(domain, &tmp_uint32))) {
- printf("sam_get_domain_num_accounts failed: %s\n", nt_errstr(status));
- } else {
- printf("Number of accounts: %d\n", tmp_uint32);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_num_groups(domain, &tmp_uint32))) {
- printf("sam_get_domain_num_groups failed: %s\n", nt_errstr(status));
- } else {
- printf("Number of groups: %u\n", tmp_uint32);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_num_aliases(domain, &tmp_uint32))) {
- printf("sam_get_domain_num_aliases failed: %s\n", nt_errstr(status));
- } else {
- printf("Number of aliases: %u\n", tmp_uint32);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_name(domain, &tmp_string))) {
- printf("sam_get_domain_name failed: %s\n", nt_errstr(status));
- } else {
- printf("Domain Name: %s\n", tmp_string);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_lockout_count(domain, &tmp_uint16))) {
- printf("sam_get_domain_lockout_count failed: %s\n", nt_errstr(status));
- } else {
- printf("Lockout Count: %u\n", tmp_uint16);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_force_logoff(domain, &tmp_bool))) {
- printf("sam_get_domain_force_logoff failed: %s\n", nt_errstr(status));
- } else {
- printf("Force Logoff: %s\n", (tmp_bool?"Yes":"No"));
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_lockout_duration(domain, &tmp_nttime))) {
- printf("sam_get_domain_lockout_duration failed: %s\n", nt_errstr(status));
- } else {
- printf("Lockout duration: %u\n", tmp_nttime.low);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_login_pwdchange(domain, &tmp_bool))) {
- printf("sam_get_domain_login_pwdchange failed: %s\n", nt_errstr(status));
- } else {
- printf("Password changing allowed: %s\n", (tmp_bool?"Yes":"No"));
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_max_pwdage(domain, &tmp_nttime))) {
- printf("sam_get_domain_max_pwdage failed: %s\n", nt_errstr(status));
- } else {
- printf("Maximum password age: %u\n", tmp_nttime.low);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_min_pwdage(domain, &tmp_nttime))) {
- printf("sam_get_domain_min_pwdage failed: %s\n", nt_errstr(status));
- } else {
- printf("Minimal password age: %u\n", tmp_nttime.low);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_min_pwdlength(domain, &tmp_uint16))) {
- printf("sam_get_domain_min_pwdlength: %s\n", nt_errstr(status));
- } else {
- printf("Minimal Password Length: %u\n", tmp_uint16);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_pwd_history(domain, &tmp_uint16))) {
- printf("sam_get_domain_pwd_history failed: %s\n", nt_errstr(status));
- } else {
- printf("Password history: %u\n", tmp_uint16);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_reset_count(domain, &tmp_nttime))) {
- printf("sam_get_domain_reset_count failed: %s\n", nt_errstr(status));
- } else {
- printf("Reset count: %u\n", tmp_nttime.low);
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_domain_server(domain, &tmp_string))) {
- printf("sam_get_domain_server failed: %s\n", nt_errstr(status));
- } else {
- printf("Server: %s\n", tmp_string);
- }
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_create_account(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_update_account(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_delete_account(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_enum_accounts(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- NTSTATUS status;
- DOM_SID sid;
- int32 account_count, i;
- SAM_ACCOUNT_ENUM *accounts;
-
- if (argc != 2) {
- printf("Usage: enum_accounts <domain-sid>\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!string_to_sid(&sid, argv[1])){
- printf("Unparseable SID specified!\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!NT_STATUS_IS_OK(status = sam_enum_accounts(st->context, st->token, &sid, 0, &account_count, &accounts))) {
- printf("sam_enum_accounts failed: %s\n", nt_errstr(status));
- return status;
- }
-
- if (account_count == 0) {
- printf("No accounts found!\n");
- return NT_STATUS_OK;
- }
-
- for (i = 0; i < account_count; i++)
- printf("SID: %s\nName: %s\nFullname: %s\nDescription: %s\nACB_BITS: %08X\n\n",
- sid_string_static(&accounts[i].sid), accounts[i].account_name,
- accounts[i].full_name, accounts[i].account_desc,
- accounts[i].acct_ctrl);
-
- SAFE_FREE(accounts);
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_lookup_account_sid(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- NTSTATUS status;
- DOM_SID sid;
- SAM_ACCOUNT_HANDLE *account;
-
- if (argc != 2) {
- printf("Usage: lookup_account_sid <account-sid>\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!string_to_sid(&sid, argv[1])){
- printf("Unparseable SID specified!\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
- if (!NT_STATUS_IS_OK(status = sam_get_account_by_sid(st->context, st->token, GENERIC_RIGHTS_USER_ALL_ACCESS, &sid, &account))) {
- printf("context_sam_get_account_by_sid failed: %s\n", nt_errstr(status));
- return status;
- }
-
- print_account(account);
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_lookup_account_name(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- NTSTATUS status;
- SAM_ACCOUNT_HANDLE *account;
-
- if (argc != 3) {
- printf("Usage: lookup_account_name <domain-name> <account-name>\n");
- return NT_STATUS_INVALID_PARAMETER;
- }
-
-
- if (!NT_STATUS_IS_OK(status = sam_get_account_by_name(st->context, st->token, GENERIC_RIGHTS_USER_ALL_ACCESS, argv[1], argv[2], &account))) {
- printf("context_sam_get_account_by_sid failed: %s\n", nt_errstr(status));
- return status;
- }
-
- print_account(account);
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_create_group(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_update_group(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_delete_group(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_enum_groups(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_lookup_group_sid(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_lookup_group_name(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_group_add_member(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-static NTSTATUS cmd_group_del_member(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-static NTSTATUS cmd_group_enum(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-
-static NTSTATUS cmd_get_sid_groups(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-struct cmd_set sam_general_commands[] = {
-
- { "General SAM Commands" },
-
- { "load", cmd_load_module, "Load a module", "load <module.so> [domain-sid]" },
- { "context", cmd_context, "Load specified context", "context [DOMAIN|]backend1[:options] [DOMAIN|]backend2[:options]" },
- { "get_sec_desc", cmd_get_sec_desc, "Get security descriptor info", "get_sec_desc <access-token> <sid>" },
- { "set_sec_desc", cmd_set_sec_desc, "Set security descriptor info", "set_sec_desc <access-token> <sid>" },
- { "lookup_sid", cmd_lookup_sid, "Lookup type of specified SID", "lookup_sid <sid>" },
- { "lookup_name", cmd_lookup_name, "Lookup type of specified name", "lookup_name <sid>" },
- { NULL }
-};
-
-struct cmd_set sam_domain_commands[] = {
- { "Domain Commands" },
- { "update_domain", cmd_update_domain, "Update domain information", "update_domain [domain-options] domain-name | domain-sid" },
- { "show_domain", cmd_show_domain, "Show domain information", "show_domain domain-sid | domain-name" },
- { "enum_domains", cmd_enum_domains, "Enumerate all domains", "enum_domains <token> <acct-ctrl>" },
- { "lookup_domain", cmd_lookup_domain, "Lookup a domain by name", "lookup_domain domain-name" },
- { NULL }
-};
-
-struct cmd_set sam_account_commands[] = {
- { "Account Commands" },
- { "create_account", cmd_create_account, "Create a new account with specified properties", "create_account [account-options]" },
- { "update_account", cmd_update_account, "Update an existing account", "update_account [account-options] account-sid | account-name" },
- { "delete_account", cmd_delete_account, "Delete an account", "delete_account account-sid | account-name" },
- { "enum_accounts", cmd_enum_accounts, "Enumerate all accounts", "enum_accounts <token> <acct-ctrl>" },
- { "lookup_account", cmd_lookup_account, "Lookup an account by either sid or name", "lookup_account account-sid | account-name" },
- { "lookup_account_sid", cmd_lookup_account_sid, "Lookup an account by sid", "lookup_account_sid account-sid" },
- { "lookup_account_name", cmd_lookup_account_name, "Lookup an account by name", "lookup_account_name account-name" },
- { NULL }
-};
-
-struct cmd_set sam_group_commands[] = {
- { "Group Commands" },
- { "create_group", cmd_create_group, "Create a new group", "create_group [group-opts]" },
- { "update_group", cmd_update_group, "Update an existing group", "update_group [group-opts] group-name | group-sid" },
- { "delete_group", cmd_delete_group, "Delete an existing group", "delete_group group-name | group-sid" },
- { "enum_groups", cmd_enum_groups, "Enumerate all groups", "enum_groups <token> <group-ctrl>" },
- { "lookup_group", cmd_lookup_group, "Lookup a group by SID or name", "lookup_group group-sid | group-name" },
- { "lookup_group_sid", cmd_lookup_group_sid, "Lookup a group by SID", "lookup_group_sid <sid>" },
- { "lookup_group_name", cmd_lookup_group_name, "Lookup a group by name", "lookup_group_name <name>" },
- { "group_add_member", cmd_group_add_member, "Add group member to group", "group_add_member <group-name | group-sid> <member-name | member-sid>" },
- { "group_del_member", cmd_group_del_member, "Delete group member from group", "group_del_member <group-name | group-sid> <member-name | member-sid>" },
- { "group_enum", cmd_group_enum, "Enumerate all members of specified group", "group_enum group-sid | group-name" },
-
- { "get_sid_groups", cmd_get_sid_groups, "Get a list of groups specified sid is a member of", "group_enum <group-sid | group-name>" },
- { NULL }
-};
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
- SAM module tester
-
- Copyright (C) 2002 Jelmer Vernooij
-
- Parts of the code stolen from vfstest by Simo Sorce and Eric Lorimer
- Parts of the code stolen from rpcclient by Tim Potter
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-#include "samtest.h"
-
-struct func_entry {
- char *name;
- int (*fn)(struct connection_struct *conn, const char *path);
-};
-
-/* List to hold groups of commands */
-static struct cmd_list {
- struct cmd_list *prev, *next;
- struct cmd_set *cmd_set;
-} *cmd_list;
-
-static char* next_command (char** cmdstr)
-{
- static pstring command;
- char *p;
-
- if (!cmdstr || !(*cmdstr))
- return NULL;
-
- p = strchr_m(*cmdstr, ';');
- if (p)
- *p = '\0';
- pstrcpy(command, *cmdstr);
- *cmdstr = p;
-
- return command;
-}
-
-/* Load specified configuration file */
-static NTSTATUS cmd_conf(struct samtest_state *sam, TALLOC_CTX *mem_ctx,
- int argc, char **argv)
-{
- if (argc != 2) {
- printf("Usage: %s <smb.conf>\n", argv[0]);
- return NT_STATUS_OK;
- }
-
- if (!lp_load(argv[1], False, True, False)) {
- printf("Error loading \"%s\"\n", argv[1]);
- return NT_STATUS_OK;
- }
-
- printf("\"%s\" successfully loaded\n", argv[1]);
- return NT_STATUS_OK;
-}
-
-/* Display help on commands */
-static NTSTATUS cmd_help(struct samtest_state *st, TALLOC_CTX *mem_ctx,
- int argc, char **argv)
-{
- struct cmd_list *tmp;
- struct cmd_set *tmp_set;
-
- /* Usage */
- if (argc > 2) {
- printf("Usage: %s [command]\n", argv[0]);
- return NT_STATUS_OK;
- }
-
- /* Help on one command */
-
- if (argc == 2) {
- for (tmp = cmd_list; tmp; tmp = tmp->next) {
-
- tmp_set = tmp->cmd_set;
-
- while(tmp_set->name) {
- if (strequal(argv[1], tmp_set->name)) {
- if (tmp_set->usage &&
- tmp_set->usage[0])
- printf("%s\n", tmp_set->usage);
- else
- printf("No help for %s\n", tmp_set->name);
-
- return NT_STATUS_OK;
- }
-
- tmp_set++;
- }
- }
-
- printf("No such command: %s\n", argv[1]);
- return NT_STATUS_OK;
- }
-
- /* List all commands */
-
- for (tmp = cmd_list; tmp; tmp = tmp->next) {
-
- tmp_set = tmp->cmd_set;
-
- while(tmp_set->name) {
-
- printf("%20s\t%s\n", tmp_set->name,
- tmp_set->description ? tmp_set->description:
- "");
-
- tmp_set++;
- }
- }
-
- return NT_STATUS_OK;
-}
-
-/* Change the debug level */
-static NTSTATUS cmd_debuglevel(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- if (argc > 2) {
- printf("Usage: %s [debuglevel]\n", argv[0]);
- return NT_STATUS_OK;
- }
-
- if (argc == 2) {
- DEBUGLEVEL = atoi(argv[1]);
- }
-
- printf("debuglevel is %d\n", DEBUGLEVEL);
-
- return NT_STATUS_OK;
-}
-
-static NTSTATUS cmd_quit(struct samtest_state *st, TALLOC_CTX *mem_ctx, int argc, char **argv)
-{
- /* Cleanup */
- talloc_destroy(mem_ctx);
-
- exit(0);
- return NT_STATUS_OK; /* NOTREACHED */
-}
-
-static struct cmd_set samtest_commands[] = {
-
- { "GENERAL OPTIONS" },
-
- { "help", cmd_help, "Get help on commands", "" },
- { "?", cmd_help, "Get help on commands", "" },
- { "conf", cmd_conf, "Load smb configuration file", "conf <smb.conf>" },
- { "debuglevel", cmd_debuglevel, "Set debug level", "" },
- { "exit", cmd_quit, "Exit program", "" },
- { "quit", cmd_quit, "Exit program", "" },
-
- { NULL }
-};
-
-static struct cmd_set separator_command[] = {
- { "---------------", NULL, "----------------------" },
- { NULL }
-};
-
-
-/*extern struct cmd_set sam_commands[];*/
-extern struct cmd_set sam_general_commands[];
-extern struct cmd_set sam_domain_commands[];
-extern struct cmd_set sam_account_commands[];
-extern struct cmd_set sam_group_commands[];
-static struct cmd_set *samtest_command_list[] = {
- samtest_commands,
- sam_general_commands,
- sam_domain_commands,
- sam_account_commands,
- sam_group_commands,
- NULL
-};
-
-static void add_command_set(struct cmd_set *cmd_set)
-{
- struct cmd_list *entry;
-
- if (!(entry = (struct cmd_list *)malloc(sizeof(struct cmd_list)))) {
- DEBUG(0, ("out of memory\n"));
- return;
- }
-
- ZERO_STRUCTP(entry);
-
- entry->cmd_set = cmd_set;
- DLIST_ADD(cmd_list, entry);
-}
-
-static NTSTATUS do_cmd(struct samtest_state *st, struct cmd_set *cmd_entry, char *cmd)
-{
- char *p = cmd, **argv = NULL;
- NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
- TALLOC_CTX *mem_ctx = NULL;
- pstring buf;
- int argc = 0, i;
-
- /* Count number of arguments first time through the loop then
- allocate memory and strdup them. */
-
- again:
- while(next_token(&p, buf, " ", sizeof(buf))) {
- if (argv) {
- argv[argc] = strdup(buf);
- }
-
- argc++;
- }
-
- if (!argv) {
-
- /* Create argument list */
-
- argv = (char **)malloc(sizeof(char *) * argc);
- memset(argv, 0, sizeof(char *) * argc);
-
- if (!argv) {
- fprintf(stderr, "out of memory\n");
- result = NT_STATUS_NO_MEMORY;
- goto done;
- }
-
- p = cmd;
- argc = 0;
-
- goto again;
- }
-
- /* Call the function */
-
- if (cmd_entry->fn) {
-
- if (mem_ctx == NULL) {
- /* Create mem_ctx */
- if (!(mem_ctx = talloc_init())) {
- DEBUG(0, ("talloc_init() failed\n"));
- goto done;
- }
- }
-
- /* Run command */
- result = cmd_entry->fn(st, mem_ctx, argc, argv);
-
- } else {
- fprintf (stderr, "Invalid command\n");
- goto done;
- }
-
- done:
-
- /* Cleanup */
-
- if (argv) {
- for (i = 0; i < argc; i++)
- SAFE_FREE(argv[i]);
-
- SAFE_FREE(argv);
- }
-
- return result;
-}
-
-/* Process a command entered at the prompt or as part of -c */
-static NTSTATUS process_cmd(struct samtest_state *st, char *cmd)
-{
- struct cmd_list *temp_list;
- BOOL found = False;
- pstring buf;
- char *p = cmd;
- NTSTATUS result = NT_STATUS_OK;
- int len = 0;
-
- if (cmd[strlen(cmd) - 1] == '\n')
- cmd[strlen(cmd) - 1] = '\0';
-
- if (!next_token(&p, buf, " ", sizeof(buf))) {
- return NT_STATUS_OK;
- }
-
- /* strip the trainly \n if it exsists */
- len = strlen(buf);
- if (buf[len-1] == '\n')
- buf[len-1] = '\0';
-
- /* Search for matching commands */
-
- for (temp_list = cmd_list; temp_list; temp_list = temp_list->next) {
- struct cmd_set *temp_set = temp_list->cmd_set;
-
- while(temp_set->name) {
- if (strequal(buf, temp_set->name)) {
- found = True;
- result = do_cmd(st, temp_set, cmd);
-
- goto done;
- }
- temp_set++;
- }
- }
-
- done:
- if (!found && buf[0]) {
- printf("command not found: %s\n", buf);
- return NT_STATUS_OK;
- }
-
- if (!NT_STATUS_IS_OK(result)) {
- printf("result was %s\n", nt_errstr(result));
- }
-
- return result;
-}
-
-void exit_server(char *reason)
-{
- DEBUG(3,("Server exit (%s)\n", (reason ? reason : "")));
- exit(0);
-}
-
-static int server_fd = -1;
-int last_message = -1;
-
-int smbd_server_fd(void)
-{
- return server_fd;
-}
-
-BOOL reload_services(BOOL test)
-{
- return True;
-}
-
-/* Main function */
-
-int main(int argc, char *argv[])
-{
- BOOL interactive = True;
- int opt;
- static char *cmdstr = "";
- static char *opt_logfile=NULL;
- static char *config_file = dyn_CONFIGFILE;
- pstring logfile;
- struct cmd_set **cmd_set;
- struct samtest_state st;
-
- /* make sure the vars that get altered (4th field) are in
- a fixed location or certain compilers complain */
- poptContext pc;
- struct poptOption long_options[] = {
- POPT_AUTOHELP
- { NULL, 0, POPT_ARG_INCLUDE_TABLE, popt_common_debug },
- {"command", 'e', POPT_ARG_STRING, &cmdstr, 'e', "Execute semicolon seperated cmds"},
- {"logfile", 'l', POPT_ARG_STRING, &opt_logfile, 'l', "Logfile to use instead of stdout"},
- {"configfile", 'c', POPT_ARG_STRING, &config_file, 0,"use different configuration file",NULL},
- { 0, 0, 0, 0}
- };
-
- ZERO_STRUCT(st);
-
- st.token = get_system_token();
-
- setlinebuf(stdout);
-
- DEBUGLEVEL = 1;
-
- pc = poptGetContext("samtest", argc, (const char **) argv,
- long_options, 0);
-
- while((opt = poptGetNextOpt(pc)) != -1) {
- switch (opt) {
- case 'l':
- slprintf(logfile, sizeof(logfile) - 1, "%s.client",
- opt_logfile);
- lp_set_logfile(logfile);
- interactive = False;
- break;
- }
- }
-
- if (!lp_load(config_file,True,False,False)) {
- fprintf(stderr, "Can't load %s - run testparm to debug it\n", config_file);
- exit(1);
- }
-
- poptFreeContext(pc);
-
- /* the following functions are part of the Samba debugging
- facilities. See lib/debug.c */
- setup_logging("samtest", interactive);
- if (!interactive)
- reopen_logs();
-
- /* Load command lists */
-
- cmd_set = samtest_command_list;
-
- while(*cmd_set) {
- add_command_set(*cmd_set);
- add_command_set(separator_command);
- cmd_set++;
- }
-
- /* Do anything specified with -c */
- if (cmdstr[0]) {
- char *cmd;
- char *p = cmdstr;
-
- while((cmd=next_command(&p)) != NULL) {
- process_cmd(&st, cmd);
- }
-
- return 0;
- }
-
- /* Loop around accepting commands */
-
- while(1) {
- pstring prompt;
- char *line;
-
- slprintf(prompt, sizeof(prompt) - 1, "samtest $> ");
-
- line = smb_readline(prompt, NULL, NULL);
-
- if (line == NULL)
- break;
-
- if (line[0] != '\n')
- process_cmd(&st, line);
- }
-
- return 0;
-}
+++ /dev/null
-/*
- Samba Unix/Linux SMB client utility editreg.c
- Copyright (C) 2002 Richard Sharpe, rsharpe@richardsharpe.com
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
-
-/*************************************************************************
-
- A utility to edit a Windows NT/2K etc registry file.
-
- Many of the ideas in here come from other people and software.
- I first looked in Wine in misc/registry.c and was also influenced by
- http://www.wednesday.demon.co.uk/dosreg.html
-
- Which seems to contain comments from someone else. I reproduce them here
- incase the site above disappears. It actually comes from
- http://home.eunet.no/~pnordahl/ntpasswd/WinReg.txt.
-
- The goal here is to read the registry into memory, manipulate it, and then
- write it out if it was changed by any actions of the user.
-
-The windows NT registry has 2 different blocks, where one can occur many
-times...
-
-the "regf"-Block
-================
-
-"regf" is obviosly the abbreviation for "Registry file". "regf" is the
-signature of the header-block which is always 4kb in size, although only
-the first 64 bytes seem to be used and a checksum is calculated over
-the first 0x200 bytes only!
-
-Offset Size Contents
-0x00000000 D-Word ID: ASCII-"regf" = 0x66676572
-0x00000004 D-Word ???? //see struct REGF
-0x00000008 D-Word ???? Always the same value as at 0x00000004
-0x0000000C Q-Word last modify date in WinNT date-format
-0x00000014 D-Word 1
-0x00000018 D-Word 3
-0x0000001C D-Word 0
-0x00000020 D-Word 1
-0x00000024 D-Word Offset of 1st key record
-0x00000028 D-Word Size of the data-blocks (Filesize-4kb)
-0x0000002C D-Word 1
-0x000001FC D-Word Sum of all D-Words from 0x00000000 to
-0x000001FB //XOR of all words. Nigel
-
-I have analyzed more registry files (from multiple machines running
-NT 4.0 german version) and could not find an explanation for the values
-marked with ???? the rest of the first 4kb page is not important...
-
-the "hbin"-Block
-================
-I don't know what "hbin" stands for, but this block is always a multiple
-of 4kb in size.
-
-Inside these hbin-blocks the different records are placed. The memory-
-management looks like a C-compiler heap management to me...
-
-hbin-Header
-===========
-Offset Size Contents
-0x0000 D-Word ID: ASCII-"hbin" = 0x6E696268
-0x0004 D-Word Offset from the 1st hbin-Block
-0x0008 D-Word Offset to the next hbin-Block
-0x001C D-Word Block-size
-
-The values in 0x0008 and 0x001C should be the same, so I don't know
-if they are correct or swapped...
-
-From offset 0x0020 inside a hbin-block data is stored with the following
-format:
-
-Offset Size Contents
-0x0000 D-Word Data-block size //this size must be a
-multiple of 8. Nigel
-0x0004 ???? Data
-
-If the size field is negative (bit 31 set), the corresponding block
-is free and has a size of -blocksize!
-
-That does not seem to be true. All block lengths seem to be negative! (Richard Sharpe)
-
-The data is stored as one record per block. Block size is a multiple
-of 4 and the last block reaches the next hbin-block, leaving no room.
-
-Records in the hbin-blocks
-==========================
-
-nk-Record
-
- The nk-record can be treated as a kombination of tree-record and
- key-record of the win 95 registry.
-
-lf-Record
-
- The lf-record is the counterpart to the RGKN-record (the
- hash-function)
-
-vk-Record
-
- The vk-record consists information to a single value.
-
-sk-Record
-
- sk (? Security Key ?) is the ACL of the registry.
-
-Value-Lists
-
- The value-lists contain information about which values are inside a
- sub-key and don't have a header.
-
-Datas
-
- The datas of the registry are (like the value-list) stored without a
- header.
-
-All offset-values are relative to the first hbin-block and point to the
-block-size field of the record-entry. to get the file offset, you have to add
-the header size (4kb) and the size field (4 bytes)...
-
-the nk-Record
-=============
-Offset Size Contents
-0x0000 Word ID: ASCII-"nk" = 0x6B6E
-0x0002 Word for the root-key: 0x2C, otherwise 0x20 //key symbolic links 0x10. Nigel
-0x0004 Q-Word write-date/time in windows nt notation
-0x0010 D-Word Offset of Owner/Parent key
-0x0014 D-Word number of sub-Keys
-0x001C D-Word Offset of the sub-key lf-Records
-0x0024 D-Word number of values
-0x0028 D-Word Offset of the Value-List
-0x002C D-Word Offset of the sk-Record
-
-0x0030 D-Word Offset of the Class-Name //see NK structure for the use of these fields. Nigel
-0x0044 D-Word Unused (data-trash) //some kind of run time index. Does not appear to be important. Nigel
-0x0048 Word name-length
-0x004A Word class-name length
-0x004C ???? key-name
-
-the Value-List
-==============
-Offset Size Contents
-0x0000 D-Word Offset 1st Value
-0x0004 D-Word Offset 2nd Value
-0x???? D-Word Offset nth Value
-
-To determine the number of values, you have to look at the owner-nk-record!
-
-Der vk-Record
-=============
-Offset Size Contents
-0x0000 Word ID: ASCII-"vk" = 0x6B76
-0x0002 Word name length
-0x0004 D-Word length of the data //if top bit is set when offset contains data. Nigel
-0x0008 D-Word Offset of Data
-0x000C D-Word Type of value
-0x0010 Word Flag
-0x0012 Word Unused (data-trash)
-0x0014 ???? Name
-
-If bit 0 of the flag-word is set, a name is present, otherwise the value has no name (=default)
-
-If the data-size is lower 5, the data-offset value is used to store the data itself!
-
-The data-types
-==============
-Wert Beteutung
-0x0001 RegSZ: character string (in UNICODE!)
-0x0002 ExpandSZ: string with "%var%" expanding (UNICODE!)
-0x0003 RegBin: raw-binary value
-0x0004 RegDWord: Dword
-0x0007 RegMultiSZ: multiple strings, seperated with 0
- (UNICODE!)
-
-The "lf"-record
-===============
-Offset Size Contents
-0x0000 Word ID: ASCII-"lf" = 0x666C
-0x0002 Word number of keys
-0x0004 ???? Hash-Records
-
-Hash-Record
-===========
-Offset Size Contents
-0x0000 D-Word Offset of corresponding "nk"-Record
-0x0004 D-Word ASCII: the first 4 characters of the key-name, padded with 0's. Case sensitiv!
-
-Keep in mind, that the value at 0x0004 is used for checking the data-consistency! If you change the
-key-name you have to change the hash-value too!
-
-//These hashrecords must be sorted low to high within the lf record. Nigel.
-
-The "sk"-block
-==============
-(due to the complexity of the SAM-info, not clear jet)
-(This is just a security descriptor in the data. R Sharpe.)
-
-
-Offset Size Contents
-0x0000 Word ID: ASCII-"sk" = 0x6B73
-0x0002 Word Unused
-0x0004 D-Word Offset of previous "sk"-Record
-0x0008 D-Word Offset of next "sk"-Record
-0x000C D-Word usage-counter
-0x0010 D-Word Size of "sk"-record in bytes
-???? //standard self
-relative security desciptor. Nigel
-???? ???? Security and auditing settings...
-????
-
-The usage counter counts the number of references to this
-"sk"-record. You can use one "sk"-record for the entire registry!
-
-Windows nt date/time format
-===========================
-The time-format is a 64-bit integer which is incremented every
-0,0000001 seconds by 1 (I don't know how accurate it realy is!)
-It starts with 0 at the 1st of january 1601 0:00! All values are
-stored in GMT time! The time-zone is important to get the real
-time!
-
-Common values for win95 and win-nt
-==================================
-Offset values marking an "end of list", are either 0 or -1 (0xFFFFFFFF).
-If a value has no name (length=0, flag(bit 0)=0), it is treated as the
-"Default" entry...
-If a value has no data (length=0), it is displayed as empty.
-
-simplyfied win-3.?? registry:
-=============================
-
-+-----------+
-| next rec. |---+ +----->+------------+
-| first sub | | | | Usage cnt. |
-| name | | +-->+------------+ | | length |
-| value | | | | next rec. | | | text |------->+-------+
-+-----------+ | | | name rec. |--+ +------------+ | xxxxx |
- +------------+ | | value rec. |-------->+------------+ +-------+
- v | +------------+ | Usage cnt. |
-+-----------+ | | length |
-| next rec. | | | text |------->+-------+
-| first sub |------+ +------------+ | xxxxx |
-| name | +-------+
-| value |
-+-----------+
-
-Greatly simplyfied structure of the nt-registry:
-================================================
-
-+---------------------------------------------------------------+
-| |
-v |
-+---------+ +---------->+-----------+ +----->+---------+ |
-| "nk" | | | lf-rec. | | | nk-rec. | |
-| ID | | | # of keys | | | parent |---+
-| Date | | | 1st key |--+ | .... |
-| parent | | +-----------+ +---------+
-| suk-keys|-----+
-| values |--------------------->+----------+
-| SK-rec. |---------------+ | 1. value |--> +----------+
-| class |--+ | +----------+ | vk-rec. |
-+---------+ | | | .... |
- v | | data |--> +-------+
- +------------+ | +----------+ | xxxxx |
- | Class name | | +-------+
- +------------+ |
- v
- +---------+ +---------+
- +----->| next sk |--->| Next sk |--+
- | +---| prev sk |<---| prev sk | |
- | | | .... | | ... | |
- | | +---------+ +---------+ |
- | | ^ |
- | | | |
- | +--------------------+ |
- +----------------------------------+
-
----------------------------------------------------------------------------
-
-Hope this helps.... (Although it was "fun" for me to uncover this things,
- it took me several sleepless nights ;)
-
- B.D.
-
-*************************************************************************/
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <errno.h>
-#include <assert.h>
-#include <sys/types.h>
-#include <sys/stat.h>
-#include <unistd.h>
-#include <sys/mman.h>
-#include <string.h>
-#include <fcntl.h>
-
-static int verbose = 0;
-
-/*
- * These definitions are for the in-memory registry structure.
- * It is a tree structure that mimics what you see with tools like regedit
- */
-
-/*
- * DateTime struct for Windows
- */
-
-typedef struct date_time_s {
- unsigned int low, high;
-} NTTIME;
-
-/*
- * Definition of a Key. It has a name, classname, date/time last modified,
- * sub-keys, values, and a security descriptor
- */
-
-#define REG_ROOT_KEY 1
-#define REG_SUB_KEY 2
-#define REG_SYM_LINK 3
-
-typedef struct reg_key_s {
- char *name; /* Name of the key */
- char *class_name;
- int type; /* One of REG_ROOT_KEY or REG_SUB_KEY */
- NTTIME last_mod; /* Time last modified */
- struct reg_key_s *owner;
- struct key_list_s *sub_keys;
- struct val_list_s *values;
- struct key_sec_desc_s *security;
-} REG_KEY;
-
-/*
- * The KEY_LIST struct lists sub-keys.
- */
-
-typedef struct key_list_s {
- int key_count;
- REG_KEY *keys[1];
-} KEY_LIST;
-
-typedef struct val_key_s {
- char *name;
- int has_name;
- int data_type;
- int data_len;
- void *data_blk; /* Might want a separate block */
-} VAL_KEY;
-
-typedef struct val_list_s {
- int val_count;
- VAL_KEY *vals[1];
-} VAL_LIST;
-
-#ifndef MAXSUBAUTHS
-#define MAXSUBAUTHS 15
-#endif
-
-typedef struct dom_sid_s {
- unsigned char ver, auths;
- unsigned char auth[6];
- unsigned int sub_auths[MAXSUBAUTHS];
-} DOM_SID;
-
-typedef struct ace_struct_s {
- unsigned char type, flags;
- unsigned int perms; /* Perhaps a better def is in order */
- DOM_SID trustee;
-} ACE;
-
-typedef struct acl_struct_s {
- unsigned short rev, refcnt;
- unsigned short num_aces;
- ACE *aces[1];
-} ACL;
-
-typedef struct sec_desc_s {
- unsigned int rev, type;
- DOM_SID *owner, *group;
- ACL *sacl, *dacl;
-} SEC_DESC;
-
-typedef struct key_sec_desc_s {
- struct key_sec_desc_s *prev, *next;
- int ref_cnt;
- SEC_DESC *sec_desc;
-} KEY_SEC_DESC;
-
-
-/*
- * An API for accessing/creating/destroying items above
- */
-
-/*
- * Iterate over the keys, depth first, calling a function for each key
- * and indicating if it is terminal or non-terminal and if it has values.
- *
- * In addition, for each value in the list, call a value list function
- */
-
-/*
- * There should eventually be one to deal with security keys as well
- */
-
-typedef int (*key_print_f)(char *path, char *key_name, char *class_name,
- int root, int terminal, int values);
-
-typedef int (*val_print_f)(char *path, char *val_name, int val_type,
- int data_len, void *data_blk, int terminal,
- int first, int last);
-
-typedef struct regf_struct_s REGF;
-
-int nt_key_iterator(REGF *regf, REG_KEY *key_tree, int bf, char *path,
- key_print_f key_print, val_print_f val_print);
-
-int nt_val_list_iterator(REGF *regf, VAL_LIST *val_list, int bf, char *path,
- int terminal, val_print_f val_print)
-{
- int i;
-
- if (!val_list) return 1;
-
- if (!val_print) return 1;
-
- for (i=0; i<val_list->val_count; i++) {
- if (!val_print(path, val_list->vals[i]->name, val_list->vals[i]->data_type,
- val_list->vals[i]->data_len, val_list->vals[i]->data_blk,
- terminal,
- (i == 0),
- (i == val_list->val_count))) {
-
- return 0;
-
- }
- }
-
- return 1;
-}
-
-int nt_key_list_iterator(REGF *regf, KEY_LIST *key_list, int bf, char *path,
- key_print_f key_print, val_print_f val_print)
-{
- int i;
-
- if (!key_list) return 1;
-
- for (i=0; i< key_list->key_count; i++) {
- if (!nt_key_iterator(regf, key_list->keys[i], bf, path, key_print,
- val_print)) {
- return 0;
- }
- }
- return 1;
-}
-
-int nt_key_iterator(REGF *regf, REG_KEY *key_tree, int bf, char *path,
- key_print_f key_print, val_print_f val_print)
-{
- int path_len = strlen(path);
- char *new_path;
-
- if (!regf || !key_tree)
- return -1;
-
- /* List the key first, then the values, then the sub-keys */
-
- if (key_print) {
-
- if (!(*key_print)(path, key_tree->name,
- key_tree->class_name,
- (key_tree->type == REG_ROOT_KEY),
- (key_tree->sub_keys == NULL),
- (key_tree->values?(key_tree->values->val_count):0)))
- return 0;
- }
-
- new_path = (char *)malloc(path_len + 1 + strlen(key_tree->name) + 1);
- if (!new_path) return 0; /* Errors? */
- new_path[0] = '\0';
- strcat(new_path, path);
- strcat(new_path, "\\");
- strcat(new_path, key_tree->name);
-
- /*
- * Now, iterate through the values in the val_list
- */
-
- if (key_tree->values &&
- !nt_val_list_iterator(regf, key_tree->values, bf, new_path,
- (key_tree->values!=NULL),
- val_print)) {
-
- free(new_path);
- return 0;
- }
-
- /*
- * Now, iterate through the keys in the key list
- */
-
- if (key_tree->sub_keys &&
- !nt_key_list_iterator(regf, key_tree->sub_keys, bf, new_path, key_print,
- val_print)) {
- free(new_path);
- return 0;
- }
-
- free(new_path);
- return 1;
-}
-
-/* Make, delete keys */
-
-int nt_delete_val_list(VAL_LIST *vl)
-{
-
- return 1;
-}
-
-int nt_delete_reg_key(REG_KEY *key)
-{
-
- return 1;
-}
-
-/*
- * Create/delete key lists and add delete keys to/from a list, count the keys
- */
-
-
-/*
- * Create/delete value lists, add/delete values, count them
- */
-
-
-/*
- * Create/delete security descriptors, add/delete SIDS, count SIDS, etc.
- * We reference count the security descriptors. Any new reference increments
- * the ref count. If we modify an SD, we copy the old one, dec the ref count
- * and make the change. We also want to be able to check for equality so
- * we can reduce the number of SDs in use.
- */
-
-
-/*
- * Load and unload a registry file.
- *
- * Load, loads it into memory as a tree, while unload sealizes/flattens it
- */
-
-/*
- * Get the starting record for NT Registry file
- */
-
-/* A map of sk offsets in the regf to KEY_SEC_DESCs for quick lookup etc */
-typedef struct sk_map_s {
- int sk_off;
- KEY_SEC_DESC *key_sec_desc;
-} SK_MAP;
-
-/*
- * Where we keep all the regf stuff for one registry.
- * This is the structure that we use to tie the in memory tree etc
- * together. By keeping separate structs, we can operate on different
- * registries at the same time.
- * Currently, the SK_MAP is an array of mapping structure.
- * Since we only need this on input and output, we fill in the structure
- * as we go on input. On output, we know how many SK items we have, so
- * we can allocate the structure as we need to.
- * If you add stuff here that is dynamically allocated, add the
- * appropriate free statements below.
- */
-
-#define REGF_REGTYPE_NONE 0
-#define REGF_REGTYPE_NT 1
-#define REGF_REGTYPE_W9X 2
-
-#define TTTONTTIME(r, t1, t2) (r)->last_mod_time.low = (t1); \
- (r)->last_mod_time.high = (t2);
-
-#define REGF_HDR_BLKSIZ 0x1000
-
-struct regf_struct_s {
- int reg_type;
- char *regfile_name, *outfile_name;
- int fd;
- struct stat sbuf;
- char *base;
- int modified;
- NTTIME last_mod_time;
- REG_KEY *root; /* Root of the tree for this file */
- int sk_count, sk_map_size;
- SK_MAP **sk_map;
-};
-
-/*
- * Structures for dealing with the on-disk format of the registry
- */
-
-#define IVAL(buf) ((unsigned int) \
- (unsigned int)*((unsigned char *)(buf)+3)<<24| \
- (unsigned int)*((unsigned char *)(buf)+2)<<16| \
- (unsigned int)*((unsigned char *)(buf)+1)<<8| \
- (unsigned int)*((unsigned char *)(buf)+0))
-
-#define SVAL(buf) ((unsigned short) \
- (unsigned short)*((unsigned char *)(buf)+1)<<8| \
- (unsigned short)*((unsigned char *)(buf)+0))
-
-#define OFF(f) ((f) + REGF_HDR_BLKSIZ + 4)
-#define LOCN(base, f) ((base) + OFF(f))
-
-/*
- * All of the structures below actually have a four-byte lenght before them
- * which always seems to be negative. The following macro retrieves that
- * size as an integer
- */
-
-#define BLK_SIZE(b) ((int)*(int *)(((int *)b)-1))
-
-typedef unsigned int DWORD;
-typedef unsigned short WORD;
-
-#define REG_REGF_ID 0x66676572
-
-typedef struct regf_block {
- DWORD REGF_ID; /* regf */
- DWORD uk1;
- DWORD uk2;
- DWORD tim1, tim2;
- DWORD uk3; /* 1 */
- DWORD uk4; /* 3 */
- DWORD uk5; /* 0 */
- DWORD uk6; /* 1 */
- DWORD first_key; /* offset */
- unsigned int dblk_size;
- DWORD uk7[116]; /* 1 */
- DWORD chksum;
-} REGF_HDR;
-
-typedef struct hbin_sub_struct {
- DWORD dblocksize;
- char data[1];
-} HBIN_SUB_HDR;
-
-#define REG_HBIN_ID 0x6E696268
-
-typedef struct hbin_struct {
- DWORD HBIN_ID; /* hbin */
- DWORD next_off;
- DWORD prev_off;
- DWORD uk1;
- DWORD uk2;
- DWORD uk3;
- DWORD uk4;
- DWORD blk_size;
- HBIN_SUB_HDR hbin_sub_hdr;
-} HBIN_HDR;
-
-#define REG_NK_ID 0x6B6E
-
-typedef struct nk_struct {
- WORD NK_ID;
- WORD type;
- DWORD t1, t2;
- DWORD uk1;
- DWORD own_off;
- DWORD subk_num;
- DWORD uk2;
- DWORD lf_off;
- DWORD uk3;
- DWORD val_cnt;
- DWORD val_off;
- DWORD sk_off;
- DWORD clsnam_off;
- DWORD unk4[4];
- DWORD unk5;
- WORD nam_len;
- WORD clsnam_len;
- char key_nam[1]; /* Actual length determined by nam_len */
-} NK_HDR;
-
-#define REG_SK_ID 0x6B73
-
-typedef struct sk_struct {
- WORD SK_ID;
- WORD uk1;
- DWORD prev_off;
- DWORD next_off;
- DWORD ref_cnt;
- DWORD rec_size;
- char sec_desc[1];
-} SK_HDR;
-
-typedef struct hash_struct {
- DWORD nk_off;
- char hash[4];
-} HASH_REC;
-
-#define REG_LF_ID 0x666C
-
-typedef struct lf_struct {
- WORD LF_ID;
- WORD key_count;
- struct hash_struct hr[1]; /* Array of hash records, depending on key_count */
-} LF_HDR;
-
-typedef DWORD VL_TYPE[1]; /* Value list is an array of vk rec offsets */
-
-#define REG_VK_ID 0x6B76
-
-typedef struct vk_struct {
- WORD VK_ID;
- WORD nam_len;
- DWORD dat_len; /* If top-bit set, offset contains the data */
- DWORD dat_off;
- DWORD dat_type;
- WORD flag; /* =1, has name, else no name (=Default). */
- WORD unk1;
- char dat_name[1]; /* Name starts here ... */
-} VK_HDR;
-
-#define REG_TYPE_REGSZ 1
-#define REG_TYPE_EXPANDSZ 2
-#define REG_TYPE_BIN 3
-#define REG_TYPE_DWORD 4
-#define REG_TYPE_MULTISZ 7
-
-typedef struct _val_str {
- unsigned int val;
- char * str;
-} VAL_STR;
-
-VAL_STR reg_type_names[] = {
- { 1, "REG_SZ" },
- { 2, "REG_EXPAND_SZ" },
- { 3, "REG_BIN" },
- { 4, "REG_DWORD" },
- { 7, "REG_MULTI_SZ" },
- { 0, NULL },
-};
-
-char *val_to_str(unsigned int val, VAL_STR *val_array)
-{
- int i = 0;
-
- if (!val_array) return NULL;
-
- while (val_array[i].val && val_array[i].str) {
-
- if (val_array[i].val == val) return val_array[i].str;
- i++;
-
- }
-
- return NULL;
-
-}
-
-REG_KEY *nt_get_key_tree(REGF *regf, NK_HDR *nk_hdr, int size);
-
-int nt_set_regf_input_file(REGF *regf, char *filename)
-{
- return ((regf->regfile_name = strdup(filename)) != NULL);
-}
-
-int nt_set_regf_output_file(REGF *regf, char *filename)
-{
- return ((regf->outfile_name = strdup(filename)) != NULL);
-}
-
-/* Create a regf structure and init it */
-
-REGF *nt_create_regf(void)
-{
- REGF *tmp = (REGF *)malloc(sizeof(REGF));
- if (!tmp) return tmp;
- bzero(tmp, sizeof(REGF));
- return tmp;
-}
-
-/* Free all the bits and pieces ... Assumes regf was malloc'd */
-/* If you add stuff to REGF, add the relevant free bits here */
-int nt_free_regf(REGF *regf)
-{
- if (!regf) return 0;
-
- if (regf->regfile_name) free(regf->regfile_name);
- if (regf->outfile_name) free(regf->outfile_name);
-
- /* Free the mmap'd area */
-
- if (regf->base) munmap(regf->base, regf->sbuf.st_size);
- regf->base = NULL;
- close(regf->fd); /* Ignore the error :-) */
-
- nt_delete_reg_key(regf->root); /* Free the tree */
- free(regf->sk_map);
- regf->sk_count = regf->sk_map_size = 0;
-
- free(regf);
-
- return 1;
-}
-
-/*
- * Convert from UniCode to Ascii ... Does not take into account other lang
- * Restrict by ascii_max if > 0
- */
-int uni_to_ascii(unsigned char *uni, unsigned char *ascii, int ascii_max,
- int uni_max)
-{
- int i = 0;
-
- while (i < ascii_max && !(!uni[i*2] && !uni[i*2+1])) {
- if (uni_max > 0 && (i*2) >= uni_max) break;
- ascii[i] = uni[i*2];
- i++;
-
- }
-
- ascii[i] = '\0';
-
- return i;
-}
-
-/* Get the header of the registry. Return a pointer to the structure
- * If the mmap'd area has not been allocated, then mmap the input file
- */
-REGF_HDR *nt_get_regf_hdr(REGF *regf)
-{
- if (!regf)
- return NULL; /* What about errors */
-
- if (!regf->regfile_name)
- return NULL; /* What about errors */
-
- if (!regf->base) { /* Try to mmap etc the file */
-
- if ((regf->fd = open(regf->regfile_name, O_RDONLY, 0000)) <0) {
- return NULL; /* What about errors? */
- }
-
- if (fstat(regf->fd, ®f->sbuf) < 0) {
- return NULL;
- }
-
- regf->base = mmap(0, regf->sbuf.st_size, PROT_READ, MAP_SHARED, regf->fd, 0);
-
- if ((int)regf->base == 1) {
- fprintf(stderr, "Could not mmap file: %s, %s\n", regf->regfile_name,
- strerror(errno));
- return NULL;
- }
- }
-
- /*
- * At this point, regf->base != NULL, and we should be able to read the
- * header
- */
-
- assert(regf->base != NULL);
-
- return (REGF_HDR *)regf->base;
-}
-
-/*
- * Validate a regf header
- * For now, do nothing, but we should check the checksum
- */
-int valid_regf_hdr(REGF_HDR *regf_hdr)
-{
- if (!regf_hdr) return 0;
-
- return 1;
-}
-
-/*
- * Process a VK header and return a value
- */
-VAL_KEY *process_vk(REGF *regf, VK_HDR *vk_hdr, int size)
-{
- char val_name[1024];
- int nam_len, dat_len, flag, dat_type, dat_off, vk_id;
- char *val_type;
- VAL_KEY *tmp = NULL;
-
- if (!vk_hdr) return NULL;
-
- if ((vk_id = SVAL(&vk_hdr->VK_ID)) != REG_VK_ID) {
- fprintf(stderr, "Unrecognized VK header ID: %0X, block: %0X, %s\n",
- vk_id, (int)vk_hdr, regf->regfile_name);
- return NULL;
- }
-
- nam_len = SVAL(&vk_hdr->nam_len);
- val_name[nam_len] = '\0';
- flag = SVAL(&vk_hdr->flag);
- dat_type = IVAL(&vk_hdr->dat_type);
- dat_len = IVAL(&vk_hdr->dat_len); /* If top bit, offset contains data */
- dat_off = IVAL(&vk_hdr->dat_off);
-
- tmp = (VAL_KEY *)malloc(sizeof(VAL_KEY));
- if (!tmp) {
- goto error;
- }
- bzero(tmp, sizeof(VAL_KEY));
- tmp->has_name = flag;
- tmp->data_type = dat_type;
-
- if (flag & 0x01) {
- strncpy(val_name, vk_hdr->dat_name, nam_len);
- tmp->name = strdup(val_name);
- if (!tmp->name) {
- goto error;
- }
- }
- else
- strncpy(val_name, "<No Name>", 10);
-
- /*
- * Allocate space and copy the data as a BLOB
- */
-
- if (dat_len) {
-
- char *dtmp = (char *)malloc(dat_len&0x7FFFFFFF);
-
- if (!dtmp) {
- goto error;
- }
-
- tmp->data_blk = dtmp;
-
- if ((dat_len&0x80000000) == 0) { /* The data is pointed to by the offset */
- char *dat_ptr = LOCN(regf->base, dat_off);
- bcopy(dat_ptr, dtmp, dat_len);
- }
- else { /* The data is in the offset */
- dat_len = dat_len & 0x7FFFFFFF;
- bcopy(&dat_off, dtmp, dat_len);
- }
-
- }
-
- val_type = val_to_str(dat_type, reg_type_names);
-
- /*
- * We need to save the data area as well
- */
-
- if (verbose) fprintf(stdout, " %s : %s : \n", val_name, val_type);
-
- return tmp;
-
- error:
- /* XXX: FIXME, free the partially allocated struct */
- return NULL;
-
-}
-
-/*
- * Process a VL Header and return a list of values
- */
-VAL_LIST *process_vl(REGF *regf, VL_TYPE vl, int count, int size)
-{
- int i, vk_off;
- VK_HDR *vk_hdr;
- VAL_LIST *tmp = NULL;
-
- if (-size < (count+1)*sizeof(int)){
- fprintf(stderr, "Error in VL header format. Size less than space required. %d\n", -size);
- return NULL;
- }
-
- tmp = (VAL_LIST *)malloc(sizeof(VAL_LIST) + (count - 1) * sizeof(VAL_KEY *));
- if (!tmp) {
- goto error;
- }
-
- for (i=0; i<count; i++) {
- vk_off = IVAL(&vl[i]);
- vk_hdr = (VK_HDR *)LOCN(regf->base, vk_off);
- tmp->vals[i] = process_vk(regf, vk_hdr, BLK_SIZE(vk_hdr));
- if (!tmp->vals[i]){
- goto error;
- }
- }
-
- tmp->val_count = count;
-
- return tmp;
-
- error:
- /* XXX: FIXME, free the partially allocated structure */
- return NULL;
-}
-
-/*
- * Process an LF Header and return a list of sub-keys
- */
-KEY_LIST *process_lf(REGF *regf, LF_HDR *lf_hdr, int size)
-{
- int count, i, nk_off;
- unsigned int lf_id;
- KEY_LIST *tmp;
-
- if (!lf_hdr) return NULL;
-
- if ((lf_id = SVAL(&lf_hdr->LF_ID)) != REG_LF_ID) {
- fprintf(stderr, "Unrecognized LF Header format: %0X, Block: %0X, %s.\n",
- lf_id, (int)lf_hdr, regf->regfile_name);
- return NULL;
- }
-
- assert(size < 0);
-
- count = SVAL(&lf_hdr->key_count);
-
- if (count <= 0) return NULL;
-
- /* Now, we should allocate a KEY_LIST struct and fill it in ... */
-
- tmp = (KEY_LIST *)malloc(sizeof(KEY_LIST) + (count - 1) * sizeof(REG_KEY *));
- if (!tmp) {
- goto error;
- }
-
- tmp->key_count = count;
-
- for (i=0; i<count; i++) {
- NK_HDR *nk_hdr;
-
- nk_off = IVAL(&lf_hdr->hr[i].nk_off);
- nk_hdr = (NK_HDR *)LOCN(regf->base, nk_off);
- tmp->keys[i] = nt_get_key_tree(regf, nk_hdr, BLK_SIZE(nk_hdr));
- if (!tmp->keys[i]) {
- goto error;
- }
- }
-
- return tmp;
-
- error:
- /* XXX: FIXME, free the partially allocated structure */
- return NULL;
-}
-
-/*
- * This routine is passed a NK_HDR pointer and retrieves the entire tree
- * from there down. It return a REG_KEY *.
- */
-REG_KEY *nt_get_key_tree(REGF *regf, NK_HDR *nk_hdr, int size)
-{
- REG_KEY *tmp = NULL;
- int name_len, clsname_len, lf_off, val_off, val_count, sk_off;
- unsigned int nk_id;
- LF_HDR *lf_hdr;
- VL_TYPE *vl;
- SK_HDR *sk_hdr;
- char key_name[1024], cls_name[1024];
-
- if (!nk_hdr) return NULL;
-
- if ((nk_id = SVAL(&nk_hdr->NK_ID)) != REG_NK_ID) {
- fprintf(stderr, "Unrecognized NK Header format: %08X, Block: %0X. %s\n",
- nk_id, (int)nk_hdr, regf->regfile_name);
- return NULL;
- }
-
- assert(size < 0);
-
- name_len = SVAL(&nk_hdr->nam_len);
- clsname_len = SVAL(&nk_hdr->clsnam_len);
-
- /*
- * The value of -size should be ge
- * (sizeof(NK_HDR) - 1 + name_len)
- * The -1 accounts for the fact that we included the first byte of
- * the name in the structure. clsname_len is the length of the thing
- * pointed to by clsnam_off
- */
-
- if (-size < (sizeof(NK_HDR) - 1 + name_len)) {
- fprintf(stderr, "Incorrect NK_HDR size: %d, %0X\n", -size, (int)nk_hdr);
- fprintf(stderr, "Sizeof NK_HDR: %d, name_len %d, clsname_len %d\n",
- sizeof(NK_HDR), name_len, clsname_len);
- /*return NULL;*/
- }
-
- if (verbose) fprintf(stdout, "NK HDR: Name len: %d, class name len: %d\n",
- name_len, clsname_len);
-
- /* Fish out the key name and process the LF list */
-
- assert(name_len < sizeof(key_name));
-
- /* Allocate the key struct now */
- tmp = (REG_KEY *)malloc(sizeof(REG_KEY));
- if (!tmp) return tmp;
- bzero(tmp, sizeof(REG_KEY));
-
- tmp->type = (SVAL(&nk_hdr->type)==0x2C?REG_ROOT_KEY:REG_SUB_KEY);
-
- strncpy(key_name, nk_hdr->key_nam, name_len);
- key_name[name_len] = '\0';
-
- if (verbose) fprintf(stdout, "Key name: %s\n", key_name);
-
- tmp->name = strdup(key_name);
- if (!tmp->name) {
- goto error;
- }
-
- /*
- * Fish out the class name, it is in UNICODE, while the key name is
- * ASCII :-)
- */
-
- if (clsname_len) { /* Just print in Ascii for now */
- char *clsnamep;
- int clsnam_off;
-
- clsnam_off = IVAL(&nk_hdr->clsnam_off);
- clsnamep = LOCN(regf->base, clsnam_off);
-
- bzero(cls_name, clsname_len);
- uni_to_ascii(clsnamep, cls_name, sizeof(cls_name), clsname_len);
-
- /*
- * I am keeping class name as an ascii string for the moment.
- * That means it needs to be converted on output.
- * XXX: FIXME
- */
-
- tmp->class_name = strdup(cls_name);
- if (!tmp->class_name) {
- goto error;
- }
-
- if (verbose) fprintf(stdout, " Class Name: %s\n", cls_name);
-
- }
-
- /*
- * If there are any values, process them here
- */
-
- val_count = IVAL(&nk_hdr->val_cnt);
-
- if (val_count) {
-
- val_off = IVAL(&nk_hdr->val_off);
- vl = (VL_TYPE *)LOCN(regf->base, val_off);
-
- tmp->values = process_vl(regf, *vl, val_count, BLK_SIZE(vl));
- if (!tmp->values) {
- goto error;
- }
-
- }
-
- /*
- * Also handle the SK header ...
- */
-
- sk_off = IVAL(&nk_hdr->sk_off);
- sk_hdr = (SK_HDR *)LOCN(regf->base, sk_off);
-
- if (sk_off != -1) {
-
- /* To be coded */
-
- }
-
- lf_off = IVAL(&nk_hdr->lf_off);
-
- /*
- * No more subkeys if lf_off == -1
- */
-
- if (lf_off != -1) {
-
- lf_hdr = (LF_HDR *)LOCN(regf->base, lf_off);
-
- tmp->sub_keys = process_lf(regf, lf_hdr, BLK_SIZE(lf_hdr));
- if (!tmp->sub_keys){
- goto error;
- }
-
- }
-
- return tmp;
-
- error:
- if (tmp) nt_delete_reg_key(tmp);
- return NULL;
-}
-
-int nt_load_registry(REGF *regf)
-{
- REGF_HDR *regf_hdr;
- unsigned int regf_id, hbin_id;
- HBIN_HDR *hbin_hdr;
- NK_HDR *first_key;
-
- /* Get the header */
-
- if ((regf_hdr = nt_get_regf_hdr(regf)) == NULL) {
- return -1;
- }
-
- /* Now process that header and start to read the rest in */
-
- if ((regf_id = IVAL(®f_hdr->REGF_ID)) != REG_REGF_ID) {
- fprintf(stderr, "Unrecognized NT registry header id: %0X, %s\n",
- regf_id, regf->regfile_name);
- return -1;
- }
-
- /*
- * Validate the header ...
- */
- if (!valid_regf_hdr(regf_hdr)) {
- fprintf(stderr, "Registry file header does not validate: %s\n",
- regf->regfile_name);
- return -1;
- }
-
- /* Update the last mod date, and then go get the first NK record and on */
-
- TTTONTTIME(regf, IVAL(®f_hdr->tim1), IVAL(®f_hdr->tim2));
-
- /*
- * The hbin hdr seems to be just uninteresting garbage. Check that
- * it is there, but that is all.
- */
-
- hbin_hdr = (HBIN_HDR *)(regf->base + REGF_HDR_BLKSIZ);
-
- if ((hbin_id = IVAL(&hbin_hdr->HBIN_ID)) != REG_HBIN_ID) {
- fprintf(stderr, "Unrecognized registry hbin hdr ID: %0X, %s\n",
- hbin_id, regf->regfile_name);
- return -1;
- }
-
- /*
- * Get a pointer to the first key from the hreg_hdr
- */
-
- first_key = (NK_HDR *)LOCN(regf->base, IVAL(®f_hdr->first_key));
-
- /*
- * Now, get the registry tree by processing that NK recursively
- */
-
- regf->root = nt_get_key_tree(regf, first_key, BLK_SIZE(first_key));
-
- assert(regf->root != NULL);
-
- return 1;
-}
-
-/*
- * Main code from here on ...
- */
-
-/*
- * key print function here ...
- */
-
-int print_key(char *path, char *name, char *class_name, int root,
- int terminal, int vals)
-{
-
- if (terminal) fprintf(stdout, "%s\\%s\n", path, name);
-
- return 1;
-}
-
-/*
- * Value print function here ...
- */
-int print_val(char *path, char *val_name, int val_type, int data_len,
- void *data_blk, int terminal, int first, int last)
-{
- if (!terminal && first)
- fprintf(stdout, "%s\n", path);
- fprintf(stdout, " %s : %s : \n", (val_name?val_name:"<No Name>"),
- val_to_str(val_type, reg_type_names));
- return 1;
-}
-
-void usage(void)
-{
- fprintf(stderr, "Usage: editreg [-v] [-k] <registryfile>\n");
- fprintf(stderr, "Version: 0.1\n\n");
- fprintf(stderr, "\n\t-v\t sets verbose mode");
-}
-
-int main(int argc, char *argv[])
-{
- REGF *regf;
- extern char *optarg;
- extern int optind;
- int opt;
-
- if (argc < 2) {
- usage();
- exit(1);
- }
-
- /*
- * Now, process the arguments
- */
-
- while ((opt = getopt(argc, argv, "vk")) != EOF) {
- switch (opt) {
- case 'v':
- verbose++;
- break;
-
- case 'k':
- break;
-
- default:
- usage();
- exit(1);
- break;
- }
- }
-
- if ((regf = nt_create_regf()) == NULL) {
- fprintf(stderr, "Could not create registry object: %s\n", strerror(errno));
- exit(2);
- }
-
- if (!nt_set_regf_input_file(regf, argv[optind])) {
- fprintf(stderr, "Could not set name of registry file: %s, %s\n",
- argv[1], strerror(errno));
- exit(3);
- }
-
- /* Now, open it, and bring it into memory :-) */
-
- if (nt_load_registry(regf) < 0) {
- fprintf(stderr, "Could not load registry: %s\n", argv[1]);
- exit(4);
- }
-
- /*
- * At this point, we should have a registry in memory and should be able
- * to iterate over it.
- */
-
- nt_key_iterator(regf, regf->root, 0, "", print_key, print_val);
- return 0;
-}
-
return 0;
}
-static uint32 get_maxrid(void)
-{
- SAM_ACCOUNT *pwd = NULL;
- uint32 max_rid = 0;
- GROUP_MAP *map = NULL;
- int num_entries = 0;
- int i;
-
- if (!pdb_setsampwent(False)) {
- DEBUG(0, ("load_sampwd_entries: Unable to open passdb.\n"));
- return 0;
- }
-
- for (; (NT_STATUS_IS_OK(pdb_init_sam(&pwd)))
- && pdb_getsampwent(pwd) == True; pwd=NULL) {
- uint32 rid;
-
- if (!sid_peek_rid(pdb_get_user_sid(pwd), &rid)) {
- DEBUG(0, ("can't get RID for user '%s'\n",
- pdb_get_username(pwd)));
- pdb_free_sam(&pwd);
- continue;
- }
-
- if (rid > max_rid)
- max_rid = rid;
-
- DEBUG(1,("%d is user '%s'\n", rid, pdb_get_username(pwd)));
- pdb_free_sam(&pwd);
- }
-
- pdb_endsampwent();
- pdb_free_sam(&pwd);
-
- if (!pdb_enum_group_mapping(SID_NAME_UNKNOWN, &map, &num_entries,
- ENUM_ONLY_MAPPED, MAPPING_WITHOUT_PRIV))
- return max_rid;
-
- for (i = 0; i < num_entries; i++) {
- uint32 rid;
-
- if (!sid_peek_check_rid(get_global_sam_sid(), &map[i].sid,
- &rid)) {
- DEBUG(3, ("skipping map for group '%s', SID %s\n",
- map[i].nt_name,
- sid_string_static(&map[i].sid)));
- continue;
- }
- DEBUG(1,("%d is group '%s'\n", rid, map[i].nt_name));
-
- if (rid > max_rid)
- max_rid = rid;
- }
-
- SAFE_FREE(map);
-
- return max_rid;
-}
-
-static int net_maxrid(int argc, const char **argv)
-{
- uint32 rid;
-
- if (argc != 0) {
- DEBUG(0, ("usage: net initrid\n"));
- return 1;
- }
-
- if ((rid = get_maxrid()) == 0) {
- DEBUG(0, ("can't get current maximum rid\n"));
- return 1;
- }
-
- d_printf("Currently used maximum rid: %d\n", rid);
-
- return 0;
-}
-
/* main function table */
static struct functable net_func[] = {
{"RPC", net_rpc},
{"GETLOCALSID", net_getlocalsid},
{"SETLOCALSID", net_setlocalsid},
{"GETDOMAINSID", net_getdomainsid},
- {"MAXRID", net_maxrid},
{"HELP", net_help},
{NULL, NULL}
* (print_cache_entry) and to flush it (delete_cache_entry).
* Both of them are defined by first arg of gencache_iterate() routine.
*/
-static void print_cache_entry(const char* keystr, const char* datastr,
- const time_t timeout, void* dptr)
+static void print_cache_entry(const char* keystr, const char* datastr, const time_t timeout)
{
- char* timeout_str;
- time_t now_t = time(NULL);
- struct tm timeout_tm, *now_tm;
- /* localtime returns statically allocated pointer, so timeout_tm
- has to be copied somewhere else */
- memcpy(&timeout_tm, localtime(&timeout), sizeof(struct tm));
- now_tm = localtime(&now_t);
-
- /* form up timeout string depending whether it's today's date or not */
- if (timeout_tm.tm_year != now_tm->tm_year ||
- timeout_tm.tm_mon != now_tm->tm_mon ||
- timeout_tm.tm_mday != now_tm->tm_mday) {
-
- timeout_str = asctime(&timeout_tm);
- timeout_str[strlen(timeout_str) - 1] = '\0'; /* remove tailing CR */
- } else
- asprintf(&timeout_str, "%.2d:%.2d:%.2d", timeout_tm.tm_hour,
- timeout_tm.tm_min, timeout_tm.tm_sec);
-
- d_printf("Key: %s\t Timeout: %s\t Value: %s %s\n", keystr,
- timeout_str, datastr, timeout > now_t ? "": "(expired)");
+ char* timeout_str = ctime(&timeout);
+ timeout_str[strlen(timeout_str) - 1] = '\0';
+ d_printf("Key: %s\t\t Value: %s\t\t Timeout: %s %s\n", keystr, datastr,
+ timeout_str, timeout > time(NULL) ? "": "(expired)");
}
-static void delete_cache_entry(const char* keystr, const char* datastr,
- const time_t timeout, void* dptr)
+static void delete_cache_entry(const char* keystr, const char* datastr, const time_t timeout)
{
if (!gencache_del(keystr))
d_printf("Couldn't delete entry! key = %s", keystr);
/**
- * Add an entry to the cache. If it does exist, then set it.
+ * Add an entry to the cache
*
* @param argv key, value and timeout are passed in command line
* @return 0 on success, otherwise failure
return -1;
}
- if (gencache_set(keystr, datastr, timeout)) {
+ if (gencache_add(keystr, datastr, timeout)) {
d_printf("New cache entry stored successfully.\n");
gencache_shutdown();
return 0;
- }
-
+ }
+
d_printf("Entry couldn't be added. Perhaps there's already such a key.\n");
gencache_shutdown();
return -1;
/**
- * Set new value of an existing entry in the cache. Fail If the entry doesn't
- * exist.
+ * Set new value of an existing entry in the cache
*
* @param argv key being searched and new value and timeout to set in the entry
* @return 0 on success, otherwise failure
return -1;
}
- if (gencache_set_only(keystr, datastr, timeout)) {
+ if (gencache_set(keystr, datastr, timeout)) {
d_printf("Cache entry set successfully.\n");
gencache_shutdown();
return 0;
if(gencache_del(keystr)) {
d_printf("Entry deleted.\n");
return 0;
- }
+ }
d_printf("Couldn't delete specified entry\n");
return -1;
}
if (gencache_get(keystr, &valuestr, &timeout)) {
- print_cache_entry(keystr, valuestr, timeout, NULL);
+ print_cache_entry(keystr, valuestr, timeout);
return 0;
- }
+ }
d_printf("Failed to find entry\n");
return -1;
}
pattern = argv[0];
- gencache_iterate(print_cache_entry, NULL, pattern);
+ gencache_iterate(print_cache_entry, pattern);
return 0;
}
static int net_cache_list(int argc, const char **argv)
{
const char* pattern = "*";
- gencache_iterate(print_cache_entry, NULL, pattern);
+ gencache_iterate(print_cache_entry, pattern);
gencache_shutdown();
return 0;
}
static int net_cache_flush(int argc, const char **argv)
{
const char* pattern = "*";
- gencache_iterate(delete_cache_entry, NULL, pattern);
+ gencache_iterate(delete_cache_entry, pattern);
gencache_shutdown();
return 0;
}
+++ /dev/null
-/*
- Unix SMB/CIFS implementation.
-
- Winbind status program.
-
- Copyright (C) Tim Potter 2000-2002
- Copyright (C) Andrew Bartlett 2002
- Copyright (C) Francesco Chemolli <kinkie@kame.usr.dsi.unimi.it> 2000
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-#include "includes.h"
-
-#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_WINBIND
-
-#define SQUID_BUFFER_SIZE 2010
-
-enum squid_mode {
- SQUID_2_5_BASIC,
- SQUID_2_4_BASIC
-};
-
-
-extern int winbindd_fd;
-
-static const char *helper_protocol;
-static const char *username;
-static const char *domain;
-static const char *workstation;
-static const char *hex_challenge;
-static const char *hex_lm_response;
-static const char *hex_nt_response;
-static unsigned char *challenge;
-static size_t challenge_len;
-static unsigned char *lm_response;
-static size_t lm_response_len;
-static unsigned char *nt_response;
-static size_t nt_response_len;
-
-static char *password;
-
-static char winbind_separator(void)
-{
- struct winbindd_response response;
- static BOOL got_sep;
- static char sep;
-
- if (got_sep)
- return sep;
-
- ZERO_STRUCT(response);
-
- /* Send off request */
-
- if (winbindd_request(WINBINDD_INFO, NULL, &response) !=
- NSS_STATUS_SUCCESS) {
- d_printf("could not obtain winbind separator!\n");
- return '\\';
- }
-
- sep = response.data.info.winbind_separator;
- got_sep = True;
-
- if (!sep) {
- d_printf("winbind separator was NULL!\n");
- return '\\';
- }
-
- return sep;
-}
-
-static const char *get_winbind_domain(void)
-{
- struct winbindd_response response;
-
- static fstring winbind_domain;
-
- ZERO_STRUCT(response);
-
- /* Send off request */
-
- if (winbindd_request(WINBINDD_DOMAIN_NAME, NULL, &response) !=
- NSS_STATUS_SUCCESS) {
- d_printf("could not obtain winbind domain name!\n");
- return NULL;
- }
-
- fstrcpy(winbind_domain, response.data.domain_name);
-
- return winbind_domain;
-
-}
-
-/* Authenticate a user with a plaintext password */
-
-static BOOL check_plaintext_auth(const char *user, const char *pass, BOOL stdout_diagnostics)
-{
- struct winbindd_request request;
- struct winbindd_response response;
- NSS_STATUS result;
-
- /* Send off request */
-
- ZERO_STRUCT(request);
- ZERO_STRUCT(response);
-
- fstrcpy(request.data.auth.user, user);
- fstrcpy(request.data.auth.pass, pass);
-
- result = winbindd_request(WINBINDD_PAM_AUTH, &request, &response);
-
- /* Display response */
-
- if (stdout_diagnostics) {
- if ((result != NSS_STATUS_SUCCESS) && (response.data.auth.nt_status == 0)) {
- d_printf("Reading winbind reply failed! (0x01)\n");
- }
-
- d_printf("%s (0x%x)\n",
- response.data.auth.nt_status_string,
- response.data.auth.nt_status);
- } else {
- if ((result != NSS_STATUS_SUCCESS) && (response.data.auth.nt_status == 0)) {
- DEBUG(1, ("Reading winbind reply failed! (0x01)\n"));
- }
-
- DEBUG(3, ("%s (0x%x)\n",
- response.data.auth.nt_status_string,
- response.data.auth.nt_status));
- }
-
- return (result == NSS_STATUS_SUCCESS);
-}
-
-static void manage_squid_basic_request(enum squid_mode squid_mode)
-{
- char buf[SQUID_BUFFER_SIZE+1];
- int length;
- char *c, *user, *pass;
- static BOOL err;
-
- if (x_fgets(buf, sizeof(buf)-1, x_stdin) == NULL) {
- DEBUG(1, ("fgets() failed! dying..... errno=%d (%s)\n", errno,
- strerror(errno)));
- exit(1); /* BIIG buffer */
- }
-
- c=memchr(buf,'\n',sizeof(buf)-1);
- if (c) {
- *c = '\0';
- length = c-buf;
- } else {
- err = 1;
- return;
- }
- if (err) {
- DEBUG(2, ("Oversized message\n"));
- x_fprintf(x_stderr, "ERR\n");
- err = 0;
- return;
- }
-
- DEBUG(10, ("Got '%s' from squid (length: %d).\n",buf,length));
-
- if (buf[0] == '\0') {
- DEBUG(2, ("Invalid Request\n"));
- x_fprintf(x_stderr, "ERR\n");
- return;
- }
-
- user=buf;
-
- pass=memchr(buf,' ',length);
- if (!pass) {
- DEBUG(2, ("Password not found. Denying access\n"));
- x_fprintf(x_stderr, "ERR\n");
- return;
- }
- *pass='\0';
- pass++;
-
- if (squid_mode == SQUID_2_5_BASIC) {
- rfc1738_unescape(user);
- rfc1738_unescape(pass);
- }
-
- if (check_plaintext_auth(user, pass, False)) {
- x_fprintf(x_stdout, "OK\n");
- } else {
- x_fprintf(x_stdout, "ERR\n");
- }
-}
-
-
-static void squid_basic(enum squid_mode squid_mode) {
- /* initialize FDescs */
- x_setbuf(x_stdout, NULL);
- x_setbuf(x_stderr, NULL);
- while(1) {
- manage_squid_basic_request(squid_mode);
- }
-}
-
-
-/* Authenticate a user with a challenge/response */
-
-static BOOL check_auth_crap(void)
-{
- struct winbindd_request request;
- struct winbindd_response response;
- NSS_STATUS result;
- /* Send off request */
-
- ZERO_STRUCT(request);
- ZERO_STRUCT(response);
-
- fstrcpy(request.data.auth_crap.user, username);
-
- fstrcpy(request.data.auth_crap.domain, domain);
- fstrcpy(request.data.auth_crap.workstation, workstation);
-
- memcpy(request.data.auth_crap.chal, challenge, MIN(challenge_len, 8));
-
- memcpy(request.data.auth_crap.lm_resp, lm_response, MIN(lm_response_len, sizeof(request.data.auth_crap.lm_resp)));
-
- memcpy(request.data.auth_crap.nt_resp, nt_response, MIN(nt_response_len, sizeof(request.data.auth_crap.nt_resp)));
-
- request.data.auth_crap.lm_resp_len = lm_response_len;
- request.data.auth_crap.nt_resp_len = nt_response_len;
-
- result = winbindd_request(WINBINDD_PAM_AUTH_CRAP, &request, &response);
-
- /* Display response */
-
- if ((result != NSS_STATUS_SUCCESS) && (response.data.auth.nt_status == 0)) {
- d_printf("Reading winbind reply failed! (0x01)\n");
- }
-
- d_printf("%s (0x%x)\n",
- response.data.auth.nt_status_string,
- response.data.auth.nt_status);
-
- return result == NSS_STATUS_SUCCESS;
-}
-
-/* Main program */
-
-enum {
- OPT_USERNAME = 1000,
- OPT_DOMAIN,
- OPT_WORKSTATION,
- OPT_CHALLENGE,
- OPT_RESPONSE,
- OPT_LM,
- OPT_NT,
- OPT_PASSWORD
-};
-
-/*************************************************************
- Routine to set hex password characters into an allocated array.
-**************************************************************/
-
-void hex_encode(const unsigned char *buff_in, size_t len, char **out_hex_buffer)
-{
- int i;
- char *hex_buffer;
-
- *out_hex_buffer = smb_xmalloc((len*2)+1);
- hex_buffer = *out_hex_buffer;
-
- for (i = 0; i < len; i++)
- slprintf(&hex_buffer[i*2], 3, "%02X", buff_in[i]);
-}
-
-/*************************************************************
- Routine to get the 32 hex characters and turn them
- into a 16 byte array.
-**************************************************************/
-
-BOOL hex_decode(const char *hex_buf_in, unsigned char **out_buffer, size_t *size)
-{
- int i;
- size_t hex_buf_in_len = strlen(hex_buf_in);
- unsigned char partial_byte_hex;
- unsigned char partial_byte;
- char *hexchars = "0123456789ABCDEF";
- char *p;
- BOOL high = True;
-
- if (!hex_buf_in)
- return (False);
-
- *size = (hex_buf_in_len + 1) / 2;
-
- *out_buffer = smb_xmalloc(*size);
-
- for (i = 0; i < hex_buf_in_len; i++) {
- partial_byte_hex = toupper(hex_buf_in[i]);
-
- p = strchr(hexchars, partial_byte_hex);
-
- if (!p)
- return (False);
-
- partial_byte = PTR_DIFF(p, hexchars);
-
- if (high) {
- (*out_buffer)[i / 2] = (partial_byte << 4);
- } else {
- (*out_buffer)[i / 2] |= partial_byte;
- }
- high = !high;
- }
- return (True);
-}
-
-
-int main(int argc, const char **argv)
-{
- int opt;
-
- poptContext pc;
- struct poptOption long_options[] = {
- POPT_AUTOHELP
-
- { "helper-protocol", 0, POPT_ARG_STRING, &helper_protocol, OPT_DOMAIN, "operate as a stdio-based helper", "helper protocol to use"},
- { "username", 0, POPT_ARG_STRING, &username, OPT_USERNAME, "username"},
- { "domain", 0, POPT_ARG_STRING, &domain, OPT_DOMAIN, "domain name"},
- { "workstation", 0, POPT_ARG_STRING, &domain, OPT_WORKSTATION, "workstation"},
- { "challenge", 0, POPT_ARG_STRING, &hex_challenge, OPT_CHALLENGE, "challenge (HEX encoded)"},
- { "lm-response", 0, POPT_ARG_STRING, &hex_lm_response, OPT_LM, "LM Response to the challenge (HEX encoded)"},
- { "nt-response", 0, POPT_ARG_STRING, &hex_nt_response, OPT_NT, "NT or NTLMv2 Response to the challenge (HEX encoded)"},
- { "password", 0, POPT_ARG_STRING, &password, OPT_PASSWORD, "User's plaintext password"},
- { NULL, 0, POPT_ARG_INCLUDE_TABLE, popt_common_debug },
- { NULL, 0, POPT_ARG_INCLUDE_TABLE, popt_common_configfile },
- { 0, 0, 0, 0 }
- };
-
- /* Samba client initialisation */
-
- dbf = x_stderr;
-
- /* Parse options */
-
- pc = poptGetContext("ntlm_auth", argc, argv, long_options, 0);
-
- /* Parse command line options */
-
- if (argc == 1) {
- poptPrintHelp(pc, stderr, 0);
- return 1;
- }
-
- pc = poptGetContext(NULL, argc, (const char **)argv, long_options,
- POPT_CONTEXT_KEEP_FIRST);
-
- while((opt = poptGetNextOpt(pc)) != -1) {
- switch (opt) {
- case OPT_CHALLENGE:
- if (!hex_decode(hex_challenge, &challenge, &challenge_len)) {
- fprintf(stderr, "hex decode of %s failed!\n", hex_challenge);
- exit(1);
- }
- break;
- case OPT_LM:
- if (!hex_decode(hex_lm_response, &lm_response, &lm_response_len)) {
- fprintf(stderr, "hex decode of %s failed!\n", lm_response);
- exit(1);
- }
- break;
- case OPT_NT:
- if (!hex_decode(hex_lm_response, &lm_response, &lm_response_len)) {
- fprintf(stderr, "hex decode of %s failed!\n", lm_response);
- exit(1);
- }
- break;
- }
- }
-
- if (helper_protocol) {
- if (strcmp(helper_protocol, "squid-2.5-basic")== 0) {
- squid_basic(SQUID_2_5_BASIC);
- } else if (strcmp(helper_protocol, "squid-2.4-basic")== 0) {
- squid_basic(SQUID_2_4_BASIC);
- } else {
- fprintf(stderr, "unknown helper protocol [%s]\n", helper_protocol);
- exit(1);
- }
- }
-
- if (domain == NULL) {
- domain = get_winbind_domain();
- }
-
- if (workstation == NULL) {
- workstation = "";
- }
-
- if (challenge) {
- if (!check_auth_crap()) {
- exit(1);
- }
- } else if (password) {
- fstring user;
- snprintf(user, sizeof(user)-1, "%s%c%s", domain, winbind_separator(), username);
- if (!check_plaintext_auth(user, password, True)) {
- exit(1);
- }
- }
-
- /* Exit code */
-
- poptFreeContext(pc);
- return 0;
-}
poptGetArg(pc); /* Drop argv[0], the program name */
if (user_name == NULL) {
- user_name = poptGetArg(pc);
+ user_name = strdup(poptGetArg(pc));
}
if (!lp_load(dyn_CONFIGFILE,True,False,False)) {
exit(1);
}
- if(lp_modules())
- smb_load_modules(lp_modules());
-
if (!init_names())
exit(1);
+++ /dev/null
-/*
- Samba Unix/Linux SMB client utility profiles.c
- Copyright (C) 2002 Richard Sharpe, rsharpe@richardsharpe.com
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
-
-/*************************************************************************
-
- A utility to report and change SIDs in registry files
-
- Many of the ideas in here come from other people and software.
- I first looked in Wine in misc/registry.c and was also influenced by
- http://www.wednesday.demon.co.uk/dosreg.html
-
- Which seems to contain comments from someone else. I reproduce them here
- incase the site above disappears. It actually comes from
- http://home.eunet.no/~pnordahl/ntpasswd/WinReg.txt.
-
-The windows NT registry has 2 different blocks, where one can occure many
-times...
-
-the "regf"-Block
-================
-
-"regf" is obviosly the abbreviation for "Registry file". "regf" is the
-signature of the header-block which is always 4kb in size, although only
-the first 64 bytes seem to be used and a checksum is calculated over
-the first 0x200 bytes only!
-
-Offset Size Contents
-0x00000000 D-Word ID: ASCII-"regf" = 0x66676572
-0x00000004 D-Word ???? //see struct REGF
-0x00000008 D-Word ???? Always the same value as at 0x00000004
-0x0000000C Q-Word last modify date in WinNT date-format
-0x00000014 D-Word 1
-0x00000018 D-Word 3
-0x0000001C D-Word 0
-0x00000020 D-Word 1
-0x00000024 D-Word Offset of 1st key record
-0x00000028 D-Word Size of the data-blocks (Filesize-4kb)
-0x0000002C D-Word 1
-0x000001FC D-Word Sum of all D-Words from 0x00000000 to
-0x000001FB //XOR of all words. Nigel
-
-I have analyzed more registry files (from multiple machines running
-NT 4.0 german version) and could not find an explanation for the values
-marked with ???? the rest of the first 4kb page is not important...
-
-the "hbin"-Block
-================
-I don't know what "hbin" stands for, but this block is always a multiple
-of 4kb in size.
-
-Inside these hbin-blocks the different records are placed. The memory-
-management looks like a C-compiler heap management to me...
-
-hbin-Header
-===========
-Offset Size Contents
-0x0000 D-Word ID: ASCII-"hbin" = 0x6E696268
-0x0004 D-Word Offset from the 1st hbin-Block
-0x0008 D-Word Offset to the next hbin-Block
-0x001C D-Word Block-size
-
-The values in 0x0008 and 0x001C should be the same, so I don't know
-if they are correct or swapped...
-
-From offset 0x0020 inside a hbin-block data is stored with the following
-format:
-
-Offset Size Contents
-0x0000 D-Word Data-block size //this size must be a
-multiple of 8. Nigel
-0x0004 ???? Data
-
-If the size field is negative (bit 31 set), the corresponding block
-is free and has a size of -blocksize!
-
-The data is stored as one record per block. Block size is a multiple
-of 4 and the last block reaches the next hbin-block, leaving no room.
-
-Records in the hbin-blocks
-==========================
-
-nk-Record
-
- The nk-record can be treated as a kombination of tree-record and
- key-record of the win 95 registry.
-
-lf-Record
-
- The lf-record is the counterpart to the RGKN-record (the
- hash-function)
-
-vk-Record
-
- The vk-record consists information to a single value.
-
-sk-Record
-
- sk (? Security Key ?) is the ACL of the registry.
-
-Value-Lists
-
- The value-lists contain information about which values are inside a
- sub-key and don't have a header.
-
-Datas
-
- The datas of the registry are (like the value-list) stored without a
- header.
-
-All offset-values are relative to the first hbin-block and point to the
-block-size field of the record-entry. to get the file offset, you have to add
-the header size (4kb) and the size field (4 bytes)...
-
-the nk-Record
-=============
-Offset Size Contents
-0x0000 Word ID: ASCII-"nk" = 0x6B6E
-0x0002 Word for the root-key: 0x2C, otherwise 0x20 //key symbolic links 0x10. Nigel
-0x0004 Q-Word write-date/time in windows nt notation
-0x0010 D-Word Offset of Owner/Parent key
-0x0014 D-Word number of sub-Keys
-0x001C D-Word Offset of the sub-key lf-Records
-0x0024 D-Word number of values
-0x0028 D-Word Offset of the Value-List
-0x002C D-Word Offset of the sk-Record
-
-0x0030 D-Word Offset of the Class-Name //see NK structure for the use of these fields. Nigel
-0x0044 D-Word Unused (data-trash) //some kind of run time index. Does not appear to be important. Nigel
-0x0048 Word name-length
-0x004A Word class-name length
-0x004C ???? key-name
-
-the Value-List
-==============
-Offset Size Contents
-0x0000 D-Word Offset 1st Value
-0x0004 D-Word Offset 2nd Value
-0x???? D-Word Offset nth Value
-
-To determine the number of values, you have to look at the owner-nk-record!
-
-Der vk-Record
-=============
-Offset Size Contents
-0x0000 Word ID: ASCII-"vk" = 0x6B76
-0x0002 Word name length
-0x0004 D-Word length of the data //if top bit is set when offset contains data. Nigel
-0x0008 D-Word Offset of Data
-0x000C D-Word Type of value
-0x0010 Word Flag
-0x0012 Word Unused (data-trash)
-0x0014 ???? Name
-
-If bit 0 of the flag-word is set, a name is present, otherwise the value has no name (=default)
-
-If the data-size is lower 5, the data-offset value is used to store the data itself!
-
-The data-types
-==============
-Wert Beteutung
-0x0001 RegSZ: character string (in UNICODE!)
-0x0002 ExpandSZ: string with "%var%" expanding (UNICODE!)
-0x0003 RegBin: raw-binary value
-0x0004 RegDWord: Dword
-0x0007 RegMultiSZ: multiple strings, separated with 0
- (UNICODE!)
-
-The "lf"-record
-===============
-Offset Size Contents
-0x0000 Word ID: ASCII-"lf" = 0x666C
-0x0002 Word number of keys
-0x0004 ???? Hash-Records
-
-Hash-Record
-===========
-Offset Size Contents
-0x0000 D-Word Offset of corresponding "nk"-Record
-0x0004 D-Word ASCII: the first 4 characters of the key-name, padded with 0's. Case sensitiv!
-
-Keep in mind, that the value at 0x0004 is used for checking the data-consistency! If you change the
-key-name you have to change the hash-value too!
-
-//These hashrecords must be sorted low to high within the lf record. Nigel.
-
-The "sk"-block
-==============
-(due to the complexity of the SAM-info, not clear jet)
-
-Offset Size Contents
-0x0000 Word ID: ASCII-"sk" = 0x6B73
-0x0002 Word Unused
-0x0004 D-Word Offset of previous "sk"-Record
-0x0008 D-Word Offset of next "sk"-Record
-0x000C D-Word usage-counter
-0x0010 D-Word Size of "sk"-record in bytes
-???? //standard self
-relative security desciptor. Nigel
-???? ???? Security and auditing settings...
-????
-
-The usage counter counts the number of references to this
-"sk"-record. You can use one "sk"-record for the entire registry!
-
-Windows nt date/time format
-===========================
-The time-format is a 64-bit integer which is incremented every
-0,0000001 seconds by 1 (I don't know how accurate it realy is!)
-It starts with 0 at the 1st of january 1601 0:00! All values are
-stored in GMT time! The time-zone is important to get the real
-time!
-
-Common values for win95 and win-nt
-==================================
-Offset values marking an "end of list", are either 0 or -1 (0xFFFFFFFF).
-If a value has no name (length=0, flag(bit 0)=0), it is treated as the
-"Default" entry...
-If a value has no data (length=0), it is displayed as empty.
-
-simplyfied win-3.?? registry:
-=============================
-
-+-----------+
-| next rec. |---+ +----->+------------+
-| first sub | | | | Usage cnt. |
-| name | | +-->+------------+ | | length |
-| value | | | | next rec. | | | text |------->+-------+
-+-----------+ | | | name rec. |--+ +------------+ | xxxxx |
- +------------+ | | value rec. |-------->+------------+ +-------+
- v | +------------+ | Usage cnt. |
-+-----------+ | | length |
-| next rec. | | | text |------->+-------+
-| first sub |------+ +------------+ | xxxxx |
-| name | +-------+
-| value |
-+-----------+
-
-Greatly simplyfied structure of the nt-registry:
-================================================
-
-+---------------------------------------------------------------+
-| |
-v |
-+---------+ +---------->+-----------+ +----->+---------+ |
-| "nk" | | | lf-rec. | | | nk-rec. | |
-| ID | | | # of keys | | | parent |---+
-| Date | | | 1st key |--+ | .... |
-| parent | | +-----------+ +---------+
-| suk-keys|-----+
-| values |--------------------->+----------+
-| SK-rec. |---------------+ | 1. value |--> +----------+
-| class |--+ | +----------+ | vk-rec. |
-+---------+ | | | .... |
- v | | data |--> +-------+
- +------------+ | +----------+ | xxxxx |
- | Class name | | +-------+
- +------------+ |
- v
- +---------+ +---------+
- +----->| next sk |--->| Next sk |--+
- | +---| prev sk |<---| prev sk | |
- | | | .... | | ... | |
- | | +---------+ +---------+ |
- | | ^ | |
- | +----------+ |
- +-------------------------------+
-
----------------------------------------------------------------------------
-
-Hope this helps.... (Although it was "fun" for me to uncover this things,
- it took me several sleepless nights ;)
-
- B.D.
-
-*************************************************************************/
-#include "includes.h"
-#include <stdio.h>
-#include <errno.h>
-#include <sys/types.h>
-#include <sys/stat.h>
-#include <unistd.h>
-#include <sys/mman.h>
-
-typedef unsigned int DWORD;
-typedef unsigned short WORD;
-
-#define REG_REGF_ID 0x66676572
-
-typedef struct regf_block {
- DWORD REGF_ID; /* regf */
- DWORD uk1;
- DWORD uk2;
- DWORD tim1, tim2;
- DWORD uk3; /* 1 */
- DWORD uk4; /* 3 */
- DWORD uk5; /* 0 */
- DWORD uk6; /* 1 */
- DWORD first_key; /* offset */
- unsigned int dblk_size;
- DWORD uk7[116]; /* 1 */
- DWORD chksum;
-} REGF_HDR;
-
-typedef struct hbin_sub_struct {
- DWORD dblocksize;
- char data[1];
-} HBIN_SUB_HDR;
-
-#define REG_HBIN_ID 0x6E696268
-
-typedef struct hbin_struct {
- DWORD HBIN_ID; /* hbin */
- DWORD next_off;
- DWORD prev_off;
- DWORD uk1;
- DWORD uk2;
- DWORD uk3;
- DWORD uk4;
- DWORD blk_size;
- HBIN_SUB_HDR hbin_sub_hdr;
-} HBIN_HDR;
-
-#define REG_NK_ID 0x6B6E
-
-typedef struct nk_struct {
- WORD NK_ID;
- WORD type;
- DWORD t1, t2;
- DWORD uk1;
- DWORD own_off;
- DWORD subk_num;
- DWORD uk2;
- DWORD lf_off;
- DWORD uk3;
- DWORD val_cnt;
- DWORD val_off;
- DWORD sk_off;
- DWORD clsnam_off;
-} NK_HDR;
-
-#define REG_SK_ID 0x6B73
-
-typedef struct sk_struct {
- WORD SK_ID;
- WORD uk1;
- DWORD prev_off;
- DWORD next_off;
- DWORD ref_cnt;
- DWORD rec_size;
- char sec_desc[1];
-} SK_HDR;
-
-typedef struct sec_desc_rec {
- WORD rev;
- WORD type;
- DWORD owner_off;
- DWORD group_off;
- DWORD sacl_off;
- DWORD dacl_off;
-} MY_SEC_DESC;
-
-typedef struct ace_struct {
- unsigned char type;
- unsigned char flags;
- unsigned short length;
- unsigned int perms;
- DOM_SID trustee;
-} ACE;
-
-typedef struct acl_struct {
- WORD rev;
- WORD size;
- DWORD num_aces;
- ACE *aces; /* One or more ACEs */
-} ACL;
-
-#define OFF(f) (0x1000 + (f) + 4)
-
-void print_sid(DOM_SID *sid);
-
-int verbose = 1;
-DOM_SID old_sid, new_sid;
-int change = 0, new = 0;
-
-/* Compare two SIDs for equality */
-int my_sid_equal(DOM_SID *s1, DOM_SID *s2)
-{
- int sa1, sa2;
-
- if (s1->sid_rev_num != s2->sid_rev_num) return 0;
-
- sa1 = s1->num_auths; sa2 = s2->num_auths;
-
- if (sa1 != sa2) return 0;
-
- return !bcmp((char *)&s1->id_auth, (char *)&s2->id_auth,
- 6 + sa1 * 4);
-
-}
-
-/*
- * Quick and dirty to read a SID in S-1-5-21-x-y-z-rid format and
- * construct a DOM_SID
- */
-int get_sid(DOM_SID *sid, char *sid_str)
-{
- int i = 0, auth;
- char *lstr;
-
- if (strncmp(sid_str, "S-1-5", 5)) {
- fprintf(stderr, "Does not conform to S-1-5...: %s\n", sid_str);
- return 0;
- }
-
- /* We only allow strings of form S-1-5... */
-
- sid->sid_rev_num = 1;
- sid->id_auth[5] = 5;
-
- lstr = sid_str + 5;
-
- while (1) {
- if (!lstr || !lstr[0] || sscanf(lstr, "-%u", &auth) == 0) {
- if (i < 4) {
- fprintf(stderr, "Not of form -d-d...: %s, %u\n", lstr, i);
- return 0;
- }
- sid->num_auths=i;
- print_sid(sid);
- return 1;
- }
-
- SIVAL(&sid->sub_auths[i], 0, auth);
- i++;
- lstr = strchr(lstr + 1, '-');
- }
-
- return 1;
-}
-
-/*
- * Replace SID1, component by component with SID2
- * Assumes will never be called with unequal length SIDS
- * so only touches 21-x-y-z-rid portion
- * This routine does not need to deal with endianism as
- * long as the incoming SIDs are both in the same (LE) format.
- */
-void change_sid(DOM_SID *s1, DOM_SID *s2)
-{
- int i;
-
- for (i=0; i<s1->num_auths; i++) {
- s1->sub_auths[i] = s2->sub_auths[i];
- }
-}
-
-void print_sid(DOM_SID *sid)
-{
- int i, comps = sid->num_auths;
- fprintf(stdout, "S-%u-%u", sid->sid_rev_num, sid->id_auth[5]);
-
- for (i = 0; i < comps; i++) {
-
- fprintf(stdout, "-%u", IVAL(&sid->sub_auths[i],0));
-
- }
- fprintf(stdout, "\n");
-}
-
-void process_sid(DOM_SID *sid, DOM_SID *o_sid, DOM_SID *n_sid)
-{
- int i;
- if (my_sid_equal(sid, o_sid)) {
-
- for (i=0; i<sid->num_auths; i++) {
- sid->sub_auths[i] = n_sid->sub_auths[i];
-
- }
-
- }
-
-}
-
-void process_acl(ACL *acl, char *prefix)
-{
- int ace_cnt, i;
- ACE *ace;
-
- ace_cnt = IVAL(&acl->num_aces, 0);
- ace = (ACE *)&acl->aces;
- if (verbose) fprintf(stdout, "%sACEs: %u\n", prefix, ace_cnt);
- for (i=0; i<ace_cnt; i++) {
- if (verbose) fprintf(stdout, "%s Perms: %08X, SID: ", prefix,
- IVAL(&ace->perms, 0));
- if (change)
- process_sid(&ace->trustee, &old_sid, &new_sid);
- print_sid(&ace->trustee);
- ace = (ACE *)((char *)ace + SVAL(&ace->length, 0));
- }
-}
-
-void usage(void)
-{
- fprintf(stderr, "usage: profiles [-c <OLD-SID> -n <NEW-SID>] <profilefile>\n");
- fprintf(stderr, "Version: %s\n", VERSION);
- fprintf(stderr, "\n\t-v\t sets verbose mode");
- fprintf(stderr, "\n\t-c S-1-5-21-z-y-x-oldrid - provides SID to change");
- fprintf(stderr, "\n\t-n S-1-5-21-a-b-c-newrid - provides SID to change to");
- fprintf(stderr, "\n\t\tBoth must be present if the other is.");
- fprintf(stderr, "\n\t\tIf neither present, just report the SIDs found\n");
-}
-
-int main(int argc, char *argv[])
-{
- extern char *optarg;
- extern int optind;
- int opt;
- int fd, start = 0;
- char *base;
- struct stat sbuf;
- REGF_HDR *regf_hdr;
- HBIN_HDR *hbin_hdr;
- NK_HDR *nk_hdr;
- SK_HDR *sk_hdr;
- WORD first_sk_off, sk_off;
- MY_SEC_DESC *sec_desc;
- int *ptr;
-
- if (argc < 2) {
- usage();
- exit(1);
- }
-
- /*
- * Now, process the arguments
- */
-
- while ((opt = getopt(argc, argv, "c:n:v")) != EOF) {
- switch (opt) {
- case 'c':
- change = 1;
- if (!get_sid(&old_sid, optarg)) {
- fprintf(stderr, "Argument to -c should be a SID in form of S-1-5-...\n");
- usage();
- exit(254);
- }
- break;
-
- case 'n':
- new = 1;
- if (!get_sid(&new_sid, optarg)) {
- fprintf(stderr, "Argument to -n should be a SID in form of S-1-5-...\n");
- usage();
- exit(253);
- }
-
- break;
-
- case 'v':
- verbose++;
- break;
-
- default:
- usage();
- exit(255);
- }
- }
-
- if ((!change & new) || (change & !new)) {
- fprintf(stderr, "You must specify both -c and -n if one or the other is set!\n");
- usage();
- exit(252);
- }
-
- fd = open(argv[optind], O_RDWR, 0000);
-
- if (fd < 0) {
- fprintf(stderr, "Could not open %s: %s\n", argv[optind],
- strerror(errno));
- exit(2);
- }
-
- if (fstat(fd, &sbuf) < 0) {
- fprintf(stderr, "Could not stat file %s, %s\n", argv[optind],
- strerror(errno));
- exit(3);
- }
-
- /*
- * Now, mmap the file into memory, check the header and start
- * dealing with the records. We are interested in the sk record
- */
- start = 0;
- base = mmap(&start, sbuf.st_size, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
-
- if ((int)base == -1) {
- fprintf(stderr, "Could not mmap file: %s, %s\n", argv[optind],
- strerror(errno));
- exit(4);
- }
-
- /*
- * In what follows, and in places above, in order to work on both LE and
- * BE platforms, we have to use the Samba macros to extract SHORT, LONG
- * and associated UNSIGNED quantities from the data in the mmap'd file.
- * NOTE, however, that we do not need to do anything with memory
- * addresses that we construct from pointers in our address space.
- * For example,
- *
- * sec_desc = (MY_SEC_DESC *)&(sk_hdr->sec_desc[0]);
- *
- * is simply taking the address of a structure we already have the address
- * of in our address space, while, the fields within it, will have to
- * be accessed with the macros:
- *
- * owner_sid = (DOM_SID *)(&sk_hdr->sec_desc[0] +
- * IVAL(&sec_desc->owner_off, 0));
- *
- * Which is pulling out an offset and adding it to an existing pointer.
- *
- */
-
- regf_hdr = (REGF_HDR *)base;
-
- if (verbose) fprintf(stdout, "Registry file size: %u\n", (unsigned int)sbuf.st_size);
-
- if (IVAL(®f_hdr->REGF_ID, 0) != REG_REGF_ID) {
- fprintf(stderr, "Incorrect Registry file (doesn't have header ID): %s\n", argv[optind]);
- exit(5);
- }
-
- if (verbose) fprintf(stdout, "First Key Off: %u, Data Block Size: %u\n",
- IVAL(®f_hdr->first_key, 0),
- IVAL(®f_hdr->dblk_size, 0));
-
- hbin_hdr = (HBIN_HDR *)(base + 0x1000); /* No need for Endian stuff */
-
- /*
- * This should be the hbin_hdr
- */
-
- if (IVAL(&hbin_hdr->HBIN_ID, 0) != REG_HBIN_ID) {
- fprintf(stderr, "Incorrect hbin hdr: %s\n", argv[optind]);
- exit(6);
- }
-
- if (verbose) fprintf(stdout, "Next Off: %u, Prev Off: %u\n",
- IVAL(&hbin_hdr->next_off, 0),
- IVAL(&hbin_hdr->prev_off, 0));
-
- nk_hdr = (NK_HDR *)(base + 0x1000 + IVAL(®f_hdr->first_key, 0) + 4);
-
- if (SVAL(&nk_hdr->NK_ID, 0) != REG_NK_ID) {
- fprintf(stderr, "Incorrect NK Header: %s\n", argv[optind]);
- exit(7);
- }
-
- sk_off = first_sk_off = IVAL(&nk_hdr->sk_off, 0);
- if (verbose) {
- fprintf(stdout, "Type: %0x\n", SVAL(&nk_hdr->type, 0));
- fprintf(stdout, "SK Off : %o\n", (0x1000 + sk_off + 4));
- }
-
- sk_hdr = (SK_HDR *)(base + 0x1000 + sk_off + 4);
-
- do {
- DOM_SID *owner_sid, *group_sid;
- ACL *sacl, *dacl;
- if (SVAL(&sk_hdr->SK_ID, 0) != REG_SK_ID) {
- fprintf(stderr, "Incorrect SK Header format: %08X\n",
- (0x1000 + sk_off + 4));
- exit(8);
- }
- ptr = (int *)sk_hdr;
- if (verbose) fprintf(stdout, "Off: %08X, Refs: %u, Size: %u\n",
- sk_off, IVAL(&sk_hdr->ref_cnt, 0),
- IVAL(&sk_hdr->rec_size, 0));
-
- sec_desc = (MY_SEC_DESC *)&(sk_hdr->sec_desc[0]);
- owner_sid = (DOM_SID *)(&sk_hdr->sec_desc[0] +
- IVAL(&sec_desc->owner_off, 0));
- group_sid = (DOM_SID *)(&sk_hdr->sec_desc[0] +
- IVAL(&sec_desc->group_off, 0));
- sacl = (ACL *)(&sk_hdr->sec_desc[0] +
- IVAL(&sec_desc->sacl_off, 0));
- dacl = (ACL *)(&sk_hdr->sec_desc[0] +
- IVAL(&sec_desc->dacl_off, 0));
- if (verbose)fprintf(stdout, " Owner SID: ");
- if (change) process_sid(owner_sid, &old_sid, &new_sid);
- if (verbose) print_sid(owner_sid);
- if (verbose) fprintf(stdout, " Group SID: ");
- if (change) process_sid(group_sid, &old_sid, &new_sid);
- if (verbose) print_sid(group_sid);
- fprintf(stdout, " SACL: ");
- if (!sec_desc->sacl_off) { /* LE zero == BE zero */
- if (verbose) fprintf(stdout, "NONE\n");
- }
- else
- process_acl(sacl, " ");
- if (verbose) fprintf(stdout, " DACL: ");
- if (!sec_desc->dacl_off) {
- if (verbose) fprintf(stdout, "NONE\n");
- }
- else
- process_acl(dacl, " ");
- sk_off = IVAL(&sk_hdr->prev_off, 0);
- sk_hdr = (SK_HDR *)(base + OFF(IVAL(&sk_hdr->prev_off, 0)));
- } while (sk_off != first_sk_off);
-
- munmap(base, sbuf.st_size);
-
- close(fd);
- return 0;
-}
static BOOL inetd_server;
static BOOL got_request;
+static void unescape(char *buf)
+{
+ char *p=buf;
+
+ while ((p=strchr_m(p,'+')))
+ *p = ' ';
+
+ p = buf;
+
+ while (p && *p && (p=strchr_m(p,'%'))) {
+ int c1 = p[1];
+ int c2 = p[2];
+
+ if (c1 >= '0' && c1 <= '9')
+ c1 = c1 - '0';
+ else if (c1 >= 'A' && c1 <= 'F')
+ c1 = 10 + c1 - 'A';
+ else if (c1 >= 'a' && c1 <= 'f')
+ c1 = 10 + c1 - 'a';
+ else {p++; continue;}
+
+ if (c2 >= '0' && c2 <= '9')
+ c2 = c2 - '0';
+ else if (c2 >= 'A' && c2 <= 'F')
+ c2 = 10 + c2 - 'A';
+ else if (c2 >= 'a' && c2 <= 'f')
+ c2 = 10 + c2 - 'a';
+ else {p++; continue;}
+
+ *p = (c1<<4) | c2;
+
+ memmove(p+1, p+3, strlen(p+3)+1);
+ p++;
+ }
+}
+
+
static char *grab_line(FILE *f, int *cl)
{
char *ret = NULL;
!variables[num_variables].value)
continue;
- rfc1738_unescape(variables[num_variables].value);
- rfc1738_unescape(variables[num_variables].name);
+ unescape(variables[num_variables].value);
+ unescape(variables[num_variables].name);
#ifdef DEBUG_COMMENTS
printf("<!== POST var %s has value \"%s\" ==>\n",
!variables[num_variables].value)
continue;
- rfc1738_unescape(variables[num_variables].value);
- rfc1738_unescape(variables[num_variables].name);
+ unescape(variables[num_variables].value);
+ unescape(variables[num_variables].name);
#ifdef DEBUG_COMMENTS
printf("<!== Commandline var %s has value \"%s\" ==>\n",
<li><b>Books</b>
<ul>
<li><a href="/swat/using_samba/index.html" target="docs">Using Samba</a> - by Robert Eckstein, David Collier-Brown and Peter Kelly
- <li><a href="/swat/help/Samba-HOWTO.html">The Samba HOWTO Collection</a>
+ </ul>
+ <li><b>Samba HOWTO Collection</b></li>
+ <ul>
+ <li><a href="/swat/help/Samba-HOWTO-Collection.html">Entire Collection (one file)</a>
+ <li><a href="/swat/help/DOMAIN_MEMBER.html">security = domain in Samba 2.x</a>
+ <li><a href="/swat/help/winbind.html">Unified Logons between Windows NT and UNIX Using Winbind</a>
+ <li><a href="/swat/help/msdfs_setup.html">Setting Samba as an MS-DFS server</a>
+ <li><a href="/swat/help/NT_Security.html">UNIX Permission Bits and Samba 2.x</a>
+ <li><a href="/swat/help/OS2-Client-HOWTO.html">OS/2 Clients and Samba</a>
+ <li><a href="/swat/help/printer_driver2.html">Printing under Samba 2.2.x</a>
+ <li><a href="/swat/help/UNIX_INSTALL.html">HOWTO Install and Test Samba</a>
+ <li><a href="/swat/help/Integrating-with-Windows.html">Integrating Name Resolution and Authentication Services</a>
+ <li><a href="/swat/help/CVS-Access.html">CVS Access to Samba code</a>
</ul>
</ul>
git.samba.org / samba.git / commitdiff