diff options
70 files changed, 18554 insertions, 17354 deletions
diff --git a/docs/Samba-Developers-Guide.pdf b/docs/Samba-Developers-Guide.pdf index a2aa5f1b84..0ca86fa63e 100644 --- a/docs/Samba-Developers-Guide.pdf +++ b/docs/Samba-Developers-Guide.pdf @@ -1389,11 +1389,11 @@ endobj << /S /GoTo /D [930 0 R /Fit ] >> endobj 932 0 obj << -/Length 250 +/Length 239 /Filter /FlateDecode >> stream -xڍJ1s2f2E-<xEV흸E2%!`(Lo<Yjh"0JJ?S3vҝzACH?_(Ԟk)WxY Zed2sl=cؽZ!5T:>o2ϝ^A (!'RQ)T]Ţf{h$v֧sa>s`|?Y01߾ +xڍJ19&3$9'sbZh|{'R AȠ>2C1)p <i臈cy"SȐ8MAAX%"odxlG#SH]||d/';|.mBf5I9 )]Bl PFBsلzezpdwxP%P/5}a9N=_ߣ
cI/?cMendstream endobj 930 0 obj << /Type /Page @@ -1413,15 +1413,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 944 0 obj << -/Length 1050 +/Length 999 /Filter /FlateDecode >> stream -xڍVM6ϯq@$1T&7$Mbۭa~ryȽ4KWB -Mc57BѸX+8c}ݍWs -i"1s{z9VsNp ,Q5VK6T5-0 ٩Y-T^'mQ_8(ü3*n 6ȈV:[4I<
Cp ,t§֜(јfSϺpv'R4NI_e]ج2d6><aVEL4@Awng?ۍmPpV1^utB5'k8[xhGΫֵPP L$8,nlq.-pAcr *׃{7&U -@=gk}nu_4vuItWǗgxDf1,anxC f/=OA5BZԱ\V\m2S06ofKٗ. Wr%xO{\#[@ނK`n
qOq -O¡e-,ogŸ0Þ>6soꊁ&V'L<W-w6endstream +xڝV[o6~ϯۨѢ(꒷vh^=mk%C\(%Ma也<TP2ȋL|GloH&MafmDfeFow7;m2.݁wG%Ʌ6pcF s6swS/ݲXq}o(MSqZ-Z_{dmjnMʧ߽Rı,AGI.㲤S;A}r1BlU֮z\hث-vՇI)>bpFu)bڱUI&4
Iێmd:R|#Ad0a0,֞JerArN è<&գ;QDoEp>(0X>bKMF]7_f?B>W5G/+ +U~47v>T"ȪoXN%}˛H{tNNЀ¹VhZ|鬳$0XsY,u)FKwLQ] +xJE\b1M`
4 W,x0oͻX:MeӌI
[0ɹf϶JdJY"lly>҉*fJImJVH +e<t@sӅ`kdVp$g6_m|{{ [zƞ*ۿ^'ˍԙo]*H\ g/'D,M +0.3߰ +eG. +>pk{;Voli*1S%Z~M}|EAx2j5pQqO֢[K +reRkc4pSO37O%ˇaa"IU:5?:oX_계FjxUbޮ8GIlMTӓ<L#6K'?ߥ25~%P.A/Y? +Iendstream endobj 943 0 obj << /Type /Page @@ -1463,19 +1467,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 961 0 obj << -/Length 3113 +/Length 1930 /Filter /FlateDecode >> stream -xڵ[KsFWAA֖d;{9@L1CRq_3`0/0S>vwOt7t?:9x5+eArNgE6[7^P#.3+⧟ȼ~U5^\p~sq{^NzUKVpR|v3"e|R\yN -QYE>Θ٬{i]7K.Y|⛻^}JYJBsrQ"i/C$eQs98aFйgsԱ]g4+Gjv5/>|eS,\52F=}ՠoͨحStZG[ś/nq/|hz{_oч -a/@4|fV9
AU*u2H!S^,]A#-9xeӂ9Fs "4Dm!xyV8(s:tkt]>* -),ϭYEg/.On ϋ4FfAW]`]z -( !g艊ى'pdeQ#3+k0eU~ZGPpm6 -XPDE%$~.2j_@Y9HvI]c霼|/,t~qyyCtWlCAu[n;%<Nwي]gt@ {d#Ff\%,h}ԟcY)Xw/by9q@UQLAWbǸC;2Gj<*QZ>)3P -5| Lm銣mtJs?~RAD -'B}5Rţ\`ɥ:7~ChpNqz^%SFL?Jos%9M8F~=?f}PY?4?|`sp$-5BEOkvtL2cЕ`k0f5*^W[&K/XAx* D*/~{){ٷ+&W"]
9ՐA_p( 2q~hIz$p1X;9k8Ā0'ޓMBwca՜@8"3 -^'0HMF"<;GiiS#j;Pwڤ~DHrBBt?LЕ`k0D}Ie$(r"}F8&~*F\>K#uuWcZGo"Wɘv2op%%G%L'3E2 +xZKsFWV>Xt:r$M&vXImESl(%:/%eEز=4%DbaC1zep1Z8S{~g z`o3vslUNVO1Q9bvG3uMY< +EM?p|W
'W$1n ) + џ׃ۗ +m3mxf)&7o"#%-R*F^MUge[)oo4CE<4o_$op[_q=+o:QկEW9\ ++S#d3s<XDfmT]a-izggnŭJ͙~|$d9q +\fq#l"kLcT!{,(9!LxղhIw5ud 3FYΣ'd.}6ma^粊* +09a_'+I^.8*ӊ3g +3CBe*"B,/9Cӧ BK~~"8L2 ,( oedaIʫ/>bNgAA$qho]{B]DGAX4@ {4kyd.OeI6*HDXd\7Ia)gRfv5eMQĶlbhs{x`Eve: +cr11{Fқ&p8&Od2AH_`Ÿ1?bCi٦6$✤CI6[eYFW˺wdWf RZI5q9lm]x9(]d{f 3F.%JjOFվsSq@&"2,/5pgHEbl`3).4wYuC1% +GȜ
O~\.]&<UKJӤ%+ԝ]'%5t\$U3Ǣnj" UJ35Uھs}˛`Y@t\1m@4'3@V阠s6kXs*~l9. endobj 960 0 obj << /Type /Page @@ -1704,22 +1708,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1025 0 obj << -/Length 2400 +/Length 1448 /Filter /FlateDecode >> stream -xrz -.*w89JٲcddAԥJ"0r5N\>ekșF7
4G&lA#fz##<5g~<" -.-'XRz1V#p{~x@1
nPHPjp5uxgjOG~@)$m
!`l=fkT6H*i"g!F데E6,2kgјÄGdb>3b>wҽ^¼{F'sԽǓǙ{a2W}w{B2쳺3ہ;I/+ -tJDW:HyX:FP"뫓wFṡWmD<V̬;vu&Һ8By3?0$mgǗ&MLv0J}4߈/dV!-dkNY dY|2fHKm*Hc8&QvVlͱ[1@{K -F40iu
.>H_bs6'xVSGv\"}4Uf"X -̾ -LX" e -Lv -=% -$0LCL͍LYgebWd9=VIin[qb't˄}e>Gv]MoIz*x3ae -Lbl -kn@OFuAvVkHf1к`X#=֍5H4ljendstream +xIs8| +*x:BЕmӗ>8`*b2`&oObt*Dc\EUUS\>UPu +h:x0.=X*0c^OkAHV#e^ed"ـ4t \;NEs1dj0lIڃO\A>JU*45GJjBL;Eto1U%f0 H'J.%Ww◙|lmhtŮ,%ħT1<$]љ8U&'U_PǞDS#c3)|'U$]V|1:^<[Lߥlџ֏3CLoj֣^5{Mɴg1N}h
A7+XٕuTDV:KHR?{!MfFp0.-`5<K:<MH L.M-f([aSHM0 ϑe{_je~>6(B[ـĶ״AMYhhɛ +dJu @^Miǥ8i,̓<\mpI%)RfmڇjFS J=4l/lRX9*R!C{H{ U6%r +.̬!cYp&hbsvt싃[j`&6}KW#ݼjkB]c A{$/!ʇȿ?عendstream endobj 1024 0 obj << /Type /Page @@ -2020,24 +2017,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1070 0 obj << -/Length 3095 +/Length 1925 /Filter /FlateDecode >> stream -x[s;+Z;4@` 1{MűKEn.Eխuܫ?ܓU Y#NqorW/î&eVVSohGj9 ?7{/GD5TW?zSe -FMӻc"Ψ;-ec=+J%͛y Q̈́iGctS/ԥl;`(8WU5
-|o)B."V볞>u&bukY1;
Iۢe4#R!AU\RπJ]S?J,+d璮XrnB ȹ0VL$E/gي?
*3w2 ns{btassQWQ -sƵj4ncbE+kqXo3j=3'3:}O%l3gqoU;L; oc:M"Mt0 -IE߹i+!!ۍqz=UJ>ݮԻc%bpʥH
-Q
p((b
uQ \Kʝ}8WP3;Oue - -0 -s~lqZw|!mt'ab6f;'¬v%bohoFm.zJ*ֆa> -p7ps`%X.4դNg%T"+yQsNcCT-*Y^Y0 -V -XXr`,%ɺ[,6H$3^ϖ;}r>V}uE -gr`D%QPCE uukTckNHL}\nNdV -_{5xTJuW;Pvcu#'7 -Tsq1Lw{q;& 9Κ/Pu*Ȕ)Fsp/D|b@MxKD(EQ{y]ϖendstream +x\KWH+M3dRdik?[Ew/"Dt NFSn% *v*2I}}*?뱠| +FAk^3ĎSo?I鹁4fHO-;E?y{cmw"mr*6~}}
em%A4`'Nsu<Ǜ_s|D>9-\VΝOa"N8]NTDysV[x{e-S0.]4hfMl +%h*O!5AI4]"euU\Dur+%E,8O(};˸Akn\, +՝lPn +q96AU:$, +@IḸ {t꩝tQ&DʳO +'|eRH$yoDQrtzeN[E@o&6E@5@{(Ór̲`̈́q(=Qܓ{mճ|>jMGKV,5&ϧ_<@]ZiA\k,߇(W~M\[m䅌rPyP͢tdK|en?wBvf#c~z(xgaw$V&_h|~3U;gn,G5Tu_~)I=<~SVl +{dns +D%jq6^_f0t4!F;/ATQ0/%0"8:|b endobj 1069 0 obj << /Type /Page @@ -2384,23 +2376,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1124 0 obj << -/Length 3444 +/Length 1932 /Filter /FlateDecode >> stream -x]KsFWH.'fptl%qʱI{HrJÊ$&$<9nE:J9cBtҘDKntK$뻳f\;yvWg_}Ӛ
nr."vru~tt/Wߟ_EřiʹUO4g
iBnrw&$'RpǨ]'5 -5͠2k՚()I+TsNftJlZ5}懲1m2晲U -BE9|s#buٜNwӘfin6%:!""$
#\0y)nv*(%|ЁVj$`1ph9^"Tc, -Ek)"5b&1'r?{zM.s9Z#s%16= -bZ`ĚԺQRY!F0SLQ5_k &j5ϔ
FF=_//f3$]z/[Oc>{IGU /YEԍv -1ש']Q0; -%o-OYPz͜B{U)3q>KN5UTܣ6D#>KR i}O$ -%Re#dL#&ͽ#7XbhTqj5ϔ
ԨsΩp;<sA\sƊڥju ."3R7NϘU<ͪov=3[K\4nU}vyXѷ+J:v&#߰oC"-o -ӏ>Go
m&CvZjVҶ<A-76Q̀꓃ pQsCp"\; -٘f=Obqm[^w;,xXmmýu=:v33wׯŽ??o"̌O~۟˛˻Ճ&$;zBzSOzv -8q*0o6-#т70oi!<'&+=G˛QSƩS; -Uy[(W[~4+L<g,I<=x -BY[>Qȡcc؟Hhih.-AK" +x\[S8~ϯȣ3Qu<R-h}hM4l~u8ۀ,K;.+Du:{[v@LQ+!PPuGh98LzX潯Q&} +('.?;DD/] +rXz})x +pz Z{8 +'+hp],*PwMaOpt7V2A-ٴ~_4"%N밀۴n8iɪ
}c +&h5WW^$ŕQ&y/i +9Ns* +2'3ث2,5M` |hL!/[&=U_⓷> +dѠT`"$?A+PJލVzQ0>
t3fԓzm^.k5{]G>
sԌ0
Mg:Ä}fgx7%cک^N=DPn \+2l`]N`j7@鎳ӛr#@plϣv#b +is:f'Gl k$P>'f^zMy,ttkM.v?[[DIIĎ'Y"GN8\6ܨ~58Ye3kVٮ`Xl*9F[YxL&vk~59~@*MqxÝ)-h|&4im"|ec8ǒ{&HKaO1ecҁO)SB+4RWdV_]S-4
sМ>I+NYE +wvٽdsZպ/8w!x1Gjy5ğ6{X5^HhV9k$W!A J2#nsRAA&_cԶ,^`VFX5+,)q,p7L\"E&n>=r?*pE 5ii[ I$5@틾ad42.Ҧ*t +VhfBP[XĘ &oDHTeNpZƎep0]PI>$)<Ơ˸he +@N5VOv2u_9E܊pPͫR!<fWS TF endobj 1123 0 obj << /Type /Page @@ -2761,22 +2753,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1177 0 obj << -/Length 2719 +/Length 1586 /Filter /FlateDecode >> stream -x[s۶)vč -ގ:!Es:GnMff -UD@){(S0Ҙ+c'ynޙ=5^-7f -c,1b^IӪU#e$Vc}JM{k
R!*t&</#S04S̟
%"g{CzCWZx -Ta -E;8=JbLfLPc -c,1b^C'T ؓnrۯ,jiW&pTT33j/HuO -C,)b^J[XqVZȊ4=-\m?|e׳='PK!S0N9Ew7]`C1OKf5ц2 -U'99n=R83b -c,1b^c╊VǙ[2Yz!j&3m&2 -ôŠ3N^jMfLio -
TMFް2\$kюC9v^CR0)[HtBDe;"hʟYܔNv=<#x쇛jX2CX. +x\Mw8+{j}2!tRY]ѓd MLJ:,,Y{{ғ_~#8i"@bg0iH;~߁<ȏ~r;y5߶N+bQ~>}-H8w#EΤ8EQSzQtsYڦ,ʂ`Ƽ0Av&A^%^?y2k3H~E|q_zF8c.k#G4}N!(ic .MYc]B7Ϧp' G،&{ڿ<t\v6-41 y(de+`uUmu}O셄XR, JcEH#yX_ 1C;XyX%^!B!^zFaDh<devkt%dG/A OQCA>Vª>q< *)Lh +xy1|p99R㠿/U8FZ, +:z|g0,FfuɰU(F}1mrLq+SƆթaނïfL8#ld:Rǻ~`\ ,H9XX1L{jB!.$` H۶*
2^&U>KSY˵N!ض&A֯ 7MItMu=s{#VMjolX.b#訩waݏLJ]C]C8$ J&q҈G 04/m\$SLJYRfsP֡XHX-:kJR35%V^jx$/+ѡ;/21nSw~A%1p_O@T0"|RT,5(h6 2=I>"pD·+$8Yt|,,2ke6MvLIA-C2*,LLj3Zrޠa5"}tKמ`zjC[&[}5JG֬ӆ!oޟTN&܅":ظQz +Wd
N6|TGĢ!t3qO?r@b'8@40*.TKyaXB,$kCȓl{Β"ks"@Q$/k +R e LHUF%21"10{::*0!LfN!uPuBG"-t*9A <q'n;=l%0%\/W'p/
4š]gӹ,Rg.2䷣VnLLf(bqk-&&u0CE#su +ud4C1(*bh endobj 1176 0 obj << /Type /Page @@ -3144,21 +3130,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1232 0 obj << -/Length 3005 +/Length 1909 /Filter /FlateDecode >> stream -xo8WOˡWY4nvV]cc;g;~ӖD
ҦIQ,~73$Tx *H5#F`<*s%ƶ8*/9-PUT{NU Vdz5*pטG/&kLj?GYf G"\,(#Qb/Ύ~m{t`ju=-*UƤ@R2TG-GŸDWH=+.GC1<hLv<|x5u/VKAԷ̗7yIZTr|-۶JJ.q -fҬj-QYYNI:ke3RM -1DPhGuGQ Z`;GD[z"K K(78`7)|hCO<=z~wZeʷqi=)=f~5G(o![9:kWM) -&t7[sm.^14&pOd5כB7EZO[A[k[4߫cHK=Ҳz5#ze
x{zoVȯHOQ4Xۜ$wd3UU'@/.#zZo6TWaSV´f5
-@fWDajaRU8KMLh|ȩAjФ
-@ rbX.VHV9gʽz%Ԙ⡰'V}цjhzh G4hdB1+X;_Ob䏎F_Zo4߶ -[2tMmJlDb%<-jMCCwva蛶4 -N[}(T8PD"mmq3۫O$"R8v|gnR_\J{. -i,X~nrAlsSoŒ&+AZsQC`]&&a45z -ځ99}G:iZ"ih^Y]ج;Kyeq5HDGCHim^
WH0˳(en"nEsuz!j3CtNYQK.b>Z(XWKuu_)ȼw:
S_-./zQT-F1It^,Bxnht
/2
2L#H3rX19]Ev:aӇM -bB_Zka:!@kWo%Zw͔ٙR՞Io0~ȯ]3hչ!]toIԿ<LI,5}jjzH\=^EupFB[uq9}jxz`%ǹHw uyg?/٤̪#g3 pDF3ڗT(RgڽeRIfso/:,n݆xQo^}xkX<X5Tp,d -l[4\!1h]4퀻N6k,AE_6{_)k,ɩC$lKl -&z|lSzi8CH2^ +x\[oH~J3þUҺj4vڕ>`86x1n{\/EacIۅ?qipJimaU+6s\_#]'tvB^}^f :/ݤS?O_>Muh(Wp:$Iz_EͱzWw07;u`ߡ>ܤ\W"p7EAdwX6Nz8[ݴs<O LmTC`>nW[>'"=R=˨SA \C<X .R̊I~1.,rr0\:[}6߷Wͭ#'xt7jꚕ;nJȱv!zL/c3x%0&X9N;+tj5q'~hu/.DkxB +27 ʅPN=|jj=Lo倨i +yWR䠵7bADk*^<$+<TY41b
lպe0hLa6|}>0=eo'*1`6CJQ@fTDcd/5#)dT~N48MPLЄCx-Сk`Җ Sĭ!>`X-n.4ё&^)-H$ +vjKOm +9+_/<D(.wFxɃ)^f(ޮ@jn2Tu4uF~
хl$ᨄrT,2Y.o +Gp[r<dٙPdè$"5)d>J5V铍#R[d3L x$mQυl]@o.NQ3ELMKfN#?|ԱY\Iw2})@@e_qv?PoiHͪHb#>(Ѷ2|a^5NT2LT>DF"qxr +gk?˺ܥzl;\WiEa<U5g>hr|6et1&'Q}t˝fHjIK皨Fn|vTq#<MjA3>]$j18L/ +OÆ3h5g^$<vl Qg'SOjb=k3˵I*wJ8XPWyB$pP endobj 1231 0 obj << /Type /Page @@ -3491,24 +3474,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1281 0 obj << -/Length 2931 +/Length 2886 /Filter /FlateDecode >> stream -xڍr8TEK̜l'VJ%U9eqC\S: - z4Ω|mOWLw߄U&{m2K&8heuɲ -DFLM}RbjiH':M: -wbEH*D@@iP'a-]G(d{GM]K"?~a/=I?MD@ʿL^gϵ51}0PgG0Fz'F,|e-Jd+WegIO#,ы1P@ qB_ #ii="W[9r{9EA!/_ݷ$CEpU7Ok?נ>~" -Fox -0۸LGcPtZg>[ۉ^||P;ŀg5 @0_2al-%/ՓA<)PAv4|{gJ覊$eBd6;/$l*vRP31S-l'?4r-B=Qؼ[4̕fɪ:'HE[Z2ҧq+(BqRCUʼnB_]Ы$qp'
)6n -6Tm]嘞yz -^u`q6lRʎِqg2[wA -=."|vx*
h ls-V,0vN*1q:Os:_${л˱vdo. -bvǨK17Op1`<CKߎF;mA@Wά($c,}[X -DIvF'-*M/C{cqF Kyq71.dD2@*<F/HQn,WaؙK%pbc^ -EuNWضP2N -ǯT`W؈!Zne+$Kp_{6˅sgCNd8/dJ*/xQ3[--xŃWdP_Dg#.0uVz^haJ튑ƞl]?J -@F= +xڝKs6_ᛩ&>d;Nǝ+̤=%Hw_ Fط³ +bc*܌T8V|goGʼ)o +<MDRf"` :hv~p@]C(Od{GMs ?|a+==UDkp [&Ӊ}eͤbm[kX}oA#B##o^[>M/<Gx$vq Hjo*_ +~1ҙmI"9:$0LWEa/Ƕv[K@/<cdOZHF-T6Yo:kO_(cTJcJa@!}lξ5/7S1+zA!+MH}25f,>KN=,o7Ar.B^YoJJC5Dzš(T +N4veBo(#<`dhTzJE*@kv!Srn-r +jL{,bj 9JpXYh.O{= +m4{۶m.<@fcT*;5Flr'
H5 S.HdcCbۘ7tz"H?W52@P + +:sؼ!rpܻY*cID8䶀:w.pӱfpP>Z_;u}^:ڡ +h參{7e!z^mVFz4;~_E#aF(fNR"s +гBj(JS3l:<e{:ۮ^9s'̸҆ӻO^dh8idEN/x1[-${MdPKF\"`m4; +Ż#
m>غ)lY + endobj 1280 0 obj << /Type /Page @@ -3543,21 +3525,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1287 0 obj << -/Length 3130 +/Length 3049 /Filter /FlateDecode >> stream -xڭZmoF_ -h8u.9Wz@KDҺ$o%e-F3F<S?QjwohgryvSJ_) -?7o>,~͕R^Y{?^BfػDW<onܻYy'(o?ʶśJ^݂̻-e;O_PI\0K-ήN -tOY"?q;Tfޜݞӑ<器Oru*0 4#_y$~g| f(*\tOza6+y)W3U}<jX7
Fu ^lI_r${{ FV -/E~=+pX)ƾ#E)j6O[\.p>,7ͼEՋ)o7)CL
8/[J+_e13ӱ+=WH+hbw!ur1#OJie/jXƪm%vl`k^Z&PeA@~>a"[;P!%W<~E'VX^1;4Nf>?vBZدڽ #ˉث
a\s*EDIRh,hQ{8śq`֗YB3@╬&<Tm_{/p,[cC<ݮGGl2Y\2 - y -wo
,Cʅ_&o=VF@hNow*^i-~puub2/ZGGyx#.bNdiAF>eX& B"~M=uH9<RL\N|ܙX *]iڐAؼUr2/ȴC3x0nFH5\B٨11d99ޏw^ַ -䒞U#bΩNbO\fj0;=.pkQqq7nT#g,TfxCQ&zE,'hbrC."Yj92ؘY!Y(QI0htovHvbjRe$ΏdjwBW!y1~^
[C"R`'O!-x5teHo3gU=,dK8pgH cʝ"k^_,9F̮Q,LD">/T5;
E ܉\Tպ{Iϩ3X͚Bx:f
k.*8:VJl)=i(Rt#^Ce2צ\-K97hZH3?MIшPφ|5XS{kY'\t2]ʐ6W)&I>jqI3|*fƱdB#%u@B(BTDZ*]'uHBWP 1J]T*tW*s6usCǾc:h^T3]SEHR7 )5JM.n0JqS -cQtJ]r7,t۲
7&֥tjHZ,~~v}1<@mL@Яm2Ȍ=TarrB߹~-fǩ,0$;f+%b4>r;ikJjJ|9mEk]`kZPepYD&63 ф%ʽm9X)60f|Ce`<}PZ'n6j}i60\!ה!+ n{ӯA"4?QOq$^B3T}žs@ -,*_ہsEIQr. BQz"
~0x.-GWSS/E]$m_ɗNJR~ٳ//72Yxj`LߊX7gA1pqW@,,j8?z)fqsvgFZ~EتXʏqrWI`XO+_b9fNVTj a>Ե -Dfej'3oBendstream +xڵkoܸS@VE=ۢz>$4"( K]!Z'i㸿 )+ApYr8g" ]O8PE~8;X1]n +vR<0y_ԶO[-+K0mxWbP + 2SQkC=v^dtc3jRyPGi{RpDV~I&,3k\ٕ@՚H b +! }U\z>d*EszcWLjg֪?<h:\&Wti@*,詑#LMii; 9 + +q {ӷ0xcP`l5TR'-"$t똥I-[A(3%+mRs^ψex4V +p)IUyS[7x{ѻ@bc"ZaePrz{B܍3&
`KAnޝj"p+"nb46;8w6x{_7_#d%i>5JӜq@s7ܞ(*ԩCA{H=><}mmέpgwoFxT'bN1Eʞį/)Ka~Mm3r:Ι`ۤ8֪㐌譐7ptzӎg̾XSZÖD~5BcFI<B]+38Zb`$ + R]CRcz1U07'n(hα_%ت?|J-t8O&xmF(@?D0_߇)`oᄎM]Y-}<,|>ӨM +q}6jJ=l'@ݪz_&p: +I endobj 1286 0 obj << /Type /Page @@ -3580,20 +3561,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1292 0 obj << -/Length 3154 +/Length 2924 /Filter /FlateDecode >> stream -xڭnF-0bn>$da/Жh0%z|֫9 -39N5Vvk_A90vG|0h)iu1)TvlA/V;ҝUY%W:-(T8)tU"5Pگ~co)Q2̀WS+ -̰AI/t-V"x1P_ i»YI/^f%Q|H7FO/T 23H6F vSEAcolcm3":c/X2ț&l]X͔QIYϕQ|i:W:Sh+Z'4,ၫ>(TZ/9̗{ DŌ_Iu;*ÜCMX< -88gsCd]BS?2q}#^}ߝ+eb=P3RYnC"T{F7nA2yIc,z&gU>0+!3C}ߣX~;cj;(:IKs"$mVr[YNF{]/ -KggF**8.rG9rYv/095rpa']u3ͷ[{wY7}&BoFp~l7fWmmYRH>]58 -hO;j/0"o&ߛږVTךe%_`*KJŽTm<]B Ɓ=NX8{ޭyؽ_"Ai,\<7{I|}f#}!}e ɭ"hzхG|cvl{[d,{rQEֳ5=ı?>)OđpDFx3n~'.%: Gb`l(n~%\0m+pKX9"[1@8Uہ/۴0if<{^bYFX3*q Z,V|e4Ti.n)
whT[ -ly*%v淚gOG.nk2h7{+s']5;Q&oB-f4Ԥ =ߠ\+<'zD.CT*o$[1WC,lXq/.6 _V.>w/DT - -7"r{36=2"$wuX2L;xǣ+m>b7VLu(yEڏ(&ylh~(#uHPR*竺0[]Pjy+@Jo5v|*
m'S*=m^oԆ.EqvPsti/{ca(gdrQnQFTPB5rtft;F
[xD -
~鹣\ӯkMWFB &5KlYfG]_3I
0못vRdYQVC(ߠj!|I^ur]+'KB\wl6p*Ci~<GځF~zB]3<C4/A*<<=gҘEpjL%ITˁ'ˡ`QϟM|r<lqja<
M7$ +xZY6~_1oVE$b$I-M71:vo]><XydJ(]pޅB& L>ه,$F~Q> +,_͋VixO٨Ce{mjwxN /؏K +ss'\~'{\^kz<Trit3ia +=:eV2)qfnΐ#K_}2jd{JFGPݵd21=H3-HO-x4[3~l]SG>n5h'1{a.C>ɍ +Wo^[:;ar|KeY:oJ*^ֻJTCm2r?̿P`dY\A TeŴV Wk9(Ϝq%()8_-^%߉٫y$(#
O!rct_zjCWxϴ,=yј,]jjg O/B/-($
}Ak6 +:Y.gC6)o=Ow`eIF7㰱.:{'vU&gӊci|a8yK[`cGV`<"G&Jv=Xz2+~I5PRWGml/RF)ݞۃut%ܥ(a":`p䥌Y%.o7wB#ϱ&i&Z,PLy063pL֫)Dp #RKNhVZ'p-<a XhWn=ggī?(ԨWYePrb(K +J|W$XSipepB ç3|Ms#b{MkwC,>aL+6ኂ6d%A 8։jA#+Yl]q q;Hhi0Cuz,מZ\'YS0[hfW2 NYMQLMYh?G=,4Ku_"Pm/2D,"F6# +p}q0klW8SxdqYB°Gx)pm5TK;Zz7U1#m}yvʒ~Dob-3~ +$BmFUIgsn㔦>|A&8f5hsl ,k%0ӸK<;IK\FZr%e{$6Gb¿aoJP(G?woքPZ\ >zM"ƅ<OVؐu^:-##
+fdnގ ǏahӆtdF¸rM(Gqst@:l`j>~4g5ףs:L
GB1:rNق=<:8Kf:a_se%(BEk>lY +)\ +_SBFP|nbs1S_I./>jV1QsXO^~H>R=um2k>~[u3BҟZ/Azӆ+h#if$0셏 +F3l//j0[-Έ9e7w~8/ gb9 +^-*V. +=g_,T+PfO"VziBak8L_gC7!olY
'IR^ɐ|k endobj 1291 0 obj << /Type /Page @@ -3658,27 +3644,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1307 0 obj << -/Length 3219 +/Length 3145 /Filter /FlateDecode >> stream -xڥr]_BU"ȋK^obm9ލ-ÐHX8 -.rb]-*,VWG_b`~ƋUϫ^/8"zwzW -n$y{uo:$(AE ȏ~$!a0$R?KBdDžqtzmqEzt3FmzIv,xz<z -5ɳf6U5xK̜ qd=Y!mfgsf;QL$ }Jt(~IcSՠ?/=\T:)Y@Ioz7Q*0C1We;%B> x+hNf$4ihuIns>d@(`D5 -5Z-X-C3.R -{rՐR>M}@#xbӀĩ(
5YW6<~,ͻFH1-2mߩGq戒HA`ki$1jS3-^fL}M'xѸП.<Iw:弈9{#Xoءw{p%pl8dTw5j2N#ʮ3ŵ6Ȥii
+C4(:25Fcxn5 -g5VSQ9d1<q.p냜6҃}Cur@ՒH</Gp^
"&0;N6=t5hXK`؏(s$8mkj{?{7<Pa(|rZC(RY98$ra4vo%HPTF -IìO[ǘ"NF#^vpjX'iG0> K|E+v 1wH]?h|(9{uLRul!0Rd=-cV"}dW9J.^G\+As'J34`ۮ345*>Й -]!R奂IQX'OT0EI{:ٓ'>T*n7
m;>F+'Ci;q<^Z#p1vAܡbiHd+7>WbU38nߜ\]l&i=rg#]E9[H(ͺоhS_s]DTt )1mCO]N7:?zt;IIQٺq`."(vR~!Ya}_%.b?nm90HqAmOdۦ.!M:-*!!%Rs#Wr'
Y+lԌvNQFW8U}dlq>9b`ЩJN^ -SI(GR*>5#[A8ݜҘ qVJ*QӰMUWS -}yf0G*,PQLb4 IaJdsg ДУ`bK4\%qk2AiThG'}ʨr!\^ -FRuЖrH")N%u$Ω^0 >T
.(pD -1PI#FvhiNf -3]Q\9
k3k4ꮶ8VshxG-HGlYꭌCPzf[o5Yfei˨c;3G-985'&AmF'iG>Yَ[~sbBj6XO<}3*jA:ARii%k):Q%=%= ;u%IZPerI(&"W]HEǣ~2j$/SNQ
wjGdzkl硍#E:\;nR:MDmnKR> -]aDKK/5\oPͦ Wɬ3ٚS -s-ԙBr(= -e2=2T-~ͭ7\=)[T3$U3wŌy|F4aYI~ƵtyQWo/ɥZ_O;yqD8#QY54waI17ԅ2P֥t,QSy;2JS
̎#nt?0<4Va|췽L*Ό,k2
nr;>NT)
"s/:nz)~/j'K^QyL'-Z".k[~'B"^] q{endstream +xڥnF_aeh`}KLf7hyh1>dɞ Ȩ꺫:*.8Lz_E;U,uFE[߬߂w~\fi7O7qp7$ +Ӻ~qu}_eyY*,ˮԅ'iVUv &NCq~E UUr9<KK-Jx`f88βaYӼIЍ77Ͻ +da$0L0YySµł)`70 +sIkD$q늱(rlxeC"kGiUl,<ABFý?@iQ@wz6O<G-kL20ttsv@ M#`tKT8!7Qp% +%ϼ7Bx%Խq1K,bJpf}DN(нz@W4Qy[hўȲs>dD(`D5 +2 +<qB$(h4 +<"3~nĆƧͳRZX!/V\`IzId³$6RVN]͘E`qKc5eL~]K> .)H@M9i+=ا;T-TI4s> (b <Xc/P!{?10g[zG#F&mU%JC98ťp⟝Kl5n*ujaHm!Lă1Zo"AILG9Աbh9҈]HRGʭFA'vkn3^Iyݞ]ٮ 9ۏ +EB0-Jm/2Dep +u
8m.P@p1L94 ++(;Ds~r-scu2kN^Fl"pXG0(253v 1đ~Prd +I`Sqn\W__Ra`=bAXVsm&zFc< >QX +WAx2/u&3[q#P/*=$g]|&@S +B=pE endobj 1306 0 obj << /Type /Page @@ -3710,19 +3693,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1314 0 obj << -/Length 2207 +/Length 2053 /Filter /FlateDecode >> stream -xn_7K5;^@6:8(V) -8@KD]39(CB39sjBt'J$9ΧAhD0\eIU*LG-gZ(2L)-ҳ(
D`js?7ej/&mV-aTW{V˫O7f#J$rF#b5P -zaS;9w;g~.>/%wNxٍTc~yoLwD##Qǣh6w!Jmd8R,[Q"5C!| -%Fs냃 JQQxvY4rKH,/0/`npSA]3Bl#EI?@,mgVƦCŤHU?~<f<y 3c ʐ&}VcfɼgntE#7xg[[A>*~fF'vÊfݴNDO Bu+b -ТuQmgV_U'u%-y) @n۱9bԺoCϾ9Zt-W#Dk;`J[=i[՜4'{>q=ŕc;Hi_Hew
-eduQ.u{9Rr'L~5ayV˨J"K)dArWw q55'hsXKۚ{u(8-}Q:"9$iBa\ѽه7jp[U[$](Nʰ3/:)ߕǀUr(Eh=*gS?]=.T0B0ʋ/QKATh3D."{L7j$RB0*J#:VSۋk.6v
dfQ=y5z^QVtx1[:"0|NWQYr\ESsQU4Hy@FDvL8n7W#|۱D "uq><T}S4㮋fgw5? v
u)^V'2nfC7G$;
(}:O~W3d>~˻n$6o~fa,jQBnYh
oc]G?7
zGlsYi,'f}z<2oImX6OYSqd&%g+^2 -6:,mg`߆cEo4P hBd\''u8`9rk=#hE;c8,]c]2 2@|gs:;eW -Y¬EA
F -TJQ1`kuzl/8a*qIaiѫj+,K&2Ll^LHp`\/`2C:/My"esm +x]۸ݿo+k]I(Õ%&@rSI
!y +W8QB'|[|+f1P0`>2pX/@xz˹/E`nv^,PzCX(ڴ\(aT^{5 +%V1){aÒ>SBp,yI٥q34-ݍ#B +^p`#'܅jٲ:K?@v^{OMϪICĔ.lTqNM&31V4i3# \nM-Fnm(<(56zAm:,IuΩi7-zU>xSBoӢx^$wҟ3@a0tj0dޜQLjQ$j( +|; Doඦ.5Ś`Z?Ө|~8pmmދls"DDr7n1`;YH0敼aY$Mw47W"=TebM?g|觙)O0BA+gڤ@*ffMݏ)Q}= \gBDp[f"d(ӭmkFP\LyJ<Y9z2wxYL6\Dޣ$WIDQLO3npSX
o&r7#!p;.88Ug8O'Rb]t f5 +9x54-%S6̩|G+ 7~x͟R;+7Ȭy= +xuy.Ham-~ä5͐+xH W7u[>>7ծ>6}7Cx +>ԗ,uQcڔ,yIəmwyZ俛{C\F:pk"FGXD<dDHl> ¶ȅ%h endobj 1313 0 obj << /Type /Page @@ -3763,17 +3745,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1324 0 obj << -/Length 2026 +/Length 1998 /Filter /FlateDecode >> stream -xڭXYs6~ׯxc*c8HtƹL',A2kTx EɒEX,vA9'q'ug.a@:#hN#X~"tA輪M/֞G$//xHzOqx.`_o8w94}=vt yA$»%, ڍ+^k-X&~I?tg#TI(Pd87w4+ QbD+fVLD~"'!d]'|*]2b|^}
g,c "oE2kZ|6Rw|iQ$Y~8܌Tيqp?ڔd-+b|`Px,] )Q -S ^-x¢Hݰģj:5'ϺLzA 7UMѡ>
?~pÕ*A~t=#w~f*w:Ɇ()~ySye06QL2vډNfz*IzL½6қ,
"Hf1d瘗8ufJQLCzpˢ@@0u.ȗVfMD7ޓ@@Ƅ'
KE)iם%64.S~ȶϯx=U;?9ԡwii"F -CֳFyHzo.ĉ78q-}8w5aUmjŖS\fNSb: -Hw5[B;9 -<wңϰ8O@5pI>hAJp!cQ|rǔ) -[n\(H0t{^xOmaN%G3*C)qrfKZgË^bgoq*vŝˊ+\EyD{s } H*ݔc'Ys8@r -$9+G˦
U"ÌK{qs0Ifi ҫo1F7b%]!~̱|aQ'maA;v+Vk᫂.{eu^ɛ0c}JPO0I)h}_N
/@N~
ď&
jc}_ +xڭXYs~`*%p˄gɎ7\f+eaDID ű}R)U suT&tH$tv~hPWq[obXT~rC$GOo_my</g"ooxL{/߿z{}W3ׇ%}^4Y~xot
4Q~&{+_t? @=|jDyG1שh,|TB?1QT&}IEjF;*wX)qh7 E^o5;A^CXPޞaVb53Ob8֬<`f&\͗48`+dGU52d0:^KRR!Hހݢ +tq<;ܭne1wghxݪ,(5pY?0,O7mW,sh3-s{
H
ۻAv@\;4rgk6
&IA'<t2/02җ"[lXE40w{hy1kVxUC1M{#PA}UV4Jyd"jCZA{W,'39lx#\#דAjBt؉JtJsҟiּLN\1nsf%$czkd=SFs +]2Da^b^*&%)e9O1!fH6G#r6
!WS!|$}9ޫ +"」=e +KByU.?CԤ:+ň4u0KBЄ^>'%\[վ\Y'ė!g'p~lϢlݰOiϸУDg4#}cՍm[6)ιƭDSb~\ +h5[k?3\ +ls6\_=\!d4>O!;;ˊȫ<dx2nqXgr,"wɆ(f;`T +Rs]-;V;xΑz˝Qhx +6jvەcm-稤~=C, endobj 1323 0 obj << /Type /Page @@ -3796,21 +3780,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1329 0 obj << -/Length 1795 +/Length 1720 /Filter /FlateDecode >> stream -xڵikH ,)FG -mv[RْYr%IX;FGluIkͼ'Ɓl@X2/aHhS=+vm+tݣ,W4dSJiHkb~`Ld0{\^_pS|]N[vZB@:D^>}1vd[2w-۫0c)WlaG{c>5$za -uX=\Oq`zp,)lK.GZrb*eӛ| -ճ_ˠYB9|boD1"NN
KdWEAf%o'N`$(3zF -2"
EdRkQR>&Դ}ItfH@u9F:d%(pY6rf8m$!xO̜!MMLQU@o>Bj]4L{j]5U1`:4ału4h:ǗƊ͆8D@-۰"1>V*zA82mفO@*qa!'_'"-iYH7?iϊnRVɼm7iVV3!7ϵ=OP=3?Z`ZnK,M>ԀP!FQJrh#
ۊSxdÅ2tetUƫp֦4^`>un@
°kY
-6[I -8a ̓-eRsqk6R ȗPg\5^yT$7Dc#Xւ_Pq++um5B3e9~'-ȵe.۵,"jem -r(^EUp9<OVI^{X^灢E-YQofyR?k,6f(A -~:-b> ӖVgLg{M1f ڨRud!Х)N]MEMCD) .77|v$_2BP#̥QAFVWx?Ŝdc~M-r3[UYM5OT+ԡb/{EWy -*u;5U2AsS:ИNIhRŁ/3 0#>X5[US;&ahMHb'u5_z}/~ؖm0FY"]tachr}?ce<[3KOi8OǑyrr"s58W/ -jw5/m.Ln'endstream +xڵikH ,)Q +m^lw-,m %;":\In}HqI̛7c$6,[@ K*5#{#1kپ[/W> +8EGt-חHW{{F%C5m0#דJFGv;S-)B+t!'@2s-}eHKNLϳUBLpb{6Ѽ*we7[ +VгnQzSiRXz:[#2u]fk{hV!z(#A) 7 +m7"^2 Ѳh)2WCZ-70r$J~EH4@r4Zm76Dnx$| +AO3u-N#H':3+LHhPHjIƚrˤ)jFAxcY,k,:IL_X3"Q|Ft-ƭUBȑNM$s
hzg Mы +u>D@pǔjPeVΣ2&.ryIќ[XVtYvKHY4{ݱ^Vzs6~Cv@'eVΐ;$}Ѫi^v/9+qtKt1s&p]4mx+
F+5Œ1`AaF 'j[cL/6$jԂEQmبRV^a~2=@xCK9G/:
|ʨ<͢ +07\j-tǀ"1$$+RhZ^TdîM[!vmy@Qp/>fm,WTJ*tИN$ux)Y_@`{Nd`nm57/В8&0_D`SPf]KO\5Oŕ1>pnet=B[mJo_lO'䛡8R#q''!2AEc؏m]s%?\]e$!]ҬέVG&WF1%)ޤ~՜n8KeTLoO
}1rv(Q¥Ɵitkk{_*AefsZ[_\~t˗n=ߣMoOS7aendstream endobj 1328 0 obj << /Type /Page @@ -3842,18 +3823,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1336 0 obj << -/Length 2029 +/Length 1895 /Filter /FlateDecode >> stream -xڭXY6~ZسәIɎ Ƀڒmu$9[%vhGX*RMSʼn)Yb~L0ab.$bSM")֙5LJ͍1g,ˣG4Sg}/8ŷ ΰl],N~=V $6E>}v+O@Y#䧁)i3h$s{F)>.]b(Gi6z"4ϕSLN1"v;Yn8[eyy:ѿfEeS )`\EO6%Hs,r9Yُ=^v^yǮ7(av -ҋCx#w%.8ϗvf6IHtB~ݼ~D춎l^A$"g;8;XH#'+zn\Uqdg{\j23d40Cƙ߸[0$-8-bHB0icEK@`^nn6w.~_P,zfxXD8\uI}1S:S, 31IӺG)oHj80#͕ -蹥 -gᜮZ^W`ZByAWm|`o -=:>RǯoeC#<
~8 n`AXgt.%3>ʇ]Q:)`,YW: -<uݖ%Yԡ%:-v`@,r+p
xض\L.W,%~XT~4êxƩ -څMB@s -$$
V~HHGFp{$(EaKċ6fXjy 3)B7|ҞIb]\ב] +xڵXYoF~ׯ#T۽x=ڵs!)Zi$yEJb#*IE-R%q +iq(ad<ߌx +/GQȱ2 +qr6ER2D2?x?s25FLqW<q3QŻ^>pz68zj9A7#)LЗBx35nw5;f37Z CH$2W +ϨA+$&xP0|jǏn2J 5k]O:ɮo0)`^-/֟2cll>qgAgk;^ȹ/PN1"{^(gJW+Nn:jy>l槛=Z VhI%/) /ou>8:݄iæhipqC$7WC#?zo 贈UtN*ZF5Ya
4e{Njwe]<yS0i"ͣBPJ{B Pbe:+wti&"VW +# +!Fw7nɌ͖Su =/bb +n: +W (~K+o~ +D&94kG?&p7[(@~NSp}I79O=ʦ=N)Lb9;cs4-%CTSex|}^F#@<B=Q=ТƊl* k"@!'ЀiGO=VYCF&-`ŢɁWLs+ҹUb}`3~PaCA"<|w &{' / DmxmC_j^bp=
+ߧaBC\ +'<uZCe<8I7 't'A3Oub,Ki8+]Z+5*n{dY +ڂEH'^Ӌ}:Q3$O^HQE=Z.=IW}Al=v:KqS[`ٸ}q9U|]=~m9+E jm/) +^"9_+˱;>BQ_QUѱHWendstream endobj 1335 0 obj << /Type /Page @@ -3900,19 +3885,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1346 0 obj << -/Length 3714 +/Length 3386 /Filter /FlateDecode >> stream -xڭk -x|?-RpA4(x"%1H_y-E^O켗ʂ*MˍWadnknl|=n&pLMhǦوޱVezܭl1]YgzzL6-Zo\HrAh<t}ִ6YǞbe4WeV<Mvdu/k'2_eHKhbʰ- -+6;}+UMb0 -"2 'piV7mR."Ю᷵ Q:DO`H:lSkNM(CE$iy<ٶ9/yIFk|rNQhkFL&G|4h;68293x~()FJZγd(zʼn.x<pId9Exx(ӭZU&y8:Wvh>)Em_Nlr?p@~Dyu(T72qO8RmwzhBz~j -ٳ2͕-ZdIS<;lpjyRI}*#;e+&-vjAƦRh0 -5(,YmocAqTODuOFk9FބZiLho`c!ѽtpxd -04OG('緫,ˤ<hh6z89 <vɽF)[StC߿{cp"464g/Ap%Z u(R}z˷W>Q1b#:"Y88Д^1|${-8lLŊsR$ӎ
~$wG`۾T}38G'%uы@j c(YIFaLyONC! -*4W[$,JF=F%I(5תkV_/{+]y}C|44$KW*ѐeUBBmsBL]&(/Pscӏ5rujNS|/*XG3&ǫ
䇡+o5x"w`)q$/(JRQa_+WU.ozNT%( -Җ~i'An%UD ["bMک`OC!4{H\6Ss}^m6bW4 z݇vH#wsLk2kWu%rЌ=ZkYndZ"ZI}?P`
w(.]#orG"gk+o}fn$'܌ +xڽk!Ta~[RpA4(x$%H\Fk(@3vg_Ysv:N\O|\oa+WfoA +C+AViO0JDO9 +O˂[+/fSkr&ѡgxKW
ҙOs^hߒR6{4e;!293fO҈x8=va(@+^憀|DY+:LY^j;WupUX@>T5 Gi_0?2'sJnϤ'= W"Z +04~ +'MxO$/8S
+ ,YC )M?9{6H/0]v/[PS3ӊJ*0e؉?K E@!?О8G7c<Wou1Z& gtu)#BX%e](fea@lM[^;Iņ|O(wOUL:J*B]]JFba)t +^ܥH+{$$NŞXhABR;Хč=
Y8s]<;Qʗ:I]жTa<oV3UuftDc.O nq5]zYF_D_q6D^i`I:a +q {7
"n;Cpb!L\z?(7;v1_$4m#/4B4IcrSIߏbW͈+ӚxsR%pr,*J$T3}9!̗7>\gvqzj'j?ᯫ^ >XF_`DĶ1/sn̜.e"cjC=Z ̜'-ߍ"m+ׅ}djAr|?Q]_st ⲣ|9Q]!Nr8/"$e@?ϱo/@r-Abڑ8KzQ)0' S_%$qJx1mY3_,ޜؚ~(8H~a>aۡ&{,~'T\ܕIg<~HٵGȤrG\yTz;a')Iϗ/FH-<ż% +<Ac;}%!ܠƒ"%wil^gm<UJшG O~*3ܼxk
Ի'6AlP endobj 1345 0 obj << /Type /Page @@ -3975,27 +3959,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1361 0 obj << -/Length 3686 +/Length 3230 /Filter /FlateDecode >> stream -xڭ]s6ݿBӗiD\'KIzgw%2'T߯I$tv2b/.?Ů40ݕȻ+_ 4`{{qQ.68wa:{L̹ww;?{~xWo4iH_~XWڞ -qw}u/ǢϚf$nB#,&a|?pC? -_RySv &\
+n-Mƴ\\z*n@ȹ_Dxg/6%<(ee.$y^jh^B0Vzvr&-J$7sSv(Fi7 uޙ{}b|T# +J!{%XGyg -Y|W0?`q]:sy,,p8SW R7œJCgݒmg8]{ -n&MVkrGs&`!$9qF C rCSJN9&N[n]xIgLNGfɅva,+-'m#GZYtș8pia;o
%tVM{ K=b>VaHѳPdV3 a(qNŎ{qfiM]5So/vLU~:aM%-t&v0 !SPxXUkR(Ȼv@I|gU)8/dQ&"mgFO'[Hz/(vO!tWmw=պdlq<#4_À9d%:
V^p8`nHġhMT8`hy`4"|+:$At@^9;G@3!jrs`wpyg80s&䗣 {.V6AJw|[}<C?A}/wb8sB:k -a.7ȭ[o"hu<b\mI&O4с%^կaj(R;;7e?t+4Z9g;@ ҡtVlY)2ȑb& uE+em -ko?ha9 -аN% -*gkI8 ~-1`}g+588
cÐfoDlĔlFZ?S!QX[cϺޝxY8v0+1HYlGDwqX=0BqQjZz-l&RLAFd3ORӝGc"9⪓F2O%Ұ<OtTxL<ضV/B$G!4"؋~O>DY -0#B_3u4-cVH4dSʚՇ:AˤVo4_RG^\W&hU-ߤWoT -=OPt<f<_EAcX{"̯XS>qO -s]n%éߔ]v~ A8,{^ -`]mM
{F!x*mQ|h(=F=`]?r-hix
3P4.lndxdźk{uWNR`gl$ñZ?с%oKGtb[$$ (
ӈfH0p~ϲyH|
)]lJWg9:1 -K^kFЅݧA*CA[NmI$s9w:2Rx^@60+Z [oșRƌ%VP"v v>+akiم -mxM;9&9`2($'Q#q^]*Vď[jw]FP+1u/-Jg -wʥ3'^p&V?x` -1lW
3r')۩$4_꽺 >=&AWnUz ^_%t%ϙX,iS>S8|!`˝NQsI5>E2Ah%A]PlwˬPrHi(>ucD!ATOztU0ur YnܙSc#D38H!d-|yz4z.P*endstream +xڽrPŐDŽ/idd$+9Dv ,ۺ4e. +qۓG0ةmuOW>o,x̵>{wnvY`:9lt$};|_ܜ`WMfx;vS0)ĉado,A>3+ϫl%U|ݔ +/f:x+dG@Go
U<sSԱpB[Y^|+ry^'3/0ijBSj$Et
~jw[sQ@џں,>>Kx+>g^L31}y--tr8*[mv'lYY<]# 6 +ā"R'{uU^#.Z}O6vz/5sR&O.#j=lPJ?N1y"mdbtvq#&54`w$K7H~)h'SVgmGhw,DJՁ,knjV|>I,EMDߕnQh'~vBIY+A@.X7zq@TDc.|J/o%~-f犨U*-LӣlGs + +]$Ɵ+ +[; +lϚ{C\1+e/M1D䞫]8ejx:B +GbUJ%J:H@:z?3ԋBaץ>XE!2m2vvf2oӕn9nT2gY$:.?gi*\fX?l +
jE +O~'jvzj{gG~8=:l<̎M?GOendstream endobj 1360 0 obj << /Type /Page @@ -4060,20 +4038,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1381 0 obj << -/Length 3651 +/Length 3210 /Filter /FlateDecode >> stream -xڭnFrC6dwlID[H#Roٔ(1XdjZir*6EXo|8'>Fk8$ЈrU*O:Y$2_(c"+ml]n~_(MjW"e>"<TZv?oR7"*r,q!وƹjw9VF-՚6Y6@XOU\3 -&V8; \Uel<9y)HGЋ3hErvI/\vfi:<;6p;AIpdް}dL5KI.o;rg}=#4t1d~lk'bD(X$B*]6G0u{߫f(tm -厥|^dv[~M_fXt^)m.)s@3<KQyhsHiKP9pLN%ǣ]{HUη2R1ęB9"~0{k *D^<~ kX*|m6wYnsNH-v"+x!Ku{u{y[~\H'#~'V UѮ5Aûm=z]no%᧑("(o8MiUXVRbj۟9Д0z8G"g㌮uir^r>~;nZ?CqyGAc"
"$H \,G0҉]w5E5||Cj&m7i38OqmG1/ƇC:6,vJ
aHWׇLK)CPE;lF<NX{d¬*!rQd"ɿ[:䙛I_{-[ʬ˖2.)'RSH}֘I+܄-Ci*AB# 㨆 L)MV:-:5M)?$6ex$VPoL!͇pEK5ykOm2Yߞis -<Vq#FEGLGWp)4) _{k{#LTK?a -6W>ʪ^S]tuSx40SuЁgSj
Nj`! -;>cozxI -M7b)'Ԡ0P¤5Ϥ8>d26}D
jU&}y!و3yjudT/2MЏ"n劸bM˰2%7lbQ:>=Bi{tVУ܅ _pfS$eٷ5 -h5Y;uh|Aus@A -jWDψGH3c<YtZbq1HI5C<z&BCi_c
FEj] -[qo1A
tLZGXc30`_=A5^1Fe!{硆s&
I:Ծ'5sxkbA{Vt]J +xZYs8~p1kv2LQqf恖hԈT $Qv'rE
eHĔybSEry_y¦&N牏su8c˹qW/_R'q˫Zy&js]&ˢ7Pfsz~O?^%Yy^>ėҘ/eccbŜVN53*Udy/jmHs|uȏJ/U+C~VMӖE8bh0=zK+S-fаomako릅\oq
uO/fslTe[Oovh@9n%;PJZ3+Gj&)u}34V@c2Uǣup㪢es-r#srRܐ(ĥ2q2zE@&VoW~E>~q +T[kݍ̏4 en35BfK#;MR2MGCBށj[QSCc9
1~{+J VumZ]wM*#&yD$j^wJq:^^{_8Xr[#*$>| o©[&Zvĺ. +7} ԠN0+7~uLm3N74=<-V#jI@k +d&1_S.6WORln|j'
byZ Ba9y,!(wL}#Tn<c&x7}?Q(Ҕf\)SqC=Ǟ]c㡛pu%*hS_h͇Y +G2&Dz_@*ΝW<63;S&-6)nEkS9xJ;{|a`u[7;$&b#&rf-- @3捌HýՏmdkni=6ɝ[|'Y>'1EWz +.O(-aaN^jP%
}XsBr/rY8FR~rYaY匎f_ۻ9:kBَDj(*tcXRg&蛪es\&e{8:Ak} +c%F;N d`s0DяB#R)Q 7c@n]zO=XYٗcR1)0ч,HyWE{kbhh`
}pʹ<2FE*! a2s72ݎV"K|drSPL`߷TjS33h9lYM2Β&wYʤkª5d!g#<1 +9R<
@:y.~3\"t9auz[_*B'Kz6W,.#My$\KQt['Z&{sɧ:D(eQRO +# X,^NLi.M&z"QyJ姉zye&V +Q!|""07c=t8É٦Ǵ3*L)굜%&9v0nAEOH, ɻe493<VC1a;Myj.8B0y)Q +>;+Aq4ܹb +L_|lw 0?' S|KTG(|WOU$x/S#kU<WoH30Ob*K4JtA
NA/Sj$YS +E[A5~2;]KrLxvXG,i?\v&رEeEp+Q#K|>N\70>P71M5H_x8#vPI $y"*@s5ks⛿#v_I[]Kƞ2-kn~k& kEHDyLsP+s 4
hU|k
hsPFО
DC͝PƓ +.]Pݵ
nw
r[n]1 ],܅˨eU' ] +GEC̯H(T=pKF瘵O/s}:t\̥T%Ť}x^ٸ-g8]qy'ѪFQM{w,4NƉAq*d'wo?z<-8Xk ^endstream endobj 1380 0 obj << /Type /Page @@ -4132,19 +4115,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1396 0 obj << -/Length 2305 +/Length 2015 /Filter /FlateDecode >> stream -xڽYK6ϯPT/<N'qʉ^8%F"'$F$ uRFbόffL3[VcX˻K`5fY͖AfJr[,:_H)#45ÜG?}}Tyã?<XxnٟKs2<ϻgkPǻ^`3ˇ;8i%|p^vO%&RȘp.cc\hd`q@qr41mi]1_G`r-mGnj3E]M@-,[?Bh*iXGWgrlQfԦDޭZ mCdpjjuΉxȑJ2O{A;y8^wU"9`Ťqߡ8]<ZTBo*%x]"EGp-UuGbĻ[Ѷ|oRr/x3UX8k8EqQn߁n^=dꯈrok`OvȚNy!ȵN:<Z)XZ VODȷ8umGAw@uMy?u%>U g)`\h -TGaWY&MڮqЮC-W4|-||xC[ -
_P=qC[r[c2X@FxƝ2x4t gwLʌ;SAB槹N ܧڙ@ɹw& -S*0/Ƙj6\l}ݬ!B -^'4~P(q/n_,.V-9 4KϝTz;; -k]w_
EnWe_zEW -GjMB0Ul~hf:$ڀg!H5=TDk{Q -ŌNx& -m:V AUP5* G|~mN"TUTݢ]f1\^|ITˮg5H
nx8D2'&9XG g^1फ़3++Ч8Pj g}B)+X]G_ +xYrF+Xf-v[,&IH@@6XDJTyMJYe`5ǁdq<oGx# +jQ!vM,n&8[g=VڪnX֬QX'NS!M߉)*v}ڈYMV8'/v//T<=V9]VpN)) +nynVB|Rw^ER(wpX9sV!}Q}$P
Duy/fi![ܺqgc)jT
ҚAJ>u'2|ziEh&`<]B(1{X.w-`)c/붬6VE6q_LV<Goؚ#_1jE2 %wڇ,X,&L%!M[Vv,K6(f]Z(hgLv&VʵfҮkR^U}0a;gD +:!_R-Ri%yB8G3%dwf[u7ƨDQX#E~,VkmWխ(Maltʣ뙁љǘU6]p}Q/[p?owwſʝȪ|pf*r
Jafbnv<y[ %bWeH.AF;Kd#; VW+
0~R,5\4o<|>Qt$N +Z|eiܩrת&6qa6]sn<)Ox +nUZ1#<@%Zg% +!Ax`ndTn>'A>[EEVC:K&+Zds9w8y^c#2\ +^*z0r2(:E`PMݴT]Nh+ADXؙdm{ΠZOٗF$|qmGw{( +甚h-A(7W`-4g)&& <^Kr+,O'XmL5Y<>̒*kvTaF1RqfTF7J$ǢehKn.'|Uج}O?dãg!!Dx[}lJ٫O-b\$Cel + wmt}nH g,ϥ]ӠŐ&G|'Nc:;b18pel1RG'D#mB+A Bn_c4VMɦmZ)%N34=-R dCo\Ίm#δaYJn?y76Q-&0_03;IY7`5c#n$a@*=?.Q1:*b3}{[l!S`ü3 +G""nlLPn?v8a9aǏaA CIVcu'"|p}!c|&z5 endobj 1395 0 obj << /Type /Page @@ -4224,23 +4208,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1412 0 obj << -/Length 2149 +/Length 1843 /Filter /FlateDecode >> stream -xڵYߓ۶~_ @}:g2{Ծ$O8+%}@s'd|`#1'*Y.00יKtޯg~o`4E\a-Rw?ܭ?X*"-,ˣBF7ߠ4n?? -H%<p_w,]-Gn -qNjy.РX*kK0#,P~)4hf8 -ܳg>6QЅY"XxN&τL32XYt,6:P/d.L -I=0.1B$E ߴ3ÈG1DuGi P=t5BQA\p[{pq.0H w+ -|5K
aŨLdjT= $JdaE^2Ɋot,;F1I,86xЙ@NrBNō3 9Qq{VՃjb\ -m=Mzaۻ^m:<Srز鑸{};%aEV %@XA(JElzqP0}h:%@aPA_)A<04"q,49?L@#-RI C#͌Hsu_=6F -RP8V.AsiB;i$ ->+_"RC&-Og"BErjʮJN%؛*KCr?\$ǕU5Haj9pƔckӫ!ZLj;h ꇿѣ+WT@{:a \fzL&T6MN*-D]<{s8⫅^CCcIǒq%] ,eB62㷑 _#9 -Jf)X"ZtR}46iv -nSsEiWZ!k˾(ݍnWJiaz+zL5VsⰀ_Ky -/<T̪SĤ-NK%_܆ާ'h㮘A4}Q}h;SHFWu^劵2"JRBXarx)\{<'PԈ[ ErXR*V -8;W"QUf'6Ξ:{gw6!?bS(z:a'[< -yyj/ɭ(5߹&{E7mbsU5@WxH[JƣgPZ/Svmy +xYے8}Wxr-)P,P[J$MYaع;3T%Ru>}.yX W&(dq3
7T8by:+7鎦2J?9/nF>RJG^?bg+|v^7M,o;Iܽ+$.;Baz<uV%"!?~$A>y Q͛+!\+r߽nD]7StoSU/`5An$NN,'3ܺZþITg,EAHyłE^UТ}\A7Uχ,+ym(P9K + :} +y,H +3xq~]o0!^R\_0^D=۾ nn^D/0%Ӣ\jEdҘnsb\UpGmKRʩ)Vc jdddPҫtg}|2v7Hmv_ KkC6`^b\e[cIAf5}Q;KkS<{- +}# +]NVkazH<4h3C/[uɊOoufzCJKGԟ8y7p+!G:jxxJ9<VaQl1` AKMȭ;[51"`Wz 3keUAp +R#{ʌVT<7^>Í'=$z">JL7=DEx.r}l$SB%SPŨ8l6FilၥIX;?zP[L3|,X6Ps+ޖeLϑY]ZLGOL-WL- VCo4 降ӝBm
!R诶wө2դTq0'L2!6'e.Y*C~:{]G]Xr%Rkٟa n;9_pOةW?mˉKe n<E@mcl.""7箑U endobj 1411 0 obj << /Type /Page @@ -4323,26 +4301,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1429 0 obj << -/Length 3696 +/Length 3338 /Filter /FlateDecode >> stream -xڭ[[o~0R -X.̛4h&yDR".Iq~}J.)JqCٝ\13izAv
v{n_`7F(Bh|_bnu"7ۧ竿=|uNI:Vy
ǏO_CÇOݭ -|2d~n77d=8Qx,YS'<7MIc|70>#;a#7[%Bi -a2+%v*En*O[ZMB%HƩqА`7Mv2iP%3mʖ`vWr.3ۉ(< HlB3r2->7}Ԣ}>Obׄ#MMȵ<F?7G|yg(s{%l"qo^;cUp^,v/Yzh^_ EvDmnPKȍaȠnY8B$fGST:u=zK4HX{Q]sHs}R,^̵ -ITw@}CDeSMt[Z[M6UCu;pȘ?OA4~؍TeGCCq1mac:Cu~ɡ#*NHw=p|pL*AEO:ǎ7ZF{ĥ>$i[+# J!'/_:&8hAn:%v =P2/,TabݠrV?BA?p:6Un: -V:_WQ!,=ovDŽ?'?V?=I4|KpyĴ~9H}qۮ!X5سbyma1U5X^1>/#XD:&D(Vǖة-rS&v>}Hؑ8M[Q/8)'B[Bm;([[DYg~g)hl1oF[3!abBأX!+C!N|,نrIFF#VDjv#8]<R+.~q$1\qߖ*E%[:< NM9!x.HzlYؑbǥm62//?lmGN$F4߶gB\-W,7B7
e˵-WŃ9]d'M, b~@/ro(<Y'бNXIu>!>,fґkG-#[bGM@F -fI"Au\jr -kbiP.k%0jR3-A9DI繃(eO -}
Hg($icwZH=Ҥ~FRڄ5V(^ѫq* -\
^тRbm*"7U -oߴvCv0W4C;?Vg{Vg$6//eѽû_iܡ5 8bcy糪?/d"zKqJ2F` -E=QOMTZ"j8jo䓌)o9
Hn'Yv|le[B\|rOۊ,jL Rv]jݯ5jIH)Q~q. -Pd6ܩ6
&|G -b&UPxn2JFᨴe&A0֜-+ -yX%J"JpX>H,5+3_"
%\No[Z,f)^^r@ڥq1Ӿc?ޏN -eZA4=os4gdD- ~%%FM?Yjy{I{_+4"a-b3^^F^, AQ^J,rlB/<KGXPk^=C5
ƀ~!Ӈ|2$4?gF|ĵtiv7RS^kvwm16Y~Ւ0P]|2c.\.e+UŽZ]TG<Q3n^s#v߃Pr_ndS}1JaA6mq^号r endstream +xZYo~ +1<y̛gILFdw(+IMf]]Wg8YY6[.="LAş +$P(;Ҋv| +20ոL9_T#NFz-w?MnF#KqXJ%kn2@SnUɄ0% +Keq \U$˞
9EfYL32>lKTT4s89 +<b+`lk8^҄'`MW*
~!;:<8Imղh{?306e +djȟ +VbkXhk7(S quŪ;Ƽ5j"j~:|Em_
|;A=
1I=^XDk&xqu L\S}
4\-[Dc& +58A
4B.+/.Pb,s6cj`5ujj36s)UvvCLbc4>卵Z<~/p`Lfz\ēPZoI'2,JUb"Ncvh̀N,T:@n.2<Ps!_fKsRHUqq +M-H:8èёhee&[U8s\$<2cM!ʊђ\ +4;.y㷇]>qw +rZ4Tq +Ia5?d>~Zc"Jg;l +ʠ4z[ +__R= 2?Fd?l !`7VK$ro݈W\Sl&XTb%L$td=ۇeek-)mHػd+Cs'34~!'`;y 8n [K,lW -"?K3bxOb.B?RB?#{^eiG +ィ8)clZog.j"rي'nn8oq"o﹚A~W7hXHݧ+Qp[b؉%AU-y5$vfwC +!$=7ֈ(WweiP$WKG0GrQ\^$c +}2˙̓<<y(BfgpϦ6ԦPՉiPL}7@av84)BEtl>Y*XodzD:DZs`endstream endobj 1428 0 obj << /Type /Page @@ -4404,12 +4384,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1447 0 obj << -/Length 1215 +/Length 987 /Filter /FlateDecode >> stream -xڥMo6:J(꣗I64h=AiG,?4bDyf4CQ/$b唰<6EaՊPKvf#RDڍpp歶BƘIfY?_rxZ -^&.+J٫5nξS@aX'̟nnnlx4n^aN#sifS7^ƪ9ņ3W'k8l'`ܴ`7~&K7,VȊg0:Ɖf&k#?s-+Q&UuaskCÙteO%qkqK'Ų[W #9Gc%z/';.g9pdoӕendstream +xڽWMs6W\<θV$$PKu_] +lcVW:Ojj5+W"|UeN-BhҬ) 89YnJ@N2[rx3OQ/B=.ShʅيKE,mձj
nR +EQvSMBIn@HUH`vRHH0$ +nիF@kDESYkL)aSvDB5<#y`<TUOzMDgxri*(S'Ǣ5Rb--Fׇt!2FPަEk-˥6)7E)fguyZϞMR'._HwoòlvE=R9E~&?ZA#n8Au+k4xϟ`G2TG@o`83gLDQo5I5JxPXD7cB_]SṈ0(8o3^1E5λuH 뵄D4>' K~_qR1NAC0zTڬfuؗ4p!UR^ Ąe4f{w4d8/Dψbendstream endobj 1446 0 obj << /Type /Page @@ -4462,20 +4444,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1462 0 obj << -/Length 2569 +/Length 2272 /Filter /FlateDecode >> stream -xڕˎPCv`k#l;8GC"$W7I]wmBmDdyLo7'z D1o.*0BcE2q0Wntl7Q&-bxs3H$ j3im<lwQ`GFqSm{7wtExpFL{NHpt6!"fpY}e|/m|j֘MBuBD& -Unt,#nޕJhm8 ɣ`$f,5yatA5]((ԭEװ"rIQ4#RyHoݣlqTQ%+cDJ&Z_W -WL8(Qpo)LsٗAvku[E%E⦾-np,Q`zA*2^Z'e -ɜԻl?XP;~|X-w,92|FTs ůx0x;*H-+H)+ȉ;U,@4lʂ.0[떬=2s
f+4{χ%?؛OuҐC Y[^?nx^'>q;tu%9& UYyYͨQǚ%h<мp߈o8]bg7Y]0Eo3ZU5N!OԚ_+1¼ ȣB9ūZZRZQM1$FN9 xbYq|+v7)V%&H8e6!
PmX0,!mM3P=fխv`wQL319Nmg[, -f3U:6v}:gJ~y -(;hy,7{ɉ̩I^|ɣUd^+mf@7'{YxY̨~GƢ0ƺLW -3/z!_L,`MT3fe%KH T -,DӸ>%׃,悹$N"]+=ɟ['\Z
1I -W. -1b"FȐBS=PpTROPG5}8z]`1*!%s5}lӇE0.tmn߿EsE87WWKWg̾*I +xYK6Waeb%z8EM'r(rhzZYr%9w$%yeonhr8*^EDDjX<_gj+?<-NHbVTHgK422SPjJF"M(:L(+סJ߯fƁA6<&u]wף4UF%Llkt:Q,+|_F +fsRd梖bq#f*ӣJu/A<R[&I= FmV=?LPAʞ[^n|ƁG]5vZn<Y<]0}F68 +nǎ9kxovHhlCMf +jz&*5djfX㿖')`@7[[`9@eP}r$҉y`<:k:2lkڎ1a9L*b9+쌖>fAW:lp(4>mZߝ4q?*iɯ4Ԍ*=/|]TK['Emt.ι/'8&،nd +1\+խN NaL\QBKɺ;hVvzWm"Ct1_cl;T3ծ?puЮyt~z +&B[ Z,r9&af40vG4S{` +qaҫ~lIazQa3HvH<JuK1f(]/CSY%j +sYeLqcږ 4yr +jj%R~NezdH±C)?Lb8r,nUzf5Xt7ַت<'+kd"d9B
9-.r),|N,ôCm Ykj!FAh:E3j(ē7XoQO!,#\TOO>*ʗn{T)7HG@|8-4a$ÓqapDnۗsg /P)ȨNMp;IC*s<q7`)9WE4 +h݊dBHNo=!aWC܍ |KGQ4Y㩳!وK^݆&8Q ;,}<I +l5gy]e& +_gf/5㸣9_mI=>
>4{^ ,LaZ endobj 1461 0 obj << /Type /Page @@ -4549,19 +4532,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1480 0 obj << -/Length 1463 +/Length 1436 /Filter /FlateDecode >> stream -xڵXYSF~_oHw逫bv9vK - XбOkb*vʅ5w A(e>sk8e&
°,<>:"r zߖ'{|s϶~}%^pʄӷOɲI=*svvW`仙#toa 4f>>u̝)?= -/Q=瑧s{)*<1,i_lkJP>lnYZ˲hb7iYS
LYH5_HDE3>
tYҊUqe_~Uԛk_2Jd%{]eb3(תM(/)2\5N1cu[2V:ցMvKAWŪe0B!*Hs95冉Ia \em`mk7sUnmL
T5NBs<
-Q$ڋR%_4݅?ebޅjݎ3<PZT+SPXU -$ף5V6nXϸ
G۾ 0oVCìɣW
8Z
-IB0W*Q? E$+nWLsq98Y&QSGP[yq;k=ijGyq -kHh#Yv,֭h/agW:fjk#{f0-LaVp"{Juœ;14p/<L -áAP8*43q}wTKQ?gi^䅸1+Hul9PD4>|84@0GWiaNt9SG&/yN>N@^^ѨjVdbu:\]2jh: - Ӯ]s?]<_6Zendstream +xڵXYsF~_o\9tLU +UW>Tu)" L
@2R8
{]
zbtLyzy@^bs%+\Ox#}ERAcd!5 +\PF"Tz Gt%"[a11ҪYHx;ݝCɶ$ʒ|]uc*iivcՐ!$mkyk!ٓ +|YVdrʂ={]wFʇ-ƽ&Xi)MVԋR|c +G]bz%Ե?<猣Xh. :SMJn_Xtȡ?0/<ibَ~q!>8u+;J-KqnwL:/u`lk-O v_sڑg[r¨-%ﭏ^߽c `?B~b6trQ<|-AqJNIJ +?x`(P+x+ZV`2_E
a{&eb1sLqqܞ^gy]'''6x<Q}slPx
=}XNC '}`yog#sxEendstream endobj 1479 0 obj << /Type /Page @@ -4590,13 +4570,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1487 0 obj << -/Length 1351 +/Length 1247 /Filter /FlateDecode >> stream -xڥWs6~_ȽI-sz^nח4ĺR+Kӿ~ - -x-Iz}C0ZSo__Ək6QX&:[粑%QѧInC$1%`5GOsbZ!?a҃VQF%ld+?GetT'灎f +xڵWo6_7KĒ5,YW$z}IHJ,DRI^㑊()-~epN1fN +ofܹ?fppG2Gxt>Y3guYVřa$uWoD 䐽yzD?lK&}sqfskD9B٧هQ +InMK!Y*b9KS9v֗PGAKU/x_j~6'ɒV9V |QFnT6PvUWMX#oC;=FD^uzV;//a]=nAR5=S>.LFDN,a|6KELھHDNLKܦ5x7ˮUwv/+j@hA;MGjw +Rr{GpSӖh -w$],-u~ C4*ǻ^$[X\q
.q!:.s?QGv%ۺno +S]C^EGVc'\*˗ Z&Tkt\ AGeAN,NqiM'p`.#
+~W}㭪2~L.%"1>qCxct2( +3 + mc*]m/cw@NUuR5wni:s{_)-}kMMM@1Lb0TCO,~Y6Q];HtjL`l-nЦ}5tt{6=2#>)ߺs0z[nCW3EJ)qmNHO{Sqq0e^~ɀa4 ?<h@endstream endobj 1486 0 obj << /Type /Page @@ -4631,17 +4615,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1496 0 obj << -/Length 3024 +/Length 2960 /Filter /FlateDecode >> stream -xڅZm۸_a,Pu(m9Cw|hAY$y7;o([C433/OmFgʏls86O0wJ8$8ݦzGjX!χw? -MimB?R&~śߞ&I*o6JW+ǜ6H/#Q5P>H1;-laG:|ST+?HCWL0 -wXϨأZ-x0j6kRo4L*٨LakIS5o81Eqo;HȔ
3p9=<<uD\^ -xjӴPkhV[{S9\l.Iy~#ZORT6ҝ/ǪE҉g~/xDؤ!_SʿC~h|LgT`(z">W#丁,o!!::U2!_NRQ}*+hNd4R0j0O
ץ2?. -rU4وŐ|ɽ@j_|g V,άåw"20\(BA2K >ؤ"#5[%g+3ףxtHiuǴ˵eHWviwF;g)qrR"N٘$t}.ȲK.q/>PX";@ -n?c:N{LJ9 ts"FN=4%Jr!Xꥰ_т̘nX/!p\nǪDóVqD? -̩ಙqK<jZ&9|oQwl|9&-$ʓx/I^(=-:vzm_ NCC+\'[lGVNY`*<8)N4zu(u99`ZV丌չDЗoZzTj7c">&'n%>jlNx(%uޭ=\-Ζnys;vLu1=w>DHV(a5(Xې%,&
~IIolԛ3endstream +xڵZ[o~_(ut=݃&}h r, "l}F}(XpHo.J|_|SaoTiYlGX8<
,B$2ē0Q*uD)n(,aOnQn/wPAs7+~|_ݥqߥQ0@/>>Lb{;
S&|uYfL0f?f= `N[o(rOyK 7q\<}ʲfʲ돆);-)Xww0< S%/;hY-l`*so5{0s])h^IGx$k+Gŏ{*Fk[fZˣ+h**@(A'Y uz3W;Uo
(Z0#WC} +m$d@PC[i4
F
Nd[HbHb(72\W3?1_XM +j&Z) bE6;h%}h.LCV?DףeW/eu<6 +OyXYO W5S[{L7?}-^"cσV^t'][+=qjՃjwr +tZG+~d[S!⹏SgCdÜ;F²N^MD%(Ga&U7&T5 }9Yэg`MFݙ;vfΪ^F +nX(-x$/9^Áb<,WquuĢi,$8qIK-=d7*\yI,DƓ("mٟ2^ncE +{fqXq0X-\q>JRr1X){`ޮR;`"86*.iN-8kUB!%W9:s*mN`fb Ɋ%WnX +ID>3]J.x$oA7#}\My`o.ȢX$ZrdQLdt7c}p9 6w6sPC/.߮uKvu'{, +ZXy,)rynu^R7y-ծێF>D˳L'e.pa$Ʒ^`^n$BQBe-H2`+v +irި +'\Ys_գ> y*E8̋`,ͻr?âp4 wPyE+=JH+1`$ f3n]
'Ô)q<61$ef&CIjUH"39bYzR(pYsk "+&%"/ʯDAl7IDa]NG#hυZ»1#&A@#OTǡE$\bfO\bfvQҗR$.Qg s^Lf1 HUzZ9S7cuR UWˈ' m$aHFX6: L%O1Ҍ+b<GC+Tsr$b^ \ByNEbvW +8No+r4~8X#%Uw)?=F~)-NevWW81Ux/}*3\銗<$G35{Y{yF$`Xedzpi{uOII?Qendstream endobj 1495 0 obj << /Type /Page @@ -4682,16 +4671,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1503 0 obj << -/Length 3333 +/Length 3295 /Filter /FlateDecode >> stream -xڥZrF}W0e1č -___˲\tU4Nc# -͠YYc>[Y]S-
[jHvC^9ChdJ% -չ^H+3V-c-蠏Ұ%}!8<2h=+XX<%h@TMV0eH;l/1+"13bbWqs ϊT
ȹ -doKm}V8|7`e ɈX,P{Q
SGC*ra
X`_B-f' -m4q .3O\wtz|Z')TiJ84k>hCI3 Hc430ͦ~$+Y0Sq4L x1<C豲Ӕ'Xl([O;J&d*iy3sX})Ff@E'@5%Yչ M8Ѱ(`ϕ@s1`p1u
f%Ȱ3 +xڥZYsF~ׯ`%`ʄq*eK^^V +^__}фG9, +7HznE~|漇N
UN%4ESr߁xQE6=C[(wv:1u{~TW@&pbPfB~
/iLgf7}TM;|AgQ;=lMw/{VMU$͝9UˢB?ᨡ;EG +
/Yl\khFal£Eg)fL +6 +Sj^*Gq8 +%h q +l K@d|M˿8CY<a#(7haa
28lo3&秌J/ xCuuÀxFzjzzv'CX՝<d;B3f]E-9
<1K|6r>LT 3OR}4r^bV1nv[Zc#m`Ǽ#
ZAؚ#1U3K6{!UïQL +[D>:,r4H>NO%t0U5<"E#?ɈYȎݳ[IO+%BGZ#$^c=Mp}r=4A]ڮY +\ OZLt,a߸`-.r#@! +( SqУLl8P~1 tl(9zϭ(:bYJ^|w`Xş6s4{sP)[i=:-rfa N
\Xp5e%^1qL L/1:N;"?;(.Y +&Ӝӑ\ V' +;$=\TTlQWY$s qZSaewO 8EXkVDQ2"pц;xrM^ +^>-hq}םdtC) endobj 1502 0 obj << /Type /Page @@ -4720,21 +4717,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1509 0 obj << -/Length 3663 +/Length 3475 /Filter /FlateDecode >> stream -xڭZIoHW"b7'(z@YE"mU,jqk竷|o -gx7[C&avWSG/Vg&n -0lB͗{K*P)gL*|}פ Mo -B&0O3O>\)`kv -
Lݪg;y58@C~ʧbcwxTí8ECiFPZnФR-m(VwI\.PO7:Sc;&;\0KP1C[V#JWb`˰XOehO[qח2]Vuoy+ই7^=q -Qa;UӒlV2Y4+!q'䰂x[w^:sۡy/noѨ+ulou[N9oζ -?=P0R@ӏm?12np*s`R;mp6xެodD8J^8JYD}tD -HdȔe'gA -|QzL.ؐF.>DPqtlCǗdȚFvdi - -V<ERy٨D@*x0?o_ +xڽZnV}Wz1ps//ؖ3Gff Id[OUM +$ }r??b40No'izI]oNSB{R\-~s_f0ԝ4s.|l;~E%ozy.E,ȜO_>~dyFI~yv@et}šG_O~/:Ŭלs?w >4&H
i?-E0JId6c9/'b:[zd7͟=8 ~|+"A:2˹s[WeT7uʦG]:yo3-v[響vSK gíy",̹5q#h]ro,,>1*+s +Rɛ= +7\M_jwY
dv^b0~B+ur/KM7}Qة
ֺGjZB;f21[`h_]1Man{B07Dӕ4K'(5BLye +02ք|8k$7B#F&a
Q-Bh#>0p⇘@R6=6hu*zžVx<N"NI*M{U} e}Ȧۢ%p`m*}D/45w62h#H;HԝVQau=v
);0q4e)sEԏlgX;Yse`|֘~|y}6;LB>z>z$㗬2 +*7b$R{(aQ@ahY4:wԈOVZ-S)qpbx4u̩V!<D$1eذDPki.[qQN+s+*^-a2KW8[ +3az]K3%bW"uabцϵK<iuG<'ex÷eJ3= +惗`>M0^o8F|DF!Qx8~㯈
[C(a0E0Q%Ϻvyu137)tuƚhޭ0l2p/jIlg64Pvݬ@a +|v#{- 'K|,LʨN,'jo,u3OdŘG2ms`&&5!cWZ!rqJ*3ܐģ%a2u64p_hl,6Q`*ځR:Uc|n2d*I>F}E`Pzla[$cQ: +wQYodY<@v YYn?:ltYUj]4%4BSt!MZsCe9)<}bx -6+]82M"XC Im7\ dU5cL!c<HTo52}[JR閛4y@$_H݀p\D \n>]S$H(h8iM Ҩ1\eΉpe F:w`1v- eAV-]J/;u娵PTZeV`G(tbd<ȉlD?R@N;ljAOmJDݾmUƉn1m')aSm"i,c5wSH>PvZղ<gar
\Sim*1[IF0 FbQ7ATp'r,kp.4\r|Ԟ]v/Fn1xz.?
X +sTXj^±d;XFW=1ubP&yI"]<?],#HLP-gRVЊEK4b2~[xh0lbv'k4 +'eϷerqy;Mirc,?ͤ}ݕrjOIȫ1@R7I?PhxQ&/c2endstream endobj 1508 0 obj << /Type /Page @@ -4775,20 +4773,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1517 0 obj << -/Length 1931 +/Length 1921 /Filter /FlateDecode >> stream -xڥnF]_!1<E1NAV -6-/-/sccVl!Ȇ-~rNR|oz}&+SKGi4qI$к]AXbC7j=1~#g]R`SS;隙
NSУՀc֔}}'JIWeA\E[-= 5~hu_2;MU0|J蚒 -paG1ZS3"QXYƂ|p^"4G'XsfMetھsY+P*eU,F`g -΅XmEiP%=I7eTX͆ -C)d80TS|5V9%)* =+8H#VH*E^(T%|J< --2.h(q҃IBFv-*L3b0ciǂ~3/xmnc^;@ztwO F&!.!hF'1&d@#ٓ&D&G4} -v=^,ՔaCMsB6
̵=2k?OW2p#DWGa4(g3řYX -Ip 8FKWtd`AsmmK -rP'2a=G㛼zgMoaWbS?mVKf*Jz$m5: K -!سQczt>* RZ +xڥXr+Tڄ)|r<85$nM,Z$e +I|}p +A߇_0 +/s?q>&EW6iF{a.u2}i5 `A©rE诖~L]&I8X'v/B +:ocI^F$*W(uW2ڒIdvmÓ~ܝIQÒNM5W5F((n +NxE-Jlt&85Ҙ6Ps#W~RE%nӦe\\9M/] + ձ~n>'#ev*ݥ(8YSԜ4D(>5"e'd#}h-}r8[C˼#^ut +_-d4Hh}1 ~䬭A,՜<Cj{mmבY7]F`Ș_c)$
4FoBX>QJejگsOrmY\Ur\rQm5B7pfY;F vۧ=93&gG$B`'|gj仵V]"r!LjA@=lDPjJX13ڎ1evc%.:2kd2-Z)!q38ԝ5/I۽}Ukefy'=<j8Pj0&O-C@ +QT/2Hd6 p"t%#_- KKEg)sB>4K (`Dcnv 0yQZ>q9
p]d)eܛ-d`j۩AS*l+-/|JH!z=CR]v^J\Fi<M*pkXZw|MɎot&t +0^ڝ_ +hZ|ӣNx î@e\/4jK滼?ySz(rFz2 +9iXRz_Bj+`җ
NyH@ݗU6[ K4t\Lto6RV@}?fi|_CRz㿷)K?w^NU
?|*77Fendstream endobj 1516 0 obj << /Type /Page @@ -4805,23 +4805,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1521 0 obj << -/Length 3228 +/Length 3207 /Filter /FlateDecode >> stream -xڽZێ}߯CV4@q֘A#q$z)Q )ߧNUuu)X`]}:uw,LuWqhn{mhwH3fiJ+K;̓0JseWIcW.<7wwq&N*
S=eE㢊^8oKXTkuXA)VuGn\oQf* -m~9oQXE Yfa~XDq鮛\iLʠљ~AL=~`K./~'
r?]7Pfe'TD{uQ#[증vbd1=u]-(x8"O鹈
la`\~i>0U0mԼ'9bkN@MHqpԙX_ZGټtA֯*iky$6xN+F29=NW!-Aw&-Tc}uia%v'#L*ikVowնİt?53MWs1ܧ߿`"Xt+P?*7~Sex%y|i^e-qW5ARL*//EZ -w`#KOdٙOYk;@EZ.Zh(ȉ^>4-k0)(]fK%z,*d-:2܀M` - -7/Y$%0h vmXGgOnh7_g\ -`͚| =sMKvWq -ulwθh:V_\^PU΄?>f$2!!tN(geYRV-˭$aRħnwvRMOG1 dHJZ+JLyeQa8xΤd=ش5tIFG2Q-y\|I`,ݯե$"0lpx6 -Ab4Fvr,Zm
.ɂwfYyj༛'xfPf4u`[k? -lJ^Jci>1gai'w#b/ 0q~@yQziY_(WqW%E+tS!sF%ҠROetqW='e&. Q*ĺ1[4Jî;ٓY0w/Dn6xc{IԠH~@O/ 67QD#. k
s3IijQ:j+XUh0x G7A΄Q[`0 f&4iB
ònh"ፒ,Cؤ{%O4?( -GVbXD쳻ꋋri_(XQ1^ILk`ebREgF7ʓjDE$ze"y3M$XO,7.S)ߪ6
l6{)4<'Gk!k@Xa`B|${m.Z 9iYt* +xڽZY~_1,hއ$1ٱ CđD<;>UU7[ OE/0J뻲ôVw݆F{,O<˨}epiGEFYymNRI-,#㻯>&]E=>j(x\q0UfL2͎zOF{#2HE2qǿ̣e Mӄ8q~GD}XfilnFpbTA3z/ҙz&./~'r#]7P0YOI2:/giXhteLϙE~/V=- /ОiLF)W:_q 1:+u+_(A7d\1BGbcw[n$tԽ +am9P-j:G˳$asJm'#L*ik@Jz[7@;ya-IYPqܚęeY+9Or0rg:p{GہI)2sI<D4a@_/8+ +֚I`%&q䗗gb"}-D~ڱوF0yQlBlu,,axھ1Slyj]#5Bq. y"Թ <v/oZu"Qf;ci};|u43/-w1PUL:3_f8uĶdd<6ٯ l0^#FW{ W@<81> 0V #os +,&asHO=x$L~nxуwp~1 q/>bg5.HuX1rYf$ +/ +#$e'lܜ7ʷtvwyVJ6rzKsq`K0zYSg$YkrHXwh;۫QЪz'ho +.Eɳ)/0ʳ3l4ƥ;6
vyaR>L2=<ʣ%+8qWet|C?t4Y
N/;F!H2OW8Ek4> XUA_ %Zrk44OMw{$oNlaN64VFsjs&}vrg1, +]+n8uf> +?s3&ĥ*5JbREgF7ʓZ=K`2e֚|TS4S'ig*N^r3x +
Zk#+=N)InlE> ;
qM3N@Vc^\Noڽ4v2yvZ:Lºkr':S>Xg/uгt^WQO}@'F^#[d_:PV];'o]* )`JyD^"KĊ,bZęHĄńJ +P'Zd*\vdY!P#?ޗn4ԙ/&S
<{*C>>I5?-4n=Xfo__{K/q͊@iU&Y,+aD%v%T44 +7gFs҇DB5%[daVV0=N~YK=Z0Nz8> k9 -B"<r![ |;g=iߪ+Z7(~u@ .33*jԫ{i(xb97,n=8Wi3\25pool(6Њ%q֕z q#:mkqlJ3Cps.2r/#s~OzOgĜ ktv|C#ݷX] /"_e[eG -
O9߃&j:*$3Viab|s JW.Jn4m;p4MUw5窰fv4;yE&tS^{34__ApE]Z.P4v2BHW)*d`2^n %IͿ;q3/ꄠ-4YA&>?/3eYP$endstream +B"<r![ |;=iߪ+Z7Ǻ(~u@ .33*jԫ{QdK4soPgYfzq<įҜg|teYQycB@+YW=|3č2~جgFg)#Wιmtw2Ўx?mnV~ |?>u`.st_Te;#2 /e_DJ˶ډ/ +endstream endobj 1520 0 obj << /Type /Page @@ -4844,13 +4846,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1529 0 obj << -/Length 1103 +/Length 1084 /Filter /FlateDecode >> stream -xڥVn8}WyJEɢv[E,XK%$\HNE8pf̈Oz: By[mG -#b,8lRra/tѥ-Ek*(IŢ%z#51y2,E$>+#yTXΨ@ -.?`o6ԫxeendstream +xڥV[kH~yC5ьxnKzY[PJ%be+1=IMi)\o9S^ ̽4S22o=H^MHIbr2@AkR)[1{^L0E&~fX̦:S_wX*1{{5SDO,f9+L<HFI?r}3 dgTym'Q8 +,',\?҉)l@fYtĭ37>Ԑ{?#cS1zܰ`7A0 ȺkAo`5ؓ@E'N^[_7 )fLTku= f|kmqS!ȳBr8Yf<;70mT4㣱rJZ}Gԥc:TD +NdbJ[Gh[RukFG;^wsXY
+c݈aH1"ܢ/*E endobj 1528 0 obj << /Type /Page @@ -4867,14 +4869,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1533 0 obj << -/Length 850 +/Length 710 /Filter /FlateDecode >> stream -xڭVMw0+tqI>kW)]
؇$4J+QD@bCy!h 3_ X -Ia"t'5
1`.ΗkF#X)D)Ü2Bh=KIU<KJ"^l3V*]d'n|hP! -UHI3*ΐ -YeQbZIrf\لM)DK]b[MP +xڽVMS0W(է-!R +Nrai줞:6(?BL0Ae7̥eV@qC@hNuh! +zcM(1`F1f=JwkZ]T=e#7!HBOel3R`ilIٮOoJl3gXd1$mIfZ<>DI[sojh.yaNw>8SL6a5xH~>Prmy>*F ֪|Wu.oķ&^ZHQ2|99>D7wH
l=unea{ +wሚfsJs壵bvA?~ydcpjhc@\CiЬ/{I
q$[`i[yܐj`y/tBw"=ݭN8PxkUa#V?Mvt2 g%?N|gV0'Eu$*(z@ endobj 1532 0 obj << /Type /Page @@ -4918,23 +4920,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1543 0 obj << -/Length 3491 +/Length 3256 /Filter /FlateDecode >> stream -xڕrF]_K*08rm9UV$ -ÐZmH ōk{ -*
Nku^*}(Ҝ_ -8NG7Qؾ?
58)${/'9t<Ɏ!J4s!`9d7L0H>#ݾYuFr|]U!;D<?}i'bVᢓox9Ɂ(|}~ض@;߾RibՖOS;^vѯ -؛oV>N)l -<Ul(=κ'v"G%U@F`G}B;5ufޭn?^J%- "ppѧluCGrB( -Mpc
T°n+|"
m5\ 52bX xE'D
m;CLGF`ٮ$hH (%z:#X`+]툣4,"Kc -k*mr7fӅ9XLS5 .kZ/:$vum8G2 mf&8)滤,^U%{d)eVT@VI n簀HP{1G(0oI"qSA);N*<q>s(L(^@9]p'HuͭAOz&M:gDŽ$0tTVbFt4CtvLbgFr1)z6~8xWAQT@>Si~Z4 -_7eKݛ7Vw__[oWEš}5˳+5/QjS{o,^գl=G,(3䄦îIVHpݣa j-xlLDPGR5?}Yzasٹ*CQI |>,-6'bsx,dy,*=:ĵbɥ}$=!'k.HЅkL0xQg~m -z:B@ta;J?x#c[WP?naP3ridL=ˇ8owwSXGX<*45vi~a~,.M <oENx,MS}#6S -dזdڥo\V6u -55pH{<CBzh=p1z[f,T/P}aڢg>ofu|7shJ8S
ʚ2n1!E>e5
>v˳zGɢY@Sɢo^0`W{<|<s!NQ;l+j歬\dy|g#EFKu:+C$ωtA\gex8-Ëi:CWgvnJG}p=ºY9RrGRdK⥳DGәEz@f%5rtdњ7<4{qlPqH_u弸#eEei ( - -L9hp=5* +cTsO|m~cTGH롚Uv;T.^jMÿB;hT26w|"u肷yendstream +xڵks6_*DIL&9N.MDR'|$d_> +g%,HD"-^xn:`-{/
a_?eh.`K +f|uTeL`OVIܖ9KF;hOѸ3GV[ިj78mxrQxKJ-1bvW `qxF P!"ȧF'"-rlg<٥b} +3tRw*Ņn1>Mn=],jYV۶Wh~@4$l9Y[/S}ʪEVF-|8:4ONl(V!tk +ō +W{'+YͶdFI;'E8i /WXPC +OSÂqzBz'1:(qGt-ekCHŠs}^.g8-_!/kTldîJ=g$VF;]U0)7R=/wʎUp'@`x{;#r'goVt'溓}>&q*=z@n`l·~Mkܾy@t4 Wӑ;r](Q +@c41ld&H#ݾYʍHI#<=B^]U;Di7.OxÝg0a;kځ{n8‣7< K\ +hǶ"8)lھR)zTcTo7Ȓ;Iٶ +6HtLZ,ۊPgUFU +̐- +GUyT&sF0NH{Ano!Fƍ@X7N:U^6,JA4?*ƞ +rm=;xf@NΜ
g$:MϺ{40n:mqY4%|Y;d"{lRCeHٓ?_Res:[b"WU1aYCL +Q:1)zBZ1.jjwehQ&7>^~X,~~כMnEg'-s?C}apX>hL|}SVA1?u$=Ѹ1#NWpվ,GF'QvO躳@iUz^8mLJh+X:S((AWqวZ[NL,u`vJj`ϘEf!W\>A23뗼ٱvR{MVzYvE)s#z/\odiHc,\z:'DfY0y'W(Zoӽ(4mBtMJJ+MqUwtDAΡ9Ǣ{9:WSaorPO6ݸ9
u<,ڦ4˘PvaLXgĔnEӅ1GSt*r\TmUQ]0}D"o`3$NgA?AlJ;^>ܥYuvsmӊuof+6%d:٬zo]Ù'$Ew#TߧsL +!_noZS =T2z6j)4-N :A$^t8Mt>NօKԈK
&MwGCM5 +?!<GN%MyuY]/LleF'e95psjR?>=>c vhvy!xH=KSz#ɷ:Ǘ6aW@+0.7_P/Xbn5OgӑxJĨ8Рuh-!2 {:DmҾ5O)a ۦ#mW[te0t2*uB䷵rzJ"=s;ƶR0dBoUڶyr/$BȤ9tJvYGۧ0hǹr;qDo*EkyH$0MDx;jXv+HR._k LCnQ,\'ΩG/KgsvcqZLPPŷG?珋%z\*"yZx endobj 1542 0 obj << /Type /Page @@ -5024,20 +5029,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1560 0 obj << -/Length 3211 +/Length 2921 /Filter /FlateDecode >> stream -xڵrF`bID)IZJaD$$@ק_3 -@Ս@ww[Z8c!C?vi8EDyUzP~a<3@}. -BWNjAFitBΕfYOxjMq-:M꠪5'y[rj|it#ze[nj5̤xL0qx+bQe$*x/ ]BK궨JAJ%oh:mw<H.dȀ O<e^6Ǫ]Unm^!5
ji2*U'@܇].@kV /pE`OHU֨]>i;$GZgwLiNF͐#p
qHk("<:֤B>x^
B -ME]^-ةCHk0c~?=A@!/-3}4b]ņaQ+O#hgy[uQ{!>O(@P w('(=W\\bn
Ĩ$*sC$'$c>G(pf'Ws90Š셢 -E\a45q>+҆9{6R{ǯoyFfW
CL^ALaPllQo%V%g;~S+'JcK@ڭ`)zν^/`bݥ}ap"H4it@#@`pÙfG/S/ط
,Rյ`nMm6D^W)rqڢ䕪4xrP}S]S<![yFS
DhV!.4?\Y")L(eLJe7Lit@F#@(k8j4SLR3Fӣ)B<c"m9+ -Ncp,W<eՂ?aX~(Խof}t!9߸3\A`2T+¶ Qtk`$*Lza -7td,J,~Ѭ]^n-Hs>2g'W GE+d;48tzIȺPf{j :u\<(yWYjM\MnXMpzͰVq"ġza>Ml -rgKiEUα1bzIɢ]FΑ3Ԉ4Mb0-ssI+F5ٕKAvmAV98`QpIMwagI[vP/➢Pf$L͜UqCJ+D9jàFT!v`DT]|
T|b -`ª͈* |F<Y*pғrPɲk, -l_2Q
#>䪴,[+l6(Lf632,t3Q +xrF`Ġ9K$c)5LJ +fE 7wܼ|;EQt6g
/x}yo<z旳77f>w,<8UOgqIɼ:> !ea~c0*pd̏39'c7Tyhx~3Ӭ[Meլ7:8yUkaqf
tMt[nu| ++Y +S|M(LeȘʰZC-|d$qs0W~:{aK9X5%I]7PtGʭC/(3}27SV/X=p-V@Kl
n%0h?x}N̰oA@QdU[p|atmc5gު%qQkE6?'GbEeW
+{P -
g$,UN^8s +ssr~Ȇ-fFϖIntNqt9G'z~ziUzſ6ʌÓ+w ~/^ؓ-EWkްѕ$xz6ʅ9ΐPym*ڢF7 &@ +mc qBz죸8$F>8KT!Ll!)HOuϻ#8yڅDhĺ^hkC[b +$=\)oV}zW
\@"֯!ٛy_t}^$(IH9e(g];dtuW.Ҋmpڰip?%6UČҝaӜ%^5Q}gk>:T= I؏졏|ԡ({hpmp'54v(͂A#?g|0%j1zLjZL@m^םğX2PM4x`w`OQl' B?Q˹9X+TPBV. +
N$&Ɩ_`U!P3DP@" xqShO +ÿ8˖A:O-^~QG +W, XuQ<]w˺h\lĀwmAL/]jՇĊ=`+폩uM:a7<By^_ڥ.jL ! +DgHqⵛaj2jHfHR'bto$O=Gmlĉo4nܜDa6<53RtFSz +Vsorg@˖(J $o X
"+\BvDf]Dm]4Iu/GaS^ +$WFo>7sf +F9EG_r%<
v}]Aam5rj,
{=u <G^`(LU3"=R`ׂ;5O{ pM14py5d[8[JH$:`^ݕm bAJH~̇ +z8t~ɃfM9?\Swrfg{6*RRsRGRu-u}'p]"1M{<Dɦ坲vaP1ͤqLvL_R!"*$]n&KX>7a=&iC}ӁHIF ˆE,mD>\n=#9bWP +kXvx&k=m2nΡSQ+>bw`]ކѱ@gJ,ߺ<@6ơk1*#l;
bΎ5+-J 2m1̩JUSU$H,eDeT +{{ɒŴ1߮{?~*uIe_ٮOTD}?{8eO2IDžҳ*47I>S`Zendstream endobj 1559 0 obj << /Type /Page @@ -5108,21 +5120,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1576 0 obj << -/Length 2312 +/Length 1683 /Filter /FlateDecode >> stream -xڽZMs8W -osKdSkkkH[HԎwv ~ -\lOU WwSB;̀&9}a -VLO4(y m`WL\z1#̨=3WP=ٔ-(y -<̔~7vIß7ac}aeNha<P}z.G5T[:̀nsid4Pq(!HĠA42xx,%~]$lUtW]GXFG̠P -B&MQyN8Ĭc$ap.~`vCl0LLX_Wca1`/Kp{N$dÑƾ -'yO+Wnvk[mpFh18*)GE,xD=ve)ib1 ;[LD,vO+.cjԄVJ(ȹW&up'f]}zw͛'SowqLKqh<SBFYlmBTGQlmʇ&KeC*7m|7mJ|2w̥Qx/dFa"%2~DRp -eA=@Ԓ^3]mu或$mM,مK6<|6ζw֍B0 ʲDcַhx-K<L8X<ME/Xgؠ-HPō -5-{=`6[w]qJrQԐW3PR -r/kd
2+{mesoԑBbԃBOdKlt\jw8YQчKesa]p@1Q:nӓmأImU:HV&p,U) 7lǠz|tEqW+cn$1k1C-'<PD8wSPn20ĞjenB!]"=Cİw\\ZMB,
-W=qhS(m?,R̔{(_)_~VO;qxR*-DWB¹`7͆v궭вX# +xYv6++S"x@vqOCJHq@E6GC)m ܹ\lLᇍ"Tر6c//#Fб$4Qjg:z~@'%
ΣW/OXIcc|ztF,L<:O3%xY;I%"FgWwr %8#("L +{tvz2a8$#8Izcp??/y1.}7*Kek3311$kTO@?-:gzp8KO~lvr'D$v".u%A"<酌kµXC' +x#[
-eH}l3h998+i!o +ul_n72)#-x{(Ѭ-D|Ka +!=-ثӖgσDЊ]Z;x~ g-k z?>9ؗ7&0 +/JbNZ T؟mA3WţKG4^<"sSndӯi-l+so]*LXkj!@[yq̯g +yZè@̏T~|u{Ze)]'oӱ]֗YAq.fܽk~D!)$N$LJкKY[Ey6}.}C!7&Ŋ b%yʂ}|3ڸXfE2`2Wx;H\;FG{Xi
"Y=#c߂.*RwXA:~W$s$?^pendstream endobj 1575 0 obj << /Type /Page @@ -5193,21 +5201,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1589 0 obj << -/Length 2628 +/Length 1906 /Filter /FlateDecode >> stream -xZ[s6~J;+ -~5 - *8졅Ou6h:;PH_.nLۼ0fqw-\ppXXNjxA_܈!ơ11bd52-\\(f<ۮj2TCfri2kd2|TB>[aDt`LNVӱF6 -!gPG@}jYkHУfQXˑ,JBTܰ]eWh$9Ngr+==@"~<>Vk3B>ab78>m$bQ'ΰ6B2-속ơ~[۾V96R9V`I4P_Xj9
N%WRUP\D~w5eS^Ze`M -aXDB)V a*X0B
%cB;g#tKЖֶ 8%2ҨwO}Y D'' -D/&v%_b2Z#7
K5+\P/"z-owWdaw\+5*ЩtCS
V:@Nb7&2bOgpRKsztZ%&ۧ\ȼldDj<Ln=7<bpИsLiE^19B4B}&ttzwz4-_sޡۊJCOMEsP&I_|(q)B)B[JН!K3eJC}66;ZΘ:&斤֑P' j嶂"LJ{I /Z$:,s;c)<:x8{h? -,@OEv0lύ6lo5~@yRjAM"*ѳdg5
Wa]Ў7zm9~*<TQ/4a;#.l=r(h;dd{4WK -:*#]ldfF慵5a;YsaM3D
8G*3I-m9&IK$UBhB[nBwڶ]= *#e|=ze%}!$giԼl9uꎚI_ -+%&WVö_Gn ǤB!+!FhK%l@w+g2T@8WVѱ4oUAIoxxJ_4 I Чۏ]O}G;Cu%? '^oU|Yce"G?VԶY]ɇww|Hl8pBf90"h>(8v>ɴUn$b$L[HLjMP$!zБ'DĒ)ѼI-Ԥ E3KH$듽rJn3HhGO4qkUq:dh=F-S.dd+"U=WE4(JZў6;=jvdÒzg}aHTE
Q y0BAd4p/85%~TBJPMH$i Ԅ8`K{6H=sce -^w 5D`%!L %FP&ղ͝wU~.<a*Ҕb<L.L =bj7x%Y pVz"5?bs{sNTyTsGM%wtp6K}8Fc')eLcTM[K*H}lWzhwU-jiG,Uj#v"?zQu<i7ՎIRNa/Vm!] -1mt0GfWԳ/!WYmDj;huեdI_N,C3EB>T",ѥendstream +xZ[wF~ׯ[l-ɉ9Zj_< RQ;9f]fg
)L'% ˁ9K00=CǃG< "4+㧗8úv>fūs|䧑vbtp9߃0x105ܛ +rJGHQϋhG +C~aXm7;0xaõ5Pl[#ݐ<?{~v T|)*@ɁbiIEgSYoEI^! i90\L-g%R,ږQsb{YD`0fHJa)W +CaVkiK,]e yr @v0D,%mKHZuKY_{ rk1rUoL4a&8 +
|R߲vH%(ɺWrQ3"s~W|?\fj@U/L#݇WmuoОvHi91XJE%A7H4k}ıw0bkmtm2-Tr<gs}6q\C@N
={m~e9P;p{DhAü'i9ʜSH~ 햅lYRM0O3RYCS+g)v_"Ե=Fi +N:Wd@;*B +3H<mCjT3՜gendstream endobj 1588 0 obj << /Type /Page @@ -5272,24 +5276,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1602 0 obj << -/Length 2957 +/Length 2155 /Filter /FlateDecode >> stream -x[M6ϯa,m,KG2){읙h,Dy>h@9rLx͇FI -?gx2 -&, ;B4!!Gbf $z -˕9h?{?BmW7Oz#Ϗ%600 twc\$Xudt - b*6R+Rj6tx[ՋF} @ݠAL$f\ܶ'GvhthƘ1Х=w=V'nA|I^=Ik}r<}TMqx4Z
f@.ony9Oj0Ҧf -3@.馠sg|~K_҃q(DKx>¡ezw7L!Z5ȣREگC -S.*IHSARVjXHIT<H0[ԒPQL)Ti(:ԔKYG.yoL[#)sjAX6& -C`]b~tC]7tuU4PZ<j@社Ji;NXr@:8hTT].ݱ`TF,Nfx - ubW記B@oMKs>2a78T~)}mkj`U`-L8J}_1yh8-,o奵ުM\$92x4#heZ:UI¸GAVբ.eBjG5:'|UHS!^+q578SrbkM=-Lq H3.xAv˶{<K($'a`A2 m8WLaN%ݡ.l"L&Q".{kaMhiLր({Ԣ (]-R]BӡlT\oY~(Q@oPӛ"v;ӳmкaDkXy=
9QZld!8tئorTN<nS*ڋFI0-W"gaN=>Ҏ#5C>s[u[@#/ʼnP[$ێK)o=gB'q nGHGV1 EH}SYmuGz0(1t{9b>]A8Dd'@x+v;~a3Mxpaj,:Rtd '<==Dӈa]gJSggrfnl+")S֔DM%&;fp
W1o<E+8mժeZ /RlڹR -ɫt[>,(mE?]-´ -#N4G/3]v[kWR9p
^Dǫ<[!Gd:k䥵6mɥb]-zhc }y nՂFG-c*3LTVdp=eNK[ӚNhWL71"ͤV<iI&mN:M
I7K>?U/QԁyY0h.y1ƒ+ -7ZX53B⌕losz$=]`)x_⮮iL/nc?iZmVT38B5_~~$bѐ_dB7u|&a0֖ϔ~kN۩N -*GcT<d@N^f;s5@@(#GV1LjpKjb7-͝zBŏ>_ a ?<6ے?62F.KG%mSZYmSe' -p?u|!Xyj:sx1%C6>X|~\֘a<|ViB=#8)Gԩ1LrǝQ_
~0찈_3oP&/[_{Iy\c<0_!يbadQ~QKd2oPhIg+9cJ;O!r
nO<eKK!Udbo<HLD7?g endstream +xZKs6WЙPM@t?g'Hʼn$*$e}w$-;中3,>>..v+¶8A[nFpے¡C:]awnHzW{NW9QN}qYK]렷GW2{= +R{MRC:RsO:]nP0Q:ӿÎpkoW9ge~߉t6)^U(FI<)'f¬_̲UQ@7>S!(Z-jk>I/:sN!8y]Bigc[DYS*)*p!/\ڒE`7 +SI3Z?U<d@$'t(<fZ`2@DSMpJKIfx>RVR*'!Ymߒ?B>3$MǕ^Q#w?F#u0EE*\kq0iz%t[Up!m؈KVƠA%]9z+G!dDp}2wku}!Z27K+&M@063xx@+raMtNah
Rg5
Ȑqgw_yrt;K9(:%b̐qqh/E '>:zC6m6?<A\R"3ǽ^\ui`y*rp#@14P3~~lFV/)4i&DxxD}4NA_o}DK7HXc^ 8^lxQU4@Z;0M(lxnս[㰳Ofb2hlR@1Bb?Ě +g
{4)<pD23Ĵ1<ޜ +88eNuq:|jOy]]ʺAٰA3lc;?ɥ7t"ydwC}g;wqࢲ>/P-- cq3 `),;% +jObd:1ԡ"2+.1
FSӃ4mͰMY&GЊrC
72%apP:N,`/VpM[5P +Y:cmq|uqRD؝95? +w'\}J +4x冩se}I@C\WxӘ=wRϳICzQndֱVw_\O+93~0c7{yB|.zڥY?Ӓendstream endobj 1601 0 obj << /Type /Page @@ -5342,23 +5341,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1612 0 obj << -/Length 2719 +/Length 1948 /Filter /FlateDecode >> stream -xڵZrF}W-`*cnd\N$'L嬤RQ$$LZVO\!.Җ".sf{C'!D8'd9 'wpj39NnH0\6H"$\>?s -:IHxL8$noNH_uS(8%1I^
#!`2)X*ꂵGH#Jl!%ah0xt˶ZbHbJ|YNg, Vp8IyD1cD֢HEqH0reW-,>0f:A/dWTSsO
+MF<x -BU݆ -/Vh)BܯtQG(!<Dj -u9f_2Q}uUz,y!zȂ*}~$3j&0
PPd3E*hQ,H9#UX;m~{F'b>=Qf93*ӡ=zIJ.91coʜ:hpśž{Y:R>pԡ -`?/y^a4~}thU ХfqPZ;<Sxzf}N1ЎUc<ji3=~ٯ[B1"B2n1aa$Б XwZ<EG0Rȼ4Px
C}\Ĵ9jB*(T $ b#4 t>Zu i1T)8ܽq*`g#'Id=LbJ^-Q 3[9Dk.\.`R:SĘt^CxM!<DpC=1y䯁F@E#`qD"*ڹ"/&ۖ}!j{:(X3A$GBa!qMj%gCf:lm^tQ'sOHFyn@G]E?p:7Б}Tb9*v&l)Kg
>'4WI}&%
#(\jy^q;SE
4-͜(p]~ً(BWf<uͶY?Ve߇Ø.̡V -pdAG%oN[7ysiJǪT)HЙuo9kxCpXK-Q̀ -loHP8Yp@اg7_܋-tҙӥm[Ҍ8-ے[R>wfT80XC凴}_c}Jb6SjmiY cFitTb|&l8>8]=mH8!Q:|<vtTeN{ܬ[pv9?IJbWiik9\Wm-_91k=;JwL_ǺEJ8j> -upvq>N@b+}\3
6W2Hs>TUxGJGqƹE7ca)ykLOݠ+
t5C)(\qE}G<ykNi3 -J_bq:+Z~)2ZlÚ<g@XM
*u/-ԽEK|Շ -ӈ0I:+6$-XhX,:Z,/M+KA$FG,:j
Kk@ڴk .묁4jnPh:FGa:Namp_a1607NCʄH1v<vWwK:XS`7 -AꝦ#&ȣQW8wn [)^-CzqLm`q ;~:pQO -M9ps?.qENd~I[9MbvwM DT +xZ[sF~U}` +ZhYHz U03o:üK +3g=kwdE +L0m;t:wdSok?*qLm5m/w]༵t4 + a2T>eRygRf)5*ϠVt@&s
_ LRC)x}a}$U]K);.x +3ux +WhqTm<"oƳ +CEޜ3rQE$-xxnACе,ܥVTk$) endobj 1611 0 obj << /Type /Page @@ -5405,18 +5399,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1621 0 obj << -/Length 3050 +/Length 1802 /Filter /FlateDecode >> stream -xڵ\r7}W-; -^>oP!kaExu"lȁb?xؘc(8gtحD7rVJف94RNnKo=aJ> -J-xJDH RR=ްIikhy-YV$v̓Fzև>m0cѡ[Qw˚Daf,(fz膘!iNhv -Lة-%LSǦ] -㥠 -lKVҪb<,={@bz84PZ?&,tRǫ}P@n.v3MZF[FD~O0桉*낕Uh{8Ayӕ-履s&45Oh y]Ϡ9iY:NsH.dxQ"qw'd
ߪ,B}B:#%-j?]zENڡyqԻ 1ެwl}]=eI({Ш#BiG68Jk"4ee:lz'E;PA=yUk5H" -%Zڗh-T<5e:Z"1ΧO|Y;=w1bĽ~Pp>Mi=F{)MZ4l-v|]Ju"lxgi~0qT{E*U=Ck)^@F*O6-PPV/VxE:AZ d%Mܚh -Wܽ3]a)z*&{<ҙC6(R?vG]kc +x[wH~g+[{i(QN\;7,RC]fPC] +2H_mLHaUҁ] mO +ZH,_Eb!9&vEm5'9QɔϺ"[> +k["5dL33<{W?\<HnjQWiПBCV[QjT4REi< Ȕԡ/"/rC*3T8g^(u_|)۟qɯ9=љ?8{fz%
"!4$-U2-!xrM/|oۯl0DzrFI:ʚYq_ +rxc?O(}(ygK|[Mendstream endobj 1620 0 obj << /Type /Page @@ -5445,24 +5436,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1627 0 obj << -/Length 4279 +/Length 2566 /Filter /FlateDecode >> stream -xڭ\r}W L7?6IQ$%!1 -,)+f]Lu+%mⅽ绥͝v30_)Am;r#GKީOVKPΔ&$?Θ "c=f@H>8fB֞g7\',aP6sBEbܛt\"9#@ݑޑ@]H]F#qe¨ayOTe$">)C L(S;D=43e?NզiJ2FUBVY\?+[t:2Vd{@Ƚ;P{\^s~F&Η-ր2!q\np-b)v{B݁4
<'"M쁽+HaCn3rs"R5Z,,SCYH9KR yݾ?qhxJI"
sՐ$ |n^9wJ06buew,WMdLѼE4_y<`pnQn^[懓*5iޏQtn:Ed
5'V7` }SIuOb-{RhT<pdIJT- -SV 0RQS!֝#IM9KnRQQ - -ȪGV<=8=˛<')+0
aY}לt;y|TY;\7f=v
%,R DbXejPV^bU
WJ%]yV:г9yL}qf|"p;]otZ.0CEFYDbE$V,1`GbCyzpve燶չ[eZJ;P,=N:wg^-<}P-lȊ$%W D{ejQV^UWVƯzgV zK8AΤ.|u$Sygm}!3*.9ʂ(~+Y6;m> -FJH
q֨mJE+ -$D4480J>*J}i020n>*n'Zg?iv$aMPjJMy-<$(0xHkmO$4pjӲ+iے0r -W -үy?<&rsDBK -kBu -uBk*Miv2R^ -ĔgS&C«.CϦ!ƁԄh}.[imbph$iWR='U)Z3\C(H}v;-8mf4 t0Ot_ݛ`|֩WMg TOcǿ -KƪZJӜi~9o;w%Yh9S8-)HNE4ey%*lR-1ɳӫ|F泵>&v}rvhJ$M=;`LR]_LgtR0pԣ=Ȕ[Nѿ-Po -)5xmtg;YlB+Ccf)쒵ziј }j$20ȉQbyl}ssSNJWUHhSʛBY2JV;ux'%&D췃txżu,Ng/ҽ&zfzv4\"r9endstream +x\W۸~ٗܳѕdɶp@ۇ`vIvL@ 6sD=蛑&FEP_?j}0ۂĪx?(DQUu{7Tay<>=huvqIFC(䏝Oim_ETm#ONgmS'j)PySDqjCCZ*F]N Wޭ7׆ %!O's|^}ˆQ)oX8l~q{^jej]_NT3T3xyvѝ$=TxT7Q215߱K%jd/*=DHDc@Dip; +F&zWG% \lIkw| 5`s"Je`omr'2ܿpO<?wF
A?y #?F<==:JWWIi"Aqh4^p7jm5*А +\*oh`&({(X ͅ4pH +nt<Z1uG?U;ǔwnRtk<,E!DeI]Ujx
P'SzPs H/f+A?3I> 뛚DXg= +x㑋$T|eTs~߬6BPb.P>!J&e2N$SPmE ߭@ ױRUcrMDmd)rr<'pf[|KKma +Tdd@u-\돇td62=#,$ibmO4AY'rOzue|&\([AQa`6;+=p-:
vY6襽DjƸOzɵ6uITm[;w_T L +6IBXW[$ +2a-7ot8SM8L:6s2 +>VNYxKݪ7S6jX_40WY)ݷ=nfKo~ѷYj;aa>--}&zwTɡTڨ +k*^ |xx\5Nä&|g̟ûCqUʯ7 +Viep
8Ê'hYW^38AWd:,VZMcV͇:A]^i.K`WsF;i#q$+>?y
!n!!(SGO3Q\e:>'<N0,ߩh6+{*fzEroTy'D!ttSHDͶ'ؘ1%34MA'nsY +̾9[R +Ź^B-gf,Uh/7 +v'8 |Q
'sB9
endstream endobj 1626 0 obj << /Type /Page @@ -5491,24 +5482,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1633 0 obj << -/Length 3204 +/Length 3146 /Filter /FlateDecode >> stream -x]s6ݿBf" -z?`Z%{ -$⧍ <D$ Z,П\,.apq -[hXyj"t Ŧ[<QƐxȉOQ>KM( a.-' -DO0!?Eok@h먥ğҘdۓвMfV$e4dױ.A",6ԘMOPW=z
p&2 -sYPޥhDN
9eukc׀56]-ѮUG.5"* -Q8床:# -GCdUn$o#t3<6ӲuT05um? -P&lVSUT~,
6.@=o -)$O:<iDz]u !giZ -p~*sݗ0
'/۔?}Cߩz9w9t
}F#RB!5ӒAmDT7t Lh`B,}B.^҈gwqhc*O4W˩kՠhWWCuB7\HjINY{IZ2@<4I/EWBWe}j9l9)%
`&^pm1Pm6?,+4 -! -
H0XڑoA`)v9,rzίO-ZKL+H_yr$+P<? 퓛iD"=6[?&o<fx9R -)/7^$iQG}jQXN^J'YCܾ\o}Ci5Xؕ}y]W +xZs6_I3WINӛ$HۼPBR~ +pEBrS& + +?N~@xy}Ƀi0hXxb1-ib0ɜaY_ +mej1`
PZ!ʲvF|˥wD?$^d^ +R0qׂuYLJyp(\)` +XϘ~=X .;,kP=,R:N,[YYU3s~Y.y +R鵀>,fɷAՐw}XmrIESg3J2Ϊ}Āp3x +rt +>6ii}6$}4o/d'pA<jG + +F }7*z@
ɠbxn.⏪3oJ? ++0HpDg÷n~w^+;v[8ڱJ{e{G?rj?8$8+q~C?6Eq@g9uDqYlҖ4TZɘF/,.Grb[ΆP}<5]w};\ MK;rDh=PdO$g&PO]9˄=(E +;#*ˣA8H7jo͕%ԡR?w=b]Cm4DdwG%41)OmկXOaBr[U_xt[aR}"mP[pAI[P
囖#^a^iDNPSIdD)we( +Ho/<3j>E$<cc;6b. +/P۴91b6qѴY* 9F"Ub1`
%<oLqBJߪJoTTӪ4?G& endobj 1632 0 obj << /Type /Page @@ -5543,28 +5536,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1640 0 obj << -/Length 3098 +/Length 2654 /Filter /FlateDecode >> stream -xڽ[[s~ׯ;fXK[g&k+탓(6")-xbϘ`-"Td0"Ygt'8cbIV-o_jxJIFM"R}ro..WB(45+7~|굻~w_~8W=2_bpF\Sv%J -wR\YcgTeB'E(QTSLE\;<÷/Y{DK
1*,S%Kv]\I*~XR2bzJ= \!fs( 8#Z_}^r9; ->S+SX1Tf)-W7`x9L ӟČIC)f]i' -hZ -cB$MElM{U4'=344+] -w3Ug>UAD% AN; -c P%0ppь]LCtcAFX2@Nqb9Mp7;T@!NI48cVxHk)NmBeY!(采Z٫;axFR<VNXneS#F=Wa9 &v0q91Lƶ%uvWVp"1ؒ. -/?JOxpo'wCI|ի=1$WRIpΦGjUXkZ̖ʌβzG<0j3^}Q7RJ+pbvoX&9_JC@s RyX`f3xVFXieR@Ұ\NA#fͩP7x֍fYZt -~bdT Q̌=skd|=Tm r ->7K1ht43fk~r.9>1CA5yQ4}HXd&&]h@40 -Qf̀!tw|>tBc1͠EDUhOht3\YO3`*r<NBWߍ5ȣa8jkFE+CC{`u -\kXT!KQvb,8>=YBAbh8>:C}w%߸;C.7VQkR*h6zCp -m+P;XX",K]ں6KDŝD3ѰE`Re -|=b+=skUm6sEtT3M籛n~5)$E$&$ ` -9DAj1Et&
DvQv\Xk6rit^!uBc
};F~mLe2js
QBO e]ӻKc/1 -[({f^!ϤSz.-1nSۖ,4-dW-~W - -KJ$EC/0endstream +xZs۸_>Չp&>tlis3ISiry%ZV#QH'ł%bˉ3A{)Oa\%
gG7'84࣓ˣ^[,Iړ\>F<~yv("xı]ī=~Oc +|9Fpߏ8S}1g"Iz#m3Zӣ3ݣU-Whia8sNwRN?PEV"z'h)ͬkXI +(WmB,6Vyi5.L3$348f1H9 zqbgF?WDT1m<ItC\,e4ѠL'@1eqbX <vJL$&66ҲR+N%Q9%j +<0fe6(E{ +K$ +]p/5 ;n!v{~J`L(%y%^UM}"TXmb y ct&'ZƤvh01/Mg=5ٌuüZHG{5n@_4<[ï
$al +C:04zwhГ-JED^v f0r{ gƢ9 uKn&By;夤/!
N!&ZWЎi[P)闻Ze02a1oHjh/?7h̾/U%њ*n`wT 6pYfaem9guvWpAl)T8B?`ʏ"zA9. +Z +ewlO"R7>
4tdo%`h+o%Hpd[3 +),p}^4glHQQDg@]W6q!G\ЗE.+
Mm +XvR lt^8;<8I٢ +Pa9I0 ٶ̴X8̠DjӾT<J`뛻+>\ѓ˯kKUllZ-V6sx|(D4ZvLY7_:elpl_@kf|Jo/)GKaF# +#o١-RୟSbhLPcVX: +3A# +hhK9z!Nqzvԝdr'le4q!ՎmCR?|~S٭Yu+ةWw>RGv%:)gdk-a#Y9`QPn +->Qj-}{fV8UPEOǡ6XY_XSPSsT7QzM/t'ЬG{6Qڐ)9M&Kf*#g +VJiV?Oendstream endobj 1639 0 obj << /Type /Page @@ -5605,20 +5597,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1649 0 obj << -/Length 3214 +/Length 2499 /Filter /FlateDecode >> stream -x[[۸~_alj5WEQ$iv$Mhl4fƈ-;CJhQtEƲQggY"Ҍ3e*8!Y:gLi(nqbb9[m͟Ջ7r2Mǫ_6o^?W/VvDЏWG
(Ud>u8<_T+IwWoeե9*Y*RF,EG,TKp\0̂?4t^>oK>?f[5x?y
ϟ"g)2щ
S!Yr)<!%<b]z)*sHO$]I≬"=/>(55Rj~5?j-X#4^ﶥyHG5pQ
h< x.:P.Es*<A 5,N7[)Ӿ# -L{uo%)gQMځ[G`s||w*""xj}D<=v-ݜ4iqX?kП5 wtmʿR9tzF!m@6t&$JVV<a؟>pwoVpgi -K[bh!pɎ(چYc5f)0[S(6Q
/f@T568&|bwh+/
?K;Cb1.<R{'
fFsX\.8qj,hSڧ6K$a<]d,KҞ.NM -*t -eqn4hj"t@'`#d< -0L!fSU=y6)AEѷX.fõX&xoN{Gї'ʞ4I&@p
n-t :,<`&H`OBT0\*W
due.2Fj.MlR ,ch1eXuAOcHp@ġ2eKtU]ԚZ}ĠmqUnB8|w@J tXHpWoMBhBP)XEO @ו#aֻ*7 Q5TПzsm)eUT~XX1
!#PĆ ucd3^+ 1)T뢪-M9.RWUN *nR3,nmtzԶW[M{Nt#&Enj{MWsbB)xJyyO)p$nWMiߐYI=o4ޢУwS,mL0>a/Tb<<K{jV;yYlm|g:KbNKf2XNhaap7mւ0"gzZniRc/!Zxd/MX,&JZ`@>{=^}z.Xa)g1z};xS7qR6շȯ6y/AEiv4̶](S{UлpSv-o}\Kdaւ&`vWN,Hm*]u%Lti)IX -X}OD|~D7x6͑~8x8@8(q,#o<E]P\~?jzgfg_Z[&geՂ%xjPUI2N|M ZEԖN$b#\L1-
ҩ@!ܺNYO_(gi&YѠQ⭫VlrH7Db[IKr| @I)OG&J pQE%B
vC#'LNZ Pf0tksnݟt{r!/p__< X>q`Z.yeR@1E}/ ENEnLqP3^X-JtrwҾ(sOW?WYOI$Xu1Ƃ hܼ-`P/J&'3z:m<6U65?t;, @ Sٜ12"ؔ#'MA$W)T6~nܳԍqtߛL: -.oDMHEvf|r«,fdɼ|[:%:轶Nx63p [Hn g+ݺX+U05:j-~K$L -? -ؔRfqZvȸӎaIM07Ǖ`H`5%"HV97c-.ICD[]_I]Mym^iwwYXڙ}G?$Umm~犙uK.`vi[N8@4;@9^*XI2A*R#2l|~n'>5K1h߰>/"qQź1w.+CvK}>/gg.oѰtP\~_
EqC_QGlRF'
腅O<_5Tn2[٬~-E㎷{29
J18Tz(+~ -3{;7S-yF=SS3?#Qhk3QXO#bkgOLw"Y&Gx^*P2Slxnrendstream +xZ[oF~ڇՔs㥋ɦUihH"R\f(Jd77bgF3ss?C9$V:ĉ:IY8Τ#COg_Ag(0ohx*xÑ:(b|n|gƭ=FFH&o^S8gi2xP4,ΌgWgnV13_22ZXH"IL+%rUZ8ȮHlRϊ৫g<%?ݥVX&"%M6wV}"LekUi{V-* @ibCp '(*`1&(o3Qnw|Yq?nP4]*FҦ$@^eEuc=+T'g2(wpnVrl.+TH(MB8C$-`7%pdmG#|:%Dr.a(lyHd:e,#y^w:BܲvwN&zdBnyN#9[̊aڅ.DL!3Y<y%`P+B]G*NY̹u2sqB;mYY]TFڜ^3ϭ/ɌlߧhYp@З֢Vd.,h,#GEΆ̦
[Ec{% +G p
Sݡf$#aurJ{>*~8$#}jTe*t-lf&+UƮ\#>z$4ENHV. +i]J͝Irh`6yGaJPSWjKpU &t@rpt-3k@Ǟ"["JZ^gCZ!TэFC辉#bT-]]Y7<nR k/Ƃ +d9νV>&Y1H QǕ6+?rn +>BmH w9)_Q:i[#dÁI62{%ޫ3C/oǃi_aryggbd_cgjsM;7zMp1aݸ_t-#TsP/g7l D٭KGCr#J>?ڥCi{B +>~g(kt>N5gGg92h*SOl;懿Gs"{eC<ZLϒXޓ5Vl7KZH@/1`gi[iX.zÉM +8o:mPƬ|u"gͼVΉ(<CCoZž:JdwPRJT3]Lۋm_<Iq"8z{H.hg/1vЕU(QJ8)xhkMQ"TR"-/Jr7p2'b/Y@]tG&V]
V]iս7p$و@c<Ί*K9W +U^'Vs䗵KM^2*K},E'IË!5% endobj 1648 0 obj << /Type /Page @@ -5671,22 +5661,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1659 0 obj << -/Length 3171 +/Length 2475 /Filter /FlateDecode >> stream -x[Yo8~hD=HsKGrxg$c.[vkm뷊Eh]^qSҧbbUṪ,̗,8Q4[]x,˃#>x<h-x~{s<</ 0%xӛcj{y6kpY[I>b5(g2fw+J뫃/(zfVdwR7ɅdBY}}eFy-}oI)=y?*GL19.ɤҽZ8Y,eKӹY&mnνK"O -./CCrR[|y.2wwgEh)k@XLE8 4Sl44/Hz$m^ػIA{%غՈ,fT0yXȊZ4duM$b -8Pm"
Gh~w4W" YTwuW0@٣u.cڹ,9ֲsy:24nZW9QD1R17X4*cbTѝ
qŇ'tŏY$k7%BW=v9m{yA"6_'+dqcKdyArcl -VWXƔsrZA-ND#pj5_8YJKM8v;p?d ]=+̈9 z@Հ@+ -yNj?9#4գzѱ #;vf>r_햜ៀνÇ^ =VP>/(2b`A'xd`t4QA:q,A|x'9@тpr<jЈXW%s{;Z`H06"f1)6~^ -VI111Z4e!"z4%˴DEI(gJLQFomVo|2J.ݨiCn?-{`n8Rz !L/ߘ\27puEۅI}M~5/Ū.`K7zp|9>mgH:1N^e{U:/j865# b2 -`e-z$Nt -ѳR"9]Rl~(J<аkoˏgorǂ$7ߪgd=5qP -uZPȿ -a;q@WcFOܦ;B -rc" -rcteOMVef.vA0Y813k܁ha_wCvzVDE1i%|rJ95dਔWpendstream +xYSH_ᢦ*TܫVqT8SS53BX$-l
EaZgßU)T-w3mIia{.N펶OmaotNKF?;I`?:#nޜ}:ͽc֟۽1a*zwжՖvp2=Ձ@KW(
-@78)>MlG{8p⠄n'ff=\'}*wl +n02K}ftB~a|EkCepsi+i!Τ4!qQVL=dUtJ#<܆y8
8ə +9:]>-*6ϳN?רCVChߐ)_oj!#,p9 +ݺEӄU??s.KdmV|҂mz=J{t0x{|i%?GW>\UB~!+<M'\,'C4slxLxŗI sy1ML_ҹ&gMS/j8 +%Lmm` Qr?܅$h2ˌr@o9%hV_N<^1'A5ϗ&͡iM3\:5[$DZ74X/<P&IVTE*x">f|Eri +q~.s$A]7e_wȾh/'a\ASa& 0w6̒S^j5ɔ_pVE@r, endobj 1658 0 obj << /Type /Page @@ -5721,15 +5705,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1666 0 obj << -/Length 1706 +/Length 1224 /Filter /FlateDecode >> stream -xڥY[6}ϯRӨ_xP2twaӾ -[U]*LB9_oK[KnYawEU|6р5(C -.lmP8fB0C\uѬMbf;=YOp -si$`#[T#\pE -Hbx;ňx/CJȨbB$=l1R-N1" +xYmo6_!ˤa*2dM4-UVHr`I9ȎY9=wDGy"Th/NIe_͠$4R8hhљ2_; ?Y#>9~iazp0ZJ"#J.>Pox=DmJl J +ןNo1UPvF4\u1᱀Qjޅ$̏BH_u3lwq֩ik"R߬n8m,Hi_# +nkU,P͖dc7{u<$ +We)'%ʌձ*?^q9K1oamNvz'-N5rM29 +T* (J, <c=Tݓ=|XQE 19Yۈv?B0ӻL]?PXG^b'l6PA^lSò}Qw:n,g7ͤtl/}@)`MG&ӨjC2»=i=*|M5o+T_6B3w#˄RRJ +ll#bޘÌ>cL54cd39.]t1{ghپ'9/0¹("/p9=G"=4KlJ( LDݹG$rp;QɵWsP endobj 1665 0 obj << /Type /Page @@ -5806,18 +5791,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1680 0 obj << -/Length 2354 +/Length 1522 /Filter /FlateDecode >> stream -xZKs7Wra*
^Ird@St -H&m<f -O *%1BDKb`XxuHIU<_dd0@4QEKEc$K!v"e I -dxyˈQ$8q0W~?fb%ئl8E-.<'G-\Zsqm:,|n}EUI'0 qmq2Z9J0F2F9RDd{PۚN$Z9okKx[G蠷29<띋fZ!m/a~m',bvkxa5A~!ҰEjG̓u -3Lp%E%I0/Fm'g6XrJ"keĀsajwa_9Qئ[2>~;aS͛JJ*Cdv&XLth -0=-S -7=DBTSϱc=&ajf:KL{-]Hj.O-sL -쎟)CSA L&UTaz;?n^E#~w{-=tQɋx +xZKs6Wpr))Q< k%3Zj/4Rw(ZdŲ㎇\b÷Y@F*l
#`0OhÊ4&5*!%ڠw/G//XBskm³> +oNw_#D&MsyE!C&)aT()qdo5,%L #51հyX#NQq=ːR!Q:PG1<?I0|#_N9pdv!̀>\#ׄk=Ҕ+ƈUBX 0e)Ex얓/F@5.}aEymĜ0e0"RI\vޝn/F I#Z|fXB-و@gbc:uXgEk߯z\"&<f5WK+`d'
@Ϡ +K7 Irz!9\[~YRpyRТj6{N*y|@c n,dI
.aa,2UT2)N 8.B|8g-aB[Yw&pDζ㦝hL}/r]+|Xݔ@YĢ!/uh6ܯ;q;21sX*"<Ӕ5Ƿmd?`hO'C2.d=OsɒG +C:킇.Q@wBUQ%a endobj 1679 0 obj << /Type /Page @@ -5882,29 +5863,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1692 0 obj << -/Length 2925 +/Length 2348 /Filter /FlateDecode >> stream -xڽZmsF_uM徹IںML$[EGKQ$}N4&,XRNbON2+bOL -eI<O$#Nr`9Fc涙 -cf.zͫ:4M~x]_]zW7zFЏ'Ǔ(I,tM:O@FT4f&1=T"WvD - ZIjcac㈀Q-2!5=6%?2*v6JL2 -uQGq"2*B_͡VHPD?NL##VCGĊ<IBͺt0#SPf -۴%sQ[ -_";esX"4%8Zh=TJ-t*G|ـ| T_ -Ѫ#*ьn(e(z;UY,Tr"I'x2 $-Nj<[l
vѿ?Ϋ -<<vk|g5VEw~ FGc$`LJ`/>!Cf.GL.E)zI7;>ī<mtyo=-:
~FHJPq -JTeHK+"ĥ«#32V@Dta_IرεPTzV3Sg -s$2VXSAP4U=<?ANk6[
ߒmvu9^AUp>vA<%s/\Rw0:Ye=f[ iR -)ZxR)@W*.vK="/wBwSzG_̎IHGtV?'2w/|{pB"]eZKnYrG5|Q֔f3|c_Ğ?a3#@QikAH[Qd>([5ktbZ%uY5R|}o -#n;1W|䲇Yw:1ȫMZHk@ۡ: Cu ˖CyLGQTM{,!# -blPI(f:Z^Z#U6
6-.k\CiTc:MaC*^S)81
ΠA1^f8n=a:sXtu}HX߀gPz(Vt' -)8(Q1ο{9 -rT8`ULqXЋzcM_@β-yW;4p<%
f -46)>1`HC3Cc~j}eogIrD'.YLmfnȪ{.$ZW-ѹF!+ŭ~zC<͈w|p1l#Kg,Sj -dXDʼnt%k{E[qdg -cˤbyn0\)T
HjK<NT#1i~p.®&>qbyg-\. +xZ[s6~t;j'B }smu^KL-ʤCRq\ +ȹpn__O~>:1h\ѻ` +|| +GhB=mG㣿7zDYE> +j +9^l&J>## +@i67R~m*٪!`+=}yEƐx;A @D!R +ٝqd |U,*4)/H4鹷\vCu.d\n8i%0ڙ"jȞ^z^M\Hns t*NS~cTI,K'IHHSмtrW.ƻ&ݦLT)RTMN>4ɿZ{vg=.3]ReevdX<gc'uҲ(lbHhS_ҝ_ R}#d17~tdADڐ"GTsؑ:=%{ZwOV˘k#־sa?yț1K`oX[YFP**'W+<o>12|@M{ *F셔 VT-j[~eМ#{Va[51^qYANXN@ڱ%jIXǫ)!okתQiv/疙yn3EUYq(@|AMw,ļ5 I5^I3.m/y'Ecέ7%{FzUʖkcn/(2XQVcnfjzOaj~!r<nx\6G3X@*Co_ج>eBѼz_ף㷦 + i7Q7fqVa&~gP*(sroM܁Dl-Sol804ILQeeܤ6νf*Vڶq:(1B$n<E=${[(z6\m7aPj^ҾR9@}luib4Ԙ2C](ᡚZ +!ÄBzwHIo:DJm rW _Nt@]Q{@'/3nq&M1o%?HtRMU;ıYGtRpY +$Ern,^;M pD/l}_q<?vЇ@#^miMR55M
'*U_G"Q{GkLYh+(eeTC_DpEJAa(3A*士lL"oޭtNELd"94tdQGVi0&wb>ϋb1Ѝm endobj 1691 0 obj << /Type /Page @@ -5951,22 +5924,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1701 0 obj << -/Length 2490 +/Length 2092 /Filter /FlateDecode >> stream -xZK
ϯ-T%e䵽o8#5(M)>4^;JUrF_4 -"A<Ĵ~4Yqw=CGbE<Y4bCe8nܘu~<lvI/0jbдQZDQq -$gBNER$c֘30=|SK:'8pi,1#^i) -bbRc !F9-s4k| -Vsh0m<|KKm t7=?Dp!Jq=_4{\;.9r;lh8g -h;5J[D/ɓF%8sXǴ4(W?jC -tc5*`Y-tGAb -3-H_?Q]?TȂMH+WM)%q:D4K$Zj|M4ڗ -5LUS't*nHK/աE9L'_81ٱG_)/^+i]0-7'8ǺiudqJw5}84Wqժ\n۞H潵cLYYiU^qv6iJ?wfa~}Ӭj%RL|iLg"˘O{>%22pRg`z"u`?S@l*
iRO]j
~]0ĥE4)dsL@
R}L;3D:o5ܬhO3}R W腢?5ew\٢QMWHsnW|A)XO9P -F:n@3= Fkqc -;|h8=/"m~v7}l%Vqk[+\VpB^vuH%S8IdNZDʝO``у+06yM&74hL\Y6oҩXg&Τ#TOK ~kpٙ F2i̢yL -6u4c7qHNE|\"EbT䬩_Τg5JDuhFlD $c#_.
eB<܇N'!? +xZw6mɷK +_^\_߅VMuY) bA$dTq/u + H5c` +Z5@3R23]r#PzM`3p*59?4D1=| +&tA;sk +E\S7"" +|G]wvNVSY> >0}R@FӞ +PF;8+Nrj%c<aykjp2Iu|[W.r"A + +Vn(Xj$؛'ЏndB89#1Oʙ0PL*9pI@(u1<c__ +y7:)f~)'k`h)|vpil36+chַA3.tg_t!b +>~RO$C=kE-quRVyC%g*cҗJ?I28% u! 7iR>De17-0cnʚ +FN-H{,\{bUM @Eϩ61J'8:<b>yI}ٻTv7=̂ںMԽwUW5ꢦ_wa0@z>K v'qFl=<-o<&UsklL1A=v+;9F}m.k+p:+3_g" CUMѕ-hJR2`۽)MAy>Il]}Y}nc189GC`awqݯA=F FzͲwea~9g{ m#m]۲r4떠icsIT6vB?/_]S{;qsp\.#,N +1kM#M4Kۦ.c/W4߈_,Scy9f
dŬҚb(-twg{yVu#}#(窏>ҥO)S:Yxgd?aDzw ѤPǝq% +!o:۫?hFjh&5pQ,l&Y ) (#'[TĄI{sP}xm>F^"Go"ba=tk*j;csY@Y5
4)-dţ
i%<Q`8G#strLj<B1-1v_!~tI9wD8%>\Fr丱lh=e;ɲFRRIR(r*ͫL-Qtrm?a>|u` !"&C*0۲FN5SfQ((\%ǔL +1E~AQM& Xi:|L+Ԕ+W}kD,dܩ?+!OPaRs\G4{QESendstream endobj 1700 0 obj << /Type /Page @@ -6031,20 +6008,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1714 0 obj << -/Length 1986 +/Length 1755 /Filter /FlateDecode >> stream -xYmo_or\ 8>_,9_IMT"Zwfg)Q")9"A|i_fgfgY90Sq<|;=Iؠf:m%<Nv|F
M/nGR* -E -i>qP'i 4E[zR[ -Ŕ'#:b5O~{ߠN -3P85ax*"|^qU'MJ,_dY4\_Sz36chvO2bOsI7Rw5t}J4 -cwx(+,x2#lS=묂/|%M.gNbv3exR:T4nke/8Px@EZqšZUx
8/~UnkX?yN2LϦw{kמd!pX
m,ADbJ")
k\a{,\K%ڱ=WLG.QRNqQ0wy=22@>,AO . >5W-CDd
9E -*Uh*ۑR;3 +i#> -Q7~kN'.j -a*bF5J34džfPaNT͊l}srrA,{yЕ%< E銷bGEU:jG$ʅ["5B7H` 8&ωb>pru3`fT5^Вz|rf1EB78?i0Q8:,L5+rw,aqCKZB*wgN sDoWWrY"{ '$V -͕!nO/hȲuT1ɟ9ikI0No.o'DVW7.]Lp0= 0)e?`y
fm+eQ| V4O(=_4L<c@QC-}|z`IZ_,Y:nIA( +xX[sF~[N]Ri' +`{FQǴxpHӗߍo/z%f*-OA=T?3$yOŌV~>znОөS" K频 +$V.aE4f5LRE%Rt, 0Lqf'O_@ifY,0%B,`>AVd4ٔ7~B5@S婫
_2_o +Ks"8^I( ߍWStܱKSaH iZL24A^.oͩk!RLAi1%>X'dFf- +4Y/B,rK + UJ nWOiC1dY0b%6qLS2kp- Y3htO~5
Oqh7\K.\:(bXf3FZNMfF[>3DG[.T_ht`ނ +G]9Ms#;:V%LWN(0)ƸvN].(*NZX1Aam}dIo[z@Ý{ 4bebendstream endobj 1713 0 obj << /Type /Page @@ -6097,19 +6071,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1724 0 obj << -/Length 2341 +/Length 1509 /Filter /FlateDecode >> stream -xZr8+U/>zIzf{[JgH-:tExA;T$< -N<SNxN#t DRAެ pB9#"8y#|'w;u5zPlDzʒ,;<x%t m|\,AzX}s_G/2rɾ![(ޟ?)2S[u_ -g|?VaSHq+ǭAW۽9;ޙXddTΜӂWCIJ$9-sPc0}dIh.#t D -6Tiіwi{8sHpըC4Hׁ,(PBAjVT;;NLS -Z N2IBG;Q҂+QJJz})!]#$t= h0){JiFZys¸Ȳ,yScV2ǃ0:.C
rSTNHɒm-dJt'u~>|yHk/t -:ȽAQ^anOZtU8l~l,}Ւ.Mn
[\?pR'LS5]5ug84ZhuT7Vg7HYz?5ۃQqoJo|.ɛΐPΠt8=Tv<Fc&<Zf[;Rh[<7<HYr0ㅐgLi+<DFF>.G@wz=kZM)Mo Ks*X\D@4]c@ã8Fu}/X. -(CΠ99)%<a<"M -_I_7T$jdxns.%wo|,ytw)=>f*_bC+Hc1gaJ]f;o+ffL;K)ک z^xI@nI ƶqEd!͂&ntH\/mKbWBD-"W<PZvE -pƜ+),C>neIX;T;h:4amPkG]Kߢ Ё,hF[a<IG_b&=)4Ioky$_0e9+MG+H{lxBi"ZOV9_ٺXWo&Md)_{b(>A9fϜQ: Ё,h +xZS8_3{pлSrO\LbC씶%B +ɐ23"vW+h;?VD\E WݻnEKEk-HK3G۟1tFDGݽ$Yާ9`8$ +q1O>9
t?wg"bnm}}C+"\#Bn_D +^N[YpL+PM4>p +WRrͻ`qN4dI6B&УhOؓ?k2!BM*;WƯX[і<vǣnU\Y@lF[!$1f{H!NHe.ud#{uo.%j_8d㥰/(ZPE2kG> \G6ƶض`hVxi٦@JKK|ag9N/p[LwczѿO> +
f[H;:-YqMk4m(Ӝ5#'3?m6-c8Tued,"Ey(ÿӌj"-!<A2GJY.FKFƐƠ11La]˙+ RW/vf]WrFD\<QS%fs|O͝ Na#&,CB>/yzd2T[,y2R{ָɟdRM-dpXsXo̞ML=w䎢=HwxP{G-!7GX(UX}I²(?"\,|
i6k7/ endobj 1723 0 obj << /Type /Page @@ -6156,18 +6127,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1733 0 obj << -/Length 2317 +/Length 1655 /Filter /FlateDecode >> stream -xڽZMs8W - 粕I<O8YYK#іdiǙ_?/ PU[)h< -OJPq Љqt b:'77)N^CÅHӜ$bWZݑuq_͔$pM2&$,Nh{ХN57'LnHR>b-LMe6@ʤA)ʫr7YRo+7НyZQu98|7qs (D@{f恚7Ttɍ^S4q{1!egd1=F.!.;3
@a!@8pSy0y (/bѬ?}!^Dr;1*bRz`[~c3B3Q -GZk1^:4,Br./SV,0^8lLSU")v+sksTlS0ݙKmt]W"`g,b}eݼYouWAfD\iH̾
xXV5ظ/v'm_-(kcƖfo]qK̥"Z(3
\&_t̳U<+Jݭjnټ&:( "D<;ZLx -XEdN^mΕ悺Z"ygn4w< ?TA)Rme_N>h6S/S'k)|sӒ0PUα91YS%͟`W]'ho]'.Uy@s1"<P-~sjy̵\w;PP3=jR,MnuO\ކa2"<P8 -Ӕ.>2SEaA'U[WV{p7%W˞e`!> -^oΜ8w2$aܯSI脔53t}]oTCChy0%h~"GEۂÛj
$ݎCGY!iJ!5z2f-pSL Ccg!e-%g]RCI2XazVeǟ7Kmvz_T&;4H9lڽP"IIs:}"n&#mjKfewzu&G}-ww}$UG" ,DmA.AGK6lUW2T"җ*1t
\hlFRw8Z?*@V#FI(x:QǮYIX ZP$tuݾLy^.ܝIs.J:]Pҝt#iE$]*8JHu@Ķ$g.NJ:ܘ;7'ܬ%H9I'e%O*"bHcCtJ&rVNϬz;Z2iŜ ֽ=S_frI!ex`J̙#hmEݞYJnkiUY/ NF03:d5:QyWCT%b'34W9 #Qt~<[<@d]4#cBJ{FO;Q"CR -1tNg/S~tpw;lH
dEA=
QHzpJ"U3(MlE14-g/WJ#:ÁN7j]g5p6(:i5uVnW|JI>\u_ISy~^![[FPЄ5" +xZKsH+S䲕8dTd%AA¨ +cöd8-MiX;R +#FDGm-fж$4P8bU +/pC=au2DCe^o#ĚWĺX>̳hf726~&Zpk@=iZ7U6{1@@ +y z<AViS8Q5$V$r˞
^oJf+f7[Wys"Vl<"-W\%(.yweJ١"#cI"*UM٭Fa|^bUhY\F˥yxrh# endobj 1732 0 obj << /Type /Page @@ -6226,22 +6194,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1744 0 obj << -/Length 2243 +/Length 2024 /Filter /FlateDecode >> stream -xڵYYo8~`[\2NJ'1<h$D2Ao% -\ϐ0 ugg$uqӜƯpX퓼V -kJ|L<nIe&MkZde9#pm"3Iknr;O+[re -RӘ:JN-Jtk|GT6 -H\<cj\&\Nǧ"7lM -Tm>*QLXsX@{#s6]ht5x@G`9͗
g ӝƠiz2 t0<Lː?dRa&JSXI֨QBQ|_0@]0hϣWڎOS%zz`{R\Ͽ`ф4ILN6\p$sMc5q7;̛bcs=-O&cr& -vc%]&tPmzH4*kO34=gubX=T{FGbBz|\:b
̈́VF}m2eWPYf]i{Р:b)ulkyz9&0:T F%F~\l -uy^153]Kb]-:`C
5Af[y>|p_*rE6C/qQ8,w(ٞ!]?a#@_krgv5ѱiIAaVLTi;/xwƭ'8ucwt -Z˫XEU8ky^A5p\Quo!K[qEOiVr3e.i*㤬p5sfGm>Z<铅 -ƟU~}6ׯwAi(f[eD;P -P_tu/bo4z_ɽz]v_Ί Ṕ! -hL6ʙ,]5Ӌ䨖'5ha*<֥zDkR):vTO?']+𠾵~tT.JBv2^Ҹw{H=J2)Iɠ0k#<˱:~
/lendstream +xڵYYoF~ׯC&#;W SæIQ"e͎6#ǁ+L;v`_#WcGS?.G)B3/i27]^-&3۶
|?0>.y_/~aj1s9N@_F`mS0oFkױu?ݍR9g̻T5+f2|a6 +f$N_K<vYn봨884ج~85 07uBvu dE/QS:EV|e g"!Oҹq܊;pIa&AvӦe<cB`Ea)?+04_'^kle̓J+DzO@Y +}rϸKq}7<_8oBrrO72-
VcS +'q;ʀt%,[9wL|#>oȇx"hs{ijJkl;l2>#tVjxt+j[Ll2 }%MIFj
֧cOu;҄` +7Fh* @2 )y +5
%ȘpLhXZx|| +n(dqTŠQ6(tPU3\;=pB
G磺|Z 3`I J..}6,#i[ + endobj 1743 0 obj << /Type /Page @@ -6276,20 +6240,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1751 0 obj << -/Length 2622 +/Length 2319 /Filter /FlateDecode >> stream -xڥZ[s6~[6x^&vR&mH ->`ICCH7ⲾN[- -;0'fdWCv%HCQjCڒCg-CcI)O[9 +h-Ƽ&M|&`cik¤'@Gߗ]ǐIM)qx D%' -X#v<Y٠nI~Tt<ss]pOڏj|lvg;EmlLGb$ F}3LͷV8}ۉ UBnwڵk@"c_\KTv|$foZɑTCgF4ȏ s·T<碮$I+;*pbHwX"?c&Neجʜ2.t4[w#wiotXw+0ng&y<$pe[32#RsոغE6Zx/[_dXw@vyW[{@rܩZ4J
V
'v - -ݠESR\\}7P<=RBo5E )84sE|yD뀼S.ߺ7h@V7,&9S8/ .y7 -a;`ٙn4}̔m|2UOc'IE3sakCb>FHNʟ -.+yE-6i^(lvB.pJXxN?pꗥMn7\1ܧ -;|Q`-!X2#٘#2կ=H' -f!.ɿiCB]3}tB⧲8=i=(69,f;6F rR !:hF 8:-k*.? -KtR̨iιŚ|(Og>J\hYI8>dWyF#
ьJ4n|uʳ-;_a(H<fg.K*$ܒmwl-iDp8ЅnКӧoԼ%%|WˡiѰ/[3^^DEfEtk`PЄޔG3]C3-A~Y05c;PE^! 8͇(xo+?J4ߍ?w=sj,sendstream +xڽY[s6~[h^܍TR&mhH﹀%Rry7 psH+~AϰӅ2r鹸?~`RP#YW??~GZk#O\ߎox<pn:c#O#/!s)t0B`uZ6ˋů)xW*#@KNzt~7kEeҕO}=?d./' +n\pVQ/xX-2as:3FhJ{9FYJK{}5UGCɿU:s\^s#V麺xs}9./*>"UpQ)N;a#k8NhH
kJCeiUZ[RVU.Op])=wŷ4(3OU|fS3SVYoէX1
|X^^}s0Q(
%Sb_p5͌ q(%{ͻ>XlOtQ4mUA1K0<$ Omqk\Ι-?*. +4NhG~ldHϵ~ΛbLӪ _fԤW*`ER" +U}VodiiN0MrZ̒!$˨J3C] Ó)S V~ 槡"~@ u wN9iBtW>-`6RvH)33>$v.IPOW
2WM# W'dr8ZhyDPPGj$9E_ڕR@Kt3PGplG
+JIGgJo^ 驳*ļ2sGS^6T䛵Q/|GFG#[A?:**[hwuԀ }{[nr~>MyUiM=jjby˳&Kl:XO%t{.BBp_>Yd'E\S%RSwoUExcTF^Jar(S?yTn5$e+^pC(o;?hdžNtz=oA'endstream endobj 1750 0 obj << /Type /Page @@ -6336,24 +6294,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1760 0 obj << -/Length 2454 +/Length 1632 /Filter /FlateDecode >> stream -x[r8}Wm;}rYVjvjv&QŖ2M$(Tblvn4D(e#XF#: -FWLPbaT,BQ -B0Ɖ`|Ta%擌_'W~`Bmަr -K{"h
mZa91 0lW| (7*QL0Č߯gHOrF|}5vGHbx>M+&qU0oB*ERDl0*֫tӕ<30e0x}Mw(L:s;7{ cW6M}/A0d<Z,FД&hu@0wLޢpKJm)7*z@}Ee&آsne%YmZȓ ->[fq?~w#Ξx<s&;Z~Sp;w?+̛r}_a0)+0BVYdU>p|&lqw<TܽJ_YcG!3ٮq$B4XhvyH>TlJ_lJF6Wo=-tf7fҠ蘯Bwjs_&.q$NQ&l
X{IIST`?g+Ή9EVMRgps6Htכ>>@imS Kޟ'Cy9{
#%l0>ı8j-ĸ+c#+}e%[F. MR'WPӀip -gBp8,Hy_
[*F?]x#WJVP.OYVzboeL~: -ZIY?K'08 qp! -xJb$N"qXI -hМ`1U , -,,7ûiKf}20n
xs`o&=JsX~6u?S0}@w#T4"4Yh -""KYY|'dPTǖ0+NCnk<HU` -eDD/"FJWW -I+ -XB\ožxbxz}Ay..۾:ͮg-?{Z0}o7 +x[[s8~WL]Kt$dnMh
s,l[l6`˒;lÚX*BE4amݠ+r`Eڔjz_jh$q6{*8u;"ad
zy};tgޒH +x6߀6?1%,
QRF|wM6()Z룈T0\3,
#LCOeW͒hdrbS.0ӍX"W&Lf-9H8?dU<&*fg_(/%ab{ۣi%&]heI}m꛵͠_\`U['|
&hS"L:͆Cw4xh H'!:Mx8-\RAޖs+WQXvarRMf|`ǣi}ChkNxe4s"-\X~A,<&>s4%"fQ˒EF==y,h $Bz2;&I\Y`|<
;k9/XMVSXw0CpCЃ=;K@EO0R/HDߏrSax
mG^9N(ݤ&o6蠔;L;F* ^*Fl,LCnϮMtg8b$sē[9L!q.uCĵ3X6 +O+[j6f~^QZ +Ssu=8j֟2WNqrVyeA#ppZ* P:eR5SnC2$qNI51p+Kp1٤ +^fP:|%o(f%>Z!ΰD_NrFp +Y*b$ہ|K`@vsJ,*u<$cSt>,lĞJ<4l+@-lAj:WKA#+Tc`u^ [![c+,auj˵Y"O'ܞB<rBvLy"1P3,abAW僝A|jSĪ=~Kw!w8:3k/ו $t]*iUY&B鉶ZjUŦ֒hwFۏpmٺ +Z!j_GstU=~<]c]P~"ZŽR+35eX,^a_Cvs˳^%-C(;P",MEv_ϸbO'ý +K$o$LM$4>FȝZ;h
,` endobj 1759 0 obj << /Type /Page @@ -6394,24 +6346,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1769 0 obj << -/Length 3124 +/Length 2704 /Filter /FlateDecode >> stream -xڭZmF>ʗQݧlrL"% c<&pfGWo
8F#]OWUWE؎JQ*Y<?n\e+= -=IV47aۅzrE'u ptN+և8[nZ6+MKh5_.ı}wR>g"5+|FAa;@x@߬Nh2i{OC`:v$^lGQDw9@8@9ʋj˿-hT@[y>'dHX}+ -X*Ǫu>LTasɢзw4&=; ܡy# ]R.hݤ2YՑT]HFUڞײ\&o8.FGs(!"F~3U[sYHZj?;7D_zkŨ -VceDeʾ#/2LlY gQ8`:DyByfݹoN+YDA)8DD@8*v<C&97XAy[D>pWUxmxtWbÏTK <KAtBMtY)M~ǴsRq#${0IO4]ddo_WpiHzOOy^'I4P47 oyk_5?lM$B -@>Ls
nIpzf6%+^y;k1 -d=fBt
91I~5i`bx:\a+D3 -5j&45BׁCP8q] EhЧ@m婖E_swk&{SM2Ώm`%@RdBayb,
iRG1 H%'D\]9YrgbYF]Ud8$ak=$amU(R++@ui137w?ԑ]d>y>o' 9!v>sM/佾@PbSstΟiwEQ/ϼtm؎S -ImJV0j%N L?_D zb/OIG@7A?bmtY~& SCwL0$;W&<UW'
X3mUm% -rT%?u;Q2RV) -/}㌔(BϤr0պp]Ҭ+iƗyZ]B4TaXԗe -C=RaEhv:0MĎEG&n8O*eڦ'נZd(S:1RA~{%flf/4I".\UNXo^!7`eZTw"UJa"}g͍cCxgvdQ[M+&n;,E3X/#uEĵ}M 7kFK]5+(@h@OF[SNb"[ko
/ry9/^\=&##'"^;c9YabaG&`-?X<ȳ%[pۆwCtrA@@sV!?W?D0b*Z+c -Wlyqbы+KrC04:L%KJ廱':-9L&t -sB`ͅR-SK}H[u_K|ow{yuX/?dDzan9Mvz5mXF?FTJSxE8%,4z$rj/ ]槺^~BY:><6)c4 -R)sbT壎\"٥ʒϧ?_@DD pO!d9n`|^W#@\ڧ.u}aBş[]"-5'+Xxᆉw1H&m*ϥ:>BbfoHߴ|ʻ|4*~R{QW +xk6 +ODԊ$lޥ3MӮ{יs#KFzt?_(Q~] +]r'N
xzV9 nFKK#w5Mm]4{: +0V.ۨgG\;öq*[1\ODGHe=2Nuu ˩GYcLWˢdab'"=8ȮYZQAj?93nWT&>RVȵnm"Y_ّ x>},[Z'#SzANb=<Q}ؿrl'>V\Q&5IE\p(0<zM5e8lh8ߥյ<BJXCc +T?pa7˼37_576䵪SU}*,zYW~?^1z^vS?Ji5^G1ҿ^*J1;>l@Ŵ}#&7iF3 aOOfa)baD!(>έ:*rAaQgm-}␒Lc<Ab*G˘QzN{+4Zm ?p Z;{j?I$"Wa'ȷ>C^T/qQ@8ݮ| 祇?cX9NG)quCV
AKIn +m꼸9Q?Iw
f_(@`dE\U7PBzӧ=Wb'*R;e`\rА5A(EqZX$Ab0Ah%E`j^ +}C#r
F2^nؑ%8TMRӇ>1>7;GݵJ2++˯y2 +JF9n⽳aS8DS'a5m/8UJm{M0 +嶦URKL&qAn
M0l?M)d+#ntE/(O <+L M>Sg*Caϝ1_ +`n4tlR=z"O)ٞM;1endstream endobj 1768 0 obj << /Type /Page @@ -6452,27 +6400,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1776 0 obj << -/Length 2945 +/Length 2701 /Filter /FlateDecode >> stream -xڭioF/!9ëYWXh(D*"e7-3CR<"s7yȝ8N"vD< #Q4YlO-x*5`'O`ֱc'W>-}1/}f~v:BXkOgaYS:}yvzWәk]ao'sCAhc/9%ıEM.LoOۗB7''5[c"Ht-ƹ]/e,'ؾ#Y^Mg[3n<}MʭeZ.ٮ*/VKcج3)蜹xV6}0UpޢZ?75RuvE|昰:G<>e#m>a(?A{#蜮PlM_r]r_*Mzt;^~`yz,2Dm)nRL5UqKV2 -7#ʴja2\<\wUV{#a(yb=ϽCTܳfXZ1 5 ٝQBSn&3W0+p!BpNkrѣ]xE:"GWڒ=ۊW?]_|}q2KWv#/z70fh]#+ -/;ݠ
aӺI
n$#zC!Q0>uopqp8 l/fzYc3m!"[d<CX1߄0őAϮ.w!ߑےG7 SR'B^#1*XOX`yS@sQ`1 u"V [z-\Z)-zC .L|(u:@Y/?L;_=Q 7*?h_](h%Sw}fm\Bx -gA;ATtTyڎ7c2:%U{(vIQ)i& ,tl躞O#iϕ#,89*cْ)k{K¶6ߐmO{:14=DMnt)J`ɒ]P -Tz1lvqvLޠHQyD+83<0 qlLrkCW)/t[?c7`W\ {Gp/ Ji;*!cS(6 -Ǥy<ې'̓@I;@rRzz\alSpn -[0PM| 00;!J(:y -V - -+-ߠ<$Wp]Z<A,jR1lq;1ʖ7r:ʯ<;1RNC)#Ϗpund/ -bN#u Wpx}:>]QYW- #RH2x"HIۊ^OrnqGͼt6"8qN)O[i4E֙q}(Hp\@2oHG)
Ǧ4|;ఈMvmrƇ*(H>(%* -̿3pr
ZnjRw` BNL[Ƚ -߭L"ȑPצLF#7×
z|/lĊC/{%#u\8c]^dWvsc4l^S"?h -*:NufkԔײTm.Yf㨾wYFQb?d#|h`F0x*#4ۨڮ0'փ˥^d>՞JϾ/}[C<Qp J[`$HjhH^ -.{]O[4^qHYЮ:(- -%EkD;4^%&ؼ]2B7RH8y/r DbE}: -&`\jaS0+ҹ1\JFQ)@unR) ֨w>Ə$C$ڻJ(-!C۸xDYMD]`F6~5m( Q8xc}b6읩a<-",0t.N5<,`^
4<lj7N3of^h<ON4oۄ)JOȬe.)4!%R/c]j6ntA!8]"!o_^T]N!h=,W{|.!V68z1O*tl~VgfjV|`R^?QyM~ -W?{4d_]/J!vWZ_YADu&/l__0̌"U^,QJug(/g<ҥæb=|4rPe?!D?)2 +xڽZYF~_!%alv+Z6GF)R&x5ba_쪮ā?1 =ۑ$-p8K@Dَ>:vD̗X<|3?};I)-!,B|*×G87{{j> Տo_86~p:o)[~:7g֞85[Dds<i{J~vp~fS~kt3DFt0T1?r437>ipkT2Eb$Ms 9lnrUe=fzwP\I-,/o^wUR?vOYӪGK# +U}# bi_&.U-|HzU_C-'}YzTsvUbDh/MsR~l.@^=P2c~<r5UU+6UFO#ܬ\mԛYLS*W>^_disUwWK.Fv>ݘUHnuأ6+dwڶOgǧ/_uy~\m%oD` ̍l%xE!%HWO)(ԍ7q +UXR+rvCxF|f-U_ݢ&J,NL0NGc~WG$[rgە<;yu>^K$\pKV&
쐛t +
tçƣl;1@K7wK +cEq/T<epۿ:#/"@rP=.p{0$ +
=/=o=sEd';=xj>n`;"Gg' GP Хk0)iwڍm@By>mm%Hˠ'o+:cdW +F[S> rh^ 5x:_2kk5l +M0f1J.Ӆ]}VZ㫩t I;dҋxq:S8ZK
%dYeXk#F=@ [HPX*L\1K
,:m1REZh
(pt鶯¿j=q +GFփؠ0.yu'^
!D=?XE$m]<jtt0NF +u۾( +#AF'{O Ab<2qc\!l hБ-=˻kuB傟)MLsFE]妥?R[`{)-{'(+Z__l+EOtm(l2Rd?E#
J-zjǾ&{}( +M)Pc`ح$g5+>dU<iđs"jEm"TiQxtL9 먁 GW`1^v^h%ɨIgM.nW'c743R0ON>8g uf+u~KA +,Ig$6.??*M^)Ͳ6)GIC{t/#\2YP?ZW&jφ58G0*K<S[s6A||;!d"R֚w" _D$ڞo2'Iƒ8oe(Pa2WMՍ^z!ylK~]U*q2PME2v#o,EeqkJ>)梆se>ړJOA+LIOP#}b/UO"Ǭ4vL7W)Q>s_".B|S(/c83RS49I;SL0xo\G0,(x_=9>mc?I +Jѕ ۸ykgMa\~;6O5͝A(w&_H??dם`UhX4?2(/~g9e581W#'/]dBq55?m Ȉy1BnE8첳wB(H*
~@?Qdz s<z
e7Gg-ܧendstream endobj 1775 0 obj << /Type /Page @@ -6513,21 +6457,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1788 0 obj << -/Length 2961 +/Length 2737 /Filter /FlateDecode >> stream -xڥZm
"_kEM7Mv]A5^NIM˗i$KvChϐ== }r<M7'5ywWIFzu:Uˌhڶ结UXr~:s]װms:Caj>~Ӟtf7߾0zvՈ0k,Ӎ3-ӆb+߳5[7ᯆCTomtmg2-ӷ<R9Ͳ =c
!7rеg c/y'r;
⑥@#pDԼ&;&j1yn$ÏF"MF5RX|YdʼD^jٚT1K'0lD1"$q-ߨk X|= -\zZèVj1yj[<8h#9Vq-AYF=7nڗt{$Kd@٘I&#uY%X}C= -%?$o p )K%WCvR{y.u8;YerMg>]3Lw<3L^1m0ղ=%`:y6O!l0hN, -&*IKpb]91-HqUDƵ"<FxVS'"q[똡SJ;4\R!%ۘ"JC55.i -Ê;njJ+~[UZ%PZŒ,qe릒.x3==/ -`F2Cz9?e㘒@>L>NoLJЁ5 -=f$$="x -@ЈAPD@8Ppo}i}F,;If7|m_Kl&sY8ڄz R8un@UP{^#%V:c0wlrYIʫǪiXXw^&J8W9F;fLOR TǶGn8F1:It1TF7ht?C<}ނ|8(c=gu3B2Iʼng)zJ*}L橚X5/˃pT|:i:V3mӯBh&7w99Nǎ=gC>{.z\[<b~1RRqˀb;<g}3$j /l)0[GzFݗQ] BnHdixcsR<'1NopTNdDATs[dYSWiw`T z`G?Nn&cU>O%#F8эςX<%>`ydrزp_yK -oPham?C!i'1>Q/E]BRvnaי=Oio\&RF۽~¥
7)ѽE.w!$ק8Kqu5Mo+:x=K9Lp-ZI<űsCE2.aB[*!sŏv/$|(@Ef uVB[\緻AryR9@t"x ^Ĥb6>xI<G) -d#~AnqVUsQ&?]_:SKuqAdu+n;V%1>J&ַ֒Z6\>Ei&CKnkcB7"tnD蟎Va#؉$pwiMi4T*`4Ǜ}n4éǏqcp BV7QU#](8{ -f4N|ܓ ~WןyeBendstream +xZoBB]+OI< +$sȪ"(rW(RJw^˗)状@ ogfgVGGsߴ`4ۦ;kt#/lFiM}zx~5eV0Ze}0?X/ou
6Ǔln܍mŻ/+^/m\/_3//o/ލ?\\[N<ӛ溜QL7NжL;FwMs\]^Ǽn9SәAõܫմ5Oq'36 +;fY:IܨiRn{ō-jESJBbMHFHw7yl7ĦɺqF#r Ƽ/˷ݒ*d|H0I\7j,2OqZV'a.˹ql #̜<NZ{4"f 繾qk3#[GYɦK2 +ZJ0{@Z2HH9dHc4*EP(s&מ|;;>O{<'z8_,SI$ul3lݧ}
)zH'_hcgsG>laİ("aDS{POQb3v2~hnC$%eݠA%6څ=J&ߵnSܲr'r=wx0}Nf(=MUڡlc%k8RQM{"<vS[ZX!Ef)CLfp!D?̡Ev,MY2$7Q\iĪ^̈وj$TV$vpbKhwC-;kO\/0Mf7tɁףNl8܁1tiuX axWyMgQ}:5OSHv̜호`Gu.l +js<D<>pfl}`tJ[$j\=f xV8;0-k? +7'ecU>j1Pt1|@Ɇ3Y
\
8!E1~m2,'YBmwd'Q9BZDs r0JvR@JA&z/a0 &'NUԗav+93 JT& 8$:/$ye4:'>$9Dr{>~mȕ4|п RבiHO,RK`:ƊzҤ<I=)("eD95.xD4#{LڏsiR)@>=DDH@:dX껔 Yںoԉ+e<a)CI^PIgEwL2& +_f```OMFZɾ7p~2(_+ nICV+:PӠ>@*L4.݂X^~f1ȯV}Y/vo\vǎ#}, N34EqX̣1+mXeCJW?A>u[G9Vh_q❼u#-(:w<=`Όorޮ1|%{.6(馧;a^'&i8C&Yv)4+IhUԕ}~'T's'??dI;Ԋ:4mxք̿]bxd"P'-Q"Ip6\jX IOj꽎Iv4'N~bŒ=3s)588lj _@է!6xһ\̯` /N}H{$r`]<J]=Le5$fX
`\ǜu9p
S8F1=C$|(@;0l=0N S:|?@[ה3ʑ
$t*g;uyy YNNKgCJ(NlՄ+wq +w3gߏP#9q#|6~ +;Y*kfO57(a0D#B]~M-4xx;V,=[Cyu
T1tSziYıeL!Ϊk
W96)hi4AP9!~wIx_HSVi@Q9di\f
+[iꟿެ7;}y-\
Rā;xt܌S }b"
B3^iT
=j>R>ܨ# +Fwl/?bC<EQ+臿Eb +b&AHV6hl5q3GCfkq}]K.ߓJh7١SP51:wFc?6Z9LN$AWi 0ƔΆJ
Lۖ{Uqk@VTۭ*3߳\-/ל9g&T? tv{>}I0endstream endobj 1787 0 obj << /Type /Page @@ -6556,26 +6501,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1794 0 obj << -/Length 3869 +/Length 3219 /Filter /FlateDecode >> stream -xڭks6{~3SzP~6v\37JV\IN%axv6H -Ŵ -hw揮51ؽʪ -VxV#V1Z>':VVpp*+w?靄?k?"t{"=4E -iW ?kA9WgOm-<_SS<i
t
Jc%qF[XԈdnװUcQ#qdnhd|JP]eRvm
yr<Rcl)7Яc =:FA;Ā&hr!p/ xێTP\CSNd'.\0+f˶l
]gg=};s5i!HV+e`u$ -RD |s=:JAU|zU*mW^AA9@))6t aqXR'm'hRg{IpNwUGũIݪEpbxת#5,S
u@f՞6!2$&GCAyO)`0Ӈ={]wA -ef4z<UVr/ -ܤS[MNm!(ZKǔC-Hl`D7EmLffWefx>f9/$uKd,tw#&,JT֑GM}%]Vcm<y%fa%?p'q{C:!I6VO7-nX'[kYjSpXձbJN%2
4S"$(%I)6 -YFܮfDb:TAJ\gZRP˩X=e`b.BZB3^!`wt쀭_oQeBhF-Є2hNS2FiT={9vXYhqh^5*|KfBP7zNoRJ'KaGT2$2zC -_O>Ȳ}n8~5Wfs Kc9CGlZb54؊Q
7dӵ4
6Ƞ}iTӌA^d%Dy7{:8#fl'1= _9nh)_vj -^3e9) 1O2\ -w&4j XTӜv`Qጮ!
/x_O+pyE8ZM踓@3^b1?a3Ͷͻ&ѣ[]rj^THRCOqp#TF6B Aف?hB!4)Z!}z -1I"m^E!rb:wy8 ww<"`I7i '-a7G5kN`JKkZ\v0;7Jqbj>w -МdjJ֠gJ9NہS!V:UwXRa]%]kcإ/:|?< -zmQZf ?tL1`kgKy -oeU![tʃ>Rc=IkCٞ@1Hs@f@Ho'|oQ{8rb-hi++Nl+&v3u] y.}˝a?ytC|&4aЌ뮡|TH'a:vz%S~%7P2Ʉ>ͣBl* u=`k.vqt77oj@lӿP5冠:Ƒz4\TpCǏ.Rc^-;/guY oqfS#/>r5
(ǃyendstream +x[o6 +diT%zjW/uZفNNh +EBZ?d{[tdU݀Cp`}+tF[*5&Wy3cMZ6mOYmFW]V&y)gOjcɒ-*a{a}tNd}Uۉ,c>WhCFR$ 6ͶVvu?\%{%e:%mV=XSW˽=|+oHߜ9~'t,0xRb+]1yj)F؍
G<@b
Jgڎjy=S_s=Fϱ^7H
A"BawauSFﰴ[ct%nPl9C@ d<s%rhBCn[A䃌=0#Li1(Jj,́W^<>K>VCNX +> +JIc ID6H +JlrKC찑<ud"&j]>tav +} Ǵ9HZh@m%qsk.߾aZftBYHkvfQz !ߺb<Ϟr͂=gB+韭e\bGBXD\JjazJ}Pz89GD udnknGX!ǝF.؍fж7~םq +7e'Hv+h[2hYTԪ|R+@^M.0NV{s`!'T]HC1\RDhv:]_J3ItUVkiY +W5hACzHp5->\<Jp:Oa6%*둝GA39蜝k%RұU +A{YdLdJ>@uc[S#W^a* +56,5$(t<X +_WcC4OHtF7V*[Qnތ p+I&@{&G{WtZqZ"&R{tJd'̞v +sQ0Ŵ|)|"Χ糦wO|Q<:,Q28
e:ɶ6?TKKR\CJiڔ!ok)DǣkJXvn7̆ZIVDI?ۮƅ.w8tNrvRsT@xͶ`5v!Ğn 뾤0"y6O0?,NN}=Hėw]_X
|Zt[Qg_7ܣgO>7~T(@.^/Ê9Vx3pJE?ݑZXE7DFXD$6mtDGNg0d7oq`5҆X-n.Q?<PпTfKpzĤ"^\H}EzoHoZC+ +WlޮWaty"CNmo +x.FE|BF7I#5(p~E(ЃpxPR~NPD?*JndQPn+: uhwIi7+iC%qfAǛjءjL})4hFdA'Ѯ/_q^OΡJoT띨_;[;`v`jgO"ZwҏGO"
e`endstream endobj 1793 0 obj << /Type /Page @@ -6592,13 +6536,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1798 0 obj << -/Length 724 +/Length 698 /Filter /FlateDecode >> stream -xڥUMs0+8JqtR7MuҘ0`Ԇp2ɯ'vsxlVoWo߮VX>Ҏ4*HrEvϥ%wqbӗ -ihOoa}By]ё/DCfM^["M+}0I0$_dԟ&7Gr"zB
mʌݑLc]3V,h9ͱTSuO`ft28-Sd OĈ-S=WKq%=;1tpr0 ?L/ALLXH2*KqB -9w"K̔u`U=jl)A)HZN-c4{rozӗd=3 +xڥTMs0+8J 8:ӺiLOiajC +8wW+arxޮ~=tcEQ,ynwϥ#mpC.By|<nLHZܲtqA0)GQVdosCv
e]-/)ʻK8UZ?0N<Hble{'TWa`;gYtk;pplS63(:}WC/7@HMB%eM]H6`
CKeR
LP7iN~Е}Dy}ٓlD xO@Xa%N'1#mM%֧K`I=Vu!c$7!xisd '~ ގM:7vO*qg +*P"8Ao@Rڒ{W6ۡ"^c\^]`w>.۴6C?tfk[w&HLkL_rcSvF]+$q`QPQyW߃kh3MT@IȆR,t Q!ԯ]_G WZOmg\jػPxendstream endobj 1797 0 obj << /Type /Page @@ -6615,21 +6559,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1802 0 obj << -/Length 2123 +/Length 2095 /Filter /FlateDecode >> stream -xڵXߏ
~_aKhaK-M]C0kɶP[r$9?~,-Xϐ!HM<S4r`>IRi:Y_y
qRF"7 -C0g;}Qcc -2o^qLR(C72(:"Y8v>/0JRzsVшGdn/'b -i]ڿ]WʹΔMQwշQW'JEso>O$Iث6'Y#Py9SHz?p5XFSf7'NŤEa7'd@9b=qV! --=9m%ڎ$Q("H - )nq/:Ə~_B.9^uU=s7wB(Y2u)-VA
뜃SpmQtP]U@hA 6Ru>OaGx~H\륒/}ۇS"o'KC_?K!>r?rTa] 3ocFDOveL?Z-ͨ[]8uVWz` -oW7f"(bOr#v B.@>Vi6(wE&S:BS$:,͞mYnB̰ͮz;9fƽ'M՜9N]GJY3?J.ޟl -RZ0t%7ȵQmr: S_%8[]
DY|I쉣DL#9ZvshE>a,{At
E՜M TL -Rr9,R#es!bm&7.W2]nEA}B$s~1J֙L4|v+dVj $3bt
ָa{ND4&iCRO|^{yD#K5EXz7U^hef\kNTa -YXQWqu]ԹA# _g:KGȪUR.T$Llppoљр^#ōOKuIsnۜ˚T
n9#x1>Jn3HiKU$( -Iacy)aor_ +xڵXm
_aY{h7wYkl%$g@|3@3$pg8R(O \QWhEOǝ%0,M؟,f0hdySx$7G=Di}aywUgJo__&.;,o*Q4M~ǾJx7Vxn.o( {T2Rl:ta6d0H^Әj^'vf#Fz<!SfY;g^ͤEZagd@yb=z`̽x]-]5$Qw*"Hr4Wl4|88ֻ5<ekj=nu%!^֍3{sa&!ӘUv7NC_!Ŀ+O0۰-
5<B79hbqoB.9E ([U(r~glUe_qpwUWXM82HxJ|l.?.<U+4T7t8W_~y%`";.F&SQT[-EpD*M-(*ۿ\ݘ"' 0I(~;ȝrڠ34'ݐƕGZ~,dJggDq`t˭;ziF x#c@5%Ms_)!QrVGuLpN(bd[ӝTyD&"U@Ѱ0WVYQZsK@H#c-ДJ)4~*{Eh¡hHZLF[Z\Uo4 Yjb)Þ4͟oB$EI:sf2ꃳj< 4vA]Lito0x&$BwE2t
6o;n:bF$$E6"u"Ұ{;(Dznv`+rX\
֕qr*/[ k-NVƖ|X
I$YNGa'}!Bk ɀmpqۯYiԳ̈m8םugIZmHr~\({,ǹ +G4OR,XyGhcMtPbUa]kԝeZfD]U.8ύ<!ĐBLgj(?~-- \Wkte4zu+N98d}וܴfI(I0*,$%~=7P{c8T|.1%9Qx3*M<Ǖӵﶩآ朏s Pb442ٷ7^;ԭȒ]s9H6S,QVUi;P|gHŽ1t,> +D +hyde@~=B}gZWI2}س!*/ǦHQ[fǟzendstream endobj 1801 0 obj << /Type /Page @@ -6658,30 +6595,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1808 0 obj << -/Length 3445 +/Length 3358 /Filter /FlateDecode >> stream -xڭ]s۸ݿBo3C|t\kikgڙ$ԑP@J}$X,{ -gY*fY*gU0_B'q;H#?Icap(Ej4Wa4K؏U<{Xz$-*ͼ/{xު]^lx|Ico?_}xpiq8Ia0[DWz40'?¨p_]e#\5L^/ByS>#/Β:"6LfaAqBlYk# - ƖfS?0˚Cos{K`H*3epAdȃ:=
µ
O[J=\D<EjEy7 -4Dd9ZFݵ5P99?=^Dӆ-plO1gSf-iIhQ| -ql*+ @>;5z-s -'%<2k墁c:$,<g,_q$-J?1#~e|`9jA {KLM( $A@!f+kGw2 `Ś8MCH\>t:F o4šf%A(lӵK/|"%{+&&+]ҥ
N#e=a@xc?.l!r\{0[G -\OϞ=â{ꟃDz#d>Kr!UrVl^PoATOޕu:IP0Bs}=h֕kt0iAɄ} òwߪEP%)ǝޕ֢ovێvժ2g]o{Q-1y-Yu-#-(̊{6
I+k7<y4H9۟T:3"A?>|SHz{ܔv`oa -@}{xnnA=JةG~-Y~"~iќNWc2PMnݾ{Pۻ>a)81x.I9U$.:[d -8z'F&[_3[G@t8!}<nѴ3o{vM4ѥMN=k#"GhIwKYeU5Rgی-ڡ{E[( -b*1:K@hmPȡ7o{ ~WoA. -UxwmyKT`>?WlF^ITR[:|." -!m" -2ja{Tc@`9=;T -(_a|jTI!q(BxyTA8+i{63vQ_54O/>D4Zmp /57uBQT?d8WH9%0]`ru%lQ984b(+f'7D(˼9eu :]IyjdF{Gwq@a;z2JtesӋc$֔{tt+(:Kds9[UAƖ.KGhrϖ?%VqDbK Z0C -^
FrdlAtUDZSQEg촰qHQs+0a% ,^.,(H3F( -*H\0 - /1{%(6O!M#Nkl - "sY#t*J'Oo|csi߁m -7˦{?$\9K9-e:.̙&)?Y*2j1#>x5p --*fGylÿ֕ThM0sppFZc_\4a@%q8\{)R56.#=2tIL[Cj\sǜU${=JM
I$2ѧ8zYb용Q/?/ANX_*I(KzyE$;endstream +xڵko +,Mrm9XĆ\ѿy풒"0`cvwv322O@Y*/Ep^'Og&WvvF~g`̏2ub/w(T]=]*In[-W*ͼO;oWww{M.݄=2,N(_w_0U#쇌mYƲI]B%pŋG~ߥh'ra +>y s9oc- y8tွoP
5/iQ>_h`r6#?4AGfVֈVh=e 5Kj7#qQ` +ZɁW]\9i<$zD8Ϣ@{pe͟
-tY[^'A56? +xɆE/<@apO!]Jp`I/J!'wi;(+n
'7(˼i_p;݈.xjhgguqDR.p[֣'g)m>ΠĒrOu`q@t.g*(uز4j)mIPSe_q7[ +:F,YYM3ZgA>ԥ-4*/xb
^ sq +/8+{f{ܪ=*SWZAQ"ȯۚs/yϝºNb\If-Ŏjm#ǧ8sGPcaUR0Z+R)\`25{TR>ekaJ;뢉d&fE)=W#!2&ҁø"cրʅ+p91a"MX|`)?9
QY ++$Nu`¦֜|fx +}fqitzH"?J0'endstream endobj 1807 0 obj << /Type /Page @@ -6710,25 +6636,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1813 0 obj << -/Length 3543 +/Length 3353 /Filter /FlateDecode >> stream -xڭZKs6W&jjĐڛ3$NeةV-RT<ʯ~,NUR@ -c仹ecg}2?~)?48дvP4ai|%4Rv
(3몭zi>盏ȏ̮Aav(Lm'¥'^.U~ -WV-?ijT^і`OVg]X,ґZcUq -&ل+%TnZ<m5ʎ
7j>!5zh@{֙b1op-&ȶ<Z{\9Deǿ
y#`Ғ?vۯK0h~':FtBF -4IpohA1kqIn%ф㋢M4g`KDK̏TH%t+eHz[ڢ{g3L 5gܪeHX8JȝOȸ/y턤Y;@߲ -XbS
,\{
.屇֟.s]mj"4DqptО'^cvd=Vf{uռcPﰧ]s>Hj;#St6,ƃ{:eFگ;VEWӘiRwsྡྷ-N$/VRdv?դ$(Ew%/LHb{@bٵc-*k~_ 37|ׄ^w|s#'\v{EnAGXěeVFKIEY
D)f:j>};_Ё?hqYz&`w䍈U
4vOp5ڄpvn>K{-!ϚbԨ\t$5(n~C2S7ݎL!žDf-ʁۤժJF\-wj0Fs'JY ~4wC"BO/]m5չsw|ң8Znx#BFɻŀ*_t!e'KZػ}jT|},@[ݠ܋rO4]Q27niVf6&rJft2Ryf_l%58%bC FBܫzA7HMO!8b.Ĺо{˦^qTA</w9QSlLTDk'K;|x?4Avb]_LAΘe -:fqMdpdb'M
娖K1˛j_(~ҒIHQJPx툕_=4?r
!bd;HOVT2zG>^G~%Ep].HsgG0W ٳE$ytbvsW|@oi'YrxbܸvfU\c]ILx3Y轱BJ '5^H݆h lb!Llk4LzUDXj=Y臏^i -qw⢷nGX&ƙa<c[ -
3'8C L
2l/\Z6l@.`PpjܘxqP]k\x&3:7ፋ%mƿ䔎XCtW܋;Ysכ]mJ%T;Y\Bǡo&0
J&N$E\YJ xakeWFXҰ=R -ˌP֓Ar+RZ 1i-rdiBeZަtiY -nVfRud}F)!s='ꬎONmz M4b9i8Mkx&?~F鹟R#rh. FF=zR -K %1ӳPl/׃E1=1s~>T'KƉ\ME*0sp<k3Y2
BK:p^-/٨ 7VW8?s -S/Nm1m,^e ̠VUFfۦ;&/i'7g.na1ck<.k1[:DSm檱7F:Em4po{ipT7-YR#&OKgt]# uiC?V1^SUI!R@y
gW\Bn2 㻞sfYP֦Wkkx -
|rySN8qߑl̟1Pj|v0<E]-6jGnt LQug
h -KNN~Y/ZGe8J!#"0Q5x"Vendstream +xrF]_7.0kIw+D$V +ƫ%GMZ5@yf@' +GHik\;TE첺Aw;lB2yD>dĜM=͗9gA +\ߟR &-AM ^јp`CϹA(vmV=wcᖞ#]{ܬy~+{k]eV +@MJV>Mi991H
Zl9Oܕ|bf=;Bd/vsRсE9Z,%#g;0:r!]j=i<Be7(QD{1SIb@ZtI|X$ +W 6C\NK<T^}q|+$~.:/ް<9)R+B< +%d9zAeD@W|t*}0zF~8{o*bT=BT`XiW|-QpdV!X:ړAmjW% +)N +)9baNnvX
#S0bVUZb){fVr}Y,M蓮+R캾NE<vg+3FF_T.DMﮑRR58GF3]CmJD(N)5giA㥍-#Di`#&MWTCFD턻'14%#}c!yEVp>OꬪF\rSPlȳN)b~ёIژ2Kx) +$*[۷:fgܜ^@F
0+>]±C'p5#27Ă^/-d*X*/#A*6Y+۠8;0;f溈JdrUp'W rU*kǎ%D7`E
iedK\d֊! +k5Bk+K=! VNn#辍\c_K75(-bsUƪYtci$c'cy]IJ0m!6 +47a;AIG"jH吁(X%)<c7ƄUE_Tx>F06<@i[gH[`^Z1bqZ&N>`(e5yHt')ϴX^H];kDϢ9"Il & +V>8TSn֏\q@O8X8t|7t)>#ũSE
+zF:7!*3v(Re\MIk'QE:q,elqF@8>]IuW%!aA +}N<̦@o-R<Gj{֨($y=J +=%r|j6=!Vi*/neEekiTo\tN'9&ii'ƒb8bNDjiC8ۊ$Nΐ +:[nhQsTP:q"5\b-N%&*Xs}.[Prc~ٚq4{m !r7ښIJ#)b.Xt'LHTB/My^pL"~͓F=\"CF4ldp&CÝʲYUa˵G[^p_|ii<~D)05(lHcqPA]38e /zjfCo'CWj/A،eeYkel+FEh*5u\5H&K<Mk7&7
CUؚKnR\DYٶ˾G#/[6aIMð|<Kk?֣M9yWj,h5t%tdL)hojPl%*3zh(l?,lm6(H +FLXey1<[Luēҝ8O#bƫ@Ag8'%.۳=+s+.@)e\[v-%e1?7+;QT[+p7&sWt),k?)mE~Vendstream endobj 1812 0 obj << /Type /Page @@ -6775,21 +6704,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1822 0 obj << -/Length 3225 +/Length 3128 /Filter /FlateDecode >> stream -xڥZYs6~C7g$N3Xd+I(C1߾ -w0D
~*?8C
=M*h0`\~97
|=g;UF'gER&hGΗ L@i;usaMU-.Y/OEg_K=hj풦|^&y-q -Ӵ3I`Wpa*ՉSq\&жbj<%ɱѰc_xGsgPKlkSx&N:E3]iT
)J/{@ccrŧ*0/o3hOơ BkvMR|{L*;T;`)-+
lMzV;϶hI_ډ(TAō
X)}ɃNcjG)Kmp4ɴ]S1Lad#Zv -tz'@1ʍ<*(Nx,^kWh -Qq
TLǀ|,|4ғm߉Gn:qzz]/I|[dJ`+В+m[TveZM;^`9vS<78vafg {k
?`QlBmtwuu V Omadlb`FWǬg6vn_ -sa\PB#jEn˞VX$;rUF/Hl -mT* -3TfV/Lx.K!=S@PVĤ1͡12hg_)>qkkKipW2:HxRwBM!an˜S%˷/ f\fPY>O;tnlmBi3JYņmN=jwӁEzr<M)Ep5)f7ѕ"
Iku`JVr(脓*/(aWpI)1a?yq_<,=aABq8ؚ%\i\pܘg"V7JCT{N9rIӞ+/i:5XhCd.'B#fOgh=~ttAh"1 -E0|Sa+i:rD.sڕ+XMn" -0B@8Bqf`iP:h?|ɼ6ȍ#;}9SSxNC=kן%T3N%啰f -d";w5^EͯRhr8йstMfZ:m vX,H7T&Xڊendstream +xڽZmo6_o
$RoN^
C[]9E/7/$%{e;9̐D~f/x[ǟ姣p~\z +J[|Ɣz +K(\W' +SF6y̽f0(R?Jp#(TÚrkMo4TTW2s~3ab״[loz +F~di +#GqgޏʐKTo3ѩ͈%7v~H)5}:̭='뭛G<Q #JPt;Z!'N!nmp3xUpBݴ%l"Y(@nhhiPbu\y,~aÅ#CAɫ@K#S39Kͨ6Ɏi{. ҐuzTq&^deᤤ&H
bn +F-卉>Ef
լZMDOĒ|z\ڢ8&8C#t~)|2(#P! +2< {iV1(! 6'unoBV4ESXq~ +0@g}qtƼ`di3H_Rs6wםO`9؈CŗWpCx$fqo:U,ҹwhqO#3Ntfo]XY0 +c&pN9xDF}h<;x,q]f7~FZK(y5S|1Ľ(v+jGRrȴ;D.2<=wpISK +| +`_z&( +D!喋؛F&[Hrӎӧ$8%[d(h81XHT+.ӑRz9H=x$52|$>z# 8d
n}>Y;b-KLXJok&Fj`un}ͭKmE_sј듷o/__^fFz~zyq}u~j@PrJd⋧놲"2\~@U)'1*>O/4sN$f[4
? +_Xw
}F|O2+CF~"S^&[>7Zendstream endobj 1821 0 obj << /Type /Page @@ -6836,13 +6768,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1831 0 obj << -/Length 1819 +/Length 1784 /Filter /FlateDecode >> stream -xڽXmo6_"wK0M6]tlhX,y~BrE-w7=<[ixڦd7@y;TL{<ś -^(ƣkV8#&Sgf$Bf
gN(!)"S4cR#ZsmƋŅF"d^NN` Bꁟ
1b~7ΆMUj^=+IM<j
Mc:`AerȺ8Hdԉ߁Z<IFg -1Z0TSΈ9HF
hp:{KI]R+!5=@yt
fB@Z쉉DN @N')ruu)@g"嵪wF(i,xx hyxs߬h{\;&ur`gEjw,JMXBN`x֞T#y^&C#P`GqWQ[VSR[k0,b;FI#P$p<6D/rs"JHYP[;5F/=s]*tqKE9&Ot4(O.@4r!vs
F2M%jHI`T,ץ;CU8ݞ"*,3)KI:g +xڽXYoF~ׯCQE$Nc;hE+reᡒ8cIQ6(P3;|;=/|r|ab15ۑ9gZM +$ԻbRʪV7[PiY&89-+o ԩh9Pߞlؕ)#`dl 3HMަP&@n0oR"-Yf]My"M
IRmV +59Ppjg^Яavz}ˈcZJsJ6ZtɶR7lHk +vEw 7Sx˝BGP{.\S1OTmL*ҝفQ3V@{X`9s_p5`4E!yBah"1x {a^
eT-QuSq bJkdRk:&ڪHـ{7mEvzl\5|R|>Rʢ*;|bvƣ3YYY*S&Vc +ׄ(38d,7YtYM%o +R$Wm9=߅v_r9-;rNX;ǵl\Nm3q+ϗYݱ+\`xm=Cщ.GNFDyW;QY/۶`X"WwF'Ixm^jX<Jv&*sw!_,ۻG{%HKE&OCcKqnb\y.[:=`$kdQ3`c0[2ISBy]#?DEˇSDEYwM9[y0Vd%by~LmBO@~An\}xPV5=vxk[IIދhq,x}4g0@ܓ6T/{%iqm@XܡPÿu}%,Wvv0m3{뤓E^xIjALd# 8jym',H|d5whvHk s
!xB# +=
Oy:OzQx:~(=^,deo +2Tw+T&տJ*_Ml'/k0E:\Ō[8;5U0D<.؊r\-BOO/.}vȭ>|A,cNUEmэ>zmbJ5ñu59fi@'r'(mo77owsGL?5TX}։endstream endobj 1830 0 obj << /Type /Page @@ -6865,25 +6802,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1836 0 obj << -/Length 3169 +/Length 3133 /Filter /FlateDecode >> stream -xڅZK6WLbjM괵8YoNj=)gkq- -Iy<>u7@!h -reO«7(<澲,'vMEFݗޒЭ! &w_5
,K)HBM`3**<YO@kIM
- -}YEWuQ5}KnU{OH[>#C}T=FZ)YlpA!PMqZxXG0>b{nW2Zmx1B?V_Vi敇zWr<qP?>]p69-Yܫ@cϺ^WK9gw)Ϣ}&?@]~?cׂÓoϢv+s}ccOnuM#O$ذv(w[ógJc#=-mV
>b2smh'tPԨ{IFKc^FU -*ק=]: bVٓ ]%4pb=7< -ޜ`[}f?4&(#8{S?"yE|IWW"bE猃;<(PO\U.F}i\noTAyB{b(|Whs{+uT|4dJ_>@M^-\hDwH(zH?[D'?;q?HĪ>SߖD5)HӀxHlnBR2!CL -'̿jt
S2'Ŷ6ԃJ18ꉳba:Hl)txE0 -mm8X\}U|T<3y%C/B76jLxK)@ :p4ccAn,ȼ6>2"C|^z! -{̂ɾ+hxn%6>ޙaMW!w%}^fI]nڮR}zsQE jE>G⽓iبecZbLQi6q/(KH*+ -x$k5fBxK{qϱ'NDJlrMrvy}[Sv_ID"e{H:R=oEEkCAmD3DžWNjAVV't]p+C&2.Sv7kFjf4fUSle/uP EpXf=τҀޕFeS6+-'vb!_%6>1@d3ԃCh&ivKdK7{;Qr\g3b=js xL9MNlsATXNJZ -J2uqzl䈕l'AD SDx3jJ#2'OByo]tI}%"ξzp B+F9ub2G-"]D'' -9E;al
L7ZxjYL@u!D*_Mo</4 Y0"L}*DNB}_ڴRy^9^$5w5YOL5kylOcr: -SN[71MhYjOOW0aD5
ԽTG!&Qr RH;/I|"Tp9#)o&b@龫ˮYsƷNt"W
!uj\D)]Ysl@(d\:fj`uIC˗ZkܖпE=[f -|ݵډdQA^ cS8 b'4×ni9kgEaaO/wrqf*Xq>\}n*%nj'^>3Ę)A#-B(i.pJO\^U.nu[.;#xE6k%zPڰ4k.-ZEعܵg2 -.dIA7|BJ5N=Zb9vNGBOpr"diUZ 2%µ`cjN2SsMN{(3.bS +xڵZK۸WLbjSN8koZnų583%)_w)q|J́ +4Vކ +uf^q@GQI"mH\5p +ֳ0έwDk>]/-FحntC +pצfn`Ю +n!W[!<l:jdkI~019@©5{v|$fYd'iȵEŊ ۿ`[Q<qRU2q9&S} I]nbp2͕ޫ_!Sr5ykXLJn1ӳ"_@AȂ~;,1e#՛~;i{3G8c#HXa6bWGoy(G>.-xj)WjJJuvQxV:r13p>rq%XOؤPw~eЭN[|{#Ga R:vVK%_u=͇ϟspB 8),/MC٥xqY)z٧4IQOQ3ӀjM +&$:Zg?6$%0*tjW(t\QkExbn9^Ozͽk_* + :sJGvhc~_z62G6"C|m~c/p.%! T7{ufy]20wT;AҺ<~Mq֑Eޗ +-"GrW˺sTCd4.owI1$8 +Gq4qĶHl;ґ'$NiB"YXBtqʞ-[kXXno^M?ƐC"A+ᰀ\~Vk1 +lPiKCAmu0+X,߷Nh,ڜpC&2.SN7kFjf4ӁjCDla)zP(E8,epO|͖lľR(x#4&;C@ƶ?N+f_n16wtVP2>!+XSaV.e2Q6UkkfdD +{_!KSuثqM݊O{')6KNC<VB^b@ai5u00/#C@{aTLvE]a#}"5 Ñ =ga|D|,<1D +>>PëܓV`N^.i;#fx +zq$vH] bߓ800ߝ^'tNrz#Ch`N+@.ݏt{\riG!bA(tSW]RCMj} +\ai b2ZƐf'U[l&|)qF\,6V\+@$JJvݾ$*
rRE1>U*:=~R#PT)k!`BpGލ,"ekQ
:z#rB;tGfiz*Ԫt.D{h3B:9.ֹ<ԍ 'egokR$E:._̋"$7]g4;j,""_B].ǛQt:kendstream endobj 1835 0 obj << /Type /Page @@ -6918,23 +6855,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1842 0 obj << -/Length 3278 +/Length 3257 /Filter /FlateDecode >> stream xڭkoFQ -hrOPIK6(PJRq
\JT]ݝ?8]$w1uzO>Xfslljs{}ϙ\x -TXvG|7su?As}ޞnhggWM%ԉ&*~hQ}uzeLNݬf@)hn<M.gadawZvhZl3x1;S:yEn -xk> -`B$;(
ځtiTwy9%gQYM8,[y;L#EnЬDEwPa*<uA)Sm@T:S++: mL''p7ZO+T"FDkʢ1/Vh%]Uβ=\F 챩u'Ĉ(GrUF]&4p"VB(nZ#}1[_#JL -L\D7Ӳܲ-!X+*NcclQ}j -knz"5#:xMoʰ#,Hq:2v!|j沴l`Sۑ]NDS 摯c$:Ys#7irÔj[>v݆iswsяMpKLzYԐ&]mN58ɦ(xO8KgI8|¶¿l[76wdCn08VPʉ{2A(>d<f)SE=: -9`Rk7薫1CQvF$'-(r.D[8=B$O
Q%k9X|]~ɗB|NYz(BKzrM:6XLf4.tl!_`JK3lx@ ER(H9Λml*jIǕbk@ }=N8C.{`J1(jhȸDlB"! -I*G#h\/-py`Z*t'Bhg{hà`U1#+NUN&DP2S" -W5Z6]F`⛧zv!RLgVu"sa 'v2]DVB4r|W[Y*9kcJ
-~3ʼv4};t{8^:d(`eX<܃"F.=닯VHSԝ~^ aNH3A5ȐҴd# p ->s}=;YRP% - ,2R^c?=&hm?&֓ T,x!9㤲Ad%?%cSFZL "ǎ_ +h.ơ6W>';i>P-H菿y-;1;;::O#?0y*ߤ|}/agJ ^ܟ]a0 ; GOWo|;c<i?'ʻ?0=LR]Noۗoq70wv||&K*gad(4ү5s94ԱhOp FɻqiX_x3ܩ/x`wBDW[Yu<wiٺozB[}owkzew5g2HmG+$VF7-q}=¥orB'p4C&Nu5@\+5F"?e7aRG&( +{[3b˂G~
TX'~} (_BrዢC2w)2ɜt_M<Vf=̬d,G&S4&μ
Ġz>Nv=68G*X*Bydq%"KMT:H:ΈÒm%N\ky +8QP8&4~@Dak_9 +JRkrR0::qUrH/Eߖ<0 +RvUg^/Z|zm
Z
_1= +fk!yo朿́ +AkA$\5~pxEP'Rv_`s5<dMR^{5]01O5ʿ.ǰ1'R3/g_\p'KTQ4\RcKGRieڋʉKsBMmO2t1QPevc%:y[p"7Ô:>vihus{}|TMLz8ԐF݀m_ɷ8ʦ8MMC' 3_30-mk'lH-Ƈ! + +P9qx^&L58;8 +ulGO=9ܾx['&ݻx`Ts+XGNZ9l"^|)5o,]|ɗEX"?XS8,uc1&a>3<cYjHtN\$4:G{ԢxDk x4}d6$Z5A !DD'!_na05dZx!M^Ԑwi:[If BoR&$uQ2HGT Sx*ZQuJZN1qelQՇ9Ҡ+=0Y]ۋ6RGA}d'ݾ4/k +$
+Frml3*kiDۢC +_Hbړ~5Q1n4~sC<y5ޏz(eɾxйN<'[:hqV6`I*A;0()5-Ƽ@)&m5Ȑ*Nk8vG29(n +FD_/(s76XF&LmȊji%^An^<*ż\K9)%_}]i&\MD9kp](DKlG&dHzY* +?``vv^vmUQgWl=N*N9" +endstream endobj 1841 0 obj << /Type /Page @@ -6960,17 +6901,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1849 0 obj << -/Length 1308 +/Length 1294 /Filter /FlateDecode >> stream -xڥWKoFWH@N ٵER2QtI*}%+Z;>h'o2'I2il`י
OTλcYv"FY߮7sPͽ$I߯_ڽ^<+,<S^?ß uoEfiyv] -6i,'94&2pW? O}]A+ -4kow` 9RR<AQc4M= -xBcdkIٰb}T(P*F4:P%l#APxxC&fs];2^Wp昃=v%}abUr{aYuAaLmǖ:LCb 8bC\H7\$9 ]J0ϑS -3m9<m[@7T<Ԓ}P~Ƕdфv4r7i*li$F -s&2\վry0enN[ң$ENͨ[,7NJnҶ*74L~V[n3B1Bsg.>/@RB
jvWM/w_2y˷<cx -,
AU5WԅvWAvzF&쎂D +xڥW[o6~У̌(R{Htk:Yb`<ȒL(ˮח!@Hw>O{iyIISo;δhUA֛}@eA歞HeU~v}/1jHzi%-XanT{/ +7˷>.珫ĩU66?ϏWg2Y`(enf#"kd=ԅVGġ0JS;&AG O{\?*D~B0<LCt߁g͡i,KPu.o)gpNƵ_hM+Xo!q/4.pW? O]A+ +4ko` 9RR<~ݣ;hz.-@\V\X']qRE'p\ZQB4,,8 Mu-_( QeTMD8e!Go5dT;<a2?TYkuB\-#z%ұVI܄x<x'[ endobj 1848 0 obj << /Type /Page @@ -6987,23 +6924,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1853 0 obj << -/Length 2521 +/Length 2265 /Filter /FlateDecode >> stream -xڭYm6hZEowR吢W{"-y-Ty!)i-9wI p8y!W"'VYF*_UvǛh -D+!d\%ҫ@MGFEAqnw7ڭr7mfh*Tj\0J8dbV -6MzP7"X40yY ╈<',LӔ,?J-Up:l?w}yczjSn0:=)>$0'Am/w턯MW0B< Cg</BXg*h
vVx$1E+)f]oj}z -vN -F9#OճoZn[g;%F]zel4hν=jP[рB?dcepwut'R0LoﮯoG=!<xt,蕓mƝ`wHhs[| -Ե¯>?,n0wUO4<?T'^<Fj*pۗQFq6o7? -w7Pl(y:ިPon~Q뺛447hy|
6:eel>bstbs6op҃XơU1Y&11"p$F2O8I!+3B_5jY5ӄ]HDmqI{PB2~YasĄyv5*Pfc7Jjum§WBsv42?H_v\c/-S׀O:RAM$enꉇ(wM{>솼/i7>:v:xc8kUݡ!/Xj16\h'40s*DTTQoX-\!VRʨSuo(rA7V39$i -0b!.;9 -нk|&U^;R:NB8K?v+,1kY훙Ȅ3@5,Apjq_ßKi'z%_Bpztnڝ[:N0wmsG*"u- ɾz30Q1CyD9LX)do_3Cn9D,jΜE4GDbcs[B[<.">K}24p.~:W>!"v'bRiAn`0
@nefVvsWHC,An(c]b=9
;{覵LX5Q[E)^ v>l?"L9YFtL> [B}w0kFp1;Wd!]igKֽ)"V58}x -#$0ML#s"y^<**Ϲ?bɜ&;t^Iα&îiVHTqyBex0 hhE^K]c}Ȉ -+Ǣ/|cs9Q}_ͤ2d.TkXsm<|Y::x)%`PE(ϊWk3Rv2/ьR -E,t[΄G:12ՋߣǞ[>&`t} -%nƓdk%s'HS'TtpK5_h;!j='tRܐ^)4x52@y@D9GbJϵn'J_PNGm/DyvIΤ7/UƙZ^O endstream +xYێ6}WI1[u>u; +ƧɶtbUkH2K<ߺ[ +z!=z3VWpŞV[XTUe:bO(AKe,"5pTӱDE<uċTyQhJ[*6:/QMٲu_nXFFx@H)Ee
t./>ۦfV&Fp?Abè`G5ބhHn
2y=g' C &m*@eS|^(\;
[ї!f±-L⪫L(>>;J4RA>4T-zQuz-ZVzc.7͋P~b-}߰(=^s&ZiBKMlCnvM`cpVzeumTRpy⾩r +^3G֓P2%dBdB7Y ^so98qCަ*H^+ +`#W,QGy0=yԷQ@O[(V"hafN?lqzfk + +>!b00D)3paa63۾(Nƞ fv +ER.k͗f$vfz9ȄI#GcV)$Bm2AIܪؖOb7QLR .Lh10{i,bNgpn"BŶD&LG0`kQۀdр +>
=~=#|x§SE)
&QvɆ)p5EVEXE&Ur^fʭylC+q-{ae~+s| +KN`a?4#0voz +0ΠZC+HGm8TQ> ^'89 +@?4?r0xL??_|뿿
\t8y`?Keʎ|7^* ȧ盉*Ɉ>5v\"er{\Yq>7{tQҰ9]q"H:Dh|''~=п)1l/
xz|o]Nc%7c)@$ᯜ I:" : +b%'7M& +@Pjepi^?ITx0`R $gHQǁkޏ@Ar=endstream endobj 1852 0 obj << /Type /Page @@ -7050,21 +6988,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1861 0 obj << -/Length 2882 +/Length 2559 /Filter /FlateDecode >> stream -xڭr]_Ik
%#Nb5v2IȘT{@H -{1 -{X3-"=ô(hNfCyEZnɸPC)K(G88E;*k0n-E;`DQ=|me,ڿP^R,ׄ|?L/(QFng0,\ -[mߢ]tIMd*DAI9`JDO4UmrU#-YU
28
ԻuaK&M5bJ,ӑR&$3XaqgNA!$s2l{ejs)˞Ba -#uXyR{)wTәom?LMz(Uԏ&X 7.SJ/^N.Uq!
;[[\?+:őH9Μg{kc|m'/5ϫ\.:ض8 P{BiC5b(J\:Y\)a2o$`caW%yixĔmlSpo:V5naܯ͕:κd5ˬ^lj -$ױ㬣#e; 겱7O|,Eyf~_fҰ -|WC GK!slJA+ޔ8kHp,z`;1cgj"euBTl@$scm*;)\J^S0Wm.<OqȚLY=QL)mؐfﮜ -Hj3OeUزNioV]\ݮlswX-f9nm k'JD$Jѣp/<>{X54;& j_;̉+6 -_o/OāQ -8H+3:O=Hњ[TPo$ -{-K~ax7%9J&j1T[(Bqeuv:=TArͤlV()(PBhB,#H?$V'a@=X=$aCf2n621VCu"}ڮQn匱j˻~!{Y
N:i<؉!Nt?/ ETp$
?NNCr5T:Cz&`endstream +xZ[s6~дf, %lvwv4H[l$KRq<;{. +#)T#wt3?i>Nz+b7nd}w~vxr/Ɠ0t|:mD(GR8#W8û+d6GW|Ghw9=UxXEhPx +`N5fj<}XIʛX'ҹ))tĞ0~O +?Zn@rEj<ѡG'W +n_yu52JCpˋeH zy;SV171'UY%[<~7+ڀDt:ٌY$hCa?diّz +2[07Vvhon*k!}!AD股}MgN\ 0ؗX $Lj`6MRL4 + aE~kI3ܻt8JFK٥Efo+w?N]IZlΐK~RUVZ4S# +3%-+Q 3E\!3t/Twm- aI7Lgݘ`0<p'&3ny<iFR\bݞmOJmꐒGK-ɞօ +^*^k11k
at6ar|%yqkX0~>p.#{ΊC;yaqbu$MeBz|\+ϙt1h0|d__f@B^EaLIEέN`y|:*Hh~qee;+"Y~Ȋ r;%]|!8XP`g yB%[AJ#
dA)GD?ӴmxN='Myզqyo(Q
yCV +7b~BR;&1'뇶AXt<8a6פXAdHx.#w8Z79͠@~(\)sj +R5В|vP]P;c{q_Q`"JŇşOo@>B}Bw1Zendstream endobj 1860 0 obj << /Type /Page @@ -7093,19 +7031,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1867 0 obj << -/Length 2512 +/Length 2151 /Filter /FlateDecode >> stream -xڭYm6N."zHM퇶d["[$onoCɔ-kfy'W80Yd^|w%6a<va$("eJfq3Y~&dJYj-ֿ"z( -nʹٲq&DCe[|DG)gZP*b5 =b8
AB:«%pnۤ#/Lpt _&,c+)y(4Xd!h>8wskD96 -!>p)WH)*EsZKAZYkVDR`ɉ;4XfL3#[%εs8%g4YY-ؒ- -qJbOVCiBhSltUMf[A5'guv.h龮DnrlPvt]' 4r@)=rRґMEs6*R!ߣ)hsR4rkܣVmQ23őˑܹ,:<l\)<<tVB0&b\Lgr23ɓ.IB廼YR*ᑾ)!L/r&Qi.&#KLdQ<}H s]P" -V=Rg)a&W8)g#Xm]6AYek~.]duVʂ\~\uW0QN<Exթ҅rh8(r/gij0Ll{TF:cFyg1lۿF'L'l9`"qtGu!M,|ȑX3qC٭]yD0p~uPܻߖV6ڵO;J?XPHOSuiJZo牂LIBf}q_Q̼1 -mh !Fa}x.)w[@j$> 2@2?x3T*bkw1S4+4d&%
3RF!E6fP l*ۋ2HNLkU1雠bIA.ԚljG80ZYzRP-ڝ(wgyŭuk+Rp/1P3T¸Q;t#R)g:,2= xtBHRlzyKF;R8!=i7m){Gzۆ* -5u5?HSQK_,!||qs\pqc&_f4+-6LQ/qhgT,*OL{6rNuF5u#YSX&/״T %D{NjԼ4Bpp&a?
{K!tAS(^Cʶq[!~1w<HL/tV'ZwYn@!auve[[$nzTGi[Wc^<Rkn
~]VXJUk' e8W! -4m}Xq/>_I59jg0+!ߞ:#Og!;PGs&tŌ[ %\9FzzXO>5y>OsW_EfРt5w9ai
l\+ldFc:S -z$ѪѫRwQw\A7DsDBR? d<-ќ LAd ]^c^u&bZa2rZaeuD٠{Y)%:3'^FUƗ*ʢi}H\8(Oniؒ&orM}"ăg_z]/1XVf3GKNGܩgH4Ȟ{?A͙hJmEcOJ*1xMFBOhEc'KwC]]xa):Sу]noK\(@ +xڽێ۶_EEӢ@hMgyhr%9eK{i.b!r8$~ŘßJƱL3^lF||+?b:a<8mVd<pddS;g%gQƳÜ-D4j̓TEQpOD<EH@C,yZM4;P\2.ဣ%Bw!SatL,D#Ҳdt/j2& $ +v"ZP'c?uiRMip^Yܦ x}K^HC#.܍K{WeKJ!ЈgBQnũl2
Up'%[.sթHSÔE,%PmvRBmF']$l;r<">Q;m9%kWَ'MLK:Զ$b%liF-bC:r˷7M K+ Hi0t@mWahC*8=Z^kAS'DMMqeXֈqG[?x#Eu:;rIvQgbSˑS5+S:'bvo%y0hfx4H2?۴tSp?g~ucAh#B(D,-@1ۈPr7zy +nͼAzk.M`z (28xym,>P
@/hh]159 ׀"68b`I6<}A;}ODejyAnp TAm_>LKuWJAW==X}c0]3mw)fbDfnˢNЏ8U~^x>(K$L67[
K.H26`GHRC5lKL/oȈD3syft~ِ>ri$oH5`=>Nr +:u{O8*wj̫k.?֩1漢ȡ`C +#ZȋtwRlOeݬɌ4_J9*\h0&q;sE[}~PAIn?7j;Χ,(۬".*DE*
e.Yp_L|ҐI7RN=++d#X!Xvvi3nbGś7``WwX-wY,eۚРȄq(_X`so~*?<#ߎczÖ.?]wb--uUOU(>LFr,aGaT\Ȣ!<fHo1!H%VN5ψlKK0W +0n?"Dclr6X7%{~s':`ʡQSz3O~u73OHZK<!*L$g-s7<zq1|]VϪxI߲IȩBa1j+`25p>➠:hw Ѽ.ŝ +ڧ?BvL9Ç5l"&Trn
C%yFߛ9ո +r$55$bZJ̽aq*)+V>Tid%8{A'hs##Gj&ϡ|F/v{e%w f7}B.
hGMsxJ7iu&sz5T@as{H0q~}*'=B?RyMendstream endobj 1866 0 obj << /Type /Page @@ -7140,14 +7077,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1873 0 obj << -/Length 1221 +/Length 1146 /Filter /FlateDecode >> stream -xWݓ6_#:} $&Ӈ;I/wؓ>5pfKdj?~ ?bI0,! bRZ[pӌ
3=n{aOL bQ:/VJ,B(bZ~!y*zoḜcb~9.Cr>^. ֺ-2}/>%`=2o9s #jJqy@z#D}zQ y=[ -qfZu\&Jns0GyiPn -fvl9ȯ R*" 8%<D86'p <*j^/!AC7Vߦ^i̡gLr+a0v@dLu]]9ksD -[Ɍno&Ei<d^5SyE㘕ꉾ>Hh[7oO8 +xWKFWpev<˕K);ݍrKEX(loRkJLO?̠cF*BA`lv3j_fLk8 znOmS:'Rl5ZpjpJ<OTj&-uflԌ-bfR[V/g0 ± !c> #c7DF¶& +23.3KZ3Ș:}B3-`Tؐ?CQP !J ]-+ĨywEREdET) +Mr4'; +b@Caͣsq.պ[ɔ*GMVhZ#9};j +BJw3BZc3]Hx/,O*UU4)%|^i!0qM y-~ JfRvjrc%GVpZzn}s{{R]J3*.|HՅYdYujq5n~śFr>qOU^ϟ>_\/_Yo/^\/'q˕Y2֫Ⓣѫ~?Yn
NpMg[:Xlk;`U\xkZVCEB=*78f~O-b/?%X~xqs +_wy/K8BqDnS}5FNh䦃Zwe<;A~uاPzhcݱ$gZbGM}גTew)
̯!=H/r0^|_Op [}u0endstream endobj 1872 0 obj << /Type /Page @@ -7182,16 +7121,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1879 0 obj << -/Length 1005 +/Length 994 /Filter /FlateDecode >> stream -xW[oH~Wa.Tɉ]7}VCc
)DU
<`u}XY68sfEP1P{>tYjYÔ.sksZ-X<8qɸz=}7!d@LL 4"|}XsVn.] `+~>}VV -|Լ -D˦:sz5KCN -]lHolZ -Y$R,~@>6E~5淛7qr#~ G\DanVyloG6";Gnܡ<(,xKW+. -굶vww}1{KYƾ_#AGA;1=]ϑ0l~Wendstream +xW]o6}ׯP9RBN,ܸ+McJJn?eJVV`<B:$?.vvV2; + |$)=BqF?NNNxށ`pބ +r\KPj>
+"dn7F*gYmd;O^P&+RD#H6KTv<Q @,k@FźZ,㈥"$$sf#sP)W'ߧ=sM4
Y#OTpсeѣ'⠤M\HcǢw.( {7:Б8w,3g7Vx'z]_,rVLoA`!gQo;"+xֻ/7s +Dendstream endobj 1878 0 obj << /Type /Page @@ -7208,22 +7146,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1884 0 obj << -/Length 2351 +/Length 2286 /Filter /FlateDecode >> stream -xڥYoFBT`1|?P\ -#kbs5'lFmѶoȺBK:0(+xLQ"8`:Ϙ Z82\Y=1 -TMsB~ydr B137#+`0VXFFAYQ>¶)pM#ꊾмx9?HU&yU֜QjA`<M8Tj'ƃqD Co#rPުD&13WשL2D5KM,$<[A-RּgU'K=1ohBnZfFrNqtEP<=l?&͙9 0S2Ĕ͑ӊ֣o4{*!nob^oEcqQ<AF -v5[4=3$<UvٜnGjcPaȆ/˴:v!?ԇ(C -(@B^:y $mjYI{duIRer|-QbyxЌ"'q"XIV̑n)@8-"j|]UFǀÅ%j)nV'י,
6je"z,RNnN@DƬ.+*mSCiE! R7i.xNGSf=N%lcj0?#m*o|,㭤Ju OyDI6ueNxP*%DU=%Zcһʍoym|i0Z/Xh '& -#t檇ITIQ5P{(fj拎+rNoO7Ϸute5>ȣdЖFdĢ\Vh+͡\6L7BF8>P?~t}r)/O,5]48Ҏz&1Ow ։cjW<9aPube!r= -
*Tj:yx7~Xo/BJjY麟$Ci_|(ʂٷ):6u4+$\$0@[QcvÀEgML~pBX?kJb
cn3h+
ZVeuB3v+6/MC=8cBgr_7gA -8!G_l]AՕʃz*mF -%AGWݠ,u4}n$xңqřڑvj,{ViӅիM+<&Zt%ǞG.Qh$\zr:P65c:ϊV8Ou -LߍztB=\#]e(w IWYzp -y/6eypsM0*[.3<
L-T)\eʧ8pkg>lZ|4 PVqts,Yv/7) -[m4'By^/KQ=ܸ? uzJ=Fs"nendstream +xڥkoFSbH.(.:9ZM!ĕD"U.%Wwޙ](G"y8ādŮx0__9%|r53m'p;qdA W?n&cr#{8ǡkǟW#C7~o "~rlă;$0;W_,jS=||'8cDZ0:w(FvixBR"W #/\"iP"EQm핪\OEuX.RGr[К#zFG<vEm t x#?nk'p%6Pk= /p!sRf +1 ,YW(9Ce>ZL\~@!0bzEۼ6 +|q%LGPpLdG.#`~F9bZ)7[oknoX|^oyc'7uxʲj>jU z')ØY0!(&1X!:cT5B%ґlբHΨӒhTUgs.ĩ*?r mKʧZEJr)*L\ϒC}Af?dZLETHdjL[gm0Jhi%F&8J'7s/:nVX"Z!A-#V~vLgpwPs}4_̌tvh)e$j,['Cu djjBb#V
'xJ
BײUqcR7"
bV)$r3 j}jaz㓂0vH+ԈR6bl/%(_1:J99UR3[9;GZ(shI5WF/-\d] <>#E +ݣt_nH8Z3ɠwjsT!1Ct3aNnb"PYK#p Ou^n+'n+VtWPh(N(Haw~{Px^N{97Rnݔ7)KP%jM:Yzh--{'7/?8T[bΌ̨%cOkl`*u?hT0ugE + GM'"dX1U%\ƎV\A %J *XYJIqpYQYG p&IaLNUa-SEH55e;BS`qOP0㍪AYe|;ё|$<Qus+jTtlw2e2MoDr,R7poij[$NgJ@ +2Pj
*MfsTo7m|^Xsf]Ϝ nD]{=K#P
[6endstream endobj 1883 0 obj << /Type /Page @@ -7258,24 +7190,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1891 0 obj << -/Length 2334 +/Length 1977 /Filter /FlateDecode >> stream -xڭZmo8_aKf7Qb?]綋&nC0R`[^Ii,odʖK$̐| -C$>*`9_a_gR,ȡy;;{}O"?|$f_׳p9"ÑRbH[yyedVف%y?XvG>09D -ngg̘Ym`} e }"}QswRF8e[i=\!VH(P
*_.F1K|*=ʴnN]<GUBAOGp"EWbHb -(4}5=E -!L -սazΕE},nL88YI8ܗdBb7;H.QYzߣ3m -@ey腘u -m]X놊}^m\y)gUqrɼMr @{vqOԱH/m}tGKI)>!Р)UtےQmWzJ5lZDeyAR -Κ*h[9~A@lw}J[p>WW63yz$ru}8`t{|b*UFM8B -:{s2st9H={]ԛZRm AQq-êIx{_=)_o.nWXT|v,JLy_{tn#g7f2xՒJLNbjQ%6O*Ȋll|9䁼' -_۔k[v.2tԶK@?]~."]}pMҦxZVZ7+.d!۬kuO/O|kp_-,yV;o1_M-B^|B]ijG&@*-ġC -5W8'|F -) <{tX6y<Kt_>Xۥv(0&fyC˸O-SGh24-Z&cxLxk&vT)'НyGg`ZGܷhNبKP_46YTT]Z^#YKu -Őf=wO:ݝou<Vڂb5b>kNAsoZ4nwyhU~ٲ8Vӓ{ t{iNgߖ|NzW"
šăPpiY0{',<-0JnB㑾 hxJMW./2DR֟?buKע|ioAjup|VU4r"nCaQïA]}JX]p'<TJ"C~ +xYmo6_aKfDR/T~p3gMiP-`[$
ݑ,Y%m +lR<s4mG&&ڮў.Zfޢl[tlz3n;0h+I2>Go{E97K:]Ƈ5Fjli_~k%]XG >~2l]$[蛄z^{ѲlNlykz_pQsV[j8G┸nwIhlb8+k:MQ<nrWj7pMg(u}t0BI<SQ6SПepʔ +儹3vg}2 +٢Sl]?Աa>A(4V0(e*B¬a xTI*yK@TSpǒͅ?ˈ!q2?8*I1V@K@ 9o,U$]!! +4(S-:*.ޚ)R3XQW/Sȶ~gZĵaT9Qi;n$ϻUlfi\O3՟'j"c&UQhա2% +d)*UrFpaEJ=Ԗ]]QzXK\ack3p^6+T{pqUҿuiBЗ9R; +2gr!пFRXd$*gFVջ"ťu[.d<;B4Oh:ҳ~6d#Etֈu;[t hm1W~V5veā
LO-x*ZdECZmjUCn9OH_G1~&^ߓL>&s9i\aKaM791LPXR̜_Lwlȡ[QSo'/V%6 "+lA&0qv
y(u53D؋A4PJ4,ژߩZ\C8ܬb07go.
GGr+& endobj 1890 0 obj << /Type /Page @@ -7298,21 +7223,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1896 0 obj << -/Length 2385 +/Length 2006 /Filter /FlateDecode >> stream -xZ{o6?mE%,uv[ME[:[NVj97ÇL=,"HDyq!<ɈE|=j(<C94!$hhshxqT}Oʨ>_W'C軽Z1J}_n'<z_ -=I{w}JfH<(4ID'/J/02)Y"tô[GYH$xm'amE-0;PEǪW@ILW!' %ngžkuI, <$ͪ[ASj.~~.}Wl݅\ݦ18'α54_82ƲᤖEQ)>[Sw:煔!I1ceALV(j` fWsj`a}H@/<$qh!,/aֲP2 -Kh
D -#! ܒDiN -@qU#2bf6OLT~
x+eM'!&!m:sl: AKڑ#\Q]Q{BE-nEG~v* Hj,PTH6OɍJBG;+*WS6◶xLf = -PPwVI{jHilI>|Ըm -ۑ&MiŖ2ðѱ!1aa+hVޚW˖ -\=.0DD1 -dcr7?xZ+hܪ_q -8NҰao]˧7o]-+3fEtTy6..MݓGmk*%9&l;)xڎamk={xz= -盨bpvy?lI{z1o%E.,-pܣm!c4-jtȟ"I$(hyuk0#Y\WCsF\8sO.|Uݚ<MpvNPc⟔w;lKq_\\ByiaGȗGk^ìj^mHL"PڢX[ˊb*.tudD|.*:1Wm֓"4BHKyNdzVBm˴j +xZ{oH?"p:Hfz⤴My(MIPK:'Rofw8 G{B}7hՀ?bpj;pǩz3/+T0&1,SGʳS
n?KOWͷy9QޟiϺ'鿩&1-'||bTěATomq~XUeTԜYUJhjq̲5Hd2YoFqQ +Tm,'V)r|[R<Q",}pQI*JH`&+ĵ݄b6_#E4L֒8|
I9&0W +0<HǃX=3}p IBV
jy+:tDR)Gyu)
5H0<19P21BgT8FkxhKjb1S)jɊE*LWwČhy;.IHğޠIð!5!h$Ω鋊8Iͳ{!c:Bj:0\d©9GC/Jru&vv4(40tW
:IT:1L3HSM3n嫭($ur\@R@ +3XC"IeK$N58k_0U' ƺNgf 4Z)4Y`,2*̂:sz~,&3X6}0$ߔhf=.d9?lbh)tHZ1cHpX?{Ju>Ƶ֣]=I` +F3_L"@[(ZITvi-KBN$ +G"f@O,h>0<<n `.̭ՃP^`$QipS-)Lz5Z窋K%.HjqPM,s)ҷ[pPlD=\B\U'9lJ5 0\7v(88R^/kgX&(ԏMϱՏYU +X0wKs"4U[B4}?d endobj 1895 0 obj << /Type /Page @@ -7329,15 +7250,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1900 0 obj << -/Length 1115 +/Length 1031 /Filter /FlateDecode >> stream -xX[6~`/dnldv6l_] -E!(&|R/ƵBHwD -@mkZcGA6,Wשa1=/Ր|6TI=I5b(ʓ[^nt,nK>PsVb50wCj=861y-f|y.¬:̌xgٕrR.*͊okZ.~)وWST*8S:PJo$zR$eLe/oYQ^o%jD,;VCnA -!2@aP3 ÚmF[iDƯw%rw!%4;v8Dʴm>g{%;!};si=oU}Z2c>={JwPt&Egn;:iܩ+P -wb_'o
rzO'QoQXnonendstream +xXmsF_L'/Qb$eG$aDJT> 9r㑵w>s+A4x"@\WPf~ j@S/fJ<ia*GuO
#@*/.ލ}1acjPoնL +ib28jghUQmxr|vX'q`'qf,(V:]F_ +%/wI`wXYqWX[l@/WrHHΖyG@U/{!;O: /ӺAzPit=Ro-R=S:I 7[{8~ +?+[.y2 Cu<~Ī=:xrj
l:
TFaendstream endobj 1899 0 obj << /Type /Page @@ -7354,21 +7274,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1904 0 obj << -/Length 2544 +/Length 1824 /Filter /FlateDecode >> stream -xZoB'J6~hK.i{HS+QJv]JŇ(Xrg7%ـXEpc&:'`q8N漹x^SJuف"RKo?zX0CcclC\~zŻ=;P.|))axy""/./~۳ - P)X3GWFЌH-FT!51N(QTz+b8V&7y:nAyp̒uÛ,\G1`p.g(qnŤ!:((H]Ac #N\$Dsʚd\NFAt3Fnwi[m"6)
F~k.tSn1S%f-&ys<LHĠX\!M8Hi"|l,o-S*WJj;XIXEkrXU/^9gD[AR&;q\6A̽a.&eTyڭ#jq<f8&t7_c2F[AqBz+$"Q2dNFJ2r.&hR qik\bVcpH;DTa^:TF1193JW;p!aVMF%$ʸ0RN(#6:Kb~95qR[`/l8辐`G'V.^rh#ÿ
WaBG(5m,<^5m!<̶n5J>Z I ?أl'Ӌ -V(UVw=Np^䥑(ldjZPFhA敨 -d 9\#j(W9hhTkwQ]P-]E]@t9f)a+OĜUɹ逌26Ec@: Kl͖\{cWW%:ؿR$l\j,Y)[Ձ
N-`[eߏ\P(]E^ NLRdAcɭw0fM%<RAD~|ծh&_=y?"l;j,0ƌmO PJ=h澴e1j@lp4Q0℆Ǝٷ7ws_Ԓ%B-@%1X*KꂚÖ`W2甑XUVjjz!:څäv!NB̢]hWҊv$Nm<C Y -P-U -ڠ^Kȫv -eX=FC3`JuŹu2tK7;(x+#aKAHhZdՁSs@JF -m h9'+6'I%4yTlqIBydW2<6l֧zAPcRjRϱ{@Y@;',xKjBC*k=^`E^GFe`udvd[WKȎs,
X| -^o8)q\F+o@![q0%l
!]xL?V,xX.+r`yuRhkkbJSOC+9B8CjŲ/pJ'+ƃk~Nl
Q|-\7+a -Y!'\`an-1P|^L5Ykh d?~\ \MTyNT#ZN3YY;Y1|`n1NfٷiA!_j<[#DͶO|K14%%0fv6$Sw -^/sZW.nj!ܭW:hrwrvsPV[ONe7Ki:GTg}cz: +>T*dgg¶H
)endstream +xn6_aI6jW]0l@%ۊ6g&˱Q2INwIٲ-Q*)$s0Mᇵ}Eڞψv4m5bvmKB]Ks&) hsg}!<{yeΥ|7gulPBЗD1@%"۷0A{ڒJ%NZ?V56P|}=#TekY.Eui8̮Sun9s;Gl>.?<ͥ6tKaŽ[Dq +Bz}*rSGxT B&0iQ:ǽsw͇ 4\$|MQL +_ijNB91^
S\ZD!㾵`lGGh +3Zh0E` +؊F=O6 +HOMUF +<h*d!Wģ繫Eq̶ +bop\ܿ/:F %a Aqo=1l[3Vx¸aB|rN|e +h:v4(k"\53Ǩ"?}wqqv:X)|:zwemJxNg\t#P)rn¥pz.N,64$&%\ݱd.\ۀ3&^f
5%eV +LJB|{ˢxcEUn®UeHGZLQvߞf@Bpݷ'kJ\T6_F<ƃLW+Vk5Μ<5Nc~C䦫>3[OރDZ'9(@pkE3wpy3CpHހ(V +i/(?U/KbMf!rtq觢=jVB>JΖw]HcoZQCŸ>2Sό\e[UVzG?m#|h9
?Of4_؇c{BD
cbbvaoq:@m'ٞ#+ȸz^e@(c\<$Uxp658R{hZ&JY|z>IG`=9h p})M'y]<Iǟkd`A +4i-Tn<Dהp_ sDX,p=UB"N}%Y]ED|XWY}Dq(suYl=lv>kP#6K .`+-FD8&xҧpmFendstream endobj 1903 0 obj << /Type /Page @@ -7412,15 +7331,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1915 0 obj << -/Length 1023 +/Length 958 /Filter /FlateDecode >> stream -xڭX[oH~We2V[M^٘TZB\T\gU{=PEI`΅DC#lŴbV@GJ
T$Nbd#ۊps8zipocL%&ki_G}Ίū0wt -l|n}=2<eZ@:pq>xv1Z[9hܾ]m'q[SFBvo.ۇE~C -.~4yuuh =]ԇ/ Cq.WZ1ejb tfFOo7}!+"_̝^oi~Kȳs/d<wx:7zp38/o+r_FgJUDZKD8GL:(aQUB|8QaÀ&uu@Br@qywPUlW*^'><rd֏ -;g.v̆B)c5BfDۺjMayR:ET骙ΑMuTԉ!A'r -WseAt4*$7Lt3Hh:Xꈀ̺Fl*lD j e1,6}l1A2Rtb$b܈QSp`m_*!IYkU
0bgM)uxި]U]-&|//':C3!K.y7t(N`Xendstream +xڽXmo8ί#Y-1/:Inrw45tSBL@6!ݭV74%
Ngf<CT:aꪶCu5\(Xɟ +f`DbBSbbWrh
/@jFݶx@}[2jL +o-V#0Ⓜu;<cD\W](&zOVD5S!<`8!j584Ltf0+4ɾʧwg a9n+d5ˣ1+ˠoVT|?+ LO]@Fm<bj+$t-}\/ijbx5|㒟u
KZ@zmIUq>#8Ly1!m/O+4P^~%ިh7pGnSKՄ6+dpضY39tchzMƄBf,8ﺜ z endobj 1914 0 obj << /Type /Page @@ -7443,21 +7360,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1922 0 obj << -/Length 2719 +/Length 2271 /Filter /FlateDecode >> stream -xڽis۸/=!B\<ifr8hc'ӝ
-Q:\r=<Evm>@Q(,(I9i:,p-DhAB71F,lG3bs//zq$R<a'a7'<8_~wf9Adx?~5M"&t㰼<#V>/Ώ֠55]}j2.282(=JttBGO(xPf6EݬNB-tP-/Ǜ⪬b3UD::rЛ_>q-_^/'v0^_-p#fN{9Lr1(eakuYyR1.#[NO{5/&'" ~; rFODz$xʒMÆ$H(iB(-XxYQDlu -`cAQa/p"
jxV5=\æ7=s+`EZ"kX<*YK<khUoL*s)"J2tbY dfyIk
c) &OGq*XӇzzl%I -i2e
v0G1KS(:\J nQ=aɆ8c"xV1Kv{bV,[ =ogdp>^F+z0& 2%S&?[^#
lMY9P_0,TN|CjgvI]W5!WH}@ԡ4~:; }Rڡ¤\m_1dDQ5PtfV; -Ӣ'(&xyrx☩BWb-H4)(kāɄĉƜ?%MV2N6JVeݍS2% >0p'AtCVkhƋojXXM-OsgC+5JA$)> o@ -\]H9[@Yv(+`/`+仢Gv7"Tm|J -}oװld̙FGd3]/-B-
2V&RT*&O 2%[֤%]BoM?\8o"qOW$|3ROzL{h@EȩH@b -GLC(VuBiF{89W4ۭ p(*D3ϧ1t5E',B8Iaq
KA{.%iIiܵQĿ -S]QpHR3nI -pLo<~& -=\}gj^`9$҃=pL -o0!9zi<6Mǹ;{#p#P)0(KZ#YΦ/%f5ا-l7&_h'/{ +xZ[o~ׯPR0΅
fm].J$v%Q%);3gHf99͌І?6%|8z
aevuѶ;Nj$x?L!<kdzo|y;b55~zX|7OjҒ='{
lKʶł`HGX\QB}rHz0 +bH=Tp@udq϶#᎑of,^&ygӛE_My}z<2t,nvBnZ졀sٳomܳ'#A^0]F%szҾ%}=cIyhx>k$ލoj ^`1W?nBg8l0)PU(u"hdFڣX
H3SCT4*;d.̪a)=s +Ѽuܦ@py';f^X]=xu5t=d +W*P@e, 22?m[D0ݺ"v E4#`9,3_S!*8OtQ:\b䏕[O?eqXRźTc7'*Uae95rmyϛm\JqlnKqt|<ZcXT PPJͦIHi$hI<+wxjhAYńriVylb{Wײ0V4T%nC͜3!¬˩Jp-+ks#_{҈,S&Ѱ-O5L$J6-k䋦P-RqfZ!f(,tC:كԐƣ_e_ 'b(P3#'ݣaQ:5}ַEJf,0aAXvFEsj~!L|sakW?GgGA endobj 1921 0 obj << /Type /Page @@ -7491,13 +7401,11 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1930 0 obj << -/Length 961 +/Length 946 /Filter /FlateDecode >> stream -xڵWmO0_!MkƍIAL*P)
h(KM$-i}v6"6{E|! +Q P4M,>S"Bg'2ps="mlЯ(
ZfԄ)<q.Ff4SG_,:ݹ ed,H1 POsa*|TȤDlzBj_U%.:VlI_>c/!{K|NF2+1,uU TO[~Q
,ComBӁ8d/2#*`ۨaԮ*JS%(0xYbs9ZpCMwܟOl[>o7K7ݬǗZb]/
wUȥ%rOg9v -8ҞOu|JIʦ -/N.,Kknܤtude@uL)]Ꚉ8p;eAendstream +xڵV}o@O,S#着`.-in6Kچ08*v˾Ci#wy?$BC(wEMG@uљ P|$'PT endobj 1929 0 obj << /Type /Page @@ -7514,21 +7422,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1934 0 obj << -/Length 1709 +/Length 1593 /Filter /FlateDecode >> stream -xڭXnFP
ql -Uifw\ǩ\ʽ[gqZʼ -:} 2P|oۥUiyCik9m.tI[&_Y)dWhi(IY7B 6 Ӎ6W'fQR)=2)͖Kū釳j<OQ;9t8_//ߟjk63]i>Z91+4I׆ -d6*d~72)=(2U, -nŔtNvv -x`7Mx@v*y(]1h jpc"(55*Pm<=ŝ9 wjPr-*LM$*b 7Cho8j`R#7z X72ثԢ:0! zF%}k%!`sƇWD>~BڐREqEĝՙPI!i:6+ ڏk`H ^Dԙ\EZ3O -:Rq=@sxd,;, ~
BAYDG%(]LǶTѕ:,/\B282h -ch%%)K$x .5Vj'2Y hAݙ}Vks؆,oTuRUu7d;) -CY*8o4YKT(qoAf{802X5m6iil˳y/~aB^J -ڬch -btܵ +xXmo6_ #]+6 MvEn[hCX,y7wǣ,fue>wG-c
3'+k2l:8>b
2M/N~N~<`#3BtxDO_&ӎeo[x9--ƣh<Qlp=e'hni0ebar|C7e>2=3LmAGUSR;`VDgGt/ӚVF-ezׂ6I\Ǵ::ntD#*VbVed~gy֓ZTX)3R#7"w5M~*n//4;4!c>UOf6/\{(")rcS&9q"/MDRe^G.Ҽef.Ad&FdCRUr!
uLXyWؖBǛJ3s>IQ~ +Pz%AIpE|6{s~={qruv1]O j;:3jso3W +.&s}nua;(FJ!rppc!gP+ר@]wi"4V-Jщ9/(fWH +8CYJ|% 0XEmZ.6{P/ +eىFXaFlk8.\jCX"ޔfs[AD}uB=$l4ێS(Hbkޏ{G*IÃt]w<gb]W:k241fnb><9Cc4 T +S=u,h^0kۍ{(~#> m?IINV],tY."o;{ԅev C\ZL@ĥ2ZSENߦw
zk:mH$eRb<eVCIcC(X6*Ŀ,8o5{!yٕF-W91#Z} :"rf/6Cy6o{ }&WPgUKѵp- ʲ%4QɃ~م7``ځ~:|x_x~f|NcG6PWUc +IZëC?+YޫWWE#uDѵ*IآqdUfqNAޱ@QWpOֿ/יk?Za{}xzY8endstream endobj 1933 0 obj << /Type /Page @@ -7551,18 +7455,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1940 0 obj << -/Length 1349 +/Length 1278 /Filter /FlateDecode >> stream -xڥWmo6_K!fIQˆ}H[k$m"Pl*QkK$'
'r2`(jwǻ^Ɉ!b*e4Bd^@Xwd^/|rh8KZ=yJg/??&g t>3%:{?:0/_p8Q8oW0ɔ'~9>5
TXD,rA|Ǥcp0P)(hw -\8'pJ<*zp -)U,B -BQtV١?8\?@br2#~M6Rv:J~2:U*2~ގ]84}-hL!M"MZ_Ic
Gd*C\?z/˼\ۤʪ̭/D;].uO -eJ -]Y~~Xۚ]Ýn=e*RcL0CA?A3u;zrq滢>$Eu3ILa@v֔4^̚{#QU4Kʿj|J@Fq_M -J D("Q -sڦev>vـZ㸽<W=n;ua-$zmw&t]:^S
Ds4cSXQ<W5Skff~,h!Ta`ZmQ<+A/9ƄhuFW^ +xڵWYo8~pysv4I;."Pl*Vk$'
wCY#'}YŹgaętsyF{ |dLz/G;qjb`!,y4֘/?}o8i`{ӟ=8÷x=/zާy}î%ldܐ +!-R\k㏃ص$gHY*q#eD +:}WY~Kt
[X +=k}G%I"<+G/G"::P1xNY%U6踾a4CL.T)߹KyπVVzj~#l!m~Zvl302 !G a<rENӓϣ!ۆ9C۵;Kى;::X$B{PX>JGI5m +,j\Jcr:[IZ,jӓ}Cs~OȾ"= endobj 1939 0 obj << /Type /Page @@ -7597,12 +7498,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1947 0 obj << -/Length 1066 +/Length 1030 /Filter /FlateDecode >> stream -xڅVnF+x|)(Т@i[-Ėt5R}ȱ;E -y(B/1U["rC]<3]B`wӰM9LUx!|O/4|HADR2ɴ2yI$'1*ƃv(2* +xڅVnF+tl"b7.`.A +"x=%*}?X>T
kQ*.^B](:a%îX50TlȻzk@peT'3T$*zsFy˚-UӐ\<:Cj-։]CP,: âb0ndr!UR65xbarJ%{[6NVг>dri$bD P~Hlvcb
0N1ahOt=kodPaA ûw}-TK{WSa^7kZj[jAn{'|j:~%'?0TV}KLƉAժBoJYvĹxM8>## endobj 1946 0 obj << /Type /Page @@ -7637,27 +7538,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1953 0 obj << -/Length 3214 +/Length 3047 /Filter /FlateDecode >> stream -xڝۮ۸=_#*un -)6(>ز-DCsr;7RNApHs&ڤli FN šdG%*Q0XoB_pg7lTEQ}h+_Cٜ;ggocr&8D6* %~4kmykU@
5 -}6; Ƿ =!ga;ކkǽ -#CT,Gxpe]3Ή8Ep7{<_^ -b?M& 8 +$<o^݀;, -U -=$40LeJGdJ -v!fwJXWsfx&BxR6 Bu/[BXů٣9WG٥G1K'&|(hI #{:)!-5e=b -8 -h* dAށƼfX]/4t!ܜiK:KLt{&(I=ê$SSi6=K<uE~T,SMA֣eʲ -DbcGIpL猞1*VZ㗼V{ - -Wez:Nbݭ<V(7E[t<#"Ǘfg~iEs -z 4_'2@շC,
M:1QٌdoZ1R0HrVřJWL -vyq52z/&W#gG,rJ$Fh+Z`+e$l6K>Fd -'yk(S3rQg5$ĉ$`3|*|[1{$R^+K)ʬ8h Yz*P[hMWkD}^1uu^Vl۫9gyyL?MmR'Nfr.Bz>+zHdL_|6ƞz 1QT'0>(z7<N'@C=IJ rE
ʐ 0{oq^lѩtdRCFp2yt,{fVp>0*.G9ܴ,K*p 6Q!q<AuECT| $R)~U)
feo"aEQnL%^BAٽ10n+W -ޘ盲b$z/L|$giaP)c~|?"izQ^)zj \7~H$Z|PIdb4Q!Hb8x MG^J_Й9x-qtL[AT.S -B?熮0ScMj*X +xڵZY~ +WtL!i-t.x:͜y$RxP6W<hLڄQgGEئG1h8ڄ^MlDY[Ga#q +r&&ǒERQIA(pErښgz|䏒9<fwO]NfUϝ2?MQ6fڃe8<P~][UwC6ZB]D.uSzw^'^EҁԈJev9(K kELÊ_n?)~2?M,W'0t%gZNcb$mӳ*tg&4-#4ɢM'SVH-؇p
Kdf}<<byQq?ݰ2WĂ%dM(mc-m'Gq?[fYz]T{f@2Ii]p?p?(Ƹ<'nS%Pַ?P27HУ`(Ͷ3c?C!d ۑ@ejdVP6`߲xS.er AFU))Y|Jz<aaHz#CRl#|h&SbnN>H#b_5ۤE7ĔwrB0 P+;XuFOpkmS0R~7 +,l"AB(:Y>PjQ4xSc1c*tcVB(Fe'-$SCdpq +BDQkҌ +g|m_hGP٢[W
G[RRN6f;$Wcm -3Ζˬx,F:86?M&2UoTK+OD}$_jʼnh>_d,Au^Kh[K?81\$DLmƑP)j_r^Uf>rd~W:,vtGWT&W"Ƚ[ X`sg;RκW +Ojux<Yj>;@7J^9^&^y80퇆BrH+ɨ9]7=qĩ"?0*nx\ +,/U7۳-_O +38g*+γďE +A7ͨqJ."wXB.?yu,L-߮ +MWaO3eYeU(PQ93S(>!+Ƞ+y2ycaxrBPVLDz=qG*J?R0):}Цm/ۢ?ORtpbw(QE)aj-kHہNx<K{ A|Lqrq.^VydB{ x_x|̱62dbz ,7!`ϱ%.b9I^V(#Nm(/Й]i̸m\~ݐ2NRNZ
D/sg54y֭%l'}ۺ7{O_ڻv|ܯRQIg?cJ_4}A1}endstream endobj 1952 0 obj << /Type /Page @@ -7704,13 +7598,14 @@ endobj /Filter /FlateDecode >> stream -xRiTW9(Z|1JHĐy!8@@)""[PP,` -(@i%PJ9V,RXә?sݹ4 @XK- O.ЀaXZzP@- p]]@9H&hV^)3@ -p$PBk#(@ 2H&Br -)Pa7eeK_!)Mi,@DK14H{7l)+ǰɔ˨"$(H$A@tI`o*0ll:*E A)N!郎oڅ6v"@q*<Y -5}s_c:$UHD}4\H (yN@@dD4\T -P:YPMv2,c;YR7ȏno_wCEvwGj0nf G6*IYvOwg~f|tt;=LKHoۣWX1C}Wŏ8JD{dǴ΄K]sAZǡ<߯v8"Qd¶^&iC=
?9<]>Q?9+QuvoBR~Qc~~>x6.p04h2V/-[Ĝwʫc|ϝ,ܱgC+V>{Z}"̆|,&X}Bb^Cߎ˸&LCΪ%D -"F&dj96^L&Xk8cc1fRW,Gࢢ~9\XOfOt)w0霵8+MCxѠKҦ61j"BuSWe DsKmIdےmI>9!,?jO.(wgJc]wflh[z~Cd ؼH47U|v1Xဍj<iYƍė&ztKjR<O{b.q_0igzNhV9ګ%=肴2~m}`LCV"ĺ
:Úw|wmQډI-wܻ^CՔ}ve^xJpSSǼHnwrf߲|/1LPN(>)M((5Y1W>3^<t%XC<53SlEjˋlAViH|q!DcoxNy.訶}gp3hfC2.<8kEQFuM_yBޯ~ݞgSg|4~~YgMecVw?UInxG͝)?~xý:sʞ_U7[`~}{KtlγC5;$!%ISiwp,=+?|'! ?Zendstream +xR[TWEY(R(!#+(DbܐLL Qli_A-@ւ<AԂhDDRH}u\3?w=+p;O~Nq\> + +r +*08.| Y2I(`͚ +XOd$BX2@aL ߰Â WQEJQ,/ +!)(H $&u
|ޚ@ 1TaqWuT*!R" 19Cyߤ{Apgvj'B28铘!Dr&W|qxp9!I +ш6r#P l >`61A2&M`+^^rx8N\08.nU$!NMt*uo/:Yy3XGjj_]%k@FYFQwgjpN&{g6Jz;ۑ{kg|rrlx?zK7bWȈV +f | ~YG,fe͝
TmƼOG7xpGXBG0O0($)B*$K?Zendstream endobj 1525 0 obj << /Type /Font @@ -7719,14 +7614,14 @@ endobj /FirstChar 62 /LastChar 62 /Widths 1959 0 R -/BaseFont /DFCUVK+CMMIB10 +/BaseFont /TNXAOT+CMMIB10 /FontDescriptor 1523 0 R >> endobj 1523 0 obj << /Ascent 694 /CapHeight 686 /Descent -194 -/FontName /DFCUVK+CMMIB10 +/FontName /TNXAOT+CMMIB10 /ItalicAngle -14 /StemV 113 /XHeight 444 @@ -7752,33 +7647,34 @@ endobj stream xe\[ݶq V@ -SJR\Jq-mR}ٛ}xY_c<k1+qs)Xj)| r -8r$go#lϔ4|4DZ4ۺ -P7W\W\yz
yB
{3XN -92 -!ľ,D2 Q?="&?'_anJU#<KC@ƒoo֛Nd9Gˡmtť\a/j/pfwhu/ٜa# Q! a,4:KrJz7Gվ4nHx>Y
8?i'O2.b&0MK_~*Lniɳ;d['3Y䆃J'~nn//D-"<"?GB]dV]w[<,]H*ymH65G<z4XC1G)R<j[>r>XrS'c-עd{<"uΟ}vb;J+YSv6W=tHXb=5ptooW>31|"GR -WxXd?heXh'1ŦO+{i%LnK~Wǯ^E~~՜.Ă3 -y&1}5 -|/|]a~Mc(iiV#b⥧f#լ~#ś?z!B%Sbp(FmgwJ&.f& _yVDˢzU%|ک'LJe)r.4SRaOT/K7M:7wRytsU=%]l5-5 6sK\̻Xxbr<)VCĔl#QNKXMã$q-ǿ,ee,FQƢo#_[2!jpꝱ9}ۧswS <L;g@SvEgh*Jj@~Gd<?ouۗϒi\ĽY5w^<x#[WR:RڞwaV55Y(.)Xp_|Uq`{fg[˟"
SSl8ZǹT:X[Uqm1@^d)N2:UށC=**UCOJX_M+No-@G#c2"*)w340D"^~,02+AqrX>qUa@}봤d}ŗgQ./OY<jgOͫ2(+:02>{|<D
-?jVUӌJ
PmG~BAeVI4G:-G̢qh~<.)yƆMGWEϥ[FB|xzd5!գ߆;ry睦"Z(YWI"_qS3#s4Yk37鰒2WQ$ָ'V1d?;kmbq3WajoL1M:DI -l<oQBP'&b+quU}S4:tqp2l uSy[s6Z[Ρ0LK#5Ӿq¦e@F[,2]U̗aVi.|TU|LN&;+~Rͫab -aTtt: -Qis=\s8F9m*nOeRq<ꭖ_K:s+#aFS>i WFT$~LߙmArVݘ&
3fԸ!MBp,?B^3Q.F`P=ϵE>T^IRZR]rGn_eP6c8y&I(91[8'?)qCw0= `ZzL@^7vjiH)ؐ -%={ul{xeĶڧ' -n9#[(dG{)KOߩ%n;0J[O&j96 -ljykMbs%&%D}&ի:|Y]tFjj`9IKmF:Mx8M4%Fz37eqp6R24NJ1̵"`1|Jʒ
-Rw#Ͻ֙SZei/Cu4q'sh58Sg9vH7^N=%n0l;C$$}0cRw"u[`.v(^aN"_C`>$snorgڂ܈aCNܛu5C5<cμ@n[;lvPU1h-p2~
z2ca78)&u v9僝&j'kV2SYDJE*u0<i78{N1FxA_JEϋ#T<jEM'qT!ڇbzכsNx|}r5NBB,7 -=ybR0gs.4;l/K\YAYn7#JWrQ`b&'Ǔ~^`[T5ZBӬ\s'?\I[?(m~<b8s^xM]=-(|fsO]G$U4˰BE4rA?zPϿby7`?LWJfz|b{X͵g<d6PN٣S[LD岁xk{ʓY|KǸzw4G֢e2!ϫ?0t(cX[2V=֩]}{s7z3O7gآ%hֿ0E_Jޕ;Hs.IƊIN,RWU;ٶi>7Gc`1)TX.M6x6\/jHTtr[~Qȅ%[џ-_O!+ǓET}[:b3q!s},I@{/3jn&
\{-o^Q="}f}_;vebHGz~ (.U۔PjnWp3[n*9;&UhG诶ϫc<Xij6r#3=QKj4@x6UxƼGkDM`I1TYhKLkNTBڗA2iW*!tg"߾6ԉͩ)[k,Di]]4pah )@Y痚s/贪XŸߣL>8 -S\lYb9{:25
(;n NE+Jn_/̷Ih-7d7
Ev`ݪM{T%[X8$FmX[EJ:T 9%3=Bϯ9*2Z=%P'>6\ھYӋn b_|0d^ :bcY;.%WrL.DﳠԶ}bgKEwiTB_Cq"xbyD"%-O=ތ\dFgWB
}:VV˺._"d҄AqJҡ?C2xv;Zz_ޡgE|4k~?tgF7ioᶁ# awD'K"_2TĩY
%0a.|}ĒB֓Rz~c*ٰpfva>VNl<,8D~Lv[1/)/+&9vx<Hb_QtF\v9}Ո|fUO|>8=Zl8?A{)Q:L
Iʙc<Y3`p\g1!
'e;['Mx%#Xdck#zYĥ*uFH[
gJBAX{].pw<sI^ -IҬx=Y3FF[ ')NπaO^-)l)$W|שpZK1ے(2joL63Mn,f[~W WPDŽ\H6$];E^?5Et,V<غ
+
7͜raecjPaQ$Qi -iܱ*.J)bN$=OrAs9<H4p -3(p+yK'-Ic@qPFB]G!~QaDwS<L2Ŝ ?O{--lE4 ß^WD k{K/ˌ:6=J3_ -ٓ;grƥQ>^6nQR+1#KNY0X)E`iTZB?s7Ǫ͛ kl(IC9|Iz Is|45;C.quT6Y;q4,w_5$?4va&sqte륛+t-
WрPUV0pzQ*}Tr9
= s\`=QX[Pg%n"*2B:=kTN9s5>0kbK_#!GV5ҷ!uV4w,݀G;S1UÀVNi%rRLȊ{ --M:ims;( -a}-b<M -Y+Alz`|p4s:|r);. -C -6i*0_syB*(#FY zC+ -rfPL_"^ݧ7zr -ME;2Z<R7+UM'dХ12%l -wruW,NHiżH~s:C崽H:n5mhCw]<H؏ʟ3V~!f\3;`> %#v,+@K7Jxo#jtWvQbQ~;7C?sCW]!tVkgƊГܟdt8tA//2.\E7}jۢWq6[b|/ƼʨS&2^T*K 3&9w0D}w/IC4~tiߣaU)P*.('3SY(@ Ew?);-t8o\j;˺ @@=Md`_s:8st%"ٻK1rlhB7PjNdyװ}R'!=sZ䍫.!h8F1jZTMF!RF|e`MXϯ/HlUOfhiB4h}Cs?&9dBH-+兦y|6M7#gҍ0\}wF0;b߇:nM"/˔;MuIHF彣^EO$%$PUԣ(簞RĢ$i4xrj85}o !!Gm-L>GJo2=R n)-U|t (G .VUdG#<C@p
NBE?c3.i~M"\f<][+m=
.NbG'/2ڛX0^6~,˄9Dم*'.|6ab/ͽB?afZi|Tx}CnuWxX=':S +8r$go#lϔ4|4DZ4ۺ +J +l}'M puw0P7s>0G0Pq"?b^ f@x@9
vC:`Kx-0_a5GH +j!VぐTz !uExh;'r`9
Y_oGUyB''k jCrRȑ9``{_ 5'[@v榡fBA֟jB +}sF0YhA-U!e!IX:q05=RsUqO5Y25}]}Cތv"9_l+.- +ۜ|T{3ӷ>6Csx +I`ͭWe9й^ +Sһ9qE@d{)
.bmنnN;~q3inr]SawKK!+ݒ8 Ȫ'74G'/Pj>7Eps{ި!ja>Zjǥ'XR|}*aI\BLTnCA9ѻ_Jd)?HYQ`(:I}fh%3_v\e{QZ~zE:멁{{)l>EOh;"gG+Ê@7=!O--6}J^iO},awsX8~]/Jۘ&s%Q5,U{).JkCILC/=5A +/]%%K.?ry{2V;3}o^AY_1%jh.T=Vf4 +9_Hp_ЂwrEaZQQgM}}/6E/p5H}_dbx$OsL[`]w2Ya8:o^=
S@
C
Md=ט_t#@kͫy7z?A}>ѩ?4>Q8J˨S<Ӆ1ldUs^~*͈`AToZҁ`_)
>0I5"d,goƬh0iigd6;
i#~He-xu1B'oQDT}-rN9J@;rZXU.3r +[` +ȰSN3DOPzuF$牅t'cHINN;@ut)>ex
jE?X:YU|=x?- +<=vQɺ$^Hx( ^z$u*V^OBM JPxL@;ѻ RE0!iE0!7WE揶O +R)ɷ$=ǔ}!w+u$֞1/5%*XqjsPհỘa0:A ++'\K;#o +t3Q
Kqn6WZͰYʎ p,^ܘR(#`ۃ}+$>u>H>i] +1yCT.^ӮŤ9IK\VG/kUa/Pk=Բ\;u>i-m3!:jӷ[EE^Ͷړ?
ł(w.zi8l2If)M1Mu1_rVicg(UK)Y}s'oT-eu)V~>Ybts@z~~&'H?[ x<S3}<ʌ7(֜wwӳoSc`F02ͥvUp;BG!;KYzN-yuQڢ?~2)U˱ax;}M+ݘޅFf_5`ΏC7ƿWAO^=z&Rc/r |]mVO)|_Qw'&jEp@stJ--Z)ѢB9fk >F(=^: +~55dS.'ˬv2d>2`~AʿvQkᑺcm'Zw2F#p~b&U29PV+Ʒ+;+AwOsN^U,?-><_y~+r!l^̓(%CxQU.6fmVΛ(Xl+1I.QX5$JL/c0^
b3/TWc9HR^rl3ii"(1қ(s~wy]YuReVbWlfL7ա.c'gx7WpDTʾ<yΜ|^/*#uǐxM|Sو>@Od@Y<˭ͱC½u)qk/e)"= `'1km1S*KԆ@O,L]\<=uC +kwy\ +w}B|ìuaAkkpճy۸pO1e..869?|gH'V@0?Y6"/%S(RyGH)ٓ-w)؇7ƛR*z^ѠQ+o::Y>#ޜwǏcqbAU!
?s ec~o7>XZr!MTĸ#͈7?=Dmw?.ݢנzof%ƞT?J"Aq &lC8 n7iA3Cz?"D_mZ,* ~:Coz˻qgzR2ݣRh0=&p
$ڢ%ueb /
ś=^P̵ͪ[>ջl=8-
`x^ɖͧpE +ؒy2TNky9h.QE,U(A"Cu\O2VtN"}t`Z1̶M9?XMrh<CW*|$UCJ禢`}E.,lz +Y]Xx|?=,äpfkfI"{Q$v3h*_ly.3SjO/<E:m4?;?Q|ޞGqIئL]pZTwS<lϘ)gxrS5ǯB$?B}^ƪ ɔ_= '\Z`ƭV7Ƴ 3G>X'jOB[BdZsuRҾD}y_l'HӨR
ϧ;Q]NlN
OZ+d&JTN)CMFH1U:Ԝ{@U*=|di;2;tqzNV+Y:fszNsO6<xޯN +ea)E$ʷczM|I!Vx\4 DR30XAF仟86/&w}:91bp 3M djߟ0&GLTTm),8Au +p'NSpNUuvIVH w"}YxGSmoy@(ߔ][G?i4Mje:2BJ<( +#fhaJ- .N!}{o1h9xf- +CV^{'bUyE%oow[yHNx7"Y{KY1^~V.ywWIT{"TA1*c7/(T^Q3dRJ>7ѻSl*xߑ9Y_?j:)'.eє)a[0Tb)sBJ+F)*EzώwЁwiCf(`A~TLW)ė1S/WƟ)Q'{gdXv_JTQzF8F{Q++%۹!ɞ +T=Z;30V䅞<5ň͔ w$*?`G~_xMq()$Sh[صx|0UFjt5O!<X$-W1\@NOy0Ѵ%ӽ``dMylKJZUtA97hΒG,r'/(渳>qOiqydTa\խ"o"3r9YCH.Q-]2ݏgD2Wu"ͻM: 9"o\u91GS/1UӢ(h2ti2+{OVh}~}Fnf5DKA+1!kDBlm])/4mi +?ԠaW>_8eunvYpZC\
5ى><qKl%(yA\tijKD2r(r}/}".!%U<F9%%N
%H#XUC0{;I =bokaϧ=UUz㤗ļxILpNypm_0_d࣓>NG>Jut c$<;op.Q[OuI{k0ں(X1hi`,(ut;:hĂidQo_&|}q$.GP9ypy~t%e{mo^ s5ӢLト
KKrÒ!,U8]Aޟ8e pcC4I0{&ź_Km,5[ИRv'<dŮv[Bp1*cb&BbĎ5?^32 endobj 1074 0 obj << /Type /Font @@ -7787,14 +7683,14 @@ endobj /FirstChar 36 /LastChar 116 /Widths 1961 0 R -/BaseFont /JGIADF+CMSL10 +/BaseFont /CRYLOL+CMSL10 /FontDescriptor 1072 0 R >> endobj 1072 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /JGIADF+CMSL10 +/FontName /CRYLOL+CMSL10 /ItalicAngle -9 /StemV 79 /XHeight 431 @@ -7814,17 +7710,15 @@ endobj /Filter /FlateDecode >> stream -xRiTS2j=,iF!2so-728PIUE,dª"PZbZ!U".XWW~sw.a, oe8Fxl(rPg.`Dp,PIb<* -+<!T$kH$ DJZJ0\
$( -MH4H!6"8hIMrL[ҥKD% -MdJ$c@YS`JC2Qj'O9R?6UGPL`өQ[q -BtY9DKFa`sWő4PTiZS8AӕPMHc$2?v*D02ܐ -쩘gLD zes<Hwiͤ -,@IJ"*L@0XO)1 -U'n ƶh}kR;>EƽuI/9i-U.'fD{Kwsfs0(5_#%~6+mڟ Zt#/\|}v_NJXoL{zQ%Gb<O&
~BUcmSLVi63?q\;I`82_>МrL/:.<{SE9C[b?_$CWIӏ³Xk ٮ5<{LTgUuuQB6=[lcR+}Q&bζb6xb<3ݾGܽ[+XOϋsl Kؽc%w~CD[DԷ^wc+ײL.^`?+Ni2lR8~/ꌙSe$Uő<]cb,l4bƝcO^6nWƎVL:^)Bx7i:àU\rz/_66nGBYjڷ_wimϏFwY]N߈֍y)#|]HRik˘Ⱥv˲|Cbe'h -I{u'QgK -_jzxɇtJnavMե{skֿdwvƶq2S˝5$ZVg@ؑ<vMoC;7WRuc&zYXDX}j^D.ǷmXd5GWc>.Z80vAڒpѵ;/ fB!KI3oxz8^' -PXIVI
憒endstream +xRiTS2j=,)09`(,rͽxDPe]2RaUJ- +-DZEx!U".XWW~swNQnb +p9Z(X;u#3a"X4.@44I0oaH.(2- (Z +;Ń(.SMvoy +A0pU !fR0U3R"r1YG2
E \ 24aoZ;>2<4^N'#dFFk3`=s)D9,K<Y &!K<LK@ +,- +7b5BMGw^ʎp%ֱ<yBlpyEaȮYXbu'?Q] %tDtb!eNi9wndŞyiRrOL,Ɩ=;/*|aR,\jèA[jH٭/p5ݝV:|M-? +n[
aG +^7ivz ?\( GaA*N7ɒendstream endobj 976 0 obj << /Type /Font @@ -7833,14 +7727,14 @@ endobj /FirstChar 60 /LastChar 62 /Widths 1962 0 R -/BaseFont /EBYAZF+CMMI10 +/BaseFont /XQNJXM+CMMI10 /FontDescriptor 974 0 R >> endobj 974 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /EBYAZF+CMMI10 +/FontName /XQNJXM+CMMI10 /ItalicAngle -14 /StemV 72 /XHeight 431 @@ -7866,10 +7760,10 @@ endobj stream xSUuLOJu+53Rp
44P03RUu.JM,sI,IR04Tp,MW04U002225RUp/,L(Qp)2WpM-LNSM,HZRQZZTeh\ǥrg^Z9D8 @'T*qJB7ܭ4'/1d<80s3s**sJKR|SRЕB盚Y.Y옗khg`l -,vˬHM ,IPHK)N楠;|`kC,WRY`P
"P*ʬP6300*B+2̼t#S3ĢJ.` +,vˬHM ,IPHK)N楠;|`9iC,WRY`P
"P*ʬP6300*B+2̼t#S3ĢJ.` L
2RR+R+./jQ *[mF%s_-j(ls~gغ|K~#ﵾӷ&g]p_!GrnM`v^Dl>Z`,&7{طeY/-pp3LXc:s٧Oy1#u,U)MPPQSiމ_]7`tlx~FqFI8> -vMO7J]8f풻v_ք7xht*̀B5j0 9'5$?7( +vMO7J]8f풻v_ք7xht*̀B5j0 9'5$?7( endobj 969 0 obj << /Type /Font @@ -7878,14 +7772,14 @@ endobj /FirstChar 15 /LastChar 110 /Widths 1964 0 R -/BaseFont /EPVVDS+CMSY10 +/BaseFont /PUFCFN+CMSY10 /FontDescriptor 967 0 R >> endobj 967 0 obj << /Ascent 750 /CapHeight 683 /Descent -194 -/FontName /EPVVDS+CMSY10 +/FontName /PUFCFN+CMSY10 /ItalicAngle -14 /StemV 85 /XHeight 431 @@ -7908,43 +7802,39 @@ stream xeX[֨wbNq)w{Ipw.Ŋ;8šHqw-}{{&1cΕ'V`7d'6.v.!.'SNtC!R@'KP@d}xy8 9ml -en 3U%h;qpPd={P8iS쿙7ú -6O͓0W# gjA y)ة_QSgo4أo6t
d6?5Ji).(CdhU8oS<hϼR{WC@6*so:~'ݣL,]}ێ:pqD¾<UF)]%j. >~]tZznjuT0eW>V(,vg܄Gc[S_}wB\8$nYgޭi,mSDֹ #rernSjyLd;z@vqz3-l32T85*( -tB=v}m -Z.(6Nu>ׇ:=Ermj+jDgyt-4șZ>*zyr;3j./$EUR9Q|lgH9Cڂh^ -ioǏi?H
$)OYPbI~KҮcp{mSi#Ͻ)hΨ6} -6]ԝ *РÐ"%t۽ ZנSVp]{N~j[UK{J^7!&Z`VmQ{dpjsېil#1 85ewŴ3_.,>Q6$7'f7L]Z y(%v :kA+OĢ̵W>KX$fVF'(H<%ԙsX!xkxsiq}sP)S_uV+'e.Ԕ{:>b6AV9Ow̚m^(Gu@Sy?F >{Ыܬ=$+^-rWOT$JnGVuuH;WQZq4{~ՉoۚkgI̓Z)3kR_cR4ߨk|]7z0ŎjYlJr|+YxCVyrWXqz"+\#eIboi>(xle,78R</ɈKr%pWཱ媻p9q*)xMή-;J\ce~*L~13Jq: ;Sd -R"P05gHNKD''cK߀Ńq*]ӊ_3^UB?]@Db+ՃZAwSXAաUҗRs~?3$fPJ઼nAkՃg)EK<b)QAP_& -r11ِHOvuWzB]m#|fk90/3H+L3E(wɽu8}E_wTd** Yi{Rz"AӘ~+ǹjNSP;gq>ߪn -y@C|dPlH;G^leΓZݷv VӃB7mߏT&tYJյV(Іv0@\k䋛ܧ? UgR.i;dF]hj+wՔ݈bSQ$P 0#(w'0.q`o\|BAGL)TpOA2m -Lkq{k3I;]+Bٺ$qcZM栭oKE5: U7A؞!șZS6H7#0? -]ɵWo_t'>2#ndzsFKKDNX7bG!P{7QLGEf;E&cٗe_g;.~56QM!J}F[?u7Gr<:B@z4U~=__ z=]G1otv쩅W't*K(o_MN1b^4+>cBl^3pg=YpFm|ImȖ9j*ަRL// -Y8alEnU>FioX(hXݔOƥ -OO?LNAN2Aux7fHʎ.$`.J{'9ICdɪwor˧[
gՙ.hGYGi6%vbsGk2gHU!s/_5m -vI<9qΩTNw*تz&UlŢz"&12}5 -qM|L>c;,q[|uC|zBja7˺[BbJyyN/tє_szoj&O8_. -[
օʞLg͉XJޝDr -ui*
ӕ`16JsEcdvM>
6#4U\>~
VU|+Pn+LRۢ$"F}!܅W΄ͩ-]2/xO5,#R`L(Ҫc
u -0W 4N$(s:SFaILW5psd,tQӎBrNWۉ=e -2u1yfrv:"N -`>U.E^ֶVN⡍"U6\aa6˭ZWB~O!bk_C74f77@SX"R^ S-X\S"ƽr2In܆`+!VAln*>[ eնZx.WBZDR}X Xϡ50AJ߂5rm.kxߗ:~ Y>$9fMx+?֩|Pk,jzt<WRm|A2a43#]η& -WGP*X6ى}D#
-XɒeiZOY>4_r7;}}3~(VS`i.zF -3j1T`X`:qq#JIH߿TQ=b+9ܒozJYՄk!S9YyGqꮯ!Lbw[dHĥgގ^NRP`ZMn_ee -i_BZc7SS2^? w>, 7<QWA{3Z8>I ' -3! G96:sB)wxϿŜBa~3^bj`,uwH,cz؏v::b&mԵ.q -uuVdQe -u7}-HnuY>;dОuUðZc(ЅR"87z@{cCTs<GEf8fNF!.1ѓAz>PWN}·pwM'rV/3:잴e+e:5<.[BEh|LhVB -fm|Y*6U:7r୩Aؽ{Of۞5͎Zo{;.{ c#8lM4;?yp﹚0w5;'$B#8ag}yQ+H_yLiL/
Z-OՋ+Q -AJ]BL(ʞ=s[K[l>Sz-y$;~2\ezk)bNs)+!isg[ڸo%Iy%,HcNx$rXCxsөmB[Xb9-Qߕ_}nF
ᝉ,2+֘[FRZ #DW<쿥zyNanoDtKG`*|V.s,طBBA)U{+61%1T1pN)EI0){JeHQIX3tH0V|yvy0wxwZZ -C%pѵyFMY% IO5R]R}Η"`8VqӱuONf$Pۜj5K\ՕC:B&.~ufDF!t?fڷ"I:sos|uEԘO9bzX``rMćT2S)`UVԓ"zT6طdF{)DDIKLSZ]G]Ӟ¤vb]> ->X0XT}h"OJ1ZZIkZND=Q#7
Z:>SL&Fѹ䩞L;:nYe9Sz7; s! -&>[rZ&&@=c{ -O[hU%_k5#s_|h< =3#}FV}){@eks -d^1glpVcOߔ?;n)t"mC^>jAE=\WVa0i#}Pͽ|'ULNu_K9h9x5W1)o\-2٨vNL?6]ufɉ.>kk kg|,+w}ߥ|@%Қ -V#[Qt{a -*4(Z;!q{1tNvID8p^V1?ځڃ,V#U-=GNA}J3UF"$1OLIFYkt$?.%!rI;l~=٩w,(NN?[\cMٯg&i{YDL2WNV -GE >Uq'ݥ?:Vkiڥ5Ek_]X +U|utpŻu.uQ,hL*d` ojN/ ^8~x gb1a?QtpLendstream +en 3U%h;qph+(Ϟ= +C4)Waq +¬@0
?4\@o|oKB
k+ؑ3 `{gqrv77a:2E +Y4HL!2KX4ŪuN}F)Rg^ս+OAܡr} shR9MyqyB{mGs8}qpi^a_I~*.5\K}WFLVhp-=7:N}iO+Nb@PfSh3]Jn£1ܭ)҇/¾;c.x vlfV46)s|"_cytsm2|ZOy)<XN&2 {=};8LVrf6 +*I^8^@T1P`Rև:S?m|Ui}{@lE`CFVwQ^|DcYG+{;<s~;*co4zsp9IuW1~p᱀djqbvq_#CWEvFV6acL:Rt]^tz?'u:C^Z +ck"6@hp55]3B<IWNZpTLO|<95*Fb(F>z +}H3F$!mmA4@/7seJ',_zG{~u\?%i18cڽw穴~4FfgTmkJF{|RWhDaHz:WkP)+GL8.=\Rs?*=%/xG}s+ƶ=V2 +8y5JwC9mAz썚zuzb/kzd(3wk&V<;|gvеj [㈕'btc+V %x,3ʊX+vj$jSTmL]9Sy5U̹8ʾ9T_}f)/:2j=TK 'qDf6w/H#jgҩ¼ߟN@LSp=U|nVLwRU/'Un%n]vr: +V$֝(-ϸF~m~=ϷmᵳAa5r1)IioT5\=bGW~5Dj,6%I剬z<!|9+8=Mf.$1VKַȴ~x<2zDq@_dDV%
8+zQr]ל8n_i&Gg%xR?α`?Rr&Q8ӝMϩR2BŘxb!fK|Xi`;`C>=gb^hgg +h&o1}P.;G[&[읫Œ/r?V!Qf{_Ҳ~*PfJEdg!!<rcMF + \xD]bk.R
+J¥8v#~1*K)l +ek#.ѯsjE +|qJ1?0B~k_5J)<Y +R!+/ cJ^};BHퟹ7pP*y!QG9kXךvaڨ Ӈ0|E"zCh]
Jv4BCҨ$ߥnC&1V!+3{)Zt#
ğ-2F,Y&J_Zgq%DqQ6ާJvܨrAB_4WlȍP|';G:}+q=6l>C@fn ֙"ތ:Ţ;Wf*
ZSkSeQn=)=@i?\'z)ٳ8KxoU^7q + HhCWK;I Z.5Mӟ3)\iMByp.4tjJnsnDP]gDW}w807UA~>juՠ UM _* a6I&ܵXbl\1&\s7ťnS̢E^vƪWl9fS)~B^$t@bj}hו^-J*KnLT,w6Ϥ7{G<~#7 OuQ|AML14pKx#J`b!zeQe.Li8_)8+<pNL[$v*lTXDӐ%$2ܞѓ&VVB3EU璠a0G>d996y3 b{eՎi )6^"t:ǎފO +%~&muCcCވ]1,Be'}1wD~@b +e'h'*B|}òGŅ^"_rq'iaz>Kژc|FM-/-;*9}=o19cb-/*uXAFg]w鈻 ES4W!P^MS37%)в63_ѕUOPxsۯݗOFR9>v
KdVl^.+YRJΑX7@29%?"Bs1ϣY=՛("n3面dz1Kò戳&Q>~h-Ɵ:ԛ#xec! =p_*Z/PSx=.z\7:; +Qh+:lkx7ѯ&EEEԿ1 +dflk!mb,8P[}ܶ$6JUd
}x~o{qbvoS)hm֬{O0 +vVEhN$eGC{TxW}
O$i!zdUx7HS -M3Lvg#p4dAA953$ɪ9ʚpV`D~Y"a{ekU6~
Kn$Ska5p}g5|$ďxorxTV^ilF=Z*bQ]ј^s +*i"/k +'\F}G*0k ++t'FyzkI_)L)/sEu,B)]@^b9[VGUAnQڕNV 6}7Q-jS-<_ +˫A!iTEU,sFD_]f b%vxoLj{jKK{ςy|, _&pzv^qyT>X(Hy55=:+q6~Ea> G0V.[n|{U+{ޣM(P^,čZ +ׂ݀aqV{Zx!5RMٵmReSi{J)o,dI4 Y/վp?XXQn)QqUWpRU^}=h +]&2}2UZAuᴯFl))L[L֠=ܙjqRKnPRQTjZtt9!Д;UDbG!0?~GZKU_V0;U$1@ u@;T1h¶?}Z}8:x+2L[
$~,vOh:*aX{-IB)Xm !9y#"\O3'I =YU_}+'
G>\[|ٻL&IJpvOڲ2x-y\o^"4Oq&Q4+P!z +ҭb#o + +)xv"+awg{|Spj}'_077uAi%]#0>\9dg!{!VkɠǂWǘgg}S'MjPS=u%눂2(x$,:\m_w>p@<C;<;N-sN yTZD<#Ēؤ'FXeA@>a{KvFK0[+Xk'OYynv3s(md%.UJ!usH!kSC3"Vi3[$乷}>"@j 1=,r0k0&C*yhV^+IRm=fu*pk[2#c +DP&a鞹JZ2G+;\ufs +;G4Rx@HRu"E|cmkr{
5/hA|Cwciר> +Q\)L&\MTO[d,fLN)f_JEYr^-vlNw랱Ww_-~E4\ *_ïuv9T/Nx~awWxQUF|Qm=5T/}6Y{}+'Ooޟ:!/5+0]xED>^THÓI&:/hɜ{OY} +H<ٚn+7.~mlTSq;m'& :Dhs ϵ5Y 俌y53A;>\ +íE(6~,G) ޱ&\$f]bP霧]`du֊ʓ1^h=+<Vtz}1&Ɗd+ӧ`U0O:CzK'oUOW>|86;e`nn,BkUyw,W&'UU6fQR3+YPyMxDӝy(k+O}!7_dQ>\&5{hia|Be^Y}I6[Ivk6ZFh``-ˑ'iOD<Gs/dFÏ/y'g'Ș"LdU#jT+FґNsҭ(:tCirmSJ-`̅ސ8jxA}:NMJ;$TO8\G@VKeom'֠>
_jb*#Npj&ʤg,5|:f~fBm6 endobj 965 0 obj << /Type /Font @@ -7953,14 +7843,14 @@ endobj /FirstChar 38 /LastChar 121 /Widths 1965 0 R -/BaseFont /OGTSKT+CMBX10 +/BaseFont /NVMYNJ+CMBX10 /FontDescriptor 963 0 R >> endobj 963 0 obj << /Ascent 694 /CapHeight 686 /Descent -194 -/FontName /OGTSKT+CMBX10 +/FontName /NVMYNJ+CMBX10 /ItalicAngle 0 /StemV 114 /XHeight 444 @@ -7985,66 +7875,81 @@ endobj >> stream xUT\ݶpS-{ZCpw =; }}{nC暣1暫Z9Pɝ] -[z%O
,&= -`OB\ -BzXح((!VW:g{wp #H&>P|,$3$C1YüL!~uplⓦrt!먂?֩!{vU!y>Gr;q`3TĎ3S][_CMjk$M^}~h4%E9g5n7u_%"%:s_ -RlFn(`#It,jǨVFe#54>WEKӒkR^ƽGUug#[Vl䄄bWwjNdsTQ#y",aArLp")=Lq1|X3R\kM=u{ -07=1#$#XB~oyb b5Jn7$/7:i3#R
`1/5ǓF9k4Z#uH0=>K>G0N0TUv+ jP{vqݰ9aGMp#Qv1!Q{Fo 4<fs٠ժvx]`XXMk'iy㊘.6A
N!S6 hΆ
SC]hNKzUSTk0WrΆXn#PgE4K
z@хn?TRj9u*DJL2\=tCYw['ݟs`lC$_')Um?. -8[u$uEFGHW:X|baaCG=8":֭ -T8<?3~ޅ$h|@`ji4J~d-[sDt ăW)/:z\v
Q9rY8$r/sU\_鬽&:ڼf%wIa* -kb1a}aG^2jP>(9J$`iX "σU -:[<~)h[+G$h/h;z7ML˳+$%X%!GD n/+=}6/A]`a:R"z{e~ҳtb?Cz*Bڌp`QPdwBXtsx#E-}ճw490"/֢N j_<9UvB - -P#_F+(C~IMXE -`5Hہ zqlGgC((Y=_$$vL!JtضYҩay߈0p/k_s^qtAxaF9$sA³c0J{Zv{059:ܹePi<ФyɩZmrhSh6G -cObƀs!Ϟ -漲7r(tlF-cEU3&Ld?/ -Y"m)E4?e9]1.qX̟E3LU)`G8ZA>Tpkp8O#&<LtT+_b# ahs#=
-(U*1o)deؒ ByLߊت[̻De,+zcgx -W72|wbgNIjf -M}GpE9:<-׳$@$2&Fnm2z2rVA#2we4љXٳ)N7S0}ܲQUEFLE&;LuCI#DGo;OB{]e-=!hUwdD6&1O#Rz;vrZb)!'9rGKt$EiFHV;UU!}X~\2\z4tz.
&r[eETKR>{^Î(n?^:ưj2cp5$KB -3nV$]*N:Q$:t\T9LׁJ -3lǃ/=GY:w%74x
aPYבSR%QH&U1^G܇ -`[;8%Qg/F{$d*ʗ~b0&h9u17 -ʴ"M*Mla9dIDrnݭ]Q6,2)qr3HpOEuHNwvx7I^~*.Mz|^E6]XǾZѬA,fxO$u]2Nh3pRK<ܓ9V|w)TpvdQ9rN)}־SJg.PP`5h,K! 3TɴEq UaSk\띋$,DrGȏ<</1Ibi$XbkoZY $FAVXH -IX0C_OZL$RCW
CrFyQCI{ k9&?\0|@")`~FahJp\XOM'8Xb7;͌,o0u0Gׇ/D4`,F)D䀘6~<͐劋~Tr z<˪D;DOYi|<*ÊFtKhC9B<]g zye}}VVIglumȁ\zS<!R6{6ΝG4}Rg[5Bx։mdOKFDBRSBvhg6T/֓/#0P/x,Ucx͕dhP7:$Sp|nYeDYQX̐`Ƚ[+qKMK8vic $)5acI!
]0肮yt"W/ξ Ĵ/zmtvHFʄF-{8uSXrn!s{cg}!!mԐ1ps590ph{S\ar{"w?Xmw4-̲M+\ -,7oRm@ꀿ8o1W&=&c6iggsfs~XCתl0i%<s.51]ąd7針"[<ЅO*UCץttiw5e>-C}A֚⇡vn -h3xP -?WH_*`$6K4|לC F1<@h&@<
ꝅpα~NqPW.[NU1X1s= >ˎh -Ig.7x4S$}g
${@IA&lF>y{bэE (h1#ήTzQ<,↊jD&(V?PCQM;Dc&N7 -,6</qGWr5ћ2DojYExb~)o~ZJLI;/nid;ƅZ<]U -"$~K72. -@<Arw``cNed0n(+J= v۷t,E~~FL4<w}}T1sB/ksx'wujVu$2tb0XĝVnIV"yR=IY=t5־Ɏ65G8ԅh~!wޢQ$bpͪ*9-D5hڷQiB>3$;dtiC]I,YTr5rغRw(Zn -c!<xK#7=;C21r~cdBw[5YZIZK:wU+6k&s")^Cˆnj5U/R66*.Wཥ#C];K%dHvKdP)@[ToY -q'rg~Fߨ{J_#$Z#DC -={%r^ռ7S^; #NsSR!&*~dEqvO@R>0~="s\7':#vk89kP +NRױo<Rm 6pm4\z}z!GTo}ʙw9)DkkVH-el8'Ir@4Rez,X\9c5(Hs7zR[y%!T -y#S-{N diA5﮻{fdB>DFB4dz<Q~!D
z8`T -QqEx``)5It<o9/2|i2%97Ij]I!^.4Ј1`t$c
&O -}NB7P& $$ Y e{mĽFE>!?9,\b,9d
6L]q):}g|N l=T7IJ:_V8tHK%,OEV<x7p؞Z·p2:UPt$,:8n
j~:ahV~2{ErBac jnثhvRkx2fPX! iHS -.4D*FCn,'8"R}wv$! -ݮ%{t)sY~/弮J?ʺ\o
>.l(hߚ|HN<)z=}[Q.lHh0<<Q[8밿Zϸn<R]UtXHA8seߵB0s8ߢ6aI'rbO͠,N9UFxi"&H7X[h|b~zM-wOgk+mE:W_p>j!F`ö<1 z]QZt.Y?ADN3'QUG&g85vEMF瘣ŊYq9ē)S1稈vx%D,)eևkNxIMT6;KRDZ;ܝ~U]T^\ݚUD߱'I8#G5w@1,ȱEĊ,nPA0By7ˑ;)
. C4u*z}5>L0Q=D0OVKlsѪ#
ɯ4͏z~SsiZjeeH"!25!p,Iu[xA~R;-Yxk<vʏю2'B,ɇ5v;A'\'e-_WU[m%
mxH-D~pE~#}z 9>Fv;!un{i3#fy"{r[:>@پ)W [f
Mxʧ5Ⳮ:V¿2dVHm4W^M9=J%6u -Gn"Go7^PsSZojlU5R Gs#z+
fP~ q~1"ԒH8r'@\=*N=jny촄Uُx">̧K) 0E*3ϴzt-yZUfvwfBٌ -N -&3U#iV5G7\k= vo9BTOwuٽz)F v$ .*(~Xd¯6FԘ@Qy{e ,2ޢhሡrC6xjq3'1;nhv@9a;H'cң!sV%]$G@ -?tpx܇ޒvAnŘQ:;jadP}'sr".1x -lpK\YbIfMam>p'L2!\Yn!9_0vsBW@OIi`P` -){pBwcZ[ΟB<5ؐ ɵk&;勜(7*&vv"_H5seǶTj",\cvICFDsv.ATt;mWd;U5QF<t{U7*#y)7\Y;5*+gҀb80һyښaBb,U\T(Oxʩƞ?R,u&7굡Ch)pۯQf<?o*]l;]'/ZqwOB R7+EbGĽA2?H3KsNsKeyl=f[47$2/'<}UzljSDR&44Im 8'W= -!n(!mڶqDJ!m!Pz'OGv#(7Q1)$r0;ߠn MťPnTD^+NR6p`$گ_T23Jw+9V4z\3{QŕhMi[AP'[W#/I8 -5Wo\P|z'w<X8/HOSk.m$x0:ja*b%WmeEL+@Hę@ֳ
ܛ{Q:^jW#xREQ/_(IWGqq¬}[BFht$!k.HDX Y_MkC'EWҟD'8oǁx%.}6NI,!d5sz - bاv+τ-d;s>KBܼ=fb|Lz*ϰC[5]6D47 -MCZjkw2mX6»g,ˋS:?vkTzDxԂt]?Qaadb<U ,_!CkY==CVC *aDWģiG'UU:1!|:#c67`NGùI.l<Qv^F~TC!X;y`Ed -;bZ; I`` l^8>ObaHoɝ{dHrzzcF>-2"O@x;tF@z?o<@0`#!u;ƁCgdwG0;NL*W }|dOx-7QΗ'VxH;&T$9G?[&5 -ɭr=/+/ORL"aqLIġbѶlYde`5>9~(P K.+:a]βrθ{N9$#BVCU]FM®4;~k9֙ /u6F -q;",fbdDX~F'mZ|XWO78{q([$0YTkޠjq:kPzJEi0B/~ pAbyE5ʜoa)%[i J/3%"JMÜ-J)?9IMq{N~ů,3K=_O<ӎ<0Dn^<6':ku&HZ7/ -BfӶv8IIPt;~뤣o$*^TX23SWE8o@ѰQu9F-np# -YJݠ
gMt|K/(!]OZGƐrQPJ[.bvz'A6 -6:ѝE>Rtk#@@i8d`hpDxwӸEio[~*Z..6M
-yOV@ZRa{Uzsj2>Kak<o:8L
Y5XT܈0+=.~DǟuttPB5; ڒ I&NէcE(MJxV{hJ%Үw}Oqڀjl,S}emk!T&<ͭ}-0}LqٌO_u\3q -$1WqJь -c u]q<C:x#6fb3dnSriocP5|H'#1r7kG uA*y7t#!kF.l~tR3e$S!a" ->핾}#X@6g\Zy{[(:q'g4F8°7PLK>CTLۄ;\2(2fsYa(/ d&J`8~2GݮP|w"Hxg(5ƾEjݹ -Hv$tʤɏ{2-ORBx\7mZڄ1>ϧB\/XUkY<u´X:%M%gJ荷i_riai
Sr )%Crugi((*yz\W"|J> -B&` -ԏl;;+V2
&X6YIxDMyپgpʰ?a~ecIӕ -b]!-4,]qUn:IG"?LuX@7N;Bl_J~JH}Z)琾Vt" p\^*
&ޙ;K KRmt^!P[t4xtTe&4c /s1?A'@3 +[z%O
,&= +Ô)$:9o0g3qO\>_SsS?MqߑK١mYjAWB6W86ۧ 2MjAm ,[?PP<C|t&uZF@L>R}|YHf[I%d %cyB>ChuD'MGBQ"SCP7Bsr}1*vs=0f+Yg*.H'6ixK +\s kn +8K +_EJt> +|1 +%
{?:=F + ՜ +`}FD_Y,<DRzv-!bLhgz/&P +{ +frY
yi9;b +vqkk3$vG6Jyc~ӾW,kcݓw)STj+'%$>|G`K̨IӁKWZ\Olp9I!b~:xzgĄ+E#Nsr7==2gt a=C^|zOɃɣdf{Q/2 [\FaXݛ,pO^@ ^d"g?#YdARlR$Ή*wzR{ZX!6PsU8ëV9Tp(ʛ^'H^IpS-(/9ǟg +顰 ;:Z4?Q*=p뷴w"rOC1?27:^{!xVkuMr#QE6[_7 +v^vja\rX`K.m1ujdR'fhE#jXCQIb &3v|UsέěJ)!wQnsw#%/</ TVO''g=ﯜEoN+?3۽(9<.:),r9&'<oA<6DY跀>Y*D,
|?3R(sȋ`]/b$OU`n +(u{b~GHG&(@j 6?oH_nuf~Gx+c_|Ok'-M6sh ++a3szGbC +bixX52A/UOO48i4N1k]l?B/lHם
֧.4S!ׇ +ROќ8R8`
ܲGϊhi^uc)|aM#(r8Tv= +(,e()z@醲,N:?؆H({N=Sv!+~3\.qvH.mt$Wʇ\{pDu[sMI-q`y~qgT7IByriBnF[@ׯCG3R^tsp9<I^I#<4Y{;Muy<rmKXs͓V4 l0UP`#b$eԠ|QsH8(3Dݫ +yRwѶ4WH^иwn*gY+qe7VzgI>KJKC^WzZm*6^z5tE"{g_isk
T3U^9<4=n(FZgSir<`2D^̭E
#*^6Hays8okc?6V708G>VQ@U[1/k0YEAPL=,|φPP=>zIH쨙-BmeSaG /òW9a #,Q_־~_3}zrH3:sґgO?/`$Aajts"tsOIOFry%ۡIˋShlƞXŌB֟=-|#ye%nQ،[4f 69fL~_ ^EʙSh~ԩˬ%rb]TY:?tg +,]Rpz}*l
0rpGLx)VEG$FGj{3C{[6QTbߠEQ%=>jSȞ0;~%yЅj{U_+wbXV"2En6dHE,bϜ>z]_ +V&FY(6k;Qя~<hHmםXvc 5ЗK7M +LDmbY95O1rlq{˘Z3lpԌ̬-
H(0rux[gIlHd:L_QKdfYd`*9ՃGdh3Ig?NSd#X3n6`Йɧ7ܹeϥ3,TW8[MvꆮF.v9[{BЪ{/"+͉lL/c8"F +ZIvn˃!9)_RCw%OBNsN,E;(lI`.9vH)B$A2 +G6e(FtæKSqFȆ9tdp] +ܗ192#3Ea,IeYoY@}Ti*دwX%B@Ӱ
\DLM1 +؝6Pw[I<)6-hūL]˛FM;H1 bdFN +Ժ]y%c*wKPd/?_{rm
u֤ޗ=.(+0KkO嗤rZ+T*f>IU8uHVu +13vI/P$td0TjS. +,uCTMyِ-^V0F="r'vⷛqF+K,_^.HT/` +Mr(96*cn ++l}QYYH\Idhgb%xt's8%dS~2r[^3?R(2}$G+:`]>/jxwY|Bpgi-ݝ*Xҹ +;)HJyY +>yy_b4LqI*F+NI議 ahzlF+I\Yf%'c匶33A@C} r:$M~`ZG ER1,k=`%d̕(tqOq4nX]?%cw(cY*>)aW'#a_i$XtS1=#lxz!'N@A7xGUekv20͟,V=6I$a%M5ytIU0,(цs:x@^+!0B͑;9xCl!l֝;h05kZڛ>*,P>Y)am}^:1'_F`^Y +i˫?G*(+РotI^ܲʈ>!_[{ٷ)W엾(#.pDIRk<?J_<3
{%VC +%`]}<E2>_Hk}kk=Ni^Ч-8~$# 8Zp 릸Ce3>HL.BBXۨ!q!by|k(raisjE;ª!0D[yZ;觱*~.%wh$3=Z;Fce8~VrXn2f]H}ۀ0q2b
MzMFm*ӼKf|UlGCaӶKRyvC[)\kaGc=ɦoB/^5;E)
y4?T߫8K>I!,k$}T[A[5C .g`1~Ý@S&TMTlIli';9nA0c yx2MydE;c8⡬\bb<z||VE\nis1
I`a+)Hz'L8%}H<r/ĢPc02[G]yXH=
]ՈMl+P<~vLz7nfYlx %_vj7e0Ւ\罇R]8]Iw_rOgOwxPu;.M"oyʋye,JD e+>hSԝʵGʇD6(8/(c}JYdiHo|N^>0983,yk$ <EHne"9]Rp%y +:jqBB7 +ME!IdUUrZ ++ +OU;R*FP4`lr : +C$"~xBv/KIM$n]$ s$/8?!Ae9⎠CS>qUbxvw[._}{me|Rg`e`c1@yuN+j!a{h):330\;0XK>o[2ѣ">cT}Xz6e\NϸzQ<~yUFBIj;jG2n*L{JD2yo&;w@F#1$榤CLT8Ɋ0uI(|`TzDnoOR6%nuxGF98-pr l# Wc>y:\ǁm
VKi̫n1ٝCކ +\c]': -;5iaMsY~VsokbjQ6?
8o8KBXGZ*7 j]w*}$捄>i,Ȋ͙ydCVp"oӿ0x +dij糃;Rjex6rj_ eB'dJ{sohNp
oB\hc.ILrDLnzMxHHAA24U^}B ~rSGYXr*mW ?=egS\ul3i~(z +oVeu7:ql[6Jw:KXx!xq-nD_=+o +t$KЬdZs +%~@(z
tݰWѢRƅd`C.A҈22SܪRI\eu3ȇ6I*Ho&>Y::\viևU*b?ܠMY2}OpEt-fV3$HC,?]%KR0^y]9:~,Wu8ހW}h]45PV[5gW?/&xF=.?S$(%
z+4"˷l)aE]8?`xxt-ep@a:>d)9qByam׃p<k`2qEmޗÒOĞ6A-xYNrw)@M3=!@*+iM|#'DMrKon#N3ɍ[R +v #DWZu|^Bm3y +c,X8B]BbgN?/]m3Lpjl|ɍ/;B#<s7ړ1G;rh'ScQJaYZ9-Sʎ/8ׄe ӛl~v@'v +;*S
»5cOœpnGH8+kjbXcYܖ`L9?n#wzCS^':S]20iTk}`7{a->S |ʣU;G8_i +ᩏd[aQ/ԭʐDBdjC*XhڃvZ dzx잕
eNX8kwl4!NNʪ[ QFJ*E0csQ/Z8ى.F$@r9}8=(X}2wB(~f6F̬ODڽu|س}Sq(`Q.O jkg[ue6ɬ>'ڊi"zt#u]ͽrjc{*Kl4D5d-Dc>n½صRتja@F6;V(̒bE%q>%N{Uz4-i oY +D|O4S]A`TfiiZ +03$Od/##7 +<6 +$m͚|NdBBs쓿;Na}Ձ$m M<k#"R$ƴ'(?7_xj^!GkMv9}QnU!
RMh4En[X:k"1!5mw-l:&DX/+c]I4vڮvҫT9hk(1x:*^uo:[UGiS\ao.hwjTcWRcΤ&pQa6w5Ä +{ksf
Ssۃ Z5yu6|b"gI*Һ^xbBxDlMg +'H\"j<و ,P芥kq_3~͊P4a0Pj
"%f qtbBQBg3*m?㈔L/B&%32B~&N.M5x;G
GQnb"!4S(ʯI\at!vA@Kˡܨ.V6$ĥ,hm79H_k dӡީ ef6Wr{'Liz/߫fY+њ5NPG>|_ +)qjbA߸PTOyDq^B|#tQ]H28nat$TJ:4ۘ;ʊ#ZW-J3gA2e7#&tԮGh^z?Q:BƩ'vY< +H +`EcLTr<M4VzYlK^6'=egr+d\UWqkt&/.i\i_:kĦGB.9FurΈ/S6˝3=C"y~ZM1ZKW6N˨[e qף)ێ] F#^ϡe|R`Њmxs"[~I
+b')MMOjW [v8s|wy{&=T<waKf
ճklh0#ao4Ʀ{Fbt,(#g[~uu +E@kVJb +۰l wX"85B7t2
~0^҇<~H('8x)YV%6C&ײzU{hY9QABU~Gs)
{?OH0+$ubCt>4FP:m&>n`'N%gCLk%7^ևs7\xV֍6w}!rCv6>]^ +(}bT87k,tE6pG`YL~HG, +W&gr|9ƩvĴvZLؼq|2 ޒ;0}U;ƌH}ZdD vz4Z`,y%e`FCv($`%!A*'aw+ԙ(U@fȞd[w[nx/ODwL)Iys~91TM-:*jnQ?tWw= +xU-\\(_m$hZV>:8d)|yA=wbxtqT3kaW:{]8?=rSN8jlUwc%C
<fLOǠN'Q!z,_ІJ;>?]0<
f_YX,ėChMy[6Z;$a&Xt]g6J]OI
c& CJ毅TJyEMj˰ +N%dXF.5Edz沿H~}BIY%X,An.խZe^rG7+f=1s`eH[K9.]8f6-,R)@I c-\QGEl#9n_A +ĩGЧ&#| ;yFem5"DjQ?tONOh$%p*law#VWo(ət| KEv|oM_9ePe +W>¨Q"_$Lqe ]|)sDP3Jk}
"hO5 sd*Hb9In7>eZ.$΅ 3oژx 3cI}.OJ^ +&xjKWitJK=ϔoӾL,n*7±^7VAo5R K<2P:QTL^SD| +;U_@3:_/<n®2ޚdݧL +.JDM2N2f3'[IiMP3;nw.vVXeLmjN~4{}*a3 ʢǒ+O&"9C%*;v}CVs!㦡ҏJuw?O$Ju^A.+y0pĺBd[ +iXīt&>)( +D|a@PnUwپɅZqS!} +BE +*;PsUMN#ǽ3w|;@X{/,۴_C࣡:i +|!*MiDZ_:b2dO ,f wgG3=dAendstream endobj 955 0 obj << /Type /Font @@ -8053,14 +7958,14 @@ endobj /FirstChar 33 /LastChar 126 /Widths 1967 0 R -/BaseFont /MASIZP+CMTT10 +/BaseFont /RLEQYF+CMTT10 /FontDescriptor 953 0 R >> endobj 953 0 obj << /Ascent 611 /CapHeight 611 /Descent -222 -/FontName /MASIZP+CMTT10 +/FontName /RLEQYF+CMTT10 /ItalicAngle 0 /StemV 69 /XHeight 431 @@ -8080,7 +7985,7 @@ endobj /Filter /FlateDecode >> stream -xڬeT\Ͷp{k!K\BpwwwMpw%8_?{s߿ߠUsU^Ċ*¦@ {;zff23I\ hbio'f0ss +xڬeT\Ͷp{k!K\BpwwwMpw%8_?{s߿ߠUsU^Ċ*¦@ {;zff23I\ hbio'f0ss sF, lt jmcd'j45hjk1 ?tr LRC ?RC ?rqKL$h>!H!!!@.J@.*@.j@.@.Z!n;X]fO_ @@ -8159,7 +8064,7 @@ s/1+(TWQ<v oBVUo~uBK Z[{QmefA?p,IʼnG+
.[,jvV}c\g^:|iao/AV;6R=7R~kvg^Ό>#EN9[|ҬeAǹkWf}L+ĈC"h!%>ԃp~(\<%m۞ELt-G(NRku]tyS7re}^WbA=VMOeed095cZ~rdPsှ^YxwŨ?>uzrz^<LzleՃ ?vӤ8#d$/ӜJ[ǐzc'em.;(SNvv5N/WxeX;z)YW[*.A"֏ AJbs\%ԺrdM ߹ɋ "^?2c4G|gV*ݲwmyQs^^"ojI*Oncgh}]gbљIZŦeP7(cÝk
'KZ^-X59;):YyEyucnsW~9_eĄ̫r`C|.9<@
|/ǪMN5OKV>^|kbiwlMO/xA&^Au˫fn`46bM@ߛ\% -liHn1t
}p@NI 1g$Fdendstream +liHn1t
}p@NI 1g$Fyendstream endobj 951 0 obj << /Type /Font @@ -8168,14 +8073,14 @@ endobj /FirstChar 11 /LastChar 124 /Widths 1968 0 R -/BaseFont /NFGMPR+CMR10 +/BaseFont /BZOVEY+CMR10 /FontDescriptor 949 0 R >> endobj 949 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /NFGMPR+CMR10 +/FontName /BZOVEY+CMR10 /ItalicAngle 0 /StemV 69 /XHeight 431 @@ -8199,7 +8104,7 @@ endobj /Filter /FlateDecode >> stream -xS|߶IǨضmض;VG۶mFV'Xokコz/Ϲ:SUs<sLTH iMli +xS|߶IǨضmض;VG۶mFV'Xokコz/Ϲ:SUs<sLTH iMli u1g{ sw rSA>gɔЧ,>5Чv8?3
gџi/tjWӬ_i/ta~ڰw_i/a3O
j+ӕ_/t~ߗ-e<2 0<en2љHPMf*}3ݖkx #{EXۭշUc$vDsq|;U9
Tٲ;0VY5
GtK @@ -8258,7 +8163,7 @@ v\ 0 h AhՇ E||?g).UQaG}K=¾if>z&Dss9XYUCSA ^v/C7b<.z~U z@R[StV&mZ&C"܃7A}.ƀi9zG1[&lsfzM%N x|XՖw&B OhmȢ1Ǝo+0ץO)hF -LM`j=FS$kͦf@˽Rw xqO[MJ;o@@,I;5l-y +LM`j=FS$kͦf@˽Rw xqO[MJ;o@@,I;5l-y endobj 948 0 obj << /Type /Font @@ -8267,14 +8172,14 @@ endobj /FirstChar 11 /LastChar 122 /Widths 1970 0 R -/BaseFont /KRNLRF+CMTI10 +/BaseFont /HXPLVA+CMTI10 /FontDescriptor 946 0 R >> endobj 946 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /KRNLRF+CMTI10 +/FontName /HXPLVA+CMTI10 /ItalicAngle -14 /StemV 68 /XHeight 431 @@ -8287,28 +8192,36 @@ endobj [613 562 588 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 514 818 0 0 0 307 409 409 0 767 307 358 307 511 511 511 511 0 511 511 511 0 0 0 307 307 0 0 0 511 0 743 704 716 755 678 653 774 0 386 0 0 627 897 743 767 678 767 729 562 716 743 743 0 743 743 0 0 0 0 0 0 0 511 460 460 511 460 307 460 511 307 0 460 256 818 562 511 511 460 422 409 332 537 460 664 464 486 409 ] endobj 939 0 obj << -/Length1 1013 -/Length2 3827 +/Length1 1030 +/Length2 4000 /Length3 532 -/Length 4518 +/Length 4701 /Filter /FlateDecode >> stream -xy<mǣY*:ca33E(R%)%K%kDȒ%"g~}z?us}w<3Ss^Ehc1x18T02JPqH@@QX&P -\U -iH]G|ɦ - h_į8O addbg-}ʙQ U1CqJ9c/-! -X7KC -b'$xDӼd;t4jϑ1,uBuExskj3$TaU!{pYЊC7
$>2mwE0ƫ6`KBfz&^;Ⱥ)0'8MB+<5-Jrc(Hcm59E%Tt -R^Ɂّ$L'?3soc\Z Kn #JCk.цtޅBKJ⋶WKMȱ6mi1ְݲ)Mٺ˔t#i;~Fw^.Mߕ5T뚔0bJOӮ~W-
GXxt|t3GSe\%1o}>@Rg'
߂}ޢfV6du7Qm,}~MLFdmS˥nҶ/g)exSloUuua#s5)/ ZȖ;mwHjX
ctclv;sCF*qwb7vX}K3{5Q5k1*UAGӕĪ7v4!>KչSV}.1eű,>)w3s,6>|B)j-q*Y}=a`yV)ݠIJ?nlIr}C05$SݳR[YU]t#~Pq+<d%5(:cDTۈhSsh\j;܌ì`/uP Q)!Z}lzû&Uvp'bs_a4klY -oPfOV{ۚ :I{̳>_"5f.z.kՙJ("gkp^ጏoj=uN4ߡ'!^?/,nX?uVPvaxRN8Wq3q8yi.P}tHPQI\c߿
#ʞ$ghʝ"6^c9jm}=&m]:,r A VLS;.-bY4m̹XZ(lnӾُu2lG->ݱmTR°<<B
##6X@~wnOXZb_(/fZ1Ҫzꗚ698
Tu4W[y+v
.4;WP/քz0DWC^.L5x=- }W}lw{oLyw)6'BI}@ZoRE'ڑy7Y
.EZ[1ʅk,aoĽnq\u<֎m-m֡2ԥ, {יyuA%"6~NV -CLikXs`E%]n\~8gt̊ؖrOP vh-v\+5V7f.RϊL)t&|㈅qܖ,J]8jVa0Ŷ -~r7.T#(I-\nq_U{hpʅeqaD!x1-gq{҃*V˽ME7dh5w"DGwUч
>-7HZ/ g涸I-rxƴi]iZ!K.j /U#g؇)
[Ȧ#ԉY -0wv9=J_5Ԅ}ol -aN;0D<MKb[6yIs%L*:VFrrV\ԶGM<Oz>џIᘊ.1^M?5j4=sRS kDGiEa{P\/kKP`Pdca!U}zC$'Yc煵ݲk!V;0ʍ?̼c<H;\r^;{~ܽJE{>;$㨮Q{~k3\_u5/>$/kvrXw1D32nlآ%P -1(<HI.(W$]ms_iOIF+0_]]K 8L)]Ssc -+b˪:w$˃#{aᲭ>^/tm_vIu[ьjIf@*LOXQO0idmSbQN8g\M+B|-a0;H"&?^l]&tdgCyu;enL=.h͔fŔ_Y`W#Ԥ**.:02}|_z~`~:ÏݗVC7eZ\Y$S ܸ{fQ绣UaWtA)vaԲ3$5䧉<omT^?0HY_
*z{-Զ<h`v06A<Avam;R_wM,wl
!T({ڃz`-q o5YN]v;ߺIjyxF?s:'|f3 :Ĵ
NHKWؠ3c?$4楲<,f)N_M|3{!o{e>x˘#17aLd{Fų, Uzml.ҩ,!Kݪ ls]tX55Ez|]k^*>2Qщ)}bb
6ս,JYH:#ȗDٯ<w;w\~K<)z^yosf
t -J^$EaD5hY>\I,Wu|$aH?a#m<6j;҄?QX/8/4endstream +xWTSQ@ J.T@!^wU@!Бޑ&R +;(]z"]&MQGާ;nߜַ1{j `Ab8ADPч +#\Xwlp`GA4v@[+1Oy FŠQxabBo +sisHц9!Q`p,E`AMatsgWC! +h{tUEz lH\?C+XKY[MXՃh!O/atH\XHXBuRA1H4q!% +ZcNϙ~|!,C!ZK!@m&w\#C:SIFBo{| +Uh}WC5zV;a'iUf^O#ݶҴ^Ed9c[};e.P\N՝Oo9
1V:eџ?7uIW.=WuEr5_3bJgzky/,N:.S9-,pͯsMX6\m LxN5M!L((ٚ<`;{(ZP^yC&W[K3gF%KWBaxK_.W(ǗJ;Y]7îβI +r1 +6|D)}tE h/^U
~Q=r +ڮ:_<=Ca̤V CR3KMgF-(;HVo@z ]V4(4ֻʬO|N~|kz"Is^ +<M9\t%~M,)>˚KHt=TӃH5TE`ҁ_FZEhiQM,/-,EQЎ}beߙnwܢ$!til( `ǾMy R!}]α4xek +|~|OZy
uILEh#$Z?(yr\WN8c'بHk$n_O2Kdzq@YJPSyEFb쫻<`Ψu[,$rRJFH Q@f7Fd1c%|kcTPĞ㈞P|gkV/A;tȬހ*p)ns]/drb0Tӱi6m@Fzcw=d H9<I
<STTFzOR<M(7:d~WQ`q[0=@d0S&*<i8p<$ +y4cO>"}"G[}²VͶnxM8B8<(8ulБ +|vFSYSŋL7)CtoZ;$Cm4j;{rO\qٕ}Tu(< +3wbٿ/+冾"LҕB6gg⮼
(c}.ht/ϗd
f+mؗ6Q5<zBdL +ςxRpd1\9xȾ>{E =N=uhR-ݝO+s܈\|-)o ?f+2#;|'2W0u!Ԩ +97}6q|J(^AMdreԯ +Binsc=XEhOql֬P{^'=2$<%MS ++իn~ o4m1ݳQsõ[}{`iyw*Ms[ǣ\UIHUrWwۜvEB;'QKX
fsИ8\J#QW85aHP7iV}=QЎO=xuEE)', + +lKm3)Ֆ1R=VQ{1 +,zV
l9gC>ڼ +l%r-=6b~\Gv<H`נJHUu<iA;Lr];a6@VfV37fyC+JO2lj۫&xd_բ'>fWUZ3} Ve
@d'G0H@4~ endobj 940 0 obj << /Type /Font @@ -8317,24 +8230,24 @@ endobj /FirstChar 48 /LastChar 121 /Widths 1971 0 R -/BaseFont /MMOZPF+CMR12 +/BaseFont /KDLGMV+CMR12 /FontDescriptor 938 0 R >> endobj 938 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /MMOZPF+CMR12 +/FontName /KDLGMV+CMR12 /ItalicAngle 0 /StemV 65 /XHeight 431 /FontBBox [-34 -251 988 750] /Flags 4 -/CharSet (/zero/one/two/three/A/B/J/M/S/T/a/e/l/m/s/t/u/y) +/CharSet (/zero/one/two/three/five/A/B/J/M/S/T/a/e/h/l/m/t/u/y) /FontFile 939 0 R >> endobj 1971 0 obj -[490 490 490 490 0 0 0 0 0 0 0 0 0 0 0 0 0 734 693 0 0 0 0 0 0 0 503 0 0 897 0 0 0 0 0 544 707 0 0 0 0 0 0 0 0 0 0 0 0 490 0 0 0 435 0 0 0 0 0 0 272 816 0 0 0 0 0 386 381 544 0 0 0 517 ] +[490 490 490 490 0 490 0 0 0 0 0 0 0 0 0 0 0 734 693 0 0 0 0 0 0 0 503 0 0 897 0 0 0 0 0 544 707 0 0 0 0 0 0 0 0 0 0 0 0 490 0 0 0 435 0 0 544 0 0 0 272 816 0 0 0 0 0 0 381 544 0 0 0 517 ] endobj 936 0 obj << /Length1 1972 @@ -8347,8 +8260,7 @@ stream xUX\]h; \w`݃Hp <;wwS:ϡns=sɦ&WRe6%@NLXy", 4 -00v,lq5#ll_C.@G,I -^
+Z:;?Ŭo@+x"_}5X7' ; dXؚ +00v,lq5#ll_C.@G,I ^ufh`7s G - җVdjÑ$ @@ -8397,7 +8309,7 @@ rټ̡nJvȆ:S1(-K#vStf- b
%Wql A"汗>Dk[H_D6QpL_pB#?nKL%| n\4gBQM=n'u,̈nNL).C+1 BEe8O&sIo^Rn3ee8??:i5ca'ZoQUˑˊi"rRGQ{0ɚS@O*PPcژ8(?]3 ~w%lgHn Cvf ˷J03.(7/R44"Mam'B|cj$ <ms%)W2Hߗ|G4g^a)/ToAPCWs]^'͢=R[.-0K?.⮌֘7pEƿCo=6(cr>,U@N(DeNmnelrV&
>)>e6a./n Cc89m]81Q\~02qC^&en}ZF魗.ڗU(K$gE0/V~v;׳8_h~7e-Afrc-I걡z`#=-ifգiC ~X/uf}#k*?ADٯ̀r";2j2d
@nSff/b -Yr%9y[sCbpz5+mdTI7c߅3zdtaTE*/f1{p8&E\X=yԦ_!Rf/F(ہRӉ'Vu#OwLM Nh59_^%"kYK gs~7^%ls.#
# j-.)`!nй4i;@qc\`?MYo_@[sBbِVe,_+[
@6VHzendstream +Yr%9y[sCbpz5+mdTI7c߅3zdtaTE*/f1{p8&E\X=yԦ_!Rf/F(ہRӉ'Vu#OwLM Nh59_^%"kYK gs~7^%ls.#
# j-.)`!nй4i;@qc\`?MYo_@[sBbِVe,_+[
@6VH_Cendstream endobj 937 0 obj << /Type /Font @@ -8406,14 +8318,14 @@ endobj /FirstChar 11 /LastChar 122 /Widths 1972 0 R -/BaseFont /MJCNOV+CMSSBX10 +/BaseFont /VCXQEM+CMSSBX10 /FontDescriptor 935 0 R >> endobj 935 0 obj << /Ascent 694 /CapHeight 694 /Descent -194 -/FontName /MJCNOV+CMSSBX10 +/FontName /VCXQEM+CMSSBX10 /ItalicAngle 0 /StemV 136 /XHeight 458 @@ -10218,7 +10130,7 @@ endobj /Count -3 >> endobj 1978 0 obj << -/Names [(CodingSuggestions) 1007 0 R (Doc-Start) 934 0 R (Item.1) 1295 0 R (Item.10) 1317 0 R (Item.100) 1554 0 R (Item.101) 1555 0 R (Item.102) 1556 0 R (Item.103) 1557 0 R (Item.104) 1562 0 R (Item.105) 1567 0 R (Item.106) 1568 0 R (Item.107) 1569 0 R (Item.108) 1570 0 R (Item.109) 1571 0 R (Item.11) 1318 0 R (Item.110) 1778 0 R (Item.111) 1779 0 R (Item.112) 1780 0 R (Item.113) 1781 0 R (Item.114) 1782 0 R (Item.115) 1783 0 R (Item.116) 1784 0 R (Item.117) 1785 0 R (Item.118) 1908 0 R (Item.119) 1909 0 R (Item.12) 1319 0 R (Item.120) 1910 0 R (Item.121) 1911 0 R (Item.122) 1912 0 R (Item.123) 1917 0 R (Item.124) 1918 0 R (Item.125) 1924 0 R (Item.126) 1925 0 R (Item.127) 1927 0 R (Item.128) 1936 0 R (Item.129) 1937 0 R (Item.13) 1320 0 R (Item.14) 1333 0 R (Item.15) 1338 0 R (Item.16) 1339 0 R (Item.17) 1350 0 R (Item.18) 1351 0 R (Item.19) 1352 0 R (Item.2) 1296 0 R (Item.20) 1353 0 R (Item.21) 1354 0 R (Item.22) 1355 0 R (Item.23) 1356 0 R (Item.24) 1357 0 R (Item.25) 1358 0 R (Item.26) 1363 0 R (Item.27) 1364 0 R (Item.28) 1365 0 R (Item.29) 1366 0 R (Item.3) 1297 0 R (Item.30) 1367 0 R (Item.31) 1368 0 R (Item.32) 1369 0 R (Item.33) 1370 0 R (Item.34) 1371 0 R (Item.35) 1372 0 R (Item.36) 1373 0 R (Item.37) 1374 0 R (Item.38) 1375 0 R (Item.39) 1376 0 R (Item.4) 1300 0 R (Item.40) 1377 0 R (Item.41) 1378 0 R (Item.42) 1385 0 R (Item.43) 1386 0 R (Item.44) 1387 0 R (Item.45) 1388 0 R (Item.46) 1389 0 R (Item.47) 1390 0 R (Item.48) 1391 0 R (Item.49) 1392 0 R (Item.5) 1301 0 R (Item.50) 1398 0 R (Item.51) 1399 0 R (Item.52) 1400 0 R (Item.53) 1423 0 R (Item.54) 1424 0 R (Item.55) 1425 0 R (Item.56) 1426 0 R (Item.57) 1431 0 R (Item.58) 1432 0 R (Item.59) 1433 0 R (Item.6) 1302 0 R (Item.60) 1434 0 R (Item.61) 1435 0 R (Item.62) 1436 0 R (Item.63) 1437 0 R (Item.64) 1438 0 R (Item.65) 1439 0 R (Item.66) 1440 0 R (Item.67) 1442 0 R (Item.68) 1443 0 R (Item.69) 1444 0 R (Item.7) 1303 0 R (Item.70) 1450 0 R (Item.71) 1451 0 R (Item.72) 1452 0 R (Item.73) 1453 0 R (Item.74) 1454 0 R (Item.75) 1455 0 R (Item.76) 1456 0 R (Item.77) 1457 0 R (Item.78) 1458 0 R (Item.79) 1459 0 R (Item.8) 1304 0 R (Item.80) 1465 0 R (Item.81) 1466 0 R (Item.82) 1467 0 R (Item.83) 1468 0 R (Item.84) 1469 0 R (Item.85) 1470 0 R (Item.86) 1471 0 R (Item.87) 1473 0 R (Item.88) 1474 0 R (Item.89) 1475 0 R (Item.9) 1309 0 R (Item.90) 1476 0 R (Item.91) 1489 0 R (Item.92) 1490 0 R (Item.93) 1491 0 R (Item.94) 1492 0 R (Item.95) 1536 0 R (Item.96) 1537 0 R (Item.97) 1538 0 R (Item.98) 1539 0 R (Item.99) 1540 0 R (Packaging) 1021 0 R (SMBPASSWDFILEFORMAT) 1845 0 R (architecture) 1005 0 R (chapter*.1) 1027 0 R (chapter.1) 6 0 R (chapter.10) 258 0 R (chapter.11) 726 0 R (chapter.12) 750 0 R (chapter.13) 758 0 R (chapter.14) 810 0 R (chapter.15) 826 0 R (chapter.16) 854 0 R (chapter.17) 866 0 R (chapter.18) 914 0 R (chapter.19) 926 0 R (chapter.2) 22 0 R (chapter.3) 46 0 R (chapter.4) 82 0 R (chapter.5) 86 0 R (chapter.6) 178 0 R (chapter.7) 206 0 R (chapter.8) 246 0 R (chapter.9) 250 0 R (contributing) 1022 0 R (debug) 1006 0 R (id2735718) 1316 0 R (id2735855) 1326 0 R (id2735907) 1294 0 R (id2736117) 1298 0 R (id2736155) 1299 0 R (id2736230) 1310 0 R (id2736297) 1311 0 R (id2739476) 1283 0 R (id2739563) 1284 0 R (id2739594) 1289 0 R (id2805869) 1383 0 R (id2805895) 1384 0 R (id2806295) 1331 0 R (id2806340) 1332 0 R (id2806446) 1340 0 R (id2806453) 1341 0 R (id2806472) 1342 0 R (id2806496) 1343 0 R (id2807146) 1401 0 R (id2807899) 1464 0 R (id2807992) 1472 0 R (id2808047) 1477 0 R (id2808071) 1402 0 R (id2808085) 1403 0 R (id2808098) 1404 0 R (id2808112) 1405 0 R (id2808128) 1406 0 R (id2808142) 1407 0 R (id2808156) 1408 0 R (id2808171) 1409 0 R (id2808185) 1414 0 R (id2808200) 1415 0 R (id2808214) 1416 0 R (id2808228) 1417 0 R (id2808243) 1418 0 R (id2808257) 1419 0 R (id2808272) 1420 0 R (id2808288) 1421 0 R (id2808324) 1422 0 R (id2808474) 1441 0 R (id2808560) 1449 0 R (id2809324) 1498 0 R (id2809349) 1499 0 R (id2809577) 1500 0 R (id2809614) 1505 0 R (id2809651) 1506 0 R (id2809707) 1482 0 R (id2809805) 1483 0 R (id2809876) 1493 0 R (id2810346) 1535 0 R (id2810590) 1511 0 R (id2810621) 1512 0 R (id2810646) 1513 0 R (id2810691) 1514 0 R (id2811313) 1545 0 R (id2812244) 1563 0 R (id2812278) 1564 0 R (id2812316) 1565 0 R (id2812324) 1566 0 R (id2812400) 1572 0 R (id2812408) 1573 0 R (id2812482) 1578 0 R (id2812613) 1579 0 R (id2812620) 1580 0 R (id2812632) 1581 0 R (id2812643) 1582 0 R (id2812656) 1583 0 R (id2812668) 1584 0 R (id2812763) 1585 0 R (id2812776) 1586 0 R (id2812833) 1591 0 R (id2812874) 1592 0 R (id2812902) 1593 0 R (id2812944) 1594 0 R (id2813030) 1595 0 R (id2813123) 1596 0 R (id2813150) 1597 0 R (id2813237) 1598 0 R (id2813306) 1604 0 R (id2813406) 1605 0 R (id2813484) 1606 0 R (id2813525) 1607 0 R (id2813607) 1608 0 R (id2813660) 1609 0 R (id2813830) 1614 0 R (id2813933) 1615 0 R (id2813972) 1616 0 R (id2814115) 1617 0 R (id2814228) 1618 0 R (id2814792) 1623 0 R (id2814886) 1624 0 R (id2814928) 1629 0 R (id2815097) 1630 0 R (id2815564) 1635 0 R (id2815576) 1636 0 R (id2815677) 1637 0 R (id2815868) 1642 0 R (id2816001) 1643 0 R (id2816028) 1644 0 R (id2816066) 1645 0 R (id2816207) 1651 0 R (id2816247) 1652 0 R (id2816397) 1653 0 R (id2816469) 1654 0 R (id2816549) 1655 0 R (id2816595) 1656 0 R (id2816775) 1661 0 R (id2816940) 1662 0 R (id2816953) 1663 0 R (id2817023) 1668 0 R (id2817066) 1669 0 R (id2817080) 1670 0 R (id2817119) 1671 0 R (id2817172) 1672 0 R (id2817180) 1673 0 R (id2817192) 1674 0 R (id2817263) 1675 0 R (id2817271) 1676 0 R (id2817283) 1677 0 R (id2817374) 1682 0 R (id2817381) 1683 0 R (id2817408) 1684 0 R (id2817439) 1685 0 R (id2817453) 1686 0 R (id2817552) 1687 0 R (id2817649) 1688 0 R (id2817663) 1689 0 R (id2817777) 1694 0 R (id2817874) 1695 0 R (id2818036) 1696 0 R (id2818068) 1697 0 R (id2818138) 1698 0 R (id2818170) 1703 0 R (id2818201) 1704 0 R (id2818270) 1705 0 R (id2818317) 1706 0 R (id2818357) 1707 0 R (id2818399) 1708 0 R (id2818433) 1709 0 R (id2818447) 1710 0 R (id2818474) 1716 0 R (id2818546) 1717 0 R (id2818561) 1718 0 R (id2818588) 1719 0 R (id2818637) 1720 0 R (id2818650) 1721 0 R (id2818670) 1726 0 R (id2818796) 1727 0 R (id2818917) 1728 0 R (id2818945) 1729 0 R (id2819129) 1730 0 R (id2819243) 1735 0 R (id2819288) 1736 0 R (id2819308) 1737 0 R (id2819434) 1738 0 R (id2819507) 1739 0 R (id2819521) 1740 0 R (id2819562) 1741 0 R (id2819623) 1746 0 R (id2819631) 1747 0 R (id2819794) 1748 0 R (id2819891) 1753 0 R (id2819940) 1754 0 R (id2819979) 1755 0 R (id2819987) 1756 0 R (id2820114) 1757 0 R (id2820295) 1762 0 R (id2820309) 1763 0 R (id2820357) 1764 0 R (id2820417) 1765 0 R (id2828738) 1810 0 R (id2828936) 1804 0 R (id2828976) 1771 0 R (id2828992) 1772 0 R (id2829247) 1773 0 R (id2829456) 1790 0 R (id2829469) 1791 0 R (id2830146) 1844 0 R (id2830264) 1815 0 R (id2830298) 1816 0 R (id2830366) 1817 0 R (id2830374) 1818 0 R (id2830390) 1819 0 R (id2830417) 1824 0 R (id2830439) 1825 0 R (id2830446) 1826 0 R (id2830464) 1827 0 R (id2830503) 1828 0 R (id2830593) 1833 0 R (id2831185) 1855 0 R (id2831234) 1838 0 R (id2831259) 1839 0 R (id2831852) 1869 0 R (id2831871) 1870 0 R (id2832085) 1856 0 R (id2832118) 1857 0 R (id2833060) 1858 0 R (id2833088) 1863 0 R (id2833149) 1864 0 R (id2833957) 1949 0 R (id2833990) 1950 0 R (id2834164) 1875 0 R (id2834172) 1876 0 R (id2834287) 1886 0 R (id2834358) 1887 0 R (id2834366) 1888 0 R (id2834558) 1893 0 R (id2834801) 1906 0 R (id2834809) 1907 0 R (id2835349) 1942 0 R (id2835356) 1943 0 R (id2835380) 1944 0 R (internals) 1008 0 R (modules) 1018 0 R (netbios) 1004 0 R (ntdomain) 1013 0 R (page.1) 933 0 R (page.10) 1288 0 R (page.11) 1293 0 R (page.12) 1308 0 R (page.13) 1315 0 R (page.14) 1325 0 R (page.15) 1330 0 R (page.16) 1337 0 R (page.17) 1347 0 R (page.18) 1362 0 R (page.19) 1382 0 R (page.2) 945 0 R (page.20) 1397 0 R (page.21) 1413 0 R (page.22) 1430 0 R (page.23) 1448 0 R (page.24) 1463 0 R (page.25) 1481 0 R (page.26) 1488 0 R (page.27) 1497 0 R (page.28) 1504 0 R (page.29) 1510 0 R (page.3) 962 0 R (page.30) 1518 0 R (page.31) 1522 0 R (page.32) 1530 0 R (page.33) 1534 0 R (page.34) 1544 0 R (page.35) 1561 0 R (page.36) 1577 0 R (page.37) 1590 0 R (page.38) 1603 0 R (page.39) 1613 0 R (page.4) 1026 0 R (page.40) 1622 0 R (page.41) 1628 0 R (page.42) 1634 0 R (page.43) 1641 0 R (page.44) 1650 0 R (page.45) 1660 0 R (page.46) 1667 0 R (page.47) 1681 0 R (page.48) 1693 0 R (page.49) 1702 0 R (page.5) 1071 0 R (page.50) 1715 0 R (page.51) 1725 0 R (page.52) 1734 0 R (page.53) 1745 0 R (page.54) 1752 0 R (page.55) 1761 0 R (page.56) 1770 0 R (page.57) 1777 0 R (page.58) 1789 0 R (page.59) 1795 0 R (page.6) 1125 0 R (page.60) 1799 0 R (page.61) 1803 0 R (page.62) 1809 0 R (page.63) 1814 0 R (page.64) 1823 0 R (page.65) 1832 0 R (page.66) 1837 0 R (page.67) 1843 0 R (page.68) 1850 0 R (page.69) 1854 0 R (page.7) 1178 0 R (page.70) 1862 0 R (page.71) 1868 0 R (page.72) 1874 0 R (page.73) 1880 0 R (page.74) 1885 0 R (page.75) 1892 0 R (page.76) 1897 0 R (page.77) 1901 0 R (page.78) 1905 0 R (page.79) 1916 0 R (page.8) 1233 0 R (page.80) 1923 0 R (page.81) 1931 0 R (page.82) 1935 0 R (page.83) 1941 0 R (page.84) 1948 0 R (page.85) 1954 0 R (page.9) 1282 0 R (parsing) 1009 0 R (printing) 1014 0 R (pwencrypt) 1017 0 R (rpc-plugin) 1019 0 R (sam) 1016 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.10.1) 262 0 R (section.10.2) 274 0 R (section.10.3) 418 0 R (section.10.4) 558 0 R (section.10.5) 622 0 R (section.10.6) 650 0 R (section.10.7) 678 0 R (section.10.8) 694 0 R (section.11.1) 730 0 R (section.11.2) 734 0 R (section.11.3) 738 0 R (section.11.4) 742 0 R (section.11.5) 746 0 R (section.12.1) 754 0 R (section.13.1) 762 0 R (section.13.2) 766 0 R (section.13.3) 770 0 R (section.13.4) 774 0 R (section.13.5) 790 0 R (section.13.6) 802 0 R (section.13.7) 806 0 R (section.14.1) 814 0 R (section.14.2) 818 0 R (section.14.3) 822 0 R (section.15.1) 830 0 R (section.15.2) 834 0 R (section.15.3) 846 0 R (section.16.1) 858 0 R (section.16.2) 862 0 R (section.17.1) 870 0 R (section.17.2) 882 0 R (section.17.3) 894 0 R (section.17.4) 902 0 R (section.18.1) 918 0 R (section.18.2) 922 0 R (section.2.1) 26 0 R (section.2.2) 30 0 R (section.2.3) 34 0 R (section.2.4) 38 0 R (section.2.5) 42 0 R (section.3.1) 50 0 R (section.3.2) 54 0 R (section.3.3) 58 0 R (section.3.4) 62 0 R (section.3.5) 66 0 R (section.5.1) 90 0 R (section.5.2) 94 0 R (section.5.3) 98 0 R (section.5.4) 162 0 R (section.5.5) 174 0 R (section.6.1) 182 0 R (section.6.2) 198 0 R (section.7.1) 210 0 R (section.7.2) 214 0 R (section.7.3) 218 0 R (section.7.4) 222 0 R (section.7.5) 226 0 R (section.7.6) 230 0 R (section.7.7) 234 0 R (section.7.8) 238 0 R (section.7.9) 242 0 R (section.9.1) 254 0 R (subsection.10.1.1) 266 0 R (subsection.10.1.2) 270 0 R (subsection.10.2.1) 278 0 R (subsection.10.2.2) 282 0 R (subsection.10.2.3) 294 0 R (subsection.10.3.1) 422 0 R (subsection.10.3.10) 522 0 R (subsection.10.3.11) 534 0 R (subsection.10.3.12) 546 0 R (subsection.10.3.2) 426 0 R (subsection.10.3.3) 462 0 R (subsection.10.3.4) 466 0 R (subsection.10.3.5) 470 0 R (subsection.10.3.6) 474 0 R (subsection.10.3.7) 486 0 R (subsection.10.3.8) 498 0 R (subsection.10.3.9) 510 0 R (subsection.10.4.1) 562 0 R (subsection.10.4.2) 574 0 R (subsection.10.4.3) 586 0 R (subsection.10.4.4) 598 0 R (subsection.10.4.5) 610 0 R (subsection.10.5.1) 626 0 R (subsection.10.5.2) 638 0 R (subsection.10.6.1) 654 0 R (subsection.10.6.2) 666 0 R (subsection.10.7.1) 682 0 R (subsection.10.7.2) 686 0 R (subsection.10.7.3) 690 0 R (subsection.10.8.1) 698 0 R (subsection.10.8.2) 710 0 R (subsection.13.4.1) 778 0 R (subsection.13.4.2) 782 0 R (subsection.13.4.3) 786 0 R (subsection.13.5.1) 794 0 R (subsection.13.5.2) 798 0 R (subsection.15.2.1) 838 0 R (subsection.15.2.2) 842 0 R (subsection.15.3.1) 850 0 R (subsection.17.1.1) 874 0 R (subsection.17.1.2) 878 0 R (subsection.17.2.1) 886 0 R (subsection.17.2.2) 890 0 R (subsection.17.3.1) 898 0 R (subsection.17.4.1) 906 0 R (subsection.17.4.2) 910 0 R (subsection.3.5.1) 70 0 R (subsection.3.5.2) 74 0 R (subsection.3.5.3) 78 0 R (subsection.5.3.1) 102 0 R (subsection.5.3.10) 138 0 R (subsection.5.3.11) 142 0 R (subsection.5.3.12) 146 0 R (subsection.5.3.13) 150 0 R (subsection.5.3.14) 154 0 R (subsection.5.3.15) 158 0 R (subsection.5.3.2) 106 0 R (subsection.5.3.3) 110 0 R (subsection.5.3.4) 114 0 R (subsection.5.3.5) 118 0 R (subsection.5.3.6) 122 0 R (subsection.5.3.7) 126 0 R (subsection.5.3.8) 130 0 R (subsection.5.3.9) 134 0 R (subsection.5.4.1) 166 0 R (subsection.5.4.2) 170 0 R (subsection.6.1.1) 186 0 R (subsection.6.1.2) 190 0 R (subsection.6.1.3) 194 0 R (subsection.6.2.1) 202 0 R (subsubsection.10.2.2.1) 286 0 R (subsubsection.10.2.2.2) 290 0 R (subsubsection.10.2.3.1) 298 0 R (subsubsection.10.2.3.10) 334 0 R (subsubsection.10.2.3.11) 338 0 R (subsubsection.10.2.3.12) 342 0 R (subsubsection.10.2.3.13) 346 0 R (subsubsection.10.2.3.14) 350 0 R (subsubsection.10.2.3.15) 354 0 R (subsubsection.10.2.3.16) 358 0 R (subsubsection.10.2.3.17) 362 0 R (subsubsection.10.2.3.18) 366 0 R (subsubsection.10.2.3.19) 370 0 R (subsubsection.10.2.3.2) 302 0 R (subsubsection.10.2.3.20) 374 0 R (subsubsection.10.2.3.21) 378 0 R (subsubsection.10.2.3.22) 382 0 R (subsubsection.10.2.3.23) 386 0 R (subsubsection.10.2.3.24) 390 0 R (subsubsection.10.2.3.25) 394 0 R (subsubsection.10.2.3.26) 398 0 R (subsubsection.10.2.3.27) 402 0 R (subsubsection.10.2.3.28) 406 0 R (subsubsection.10.2.3.29) 410 0 R (subsubsection.10.2.3.3) 306 0 R (subsubsection.10.2.3.30) 414 0 R (subsubsection.10.2.3.4) 310 0 R (subsubsection.10.2.3.5) 314 0 R (subsubsection.10.2.3.6) 318 0 R (subsubsection.10.2.3.7) 322 0 R (subsubsection.10.2.3.8) 326 0 R (subsubsection.10.2.3.9) 330 0 R (subsubsection.10.3.10.1) 526 0 R (subsubsection.10.3.10.2) 530 0 R (subsubsection.10.3.11.1) 538 0 R (subsubsection.10.3.11.2) 542 0 R (subsubsection.10.3.12.1) 550 0 R (subsubsection.10.3.12.2) 554 0 R (subsubsection.10.3.2.1) 430 0 R (subsubsection.10.3.2.2) 434 0 R (subsubsection.10.3.2.3) 438 0 R (subsubsection.10.3.2.4) 442 0 R (subsubsection.10.3.2.5) 446 0 R (subsubsection.10.3.2.6) 450 0 R (subsubsection.10.3.2.7) 454 0 R (subsubsection.10.3.2.8) 458 0 R (subsubsection.10.3.6.1) 478 0 R (subsubsection.10.3.6.2) 482 0 R (subsubsection.10.3.7.1) 490 0 R (subsubsection.10.3.7.2) 494 0 R (subsubsection.10.3.8.1) 502 0 R (subsubsection.10.3.8.2) 506 0 R (subsubsection.10.3.9.1) 514 0 R (subsubsection.10.3.9.2) 518 0 R (subsubsection.10.4.1.1) 566 0 R (subsubsection.10.4.1.2) 570 0 R (subsubsection.10.4.2.1) 578 0 R (subsubsection.10.4.2.2) 582 0 R (subsubsection.10.4.3.1) 590 0 R (subsubsection.10.4.3.2) 594 0 R (subsubsection.10.4.4.1) 602 0 R (subsubsection.10.4.4.2) 606 0 R (subsubsection.10.4.5.1) 614 0 R (subsubsection.10.4.5.2) 618 0 R (subsubsection.10.5.1.1) 630 0 R (subsubsection.10.5.1.2) 634 0 R (subsubsection.10.5.2.1) 642 0 R (subsubsection.10.5.2.2) 646 0 R (subsubsection.10.6.1.1) 658 0 R (subsubsection.10.6.1.2) 662 0 R (subsubsection.10.6.2.1) 670 0 R (subsubsection.10.6.2.2) 674 0 R (subsubsection.10.8.1.1) 702 0 R (subsubsection.10.8.1.2) 706 0 R (subsubsection.10.8.2.1) 714 0 R (subsubsection.10.8.2.2) 718 0 R (subsubsection.10.8.2.3) 722 0 R (tracing) 1011 0 R (unix-smb) 1010 0 R (vfs) 1020 0 R (windows-debug) 1012 0 R (wins) 1015 0 R] +/Names [(CodingSuggestions) 1007 0 R (Doc-Start) 934 0 R (Item.1) 1295 0 R (Item.10) 1317 0 R (Item.100) 1554 0 R (Item.101) 1555 0 R (Item.102) 1556 0 R (Item.103) 1557 0 R (Item.104) 1562 0 R (Item.105) 1567 0 R (Item.106) 1568 0 R (Item.107) 1569 0 R (Item.108) 1570 0 R (Item.109) 1571 0 R (Item.11) 1318 0 R (Item.110) 1778 0 R (Item.111) 1779 0 R (Item.112) 1780 0 R (Item.113) 1781 0 R (Item.114) 1782 0 R (Item.115) 1783 0 R (Item.116) 1784 0 R (Item.117) 1785 0 R (Item.118) 1908 0 R (Item.119) 1909 0 R (Item.12) 1319 0 R (Item.120) 1910 0 R (Item.121) 1911 0 R (Item.122) 1912 0 R (Item.123) 1917 0 R (Item.124) 1918 0 R (Item.125) 1924 0 R (Item.126) 1925 0 R (Item.127) 1927 0 R (Item.128) 1936 0 R (Item.129) 1937 0 R (Item.13) 1320 0 R (Item.14) 1333 0 R (Item.15) 1338 0 R (Item.16) 1339 0 R (Item.17) 1350 0 R (Item.18) 1351 0 R (Item.19) 1352 0 R (Item.2) 1296 0 R (Item.20) 1353 0 R (Item.21) 1354 0 R (Item.22) 1355 0 R (Item.23) 1356 0 R (Item.24) 1357 0 R (Item.25) 1358 0 R (Item.26) 1363 0 R (Item.27) 1364 0 R (Item.28) 1365 0 R (Item.29) 1366 0 R (Item.3) 1297 0 R (Item.30) 1367 0 R (Item.31) 1368 0 R (Item.32) 1369 0 R (Item.33) 1370 0 R (Item.34) 1371 0 R (Item.35) 1372 0 R (Item.36) 1373 0 R (Item.37) 1374 0 R (Item.38) 1375 0 R (Item.39) 1376 0 R (Item.4) 1300 0 R (Item.40) 1377 0 R (Item.41) 1378 0 R (Item.42) 1385 0 R (Item.43) 1386 0 R (Item.44) 1387 0 R (Item.45) 1388 0 R (Item.46) 1389 0 R (Item.47) 1390 0 R (Item.48) 1391 0 R (Item.49) 1392 0 R (Item.5) 1301 0 R (Item.50) 1398 0 R (Item.51) 1399 0 R (Item.52) 1400 0 R (Item.53) 1423 0 R (Item.54) 1424 0 R (Item.55) 1425 0 R (Item.56) 1426 0 R (Item.57) 1431 0 R (Item.58) 1432 0 R (Item.59) 1433 0 R (Item.6) 1302 0 R (Item.60) 1434 0 R (Item.61) 1435 0 R (Item.62) 1436 0 R (Item.63) 1437 0 R (Item.64) 1438 0 R (Item.65) 1439 0 R (Item.66) 1440 0 R (Item.67) 1442 0 R (Item.68) 1443 0 R (Item.69) 1444 0 R (Item.7) 1303 0 R (Item.70) 1450 0 R (Item.71) 1451 0 R (Item.72) 1452 0 R (Item.73) 1453 0 R (Item.74) 1454 0 R (Item.75) 1455 0 R (Item.76) 1456 0 R (Item.77) 1457 0 R (Item.78) 1458 0 R (Item.79) 1459 0 R (Item.8) 1304 0 R (Item.80) 1465 0 R (Item.81) 1466 0 R (Item.82) 1467 0 R (Item.83) 1468 0 R (Item.84) 1469 0 R (Item.85) 1470 0 R (Item.86) 1471 0 R (Item.87) 1473 0 R (Item.88) 1474 0 R (Item.89) 1475 0 R (Item.9) 1309 0 R (Item.90) 1476 0 R (Item.91) 1489 0 R (Item.92) 1490 0 R (Item.93) 1491 0 R (Item.94) 1492 0 R (Item.95) 1536 0 R (Item.96) 1537 0 R (Item.97) 1538 0 R (Item.98) 1539 0 R (Item.99) 1540 0 R (Packaging) 1021 0 R (SMBPASSWDFILEFORMAT) 1845 0 R (architecture) 1005 0 R (chapter*.1) 1027 0 R (chapter.1) 6 0 R (chapter.10) 258 0 R (chapter.11) 726 0 R (chapter.12) 750 0 R (chapter.13) 758 0 R (chapter.14) 810 0 R (chapter.15) 826 0 R (chapter.16) 854 0 R (chapter.17) 866 0 R (chapter.18) 914 0 R (chapter.19) 926 0 R (chapter.2) 22 0 R (chapter.3) 46 0 R (chapter.4) 82 0 R (chapter.5) 86 0 R (chapter.6) 178 0 R (chapter.7) 206 0 R (chapter.8) 246 0 R (chapter.9) 250 0 R (contributing) 1022 0 R (debug) 1006 0 R (id2738317) 1310 0 R (id2738368) 1311 0 R (id2738434) 1316 0 R (id2738557) 1326 0 R (id2738687) 1331 0 R (id2738732) 1332 0 R (id2739102) 1294 0 R (id2739152) 1298 0 R (id2739189) 1299 0 R (id2739211) 1283 0 R (id2739295) 1284 0 R (id2739325) 1289 0 R (id2804843) 1340 0 R (id2804850) 1341 0 R (id2804870) 1342 0 R (id2804893) 1343 0 R (id2805223) 1401 0 R (id2805236) 1402 0 R (id2805250) 1403 0 R (id2805264) 1404 0 R (id2805278) 1405 0 R (id2805293) 1406 0 R (id2805308) 1407 0 R (id2805322) 1408 0 R (id2805336) 1409 0 R (id2805351) 1414 0 R (id2805365) 1415 0 R (id2805380) 1416 0 R (id2805394) 1417 0 R (id2806096) 1418 0 R (id2806110) 1419 0 R (id2806125) 1420 0 R (id2806141) 1421 0 R (id2806176) 1422 0 R (id2806328) 1441 0 R (id2806433) 1383 0 R (id2806458) 1384 0 R (id2807011) 1449 0 R (id2807131) 1464 0 R (id2807216) 1472 0 R (id2807270) 1477 0 R (id2807334) 1482 0 R (id2807430) 1483 0 R (id2808283) 1493 0 R (id2808347) 1506 0 R (id2808409) 1511 0 R (id2808440) 1512 0 R (id2808465) 1513 0 R (id2808510) 1514 0 R (id2808961) 1498 0 R (id2808983) 1499 0 R (id2809048) 1500 0 R (id2809084) 1505 0 R (id2809522) 1545 0 R (id2809720) 1563 0 R (id2809754) 1564 0 R (id2810342) 1565 0 R (id2810349) 1566 0 R (id2810424) 1572 0 R (id2810431) 1573 0 R (id2810505) 1578 0 R (id2810637) 1579 0 R (id2810644) 1580 0 R (id2810655) 1581 0 R (id2810666) 1582 0 R (id2810680) 1583 0 R (id2810692) 1584 0 R (id2810787) 1535 0 R (id2811049) 1585 0 R (id2811063) 1586 0 R (id2811119) 1591 0 R (id2811161) 1592 0 R (id2811189) 1593 0 R (id2811231) 1594 0 R (id2811317) 1595 0 R (id2811410) 1596 0 R (id2811437) 1597 0 R (id2811524) 1598 0 R (id2811593) 1604 0 R (id2820210) 1605 0 R (id2820288) 1606 0 R (id2820329) 1607 0 R (id2820411) 1608 0 R (id2820464) 1609 0 R (id2820634) 1614 0 R (id2820737) 1615 0 R (id2820776) 1616 0 R (id2820919) 1617 0 R (id2821032) 1618 0 R (id2821596) 1623 0 R (id2821690) 1624 0 R (id2821732) 1629 0 R (id2821901) 1630 0 R (id2822368) 1635 0 R (id2822380) 1636 0 R (id2822482) 1637 0 R (id2822672) 1642 0 R (id2822805) 1643 0 R (id2822831) 1644 0 R (id2822870) 1645 0 R (id2823010) 1651 0 R (id2823050) 1652 0 R (id2823201) 1653 0 R (id2823273) 1654 0 R (id2823353) 1655 0 R (id2823399) 1656 0 R (id2823579) 1661 0 R (id2823744) 1662 0 R (id2823757) 1663 0 R (id2823827) 1668 0 R (id2823869) 1669 0 R (id2823883) 1670 0 R (id2823922) 1671 0 R (id2823975) 1672 0 R (id2823983) 1673 0 R (id2823995) 1674 0 R (id2824067) 1675 0 R (id2824074) 1676 0 R (id2824087) 1677 0 R (id2824176) 1682 0 R (id2824183) 1683 0 R (id2824210) 1684 0 R (id2824242) 1685 0 R (id2824256) 1686 0 R (id2824355) 1687 0 R (id2824452) 1688 0 R (id2824466) 1689 0 R (id2824579) 1694 0 R (id2824678) 1695 0 R (id2824838) 1696 0 R (id2824870) 1697 0 R (id2824940) 1698 0 R (id2824973) 1703 0 R (id2825004) 1704 0 R (id2825072) 1705 0 R (id2825120) 1706 0 R (id2825159) 1707 0 R (id2825201) 1708 0 R (id2825235) 1709 0 R (id2825250) 1710 0 R (id2825276) 1716 0 R (id2825338) 1717 0 R (id2825353) 1718 0 R (id2825380) 1719 0 R (id2825430) 1720 0 R (id2825447) 1721 0 R (id2825461) 1726 0 R (id2825587) 1727 0 R (id2825708) 1728 0 R (id2825736) 1729 0 R (id2825919) 1730 0 R (id2826034) 1735 0 R (id2826079) 1736 0 R (id2826100) 1737 0 R (id2826225) 1738 0 R (id2826298) 1739 0 R (id2826312) 1740 0 R (id2826352) 1741 0 R (id2826415) 1746 0 R (id2826422) 1747 0 R (id2826584) 1748 0 R (id2826664) 1753 0 R (id2826714) 1754 0 R (id2826754) 1755 0 R (id2826761) 1756 0 R (id2826887) 1757 0 R (id2827068) 1762 0 R (id2827083) 1763 0 R (id2827131) 1764 0 R (id2827190) 1765 0 R (id2827512) 1790 0 R (id2827525) 1791 0 R (id2827858) 1810 0 R (id2827986) 1815 0 R (id2828012) 1816 0 R (id2828081) 1817 0 R (id2828088) 1818 0 R (id2828104) 1819 0 R (id2828130) 1824 0 R (id2828152) 1825 0 R (id2828159) 1826 0 R (id2828181) 1804 0 R (id2828612) 1771 0 R (id2828628) 1772 0 R (id2828720) 1773 0 R (id2829402) 1827 0 R (id2829432) 1828 0 R (id2829518) 1833 0 R (id2830248) 1838 0 R (id2830273) 1839 0 R (id2830367) 1844 0 R (id2831014) 1893 0 R (id2831234) 1906 0 R (id2832151) 1855 0 R (id2832196) 1856 0 R (id2832226) 1857 0 R (id2832266) 1858 0 R (id2832295) 1863 0 R (id2832356) 1864 0 R (id2832513) 1869 0 R (id2832532) 1870 0 R (id2832836) 1907 0 R (id2833247) 1942 0 R (id2833254) 1943 0 R (id2833278) 1944 0 R (id2833342) 1949 0 R (id2833371) 1950 0 R (id2834775) 1875 0 R (id2834781) 1876 0 R (id2834882) 1886 0 R (id2834946) 1887 0 R (id2834954) 1888 0 R (internals) 1008 0 R (modules) 1018 0 R (netbios) 1004 0 R (ntdomain) 1013 0 R (page.1) 933 0 R (page.10) 1288 0 R (page.11) 1293 0 R (page.12) 1308 0 R (page.13) 1315 0 R (page.14) 1325 0 R (page.15) 1330 0 R (page.16) 1337 0 R (page.17) 1347 0 R (page.18) 1362 0 R (page.19) 1382 0 R (page.2) 945 0 R (page.20) 1397 0 R (page.21) 1413 0 R (page.22) 1430 0 R (page.23) 1448 0 R (page.24) 1463 0 R (page.25) 1481 0 R (page.26) 1488 0 R (page.27) 1497 0 R (page.28) 1504 0 R (page.29) 1510 0 R (page.3) 962 0 R (page.30) 1518 0 R (page.31) 1522 0 R (page.32) 1530 0 R (page.33) 1534 0 R (page.34) 1544 0 R (page.35) 1561 0 R (page.36) 1577 0 R (page.37) 1590 0 R (page.38) 1603 0 R (page.39) 1613 0 R (page.4) 1026 0 R (page.40) 1622 0 R (page.41) 1628 0 R (page.42) 1634 0 R (page.43) 1641 0 R (page.44) 1650 0 R (page.45) 1660 0 R (page.46) 1667 0 R (page.47) 1681 0 R (page.48) 1693 0 R (page.49) 1702 0 R (page.5) 1071 0 R (page.50) 1715 0 R (page.51) 1725 0 R (page.52) 1734 0 R (page.53) 1745 0 R (page.54) 1752 0 R (page.55) 1761 0 R (page.56) 1770 0 R (page.57) 1777 0 R (page.58) 1789 0 R (page.59) 1795 0 R (page.6) 1125 0 R (page.60) 1799 0 R (page.61) 1803 0 R (page.62) 1809 0 R (page.63) 1814 0 R (page.64) 1823 0 R (page.65) 1832 0 R (page.66) 1837 0 R (page.67) 1843 0 R (page.68) 1850 0 R (page.69) 1854 0 R (page.7) 1178 0 R (page.70) 1862 0 R (page.71) 1868 0 R (page.72) 1874 0 R (page.73) 1880 0 R (page.74) 1885 0 R (page.75) 1892 0 R (page.76) 1897 0 R (page.77) 1901 0 R (page.78) 1905 0 R (page.79) 1916 0 R (page.8) 1233 0 R (page.80) 1923 0 R (page.81) 1931 0 R (page.82) 1935 0 R (page.83) 1941 0 R (page.84) 1948 0 R (page.85) 1954 0 R (page.9) 1282 0 R (parsing) 1009 0 R (printing) 1014 0 R (pwencrypt) 1017 0 R (rpc-plugin) 1019 0 R (sam) 1016 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.10.1) 262 0 R (section.10.2) 274 0 R (section.10.3) 418 0 R (section.10.4) 558 0 R (section.10.5) 622 0 R (section.10.6) 650 0 R (section.10.7) 678 0 R (section.10.8) 694 0 R (section.11.1) 730 0 R (section.11.2) 734 0 R (section.11.3) 738 0 R (section.11.4) 742 0 R (section.11.5) 746 0 R (section.12.1) 754 0 R (section.13.1) 762 0 R (section.13.2) 766 0 R (section.13.3) 770 0 R (section.13.4) 774 0 R (section.13.5) 790 0 R (section.13.6) 802 0 R (section.13.7) 806 0 R (section.14.1) 814 0 R (section.14.2) 818 0 R (section.14.3) 822 0 R (section.15.1) 830 0 R (section.15.2) 834 0 R (section.15.3) 846 0 R (section.16.1) 858 0 R (section.16.2) 862 0 R (section.17.1) 870 0 R (section.17.2) 882 0 R (section.17.3) 894 0 R (section.17.4) 902 0 R (section.18.1) 918 0 R (section.18.2) 922 0 R (section.2.1) 26 0 R (section.2.2) 30 0 R (section.2.3) 34 0 R (section.2.4) 38 0 R (section.2.5) 42 0 R (section.3.1) 50 0 R (section.3.2) 54 0 R (section.3.3) 58 0 R (section.3.4) 62 0 R (section.3.5) 66 0 R (section.5.1) 90 0 R (section.5.2) 94 0 R (section.5.3) 98 0 R (section.5.4) 162 0 R (section.5.5) 174 0 R (section.6.1) 182 0 R (section.6.2) 198 0 R (section.7.1) 210 0 R (section.7.2) 214 0 R (section.7.3) 218 0 R (section.7.4) 222 0 R (section.7.5) 226 0 R (section.7.6) 230 0 R (section.7.7) 234 0 R (section.7.8) 238 0 R (section.7.9) 242 0 R (section.9.1) 254 0 R (subsection.10.1.1) 266 0 R (subsection.10.1.2) 270 0 R (subsection.10.2.1) 278 0 R (subsection.10.2.2) 282 0 R (subsection.10.2.3) 294 0 R (subsection.10.3.1) 422 0 R (subsection.10.3.10) 522 0 R (subsection.10.3.11) 534 0 R (subsection.10.3.12) 546 0 R (subsection.10.3.2) 426 0 R (subsection.10.3.3) 462 0 R (subsection.10.3.4) 466 0 R (subsection.10.3.5) 470 0 R (subsection.10.3.6) 474 0 R (subsection.10.3.7) 486 0 R (subsection.10.3.8) 498 0 R (subsection.10.3.9) 510 0 R (subsection.10.4.1) 562 0 R (subsection.10.4.2) 574 0 R (subsection.10.4.3) 586 0 R (subsection.10.4.4) 598 0 R (subsection.10.4.5) 610 0 R (subsection.10.5.1) 626 0 R (subsection.10.5.2) 638 0 R (subsection.10.6.1) 654 0 R (subsection.10.6.2) 666 0 R (subsection.10.7.1) 682 0 R (subsection.10.7.2) 686 0 R (subsection.10.7.3) 690 0 R (subsection.10.8.1) 698 0 R (subsection.10.8.2) 710 0 R (subsection.13.4.1) 778 0 R (subsection.13.4.2) 782 0 R (subsection.13.4.3) 786 0 R (subsection.13.5.1) 794 0 R (subsection.13.5.2) 798 0 R (subsection.15.2.1) 838 0 R (subsection.15.2.2) 842 0 R (subsection.15.3.1) 850 0 R (subsection.17.1.1) 874 0 R (subsection.17.1.2) 878 0 R (subsection.17.2.1) 886 0 R (subsection.17.2.2) 890 0 R (subsection.17.3.1) 898 0 R (subsection.17.4.1) 906 0 R (subsection.17.4.2) 910 0 R (subsection.3.5.1) 70 0 R (subsection.3.5.2) 74 0 R (subsection.3.5.3) 78 0 R (subsection.5.3.1) 102 0 R (subsection.5.3.10) 138 0 R (subsection.5.3.11) 142 0 R (subsection.5.3.12) 146 0 R (subsection.5.3.13) 150 0 R (subsection.5.3.14) 154 0 R (subsection.5.3.15) 158 0 R (subsection.5.3.2) 106 0 R (subsection.5.3.3) 110 0 R (subsection.5.3.4) 114 0 R (subsection.5.3.5) 118 0 R (subsection.5.3.6) 122 0 R (subsection.5.3.7) 126 0 R (subsection.5.3.8) 130 0 R (subsection.5.3.9) 134 0 R (subsection.5.4.1) 166 0 R (subsection.5.4.2) 170 0 R (subsection.6.1.1) 186 0 R (subsection.6.1.2) 190 0 R (subsection.6.1.3) 194 0 R (subsection.6.2.1) 202 0 R (subsubsection.10.2.2.1) 286 0 R (subsubsection.10.2.2.2) 290 0 R (subsubsection.10.2.3.1) 298 0 R (subsubsection.10.2.3.10) 334 0 R (subsubsection.10.2.3.11) 338 0 R (subsubsection.10.2.3.12) 342 0 R (subsubsection.10.2.3.13) 346 0 R (subsubsection.10.2.3.14) 350 0 R (subsubsection.10.2.3.15) 354 0 R (subsubsection.10.2.3.16) 358 0 R (subsubsection.10.2.3.17) 362 0 R (subsubsection.10.2.3.18) 366 0 R (subsubsection.10.2.3.19) 370 0 R (subsubsection.10.2.3.2) 302 0 R (subsubsection.10.2.3.20) 374 0 R (subsubsection.10.2.3.21) 378 0 R (subsubsection.10.2.3.22) 382 0 R (subsubsection.10.2.3.23) 386 0 R (subsubsection.10.2.3.24) 390 0 R (subsubsection.10.2.3.25) 394 0 R (subsubsection.10.2.3.26) 398 0 R (subsubsection.10.2.3.27) 402 0 R (subsubsection.10.2.3.28) 406 0 R (subsubsection.10.2.3.29) 410 0 R (subsubsection.10.2.3.3) 306 0 R (subsubsection.10.2.3.30) 414 0 R (subsubsection.10.2.3.4) 310 0 R (subsubsection.10.2.3.5) 314 0 R (subsubsection.10.2.3.6) 318 0 R (subsubsection.10.2.3.7) 322 0 R (subsubsection.10.2.3.8) 326 0 R (subsubsection.10.2.3.9) 330 0 R (subsubsection.10.3.10.1) 526 0 R (subsubsection.10.3.10.2) 530 0 R (subsubsection.10.3.11.1) 538 0 R (subsubsection.10.3.11.2) 542 0 R (subsubsection.10.3.12.1) 550 0 R (subsubsection.10.3.12.2) 554 0 R (subsubsection.10.3.2.1) 430 0 R (subsubsection.10.3.2.2) 434 0 R (subsubsection.10.3.2.3) 438 0 R (subsubsection.10.3.2.4) 442 0 R (subsubsection.10.3.2.5) 446 0 R (subsubsection.10.3.2.6) 450 0 R (subsubsection.10.3.2.7) 454 0 R (subsubsection.10.3.2.8) 458 0 R (subsubsection.10.3.6.1) 478 0 R (subsubsection.10.3.6.2) 482 0 R (subsubsection.10.3.7.1) 490 0 R (subsubsection.10.3.7.2) 494 0 R (subsubsection.10.3.8.1) 502 0 R (subsubsection.10.3.8.2) 506 0 R (subsubsection.10.3.9.1) 514 0 R (subsubsection.10.3.9.2) 518 0 R (subsubsection.10.4.1.1) 566 0 R (subsubsection.10.4.1.2) 570 0 R (subsubsection.10.4.2.1) 578 0 R (subsubsection.10.4.2.2) 582 0 R (subsubsection.10.4.3.1) 590 0 R (subsubsection.10.4.3.2) 594 0 R (subsubsection.10.4.4.1) 602 0 R (subsubsection.10.4.4.2) 606 0 R (subsubsection.10.4.5.1) 614 0 R (subsubsection.10.4.5.2) 618 0 R (subsubsection.10.5.1.1) 630 0 R (subsubsection.10.5.1.2) 634 0 R (subsubsection.10.5.2.1) 642 0 R (subsubsection.10.5.2.2) 646 0 R (subsubsection.10.6.1.1) 658 0 R (subsubsection.10.6.1.2) 662 0 R (subsubsection.10.6.2.1) 670 0 R (subsubsection.10.6.2.2) 674 0 R (subsubsection.10.8.1.1) 702 0 R (subsubsection.10.8.1.2) 706 0 R (subsubsection.10.8.2.1) 714 0 R (subsubsection.10.8.2.2) 718 0 R (subsubsection.10.8.2.3) 722 0 R (tracing) 1011 0 R (unix-smb) 1010 0 R (vfs) 1020 0 R (windows-debug) 1012 0 R (wins) 1015 0 R] /Limits [(CodingSuggestions) (wins)] >> endobj 1979 0 obj << @@ -10234,11 +10146,13 @@ endobj /Names 1980 0 R /PageMode /UseOutlines /URI<</Base()>> /ViewerPreferences<<>> /OpenAction 929 0 R -/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10b) +/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10a) >> endobj 1982 0 obj << -/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10b)/Keywords() -/CreationDate (D:20030701232600) +/Producer (pdfTeX-1.10a) +/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10a)/Keywords() +/Creator (TeX) +/CreationDate (D:20030715231700) >> endobj xref 0 1983 @@ -10248,1983 +10162,1983 @@ xref 0000000004 00000 f 0000000000 00000 f 0000000009 00000 n -0000093861 00000 n -0000481071 00000 n +0000086708 00000 n +0000450715 00000 n 0000000054 00000 n 0000000130 00000 n -0000093984 00000 n -0000480999 00000 n +0000086831 00000 n +0000450643 00000 n 0000000177 00000 n 0000000207 00000 n -0000094108 00000 n -0000480913 00000 n +0000086955 00000 n +0000450557 00000 n 0000000255 00000 n 0000000295 00000 n -0000097715 00000 n -0000480840 00000 n +0000090481 00000 n +0000450484 00000 n 0000000343 00000 n 0000000378 00000 n -0000101373 00000 n -0000480715 00000 n +0000093909 00000 n +0000450359 00000 n 0000000424 00000 n 0000000463 00000 n -0000101497 00000 n -0000480641 00000 n +0000094033 00000 n +0000450285 00000 n 0000000511 00000 n 0000000546 00000 n -0000101809 00000 n -0000480554 00000 n +0000094345 00000 n +0000450198 00000 n 0000000594 00000 n 0000000641 00000 n -0000101932 00000 n -0000480467 00000 n +0000094468 00000 n +0000450111 00000 n 0000000689 00000 n 0000000726 00000 n -0000106004 00000 n -0000480380 00000 n +0000098466 00000 n +0000450024 00000 n 0000000774 00000 n 0000000811 00000 n -0000106127 00000 n -0000480306 00000 n +0000098589 00000 n +0000449950 00000 n 0000000859 00000 n 0000000893 00000 n -0000108825 00000 n -0000480180 00000 n +0000101133 00000 n +0000449824 00000 n 0000000939 00000 n 0000000982 00000 n -0000108949 00000 n -0000480106 00000 n +0000101257 00000 n +0000449750 00000 n 0000001030 00000 n 0000001070 00000 n -0000111717 00000 n -0000480019 00000 n +0000103997 00000 n +0000449663 00000 n 0000001118 00000 n 0000001160 00000 n -0000114029 00000 n -0000479932 00000 n +0000106234 00000 n +0000449576 00000 n 0000001208 00000 n 0000001253 00000 n -0000114153 00000 n -0000479845 00000 n +0000106358 00000 n +0000449489 00000 n 0000001301 00000 n 0000001346 00000 n -0000116874 00000 n -0000479734 00000 n +0000108945 00000 n +0000449378 00000 n 0000001394 00000 n 0000001430 00000 n -0000116997 00000 n -0000479660 00000 n +0000109068 00000 n +0000449304 00000 n 0000001483 00000 n 0000001519 00000 n -0000117121 00000 n -0000479573 00000 n +0000109192 00000 n +0000449217 00000 n 0000001572 00000 n 0000001607 00000 n -0000117244 00000 n -0000479499 00000 n +0000109315 00000 n +0000449143 00000 n 0000001660 00000 n 0000001712 00000 n -0000121870 00000 n -0000479410 00000 n +0000113613 00000 n +0000449054 00000 n 0000001758 00000 n 0000001797 00000 n -0000131620 00000 n -0000479282 00000 n +0000122466 00000 n +0000448926 00000 n 0000001843 00000 n 0000001879 00000 n -0000131744 00000 n -0000479208 00000 n +0000122590 00000 n +0000448852 00000 n 0000001927 00000 n 0000001968 00000 n -0000131867 00000 n -0000479121 00000 n +0000122713 00000 n +0000448765 00000 n 0000002016 00000 n 0000002056 00000 n -0000135341 00000 n -0000478992 00000 n +0000125897 00000 n +0000448636 00000 n 0000002104 00000 n 0000002149 00000 n -0000135464 00000 n -0000478914 00000 n +0000126020 00000 n +0000448558 00000 n 0000002203 00000 n 0000002244 00000 n -0000135588 00000 n -0000478822 00000 n +0000126144 00000 n +0000448466 00000 n 0000002298 00000 n 0000002339 00000 n -0000135713 00000 n -0000478730 00000 n +0000126269 00000 n +0000448374 00000 n 0000002393 00000 n 0000002439 00000 n -0000135837 00000 n -0000478638 00000 n +0000126393 00000 n +0000448282 00000 n 0000002493 00000 n 0000002534 00000 n -0000135962 00000 n -0000478546 00000 n +0000126518 00000 n +0000448190 00000 n 0000002588 00000 n 0000002629 00000 n -0000136087 00000 n -0000478454 00000 n +0000126643 00000 n +0000448098 00000 n 0000002683 00000 n 0000002725 00000 n -0000136212 00000 n -0000478362 00000 n +0000126768 00000 n +0000448006 00000 n 0000002779 00000 n 0000002821 00000 n -0000136336 00000 n -0000478270 00000 n +0000126892 00000 n +0000447914 00000 n 0000002875 00000 n 0000002921 00000 n -0000138977 00000 n -0000478178 00000 n +0000129227 00000 n +0000447822 00000 n 0000002975 00000 n 0000003021 00000 n -0000139101 00000 n -0000478086 00000 n +0000129351 00000 n +0000447730 00000 n 0000003076 00000 n 0000003124 00000 n -0000139226 00000 n -0000477994 00000 n +0000129476 00000 n +0000447638 00000 n 0000003179 00000 n 0000003227 00000 n -0000139351 00000 n -0000477902 00000 n +0000129601 00000 n +0000447546 00000 n 0000003282 00000 n 0000003325 00000 n -0000139474 00000 n -0000477810 00000 n +0000129724 00000 n +0000447454 00000 n 0000003380 00000 n 0000003423 00000 n -0000139599 00000 n -0000477718 00000 n +0000129849 00000 n +0000447362 00000 n 0000003478 00000 n 0000003526 00000 n -0000139724 00000 n -0000477640 00000 n +0000129974 00000 n +0000447284 00000 n 0000003581 00000 n 0000003629 00000 n -0000139848 00000 n -0000477510 00000 n +0000130098 00000 n +0000447154 00000 n 0000003678 00000 n 0000003723 00000 n -0000139973 00000 n -0000477431 00000 n +0000130223 00000 n +0000447075 00000 n 0000003777 00000 n 0000003813 00000 n -0000145052 00000 n -0000477352 00000 n +0000134944 00000 n +0000446996 00000 n 0000003867 00000 n 0000003905 00000 n -0000146948 00000 n -0000477274 00000 n +0000136612 00000 n +0000446918 00000 n 0000003954 00000 n 0000003998 00000 n -0000150637 00000 n -0000477142 00000 n +0000140004 00000 n +0000446786 00000 n 0000004045 00000 n 0000004084 00000 n -0000150762 00000 n -0000477024 00000 n +0000140129 00000 n +0000446668 00000 n 0000004133 00000 n 0000004173 00000 n -0000151328 00000 n -0000476945 00000 n +0000140695 00000 n +0000446589 00000 n 0000004227 00000 n 0000004275 00000 n -0000151704 00000 n -0000476852 00000 n +0000141071 00000 n +0000446496 00000 n 0000004329 00000 n 0000004384 00000 n -0000153670 00000 n -0000476773 00000 n +0000143010 00000 n +0000446417 00000 n 0000004438 00000 n 0000004488 00000 n -0000153795 00000 n -0000476655 00000 n +0000143135 00000 n +0000446299 00000 n 0000004537 00000 n 0000004567 00000 n -0000155916 00000 n -0000476590 00000 n +0000145152 00000 n +0000446234 00000 n 0000004621 00000 n 0000004661 00000 n -0000159458 00000 n -0000476457 00000 n +0000148630 00000 n +0000446101 00000 n 0000004708 00000 n 0000004753 00000 n -0000159583 00000 n -0000476378 00000 n +0000148755 00000 n +0000446022 00000 n 0000004802 00000 n 0000004838 00000 n -0000159708 00000 n -0000476285 00000 n +0000148880 00000 n +0000445929 00000 n 0000004887 00000 n 0000004920 00000 n -0000159833 00000 n -0000476192 00000 n +0000149005 00000 n +0000445836 00000 n 0000004969 00000 n 0000005007 00000 n -0000163657 00000 n -0000476099 00000 n +0000152791 00000 n +0000445743 00000 n 0000005056 00000 n 0000005089 00000 n -0000163782 00000 n -0000476006 00000 n +0000152916 00000 n +0000445650 00000 n 0000005138 00000 n 0000005169 00000 n -0000167936 00000 n -0000475913 00000 n +0000156882 00000 n +0000445557 00000 n 0000005218 00000 n 0000005252 00000 n -0000168061 00000 n -0000475820 00000 n +0000157007 00000 n +0000445464 00000 n 0000005301 00000 n 0000005338 00000 n -0000168186 00000 n -0000475727 00000 n +0000157132 00000 n +0000445371 00000 n 0000005387 00000 n 0000005423 00000 n -0000168311 00000 n -0000475648 00000 n +0000157257 00000 n +0000445292 00000 n 0000005472 00000 n 0000005515 00000 n -0000174329 00000 n -0000475554 00000 n +0000163244 00000 n +0000445198 00000 n 0000005562 00000 n 0000005610 00000 n -0000177167 00000 n -0000475421 00000 n +0000165923 00000 n +0000445065 00000 n 0000005657 00000 n 0000005716 00000 n -0000177292 00000 n -0000475356 00000 n +0000166048 00000 n +0000445000 00000 n 0000005765 00000 n 0000005814 00000 n -0000183266 00000 n -0000475223 00000 n +0000171787 00000 n +0000444867 00000 n 0000005862 00000 n 0000005900 00000 n -0000183391 00000 n -0000475105 00000 n +0000171912 00000 n +0000444749 00000 n 0000005950 00000 n 0000005987 00000 n -0000187432 00000 n -0000475026 00000 n +0000175663 00000 n +0000444670 00000 n 0000006042 00000 n 0000006076 00000 n -0000187557 00000 n -0000474947 00000 n +0000175788 00000 n +0000444591 00000 n 0000006131 00000 n 0000006165 00000 n -0000187682 00000 n -0000474815 00000 n +0000175913 00000 n +0000444459 00000 n 0000006215 00000 n 0000006260 00000 n -0000187807 00000 n -0000474736 00000 n +0000176038 00000 n +0000444380 00000 n 0000006315 00000 n 0000006347 00000 n -0000188245 00000 n -0000474604 00000 n +0000176476 00000 n +0000444248 00000 n 0000006402 00000 n 0000006441 00000 n -0000188368 00000 n -0000474525 00000 n +0000176599 00000 n +0000444169 00000 n 0000006501 00000 n 0000006547 00000 n -0000191169 00000 n -0000474446 00000 n +0000178771 00000 n +0000444090 00000 n 0000006607 00000 n 0000006653 00000 n -0000191294 00000 n -0000474327 00000 n +0000178896 00000 n +0000443971 00000 n 0000006708 00000 n 0000006745 00000 n -0000191417 00000 n -0000474248 00000 n +0000179019 00000 n +0000443892 00000 n 0000006805 00000 n 0000006840 00000 n -0000191542 00000 n -0000474155 00000 n +0000179144 00000 n +0000443799 00000 n 0000006900 00000 n 0000006933 00000 n -0000191667 00000 n -0000474062 00000 n +0000179269 00000 n +0000443706 00000 n 0000006993 00000 n 0000007027 00000 n -0000191792 00000 n -0000473969 00000 n +0000179394 00000 n +0000443613 00000 n 0000007087 00000 n 0000007122 00000 n -0000191917 00000 n -0000473876 00000 n +0000179519 00000 n +0000443520 00000 n 0000007182 00000 n 0000007246 00000 n -0000192040 00000 n -0000473783 00000 n +0000179642 00000 n +0000443427 00000 n 0000007306 00000 n 0000007349 00000 n -0000192164 00000 n -0000473690 00000 n +0000179766 00000 n +0000443334 00000 n 0000007409 00000 n 0000007470 00000 n -0000195297 00000 n -0000473597 00000 n +0000182177 00000 n +0000443241 00000 n 0000007530 00000 n 0000007612 00000 n -0000195422 00000 n -0000473504 00000 n +0000182302 00000 n +0000443148 00000 n 0000007672 00000 n 0000007726 00000 n -0000195547 00000 n -0000473411 00000 n +0000182427 00000 n +0000443055 00000 n 0000007787 00000 n 0000007857 00000 n -0000195672 00000 n -0000473318 00000 n +0000182552 00000 n +0000442962 00000 n 0000007918 00000 n 0000007982 00000 n -0000195796 00000 n -0000473225 00000 n +0000182676 00000 n +0000442869 00000 n 0000008043 00000 n 0000008106 00000 n -0000195921 00000 n -0000473132 00000 n +0000182801 00000 n +0000442776 00000 n 0000008167 00000 n 0000008229 00000 n -0000196046 00000 n -0000473039 00000 n +0000182926 00000 n +0000442683 00000 n 0000008290 00000 n 0000008380 00000 n -0000196171 00000 n -0000472946 00000 n +0000183051 00000 n +0000442590 00000 n 0000008441 00000 n 0000008506 00000 n -0000199633 00000 n -0000472853 00000 n +0000185711 00000 n +0000442497 00000 n 0000008567 00000 n 0000008646 00000 n -0000199758 00000 n -0000472760 00000 n +0000185836 00000 n +0000442404 00000 n 0000008707 00000 n 0000008783 00000 n -0000199882 00000 n -0000472667 00000 n +0000185960 00000 n +0000442311 00000 n 0000008844 00000 n 0000008908 00000 n -0000200007 00000 n -0000472574 00000 n +0000186085 00000 n +0000442218 00000 n 0000008969 00000 n 0000009061 00000 n -0000200132 00000 n -0000472481 00000 n +0000186210 00000 n +0000442125 00000 n 0000009122 00000 n 0000009222 00000 n -0000200257 00000 n -0000472388 00000 n +0000186335 00000 n +0000442032 00000 n 0000009283 00000 n 0000009364 00000 n -0000203493 00000 n -0000472295 00000 n +0000188800 00000 n +0000441939 00000 n 0000009425 00000 n 0000009505 00000 n -0000203618 00000 n -0000472202 00000 n +0000188925 00000 n +0000441846 00000 n 0000009566 00000 n 0000009617 00000 n -0000203743 00000 n -0000472109 00000 n +0000189050 00000 n +0000441753 00000 n 0000009678 00000 n 0000009744 00000 n -0000203868 00000 n -0000472016 00000 n +0000189175 00000 n +0000441660 00000 n 0000009805 00000 n 0000009893 00000 n -0000203993 00000 n -0000471923 00000 n +0000189300 00000 n +0000441567 00000 n 0000009954 00000 n 0000010016 00000 n -0000207561 00000 n -0000471830 00000 n +0000191620 00000 n +0000441474 00000 n 0000010077 00000 n 0000010172 00000 n -0000207686 00000 n -0000471737 00000 n +0000191745 00000 n +0000441381 00000 n 0000010233 00000 n 0000010316 00000 n -0000212469 00000 n -0000471644 00000 n +0000194815 00000 n +0000441288 00000 n 0000010377 00000 n 0000010432 00000 n -0000212594 00000 n -0000471565 00000 n +0000194940 00000 n +0000441209 00000 n 0000010493 00000 n 0000010544 00000 n -0000216316 00000 n -0000471432 00000 n +0000198604 00000 n +0000441076 00000 n 0000010594 00000 n 0000010649 00000 n -0000216441 00000 n -0000471353 00000 n +0000198729 00000 n +0000440997 00000 n 0000010704 00000 n 0000010742 00000 n -0000216566 00000 n -0000471221 00000 n +0000198854 00000 n +0000440865 00000 n 0000010797 00000 n 0000010830 00000 n -0000220195 00000 n -0000471142 00000 n +0000202039 00000 n +0000440786 00000 n 0000010890 00000 n 0000010985 00000 n -0000220320 00000 n -0000471049 00000 n +0000202164 00000 n +0000440693 00000 n 0000011045 00000 n 0000011098 00000 n -0000220445 00000 n -0000470956 00000 n +0000202289 00000 n +0000440600 00000 n 0000011158 00000 n 0000011202 00000 n -0000220570 00000 n -0000470863 00000 n +0000202414 00000 n +0000440507 00000 n 0000011262 00000 n 0000011308 00000 n -0000224302 00000 n -0000470770 00000 n +0000205431 00000 n +0000440414 00000 n 0000011368 00000 n 0000011414 00000 n -0000224427 00000 n -0000470677 00000 n +0000205556 00000 n +0000440321 00000 n 0000011474 00000 n 0000011520 00000 n -0000224552 00000 n -0000470584 00000 n +0000205681 00000 n +0000440228 00000 n 0000011580 00000 n 0000011626 00000 n -0000224677 00000 n -0000470505 00000 n +0000205806 00000 n +0000440149 00000 n 0000011686 00000 n 0000011732 00000 n -0000224802 00000 n -0000470412 00000 n +0000205931 00000 n +0000440056 00000 n 0000011787 00000 n 0000011818 00000 n -0000224927 00000 n -0000470319 00000 n +0000206056 00000 n +0000439963 00000 n 0000011873 00000 n 0000011919 00000 n -0000228615 00000 n -0000470226 00000 n +0000209048 00000 n +0000439870 00000 n 0000011974 00000 n 0000012026 00000 n -0000228739 00000 n -0000470094 00000 n +0000209172 00000 n +0000439738 00000 n 0000012081 00000 n 0000012123 00000 n -0000228864 00000 n -0000470015 00000 n +0000209297 00000 n +0000439659 00000 n 0000012183 00000 n 0000012219 00000 n -0000231088 00000 n -0000469936 00000 n +0000211039 00000 n +0000439580 00000 n 0000012279 00000 n 0000012316 00000 n -0000231213 00000 n -0000469804 00000 n +0000211164 00000 n +0000439448 00000 n 0000012371 00000 n 0000012419 00000 n -0000231338 00000 n -0000469725 00000 n +0000211289 00000 n +0000439369 00000 n 0000012479 00000 n 0000012515 00000 n -0000231463 00000 n -0000469646 00000 n +0000211414 00000 n +0000439290 00000 n 0000012575 00000 n 0000012612 00000 n -0000231588 00000 n -0000469514 00000 n +0000211539 00000 n +0000439158 00000 n 0000012667 00000 n 0000012723 00000 n -0000231713 00000 n -0000469435 00000 n +0000211664 00000 n +0000439079 00000 n 0000012783 00000 n 0000012819 00000 n -0000231838 00000 n -0000469356 00000 n +0000211789 00000 n +0000439000 00000 n 0000012879 00000 n 0000012916 00000 n -0000231963 00000 n -0000469224 00000 n +0000211914 00000 n +0000438868 00000 n 0000012971 00000 n 0000013013 00000 n -0000232088 00000 n -0000469145 00000 n +0000212039 00000 n +0000438789 00000 n 0000013073 00000 n 0000013109 00000 n -0000232213 00000 n -0000469066 00000 n +0000212164 00000 n +0000438710 00000 n 0000013169 00000 n 0000013206 00000 n -0000235085 00000 n -0000468934 00000 n +0000214204 00000 n +0000438578 00000 n 0000013262 00000 n 0000013299 00000 n -0000235210 00000 n -0000468855 00000 n +0000214329 00000 n +0000438499 00000 n 0000013360 00000 n 0000013397 00000 n -0000235334 00000 n -0000468776 00000 n +0000214453 00000 n +0000438420 00000 n 0000013458 00000 n 0000013496 00000 n -0000235459 00000 n -0000468644 00000 n +0000214578 00000 n +0000438288 00000 n 0000013552 00000 n 0000013595 00000 n -0000235584 00000 n -0000468565 00000 n +0000214703 00000 n +0000438209 00000 n 0000013656 00000 n 0000013693 00000 n -0000235709 00000 n -0000468486 00000 n +0000214828 00000 n +0000438130 00000 n 0000013754 00000 n 0000013792 00000 n -0000235834 00000 n -0000468368 00000 n +0000214953 00000 n +0000438012 00000 n 0000013848 00000 n 0000013892 00000 n -0000235958 00000 n -0000468289 00000 n +0000215077 00000 n +0000437933 00000 n 0000013953 00000 n 0000013990 00000 n -0000239388 00000 n -0000468210 00000 n +0000217930 00000 n +0000437854 00000 n 0000014051 00000 n 0000014089 00000 n -0000239513 00000 n -0000468078 00000 n +0000218055 00000 n +0000437722 00000 n 0000014139 00000 n 0000014196 00000 n -0000239638 00000 n -0000467960 00000 n +0000218180 00000 n +0000437604 00000 n 0000014251 00000 n 0000014299 00000 n -0000239763 00000 n -0000467881 00000 n +0000218305 00000 n +0000437525 00000 n 0000014359 00000 n 0000014395 00000 n -0000239888 00000 n -0000467802 00000 n +0000218430 00000 n +0000437446 00000 n 0000014455 00000 n 0000014492 00000 n -0000242894 00000 n -0000467670 00000 n +0000221038 00000 n +0000437314 00000 n 0000014547 00000 n 0000014592 00000 n -0000243019 00000 n -0000467591 00000 n +0000221163 00000 n +0000437235 00000 n 0000014652 00000 n 0000014688 00000 n -0000243144 00000 n -0000467512 00000 n +0000221288 00000 n +0000437156 00000 n 0000014748 00000 n 0000014785 00000 n -0000243269 00000 n -0000467380 00000 n +0000221413 00000 n +0000437024 00000 n 0000014840 00000 n 0000014890 00000 n -0000243394 00000 n -0000467301 00000 n +0000221538 00000 n +0000436945 00000 n 0000014950 00000 n 0000014986 00000 n -0000243519 00000 n -0000467222 00000 n +0000221663 00000 n +0000436866 00000 n 0000015046 00000 n 0000015083 00000 n -0000243644 00000 n -0000467090 00000 n +0000221788 00000 n +0000436734 00000 n 0000015138 00000 n 0000015178 00000 n -0000243769 00000 n -0000467011 00000 n +0000221913 00000 n +0000436655 00000 n 0000015238 00000 n 0000015274 00000 n -0000246259 00000 n -0000466932 00000 n +0000224172 00000 n +0000436576 00000 n 0000015334 00000 n 0000015371 00000 n -0000246384 00000 n -0000466814 00000 n +0000224297 00000 n +0000436458 00000 n 0000015426 00000 n 0000015467 00000 n -0000246509 00000 n -0000466735 00000 n +0000224422 00000 n +0000436379 00000 n 0000015527 00000 n 0000015563 00000 n -0000246632 00000 n -0000466656 00000 n +0000224545 00000 n +0000436300 00000 n 0000015623 00000 n 0000015660 00000 n -0000246756 00000 n -0000466524 00000 n +0000224669 00000 n +0000436168 00000 n 0000015710 00000 n 0000015769 00000 n -0000246881 00000 n -0000466406 00000 n +0000224794 00000 n +0000436050 00000 n 0000015824 00000 n 0000015864 00000 n -0000249766 00000 n -0000466327 00000 n +0000226847 00000 n +0000435971 00000 n 0000015924 00000 n 0000015960 00000 n -0000249891 00000 n -0000466248 00000 n +0000226972 00000 n +0000435892 00000 n 0000016020 00000 n 0000016057 00000 n -0000250016 00000 n -0000466130 00000 n +0000227097 00000 n +0000435774 00000 n 0000016112 00000 n 0000016148 00000 n -0000250141 00000 n -0000466051 00000 n +0000227222 00000 n +0000435695 00000 n 0000016208 00000 n 0000016244 00000 n -0000250266 00000 n -0000465972 00000 n +0000227347 00000 n +0000435616 00000 n 0000016304 00000 n 0000016341 00000 n -0000253101 00000 n -0000465840 00000 n +0000229520 00000 n +0000435484 00000 n 0000016391 00000 n 0000016442 00000 n -0000253226 00000 n -0000465722 00000 n +0000229645 00000 n +0000435366 00000 n 0000016497 00000 n 0000016538 00000 n -0000253349 00000 n -0000465643 00000 n +0000229768 00000 n +0000435287 00000 n 0000016598 00000 n 0000016634 00000 n -0000253474 00000 n -0000465564 00000 n +0000229893 00000 n +0000435208 00000 n 0000016694 00000 n 0000016731 00000 n -0000253599 00000 n -0000465446 00000 n +0000230018 00000 n +0000435090 00000 n 0000016786 00000 n 0000016832 00000 n -0000253724 00000 n -0000465367 00000 n +0000230143 00000 n +0000435011 00000 n 0000016892 00000 n 0000016928 00000 n -0000253848 00000 n -0000465288 00000 n +0000230267 00000 n +0000434932 00000 n 0000016988 00000 n 0000017025 00000 n -0000256596 00000 n -0000465156 00000 n +0000232796 00000 n +0000434800 00000 n 0000017075 00000 n 0000017146 00000 n -0000256721 00000 n -0000465077 00000 n +0000232921 00000 n +0000434721 00000 n 0000017201 00000 n 0000017239 00000 n -0000256846 00000 n -0000464984 00000 n +0000233046 00000 n +0000434628 00000 n 0000017294 00000 n 0000017329 00000 n -0000259973 00000 n -0000464905 00000 n +0000235870 00000 n +0000434549 00000 n 0000017384 00000 n 0000017419 00000 n -0000260098 00000 n -0000464787 00000 n +0000235995 00000 n +0000434431 00000 n 0000017469 00000 n 0000017507 00000 n -0000260223 00000 n -0000464669 00000 n +0000236120 00000 n +0000434313 00000 n 0000017562 00000 n 0000017604 00000 n -0000260348 00000 n -0000464590 00000 n +0000236245 00000 n +0000434234 00000 n 0000017664 00000 n 0000017718 00000 n -0000260473 00000 n -0000464511 00000 n +0000236370 00000 n +0000434155 00000 n 0000017778 00000 n 0000017825 00000 n -0000263431 00000 n -0000464393 00000 n +0000238506 00000 n +0000434037 00000 n 0000017880 00000 n 0000017922 00000 n -0000263556 00000 n -0000464314 00000 n +0000238631 00000 n +0000433958 00000 n 0000017982 00000 n 0000018031 00000 n -0000263681 00000 n -0000464221 00000 n +0000238756 00000 n +0000433865 00000 n 0000018091 00000 n 0000018141 00000 n -0000263806 00000 n -0000464142 00000 n +0000238881 00000 n +0000433786 00000 n 0000018201 00000 n 0000018252 00000 n -0000267434 00000 n -0000464009 00000 n +0000242089 00000 n +0000433653 00000 n 0000018300 00000 n 0000018347 00000 n -0000267559 00000 n -0000463930 00000 n +0000242214 00000 n +0000433574 00000 n 0000018397 00000 n 0000018430 00000 n -0000267684 00000 n -0000463837 00000 n +0000242339 00000 n +0000433481 00000 n 0000018480 00000 n 0000018544 00000 n -0000267809 00000 n -0000463744 00000 n +0000242464 00000 n +0000433388 00000 n 0000018594 00000 n 0000018636 00000 n -0000275101 00000 n -0000463651 00000 n +0000249288 00000 n +0000433295 00000 n 0000018686 00000 n 0000018761 00000 n -0000275226 00000 n -0000463572 00000 n +0000249413 00000 n +0000433216 00000 n 0000018811 00000 n 0000018871 00000 n -0000283207 00000 n -0000463439 00000 n +0000256690 00000 n +0000433083 00000 n 0000018919 00000 n 0000018962 00000 n -0000283332 00000 n -0000463374 00000 n +0000256815 00000 n +0000433018 00000 n 0000019012 00000 n 0000019050 00000 n -0000287268 00000 n -0000463241 00000 n +0000260664 00000 n +0000432885 00000 n 0000019098 00000 n 0000019144 00000 n -0000287393 00000 n -0000463162 00000 n +0000260789 00000 n +0000432806 00000 n 0000019194 00000 n 0000019244 00000 n -0000291427 00000 n -0000463069 00000 n +0000264633 00000 n +0000432713 00000 n 0000019294 00000 n 0000019339 00000 n -0000291551 00000 n -0000462976 00000 n +0000264757 00000 n +0000432620 00000 n 0000019389 00000 n 0000019446 00000 n -0000291675 00000 n -0000462844 00000 n +0000264881 00000 n +0000432488 00000 n 0000019496 00000 n 0000019527 00000 n -0000291799 00000 n -0000462765 00000 n +0000265005 00000 n +0000432409 00000 n 0000019582 00000 n 0000019620 00000 n -0000291923 00000 n -0000462672 00000 n +0000265129 00000 n +0000432316 00000 n 0000019675 00000 n 0000019715 00000 n -0000295653 00000 n -0000462593 00000 n +0000268762 00000 n +0000432237 00000 n 0000019770 00000 n 0000019808 00000 n -0000295778 00000 n -0000462461 00000 n +0000268887 00000 n +0000432105 00000 n 0000019858 00000 n 0000019894 00000 n -0000295903 00000 n -0000462382 00000 n +0000269012 00000 n +0000432026 00000 n 0000019949 00000 n 0000020005 00000 n -0000296028 00000 n -0000462303 00000 n +0000269137 00000 n +0000431947 00000 n 0000020060 00000 n 0000020097 00000 n -0000296152 00000 n -0000462210 00000 n +0000269261 00000 n +0000431854 00000 n 0000020147 00000 n 0000020189 00000 n -0000298476 00000 n -0000462131 00000 n +0000271550 00000 n +0000431775 00000 n 0000020239 00000 n 0000020271 00000 n -0000302163 00000 n -0000461998 00000 n +0000275201 00000 n +0000431642 00000 n 0000020319 00000 n 0000020375 00000 n -0000302288 00000 n -0000461919 00000 n +0000275326 00000 n +0000431563 00000 n 0000020425 00000 n 0000020462 00000 n -0000302413 00000 n -0000461826 00000 n +0000275451 00000 n +0000431470 00000 n 0000020512 00000 n 0000020554 00000 n -0000306181 00000 n -0000461747 00000 n +0000279198 00000 n +0000431391 00000 n 0000020604 00000 n 0000020647 00000 n -0000311008 00000 n -0000461614 00000 n +0000283755 00000 n +0000431258 00000 n 0000020695 00000 n 0000020725 00000 n -0000311133 00000 n -0000461535 00000 n +0000283880 00000 n +0000431179 00000 n 0000020775 00000 n 0000020810 00000 n -0000311258 00000 n -0000461403 00000 n +0000284005 00000 n +0000431047 00000 n 0000020860 00000 n 0000020900 00000 n -0000311383 00000 n -0000461324 00000 n +0000284130 00000 n +0000430968 00000 n 0000020955 00000 n 0000020996 00000 n -0000311508 00000 n -0000461245 00000 n +0000284255 00000 n +0000430889 00000 n 0000021051 00000 n 0000021092 00000 n -0000314881 00000 n -0000461127 00000 n +0000287305 00000 n +0000430771 00000 n 0000021142 00000 n 0000021182 00000 n -0000315006 00000 n -0000461062 00000 n +0000287430 00000 n +0000430706 00000 n 0000021237 00000 n 0000021303 00000 n -0000318036 00000 n -0000460929 00000 n +0000290099 00000 n +0000430573 00000 n 0000021351 00000 n 0000021395 00000 n -0000318161 00000 n -0000460850 00000 n +0000290224 00000 n +0000430494 00000 n 0000021445 00000 n 0000021475 00000 n -0000318286 00000 n -0000460771 00000 n +0000290349 00000 n +0000430415 00000 n 0000021525 00000 n 0000021566 00000 n -0000320024 00000 n -0000460638 00000 n +0000292012 00000 n +0000430282 00000 n 0000021614 00000 n 0000021648 00000 n -0000320149 00000 n -0000460520 00000 n +0000292137 00000 n +0000430164 00000 n 0000021698 00000 n 0000021752 00000 n -0000320274 00000 n -0000460441 00000 n +0000292262 00000 n +0000430085 00000 n 0000021807 00000 n 0000021855 00000 n -0000324501 00000 n -0000460362 00000 n +0000296413 00000 n +0000430006 00000 n 0000021910 00000 n 0000021966 00000 n -0000324626 00000 n -0000460230 00000 n +0000296538 00000 n +0000429874 00000 n 0000022016 00000 n 0000022104 00000 n -0000324751 00000 n -0000460151 00000 n +0000296663 00000 n +0000429795 00000 n 0000022159 00000 n 0000022217 00000 n -0000327603 00000 n -0000460072 00000 n +0000299158 00000 n +0000429716 00000 n 0000022272 00000 n 0000022341 00000 n -0000334925 00000 n -0000459940 00000 n +0000305297 00000 n +0000429584 00000 n 0000022391 00000 n 0000022450 00000 n -0000335050 00000 n -0000459875 00000 n +0000305422 00000 n +0000429519 00000 n 0000022505 00000 n 0000022573 00000 n -0000345749 00000 n -0000459757 00000 n +0000315406 00000 n +0000429401 00000 n 0000022623 00000 n 0000022658 00000 n -0000345874 00000 n -0000459678 00000 n +0000315531 00000 n +0000429322 00000 n 0000022713 00000 n 0000022771 00000 n -0000345999 00000 n -0000459599 00000 n +0000315656 00000 n +0000429243 00000 n 0000022826 00000 n 0000022879 00000 n -0000347570 00000 n -0000459466 00000 n +0000317191 00000 n +0000429110 00000 n 0000022927 00000 n 0000022968 00000 n -0000347695 00000 n -0000459387 00000 n +0000317316 00000 n +0000429031 00000 n 0000023018 00000 n 0000023053 00000 n -0000347820 00000 n -0000459308 00000 n +0000317441 00000 n +0000428952 00000 n 0000023103 00000 n 0000023135 00000 n -0000351912 00000 n -0000459228 00000 n +0000321366 00000 n +0000428872 00000 n 0000023183 00000 n 0000023223 00000 n -0000023605 00000 n -0000023846 00000 n +0000023594 00000 n +0000023835 00000 n 0000023275 00000 n -0000023724 00000 n -0000023785 00000 n -0000456020 00000 n -0000442781 00000 n -0000455854 00000 n -0000442335 00000 n -0000437533 00000 n -0000442172 00000 n -0000456893 00000 n -0000025979 00000 n -0000025061 00000 n -0000023931 00000 n -0000025918 00000 n -0000436712 00000 n -0000420508 00000 n -0000436548 00000 n -0000418572 00000 n -0000400220 00000 n -0000418409 00000 n -0000025224 00000 n -0000399239 00000 n -0000383095 00000 n -0000399075 00000 n -0000025395 00000 n -0000025565 00000 n -0000025736 00000 n -0000034833 00000 n -0000029270 00000 n -0000026077 00000 n -0000034772 00000 n -0000381459 00000 n -0000371814 00000 n -0000381295 00000 n -0000029661 00000 n -0000371382 00000 n -0000369862 00000 n -0000371218 00000 n -0000029811 00000 n -0000029966 00000 n -0000030114 00000 n -0000030274 00000 n -0000367962 00000 n -0000365952 00000 n -0000367799 00000 n -0000030426 00000 n -0000030612 00000 n -0000030761 00000 n -0000030912 00000 n -0000031062 00000 n -0000031218 00000 n -0000031388 00000 n -0000031555 00000 n -0000031705 00000 n -0000031880 00000 n -0000032056 00000 n -0000032225 00000 n -0000032375 00000 n -0000032522 00000 n -0000032667 00000 n -0000032819 00000 n -0000032988 00000 n -0000033138 00000 n -0000033309 00000 n -0000033462 00000 n -0000033635 00000 n -0000033806 00000 n -0000033952 00000 n -0000034119 00000 n -0000034292 00000 n -0000034444 00000 n -0000034600 00000 n -0000093921 00000 n -0000101434 00000 n -0000108886 00000 n -0000121931 00000 n -0000131681 00000 n -0000150699 00000 n -0000159520 00000 n -0000174391 00000 n -0000177229 00000 n -0000183328 00000 n -0000267496 00000 n -0000283269 00000 n -0000287330 00000 n -0000302225 00000 n -0000311070 00000 n -0000318098 00000 n -0000320086 00000 n -0000347632 00000 n -0000351974 00000 n -0000044328 00000 n -0000037438 00000 n -0000034957 00000 n -0000044202 00000 n -0000044265 00000 n -0000037932 00000 n -0000038085 00000 n -0000038239 00000 n -0000038393 00000 n -0000038548 00000 n -0000038701 00000 n -0000038856 00000 n -0000039011 00000 n -0000039166 00000 n -0000039321 00000 n -0000039475 00000 n -0000039628 00000 n -0000039783 00000 n -0000039937 00000 n -0000040092 00000 n -0000040247 00000 n -0000040402 00000 n -0000040562 00000 n -0000040722 00000 n -0000040882 00000 n -0000041035 00000 n -0000041188 00000 n -0000041343 00000 n -0000041497 00000 n -0000041652 00000 n -0000041812 00000 n -0000041972 00000 n -0000042132 00000 n -0000042292 00000 n -0000042452 00000 n -0000042612 00000 n -0000042772 00000 n -0000042931 00000 n -0000043091 00000 n -0000043252 00000 n -0000043412 00000 n -0000043571 00000 n -0000043731 00000 n -0000043890 00000 n -0000044049 00000 n -0000055715 00000 n -0000047590 00000 n -0000044414 00000 n -0000055652 00000 n -0000365367 00000 n -0000356177 00000 n -0000365201 00000 n -0000048147 00000 n -0000048307 00000 n -0000048467 00000 n -0000048622 00000 n -0000048775 00000 n -0000048930 00000 n -0000049090 00000 n -0000049250 00000 n -0000049409 00000 n -0000049564 00000 n -0000049724 00000 n -0000049877 00000 n -0000050032 00000 n -0000050187 00000 n -0000050342 00000 n -0000050497 00000 n -0000050652 00000 n -0000050807 00000 n -0000050962 00000 n -0000051116 00000 n -0000051271 00000 n -0000051423 00000 n -0000051575 00000 n -0000051730 00000 n -0000051884 00000 n -0000052040 00000 n -0000052201 00000 n -0000052362 00000 n -0000052516 00000 n -0000052677 00000 n -0000052838 00000 n -0000053004 00000 n -0000053169 00000 n -0000053330 00000 n -0000053496 00000 n -0000053662 00000 n -0000053828 00000 n -0000053994 00000 n -0000054160 00000 n -0000054326 00000 n -0000054491 00000 n -0000054656 00000 n -0000054822 00000 n -0000054989 00000 n -0000055155 00000 n -0000055322 00000 n -0000055487 00000 n -0000068050 00000 n -0000059340 00000 n -0000055815 00000 n -0000067987 00000 n -0000059915 00000 n -0000060082 00000 n -0000060249 00000 n -0000060416 00000 n -0000060583 00000 n -0000060750 00000 n -0000060917 00000 n -0000061083 00000 n -0000061250 00000 n -0000061417 00000 n -0000061583 00000 n -0000061750 00000 n -0000061917 00000 n -0000062084 00000 n -0000062251 00000 n -0000062418 00000 n -0000062585 00000 n -0000062741 00000 n -0000062902 00000 n -0000063062 00000 n -0000063228 00000 n -0000063394 00000 n -0000063559 00000 n -0000063725 00000 n -0000063891 00000 n -0000064057 00000 n -0000064223 00000 n -0000064389 00000 n -0000064550 00000 n -0000064711 00000 n -0000064872 00000 n -0000065032 00000 n -0000065198 00000 n -0000065364 00000 n -0000065524 00000 n -0000065690 00000 n -0000065856 00000 n -0000066017 00000 n -0000066183 00000 n -0000066349 00000 n -0000066510 00000 n -0000066676 00000 n -0000066842 00000 n -0000067003 00000 n -0000067170 00000 n -0000067337 00000 n -0000067498 00000 n -0000067662 00000 n -0000067827 00000 n -0000079694 00000 n -0000070937 00000 n -0000068137 00000 n -0000079631 00000 n -0000071522 00000 n -0000071689 00000 n -0000071856 00000 n -0000072012 00000 n -0000072173 00000 n -0000072339 00000 n -0000072505 00000 n -0000072666 00000 n -0000072832 00000 n -0000072997 00000 n -0000073158 00000 n -0000073324 00000 n -0000073489 00000 n -0000073650 00000 n -0000073816 00000 n -0000073982 00000 n -0000074143 00000 n -0000074309 00000 n -0000074475 00000 n -0000074631 00000 n -0000074792 00000 n -0000074957 00000 n -0000075123 00000 n -0000075284 00000 n -0000075450 00000 n -0000075615 00000 n -0000075771 00000 n -0000075932 00000 n -0000076098 00000 n -0000076264 00000 n -0000076425 00000 n -0000076591 00000 n -0000076757 00000 n -0000076913 00000 n -0000077073 00000 n -0000077234 00000 n -0000077395 00000 n -0000077550 00000 n -0000077711 00000 n -0000077877 00000 n -0000078043 00000 n -0000078204 00000 n -0000078370 00000 n -0000078536 00000 n -0000078702 00000 n -0000078856 00000 n -0000079012 00000 n -0000079168 00000 n -0000079323 00000 n -0000079477 00000 n -0000457014 00000 n -0000090563 00000 n -0000082893 00000 n -0000079807 00000 n -0000090500 00000 n -0000083433 00000 n -0000083587 00000 n -0000083743 00000 n -0000083897 00000 n -0000084053 00000 n -0000084209 00000 n -0000084365 00000 n -0000084521 00000 n -0000084681 00000 n -0000084842 00000 n -0000085003 00000 n -0000085158 00000 n -0000085319 00000 n -0000085480 00000 n -0000085636 00000 n -0000085792 00000 n -0000085946 00000 n -0000086102 00000 n -0000086258 00000 n -0000086413 00000 n -0000086567 00000 n -0000086722 00000 n -0000086877 00000 n -0000087038 00000 n -0000087199 00000 n -0000087355 00000 n -0000087516 00000 n -0000087670 00000 n -0000087826 00000 n -0000087981 00000 n -0000088135 00000 n -0000088291 00000 n -0000088451 00000 n -0000088612 00000 n -0000088768 00000 n -0000088929 00000 n -0000089090 00000 n -0000089246 00000 n -0000089407 00000 n -0000089563 00000 n -0000089723 00000 n -0000089883 00000 n -0000090037 00000 n -0000090192 00000 n -0000090348 00000 n -0000094232 00000 n -0000093675 00000 n -0000090663 00000 n -0000093798 00000 n -0000094045 00000 n -0000094169 00000 n -0000097839 00000 n -0000097529 00000 n -0000094318 00000 n -0000097652 00000 n -0000097776 00000 n -0000102369 00000 n -0000101187 00000 n -0000097952 00000 n -0000101310 00000 n -0000101558 00000 n -0000101621 00000 n -0000101683 00000 n -0000101746 00000 n -0000101870 00000 n -0000101993 00000 n -0000102056 00000 n -0000102119 00000 n -0000102181 00000 n -0000102244 00000 n -0000102307 00000 n -0000106251 00000 n -0000105755 00000 n -0000102455 00000 n -0000105878 00000 n -0000105941 00000 n -0000106065 00000 n -0000106188 00000 n -0000109325 00000 n -0000108639 00000 n -0000106351 00000 n -0000108762 00000 n -0000109010 00000 n -0000109073 00000 n -0000109136 00000 n -0000109199 00000 n -0000109262 00000 n -0000457139 00000 n -0000111841 00000 n -0000111531 00000 n -0000109424 00000 n -0000111654 00000 n -0000111778 00000 n -0000114339 00000 n -0000113843 00000 n -0000111967 00000 n -0000113966 00000 n -0000114090 00000 n -0000114214 00000 n -0000114277 00000 n -0000117368 00000 n -0000116562 00000 n -0000114452 00000 n -0000116685 00000 n -0000116748 00000 n -0000116811 00000 n -0000116934 00000 n -0000117058 00000 n -0000117181 00000 n -0000117305 00000 n -0000122559 00000 n -0000121263 00000 n -0000117468 00000 n -0000121807 00000 n -0000121416 00000 n -0000121617 00000 n -0000121994 00000 n -0000122057 00000 n -0000122120 00000 n -0000122183 00000 n -0000122245 00000 n -0000122308 00000 n -0000122371 00000 n -0000122434 00000 n -0000122497 00000 n -0000127615 00000 n -0000126425 00000 n -0000122658 00000 n -0000126548 00000 n -0000126611 00000 n -0000126674 00000 n -0000126737 00000 n -0000126800 00000 n -0000126863 00000 n -0000126926 00000 n -0000126989 00000 n -0000127052 00000 n -0000127115 00000 n -0000127178 00000 n -0000127240 00000 n -0000127303 00000 n -0000127366 00000 n -0000127427 00000 n -0000127490 00000 n -0000127553 00000 n -0000132494 00000 n -0000131434 00000 n -0000127702 00000 n -0000131557 00000 n -0000131805 00000 n -0000131928 00000 n -0000131991 00000 n -0000132054 00000 n -0000132117 00000 n -0000132179 00000 n -0000132242 00000 n -0000132305 00000 n -0000132368 00000 n -0000132431 00000 n -0000457264 00000 n -0000136461 00000 n -0000134966 00000 n -0000132580 00000 n -0000135089 00000 n -0000135152 00000 n -0000135215 00000 n -0000135278 00000 n -0000135401 00000 n -0000135526 00000 n -0000135650 00000 n -0000135774 00000 n -0000135899 00000 n -0000136024 00000 n -0000136149 00000 n -0000136273 00000 n -0000136398 00000 n -0000140346 00000 n -0000138791 00000 n -0000136561 00000 n -0000138914 00000 n -0000139039 00000 n -0000139163 00000 n -0000139288 00000 n -0000139413 00000 n -0000139536 00000 n -0000139661 00000 n -0000139786 00000 n -0000139910 00000 n -0000140035 00000 n -0000140098 00000 n -0000140161 00000 n -0000140223 00000 n -0000140285 00000 n -0000145366 00000 n -0000144236 00000 n -0000140459 00000 n -0000144359 00000 n -0000144422 00000 n -0000144485 00000 n -0000144548 00000 n -0000144611 00000 n -0000144674 00000 n -0000144737 00000 n -0000144800 00000 n -0000144863 00000 n -0000144926 00000 n -0000144989 00000 n -0000145114 00000 n -0000145177 00000 n -0000145240 00000 n -0000145303 00000 n -0000147701 00000 n -0000146762 00000 n -0000145466 00000 n -0000146885 00000 n -0000147010 00000 n -0000147073 00000 n -0000147136 00000 n -0000147199 00000 n -0000147262 00000 n -0000147325 00000 n -0000147387 00000 n -0000147450 00000 n -0000147513 00000 n -0000147576 00000 n -0000147639 00000 n -0000151828 00000 n -0000150451 00000 n -0000147801 00000 n -0000150574 00000 n -0000150824 00000 n -0000150887 00000 n -0000150950 00000 n -0000151013 00000 n -0000151076 00000 n -0000151139 00000 n -0000151202 00000 n -0000151265 00000 n -0000151390 00000 n -0000151452 00000 n -0000151515 00000 n -0000151578 00000 n -0000151641 00000 n -0000151766 00000 n -0000153920 00000 n -0000153484 00000 n -0000151940 00000 n -0000153607 00000 n -0000153732 00000 n -0000153857 00000 n -0000457389 00000 n -0000156041 00000 n -0000155478 00000 n -0000154046 00000 n -0000155601 00000 n -0000155664 00000 n -0000155727 00000 n -0000155790 00000 n -0000155853 00000 n -0000155978 00000 n -0000159958 00000 n -0000159272 00000 n -0000156167 00000 n -0000159395 00000 n -0000159645 00000 n +0000023713 00000 n +0000023774 00000 n +0000425664 00000 n +0000412425 00000 n +0000425498 00000 n +0000411972 00000 n +0000406987 00000 n +0000411809 00000 n +0000426537 00000 n +0000025917 00000 n +0000024999 00000 n +0000023920 00000 n +0000025856 00000 n +0000406166 00000 n +0000389962 00000 n +0000406002 00000 n +0000388026 00000 n +0000369674 00000 n +0000387863 00000 n +0000025162 00000 n +0000368693 00000 n +0000352549 00000 n +0000368529 00000 n +0000025333 00000 n +0000025503 00000 n +0000025674 00000 n +0000033588 00000 n +0000028025 00000 n +0000026015 00000 n +0000033527 00000 n +0000350913 00000 n +0000341268 00000 n +0000350749 00000 n +0000028416 00000 n +0000340836 00000 n +0000339316 00000 n +0000340672 00000 n +0000028566 00000 n +0000028721 00000 n +0000028869 00000 n +0000029029 00000 n +0000337416 00000 n +0000335406 00000 n +0000337253 00000 n +0000029181 00000 n +0000029367 00000 n +0000029516 00000 n +0000029667 00000 n +0000029817 00000 n +0000029973 00000 n +0000030143 00000 n +0000030310 00000 n +0000030460 00000 n +0000030635 00000 n +0000030811 00000 n +0000030980 00000 n +0000031130 00000 n +0000031277 00000 n +0000031422 00000 n +0000031574 00000 n +0000031743 00000 n +0000031893 00000 n +0000032064 00000 n +0000032217 00000 n +0000032390 00000 n +0000032561 00000 n +0000032707 00000 n +0000032874 00000 n +0000033047 00000 n +0000033199 00000 n +0000033355 00000 n +0000086768 00000 n +0000093970 00000 n +0000101194 00000 n +0000113674 00000 n +0000122527 00000 n +0000140066 00000 n +0000148692 00000 n +0000163306 00000 n +0000165985 00000 n +0000171849 00000 n +0000242151 00000 n +0000256752 00000 n +0000260726 00000 n +0000275263 00000 n +0000283817 00000 n +0000290161 00000 n +0000292074 00000 n +0000317253 00000 n +0000321428 00000 n +0000042131 00000 n +0000035241 00000 n +0000033712 00000 n +0000042005 00000 n +0000042068 00000 n +0000035735 00000 n +0000035888 00000 n +0000036042 00000 n +0000036196 00000 n +0000036351 00000 n +0000036504 00000 n +0000036659 00000 n +0000036814 00000 n +0000036969 00000 n +0000037124 00000 n +0000037278 00000 n +0000037431 00000 n +0000037586 00000 n +0000037740 00000 n +0000037895 00000 n +0000038050 00000 n +0000038205 00000 n +0000038365 00000 n +0000038525 00000 n +0000038685 00000 n +0000038838 00000 n +0000038991 00000 n +0000039146 00000 n +0000039300 00000 n +0000039455 00000 n +0000039615 00000 n +0000039775 00000 n +0000039935 00000 n +0000040095 00000 n +0000040255 00000 n +0000040415 00000 n +0000040575 00000 n +0000040734 00000 n +0000040894 00000 n +0000041055 00000 n +0000041215 00000 n +0000041374 00000 n +0000041534 00000 n +0000041693 00000 n +0000041852 00000 n +0000052348 00000 n +0000044223 00000 n +0000042217 00000 n +0000052285 00000 n +0000334821 00000 n +0000325631 00000 n +0000334655 00000 n +0000044780 00000 n +0000044940 00000 n +0000045100 00000 n +0000045255 00000 n +0000045408 00000 n +0000045563 00000 n +0000045723 00000 n +0000045883 00000 n +0000046042 00000 n +0000046197 00000 n +0000046357 00000 n +0000046510 00000 n +0000046665 00000 n +0000046820 00000 n +0000046975 00000 n +0000047130 00000 n +0000047285 00000 n +0000047440 00000 n +0000047595 00000 n +0000047749 00000 n +0000047904 00000 n +0000048056 00000 n +0000048208 00000 n +0000048363 00000 n +0000048517 00000 n +0000048673 00000 n +0000048834 00000 n +0000048995 00000 n +0000049149 00000 n +0000049310 00000 n +0000049471 00000 n +0000049637 00000 n +0000049802 00000 n +0000049963 00000 n +0000050129 00000 n +0000050295 00000 n +0000050461 00000 n +0000050627 00000 n +0000050793 00000 n +0000050959 00000 n +0000051124 00000 n +0000051289 00000 n +0000051455 00000 n +0000051622 00000 n +0000051788 00000 n +0000051955 00000 n +0000052120 00000 n +0000063171 00000 n +0000054461 00000 n +0000052448 00000 n +0000063108 00000 n +0000055036 00000 n +0000055203 00000 n +0000055370 00000 n +0000055537 00000 n +0000055704 00000 n +0000055871 00000 n +0000056038 00000 n +0000056204 00000 n +0000056371 00000 n +0000056538 00000 n +0000056704 00000 n +0000056871 00000 n +0000057038 00000 n +0000057205 00000 n +0000057372 00000 n +0000057539 00000 n +0000057706 00000 n +0000057862 00000 n +0000058023 00000 n +0000058183 00000 n +0000058349 00000 n +0000058515 00000 n +0000058680 00000 n +0000058846 00000 n +0000059012 00000 n +0000059178 00000 n +0000059344 00000 n +0000059510 00000 n +0000059671 00000 n +0000059832 00000 n +0000059993 00000 n +0000060153 00000 n +0000060319 00000 n +0000060485 00000 n +0000060645 00000 n +0000060811 00000 n +0000060977 00000 n +0000061138 00000 n +0000061304 00000 n +0000061470 00000 n +0000061631 00000 n +0000061797 00000 n +0000061963 00000 n +0000062124 00000 n +0000062291 00000 n +0000062458 00000 n +0000062619 00000 n +0000062783 00000 n +0000062948 00000 n +0000073682 00000 n +0000064925 00000 n +0000063258 00000 n +0000073619 00000 n +0000065510 00000 n +0000065677 00000 n +0000065844 00000 n +0000066000 00000 n +0000066161 00000 n +0000066327 00000 n +0000066493 00000 n +0000066654 00000 n +0000066820 00000 n +0000066985 00000 n +0000067146 00000 n +0000067312 00000 n +0000067477 00000 n +0000067638 00000 n +0000067804 00000 n +0000067970 00000 n +0000068131 00000 n +0000068297 00000 n +0000068463 00000 n +0000068619 00000 n +0000068780 00000 n +0000068945 00000 n +0000069111 00000 n +0000069272 00000 n +0000069438 00000 n +0000069603 00000 n +0000069759 00000 n +0000069920 00000 n +0000070086 00000 n +0000070252 00000 n +0000070413 00000 n +0000070579 00000 n +0000070745 00000 n +0000070901 00000 n +0000071061 00000 n +0000071222 00000 n +0000071383 00000 n +0000071538 00000 n +0000071699 00000 n +0000071865 00000 n +0000072031 00000 n +0000072192 00000 n +0000072358 00000 n +0000072524 00000 n +0000072690 00000 n +0000072844 00000 n +0000073000 00000 n +0000073156 00000 n +0000073311 00000 n +0000073465 00000 n +0000426658 00000 n +0000083455 00000 n +0000075785 00000 n +0000073795 00000 n +0000083392 00000 n +0000076325 00000 n +0000076479 00000 n +0000076635 00000 n +0000076789 00000 n +0000076945 00000 n +0000077101 00000 n +0000077257 00000 n +0000077413 00000 n +0000077573 00000 n +0000077734 00000 n +0000077895 00000 n +0000078050 00000 n +0000078211 00000 n +0000078372 00000 n +0000078528 00000 n +0000078684 00000 n +0000078838 00000 n +0000078994 00000 n +0000079150 00000 n +0000079305 00000 n +0000079459 00000 n +0000079614 00000 n +0000079769 00000 n +0000079930 00000 n +0000080091 00000 n +0000080247 00000 n +0000080408 00000 n +0000080562 00000 n +0000080718 00000 n +0000080873 00000 n +0000081027 00000 n +0000081183 00000 n +0000081343 00000 n +0000081504 00000 n +0000081660 00000 n +0000081821 00000 n +0000081982 00000 n +0000082138 00000 n +0000082299 00000 n +0000082455 00000 n +0000082615 00000 n +0000082775 00000 n +0000082929 00000 n +0000083084 00000 n +0000083240 00000 n +0000087079 00000 n +0000086522 00000 n +0000083555 00000 n +0000086645 00000 n +0000086892 00000 n +0000087016 00000 n +0000090605 00000 n +0000090295 00000 n +0000087165 00000 n +0000090418 00000 n +0000090542 00000 n +0000094905 00000 n +0000093723 00000 n +0000090718 00000 n +0000093846 00000 n +0000094094 00000 n +0000094157 00000 n +0000094219 00000 n +0000094282 00000 n +0000094406 00000 n +0000094529 00000 n +0000094592 00000 n +0000094655 00000 n +0000094717 00000 n +0000094780 00000 n +0000094843 00000 n +0000098713 00000 n +0000098217 00000 n +0000094991 00000 n +0000098340 00000 n +0000098403 00000 n +0000098527 00000 n +0000098650 00000 n +0000101633 00000 n +0000100947 00000 n +0000098813 00000 n +0000101070 00000 n +0000101318 00000 n +0000101381 00000 n +0000101444 00000 n +0000101507 00000 n +0000101570 00000 n +0000426783 00000 n +0000104121 00000 n +0000103811 00000 n +0000101732 00000 n +0000103934 00000 n +0000104058 00000 n +0000106544 00000 n +0000106048 00000 n +0000104247 00000 n +0000106171 00000 n +0000106295 00000 n +0000106419 00000 n +0000106482 00000 n +0000109439 00000 n +0000108633 00000 n +0000106657 00000 n +0000108756 00000 n +0000108819 00000 n +0000108882 00000 n +0000109005 00000 n +0000109129 00000 n +0000109252 00000 n +0000109376 00000 n +0000114302 00000 n +0000113006 00000 n +0000109539 00000 n +0000113550 00000 n +0000113159 00000 n +0000113360 00000 n +0000113737 00000 n +0000113800 00000 n +0000113863 00000 n +0000113926 00000 n +0000113988 00000 n +0000114051 00000 n +0000114114 00000 n +0000114177 00000 n +0000114240 00000 n +0000118902 00000 n +0000117712 00000 n +0000114401 00000 n +0000117835 00000 n +0000117898 00000 n +0000117961 00000 n +0000118024 00000 n +0000118087 00000 n +0000118150 00000 n +0000118213 00000 n +0000118276 00000 n +0000118339 00000 n +0000118402 00000 n +0000118465 00000 n +0000118527 00000 n +0000118590 00000 n +0000118653 00000 n +0000118714 00000 n +0000118777 00000 n +0000118840 00000 n +0000123340 00000 n +0000122280 00000 n +0000118989 00000 n +0000122403 00000 n +0000122651 00000 n +0000122774 00000 n +0000122837 00000 n +0000122900 00000 n +0000122963 00000 n +0000123025 00000 n +0000123088 00000 n +0000123151 00000 n +0000123214 00000 n +0000123277 00000 n +0000426908 00000 n +0000127017 00000 n +0000125522 00000 n +0000123426 00000 n +0000125645 00000 n +0000125708 00000 n +0000125771 00000 n +0000125834 00000 n +0000125957 00000 n +0000126082 00000 n +0000126206 00000 n +0000126330 00000 n +0000126455 00000 n +0000126580 00000 n +0000126705 00000 n +0000126829 00000 n +0000126954 00000 n +0000130596 00000 n +0000129041 00000 n +0000127117 00000 n +0000129164 00000 n +0000129289 00000 n +0000129413 00000 n +0000129538 00000 n +0000129663 00000 n +0000129786 00000 n +0000129911 00000 n +0000130036 00000 n +0000130160 00000 n +0000130285 00000 n +0000130348 00000 n +0000130411 00000 n +0000130473 00000 n +0000130535 00000 n +0000135258 00000 n +0000134128 00000 n +0000130709 00000 n +0000134251 00000 n +0000134314 00000 n +0000134377 00000 n +0000134440 00000 n +0000134503 00000 n +0000134566 00000 n +0000134629 00000 n +0000134692 00000 n +0000134755 00000 n +0000134818 00000 n +0000134881 00000 n +0000135006 00000 n +0000135069 00000 n +0000135132 00000 n +0000135195 00000 n +0000137365 00000 n +0000136426 00000 n +0000135358 00000 n +0000136549 00000 n +0000136674 00000 n +0000136737 00000 n +0000136800 00000 n +0000136863 00000 n +0000136926 00000 n +0000136989 00000 n +0000137051 00000 n +0000137114 00000 n +0000137177 00000 n +0000137240 00000 n +0000137303 00000 n +0000141195 00000 n +0000139818 00000 n +0000137465 00000 n +0000139941 00000 n +0000140191 00000 n +0000140254 00000 n +0000140317 00000 n +0000140380 00000 n +0000140443 00000 n +0000140506 00000 n +0000140569 00000 n +0000140632 00000 n +0000140757 00000 n +0000140819 00000 n +0000140882 00000 n +0000140945 00000 n +0000141008 00000 n +0000141133 00000 n +0000143260 00000 n +0000142824 00000 n +0000141307 00000 n +0000142947 00000 n +0000143072 00000 n +0000143197 00000 n +0000427033 00000 n +0000145277 00000 n +0000144714 00000 n +0000143386 00000 n +0000144837 00000 n +0000144900 00000 n +0000144963 00000 n +0000145026 00000 n +0000145089 00000 n +0000145214 00000 n +0000149130 00000 n +0000148444 00000 n +0000145403 00000 n +0000148567 00000 n +0000148817 00000 n +0000148942 00000 n +0000149067 00000 n +0000153040 00000 n +0000152605 00000 n +0000149229 00000 n +0000152728 00000 n +0000152853 00000 n +0000152978 00000 n +0000157382 00000 n +0000156696 00000 n +0000153140 00000 n +0000156819 00000 n +0000156944 00000 n +0000157069 00000 n +0000157194 00000 n +0000157319 00000 n +0000159683 00000 n +0000159497 00000 n +0000157495 00000 n +0000159620 00000 n +0000163369 00000 n +0000163058 00000 n 0000159770 00000 n -0000159895 00000 n -0000163906 00000 n -0000163471 00000 n -0000160057 00000 n -0000163594 00000 n -0000163719 00000 n -0000163844 00000 n -0000168436 00000 n -0000167750 00000 n -0000164006 00000 n -0000167873 00000 n -0000167998 00000 n -0000168123 00000 n -0000168248 00000 n -0000168373 00000 n -0000170747 00000 n -0000170561 00000 n -0000168549 00000 n -0000170684 00000 n -0000174454 00000 n -0000174143 00000 n -0000170834 00000 n -0000174266 00000 n -0000354995 00000 n -0000353119 00000 n -0000354829 00000 n -0000457514 00000 n -0000175950 00000 n -0000175764 00000 n -0000174580 00000 n -0000175887 00000 n -0000177731 00000 n -0000176981 00000 n -0000176050 00000 n -0000177104 00000 n -0000177354 00000 n -0000177417 00000 n -0000177480 00000 n -0000177543 00000 n -0000177606 00000 n -0000177669 00000 n -0000183766 00000 n -0000181402 00000 n -0000177830 00000 n -0000183203 00000 n -0000183453 00000 n -0000181609 00000 n -0000181802 00000 n -0000181996 00000 n -0000182219 00000 n -0000182442 00000 n -0000182631 00000 n -0000182807 00000 n -0000183015 00000 n -0000183516 00000 n -0000183579 00000 n -0000183641 00000 n -0000183704 00000 n -0000188490 00000 n -0000187183 00000 n -0000183891 00000 n -0000187306 00000 n -0000187369 00000 n -0000187494 00000 n -0000187619 00000 n -0000187744 00000 n -0000187869 00000 n -0000187931 00000 n -0000187993 00000 n -0000188056 00000 n -0000188119 00000 n -0000188182 00000 n -0000188307 00000 n -0000188428 00000 n -0000192289 00000 n -0000190983 00000 n -0000188590 00000 n -0000191106 00000 n -0000191231 00000 n -0000191354 00000 n -0000191479 00000 n -0000191604 00000 n -0000191729 00000 n -0000191854 00000 n -0000191979 00000 n -0000192101 00000 n -0000192226 00000 n -0000196296 00000 n -0000195111 00000 n -0000192402 00000 n -0000195234 00000 n -0000195359 00000 n -0000195484 00000 n -0000195609 00000 n -0000195734 00000 n -0000195858 00000 n -0000195983 00000 n -0000196108 00000 n -0000196233 00000 n -0000457639 00000 n -0000200381 00000 n -0000199447 00000 n -0000196409 00000 n -0000199570 00000 n -0000199695 00000 n -0000199819 00000 n -0000199944 00000 n -0000200069 00000 n -0000200194 00000 n -0000200319 00000 n -0000204118 00000 n -0000203307 00000 n -0000200507 00000 n -0000203430 00000 n -0000203555 00000 n -0000203680 00000 n -0000203805 00000 n -0000203930 00000 n -0000204055 00000 n -0000207810 00000 n -0000207375 00000 n -0000204244 00000 n -0000207498 00000 n -0000207623 00000 n -0000207748 00000 n -0000212719 00000 n -0000212283 00000 n -0000207923 00000 n -0000212406 00000 n -0000212531 00000 n -0000212656 00000 n -0000216691 00000 n -0000216130 00000 n -0000212845 00000 n -0000216253 00000 n -0000216378 00000 n -0000216503 00000 n -0000216628 00000 n -0000220695 00000 n -0000220009 00000 n -0000216830 00000 n -0000220132 00000 n -0000220257 00000 n -0000220382 00000 n -0000220507 00000 n -0000220632 00000 n -0000457764 00000 n -0000225051 00000 n -0000224116 00000 n -0000220821 00000 n -0000224239 00000 n -0000224364 00000 n -0000224489 00000 n -0000224614 00000 n -0000224739 00000 n -0000224864 00000 n -0000224988 00000 n -0000228989 00000 n -0000228429 00000 n -0000225177 00000 n -0000228552 00000 n -0000228676 00000 n -0000228801 00000 n -0000228926 00000 n -0000232338 00000 n -0000230902 00000 n -0000229115 00000 n -0000231025 00000 n -0000231150 00000 n -0000231275 00000 n -0000231400 00000 n -0000231525 00000 n -0000231650 00000 n -0000231775 00000 n -0000231900 00000 n -0000232025 00000 n -0000232150 00000 n -0000232275 00000 n -0000236083 00000 n -0000234899 00000 n -0000232464 00000 n -0000235022 00000 n -0000235147 00000 n -0000235272 00000 n -0000235396 00000 n -0000235521 00000 n -0000235646 00000 n -0000235771 00000 n -0000235895 00000 n -0000236020 00000 n -0000240011 00000 n -0000239202 00000 n -0000236196 00000 n -0000239325 00000 n -0000239450 00000 n -0000239575 00000 n -0000239700 00000 n -0000239825 00000 n -0000239950 00000 n -0000243893 00000 n -0000242708 00000 n -0000240137 00000 n -0000242831 00000 n -0000242956 00000 n -0000243081 00000 n -0000243206 00000 n -0000243331 00000 n -0000243456 00000 n -0000243581 00000 n -0000243706 00000 n -0000243831 00000 n -0000457889 00000 n -0000247006 00000 n -0000246073 00000 n -0000244006 00000 n -0000246196 00000 n -0000246321 00000 n -0000246446 00000 n -0000246569 00000 n -0000246693 00000 n -0000246818 00000 n -0000246943 00000 n -0000250391 00000 n -0000249580 00000 n -0000247158 00000 n -0000249703 00000 n -0000249828 00000 n -0000249953 00000 n -0000250078 00000 n -0000250203 00000 n -0000250328 00000 n -0000253973 00000 n -0000252915 00000 n -0000250517 00000 n -0000253038 00000 n -0000253163 00000 n -0000253286 00000 n -0000253411 00000 n -0000253536 00000 n -0000253661 00000 n -0000253785 00000 n -0000253910 00000 n -0000256971 00000 n -0000256410 00000 n -0000254086 00000 n -0000256533 00000 n -0000256658 00000 n -0000256783 00000 n -0000256908 00000 n -0000260597 00000 n -0000259787 00000 n -0000257084 00000 n -0000259910 00000 n -0000260035 00000 n -0000260160 00000 n -0000260285 00000 n -0000260410 00000 n -0000260535 00000 n -0000263930 00000 n -0000263245 00000 n -0000260710 00000 n -0000263368 00000 n -0000263493 00000 n -0000263618 00000 n -0000263743 00000 n -0000263868 00000 n -0000458014 00000 n -0000267934 00000 n -0000267248 00000 n -0000264043 00000 n -0000267371 00000 n -0000267621 00000 n -0000267746 00000 n -0000267871 00000 n -0000271760 00000 n -0000271072 00000 n -0000268046 00000 n -0000271195 00000 n -0000271258 00000 n -0000271321 00000 n -0000271384 00000 n -0000271447 00000 n -0000271510 00000 n -0000271573 00000 n -0000271635 00000 n -0000271698 00000 n -0000275351 00000 n -0000274915 00000 n -0000271873 00000 n -0000275038 00000 n -0000275163 00000 n -0000275288 00000 n -0000279613 00000 n -0000279427 00000 n -0000275477 00000 n -0000279550 00000 n -0000280717 00000 n -0000280531 00000 n -0000279726 00000 n -0000280654 00000 n -0000283457 00000 n -0000283021 00000 n -0000280817 00000 n -0000283144 00000 n -0000283394 00000 n -0000458139 00000 n -0000287518 00000 n -0000287082 00000 n -0000283556 00000 n -0000287205 00000 n -0000287455 00000 n -0000292048 00000 n -0000291241 00000 n -0000287617 00000 n -0000291364 00000 n -0000291489 00000 n -0000291613 00000 n -0000291737 00000 n -0000291860 00000 n -0000291985 00000 n -0000296277 00000 n -0000295467 00000 n -0000292161 00000 n -0000295590 00000 n -0000295715 00000 n -0000295840 00000 n -0000295965 00000 n -0000296090 00000 n -0000296214 00000 n -0000298601 00000 n -0000298290 00000 n -0000296390 00000 n -0000298413 00000 n -0000298538 00000 n -0000302537 00000 n -0000301977 00000 n -0000298727 00000 n -0000302100 00000 n -0000302350 00000 n -0000302474 00000 n -0000306367 00000 n -0000305995 00000 n -0000302636 00000 n -0000306118 00000 n -0000306243 00000 n -0000306305 00000 n -0000458264 00000 n -0000308094 00000 n -0000307908 00000 n -0000306519 00000 n -0000308031 00000 n -0000311633 00000 n -0000310822 00000 n -0000308220 00000 n -0000310945 00000 n -0000311195 00000 n -0000311320 00000 n -0000311445 00000 n -0000311570 00000 n -0000315131 00000 n -0000314695 00000 n -0000311732 00000 n -0000314818 00000 n -0000314943 00000 n -0000315068 00000 n -0000318411 00000 n -0000317850 00000 n -0000315257 00000 n -0000317973 00000 n -0000318223 00000 n -0000318348 00000 n -0000320399 00000 n -0000319838 00000 n -0000318536 00000 n -0000319961 00000 n -0000320211 00000 n -0000320336 00000 n -0000321770 00000 n -0000321584 00000 n -0000320498 00000 n -0000321707 00000 n -0000458389 00000 n -0000324876 00000 n -0000324315 00000 n -0000321883 00000 n -0000324438 00000 n -0000324563 00000 n -0000324688 00000 n -0000324813 00000 n -0000327728 00000 n -0000327417 00000 n -0000325002 00000 n -0000327540 00000 n -0000327665 00000 n -0000330506 00000 n -0000330320 00000 n -0000327854 00000 n -0000330443 00000 n -0000332014 00000 n -0000331828 00000 n -0000330632 00000 n -0000331951 00000 n -0000335490 00000 n -0000334739 00000 n -0000332114 00000 n -0000334862 00000 n -0000334987 00000 n -0000335112 00000 n -0000335175 00000 n -0000335238 00000 n -0000335301 00000 n -0000335364 00000 n -0000335427 00000 n -0000337031 00000 n -0000336720 00000 n -0000335616 00000 n -0000336843 00000 n -0000336906 00000 n -0000336969 00000 n -0000458514 00000 n -0000340490 00000 n -0000339944 00000 n -0000337144 00000 n -0000340239 00000 n -0000340302 00000 n -0000340365 00000 n -0000340088 00000 n -0000340428 00000 n -0000341831 00000 n -0000341645 00000 n -0000340603 00000 n -0000341768 00000 n -0000344033 00000 n -0000343721 00000 n -0000341931 00000 n -0000343844 00000 n -0000343907 00000 n -0000343970 00000 n -0000346124 00000 n -0000345563 00000 n -0000344133 00000 n -0000345686 00000 n -0000345811 00000 n -0000345936 00000 n -0000346061 00000 n -0000347945 00000 n -0000347384 00000 n -0000346237 00000 n -0000347507 00000 n -0000347757 00000 n -0000347882 00000 n -0000352037 00000 n -0000351339 00000 n -0000348044 00000 n -0000351849 00000 n -0000351492 00000 n -0000351668 00000 n -0000458639 00000 n -0000352123 00000 n -0000355205 00000 n -0000355230 00000 n -0000365690 00000 n -0000368173 00000 n -0000368204 00000 n -0000371597 00000 n -0000381801 00000 n -0000382076 00000 n -0000399833 00000 n -0000419130 00000 n -0000419559 00000 n -0000437152 00000 n -0000442576 00000 n -0000456493 00000 n -0000458719 00000 n -0000458844 00000 n -0000458970 00000 n -0000459069 00000 n -0000459151 00000 n -0000481181 00000 n -0000496580 00000 n -0000496621 00000 n -0000496661 00000 n -0000496892 00000 n +0000163181 00000 n +0000324449 00000 n +0000322573 00000 n +0000324283 00000 n +0000427158 00000 n +0000164846 00000 n +0000164660 00000 n +0000163495 00000 n +0000164783 00000 n +0000166487 00000 n +0000165737 00000 n +0000164946 00000 n +0000165860 00000 n +0000166110 00000 n +0000166173 00000 n +0000166236 00000 n +0000166299 00000 n +0000166362 00000 n +0000166425 00000 n +0000172287 00000 n +0000169923 00000 n +0000166586 00000 n +0000171724 00000 n +0000171974 00000 n +0000170130 00000 n +0000170323 00000 n +0000170517 00000 n +0000170740 00000 n +0000170963 00000 n +0000171152 00000 n +0000171328 00000 n +0000171536 00000 n +0000172037 00000 n +0000172100 00000 n +0000172162 00000 n +0000172225 00000 n +0000176721 00000 n +0000175414 00000 n +0000172412 00000 n +0000175537 00000 n +0000175600 00000 n +0000175725 00000 n +0000175850 00000 n +0000175975 00000 n +0000176100 00000 n +0000176162 00000 n +0000176224 00000 n +0000176287 00000 n +0000176350 00000 n +0000176413 00000 n +0000176538 00000 n +0000176659 00000 n +0000179891 00000 n +0000178585 00000 n +0000176821 00000 n +0000178708 00000 n +0000178833 00000 n +0000178956 00000 n +0000179081 00000 n +0000179206 00000 n +0000179331 00000 n +0000179456 00000 n +0000179581 00000 n +0000179703 00000 n +0000179828 00000 n +0000183176 00000 n +0000181991 00000 n +0000180004 00000 n +0000182114 00000 n +0000182239 00000 n +0000182364 00000 n +0000182489 00000 n +0000182614 00000 n +0000182738 00000 n +0000182863 00000 n +0000182988 00000 n +0000183113 00000 n +0000427283 00000 n +0000186459 00000 n +0000185525 00000 n +0000183289 00000 n +0000185648 00000 n +0000185773 00000 n +0000185897 00000 n +0000186022 00000 n +0000186147 00000 n +0000186272 00000 n +0000186397 00000 n +0000189425 00000 n +0000188614 00000 n +0000186585 00000 n +0000188737 00000 n +0000188862 00000 n +0000188987 00000 n +0000189112 00000 n +0000189237 00000 n +0000189362 00000 n +0000191869 00000 n +0000191434 00000 n +0000189551 00000 n +0000191557 00000 n +0000191682 00000 n +0000191807 00000 n +0000195065 00000 n +0000194629 00000 n +0000191982 00000 n +0000194752 00000 n +0000194877 00000 n +0000195002 00000 n +0000198979 00000 n +0000198418 00000 n +0000195191 00000 n +0000198541 00000 n +0000198666 00000 n +0000198791 00000 n +0000198916 00000 n +0000202539 00000 n +0000201853 00000 n +0000199118 00000 n +0000201976 00000 n +0000202101 00000 n +0000202226 00000 n +0000202351 00000 n +0000202476 00000 n +0000427408 00000 n +0000206180 00000 n +0000205245 00000 n +0000202665 00000 n +0000205368 00000 n +0000205493 00000 n +0000205618 00000 n +0000205743 00000 n +0000205868 00000 n +0000205993 00000 n +0000206117 00000 n +0000209422 00000 n +0000208862 00000 n +0000206306 00000 n +0000208985 00000 n +0000209109 00000 n +0000209234 00000 n +0000209359 00000 n +0000212289 00000 n +0000210853 00000 n +0000209548 00000 n +0000210976 00000 n +0000211101 00000 n +0000211226 00000 n +0000211351 00000 n +0000211476 00000 n +0000211601 00000 n +0000211726 00000 n +0000211851 00000 n +0000211976 00000 n +0000212101 00000 n +0000212226 00000 n +0000215202 00000 n +0000214018 00000 n +0000212415 00000 n +0000214141 00000 n +0000214266 00000 n +0000214391 00000 n +0000214515 00000 n +0000214640 00000 n +0000214765 00000 n +0000214890 00000 n +0000215014 00000 n +0000215139 00000 n +0000218553 00000 n +0000217744 00000 n +0000215315 00000 n +0000217867 00000 n +0000217992 00000 n +0000218117 00000 n +0000218242 00000 n +0000218367 00000 n +0000218492 00000 n +0000222037 00000 n +0000220852 00000 n +0000218679 00000 n +0000220975 00000 n +0000221100 00000 n +0000221225 00000 n +0000221350 00000 n +0000221475 00000 n +0000221600 00000 n +0000221725 00000 n +0000221850 00000 n +0000221975 00000 n +0000427533 00000 n +0000224919 00000 n +0000223986 00000 n +0000222150 00000 n +0000224109 00000 n +0000224234 00000 n +0000224359 00000 n +0000224482 00000 n +0000224606 00000 n +0000224731 00000 n +0000224856 00000 n +0000227472 00000 n +0000226661 00000 n +0000225071 00000 n +0000226784 00000 n +0000226909 00000 n +0000227034 00000 n +0000227159 00000 n +0000227284 00000 n +0000227409 00000 n +0000230392 00000 n +0000229334 00000 n +0000227598 00000 n +0000229457 00000 n +0000229582 00000 n +0000229705 00000 n +0000229830 00000 n +0000229955 00000 n +0000230080 00000 n +0000230204 00000 n +0000230329 00000 n +0000233171 00000 n +0000232610 00000 n +0000230505 00000 n +0000232733 00000 n +0000232858 00000 n +0000232983 00000 n +0000233108 00000 n +0000236494 00000 n +0000235684 00000 n +0000233284 00000 n +0000235807 00000 n +0000235932 00000 n +0000236057 00000 n +0000236182 00000 n +0000236307 00000 n +0000236432 00000 n +0000239005 00000 n +0000238320 00000 n +0000236607 00000 n +0000238443 00000 n +0000238568 00000 n +0000238693 00000 n +0000238818 00000 n +0000238943 00000 n +0000427658 00000 n +0000242589 00000 n +0000241903 00000 n +0000239118 00000 n +0000242026 00000 n +0000242276 00000 n +0000242401 00000 n +0000242526 00000 n +0000246171 00000 n +0000245483 00000 n +0000242701 00000 n +0000245606 00000 n +0000245669 00000 n +0000245732 00000 n +0000245795 00000 n +0000245858 00000 n +0000245921 00000 n +0000245984 00000 n +0000246046 00000 n +0000246109 00000 n +0000249538 00000 n +0000249102 00000 n +0000246284 00000 n +0000249225 00000 n +0000249350 00000 n +0000249475 00000 n +0000253150 00000 n +0000252964 00000 n +0000249664 00000 n +0000253087 00000 n +0000254228 00000 n +0000254042 00000 n +0000253263 00000 n +0000254165 00000 n +0000256940 00000 n +0000256504 00000 n +0000254328 00000 n +0000256627 00000 n +0000256877 00000 n +0000427783 00000 n +0000260914 00000 n +0000260478 00000 n +0000257039 00000 n +0000260601 00000 n +0000260851 00000 n +0000265254 00000 n +0000264447 00000 n +0000261013 00000 n +0000264570 00000 n +0000264695 00000 n +0000264819 00000 n +0000264943 00000 n +0000265066 00000 n +0000265191 00000 n +0000269386 00000 n +0000268576 00000 n +0000265367 00000 n +0000268699 00000 n +0000268824 00000 n +0000268949 00000 n +0000269074 00000 n +0000269199 00000 n +0000269323 00000 n +0000271675 00000 n +0000271364 00000 n +0000269499 00000 n +0000271487 00000 n +0000271612 00000 n +0000275575 00000 n +0000275015 00000 n +0000271801 00000 n +0000275138 00000 n +0000275388 00000 n +0000275512 00000 n +0000279384 00000 n +0000279012 00000 n +0000275674 00000 n +0000279135 00000 n +0000279260 00000 n +0000279322 00000 n +0000427908 00000 n +0000281097 00000 n +0000280911 00000 n +0000279536 00000 n +0000281034 00000 n +0000284380 00000 n +0000283569 00000 n +0000281223 00000 n +0000283692 00000 n +0000283942 00000 n +0000284067 00000 n +0000284192 00000 n +0000284317 00000 n +0000287555 00000 n +0000287119 00000 n +0000284479 00000 n +0000287242 00000 n +0000287367 00000 n +0000287492 00000 n +0000290474 00000 n +0000289913 00000 n +0000287681 00000 n +0000290036 00000 n +0000290286 00000 n +0000290411 00000 n +0000292387 00000 n +0000291826 00000 n +0000290599 00000 n +0000291949 00000 n +0000292199 00000 n +0000292324 00000 n +0000293747 00000 n +0000293561 00000 n +0000292486 00000 n +0000293684 00000 n +0000428033 00000 n +0000296788 00000 n +0000296227 00000 n +0000293860 00000 n +0000296350 00000 n +0000296475 00000 n +0000296600 00000 n +0000296725 00000 n +0000299283 00000 n +0000298972 00000 n +0000296914 00000 n +0000299095 00000 n +0000299220 00000 n +0000301682 00000 n +0000301496 00000 n +0000299409 00000 n +0000301619 00000 n +0000303106 00000 n +0000302920 00000 n +0000301808 00000 n +0000303043 00000 n +0000305862 00000 n +0000305111 00000 n +0000303206 00000 n +0000305234 00000 n +0000305359 00000 n +0000305484 00000 n +0000305547 00000 n +0000305610 00000 n +0000305673 00000 n +0000305736 00000 n +0000305799 00000 n +0000307338 00000 n +0000307027 00000 n +0000305988 00000 n +0000307150 00000 n +0000307213 00000 n +0000307276 00000 n +0000428158 00000 n +0000310349 00000 n +0000309803 00000 n +0000307451 00000 n +0000310098 00000 n +0000310161 00000 n +0000310224 00000 n +0000309947 00000 n +0000310287 00000 n +0000311675 00000 n +0000311489 00000 n +0000310462 00000 n +0000311612 00000 n +0000313761 00000 n +0000313449 00000 n +0000311775 00000 n +0000313572 00000 n +0000313635 00000 n +0000313698 00000 n +0000315781 00000 n +0000315220 00000 n +0000313861 00000 n +0000315343 00000 n +0000315468 00000 n +0000315593 00000 n +0000315718 00000 n +0000317566 00000 n +0000317005 00000 n +0000315894 00000 n +0000317128 00000 n +0000317378 00000 n +0000317503 00000 n +0000321491 00000 n +0000320793 00000 n +0000317665 00000 n +0000321303 00000 n +0000320946 00000 n +0000321122 00000 n +0000428283 00000 n +0000321577 00000 n +0000324659 00000 n +0000324684 00000 n +0000335144 00000 n +0000337627 00000 n +0000337658 00000 n +0000341051 00000 n +0000351255 00000 n +0000351530 00000 n +0000369287 00000 n +0000388584 00000 n +0000389013 00000 n +0000406606 00000 n +0000412218 00000 n +0000426137 00000 n +0000428363 00000 n +0000428488 00000 n +0000428614 00000 n +0000428713 00000 n +0000428795 00000 n +0000450825 00000 n +0000466224 00000 n +0000466265 00000 n +0000466305 00000 n +0000466536 00000 n trailer << /Size 1983 @@ -12232,5 +12146,5 @@ trailer /Info 1982 0 R >> startxref -497048 +466732 %%EOF diff --git a/docs/Samba-HOWTO-Collection.pdf b/docs/Samba-HOWTO-Collection.pdf index 5c604b7003..615d283124 100644 --- a/docs/Samba-HOWTO-Collection.pdf +++ b/docs/Samba-HOWTO-Collection.pdf @@ -4281,12 +4281,11 @@ endobj << /S /GoTo /D [2858 0 R /Fit ] >> endobj 2860 0 obj << -/Length 233 +/Length 223 /Filter /FlateDecode >> stream -xڍOK1)rM;]`oAfWQكޖ]G^^~4 Ðtb~A0x_iOeIC\4h['9=)XSvPU ?I탹_ݮ[fZQ5w[-w8]\j(L:Ǽi<
gb -k
"ajڒ?kfs|
%2_endstream +xڍ?O1sC'N:jAl-= ]=>W)dPydRLVhV<Tt$Bd!h= 3 IS"D&nɨiR{#)Hy{vdǵc~iߵZm{6~)jV.ɓ
endobj 2858 0 obj << /Type /Page @@ -4306,18 +4305,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 2872 0 obj << -/Length 1451 +/Length 1373 /Filter /FlateDecode >> stream -xڍWK60RHz3A.)=4=VV
I)r
Xp838/E?ȓ0"0bQV^ ǡ&J+Daj""Y(,b~Z4L,?zW˕̒`\Y`?T4OJY18,ڶd~\Wx8X%hڀ+'2.AOG<jpJR뷀J a@6';!FYώ|j["֜8g{ -#eūz@
w(U$Iq8q:?'!Wv -y9
L<n?><Nm}#L]3:ʄ# -40:"B~;0ָVtцEo"┯1!Fػ!H$%BT"r:ܫ 5sh[Ӱ/av2k 1];E[5J/m]m\ZJ],Bsx&-&+C?t_#T݄ܶJFY(.l5Gھ~AL&j~m:T(oGg ^Ew2S*m<KBB1 -dQpT1wm8N\*ʃœ帎m~͗I96Qv穿u۶-!R|@3МP莣; 0GsfB# eV;N5:{J$c惭RTRsjL VoVbGE2D0rY\<)4"O_3&l- 8K{bI5*N` -6UGk -;=d&Pe} Eox8 ܾs@23nQk1 -syFR#jq=8U6IW]J's'q6s@Puݫ@h'pqs?T-onkA*&-چy&փcؘkNl͠Y1^h{ -]CHL)m禼cmy|vԹ-eީCk܌A6Ndu`#9S[^tZ¤\0}p8p8gyH0C&=9:(ks.߲WS'̾.#ɧw8<wd<̘<l|C!<'uX؏e|>%b'䬦GLB%wendstream +xڕWKs6Wh|)5$[N%!~ EIvgL`wY@lg2ΊM0&tq$is1pQ4̏_d~ˮʿն%z2gAe[gyˢl#, ߷tN,M)ҚhQ_RknQzj[rK'(y%j?_$ivn;}1(IL##$5t=9M)rz^|;LJߔrU}SeypE@b5oН_!ڷm\Қhn8W8gbO9`BzȫbpvL]O˿ыOG!$tY44F$8_#5JXT& +Wpj0J}RƁK)n0ڍ^JY=W۾ww<NڷFGY|P~;úBp?\w+B1.ch##*eMQYaϘt/I \Dď#5g|gj_TRsдثlf7Sjpxjq֗ݕzoetTHUThKMx}u) +\~7:>)O͵@Yx_LUFK7=;LGi^p;^6w&}bs8ȱ\N7=}}Rrҭ*[}̗ *e&}^4cŕnhqI2=mAdž6%BNت57y<Xh~@Bbq.cOLW;:0ݏ
D^|
Vf)\8<ix9$zQY6)pnu'p#dj)cSD + +˽hwmJBzx7$Ksjeq;Tݳ+tyD2"1v>2l4<U?15XM(<Nsg~qU3Y +n-g +u[eZTbI#c8Wn30&Ő5_ +hIVNB:wn.!ɅS[=uULҸ endobj 2871 0 obj << /Type /Page @@ -4359,31 +4358,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 2886 0 obj << -/Length 3961 +/Length 2140 /Filter /FlateDecode >> stream -xڵ\ms_Ly>Nrve73I>P$,1@$w -#7m-%sLJxMݴt?oJ{[`~Z<b7WvCTֻ}.n99}w!,Gy@+`l㛤Tb,)xySIB|ԕs
.3L"/^<==ϻl`^ -19#:EIO.*b)PCJ$e'x 4vVxʬEr4KeK?a(l's͒ su$ٷ <rT$jRArxACS%.V %r
O+В(ا9| H"h:` rV`o8_<ٺtmDVH,E7+IĊfIJ+qr55K|/õ-V`ghiQ0 {Ȇ?)c;Ki -TWХửY<DҗP.-0 -wc~]H00(Tq/<AY<"alhY<p ,&(a/ӡK.P)C -DBB-$:R:/R~BC6|Xh-Vc
jȂ.qDu|E30g?sˡa[XMN[dgw1X Oun:~{zgן]1S+$Um(u[BB;CF -̌CWfhZhmiB -a_h[4N_f *%
(d -} 6¾ж88 -m_!8
ΫB_! -TWХzWjw%8O]
ջj$+T{G{wU1K}Xٓ~mXD"ZIKVG<q&tӡK3)]V:0x҉
J796)D -(HYh ,:LHNC,tW&kbm:5d~1hiR-9B06g4( -V" A9a:t Csh,RЄȥbC9K^P!%&)&rB#Je)(X9:Ha&Sqv%o7aҫQ*Ez*zMDŽيT9f1D2:&-"LQ
vg)]&˴88Leĝ!U($$ [/ ÛKP[\EmhuY!\Abĝ}Dà.)Vk?{ZdT;VoCf&#,kM#ínzd.(8#)ex &`ӡ+m4gjHuᆔl<!%64&WC7rBa0d9|W7{#EfxWELTSIҦI!T]@1uHcC."0!];]XeL:bRM'IcRcL -n͒0b|hVͶr\IyBbj =NR#=(0Aٛ]Q
g)688 -l_ŧZ`ȯt A>?I};f%7e!5bS^?_/]zwh7am9 4%y`3@ `ӡ+G4gj8GΆrې#&Wh$9#2#IK,Q7s_Q&+L,
AmK0>, [0K#)p-;L(4[d:IwxdQ
&0xJ2QqH&7ߖz%o2u1Z.Fm}ۨ
}?O_1~q9:*r݀c!gIQwv`0r@sxƈtxA7M0֠B؏5,;e"
WB9b:t)DsxD4yD~"bYrQ@/ -rt<3#oio*p̷1sGc -h0 rt -,i8&OEQ,K, -k 0&(a/ӡK#l<G͡+Q?+0%oakq_iQ^7JMڵKqYxDوVnj'(G7iIJ&a3"tᙲGa!6d= -(ZBa0d9< -h0؉3 !@#<H 8x$8<>ܺx*y63Ul\(ƍ,M;1o.ph?Ғendstream +xks6~>R3͍:%6vۛihD$HE*dI8Hp ,OǸ +D?xOzB3j|Gy0o{9a؟\O1U~ڻ<s6J_@{Lkwfc]!UCuCW_dMC.Cq2màBLqFL 1)
MKCx | +@ +-CG$v2z;sSC{Oa!"7@z +eD
6@[[Y +tr#LEV(hZ . ~{(TtHtȁVltOYf~gX6PG#jy!* CVR.aUob*,P,pv)sׁ<@.lNlԸ7[g^>#g-ekd5%ۿp& ϓ(3pKnGmy{LigJ3>ǵ*y-DSWH4߽4ވs' Ey~)b +=&T[SHh7f\Ϭ{T> ӣv(l]vb +oN_.)zD\/_D]EIS_qe˃JpSb^6M \-"Gj*e.RNӱ.:sFxiDr +sмus2_H:J߬J (a+Mmo#.Iib-@9*c^3uO趙:#.?0"
&Ҽ| +V*g7z>iu,݀mi;AS[9<Vw._6W¼}^f
ɺpVݷ2$Eb5|QyOG+_b{9fSًa +[τq|nEz͟uq1UgKMPme endobj 2885 0 obj << /Type /Page @@ -4716,30 +4705,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 2964 0 obj << -/Length 4158 -/Filter /FlateDecode ->> -stream -xڵ\Ys6~У`$xVmmٙ5Ύ!-2cIt$zm\$UJĖk4"E_<+3jV9h<[l. -"*"*w]G4[͛'9"qU6iFIR⿃]:\a(!I?Јe괉iNḫ,#yZ0.6Ngr:{i[6=?\|s7x$Y9|0f9) -O
ab6>^&ռ"(Im7eccОtE$"u氌ZEJ';')FʆAa7e[٣y=ZAg{Y}mcZ-+H~uI:7!)) - JaH蒂LRС`6%F)\R@3dOipE-^RB86m[?9Oz^O0L)QئKwnڝI6ۣgAʈllsMG'H'oT6ݾo+k|Ŏujc R|-\7/̸\O_v2֛jtx*s5-̴$ɲyOcTN&$'͗_NV@,ɶ۳{1t-*R6H9-ddc:Ō[a7]JO5`%|@miToJibcѵ5uK+ω{v*kp0ax^~{.%1AwV-߾<&h4.]oLjdu<pLS@]d)ׅ b҅6S?p
@[,CyzCfS~AHk}zM1^ie}rnJJ:$6T66I%2uV"yF~H EÈ.hkvC4⹇
转R])k $aq1E&Lfb6] -1_(&q-llT9uJVS')ɟ-
O?5HbJ4-YLMɝ,-%%,ڏhS2T$IP%'D$F4FhgˢP@J#`y1!m0|>Zin^jnOZSNXM@8}gHTR66$nhѼ1V:GYėkV jožU}yzy\eç}xZߋ\>eoeްg˺Wƒ`5L˧YQ0(n4_~XiYd\\ۊ&~?+! $;DE9ɁFЈ5 -t)J;`!AP&:B3k,\2"m1<jpl8<fkaX:AieIh䧅 8袅݈^8*4
ia4? >4pxh3롵lqո-*ݮ]Z^-.|Kb&rI0sJB)) -\~|J_#("QMqu_'!0/'qI2heie,f@W/ko{5U|/gool#nggT|7_X
g{ -t⮚~[?)0Y&H2h+*NNy(F~H IÌ.hϽ3^.XpXű08Vqt~))P6A`]gg5a6۰cap )I,[+^3,?ۅ*-} -'yTl}#$]8 -KsyU%i ͥ1ڙDkx([l0=/mt˾W'Tbѽl=C2ֱN6ѢQvf"|Rلȯ -蠿<@
- -|6N -ΧOin"(v%m}!2<Sա-pxTEmL&W@xlZ+e mAW5NM/~2In5WV7|eb|+zs/[O@1#&-ekHrz8֭"m1ǛoI;a]q;Nwq_Uq \?75 -t_c5KjFX #a
ll\:_GxS<?~rg햃feu_/l[))3/$c)ػY`S6Ayy]t@
f1nC`ap: -H:' -
u]*cmZE|\pŐ9So1 -nÈbap):`7'y _ӊ_~> =\ iMreYͽ,v+7jl$;^¤lxdlj:ЌTl}!1T<jta
GiQ5&j4~ -fU8tvCES09ȡE;w#vE8xC
np -?WN3(z5A%'t0]zݬ IAX/T~7\orᕆ1|ݕQW][kʈjMG wp=h=h{hN:pDHH
IH +/Length 2316 +/Filter /FlateDecode +>> +stream +x\[s~̌nTKvga<X" {_{$#aOXri\{z,
(YL3ޙÝwgh;}W?~wÙx9ۉL`ió{fzf7}K&xcpe
[ߏξy+LdtF3j1/Nч7Ι#-fZi9=M^0n +W<{}
C.LJY<1)\G+鼸yQO:1|X7;pfHx6lWe8>$s00H0,O$l96A8Y,zbCT_HhY3} Ưߔ㗼q$b1mӅu\e IE6'L٦xz5RP+= y?%Jf^02ЫŁw`\ᱶոL +{g9DAZ +;Fo0ʱ-)8sM> kݽB p2+t2 +C:/ٟaCFkFTlTjQ)55]ڑP[Σlya:'RBh UK1k
b]/t{m'؉h>֞;JZ;\
+QSfjz $!bnǠ˔I}bI!GyFAөIF63pC4y$PȬM`NLLo(Y7Y|:Ɏۘb/<9Ҁ>\4! endobj 2963 0 obj << /Type /Page @@ -4860,8 +4835,8 @@ endobj 2983 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[0 1 1] -/Rect [215.935 489.7 317.305 500.548] -/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tpot@linuxcare.com.au)>> +/Rect [215.935 489.7 288.302 500.548] +/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tpot@samba.org)>> >> endobj 2984 0 obj << /Type /Annot @@ -5088,20 +5063,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3039 0 obj << -/Length 1737 +/Length 1067 /Filter /FlateDecode >> stream -xڵZr6}WzA -B!"p- -0c -b%(NrBzCRݐT {8<RӞW*$W0+ᩇ\oG??t3M.JS(jjN&m>/BX -#ZÌ+^@C qAp5ԡقNDNwC-'X_4ڮl#=?S`y4Y;y2w(\wZ7(M*a7aH7VvV|Jػ!`6B`mb0 -I%&)JxYZ_͇a7J -C:ENrv6XM -n$a|Y*S<ҷ"Eorf1ߚ=k}WWfRoAbq|&rX7oy{\/+߂.!gn9պ0b%:M+3uMu3D݆p9:"*):cєi;ڝW[TG] -P_ի[sN -ضBvQjwn%|I&}Ƥ|̤(0)B!>)^rD!(UH*a7aH!VB +xYKsF+tLզq[rAXR=# Z;EU(Ạ<MH`$Qo==^30_;%,' J}~[^jSM_RN/c1BXNG."'tytiDyK*"Փ%U{8{>
Bp43?E`{IL~-V5=7-T:| +=tuEbָk˪D{?}ҀG~M0$B̚)ΛϮ}rVۨWsKrYϧI+k +t;"YuY4M,rqB2v~^p3tޗ['(+@kӕ%P=m:L=
j
K}[_1|HB-'QAPi#
endstream endobj 3038 0 obj << /Type /Page @@ -5240,19 +5208,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3069 0 obj << -/Length 2716 +/Length 1876 /Filter /FlateDecode >> stream -xKsF\V扽lY~dZ%H.`@lo<0C3&Q"YqUL -[cUF(-]JAsH3;5ޓ8n5}u^ќYuy F4d uF
ggۢP+˩TPXVY.:lƕ*>\.a-nD(ZSQ6$z|IԭO`{jgKpsfty5kf`L>aNMCn4 -Qwz[9ь>
NWCnHg5R8?>̇HG{4bn|+'2t!)}Ҥsv+Aj*iH3zs6ÿp 8
][f D0K/@z f -7jCanXڒaf팮* VtKq<hp;epNJ)}Ҹsv_VY,nE.ob2]+>ĩ3jvX7|e:/?)o|n|f|YH)VW<lVfbc/gy>
wMxx1o-wC);HU5mpu[M)J@;W_twًӋSlWZ~<yfcY[}pO0UPJ-rMkx"k ?9~fânei_2-SouaMnʛQNޛt_x
Oǰ$}P[m$۾ -/i誄ϥʟvmihҜqg^lOLͥ {'il:+tNJSg89*{`iF(2w~nv%6G1ިOn>8~/q}
hQMɗ*T]uGS8tU\ `u9n.vs1P5vElI4,_b0[Mގ2.-QqG- -d=oGgv/xue -J3zL$%]FQQf -qm|p`ĝvR,|HɤSJ{TQ{c"%&1)mPpܾ -ے]Id#)leԟ= cyg %\N&BQg{9Dendstream +xZKsHW UayIl6bS9 +!~{F;O'&Cx~|3֎SBϛ#tvN=_hwO#vzos:Ϫ$Jkmk7z=ȥԞa<rE,2;]Áv"MN pg*ͳ d@b6\_ )vy +/!I[h,D /p!6]99>mdQa[:x-^Di]+bA|)0Nlŭ՝>, +۸ʆ#Mqnimjc6T'Vv`*H)oP,eh 詅#)߯fWQ.7x&Jfmt_<jP^Ona=ml^b3z}Z_#orOzN]Gn{in͕9&> b ՜*ڿJ
u
HccԽRaiw=ȋ,/6ixCs/¤ж0t:Zb9&q͌ɧM0 endobj 3068 0 obj << /Type /Page @@ -5511,21 +5474,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3108 0 obj << -/Length 3504 +/Length 2452 /Filter /FlateDecode >> stream -xs6dnLO:^k:ڽMؼJt!Qk#b4U"luR/?pn&^|#ZGsZ.?6 }&^~wr~TM97_\7ồu=Zɉ''r:+"+I7~NQ)%QA&J')||1dJdzmwoobL_o&S]0_)dܾغFjG.fVKo[<-G'S_!zo(t!
)p{5r_~LU -RDgrkm@5_+*J5*# H:ZuUfe~-T蒫ۭkP%3@_CIEDgHLiu %.[g&[LR#vIen=;R~RHXi\i8\ti0<ݧHWJq*XMᡘEB[TZZfI[78쇅 +C+ZF*V=(jCQ_v`JQU.@QųѽAC *<É5HPZJ=JSX_\[sj^LBOeFDZ t/3H~z2UPxQ,/Q# -V8\( "I](zX:o }d;~%2R
j
,"9mk\b ۅ7v}ac`hj7v>IEd,oP8Q,'U -߀^1єioRxe0BXLWF&4(<٬ROvflMM5et7uD1i,>a̅r$.AEܿo&pL5siuf4|1|R -7 -B\sOrkc_r5E20 -,y8\)[Ryu܀`gT,61KdCFD8~pZk$ -9~nK,#l|&)?SPQ,4.< - -Zb~puy7ks#*7LWԽ,kLځR=>WW}ʼnPUP=vq4F|L?<7;7.,w1)_;1Wex;&5š== QIZwd'f <~nD]>T? y>*VbTaZb8+lkX5Hq -TI?fendstream +x\[sH~PjPUDhSʷ$卝nFXb8n@$;vAC;ΑYQY/ÞxOH]i;O¥w?z;t%r6:̧}7>g28<ϽpzCE96:vlɞܖlt_SѬ%k@ԁcEϳNιugV0+0n>?PÄݑΗnO +'L?2alfyjXaMn΅g{\!vbԣ?{Yx]9.~ɁYLFWuM +_>o8\
8ie8tE+*ōTpu8h ]9C,g$b7NEc~4O7 qn]S-7ʵrhبQY3+=K,.RoEI"3anHqxHudu+|PyEC4킆z^$.XSu%=.\W$@HxR6hH'oh>(+hK%b>IHߡ~\|܃Q5$fC7 +G\yX5L-谥%9NBYoaWߨ7LXqu +h%+Mos4xYu +q*#״ +_
i guE*1vNf*iI0!sBje;˺vKoMNPʛE?'&YH + TA95ӒHa'3P٪fՅ$udax +6sTBM13z &PoΝhSˎSn7V,5t]@86=h +C<}Z
Oײ*aХ CZ;<XAڢuhܔh%6~\5/
7f7ᾴ'Ou<Tkpom5/ +P^;*)SOVVxD&6IBG "vߟmr."h%ՒENZ{|ŎEYoط4x
7zl*<L섅tI4
,/LXnEvv>/ ͎K:ŏgZr2H*jUGSyYDp!!>Qi+g;na֯櫱<i&Cut'WX!k?" IrI[[qendstream endobj 3107 0 obj << /Type /Page @@ -5858,26 +5821,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3161 0 obj << -/Length 3197 -/Filter /FlateDecode ->> -stream -xS9+\d,F#iHrU.Ucp6g濿n}3$M}OݒZ=C]7%9LvyC]K2J<?{)ŀVPNS_.~v;~8TM9bof"уp]4QsR_;eQ5V5h-:PTZD -ʪ2)DWEvGRj<T÷t8_s:m!Il`/>}*[W7֔nU)`[FJZrBU -XqQb8x}ZNW 0.)^sswċVT5QӰ!SW~@o$6"AH-iwkdk.<"
hawI˵Yag#P4.H|Fn -, -+ck -B`T/f+?<
ȏRTۅ0+?:Ceh&(C98fЭp0_K_:1[N"<vtJ:uIe,V^%sk7 ϭTkVI7qh|>qCc]b -1X놓"v[; 3,DMSݸ:HzBN!<YZ -V
+ vTݩ1nO?am -;lwoϸ©mK0f+Ld)E`yZmaZQ8ۚ̍f/yp*\aI-O_Ƕu4f+ -
]X9ZA%rF繶jc-TҀtmp]%XbTOs_1[a"<vKXI(z?qMV/c"h{#ep_1[a"L)s
#,귔ф
Qshoe(pҁ.sf.ئ~RIly0;EXkЂHB5iz5M:
ÍmeޛkeOqrK:f+Nd'n@t@ZQBfx!ַԛ]QOI_1[r"or
S.(^'Pk-0;0'cn7 Tߩ -!HEΦv;}'/0ji@ٓ=t'cDy䡗j
͡vtn?>=G<մf(ƾr^8%sj7 ϩTkD%ihH̢04עMxvBȾE&#l7kF$Unaa)D4v&Y^\PécV^ew[lVFlnUnJŕPNb?"w;ɨ2\y]JڳưTe -\}G>iITRֹiǘǪ`ye:wӵ{cXk3\t2~fA߽I|O{[%ʏ/iAj-ʊ̒nn}=B멚Ij@#݀j*EF%ݚK=b|G.%
F'AkP%6rQj~
vްOOZP42$swII%]J"8X? ֻ`5[KmKX/6m -vX4}yI.lKg?] -c r(
ȏR -7ӯHh1
!sL_!Wsys<BAWxc8ih^nBok -z]AiΚ{;%Tk}0}/h4?%ol[ЭGm`exk\6B=^^^HuVw?*UcO\E(&wNOȻlp*yDl:Vϩ&W(`sƄn55i'sendstream +/Length 2114 +/Filter /FlateDecode +>> +stream +x\[sH~WP$$oRakI6ي
Lyfb(b2{n!| y)W![j;#vU(PVؾ-f2#]'HY$a[߽n6p9;?+2Q=/ +w8$iK*()Mw9mToeO۾e=, +L",gÚAǏN`2"Kc>Ov}L1jFŸ4yNxx-kR +
f#< <o$~pQa$Cu +c\ՁZDk4xV9&51ָespsLL(eߑ j +o6;xwA>x9X~G/_;Cʰݩ}\do9ꊎ" +&x[Ai̾mdB.#Ǜ[OfWQ̼4'+h.2s<F{֩y=q':aDY}FÚVa/HO6v1 +VqUsmMMy80[1 +Ee7,5A*DZLj|/F1=cCǵh>z4i#{Kߧ)!| +{6_6aK@yi饽rɊЁkmjRZ5@ȳqjZ+#7Uij҂(9Fcta6fdH + nHR$60Ez +B.ETd_&$srK踱9%9>%j?гI\V|.\Z"{["jP(3'5VÛIL")nȒtHoX~.GQ6GzEaY@N"2K1h*nxMumSl5
9CL=KIS\+dp9&7sE!RZk +U½^
X|k[nl=Afk&-]l9{E)R1{%Fz5/f趒xwU+Z
E<w +ĔϢVv}!)#g\~>>hÆ=q0ZDJgfzMX@W 610ֈV}w8 4Qq\>$T@<&hJTv endobj 3160 0 obj << /Type /Page @@ -6217,31 +6178,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3211 0 obj << -/Length 3455 -/Filter /FlateDecode ->> -stream -xIs"u+RKr -E
;@4IEd"gFX
DrTS5i@欞W~8eMpT&sToՓfJduX˟Ξ]g1;z&tV#^#q8x}vqK|&NjJ%X?ͤ rq4Q!Rj3Tۃ9Wݶ]t+]Ӌn'{'|0ҵ)~@DƱ=u'˛ܕ^j]ylJ{`}ֲT -ŭ>vã\*V#ߵs]\ -2JZ#,}6A=f -?ax=0Фl)b߬.C:nw>q kMsvx(Y(HL2w -=c+`*o --ɶjއT2w~w<,&Z$CBfbp
7kZK%A}(5"u.:ژhdnUUTw)Q6;[SUڭ>'l=֟<Z#20\Gb<JZs{pfǾ}o&ॱ,ZYF -I(
-5R*@JÈ -*CBGTDD(:Ώ3|zntKrIi\sk.DXI9֛Aƶ18#"륱B6HzݔNpan>.CTWڿⲭmwZG#J{h,$V`yf7 - #׃p=(i<a4{yo -&7ף~K#Mc'.KCڌm -R`N\b#1cQ' -Z0 -3wÐKZ#FykYʜoXI@97Lo -p@Dҿ1]+TUR(7͓֍@ͱ;iVJO4~m($dg&V^r -: ,"Г7f[tm
+iy6<X -TrЖ`*% zB ar }6ioЬ.סUrE -rІ`T%7Gu<QpiCX6{`X. -gRPc$00ȀrTv@y>ڟZOϟ]*GXmCR -{
dW*d$9%E%`)ؗw$$= tzA'B>6ݺ]hۮغ_;vq4.&wT'ޑORsO
CU8f#_iƿ;eD2] +/Length 2341 +/Filter /FlateDecode +>> +stream +x\[s6~W0}2uf7쭁>}0$Mml}ut$aIIB$a2$}~dn®`~@d7g$g{fwB"R?;?p
_;<K?"E«S|z
6nҧ>O珿D}Я'RtqRvgʈ(1Π.^:|!!νE#BdGW,j8'ިzeLI뇞M&jxRL+VQ)gow=x}NR(]<8{6"yKfX)i&/5~3k쬳vUſLLiQ+'e2K-}FXZ7er8SopA/`\
3_Gz~ D}|D=cǕ9_ +y*˷%."t>I/WkiK,X"G;5&̬UQZxxac^\"2(>!;w1;P(olrSc|uQvፋ/IoX+;d8[ +$sm +`˔2KdTXbU->
C03t3 źr܆_]|$㲨*/F2EHt_ =0]THu +9wuX!ZblaYj +뾨8.zC>szB
W6Fa7.ˤvuVwM <q";5ݕa9J=2>fiix-ϪͅiCffk\' +b$~c+aLoqTUSֹfHeA2KyaYHS.h(dBI;^n^C7VOR>2;S^0\Xg뇺q5.thy_VUJ}l'YF[Cu +qA@Ft`K'rUyI#^Nuin,ճ0-6\`M;>çJUS+ID91V1**oëU)|'7)Zj6jW˨Obc*ђ>#{#\x+8e^S}#28r+B=-$5@+6aߺ6OҀʹy[Q?,WpPb&]_z8S%j'v
!3NMjcAi=fmcS5
!J4mA5Md9b9pEh2iZ91=BTpq!_Glf[dKH&<w3_8{`Dz} '"xdt{d*J7+&=[䱭VEQz۪*bƗRG*f endobj 3210 0 obj << /Type /Page @@ -6595,22 +6543,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3266 0 obj << -/Length 3477 +/Length 2306 /Filter /FlateDecode >> stream -x[s۶+tޤ#3mNdȒDɿ/n@"6&;Ncjb2deN$Q6T8{d=q.F4#UVߩ2"|tvj9a帝?ɟg=??fU_2«rt3Bjt}$$'Rpyqtz[;1R}$jPU%ɋ|THIrQzPJdBǂL/m,Սɔs1֗t6awEF?tm+al5T#JJ*tً#4yRLY],ѴZy1*#<N^)UtWh;c㴻%iR|PLխ\k?^9{gYiڪ;xߠ`؝bb qSj9uf;7[k -> -0% -NVO!`#1)SvR- L$A'0ܙ
]Ƒ
lOMoyra
nͲd0c땟mKZw3WTXJlJ8ZO%gԠIE5܁Ԩiej=dK-J Sj=HQ涖כYcFTӑf -wv)cUNPzA,A/6#N[^J $>zW&gβi])l1Qtf,3PA,A8650Sj25Uý;.um vM$/+`w( @G-0#̔B6GyՁ]k
29fWB>:2ҠUY/WXWl8W8Z+54CIs -a.4z9_{N09!9`P#1uE -b ^p^Rj -¥O©Zs^˾jϰYHȦlWkk}SuǦ;s -,%ŖcZ~O p`)~SL`K;{;705[8%~=M3{7<;K|(
W4XFlF8ZO#c8f~zr*L=B/1>D;yCz[)-2'EhNEp7<\gʈz3:@w(ޞxj=ނ*#"퓫_p=mc@gV`vCr8n p`)32Y<+P~/ҠM1|C؎[u)/9dyBeW$\"b dpdRj}YI"qN/,~Cy%!︪`tu1%01vKcLiIh3HZ⦁Ym[]<gcj[d<kw5`(lR E顫ǐ)dˣBS8E5wmi
ȷvK%XDvawW="=N.q@|(ԓjiQMY<|ܤfLA.~dp5 -3%`VavKL0s -^2t,LonɴWǾp>dAFޏzdJY(#Rb*њG-\ -rl
+mF*؏yT5z\o<Tx Ɋd A|9-^A4~*Sx7zAGKmx0J!w8TԤ&?C~}%JRNB51uݸڽ0=/<nendstream +x\YsH~WojQ4\ve+$٤*d2 V9ci?'f/X7jx9m0}הxYI sc/n]%go|Sj3m}?te )6}}C4<WQsceq5/\_ +?ltڧsm!cxEҾ474ct}2Ӵ,1BHka;hgOD. +hn(/a'|x97o6[PxC}x1h_}> +<I>~3(rS8K*04wְVLP%ZdJe#ܶ:hn2F{N¹ds#u|DC4 +|3I9hTй~_yՑ2ۊӘ<3_t +p?$)A"[MvOf%|BUZ^v_O`hĴh촞L&vj~Ft7!L7Vpoz$IFS$6tB +-@ZH(q_]yWT;^ZH)"܀7d|
h͒GwKAg6s2oOZTs4)gkS=0W_Y?0к,Il>M6%;S>~eTw(A3FCy!:6HJm#8E8*x'3v{E6NYaV%kPPFcɨ)S qtR(Ef&&E*uI +KG1AjgL lOi>[5:1!q9hjʻ-XĆR qyݯkGZx^}E2 5Lҳd6絥=%)UuzB]_l6ejٓwR*dB{CM\T[L-r'l
(w4u#Pe'{g2uAA2SD9_c_햵E{)ûj4Q]zȘo"OMgقQdU9-*~M +S
v^19WYfldvN|Ow7_є<.Yn<2ACs#jUcv.Hzz#-ʈgiW5O+)t#d^AmODOs]2Xk
4Nkxsͅt#%YK33Zz҃d[nKSWx{hl)-UӤ]WSz=]iϸJR>wP5:*yi#NUVZ+?NT
lL*7^-jp?"ݏho)uK4-7%ZBpd 8yU:̲EWеmK^H,#Pa?-fiDA[zY endobj 3265 0 obj << /Type /Page @@ -6971,18 +6916,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3319 0 obj << -/Length 3246 +/Length 2148 /Filter /FlateDecode >> stream -xs6WfN97t5mbg-)6'#߀D-\&qb2&2xR䨠Dq'br~vw-ώ~x**@oǛ)~?YxpSߣ~/&KՄ -DrA}.qFѿóolby
\HH1#f fxJljQ)eMOյSq-fs<]]\-/O?TE1Uը**{6Q{1^%VRDlhgQ1R?Ђ!-{k^m*]X:̈~&vnsumHz
R;ͬ Ḟ2pR+p-8D;VVopL -?Zط1Tǽ2^Еu;ehX=l7- M9x[<fH -L627ջb*[l[]̧y=45m*֢vDk+ -*>iF"R} -`U$XJh,ݼy.>vaw洐mZ|Ym7rV%b- -ylǜ,zl7?-L{?9~i܇=9\qsJm2 -tXec| /Bd¢u=-vOU4o淉f"jګaX&Q,$5dINm`B fL$# caXBv9⏽3XVitKցO<j:] d&1
/h]6z` -Ҝ:$*ŲFԸ۰~:ב1ݎAxZ +x\s8~ffײ%K~i&5d1.0goW+ ^h3-cjզ?Uø+U䉐uYNʳ33.HG2ߋ;zy?P:_Ueɰqx]{wE/;ƪ}qw"s݅.}jóBãI8={h&6<4^1zp9}0vFǏyE:fg6+O)|.}ՃV6#/pG9g?B!ޒE^4_:AE!_jn>Cx~ { d>yMdcӌ9j3~GDZ
0/:EDZÙ(X`}ztlEd,N. +NHN|xxdNBKS\T"f="CBҙucTʲ'~={Lږ^/r!hĪ1۫#0+>[FZ'0L {U$*z8Fݕk5`.;$Pb~XF `Њ92q`ͥ)Β(Y{g7;/xjv<@` XlC@@k2Vhb%IɓV3Q +ڲSOYe'CNC\{6ߑZF/VԨ:(/2m+L5(iic-[XZ,ALŽn riЄs!<v8ҡӨfp7tt%qTĺ̲RA䯴F]_@R?}|ERUFf!ޢfvٚ=TT5۴@4P W]AhWesR' z"Ýy~=6XWVءbK/%VɪbEMiw,-[s!+P۴XrI|rrÁiK<-P-Tk-kqSq +Ԥh.J/ޭ/P|ٵojS^!섴u1IKϊk;C\:-\z endobj 3318 0 obj << /Type /Page @@ -7322,24 +7263,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3369 0 obj << -/Length 3934 +/Length 2735 /Filter /FlateDecode >> stream -xݜs6W2 -?d(/ٍ<.愲1듳gktfJՂfU̖yރIಪ!N*ɢbLPݤXt~^y5E^,s/foꗘnlZHsWqie\ܡ
GD0HcQ@ -a[YP2ZKJO
;iΫJGV^gcĖeI1,Zѯ?[nصACJs-ZFņ61` -sS}G}9wnxX8Y˩L0g9F!X}0(HaD#N1Lh&JXWB/+K)U^UWm꽦Eߺ7ZMK%DÀ2#^y -Hdh쬼>qn6s -.v7]ȳ-!F`=G4 -^ޣ{*P,2)ʡ0ʔX߁f%.Ȏ:"k{KM`&&nTU{R"[fk8Z([0X9ʘOe2qCN{V*vP!PgeYy^j;`Tس$ -Umg$g<tcu /mrcrh)aDcJg1G%gwj
0HQ+=nt69K`-2PsJw,G9/f7-fڕ7~7xߞQ~&([Bb00X*/JT2"wJ}]V_\M'zVЈ X\4ꅋ;<WFr|e[~H}qdXiS'PmXa1q*5_*-l FqGȈEvڮtOyjXmOxv ?u2^ArE7v<GkGڤrb9;Czqƈ&/W@͊HRܮBDò7%G4VJo[9C۶6lkzy?5Ծνl81f["e5T( &5 -=,WKأ(lV_^
q@[BhZ, -(Qmd -ږN]ug"RMڔh@(THXRl-}G4!zH|0%*,jl+fUmF" -v}/q~}÷bno"Ge"̦o'h`DNR#r$q;%z]rp1_iף]4Kcޭ9L%G4zDPoڼ1"{6՟\0,WؾkjMm7z6"/l\ne -%t:mB(^z|b{BKC2W(yWJ侳_3rS'+$/REV1.26]/wo(oR -`Ɉ:."[y؛"endstream +x\[sJ~кNUЃ80I֩M⍝<`- "'w{F'Nd+U0o_4#GsGo;^< +=w48[qŁ+pFv=8yGcN<S.+*,~/]hLf{g?8݉mvx4?gܓYU:N,n-M<ǎ">x؞x}"<I̭bZriR'^Xgu^6yy{uZ,ĖkUc_l>
_vDo_||os.WNr,v٠ gum]]s8V6 +n\l%14cmosˇm +1 +I̳V"a*8?H=4=Glװ|j>W +-#KirU;R$nh,l$uڝu\I_!y~>y/+8WK1ܑ3bJItD;{)_soD>0FNFp38'x(0%S; [Isx5"(RTs(%+4Jf[$0 d;G䵜GMA1`|Qr:g]@ߑ+7hh? .}ϳ(Z*)|BtD9".B8SjtB,vF %'YT^8jnmVAµt{+N'~>pu3 `UTI^j"f愾HH
Id1}R +_L<̐Ũ5[Uv8´-rIVoޗL")c?bs|a64>PSE/x/ +a[*YKsvr2/0'a+PKвr}A>R0ս9j:U+VJxߟǙ#f-Uy٨<Ja\b+n;E4
o8f6W69V)ȥ l^If9% e +
!q%cpߴh(r~^cJ +_Ru Z1[!q(*zd+i^whVLQϛJVu'%N,1Oaߡ,j$E+"v*nKS [Vcdw4}ۤKN~ۋTli[0333;H`&_[*9\?~c}]:ػ(:b4ҟL'zsl!EZ;z3qU%:2̀ +Ka ]bHU~מZd`s;d]pkkӟf6agR=<'jUL
jш>洤fhgp69JO0aەdYQwRVb#q+rQ~$Ծ +ԵYҾ0`co頯\ 7S+߈+j2^2!" +s;)Q&8r-2rsTpkKOWsnQfF^km$,=FdI# 8ZiF[ed@v}w0Q+Ȫ)2T2Șo9UɴX/-iN+R2)bʼnPSRd0wB3oxFF"Y: "0Ja\ߐ8aٶzI`uP\ըQCHC@~ @/&bbS)jM# +fĮQa*9qUhރ!mSle+yTh}BF3vʓ(*ی<jc2QW"&|A?Zedr4[[2w>B5r'U犪k*j.U\C2QG"V*<[RE=*| >UDWD$PE&d+UV\_IAbIAT`z`cEDQ| +ɪkrlG}
1xQO<?cy"3}q*[~Gֹh^Oh+]@ף2+<Ch;Nc)w]-v_t)䙯/du =##BZEc5ؒ^晴H^]&JRK`wZe"DPkSC(x$5g%>g{
y*q[ +nz%*s74V"ș`qDkNGG$0-f +HoC`D| @~}[:}9KLZg2[|h}@= endobj 3368 0 obj << /Type /Page @@ -7700,26 +7644,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3422 0 obj << -/Length 3747 -/Filter /FlateDecode ->> -stream -xYs7+zaU㜣!eKK(C1IK\SfHE -#Q哫OI2/nwGO܍Մ1G?'iwG1"U5=!><OP-+(YD >E^L -!PUR -h:cy=~iV)V錗"7Kv:#YOF}PAl7We6ϘVfӥʳzeN0t<mW&ʸ%ܽDE2i8xUտ;sZSx>)8Ex
ǠUXY o֭:4AduѴZBKR|ecTxvvmUs4L]LgZ;&dd`9܍rb -уX
9i81WK~dk]2KP]q)2C.|}
FUX ɺީETg1Nk}_/)-W7@ɆQKS,Xe8˾q)%kc[Y^IZ|8&Lb5me^+<(p -R
i/fߟ@|&*SXU賊P-JupJhT'A -:Tj'.;W
ttoeJA9czq}`Sjm**(&[p]wzM&Kd"hM<drLli.^/U;U\|y#bqgFXeT9"TItRY̟ -lFTqRasGeLmɲo[~o3^Zu!u hGn߂^e%E9刋-;'O=[FaLtmA!;y%lژ<XE9lЦdڽ.(QBZ#{XLUZt3=5^tEx.=q#Z7T.mmUUzF(mF} uw6lV!rtwc;Kth;[CRj"ool[> 5;5FvOM4lL°8f1e}1K9oAoJË1*xooW;auįxe,h/ -X-z.JMݟ@
ޣ]A뀱LXiǹ"ƴoAiJccDL| lܾ,w.A r&`6eZX^,(ƾq)#Q.rjkid[{I#3̋%u|ǐ-#Ku$c`Q`|x;mgi͓fә*Uk: ˬjKRb w1}Sj]ǔh(9ĬY # ];'-vlߨ^ -*LK9J;r[R8av yvJaEVѲԦ1sñ.x+r"K
츭ֿQb'm͆a4/$DzѸ[pǮn30jFbI䅒үXEOMbVf[ـVTk[+JT,9H9ӳwMChnv'W% -EBו1`=q^ W.^zVk߿گ>/ϖURDbԆyz=z1(Ki=QoTЬ>Ș>jB_g}G[ -BFSsVTㆱTXkQ}`SjYAPIim/1`翾;֫u@}F@
lzᏇl 2e*[OOzcyb,Kᴜl]pNTخW:3uYmuџ)\r7e^B*ZMKpn^]Ô^9@"ZnvyښMJ}Kg=[7ΫeΜbi -}q-7ΔZ7$qU3ۅmDc0-86"WLڍQ;{;`AXJFDx`6ӏLT&
+8tL:Ou1c8`AcRXr -|FqXԀqT)YRzTyu9 4vjPg,DO鄙`XFžH25͋%ޣ8A;`AZJF+T敇VIJIm~Oםd.FNn\]BW1%DPۗ N$!,){DxvۑqK~]c@3w2zEt SXWq\)6 BTI{$<l3D=CQO͉c}`
"6.I%z&lj&tG -QJ<Q>?3yj٪GSH=tpA J~Xڏi8k>`AgRZSJ? -4۹UwT(kՋ%ޥ85`AjJÑreziN_VfP%m(AP낱TXj^c{(ĩ:D{{pR{Z/~cƲb ցY:L LgmWݾ1';Mxf,l/xnƀq)6%mSE{5%$r 7h4궶kXj;)ܩ>CɁ?X^,0%%Lq)
M;i]aS6qɺ2E0:H^*1phc_}bJXbT +/Length 2603 +/Filter /FlateDecode +>> +stream +x\[SH~WxyYj,7I]0% +lC&6FH2Ij9-l0!֥Ւ\ERFL4#t'Mԙ;Čz<b.vc#Q(#ٻ!a94heͅ3ɀ<f0;?E/;QdHٛpB/vwjóXÔj# +ӔMĆ&i($Xe> MQ;7c=HP֍?UOzcfjɢR[YZ*ȍ@b=~ć<r5 >f!IZDť\?8 Iդ7l:3CVsNaE0fܽ+JS +ˀҏ\zK䳙B'Z~?@Ls +k}R9#=,4E\Z,4>Ϧ}W@p%S&xpBIDvcCO5uɭ;˫6E%L͠m&{wNķA-C'i +bldɪ:U2.ZM + +P+n&SC..QE DV +ym'\V
Rtm -UICP`Svħ6"3x!$Q"G}+Ner:b_LYoqh.$"pr7fok\7eASb*=fNv%g)Z0@%A&
JBHrکۮxrAO;j`ʰBg.tլRh_H#aӨl`.Qb-K@JmTS.lG>w:nnJVEpc#}{Es',yz972B-MaK<<ϲ+b;$Jǁ>߱w(
45m}Al%۴Wzfꦂ1|(sv~!<䜚9s!K\.n*NdMmUȳ.=}vf0EUbᔱIS`;(Azat0ZedoaRl+к4P +XT$Mqeݜ|n*̾vAևi9?nw{7=:ZdɁ.9iu\Eu.+T($oK<7waflQ.鱒QoA +]@_ NbcUlZ uŎ:Bx +dž U}Qu@'^GW5?tKyޯl1f▷u endobj 3421 0 obj << /Type /Page @@ -8066,20 +8006,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3474 0 obj << -/Length 3914 +/Length 2732 /Filter /FlateDecode >> stream -xݜYs7+Xz"
r${ƫr<HJ5ɑɡ/g3=f+NF:JtT$(/2r:Nѝ'15L=?\=Ĉ&L2!i翎ϛv_߯:y|>d4M$!,FoвNDI*{yru]31R}HyA҂wAS
*'Q$-IJ(%~1rY=,'t,⥼PF16&i$Ee_hRRdnFsdU+5Eb]~7X 4ӂ.M}k\)I0W -f+q5)|C{`dncj`&(`>[| -S%n("#-SuUOX]ֳ,f2pg/ӭzZفQ@ - ͫ.L4yPy|/TQ9됯,7ߡK"p#p-Íus5ɈRie'B7JϾ -2eڥ -.T/FG9|<:9 '<Bbin <4cjm*S7LTW֕Ɂ=Bt]vm
M5Ls5@H,1`ӂ ӨZnx#U k|驡J3p[%nsx
lqz)=AM3Ft3FrFiJ*ژZnԁ)MșBUmwj@$ZDAomLJrbȨQ:B1KS]ʔV3?HpO[OƳ3Sf`<0@`,Tӂ0Zǀ$c10ujsaf {V}Ys@IwGX+"`B`-u`#IXShzW|b捩_9Oમ*ͳVmrbȠJ|{ZS8&I@Mec^%t48Q8' -'K։){_ -1`Η;7tǢQBS$Gf`eoz{z-##OS}}SDnTB2lscs0
g-cg[TCZP"FjJ__b<1ѥ|j[/]T"_w6tK,yjYObjۙYPG9ysc~$t&aRܬ*SB4~-tGS"Dbdn҃)Tӂ`u)JM5M\e]ҩ%k8$&:< -ӋE`"2:4iAfL),߃4VfN^a%̬$
v¬|LW2[KGVOdz4@Bb<YiARL$#F\32N.mf̔0և^C1.ˡܜT_ZG}ZDeFi1N> -1)vژPŚendstream +x\r+X\B<Iz$}**! $Ae?g! ڢ0Ÿ\e>3O7:cгuз=:x\_:鸶{`ow;̱#'.!A>*S(z
]^fϿ~c(¶c(\O؞+Uhۡ/Bnukiٞ͘cµi/` OG=fWD'0%|}-phuxlDbU6N8|[<X*^ 3D-gci};i +d`{rU Se%q:b~> [/Ls]<X$%XF>ݻ=2 -/ʳdKaSij O +=9䰀MF] mL\
պA['f9L3i3|ri6.`~VZ[4A{7.x`<T?̧E>u_{l"Ktdp{~(ԅɰ8#0@L~u +}Żx!yaxD-H>Cj,imq3!aC;#/{/p}{Ã泏|,ϙʥhdIqK-c64o3x[, M-QV02蘴^s4rΈ!E-͕%/-u@2W!$=I92B0C`O9 +8{,N,2SHY?3.0x^M43vB=#V&~$#&kh]ר[?7%kRO}_0믂XN pU¬ +AP}`u\9G,r"#y:OE۶Q2EOe,5%k^Q)x7pv" ŬqENY(W9"v81cE[YaşRyX}#_lgxE_y/4Bm$aŭObs$y" c8,uoHڦ(k8#+ +]dgu!.L%P#\]5Q5F-<)7DWZZTO{GKIL6ˤFMtL̬Oxri¡8;⎵PTJ-ge87/\2NUi]|ɤ2ݟa[V.<*گ0״w?]E_hwZՄFOEZYYU`
؈|ƹY|0|qUVc@<9pRV8SYݿmG`lJO>UHF0 z{zzn
-n4S]g*-ed삔!ruuIwgHI,zimS V9KJMq#W +]ުR%'],5U/)T >? +Ln6Mٞ%RSK^#gZol*g}B&ꈣnG)w"ڂA5%ase0@kkr8*c5a&Jݖ\\C5`Ŵ ⛦
VP^XW*$ZdC`]+aKT}@V8*
'aIe2 I +sTyfWi?5PWa5>L5Ig%C*XPԽ02̂)8O*S>cmƸgOUЅ4DCWUu/
ʜYe f݉.Jᴖ#BoPr3.XIKlop֚|24(DZMe1P4w3 ޒg_5KZ9 uA*GML%|MdLZCAaM,ZlbA,7`|7v{wi㑚> kpy3)x42֦*b]J{^)÷i>]
Mr2KtQsRUbN
hk,iQaV&3J۫prp]]2$gTOTVzߧ#Zy+cU Zjz +I+TeMw37AZ固^K쨹eOT)[қy&1^niR*ʰYI< +3uЖUI5urKǒ}FrBVbcMMnXL}2>GYY4آ<PlkojVQ³ _3(M9߄*=1~'I
`iAìr]OEX{xQ
1
K endstream endobj 3473 0 obj << /Type /Page @@ -8433,27 +8375,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3526 0 obj << -/Length 3701 -/Filter /FlateDecode ->> -stream -x\ms6_Lx#:ɵqN{3m?-*.EwٞNjr<X` ,YQN()-Z^6-"h_lsTݧ츻2g;WgƁjL)~g+iG9U9{/sjvu8EQ{stzfZSpZ"^c`<.KTb&8G9p0FqFpv,je͍<ݍ2Ag?Ev|)E~m[yB'=\0MVn^_Cg!Al2[_
~F
HivwO+u^Ϻ{`CH0C>WZbc
N#7K%QX0fnVEJU@.uvW+8 - -ڶ@_;~?ifξu;bEk8Rþ5\?^" ZɳwP8brgSLz=/Yz f4fz*~DuiU6t) -XyGϷ1^tp/>A_E)$fx*8l#͵*µDTk9W('t2`z, -\fTwM[2rİ0
e0BFdV^ U,Q)G
&l2-X%c[eJ%Hl̨=zqD11
5o>6y(lٍ!::V8I^J3 NJȤl}g*Ul0Oy{fZoLGjjoLkIvu4 %B,Қ28Rj-xEQGt]jhns!*3<s<f
|.>6h8v`n"člT|lqA%TC|*P -|rR)fiXXRXQ}Ɇsi"#ԉxFJnЫG^1O'"Bj5NjmlĩTk5 -5h.u6;+0}sj*ѼXhD['ZJ#-QYx5^Pc+*?l6Vs̭A8>L˖]oh41y.MdVSpeQp:K4Ҽ"1^-*J6(fsc_T2z;J9&o_r|vsRlL
d."rg>
$#ڻs"Z~|ЀmZU%"x5 UцҽцڂPNIRoN*'!,P C}>T)*Q3
63M}粻?WY)8w+3PEqC5H K - -om<C -?@,h8,"T"aeз -BnC^Vr_w7rmXO@{l*Tx#q$tڹ-L}# -pթ6ʭvNJFUSb G&[/GOomgۣ,,:B_S?1nNք/(cXçbXNI`1 EJ"/'l쉽\`|nv\s -Kx+8H) F\"0b@x\vqvœ\2 -J ]LxlX}ׄN0] - >Sb ?&[/+0Ԛ\
papTڛaSqʽ>sV~rhm -K%8)QEC8R}7.* -QC&B<V7+JKoaA[@W}lIj'}r6n.ETj6K&So$<g> Nx92@*ǏUeNL{xN-d~l՞qo~D=/XLՏb˩URDr~諁^C't_Pd%蛍BdcÙF4Lendstream +/Length 2606 +/Filter /FlateDecode +>> +stream +x\sHB037ǎMm6{U|@ +WrvDafHzq@F^;>)^>S%S?yyd \p·^oofsytsYf;BrW +n]hLhՆgpGSa(frCe̕n99Gɨ?`~FQ,t+?==R8!tw rzO47'ԬPC)SA7IK/^OWMsO_0)n>gp5@)y?"n4v+P^kŤG|nkpz-nEWGOӂbMOݟ9\pӻKOa +`8z%D\yt n~7@>N.K5V|wܠ@'.x.1R^).v/%Z'%h2ti+JKqBRX*E"X^"IrWFQc cTE1jB t6ixTFyaP{#aƣ-8nMr|M|h"|Tc*~0i-_I2=;Ź9uG|Fa\S"KO6>!2H=6+jܪMu2Of +j*P[F~f|[tF,2b*""4@['$VHCIJ٬ԏeB,U^\4ъ2!BC
phfYӹdɰNjer4a +z#J!JskNEL6^s^a1iZuB|;``.S=lxMfۗ(F%-ZF3[nɔ<L)oհeG^Y-:K8qMm:MndGt|'vHqN^ /0Ę_rو!]0DC#?OJx8>-d[vC13W^~Lݸ +\G6*l|mu!/jy>fht0qd' +Kl)~;xvqa=Ms1]Da;Ȳְ:G2TX#a$0cȪuq-1j02(0,ZB@\,EvX?Bdi_/[sOV]=Vtg2٥r
9AS-eBeb9)H;C
nFewuÏ\ߓL#7c@2XLendstream endobj 3525 0 obj << /Type /Page @@ -8765,19 +8698,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3572 0 obj << -/Length 3396 +/Length 2234 /Filter /FlateDecode >> stream -xKsFy,
;N^KYmU6$)B!A;.;zlRHp3<)ԿxRrTj"K8œI1Vp]+2O|w~WMp_T╘/3RN~?pD5T~/&KeO'U9Wjr{8EQ}urvp/XcOixIyXG -9#y\!,A3LflE^[vl^bfs^?oG|o)~@UUL/{y"6ή &ptĂ!Y[46e*D"XjUV]):zS`vS7uAxK&%IcIFĥdN-&%RU9IfJWеD5S"|*ԺmD`mM[ݘ]N -m_ůoOg -!2*8pNQ, L- 6āc1zpՁoݕ{>+t.U?r\ٷiBVڊd0;gkBBc]`RضձX4_u^/u=jХu[~k"VجSlm0cʐyftzNՏFrϲ4!RWT,G< 7馞 -9OP{˕J݄ArכzumA}ܵKkfk5)c+ڟzX.tE_Kk:O͵&Gcەn0JZQ,VhZ -$6G9;]݀hl+U6RgɖD<&?HLqϝ%( -^Ft~kNsn~E^tT5ۡpVebx,(a:$á0Üċ*2;[}LM8Ş{yETŻc,(!&< -[ q2<0i M|ft[pp!iQ+D%c0zpF+J&{M^x%m2)BnI91ﹼ -1xcEu00@L]BcT{֪W.?XbQ,C,u] 0ZO +x\rH+87@jr-GGcʭDBB @IYYij6X&*lryUBz"*zכ@=fzx=z¦'{ȋz'Oc>Щ)|qt/*Íy
l{.tO**)~7o}j=:kóD(ݐa(fjCe>9.IFl^泲?Ɵm]vW`,`{MxŤG>oWj B:tu\TQ0D0AŠR3@? +q2xg@"/@n^X}
Y^QkЍӣ ytYLmdJ."ߏiMPWa +h 5xZma[aB ۳0\8ËV 5|y:*%%5pq[ڬPA>0+c +wV$Gr?@hk>(+Ol
rlK$ܾs'ujf9ū.z{ZuNإ0IZY&F?^xT+'ަ'0_e_0'>P~iHSl3gZTp(78Xp&I«HmnDeФJRҕĆj˳?K*Fr?Fщ8
liYWtELD ߱0F7TXGpr)59RumTJ։:^_Zo
1nKn-@-ou̓b4V vZ!sϬjF1K;הCW30E5T.LxbQ58itH4]o ;ASYRU]-;~Q + SnI|u_J䰥.pER!?o|;[1!Y0 <yag=OKi +ϐ,]0zyNG1n/Xk+:;ƻM=L̨L|8Iܘ|g8ǁr輤!<{ѝ2ζ!OtuZ!(xn{F
tUgSK[Tֳ<DjT~u_DY'$1F<f^+fKsFO-Y)D +-i3M +J;3sh)FX +n'.w +WH\2w?\jWI[醨c?zxe"ߐb\R |O"jO5G-endstream endobj 3571 0 obj << /Type /Page @@ -9138,17 +9072,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3625 0 obj << -/Length 3151 +/Length 2015 /Filter /FlateDecode >> stream -x_S9~H=]aݽrU{q`BO%[&T*evZ-dr5m8%=<+c˚F|zR3/ɟx8RM(U_?ģ4=hGw=FDqF˽2H
<jZT7լdbL5byYȖ!cqⵯ+>tm xz=7EwRX־ծ $
X27j=rV!,;ExW}2R)'d^e#?! -Q) `ǞZ`mjFb|x8pȾMp5H%uV#{>l|8{?V㢛nPWO(M(Ի;sxz=wWuvy3@Rӟ8'jT5MHuϼ@8D]Inz9iٸS*:T3o?~_L|/g9 -K"'% -r6+?NJVFw?e2tNTo{8Zi@+r@+ ORS$s-Z!gW:&Y+.c?3r|Q,
X%% RJ|cq%mWyv.['R
d#<dAnxdM`K7ϦW՛-[,I+#NvsәxԂp9kF8?`A+s+Ժ"zOy`滆G h]1#S!#g4G:j;J<ۧ2>cRA`9`Zg+av>tKw7[=-$?Ejv5d_Frb -;Nlhl}Q7x#?xS>oÊE=0]udW9Σv+%ZɽGOؚL>CaٗR^=Gi%.\}_j0 -*ˇUL -b +x\MsH+tb1-N쮽*2QW{f$,rݯ_("Zc.-wmS7jk +W +8ia,7lCPt|R^4KO86 +|[p>Rrށv$h$Ո\*܉u
Ӕ?)IR祳R;Ɉ4CBȈ#%*zx6+BJS1zZaA%?OIе?(M{_eBI'!h@CdbZ*`F +D/#_A)~5#:g:H)+s"Cβ`@q~);Ñp!"@>ol,֧MKTQuf /hWLy$z RSpg]WJ(UD#NO?x_ +80+rc {^lcGH<1* +m_`<` +F^{*2mV4G=ec@|;TXpBkI,Ӧ[7FND˖Q2)0P>BOA&X==!j7\.8rߕZ ZQ(}Q:X Q펛=֕l=];;ɯ(mOv\ o4(fdT?_R| oY^"#?Qxo,mniq0jZ'1iW^`''b[kq_o:وhYLw`X78K`J[sEq<6A4v$mqR.9BcSEbӼd=-Ms튆hq-6jff\3Ӫ;3%-o[poU2:͍ϢZq endobj 3624 0 obj << /Type /Page @@ -9502,18 +9437,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3677 0 obj << -/Length 3303 +/Length 2160 /Filter /FlateDecode >> stream -x[w+!\w}ɱq[-9I(XKKdwpWYɉI.0feFcV*ik\9OL#왇G{?r(Tb=or1m_Ŋ3LS~NA_(]wJ֣=QR/rȕk-Q6if(EjvpId<u]==O!WcVr̛zm.ّ[Q-Wpz3)h(j?_7?{X|RKe1|侼̌JMb]#m(UA1FC]xQ\ld'9x?vҷpm_/ڏ7W>f***jPe%ubSIh`.%t.W L\jed^Sm4{*`/XSՠFK3\\Nl,35}>k,kuq.L^z̕(VnT}Xk$m܄]VױWK#7%H5)c)'3dG|#!북K,9ez}:s>g]{H/+VƗRG"@Tl$H"OC^pp1pgsΦ&*/778S1bfNbWErR9°?}ZF8Q3B(<dQ+ՋՃySO׳SxnVa`8>~oXK;I79-֒9-91U5OlnKo*VUO~ҍyӍ mũ">`F8њ߷d,Xih̥bHewjP91<<wvbPdz逛':IZ<Xh(TY_pVՠK u&mG -6::|V}xw|J0CfDv5(IJօҊLAV&/
L;ry>gnk1mKNG9m|!RYIeʤr z4(BņXS1&Rarm4uz߹Y]:SE7wݝ@m/CevFգA&6Z
|)|We]c&.l%&=_oPT*A&6R]TU$S -lsGm!Qʭ{rjm(&n4k}e2cm}̕L+%IZru:]
ʮ4 -IHe>&muMʺZrU\0Gܺ_/wO{b\nݷXW[5-)|{Ckx{s;۬w|_bmƂ%ۯ}G|U¦v{lj۩YȞTԞp8~jYҚn}g?FcV9OhPQ|¡<^ǍSZEʩXufG+!L2r,0NFwė #2#%4۫c"lz;noIa~HͧHՂOث[g_Ө{_n64z(TZ]ՠ23ؚql㶩/u߱pL]Nԙ]
ʨ14xBwQxa'9Y.v7P632i%]
l1-o@ؓDP84A0&69jKe,wC) (wڈJ7CffFv5(lRS,;ٔ!KM)ux3vۧatsa-N[kӔ)y]ϭs%ih
!2 Q:УA&6"ok: -9хlyN<ղfer -QhPoU{b~~~xeo07kř!83"8qbb#NIV
ΐ -<CgGw5(ZZ53I{Dg17~?[->}1{J!gt+*m -~_1=
_7NRe2r>(U} //~OӦ-m!7oI֍ iZ'lCVendstream +x\]wFWpK'vyc'is^
W_ߙ]aLleH +Yg>م5ǚQJfoASAp et{a.Y^ҡh}x]I[2x46_yϴnNR _Ia?Мlҷ<k[ҏY'Dzzh<4j0O(wb(S|VyNI+59\(r/ߖ"V*0§æ~}EB2Eo(4$#X'}/Udk3JAAp
>\KD=w$7R=OPl5>ύ#?hU6EXQ3kE?9Ȉ042R<C%}]&f4L}.p$f̳{Ӆ*p&tY]$Cu2K͊4X7SSV;Wsx^\<L78yߥ)}`@cr90@# +tYg0%.4g״%|qf<hELpQ9SP<'k ~FQ"K}h~ª]tVѧlwab0u^1&8I&SgU҅pbbc"odoםwt7BsԫԴ5u,rB'-3D\gϭ&@.ҀVh#S!#k!,0ITU|\+-N^Ғ/<"1zt& o0ï10Wf4$0yJȳ$4%mK?7+8ZAV1;>I˃43^a\V;k%,L~'\̻۠9ߓ[PkBɅNm#Sڸ;$=:O륟{\dJ7dev*RvlXKTĭ=\O:択b nѵxV_|ȸڷh2B̈܊ߛ/!.)vmKˬJShXGZm0>#?oK;QlWqv v +I^A}oR
U:aq< +m @Ocaߊ?lʺcӛ洷U`xQȧfl̪}O(ZPr,/Tdy=}UlD~?Q5Gu_"n*g蚥hHendstream endobj 3676 0 obj << /Type /Page @@ -9860,19 +9792,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3728 0 obj << -/Length 2687 +/Length 1706 /Filter /FlateDecode >> stream -xs6+tB/88N6=2#Df7 f2UL&#Jxxx -@1,6d)e/ kb2%jSIJ.cO -?\ -sk90F@@QQ))ݣ<xTMl!tIvSmneZ>tSͧf~كp,ڝv9 GNkzТT|(Bx o<T -A$1Cd?5]=Q3/rՇ:x!,'r}A#i#OJt歷d9U(Q+FcU;ygVS!8GgXi,x_-> -L P͉ k -~}Zj8>jOZynln+pM{Т$Yҷv(fsxӣ1qfmj#G[P->B">2A%L: `DDVB3*<1a{WJñfI^,-FiWV;by-B:5odh;q{[*b@%u鴾mjKҘ%}Sц*Bph"dDFqVRDif(s<,NN]lQFVB?]˩8s<JGxi1v>%,I+)wj]vҀ.66_-B B&ź^^`C4Zw2|\4[).۪+D@<7*<cj yTĩZB<Tz-S Nq .ZN%/{,[TS3*D'g⳨-tz*vB-.sjhR~*2z1&Em2fpҧ̮#O@ -.)ցcw-ÖF.j\uթd ^0)Ƃ`B5Iu`5\T({6rA|PK&n0Íj%hfꉏJȴA$rKãB&l`/[?jf]lb3EF;EcYZ ]icgiW}e:Z2U_ZζXÌL3z4yzWȡNusY]c#Kye|k3AƳvWK
mG 6%֡=Z瓫
!%a]oK=K3qJޑ+f+4; OBy:EğJBJ7dr]ʣfsǜgfrrkQ%LD}\LF%V9~{Q:
?"?|ԃ51h~4OFu$qI:R_O-
Jk2{ݡAԭ&Zء ]VDZ3b$&ǹ+5\Ô|IS5XZih8Ӿq))a ->#ZqilN_|mJC]г-e߮W#Z<cj Tı:E r{KreC\;K%3^%pC+5Mup'\~&cK˳;c1@:AqJCDPuQU:SAmZ%x +xKw8,aaFO@9iҦ#3vEL6.t~+ Ĵqbdctu"0 +|ɩzCq+#|Hz6"%"Kg|-S>_n8kgȹ6Rά'$xbc~}A<Z9H4^C H="FF"+(<gqţSww)d}]T9Y'~/jo9d,)k$(p `Q=l*MaLm^^_Fʅ/NnySuʻ F 7]y +Է + E%xق]mA{"oDXE(F|q$6LW5P:$7F[&KMyQEq'Sȡ +it/v95~. v8#<8l"cnO[t%CZSK12.Nv?KEDwSq*V !#`$7m +)J}=YRem_ +L{nf>fz;,{5a,|UهRue`u0ʈ]\G#nͺUBۄjpڣ<n{ʋEӺ?*:Uw +?A8 ֡%XvK075ZzQ)MioW2܉ /ΰ>(Inst}yv`6"Yj^S,vmWm b%om;B"@M.oeNMsU1i:hW;A(Y֗@wxMZvnj`%pendstream endobj 3727 0 obj << /Type /Page @@ -10170,16 +10101,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3773 0 obj << -/Length 3090 +/Length 2049 /Filter /FlateDecode >> stream -x[s۶+(q#q6q'Isb'LZmM,ɡ\}S`3i]+dQX -e!osT*Ƀ[Ř {M|teV/Ozu)O[8)Y;5I=W;ٸn1ިwh\R R0)B5 -0A;֚b$@,g(-D&utKٌ9t -Z2̩5-Ȇ2Wlԕ4.VmhUhR %[ŨlS(b!JS9/UBv[B矴m/!;Q8x 2o
ż5"fYq-V:ܼ`nH-uGzuILwμz|{Fڜ{QFvOX{<[4Rj1HVKHC#Hf(`=H+]v6ً%0< 9U\E̪A<Phgmϵi5RSw9Dzb =FY5LU+5`]G4[V{R~xcX .Dƞ9,yЀQlc:4Xjfa@ -@%%-TrAZ6-46*| --^_/O^e),#czqC
pSZTpצ\^]!װ>/k}a+XšE(d6ڥ̙n'5VUd{tlZ@E!w h<v7ˬ[^C7$1s{cyt%j'ֆG9G[í$ 9YP)/<i~Fy9VȢ7~scxDq2C
dR:2@E^l!wE6 eBK
5JUF8FQ].*AGU]l[(CDo͗ 9یC${AwZ7xc6gjipFthZIÕNe썏e,CY5LUXb<K;:k^ewޙkf"&9@,[vFDzb vئ-٥unN]Fծs~تG/NoGWkm4K`>ǒM/@ͱyvOUƠ[2&ڸV+k<җ29)sqO_]z;9YslNX9QD}cAMV<r)?P=zy2G0k,/? ?U/S[b_{ +x\Ys:~WVkɒeݗI4wti`C<L9,LpRL,~Mz]ϗu.I;y9sWgp<wR{6`uғ3uwg?6hތ?O9)ݤ\xߵ?)п5eX)˙ov?{}UdGa*!"<"Ugn)Fq ΰhp>L_$Ł1ENF
8YIŃ9!,D=zu=8>潈<IhRZ02Z^M97c\d$v}9y + '~ CbR{cW d4`jVYs!@!<-WÚ^|ufwizD]m#x_T, +VGUwqsE1tRↅSk=aJjJʹ91&yAAy[HX3-?+]A=o<o +T;Kr(.4$}iD^$aIBNQ϶UrutGzrN"`1Qt2
;sDZz1> +0&}bO:z(t:bJ֍-lԤgaW_aPvjdVIu8Kw]ioZ/&
\0*x"hDUN˨Ee/Fu%V(xkY:@ +S96Jzcc}Q
Iu#á4;]I[^י8?u-3If<|$dF_rk( +UU1X(V3T"V+XEx7M +4|쟩T$LX-$tᨡ<'ˣnq* l%o +ޭE6QW{y:6e;XF;b=x O@MGǒoJ{muJ D˅+U=Ɨj.(8I( R +kL]ͩj$+DJnWO^@)/;ϳK*>ۥW6CWlCLl0E|1F')r3endstream endobj 3772 0 obj << /Type /Page @@ -10505,19 +10440,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3821 0 obj << -/Length 2228 +/Length 1490 /Filter /FlateDecode >> stream -x[+\'s*6BA٥ -RןƖgAlVjcIVO=w?RaH0Rl&X7_O{c^E|y5yB`*nC9 -#dq5hSZMvU(8RM6W\o'1UwpQL`Hpדɏ,/ԹZV#Qa5AJVE%2 -3&eM+s7qʛ錔VejN_0CW/gԾvZ>;f?~Kvo[+Oʛ=|K>/(.Ǿ(ڹ3Aь'E؋[Dl*әU Ttw#? ~H\A,*N>[M^j
lU}j hra WjC:4qN1^[k/_ZK2{{V.Yxdܮfnm~cry6!ڛʧI<.cb<xRV:4|||:{m| -]{l,J7µ"iZ@SBaxēTi~Bi}來fF7]dk7W7]kou-XHA*)r^@}VF& -蘭/±CLB-5.;{#
fcP4VsmNՍ,_|G,yƂ$ͬڀ }40b5-^&/.#zEe>T -Ђ4ڀNbTc֣E<P%ޞ㨇sR=AXXf4͡i9&)N{3=_Z9h~i=OA#cB;a/A2phAaNm@GCx Nh%sͤo(g?(U=2t/{<
zhAtNHa3ϔx0#7cqbܱӸqԆ_<^ˀ>8NZSZ("cVGih{c$H,
)g,HΪ
+=`~|J|wXXԇ"x惇>B *R%c/)^^6F7$6UwNamxjzڳd6shHRnKSh߀"E{$˪6MڵGS=c3ew{:Nu[дVH ISG5 ;{ΠW=t竱{CЂ4ڀ@kw_ޘQݿv5~c_y(p.X& -b(ZZ0~}جz;Oߋej?
?uT= ;>T<ns#!Kd0 Y!**Ϊt?wh)A/ F: 6Ĉ0ZV{07$| Hx
^,1t -HBNm.B'ksP -w¬@QTr8
^,1t-H@NmWA5毗Lfչ}Ocb1-Hϩ
E@/Lz M7h0~>Ҡ;&kv<,@rOG%n?XXa4ái9!Y`H,Ë>}5k{betH\硱{iCY&(=8іqlƟ)ziW#sbϩ5z>/9b<gqy֩<ԾT*825#ޗ~UGʢVS<\y̻H,w1L-{R{Ͻd{
ӛŮ=t7]*zM&rvh]&R.KJgԉ-3HS1#O@8N6`i㧴r\76zLZEX212 9ɪ
@$hGkRzh:f\csCӑO:_ۋeF~ZƛSbj%<^=ھOq8^,L-Ȍd<o?\
/@06=6WRdendstream +x[Ko8WV >%TmڭȡAeGmee)w#9n8I+Hqp{FLZ/6Q%puW=Bi9x)2GK?g0~e|_BIuX(.Bn7(-CdUtz=S
ڕFGP`1j\7|4_ЕQ/b]'3JL_WEo){FIqN5I/L34Kf<%`4CP<GIzRoruCZJ]E +JS,6}f/ڕZe]'xHC_أ§pՑyJPd:ueұSŕߢL2I!?[fp/r2 +!*WۖM4l'Cjb`#|`Ն&K0E +-ǜ&8BTvbq/Pzt>vE +DäW.)|:*Edۦ/EQx#=YZjY}̚Ev3^M- nkTa1*ƨcJlPEW ^YKW<Ԍ6O>]Esu}OPҶ1:ܬ{4A1I(df?_̲l
4k0M )hLv+M2P s&[POlHWQ}cc].W)'e4DAY.W?92EypA gIz>~Lmmáӷ"W?jʹл
;aHڵ48q"+u,fNk#Zhj>:q^s/nt endobj 3820 0 obj << /Type /Page @@ -10752,11 +10683,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3856 0 obj << -/Length 241 +/Length 226 /Filter /FlateDecode >> stream -xuPN1+<&CLN"L ZTR U28{=,@ʊ׆lZQ%_g,1'1d:*C=@ȄHPL<dFޜgXY2h:bʩ]*"_~<Vnh7[qZ9gz5aѰonPB<FNӳWdQX8=}]_27`endstream +xmP;O1WdL?\*C6p!C*s@SGg2LRM. yм)G@A+?@
eMD5HQ
B %mg4$i{}NȎNg%eud=#@.;|P,nr87 +=Lp.\ײ쵊@(ndhbz
MmYendstream endobj 3855 0 obj << /Type /Page @@ -10776,20 +10708,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3860 0 obj << -/Length 3458 -/Filter /FlateDecode ->> -stream -xڅZo
EX+z?<6w.6`bl+[rG/_3c%bp8Gj3gYza~fb;[O|Ѝft<8
"7"乞}s$<=~~pl/wG8wjFciFsHKgx߳4: -F{ZxHK?>=7#-aI9<A:Q9_"gJ/K^˺<h8}*l*,6#vjxlD,TP8 -]2q@W?.O82s)VPȼ@7Kߗ%4s6~+f^lU#Dc@CQLP$vhfc$8BɅ4ZQ+6E_dfW&r -t7qgkOEgxLV8<'ϵıslw{m6P>QH$ےSWm %9AvSL -H7 $om6ϏpsLï^=# ;ttIԎK\.t,*a _Ԑ MmR>S'>]yG'ʠ1?gtxS`N668yRލ/ߵ8gY\P pi>ؔ(RC@J)$!A˲5zUK -jF\{EZCș_s6댬ͶXI*H@5 -]{c9yw=C=\j9aP-슖#-e?/H5֥$rЂM;E%coy)a[?"ID.7|1Xmb -D_r¨8. |ȍ?2KW\G>>1YPItz!GvrTJjbjt3bmԥ3K -l[]w,s>.<b֣(6^Z`d6.f9{<ow[4q0nk (}l9*c,:ifQ8NAߍ`Pa؏71s@I -YAk0r'tAf9]nGK)/H2jUq܂3?_)lY8&[9! +/Length 3343 +/Filter /FlateDecode +>> +stream +xko (!VuP&]-V#K>ޜ|EJNh@L
Cp\̃4v0=L7wšG&fvMpL³qG;<7I³#a.9;DZGSk5N3ֺlj'G#,Ig;]e/ò;l}Ha⦁ogLGqB8 +Ns9 B:sf'
W aN
FTEj^Gmg~+ZXоGv>RJ,@`8L +XLcHeuG9B'sؠM)#=JF,R3Ak>8wH-z~vU>,ɗrOZ?ռ2L@
@aCXl=6]!
IZHz+jRie恽BiY7b=
GCeDsjК N;.]XLHf +4uqp̏0JN#Ű(ufnM69sNoFNߍ!N~3L))qې M*ТD^6a +' |CFE '\zzI#Z!0Ion3N3#gq7cǍmw +'wfm$* t!bz8>pKjr
KZ'prv9}qn1 +mtVlN)MB+*)ÅPSTOwI9+ǃhWsērXrL 1RX^4^:LcԑbeB4p6 +J46Dd6MZFK1!tӅPyX?ݯ`}DI0Ƙ2Z1t(H)\s|eG+瞃lpyh}LZ +- +cX2WN]z +8x1s{^?!H*)zZFi-YUlힺ8[S3!9 +Cu
Z ؖMR {?5%B(fwL8wr#cʑ&ξ"Z7'e[ieIJiLz <gG/?%L^^&mj+Y6Ƴ9'`cydëjZpy5KOk +ǭ')cn!-&Y_sWMk|*(ښ -fTO@Oo5s4[TϾco>O0gOnFmWvn^SqP+ׄO +\A2u֪;6s`iъ+f&y:8l7}6YipW^0zi{v@dEi+@l)ITV}[^:8|Nr&|kuy'$$$\%^D
)I9)ϥr~K%NQ7ǡמ:WJFĴ.sj!Sad5]{dk\0lK+nҚ\7)E
S$ͰP$ć#XVsS6TI%OCƩE!" t2.m +ĒП{aT endobj 3859 0 obj << /Type /Page @@ -10827,42 +10764,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3867 0 obj << -/Length 4019 -/Filter /FlateDecode ->> -stream -xڥRHp*IkHef l0yl+d;?-ɖMnQrtv'8L8Nf#gq* =eO\Nd2]up2a]דS'Q[W7ӯ'^l}t1:9u/'u@5wag?5Ԑ#U -q_dr*'/vl7I&#?Pv+GwG6k?{EP(zr=8 C?2b;qʇMzk"d]|AJ n/ޟz!묮J+<kͪ+mqr$k/6% -S8KZDCXB\NM6Dac@MUϳ@6ry$-;O1٘-RYo BjYk"n.ڌ8H+(Y*Fڴs(EF -Y`w~g lSҞG)23#hY7
S뼀'X%OQSQds"Ee-{Xz@5HAӠ>%tv%KJ -F
*cMfLp<eV̸{U>mPϾwx=D0_dfO5DYV-/ -ǫ6Be랓W,%wIWqb%4³Rp7^h'?.x[䑲h\PW\ -iӒF}8PK0/ةȨ-ϚG -<#lVTOZHpQ7M5wR-sG -7Xa>t<5pcF -WKD5{wH/ fNɝ!>b^W>2ڌqJ"OtyS+I:pͮ;G[O@tcwU -n -0x˔Ё)?Կ)<Pbhw4oFr*<
"qCզJ(DX[HMMwu+拖Nx7e(kf{P`jQ4 %e,5ӘTM~"ߥpw&X[%G-il -hʍhs"hQwwFGNBD`)yAg)O fgpiCO?_KNlHW"s8sYa+îaTAE!,4Y?-.Zd*p`捰6ʶe=dڰ~m_aLv&%~<GS6+=$prLX*wb(蜓XCvIB F,8baEzq2AR4+
dUJBv7X,%}[H+q0HR -4A0>)Q -PlTK"6B0jtđPM0#a+x&uSdYcA#" Sr u,z9 -E۱ -aHl4#Ic~w 4U>~r2vn%
/O͙Z`j]i-p5\zs̐ہ N47ZZQLS -ݵ!ڥ=ɹZdƐGbbghfKCR5(6W;`USХ
Ӫd4O6Lsukq&uXT)=pw"JrњB>IJ$>,U%Vz:%W)]gE
jq3 F4=HܷB?%,p1c^@@!К@$bO2H*zNj8Sڦ~dHȳaM*:]3u^wvhu^
\SKPwpRj>2\npdB>< -]YEٌ]'٤roa@OUlDp82#! -4]Itd R0|Ƶ%CЉ҉s 6kH'w\q.Z8%Q xٺ@àf8@t6Dw%+ŜD
9@~$ -=!z#8PB|c!G7|7x\JC -Yw& -@Evpھ w@NX:C o=o<a}zZ+Q7NVORW>+T~C%6b\r,NNqw\^tfCFŤScbռ{a.F[/>-7U%/LŕS#ߎ08 -NK@G&ҵ^^^丼_rHčDn9LJrdLxʳ<r|:Bo+?JFv$ĵ -5+ҖR0n{6k}Ia& -NkNfRnऐtڂb#|N5[( ~wEk1AztP$@N~뒤B0Ѽ"ҍF!eZ5F&l%y'c]\~ :p`]אm*Pj? -|<Nf.3-Q_c{:/z@z_D(bߘHپ !oJW 0~^00xu2KН@w8I -a7ccorldJ%4eK_CIFׅ% -6^]:DqԄ(r;ICAPw_/Ę~M=5o2^gf7L!lb2v xnprρ(;47s2In$eFgňƠf6^Fj*R@I$Ԗ -B-Ω63,뺄[eeGZ_4S* -q¯,`+9R -#xW~7C kEE&O ƻ V#B]Hendstream +/Length 3785 +/Filter /FlateDecode +>> +stream +xZWHWx/}ZVr +$2;6afYb$?nKFdsXjizaL'nG3ۏ\ocdw|6}MtdW_f?aQL`|ps:;?<Os ș}4x~8}$ ~0?Rs4_EqQrz?ve
` 5BϝN1tsϒ#o^"vXng<ã`B7u>%5Fy˛4<u mZׇAl*(YW+ +<?oλ,]`sZ&{qG?rAnyA +&Ds}˺k` +GePj-Dl7- uQmyvoTgy)tVN*|!@w4BD;^B\Oׄ[1%;-&Fu9̜dBٹtϫ
IGÑOiFPhJ%ͪdlDNXИNlo68vϪV'#gК
+ـoݪV`=֝*lWeeA#"-Wp +/-Exk0kP+9L3LX%)T{\@LBNڈAVgJ,}K?ޜc\YUa
KT
ޭw#٪BRByi5 +j^-Xo;z1jMM^k_W/GX~^#!s+zZllD.p;$*IA [i9d|m:5PR wT*N4M?qϓ[ H#@N!e[KuQ2`(\"l'EH#&2y:FjB0 +B[,r[@@jyyŠo]jh>s&,5"=l^sDcS?"ܿ8y'K(6.g=^OE0 GV'RX&na$w +ʿ\ri0mu.j)C9N)V^F'$ĩ ?4eZt9-,NRh +'ie4l9ӿ Ѿ(N.Oތiߍڔ_alHSAV;okJa}J䌔c2EbiJN#gfKZV[dL|o+e^0PϤl,6np>g%]fWf&g|D*rf:U6D=5MXˤԑ$$g +4:8ߡ<MHJwF犀ϯ ®oeLIh5]_"KJi@ӪJ4~&tEõf߱+/)2s6"V7m.=GƲ<=cSHѲ̭eNLԪ
X
AMN]0VeW +^gR|p(j=MkCb 9B:gL'9^B#@pQ6g)C6RwaSV6pyDQn=RןCyq+SwS7IF3 +xOD0]ɐs>eq8Iϻw|pفƓ:0D4b2 ]!"BL*2P>D`bqy9nke1,mVOdx%՚,M6pa[7Tht).?GCȗ7oEc2m7g^jBu9=!jrv"u |b>5W|'0%`yŃ?b*BoI!\2j#
n.+# 7c(/yi4N:9+Jѭ`nc [;
+wx.ya8f5E؍n! endobj 3866 0 obj << /Type /Page @@ -10892,27 +10810,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3873 0 obj << -/Length 3971 -/Filter /FlateDecode ->> -stream -xڥZo8Ԫ$fwY4iɢ8.jd+MrHѶA`>p8Pă?FIn|}M_(fB2hߞ)'f^67devsϷLgJ)w$I/ u>t;sDsoί=OíabW -߽sUN~M'a(TRNnNnp£ԍRuy?6IEn&<?`tfNXs=ly_65Q8;e=м(s)m7PLg@״P*TX*Hy4H96Rp1kDW\<
Geюo[Z2,8Vohu -.wWj](
t1EQ,p]ߖw(X4|^6ԛMՐ8o&o6}3H&E]Q'x0
ylP-9?i(7m߉>3ލT -_%
m:UaLW$mwC@#ppp3`~nUS5cpQ2;;Qܦ)6'fs<MC6A -N<'~3<ǘRnUhͯiD
7`:ߍ*dI6 -x89Dqr{lJ|d}/ϗd2d弐E7l\<c$3Y0"b%Sb 59SPy͘/O]8*̓2؈.P,hJRdBmf% e\>I@}X9eHI|/b!hb:|X(&[ȝˢ. -"Ģ`<y"htP -! {yA&9\o,;Q\F ]}3ILjFw$Gm&[I0?`a",ZVaofD.цas|i+6pnBڹ>FZt+;} -/şۢO3J|
pxܥ@vsН -t0_-״7z&Yǒ) -]4u=ޱ8h8l<[D7$s"A*K)=!W#X>Y
Cgù#冠2̑Op@4*HSLRj79 -YoځFsr2r&&Rt|/`MM9"}@p锄xh&g)B -Q^O'{IGSaޞj|IgNX=8${&/FdLaǖa*?{yxZ=7
I6ԋKgylV~EL(K|6
+:h_p99 -*]>Avtk4ǝH)/ -a^,luSgL7䳉p7
(v%9Jifk}Rr(D!Èn1CgmL ->a> -o:>]on5!_a\m=*`'qxdDVU#;gYsej"qIhY)K@d~z|^1RI"KdPJ(0XW?v;Co̊:5t\a[=|3qhQ0N.ڮkɥ!}b+|eV۴_>>L}m!o˝'_Xy}$tPшY$'&S7K|'f ֟ro+!endstream +/Length 3761 +/Filter /FlateDecode +>> +stream +xZmoF_a"5iAb-PZZK)R%غ7o$:^2;;;;̬S~iN4v#'z?;
]/wqx{ne{"-~t.z~3{q2UJ9;&I\^>Nw>L|Bgoϯ
O~;y;,=
0V'?.w'ʞg$J,N͠o<7MCU?OLC?pZ|u*tzв]QWPˢCIwj^nyQ`R&nLn1=TU'/Vs;H7I8+(slKF믱Es1kDa.%2hKsϷ
bb-bak6&Amrʢ]u^Bw^%7vMq%^oʚ6ljx;4y˞ V07ŲBWK,NJ"4zNݭCZׇQ.,*$]o#|f<; ZU +I q6S[\uۘ!C.7~j:*rOE!U +/Hs4LH^q%cyGP1dUBY0=z9~_ VuN !RE)8FB@d۸s+
Lv'p˟- +T .>EY +)]DzLRr ${5<U>hdnpcu}è0 +#Fidhir{BgL%vq'Fty5<$O;yRp汆GpK{ZQCGƝY +"6Ͳ0L@D˺+N9vn$&2BE%cDb5ĎdrT[-cj)Ցst@1E*ˑ8͇)߳ڕkv7|ךR10wunAZ:9*P,ukR(eop-83lc
Թ*M37Nv@0aR0npm˜cÔ?冒#bD)D##S +\n- q~Õ5>=hbŖ$=lB2t+1ܣ {%&>/t܋Ln(=@@P=
X. Y#nPYHaQdm7<@i`.I/Bjf*t5ovpg|Lv\՝
T9bz~0p41513AfcsL +k"߂qйޖ%ӘcUs@6̇K-/eYA,MHw?-վW&)XRZs>_1GSEylyXI"fT/Kԃ!?!RyNj#%"GfEA4EyL%| Հn(HΟToq/6p\ +;$}j.ywM0P +m&<
W?Ѕ|1Cv<(SQ0T7Xv͎;Q4U*g5/M~oV0ɨ(oLXA
*Ȕ#ZuG9bla2Kԏ$'=r3瑶X(bK Vl\XbWVj6|@ + ? $c${##;\a'yNqg +ڨ +BFv+JA|G)i`täyen)v}'|x+JcJ'e8ބW6!PvjP8BQvtk4GjH)Pp`D,lMx8F73U"ϊb8~fzNdʜԱl")j-)M :ô#xn-q^ŵAhR8AT~\Yy}ϏiGǕLE?th^6U'?>@1Ć#t
ΤPհR Ɩ6a{Go,85@9A(ll^ʝF`+G%$gmkwx%BrKpU΄9zYnh@~d18h3ҝJ-9VՖ}ǂP[)K*L
_!XGE ޜ>CǺ)ȭm3Io8r(2,&'?[:/?hPϚ>9Jw[0/E wrio:ك뭠!J0hgS60"y +jڳHy8TAw?es[]cbW,m &r1 y1par`־6Pߧ!c/ 桁۶yAeL +J,:@3=ӟpHs"A6xC15̼G*'ɜ(rmD>}cc2t~J& P%tYL0T5
%HOp 3˚spͭ-HJ
=5_ endobj 3872 0 obj << /Type /Page @@ -10966,17 +10883,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3884 0 obj << -/Length 1474 +/Length 1430 /Filter /FlateDecode >> stream -xڥWYs6~ׯLDϾtr7NcNR"-!d[Kc ]a(4e9,He4^Gx WILHlt2KQa9]z0Hl<?g=y?{a2R(L/f&q!.|6{=FrJ쒅S>|
9I|}kp(dYw,Q M۷.%c>u*TAZGQQ2yYSUMq`farTm絞OR(54z,ƉMW"cUmZ>}k3I!`DkR$BoY`QugU8s*D@V55x'4BJ -wnz8PFbR -:/kR4M<A+0m̆сC
C,i:ݳ"BZ^̻8 ]rPSQkH,Fy¸%S`gD,
o % -:ݢ`C9z⚰k'`6%g\ľyd!zg-MUTLE -09Vcq慶Xx6ڂ;]5(Ec/M|`kXwe -8)w]3,T0<vv=sk#V.YO]Bg'$ A&<n/ć㥧G'h"\㣱3@ti -Ծ)>搰{LD:/VcF5;C4/qzϘZVR͑+߸v0$imtc0+Y\Y)b&LywQ[dԅKh
kiC3iQŜ<2hA}jIXa(YyWyjmXkǧ-G`cbyTHkbt@I7=Q-FѰIX"}f|/"ĦYDP0UvmX9.xB+ofx4lɇ
)G6Lh.>"/!r,r$xUPba!a7MCu̧ 0Mme)&Xprd* +xڥn6_a%4P+H^6im5-0٢mJt\o?sd'q2s:Y2N4Hd4p WSCiT
0|8]ɴ$.~{~h,Q0O&x}503q}bz4(WHos>}@u|K0 d
wp(χJd(f{/qj\'<8
dd]Vc5ZY袪|Q[c04
{XI(j1iJ\3YeR@U_L eyQ9FDO&QEO1#n!\70 +6n5k)h&rF +m/LC邊6NeJنu 0EՑu&!rDWS^Tc:]n~KU<~eJA?yC5_ZP$(Q͚SBPga[˘ajw`A=8" +vqb3Ү=bԎ=c17hMf!ڢS5e
.J=Nt +o{,τܼ{!̼]8PHGC.M06snԒ-S3%t] +-\|g`0+%kq־sn{Kň3.~x.yks?h-X
/I㲛sOJkSbnny
3z;ebYC#7}'P>{,cLΧCIzMO`JH,}T Uz(Hi-,qߺ><||OWy5Xn( _)f,W8%][Sf5s1 ay_azlejRZO'3] +8fn +Au㎁U!8nڞsaVvEűnuLX55=:#J/izzprks )x̼_VzI\ң$xycsbvn/yD45v.L'g t|<߿
L<:a|Kendstream endobj 3883 0 obj << /Type /Page @@ -11006,18 +10924,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3890 0 obj << -/Length 2666 +/Length 2536 /Filter /FlateDecode >> stream -xڕYYF~%0^Yo 3y?P!dMR0lv:fYgiQM4OoP0pDM/Tfi=$1L)gIqןqnF/IҠ/T8 >컾*yدyqz~xы%R.ڄ&7OIx|*eCcɩ,O\6>Q}Q 8vr4+v,.4t -ů#9ň\c<` ʼn* Oͮ<NijJ*L; -\
LZ{Qq_6Д86)Bp
WqϦ`@7<G4* -.`T -] 4d_݃~='fWID5LhecͪeӺZ߸$aDGtyfImj+R: H;YW>+=c5] y-
3SAhq(X`<v8l@98!=:f%xJxdfI^9 -j ěXpuatl0r1? h_;?Б"͖(0h;6"ĜpP'ndd< -"
ekV7a)g0mOPw.5dO>t%XxQ -b+_Xkv"\̦Qh=MUاhNӺ'+kIڞ슻y+OoǗbQ\)3afӾgV9Fg8A(\[88[ؐm7ģ(c_FsZi@*:-7c|2P#Ui@|#i Or{"WF%P&v9K mQN9fօtU#v:YLtOӯZV +xڕYK6Wj! +<iK<IvfT<4\iqe3SAknBU3wog_~y Hr&,dTƌ + +/g{ї51
6v05]]٢tu& JnTPE~Wycm=Lg,IrSxi Q<"mpX +eL
ݸ,:EnDOn/MhF|A2ndoD80?0hԢ$CXQs]#<9P{I*z/-`iZs4V +;B^e,VKQ=Mҷ\m}O h&E>V./rypU~O"uW|X4Zޜ+qODʀOQ7)#Q,C +ʵ S +awݓ% +K۱inoW!yq56]c8¥R
:4ˆ%3癨J=˦wBOg>mZ{,(I/LJ>?d+̨`=]d9P?9٧ =cl{y_'+7!'Ubef
zݿVmvRN6.,a[+bZ.i[懡OrNqإ헊jHPm'b +k/rLg^TT2hэɦ8o?iOIwyrg?ɽT}rs^;[! L&P+1ʨoI$(Ӝ舢QxHϸL1\l"`7V5lW$İ#IPԯfQhR=ۺn)k'^I4جuI`xŸI4®R}vF8Z|.ZFgjUOn<&}?c\l[.|9sO 'qTPjyjyhZR"걻 ;nKQU\* ZW}2E|۩IW'c
Vs{LtsW£ޏ2Qw5&JM-nIz{rOo]{W<7`JWW܍)WŽ^0jWc+qH0ݳdw1 +F>CZQཐʩ8uژY<7 oq +"'ߤ +N)!+o<:rKݮې +K]OiR\xW#0ny +rJ"v
u
:C;;s^ +]o%Ғ9?dHKW(vsۆpe9#K)ki)>;`̸;dBw?W`#9b'0Uh4/#Nc>endstream endobj 3889 0 obj << /Type /Page @@ -11085,21 +11011,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3901 0 obj << -/Length 3087 +/Length 2957 /Filter /FlateDecode >> stream -x]۶~ 5c@qqƱun:Ix%H|~%꒙db/ZZhH؏Z7b3Q7Y]o:6#/7?y\^/WIz߾[w27o+XRy@W~N(_o~%XlL Ɓ]nLh.on~hY9+e}Fϋ.8х0|E(:B_pDd 0ER{XlHʩel8Ć
lh46NIazz$2Lq3Y7#nfsv<>#f}u](S#[> 9nO{2#x9R!e{YQf%
B"#1["ZʩABemn/Uy'RH8Y"Xp?Ez\X:cg@YaOH+x@ - S 5O$F
O44HkϠ;FQ _ -M7Jӥo+w8g돂ɪ)/2k\SfW\^=5
cջsPSЬ_4m,#}fB|0=oDO,%q9\Gb49S/
ěL\.g4pŃ &[O -(("Q1gzR`"K(TnS?jQ48'(GƆ1 -\^(
aB;Cq4}n -\nJhtE -'V|XDnW(}A{;VBr7n)Z%afE[b -MeF<8h}e`- -}k!fH -.g7&}#Ti8YX3E+Bkl!\@Aylr?fDH𱾃@Z^K}hK':0~ƃ}팙맃mJ11ak$ܪZ]qjxΊB1S: 9Ӿ>u RI1#0"?Uuǡi
VNLyp3J#и%|Q^|I3h.3gg%ŲޡM'C0%Ou8&_Έwf&Q7W|m|xppЦ~l-%ԁ^C>lvqzR>wBF$oC)a1Bo0I|<zM0}?cS
J^76CDt7SfoӰA]?~US2J]!N}lbT'̱HfHnˤ=IKkR81p -יO4|v(W:MһS >(5PKbr)U75tlq$q9'T?(ÅH" n@jz^}'Wu`>Psp Ei.7q{pe4քy$a7AIӸBq
]6CkO5܇{_&U!sƊc%.+qg +xZݏ6߿wZQMڦH4!̓l˶.Jr6wHQky7C73䪙,\/fIQf7BJ8Yzq]\\~3幙n6r|ջ ߝ/$u~|;S疉7o՛y8W_3/r` -o~xycja~ћa?]xn;h{ʲ"7 +./~1R//4BenGS<~I +w{le`q*vGsu.8m2G(vʗ s)4 .$u9w~~"[kdVT~vY<gzJ<-,a/PK +Ѿ0=Ea,e=iw5x'; $C)3&5cO]C2d24H@nq-2ȃP7m. +v;Ep +b6LDlKF!
49!\hCc3Lδ${4oRnfG +4"wUjxͦ|R|?D?)<!=TF5n@/>'gzUtc4\aǼ:|GgQ؉VqC&DRqW+bpi 0u&~g|3N~jVWz/QMʪ<NN9Cx$dlp[s*)\0:d Z7<Q\ +P}vuz;\o@8JɅaDt c<;s\H m>'gΠ $ȍ= 5,?vet(Ks~i:oLJJN8mӲVX]bpnBt"2~
, +
|t뇕3xgLnu/C3Xęo$%,җς +]o~M'֓8~nQ^]#*szs69N22+;SRPGQ]x{{=!&\/Sc13Lۄne⠔#>EhT ҒC1*/Er6h'BemdzI'Xwz5sTvR]Sَ\/ߴСRƊ +Z'j xX%, +=^ &cΠV^47yKys.[Ywy8M7 +g;2zjH/lВ{VoG}$ endobj 3900 0 obj << /Type /Page @@ -11173,23 +11101,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3914 0 obj << -/Length 2306 +/Length 2254 /Filter /FlateDecode >> stream -xڵko6{~/kE,pX5E]Ul--4d9 -P0[;{4K.4K$Q·oyPrΫpIvTɷ$r^fπ6Es_ZA.@-3ft$fʉd|JWmZNfHjohI#D9ٳћۼ|س¸
"qmQ B(NdL;eInRmy#M],bf9p_^C#}Z)q+ٕR
[ӬctT+9jd -Qml%&zԅ#Yvf9~@vD],AK'{ҽ_.z`%GO_6X%55 -Suuɩ;8;m>[k@cK9ՉhnvMnCP$jb{ WUWxYZ9 9q6<%vex`B lڲuN>>:mUžee ;4$j<IS[r6@EZ@^|,nO6R'7{bч)9}8h*yæJϗ_U&bG>9Hut
f% -EgK]k38IpjCL`2]27ŷ_۫C+orvՉT8ã'V1z~y|)&p!]]h.R8/"7i4$ܟ7ܬP - -H'L8ZZZ,v*I -9O?^]Ve -ÜEr72 DbM
S5TQv*6FP}.yiRU)IFe 74*@yXJŽGk݁&G#{@uJSקb -뻢
!5 -([lA(UK"tߧqn]i[JeG~";Oax69uG@3OO#6/|ҙYy_̈M97\i1CWSt;X]cpYAhr rPan1;b3jdysK SX| G)ـ<L
,7Zt+6Wڃԇ˪E!wz-z (Es)\aU|nuaKyt':D&o ->3J!|m -{ć,) /pPw#=eX+kF8endstream +xڵko6{~/kO*pX5E5F@ekgK$7ͿyP+N"@D3rl,t6I][-'݅a_2`EbqW%f"El2D(կѻ/oδ֑4uE8߫pymd~*#@ O0?\$dp!b=E,l0V0^^kf»Fu3řc8*UbN +LM2S05Y@]4z_Tnk:9 +8YvGΔ3'Vٚأpᅼ\@EEC{־A
9zդ~
SE&MU-r^ Ep?_ZA/0$z)#5uN$9`uJ\)ĕ2O+dFnm*!@`ncr7q]hD@ۢ\~W&کX?C[hA cp`ȒRce8b +9ִ3p(df8KpŨ+L?[l2AD\"kG)2IyQ&*κ
h$a\V}L=sj]稢$( @\#.+Jgτo<h˒94F>{UK.?+"Erё sm)ڰ +$.jyU&uʺ=M˝i͑DӐªu2!4 + +8%!yL#nT>K"*3F<Cܾ,SxMk"UcghHFe&!爛)QkϸW'i"Fi\:%>$3̜3G)CY&џ2P։Qg8ؗ$H_N3(q%%ΩcZzAH9br#Λšfg+_{liս0ZߌgI_wۜ_u9?UpǡgՇ%/1 +<r*͠*wJe +U't4缂mԄK
JSH +̧[1+!"5v?z!C)͇~"1cc*PxrY<S/B#}o>tEs-\aUh|q8ݎ{dsMNu8`Af8w(3(H?m{챠G{endstream endobj 3913 0 obj << /Type /Page @@ -11218,12 +11143,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3920 0 obj << -/Length 647 +/Length 606 /Filter /FlateDecode >> stream -xڭMS0.oaYRoBŝN&$2ݵ7@(j#DMA+NNqS zw7|a.n8vilhtDRIbc,;e1,NOat~{D`H0tW3yd'8n""
$ࠜ
W D+Љ*<cIgmò'ѥ)<I&tBHPBFkHӱ` -+*+Z7hU]mR7Ml)_81MvN*cS^w;
,h1oR]9գۑki 5ZW`,h(
qTendstream +xڥTKo0WT>X6][0=xIvߏ H("?~"% f\Zi)tp2˗@xNF$>Eg[xl-4fa$)pέ,L%]_;{PPp
NP= +`SF"ᑓ_I5Ȝ k*PZ2/Iuqm<"a!8aq"XvS6S5!CZsz +5++s%yAвޯ_HÌ +ٽwn[O̚t- rh endobj 3919 0 obj << /Type /Page @@ -11246,14 +11173,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3925 0 obj << -/Length 407 +/Length 384 /Filter /FlateDecode >> stream -x}R=s0+8Pڻ$]-AHW[/Iq>
" C
H -yV -+Bu:_I6lcHb*Gu|oWdJ
CT@
s]p# 1bC
7 K~9<}~zh?U=60bE@ڱNzj m/ʩj!O cKY-~v4%.؉ ,0EoBy>tB^v -<KTp~跥iw,dXqi}B]fJ2HpR[+2OW20b(nMZ4"*T"-F1
2bn&$-Pڷ)R`<Mendstream +xڅR=S0+2CeIrG2c04!9ڤIhm9'H$H +#$$/2aB&y\њM3%/aT.TI2"RDIeuDWH=O1ًw&9J6o;۪|Z<G-$\) s@aV endobj 3924 0 obj << /Type /Page @@ -11282,11 +11207,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3931 0 obj << -/Length 252 +/Length 238 /Filter /FlateDecode >> stream -xuPN1+\[vm (N!D)HK%9,\R@.&erˏݺ w
MQ)A YdҩDĕ蛫ۀ. ]Li0B{-ZF?ڎ-`C?4bU@D^Qi5~ڎX%_/H<Άf=:E{W
1e-4eRGshjn.7xm,t
dendstream +xmPN1+\-
JTHSQ +~dk̎g!r d
"w
0|{lh˒<G1)!{(ܬvbSGj}{NvN'JL^Mk}<V +dQim\K$=_sua?U{>Ͳ52T没+/k3Pv8f``]6s\~(^endstream endobj 3930 0 obj << /Type /Page @@ -11306,22 +11233,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3935 0 obj << -/Length 3140 +/Length 2940 /Filter /FlateDecode >> stream -xڍZݓ߿brOjM -bԃ4^]6Z/&< -t+12{ȣh7~'c=mPpv6cYSkiqΑ=pn#
A$˗h -کkɏ/V$g5]/dS
-9w=
E*l0K1vpBelMYueӐ+_"pȉ.ҡf!L@K^F )c pd)
CSl+p/5.CBJ+^DaF!03R߄_g'!:DW<zČ!J5]2N<)FPzz)`1e>AUjcZ弴֫nǬ9a(L 9ՖĀٹPzX7Z3BH.5
aYc2'bz#SaƁq~B&ZCԤ5U!M -b[}e(hx!
m,SM¼ϟږ@ԠpY~S1$u'xTW[PFR[n` -?wU($~ˁ..14եoSdt0lN;95&yCӖLJ
{qj#^Tsn(G),8x Ӕz\6 U*ߚ Lȼá`=g)J:I[CtRKP,ߜsJ#LDW'Q
g,Yԋ1}wMav,nd쁦;GhzoV?D~UL$qθA gidk -M\N #|8&DJNw;SQ:Ȃ5aYvxRC^[L -Ի悯cvO'6̌3J)`<9,,gˀ":pACC -o9Z@QjOz#_Mo5%v ѡ$ -~6F<Xb&ǭal2CsF~F$_5p!w~\H7d -}۟22A5jg8}6KjS~R)W$p9Ɵ)/ -Fqğo<p+4=nlblr/S11 +xZK۸WLDUYI!e؉SjG[>$9pDJB"<>J}U&
"?0RbWf*4SaО\eQZ$Ea:"W~DIzrS+H2ˢ?b",qrNmōz{"_x#;hAweOFWV 0:!`d39hd)I")\c8@u8{\,a]SqF71ZdEݩ!=JíGd|<<r,i3<()2']](Nr2_ +X'ó*Gd}7t;ãxg"{\湲 zt1q{ J.](
C,xDH"8~M#-T.5Jvsk" !^iFv}^6T8a;~,E=/&n#y|"{(#=Cp* +oNFD`_IZB.Fn/ׁ*]8<3)ƌ-n3u#68yHԒu쐤ݲ!w>)b{O|{BVզԍO5hAbB0?s6fwV*5c°n ~e^")?9!g|L7I)8泮/ݞyqNW{+/HO!Ѩg|Ճe?5,Y6e*qCrdđn5hbxxd~"xa
dE$|p;^Dr45iС6BnQh*s6[[nó{d4?}:|&L|&S$>rJAfb}2{_~B(&uU@vlF#SxrڮuZifpWP[Xכ
^(>4
w3-&"1]ɝȉ&)
Dѱ}EbFFbti +Illc'u^ܗwkwS +|qēw8p, P`tmM.*@y˳jJ[aI +,We-
'vSܲAbrSFRNY̌b +!*:44dr* '\N8){{mʽtʪ!A]|⁐ƉWU|,lDq!~}y
]gH +na)Sbq}4Vszg@sj\+ԅ)"`u)+][g@k=* #*:6q϶yc\;NƼe{#MxHi B .De1勓bpYAf!uޏ6NKpCq:
KX58JېשBmpže8ϖyY1OhV(4 i^n).YONV;% Gx=]B=!A:b\f;)P:P˔lРpZ#yd`d(h4d-9mSC̼.9(pY81$( XPWPHSKM,7jb3T0;?V^C=^r郴'o:6Lx
exU@]F3B*:GZ'a^ҁ8U.lNҙD +6'n:"r;+kxq;bJ=:J[_TfK,-kJ4KݘڵZ\ +,s|FwnGH~!l]3GBVCXL +3dÏi#/,teۂX,3"֕m6fxcL7/qpSdIALRow.: +i,IZڹrx~ߦfZE_nS9|=g
qVU>#>)d_c$$ػ^2,_-aa>KWLC?_p +a1)p$.+7H0ey/'*nMӭ<|gf6pv6͝d*d" PbA3IRLeVEendstream endobj 3934 0 obj << /Type /Page @@ -11359,29 +11287,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3942 0 obj << -/Length 3740 -/Filter /FlateDecode ->> -stream -xڝZ[s۶~[&7t'v}`$f#*IͿ?{JĢBE"OTdE*1z^Dυ+! -h]\څT{OHw?/ջ+cҪ˫,˗z cZ寯-}8J/yw|KWw@mE5EL/9R(X#7{]9*`D*a$6AIRy$ЪN<Y8"T_oe-놟_e/ -IfTBk/ޗS]=\ROi7 -kp/.$ge"S6<eOh3*߱+=-,^MW -rL:(]x-4nは)ݬ!:hN6m#K'~~ -:dɖPG wUlkFBDM.-@@8w91x'ݿ5D, QN. uoB̕$$6D@I AW]Ki)!KGѿ$y$?jIJ>ٓGWf0gD LA^]wZХ0\nf p>N~
/8W;"ڥ$Ժ\i("앍c2`\XrVvTnx}!,塝>J\lhD$? -XY^2#=Q_
Sbė/Uj0Rk)KZApXȑ9K -M4,rVlfG3Qb]^8w[3A8ɣ/3=e -a-rrGNé(x}NAUD05^;t[s()#d +\<x%yr>T:G6%}2W{.Wf3FwLh@|_Dfr87\fϓ%$fZpPj_:t789%y"Kq2X[E-E8Aܓ kJsZ,yU+鐖ĕ#x)?6]Eɏ -_gHd$&3ajF$)RP$m$2c6<1HQ䁎xƃf@[?p+XF3,p} - -7C}^Vk==I< -x]gII#jj.%9ƩIM[3ߟ1qa*Itszt # -Lv -t`tgʲl0M -{OڛzGw-Q}:e$:߃
hN8ck#Si<<q9ŪHw$Tbˮb=Ou9s︀J!ܼnf'tN"v΄K[(]X-]2Dۓдm].d[q&(gx!BsVH+dS{[I.Pv2W18ځC$M"q$&P N;cRYK^\`=
$ey,u)K"&a:XF)9Iw([TOM[Sn+.N!z0JHۖr+ìz<}C.@uMP+f%ԳxOr]t=ïtʆ=a4e9TkF{ tuW\c-L9no(c<ͮƇ -<ڿNHQ6ߞz7#Lju-%٣zp{94}䰟Q#9"A*8}s9^~ZPeD_+~8=0-}]7
>r|+Wo\'QQc~۔\_σ-ӏܸf42S uJBKL=:Ak)m.q0{M].Uh.SFjmHGNAF\FfաnYyQQj` -$Y"I<}qkJHWEdx)X
XdnsL`ܪ4KLd)Q͒08,99xQͤ!}-?1-
u \</*J%ɏ,<J-^4PK&fDIavڄIZp;ǹ61ȨȦA.%7)f`cM`Hv!* -לOrkfZ0/<gpjn_m*ȼWAb8SDY3SFoOLȾ9|J:fP12brrendstream +/Length 3565 +/Filter /FlateDecode +>> +stream +xZYsF~ׯ[*sG6NNRJ%yIHBL +tk(t]x
Oh_ko<jI`Cɦm\d6@M{YkЩ>GKp0Il^D|wkrj҂ʣP__Ֆ +IJ{'Gl)sD <<$Kaܮfop>N~
-HDRqj]Bs(#10.,9#@;*\Ndcw;!g.6x4" +%3HR +y6Y{ptfQo$H19vc\<=:^ 5/)\q +h"h()0(5$9:*j+غ1igTs*($$XL +j.*B +RCu6~ݺ +nℍU> qN+K2TCbT +A8mm<^#ioSe6f!v,Ajm=`N96C
jqT2!a +a-rrGeNi(x~'NO&"mW@/=EqJ9JƔڄ.eX<9@F*OQy +fF{z + +0=w;}펃FV15랞Ϫ}W6>p_&xyyAINqegQx+1bg4}ܧlxd8t{z3uBAFfKLvṀ +ϣ^1>HT)9Pvi(d}L +>^j^Q7/&ԅtyþ$g43Mlf/T:L&O\ N8XE%
ͷ$ax`ceCmϞ @\=;R-\I+03JZf,Rޭ"eEHh6ӮAE
3c/9EI`f*Ȩ})$@̕w;R];pvhJSݷ8( TS֒נOL_cY~lm0RXVp) +kJY״<P"̊Yع~"DɡvqFXi
{heöi&&9σn?@6gZ ]URpXR8?u[>yC +)3ҮumTO}-}8Vz1cٔ\_ͣ"qi52c>:gZtXq:@B1 [wXφFkf.RJkSbE8Y3+LPkJۃTG~G@<lj3ۈ3{٬:-+0*JiqJ%ʳ8UL>@Z[~TP˫JußcVtV\Fc"Kl:29zuͤ@ }-?1-
ɥPK~2m
+v> endobj 3941 0 obj << /Type /Page @@ -11416,25 +11343,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3950 0 obj << -/Length 2940 +/Length 2852 /Filter /FlateDecode >> stream -x˒6>_#UaH#U>$T&Fu8b"'$}>$r[Vn4Fs*ߤ85jwW@06|{uC_~餾iwoo_cP7qxuZ_Øw-ζϯxŗM^q۞Uc?~_J?^ʤƾ -tu -Q642/Wi1,\9X(Kv$ z[0&ڼc~xqn(x| ەE^!y;pb#M -^r\;tʮx!Zwr.Zj^̿t-#1-\sR; -:Zk淋q;5(i4R0`2E6:UjOō{?3Gl"c3~{`[lNlxgp1tDqZʮ6#OCnp]%ieɀ@'Z7@N7zlM5(~D"b<-1y&eV7P5JqNyހhBo!P}S aDsy¢3
K;/C0jZtLzn: -Юs$4h
d yBZ; -3{tGNF$Z^ˌ˨l/usVoy<D+,lX)}yŇ^~}0 -EZ*Gu(z&x -T4$L"*'DO !(BLGb`XDy
;q=DZxl\d -"_U:M.#&IJHÃ&'5nP/bQ%uOX8>1 -XqB)qȇ!c*v ñy5LK44Rs -<@`KE)u=ߤoTpP0 --j,.:j: vM`'SO\|n?;f{*-,$*Lxɑ-\a2&]˕w^\jN.|g]5KߧoN-U*Io -8mB]3]wR:`QR}rPڴr4F)LZElF -!`(=2'84&LGzx +xkoF>R@E@>Izns hE$$%Qvp{.$U\,DAo"4H;B{/_+g*o=X5 l͇8[3w?_.W7x+s̈́M~3XWd +'|0vf+eb? [|ŕU{?j3G"qf;.j^eUGbSB#t4!]]Fx]BQVǾ64:OR6jo˖:ZZy?F" 1S3vO߀C95AЛwNJ%K.RQ2!ђ3"<.\׀Ԃ#c.`FpwS"1ru7GtO7mP8 +kO=5~<T(``E`?3Y
S)ry +v2t4tiLuREbaV_7{A6*~J \H?o7r'%"Iжw$4hd yBQg;5 lDeѼXAj)[)_L< +Q ~˫-&@kJ+ã"&A>CgP'FK
\D-~-GIGVA^w:3@R8Qv/E\~usA2)AIUUT/(#oFpPWɳĥ =%0Q7k=hb̸)xǃca'fۖCSJ*>q%JLUIcBb-6cR>{
~ +&Uhl勤IJ-%'!n'62 a΄xQxD$EG`c#(G{s]'%3PdHi4 `5$xHfd2 + Z +%4B"% +|~S;A(vb( +c8EFcĐ;z`86(?>bI2&f[icj, 3Ri +0B;)c)غ(Ih:r[nUB2SɎ>r{<dyt.9}ɟ)1O| }ml;~~fO/zlpٍ}dky%ﺥSXz#~(_]ic? +ӡ)e &WsmhsE?!`xja[G8 +/1zg?"RāF!h*rC~hh=|Z$MUq~v7 endobj 3949 0 obj << /Type /Page @@ -11481,25 +11406,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3960 0 obj << -/Length 3060 -/Filter /FlateDecode ->> -stream -xڥko8{~dbEz-p8u68WBDm$Aʔ%{W)r8{ -'_O}];9ͼ#ԹT -rd W$*K'0̲DGJDZɿ;\'k+JE![TEF)3It(@liŮ.ۧYV -hxk4^T[i -.gޮ) 9誨Yqj^;= -d|Ě6EEJβ^ P/61:B -Ebn|W1 -5EޖPX(28ua(j559f-֤#gȦͩ:)Ӂkt 壡`XJgsITNk%|qz -Kٌ5P9/͖fvQ20,%2.of -ugҝ2,Κl1'>sW5$V87~`J~ L~%:6i{@8^ĉ<`MSz]VSץe*.ԄxHFwZ"fPO&DFN5iOBbn
D&b%_҅2=uksWdk:ܔi,KތcYS#)aD]b4T9.BwƙY#3h53YSE0Wg53ϝ - -LRwq)RdzU,CkN:AAGSq{'#y.&\E'HNTwkʠy`Y -agέkL+oTuC1 RX9jWwDek߮c8>c""9CgZqȯ14զES}(AG3t~g -"ܱS'@w c -'CH!IYendstream +/Length 2908 +/Filter /FlateDecode +>> +stream +xڽZmoF_!p +'` 3?hY^LO@*tAK_?L_1UQ'P{0 +4m7ػ 7.qp<xv1ᵿO:y505F|`t+&;hJ`}bCBk:<WKw}d_*8
3 {PmU4Q?3/YAi>-r{M?;82#+?f8 +++<(yM5vo)qěˢw
!=l=
wk+&|w#-61|v͜zwH&$Ð|>e-6"
)yawd2(W+fQh#D'Q}l!h:}6!DDïQ +U+2<-[m}/CyM8%O6˪^6#-fUF&X1S3ގd> +bĆ~+6u:`_I@jSÕR<<\?
w}j߳l76SNā[e$*2sxkT-z7#G;8H6>-3_{cbxF"L^A"in0o~K;B +uSG{Q~mop2tHŦ*CwRVj\Y;{u#q'>۸: +U[
o!0
QV+>1ntBeA +T,OO9ZÃINryfg['r,: bб?ZۄS(ijO\[łNg
q>kztmE׆_vmD7+Kgtχi(/*$SFBk֮rXJ#j>-qE*CGr/4vOIͩ'PR6mc3Kwh%GĦeJ7"F[B+(#M(G!R,1BI{mbP7pU3omq3!Kn掠Gq]`ETZ:ctIa>ڔ Bג shAO\ܗ &SӸ +`8qi]I.p3X/fYS
0`$43-WBrFA,q0㱺(U:^?HQ"gɡe[܃Guӆ4_i;Ih䅋I a]Nd'r9Loܺo^#sʅl˙NʒvΡc:XF2&TQOwEYXFR+V;bL%|WJ^K\ܩ.YWxAvL̆ !xaUn7kykBp|QYs<x;peV\䫕,09QށO3&T)=W4]@LGk> +R|:ϸR@C
U(S^zӤY*15(63/Hz-/)\&5`XJT`pJjz2 +jj<AE%?Dfh|-".H#J5` ƧX/|%HX\oV*J*z^1 +vE.&'- +RCq\ed1k/eAv*[/XoΝč%t҃~>\⫨VZ"Z==TLd阪/bm_t:D>fbEY3qq endobj 3959 0 obj << /Type /Page @@ -11589,21 +11513,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3978 0 obj << -/Length 2895 +/Length 2767 /Filter /FlateDecode >> stream -xڥZY8~_G7V$1<dڴg`fԶ-D<E,Ң"YWEʇ*1UDQjwW0@(6BzHKtw뤾gh~/?\oRk]o8Y^k`Цa~zoL
7n&XwywônzuD B6O~=& MW+mgn-+5$jpE:&'fsQu77yX>g2v8#?ƉA-U-oI9u}
sQ )v^ -&NiiIEဧ촟l/
WuXl=Z~k/(Xc ] -m(AIz22hϩt - - -$Qۭ~7Q+-`ٳ%Ɣ!6-,i-J<Z7 jW侗a@ -xZ;|& -\~^ -H0!a[sF~zaCz5_I& \lLB&'OJAH(>NB9R3u4/q`48>'nq@ֈ,hIʴg,rgزʁ@!"] xXʼcoz\i`M4մ&79#VJN-r6⻔(xz+y&20IˤLw15
ڂN -ژQiLj5#A9WFoM~˭g!m_egSu!kag=I -{%Aіo
?`a\lTr22aAf.T/NÃ~iSoRv$&> +xZ[6~_GX+D +!d&lm}XYr%9=7((<RV.U88t_+w +:V^GsL"6 +- k7K ]?7u9+ҤbOr
KBDN6r]exFo[ ȝ0`C}-ѲRL/m֖EX%FJRciKYɮ{s2w䃗0ڀGbAq_Q1)%9$)aZ"M<vv
?|mfț8SfZ +VkMuܙ +CeQF +sZ^chV(g-ܷ0.@.mZAJ[520t bF9 +TG ?ʯ GYʙ1&#}F&̮9?0ݩDQ1}E]@#1]LH.lVwrOJ%cWpu!PEX+%DKOU^A:F{o.2,zG|Z( +Г~+?ͫ^'ddǭ8.uhG}$O<Xwy,]&Ʒ/̮o
mNu`8lY휦}ȦBrn% +jIn`MX2>d4-[|>^0
,E4ȴ1Gk:9ʭ`]bP':~|*}r$7p +Ɓ擨FtL8mZ#\âQ')A8":ĖUTTؔr܈oūSd=3TwJk*)MLQzQhtc}Áo(3=16Mwt=xoϧ;0IڞِDhu>p%bXdS6)KR<8FPFF^<Լy)w5.L5p͵mUJ2#OG0j6;ZUϢz ψ`!Gpyh8ah=1W8rB7ܩ!`iu%TYsC\l.~W8`C[SqcQLӛp!33aF. +,HLiS䃅rDұ+fUW/;։]K6'&&{b%~ endobj 3977 0 obj << /Type /Page @@ -11647,23 +11572,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3988 0 obj << -/Length 3214 +/Length 3122 /Filter /FlateDecode >> stream -xڥk6 -#d VDQ!mlz]炠-Ŗm5Hr6_"%`Cr8fS4LV*maWJ0X^=1f* -7Nq̖_z/ڋԻ+`J)?Oӑ3n+"|\/?2WK(Jkdկ5駫Y:~,Xqe\]^hƫ脀8#Lm*04ҡUE?P* -gD)?K2!q,8edڣsZĀP3Qi -T -%u-Ġ -=39#4 -g9a(2~<`!Q=O -a)Rd -e Km4r
{]ȮP<{YSf\j^2eْn9HZ+{(@{SwF^J?0zI89e"ju9Qyڲ\[oA?#OC ފ;#v=݈PgPyoTBP&rJwҷ|( -BwU=)e -"Wp쯡"@5;5iBZrۺ`$&&:`)RՒm>2จlL;[_tBCI9AC#^P\\|鸤'k;rRtf"b@߂8/Xw赣ʷ7o1S -롄kRl [DtѨ*fOA63A~vڱ -wxRfM_1* +x]o8=Ԫ(Q_CthҽsE(T[%Wf)VrۗC|e5O͒t'j_x-B 7Ӯ8fyHϔ^:[ney?/2_AhwĹ+`J)_OY~G;|;_('^dߗ?][ZhWGR߽s4=@sU:P2./n/iw9=Uw_h?r:>qAaMDP?`>$3őKϔr0u|q +,$ξ`7Di +9dL{i5m{b1
ܫx@RKs@d++Z7Wn*_G7g\TNS]uotiFؼʺ<I.#rWaOD[J*t՞i28v6USyp +G*u]y$hKkEQםͱwϜ Y%TN+ƽgyt\YsHnW*R;h_BZ]~J
>EM"d=O<vJ`rx1itԹv%%-=awY +%OIQH@},jyLVNEY:,>rET4LCV.t(#pGx+Aqߋ%@b:s@Op&nIm
Md-:3McVܓDT +_# s3ɍuMQ
|vKGsIv
yV<]>x¦ΐAa⡊jĄrNx;DNw}N[ ee$aШhvrUS~yQ.{47-Ht@f-<!c&Hkܡ߅{Iպ<_|Hyvɀ
'G9fĎhJ +$K[1fA3GH/c =t76Ǯ__:uBQgL(b$ߊ(CiNa0Z~׃xͱ{|B)%/KMJSV(yl7
VT|`'̓R\67w3*%!L0[qh\L}eVS[ +MA+#zzĩl[^ 1y$1''| +߸c#TdPE
Y`>0Q2oGP\Y
0HӋ'SO/qҐVX[Is`QA%?\c=>z#ȏeqveI(/$fErtv'ޅHHYqp#I~qn@,p/eϼs_i5:!VQMzt'S?FriB[W$w )3Oendstream endobj 3987 0 obj << /Type /Page @@ -11693,24 +11614,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3997 0 obj << -/Length 3339 +/Length 3326 /Filter /FlateDecode >> stream -xڥْ6}BTŐχԖƩ'<`$5Y~Jrn -xY+d8μ،akp2p<@Bή(χ%Fd`1H -c8Վrk*9s k۵mA@EܐAG I)Rv(1^Aa¹ۺ*Yxhņ
a(j84;fM"86*sѳR -_BlғLDod6ܒl;O=*Ĕv`H@Szwj`RYVgr_
c2L41½>U%!/7r}y꒡V7{=-19Z]Xg<>u/Hf$r\(]=Cr}iK -@韪-iw:y@/N"&i"ӣ[ 0|H\zS Kn,O=ZċstL)h&i;Ũ p{[^$Nя'0'*0 -Dݵ^^ -ƲG@gsg"b\fH$1@ZN]*A'A3e2IZdMIo;oA6χ*Է8HюuSNt4F wlsX -0E5DLAFDqr:; -cbظ)cpj6dݮ^IM|=4jm$Tk6tuSswTx/\<3TB3}Qh凟oljj?sbeL2Hy#v,dݳ;,ߨoiVxȵ1`+) k -)n$W0Zu__"Y/!f(Ŧh8W%MQA(GdJ;_T -ͪDLCeݞdO@>;GւRS棸`5j\vfj%%Y'2ÂlU-L+pǩBS8E~}4נݱ_F(BH>ERRqFsJ:,e(b?"?`&KE )0&sU#B1m;Dh8|=d +xڥk6 +ZՃz}(yl)M抶E$y7o^([N;!9Λb婟<=`y +ER~&zT/b'OO/~~Xo8dY}\0~1_{̓|ބol`7[U#W` WO0(V~b|ծ8Ygߨ(q繲B!#nwtr 4 <ƃyt1q`QWyDlumߦkxO=0y6n|.ie<o7ĻuTx(wv*蔻^p'%!A +Wci_Sö" #3wttkYT~H[{QV<hn|G¬M<f5 +\uBAS.?#MäDۺ컡C=(u=]MOW(l;vtû +e^f8g "_x#3d+~rAV "=F@ʟƩ=ӐT̲Z&?}oWzgDc/;^J?N#$F=OS1ԪfO5&GbϵO\7gwwTO!%N uIڝm-%I@z\'Ƚ(,a{kH.'v=Rp|<xq) $m'5nEBa4P$Dw-;,PX5∘ah<b@D11Ӳ7u\$H ]%$(q&L&I=Ud|F}SAvX;DLsgTZc;RP)r}!2\fp7'2+\QCƕN!S&v-.Nj27yD}F8srͣ +#M~hv8`jCr5'87=k\N&r8
E( H4`n +ЀHBLig"AYHp̶N(NJK>wVq* l-:ePH8Z)4W+):.\fRqq)."WR=|mTD83]Q
NX\@;5$eƴtU=dM3d\Rq$"k/c74 +QشGQY @0&C#ٵ9MCsgU83%= -I˹Lԭ"0r_9' 2訮;iM]*G-"p g\&@!ONNܟϲUV@z4ZrV M$=̲82hZB͝ذk'j]qJR٢|Q28]# -&m{"bbYu?/5`ES]萁a%H{Y4"iY"=lvXPLtȩ0n*~DmFhIڽgV$$:%0n%R19hcPn$lID(ͫrNm`%Ŵuc~04 1WL\E~ǡg}$ ]g۾;7ٙhD(>:9EbYf +ɈjH˙OB<&{1r[ +b4U\t +ޛI3X"3Kk_A7yFw&N'/XIK/yHo +Lp4gs(@IE`|8w`RZy +&P:aY)G|CS'gy[SAYHz +~?KB/$Ņ2>cZ +'Bl:R +:|"M8Wie8endstream endobj 3996 0 obj << /Type /Page @@ -11739,17 +11664,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4003 0 obj << -/Length 1937 +/Length 1840 /Filter /FlateDecode >> stream -xڭXYoF~ׯ`Jі܃CjI
$D[%!k)ʖ -K]IlVA$`Z4c\{:10|<tç
!X
*+9 nފ:<./H+&#V^D<E6j$24F4#8_q -I7$pWCT<pزۨЎﲕBj"+`E)v ySPE -vVp}pT}_ -ŐINź*w<]#8ix̏?:S]0lx+)9vt%u#UD|CE -&hz)$8F*&ҩHP=я)Bw.\_U#pb{+7*N^RPj-\uÍ!f *+_.m\%>r橂)Uk@;`1|:}{RX>siђrZw -}E
4K +xX[o6~&5'(Kފl+YJ%9^M;nF!y.߹Ѕ0ka7p%xrΦ~sU
L7/?L_]Ǫ8#g2y +ƴl80˫Lx>{_oxyN
^M{BA
>uU&[ʋz`}|kd&?SxyVJ00"NQ~#'~8WeDƩqhNq:l4֡Sg?*
5N|BKfXIQ8Ix8^fy/=-YtBHXJ>nB(fjV)`8+ñi
b4 z㌜̒5<j2aM7;1 +<Aq4YY v,RYo"CE60aS1anh]#;'5zvd@̚))]@ e3+tT +,oC
P+6bJW7@oxmKkd)Hst,Lz?eNtYq%|n1%c2k5fOI8Eç<$&7$%t%\LJ~1h:M +İhmSaWb+nP + +$;[%(5I5OZJ[[0IǘB +&UR u<bG +LtgsUK\7~h- ݔȣeEt@KPk8h]E7lc%@V9
N#ukΩgj{ƭۑq6ZHJzPF/i}\E)!@9!GojFp +=>]r}Z<L]XhkF[.-6wL~I$zUm$^̕5b,]v8Jf/!.@E$t5C?|l2K_\ؑ~p>%G#LD&9wTd$=7nZH?RoQ2Fk4JK,D8%(?mh.,9IRyݫϒʹb3N8iv+u=spa0MXequTm<}6GvĀ$y aq-سn{7u40κ$avr,:wxh_ ̏ 궫6%:edυ"N_̮< t (<)C W6 + endobj 4002 0 obj << /Type /Page @@ -11792,29 +11721,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4011 0 obj << -/Length 3253 -/Filter /FlateDecode ->> -stream -xڥے۶_y -5I!Sq$zf7ㇶXХH$J$3".98o"o4tyYf{l`W@$$䭛T%,q$La>zAE7* -L<oX:V7YYi<6M}3vVgymzO9mp
af7qQy b* -Sp;,TpFZ\<"*~q,'ˁF7ͭ_aI}luXO\6ZA>PQܱƲmMK[3|;5A4^6l3K<4lƣ0:~r_Wt$R1)C3Cx&M`9MOd~0@8jTȤ^Uexid[\{@*V$cm/LP)\%2~: ְxNtDAxn eyv -\_S ϋ$IOf4[ț -O{
_֘'/ -Pek[BP̄cp:FID_ g͈o(Jb%>FAF$ -MoI%I2M`x,SXp!7iPSQRuP"5i%QD!X,QY4 F`(6jD6>|EJYv<PR^f`c?1C@xyLZ;LM':%ĕmrO66r,yۿOrJdE#,naQh$Am -6]pG&ԲEE[fih<547BR=1sY{ڙ)8'8 F}d4zI"h+L.M-֔wGX&AmrSAl8CT#bh뺿hL?, -p<H.Jڐ+ɏd`6+8vj`.K Z|ˊC}EkC"Z⪱d;-;W24/I|\sB#"S#`Hc'Wlf`ڟ&-wE
=7yR%%nyfsA6XG+<B2@SFbowx𗇻7tV -28,H"X7]gU.AeֵNp)NlЌqL(>xӘE3Եc#~8M$\deX\&Ⰸ9Q0)8I )R?x$;>o>~SE,LTi_AOxwUc=XJ E+(3b|h+w'X29 -lnQ_$NüP"@3֕#J(zo}ڷN|gvo*x'ܷJaxۛ,qśT71rD<2k]UP`:6*,k+2.@յӠH(L@
h{1҄ygKVKR=u7լ%N 4㔛lA5n!2܅;s]\aIq|yg9Ǔ;DR2zX5
n,Qsw)5t" -poA"O Dq":? -B˻ZLU2QP@H2TҸoz9BesOmq)DٴCB^m+Hql -*e -?#WgG -{&]3sn9PWs|w/n b6H4JVޑ"Jho[WM5A.'KB=yC[Y -qp1pD62˿Z*LXQd%&7x<8Ϗd Ą8ǯXy0Ozejt^aJ8}hT)Huuo' -l]s2 z;.aT3A*id%"tj{5ywf7trst1Zld};Qy<x͉.\tPK`pw38#R?yp\dڳ\W
.H;?RhH>QHq1Aϋk:Bfn;D%OLuB,< +/Length 3156 +/Filter /FlateDecode +>> +stream +x]o6}ETx%R_=q{`dE|l)RR`!9|]]2ԫ,Oëj#?#N2ch^T-8QReZUHoׯ|P +i[\o~:I}s0vZY^,N+m* +x\\4~=~GA
MVAe_Jֶ}%%#/U<\5^<xF㱅S,T[~Hʦ2" ?M{OCVDУaiõn
4]]T6.6ůYx
B,̩m#;jxr:A[I.D0C>oBmG!aҩƳx8'Pcۮ7pppgE&u"ND4U%?&Fh$Ⱦ愧g~=.Jpy0itJ*Ckѧ`deMN4mOx/ˣ=pW: +ya8鉂%)z1&v͌#<q3Zi`)57erdE|p`>v.A_aNyVvHnD'65Ѿ(tT4+դ۲; +~Jg\,dJs>|gtA@0Jv'BC"d%y;o()O3uptJ
w}8Sꑎq@&qĆa\l3fkZvO]O858YCm?,]/rǨ
QԼg2-2O3K3&ַQGxn09 ?hFL7H I+3~Ջ +S3-uv# +[8©l|A31xXb<px-7/c^D{5(Beր2ٴ!ZQ>R$\,w[vk4Aٻwsr?[-Kqe7IX-4X#b[nRg_":3JGTVgv1Tq_©__,/a(z^""F*2ԧUSӤTPTVdT +9$&ZP<z'|=?Ul]Xp4o,K7"X82z]:.F`v؇Ι=. -mH@{L>%Qz_2Ef@2c=NK̊vk01"L2,-.!5=+e艡ݤ>cƴ5+1UVt8b(^y(լTp8L2`sQfULcI&;ǃ'Ka.Xq +ŊDnT>}Lg`z'S7hT9sH灡˚__zPrM@b-VCi$.Rp\ᙵ>臤l$Ògs|(2GBRuZ=h3)\A)J Tw+W0**aPDU%jIߖuIR",;'-c^~ڋ/*ݑscd[p[tV; wPOr
he~M6
Vm^xv2J]ͭzf_`m<Tp륷X QD~N&SCm@hp(>@FBDصXuキ!W:aMbdOC<!`}Tn9^@alqw]<dMk建tdLЉa;Zސ]po**W*j\t61S-Y}60bcX{ ӐCٟgWxQDry!4 +(zض3D_cv|l)&K(̎ɭrΞT<t4WC`3U 8n$Hd#=hhL`1"q9<sHx>AkcEr̙m %}r|VN% +ͭpְݒkz_gI㳚$PRGrR<Dqԫendstream endobj 4010 0 obj << /Type /Page @@ -11843,29 +11764,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4016 0 obj << -/Length 3702 -/Filter /FlateDecode ->> -stream -xڭv6_ΩhonI6q6M67/߹$J~!5e|fk5+Wgf~9SI4S?Γwͯo~/^iyʻzol}ϛX"HfK y6{v<Xqߜ}>sьWM7 -?LYs:vlO(Z -vF8&
{C_;ⶩлSjx0%;&
#X:抉*語7t1cB>7m+\i -ìX@pyH -qVF=aIc²`bD;,2 YG҃AΕ>!r
;}upM[F{I14OF<xrjCÓ&yw\%l,~|vh| k=SPcikލuǂ,gc][N+ -q\SWt{jJbtCgw~ ׆ԵͷZC!!yAa -i6Er+FץPZE-![RPN( .̹Tgj)^SƫiyKj -wŧ.6FAK!z6$<($ ml춷n8h. -1+F*h.ph- -SQ:eitzE/On(yߔf}Fa&LK<L=
I,L]KL<έe!o6≓qC.;J.MeL[j] -6/L/
/uW
m2B@QWIT2\)q7;G/~,@B>::mxoI{<ۋߴ7nkد s.G M34ܒ:5WsRXx
gbn&xs8&)MBvD2LL),V:.4 -~8}61DMc`Rֺ^9jW -+-A(&:]i݃4fY]G*hZ;:85>kc(3ƸYU-(gVHo"u)h#?s_Y9*)P*&nk=c12HSag"X|8|XsI7kWr+[XE#|QiH̝{[$X#ʂ㜼A"ZiԊ*ٗ2@ -LeApc}x_̍-",*uCXlqi2k~$;d|8@Q*I|62..Sqp*jEH<d8I3.8zE.kBgǴe]UK DlόT7 -AJVM_nv[5W^U˷pH_m3ngˍTڤyp -Y1ZXl<rR;GɜS:yTnN)tr %ˣ|+O -kg4dWG/n2M -
|6a[&C0 cPZX0C'XOc~E >-pXU?MXyNes -"k~*D̍'8^e3f|FWj1ӧc?6xTn\8LE<H8$=A_h]endstream +/Length 3479 +/Filter /FlateDecode +>> +stream +xZYsF~ׯۂU!țb9n%y4kq@LU9{zzz_d"7E=ә/#EzI]?ܞDss/_ѐͯΫ/ݾ~\arsv;W7jle9o,dUFI}9wo~90OP\?۳(8 +^}8}тgjX,|08Ofs4=Ify@Kf>
nVi}7odr,g$n#ŗzQ9)j88ZLQad5)OiN3;UQ@~G-?8a0m3-q.2#j
p/[ho-W{JN`^`+];$xcR^ +UU;@R٪AH:e*DλjW|T<j^KYhL(L]))M}hӂwS0P^.qM<n6,=;3eB7 S6d' +-(%].*0H2i憰*%_V<]p^uNQv +dA<#1}Ug +䮩>k!J*\ F]g8Bpі "0!^dIrzƫt}j\}1!
JG~l H
8r +<gDX/
d@Î +b!.D ) jy?%Md 'Ը]O1z`0F҅3E#r]@1igf3
UXB.2ތCRpҰ +\%Y^ifΪ|cm.EKΆ&js|,V$7㥅>̃Kɛ@<FMpqg͘V`zҠFT:jI,yˈRK +Gͅpk%dp嫹hP|XhՍx\Q +%Ihg߉.FF*
Hc8b<]-j6<֚^o슗MBEԛ*3}9a_xY{g$ +(
]p%2ߗaAjG70NsLfIn87z/~]e\4Ta'eXKT`Ϳ?=r+b
q݊7ɡЦ 1:絢XEwbb/r(K)71"bF_svm)(şqWM$혜mi +}3É:S{ERZHNμoԅQ>뭚ܛ\ws'l(%
p|uqȦ2I,-PHgƌyw|ˋ"MTs#*"_DwleI1mP G}`̌/ҍ&#~B+]WqwAtK $w.Q`264*1Wٜ9 +d<:[$nf|v\2'\j +YeA'p$rÖ3fXq,ͤރw5đtwvYZj==j]T%M7I:\I##kw0'V[5EnIth
y̢BJ6q3 +0jhOW}|\ +n[`bݏ@VQrg5m9*nX7{1CkRW/%pS?1}B3>A@Qb%hi
3j͆CZX=#{ЉJ"Y;yҘClӴ9(afIb({T,5S0"&`}Ggɇ2vyEsnǜyg09WʾdJ$c]VYES
pOeO,[ J,sOq| +#Fxx~WG1{endstream endobj 4015 0 obj << /Type /Page @@ -11905,28 +11825,34 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4023 0 obj << -/Length 3625 -/Filter /FlateDecode ->> -stream -xڥZY8~_ᷕXx['=$M,fAmmMd#uQmٽ HK"dXAdzų̆giVdz&=B?nbX£yQG~=̓G͓?ouZ6/4~ۏ|߾Ut?1kyl& -u͞= -<moա5Zo7>3QS5* U -/: -Lı -u@(ֆIľPbIJQ/66:_IK=6Guj2"|r8jWx}Pt%7 I4gVV<%<VPnG}*3 MV2GT6OMVNӆBB\K8k8\(hP+`(RieQjԄJsC'1IAE1&ߔ$}`-;'7gfO:c^M-qcFs$*3#`DYz$4eqǠ3tsYaP.f
5b:AJӬ2o$A5+:о:(Ua=e$ύzK3K&31'\2iAB]6\6`QMLQɖ,7_(P -gL/:|+z[@#8gH[ -jiB냞𢤭κQ!H9$2`6)0ݝt?x+] pѹS.a6[jTvkě|d^ߍkABˈ &^Gđ -" -kxmA'M#GKY_zCmdps\(UG-1jxӁIu9+~M4A|d|A:tBYCa~n# -\<c84 -34BohzşN7DԈ.{0v -l9\mǖwCM -|>`zn{@jvU;s)hlǥC 髢]:IA3Bq뚛F]SZIg9[qOTFה-,,T]|Н -4Uf*2j*_A!}OěXc +u|A_-ܲDϴ:&HnucWĄIjG3X* HFKF,"oф|A>[n状Pu]\N!B^/) -A\AgىB - -dgb4Qeېeẩ|j}Cs&Yp1J QG,HL894(F;?P;PEsmZn!o[<ľϊ.Qs%ݒYS}l.]"%`ՎM\io18~WVy*i̜5~b$=ŋS5\E kpjOY"A\+ưޯ1`&GM5r"m/SU_fAnf7.'nS)7%zEB)z/8">8{4~7MN47@Df)i{f٘
+cX?WGwsNޮt_L١ҵB&ϊ[e)0ɭ?6 @`k}>^xب/PQn?;ŷHTnd=_eǘ,̳aU{1A}0O Mendstream +/Length 3421 +/Filter /FlateDecode +>> +stream +xZKsFW` 1 +8_aW&Z>_"}f&&v0QG_.M16NmA=DD>]h4۬ZǬh2"$V|g ly
}ec;m!dyy_pa#TTq3%5Tubj,Q3&+mEI&W
<Xdq7zX Cޢ%eEΙ$6LH1Kֶ-x'tmYt
O3wxwBOҀ̤Mꄢʗ/lDn6VnG>0 +%I8=>J{JKgZ|I|x9]+̠vsj]tc
uR:k,ˮql}g:V;RXL\o7+gG1{; +;ԩK&;:g:C]ק<=m>MT몕W[JxG>TW1.O#%F.4jiYL?,QBxH3?3
=Ná }g#8$s
(2lȢ.Iw;wBʔN +POy2i#H[W5tt֥rzhni,C(~].Z{u#ߊ~m)oSP|/独&~ +6h>n98<cmG']0O\xhlo]W|ÔHRЩ +8T: `F~q7
l^v/%;BM=XbcfU^=C<5\dwN76Є2p&ѓz8?ݴip8j0ilq +_Uo-8vG6ڣ uX{bɹXҚ/adjKFXWX`ȟWx#;H:ݎ}3*̍]%86^m%Fv~ +K יf5&}~rEKnpuO֧*3q:#CKgIɄ~\O5/ +,Ev{Kh~OÅ!$;lp4~%n{lhIZV>h +?\#WWjGSttfAU@?qdñ//@D~`?Nr?I%Q#%!Ϟ͓$w~5d, ]5|%3~rHdf#͎wTfNA>짱)hu8!Yc9!wΟ!|]j˃+wR8H٥Zh; 4nO5XЕTkjyBZJӠ^76H8S)[J< o] +h<~l`'e3&:N,w02N*Ź3eL&FkK
ENv,ao_\.EK}c{G}vFH<͢)7a}U$N3|(R,B'1E%Jkfl +?[x?8"]TdG9Q0Ftz$r6XN+>tAw%]X8]"ÁZ>h?)NJ+>TMp +-!J/A#n!0*Qqt +?f0!1GUq̣; +(h2&#ӕJI0 +nҙ-wS9퇶wG/|$ɳ!/-lُY6R0 +ۍ8Gf[ +qCݳښVжZ쐁>Ms)u~5۱0{[l%{l_hyX]Rf*J9b+Tzy繀VܟO]1O; +t
V6x}b"~x.mʽ#W)NL$bMD.baY|USy.[{p+'եk>2M +$J**K}.#3+m$H&>)q<_zm( +y#زs^<MhrS'V hLeKXoqֿmKS·g$4}uEUvy庳]Gk+9?""
,9].0k]3zXf@J:D(h2hYQ=7DدP4[Bz5<$q5GY +lXn7av/Hҥw +ʁ^YH)CZ4HGTI2<"\Iw=<6}_ޕd] endobj 4022 0 obj << /Type /Page @@ -11964,26 +11890,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4031 0 obj << -/Length 3884 -/Filter /FlateDecode ->> -stream -xڭZs6_R3 {r&՞CHmN(R!8o -}GchT-|d\WfFEDMhF*~%Eܓ*زF<M4e(,e
45^&;8VZӥm:$nkji5%qYٺ LʌyIDJVɐ3K'QP.C"vp#̬[ -Q2$;X:]恓Xdd]P#ڴ\X9K -]m3RViUn/U^[/?]~=F -[hOn5G+> _KN
3rZ%MnZ$\4 kҊn`epHA>?ȥ'.AT?M>-81iGPc_&4)RVUePc1ip味=Lw|z݅!u{dG@
oN*ݍ|_=åJi.:);b@8`ρAEq&|
wd(0(ihѴ.{gN{ZR{l㕿-t| AmH -Ԅu -zFjuٍ\y&(:m"8__|@ xj$oJEӂAy{f>_Q;d2 -|Sdl\\Q7@~-[>k qvt#%A:Tjrqvؑ 'an;8<%V):uRsTOEԓtw{uoK胶*YNMF+QY4!J%Zp8
j|⊦3$TM]qBe#9 -_*z+АXZ@A'7ҿ_wMrMlNX4$ ֑/83a'n}Odd?~[vOؙm?5&q:i<d:%FtCPd<{ދ9t10ƙ.ۉ70yjkR<C
t -^5/,`6ZuL#K< -9=]V2'%Y6B'4`#9+Ѯla8Qs8AgLޗ\wϴ| tsxp(ZG4M'τ$
'UbLᆰAG66Du"Б/f+ M_x!X] -+>07Ibf##G<U/PLe'WKR&u4zyݍtjxa,C*Ui<Ozgm -Hm=Ik)$,ϙvŠUޅdoI-FʙN;Z@i2LvMfeMuqœLѽ#DrQ$qELA#TR.hIGq]-ll&?8s7ᩞN0j prp,s9_;/Kc\=iG -=
7-zH3ȯbGbu;w 0]auG.8x0A}7Amʢ@*Lu'k4VpeܹԣdZH6ߚT't4:{,QSS ]?,I=ab0NuL?Y-NTu*a]yuiBe⣛TKّ7ҋ,;>Rflp6Pvd/+nPŔ -`3BQ2 -T[U|O4)<ƻJr۶ݶp9 r'!s)k?>_:z*;,5wpbۡRLv!9ːq(X,gT +/Length 3777 +/Filter /FlateDecode +>> +stream +xZKsFWJb+{%ƩF!aHB$x +,ny*YzSn0=,Z{x7Ah٩N*PY~bH+W&MҬ12PO2L1nڔS둽`h4{ul<J[rZi6U*S|<I`aZ*(Ĭ
vzH<MY492bЌoM3s}5͢[]ˋ +|j <msG~~-)8ɉ7fx+vk0v=
{:jh@Y!NeȻ/mE-iQ'2X '@Eʼv(F1sn|e~c:IkXUUEGҀPps3;=@J7kl=)bLؚJiΧhRpv,Hw3ռc&2ϖ6VӱlVˌCOZA}ۨa/m"KX{ Օgu`낼ODJVH3KNT$P|uVecWV5a=ҡ,#&;֡Lɺ;#4\X9K +MzVOUrЗ͖R@exol|Adn,jh;'A&
4']M +-esD;q\4KҊۑRᡷ|Nݲ^DdޠMs;3piGE6ཀྵřIyx(\ӠXYU +ΡK}TRxg:#tm +Ǿ
&'~0V!زåUAdNVbðم=ƴX,q;زgGPBK=fw`9A9hZϗ7}b8ŷRL_qG] +~!ZBت\
st6_>0RIzn@,q3 |}9Iza"@ Q, '9!i oJEӀAݎ`/v0Y>OShOlT\y~'k>64\Av+֓n$H'R
ʐD&gKa:R1"KYU̾b3кe$ס`ZSإ\d-Շ{:VNm;NEz/P%RI!X +.aпr UkIrot{r!l!0g yX4al&.В$-b0+²) +\Ut+ywHrڴViLt[É| +noOh۰eGa, +QlOxJ+>?N5G-N/8t}}93avOEHqjᙐ +{WM/JՃD#&H:Y}ЅĦ+~IGIg*ďD.{;~c_S'}gCW"7v7dU0 zAi9%o*& +H}0B<HX`+bBN')_J6N8ur,ᏓXM&sfE2?9QHa +I:
0ajP1f0\"7q2樐 .ufkd7yA{d7 yό#\1hͤMYks8J~Uq8U_x_L[:fy +akHq&*n#B/ ++h?7&<I/eFG ԲqgjLnÀ,Ie.0Ppf:ܶU&N5Nб |QveuYg0HG}\-VO@!i89L+ë́yƃ 6F;)->mā3=?y1F4|c1끆^\25ï
\aM]qޝ$5|=9cwKUv|V'mob`?f#n,/Ґ_`FW1<#5vG +'"Pw?'kO+$l; &u@7 +2yrDBtcy2;/hPnc5xfr`ӏN,+c<Ů$ 7Wc?CVǃ~5|8 +߉-p)U>C'S,E.a~ełYG̲l]=XYaĹ0d+c Mo endobj 4030 0 obj << /Type /Page @@ -12006,23 +11936,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4036 0 obj << -/Length 3355 +/Length 3108 /Filter /FlateDecode >> stream -xrF]_˂U&L>(+eĔR& kʲ뷯At~-9zf{ȷO(}N3g\ Ȭ;d;yun~}?i-ߞ0O]-_NgCslOUduyBIWkD9̱uM^nOgm/sބW#Ovr'ہ7[*iYUsPh};U6KzJH1p4Fr" ~z+st -34jd#5ik(wlgL*敠JIJg@ߢ"UYW - zT00\R2Mʝ7jeqUl'~t6yf\.ueᎉ8]]S@ˣT'Ixv!f:Pf`bSoKFHb˗+knEwFf|ϲ5c3)e -0}g92Is+#PKrC1zpyO`=eJ7&8w]8_Â;nQ0:'cELl!J:f% [{Qnai B 1l.'ǐcoZ"]z.i-O<jB1E]$-4A{`l48%IȒӡ%[ޖM5m/ʩEl*pB1.k^&H:K"bYo/ls"O5vH<S/E{EuogGY )36xo(Jص,o;N4WVG̬4b%؎v#+8mA Yoed-2Ԙ~;wA+%)ϲ=f5- - )]N@
:B3=7
^]ܝ5]EWtڞ -%(/] -%'V4I T+Xo>,(0G_G2w`s
屯E T]K|jn>Cq0⮠%#0j5:m)r#ʪ=Y\-Wo2XKHUXeD3tȪr!<a -K8Oj5C[yttpDD.Hdz -jB(n2(3+.F<F(Cׁry`d5r -q,nݵFv8ue@{e*@8~DQUldNW2!ްd dr`J{30 >K`]OK#L~qjIίq6,';d]'s~z6\]sb18f:₰E&R{ -u(]]ɲ0E1Le_І"2 3&K9G^ial*WPce&Yf9*ۋ9ڭ?QNvUlڈ'9J}y# sSNXPZgU ͥbKLDKk|WbN^^c>pzE㢄1i|z:!).q C8P=RhL尖Uu /$QmBM`ee)_uzT[66w#\0@9B# *E\^`J5ɍ'a7Yе -Q߷l`non_c5:MMiI (lHmIjzRYz1s)csd^=L&T%ݓBjHTӭ?"=S%t?1! sr7k.$AhWWsCOwGh z(-u'J$X@)Y5 ]&<NY`cwGzwH\o18g!G ]qbateuߕPgkļ]EΡ]猿3K^E -܂GNd'^˅r@)c>ww2 +xko/۹8T[$i=ԑ_y-Mswvvwfv^;+{f==rYڳ̚e0kLpٖYlH(gnp]"B6\2r
ݮu7wB_Wߟ]-|p,?L7 +gOжL;f3幦\ggV15Y\-홮eس nZ`! +e釪~sρ5w="W)EɾuwLI^"# +LGY
d'0hu<_,[پ(
@^6 +4"*E@Kr-Rp[ĈH&/{NAkDtd{h(Fk* Q@{#i{<́+敐ƉKkߺ"ʷUYg@c ҘR<V57PvpuE0m:_BIy*lm0 +ۊ9IyzQ!kl-Tĵ̾};ck@ +@`JIT;ISBT@ +xxq03wzڨd
gm-ZFdMDYFggh.[6oY#=C{yW~E
-ܻLQn>2fd`KmڈHc˳
J-3#7}>gY]#t*@3w{d&Udj(g\dq^9@oT؟$4ŁkxקJ(ydm]d%%A#wmcc|fDp"0mj2C`ej#X$Ho +.=\Sd?r| pw!jA]=9>xIQ [!Rf1xܡ|>n=%b/˃`]r|tJbѺ2\JUWF +]7]R8:6=Y~GEjJ~$WR ^.?( qJ'rI֜a4q(ty[bp{."%ZDweQ([> +ǚBcq$@K +$/[].o v"-2qEU|v ܗẦ
#hbz{}W +{ʳu]:tK*cڰIwsc!R;0+Vp9 2(P
tF];OdTJIV1U'7q!|WFD=..z:CV em># '|ΨÐ*rAR#DbF/甫e'pGZeL\\^$Z'sC߄}=7_rMG/ЫgnFjUP9=%:3I7h\2L$E~}]RۣE˩yJdxEtUp + g%
{H,aLl_J/nʦėa
?J)!CW endobj 4035 0 obj << /Type /Page @@ -12069,19 +12000,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4044 0 obj << -/Length 3078 -/Filter /FlateDecode ->> -stream -xڥ]s6ݿBLE -LZA.N%et#0LQcb ?mU
|F2Ł.<\7Cp$կu -zƹm=_UEA-ze]E7" -[; -lojԜ5EWk#Hq;(2wqf4Td%:`TFf)۫K-0l=˄CXURl -=ΛzZ#zY:{掑棪9G, -Pj2P??]v#TQ[f`<tH\C! v.N*{f]<'/F4VoD镨m7un240,"8~7.F+3AInVb?F(Ghɤ`fxm;a(v2S'y^Zb_9SJ6R.ss82!'|VG+;*0LVI!]wJ+; v\c='7ခ5JԸgr1GעnpPQ2@z9J,Q%'ME(h5G+KE1v`NFѯgba=,:fKNK -rnk* -UAc --@RyQߏ,![vt@bDQ/c;m!vXC<1Fix.纏'ev]gΎaI]N6j^l_{0g*=7-2r;xCjBh@ o&qVtU|zGg,͓ՃQW ~On՞S_'N# +/Length 2913 +/Filter /FlateDecode +>> +stream +xZIs۸WHUE4p;29@$-"zEJtrJn;s;YvtsV0 +gl'pP\Ndv@$g}+(k}:µp[s/?οq~B*qo'8Dı$=A۱$mNTہ_ܝsjƫ&Z(/cDZ\;vchN +"Uβ-*B(Kc;c{l +4WEA\P!ڵ9&izkM"P\q[;HIKy8xrO`1$Uoj;KvUj*O8q}7$>$~
^nE
"R>38Z\t4u;*DXw-ANnEZc;#겠-94ZDKQWi@w4:}B>N&^`lP,ZuD]-ۉխ5vX섏yr@a8N ɨSJ[7D?+k8WnA809}BP_ǎHQrg880}c=2e8P~gk탭AU?o.ZX?ҝr|Dև\ZU
bx#3TL{FVȳ_6x69P3n̄D#6\f)snI] "|Dϒ}B>oRw$t**Z1yHSaG9i
ѱ᩻8/m?R%V+
~RQ9HH.K0R +jb#0&b +0*wsĉh+
)Ȗۑ<eaRl6Lsx6jק)tnlou{@<g;* հe +8=@aoۈ~&pA +Ӛcd\3 I[\ӎ8ԧ +]"w80d)82{
16i>Չ
jr0_6pFѵ*!WuʏHmɝþhbum.?>'Ƞ1!,]o+
O +@4יI +wbb^;l+nH)}^} +$,]<BpIaz)`:DӚz>s?lknd480r1<?˛eTb$C/!ؔ 5<X#=Ճ?vNb_!%]6rA53I{Z S#L-G&Ⱳv$HoZcBl +3*=0{*.
ee8uG7xO +=B!h˃ K7Csa +2-fnu>'p rĂ]o84cgGɏ'=Rin(М{*M ETn`T`zG^
IgE-af s"U.vX}<̈́`F- +lNj8(sfOOѫ#u;oKv'Kj8dxpb&{9^U2#Kyn +En&caի#>Cn>ωlJq3RQw{ٝ잯'v# endobj 4043 0 obj << /Type /Page @@ -12127,13 +12066,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4052 0 obj << -/Length 799 +/Length 780 /Filter /FlateDecode >> stream -xڥVQo0~W2-11[WmmeJ@Il,~6 F"}g -ZmSVW^cE d@/ TuF4MN̲QZ7a٪SywO#40bK~ K7#XTȞLN|&FlnR3Wݱ%ylytJyk3
H
JhTlTxg#Kc]#zZHO6GDiD5ňKFU=nI+8!G?]ݲ -E?;uendstream +xڥVo0~eZ +[Wmiej@IЌڦY`$4EwaۄgA8kIn@s!%_
[k@p+12LFl^vh; +pp~=?NM峡etFC'\>ήY˝o*#4S ʀBs-Qd\=ƝsK%ʪ'*˕ۡ|C6:.y; @T
* +Vn$8X 9J +M="#^jVz߮I#v_z:~" ۬J*|MYqAbPunϚR4,:h~!]S8oX(b/=JGgsD57j endobj 4051 0 obj << /Type /Page @@ -12150,20 +12091,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4056 0 obj << -/Length 2698 +/Length 2543 /Filter /FlateDecode >> stream -xڥks۸91ăv67&tnr -<,V_]\4)84";Lg"@G2>N.~zXJ!_}MVWQl(y>\XVv^]}@wW$)$8$"$ZthWtxL*!'8N4ӃR9" D& edۣzC:D'Ή#q1 0 -FW7b2oLw&fE0$Y("A.LIOg͓mH/¼c(% -牱0@UO:yȃwOtF8ufg9 *~TFH$ۧSK]Yb[q,aSq"L-q*aksQcCi8 -+4UǑlfTzbi(2,UDif2^SZl6jMؓ!>ڳ1]_bke%|xvB40LʾljT{nL
L皡%(}2!*~xA0zұc찣e -(6!/Z)X=X(E8<
̃"cEo0dv;cd{&{rI1]8*,t0Q1#+F)&4(bD_>Q3[fyo.l{VәaG|F=5B ;&-UZRQ~HH,M3f;6M[hU:@0׆5%h ~DzDxCa#v*3H/+ -[Zm7e-p ܋ _F(f0w8|$Öu(- -gVz\ɪO]%TviGRJRAssy Xo%ĥbFE0~!][Pmoc>ZL3{9mMO/MpN[PdlƜ|]8Me,LWq6LHxxBQ -R㋹9_d$ӶFŶFZQ]OU$nX
82ax8KL)`nZ< -Ul6{S}%o ~9į5膸&8p쯼ti +xYKs8WTՈ!nXɬ<J6T&Xe)RCRx %2*h4@&I^M4v@MVo/px-/|É&{bY8W|y:,IRgq/LΔ[~|~]t~9Xnaz_|Mְ.<73=Wed{FˋۋY)<Nxȩf~
xc (GPL~n1{p$'rtvX'D)75(C=#T\'pD^eڴ~\od^Þ&aT}tˇ)niм'!HJ[㧁~L[,4sk0˒;-SWetzjMyAuAjꩰ
%L@p7kyh[q@yͥШ+(%tD8.K:6,NrA(FN;o+tٲu겮U9Gao>Uԟ +Nsۺw*^IMCs] \1F#yBuky8w;$0G +S-P +/y#ls>O,?ixN-<77x)=ҫ +֞Oڳm??[bң,]R0f_6e}˯#zWsȤl8:}_ ?mԇ#W-Dְ|ϜAxrˣ0LOGNendstream endobj 4055 0 obj << /Type /Page @@ -12213,22 +12149,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4065 0 obj << -/Length 3051 +/Length 2988 /Filter /FlateDecode >> stream -xڥYs_3!VkF8$ @@+ݽ(n'ݽc8 _8?I$'U0YWR̔d6s3 ?~'_o_}a:K,M3͇iVQ}~wW7NaCWLV$wWƁd{eOLߎDV;og~ŧс(Mn&8Ŀʾn7`~;LlrOgIxm?5LrޕjY2˾7G,u]-b( \NwoX\vgvZSW<`yA~ՏF4(58&sE4EB?"'"<
SnO+UQ2^])AhSE|vfJ:Qh߂iՕ7(IMIԏRwט90GЎH̬ZgI<wO#R=ԟф3 -|хF -rXhV|{M'8T(5$PiUbZחfz<U(& -ɠ`N0YJmF_-T@dMAMo]E.Do\=`fg\?FWPA!͇iF -*$bӠy0S4! -zFjeX7ŊUP4E9G -=#mϺ)YV+h7F$?JPdu}ʡ+/e/xp_e{j-QaJ(ģbk/mf5Ima^(DrGإy%("wTr낧>a)Ÿ`QKl,vBm¹._*2[ -Y&4x4g; 8uk6;4qpܝXB}|\GH#K蛾mo8"@;{-+:rm.;<A];B"zm$@UY7n0<t+UʌA;_jb=F'PsCk,T͌6W.wO|]mپmVnX̓nE5ߒJR}$t؍PI
60e*6 $=(KpzmndKwO:L;jQFP-\%T݆m -ehp~c
(Kz]ZƗ%9+Η\U&a5MUW#9;Lbz=9 R@7m'q!w~&jE AUXEBbV}p%P>5Ýjx9>#%AJks -V$
#@ -*Vj[^r]";+>QMXT3|dsnӹj -l??3endstream +xڭYs_3!OhJcٍ3@"
w{PNьpw{'4v0$܍Cܜyay+7\oh{ne;&->;op{tY{uu-7ә +37IZvl8u>dF +Xq&:$He9Q-xAk +D͝LXI %0.y\ 쉅$yAE@{L:keġAF<Vz@ZLr潨|f:(BP>il14!F_-aI8T[`U/&1lQb-{ϱ
_Qy*r+ +fկ^
m]Q"<N_J";@2b"4āG)Qo.DfKP_V2WްHЖjgL m2/9D6;7=o!A2_'H*?6^ug-)VB6R^/{'t]
y*tٺ\'koҋ ",LԦȝQ2->mis+Sf&_E8\
3@M1>sUwRoG 9`cVmK_ÔE(K}Cع'#;\~]-99"*`A.PAVpsqQ+|o.!U$rp"B> +e""QFԋ|xl'hvEZ:Ψj~)$Fej$:YZߗr%DA"éb]> M?8W]+2njh V$e4>>*z/l``MC]ԬUdkV[Sqk\I"_)s@UO7xy-e]YT|8V2`!ejćɳVN[ښ]!BotoRf+Cɭ_LVqv$;.d]̡M⡙-PVj0I3 +B<~|S5 Qr.5QCsŁttV_|2_.n<,jI4Vh82Xp8W65CFmZZə2ho+Uvaf- >B9J8_S v~6[-kkm5PÁVˠhgo/seJǶ!7Ue#l83!9m'C-6(Zqe-T)3RWHeH(ԭ4:ڀi@A> +e jf4f|kSvmC)3*:"oV/T^O?ܲOh.rn;{ )eFv(qobH/5nGTg##Ef[d@e6p~U<PukEiE1Ήɍa75wDZ_2U0˾SJQj6jMꅅ@0inU*E6YhU.nF0c{ꪠ*Ƣ].>6XԆOp^HABn\6"bS
}ѫQkn%L4#Pifؓ@9ӉKw=;gUR%fzRTĭ>L1U)eV({ endobj 4064 0 obj << /Type /Page @@ -12258,25 +12190,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4072 0 obj << -/Length 4115 -/Filter /FlateDecode ->> -stream -xڥ[o6p2Hy.$~w]ɕqw^( C3yOf4?VjwA˷'PɹCsqsDƎ~'7럽W߽pٹRʋ4ͼB;~uvzXKϢ{ٯ7ߟSp&*_5LWyvtwcZɿXܦOzcq0Uq':RhMRm
VX(خ}S ٚ]_=wԱsyKiJW;LOUnWa]+Wy絛CSJz{+nҥoz.ط溂Iͮd^sۺA^\7=W?Pmc9\Vc؊ -)p-MƼkjZl09\< QHCX_$+<;l@' /As[Nz`]pPS聘h
[m3yDFM*J^<P~Ҙ{",pzMDqujzômRGe[>2"NS7d;!Q2#BҀ%13T`ɫh5ZmksEwLKtd@қt[$2R^tأ٘!T3z[*U
et`tHc<zj -#|o's
źkn~Of7t@ϒzg#1́!DgA*E?̜Ii#=ݰ\{XJ*o[(<-8e%m7 -ޣ:ulEGl1(FXgk;+^_hh,+;g
O
`3#Tw,u([3@/b9]%ف/?tj3yӐ!e-+>[wrIԌ`7~͡ -4L !;qGs*, ,6qB~VzJ|Dv&?%YsFRc5R -i{<\#>0r7q"T2"(R<@L 8}g25'. gg :"?BVs܌8X~|=(;`>Hn/&P戭>o`LaŻ%%cE
iVV Ofab!
57e_<8#̏C|gN(;9t]n -QV8\:a7I%d
Gs>{Nc7в\fj?I9/O\
Bj-nώs_cIXՖi2G,4>2<"ܠd x8Mcxc4QSH0jIpb
PJ2$rª0(h$KqL.bV\i8rV(Xw<a6O֍dgC<#a<涡Y<r/P-aƑOǛ_ROśs>M7m~#&y?VCl0x&0Tr!P2p5ʞDs}Vbn šT!p$y_#J}f@@t:.B1v:r3pc&EM# -E(6"E*f96-H4hbH48X? -5ay<Vdk<G1\3jFz_[_0M8N(dqNٲO#wִSp/"I쭸VBTӥ;M$ $|p EBg}d7V EyIRw -teUE8lj]|6;0'738j^͘40q[ﴌC1VWrD:ھEʯrǗԇpU5(]]L?юfk.W[S$5D|ђaGE -u|($QM"_4K)}{߬"$YIɷA-!#(ZiX^<M$?0Y7<فZGg/KmI$P -pfs -"R%'Vv+3)Of)CgUkL.(СU6y|.-,3km5+ -AR]Ϭ̽Co\JV,3|)3 &Va_~' t zAL/< ogƈ? c([@~0Oa䊁^Q%7P҇a0a8yCr;@ - !6 ꜊p(7 +/Length 3899 +/Filter /FlateDecode +>> +stream +xZYo~ׯ B+GJ +Љã$IC߹8>էGUo0H5ܑrUx(`JxnG({e큊B7R\p6^3:RA BMSeG3`%κjy1Pі벥~Pvo]9ɑrm-uq;v@6<t25ccU#?];k%*#+)S}%_`!rF
~7\3IlJ8umEc¸nz~xl_VGze3lhZiqdO>ʱ^IUxX9)bNA_<_b6+Bf]pP([m3yā-:Uj##|YsK>A",i] q;Ξ曋LT,ylyG8Ҍ$:ω&a40KjNJ۔e*X8h*e>;&ŋ<{ u+V9pʋLD'=f:-wZPj/鴽`/RS߁лU97F|;1e y=א +UaN-DMm +X>";LNW!l`N\/X z4k? +%c&D;%kmٟkUdDXH$}!g)? sNK&IIGs0IC'| +ny=H@Ƭ3jH/0a0lH$@i3[^E|(ԡbK
OU&ÐD%H\G>sNb7в&q$`cQI+W@Ԗ9ӯ$IZjUߴχM^W8k;÷x~Ƣ 5'cƱWN16қ8@p2c (\1(z|ﮕ
64l(PCt+b,H [PV'G#Y!wΡM>=Y*\9>wiGE~ʷPˏ7Uz~thzͱA!,%:>VC۬1{ *L$H{rld54"H2fa2FDh`n)@( +n+ۗE+``b + +Pv)[Q +(ѲxzwLv5sġpֵ0,q技"`*!R[nqtk6J`4u,.W3&(LA +~1`Q+k n
HJaT~S 24|$\UpzcIȉq@Ʀ).4QYY%OB7 Ԭb8J|)smQVͯp9gsfz>SXdFĔ'X0t2jK'XiY."6?|8pNv2Xx1եXKmEr' +J
kf& _sՇ-mz&a{{sz>˧`gA[m);B PX28/7c}w93 +AzăHaP{?Ϭ$"Vc!)IqO9V8n8?:: sVG3_ogR'R;!m&HrBby1'uL+Vb,VEmny |0<m1R߹)@\l0
7+}a?:2>Sbt`]'qFW=kA~yÎ)UdB2N3.J8b>EY-;8h'!@-ZR>UgJ3Xt"R"KfSZ{|
Hs\PNEE.`#rkaC]P
Ċ}+7OZ7GrV
罫v +/^i,0{lB*a0Pl{Z2f@`iiil{|H{`nxkNoXLR셰 +Ak1Ʉ}\#A\
Ѻrp\?]J48W<.FCϫ|l7߰զY endobj 4071 0 obj << /Type /Page @@ -12320,26 +12251,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4084 0 obj << -/Length 3362 +/Length 3300 /Filter /FlateDecode >> stream -xڥZsq1aKtRebٍt|8 -cN<bb]ͻ+^8-_/WClÏ6?\,Lqo"fpl?Mvl7M 0_]]{؋7;LS|Ev$m?.W^Z*[z {7< -n]AvI3ojq-R%vRϝi]_r.ɪ=meZR5wicceg=,Vr +o2%ɿ]'W{GQd<iVobeMRǶyeG*!|Ӷsg<G7DøВ\D">ӳ>/RU*pQN"k˦Vqԭ^äMӘPy'T&sB=6{a8\֚VV.#OӂN - -:&!.:!̙5O?,syS&zG:݃}|84
2C-MC:M -W&dxv|9tEMǷ@'o
]g=TUѢ9p^ -ѶYȶ`K -mQ#=|zA#4)Bd8|dN`>PSA`:;MFU*Nz%f5cz\4!C| hҧ~p yNl<80b|CBdKNol@d]U_ -4s^Z,g wKđ9V9lIOBokp->Rz=샣Wxచ:1;hSι=X4i5ogD/!ctXtm\\Tx8MY,K^ G˚can"I\z0~t=wEo -mobc&Z~yiJAja,<,}8#߱pe("&&wGI.P-(cp>d9Qj7Vtq$B`bĈO
qգqzAUɺw hu>fGSk<Ďn_q⁏E'nМMّ.ɛƦm!o+e"BJ5H3mIYsFmdy@<w,XT_]Fdct^%[ -6(&1)F-| -hzԊ !kJY#p~@;ΐCT/4za\! hƫmᗞocyP "PQ{tX%Ϲ:W9>x( ];Mh)@⬌Nb -KĂiO3>nںacUi:>Ap gU-͇;J6a.~4B7}P-@. -pq|e
}^ٖ}i/4h+:t<f4U9.'8ʊyI3C#[^-<$_KI~}V
+rM^Ӫos_hZNM8:Ue1\ CnUe}~wJ*x[-ݬgeХsV>#sYTbTXOYضi<)E_52?o߾wy.a?L_h%v -, -ns:յ endstream +xڭZY~_A+N-!܇SNJuY+˔+ea +M1:`c'ψ^Cƞ:ec;|Ji@RU5~O7l^?Ez=f]J}/k}Kl7F1bۋ}ډ
҃ȄIv;C[?
ծVL~ܧ)gGȳoA2ٵS#]\%8;f!Qy1@Z x{m `ƅ.;/ک2ֵQglrb5OHg#Fc,3пg@Y7k]{o9F7{uO9ϝ0yvr|>OOd;n2G8.~^Mdb(S!D Oee0%՞U磩Q~7OpXDA?(KG?xÒ- qsF0u=Q%hzrCt=h舌Nd[2td_+?=pfShAW;݈Op5lZ%K\5L݉.poX\pxFp?Aimɇ\왤`w1
^+}R- + <}C( +HS5M~&L K! +9 +^ٲ>?
qȆ({vbͻ1f.جK]-! c^QuF(N\v 4~te0XpM0$:rX<
RhdAOҲp`(c4K +ɯ~,,SH"`E ,oJ+,"hPܭi[)9ȀŞcE;Yg@7Ѫ!)kU^hVtN1XF]9au++.ns΅pJ=G̜5Cg0` endobj 4083 0 obj << /Type /Page @@ -12380,23 +12302,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4092 0 obj << -/Length 2060 +/Length 1982 /Filter /FlateDecode >> stream -xڥَF]_!$,G7Nvc'~H)k -IYߧb0`wUuuu%?O<N"W|Sͼ0B?#5=7j;I=W|Wo],0tXq<_O1b;zկ qw HH?Q?g3Ǚi2?s4W3CWPyqjΧW=7y^6Mbyϋ.fcʮ0 r~4$U -II*
+֞{9@Բ[4P4Z6fzN+Õv6Mu8uwr!{&_x{ף.K?tSQ$\UQEQt -J
XI*:Y6BZ\ӀՐ!k[J)֭ܩmj -t)cBE&U)7XCF3YPa46WY;(/ -m -)krR8H* -$)\% KR>dc[Exns}P&4OId}@#xz -A/XrA;RL&w#iܦBN
;l_}60pyʤOk 3 -
>P#m%$0,4ke]JXĐ3u(БC -^T.$F/4Qb&%FpgQ0~kLO*4ӡ#u8f=q3=tB(j3BW3xl*c-&' -Y%Ir#gYmۅ@VȀ89'+a3ЩUlupn5ѱg9HhcG%QïI!;Nad@"=÷9_QQ3tt)D#PcqْJNg*#'jly4L{#hpfYQ'!cݕgc>9D/(=>+K2x}۔I"҇|6E)݄jwc~M#i#wAC
64⒬b7 ->ܕMU}Ϭ:GEMitQ0'[ZHendstream +xڵَ6_aVbRM6m7m4 IhK^ꈳ߹(^{-@r8c><Ӯ,ruW/#_0rHֳH}ϝ{bM(7o'0Nq<s_O|珫W~>^-pv̜O>-^^,M{7N#
btj:ݎ r&f^O<T)Ӗ'MM09 kBgWX~լg$=ߝk=dDT a=gIA*r +dQʺQ]!fRjzN-vVUTin<`TK^HqooZ|>pOWECESY +i)#p:
a +<Nnր#.:^:I0;=O`&Ix:ۊ3ݰ2\{:5msZՑzF;tf3''-C&يMˋLx)M$\i3i"zFVkK}$OC5r"rߴlNd{-y{.r^}!^ + +xIe Z!CiZ#4_jAmI$CRHk4'dTc-߾`YY:c5h!AC1xP+)wC:1TE9H:hcOuDbJ^ v{ʎci0kam0Xy[+AY/}iJ&_?5I +l*'ޕr1WpiK'^x}8X#l +K4%qdۜ&9)vcON:Bճ6tp(\Y9>endstream endobj 4091 0 obj << /Type /Page @@ -12431,19 +12348,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4099 0 obj << -/Length 3322 +/Length 3226 /Filter /FlateDecode >> stream -xڥZK6ϯ0rY5[f4fv-K"EroZY$z|Ur /?P&ۧ~Mqzl0wPĉ8ΌlFeQi(Tm7a*6iImy%IyzySi}B;A[ -fn'Ls[2I{2&4#>!8u-2M7E
NF -'Q^Ŏt:y8>g h2Ǒ2[jmr8TO-nhНhMӇ6QӾpGaQXINYkvZx'=lJR1HyvŨǚCN=ުU(7t@|R8|κ-ԕOuH -;G-ӳJBd|dZ'L൮8*߃$8LLo|@& -q,YY{J~]y21@ѹM8w&Z\( x>hQ(\`cwu\Sȏ-h=~_w
L)@[ lTELƑ}$6ƞ:ꏩ&\{]ʓeQ('
dQ(A͡ڳI -Qv&YN`jМ+BstD>~F3c+\D<C.FlxLρ -n:.^nsw LW@nah6tB xRnv]xXLA}Si珸+oOd87A~|!Tna}12!!{lL:47V1͏D}6s2p
q˓H*',QC8$e.qX/I@FwB</eu+,"}# %nnycX50p)/DgwP9P --sZ5TenKO+d3_g]3EōjGNl/QTcUMl.mEb-=1BI[WpBB먎&o7-章x3"C4eՓQao;T
iD{ST'Sdo
@?&Ikm)zmKUˁy -Mlv[
02TMC&n1 +xZK6WrY5%RVn3:q +iqY_; +_ +_oat&&|kqTL"҃<M4%v¸U0>SvXӶ~FcdуyW͜@Ȫ5ьBG",CfTxxuWYЎqNG' zdb<tE8~'ǂӺz8ovsDoAǜ%J]A{`BEp7<ϯ\umO_o(M8.6aQlXu[ڭ`s>j&L7NM|wP'ҝbt>tTfj`mKu^8\S(kT{w +X)$ZgAgVhW̒iZnCe]qiDi(,ŀ$m<p:caJ,ίz$3w +>ȼDMxJ%%,W3b$F|_ +ӓ2ޥHAp`-!Xa +i*1k#i$gd
#5TZ8E"3p_'Gqn=.1bgPvM@
490kWacd.f`8FwSv7rf<SN<%,$E +t +0,ڦQ/e!*_ρJԉ*~C&ũFC|Ϸ6c\&Qs(bsu<bM@+91e ~s`d>Ðt烑곗~|^)+nE|䶿,'HԿK*,lF6=(Jkԫo+g(Zf?=LVAdx`?iZ|%*LSK3z>d\nU7Aɂykv<?y?\ +l1jíK8t)P$kDojJ9vLv} "oL:PT +emɳ~+yjߵc%Fk+rl +Miݬ<uٟB`FyxOߡ +ʗQvk#endstream endobj 4098 0 obj << /Type /Page @@ -12486,20 +12408,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4106 0 obj << -/Length 3558 -/Filter /FlateDecode ->> -stream -xڥْ۸}Bo<4Ih˩DiH-Iy<}%JvRF7<U̲<Ζ`_q- ˟x~)?)b7~_+ԟ_gYG柿~nw~~zͧ_Q}??_[XrC?~#_ ځlw'Ob%۫Y\<x(*< WaJ?3ˠeP~3=*\2z*$OFG~|>tԈfm\/7<x6{hleA`a+xiԞjhpȀf_xb^GJJes~p#-4CS%pm -o-Н!*Q xr:82x¡ `Ͼ"Ҵ~**|!ۓQ\R9"R,mE<U+\PԂ35֛3ϧEۖldcM<jMm䲞^N -|Zt۳om隑ɓ3Oa+P㎯-spaAbɘ2,%*RkdN$ -B4=gv L|e6^"UPh'T`|ǭ!hFSPbu U@b|ɏ(:a-c1'FHA##,vKʸAc8<Pax0YC檪T`U9IQ8ɽ@ljC=Һ>FH
e[$ -Xq@"~}ٙmCa.M
waQb*lr04i=A|Q}!'*k-WL)ʼn`BQ
!Hv,'ݴ+"4{y2wܒ01#J`MܲmHAms^FEeh9rq$^٩F=c
fx@h;|Hk/((W%?&4+G}Znx$>e#8Ι:OU%'lPlޖ;n(ZIğU$6FV𲇝SS" UE#ݼEY4jjfC:v
E2+ZsXc࿎ gÄоB[u#KcHt=8
"UxcLY#ѥaɾm[q>@ػ'6ߖۃM -/[EʸH -c붷ɧFA1q@c)enک̊@E"&u;2vjOt >k5O@ auk:a8#LDmnƟ$H*fI@lM%U}ÈiRT
*u2nC3pE3$PrK`2}5f##oi -*IX"ba#CFL8|yzxefFeNĔmiq!$2L59jafdhb"4CiӈX -dQ-ͽF>Bj[Qnibgӗ*\2o.Nm0bUܿuc@
<k9HJ&@YQ ~x|S][9qEa:DD~?pAa >p$m>|9Cd~MY@S\O4G16ELZV;; -by/z +/Length 3469 +/Filter /FlateDecode +>> +stream +xZK-`
зd'JK} YP鯻ص\\<`gCϟeY%nʛhWbxCoVWHKo9[meyO/0twHys=2?~$wos~zy:io_}^DnX_~fbW.#=_.g(8 +gOEƢ̚" +7HznES8~↴s?~|:(bf<A&1r`SoдOZ]-C
eC>Rc_N`^flS+jѰ/Xx^1iyj,̕dp]n#Zǽ,yD۵By:u|EhevJCKe]"g'̔BOG*k}9
$8ڎ6d<;%.H5f|{o K-q@Ď;\*|IȫVvLndc=V7֕Z%s;VTWzҕ&IJ~1>1b56w2S +]<$,n~[Ah7ϔI$89_3Z,{֥VfzkɴN9D"nI)nr
YyMnec^ݰ7w` Ijs#v
+Cy%D*Cњ"W!,}7xxao9i
;h
(MK|s4|JaaV$ºꃬ2XP 㞅@Lk7-.aˎwf>6d'&pV +$5SM2:aߢHec$FR2rV$͔;N%gIxiԾ}ӳDEwo䈌$M2r$IHyHSՙUd +S
YB]6"#=uu +2*BDCb &B +MJX gH٦aLBC~k\̙l +z,SSB)S#Y;×k^*bo SCNT&LYkohyRH4梨-
QbFP*W6bցx&A +^(\4Ĝ2:`j3O?$Л$CJ2h*{4cH})$5:E-slEGg +qKCR,c%f_'X^kaTcFTl^c5}Ap4ϓ.hDJ_Nhk3r=xg)WiI!L٤ +}Bm+Vȗ٨cTgydݠ`{ֵbnfCZ$o@R%cZtsN>sno\A[F-#m>,.sY"?d&r1b(-$NPFo&hSuˊ$HKD"OmW`N}#3$rTl0s4T
ΩB#YØ4/iK +Jr`#vSX:Z占ٌ"p+Ba +f<M{JO Q?ǤpxBU.K&+UV!Xm
w}Ѝl5If?_Mdϓ( ̿PqtΧt?|Yendstream endobj 4105 0 obj << /Type /Page @@ -12528,30 +12455,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4112 0 obj << -/Length 3567 -/Filter /FlateDecode ->> -stream -xڥn_! /4lAMfq -&d-Kٔ(oGuwUuݭp_?P"S?Qb -[U(KY:0JEEP,Vv""]6_<rTJy̲ܻro|OC2>ݧ_3ʢ *|5Xl -<ga0UO2(tFf -?ɓyz+y^uo%^_
p#A
%6/ -=xk_y@uF[Zi#U]^ -ǡ¦Wfh0'mz&`MGڗ -l-+쭌^g[]pGk=-Ȱj*>145_Ҭ(yЉE:KE5#_vX]K^w6@rglX`\Axl
s"0!2ظŕXf v-$jQrgN - -xN31??0au;k-gƁ8fcB)@~DQU=>w߫5t7p)+/\MJflf-ґ<GnϤ8A.,]HGwc~asXEjܚ-xtCFDbQ -UQj-yH
8hKzyɹȓ#|nGT=v~50Y:A@)e!"C*KO$ -3>X֏I&+{aIVsKtc-={'*=t#`/ՃTX;wm];):Nu
ٟ`@30S -/ 3S5Hfɑk#_J\Ɨ^G7lGs]AMrʷԦ -0FA45'a+7 I -"|%{T
5 -b[Y=|5&47AC -e(d X1r -*1ra[+ -1[dV Ck$Fs?&#ewc0NyN9ǯf_ -db87.:ɫ9תv9[j,*>UߣzyI
bx
Fȏ{#{R +/Length 3491 +/Filter /FlateDecode +>> +stream +xڥko~Gr,\ǍU@kPBRq;]p0`.wgggfMEI[la_ EzqKW닟~Å﹙-֏|v[\)]$u.A\w<w.-WsSnA|.x +0Vx_sU.`~-a(T^]_bpf8\A i8Ǯ=+N䔉
#x1h' _L9QX;|أ(dWTte_z7jsTnd[;'jyOi2Yz#ӍLl`uB?LYBdN}I3.
83uV%6uY +tlv?|o + gf }XsgRu;J;zs\GsOrXi6Rf@?X1s]~yWx12ҲIo@VbV`)WʪRi.IVP4pvqEl f&֧)y;]sWM*-{b-씞fkɅI4(H;[,ˈ4n+SKTOT%cIEblG.ۂУ +eORi|}hI7ŕC+nH0d88-L- 5uMK@9!mSTP\m@$m}\{ +u0+j~XZNjlO?Bn$77;/̎ħT{)ꡅcsm(tnX҄=7KaPb6 {ܹ-#̶Ȣ2p9S~8_R){I~x02Je5. +@QQsɆ`C`sG38FYPFn/Xa +6#_vi,Y.q˙wͷޮ}F]UpwDZ⠓+M$5CPL%r8RjL8T(*2{S %A-K8Nqi2VrC`bˋd)J{ +5x("q|nO,~N+x #{AP͏+X,a +GY?h@&I + $sJA9~Se㕽bi$-sdº[/Q\j! +`9ݔ)rlg{.D7-u72j-u
8hzz{Iɓ\GvZL<Pז[JueUAP#PDUJ( "8v"$VCQʴQX|j~\8y!Ϟ6"DZn/
+n踼N7!}<UHd +xRaFPkr}7RJ
Vj.>a漅@tPq>MERjF95p
zy̛HO/}:0[Ssz<Id^B*M1*jt +zC`* +D^!%/x.xW"5RkpNKb7
_$_F}@A?qU$(nzɑ\}]
I:*Kxp:*G,;oTixOQ0<)kI։ui2>ԐHc%q.GYEE$f|n$?I4xj~LzT>|(0 QiXz1AschK9PmG}52;[}?ǯCp[mJ'Nsor8R2i endobj 4111 0 obj << /Type /Page @@ -12594,28 +12516,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4121 0 obj << -/Length 3439 -/Filter /FlateDecode ->> -stream -xڵZmb|tuHE}6mR ɒOw7RZ(b<G^_x~4KXEp^"q%"Ww?'8O._w?ήR^Ϯ4ngQG~z{gQ}fͿx;8 -J2.~-\_ʳh~+?J닧۹xL_[S{UǙ:|;WatƱv@X-6t
0)y5 -ή,K,jiWav:KG;hr_u+]/o*x^xO;K4?*DK崳k<a0FCAٿkY,߄)ODD>1;kTN#`LPv' -'rFle_i摣swJb+q-֖}ҕ -c?YuV=A=uēt -*f:c5u6Л3<=z\ -#aSIADKqTL'Oeq2<@XS&4. -.;|y -i(]ٽaSIkAMd[2뚟 -9@e8 -T$O4-'1>o>cPLt#Q);@^s)HBYmxF$EP -r}䷟;q{^N ;O(G
B3H= TKa.@)Ju+C9͐8em>˔ײ/7DaiUx(n -`
;1lj
&CK
fb^Js+Y\W+ -E(?Sr?04N3 -7qzs֩SS}!cU²?J[&t4L}^A:7EmQ9z2::]2SeH|ˊGYvהA1Eʸ#fmFj¿۟6d -"x{ȼEbd@ ")u-CWj,nv`r;e#NR`kQQUp)}$<E;ƖZY}z#SH'~Zn])W8|N{Ivщ>D~gɊP:7H(ߛq92Rk?!>[לr%",3mymRSvf&_L*.|\(E -@#Ǹ0k!MȊ?L5zTײ`~PsEզV>',Gt2B_IXguTrn4e ^PL!>':n33aϙȳғ yf"w|lSzvp- -[ļ>"`P;$fc=GSFql&=-jg>,oZ4kÙLRɧ<svj7Edx0?%:9qv7X[:u(bqݛxmrz[suXȜNk?H2w-?RžOutVQ_>)_iUy2M"'+8~&F\LLUFFgbI*AWPS!.3wQ jpͤ,Lɷ'lb_#ӟٓЙg'N"RH(''6vendstream +/Length 3300 +/Filter /FlateDecode +>> +stream +xZYoF~5,vcld$DKPM;fu|Up]$"N";p,v癫#E`;QȬٛo`:vꤋՃYm]ܭ~<}ߊy'KpKY-HWnW/@={-}Aڟ~Yli{ߞ9&Gj;Yv/^[3'<bj$AT79꺡v|V]ss;J<'lxdVbHEGYDj.wM+z +7.cTʧvo͇aĜevY8&#$S)M%A*+w=3ؑ鐿LzvدXt{wc$A^$=7>D_t1dgnv<{MZ ++s
&wlI{z`kT,>dEmzE%ڬksC+qS+ÔM]ɳ=[7ZE]
VPdSAJ,3lwBW㙝]m&늺-oOKgFIl!bMf3vq8LX]uevT4fv|p8 +) 7r,G'i@O&->kipQyOP +S>FTN7( jJ>e6\ARlHVb+6렲␒+tlH)#rde[5FQtE>B=m +c P+uR. +>Ǐ`lr.'iO
AsGBEp7amܐӆӆ!*'Tz(0XU ?Waڮ $B%?rtQj0.uw7omƠ&J +WJ]dS]]ӡop Ն +beɳondjhok+'mFGQW48^<śpow۵B}aђ!UQ94v;а.5FߣLK5KԾ&+%Cɇۤ3g|NjA~&Z'T:H؈ӻK18u*5Ә]E%o!U-Qvi@0N&<}hz/y[g%ˌkr5mG +I<{k|I#:
v[ZwyGNŋN R-鈷K|N/w(C]
zN٨+HM<ck^\ʰ׳$dyZg_`Nq!er<SMT=ܥ84R]Sl +1ZVFfqVC[IR_εfvxAdDZ~r;S$$pAi~ +F?9HuT=1&Ou5CXv\7Gq߮|>;˷:xHY<_uc
Tfi_&sJZ +ewǵT7:),5_fߥ*Qy>y;ui?endstream endobj 4120 0 obj << /Type /Page @@ -12650,29 +12567,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4128 0 obj << -/Length 3338 -/Filter /FlateDecode ->> -stream -xڥZoFB}D,Kr -I[jC( JRy풔)@ <~;ZO-t0iZ-E.Pd5y$ZςlsdgbͻfJk%reL꽻\woxʻ^>}\ f~Zڱ3bXiqbp:KO|e"GZۋx.Z9cq_ -*(& - -8Wp+a3ioxĶ/AxJ{:+"KʌDnjMm#!sZr[+kGi4W* HC
7-]$Xg(pl3i"DH[tg1ׁckP('Ǣw;'Mh ;vuE֑רϞW
Om+SLh/t2Q7z5-Gijpo1\giok͙Ϟɜuzol]T>;};5-lA,6XT70X3A0Qb -Ifmfa y2oe<=[-H(2s-S@,%@;QczYS9A1X4
K7YҤD̏
bcQTg)>lUB_poďة*#]bm,5@wUvb"" -nEtoΆ֎$qqq#S -ɭ/7qxΫ65&\<-%`xyKk;r,y?ҞŁpiޏ=OL@b Q#w0nPH'tBǁyfghxr*t3)48~`|Vltms{$TAlAoy6 Co^s|sN@ -jM|*ѼsREG1pƎoOƊW#Om;mUq -4ۧhq=wF+1}fLBSCLG
ָT90lyRq2,v}ʾ)Q֬Zwet3ʝ3BcC%]pWZB7} ʘ WRɏA2C"kr8rCBaR?i4#mVL[&8l@ң]flL 8G?lL/l%=os :tPAtsjھn|3MȷEP(D,S$hCun+7ܥhZ)ҧ[}]^q߅Vܫѽ3L)#]ߓ"J8$}>D2 -cFf#2Maj]N -oEBrft/yt#x1hDsic -b&m^O(rj0(\, -CzZ>
@!h1roY Lc\ro,Xyr+vޒd1X҈=]?BJƕ1lW`Fb;B-l%nsĪB1,ZOضF!k6s`Be\3~5h &`B -OwͤbQKл^I\fP<fPI+ͥ_ҸB]mDCӜE -X`U\i)܁7Xg
OAɼ #6m=MҤRMnK -m\o1I -w8ꥄiK3rzS4;7fB~##"l83I"|_a4yh4MʀR`&_Ό@=- c}f2h
;٘gHS?N>c38-C~tbh%(4+1e%)^rs -endstream +/Length 3256 +/Filter /FlateDecode +>> +stream +xڵZoB@?.Ϣi]q*"͇D[ER!:;]2; (8cvwfv7CE +<;"Y~YyZ{\i潻\wÿnxʻ^>}\SmŇUGƳ`|gGhEuڏ#-?.<-xՌ( ˡiDMp6r5^ȴs5)kLdY|f͡onpWߪ1{SX +SHǹ_ FH{0$'JlԍgjM%-5X!XZPf&"f(e/j;Gf g +@I)m N&FO&^մ;M-"0-"Y~]uƹxXp4a>{$sY轱0(3;};5-lA,6s,L笙 (G^1$O63{EfOe<-^Þy3 _~E\c +V{!v T/kEK1wKʴOb,l@kO"4p.) +]Da.-#( +9JRC6K
w=cA^;;l5M/ұ
5Nm(`ԸeGhGUv'F':{\c@3q)oxsj;ry?ОőqGp,4~vk:bōtKkĬ!,L'̐К +"@,=Xx<sp#[R8P+0K2]Ǹ08\~PDd+ƶ9}G\WcCd$g +FrR06&Dzcz$:u%Dx;$X2[Wy +RxUmREG(F(ߞ,[
,F۲w"9yo9IknКLztB3 y2L
q9`Εc0M+ +FcS ֬Zwet3ʝ3p vtS)Gfc:0ʘ 93hܓ!ia@,.2hHPP{vfwf1T䡍{6Ulxqف
+T,mސO<pCF|W-qX}%H5,`ݞ":"t?j4:-*X?}8Mmضv6QS>~kwr-Ev&kޢ6L>0
fbh#>MP2'LuIG`$Sٛt}Ӛ9Zs7uiūXC{vRn.]SsɫVqZ+^>َ.|}FÓtȷt+ӽ.q҇k.R37.S#d2)r([Cy\@ix,{ O-N}alH*52$u?;z1Vӷ
.0f|}C/bl(59"05nzwʽ`;%νb"\ICv5_B81wh?b;6܃6f[j%^/Ebh==`n;.`}{ |Q%]wͤR'V%0UzKcWf?T;6cM-ɓZ8RXb쪢J/Ȼy0Iٹo +eld y<*tJiǹ[Y O,/p'17K=L}/5oϊD`h|
F"HEA&8~CV P:n]Vb?ş ,&r'lz!Bغlh5HRFU'UC J{d4\rp
k&
"+ɔ|;w:*&aɏz\Sn@m ;wֺ-ai[B^[:8.V`e~XpSCGn` 5N$i,%oHŞSk36 + +h+d"I} endobj 4127 0 obj << /Type /Page @@ -12713,14 +12626,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4136 0 obj << -/Length 988 +/Length 961 /Filter /FlateDecode >> stream -xڥVKs6WVpD ԑeMn:iٜKBwr'^pwo#~DT):*+)uH{# .ɑy"D봎N|f_78RIYV|g[
/?Ƃ-ʼn`WZ]_5d`i/.9?_h_\UtsE]G"W\nq}E<[+YqU:/2ɳLDRK~9IVlO$@{TmfsbѐR -9`>.u+Jaڀg5B"G퉒PD`=k_v#7eUY-IwEYa=aε=]Wbx8wC -Q#LNCcfYWy{j`3jP~,e`uY!([=R~EƥȢ9 RX`Plcava2Ѡ1 -Ly*;'*+yQS2JU&<?u%endstream +xڥVMs6WVpD +6fٰCи&\X5躾 +k23fpލ
{5! +cYma|7Fۺgu=̽m!>QH + jiJgHJ} +-G{pACVc('afiBs%4ԟ
VOImw$]ح-vK)>7Ty0`yfwX`4kִ'"$^yO VhH_
ЭuM物 eHV.Mv%Z&%}m9"<2 endobj 4135 0 obj << /Type /Page @@ -12743,25 +12658,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4141 0 obj << -/Length 3066 -/Filter /FlateDecode ->> -stream -xڅَ8=_ј'uP,:fh{fmm%dHr'en)*]oM~7Ûf+x -Jb?Q -kN#?P"XgUQp~77aqݤE'YvXej$=zzj:|^ѢiIzH -0&~DtDY}*:(GzRG$j.*}fz -K?z9F]Xx Z
-Sg@ G
lSBxٮ4y;˼;#p@)P3Ơd2zH[^֤,ԝ@˩(\#ر!K٩«~ ۭQq$><Sw8R$8F%)*6HwPp-˥Hx"NwO{< -lU}XAԮpꪞ3/VP<9*y#L_$)EcBp)UVsAԨ#2k8BD -dHM\(D@ -a{i6\C:^aUit./
(CB1r3/<f~Gt@Ms=M%hO -ǻZ.xh%! fKF ^<x$2H!NV}ܚίDO?}v,Ɋsjgd %ĒぇX-3.u[ -lj[(ƭz[yeY8fa郉Gy"h/筜4 U7æm'qZ5wH^_7`p$禟t/pjj?3T]h,UaΝP`Tma<A]p@'5rInXN\dx""ne{4@Ub3|KLÒ2&.y"(9[lH=e϶
#6#J -Xr8ìLѸkqaֶW=Z꪿i'E:@WA^Sk:[T}z(OhxQ3ˣ"%0S'k -:8}/r\AB5h_j֛_N} GU_2B~\(>?B6\o/*4(رsuh<wOHyQP$A@WH^Sk[T"ߣ#AހB1 QKN𫷏6" w@{Qpe+ 7t1YP ˚C(KEΆZxrB} P3T;Id6fѭe*^Q芺kr
Qs|\/\@Yޖ p0iӜgfRHOPZ<@ -Zڥ9?EZx|I. I]*gg8IPa5V9@1 -Lkk:Anva)-D7Ӈ|8OI#yJ`ĆrD^ic% W<<`ixO#O4Gpaֱ뢫8| -K/0"B! GYaP>E6{G9|7~q+PWG.:Wt4NRs!)Q&qa:/endstream +/Length 2887 +/Filter /FlateDecode +>> +stream +xKo<_|'H"m@E#)Z[2$9m7/R-tQ"9Cr8' +_x~Wiq^7 } +#?:]Qj{\O0{Zqݶ{SBY$>V{<$և/#!dDe## +9](m0)Cf@Oy5YCv(ཊV[Ζ%+d:^^Xu 80fCc +q?=hF +>Ňv4qtn3od 3l$Ě➇gQqMdiq1u#*_ZFv҄<fZ""hCq`夜eO9X\ lNrnJX-+x^!x5oI0nc#;
O"ς+=~ZT
މVٝkB|v~p@!:8zLBHH +y<T֝J:89I4+T%/1cH!i +LWUjg -=͒˲\c4>IϽNK%}&,| +Ϲn]AZ>[MEWq8vj\K<2r҇[$gi!io[*{(H\7c(XHy#䋱N֩"~{gk%kc8 +wkV8V\ 'MU.Z~Et
&~d+~bfuꌆқzOaTqV)G6>T3sO9R)v(͜iNt5&̬K0v5{gm1lGwzRkKY=~<KAv
"FfCb{#X.gvu*U?q~zT:]endstream endobj 4140 0 obj << /Type /Page @@ -12796,27 +12705,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4147 0 obj << -/Length 3915 -/Filter /FlateDecode ->> -stream -xڭZYs6~ׯʜ"[oV%y
3䄜@l -*R6e'9wΪjd)2R2uR#.vۼ/C-#;ݽ2Aث'/0%@N"G]nB,·W:/&2iPM5_5nh]ۇ%@wtޓÙQx[R'XIY5JZf -6ݖ$OHg
R7ޖ0wܵma%H/jeE,4+1_8|' OwO&+! -m. -O0>sS<ߺ0'y.f<)>R*E&dȼq}'2T -uCPsma|Wןh{źŹ/㎦.*wz2y~oN[Kдjks0,}e
p/({7K@T -Kܒ0h*~%(ŜdDnBXPo+6qYV*_+J4䨾8욻⛫s!A#_b^! -AJD -~sn!^y#_*}@8!XMrxtE -p-ad4<Cg -zrAA^搗 gӒ, -f-iw%)V!ͱ|k,hLz$W,COeYԖaެeC}wAƚR.~Éq|;R@Um':ְ֤LU MTxv,gF8:cLj: v<3r-t><Q^8ۼf@IZ ,B}E \Pbޜ@}})}JS45}e+ypwaL3^DTFI^Yڏtѧ}Bat:nӏmBC}5Trl;`Jvgַ)[&
iκ
Pk5,8fiXB$xH1I 'S֯$AD2&&'뽻s:ϻ7`6?6=Ԏq!xjDO}M5ZPxYմ{QpS~Wao
,2{{ ->IK*$}k~
{F`_)&ʒe+WflWi<,W{]J Pi2~`+thbk#M$?E:GIY6M(o#Ur|Yg%VvかsWrk
>pЋbz5^$ -Blld -v s;lNRŰ{āN/<=0$<$$ASX=K,Y5gS?$4|?Nz5Vz쬥b\()-
W*#K|K@3MMHݴ - HKBg(y}DX^yRnlJȰF\G1<G>ayܛMr럏mȯAF.CD_(%1%`5&T]^I]m.9ЙS^t$ֽ]!Z/VqQ/Fv;!88@Emkg2`[:
iEI
MQF?4O &I?[Vd33 06lZGtad",?
B&aBϵ& -~D@D|/+/{m
ъ֚7H2}9qi}V25J)7T:_F<~ǯ='AƍGeYlCMsL.^ZY]|*1+|.Kjw|uOaI:tOc#xXpY~xL: +/Length 3738 +/Filter /FlateDecode +>> +stream +xZYoF~ׯhh(yͶF2@jp=CNH%o]<hwl 죺]8.vdšxb?qwW(o;a]nNο؉,n6Drl~͛+^(.?,]| +ꯖ+z߾77VϿ:ı$^Cٱ$YOߓf<jfO+
l/Tqnr:M/UlUuUm2)5l6*ش\Lk$["io)׃ҫ[hH<u.ly!|}s<J6r`պ"N,-\˕Jh\jqjB8jk|nf[4L_rUx>ָNccЌ|uILhҒ6FIrU(82b_voV:t/y݇k&+Mk<M,J\y'̹ɹa9-R⩠o]sf&A)JFQL~ + WpϏiw,\"EQ$k@:M2TY/nQRj+ys\jD[Rq`e=NZkW0CF;#ULU=soO.QЙv^ CHWtyCtIͳ|9ύ +jEʝ8#AʩeDALAmZ˗=#;ݽ
g6<SOh_O
$N3c_aDEXi:w^L6e@92 +j$_5nh#]Ѵl=u:AIU(5qub@^]'5a0NT +UY$E@uq˴B/aq880BMщɘOŠ-Z5'I =^ID"hƎglHZ({\6ۗϸ҆w^$WV3/Mb&p%6$>qÁԍ%
wm@[X "1T+Tv<70wsǍƓ眃px`;)_# $9q/NXT]zZc}`
SQn/3tƤ-2e +O0;Jn:
onpc#7+1pc +V>2AW493P-U_T=_)8
!}JrmYw~. +9;R{\ +xWKWܣ_.eMoF9ڦZY?iST.P
n/^@;nKޖ0 T2Kf*nNO0P980AⲬTl@-mW$DⰫ.Dt`OCBdb-5O%|3n!ЂVC\ +EKڀbfL (cKBۍé!ut7o朆rc;fKެ {RwlF͢\35}ztV)'@JE +fԑ9]fGIRY
4&> J:
61h-av9@d,(mN&ԒN\Y[aYSZ,T$ +/@EGˌ#/&nc2q',XZbZM>8"8~`Z^+dʩxv0PFP鍉r\;VQ}HmXEaL/tek%?㠗txmqƴ 3)ub[.Q*AHj;͝î)V:@d*p+MkB't8I`+$O4{9v'UJ~:EVz+b|!-R<*HRgXQ %"wZ+0g*Lia)RGc B
}ǎ^AU2Z=J'>11mt>m*]^ڇb|&'(<Θb3BULŜ4MBj6wz:u~l斤w/tWVwu)J:γ˹n't\>+#@@r* +;c=ߐ%_s%p=u屉?Cof.f)>j|j7|ٝuD?{%vo÷/EeR}֥VA +&z#{FLRNҮѬmr6{%Ho +;Vs*6ĵ5NQaktp?y]u^`?mlZ*p2B1/H]#SV<O'̤i=yn;=WJT@H·LBՕɵU=X6_+Yߓ0ߜJpd f\+EMڞڪ$+1ǪgarL=xlh.2UV2B
Kfqe"$3'|JIr/n@Ȫ=1xm.{@0vBy"F_`EJnYY/l7+pn?}j:cFf4/1endstream endobj 4146 0 obj << /Type /Page @@ -12839,24 +12746,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4153 0 obj << -/Length 3486 -/Filter /FlateDecode ->> -stream -xڥks~fLoqٮ餙D@$"P@z<w{{{,j~4K8T,`gJ p`^\I -<gW7Oq̮_?p|Efޫs]</^_Bya^p_Y paa*g۳(8 -}svywעmf~
cJi?TzF -{Qn^nZ*ns1Jw<*vAW8w#}KƍLO70~˹ƻ -q2pjv]EmSWSS?N]pfKz06,qlW%|U(`\rYYclf=9Jdyׅ>yx1f}\`Ih|)j#ʷl
˥I
Í4aJ;t"fwWvtfە#<p̉5//Cv}Z&P@LQxDžn%@o898q>Nn;q
C&< - ?j(J!;#h/00d|xC\Khlec!1nmg&%]|M,uQsO`XC # -⤆ -O^W/yܐ+f_VC1XUx<7xyB0MVF$V0|\Q6&X^xGPd]%ӡ -]mʝbo6O\ܰx.|R6U7U~߉_Z1~<-lph}WijF=谟>5fsq#Yyw%K9=SǮy)6J֗IiB&_)O7V -(||ڷ5oj'Cߘkƅ;[@e$Z{sL}!]Aro]pxۘ^l`y
#!3'۪q&
hXLxau؋ -#_c/BΚţޠNNٺògb^? yI
;z1.B$ʢ\NpQp}3\<ysM-X6̉BHoMF -2*qO - -?(L?~Yh[e~|?i9P0!Wendstream +/Length 3269 +/Filter /FlateDecode +>> +stream +xڽr]_)8BdNDk*u:i +_|I +L{~ɋ DJ&א8 +[XVS9$p ltWϳ3C&Mf*
LQR>b.~v㎖҆qix_
xWy uz
]W!(fgV;d͒0"/So٭dD.e%W{!CӕNu
G-9N8G
`!X\@Fd]Zl`ּD_^f.G`8@v-H]n#<2 K<tQ2_MX==Ə|O0h@Uru8 +U8 ݺK*ySF.:/цDͺ"o#X68
R!V@ܬ.9ɠG&3bFMe̗$Z-1<|zvW\*;2[3f czIx, 6k[:nrv:Mk$-
J^E]["Q8DnwnFqY +/h/)4^ıiy@N9^;d̼U*++)4U88,9@S_JQ7$_g<7ƄO/ +pxLM\)pznW\T)jwYN&WEG#GX
]5k +KJ1-Vpo gBK +)~&BpJhq+)A^NArcHBzsHd6Ix^4EP,lY4Rs^ d!>lʍ2``*/J%ā8`ͤ1yl +b=J˱\mF6uSUx
~3\HYqPV+7hylbkd +cqז>dN2B +EsaxJga,e9/Ma@oiJ=eE97*Ic8] +KlBXNMbpG4KK:KW*IFJ[_ccorO>?)͔Xl +LB@>`N*Oc%m/ +ᗬS6Mt23Ur +2'X8Fql"ߢۿ
&wkI`VU8Ug2)@cqbՉj1_1[.Pʽ~id@hsx̙p"YM,q^˭D{R'=Z#P>Ɲ.x>Y,7gpRT)༨Tyo0`猼]>ױ* [=YǬ; +$=k\P߅Mdk$q}c40PyC1r#6 +:K]HΕr83LsBEI endobj 4152 0 obj << /Type /Page @@ -12925,28 +12836,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4166 0 obj << -/Length 3224 +/Length 3109 /Filter /FlateDecode >> stream -xڥko8{~dV$cn]\v{M=$ؖW(QpRp8Λ IF"X?.BX ʁmagAdoxqS|^͛˕RK*IRoлzWzs?-W:~~旋77=R>H"U.a-(h%ߛxN/xi-*,29~=G"
HF -EbXTcu{(<LUS]U]7,CgD,u}uG*R8C\zDFo ڒ(w~ -MFz%@) -yi%^RҲip|`9G#La;t<mE=lFFV!ȈM+jxx;[{<,Aҿ5LJt݃2\ĮN<P,E<|SYX9:U-zt:<z&E>\ksQhkGwJۜ?!kxPly\!PCPAvI=C{W}{ -D,{LqWe&%ڻ[ B<&E' - -q<ޣm!㍔UH[.)lkciT%Sb<c`PX[İYK6guC&UJ2XGM[sP2FY/"Tڟ -~S-ʆPM-iK[/G -qGn.msV;Ml%eQ~66h1=N+nz D~gf>2:8tc--Uh;GDSW~$,/U=20x
o;7ùx+#|kq^j2WЫ9D1|ilXNdI{,q8uG - -<ܔNb>{SL/'7c,R]#EA?}$we۲7sˆg)`eLO80`(pHQ%Ƃ[ff&%tm-Xc)#['OƄn*LIEG'wyKBrM.$Oq>+*ڔ,0Z=3*%ı
AR~)J,uL$80jW^ -R".Wt,ԢtR6Af,p$kpԊ=3 - %'͘>)gg(G)_4%\,5~,ª -3H7ww9,ڸIjT -4wدuW~QhP4%,(\ fmQ0- (+xѝEMVy
DgRH}C`:1hh
G \YA4-քBV{8lOj
< -f1ȬJAs\TL'SBȃvdseG9WgCYm p\}k0}eǎ,y;{k0v=%W{) KQ"(mL`bۧMTAY|Է{wU'm롨Kq -!crҠi?݄DvN2$~Ʈ""+}U[w_tՙz t6T{XÏ{^Z9yf}(3+A+4>L'4N0ڌsADk0sl播__:eG;cI=ڞc4{o*[%Uю73u<ZVh(w晪9,YFwxʨycOQ!WUy::'AX#kFUlT6Dp `Ol&2VjPhTlIX*I*~ʠ|CdnX毢 -р:ZftLZfX1)jٜ:R<~3SzýZc%3`PSJb"(%j~#5BF$'j$=U-meVa[g=17iS:EqÕ'+$/rpkCdV%mpbYq.>օh~e)e(~鋣~`K!n= ué(f˃ݐW>[Vz\%=*y?PcqdۇUr{y^S3Ⱥs geE_Qԍ£Xe`7Uٳ2 -㲠/iܷ<[D띴v(א p iqd-jxcvȾ(23tpD C`C% Y*ׁc)\R\+k5)V>lMq-1x8:aJڨ &endstream +xڵko6{~2f hlnѴ{~P,VcK$o6EZCəpf`_0Kl2Q0[n/ +F~ßi~|Yf7wrS|^ͫwEE^$I_| +/t]n-qy?+/|e +l&RFG[gM SYhpDI! +BWu\]s̱ <8~ +*94ABHL<ڲc)
6%ҧOsVkBf*cRa=iIA~Hy=ܦ)8=
PSu-X-Hf[nIF@]u|sUޯAI*Y$Ƣ/[Puf̙h|3cйg''L =f맂T =d.)Vq +Ջ,NgD^Vu0'5^y +fc8C?D]r6!'YVسZH2k +H=mZd tN5d^@v:VKre<ՙL[BRj&zZ)g`y}6q5f9ußo}6vo1~dyoN$skjʁ4̜'٥ws$B +R˸Xv4_ + KG$RZA4>,]ZB{rPNj҂un3B?nFd/q*엗C1XđK*H6X8R:ߖ,b.D#g#>zB·Ele(Cؑ(Ēb`X߯]lARU'6\4MTݮ\&0uRd9f6)Ɩyoxzs(<*(i%d
01$ZP0P +n?Y!Hx}ʴk*UTTvW09c'OWwS\ :;Pa@<>~xj5ƣ
)d悗 C}/gWA`%#Eٗ ppL`%e'T~ٹj:axiM,3/0
{w=2 +d6Ee]4Hhtb,"[س=镤A?P轡1/$%?VΧPOHa)RT+o3 :Hi|t:8} 4JZ8rVG93`&AzSf
8/H:ŚAiY*h{.B;c M 8TcqY='l{)q.xaJb+Dn`ƞ?eQpڤ:/; UCVgpUGD!|t($#slLFiiMX +cؑ!ֶ`09IYa)Ț@+s +20vOK1)_f+BJBC~eYIȺmrM,)=pJJFBU*)uGWce
vmG A1vGz\)=*49w/Xx:BF~W^\m\<P(OpFMU:ye&.\)h!$hӧ0*0Yd`qW̗R&+!7ݏTAS&eI-{.FRU?\w})v^HeI<;:Tq8<}VY0uendstream endobj 4165 0 obj << /Type /Page @@ -13007,24 +12915,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4178 0 obj << -/Length 3139 +/Length 2895 /Filter /FlateDecode >> stream -xr]_7)`fp*Zq{+$ !e}ܤXrAs4z>/<q=,8tUס^xbsI<$bzrr"wY_-}'_|>|dzRxg-v@3UIxI؟i\̋xO/9n-O$0%n腭Dծ!JW"2
uD"\r0:qr -m<LFzmK9y $-`Rm OKCı|?`ӡĉvv -GGNCI -,u@ M0&dr{^9(öʉVps4.]3<zEHY%#"$TdIdzيԩJSY'h8rǎѻdzL:oU| -8E|{ug&S]
vgZ\' V~&>7T6YGShP:5ܹtu<:iU1r#4=q -i5j.^_~/>7GqwOVcik킫>5/x>rz*G70S&g骭/|JPuਅo -@\#A$c'teY?Pn
߷1O0ǺFnx&5OKx GjxZ$&[w[B:
'5Zjːqm(x4LpE?8m5btp++L\!ANVʈ 2lhq@=&pP8)JnE[Aϔ#~rpACW=1Ƥ
Ոq -8QJ\KVS๑ jc0;=-eݧ:)5+YR9TO?#36KcMM<l'} -qlx5^Գ`5kO@zs~fzim-gǑ=_ G{jHؚ4E -/;7H$tx{6c=E$mr@L'3ယ>~AHI?G(7q -NsB#&BOys_Et764#n[Zyi6=#DcޥRmC&A2~͙a2h`2VDҊAoњ
JC%om,Yф^ThFi1iÉ샴(LMY#c[<Sdo1iw2Ke -dG3^A2 AuiՉ'ZJk2xLCOLжKlm-Ҵ? n -!8_6 - CXP_}<endstream +xr]_SKsڪ<ȢwNtdŕ$A1H( +O|g
; ,;v珌g"{KNJWOICZL7َ@9ELģEՐX²୨e87sB3{EbUcqƂ}_G[?_`0Yͨ]1)[HuiY1sK`)iV˺(įa
Y/P%Q솰TSghE=T|<@di\A'(QW{1N%J(A-<TcyzvD3TcѬ2A,?,ݛJQkp|zBYLL| .DmF(h*=\pT3_ߗ +T;c ǠJ1m:һƲmVE1ZYN]owtO"n)r3_6vIW>ۧ,r>CYrF7nR5nhW*[X]Q|lG9Φ[E0lx=HJߍѓ7PGCF '8Opl,,^$H:=_ l؋\M@$q[yoMHd2 +?#5c.X8qAЏx;PXx0m բ-xoZ$ܱ&wN5܄lR:^j4_("Rd/H<Q/9oY`
_ЁCs͓z =DkS> +`Gݚ"`=9>{0jH*+qSfbrwB^vZˤ4Ӌ ߸a8*nYS*x}eQ+fc :=JЉI/5t,Mq11W'+J
>@T4LNmJYLtLmjq +a+[9my87@zUAC< (dI{o_j +Ieu4xt^B&"i"~#E2bb_53~IYg;:9p,|!Ӯ1ݜt|NM9GendyCfxD]mcS}QZG<Rk̈́[Ҵ͟w
y
7Vݜnl>=#vP1>]aRAfE8mZcFE>IqTowrdlZ)ЄF+'%Þlp7WL%c@=|Iz"73ˤHLJv=e͌/s_zQxu<KV84/*ZCؾLC?vKOnwN6Z7-2m>$脭bۆCI763ǚB3y!YN/{Iτ-y/Ow=ok`}yt%,?9괲rLYendstream endobj 4177 0 obj << /Type /Page @@ -13091,30 +12992,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4190 0 obj << -/Length 3631 -/Filter /FlateDecode ->> -stream -xڥZ~x|? -v3z-|#))E^Hg.(A<~3Ko["Ic' -Er[-onÅ:-7fu,^<?/_p:eI.w=<Z{˷݇կ>, WwQ -yapo6 -R'Jz]I9q~wUZQ~a;jWk?]ܯ]ѥ P,DC˃i"/rl
+^'کeRVb-{]{(`nܙ-ˊvK3t܅[ZU|ܡ(~njP$#4<vE)ˑ`@+<TɞA1
][ iVW+H:52UV?fwװϖ `"6<o|%i@q;ǎV{R(#ہ;Kg>^5_[*)mkϫuG˦Ûm:5_U߿,hqmm4B8ghh]">Y|0UEٰZߴұ>ph^ƖM7ɾeू'mm>e+e%Nta'p$~>ofvFNi:u,,t˗3m3 --fNH4CsC!y!;=$'X|E[6Fi6Kj.6@jޠY'LJltYqg0gŎG1Lt⯀i*
֯_,*<6s}c'˼f+rLg<mk^8 -OctDd]@n$n]u=$#a?xk?m9 M41NrG9;2-2UQgjҀг{eZޢ:Yɸio,pKxdQ=2C=ű@/%LR^Q[jy3zגW"_M[3c'c[" - w'Z`j4 -}s"aR - D@a-l<͒$ƞv8^
Ms혰2j -སp[LN6?t9LH1 -/=^I+\c<MX\D3ZF/4NHKE$&ΉR;ey䱌)w$3Hڏ4EpFAu/" IsBF$y`p[JR4*mUTF~3OKjf(NZ|UPR -ECćQЮ[xx.K8Kh3+!;Q0FjGX);G+9^v2(F^P*$NeFE?3?K
&:hZ#vh᱿x`Y;LaFih:. tM )k^-Gc?Qiˌ1@؈IR'JQ -i4M,W)olزwZ&8-FjD@TT96oڸ7*V8t/qԗD$rH'R+D - -1E '*cMCW գyB+/ٰ@pK( -%Rq~w؝!0w=,ޒƶߓ2k)c+~; DxP!kzmXɜ'NX*g\D!Olsq֎R'c̀ Da>& k}=`sm/bKaBj+(w')4oFlDB$o,+l^iEQUK7p͓Z/ Y\u{%v!d$c+ˋ:zk?ኈ#b:b
S
_zgAk||͔V-ьLF - Jtϐuk(%,ȂpC?Ϯ٬EÉg:D?G lQHd"<"4W9L~JH`*Viaiqj(W1AJovZߒZw3vJf idŅ$$W\ܟ2K3jʙL.s_}҇7lIGca.rT*'ܐ=_A[)yX -87@%T* /(eu](e(|{芀j(i\b"BgNi1{4:$,h1sm{":G["@W~}$"s6=N|0&v8\2SNt)?=l6|YJFSYP&Rae|?s҈qm2oRO5b$t=Сt_dT_7=l;qZ)t
d&dzfbZ
k"OꩡQQ8vgêȺNa4٠\K[YѡI|tzRWT0qXR3y}iJj6^Hq9a0[DtGSS'K/\F~Đ -3(8<eX&y!Rendstream +/Length 3550 +/Filter /FlateDecode +>> +stream +xڥZmEQXkEz+KzHkɶRYHQlyQ噡Z"Ic/ +b[B ОG8w^(lq!^r2.WI.xo>p[xrxw,ҞC\90,]<AT-: +H^]]cJ` +}/M9l~Wv+%=2_;`\2~SU%>]ox +{(s7@wdˢ-wkC~ݴw(|[
fP~joڼHl04c9)kڙ?ӺQL}Tո+5͊O9C0}![Clu=oFz757H +{x?bg
/;+`ț=nG-xjB +5ȶRqf75WA4ʹMrѲ.znFbkuϷ?~|F~z˺MGuO(ZpbPM#+S&@C1ģO"/щPvaPY7ұ-pQ[^ƖMۣ/ɾekm<e'EΆ%NlZm8I@73;֑*K'^%^!fĶiys:SBeYoy ݻN3>7BsKllpҖ7\a_:MFrQEHks"K$+3k2LgfcQ`[&:WRfC([A?юJd<R
+ +Ω:25mE^ AW6bG5nsW:!2Y
.qB[]5[
l + 0y̖s^~ƌ7ȗZͺK*W;HpJ;w^maӻ}5J(۠i5! 0$@h8Ǧ5d bR2X~*b@#VH>}|8N.%q4we^&<t~< +.%дYؽC0=_bH ="1b4(twIpTHO +\|61@Up6-f`bPŋ, K':.^~7}u,; 8.9Xc&DRʼ19¸揈sNxQ+Bĝh-KiRo8UF3a$(rX|0endE~`Q3}C6xpmD̯g6Kkݐ1;y3DQ
Xw'ʼn? +]{]5kS]#DRXEy}0=G"@<ѧsEf]ۡ|}v;C"evON`6ܟ%ljI=#k!Dq%-a??|R|5jbªZ1=-]28@ʏI|OxYEEAu( ñ:p+3ɷaj6ohθι;$ϗ:sԪMs!)MARlBQassR&:n̮n>>kA$S!~HKV?Uj/̨8t0[/HB Q^ + +UA1( +UM"Qdy. i
&LJ +A{C6Cg\
B R* Y3)Y&aPU +$S+\3׆#y:_>c< +8[l,nO8gJ*p#hV5Qt8&O8Ar(L9o/|.Hao1e
-1ɏUC"s
/LFq"pvgLs[צ0Րy" x%I!mpɟZ@v;Yd+dzݩ}06jy-D>*'9Q9',UJg endobj 4189 0 obj << /Type /Page @@ -13157,24 +13057,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4198 0 obj << -/Length 2129 +/Length 2021 /Filter /FlateDecode >> stream -xڭXYoH~R@ĞOI"d@KL"]:uژ C}TWWUW}UEIS^i/CMgқοΔ;ϡLO"E旋wW1ƏhE~w|suף`p;ݯgWw -(c0O!8mk&gm/;b!|cRMn)P@lCbҧGzjY6) -32@6#J+@PM#lу|^WrQ
6GcYQ搆+%nh)Qe|l >[pw68ʆI`#Ge4e(L H" -@0##LB7SԑkWO i0`LoԢ.+-!ZH -{@ -PAPaF%'OjR.ly
r@/KA$ʛN^(I;p)9Bܵg.` -ݥ8y!yrxmVeuD٩tb.v:ӼYQ# 7#0y"^<?`,:<IL<f -wr,w8
Ô.m -", S^L/can{*lwYI -ŤEH kuEU@ġrxg#;4qD(crY4~o -ׯpUjOc-;/# ]GY'.&L-TܼξPzȡZb29L;vsDŽpb%~e6mo.wizSBּ&}z8vhN pڶH7l%I~TK"EtTQhN*"jX -J.(UݓzF
PY+]7<cA\Ȃ9- -@fU t $ *9AЄ[i"grV}}u~⪼a*CTxxE9s s-ȓ9-0(o -}ߗOubGendstream +xڭX[o~ׯۡpr>8ۺE-2TH*?߹,)ʢ }r$!ĉP_9D:Ke,t!C[o'g?Hd7S}7S/bTWyϧr/ap3oc^ >O>|m"#PI& |;/&[x/pԈL^Cxq)3"y@ TA EƁa:Gv%/%h2^h*-ˬo6Yec<ܚM0UTNui;7meydB$$ڊJQ(dC1\uZەY*J7pf%2 +m^LSg띒4Pewlʀw)6+m$ˬ6̤4/#Pmj4Kt_:m6sdg:%K (iȠ0_>U=
6咽ܬe3&ac*kIF4z[Pv8&& G ގa=0GCᑥ.vP$.DQJ$uN24QBI`L|J9pu@<7sae<vVvH7<Z@Lg7+$"<Nҩ
@}n=|![ +ez>O܍8*]R~8gB7=5eJ\yP +yXX<}ŀ4)1
N ߄SHjp{tQq]HcFQ,2*-Qz_-#k +ʒx0U9^_} +l$tdK1Kv(IzjPHP#:IҸZy:[a0`<<냬s) ˱5SB_b&А7º#S]&o[ +%Qa/$XN^fe,+O +6co3a^D~i_WUPO8w&ORsr2h[Pލ!n._]ԭ&o=tVeu4Uh̚+)4҃ PiȢ妶-ϧfp2C{nXe2]eҮi9-ݽHLG%/-JO;alKpUdר¼ +uu|*)E^{}9cGY* F$͎؏"{Z
TB d{iC% VQ0 +@aժXt +"$c^La/#pP7YROD~ԃr=B*ib:R7A +ؙwQ6_K(V|qɄDqmE^w8o-Ob-kϴ-izmۛe +fZJD2@;'.M +('PjWUjIU;hovoHmTw)S
)@[ތZ>"O7E|$o endobj 4197 0 obj << /Type /Page @@ -13223,19 +13123,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4206 0 obj << -/Length 3111 +/Length 2748 /Filter /FlateDecode >> stream -xڭZsNdq8ER<N IH@kԿ۽@ݸqxݽ}Cjj$N"h5Y=x,܂0ߜ! -'R?uxR3i4Y:\k=<ۙ>F__^O/~#`@<w$R>=&'J,43ٿ:\NF'I!U@Mbc(ߛYy^<,Hն٢*UHlӂ -50pB;k%t챠^--Թ\>$k!26WN6 -mZAA6P։̀4VdTV2ϭ1arʪ0R -W.07Qa%tQh<O%ljֶzȗpHZ"i!k٪k-zC.鵉{LC(@ʅv@jU!3I4gf/&#
n
b8Q#-XǵХ{|gyA<b%D' -RZxM -)^ѝ*' -:~ոoKr9lW;unN* ?@\}m]uu~ʹ> -[[6Xf:B3Y=V']r3q4n4Riqu@fh3f7\]+26sUZ'u0j-bw{A*K
j3ɻqnxYoB4>$zسVOv8
_zhoxW]%*>O&?ۦ-3<HP#J
;w.q2|#YcQܰ1쨔'e|/b +xY[o~R +6z}F@lapU_ΔJlttILFRJ{{z"5Fhq.<3Ef'& deWR$IyܥQ +@ i\M|h՛ +N(ҹtx,Q-MÕ} ۖj͈z]ǭBl6N]ht, -l[`Aĝjmi;'nzގ*R3p-<=;hm۲LjCΚq3(tȻ-B U_$+\岬ahe6pq^(~aa>R#~18N?W2ZLN #?թU<wj#(8~RjX +BPpjH=/Iņxmw: +~N|#FJKD; + })%w|W7dvzDh^ ֬ve:}kG&|"xqa +<alc`Yw[F>Ƞ9;KKGGza%YYo7Ly~DYƗK~8y2iB̢ŧ +Lu"͗ͣ#[:Byeeܪ+ɐ
yoAC94Pxbp@,tЮrBq.ʞb7?Tu
I{iwnq@*YqfìО >
IZţEr&r^4aV}}ŗzt!
oH+Bo%/7j+2
p
ЦDvO pD<‴ծݣ;qˇ@+U8\;;\lyF#PaHNZřȔU/^5]MJQەeM'|ƺ 1#ԐVfW#UY&|
#D02PanWsa#Hlۍ|I@ߚѬβ[$ȃ}Qe xc;p +fs
xao??w46;avdrzZcŠ?̏e&MTKC/?k6jaL mG$?*C"5
>wo\; յLJ2R?-!HS"I| >$K碘s-r@3i)FI21u q+Lv3NUzɶqpP83Ʈ=RlS46QuNu\'SW|$C +ɉ2F9-9$G4qIjsh,=K6PܩМ?V&)cqf|h(x*r'>*1t]a0t_oa%G@OBd^C$V|7q#=+6۩F=Eh& rOvq*m'/א#)iO[D|8o;=^I!LɅV\f*V6_gZ17i,e*5VVc1)sɬ [t4U߬2vWq">ʼn.9uY;G&j"I(BO!+ѷ-5XlKRrb.ví%KPxyػ +0CXHt.˕ZSŽ;rŪZfI,.v=vKe'o2V y`z1筮m+[$ UR\힢*:TtBMd(Pp4IcڠpMC#v(S@8TKg8T"C] +(
;C-šQf^6o;WĊ4~fsT-t,2g% ~)ezgPg
U>m} +}m(ÝŸ0@˺M.~j?\ +eaMYX5#~!Lrfm#M!_a9k[Ɍͩ:xKfibu7[D*դQt9ĝeyT
23[z;.!Sj,aoKpޕ9x>vv$<=[ph{$i7|q+wiV!#dn7Ih`އ?^SO)I%ٳ||Wendstream endobj 4205 0 obj << /Type /Page @@ -13248,28 +13154,28 @@ endobj 4208 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [489.95 414.026 512.306 425.715] +/Rect [489.95 370.389 512.306 382.079] /Subtype /Link /A << /S /GoTo /D (ads-test-smbclient) >> >> endobj 4209 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [111.316 400.477 183.828 412.166] +/Rect [111.316 356.84 183.828 368.53] /Subtype /Link /A << /S /GoTo /D (ads-test-smbclient) >> >> endobj 4210 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [214.276 400.477 356.796 412.166] +/Rect [214.276 356.84 356.796 368.53] /Subtype /Link /A << /S /GoTo /D (ads-create-machine-account) >> >> endobj 4211 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [380.57 400.477 476.48 412.166] +/Rect [380.57 356.84 476.48 368.53] /Subtype /Link /A << /S /GoTo /D (ads-test-server) >> >> endobj @@ -13277,49 +13183,47 @@ endobj /D [4205 0 R /XYZ 85.039 786.531 null] >> endobj 386 0 obj << -/D [4205 0 R /XYZ 85.039 372.659 null] +/D [4205 0 R /XYZ 85.039 329.022 null] >> endobj 4212 0 obj << -/D [4205 0 R /XYZ 85.039 351.462 null] +/D [4205 0 R /XYZ 85.039 307.826 null] >> endobj 390 0 obj << -/D [4205 0 R /XYZ 85.039 270.776 null] +/D [4205 0 R /XYZ 85.039 227.139 null] >> endobj 4213 0 obj << -/D [4205 0 R /XYZ 85.039 250.181 null] +/D [4205 0 R /XYZ 85.039 206.545 null] >> endobj 394 0 obj << -/D [4205 0 R /XYZ 85.039 150.632 null] +/D [4205 0 R /XYZ 85.039 106.995 null] >> endobj 4214 0 obj << -/D [4205 0 R /XYZ 85.039 127.314 null] +/D [4205 0 R /XYZ 85.039 83.678 null] >> endobj 4204 0 obj << -/Font << /F64 3112 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R >> +/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R >> /XObject << /Im1 3957 0 R >> /ProcSet [ /PDF /Text ] >> endobj 4218 0 obj << -/Length 3383 -/Filter /FlateDecode ->> -stream -xڭkoF/%w±[8.r^E"}$KJ11;;;;HB"N"7b90_ V=},|Mtq{o69rvbw9<|uqw˕\@/?o=H{ǟ"R=\&h{Ij7[\<,xiCaq}_W8(e\(t^*q-wq/8 -<wM+ -r~0 xkmjāq3Mמܬp廳~C%GĀݜ܄op
0m$!m Wa9TA;y)ˢFІxDrUkHG˽lcӷ@RPe<;iO:KEtFWع#1"QJe>@#e,m: -d6F.7=ϱ8-Zc.^*ZI$֮ZMED%),NxDZѩrcO}:
tj`-^35Й(߅N
:*Q;tVHg<bn}܃p~-,DgfQ6ζUZ8f$*wU3 p(nz6_ -G8}AV$/ra
'y22^ee}y^Lh,_5R{˃^W!A%e 4żeM#qEav/A!
G|??tKqh 4s!@d+hd\&p_ -i/kt6ZUMO]fX:q72
"m<2bLj+ -QJJC4(g2PȁAOX𢄤| Bm6D@X&dbǒYPˡK@'/f;լ@EVMPKbŇDs"͍PytjSٷNc1!ct(lĉқD@0Flc)Df'͌ m䇸@Zmv2r90U)gk9v5٤/T
BB>MɲG u`qO-ϓ_XBB - 8 -&ơ+VޛY\#D -b*sO#îVia8vJ\-8U[Ǹ$`#/T?t9#u93+pa -bs;5ŗ`sE`ǸdL
[}LPrC6Δs.4:Q
~v<JH1cpJ,@&v<1NLa}SuU6 y2D\&a"XH Yt=+KY - ^B+gt/x̷PrYRg8Xv&%o> ΖɠEDSz"Hns箛~&=War3{)Ec=q*.pj\I6!@É#i<.2ǩWN ]i2z1\` -lv*/I0AȊܫM;gb˚sGV@9o:4ϻ -`Q|Ak.k|H0%\QWU^tAⳗXMG{P -_+Q
^[yь}mrzmdi̢8W5X(Z-/dD!M6Ƀ3TJ&yaUbäk)4Â*4 %J\P}G6lGwcf;>ZC8@.Rw
G3Bu`Xux|p)=nIFA{[E~2rd<?}vR3UT
(Ϻ/D$u-!ZSm!+~'ÊABRyUf~C,[5TYQlDm)o|ʃ;(XWq"z } lm(wJrJE3E18Wiľ2Rp#/ -E5z]O%Dce*LI(IaB<"ifSܜ^M{(!a<K2j&j<e4ihSaendstream +/Length 3125 +/Filter /FlateDecode +>> +stream +xڽr]_)`dIjd+RNjUD\ + +so p.aJAkm4h +=oPൗhf2<$zb`&16%ձ +>J +I6Ggh7Ho'W haSm̶U +7X +r-cb@~hY8ܡcA!w/(|A?tM>PD_]ؖ ++!@c4h@:LxH v*QWPZl:jB`_Fk \$dgT[ yw]&`Ml\ +\pM%1^]u#a]T}-SI\dv#=ѳ>sndsاJ%(< +~)}sʭ(t<<d94qf* %DiIb +,s%}`9* I$AƩkpk91@*k0@F6gINT\%jU[ӜJykaj]%,R6*9(' +s` sd! lf$ +ծ+/r}vwԋ'Z
Rڋ53{˃\/&ŮG]$U#gSIB @4^d,0SUfCO4y9Θ
.0ouIYU32|Gیy[q~!mLyj!bR<¾bIlY{mb)xJtUǝf_?b9\B@ͥ]pU z?ÇO5Q<%J@;ZvhƾPzCHͶ{:@d2b.qehie(IWٽLvn8FTNؙ[6ٸC%6LJlOm=jO]]/N#~itFJ[^tQ|<0~6__Xendstream endobj 4217 0 obj << /Type /Page @@ -13332,48 +13236,48 @@ endobj /D [4217 0 R /XYZ 85.039 786.531 null] >> endobj 398 0 obj << -/D [4217 0 R /XYZ 85.039 726.833 null] +/D [4217 0 R /XYZ 85.039 686.185 null] >> endobj 4215 0 obj << -/D [4217 0 R /XYZ 85.039 703.515 null] +/D [4217 0 R /XYZ 85.039 662.868 null] >> endobj 402 0 obj << -/D [4217 0 R /XYZ 85.039 649.927 null] +/D [4217 0 R /XYZ 85.039 609.28 null] >> endobj 4220 0 obj << -/D [4217 0 R /XYZ 85.039 628.934 null] +/D [4217 0 R /XYZ 85.039 588.286 null] >> endobj 406 0 obj << -/D [4217 0 R /XYZ 85.039 556.177 null] +/D [4217 0 R /XYZ 85.039 515.529 null] >> endobj 4221 0 obj << -/D [4217 0 R /XYZ 85.039 529.562 null] +/D [4217 0 R /XYZ 85.039 488.915 null] >> endobj 410 0 obj << -/D [4217 0 R /XYZ 85.039 405.903 null] +/D [4217 0 R /XYZ 85.039 365.256 null] >> endobj 4222 0 obj << -/D [4217 0 R /XYZ 85.039 384.91 null] +/D [4217 0 R /XYZ 85.039 344.263 null] >> endobj 414 0 obj << -/D [4217 0 R /XYZ 85.039 247.702 null] +/D [4217 0 R /XYZ 85.039 207.055 null] >> endobj 4223 0 obj << -/D [4217 0 R /XYZ 85.039 224.385 null] +/D [4217 0 R /XYZ 85.039 183.737 null] >> endobj 4216 0 obj << -/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F35 2880 0 R /F14 2895 0 R >> +/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F66 3242 0 R /F35 2880 0 R >> /ProcSet [ /PDF /Text ] >> endobj 4227 0 obj << -/Length 820 +/Length 1063 /Filter /FlateDecode >> stream -xڥUMS0Wh"O܀3rPC<8vj;
Jr֮v>,&𣡖$YjE$af#&2agɥ!MHde'KT8?EWgw}<G)'i/cݞ]s-FS?\]ϳ`:QcsMp,H]m,7'BX)Rh-b(eSHIHб$iR gBQ.p0|<#R˽|EO1K\oQn^3s9$xĨt닥_1Q߹ C`E9zxI(}~2];R#d -I$sirSU`<`-fxԭ[+;GqⰥ&4DCQ@ ->H}e=Q^vl !]hD əf$Kh%o5z<mf%ɤDZ B"DEp$ -xJg.w\qkɭ%G;K"])4l;,{Adҟ KcΏ0$oendstream +xVKs6WHT0@ +)nH5y> LN(L +G +qJN C\wD KkP endobj 4226 0 obj << /Type /Page @@ -13386,20 +13290,31 @@ endobj /D [4226 0 R /XYZ 85.039 786.531 null] >> endobj 4225 0 obj << -/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R >> +/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F56 2890 0 R >> /ProcSet [ /PDF /Text ] >> endobj 4231 0 obj << -/Length 3070 -/Filter /FlateDecode ->> -stream -xڅZKsFWHUyh{{[I)f-55ԒC1C*t/4@77Yza~fMqzh|Ѝ+;;KUce||xs$Ӎn7Iq<d.=~0~wWMyĹ_,?|aM7˼uǏo|ͽ|qX'rwQɧBim9cǰ&֊]'8~<w~hص5
֗;6K,єn-3~cp,_Yr$/MG<r~$sTxw,nәM1TU -{zo~3nA]OBQ DBȝWTϯV|Yh" mh(s,EсՕ{0cuˢT5ՉW:@lTyJu\~|R,]a͌ 2OՕ~ZF
A{/tÝAS 8ӕf_կB]2}zU=([Vneo[ca̭4R7 >ky;oC)paBKlJ~V>ݰDooƳD$t|N$JKPUEI>~>M V55lJQ=)P8txTugѮh֞BY>[]qes]~ǀ;1În qqE^ՠdk@-0:Rmqo6Xh>V:b2VZbYeW)ZNtw>u#cjؾp358?^;{[m#m1׆'>DikF<w3٭k̔;F'[0+\n.}q%5.{YZ*ȴ+I|wVϙf=߹˾3,AB۴tʮk=j>{h-H C{1/ة<]ʦЉ٪$v~iw@V4\i/V#`M4fYk -F -+5o -8X0s4\F ܬ5Li2[d&`,aB+H\'u; -cjI7%BĈ2K5cbPiV +/Length 3017 +/Filter /FlateDecode +>> +stream +xڝZKsWVޏ䵝8v\+m!( +ƽ_xF. +Cjn6wnO2W8ݽWA8:n"LSlo)7 [{͇A|o܋<76c&oN}1liE3';~H{`Cӈ9`ښӝZeK,є?ohesX3Ŷ(&Y|E{ݹ}(tx"~nÑM>TU>T߈}ߵ'LyݲKv=7<J8$r@ZnΜU6hVEGCS`O|,0̌Ն\CT^x +"va56ɮxiYXϙ`S0VU>7KQ5WG;WGwxtJlꂇ.Ԝ; +y@
HrT쟪A@o1[at&^=8ɣl4Rl5RlǔNg_ +Q4?K/phD5}|FLêi}(jL^Bw&Wm#%1C|moEa҉b=??8O5uvZVJ7`6 TcEj +M]6! 9J)Ǵ {4=yz31s3n=i1"}<5{D}ZACgԃ,aPveDn5 +(/s2<jk
B`M|Ntbk +4Xlh=t%G0!7UYP?(-㧯}LĮjFġyHMO(SĎwKzM7ci˹uILt|$V8MxF
J=BmFJ^ +Hy1g!/)y+6 +c2C1yWmltq=plDBA%& i}-ϭE*>jUVADV((1&KD˄ +I/RTBiVĖ0J%v/X/J,*{.,&3dY<Ы)NAfnԘICvx9Z{Ka"q( nO +.J]1a]:t%z(d IU9G@s܁L07@00Fl
N'Z*]]"bA +{5nQI3:췾JOoV yn_#AubjPT0j k +!Q{gj0+e O=,jSY/}`C[s`wL7J>ST?Es{wU<~-tA*ꈜ>c,ӤkYXd$j v~-EM>-qz~L$wϑ +pbAR*KK\ܢ_WS~CooP~mfnk) ~ +sendstream endobj 4230 0 obj << /Type /Page @@ -13434,21 +13349,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4237 0 obj << -/Length 2744 +/Length 2599 /Filter /FlateDecode >> stream -xڥr۶_i_ -&^;s|ii'i
E*$eGL),K|4fIHr}VLj;0?x3fO(gg\)|$ww.Ty_/a\Jy}{w{KCT -Iv?+|tc_,H(Tz^ݝpƧ86s,NK%EV*B1JE@(̒(qXR@QyKAxWm/նˇ*jcFiFMFYڔAm@JC[#ayxUoHwkm`T=E^1/8.x(Z5eʫ~S9}r@npB|ջxVxlǸCiIs%h.}3b]=ʫ
OHBYj[ve>TO>Z˛x/~AX;tHFeHFj0x֪ȹ"bgӷ펩(iJ"ϵ(l%>8\1Yz VȢU8 EKOGw[>],"a{lt]=G(W$u9nqVp!b-N"1^A -)hD1o|1mRr|'RGxr'=~"_IF_iIzm?xIFFON7%<J%@RdXc(4 =W͓5(6BVE% -C)ĵd&q0%!EB5<26q0\A$mSL֥߷sHMW:ƹH_KRiʴ5G"ArX^l.vtcl|礂BO@m3_|.QaL"XU!>ڀw-wzDVC{шݲD4 - -RCcݿ<Y2r6DgIJ/CPq]2=|Y"JœOk`-&$EqB!LDiwT-t]efx~sJm?=7ȾTc2@?- 5 OfƂ̢CAJ]jU3x:q^+
x֭=OPc - -#z"6n3Ƙ$Tm9iESSwi=;yV3*Ҳ 5 XW\ļC^LJmR_`Q7~iTLDݤKa讨[ -ko֕ 3_RVTec濃#,l5;*iFx|(䆝veW,npӶkki?> -ަ%wv1XmjIn0܊
_~: +xڵrF`%*0x#U{#IN +1P2~5 +ka1*s3?O +Y1s?qkhd+|\maUa7=^*-.pg7pʺݖ#Q +=zQ\[z%䅵v]w]S3Z7 y:FYKp)ft >l^,L6+_zz;,?P.Cd鼖VT+"L=0 +AH ཐł"yQؔquNW>^?B.#Ueym
$0?i>2>zreiZFstѹ/ޝ_ϱ[5e?~}vu1qX22_}XF;vZC*]r]Xe@[#e<V22D_ +D\W +t<5- 8H,D~d=m<SSz2N"(xѷ(r(@37e OQ+fv96n"O9oEzvOB2WvRטd3P#MnB3<Hn G`ˢCPL=V"Rˌ^7V#f|56CW?iv"%`cb2y@mgź5֑MwI}Ko
y)(q-T.ݾ}Z,=n̾$qE[^ss08Wd&ҴT[)_v4l9@j5{Lc2 BvLF& +z;}Q6Xv$>6bћƏP]^U4}p-lؔ_ЮmLaGI~ʉr#ޣ"ޔz'G*ɟh/לRn"1l@;v8(HץMg$@̮Xy"'|02ɟk;rF endobj 4236 0 obj << /Type /Page @@ -13503,15 +13416,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4249 0 obj << -/Length 1504 +/Length 1435 /Filter /FlateDecode >> stream -xڥWo6_!t{1EkmWtm8B,ѕG)RdÆ 摼oGqǃ?DDqM9-켞p1,ϯU(KM'X*v_\-әtE{5jow/hj)X^MNΉ\tdۉD;G=Ɠ)'2,wɟ.ړIE,cq,Gy8>%X(.-,Be¼|x8>.$t$s{AߞHX{|:^~ -H{ 4FwKf4Mqz?VS_at, !q5pP2
UqICA.Êܽ"=uj$o1V:3G*ǝ搢 ̉H#u -8; h -}]cy^=a!>J&dhzl>tL"f}0U!hEzYwxFZZԦ_ ]KTwH+eaPw\lFDe"4u6;;Zmi>ui ۂƮP4}oZMeAߟMMi FhM`{J`@Ɲ\Vi4=jKH{F'AL7Z -}v%cxAPHa$[g0p bxHendstream +xWo6_!t{1Ek.mWtm8B$ѓG2}ww<N0O$N,V3#xz|J{,g}kXٍr5_!ܘQsp/x%__j9w?\ׯgd2hg3$v@{'Sd X ]ٟ:IMĵ~8S<<dT<0Xsxu:w|!}_/7E=c:iO&Vyiu}\9Cq!?dtwAp"LvFzb\P0He1B7#@~_ABkihѬyĠE%=<Ap9qdFE~V]e~DcQ[~K;X.pwHiʞjE;ڤ$nte
+SR^p"ukof r7)`!мH*QvF=r"ċ#c"WCӦբM]zFeh~6T]J CJ>IIو]өhi1صՖF0F5vp7pT̹-+UxI̗]-s]c6eafGax_d"CAae +[jR8[ܺ堡<EYBbUf@--q5G)%-妬-!K hN蟃J < +W[&xJqh~O8xiRA87vvȾǧqPl+~{>9?~8eZUtѕJJU@Uƫ\wVi
L78=KH/<J8o/k>́sG-ϨQAendstream endobj 4248 0 obj << /Type /Page @@ -13534,13 +13445,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4254 0 obj << -/Length 439 +/Length 414 /Filter /FlateDecode >> stream -x}RM0Whb<W@b/D -mU)ϛV*NZ(LJ(1_5HSTټJ:2 -_c*J',ym<mIh>Ȋ2ioPVpHڔDw-ph܅H+@2t\2Px`WA*#yOB|h\쓒c;ލL"[K*X$tq^Nquk
j1.תîM,S_(sBu sW&V#כ~CvSA<KC4I{QwMP߉<`J+Fy:Jo歜KTNu븤)-x7endstream +xڅRMo0W(>놭R=;xSM Uп_JdM6(==Q}J+K'-{ܮ{"zs(1-s9KȠrƗju]+tYΙUsσoEAQ $6 +TtD<_ǥAy:؏]$Iˤׇi[D;g,uAe@}DN]CmIrxQw*iTU%][j>;"IsJo]?ЁqŎ +v/y!{5KnS'),"v3Վßx+Ov,qMOCJE%]h
d1ʋ/z\O$4H?CZ.$zendstream endobj 4253 0 obj << /Type /Page @@ -13569,11 +13480,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4259 0 obj << -/Length 248 +/Length 235 /Filter /FlateDecode >> stream -xuPN1+^v~ +xmP=O@+n1Lـ!jJ@*Uߏ/VIg9R\Qȭ>tCe(C|hǢP.H4' hJ雫{Fg3_s+Vm')GxC?d͵+ +S@If{ڎʚ5`)ljm7?NU֎ +ٴ
g%@(.8;`< +l7/\endstream endobj 4258 0 obj << /Type /Page @@ -13593,21 +13507,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4264 0 obj << -/Length 3000 +/Length 2940 /Filter /FlateDecode >> stream -xڥY[s~ϯy<+_lt&=Cږmd )9vr:Ḥ?Ů4K8gʛh+_ψЍft=iQa$q;
`q{|ǞTwVjԹ=V6v|;=P39Ё4mA^{0f'<~XN~{zit5axF^~yi4ZDCz-Y $GF̃TVzl|ԯFLl_j(ieNUuJU٪^7tjOFXnd;z`w_sQYu-h/=Y^ھvojRlNmA
`{u-X4//M[[ᗙ|#h:#?eW|,2b2PIw]n}[A290[>-&}Y;#glzU -:'<t=,en9lR%"/-ma('͓S-VPaij [V fv.<ȝWi){ -bLag$ڀyWc6MhI&^~lCǕy6{y>+OtZ^2"
]>#>2O,T(H0-Iq,INDZC+g((a3@=C3ibLٯ-I:;V.&)Ɖ{{ϞP -8E~I=ڕ:W8 --5u K:;a!,r&8ux!sIכ;:BhKARPʨ],UUJ?'l!vO=@WfH| |#(lsm41Lbm1? -.dC]*\Ϙ P^a3r3/-Di[JPHz[U^Gp P*;Ć`3vJ(hNIC5+If& J,&.؋)Zc5ms< yRF -]H>ʦNä4|-Tra̮|Uz_zٟO'>qԲA@-; -(=x/ځh5CR%C(ve -8jR2h R<_T~e <Uߍ/uEs8+X_Kt0G^FG{mmd chB)1P]w
ԍ7h̬iP]n.i
z124!1_ipQ6kf7Q#֠pU:N?ȴNM5/eח;- N:yלC1jt2oYA&Oa?*Ry -U<ӄǥX<&HA2{M| -yԐLH#Ië}-QWM59JU+~ɳs^FwmyLR:SQ])iFkow:U-unM\ӈԷi<Hc(xa/j5E8,s|NN]ȓ.#}]kP1rDBx8
f.1*dy_Zg>HU$O\5l/"Vx\t>®1O +xڥYn+tWCcvq2x +btag$`Nm'elmTI?f?<7̳=Y}ƹ牮WW˫N9 ߝGy4Lyb7f>!?`nSxhh\(fg>3j:)NA,٧4wn@G]#Xg +(n1"?tdJABs$+/WAthw슍ԹdHg|rr_/pn:\5}g! %<^E(uNT`oF6KǨF+8*ు' +則^F
hLRD7ӺSKPZF;zO5N/y&ضU%[\lȣ
`Pf|Q>A*N%G˵GÛ@:Dog^ѝX7@'BO8ujNglw3A @2Χԗ"&2r3k#f9p[4Oӡw<<Se[m LSٵHK-:F\w"iah-{_I2Y>%<O<Ӌ4]5qSPE
K4tYfV/] +V,h`fDkЌCh</KJNqQyE'`~qfɡ&a{w5&TÜڞ=s9 ߦl:h&ǓӉ^aM<"f]6@&w0Q $$FPb7O2Fmj]qyc?{GX8xaZݩ>ۢ )mE ' dC*|#=W،+#ÌK]4t^j%f(lϭ*
/#8(% +|aPMT">Ag
E$|-R +i%S&.a|>DsDyC y7Ze6i9ZV@3'\zj_D|4eU5n+&Ʒ'</ Iy%%#HcrqcG͛2 +N\9I_!]cB M9:m%\=NEuG'kroy\ypaԮѿi!D31fÁIRQU]["% %TaA"O`{,FJylU=zq +=I}sSMV}_sMKѣi-k
@i}2ϽMޯnӷ7wC?"AAdzendstream endobj 4263 0 obj << /Type /Page @@ -13640,22 +13552,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4270 0 obj << -/Length 2310 +/Length 2218 /Filter /FlateDecode >> stream -xڭYr8}W-Ԉ& ^OgʗݚZ-n(BCRv7DyM*%O7??I#S$Ic7Rd>&02gOq8=7ΓynœW秿ΔRHNgI:SpyCG/o7p.>^OԹ偫~_;ξ'\\}x>}>pW -߽\sUN~M'a(T]ܞcᄵPTF:ɏ0r$QaB8T -KkօLfG2r_f5U/#_RBGýN/nr\%)?~GOy/2\Bi/M(;}aNLݶIo=+y6(? t
ipGưyUb$`!,vrƭhH}*Q -ZT;g
ʇ=Z֏;fYIaVdb]A S9CVn;nq`z#ف
m(#;y1yݲe4A0ܚ?B3
4F}d6%&c&?榯|\ȽJsy*c^|vsڍ3L^ohX$LیsMW.M.} -(bvk<ϛB -y']GK˭{l+aSp>}g0K#蔷u'l
sNi0u-zWlU
;g9⬾@dOĠtLaBs(}BUi?*5 r"aYK&|;,`|,2l$E)͍hA9¨¸(jʇS*|;j+ԨkMu%4+Vx5{pͯk7ɢ!PuSu#=k*ܳ2Bߟ8Ir|j4S\W&L6RI -|"ypYe::D6OĻ8'2-j.НauvK!QG3ύH#ig$MyW{Surf{;FZb -~=^~^DBv+/ݱ\>sHr*7Riog$/V3I"R%%eUZfpUvZuXX&1UbPw52Xc -P'5P1N2)J{ىbPeQ -с(e,~e/}% -w+{,ߙ%.XEаs`IJnMCHě^q_@r;ngJ#wrf"^=$`C>
^ -ӟ30BCx;[f%t8w4 7nȣ|;42ϥUm.K7ٽϡh<=u
1z?dYQL(cDD:p^endstream +xYYsF~ׯTKʊec-ni< +>DlP@|rtΎ4Uj}}d-
"`@kPny9SVߓ]6Eh`B+LŋtFj)^]/x74c9l3ٸm[B`5t|^ĭnyz<bkvgd@KMtCe\?l,~$![ +PC3*\cAi4!-zÑ0Qd |7b~I
#w֦xaMv1 o(oFq-u2.A<33'hm!n8p.9ZiJt#9G4[
XŌ + HI!s?_.WH<_PG +A~6m>LzzJvpn2V4 ] +:%S{TRcf[Բh+$RzYzp]7`rXڑGee)h\6ܾ\4;Q^:w}HJxv0ed\7$ +Kc/Fg%8G/trU|KXT! -$LCB\Ru9ēҢo뾈=vW>l$hRzȵӟ p=|ľ>qΈvMpx|)Gh jRe3ڥ.2jU6oYBJ7QׄbY@C36
Y/?+1 aij-guMZ+랫W&qytg-د|=BnVҾj1E%G0FG +ϗnȓ[<Oem;;d8{C1X_#;bjB> + endobj 4269 0 obj << /Type /Page @@ -13678,20 +13587,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4275 0 obj << -/Length 3692 -/Filter /FlateDecode ->> -stream -xڥZ[s~473֤jw,2@ܺi!**~ O-|fO"|dR,9W7?x?~w/?~^FQefZy>ݾػO+|_rz9w?sϿ}xW-T!`+zQ-^*8$佾Z]cWqXmNj@[N0QJ~E$Sb%p/%q}^*&cójK7$eC%%R~'DOU#C
,~^:F<kSkP/U3R|AHwASKn`kX]A[^z}z+ZRts -p7-Lg
A -H%ZEν6R-=?ltMWđ$-+nt:=9b-cMhT gk9q&+*Af) -<T/Ee۰cqz/ހ-٣_h7}=h[W_pg8`YȲu'(yF]lX>OB߃1y4ǞuFg^`FrI=bB8Þ]6DI]#BUhp#S;]ɻ|֚Xj)sfD<0!uݷ<DW SfQO&-нAq%_Ͽ`,(Py;a5wlI%D;n)
7ǫth\ -}o-2?S? -_O<tGE44{s'ВFz;#dV7CF`* ґKi`+ۘn(IP)6446+m"hT$Z,P&C%++`Cp݆\/;vi˺i;H{iΑp|rHȟ?fD8[A3;^C6"QÜG8&ǀJiѬQZh;K:O4N? #Y`eBSf
J`Afr̽KZAh?Jske|rlgDsG HKH -֍4]t펓a)PA2ye \e.([USW{BKQ NA??2o -aܮT̈́4kM%[F~oVMu_WHj"{`#*Ybd-2 -~l+w&%gƷqayqx[{h_x6>dY AbЦD馕Fp:?o%H
+<ibPj#x1bi.2,p1<nƩ37o?aF#E
,Xƹ 6fj}%h}e19{pi,A-C[kuPqƘ](5ȢVl%0*AD5VyX -1zes=yFsxG@ 57&F)IQ"ɩ#O8Q92ty&שz3ׅK?zqp:ʏS5`Ēfj)rFe%Og?nLO1 8a3Z^R^ԏD:6uTyt6vKz鸦V|+dE3&բ:=wh:H3&#Ge5uX@ʄ?ܯȹ[#@Sp|Eaxv*ۖ2)!Kq? `?pp +
);L+|42(K"gNIp'$H +/Length 3614 +/Filter /FlateDecode +>> +stream +xڵZ[s~ׯ[7+vZʸ3I@Q +Vﻻߞδ{{vAң?2]//,qп/GezI]o~LKss/!ߜ~~{{*CVi9wW[&G~g|pU9_qg?+| ԟ~\rQ)q.˅yvLmršGw/Ĭ^̈y/ R7HCALs˶"7)hLHywo}OϪmoҵ
h8~:މjj\e*HbkjD_0͖WA<LΝzmb#FNa}x^ݙ%4x}LS_i5.SN/q|dYxp +ehc M:[K^)aA_qƁ@[̩蛪:5zU-,Zd;s#ay:s
`*7_͂| +Ab3ZlP,kw6{Eq^ b
$5PS1 Â)ĀFX! +>gt +!%Qj15Ey2S_8vhN
Ai[ +j߁"*Z"ԂK}#l"0U2
SJ}(#ns0$4ɨQRj:眄|,O~;kvz@{}:N0I,2a)Foa/h~Kq~x7FM|㏋fÜ#]/Xڂ G>G85`nE-<r@ +i#ӐBJ̎ņ*Z| Qgұ^[lLm*RҢZhБɨ< +<NX6ťL?+bόoK۰ +Aok0ZcUgsSOX'V"P.-Qiu%(m +)a`EW>#xMlIk#n/2>,mc +5L̨$ԣ3!mxBDO<v*x'LGrWDcUDz&ڐ`ySb?^dx V7/> +7ƴL0dQu+a}5H"%cE(GQ(z3/c ?f䌬Ea#1I(b>En)4܋3M;/Izirs߭Ƹ9ߍ9o0llt}RL%pdlqk
-jGqi<`2[NSwzѹ դdG1dR&LD{d44QHSFç1s2r^gP L<͝9|{≑Dbo|80"Ԉg;PDL趥q=q?uxBVѕ(V_*eP>+"GK)N ZEyM4G(
{MGKqD75DC$3s+6CIA^e3zДU9`xSTuqyղ<@R`A9Ca (,;Ɍey:6=r*=EUZ<NC$xJjZpl7[1 ஏqcc؈R(* +՞Iz.I4ä}k6!5c<ZUCi;Ivhz.,ߏ%j%諾ixMC߁Z Y&#\ȸ"+7GtQL )-YDB(>W>~PG29~7}4|a"Dňf3:I"7PZl@oOWHL@yă*;{{ޜ +^pr`#."o<hP"Tgʇ;Cιf}T<W90a|H\
T,{p,Zۈw%_V.1M9}Gz!gRv +l jL[Sf\75sZCk_M wy.RZ1 +$+z49>'?%Cendstream endobj 4274 0 obj << /Type /Page @@ -13726,23 +13642,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4282 0 obj << -/Length 3652 +/Length 3274 /Filter /FlateDecode >> stream -xrF]_%Lʛm9vcٱne -'ToϮ~1k1Lx q$-1y~7ЉTLrـHқa7J3Mu~q,C_Ͽ>oTR^s'k6
> DiJV9)ߑD.3+eI@AUBdN`.=YJ[甭0[<V4 -wHhmw0zjdp|;b?th4ʲ:+<H@vMbiRA -ڤmDL&Gگ쉠F -pcEccA,S?R#^ -:'!] -ȁ4!!zxj4/lRݾWd%'CYPSIi4Zh95yeH!/t!!V5J2D*=ޙV|;Ӈ[WebF^PI -qzD#RmP WO#P di4g \i..țBP<dQ9r/_?YB5BJ38ZS*
EH!7aCMotHݼ/I٣(pY>*g|rKʓk%|,VUYw^DV֢t<L4oxa%1麨L4 [_1d|$vX+:K'D}rIjiPG)Q ->@:FK~"+~?Z >m6B0<A:ey_y=.7ɝ6?H:P1_~e1;=;?agY7Z -1*| axԤ[\DX(9vaB9q)&?W";`7U= -UԿ+j搜p;bu/rkF?ZZhVZ\0|̜2lW#0dOwǂؓ
fö!qYn#9_=ASQ_ -)?@F63"B $ۯvE9BaGԘR~qB鍐 -_DA?y}ox@?Vrн$ *ZLX1J{gW~0ɹqANd/
߶/́qkΟ_+cJ F(!:RKb4f^8VXKs9/Tendstream +x[Iw8W6{rKqO{Xϼ>-E"?"ENw'|VZ>hgdß3|Q9ts`@9>p=RHz5?8zc[e}ˋyc Oa/'髗جGL=_w|}r6; goX?Onx[Nfo&9x3omr,xˏa/ʶhs|'ofT9hV)# +&Sg\֕'+"uE]#5N972gp)2IS2hLKd2JhH6 y
MéRœ>dѲ\my~;.=tYdUhziV/l +h_Oߑ/-nXA|4:aȀctQlxax8QBHD* +bJ-.7: +k.PxAOij3KCRAuWYj\n +2N%Lor=R@ 0烍%b +'^h)h+7|.k-ٵam4s!y3dz.31#` +*+ur6a;kng\)$@SrC'Ӂ>ҥЌH_$1yQAzL_9Y ɐChi| +]TɝG4=Oٯ9LJxcqjxb"`UnrU?s>BeEc+
feFq7Bas\Y{$5)r,&m(p7Iq=ʑ9ӪFbvMNi-s wƖ+f
;:</D9-uɎks|:ʑarN +zVG&ǶI@g~sWjV(Ofv'!exPv.f[/FU'2) +AqS~HO:TBq{n
E$ctM" ܌e)У6/h]
\Ϩ^S
\:vI:o A;ZBoueum^Gy/*;\n)dqV2.5~^Se 1~jwJ)-W'7X#Jm7&!)>(],Q'VFmHA #5 h"K*&-wyV3Q)?/tM]jhWfe[{|u2\{_mȊ/ЭNw
[EvO ?#t:VӠA@F@ʩK$JlNu3o%ԊNð"ig`1Jq +YBL%%}i3?\>Sk/ZmNO؆'W~34e1,^}sGƴw)Ln +Gf&Evѷ.KC +v$8Ez2~('=AкɚĂ&m
g\&8'榢7[I.sYzĈ:B1vdw
Z{peR/(Yz%KP7IP_=^
=6-gJ5|k endobj 4281 0 obj << /Type /Page @@ -13789,24 +13706,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4294 0 obj << -/Length 3833 +/Length 3806 /Filter /FlateDecode >> stream -xڥ]s6ݿBTAi^buhgTI*} (Qdb`],Y+/,c,6+x@(ڡy1s/VOv\q,V~ziZk:M3axo>}Ȼaeyzfe}ޭ,?~C-şl|bǑ~}p;;Xg~c -b瘂Pa,8(sk`a
)zi}]^NF
D -^9XhD2McB}ᬷ&AyjMւٺiU
|4f5Z!mfa}/vl!D+Gp͖gJAbu+p|c8VGOU
P=641Uf+Cэ;ptF3rE*ƽG*BK-mdɂ[U@zVD2#x^ېe"3"' /{lAP -X:4 -<ߩ*sv}/Ptun9 r> -2fpP[+QOi15Y6o)Tn D-fC -z& 5OkהS}*Xꇺg"V9ъ!tgAR6B1g,\l'\ǮBoMwotkV>(m.X=c>ܺXӭ^X/kK'Pvr4Yh)G
ni1oLZ\4SiUy|zc_z\P.hzh}bNz:5&4
?eSc9p,bo!%K/euPDDt/"]D;!@&1VKVSnFsKvtY6}9!xIDmJncO\a֑z0ı}fb9K/谷,yԟ
ER<)>)DIjbdz -4AS͖TDgبryWa߯}O3#CW:V0lrVŒCصMDF4MxheLg<83]q.Dl+q`?6^@+:S]ѱ>sbT9083''46^
K*R}u46|kSZCTtY± -m*t=Մ1NnzV\QR8AF(Q
N=P89)3/^lt֚My1uf!?)dؠgȺ[ -EY)sB5V!!P:7gBB?Ȃ&`Ku(g. X0TyM8\K<"/IϠׇn|;^k:0,P֍ܡ)Ƣeq ӋPbrhs cIה s"^:W!`vDx5 -oZ]\cBr6Y:'\5X--xU1̣?z -d,PmCa_,AGeH >q*ѱٷ0Àiƚ -XG?yӡ -{y4`!tN5^cՒsO#,|7},<s~@rM]6Ƙ)37H9NDv($Qס}<m3{b 3+LljFx`NJ'Ī@;̙zJ Uum~]c!ܷ5 *>_k_B'<ag>z):sTnXqLS) .}Iix&Ocw{4mPh)O1x˲k Q~ܘY5S觙B~0$b;ů<s\iܝ+$V$G +xڥ]s6ݿBR'Ai^buhgTI*} (Qxvb/ȟ)gi)͒4"6+5{̇+_(,T!fuuc|e*dmW,Z9$I[k~|o0#߯˿pLsw~}c2X#^ma#?_)OgglFڋB-?vƅ35!eGR+/MC+?]
曼ַҟ@<6Zn h[ik6|wSAx8ϫŁ2ck|.ge39<È?[ʖ>-=W)o^x8hWoZv5`gXmA)|# +}ѺhfXQ&@ u䡞Z=i2Ez8Mh[/ +U{Uf[ڜ%dؒ;nUh$R}I!T̈1xɄd[PҥXaAk4V5V;nI|4xGfp%(?!PrU$7D\oco6e<'aBUN47fS\{\2W}:FrNiƨB`,Z/ݹv5ŽF0-A])k`@-HLl +F^b+)K 4tCNb\(`ޫeOح|4`# G9A,e8JXfn +'^XS(PBWq<c7F0tS MpC`CYD#\%[@ B"%0At: +S +E܋$JvcO\f֒,;0ı}fb9K/ష|<&;
EI)\Q|
M_Q8112c +SA:Ɉpvmn51l y$?`6L"q)J*ϣ0ʰTC:EteA$kٰT.EHg\8`7q65HyK%ЦKQM`8ƒ"ܙ2BwI yw*~GS{p +~J1KaO0hCf endobj 4293 0 obj << /Type /Page @@ -13829,28 +13741,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4299 0 obj << -/Length 2418 -/Filter /FlateDecode ->> -stream -xYKoHW0gv$^dLDYP?j)Q:U_=f, 44K8T,=̻3%!Y84wgohfvM2[}^Շ70=/4n{G9Ͼů>]]_u}7wgH]~ǣsuf7wj*Q> f+PM6{v+cf(8 -_ݞsьWMY)3?c3c&hƱD)iUm5_:vy
E*"u -dnS5[|-4+ؿojS[zKw#6źh |< -tV%mZ2!p@B\(!5#o۵H<^ fļŁdnV24rSo+sQ --vߐ)6y'n<BV*E'FG*áF2i;8Thٝԛ,>-X4 -:"#!Ӷ,yPP5)"_8K:z[T"YWT %;EEǍSZ5{Iwuc#E!gư/[HS>^ -{saM@/%m)9&;8i`mArJGI6Lw!%e(|#Uq~Iu0핌l[H^^Sy -1xB%C.B9.a"D>Ğtϼ00!t6,gG,֍ `Ɇӭ'ryjbBm&Q&,:qC1G>W6 L9$$ ,$B)NpmHS'Y'Weom~ŚA:TSktR,lYّ};H4WvI&VW9g%,xsO &)?Xx4iT&!v;P(Eɽ<I+FGMKڢz -#bҀ -u8s3Xat&ҍbnb^K -X; - % -{T:K?H#Q>~n%9tGkZ&J85 -;? -WHr-]!JDO6K)2{
78_5D^0_M3RPa-To/t{RzFG){V!D49Fb)N64ٓq -Ob*t=PXA稬_B4F`X&5 ɏ_F| nβšGbRFI|C\sK8(RO?8Q'n/hTkP&t~DB=%g/ -y}t(c6QTiD-F#RUxTBLPvD~LO-EG
tCJ -P`ŖJ1endstream +/Length 2395 +/Filter /FlateDecode +>> +stream +xY[oF~R@EEw8Nn;{ihRKRu{nC%iB˙sΜeFzgi %iG-wgj3δPY8©q8T6[߯>ܽ8_A|$w;ޫp8y-~wu}y37wo'H]~ǣ{ufdz7w +G5=M8!ÒrݼlkM.&@a2_ +H&Cf`QnQLu;p#i]%Hy8Hށ[&ybo5%N%ɰBM1O)A!S& >Rj~}$1bpJCUeqK(%wO +:7?RI(t+Tܐd<eM@.BaRd$ޖ%O*<7b ++ͺZMl\Xth +?5mf\9na$7l39HerENqR-^vjnWZ]M0 xw4tڄ"p!go 7<FS89بq +xB%C.B9.a"D>G:^W_n~|vF#˫u##ip*yt뮴#\,ha~bpt1DfR%#WS|;w2tpt6_̤`wO_iipN쩱N"q˂2߷6`AZqé5e:GrX}r],JJȾy++o#kx 㫜pH\-m4KkH*v(^$#ҹhf{[W)&3B>xD\A?*B&bnB^K +G +4Yh9=a
Z1j2xk9iﵼ04|!2_籝G6VMָ5(>AX;ej2 +&fxk=Y:roآ^=z5s8i0~K`h_<NfU9~VOOՍ%P`|Op$õ;Jb&| +W>שmr/7!vXsUGJ&mPH-tWo/tIfFk{kV!D4w7FjiN64ٓq +Oj:p5&gXAG
\:`Hި&y5UɏF| nKͲ5`Rl8:x!.9%o}S/|45{^6@Z?!lӳ`nd"?K:b +r]:%endstream endobj 4298 0 obj << /Type /Page @@ -13873,30 +13780,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4305 0 obj << -/Length 3070 -/Filter /FlateDecode ->> -stream -xڥZݓ۶B}f|4_ùS'ͥ]\?PubBWHPt<`ai -Z*Ic? -j{ -V0kvd_ -,VAOQw_?0@r}$wVOnxoy;~^{ӏ5Y/{raT{K -0KW*V+~dBiWWwWtY%+EaGi87S9fR:MfV~ -c=_>dqhXqSǢ˴F|FE -*nlհZGs,j۬&lyC7Ce{Ela֩5T{˪nt줷q:wK^y`REb)Q1" -+~ -+q"Q KnpԄ*^x(ء>
Ƽ(t{jY)aAdg۳S_TN!Z$0 -:ZLI@$>:x<#BHN)l|❁_v6$ꤨwW~i%!Fr`h
, -+'{W\'bhh"l22PGJ,+LbHJh.=Q> ϡK% -u%_+.
|[a$&47x"ʠ -<(3BI%nM*=,zp*,G)3(@ΒH-O -P+z?dLҀB\:cķ5_:F -}i3)z9HQ(!$ę$ŧ1Y_*v+fF -Ē -r`Ӥ -B(Ai\Hq|~34<4آ;x2ܫZn'Zl/!42ǎi@IjJ31R6F,u' n{i,Wj -CڂؓtS6tf]ĥc s`Bl("-wW8RxaE}eQ\zNCbJ9+^̍p$nHg7c^@rq=v.//.c>3-#qbbÆ07Uendstream +/Length 3025 +/Filter /FlateDecode +>> +stream +xڵZYs~ׯ`*R9u6 +U/W66al뫻Q.,mQC33B4:,c˖ϡ]NSY./e7-eۖ_LݚkYOؓ~ƻNBŵ@)qGxD+6x`\7̲++)R#q%ծ-3Lg,h=Ph$(r95;N "2tq5ӵl{,:0EDʾ^ҍ]CGBMǚIOE[˞w/nG/ۙ:6Ug* +fqef[qv(gFv"E* `WyQuKU
m5WV05K&
QRS%""3T[ Fߕ/\)ZYv#. g2?fꪓ`SEUwLFA"R "tuMZyW*Sa'0R4.|ȢEVJbpS<Șh)
,ɂl%V(5 t:PCG@0q8&dftU7;l~݈n0uY7qPR_Zane~$a4ա78 +F +q'>eC__|a6c:ڨZє=έUߍ} +Ixܛ
ˈIFG9JgsU3dzFEֲzb_H)5L܈Ę{P ,עPj9GظehE23w+0L?kN~?#`!<+T7f,8ئй c= +ƣQDx9ȹ) +iY"s~iy0 +4jHx%<SɱcVmsDžTe`+eτO9}d]WGJ(@ *syEylbcpKa8ɐ=P 8`=r5XC63V }IPe#ơI
x$XF{(|v]1dzbEM=(6M8Ћ5A#aqG"l1#Qq^X(/IC8qxc͙iԤ]1Z=Ϗf_{ezMu8r?V\o@6;2|OȖP8\qC@ߜmt><rǓP
_WG V<&w
Ljo/wKpf3g7#HCwx˴M]GP'f<F_{?*穎{у#V:g3H8 6M +x8Bt,GqQΒ=}b-%;`dԐ+{{\܀5qE#-jaA2C [(WߎNda#)LM^2'T&km: +YvC0@[q0ʧ\l.jXTNP'z +bK"IbyqT4BzPnj6{KK̒@wM) +w]1]⸷c EOӶyK*4ױNOұ}랔 +02 :B7E4]
#'~fP6zf6 +GjC7tADBqc3 (n HXD + +ɝ
DvrBrI'ʺA*|vDepn(Wn#0$%HLl/8d@Ò}=D9٭L29C`%$.ȯGP$AD,FfF{XQ_b.zuF~Yf"Ȟ$/?J#2A]x|/ ԛ@M7 c endobj 4304 0 obj << /Type /Page @@ -13927,17 +13831,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4311 0 obj << -/Length 3233 +/Length 3086 /Filter /FlateDecode >> stream -xڥ]o6=K`"}\lo"8A[XIr/R-{8,6"Cr8oZbfb]̲<V*a+%AY87W".f~"lV=|tZzeZzfzdx{$?݇G|.П_><x)\9\ő.+Hlwe^_ӯcfƳ0^dFizN&0ZRIU2ˬR+{&Ӆ; -,m6%Ceh
ƏEa%n704S; [FEU~lÍ[|{%vrRwl]ג77̙?I77F9U?Aim\9Ǟ[ ٢ADirZj\)[+'دx#bL,)êv",hofC!c.URpzDwJnO.OJi9-:6f DexwXيcm'/f7YVzÝʹ@rT
l+F{a1JՍ)ޱ9y$yiqj&<N!KI~)E*OEhf'Q>6OJSdNWK -LrLZC\N;x -)%#O
Ё0)s~zIEgU{p}tTZP2m}:L<@$z 2瞞<=I ̀zL֤>\ZQ4\9eۋ8矠"5ag=4%77x4_1>4JTU`XpqW;zmN-/!Zlry(Fr^;}}
/mq1y!|^iNz#"[_ljzeZ -hAfy#^L,\$6_TB-JpSs"yNRu%9IEQ#]O33e4S@͟Y5Ne88N#caX$6v/^;^f"I9mP.G>|DÃx^C -4^+{ a -Z[khueBǠ/<=lbYha D"Zq*z3wl +x]o6=K`ERasҢ&EpAeGXIr/R-ŵEpi5OrźeyYfE<ȷJ0♉oR3SqTnM(w>|\h0|Ȳ|~{z`3ˣ?7_|2<p?}πOeoO_wT#x|wGgЎ#U݅:FK{q{/ +Ϛa,TI(4` +3- SuˆZBö-4瀛+7ka(8 +)G){xޓñeFC[""E՞1ݛ<2b); +^-$0X.y#tb
.Zl +:qxF!ӽJw7J +#5=u
vPY%&acFX, <T`E qQ|U[pV8{*_I6FA%xW*$pS̯٪栂״6`ycVlvh>nepZ"$j:5Ŗ; +lI>+0Keﰪ`#엨.Dr6E㼢k(&Px%JS21<#v{5| Vcel9;6fDfxwlىcm'{?ݻJuLM̬7ܩo$հIۈζbﳋTۊ=^x
OOZWI%0LU3tj4qq<-tD4m*':L4N69]-q߮/w|ֱ&l!-,I +b+c,=[o#XZ)4xJ=HX0Vn[aqP0q۳ɮёlvm6Τh-#H~'uf=b(hhua<9,WKQpo&Ld˄58oAn$*P+l\$+<8 +qt>̢( Hr 1I4&Ηۺr>91Oh;M"E4y]q/~)-k85XPa&K:"q7Kr䐍rC30t=HLf#!$!āPA/Q0Ha#dL٫+6T +4@(twA&"t:?Mi!BQJ!
uJCiN2VhXb%)y[KZ +Xg ++tR!9OEdGea\@"Jn6 +lH]x*.Ue(?8K~
x;|W endobj 4310 0 obj << /Type /Page @@ -13990,27 +13901,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4323 0 obj << -/Length 3496 -/Filter /FlateDecode ->> -stream -xڥZKs8Wt!T!d;)hXH)~${HMeGh4uzz;brF۳xgZ(B2\ܞ-3".fa"VHgߣ_Ƙ(YG7:zwumgn7.t
O\/恋/e<jdgKbe|X题mϬ3Y#^<ggjJJfBLHL:1*I,sN6#9r7FJ2*Ι:EeӴOBzAuj˧yJ=ZR'?z{(^*w,rU -[ʛ9mO6*n?بwk8pEuōWLGvQnxwU] -X\.;R/#xFdZ-v6`tU4X?6::5.Ew)M[fB'~D -<(hʭВ -dY.5JLVy`Z>Z6EJ\|ѣAX*2lؖoz%78܀z)yM-WEISt/#K;@gQ>bvTbݐ{ۆQM
KS0ӯCy%- T.{5;ת(?smUbH6`}BJk/fOK1_jCQa --J9pn?nC#@QOc| -\L9Ag*4[a\#< -H [ ٩07(A!R,Kaܛ h?&l L^fȥ ){h--1d>yڠHʦj=<
c)Jld
@w30~ڲ -x -<3fcZyïKȫ~& Ox3{R ڰB۾Pݿ0DV
FHm80]!cV8$5 6r6d -}@#$}&kHjcq}~Zh >jC2+$HX{xKNѻAX%Nc3{ hB<@*<rh -a,4Ü#-FFwu
Ty#$?59`'no8М3`tQhWu-g'0<[0'\=i~*[nώSDWr]5
i!\8瀁@V͋(,0[%{q^/&ו FlⱮZաhI|DqkW"NHY${$F(dD',kYڥTr6;V#[ -AecB+f-[SCJCl|+B3y-Zb0M=>[iEo@*RZٖB^C 8ρ_#?-Ί8d2"I+A/6;G>9t5ň*yDP3҇gy$ND-?akLAA3c~uݒ B>~ -ؕ!miGp*IJ\5m6MLÉ.xfC)ϒɰu령N,1'sCA8sǁ& EXt,LS|9kPu3T1(6 :JTP{pD$'@܆8lÄ).qՆΧ/2/;gF \Qa0|䉻f$.lFa$FҌ^H]~,~/ TL1EF -!Q?8!z7BK
Kb̟çg -C94TG_
iAE(KH>5eħE׆q]_XC1ZRQ}=b07 B$@z; -DW<#`Z2z]pF +/Length 3379 +/Filter /FlateDecode +>> +stream +xZYoH~R@a<Cd=#;0<-HIߺD{0AFWuu_g>gUIgq)kl;gkte?Y:9yKδR?Ӕ7||ljw=H<zqw{vj$5\~ߘp<S?}=qד7& +#\q?[E~=I}t; Q64ߞ\ۅ"V(-$Mͷ;TZ'1M]
e/՝Z[̧/W_?3[ZmzwPJzxM^efƑu0%BbGAsx(B{tr0^~6\Lggi48tQw~a +uAZ^g7[jwR#W# U +BFUK;\TeeF;Ef@]9UKcX0Jw|K+ht|HAۅiDi7@,]qW6_}|?vvػ#I<.~ yLV|r`-HaCK)CT<vG7ۊxU4QOJN + LDJ?w*I"da2hy3wwuESH 8zЈ~0
_,b3o[O8nP^^¾H4o'b$y,ez7Q^&m晛C=IRrYnQgw~Ϋp6=c1D'3K(:e➛O"<|yuÍ]%0Xx8ocm
.O|?R"
U
@&%|V>[E/{xg{آv==]6;Żײ>kq?>LEܠu&*Lv/jg1jٍaw'2,r{) v24 Bz&Os5\WN&3\ֻ䵧gWL`Y>B6ӈjTS`ūH@ز z-A 7`yHx[2&)ˍ +]gYfF vAT[EU2;0#$#ͦ +NCkVEVCR9ߘ) +bFZ$GFU7,0~h}k#:ŬCK_JC=lc5<zG;e*0?nX;пss81cKN8UrPT^P;LT4pRx)C赢6:HHo-U즰h\K$j}z!́!,EpA6cfx=PqBNxBM-иEb?b
+{y>O並O8e4VgQ3v6ZHsF +^,_Q;as2A
FE:X魂grmҖ + Ba3L:^BYoϢQI ,g;VgQ,`|
<E3EWg.ij5I89HtabHpt_BC +2U-וQ@I{'hcH`'q_ozFL91!/3:L"҇b<Tc DmSAΞ;s {uA&8zcު FJnQKB <5̑$
k<L23MŭuRE3N3}!f![M$f%y!6S>ٚpJ{ˊ|$R%dC6I
7C g첇*[o8U5_+XTdE%,6K\eCAq`/,!q31Q_W1I5&T +V7>!G-;Gxj9r8(yֶ/*UBЖFZe4Ķ(V1wB/drv,5>4}rm/krr\0] :DBuĿoD|결 + +#@(#z_uMb*@+R{VknT<,dq Wni6Dy.E/GVO>{h +rmj`zziR9UɣrȞ85TW3}#0Y3TLiw_GK!`aсJq
~N (v +UXF}v,'zTu=Z@KD7v)(){%UD'zx-4)ɘL$^KnPB? +>Si%3U P*Di|6SU` Yv9 uT5i`;a[ E}'vhQ9F +;, endobj 4322 0 obj << /Type /Page @@ -14039,27 +13951,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4330 0 obj << -/Length 3349 +/Length 3290 /Filter /FlateDecode >> stream -xڥZmo6_z; limI(zزlgfH˖W!9f>,(YQ0[lٚF9tƅN̹?{ubf~>_9<y2_<۷_<hN3/4ߝloda6t']ss@/ߝ];Gdv/lIG<=S<mLy_ݝ13US\̋h̦ )B/ -Y^bRS]_?XOħ|SD;4FVrnՊ`%:{IJ4JP{[}~~Zvz>ygj5oI|'\`QGzGa![ץAz~^máAko^E/xG -Ǧ`=Z+Fʟ!Ӂ"Gؠ8̲A>|ဖJl[KR2<.:%垾YK!5:^k68ϽEtVuV{hhxEQ8h7mص|/yQĐG~j#$=A_lBnVFcڂ[al7:oǭSRme+(`
XUgqkUY7T, -avT⥷hڶ\v#Tk~?骺*-ѿ77짶Qqަяb= -˨H] *,}b3 -yNP$α3qhP4tq7֥筳(N'K}lRld&)aXwY -[ue9Lf<èo -Ne:-ζC`l˥۸ -\Rӳu, %GԴtY&#YN8w2,#ִvIcxc؝ȯmB*X&wЫQ_yz5HvØ$Ka+_YToq[dB/L:m<:J&x$d4uǮ_"q'c"QXvΒM,d&뭟pq: hS(HLx
WI{l-O\Nk.#B.Lӗ -4y`(osǀ77h!gDދbIa'^NI3/H"odf#d@gLD=;(X -['kXO)vA;jlb2½j8^MQN<(7'£xٟ~4<> -mU-+9*ȿc.;YZ~q2t<W"/#rLU dYv"&8DR>/e7>&bmhߏTp!J&4.ڊKd3t9Z.٥E[lQ!-u\x~:SYT0MPe3[8<[V.
JX -=$ϐVz]j<܆;\\FtyIe.ԢU
TV&:Q~b"xo e+>
b+_Iaؖuٚ8iry6]όM2#4K~)99<
}vC哌2 ? -;Ƥ|`,6ۨJ;ز=ϳnYfu\ewY
üEpp4CFj-ਈ5zKFk)ÚXjl"QQcc ͆ll"OH4Kt7T${p9H}DYٗe -6?ęI2Lj6]ҵH\Y9
䢵T;B,3˦ķS=Kb#Wi8־BڂX*[%E?} -~0G08ubdۆ^vUI6SSw\=/Nc92bW24?&3Y&Tfz -J!z].IeL&,JbʦiɡqR[$RQ'P0;Jv1RV;1Աn+:p15T}iv-6"N$f[v63D9Go [?B./URRh(>jj -5<r +xڥko8{~SQ 8 $l7x,zXle%)ْ +9Chϟ%t'CXy`2)4.G?Gj{nꥳOO_}8> I'\#X9o<\^pψ۫>ƀ1˫_&OgoF~=0Mf/\?Mg#CWP,ƩϚʼn +"7zn(+_O%'ʋqz*gJT`;q}se^lp]a,qʛ;7..=_A{Sv%|ꍐJRVrN +Ähj$bm:+#X$Z>2婬xAN26z|mW4_Լ1PUji?BajnUۍrSYW@X^s;WzNomΗh<uhS,DR]}\U2??~ϣZtu'xp?'z!1I6E.#
mK,%ݾF*K|_9mQuӎ^edMݙ&^Eh:Y^mEi;Pز1g}
iHІ{ƲDY\v`<U/1#</H +={_D4wUj!G#>tcKieq3kh#cJDeU:Nҕ]cPq֮]֒u';['OmWgE\ؼ +ݣd&f<qt@KQⱕ؟[8ePH{pЙLr]qAf,7? +J+wϼ9e?:uuM@)A242ܢ,\IW|MQ}~q+ +
p? +`zjN +%FV,
Xb$Nm!pqjU sv*$=w!WMڛ.<B$R +4˨.e|LwekyI6+;Y`tѪ\C "(*oa"̖-њnL3X1/#m2h#h#x#Z^?Wƹg}ʁj{
reCn9G}\4u[/e.&sHC[Ǐ}>g1m$!.B)pfEM݉UvU]ql@es_\ϙD?ac: +>儊ڲ;=ʍ MD7D@4Bń?ݻ^w1Jj)|
H*vU$BmR]3*c!eendstream endobj 4329 0 obj << /Type /Page @@ -14103,19 +14010,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4335 0 obj << -/Length 2899 -/Filter /FlateDecode ->> -stream -xڥkoP -hrGq9@Xq-"Zm#גDi g<bz:Eq폖ot+N|ʤ~qr1F&^2Zܵt5I8Z9>O$bg>)W/UX͜f;_Ӕq.f鏋'狖|?O}F+'xcd> vMe^O`ĻdtXIy=1rF1nD$*_Pұy<1 - y -N '%<cR[@-;HgUn>tx - -l݀W!81
ezl3+_-J/Le4CbY1*Sv\F[7iոiJ'`8yS(}*r4BP $!R;rijolݖזUYۘv
Oo6O``dшNEނnQ`5(:G%,i|O"WW8b jJ*8AAoh281oaJua=غ'Jt2fFoT3yhlJ,H좐wmU"gr6de\/<rsVY,1:&#ڬ:W([z$e$ͪ -gm3$u$`=FGXc4Y\DOŎ/·-GnG=9kݐkp -O.Ҥ6`/j`SVVkwCo%>=cM/Y
,_x0=;>ʳ_yO/[@|D<x0gYqz
od G[=pGnZCAnor%h]N.aOS|o@k>A;o+E - +/Length 2837 +/Filter /FlateDecode +>> +stream +xڥ]o8=>d]ݸi7{z}m%"[^InEIU_"r8i?`njs
`o`\/pCh^<Xbf1,Gq̇3~?Aqyz_].>Uya6]?s5dWogEɑqM?Ͼ|k3q4xq<@2g7TxxW.FF@{nF)QMm@P{N2J
pr +9rpع˶0YϲV
g
HW>[<X#<<QyKVu@e[J>5 vrnIMI; +a!$|kX1wT +K^Mx},y&<BNZ,247e +QB( "(]6٤<,d_0BV/=0Qi9ȩ<e7^s33 +]į"f˶,T=G>|2Z +86/ቜj*hC:b|P!9 d +r .'1࿉c*褲T|A(v hUf*W$'÷v%ДrCF:G jb +.TH!ʬxB8k[jpqUYT6#BlT +N!85V-X.Z<F9*P+0`ir-G#Ta !P<'fM-][]Hxc:R*<Ӷ14[wl0!HGLF +.*at%rf"RvPUaUZn.
kAY!e>Ě]N + Y!ilBYɜ:6l1VT1MVQؓ +$ +lYR$eGx6>._$b4gpQ4#U.9 [3c80j$1c"Lف&/Jv +vz4*H1i}X0mVcQ{J*bg+ +,[iVsrʼnJT./).ԄM UGt՝7|1uq A|rEkd.EH&{rZrfX:J;MmP`<gBNܲr yDRo^0 ++bfB + `S&慏/?MUQ6}P4X`]J.|ʶF0(ӇK[?-d0 +%sUɍBO댸) +)D
?PqkVQx0~~}[x~:tSI+G5%[endstream endobj 4334 0 obj << /Type /Page @@ -14150,18 +14068,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4342 0 obj << -/Length 3180 +/Length 3040 /Filter /FlateDecode >> stream -xڥrF`rʄXU5R%2]TD"J -Uv$5OҲPj@P}3rD{l#t'8!8!-u@\Q4]iE# -A6O|2&idZ:$rIA5QT).Zne'PÉ7YH@6-OMOZl)gs5[MD&h4CE,2ce"ruRU}:P,E5:^ʋqk,Za,Rv[I8ZgTޗvp /1JĚ̯G._SqPv92GzVT"%uވ$2du2Le@u|t?Ȋwh|.
yC+f#.TPQQ,4yQ1ASf^/r.(*dh,Rp} -)$疗`=qU/I%?ߓLjn/np9ppt^|BLoK8^|7\\-UzO
-;PMgۻQƚ h;,g9*cv0q:"2# -6^0x[ѻJX2|fveR^`\P4s}.|t(W9<DT -xo<TE۫O QJ6?S>fQ"cG -UDz==#~=9W <]K+szzs~u8ddu#v[>@~f 倫6L5'w[AmZDn;B)oy^0RpJ3>mD~Ǫ̾0J*p?u>O@Yݒka{#JuK*/:`ɐp^R&!(v#|kE5pGQe/ln֣(ݗm1Pr_{J]e+5A HWXhZlb
G%,:H_*W oO$I×~x@_##Fd܃7?BN:ic[OtvӿrC +xkoF/GMi>u?.V~XE"]Zh^Q0wgfwg=3$t=$rCV#ovGPxQˣ`{nꥳHw?^8_h@q87sy{qs؋*j8/~)Ӝ_g]xn9brAߎ~՛ep<Wƞl{
-.fjBKS7U]k +Tc5!۹ǎi* +e8B7V1n3
XN +-<hFJ|M5z2x֬7VrN8Hz:tz~uÓ-֙Z@D` ܦc\Qц
Xt-cH;>\ +RtAByHд d@ܲQT-xˌWJÊ,dfǦN|WMc='Lba+8"7bk[Y"6P[nQk@٢QZn᭕b9^H{.A]UҎa'J1]DŽndѶnE8kH殴=@p V(qZdj21C]?8|ٕx V#,NX썘:bMV'oTOݷ<z{$!4*amt爃 +J#Ű%͇OٸA
_U/v)(oIY>_ $*`ephU8C$;I
j5=ΑkXiJWO0!D
1p# oW1J4v<װwȍ'ir7jqil 6)U^tB1ʈBpTUK+^Ay7 +vKFlp0@iͼAح`A}-A~o d ]>s6W`keu/!suyT
ndu<.AxX +S:TFIC<VqC96 endobj 4341 0 obj << /Type /Page @@ -14191,22 +14109,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4349 0 obj << -/Length 2826 +/Length 2794 /Filter /FlateDecode >> stream -xڥnH_!R@D5>qfֳkyEJ"CKR&[W`a<gIz*Iʟo_o|X¹[﹩ΖNa͖λ}Z4_(/8q[-~xo|~x83/<_~O䉻O4d_yZv~92n+l揿Y"v*Mf=OY}CZɸyHw]R7LԹThW,ց%S|}[ʠc9MPUo~ơzEUe
`~`0krp_#Z(Znn@Yu^?3#(Ƞ-,wgEI~BX;( -<gC[h -q>yZ⊐eJ`JGf`ږݓO{GZ6| _K} 6\Zp"cЏ{$py3PꌕC6PdOp|0:~ix!IJ0!Z"Bm+Rf1z{^ZuUey3[HQ r -Ka2Xp|Mrl٬=/s}k]+moBitݱV|H6{- -bP;p>ip~03K\n|CYg&hb=X -36Y j_s$ -9XW ޞ9 -|KB,q*r^'B5=7d; -q@h'@(-ΌAb <A4?<r,C6揆|Ӻ8U;ڭM3;6$85YcG)2R]4%rg*a"Bs#c\7[`e%^\z90Õgh5N{?|6DD;*
-c@~f-DJ nI9&`*
˱hj8[܊YdDk -ͯ YxY310#&::NH8!B
Sse,Q:CB [
;PM5<'SHe -I,ׁc4ӦkzRꚮLChWRSh0Iiqڱ*5W^nrNqĠ_V&d[ۘI(aշh˗[0X +xڥYKsHWTUD=q&ٍ5hXKR/> +.ЁP3~X@08Xl/Oݦ/ @'Ս0ְ) I+Ku1lZݹV.'<{R[Cp_Y+Pzt+ߒVjP1h@+م!,9k[xpF2`nŘ8mhMe&j8dp~ꬪVj %"%O
wC;&.5&Zg<!L\~s4(9Pm~W%Үٱ)mx)uϵ=כ2+}fڑoHai.|رs6(xQ<Zl?Hjk9O,V\E.(>\WY0[|cuwz 5{v~]RTy# +lE'٭Sڣ(CPɶ3 +(ʏwhikR{{& +]T[pjw ~[&acfwDÜ0[־Ln'VbM4 +O49O9%B$h TI^&5%8vqhDK>bbGPmŞ={8nqۇ뷷f|X2Q +/ 8xTFM
D{I>ԌcLCv%'uZ P&g3F`@ <Dca9&E8wB+sO14ëlW>{6e3m\}%W݈'ޱ=AHiwhe^ L>Ԇ+I6"5pG@+{[%ǘsn#\!9\)q琬196 +^bj]h:l7sKoc` +@P~jYY/13N) JVLr^gm]7c<+עOhSP` +埽ZY\J7*uۨoe!p/{7nD^'Q4]̰Su#;!hշ +xWz*Bl^'I%
k۾pGkτ9_dM@)ZTX!gf}b +$N{Bˬ$rZ٘΄l2~I +}no$vc$Xl34X(oRF_cI⽭'i(a:c~-Qfɋ:!jqJ/}å2]#OPȜ4OS3kI`NQ8Wc1ch3GDB&W?IĒIǎ&kNb~)[fg<"3C] +ť@{VǛ9l/#jʼ9Bma&7^ὊI/)qAygmGfd+%]</ȰPHvK$gJxReڤhړ~0U}
S/ʤJPM endobj 4348 0 obj << /Type /Page @@ -14235,29 +14155,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4355 0 obj << -/Length 3730 -/Filter /FlateDecode ->> -stream -xڥkoFPD4wWsn'm?P-HvIITP\gVj?5K#?0,Ic?2j]
̼ROq8S~ųޛt|a -u`8Dj`PQk\܇V,>o-b,D2Oď3=KAn`T?_(8% -|aי0Ìtb4p}S
`:;B]6&dU:4~&D -#CDN5ʹPs'S0* -R_ApF
ƼľeA)9gQ#c -'ߕ#{{_3w.#H4X30+oeԻq #Qx:~rWm!Sx{h}+{Byu-a#)t -%y%))(|.6lY02^,!CC2=AxE1bn^mF*Hq`$øl 'o0Q~tAGdpw|+J0Q(K@w8ܸ@j μ
IfnL #:#tC.C-i b@;\1C^SYUj`aOH-B0FiI,i0K ؆K̘Y -#ƉGj5|!hQ -z?2҂+UiTf8}Q7\˚= يoJ -ĨU^U`dި؏T,lHz>RwGhbq@pKI0)עl -̍,PW9qg\W*;hRt`r$V(sTks1<RPwƦ0؎M>e+$(4Y`E6b)="k(e^1P$sŹcֹ#2GlԌ! -mLl10gvzTK@@!>y@j\9S:a^jvP -uŤ슗H 0FG)X#|XըiiW[,xΪgq{px7XV$T.6JJC\p|Il{u"l [զ| -Lԡ3_laΖ -~UH1L7DTl]N)>eC6Eh/%`{)]Ǟ$0~Wp.+qAwQO3s
'N@p\ 0\J+i^FNsc#DC2q=m|N`hh" e%l%nZ鹦LᰁX'q#?"JuBi*7$0㍩ -˸0sxc@wJY6=h]6?pX=$+m(wvŴڞDHRcO~s#}ZB@<PppU,]Y<!5isOtE<\|:wZ9 -6̭Uo`Ecj;{ΥKQ&Y^\1N}U 5Ġ't7zdTzy
o>`NJwːc -L -JgЌBujI,1sdhMj">D*&!*ƣFybJ#06- -c4"gD'9<ڤDk;^VFw2Waӗ?oJWۢ}Q&H -!m*@lxהuN߹ +/Length 3659 +/Filter /FlateDecode +>> +stream +xڥko8{~X2P+"}ki^Beɕfo^d[1$,?5K#?0,Ic?2j]
̼PB?#|3Yn>ݽ<_c</$n{%~ůo|Ի剛w_<ps}Gzϻ_.ލ\~5\䗋7Y:{v,.Qh_]^sWMb 448DeqB_}hU +N[k<NLA Wè֘w[Y>";hW9%'c7j +lma;3Y4pn|`#چʼnJ3xjOdx-H҈s'H;Eˑ3kvxF +@[[d
6 +(qh4Qo2t;y"Z{*4}:zk|SI}@F>4QbȺ`"AHm#):;9-&EY};
dH=KpAD-
>s<~!̍Le{4{^p4@g[pj6a7F)kۃVlrp,0۷ +12z<tUy{ ?IN5-❆4g],nV DCt[>kGlۓXWIU[SA:ceJbiUڈSଙ!A_n=8+R|84{_~grzT**m T,lǮNxJR|&>(`@S/59E
:'_bm6D6_*
N>I:s8$k|YYfO66ב}.3IPqd_OEBb۷kݧ$CԞ|3+JF͝mskD4uiLJ82[d +SH3):I/R$Y䩵Yn{Rf3OfAel!tC^VB2xN2IVtk#~so!,ڛYCn`/@,W8V:OD-|Г5Zh}foYH@GUm
$aZ3Ŭ&` +SG"Lmk)"z*ijXWe3bCpy;G6-J[Js rXxkG"ډZPБ<k=C18hgCUdGޡ, N Hyτq|3F.&7@ +{Е ;aٹXQq)TDfc!]"ualPVO'<D+L11&xFZil+7XAY.4@mCM%攂S&K0dhS"#_K|9u K9wW,[>wXWtg.^$;$ پ RWHN1p̘[]!`.F(ymmvwCCkMwR(n4hd+qeϚ_:/ylWɔu;;H!㱄X_|Oa}>ztI=^tTOudFɅZ+_O?s,77_A
D[V6競ANa;,k =ot]Reo laU(l*:YIW(\!QQ <އ]Ql/ť'Sؓf(FV)Ǚ(%0h\+z(|±ыI +̹tpb.u4;r{N臃 /r\)t{)ڲcݓsb3$ + @MO#dȌ-\kJ_^Ne/8r!!Y6-ѡkMLP\w0I,5(UQCb&i<l'S: +'ڳz'yzU0LST4 +ӡ<bR,=E`(
fXO11hG"4Reg@FHx0Dzdt0m +DZ2 +ژD<7<`N₌ؙ!dۛauL@e90q6IJ<葦g:u-6U6\ڱElZbx=wBIj?
-U<~q=eÿS`Oe +2p'{r5VcMݰ1MNEu|_endstream endobj 4354 0 obj << /Type /Page @@ -14287,23 +14204,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4361 0 obj << -/Length 3268 +/Length 3165 /Filter /FlateDecode >> stream -xڭZYoH~[(̈a_ds_qd<+Yۋ<D$+Q1̏ߺlT6l}VWWWu$j]rR<uFMl - -)'K:<Yli.i`qBR;8e2"3)''?[njmزif5mqh}gq3+͗igXSj܇Rm -s:~KYoF1`WV@懥,Wz
-{b`dU7;v{ o;[aά# -Yp!WUkI< -& MqB -..-C.b}r0AJfox4߄x,8\n@[.xy"CkY!l1t7.~X6g?|/
{3 d}}A4m0(16MPKcm,3tqHq -'h[̣! -TYBB!ӚEFfU[Q{&ئmS2Gu$0)1U*Yu)U -᭧iwQ+#vI
ud)` $>En/qyCn ЇI'A㕚%Eˋ -JDbSGw3kCk9 -RE/0-681۱~wl7ˊz=#(<>(I
۪"Fq?T5ɦZf˕bY>/Ǡ/Wc4i{\\ǿXTp$SE?Kd'<B<#Iv?w~`p7s].YPd|=Wsupg +xڽZ[o8~ϯ[eX/}Y4Iv,03X(%70?~ύYn]t"yC;ZM"S&Kبb{MLIhb(t~w]b'* +(=P/o>Ό14uTo`
^3:t50.t˄ۻOXp7P\s^]yۻ"g6U?6YM*&30F꛳۳4\f'<jD3$z23Qmܬ3lW۩N=F.x( +GC\0i\Id@CtvryKD.Ps^6:3p::WBOXtDm+s8Lu_cx7QuZGwX + <]T0<JG*F,nYcrdQ̏nC,Sdv4q܉wuD2=fD
ffs!I;CO/<X}²_R:tȸ8qιFťMC-^ءx)LҼP<n/k|]T_At&L2v@U3ꨈA?8"602ib4!j}(7A2%Іint&L譸uIJEOO99Y&=_.ؗ%&n?nxk +139 +kbS]C!,7mɔ,P>l9R[T+B~X+$blI4z8{8,76n&XaA'rf?;ӊec̰m̤wTbLڈ)G41]j-cbWo$vj0AQݷ +ױtPJJjWIqbSNamDj +.KVUqߑtɬ`'[@b5m(3K/r=rYcKܼ1#+"r("QqRheo%:=pQnmͅ=jnf`?E$fRuQ%~6/((6ge> 3 D%}.`D#:v66
MqʲpM8$ɢ-o.bJ@lI&[z !(686@i4c߯Vܣ0Ł7ܘՄێQRYm2&_^sA? +=?3UxI{HҞUrnD67Y$ %䙠vNgƝ=AB6y=k:0~Fl4d\fް}8xB
cPuf!Y>LΊIQ6Ⱑ6;''#*xPw]IE<5yz.vBD=9 J571 ÔOdt^d|F- +iۊ
+#)wB8_$ +R)yAlZK5~2ìcm&c8<j${3L,dhWPdȿN/ł'μ}B-qFDQfk^sxP*~0T*~m`50K9I, +Ju^bsD(y8O:`oMJ|d*O'*d1K hjM^"W',C%+6=6ѓ#?]#YH+ 9 endobj 4360 0 obj << /Type /Page @@ -14326,25 +14243,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4366 0 obj << -/Length 4128 -/Filter /FlateDecode ->> -stream -x\ms۸_o;'ƗNg8Msm|bbMd)~}wH(Nb}L1៘T&U=)"3JLnN;yv"xČ̂1W'gu^Oz9u\>٫?ΔRSy:+jTL^a~O/^㯜y~yTV7<?'{Jc_>g??xzՏ'O<`jB)_I|<u=;FeF+>_>E}zBW
iɨ*3:T0rRzހJ8O31ݶ3Yزb687Ǭ^txŊнش7gjږg$dwp͆;o岝S,լzfp OА8-S?a_U`,tNf*XizC:9Q[_geHtprIZ/lwn.ݛ]|gIJOty&mjb -kXY^U@A:aqRK:݃9d/N)v[U6H V5\iJqwN
MKh3lQ(,jx,pr-MQb'(;[<q(?*Lk0sf\E -fd|,Jg*QiLx,*<^0g@aHUg,Hn)<8V4kTB;SѝMD@}"@y)G fE -%1`U1"`TQGH
p]FnL_>Fn}uq7/w\>ѸQ|.Q|.q7.wSCKoo+&w (^F($,EXw2,7m/Es=_00Vf+sIf/γ0*/`_m]&r|nGK`pa2o6d6"-!KWւh3mo,:
ȇPNgEig[l˵u7|(ay^N'qϓN,6E
c)ӷnE)Sjw-5Z q-Yk~՞:ՒyUecFuWْXba
\`>x]Zמkܸ[}^`f˷'5v7>seiˮ澜E帰d|ip^~vyQ<|MGNbU+7ԅA1x -{b+WC," R6NY l (Rm -Q>$LjJ(LjJ8NRMRoݳgTUg)9'&_JR -&xE^=0LRJۿvC1Rh+:G/1SLI7E~8c0-8IJnT2H l%)%W1}y˕.R˗AreqR|$qR|$#)HJQt{IIIHT";aAy5̈(W&Ȳ -`k̭C+(
ͫx|[xNEQB+Q^xM=NndQZhr#:Z~. tMsYF%InaMkYD_>%7q}9O/Era$9$璛8>Nnz9$璛8>NnB|OFI -x.sMaɍU*Ev"Ƀ#!D) -s@, -g;qF&E -*A[z|Z9 -3bQ?M -[+ČP^g -{$ +/Length 3229 +/Filter /FlateDecode +>> +stream +xr]_%sJR%YM,;+maI(
~}IPc:.U nPM<Sw=O(p}&Wor=/&.{`'sc/\\Ӑ8q:38=aOs{_U;oOώ_Ou=玳x2G1g//?\tYp/dsMM>BsUO7o/}vObfus6DQQ.X +8)L3"pD&8W'cr|K@GOCwVWh4OR°\<)*Y,9Dd]AvUdxMFR9P|z1-&RFV{Z +IǤܾ,f&iFbm"bTi>-"-ery*B\Vk79{62*f9^m3
Fb!Cds]'|GT4߾/B^!B")jTj2 +w(3t)a
aqT ³à;bx%齘Ɓ\..$ŦpMy 2\t`\ehvخ3\_+@bߒŴoUZZk7ԙѠ5a;<7ûFĄ4/ӱ-l`n,k`_iЗyZXA!s=>Nc{j:PLq$^WVVyDY2kh/~0Oh4*te?VjgZg#x:V&!<F\=/6 +_}8|^`q<<&! +GA#{`q8gK4]dnkvɸDSGd:uv3UP uLmU_N)(v"7=."uᰠw}}?}/ +|3dz]+<O}3ݕ2n!ԗD0ݐ;wHΪ@;mq&:|;[TǎH~#R&+!{{I"(Ło2FC¬yUJ 05@fm"`Cwkl[7-YvVypv Ò+%Nsw"+nk pD{; [ GaВ6XF%|,~XtDiE{Q|%+F!'F#_m|j辟D`}_am~Ead*xKf!xBS9
7A{N:t#>+K|'lGS0
gܪ 6'Sp&<c4Sj{olg +_D==EKF)3X̽aNZ`]I|}xn.:bOn\/]brG~<=2ra"NˊǒWY=r5g/9RTQ$l +F5(:l6DQd.$E{{ -)-NF;7jf`o ~ ++SVX:u*U꾂 +LB+x +h=%=F@%T +*@ c9R3"AQ7؉axc7½ۋ.s-\(D +gQUgLӕ=<7ͳ~zG6=h%^J= +۩W!zy-֬1C"`8PU$AS=E*HEďTK~뤚;h9]"|%
3S234q8?<TPO1ݮ<xCq^`Iendstream endobj 4365 0 obj << /Type /Page @@ -14373,31 +14289,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4374 0 obj << -/Length 3756 -/Filter /FlateDecode ->> -stream -x͜Ms<R)|#7IvJ=>`%j2E:"ק{g0 (S.W$0h<X1?1LzVVEf<ϰA-d9>BDy=q<3u1i~_pPJ͡,թ??z -?7?j|{nӵyw?߽y{'oxtiB)O[NL|3Q׳mTf듫Xn[,dROW%NNN"k9t&4LY-?uV1E&uۅзOb|Z.| lO*L
领a>Yɬ,,SRe<t[,/; {Y],q֧:ԹQhv]e9tdYB(po=CZwY֙j8˵4l(dY$_=A>m\|bUdyU͢/xJ%`{n[U%EnV5,do]/FUt4,-lWѰ|.)Ţ!*avY|X)Fq_Jb^`^)M.hc
@y2+$ -*?+Y\i!7 YT=tx8]ft9|+Q2 ަN_f-)(f@UZhoA$6pOde%aCj\o!"u)XBTi -Zye*WodUe]Cd0i@)JU7=Pկ"X<(VCnLlPtACYeEcʁֲ{V+`H IRu /YY4łɥ耶5;&_-uEm]px1dExQTfPQ~9e9Lc,鵳oDGƅxu>SU\j;._acj< <NzA.y>y>1hHI<{,/HTm0"QOQ
JbM:"O+AQ)Su@/YWf<TcT:ՀòHJ&@
ǺAͫ7j'咣Wv}X5v Y̠v"ξjZQ;m0FD\oN|+6_a6Iv6f+5vRyFN -vX>v"y -;w#m1vtدSpAZDtoi2Pj_{^GS7._R -16/%E|><otgu:ݦ&+qԀ`*ZDj&O(a6[ -ӆ}
,}gMHM˄k{|v}d-7ee3*.upAx~,UV∍N(ey>[StFݱsn^@sHP>*Aȃ~D^L{hs.jNYm{}Od7WΝ+ڦ#jO]yHWT%1vIc9ة-:Sٞ~y8h_c>☥SJ=a:ԩ
0Ix}UG: L,_Պ1_lLVXnss$h -kfUN)KA8NbZ8mU( -k5L0|1?vWxeaciwg> -k7mLWXy>Za۔3_ae -kLV
S-ztmLA-,sxFp<P'GIΈN-SEFG;zw'Jwg -аʂ_`59>٥6S
(sgLCjy3 __eAj:D# -P*63wFSqӋs[%Qq1s;\ -/?\$|^|$;9iL8Gb<4wbb<SV%ԩ -
$5:;xP<ĠGxR]1(o{|4SQ0ёև$:C9~)P>gQ>Y_Xy\AFG $N$c#zL/YP/cgO HtF~d$ -q~(pbq}4
kԏ$_A -W䫝|.#'=#'=#=
/Z-Wʊ:ryHjtBO:zzBO -=7H%C,\cyʠ9J-q4g82oA_L W<yl|I00!IǐG8`zazaN$zwp&g,LdҐjL;gbB-ӗEv7[Y
6y$C>l76>;kB6zgy~e9\u{H
bj2Ƭ\n\߃
wlYvV/dA6pnxG"ɯ:Wj㝧53x#
Oޥmёoq,m#Zs~^hHv'wS;>B,"I;EgKw -fEvvvItd8MV/=/0iF?Y"j44r<!^zS0(tܨA/ga=o1r/l~s~{7nۢq-!Xq)]1sq]}|~KW;n!Ӵ[7Zi:vݹpAw468);,$QbE9Y7gveɞmOlYkdk1EG0]rc.:ۙoYLzU>a -vUvA0fZ{ᰶB*Qh@G.iOo`\;ػM@Iw+Am聦Ýd4<fFLqQ#L-.tسfoof¶Zٛ5P
z:Z/]^ot_' "sQG*~@ˬ;uul
09vҋ W9bmpu'r=ٗmv{r?
~]W5tLp"> Nv.ShعMV anݵ"n܉ګYM:Ȳ=
/}-Wԭl5e2xxS8+xJe0H_CO@RWgߡendstream +/Length 2440 +/Filter /FlateDecode +>> +stream +x\[WH~WQ+.d83=yabXoUWKP6C|8I}-}U]Utu<aP:AJpzun3-t=_aU_vF^ԹM.G;'8K'pй2Sj?];_<t^P+>O*я|J?/Gg!{ҕ@)s^g/ˑ((L<O.~+G:١^,zE܀tAăDc:Qm31!]BW~ëV-JF_M=$ +-`t5#7`J@7cL6 c]'sU!.WC&UWzlJI(ɴB#݀[mUh-5x^.7zꓦ \m +)AEk+"H..-c(poApj2`r"ǠړOmIw +bN&Q! +I!ˈ|O2qq{e6X+[%cF:r9!r?gXy)HĆ)C~k(k- +A2'|Agwϐ^c*[BLW[2 1&ssf6ŷI6OOif4 endobj 4373 0 obj << /Type /Page @@ -14435,18 +14336,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4385 0 obj << -/Length 1870 +/Length 1811 /Filter /FlateDecode >> stream -xڥXKo8WUI^EӦmH[mM[JbJ
wl'v.59r^<xx\a$q^da*E
|ŎcX<QXFx)0-|5x_ϓ" -I(2PF -I }ygmnj
-p[QvvÔ2(;Nd0
hƢ~F_1$;O? -25ԕljP
^3ّ,>]/oZ$4((dg-h7$1UcugL7
H?e݂^DB@^y,eec2>4=Y˰, Q_*Jj7༔^Ŝ.XTP=9'fብZsI!(][ʂ2g,31Bqai`LF )&"X7
xL`
|..qR
voMނa:P6j>,`|Bb8+.X
mTo!o[! -mQ\RiH,Z%:ΖC\B%s[ٹۯՏECU'Cs~+~ӊ -@K%sX
>{ - -SHۮ&d~jCJE>Ʉpj!At0ֽ PByZ3qAPܥ.O2fR{IsEYZ{˥Qt!ޗH3CM\H~fz^<rڤf/y`qu49ED=~{ $xdlǃYrŢ[D~Rm0*cZZѳH,ik?ޘ'j(a&}ny2A"%GEaݎy;d܃a@c%?8x˧إQFnxrB<iqPAm,$'P:C8Õ|Ҩ1ʛlFQʟ[gGө,t͏ںyd='rN;( iq/o
MZÿӈQ +xڥXo6_ae20Hдi
IE1}m*$7l'a(PwG,
#$LU<\VhλA,P$E|D(̣|8_|9xR* +>5_Qlx(|X
tT+ٗ!:y')d&S4Ö +I []ayQ!5嶆7|UݘfzÔr[>t0/Ĉ +J/נnLnB4Ę<})[SEY +KC@J"-+X7C+Ռ@ii0R@(C:#c!Rpnj 0<x`e/Cp0?:_͠L Ra
+#mvgB:<{xxPb{B]ˌsFq +55F4ڙ҉2JN#(I+__R.G=˅,o1xW1RIHoF/i&3AH endobj 4384 0 obj << /Type /Page @@ -14481,26 +14381,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4393 0 obj << -/Length 3103 -/Filter /FlateDecode ->> -stream -xڥYKoFW9Q@D|I`IDPBRco}U$%у.c6U_=d3,/,ckUxRD(ʭtFXaGYEIbcBߚpag\ql6q/W6Iۥ^+^,}XWźh[>4n <aM0y',}[.VvA8Р.yXAwBQxE7ȋuUӣA&=/?#3(#
Vw߄eDRLSHl[X28朕\,?lby4gsh]a] -j4,ZIv<xB8[aO Fb췝,u`E܃PvCaR1-ũL?;/zkXu8XMQ3tdx8mb3W_+5[Q%?WJ'_frΘ9=)s`}C:7}Ӿ-ȣDlnl1-mSTYݍ$`-rX,[<?oft{*acKW,
uzrHoӔغs)D4[n;thO췴gGA"ZYt|cD|VEk
Uev}9T[>p0f[B%\cOmLsu rs'KT -d1gb;ѣ+CB<2xvO -0pK%*3 -̬ۛp.a~ER_$bcAJ|D|B,*'xNeB8nhhdߓE n)gX&(P@Wڣl3\ -s^[_u=yL"ݰZa%۷ڎ:Ui;ܤ58U#_M4J5db5L|Wux7#}iFDd~bpd2 -Ǵ7GLh4牲FQě~3Xl)*m-^h&+(ַ_Oy&8;:"2aG?ߪۦdDP3wdFE!Zbh 3S278$;=03/ytM}rLڅr)+ޜ $<crcYⳀgx4q\c, )ESAy<}If4]Kb~$XzTWKHYlVҹ!lff:>ʔ>4sa@=rT$垄ðưp{?iT&CN!R_xݑs|4VeݱW`[,nSu,J+=(V[|87>2AmD)GOD3" ̢=KuzI@sӞKB+|OȌAo?t2?Hx:c+_33Xr ԳMil7cY\<ܱpY$qNކMbc;zhPW:b+'=>G.v -d<)nswUid ?@j<z2MPφ? -,b88[iH9`t'9 N44adSmCynf2fGxvgtq"]MKMcty.,e ~Uw)0@; N'S /0"&핪ٯ8䷱k.yO4'xK-ĺ(5~L6bI!?L-=I<jƆ'J%QL5d~宻(~D3 7娃菼 -}G`"5ۯ7ҼL -L3ɆYA8huLMpCW-7jdgi SC?BqKV3:)lE7IxI`MsY~Oz -;<fd8JztmV\¼ {F$~g0d4j 0h_Tڥ|XRZѾ!I}&_A)D84!78Q {ѐ"%RruBSg3&) *pzNÀj~]k4^3y~i+i7p-?ɤC&=:Ti{"]
$HkRP<swi%~C{;!YOO -i~Z#Z\I-qleJ9ztNN>( ?`3ZA46tUQHKU7ŇA&d*:1Jr
|1QQ\&uG<b3xv8v+ux&BzF_Ǖ -\2d /'@fOQ\/thKdZ.dCwVJb~T(QB=@+U+#:MM iܧ; ɼD-L>dfx4[iNd48y -s?3Lo]Ł8-Pz]1*)4};L_NK}>RjYq>s+<8wr5k?%=t}#Y\w=4F8ydY<wHs rdz'#nLU;f~g|*}ș<ѳ256JAfC|ystM -h^9XroļVږ
Q'GDssC1aq|0Fm=\~oA4`@ԝ̨Ө``FL2w6 p[RH_MjǰuRLRMte2^$/SʽWGVQ u> 囱͞. kVͺߒ<@h9`;7K=I%gK6u;nxS)ůyڇyu[oeѽ>q\GNCe@z(-uKaJi`<<2Wendstream +/Length 3019 +/Filter /FlateDecode +>> +stream +xڥZKsFWrB^[;^oI.9$(a
+Ŝ\,}n;Kf͙@`rX¼<6
N֚w,2R%d3r ++aLӶoKr2=3';Ɖdn# +o+3犯(ZYJ*d`Z=c>WL (6C7UXM̬G +Ɛ+!pؗ-2H@| +?(C(vlnDsQbqM鮾27L vz鍞bIޤ)uz)D0[ǘn{ph-{ZRx"ZYtxS1E8xVIk
Tnjc+rμ߫-+,冼TG!1]u/ \Z>Y@^ +=bvqWc܂<2XvuO +nJ$3Ƒyw6t'Q}6I&ġa@(M5j# +DI0|zEP=d c7// y_9$lNnuN(t8s#'iZYV[m|)ӯ5m*vݑ-]J~wrH15L|WuC
omzp?Cbd~ӿ;B-]t7_JGL;i$&^h@YoW,x&40+[}u{$*q"tFK{4ܓ꿛i/,7Q6F02s;uFpyZr+Gԧ!w.jW<M"GL.'s3e|ַ8.Al+ ~bw +@.!vh}y!&Ǎ}I"P4:(,gbA2R^.=o]Yq`\&'[mF8J_XKx8beu,YTn!d6!,U Q.2뉜O]qP|`gΌǠM1҅ľPp營iNQASXݝ_DE
3Z&=ҸK^Kd܊n-aLQ^6@d~x:qAbF(M9j7Ů,z\bX]2FNކW6$Uv0,c.Ѡv:b)ȕ&}WO2տSGg~eǹɬ''9ዿ7FF +}%MHbNC\LH9<>4l^0O@1Z湑ɘ7>\i$H~Dolٳٚݥ"
?8 +zК,ьf-}$iwFaS JiVn]9cZ/Bҫri(R\-8\o7|):]xO.pͭDF\P*@7a̅^{C80:1-|<sH3ɷ9CoI{/#n@V0>T2sq- xJRˌ +&>_jqNUdOTf1lFQƞvkҮ]$Eq_bR5anh1L[}kAڨ|A7Yl}`76u'3j4*Xx4!CJc6F× iږacVbiq D \1|B˵<DkRӋ?s\g.C0~]c{y8hPK(n^>}5&x=RjWgRvr! bu|IngG-wyG0p86INH]94m \TZT"q1^QEyu? endobj 4392 0 obj << /Type /Page @@ -14530,33 +14427,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4398 0 obj << -/Length 3864 -/Filter /FlateDecode ->> -stream -xڥZݏ6߿(8g6]lv>ȖV#[$IQ<$rH,bF~Y~l fkMph>ݼy3Y͞<YGY<{*~}_'?_$Ie}ӯs}moy>|ӓىP -z|*KgGx|eM)? -oo~sq_8QSB *4AQ -"?+98BJș!BE`t9KonSfop%Hܭ>#`1.UrLJ -{w4ZV@PW\ OԇCqx:&9[D*٫xӦlB&«:~}uZGԷ-u){l!Uň;axoy]78ɱog_ -G<7Ɗ.vَk20pþڒ|<ؠÜ7<V~+vUOFp$ *g 3R)1:-O
MX̆6%>7 -Ȏr; MW8|W>Ǿ -NefynmpcXrIRz/%Fڝd(S WCCt9"d}(M(#y}MMsQH@ -$3uǮ{|j}_5 -WmYܹ^|s:\TdңIEVQ1,ޙTo\(zE+kv*}!kD3@v+j2]4t9̍uq r%u܉B[j[;^&Ўl z -HpT'\dq~qVXkڿh"ؐ~+eoύ!~d4g! њlaG!{&V%/G[љ̣+\z#-5{U^sGGgoi]Rp -%chP2
#]*R=d+Գ
|ǭٕPm H]qΟ -8qIYkK}JMꈂ8*^)ld״)(|ib~,
CvGIݱ`pƚ+ L`f<374{xh: _a/x/|Qu
7<]B{V?;u:("ۊX!+6"RRvKbWF<s%Ip+es0Hz`0/
UKͬ{ -1&L2a $ -VO9tHYV$;J8\v6 -#
~" Ep= -WX,ǰ"2J=w,ddB]T`Vs+2?ub?!km5@ϜR0XԖMy063|;KYqla\Iأ@{vc~4
aII0dJ^.%5jȪ4AO̫ȎI_}Híǁo=vw; ͮ6/^P\bdH5:!%ťRdkMJFt8S$ľQum4KaY -mdl6O_]&x ʝ[H RyU_
"jj! +M|Eʢ|e&]>Nj8oc286D@}F4g -He#)qE3~F5@j (0rp+mhEF;ґ?3i0JP8T%QӍja/9͇{yM?j - -* -'ag'%mT
ϝcx^- -tZ6_;i&19HSu=WJ iĹ)2s:~Jմl)by sqg&w״Zd0ggV{X&IHuA:f=|AW%|RF'x\dGni9e<]Ә+
RC HSȖزnKP/
`9+4@i"Z=̩^KHCX_ʏ*£[xg0<U
|( -c*A._kQ$*%.R+gflG9Yvv˶cPD/[d}d9}h7xn5)'%`rHůrlh8
+/Length 3746 +/Filter /FlateDecode +>> +stream +xڭZmo6_aZ-t$&m):7/$%rD9Ùgg$t I䆁?[mzuk +o&]/ +՛wzH__|""z.'w܇$p?s-@t|4@~xȴկ{s4s4mdwyx}rƣ&"-M9E2V=PO]+QӕH}!M._}Uow-Gz ȣ.B*<974X@P<#?_f0aNuJ=m&/D;EO٩E#8eMƭKO/ +dPB1HΦĿu@P|!tTɡoTgWc}wbxny#)Z=M#o +C\3Ee>0QeAf+tJZ +é%],FNbh39N[5Y})<cZ(u88o!yy9>v{y5aCGр2]\uT#~TMhy+=q^*)J2I/D<_!ȟ8yIvq#i"\ߏ~$8x:4UVj!3n;Q+2z?7G{
?˹N<RI\slyN; +bB)("%|paS7w>[ׇ'nilDb[3Öp¥F2jevqO60L[vĉ0)~4mp@&N:2'6\s6GuW䎖(q{ۘ3OoC⼂Du +XؗY' +?!Z"N̽Fa"F +0tM2)<XV(!@xgkqN_̏#Pǁo=vw!44/H^P]Vz2:Hg5!9ť\VMJbSĐ`Q6iL-U6:6;Ojmg&܀@^
"F3_y^ҹ-O&anj^7t( +,miQhR}<Ǻ# +k9a1Z$`bpo0:L+Ed +ҊO:XLZge<0XC#14 7Q7nA13TY$q?'Ys⮬`dm~I2C]"OVoMa75(i]u@ˎ
oZݦd̿3xr}F,{[)@ RVPx=ڠԴ]<z)P_xVbC(óqge|>r7LX
Jk:0ldu\"ަjڃKH8n{T*-LGC/rȸK?X>S;7uU t: +P8egǔ5Ɔ>\ +P
h%0N\b p<iq:Ք{%m;2w[jy ~mChlI<Z߉H٣)ePKkΖ,3 +OhcR$wH9O϶Xo`tK8b0Cc̝bԵ-*3)=K^Sozt:^tFh}|˒P7VMj&>N\Co +%ڵ%/LFb1k!pp+oi=QAlds%K;k6
{ּ~n͉@nF"ïU`WŖ0{]{sºsop_!*!\ <;!Cii>[UTܨ4..&~<TCa68`:,}Ǜm} P./,H%Z{G endobj 4397 0 obj << /Type /Page @@ -14579,30 +14470,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4403 0 obj << -/Length 3458 -/Filter /FlateDecode ->> -stream -xڥZݏ6߿¸hZDR}9$isMlڮܡl˶HroHIki Ȋ"p>~9\/\TH7*\l7b# b)$ͫͷob?jdb{_V?vTJya.$^FV8woonCMzǾ -^]=pVρ$RǛ? -[觛WYlqFF+yno~uk^)&UZ @+a( -1~R]6J]FQ}*O[ƾO-)oS EZ&jQ8mGs -9-|IuR&h%n~O@snhQ0
>y{(heX'D/"2De$R -TP`ÀM
6c<[&w<Wyyy'oIgu,`IZGʮN|jH0%z;jlWR$u0ԏ$8-g@SJq# i -5@1QofB^ޅxkeҡ(:dǡZe3H[Ȇot%$ɕZވދ{`aE7L$Z_X -|$7er4kD&=(w3CYf-53tbC0^xh^ gp|n;A3=86]Ve$G.iۮn -PL;#lmc`
呶> --A٢]YKyg*ֆx2fM7{ Ԧ$e_1/xoнa6:vH/Ykxq -%ȇMxo,1XrT/6pq0{^fe[ 4m9|:/d|+ĻWܾBnk/xG\?^P$n;Dz+ƃf^Oq,IAu@C
9E$ -yYb"LY
=hf[ţ.T2ldFx[TEL/@akH)7@nΉ[]<@-OX[r!kO8r0 - -{&ɂcl1VGnmKd52X҅kaBpߖG1V9laƶL,H#mp=lLB5 -3aL>j
F`WK%0=ѢK$8! @* -$)8R%rXqȣ#z# #Ql>.W;%
<]TG9$ėЧ8k%KZ
J5R*xXN]$Q'̵sxw[_-;Wg:V$ʚ!Xo$A}l8a$n
}@}7*\ 1kL嬁9$r>p㾀$gM}gM3S~SN5FŎ -U^槫>`{6y -9.oAPn
84mil@LO -(Ʈ[NWeFru> -ѝM%d*Q(@V拄hVS"Fԏ5F#B4e_̆gXe9Ns)]?P&_sLDwfI,-<AS~bb'rjԉgГ9I,GOj@gbAŢo5p1.1!DKaމA#_aZ.UٕCbX9VSqdvtDk?H=t1t{VA ;_}I`,Y,qZu1eefRb?GU[d!KXE VQKwS#]Iޟ}wG-2 +/Length 3349 +/Filter /FlateDecode +>> +stream +xZYoH~%41$y"k]d@IDLRO]ݤ,*;.fg$t=$rCVՅ7px3zQW"==7bC,gO/?-z9WJ9^8q^^߮H;KrW)Ч^
0b$\:R(/l
r|*Mf\?MgՅj%/v\`6W$'tp?\ ^
=tاUY5MHoyja̾ϥgu'~BkH\eeijੰZE=Bƃ.v9\v4Q+)me9T~c#-slFNQw=dkfj6ܗYQ˸k QFwE;0gaGs}ju2Ñ&I0,#~;v4.%kh~wÒ$UIF
46rd +9w3ýt44e=@I~2q9c&eLhs8Ċr:eƶ*f>ZWHk7Le|!,T0<[ ;˝1)]SrZ=Y +WJ![h
kC<|3
z{(&PvZ˺b^=B!EZ˦<ގߎ:62GκTh:$3ƨU^:M4zIћΈg=KdM7Վ
@t.S6[>HrmSCI]6g&6lBOEeA7NkG5#[Oȏ-,}N0ӲkQ|5n\I+e*]`&[̘d%SH,2!dx^7U%SME! !{PYSIA[H:hg As%&)9NI _'"Ǜ_{ldMpyeqjO; +ڞuHQ)v/uM:EO6".oʜ#'4!@EC0l+n3
ShPMNTV>юa]N'gO2ky$q(]m֝0Ŏ$k3##.:!!No +y)g,Y>esB,. ~$NT0z*MI@fUY;夌i=}@Cޘ^xz-Rc*5 )m)lyD!_tn5:Dr +~1ɧ|kb)2~laĺg-H#gH-le+L53aL!j
`WC)50=hх2,VrwLy;L9[y咽#o'.6c˩(mc6 +ܛCK4δ2u@Ov`C2yYo97m^N>MʈTjV$ԒcWQ1Gmx=U +mz}ϝ6$ˠJ=u, /*_xV_ݙԩ qFkQXW`pW9_X砿Gt&(ċ*@IZw#zƝa{pz +R֔<rC(oe#1ŏ(kbtUut"Q2cV')ZJupB*hnr-/0Z4O$Qjv㝮˛-`F\5.Va
AHh~>Fu4$}[w*ݚ7Bi(5~A\qל-0ƱOzܸ!,sބ@zS[Ա +mc?s8U5Hb7&~ Z0|Q
(~kc}5&ST;'TF.Z\1ic&S=WS_ihG9+Qꑝ+?tNl q%Pp^I',gN>_>g%Q?:AMihpKg ]̢ȍR0&
)?EFbv?]ObMrU4 lJn +a +`uA8A`:p#[?T?yc endstream endobj 4402 0 obj << /Type /Page @@ -14626,21 +14509,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4408 0 obj << -/Length 3536 +/Length 3241 /Filter /FlateDecode >> stream -xڭr6m&G8/i3@K̴D*$e~(+r@<S$t=$rCFՙ7ZȏgJ &2|x<;#幩:i4z\xvrǓ8N8q$pn>b۱D;7w<v#88pa<) -)0|u9ҩi̖tRwGq0vwnБOGbp0t21Cd.Ax}GCxA#! -,rb9-6' -Dj]a'h.snΞe~*q~L*Ge5V+./g;t9ZpYVX;7e3 '; 2
g`7g7c7|Q?ox)!". -4l*PNRiw%HEnWyd
G=)
ޯxfl|Ι<UTy|+0+PZ@2t:g[6i_(UY]iQRmh[KSyp.W ߽{tW[,slKeO^A4붃SY8!`ۘ,"-VCn;{Og - -'SL6tQɆ|%@[p7(\cu;` -ڹ۾vEa",>kgt!?;f 3>7]42[ *GTtVm!!LSn5%.Eh.AV(3JEtt64o>syn}͚DSԓH/{63 -Fp7Ʋb6涢Bwr^UOԜ*zT{RW%]«h<Δpt<{xr`Qn|<f-(?u`S%XauyS1r9a$ŷCǞq;7؇ʍCa -},jb8B^-hF.11O>턽H[zNq -<yMaq1%b')>xx@S a#2ewAn +xZKs6WTUDG:?֒3@K̘"~(OjR;S:D7@tnȁ;Q(C;Ph>qF+x +3m'avr1Gc'N2-e:~<QJYk'Q[gc/onfHu{=v+kvu{ô@o͐pa<)0^Nǿ~:4m?T?O~-`?8J+MJɿ,LG<j@AC9vC<knZ`A$RS^ +mX8˻Z9Ce4M^i"h8ryӬ~AJV-eV#l;2P@YCj-3+ +lTgE<ZoRL"Ki;\M]5RاdW"xΆh`ی'W24ݶ$<mQ")7ڧL$bheDs\iUvz'D}M؋xPk53,X 4 Y +"`&7xO/jzBE8C!aVyo"hŨUff̘ţRɬXv̓0AXA{ʳbZ'I´G-mՈ#07LO2_zӞe)UYjϝ#|4<UB6Z܀d<b>v.;pl6*~s籮i%<_`9;yRKhmڎϵ1m)4$bВ3$nvШ9U:clz!ZJTm5Cm`ԯvW Coߏrro7T"?8+OE$ѠZ~XDDN/Vv"χ)wsN>n6vpKyg :v,78ˏYfG^^i\^Զ<g f@~ + +ZKZ*%t#.iZaCX9ՄЬƊb3=wW~8$7¡ ;Ќ8ӈ" +.'$J^V )̴oy<->c$X"p2udmn,* +8ssMj[M]t(݊ԮqrJ:A*Q&u8?pq΄w,}>-Evx&{_ͳg.!\-l8 +أOW;UM_Ef+BiW^ +=By>]L.H<(8{D}CXw!>7N/Ź08#z 5ͺk[s+}O
mP)e\'xLSfF͜P`vkQI9t/h<߂};sbצô-nW`)g@%ʇvg96'M@zf4mNH.5&XRV]lx&׆!G年*M6B}{?K endobj 4407 0 obj << /Type /Page @@ -14675,21 +14558,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4415 0 obj << -/Length 2942 +/Length 2826 /Filter /FlateDecode >> stream -xڵr۸_ά41$@do6qXvh⥨x('ṡ_0d3:3v+ -̅.|X -VCOӁEx6s,
2ak x]+k*ʬ.vxcid{B60)wS!dt.b@hmS|Z! -߾ dc"oadsZ>}ٴLmGURXJ~x|5C6w:!j;yL&(
{" 2ٕ7Oym~(HuGރ|sClgʳq"V`K[[bO,ՀHZ{ZN
oFB%;!
l<R=e -Bs$<=HdÀр52&+єwx1Gp -YHqg*owlSyBLk]rnz?_ePz[S/H\4$DT -1Ø9:nw|3lo ̷@ƄJ -
32uv<KL[d$%|\>k&oSIzP9<Ѫ)
Eb'vb}Wi -̫6tw#dz}
7w9Ǡ>:2l\KmbMӹrpgLG]KҾ3Gyf06u#wMbԄɎ7&D"_ĆӍ&>ź9Qx#qO;
>)w8~ D=wAյ&.g6&O`N_$% -#'nt$aBZ÷6QyutYm(jE-@BoR.ӽT -72JQchӟ-|t*^INF!T%acz8Qendstream +xYoFݿB"[&]etnF"eq%hD;6`g~5vE؎JQځrY@8v +r<ks[<(:#-Gz{gzdi͜{v
H+%⭬ boD$-db/Ԇ3/}I^H +O--"p7
?CdwG:ij>/~_74 +u_BCO(DxjhȆ 2kMVޓYىO|:8ͮ+D3*bpY+V]'gfdjIԬ53Fh"'sb*PÕX~we^h
'QD3JEv2|e| P0n(O (0_EG]5l{XۡOcm[
2MF& +.8B.lS/lW8D95?ϊT49h:Sw;ģءk45|#=y -rC+]k +
o nҌ<FYñ5 +ٰp~;isռҳƄ1<?6/(@չ|!S
|1'̈́X-Ƶ:0u~7S +kv58+~1SNc5\;vcάĵf8u:8 + +%ͨM4PղJ%D.H.3hJ!Q|BgQaJoY0-F? +[k)5)ip+a3NBfTĜzvI(;<O)dpk)ȫP* +gIa;o==q{@5&J,?@M&ߦz?Q,+7J*grhb~ZZ)츈2qDfzVOٸxk
͕.$+Oҝ!PQ;0,R˔qL9/E,Z-9/\E1ԨO0 +)>$0+Ru +3TFBhv#*`;0p߮8f +:-*7Gu
]nltOB +;3׃J7ol~L((2͞u7/̙-!
c@HNEdɞ7fD
Œqш}4M>źQxK%qSN{
%8~e<;M$}boQM qH #qms;UoTQ\"]sW]vc7T"Fjr刯 GFQ+~RG9jEjHpi#q@BօߚDaSh7j^w#h&\d]T^Z +(8̏?fE+}[<_&)N&EYendstream endobj 4414 0 obj << /Type /Page @@ -14724,18 +14612,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4422 0 obj << -/Length 2115 +/Length 2046 /Filter /FlateDecode >> stream -xڭr]_iEU3q+H̢Ȏ~Ҡ
g2Kd>ҧAL]H9a8J鲜5@~a{brvS:OO:*̖RZB83;#|E֛7?X ķ?\O73HZv_l˻ٷŻbs!%jo4M\G ֮#xZN|%K^L&x1̟2S|/pucB&8U)'B9UQHU`+j2[0g6"Ez-H$ķeCG# -9Rxw#?g$.@56<iOV^;hnP2_7ˌ<a ,p$*|*Xg;R@P9\w e\=+M葥y@AYQ]+o)x]W</;@w;&[qz2SScH054 - E!,vO;@-/ VKKUݔz؋:"otK8'`:,1#D!pg2wC ]$=*g -iB(Zt0YOyi2i:@>
Ο -K^tn4\8 <Cye͋Gˮ((j@D@ӎ.7BѾrz6jczq\|7ڮnlDm.=KNt.>gP0<tU -<h2aDp}ȥb^s.r?GڕʍV6iB^( *p@S2U뾀=!)g_z<~
V!lӥŞ/$pi[ٞaB2Ap ?n3 -ىh"ůxa!@ۛ"k6m&o2cSZ7I~Nk\@l%ۦ^EC`ex6ڷcQ{_PoM&T-(@'ݘYbpDyCFTKW Oii.R7mG5*".cm7jŃX溘ں.u_ju)HzŻ";mXz\s74{k|8@&knJ8n۬NzY7l]YyY^彆4CVn{iqdpv~Dá(z?9k^9"@LJ\h$v'H. ^sO/)hPȠ+K`<RVmK1rZN -XOA:^do(m
M}*%p6LG@0<i>)Mp2d{=I3A.4vrGE @PNbBkVݽR)L¯WƽO"(Im(58I;ӳRBDTЎ5Au]ԉ.Zn,x%j0%=PY3!`~u3X$) +x]o=KC$mM۸J>;(`|'Ϳ1`;&ݕvWa1g'L&QzZEu"&+=-(OA'KD2/ e}s;_|RJEs6
b͛O_>h,է;G)gSpnv}b<JT'߾Iz?L#'ɤ:QZzZI^ܞo05a]^B +/N{r=5uq2+4F_<S7HQ,xo/-R,mQoȡ#3Aɉİhb
WlÈ(8ݿdU֓m +=WfONI82&6a:EpXN#ϊ Rc]Sy]Kxy_vtL0k^Pb1.MeԀ +ڹ9Rh
$lPǴy^S9,˳Ԯ ӉG1q[M5%dLYQ\YyiH]cYnn'(&[٤<R4ߩ<²1w'?K
ZKP#Ho:gRxXXkY*QBAIU{s
o,eC/z:#EY3*e;SVkv:Aza32N*.˺8`/v|#1DޘƤbV,0"D!pgf]" Cwn%Y$TZH@!+AjoR~pQ:*Z.Ԯ-/K@z`
MчBO.S|ǚ*1˒|
d ++}?cՈ27MQmj;Zy~ [mGv`(u\c7kwu3y)'$H;RoY
>䦩EXYM0X>+<TESl
UKo- +,K]AnLwד)o1[kȈ*ue50beZ1þ}Qh{LEsvA,SΎmsUWPu\^]?{cYBj櫙l^GR,K 6 7xP%DҴm
't,e
N 4L?/k+3wH#ªmo M%7C2<aX!q"/rAW~7 +۶9v-yE*Ԓ0x-JmI̦E.ajv}mgc ʏQk.43v"SN.H?SY:@_ⷺ,q{' <%)|`cC2t:
"t:3r2JJ۱6WtVeow90BT̰ӟ9e + endobj 4421 0 obj << /Type /Page @@ -14766,25 +14654,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4430 0 obj << -/Length 3671 -/Filter /FlateDecode ->> -stream -xڥZK6ϯPSk+C%r4PBRJ|ryH
4r=-4v#/o_n|X ʢy9f^X?y2ύx.pJ)\%I-yk Ʀ>Y}oBgw+,Zznmv+\s_ޢz*KO~-7a(T]|Xuű{\ -W""7.leEj@(q||. @&HCu#ԑ"X(QpE7<뫶c}/79vU%(ۓU8C=6Cmýy᱔pL<7&K7J"ړ0|8_ %VJjaݎ_$yؠFcx\ EUj"4s$r~!Mfq&@^3iL%@4IXTaF]_Ù~PV=6O(+lT,>z"+PӴL5'N -qAyYlE8ѮyslF/ԃ)eJ09? K}zHMpHq5D nI6uO -n:jpmaTDw(:Zaxͫks}Hzcyϟ8~)'/X!, --<-)Mak&w'gƔbh(ǙMSjZ)+5T3L<(NEt4wLgSbGϺn8u^ 2& m^)p(Qk;#ch(Gw塮Ȑ7ΞFd3] Q|Np:wR&wwR\aq,|i(k1J -kʚ'rWiԂ9LtcƹMKaVTAА1?Cs{we5m{'͚ -FAdf Ԃ؇,V"AĒ!D{=Te
ZtڀW\<Z4;
CImSK"#2>-<d/O -BE0Lp)3[!@ţ@VZ( -as`W^v|Ԗ5: kXlɪ{zYʺK_~ʮ,)V@a+WJ}ъY=
`0ll/bt50!'.bYB#k\hXE}eȀR_l]P#m4\֨Pl >eYO= -^cY97-k$_㙥.#-B[ة.q+P)
41tTW^^pm\.Y&I<)+)9q`\IBgD;[1)ؠsS嬨?bHB?]k= ɯ(ҷr0T9{RHN=T$4BrT\Ga+9V<GN"Gb(I{dK\hGu)<)Ҝ_JHqA+~IV?RPlJ*ܴ2<wbT:1J]ٔI&QC>vˉ4nzJ(1?ޯyQ\.(Ȓ6"^KW3XTi̠L& G{(bPP`E%fk$>F^r2Q(?SAm^"+>W?r|2}q:X>F3?fMPs:%Q% 8w)oGr@&
-u%`/MZ!8D8nOl1k +2aTpy!.g$H~N|^(>83V8JI]e|Qb%7C"jL7$QgAZB]=]ӲS$)FdLLF$"x!ǃ4Yʮԑ<F?m0^ԪV ٛ7ZͶ>tj{{^.4w -WWzs+{; "\WR -^nsL/lj -Զ~Kϯt)ٓx;\5iqi[Œd*UHsh;'{m59ZN:֠ɷ|S"7.&/BO| -ׯE
hb;||Cn9KOT -rQ3kKendstream +/Length 3482 +/Filter /FlateDecode +>> +stream +xZKoFWF43<IvxvFZ"-Hzu('bﮮꫢ"\Oe$H[+_zx^Å﹙-eO˕R}wJԹYݏ:>|Uw/}hM~wnBg
7+:uhO
c_EsU.~-Wa(T^]}9X\ qDAIY)CM4Ԅ.E] 8cgS<]Ke]ޏf.a^|AmW65tX;=7~{lh~m-sձOVMXMͭXypL47Uz:Gp-I6j,GVUUNV +~k`ݖx~X<:PX E=*poX~Q|~{F_wAwc&řy~O}a;5] +4MEfӃ~ЏʪÊ״97}5ʎyMe&B8ub߿rta]%Jr+Nm=23U^dvgyWƚ zQ9 +@1't)E +?"w/*4M^\ߍ07-gt'\q<4(6KEnX\G +ϗ\bQE˞њ@DO[8h5A%|ޝnĻ`UO߽#XQEh?
$wo͔NJ9uX_/xN$]ߚ 0sCZ{%<imsdĕ#2OOkFTP5R+Dijyt9Y֨wh [ik'R)@+M +_v;NYK\zkphߕ5[o =!Τ!)@:,e#a!F n G)b5¨<6hG`Yq5u]l*,؊ +tj4#B̬O5gՂ 1x!nkf*}wٜBύeN7$
+phڞ%!&J!l`<QQp$=G +mXXLbN, `_#ɧV9/iC<$Nσբ+j #P'y%g,442!uexQ0Ao?L`04
_uEw|zwk)JY^HcP]BјOyAiRnXеQD2$l4]w-8ʔKò +tװz +8u>tHdP~'QKѪ(:f`~H.N"+Y2Bi:Тe|jZmu.\)`)
I`xE!\i s)k%)k_,L,³-1u>L')Ԫ &K걝q{B^;T̯-௸s
t/ScI)P%g_rR4xem$94lp$Zr&H1OH4B0h?t7p}o46hl
!LF0m[c=}9h`P)e5+%ɤ;d&<, +QG(=f 25O:H9W[h1]K_6lʘH1c/}4<*bIcv&a7([4E)_s/TŌBMD6$< +a#yjYĖڂG]BGU3fLf/=4j xO-5GW~?+n-Fm3JwV!w[}%צ#4YpDı\0CdX%)OB&P x0|ങe^IVqsYijoM'Giѯ{cMЌ~Po=73R?0Uȡ$QP[a %CX_Ǧ~0KϟH9)ͣl'<E;74MkiΆ ѣ endobj 4429 0 obj << /Type /Page @@ -14832,22 +14718,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4439 0 obj << -/Length 3629 +/Length 3348 /Filter /FlateDecode >> stream -xڥko6{~Q -R$zpK}Mrk/ڢŖmue˕foDI~ -onGF{ >w\}8Pg5m8K}u\AQ///.]μ\
@آ0D~LI
9K_PKYJdAڤ
&|.f;ajOgC`Vhb`9 &e&Eґ_ZnVA<f=&Zcp[*-ʛj -qz7exU3n -fVaL/"Dž#\xtF~5AEdԀHK^_[$?o?`س#ķeHI|٣} $2LP&Rsl])iM]▯x[]^̽*JqZ5 -aN?M"<X@EZ[B/`>iapԮ-Ugka-1xu#$e±y;;QLol<9'pD*%qrN,['tDR&Z(v7pl;#8'cfbf{ c%> #b(u<5t#yExD)<2~7(6- -&<sB˳QLNI8 -Zr" vW~4P&pT4:Dbs{|xcKkjEV):=H*c<,9N>ofFJy'xpD)bp>%%폰S,@*=h"fSp[9*+[8f|h'-t?`Ԃ"0Z&agmjAk#QH܍ 6D"3DFa/($dz='vAo]tp.LnاxGdr!N#GLeb ^A6܃Po|3RN ęS@u<0crmz(KۨWyaoGgSA -|b)OqOS>ĉݾy$]45 -?gawgBraH_&9H -kfa$lь5GfMJRtrPYj=d
|҄|,{ aΏ;<TG_8|EY8T7^DZSrP}YE:օpL6* :ZDSP
-V|-g}`˶"DqcN? 'T
/9 kω0 +xko6{~Q +f$Rwi$-~`,VW\In6AJlXlDpޖ7q7dš7Y'd+oN<N|.}3?9{LK?9oޟNRi7s\8uݩrW7v+0;s\8t +03 +bX :-Ģ*4P=HZP"]gR {,j{6zjGW+cicl%4%^)5k! "B=97*}gYIÖgn%6X?O|[o;aj]nqs/9^hv\ +sgx(I~/K&bp~E*a⋼ 51ލx'K:j)/q ҲYmxc3GsZ^WxVW?'[+TGj{E2dVQ; ZY,&Gp\<LV +Ԟ|cTsh.ЉPF~HKi|QRAև]mܱF@r'L=)8{atGd05 +z(9:"JD|/{R l}ʙq.Ѷ +'<Vp +s- +[Iehϣ߉;q@wŷiÁ6f{m7Fm.=ojg%f{qA5 zkK{ab
Imikm̪/U?wj֣i]¬)n?~I}qß\.x \>>٭ڴI5Uԋۮk\OAqїJHCt$T?t:D۪Ûa?U3g
[`Ov +
3PRIʾPqb-X횺 qyTŢC%kwASJqP +74et-]р
-f{Q`Tl :Alcbx6ίoci'E=>_â@:<@nP~- +jQ2"i ȟ*'"/@Pvs^#R<=pǃ#!?pu}uG, ]#مA9V7}r8}Y)ƏھSn <>(;CUcۇZ7+!jUmyY$<A!=>拏cp\fun״#+zh_z 95P?Ӛmu0: endobj 4438 0 obj << /Type /Page @@ -14933,23 +14820,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4454 0 obj << -/Length 2572 +/Length 2550 /Filter /FlateDecode >> stream -xڥYnH}WC(qY{Vf"iTH*~TuSD%5zvdšx,ۜ9GͲ[]|؉̖>cI8[ZW_p7_xg=_DQl]Ul]]~YbƷo>t{Kg-ood=f[KL\/?^~:hzv,'>9ijg;$͙xv{{}v~/gj(A[
Vqg+ C?b|ڑ-EvOxrW[M}e/f*e77jNcwWꆘlxYG \E֓aYkՇYT8{m/]|FY
6Ee۴bd0c? Ã`yEX~}*[dJ6@UI7Dl#|ret[vXtcТurs -@YOk+X3ہ^VDM?E8zXߢt -l{rrwy
Ә$-4XEsϏ0~r(`)'22-h3RqV.e#k?ſ㩐3rs^!d0LkX+lx"*ecwJ$K`ˊ&]˱Hbh9S؏>E9\dXNB|.;=[Wݖ/QE:ʪȅ ;F+9=M{sqE.>_G) - -'W.SW:ia"y+\}:Oy`FP$,đ|*Y_KUYyf
1pFE$L\D|8~ċ|:XYa -FfL'm2G6\t$hDdž c BiJRs{/ -`/\:<8K顑@d8^x$8b?ٜ֠q"+^CU -0)m0Bo=gv?/DgwP&|' )d;؍0A]]'4vڮ+]1zJ1a -l+$ -N' -7y Lň=xP -\ A<,.qFLXT١5/\_&{ʴ}-u%M0u*R2UF~X<\kMKuMvC̖u_e+-FJj~k((}+9퍜S5hÕ].^.{5i'6qlܞQKP?؎,݄K9v<EM*oBoBĎxRPč% -BmѴ'Uti<pdT;3KCe0χz`3䲵-K)M?GI-;xi9O<NG{fFx@NVjd/FYɦk.իC[wL04)Ƨ xxPd$pU9K\!~x8?ȼũ +xڥY[o۸~ϯ0Ї@BӴMѓI\ + +g|"jIMU
Ȕ"&m1nm]dYW 2ʭ5-CNEزg"}뷫Q,kF5V~f;Ћ(uI;ǵ(mA~[NCN.o],ݜrk4&ʈCWcO,֚Lڌc gHiY>S1r9#C<7Z<Aa\Ά'\)R66zTKhREJe&;q +Nn<7ψ ˔X5z2 +4CVn^u[<OD
8CZͷ@+<o/<߉nڛ+rUFZfNnJO$%QxP8w
wIKC^Ye2xʗ +#NiL6'.:4BcG
@4^u9߀.k%H 2/qq|DJ1qkЏl8 LPcդ?LZS
!@Ymݏr`D026 6( HJbosu?vco$:Csk k;JK +MYa_V}'&.\IJz-d^ 2p "j +ړ%5bx빯*_Ov.uL- +0 빫.Twj`_CA1MY&deesFJoRaVv^To_"9$ʹg;KIl,)3ס9N%6Ҥ?^F* +<3Gs Ӄ+ZݫϷx)N7ŸhTE ++w<-փ&ïi3ZYIf^L6jނ_Б endobj 4453 0 obj << /Type /Page @@ -14972,16 +14857,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4459 0 obj << -/Length 1324 +/Length 1310 /Filter /FlateDecode >> stream -xڥ]OH=R_ ?R
:mMpk{VfviBEP|n#7 -Zͧ3!qvhNQh1MĚ/rύ5Ͼ: lܡ3Џns 9nƁ=o - ?q^JԷXOt$tVg"ߤk\=i^潚w"KWT(ebۢ1A 91?q4Atp -D/p<,p<ҶѤtCqȫ띬8prF -_SMza931R8`o -Z}f>d{'n+1}g[cJS_e&endstream +xڥW_O8杻/DRINJ--Mܒ$.N7c;EVloxƥԊxF#7=b-as b.u6
.GEؚ-,fuz;;ٔ}'#?w|jr} +gϮn&zo;nŴcw1?cbK^YkK*z~แuޛޞ|KkuÑ;E6^ON0lLTjUZ Y*uŊպd>Qò2OZ(J I^U?v|2K}JUm&}gu#.5e"z+lhISBfUt$i`eFg)^i,0Z$Om<;m'gs.=IcFpPp*x"& :nH2+ܨ)]Jޭ;J]vR`M^|P|pIwaƞ6|.9n*ymJH+
dϱl4ͱ<"Vcmu2;f}eTT9[d1MD;RRAI/+~%*k"OqRJ5-@=`w&L@>LS2JcL_^'j7UISՈEBQ/r국IG㻀Ǐ@0X9_:4550}|o9SV9ct^MB;$n?F5T1Q{OaPKS$ Shv(WWzkuJ5}歖H1hZo%.@%8(Q[ endobj 4458 0 obj << /Type /Page @@ -15004,21 +14885,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4464 0 obj << -/Length 2251 +/Length 1954 /Filter /FlateDecode >> stream -xڥYKs8W*{jC -I.FR,CCKJ(gd_뛇Xedv"0|].G@10k鬞ef]|E/EvSGK - -XǏ -aޥsJ9z94
d| ߶( -Z$XPh||S#J蛉$AlTN_-m53+L]3.r,hR9H]9J8yY] -X&taиq&d괬hZaM- -Ƞm$" -(6eP4[֪I%}SVZa*x4ILOe+F?LXXBa<}D0|ָ]e
+ߊAIIXBSj6mIx,J&crCkvIRC.P鬃U,uh6usSOā-C%C `Ã%yjAe<#NOVJBHGj -}WhE4;.d -=^1xsJ?5rdUg{70a0qe +xYK۸W9PC +//n8\cn#zxxwYzYg囫OKGJisΖNFRD˗a~5N}5DA +y WKxVj~xx$ +mk dYDZU.<_2ߓX
ͳhՌ'&BHE7@36HKT*-y]=O]ZUB=8
~z%]R5]S|p?Tו*>E6^Y%ʒ}wǏ>sܾ͚[XuԬj꿉ǯqwXAݬ{]cc܍BkFZD`#"RdD +\5N*,%?݉{_)q#rUYv}GH|q -nZ\uHg
\Łafڲ56bP I]\Rp +ԡR+"2L]oRWhΰZNX}M܃Ciڜ +ox_]mT`d$"/`_|7Uڱ49݀KZw4ނdf:I NAܳ{h= +h}xZ{Ҽ"Jo{ef6gf~-)ssxr]|8LrA D#M0}"t;sY,Dȸ8:K?f>zLt1&dGra,.<CaA1ABeHřű$h%=-oKn uJLSnL^ζ:v5ߵW(&`@r
B"ݸ pBXT&a{t}fMO=CI10"oc);r&>PyxɺuƸذA@hb? +k{:hrs#--bF8q_,DȞR .y<W)C1Y3p2k+%wPM, 4P$B<&
ʓwUm[s+f3X$j6~eMKӪ1~`äE Eȶan4[WxѰI
}QhZ܈6l*ѩ0E]
X7Y,8>Fn +_UQtpCxZrEL +wItܑ(>/RA2g*6m7Ilhd@<`3}g>Cxsu.ey2=h endobj 4463 0 obj << /Type /Page @@ -15103,16 +14984,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4479 0 obj << -/Length 1939 +/Length 1921 /Filter /FlateDecode >> stream -xڥXYsH~ׯPykר @Ga;ވV6#$"owY8{KfOpy`;b8OsQ6p[عbI-_?t{,p`1'.|a4<r]{4r4[/_~ qǷo#v^ިWkhV@z59[R~|c|c0g`5:u{Pq},?#Xr^!G`X9˸]G\]/oQ;i :m)sfzi'3'L(y*IJ]|Z^^{:$vqR壚J^~oIWK0 -lDi'+wuFD)|n:c}` fTd\h`
$p
ɭo̙U;DY%3iWZÕܨz9>; 3,O;KkޱP&gZk]*ܘhm,9@iѺGNDŊekYζ<EE8QnOC1_ީ(D>[_`SٜX}JY6*AVV]=i= A>{x5<0 -%?t Sgyy頄żbI*^$md"KJ/Z+<["P~)US5vkoQ3i4u_\ -,-n}q #¡ E33/ Xh5sصJFf$*$J|Nы̠5s. -_}] ԃ</lPkbsl̅H/w8K-S9HNM㤥ax -xdFsXeqHݗ +xڥXmoHί@9HؼEڤI䂫Sk`NU3`-gr&xh-uVV5 +<tsQ:ٽe(Z\A*?K5Oj&A| ̹_ +b^/fL@Ls-8u>I<
"^~,!mk`O4T":q)W
Ie)<Cz{}ymN [*"u4ڨ +d)_EPpצ.OAX<4U_dŻިkF +Vk sP
VQ'~r1g=K؊ݴxEHlN.Ҭd?! ^9MӮ*Hcirʨڂ(DTq\kR{up-̓&Ly,͋
8e,XV| +b1 +Oth_^WS;<d".8EVtb\;$ #9<ӗm#E>G +\an!#U GbcQ}qg\mB@xP,~h+ +4\ WA +9)23IS!d;~$B.9qMF2J5 t쾲 +_C$R:璇 endobj 4478 0 obj << /Type /Page @@ -15135,22 +15021,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4485 0 obj << -/Length 3475 +/Length 3306 /Filter /FlateDecode >> stream -xڥZ6 -dw &[v>w7nMkYXD|{AFq4szzC&9/TIx6<,XGDmѓӝ> QfAQ8ut9ZE/_yQ#;ԁ^.;T,fepb]Ԭ"9 )N<q+N -q3u4ɛDq&QXD=On(zpߤa5ȪazNԋ,7O-^T3jCYG -7i7Y_6T;ʪr:q>`#E6]oV.gJss aV2%cTr(EF Ef<Ԯgb٧^XnxM<7Dy -N^fdG`ܾ.NX!bGi6b -9H-@jMif,3́kd^街H%G+ޥ)^\s'v/\*CeSV\M,h#MH5\?0R@^PAm6xUAі=& ->|,}l8V! eW6x]6|Eieo!ư&QX)p/sNxlP\(pKXg5w
2m2Bˊ̺TQG9j_bo_,1];bkm,H8gM\9;$`
>h\6dnG+9#`2S"1u/ -ᐫaL+ n&ƫms˥>`!03Iz!/t3*'y
=jИzZ+\mol]V^Tbax-ċHeyI2H${J jfojHM:6+>E ?2Nm~6 VBR4rwz g?0_AH㞛dxQQA -yBˢ.3.GnaHB2X^D6ndaH+H=!CZwYI+`BǻGՋe}u>F/նhUq/_
v-ك?)&V?MU -v玧79Hs>!Qf#dRd*!C4q:!4`<oN }j*SCĪ@π|FU/">+H.=qlSc'?t -;HN!X1qH?-k_bLUcltfuDP)+ꈙS=6a$xH0lZ$-:8ngh̋,\cҰ$5 og.,SE@{)m|7h>UoOԛ
JH@Mq riOBD<-wT)? q -2X5k.,c~zg!cp[Om=8R9!-Mkհ{υ(!60͏C-`xLc;hetg #Ƅē ž1σW" +xZYF~_!8X +Fl^a#vތ"G4L(R&o]M$"Vu|U5%,N"7lfJ 7Ӯ8W)Mt\2yOER|ljs;zy +\l871,qhW/O(@>^7ˁ<7Hڞta:~uuwa3^5qXMpƏ]?d|oBJ
B:wrc{l%y9O (v:F>˶US,'|YVW +'X]>-$p{|)${ w,m-8v8j̡_v+CFW +nx1%ēZ2:{BDmR!]DLPJwڲXiK-t &[>v>6xLꝊ +cx̸ ") 0Fda$lx}֝qtﬦ +_JFB$=_7 . PڷdTJb-Q(@ Z3aؿ +>:%:D2v᭾\TE endobj 4484 0 obj << /Type /Page @@ -15194,17 +15076,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4493 0 obj << -/Length 1448 +/Length 1393 /Filter /FlateDecode >> stream -xڭWn8}WQ*7 -n6.vndIȢV뺋!%"M0Ppf3sH
?jCxh縜j@H^ha*lpq '$1 ㆞1K>߆望:9X`F?P"+zEApsvF(9aP0lЙdj}Lf;?">}&F1qhp -~--^Næ2yo8FG)s8eﺎ'|9Hp Hᄐ5Wk*sJ!1o__3'ESaV2Zz'-NJD_
h5jr]41:*"EA*'cb -. CI܅
0UiFi,qMg8+|]gNOeÖVW-!fjC]^gčB#~iG
*x kb
{'U2O_$2^h2mS\2T4Q]od? -Q\
)wQnw-bf8\UJq2B{tՉB$džc~){RAdrh{4m2ѷ\bHHߧq3V~|OIzTAlޟFVU-:>}Ӳgӭvsx>3'` - qQ -rm)j&LW[n=8^3Ц#-89mOmo봊DGjϩLxF3 ~uZږͿ;A.z5OVpwxq3.<oW]̳b_.)鱻*VvwZRqVն +xڭWYo8~ +/]hlb[,j%3PӤ]g8>Cxq9G/G\$]{SO)qBweF
osnQk4zfa]Lqk5ݍ{#axigi748*w'ҏA7=0oaMuOqoެ^9a |8'n#^NrEhMuVN|j+ϚuHXꝲ9J!_t^ș\HmYVEPF!p6PÆ +U%(fMsX.
!EmI-UhHް4f"5WQR}ug,Ui|DpURk\G訋)?
X$8$q$1ڤ&jlͫ"QEWE&^*(ӔbZP^ʪڪ2n~0F!= +1)wtw(G+/FD2]rTjܜl}벐0d< A_ +^T1p[ʪ%u{R&.TKuk Q$GhpU~r"xu<у;ۍ,E4Vէ
wWxA(BA] +ԊH/AcAh:@5O,9?%Az2zoJ~?s*)O|OT%NjEt_e٬I0NϊZldYsbY~,OϪߊPgeguq:%*wpR]t=YTܐ;{['@3 N0P4#a<Z*O+YcUa08m$*>cMJ3 B,\PD;,fGma6>F:1<zE'E\ּnmI
@ +}ThIlz(9`XzNz~PUN4'm; *Lg;7Fz шdڃt(A^5]nɶ7~t]X8~n +CqKMP5
ڥhyPI{:}0p +HV0DSsG+|t&%Y>z?Eגendstream endobj 4492 0 obj << /Type /Page @@ -15233,28 +15117,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4499 0 obj << -/Length 3455 -/Filter /FlateDecode ->> -stream -xڭk6 -p@eJ$*>K&iwHAYr$7/J-;A[,Qh837gi:%iG:v7l+ b! ?7b3?À'(g={wBk텡?_$I={Ooqx©?~?a5oxqwt8 F*?ݼѷ7tl1#彺akf_M OT4[OS3 F)H.$TH.C5@(NU|c98܍ux㟷sٸ/T~[x[~[l7B'oKGl5 -2숺_ -aMd ϐE%:"p/^ g[\!/}D;̠a,4*`V2d^%lLWvA''Kh%& -D D cڍ@x>pY>ʼnt;Ĭ,(,ka>Cd9"aR9A/1|%ہ"LgC9?FQ}twיBuuf.Sf^yԮmxeUVq.b *Dia]<\9ƇHy}Ӗ恟ֶ>:_b#/"?;K<!:k^0,4~B{ٱ," -kM'FB4gxY^y;U^.߬8Y[E/kyqB)|Gd9.LŘc}4xl3K{Y,O[R>i<@ -V7=û"^`
O^DX(*BfQe[^#+!e]fd$۹ʼ)n7# -j~˦[¶ӻݔu^ہҪTЇEP#Z<wYhLdÝ5VDA=9|[g]ymVxL_V0pTU
>˺qG/-_fmQy4\LR]Y۱|7x0p -fr,H - - C8leTpռsсl@>Oa!C:m)%TXLf,%sQꊕr'؟* -XӅ%c +h0VH6\aʃQ^Z?î:߱_
C_\5@3-Pë -.A -iMr=`t?rޢݯSKn0>aj#J^Զ3%brCs[*C$+4¢
㶠˶X3:T
rD'+`ʧ$ΉfpT| I&yxwCpm㴧6L -
ka>ˣDHkFM`TNtӒo±Ӈ.qYakmb!ah,46.{[1ב֫LBex]H&C?GY櫏D2Pc@VCAv -D
?ֱ`u
+H<ʅgCn`dC\R@3+)0@xru@ۙ)~ٜ+Y[AYJAJKtX-&ԯ\6?i3l(X^f>WC`p:gi,Ӿ_:5э!tjp2:;^ñqኩR!%N^Tdή._Y3?M\Ե̰%QpnC-n{z|NwGi
Tx)֮\"ZUs3Gƌzsb"abz⡱bЀ5l7:l+_42E!dI>6О9WJdH{T
Ot1oXS1_sQFSZ9QٗG@дUg'ꨵq<Yy5~)Lg,4xُΘy;5{ -fMyG'fl1;cwK?hQ- -Ƶ͚6)iPS1v5GBXpKpK=xR]}K0(yxq( hRoOrC0TtC +/Length 3241 +/Filter /FlateDecode +>> +stream +xڽZ[۶~_2PkE<l&ivH [Z[,9\w%:-XQCrHgjŁ,C7lfkJof\/뛻ס)MdvwOC=w|;_DQ<yOo87o^# +zc߹y^bЌsϿ/`-|u;xիў5|7`]yij=W%l{e
/Տ=335q`=7Ԙ5ţ <}x(*pu1Sޱ*f.B'mrlgwV0z-[!.m[p`d0kO;]'~eGUX
=v:2 ^k#sMddZeϙn +<)YDn)xx{zkgzӊ$%3ЮjZ7XK}I7ml0Џr!ܧJ?I|9!L ϊ@'5}hnOn|,\"f3cm:HX;%ggq3"y;i10mKV]@k5`u= +=T*bEymӊЉ),]σ©u4"eMibHKx?~p\Z2vG+N%AT5? Iۼ0"S9,wEHKKf +m17p~&o9c#oK|eab*ԩ,kz(5.Tz]W-h7~eC7yV3_ǀۢm# +L'nU=qb+-H +cO +}hE]GB 28ˎrr08"[ޝ|$0a˴/*.*կX{[h@|0(p
AA 6Z/@JC@ž7FÊ_:q*'͈Q8
ze6)̓o*ehehOIg1
)R`5sg<VY9ϒϼTcBn"ȰFmUe&|6m%|̰0D1##+]>K/<6lM*yf~<0Q?{|)}EJ +9А.eq tu<OU7VBmTq/m_ˏ5Bqd ݪ@95| + V/%- +2G6j;iDA<x1}- ywdLj^
!g]p\+i|S;a +zt&'Һ-$܁?˚pȄV0>DF]4v=]AI8_$m1646ܒ\"$ҷHO+G@ߣ3l9QߨM&fg/kld?a:t!\vnDr+'3[9Ei=|(Ѩ6HDxN )SG4.>2rl$yT1*JL%GGu)?1D1w\9KUp}ea1,S1ǐL-"mjcG%pw}3 Jܲqu"Wm!"5sNmMT>*XWl9t+q +omCHKoG#eK\ebx1>27,'
jҌ.7p
|Jܲa(!I!ؗ٣ۆv #8^Y^sOn$6䦃o&vvT6Ń:D<@Wq +us3]m8NNtj~}DZ\X&1}q<H_,M+
aSo2;8TЖU0I!~+`nd-˒ !?v~Ӎ D
S拿b4g pPendstream endobj 4498 0 obj << /Type /Page @@ -15297,21 +15177,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4507 0 obj << -/Length 2443 +/Length 2309 /Filter /FlateDecode >> stream -xY[۶~_XQ$u ЇmNғ" -ʦp-C$]cg{x,n@DZfY<t6 -'h6髶D`!h+/Ayj8I2b#e[/I[x3H&zK{
mΌRM_JIl$[Ek+S8;Z&[ǟԼ~)e -!ᚷ`ǷoOݣi3UmN& -F7FRU*>/o)k
J -~e:f0H/j8q"Y -zDAl3Չ:($pɅ~c
qd",n<7fnT%ic6p+'3utrU u9.ͼ)P7 -g(XDZ>BncۭkD{n=ո76_]~pokzԢx0%4\LF" -R!ʹkDc.gքM©snkO.^h( -5q}@;uMse5>,;c;TKEV -n՝b:/#MPDޟAv|+G7ʕ*TGݭz
/k}HfW9Bj@'6FrfǤ(xFP:V*++[vldĜ,vQEolL@v +uV4D9QN1ӻ,lBCH@.ZMV˛ԥI'/ %{ocdĈ!'߇Q4چ;
/U5Z#n"iw@%M_/$/(N5 +xڽY[o6~ϯE6@;E&i(0RlHVF&_Bʒ-'Sl`,~FN\''/\O(UqNְ4D7qwWHWn<Y<"\_gs#0r.f^\^,pE;np3 rnoxퟸsY9Og=Z@!S_>}v')ә+TM2'ř2^5"Re,bB +(@'~isG
:v-w(ctSMl<&5LO3:%W5ݪzylۄ;qŹғ + N8_p[O(גuVo6)x1G(gA&< K9oJʬu˃U;(ޡvXs vY,d'zGDS/blJ3)I=ð1YEڅo7SXܦݕ& +|(ߴͪH0У5Y\gu1aXxpE?ΧDpЋ;;&A(`YDj-"w_60rP|èO `]a re]q/XOrm2Yx5QŲ2X]In*dlcCA +0I
TB5U +j}{_U{ +\A]*gJ:z-}DKi`'74O
J0g:BLwILWV#J$z `Z~|Dnhi
qz:~Бvœ-KX5[C@% +|~@ endobj 4506 0 obj << /Type /Page @@ -15364,13 +15241,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4516 0 obj << -/Length 717 +/Length 687 /Filter /FlateDecode >> stream -xڥTMs0Wy&Vi[遤MM0 ĘIݕK(ɥ0Z]}+~<4e҄iP-y8 %{H9˃ -90u$a>#_?mK) 44#HduE./us=$/o]3FHYf(ϯaK,{NQilF1a(-V(r1c17pIB rjF8TrZDV9j -MJLkFM7Ae7odFOB&n[94Z-|_ZKr"5dk6H4^բW1RvnS,5fظH\-(|lOmmk[uiu,T`e˗cߌ](֘в=@_-p/U\b]u/Yu{Q-wRdG56vV[Mn,u{ -3j+,q=˗b%CHJ0uyP3yG#Ʀ귮ŸLƺ^;9 ]@}DO'U
x.-mv+/?7nn2^(dᄃ6&
0;ܫw!"ëzx#v@ղoUxa}*]ʨdę +xڥTKS0W<U=m3=ZZ(883ﮤxBr}|aLS&Mf Ւ:`<_,T%]gy"Q!g0sgwG>b)%FqfdѣnnG$͵}F1:bL + rRL}l"fWDNjya[
0.$su}yvk7hȆQ {Y6>Rn*
ލķ{-w +`
6Ipo~)* endobj 4515 0 obj << /Type /Page @@ -15393,26 +15270,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4521 0 obj << -/Length 3326 +/Length 2905 /Filter /FlateDecode >> stream -x[[s6~e%.o4i6vi@Knx\ -m:
-/oߜAJuAZe:ņϕ`}-XRv<K!R:*ge1%Z6 -|iFdwXGض%Ѣ/ p$h 8A~ -R*t|oۜX~ -LH֘8VizU&`[ej8Gc!%O
/=N%Ġ2hQ/8qCQz8T[l/$Uըh%/]FA)MAT0X&Ăxw;|oX$F0y}
G@iq[8 -aK-zWб_:ByO}(`
Ā#WOž()>²`ᬼ\iKWr+(A -4=eMg4z6B[(.!Tj -"<;p=FHi_sFȘsbj~ -,\ -B}iUEhÞQ[Oa -Q3cUz>G>e/,&14<VLQ -[49v]E]@6&O|8KRoOaQ9TA>ً̀)I187U
S4n|@w( #Z9v
q(±FK/ -h>qDDԸR?VlG13vA=;duZ\' 苉kˑB!?Z+!lΝeۖh{2^5{]_'4"lp ,c:̙P%x ׂ#jQ;Vs2ܹXBJ
{X!ɓ:K}VJ><( M(v$1YVl e%CbSħ EEx -*ϰkv -.C,}`L"9H:}= ,{6\cTd@cɦ/9n4+ZԔ5IǥǠt|8b=rHi)beor],bs +xn۸=_a@E-MmƋ-l˱7Jrsg.$۴E jh"z$D,og@=:©gó_^hio8%w@J qx0..f3ʻz0Hox
])oOϞ;4
D>}&@g/Ӥwρ/Ҵ<S#%
S=^8Bp8vrg;-4
];EJ'EK,~lkJb先:+"
weޭ;TЮ[8.Ѧ«^=yʖ0F +A̒.f-ﲪ+-AР9-=NgcLh +@%2Q#Z%F"fQEHSPzQbhukgBe^Ȋ$;C+^XLY⚰Η٢KBDT"+WOrdz6@'TҠK窾tsT::0]F(a`s7˪?"I+.5I +,I+B*1~jN(ɏ%ɫq|lDN-W~cFFҫK'IqN"V '/qt竱Yg xn%( +[W#;CЗBfYP:mYhqAl|k B-'זs,`m"~F%@DJEvSԉiqDcX cdjRbH +: 7Yi%~[F8 %Q +0 .=_!*NP_Z $ +qr? P߃2³Η'?84QfH-Cu?L8Y#ƒO1O+\b,8H7Uo bd6}u0D,/e~BCn?9xd:wXhV.|;HD+_Sp'/[iЂ)8lRN0͑Ivve7j8g:-J8՞k@,6&t)~epVV'9;/aK`|N204v>2S]dYֿ'O7g"r%?6wҸD&19e*Bz!wŦ`#1[I43f`KE,L>fn6MU;EKsHʯ}tzCOlb|=u̓#L-A:kPkK`J-ɇ_8X?I/VXôax#{ڭ UAO(s箰<5xiH >IlnieD,?c0ڲ([F%MͿ>\A[ոwQԷ+$2
a= i[ŚmWWLmZ4D/W?3=,R=Iy˧JϸG`_F}Hs[1<4 _ϼXo-XRUiOo&$oǫYVvN#3%GBfŵ;_
ڋ~cackx{g*l,$#\\!о8{HliҚܫ(V\]|GD:cKvv1߈b:_GmMH1}bLu'Rrk"m*\j Dduۗ.x#CƗFU%q5bE +m -Т̀fXFJ4)tl4ڌt%QJ "F_Nl`{PW*qrw(N ܈ni8Gp<}1#U?bpΈPA|#`XwNCθvYNts5c5_P +`Wܲbtr5pw5e8ЇLhFOзmxn:H8mkHml]N +eN8E`F)6J?IiI\ưϢL{#({HIu-dat r[2sXt)&GE{˨vF27.vi 9%D+4r;1Y5Ny/OS[8 ۂC6pu
O[qI_]o49:\PZeV~,6G&]q徊mb^D8X +JAhtrWY56DcfUy=>zړb209"b.i1'ltX[HHi6=7s}}tE0cEF`|O~endstream endobj 4520 0 obj << /Type /Page @@ -15435,14 +15308,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4528 0 obj << -/Length 958 +/Length 760 /Filter /FlateDecode >> stream -xWMsH+1=ߓػImMLNWd%W*~@X8%U.Myozf LU,.4V3% 4?=%eɥ!̥.m2tnN.>Ɖ"`qbNcnOWYdꒆ?VD+o{CQFӳ8At?g٩ ?i8Ê)Ά?9e\LIQCd:4)G"3 n?q'v|i -AjYlSX8eYtOV4sVqKPfR;Gs``e㳇QH,/rUI)6-;\njZl}b6CD(h[ԊimW@e Z>諘T2TTS2)7LQaS8J@>̕\ (( LY\W{&PSx v<&04(vka;Gm 0&qHfҶgsFYaJa*MrC"hޖo -r~ZGW~1}eǐP):T*wָN*?^n|+yE3;WU|(h-!uLsVyQ
$澿l]x1ǣ˽(ˈA33GCQy0,YzfE@hTPK|M~.Q -xWAg,/I{dcd[*nBa`V#~"قC$C%"4!Rݫ1`=S'}ZUh3 +xXKO@W-˾r +qOIwf0* +`x^|s) +F"`nwP$ViPWB%~SIQvQIzW^c(}{V靴8u~y3KN[V%0'G~ +hus7P\
2"dY!(Ϛ1Q0c*E+Ho4p<MGH endobj 4527 0 obj << /Type /Page @@ -15465,30 +15339,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4534 0 obj << -/Length 2696 +/Length 1660 /Filter /FlateDecode >> stream -x]s6+tWB(EɗIS+^(bk"K^I_aY<tH|_xp -VY?ވ,RAճaLfrC8+dܡ~>OSb$$+q.V8W8-_ʳ
Y& -0 (==#&,I#LY!#Jv -6Kzj-G0t{ta?`P(tͯ,NsŦ -Lav}&j)üW=2|J}_E -*~}Eo={ -Z0` - -1OT7)4c#ĉjU$t8CE]|{>4Ndz%`VkV[
qVfMHؐh%PW$; -ͱWcH4W='T2qi/\Z>Sh QG̩n0Sha4W0a=*{2~n -=aPsxv4!<TlQI ^"nP;q
n -5ܘw -oַAen(EfQxRW)WUT^UB7iM"A`"։Q)Pc#ԉ7MW -Jzd!}*KM:6OKl6AR=MHD
>ѴY]}ZåPȍ^ey'|e* -NUkTX
NUWA>E!Sاj~mj3|(]MS13Ȕ{b|nlmr,3NQv'I4GQ͑D&٭03ϒ
p>@ A3 -㿚kC6D -Ęq)cJ#ĉҧ&v)t8aZ47i+O^fo{ -l1K R(ŔFli]}Qk:
Uj+s9c {9b"PZ)&J@ZK|G WxFL[ -V1c R(YŔFVc -} fyq$vVJ(|Evc'K!Fѭ'B&q -VNPHqߴzDh!A`ہtsa9nӅJ%Nendstream +x\s:WV`ղ$ʥӦk:m:׃N<IW+Ā +|v~v>u*:рR~CCG֍h{sn[(Y:꣖櫻Qlq!q=)C *0)Mt`K4^`V;/;6 @4+Zȧܣ|[ay&YODOܗꌔBuo_g#~)_p}HyM}Su$fr}#D 3D#
F^ۨK +)EAH`l_v`z*t@q>F[ILN]JsD)9o`[ᔊC9,AD.晐(~OS3<)߳!y0I#p&#ˎªda,"8RJGw6?;y|iHo ++p]pt/Ø!6 v0qQNJ&3\_]xa2m ؖ# +OKJ:.`PWx`JLRgYSd~5.A~G9Dzfs9\+-Uݚ13zߩ%A{:h'PSN^Lzw lQ\S*3M-|14FHƽTOh7>@> +gp<wzS#vJv^e,c;UT>b>+F{Wq<N0TSJ+$mh@f?;/|W}~uq6? C+P]7JHu7dc*ʽоѡh\mV+Y3zr9W4ԁaT|eyO(@g6) +V˪ +7=#u6%ikxCSuz{g5;nJ<TԉSժOPowkA?ɭiq1Gjf_KGf5 +KLkN +M,z42[f[3f},|j,l,LX
]_? A4X$D8-"aMfގUCendstream endobj 4533 0 obj << /Type /Page @@ -15511,21 +15375,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4540 0 obj << -/Length 2868 -/Filter /FlateDecode ->> -stream -xڥYmo6_&"}6;$=Vlʒ+ɛ<3$rp"@HCr8g"pF~E~z,4&&~dg&Wnv+?0,=c(ԀLJ*XcxxZuqQ,6y4\EQ}Z^~8vq}G{_z,u=/W`^oK]Һ#+:=bCx0y5NHy
_'a@Gd'щOq/kj&hw)>/U=f8Yms|I5 /:0/UdIc2"!UBfF5DNXbzrdv9^+(=@Z0ϸX;֘
pDJoYW<=M~˙\_> ->2HUL]1n0$=P0, -K6tJBZֆ"Oހx$"+m1V%okiI=DÙJ;URQ -}?ņtYx~YL0wusa3HIJ>*}'l<y5Qc?"1ď3= uIdG5npq_&P~fx']&L3-ǽZ5cw5X?~9Br~}@Ahڮ'B~
Vl&G+tOzjY;Kڳӈ!BIg-Υ|Fy7;#}p,v?b|%#]n7=$r.l}Y6gݮ9V044Fa<m]ęؤ#n)uS? ɓOCGGn(@< >`N0E_A3㪫04OnL
n*ݖ;b¢)9[ɷݮ<I6ⷽR7Id/ys,T˺ʭ[DbK2\碌8~DUYOïfpa}|6v$RvS7E1xN<A)OXqcoj=q2\xb~DA,Yd_rJ4fMc4ƅ&C-L_+Xs
mo4,Lcz -WfXUR+EWW"KWoZY6I~Z -[e*Z<s>#7/Pd"ЋOXľ3`{)4 y-h^'(!t1 Nbsme/3"N.(k`@b_L>A~B~[Sa)_5g@zF9B&Dr;Tt)_n[p,)\@B$:¡-{qJ
f.ÄȻD!32Yh*po
Sڱ -&AS!t"=FL͌ řxD\~j$rTGN[%Q2]ÈO'E8ifc4$Usn7L{%^9.% - -Ak`KVU(bL18$Wx;Ǭ̉0R8K},V8 o)"i;vzI<1>M@̙Ef7G+NwdQԲ j<<hn\x*Im|BVeW[CRx p*29ޔuQdHs>Mc*</I*ȳd6 -NhK.H*^e(
+ESWuɻs?Xaq:3upŘ]Me+2,i -w$\"npgKaԟwCLLrρ`A)#.\F*=_1^GH{UGKׁc5lF3#M֓7/ؙendstream +/Length 2791 +/Filter /FlateDecode +>> +stream +xڵYmo8_&"R}nEVl]d+MwRm !9ghO-lj_-ͼRDCɕ]L2G_'bL;,tq{`ʻͯrEqp(rƉm})M\)纤u~
Ę7~߂9:L^t7^a/3muP~f*lz}YSKkzOeCO{~4
ʫ'۶͑ftLl\ԩ"e'mˈRV9 +iאEK:yoc!W˕3],xmsc +\ ӷ47v.grB&+Huzwb#Y 5SaHX[7{a!aXl +Q,04J>y>8:Xvoпu' +;r!3+Ee\{ؐ|a.*0ʈ0տ($^݇WܜaPQ:KiϢh/_J%05wXZfq)cBq\MC|-FĂQ/Y,~i^>eİXcM!N;Kڳӈsɢ9-Υ|Ɯy#E +;#,}p,Ka|%#]n7'r.l}:85rݮ9V4`p4.Da<m]B VLJli$V(:D&SX:,q`;ip(it?#;/RYItrU2LS-vdg;UÍEm'S[ݮ<$R/Mbn}%}Yw3X5|Hܓ
![Ē(+;n!QU6j刑)tX_nw}'&CA.cIT->+U? M
",'VLT
(J̏ub +Web%RQ웨 +)[&>] +dexEۢT5Y!; 0w @RQ#EWhԊPgnȓHM+稝:X|y+0qDb,;#YFXc9lb < +q +(S0 ϓ[Z|4yZA_5g@eF4F6Gr=Ul!_n[ *&!.G%ZЖ/8|32i (zD0z=BHbX\;6dwGc|>TE[DB(FIk%Z~ݤ5εCY@^MQrQu"
ִނR*TixƳ̰$_px[Ȏ):' +*x5Nvy*QWrpkt{<xxq{oS#!-&/Vi$1OQIq$އ;B6'Rf7HB.~βXUF'h$t58FH' Ur'41݄3kZ;ݑEQ&-p vxN2N"$ +ki,\ +@°em&2/_:4kk衲;=ԟ3'GrxRMl"# Dcgg8tMٰ@w7t0q/AlQQ'U0-lg$+Fb#{`/zR3>5ՑkNnD'}<b}jbS^dp,?Sa +`sC±9D$?aR!i<`ZWl*뜑cDofxK%J?rp%=oʀ_"5m6&8 ՍO 7JGokǗi-riКM^KcM3Fri!vGHQzJչmLl8dzxYN;Sl%+,>&i2i5HU+6
Pg5=R\ބST~Y:>^0zg\PH/Rb endobj 4539 0 obj << /Type /Page @@ -15561,23 +15429,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4546 0 obj << -/Length 2737 +/Length 2657 /Filter /FlateDecode >> stream -xڥrF]_>!U-Tx-y$ Q @Hk -Gp^+ADi,|g>#nTie(YjFc}Wpbœ=Y9JG)u'3=Ԁ8"@ީ%.s䥪Vx8v -")`B7.Rkh2 DFCkBf/_ D4o:m>9fu.hՔ?h'U&ptb6U.DmMF-j
K'0.ilB}V- F -%GJ8@П*[u ;Mg|&z Դ|oEh;%g,IYzZC7DWZj_{K5s"`8 -yO<HRXTEbCJTrzq^|>㳦F~w3q>E)XHQl!\d`# (ҴiW%72tG=7ozq||.rG=,~mC=(w59CIvQ݅r%N="̆"2/<]hq]{!oDhBwjŶeXe.":9Hbm*" -+ -a S=@s|N1ԶS?O[!aͱ.te7ӷzQPH4k秜rK~d!|9c 34y_=2Pza|XW@ȞOWɉS]
d~2ԏ{H[\Ѵ|B'c!FEF%iPyȖؙg&;"z_*g:N{[*pP52FW48q_G@> -%W_03_3
ɆO/\e'pϨ7:`|F}5ԬQRcًD<6U8_+v;Lamk -z)vel..RᦚjhZ( ~K^xaDb6;Sgxͺt
L;2Ȉ\`-a_Lk4h0`|Wۍ -7 -GjlEb|c'>1"D˷rB+A
PI}]lFsf̴
C6}DbI$u"xO] ->K gcN1Oco54AgP&lC_^ѐo H_l' -湡}$6C֨܄~'~z(p}uִI4%D{\7wr_?Yw"ʯPa|[c"߶wY/?́endstream +xڭkSF;·\FcȲR 6*aŒXI_#ɶ`s\*43oj$Ch5{d +`xBK_K&ׄryݧLk(ߝ(v~*Lg9>S?v.ptz̃ϧ''D]6 x{Mp<W'ƞdRF&2_kwH`G0ОA' +eFDVY|G
Aiq*2I慀Xr +vxg<0GZ(5eNyd=#ԆWu /TrMƃny7@+ZB)#%킈?B7mrcd
MSZJqEfN +`HN +M[[r6~3F$z8D Zj3F6s `8dn҆ײtޮ)Hzi!l۟y'Ɗ \'h~ ڢCwN/pO{sA+EƣUrD!q~JT?`:H)峪F\B;MƙC +G^w5f,.P/X,`5h(C49Ϧ&A,۶Ib(ny}YS<[< ]YBìr#̍$yȁhi[{ْbEH"l8Ľ) +uv-O +4Z! +Γ1WkEU|Q~66R65<)#ܞ;ۋ=Q"G
w$_,cr'0毨ZX0sTb=]y=rW!7^=RkT[{Oh^oџRT@J+nzぞ"ZN_a<LDiwHavekE(Fui͙l(Ӂ7P< )P8#dcNe8"]囍܁cgqf]xHi'CF,e6,Pbm+P*m=Z~{=ڮ)d +' o`+CTu'"sS.hd5rb-kHȪ1N'~% ~5M~G> +le%IL-@h<Xn31A(/[
.
D)1!O/mbhȶr0KHrP'7$+|pi⊗8:qPgj#X7MU&DނVa?2ƆJpԾPnkbCI[G9dt݂#m9RKxݖI\Ro'z*Y/21fOw @brpʍF|XSnw?|pm158b<pFZ\P$uBy]g?=/`#'-??3@u^Ia@$lo_}g- endobj 4545 0 obj << /Type /Page @@ -15609,15 +15475,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4554 0 obj << -/Length 1711 +/Length 1624 /Filter /FlateDecode >> stream -xڵXko6_u 5-z耴IcuhVe[%j\'~%)Y$w}@LWṇG`zd`hKQ#`ʱ4jE=ow;7o#ƘNM2_~zs/#_M8vOeL6.?ܾp!>6z`{%fĶz^䘥ɷGlɡvj2bTsm8+y5,r;!RlXbhS46 -oӱl@2J*PT'P94]iTzrd*ŷJ)x\h'}R+뻪JZ -ﭵL`<= `rq&o֏idY&p*m= s(_w>\W#X;afQb Yqg+ -Y"},**MQV.6wF+3tQwxq,[kea\|/_;2tcdyb##'ru!,l?W˂rALU`o˞\GyL{Ǭ,FA -@aߺ]Nu6Wlw#2Jޱ]NfGϤe0xY?JVzUY_h<>7y>?bn;c_3+
.ä5Q~
?y^Lendstream +xڵXmo6_u 5-]: mR/:AEKK-UI`?~w$ȶ쾤E"OsMGKL;G\g2Qmabz..^yN$4L\_]m6EC5`HZ=8XVO_ٿj4~7WVhC8}`cu$v06
~s\ߗIfW۳C$A4PPW1Db"͗81l.K5-2<뵶7t6X)Gq g*ϸa{,tLY{5Cq25ٜm!BĤntO,X +T _juGR-P~%w,RXjiq_a>88 AxdM1hOkZ|G,,HL`%|S1+[݀"p%toV-.td<gi?s1_)βZ^Sc~JHuMc!;$KKFE-8])-S7YMrw" S>Tvii| +j ӲmF'ԢVEz=)x#\$s3nϔ1koog^{'R'3]J=r"RduKݾVe؏:)GȎD//㈩w;H%eUJtzA~D=i˜#GXg,{~G*g/CV/.ۇxOPS[R؞Sendstream endobj 4553 0 obj << /Type /Page @@ -15658,18 +15522,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4563 0 obj << -/Length 2004 +/Length 1940 /Filter /FlateDecode >> stream -xڥXKsFJ.lw -B^>~b^f%ߨ0*
Os$>:QJQBiK٪@yw>tM[!ޫo>]]sf+3lt^ -x.ʔl~%H!LℳfX1QKFi0DMR2 5?
%_="4ڣMl`q!$"^<DžmaI8;hrA^څ5fI. W^msk~-v{Gg3-JBc$2晄Ss\G%SIObF. -v1ת>xʄTM2/|%[{w^Ea}ٲ
BMSKW>3"^bE)va/ؔ7#"HV(I 0jaEUgP5֎0XXb.Όȵ D0nhn^C_<u\r2e-&"0I;28MSj>,*%@"T5US˪21eÅeirV~gljڬ -`.A5l:ח?W_+UR*ZH46`7#f0mWԪtkpE -Ƒ3xU0%О'$5%g{OT,hPf3u'i\/xe;%{>RI'wş$ -m8W=K*%n-f<s]15
&T8;P`"m&s~vJ!C9M7woCT\}藇DyWwL0e -O@r{5X*i:/Vo9}Mӄol&,7ŧ{4C"0 l4`(S&
Yn'endstream +xڵXKo6X-UDuM7E)@d$7}Ajbhřgyh:?.0JuQa[Ei߭ӵ*ֻkbտ/~<ܽ|&I8llDpvy _o"8g:n?em];dx̴mySVQTQ(jݭ, 4qkZ60.`DaY+l}c7,C'~ty[}ͻfh^Zmot&ֲtW{ + +.]cx,hG".*%kfߨ5ihV`^w͢p7Q.vy( +|W/Y/ȍ{oEVdDs6O<%ht+DlT5UfsQ 9"hp;uϑ
Ҿ +^;';`"*^ +ֈ ISjSVZp*pʩhRd$l6|tܕ!K0\g$Im{L9Nݕ
!nE/eیS)E m^qi>I5k7sbrT7ɥ
1
3Ə8H2{2DXIX?"L% +( Xqːi?QMT!UYUD;6c仱 +ZcǥUf=-1aW\Ч)a5ww/5" +l[TK5ӑ/\J'(m:.7,97] +@OlʸmMyۀ4?l!;'<!^(%
endobj 4562 0 obj << /Type /Page @@ -15704,19 +15570,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4571 0 obj << -/Length 3117 +/Length 3069 /Filter /FlateDecode >> stream -xڍYY~G -dG3$yiԒII`Ԭ:/˓wYn(w;@9$$qLε]ƏE]c&cçпMFw DAx&ɲ^mV$O*jKW۱[Ey-q7(J>?n0ʚ/kǾkݯn47i83>N>-P'6Y\U^0:*t%oDG3-U{/hw" ·j1`ld#~ -c#?J~?15S{eFoshXVEXXԘ~;~鎪;[w.Le*6Ҹ7kI|4nG*[a2{^kϻMc=qQVݎq[sU<.A'sϔ핎!iY4#. mOcr,YivKi4f+ -8A,*ى"A`˞7+5&Nh?tz.{+gHW{i J}e4z-B7@?Ӏ(IjNaH;,ʱp;Kz;=Ow alMϓI{9_pȵtz$^jxZ0[ìh72h|_YM_Ih 6ZcsQ芢X]MQlnAt۽Ю"-'<|7AW壬""HEDAƗjޞ.&Dqͨ>+]'NX^@f¸q8<\0K=YEMH|(- > sD( -|~C<LXbXٖe]HL.K$zcVvqh4Z
!ҍ_ksTVѨF%6/VI6֪e7I*:Pg <iO`dqŁzӏO 9 ؈
Q -]/0^hA&7䦷~/$]e: -);錽A/_t2]]P[MsNUd|!tS1@6P"
4R`,e03.,Hÿ8yW>YcҖfٓ|.#Wm-$ڃʍqw)AxLS ^.n\ixUA43
j+萓hh̟/ӏ6_0^<hL,T-Y;U|#[(yg@Fg)˚nInS$u$ -?è+xkݵaϠi"4págD[-`^6d'< p --3qj+4@r:zt
)9ׂ\OF&ac>eC)ijd9BDߙȟ~* +xڍYYoH~ϯ#D +c2Gd}hD"5$뷾&%QفY]}UUup_p'?*<$Qp=vwrIIkۻNÍgK<a nƛg}wI9yAY>իkuOu_mn^R晶ެ+Vð?hJY3ڱzt;An0t'1o$uU0K_pf}[v0^RDA j1`ld#~ +c#K?J~?12S{eFhs4XVn>595f{/]tNVZmg)j#{sIFayĶ.~_%u+^flZyw 6kgq.z=ʪۑ1.B{yQ\x_qVJV#_'h]bPr0$tF4v-4Xya?v,ǒug(џNc^JĢvhyQso℉L`>7!ﱷ镕Jx/5-!ClFAEP=fHg9I ^u#iǑ1V[9z'|SogٸǴtVֲ<ٝs0\K7Kuu
5zޏoc-6̧^kv`0P[9G)cL's=^rwK_vi9Y[wtU>z,]Dd|}zR@)kr)KЌ蓹Rp2|:k6 {EA#
ԃ:P[4jXی"X
0GtٍA
R +\vuVQNDjJfqq[>߁~'cb6Fy:ܫF:pYM{pHH.*@'G2z%i:r{1WnGC/O;S0zi|`T@;iPޜ +tGARS(曪V莥U+'2ڐ1D]6Aͭ$Ja" +0X0h!VK FcRRvqx=H_$PLÛ:tM)ᔽnP[ADê\}~IU``,8czealTبک٪dG;6:R\tC&Nr^$ٔy#! +S'].JD~5lkzR~T('f~|N ͝ޗj~^8\ +9E3tQ%pAq'9jFge,ߎf2{)AQLŽۙmrep419Yh77KQlA)pZě(N/^`>m<8lrcOyY-;" vSrVR5ݨLPa#&k}cCNT LPuP]`Z"bUJkm"->/9Woykȩfsj*?Y}+Y4ϒoENY&C+rZ_b +d7oBsHqI' D>:C]Nlkٜi0'e*iD&bZ/L.¥H
[= +9vw!W24rIO;0QI()z?U}{}L/kewB +ӳ0LH(_-|iұd揄ObW>dޤG3i]̳YI5L/Kft(gYz6Q:8Z_VE[&Ns{/uu$굍s@7.-47k<e_V%#&/tߝ8sWOJe=}f7 =A0 +sY@oZɉ"1$3LA,FMIL릴~o,G+䛤%Br07eܱ+w[endstream endobj 4570 0 obj << /Type /Page @@ -15745,28 +15614,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4576 0 obj << -/Length 3870 -/Filter /FlateDecode ->> -stream -xڥZYs8~#U1$s߲d'S㍜l,w$QCR/hyR1F -vĞÚD2W&IUXd(<hH'5v0Mui?QdTi'r۠M?tzh;X$ -h0-eAhz\$ Zݬk8Z~x=4$Os?r~:y)QAA^NCJ|zd]xwך4EgI!R؛uĖ5o37,nxtl J4L]q`dtlS55юjP`G۶if4M(dUh9>;4nTKs?fNZ'o/"Kl&+K,-д?:I -s8Y9f -Ri;[
u.<LHC%Acz
+ }q@FA2H̃O/44d;+Ҋsf0S&+1>?KG³0;~TZNڰ H4DPIA+ -8Y>18D=[陵ː!H ҀN$os︇a eC aMxVk&|5OV
q/@5r;)ˡ ʼnʉ@7OLnz~Zh0d1Hc)D*т6ϴ2mOB3=PTA~jaz:"e*qvxsʶV,ڢd:x Nmp[NoqY -^<e@x̮$&ݮV -\mߙxNk)ݎa-7CC^*F̐=)LG\(I҂$`
bx^aL`yi;0H+KDVс8CNk?Zewjz`ScCj>2HQ -2ri!|O4'|EX) `"cwEM>ݱAEf -vw>[2\ZsD3i 1֮ -tEvET N^aȪ{-ڸvá|dOcg_2:%QoB8f=ʖSjz7ХnuE UK@|lbVĩKUZ[LsN % -1pme)deAC֝Hҡf°LOhs^D﹗Ռ|~jAB{ -ܗ+έ?L[pNN҂KqfEhx,vaWaxA9A -04AÜ2COQp8ƋLDmɤČRsH]y!neJx8ĤHV8g.#'xAYȘ~1$C*B_;#1*靣`~Kj8goT|1Kc Y^QN*)ARP lkB#p`^O3182 padj"Vj&cR`̶c'sdِ,Rى!9v]+r0"=i̸έO+B{a=FJ:jз[Y{G?9J`IzlUDuG -0L$BY]8ӌ_i>^O!ZD`!25.?{և(O;s6Qj:-7&Rd`,|-->+ڒOq9L\b
_ioO44:7rQvKj4 0:}Gq&>fEor;$23Co~6WԚ u=ywslGEQ?p&s!ɰme%D:ozo^ -x:&a|,L* -s -*#o5&lo\n8*a!PAR{de +/Length 3752 +/Filter /FlateDecode +>> +stream +xZKsFWV0oͫlY1u "! +g3!_}Ofox{;vqA?/~=\Ђ~/=MQ\n.$8gEKufOqaF/Qy|I*pgmoɎq)L3<gnJro*[|VCEsۺmI`zLi?y0:徥v)
38{j꤭R1m&b'kzY0X0,)ta'>gNlx=YmO{,M8]N"0=Xx웖6/9>yakUKf<k(`=u=Hn2%e SI@NBDLy*YRhmGfw+^;qIh%ZVrO$ӦM8³vD+oq*iQ{DVf?O~Ѧi2^C{cqg}eA54_sojz\Q}/ktxEVK̶\u DNIDbrU]YGAdYcuT!cvU ޕ]=nv=++}[+GNX+>z*R}Qu|-xI2eڪǰHM]NsER'iP$ %U߈8BL,$4J\)_O +AO+Yy{m)k""g6^ +`fM#xT +]?,hcs8=ǯQ"bX2&U۾N Kye<&oWݶ:6vm5`g-mFʇD?lXĶL?ތ3)!KBj߶Aw}ē +iOezFtTlH@v} +mUjz#me4[QM)&Sz?ch0l͔b3~7ROaǦ~ F"Q$j1Cj0H(zW $ͼ+)V|s+%B'R畜q47brd| o93;>;ԙ7K8c&+z:}aA:j=S}9t}k0M sV5fTGzhЯ]nidmq31 +s(|F&RDIܵK٢>DŽ h<@`٫~D#n9SeU/8UgleٯFTrxmCICL`oNвPr\?g8,yV&sc+0Ph$FC(ι=#j/z7qlG܋fs!cF$Wm5>E2~ eA1H +$BqC=%DUcW@ۑtP3/CqNϗA+`&99uؤdtJc2s:HRՓ3ɠH<$Sn +GpXW&x_xFUFcIVlG<32[%:r9 MJa7.QDx*`֙?C H"UsEN[e77f{a=&jcyf@VvXZtQ>o20O;Ŏ + &c!8Q5_B>%
hK:\=`(;Q0FDO|UoKHٽI#a0m2ZZ +otW(ƶe!oˍH:`j1AP6iK/%rQʍ&_uf.&ٽA(ElE-oǻ=Zx5IM+-&~0=8P/9ꦗĉxc;[ˋjEgVAO{Pw.m)8]W{FOt3&r +%߁9g4FFS"zVXM!X7 dK nTB,S7IHg<I%|Ȏn*sչ(+9-Q\iޗ9\pl5 Bn4Vy/
U*1d\{dHw$I7ku7KF^.41rT\jfoPdY)qb@)+1^5\6ۥۯĭcyOM._=p[m!r8\xgifT~zz(N=Ih^74(<Ј +YD_|w*Sr;5"`TzI|hxX9X7]}TĠ8];1opPD~<~e潈y|gml/7endstream endobj 4575 0 obj << /Type /Page @@ -15795,29 +15660,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4582 0 obj << -/Length 4079 -/Filter /FlateDecode ->> -stream -x[s۸_K虈!>u/I6zHY)RGRqw? -_x|"e%R9_B~%>"34uN2:}Soʎܢ\uǁz⫼Mc&;\~XJifM]6Ojon-T?W)kIW,iAvᄇ6EFj[,q"JKV*W-f&Μ}ox\ -0Ao#Tw\M{b}m%1 -P(/Z`f&T˪ qnD' F:CxPvI~tsEIrs[:z=z\+cLU_{ƿ
jg}x|[V{ijI²np[UyNw5f)b-lIZJ-$yԪ^Znvr5mQ`[Fz I$/($)X?/#!p# ~sJP=[euMf
L$k0J쫜y7kr
ZsMkg^Ȁ͚H{%dnd;T֣QsU_HC(:]% -[`3h/[RnBS]z.ͨA_)`e -XѕXe5⡒` 8K' -K2D)Kp'WTI
K<1O*k%)PeD ދW/gf8SKB -R7} -j -{gPJ
%:o}vh]lrpXf]?H= -vfB'T1 6Q{hJ1:]$'sGeO)0Qa:e*"l -~|(u1.|>2 -|9`]PsL`:E/q{ڨ︙J67L -ZMr$XM_L`gf"SrA1d
W)R(!5id.ff6Uȭ_/O=phV)jEJ>+-݀K!c.e3V۞sbˉ1؞q\m6m0)2'i[&YMɊr&"cK$ -NʾxɸU1|``I3JrHVtw)E)zB<@ńs{в#JrI44[d,y -me~ =Vs"ԬQpI0́ '("Bka⌅㜺 bNɔtyܔ G@ŋ%P|316) -bINDG\8rx54|)'Sڇ(Ǟ|ttd*zJ:x[BGg">ԪD{\|VC">T -t"uZ> -Z%oUOYbV/0WalΜ0US2<K'en53?@
/ - ~Ujr}V +/Length 3822 +/Filter /FlateDecode +>> +stream +x[Ys6~ׯET&@˖"lkR*r4\q ɱCC*;fKh4@Ѓ?u'QZqwh\/˃Cs<7u~qξ?Nj(ysPWP:֗o>:<p\u%sݾ?Ju3qg/?`ۋ_/8xu9bva\of<O[({J́ |70|p9Q3{z7qlQp:-#2bB=
u*ovP@kH8?ACQeUGmc~l.5ݺhyp,_;#s.cܤU{psZYF~;$98Jhj[Mwխs.leӵJڷkR#iq<̈́Bm=\|γ6j}3|~BWso$h\->qz;@vv8xClR>;g5P7@:Id<X%QӼI˒;ڨ8m'<C͏2tC):+T;HS/{0=ߘ8G9Dt$b%~(or/}8^ev:ܭ7Q蠊#7QEg.)cdL⼩5.aZBƁLƫ
LZrCMR5i|":;}K(JuLuP"T{6o'~}DnFΖiA]ZEǚ%9weU|k2Smݺ+ϥ) kߑ9AOP4?#ݡ2T,B!sv}[ X"q%mu.te:F/JOw-/=!Ph}qf'**}
jg@V XV6#KB&qhJA{kҽov#Z,k +Ew$ 'I +]iiXz#,ȍΗ, +"рMAZ?2Xu4L䛇¹8]CyW&%=a 6<|9ȫ8f/XaI]x/t|N$i" +`ǰ[j(H@aZTv)]SyY~7/w9PJ+G5lDk=Ϛ{?`{ȇ/m,:ߔcHorj3n>;hft*٬"U4\\vu#s\h4ä>=EhQ@9nw[ +&Q lL6mB\ecUމH* +*J"p4u(IL(dAI`¸G)t$4S, +]D¢TY0#d@˲x +9^Dfq +saVܫ)#G +WE>GHԹT8QL +|3:8S ocbb.$jhpLJR3X3ɓBMA,cWb:ؙm#,+) `GfRDE汚rHR5 Ԫ|֕lz& +\څWgke"qVTVG8GҖ9>c\$LFu2QFF[=F,/SkIj#~0+q2 FWW+?7IlZ!E3}әD: Wͪ0C] 50bG\<Py=dfO,vkǗrrǢ0^fF\kc}9=OIy
+K;?]x?5U|Nـa!ۡ
,Y9.Ɵ2`*F_-jϴ[FiN2ÿPmn8^ 3^?*Ty8iP's22\%W\t endobj 4581 0 obj << /Type /Page @@ -15852,13 +15712,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4593 0 obj << -/Length 1766 +/Length 1748 /Filter /FlateDecode >> stream -xڽY[S6~ϯX3)eYe(NlgBoαI
nhd#}"[du?
툨-{%?w8i0RaK:?;Ǿ9Q]9n?> Nz[G'G^(?i!T<B}??Z -Ɠ*J25>y i -p~Q2=2݃Z泴t(vG0G2ҽ'Ido#='4tV7" 8鑸Xn7{ p'6)xm7F*X0זD3k`^c^[
d-c/Lm,hk#l +xڵYms8ί[LX_ 3Id^Ber` LHM~jMhKO֮d두Mdێ4v`J6Ӽͯ
NӳG/i5cwN74&?;l %aضN[:k ig'e1 +uf.O嶭.b+^|]u88+<zq}4cCñU| +D/%E:)?7dXÔj-Nk^yCZ22l;zw?挼^1N53YO#>"lp!MOsMx 0Jq
> +%CZV#Ù`QkSM~GW,Qi>0/ +3 Yܲ%
+Rl}>XQ,ͩtƌ#J/zoH{u+eVRF<'.61@\ey8ǧoڼY(*NףjCx1[*Kz?H0uL'LP9XwMc,-*|Đ +dV
>c8´|ʶ.@ۛI6[ulWz? +bMGe`qr;Bendstream endobj 4592 0 obj << /Type /Page @@ -15875,27 +15739,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4597 0 obj << -/Length 3499 -/Filter /FlateDecode ->> -stream -xڭZY6~_7SUC -/W*ZyOo?~Z&qpd߿t+Koq[\wo?~S[q;wDe87Qh|qvXoĄIlxe)V: -3/ˊL3gۙJEvRIv$K}_'DZeIxIx7)Doܣ֟T|3p:\BK4^ۚ;&#='˥LB{!eR -41qh\Wrh`ȸPN^pd.⠲GC]i(c3km`ۂI" i=z˿VqH{f"J)RL3[Xy/ u
*;;Ԯ6$(w-r* -\sTƪ -6yj'd'C4 ֛,,$-((m1Ypd=RrFn)5ƚ˳nI;Z
ͬKw q$x)V# -JlVw"֙fr#weO8GG5 -8>b/h,˞{.s3%Rφ|J{x9P -I@
QnF^ŧy!j&=G[߱Fdpgl] V6y -Jۻ)=2-:dl@KB>F^PRW{wAB763H:RӎKt@Pb]Qn0ͤEdHkǞB(2QcG.(1O -iZ -:k=ga$NtyV_a'k"^8D(Jfryp^OdQyk8kq'eh{|fٖ&sAⴵ)ujd@S2;y
╩BiPn鏫~HBAQ3([:hi@?uһl~WСڍ7?"W*ǧ[izY@&MT8J8J}UP><)BMœwB۽'{`+h89υp{J4hOZ3ЛfV-7Qt~:=hbV) #E8ɽ -@ `F.m_0tWGs& - -qį{e襬KS4T]6RkH]nQ=sMSbg<@vZWZܑ(tT_"0|--!,3ט&| ƽ{<5̹1~9K4",t]OEME@ze6"Cxs窉T]q:x` -.ݗu<z4~݂gqRoD94dp]e\E>G>/ڢb(< ,MeV'3&N3\R)Z
+wGӝg*Vqyٯ80Sn>[ -]Ij]r\_tsf#wVk;f?lT@RӢ4dGsW8y`#!-=!{hG~@:Мܥq*e\^h)7z[T`ͥav%6wyw095$a4$줇Ѹ2
?Φhym')p-GLhc"8?Z SH~ZEvpxR/__މ:Ͳ0ļ +/Length 3423 +/Filter /FlateDecode +>> +stream +xڥZY6~_7SUC +lz`hb^STvUOhzm%zϻ@øtuK4a}ZN8-+hO()Kӕtj#dO('/80JgW#R,ѡ4GxH
1e3w`hr-`H-MzG^Pm* TXJDE +:fR*HfyyJ<rg&..mxS-!Y2a&nh=Dٗ +6(P˓➽쉹M/gԉH6 !fb=~ڭ`іcm1'GnV<7wk`(s¦.GH|<mj়OKV +efm.
QE6P}Iִ$W;r+ v + X(JSΘR ng-㯲A<S@!O921`N1uQ֥w2v <DRgTJm2E`f?Xsy
B0xYQ0u={D}|3임`4UJ}@A\b|N(bya"7>2 H@H +Z +:k{7ga$NL#'v,f-8X>}_5Q2Bw +5D61+ 1E5'W{\قF@$ud~1ٚ<}`{TJ&)ê[?&=yQPr$4FN#z4@ +E] +?&PM1\^+xYc,@G,M%E9(9`FsI6^=GLQv
gM幐dO'7ꪟMe#BJt(:[AD3=GSAG^@qjI%e!qF +%m_*0C
g.<TLx5 B\v-O F"\**ygqTZIxg-!JW'ȅ.$(o$ 豯t$U31@3t"#vVh]jGk!0Ew_eX% DB7a< +Ұ)1|v,|^={6C"C%4Hb(Y '&^Y,c
\gzIɖ_f&K7l +QHPqI
OuTI +߾8~uF~R0p?UOS~OS~8ӔPQ/~C`*4'gw6;WJ?r~_Bƴf)ζ)=zD
u$4ëט<k٤^jrb3!ziƣ/ Yg^wƉE %
Elˎ# +A? +q}TO_,3YΞcM@C~WxQ&>Ms
mC$4ňe<C8y.;n)mΔM=NX3҈;壐 +"cYBr5a?U1WЁ(4BC%4ݣe-~d!Һ:xH[O +AHŹ\lZ|OSz\oOk.h=@FyNyZiKOuEk4~rRR D8z4dmiB>(>/#b+/I~rXEyF(uoL@91iag4ﻡW+U.;eZ&]`&/>W< &̐4UX3iQa`FҷϘo'2n,[WWg?\-炢Q=oqPn4tQA0]jsvl%,~M褸3!t؊m{5Y$ֳx,>xAWq(ݼY0`$fm7+}TyZO6M=y(t&(xl9#2;B8YQ*u+X1^$Xܧ ;Fs.R']l.gyxR}ӻTBWQ @9_pM#;5[5Fȸh%UEOolu +`GzIy藥Q-%gT\~UFȜaY)[ ج;"Hy> f5e(X=0&IQP͕{ UQ endobj 4596 0 obj << /Type /Page @@ -15936,19 +15803,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4606 0 obj << -/Length 3184 -/Filter /FlateDecode ->> -stream -xZI6Бhb67$N%ǭd*-%V$CR -wX+(eӎYuxU4̳gW'Efa[Bq|7MR@zzi0bS,p\] 8
~
ڕ0!ImR.bhJr[>2aJh8gc$ΌdA}oF#I -iPnfq.a}uuL8xI8|U ZaU*`в;$-n䞮u̓ =؇ḨbV(˅3/sR2<Rb[-4QTаzvv;0,p<(hٗpL]D.H&:{.KzLEqjR%*
n]'h
<^'MkuA\!R,ZD8:7c[dp(%dh878)B҂@5P,"*IJPG(rx\]~q5۾hsŰC
(~V`RKF%@Zce>U{aHRm
x:6A6"o/g $V@<'#$65feVFۢ`'4%C3ֺ(-_w(GS`
kSF`y@ 8F:XtıdG+dc!";˭wG6j80ƴ49XMӋ4Ou+`픊wluṋ'Mx+F"~2FR)DF2HTk9ci-T_c
|8ɦ}7覣9^=e+Ũ鸑l -;F/Lr@V_ꈦDN4h%+Ce cSh[S,wNwvRVQ.,=2
.$,3h>)S'NL_v/NS|[qW'
D}.ɒU{mF2!q_Lc zYi<ݛ0rV~VjȖ~oq-x\v/)n$=v"G<2e7ؖw`Ws1}R+_6z~UppbY#uSY9| -I!Xs>i}22OGgrxD}A҉MÍʡJ0%c(P~Y bkGXHZ/.,?TQl/,m~ŦC!sD*)Ul(&wMɥ0C@9_8~h$_!?؞A½lDbw&+QuѸ#e3.,8oRN.¢0MxC~ݗ7<Ix˯-?XEX[J\RdbG<ҠOgf+SoE#̷sa/ -߇)aPй!h5Vi3_QdWy!Ֆ[jsMLZ/0ꭃKƷU㮌MH(BG-틱U6yUg "jg fJ5Ȟh\%m[F< -='t4}K1<titi++ -?y -R|"_؎;-VEBn QiBG!/v#L"6#KuSgs*bP!HPፌ@[)єzȃ4\ׇ&P^(b!c仧2ITEk_ h(v;n
[2tNW;'(t覥)%}Xe&,o/7d2PR?mxUڼڠi2,I(xF0[T+Z,y$Uז;4IfBwze@5t|ZT:(434CŬ+s?$k2[n~/df_q':css' 5B8lې^ j̃xrXrb)C)3$RqXjiendstream +/Length 2918 +/Filter /FlateDecode +>> +stream +xr6_Gjd +DM4PN1Y'BDԫɋHd". d;ٛ'`'I꽝Jԗ7g_;{s:x6MC<klh~xyOU9~0;éϧ~<y3 @!bϿ,@[2&AC/OOݭsz_wAvI½ +5aҿ
އ%9~* ':?T?%9 ˻IjUR +wKztk>rTU{UeEYԇ~ڰPAY:*X7P2ܫ-?嫆e"D3$`Q쵫tD5:IV-Z!_ԥ]3NM,8 9pv7 +Y1w1%'1/[nJ"l
6f8iC](y5$4c
Z0 +ҩs*B(_e}\kS7.FAμSfZIN59@X5 xC(p-xEϊՀ~g@N
B
/xi+T0>vkZmete(2wh91,6($QXc?9 +E5-.P+ue=y4n.y&7W=<;Q:
1fyy.vuA0wh1 odS i)5h҂߶E'v
'(q-lXmQí?h_c[f-S8L!jl{>nvvrՖg"{p + qcX[VKӕ
t(hw]M-sY%nXCe*Q6.O +òf,ƩZ&G'd J.ʄ{)3\B á|/QDx@,ϵyŀ_pbˇJ"k5Ö+^ڂʆ:n0X;-osMӹCĐ#cNU6c1a[ +e5*q02:=XI :=Ô:EymJ7 0l0(swuku]ߺ=q,lPJϺGP.ĤKpy,Kf}@P|9r@JLOQ],)bXWuέb3uy8fplGtaenj/[a^!f7\zw;!R}K9;?\ tyLlIր!k*= +FpCs7,A~|=-A%!l#4QT˭a,+:)ݚ҅)>Vϩr;\f#Q)&]@JMQwW8K!N[cyk
ʐ1ֆagh
]#vcJf !n{K蚟k=}&[.ۓv{㞃\fR!/[.5ݍ .;Ordg:;I`[k2HUɲ9dx26`|)<'&5r*wN-qB`^73* xHDi S[}]71!eeRJqJ.)8,}/rDk+CݚNv K.8"tTCY8COc!EZCoUE%_<QQs17}ˑ_ aHb +ãvO2ǯz=8ԃhB遦t?^1֢z&զ%^j%0yNk/*we/SfSڹ]qk +Q)JRnꜧ?s8]vOaHo +[@$;Ҍݜ}l@tcqJJe +hkb>`M־bmwڴry=+0t9xW
endobj 4605 0 obj << /Type /Page @@ -15983,26 +15856,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4615 0 obj << -/Length 3260 -/Filter /FlateDecode ->> -stream -x[[s6~J3CHoliNhS]"PD2it!p -^pW'VE=^]_≴Kn7nmQ(E̎9DڨhW7j:=fKLeRwfNtκGSel H4 NDGI'&>IR^v%|y/`--~FkH'}sRj(p9Ӗ7jla]1GޞXDf(-XƇ톿6hK(|ջ:62ʌiT -k EMIYEam}C3䤏[9XER5v -Բ)8L&}i؝N"J]}~ŕ*Iq@0ߕǔ!j~R5a$FHX=̈p6ic68@&iL -|rmCE6)Upj
))pǥcv'2䝬d͟3kT&I4X6ۊk, ;+_t&T -Q) -NB
ϙPBX+z eXw0{ (G'A!xRc?UShFHb3 -m|io|In6pm{4&q2|]6bv.9эcپt7yX偍=uCFQRG})t '{SZ6MGyOP{NUmP:?
tM[os2*~jՂ`Dob:ӗd(W5?(Xn6i͆3#"Ι2n~zRjNϙ&F|(:Hx30dr#8Fx_{6`(FK70i߄47/I;J!+0
?&lwU˚]0 -+q9WKpHߺOrAGC9vw%߽h0zj]N("7~n8 -W&u5Ny=Uck26H}Oi)ő^|~zBGWklKED^МLhj.ܟ^|7"߽r@Zt$Ư%t| -Lel -'$./k.!n*a:p϶+NcIpAFqkYwkf+,2JB]#\x+XeGujpI<M*rTk;q^7<ch)N"?s4sBsZ@TI̾K"njǜ{Ql-/6!{t%s2ݢpS܅H\[+p[ Q?XK1-5v7-'j)0M cu^+L8FmP_v̀x8mgfQ, -@FiX5zv/W[ -iˁ!"Mw_?t, -kя+r\n)I[CXOˍ_pa,YU;ŧdf𰺢dcumoy(lL5x#Pk䛁8͇P:[
HV^OvྭiXK'Eʀndhwu -S&qXBCBs#U`hཱྀ DJ))_N˒9-b4:.bŊ`_>"Eadj܇Y;Pد%Mj4M,ή7}ҽܦrXu.(nQ'tj<81RҽZNʶXբ0Mendstream +/Length 2927 +/Filter /FlateDecode +>> +stream +x[ms6_o'D0o:57m?PeqJ>)Ǘx<'3 +2Ƥ!EwN7dkeJ![YpˋzMsQ>lk
<qO#`o=5CZe3 +kx.Y;BD0jfzlBV &T +^yM*, +Zq?T^lEL;=u(g]dg4l衤SSW,Pl%b=9rrr|}/٫ k;h8p>$c1s^6+V)Al3&Q
yߦ=hh.9|=ٛ%_L7Ί<q=@t6YEZY&Y~B^`uCM@0#F:s*,<5#~ +߾JZ`x|Sq6yG%ٵoy%5%Bx ?F%DjFxR9#2`C<l<θCCz +!"YWY7gdPG3*M.Eo`xMS<{Ʀ1Y}6w:t)cwkjl[ 5*/58;7Zdl@EْY[,-Q.{oMBcn9>sGc opϹcXh&P=|kvPlhQgwߒ$;@I<I",rC +} )<u<c㒶iF7lMbPvXp7H-n[g-Ā} ɴz21eu![ +%[Ӿkcu$X%'* H& +:MO?jm&hul/x3b:QxFM&T e-yov)юXiR<uUc) +6D$}ŕ2ax<`&l?oݱs{Au_8*@q*^fbRywXB']w2ւ endobj 4614 0 obj << /Type /Page @@ -16031,29 +15899,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4622 0 obj << -/Length 3419 -/Filter /FlateDecode ->> -stream -xr6_BKR'٦سmXl)Ku=&L&C3xp -zw/ngX9UoC|zΓ$zw7+(\EQ]*֏ݧ7~gЫ+@է7wq/>^®W?9{sn@)$g/6_|xm_I؝i}gWgi>Qcj0VEIS˩*I"V -L""aq&2R0ĄB(M;A³^&gord| -,D5F r8Q(?z9Xp&\[yW:((u "ȉ(9ǼKx҈8E6B}NC dr4rY:V -,T$\ˀ>g{
;[ssntr{ow)r/a>e͘Fy'Nxg;>GǠ[ -;V6Q -]3[Vyo&E[ۉDzV{dV _Ku}fuAjgW4viȳVs2(U3HAE?)7;GRG,8x7bYЖ]1aRJ8&4sZOqj`7a$@v$Pr_!a[g;gpJ"ڠG -'Ԡ[Z0G}}9DF9Š?0%?3c,6 z{4!XՈeN s[oV=ڜ?FI'ܐM6ۃZD8lH|r&<M^c)C -)hZGVO`Rۊxȡ,E>)1|?v6AE/4XZя= pFZ$g=ʶk?sC=<Y:MwMG FhhoN7vnfF* -zy{6a5lMbYٰW
k"%7YDz3++Pi<pX9@Irʩ/0WN_0wxp1IVv[U(Qw!deʍFHyP{(f?1iR\,n[AcjU\*֔&KXAp[m6 -̐ḃ2##g:֮I w[9\8d-ed[faFk8u@!Vx,F]S4̜UāybO=̰7UC;-u -}^pLv{뢄KFh vҐDq! QLcW]bOZR(r5ۤ3|j$C أq>V_b<-]Y3nfU~5Deq42N<p`U2Ɉ`,^ VI0u}M?ު^@ 䏪f_Y8c8NiDZcwxM(銺EXY>YOM| -#>谤No -N$˚>BXJ^ L%aĎSn?JE "Y`>`H[K&V(o-q{ ^26I!Uah=YJ/֜Oz^1'l[Y[M:$YCB.@[tP[먫0&mog0r0j&q4'q0<{h ->4Od U :2V B\% -?O9gDP ?H\푂y.l>t'T -<fMhv7@:{ۇmٞoFn7;[{";rWm -e{xS;,zg㤅gH՝]*^p|ΘG+T|xٕg4:bR#4CkI[ш^Jƽ]SC(;WK3HEuIϜk -FaOcop+f;*"GE<-J(N,[=~fioX#1)?ʞ]\DZ.QJ5[pDu
caq:tC2A?d +G:59=[ܕ삎62d +/Length 3118 +/Filter /FlateDecode +>> +stream +xn8=_ᷕ1*R(;I 3Ɩ"=fi1f[` <:sH1O̒t؏B1[nf~$D0S~G87Otv&//.^/0DZ'ޛ{Zx/N?̓^엗^Lc\yN;y8Dl}ǟlQi2v4mT +]??:?GϩɢXRSwr$ G:Bsx94è H!ힿ`EJU/vichCG[6Ws:Nx[Y ך +˼^
x=4ud!WI@QA8܆
x8h$:J9l.STfK,ljx"Ҿ]te4UD|YVXX]2\IِD1_$>BEEHZtW)_0IvZvQ~BaZZC
buPU&ovQRx)b #4v$e@ rqe0=SPWç 4<g +3nf1l^-,;ۮI=I0NőgUn-CNEg)&p +<jQuS +_p}X*glj?/^S/XҮyϲ$5Uۭe3n)'ReC^8g!UFw2na,ʸW<d;2ۃ%}Čӕ4 +'z"N!z m1鹽#`?vԍ_vf*85 Rc7'5FhaC6(vWLqSxp:p¿u;Zby]."pO.We;'GdDa1p$ߥ%>ubD2Zo-D{mG7.%>O)JLYeuqkl!q.@@#4%"lܢ^)w 5DJRQ1֡)Ik?Gc2DEE"nyל2ZY$ޮ1O4mP
+nCrbm]qd + +쟟qmY+kD[ITPKt]͐PC*jb07ߚlXk3N0<4ɒRrX6Kyr5s N.ӦA6$u'<VT,wi%A_sV3Łn +<[c"AGGSV-㊦@N}(}%&ȋX(ڝ{g%X*af3[.~Oҫ>ԉ +R>Z<" tbTG"+3>1 BeA4Lv_ +Hs:X. +wFXlhj{撕UEqaT<|!<ՊٜmN:U,!m267zN ;1+6È3]6ǤBC} !YlO0#APA5+E$@~(׆0T7<ErݽQ@:c }-f28wy<wU]DB[!l,מӨ[}>]-I?EsupE27p#J*^}6ۛ<%I[{0m͛`_=ԾHddHiD?u)endstream endobj 4621 0 obj << /Type /Page @@ -16094,22 +15956,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4632 0 obj << -/Length 3116 -/Filter /FlateDecode ->> -stream -xڥr۸_Gj!>t8]Nd@K EjEʶ@H)mw2cȑ( QD"r4[_%Jt`~^}#OGӅ;'EFwDkI-Ɠ8Ncݍ'p7q;#rLU7qWS@E5ohz&Bh}Z6?YxאB0}qɰ#.)R0Q0\!-p%Co|8=γuſ*A`+ʶu9WF2-vҜGigg- -{whU>0FRgb+ܳ-GXPøI}G9XA[ܽEߺj c*Kh`o -rDp i<HԔ`"yeˊk^㭼4W،'oHȄ(ZN\0EQWJȷ}η bVI> D{K&1`UJq}3jVyPf-ރC`^-}p+'ښU[pHJKFCpL&^7x}deKB0a6\!b Fsz=16$w;$]{hҜ7#:";]Gω?9'diPYה!ՠ(7( U}ʪ'Fko2JZ#hm9:9@* -cCNB"t -q+<vhAd -,
"Ck-%/ -:|3)xغZ3yW@VI'Ƞp!"A^.;>BCyp=& }e)FƍIp/>h\}H=-bUF{N"Nkb~H:0×;܀`Jb"0m^Pjsp[#hQ K%4٭ん~f2 -#n[;33^ψ٤R<.i\։>V
~)7KjjS{ijeo:M-JCoz]ld@QO/5N$Va M$E_qVx#yPkئl5+*y=Yqg etU6Ρ^/ก|e(T-/(E3DΠ:9=%WB6x -:pgFUoT%FޙNy8GN;fai.zj,LcYubGk`jZfn{ư4Nw$1AҖQԲ<3PǶY$Z(qS)p(KΟC|8Gs:#p Kp)R]%ŮYx_0 -DG,?{=~ џK*Θ80GojjGGN7i 2RD&?'\ͥ]Ii~ݍqbDȾ;In-X.4 -+GZ;(p,\M|5BY2;%mź^b)B`ǀ"ŽX(Ή"IHyj!ia!l_BBylK"ٍ~-Ux֫XZ2T|=Qopϼfj_AP(rlQp$Ne@.GbN$wYN6Ư)>5q;;9#(/^w`?*мB%'o`P{<w2_P!dQ?[Kmn^&> -хa(d80,ιPZ{1/
g5l! +/Length 3009 +/Filter /FlateDecode +>> +stream +xڭr۸_Gj!>t8]oc'vy%J"$e[s(J6s!r?91U2M$B%'?Y?Τ'ZQK?D"|E OL)I%863}^}wu{y1x;5OÁ +U0\@4ݢI56#%h=8D8=m#CA;s=D80]t./@ր^BECKhh+qfM>Lr%@8XHsLah;asmGbG9Yq +DC +ÒȊ*@laē\eRtFuʼn+/kkmW+$0 +6G>x)! PE{1{i\hfn,ڦ=(NeO]vTmiQޏUsmm;cNx +1r]h;vG*_A7Kʍ7U %V7c $ȇd]dH22wIH`HȩB@vz\mx17?d#ĕHCC[;gXZ?s$8&8.o!wDZL֫6<;3Nda,X]/]jD +}|o㍋ +}mțOv3wQgS:y9yu|)P乢"dcĐvx*0/Hw?/w?=4\:Ǿ +m]rCm\R{Yl؊y%I20avpϡ]>#7'B$|VR$TJ0{XK\m`H=RM4jLU䀚 (WN4#ngF(.Fͮ;81\kRYĻpk + +)xwOA
:)}k#x[=RՎ9v@ܩ`-跏G)h3.u[nt9o, !d&96*s~Sovآ)DᎧMF1Z-%ሇ]7cNi3'@(Q{*'KewQ/EeB1]DꈎDurkZ\6mB@}u$3bi +6_uMÈfRZ(b>;XbcB㡜CPc + +d@1Ơ5(iVf\b[cră6JjbS3-W-] +0hAäsΘfi-h):H?SaYaE 0wXpfLׇƅp9,?6K<3X$PqgꡬN練҃;/Ff^b%5zCsďAe~HBs$\#x9 Tu3l,J{&ӢZ7//TJg"'zDa$$)Uw@dC5Nq< @wiher?9yf{gO<B=2o]*(.
ApJ0MʍfTiTӓQכK8E +¦p(:l"HVOb$0lz endobj 4631 0 obj << /Type /Page @@ -16148,27 +16014,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4641 0 obj << -/Length 3722 -/Filter /FlateDecode ->> -stream -xrܸS #7lok쁚42IYߧ_ -W5@{r6:Z]QA]~.Y+vk54ྏdR렽1aj%n^x^j(jeʂpFkĩ)vdΔ#CF#ʯUMzr+W~%}>쁷kU\*!N9)I -|j/}5pHh
XFIaǂ.=*ƫhTfq`< -^mT YK c2d" -ѱܑ+c{
; -2|e{K+ſ6%1F,
&zu -lLqfϛ<Ơy(X@2.Ç -U,JF^2v((?e@s -莡tvܺS"I$lf@v|Nr~o}X;5Э֒E,k
Yf<LlxeS;GQt.$;ձDCbr:ڕ$pn) -e]{dc`V+#@w.gic=Ӓ[ 1dȱ F!^e`4:= n7Mǭ)/i`_|I2e*,L~6zO6Mo*$ *J) 0bK.Z{%v@ųYW3+2S-HH6# -o#⨈R/+\rR.q4Z_IB<k/1lq;j=w!~L -$]vΉu\$ɺsؕx<o&Cg,% -{zb'!̘NDs0]
A$NN0P -CWo`k;MQ/3%ìih[oyX^'y$L$|˟^RvmSX54YXBvQ ڊgDÿ,=vǙF/$k2h`
2;.!TTPJNm;DRxEYYbI_\;2oW1sQT4et dd1+p(@Rɬç[ZjԂ9О-$TJ`/1֦cEK4= BKaTnB`6J{ĺ9-g(>v+2zEr;GKlVq]/KTǜsL#1kzϪ٭-Z}Ks*=oF~QAcTF`kZɅ(=SL -80^Tr@L}$RA%st^S Sf.RApxl꺉iy&,rZ4 -Ԭf3slUWu,/:S1ە J,Qp|LqGEtCà(?]?S̺פ*Q@bt2IU%Et'#zRw."~͇.ERwCdB9S?9 MxSOzNW]t>/ɹNKVPq]a9Q8OR@dR;|{1ipu 74"
<g{mhWO -oc;,^VNa<1dbbbfz<endstream +/Length 3621 +/Filter /FlateDecode +>> +stream +xZKsܸWLĩV7rَ4Hm@PrHXֿO +ޭ7*xJ/7ۏLgX0t!,8?l/ol'nLh~>h
p:VPB㙱:FK>:̊G-dc$S('i6OUC"K<dž:[)eB\i0vz\Z瀒-$T3>T<:) "zwT-y& +zTEu8!{OM{S5LPnD%} +.zkU2ő
Jk!'ΙA{)v8P:(OF[뙼k\+*/X!e6~ax;
*(44)۸Cb!Ay- ߡBu᳀j*~QBYNȲt8t_6Cu0e؎b֙."=N ++b:oSG_* +XWh!N)i +3%ŇB/VnAx]If4XFH,?P.XU +ihS9& +$MtIMTh +Di~OgVbc1y*!6fa/Q\mbr}ľ +e]{1j$r
Qhc=[q1` :FGi|sNE77G%i$4f/ +%JJvofM&^Ʃ]Ҹi'$CB +TCUj+^snpdE13'c9)Tw08`/ +u2}U:u';ŲeGd83afA<&" xܶ2ްЕd"6yBٟE#8{UF +L1yx!UG =peGg/
'qr#'iG{s +ybђJ-t]nl7.{qS=Pc*]uIzvwOu%J8q8gư%3߮|"'ӭ[o')%9TC$I]Zpk슚;z\kIw ܨj9F$V2U +LeM!ԏAMSJ2H.ᆷ-KrNbpw%jG\Paig-O"H#wt (3hR,ƣc2K熟Qnє(^7p`Pe^ +4I|dsyendstream endobj 4640 0 obj << /Type /Page @@ -16204,37 +16071,31 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4648 0 obj << -/Length 3747 -/Filter /FlateDecode ->> -stream -xڥr6_ҋ!zr<33ػVZ,HCx~HJ&[[.p4Fߠfi:%iGZV`3_(X -Ȳŷb3S~de~wOo?-ZkOiL{Pbo
Ͼ"yl~Va]k\w??^wQiql
G"u^*fi?2Z8\<gfj[N(էRQ]*~YE~l[8PGxFv*
[B -<hyEDL - 9 -5 шnʃ -\Ѓ}WuHGF9`wk%S4/(U9:Gq &a&a -o W2Z;=P4Mk -V~@!ȝtYi.x)wrdAqnްJ}\v* -=E1 Ao,PGNs!I9ImE/i0'CNSKXѼ_{E -ǰ+]ys_rOa"KFr nn Xbs]6O;2|ԙj]Vm3EéMUšJP%."R^SK\QA-f_BH]sY#^iWX^p2;qvX0Q78JΆ=aWYf1Ea>lj|06K`D5q
oA&g`F%Sg/-^>p&Ũbs>6.,#XKW#}e6$#H{Qpż.d-/sy -}w& -pE's15%dUջ5e)6 -CxlN=-x .z3pK#-o) "#0:8_IbL+YC -R+eOGƵ-oU$&TtS\79O -b%<VA\
-ji-g`=1a4J3MjeB˖J0.@"[,d` -Fկ[Xl!\8 qt7#H:,N&s8VjRh6@5)D3]P<|B&Θ(P|Az;OuӚwrv1ayRg~DCol=z'ڦwOŪ̅WU4cLЪq"?g4rlsj6ǘD -0]nxpHGN)kÓJ= -ЫbXPw.lvsHbtMשgW5K)X\#E*ql]m)*c -
뀢Y -"_ؠR6[>ཱུBVp^ -F-Җr8M։p.5Qp.n;&<H.E
# |TzS0#ah
vw2 -6Suo D/x@r[|]BhLRzC5wʙj*T_7dLY|Hucb9[XijNs;X?]ua}{N~|2[#":T_~qnJVۄ\ -[?ⅱP|tl!-;M`n6`mE1''"QH8Agl:*?CFvAʌŁF<}:ھ#YqJr{ -EOUDgփU}cR:D,h7%{t)#0|ꚓ@_zrb8r'B7*☒O"$Bl]]#SGajWN١`Vn>)ߤ sY vqy?!pSkdKAƠlpjVigz5X-$@H1/Z
?H9:Y#=Ր,.7s2|+_ 9
|!M~sS onK3ncB.[LAԽ -d vROr((~Ϯ?(ȗQI>iA}Opp4u1\M|}NJDO [zҶCX[x,OlRz;v6\JHfbhd¾z@Ud(,]3xΎ2#VHV>m//+tO>c;>9jxZOP!v.70R;HF" r*̸u9l˧Xzt:`F.*
07 -%@.Eήr&/wro^NMԕbX +/Length 3698 +/Filter /FlateDecode +>> +stream +xڭZKsWxXeb1jwm9+gN>@$($ +{5[̦ +ái73 +DU/Gβ̑!o|ֿو&a&a`麓O7\!>A{h@ddF\i+$W.f~`bQUi +5PAT#7ReNsis#<'+WU"#=SQ0w/'at~vt1x$)"
%m֔N:dh_ɰtj sؚ7o00KvofukW;<}EȒh䩴A7|(,YbqY6
>Xԙٺf^ڇ]gxEb(-Z^$-)pY`8'\B,h{j%5G_=앦|1 ;8"tԍ=T:UՅ~ba|;ģއ5ODZLt9GvQ~EHyܩC1Xz\ǺzcA.kjYPa\2nC2@X~wgL"_NIo<S[@ٞh+Mǵ@]K
YOT2oUf IA`%R@o<_
ޮ"i;JZG&HK` F"f,NRKxϗTlh7(_rlŇg="8)EiÊ^LǢNƨDjtx$c/⚳&0qSmɇf ǾG k@q=&Seэ +pփ5X±ov%bQg~DCol9z'ׁaݾXpj(fpaZY?az9]s?xh>QǐbS)9bn +\q'h +y^5oDZ@,w6mlwBĉ)u5\K9-X\@vy'r,GN(34/kR?N滜A`Lon!}(k +0 *n&ɥ"8bJ>^jxy
Laʖ A^js㿙P{a,@0YvׯNoOUmv{ɔ+7K;.ʞ:R2nn9I욏v}p"yw_ T;{8LLj?a-p +92S<»). |I +,#ԜwK<bG0לI]Z[*^BSLm1Is#qɎVl%i˂TqA8HWL2V +(YO2{R(@ZrA~Uu|kw#.ݍ xX;t.X KHqIz\ȝm|6 +69N}oB-x@p v_|]踑|)-;305eJ@W_7d%ƒb}sSg JtrBazc1Z^
Y^ѡVZǁO`EՑ_ȝ} +%VG0JBG PXӃX2E2R~&l7 f +a/~BG8 +!=ǀ_]9q[::yKENb0[HKZ@Цjod&RN8 +LTbHgI7F}N>HOmN
_$lH/[.u2m_ټYDݣM!S'3}.O`}x.8r'~9 -9(+ї3b7(/g2vz`K_dW D7HBwP832bKo+{ +k7
c.'Ir* 5OF&+^Y,<Ƚw+xY>DU:CjDʌ$)hbMlԸo"h1"ctL5^㒣;ꢥ|yE2Bkn.-T'Aq"mXOt Z& +쇆2kύBIEn]M
R +©P,|OfW3g1 +CBU?endstream endobj 4647 0 obj << /Type /Page @@ -16269,23 +16130,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4655 0 obj << -/Length 3718 +/Length 3562 /Filter /FlateDecode >> stream -xڥZs_3MW̹߮v<mq, -IvP"|Y X -Vd,
XEOӗ&TZL3UcX<hELcLj|%6|v(q@F*[;Ԍ>NǔJrL= SFqG潸eSݻM^hMj ^S9dI#ߒ&h -!cZ%I[BzjT챁R;UatB\]=$D
prɄd։F)dO 10t ; -Xr5sST횫If虸4O?4uCK\}q}0u- Z4\d.ᇇE!2c'A:bW\^ZPYDqB -fT#) e<J۠ri$p>CpJ:Ų#iEmkrmG
AR
lJN@y[}{ؖ2t.H N\zƓaM j~qVAX<KV,"Pf2,-R!X]PnyY6u6I&0Q˽:L-YAqlS"
H^MA :4v`ƧY`!?1K,gP7bc5ʩPa^%PucSMoz4$\3K=Fǻb.% -64n1ct4
<E[*4J쥁_%СU:pX)\/dQSOj]ܝҽ0MI|Ai:Hv8S-|Py(#RstǓ2c:8zHӱc08zᑟI!ɸ[cOWq{tn,IBdLrđ4I?w)ttVtl(ڢ&V=qqΜ1}ydeO>g0);`ԥy -=UɫWKw̙;<xڧ?ݜ\yk4xf]XbhDkVzꍗ<*qAʿ'
J<K3rcaL>+$DPAAj -%AeDd(
|0<8UbjRđd'ZaY'txBG )%zP4rR -a!tVmpjo's#w8+ -s@߃k*NH]"*tzޑ3S$&d7uL>x`-M2&捴K-?e
PϤl_N,0PHMaݬ\|p|BBYwcm4%6u$ -mR`o[GkgԿ-lӏ"lbNǁ&n -0ȳ ;a+~2t "OQg[endstream +xڵZYs~ׯPe0+okhJR "Q" +ϸvϕ9A!YfjuXIa̱-{.zA5G[/P(RnvWIВqM7`C,hKlTku;bO !jKVWiO 4Adk&»[x h yfnܵhﰢ#}.M,[t EeY?ރ4'q(b|q$ZDfuyGR':`bK+ Uz<3n~'c}F֊$ޓ(|Y+JZɢ0ӌ<-f_hIqU[nDNtf`e~IF?CaCC+|wb_/c%3Fņ;>Qa#}vxv8%)b7K` +Z f1B+2fa=YE'K~oGL'aԁV +.b;._ˍ3`BY/6%
(P˱ꤱ7+A?zpE_\LGI&$DqZ-AӸ9w͝[+;dd;{H4-iv.ԝQp~-Vఈڴ9pa[s.k?C=s+Yչ5k$8,]`Tsb+JĘbi톥nŃm6Uob'@NUXtX[%ЃRITOLxGfx)4BƝlAP?9Fy/+a`'KJ
vqh@Q
6;Q#rwR6*Ro9U9;z]-,dI
^s^4KwgUn*\\mPw=TYߣȌ3W*K^q{Y: "@&a'+tٵHnJauύc!s"h)gSv,e[P +'wiXV/o_ +1 + eu|^OLJ\V6"XeG9,踓d ~#a#)6zAijQfF +s>hKk]:d0N9\RWV{,٩WiD~(kaYu7~䌙K +T)TdqEUZ +206n̨{&M;Oo>HIC<0b2[ +_m
rf)`lF*ʍܑq}~\ovbIZI/p%4+{ISyr W5{vIT +Z(-%q/Pٕi>\Bk`Mt9!`n%˳&uꩿDΚcmϊ+BNۆBᬍ6:D7ɘ&˻`e簩 +%OMYYTxdʁSg_k +"" ɽ3ޱV&rDZ-_zQ(?~vO|O0B':%;r#endstream endobj 4654 0 obj << /Type /Page @@ -16333,21 +16195,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4665 0 obj << -/Length 3281 -/Filter /FlateDecode ->> -stream -xڭێ}Bȋ b/)i`
" ZJV)rCRA6H"e)G3g̹̹7\_Hlotn|} -JPV_o>G0 [s7Y~_]^*IR2^-W}ƫ_}q{28;@櫷/TwoqoKo[|͋A -Byץ1^^Q)+y2tņH5.p;{\q[0DxGm9la^N4VDv9<QzjDa1I`] :2}Ơ㸞!SQbEk5Q-O<Oϫ72~ -jdѰ2
-NiIl)% ZV5LHTUӱ&q53*8TܣdL1,䀈#tZ,C&CTz\!hH^U,Zqwǿ9/#hBfˡTl0$=-[VNH?$[0 -krQ/{wZV -yURyqPDPX7h%xRP2g!#*yΙp0bS[`"6~hN5tDA(PS`DzJ&T!#AhjKu=sD!{Eh2Y-%NR(f -PUSWyĎZ)'ȆDyArcaaƿi\lDO&HyP2jo=aWDXD}d;*$t)=x5H.j^ʠCN"h͝A*rXmW[/I9&$։5|4 LF@QvMuw* -fGI(0=$~ꡐ/F2!Et-švtjyhFtތ88CO:fDkCl{۱(narE6K?rU~FHܾ,3.Ο_*KppG:>BeCkٶYGNw
9|Í}anC^Vc3+)*,QQ[Ú-?<Vք'EϿNpV=*s~*'oXJ6q0g*I(J̿`#XdJ}C!s;&')'c5y(Nh#!.5uyVF:Zs--O(7-D&q^pַ{dp@0zy -!lv;P| -㓶q;D&>49˱P=X+_^!镱OsC}&8<2yPڗë`x[uQlmLLgO +/Length 3144 +/Filter /FlateDecode +>> +stream +xZ~/GM..!=IЮDD"U6\I9m0`>汳3Y??K#Ynȷf8ynMS""IRw^5\_ݼ/&}6B}͛k!U\+\{䫛wopw_\Y.B7?rP
t +h7#S;&{TLH{4.D,zZH,5y{W/;MF~7,Myy9Ὄά)賅V)m"V
Rwwc;֤9bh4li8X ގfD6#*I6o튞dO8H3{q-kUEQUxP<kCkR.<q>j\g*ꬍ +.U1JB4{(y<Fưm^2
VC8p,{j3V
n(k5m~4gv#kctd]rG1D'^9a5i)0Tx|>:|%p14FWʅ}W5bKN +gצDG5;ر,uCi1l"={ؙQJc]kxBU~" F"xуF+s:X4p}5GQ}~0,J8ЁO91!ӈ +ćY-GKޓNBNdQ{d LqAIaD!::FaPKŃ +|7;5JFqkAyP@IVVLDnz +8,qRsӎ= t`;mnWB8;w
T)>}bzT<Vz͚
x%}/CcJC7 +lxX/B +
Mh#ښ@ +@e*;AdK^81± +dD6ak+. +}k<WluY
Я4Q#i5p1K+Uowq^'٬Q[k +FL}2HT⣭5g7X^yg=OFiNf
?I`Gؾa +๗wv7ql>mnHo~ǻ)I̺^'j tbv{O{Ȥ:Pr?~d0 +#2J*z[\2u? +nʼE+>`si@LjB\h]q5N>tSo`{f)N|WZ}AQ'Jc7?%endstream endobj 4664 0 obj << /Type /Page @@ -16388,15 +16255,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4674 0 obj << -/Length 1440 +/Length 1311 /Filter /FlateDecode >> stream -xڭXSF_DL(܇LaX-9eh A{ -q'0(,3JDŀGw揁gIGVGhsfr?GD)ņIfۡφ/Nޞ] :wGק~{(>]㫫tq pQ(|ȣ\=p,Z͙h1F1_76蝎Ԯh>]
d:$Sr:%s0W;AQ{[J"TLfjl6)Le$ˍ -YnMʔ\/=y5M
EH0\O@;6":i(4MXxfRF):
L -.eH-nq?Ȣ;)\ -ي@^FݦM2>/ƨT-)"i>'p9ջ`UV!MWa_*`!ẍ́.ؾޫ~mCm[\Ք'ԎR-nٸ; sӞoڴ~nƏYGU7=ve9IYoϢ p<M}
W~īyKtAy%2LZېX|)a ?ب2v%endstream +xX[OX~ϯJ\}A`UvM)3g NV Μ̜o.Fx~UIČ^>qv w{H{xbể?ǗAbAlj6I +_ip|q$OKGHh +;<vˁLCh||[gWxS6LG +<{<tęJo4g"MHŌVn>]Zs=ѭRaLdJl%lr7ܘ$kW]uހ-hrzԌb}:Mh%w2Q +y:I.cX%j~v2/nf3Z^*XɑtGWOV endobj 4673 0 obj << /Type /Page @@ -16426,15 +16293,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4682 0 obj << -/Length 1145 +/Length 1096 /Filter /FlateDecode >> stream -xڥVo6_=U&ߢ!K5ElbrնRII~w<J:}Ldr{ǭlv'2JdQ$6}`堧'ΧiNi>y"d{v1=?]MS \y<NON)ӫYW/(D5m`Dp]x(vbL'g:x+V\︓j%j҇Z2neIk1^8rskue
ww^y Zɾ1Ʌ) -M2#:+JvVllԛg՛+rrR23$M<ˣelR<sWU( 6-&5`D0^ȡW -
7/-9ϽQͮY*6l- -L<˔<jE`i'M};Di*S 4Eq6[Pq<lSiEMgC -^91+h)kuDbYZ$yRHa:LfC-T-4:}5(';2!if
jZB4<[H!+.K^W?-.̆9= -}ZՄ
~?`m!\R҂
]CMö_2R`PiH$lAyD>p͆lB.2E١@Fn{c}h!CNGZuGz@UZ^H7! *[\
WjD[x>B3:JAP[a$#.endstream +xڥVKo8WhOKQ!E(n-b*) ;ál'QC r<(3\2)Fd8Odd5}gu"/E̖Ad3;RIӬ({Jvf}<w➜MOg)OMOu;vǨyI).>^_g&`3͵Uɗ"Y@B&%@.2NQhϛߝ鄴F0˴.wvTU>,^4!*J?brI bW"O1: +$Сmуb]0vϢy:fߏy*DHdLo1ijpIM2XI,%v[8'FMU(,`0*z< ufPq<=iD@`Dz߮&mpuk@GH?O5w] ]*<è:vc6(J3G1j-sկ0ĺx:wuP_Ѓ9VBE?}3F4C
:`z ^|8ݪjs&-b8¼ WKA۰%OiG:us>mhPy)rHi-ˡ]`RMȚ!f2%t|F-)+bAXT "#%T,WU~
XoL;iØ1m]= +MC.$-tAPڅTv` 7ņ'Xo endobj 4681 0 obj << /Type /Page @@ -16458,22 +16323,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4687 0 obj << -/Length 2983 +/Length 2910 /Filter /FlateDecode >> stream -xڥ]o=B}V"u{{ޢ_ -(6c+KYIN%ʖs@ -t($˼7?:IBcڬ:MY#Ǔ_̶]h - -y1"7I1;c?cv3;ܜJ<*svrVb%kY/1`x;M5C),M;RN#;J3GpO$nMRreS_T!FLZ|nI3"FsEWC<p/oҞWE! -Ae 1i;kMh~Aвy:S@tDږDߡ!܂AtE9I%)Sgϊ$`
B܇higE:r(%#,#PaY';N=O`.Sy -{NemY7
4LA
@0)`sW7ֹ EfgLObcތYvsJęut+Q"c쌿rs
ڝy:m5kuxVGd͍l
!l -PIGakV g)*),)yai
L:K@`fnY0I3X=sY++T+KMF|:Sn8>]+=c4g.TXTp_7! --2_+01ޱFu* -Ɣ~x<? p*j:z"w5£Mt?V\xNv{qȣf@| -rFѫuy')IEDvaRO} G>oHSW*Vɲ2 -1,8HM_\^PMtĆ+o402#p_t'ۦҡWLвnAٽvsWh$]TɇBROiEZ'A^l3'.S:HH]]hsơ$6(7endstream +xڵَ}b4cGȂv +}TWW]5RU)VYQ.Z=_@ĉ 8͍ݤ:BFaĻ:Z(LS>-Pq$I*hzc4(FO~nmy
+z}nF:Q=4Zp +~0"ВND92܇{+|ڑ$j >oRC+A`|J+ +?mceEVrOFivӯ +`Z?OX+>S!A9꣱U54,C%92`,Ld{I|~TbxZNbvߧaĨ$8L|b/!Goh\ +;f8F5ٴI%@20F^2! +I"t/.#;TS'ܯ8LoD +Qbu3I&E*gOY~
+`s,?^aq66.1+G;rE);a,n`Ⱅ2 Sn;Nק.Kqf\l{@>9NI%;y&ӈjMe?Z|}(:o.P6DBFLEW^=wkRfIeS3+؈xW0L=Or6J5[unQ=cJ4BMƈ+^ 6Uy<z\-Bqp "k\c]cΡ1 DxeN`PqHf| :`kV{X5.s(hؔSsAJ +7ij΅u*AZ{9/Q?rTVӠCe&ωǦ<x>C)1 +m,Ͳr4.C&\äs-4>-Λ\~ֹSoZK貕8Uqo~wh]('<W3K#qV
3fm|6zX/¾+QoD)?އ$^jO8w&0_oF8ZYNΞLG#ّ
Õb!*=7IF| +h_҅S^J#$ܜ<`GUgv=lxiNg0F7S.tqԤ endobj 4686 0 obj << /Type /Page @@ -16509,23 +16375,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4693 0 obj << -/Length 4261 -/Filter /FlateDecode ->> -stream -xڵ;]sܸSy U<koıl\$eΒ_ -b^o~8{Ƿw#v@@?tۿ\T9tJ!M\f* -UYlqYnW:Ua|W}zã֎ UEjyqA0IMas:#ovclP{ --S'_ -؋$;V\fQ5vDz9yjW
a{(d;sɿ\;IQ!|:Nf$}|T5)/:&oo}<Q -8ߤyQrPBՐfk:QѤ<SeWD>|||& W+@H..-B6^[Xy{8
L&3s]B0i˧kSq.IXť
yeoA
q_8w~J<5Wn[]SZE8@\xp0S1iʀ+Ǟ"Iz:62ekLrm<̳Ү㛵[El
a_8Zdf:x{{\Ů\$R
|\L98DO1,*p ޤ*s͙XIS7't;C'%;\|?٠7{S?ۅ J"Uy]e4 ͉֝$a4N 52v^ -H4ɽ9+)k9ǔi5K6@;d @(,b+ccvn FG"pjv-|o:
u Ikm(&x}KV&Si->+K0G -qRSohc@ -"zw jZ.`&àEgAXe$~թsjyr@.8Sq02q
F7I=ކ,==vGwbcGh4\_Yw%3ΏU]T觔(<%:AyjxZ7Ӷ#enA 덴TS,|9>Y=eKT9P.pCh][rG~-Q:W6`;~@tdG3?L\z,TXZ@=hF@]3xܳo -[=k/ٰ(\X -8tuCpkdM{xlXщ6v#y%xkZL\JZ^adH_, ~wg7q=TpQJ& tv &@+H<[ C*x֞FS}vGX]il`6ϙޠej}7buJOCwOY}%_嬉w+vq:َIQD(Xٝ%'`뾟4C=VcUJpIy͂)70?dͩ9_QV&w6uy
vkQLۺ)xk˝|a8SST뭹XSlbN5ИTg>P4*)Qן/;`躏pFgq:S-RP1`-eߌ#-6GLQYO[Hyt@``.l(Blqsxr5Q+Y WsNuN_pNArT_$8sfNu:H2Y@97_F`:DژaKCUP:qAq]^̾1]zrR!ׅYz݊yi,`i[O̓kcfsdJ3'n8TI還 -$ɛ-p"&˵*%gA"\eC
LT垜hQ<܀;/t ㎃6,n~*YPǥG"7'z&T\+7+vްkaoy`6 ڗ1v٪ոJ擼ݻG'i}.ީu?V6ezvB8E^|wp#=iOTtW^|lfzU&R>'
bf3^c)o -džEn|FC;
_ ! +/Length 4068 +/Filter /FlateDecode +>> +stream +xnF +p3dr8q$9Pݔ1l+y[KA<9/o_Jy +ڟa9oAçyRa]{z-ߕItԫۋ!z=/~
)ymWr{{ur,daR瑱4[ +Eᆶ1<o
'8xX.qx$K7ܕ҄*sm6Կq +!CZk-i䞿t2#W0i?|LJlQ[a"Jr3~y ϢG\V5ܷ-碠B16 +%> (@qv(&x {d8=pt ќbK^<E2e/PãGjoyʆKbE$̲E +B3ۺ>L#\%T +ږ9+,TiP1peGi&^Ȳnoμ6f$&#rk=8)^.zV(U#RX0-/si|"wڥOJv֟+CS@ .9"؋h;pC*aw1OZp#8Dy=pm/-{TA'-y&ilWE{@$2UK].GErkNguhލfpo F
tdGFcK6/TG{
`6DDQWs\R +* +:vT`O))k%nھh0zs㙽ž)62dĸ(v׃o3@5 +*-V)P0H@u.*?u侎?g7ٟh",N~d!8NYt`ywӂD+ۀ ZBdő-lKddeSy PSpZZO- +<8̯8ne -b"y^W9a)ޠ} + p5MHD@k$o3yJ%LD71M>6 #`-XOb$=䋦Q$3<c|@638ĉ1Cĵ^n'p cqiǠA[P9&6FM6^,P-"U~{{$3EW'bafK6L7Qm$a+- +3ҶbSeXj6eN|TdcJa]np,^ [ qWߘOF^@p4@b+(6ݍq81gHcEHupJ`?NnZc +ЭBG%}{rMIiZ${R4GʹU(X#&`yvQy@RmƐhm +ҕ3y<scQ$Z'Fc)49:I9FvrMqbb9Y_kBGR- +Oň(HC?RX`r/@DK4VMZz])E<\؊Љqm>Uۮ%o@"ҀzW <ٔZ2щ=+H<T +p|Pv gXA¤yi\`4~nul9N25ut_8W ػ>حb0'/P#\<9Pm4wGt
1J+Xb%eQ{6j0>Gj8"e
IEck8jB<Rēim+]A`t*ܶN(G10mu`zq+ukcynMfbI<q(7FpCRiJh8WW ޢ#3s%Ov8N +O `:M俍Nz|j%,mbbq3O"ȟ `LJFS sgD7`uވA9١Υ?c^ъ,h|M/6H6H>1['d ALPܶTYT{'pkjXK +ϙ3tkPIv}0t: ͥFߵN*6LteM*cq2;E0§S3>W83*wrsۆs9Wk`v'" endobj 4692 0 obj << /Type /Page @@ -16548,29 +16421,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4698 0 obj << -/Length 3939 -/Filter /FlateDecode ->> -stream -xڥnF_a,d;dg!CK$<g뷮>(QIa]]]wU3/ϓYn(ߵwF~b- kw}H~q7&)W?:"/7uއU=ց=?/=áOYz?~z履~\+ ?~ݿ/EqIIHݗx,YK$H|
RAm0ϒdJ32NnSH{A.a&`=¼8n:jaG쩎u{jf^50l`ЭWj:Q!ī{>ʜ G"w`$@ -8➟fװUn0T@jj
ԭC5ƺf+gڭ -;DAف/oC= -
T#Df6/A IeHgLYilH"Ӽ#Vsl)E'YQcߍh
M(ZQcW -ß[:XBu|iİke1u"-7KY390->TeK'Y/QդcnbOPF@Ieac;'3Ȏd!aE
%^ax$>9S),}|?9IpǖԽp2G!T\S7W652zg -jpqx؎ʲ0>v1JR2߅",(\*'Ciy^"?SIY'~cۢXF4
=keeTtPeR^֥"T3@pX؆ e;5 -DKm[%)3WUs$d V0d_9V>啬Dߵr4zfԬ!n(ʔj®o0|!#ꮂjQ2pѹd#-Rt >^{e #x8Q{ -DE̺dgJ,/!~F@2qz`=V6p\+>Y#AQsy!2,;Vë)ZOf̝$8JZL~ڍy9AEGdz:bw^cd%y١%y̳5F!YEhWE!=6-ID@fUp%6\:d}#*"8qq0wL -N7,J3 C\̪] 8N7Pĩ-Ȉ0+z"bFnN@J2 .5KgD&JPQWmvф -8C1Uؼhؙdb;GAwd/Wȕ!s%]tG>GKw"xd˝auN#<Me_yUdpE6HO>F{K~tcrܛb9XT<0ӤK,ң̭xN+^q?G#ZpИrD!Hǹ".'ڗuH]HY+cY<Q8Ҍjj9uq u?9@xGNJ -LR2OQ*cI{LN&30ŭ.әR0BԳ`g UFqn@MţW^Uo:6N8~ϙ hJht/"BQ`ɪ*&i䡙L=C毩?[
.u=䛎(=NcĈn -]-IKY5/=u*7(K\2S -6 46 -& B!oM"<F8\4B'5?ܰJ4]%8<Tt5U}H \ܴO{dRX$FюvWP͢+MLFOgQj؛2O{rn&x!l`xc1I8˥$PGÄ& -~gV{ :cZQ]N1@ -x/Yeх?O#I -%ZK:¿NЬM_dt/tR1c)9E"q4>x""\nzrdo;$A̪ԁ\k -27.2yQy]N|g649`Ӛuh6\n=#c充BġXx=
qwq`4+eNze -c,:0R9 /V\nx/1]x/ŝ0T͍od'ӗ9?|0"ͷҳ0܄AD%kmendstream +/Length 3929 +/Filter /FlateDecode +>> +stream +xڥَF}B' +)Ǭcgg +V_] *i<}!W-bt W?&"/Mއu=7=BB~F}~w2ӻ?ݽrNqwU)uo"_AEj$&q$*W<kᢛ8HQ68]i^?LgAW1N~SH`#^A,@3CYa^xj?UK5p Tǿu{zf^50nhsFaX/wt`#c2YL9Wx&m +hKˉawdb2DZz}=*fr5qG1aZ|W-ݤfDVak]>ɳCA%ޞ+`=8 ;뛍P&V?c(a% +cAL|G@58:t1xaX
Nr҆= ^}upU5g[-1ưtCO%ml&brs#*x'UC߀`g6fڶP ^ԍl\5'96, +&K2Ǫw㻼VHoڌ5d-EWRU8;1t`IġڭFnԁ;g"Bt.H<T{vy: +jYB3xQG +$/:Y'Cz]'ປ0`2;
ʘ%
"rmᤓP*G6p GAeh%輹vzLRk5ٮ9dLGLRFR8*8?gBH:Ā&E["w.X.<=ۉ50LAFF:>\C:y%q9E.YRD7rN]?#s`8O=U\+MZry|(Y#AQsy!2,;Vë)ZOf̽$<J7ZL~ڍy=AEGdzCuTɽhKC%Kgk4C@SsjЯHC{l[֧뛈Fͪ;JlX0#u$qFѥU$Dq$c`X +#\t"E)^ͨɢFn$IKqõB^8+If_foxYf@1kAC\̪.r$:M."qjcA42" +~ȸ"t<hr[)Ӄ[&fPtF4h
t5/f'οa]qMJ!8_EHG$%y|:-ppGOxE@8+9;Be9&\Z8{`<+k]lt
+$^#_EhBQ`ɪ*&idL]mg&jvB毩?[
.u=䛎(|Nc~Ĉn +]-IKY5u*/(K\2S +6 46 +& B!oM"<>p$Ohlo +x㉜OpohkKÑ4Usi +c,:8R9 V\nx/1]x/~ŝ0T`?A6Yo ^[}De!BzYB:˃'h:Z,wendstream endobj 4697 0 obj << /Type /Page @@ -16587,23 +16457,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4703 0 obj << -/Length 3279 +/Length 3179 /Filter /FlateDecode >> stream -xڭْ6}BTՈ}<:c;O*I #"'$@P"[[X h47YzaIčCSVb' ;뇻'7Oqlߝ߽/]]f|Ώp%p|;XzKaχ=,0DOoS?yng{]n}kцw-@C̓6Mİ),6~~IM \8ʝw_&ȋ -_#I)j>6aaMHܦ{!x4=owAt=sHXð -6MG06H'h0OF.T2bpTGpdԣ -J!I-j5tPcPQzI6Y )3+y|UL\e#BQE!A(=X1 -HOիZ -q}Zzo>콄P.X#+pL9K4OLSzOĻ+D"%jm:Nb}u8-|:t,uznf]Xl?y&3#LwI,Echln,pIk6F6fΓ"ʠu?hz4xiMT&cN"(7N0s# -6bc78>G%c5GKRJ(X`5 E\"k@^/B[-{<]x8ksƱ"
"B,9~$U:H(Il>bH<ϸvw|tݟDaV -`7+!.+Aέd
6Vd@qc[j-}KNWqC⾾]:2W5Pw#?-b%A, ( -.nQEddH~YIәf*ȍpAeB=CHf
N6db6K1q`퍿Sw7UU:}qQxJ{DiBr6$6р+CNK$rRUWFJË=%'S/'^)|} -.jbK%룩,_ -HF`$_/U{]*zb -cj;.-j?4n!=Z(xJ+tc|pYƂjv%z VLvky8ˣXP"rl9(+JrϷ
7.3yL^Ҍey2di:hZ?MozB' -K4y+^GYVJmը5wL5)7n +xڵZKs6Wȩ0|?c&v֖ˇ$IͰ!cY/&*4Fw_{Ͽb4K8w|#KbIt{nwDr[|W60?r74͜yϯp$p^ġ ?~qի[mFI,yu \ta]?Bs<>^EqQ(ǫUx,Yjy/!P$db\8 8ʝW_:Nx +I(j>&i\$[H,ԏ8} +ZyeVSL5vL5Td++Ag?mQhR>(;3}DA䨢z(?q[1 +>YcdYc܋)Zn6&;'6h\/R^b0P?aߍ[E SC'{fRmm8I%'ot5Yx;(4Ct-x"9hlt\ZH\]2?'}.xMjl}sjLwn.]yl4jb4鸠ҍ[t"}hʽ#*N_
^Ի^#bg3Ʌg%_b:NF 4ЉZz`?Ff6CFadaˁiQcy'6> ՞.V'T}3Jcc.AKnYQ2I_iw]Ν dޏ>LNO1q0QcOaPn\7Z
r +C3bP綞/%cc2KRcF6'=Pqcս {E<(ܹe̗86ɡ}Shj+2@cB(?`Jym;"FCGNw:Da)@i߃<Fj +9<FG06w-9ܾeSEg.XN{luGpڷ0yoxOm}{/)QErx*+_|]حz9ύy7ZE3Hx Gns\_ODCJ̜~mp0(swA'Y@@ ۣTbtwn2a1~Seb B=!0H@~qC +1q`
yˡdS\`(Rϳ_Z}=J\VJ(~J).+ǩZ
V&d^j }nP.xt=Nmʏ${&l?7^!'Ty1DࢭLTj
?l;7ͧ+H6TP`_
t,:"2 endobj 4702 0 obj << /Type /Page @@ -16650,25 +16514,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4712 0 obj << -/Length 3601 -/Filter /FlateDecode ->> -stream -xڥ]s6ݿB'j&bI}sl'v/}rDK<SBRvo -dJ<E?nlW&|<y&19"TZ.(+]t&H)k9-^̪UF0܂ -kVi dGS:Fb<)ED֒J:@nש}>J<Za@#!QޚTv-Qn`ݔL(].IDJو@ț*Ƅ -@ L"?vΰ -f
>WI`G2OrI'=iu.iNڠNχPّbGnBp'(;T!L1zh/X)^SKnb2gMbXCD[.:w0s}e?WHl+P4(q_40eL\TJ2'"Z&L@.,]f:o\ܒgz7!GlNi2L1 -9T6Txlj߸9nEv -ttDcr}')||8Ǯ<J@R -FAbKY)vu;d/ߏÊ+)NzE&+kYrX\Sdg -.9uPUlGa25άrPBor P`91ʇaj|˴J>w/=
Zg~b7FUm0𠠂JT+ pL{d -{vwUc)+ΉK0w11o - -+s$HM$3x;cϚf{UZ -W`A:+[W!GSg;\ -;xݜ!8y`=ZbO -ڬԻMTs>xWVV60YXh,q}z].Y}EQ7p;tNkzRSᤌMunz.*ݯy2[K0[Q"'2xOZT-t1cY<z@]Iq0o6&;>שd[]O辶B9!l$@ES9#JyםaT(u<['[ZoެQ[tg,|~L')rAkd sZftT +/Length 3476 +/Filter /FlateDecode +>> +stream +xZs6_5$~ͱƽen>"-L*IHI{ v.?,z?MBSiDn;]_8SzQEKOIJsߟ..?J)lljn;Wz9v>^I7(ޜ_N.# ՑB<4)9\&\?MO7':Tn|W'w'0M EcnS<A@ZބMnu^@(r.2[-0ud +<7L'dmAf6gY]Bi2l·lE
_ςzZ>emtK\rSzp7{Y73ӡCRL?ɻ
} +I1u˶5 WNo4&'Y;fUI=K TФ x'VpdЦmдޡo`Z:%Ag@Z+X/Fh3cfjҒڳ &嫾:HKQ/v<(6q.yX/YT#;}3_']^9rpA0X̑vxvpGY@H + _KoꙭxJȪA}2hFHؠLC+$A>*yqU]m u&c +#j[9[ +W3KI/
UeyN*oP +GJF-tpXfڒO"y&%8a5.X؋_ xiiNE^^:2. +DHFk%]Va=b%d22(Z2% +c,̠hi˨WvvX +̖ +R
399|-dQRƎY,vs@֯~sBcbRy6(gaLM&ӈdJViXdFlU[M%NߔyԱj3ev<= KMRt+$D%-0_{9()!O8`# "Mm]\,Fn\ +qˬ3@`[wmHB!@sV_ˍQrPL
\Xid{-nhMXycUn#b+zHQɀWd\.@oAy3ʲ8LD"fCb,(!q|?VwX0-bWt\)G;AVδA_eVtpxp2Brh9/ ػ.V|8{OCe3s67?;|Pt+~1?o>g?` R zvI[H⽌;7$4`P>^\?5q o"ԊwDĩdү%qT>X"%m ޗ5MVR%xtxM2BFى1[~S^_Ht\^VzWL`ڬN7|ٝpf8zըDC.T]i2*-qF r +/fVstp9CknA0K+Ҍn
⨚fJpq/}43JP'%eT5Qr[zYF7~va.dl9N+F1T#;"ll(R_r&$\fgB%!l"Y߯ބ[&*]TH7OWohe2g[vwy[[-6?.4 endobj 4711 0 obj << /Type /Page @@ -16709,27 +16571,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4720 0 obj << -/Length 3962 -/Filter /FlateDecode ->> -stream -xڥrF]_K-08kUXYK)oUIp -n{dGCl(FY'`/X vCnImޟl{]Kq'%7
߫˾GFЇ8N{+Vih'-mvk x"T!$w)z(<Ef.gv85]F (Ac|e/ #3aWMwg <64%_YA~b2ni;.c(Iu] E]2۪&E2HN8AH3 -0pzblg91eIE\ -¥ -EKv
{(JwV)RxG8T"d1ɫ![4 -#f&;J%{4:@XiqH86wp| -rH*8v]ndF nG-hYN4aM=!˼
-sB7!XYY{d<3+98 -Ma}L9@lk#7 -qAX ۾2HZi|QEA0r I{߳K/u\z,7=@pxfRS|93:؝2m>sᠵhvN)1 -RjAӑ{t(BIKJ -l)I%EAzȴ:Iʶzj%N$jT`K,._ڊR[ʘ$;7IUG4o`{p|!?MVu+BvՅ6DmDcٜUMs)~;bZں+6<:R^ioe$<UπDxdz@U4\ь..i8':R -fO),_r?g&6Zat)uIă@{z͑ٺtƁG -Fǥ#܊d9l9ΖƤ"0!^/SHɀݹ2b
H*qOBEM˱ޕM -PMѮe]A"KT52^Zn\VB^4F9M{јFJ]F֚ۜT⣙H!ݞCj۫Bibw`uL)<!dkQ09v7M4rVڅ -tpdf?ig, ;t+iʹ<O#XkzJwܻG0{"߃CR|cR[9hboK^fdkYmZl~SQT*A"v,cf58c_@\e)pm8ZE^ 4ml>~Xti\A
0MKWL3wkνՃH,Tsz1 -IZ`+cZXKVSy/;3[RI9~c}>ojCt˘o8-S~>K{B?!7+O7o]kuOK{- j6ƯKO3<й<!KZNT&Kl88\4L)~u0 -f~'% +/Length 3940 +/Filter /FlateDecode +>> +stream +xڥrF]_K-}>%^;DRު$ X0뷯9@T%_x/|fbx=p\/qǛh{n<ns_~X0t]4s-}v88߽6"[zS wo~}o>Z"7JB$ox-Pyxyhn8t(~}p/9*c7L*,xķ;96xÔjA<50kq0rŀY/WAʋVp%[gaKYY[ծZ2[w8\u`8y*yvx;iO[5XɑW>-3+xW0d@ƁS
[WOTA;qHcU]3v)S72h#pF#0͗a,qRlv!$zMCЮxo~T|e##'ǃSTi`-O{ ȷ;p0DWT!$w)z(Ef3'\)#=?ZDFxlLU,/MdFgnA(Dq7JRgSWwE`tMhL/=9FrL{{V,+If,#2kU'EZ"ZU'$V +R0D8E +$Owl +vGm+-6tK\$y?)D&@¢ shn L_$Mt5(1ۖzyp,wņN<%ԗC}DpY [l
'#`BXل#Gғ-)~<R% +l)#!g=YNsdZ\yNe[T4(:<vTR?;TV2U$إIb*(uؗ<BՃk\ +,g&T~gJ(Vay + +*]+ՙDEdkd^(t{$hJ)r1mڌ69))f#!-xtw ̃rx0VlUA%A+TF +lF4!Xi6}`.Oml9^c +zK0c<0-#ƚ55/1N9<a哲-L:Rь2災.0{j]H 眨ԽF/ؘzRg${`jvb4%XW~4C~h
\In} +&qF*$7gg7*H6(P +2BFVNߑ4#k[}JfYm3~/U/m#\Ȗ@9!I +h=aYlHnW`[
ź.\8M}Ya endobj 4719 0 obj << /Type /Page @@ -16752,19 +16609,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4725 0 obj << -/Length 2660 +/Length 2607 /Filter /FlateDecode >> stream -xڵr۸_ٗJ!!gMi'%RG%(@"ݙ -1!5"}Wpt#LJ(@M[{ssȑ@`|sǚFv-NV e]hPEW -=! -nY)S><i|vIlk |Z|ec4|sVogs4)dũ !1
[uKo<e>t -~f
y[;ֽ-@| 䭳qlxXWP(7rF<GslU*qѥ?BXMs}fO -HҎeQ&݈SJ֥b#ƣ(ą,>1I|(*¹|xYӿށGIQx||8s8('֬wD @Hj $&.Љ(<0`rvP5pqU -09bzB<7"F3k W}.t54ak7]mR*\j
N\pLU2WصNjRwNH0RFΗNe]5^c?Kŋz%G
쎲NS,DLc8>kρ(qEϩ-i9`HqDrJ"LZŊN(zC -5nWVDeѳ.L)l1$#˽2<_QP~ٹrl_@4Wg})]6Bȿ=1:S Eu@eZ- -Ӛ4ti1.%tLwK",0\O[ATezb0t)n[<iB& o~?~Y!đAua,y*M}gJf͟K:%f('\yB{9s7&##e\:㼞Bgp*ͺLnm_7 s0aϤ>mx1mǶ [R}c۳Z\
cVn]HFwG/ky3[^JDoyRFijp>zA2}qbK9 +xڵn_!K"b8@rq٤qiF"eD-Iq6n!@93sZxS$t ]I䆁Zl ?](A//Bynꥋ-\g_W}ˏUrljf˕r_"w^|x|+]̾z퇟_PҮ$/_ET|A,`*Mny//>]ۅazf]iA/V&8V/UhRgk6m%` v +ӧP[v8<䆎ڬ<Y37)nyF{<he3 +kI:gSKcћ$EC~ z_y{9>`Δ6֣1S]q0$ +Q}" ͫT%8nTك(|o'Tx(lVTkP(YۺlGdP?.O%w~yi{l7w"2W(qaOsq<Enſ-0ũb!K[ +tE4T4aa7]fmxya`( B*RISu&@ڍëeS5^<tNVꕠ
8$q|i#Qs;{ђOC
55{mC4PQ:0D +66\-Ȟ&Iq8i=G A6yͱfࠠJڷ<Zm5twޔڔ_gߋj"f&o="RnHXMѴ~ 4$_CV4}.'(z.8$6"\h^)rg!qed
_w6 ER0R#=]=xɁjzGb;K5)[7MXQW.CGeg3vҁ#Cihi|j[VZ255mQ}V
eѳ.L)wQ3% ٔ +J[-'%
вvn?!cOe6DrӔ<1s- +ۑt%^J6{{fĊU +}Տ?>p/"d8md</mHvƹa7uHױx3YdL Ye|,ikލCH#wVR2qޟCgAWf[KD{'n>%dܴۖE}-g~tGU0=厬my endobj 4724 0 obj << /Type /Page @@ -16799,22 +16656,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4732 0 obj << -/Length 2833 +/Length 2789 /Filter /FlateDecode >> stream -xڵYms۸_'D)%KlV.e:DY)RGRq_}v\:m'X,ž<ܑCQ؎Ga4厖3gtO#\1,OS:vģ]'v Ośv<QJYo'aY?]xZ.1YWh%
]`◷Wǟ?][:rJA?>}vF+3Vq4zcq<ڞ_~~vwv-G2kH R:PAGn00M9^`\>H{i-Ϳ"٦ٞ`7_sy4;rmâMR -|;#Yo,KNCͷK*3±&> Ii%nf#H"s++^d/`j%]XɍM3Is z{xʱ*YvȟtlZZ`9BAvv)U>.u%x4yUN/^]\(W/<N 7oh8nƑong/[P#;4o2f6v])0qԣ͘ȿ#7CK0p -&TX:44/DtAdD"T\`'3_G]8֝T.,K1h J<hJT1L]FjhL@<Nݜ`PXQ0F/m"У}aK\KGXqr*g0UhА\S]&ՄMTJN6Ym?ʤ/@Ly$1AuI*5QUPn_y=UK -U(NN -9Г6Zr ЎBʼ~*]'<|~5ӆJ}&y($Dfr{4!v*0Q -քb]1,d'=c͖ՓI"S 0 -/#QI[˪M[Ƌ%HF~D*m}"o_Qy|FqTG#30rMlU٪)T1girRʡ;ojUݪaoS@&K,91+/uM/m/>n(M|cm,zy\2xO47/;1s%zI5wQ6-:{ -tt
5mXb3a-28C( dq*-Hrkq 2QJ*lbIЄnUF&Rum0DjXzet[F`M{:TȎ-C+9sy --`w;1*/EYW͋c?
0ڵ3UwXiu
(zé-pT}2o~@ӫBHrܧB\1\iu7DL.mx]LrF ܇6ʧ6˫kY7&H6*w&:Id)\'6|62IOPыER悍7E$,6MnX?Zp3v/s_vݔdZC,Gږd:<:b1wsQK몄tf\%K]&Z\_ AN\4zXg'Zeu{n+yfY'SJYxfBv~84j -Hk,xkg.ˊÝ -\wyەFu_Zdٷ|_7u -y֒>K1I?+#N xv3x$к:oq%qo*n.D5?',ISs'.S.`+U?U|SAkԋ#F7e +xڵYms6_'S$7}P7Iϱ}\'@eL*IgHn{oX,ž<ܑC(lGMGQځrG3zgpF^Sg:el]/xEصޏ'uuϚ]A÷.iC7Ը3ԫ~;2rޑ`~ ¯g8Ici<zch{|e_UdɬNTE
ǎc= +N5$eQ4K*iY> z؛z{]q@:S`n<xDXsewaDžo[r>1y&&".#rkQ6'Ҫm"K]UVgx^Dsaiȏ
g]"_,vFoKSoFIXZZzWٹތqiCdn؋-ud(JT=Ӟ4gכZ]kG?H~at;c/hgkC)_IUS,sg,[l<'ɫJvzFxoB~{qz{OO#vnrм5>^_wo~F~wOг717w4c~x^y( +/@OH-Y %5 +MV5eRQ( ,{ºi4')άEvc +{f +,B<WxwX9t8ی$(RGNצ{ +16&DZ4\=<v.<v(7/i;81s_';/{OtLm{(ZĪgJe|qHA
S +ʄFϗ蚸q-]"[/`[an( +C&6gnA\vl>4ڽzc0'Xv"7BSyqyTTf˶1͗|}lZOaa'5j$y*EMM)I!BlAʨ˼-i1=Luu2}Pun(,fܘO"͛Qx69XN"Lrsxw<pY8M^ +@I,b]ႍ۷E$,6y7,Z-5vZ@.8X`-E!ɘuxt +$filݾZsezi+ֽ62V'o[_kUMZ1:ra^jkv_ +o1cȃ_ N)\7e9@m~{?cV~W}`h.@xkɰ%#Bi`Ost <x`h7q%qT,D=Slp$Mi<qyؘ(q[!GI754hmސzzMY! +RIU 4t73]rl់kUdw~Wǂe6@endstream endobj 4731 0 obj << /Type /Page @@ -16837,19 +16695,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4737 0 obj << -/Length 1974 -/Filter /FlateDecode ->> -stream -xڵXmo6_20"~͖&]b ֡P,9"K$7߽]vQx<>QO:q <8Q@KgxH#13"ϋɋסHO$^,VA:Otv/(SMg=r_]bw0tCи2']e2_V
ZM&9:'h{B&{91Y\X~| JI' -9aq>T,ݿaku]<sqԨĆVߪ*˴+UO7*)&C5[ւf+~i2Fۊ7Ǧf}bJMoU=w05vfC˽isB%n7O
@R|jy0`Rl6h9Ow Vyݐ7<PDRСuhhw7؇?=y)];Ze[v5\/ڭ70Ap7xS j#,>%z2`33ܴX^IVLB#A^zLw=x
v0pa;BP -Ɗ==Znuw +/Length 1896 +/Filter /FlateDecode +>> +stream +xXYoF~ׯ#T3o$N} +c- Eaen:y细ȎHs|v9H)MZI滱0Oap1Ώq3ؚ.oټĵ\_ +?F_FZ~ٖBƶ%X\OZ+<]~ok0E',;DV퍅7p*\= +3ɾBx +iP`Ŗm`]>ʂEe۬-urG%JoQ yՖqa5v}TQҖ|1QW4_DwO1 +3QNo="¿W*偲M> l<5O7,eAi\}\\!x#Gو$AM'tGwqFbKe\52
ϛs5<hǡ4
0<_/E,l +2Eb2='<?xbhK/ibsR4Rh䲍)~ʦΊ[>
kװ)" +"umzLEF2 ȑdا<ɔ`q?L9V\:ne3ImB,|r;ӢTf7T<Ӧa+-ּ٧pDF!Y4nsat0mɇɳTD{d[v5oR!=۩BqKJ0zŵRwWE!z`Ƕm*)p*L!'> FL}2ҒW>!!QJ_vwq%e5"A8K'1 GDIo1"]M</5ܳ*FΘ10K)%#ˁ/v:(@ +iUJNpmOte:Ht{!C5DHxH=z$ +J$c <NQ[ +8 *^m%e0[&J|XI[uI:ދ":Ƥ}<߽n諪bUK%h[1Hy[Q!kQ +n@HinSP-jS=i`[!uL3*܀xYy!C +,pϣ,HrqWCC'!Bg2{
8b eɛ=l +4I DeWXDKQ9 +HO探@е/| *{ʨ幊k'8&Lr{ uN3u@Iy$A?nqp1aԬn'8'ҌЀ=`~`w7mpEFaFuDLMOZsn gX@IyDž\+j
ǜ<U\a~W9 +z82TFnet pemzʤձ\oBUsͻsZ,mVt7[*j
{e@+t -XV(]a脎WpH1b!ӟJhP"C%"gQn2&͂@ ?)0W$Ӑ#e$E.@<?'>oHIYf&wۢgk`329Ä"DđP m3K,\"y)ڮo69%} - C{ - -L
5f#fm -0ajcjn2햟Fڒ^Af5^eS87P::$t"(|b I~m22KvziS刬phGOln05]1;iMm1f7BPB9jYnXp
Fda>A'_%"NycO;0
mn3Mg}nЋt8
-acFoG%fiز/|?<~c0uB@)@bɾ/p#50|0endstream ++E:K|]CͼAЬ_k tCA?`]+8?W\[.z[;qmGc=XH9A6֘0@>7I +Zendstream endobj 4736 0 obj << /Type /Page @@ -16867,19 +16735,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4742 0 obj << -/Length 2566 +/Length 2307 /Filter /FlateDecode >> stream -xZoFBߎ*ߏާqRN܋}m$"L.IKRz8o;pHBEDv軋Y<ʇW(VBѼ(X::vF/o~\o\qb_rZ7WYo>A`}K\gӇo?^\zr2~obx~,^`n.Aa{qqww -B?
{:p=<w1)~V\ya`=T&ahmjptQ-KSWK=EK;S#MSuXWj߿`"oy^5[dZ7Ib=3&$vvYe\bJޣpx(kk}4kVJ@bӎ'6|S2E -(M[6JFjwx|ɬ`k:5a:Yb\{w:s]]oqO;Y1 -vN`A9I9Jl -ùktqL6k~1kG4cV!:g9ڬN_ c;E+#QSCc~'kpvAmU-OKm&_b'RߡvnZXyN$eZM-HӊmHӉLfL:ر}G4c{!:g9Nھo" QQퟋ+hq앉@=<Fū.>J߄Gl{ZRihzߓJf,d6ntLь蜙j3;i<?" -ď~p<r)ow/(Pd|ZioqqG:0e %H|uǞ%ctb.G;hRM˅I -JV -q_KʑufV/#N3 443dsx$ -g^6{Pt'.k3>WUU$YjYHV6bI(G>?Wu{(77)
|/؏wq8 ԡhևr |rWN$kJF.:vf<[gۜzӶutPHm1UtQbiՠB2QXdR:v5_VӝsCOQaǽw\R`
O]|Vd
*nT$lT Ut})T +xYmoF_oG;{I*q/V"XIE"UK-!rgyffGj(Ic7 +hF0B7 +]/pWq8RyhvO"՛_gǓ IΫrnLqw.߽F輿+{^r׳&nϋFKdڞl@ˋUx,NBA&ih5V g4pďBn96#g:SbkF{L+ES%`pXukik
4q̍SY"pv~Us<D(4\FZopsu|saFZҊ'X@ktW-@AgK!nX,
;ƱG|'?jnħ@b):|Trx䆑L<\ᚧ +*V1ÖT})xH8CU;:e쳔i9K-"1hkdU6?V%paK>:a3N@X8^|9v?၃4Р%.#&m5ڱo8jDyIA>_t2H=(Ɉ ְ_2@$i
~1ΥO1i93էJ~ݼZ}v<to_le/w~z;L:%0 Gx0ti+eӨȟ`n1C +T.ph] endobj 4741 0 obj << /Type /Page @@ -16908,25 +16772,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4748 0 obj << -/Length 3318 -/Filter /FlateDecode ->> -stream -xڭZYs8~RUCM$9X-X,y($~]ڭT"
fY -|'6-Ad-XQ?Tsu[=KYWUu1/0JzEaz376kʜJd/i_Y|fM<D/~<(S嗽6Q$]EH<ItណOxH 'sIwِՈ~ݚ/_~xxȖ%lj"ټ[>jPЈM\K2h_@B&_c p)YN(T3x!?مloCޯH$dc̻FI{!eO~/T2
q|`\cp2qn5pٲʽ -55[;-=mxZͭU8a%wtvXlP[BCƱƎice?O39(i:h )%`wktB`Le[? -wtRg\yaσ j -
p/ݸ3dpg]~AS%ɍ+.68v0a%g|ģ=rN2b-7لy=\h<I
UP܆ͲCnt#ϭ<5ULg=dyA~6Mafֺ1zZk)@ ->lLpY7r`e.M\CRs8u%6ਣ-7cL8bԣd4L7^ -G67
2㜲IۃE
}I^ܷ
hg(C6W-$KbM%*`Dvty]ACkjrę>U# -j,4nHo]ZDkh}`B^Xqܷ7"E?̦Zzr:z07_DJ2 -+ۑ˅ǖ`Gr2[&J&$t!Vg.!Gn@;{? ]Y x
6$~%x\4Q4
Iм`C -h(8 4kS|þ8EG: -i5~f5ѩ Ɣօ%FQM<9ђ -) -1-4(nFՔ}[7n R^˾jqL #GK[wIp7&v;>~%n},,Uf-΅H$
ݾ7'%Φ;Svg\IF -7!q%
}fLBr`h8Vl}6
B[8RQQ -4m$0f͍+&.ZN25+TNƈnKIP]]&~?7"[ +/Length 3224 +/Filter /FlateDecode +>> +stream +xZY8~_ᷕXA]yKI&3lڻbf`[r[h$~"M_]<<dUggyq1Opj=̼ +")?Hzz6U0-D,^OE^"r<
DˏPާ70nIF?ܼwߗ?^Y:,Yr. +g(fJb?Q۫]xNxA*( /ű8NHF?IP}~0_$QM=A,dpV}W(*"om|]^0] ",- +st|ǓGHwɘʜl1qSΆF#Cŭ/@YW-JDy
R>iXшM\M2o@џ13QelaadwsʏUnIF઼_sɕC̻F[ɨ{#@-91 |()%<\0| fǝ
G*Y`BD|lq| Ki奍`ZVg+Z<|;4p[~p(l1wMբU 8M +\ָ#n^B̐Kl*~ABq\QDaσI^
pz2tr*FAa8ftZM3>ADjD7Uy=^{.IuwT܆$Q̲Cblϭ<5XJgvdԷ6"#Cmctkԥ{HF272FI +֧CA +:QhWV ! +GO=ֈEAZK;=P,#qF+ZC5䍑^) S)Y=0ۍ}`*DͰĭ2OyEx8o +٤έs;n[ ՞sZB..JZ]7U;wQ[XWFKυBs=%0[C[db@uCHˍg,˹J̆|fKμ=~_Ë3"s. 0Tqz@ +e&UsBOZMN.ZHSD9W7\ܦ\X[5na; HQa-j8Uq)c ~IP#C
Q$_r!ʟ +/Xa\tM +-SG!{|8p?.~*i5~f5EA)l,$ã,xt{RF#EqdvٺW +uvKp䊙B!W˝,Ti<a*xS72
Io,)+1
s,E7bBE&!{/<i9SlX+LEHq
~#yX">,y`k-v/r7X>tE|p" ++nIez$;}:U7\jym4\ybҾ[ĉ]:pg\8eg +Xqud,&ipX^`1g-Tf\62UFvI.r2ff$c*`@t_GM`ݨM7Nendstream endobj 4747 0 obj << /Type /Page @@ -16955,19 +16819,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4754 0 obj << -/Length 2373 +/Length 2219 /Filter /FlateDecode >> stream -xڥYo۶'iԳ6i%M$@1lCA[-Ė|%I_σe[N2A"<<<yP~ Ar0]9v"-Ȓ:4NƟo ]n].9闻7Ñڑ0r>
s>I#(<#,5noÿ~?xJՑ[j2ϿA~ -GB`uZ˓ۓ-/^CHcc -z*z8qL2.zK#XFV8S!?825w&@LiFy@=j_W Zp?9K#*B%Eiy>d$|ti0V:=PjSJ
PҚ<k܄M¹eZ0ypV+p8dKjl[T/4d+SgnEBxHkeUd#}JM͆<oԅ k(πWJX54:I`}ܿ`oG/,V,ɧIKUMk~ZW]|҇Uf 4s) TVr4Z"Iq$=;4 -VQ ~jJ(GKOz%d*NZb --[UfV$bK[X+/d7(/ o)?MiUR*+!v]OD!o5iv-2OCGHJBL7U9^S`n诵,:H(I3Xy6핃G/ f$uJu e-IZ&UQ TG%uZ n6M>p) -exVfC-/A
v˂"1G'힒ϨMY[6OSJ9"|-E^
@EM -EnF>8jEL@±,3MƇ!<EQ-0ݬΆ+\ʊgS82*`^0)oy@S>_*~fJfUV<Q r¸#, y`8س 0*BP33a]תD~ 7`$.JXm\S<68ꦏѝPh_~@00.RoWt-}<>gӲ=-,}lB-oc'˦a㋲FYUCRmAS+Mnam?粛*tCH·eYn$<Ej-~/ឪ;GĨkhv+Ss%|2spE-PD0|SG4xj읈,v)ko -h!HwsҖ"{~k_X17Z~ـ; JWffKې>ΟT/8ȟt)ߣH_b[Dۣ*nU698]@}@ XpzSxԡ>z
5*>t2D[fY#Y-~j<2 -1 +xڵY[oF~Do)ԍc'`H$¼hI*)JcE +<ŋ3xHd0f0xVX%ni4+t:z{@&@,"{םrF~oͫD7f5C%蔆ʂWhGt:C.Si9]VCJʗ/N2ơB_)ϱ>{vB}hd!EϥLFwJqo3G}V|(M6Iѝ1lZ+t,{bʜ|Yu(^lͫ.3v0)<d\o(g+)yDmx"R̈ᤁ<#7<F Kr~mذx HuC5?oGɬTny=/bJT~ɘx +|&E
l \Rv.$:4ah9&TbE1G_ֵ^&v7 ;Q;T~դg}MWWfQ' :y_Զ2{&EUt{siNe}f +wp+=eiOY2SŞO)TP
4n|M=`{(r61V
]/T
pxӦL4/$fmff076o;O*rad?\3]'sfe``ni[JvIpS<BߺW;*updW+JsHSyvQ^Wbj<!#&}s?lNyϵ^il^uK%WjV4OY}O1LJ=BHX/>fË +a +y!7g_xε_+8R@!Ao?BVЋr^Srс\ģJt\w;&{ġfl?$\&Ceܯ͇#i"qamѰe>͠AY&&,7-uSVoӽkz}]Z0iuGO]"wT+@f: 0[~φ)]"HH2W}a +&̾ +0z
=
QҰ_4qЛAT<ZO[~u[6CUāT&ˀ+AHj endobj 4753 0 obj << /Type /Page @@ -17039,23 +16902,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4767 0 obj << -/Length 2964 -/Filter /FlateDecode ->> -stream -xڍYmoF_bk%iӦ -ćz(H\yffe >36W *[_U\m;ZQ,qe_.8gi2@*M⢰W7WƤ5UQq^W7E&WyDqV&W&[]ۢ>7uͯ~ ]Ey7ujc[Y-46Udd͊V*NԳjlVGz7ĢǍE>fW&>ڸ6nvݴN$e4(aVQ+sfюHZt*r8]@ƗqW93m3p9ݐP#t^~&q`4wJ4=j!T/ͣ?7RLT$Vْn48,` -`];g}i~hȰ'xaZ w|H6w}GU-d܃!uVDxo-m:za v]{+?;VeϠn%0(ZTeK^>0e6
%yyV4^*X|2#dI݀46g>O߇3\C'X_`(,`ֹ_
N -?c-0ed-)1zUѣW6NƸڔn%c qӁ}H}jG|NX#C(ʻSݮqou)2?k+؞h$?9U -¼hG#%adp%~aip:>^(vt~-5(^ôAcغI&ҹB͓:Nɂrj<>tqemq -_ -51tOo6A,e z1'I*R~ԭҜXpf=v:x!GN"zB -Dzn]}y;(ǹ
qn)̞@8FâoHrT&/zhJqԡlYՀt -~[SҏS{V@-/=67(!-Lg1=ঔס3;f?2}֨ -JpesK,o\Rnc;P+(UUmI+)A3ۦGLsM] ]lsa -lHr9VyxV5.o*\Z-efFe
^2H|f_+a_<R6ˑzA"kagu&2ͿO_ -Z[&0jtDj.h.*f[~4bT%_e! -p!R;Xnꦁ ^ʵrh?wɕvGu
'OgĠlZq2h:hVZe-$*m:nwP>H=o63{b-a&=7KZ86>3UWK]endstream +/Length 2890 +/Filter /FlateDecode +>> +stream +xڵYێ
}mXkt<o3;d Aڱ%G*OO}xHVI?.*"&_|Sa.nʪ4YD7O4ӛX)<
,ɹIe%2'YÛw&¢Hoa <ϣެ}3v6<--ٿLJFE"IÔh^.NEO0͊b-q6]{D?Ώ#bzæfX(⠳:e<ϒ*u^͒2֘ f-!H$ٻ=t?:ܑm|W$M{Cʷap
8[@tPRSZ@M%y[g4ԐE 8cC-4+3h21.D6AY|DxyUnnq~ OD_6{@vTMȟ_ToDHpoĈU<E'2Ӧ1<?1FX5Yi!0 ZgO/2f=Eyp3<+N> +ߣzCaaYz;'1YO/ydz%>4s
iVYs5$C>QȠn?fUFz+M3<=IiBw{Xc`*."o߱L90R^m@:m7}O^,eU{eM|amU*0ӃcHᰄ~wǬqr'ee~ ãyi-^0{n҃h7_tl .Zm=,ёuR_;@OµI79uyюJdzk{ +)f[V=t̾*%BiVs]g'Don;0/:
影;%;Yjj)pVBj<O4Q`j{
ZMkX`k?yFsj`1F{3Rrͧ°0>iMn_owrPC'fÛV]](FH ύ_q0aL#(DMݝmB~"b|K I!S-=ezXD{w_HcM/+<Ka(Ó_
+ǽwW9@Gi쩽?3JWQdQEG5xI]TAH
]A'W~+.]#5^2*)<0pu\^"08#W@TF| +^2K' +2Ϯ'[չQ
48Se{al +kzqtpioAt' o,#Y 3zEv9@Iw;!L+״@lڀ̎h#y'^k3BJ9ʮU^&#ȻTCd05F;}.Il*2
!r<G=0l!]Tg@S,@\OO%a~)tzf?~ +JĖtH8gSt3Qݶ{z/ +QZ%֮ xܟ*~/a <|uCnQ7$s LXĕJi)X<JJJ,htPEx҉1VptXwIUYѳx<wq!%@ʰdOh-rdhYih<.X "NKΙ+qy +2_}h?;64GEt;vO ոBjl̙u܇5XId}xSx:_I*)\ sg{HYkɤ@Gd&<0EnFjдw̨AN>U?4X$S`_<v?S|TInS$rQba'bb> +$w3i&+A|_Lg\:)R}NΫԵ0!2%eY>bĥ8`RŊ{u'Ki3J|W<CO|p/Bhs0lqvI.+ + \f̎PUQ6>LvVUeI@/Al.uDj=i2Xmi} +;Έ;0&ae-{y2 g2V_ 8˗iL+iXsTLOi7c +մAu(ѳZ^mj7ǜ[Ý xxx<JOgWXe>;,\hԗ +kbb endobj 4766 0 obj << /Type /Page @@ -17102,24 +16967,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4775 0 obj << -/Length 2867 -/Filter /FlateDecode ->> -stream -xڥ]o8=o*L-p^b˱67_X8p8|,?5qtIk5|c)(KO0Htut0d~K\bZ+||fuuwǖlr:GJ:?;Zffk솱AlU]Q(*8H̊XI8ZDv^a\ +y(|X._TܒMQ V%"Zoqؕ#=T
lySL&EX[5` -_/~(6qkNׇ QkSB)w=ʼ"߄c,=1 ՜8ɦ?Beu@%
d/
n}aa7C0f9WM+X[l -ψ]\:!iPRĶVa<ɐ@}CD -̀6`S;FI(txvGp0ENx6
ҩRϞ - -m^/V]_":Hg$
Tey8Dڧ q -lidV)B}YE
I04W:unYa8&68IRWA8m@Z/KH1"DE}p9߲E6x&:U0Fz(>7G C>:3&ZssGV}Dwzzd0˞vir+{g/w2C,U<( XT[DA:
B?-Fxںĝ_}?}?c%rm>Uɶ{\!3j8+(pk>W-ȥDuI/nz+͋;˝jTF T -0 R nY`a -Zܿ,<=2)3|PfuGccA-z<l54~|*|y%A'mkfCWqPnٯ1U8x<ܶhP]/_6تAA-ș=: qP)@os霹D\=8mm Nj5FXIȎHt̎zMEpE4ӕX{?{R>eGGg ʮRPRhO* ]U6ՅE$Hſ'a:bViG -qsrݍqe\;W\}Y#RK]Xؤx ]űd<#K.f5\a\wr2v4{GFb^W\]ÖG/M*stM[WgpZigIX^t㸖j{@3/Rp{e,5ތ&q$N$\PyG &l2t.MۄS! -瞊T'0>1?Ŧ$FbËtIc<l<}ЎE4ɟ,=}-.l_:NaFaE͟.KgxIlI$Q,>M]?mȁ2=}j/$Ϊ5/-PB*XT2AE`=HCᝮqT2aK>`n{/b -n:X:N}l$ѵ[3^| ,ytHH|VJ -'}*V -AqœāSǁѣg}7hQcb19v/Y/gendstream +/Length 2790 +/Filter /FlateDecode +>> +stream +xڵY_o6ϧ[Z+,8m/mk8r]IN6%ʖڃLCr8HMBI&4 b&E8y/pIC. +,&wkb[}݇_gsTlXۙ~x۫f_~p-07I4/d"tN*& 6ZۋۋwRxLx9&Jh
ijx@vӗYN:q67G˪)uD5})EݔVBuYc
E<EJ.aʚnyq"D5dXTBet +5N-paC:#1ӢsXJv³P7۪s<Ѻ_dƤ6c24SRKo&~VVO+^ +n)x<7VӍmZZf3P#w>r`G`*xJѶ +m ͳA&BDʈ6`i53ldA:>A=-+,D'\ȶrfԑ +p8_4ébC5呈^bbvl^9[lvlu 6Ifѥx+J5L wt6xw#z&Нv-G1>sE +Y+
-W!:>6HxeZozQX|NZi#ރ3 +p +T1ѱ `L؇ +M)ftdz0>IpU=ERV-{a*߸6~_VߎCv;̥^曳(R,NEdDB3+Y5=h,dR +o" -'BU5m^˛KB +fsp1SsQP[H:W,ǐ٭2U'<px8m 01rk/g447UdS2{. +F*$qAebs9X1E'7\R2VID%Hvӻ:%
쬼|IGGG'Yx|:^)Q&5EPsHK +QN1͋eh8W5SP5;NǬAÈ.!HqxR'Ás4ބ"T8Px+:Qθ
9[ w);oEZYǟto1J<`(3L| +M>=AbW*U"#Jac{|J&g-c^It@t40.=&B>ZH%᙮Rrنף>cm9W*z.y"A]PCsHO=ț.̵!!kA9E+*{ϙ:yyt><aZ*98X=5P9 endobj 4774 0 obj << /Type /Page @@ -17154,19 +17020,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4782 0 obj << -/Length 2273 +/Length 2182 /Filter /FlateDecode >> stream -xڭYmo۶_a ",
؇,tIo76([ɢ'y,;rEC>0Q -GS&h"L$&aK]W4&d~HY kjРj$+:,?}Ev:Un154~#^}:
ѾIJV -XidyZUxg²#p%%ab%EIͼeVOYY2#֝9`r+xeHlW;Gl++YZ7}ERZX'*ْtWC@[dpaK^.:_9Leu -jk93Fd'33oז#B,1$6cW@IE|dw̿r<<ۖBD -[</p\Hj,x} 8 -Ia5 -ms -va<7sefMCF8'~b9Q`ڃm\CeWе6AHT<"RZz*(,kߟ4c%&s]zPV?E8 Iܨ)ŕzC5\p`~EOaVR1/XEY `<p%2 PDSXZn*9myuecC9 㱒&{F^ëk(.G -&QX7pSc i۵Hഗ62EJ"G)C8klu҇vwG[ 7c)9Jq!f9tji$3Dz<_DԐD_Wox0r@ۻ0yQ3v
"c*uMy+jۥT|5+DI( 1>:];Ԡj?ۛן6?g;]:Z@ږ%"pxd)7a[0CQ3μ| *n)ܯN3˱{9#1`VO82<BLt=0W
klt~<Pbp[7
'j+R4rƻ'"[ъ?
4/e^<-oukKp}[n]ߋ`@^GFHz:#uE`gKz~x|*+h^Z<Th?Zx3ؙxqioC&Sxq~:aLXH'~:?jendstream +x]oFݿB@MrY6ٹ\P$F((UI*RDwW.ݙY%7l4M?VhFO"` DςlXbћ~e<QJya'iǡw33zfѻ`}(hB|*KGϰ0F+?JocďPz& +4La9}nj";>t +ބ7xz+={uq4] MBT/sN^ރ4aAib +4֚ +or#$[dE֫ݧ gt)K>qs{X\.EHfj֮R7|O<WlvcZsEQhZp,q[bl"
urdt!74L ԍeJM}=.?.!ڢp"|kmއ@4Oݾ}ëfc +Aysh]rz߮v}pX4~y\U SHB`/Z`ze~ pHvK/W7%eݮ4KoD +[<Dq/q]H,rt`
[I4i s.G/B;fګ˃ -E6_Q.,Yu'_#u g[KO#(5BI\PܰSXLpc$\01!ռ +T=S|xfSxȐblw&^@umb2;kϞ\Xp +TW72ME`/abbOʞxU*r!-rQ0.X<S?L#H@Q>;YIPfH{VXT:\,Q$\KHnk:'b[6A{mN]V8\B(LZ>w3
ldi[I03 '48r_^c`1:< +ډ#CnOv
Ky1XD+(%]oksAa T1INcQnN +*N[Wendstream endobj 4781 0 obj << /Type /Page @@ -17195,28 +17063,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4789 0 obj << -/Length 3186 -/Filter /FlateDecode ->> -stream -xڥZܶ~Ca%Q#@P88hwF -$[vUkHQ((r8jE -s?ZH? Fc_ j!#_"O -HR#?M4$QXTG&~n` -(x<(2ssVS^מOHh7BPr_Dի;7NQ:,sACs&L*Q~T~}*j`mSǢE_+a%UNCxހ/Ik_
fgCV boh -:IS:/5yP'o~4
>EIȳ-n -A|l݈2ƀwF)Iʹz"0c
q@TϲYrh,~Z: Q^Hvw瓷npU;2NS?-* Ί-,Ij`ªF[Kq%rR<˪(! ,x>vhcC?N2R!3'o nNn -mđzP|OC -ez|w8+V -GKArqpT{wR,lVl+MM.e9J:V/5 -N%K\#ث0# -NNa:%wcزtAS -/GPU0 -: >.OvUzȴswW\ޭZ)f0{S=TANcr -^걮`_\;~0Lm=>'Zc"M͚0],ȼؿvCmzJf{8Ď3af u>^H1+! -Ad_E!'ЁNp1M?R2x3
yԛFima%G0!Fkt9){yUSJLn=k=5Z}ĶіUZn2p*?ACSrUX?HI979@KTl6;FW",E\$_rWa9O_ɚU47+ujh3ܙx@HljSK?Jg9p;hdMQᒭ{¢xb\DQ1ALW -
Y0'WC{wk<
q0p2/!6Fs-vC\gWfq -ȸu!Z8H{nVr f;41i -0ȕ
a`\5j -NσI.I=} dؙ5V*;S^SWva-Vxgch8g_ny`Qd{w9NnL{$VdKPW,(Ä+,B'00L%_1!cr.VKij>?5yt7.l1,̈́nW>]:p>}Li?柮?g-!|ȏB+ݲɩZe
gOuendstream +/Length 3094 +/Filter /FlateDecode +>> +stream +xڽZ~0eX4| +pp@('HNw;].8(P̞4r %iF?[mf~e7]/pf7Ż ?r$I~?^u"t8^} ++
tvY6^QFa ?gbgnskT$`̅nƶʠezFa|ح/|5('u].M1FlΘ]
xpOjg:_xFu89ms,bL![Y8app{TmS(4Z߶zPQ>=k7/88m7
b`z,P,0r!>FF6+ն}=~ t~_X~k2:}I'uI'8fH/p l`7|ft|f%eS +Л6-%/-aY0j(sjZjݾn̗U} +|3r+!@|O@p@!M]]ޏ٘(k6<.rr/]©[::xD18liU?@]ϳMun &Euy'e1 .șv#ΤݞW.0} +%%o}2ҦV!T{ + +=G +q-JFL&i`Ԗ|> +!_Qd)msw9W̞q# %<l2/ɋxA<Aһs[$l+/lR <bS0!SB97G9}l 7[1~AIa +ipJu4><6`v_LL Cw2) +@ǽu5ЭS"`QWl- +IVzmʼnRVSƖJVm_c0/i;F\D82ɡ#U|.A}0Bh[NrN\-οx%~ĆuՌ?"?"맊,c"'5<,byrV- }r{39w^;bB endobj 4788 0 obj << /Type /Page @@ -17264,18 +17127,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4798 0 obj << -/Length 3208 +/Length 3179 /Filter /FlateDecode >> stream -xڍY͒H)6(G;ڞwb7|hz -qKj69/wX7=V:W"N[ψK0U -LY^%춪sgq$8K3t|Ϥ--\H"φzFԞ1 -cfT5 נG ]<NdQ8v
Cp폽$L!wR4骆qϱ -$ɰS:nJU|s2aϱnƻNY.UEBw LD:==Ћ\PNqc9R9GY2yL4l)PC&U8V1G3`'k˂LfK$<klSspCkf.Rct4O&.tR1ֶ7dLcb_rI9gܱq
ѧ`=ȾQ ͬn2%iRf́4fE,x1FW;T<aj-Ɵ|:(T}o?I'i^( -(3*gѺhtfOArg{k0 [Ayhq.wS [YI؊=%KgA /=CxL1yJB=N{to+tЊc{GMzT&cQA1/,"](N{Οa
ק|l^}F}ׄJw0D{̲.6/wheJٺlnhּԣd؝qt rH\-
{|~0whJkl3Jt_S4kAu -V$+ ;'rM% -/3PD>dzoh
f,e=delt5qn?,@+ +xڕZKHWmPxv=ݱwb7|hz +kr2zg!(*4Ͼ'bJÞ'ɽ(Nq9@3<#I1<ÖAZy +/>вՋxMx*冝gn
Q>VAwZ1 +oa3&|$FY0%g³ضOjgaU5[;V9d&Ǽ-]jK+Q-g%6UU#v
4JwYyI_r7{0iN46;|]+-2t~ps¸˭[.гtQsp8>BbOs6iSYd$IF:llh@3H/7[b]_?|pHy0lrZd3HH;_aGfaGqzӡ*"c$^T1]Ta6x(1a({*r&^OlA<g +-C'6O +7Q
O7B|f;3G% +1:+3$O9Dn14wX5?
awd&v9;/oBdIyBL֖P@RS..=R8b5TO`>ٯV</y;*]z`Xɻ`V+hJq +'/Ua:$UN8VCshȳ@B1dZY젉<)CON.)FaK<AL{\r#8i@⬊ػuDISxɖ~[
!J$6v&B8 +vu^x2
f{>F1Db[Jd/)mEOr#
*ᵏxGCձx +Y|/2S|Iv,04n4mGQ>eRܔ&
t_{A)HpFXl]ҥ&lP)\kʻ UE];:_DbJ2z2" j%:QQD>4m[p\"NLƗe oKgo.kC9Yُ|ga o4S5e>Tl]?Y%:!WwjMIρ60p5-Ō'7T UpLJHb屛G6̪_^ux[A߰ïǨ[uE'hL]rK/P`_yIB6k|σ)шs2T ;(Uކ)KywRn<@@کW̯b;Q;aqFldW vEgSA}25ڜ
M4ɽ-o_tHQ26'u$lk78B.OU.sf*n!05XHK-<[t[TB2E¥jDz-:E 36*F4QF
N=+','u1fKE"s7Z33꾍+dIǂ%=('U0IK/. $)YW@cc,JH [3;o\W~ +gG'/B5jS@C
{\lzUqLh2iu=`n}0wQ}zNA{rLB6"϶]{tI[,cIwp@ ;Wl'k<^ikPhVlc30C3cAF9Ԡtb[utM6IM8^6C{3<I7vU
'LKcA:w !JZ& +&S9nJU|rra̱nĻ EB*Db;WO'-=!;wDQ*2I*g8ֱKEDU<%j LaeF=Xr ++;4ޘ͟dukyP|Ȥh`Ӿ3 TJw4V\(V{MthN)ZhhrLQF;&:˙ac*=M8XaBN}}'D)YDKX?N2kJ/_\_"͋EP5\ĝ~F $4"wjrXnc1ص:+ѷa3v.VU8Hho?Q:V:U6Ro4#b]c3T)E=jŎ{[$D<A!w߿.SՒQ;L2<c#?2O,?_&p}Xk87 endobj 4797 0 obj << /Type /Page @@ -17310,25 +17178,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4804 0 obj << -/Length 3457 -/Filter /FlateDecode ->> -stream -xڥZKs6Wj%>挝S;άhCZ -hr-="*$ljϤZG^ѕ\(6(4Z8q;0Հ"(o'vDc7[ހ`#>`zs -K7BٗeU$wv6MD]X~Fn7F ѪɡڼHl*=vdʅa ܖnP?*kZESk&D-ތͭ2YETYk]aSYeFFH4YLnbŶc7w[nE\^H,',x]q`/$`3[ -H<#ܲe{F착Ua(
Fs"Xe*8 `5è5`4 -%b8h-(aIjLbyBk_i$$E뒊`@"斌Yw|k-7LmΕ̂9Ju4GgC -VDV8cK$(wܛ2d}R):@$wUoW4D~tcgN<\v-4/Twς"|PT:Ja3okb x$vXkmE| -)9=цx!!0)%Ȕ
~13G&&B@4u_ň*8s#Q9lQq0U[!dУBc=,)on^lAU;A%GS"bvppZCC sH%cI.<b#iE^!#Z]8EP5Y''4.3YcL ACo
HLMq=NOa!bq+nV $2L4pC^(&[# 1kļ}_t23+ v5B,RUMËS`W<X#-ceUOuy4Kp9oDKw8츗Nf̖b~yPtdDHf #~%EgV$]#4q㦑iD. -
#T5`Y0Qp6s{pFbP"7#NO%ҰME6ݺC=;&89]~L/#^9o- r;'d*$Ǽ#=J(C(Q ;HGEfηd[OaY]xvf=}՚]3r~+l*S pWԛ'DYUK+FskOh{ Q2 j=Rh*32lζBe\qq:7'= -94{;?
w[nu2$@·
w&iT%4;mR`I dISsכB|j#dZ)#]tB,d`0:} -FXiG0rA|fStSWtV火2 -:H2Xpf -EZhhB>183f -,!@{jr,oRH(9:fu(<=4!Uzb'%Jv,qI:~'<F01dG.4dpG0wާ^\T1Lp09,T&XDH6SaR+8r?rr6<
|TS (Sv>p\)%37
-asQdڿR.e(#6jVQ[IIjrRz{8c0Pybj~Fm-H,JpJ-<@/:)~јeQ4<,#Lv2'sN] c(ceLHbZN;G0$!晸rzVΡ -娧.Y|6>*1R<($ -Gx +/Length 3378 +/Filter /FlateDecode +>> +stream +xڭZIsW6` +<kPŮJxn~4sVWy_656P(wKN554WѨ*:7%3傊aurΪԅLjfwYwt,~Y`qLD<o`5/7(d,EK{ZrNZ8MA:y>m\yT,x9"1Mw"GO0_Q<xYyǥk5RlKb+wAP^fDp?ڵEjN61n9s:bJ3gg|re$2MAB0,SǨzʜvjP-ɫlFX`"m*լimnSYdFGZeiYDn@ "źD qnM.G}Lt'CHL-@.xWDS5w+xbDT8rYlMjr +pukT,A
-06V@4Lj37>ߣh#(!IbL|yDm_8( .aȬ5eÎG
)t߭B*BmJVA<Xٱsl^#<弔QT,h6F)<zY߁#Gy۲Bvܷz4>=ϜxZ<.Hp PD}- ` +{غFi
Ffw
ymb + +XxS*ZA~n( ~+˺t1?f&G%y`oDP"Ou?\M~%E
h.RfN=k]~*pUdvN<7Jt*s(.oƯfW)4-B3Ꮸtzp[s5ώ\1)E-$h抱lt{B{M/eĜ0v0{h^W\vuXa0;|6Ɛ +R!jWҩ:ḕU)nF8w0\D8^On>rNZ:0)ngۖ AY +{Ikkr)@@_To`_2H1wY 0/0^
E?:\ĸvgaB4֠nQmqÙ @ +S--@kRzq.ь42XXN3(#yչN-8w~$Gc
p0!]6pFc.
^3N&iv~z51=9bFS[(kDk1+.e_.f|{q8jYCk5o@DFp E,D`e-9ZZMM*4KoDDzZ43d +28*2Tp8 +(CArCL> +Px8\LJL#@<t#.vU1Xol^qP|%?Eʑ1b5\մ P(I=HgH$~-I/Өٌ#9p5#dN endobj 4803 0 obj << /Type /Page @@ -17375,17 +17240,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4813 0 obj << -/Length 3468 +/Length 3395 /Filter /FlateDecode >> stream -xڭZs6B陈%HoN҇{uz@F](wd<c,.fW,(YǑ-gl=ߝ)ܡy8DTA>[<yd(|~͇yEJyf5P˫k\\̕"̼7}ˋno.~8fa9sxWQ|~˯=pQ͞*g3G~#oni>=QSb̏X*vTG*q':%Ak@ѿlPoY찠=t(4FԱq8ջ')Qj 8K7mUndz^Ey%ӔͶw\.KixS< @(s2i A>μ֛J
7.nF-֊%θfX@[?f&uz8<LEaeD+6"^}J$+DVtKݕ#-m@w7s3 @iB$L{Sn쫉1ӎW:6bQbh[kvjȽ*xAm8cс7/[o_&'}4UӖ_s_oB -[I49ۙ-=\F܈wzt(cmYX]u)GQ.]A5;560Ol^QDE_ -Ɯq߀aИy@ - -Kȝa12Kyz -oDoDx.?fyk=#- O?f9j.xP?^p@WPFƯl4O0ȧE, - +xڽZYsF~ׯf]%B00ț|$Q6&UT6I@+ A{wSR\=}|#u?un#?ybc?|9ΗݙAa\~Gbx~?JkؿJݥ]rJy.CLK]7w3`go]\/9ש=v4=ߜH>98 c?LZӝZEnW۬} Haom=4x悿i/cv8}7OOo59QD rdv殻Z^Ey9&+쩐yS<lP(jbJ錟X)7:#ڊ~7@͘8KsθͰ7,=ilp*LEl;%Z )lv_aK6?i]ЦVrŀ&DJx> +jFU&%CFWl8:m\wASUu
K}</d}y+ ZdO.&$C?JU61|&±!ȶlX&@slhEyQDŽ#8LɈ4G?yfYhġT:ݩT# GWhU*a*y~VԟZ8l%n8F8ÌWRT l#]O%-z~?{qᖋ.8 +;_^r%<qLVTYu^.U m^&,0Iw#y|hq!Ͷ}K#aa#v/R`J%@h& +CVi +lS +[(bp2>xPy e.ILGaCTO#quS`ŏ#L8 }{q<`_<p[&6!ճ'a qa Xg8Y9!p09OC5sqEV(e`pgK(%{%RI;:mLP +2jy/]!*49e\Ng#䁒B2iUlGUQ*%h
wK EG{nXQɫž) +( ;
w۰x.`H7+Dq:A;,X_,[ODDNbzKݕnlUH%khnF75JF
ոt:AmQA8
,8p攚lʁгPWw&hoa:4hWn32&>m)]2
8 %`Ж}/E1z>LAVG&~ebE!)xĎjXP#:2;F+*D߃h ͊hDM&_Zk<Vg +UX.K8+j${H7a?ݜ{!B߆$wO{.sXҡ$OśƿaYLzSȵulE endobj 4812 0 obj << /Type /Page @@ -17408,18 +17275,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4818 0 obj << -/Length 1910 +/Length 1851 /Filter /FlateDecode >> stream -xڥXKo8W("EI[]'Cm)P=\IN e%NE#r8 pR2s4ΦV>΄7s5;G,Ȝ('|*t~{RJWK],vq5_%/poa~]1<?-o?VgQBJۏϳY<8E9,RW4jv;{kû^rC~ ?'UFx -yģD -'(D؋,q<ܖ^!$|fћ)-V#_(8Qb" -e}EW9o^^n@=E -Ԛb@5v?MB -<+wLo[# P>Bȋ P0"M"k;Ɉy$/2+ʈh\ zۚLhZNLU{
qK5<҃:ेhm!6.z&gwmWSZwǢGpB4!tGz˩HCwmp(uoTE
Rpx_V͠n!d0þƜ|"f]{ؚk,V;Ӎ\{c"y6æQ(7Xr -is.*Ev;\k$6ǂs
Ty~fDqeY7uq46l
Us8}r9(C܋ȡ1ڝ#?u72M2 -15G=n]:l癳xCO9M`D͊J} fg&*<;y/pH=@g}T7\㞠{Āp1Ԥ/<5$|7`jЪh׀47"͖2/)A&"'L?G5>pRQ^zNP +xڥXKo8W(5#6it{h{-+
wl'Nw"@H7YzI/D2/Ic)Im`DZ"#s9xkO"2oyO,te,$IhW7Su9_r:4L/wK&^5YH:VƏ'PY=<2˼z#%"캚Mԙt0I<NEut$
_C3}*%*HrBzR,hxڷ8gH$!=I,S{4'=p1wՂFA)nHZ2=Eku2f6~:n-a"u[(~n98E+X%~v'}b`/4|Duy`nꦔrS$uɨ=䉋w*:2E:uW1[ uUUR( +E,ě6`R0Jf\9|q@ +aOF:2K3-z_- Cʼn݁Uws8_]U:8:yH.{z%3`v)ZJL үe]EPW9^,n13E +ڛb@5v?l)t1uFEDV AE)zmPlv?MA7,UKI54*iy6$`;쬞H,μl6|}"h Dwûr"RR~mG=k5DAҫV"ӧ~җ(S!c.0Lf)S~-* al6<3ʼ.xVY)O%;#6
4$ȟy]6k7Pp>].zgkF/F[>2Kwa\B j gg=d3-b-4ǁEr"kyk9eh)!@;eMk/3[r +,~ړR
.6j`B66=/siKۮA'EDB3ngfHCemP,ߜr'nF%$
vڷյM3!bv1fVrݵ}{ox6DEE`g +̚S Ώ8(-,:_|8js{]MYUy魈]bg'~NDcl?pQQf=6Ml ++ +]WGendstream endobj 4817 0 obj << /Type /Page @@ -17449,17 +17316,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4824 0 obj << -/Length 2511 +/Length 2412 /Filter /FlateDecode >> stream -xڕYY~PE<$8#pLX(kH5B|jP3cQ]]]W-5%t:ȷZ`)0VhOL." -ē4"o4-`~vTk4m7y*k특|uSOEc]3_VO6
NG? SDù)E3ۺч\ewxQgzJu~zF(z*Ȥp0xy=59ݲYa?U%P2^hHFeg* -9q89 } a9b%s(0T:F#\ gyXCBJ%RJHkxlUIp4'd5X\1<|1p*8;BM͈a -\+1LA=G.[jUń^r- j,(0{GƏu46`0W9'iz.P~1l<r{nnI|cС\C6J{R<vNŮb%ga2{mi3J`ڐd]ݝr -[vMgEFDZ#/$ՀB+gⓛmAj_%8 f0njVtd]uJhƑљG5(RM$(h iU6g(/+,NѨr˷. =%S -k/U/:E}YIFSA|!ggŖƟ<ptU/I;O͑F\Kd?cj}'߈2_6Rz߸u1ʻUQ̤Ja7<|:dke Rybqιz]5\8@}Sc6~ 閰N:lD1\-r\E+-e~sy? -xkNPQZAnx'@$><? ֣k+Bɓyi?%TïS2;ԫzg2\OյOe-;־^?v.}Q靬*{]L4yq=c4xg{rFU!r$VyS3sˏHX8Ծ8KM@iT +xڕYo@?"K朻+j>PJY$,6"e*i`<~;VwA%iHݭ7f>QBM=19w8Lф&<~70?
Q>Tޏu3U</'*VM֛G>-ul3Z;l5NރO?#&q綳%S2km]c^.s\懧ˮ-~MȏkQ)3~+(`/Qټ;6Tkn([[pOd^K`ḷC}@?$N@P{rd%?&nxxE0hYz_[k! +y$䕌Fi`ywRw;*;+Ռv'bGq<[+ԅfW]#@
5XF[tS2Ȥ0pIaF9;3?owE]^^o PGy5٬] +\/=Rt4IђZ_v"lZpD/r&p얯Itۑ|b(?0K5m)C7`I| _@!x +ſ?~%3?Hy(fM.0)wi0q" +;ܻt:IJT==ҋW`bM|ũ@Ol6E4 +su!wt") +?cFo5 + +/![3(ʐ[tqaY +B#>eK8OQs^Ubo2\OյCYĘo20"~bUp^V@ݔ]L5y?1Y~+H
%*~-]*F>c۔S0|+qռDgaC=P_tގI:t4hBvܻBgn]_^#K.]qኳpk2
2|s(c:X\)/JyO+WR:aQEn}.x- ݘrC 1,\H{rf!I(?udK.@-{) endobj 4823 0 obj << /Type /Page @@ -17507,17 +17377,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4833 0 obj << -/Length 1457 +/Length 1375 /Filter /FlateDecode >> stream -xڥWKoFWV -X.vAHr%&,y$>ܙy7#xN8<،|8FJ$&"2\G_G|/Sg3_p>_9ލ'ZkWxljv'f\_z3(n$sf~lH#c_g6~n*4mkB(0%gh^ {4ww Sя_}N}O{3 -
ղ_f:UltDfY^ -<'6ƋBh$0a^_ΔY}=*Lj,D+J -u2+ XPԤ -/KqPAEqBO_.)zJ;=]YAy/s`odC<HJ:[N]ܴŊL6)T[bRtcQIxL)ꁷg-sƦkH̢Xșlj8}@Bo"ܺ;&558%.n^W>y. -c4r[XyEsPz +xWKsHW趨*8R&Hmm%9`@6e K~ +e/T<L랖Oqu2 给; +&u=V5} +%\kƷqv絷jMU9sS;t,</a' 5<NdG80H +eB6-RtR/3uĹGz@2?L"lWHK6=+ XP$H"Z$"_,JR SPsnzS|*rJ]I,1NE1be@Y(D-RY`pE=PefX! +6ePEU),4\/zX9o +>(]$V|PjEw`3:W:-+0A2m{Q*ҎT%Txn8tZxpiuۡWYKcv +) >k0~sUt~p +6 W:]C2ޥc߄mWXmÍ녫
!L\55k|^(1PS5LډcȎ``$QfQE\<fȥ$$)2}zdBJY-yr|,C>vs켰Y(/T}bTݫBԧ +#|Na |D~J{7*QMendstream endobj 4832 0 obj << /Type /Page @@ -17540,24 +17413,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4838 0 obj << -/Length 3264 -/Filter /FlateDecode ->> -stream -xڥr6P2T<6IefeN`H
I٣ݟ~,ڗDht7"?b?"͔l]
B Fk?"L* JgqdUr_G -q^S,O_(Z$HGwOerǁvWkS/W:I@3,Wʣwsav ?ݰ:~$Hr,V%q$ "09VDR^iCW"=d%xS6pn)ȡC!UP a+ja
N**dPe^{Xnxcx8m+hzZ<T뒉O[ЗE:nn`ȖLWk[@'reBu +4\>f&4F<֨ sWh, /{"AApluM9# -F_zk4*m TO/t.(ct{OZCo'yܧBͦ5ywfϠ=_,a!w%#ogHw -π"Dƭ<8$BMfSdPHTd;{@ -`|4" -: >Vl7.*@aƪW$&GQཆ䶝l駑36D:(^vW3d6[A,nniyIA)*xW&^c/JY[J)8ζQ"iY:RNo!MD#rv"MPnopa[CH5NoK6^vD#b[:}<|Et 1)3ɮ
&
U{ {Z]I?!% pūP7ݳ! , ܴ -HC@:-")ŞASV㍡N}/C$
3HdۺY -Y<0(XMݚ!w-d#t`Zҳ -@s[w6Xw}W.||r{$n[8a -aęC+PW~;T#hB:gny:1Cg* -`_썗\')x=1rZU0<$(-nTƱǁOg$`7S - -m6%Ӷi&ܒlSJJ|np
\tPBXڒ})i&ldUϫ?.]sj'|]s=^Љh 1.+9\Avpہ(~!GmF!{#mikŦȈޖ6faXǴv>֞.w -}Zd$؍hAXO?0"ǙNNd?l0+HNB"U5O=ɑG4;IbIj.#{ea/QcU*'*AVJSk@?F7:Sbrp\jynKI)<;3+]t g +/Length 3204 +/Filter /FlateDecode +>> +stream +xڵZsF_K(^zMΥ3m"-H? +xwlC3#Ic?M\2$;e~ųEyn/1 +fQ/1o_pixWE\z]Ef/BG3(9?_vҲAxǀpb%@yN?N!B{?+p^4M!WeS 64r_a@ͧ\wG+op +3?k 8#0!bk^kC.}%}1IMGwGU6ZP#ay&Wvhs[V1<Є +4Ţٕwgd˵QQ=-Oғ ݁!E[}q0,Yh%M~hYͦ0T; 'XTeS;{ + +D^bvv|E3| #i`0)&F
U{ {Z]
Ae.3adپPJScy:`ӽpeM+pD<V9k[yGfL="Sg`* +@Fw
2G5|!z +@SnWn*(P%E>#2f9Pw\(N:{5Jxzq
z +y?-P;P>I+>Y>ԽL27_,[{`L ?
@7k~ZT_@2g~ڻ劼Ůmp vKz|}优;~1+Jヒ ri=) +1ѓ%3LNHeqˢI`o0~eK/uKdg \Qiނo]s>C5Dyu8bXSKz!*0|7t
/4{sh=NXyhZ]0m;~ZiB3 +2DbO6MLV<w-4ˊaɫl1yMoHL<k>upk2cWN5\rBJbt覓ٝN=JYCf$
`(ag17< DC̖ZL֞oӔ/Wи3)`E˅3B;'(Wڎ/]̼ifCO҇2Y)|8G(`Bq.tn+ C'a6z|F^p*ӣ?O *rZU02՜%(ZnM1I`&uњoLx)̖IqY2`=哌*pwtI~qam㔔LUK#"#\W7?HM.>${r[&.wRs
J٢?-2li vlz)~$oL5h-^錞^Jpxajɹ}`KTr8OPQnY%e앣^O`Bw a$j\Sy#]ΗNJ)8둌*SNhĬ~ +̴vY/촔EaDpQڅTש$J^VǍcNšQ2_1A:Mv%g^BR{EDPrO\CG?o1 DKt>_{0+.#?"Ns?͗^_\kJ'"txU@tddя~"Ir,"l?}Z945gBa,J\bq{g?l*v?\=pu
9${ئz('kk&o̓.ҋa[|( +$cBR#_+sRNB3zݵ6{?e&ຘ|ܖH0
/s3gZר干[7YԤ(z:FAp[S<wVdcuܒLoe 20xM< v_Q(K&\ TcPؓpJUbMpԭu08V8jf8M }79q#q2-OMg1!Qg<2~<Gqیl/6y3(o.|1p&&j˄/uƯ{B5M#fc5x͏m4YSd9Z)
~957HG^ȇ45UF#0MRMso0꺰TT\Fgs +flAz?]). +=J-htl
<a|S_5+e&aY]^vg9/ T{9@6C endobj 4837 0 obj << /Type /Page @@ -17593,21 +17468,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4844 0 obj << -/Length 3294 +/Length 2833 /Filter /FlateDecode >> stream -xڥZ[s6~%Lx[6fd3NZetRs Iti8|8WPʇU)_g$
Np*l^}ClV2?[DDzu{W7Xo^&IRWׁwdxpv oi>֩ng"d(竟W;핯tW,@(-ǫ[Y[cD:UQ/1" U*
=eޱQma=䏰uz_ hd7\6]^V<vhƙכ# ';҇IUë&HOk'nx+{o[l4>>]q`~'hDe?0PCy(SQ瘩LoC/
tib&UYM$*UE@#Lx:]*,#53hsƤǠM|{}Ы Dhwl̖*3*2&bR mtxOmѴ8(߁٤qeǻ#t04[50'Yr\dh:5^ܡC\%<2MpȻ֎+͒3`]om -h1F4gRf@ᡵhwL[;'!+\ť*hV[f:DIR1 vKd SB=:&,~[j8ƷH3|)"b<@~2'ob ySTT.+rڮwox{(%91fLeʼL{ f&o|_Me$*3#C4rab;Q_f.mT17::#-^?pHKt3d7hlYu5SCI -ث6K CO5
f"_O55͂pD ,Yc -Mר=I/R >ݵجXR?MՁ7]ipa -O;{ܳy;n?jKNG ĭu&@}t)7|S:\w WPd9vYn^dӻ}pnk(]N?';[(n)(RPv3w(r5TÄMC3B -&*&]:|(拝tAhWGʵ0jlWk7hOOu5h%fP.bDU<LNw1 -fwO$(H;qE`acFۓs75xEoe˄n${9zc$8n"`|зjav\Pf"G_.Wg[I(y9AѲ[ Ki#ױR&饴Q5W-/}'ι4[1>F>
[}WG*SܓG%x1rO囑TAp|33~&><?TTT{rfDcZr<hCQ18Sq|G![^ .Ӆ4JWUf/,!ep"b;Kzы<[}A,ԉ!!Iji.$=-<I!q<fIk(y(B-${Lsq66(38an$>:-?P DZa|ރw>sҺ1ۻ]qOmsl0t:Dhw=PnJ"*+=@Bi+5f$1RY#hC8YiHmqH{xkRw1yDGAff;WTgqT,(VTu.f~"JL2x`( -[tx_C1/=ALxFP݈@i~ŶưOcl -۾л gSOrsE|;AnrMc;;0eUvN%v{å%z']3-%{}n=Hs"FjN(nj֡C
TH[k[f(ǝkLJOm1% N-:0e?RI$ۃ#64@#šF.IwKǚކh_=|!I\ʛI彴|Q^:V:2߶Ţj롏W~ <2e"LJ-§gBL]2}np,yDnd| --5xWt\ck] {^TڜWU#]Ir^Ӕ'[6P?Ӛ4KzO״{9-$w_/},C/7v_w;*ZӆOny>] @1%PPh 9s~8[ib)Â9;Zhfa%dfY`Θ20-e~SrI,^d EPcha97ÏKp }5Jvq(,\:D3xs-FpUu.>1?'%,Xc1LC!4Hq Ι0>;4ߢ;ᮤG -(Ai+uz9zBHendstream +xZ[sH~ϯ\I}dC,$l1<(hF$~ϥ[jc0BQs?9"/Z2$i$dNp'JFϏl$ +Ef%m9_^O3)eb:K4xq4 +ޜx~K*8'Χ(8yuq/6Mep>}sHѻdd< +5Ced}ZI\9W tb#2iz#=rwAS4O$ʷniO
lhpm/^(xnM6D=Ÿ٠@Iƣ8NRƑSUު4^ԯ<q+7]Y}b3Mk~ߞd"̽P/.P0Ęnc~J Q5I&;C!\#{
N01F )?'Q$2}埠Ԙ tci ^5 +U7Cd2c9H◄PX8L P8Xgg⒡ +OqSBocOljZw9ڒ- +u
XT3D*.>e^p|o)W[W^[{'1dk<t zSKû:z.^ʦmZwU4;Er
`\AYfʼ}I F|v R\# TMoaZIJ5J-BȂBu<[<Qd6)Y-d +.4va'wƾ"!<_YfV{_,O4]X*6 #k+%-..Hۙ`6\A(oa}d'h@/ˬE@\Or"j$\M_YAkq1;ȐrRKT2
زȈ?Ȕ0Ɍ
w)!Bs5p7ihHnI
(+&.[,7clI^'(zBO5d4$bޗT04wWfb'NL>/dWA}܅.<:IxhC1*:^aEk8>@l|,Db;B4Pd(O +VJMmQ;RLLv?9z!(Ӕ|wjpD<S=f8e,a9$WljN-Ok77V=1
q5c=Zrڢ[:h%YXp?]D4yeY7<r,Apξ"'}¨l{ݕ~X:l@Sh-/_Fu/&Qae^
dLwůٿG +x@_T~,gۅڞp]k IQ08.4PD3ODSFB7[#a,9HJ +J@^@`A^<GzBVG;4=YYЈǑd廪#sH"Ɔ(`(3_/Y:p ݂!SaR!ߙC݈#+ +j0hTqBQ<ǁړdIhږS3nFZ,\jG(B=@ +;dfĩp?
L; +[#)vKקZڊ?Zi{(S2d+gj>E5l%)$n3(Y,h &Ь^c +bAxa(\jq.}A&CsYzvUg5S~ٷ1'凱&}o endobj 4843 0 obj << /Type /Page @@ -17664,21 +17543,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4858 0 obj << -/Length 3035 +/Length 2384 /Filter /FlateDecode >> stream -xڭZߏ6~߿·/H,p"MS$dA]]dˑ ?f8D2IA5783!,|,҈"[$iD.6qw^]JbDV̋g?"YgX__|\ ! eU՛7x+n{+G߯no~xy35 -GQ^Ld>bQ(u}ë^(yx
4
ge3p)YOSS'B!QA2^ BS@9ŋL<(k -YPB."l),4fq?pQBrbԴLfi1sx#1,<(!6@ooQL[-es<?|(dB j.x\x;H\t|Sk(,>uty2+"oX}SD c\d -OdGIݽQ"+]J =b-Knw;zKn)v|*kN[Xm,B2wWr+.bo'm'ՅH-֒Q)]+s[Ր+."o~;HQP͋P}]ukI&rBKqma(TzFB/馴W475Vd$kz
U/BgKY|z~ёAHx,K
l܁,_MUmRUGƄۦF4ܠCOmv\1)u+R|Lxg -t7ړ+C*zq!4|z)@J}hϔl0¥ {o>=5=St}%)P{R(P~fb75@ onq&*ۗ --vwyOtIBQA1!%69氾P
Ov|͗a_1Ǘ&V -N?/-0!tfѵ -m0Ă!MzfG ht54- 9ZWYɭԂ+GUzrT<!CڜE{uH86)LGcElBXB}q1Kt0?8+!4x*!9Cֲ1H(C_S{د,%6%̉GQ$=RB{JG -89հ^6:!V -#+yИǴ訪 -q^DŹBܽ`/PBoP4feNonuo9$ͅQBɸXiR&``ù]rklȜOy,IIZ7[iUM #n(s>2XB(CmTW`8mbXJs+S]`f/eޗ:a hP$]N2doB[X5HG[lP>T͠3ӥV%Uu]8=訓ehuMqPb4dfeHzᰒɷkzoTO#DҭAfD/e[e+rz(Td2H3[2M]\Mtq;zk`d?r(ҜWʞci`|%fi!"ȎK}uZ-1T,L&ccYNhK=$hM> +xZ[OH~W2ni\UFڇeFz4ZePv7nc!H\lC@vBusN}Ṽ?S,N|dx99o/ +(HtXӐE9퇹rD8Nws~zvT?s 1}D9/o#@B|2 O4]C~6AD(S/ѯ}gMp22DScH(ßǟe"Ah&]Ě]I5E5q˿^,?;wpe,0ҧ͙UYc)%G4|ѣb9Z57T mq7$upbűSb-Q +now*@%qjr
>58fq8ᯩzMk$Vw9ϚYٮ&4k"{1r
s,*{h܇cbޕ*r6f\ҙX[_:&H8N7@JETĉ71lO؇0zZ;1
_G4 [l8xw{ȝ3bKn-PމlgY2jX .7;h3Ig͉R8%LG*Cb=咛pӎ
:0!key҄tbxu]npF1_Q@ZbY&7]F=p̍%?#q|"w 0_CD="`k<<7z<'k6L[EQt8^(7Yro[5N_cTOi6 ݥxp s*cԂުqU$Fn2j3ێ-C._a;߰h`h]L)
|S.\|xPZUXxت)Fpx
x-pTcJ/2RjoA(<)> *_"WD}zГfb O@|M7Le'(S%wQp`q-#E+V7P"R}vQ-bIOF̝"]5}'( "DiGt((髢x5X!yF[ {IW㤵b4pqyzI Õ9@DJD`CK1a2G:lXA{G"37e2 +bp`.5ҹ3:ª()wn&19LxjW<{4cC&#N4D|Pxlɥ_¡$Ql+Mk8ꊇAG<6JơmڇzP<#μP83/_,HqL6Q!ߎnb2a36y7*7"0lQ(,\$qj^WQyc +`ı,F|H>z)&%bTG{i +HSR>. W5.3Qe;;3G-h.> +7\+sCO.W
hpEusV5iFLUQ4QQ\2L"r#GPLtpĀx⺡x)m= +^Ѳ^3f! +[5WP~Λ|*ڌ{m\;&!w~ƘljWX!Ԯ%]}L<Q +=*y!oA:MhdJ<ܲ9X\Х&
O*
qXUP.Y
e8*Zt[4Dl1Vcӓ*0hj. endobj 4857 0 obj << /Type /Page @@ -17707,17 +17585,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4864 0 obj << -/Length 2747 +/Length 2718 /Filter /FlateDecode >> stream -xڥYYoH~j"1>xdA&k8yh-䐔m[WE{XUu|]qgqgIh;~:d_8-t -BH#./>FuIg'П-{.[nb_.8tןq)na͗µnHv^@!E2dߎqqqw35eCpS;·v<X
l?LپбC' ;i|0N5(V<|h{hTW%uFmO=ݎ~kb;vhH7yn2tRab-zK͑gZ+4'jÄעh
8ߠQF?1NBNlt: H*,lrlme웄O<XWZ8;т<Q#ʃW,۱?~ -acBRQ{kD -j:/L(& -&l;#c8*11ɛBV|ДDyKIqHR_`<ez˸S"2d5n]O=6GpBP7\ku&;{d<YQ4)ߐyqӵsyMS7={A?L)5i`0 -?aыc}t#P6O\n5FL}Y:U\}Q۵<"rIl'xeH^YNZZ5pdl~ 8sw\b]$x^+%t^O&~Čj4zqҔvq+ vp'zPIKF韀4Z<3hL99'@W?Sz@nk篮 - =\#!0z)o' +xڥYoFBPh/Hi+q%B,#k)ʢ>fwgfg~3;',v0Y6Yn/f~D8${d"yqp};,CYfۏwsw#NE-t4ͧi~.Й_~|n>`aQ"]&y6yy>^DqQ(?.<MxՈ3K1s71 u4 +PAJ `.r(*&(wA$uL 2nJs-gϏP}\W7qnrcmu5if4w$+[`334y2G#GvmTi7r" __Zn 0-;Lu@{T='˱vQ]hK>rNBެ@Yzϝem(@@]1o-6~ +dM$<Khp>B_A:e)u5/q
}Ap.wkUndfj1aW!7 +iՃjLSՕXqZ>G8/*>U}e$LN='g#`I6,)AI<r~A/M9 >s+&7Th@e7˰1=|Y3x#Ӱ/-!Љz$Q +a: +ƍ~$
'|,m[ AYsM*
W
@[52Ě t֒=^U~,)sP'j,סt!0kk#Q gI!(xѻ>JVl~
_]!\f8{O9}TOzu{ڽ/J4[$0 +\K<y3K$myy|8)(b!ՖACcn?1tG%2%UV Zx^S5y,E/ͨF6t*5
ǑwR +@ .ϻU)E<TjkJwK.,]"]SkkL_.3zɯ~2=ca~DNJL:)[EQ
?y_,H+/;;@n^\OYM|>9u-LAUǏ`endstream endobj 4863 0 obj << /Type /Page @@ -17746,18 +17625,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4870 0 obj << -/Length 1848 +/Length 1806 /Filter /FlateDecode >> stream -xڥَ6_(V*.),Ї4M-tu4p$y9([+A"r83{VIB!uĉ:Iu9N̔,7z96 -%E*Sgy{ r}UXxq~xyPի?Q^竷˅ܫoq~vgG)qt6 3)t8Bq9Dh/f7,pjNDsp`&Bi'e@67yխ~~Vx.n}y
:O4)o֬ -KhUV}tu]6= -
uA -n]jOppҗ k -vG8$5_v(BGG f?iE˫R9 3z'$JFSG$ v$'I;ݶLsBAHCsMTz)|-FV]2/|@,\B -`ISʎ
a[-8R ۰e#i`<f3[ -@8.َϏ6
a +xڥێ۶_(V".%Z<iEͺEJ%ё?slyݶHDpf8w$4ReNBgɏ3bH'2qRd2s?ozSJ~*^۟,|훟(tarq~rO˟f#PB>~Nb4Besk),sY)>S)4< wmk[xQ^?E<BdD^USu fhδE]M>Ѝ#ByN"_RUۚ{>xqn~/ F8o˻,<u=:YSΈf0^zMN\R3fu-_JG?ZB- ˟C}7|/]6Kܾp9_$wߌ;`\t8]Q2Te1Xz~B)d#H,>nM]ttcIu=%wqz=8g6.S!-PX2Xw~ᅉrXuÛ6]Y=nlK(ط-l"H-#vSpH
Ђeȴ,W./rޭ؊qkk{ +w>P]50)SBADQ
iEsჼCjoVw̹GL@<PJ,=%hMo \(pܹw7ghg[ޗ
`֠V=" +bHRì,*]2H` }@)9%EHoHqBA` +)swC?)-xB!40渡3HE +O%N)! =UyEzLd]1x帤2,tǨ}^$#㑿 endobj 4869 0 obj << /Type /Page @@ -17781,18 +17657,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4876 0 obj << -/Length 2308 +/Length 2228 /Filter /FlateDecode >> stream -xڥYs8_VQ>^vziqfFfl]%ѕ䤹 -?tc<Q]~JՕh5Ld{su>rS0qі5Wdȑq5BwMsxwo;śhwJ -R`qxjl*ވE-9x=5jc}h^ -2!hh
DNH1GAvQ-&
3Z"=ŧ6Z<oRNKcD -&^OX%X%h%MV75L3hsBb[t3f+Ma -=V4uq=ʼ%0*MgޠtTt+vZf8$TڄP,(an
ȸXӎ![lCK|lCоsjCd Ek\*peok! -46peF+!iHnMMOD@C&$ ҶdjQ4$kB]҇I-76 R\a; -=m'&6*ۄ՜SA#?ulk<*Qq$'!IwRveu13yo1nJ5G&>OX7}EkwiaȈH{AB"нI$H-sAǮuCd#/ *#Z_C$4bQL2~rs4Dd+F-۞b _O 'Uz[#&ztQ8ldM^ބTIP½SE4*Yx~4*KmEL)9HE}6E0?,Db$lk"#|aqE8$,yRLm?=L>@G_zw09}~n.WMqn{iEsնFKHx}"%R̩)㟟/ԻRyU)=L$1m4/=W IWmF?,<GN=z:0/2mLO3{-Շ>Hjh= ;&rb[0E{bB/|@{.8@س("kxpsendstream +xYs6_J̈́4ENڦ\M'LR/$Iɴ3}=cb]vf.z$r`9[$$,NfޞxBBǍ#z:9%g,l&Uzv8s{H7ίuuNxq۞uqӇqnjeϫ +0ذdcﳉs_8[s:δqʼe=\Ago.\8nV2$εp4Cky4 +<`; +|$l-&ұM(]뜌CT K\9| pƇ|eFt/2ct·%ov6 +؏]\gp`PQ2.#?C +Fsä;s]^0o{JzpokI6peF i$\ +~`DC7s8VOv}P"x? qEIЀ32֔0bw{ԵN5BL䒖b6|HP]X%4ݘAIYfvGRgnN:4#.O1Ӵ4ZUgLHlf[9aYCE</~!#d1WC<)ʡ{I~Rֺa1\g{Ѓ1P0ʮ`[V~$'-IC$ 7ʀKǷk|WsӷFL&f=(&mk1$zm6՛֙]@ Jpp +Re#/^
'nS1O-,#SSE>0}ӺϚ&owC9q`&mۿ"{HN'L_//.߾bQ"% +u/)LYzDas9+et+ةG;qNw: endobj 4875 0 obj << /Type /Page @@ -17809,23 +17686,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4881 0 obj << -/Length 2439 +/Length 2381 /Filter /FlateDecode >> stream -xڥkoFC -X -S5dsYXҙg9B cyS864i'*! -%Lh9{;i\ - I(,=JܹuZ.`}^ܙNȪst^p!gpڵ >F̻u1YowSGq(@eKy5&GO
<:xAzD/MHzs(}?}#f**T -9^JY"r8 -lN`AL'a+ -0/8QZvG8CHK0|C -!\Զ*x9$\ܛK?
_Mϋa-uj'p9BG&L -A5>Z\7h(Z!!s]۹CI<usT-U%$! )㞔W`O{vɎɗB4gf94X/DN5_L:4w0s{m+Cq(gJkOoT[<$Nd9@zԥgRS1Ђ? - -ko㒜`[̸5B,:ys:xJ0~etl͢u`ٹPxI E -{mMt%rWr4[$+Wrr9%>ܫb^6dtQWJhȽ)zߕ'MbQyKVAݻ6/+WϽmoMIG0rЉDuƶ*mUR%O'CW- -@W00|P uؘF,cݽuz%1&zѕ_:PGEg_?o2V~.QGs=Js㎷endstream +xkoFC +X|Ǘ6.ԍUE."eCȾ_%%Qr}{Ṽ?YJ٪f/L^֛?Ez{nꥳ@'B);_qܼ{L?~XsgG~ŽyH!_>}f9˕4`~+*7Jo +cMt(xnh{eN\9//|j:kr@}<6%nx7O&]jl;qtHGdy]6n#Ƽ);B=o +P%вy<|מT}Hdawߋ{-b_FD.pmTduqYN6WUYU},\/H|2!o1~6PHE$xqv5w ZEa$ +Lr{`Rْe,d1op"gWT<B/Ze +8@=.8!E۪Yhq6s"#D2v[m,- +=j[FE +`l +,mISk!UP?>ItŬI[>9EBw=/`0!5ϭᄬJ0{NGlR:-9.eH`w1εpxMY:wT#/^x㑷i}^g0]0(_q )3>9FǏߊʅT*F/&9
+¾X'Gˤ@lb:ڔ/:JA:.K9' +|7䷩˝;"DhiU<E*>j
]Nhmgk%),RIpTzLH^"r>:&_ +Qb_,_kaD:aN
6KV41O@Q̲&N+D<nNd+@zԊ?RRм7Lf}ϔ&l <~sxJ
/~en+qQ͢u`ٹPĠeY E +cCSA$29oha"d1J_Dɣ$ :s2,]J7Qe%!%
{Ay:
OЪO3`@xu[Ոz`{0N$f 9>PtI& fx~PSFτ=miendstream endobj 4880 0 obj << /Type /Page @@ -17848,19 +17725,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4886 0 obj << -/Length 1898 +/Length 1857 /Filter /FlateDecode >> stream -xڥXo6B&#J,붮Efb节[,zM݃XY
Akxw݃䝤b%\?X -?tp
<[HgjqKXX%[˫o҉~z)O/_R`_W#篞1?quזoW/?FX -##e$ij (4bߟ[rOn$>LƄh. -U<:4E3CљŚaA(yAoPGQG!dA0ˋlwŮs0E ^Bd=zV/R11caHӈ9?3/W[VFȻ|D;5nGi`7 -)$]ESW'Y{n - -^DtMYu(34u)6KGymv~5f.L'2w\m}uJP|ME$=T3g"twvF65s%]rbק;'^M>0ἜZ3a6͚v0W5 ;CH W=FFei}f2L5inus뺼hF9Y760nzzp<,cd#UyX<y6:&@0)HWipES]n_ikApctGRIlauۙSr+ofXWͺyd]xP#Iߔlr!45-SBDžLΩFDIix3~
Mtſgۗ捏⡐B -SEzwTmSc'܈pHi:7)
N\iZ(h(x݊nyor -wjy֦+ڷcWE6
v?`+7pٍN=ul&P7-NPWsiuQC#ԕwb<W5\0RrT[9alm|keFYlut;lL͍.VvK.$Aa:cرg'8o4V}eGx8mRMfຘBdn caBej2tU(b~fzEQDNY[7YML%_3P5=j+ gv3'Q'' +xڥnF]_R@\i M\[EP$"i
;R":q0wڹvgFrOZ[a$EVRk
3i(Nrv{[["Y_,]2EFWWsi_xz +Q}_~H#^?,_Ξ-G*,|ic˙#8vvc̾]Kao1ׄ
q@i\!r@c9 +cI/:!t-) 2 +2Nx.-'K +Ǐc5ix`"ًҷ~A렍NW~WGF9/uϛ&)4;<H2߶v/wyan1SE+(W8O_" `db<z@ +t +s#&;s#>G%$@@i^^fvMeLwY>%]PkW w=4LQ0#冶Zo3s2Xx;:&@mO0he@SvIFz~2I]uxOnY#U_-jMpd]6DXk<BiPf)d^@pP ǣܵP{&#mJ +w}M]ea&K[.dRnSln&)Y9I_
@:b_?mT"tA8USUݺW@}m˫|\e̟U2EG4dM{sM;7^7#WLSiLY%g{؇CuZb'OxԐB^[=!g{OM09u&N[C9;6`ajb^AvC@NQ{0
l{Fya}bի"{L5qnusn8k)9Y5N0Ӯ{*@?>F~UFnHlU=B0v2<tq|_/<2ydT +y-!7A8(&Jars@h+fu-LQs ;SKjn4^ه =4BZ*]Gm(g:Dؕff ~78&[PV5C[2ʌ> +}Ȇq=e N36;ᱧS 0tM4T'}}@0tcxC|!j{hh.sEO(5ªt⨃.7M6B#|l7fd9č{rFcWtry!T4}"svC!h4L/1 +5) ? U3͌ ( ,
(Y}ֽ6۱|AUp"V@Δ7X' +h)
6 ^ |NJdlFAtS0)1!)'W'5F{)
LU+H;mct'>L(<xFΏbTLuXI/A endobj 4885 0 obj << /Type /Page @@ -17925,32 +17805,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4894 0 obj << -/Length 3910 -/Filter /FlateDecode ->> -stream -xڥZo6bkP-+z?7R7v9Nޕm5Zi#i}gGRԮ%Cr83/</|ffb9w4Wg -$Z{v\'v8\\?8~:~vyg,M3\]<;CsIݷogs/<Bz׆,!3MO>|k
l@mixsBDq~}ruY -cX1̓q6%%aS@F 7E{nE'bML̉y<(cX?5xC-~R=C̴?(uS?z`#̏-ǁ2e9UsV=^fz&q巒G(8M0B]AYwCl1^x&cyۼH {,s>MU%yH<Jۈr\LIJB@J8 5L⿃<i}GqXdMݒ`R@Ecq1g^QhZo{ -=!
Z`zE'nؔmCVK¸bb^qx5>z?L+XPB.b9sV,qnymL!Et{gIcྐྵr&F)k#קCESi'"Weֻ@ -bִC|J6G,u_buUA1mv0L˖h_qB,ڕ"+b(פcLmA8!XYhI2jXD[x1t"f,!i8ȝ+:/fx:Wǣ{
j2tN{BOվr%\+d(o{G|Cnl}֓i3ɸ_-C92+cM>)ܘGiR84Mky2!Iė,:;$#%m&iT5c)xvxͦU{[UqCgݢ%:a;?2Ϲ
+Xtr=o_"=ø9Z ^sۧ/+C1k_{ԍ"wʾdE ħ[Pj1,9by -WBy'62a;/e7Dx% -"r#ODD beWF1*H]we7#ީSCl5죽s7Enm)Ur/L,e&Q]GfyZ}Ι.ͬ4(Rў -ݖsӋMxf0lvflAOAAХ!0He*6c{mw8emh7VvR::e)z]Ku%lB$
I=$oV\5׳"֢锞#F܍4N4PIlʳOf_G+M9#Sh2[F(VӴ -f -F+ܭ)8NwB -nh72`BM@i kbW'BԬByiJrǒ -B2r+)Њ!Eir -1sq$rgCMG잠1I&,oф#oܫr
'u<Pr!k(Uo*_AKl9-ɜ2*uy1i)'D "5 -O6N[=i&ntza`zѐl,<,r^)>LU&kp~mLב%+sG=s1ċ]5V83}[`}*G!*`VZftO(q$&^SQ2Z<R@3Fe[hJ^\GLc -5:;& -)?m+%n^F<y -kr~(3@~eBZϊ|fvQ&}V8 QAwdnB;}+3+S<d&8ojbå(ɀ3ېZ -yZP:Vl[l;F![dQ H]ߟ2b"nɹUKd"49H8W&Iα4v)T,w}ҮZi6$BN)H$8.}(Մbr?I7%*g.4'#%A;f
,gj<[}<$ЕAߞJEGI?B4آl7Jy?k/wWI&GS#7 -6څ~fUN*~b+'GLշk9F1ƝyuP苍pOg^ac
{ߣa -/x<l-I\l;UD*Q -et;^m6:7<,~//%Zʹj!sɄ;q!ʹ2jmc k1ۡ2,YmB+EcK:?~O
Oe('1W2VCއp0ŝE{aӡӕîkd *VqWbL}xdiW;30 ZS
j -%;:'W=4CO@'凔.?tUWJP[vO?FN=csK[#Y=-S4%ˈs0iKyжh46/&Clpw SXū't
5,pўПϩUrF!qLh{ASG:2|"]d"]<{wywQFE0wj 2$6)"XSj}%#֯?>5RΕGjq@״WOoe!5'endstream +/Length 3798 +/Filter /FlateDecode +>> +stream +xڭZoFB5(D~9R7v9h
E*$of~+R =vg_Y3YfI*Mg7GB#Wq8=7L\}tN<9|nPJ9~I:oN.sqvzB眺^s5?<UƊq|ʛ͟<Weڞgl}FʍB/v3XԜ qD"AY4*D!:DD(̜|KcUqcSQ?y1+|M㛪cH\]Vv4[L7ɞIQ؛{_is_ַ`\ف9+FcN~K +pВ/mߴz3/̿5L:`#tX'O2w 1'FyΥ۪ΙW +h0Af^[ sz95+$ϚwR?\%d"猴Bв48S/FtMbt"<r9woDi*Ro!>ǜeB!+4 ";wfbwifm`D0w$r[͢i@;f1`^۱5u.,̾U`Ր--s}kҸ\W>qe@4YaˆUjxIf![W3mc:i($vPK?F@/oN'(&2{`@EGz;Y%NC揾#aiPnsS'X"m4:둀Gr/(&m1E+I 9 +
'R̢[mx1t"a!i)ȝ\~jiAUxN;4azʠ٣sQxA<
o)4,A-j}aD1QRS=pZj:
x\wÓ
+ +1Xd(H?ź@-:)B,A?*Z-3XvD{k3:^tȀ>[l8m*폘<Y*봓RdRJF*ALC(,uX)h!Qz3a!'7h5x~f/kCMedR;sN.Yub=$7&`ۮ=FaWg
dLɳ*Đ?2ݝNׅH
F!s^V[
+ +aj҇n=̕{B7N
ѼH}}FvȚQiZ{a,|7kT0<M.i @g$7 +cIBA2)9ϥ#2aO'@^mcl$S%jf1(}n
mT4֩.)<T5QNs`)Dǖ8Տh$pCOs;iK-I1nU& +2svI68zI\hˌTHޠ E^;ۭ<4<K\C=uc@mJx^Rq43b6r[M{Xґʇ) +An0G +u9T(3hm"aX\Yd=.Sy"%:ί;'|ϣKPER0+A+KQ,"9幉 $wHmO^ +Dž5]o, AʟG8S=q R<5[]
#"7BO +0#؇w
Z,8$K," C:G~u^Xs5T~;Z&#:mmcwU:rY*cbQ,sH!W*""Ep16eUlEԘ^ǁv3ERIg0}an/<H=)e4MFaD,n!_LTv&\?+~$ίSu^$
N5řtg2i+9nvH̫}0* y8*}MeFiԇ%PEWc9:{,e +H>o>Cf#_Yh敘;UnZc#~-F_#g+[ɣB:_(l;cPN q䦁AoAw`\k +ͺߥ(8mߕ6"PZvxp$Ӵ[7hAdA4U?11.ᥓxGVkȫiAv2d/aKs;tڢ߶@}4.OԒ+f? +RNK9<&)c
6zdSKrN\/7鳒ǖ_Vq?&/< +MLTҘD[Uگ(-M'Yly/J9SA:m6ejj,a vЕ7ª8P(:)A<.[6j\KJc4"y*A*xmuK$ϗ:?DE8cJA<̧+L5%ם"RIc@bWXQ5_endstream endobj 4893 0 obj << /Type /Page @@ -18000,30 +17875,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4900 0 obj << -/Length 4366 -/Filter /FlateDecode ->> -stream -xڥko6/',zޡ@sE{Ms惼wjWIkEz!9{u?u~4Sβ*̿@ -ȭZ~:}Vk̿Mo7{ݟUޛbxݻp&ﯾh
qtcp]_γgh Ǒ~s?v)5:L/ibJ -99'Ja D -C
cǔC<n+X!xpEyE^W -J&vD r!AhH]RL",p:4D"S?I|zAYjV<9p$pvu(HW&1ue5a׃5(HkO?JPi`*A3s]"=gbytk+('c@X6#u1qh
a,hÂǧZ<X\zz!PԲA1:$Mq0'j/ HB?7% ^ΔϤfbŜcAd) -,G$8m -CjY[U8I -p0UEdǮm1|le2ʔ㻗B
TNx`HXs$FYCW"!In=7נUۢ+卜FX -Vh7!kڜ#AkasBBpEMS<lSU;ׇz_' B[L8`jYhB&@2yl/X
".f<JGI|d!ߔҸSqBB4ie:!,lD&6OS75:|`,si7Æ8|sKb.9^Fsˊy:N0Kt-0cGꍞ_4I%A,߭d -c,g_\[|mx -,+wiG-g `OUWWr* -fhgi.H -5N:3W7'UCb͠ŁYH;j'Xo82p To@D*51[2*İ"dEZq3$C<kSɻam#C̘cx40^CmVьs=CA3qtA ;tZImC -c?efܔS{, mf,g -]y -VK2F1AmʩW>Q.!?LSES,edAL끙y[S׆#R9P&z@_)[BTsDtb% -8r(.A iAέXzs! -b[hI>~ۡ{?ŧ88D+Jb.<23XrBU8hboN/( /jENsLs*ѐ_n=U(j`^E@4sUB(8D]-VXM:~c̥KƁ9˧R03̬l@N#XH - 0lS&}6vz>`7O1,U:9lQ<qOuSm+Ya16
W<Yy1"T!}JmaTl.5 -{ewUEԄcW5Kt@^Ye'=pu-yڞKrQ1<Pj,8X%JRgȢ>=A7!8" 5:+շ*j ϞD3{}[>Y,~N>6鳕:WIZL̙vM=U}2>Uo\5*ꎍ^`ȵ/l3OnmǪI6$qy@4_`ΊN0TvK]1ddol~_ː^dVUsP)Wӈ[4ͫ6.!>Uzis|Y ?cVBendstream +/Length 4261 +/Filter /FlateDecode +>> +stream +xڭ[mo6_@WDޡ@sAsѦE{HA^ɻBFZI;R$E
+gt~f|;S,<U?oϮ^'y\4|W?_^4ͼ?x{xo_"~s{ +7|O8vignV%ix:/ϔ|wڏ#-۳Ux,:v~?V~EvAa=eyCcmT%;=l+n\t5Lȑ +[b?=Z`R+78&OR(wȷ=?}?-ϱc'4Z*~5#Fw+e'+JGty\5D&nxfm
<WK=ykt%n x"i%0ƑWKlh'~8t}I膺`+K7,BGqo27OSzzܫqHʞxO1F9a}hysǰꁟŮBVu--<^
"Of/H s6&rց+ +rٕŷ> 4Z30&ZޡoQ}"y8<{tdmHW[)& +~a;52$KY,jν+l{<.<kamQ=Y?X|QvY(+DאJ#Ulx$wGPc~}p[cWtrrvwxyv-RFp-KMVLcO#ӾFYOHh|GWCk-zbtK̊<<ϦqWsh=?oYϏL^;t'Jbvg +3?$T &*D:@&Zo%s_|e վ#GKb$:Ui9qϏ5X<z*6*xOfAbB,2tE&xc``dIl~L\ȞlG'cFAqHzo +{9Bdy(j@A"D+tʰ +#6Ǔύ(`- +c>">fz УQh9ډ.u}o[-9=[VO 4f'KD%۷[I#GL +%ZMK03wj@=nd άmkm
#2"eN5
w<`G0rW@?;z SJEC-49;{¼-(lN.8Xpk$zˏw*w8Hy4/GDn89DӐ'1P ш(N`]nowr[6KϨ$JX܍uY[=̊D:FxM:Lơqm%ڭX1\N!phK1_rֹr\>аa$XtDF +9EԔQ9Zs0#CR@O#3K+o?c|aJ(PWNcBŃhR +ܤ +$g9,G6$
TI(8rV=w}BBĝ2U%ZO4E_7m%=*ps]vdUm*U
ә`z)Aƅ8#ePI62RI$ +C"m[r7.>2{rg*r<EjIPldcDˡSi+T\ێh"Za1w8B#6Lr!&J2>8T Rmo+hmmTBLդʧCS
&>X)~!s%_nz(^\b72{b^vW~\&6Uj :vaDr0TsA
~JJĄަ'+顎jC?G3I]&*α<O1[0GiJ)n`'\s O(2CR\ +H{r۬!)$C(RI*A RY=+ nq[jSlOPZrLI 05A\06k0O&+Ttڭs`D靋fkաDG"l=-zOKc=Iզc4R21/7,wdEZd@"`/R>SɴΒQN{ʳ3;L
(O84b"Lm uu#ƩZWyҵmMs女{Q4 d:
:W,=_66)vz` +>X4CEX1"1ל[?Sݷh43)R̲"yvsz'Q|8A?OUf|Er4ZiSU|YL!sℏG5.`RGXyJ)'gR]Agx$t{&` +^ +q:Bԁ{ +<,OH:keˢ 3'o"E91U?ؙ6>P3H9;D4N /ܼطw,!\^y
s:`@ c]RG; +Yo6=^xIC"5߷3NFU9DXd endobj 4899 0 obj << /Type /Page @@ -18046,26 +17921,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4905 0 obj << -/Length 4346 -/Filter /FlateDecode ->> -stream -xڭ[mo6_K`DR/=mї-z۽na)%W7y#Eɲs@9"3C:/M:Pjw]?AwWP ɝGoS}Gac?&F]߯?_7?)8o,͇87?bow1=6W?\}sr_5U"~rмBo>\umZVq%NEaE8J '&NNI)Pɵ%BA&Y%>x3&F9eEhNX:< se&o>Gtlmn<8t -k%?YE6h.sݬ*ڹɫ|:T_aM.ĕqdWtq:P7CөL<|GF<զ`6q+2T[z&5 rH(CC>q[I˦p M50jlbR+^õXMOsYH9;)ꯟ\8Hmn{LBp7
o(jI`:XnaEJnzRМyDt -z\m|xn -{`zP)4 ;yG+H[lQ.1 gW6bm0|q2Θ[DO\I[joG6Uo2 fbN([Ӵ4ؓX\CP2G'>Qװbj`k'%֯_)
:fk:lbW8
o.XQVÁ(֎rB(OܚxT'a_v#y*4bYۆxQEfdElnFNQɁX%VU tY!y'&$aw[vKS-$5 7),hǎ}}vtZ۶Ŏ7L<Пjkυ:*o/G!;:W3#wۏ -熛Oyn2rA8@}.B6Y{4)MXGD,"*.*'0Jgb!"T:S#'2 -qAz/Sp`)iD. 7k/N%'c+͵nti?lVk
\h-5A\z0*}{DM%"+YLNg<
/$4'<,TF -3fY*XCǞ@OuI_fS\k~Fs -+_$?;
Ol#5fc$X{)ixBq('XQcX7F,ʋq%,>~VԽ|X1䥕'R@1c/F* `QaM;F+@UKGǂb$
6&{̼bJAϸRJSlE
ڊ"1/N8Wqԇ),z]EHbdH)d>b3Ml\qiCA;'qCX/5vn-n F>pXYD{α>llB"NO+g@a -i4MOr˨Mn%%ΉRB1Y.mXrConj=uQj&l%-RI)L(-Xrq`sHt6[[v/Q,Ljπbf YΛKtF{Hdva sNP"9+F
+`kNJ2ezx9؟[ⓜYoMYA~\m<14d]!ϣ̩$Ca -ϡ]#kTVEh){[݉5UIJt 6iJ˴}lބvJPac2zȤvLG;d;A@{GM)yhTr䄌*o܈{<0:tW98A*d -_TmBɣ"dz|,qjTݪeNJ/O0W=u|gX'|[
I)q%-;4NxDI+ֆpC-zż\Ot@G|AI6i#W/'7%
<TƏ| \.{ F"÷ Z\z7(^Yl8s($抐"Mj?ؘuZО=V5شJ,>ib28ZJ9Ք3+e3=q;OFB/X&Љs>
i"A*HOObFx{߆Q)Q<#itdjiNX4s5hIyМoX'y -X~gxYaQ,z@|tJۖ6q(,@jhf7(vzc㽪A]K9dpoBݽQ9rnsɥ{A_Wx6{z Au|5'={)]ۍ`HI_DhN8!*3)\H6(S*UL,;=vJ/dIoMIGs?6`tr(9*wj"c##X)f<LD[Ȟk>N4#9K.f Meo\ -K|/f[UK{j|3C z^Mx9I^0SW3{(a&g_z9g]ʄ2IJ[Ѥ+͖gx0;ܥ1sG|}ɥa:/e嚥kOxx⡾Dpڣ̦/]*Af9Fd:1gFtKPWt -l6n!8 *hZ\aWtm38$M2U,x._vfctN~DĞI1>lC>ǞrExG{zF ʵ#NF:Q|eAD(r@HwK}{)5| $`!
-?qKVˊoo;,M -l=K-2UeO72/, - ϵ<9svq㳹{rg%PvğQxiLIݚ$ B<Us~Sendstream +/Length 4097 +/Filter /FlateDecode +>> +stream +x[[6~_1hK`LѦf"
[c%G﹑lM&twR\sHLAYYv+,Dcw7gOHyyQO_|U^Wiy/~y2^_xV)|~*_?^
.ػ|{7| ,<;C><?ߜ)Z]>9镊C?UYh_iR# +ffKR&w7=!g$r&df˫(7iHC
2ʼÆڎ3ԕت}3NحqP +v'`IUSrdWu}V*Țc()T5f;-&h.&L?ܬlЪsSX@D*ruw(
LDu1&a3l,4ʽ˒Ŋ[OMi.bY-;p6Ȃ{nΌ +hD5iXdtȕKnbybs 'z[HA3^#BH.ƴ_8Ǿd<SrunPUM[9VrͶ.*5--4ZVal+T}ܞf+3cwRzΕ|)G'"IٙT3P2/T{IAE»+0>F8/璄hex[n鮦m=4kS%u_L4EN@O-j0|E +Fg5̢~%:\cye3{گnemajKǵ.d#`>AMdž*~ -e&63i4fɔLiXLQ0-d"֑pir)Je<o5L찋CL +Bzs?M&'a;$r}@*^tsiL2z|,iB q@ijӪY
Tpr*+cmmsէkaR2z+@$'\4xmXNNhbcoUCYSd BBY2Luczkw˕e0D&Y|72>6BOe+owL%²UmGXM{uښd-㪮65SʻxI%}VZuܱm1ΐ*3AylW($S|wQ(=7 +x4or?ÇMh3ekF4EWT3N|B'P5'J(E ,J&4ڸX4*_{ވR~9ϝV2vb?Wz1O/juRO +lPWш6v}(A/>gĠɔvPp`^\^^C.**'r=CXιU6 ^qjK#mo8p/٥kϋ2T{tbp\婟EZ@Rf@1߁kj1=_,DS@+_ƈ211'1ް85`)ƌb +qhO(~(<1_Ki_ln㥄q3LrIZ)#I<g@9FOA g`0푖<x?I©;dhXqCP亷"䭅(B)v:o?kcȒخږwǩw=pEj1N]Gk[4(Q8qFYR~1gv5*Ů +BM +++ṾC*
j6(z?Qٗ)/
hWDbQ6ϫ01ge^FnÐx
GQP1 8p<{h'AK Ԋ8y㶶j)Al~N|Y"iDSH3M(
Afe]qQs8 +#f,<L,?}5im?L$8 iWԁ$pr{M}KJF +FQ';y +hz/JC4h!>k^I?@W8+΄`ƒόT8 )nLP[GR]nkN0 FlFrJ2ڔi؈`^ +A3G|:OU/OFVeX21%a;s6uuB? NJHAX7N4ӆpQZ?Qcg.g~(M}V{qWTpB˺%}U-WX'ڲ/q 9{;kh>^ +TEa|Ԯ%{.H+ayԀ1 at\1"־58*vA80U_>zΑY`SkzO :Q<FԎZucfyhf`RUɥ+d/8<Lsz+3Zx:$68RsMNc:B W2uLы~o/RBhrɢ%G폡YI +>Nd58vS{ +NLXAU_K#ӧj%pp蝧Y3|Yvm(7Fh]zvz4{\2n*f` Gv ivr <osi2o:`؋nt8 +4H#%r1
Ά@Ղq'vCQ\/5&5b };w阜>D;3ݐf@9F[pq^ ]sb+?;34,Njr4`6 +q.sY3*_>37pig'~7#,>endstream endobj 4904 0 obj << /Type /Page @@ -18094,23 +17973,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4912 0 obj << -/Length 4031 +/Length 3638 /Filter /FlateDecode >> stream -x\YoF~ׯ0<$ye9,#67H@Pmp<XlJӆ`@쳪j4R4P:MZ~8L̜>ߜ좟'R&҇g߽/OϾhT͒$x(^<?w -|v4/vjϳߝY@B4;Op<k(*":xu;C5&H*J}# $U¢bu^{4 -?<Yo'Na*p" X7r]}ˆszX.B̛-<4E*,+|
ҙu=465P1ְQtDF%^ɑ[nB3N-^q7<i -yf?S#/azWnWIW,.V&6H9഼ܸ9%T#\ kaP_f+Wk5m{p~2`ӊ]8UU}3/ -(?(o|ۡ8#"a\G'QBHlQ7v6 _b
]|lTvm$b+>5Gб)|cUӂ렪*yO0gP0>7־bVg+*.<')mCSW\<'.j!3-`nGNǚT}9
όW" -XMD3\6K$p3.J|K;3ˬsfQ -WDBHE:/> BG$wBa@(7> -fOY&.;4{pSY{|iZM8>*;
~ t^-vi֬Wc_.dM"
h4L} -cba;;@j.5w9 5 '3ڨ z'3:Ua'Sg>iE)I|̖.U'4*L ,]GC:p*~@kzB>,*-w>D8I(ىI}LgXxGYt:9s -8 9sΏ\`ηŪQzK JZH778t=j_AfW.Q5a=D#k!l~˟JiWT$i[;uk"RVoĔ#G<Cc\$gGH -b|OsRz"JRDn$wTPc--Y}ܡs]JĜ@MM=_6[5
hek頜K=uP`_34`1ƚ4v5PՂWu+ڴTN2TddE!+XE4uFigx.TM3(v~d7MS3}jf|=2'M:X`> ;-f[Q^Bfn.* ݞX<qH!a+΅,Ԗ9tc X#l%vDYֿI|!-[e!%ȗ^Xe7[O˴ TwAt':a4ѡ -k/
i<[a,AݼO#N^AN'&~v|rW\A;dq}؟X$j߭$6kRN]劵vr+A쬸#V8k4WRɝs]y,VIyCmѴ>٢~uU-]bIw*&݄+J&zBE+
} --;{'G_cEendstream +xko8{~/@q2P$Q]lm;Vl5'@~K4e+IEP &Cr8#8صUg4\pF6}}zB:v$sB9fz}tr/Rrc{<z۱k=~u6 T9t<q㟾g|ywr3ce8}sAķP!
~̀7xcI2Z_I8x{O= +#5҉AA9vzn0Y +גUjV3xfm+ +j9ÇZ@9u#]uk3.r?0k-TjD\Y6жPΤDҀ.. +58*#f<cD[/˭,pٙ +T',n,IH(n*+Yh,12djk[.My0\}0> +V9 lLӶyFh5(5y9VqZ/ӱBTh7Wz4ʀoiTߺ^VrcX)JAVA3y@0V/;,/*X/QqY
)I;TۚZތuE3W<kD y)Du&t)XJO<FVaķrDTC7Bډ+T9E>͛dU&imeؖE"zuZ-KSuESbrQFQCgQ!eKy0v(mp̴-Hr9@Vlah|5g0}VkU7, + zf4ǪI~wb9A5Ϙ-K>[
(RNyWVZt}PaK8Ү.~oFzϵ#t1 |*GyvuHCh!Hl(Y|4f`H~I?9YZPt4I8A =6#'suX![BMp}dzH}ǵߗg:Fڴ
[MpS~-csCפqB(,! eM$4-R>*L'>^k cZloϙK 7`v5nxl\`dvBpP @/N^Ƽf&'Rw$MmBp'+tY/R35b8 >l79#V1]߅S? +Hh`v?hFŤg|b%zQ*Dؾ%G:Q}]_,̶WOCH3KDO^U~lk}N.cX;dTTIAWwj 4-fU@Ha_R +aZ$Dl#`HRO;[SkG0x@ey + z:z_Z
IEK^ϷgݜuƏ4-cLm(뀯.BI(oBMʉ)2+)i!QL1ۡ>i[:Y +'pV噫'P9{l>ض{QIOIX9ij' +)ҩՅV#HEpt:g7dVtnr;>Z4\*kPbwAP-s~Egź?$2 +'Iɮ endobj 4911 0 obj << /Type /Page @@ -18136,23 +18016,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4918 0 obj << -/Length 3757 -/Filter /FlateDecode ->> -stream -xڥko{qpbX4&5v}XḮ"u$e?yr)Qr>fwvg=/^e~Epy3]OeEP\ލ$Jͯ~2c/2rݏoows8bzcxÇ".Dzů
ځ'*~}qs/ϩK^5G$$i&
00̒OEDzX,$N;n[n`l -0QAmTz>❤q+K@Y6I:/ /䅓GPh֨hrk^`"A13ҏz+c0(RiU>P -b"!Ĉ<(Uysv|Bp4HZ~z -7Ҳؾ{(p#T5"FE0$<Va3c2Q[D}Vz%*F -,u#@\P데G
;x
UZsnNCNhCͰ+Pےu_ımx؟b#\2D@.3讜Tb"AL~^9p(B"az.?&r? 1Ifk9rAC[oFחY -F45*] -OAcAs|!㛄1).7MӤek[t["`rIQUG3Tz!Y:v' ww:NuLI&K$S`W@gH&@/BCC|$s]XN
!%v0x݇ -P'i~<MG34hz!Y:MlHߓ/C*jC \܌tgũxμ}P-=d=3z0a0#ЙB0fwɇ?,yĀsdn\4)6Jǩ$Eq`a?~5eaJN]ƹ]W6Vh;Ɉ_dQG;rUFה!(7B)#כ}l^Tz]Q<' -$IdN9g0_P -3\ځMX=]䷔LPn
*D,:*l,MhqQ -+JR78͝6* -AI RR2Չ8 - +/Length 3622 +/Filter /FlateDecode +>> +stream +xk6 +_pAd V^-@E/ +ܗ+M +FP~&8gߤj~m~80,˽?]7?n*}8cnVWi4v`2 +O(+~bWWZ𬙓TQ8\#̑WUЩc'6~
-KD
G=U7Q5>2ʽGU
z5!k: +ZݖP5@Nyqȗv6ܹ)[P`FȏOӝf7VUP(9hXG/xkn?(1xQUPnDxph<r=" +IgrGgFJX;xHuM!<Hc$<FC(kl1$mK O30vŞTz \I +U'y4am\$VWb/{(ȶj7Ds +`$j&3:KAf;f:ū<)]>D^ՌRƱ#Ȝ}S]&؈ӻ9A8Y#2#4جqO{'R 6T<hyle +cOZVIGr1l&~'cBBJ3^ȰFFA ;?QXQtىgb8$aE5:OUQB^a*xEȺLj轠m]\xQ^k֔8OGX$炡$.RhCb?0rI<#aeFb +2ܿbڛ{@ޙQ*"CBMa~ +n("qeXH8x70hVjcHz;,cEpe&*H)ɂFu1DN MI`c +CZpW꒫
}]W63)h;evh"DFTX}F-Sc|ɄUE7o:%0茩.SR.5l%E$'2LrݓGk8+MXMIDLIO(q|u,k-&d+My?b><: 2Ëɝ)'R
IhsyԆ]\b[/\ȤlՕM"'ck˪ڌVNJsЦ(U0p64LCGsA2*n6e5kZF6)ԍ;-㞔5aE2{0]ͳM;J$\e)§B%"LFQMWjCqZ.W
5qTFÄ|ijڻEza ;%
%-&)N㔣&Йր]M
Qٵ3c^Iy߽nizk)(N"Da +|aN+]̞~'JVkN 1S3)yf<4U=0g,iHp#Ex622Rߙ X2}gxY-i +ɐy#kW\ITes R"|0Ho +XD w-1&46S;% +t4#?ٲ;8rKtKfajendstream endobj 4917 0 obj << /Type /Page @@ -18175,35 +18059,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4923 0 obj << -/Length 4132 -/Filter /FlateDecode ->> -stream -xڥks6/s7n*$W:I[wf~%f+*IHP7X -9ٯ+WyvaxsHV>9s"A2?!
آAF -48Desmz2o'*bSbw_y']~ -b;G)7k[U'55%7:+
ĽpiDe"讠m`Emx
;mZ%e=G -MA7`H2#MK7x&X|٬O -}"<#a:⊀-;˚[=#B3H4^ZN=8X,_rtٚe3I`#3Ą.asZ*rn
M~s(QdAD>I
g=V(@/Qp墮:"DGNqi'4v]B|FI++ǍnW.Mv"q`;סQA -|8D4dPXmC@yj0Y8>q AaB*5KZq_ct` Ҷdx߈DMơ=iA^Q|i( -]h*5D
mq -Wm5
$3懮<,DFƎ^-&&'놴<'oAzdAZ~'䩘FE1fP!*ɢ*slSTFl"ǜ(my_}Gp}C -yK!;
lba<ڮD%,4:N+{oz*%j_XPFZ{ou(Ƞovig=Xo=P+P=(F <v0P uO' -Yρ7%c0H_"!ŎQ
X[JF u\=V`b"F ǨD;e -ՎKXЖl%y
J -?qse\1sdC!xuUC̗LrE./+VR0ը)4c3U"Hrjc -`< -NCYp7uܗhg -nM'=&εH6-a;z/r( .ZOՋH|J|[Lp. L8,RiT*(&b෨M1ч~>*{5Jְ 2g/9I*`E$d
-#\1uPQ.Vgx2r \`k^wB|0#DQBh& -Ie{Lȃ}'}«T0ğw|A4D~anݽ`;8\%bO|ݶYK-|[&ԥ2F{ w+zܚm'#6{IGII@,u(7༇`q2wp; %xED|QxWuWA(y[+c\oj,oa_yk["ry-XaY6V?!e'W: -Z`NІs]
k#`mE+7(}=dXیilq)p P9|3=;Q,F -ݔZu
ɿxD#u:r|( I!/ !PŔL>Rf)ұYQyT"5%#-h8 -UkTpl:4Sl -i-5/Iċ߭_bE -6.d<%Eb
hXY_1 -VVu -o5endstream +/Length 3955 +/Filter /FlateDecode +>> +stream +xZ[o6~ϯvQyQ+Hݦ(̴M1,AX[Yr%9_F]l:}؇-ICIz*UIr]x0/3KzQCWEK/4eٹz|q6WJ9~q87ofsw{sǏܾ㜟86KrD\:RH?]n/<W=O݅j%?UxL_[uA
I#ze%Ϛlcw78#.Sgh~6bnVз)TWmsn8-ﺢ23^FX&f>kA;bIȹodJtY璔ϼR,N܅H{K\}ƌ +8^Ӣ{ D1[:UYvjUTW/VnNJy(mB63MEv"EK綪Ǭ+ +EN"b;H+ EιYb7Nh
|7du
kP=ЄiRX0+$6V#~u4Z,YFaJt{SO˺,rC:!krv5*g*W0ieHvwY3' ȗ{<mywm2ib"r=Ii#e G/Lp؏'[Фȩ|EᎧm^qk/nqD-@蠡z r8ee` +X8TM'ȬrDZD$uO7"E٨3a±D5UEK]Ěs(<meFۗ9!L#jZfQ]9nH}w7ma*jz8[˚o#Cڃh`G46h
?,d!klk!7pG*81G|D\@*h&L6*)ᾧ46-DY +l55Q}Oαヨ NS҂xVe8 .9Q5vE~mC*XlPAs5Xʟ|]|@n 3h(L塇%KJc7`yU!8!8xաx(5m8AĂqUu6 Xc49 o
=qЗWir*<(Qf!N}ASzʄ.h9 +{ =c!IHqb!{iu1.=
Ĺ!va@MB[MŞJ]<-x'@/=3a\WC 1|,G:)(ri`ypy*q2:mScVkQ#_P6UȈrY;LT5(OwQ;CYR}k4ɉMvqAisQZKNMw۬, +!AF9Cxo&:" ++}V9.1~fMSY*Z*sX0W2Mj.VKE#XtaU˭lK4N^=*xHq4+D@!_#MN!# +5RwͿ#{^lEhrscϑ]tbK(V}y7 d=_ZsCL@s2,#2aeh&Yw5xꈏO[|G4 Wi,߇p`젪mIX@7T%-aƟE5vo%(:s% +'qǷy\>ٗtI+`Eb8$$-G`hf +(vTqKF(|rrH7$Pq)qIQ3lK-Rȿv3QXVMMPBJZWk+$*ٴxP@l)C]J{/%znttϭ\<Ru\_bO|Sli>@"oK] +
]K苆O'G\a}TJJ~σ\o +[2\x<_r};\^Qq +7:<_$)zHB6LٕmqG< \K;E^[d)N;7lV/ +]_˟ޕ̵wsXt'IkQ +I8kM}Ϧg +D)ET5[uJXdൿrjv23p'qI3_>e@گV![^AoЙd :JrW`fY!)F,ְ!F3X5
OysV$/J誉H%<mPCLn@ˑ !Ijnb8N'{BQADSn=H_BP8N
5g, +%fP+3 /Bʚ-,r4eL)0f.)ޱgQ$J]_d5bz?NGw7_ endstream endobj 4922 0 obj << /Type /Page @@ -18245,22 +18122,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4931 0 obj << -/Length 3742 -/Filter /FlateDecode ->> -stream -xڥZmoܸ_*"~Msr{vn>+Vow'i7RJkmD9yyfjZd"͔fb=w0?]s-TA~{ۋ~]0T/Wiy>\*p(.+##ͧ2嗫~˲r\g_E ,<[<B;o`Q~9<ecтAf~SؑR^qADBhZ\8+q a4HQVezw#-ϙġ߃d*lG^ Ͷ~X̫ZwK{}ck zO;$&PȵhؕyŮĆ6
4KzCyw<pC/5Zj$QNj Y -sd<!sV2by~{VGtG*6CrX\S:4Pt2c*|~B&70Gw!Uj|Ydtڨ9xF7<"Awu+6<ԕ7 8 -LPСg&4
k0'@CsC'6[57EYqƈ*`5}da?%Ul%$>rIJԸ-f#KQD8u#;2:@"R1>瞩RbkdPlFB.C2Զ*J - --JيƧnL5Aȍv}тu
ۂ.6c7 - -ĴN?=eqY(RIʆZ āZ(P;}㈄~@Or4NCDPDE8vuW7/ A,rCAP̓p"Zvn],BOiJF1%8berE b:aG>ŚpvbM`-Z5~_{&D
FZjIHI})#! -a7<4.Y<8J8,గjfwy7Vp?zX7Mq.z
{AIoxu9Ghd 2dvL c.et3aGAIf)3NIy|} YGebSVN&X&҄NMMi";LѸă9 -}ok`:$bCs:Md,t;`K - 2~$)7c9cL$ -#!1U{)JK\OVƴ\& hrIHLq-;z[lVj -v(Qrԣ9BJ؏R쥆RRTo -N(m +/Length 3613 +/Filter /FlateDecode +>> +stream +xZm
~ba8-@K8pk\pAީ]m$흯Cr%-hC
9!g݅C" mOq~,6gqG#^J,ۉB`:vꤋ-^_~r&rljuҵn\~]\ͻo4ﯯe[O_|s;X*~Y/O#M"};|}]\"cBfH +bj$A'Έ\XU8.Cת-wB=bR+-i#PX95a%VQpyXzV$F? +!VTK/k_ahe( 톋TiydAދevi +|P+rHl$3-7}:8NoRsV
ԉL1yΙi}lL|j|`5d0c$czf1W|~ky*mkd`+SzOI!R2F:r6pK%~ĪI.uٽl\JW?|f}o_\O\^IQG1 ITfOTG:<m3Zǐjglh7f@h2vNI8dsNYzT7ַ\]kc9uFwcF]Q?4M؈>UN;rڞ `=ߣ0V6\踑^:K +٥,I;3Ȁ>5 %ODc ٓ0QB7W4ʦ$t
4]1ԧHg!@" \֩
mYza@;O2Ɛalf`ì&tgʚy t4Sa/ F6cƒ@HC)LiܟKϰ+68F㑱[UPAPgd+7ΰ9d9;jo;5JԋgzF[0 +>kuy35'Ɯ(y}֞u}TQnVK=kWqCW?Ce-(Kz +IhPxh&GL0;yLXwр` +|s+BZ]ÞIVDpCxq=sޡєG6}ȣݲ
F1RI߱Yq5g4tSl8Kd1\gjV]E[`(No%si2vDHF3#҇]Iа>W1
,Ռ|Z AM I,/=*ue#7vlO,/U:A]3+ƳS!R?.7e{
834焵TZu~b|N ~[xY]=adp%N }GW?%XY[(q"F8 %< t<gg?Wp'74PAL=47OTG}"KY8"K+<=gEDx_JIFHX1˼ϋZ1?zTCP|,[ɸ}Fc44@ܔ# SEs$P p=|2Y"*v[LJX)j33t:APlr +c{D-pcEjd; jf\bqj:]X%xg@LU;)aZ?3H~1Dseǧ )u.7~)usJXyv +nK5H=DXh<VN%;$`C~0^$f ג*cmM/|ddwʐ3:ЊkSlql{fL<Eg]cጳt'Kigx",Ɛ
?91Zijn!u/LK8\A ʟ3DU=cs-nQTh(HfWC.FB ø+CMMfQ4}Hzg\؇o;lžNH^l{(,ǵ4YІ+@J-1@cجIgin@
y?=p:(r%I%RCh;C ġyکԏA"7ĺ@\W?# N:0Fߓu+E81yRNU*!{ICOOI!%Pak2B`b:7:fe| =;8qڙDH>R +!,DV@$Woqʀ<LƐ?0xI8KADre*4pZE%7b֕qSRKBQR|xձ?
0lARbKy=MSS:z!_td~$Ǽl}d<iw@ְ&5ìEM;[\re?/&딫V +QPx×/Lo?@k~+HLwu +Kuџ({ +6.h4XѬ+i)ɘ&]E#ջr`IiD*m5&bxZ]EuW,)Lhz3y|V%\#'ؗٮ p\piOe%g2deB+64PyN_hzc%M00f67;Wz\`Y"6M) ¹{ +j#J(6 X3֧*s팠g ^OPbfx蓩C ]m#Ĵ|&OVUL
WrAnh(P=MOuҵ7VO)DUyӠi8.MュUM +\p8awǷ{kUG0KzNX:D4y^:\(^{ 8|uEj\DZ̐HNǐ4Ÿ}<1zXQ3\]V4K/Sl/ꂯW"_Pp+QIP./NEsvaF+mćkz;Pqw; f¼?.[E&ۯP
7C{in6JYL'W:wGX̤s.έTǢnpuV\Y٢D_=fOd.<LR&vѦCkGi8$,vQUn4*f;Zendstream endobj 4930 0 obj << /Type /Page @@ -18289,22 +18170,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4937 0 obj << -/Length 3292 +/Length 3178 /Filter /FlateDecode >> stream -xڥZ6(PI -h-ziElkm]dq+ɻ~lhpH
3?Όt6Ki:[Fq -BX#n~,,f:o"=_Zk/L"IR/ww/8d"nűy~_"d(_W>5U,=C?C]P~d<WWwW13YTԏR}t&I(><6eM70SxsGnX%~e8}ewHEܼwۦ|lMӲdǼN)M͚kZ6-eULs̛}ъK"sSv"GUS|WwzW֯n~gP:4U}/Ty+TlJw^^xKLᙸ5/ -r8NJǼE vB'{kKm͎ >{]~fAh^@{tn;FqG:{wF<s -FC?C@S,"?7}xȉ -y4 w#xb8Ӝp -ۋω8;(H&+GN[9ZI((\Z1L ;FNB4y 8ۻ&?9c+z_2,
E) -rL)ItJy>Ɯrg%+JI=dR'I^rLgлwP9P:Yg&qml|T3⨿ZZ}PIu0;H**P8U)͆kLu>0.EL8[m₇ht P\e}~r0\VmqcR0[M'(V}=Q403ɗK_OPp^Zft -,c{b$j\1b= tYNcB>Vc!Q4k2<>m`nnwIgcaehatoJ%6)^0r| -{kwyY!.m\Ȅ o4L9jt^zJE1*\ސPb-(n|.0Q#nuĀ -ʡ79C100wVsR1Uٱ
AK 5 (~#(ZYS?s@?©i.YIɥ@1.ԃ(,H`(%=E}I"pgکaSxG&L*8"^Zax%mǣ<=I[ }{3'D* -O⩴q%)c||/{6ǟ|7Cg䜧]?mvsӵUO!87%jyz#rC0{7j@somOl!RW鱼8' B+endstream +xڥZmo8_aTjE(Z`EmR ۊ,捲d+ۢ&5RÙQY +B
J=s[ +l*AT,oT.>H*
Gß_}nMx%&IY;pkb#bչVfR? ~34`|p?A+[nsnHwhwU #gW≩8bѡ.;[Y~G^֭I;RFMQ~'^.bJgw9Nwho%"&=.8poAG3kTN;ō#}#rGdh9SG^?q,Ќк~﵁^6WgFWvCk8Ha s,i4H:inΝ[$9imϸхX2L@-A
tp%~ 3hEFy
NH-KmM4*{+`8ص;6=,zĐWF:9dd)D0!dNJLKΫֲ5ϣ;F$ $snH,DbG) +RKaX%XCgΒ>(X&Dzw^mПR%\p߃U震 {VMlnD|R`cHb?
h{7&iB&V\$~~(ĻQ]\kip=2/},-Z/
?z=3lDbx[#.h@]{GxZ= +挨y[JF9Z7͚Z6Pp/& 7J}mCA6GFi +;2MWo +n)f>VQH? HL|8I +#l{eݝ? +! k)>i:K"2J&ZDHOGgk%#ꭋ;qdQPqyMAU7\!Xc
3
ϐ)VR(zD}-'-j +Ok6 1N1fLU +p +^o${2u-'
N(r|`rM=E3bHף`cǷx4OX4*!ֹ=;g/;vWL~)vS'e8
cQ<ë\ᢙV(ȞQzC~P+XZ+e8gRl-[7Ѷw*H:,aAFj=$}N O$0 +{eyY!m\E)o444k:Pnl=&qCI1*\͐a|B}qVtv|.0i{B^jZ +ΪB TΓtidT]<BOx h|`{Pܒ?PADvȩgv%Tߍǚ}{xyDB|O!~"yK" endobj 4936 0 obj << /Type /Page @@ -18328,17 +18211,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4942 0 obj << -/Length 2940 +/Length 2863 /Filter /FlateDecode >> stream -xڭYoBpF4g?]5Vp)|AAKED"cofvKgv<$t=wuotO;?bb@&N^EKGO7/O'xljsz;חo8S'syt{D;듟fY݅DB ->|F4=s}^Qnh3_\C%{HNA7Lp _sC/`!dN9<[%1sƧ2U,V9^ɬ\ Hmc`\M/l2";^hRU<`=XlEksh~"K@ҘV_|ORN[_;R f+loeӚ5 -^m+ mK㲗@h_ro6UN`$X%VԳ{)s˾͖L?5rRO&j8b`
)ѶJCS``baAsWe -vS1lRE+sE -Wd*L^3Ãp-EB]M%BߡFe0Eʼ[X;#"ԃq -6ցof_,s5nu\vrwaZ=7(
G"~!h]r~G^*85P\_!,BߢMSxC-^ra#s!>5ctiESg6Mx&x`v/X<ջHx@jT7"D9۽,ʜ_rcΦe7њ ]Z۫3 -݇?_KO.dJ!z%-@tT~*vPv5Lυݐ jfؾg0Z2TrCYHhiQ5[E &E{kuSm7l?L}S~`T՟63E܀(7mNCNb͕b6QE|߹bA),+I_ L
CQ"6w#*oAƴ]A+(7G=,:6g:ŅZtA4zԲ߷Xlyj͔wDy,yn&L(K+cRSs7nXeZJ i?1MmsL^*Jb'.ϗ4xf_~Ş8i-lŃwxViD*,/0h 9NZ4E<*+ n`#ˬ|Zi#@=B
#iOV]2 =~zX1卌cy na9T$Z_:t^Q^%endstream +xYYoH~ is88Xd D[D(R!8o}U$uسB죺Kĥ7IBU$N<G%d>q'!IQO^EsM';/o_gMm%Ԏĺxs~=ˋ7 +M]^ͧg]^,y?4Q|q;pH'7ɒ|}:*M&4v/M' TN(=/OOc`"pjӺҞ\'Ie/<rFćUٲ{=o4>b'*kh%[.o~wCONfՒAjm +f ^fXBd_2r@om7eF|̓3=GXc"0Ϛ9L}n$G~IV&iBFPI6;o]UַdKazHM_.*嘥9"i6 +`@Q(hez9̻N<ȺXpit 1K.}SAe'"u!J,X>}ض1U L툻Zd=~3SQ@36:Ȏd]7Y,ĺ30Ŵ?Xo&߄t$VG&bz+ʫg?+!XRYjoѵ~khQڹ徬o֦)zsяW.LXZLƮ8ifU) Kwc#nx;;p5_^+ ++v&%ޱǎ+s?O{^!,5?[ۂ,VغxyiIY7r>m4I%;v"7z>]_CYgUa/3Drmb!F(+c]C^\_ȻLK*q +24߸~-Ix[r|H,ܼ@ +u"[#a*N,E"_hmB%y8nY(`hrXlX +Ly!;HkH4XC.P8tEX~QL=]
X2M&<c,F?_5'Ma$(3Z+Ye5Nb"bA)Ӫ4^[q/3LPW`BI5Ϝ$yY]c~ }4
c\
h
}% f#F!(D=KI0(\~l<^Nʁ0ɿlDGP2L٤qh* +"m-BM%5jQ6 }OMiE``;}~0^8.$vP+P:uJKԄnk*ٶm9DFoMELG +0FO@f^E|k\ryS;R'Hó4y +~9'2q^nVٿ?̞5xuݧ.'zy38=ұa=NFG{=
7ç\##'tT2QK{ž?Eqp)/?;M21L,^v~12ᅳ˵XѓnI8c' +.rhH*Ԉ/6K=OA~9vL,e_ǩrA($ 4ZP4+],|G4"'cu9TEǚyGhC' =ǐbk1MjQP`S<J4MEwpi_K^^tC +_z&#w l9\A/ jiԖ5*z@Iv(k;/_3:%:=IoՍ32c3 g9n`#eްMSyrWD" endobj 4941 0 obj << /Type /Page @@ -18362,25 +18251,31 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4948 0 obj << -/Length 4128 -/Filter /FlateDecode ->> -stream -xڥZmo6_ -TjUPI%AzHA^im5+W:gfHISKCr8|8odxп4OY&OWۓZJq$.O9O/r=qbN/ޓ_.\>ㅹve۳{K4ū˳{Ѓݛ7v'.[nBb -߯V`_=so˪pSKˇێF)Q#S#Ů* ܞEwߠKYs^;5C,Clyk[?0]94 -4_%s?́Wa Âz2C8&KS -f*t/EaOJX20qI"Lm2QQ)z!sԽtnBR%90$| 0n!#ZMMZ2m]ie'C4v^~yaDIM|+dJsdtvlGH$\eh212v&}}#,s/mU{kٍb~pŚӴ|b:m!\10)\7a*]!0H{L\ -w`LȵϮZ6 -(Fwsz(]kd;Ջߥg>'^H'+K }$zJ5?6E|Hױ91hw6^70ٳ~qD٠
͢^%!涃hbSH.0ZU&ӽF.f*XqTá~χmGyǫOFDvEC/#OxXtNSoS<*DτM9䖽+hlQc
zvAvgT2U][) gZWL?DSy<Xʲ!r(9&nJ;h5<0Q $*G B9! "DRHm=|v=r~{X, -\bh8vJ -ԇ(x0: MH= );X({% r -~,Y^t8MA=VCLvոX5o!tL<QpR˪U -k(8 ONNZ$SPG-%S -/C@?'Ae^7SU)OZDnP(5b/ڂ+?P.F -]PpjR4h,c0:ɲ Z -noi1 -eS^g}L@Rk8WK\:8hKAеaV<fCYy)T˪4l\c
M-\VI8YMs&tnf5AvL`h!C/kR;yKE~Z^>%gts +/Length 4012 +/Filter /FlateDecode +>> +stream +xZoܸ_Nb$Pk.E\ރj+W:qofHIq@_A9$=CLqo|;oiYyiϾK_AO]KceW/BW1{\_\ޫ7/0{x^ +8ӯyEh,MvEq;'*2ˬ^Z˰(Y2?A %7q:' +!#J$qcۆq[:|z/Pssf?vheާC=&ХEϳ?13LVO0;\\qݕQ=O
}`m jt`J8ww%zue9&j_ ]Dw +s@4S{1@#^ҋU9#5 +P{&`B#̌/H\{Rt!E~ʧJņD$ùzi&Au]1aBA=H%̮{n0"A'3te(f6۲% 3mx<x=2~]ۓ@xEh۩&v}{'LA+lMwo؝bk'&|bz]Xy5dj`ޯ!a2B""qQfg*Gb̴^K~# +8QXZa`4ZrQ}~E:L/Q5M0Ȃ㔊q;*cXJX><Qf@,M,ICj;Xߴ~k>L}D8Ie?NtJkD!;<asgv;f.ZˮA6mJ<r?)Bݶ:ˢb5SHp_8hp{h./yQT0|WwVz#@{D< +GA`4Wكpơ?>WbWgS97G'<%$|obr^Q1rT#BgnQ(F;_G +F/alj_)ڝO?l!R)z84pfNƺ+݈&0%1mK;%O4d;p҄$)MpIǑuʋ`tmY>-4*:E1Z@ϙ~ޗN +M(~9>m +X4TNJC?51>[FGi:I:ӹſSK&Lf N/͚I
m;]AE)~%pgN^~,rI)}o9ⶁnLF#rJR'l u}/c"֪8(@YJ?۽u|5#G]ޖϐ0D`i梖K`QVƢA#ȟWi#P$bLu45q<!)"պ.5^%즟7^"[N +k0+e}d!̴m]I/ܵn aS++/Cx9eh
;hy~rXN(>hV\p7 +@
N;hhSҡ"L箉w9gc+vgH@eDBL$壔Mۦ#@dvk/1+0eC)/pvd@r.}Z$dmBCSsLK|lk<i;6c,RLfdv*3t0Vo.6atF(#y)8 F璘o;WIZ4\̂ސPei's1W]$UyfԚIlrT3h_81̜EX |2n`d:HNHCPД۫,p䉪k[o@*!#uJN +VǶ$cQ "zAm־C-˝+{[3QYDUz94%!;SGO4uԩ@FH8
KS8B
VkŦPǑK
`Bp-n`ns>{6RFieh*;^͆Fr +$@0bܷZj(7qdD0) ԦAr#i<I̤cfZ{VuRӈQ|q@ϩ^{KFO2쨃 +7Q&E'CR(+ +vZna[df^lUZvJW;vY KX/5^0FdWb-{T&a懙
@+5I+;:([>SLZԭgF=e!o-yp*SӇxq,%`8tePU[ UJ5W~*!\/Q 꾆"œ:ظc#șE%S!f~")p? +qj69LLcSz~|T>ϒWTD1r^eT#m8@u{lNh4|%rnуV"pͼn!Ш{ǁT$2eeh*Bǧp䯛vo=Gʜ;5D4tvR-7h~d
\-gtҷGPB{; +ЅhȡUda[n\h@E-ck9p?KUj+VmJ`?Qr͕$ +,QhԐ}-l7pyC +4V߹y`:-yI5)گ +:2:ɤI&c;J:9J#7kvܨun\|)8Z9||,R?l5On>aYfoW%yv9XBX {]yAR?{4R lė2z<*tDOx1Iؒ+ m65w"ٳ(OEyi2c3"4$} %9RO҃vFR^&Z`ЖkQ^u 76,Z|5Vrlm.)uňj>rGu2-: endobj 4947 0 obj << /Type /Page @@ -18409,30 +18304,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4954 0 obj << -/Length 4108 -/Filter /FlateDecode ->> -stream -xڭZ{>!ma*h-Թ:kDIQBR~cwIJ;;;;R\_\&2Nr.0sC2|{{e/EAzy }{on{=+<y'ދ ?an\xׯgzy{s3>xݭc-,ӯ?KNjWiryρ/{{LV潼xsw7K5%K1"H91I~(&!Mr>S0]WTkC{WM)oZ~Y3%_ -gIo}m@(q@SՉ/{ڣ(Sn=n`Q^k[W˒g2Gn蠯ģ=]Vܵkplۖ HnQL~81pђd:Ɗj
<>`3 ldV$Ը,<zO&gynZ`pUKn(iG9#BGfSR,$iR~:0FHχN9 -.oM -.WzleiX?൸w|B90|sXRo@t,.*O_pe ]-Pq0#3rM{$5dYɝ
!eYp(P`$Ⱦ,-w -Fg/h 4(a -ngED6u<r$P"JHOV$B$Q""\RTsYE:Uj
ȡ4%-:hQb\ -_HmF}94]x كfC٤ǜ(f%[N yO4$$b{>MIh9 LKqf-疲/5V #HE_:aw[#pAS6~Kذ>{VS>7ŠfcY=%b6䒐W24KCeEntŬjQlsgyێ^w3u1-4YXUalý:k5r6'`sB}6h\jpXRɁNe^u$#xb)79K9NKBΧ3P?5Pa(ch7xqĈ ۇ -;8Z8!)4&y
8=aFU芺 ;6X
03 ->qC.#y@0d
[uyŏ-3iPv
%Ko֡{]ҥSg::'ۓ#VaF.mbymY!w'nS욺,j -Ɇ -Lc𥮐q|[HQE(zZ]A2rN:h|cnqFcyߌGc]j0g>sb_T#5-SWzMrQja{8wC+uRYu|AZ -[Cg'-QAM馩9͛۩RaUԨBO]&={FϮ!B̘JLJ>_o_Y_ZW39GFD|)e59r`
CdQ,R.˔<⢭*\3 {oJpY<RF8HԗyNS*@c'%6QR`=Ee-\eg0}pfzп{uǿӗ܇~E{\s+ӵ0ӝKxG_He)ª}H YBa{;5*1kykK6'6tC[FaN$I б;HC0Q4:/95pN";cty gm0T">E`8%<8dVypm̈"BC|D*P|iޅ= -(m> - -('I۹ѵ8s0Y -
*ʪ^(*Iy O( -/M!c0i --]ꭡt]+_mzL)8DxWP*2a 8>~#1ܘ+yojS5(g?!}@f}-/qR6;7&-{ -Z -du%1/.'WYu=1m}b2*W?2/?͚uB
bA Ka+~+
w|o]2_ɂ=A߁FȉX[߇$0kk\֠!Dx +/Length 3974 +/Filter /FlateDecode +>> +stream +xڵZ{o_BH[hr-Xq uT[SFA3ɳ~cw8JvD}7DAlj$9_ς-p&L\A"u.?
u^eH2O^.铟IyWb)?pl[$wx{WQ4?{68_?~&P|3C_мg/f6uΣfv="Sؗq=:uL&F|}ؔvhx/+-l:7-lE(_ +g^5EչERsVuUZuS--?nSBϜVI쵸Xߺ\}-d}j,&mCE#`\XG[vW͝G-Wf*ZbEg(Yx'˃a#/+f0QĊH{ ++S4K.gWZaPUk(iG9ȊR#
AGfSRҚ)@AfgKN՜dva4 +O'M|h6RJOSk2P2+l*Aq6#؍zIδ5W+[J6b*̋p%匸ls~`0}!JS$ aYȑ9qc)X(B
MڨاeYɝPc#;ha_C`x]9~N**;Gybt4` +(
B{ªGX/Č'"rsh3UEtA) )tGݥsWKʌJ87: ]Au}L&R*/,8/Dd"- +wv) +R_TɌUkS3sjcFXl 5o(+td +55Kq֡]5tsǹ::';-V0$^N.8;+舴]LdzrayCSRJY ڦ!fuM4@YDd> +M3?v9RP
i üDc𥮐b,D\XBIj(TWNOcl]4N[,-xk:5durl/g6uIot|8VeI0#oӹc Z㧋r;dӹ\n}2"lOLF.7&`Yֱ-AZ>tWި1Nlj#=ѝ5剌ie;a/RkTx;25S9sVY/Ä*c{<t&U*z& +'(XJW4 +ձt;z`-Ń!XBNmr5ݝB}]b,#`alr{93ՏZF$L6o"oBGG"ыL@*i +E?aJPp].Kw+|
Agw,/K8RC#'^
{!,پwPAٕ`Dј"=O +pkڀsX;:}rKK+e.}^2%bF:B
dq:>7a,2:MR+ +IBD:!^sԘYipb?chz~m H#$L +nzou/X~3z'Poݮi|thƲ{oi5{PwyPpbDۙy"HCSץǀ"~jwآu@eq"őN<)))8Fi{ܯPvNORkH<-|rഴz8yY=u8sJ*0""D&/".+^VAf]JemSd3C_W/eGa SaX>IHҳd`K4ybSuO]C̏ȖzcBI:ȐkL!lr!(A+2(SF63]2~Lc#YQ^f<e;r'Nv9TvZ0̿PXSflܔ41hlr`EO^a}J:J#E v7?#ABu|WtX:{P춙erI*CPH_NlɠɼCBHZ҆"A.%0lGf;PܰvƱ2v`+k+3M5 F.u4Zhj]aJ? /r-XFn ik8Ejd.>mPV']#14"=*.ƴǁEtܡ=SekhZw1X֥r67F,#et]EfbJ,N)#ńL8go)Ak2~2 n%zG$EnC>u)[Anxzws59$#?їJ֜ݏ'ѽaj +B +m{ˢXL)0+_mFܩEGxP)2y4xHLx/:eH0}ymr8Ixm:'i{nfbE>JiztK6y5vV{w}rWÝƥĉ& +um^BǯW.&=2u+~>2 endobj 4953 0 obj << /Type /Page @@ -18473,19 +18366,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4964 0 obj << -/Length 2325 +/Length 2290 /Filter /FlateDecode >> stream -xYoXFZ,ń5߲I:4qU[6*p{c:DU}{^<~`1ppVA0v~;bdHFONxz ;ttUi::^Rn(5niǓp$7Gpo(k:<rڪ -B ?rl';(eZyvtws
ԡBul䄳rLdVoȕ>ڍ6@}B:QI$QlxI(}?L8VuRպ(2\*GH.&;G'uܨi yq -Ō@Jd?WI9o[ҷ*iN8kZx~*ds?Sۛ4-s~
',8PcY&JEs<<qR͓Ro<2Vm'Wnm?}7FڳhA+Sb3i7VP֖'yQ&c˨Ъ,ӊ'q q(+ATednpNx!s<YC~M1g#1B90 -Q
ī)F9ج=8."JwwkJlv(d}.O՚Sps0pW`2iRH847coie\h -L7 -4X3mMHZX>P,6,xJaaRJ4RNڡyj) z98L$և9B9aŻ=W˗L([|1цKf{Zc+!QiJsOtCIT\{JM ެI{ՆaOR@Mg1*nLM!mX+PgΠ?7YLצHDflY_v%zDOMg\848s&Vt(wwW=ܼ}
[CֿpP_sqw@K?d"I^|F!$Hz?8bږ&: -DKyL@U{teOfH| -Ć`EAѾ](-NcM5?]еAje*u--=+hj˗l~ceB -endstream +xko8{~,p23H[.I7&nq/{hbɶPYr%9̓X;!9EZl +~ +ludۑ4@sqӣ7H[v8 eίn#%1~`_
u7>?%mx25
eM]N;"ОB}lb#[0<lՑvp2_-^գHyaH"tr{T>+g˴NfL~\ǵ>ާy\<U<B-xQ#TC!(Ǥdۨ^64$O&SUp._#Dxd|g?D\\_hfǫPΈz1t5|.~ G_xdeG"&$FՏ췎'O=3IR7`;{q2
2} +>(_eT?5'ȳͳofLgezSi]yj+AphQ]?ҞPЇhe)6Ñvk
/t z8Z59˴A\(}:`STedֿnpNx!9nݬ#SY (l +gޞe gyҁ\#!U$HSZƀw$]H*ʷ2"T6Ϫ2Iڢ9͝.Ac a+SZ[olBufgڑ1:Z,Ռ!G8\fTN7W^ +ۢi+5.=vַ-IRmC)6Ͳ4[bfQp896DHb&NGlkߠ')0fJ<ױҼ4Ge\۶DblfTf$e&EUkrrxi\Ej@^U'砳#YD5E٬^rz\5g&ta!Rdח`iBp8T7coi} f] + + +Lм0AQ$Ɯws33.1&r#Ya,O'ZtQىM +X>) + +VᏘʴ5/qf/*
f"iTG +6- +5w'TC"N@}G+|/x8r}\urC:EtWIv@!F_q#}})!&4/LPh~| +Ab,ۈ%嗦tMQؤ8mY~)0\t+ϵ1"`Hf8`{G":֪6'% +1|S6a<[]iХ_I瘺OiR=1wȐ7fAj9SQO +9fO`maxcjU 3H7U@/P&FQ&շk>3#tȰ\E.yK>j{BK2IBĠpBy$uo549s1Kqޓ 6\:^"=KOHjQ}(|s|A t}FM*hGEhw^ZP#Z_ؑ.endstream endobj 4963 0 obj << /Type /Page @@ -18503,27 +18404,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4968 0 obj << -/Length 3219 -/Filter /FlateDecode ->> -stream -xڥZms6_td:N4%/v.I=ZmN$Q%8o )ri2A` -"ۉ1imf?} D+8Qdϡ^{[p.5_Du]-yw|(yuhwmxiuh}.<6y5$*eӐ,t8&r:4 1v%cGᵇr!Iy
aJC_|I,</ӖH嶐C4؈h̾ZU]|)!5m"p[$PDQs<ohNk` -Z/F1ǃw8?"oYhˀ}G3{fW9dm&[tV`g͌$ -M6(&X:2
ݖ3OٶII^M[d-JIJ=ϚVki -؎hZ[ٗ -|?pۚe]$0}FߔG8ƻo6/iZq[P!(IoRDiJZm-0b<zW:M&H
e˜ QKh>7Iԑ}1v>W~D<9PHprpy(p{r Ra7FKfqńE^`mǖn@.ڙGaF]dyvt;=o7:KP>Qo]U -lX9^Ϧ+̿h|Cs -\=BVϝW3~<\dQZUMB$BZa.Uld+|p/Cz6s\-rx͋ӋK{;Be輨!?6/K>:ƛly-3<zvOk|?2쌱&436Fl'U)+3#Κѽ1hjڐB$ -Yni)I!B -٬ffcA,bQNB҅sTCޙJ(MP1#52|-:CiEܾӼ=xtdlP-^8HEJ&@wNN`9E!@@Inκ_qV8g7~(!İm$dpI a\VAF HQO&9N4y4gx6rvȦ\Rr(\Pb,DU"Ci8M3wb
BZAIGI1wwv Xnbَ[c HtO+zEagR]dCئpܜ-|h!$הm}*CqB N=ǐccR$IQ77CP%WuI9$ 5 R0] -Iނn/ -tA7jRjA?DZl}{&Rad?lOdDE) -afWAR7 -ME>q9Caqxv\3H*s%TY5HBfhzzkbs{˭Vr?zį[xbLak6^\gRO*bCRD͛[` 7245o4/4k^MIv($GHs=R#+1B?ZRcQl0bfhP:·$)f}^;2N[õF`1ST\hg&[\eӜ@3p˜8 ; 1sQn -uQ<UnN]v~87a cƑLzv7mđ{[@ijL؆Hm$.a)X,`TBTj_&2|4Q_ H >b$R}Fm=t &E+v}k"o7:&0heN IFzGD~J[ЙFdJ` ĆtoE؟Kf7@,%0G-GG,0])MdL Ї2Y7ɖ=pc#ƄEH;&DUDv
r儌\fJ7&^κzXm!DT-$*d3_94D[tgʁ35Eì&H3MXr:◼% -@_I3fDWy!\1,tdi˒XB=RF]FirSb -\A9 WwW#y. U862zq&x;30v\ u.l;@`'4%Ba Batl&k̦tp,>&(cvL$SsĭPJx7yv4y|gA5݃ɹ?fh@!n栂Z;9#vN{lfsL;9=oޔKkuYnyxcc L:KV%6!+^(Bx`7Φ`endstream +/Length 3141 +/Filter /FlateDecode +>> +stream +xZmsH_*r +RV 쒽r89Ԗb) +[2Lݟ~Iv~9(LOkξ
W(ڟ9);qwl
\/^]HaY/O#ǚ<:):w'gcsy~Fk].~{uS^}S{rhh[9q|W+˽?Z)<
؉U!**V)P +!Tp(4(be\@6kbBYdLWbלj~RHˑXǚ^#]ְ9k[U^4?]"ufjiӇ* +?pr#ܡkFHq @;gX +# + 'Wf49r-@m<7 ŗyAPdk"{:81;Ӹ5x]a~`Gϖ˧<ywXE)r=
+0+;7%O$hl_ujdY:iH/&x!$]3Zȣl[Ǒh\GVgȺIb$ˤnu
Z-K7w³}!=Y"&QFAoښ-sZTPKn䚐<QHANoF_KpMBUfQSR̈[T*ػIyђ4'n7"z?3C j@w_/^BG^uYX!s@5t68FĹb"{$k)+&,Ik[
ync)eCVe|81r\'_'olmAu"R&CLz}|G8p!SaN64D/nY&6'\}(VI9<*=J9h¿e7;EFˆUVˢ ΧH=*O`n|qJW|uͫ+;}mrdjUwm˫OΘx<`}/n3sДG/}4wl@7cgDJW:h8YFCIMi((Kty +''y_6x4dlP/$iqĪld=ar`[A'uE%f@D@Iaƻ]~w4"9C"}=&M +IQ\ٮ-B|ˬ- +]n͔$x".4tk$Jt).Z$m\PvX,pa+cR7+͠*ڱK6Vsm.]'VH^OW>BxB1T|ĉ4H"ᜇiW7sxTt"Of[)]#~MaGEVG|9J$z;]|Y0H؍hCft/^eI3<Z5`To7v[1?/GK!ndtӋ;
o42˜HBڗ
Rp#\@nFdzOO(B܍cY]mʨ%[U2[YRJ''$C7NvH;=?h +I;WQdzH#/z-ըLl)Fh>yl-DT?94Vr\SmM!\UL&TCA +r^YXH
%>-VNRj eztc4Zhhs3iLmӇ}zPC]_v= endobj 4967 0 obj << /Type /Page @@ -18552,20 +18449,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4974 0 obj << -/Length 2224 +/Length 2208 /Filter /FlateDecode >> stream -xY[OH~Wd{gՎ)+ff#1
:3C@:emRsΥ. pWSA0.z> +1"̏Og!ۧq\]5·GGJ)Gl8pv4 -g|s _O/&ÑpN/><\]^}@9O{'
fB"?AL`
et/ -9g[=85[UɐWؿӬ/τ
2TgN[.vn#jj/uWd#KoA+$X` -]ϻbDo`.b
ZkZ
?S0bi=o6mg~S2`=r^V8"GѤ(-]DyRl`[DBP瑮Kvm"OA
tܙg5)v)uN^Viˊ4b#C+ h`IIKJRp¹<fvS[l[ANe$/I+-m5W(CK{9B%T~'Q\wbHfʼ0t4bcw_lێ-7 -1RTZiۼ11\3@2%^yfA+\0MeT5ۘ:p^%ZK[2o;2Ȅ4M2U΅AiaF)ZyV6@fUt|jce<!ڡ
OrJ;l+[BVsb -&%Fta'Ɛ*셗KCO-(yQ@D|%Ӑ/,~T+FhqQ;Ͻـ$Lh0j&yOW35YU\ewrђ1\lXk<aiEzׁUxHf -+9Ǝ\(c6Y{50zM2br2InL
!u -mȈ,ko]`VAaaSW·+YQ~)c!ֽ -nfh:QSo%1`GfqSni3e -#pRp9:my^N`$7G#|_)G<cj;G1~]?CZPvЋ;>on?dHqHت( +xYnH}Wh}cE<q.= H[D$RCQVj2Ek Ā1!*DV0e`8yw hM]?N=<L$~|1yp +eQPKP|2ɣ7*?O~:x3ق0L<Rg*
9q<XPP+_~iPШKGZhfgdv\Q(}.b1KQkgʠ[K߅h''X"ݫuT
{bG阋W+
>T>KK'9 +Y$=If)ȋ:iW@0NWdUo0b*?xJ.&oE?YuG*[-b;rAo;Nс\$yˋ3<~ȿ8nէq%,J>w/n7r>vOÃo`Kڄ3pj{@:Eܥ//^]FHf5ʲqxOKDZiz}Ѷ'6`}ƻv.QGE +9g9ۊ:naU2f!ﳳaǮJ|iReupoGcDhCpm#Њh'>VưE>X8@ۊ߆˭P?n}ᶢ +>O17zwY<Ds| ߃#%y&={cǽ=Bh'GV`.U"]qVlߺB&bFE^$7
\$3̪XuU- +-
*)4T-fՊ0ۚqwc|U-M!8掮K%%(|.2Pq
)v)cØrU\4"u2d
f+"<[%+ u"8av)-!6 pOe$/OIj+zP.Z5\9j.KiQ|A +Q"U6uS k.#{-@B-Ѥ
[uE@& +Jiʜ2!ӻCZªD/08l_(Ҵ)#D'08^Qϐ +e{04ݏv^b*ԭV\]SȜPBb#87'/t=2ʈHlol%xb,4_(x=˦_ +Y3rSuYnS<n{7I!k}Ĭjb&CQ[]QpWJ╴[e6q7jnBf%'F%#W69M$X5>܁J-GM]{!0G#kʂ%e{;p=0 O<Tvl_{2OӁʹ76O$ipa|iyi8 [aa4HGRxy~[GX2L3nJ3zԑF{ΔUY(8=IV. +>m1LMl:UmR>ݚ$BO+9&\2wU#Ţbi?Ԫn{ " +ÔP|endstream endobj 4973 0 obj << /Type /Page @@ -18588,18 +18487,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4979 0 obj << -/Length 2180 +/Length 2161 /Filter /FlateDecode >> stream -xioFT!s8i&6EbB*IY}oސ(=bͻg>`22#6[qd~kO
8sC[<UZGlp,txǾ8/N/ܹ8{9}[ʙ|80/73~tjB鷣 :b}{LZI;ώ.ݢ=5STe@@_3W3e&oCƉ{$ La}a4s.pa]`-09D4IT6zGCJr@~:qTw -$}y_es@L UJxҗO.ߣ4㗏t<KtHy;CgϮ_䆨aG.!J
#IB#X|h\\ӷJX$J4Y&,CkB"r]I^xɢ.'.\LߝL//g8[i^)x8GHPp@vYǛI븈jӈ~WmYx1JNTHY4,KR+:d5᙮JOHGĹ<$goGlPL,ϣEDN_j/mWL0? F/XIד!}^Cq%ܵPqR`rʄVvnp'.S -]vc'Ϫ,P~?-1QJ/ڪl4pX(2w$uXN\zmZsWQL0%kZ2Vx(o6Sҳ'()F0
H5Ee^[S -iYndI,[K(DQoC|1J=mbiҸX&4Buc<m֗Vv!KxynjuGelD6ueQ&T- :ds-VdgAㆉd|AK&DP\ަ"2`~--uMedGRHfˏn`wɤҎCJKZ8?3JȐ;*h*YDV<DJ& VL!JY6CU-6CI҄NhqaxVhf߆=RՂ(m͔/c]&zwxM3%,ff@*BWb!Bȶ5iQHZpkNDɉݠ*xI~pOg~[7mXZ*ԫB\-~0""qinH*|+Ӂ1 \DO5/XT_9E; -Y,0RsuM -gFQ[ft
.dci?pܕ,i*OѮpj"NLu(.Ih7q%J~y[q\($d:1\{fSo';~ue)"qzQܸF| gmQTJ[>LjTDC*fxƅjPnʹ^t7\x4aH$C^3״e[oR4R_5uc>\]}c2KRjo+L4r@G*< -VmugA[rtXQgkW;b[z,k)i7.[-Jc29ʺ8n-cKnpdDƽ씮0ؖ\ML)p_Ezf/q.,{:f"bc=;}}g6rlh7r*BO&ӤG#}K8~akzڑa=q:^_q4Sݨl?{۞u{7βQGף4ݯc"QkxD^ _,{=VɟsW]ᡢ?$7:(2<|sBb.;-gk -endstream +xkoFT!"pd;i&.EbB*IYYR11;\&A+,v~<
|NG?Հ37d`~c@t6n8R:\qhrȝR/1w/~$x~|iyr/ߎ>|b鈹2ԃ
ppw<zJyvty: XqjƒZVdu߅|
93x| 1r쾍풢&'x!cG9r:8PqƟN:ǾY oNrӗG ,UWΘ#?Jew)gXP|~J%188d+}Orof}xٵk5vB+Ujr;$bqqC*ob+$`>J:KqCL.,&8-E]4M-\*9}{2^.q*Ӽ~RG8G%(l8V ǬO~:."4$/'/gudJ*Z:Qݧ#-f OtJIl,fЗMb/ׄg*-F>aD?"!q8=_8.ɆŤfZ<fge +w6;ۋ~/P{m7fb"ԄxH0:E
鋢N*S/fBS&t?;qPhM0W%^
QILzi9C _&%Bj}
0Ώ`UY\T~$7%;b,)֕ڪl4pX(2w$uXN\zmQsQL0%kZ72Vx(o6Sҳ'(#jdM{Q٠,@ +}3n_u
"|GmMl +^_cm<p֍} +=u&j/WK̦Ȭo~+7jGJq1PT/ 2Wv!;ЅDysV?pX`ؤ溎˛<Ό83p!\.ljWf ?,% l6R7Wbdv
Wkk-o19>BT'歂+x3l6pg endobj 4978 0 obj << /Type /Page @@ -18622,17 +18518,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4985 0 obj << -/Length 2244 +/Length 2204 /Filter /FlateDecode >> stream -xڽYmSHίUx2z!=ljKHk%,C_#Y6rI4ӯOq/za\E La/5':<'{o|E<MrF&'x8|?PJy"dAp`xKI y.Fs\ʛ?O~0ij ߽Oy/LEaƜ XQh泽ZQ{kW - (Ӊ~gkó1f4cgi:D߫~@GA#dȀq %?0xU~یQ4^$[.V=QbYdzY2Ht-6L7Њ*ZW5<\xŵWOs,qb!:[4KS -<AIõ0{O$++MZ)A@_kGb>GHXͽòxUO%8ظv!qY6[^|߸,|R\Ddk,iBoCՒhw@yH YQ]3&xmD2`*?{P2 -o$*VL+g
Y%`PFk<N.۶)3/b[#+iθ]/>G;7@o"߬ʊ1l~u9lm$@"&f%^RZlbŊ+WK[Ww`h=婃7ϯ}QiM7ɺ$`ͺf&%KE(4>(/+Z%tX[RVdiu^suR̛1^fDpK' -, -M%o_mQfS}6'#cV/:!x!toeBI6>P0vxz -z֣H6PeV՚-) *&o[gzt#<EC2jFGIPf:pMԀ'5m~ +xڽYmo8_Cef*Q)4쥉o`-ؒOfp(%nP\kQ!g
*EV0em/-t <iCK?Nޜ'8yܛ8I18:&R?"}ώ縤L9"8j4ĵUiɆ tІ|{g*s&7?F1КѮ=̊7PY;٘3f~{,"u~NGEz"i{1fQ]M^F.1Uj6{$JQ.d63ߜM+
VG*rZ7
8ȃxuL,qbGMhr"g
sNPg^yr8?qw| dއMƪlH[h_:B +AEõ0H4+mZ)A@_[Orb>ǟÑU!sq@IyMB +]_]ޏ'W{1u]yLn.i6pͱCڒ=q̤܆u`Ȩ+{,jtES\z(vڗ1ՙm[M%?m!oYK4+nŠf_Pz]c +YF5o]ZE`]!i$%urUp7t,j83>$t
pW>H&):heĕuPKn],UX}FSe+&ajT8RUpKii.!.^B hw?!?}_ ,عR += fUzvК$R#[e.wHo{Qqq[|bk6F0/bE(V8!JߏƆDy4j_,Yybxy-q@ƛ}~7zNGz_a/ft|y%![pi֚L]&^J
HxV
yEʄ_laA>%e)K:oմ~_$4l6_LdWSsiZ$mplT]mRD .^^O8ÿ!TO~E_ޟl[* +;h`PR@
|)H&mKu"*ګ/+$}c#m]"_u|+萩Po/,hWendstream endobj 4984 0 obj << /Type /Page @@ -18655,28 +18550,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4990 0 obj << -/Length 3884 -/Filter /FlateDecode ->> -stream -xZYoF~0 -,M6/,<G2ۘ $&,Iٞ?uu)bqg0>:::b?4S~eApx=(ܡy{upmUA~xu3:Vy>^\}y6S?ir˳w?`.li/.~¾YyWW|۲rӟ}W?ʳ'(lʏu$?Tܧy(,A;<PaIzƁeX.*ct6Ux*O -Z4/љphH]U -J}$tL03{=l2IS
,oQ oirp/fQ}K
2xpQY:HfTgJk-ª`s]5t2Tz!.tO+ -D -4Y}eʼ%ѕ'&l2zum_Ew-`Xz5aIxEF -45.>5G +UՈJ&%I W)^)m HF}) %~niYV+^Bvr7WVkh<L_pĻGe;T4J
8Bߚ%ܳ0q#E`^h'e}ض!"
oK/ژdW;Vi7f~ꑯ$MLlc;i_E/$AGݠ|4pSae PkVid`zd Ŭ44$Ѕ75\aO@)&$+^&DC央't-<R *JTuUb @ -lQWg_Yc֔@{edAr4`1q|pusrc_kgs38(<QK7`̦)&dx}5ɕXVHǚ=8{Wi$yNWdoeZ3Cm_,U5DzOY\l)]32vR5r'/SSћ5%1dg<Hu㵶R /brlho&颾8p+Y0;\
6\] -N (N,j氂m_橋nABrFY\Zn,rra>b-@Jˣ9}-7bx4[(tDri_':X -:V!Q#k_V\u(_@W(r׳P( -Alр2D.>: c{nřԺ]].<g:XhD=9 9c?t`sQX8\h[@\ņлalXl8v0q kx7˴u삷sdaHUGc@0 &5;lYX|8VwB3L]@uǷMQTHsOQqb@e>М9f퍓DzaVdęe7LWP'"w/RT9.+
˂29g,Fm(KMNteяօ> l,3e],F**ÖCHAغh%IH3N
ev88b1lӭ66b0Q{IYbX|oƌ6
t( -~{ͥ -@-(34JX4!y3I%xNrDz~dW]lN-F;<&L'^pвl;E+EtdBR[q.(an,хq}afdώ%v<\̺`.:MbHyNp˗p&-?կ́e)42_[M0bSYlHk/\!ӷyqd؈dHaSX$І&Q(@Yx`,ڪ0N,OW$v([iJ01O܅S7!klE)44uHfJ{_=?WnSYkYm0SVA/T$foGZFKm 0MkӠ~Zbo(8?!{n1 -+䶵}u)%mI+)3)!+1 -5x#L>R9倭3I0Dᖩ -J',ZJQ$sR֚_iU[o_u/1"78:#?hQAZ8<kC(O=`)ϝ*roII"gcRZa%r -* X،%QM~qʍ/oX|gfMP"僑iN7p&I'lTyd:@ʊ3Qw9wu$ᯝH>O]!YA1oo_<}5}B)!KP -:(ք8lt/5_m&c2endstream +/Length 3781 +/Filter /FlateDecode +>> +stream +xZYoF~0L&_#k0 A@IMX"緮n$ ؼ10ꮾ8?u~i(ˎZ;R#8~jvtmUA~<.w׳?MQy*'4ͼ/n&ʻ|}w
՟.f.6"o64T:p)8^6? +(ώ*ϏG:XGR_mGt3O2m#G~&P~_p"w1*<i +n!X#݆ +:4^ieeXXeRb3n/ٮL0Pe\{2|h !@ӚIy[PB2$=@{1;U)P|r<UX+ㆋ4 +Y7e5.>5;D%*ȇjJdž#I+ WA{/e?bemߢ3Gu璗ݸgSzíL$wx!qd_c{ +,OeO+N#d^T#/Dx +ДoPGix[|Dc.1G~Բď +c^Mf#zQ.rsS
ll`FAڃ,JբMhF;ndejK"RӚdckYX'!\sϖ)r(&_HQkmNKY8gh[ܩo
Ŷqj5% +Ą1 +N}s'5sXty.#/Ъ\rQV,8ˆQKNn-27C%,iy70'e"FkJ-hBv\cY +bɕM# +8-yP s˿nc[+;KwڀL!"=ask㠗lE^"F5@gFhN&1Ar_-q$I)g1t#x^C-m7?c +^F\YzF<VR+ITFhRkJJ GͅX
#႐;iR䞳l7F@%ԡb˗B*@ +'<f +i֜4,R0eYq h\80Ĥ) +WS<h<vlk &INz`M9K>ql83tdEv87>_SETJK<*i_4ӔpVT +NDCtľҊC'm)doF6t߬6LƶoM/W:>䣨I.[VjʭQSf_ha :KI(~WzuI& ?Br~Mu|_-a$8')>-$ ~L(_D_F3L Aya;yuPG~t/yVdyiIP;7MMS,l,(F?aS_˧,~*6SYS/wD{Ij%M5*OMh`SY1^JȎN%t uw+
ٵ ~VdCȵ{N?`?%T?+i1rS>/ʿJQ75/t%0endstream endobj 4989 0 obj << /Type /Page @@ -18705,16 +18599,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4996 0 obj << -/Length 1970 +/Length 1948 /Filter /FlateDecode >> stream -xڵXOH"]S=O -I4w<&(1,G;8³.[4{3o:: -V(J&0%pt͘_uκ4*뒪Y*,cYzpgԃ-`R
5T^}QԺwQM.4cgYN -}#-VGh: rt-,H".!&Хa+ײN,.bUF2PX3"D1P%HAKgX0>`mHzbKm -P|t" IUuMg]ҔHjNGEE;کV2DqY8z 9'
F;МvΡ*h)%* z?M}-44{\"++I6I],'|FRi;N~@BU<c4E{9'uq=}?Ǣ"tmH'$f3&-L"6A -X<~>X`TY_?jJu4w/QZvWDHN6W tlΟ, +xڵXOH"nSY'~ +]ʲ$ZUebCvj;?8[̼7c}~ewK|?M{f +(zR00]I{oݗ̠?-蓱{:y{6)|cxw<hIq +ӳp$w}%PO_~bB~ƦAO{c+=ƽ.L|Cӑ +$(o7*+Ct8r, +(*cEM3T; +erL*غFњʫC-E]-D 4XhL|e9WRWl$R%*,1i:_)nKCB!Z#R ^dQ#|͇qJmظD2`g20P +е1yB<ы{%g()j*/>*;1k<.@;/EU-W(Gm+ot/: rt-,H".pC1LlbM!N,S}؛yp7E:QTI9҂pCP@*X➧(x5\C(ہvP,M&mMk
/ + l5k,!-iO5Jʮ~ڋsƔ`Mŕ,n[J@qom"!w*Yt0M&o|UTJ2.S&HXI)U^OGyBbSbz.9TUe>uDϙ)c FuKצGpd0 ߑT:(ӼS>Kz1y07`E{9'o5K?ǂG)lƒ${Fܭ
<VGE5}n7aU<o!-N*M-6v?_I/ך2ֹ! iNFl tl, endobj 4995 0 obj << /Type /Page @@ -18737,27 +18634,31 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5001 0 obj << -/Length 3811 -/Filter /FlateDecode ->> -stream -xڥZoFB0D]r'ikR_^QigTIʎkEA}ggIz*ʼn$-7'l=ߜBňɛzv'tuf/gJ)O"\]}]ڹꗋ\|o(zN>\[B<~˿Yw*MfP\7'j%v*35%DnC! -S7Layipɐ"ұОL7
C<ߏ(
f1܀\{xT<J79}滞NS42m`5
p:c]&&fdF~gq -OC鰭EȹCm®X;?4;Rg\ -^Ck:
SE6WV<xO(B4$d7!L[rý$hDY,
5Q`[1m,Gi|uٽ<w눮07(n˼LA} -:.v!Ti<[X$8I(a]tĠZ$I0ah@)a@Esg<u-.PDGEtmKXl?V0zwA_-i# Ґ3R s'wT-`n`C><C1}ÀxR~ʒvܺ]&kd U _K
M~m;]R.hp]87+XdY12C#wApJx߶t{h46-epݖ[B)7rv+*r_I -'{l3M
S4f.AhLqynz V˙1YZd,ĺCLf)eM2
ɮڡdTSϩ8uQWȹH? ,Bo_=_]ϕBS0xf-4Rj7@-|tHe>Aٲjɣun@U15ZjQ$4fjӰjraͼf@=2)@ВG ʷYX~EIws~ B*c($R -R9z tH AtftSD)
vܒCkB*ǶW=7ֆB&X!J3'u㚪bwöa1cxG:;O;X8fC6 i:hI3 -<lp~ƣBi qô1aܶFcO
4%yv/Q ##b 7 -U97vrC1QIR3Qg)XarWnH&dl@ ĝmYД;taM&
h]ӺaϸؒZl -:R-O -m~%NFغ81_h;/4{%a%F
}7hLl1dq"gȸJ҄Zc#[π"K1e8Q#G)7!FT囏Q4HS_ BB4
UC#U"Wqιpa0͢@Q6rŬ8"g|sTY7qH5-ode L#TJ^6j@ ݍ i϶'8C!o6KKni;a^
b".Xh00|!b%J5\\ɷ/ -Alu%Cי8݄/0 -=j.ߣFαC7=8'dCf3x(B/y`*9b -V$C"35k2Ͳh)#>f,9f!
}o+uwzabxP6' #S\%\ -ɸ{\t-UIgPqrpC*9yĤ/l :"2!zId4"{ޤF] T&V?guɭ#¢YOlk>_7?$sgR47h=>ѥ;)el58Rન>\8|Uho}!_)GJc%&t&Tʳ)odĄ|Dqӧ8o¿l+蒵x.@ΐe$2+D?3;tDDv -%G8hN.zOxv -k|(l~? ˻%kï:4D#A)=L.P'1ؼ?ڜo?ʨqRrffxO6Sc¶bZs@IZBGCC +/Length 3642 +/Filter /FlateDecode +>> +stream +xZYoF~F<zs%N2 HhkTHj<E;%fuuWgY,U͖ۓ`/NBf^]xY&0"ZB)兙?_irzϾ)]@"?|Hŷ87ϔw5W#B~=`6: |e?4f=ѱc_\szƫ&NQG)4"NƏM2:`:፩ytZ>ܲp1 בqF@8_$أh qٯ1gGmtXD/ηM,#x~
fo`4~!~Ֆ ѱ3Klxm^( zM
KD'2DTyym{"lۺA}Iqd ֮jx.Q4 +3&ޯQMD<xv7BQdXJ"hָoYbA0H *V<!KTI=P+nhy[MqU[a42^TDĕ'o6>S,dWZpw0tmZ[dK#sYkzr{
"N,X눨Ç|tpk_GE7eܒ#b.pw_+W
w`/C0P$-R0T9xZ &- +<w +
:]fp֒E=a) +5/
M}1%<Zr^w}K*`NpK.՞>ѱ<%7pmi2-'IƻS]zv<keqSF^@S/iX/W!C7Ʊo" +H|]#=rWcNkMJmZn7{i0TK }0x{{GxRzM +gEcp5L
1k+Ww8OMeߟ
m"C@[teR͑^![zw},rYZ!( 4ȢC48 +
B/DH
~ +Bv=w +&w06VۑĖ%( {ݱ͢6uXtzPs: q40:f=Eލ5"_}od1[rdYkoɦ[W)0BB'Q"߿oA==&1c(x손ZسkB!T, ~ú8p,Db̙j +˦v[and!te߳$| +HRqA~Rź1fJ).[g,.8
ͳO#$d!pfJ
fXMiî9GbUE9]<)kʋ䚤*&{
&WwqBZ\somu\K6B[5đy2\ox)`'Qvr-C)z聑+%cNK`MB}gg!Z?[עFuO +j,c !Bnp٢P,6Nfv7N<+wP*ydhZXYV@3yP?d CBXV0cgc'퀫QC]ʆ&E,+K噀eZ\KL!U_r +9 +Rle^݄!/,BKw-Ij$X]B +n ++X[T>\=Z[KIU;i뗛#m%VN=T +zʾ$HdE[րg@ޡJ䟋)5 yMr7XvV%ck˪$``2DڡbxqYTY&Daf9}rmiXWfp_D_KM?
6u6#=;i+k:=pr=VHa *q\/lA)G*"&BWTf)4`?Ua*2`0߉$eRt+85b0'ױ#
e@
(A]d1qA*e꧘4Mle(r._O$D8l70m֛ռ.F6m:f5`6)h>է0(1|QO`
* + +
i(C1[S
iqjg?%q9vOY]l%a7:$,%t?cN0Pn
}~:[<]~URR\IX5yISC'Hx\SAg\aM\ +DaZ7vDŽlt,Cieon
joB
>s$a ntƖÏFv)Ik9ⷒl<y8H$endstream endobj 5000 0 obj << /Type /Page @@ -18787,25 +18688,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5007 0 obj << -/Length 4267 -/Filter /FlateDecode ->> -stream -xڥ[Y6~_1;UT0$38n%yEJbY"xo_ -֊M`VÚ"bR7Nb3'*t}u!LTenF#~ЏQU"bJ -1P\bl]1gqri -
aM'HuF렣Щ:/:(4Ht\5o2!zHmp_4.ţ0ozې.]p -byIЭ D6 -iC ߉ӑ=lqUi䁃_Qh툐CHZ)BZ|usl|e;b"}cm9leB -熪{qB1
TȚфڂUAH
_h
aS`q6#hɰѩJ]@'0@*zKH0-PPg=Œmv\v;%п =RE \|ExPryX/< -ǰD)YAD? YlS3@uKrXb/&Z^r`U3GG8(츽-ɿ62 Php
S.E'p(_b"P3>z|"%$,gI]BZk
~ӱFo!D -Oa<'H5}AMM-9Ld -VvR/@NlQ#NSC~>8%7.t7=P<˼uEs8Č(^`j' - 0yl] -C9{Iz;Wa(aI(gR-kG08|nY1iusXV#uĉCK9vLBd\Qצ9f
B\/ D[!vx>V4#J#810x,"!࠺[6,#Po+Xn3ϣty'WL -~zA -%czoV*PPFO$HWyXDu.,CɄߜNl~FH@;%<,=fUǮT6oe7waJ(XYD酻̂0ͥ8M/\*3mvp[X{ɕ$,hGa)Ş\@́ޘpz;b6G{AGF7O!"ߚN&Rm2)M}7sh- _oV]&JmNAe0"?^^YAS'@tc߬XXgZT֨{ =XHnnz-^Yh"SXTvdʥ?sLL9ߪ4 N{Pێ \gDN<ryuOJ +? Zz/nX6CtO:wb
orE?%J7o p,<M kZa} -/:|Kg>n!_tV yO'梶
;G,pK`,{T]أgۣ620sD_>/xp9fl3p̗.|sH=8p ';ɅJR7K5Y(!P:7PVB|sWz:W~-.վyaOo]3Ƭ}huDg-D}V1YuEއM9 i!I]n%Tfo|8Myt3m\5=%PŜ|[H'f:$mdȍ\.%5l4ui[ZCvz.
G*]mǬUӯEt蒁c
߬YJߒ~&Uf_GFQ1=@KZggn_`M0IR2lZ0j+Ҥ[:|EF {zW%6aK$C˛.(=7V}´QHb;;m?o]^faT 2REc8̇tb:YA`qhp{4[pg}zBτIa.+.7Bywcڣ%~;ȒnF<X q6+%y)]406hH׆M"? l +/Length 3961 +/Filter /FlateDecode +>> +stream +x[YoF~ׯ +$}d+>Ejș!!'ddߺٜ$0iQ]]]m܃y^Yvܞykh̗yzIM/g_}D^~XQEꇛŷ.0t̽Nyw_yMs^[\^ws{lBgqdzoב%!/y%yve|{šG|7gg0T-:Q3+=̓xOABACMl +K5bzeU_)en]mmąnUn'Ϗg65ΚyNחUU'|gu{d}TmGA~gnCq5Pj*=(I}i`j_wcpyԊ)lr?(*۟v\G9s,!oC2(66D~<^ƱSXXCl܂-/c$Fu]V<t2QiuV}HN%B.ԦB٣&?bz3}w=R^W >k=Hmd[L+vZ<
?;j5E[r4CPqf_j}@7KW%Bnk$Teȅn5\Y&^"{9 +: S<3Za0I^5kY2L73Ư>$5FkVw-7c\ թ@-S.QD`82]$h\-icG#dtS11 xT9Uo7U;O>(ȏF +lT%ئǣv ÈB@bꫢ4hnCx$i;"O*S42KI!DXU6dnj^TXсrG*CYuHJWiiM!M +a+Ni":%a.1sN,fӠCY0Cx>͐m$j,ؒb^+[uLr@/GY(Ҕb`=?^ !!,
^v|us/W3$71&U`OK#1-MKj?0=Y +["GfT~q5n#*KhT5??w;&}ESH +=qa
3E!2TQAxRCJL"Ʉojv?]2Bݎbm62D7."x" ȁZ#{YcT%sxsЦbSJR +}JVnݣw]UC7Ji_L+9d2-nX+`Vq1`.þ-{,th .kO9x?ЉH߱Q统
k##-+ +dwl^V]OT$
TQ8ߡ[jO30bZ1-dfc*<{c1nLfo'zwǑRX"&VUi)!ֺCu3W}$P.+9-eDGJ_tO1َ> +K,ځ౺N19XowSZ# +֕t3N(0 +p3C9S ſ'$ +4ra,VO{] +qUm{W'^~F:)>[&]Vn'd?37?+$)t;O3(Nd;!j??]%7כZ@M%<%'JL:Cel\~?tb]̓aFu 8(p %}.76?py zψ2ai!YŁmP݊iIF +!DRb]DRIPD? [FV'@@"#2hC,5#]=S9:;rzy$\6suƫm:&`/ї[t3>ឮ6O(+Qp!,6Dy6%:ͭ9@ mfevifap2T砊с>,+ac<TѦ+?<s&gvduݸc%r7MMXĘQ +"ku!+k"8kk.ޠ+$Ҳʓ(ɊPk?GZo$hQot+ +R:~[z}27FkH[|5y +b{tWaOv9E8C
BzJ8AzULdIԺ-s(Nht`7jq0!C{!U\/GEG^+#c$Lɛ(z7X:c~Ti=*9SWV<9J!( L'Ý#8"%U K|J"'@PXyxA.ǐLg"ն[s:0APj< + ]F:¬rNaɃu4D>iDQ<oJG6iң %~="]ez4iFLM2_@Hc-6=Ag
eB3{Yeן={-=%
*GS
EIFbTB>SG:yN;EKjݺFD~y T \/<*F?0u61ϼCFm9dendstream endobj 5006 0 obj << /Type /Page @@ -18828,30 +18734,33 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5012 0 obj << -/Length 3762 -/Filter /FlateDecode ->> -stream -xڥr_JU\.!tt0";eŒb>}`J.9zfzU -40a}^3PeOW%\}6'$Z. -%C$C#tÆi'gDkw/k]+@a\i7f>ܶʦ -C8s%& [{@s.Ef#]RI%<N5)tZ}{^k,ܔ -,DfHl$D M(.PsP/cf
2-'Pn7,exJV -+/BYدvOWNR33@\6P T}tr -7g?u9髗a}(&w:3ni36]%0<du;V5x'ňPEc;sLЈE`Fp/"g!ٙ5=`ŌPIf׀A#ljwt٦)
#K$%لlppV<6_J->͝cp {6vHުQ4ɫiƳIL,\}hȵ;L&7l#AL(Q(LxvlM@E'hCTL^^ͦFa@8~k:|%,:ԋO!S;=|:xSNd[ -%떗RJ6%º[ص7#ufݑ<]Z["Yx4~+7TVQ*${ - -ŗr.R?NO"uP#Lvc(Mq:fMGd1L]EǽZn5# -B(a܈UcVpEm>̅inG3Mbعb`8 </$4dQ
W
έUɾ7m -SEw (B , - 5' -
,k4@פ$ݰ>'N5s?b8v6a:^+gSnΞwHoZW`]]r?-KԔnlV ;-.gOr 2k{¢91.˂?-=dE>QB穯HZ9(?[dfxJzl\:23kNt4If\(p
u,;ަjjSb>1!?k4Z-/s>B0DL?E!|" IĊ@~lp -J*!7$$J6DWڛ)+)BIʐz(0sPSIp7r`B]FW:Zҏ$x; P8:JR"KDzae!C'dHlONPMF*|9٘t¢ -, M9Y"uČϭ̊);8Z%/:C8`4D
XPxTf+%rtǁD ď7DdзDk9>oVDFMзo+Tő#y:=saप ѡE]ki7L9[!6`n=ܗ1(q ܄ U9lZQ܍BS=TЬI$ׅ$c>ua!0EԾbԏNqec/siJW `*UvpTë-Ec& MqXXMR% -)l*Þ7R1+\fr }1ؗU -b{C@Ar돐o'edYS2ÒQf!}B<slY,S?IVn5Va:e=|E(Fz5֛
48,v/?3P+#86
W |c:s^CdP }tiT[_^.Vo$J)_o>장~j_ߵ> sPggngSMT,&<'{vgVkR|ϏTܻQ$x@l/g,ܐߟ?)5ؗ< -Sls D%XF也FF0(Gqvix֫ ht -s%3aZ)OۑyRS,Ο9*фi'7z,4/IQٝJF`ņ7<T9.;
v?BIYPaLDl.{HP)Va,[_ޓ?yo}a8h>n'L7u[lmf|Z8~9B?zxNZT.c& - ~všP}L#hV67i6zu#b`xGlWYP=YlNIJܕTIDI`j?L,:;Ͳå,^۰cfK%0KLl BfDn|>ҴWfl,d?J,gp~.\">Nendstream +/Length 3667 +/Filter /FlateDecode +>> +stream +xYoݿBX0XyhGNpN"-Rz_P7so>F?Ff$0Mݙ|^ܞ}]f^mUU˷7K߹zys
ݏWo+߹z=#̏pn^ZWX)W!_g- +gfڞgbwЍT(ofS^5J$=7MAُfPkĢ_5a[N($Lee.#Y/qqZ(7TzuW5C7 +0eM[
ë.WAܫ6|e:ئMC! +4*n}^3PeO]} +X%Z,$$C#t;i'g2KO3^ϻ|W:S +Jsgp4ywL +nKoDIJGAzKw2gIh\YU-Xo +6-5*eUCFGcDTA)7u_L
EkPYQhQ3Bc'u<H#EMC͒SUG
H낕%oDwlppV<~KF%^1R(l7{Limr=Gn蘈,X|hu
v-D^#G_&nzÏGaB0c&:1GGa`ym(1 LՂMITW? TFdHd֢ +HpJ~O%lj-/|܄knzjƮQ&y3RgƑѪӥ,ޏWMC0iCMxmD\BnsqEdOA-P!REYFI$(pP?0T8h&IBq/xТ^-Xc"ׇ#6g +dqjU:ަj(y}>W".`J3٢2 6KS˴۟^!\!X!HNޡ5Eqz/;+uG$CT&q͐#0sPp7C,A)M_B7S/(.!C.g`#'N]?f8ˮ8)6vAtE%|dDN`Cu}af (˂L + $!8ͦm +f`jf'f%BVCύ_8Oۼ+/w81^O
q:,$CG-[pH +cu
q3@NV/AG4cBNJw#:X;pۘ5X@q@EK}Yox +C*Trq^[(vfN +_s r=`?UQ^Wֹ?ZƗ\Ӥ2B7DJ(is+2H!2'aF9?i:BGP)GzUs |Ur;I%Ms*=CcC&qۆn44`tXtղ㒴v;lK\o,ɤߞw{҅mSɛ-ų*"sm&P)EC)D# [璎^蓴YЩ16N/{]Oz7T:>38@~o oKW~r.'`*[ZU.{Kᨮ #G3ul̃"lj6b +N9nkL0|ǙLAd1f^Mzz=1K5s4`jz4&0*)pR)fT2_ O~8̞8HZ],{zK <6 +or esțU՟Vo(EvAbuq8B+Ã,cBwJnX=Zm4RrCwa-"4yp*7?_a +v>0=qV~ʂRa7eiU'*D piʡmSo|wc1{gRuVpv.l~zm:}^C"B&B~̦SnI&zNz8\n^+|wi&>v*a=g?cΩ0vX郰R'֤
y`ާ͔n>窟ojߏ{< +.Nd"BRœ +y3BJaZEZQxE'=d R,sPK?d(R .5e2Hl{y/Oj:#p_ +PXF{8&H<!88]=9o\cp"xD)`'*o!y҉o9kjؙ\#FjLDe0ӓGS7C9u)D L7GyO彮Aȯ:tq`ۥ`m^,?m
| F w2;iQ77PdlS\7kj(9'}9'Kmg& +y(h3c@7r8C`3r9W>l +`$K.G$i!v7#=vE<~#Ȥ!π!r3Bg(XQ1Wj'sp} endobj 5011 0 obj << /Type /Page @@ -18880,33 +18789,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5019 0 obj << -/Length 4263 -/Filter /FlateDecode ->> -stream -x]s6ݿK% ~$m6Ӹoڛ3GKF"]_ -kt T:OW590'r#ߔ-0!IwMݱ0DL;gf !Odv#
a⭰YݟWPC6Sj]_l -Ewث:nKT<-4wBes8"媩@$z/Z$X&V5,}L
nD7 : -yqbVQdS ~f:C-PPm+5eŤeh -)ji;Y;e[rǦYDvtK[̈́dD}̋b̺`E+-_0 a>;,2rX/H$äN>pT72nWw}ĜQ҇%:
ǁLݣP# @3H?x 8ty
k - Hi -6-7¥FQ5;|`#1EĴ"8(D/iKf_ - -M#2f}|f̐$cQl5w +ti_LJæe)jvk%Hr[Q (eqAZ|eְx),4]
Rm_5b -RӢm+5DrlKIMa'rƅU?%E=Xm9%_ASApC<6WvOcdx -7+KZŞ{ڬ -"yҴ_YS|ſW4G:6u}4s84|,dG@t@`?O!MggAts+x2,;}rCea4<B",Rt:PiΣgT:$DJ$tF -23)Ö (Ty`A_:Ge*t8qE*N`56.q"#<M+pFk-: -)+qWJFrmn@}CDpXr-&l$6S"b<Jƹݐg')̕nPAV`yƱn4)G@AF -,:#'O -c~-z[?CBDqW鑫@: -{NԿhykR(K1 1FucBXټ8@% -rXܓ<^&bX+gcd:B ܱf
`fqpvrTb<wٴSQSw\ܮxS~C#rع/Vl&m&?feѶs]o"9PFZ6̩Y - -6--e:9>fYEgAX(9wssQԥD -}{.-_M@lw{XiN#ݎ 0)-@K#GkS{GB~|k,rų?qK.j2BHVndƦDuW -b\2ck~-C|u_@k$HK -l /'YP(}[Vퟨ|`:љDeOj`$<h;shhM8Yj03֟o٧@@TZAq>$?sendstream +/Length 3923 +/Filter /FlateDecode +>> +stream +xn6_%2a%%/۠q/E[`yF͌Jޯs#%y䤗`FgV:?NH,;^5<?dDxlTXzzy闉9B5
\<{qvqwuetY(x}%vߝsyoxWw˯0$a臟QtB9TQ-o*gyIn"U۹1qT@=Rb3JdC&^M4xM?BV߷sٙ'Bq8 VXޝYPJSMS*]_l + + +w\XY EOpwx8V&L]q7sX+i)pF:Rz-@Pl+l5ܳbвc4)j);Y2wXo-1Lm(][6}٭f2Lt3UY̨t[VTR8м-GBY[AG-W/(@rH6O}#sNvq$?,Ѝ +-mMଖF5xDf+B1i=O{wj-6{Xu~m,!7ޠdظ\(V.pSx$y(4-?7WҏW; aZl-[ܢGiKb<DExx2Rq<іO{- BiuL50?Gr&%g6"PLXޠ~9a ږ/ +϶$~kY]Ļ}P/b?`d}B$2b]ϥnJ'(`̮Zo*SJEb,ٸɿkVss,NzعnN +;o7e%2[/Q@0ۊ왷nR'K嶺I/fK1ZQ~X|d]
B۾*;gJY8(TY,<_kƦ=ۋ8ZʉpQۆi-/l;B@jhgB@9C:Acc{å
ABH#VAhZq8}{MӚm8Ggug FljHƭvQyQws[vi٬BpP8y]7\DiUn+k2iߞ<a2WKch4ϐ5ծ>w` +S6<qj+$i-U@AGjk0èfsJnu6\^8Jg 3S`x +]$aºk|-2iD[ +ʢc3<H،n5X zV
ZmP)\A9&1p,̺j)bm`P|t,O|D::3pnnD 1c,#eT6
@*8^cgJH(8Pe60A۹h@EkB#U +0r:dEP|L".r!ScD\աmRspXwi;R҈GX2cpD8ȱ_i>W\&YEO#t7M<hx7mbV]ߺiF+Kb7qk) +bS\DK^xvTߍEsnHZ!0헃?Fo#/{A|fS'N'xixև!N9(svLEY<ʴXemq'|}29..Bj!^8X{94$܊Wzom<rs V^H{vc;g/p<6c[؆sVr斵(T(J\҈K`6M7|Нf; +֛̉3D8>tWNU +2#Į[q֩Y*RM;Jh$ud:WZeHGYt&ZBUGy*/%D](${P'ewr#e2gc}$[yw@m=t#OM..o +Sz~s#fiOIL5<$kt(εD\L.3t@nCRr.4͍vxWbٴtsZpo9)<V=flQƎz<{ŷ&9Fpβhۻqđ>愝BЋX&^6n(#h(8y`(22#F"D![aQqtbj.J&WzpZj(^v;6 I@;-)m\P3|O!pLٯ81Zhz-qg+,Z ;r5
B44t!|V`Z8JeDZr 9(o$)$1
Oad+$އߣ>k#Ft})(hGohpqՉ$oWBW`=|pM+ߍuGhL`c2n9ITq6Ys% +vf.Ŏd U9h,ekBE*9N /rCZ0ЧI淚Z2K4Z#.yJvL!$6YKyL K'7))#bl]t3:PGNp1Iuwzqv$(gGB9ۚKb_-%0A$b,z~]vPE2K"8<[CvlbF +:d' tڎ^
n|6>O0ޯ/o})BwjA3.3Eu̩+\iԱVZ1+s5ŪW10syXRC!xatHHT4%j(>]+y +*G'LyL0ˌx=~`^p2[:~X3ʃ endobj 5018 0 obj << /Type /Page @@ -18980,24 +18884,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5040 0 obj << -/Length 3056 +/Length 3016 /Filter /FlateDecode >> stream -xڽks~cpƄ3 [vk+D@"j>Ӥȸwfi͒4eV#1
Uf3͖7;<"9[?X/^EދקW:qw7"-S-?\Z@B4}>Q -#,Xlo(?RR룫,*S3>uL(<"A2gI$H(bB۔|B
kxKT
L=ˇMV_aΕ0Tw=_ 8vu3d4AUx!/sx* -8a?b{^}Zu} -zmy6*/fy3<An^!7Hw2}fȈ^4[Ԏ8Q^S --y9,;w|P+\kح5>>>0EaBz3br8%~c44@%SW#R;cT]WY\[
C8ס/u'sË鱚tnNhJdVt8fQ+ĎP>8JCEJ\ࡣ1NZ{@ _H5f4 -v]% ē;17jfELu$7PPw{k=Y~@Zn_s 9a>N}hAo ;&K/T`Όe2=z>/d0!-rFo^teaT:@!F&\$oc-NrXͲ!Q?Tt46'2Fڋ!&8VKu1 -)Ff}"[Ű\lojچ==4hoӪX;46c<&ILG6adҒXs%g\ ( HCY2TෂPR%~(,HjDSqNJ",㌉݃h|fg-P8xbR7pdAD!ɦG=#dB\?:U傣+N! -1`'LV1n/MK;
-ҢxڒsS.$qEm8[ΘV5!LqQ2Y9Ǜa|~zWeC~O8<d44:ԨINCMc &:+t%>g]yQMc> !1Av]7 Y2a]?˒i_@ ixHdu)Hive~jYvBHKPvT6:[V6HsH -A2c -ӺomZ)B!gC;uOOuOd{Z_Ne&$a̴ -ArMv0ڠo\$lH/N{3/u<WW˪ܺx*Vn9\ -%Ⱦm(2&HQ/)øϣL4 -2=#Bꪥ|}\
<@iEa;wY~W\?DQh4xnZ2hj4g5'X=J|`o SOڱִ8.t-Ov_N牻%/Rvm;|?t(@i":Ż+/i08\u_Tl
pHF'JlS0=T2NJ ~>bysM6(T43~@.wY$?xMWa +xڽksܶ~EiǼ3 [vk+9NHX35 +':φw[E#oA8KJ!j{S@9UNBʴd$O'T7XKKX-5=Z>C *ﺢ";#>Di1*2m;H=38vJQI
s+NE+~2><.Yw,2[>2|Þዑ8
x*5\3r(@a9ڷḆ +M6{xvdv?82oah0惮Xc{t\RTQ؍7ت%-/`"Rb쁨 ~>v(PKȑ@{YO<]WD&j#J)4geM,QRWP@qMNuvh͜Gl/>VM/Xju䟸:^TY!Ĝ#'ēA8稠z:SkIZpFe)*^gJKQB +%W9VT!O\}6:[yֺ5muJբi1mA +kcM25ij+,,<i)igم ҹ63E5[^Y5{@S*07M> +G>/e"mʂ +P;ם!(B2jg<A/O<JG\S"~RfVb֒H`cc)I;;BK+,%ؾ`aI^Gmh-FE}2?IMPB
Ov/ 2$
3\/UNt^njI8MD($g]k<*
`ֶp + ma0w3ĥp{g Ei?`9M;C~8A +gP~fBi}mm-c:-o[' +_Dk4K+Cnw͗ endobj 5039 0 obj << /Type /Page @@ -19021,15 +18921,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5045 0 obj << -/Length 828 +/Length 817 /Filter /FlateDecode >> stream -xW[o0~ϯ:MMƵ8H{]:ڇ41)u!
%6U@cw>HTJ -u*Yj` -ś`R -YRȥ|1WWҌ{ϙs%x& |8qMP|d-pDP]#l=tѺWr?gE&lKg4ǬAqyQLXK&OsUMxF7v껛"5$F{ϙԽǶȎO;8><UtE9u8)y0>;2hlk ->K䭼ؚ(}۳rxgZ5UC +xWO0_1M$1vl'N=u){)<-%XϮ T|mBR5>~wSHtFĞ20czjP +G
P' +̰jeiS*+ +u+e$ !8%/xAv!u)^!6BR ͩ眦UUA=fSڮ(.EWbI̳Jm置;jobB}ÂׂVmә +^:5b +HIPKS<L`Zv'Q["29Do]nkExVyYygGfTa><4_ͫj-g<MEn;u>ٞՒNy-y5 +R%F[ԭǖO;ܗ[ +!/<IkUu6<'t79)Iw>&ʅ>1۬ڬW%V>lm)}۽{s,Q25ai`ڮ4-\q"nEkC9L/.7rBظWVuU9em+dmk:
6e endobj 5044 0 obj << /Type /Page @@ -19046,27 +18949,33 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5049 0 obj << -/Length 3504 -/Filter /FlateDecode ->> -stream -xڥr6_5cAN4&YLF,n)R!)_\ -|DD7m&Df":mY닖~P5](/z")ڂ~U[#N*-/!f_k#Ĺ_lм멽B )э~TsފNdw.` !O-xChJ[RMDTT S*Sڽ9IK~T# -M:` -}gzyYHdr@n+^\ U+;Hx $ -RգG`-KwܑW;GIn;ᇃJA@*+ƅl5S?2 -m˦^O E+iʚWDѶ;i
?6ĺAM_-A\讠akH%y<d}h50J҂=19X'=S@=rRw_7oxwL#q}{4Fܼ6
c4jD|1<c&b?rRl
AbuC~v%6 -W <MR=IZ^'jLe-2kt=!fT6;,s4J$$J1~.T7L}.1%
\KN;``ֈoY:aPf;¯{39?M+R#sn7NgyMb[cp,3# -Shiˣ2hZSF&-TyeX`
@gڲ}M G"!NߢB 3U[S* -Ϯ5&:U^g3&Շf 荜vTUy3Ժe#1S>v*;'6=`xmun14Ve]Np6*FAktXwÜ{2U]mڃLOB'TXs:c&}ޚI -{rft9Э ޝ -Oj|7R)z\Os[#OVAGtc* $|ƁZ2üذ2ST㢷Hc?O]WEڡ/݄'$&Xh宵:^
ȉ: -$ȶMj6L.9_QlЪ,A7Nn14o_HՄ"o8(0Df50 -{aKJ2_[jRs^c'U69=jj@(NGb |p/lnεa -eO3uM\9Ę.2RBc?җ}7ߦLė;Q\Hn@f{Hp?@ -l{[Kop_SJ{lyb-LMз -510kUb[EޓmM0u -R$T(0CaZkGendstream +/Length 3313 +/Filter /FlateDecode +>> +stream +xZ[6~_a c(nv&@Ŗʒ#s_BR[,0:")\?ZL"T&T2M'E4/&*]-/~HDDaeX_W],_ΤHl>OW?/OEgR
~DpGG77oo`9}륷 +U"q
.~=a?]DQ(lPZZI^]ԄGt$@(LS,Ȗ_wыL)amYO4苖~T5},O8Dw[{TZCz=͡Zs6G&ˉc?NgBjfʮ5+P(HG8fΟ>/0ҐUa;UfV +/HBFX +VN<F;]ѯ+8~* +#F/$.a:
+ +i?1R'.IKp8-4c-|$+5Ym~#Ey5
BV>͆UlM̴|.l` +,a8C3 e!PRu,4̃x`X@ܒLTFa0#Cn$w$bT=Ps/Gоㆼ{K1F-?]]:8ICe]}WMS{jiʚg57D&p[pdn+"9}y]xj[TWp85ta uK8qo%@G!`sLܜ!l-v
<%$,nn6AvY_mCy9edBEa`c +~fulې#UOY<<Co>#/@*Ʒ`d}}
Bx/4
Sesa=Oi-۩K2G} +Mdc +QYh _r|@#9>%#K0=p\!Gd'4R9.#?|~߿qD:$.W#$R* ꢇdSe;`<t]U2m;z0jq@\bRƹ#C_< +rX[g=Rw^"w#3ñNc3@9ȕK?SoQ9}̄a + '3F+?lI +/a +}鐂0`9yǙݝ^J*h?{8Ǔ;@xՃ$Y^d)hm:3
fa E<S +~_~Q>YIUI*bShD
\R8`3 H},mtx,"8;p9 +9^r|AF8=v#W<+SOB$Ӫ4(C};<S&1)0d=WFuh9̔E0Nfޏ^sR&6&l~e>^sVtP
>XuZRդƐ\"~y_*>DP)X[p]8-GHc(f|J\SRc\BJ@G1U3XvgJl\ՠ*0l'ONI<iK30bGՅ{Ϫ\- 7wGΉ8d~iEP+*yK-\Eb-No=fy(:
jjӄXF)BgR 668̡ӁۢhԕdӚOrbؐ11
+VE\x,RZʤTۈu쾉4U|Ά<.t!4F
!9Ss-+Ek%4)1sՠӯt@h +NN.K%g&qb?=<ܵ|Șc8i͈evt?Z;l$4_,/!bnj^}FGWhEy*F#n>W& tp\þ 1z<SES$X9lZvgDٷ
7X
ƕ<:W/Lp2∷DS0 +JdUoԂTΏUUK+73Ԍ
+m6;G pqSM ]m|T((wt) fxV¥Kve!ܕ)̄$-ɲ¶7}4d2b?m~h%gCzsQ%-57ڻ< b*fkD\R W̶q@}
pԣ-Ckc".=E³Qj MC8P|=C4(:BNY6ߜC}=~ÖXjKh$6%a:"z43Ӓ{ޖKEoj˄@Ib;bsɩ3ǜoG+PY2ڳۅ:
`{0UO^\d4w-0ShYFEu3hri +eo +*|z9ɗN+s;}; n +3|<jue8~ZzCsU59<=txBڋg{si+ph)v#gEl(~yPTӯdVendstream endobj 5048 0 obj << /Type /Page @@ -19096,29 +19005,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5055 0 obj << -/Length 3652 +/Length 3600 /Filter /FlateDecode >> stream -xڥks6N&&iI}&F$)RGRQ_dqž::y+Wb{杯a3%s`;>4s/9[xny7Q;GQ<vWqn\9ׯ`xW\ڹ]GV! M={;_?yN=Wr8=w95%@{nI|W+xnNNj('nc6\2~p?AdA8 -Rp~8Ŭ<02[QfR\ +md_ce4c - 0/yZOb(.mo +B*5J+7mq4&%BBRN ri1crL0d'D Dw߇nٓo+ ՟_BfTv4;5ʌ,
R,6: -8x +xrF]_n` a0N$vgL$J @o_le%c0{{=trq|؞ykXL wn\/pۻBs<7-9{f6Z;*vg(?_Δs{g\2
~}7+0kX;ww?07 5w%$>?sUoLhy/na5s_Mp:7~ƱQA^'5%?<3&R0Ld UJH Bgl4-')$իoPQۗoSQE=kl6.E52fL%]?+0ߩZF3~= +uq4e
|DT{| -&!$q-:0BuPA+L -A˞0CW#x1$H% -AX9yTGr[5<9pHAd,\#8U䥌0.O\@Qr'$mZZq䣼$W۪VgOP[mیxs$Lqk4M54hoLCPY~![ºdxC֜}$Ѡ눨y:BE=
E#mG+
!a]"TlYSԱ9)f+κu($9,bvڣ3ҦNė^ݧ`.f5U_ԙsyv; $DWss<??ڄ\npn,),,p.;-Dd{oF1)elc -46ڣ?d@tPyE9a51,C=Dh2`-GADp?wq=S -܂]W2tRk)VtX%'&h8ȂǚET7a;""E]auYۋ|" BsaxD切p+kQ7 .+B֣ct5 #lo__z91Vnfq\#`¿`Y],Ug~:u0,6?fX<|HIsާabN?'aBl8 -bޖfj>ƔQ@0-S"x?2ݑLN'l6SITEԸxl|=O !Pk~F*]$]O=r,rS@3qrzC&t}O$<+xjuܐ&/da+_gv,1%?ZѠnӺ~l֒&uEi8ƿ F\x$TѤǴ3pevЗLw<
U8? -ΓbD} -x1eÖWBf_By 뛂.lq:h;aaG߷__ۉ6'XV2 /z@ <&pc}-]US
;/!YRL-/aa@:bGqbUݷ 8XƗ]]Qgp&vi'\"$@h2y -big܋@|L.t,lOys1اns+=lO;-(NmO,p݅ -G[`fWSyŴ.Pbqā*ٓpgUzA&Y㴴WSc@F,#L]&Iv
]
du)`WMǧY8sTeFs~-OA&8%TlތȦFT[| -sSg{luM00PK2N/Mj/
0Tw}u|UScT`=4KO\C[ -`_tS2îxH.Y2y+<A)o}B'Ȼ* -!Ja-Xa -zU_~jo?\-y7mUm-}"0@4U!\Ǎew1J&>8W%1;~BC
,78<Nb0@ڼ1'n}DܤƢSi9+W8G[^ˢ4mU^d/rCv?SW*_}?fow7#C|?j~}75dNt1}--J
t>%-Bendstream +&!$q-:0BuPA+<+ +z`+\lqb?[,h0,h ;c;3V'$_\PT+".p2H~flsT9@yTUe9}|XRn1T&.P`ȅ +[ +`L7#)=zPJJ +dfݚg_GƑYh>AWH҉!&}d{duh+9(SޭsJ<;pȂBĚeT7a;""EqkYa ً|" saxD(P&`яJʖ
G.x
oI$|_"J 1IW + +ɱ +}c'JFU<ڼ#緮2'U[C_Y XhR~r`ڱǔHCĆ%sjRG +LVKPԕshqG:RP<GT@bA2 4(L!Kܼ*8#., +H%))zǸ
[^Zf}M +'d +t'lh턅o 7
Md +mR@ť <&pc}-]US
ː/!YRL/aa@:bGqbo0ZH=Gg׆S/q&!9BT0vq!M>bC~ra= Sa{Λ>v- +XQa;a(JNUmO,pň}ON +())qg{6o0F6-ДؤP
P$*?+`k|`m\ꐉmZg^nR{`fwF +nKd 1^w~Fy +N]ׂ1'nآ]Ë}R7Hq<&jDj&GS+h.}1% k~Z_W6(>oܯ$[fsLf|~.Ż<bV5ul%\pf.)TgiS/.<^QT3݂\瓫6/ӶiEOf!0Yf@* endobj 5054 0 obj << /Type /Page @@ -19141,14 +19051,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5060 0 obj << -/Length 942 +/Length 932 /Filter /FlateDecode >> stream -xڽX[s8~W0}37;vg<0 ;N^ms$s]! -K%xW5"۱4M/;g":wJK伷>fM+q@F>W#q&*e~C@dM\͛w,7.@0bd/>ԳZf^_usnC]L+ۗ -Ʉp/[)>1Wn0x -r'XjB*W(T#aCbݤ~20Z&I\U:k穽K)vvTھh[-\msnd
{2MUu~khv0}"}hC>:ݓo両$:^<\> +xڽXKo8W=C*7WiSW Ȕ*IKr:a0b
9o ?dS@!EPj{[ɹ mWcFvEƉ?͓%8ԉ9E<_*$yX39եW2_ośQ⤳\p=Dݺv!ݼ %
"{oy>GvihgkH]z āDp<L/XDD%kg}"(fpGEܯRP孊[+ ( 6Evhۢ3.rd5E
x04:XKaϓX.MB,,D^wm]>_3X2ƆfP4SUAb5! +eW&1zcqm~/(SaڗMv(;ygݏD|@jD-w#JS>*eM+qDlFǙ!t;525oXG3_(v
Vȓ$v1Sq]r:]~,-x)q%6|.O_l8Zm/*=K,?Ո"odu|Vgu|V7wI]'\Llٖ ]#M],J}(tg:lyk
]/4o|ȓɄ|$Oþݭ"KCδ$e/>.2U鎂K1604{&m0Q˄r`'WrվΔ[L!tВC)/]ce۞4VS5WQ\OI%@4U-fIpH endobj 5059 0 obj << /Type /Page @@ -19165,15 +19073,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5065 0 obj << -/Length 1317 +/Length 1305 /Filter /FlateDecode >> stream -xڭWmF_ᦩEս| HRwfg`ZלegyÇP.p+F.As1]Nߏ!gnnw=_gka2_)ŕk;㱲[7U5ja;ܚ]]1EVR0_0?+5|grP{!Yk/+ywzHF Q^ɥgTǙ;(;^+j>nb <E/yߦ?~O]e~6(8OnOWNJyYَV6dk4Qz7=_*)66:Ϥh1gᶪShWrM3haWrGgx=6{#9s7;zNx6۲U -1Ew^!U~D;SaB[Ֆ"~ -A2Z8`LȀS"Wqkh}Ձb10LzK鄡 .Rc- T?اkxQgZ1='DY2n=D@;Df({
rNH@@EfVAA< -lyY\hԣ@[?KHcML ΦduA5ɴIT*eٰ~KXZtFhCgi[- -d@<fV +xڭW[oF~p[20dJ^g/YeS7qJ0xo?6I+5M9;cؘ?+PCňPjFt +՜_¹(I`ouMЮb|=\e!
97M{%Bc8:е$}4<{'9sZވw$)ۮ;דمCt -+ +¢w^!UD;SaeGvwˍ1~43ΨqJ +
rNH@@M:Ef6AA[l\8S|YLh֣@>IH졦Sm
]uHgSadmeVkVhe3c8,Gm 3
zM{@?Пxn0TM +#nf2^msT endobj 5064 0 obj << /Type /Page @@ -19190,20 +19098,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5069 0 obj << -/Length 3589 +/Length 3442 /Filter /FlateDecode >> stream -xڥko/G'P8Nr!ɹ;HI<SCRq_yr%QJ0{fO<'iz*$4,6d3?_1]N|ͼl։0R7owo?MgJ)O,IRwooTۏә~ݯ87M0ᗋ,!!M_/~Û@/tcazsDQ佾Y 5137l}7aS -H27bXGJqtQԥE2O2dz=r#KZfOeB}8|crcC>YK)zHPkX2We1POgW{1H%;Jv'"Rg.Ŕd
TÃ6=ߖ@FHl @B-#Xz'ȩzJ6%jy\u-pO\2/y>9d8GSWWg>[q'/VcUgSs:?!֊.sGt윱ZALmA<y1O9/jb5rH,K7*mb>W죗oZfOhiƄ,|H} -}vȋ3]R*ړZrc>
ԢI])$)#֢
dJ (p<`|969$E??U]W3qLMGjA"s@GN6#AG9
g$s~p% -Kpހ
fa'̬$C.7Yk1,)NX -KnUMnW5+{W"*+ؐ8Cg,@jT5Sծ1:{k3,dzZqv40K\ȋa@9]܅I*0I)X -NH)aLyD0g3Ϝ;yCC]pC?OV(b'E4@#rBrR)3y[s ⢃\j#Pf\93biZb#YNrKnePy1ݯT_08i~tU ~bҌ:Y<NpŁdpzcvр -ȊUE4d9*qmj)[3NBm32/vI+'=]h)7v4ĸ*7u5+q[ -,2{369vVE)<JAi*-JĽti㣊`muQ_m2Qn5,f/Wr~ME(PTJ
/6%ߖR"+GF [vYaX]~~$0
8 '*,-N+dz{fkkR!O8U8Ujv%ݖ!AC:Ly34 -P99IG^2d0Vg m!]%bֲ=5ŶO --Vkt}n#D큿a~+4E$#]cc)iCl<2Eޚ pnTM_(@-a[~*U\K
I)Y-Zˍi4:r )*UV[~:qfi[>`WGԶ'2:1Ed0.S^
yLw4X`b?Dlc?زcƼ3>`(=}9<J\Tk +xZYs~ׯPbʄp
!%\keM Z +Y}wE|wwA/
˚E70:Ư|{$l/ZxHo6W9l'% hDe
Enh>P[B<ǂv;{Yr*oHcekWWiDfono@Qq*L_O*Ȍ~%4,Qqꇢ^5||6@ԍ!Lx,GrĮTԪ +~ +p`U(WG*Z'FkV]rP(V("6K/<=-룏3oR.yu7('g(G/`ȨtU[+g{W{L;(NȽ3:3c2nU`(O<27}OG, + 杬7Z',֒p-ڲ2ӠD5?x˒@c$>ҝ6X!@n),'O2pսg]?1ך)}+ڶfvVwD~) +!+QFo8zRL#~-Q*n,4 + ^PGg{b~o!e7
"s ;Krt_
z/m`yAFA"$ rŁ1ݐpqjAJ +&2F.j'xϯ떍Ow{">3Nqpj\F});i.0J.#1!J;ʫcRmrw-/ͪPMG6
) ,s5ƽ$l`e +yTNܬ¹LhXUY.L&d {=|t/SJ7fP!)%\\ZU2#;zQ`\}=>988v蔱[TS7ݗ56(,+H וSeϢp%aryETn*T[( =m<xX6҉މym|.1,Mu*@"6da?t5#zM
]AFLEq7E@hwTh3kFP)5.h}SF5-%%+Y6.`Aa**uNy8GB0@U#S|kkء(C0V9Q
sA,AlvHB1Cx?4$ZHCd%J-=mCiƉE>si}BN)UػBjӊRky%\\Q~{;˴ifUd31{eSVe31w
\ISeNecV<t*i*..=o6Ob\DeL'97&}ŁQ$ +vF#@.Y(ށtcoLOP|{Y2EE8㋥qι-n!Gb.,ef·c|^Ry*Q4|7&H`"t# V2*,˒^HԀXZނ"o*L'YeS(pj@n|ڦ>i#(]PQ9ӉbHp@S{M!TZmڇϕ'V0mi?HDdMza6}z9zdbJZ>0^LZ#mXF4m.sr
,|HXɾX<B)|pMbk:Ѝ/qwV6&1{(mӜNc=Cm1KniↁS +-oLnLq
K'գ,a:#K +"{bI +`xלKfR SbE^.J$IL ObEpNxI*rt7+נudSqQ8IԩEE抸miIHL&o_9d!ɹ+cVމ#|8~.(Ĥ\1:)ZfԘx6ĕ+k@Pxr;QmrC$V
|.˽2Z Q5Nz-B=7x:Q/S)PrN8dn͘J5*!m@*'~g~:yqLendstream endobj 5068 0 obj << /Type /Page @@ -19257,26 +19168,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5079 0 obj << -/Length 3465 +/Length 3252 /Filter /FlateDecode >> stream -xڥZYs6~ׯPSaxU[ckqyy9&9R_}[[.yp4ЍFC$?rp.+k!Y4\S\:~'пYn7o>־[nbqXVuws}n>lVkG[%YF)ߝ±4|cн -ugmIj^Xqywh}tԞh^H!ۮcFXbRW3jj!瑽#Q5w(̖zeC͂.Z+?N=E ś=!2fv-=eU'Jd(vsSt??pd{W,1i^v=+З~x߈|-nZ$hY"]щn״k(0bXvܘSl-}L>bcb1_8D-h3H)g-Ͷa튩>A{-
2熛?qɁgedjj2 -^]>Z.P>sBYw=%J!ڴsŮA쯢ȱQW+rq|͞ -Y]v{v.
S!M)375j?H0,}uLɠw3KDV3=Z!|=p -d97\a'A^э/ c1DGA:1S:X%F#hCF͏H*ἝYӮR@ - -Q -N+ -GD܀MN Nl/Efm]K(LJ3d)N pO&6Afװ*ao2<ݢݗt6љsN':{o@c+%O}hP<(; -74y|1*v^R><Whzt^ǔtX ,<y2`oY9_l?qN/k䙁7t -4P@@4`P<P{sx.$-&c0ksA{gQ jU2ш`xa"Zh6]fiQ2ΒtI~ۂ7}Q -\v#>lD3UGv/p :B!E*<N,7BXM[&xߪ]juxD oI5R}qm/^pW,D/s+>7
~EގPқ?q`kF[PqM\k#wN}uX[cQ7
]Q3eG$=8a \UvpD-a
RdcN,uG"T^GQFt\aEN3u-TN:D* O
GO=WB'Y@/ ncn:anFmL֬(^-%yNiJF o.<3k%q=B3l444iiVDBڥ?81_LVu0gC|ꤖ977\Ž:}'28C2XWϣ@G;)[(
$[-bʪQ~2L=q$N؋殺KYmǴLLJl{\HʥNe'N2}yݞ` -if&6#Ӻy93C HrH #m5
lgzggg84z]Xdxgl/ĭ <J03~ERw -3 -!USap8)] -ݏGRt"R5f<hzf;e5H2 0Vɑ*Qd'/Kb8h>o`AׯrE 2(&Vkw: jܗ)T!x
ЗIXgn94`jsy|`l22n$u}zZ +xZs6BO\/7>7Mܦ/V'7D-N)R!()'wN;1X +^]^}тGte(V~A<Gn@"s+ +ŎTe@o.Xv;,E/R}GY|nKFG"u%5i;įZlfq>c&5%5m>6~dӚG)'83{ؘ9 ,*&7)Q:
ttW/ixUEdbF;{~T%/ʴEX/p[. 9PW#rUm(luQY@ef +e;!:KwC[
s8={}7/4M&2hx@xBL-KCQO0aIDd2kU=q&4;S.Ώv98lV~:mNj=QEIM|^ߠ^d{#p +"(1S:`.Kj
[n~@Z^uDjfϏr^yCℂU0f# ++233ΦIȫvlY9]ދJ +. +| +Ki2Ƒۢz!Jiy5JLFZ!\ED&%(
&mlImA7]QD-v$1CԘ¾pm9s$\L&6E!k>qEwAs aF&4
]c=Z?2 + +$˽l1]X0Cc6[
XD. +aendstream endobj 5078 0 obj << /Type /Page @@ -19320,26 +19227,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5089 0 obj << -/Length 3839 -/Filter /FlateDecode ->> -stream -xڥkoF/GPiqK}ޡZ-"TkD)}{S$t=.D:I텷x.@d5QPzq'tP/ߜooeZ;*q8Noʹy}ܼ_sG?2/dY@B4}o?^xN3=Wr@K݊cXM<"la6pu!]Ezn'`R0HkdBy_jyVN'o۲A:z[Y{F
@[Tٺ/aL<b -Gb%RB{)+?ǦK/kh>?𫜟jKȟhv:ie-\aqf7zO摿]
/;FX -y.&^0&CEJə<[,j껯p1(Xt2G%n{IJx{Epj$E%ƟKaY- -F#*[H|ζjDNɑH BcGbY{4uqYm4?\9p#t,qHrg~f(F.?IFݻ<^tܐ -s<μ0h&`f8-SAq'`
e>O쑏kFv|~Iwy)\ θퟞxKyl -(qd ]g22ܖOe14fg,gjCnW$^1I>o22CҜr80x-T)[,+
5YlX| -DG<|i
S[-YE3 b1Gy|s_rvXUNl^pfȲkN僐C<N${ԆLރ`(Fi⸍Qxw}7)c-JgՎ()L$#\͜Jgj@Ԁbͣ=Mw j*B]<s-X#K;0omvSZq0d X PȕˣqD'A'1[:~ ,O9Ug -n=˹1d@HehXN?qL`GlQXYm#oYclOI0¯/p57v1dӤ?~x;)FX& -Uqx(d@pEҟr+r[Y?6$ -$ -( -``Tڴ=|k.)C{%S(>Vhb)wbEb-9~rg+Tܜ3fAʘsu7Vqpx"3*8)&@'MmR֎dX%Fȭ9GQBy_F?#>Ff;#ysGgq.$^SPd5=%18kZ>#[
lՐP$%Ms/0F$W*b< |,vzYoCEB,+̑}jNL7hizO9A!*K -Y'ȻR o1L=ͳlA3GTgJBj|x\> <9Ql_sʜ gLItarŌNs#|s.fϺ -?%$f:0Gk%({OI !YyDq
cN=_p ÅNɿ6+1?:2nmg_
4&`sjPģy@R
6EIH)
0%\0'?MZ9~ˏR)̅/獁v4S^߷.c -VBA6/x }>?2SGԹ]ࠌ>]^+t`=0$8"zBi^Ja%_%Fz= -}~ʴoxSuK@t5endstream +/Length 3649 +/Filter /FlateDecode +>> +stream +xYoFݿR@Ds8<S, +76n;.>"%HfHJt&@8㻏::OBy(W'jwo`3%yzQSܝ]# +Ε^z~&W˫,ZkG%bljB9/^T@R9ׯgxy{s3--~컻D߽Ù494=ߝv@K:=݅s^5@,U~8Ǯk +l{QPVs0z!Nn5V} [QxibO`o1W8mO}gTzÅy|CkMI+kr62p#otđ5f'[^|`) Gs {} /W%GJB|){ǭUU5Ns\ZȤ8bl:I\^-B8A5^J;,KS,6ssONkeGlbw]E\FeqTo^KV@i0Ϩx=m_^vi{wWڦkֽjvyUfݪ^.AT*/<C7Ls& +\a+ρ#J'9@Y r݆=.fI/> +F~@#WUv=:1
pLL5XX8+
ݣG^e-ѬSw T+3t3} PDv + +öԏ +ZC
J$7 +Nm +dBOٍ9n3ёHA#rg'ht-Հm(J$V&:Z6m>{@l5ɔt0z0X]27=Jd>GXL=yExxbS)Hd\^A<y;F}Rb&kǂ@.Hl$c]l:Ϲ(q#߈Ɏ@?#>FIdgȃX/ ĹhOW%pk +0X)FiMG +
6b# ADoٗ0$,U>:nusġ"k!{je
E9,17ѧ[⩿Q~jS!y[h|s?byX~ + endobj 5088 0 obj << /Type /Page @@ -19369,20 +19274,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5095 0 obj << -/Length 3827 +/Length 3669 /Filter /FlateDecode >> stream -xڥZmo6_Z۽hnöKqt-W7ɿyflIC"䐜g=ϳ<|7̲;_QgR,d1wIt{n7w8Myo\a{Hy۟9˅\^A/hBϾl <y$<0>5oΈ)7B}_}8Jڢs5qqNG{y{nE v^S)ۚ>[nw uePM,$͝<C撨nQ퍲y/ ٠w͜B^e涫m'5;QFfL'lі:Th>v0՟{"۪$2?s -yإ-x@E/m&?uMX)]_B0;vksHZn
}%'=F\7Eh3lǺ
.ڲED˶Hbw³/m eY2b#aG^XRs.ʼlv s?ZBH{G[%tY1usDO38Vޙ->H$0diHUYA,=<? O-h̤Zzk9u`q5/zI>%_jz4Ģ_w:jdȪquXmХ1)xd"}+uHmހ<7sVTvRCh/[l9γ-MTr8]5N哞j'ϱl3U^ -U19bJ`FApv`1412۳`Ƥb"|0UDFO9r{.~iWc5A!pgGb'1FԷtN|ꔝC@ΗyaWG#N@r@ϦEљ70lz Tܮ+b68XL4IZ%hJX[TSi[xaf9F(БʖEh{H\m(;[1xxY-:?MvX5ͱ5k;i~fMKU~N!;前q.8ݎa33BImALIWi
ۀZ#8PY -!8H-Y-nfj5((C݉OBu=CT -:b;(dq4cp\qThZ&Pt{m;~SOuz5sS3c텶lʪqHS9֫~`d;yfW7_k5j -eÞ QrE0)d)4,L \@xL.ޭ -C͗E\H5xw{" Ku[,Sk S3М4Qٝ \$7f3dQ:B8;7r4-6MЏ"6]שQEK0JP&+0Ss>ϡA;Lc }Zk(?fX|G0 &k(0#lFQa8CŊ8hrfOGQÞ!Mu;AK3h=N6J>l:l,s()?K -ҎAIB#mPYVcydEQ&'o>wTv9\:aKq"BD+!tǎB7kT0,<=gt!_Kɏs7): a/#ԮvQC*rzNXgM"۴#Hb;^3˜uUtbtS؉>;`Jt1a
bs`j~H#0~E#2â(wr۫b;6
1J -a<cv,*BAlXIP#ߪŧO2,ޡN|^┍hn9CIC;h&1?y/d"
<: -sJQ7|BPlV|BnocR7wXWnZ0C-fsVh1irycss(0hfx[$Q[*ŲPR>@ZОGݩŐ`6E2M|fn,¹<8|;aPܯSendstream +xZo6"PzPaGv;lAG]r%y̐me[p@"r8$yy@yA\gyy~ܜ+,TA`苛_<"(oz͗?^.8ܿ\dY{sw25uz}s_>p~cy\rٗ77i~;{Kp^ߞ~\(7g&_9[E̹̚9DeԈ?ύ;rݎe{5^5 +v79CCO"ee|$?Ivɲ$ڡVo(ǒ+>^`W-z[L iP7rh>ʴ'LbEmn!$RLN? hr ;+K2ڌXYj3 +zmRoG# *'pYt'9O 09e_}=榨Hɺ!ڦKvC$Q
J)x*)':z1N
(BD R jD`+nh_+7NW G<?>qJS/=ZR W"n7*JC'6:@{Ep>|O|8?rL&F=`0 UXɪ]Y#WCV-L{>27AkF\hk3GYD9eV>нTo83A˂OLaZ1`X~Rc3 U/ph+2-l1` ! +Oi +.cPaiFqfyցY^|(IYPaWI:qV( + B8Qђiib7p^n~XIC@ړ 4a! +%춬)̖q'XΖ7{TU>*1"A['jP̴V86YǻQ3RHGuUW#V; +P8ģZb?O+ۑ{Qp$?Gb
GoGJԏe\Zr/930**jعyl m"J +x}u`67.F<rTFs'Auk)y&Jᔐ6^%ș1}ݜT#.p,dȏGuZK5 ۿR< 蓄 +UJ93, +\<ZS(v?ӊgVhQ= Dm(ݎ=CĮ$OVq<ecxe>|*-Μ}g"l̛=eIAq
Iq↙3 +6֡mɿx/*XJ +؟f/g_rXnM ,y&TW~g~8G1Sl d'endstream endobj 5094 0 obj << /Type /Page @@ -19411,17 +19319,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5101 0 obj << -/Length 2373 +/Length 2241 /Filter /FlateDecode >> stream -xڥY_FOs*bA<mN)O]^+DNZ}+KtnyET<Fh4/n(1I秧۟C==7 ǸڨSŹnxrOȹp8LJH?=||O|/̏<g!m)i鷛OV-{ N|RUq4s} 7kͿ(5n0(҃<Os ri8Qx<_iW<?OŮyCx)>Ky7GJ6Yy/g8]{ډ_@ʿ!)$x䶫_6fJj/M?D -%:^=V[dӞҴ@VAdjBR߄ -Χ%
)S.p%amuOcIpw@ {]S/v#Md0]^;3wXu;|H[>UNZ>ɉ#|ohH0 -Ak<lqlG -O74RN>2:Pl "[ܚv|nQ -zAՖ{|9j1zEI`G0g3ܕ8U:EpQm8I_F[QU^)0!%)JU^ -53cޘ#xcte:$qqhy{Z'
z~!9.mQ'i"ϳRi^{c;[QrvIO/urH$\h*Jf!
d:.'!0|.DCVxC)ED.#VQ5}KFhF³@Q,HMVZpa4+'3,^"I!cyh3-ihCe[ua]tv=ԌCs~CVqd{Pnrvn7heBFG6T'zͩOH$)@o={6iD
,>|2
Dť?D_ӴJ߄욳&؇+ݷM;`ab&o|;FudlP^?⮶WGy3ې$˦tv"=ib@0/>۟m&=Dh;~{0yC!aByEyT$4]Dnp8\P'qNsz.bufefj3!wl%ۭ}e?I5W9[qUCwoʃfz\r83'%ٹs;0x}g
H0iQS)=gKG6{ؠu@>k9nP<E]-&@NWm[VL_n,̺ǏEU FTlER.WmLRi/1*?JkNYiF`XGq}8uu jp dvcMRwcd oz_\84fʍT<$&t!pթFEԹ@
endstream +xێ6_
Id44u3fi8lkג\Qs!i͌(>,`/qƳ4EW(o +Kvڳ^;9aAQ\,cz!Rd0@9i/@Q %x2x$[cK^% +tb1ŠT(%"l_ir8hc[o]yyX.O +1jW[uXBqM8pاwmb(ڶ]ꪬ!ů +¯Ea*BIrSElAU]D}Tt+\^4)u(}cfOiՆ%`I/zv:`gWlO1g`V,hi"?(00r +eO= +jBveG)V^3nĜ6hMqx ]x{*>p?t&/_q|צ0ZZ,/)_v7*븽gR|[<[ߐ+. 26mγq[pck3y|+`$3W|M'W-L!Qjt_řcrMXacMAwXI8Uzky PiE`UysI3nuCezD8cm<B{z~}TƜ!\KV%sHh>eSR<XCV;ObK0 +wLZ:~2D/&:bj77l SpÎ˧a
LXs?TSĂ~2HRiIWSiѣ7ķB#5QgI?䡸hUX_f3(IsåRp-Sfd{\endstream endobj 5100 0 obj << /Type /Page @@ -19469,28 +19378,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5111 0 obj << -/Length 3503 -/Filter /FlateDecode ->> -stream -xڅZYsF~%P\ڇرJֱ++}H0 -;ݵ[~p_^T*"Mx:8_2M3s;]pIbq2nvC -a5z4ai(]E,r6z{qe~CW,Գ;qB38;^$vbX,bAlYTL!!aeG,0dwހϴb y)QQ1])FVg\8s6q2oY|y7c|oHV^5̫X.v+ -,;YgQ>aq/0%Nwlk
1E'!D*/"uw0̿e<~Ş,Z6UaXV4N<(BSS?w[Q{s-o|ҋe+i -30}{bGw+`/!!Lz,ym$_˿;#v%s2 -m?`9Wx[%^qU4s,pŧ[1ANxe).7ygYm=T%v,8jPu~%}糂<sW, 2_%//gǰGD -Wף4X<=vloֺށ(9^Is((_ ] C*6ϛb8vv, -P#8~Ќ֊.r?Te~10SAdyxv/OԫJGWWb33zͽDlϳ <%wsiYIaRXa* {yؽ|C -HLpK=z}# - bq吨SW\0ݼsmX8dy>1BtZ{r-BcϨ0{ϳ%P@Q -NN9@$0;hp-")ں^M݂@:`Y[}l:ԩ
8!-KT.JZz݉AxPy[Sxlx[?@/~>pƛ[ nJ4>LXx皣4;Y8@J6 -lcLWw=Z5Ml٦;i@/ϊoz~G~9'ThAw3ycLS\jZ͎irAd]`})]bi?k -Tf{}|8%#c)j]XUzހUUkr0hcOGG.1)x+IL5*BK -FĿ+KU{*\+ -vKѫ(acp+^A[ؒhOz*B-|/nl\H
ڻ@ -\߰K[mUm7i:Sc}@Va*v$ADxBi*'JN)qnphMg%$c&K00#[{ȕ"<ʐނ,'jh^}ۋkt3Gtuz^u^&ccX$cU%>*jQiS/{B -7Z窯ja^x&_0hP71[+:'nާƟ$;NGFx |VP3a5/,(Z(f_tZWp2ORͷOv"1O?̌Ʀ~I -SC:`uiN"Zc5ae|Y q_188W;%5ɗ]^d.hM%~:} .!9DϽځ+Ϊ=,t%9D㧪1˓#1*]`ևif.#;cm1h_CErƧs
"9&r$!4&q'y|aendstream +/Length 3418 +/Filter /FlateDecode +>> +stream +xڵZKsFWhu Te!x^CY%ەf# +c9_c>+dL솮jSdOP~)E&_PERz +-U=K-%&x\߃_"{ԁO +3RFb#nS +ڭ&2r
ʱ2<d6jt)9x-1Ҳ##39'&x-R%nES<۶sV'y<{N_|g)BUcEKvR.NnǷ;1nT1f>[5U,Z>e֛jFxEߞty#OgG1=."DE|!UPUc`vZĤ4Gd4PYxM-H䳼eՊ`+,f8x>2aŕYЉ"S|,VdlI +*VwDŵEF:."L7o( +]H5ٶSpzA9ԣ&&~GEz7 7Oz + +EW?Nhяt/%wF>9S]Rӌʥ옵\[uzzt' sqzGRS?GT\UіK,#<~%X +Й)Wݒ9EZU^騊&'~&Nw)z +LGSSmBΉ}rSWnH*\9s8[+)p'3V;8|Oۍc>B{vX[ԩ30N.&R˧:J)O",.!lKZ[L/Y=( C<*ޓȖnH51Z I-mͫ{ Q;nJu)>f$7}=Ƹ8VՎ +GDkZG83f3DT]wm'. +?Og˟OZG:U+U4'nvqXח==>x +$NW +Z\2xDXR('ZI3Ws #~IԘ0Ȁ}ANmK6?cU!GW'c +/= +57|xOgaN<Mb0'4Eϥ3 -endstream endobj 5110 0 obj << /Type /Page @@ -19550,23 +19458,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5121 0 obj << -/Length 3127 -/Filter /FlateDecode ->> -stream -xڥZoFB}8 -(.R i6E=(%(T7â}hCE -m4e~VLul3jFLQ5hxRG,&"N3S#f~ TX
<ʻ#{!_Ag@N =ȱ&>-Q_j%-6
oHLО#59[tozЀL :g$ȆFi!^Hk7Rrx;O^8@aP#YVtlaI\NDޔMO1u"Tf4 9 -iZ><jH%>96`C>wyVBsMb ;0߰CLk J`>5䒍#6Sdx&d$6YDc+y8ʨz5"jfwz]۬m<2j*?t|L -I;&wUPpeZDQ - -.C8`Fۚ"o5ȴ2h~ WJ8tduc
zo!x!V]V".;YlSrÜV٦p iJywH\hf_gJƇr8%GCF>ձmI<nH
HOghyG29N_2X - )nq.j0fƝTP!:1p)j?H-E0To`4oҾ:>: /RaO%Lvqh#~'Nmo4=(c67R8GC1Q6N20E CpqSB[=!=ܞSJF-4]_rrXwCL0op -Uܵ<sGUcA~w -ɠY91#ɖL -e2
UL(?<c3({(jn͖USy,)9\S{i):OOHF⚱'e*|爇R$^xw -}
( gb4[ѵZ@7DžH _CH! -c9̡1`'ol9߂V!ӇVhC6ٰBS/irN-&.i;h -.wOSIYt ]obYLQ
]4bÞ܇n$X$oO_BxaTzC,OՓԬ판tGH߷f+m?I>yK+i#94q_ܖy9o}+ +/Length 3039 +/Filter /FlateDecode +>> +stream +xڥk +P +V\"$NıS +PĆu$Z>N5mli^$ML,vՕo@(ĭ.R?]lnd6__1Nrljڻw_y78xzð<3_~|wfD*$bw+&{J颺Q52/c=S3̯l U^ +:®ɗ+ePOremeGD^ez沶ŅM:<!0$oO~,MGж7r +Ab2 Aغ5¡4+g_] +<Ή0'-,w6XCqE6pFF|;<k%d|c_+[j2Ռ8!Ҳڠ1 |0y{>1u1Qzo@y #7o,I#8dC8ٲ
w-Y zC9m9?D\GbWM+&CQbеz'T]qITbt%W.{^P +rF+._s8zƋ[""k|U3Ec|ka'0vRoG*Q褹>Mi:ic|[UPxI$b|lL|.#5ݧ}=RgQ!x +n[/۹;;F +Q^Lփ~gB['f\R@nkQ7f +4<nȃplgNfnp$#r͘D0xW|S.+Jg}z$a{oc[A|}|RU>/oN_14hm[BQp/w}n5@g<]p?p,`K=}GB< +0|O +|UD'41o?Jvgje"dMzt$9/fpj#tD=Ԩ-b/ǁ/e! 7嶃C'UEK[XQ>z9-) psc[Ƀ8vJR) Cy +KfTw|wGcp8Dו]|U)*xRrʹ0%AX:5eab4\(
)=k{ځQQ +/b$M[\8z]9 Y\ULf" vavEYp_/'<8RX +Il:~.0{)a=o͐.b+J.֔ endobj 5120 0 obj << /Type /Page @@ -19609,15 +19520,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5132 0 obj << -/Length 1841 +/Length 1821 /Filter /FlateDecode >> stream -xX[o6~02IaҮMSY8膮hJt%˶uЗ!D~Ccq؎HQ"NjbWr9r
L{</g7?v;ql~ Ƴd*ĞL(^L\뎩7W׳K@t\vkLW//x&lginz!0 -;p|K^t2
YUG<S.Hhfu<˻f*eE-O"UQRȹsܴj@z}ϛMU,r`ϼvvYy̷ڪƠWgo}'YdZd2qq15
";vv("<[gE"J+;8xxUmq[lY<(b@̉Xo(],a̻LiMgWĨ6,Cf
lL65
7r:Nbf2#ߒ儔
Lq}tb"ZJ]8 LQYy3Gd ֥0V8!C⩁-pBZ^륚g2RamNЉꓧ4JN7g")^0Ơ)5Dzz 2MPb`Bs -%yr! i.uVgqu&bi -|C"@3G_SRtG"c.2%7)GȣPXE] *c - y7HN@Ux|26IŪ,xKfó9DY?ԧܤ=rW%I^%D$xeZ> uRF0emH;HcܺҼwe`2A Cä'z_X1 (Rʴc(;ܯ>z<B`յ4,P\7sڎ/7xy6@hW*[`CM=\2NiMTX5L\(P^!4{^=u%wz"زoUMG
,oWkPT9~Sݤnl8468~% A7slx&>b*
CDˢ*Uݍ6?]Rmk: s2FnF5б֮ĎSU; G8'ʊZJFr=t#4A4&V=7葯;" -ټʫL}o9ab'<@]O/F-2i3wLj8pӅ#3h!'08Tp7)\3@yXj +xX[o6~02IanMSY8膮hH'uw.";jn^?<<;WiȦI"MjMװr>-7
]/pbr:f^6]"zsvz6B8~I:nfsԫ9B .|=K`˧w/x&\oqvbja,֟iN<WdtclZMHQ(켜L~Z8e"Jc.<7M"Be>GAl6iy=Uf vHXz}m?˻[fe>+$ԇ+]U6zʒW#P~iպ<me#2F[%!Zy#V[+ܷީ֢_o +7~ Yd^Py@'0lBj7 i^l +"dN<;N +cDS]$r#:GfA[YdzlKq8#CipFRBAg2^Ў)s}m1FX({Z됒C;GCaG0e(!4$&sHk<[LI(si +]siG aB] Qd h$H"<&@+Y2U`C!\F#KiK'p:=RX dr&cSEB5K,Mc,hZ(
}o:S*&)#Fr{Her'p :geQ+#:5Z"̹ +b$=`q.5ZAaҺpmACzw>_n[q}YE-/2ݝh0qar<z](~'VʏRC_@v
rz̽ + y><HλDw +xb:5-窬XnɒlO'biu]%BdHNh'H5˙EV68ecI{(c +Y}[L0$F]?uEfs86ALnO.r~=~̳FBIf$gaڿHX"XD<睞 O[jO<o+hʬt}eS2U.vt@W-I=ިN&l4@]o(5B5;h'6AlVSLR<,p jӞ.kNJiDjxd<tS\aU(b(95?nt6z6{r$w{xQh{xʰGmGcW}G)nZ~ endobj 5131 0 obj << /Type /Page @@ -19640,31 +19555,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5137 0 obj << -/Length 3112 -/Filter /FlateDecode ->> -stream -xڥYmoF_a0BCrڢť6Mиڹ|hZZK)R%);ʯyv)ʒ}w83;3̬Ӏy8Wy~:[ysZex>yc_nďuz={ӫ~LR^Xiлo/WLpӿ:ɕw
W/?ߝp=t8cuTzwOh!MN~+]\cX -s)Y%Q,*%L'i~bu[}Y/&$Jom{ևwoz?
YZz'gf>~sݛ?,p[Vg|~_nunkjXNS~Jˑ9h4J[պyvaOO5|l+g9-.isS#K-6=C?eoK>`ݚ)^ӂEWe'tiz{sSoD_=/y7MIR~q$N〮"_Ex,iXbԕYꖀW9<ʼ~iZ;yK|MՄr,W(a5
70oJuaL -mU漢0`~A;' ՠcKFG=(xo@= -L=`}Є(B:HfuW9彫EQ:Oԣs^ԍ=OsI?n{w=qzGA@$# F@mkϠ,Y2W5E[r8 -NmW-~e) -{э]YA[QKCի(fcy=[xh6UJF -8$4Wtt^Sm
Z3|blGGYv<r=uS^Y - s+vD=uH$|\%hODBcJV*~p<MzO~EB̷=W&*
qcid{ʩ
fg5+eTa8~6=CHJ:> -sՁ B5+QÈſ7]YN&B|e+'DRs-C.WT -HеrfQ+P%5Lxb٬$G>.:pl:Po
{#y -i2(o\+Yɜ -.J -hIK-.6 -JN"AOұD;v;i.{;-? q&:W =3E@&673ɤّ,ǀQ!@4*_Ll-LϜZM -頻,Rzff3)G0.=ɱ/Ag7BƚS-s}SIKY@fs;"E<
8ni#أ5k]3 ٣V^<EC&.̱ ɤR4&c^UkMN6ebeZݚkˍhB]1H8?Cs(ɠ,nqFjhA(ZHnvq>BH&ٳW" -/ -mۄ%E/ 5WN3n$VꍕC9 -\yM;gW=^/?~x8۫"W}˫W:ŅP
ϳ'TDxg+EZ=!]xGvN"dSmy/ov3?NFP=a88( -2%ęxڶv%%#cxW=vUBlZ Dzv<4͞Z!?.ǰ"˂83$6;j8!
Jr䴭znU -&9 -^BP6uo ^ܶ jGyV Q1߁7J#V:ѬăÒåaGؤ̫Tp=JXp*pصBsAI,xAƉ
ijގ߶Pٽq^\J<5܃3,^]^9g:j%}ٽ[g~zѫxHȏBwy_oendstream +/Length 3062 +/Filter /FlateDecode +>> +stream +xڥYmoF_a0BCrڢť6Mкڹ|hZZI)R%);ʯyv)ʖݙٗٝyff4C_l}.$ii¬oO^~ƧaAqz^]^dL,^~{{1C%e+Bo/W?} +=߯ߝ|w=4T<tN;wOaQODIl::0x)FQ~Ϣp +*9r +^NIx_;=o9劽LodM)i̚Zqfj:×h1vdEYtgh|
/eٴ_5V~U,)B?%eKhd֛[պyb.{xGMߡyz|w۵;9aN'.i{S#S->#owsM,HtgdM=_m{WMۜzw0$QaiiUaIGN\f}8iUƊx*iX}BL1~]rV%1+<'Վ[ׯLkkZ'41<cG>OKnyQCbRxo{2E +cC7*%%t=^֭^\dXVEi;̨G^3ľ- +iҩ"e;{fńPm1 "Y*#LAqAqaA)B#'Q۬1X,5,4[Ɯ)cV7S0@ +Qv5of孃6-p +zu2rT -".{ +*2RBoIfm,z? +j +r@/\RKdkv$Z2͢2'NyqD]`l>Si;*6:
aurb.%&TvҎufɢvKseA⣤;8XLy*F}*uӮ' +$ʦX=14\-[8',!f-)GԾ/{z)[6zi$%HH*$cXeNj12naG7=ՊV.jo;MZWc;#B"kϾ+`$wPiڷ&6K=PֈrRcQDQ*46 +#ĽίpV-ZA.e봺:sD}3\2ivz𝟵M;<O'>ad~DQ2e>syJs!ѱݳ'$:xWrizBiQ +ܺ=Hc5Ny,Ǻ^pM3UdF\щ3T% endobj 5136 0 obj << /Type /Page @@ -19699,23 +19607,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5144 0 obj << -/Length 2974 +/Length 2840 /Filter /FlateDecode >> stream -xڥZYsF~ׯ%da0yoVXty<@HĆ$ -:/Wٖo`Xx&x:※m -:Y6_"E -aGo-IQyWy/R\ֶkB}N˺LTݽWvS>F9 tF&?,
؋;~'k; -:GX>ZuiRvp<iƟՎ]]tGZ!fë?-mMAaF -ceH:x@rf
[
̑?!Q'!o¤3p* -g1xXq}8WuA½50ӒC$S_im(x̀$K}ٵ<vrWi&"$l8VnڅcxC*%N?tfq`9rYo0KQe:AmOA7xvEk7ؙ%M:^ۡvK>Z!: `%7 0#pqwXphGm|xγ2~@h6.z$6(9l8`XmB$ -a'gУ'㖜!捭980C@t"H#5'@Ű2x@N|WngWtSYu7iqD/
t2~x^=7:lB@4{̆Cc`0)b)}Z!+@C!*٦ءnz - >Z?Odуn3|Zgi8֢ -G./J{(k)f,9,{4м -!+]|>ZksLX/lV<(tqiHzx qw*bPjȠ?^0REk7`8m E5zF}~`=(4h1 uD\H 4T6HF2ؔKa5=RL88>hZ@0@ 7|8rEʉ3dZ81q8+R٩k4Xs7T!}8+|<WO2ȯ`L{t(JqIFD.`{WL(;{WŪTY"+c[;3` dž8Ì -vwG^ى0Ϯ/
[JO)jU3 -RVȁ;z2_*upD>ăhd4d3|P}~2i:CQ`8endstream +xZKsFWp} YeBlśUZ.oUDDlHB@i_Hqm.r9ϞOͲ8u>K3,wgf?S" Lbz:;{bf*0niɪy~K\bB?˫30柮qE+^ty5L~5t.~]pvq4I4Ͽ8,t*g3 6Z۳g/D,3T<!zT +b$4vkVm,7X/2w$[m0Jn %79kTՋ%--vͼRa%AUK;#۲`pso`-d [pHW(6A?l_7n#X]p0Q4)R̯rVHݐe)ќOUEfWnZ(Z"piYUu7¥VxmPNI_'$mࢱI {K%bsF^6-y_IZ*\ &m!dj[^Xe `!"0R1w]_w4GRqʙiߴl50GP7@ +ya{F -ʊ1^6W<<&pJĭp=180~C}S+kЦ#@D@:#eMOc7 i˄sCIV7 0Tm:SoKx1.gLn~@+G"2bDV +-5`#ӫ:HšAne B +4Ch{>L.xQ +R2P)aK;#*]EH(&V`*9Sdb$z8 endobj 5143 0 obj << /Type /Page @@ -19745,20 +19646,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5150 0 obj << -/Length 3834 +/Length 3628 /Filter /FlateDecode >> stream -xڥ]oFݿ(D%)$i8XF -}EZbM*Iq|r%Qr |/KIz*'r.W0,w?﹩^.u"7"yۛ3t6'2;w78i#]}^{=z?]|0;5{]?/~ݻH?]xJ'h{ÛاJſR<^1D*qD%-rGy!]y\ͮ#kR+G!. -6h]"h2txH_ȱ}s@cG1z:;b!B`Mlc! d&fy4;ȱ_6ꥦE^D8:6F! z^n2M) ZBAEHqM/'Bhao0?VX8?0)-&?p\FQ=Xrr2_[6.lS_̦<uѯQ};A#P@m&<mEf =ł(&z`;k@{1 -Xh%MQÐakĒϸϋy=ʸdme`e.(CAǰTb -]x;DqA{pMG|^!J/?*iKd=#) -8Du7I"H42S>WIPff:=pNEux -8RP=I0fEAE9#rђPl5AἈ|;|gW&cʪ`ʎ^9NӺf*TFx^'
\iNrW ʎ1'r6;n9ցH@UTDp$:**y9Ve q"DZ53%gpⓔC/E1~c*JYc,l3r^K - (鹤Os:t"s$p8$67XĮ1Gm#-8~5o'b҇t}ž=XAu+7)zȹ֦F=lUt`RVƁ)a Cqv퇔6[ <Fc+u54+~vL«;OTϿLNm 3c/Bo&ЇINA<mNOy_PXcg=ɰualRۑTNѹ6KÚB_D1q6aoN)&nP䰐NFzAG%=76C5ŷP4vLp?y_Hu%qɃ&qkz,iA՝{)vэYdžon}5&:<\qHͽ֥TإVDy=8Z3\SoVJU)e_[cMEᴄ^*XHg$T^sPޑ#?aKs-.z]}Ap 1"y#YAHIk]aHH -_'ĆGdT>XƭHjN -7^8O?=z5endstream +xZ[oF~JCr}M]So,#>EZ"Us!e,3gg;ggi*Wi:ςZޝ#i?Hblz>{CgagA6[Ruח?,J)/rJחлbﰦzחE5w:?4xk:~=R:Q?~=_eʁflcZI::GM~WI4[OS'\xc6yw۶99na<꘤~ǖgח(
boz?-Qͱ-SRa{glCɀ֏:{;S&zaɛTrl"2xS0"/Ǯ8ܳ{r^ܚcE{LcSЁ6WL2 + +ॊ=|
:ֻ^c-Nq6vYdpGh32Ȥzg]QpgTin{Upr\V{S,2OA{kL81ۑt +
[qp}aꎋU}899YLhckԶ!n~Ek{|`n2]''],TjqwcL;:U'֦ȹ95MGgOl&ErGbpZ4CeU|>T^ح Ya1:N&^yuj;rW[S5KݢjX \@9Մ3܈mb8]FN{9y8)F1)jF>p#ʂ#E
[#:8naorf#JNc+.۠]t=o^S)'C90ᣘG={ +\Z#X=BĐVȣ9ʊͨ%@QoZB +{{l<0e +mSXZ"H$@ˁxcT +)UcrH"ō5-z4 +_l!8HqX@"}[q4@ +IDea';i֑n + +Óp1ܗ2$ bᏋ'Uҙ0xmq[nBa *)6>ȧ42 +1hooXǽHڏ8چ
EghRic_22>g=皰H''ygdW>R :RHj"}-<B,?7 +wڏMYcYAIϪyj|L`K`BRk;73O);n0ē̥H' +鷓;C zZ224I(^f-Q`R揤0C4 K4^/thi^ryXJ<2 SN+>ظd9:fB$ZUx!Hx!'.Z6:#hG0{DqF13vGJ +&6]7uWd?m}^ڝpbIPsΏ@v65'_Xi-?g[zq߳(M/я%5rW~Ȅ`ew =g0ʢP4Mv2!e2aݳ攴l +l[SrC&MV$ endobj 5149 0 obj << /Type /Page @@ -19787,31 +19695,31 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5158 0 obj << -/Length 3814 -/Filter /FlateDecode ->> -stream -xڥZo8藓X+=mf#I+vcɎJr7/RR-[p7C"\/I MݙBF4/n~x幙-n7
`q_ UKpWn]b-F|.ewC/s-pZ@r"%rA. -wg ԫZV.xܮDAFip-*m"<7Bڗ[SB6갘9k]װȦ瞻O
^/Ĺ_ؗJ< -!Z8{l(k$fE58H0?*]j}k!-V#+ۚ6D^A7jB3Ŏj,swD #$[US!ۮz]о@o[;w8}<yÔ{
->]_}ZpdpŲ8লX7Q%>-GVЩlPb):n+\X7nK %kh2kvF%xqʰԳ͓6M><u>w|q7Tp88ĵLBBY"ތ[5r]kG@ruԫ -Wju=vܺ;ktXʞOt,gikP`%nTg*sgF KǑUѐW/廁1CB+4\^0WxZ1mx&^xydpoo-~3a -"Evɕ
43٬,aV`Aٜbb{ߦVL7!5U=Y(hj -N6̌<ڮD%}f5 - -W^V+QBLy8öջz[tM(`[f&Ð|%fxMϯ2%']q SDnGb/%"=H<5-rC" -n1AxjrꎅgX'6b*Fkう'ܜ[˦\/;MF-#Eޙ<cqa.Qh=]oZa]`9KdIKNR)֚,v-Q9HP,#
%F%1QOORа/Ȱ
_^xu -p*t*
zpвQp2_p+)alÌ` -Y9ܶ`KA">~͘*n6[=UHC? ˬhPWTN!*W -ǛDbH`͕6JB2n"Mz -D `$ɩO>~:! -6 ʍ
*Y֫92h9>CpfT^G%0Y'QZEBc>:-$BS8f2֣WhN&"DjfH 6ٞ)a2xPKL!_Y[aA)£9/a0%G7-VDȮ)>
~+y fQքyX+>vJCBFr
XkpjA[ zm̺T?$2r!wANE5s4]Չc:Fל*;1v~f4|c@[!0 p -!'x?3F lmR7Ӑ:91yYyM7XO!xg`enų^D.)j $58='dHRkܚ.UȁBPfY42-`X5pS$]Lec*1ҋ Fnġ2
)C}KD$J/ |&<g-,%}Yc -,X<r:).lS|+BH2zK6##ogI;hlieɴ -lze$۲6Vs\̘`J^V\_aGnnyFc 2) -}U% PV%] ҜN"CLx@<2ga$ٍ`)+?^U'gOTTq2IRވĹ [_ -HM(9b -P@ݞ@G&MTjYa4 +)ˉDPfS
n9|k~
I@MXCsҵ4Di:ʒP
S'p~^Mˈm9MX@w˖N_s$l<ƠfV3(KL87wIG>n""GSK/]AY^z:7iD3{FJqsI2|H9uGL)ǿ-#4
v.xnq
º(M?W,cr͓b@yNUz -03vflX#(&w,Ȓq2'Qș°kM^ +/Length 3750 +/Filter /FlateDecode +>> +stream +xڥZ[o6~e5GD]XN.rEzHIǻ~ύ䑽,yH~;/<iz*[$4]w'b5'V9M.|ͼlq&7ΫϮn^\)?s$IWsͥW?_| +}Vy*]<r7?I +0V(֗_9HӉ,]Cs,[NHQ$_\ӎu{,~`R?م[| +ЌmܝB#s
6[Ua?!ۮ|]о@o[18wFw
yknyנP;ӵB+՛uVr[\Tk=v4x"NQs6(BU +N^%4%kh2kvFeJ㜕^S7O&4- DcO);|C 'ɊwC\KMhuQ(DTěrOnkm48c#.xKZ]/-WuN:րӾ'i?˙kiP
!ٍ +\7٨`]?<U0YAI}7
Xn7 @u肸>C98%P'+M +n4:h1FUAZRwY}_|0k6|XEC0H-j~ *'{0RKyZF5oVMS?qb?`Nyhueo GX"#䭱 +*{˻4ɮ +N6.ڮDjEMģ4հ3H} +kEuhǧaL/C +] +tE5 +|w% +A+9i1)BL<zqZf W Q#G*,1 56(];6JCE +!k0OA;ht5 +$2sAHE
9s4nSLcyáB7K>[ +مf)5.uCNH}Ne"іKo!+HXy;jyLw;enųv8nc=9`Nq"WpeI0:orX=ZSze^e+GitC]y-T0 +]?]tqR@!BRl%=z gLe;Ucz}t aV qlJ0rNqzxđ7?MOL1i܁#$f0,V<wL"BDtKFK>)-z͂g'"6\;4hd̖=_9e蜠#3B_ۇν. +oq@Dn:t|(U'`NiLvJs߇(6yQD0Aox- +<383 +F|3=wI+q2ػQԧȹzGR$6<'A韊iewT\& ~Ǯéu/9uendstream endobj 5157 0 obj << /Type /Page @@ -19847,24 +19755,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5165 0 obj << -/Length 2373 +/Length 2333 /Filter /FlateDecode >> stream -xڭX[s~ׯ 1Hl7vIŦ'$yX - -V7Ax&Irϼ{| -as!O4pv|D~7jwVShZ`7
tkz@>݀n\|ŲbZ[K^1'r߿d.Wj${ g+u̩mnΫ?W - -4~7SA8 -9|T'dj`(>6ȏ!7HWq -~bah{I;S 4I_ݶDsX@*+Oz -CGG#V0u.o8.x!" ,8ᙾƾ}4+뽰jӚܰ%bӥ#m=!B{l[3[l$Ɋ$p_j"E͛3HGI8y
'sO(T2CcOE9n1x'IR#ZqlisCB]զL0{p:үr)E26ʛ
}Oӆ -蛊Rcp THtkktd|7 -C*W&w1+(Czx\Q:z3N7P&3 -ሑkTռq8hq;aND x;ذTbN>!S - a^0+X0fN8-;
/ސhxiHhZIWQI7)n q4<$Z@0GlzNHL%^ujYCc5 qQ(eM˱^Oq/jʣWC"_F, -z֯V+cx؞WyR%O0KDP6GޱS#4o-HZzf̼)'oaf!g#uϿ^}
;Cw!ƓDl`TE|Ih{!,UdՎ:H.'::h=[rIço&9@؇E/wHz| _C?AN#0R $%+a6+<rT`afM-$Hg喙 d"3]q;g*py7O:^a 2Tɵ.d +xڥrF`V0erأtSI- +â
ZQ~o0Ap.Sa`^}75NA +Qx>`#$˟=an!ndq89푣RwWm`Nj$R4?
¹aAn멸 AJ,._R
9w\oSyAYNh +m֨^NhQ"9G -̜{(4RrHԈ0)TY Uu^q;'n +}BI~0h39?݀1Nwǁ,c6,F_nžs\ q\^!df5ǖ_ywZtݵlEM!^erdUhI0_Fε kEe4yx5 QlI$0K{ +P=ȁeb)=ņQۺ[O|A4˝mOqDY7!oYWbI(Qb$.#J^;`JuVAgF=ԅ^'HRSڒ,ʄ4t-*@sﱓYn"BOdoQ}dEOZT[>,VO1КA9$i2xR]Yo:tYB>"Zs#84m.TK]cRu_Gr9?uwt `q 4j'7(J7PtL@A{/^defpH3o2RS-F}xaRs'B4B57NpTlfwmؔQ jM=Ӧ߿ԣ02=JMA%CUw\eH;oV$_7|%+eme)t7ԕv-4n|9!Z
P
kTwq2$w"Bܯ)o5T($,cțJZ RPqvU٤'o +endstream endobj 5164 0 obj << /Type /Page @@ -19967,24 +19868,21 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5177 0 obj << -/Length 2213 +/Length 2119 /Filter /FlateDecode >> stream -xڭ˒6`| Ue"@LL*jg!Ɂ#QcJIcU~> -\%[B~M}B5l`Y7>6(aR1?"g#ZkdEVUSgD5 - -$ڝ)zReQd_x)!Wg>A10EjT㩼u]q)&P'[nTtΰ -| -Un3vb^" n]4`hZ-]A&
6 -iW M#cD)bZ-O@$HhTio`r?WYu%ެ9h[<oHJxj^=WUfb9Y5E2$(nnPˣ$7ʯq"O8i[¿&]|IZ0.X;vAh)]@ -kkJm_|ft# -Vy#geǜcɆaYMYY7jriSZxm]K>RNu}p!/ծB,2\ZQ5EcK\c4zTv
(nU4~X_[})e_1=L͛CœJIY:t*:btNข,E'Q]Z"xO2HTfJ.Z0t},ӌ3Z -lSE9U0{l:ڳh|2kл"}ڝ{ƶ{ns8BJ J(\-ρCm r:42@r&/.B!]$tɅJ(!57)tWmUшXke[hOu2]SWx:3]WSnEx Sص -U$gv bn:X.b -!kwh@^rfZBZoQS5]/fj}ڕ_jۣ; gs -`cFlbх{hW^&}!c3qĪr~a"-#
_M=TN8o%r=5FƤj"1L̷6iOeH|3oA>Ǣ!/2`7
I -kb \7=Y[) E(Wԕq@2Rb(8WWfiR/$PUjNZ8LOTJH*JPZ<{&".L2C=Q;Kxb=ϫ+vP` vG8W]tM}QcܤIQ*/({(6A7(("-yLRZO{~qÊO`i[s0u9/$C>"Z
ÞLhA%C(I\M7sRݕCs3?JPV`0 |^
5y@ o3U1Coo~~ڵIj~-*9cϼVqMUG#-R̃QJ(xA)!=hP.+tendstream +xڥے]_KP03ΓMu%+W<8FB*?iq|T%7'=kDS/Rhk~z[IzcWٷ?Ƒ'CrO/ڗIb-ҿ-jHo_^7-_7#HDF>+ Y(tjGXBEFi^gTy|jARepT"Tb^O +`vXO@%p7 \KjU][ma͋;4+@X +ie恵ܱN"N=Y6Sx! ѨqGd@;Yv!r'?PlYx2;ltE: }(m'SiM,5ː?$xa*Jܠ:Zj22힙G1I>o_! +"+!m;&]C>'-@""2q.Um"w:%VHaLOl-D) +0Fv9>ۓ/l&.g5m,r4oTluS8xMU>m)'s]:gLFg]̅ϔJOR+I|!S%273~ + I|P@mNl*Xِ K8<((Xa0M?vJ֚EfA¹ḧ#3$rxp|CD07ك"=S=1Mb ʵҟNں*tBgJ:Yhǃ׃m^*%Ïjݱ]>V;FB<˾u{?0xÂ2*D;h=(0c7]IjWS$^2?U<-V LHC^uG˂J0$DE=ZDKwS]35껑b듨7`4=hePNZF +[-d|]R/x
'$KWd-ZIȹ>VaXe0KlH/*6<V }@jf<+R/F[l|p*\>t:uIM<Q~,',}QHDq-L!M/Q/=rqJ@ŵ4҄"NdO
-N6 +r~uI}жX/ +4?
M\`LF44ylHaH.ar2%qYq]W.c9t<:k7<pf2Ape\Bfw4+9gx4S[_O>5CI: +Py^]rpQ/yg'wKD,it +:F/UX,` endobj 5176 0 obj << /Type /Page @@ -20071,14 +19969,19 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5187 0 obj << -/Length 1390 +/Length 1328 /Filter /FlateDecode >> stream -xڥWKs6WVjD $Mgb+$ZlNdR!(KrPX.oaHSAiJ4
V3bDE̛{JLfr?'qbe%|bzcBy\wחW˫bT&\՞72Bο-?-GKG1Mq&R(`?Nӛx‵NE%1HRsL¢F%R$2,ѷfFNÞwzS#>F/ [9(մ,"Ũ]p]*\!d'<ٵL}FvZ} c~[OH0`9HNpp\gl.::Xa,U$)ʟՊwX cZ6 -C&%ƅ& -syl'!!), -!l|A5؉G` +xڥWIsHWpT5M37'8Nx4|JrYT$P +PDK_3gRu(Yk% +V~BCaLd; vrueރE0g9J)@ + + +3&gѶeGhJ^(9y[Ծrаظ#`#L +dѻl>"6([\jIUͼv_vٽCՔJNC hY=lxJ8[lSˬIUTaP-K. +]alL0Ktnz v,
<%Rt0X( +^(_̳9jad"MYHpTH#Ub8 |H0qm~Np8-Ă=Z8p" !1WGG)27b73O3@|Sk:=3l endobj 5186 0 obj << /Type /Page @@ -20163,24 +20066,23 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5196 0 obj << -/Length 3471 +/Length 3420 /Filter /FlateDecode >> stream -xڵrF]_K*Jٖ,˥h~H -PrRBi־Mv-.Z4l }6j`&m @/W Q!DaZ -w\eiDO^Gڙg}#?:P4Ci^]4Ro
ħZxYT|y#L -]h}&'&H>-vCu8+$
lZP{̌;9̳KL֢e!!$_KTʛ,HN#bCIci{+zeXW-=A`꽋\'0%;EUt[9ޑCcOF -:!`A~!2odaRݪ+.Ċx6Xxώjwx9=r&[N6i -Tgy>pDA|A;^1:4o'\+GȹI(`os,8+!Gȶ@=UĞg-puƽ#.;|8T,D3z9 NVd%K4_ca|-tLE^4><X4|}rC7d4l3 PAZRD} -< gD26;
O} -noȄQ.LhٶELgk@ˡ ~wUr{xacCeC9a!4M|mkP|dE!yR -8RlkBpSWUZ\!U^ J<Pk!i
Z^!Fzň NwǘKrH9Ƅsmd{FM|G}hT쇏IMX`y4 8ēd? -:)R;,~RY<E&ұ;K.Jm`_^ ٗmcc<3Syk蛕mͭ*ZQK̅as 00/q]dsօ6^YN<"^d` /*[]؝=5A5j6K12Em窂V}&tar:gә"ڥrnMʍX&-LD4(A!ژ%] r#wER`ix#S[1RRDt5Vja_j9(ԉJ8|Q@grXV'Iڱ^gpߵ"3~>@/DH# -d߶\$чm<w({T)F~wG\ݕeo{ -iv8 _*OWoF(8enfQciO`;MƂFk{2+xHh4q(d|T#{fQK)g*\/`c7Z1/GM0Aߊ/=+ga_~ -_x֯<6~YXH]OTxh;㸜Uqf+8ȃUǥUsK:R6#߂(L;-6(ucqԀDchtm8@oSdpPKlЛ[بTT[2RHvRZ5LUhOQ<`YD1*BjΊ@SIۃP尌N\R4/'EH._7'hqjv_TeZW&vix%H+9P?F-;vzL٩>P2֢튲4>ٺ~[o -1/J}ew?/,ZZs5^{s^~↉/@z)endstream +xڵZYsF~ׯ`%``nmlKR\KZ?$yHD +o^Իۓ?DDyn꥓.r|;=<ԝ8qͧʹ09N4[&-|כrv,pG~?o?x&Gh{J$}7|'7'\0U#:ru
4:ai4z0cf`n}Bx<7a]b=QMp.nDrO]?pAXW`rV/MñJhˏJFͧ Stxai[n6EΔ*ZXW3b/p7^E=ձp?~Yr~fH_T0RtcXo+G+Kt"%v:q=l{ڹmErK<F
dQ#`>!;D28|oĻf.ײEx`4xEO^Gڙg糑=,>G@cWu +2H9aTP(T99h)]<%CcD4 +"Ee,^9jVGV ӭ2GF)1dF^0Y +^7NoG$N܌ +!]h}&'!x}ZVL;x(qWIش`v-X9wsng-589E +$ËВ|/EST(oYZlFNCIci{$zeDW+#W0|Ŏd?q^;EUtLHա'm#<+4N~_rZ##D1#gHj\skc7h:8dclTW$8zMydhhF,5,Q*UhBթ({r%fsj,OtKТ=p-Mr2_4 +:! +h=>=ˌAꦜQЯ$ +lMDw9!Xt<F1!$M6adwԇFžv#07{&,0X!)) ]lʥ^ +GgB-zb
ץQRHa
W3sk7!80=`#7}ZIre@*7RՔfccſtAXrrϗ@}iKFfuyT-I3뚈L6lΫd58T(3, /j[irc$lxE KkbnC`=0!Gs"@MZ5/|8Me +z䲤
$\~'=a-Fc_H30vALc]Åt\hVqU" +_::rϐ~l1}KqrȦMl傘+ʄ$
o¾|; ƤJj~ب{SPjϔ+$j'>/},ڮ(K|Z__/`'۰S/]ȏ] endobj 5195 0 obj << /Type /Page @@ -20204,25 +20106,34 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5201 0 obj << -/Length 3170 -/Filter /FlateDecode ->> -stream -xZݓ۶BLG?'v\gՖv<%G -I|$eIL - -T62ү_}XE3uN+ɲ>X(6BUf-jNP(D:X3R nJ6 -l^^UX֫fn0$
kwy+)%} -cOJ8ҐNlc0xF["(vy"6=^A)K -_zCAIx6&^w@}U¿N\fp#[;^vlV^7,-*k4
Wj-3`[U=8(K I,%rrPMɌbw\TUmL;]$'ΑruznH7p[˦x*os@R^iKdDVhʚwǟwbac -j|j笷][0#my`_uQ=ro- -%|;6
Ab6Ӽ7EO:T5ۦZkk7ogif -ܡoC01,7Y^n6VLg!# #*ȭȄD\cfYtC71W78aٖvGؿ]ϭpۜ?+H8PC:,l7_8JTC16S6φTc(סY-G~m 'QIT&RAg -B>dF8 -!:)dv#)Pr҅ٗk;FfHs}𠖇}vs]߯~{r&*ðU6>?!:=2i4Ę0`kb@} -Y㺗#Vۘ=l'[XA> -]wOG;0|\1|%fDƒ(L}K6e,+t|c8T.jFh{ns {:DV%"9!0@M>,^T'Ǘ*Ykvy`f(11pz~`K(0S2ΐqUqPxw6XnJ\gr5RtyyJX!< 4(4>GO.enFP? ->Ήt*(*1ʣ
t=Y2*UGLPK2t -4$Oc)`Y{j\Ee.CeaYfӀ(fX\rC5B.G߱%TpC*soB2dҲ'cDݟʙK$ݖ=C[asy*XuGAG?0>@(LF;QBh rՆGK'Ѐ@
bFi~G˨
a"ȟ{һ$)*gH)
|q8LŎCl~BdOX1qSycl./y4'=}p B05˞_؏O[^QIA8NB;B?xR&)\2IQWf~;@PcױA#k=[aݨ^9=ԃv!1_Tqf߂8zƑ]ԉIt&S۬^U7;rdm2ρo%<_W"Rs!MaHϏj?Z*S~eVendstream +/Length 3029 +/Filter /FlateDecode +>> +stream +xZ[۸~_V*;O:t&Nbw4l#K^]f2QǚI,P!yH}Q" 8Q$l. w8n⧟o`\Gzސ:zK}KigiqbZ*#>\]b-Fe}ZoYz5qxheN.ru( 0^]|8 +kfaQdb$`WB=}Q;P[YZsa +,DVZU\\yuA'{uji9'"rj{y>uB}<v'B+CP: +,tM%K +_zC@7V7*;<
v|`~Q~ChJi~b[2iO{)nqоup?fmZqh
:^h;DāUn[?]+YQF*MecIsT̾AnJ7j[>M}6ZO
@M[B~YűAwzwy/ikH*p.yrGrm!R4Ѿҥzr<- +KjMl֡'gG!Lx.(o6ӭ5Ugm\ '57} +;^k;yn$ʞ:w/CYCzDI><r +|7ه2c`@6;ߏv7\:?p?Cs*oe$6ϴ'HBf4C#D40?M%OC\KFt8H.NFY/% +"}7篓2ixD
W`UGm|x0k +lǍ{ Qfxz\GŴvV|}h;ʌ0c(fL96 +4dhUpSI+i*%,5t&Y!7Ƶ}NQ_PWW피QH9v:AڈJŏw'k$r"oYHPH(|A>/A,+tb/:RA2-?A'St +]
[NA%b|(hA.;`=뀵PnQ$3D"?M"PF2Nħڣ
'=1w,zNmGfdгISPˠynXwFz0 PX6A։v܀yqgxs2/Ҝiuw{ڬWsW擻h= +_WN7pB%56
i5tBGͿE۲&S +ʊes(,h:+ +'Y1{.l(Ѫ3C] +CxغF~\D5N}p˯nŝq.7uQϼ~rӧ +[cwFz⚛w$ t,
~1Ĕ±k)Gn Ō +ehQ2=@bQEζϝ
;+)8Dk8(rIhr$+_ +ڸ[b$%(|' {.#
o˯'suLDRfMr%4q^7º^U2>[={"ķ<k
vV)mعt/&v +|&8=6t߶g0bot| k+d1RL9lא#tbNlcAadH&=q}-X1&R2'ɤ~~YZ sOY$%yΧx +kfs}r'CYR~\K&WT,FO_8Mf4l/{3r.N}z"1sQvM'+@}<";l}k| l7р6؍ +|G{1'rxl#O7y."_{c3hit{`Sx"ּ*끛kD\NRcI\6O(ָOEG鳦Ygf(+{-0y?c:&FOz|7~^ Dp<D4C` A +e6,Pq_E`UD7y
E%:3ƹw
q#ȹqv$Yo[<c˾i:Ocm6LVq2U +z2H >`:ln O@1
ϳb ')endstream endobj 5200 0 obj << /Type /Page @@ -20271,29 +20182,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5211 0 obj << -/Length 3775 -/Filter /FlateDecode ->> -stream -xڥkoF@q!bK.@KRMKOm?0%HIqq?˥D;A}ggfVS ry~_D[y}b) KۋREa _ޮ
~weǁ*27՛woo߾Y*pۿ[qp@oo8tQh -$?].0.{G$ſ*K.98MEO,J0V23Qh2#pa`bRR¤A`zDz:"oK4pX8CPd0M|wQ P5vXn`;X -9pE}j*݊n NzUKr~~UBJՕa\,Jrn#O(?TL*|ϫ(|EuޗC*w^⯇A {DvZǵ-e_xe bbfu7<Pf|@7ELuϘcʞUr -JTF.tI룣Yd+{R ԙO ?*1&q ->mB/h З7}yVt06k;9h08+j5]W~%q:#xmՀ[/ [f4 ;,Z"мTiCʏrY)bmE# -$c-P w[鶫<)*ʠ&sȘ(\6O)U{͡'_?OU3\hʏ;I]A;`O5h '3JE" - -ՊB/=si߲]J$P$(1a]&I&I2dĢ)%ws[rROzRv;Ok,/OϸnΧ郓vAȸcc[.>e(vfi+]nP7ՔKD{8Os@z&'6 -"QH
' {i1th?E -9œPo\}_-Lokbe8 ;x=Q|50HW`!'+pљnYXw<r -XaIzK1NEژ`6mú9 -A@'UR=t#Mj(=
k#IH^$y´K+N-ຳ5ڸA5ʙG8÷%䃧CMî -ΘCy,0U&Ch7\ -v#zŻ-c2U&"?@bR%`/v#3/T&w(0Ҷ8>*/J2Ǝ(+i0L.UIOpBǣ$i0'L?scػbKґB{٪
_ܔr -\f4w&du#XA6qR#Lrdk)gseGn>uMaڗxf0,a7ȭzR1_˔ 6M|4HY!rL{}3W?!xޔGF+g
}e
5@Jk*A -k2${<н0$|a,aI!Jaf54Vc?@E=_g%TJɲ鱣A՚Z:}bS+^5Z:g>8ԩmӥ!ov c"p -nKHrJGE[E1EU -.@RFodTòa+V*Z7,<9c5IĉۙS0m(J0C<E%d:&114?#(z^cV&tB+;L# -\W1W{MWb1`PZYZbڿ<#]endstream +/Length 3658 +/Filter /FlateDecode +>> +stream +xێ}b@PhΐKpR v)-QZ{n3Jmz3>Ren(..\q_f^_(Y]&a4TQXD톖ܮweǁ*27ћwoo߾^*p?[qpˋߎ/|{q-~孇2 4Fq0" +"v_$&MKw +%kePgЈ0ef0l`bPRyyaҠkzz +J7װKؚ`x8,!&X<L#" +^~^ cPfK
t<~fv%R twlcߪReeзT& ɠ/8KpD9a<4CTB ej}THz S{[3^
̽䎀;̘V9OnofKA'PLjN|߱]u-i@7//n{Yt`(eQ]YAРs`9}1V,@bA 7DJUenuHe.G[$s[1f=|U3$۫ jӻ5Q+WÄ>X,($G(HUZ="/zUv<ĻAV{v،/<Y`1tu3f@o(V3<"ú6[ȣgߝ:@AX
++]A@ws{2Fє?X=X$ +֨LPa_0|20Y붩ۊjEq<T|ybCv +ք@q0kG + Z(w%/y}C?6_[\kH(bީZ +~.*J^,!-Y5lK['ኮmN_K@} +WVY48*<op
&=c6k;A93+s5gMnC!FF}簱@+0q]Z7#('af>)Jjba]R&9,? G]@^</@PSjֿyZ@w\TW#+zDmaFKTzG`k\$!m|Ayl-` w-rwUnyz +sPڬqS' + +a:]}4hĢ&`FƨB+9I^Ԛmf4grwA8meɻO\Kn4yyz pH-=9Pqf'D̔AS(2Vp#=ްbw$!R'BGꨂgXB8FSS4-LՒTjt'FY?59'⬋RU:&4iW<b{\eQR(MĠP#wmq +O0#iE|i/XIüքQD7:w WWs͎s'Wg80זj92y"{!XU6cʃ
SC)fkCTS1ҁůZ.%"Jdɴ6 + +sy@vpK$T\c9gѱVKgQqeyu=1R%Rq=\Tz
B
8{ݎαoL)'hbZhFW{레 +3S~96 ^eb*y]C]63- eN]7喫ZS?}e
eI ,VVvGSk|r2> <
cInL<v!G`B--ZW7{E8s/`ͼXǐMjdThr_UzQRz3F)CZކ9^:
./]P +lՈr0Jۗ1[d+1d+dF9o]*LiN@y>yTl)v.M]"T d^jh7-LHv%XYn
_W蜁7r2D9PuaH_ +HvU;Q?;:J?h
?ǃB<&O"-9jG48Dzۛ1FC^$< j2ƨ@0U6ٗ=y +uZQ} Dmb0G\D|cWnI2zPTCp6,!ФVSeQM<R+$ǾgN$싒9Hm/G $Oa4lLU]A.PI|yFЃF?*\6pa*_!w.B?l%\y6Er5QJ㩎ҳ5"/endstream endobj 5210 0 obj << /Type /Page @@ -20335,15 +20247,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5219 0 obj << -/Length 2562 +/Length 2504 /Filter /FlateDecode >> stream -xڥY[w6~CYj d;vӸD>}%D"~PL$`.9t6JR)th_nΤKy?;f$#Ehlkpt8Z20In:WNLng n2Nu0cLhهYih{4ZI"t
Ƒy}zh7_}=W'QVHU8qfFБ:)VE GPN(ZQLxXI)8Ò26SD)ankpo;ePճ[i9c$EdL3OoL
#d-GW5h::P=L{%ch-CΖcH
<-g&8TIP\U˟0+E5wimӎU|hZTԓQ.r]rny?@)KLϨL8(¡Y#4uAJ`p|7re]ArC'M<eBCRq&hnbwaBqE^t@8Z~^ݹ?r34JX8}*~Y#)ow$ߗ= -5B^G&*2jo+:45&q)D4h|WiOihj,媮(}aI5+%B꺤+<lxmlaLp5ϜdŚq6^]~ַ 6J"jE/5U(ur=0o9w2z xu;h*HW - -C -hj~e*N{Ws
KFUFŶ2C'w-a-W:4Sf2[v +xڥYKs6W萪L +-2{$AA[yh,heeB-4"mWV +i$]XOO%w +B++4O +FLz9HZ@m>R,Ty"bxo+h}*{*/4wF~BqDQ&~=lgV|$hrU}JP 8̖Fcu{ˣ5-Ak{{cl+SvI;w܄W?A3E<iY!`X$KKͫ +.Wh^L78W~mIJ輎 *K[c/Cǯ_բYdC,+̃NE鱢2::endstream endobj 5218 0 obj << /Type /Page @@ -20367,25 +20280,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5224 0 obj << -/Length 2599 +/Length 2413 /Filter /FlateDecode >> stream -xڥYYs8~ -i1odڌ7Qy%D"ElhBK,B' B.D*IY?΄-?uuv>i.V7>&F-VoVZJ)Oҏ{j)<z0(/W8קe]~SAU'i'H?ξ~8ҟgad -"y3 -DzmضվAn -m"BtvX
G>jVVŰBGq]8-<Czl-BNc; -46?ڧ}>(# i% -\d}ՒQ!AfoKm];;z$ -ʴGۜ3
;d旡- -{Ec -eOQQ5o}hr˫-m"}>='Et&L_Ȟ 1`- -H? c۰D.JL:3MEt9b:64
01u) -ZFX)Pj COooRnꀎ.2_{3a2 ¢H`S ~QTDbRD/Ĩ:!Du"_G本.<7&csjt#-J fy)lJD3ZW,Sg0ϙ!ynںӯxфUOmaԬ(36pSe]$6NYO -(^@'A9ϘN:J쳻ba3el-rf1y
`3;'d]]]DDQtJpQeO4%z
sL;81ss5":gg)Dj<88W0F&#۪#nKJD<GY9'v*6aqû -r~
X:>8YѷY -Ik3T=A[wNrߺ: PX4]L_W9.p
Ϩˏ T%ݽ5Q!X{:{y=B_Ge,/M?eFimKWut--9]#-ehg-A$>Ӵ]Aԕ-Iqqhm"#R"EK6hvZ\D<sW&X'.`~>d:՛R6/:k]u
y%2k+7y_P\//Ɩ;a3oxr2?>clGZC2V##e qa\^gCendstream +xYIs6WĮ2),\ss8Vh!fKH?oHR\S<rF"IetN +(H;C,@~^ÅA&jKSVޛw/V~XZkOfO{b)<zoaPz.eO:?_k@,~?u59aX7'Nt.-e$tw'O=paZU3C%hEဂfPvWsS6Y6{y?{+K@ + 1-~Wt_7R%R^җ^8vjωBkW7=8?59:_W(mӛ~ݕQyZ,)g{cQ$k$At$㋠p ^w\bWvzY]m
mǓd(oK"g3/;?B;f4?g{MSdY`NTx!}+~J ":) +-W$ēs'hCʪ4(IФ?۱ྒྷ*l75>lES>]Q~Nu^sImiG`>Vw +]"BL]kf#>C ðYAI$K^sAܵ
D. +a瞚&baLBdKBp:LñkP&H|d/؆'mHj 6kfyN 4,Q=C[9X9 4h8C`!릾hl|t]BD{WbBb-F^Y캺/7c8I5qfq +k: +W@JgoN֖%OF\px0r`Œv$-sJ=(f0Žo[hvJ26Na9;dz!T)G$wep +HU +endstream endobj 5223 0 obj << /Type /Page @@ -20415,18 +20323,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5232 0 obj << -/Length 1694 +/Length 1634 /Filter /FlateDecode >> stream -xڵXK8W8Uc$Kax60a/$&q`Cv^UDjZݭ[G B&.r%<`Dyث:g N`~cI0_~_\OEq$r","ްtnf>}g*|?EyYif|!Oʡ_&>` !H<c),'ৰ&fv0k&]cYI.lEك(UY)4ǻBP&* -ذjdm,,Qijs۪[}t;Vn<7%[nwn4m`~So
OoIc - -ɽ4j^6>Xa;/7QldW#6;عiYh۔G̪+k\m -dDV",5560nvѠWLEfGi(zpћ$PFrA~@],V2\C%]&z9ZLo]Uo8_ATero -/lǿkjKԹT|=ؑ@J"(9XF5̭d jJn:;@<JN(PrF|G1F$ -Ebp(R% ,spPIb~rvޞsR-y6/x9r -h~ +xڵWKs6Wpr"gLO8/uT^5Dw 0ҎgL`X,~R?NH㣼PELdt+/'*h +9\z:\lG[R/ׯfo+/4ϋ,Q
Kgoo7/qfAw3\mRxJ7OxfL><yZa3n}(%xD ++PGuF8k|=9X5˧V9a2FC}+MRJxd]<Pin"<iQ.yVo+T>li><ަޒE{Yռk-tCᶩy&>
\ae]Sj',ÞcA.Jr<.:V92D{7
;%5C$-z.XF`5U%AKa3](n*rnzÓ)4lu0t2={#@_A@WepF;8¢U*+_gbC+R"SsAmyM=!(Qhm]HHj8
Ě^r8]hP +OFN2NLY}NnO|ݲcH_c+tjA&ҖsD0Fɓ[[j`pesձ`4? +.%ilfA`8QUhˎşnAyLXAsluM0F x8d3P}5
dQU05ew- + +9(TMPM%^f;AGn^C&xɕG(uӡo"ExEX7**1تLbUxdM
@!TOdrGP7UX+GSЭd'Qa:eMpfRڬƳI;eHHV\1Sբv:]o +^+Πv/1]3?:g渆&;Hvk2j$O\J>FVkt9IM!TNC{{rcxy{0zh
VXZ^+Z<E=It/n|wGAޤp=aphć~$
tVyKl-Z;rK]6^vP +4NgMbHTAMrjǤG0MiVp8Py)W?xc2BPOTϑpcrLJ% +а +_4<ͅ1>yi_)ac-O%zdAF>('.FIp +D0E$2PUk%
wpolG8
嵗3xŜEbF:A$mݯС%um(/ϯ#bOrFglDz[U5;pL2"sMtwkL̞V endobj 5231 0 obj << /Type /Page @@ -20543,18 +20455,16 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5242 0 obj << -/Length 1495 +/Length 1364 /Filter /FlateDecode >> stream -xڭWKs8Whrg*O=L۴qOm-;ڵ-W؊3E | -\z7Lei9hɧ(ZCŨT" -Npk<YWt>8E0ds#9HRD!r[?rIP"9Ө4B9fB%k[b_kY -wUu߸aƧhphW4uG0ܡ&#ua5>Z|˩L{ --5ǧdp92RA[p3 -r -yFA~NdWr/Yd-:@"NǠ?O4QF$"BOV:ZPi۾e\&CVp[m0mwngs_]],CJa4c`{_л-Ub&t!K+ -h[G¼>6h딥x^BЯ}Ih-#%M
V0ֆ0BLEϒ7Rԭ㑹ŗJumk("a.5U@
rᤛg3gxhfXXκ!zp_\i_hpERlFL|_.}md: П"}[-x̸#9C`XTAfMUH}ْ^{~PRy' jl`FoId
z )y +xWMo8W9@E")JS.4۸Ŗږ*YdpHYvvBCrfEOf\fIi,wl@~"(W]YƳ`[//oo?M#)e(26Iןo"՛O=~)X4MeM%}IƧ&o"T"Ѭ/x?L8Y
sDҒi%vr;d*S#G*NXl`"9KSգ +~aWdxw7(vٔ5,wW.Զ`E2bqdƹ)ܔO29aC䅁@HY-V&C/;7Mi̴If0[=F I~O11:h<:ڻrsh0HF-gNbynF$N|$D"
1MP. +[p
s+o +Eo;W +P/=;%!rn
v6S$Z'6 +d3Ζ8`Dz>,dc.(x]K[CGG.'q_umҗD<c.cugx-majOʞ8Zo]$,J6gVJ'kT-6ɽjo_`66pdɈώ|\ME=:D^4гk9O~ o{endstream endobj 5241 0 obj << /Type /Page @@ -20682,20 +20592,15 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5252 0 obj << -/Length 1713 +/Length 1659 /Filter /FlateDecode >> stream -xڭXI8WSEeY^0&}"Vx z"/Yz0STump|'DyL8Lg]|g뙰+ȼ\^BG^j3Q^>Z^RJW|lj~9G.nnW7(%']Ⱦzw_VogWUn~};v{2M=r~z*v_>>:u)+J&JyZE"pb{)//y|$~b&vo -@ uo5ZʁUJkoaQ[SFL
ޭ[N - RnkY(Ց0Ϲuz+j[G-L,t|M.({ -!Z;=՛A8o8msʓg͉.e@7YRM*j^3ೇqAq@PİIT~qS -Qg·sR ){+bC("^@'}k#NS'>P@F1D=_u5mÛ|{hBRA~?5/}soEN};:ӕ%
ޤ}wH{W6v]B
p&}?d|F*RЬ -L
h@4Lc^aX-de2^$ &RCk{Ӳ`=Zq0RLQpjťI5F8*.Xo4Oy6-Z b@$.^b*C13KqGH7WWL$!)ZLgɌb~Mu}hzu0|G'a!QÂٽcV2,߶q[ՇdR5hqiLW7=7xTux- -FEwb oƎw8SWun$I+1mpۙ.Y^KM$#sHҮ\}e̗e6.;<W(:<.4uukmZ-w^dGDۦMk -mGxlL$5/؟ݐ5BĈRTelQoxPΚ8v4O}Xqf2Kt.M&Z%^wקp`gc"{OU+֕52I1l+]i -øaq=ïe""סdм.ys}{ooy|BR@«M1V(zIDKN#h"^H7I'n(g'ހ>օo1{Azj<Y-'^ - P_
g,3oendstream +xڥWKs8ϯpqYOc,Kcol(fX֏$_ǞXnZ_/?:e%dzjz[М/=FśXy"0ַd?>Z^Ȃ*IRRXzu}q<ǙoP2..Gg<A~xDR%usE,`"˼jn^.>,=xaxW*(4U,=.W72J~~O[$Nlf1eE߱AO*^Rt:}8f\ӭmkJp7[Al\M[q̃i- +ЁRd +\ Nb-E_'~#Nhh +v7aDžSBI(Xg7ܵSf:*s k$QG%d鮡d5CeM0]ȔDJP9n/ Q<uJ'>A5BE-=膼@4#?H1m?p;gsq>,2?;gswamSQc
!w5~zCzS +^X6Siߑ8"͜(pӋFO]Lx,""~yAaKGJ(rR>8G endobj 5251 0 obj << /Type /Page @@ -20813,17 +20718,18 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5262 0 obj << -/Length 1786 +/Length 1717 /Filter /FlateDecode >> stream -xڭWI6WT"YI-z,8@'Kj,KS-bYK$|V=_&VOƱ*fۙ0Qq:/u,{Xˇގr~vJ)mxEg^Y.nLnQK{J^|+Iw-,H 1ͷ$~i%|7<ؙbxTUZ
7(EIdɑ;yη\1)OA -DPlM0[0jba̯!~[x~5Ap<08n_sމ%j[D> qdFk>pEqoUk1qJ -O>|$T' -];e_h9;9V[0Qli(mG0Kt&l<u`xC8%M6vnd93!{'H -C'2T-AbOq8OyO.3mۙ!AaJwΘ䄄xɦ -`䮂t-l[èR9xSP263UIo3<ݗfе(Nz vzpP{}W14F-d -@OtذeCHx~].%Xhlm_8nɚ2EVa2#?{y7\=ҕL +xڥXK6WT"Z$E=y;@7K֖m5Xr-;Jm@`Er7БN +Bw\4|X4qiNR +2 ctZ6H
|sa4a-NgT +q.D G`ܖrl8 I ?<J^& :B%&b} )T#%H?;w#JDNlA/=Gmg$ָVyJcCS<|u6,:Eݞ-"%e
Ld)kW/sWP%ɱGUgB3sE08-s
^}Bp^3K$T{IM`ܿro + BW +g$vS4@lHw #H$t䬻aTn
=la=vrn]*vJӵ{Y/=? +'Hy0'y!44a%TԮpR +~+zր!w_S/Nhs#Y>$ڣHlL:v=1T1r[Ȭ`6 endobj 5261 0 obj << /Type /Page @@ -20958,26 +20864,18 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5273 0 obj << -/Length 4410 -/Filter /FlateDecode ->> -stream -x[[oƒ~0Dݙd8'xZG)Qߺ5<,c_WUwe -Kiuf&+I
Մ^V -B#CM<pY
S3Q03\eM -S/CF<Q"y6ܹQ@? <
Q`&y͂υԐ_yQd_0J1Lu5pZK5NTQPCM!vTQ\$c(-uLHFb\XREkUx]H!+ c:U)0Y885F鵉
Gw5`Fc+,no{4$_P&j54L+ʬ;XA3T:sD~& }Ioh&sG]?u+lB3?6'uw%a?l149rV>ݽ5.*lLU#B#s3 -6spxWO!A6t0 ff<ЕeMʌA.$˹|Gp -#_%Z -`DNw?dϛS*fexDCQ- 1\hF -{3tjϙ$s&I|nS]v74ָfZUмp.)N6;ؓ.UGN/Hژu8d -l\F(f: Hh3@WKt]BD8_h\dNfͥ>){2lf--tQX.†vw7V ұp -c3BpN-}N~L/5@qp_p6V#a_ B&g<bk,*ժ%t(a*A`oh~`x-;h{Y`Cn4(?5בLx!D&=p54H}y@6{i@ƛ#h;#,tx`u
#h{r|Zȧ"_)ь7
[F=!}?ٟs6N76:^'&+E?;v]>꙰@a;cNlHulƖ'jwو"b?b=Gҹ6Nb|3S~ JA+s} ?7PA; l9ߡЌ:Tý^.ӓ"عh]vs{/@Ts0KbFV(vE0
ǧ:d(|pDcw:TPu$'Ptq3&(a)/5>/SG A&: -}Xj,,2#վr zYP;aYخsIa_.q<ZvxZGKF&xb_N -dO6NH
NhvCΆX%vrh<巁M2-RTBwqxK'`0`1?tk1Kc gq}Aq30xQatMN`p)՝c~pBt#XwWt>pn] :2jD&n -ͨϑק$'*@9u5و+]{W9L=|t))xDÔ7K2lߡ@MN Dݼ=il1c㐌`^`*AFn9[:F:_;w3`R!cV0߆3qN;Q -TQtb9KH[Cޡmlt
Ȕ|Ð6n9lЂVW!>(BȸAxQ #42X]WQBtoD^܇,ȍ\ V&씱Q4w{`\Mv]=Pb -Ƙ2wA+'b!N.\2 -~I%MU`ΖBY.}UgYr% +/Length 4078 +/Filter /FlateDecode +>> +stream +x[oƱB}Ck[" ++ϗ:#5um0p[ +Ct&EDP-X䰑¦1c.HvDj'£Nq-#W +$UŮpM4E +aZ7ҭMi v#FsI +3m9+)xaˤAi2sDQrU?-}$%:"9Μ<(^|AE$bNLY1gIz֖:wX^z˿s8UIiw+tVJSCj:)qǩv']+u"L˄HW(e]͚'!Qa1 +MXYýn\MYqj~ἆufꈩ*).IFQU]qbr +ΎE͂-{vv!1+n3T<XHbqu0PGޏvac5Ϻ:.Ylg3sQAe3G9]4ua xq˹"TNgvAwYa#f:.WM&m$pdA endobj 5272 0 obj << /Type /Page @@ -21000,26 +20898,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5278 0 obj << -/Length 3109 +/Length 3095 /Filter /FlateDecode >> stream -xڥYK6ϯ갡,߹l==Jm%9P"%1C!Qfo -U/TbESl@".Td}]*'pXb'[յќ}ɚСԩKK7/Ndz%l)t$Ԋ,Qµa -7fM{ 4R?;c{ܸ9xN`lXjy=v | XAhE92-5f
/l;.}׃ÖZ0ga JXN -ce}zXJQ㰃M2},Ԥg0#NJJ)O0ۊ=[@owwؑfz>z, -Pi7 Sɐs+uuvj: +6h -)ӱk*6wok+hv0e/Рę+Y9CO\CYK!+p?_ڿډ hq_9Kq)Nزxn8,hp -Vt!ا'n=i#A%ƚ\"aī(K
Fh[Ơ#`k6(a$*s -LPAI0=n4Y,*m"WYz*F* -KX[ -DFmVm9Oi@D|7{TBVpsB -;C(6/y|ƬKr0_0g#M~ǍZϗRIxVw"F~Є#"0bPø9O05rX\_OO!
Q}cF1qLy{ @r;f~ĸs'CeuБҝH 魚?\]t%v2sA*D^0a$˸.YuBIveơX @ h![CJ iS,MiKȍ;ďkhP_QipN -ݲrϯ^AWմ^uC\aw*Yb@g1U4Rx}tST
?äKgVLZYh{ -#%~y|0$2>K5؏eZ$kH^7@hˆ:1 --7+/AW>RL+w\`܌Nq褈 -3}W -endstream +xڥZK6ϯ갡R&#';[V%RcPHj/HR + tvxY6kn(p0z}'33uevEN3;p4
)xѕSxP8rfrð
X.*ՖA",Sl;yN9t<g9O};nQTFzTW7r0e㶇VbUTwSx)ksMa
Ρp(9QKiAf}hE~\ۂ<,ʫ:sekk^PO[w6] ^ +%N\)Ȳ%@|ZBU;(.
Kw +\Njl@P v<ݚ}ljʧ1 Ƨ +6y*N=/6*
+$`&wk:wU+tNy٘>y<Ȕו͓ "'d(mT<=,%u@74bI%Du.p]C8ud2XVލK'۠fܚO%[ +hJ-#Gdj'D +{>{yЁݠp0@IlTĮ]#~駅 +r8߲5T2юʥM}--!O0wH;9ЕOS^9nD́ꃵ'R$#pH q=L' &1<n1P")oeVl5*]U)dROī4=YOzTc>Jg0@%8wB2t9{7ŋzv endobj 5277 0 obj << /Type /Page @@ -21042,32 +20931,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5283 0 obj << -/Length 3225 -/Filter /FlateDecode ->> -stream -xڥr6_R3M -nv%\;͂7PJp]mܱ+Bʊq;e&:p8 -VqG"x\Y`U\]˿=p -0ŽO=T3(d^R#q -z^CT
Ody|W>bW֕svpC^Ak" &;Y8 -we'KnV0!j#HhH߱(a;FطǿyRAKA_L`GGlk l8G"{oR!I -M@ɂ_a$ $߈;;xz::|j7<@IqqXmikrxDNgieǃkS
zb]yNc!y:wg?e=U&t4w^Tt""Y[Y(U_3tb@}0 -{{,Qô'AmYJmFS$k|}0&
Ty&nEz2;,y9j!KtvY<YNTq6yS_tB.q&cb|.z3&zBCr>
Qyx9>i'hGEQ\}2KLg`txhw:c/(O5@sl0Wf)|ceI6or%\56)Kl$p<#!zW6~u3C)L -QуRpIH\s[ -:&*sL5;<̼
@*kTpFZG_ --{(;#ki>f!pQe9/b 8~jY+d@wG1>!jF}_"HL2ugPעH1`x[Xey*N_DTN`Y]9`Ţ:9[O="PtOjxqݸ|q"rg>\g -b1qWģ0Bp/5NC/Y^q< -rGђtE+Hüx19_y%-_Q;ߠӠϠ5~dP`b?dH~WQ$N%"[)h@0жi_ڦa%GR&M^8Egs&h*j,痩 #w9]g[ڞUcv/`~ˉ 1Cj䛣4nYLmwDqCnJ""Ӏ_E2YΟ1d{jzlD7M荜vAQհWJiMLj -44?UxVQO -$йP -ߡCGXUw(p,הFcN**O:UK̖Qr -8RC|-NuOncǾae]ZY1t`kn-7J -eEAY"UŤ$Ϥ:BeL(k/q:"X64F;dJ]
SԂ=k0IpcZlHi9v}<r`1"3i0'wJpd0QWm O~7-*#/IBXě@r -|FXQL -"_j=rB#O&0"BL&a/
mx#O!=wo$NҋbM?IMrND辒ڂȱ0}Q1zC|@2Q
{8xu撔3ظҭ{וv?" -OEs)#KӈbLItF -,l;_{c|m4ԚO\_=1l9!Dwl6Evvg7\I#,*FK5q+-&C'/Dendstream +/Length 3135 +/Filter /FlateDecode +>> +stream +xڵZYs6~ׯTy(7HZgġ4\s12xXJjU +aL% VI|8lIx7ΘfޛpaB +{ʯuۅ~;;k;okOQ{܄gM=öD SvUs:'eFRf< +`) +fV3kdW<-7ek+_TN;$Gp"c좮9
Z@mGJr"рB!א `.gyˑ$
W\A5L"p+C~;=S0+$+Z4Q)kHܝ6όXL..倱uJ2DǎC4ħQ%r}X+l$M @2vyҡ4MJ:Mk.jO9 $sc8(Ø,$ +ӹ=]s\ֻa#;ifodfKڎ'3LgVIZ6YyQZz%@ 2,TQZ9Ih9=viNcUR%YRЋ a)QX̀PfWZM- |1tndSND؎yNlʃ-s'FV#!sIl$%-pEӻ-Вz^@4oG~$M}4&L D5k#XTC۷~sy L8 +/vC2/%$/yj)GSkEk.l6lfv +8ԺJzz5!7WZ+<mT. +W˽JF]Ls7s y%I\2t^ɪf`w +<|S}-NipO)NJSBaeELu7;~EL{tِ)
Tt&A噸s4H%V#/m{y}.ؘ + ~'#="kWϦAQ)K +v{ˣ$Z2%لFG +rPɊŀϾt &}6{+$ɷJׄr6DTʜ{}:BLܾ
,/TUrjHNҩbjMHemv\Zlᤠ!#ւȩwx0Y|j C%x$0o\Az-]i*\9{VO5D|bR3q8HD[!\#eiK,&]{=~ md4KPti)0a8 *htj$@:uIH-6 }8@uך_:S Q0~J oT4zd }99 +_Q!h endobj 5282 0 obj << /Type /Page @@ -21109,21 +20990,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5291 0 obj << -/Length 2632 +/Length 2556 /Filter /FlateDecode >> stream -xڥYr6}WLSBąَUrR<P3WrBr~ A
e9rYĥh4=r?b|fR,[mj=?_H+ZГy}sq.1+<W7wXXnoOPk\4͂7_>e[?~psghOL7,ta~+ihhX^G~γ#!pvh[/>_kT}fţLę>w=HjƑ#C~bXF]լUPO{c ڮA;Jgw(+Tf۵J7uUF{ˮn>>*ÝY:3N”*}Z%8&跜yce -Nɶ/Mq[T1`hie7pr\wmw(EBέV$d
Fy_hI76
{fǽ/>"E
W\ATz{W﨡8\GeUn5Q5k)܀AfIw - Bt`C ~[>ZK)۩v-Uv-J̈́<b%G<aЕY`o4npScPU;Z6s1PŽB<Uϕ9؍踄4yW-xew6[et5eQLP۴LM4!!ָDjG0/?TQDy;3.Ā@_(/=
hgMD -\H;/xfT&!
682I=nؾ)ϞM&y "/>y[(qlYHGx -kex ۤrEĴ"b`@4ю -`⫤,yCMZԝoF
p]d˄DX,ؐ%o{A٧T_6DK2/p[ :F&,>i.2x@?EK$hR1>9RT"$W+@)/|h"9_7PLwW$Okd,j>O-XzCO1?Iq"rTn+~)^:`uڝ賫̟6&3+,;fKuBx}vxi|^12yR9); -nS.Lc -xc'JddN)Hh=`mJKdmr0, ۊS=p3 -ww#W,t~t^F(ܟ@hpRNʏ1~f|<hӞjc3B@Or8!5}k -@V`SzhC -J2&Hy&D7v{Tw@铋.GZ"D2ƪn&%x,'r# %[@K21sNdH;Bk7h[5ewܶI=T܊#S:ͯ]A_zZŸ{ЄHs?8: 5(ӣ'6ek]S$@`UZl~ :~X%L{#DxNxi13\^1 +xYKoHW:Qf?H6dYo6QXhkԐ
zt-dv.fꪯ*Eba0R"5"T,UWΈ:n?$z!0枦lZ),\~Z~|s4t'Q'No>}o*Vm~zZP' +ߢ4* +UfOЎBeÕUke/W^ͯLBBCE1zg0A|X88B4 +}}-hykE +`"(p` 3Uup2Ҿnmkc
q#.Ñ}sJfƘFNC`s;p$Իe? vMf'$d +0ݜ@u2Uquj1StȭIfc"qD +ƉLVӬҊCzʒCq($`{DfڄGMWWڳ y"v;`ߙ ٨@r 1'@a$ J.{I2Ic +q2o|v]{x퉁Ϲ7|6]XqǡJn1.NgT 3쟙IdZ
*A/(NMiͶ4];[BB#V~\/ +~Iʺ:bEHi\dggeHӟhu2:ztBL{vo՝NoEE{-Bq0GO#fSk2eCyMq?~VYR%g UaCNffS*;*HT'Lf鼤.1W0fڞ#G5iT:dz7֜t:a)'i,6
ߖ3;2'y;{cA<U#x3
8Oj=JDTMWݞ=ȻmXf6>?[%jBJ$낱7d!.s]%UqثWº>9 wʑ$B4z,Gm薻mZ0e}/T> HV)L%O;~(SnѶ4~Ax$4'ܷ9GW[*gί]NozJxzЅ(wkBNR;3c *`ȨEu:=+QZ6/ endobj 5290 0 obj << /Type /Page @@ -21141,23 +21020,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5296 0 obj << -/Length 3466 -/Filter /FlateDecode ->> -stream -xZs6_}S1$C8;M݇DKL(R!)_Ejڛ8vbpQ"][bphy{ -RH/ބuI8jqzWK&2b/Wuǵo_>T/U{&y7|KRsO Ub~wg)t*Pvlw JvCq^PKYȅ퇪CVN - P|iK -bǪޥ-
zSq#(k,<UT|sBqX[+N@ԞjdvhLtǛ[.كQc.?iO)9%;w= c٠J\,ZؖfJHp - -V0X;D -'xy>Z2B!仼HWmk}^Q ؑPEoþyzՠ`ڼ*_<k uڐ0B]b31t!1+{`V#^Æ>а:6KHM^r -@P}w|:i/[&-4]igHxrXNk]⼂ -iTm_FiBkaW,53|:CHH.Y?`=;$t-\w]0}}M-ơ - -; -
*Syz]]|$@A{\c{2HЉiyQvw;'`dnvǽ3IcgIч*s0B"LvoC"^uTӼ`DUl?u,t|9P7śU` Je(D0eO<\
f
(JoXBy9]02z }~RDZ1mTRzIJzX*
|y!f)G@gF. %>{:'-TL;YW-#]6A.d(jƭofC/t6QR->uj*3҃NhAē4߁Z.j"$,{4|Udo - $`lO{/qrJ4N:c6<<dxF-|=^TβE:v#0JjdmZ}I,
.>ãjmZ,:{ FL#tr'=?"9A(校uZw5+-_Т(-*9tϨr1x~'<{¢&Ίp',#5endstream +/Length 3178 +/Filter /FlateDecode +>> +stream +xZIs8W|"ejII<0Z%ɯ,\S3*އă?Ff$0M'Ց7Y@˻#_zxzqM?]&W7j'0?sOI:8K|;RP;^`'i\qC?Nʢj\Hף&s#
trel:RQF*,ܦ&<j1 $nP +d"0l7L:ov{v܌GfwH6ly5@JY#t*(g{@yf=&2Z za5J1
۴vA/Fn Z{;y,wLm"fKWjK? \akZ,t)[)"d;ڒNq{c)R l)$ z+Wݴ_ +nVn#)Xɛ +c2@qÒs9F̌tnzSwOvׇeLzCm +݇k3β&D̎qt|z +apul8fҰrB>@)Y1ƜW]jMcwlfUG{?D8 00ܑ`,FK4J:>#]N +ɎP
-ZjfH-d٘0(2 +E[0qD+G=Re²f+͉kHI. ݶࣸn:v]o|
|[is +$" +\aN/e!sr$/30X6`PၲX# +fj4z7-p`vnaAA[k +7,+C& +բPhQH4 n5d}tyX Ee'Շl-*˝4JHMpWX{x[Yʼhoa/|wM:h +T +?jPf +6i)9p-WyH:Gm]8 +:~!3|]S" o&srz %ց풞
SWYQ6NRD9톮rĩo6")v&_IS4dA`TiG<*xÇm _J5 BOA+fMWL<_xJi\;{RFƀJ %u-XF%#PN^w;'m6O♜2tK#/U(}_-al+?v3QZ)~[6Ft1qLz[ an2fQL>_@M[M ifc}]i +]HFHEOAMj"iE"s2Kx)x̓)[l.|GV)(X;[O[JD&l<8C^Ⴟ0%7wyhM=t_J:ؾ"PVv6%LuCYز3Es}
4]C&)4cwDhS;8}ӱW{?uc
Z=#廧fHbdmF3B.oJ2Suc4vc왆'J8HX7fKjгG(Eа`J/МYR9,N"/EΚ7LrhO)2l=r1L\?f"ص<2endstream endobj 5295 0 obj << /Type /Page @@ -21186,29 +21069,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5303 0 obj << -/Length 3771 -/Filter /FlateDecode ->> -stream -xnF_!ei =H4MM-R7Tf8("933gQ_bE^e_aU ۇh^狇ոOEqx(s7C'Ƚ7M3ݯw7sϣw?~z"_p7Y<0O߾^7z -i{]~E*E;:nna*sJȜaCpYy2< |pa߷b+X7n0t;y#,}/ Cp(nT<d|K7E7
I8)@ -tʽ\ Nۢ#83}Mђ+VM<\
F?v>b{uHoܩI`wf3k_YpwYJheNa[jhkq5hAWIRV` rhryjwF`Vx*2;kNn͛>Q]o5.ē4Z 摟Dϖhh' mӓb1B?D .)q6U6ö9[Ͻ,Nf՛!\T@$+DuԲZiO2$BѴDzOҼCb'm!+HXiv,HBhLMa@Pݺfj*q`Ms -ƜGHFw8E< -EwKJ|rfdL{.ڂ".*ΫWM_E7[qtm)k$~Q%q"#Y3jQr,B a'o77QlV`9JL*%&D$uQp fӸ;,C'Vy!hB6VZ) -X?qЦ0BvW4<zh;~ g$yI;.ؒԪ)=[aLLv]׆27lPL0XZZFa`֭ RExzi}DִI)b7#k -jES¨<!V}]])#EzQp3P9 1 cg|b⬈2Ż2*כ>9;D|7)Nb$9HR'K*(!
]tXLśPz3-)A/V~2 Xh -i]ԶN,$?W-ɩBGhuгj4qWZHА$y֣]q܇dGowX3RQGkطL^6Y8e+&^=j(l`Bp7qV[<2kmiSO═S˶&.#5*/d_ -%Rk؝Aæeqa2m.VL~ѱBgk]qDؔMw!u!{@44f -5m#aMG\otb -䟭ClL5 -6bja' b
R`^{L!]K, ->$530)CwW`m2#LeW#+/c,JrI_`>JaK֒d'cy؉!ۓ2# -\.l
Rk#H1pf^rm+_ozSIL-"( lr$Z)|$`Z*uxȶ0 -w,Wkfd\2!p+~V=q,̮'3,=7C7SRV'Ȁ$;e,UlY -KvZ -; ^&AvX *UB
Z@"41;QOONd&ZmyB_iv,0%!u)S=NRL!Fp)aX
"GH0Mۍ_'Gbb\nJ)yL -dwCr%W^io_9LXPz5 -ɗ2),47!
FyJD ,|phB{Ǟ, +/Length 3607 +/Filter /FlateDecode +>> +stream +xˎF>_!e9Iqqf=SG$%Q!)'_fS +cD9xhj +ɮ%F
h-Pα0!I84Uͭ+ɎDZg*x ڰYbQmqgLf80Ptn~?Gxe&',7H#ZKe㦙-1gmM$jKGt]kT,Vˮ?"*D<L;K#Ǿre3Q\"dI)aG' +=olӾ +8@"clJfE=YO3E2:'
ICCXl
P30̰鈐@)/W 9-+h[;U {j)m-)3%yF`6JQȰ%8}o<2/6pܮ; BIT&I\mR+.f\OP+dz`PWZI(ǰk<P{/Wt\}5k
!Pr{@t͜ B^hY=X&rŠ`c"FЪz>@IR0@#QA· pX"iʍMS:иaEss" 2͞)c}!>Y8 <$2(pr35N!6xR)Rb$K\YSeb +?A5˯htZp6H
l2=+DlcWMsk,qhWZ݀dZ@/̬2^ܮl<v%'UIR'i$a`3{zRy(~CI)V mcd9%[݊Ao ~/V:ZM9tʎҷO{n~"d"M NmIvZOKK?ر\+T5]Q8lI EiXMӳ(;6 t"O7ũsN{P+T`=HBjUPtpl
{RlEnr3[ W2Ҟc + yN0:ȌsƱ[(aomlˆҩ-K\d95ZRQ|DaK$ᲝfV#a\6SsoT*A?(7V3@@av&MJM9OW75<=Eiy !n0mHaRS!py,@|P]8q2*'pGi>!fl<HUE%gSXa8D77!
Nm(EWn+ܘ!fX*tS$uCt͚|rb:RZ(tElX\|sI$7u|CfqBhEGQĬ8xPC,0:8:Q/*Sd,
iԭA9(#$S!2c3
dn9-9KնnN^8mE= +VemInj-fDʘݣ>䜹Qcv!A_W4lbg\8[ĠRO|lL$łi<S_|+AJ;O +tnWOˏ( +S}()A]2]iKwBo#WW"O:ے\F^&/?uD[*~rc<ؚ&16wUEgA?Q8`^`̶ 1JӤF8qd3٥/w:#!)VEov0%зGn~V_oՇ"T
L?@Cz(NQEPd6p +jid*A,X0ag=jY(H{922O:Q}]v'#2HPr]%*]TH4 1Z:sqD^fS<]1endstream endobj 5302 0 obj << /Type /Page @@ -21244,32 +21119,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5310 0 obj << -/Length 3752 +/Length 3434 /Filter /FlateDecode >> stream -xڥko8{~E/k5#.p@n8`w?(h+[$
(Q,_q(RS3@9^rZyq|X9LL@f̫۳w8}O;]1yNtETOnxvä|iMnSK~3--
@Ud~;/| GQ^`(
˫3S'ٿۭx?緆⻡r#xcFkWy -eYXQxnw::?|skCr/y -⠇yf?YLgzR60[d8n2"7x -f[7r˰ɀt<X$єz@^B(#?~0@n4yd$Yp,H~)[T97Huأ" - -px,_GzEJxYinU/-`cOer
8:R5lJ4v9L8pC[:Oߛ -kL9=1&H Wo<;Y -{<j3$!(p0LTjHwv@#nWN1te% -:%vnn?RK>zjs@ϋ&Kh}q@uLL4=` -'w=8|ڤ Y.)gyhXmglۅ~\?)L 0T>JF1r'DžCάekx:S3>A -7Tu@aBE`ԡL,άS*0x;J4١i
"Q -"ˎѯgG(WM()٩cK<w{wt» ;UZAV>B -`ĕ:<wtB\g3c^RμͷDz@K>7NhĽ)>P|ו=Ap!'t[H&> -DpQձ# -Z" -ik336UlhJ2Κ -\M2Lx~nWILsXPn&7$Q,MຒtUnޓ vWjaz ُ_-QUw>ľSЈ)%>gxA%ӥE uMP]_)nGA>0JIw1fM%^_S|!`hxM!p"Q9 8C'Q8P7 -HǤJ<ߔ(Hޯ~ğeP&+9pO~2Bw ỷ:B* GɖZIGϧ+HG^
l5=\\<]NL==uT -U#ծL0<&O75)wҋUc'.r~`{9hcI?OҐH0+t#4Yr֏ T5zFYj@F|bX8njI{,Thێ{fsϟ"5Lq."wdOaK-3tyAxm! -jm -T:>֊[L -JaM 彁?hDﭘNg,6u'p1'[frO9rFށUØ_{ 445tѰȞ%+٪d=\|Rϒ; ~*_]+M[3=%ٵGB6 jI5참l9DE
(w -wEbEWֆd<$^_:endstream +xZ[oܶ~XZ ~I긭=탬j?sDe'E")rH|Ṕ?wYOY9qfrzJg(' +M\GN:.W_o/^۾[nv'˹k]rٻw@k}Xby[Ws~3꧓WTvG>3[?8Oʎrt9 B_/Q-[/R^QILq#æ8S;NjUʋǃbShN٭a +ޣߜk՛V]Wo +'0C!Ρkx=~Zbkja"/FݪۮvMlN.N2N7 rRiT+iqRwm۔zV}F@hC{^7-ʿͪ]},GEAYHY"1^Ov-a4<hb8& (~0)7$Bz[33p 0p(d%g`R~Z1ׅ-GϺB;1BbhFpwdzIĒs{БyPnh`vE"#lm_qM}p-IiLxd1Q?ԑ@/wCkMEDW5?mK+w0g+[d + +3T+cu6oD:D?skS:21K_))"N ˺7ehDBXI qžr}F,8<Z2yCB}7[>j-Q_Cˮhh$m VUBpk(ܕ>h}E:#sJ9CMY-}ڑ$x|sl)b*IbVb I-OT6TjƬqH +E5:p]Jx}Q<k(% xd I@XXfDbMde e?UrfY!;Rd>qm,o퉕Lp4
{dW!I*mdj*)ȏ PVZޟ>1pHK!a&
p7-,]S{GpP
3wpz1 +l+tD6Ek*z*[%ro5;KC9:>N} +oֵC#\hAI
:*\<E[GzN]wkœYK%()3%`mh^Z0_Ůu)>?
o]\UH͉إk3=o4Pӄm^EFY8f~ؖ_[ y)^'5Ԉ{|؈UxQ)#>Z#]KUXp-2rwf`cUϺvܩXB^ +oN"1q+.'^.&4㚛Bq8V9yd5ᭁsa; +%ާ%0 .iT8@9&& +bN】8 ,o45 +FꞲy
9,(8=~"&*7̋,;fu +%T/_ W> G!cQuyY6ZX.tK05=H@T@N{IgX=7V<^{endstream endobj 5309 0 obj << /Type /Page @@ -21329,28 +21196,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5322 0 obj << -/Length 3267 +/Length 3108 /Filter /FlateDecode >> stream -xڥks6LEGSWI_\Z,PD93^ELOLR2$eN`r+΄ŘY -)PU&#e[6~ -bAz{FGgAK&Q5d'4B݈ﱂ'ecv/J,jc*B?qq8ކ-
@uGxv!I!6mg{Aw3h|'DWNϙRnߣ<R3?c>bPLhG*:Gr0 -)r7c[ۙy[wﵴ#'VFSX;"w)O9Rרh!NaXeN$'v9'^kT8>[_)!~rc2( N8'nHU+#Ra%(ެ iT -P.ޫxe#2}? 2Col -rGшE@VVr*N|p?^jͶ2,6if -3PX)6XEǧiq2BEMkbWȚs6y7P -:+uXy#r~ږ-ќXh7_eI+DI#ġa?6(w,5o3 J:i. -;e;R=Gq@/2f*n OQ5wV׳^'{B/k++o&'/Olt\RBN@)" -*N_u"2ʮ/b,\+3S uT`vŶ@Cʀ|IR,,o-钋P}#(vxS7/pNzR(?8r\Uݐt
Js<P哏y vyK
рŗtIțShl@`F;W=S㺡gꆿ䥏`z<jJsnSʦ(g -^krwX2+zbzs*Ȍ25X wyՒ$6ZP-c;0pLZqNN`cL.۾clצ$'cxice' -0*a!{i
u_+T3 -L),iS'az -?llƕ -^lD -@KPRw -g,7!Rem$Ϲyx3Z
(NX-W+
i$J6cvg}K,3ɘfZlWk~k&'͛ӝ.lD{ԩ羏J4*/tpz1z^&Q(VFď#.S1qjvcAӘ: -J%=GJ1zendstream +xko6{~WI$fѦz[HV7ɿ<HY{p8R"%i4`v+B̤ +^-.r~dP_?^8_!0$Iןw돗W˫8 +BF%0 +F[
xn:`h; aBFx\̼C;fRÑ+)ʚN%_w½E$§@z1Jt^BiH=^að~n y dZըqlN/FwudPl0qǵH9+ʲs7JLPYҨ(
+}a;:6QGF9|_kd]IkJ<u<!l(~ygt[ +pB6'_gg α]/Xn(wA,ؕqWT)v9.L`D6 +<+-o+vvo +*uXwy#r~˵؎-ќXhk5n %9K[Vh#?J\%FCJ~lQޭ
4hR58a?1"W;=gb*[ӂMUtYk5Jª;@[A]zֽ[SW'5HTd<_KÓjB0NZ(? +AY%}8,b,jᘹJu.0aaqBB^a*[H.BbygIz!0n&U|X4!@aM?rd=sVisTn(QR_xGtcdgꆿAOM`$vrl<d +ж5HUe4{pQ,0
:`RO''soKas7?fC$
4оjHboq.iGΟ]WKKPEwgZJ__&~:j'<a{Д:2\
k,ճMR`88'_ӽnh1)S{a*S_HllFzf_Xs@Džډc6<ؔ'%3؎nRӎlJLaEĒ_IN09&|pIiN}ȥ q/`&9Vwl_ܷ%VpRfnׅ)s3;S#o; +>eI2 x&B9)U 9Kg*gdg2@5p;<<Du jv92IbQ Ulv@(z`T]AQzP}yM;s/*|Le/9Arz4n +O
Oo(Ďȉ*9N(_Nr;
vC'*:Yqx}iu%Ѩ/B{iP帱 +I; xνw2=:aKJYqz߸Av}V}K,*TGZdWV9ʖ]7gB:: ?Jj%1MNSS}l&'?3<.ns58 Q͆G6XKTR +S[hzTR6pD6@uUAX#DNmѐ2(y.XזArWpvý eRfY9/,ŶH{duY{^RL\2WU%nяQWٵt :b3'k#꒲UO|r2m6\8F]y6H&7GqCyGE'Ec8MDendstream endobj 5321 0 obj << /Type /Page @@ -21405,23 +21268,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5334 0 obj << -/Length 3540 +/Length 3412 /Filter /FlateDecode >> stream -xڥnF_aaKpxYi.4;<mqC -I%1{nC%J.b̙s?g..S:LR4\m/B R@̏WR~d>Ə]^˷SX&Ixf}럱?.R2q?>_/^8 -),1 U9NLGϫ/cޠ*y11P?%켜 &3gIm@c Opy'ojߗ{` -v_75Dh5C.<x;z0|I9r|$Hiv=N7Q"O9"r{r5㲒&Z~݃3pb=` 8{鸿%!L
*h!AHaA""x|鯛r:%5k
âZR\:0d1]STBcԲfȒ\߁zG -('&]4bFS751Y۳7aN&2i! L>f;*%qfHˬ)E(p*矬"kX c枿y,3GfDz+@9N -q
Ga"!]Κp)Q6.aЭӴWHUԪ:r8ƒ})桧{gEr+f.7ZN k4#IA!I ˉL$pN -P5H;]^QQy'ݗ 3:=s͚,H4A2p'89E S thpx,\:ݔHhd!5N1+8m>D"FWaW%K"(Θ([JN#I7V%|ucт܇
d9U^5ՖB0u?`p]4Іr݆5[{SH~J<v)ϱAo -yǧp$ŞE.T
,bJ4ۨq*+ᮉom\)Z̺iW%זXfb!Aݡeu9D+b1m -EuoAQ JϨQ`
-$BLP1Xg -'P X5w֔Ɂ5xj -3~1Ât]ZCt#PJbBV}@쿐Q~$P -R-+Ve`pJn{zg!Fk1l&xӊ@t0i@:Լ
O?'NKJ^bICVfi$qc(I!`y_LQOjWb ,S{\vZYI@)G\pJ*qG Oܶ§! -aiȫ~c%;6DaL<:pc 1{AUu1N!/n:[_0:_&IC;)~,.Ț0<zM?O<BI
endstream +xZYoH~0aC1 L3ol䁖hTH*1~뫪!QN}꺫ZCiڎƉkIrܜ8w4U4(/'/uIOozz3-7gqX].\JF/^x]%xH|Z.O|Y|~}zY`>|蜮'Wj; 0_\ESY5sl/ITp*T5֪!//řk:-:pn7t+tmleVVhݔ:nVOǍY- +~`G +KPs9X %ASR
.*z m+ʬc<EhXz3LqԶXvlǴOVΧك<w+Rf6_M]HmͱP-{ So;LוHL9ٜ + t2e\R"XY P}+_#Mus|X[S9#w,jVA$h8dF@#SN՞21c{8@$c.ߐ7<Sa~H~%LSmC;Sx9-BcL1͉|1ŴF2J#j] +;CK k1FڳV.7R8䟡9E@(1l.I.d3QgIIev?! +ɛL|%13֞ݭ)`SyZEcY*Lc7cohb[p
AA5h776x3z+we1\sطc/{ 5h:rO~|e ~t_pTisY
=hinV4+M[(I$_R4XjRXAida!}gCo"?~5tN5cҺG J\%6ʥ0ޘۈ9m.pD2UsR
~@E]/Ar )zf6W0SLIy'%}<ὊRZklCVMj:leN$卼;(.8Jg&T'FM1jd1k>NH?JP)L
>3ؙ|Ve-a>RL:W2RyI]k
aXM>WWDcGic)NF$ŭ@._ <2inRmQZ@ +bC˫ۙq5;/tYk>,R@w0 +89DW۲ʃ30rl֚`}37LYE 5KUkKJɣMV&gC>n29TH7w>*#
m6OB 1/CrNJgG_u"M+8gF{"{A.9$oa #5ʻh;UiyE&y+=nͷ(v;f{"aD <;W^yZ՚/sVcu}fnBJ(FQyp(f2+{ wJfm7sp/#ߨ< +!~C~P +RWC^FY$C 7S5lrBݲ\D,Nx< +Zs9K!>.I0k}($gr*&$j° |'4h/Kn8K<bC&H\cSؼmSJqLIcrL.u>XZXhszgOԂ֢`OϛDu +z.*FF( +mϧFY0uڰ-'Y}C"t/e۽ܓStLBA[;WuzRiىo ?#&qyoAcendstream endobj 5333 0 obj << /Type /Page @@ -21462,26 +21325,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5342 0 obj << -/Length 3794 -/Filter /FlateDecode ->> -stream -xڭr6_R;M&Oidm]mL3hTI*g~
$QNfv's -\@wo2</}b?7?^-~x?k0g4ͼ7w7`}\/gv~`ݏ?YL-Uhy -H"u]>B;C^ -:r/̘ȫiz]lլ0l<Q%K| -={!7Kϼjl. n,䅈;2sԘ(y#P<;( -6lJ )۴B:^}ǽ'mVS -w+[Ե8\ ->yTdvI݊p @>0G[*a@l%!(@H&5f-jښbu4$std6vk|'H/&MTb`bsN8CDF+w矱IeK/5^IKePLp({%a2$I7Y`8"L=]}Kq?kv3K6e3:zA! -1x՜Cf!C| -91ϵ<$OtoiLOyS߰lz4hUخkzO*ݱoJ{ -*Z+@ݙU'9ޘ6\5 3*CڠƨT(\)Z+FTľ
0Fdk -^Y -prϝ`T &b ".ueաW%R3J!L(0,D'@w=w)n q'R]5/^
[XE1!VG19 4:W.|e
1 ppaQ'azhsJ6&2 -ٴܔ:J
# -(rSsuY
07bkbP{6I"9w;-uS`cR$ј-Ld[ $7,˿XO2[9Y1 %![N$`AbPLI֪Gn3*Φ{X-ͥd*aLj -[=QhH Nt6\9!՟@mRMQc9r2ʹRKԪ?8Hbp48#ɥMq%z7\8BdB#erxE$ȇ04ݪŇb©%[T%E)3Ym7C-XUJЩmm;nA
:n:Ŕ(2b e ŃS1 iB8y!y뫅{QĉEP͵9նBE{+boGk.:K8лpQ)lKn',Pw۪P>ƸI~0CY=<@yz#cuns +/Length 3684 +/Filter /FlateDecode +>> +stream +xZ[oF~0Ԣə-}J6nj-hTI*~mD'/3 +//tv]ysʈAa7w2,.hW?^}Xj0$IWW{ǭ7w7of1ޯT{w<v~7/`MN45돋_.p/_g#?̲݅-ſ*g.yFžJ?MBPowe蕋JOm˅miSBzktmAW^\|ֶf˂yChlvAE\eW"!'
aallYqg=Vrz.]:.xNBvy8h=7z
WhcU+c[_ĕ)Dã[x2dUd|Uch߂ o"xvX;.W7HF^\AQaö|'m\e(jW\{^mXjJ9$u(-W܀BXоX=f̾#i!8. [ 1[[+a8 mKQ!:5qXcvѮAC eVXxDEf/Ň~yAdⳉJLB, eQD +SJ +H_.A2g00tJA +u +C{taC`9>q[a30]0<i'^8:65cz>tL2] łt0IbSZh[$}U'J}*#v? ֹȑhq떙hknG e]~ +q-XoC6y wSUnʇdoqzPq +&8-.o3~@o]}
:UdВAɹmEH*Ԉaء`*a. X2p[Ũb52~í&Q=kj{h`DG:5ӜJ/mIDv{vM
C3CvsSŖ' +XWMƋ.؛gBnLk1?$^qv=#D/J.Dp32Fbũ/ukKݒuqؑ)lC +GP$G +dCv.gKYx"C<|Q26.'n/nSeG5=\`sBA@D7"7T^.o-Tg_QeILZm]C']\-r`D÷{$g[$n֡R{l?b[3푋Y(*^MbimFСh8<,oT +^5%U:7>CE`16nw\fWZT-b}.|n\Y 2sMir +x 3t
#=ðq}]E^#~ t>- %P&pmrW-j + yJh4ppTYtcL09?À[Ɵs_/3@&}uX
g0v +"WS6V*|O1Ų98oJjWҁ8gAA[дqY8埢NTDz{({F'rc-$Hl.Z|-f:X1w +)sB5yb'h:I=Y6]ae8AQU/ M^c8⤡IåR.eYu)#r<`#7P4I3+$+.řެ9a]a(2ѣq )AO#~7(JS>NyO)Owa!Mn2tw\`]IDj35皶sAۂt\$:o +"_w,_=zAllX.V +a֚Sz!SY6>8-}'[)PwUM3NpEЈ#?C30yrᆣOL}-le Ɋg +0F49ʟɸ+'*ѷ?}bfIPOOuD\x4j>z Op?m9ŀ?ұ~-Vr{WrC#JlG}_8'U endobj 5341 0 obj << /Type /Page @@ -21523,23 +21389,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5350 0 obj << -/Length 3607 +/Length 3476 /Filter /FlateDecode >> stream -xڥZYsF~ׯPJ{!%DIh-$p0 -N/o:_A{Hywny0;opOi,z{ -fC7cz8QnŴ1 -^B!|]!81QXEc0w(-/JRW1#Ds$(Ň} -ŰX0UC/tSp"9r4܉DwjC
9ףѱH\5$$̟%eC<Xd@GoG6H>_I@و"|eWLd כgo|O#ZuĬԃdYXR0JYh2\5 HJ$lVh|ueEHJ]pSAjecq|%̸W~^#L1@<dis+ -X9D+V2*H&w? -jpU]IR&D"Nls`a <S hm$Di7a頪p;RA*f/I'ޮK
$\~-#t+P5;&Ћ'#(>'LT&5) dz 6Ӑy8@8ΪS>W:#9 -A,1p~ƾQᢒӾSս }@n1"~>gyߠc*i#Jc@˷EsS$rrI gSΐGLɮLMvF[}w$p}/~߉Px TH -sDs[/x -# l>]6i0Rpm=LK,<f.Ǽr@GH.(uE|#V -}q 1qmXGD{y=n7U:h -s!])dyP"^>|PCI+?@3v3ˆXE:@8%jfCWrqc.OW70|T; _jK8#=2ۡ.?r-w^Sζ(/%E(w|3}@(~_J|],33PNF>+t1Xw*Z#KId\y}@Q(!yY\HJMDaeX.^&'zVjs=1l)ӹXcxT|tq殊[mQXᴞ75'gK˺N8i:"/pߔ-,]8M䛦dV{W@IZuuwg0u)fzk)K1۫MC;yT2']U]^o}g1 3/c;
3)RWtLn߅ƟËxC+lᡷo@fjtu4`)#@`:=%{kP+sc6z87(JwqxSz$/dp]\;Ɩ#e1UE1c~H7UHT"\k^l -ԍ!endstream +xڵZYoF~%`qyC&Nb;<Ŷ11o]ݤ$ ]<جh34v0%i:[W'f=EqZF3s3/dz"C"IRNjշ؋`w>]Oi謘j>|wν濭?f5j2D~?7oߟxngh{e$C7B'7'\4&6$=7M) JȟЯn"vX^<\ĚVw%HJ/|V=2xo0MSQGfzYftw~}z +z\Ukz0u<GhmL7^EBR`qEh͢gAi"6yw, +Ɔ[ěby|e![H}bM 4XfHw|DsYdZP R촻flRkAKD81[%'.nWCLASx ~ZurgD
ǓV=2ykW+b`GxDxZZAǂ%Cx;ק< [nPV``=Z:|aÝVG$f '^X$r2HS'ұ*+7ձ`hu̱/G̔s^MLTq >Ƿc)ly&h'mM'Oo<M[4 #EgS"X
cIpIMcB|"y^MMqvͮjj9;#r#0n L+e%תyd6ӈFgrcO~ 8uL/5b=(ˮӪ %+ür'9tNߕ;MZJ=hoNHl>+U˳w+y"lj!R=ZnXAcD±1[3e NAǚޚĠgԠ=&6|rTE/zӉ7;T%*Yڂ=N]BFYb #(HZor6u&pP#$Q8*'Na:51f3$$<Cd&tgGcd";ysgR +n;RcA*fOI'
U$\'-!6+(Y_3N/tILjq- M<U$J+dqt),%iTOIh`mȮJNcKCu +e1dT(ltRuQx A-:~SU!_4vA
?|asmK}CT}0E|QDzys^h[ߧҿ,3ȑcZLir{C2 2>y+ەư^݆݅``da408}]wQ g5[o`u `<LUh~ +
mrV*
?á 15B(ύ'̶!Q
`#KsڏĚ/a ^D\d2c?`TϹbHY8^P endobj 5349 0 obj << /Type /Page @@ -21586,22 +21445,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5360 0 obj << -/Length 3205 +/Length 3082 /Filter /FlateDecode >> stream -xڥZo_a,3ErqK㪱Ҥ偒hTI*>|r%QCa\~of/=/Tvr._82x~_%/}ͼr0a.{WR3w2Myi6;>B Χv$UΜݯ>ߔMx37;5{]e\.W o ڞCFf*/yԘV"QGZ|?p\&F^Hz -&0ȜsY_Xy[p㪩V fw/Q -1i$N./]^L^<4mq
(pLjH3HjC'<q4hD$PM<<'jnbVȫ^f|}5V7Tkw<'!/\*{g;.P@ÆXI35<VhTvUA0Se\j!.l"[[쯑+7JZb̻-Uv/my"*/q>zss`_M\ -hPy9)1A>yLۀe͍Ӻ\5vQ)X(N#I;yY91i+C|ifV$[v̅.\*]^qGk[
^VD,dy6f.vJS/a{vy30U6jí
SU&`D)V#1rҹYQg=?Y$뢔qq|EnGD]9)nDT&H+R8kSl"4cxSrx(_cU- W4[m0
fs+f^YhLJ#m!E3ҧ1
,,!$BOt"_Uv}^lJ(d\
]f% -) -YՏ8qv[~JHcX-W N!x&_!|7<+8Eq*SJx>r0MtFC0EI(뀰ژzv]zdK -2<10#@5\4kVQ -:|kR(+E7vϲcqi|Ax k~u>ɴC/a $ls܃qA!©'pF|eQ1 -$v2Ŷ5>_ɿnf -t>%'*&<$@2| $m+wHmVOiolM]1Oe%Zj)Q8:nOu^Ą4_4Q<}Ꭱ6[.ܢl!#LT -Va -X?V"rRT"o3_YI\OB|<5
ezK'wl6|8h$٘?ff:Bq
|(mPhendstream +xZKsWTZJAky^ +cӱSZ$$b
+]ouT38c7Y0K'\?&nB./>^ݮcj³F v:禩Z-\S9=s9Pus. aW/Qi!2q$Vk-3u_% +n#^kprJ)|~Z
E$y_ +4u[w
|.I["2t*Ϯ斶{@>
tzE7MKΰ%VRi,FeD̔ш +MF5bdp+<OL+:nY"uq܌sS܊M|WIJg[>|1E$ hYz(_᠍Lp ;cMf{kfYh#Sc!yk3j]ۘ,!$B-:,!/u)2#.:JެH^toj4>n]o#>tl4d1ٴ8e
LGFK/sۗE äG<@^F &k8@_
q8??BGPV +kGpSB
v⍵=Έ +vkjm.#::RC8b82@TB2Ѫ +,'w'g +JS٭r+aRtɁZ81QPC%<!ϰzG&ȴ3NLP^x!1NeUVz5&}1LNR\^v +c$,FsQ~
[Q%8ָ~ꇜl}i.vZ!)2gW0rs8o%66~J
cc{<d%ȉJC0@MÛRHn +!hR1Tu;ݸ3(O{K7vg3Au9Gڢ3f= KQBʍL`yisQ +\{vYI+^iXWz<yMM{9ӯ6%K37->A&Ϛmc9 endobj 5359 0 obj << /Type /Page @@ -21636,18 +21496,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5367 0 obj << -/Length 1666 +/Length 1621 /Filter /FlateDecode >> stream -xڥXnF}WnȠ\qwy
Ї\⪶H@Kk0E*$%,i -<xe6k
D`N>,innS^r!:UyUz#͢nlq$`V;U7_ޟA/PɊMjem4R*U.FM=ݡʚʊSA(}Ye<H8RʲZǖ+"%Y+U=ۋru$ժYPgIxgTye'cyV7`c|ғэ#`=I.,hy8:X@\rI3Gr;]JbyG3[
VQ\+fn(4鿳8,ړQ#0Q`L4z -] -{H+РY+H[=&7PvhM{'*A$F2WP[i'~JCimj5˻VQ_2PC`fo(FSʸ=,Dh_ -'&C?(M[@2FѢAN-zJ:ھE$N[<0 WQ6jd+'wσGPj@0Adg` -ZB5n_YG(NI;"ks/]҈[} ]/aG"a>|V D%)xn ckJPpJ$K\pGy9(& p7o>M} r0wPXBnU -9;yNc(:47Ō8u.ޭ`_v0w4#cax -?YwiX|lW{J|tј5cd m/JJ5t6.krl
%6E6h/Qno@B͊E/˜d"^"f?aS3P]V-YDŽMηc w=B_<vV;uW9!9q|Tihj|jjSKdj 'D +xڥXmo6_ad -[}K֥@3/qm?(6c %W~w<ʖm%-0xC:|?>NBt'$W#w#n5d~hG$ggFetvyzB8q|ܹ%zvug8nD83R>,/Y+O2 t +Jav +1dqgI"(p +*WceܹK=_:1n] +~kSz[~ +qe\tJ
5Dp%{?\`5D0s0dγj1`2VUy©)~2 HK0h.XuT\WM"o6d4rv9Z10d`c҆a1"|S V#&xL<tNAs!\:M +}f0B#b4kh{ɨxaM{H5[
GM"rX'8ה7n-s+ɦ_M9T {OO=f#5IhO\,y/$7Nd2DXoO( .m#M"I!#d>]x/tU{~F +ѕ|+⼿MWe-ihȪ{R<{7kKJ?-@G=ͩ$? endobj 5366 0 obj << /Type /Page @@ -21683,22 +21543,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5374 0 obj << -/Length 2137 +/Length 2090 /Filter /FlateDecode >> stream -xڥXs6_=5Bϼq]Vڛis5HK;x2t|N -_NHYm.|V>_Hob) -OQN(P;w3OkT̼8N_ngҽg3 J-.z7K`LmŠh^|;9Ӆ/t8{Baͼmkûy%ԉ}"Z*'}3/T+ݶlDYw}VUh#c!x*>[ -V}Ǔ[H+V֏,k}=fRͳ~}(Gۢݔ]W6uw~ݮ}ۦ=/QVfprS3
UkIEB@H$h}R.l- - -f<y*wg8io,t_Fׯ}'4_7l;a7QVaۃuď08kT<J>RM+0WInb 4uFYo$%|2%gi9T*4p
-x<0tBz _P0JRI<Vxƞq-3KR(jV$_AZD&%?zrPbJ+iʮY\E#$ZH?1JY˄A^x"x"ɒ~.3 Thd///Q&` YmBjd+>d'oCifv/$>Ƚy4v#(
#ؑ=L_a>
M۱[&XWP9QזK}T2p_7Fw8}tͮ]Y_Hܐ,>akC7γ{#EQ}bdp̋2Y`ChplLoj~cbs 38F!&Oo/*iNЄ0|"3nqF$Q^24tA2ŒA#ˢbX
gLΖձwٖEGo_V)4APF>WK'"$
}X55't4M(x\>Ѥ$TR
^2's93_^$i$>/;^EZSg[+Mkz+MS
9QM#:
i2o©%65f+$i<`Y̕ݎ -fo, -|2dlYR
˸Q\"Ch@,űiLeJ3A'.N.~͍9jx|në{zUiwh\R",/C -l;5b]} -xȦi<u -Yendstream +xڥX[s۶~<j&oyK$u[g&%ɒ5^ +Ǔ<i9~wL/?,e}}vn:Z{2YOS3fqugt?Mc-<~Yp~qjTϋ_Ipē}!d0v^^_2H53]# +@"`X?YOWۦuf,Qd"y峀/ +WN@+VT,]}ldi?>eΣ&o7EuՍoVհ~%ʪl*f#\W_tþv?ccР,E#XJ)Ko
GuY1G+dNK\bu׳Le@k}ip[:r
9kjEB!HkB.gpPvk82P' +T.u=ACDe AQU99<rrHp7_!) M5N!'c\֠䠙N
H;,DZY(+."T=@bQK8!r;耯)JU!q6sGa]6VǗRbd
Kmb:'Ew=W@sL?Rb=44#g̔cNB#&{:n"C0% Vuсs5] ~r;XM%Z1yzKU9#+Ĉc4_74(wc57phzTΐgF\TkVg˔,_iiD@Hd3Ì&Pr(t%X"j6^,c˦V.pzp<P@ET%{byƾ+s(LpضTma}KvBKp@"/g;YT0#1ʻm@ݏ|=_\[ +3_&f
9`y>;8/ +'XWX\ Bf1Ww{La|aG=Gȟ@~Vsf(SlqmӀarܿ&1'ڤ؇}jEf?\W[{C.r|Yt ےv]4L!b3?t9lfΙz I-O?2<f_^ ++*CC@&>Oendstream endobj 5373 0 obj << /Type /Page @@ -21722,18 +21578,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5379 0 obj << -/Length 2819 +/Length 2736 /Filter /FlateDecode >> stream -xڥn8=_aԌ(56I'&&v>(l%ג{.űY(LɁ5W R(k?X30Fey;=@"t1B5?{~OWÑRʓz>N{dnzsw8Uޔn1_]M[N[v?HBv/$πOar-)>uJ+FYa:V2=P kAd|a|Mz_^M-J -_DZbޚ#Z.Ktp,`Þۃc
Bl֛n!W+pj2sXeBt~K9_^h ^|ȫ??;ކ^
UJDWj -% 0>p!iE,!KVJB6d:PY,yK-S1RƵM)0G;pԙ!a -}c>Qs;8,> B3ףbCh| T%HJy1n7«$Tg-l]`[ww5A( -"/mִ,.f6"@+cLj<˶YuҔ7cܐ)"]\& -#:C?Ϩ8&=MH#DdE - rU" ->Yfև^sCD[橋#ۂ$e-rg eUʘ%:1gYQ +xڥn_!Byz1KIZ$b(RCR1yȢ,:i9O-l7n3{͙4@ ӈ=5p0_|d}u2_=GZ2Ñӡf>oop +{uռ#H (` vf7XB`{+r>=85S=ʏ\_ `a P\c|&P^R>\\MgJ\>=]&qLJOӧtvpFJ@F/Ipm?±m,lɋO
yQwb~+S_*aToiПmu@>o?vWB^[`oS6hB?h<Rhsspj8V|Ha0tY!orpHV*7ܮ}u؈/uз+PYCp+6Y&KXH ɏ`RᡔIdYHSmb^@ޘOrYCu;#WևN +g]G¯-85$MݓPt.hO$[}<τe̛ nȭ\]M|:A?X]y !HN태FLXOyCoSs +hyGh +ieI/"XǛw>mjx|8L/A,?&bSm7:-v;Io{77A^pdKZ;˃+ Aݏti"$,SSC`3,6tJ,H>Vt2?P
aIqN&BNdqaT7g_C:¶d +-ly97Jd-Ob'TA!vDE1DDMkl@Y"fN3CvkvxA5(q7z IA+3wlwMrI?GT< endobj 5378 0 obj << /Type /Page @@ -21770,22 +21624,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5386 0 obj << -/Length 1554 +/Length 1505 /Filter /FlateDecode >> stream -xڥWnF}WArlrqcNiD*d,)Ғs/3g\$2H:
Dr$r3켝H/zp b>Q OEozgW֚ɔO8NˏWSɮi-"Xn0M4q_/Ls1:7y=-m -8JO?o -ȴtsy-CV#[j}W6ٶPF<ղò-gmYd?(Gʟ* 6)[g1U[nNr4hzw%]gPE1ps/p$Θ!I9T8n6{zZUKtuUB">
1ؑNX^wBD:ZmSg@.{"\"h)Vf -I=>UmēGzΪhc|QSIXy^nO]$1&{ T`?:f(xUHSQJk,O8BRTV-:fZ* -ʜfPh8nj͵ )JԺ -f'^K^j1;b"6b7S:-{dYW\4)%JH m|Ek+;u_s,خjj:.MtXj{w-V*/qKxam&o! -(tF[ֵ垼ӈ9a|SwF|qM3˦6EEOIPJ -J_y -XTnW,-JGJ0BTw|2ݺ ]E -WgCVQPl&vSV3RV{US|r+W$Ep'&C x'8A_> -,i#?2" -f@L}}r]u9_5ZpM#O"E':=
wS*yl 7>5?q +xڥWmo6_!F3wIۧ/fthAX-#Q"@D2'r(N$I-#H .EֳhʙH +4zY=DkdǓ8NWcɮzrvqw}BD ]\O>{J;ȫit:M=iGjnzWx&SO: *;$bb
yR@y- Ő"k{ٶ8c1G6DVe^4E8JpQځ{|W*NX%&awى`
*nLJZTV\z(->+2I9} ) + >r1@qZ;w۴|ڐIJL}Ҭ:Dcёzsk%]LeS;͛hqc[b"$kX/"ٲ$c1z3_4E֥Op'E + +2"-4#>T_\oIM٦wRixebz0Rبp& +$PkihA]$_]_ʍɇ(aQr0fG6nk\ra`~qLe,vR䨲 +nl9P1M?Qڱn#_y:aRwN|*|Nw˦ECLI'D*rXqS A&p;= +%x%Cg?Av|;ݪ ]E +U endobj 5385 0 obj << /Type /Page @@ -21809,20 +21660,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5391 0 obj << -/Length 3617 -/Filter /FlateDecode ->> -stream -xڥioj h+(xAEDʤ1F% syoFjdq|f*4Y6?D;D L@f듳(̣|r}66//4cYf/*˟.]_{U%Ni.m|y=F߮?ys=P: -V
o3
V;t%6mDh_';G0ҼG-t>r5;囯¯p6bnv?oѱXUONUB+IPeUA -: $DT9<(KQ/k7Ba"r9Qr<aqj
N-))_8cܙ_#eeG="D =_2Tդ /Hajܘ -ċA.d8ۃ#ʨ,Nu
1BGYfƥTW<h{^_ʃ7*AX -2rגSA"rʰSAZH9,U[['"4huigVAzLdzx '@PHĭ8ju2 -Ld -e -ykܻ|E{D7o[J[N'݅'q+ew --@"-knS"c26C*}f+aƟbW:40}n#pG7d݀g~T5h&7ӂr7ɟ9.qiwQ.yĵ~XE: >=#>eK*^칱Aoxlzx۶y˃ -$$S-M]Fm5ݞH4)6o+~{'&fu(zZj)| +/Length 3441 +/Filter /FlateDecode +>> +stream +xZYoF~B#} +xA2LKKMEjHjc%ўl@죺&$ 8QIb}L3%AbבOtr"ދo.7~Ό1J,ŏu՛7_cB~cn;\3~0ͷgnRͬo#b}8d {&M&;(J̆zyv}Ϟ Y14hLaNBQ>4* +a2d@ClvNG%76/fqɊێN]p̆hX܂V0kd9I{%Qr)R +8q+jV| +QoK֤q@p(zp`;DLpXo +h|r7ЎA&jȦdBCŕBj"b3>ð߹7pBaBxzlNE:S!л U:Ħ#w|@ȕ{x;<t>@K#g{pBRd۩۶ЁF"wq +Azh,R=)s"mb_9jA"^PD|[mնkBAG%"4d/ +5{m2*Bt`=wUL|EV1u>`jޱ8Ruc;Gqa-ZeM펱^&zg7H0Bm@p +f5.(s[Ԍw7o4qѣ:,LKҥ + fG$$$,1x4ſ99c";o#ӧH08B9³qd]nc)`?QJ٠y'xU7vP1fWx[%NNQ:qأ|Ϊ%E#phI:|ݘJ!2Ʌ]x>(]qN^S fka +}` +GSϭ0;Л!T7lxk)`rFDW_-PpV𥇞yPAݗ7oA4gCr}(^`kJFqː]ޣDn + "ުWum2=pk{6$hx!{ +<4$H`-e]CG_Pg +ȿ|ܰ0֬-Ŷ
[KFD;*`5|sw\سW<!"[>rsmbCerm+l܅ +c6=k\ж %sDO@ y[1ᴚ!8u7F.^iNzzSKP\Hh >f|gt54P2+e.:~P{5
(~0TeFosT_n0Q2ʖR$A4&g4L3궫g76w|J `#X%ʀjr{È3o<[3lkwSR6mWo0S8H>=FԲ0{S,2|.4&Ey`zrllIW.1t%P¿$rC<+=dMY,*E_b3
)h$-=cqn+9{-
Jp[d_+鱜endstream endobj 5390 0 obj << /Type /Page @@ -21858,30 +21715,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5401 0 obj << -/Length 3637 -/Filter /FlateDecode ->> -stream -xڵZmoܸ_pD[de;_;iPpWZYH_y#ݕ"ECr8gF..tHYܟ-p -JHV7g'"<7:zqS|^Jk텹\izkzwAg轿-30qś/MOgo*G6?}, -8Ogl -Q9-SC
<JnVZfm}T9r?G!Ĭ^|1E1 -otɶlEtxO -7a}v;)d!Y.vo3iRYp?x+ d2kh9l$ -m
/e3ϓpVb225
at)R!ꊄPRa* P;Rݤ6\5O>CϹ_<y= -l:E>@!UI:uC#pV|Hn" -t,=\w@ -@sI)kGgGɹ0? -F7cƩPW91Ow cjS l'(2~LW~wsJ=a|1 -BqQ$8MGT"ypكv۔s~62 ԆMc=ft -]$as:K[3V1TKq-; -SN7
ѐ?N:9d!%ǁnO^4*/@=¡9$
Oyε>b$ ͌X؏C.ݐO mϨw*B~4ۦԷsS]]9(PJՔR4W 1z?rK8 1 -W -\hAK@FEJ5VZ}OAA@OF\Ier& -N
[eT7d尡/]q192A"$5X}Srm-өb⋰=|i$66-uDjxSONXi6rc=~7X!(yv59?s/^ &=ވ=5IF:F9Xf -e[~5HFLk$&8=f?#җ
c -qx]1x1(.oyc랠v
wAUO3kN#i9wбtHsnU.G
XlKO¦`[w@~VV -] + +/Length 3491 +/Filter /FlateDecode +>> +stream +xZ[o~&9nч$MwEn`dbD2TH*fHJLvZ 0`z\s(J#S*I}W*_x|o^Vw4x7R3wIyf;{-Ny{?YʹIׯg?7zw?^P 0VHNjwUx*KW\?V0Rn*y/n/awpū.~74
-h+כ +#11j -<v\$§Ys: + +p""+.6RC]u$jvhC +6BaO=<-Kp^ܸ%/Qłf!4aD3|NGA,A檂1&-Bn-ʃu5|^ n!pN6m{jilc狷8i'&ktōJf9z~yB5| 1֗|Zi+b0e)W%]p'L3qh$2Ke(&`!i<V5'Y9b;ͱ +!X/ P%V"[Baz^ St>:M69=xc;hnw&~~#H~) +s5q,A/E7<B +WLP!)`5=(bWpkM9 r*7_CKwHU];1&rn9Bx3z6Bw6grRA|%bܒ'lG)#Xk6 $#Ē +CJƨ
?I+gOp;ʐQA:\B1)<K<^}$C.W!m-&aUQ +A]H`$SOeóa~5z[2hq0U'(S`bx3`+wbM,W,cXrp#!煋U;sWl\ۗ}JI>@NQdd+T8*H.MfF9e3a)B2K"i2j*H|T;~qP_1aՕsuUZ<2v TG|"A^]gh*EPj6IqMR&Mkٱ6<=2kєSuMzc5+VMDFag
#sߺ +i%=AX#@;z¾RF}&fHX~悶9*<͑`5PP'{'KHUU9+
ĥ}`(;Jo^uK#?݆ȞIok[$w L]:(e=4WQ&I9 +HTr`0s`[7~Qc6`Է7ak}gW+u!Gh~jvz]OS0/t-N1M +I64bR +I&eQ,&G&PAçVN%`QӯX_Yui)_ISendstream endobj 5400 0 obj << /Type /Page @@ -21904,13 +21754,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5406 0 obj << -/Length 1921 +/Length 1873 /Filter /FlateDecode >> stream -xXmo6_WDjZ$Exyvc{tȖ%$'ͿGefspp̐67,ㆧ%}8gLg{q3J]:G6|7Ʒ+l%qxmz4]RJv]<9"!78=lyR>8>dVٸ̯{_,#J,&}x8LNlYo5敥FB93ۑr+\0Ʌ*)֮Lp-϶RyH67ya1>NN (sOڏQ ,3+"R,.=]uR+MF8ԤO" 5lLI[mlA')~$)3jpnF}P -t\CIPZ3B-y6No<7[jAQ<eyHvXɣ8J:l4C~M>+q@[IdY]iGi9\ڟhGp˓pJ!+N|뗌r`<ek6vS̳,頯;lޑMnE/̉jbvNfyH(IE<"0UA?,ĬiМ tGZ/$&h~4O/Qx@w?C/ckZ~`!;PqX$Llȅ"áLJ04qzx
(FmM-j8r ux=r"s//?WMdp~U:*,!8i4DGS qRA1RbsQ[)XRx̣äSk۠ⷶ2 -dkv-'wd/mA7Ucʓ/
1G6endstream +xڽXms8ί*W!oT\ 7wJWMۭe;W zO%
tŵ=qu]W VM_:iS'Nm*<Sf2o_'nsUO']]tr5͆_pdPW'8=\p><9gZK|ְg2h7M /qU1UǴ8L.IgwBsBZ6= V0^O ~Prٳ,MZ@ҶՃnOWu^aX@e~1*,I!*p4feDɡWoc4\hkrړ3MW}i?ϊ$UF-ZT[!`8Ի,NatGYQuXR-e@m1JTN>5EG:'=Q^5ܗ2\|qW-*ۦJ +`>R?@fptDO_*gk12ZQt5|z-JgقZ$N=ћq hTiTKR1p +r¥-*M Mu^D=udM8)U!(6*Җ8XFE4h)96v,n-9֝a"
`'=pvRpvuHEIx;&VKkEB,ec`hKCw[)JqP.8ι-r +B_Hđ +PSQ0> [TeQ)Z)E!JPfc UkdB(J͆ b,rCFb+*!e1ػ˨jcȻ4"&ҍQSN so1uY2*{;(NxA:ۭi:jXxN5Ea'$05tjq/ǬIY]"K S~~J!3ŗѠeOxK$[4I߯9Fo:7! 6QPDpO0puƒWn?a9`<aac/eeI}ݯVyG;_! +x!\b<MU,DB3RrgQ+4K32~ 2}\+}'Mkв%zΔϕF? ڏѳ
YeL5U<W>3035n[(^ U@۸pQZ.r^.5[ȃ-wbG8
Gь]A3͠`6닋>{wWvr)Vɣ}?C11{eͮ5yLsZZ}`Z$y蔕$Q6N|_Hԇpdjt_Ad29D/?~xC}fSvMCL,#dgW5~Vz1i+o~vyr52Mbx..^L گ)r<
kOoA'<%-^{)wc +ln5\Z~wݚ?\7T!Lfc)5endstream endobj 5405 0 obj << /Type /Page @@ -21934,24 +21788,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5411 0 obj << -/Length 2520 +/Length 2357 /Filter /FlateDecode >> stream -xڵko8{~/Cd %RIwS$/qt"ɍPYJr7Jr{-Tp8XY -o hqd>GiQhε)3k:5OgwÑRʰ1yo}-㞡ӻj3l -Pߏ>~21*06ˋ#S8-)^kUWfQN,Ts1mrUiy8rc,kXeQdhb9VI?efxt-W21^u1yq\ -{ -˄ՋXTwٽywӧ - -(ׇMzn~\
T}s9u!rq||۴r=}UEm ;hNiW]9+pDsqq}ݧ -9N`W;QI7lsf{XK|wzC- }VX,<>Y,MYSQh'eQL
{1[<.1la)juρʕ?,gJu}MϺκt[/ݝؠ}MKxy:i7SO;}|ξ1:^7'bF
em=8Sf۵ZCL1E`]R(*^,E#!Kł^cʭ
ul:>Mj&{vcDG.Ǒ>~gu;PG<X:le(}XQC6zFQV@nXFbqРa'YDⴊJ$PmК!Kħz"wDy㢲\F*a^͓2H8O|A*uTb8־kx@Se<e: kCGIB(m, -n2ٰ[S -/|N¢PZR(KG&Q 2X(Cý~B<: -e~q2_m4)Ј!>O@%E( -Danpv ܠa~Hz2"/PGfjIsSm-}&Oo>vjFĆC*r$b'plTuj84T0tJex5N5&|vAVVd* kmԐł(CvH -7$dz}Ϩq>'[>xD5:A[=+*5Յj>,,8)[b'<ay&Sqzg&N@Ju:\RnmpH
?=C87Mm!uA^X~:
ľe
xJjPчkP 7k &;HTȡc4$k&,URXҗlߺm%NUJ_q{[`|z֥fnj -Ka_w/[ __Y,3*-o;0 endstream +xڽko6{~/!2C"qع-]I%W7ͿeNYp3Yς٦%1Sx^/\XϰVOc`Α=ffs2>翜Nf`gM̘tr;Fq&Ȍ .=ai4^/^LV@?Y8`zO0LŁiK׆ +!@2iz
ezl ZX*>6y4~ atZ,"9@{Ђ3!?&<Y9\u˶~Xf +EoPF_1[/q|֬;voUxAxQx65][qGf͑o:o%d*͋mG ۞;]IK⍥jt
LHovvb +fd[Ȝ9t2x:~!wMJ]eY#V/AЬXaYE4!/t0"ϫqXՑ= +4BIOZPfv]S8|CrT'5d|wuuwuA
۴d۞y@h#هGddpuu*jl[I;oVvc㿥j:EU.Z +k3GrqYWi\Uqdp(\ :BnDSWыҴ!کvvnӎ>ZUN}'*߱v:,k%k3GsLxsW*!]#ï-O8JS"%e9.}3$FրhVY$PO}<Q"Z{(cTH%y\z gqHJ
Gҷb#szq QF8!i^$Vț,-i[ +]橉833c?#0((G
WrإU<Yw7!3ȰʋL6TgHAshMKV?Ul)bU.%|\~ +HZT+QzXI5+=us!ܲ`rc%F~5f ZZek]։[ZX^JtqQ`DjZPf +,Mp#%N*S%7PUcVƇ9
/X1
λ:=Ug U.P+iL.αcgYR* ӦL2U'
/CZ?SoG +]["no*10|#)j$+Ha^Eu-ty%nZ
M[J{]+w`
)@2YE2
ªNvMn8$ѡuy-)q^ctB55o)BMIM( n㲪[R'I3mBDJHKt71.w0,Rċ\գJEhjϢ
hJ/z +6CWAp0
n%!I\InLh%9pGpƵP]`M녆Lm>m_endstream endobj 5410 0 obj << /Type /Page @@ -21989,25 +21840,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5421 0 obj << -/Length 2757 -/Filter /FlateDecode ->> -stream -xYYsF~ׯ:Jm9>beˊ֒Nl?HPĚ$h -iQ*at4Y
r<EIW'hd6m"ft5xջqh T&ac\Ż_ -_oƩ |;ϹgUip!N>})\)L- )ld|qryn+FjH*֤¦XE)-ңJaeDr4(7p
wcn5Y
gnqx0 -MA4!W<Y4ƭX<%oPԼN=I'j{?YstF{ǁ ~6@xBf$ýc -8+vuã势sOU)X3l,V0RK\Sx>-n`p -Q-uT;{c2C9sO2@X[%Wi%!Ac(xB!?ڶAԻVDJ: -_GRE
-Wd@$\MF -RDG H!x{
CwZA۶2c; -B8pKt4Ax{
wfOng;'l|Z\~_xN/8|eC~d]hȗ(m_^;GgÇ.n.)k!9'8F? \_Lxj(mq[&SzQC;l \;ϠRPB:U>=\EiQ0b@
46]NC8T`vvJt|B"9O,nw>MQc1%+ -j$p_ &'n)517wSZ^wMd8s6F~^:W1ӈc8xW9:b|Zl!sx9o#|<#Y@MXs'~'X]ܼhj,V7*zPA:`v#H ςAׇH)m|-O@;3ox@%"s 6.tELnY㞣o#,3LkkR^hY7m>)XdQ22T퉉3Ć\_KuqMK:^ AmAR*wCƙ^Lx,)|@UQo~uѓ (^8TV28VBDS"ă2q^g%Bkk -Nnq FnBj<Qg}MDeWY2 -qY}-tᔖ(G :d=Izt _1ҳ-(v` jn4~\"NjT="bWiLG`:M!Djx
L7=E\b,[m8v鿎?T|rkg)vNg*vjc$%k=T~w\.܂7Ȅl8VSo5Әu7p#%.헞:XqI[?Ke|q+0
B"\aA%rඵQM/J۱O9أB{o_}\W%HvO -T/pn"j[R#{LαHQF;P՟!N"FY` -vlVMS$tzA{#|YTΎa% }6`Jg`zS5 J<nIh,k:tW5~
}'8fΏƥz`Eы --.,A. 7I:2q
+a6N3<rMag? mp{$nʧXmvwCn嫏 x'q&߰q +/Length 2615 +/Filter /FlateDecode +>> +stream +xY[o~PӇ!gx (lEn M0((*)f`(s9sw$ +Ih?Lɢ8RKH_E~D+?Ud"ӳ7YN,۳yg34 9)B_M?9z1H53BчOj9R~&kh+_826 9:?GῡW~fbhO߂#p3
lAhei{n;
R5%\fәA9[i8Mg%x2m&^>\5sp¼5Ս̈hᱚx(WzX`yO:SCޑb#
@rߏʪf
kY SUˆ6JvEYwSxk1S; u)duWLx=V>w.wZӦsjqnQʗ7b8p瀙uY7p >~e8)Mu:BrYܟ/puV]!~hb_p0~]oں"bp +0**/@/]
(סPa>h^TG6"?7phӄN}fT5-hMgFapO@BZ&/mM\ݝ))"|4>*m
ZZ +抻/jU6Y+;
wp6cG"Dߒ1ʲD5`Prv7||^C'X#ZÔR3&O*c$a>p`pK"ZM`JPe +©ԐQiqpcMMGqp
7@s3UcoƀAX#.e.`ɩQTX&6@CFAѫm"ǁcI<p8pۃ@ʅ/^36>mIY2cO<O~˽ْe?=LG~)~-h/ +7_gu0Ef(//i$3Õ
3Wwn>/4sR|b`FɊ A1!LN;0Lt~
EA{@sx -Ϡ\s7.UwHxrU6@HD,bG5ݢqw=MP )TL|KB "rDxk|M閨/-!.ݻ+iruEITKNq3Y䕅cRV}T\ݤl7nf1T:91EޫʘqWe|&19l Ӎ9Yr?S4Ю>45ۑWYSh=b)F w8-6FJ + Mizjy'#!`~ULڎ*}
GRv`ı)!C@
=Zn0AtrbFabSy6[,ujd₣'{JlX&]?n_4MwSi2ABecA Ρx +N3K2q(3JR|bfqQg$-mXF|HYgev!%h/O/m1ơ&`6_;C
@+endstream endobj 5420 0 obj << /Type /Page @@ -22052,22 +21896,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5431 0 obj << -/Length 3698 +/Length 3484 /Filter /FlateDecode >> stream -xڥZYsF~ׯ`PUc.ΓbPj-s%[I -?~=ΟԟN1g4Y -ʩj
Mbp>$~hڲK@H+NH&S:7*~KZ29Lh WZs^[uȺ/툵2\QdE?G08L#k0KcKQh<0zp}qt$vfep?0ڰPB^۱H"DXӯQHW&gqHgnW -nrƮH'l &S4;eiЁQRIW5]⅑xTëp]lp^A\֨nb'8">.7- -`L}<+9{]~[l
`qd Wp"lK -suI\~ /,sRB'#b]q3B!YAT3nz -a_T(qWGX&s[UL[79ұ06#7bII[D2Ƃe㱙#p`d Y40VʡPP-u a -{R`._Y=~yGp(}Wu?}Fmo1Qvt><
ftfQALE!~a`;H,j>-qt
c*u6vi3itx -ݾoӉ&pE]*L.k@ILIB`qZڴ7o07sc-\MA·0{jÀ
LHZ1d\=`>7lJPU𗎩O8EDp/>0lȷTN*Hqs5Ŗh0uCꂰn-$|AsrNڥ[:gƢ9.+
ӱԶT0Y} -Bk[6[Հ]i -|i>1@ܬbCXq.P,!!doh]C-m`vp,dM::1.b S[QKR 1Gc/Yaߥ>mrӱ!_:(d}*]b2r|-TrQwH\W5Q,T3W^;ki^SYlLs{}pNCCipU- -V7B;ן]uhXvF#{bR7jq*TlsbL(jRߠWzz):]z
:ei^ѮSYlLz75CjU
?)OH`s̘;^lyPR
`h8}v7؆VIA^0,ٻbw5WcGU%.P,+C?%Oί$άq#A>@pc]b3gcȽ9voƎJ`XCO7U:[qSV̾ՑS7 ;*^T? Xendstream +xZYs6~PeC +\qy
/n//yﮗIr˫7ϾIRBٯ$,4Y<A9E.vgJVnf6Q3_+T*\2N9IhP@7pFZ%|]Uv^Ppatͦ-=iǢrSo?a`8 ++3ImFKv%FPaMC)vK{wzovʎ+;R&^shcn<{sT{L[쳶ȹm?qSEil`-"T03@
HivPG</vqznÔ݉Mn(vjj<ΎڳJKu=>$Bۅ/h`-֤^' +xlfВys=ulY~z:Ж*DX25_YxGa4"C +VUs1G~30F͛~FE$0.~I^!F?ّ$Vg4,hXj\~~>}DHu['f 59l<'wH5ycdd#:HŌZL9`EO͓vU)4j2Cn"Ixk^A^c&HK\jb^W*ssa +XWO<ӶAuˋw >4vX-)KTOT}s[lgk.صF +wM*CCt`.)Z$y ?pFE(KH*XKDP˘i(;=6NW7Ǹ%RKL< Ci4Ih1|O*B#}D rGg8c6@BW!HN^ ߌ@ +UԹَoxF&\aM[@t?d㣮Jb%pVw<&__p18T5QJ}[? ޚ$cXߞu˽ȗ1;0'{ٷS}lat
s*`8d +gBi=ZiT8Lܚ[ئk=czx_X([AVW"벐9O\tX<XU] %c,T^o"T.#{v| WușO]/J\Nl20iRbDs]+`J҄]%@zb7OÖ{CIҔYחkl{mÿ8"7j_5qf'9Hٰs&_|T;Z=DhEq?=e6w˸h8$9-pNMf'vO8)41*}@h+[%eUE8fup`JtPk3Z-H^q4]a 77z926em-zU3t?QdV\HHp6J|uBk'y -eZ>>?_Ǧ
IyKc>qS=NXPk958ټBO'C7˥ONwKM`1FK,4w-ܳD0UealN1DZYCL80U=s56'3Dc$Ys璂,M"l +門hTDV8Hŀ3$yBo$Nv +FxDؔv©'࠾qQ9gz%|R27/-Le5|i+z}6룣$GLr=tÕ; +%QKąC7-PVcY +"8z4x )b9IBM^<<=MυO9UQgvXAh뱱sw2#kGI+GWN:.~zg=J%+Tɱ댗Ѩ~ok4Y}7V5JMmGJifW[ؑb3'"3ί4^d Or/HP"NRp*9u1%K31s㣦]/³EIIR2bl'I_yz648C!^ވؽ7NbC`b*m<#R(0"oϰ}5QyH!7_PP7~Z%XgwY17ջ݈L[+PƉbF _,QD$W-ܜhtxh4@Yތ6R,I=_wӨ:~B>aAK\{c=\`;ijh|C)>r-+FUpdBFfcjW<I6bbL
3gޤC?-L+}X +ow_endstream endobj 5430 0 obj << /Type /Page @@ -22097,19 +21943,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5437 0 obj << -/Length 3335 +/Length 3146 /Filter /FlateDecode >> stream -xڭZmoF_!*5w(:ilCHID(R%7oK,Np;3;;/sgq`;*Ek8vl3?]BAw?uIfa5~].J)M"bܵxtyOàk鏷XYLf%)ۙq^^*A1g~plijGxvlw Jˋ[?UcZ Tl:UjqUT, -;p|rVvwÙ:>曦3y溞\oN`T$M0X$\/(wB~w脣mWM3dS~*0]m#[X!yYryi?q@zzS?VZºIi=+my]ִߊy~8^u"]7׆+nu1^A}#[Bҹe*/Mb-ġH Q r`_u\+OH#Od|q,ő'<'үpvVNj 'ڱ6+%q{ >,KwȪ) -VN4@yD/8$Cq~cdwyWHxg^`ܙ[ù^b%&+ɍ![#?/ -n9#NC$;vnH|jaLcM2;#ZY߂mNVO3YLcMp~٨[
$ʝؐV3B.z$98݈):i1\FA;w4` -|1, -f -!9
iӃYV~
-Ċ89F~!}$;\5H5Zz#$.8AY{Q:,iz*!+-V]=zmdx0zdž`l: -# +xZYoH~B +NG?xHLDgj<!2$
{T,bx(-'Z<pn7J{6~=nK|-`_K9^j.he[ajfnOihX*T +B}o9yEܦ47}Ɋ!sFLLk21ЌT1ՂYԤ"[[n` +(&iSL[` !E8${idǑ/YC +n\8ts(+d +
?$xMoGU:*'Wn{Iv|&m +Y.Ury5]qH-G fI`1\Uו?ct$(C+PQڅ..+*F%?y"U(!ЄanZqQSձ0s$O!Ў<ACPP
&'^R[&/ +hn8MZEwjt^YXF|,XYZ{-
r@reHedg=pxp 9.ɱQka&$M]VjbdcN]uLƗn1,^% d +-&D:bbdkOQ|Y +*dvտF*A9+sh3cendstream endobj 5436 0 obj << /Type /Page @@ -22150,27 +21997,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5451 0 obj << -/Length 3169 -/Filter /FlateDecode ->> -stream -xڥZmo_a(LkP9%A⸶ܴ-S.IJAp_fyf?qNwu#F~9Eb."ϋF﹩/{=x9wv͵֎y'wn/@^Y>|Of->],J`U)._Gxmax}t@suts7ǂc5u*N0/վ:C
SSNʮM#嶄?f*qwdt=S;;RmIJ%pfs.fEKVmiV5vAWjIҼ4SZBi8Үy¾*xVV(0ۢ[FK\343}ׇyBua,-hm uQw'
I -"R\/V+ MF~D⛹|R -ąI7Ewe6S<^_Q*y9^-5B|!3mΖYg
]Xc[2[y 2؏⠔%kg[ʈnHy -]%"uÆzON̛[Y|ǥO8MRǫTCWAqstۣʷ-ACY@e}C]b=4 `rset*XǞ$lyS@0|pdyI#In+]H"Z3>W+0z 0X.[p)
fEq}58Qϧ=,Ve3S8oYM85B2ܚnozЊ:%sl˃wO"*ܚhxH0u.ROh͎2uc(^"DV -K7@'-F{:M52&oy`&yq]F~~<{is
×!QlL;_fI`^fE)G}?x
JesDyf-ǖ%82SDR1zB2~BN -svِ݈>{͛M -z] -|5?]g9*쑙)«ݻzKa~FMcmEIX>u7Ch&x(f1xHX ~9=rGoVT=Mrٌ4( !pf0t&48tud.6QJ*
^QS%MchcC0/gHeu1AI=;a&CJM8qQ:%aOr`LcO7G&g,~OClY`mw^ d4DTk`DdWh{apğK ) -Lq]<X H;,nPϞ;2_qBXA*H]1x#D<ܘ` -""pKw*"h+~"WfkL7^B㌛ؙYM{ P<e&,&68h)矪! -{;oPt?B~;-ߨlgx&XM"IOH7 y#cvm xE)qJ-qxv}5`ysM@N@&EF
`P(e-!6hO4D -5x5mH`&Rl4% -%K%<3 z! 3y'nQD"%fpQykeQc`輳sPY!7q $KƇ}-jilV}&*v'TfΎ*()[@Lu=3Ty|jh =|-2i0k|O;3|n2+$8y_pbM&J'i^h*4т+*R2Ȑe\ O5sp8|:cH$Z{Uѯu8;{n5<vw5 d^ܨclE 7fΰ2ǻXԖ0" -4_Ġ 9TnTpT?.6*
]ZZW[<HYm6mA:e@y'ny3'Ao-3*VUF^2 -YXоT#fN#w -^kcB56;qɏ|%VJa-L
.* U%QNc!o6\vj -JQYkGr<";1DdS">#GCB^k?DR66~sU:}u_["(\Fi +/Length 3135 +/Filter /FlateDecode +>> +stream +xڵZmo_!(L5(Z8sI8-7-.aMkԑ)ۮHNEh;;ܗgƟyǟlto|䋄7]/p觷q8=7D_N/gR3wHy}}1+||3>;8r*gBç^rGg +/zÑ,~6Ga(T\]jpƳ&6
h(MОM§u}nnMCϪ-ay:|;2;{RCbz>~(k;IWЬH| +іf}#jW{-V$K)<5t!{2k/J6 +%zŃsprW+h+}|=L3#37߶p0/Zo uq*_'œJU9j%링}3כz
+n
K(X\fn
4[<{I:fKy3GW!%Fv<DxW"T\(T o@ps1EA]ъRh~aaE&ܘzq-(A<e?w%ΗyM<>XѺ5:%haxQaP XRgU4L"q_"ıސYiA&WOf<~#N䁵[s=?Tw#uãQa;$ZWB-y]oHPО;Y뽁o5w*Cv7 +"e_-Br6|W +:q +aH>J9qQF֍66XP/A/arHa#`-ֲt
O8gM*<z@< +wU)M(;,ErDT8n=P5;ÀDYخcڑHH>(n;MD9F{OϜ[ehM0v-ksT#33#:w.5"Ce
;h.@'ۚ?|OFf/8~3LrPb@?As54{䎲_]Pȏ䲚48$Qpf0t&4x\ -Z>QS)h@Z#0/g[Su1>I;;Y&aCJ=$uQ:%Ԅ0'em0эQ1dħg;G&g(O;lzO /HKi2o!0_arwցѨD{N^N|7œw
p` N6($A={ܯ|M +]`Q
9q7BD p 㾎͍ylrJ 0Dt琖 uixR8;tN"45?+넙'B ЮC9&vjk{cv=It~ 1mbR#k&rܹE#/d.
svgr4T}ÞQ:4KvkBדR"G;d?-(
"<𑁜D&CF
`FIVk " +S)TqFp-e|IU=whPY& ]qC$L6E7c PĂ,pqupc|0bClwHR+-D*ilV{*qgOO和- +0k +BesdLRq)}g +WO\ +t6D +q뫳Og8 /0xο'bη8ءN&ˤqX@#JMf endobj 5450 0 obj << /Type /Page @@ -22199,26 +22045,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5457 0 obj << -/Length 2911 -/Filter /FlateDecode ->> -stream -xks6NS3C|>vܸu%'7-Q6'TâtNK`]ڃ5-6ekp+ -cP-_oN=g`[fh㚎+qh:w1K)
;4Gc6f^Mg_q -cRX{?ߦ
:ǯo4G&A`bH -v -?h>C`(v]1B:3@0SMe5[*Vze&cE-uQ/ɖ2m'ЈHir- zk -ѐ Gm_=B<m0#ȅ=Q Z mG4m^x>\yo>DIhX|pj!' -4 -4ΠK.``Ta+{F -E-WvS?ƠC}ힴSrL^^%Ii5m[C# -٬pWBʷzնRUOd'4}OGb)A'X])H2"}IGðzXPFRJ:n:䎱)͠78qH+X%ԜhG#YTQ1"ټd4PD_[dI8Xsت o=nA=NIE)*N ă -Ynꥆ9V<VRªBuJdc[|]3NjrZ1+h7Mf.(E =zqK5fĈ5nq~5BzDm7(*-5="jmAA^F1測mByh --oZ1G}bՉ.w^IiFI#|2,HkDBz.1ԑ_o-꓅P -4~]p:a$,Ӳ:7(1RvvA(x{M;vۿh7ػ9?;$]Un)Obj,|_W{%@ZCq\B -,Bd$V¦Q~3`JLNj jM -KCgEh[JrR`XKneǟkx -|]x3h9j]p6'[\%k -Q61 Bw®s`YgC H?h;R D`jH
J2%SH{2 P6QV7X$[:BxмW10]vƗ<&^-:hVYs*Bzjg^뫲m~u.VN7qXNW|%X AA?uGIt;cSV)b\mtkwH=a¢KռbuRo@U#kO; 8m<mjqS~̬-fu3Ya͵
FF].>#-pg,i&qXD|Yrp
|kIi߬5$L>(-hi}3i*gL2cf}m1lǓfF&@qVWm|UDS~,Ɨ& +/Length 2764 +/Filter /FlateDecode +>> +stream +xnH_fa ++}3dhP#g~hRd +B/
p: +JmB*N'ug`!j*T;Uu&cEuSdÊGYc'ЊHi<:HA1O$Cjs}cH + DovH֤B[C(fňbGu$T-Tl]"ɷ{]GGGfrnm)"C!O%loD>e*-<aW7k/CvjZ]sz@L &OS֤0+)&,CWP!nCٕ~mvmQŜV]4/nP,}5܄g+m^ٺvLqʕmK"t +mN?kSlA3/J(-)\IsnjN4zk/MLކZ(u|BJ^V1&kCh"+4{Mw'>J4){aMCɳ6C)_ )_l+xV4RJM)CapPB趐+}"%ϳmh;De\|jsp +f-^~N(=!<*`<̴uI`CE0l2df|rnn@XE(lCt ,kzL;aD7uOUevopk]3;S^|BLН:6 +˶3?t/n/-mNC4l搮M\0LDtX7Vbd;mzqxȎj{?FiGo+9*=e{%L
xo5ZD\rB{q4X4CH
\ekz+W9>m$loBDgǺʆ-oh8dmfn_,ci?dW1.gWc?7( +O +B{?PЮ]~YR=n7/&endstream endobj 5456 0 obj << /Type /Page @@ -22241,18 +22081,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5462 0 obj << -/Length 2498 +/Length 2439 /Filter /FlateDecode >> stream -xYYoH~X4orzmc`(%qkH*㷎n fꪯāb#I [F$-Ϝ -f> -1"/7;dmϗy`]z{;7I)-YF۩yGy0(8i$9|Nܓ3}>{?,l -Z,PIEәS_+?Yv66j*]kS6mN-0vvFnW2'ڟ}&37m~ iL
J9mt -DJ -[V'jܻSWjd%xmQI.cObw )fji0, -&i|س-p cJJʂ1+A`QV5z -0DB=q乪F;X8}l}6.qXauF>3UbfyNLSa] r2U81mWW*sCL2)6 -;C)% "D3v*s#ۗV56^l*$
A̴tb[=ŅJ߷%W^ccj2sY֗Wvt9A"Li#硣-#ƟtE2%*g0LM4\HӡIE^rSdF"+#e 0VKnb"aY% ,Pg/xI0 OC9|CtȒz\3Bo@HqhX|Xsv*^,O^b2e
`1v4r:*phva@el?TW{Ka]yU123{m?RsI5YɝA͍B!>g=~7SR5ݹƥ]@.hăbptOu}<VP؞<MF2))mN CFЈc5ҢҰKZH)uэ*o=Z@2L +xYYoH~Xm6o-\0Y`pE$y
Ib~MQd{ h9ៜDxFRQ4I{'RSOKO?D"|I$κzf:s]ג0.^Ou˳7W_W_>ȃIi}L#ך3_y#W'#f=@'ph +s8= :p̋f- ZhZ;NdC;l뾂zC+{mRht&dD +rF82eRuMٴ9@7\!DFzOYLg i'e`g,@_#̉}!A3jioV[InT +E + +|s +:4M + +ٿoM#85ܖ]軾in:W9-|)+/biۚn=_ץ:ߴyTuuujdR݃WMn@2)P#H=/ 1vU0ίd0:G&qxIq{ԑPCxp5p +I8L1~ z;Z{~8z&fvz/UXwyҞ[|0ӣk`!yU5@*F/|(JS +T!m]Uz,_ntT[\k&iy-آ^U>v1um[!)8!?O2AI"WUk[~H}*.Q<yNb]wzܬZfvg;P8"YuwƟo7z>SEw2S]
kX^tvq W>/_S\d8tGy4<I8{9,"a-Ap䵪Ƥuccgȥgj̚FYJ#ώ)pvJ,3L.S'nnP|vqPۡ)Dж~krzcҚ~;V9]Or endobj 5461 0 obj << /Type /Page @@ -22293,22 +22136,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5470 0 obj << -/Length 2016 +/Length 1980 /Filter /FlateDecode >> stream -xڭX[s6~ׯxcjWmJ3N&C E* ~H<qlS~4W&(j3q0D۰П -Idx"~fvfK)-83;b맷73a1zqu3| -
Nq;`~/y$w~JO4~L]Gf~:/M۩9RcY d|"r>VeQcej@l^,rLENb8U2فX7 -KKhQUUj%!GrFXu^ژY7 -5ogˋ,LD**,R;4 R{fSP%|ȼ:Y?ah3m O>uYaW7bjZ's֖rT 537y(N@ -
IKD}LJE^u -s -pXHΩcȞwUB`uUx)pޡ51լݶo|P?+twSe'jr'C|g.9ӟE.b#[ĒjВ< -,B*^ᒊQJ,my`4_CTG=fcNBs^vӏ#-ʤ!GjDʦ2-ÿjkp̤sXF^h -oYHa2ܨIl/>aX,@KgaħBJ6;6Xcq1×D5Y)2ߤF|m$P~2b+[SxO=k5kK \b_l. rK$T| F7boQ&?|AC$F@%8.3r]뀕ȼT*N̮ۡ# -#2eA,lS!4m)3L)9^XvG -GX>w,֦
^OFu.T"ytAUM+tfj3LW1œ5C*4VIg;/G)'Z_0ŞLm{>s"endstream +xڭis۶~mLIO$^]V8%'<=@i;iXb_1Ǖ4#x*'v~N}
q1 pM;BYdO_-^_l)%gfGQlj&^]_\...ƕ@a߯gtq>s^Iǝ_:yheJT;@_'#x$?NK.&7?z.Ojx[ƮX0q8{/`ҟRݾ3e/Yכhj.PjB$W34,r6FWc,u3x +3`Yn&-b0Dd:
_ei^Q6q.ű`留Wij}v+1N,E'l7UvlG]w_x<W-[AAuݴ$9p"/:Bf[a_?]~ë? +LLaDwӥKFc$DV0:JFHyPZΔAk>c0V!xyXՕ]CfHjRl3S%Y[H +ƆЩD$
diQ)PV+NkNl9IpR-OXhB췹fyF= +36zNEs9hh͝"O1~33Y ?0k;bgӑcXY
*;o +N Ūn2
S'ng~D}2(# +P6`'ƝXЉedW5Z}>?aF[_Ѡ/jJʨE5'{s3$pU +hj9Ha<ܪqxËuX Y¤BH6rhmq}rc8/-C9 +@Hղ[b;k8v95"0Ky8<itK=SZfRK?A$p kA1'Qbgt~Ύ^J+6fTol0RjEUϤ endobj 5469 0 obj << /Type /Page @@ -22337,13 +22177,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5476 0 obj << -/Length 1928 +/Length 1871 /Filter /FlateDecode >> stream -xڭkoFmL)}.ŖeHLXs~IGiGx$%6ǁdq<Ζ#|#f9\xF'B9fx6 <,txz1{v -!x7b s5By_Nb̈|C>)A'W7*A3]^\z3=;XrvzFF&$/*%<8y2}?c_ЁN<7B[ ]yz9tN\'9EB,s% STw-¤;^4mU*~?E
١CElxLXD/,>bLX]YeYU5q7J"2zF[~sut>}>鲘#}stq|b֫6on/]^Vڻxc{4jzoO?C|`+Bڐ\.$D)Erє\1K´,+vuӪ*r78yņgx,pu"hHq0ᱣ
AYZ@UU饑P9g8囧%fa3KԺ- [dmMnvƘFŚ<Qs{| jVJ6Bl]S -ѻvG'P䷚MR+"Ֆr|ܙm蟫~nOMJS@ՖzݵrĤ{3eA4&ֲ$d(wĶ,onC+|W+Co-loQ^kC%Y-Xrh턙 +xko6mT(}JKf^ +Jtq=q)9\OV.0dl?N +(+ąEfK +?@B5фBsCF`W(Õ +c؈Jaki>u7D4{\[gIM:F1Y~ "%\@YB0t//42J,%;QxJ:vm2G +Z`m50[72CȂ@@\z8T(&h +L, {0 Q}NݣWTfbA5w#WJcs|LiewJ4:5=!_Ty y2,EI% +Jbzpcˁw4F--g0fy
kjd؛W?z?sꬶc^G^U//LhcMV~!rO<|۶,2n:><wʅ%J. +++SҀojƝ&ؾ/,t8n")endstream endobj 5475 0 obj << /Type /Page @@ -22378,16 +22224,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5483 0 obj << -/Length 1570 +/Length 1530 /Filter /FlateDecode >> stream -xX[o6~
E`iӮ)KvEcaUwIL,[aXD㹐az0rXװi[ϋk_X̡YNGǭe"//6眰 w9#8?=[3DF-pyR1햏zqf:٫ӭUn~.+-9Guc2X.g'bv1eJ KIMz!߇{,)V9s$u^dGss=ȸ̾nS78mڼ8rWyוW}7mEKD\z)j_?H24ݐӴ(Ɋh篙ͅڂS+γHs7 Ws~KJ=L#&L$X%~ -)}rffYXK=!5I#*tEjCZhZMLe"zF"lkL/pO!q
LZ;I-7X;\
- FzEc$J\LZL)L XZDd)=(G+#Sua.̵|@0 T(8Q'9C7W -ۅpJ o\:#|wjJ@J
K&<j0v Xj<P-duiLYVo>m}w+GRK;v r"֎ WU
CS* -$7y'iQtLԾ@Xc[Xx@~?`?gs6:^ -g]]Q2a\ *gM^"@Enp,8FdFNgyjJTבj- a/qŢi{Gj]a2 'i6"b}^WOL7 bp%C&2'p0-JG*Uc #:Ii%0x^pp*
S2 EⱯKǂGKsy ay^1UF5F YD,"Z~l>خH]${"(SUGǁa}"tر';O%,pG13vheu+Gw_ݎO&S}AmF N3W'uMq<~".Xp_b[gu>SGۼ}$J\t>UZvlCj[3 OZ_ȸ9A,PK6t*(5M6y%neɾL<7O&N>Gy]|¼PpF_p{s/GKHendstream +xXYo6~_!-*@8ڛ +v\wv)Ec"ù8
in1VR&B8A`ŌYװj
$eKϖ/=iqFCZ˵bY&+b|n!<srӳ+I rn?Al|ٱ 7ˑUh֧Y Xfƨƌ0tu0|v1e+EIKpF@n ܉(D]hnKV$T5N&+qA8UܵUvuSFO9Z@W:~>IOcM^+O_ql!ЖN*}H㓫
GM&Ob\?Q nڰFӺ
XF͝T$1[*Ef[
KMJvʋZE6!}u"Jsꄏ+`1x"Hpi#Q%NVaMm~oL1PXy _trtBS^8 Ⰹz +f@RO|0W1/.|EEaM F&V +v|jZTsQ*~F
]4-WU:)F{;l벪p<5oUި|z^`N^8/pp6Du7[:ȸ,=VaDu2e0JMxQw(_jA}l:9q
=`(XMJq14{_PO7ppVHf;͙ydCWRw -#qu8 + F
}CU'Gqww\{0a#shsmlOݍu{b\cS(88誚N3Te:{ͮ(#u2>/Mז9Zf"m롻ՇLVs-sMHi6.:O/wKs6yGivMɺ4fo5wu<G97_>7?!c +#|oj?{_ +S
endstream endobj 5482 0 obj << /Type /Page @@ -22416,25 +22263,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5490 0 obj << -/Length 2424 -/Filter /FlateDecode ->> -stream -xڭkoFWpH.P+|)J"̇JX>dQNўgwޙ8ONBvT4 Bi0$ř3Y×Τ5~qܛHǎhXt|d|W?^-?,= WfR3\y -y)8\%|Y6c9'KA6`n$2++gO&9.ayL<`Lr9O -)_JXi@pq_ \s灸ט -O -")B xXO<0PLP~u łt -ۢfС\/P伈sRk 2#wDy6(d;=d?Dg$,liCw[" -l/JSҌY/+;LM6#aq2h` gb:-& -0yéU9,6ₒ]= W]_y)p)Ю#jSsTPI릯\LN^[fTK.}ŷ70M,f\;]\
܈U5"[|10y\^s.tq7ץLǶo1NvC𢍟?h
Jvksv<:u-᧦ckM C[ClĠ`n -Oe$_e=")~7ɡ@sn\;Zi.-"Q%A 1\^ - -v~OBǧ]Tkӫ/5?#pRpWu]hW[t]SuMʀ\=+xKi(d>sb'[ -Z -
Mkp^bSLLbgL3X)C`,|N?QOg7+vL/@Jj| - -݆2qS)V*mrc}vvuD2,>9(:@P*eziyAGMqendstream +/Length 2370 +/Filter /FlateDecode +>> +stream +xioF݅GɐY8 +'hC1vcxHӠ ͛w;s;ۑ,][,ΜN~8s
3m'٫w?s;qrM սxR +7V͇ۅ+x\xE,Œo˟䕴ŧOgWUoD~;V@Og-xsvdV_uyvw35%vc;^2ϵ*tݨ_/'ut_USA_:{Hoi$ӝ,, 첬,rk/ld<j_Biy֭6MYVջF#* +n.G۬)vշWM9'i^%U2y};V%` HX쑼@bF69p U-H9T +^Unװ{{|7U+H qMǔ33hqQ +ePHm/U!⤄II+o/cP$p*/ +|x+KOEzBpjd +Kg'2:4U)ʢ-G1õQ\vxw^Taռ{Bq|N`*A," {q<g"AL0x6fUAk
#qqJMN`B@D,(9UX%;Yy0k]?Y +p`kz0WD9v9Н +<VS 7:%.q7cuH 8,?-KFIx^ +G@ux^]ZCpe6 +" *a\ʸ:]'MQw32Ih_F[9!<fȣlQLbɻHCoW<`a>mhODᬟ3nmG4+$S'>&G{ZoK2d%u`68=Qbݣs^*RJgI*ʷ}+O8Og'O@jkc@MpH1%5( +S;xF~[sXe]#!7̮1v +P +B^jde84pŏ/dXaZ {d$A)KO+3Da<쟷l 5¸`+$vTT_`#-.,QA簨 +ϽJh]rrLy:1>7b=jiˊ1>udz9uV;"ӫܫ&;nכB*p +2bƣhyx=UYJU`_ذuqWJ7eycשif]ȡ?6zmC9&/%<j{;օekI +m(^ +nywB'a.Bx*Jƴ]s#E_8FZ_l($3[RϴKNsdm=4BJe:&Xz4_ͺ2t5B7'OwieqONuv.sgz
G=F:7T S=XOʘUM%geEMBUъK fPT1vq~e˩ JBv~- endobj 5489 0 obj << /Type /Page @@ -22469,22 +22320,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5497 0 obj << -/Length 2087 +/Length 2032 /Filter /FlateDecode >> stream -xڵXo60DjVÒEkbCcѶZYrg`AJm(D=~wOC_nB)0=zp
˰s9x;g_x۟v0t]ג w7iMzs{=]O~ÙDiеft=/_~y3WOYihz~Wz߳-m!ay=f?[Qy1n(=4;f+G^]f+
Zlz`(OLS%k9i݃&`VV
&s<21Ae9 -V&3\Q#Z-UYPy"ZX+VrvQa80qmqu0#[>cw-J? -B!C=)Aہk[y]TU(/۷=k ->1PKIkMlZˊE\ ԧ.@xӗ ~ |d@og-n95j倎_!qLnY>Ci]pͷw8kxΒo#A;r7% -TUInh@}۫ȳs<>cƼf"Ul[3&;UYPڌAK+*W'
-i|+V(mRijtK0PjaU -1~\Zx)oo -Ɏ -^>eRJC}li<bMUrULhW Z<"F|@&y+0!fZc=dMՍꦀ@~ -lXpO[ q -m)5|UI6Ó-߆˙{T]ϡ䫹)583GiU^#]XMA[U`2<]&ӻj:}{᧼v3_r,9i3MgOѨ#|Pn* -k])'{w^yk煮
qs
7p`Y@B߁,P>Na?{ftd\<;7L+ +xڵn]_(L"4Rյ
PKt\41nc?pvvvv3+w;xFQ4^Fx;?\C}Lܺ\^ck"Y&vbK)-7;#kvw3qconϸZw7$֒\^J +gantIeJ3N@w#G8 +zg}A9<Z=IHZGa#E +,2DH>^¹{,ïBD2 +[oZ%(Zs ]5]Pf6{
5¦_^ݞ惇-Jud\^|Xt.MXDH´Wf "<<Oא99v0ŋt32u#&x\`FFKjWM1W7(Ҟ+V<tYB@yru-:m5iA/TP1}EbRv7=!YJO#fS^`%EC~ +4cP~A[}oj)jI:ҵΘ{*W[2
<UaftȮ84% +
+ӅST5b4J~P}:ZI;ܽa$Jwцedˡ5obo˃oZ O'hV/uCs-e +ćJu0{V}}MPvh3*KunJ]ZҞyY^>7u<Mc#}daܧ)ll{}ϤgO܌22cl>?P桭3<}u#Ԑ%F\8/&C׳˯uBN} +5@endstream endobj 5496 0 obj << /Type /Page @@ -22519,29 +22367,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5504 0 obj << -/Length 3238 -/Filter /FlateDecode ->> -stream -xڭZms6_˗R&${8I_ؙܻ&L!8Ix߾ -h0
K-Ӕk2l^Y}Oq )G=<v]?4Qx^TufWwA -McVܟMk6k'<Ѫdj3zL^V8aګ[~nm9
qDiWAj)Q*ߎ jqƐهЫ|4}) -L)0L~2M->oؒ^L<x,{FyBG2-yDx
/D-Gh3Rލ)67jԴ(LUq)r4uWv#
O(l#=pJi#/;v[k%GxďCD^noU*NPƓHk?QɗC -&YӘUvT
9P:y5 \YƱy.~ -X`PAT}Z0P.G{7CpA!ZF-N6)a0!$L.ݹgK -0v٨'&m3h-{@k -B'K J6[w,QzsVIВVLv -~!<C;qiul.mZD8=wng -áj D(HhH$aQ=a5*.aGx9/-q_;^cAGGHx ٯGPjfSPSauZc*.f_|2&_4UnU=c4`XG+>!IVv6AGCD^E-6s#P@LZQR"!|LXVF_^?q!"= =zc#%辴E))=K3@E@D?1#9'~~CBA@jFu>d0&#+R<a6szR] -_DMmtr{vmZ=f3{=Խ`t - }.pITTN@Xr?JcupJ%Ԑ -"XUv<lu%XX"b=ﲕH/qMas]SHpX+;#-[m8@X1W*8zšQEqE3̲eMD|3MwhE-ꝅ80fAֿYsM1O8xV*|/-TE]DSfP3ab\{Uv 4\"Sg~I8pLaJwq9@kfCp& Pne`;R۔yttv@/eZ*&jчٌdӪvIPc7T</Џ@D?B1 -][{r"{u6VEÖJ -[JsId(e<@c(,xGa"E! -aD -t!ǫS"FlWt'|> U5
/kdh%O]sx9=ðCh xh/I<sfh,B4
+k\U0~J+ѝ" -ա{D/ky9M- uXN; ݁e5]Uf`tXw.
^#]a~9.?RP\x!HC9?ו}.b?P.ź_%wqO4WN!m][K,+~Lj0[egL.صؗuPmDUOy М3څo -wm4ef~ucOz0Cʛ̦:c6K&?}qi,Cv_N_o JZ8R#0=@`Fr|R~^U<GytYr4
zUقK#ƅ@;iYUЋ-c t?ĚKo-UkΊ.Ã]H +/Length 3171 +/Filter /FlateDecode +>> +stream +xڭZoF/ +>(/V]DD$Uc?إ(ݢ .1;;3;y +s^5rJfA#DRPe6226MQuyE%wJf~!緑))>*]c;/LvoQHk]4Ŧ+x}zlE]y}y'hOgM^ jx_Tof_PbS9ʏTDۼ{=&2-M/6Fu0{8"*1x_o[fq7»nr;l\ij;^zܳ)>!yӒ,C{u`qV!D≩9j؏\LcE)<LT1k/cuKӾ Vx(^UvE/.c3+(;kR!zbM]ۺ^^9|!hYXtyE%9
0p¯Ik40|th)@E?3
+"cJ%8y<^ux&Gdk +P#g&H"y5yZD:'Bi> TVtJRS1Gɞ +˼m2?*~Ɇ*ڿ.8Yev2CrN +%7(H;0nTHSBЄ&,Ln46s\[sQ
Jp8C}:9
S'Lv:aDziv*,aI44t؛c2B:*_jSQ_[^U_t"Z@_[I+6B|->Ɗwno$@R`y|5qB^N|1~}h:}`m +<q#Fs=i\p%o51Cov^$CADGy"ٯU#jF=YPDy(Ui#h
xO\֔ss9"4cU7cx]9F{L:һXǐpv&Z!k"/2<1cTjW>; QS~9A'ZL$ +z& +,*3QU,@'u%Ó$<B +hu;XMl.1TVJ1, hz>RCiKzqOQ)M'mk6qD$soeu{XAE6)e\!܉;Hb|J`3i-!ŃRCT7(ګIo)|$X%sSsqNA а2%ܳ;҂.jʄ;/&6z EўBDG"n` -KI?] ٤lp 9 +9mcQȲys;a?(Xu +$NVrlC)b}ዖ9i+"6eZ܂NZ%^NB%#&qQ%C?Nߨ/~*SktM~tk @twBj&&a;W `nny-҃Owņgr6
!8 +n9\s{z>WNd gOl-XDS6149ywk^6"٥<q"'n +~xSE6h!:bzMey0GQZg9
>kʅ};}Gd%D;0(BFcq|P~Fñ@rrL4.N4$/v2[%ec@"˟=ʕwSWeÓ箨ow.rQyAGǨnoՇaT+<jg~=X"~=֏ٗendstream endobj 5503 0 obj << /Type /Page @@ -22582,19 +22425,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5512 0 obj << -/Length 2305 +/Length 2248 /Filter /FlateDecode >> stream -xڽX[6~_a/rђ`@ڦd4qXA![IRxPL -lsG34fIu}Ͷo9\Nx~\^-~ÙfQN$HΖW秷oo>])gb&Iv;z8;_nqttÏy&7|wfyh͛`һ+O,a +SDoQx%.X˞} -(/LfljU<Ou:N~4A c9ArnjODX¼1W -R<q$#3wHY#nߩj")&=wAtkx7j<L4~zU[qWөwVc6ߊ3EN"Oz0ӉKe $L{~>!;q
N60s0J}}rͿ٢5 -R
_ٝ=: -GCԁZJhw/8GXP~L~ D);D$'ryiU}OiZ !>F)HUbLp~NPg!(Kσ|*;IyF#,$@Ļ,k7l6_[15q0Uܲ>%jpLy'<^K(7msc0yy1{&0m5f?iXg l!w˔bj!kMSs% }D`^ߕtơS3;pl#vQFEz!H%<4jMigEBL&"~MMt{ڝCZgN^jrֶ֍&h!|Uv(jZÎv#%AI]}>7<x5vvpxt'r~ˈFA>_P:S~Twf6zDUBabeG݀ ×:rHiqMB!xM$I!C -*g3 -:n -8Heɐ0sCgt;/C-U"x-^E"O}]Ր@a]z^=A -\H"JS@ޖendstream +xڽX[6~_a/rѺP5X,i2$&4(d#*%geeP`g +`J4'AEQ9['No.")= +GU`3vhEbX@3WT푣(q$#3H N߫rzWL6z(n*pOojʌ$~l;U4Ѯwv=R$:fLv9C_±)Ij +#>'5[B%vfƐP+e<`gfvR)D EQ"bϏ߃ѹ"tۯǶ*%`%pb2-^
C0IV.h-=hyM3j)#xemx +S;0@;n)Imxa
oXZD?L9g[I47e +[YP^l] ),x#,a4>?*FCY.1l^< +D,.Mǃ<ӊnxӔn'EcoGW<~wCeU!)e;?ܬ҄ _عٲIթ=Ѓ.k +ђؗQXthl'%koXJPLs;qlm5(-6vTx(gU\ħ1- endobj 5511 0 obj << /Type /Page @@ -22630,32 +22472,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5519 0 obj << -/Length 3894 +/Length 3703 /Filter /FlateDecode >> stream -xڥkoF* -(i|ҤIK_ @KI.lPI$OP,,`Y$שDaPd~=I|/gRʋ`gY|9Ox~~
i -d%׳0PE>qD0>>D+yo>˒9=U43$AOo"Hvď -~ -Eqx':<œ( -$ˊ,HxqoȀP=4$ -B]q1`8/8eCrG$
-M"f|Ix0k}`Mtۮ˾^Lyb,q3!*wr5lnk`T.h95!*QB,o;1#X悗I{k` 3%a 6/_^20%%bMTHڠ,`n<ͻfcq|]4(rlc -Y7-+)YfUh@xŶH;c)tAmaz -"V66p䝳(:qlaFp]2@phN*xA& $I:$q88Lǩ(<Iq, -0Ƀ'6aB.{Pti敤#0x=C<W}5%oDNIA<~Èit^iL4PJRZ2c7ӂIYBkl:T{b ;]65j,>Q-{lBtg,e/EtGbޝ" xЪ"K~&ʶbaM7U/?,kǯxz`D
>I Ih[`OsxUw5. V*.09ɠ\V2OZPE= -,x(UiC۶v`w}D 91;*PgP˱ހ!JS;qD4"Gu徳U9Ӧ:Ж^V|J]9<|9DE",tY鸏u4/DߞQTw07鱲,yGBdKIOmc9pe-an@&:OP;q䐦!qә$ #>@Cq2[F 8gj:*+]-ģB
KQ6x[2=ƹfu:a[iGd(H2]2ct'sIa8Mᮍ(,A;ɴB6J-y)1~78#{a`IO@̫i7䥁_$J|C50,TlA?iDF#8Aec~,<E琵ʫ[.hyDi[ǥ+'#s߇M,
-gǥg&넙:mG^qyJ/FFPܓ\<JaoCtJ(%`6 Df%p*hJ0&;`.X^AB7Eo-qz<)>fnzQ@qb:{8rplwT)ԣbO^Z\MÃ^s:`2St@Hb>xpeQ -3i -:r\p!B/?_~~aznlHBwt#8< h>Dgw2 -UZZq[N!B/<k %я9N3* -#n52,$*XVzwQ/lJy>)@4)&v~֟,Xł\^:Y -8nzu8-}wz>$v.Z6# -Ea?.IðKVq %K=,G`]/sKE d -4k~J@a>f~<ȲdܜK-<ua -_f<@H|1GS&1fKKzl~REɷkks#8{.Ґa,$d9{+IZSXTeZ=drԛh}c(ֶ}hӓ̮4cB -NÜ$t|I YX|(~͓ :d29Ȑ>=e)` -sY65|jC +xڭZoFBpT4|ҤIk_ @K%*$evIZ"}r5;;&$@g$UNrsLDɈ`b LTgA6Y\ѐwZkOel$Lyz|qv߽[ů?7??p575? +8$uNn*&i?2Zޫ'rp#0(,>02㧉yp:ܲDpWWKN(y
fsG$e~>2Q~`LsMpzQW54ҙ p{TzD]3hEwz^!>$oEZɻr9e]]DŽV<L
寮]|Iix Yau~Dq=\yHfQy;b
WLsiUM /)Sgޕ@qMF̷%ˌٲgs^}O/reMhO|nylV5儴&/VXXG{˓Pffyu
<6>Q]mGzF >xĊ_⣥]߷0A}Sh2VlQ=?=SZU5+kn֧)Weuy1~[h1;78e/0_8c A2.'6Jd0*ЈNEE[N3knJU; |7
ϻtm'KCJE!o +/[P;gtIm"RV1tyB,A͇;סbTmkBgwk28dPot<47Gq']U~JQAX7aDzJdr1/hxAJtIlōvdZ#Pf LA̡c5wp08x~N.B.b7)H3HQ}N.<9eIW-%ﻲ*P2jk(&:fU)р>m +C+R[Ov!UF.҉Z^}Џ؈ +hh$^uW8~+v?"8}0W)<{4v,hp#$k +%ٌ/?czWys[D@`i`0։w$KI-7b`g2;~҂PK@\)r +!FPL`DQ6;dx!md췬r4JzG
I^XGEݒi__\:
< +qdW2BY' +&L/(ñP/VI@Ԗ^S:.M}\&EI^
^[
),aɅǎknFjHd^%>آ%WdS?Z&'FN86`c(NSׁwr Sx1W1xnj]b@G=%doFy?&JB wx +Pcl%e9aI4EBDF}eOv9E( Z)o)< +rD{/̀ +i`wpI 7pn
{^PU }Z;HTg9A9fq]7}Oٯ/ZÏtaNUa<./\?e,{0"(͆\$+]!m~?e%Y_|)mY"a~
7QC\Qe%|߳11LH 1Gl endobj 5518 0 obj << /Type /Page @@ -22734,35 +22566,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5533 0 obj << -/Length 4219 -/Filter /FlateDecode ->> -stream -xڥks6G_JX,7{nҦM&8δ@%:$w|M&X -.oߝ^>z2wIZ9zۛWo_W@|߭aWogo}_CʐO]/<7/\Ӎ@/QK\ԍ`YlQw_&F^H|6m {Hr?qCyXc4w7Л:l>_#4xȥGLy_AVfGHS.09ePp- (W2XhӜ9%Qȿ[,]q0)#1(W|7-K -Z«niOE{iv%cpBM@%8$[[*TW ȼ0! - ۯ9'𣜾eFޗ{S${i '&W
(qڇ{@#7GFI>a:d0w*o[uWȋ6x*! -Z?}
,?˜/Hi;ŶԚcuX#'^6z9S0Ҿ<ڏ,m -EFw86D -c]6Nh
:;<LVճǶˁ;nUo*NFz@PhgTDx~i!'6ܧn˫5x3
>*ր/hcE%b"B:.ʐXp-)rƢʵbal7t6 6-E1:Bf?"!{T#уNJP# -~j;TFФ>G?rR(Q3BC>Dk>7+
k]~VDԒюscFc$zt4g,\ Ibs&[f -4,]@ WA~ - prq6v֫ԍ̄يAy2|Q@>F^QL,N&%g{l)2.,CU%q/m뗜BDG -E5ȗV - |0;1CLD,Ao~$g)±kz+
$Ϊ'gXT1NGyMFR/1!W7Ԏ6͡փZ7/ -]Wgo@zB=VzgGv|(0lF -̰@U9=Ϫ-N-<FEՖ۞@ΞؒI?t*ȔǁU hlt0;o.v.禝"s|l<'~(Q< -ŸPDڔ@*1P.+mQG!f$hkri):%lǡBcEYdvYU -qQjR\4hwHJȒ'ܑ\F jd˕LGL6g|A -$j"FEF7rNPu#}ZP?AȾĶ6U) R7;n(}bejشtJfv}2Zz= -r5t0뤖QDa<})DBlD0)NPy8%Uf -B}Ga -H+[R?o -VKv&;}+Rn!(6C4h)%FNJIvKK?4θhr:pUsBN;8L4M<M
!)f_:do<'2 ?IQ ]E̡͛QJRdlJ<>0c{}/AD"Dz3w`Ga_SHgK)TlDپ@p{HRrr$EX1PJݖnT۾]L/DapLOշmRM#&ggJ(TH#VX[T~?'M7\ޓjd@OD^8hwiB8uL(e#14D*HrTq] WÊCdyDWoPRGF*/pQΠ`-C,C7R
䍅7\.jc]jJd2QI -UpPEF#R(~=
W[,m3{_X` W\}+Sÿ]I.tC#Y[KOxznU*\77'sy i~837S٘d3+Of7̳{/on]^2#.~& -ʙU^2Z`%9lŗ -tD'uvSB,L}!6RR׃vN{c/)xNsn]H2^}2Ι5$5Q?W#RT
W#뀷jʕgDFqf(bXK.EIke3gqgPO)WɽjE3EWwW M2ssj/;zJTpG͇86zA_-ĎCLA:ÖcSXKz:<UBJ"7sD,3c3Lf+0\ND6&Q:bm^k cޱ9:c; -OG#DߑN&&_tBcWs#BO68v`Wd2{R')%e]err^UKdf_FP_W,*D G^Rr".IZ/xs_?YԪ['#mly.h'jl5:Ts]3y.wwE +/Length 3903 +/Filter /FlateDecode +>> +stream +xZ[s6~ԎŒ݇i]I&δ3mhD +-JuwϏy3JN<Fe.T;\{mϩ {P# =9;bd𝂙MseR-&jK]?Э5l6ΒOiD~ +9"2BF78v~[gB/S{`y;}VLnEExm ~"^,&]Z/*A(ċAjT:v^cJ2M`m>0Iعوaミ)h +N[ӢLh`ZӲWVPCqͮ55;Xyd3+%g-SÎ;nT_UDH
I/0끅B.FM."#rNQZRǻ}6<k%,c'\7g2y&NO=d^ +6Yb}5:*jcoZ@u +E!Moa*a4&q=Ȭy +$j"R;`ġ"EO9.qTi:q7M`Fi=4[a/W +L[R?s 9:yF:ygq*\! 8'w5E{fh<vWBWڡ(\Ox`kP1vGdHvն?\X_1,M +K~c'OVK=au +e;&-jHR`xa%KcRĐʗ'l8qiΣMCh}(O^jh
v}/0{Fo,aS +G}+ECvrZr\}9B7GOWRK#e,\@'\Th!nήN|TTok'8di!eۓ#4"l?\ +0䖩SC"s9P y FH,L9v,9eω~H""CO;=/oijL͔62wNJ +<FC{"/O
b +8j>"-7;wE7g\\o$ek(cuĞII&UFLS6+NJtISel|;W&'?>OE'8ŷJ\?iGM^X<endstream endobj 5532 0 obj << /Type /Page @@ -22858,30 +22679,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5551 0 obj << -/Length 3972 -/Filter /FlateDecode ->> -stream -xڥ]s]L'PDŽ>';v'Z!D@lд?Ád:
ݽ>EI*MͅXͅ/K!YZ4/o.s3/[܍DnM/n^\*?s/I:k^}x7w>^!rn\.^N
Ul~woQ~\=<{Ff*ƅ5'MeAt^r2<KrI乑`N__ߍ@nQ9/AqǏM燫|AkY8=%-Y,#
Gs2s.i
@9U.i/A - - e(k@狿r4d!@W248/ -|lhX!\!bO8hYijĹ#]g3DI`.e"0[Fv#Ј! -@Ia~S/ӄ->9ñ-adfưO&J`& &X^0O&-{fnj4y+dkK -kv!)0؊(QuIN#[2-G^rdUbf="
NE -*M\p4؞,{z! BN$7Es+4CS;H?6%:a
LP9H 9GɢQӣ1"vcJI4#}
B<2ziL5S2XQ@Y=AjE~y6P:)I.&GӜp&oj6PW hpnn -}ꨬA9O<>MoCd:J[?=ZNhmp&H8=Pa{)4f$;/ԋ)Hj$yH='Ɍ -E#g 5G
*APqP299J
GXuvcrN{'TT4U9D$GpG3KV_BD(ZHtR
BX;ӭ#$39F -M2"̇Hf&!atA,.+}EE{u.x*ցGC@Zk UbdgڒqV2j#VJm7ֺvaM -3=Sg2 )߈1ܳ$;*7BrIDpU"b -{*SƐB/i,ӗ4X~$ ʤOdKM8a`Qeըkv%:kc)>@UY{GZaS"]gyS7ow9j1a/OVq:BN(y陈z
G`հmmrڞ8$ܕ='/D@t5ȇeNZBdyA~
H\gzUaŰJ8$x]FΊduDJ/>$)(Xgx6vp -K|,@SkΥa -En?4`0v.{gr݊UԵp7!҇d%t/o&C\Am)ڱk!`O3i*i6.xN+})"8t@yBIϼb?f}ٗ3\>?Bfj>DhEĞ7\,t8lq!qnA"_eN9jMSqn="ydsPMV]h@Q_ztvQG`eV}wsgo5tG@+ߕ}3b$)|ioe%N> eeB ^֭ -l9\?iLF߆o9Ӑk<l艰g(}wV\n}0ea
po 9lf۳(ٲ#bx`/P%3r)=4;sD83Ep՜sOGlMgyA#K&d?09θIr -adqrk. -;RgۍGݷ|媜/;N9@Wrs"3cg00BjfGz$:cBA^!WmqlulSCNЍ3l.2@ل)8q6pZrq+>L'ەd4u ǭ2J 6+,$ޛ_Ldu/jj#h|en3WX5ԊAUd)> - [xAOTq -ɉn㤦C@ӟzc,sv3Wf#"/R6%+zT+6 -0ifB)Ӭս,
f603Ruv_bH51]Mendstream +/Length 3801 +/Filter /FlateDecode +>> +stream +xMs۸_ft'bHJO&Ͷɺ3=i E*$I7}y +883ʇͅ~K};NR/ڒ bAW,KU8?<0<lq>]j0{s_`zEp"J+9<?\d.Quk`}r`+2Q58S5eV&i֣F12Wd@DmS=a n@DŽb(}E*pCmLj7Zuy%#G.l,8jOTx946YGF"T#ߘ3فX!llJ(_>rwxq)\9"pq8;
ҁf>#,Hb&Kҁ] +Yڑ& +{kYS!2;"qJ:o1_ykbeyn0[o^O`A)ߴjPUnshC?yDLEY},s=ƎɌ3^y#PlO1K#L}T +YKj! b?X] oЖ8k&ycpU8m`nl4`sܴE)"lGC5Fg`xwU2v^B\QXVMYE,[6LP車uA.P)gx\xX/^1jgI3Y蹌O'LZCA;l|ydh15pdץ(2\%><p)qG8V1''%\jM1MYq@7)pFfD3?%Y"˘iZT`]osk0$Б!ec5R58Pdt-S>+Jd#'k)q +I2 +\O2B=aN5E(OE{_q#?QQRT9ҩFpxP䝑$E߀meg
ieCplg Ad4&#Jcjg3DU8,v̞K+p ҄_sٮY.=^9IH̄Xn6do9Ne
Z>0dOyRnt. +2cI*}I< sSԡѩӭ2hgꈮWjʺdX8t^siO;s/9HNKxׇC`S +fMR?Pw.(構D.^q#AU+6B#"(|שz<| +Ik%#
lɌZ&@7oq_h@ZVe L\ӮqPr
mY9Fr;C))qE7oVt!yޭ9e`"~PSu*.$8{:#d +('s;47!+Ε6D"Td0HOܣ7D_nԅSտx)v)}%PpQ}43/FBps_
)Vg^Ͻ!ƾ2b>h%~h_If- +`(:Z]ww]K/Q!vg_{-w31ƾ&HRO_wˬXzw\ Щ9 +!suhm:`)krR*|\X{70=Ǐr5&@N#ͮ,_}2
k6@ endobj 5550 0 obj << /Type /Page @@ -22959,28 +22773,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5565 0 obj << -/Length 4092 -/Filter /FlateDecode ->> -stream -xڥrF]_K-08XZKuUڂHB -14ezKn[a -3Jf;Dσ -4f;eǶҵgxeoL1iP`<Y@kU!ȣ$|7dcTi'u1I٫nyCZdL~ 0 r"5Ywgk2!rG%g-2e-ٸU9GS a -a&cX0a2b[;ۙZ6 -*>-#ʥuEkЈĊK\̛*Ϻ{, -70`N
ŀL&k4S$_d}&B{GebL0Lm8n5BHҕsXuCVbGY- - gPoP'H1FcJЁ`o٠CV^E|Fw\`lnͫ6߉k}x۬1/ʘyj0U~G|ǩU6(xaZB-I#ƮmḋI -0ċëYĴicjJ'K{>g8BxqtB v h2ȉ(Zn iE'R&D<v(W}N)?l<A<H -'KA8y,[v\ȇ>ɸc_mt]FI*&p
W푢JI{BNszKH'Pzγ1SZ0Hvd#xݟ&Mcb|CȟD}.MrIl?䏘b<yUbυb簑2n_
d)QC+9wGݬ((`}( -r)=MSĮ~A, -ڒ5e+@"b{' -U۩vb5%]ݮM^caߓ6>)+\C
so! 8sP(Djq*ЕSI&'lH:YTVT3bqM9p[f+cdyfXbl-(s^jfb -y`>G^mE9eYA3HfnXP
f;-j J1(ZY<R J$RӘgt6C+3>xQ4KTR_ؒ} -j-u')Β(ɠC -M啎/8np|9-AIU|h-:Մ(B(>.MY-,փ[~`!m*).Z&\qId-?YnKz. $zy
aёj)^it=qa_q衚{7Y+ł2Ϝ2/oCCگrYhn5ХwUL?,q,M|]}hӜ8\ѠM!(jw -m~{oӰgA:L8"@7T݁Od*Ӊ+|rG!Kۗw<ejv,o?_arʲq?*|UijNd>9?;"3I ώ?3D 27?}xuP+LR'q7% -cQ鴦gU}^W(4Iӝ܍!6:a7fiظoA43>CiP#7]y~y휒zR(u?%3_q$uSQAW
GMey$*= zLA4)%@ +/Length 3882 +/Filter /FlateDecode +>> +stream +xڥZYsF~ׯ`%Ж9fpͱ|%>$ +l> +#H:88RPhttbeOڟTL{~b|91מo<3l +|i/O278C[B_^ٮԸ'7Aåk7uoÞ.侼ƶ%^r>@dtE
~/omx3|WQ6H]MpuYª_6zۨWiwu2p`xw{e'7x.7u1t}aHle + +/ӱ<4ЎeqqrM@`]%H}ޗf e,KǛ|xKyre(jNzSx>2t|D%`Uӿ.0GQk__(*Ki[zw[;0! +a)_2L 㻉X]7eBAF +V܅(m:&Eײ+]keYQCs ŢM)Øșv9?q캡Ms˼EnerOD4w8~n5ڠh'[ܢ
c=˭;ts'CqC˒$у%
= I49"=֮[D~,XozWep^<;aM}&^=I{=hV(}g95gN2-mQ4ZF4.}#2IT0 =/@8UCLC7-^FA[yV.¾cTeL<x2.]ihpIg %´ؙD qR46#ou~DӁfYfwT}:5ٰ)b3l+H'%B+~כخXD"H&GIFiE.kDB
%*џ(A[|a* +tJB%91n1
Pv܋* +W[;``1!%s{RV(gNޚoDzC٩2 +9*E 2Q8rWhXfZbn,'(Qs^3AhS0(#6BVPnLbĬl7AoW,f$ [^Ygǝ|Q#YtYc4yTN[J7=v2uA5Exr.!9ˈ[puEa5,{1 P%&)H|(Rif)vGh!
6&"{+vJ0, l DS%sitGx)%*
Sw( a+mz$><4L$7[MC{2]g-$8fDA6%(C@ɅIσsL9-IIU4TF{%v(eh!.M&#VrgY$GQȯ,hb\\89A=jۊBnrx联'^&}kژzIfA +SHߛڱڦk9y'ysOqe/rhwc- +n7PU"}@S9TFyĢ|]ߒZhNs\S,Bx=ORd$]*}t!ϗ[q_!w
nxbiĸRJ/4I(/_Nw0bi\B\H'v*[NU5(+JwI;b!;>zݑ^}Ao$ǫ &Ra~A`'wL4`;Ak/sx ↽'|לUP("_q'r5`haZLDOZ<EyHjAgb{`tFUV}/gzdq!ieN~k${D82dSyJk0G+ß<N2q r_25>:;C_o0:̑!ҵCSWEWxS)3oRz%VqBCpx[4@ދ)1X~wEZ6BȳsLy5gj2R;zņQ
N(ECvSh[d:#HJ +sLz3aÙS`,LkDiZlv/+$cK_A[=9/㏫!VFI=t6n]dxm$ޠb;)hdsJA:AVIO;a]ѷ㠧qU%_L~ǧNUR@bU|JtW=a +^J&w
zHI;?[sendstream endobj 5564 0 obj << /Type /Page @@ -23059,28 +22870,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5579 0 obj << -/Length 4353 -/Filter /FlateDecode ->> -stream -xڭ;ko䶵+ZL\lv{7|("gdTyQcE<!ϛq\Gt_oW|rb#
kQ\?vow?ӧz&fEݯw73}ǟ?;Mn_Z97ON=濮zGQ:(WOZWi1gMQBEЎcu=]H8*ptM:UiwǍs\}m5F c|O'*wl{E/7ha[fOSdj2*Vȿ -PUfYK̾UGYqzO֩
>pM<iN>??"?'x@PGHW-eoH}~ɾ{{|)( -/jt8!U$Derv@K\Bh97IN_Qg8(%:H~GD%:md?QZ'C6tO+f%+B3]O$}P
KfkN -L< -"p- ww ?0rubN b&# -f [) -TC瑇gT6F1=r9Z.7~b#:mV*>a }ou\@w:~Kp$KX'.^|j|~bqKCe -:b<`gsM$A`Y&XyA -)zs8Ox -Th"7`@ᚋ|Sߕ[oEwC먿aQ`Fqp%6\{ybA%2k&ECL$}2&ie*jU1,@X@&vҀ?ݽFTI?QO@?Z%JʁషJ3hJל4&f]v$нDhd-m_KFF;Mұtށ{I&mנBdzf+.8$IÎ3k0Q,Y7W%z
^^W'fcMd3jbחŲTuK֤W6! 6!/OG{5/*]^eۦq#OI?"70`&JM3qa_@z.~$=tsYD(ߔb3ioR+$D\σg%R﹝tր=̑|evUioӼߎj*\GD M1`}pț|; -R YŹT0n0AGӌ_^=XR.e<_MKM:=gu-gB{)?x1 -`@fǬJuVCw;h{6/Eʘnp:3U#Wyn'< -.}VixU{9aSV -lH@'qUEcXēk.0,ÎM1jGl֑|4?KOtfIN -[\\ -0c0PLQҝ'M}GJw=kn<R/'/<Y@/@$ !IɷُNpM393q[HqR5x)HrZ#-|1zX" -`L
KEJq'u!VϔySBdHI' EDZ@!kzk#_}¸B -H>6OY8`r֭pfȾn̄ؽ-u}5+nsE +/Length 3690 +/Filter /FlateDecode +>> +stream +x[[oF~0PS@EsEȥHS7vm"-D~mxh{IQsf;ձqێ(:)k |zqut@+ǎꆆ\X/~q<KtTYz3ihTֻ4+t~\lgG]v5Ӷ<Gۋ[HkO*ܧyg
l7QƨR
p}(v5[_fZәV[˰Yr5)k-E&AE^7\*owS|=u#T<?YVI\C{R7q=sxcX6ngzqS&_/l̬;SH┆e{<=_Z%ٳrm#v1Z3sZfUPA&
RV\[@J:¼8++TƆ>A7Ivu9ARna'#+?QJ*F>!e-d,^CDm;d +t/@ V+^b "8hƏUݙM1KU4}E9~qϱhOʊtOI-*?^CsCpF4ŶԮw@6rT=CE#[+jYw_Qr^5)j`vB~߮L;V6ɪn"`Id4nE,&fp=T_L+eCrBy$~Y3T+@Q7cmA3<\
[ɎUrH}pS$fQ7*'ۙv9n^JG + R8ei>A(?,K.e + + +];A>a`]x|i@#|@w{hW\etąozq.w7r9ൿsu"FkjP|ȳC<"ؿGO:;*F8u%b[1Uc@wdJ0OBBj;2>Jq:3+y2+UTWHJ#.琕Vz
rxqZei&VcsGMfaH3V9(9dYCqH~yl&gvnITu F~ +N68c2<pL+.TlF{5Iά U;&d56M2"C/
xDKu&c[]e1黽8/ppun6fZgd{Bჽ+2NIc8C2'HMR7ʢs^@-l[[iGF=i0omV:f~ 6 0UrKLUx|x"9If(qb6*,eq\Ⱥ$, +:ڶ W<Pg%s%L0RQEV]`8aN7 $Q +sjϤu*
b[ܾV[5B) ^ۚFGQ-b Gn=hhQKxG|Y
1'Pi+P+6Lj'h+z1;N0Ӱ\nijGt=KF^S;CB
$Bo +TyE%MOUq]ݐӹ>Tag«f9i֫rz>rp;E#nϑHX 8gn.2aD +0"8FBgd81he|E7#|
Ep*kuT[EF#30cd2WKk%gbA_BI(Ò N+8v'RelVxCg랋cN7|~k1<#v_RacU*&_s#⾪3T]b "p*5SYU B-!P/7P\ȋ<zo1=|ǶiF+O.F[Y6nfn6MS ]'*A'酬-obF%n_=yH7bSд̊
7sРYEɃk9(ת5
ŀvd,w54|zT%OW%؈ӱwc s][Nov3VEauSA_ZfBy}_0;xOOm}ⱀ(^&5P4 E>on<#R_;Ql~endstream endobj 5578 0 obj << /Type /Page @@ -23236,20 +23039,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5606 0 obj << -/Length 3715 -/Filter /FlateDecode ->> -stream -xڥZy? 5(ޤ8E\bL4+~k#PxsssgIh;z''lqfO,
ooVGu쵳?v^ݿXok{绅k}ֻoݿ}k4w"{&zn~o^qͷo?;{]qo~͙epo_'ۅ
_Ǜ멸/)~b?flq5P/efbX^h-k-6o~ϻ.Vo6iYUY#ݯNuUWv˺)]uu=wY8ZOM,
":k%vGz&<گV//$Xi"+}JX -<zHe6{.~ƃg$I7I&m`{#2 -5a&X- -"<G,ѵy.K҇QMDžwiv(s cb}"il6)@y8mZ@{@,;uJn#w(g2S>m3,X1J[r<62ViOm]i:Ձ>zbHG\o<>CߐKAşԗRl6xDz0>HYB3Iș-,hQ --Fmԃ88 -"ŬG@@H3+yDžEbc-OhSvcHؽ<bgW¡漃%4WK{uؔwe,d}R;ݖ9SQ&;PɧN_1PW$ ?mߣ*ÒzZJ!N -!#x,1*=TŒ(O4:oMEΙkZ"q>d>Wc+!)4XJ ([7lX0Cm$LVd}u\d -G9$8CZ>+Nޒ@K;<D!@zS4; ;ۉ;g7e `@fDG/G;/0P|Av*\(DH.Ռځy
8c"`H9:[&>02:B<˿|:lR쫊U_v -MXrlΐa>p)#pJW)\ȃ4J((_Ɲk&|)u+2:
N(~_ICc[:Ovz"xkvݵ
%Þ0uG17|$<Ezꩌ
@ -*}es)SUAHs#7퀞57Ft}J`x(q +/Length 3437 +/Filter /FlateDecode +>> +stream +xZ 5(AP8㠵E(WJ)ae!%q.X|qp]ā"]ۏp,v +gl'۫wZ8Hnqs}M:boV[oz}K)htoU[L_o;_nvU>\`?\9ċ#MJ(_ջYO-xn'з";=s~0sefZ/
˴_^5IG6ie^>dM8|o4YnڢnF^d{ۡ͝
mSsq[2|R +sWkt
azNnR*?"W^l=YVjV}HbF2o%oZx_`^b
5b%zKk$]( aVQ +O +<]ӥ!-qr<lOi[r_=SmDxiO]#'oi8I\{_RYr}[ˉb1FGv;x }|9vYTwns_V<N6kMlXu]+/X8 +}}¬+gr"xC2My-JYĻWdzn;r箢Hl{㴇=
#⦎אuYXZj4+PwL\]0`~tY)3TU +} 3Ћzҝ(؞k1l&׃(> +b5Smz2w*>%!]sָ l
W{f7$>8rdc 2زg`k4/g$#܃f# +BweΔ#g{)8u=7ItC# +7 +d>|ڜgXS#9cg/OospwڦUפ&P2'@Ttt-Gs>z`(F4aVJ_A骶@7T.Rb
v +4gZxb((L 7zHF +Isφnsڦ% f<L:PgԠ
r%2bfU<'m0%hoǮNΘM134yGiE5ĄucF)S2BgQό +Sʎ agx29v6gNwi3k>&2+Y1o8f rX;X[0p3d$9 )D+*nlO ӄmkDm +ɽkEH5\M*\BNE endobj 5605 0 obj << /Type /Page @@ -23303,27 +23111,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5616 0 obj << -/Length 3359 -/Filter /FlateDecode ->> -stream -xڥZ~U_J&|?N^|gE<'1H|גDJ -#>fgggfg~;<u?u%Q/W+z
3?\)Ѽyu7xٯ֛<R(|]*Go?xaPYoqg3^?\}K -tߓ~yuwsϊk^5Ca\?ziUN9)}>x*߁*Z]uEK9-\
ɥE{tC hao_Y~-ʜ;zM6pz#MWwicޗ@%ZwIjMQ-ubğ -A4b-vmWCTmE^LDڸ<-E\Pǿ͢s쌬n<c|a>:."ȃP0] ,F`W*KѴ>_=>.;|t[{Al -p -tǚ1Z) -lVKjό'\R5NA -N66 Ell&Qi,UfaqT<͞y6YVqd0u=h(JG0]BEE6_Ll1mxex!8>pwW/\{ -$n7tw o)g."]t(34'cNGf,r\eOo1H~C;"\6PۦJ;Pc痢ʨdTZoJUcg؉. <ba&Yke+8p%^캂()k6H0@YFگ(d%~^]oGD$|G-B1!K7 %AcJY= -|-D"D^AHC0GӒ q|M({'NwSnt -O8@Vs܍copcYhJ{v$VysQw_כI`UC\&tF`2=K2xw]zo -P2wxRÊ9,[]pDΠ6ψ!xTSw\Y{Hd -ߣkf=^.OCJKE=x"DL#%6dQ -!S!@rЅEאX
hY[:{zs
AcatZKؗ-4CK?Wx-,LŧHi<ppi>]%?qJ03]ThFZԣn7) -K,^^YB\Fɤ1aG_*P-Wၢk -Kp\Ovn -y}m˖dȢJ3]Qem_8e`{i;&ǣRN?<qFT*MD8hiAZE}ZG%\O8PjߜgjHA[T~RI[Q@`D3_sP}pbN%*pT0pF؆=bv*]`:~W˾8r\˔dz.@U@XO/ ) +/Length 3091 +/Filter /FlateDecode +>> +stream +xZoBR@Dsqubiqw(hxHIEqkD% +cvwvvYM<&qz~2Yxܜy̼>SBMBz~{v* +&s/msۗfsb;gʹwWoo^ +-ݖ?.m<7i +'1|-#*yuar~9l˜;\9fVzΞM=M3;*Yyǝ0L'L7~Q'v0P)g"BUPH ].Z,͌ +"AǀU G#f/) +%6ȋ,:dVb( +ԡF{Da~䌌0!͢ 7a&Y +uHZ*BT +)#"0*xo~ȗYy Z20<[yڍ endobj 5615 0 obj << /Type /Page @@ -23371,22 +23172,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5625 0 obj << -/Length 3106 +/Length 2679 /Filter /FlateDecode >> stream -xZ[6~_a`cE$uE4hv6b`!۲ĶItIѶ..rC~ʣ$ =_8JrO60sM2wh~xy& -&R?<}B/qa/zw;WJD8íчwo -jWvha$bw*_]pRʫVy##. -GJ -nM-- hs^oD>B -PLZzqo0!;^sgk@y"L,GAaTx
ASj( -N5 -M_`;<KȈ`\O}4ˆ\؋2juJ~xcV){qۧfxR13Θ( -HtNݤ
xCi^Q]UCn]1Łܙ&]n~=w 6DGAvG!UlGlZruh#FP ^qt貳QId'%g~v+ڀE2&x+5vv)nfzq!+rJ4\Yz#|Lc%2(PLjE^,wCC$aVemS a)A"$ASVT,=8Ϻ(>dKӑC)?HtE1SXGF$v[J,!#JrcOEKJ%@T6I
!k_N|HNh$'ds+~]9&js0ڀ![Fg/Q(&F2Acx17t7ڍfacEސ-[r'dBcVzOԇ!ꗝ! C-+~]s!Aٮh'u{Q05$u8X
6I -im$]dhɪvl~<tEKa7Rz,^V Ȧ+EԮQ
)#Ǹ*X97[VҏfwؔfM5fQ9w2- .َG9bnObDr
AD@G4k,*$85OЮLg-v=l
̴& "ģ ŗH5D#0hkHPΖˣΤAK4mH]є|2ݎjՋޖ:Qeé`ڰav^~(@&e:AĩmK{hi1o7xK~!P6`cAD$҂aUm^NCPJӥ4l$j-mҔ)LLѭ>iyzl\<0/'zeNً
.X-RKw
ny<zdh[KHA!W C4@]R ߡs%yn~ -7k/@Vj.[ehVxup2fABl*gu9[*r݀2J0Rwdd9_,~&քVGp3M7O3qz[$h{Ovq{vb)yOA3loLD1*e>D2"h@hLC/uJX5 Je46`c^2@?Lb5kz9C͡y*hs4]p\6-
lHJ~`st|49SUOuh\=So/γVL Q859JVC̏k-$,J`=/Z4l"U7X(g<CW)~sh"N< %j[h8N~ЪN"nR\zL6T[~{X9ou7CיVU9ɻ>#p}!={\~\A뷴} ƈSmJOݳI*N}aeڔI퓖-_/jgG4FYKT -AQG_:Aٕ~uװgI}45R|eM<剣qQ
-?Q{D[~i
q"d%"ٕ.48L;ET-cm.o|7*=Y=Y,Kv('9*CuyP%> +xZ[6~_aBm^iӴSd}Hm˶r$9{.$%{4bf0!EwFNIB4ʲrw!&BZ +1ѡHbDOsOnDrzˋ뛟J@lY37Wo^=
2f^/~T(fo~fpuX.<B[2'0uQ +
%,c42 0Ex1!dz~8Ա]x)N==o]̿C+(;Q +RīBlt0ۂqZ[4OV$.)ˠa9).CY_chV%AeQ)wxOӕ~j{SAW>Y9o[Eq\@[mI{oЮ=WK\Q*Vv";_ڕQNI;X.C[)|*+R4QeOggטeR8
-EGi=q<yG3W$1W3$T>_v4ﱅvn 5LY`^Ftʮ kh/qWjxT 0Qg]wWo#ycqKɍwQšyLUR\F٥V<7!xmKmgۙcё
,6aE7'xGQ([ܔ+\JKuۺDGQ2TNroW4 +'(X2]{%?zp%ì +z[llUy^ M5|JlHЛ +nKk۴|;fajޓŷqC8bgދYòS21A݄g9CUo8Xip
?Ґ +z2GQR9Q#kwL!^Α#)owbst1-y1>\ӞzO]%sf(u7?pӶd۱&12WWLlHeîw>|*]?+ +gJqyǁmÇ|\9:ލ핻C3LY|fGo4U?C֫ˑ/q9 +Siq?gY?WLiyӅ/f\xܯ2OLTy˦8e WdGe6-F~yT0sCɹ +SM̲;'ɞ/gP(i÷8MCNLOC"|`ܹvSïa᪫R?3qbiE0я,TzUJa8⤮8482߿I9c+tBz*ʈhmk,@qaD
gIq+KhjXR:I|{m~^[.}KV=a@+_ݦL}|T/"<Rigsendstream endobj 5624 0 obj << /Type /Page @@ -23415,20 +23215,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5632 0 obj << -/Length 2824 +/Length 2789 /Filter /FlateDecode >> stream -xڥYYF~_R.}m˕$-#"e_\â$[.@whrgsgIh;~:d=\9̼rb)$Oի(:l}Ao][,}߷^,8~tp<z{w~}5tO8n֚n~o;?o^;N;|,\9&Gh;Ӈ+_ǫt[\0USZ1K,k.r ;y0i\׳}כšcN@=ycZ:_,]+o@(Ta?MUC 8>=
1놃kRfo8^b -ڪ|osKZ=[=\#6AYo]~\,aM}I У@~ -4KX3~euGkIH]#cuh>`FxcFbjۑ/|j'tB˷ewBv%PlJnAM%>6xXn[dTVO<yzqR*/ '$ -n-mªVkQj90x1ߑ뻚> #OYll s+ҍu -Φa,F1&DO G`JHMi -ݹU0 ?qtEcV\O!<Ոe#~[ Q »$*h1q nyXXSu2N4ʇ
2uO;]68I(!=4gI%Ɉ[<O _m#u?S[\e~r$fE<IIŲm[͘X0daPpA94WR -ДIl3ЍabD^JchO@o=9> -Sޓs^3,dBs{Uq\ -=8g9yh1NT<R_{&=jjz7g):2 -HrଡUsyﳷr:RT{'ih}(XmOQT1G~<{5t[ؑviV
,@Ɩ|B!{?ɈШG|VlnFb۷c%7yDt6=tYd0J=,#_2'a5%3M<.QrL};MSݑuSNM('%5ɺ895,e%%P
VwPQjɬxϬO|18J1i9kvF]74 +xڥYIsW0t 7vxQdrCH@_5gR{{5ݙ, mOgq~̶gwpfD!NXةַdfbbljµէէw`е^E[k^t%|Y~f=jA#Y.~Ùe@dvmvtvB_ŗu\0]/͊%0z/؇ 0#PNp\" +Ck
pv[*]T;G ԵjhO4{vԹ^b +ڪ|OKVq?k^Ύ0Ȯ
P&?.0Y!~ 0~Ah'7p`AT!6HK< ++UL?*<s8?"ŃCҼD*\8*Ǿ`Fx} +-DIy){Rb#8:QeMP9Ϟs{9.b(4{zbEY%vzd%!nA!EJqq5ebAuXNp&Wc +0ό|l`<oqҰ%{ijOjB 81YNօ31p9,se(
u/jºvK3}u{b(\93zrRV.e +mM=yKך١lv G-A~QH
Ы+,[ +ٚ_0#`sNgL@
Mq>4I}z1E0Ȋq|J-j'CwK74vճ?Ec'i8)vBZ^<%ԍl? +?&endstream endobj 5631 0 obj << /Type /Page @@ -23457,27 +23256,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5638 0 obj << -/Length 3694 -/Filter /FlateDecode ->> -stream -xڭk6Z8Ҵi4^v\lkjeɕlw$E۲SAVp4MLʯL*ˮW۫fcaPWW7ZDa#Z]߯ -^~R*y8_ip;Co߿~wݷPnqL8W/M7W;NUly/* -U]?8 -LoPʼWwWqx.毦ULEiO,BaשTa%$bU1TmsY_~W]h+td_o|k?yCܼ>+$)0Q)q#JR -U'hai-<b>GRZHVD@d':L0fh}1@'|v(=3$蜎f-* |3s$3عF~E]hYt=ns%
B -̗ -3k5v -C,yG)/^ՃyfPF1*T'go_eᗁVY"h%?N<8A %jBw"$X
@FӘ%P6$.ЌxibU%f]56cS#3H(
QMI<WO]0flE`ۣ4!IN|:J Qk
8QМȈAcj®}_]Y{
KQJݜm*3p _:J`}5""q^Cf%sўFiIћWV]\чG#Tu:a}(n=Om-ȂT~{~i5+G[3
?vK -^8ܙ4lHefqYrq0}J}۲0$ &:1 S z6A=c0㴈
bĈ(&.'F9:՞$<aA)Pe^F%@;0Bue4}76E%?n>MOS-S풰' !jo%g-M$J
L4e -w[C,(tA
r?{[|2shvCy08'<f!;YfGfN1pxexcJ]:) ;2KXf -jb -)C- -l[Ԑ{6Kwv&-) -P[4dʣbx;B/MInQms[tEYxH,.IGҧ'+8 -₌rmLMY$={m)JA]
L_J(Ǣj0!֬sx --妤PC',ͭ;s(/5fSi1,/s
gj昏:eo1Se<c<ul7WSd?"ԣy7;'Dӻ,wr^_Xh)+MadS,~/z+CogSle' -3uF5D),/c1w'F&endstream +/Length 3515 +/Filter /FlateDecode +>> +stream +xZ[oF~Pќ@Ҵi47v-EKIc-E*$6CJ{A Μ9\h5e,͔flf0݅,$Ʃo/._$L~;Zr{o,az*4ͼoʻaWç{{?Ydwˋ^^}B?XrWȏzw/l0f0|E~\]\sьߚ2 +r?2N<N +a<!buїM}þ[mKx@~w^We}]YEA\P㗉x
$LPaԱpgVB6I>eoxX)I2:E)UUwQZ*bB?I`rɄA8, +d~CqC^VC%{w9*8Q.JHR>>`-*'"Y+<\w[}Gz65`8Wp̷ {+]$!ءx?';~x }N2o[5@F|8% +m[+ r ,u_V_!\VٓMGg~XQ {$peszL,(;`U)$Xc:!9\ĶԻC +BF{sBOZ9 +;^@|R! +]H>*7V@2rim0T+ts@p̚+\6#rG0D9/QrqN3X"#JR)W<2xxrneeDGWʪ@WIDGe~`T|˻ۖM=ea7,,6J6=*wH87q9u9ٞO]鸟1wsTe(YI[.V/z_ V?/q}i~/a c';7ZA3Q+\I;Ls)ց22Rτa0G'}o@Z6.e+F@
4q8~-2ؙIb?k%btYkȅ,^7sY(?Iס} 6qm4 $Z}a줿04ak`߇2Aaڶb7`>p\8Y¶@V`l{8SuĖ;h +J2 +a[j1+<PPˣHg=v0;o- +ۨ#hsu\skr_.0G/tQd +ڟؑGeˆ}|f3//5$=4pռ*yQ7)[C&e>8n~s]J(31oIorvA4W47 +o[Â0?jb͟h%ͺ ĚWIɦk%;Q#-5~{Bo3>p9Aޅ㳊tZfendstream endobj 5637 0 obj << /Type /Page @@ -23512,17 +23307,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5645 0 obj << -/Length 1956 +/Length 1825 /Filter /FlateDecode >> stream -xڥX66fl>Ͱ]8/1۩#EuMvCqDSǏT?Deg2u1
|y-gYϓVYf0Hgu|||zI)]wg\) rk".Ϗ}Vw_fϗUj~};)\闙d9w0dvoʡ]Ǭf"I"}8,|ϴ']>ȡY>q.T,wV(Y,CcB0o]U`vq7{h]똅FWq,e472˂;*PԙJbAQGf -k^ODnAvI9hR۬i`OD@fs_\"rkVylHg]A%m=n7V3!Ip^01*;QĈ)1+JzG1Lڭ"ۛ|t:&kVPT -
q 8=&o
-#R*4i@ -_O*09mP% -L"MDW -"g
<?V_3$endstream +xڵXmo6_y*#z]Qm)4k]C_ +/<K,)Eg9đvǁA%ű贐 +,6FX(8]BaoDi9qT\,i2&'%Ov<-r
̰udb5Q]˹Sgˤy<%(awg'aLd%+Q3
Z +_I
R2bW +m_7ڑ]MTx t>&kVp +MB@kqcmg*t%l5]iUeDu8Ptrc:tubEnoi$10'ute8#=e)B,ϛ1S^W}2ʲ`SJgf 1U- +L*0K8$8r&ʆ)=Xm4O"7
uÐ.1&2杶S¯: +/(s}rZ^ endobj 5644 0 obj << /Type /Page @@ -23576,23 +23372,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5655 0 obj << -/Length 2594 +/Length 2560 /Filter /FlateDecode >> stream xڽk -!`QP]'q -I*H'q I&݅|/`eyu{1.Tзa0]YN,nz۷Ǚ>^OI2^Yo?^8x -f6TOp X,jO#ǡkdlW}[ՎG?'Mߟ wicx4rxM^7oM'P=G$TÔ$nX*bH+ܪـ9q -Ӡ\UIAܽ -u=
|ț;l'.2(U˶VɤmmA̶<'uA|9T=^\ROVmHĊ$L>S1p/#l'MBY ;fSPt*LXN;Dpʼ=?b|ثjՠ[/6[7t\A]ir9.4|VT\j &0`qܼ6bJV|XICHbܗS@A:Tka:N΄X3v,KZِ%c(#cV'KĤH%UQ@"M0Qv,C}܍ޟ ^LC ˕Y=PUL>C9^J1dt!f ];^-9f݆%Aq:#FGVԃ#ZCGb,@(PCW.Hy<uO3OQ)1 -M^rG*W{L}8" б -
JY_C&z+//J9kpQEaPΌ2BtU"ݐrdJ::*mf/>-ߞ-d2=EB*(ټݯE -H/˔g3:GyL6Jد+E/aclwuBT6s(9b0 =[I!z'Ґx{n #Yǩ6_!qy6T}
[s&}OJ{tFΐ#F珂Ig{e'sN}&^Wa.71qcN%EF -O-9'krأ?!s\S -~"#O#ɘ(ys{cXƊ:RQ+I.jYXXPVˤpŝs7F%Q -)Wy+9<q]Ay%9 'D9|~<mB|J0^W{DcAqz0=Dem HU>09+ƃAo p!wɰ<D,8!hoB-NFĚrvi2RLXѠU5" jauy$\R{e.%ѨĝWWz2XO@HƟ٢]9Q57M+FjHq6`wpӞ!!u&8u
ittm ΉB\7c5ztq} u?c^j>HsR8U]>/.oW^kY6^AHum -?sG<G3HhBl= s~ $xOnendstream +!`QK +ٝHM&Ia:$,w|#?#\zu{1.6iNnׄr{70=әTy7 + ~b@TGc8چZNO'8ᔷ߃8Y sQg-tBH; 'Sw +FSBAh ^
O? +wUPyGi&_/vOjL |;T4M&H0Rj +}-3NxD
OD)<l>3爎3#lƩ]H{ȇiûvx"W.n[%2PzsK=Y&+60LY &d_#'D;fSPX)ݤxd'b$ +mB6Z'!x;`#FlW4$}II d@ئr
&5'X]C1bD8J +:a3v,KZِ%c(QFƌJB#I?3pKD`28.Yȇk6LģH,rFbE0dl{'P}RY5]ʪxrC^-9'f݆%Iq:#FhϞG^CFʏ#%ZuXվD;u(s{لDJ`+4zi\b&01[Oጀ@ tO8 +o|z`%?ѓ59fҟɐ9`x?cy12VԱZ]OrQxǺZ&mm.Xa5*zVLoW=#.ћZ{~wڪj`:^W{DcAqzF3=Dem HU>09+ƃAo p!wɰ<D,8!(cuZ9l%?UǕpدQAQI +{j,5lT#s9Hē6b.%bSj|h]Ok s"[+'ҰRPt`^Hp\I:nڦn3á Nd#*!md91`[H+fwY9N[חP +{ʞ;Ǝ)Fk_SPi*ve5mCtlT:
h #nZf;)Ƴr~QӶ}(4H:։"w +O-BG>gI7 5YA ! +k>ӲPg8ZM0M71܉Ȱ9c˂ĉΫzuJFC +.AO"Ɯc3)BqSSZ-@+OQPC{Q?T? +D8['#?W<Gۮ'.ӑ=gT;;H^endstream endobj 5654 0 obj << /Type /Page @@ -23621,17 +23420,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5661 0 obj << -/Length 2118 +/Length 2096 /Filter /FlateDecode >> stream -xڵX[s۶~ׯPfJ xrj;v֖TKi>"-H߽YrOfI2b7|:WǾpT4RxV
\no(9p2źz1_^ߏl%#1pl]}`~2]NpQZ<dɴ[eihc0釁#T4>S2lԊ5oȻNyWcձ[sP#|#Uo|Ll+FzҪ);&HWMnuHeyU,] 9P'%Bl z??R*rfB"GhIpjoҊ'b55>GnTqvcd#w}+xs4'Ŀdvq1^^Nf6LrM̶9t9-kwc<b!cRl>%
vc@UY!c[0=NKKkU3 ۂ%ԆiIk#c~Xך;Z5''8"Ann=N2 -^|yGzE$\ -4@wnT(,|SJl`Mm0Ow[AWw*X!_nxg?}4G-|(ᅳ/Ͼci9>;ow;1t
`ssViS -pE#n/YZ1xO'gk^2^2p'z_I2(_@XRMOaڤ5Tz:7,[<rm-thV"snxO&hp{Soc>!UWT:6,EFZkA^<i]81x_xeeŚ):˒ -BChRZ1m{:&#}B&szZ`RmOv~EdA.UH26`dN<"y!tUMt
p!P -z' cǘ@۶ʃa<;3,16cT@0Mu/5rӽ_?jQVv%Jn'l}(,XM[FzbBɨ{KлuzamQrBXDl9ʲ5IJZTfN<ʄ*1ˁT -BwWu)g}3X#nrwmK*֪wgEZP]͙2 œ'8`:d<zza̱:B'bK;;n:mp{O~|bW}|Kģ
b9Mrqu?
3vW[
9|pS3kD4x. ltA\Rs +xڵrFίT&+%K63" +ftӼUFP4GuR2X +G-q"NީaK+lT8}c#\&%A{Ѕ6恿/i~(Ӝ#3tq|Y^Gf9jj$WD_[wzPnZ-Kw"0!~ѶEȠ=;i40|Й:m Ȱd45 6LHOI֤G_UYͅk88)4M>&B/6'$Ό +֒Ca!72=LX_3pY[1w +29v3o*O_ՐEʋ$'˲8"ƅECTgtKrs7t/?Z@p[;չ7)V3dUd6ӱKҘKE1n]M964@J]H
'>:9&&`Mo%rہxiƪhy":WT_{@pqPURovfgOș}hw-
n
j?b?w-]~NiǦH,$1 K+tt6#n%ca`D<AU0L'EdTߊwmP{*]O~p~S
2 +d_OY¼:*j,,[x ؆)C)<%_(W^T*1,o[niq>3FxiRuFw;FV<1WKYR<6-^EKyY#]{b<9XM?c`RoOy^Ob#2!]|nU:`ޤ9B +"b6'>͓Gy\ wLתrBA@<g +smE..1?j?1k9ZXhpOVFm=fyƅEUā"BFݠH)]6ohtohDiؘe6AQ"q|S(-3~թgT=MYj/]ѺE?dIgI[ +'iJڼY#-p-PI>U`zrwZcCy(S +NmpW8y^PS⭥7w5@C^ +4[Y]GLiX!GBll?šVGj-Vz6WPP}w^iTR:9ÿj6/┳VLۛ*}(,{
N4endstream endobj 5660 0 obj << /Type /Page @@ -23654,14 +23457,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5666 0 obj << -/Length 958 +/Length 947 /Filter /FlateDecode >> stream -xڵW[s8~W0]T,:)Ʀam= !S;6%;߹a٠H#<30"!;X0PړyIӉ5dj};hBm(sdz6c`P1V\6lg Lb,7c(W9{#H>H' -l`+}[0郤!b°J J*6ٮ!V(15CZт&-/ -ςώ|i nor~#}wYeC:_ -&8/#Н.Rҡ)#bUδDC9V?C[ݻ% hq5taiԩy +xڵWK:W
Qk<+"Mɔ@gCh@U4_
$3s;%~>,!ÒAD,01$)I;r=BI*D,'*a-dIV~oof"ca;ògݍu3R$?z33s!gu\h?*BU'
_eO$)YAlYR6Q55q:&{-|MUѡbA4՞5$l6qmv|MM.kZTAMjfh͂惚ue}Bcc4{/y7ɷQWNתȄ;qQ:LJ: +2ܹS3Vɏ?b[;},lY:KB.1?x\\iwB3Eya?خYT^ZrA.ă#}tQUuLOe:RS0ND-prHDsiM]Ѫlm+gbDbK4>ȑ0s=j@G]{P}Hc=}FyϺc 囥^77s)R+!Zs?k&j䅿Ni5(Mv{|}d
VT!4 L:a(D]UrKgiGЁEl=X&v_Q]wWݡ]΅勒SPK4ӂ(+A%?+ډ3Ux"W4(!aa/'endstream endobj 5665 0 obj << /Type /Page @@ -23678,13 +23479,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5671 0 obj << -/Length 1039 +/Length 1029 /Filter /FlateDecode >> stream -xڵW[w8~W/e`rB\p|bl-Jٓ%MK7qNffF)UU:&4*K6sWCRHp m]A*]YP7x_&M1n.lNlMԘQ{bkt{:D/6O&n8B{z|
irԾ~SB5-kuᄆe?MkUbNWĪ2VlB`4ts -xA YDIhFfn@T~ZvS9!tZ xf9 `'D%تɐ724}7dnٮQ9$bFܷ,z
{$f8IH/`B
ϋc2(&*1E+~%KϣeЊnSxH]'Zn1vVul$xVij[4qM -HY;de*a&y-)S[n\a 6KXmyс|ci(֗1lprV513h{ [c`dYto+upp<y9qdNd"h{#BtpԲ
~5ӫJXZ*)brM-ahPgOr?i>endstream +xڵW[w8~W/d9J!qO.y`>1ɏ_ɒ 6-<h曙ot +b?tuHO1nWYlHYH 2t>itF`{8\}Nۀ=m
mܚQ{jk|{ĭ/6L]r5~:5pX4~Cǐj Hz]e^O44@]#6fϥ1)bU@S
Av2 +D.Q
Tzk!oc +=w?mjw{wƁ˓{3- b8}dt>&JLp4W4[-q`
`ff?藧n.Xu.j(ۡ@" +VF}SJ4b04XH=^&YE#I.PveIJ.Rkٷ;kwɸ03dSۑV2 +E={R?@]mXs0rCqge_C b(E">q,/ݟ;d4*b*c-OeY\k
*}Ml7ͫY+;1!V^YxA/h +l7zJ@b[oBT0ㄅK[=VFE=?a8G4
[`%QMZ0eWu`?N endobj 5670 0 obj << /Type /Page @@ -23701,16 +23506,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5675 0 obj << -/Length 903 +/Length 892 /Filter /FlateDecode >> stream -xڵWQ0~W04!D3`-^)z/m8 -Mgw!]q,~ɮT%1a:6)f[k\*Tj tʫP)T
TI"ƘF-<D㱩M?Cy⩻t3f<G/CiPr1L_+[-@eU0)u.])3TaL0VLS>PŪ.V83170~@:fTWǜ`NCt<* F('Qs1D(0J1wegyP'x#L\3bfC<xUNw=j -A^@T<&mZ i{#CxGo=Wj;n>5"-UķKh;t<{m0<bc/2"IeއX8HZ}"9 -Q/ -\ni$ l#SDtcLz%$ -endstream +xڵWS0~`z/tn¯:ChRliသvճHh5@N"b{';}5]@pvbao5v)%nB<v
"L7}6#u+tP*)`8ȯIA+AQ Tj+LlU@5(t@4f
,YUiaR .`JN.>YtI'<$gpiޡjxmZ +#}۾}ךOӾSDj~MVzzEY +e^lydF*vJc026Yy/l036E08ae8)VuoG-;ӽ.;k`6|3 +&<m&[s:8Q/+bH:/`(|&ťɒ]0uӱ٠c[A"lؐ\eJp|8Aûc]m@c/<"ˊ까yƛGsA|v,g_y~0{sh]y[b:80{tuS>;/li-=[J`DeC*ӺN=dUHYn<7GG#s +`,Z~pE(\-E_Ou!?n)Ic?Ȳ>_Z| 2V2/agE`SuOtEGI鶁 ڮ ^^%N{S [f 봕%"ee47jClԞW=3ne
$_ endobj 5674 0 obj << /Type /Page @@ -23727,17 +23531,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5679 0 obj << -/Length 808 +/Length 799 /Filter /FlateDecode >> stream -xڵVQS0~x/9I9ob: -=}|@@V_ҴZ@<L&~lX)DQ-Cbj sN\JR,30U/PhR<suu@Ѱu`Yּ -tt6ۧber"֮tuhL -۽<v@߲scss#`Qnn:.+Vg| qBjr=VB\䙪UJlHm>,.clE"7Pjacgyp]M[~S/( -Jiwp:X֡(ؙ'NaޡFi4Wyœh)I _Њ0$78z,Sz*9KZaQ^ =AU2~z -Fm~D[(r,YW_'?UFm/e5Y(ٌ^6->PtVey{(WZ2lOVHܰڴ[N@ -XGHOyL!/m7ZkLӯ9̵g2nXSB=gfMXYr1HKe*ܮ: h8u I3pλlęwx
\a9xHendstream +xڵV_O0ϧdƎIm^-4m$PMώ(]RV)w;χU>DSC` qN,%jBd[uDmAy*DZk
z: h:pWk]F:bAza2kgw{K4*+ۿ8Ŋ@3% MpX3AĞN"2\OXELUjp
MkDX
Q˰{S*8V +=
*/X46t48ӓd(OfXkϊt:r1%Dɤ b!$R>iѱ +?my/YHDy*V$33Xd/2q2D⛥h7jԺMm|M:,6Ќӹ$ݥ_.Ob!F9$J<hw{>mL_1[ހ*4+vqA?ÖOng?4nRp7b{.C#Ցu3ӇhYVqZ O23yBCNoe\77O15,]BjǬ"*$]6f6S=֡4UQY>biv7km0m}a=i{?>ѵ5E`g!0O3.irxzH`8#*p
l6wā}]7dbvEMeendstream endobj 5678 0 obj << /Type /Page @@ -23754,13 +23554,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5683 0 obj << -/Length 1211 +/Length 1201 /Filter /FlateDecode >> stream -xڵX[s8~Wx؇%X,;J/8yE\ːa&?~eK
B'u=w.56l? -my'0^Ii" p/Vft -=q1fe#s+k\~vƫR b=[A
yुغ H'V<gVbkH-"Iq~SΰOophwppQ 5Oz$ᑌ`M['\ӀdcX[ Lǫendstream +xڵW[s8~`Lݝ쌛:;$/>Qd&?~ +?#D-CS'vV3r䄒
bq<?'9˴(CuJ+
<8dyCܝw̭(d_2kse~"C,wF4u!)tV;!ڐP,ɋ )ea]f +SoR-*5APu,RYbjbWdRr~ֻf!i\<G3 5+G!8UmB`C>KZCG5dؚd%jMUQw2B\(|/^joZLOz=2^,oށ-m|d{̰EU:E}V2{]r3ʻ.~z?hQ]TS_|[wLsǍ44m endobj 5682 0 obj << /Type /Page @@ -23777,22 +23577,33 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5687 0 obj << -/Length 3363 -/Filter /FlateDecode ->> -stream -xڭko6\.iI|m7V-|%&":b~||HܢupY(cQieh\8;y}b& W7Ҏx4_x|f4_~xtfXMgaM^|
^z7z{k~aɜ?}r?_\Jgg#|(G=azst*3__\AsވW
q7#swآvG(/hߙ2&pox:Ӹil\+N˺MZgt}vja&r|<cFĝe}M1Lkt1{9ի<Ϟ/gXv,r@CN3n6u5@O
הuRW^0Jc}-%đ7 <ezw7r,r@p8N1 +o'|?jA\*F[Vipp`P4v' 3=)vkHՓ{b%>]L,ӊj -p7SX -eN°7os#eaujCL%.=<oHd`Z}wl -t)/F=qc!j -.ehE&~
vvl a@gHiUo -2@Y`v {;W~5M8& -3GbnY?p -73HB x~j~}''oyƒĆǪv}l\ӓ,Pk -kvTh[G5ڳK|R
u{R!Fĵ
딶nDsͩhJSHPqR{%6t[|^c]ŝ[zgZ(3 -n6`;9וD㠗 z ֔d|k3/(_ dv2[q5" -9jQ/7fPL)kݤ8^h|eRucë:;tשO(̖\:;!8y»NؗY&ቄM>}>a -~7OU>UGkp?K9'!caQAE]kџջjHrB{thtCݒ[{Xc_LNl8aN)br_tϟa*#1}KeO+=RmE8tP/g`kO# 3.@tyȗiBD#/%2'/Oq}T|99:cʀv>+{: vP4+4YaE5ҋ"Eऻ1ujB<w}~-lׂbɚMaLT$& G:ͥɉ-͎+;z\LxV`_EH~ft $R=Obus-h%6oh$y։VlC"6XѤ6$"hU(/t5Ͷ1S%lKԔ5wIfW#e>Rj
ڷQ5Dy*eLStl("1a|⽉ޚ7~g]?O580ֿ-P*T5 IiYcocK"сG
{0UϨȜ(\miAAw\eo(/2endstream +/Length 3231 +/Filter /FlateDecode +>> +stream +xZ[~_8BZwmR,0 +ts5qᯚ$$N'dp'0B ; 7 +qQ0Qd"yz}R38x=S
^z=z{*k~v֜^ |ǝ}pq9qeNO?8u4:*M' 0𥿾G^5ry;"NjNpD +vUZfG^hl# +I
suִn(og +cX}f3YqCa)oĝ.>z + +(=7>!E|7o^]_gﮞ^7חO_=3[{-G]c[tN/bl@pjx:kzèuQzQіk3W@C&7G_\s+m[([B+Vd$J>|I` Im)X
F 3RV[aB;$]k$+JPDQ +Uv+lmOoq[1 [9+8< CVcg~2ߌ?
XGr%[-[LQ[wz{Dr-D:8ݜN} ?\0W@?\춀8X,/A|&p[܂{`)E(p%hͺp'cڛWs#au +B̎%3oLl`?]1slĮ!-Vhv?#9<v%91
w"??&p~xbxdrCZ-{7m^cT9Jc'|:Y2f<`D it5'4fz Z|8Wfm)}6@
G%=&`.*BeBקB.S!?c|"[d@ϏfЁvѼ7P +r6.XN1lβ*Wx +X8.[f'Wx=){$vmIi弢-Z$^E,PJ 'H!rx8}?,>$Qb4yᧆ +VLsgYPx1ZWoulZv5In_/Cn +^a?(~YR@4 +Xޑ7nهP1<7/+bzi* +C1Hg4GNHwk<7U@=VQG?2N9ǚ6}~G\RcvNVpaCDWX !L{&qJq&qu$%NEÿӋޕ +0=t%4Ҽp,R'R50F +-D$r +8#`"TpEe.
Pr(gTݚ2)=TjMvhg8@@S
o(s*wdZ措.i"F +AZD'HHAOEgEZ4z{ZP\v:?jHQy{ ++Hɿlye; +xrPl)=R.eѼUM +6,'b~Fvzm\ bBRWnl[$_ڭBVJIi6+F.rW&v|wY\(?PʁmOug~Eℒ+~ YQxZ˿ExS5DZӴm!,T}EGՈ\)p7/F"yCb$K :aҞendstream endobj 5686 0 obj << /Type /Page @@ -23815,36 +23626,34 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5692 0 obj << -/Length 4718 -/Filter /FlateDecode ->> -stream -xڥ[sȑBJ]`/oݥqv-+\$ " -++b@Y]UgI -\.uw}:0`iɗ -9G}ok/ -;Lkl꺀` -Sqw=b+d}ŶX`|˦U;0ަ`ܜX^q{c~dLW\YFv9T}r屄9OW@ZVPCo.2!LW Ĺ%%܍;kIBPųd/ѷO(yL|nXc1 .EFA
y'pmK}%5H*z9WDAWPClh-C5C'c. -`x[>QL[(%VGFoxD/@q8|,/g$ȣiy}G<л#T(Xx=jJ-7BX7U{E~[cf`iRDī\` -3H5==6E_F -n*?TJJtЦ4(F(/¨oyx@؏d¤T;(NpMe3J,U1&W[&~=-rDDP:&L -}` ~),8q`O8n2q2{P-n+mKrimSo܀xF'mҜlv"(f
C5EF(e)"̆xcH,7p/myB$B-usOgXq=f,F#{F/@VOk/q[cD'`'`5b1dCɆ,}
`=>wI>ws4k`L(<p7+g΅
N --tuyӏmJOMޡNLhR`9 -Ja_g̟{gSP+)kx1' Hxtw/ß^z#滢TEBjKMvp3&22Ҝ0f'ɴ|$JK(`KU'hb8=Y
L-e3;V%x -nѬd5mV˦A3%2$D$KǕC:!TJāTU ҂ĸo_6A@0x͔pl5"|fq[-I>Ҭ{m_w,1K(Sjw7Nxx؎yHgDJ;":7uJrJlĿ 7¾#ϲ8˙x~Ζn $՛lb_=[=OQ,&{B3IP\<Q~c= -sr)Z4.0+dY]璌$ -b}PWv((. eS,)`e;$mejh@`DG0[DE1) -P;>_=<
L,ǩ2e&mtPr&< -f]44?@PC,n]~i~왝 3+NV^[idO@M -+㐛?=EVrŴ/O8XGf7'5EDh<"O֘"cm(
pWmr43G',2z?daฏ5e=E ;K4ȵ_#_x6ϲetCPFC
:mV
YG<Kr-2
-585RӁ\"Yn6iMJv@bF;6&ZTY)F)rfdH!$,{Wnj0bвʞdG`RP^YIR+<VF&PH>V$T%\Ug<Lb?L˹% -"ޫ9L3 ^M(z#ZbGMn#86DAXN@i'-qd<N
sT -e
EY^Y^M)/trĪf&~Nc'RJ*2xQD.~7f7f8].^n1I r"f5ZL=q%uQI`8"E+P> -̚Ճƃ"E~;MjzA@%%bZo^Zr4Hu:ӭ>M)pB{ˠg8iFuKxw1~z'UVqe-欓MZZ/zO> -,:"r柉
o{Ѝ$Np *֊:.>^0ȯdI8-=3!;ro -/2V -&
Ydn`6`(ԜF7VqKzPkgLO>?}W"J͢˜q66?ru?֗YT>2o)|~}C934lɏ(O," ѳEm^JM׀dIkaZPl84thfz'fӰ 㑢r(ڤ*Sz2$6[Y&hW[8 -MysEGؒbCe +/Length 4598 +/Filter /FlateDecode +>> +stream +xڭ[is_bbb1ZWp{J[N*HdAU5.'r.uH]zLB8Qn$݅wo/.E!V}sm/^zyHM9xu{rRwyv;.p}s}-4*-VL]Wᄍ\zhV+(ixx9O=WB@şm/\/ůMnxnh*م.˕<i[~laiOJt'N-kX'noS
n-&+~^R*.5f<d¡Dv2n苷a4ZF"72Cǭ'^+G}J=gsٺ/?vueMS9ߕ,~kk(5eחU%#gozNŊ +1x֘RV3_ե|7xc1>K
tT-EF/W2=P'(ر-!h#eD +5(q2`\9N\mUDq۲F(I5{[J}s5cz5#(<LӞ3-.5 +oGMiڢh?x2j}ܣHPD1a\kO\LS9!М&y +^g9׃`WhP_UvJr^«@VyW'۱fdkd`%kCGt,-Ri=s9m?"JN|?ߣɄհGGUi|y-MQ=v0t3JCAi0 +*?^1mB7J!=scpS=7=tM㖖,% +0NKEB٣ٴ:Dln|-c+ۤANu`ҋ-9!IX?[k[R#M11 +Ӌc><5'f7E>,CnJ?a*0V|&)O(oyxY@ȍxI?̩vbTTTp2xTAd$r\ٺw]4"Pt@3Û}o7_}nʜEoD;Ҋ +nԳ%.s= nR8;rN0BO{x +s/g͜f#Zr,f3.a|^IǛsI>?YUv\(:"_5k[K剜S%љAX$mUǡS>r Q>qH)-X +> +E{Y_# +vѨ`T|E~Q5tRA"%q@.HޓiI4KԔⲰSUSBn_6@ +yt#\m_xheYQm_WBX,1rAH +`"%`X{vkN?'O`>GًϧΊQuX +/1_| +qz̚L +R7T_5!詎8ޟ8״iKR#.}Ga.K܀
(jti%Pp+%_VKځg.u=uQ$Le[!I>ϊ6oMI7e0 LNÅ=r 'FRp[߬$5GFN>$qv
:'\4!Ɓ +b$)ց&د +^}-,ٞRY#bu˪ʑ(2 Ny8 ee9j&%rƟM=0ht_FJSKNSH(= +< +O
#`,#q_n>@ᆀK*uレVE. Ji&*dGޔ/ƗG17^@Iy+|[N&ί'F'fCن;.)'4:Z-e_rk]znwGGQCF |as.+<6!yޘSm(4 ?azE嚹NdÑ##WAVaP)L4љg弸8d +V*M&Oy|Q}!FڏwtC$hh٧(nd)h3ShCJ\h! I&RǦ Rrc\1F ZKqseZڧHSԗ}hvsi3Յ
"*qZoiFM ./gi-FxSpZ@A%ҹ<Gn^12ӓ;9<'>I0z3"Ac/f"s,8MHW +M ? bW%?e'H֍&_DUuendstream endobj 5691 0 obj << /Type /Page @@ -23861,38 +23670,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5697 0 obj << -/Length 4731 -/Filter /FlateDecode ->> -stream -x[o8_ae4-R'dwfs d.V_}jy%*U*R̃, gq$g+Z~|b%$W?DTg}? -B6u+:UU'w_zqO?x#P/\c_2ǫ緗|+o_^}$u2T)_r_^yOG+S/իWs]q[poMi%Mx=$$" .TNuNk|m,#2l/E/:0VU^gJK_/r'+]]K[4QVpX4si;߱0 -#,dR0lKP4XvP9$wց0IbJyWƷ{L+7ȣdK(v`Wrb ->9EDa'zZFY
&!Ǒ GD$/0K|Ff}رU:HPybd]c-5hTkyѨ*ѧ٩'Q!_sJsܬ -gY}.6W\|E& $!E -ȅÏW(K0NE -iG^wΆoWx2 -d~ֵ^$gS!ȪJB%yrȠS3Xl)f-jj<WvEo$Ƒ5KJXW5JX'pEtXo
nLoeEȬ854QAGфb -h.br*efU8`c*k
₶bj0BH2Jb4+9 P&_hƊh.JrV4Zр;lW.HُCcbMz* -Mj=5D3j"dR7YfVf3jX38t]jGKcD3"-<9nV̬F.1-7h?E^fIdRz-=S:tT㸃ur;P/Uf*uXێm5'qj&'MzKMO3
mLhl?d'+6b8vRvv* -Ϟ릱uw/ -l -\\mo:PVڋ,qIUF6(EQC!FT[eƷΚGiU7N -!7tU@-Ɉ=g=ь -`f
p5ꌃ{DŽzgu`Lƚ -o4|ڥ},haqQP-2Wu9 (qþn3: $ѳK peP -O1 -:P0 -ٮWm1eymxKd&l/&vbqB} 5T oAWaE'Fn+shҁ%4xpu'muۻ@a 7u<w-w:V)x}sE)7,IFt;ԏVjZ)E6T`CㄻS{ -R;5)퓟弒wU{K`5*'I$
=> -lw&aJ@r9u֢fG>YD19A!f@
ND(/tzN)q&hAr#7ۺuܭ=tv Tc]Ki8f| -fcp+' tpQKݮ,T -Hgbi2i-Gjyo-,@y&#E>aJɐOD]k1!H3&УuoDnN6$Zx^6*uܕcYhXZFol]:F -s.2!
5vؙⱗHQ0xɉ)dv]g-u -RDA(69:ܺ~8 -v+B+~m?À4e50v qAt$C-*7||INYpDHqr)B<O$e,/Mx0[tw3rO[TY#eC#xΩbIF3cu=ZZvV|PםNqE9}Z;bRv8 -dv.|isru.:ume\KĒ#0X6>۩.ߖag"YOzq.zd<h^8U.>[!ȮݏaJMoAC;諞7Si"H!$Q?xC0'kxhI~Oh~݈ߤ[9NSR*o&(p{Q1D -VQ."Yؑ1k#PInhS+xŖ3w[:7N`18v_$I`]Wc
6HpQޙӿ}(9!lȥBcV:E
D +/Length 4288 +/Filter /FlateDecode +>> +stream +x[mo_!K +NbZ2"HXɳ. +l'h"]3#u8<?ȎTyAG-|wdz~aWGώnhUūo.WA,T-WI.^X%^}}~;|Q-]`4X\cُ_[_?jB*8@~= +"t1O6p=D\bI(Bd;N3)Ap1&j&kx,R@)_Ί-CYu$ mǝbYt|3~f*O
Fp|5wYN:VG]UٕI;4gc
VH:+wÝOzmᜂ8|ڝNz*Un#zj«X447^LɝXkix6)f)RI{{mxÆtȡB!rQW +Θ0 ؋kCUF\Ï+l[px%j"NG?¨N##vߊ@ʦ%V\QhP10/HREQ
D+ '{qL,_>,,6e(iɝKs0
?LTMOZ,w<:gG1=G4w/=7&l&h6E0BAc4}=q<ti~{q;Ŀxewy:Y]gr*?9U,0hnـ:/,s
@Hh݆sϦf+Ͻ _ŢΤPD)J3p%m!-XZ\3m
N)$fXpg#md +hj]W"ײ ]Tm9H^Ųxc*V1_ҷ){{ +~vLZܼb#USq8*=3Z4T&?01%9#ߤ<lSI +ko67.Mi/49li?wf6tģ|r[ +m^L%=#d8$6ۘVM +3[3utVּh_WGcS]2MZY 69~hBΊֹ֫侗=6}q8#
3\䷤ddiM8wqU. #~K~'H#M} `f%q2uk{C7~ɲG ,fc2_Og>Dp~uU7;G%;.fA +XRJa}KWyٲNb@NCyj2Xlb.\Rc0qsMB5[ȼ$Kf<vxajvx!KJz2[HQc@h7l95s!o7N0w(,Yl` r*Վaܤ!'l^z6tգ
cQYAsfLIM
Yݤ~L6H
]ucYgwN~Kiߣ~Eޡ"edO(疪k6ԓjIAہ㍺drv>0v0)gЧ[)W<(Gj0$fۖ^p<T"3E;ƟErk7j_TzE-] +şG3"*HX9B:35ʮ +5v>Ek80fRxڞ_ί<Lq4]-=O3*~wyHLx ]xw~ŋo^~E? ,.WgơqEu$=8uHd<po4SmCXeMϗ߮s4 +paUrL֛[Me$$;#O?1cv雲\Lz^V +=6o&F
vaMK
%!).X=
vx 'g=ci]eW<t;aJ!g +Hfe)4ͫG2XJt`0d=R֬u%n&N?ikϷ)0[N*b5`2_oL5Ã@eFfy`IxxbACvU1&ɣAQ^57RJcsLq{[rJSpSEL_-2,*8*b:|yIϧkkf )˅Kܰi4ƅ5l訖๋85CYENqtꃗ1w'/C҄NB)O*<(ȴRQQ*ɟʸ391m[ +u]sm".5榈&˕lj2 +`
/qXr'`S:P?-uj<#T
֍HrTӉǛyg fTA958rAGP:O7X*endstream endobj 5696 0 obj << /Type /Page @@ -23954,26 +23753,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5717 0 obj << -/Length 3357 -/Filter /FlateDecode ->> -stream -xڥZst&`;͇VvDZVcyN H@@j )5gnoooo]ʟyϟt2bq<[.fb!$뻋7a0=7Ǹѳ'wWwo/֎EΛs?\]|_[~<]W^_v/w_%e -|B\IK*>kA{h蔾sO[Pv<?lyFQv\ExDX#r-?av˦5?3y<1Zu5)/Femo!)xLorBf+}t7eJjIɉo/Z6I!6MАR -206Ցx,(g~"tl&rz2 " -"gU35Ix0]Z՚d
``"riHMʻ%Q' -9 ->Th<^Qd9sr6vlj.rk0\,-6%H;n6r<mΫQ'|c+Β1_*jԴ;>sAL}Lf*)7un
W8L/8(D5<V|O>[TʐC\$(7p%N!̺ L&k
'̡kO*> Y, -\^E|M@XH"vCoXqLSmĶu]2%Dnsß1?V:6ThcESeq -5~E6d8{2c-h.i:݃EW{6Br%E] -Ѱ8@8O#Ss0?珔ea.ro{P2$I0кZfvtA=ݩs5 v@aG|xrLx\ -T>:": -~ˌ#X3RUNʁ ]Cm!)ۆvǐh)eQHJ\_ԣ9QP J\h[Fj#˼bha[é>No -%&9?j3EtyFJ4qX$s-PInmHLvIVIVA<,*~^!\,v'Yľm,~2Ly4P5$Vر*csg戗Iˀ՚e/߽5vJ[[h#z&w}_~!=- ͛lJdG+5&r&[̾u}X75Ń`g`.{TC$OE\~OXmenuyR -cZ֞yQ/D/n<D/s.H|O -|LaB}[c
a>,;!^@k0n%Ƣ#6``zRȤ+LrB<Pc"g|ĈH7181#
BbuFU?!oܬFϝqP.G?*·&b.yׅґ%4fhc.չ`Qg=HS{NG'"Џ,mr<͎oA/c7jTZ -T贕4r
g@{őD,~O[FGEXᯐ[04OTz~3gڍ=c`R.QdʜaƝVwesA̼oPxcD'MuI1I'.͆X=^US6R& ->| 酑HgC(kOԵA! +/Length 3287 +/Filter /FlateDecode +>> +stream +xڥZst&`Ƅ͇VvDZVcyN A@j 4M3pݽ}v)?k}7f-0/+rH"=7-~p^}s}w*COʘyn;xۯK_-йE7o/^ߏZ)WE!?y8s$^<I_(Z]^GOԂwq7Uqz-zF?At/W\銺*JkD+Y79Si7cYVCwyTxTl36㑧,*`+5pG;h'ai͋h[-V\xAu&:S7MEGk<ē= +{z(wzV`ay%;*oOծz: +\mCb,d5vlf<[dQYV+*O+8?k|:0́V8g[ +̀<I,ҒOou86|4y w{qp6=ϏU` "We`PDX8B#;К<Jvx#GӛHbӇxU 4i\9|{ibI!65JB>J)rTGB㩠8oqc=1sqȠ!R` c$1<pC'.S:0eZm8)3{#4u+v:] )XzMAdFq +]궻y-4-ڋgX3PCL|FL}..|k>lFqdP\fWgpl*f +!][#U@ +0yFb* +[ +9|אNz
.Z"1jL5ɯUJa;cP#ꬩ˼o8ʾ:^6z@<Ua͉g"Z[tޠ18jn2-"\>E"uaH+0%Z/.|nj=e>5k슜8Hd*#ZJcc]qc0 +j"KR>PH/s&czyId +ںB՜tl@`b،Vm}\ +t +'-ޱb.Hf3 dxZ>a;u)_:^sJâejϩ.yYk% +"?7CuEP>b6ֆGԫaNfxTD_%՛עƎ[s3rVg%v#?;x&NvyVԌNZkОwVil kGۤLy(IK3s<iY L%kJ\E +'qe!!L)#}[ +R5e>m:^^ `y@v#Ҍ``HQ +=c`Wd`ТUh+r{|Fs7Ef0NxVlSiXso?bhD0>3Q=JaRDJɕqȖ6B7|5pIquh5*}t
G_lΓ`o)~Uޕ7'bHocHpHTLf+?$u7 +85Y64GW>K
s@^o|F*ʢ#KAx~PY"|B-Dwm3Ƽ~L#J*]ϟm<O +M0
O\QX$]WROܔ;+>^{'YDge C5EMNQJW
=@A(PEǿ"sv0RQTendstream endobj 5716 0 obj << /Type /Page @@ -23996,12 +23798,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5722 0 obj << -/Length 513 +/Length 470 /Filter /FlateDecode >> stream -xڥSMo0Whnit.,MSCЦAzAllc
lS|$'NӌK!Spؓ:"?ALfK -%\J07&_j@to=LhpQ{琼i(h o|wH*eFQiUH\џ CnT jE1j{r?w:˒ۏ㮎}Sg¥?kW9A҆qwۋIA'%b^EStqy[*Ir;тh5rX0n8<-Ӥ
-;endstream +xڥTMo@+;;WnD8`% +qۿYS!{{Biux)\Np!EP%xEڶT/x^]-Rֺtr?0U:D'1E(bS9;.1"Su\UG +C{$3I$w%N +M?v?% +w
|uAz{g9GgpL{5+G3:]WY8[] +ݳ̀o_͊w\@MQRѮO80Ο`w2+zi6:pIcjb9l~fʥm|qأP +,Y<+Q0W)y +99X7endstream endobj 5721 0 obj << /Type /Page @@ -24167,12 +23975,14 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5730 0 obj << -/Length 515 +/Length 473 /Filter /FlateDecode >> stream -xڥSMo0Wḧ>wK?ҥ4qOmAeM3;] -H>RO($(IA8@ދ.║kF^S3E&VdKǀ6$x^\/R~aN鬘nN!_dҢ"Mg-<v1v2{*nQh`U!|Oxn k .a`4d5*L*jh*'FF_WףN=ՓEP)xx}X9 +xڥTMo0Wḧ[5] +,i`Y4(Ca('ɨ<MBD|i*mmVw [X^!W7$2_ߏ̧x2UmYY~o"R^5A73]<UwMu`=%YoÓVϢ.@k@fʬ#pl}gi0]/w%:)K3>Ee +l90m^- +Q ^@9)_endstream endobj 5729 0 obj << /Type /Page @@ -24315,13 +24125,11 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5738 0 obj << -/Length 524 +/Length 478 /Filter /FlateDecode >> stream -xڥTMo@W>xُHR"" R(b[DHhyk(<A8M&Ŋ#3cJysQe5%DrC`H!2WWZ(.y鬚ήe؉<- -*%Mg8YdXdWU˴B=<J#dt/% 72h۶Un(a4ùp{pR]R||iJ"jM -Xުh:x]ץ%ˣ^ri1?f[kendstream +xڥTMo@W>찳4D*99DAH$Pڿ.pC;;
(PBUĂ+;0mJu19#PATQϩ~//?
լDTbJz˻imNgI=\7$wӦeV*4taTPW+i8jhJ<1B Y(V>Q_ߦV˶C:19~G'ptǤ>$Y|>(iMū endobj 5737 0 obj << /Type /Page @@ -24519,16 +24327,14 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5746 0 obj << -/Length 510 +/Length 470 /Filter /FlateDecode >> stream -xڥSMO@W>xB 4HMM0'PAJ#Qh;k;v^%{E!A
H -y^<l)8r`7)QiLVd叮mH˴(WYND)r|:)2LkoZ,"Z1myJ:iӯ"}y-Ӗ -[r{/#tHo>K@o FSc?'U۪iQWm向 < -pFpQ -?ށ:,nl|8{^ayz߭Y3!V\&sfڕY*Ɖ'}*ʏߤ}@XŎ5yɔOvv&vT>w^̞7aoMo<d7b2X[U8OV?~Q -A*7!StD/(Syendstream +xڥTKO@W>xB &PA +(yq@ηF!A
H +y^/3)9ra!iM`l@ AQnR|t1YQQ9nfi=GK* +Oy&mxd,YYêԠ-EZo2@-CLj%ŴHU=/} endobj 5745 0 obj << /Type /Page @@ -24651,13 +24457,13 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5755 0 obj << -/Length 511 +/Length 468 /Filter /FlateDecode >> stream -xڥSKO@W>x}Ajj9)ԀB۟YN( -A!sqH̑یMrNd0@ ^zQh(46=:/uQZޔ[jVNLoULZ<Z2.gs`V>|Knx. g ]<AڿocUǶe<HoxFx4܇I1(xh|rnH71 -\ff:k _d{ߦ2ʚ5}ɔKQg]IcZGoc=CKvݴdSz<GA~~FAⱁYU{dA.Pɇk ph@$Uj>M6?Miendstream +xڥTn0+xs829S:)͡H@ ;]E +LqPe*,f7ٗmT|(10hvx}GGxt'izYOlJl;U +7/Yeaq6F}a'Kw<`mOxsr^H~5Scendstream endobj 5754 0 obj << /Type /Page @@ -24776,14 +24582,12 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5763 0 obj << -/Length 514 +/Length 470 /Filter /FlateDecode >> stream -xڥSMs0WhhАR84PNH,ca -Sv #tI>K@v3 FSknTiƦr(Qq#p.pt's1$x|<s*5,D C9h,Lܜ@]' -JB[c}wL)'"ԍÆ%
"E.ydڥY*Ɖ d0B~2$ -eP'bUG|0&ſ0+$⃙<r6 <o/1wCZy^ϐ;ҀC;"Tnm*ʜ%gDž_j&&N?vaA7P4YM5!endstream +xڥTKs0WhjzpKCSBC!geǖV>i?Ud0T)Z]Q캨;IքԏpV_+MD%&t*,o|2'ӫl9YnݟUn&ӽ{bZzv<eZOQ0@)?27)MᘀmqZ9fl^w-Kp!FH`N1$n8'0-Mc8`>jO^*m]"$ٰYOm`"oTgߣz{FBHf0F>l]»S e<>F7ۊ?*_2`j5^QHϋMeCEE+%.s +r endobj 5762 0 obj << /Type /Page @@ -24909,12 +24713,13 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5771 0 obj << -/Length 496 +/Length 456 /Filter /FlateDecode >> stream -xڥMS0{h-|!pHJ;lsb<jw>^(E| `K,lJʃ*̜RUgEcu~uNWE9E,JC~|,(g/RddeJ_./ѴUq[gUK2ULl<S1+$I2DkdET3Pw[EI>no=%4Ii-N^uh ~F$;mғɃ -endstream +xڥTMO1W=x@
RpHQn|-Vz<y3FiC<2&JI.V; +\G_\Gh ,&^^oi}24)P:V.l<Ǔb9^Du9-*۠d~?n3qRo\BQ\dg +ӑF,81F%aƛ9m<zzN>hhw<5BW`#[!~>蘲ݭ`[}/JZU6
baQ٨9noc'= _0mY+9)ijXO^zқ\WFwP endobj 5770 0 obj << /Type /Page @@ -24941,14 +24746,14 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5778 0 obj << -/Length 495 +/Length 451 /Filter /FlateDecode >> stream -xڥMo0:3(Znit)MSðfAClNmc!C|H2*-*Ϡ)({humDކg1U2[V~0X&U==_eur"J1@;MazXrU-Wqgň馌u)wϿ^̛H; -%yxIZI4PMP܇D8-_}rjrȍg̸-Gr4*ULSss-C"FW
sA*9ؑ8[HO+( -LvqmYN!B9Vk%"GBpl]'|{$p
TߕMy93>#߾F߾
P4;H2*g@jChDPMK,0=n6h|zpL^fBm?u -0endstream +xڥTMo0WhĈ>wKM^Ꜻ6
,-l/ +DR|OQj~PFb+=ZZeY-#o%jH:yR?Wê +LPbq>J,k5O2,U};-#u4Ûa#C}-.Vʂi-@)^kJXG,mŝlN\^htB +[8:FH`CRAr>G7G
ucBru0^a_ܓhϹ8]m/<m2|mQ*⒰z.~7ٙyWEz=0X$=GL;ʱSjz[/_J?\,{6)$_Xp endobj 5777 0 obj << /Type /Page @@ -25291,15 +25096,17 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5786 0 obj << -/Length 1844 +/Length 1786 /Filter /FlateDecode >> stream -xڭXK6W(V$E=Р EChI^+#}AZZ9o+V>X{JVQ,<ǫz寞`+a9<^\Pz~-;֑H<y}(0T~%0 @mɁ]wlz~sp̮tkF
/~}'ssl}n;)auO_P_T$_!Uph@+ytAC*:؊yE{]/x!^ Kd(HM>S* -0KISbѢa-q;2FIh01hPue
__ҙ#ֱ9[<"H̱0P:p7Lf)KA47;t0x$1YSYR]%Z&ې2#GG!H%kɎc-_}PF$~1ut:ZSSĞ&Xe>·=bM -8U1#q@quƬi4 -g|#oC0p)&Ϡ$Vnnhĩ%K`}ViP5PИ4{G%5snMǏnHaM1yuGZ a?M3ԗyoq?<;!} -w䴼[ay~n'nA.6\<bFgl$)4ʿaBquXd<|GP/:({Ew^n5ù~8o_oW^(/*tendstream +xڵXK6W(,%AAHr%yDW:%˶6Ebj8CU +,P:،Y6%vgS%71qm1$[NG$_[x`8" +( aS0H +:^q5+3dEj? +Z:3eV.} ++'t +E>CBZcվ<3wgD!\"ŕGFl0[<4U}<F{BFPl"* mk0aݙ5&7k1Nn~h<s|xg[A|6qx*t^KSa}8!wCpg5uѫE{l}:Xbg'B F*\lo+FEfKuEL65M62*EUh6K_~:(#z[ endobj 5785 0 obj << /Type /Page @@ -25334,16 +25141,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5792 0 obj << -/Length 2737 +/Length 2302 /Filter /FlateDecode >> stream -xڵZIsFWBǞq&){lff P&
-W#9(Aci/DfWNٮUjqIYpLe'B{ң*PϨ`Xĩeu-/h=_ϼ"ݿ'BN73egZ3>ra;^91q/|3OKK2dImmS=z7#.F!F1hN4GM`hK9g^7MZ;aʺVkjb::OjG5[$d, -ճK[zDfk)p';"7^0|u{۰Ylgm)+rH@5'O(p}^`E*i&vd-kw>$Ⱥ[^ܮz1M8v:Ҽ=єGP=$h-.!`J:1Na7[}V`WP'w-X&Є{Q6;&6+qs -xpg4}WV:YEj"{PeldzEb`QuF)0PlhzdILj#pT=5浑hNhAHH0P&Ga[Nyu -֦na@rX*%\tpj]ki̩%xauC~?lZDŽ~Ak+W:{ W.og_ة+< RlW),wӍƊ^B6"njVx%\upVsq^Spkۙ[7[$EZt{~_&STP%{m*5M,8[tΚj0H`;Yy3ɉ$7ZDhPw^Afkz5wXo8cm=k7mzgA5dty hm\:s"L-7g";uUs۾E鶜]R:_NU<MXA/`F{w|l8sO<)Z&ۢ[ ?U5H3k_
Dm$q{;3,كkYkl1UaBCCX
(6cTA,([罶s]}e^7 Ck
$oKcKs.4r.x1tKzi |wytXnӊN;tG" )NePw_VZ_s`'wjŹ[εkxDqMfuht"!>~{?
sejEK3T}Ou91gDt?R4bW,;\nғD禱f?ܝ>]jJ"ZwFwrx`ck:vlЗW:_Z3_uZ#Z;Aw -%OEY^D,_ c OC~!6OMf!jsd8{̾[0B}TT9v<5Sx<OCfY`ӝɎZx|匯ٔIrNIe;.-qv8F8<Ǡ$ptushuO4`Yyw?ΞQ"YFiFLki"Xfs8tK'0}L*t>n=i [ csF8o8Dέ?0Kп-4#Nt2PK./p-p$Aua\*gxw#P=X)
Ĝĉ\Nt!A -chA!h<_rd1 #$ЌU)C2|(cpTmP[m1Hf$!
Xl>ToIh6,jendstream +xZs6_GA4A|}s]MNrzLZ-N(%ؾv +(&/WdD2x$*>[5 +̀"#cU%ꗡzxVV٬95٩\Ѓ`h% #Z{sΫlIl?D]ﰊ>-EYSy!R?;_GO@l8pyO0)@ И@8>gb3cQ%a,z69n03 gL(4;akM9P[PC'P>?7fMdĴpZ͂\_ًIڕg#:qD=&7gMvx&R"(Ņ繣`8a pD{@h7z% +g\YeCYQ/FLD nʡ[;q:Ay䩟E%ǝ[@nz:܍Y4sս ԋ0Hboi3cww%\w&[2:p iiԙZ9Z7?`yd~R';! +Qw- ㄦ3 +c0]YS!ξ/jk3/܁K=ܜB@|W٨SHI&@ef/q@Z&h>ꙟ!XW5%-̞w]l=cM +xKD1$D=jF)alNKn~V%Q"aK'ɫGqKګJ)Fw^Rjc^;}$rO-1)3$>P]64_wQ(yb=UjjٯКVX1Ui(4A)p65
SItI +}@/}=][tEkAvorOhGm?;D2ZiDRp\6LgM^)kW^揰&mj/jca.;ArIӐ(䫺mv07 @^vjul`\lN^Uvo01+~zHZvw_0zc^ܳ
D3*-PMzCK9:/8'j:>Z% +Tcp%ݢQ-|<v. +@n
_І{2[ifxwp/AZJ<X5feP|IRZ*2y+ʮ)V9KAijd{f)´%1hm\#<kY)dq.z߅{,ҳ' +NDhGNtUT9rR{ר{U,aܯD +Pqus\ŲoƄ]erv7NT(c9\7;=o?_aÂځ/dž*zGHz+:A?S +9O[OɡB%`aN9b4t߯g^+5:ch:'fe|z3`M99XPX'X~
%gGe jOcC$<2':{J6m!#`)%2p9Ny99PJѺgGrB&_=endstream endobj 5791 0 obj << /Type /Page @@ -25396,21 +25210,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5804 0 obj << -/Length 2666 +/Length 2477 /Filter /FlateDecode >> stream -xڥY[s~ׯ`RpF\X -8HwP_طqj= -vp?ivYO[ttrdeC`k44ga}2-leLf}6Ũ@inD?Ν3) -oTF`ԨR6^ȤUZz;<( -!/BYvml,R3O\ -PB=w([#23< -`%>xb@{R<&WB"e7)lu!&ymCm
7+q#xB --)$Kz -JۡpT
%zI/^jRsf%Oi|(aYi,(Zj+Ԇ79LR'#N$x}E[g|%BijZ& -TKQnznAJ+4)n؎^TG(V>h|jT](GL4^͗Gwn7)؍#\L{8L;|yL͏mݣimJ }8F0_j(RJ'
RɾyfTe*eV.c`)^_g9a -=endstream +xY[۶~_˻Hx:4wLIyQreP.L?t<pp.ggi,0-R_i:[VWl
#\FEKbzpu.f'2/=H!y>0swH<йfwu[X;? ׇWw#-HDIjv,M_y"ڞlV]Eq((4߆Ux,3ug"s2B$ +q6%1z]`8ZufQ
a8;88vFh{ФThk#@PwvEF9,ݸ44Iwjh,q\4-ypq(Ϗz(Hvmsh1Y5m>B$f2͟q!:VVU/rM[P]c~75s$Zu/R?=XDP>/:V"G%].@|#]Q-OX+h&3ZV)kFcX]-p#<g!s!㾊?@͍l9tnޅ x.t]=eSXnC8H_DG
ǟdcdh-ф?)2V3ibJ⏦'2=ឲsM)hiI@ޗz:S!gQʠۻYʲܟ0u
g&N3B2nDPH}iU< $M4nC +_~:T5ЭAFUtYS=1Q~W& +-|(H#hW꾻j\NHA1[ص]Zṵ6]}ysRk}ٴPy/͢RMGZMQn +Ae?:Xa6f +2fR1CF%V?GTY]n+44[^JH<~|8eX1x += +9%9hLOdF ro*Y^0TdkD̝k_,DqGv܃;`h0EՄ&QD䁧y3p\nQ4lr<fPԠݠ&kYds1gړE;j)iKlL1(hq;uHoG+|;KZ嚅bGuK)eM8B$gRm)I&Y +q=s@"ͬ
,Hz#Q
]_ +'!Y9="J<YjSRv +09XIB[+!
UHP89};9᪵GMpM4p-u`pEx8\8V +0lEӮoNH\/.0D?t49]b0d11 +.#9f'j%4{UW.[?+n/X*$:Nendstream endobj 5803 0 obj << /Type /Page @@ -25476,21 +25292,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5816 0 obj << -/Length 2888 +/Length 2765 /Filter /FlateDecode >> stream -xڅɎD!Lq=@flsQHmmU$%RFZ^[7$t=nwul9?
- -Nmu!WV?lTt#x˅ID*3N>:)@7X/ոX8{v| yEGe]SfA !Pv -##h!<&\g_dyzq -[=()d1qiPT -^ո"g 3K7)p@9Bp7@RMS_Pv*Dp$TE
>iJA"#Х/0M8*3y@mbppߟƃ<킦~&~hHN"}jNK-"'A)@3Fň '˯oZnl$Vlμ:093&OQevL8>
-/c2LdY>R84|DDwБ"ry <G -\| lK:\ Զzƣˍk,\vFTJ3&@N%nG&D0 -4)x`Ar "<8Q3`lIjnTA|"p^ќinL.5V:AZdEiԈ4 {➈4kMPE9I&]vG%3ޱ 5K|1Ui%RbˤtjN}f^--1ѓܡai>x z'C7i=ss?b:Z -arCF}>kޡ6zg$?{Z -o6=ķ\qsߖYG*T*1T6S
DdƉyqUmҴ5b8aEq<>
<pg!EΦ?W/H3'_M7*\@6ydu:x +xYY~X\&ā@<,CQa +IͬSU_u( +(i6w7a'k?t@w߸q<<qW:6cWkrZq}bt<҈VO@GމPHX^|іaq"xo%nsb
X!7̜w`x孒sٖxP7wooCesd+?uXw;|/<J -bb*nv#Ou|ϫP97ziPpۉeP uS2zu= @[ +}% v,St{3R~3y5+_pbs]}G +"jجF|Sb`e S
#7?yًl
](Mمѯzeeb6ܻA|7g#7Y_vE|xʬQCJY<-8b:#,L,) +?ƨy&,֘iEbg`xtb۲=^0̮Ě=fb<_<KM>kk1j,PZl7^9CLqX +
!'p @_M)(^.ݟ#F\|[bTA<4DĂ艹vK+,G%13Hr3w9b?u6
){+[>iD'rH\0lyүhH@JMĽѾ`PzD^Ņ2#RroX" mg(,R(/00Ҝ#AMb`<dhe&nh~|n<?4T ++!I1d[~/q;jFZx|m<5\$p16o{0~p8f&CW^;=;uﱼrC#p?kO2G>w+֭YXw泃-Yz=+3Dx +h_3*[(Stk endobj 5815 0 obj << /Type /Page @@ -25531,25 +25345,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5823 0 obj << -/Length 3465 -/Filter /FlateDecode ->> -stream -xڥZo8_ܓlM{..iqvAGlee_3R-w8pH/^<8/WrM#.BŸR+ŏ̒0\<tR?IEwU^<>-Y{0O>{@/gA?}~]1/vv77oځvIߖƒK̚O~ǧ -SAaq]OD8TNDgM\X -Oi^h0#6aЫ0%>t tj ͽyB@Ȅ/rO&-W!sS~U[gd(y@mpϬE0 ,c"
)%kbvC߃4(7o[nr<~h.NϹ^gǬK=p8!5 -8N_扥c`Ol_z^,\"*{yS# -c.)VU.ʿ݅po:A㨒_:ctLOX7٪yf<4IԳlZ>Pf/-7 - ȈJ ࣯X ]7O:2AIǵ^"jý톮M͠Xf -[q,RƞE/s)˖;$l?aϣY#IZD_I%h6I5iGoLf?~])p^|O#1c&R8]Al#b$_7H?cPIRxi!"$jYL8HD -q%dyco&nS/"v#^%R Ș2ٹ/b@SF<ۃwY& -Mەֳ$@אZ/ۿA] -T<$:>mLȠODrcM6KA#<SZ36sܘL)\D#?N2g '6H8H -g#<HU!&dWr!H|og6|p?/Ao2rKFHhFBďY*'U~fck-1smgV}9A㩪*-HJYĀ'vƉ.UOX)ɢ|rgt́!n -^AH2\+Yx#.LxwZ -my6F;[Vxհs+}JH!vqHBA
z1zAr)CMRLՃ]<2%$>tUĭ3>-\v#)`u#Ȉ楲w+@!O'TQD0> \SUL,FPبg1f_f"Xbs[.VTqfwO$;Υ'RhFEgESuʥH}M@]kc8pMbH|EjpOOu3jPjn'~Ei[qAq -4K -8X! 9;q +/Length 3424 +/Filter /FlateDecode +>> +stream +xڥZo8_ld1]\\l)rf7d[nw7^^f<8.WrM#.B. ?Ń,߽_o?ͮ8П]v,>]ϲ[}~|3=5?
Syvŀ7?^]we|Ƽ.~3,^~g/0/7&o./`\bLќqgq ~z?I*nәh,ʼkBl*>g7{hSg̼jňAh0z%f.H8-i5^& ]!fAx'};3;dFr/J{K`4-S(
ٵ>eLdA1@vMxю ~eH +U(#o+<aYgQAԝKV !'/OLhyMfhOē|\A' +b>߮jAgHnEX9ٳљO +`3ayNKU`^P\Fs_-u6O,uokXg9uNU!ob,Gm{˝7?\ej>>LB?4zb^883O<h=ʥa@VuqxNAV*2duK#sEѣ~.TOP+*'C0KV7(-tb`DW JT zӐe@ôJ?0.q^oW7@ +d0~}uSbnԻf}\F.
<Ysa +c.)XV.B8[~7ʠuT&~b'9~M6j1) &+5ts,FŭTlnK
ÔzB7:RR!Jօ4ЋmdēNEglBPaHpxDSS.Vi3xL
DںAm)k"9e-fUrgwʺbd'33~,Yo2ا=|8uŖ:s;?on"s)E.CSd + D +7R
>G,Dߵ$gv F.>@[>0}Մ'qv%#ǽ5z##a+`Dn5)"O:
*EMpBTlE3qL-bN UOSJ;CWGp(nxGD^jWY^lIʬ+\E q[.,A;2/\ +sV=G1
7FbL/7v]sRNXVk(ʉCv11ac'RwDl,D2&$V].DKL-ԁ SiB !MCj(/ƬE㐗'K1`@@6 +<hx䎦DyrL4;e\4]oQdsԞ6.)_l5)Hm>T7/lFhR+W8vUAO(".ڰ<US6ݘ-PMg,*L߱
(q;-xi<,]yJrS'Jf.y|O9Cf
+h5#!=R]8~~M5ι+wxKS0Q8wFόvߣJ8noQ8"G$!2Vbs\\2穷b"g +Ejxធ=/+on0.:7jn=<Џx9Ft6n'lV4]d*Uմi>Qjx0>~ĽΦyf>0wW3w ,8hqjc endobj 5822 0 obj << /Type /Page @@ -25584,26 +25395,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5830 0 obj << -/Length 3646 -/Filter /FlateDecode ->> -stream -xڥ]s6ݿӗR3C웛5/v'7,R2'TtHJ;N!X,~Au -c)(ΏWJ0 ~Xtb?C7w>/ZkObE}Yd{x@oy?ܾ)_>X"^{p<;n߂6ϫyv}v08үHXtͳc1a*~YIGv2T0yP:TiqAnV 8tVm5Đͪ~[o:g% JQ~V0NwIZQi2#pA=[!jSKy*WetfP-276ڕ'2\UP, -@;NIc*ɽ";,7m{Db8"fH~fxT2bdCl -b{~9Z`_{볽}ICg$*_M+}&a讛vK4d42 -t|.-} C5,nAŤhSp,uCc4+=\Y% tnȍ@-4k6ܗU
#ʞIKD@ H$iDozYϴg< -iZbnvOBaůԬ(:qH ^%l@3O
@ͭ{5pϨ)38UEUCgU5{<ߦa.Pa6F&caxw`1vIJdsd:=X؞div; -hD.ZDT1FI`c=pNB]HraDQ@0ҹv-?ӳBS)@)l[@@VEpW&Zb}0|a]9A)fe
)KT< -gq{a xlǰ;jKB$Jl
2SrA'z.| -0]J' %`d9A{#HObE@)C@^P=nVɕq[zKߡR0.;^l#hk})0qb֕!#mg᮪RqTq -jd8َXn:Ƥ$J;3'nUD(yR6elafx-1MRX3q<do:dVH6J|Ƥ37
tZ -3JZ05b8K_pr4dz8)Fi9]tXy;K6Va뼊$1N^Sg;BO%9]9e)Q7m9\sE,b;R Cz<>Fi[W~GnmmߓbSa)a$VvOU]7Y -k.R/-Kl렷it"% -r -3Of#OfaEEfvG<vvs -OM#ĭX^AdN^~[\~]c[s>eR*<b0x;,ůh@9T1'jQy.aD.PnE$sآ -}LPBCB:Cv[ԙ䄥}υ
{ӑ}qg=ltn" v +/Length 3547 +/Filter /FlateDecode +>> +stream +xڵrF]_K*08؎WXZLyy 2H08U~@BJR)9zzzzzH#S"I}Wb;y]/pp{ne@/Λ\߭}ZRNU|^Y{?}|Fo:xg}K>~\ޭGB7/z,]~-Wa(Tүe\U3lXY$ + ?Qf9#јcЅ#(%t6M'+~[6Ŧs'oZn`a5+CP?8%؏f <lL98K*~$xQPhDnΓP]
H`"0ZgD} `9Y6x߆y"-;nz$>Moou@!5/ecSw<DtU +ȜFu|n +#C&쿈%z`t F`@>͟t6UɄwu_!cwaB҆ :KQ' +H;q8?,a(Rz]Q'P("Ci2\9UP1XVm2GAD +c}-yAZnԅWs?M#x爅rSFpr6Dx
;١Mx/OUH)JQL!Z0(gH_@
Ԏ.?SK$N^`.c2OSUpLFψ8^0Oy,WMSG|>G.KDgZ'x@$i4bߜm7i_-i +0naBMSRb<w|C͖_'G uB"gQ*k['%yiTy&;<{lKYH*ĵW^6 7!Ēn +4t4Npc7䛳MJ[1 _{7}Yk@c5JsH$&) +X +|7nVJU+̀b<[rhx"xL\HUȾ
R9PC`{hQ%aq߿✚ɳB u)ZXFdVEl!YUjz 0ٸ+橫J5C +bTuFNw +c춎qz/37__ݩ'(H8endstream endobj 5829 0 obj << /Type /Page @@ -25638,28 +25445,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5837 0 obj << -/Length 3600 -/Filter /FlateDecode ->> -stream -xڥZY6~_"Iێ=3uVe9c -Iy2>}%JNՖkL
uC"\OI*M[/+!YY4o67ܵ^ly"7bݧJ)\%I<|ؼ{OwT9wGh~?~"2n>!>Y~Ǜwó[#as?xZ({
pFzuT.xD*uTY
Dy!Yk >/Wa:ǾMXa=c';By0&u*[̆mxl5ٮiY߿,i4t~ƃ]d+bMBLN3
@T{>[V{'Ȭ/뇇rC5Yٗ22`ű|v;n֛l SlAN[;($kd;hR*fa.T㥖M!D\A87WWvYd1dOUao)};({c#羭3do[^kfPNU^l3/KmNƍ+;&:tT() -i/ -̣ApFÚGRmhamݔk]Nna{{j7eډ%S -LvlbJ&Rhm-zL~-f@LD4+~X1jY~hL=ŸјaF^颓LC^p
+il?ơ[0e(E01B[OdWp0hrhOd䠜U4Q6<\Ejr Bkk'ʜ(w6C;E'twHh>~)Y/4fswVoiJ> 3fm,}찪BkxIVPig8l+ll`RC/&-JScM ;EA4pJ؞@ьM -čSmiD&n,bТ|&*7T,H\T+k.S#>b R6p¹rRn5kb~.0ԗ!̉ -!F)40@a )VaBv2K^YY&J7W#50^]9@\Ex>DgEh"@='b.= -8Ma^ȀFiL|KA`kkIHJRXVPmØ6ע+Xnܢzyჱ7c+w{zej&<%@˾$>3wx`j 6=Þ>di>r [(sI(_`0`XZZu&5NUͅ}E\T -Y=&%4__Jc -EB\0/>ּ(NeV^3MQ1fm -vTJ@Rxw,5!L{:!8Ē' -@A;V$js -Rdvb[M\Z3Em80l(y$J=9dH;U*Y1e -2Ku -c;
P~c --G^'0ϪVnWYh.? \6KK/Ֆ?{z~ -a:e -d<"`֓Pdދ@z)ËZGFtTۮLdlo0p @/:;`x,tGz3sY50LS_l +/Length 3512 +/Filter /FlateDecode +>> +stream +xڥZ[o~ۑeyq4u9HKl$R%g%%N;{ݝ7 +f>,h9Kl]5?3h[#w/~O(a].4~2̢iQ?fP'&_AN|x{?oa<D`ϋ~gߋʾ,݅#/6ַ\"mf&&aa؋p|/ˌ; 8U}. f~JlC-j)QN1ټBϼZ:_;@z =u}uOa:o!/33~c-E/J;3w}RP=ykŞ{[Ki,n0S'V;YsYB;*Cqtdɶ-5جMc2P fMt 'b.>.Kd/j
{jhyYȪ:?Z;@8a[>]>1x~rFi>2Y*y2=%idӫ"*mHI[]asU+ +BAH;+:7Փk^H}EVPdZ1aR;L*|`zB-LL787Ҭq-OUH,}+! +HAy,7ftz,p;GC{
\-Z'2Ԯ]jJY$ =VLLD.fGRZm!#,r,SZ63w{埬m)sSP
DyԏSk;'/:M4`螥d"a)a"=lT莑ho9Fk_Keo'֙ɁmUiTlx{.ٱK~Oy7aNT&a
Bo::!_tZae5-9PٱDZ,5{Bv'%MlEwP:l;0*[-ŀ?C +}7i0RJԥ14D4j+uEh&A%4dN1a/1lc,oc3Q2h +=U5gW0g+jJwjBNo&O 'oj[=\uVq"/#e<Lba`а99&t +#Xؖe/͓F
yKX +
i?#q +EQm;*iɨ3p + +-2@gb±镦xqiu)10bSr<+߾VJKsP=om4p`qWsyD|@7n/.T}UyMFBE|>I=HYPmwby>e
vTi>iRft&
fC.ÓH&NA3,y/@"l_O%aV}6*RQhibs
peWo^ +"ɱxRA]aVk%np2 +GjBZ&o/f + X7"E93Jr(!BO-O1<Gh*:h\Աx@k>j9dXˏa4t=k[nCBBзд0́:0ےYbuO{6D40jl3gQCHbʹ|vF읓@G,nϷ
.F(՟"T'z|(5# +-?")Hh ?N +(,-`G~&lzfֲ(sW>D%J":dV,Uu;J1o&JUh sYxs,\endstream endobj 5836 0 obj << /Type /Page @@ -25707,25 +25512,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5846 0 obj << -/Length 3787 -/Filter /FlateDecode ->> -stream -xڥZKs8WxO"ߵɎM4(XH
IJ3U[ -iW߮cg' -R7Js% Wn$IBmXWp?B%cya#xܲa]]{"ʛ?yqYը/܋B}G#\
Uw/xBO6Dy>&
{~4 /SqTy1ÜK̉mW -Bꖛ\%N]1p!WP6Lv}/ŧ|Xn\i~xhlh_qg?!M{Fw\t2ЊE}STUk=mznHϱč]k6qndE7$;!$nHuI"PMc}K]>L燨3σ -@ZB=~D[Фöx4kS5N27Y4K
J8Jx8\rc~Lr_h%Nk5Z]P<L8.oƈ[593ecq8_4>~7V*EU%{匊Mvߋ;$hI='{GϹci0K -~bH#3$D?36Ԇt!YZȐ@8bKE. E:ju[_P@w. -mX'B(98t)B*SHTH]v%QGV<,0kͺ+"Q E }U1r -0>yb{#اj=&Jbw13p`x
D($P˼gpU -O -!1<6)ݱ -3?A;o&vRCȴ?24ÏFj -7u) d -!O*fu>Z!-Ksd~'m*CJ<;͠TjGR!"ο$DfL{ U ü䉓9;﵋@UUx?pנ#ߠҙ$:h%+0bS[ p0tG
mt%^
Sw_i?vɈ4<8jz1CSĝԇ#:CtLc]\0_o{Jͩa]5/#xNF9QqWE2kn1R){}̬ADiFez^X`L>M-D_}a`$z'2$9&
F)h71
]ټ{V6Z4 -L2'>ظ7[o~s. -6xf5z|A29F1J\Jp ?~?g +/Length 3706 +/Filter /FlateDecode +>> +stream +xZK6ϯОLUY4 Y{+̬(#L +Iy2~IrryH +T^&I0gдU}k Ǩs,U<vحw!+k&9`+Z6ݞ)2]WW +k{QrzO訳(]H,i&=Mt0?D>G\*!A>/o^0s"lĥnL7N]p!}_L怍}/>Yո~OӨa/Xw'о(_9]~Bč +Ϲ9O\#쑦
) +'/-7{ݛwB"-aw7l}.oIBHܐDN۾lǺ._P-fT͜x{b)Iهm +AiZ~33"XsVG=2|Q +5hfͯ{<f;ݾ9Uh>!8PBa=n|u.!ACAA>ZQ懲.ۄ;-'~Caӈ`T-f|'Hv(f<=tY{ԍܳr5fTASmN#F7̚\=
VM+Z~9wBgX .«q`ʌʶ9:cz.b݇vN/VQAfbdpV2d2TY^ֻf-oph{:,ɏUcҠ#vh]T]]1
ƞzn`&iGg +||eƸ +@㚟Bq+@(' [{Uir,'j1\t!ro?RnV7t #?{RB&rCWE}un>M36y9Ƭ-%OgWwsJR&KHF4=mcWdnUk!)㤆6& IG>~~=[yC}vV50d'`HD܋$+5:MhLl\$L'ttz9dߌIl=SE3 (@mM%|8jY`"3 %Ҡu$#02^ȃ'ӹ{.ylÞc:HBHWT䇈oLT!`xz)$U + 'Dֻ\
FA#Bk;Qw
#COqӦ-wtʬĎ"CsS>2ؐp;Uf2moh0N+)c580ԥJ#x3pv
[ +w#Tw^ 2cV]AiS6ELifp$x=wgiumQl itkX'Uc|@=B%Lxnh<1'Mry_
~JR)=L|rȱ1ұ$Ȟ:#NH>xvpꋋE.X7ܠswH7{냨OZm@wh(ϏO^ UQ`# vUÐ
;FEjmC3"0} +,Akad9)d'5қ*(JuWKf/EZ"%9A`-4ԅ7 mIPXR36i=,]r(`&WrB "peɣ촺<g^p֔}57TB,g4.{}mEnh6Hsq48`#Zm.1F|Ҧ-_=Pؖ7,"Lt2/<?;}= +r +Wu| 6CSN>Nd!"<g^֜9x0h^b<x2;i>ˋEiȸ-kUhyB'Bv0y4HZADKAdLf:\Pb2F;럭BfFM[HVMZ)!om$->Ѻ# +NYJӠq]}t8/)8[_
?o~@co?*u5endstream endobj 5845 0 obj << /Type /Page @@ -25767,20 +25572,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5855 0 obj << -/Length 2273 +/Length 2183 /Filter /FlateDecode >> stream -xYY~_! -[H]O\GN<Y=Y~<WM0ۻS4FZ}xVp[0G'"q=ƅ7_ݼ]< -3ɡh<+<G.^yFǩe@yO,M=+4)fM[&#Ǯ -]x*v+]8x|uNj(Ra-8R: -~+){lŊQzI%Rh.=[g&HRd JOYS'u5J8Py43su@,iXe@ַU5/01o-R -l y"{U"OLA -
|d^4XZ&o,̆AxP9РvLTRH4Bs"/ߠcͤV/qNs --{H7Fea| <J<68%}EVBȲU҈J^MmaD%),6}èꓞ"~Aa1C0NZxyQ㣼_eeA)s rb@ɲVUrJJ -A8 *||r_dT.0(56Yi6pTzUOK>%|tDQR$6 -Ɂn.+8&?LVBh@q~tɌmrlIY&u͔JP1VId}6낶WWwopC}}]mDj +xYYF~ׯKQd4 QIhDE*$,ǧ.RDgaVu|ǙϙFu<
#G(&=#Svd.𦎭b;.$LOr5ad-߾9֧Y7<`{u͟>~?|"1 oo^8f@@O~͞p&q4}8&iɏ.<MyՈ(7uoأo9URku\jg2n%Efʡ.[Dv7*16{~w`C@*Mk5vXnf6w=zl
Zz3PCbCS#Q^pfYo8\>YzQT)٭̈Ᵽ!=2>Jcg[ںȼ!(Ra=V Z J@|ċͫCܱ5>DuVB8k-ET|6Yh2\Vw|){jEht=tJ蹔3drh
g5\,rMg:jd#=Lp,%{֪KHIH$_qZ` +SCBjW9M"^ogоZa+:D1K4N졔n# +{eEj]U@EW_DcoyӣWOr$U5OGbsknI=YuNJԸ wC͢u-Z@@_`/82<e g[aK/tjiכ2a6~R)-軕6rU}`tވMp!Ryk +Bո.ޗˋkõ(y,8ly-,0)ܯͧy>. Q1U]l_j{l|]IOޮ.8f~^f{]XGb{HsES&y<kcܗ(0m誖=)z<
y;Ft V&=ة^)wx`έeR71OgUN ΗWt04_Y ǦCf?R§+:Bt`18!0E(Ss
nimoy4o閛tDuТD"̷yIhKC5ixR +!}5vр^_tb;Ig74O
w!,w+(x bNc4gQBOHlEq%p$K}2!0 P +xR*03`$%k7&LdK%N-lچ[]^- +
?pH
Ďu\%Ê>=G7WX
n8xl
3EE\"6 +OL+W\h陇 E[ $T}bG%|llD;B2̮G
3*ut?ݹd$Ϗx5- F6f1
\o Ȯ +UTr +WoHpsMm?ʣ&Kࢧr]uu\_:^h%A#G*9qn]| SBendstream endobj 5854 0 obj << /Type /Page @@ -25809,23 +25613,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5861 0 obj << -/Length 2891 -/Filter /FlateDecode ->> -stream -xko -(.N9='i -i9RTy-EJ>&H8;;;3;$Lˉ&AL''̚`z8g}w,3~O3]ϙ,/ƛ_.>.>Mg2 Se|_? -R^h*gxY.)6Y3'nuPϪOa˴H,
(f -t7١ 04 LvȘ噡,Hp<uly)p~5}`&pn5BQCIsuO -$P>@ -r@Dzk&VGZ|@T=4ά4siQY.Q -y|yWU'|S%!l3~&dGDWa`ڶOƞЏpHY<}ssC=^d)VWH\bSHZ[ -7({Ex!V陠t0P`*<4c}. 5}'xȭkT>l)W
U,Da<c -ǔ $ -s1co%ezշ>8^Z@K|X-sUWgJbSbGutQ
kǕ6^፯</0q -8G\qR 6t
lE3AGj2Lk+t5,17}sL4qEoe5m&P'U@~$hD($g{m!'* -Z OlFq|2'5}nͽD8lk&+~5ÓX~ZFFJ2$GwC6٢;RB\j4@.!ɏ9oA0,.w,ۺ91
X1]6t3tlٶi+e;W0~ +/Length 2799 +/Filter /FlateDecode +>> +stream +xڵis~+OpvEnd= p +=rQ* Ѳ8F+X:S{z~6wG2#+h<lia~q<qǰ9Ah\_^q6c~y?zp +B7v7u*b<C#A` 0(IT2j噡 +MӶy鲭~Z@QR˻ +Y- 3Ugd P6R2FFXE
lubQs1>F)Z`\F-XR-$T^U"^˧tڬI@$Ɠ 2zIsc06DjO7P@ +A
үXn@Lj97#Yd-̭ڊ[B^R_="CA!5ʔh +ok֚l +ϣ|ߨpwB6'4y\oSU3HEjIMpNݡ1}s㾚%Qդg2TFai:R0uT!,Td4v/2v@*rAdM7&4(O +7_bh +!(4<ȸ+Bxa
e"CsdKԒ=Fz<+ +{Zɉ$
. Q6=zm6$ّxrř.#\;ԡ!L fLWABK/]qa8W1xē7P!ZTк8kNĥ7LDa7]HUOBW%vA]saMHy!B;(rLܟ6]lt76ۺRE=վ<q8/ + +oσO&2W?ۣ)Q&V +zZ){ jo <y;j#=G +j9uJ>BcPג!tbKkT4wQ~yq)C5髗E%6Teh_~8uyFeF=Oz +b +O + endobj 5860 0 obj << /Type /Page @@ -25879,18 +25688,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5871 0 obj << -/Length 2297 +/Length 2263 /Filter /FlateDecode >> stream -xڵYoF_!L%E.rHlun(z}DJY$U~Tp)RqLrvvgvv73kkj?kiS?;lbN700Cn1eN:teqa۶)˘hO}x;lmq?=?< #~zyɟS~}|z7ӑp7c~i01lljia0=iX0M@culM>N~1gʳځ,g Rmk:d2p|asq<u(PM2ӊ5>]ަSR`z<|xpUu4Svh±V)ZD/B\GUox2EC)}`2ą.aRD;yC:qdghs)J{#oP=m -Ϗeh~5Y%oFʴ
G-EQmD -D9$n^Eh/0!qKR#@MysK*MQȇ\1y˗"բ\^hȞ0wk,SOZ-|{%A"a&8
*{cƈJD"pB7egm/l*R۴"LE;}xc4MH[>93/IdS\6{bDW6
3iwܙ*W;ķ2M4SPKP<O=r`QV^Jq!3@ո_D(tt="P&M\fQ#Z25@"*MOʊ)#*K'"Z^wBKĚ|C
BOKVem2k]Z
'2 s~IJtPEx;Q.}[d5~wzK>Gg+Z=Qlv;ycm?6L)P,2N -J_zڹnJ -1'AhC(:;֫wo -ALg2tBs|NN9ɋ+gDw>oa-}S-^a 4K -QK#rЅ).14%״9m_ -qɰ;vVrlk0Ώ +xڵYYoF~ׯShE>R$hm7QiV"%IG)QIH |363ǁv8S`LGx
#w#S8Ckx"yAdj۶fdv0ڛ7<#Pho ~!Ꭷx5"fF?>n#Ï#C`a8NGkcK;z;]ǜ10Ա<az8=LwE\<DqV<S{Aωj*XVu<:+ZIJ$*j*>Y'\e&VKaBU"E:*RexyFht $Rm̤V[i!8\
+]V'^]{AIbM*5i/M-mV{'rguYpe&IUY 1[af}FG@^TpicB=ȇ\2y<T&
3ݘ(U]jIö#Ђq(p֨HZ;RD"pb"1ag6MR^r=
E@96Gc&wC?X)h́O6eg(FD`2vg;}mf/?SPP4O=丗=Vy>4 +q!3@U_D tt="Pc&' +M\JruՓȾJdJ3҉O7ח|AX_'9[%ɹPK3*&nf֜$H+&)tPEx3Q./}kdՙzw:?l-q/K~p6-kYf!6}^>~2JL)P,":n;xW`TS]{.yyA]7z&y]nh{{F1{(Itdi'Fy+P$tg8>cl7PIS>d^WMmq: P//jKޚv.BLo6Ύ/oY|0@|`p@d@)!z'>r#g2;}
y0^鮮Nu/fU{Y
y +-q'۶mRrSe*<O7[4* +H*R̃Ǻw2<YvIGE!tEbdVB5a:V~#xnj?UC>;$ΐ<,W* jPu
Im53_h^i[.~ӡ+MJ\eOe-N~ّh|X7gזp1j?S2]oC@6%sջPl>x45"m7.\rE@(\ѿy3.O2ȣk0MEؼw]us%w/zZ/cŴwۙښf}~ \^%
ۮ;9/w|6MXwS[3Rendstream endobj 5870 0 obj << /Type /Page @@ -25919,16 +25726,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5878 0 obj << -/Length 926 +/Length 918 /Filter /FlateDecode >> stream -xWn@}WX[xPKC 4J%VNC;;4nL(EBUz>gv2?baO}3"$Vq6tCkٵ\09^; -Ƕ(Ay5CX{Ϭpp -߉Nl5+:ÇLrCrkE<ӥT)bZ_ղA<umS6hUq;?F WK̸+V -)AP-Xو )Z(N)QiDG&DHR©LJ*uBƏb[>*R -h[ppƼQ<urH\"qԳJYˍB.3etWwukPZE h7="cf=%L}dCjyxUPU -Hy%3)%tKY|y$4AV 0rmFoKYuuş)߱N7;[4׃7)]FyUk]mi;?)vk1gHw]fqQَ'M7,慛aDdG.)2`RD*8ٷE6endstream +xWms@ί`2\86C0%iKKZ8N>{]t*@|FBW!טҠCn_
Q@OJ/_C6#y1};ύpwr8~<8'R
?x״goar3vtLD`xQ__3%,渜WtMW^PhQ˱ q~UvԣnB]*>̴\5C"[R +vSPrI
0=A։ +=کk~mDـpۄIX,Sendstream endobj 5877 0 obj << /Type /Page @@ -25945,13 +25749,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5882 0 obj << -/Length 1329 +/Length 1283 /Filter /FlateDecode >> stream -xڥWmsF_ALq |pju&][i>IHb@UOC t<
x 0&ˎmaõFOj:Gkpvhf~<zM͟9
/t8zg#+hxLOAz+~Hg'dCu;h ->vl&f@<WuڹuE{AVmD@'Hxq/`\g3vU\|u9~ =cСKs e^[U:Bud;0UFfȽ`l`7S1xI2 1ܜRs3Y$Ƃu^*h`!f.$&a *xBV17hrYWi?Oo'һ MJ=rDŽr<,0&L֪,ד: ={N5!Af2ܻA^FhfxJ2qIA-6=I8fޏI?ɒM2Z#&H)f !CYFE+''@ʫRޤ{Zcb(Ml͈U} C>9%(L=hr*r2קH`y
YWBv"{'oT#xr7[}C],i>R*_\5k]6
gyqMDIN5U\eO~dF%_R㝠u9hd#ML!)9aqlQ4<<l-ս۲jZa2#k~7Q%Vu2&=6mh%M:+ᜢ"?Rjٜ%-4]ÏS#TB-cM
c)C,]tpL}_I oel
[yF?yn7*RWL?ݽM0o+`u+N"$͓U(7/|H|3YIQUm/ik]0d\>$]uuU92m8MmU$5 +|]TH jFeʅ|C
ű|E.`'$կh/p>դu/MllZz(5ǚ}yK=|xq/E7d?mhx6nL}b#4QW-R<s¶P~d"lx* -
] +xڥWmsFίPL:I 5vM]gR۵Iv'h,$6'pxyv!, +|ehdXE[39m c-[Vg BZé6Nn=vs:~`@ 8 +gRM}6+`u`:&ED]Zk7|Y+|l*Y_VIQ_Y6bm`"$|:;HVkos.u:`IVkPC\Uv@4$7gmskxSji\/VlfVjNл7Q ٴ>[ ,5{5}և׳:ї0z8
Ɠ(^ً@۽hxڍqnLsbfb]zcN1E-X
g`p1y+{endstream endobj 5881 0 obj << /Type /Page @@ -25982,19 +25786,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5890 0 obj << -/Length 2650 +/Length 2568 /Filter /FlateDecode >> stream -xڭk6 -E>DHz(ImlP⠵nm˕wov`#r8IE -2i.o{:FF/_Z{Jljw՛/]z?{oqz`{1#/߾-?_}r;;n߂Ep&B8&vp5a=U6I0
B_
D22ZKiXoodkv*e+Uo2}QӴY?Ry߯`t7a&[GB DĄ|g|=-?-UU'<,UrJ!NVP8P^&͑R#je@R U -Υ['a3a!Bi,΄%8*F,\iAԛ&N
<&*[agW`R!~wז[pi+;xLT22}uhN/-HV)c#)Rk[v|Nw4Ԡ `9[vk74$g+k<ͫ}F -@ҝUbDD`tO%.P_$G#l-Ȓpw@SQ~07xLG
S~&pfG"a?J^8f8stʖqm*FmV(sF-Bd-Og8?]d,la
وt1"IX!yWN2d/mBpvaڸM5&[;x5Txv82n]d9e͜qA4裄Sr/,#bzky|;Wlàh,
C#: ^9c>5W -,?Lr4/h4shbM؝OPȍ#%"TNSe (@#
~v16`P%qn
z/v;mGiMX
TsM$L
oں:]Z، RogK:>|8CJhT{haFv P+G=,D_m?48MsXO"t3sծY50_f.(R(c)LCFĒhf04p&Rxu8$8wD>Nm٪zA`Ax.>->AE^1"tEr}䋑֝WQJa`X҈ $hb ђ -H85m=9_#/*M 4O o#%K5_Aπ^
^G -G'Ep8Z։}(lUy:6ɤf䗛9!^ilе
|d_!65:Nktf)r,лdqOzm;x*m)=Zqvl7E/jEmdF"T0E?6[ߑ)k(WBhnO& z]sQRq9 -IkagX+*cc[NhwF;LP HoXQ~Qelkz\GpQ,_IaL['|;w\%l dvg+WI>+r/mk$>nuS{vhͤx~=]qu]d;μ-䤰bq"pXȰ$ܙHu푆sJAg:`K4LiDa<m>=DZ>ҽtH B&@5 {WSaRQV;x`,+y׳>"8hs>[,I$rO"QEnӽƃ"#r~G%-q2w#hߕ nYL݅]DNN>:<}قQ6sB4P-hnFf^ZG͖ !Z
HaJ:^i9IuWN&>endstream +xڭYoFBhPh]rIn4h8ŁigJTInл"EZc\o^+=OD If?[ț3-3YЋ˳(i_9.iew_/ VE'Woڻx>OKݛw@} +<4Viɚ_^]O=#ڂ1n!jþ +XEn{ݠ`&Nl7_=NgxqV.{7C?P7@r7#[)9X~tv@G -Ume +T!np}ٛ,(~b3k;=Ŏяr0?o$&Gbgb]D6ͤU<G$^5XAxUHyNg,Xp) +-֤0R%U:5ƣ..L[]}w%xZJISHLQ}Gy +OLn Ub'LG]cKyFPw LZ(vL. +(LUC8b>M
רmԘզSB61Eԇ +AMP,=Hq֩>ByXNe^.T*W +sR9}{5!hWJɐA2ISUSwDYW6L܍m"
\ ۍ1A0UyPz<{\W~ +cR+.{^~(}rQjtuC@BNmtRUu#?1RcblJW`9,YL:ұzԲ+[$wIQhCQމhR~JdgƂ5oU~=k" CKo$k~IAӱ8[UTVam!CYXKkJ`hMb~*P}]QXhwY, +W؏N%R@M}RЃ9`'t endobj 5889 0 obj << /Type /Page @@ -26029,21 +25835,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5900 0 obj << -/Length 2208 +/Length 2165 /Filter /FlateDecode >> stream -xYYoF~ׯ/@bw U>bOXāA![asyv}VWUW}UՒE -_8B'"ߝ-̼8n-YM>9{OH'AWǿ}frU'ūK~ho)0 -{y2/^-xrO:yxRd_Ӊ/t,n ӻXv)kN?NDcp R"֑HÐ4T6e].W -sܕ9{.WP1}'1}LϴU+oznmc#n*-һh8mhkC;~mxfWuͭmJ\pOS^YuW@U>OɋG)}%ABnu$EcM*@u`?ۅep -̍ےm`V4LZ)IA^;7H=AO!yܖ5۲5p4g(::kw7aGG '3l˦lAA +TAe,cv2<Q\K/[_9tu-!7eFk*6cXy{ޒ-lӝ( -RxL -W.hNPJ 凎n(6&@WeP;#GO4vvzEd3C*AQoy"Q{LF;谼\˚ftjֈD,VdAh@uֲ։'>f;dnGPnR`e/{ù|_D3# NYujNXD6&[og])?Q9 -s^S^(zP铃Y)`I݄q' -VT} $t[# -
@XGzt -,דB$%o2RPGCC-&.!Қ mO7=hascG +xYoFBhPEq|0pm8ͣH&)0UT|X>$qR_w0 sv33c1wO#vd<#a(̙oaLܳǩ׳ǎxВu߽Y?{XJ)-W؋eFիanIk)k}=z_oiW^_^}Xg#cwg?[ڎ-x^<_ھ'MS9oλ&`XzNl;Q
8NOu/[9Y_=
vC9_J",,^Z@q[ͧ"#¯n[u;h6 +8mhJ9 @ۍ,7VRj\n9mθǧV^7@M>Od'-)}) +6O^KR2`lgJh^37fKR6IF0y<g0I=O̐k<nKmh8*:DwXh/Gj2Ϊvxc vd8gyR%,P1$zpG9Z$xtͣ\Coo@<&fuKMК\6ek҅-۵,tϖ[~tumLX۞߭ۖucf;@)@UYN/A1 +4J&<..!4zp
"ؙ Rw<rWBuh^O +f T2iuIvBfx-9hZSh'=_m$ lH$ ITou}vߥBƁGHh4>{0M8
XJ)J,t) +|Es +кj
ΉRdJV/PP]?ߛv"EaUmſz/qS4Kw"ː-_xߩ&3v-t0 |Uݙ(=ܽ%IuN&DJHBwV Ƥ{W:$F!ۨ>߹E{M +5$a~z>Q!m1#5a$d0Ҙ.?1ǾԳ]=z-D^qAK#餄 \[xw@Cx +69"p!*w!Qz!bKGu%v:?,hc9qQCܴ@8,<JʝR5J/MZq{D< vc*p\ Ywk@^qpWMaC0:1>?2e[9ղkTU29 [C1*M-EJH<Q`w ߩ2YHDl`R.뀽iU d(i=h)"{ i}^Aý3#|5(LJQ(85m R6yRW
8.|Қ_pf/v3hٛP;[*]d(nɁr +ڐL滾bFU6/뼵U\N`E1u:4/loHZP§J
#,wJ.Ъ1Qx>c>N/;{]ɵ+8go,QR_\;Fi3t4wPx@<Tp̦ endobj 5899 0 obj << /Type /Page @@ -26066,12 +25871,11 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5906 0 obj << -/Length 788 +/Length 780 /Filter /FlateDecode >> stream -xXߓ0~`FB ^Zgk7jHzAc:췻_vP:զ,՛+:#34QMmՙq001RQwڃZ!ͦu{NSڠUo{KLm(,eiD~v{7zq[{rS\X#S']swm/(犰`2TP٘fRe`dlm
LTXX7]Z+ƀLg1؟oBQvع\YR5<M4anLh$U$QLLt7w#wEtJ,M0asBXFH
x #kcG/$MJau~[K$"0`^Gx<Zot6(<H6يTL&#,ߏhI6<撛{쌆.[~\g@~"|v,"Rq -XƽxFW-ϣʑv<IRo8CW^ITg)
ki¿s#k3VyF1|pLD^٪e1\"Nl]/G}%GbKNbe|MKEcŏ7.;N@0Y,(rBsl0?ڨ/ I8c=l&Վ.RnX,/.pGivx;?VZkw].ofI_ +xWKs0Wx&=-%fcXDW~D0Nf,i+"?Z@V[eBLtT쀪 `KR4U
mՙf[A=p:Ún@Z;n
iv24sމ~ej#10ۖOߧ~7_t*GO74RG[ög1 endobj 5905 0 obj << /Type /Page @@ -26088,16 +25892,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5910 0 obj << -/Length 2299 +/Length 2187 /Filter /FlateDecode >> stream -xڵYmoF_!"h `MQT$J2Ep_fgggyvVqgqgq`;*Ek83[W$"|3ױ'=j~[J)s"bvy?wy[0Ğo=@x.Ϸx;mͪK/~͙ep/[%ڎtyہxW:@vT0r%(pC?T&AX:MnXվ-rkmxiW?n.~즲]tسpdɛT]i:d[|y*pw؋"prl<fǂ\A<T2@E*N,̓X\t0QrѢȄcXY]2!<'H!<ׯ ډʷ(kl]ب";6BB^;05??.nddzb@84ur.0tܮ$`WZ&H.\s=>@fVu -9۪Dj~jd`<"Bix%<_o9-lu′^pjF%jEghEDHZ'rDi75hᾨAmRnt{(6FI!8o9Q6?a0O0nrݳ B`ҷI͛nl{ 7GwXk]Wt5)8 dY)
@?#a|8lH$pS+i)xvDEIP#!l,5ATzy
wHcEQޭWKк[y;=LTZ -%謤3l.?!MҪȨm!*vkQßyD9=KyFp>Sxx%A4N`(6SQtPY7u]H)kDYstCx7/z=腜7
5],fqI6 -afOTB E;CF.#SZmd.f1Dj.-q_wř,{,.^rU)03q:,; -DY8dA)a~&;Mo" x`M tF| -X*i -I>|j?$>~b#!hHG}5f"c;.p ЗQ|뢾]M1HiD 18h)"&>ӄfhm%%)
% EA)}кp68RknrŁlKnSD}u(GBBg7w(q.hxohR)U*KVdbFh#UfrEU].K5}9UPgvu &49BQVg#éb3n%B.Nw䎅ftTNaMF4E=i7nU^A`ж +xXmoF_!"S(>[A +`MRTe\7RE; +ٙg;wϝǁdŮxV3g3Wf8sv +.רH!O`L/eHЂL⇺a@&DžY5ZWwX!VBeqFjEghj Ex$JF̮mw 4(TWһtvY`cDؖ!?}nD]0Ҟ\h9LEn`0cp6l}Zv- |_Q꼶utoOAl_je<[Cހ ;G%]Kdd һ˛oC:=&Žw
n5ŗ.к_y6 *v^ +2ƟjP,<Mn<Űhv\ +徊<*.)v& )f<A'!'Һ;εH<Hf!цm,qpqj0mx슅LӄFhm=Dk&hQAJh .?pg+GӠM3T77#=${W0`Ņ$uJ[R] +mj_TO`Pr&VIN.OcH;UM;8qm2v9Q?Au endobj 5909 0 obj << /Type /Page @@ -26126,21 +25931,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5916 0 obj << -/Length 2735 -/Filter /FlateDecode ->> -stream -xڭYYoH~ϯЛ) ,2g68"gf}EJ"LIu5Iɒv0Xp7:fYIgq|$M0/oP?3pHX -i~zxsQ3QdfR7JϢC?_adޗ{(}:vQ?zs0p#Di[u
-4H
c?T}ؖ|aUuA} 45|ou\^OkboSG-oUiPȪ~<5klCoj7_6"dI0M
DDO(?B;t,ߕ61)S#=S
HW0y.H'^t -JTAa,,nYTTJhm*3M~F/4*CIN3| !)hY
b'N<Ҿp_$~c -f+(<v;&q/oB]̾7cH}yɰ`_f;doH7<=4X`WN(]ىA4na!kY;tF{ݼ6T\&F VA}q (M붨;k8:
$Nau34x<3)/1m z9ReBJ\#D7u][d퇀_&C3%A -Xp<O8sګdڌNj=\On\Lknb=V Z|
_'U8íվZ|7tˢOd;xbxԖc#X/p+\v!nV%Ҋgcd&'lboS}#a ~P -;$1t7fd'OWS8 t6]ƷT Dg9ɨK[FN8p YJO F8j*aU%jS zXpPΫ:%Od1݊DKwa`Zij 9<tXC>\ݩI:S26=:gb\ޕ>䮋3ѷIe\Kl'&l믰)D$::/p{ -nNwsIwh+׆9@ orNwPQ -4ul;VMc]P]0!GU[jqtOa_(S<GU4Qreq"!#w+I OUQ(vT`\#@2F- -7VI});S\~}( -8\VRK6o3)nk,ԯ+3:k;)K^RP']xR"5myfdFqdu)U +/Length 2570 +/Filter /FlateDecode +>> +stream +xYY8~ϯ跖X-:L:, wfDBK!ߺ(0L,bWG77iz*IRUizS4|xE)7 +C蟙y^ 7H<#_ݽsX<. w6"y[~Bfs^̔t<0Wz6>t;W +6-f6R6U;2g5ġl3}5/aںjY5'NYb9VL7-lDɒ0M^fDD(1܇yT.LvȲHA;0`F:G3yk/kHg^iMWȂ/xy5oal+:۞E_ +T:z{y[rNɟ`a+٪G7g P2*ݹ57r(~~o\~0>2.+̜hI:$v$t~ҭN%XveB!ϕB;2DFzm͞Nxqr"O{ +KBA3fUΗ*i)rĊԷ(!$$E
!@Dĉ'TEpp8ޓ +OHo;V&(f +f_yXد/r 3H?CE|C=va:doH?>>6`KÅu6 +TM9`]У3Pթ +;i +6t0:ut'7$HaO}[ݟ<nk5 L}kqr~%,8HBh];&Ri%l臾hXO$`IVR-)8ysQ]D(qzA ՝ + vV29MP<Rt4UO6'.*9
xFXo1nL%\5nTgŤ1ijZw0Wy +bjLi$ +X<0mQyB;c\>p8R5R.p[vKVw5ӊEa0 L6ȕM)u5]G1KPӦg&Z<)3 ^ +bD$A|-`w|/ +!*!>Ge!.y@/Z>ՓR)Op5ErN
ϐEMM(&j$sCsOS0 *TGBXtB:,.|I,/ԃx +rrB5F@83M5\.)SBŜ☡X'aʏT{x^kohŋ/Hl,;|r;HJ&{R~S/z=Fiߟr*/+\^z` DFُ S' +j +endstream endobj 5915 0 obj << /Type /Page @@ -26212,24 +26024,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5928 0 obj << -/Length 3553 +/Length 3481 /Filter /FlateDecode >> stream -xڥks~/fDoL3e'JbՕX$ Db -tmŀ,19J]۩JheRuhкit%XP6ºkvqzZښ=av{L_,t.veܽѣǸ:[sjʡL}{
]]?ˍ!莼hhGUz2\{/*3)%pڐ4dn3ʷxi'n?q|]UgO:˓lTJQu[gCF|I-(R^/k^2Y(μ7'\F{u4CvVPySD5FkCְ
y4}R?0R}vj\/@J?wCFV0[pz~x -^ s%C)K0 0VD9d[n1cjX -]:IDbS <QpJLHV;ԖxBd˗+YeƈifMbTiRc;Ċ' -b
L^SNk<zن'Uᛧ9 > }?dS-#m%{=v,H -GH5,bØ_Dx4eAr p7j(p8;^eۅnĖq%k<tld@6`A`}0^|--yKpc%&69o{Nͪ9C"^+-9inX; -.i%Fj# -%,WCW`~>.hܰ''ț/ -!e"gGY(U.ʧsA]ԚP7Gr4XPc#Ɏ -YFV1 -(F/#F;nA-#J!YB'Z[} -@j˴&˸$1$Yk2BjMcYHDy4ȼJR%S9=,>~?s銒؆@Zn -L4=@m- -jatL=0+ar/Ef
@ihQ`\,^}41LJ>Q_n{jzɯ|qhnc@f=6Ny~Il ^rp\:^Qn̝(8#o䳘=_PYgk\V@rsI*?WB72nj6omeOIX:?k1˸R`~ߑ;ghAvp^1Lendstream +xڥko/&ŧRss>7q-%$W!)kkvvvvޔ?ϟInEuMo^gWp{ܛO !y ̽&I\\R7o/|AB乏us>nHgMr Ùt:@X,Nxב;OYqA`/DG.i4[nV٫^Vj7%ˢ|jI[ռͦz)[n?ݼγnFkmu"5>^k>NoGm
/Bgk.Kt'j_:"[gOEYtZۭnHF4bWx"܋5zYcrSXˆ,Xu#sZJN5l,u,>5{Xj]l){GoW+qu(TEC4'q~.C~yJюTd^4UfS͛Kʵ!izgo)2duU=PY.OQ*FG|MgX`cn
ݟks[PR_֪)TP:d^7jQdyo"OzMziB^m2,5XFkCְ-yY,q^\o`>;o %؟ {Ń;1#\+-ju Q=3@[3 +vC$B=13Z|@FuoQA+ +VaZ; F2كY@k>j-3ݱnq)`/v@$9UJ,-MY +r&n!8z Euce*t$uMXDq +))\zP+^3 QbR["㭴&\<lǁP^nj$J&5zV]~ch%,:S{R A +`7}4ɧmxZy*LP[wC&xLՂ]5vL\scGrfkNDow!>Xʑ 0h7BfE+DZx'HcL9[X`ltr >,1 q>,=-TmSrYd"
%U8~gͭKG~tCU{ +
e
EG8ȸz[RD2ڲ ys ]|ڈB?D$g%Wf⾱8"@$P5ohDu#$Xx1za +SX"AAJX*noP.(l(B
Y
N1'ثς~Ѝ +&ah%AFL;# endobj 5927 0 obj << /Type /Page @@ -26265,29 +26072,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5935 0 obj << -/Length 2778 -/Filter /FlateDecode ->> -stream -xڥkoFE -\>y8/V~%Jb7%)-x3UȆ(NGaEy~fVsqb" ̿fg?HjjOGeWf_^~O\G'aYތi^]~;+~y^[x{5>pv2ؒfgnpgrҰ{\nݢ=oħ9rB"oFkGmKL; -`dPd:ܿv=Q!A9SG_@ah5ڂ8Y̵'ڊ7 |Ӽb7?^M>;q0Po2ƉS9#+UVy\̉؍"kS]|CAgS2:#t\:NL)Fgu֣qZj)߆0zJє<cW<
ZPݣו< -¹6 hpq -~=b12>fA0U==m=Viʓ*
Yel0JVk(bSZ 6qķ{AQ c4|-XebHuK̶XW
\)iךS`j
lQLZdMboBOVRoT)l2f_7h:Ƞ.ys85;cxJziգYx=/
Yj)-ˊ'yY$G},zwN4OowzO1Qz8iE$7WPNiXw[K/;ƚ8 Iq#f֑2YdW{inB4)&~ibp@ҫ{V55~Ų{(p۰
ވ 7
ɹ -Vumiȅ(Qr -Ƒ5X$-9]Lz*%Δs&7%C O.QcۛqQo0ODF{1@$'KJgAB/<٘`A >6f̃vxԚ$]TXcuY(Au;??̏
F;Y`|ڰLL>$FURvXʂ-AȹJtxMPO2r>Y1d<#:LyY($q/S ->fZġlm [&ʏM]p)L_*F)B`'v!Jt1g3t68nj(l8冻,Y9.dE(':pCKt&q ŵ8b5Un1!<mRR̐*KqE0.BD> -2yeY$TBad.z:~9ive9F{l
AtOBP_Epɞ~SH)<lME̼-(! -ΟP -:e-ޭ]K&Ǐ& -Hb|{v$%4 VGSmBEʝz,I|%5țB07pʆT!j(U@{ -l+d9U -X -.m53f!8z -}ex{ܳJi}wYƕ'<:7Kd5gbؑE{*=iM6 PkPfy9x5vto.-7I
pw}voNAJ415<G* Ax&RaIQ8Yf/xv-8GPM\a,XBnY -ۢr-x~'\͡INqS>"{v!|%;+^xO)
SjRnN2CO,'ʖfr}9SXQdB
luYVqt1sh%H@oqu9.>/s -8B6iݼ~.&֤yKL0LtNbKj%aQ8 -Eo*(ŢEݤ8/f{TWsWPsO'N*:<W; -4K#E~ۓsɾtoyDj%Dz蘭QHP?7<])Iw'~߬|LAp,[PD{|ǁ2BqS_(
uY2endstream +/Length 2571 +/Filter /FlateDecode +>> +stream +xioFE +(ouJE4EIPQl#~5%SE ̛7>Fj?5f(Vǣ<qF+9;Q| dc菔cϜh$WWyIWc7~+/Oz uϸ}#\;;ŏӋۓyoqh=qlonaj6'~فwqr}#>5wCۍ`9vC0*= F
7GELCq8/~E8V9v#kKqM++Oly +5=/)lɕ{`]NH-+k
EwOQ U:3P9Jgs
ѸZ,$8pCT#,ɂJkFI$(LIp`r7'pئ
zx|e`$ׂ*#Š\$b|=nV}xZ`15v3DQe49}};K>,<Mm~C>1ߺ:jcc~}|B0u#+Jj6ZHdR8 ^xF6)b<kYvgl5
gWs/ڸ'OGQR`V9`&p*thl |2ydb> +BRV/DN抷\Bl%2VVjZY7d}nf=,L ?3ԔaL'ͽ,`<E Q5uÓ];Fhύ|6rtrȪ"g@P^xy>Vငp^^_G_S/5v/iv EFӬN$O&7vkJdqې
p C+ϔ\@H +.bh +x|P,Ұ5u$$ +XLʉ8tKRޡ'稱8)һW<..tAe N +z)V&(qfjJv]Go{pЄІY{ +sOI?zE3A7?߃ǫR;=FR)/vV;a+:!с>!_Psu:a` 0Leݚn"Y!6W^rI|DpC-o#YjK̞+2WNwqY ćGF73Gܦ4c_DZDwOs'CHE4IDVLr[\$78¹!&xHdȕ#.B@1 +-4]fJ. +ݯbUt-/ +Q^wర*dbgJfG3uF%G/o5/BrSd-şIpJRRsGrB90_A\QLL +B*quf{~. +z( +C*/1O1މ#:ߦ۶t5 +!{%<WVK!VJ3GzJł7BU +H8-ol|y,e''gBg%I4l;{5a_@Z7&|zi$O0ח1E!.<ng=Jw{w)Vw(<4SϴMʛdZel;(o<}י>S11My^mDYP;*<[2VgaQ +E_PRKD/oVzk=1BfayMO=85@pրLD/n@Cɺ6Z4~kcN"ph"IWREw_W;b[CWPA?i7Y/Wu<Y?4k:Gȳgᑟw]7EKҝ^BzŎ endobj 5934 0 obj << /Type /Page @@ -26317,15 +26123,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5942 0 obj << -/Length 1121 +/Length 1112 /Filter /FlateDecode >> stream -xWmS8_!eĆ!I7CJֱ\[ WdS݇XZI>()J͔aHHs:rZb,ȅ9صf%A)ٳ=:hd{ضiuU
6^C57
a3Z
X)lxtue
6dXC1kMS0&Cv;U$zr^Sf=m+ -MY."r/~HJ6P-%<B58,IѕK?<_UL -6ȡTIK]'B'%s8B"!o{\;q3f,&vp^\P 7S8N3\(51suzsL3ws65sZ6,=E8A901!N,Qb<7Cy0,y9}+p -<Bw~~IGV`D~^%w{:zh-x g|<`.A_QY7{[Y ^ڻNe
08lb7.`JbQY2Z;|%m$l.B*p qfWz<]{aT
G8%a0^o;nV~BضO<ٰ\{e*R.p^F//+n+C|u8,ȐƩQ -2$%&oT'3qH=\[+3?@hxRSj?#C3W%,*uZj*̰0yo@pendstream +xWmS8_I2+:!ICoJֱ\[ WdS݇XZI>()JՔaHHs:rZb"i@l:hT=KM7ISVUnqm4Foطq̦h!khreM6dXCyk, +SS.恘՛^(;9x9TprVjԘ'(DCpƂč<GhJNVsHGCy? ;?NzI2J76<#t&5 +pfUTܟ4E`}^LG'uǻ߾E:PZ數ߩv4`-Rlj +o^v2x#EP8/|BGg endobj 5941 0 obj << /Type /Page @@ -26342,16 +26147,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5946 0 obj << -/Length 1399 +/Length 1296 /Filter /FlateDecode >> stream -xڵWێ6}WQjZ钠H6Em<0l+Dzm(ə!9sH
2IbiF ϲhgqso2?q5[$`~G!y*?Y-?DsyiWo"F245W:Pv*z7[&gsɻYLxDŽ{D -i+[u)gDf<Te2NA*c"caӱꡂ<<ö
γh'߃h4ű#/êQ_9$ -bYB@Ovk]^CQÃ#y8'œq}SbރrN1SXju몮
̶r]fM0
6ΡNY^*$/!BAGu<J)Q]hoٽX,)zUoFŶ7~_te8 CR=%)L ɒ+{o
}(K$gRKT~8CK}%(ai^zmHEYվ1D
WCQ~yYuh.p?YNcyD -!$8!#@RUY1I]iםz(MkXb`GȠy{_y@c8zR
- -q* 2gj&*AFԅj{'*`ðU@;D;4jyptu~mq֭r#G^[R<Ӕ +xڽWKs6WHΔ@|$IDMN4QCBR$U.(ZVdЙZ.}}aq^s/+`y$BӏDzzC.w ؏"iW(U W"k: +&sy67?V9\D倃ˑCF.rm@m]f0 +.j2=_E]~yՅA(,\'˜e(CɁ9$SdۓBbLElI@r:Uu>םz"jr
[Ρ<]P"۪C'^__x/bqL ߧIr +c[ O%U :`=Zj[iDg!2DKt:'"vc} +h0T߽C_Vua2uDv"NKCŤ2`>ԑ<3#X)&, ]l[,sчM͑[/dfZwRJ2&#҃d_|3i'^G,R=DBiac;j&]Tw۩2gf"=vSd߃Ƌ'kbӛ3Lm%m,b|Gx"w
;!tpwbr_g}SO&&45z7{aɫ+rxpr7qu=oE +3z3F\co&07 Hjfv=ђYR%.qd 8<`xˇ(r|endstream endobj 5945 0 obj << /Type /Page @@ -26405,27 +26210,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5956 0 obj << -/Length 3338 -/Filter /FlateDecode ->> -stream -xڍZYo~_K(`!+ 6#v0<EZbLZ>uuu -,{c&JD_UT.i/"zbdY` -y~ĕE}ۀ~}mEvQ7f*2*6a'ٻM3&"*6fG[mĭ}c"54* Mm0B$SLfYzyA-HG"[մJI'}-Ks=}gZ
`h3K#getکYdXМH~uͭ8bᾭi趺5f4v?&pIU8 +Դ_MM߱ -KNa3NIQk
6tq
zx67}3wΞNlZ>ӲH=7 -sߴd(b"K9IUI uq;\(ZЀ#7[̄&bi鉬y&t}_T3Ԍ}7?jT(o&)ɆЊ;4BܣJ[B#Qz,n -aߣ4e<ytk{S ]F@n0S?cMRΥM˅' ޖF{'N0Pus%o؟ -@z4T!#WYљ&M۾p:TdueI
4#bݮ#R#O v:>p,'YȰ'l+-p6,|3W-ҁ BSη;y9XkPa5k+~W,x<s70w -:_GZ^2$LZz;jہ_3B5L[s@脮l`W5R"s/Ϝ#V,Jzr<{A{a
m4d##&2t.{*CE s~zm_ -b3|=ԡ+AnD?8]wE -NK/UpA8s]Y R1XWgW5-l)3{|uS -~=&d.LB(+?' -`= @K?2A* -j6ULpA!ɳ*s=>f!S0\9-]
;Ⰹ ,A*n\%1֬f'3ʂo|߿q'mD= -g
VLn䉡A7$3ֵ1Fl)ZBE^FesXCr)RbJKİ~8f@,M|"&ՄF@؍tasW˟k.: -ٟ$SZ;~!/ -jA2 -tf]pz1}{Y*cDrEYz\p,2fMfZ5$fuyLMiW+y/'@J?~%C !v%ad +/Length 3285 +/Filter /FlateDecode +>> +stream +xڅZYs~P%` >JVEJ! +ȖRIc7Bc +Tw +547gGögs@iR>I&4fPtҽ2lff߽>
ڐXt{ƹ{
(~Qr(>BJ;_VTj:;| +:"!O-V'h8Pwz!%?B͝a{ÐAWæЗEIBq,;gޚ{VPMKօ/z6A5 v=tϵ[L%?wB5 +as-3S +7;ig컹я# +Pe`t3FHd~Zz'H+ګTiES/w~p%2߱B4?Xg?*r0c+.av,|t=\/,{ԫGF`.5{LxI5J?SX|[QЌti7p~mz. G&<uFR:x=`y|B]V`m㷕bQEZzH'RFpo3=nU]9zAftJvGe{P-]|:v/i6ձ\4OQnṖ;ːfF0DU} ;}yuP"Édy~&kЌPFw< +Kˏlga>e8<p L5B6+|p1+N^x2#sM[A!bVA|z|p%3GְW$o讒gРbPdTրt9<UT6s?5| +7ˡd7 +s^^fhXm͆ 4lI@]%3 +FP?lz,Pj .Jfhv[h옱(DS/gcFx̸C=ox7eh +=8w4>>Zw
9-W% +b>XI 7_f:բGݗ8<?\@mGf0ҶzhbiRyɴ8C_(s<i4$8@oGתSNaQhT^٫w$|=wWn?[*Rn#[y%5afDOb`xV}cr +`AKW|',AS4K`#f6|ؕLpӈĸ}F}|\mB`kZ[&BCX-fAn0ڥH8Dby*fv' +Տj0I&oqéf1f\7 +C|egaS
` ώ4ceKV@_!vn1ȟ"'tՌ?~z872qTduU3s3mq.fLL<qO=1fU8ʠ[*E85a?% +`ܺ1s9]'}JVc/?qJկn( %
Q +LX$cw44fU
s +wt}0LUdn"ʉc@!WSVᓯ#a:I/bNrB!b~#k endobj 5955 0 obj << /Type /Page @@ -26460,31 +26268,36 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5962 0 obj << -/Length 4283 -/Filter /FlateDecode ->> -stream -xڥrF]_C)fpg-k+&yHD -C^ekxjC'34oFL*nH]=830k4f͂H4"e"/B>vC'_=w.+F!)VFDHemaͺC>4&I gV >9@/ -LJlbcg<DZg`ɔȁ!`6sT,ĩ -7C8KE^g'&-/$q -q!)\<%Ӹ0MX~"zšx1 Y_beU_yƽWXwϳ]!%Zduf7XLDP1zኜ#{MoUCS -)y;X B~
#x*B2b?՟<1~Qx65$BK3^ Fn{F' -s[j-7Z/[^juڟɶU/9ϱS"# -őƞ{Ha17r٭՛#(D}B wy]ʌ~[C' - -BZ#o_ڑ8"J/.$iVEynpZl#oԦLb¦s܍LSlSGB3n~Ў\`ga0ow -T''(v:͜-M -=_cNJУ(cXݴkZnCV -indu<iflll+E+.ĵ"4#4|ҊU6x -`^.c(MXAHe7%I_``!,SqLYנ庢\ji9!$b,5Yx#K9Qr'rEJTkAp8C&ے(#FLrP8-% - -1s'Fb:Lqv|@s,w -Y3k3`7+-ޡbAl8Zpӛ -4;ƾ]Wk~kD<UTSh,왮
-5
S=uӯYVP|Pq<iP!^ie -(71m4ÉȎGCiR|VJ'}k0(G8w8J(?i<z KYU*?:sīgb}A;>?M_gV?Fr5Lūl.vz1x7;ǦЩm(!t'A:S.Y(ح[6 --ɲu@n6ȻjMJC.,3AQ֑\L<ZS=;h(
f -O* +/Length 4229 +/Filter /FlateDecode +>> +stream +xڥrF]_)fpͱ#k^K)W6D$J @Kk +OBV.[G;usc9}Vp[Z<4L? + +u\CPDY?F<s&zڪ³;a#K5Ď; +6< +@)by +*ܙ/_gˢ8ӄm^I҅wkx
1AA; +*O0IQM±';;x9phsgG^sؕ"\,`!\2]֕,K#Z + u%z c')H^պظ?}"L3N[ +T0-C(n_kt/%[r&֤x3]W7?_jY3}9ּ$^v,֕$(enKּ
3}yzKcŧ}A6fdr;l)y(21Xѐ:>QK9fF)(l%J0mKhFZ2.#%Q4%V)#ISW'-Y8F](MH#kLSlR-( +8%a6B6'4G@q2T]vg>N6sn^-JT
Cݗ횚ېz2s85" Cܺ81fp2fRt ;JWuDmHazP٢G0aaZ%и(/3?ANY +ǚ3D3f_RJ'=g5c"PS42d)%!iIjRC.Sg\_)CW&dRUeĈ).̡=ELEIca46
`V%9rki?`/enh +͚T`!HY);S_n \s6pLUSzNZ=Vqaa!t[ +{+5 +vVueq=4VDb"=i[`2W+QIl®sDw +1J?VQbp)ár2ȠEl}FYwP=,Ϙ:,Od;]=ն8fZK-9|7zi,~BCCa%G5VBƷ!x .`Q +HX贯e5HrnOЁq~s-Xl@GEyˊ\
仺 tmF{0h<d:DVW~<<RdTIk6OEKd64$T`viX/`AA |uqߧ|-x`I!ۅmF{+k%ީ%LcAOʹ"d>Nm]<
4[KNےlGsz!JBZJBZDdr`9ʴN1_6gZ8D0}XE53vL2~H3([Kn!0%4li{[{rlWdCDnn3{E)$jɯ8-qs3K.OFz:*?`Ƒ )7M!|9e]OZֻ`N`S3S"XN@v[?C6O:5r:"si7Gc7\- =bK\ +d1K/#^<Ct1ӹd:,heCɗ}2ȴߛk507mgȞsK!R֘}l
& nM\r~ +GW}>FQ#Yv)hm2ڔhK8T2<o0(~_#kvRtBU_A'؟|`boȏ\|%e8
L%[kK; +h^zˬ^Sa`{GCSa&Û )Ç0狦RZeċ +p@} +CH S4Ĭ*p +7'Rֽh'>rI8U(+\ė%_Lbo +"N2F%,l<eP)+<8+|^@`0AZх +Rb
BkMN +@~Wea,L?Ӊ=4XMT7:f*M,JGMendstream endobj 5961 0 obj << /Type /Page @@ -26520,31 +26333,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5969 0 obj << -/Length 3942 -/Filter /FlateDecode ->> -stream -xڭr]_UK,0hye"! - -?yn\wgx.<UsTK?s3Ow80RE)Wn$T@0s~.e#=^}1P -Lpd eO*;@"#|%D`i.fnylj8?"}`@G*$[`2}
Clʂ^uL5<
-ޒt% -X8\?$ ɼY꽖fSR~DT]^|mAMԢPa+br3Z:,tiuW@w\zFƣ_=\d#82Dpxޓh)z=\9G4'ܲlrкypg-ipzIܛ+;'#4bUّ} -$H=y{t;w4mAQ qqf
PqGtQbPs0"dA -2/x]^BS;=Jj]GiG? *h'\nf9Xc͐?ƨsn~-kxI0(?_]Z|Tʦ+^t|y$%̞`N(KK~7Tf;蜽u=1Ў_!4&CcchwsFrfmR,MҚB>Bق0m ȾB {rF8?:"6^8Fi_:d -b~RHx`bXضؽUdE -;SF"LƼ,BkM>5Η0ZoC~
3dxhg"f8S4,3Gj0V|ljÞg` -a9ص%@u#E`Z7=HN^lm@ndUÿ떭b/MЂa5 -Ro( -+(;li9!Q%Sdr5I7gpAٵ͔#q``^h6hI
]ۊ"d$s؛Uޱ6^jLdn}l;q*\XD9#"Ǐ`Z$v{0F1cUL8TA@:%tI{+ %!vΚMD2FLx3Dc(M!}z0#@/-XZk;fU3[\ҎL5ZӢ
?3t̠|Wơ"09*|>o,l\ -yۮR -Ahq̶
+MBv|ϲ^WaqaLl a'j%l҄3A.MO+~ɣUM,:LqS6y=l#3ZmKZ*PؾǠ
Mdv`R\>}$>qo=X%B9"\Rf -tCOP=ϱa185CzI2c3aW?yhS0qrp@C:y -2;Jܱ?V{Ⓦx -$J/<dR3H6̆/(~&wƦX3T>3g+6nDD v
}}vV
S)L)gߚ:qfⒶ7ѱ,R5w1rv';-s- Pdb5ZS=\TCB*ZVrocDn(/:kXGRXVBk5K;J4Oc8,e1%=~RlwVwQ<.o#+$N;~ -Rm? %K<<Lƅ ~:V5p7H:!>Q -K afԞ
R,ߚ
tl<wJ* -6PI -xh={Fv)$cP(J dU'/u9)7%!3L-Q#>ٌʊ=z/
9~iBe9vL5;&9)<?G';i -sij;ׇ=b^!H#u'Guyb#E*%
;J&RS#OƱ@X2X#Lu}UNƼWnizT6ݚdw8F춃rXv^ӣC`Fṣbm0rF_vs57N`cgpTWg27PGUs
e9cvLb,U81BNusr=Q~܂9]>OS7Q̵/$H8U.ގv,z?I*Uc
\s.=j{qeRMAvlv;S)оRmM"l"L!Hu☴d?V2lg(#?$`nL<s826n\IqT8ێ
COG+8
F126b8)|+U +/Length 3894 +/Filter /FlateDecode +>> +stream +xڥr-`|S4<hd}HPB4 +w/*Qb~4s/e<-$(t=R*xN`Nõ{/<`h|8MUdS^#`B:V<=fefg=㙼5[N#Y|$cFOfKUW_EQgÓL%NP>tn +F\V%fNr(rufuU-77t'OWI\F6*t343RsZ~)k ʗ+ZDu-veS/[>,f6ټcd".vUzz
&,edHքb~IS̅.p:KwK k }fV}Km Nт ``<¦}@A +
eA=cw6 +Nܒ34(&'"Lo.@}>Mc3eH|b4n$`âv[Q2Cn fwsZAp[#+&|s_D<ׂjAwۣ
GX3V>`&*zX(犄ס;1hy_mv֬o"RWN3e q0"gPBv8><*#@O- +T{ +0I}k<xǁވ\x\E鎎e˥ٙR0[Nvn7hiȦW7:@ʜ'Tz_##rvC|DxVXB=}ՐE5j:ZYXU! MrdjA)7zVa?/z|%Zʽu؟2Cp/5,6t7LMlk}0ON0h0rP\ + g!D~q`ȹ+aK-0` Oi^PEjbM) )}<r?=kj+8N vyaj]%I L=f +6)@-iq+'95rlr,.HMETGto!<9phl~pH\B}ˮPBA<<:L endobj 5968 0 obj << /Type /Page @@ -26579,25 +26380,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5976 0 obj << -/Length 3874 -/Filter /FlateDecode ->> -stream -xڥ]s6ݿBof*$q]7^bjrDIl(Q%&HI3sC`X -
YGq0UXVQ':X$U.Td@|9Fj*,>ZM=E*: -+R#"傄{.JkY)u5+՞<'?<-CfmJʿf3h)q -pG)YJXҾea2D H&$iVh6 -<%=]F@#Ns JқL$Olnj2q*esmgNZՕ*##- -1zm&]~E_@y2Z9@ k -D8#!J!Y&v6&lu%3-A{# -ci5'FNfv%v"_hj?U"ļXj3ks0`#K#`}-4v}̙Ґ<ŠW7
0O'3WM RrjYA^^`}i76fF1܀̺ܭx7E}uZ -vT죖ʱB7$av`83rNC*!ßVj$Vz`LH
K!JB.50CD -s[tАk9'CKpruGT@dJN1({ I6-Ss#0}Popx8#>҅ig;9>9N,SwmXYZDII]ߢ%zq*RQ Ki?$ꓸ@Xvxd]USu¶?1dU/'[N -_+ )s4 "yIBOv3pd#ٷc!#y)Mn4py2"%(BŲzyT|}FL0֒#lZh;nKW1b<Uͺtp.Bv+G2z2s.#P,]Ƕ#6F6ZvcHȱN -XXU{@V5K"Iہ}'p'MذG hr߯$E2 x-Ϭ,m<MIA%kA%on HDOv~㦷^ׄ.M -pט]];9[{ -2:]DYAAs!A =`p'rݲ}:
·ʩ鬑Feͮ
ல -- w6h|HBե")!vE 1BA \sɳ=o8~_ū JFvM#[WvXapu.~>PkjH-Rar5ȁ=ZO*(x,lv
?JI:H@-{Y.]Yl[.қLe,MA"gم:+Ϟg +/Length 3731 +/Filter /FlateDecode +>> +stream +xڵr6_PUMU3kv6(JTH*3ޯ߾ +?5Wl ځlcZIzczƳ&QG)4Tg {HOp$Ϗ:i$c_oQ|]ʽ~w:>@<=RS(Q|5}q;8ra*eU5݂Qpe~oqٷStЏߠz_J8h5C/ȇDyy,ꪕT6[( +949k^QYu,ݮƻw jb=בͪ+q*I˦Xe"{U4-x[и0p<qqLQ +BL'џ.nZnFG^uhu5a>GO48{h"02^x槒.o'۠)t +#CIUīM= `dW5aW|2et Sc8~FyD2BR >2,Z +C +[o$@@B
&CRf8m0zvפU]22"۲ +u!8G{WܙR."&RԱbnŕuc%[)XFb6a$3)$1S} *_LgN[:bB(ߢwE3@>@ﴊO"ZdJh+[kGũ%,y>C<F,<FhFƬ%B0VsfdVmWrhg6cM ++ +0{gf[XJb>--8I- +9¯lJ"G7-s=?Q0.Tn0WN +,AyUwt_ 6EN:[m'sm>|ys_$Y7.]vEhaG yY? :/i2r%pl/=Yigde7Ġ=LtV}V8a\^`I|;;hņ=)E;X~%p4C6h9~afmcfJdYY*kE*ؓ4[˄/z_һ4ZD]cuM/ʐ*R!CĪʔl5eOմΥ;h'tj}R#-cN|諜ژiD\ڰm*k +po~ +vq܀Ү6gbv}-IoeKJDFÒ}}Ih[R$U.4Į1F( +7y܂YόN7ʊxIʩ5|ĶcHY{wyoསXe`I_e7̀r/>F!P=:&1O,Q9>2*ľ<ewQ>|lm.TQ}SΚ
/[bљ"e#aA_4'on" +dȕ8.Aھi@D]93ٰ ȫa0L{T%P1M*#QdSp3Y3 +WDZF/avd..*5T4STE5!aB˅(2GjZD짓sc ˢ-YdKhF.2RZ2]!Sjwr*g <ߨ<ԏ~?endstream endobj 5975 0 obj << /Type /Page @@ -26633,24 +26436,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5986 0 obj << -/Length 3253 -/Filter /FlateDecode ->> -stream -xڥZYsF~ׯ` 2aoZJqdEw+H@ -'q>~X~^goXD2(=2mx -6*'"abX:yO^;ς3laSJkm*864YYNMɫּ#O{ (,̂[)KfzWxcnGpW逨>Ocd&?$~wꪭ_Xfh0>Up>7CPTRУ1ȅ[?Λ&BPqMzqY%QVv'XմeM -=͒bڰ7sBDHRg"aY/ ^vxL]n膐`l7g},i9ϗys GKحQP/]0?gGnH^]t`أ!6xkOy0Lh6-ϳx'7->ja0_Q,3uYho9:8_qTZ t[isn.< -,(-[5?{~`/2#SP[ 2ʦSDžDGNj|eQh%&֣Gv9.Z1mpr-LwyhM@ -
(7s!v1]s;,GD%h-Zp儨gx6<
A{bRHͅN*Qa
} FdT@[:E }Ljb%ܻ`7 -:n&G1ZٶYT m0CJu{ -Jv#}
"ef Xeio9hĸ*Fxf'#[D\ -hM+Td!Zlo|0l`L[y]H[G86Ni%=CNyXTx,5{4Sy>(p -Zq#LrьJܳ8}Hp1 -l rqc=-
2 -baϓ|DqOwU)O,O8~JY4{4u}v0Ðuχ,fi8_ :GR -mI/_r)m9Ԃm#ƦD2vDv"<qڮiNDVv[wRiKo:Ĩ⧗5"=S0$D~ -ޑ6aqZ1Ro8FD(긁:N6nI
P9j˗c0<48h.L{zT\`w t +/Length 2930 +/Filter /FlateDecode +>> +stream +xZrF}WV0.ߴ8%Z*o*H@ +BtpXX%\2)=폾ٖYhvOCfɯӛu]q$BvlίL +c'4w3lP
p~:s|r>I1Q]㏓_F HeQ8zeQ4Z(5=J=?=w +8D9Pp-3U{j8NqCcH/S,bDFCtCh<f0*UJUD/xu˿pl #z:n!0</q1=`
?)+,gVx&OOXV\Pq+\V1,ʍ>.N[ +MVRS9ȍs<,)SzU<o{a*nԂHWQ+P؈gN9\5ȊEIݐaCfhPLyu.%ܠԻb]>]k',U"/yI<*w*VYӤ"NHh:/6fOV``t +(d">h_fyeI-4-ι&<aOc|3S _rvgl3iz;c6Ym IT+1G +=o匑kQeshsl`?6* +mdL(,[5XQܷ?z~o3ۋL+e̚.ylʦ%
E1˴LhQ`9uC
"w
vGQiӷzeM `i=slX鼉,^ZG. in[Ok2hJ*PxVixT[:C5}z&һ) )<Cd\~Ok& +й~óQ>OW"-.踛1UD/;LH]EϏٖYT4 ͣeXҤq3"y"IeZ*-aZ64ٖ6<:EC +_9ãL `ڱL/J)<G̥zF542 +cE^׃WlB7![{I
~֔xJa;ޓ"Ntw]66IQUU֫1:FnQ?%Mˑoddi9!釜+wL?` E:xC/ +_DB, +!D_}١mKݬK2vSb青dTǴzjQA;/`j$H:%B>M4EP2v&%ic7v~ +ʓcfD"]W-"kBL5^v:p,PFJez)-qbHo=ϔ}"lbi +w9븒.ZF4#Sa(-ZN3D{*!,N)grӳBTqRJҵ}f*P
ڡy/o1[Vo{ +3+.o2\4pcDZvlubv)<ZΔoftҶdw7 +8:dw;}^O*D@hڃ"ǝk< +ǟ,Ϳ~o_6կ:, endobj 5985 0 obj << /Type /Page @@ -26709,16 +26516,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6000 0 obj << -/Length 2003 +/Length 1900 /Filter /FlateDecode >> stream -xڥXKsFWTUad3-8X)o*-23%IqlJ9lM4ZjZ:&Vr; kL;ɇh?
wNj/?'faqY/n`Z-D=>}͕&^^&HIL~#p&S;}8Hf0g%{TNYb1|k1e`8v^+
+7A[QU5vDdFҾ7Eӊݪgްr&g:_QyPj$
mr-E#2ic%"i ,-ʉIY u)B_pO7F,?Y(y/OGd/T1kɆ)a[me^h/s7Mdi]merly&V6:gUafGcecoB2X쵴zرE^BFA^:#"ٓ^:'Yi>U몄b5ŮmdMFz_rmz+0*>ҹ2'J
}G}7@y&.fN{|iS8WR$ntIS
1;uщ58W`mxqKRॠ^厡+[&Fs(ëD)ߥǠ*Yfs -ըXzpsͩ4q|6~JZ
1уpTcV]8$.7߹G&?5-92jiD磩I]l'm~DzaEc.t?odGorybL1HF9JDb"4^% -P2qъpi -3'̑qx^P~vL6i^ -_ٓUWfZ;3 -1kXA_Ax|XbxGΕ~ VD41Ė *Nn+H]zI4ڍ4xZ7z!̅:fgʾGkr$Mɷ}kh̟F.QSrzxQ}tyȼ4.CO*H,o#tXe0DZ6T3ăi:tVFe]?Yuk?_U4Ҿ' C?T.tsm"Sendstream +xڭXmS6~7%rt(B)4~ھ瀡3M,iWjѳSU44R(cbN 9HNpE.'o=h#e9zwx<c6WJ9yz&˓?\3sgGtNs=mrX1B +{;M&P>B2DJZ~>Waa\D +Wt5|h|}+"gIYQSnYӲw;Wj:MZkgQ榆W迴MVY5- o
nSVv{).AoO1B5Kh4'%rFli#
]K"`ʳUFϸN\m,Mݺ*sjp>)KY۪nfFK[]:ߤkPhnI݆ɦ>wj]p8ͪ;Zi#`ޖёHq4K
+߱7Gf6]/gF"Adu#wBsV6`^ it|Oqj^6,k`},I|bh_iնX4r>< + +iOa_3v;L%p<y?r)NFكK*pr(b1KT<T=L<K55Oa.cE,qm3ns>?@ +C,wRCWS7/=Wy}6É
OKV%lfM2BpuۊxEx]2ڵ,a{Um.߲Fr;HڱtAuW]IU;rQGe/ikpE pc-Hيdz 潒*0^
줈0=t0HPCwaQPq[ݐ:qEk=<FlE[Ŷr +QU0rQ_P4-&K/U*ﲵ + + +sOIm]tǪ_\1A1Usd-8B~Yy$r)`TaWBA AhG[uď|T0$PDQry9<oUggY Io݀㞳yH2a;H^Dt~Am
W=~}wpQp3XO+Ǹ-Knl]QRZ3G%A}qX&W endobj 5999 0 obj << /Type /Page @@ -26756,21 +26566,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6009 0 obj << -/Length 2369 +/Length 2279 /Filter /FlateDecode >> stream -xڥXY8~_Ed`Iff`d' -+&E!Õ0H.e(@[w=^)H%ށ*`UEj!V#]Nř;h-ÌQp<|#-~"ܐ'ǎD9v/bʟ-Zw5FC<)ttܵ^3rDPMH%1xjQh)!A-[=V8*6mD&[XGF\,ivN- `+e߃hlCǕ=a|-h"TVΚ0p - G|+gE -[DtK0$?LX3RG[ohCuOGDn}`(bviq0OGi* -<_{R;QR2~'0lNbtwv%u@lA -Ǎn?Y&VpiO?=;2͟<ڹ
-qm?lٺ -ҕzíQ9(AuR$QDhM#:7XH|cy,*5RJȆ%|dd>K1˞8- p`ԏL͝;gm[]m
WSpm[ߞ8E02n(`/s]W9T R@"R9{R<dӣ4O ۮpfNy';Mjdp`y{J˝8- ;y\Kh'$oV{ʍ d+૮,rpbAE^5-tG-] -s=J8θկS#wF;耄JUwMG*86_XN=3pQ*Zy5J+6
!/Ǯ| -GZSf^ b!W` mRʗM`&$ ]gG_]#Gn[_"Y3,= -H}{jr"yTe÷ͪP!H$'%sjB@$w))#udP˅?yB,j};vݹQE,s1eCLe#E4BSm`Ln_H*搝Jkgl? -ܭ鿚8Br +xڥYY6~K(R>4mhqi6mHr7d[
P,vc8+~<աP|P|S|3/gQZ:=1$ +EVaRe H#&wD~fZ?B]}\,U +6Bƅk3VA(c +9) +C2yQ#?nՂIQHq%ԇ(2:n@Jh *TrZ5h/]ݴ!-w#\wJ$#AS6tT"ܐ'KD V&ya^Ĕ?dUWott1թWN?-yȳb7&g,atn1 zAC>GEЦU(KXcԈ9v118@Sb9L R.+lnf6tX3?pnׂ&Ge5 # +W4(MNW+LRFmoT|Yth-;HaFqe*8k'RsYy2ßvƻ
-mk>` +,zL'I C݄ (\eIP)>>|-P:E(l^ΔB%_~TqdCᖣ>AYHR栐)!6Al38V4;n"{UFjk>H0D-Flp?%K'1x{ɐNc@;r"'M$@jYQ2;W^v-wDW[ΆYw_[$a%_e}N*!Z=9jԊe
p o9Aa;tA1 ]1@ڎ2 8-, ]H<dr+IY`x 3cpnua1ZȖm)smDN[)#?tP^@1>K۽|mǝ
zt!6'[`q\=qX.N0(pPuEzc$DsM)C{ˌ +5Mڔ6Ae`xmS5%{ph~s",h@3@[/: +N>ilphEzSc;dtBUjh!.8 +[ob=6.? I endobj 6008 0 obj << /Type /Page @@ -26818,23 +26627,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6017 0 obj << -/Length 2860 +/Length 2755 /Filter /FlateDecode >> stream -xڭZoFB!(
D4!$ -CDD$R!8;]>$5ܝo -D~$٪c|mdwS':{TxTxoq$WNe}u%w\<|] -ܣ[TD6[xC7(7 N L3Gm -EGCϤس#
'kadK͋#)RFS$Y/L<09fEseF[jO=a^bt`(ӮÛmzq
e% 8i]r3eq]R9k=tWB嗨1y6V -)#Y4s -
:ڷl' BZv$1$&A
ɦuY2@8ب%(<'_&4@46m:7bI'aǘ0XИkh@!/b]boCz;(KZ,&_j,ʆ[51*ѢlRNYnŴ3&S!">S~ -Jir/)na0VTeb΄LدD -Vf0M*95Yek(HW{܂> h3ʝ3&U
$8
uSBG!g*M4(w^dvo[QZRZب6Qdiz;0MgcX݄|0OL_ԏne --\X!,\Ʊs唧|I9YdíayFQDL%tJUK!2PZa"58]<-1!!x\8ވi|7ǥ&*̘1+u_ʮQ4+fX;v!ɤU,GbY]'`88Ƣ>kw[Aq^VYM0qv6L#Ra -!R nl2ZCpd|s^~臷~ ?
.ۂ*.:OáoVG;Sp7"wn 5t]ܸqHsxgVPۿ٢R/!@k:lPwKWc?$H2G|-|-2!c0A+w2#hɴu.~".iO{D;R6%$e -bwDq̟uk}u^E*Ba<?bɣxӤffʹ_ڄxT9߹5iz#i ɗiޟޖ%?G,l9)<)>&? -Y㾠6o,kA3&)]Svinښ`hހ_w3@wm)}), }y?
rendstream +xڭYoFB!(D4|p(KҸ_ WJIMD"Z>$1"7+5ādq<YnO5r\z>?9}K&5W~v9n:Z;q(/ʹ
̧3弅%\ٛ<qN4/ד$3P(_N>~&+I<$lOLhyߜ\kf_xa7N:9.,g67<?P'oeUMVwJYδq5o=#b{UHΓ7l*NZԛj*yKB^[k|*W`;#g#3QUEZx +:.R0W3pǝo}(P*guWAj74uWBʍ=h\<Ϩ; b26×8xBv(r
rV1m_;Y`@˘2 +*lɅ?M`rև`tȡϔ62t}NĦU +$7K +2=3#L-xndmL0=7mv
P3nB4}i> uAN<yَ;a8NuDFIb6}~^J 6a<7̓$%_F-=j%rIFSBI*LЪזiq(lz#:ԁu0[[tGRPu)ԑ}Z dXjЬIz {`pԻb/F{J^]i},J]4
zJnS~HC{y6G#o6kt
šnN$AxR32ə%1/{dw +2l Gn,hsCb:H2u +z(-~knƠA#1~G,;YnԯMױ(^HFKuLDWWž@ړz!(恘PzP5~8&ug|w!Xۭj(a=?ūx'd|i)1ϵgh6tHe N;V}OxLKmVmUlčVZ.q2[0i:{7jK !g=oLwCڭDޏZ?=Ӿ~Pʭt"G?τ
ZȪendstream endobj 6016 0 obj << /Type /Page @@ -26870,23 +26673,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6024 0 obj << -/Length 3177 +/Length 3052 /Filter /FlateDecode >> stream -xڭَF}BoKV} -&>N<Gg#q$đ꺫h9ៜŁu2b)tVoXX -T9F4@#~8A6[ruwnB%hL7َ$_UU6UalNPo -l --YMa+5fk (p^E{vOFwspd΅sH:^FJPFCX_d+d#(xm6gu<c -\H`xVނ\׆o !Hm`DJ?a:PAv
{h&b*P8;.bXDnMԦ^5n<uA}e?/x/ Zб`hB`!->@Y}:P:lQRKa"2b&Epym=U5c2=+^+~dMWĔstA(P1FS5K9nynuhԇdOxQqjxVUjB6.v/ y -8UZ:?Y Gɭ%
q&NjB -b.^(Q* -4'ՕCzV 4jAe2FΦNwSg:8^bR'(wՇV[a -~}@CX9@2G-&e h8sk\ǡw(Bl6L! kH A%] YΫZNqfu fh"T -ö2'uSTXXcW|>ýR]qzCbe#C%B[Hc -0=j!O-6T)uۥ9K<uptH-Ym;vաus7x*%۞05ՆqQϹ#0Q.skᢉh]uR)fia;Lkf5 SVgլ)609]fв&6ʟp֛XUBjJFTB0(z -ϛ~q%U]sR"{/tԚ~CbcF<.m)MEoѠxF +xڥZYoH~RŰ^ĉ"䁖hѿ:yHH0@쮮҈Y仞ga$\EUq60L^oˋo={l@$g忮no#;_az=;g9_#nv.#㛷_Շ+h^_IՁBQ]| hv8W/.q5=]^h%P(S4}`)EzJy[
^Q`Q(wWUpzS?}zt~88ZG_ W-(8v p@UWCV׆o[Mےr̓y3",2vچ<BzEO[=,58oH^g]@ȺJr6]\:Oа/Hy ŖŦ*_ζ*RJ'z'guϳ5<B0[aTs
\ɚ>rz +QDXd0ztqs&WվSv +fw@i5 +wU~W~Ohn0"GG9י=rD{Ӻ1nds^Hه. K`⦐Amҕ3B T
JZ8\۔7R=.TλyĐ_wp W{YP}|m팂#!pU&JC +0F%XBυj⟋M%鹡 +6RB$"-:6ZRA-^7}lϻN('E(쟶kT{gW<1nh"ylׁogAA;=.MZ|u54F]I2510Ӥ>;RvNG3(,|6_j7FC%2٨I15b`鰅xIB:isa$WQ\apN3<w0!=T*Ӷj8sҋ榆57^&]!.ƮNҿaØ~3
HldSmc @Ko*bLF{-,}~@?4lH'ݠqw#=JзL `hX;kpƖ}W@*|MDD, +6fCSҔYiڕ&mEv$O,*e O,RQͥW 7MWd
[*68s>QrVM( +,v{N&N%$h'iA4
OcL:-W\P:oxCFCO=G\)L'rll ,Yc$H?`#壧
$@0pipNҾ-;k4H8Di%-n<f8:zB%Y"Oʟ +f};MexW0]۶궮0`RKQa.'RB?H[t0b@@f +Ʊ%ד=T}cLIB{3sY +PeTVٯ;;g~?NFۛ8?~{06ډb endobj 6023 0 obj << /Type /Page @@ -26919,28 +26720,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6031 0 obj << -/Length 4226 -/Filter /FlateDecode ->> -stream -xڵr6_K&ևI;L'F%%Q%8=7D;tp -g 6ZWgP9Yc0QD)4tdQ* -\qġqRG.Abs)m=L13<xڻ4Id]&*"J'-w_K]#rhYm`R0'E-k<Q'bRo^U\)R4YSPǖUArvjadmc4ڙ= -UAL 3A -Ȇy CeVe]EVrxi֚a,:+ -CYDZM@]0ʭ -*D<+cY
|Y*>,qCThCV@_5)sL6_ǬcAv0)
>++v젹'.˪%狖dۄ`S C,Cy3&D<̈<sCd]`e>l<#C=iVm6pw -WJ(kh{$eHEˤ\ fE':v9YCv7qohRpY_Fd.:e- @mYiZZCxPE?D|#]osgbҠk##I>F<fC{2['rqcBix0@44YΊ|Ku- -*}o^6-oKEs7ۆχB8bw+)ٖꙋM !SY<Ed$@Nr'j8mN
<r^J)rQ-AW0
3LC!5HOQٟ?i^Bc3RR0jbuFg^YF5RgFֱ馳]i U!ya#!E!d!B@;rؑR1(h@=ݶPNL948X*7X2PIhHu[\'f}Aj&蒒VN+^ŔF`I 0 ].
f^.THu_H 6ECACdm+tP^!CkxOzMt=Z$g#EqAƑiՓ3ν --^`Tc+.^KAgPA7uSDgFM·wp -EXѨaôn!klZ.2ސo|+k2d3W+rWǮO.'WW+rZ_fuO݆ӏ=}':_n^F5haU;bOEs -CAQ2Fr2
p:I:r'WVkvOq2֔r^ALf| -b+qH1FT0qߎd`Z_~@#XWe<z{y22ʐ$AR"]Ͽ{M_5<pk/_/6#,wKF֏1,4eˮiM/z3-ۦnZoil`4<Ml-?⯗5^t -Gp`.MS#-b.ȡbePjat HHH<``&(/GV^x$6{)IQoGǭd-(سh2]|<rcr4VBzS<$t;3捊 c
RL,^#b_~;:KQW:Uaqhp<ӫWh͈wZ^2~xˀ#lSc4{}JyX
]_Ԟ=rR${R -.DRNtBvwbΩ\ʎڪXjj2 -*>JSY\[X"J#w -ox1?{L 4#drzd
Ǹ맜jE*v2PW!/PKzpԪ2^J?|*ݣ6e\:3^ܹ+^m3 :;/:&^ػs<y"ҖKpBMI -qj*FaleSvkTA,8z"alK*0wNVLMUp7s9McS쾡?0WQ~ew&u0ve%|rÂ,:v*UG_k\ܱs+< +/Length 4084 +/Filter /FlateDecode +>> +stream +xr6_K&ևIt{on-גT@PLdNCN8u~f*Yv:[aw7''TA7wr3?yWM֓g4&/_۟TM@A9ɛ|;._=Ǯ̫Kwus槓W7N&0ƭ~Cx:t:N*O'&Al|Nޞa1sʳF<5QD)4tdQ:p8x*Q,0LG&?le-Klgw|l>C'˒ȉb^VTb9dQ7~}z{Py2tM\S4YSPǖUA2vÙYט %z>nXr! &SE]͚E +ۑ+2v +ͬ)o"Xg_B"0CZE#hm^84O̪lh9 b^Z3;Eg +E..V#nًHxnqU+j% vhi`~j,-e7=A +(x}`B"Aef3$Ml-&@G
6QgAF{/q#@t<T풏$;@mQ6;|&طP(8|,Yi +bezECq婋ʠsxE
CD.NJ_hon˿Y)T?~{sP eࣸrL(c0qR%[0f4aQ +ן1Govfnj>@GQ$LgL+-%lOQn)fel/ZBL1J"M^ĢE@K$A;9F4Ɠ_SFP/b= JgBP1Ea`venY1LQF{7/7ȤТ"[n6V< +a0ؿj=+~KJD[f$G)&4JH'y9yIN۱?%G=ʩxso|v{T1n!4À +FېMɱV82KWULxb.f<h`U2qLeܒۿ:`%%Tl'mU-5b& +Umd}#}n)U(JF&7w\Zpau|ϣ&\FÆ =ЧS${nsW<4,-vN&~~mI`M+jg^idƸlg&M(F#r +N4HMrqϹ=p\
4<ж`]8r+%#?;]0_J)`Ti :Hܥt,_<ٻ/|<pIӥaUK(uwOc +D`H.<bYQb@#SܮgGkL(y xff$KV cSpdc0r5Ye</.V!svl;4 BQ!WpXbVTG?X+ҾZ ++~X7%=X=^jU~+mo'%RLֲo + +Y\υ6x|?\"a.nrxvFXjmEESR<Nh
RHA[ٔڽz*㊠?,G&z_T{HQ6U@Xpɚ2ý3g3!ilÿ#߱ˁ?xVypMpbrhM + +"hڱKK#>"d[?fFhmC endobj 6030 0 obj << /Type /Page @@ -26975,29 +26775,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6042 0 obj << -/Length 3667 +/Length 3380 /Filter /FlateDecode >> stream -xڭ]SF_K*h7HdaW{WIFneˑ -'8kGyJ#Ef}48cjSdF+B)J0zC{
IK\((nd2pX+f?4|^;q@j -˛6kj3F (A~QY
d/A]%hON!ۊ'e -ܽv .21Hɕm:Hf.E -N5OK"bcNɊ2 x@eQsL8@ji V=Fܬv=uҾ/0lGg;^z*m )|<nz嗪Msk\A-t,YCYU"-mѕڜgީMhOMlɟ;#DךNMdS_Y֘7;@E֓pR0;-j7ց`cRsC]NS$ -z-I+|YkcbYV{;<Qq72L-)R\;1`#c=sT)[,+;;'qxsMʛ8u48}^p23_x~@eMp7/0M>1;ͽ; _L# D -2xEXieS;HI Ddh(~؝˱pj5楮q ޣIrBqiJa`ź;۬IqYF"흾ܻ(gFu\4(i^QJH;n¤?:Y
4t#DJVHc샃f[؍Dțmx*;:%(7yTUcۼK$wmVj^ov|`Obq{䶮lI8
ő4|wMǛ>.u(Nox:g(\/v/Ζ41.Ἠ< -FtH[جpUd{88\6{ڋ58դdOz$rWk~dr)s+_y-c_%uEMEUNLr6*u0t.^Hy輒\ -_=W -[ӌKbdɳ}ebO!ȗ -`N^( -]Ӳ?ny+(5'q$|d95ݩ֙ifl>-w0E3yi3I`L9RP,,9a"*ebuJ.$:yN_ۇQ$EJc1a(;UIR?L5L&.@dϣLBg>0i0]AI:{%mk _*ek9:"֮Юm+r*Mbs2fF˵: -z I "ףBg$5HvNIX4SY1"\0
A2>Ur`~WbUhQN3lfjauetp#2>ydt+N5^tlsuT
-~0zC=Є Y -b -$6#ۄ~ -X)!_@n*ypSqGwNW jsL^ag"?
ZElZe߅1`b L@=UuUj UB
qv_&TXu`pPs%5tTTHgzFx%zʪ. 6&kp]8W8~,|/~58.ѓb4늉o?V7\U^(Xw&C+2A #Kg>uxn},Lw۠E翑' uL -4墲!lH[_EewD|9#Q O|W?,&AG·`U --_*zXauQ↾1yKYPWttt,-Cʽ?}7!#TWjSy!c#Z7endstream +xڽZYSH~WtePQJ3c0kzû13r#@ZɫttzTgfVGɛL S1jϝ@O{pgZQ]X}Mfk9zx84?ıqOs[<#<\Os8ߝ~8ᆳCl Ɯ{'%Z(@Rwwv 1{xv$՞@ދ˽vp )?Us/༪>=+d2[yuusg-upFv^eWxohos^b?
ox~hpJVI{h'-P(Rő/
hN[~iE:p\/#2iĦ
NsNZd%RBʬ_&j[38( c#<Oi?w'4W? +5X[9;|ӛ6m|X92}WI}A
+pWs#F<'mŝg\H<skS!E-s;*=Gb7iFZ88 + +5ռƢB=w|ФҤT^m)e.LyqZ67wY3i+)5AE!ć" +R#Rx18m#qH +ʇ۫
z*s%B1 IwBR!, +#=e#iq7yւO唾YwqBT/BF2 iŧGjlmʋZlD~a4z +]HW"֕J8mFb%m[-rzڵ[LVI^EQk-]Lb
AגCpZj8H[y0,m^/U}.z{^٦1p|$p7ttw*_00c}MFJfpa>pUro9+2Fvcepk?2$qv:+Q&,T5٩ +ұL5 +n3:辒v^+w:~؛]J5,BvB9lQIc}reI~"p^6#Ȗ(I֎ռj^u7 +Or Ѻ;[|F +<)yfJ"[_*mmendstream endobj 6041 0 obj << /Type /Page @@ -27057,14 +26848,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6058 0 obj << -/Length 575 +/Length 540 /Filter /FlateDecode >> stream -xڥTMS0Wh,cZD9+ɤә2${OO+3+|v+ =̇299+4\uFM?~LM+Ry[a -,ILn2볋Ø
J#f8"dXv}щ'kO`2\y~b,8*Aoh>/ikEֱJhYpi1)D3wHebԢߪ -
:eoFݼ'̂{mٯk4[81.1s"(C
6]"g
kn -[kn8v-+߽Ndd)ϔ2vZ XL7Na)endstream +xڥTMs0+td>:
IԎS58_ δݕ,VOIVH+@`e"\$CHf--}ynHg<@4Tmi2"͜+Y^J37L"drߜ_~.cb4)urDqWWIY(Ɍ0&)ݽd
Jо`?1gX-ѻE2MWkEVρ3r +1;m>EcY&$waN ' b endobj 6057 0 obj << /Type /Page @@ -27082,26 +26871,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6062 0 obj << -/Length 2861 +/Length 2443 /Filter /FlateDecode >> stream -xڥZKs8WT& -$ğCi(fd֣e~rzO'nP̗xuv5?δ֞ -tlj|*|:(\1T%ޗOs3l4q|דy+]$IQO˟,aB +xZS8H9Ua}ּ\;0p}0!.;;d?!f2PsEUVSBBĊP^H7[p =E3",v4<8<LO
7!]/u8 ep+CI..* ON;憏GgGh?⸳a/Ö$#LQ~3A_B][A9ҹX-Ѿ>=:XH -hTpS ;22GQ>%&O^3R -t,R"
C )cjH]ViېՒZ4!d'O4L+Q駍|@I'N -U -GMHaX"Ȥo22D)^"NDET#@(|tf@]=PiXX<pki\o*Z -GoWO?#v\dk8V}B\P$jxJ?6
o|UA# -(,XK{نn -?}j:$uK{d^oij]4c(J96)v-ԍ: r"#0DpP"
HHlMjğY*.kieߘ1;k9lhϖ,g5#yٮ&&G+&m<MFBGf Lj@P,BUwzPV NM/.,V9.,UfWݟPzUlMEV~WU3+z ɟ-E"#(+A4oz"M_/=&q94d,%RSi !`0&,HTUHD~lsaV6ȿgFpcC6h
'l]'Q0ψ%{I=W6lyTJ! :L&v3kkӐaّGv~eVE-H^tAM".Tg=T -e@RL0"MU1jwIV]qlZǶ1
ŭ47g|m -GSVhȨ%#r@baAG]Ɛq=" -P<:(8zޯ16x'}ՑVška]:^f1W&AE2:T:ow4ZVϠP -Ë4+fpzkݝ-:_ă2;/v-/=v̺Y'JG)Oȇfy4aQFGLF8v:q-34dj7cNnb=f9$@% "/~CBǾ=w>x$kc?|ppKڠE}W__HaaQ5n@?&ϱۊZN05+W'. -L98zP%}K*~ŨBVwV(]|R*"#aey4np!N"uCbWQEdL^[CSm5_j3V
k}_ s8|0M^~sX,k^.[IUjà]UsKo}X1Y49IY[Ls~Rm+hs -hÆ_D~- +h?NXuNBGJi'ШpɓG|,O/ +p.^EzR +gm{/J@F)_=)BVDә/AF,턂Ok,Hht(eMI,{ +crN +#nꞧM7H5Q?\Gb`1!^O1Soqr9|NiN3 +P!,vEyO;eD}_⋲hMweY5SlQMް*[{uY +D\"(rmϔ +.WO F?8]kd& :b쭖K$p*!yE뤱w܂l= czCP+:@Q)8O#}Fq2QIdJգs,0,2aT<U.:0e^4x Rߺ}6O`hбrYII_~u~=ь +.=4.N-7/'S$(Ip6c^?x`cJs6zU~}Iߠѫ/_ѢʛW-lBDԛSh~v!d2)xӎCG"}Gh<F/٬OGqpUA^`+D0oLV'r QmpmÂ4<q,'SodT+ˏ8&!ZO'^vM;a&-IN}0Ia~ +te:JGn(]Fm`{U9$yx^eS̽5ɫ'_}5~Y=Ś0`hRX: +d}%ڨqb"(mJ#!Qb| L(L|߂A
{.MSXM;)ECrN{./Ck>
o75\>Pn:]>`Eic~.zJL,R/ף2)g9*kPBm4Н8}p;ʊBp7&`Wz0ީ`o~^ endobj 6061 0 obj << /Type /Page @@ -27176,25 +26962,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6084 0 obj << -/Length 3250 -/Filter /FlateDecode ->> -stream -xڥn_!%2I.}KcMS;>-RTH*NmɕD){;ϝŁrt2bW8g/\Xiyq.g'-z<=[Bk=|ux~}s>wrҋ߽nܽ-/^zqJ$_;5녣tϞa(Myqp3>5$@*(zJ, -8>b]!#w -9/<ZҶk "E)ΓҠC5L:`{j^G%DU<CR7<.2!WE1IVzc{:!@;BqGBPګ }\̿`r~+r7A($^<o k</&m< -8v. ->b30e<F״}S48940ixT pIs
v2F@[f(1>#@q$fhw\Xm&zKϐz5l:(K=)Ew+sՠ˵,!'ɷ5?E'( -}FFt3 -7!k#(tN^@Ћ;r6$۪-jN08>"ƷzOECoNWU]3Zc>~|T<:J){wڎ^(A@H<e,(Hru$p(\n9l}WE^x+݆ó˚ -Zq_
'U(5,q"bʹv*PiFW#tX`z -U)KWr -alDH<4%9v/P9aZYg?M~Xi@=̀x -A3s5X!҉ - <C-^W%V*Ĺr*ˀ:l%G9a\.8ϋo)-x+y&ʉmNLXtkhqo#hGIoSE
2pƤ"^00*pIྠV=Є^ QŚhmF,w6vZ}F`{\UZM #ټ -UZ6L/t;r8 EThH#~ga=B+}LPpĹ؏(OY5Zȥve*O0֘;ҙM]XYAb[AbVX?Ci]QB홮]A.SArTcj(jBcX#/%;@-2~R>fd<^韟qZ2y%ёEb Z\U1˰Yk'uݰW(Ͷ$̸Iݸkd>b I=zۼÌM DwυilXuI+z5:x]f4s9Jq
xDlcEE)=C&I^R{PeM8PJ%ߞy?r3\ݧߕAS^ѺEqȃqt2@(t=,Lqh6mohy\C&.b&h:ٶd}H=$MHTjTSNf$j~w|fRy՝'2O {+ݜsGOm~[K}plH^KqY纁rc@H.FYy4axǴU -xLǜ<m1t~L'9V;bJwD\)92K0i'1&SQW@骨nS -mmjf+5!"Vho4G0uчی>Xݙ5:vY;dcGuQؗQ*D}v)iIjʧ%64鷺7J`{.UqR=>k &k.aBԪZ$u=xK!LĒf?5d{eP#=_#[XiaR`sBu8mob[~` dQ/2r)jpVjF{lЫ {LŴ'Tj:rGB /<.00UCw~1AJCwc[Bɟ~E9)3~_qPgJ6&>VjZ\6?O˱&L?EЌ
39BW?O,*ɰz*6=.Xendstream +/Length 3030 +/Filter /FlateDecode +>> +stream +xڵZYoH~$W[&vf<Y;X`0;DKDx($~&%J>(o?o$N<G%dQ~ +w8noQ0\Gz2%?W_)~8^\μo>;oqKnd.yK\^㾛'M'^?%Q:<Bu<'I*'Z*<Lxg9~
:IXνpe~lggOg3lU8A4]B{KIR\m2!ѭaZe۟9@!k2|̻5ŦBpkִ8J5>7 +ʼ_Cib}Q_:akz_}5iYq;¥40m] s?scrzA#r76A($^<j2-*VLiSX`LsC1%26+Dy;+|s%
^bGnJ4R16!>QE- +a$;my&tG>\~6tAJq +Ogخ3p@{ +PIU[^kPԐ(tK[MFyfxCEJ(ɀu]f5'|Nq9E^ocN:s/1f'.%KGţZ:֏\'NB`srwsOŲ3B6nGsb?yGnY?`Px~V7$5g +@$z"ͧ!vaU4ͪE÷ܤmK n;^ /p`(aΈWgV*+|ɺLx28A믊MCYAǏA4}ǾޢNě҃ Lc-/j98*A/x+.Ebp$Z8kq^8o#XUrAp$\5-vk,]> +d>qH!w/%@9G|~,_Dz|xL5,ͣJha(Gԡ
n4|pauIy +%#o~.:b?Ě6'a,5-7.11V +4nUSo`og?Exp@w}'!,ÐdwzɊ%"3QuGЊ8̴H3@8Vd[2J{tP3|f0F +ng|
9"i/O4P=S?g)s^~i_($oh2֨ +D5
/g/ 䨴I0EujW%^#9_ԋendstream endobj 6083 0 obj << /Type /Page @@ -27251,25 +27034,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6098 0 obj << -/Length 3252 +/Length 3151 /Filter /FlateDecode >> stream -xڭ]s6ݿBӗP3MW|_\hTH*}$(QNzӉ.bQ$\O'(]Ǔě`͉/3AY8^f{n%CO'pM'_n3;EQ_L}-Ograbջ\ݜ!
\\㺛o'n_$A־7Y1~;\ēo0\7'-듻wxLx$Z -^V&ԝgI}5
<C )h\
-Llʯٮ*7{ʎ[IC'*ap2̦3+zVu^'* -8s -τU"qc?yQ-&F,93 #&Xy0r`CBEzÕCOA\I.re{p[όѐ! \!9Oܷ*]+F{ih9<KK`)jMvv6_q0fѨo.~#V!1oqݔU&$[ٚa[2;4D4W&eIpAf%C!ingEE/=n -|I?Զ!zk(WEMUQ`@t8f-Ewnݎٻˬ)Clv}osa-dG w/> ߡ^uʺ|hF>}h(/"OVay?-|3R6&ę5*Xb;!i?}$<NJS!Ƽ^3Эw0`p8m&K>s-V -ܫr!d1?̓km, Z+r|CG}Zzt0~w:Uk´9ל|Q(!VVH}w"ͨXHTnx!E♝"k@_čq2)`]p9"z_W -ࠂn!Ҝ|gD35&cjOKt2`,csC)[!q,I+zlp$`ȫnCޤB-:y.5(
gg<0nPKNbrGF`;dN١n619Jt!> -wuͅ??tL`Lr^`dNO넴+ڸڼ\u1t]y&/)PAes{+Ū9^) -Y-'Nf/8qKE"}k>J'SN<o:Hu"P" ZWZ5vrX˳QTICEWȱ3_d,v*}#b -9uNؼk'OXU3>̃MqGUk^ɞ
M7];Lq'G@Kz. <aRő2A)XK] -_wB @:D{/b=skc>ou%
bqd -~S9R/=EU6~MٮS -j?Ng1c`@x?V* "?+n&uWCI"0ʚ^jBtzSP؉Oon{4Ϝ0I/jt -y> +xڵnH_!K(`Dk$v<-I|K +ϙ 9)oG +4`$rFdP6ʊdW%<% imc{Qw%7|Lg&TW-{#
O*v%L/p,K +XC8mQm=M +۶&o12fxӚK02E#F |bqUe"$<T[-YZA@(bd(|:)`Vu̳fF'щjwE{
u_9<XC~x}MvѶh|VG~>*݃v<ys8>+m@<|(
:m\zz?ZZpO݈A2$%j!\@ s|M 4^H1A(`
3_n +:eZf{a:i90$!!j2 +ϙS`,`PdVؗa.sqBr5E#n93opt/6ZǍQ8BrͲ/I5ø.B`7a>e Am۔M)p!ݜ&0CWn$,R[ȅ/ ۈNi1# 5o=f**5NH1EShv2uI1n?#ǢM~Ʋzg?\d1+5X\2׀;W`!D/5-C;Lˠ0^ZT PƠڱ(nQ1{b |5OTT{9S;0!2ZlK1
!:+c\5%>r侽 O-#ߙ6VsАf֜w鎴j#vwA5+vXcI)W
Y&շvCZO['\`q",|XKv +m3p)!hT"NLe#1 +557E2<vBtɢN˾7Ib0O#5I~sÃSdS-)ujC*¸^7.`|)y<=BzCTH=ŻJp;fT<$bZBQMxf*[אW(qcD +m+@.R +ÞPl?ًvϚ +8Pe22<!$ +vw#|[w[rB@H.cLl&,!Z +Wv +L/;+ZF!;لS9n6bR(2G\r"ݩ.g2^晡Dt$dS奃\EZ:I?>Eٮ6=_"puTrZFd~JdؾVsL(qtuyOlpMݐ0}57q{xR0e
gF^K^s/_\+@eBY#єq5+l!+yՖ0(.3(kNJ(tsEw>CvTMGGCGyAQũ_o%O +(d4L9a
[lG}ںmjL&N,0SƷ6SN36}v.Oƚ6Dc`O\OdTAPukapjR}iZц!82"^Q/P>wK6+?hʉ+%
>h>˂.GHӊ^7;dRSHVu?ËQu"i$ccHvו>yCYQ8G;F6 )vE}U)Zc|CHD)$>UϮaer $oc5OqA236v$J +ۡN)hR"?]m?dIO~a]\q9h3B0ӚES='yJK?_KS$$M!FCA?z5eQc߮endstream endobj 6097 0 obj << /Type /Page @@ -27311,21 +27096,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6106 0 obj << -/Length 3490 -/Filter /FlateDecode ->> -stream -xڵ]s6ݿb3deQ%w&n6v|sWD+ܵ}AJVddR$ -c?L4L?TW:. -q.~_?-8}5PxWb"V. :JN@""t"
57@|cŞMw<~Կ"*s}Zzņ[#-yhxzGxv0oeijLHw -g@TfM0ByP8ɾw!x - #21.ڲ&uXCclHʧ:pό#X5~k78x
-$OQ>Μ'\?P/$Iw71iL8GT:ki -IZG?GRGk k}Dd~Y")i!I4iBH_F]=ܜb4q'zjF6<wh^[ƷF -hie-/${^6 ` -OR/DM@8xOU@}~c
No2oP`]C@tYɑtyo>-~$ɵ&~
f73jɵo,&>28äy44v` 4aZOvaj,/ysΡ@rusTAj]RjsXfP@)uwO>80|E
TCqLK5A9%ogSSФ -H}@y}U 4zq.fSkzNI\0m,7q/^IkvfTKo4JD1kltD66zW`Vp+@0CDD0S -~ĸ<' A煹1g70KytK!W+|9>+d0́'
x"+poQCz~Vl)79dTZax̕Xn -j+Dߌj +/Length 3361 +/Filter /FlateDecode +>> +stream +xko6Ţ@qZ +"`?M&mrv-D+ܵ}AJV+L3ys"?H#?ziޝ-x"DP~G8Zׁ^\mjJJ_$/gw\ 5t.2L?xygpG9u]tr~`R%/5`IK.|bw"GJ?]xN-x+~`'0q2~ +`."qIQ^īX!9AZ֒g>9,;xVF)NA@,Z"s43&%{652^SUHQ&
w7f6oxhp7G3Em;ga +f]m̐i)BRq + +fÇ`#¡CفmKOO%H +Gqr:_%H&U_dpZa|e359K +,*m2swLPƉ >Z^䳝2<-`"pЭhF..AS<dy]f՚_aVa_2 +!Vߟ^G [GqI87WTt1_2+@BC7Kp(
;p`%Ufo;0 I_!͛1e,蔣mX.̲~sܦH105"jOb>٢}h&'J:`4I5{
2k
D]}4'Almҕ)7}$^IgW0d9XIcjٰ-"ѫfY#(LTiX{:"C_ +mI:O1h$p + Ͷ$Eqo%\ +iF1tv%OK!q͢w.)6jgN9>V+Teֹ)A`ŕJg5OaF\
HܸiC͙ 6#5CG>j@LE֣%RC4~0},X.zwݕ`wc8܊1
醵v5r_R:x2PqH$5>tKB=8NI*Z?gO@'VZR +m_P-{8֬%ƵsͻD7(ɉf3ϻuX:@}1p[ޙO'Oh J칌iZ\kmXQJOۊ}} C-L9[ARMX瑸bpȬM˪uIlZe#;D"+hOyD Di<ѿwc0*!6w6(S-H-mVXl@srz&)ꌝŘ6pT(yE@JqCݗ*&8nAH _o/o'
֛n5>3
Eq-l6QA>!ʇiW"d8Ϥæ(E!%D +Wq`a#JnO&k6xfT\4皅
1kX4_lk`l!p-0CX=0c
`jJaV&Ű|\`'A +9d~LmOú,ɇdLrss
0+faLJmqS切ǕboNC/&Թ0IA|c~Cpt4DRؓQ/̍vw!OJ hl +ő$ezģp +#a=%aX%p ACGTbg/d5qOY9m*lz20в9SyZ?ț-VQ0!շMBw#D+4ġjZ$5ijɠw7jQ^#d<>a0^3nΧ7WATҩx=s f ,-YxJstmPU'#K35Q8b; raM:5eA93gBP#ϡ~ZHRN<Dޭsic:@Si8r|c&өƗ\Ċ2]-Of<n\ .0DwnXt[gOE'c6r8s/aJ+WBCSOa+eRm̯i_O+gԯ1="B8=8
+65yxC
z+hd?fH} +-W"SۙTiTLTi +R`sȼF\i\أ$2 (!$SfhR_Ӿa'}X ~eʣj# Lk~endstream endobj 6105 0 obj << /Type /Page @@ -27367,25 +27160,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6115 0 obj << -/Length 3968 -/Filter /FlateDecode ->> -stream -xkoFP D,|y+(HKQqo^\J^AErwvvvvVQGie(@#%x0}*1#y80M翌_9y?=<hǑ 'i_Տ3=;xy /l۳Sn8?8 -hz\&Љ4I$I48e+1~$uYIQ"^ lQM|De/f51I(K[X%t
,1eԍEESZt%BǬ^B'ۛeDY~̻[(S
-
@ -(Öq'6!UCw}DY8
-G7|y\Llp-v]x{H
?@/8E_Z}9U736k+"e8fAeL -~Q5]8gvTf$JݍUdLJdL}UH<'fC07u(xL,1x|:89?}2fAjҀ`.EN`1DY"3Tjɗ)XyatU+Bث sc&Zo cKq߰>DtܐVI>Bq:NNph;4urgNΛ
M =f^=`eBNq5ܴeC]07li(=<[J[TZKFźQD>(ъ"2Y -6:#P z*~hekp=~I8DZgS{$?y*U@kuXW=jpjOWN'zx6U6 -'N5D{.ƏF"-
Tӥ3Pp -#7#w|<= -I&#
#鑆Fu`"-h;\ٓmm$& -$J3rÄFt9o~a(XtJաߺ|JM2PA[(V2NbRsr}XrCP:X Ojd~Lb$j#eh79;6]|JK14{}Q٢~[H2)[SNh"'0 B7f]zE\Y`Kg{;lʲ ?``1#$LxLYf iL*#$'qa B{7fƱm;i 1SHw!JYsBW(]I0?j(0q_/ӳwxMJ!V4H܁WAUfa2㓰*HIhD5L̮bfbIskq3F6롣=|R *_Trԍ;z4vEB"HC~thhN QY<P-xpnemqФ#V~|<&[ -tDgl0vT`BqR;Baǟ!͂0ǩ[t(
q( - Q~?{o^ -Wsz{~^4F=ƪ^l\.5lW+2>}\myɻݖc~_7!rļ!d~-ӽ s8QM}Q{V߉/La<Oz%,>}UXWe~t> -Z5=A?͇:{g!kw(Ql2fy6(Ԁ%5p˚l3pT`U;Ipn`#R{w:'ֹoƞO'>g+,O> -ܵQ<3a-_ַulm/awXݔtFy -/G +/Length 3779 +/Filter /FlateDecode +>> +stream +xkoFQ D,|DINV(ڢ`$&*.Iy-)m}:u8QN?GJ cQC}*2R?=dqwTk= w2drv&WTMB< Wofq~zq]fv.'?Ͽ=͝Lg"[ǟ%#ir|mSiz92B{}tuc5r "/}/IL{rv |IsEf,*;hA-fX@&dkhB;.H>L؎ҔHO~kxe +B+YT">]nmQO(CSM 2hzp:E]}WP#WntGFLx*=?L{#ћ ++,N&]
m2>^6[F@E-2<uZX<K&l4TdBX06 +1C-3'F)~#sK:_"g$]MH̀hÐ~vu+2Re1*~OL$NI̫0N5~D + +o
#(IP](ZrG!Xi1fXc,8:/U/=L u?pRD8,z"qJ
&C0øґ\pL"݃ŕWL7b&H:X7L2$V7i1ծ=ߋr*wo>jc}h6/"g8 +ڄ@)ƀOJ@iOi<ҩt[hB Ne0Н#PhMl^`?J!GT=lJ-VWPӲј:|VߦK wt+"v@{g>>{VӀQ#vXJ>(Kp=RŅ[zҪ_X2 +f%)5C)ekE(zr./+WcԺ.ۈII`(SL6^6 +4l_Kr
5H5EӶ{ġbMP/N~9?}͛OJsj,HA~,/Kb/bWUw^pSsWlIc{ċeΛEɿ}OWGtm,I)?5~*"*%$FhߋVt
~aZ[Ei_P9D: uO5G{Y"4G(k]skH]P[5{V\ \"e+!TZDHJ"P#ju~\F?݀ڲhV{Ƹr@Q\?FR{±&l5Dl[ӻ-q#[ +)ԑ|r}PYɥ-WY51߮D:|dNW3pWj
]ǢTJˏT:Rp'ŒXyrms5k'Ŭ{芟uyU0*xU,؋$z>e7
1b.;@U endobj 6114 0 obj << /Type /Page @@ -27414,22 +27202,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6123 0 obj << -/Length 3060 +/Length 2506 /Filter /FlateDecode >> stream -x[s8_35O}-צmk(?$ږUҙDD q0Q hX<uz}1;z"#Y첡c6j4mdK&0O&b|3MbgDFw/^9oOKs;Mtt2NbdϣOG8}6g^7fr?kRN6IT=P8tép|4j) -Y$
5k",LC#-RիjM`<6|d%PO^}mϞkB`
~!?nOIpJ^L<XNEuL7eqC?#
q%4۬NM!Vo7k9UPqtQ0.o~ā\]* -xخX0
B1U|L !G
og˗!E=O.Jѿ r*E1l|AFU
FLT俺u+ D5Hwj8u19.plZI9?Uq"9?nst`ƽgb^ @щ!haD9Йpz\]H -!d5
EP5:n$/{kH>kx#|m\]iB@ceHk!҇ʀiPqf"{o㨅Je'CJ:3b($Qx=O6oN4DL5f<ӁMK#x}K - -j -X &of2((+9UB,5|K]tS^͝Yaf?A:%T㌶q~;H`pWHPTCzn)E;~ɿ"4ZI82"fQO V^xUGJ~'a8`
U'ͻgoXcئĚukb\?{T95Ue^>?i7?Lm(M~Ymܑ"y=E.I
BZgwuI%t>l.8;vpNEn#E] -aq}Avw;O;舅&xxp}=GifTcEsllRֹ/EzbP\m8<`"Y%X5 >ָ-ց+r.qLo0<WMXuWŅطee`r5O}baݑûUZQs -[1R}/5=.qb< ->G͏H?V]_V(PY̛T[FU&V -OK\܌|EF\04k[D^!ʑ{?/ -;ª:gm;b-'2{q]7T;i[Z)-AR
GynQo'5^di=MB?)fYgXdܾubmoh0Kendstream +x[[s۶~Kg& +zk"M>_Z뾲`y~x W?ÿ`(P`ˁ'osVSw65ixdh{e&O{Ё%df{ck]X*KxJONkR4 Ov~4~>AF J/Qt'ip\]`lBj
.h֕1Y)"0g]n$ᷓ%1T4.+?ʣ~ +")蟁KLUk]I[xV'tom
apP +-3Y8֤pdm|E!RᯈJYsQX_ +}%*wq-] p/}5=`PBxq2>`h
AhT>C^)i_-Qj(6F|k\n>6,tu6c~Mro{X[DXMpw+:rH:6?poQtng]oNWQ:x!ӹv̨7#=mDyKKwbsd9# +MIFe(Xw&^ g|C1u?kP3"]WC|iE焏?-i'2NK^]U>}
LؾrUÃk<B+~O_9;22`.WL̮dX<qNquu瞁wq:nMqEGik|'Y*$gۖ+O@r'Y2;)5f΅[!Pkϰph Ih.(-K8㌶m3ˌg +@L'NO!"ݍ'qq<ͿCk=YlЪf
flmpDE/ +lJm e (*dK|ؐk1yCLg:f<U}u'e6U쿙Q,a@(Y-"mZ,K3 +C +m)yo`Y8F@ސ3M(;~+&\$a
PqCH*5Ao!Gx1`?Dcʇu1`lQ*8jzh)X𭮭L>Cf_f23-)/pfğHU"r.Q7a:X^*o5gltҘ,oHZCZMʜB*ƫt> v8i"pRr} NUI̗e0gtشyN f`V鸞1ݲ|_zDn$D6~|i\[ endobj 6122 0 obj << /Type /Page @@ -27465,22 +27251,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6132 0 obj << -/Length 3695 +/Length 3545 /Filter /FlateDecode >> stream -xڭZ[s۶~t&Si&b-'QҴJӞD[PKRu^ -H/$}/ŧ
p+؛WU>ﰿh]۬1]*n.&qu]o3"|w0):~Wu.=ǖtU0h^3nIOz[sg^utƦjkic
nO_9Mi1]A)Tk`A).Wq.LCWe3qW%x{Ytᢚ ͉c_3WV&;}a2g#P\ߝa{4m7Ys7-uέN$Z2*V7?8&o@OBL%lD$5xg,5-sylJMZ^p]ga3W_xp:V̠4:g%B/#tBo+6o4pȘz| -4WZήXW9iZnjt+(5LaiUj,zRtD 5J.Ca(ꪗ;+9)^9G!pnW}<I:&,\]WT7}`!M.jp𩧔Y`G27,Cٌe}lıxpURzm;tc(T^; -9G[1oѕh:osK^ -]as5 -i]kqD3Qnj,?ϨkH3m9!=^(?F0I*ILDqRn4zHz;}5e\6㰉F*>ynzQk(Qk}x
c/ -ȰJ_#SڊR`8֛:i-vhP|I~b=&-hvQu{}i -\&49/(iPb楨GK7vdkO;.@yQ9T:ˡ>Ã]!xo>ߑd9הci'ty'WDF[S~sk(ߖ*w-''d$uC/Ni8y2RJ$s:F?=*7[JHNS&wnI4x֬K$S@Sȝ;=yS -gP sQrmJr:X*G%?@T%"H{~̂䱼&5i
-}/ -{.2X&Ѥ:D^`%TErYu`Kg9vu>j'%t8) 9:dNYpQ'Y:wiGL@(6d-c - oj3,=̃/ c1)7Fi?= {+e73#2DrGRoQd9pWz8ս++Ѯ4<HaX`巳D6]Q̌o9ecT7qP!o[odNtI*A=z],Ma*^}Z6)#2V|!
Ѧ.\XxtQ`qJ1bi*l+N2ZK4&4KI*`}/|1\>ʶiLv{Ltj$yqrhbAԋCyG>cib/JzLsax0Hk>`̕&endstream +xZ[s6~t&Sy&b-(i˶}`$"]Dٞfp.9'&I2ĉdLVr=NOG!vkym&R?,irw.әr(tTL?LL/pC.Ndz97:M`/O_~2_:;)OEɯ5ߓi24lOT(PI]/O'TOMx3%BOFd&}/I\#^pzߟj
]5ru-Gf
Uqu9(4z+yM!{+u9ӬAkMItu2ӬGJMtc
nqoP%4
)sŪskPaOq;pa*wwEYr˚iO7.w19qvf#Ud/LF|nd +绋sl&kr.AFeιuO%buc"T_B潑HKMDRwR.oͦۤE +$q>\ +Z]dz`sW +8Z*+roK(]|^"A^H'j^Y{ +sE4~d[qw1OFĕgeb%4U
s
lއzbGFAU~Džc]9.OPyBQ\;'uaGj:x\W
űia!+DO9}]62[U]~=(`KlϘn襃Xj7ƔMWA;ˣ(]l+Frciط LJ=/>f^bFkNO9p2xF$[ttS'އΙ7ˏ"?&p1̜P8Z +`̱~6b_DZ{JG;J&G K&A7tcuwYj +`1f1([6k?M!N=Odn嶄Dx +; 2,`<7xsvh5HyijnH^ڈFFx?rU%AE~t8za7+9~jB80Drmt/3lCE6s=ANptB,M:ۺu!lyK'A\4GBde2 YkEI
XϭїC`h7uV6Ync }XAW9`3?&i\bai< +cbl.6͓<Ǯ)4"g?= {+e74Ǒ{) endobj 6131 0 obj << /Type /Page @@ -27498,27 +27282,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6136 0 obj << -/Length 3472 -/Filter /FlateDecode ->> -stream -x\YoF~+Q}XxǞ$cw$$y-ZF3~͖xؙЉ"GGfLFQ̙Q0Z@WGܶ&SͿgGǯC5Kd4h?_9}LcdElWdᒚ\~xwgTp~rqE_Asw1<ls' я?9L룀$=s8ToL+iWGWGqNW$SHpQp1\0rYi
"g:~_F,Hj-RժjjMp^P>6ʒ(\{uTx}MQm7ۡS!NtZ_İǷnW%o7YAOESͨ,,"Xn#u}OLE:n\c =# -T人u"2"<y@9M˴S5!Tǟӱ^ad|i ua~JBغuԶZޤ2_@I:30viֳcZ] cBL@c7:Gӹseϡ.LM -5_UA4`ځ`Bv,khش0 $L?3v= -Vq*bE)I -"=Ȩbg*%?d1ԮgFc%e]dUxjb&"ڸss.@S4},:x<뛾?ܐ ݿBŤP^9m'~O?Klr8-%Ii
/m1Gq^r< -t^ɧDBH>)#4DvCxJ~"3qҲ{#=ca!8!3 mW}1F%X5ƅdB -
w -9*wGWS]6r'X+oXPQyg) -@G. -'l'`./Ir7g?[Wh$o*a;R+ZS.cF4y](a:5K b.wX;?yY[l+^p5;;o"!
scZd푺s;/o|vc8 -I`c' ЛmR]`rCeN-.
9mHL:VZJH?ZUƎb1}Euc.隟̯A>WD4^
k&Ɖ13w~Js[~^TW֜Cji<3TڥeY?9:[蘿sU;2Z+2g;0IO
m\/c#=/7)|NX6`aMO|JU=&[EDá,L+s'z -1<JVI#u -`JW9=t#kkeeje6,m +{\Ә-rԢ)*,XaP1L5:XشI,/@<"?V\Fh~oD wvz6$|`$k]s\ -C)'F\`Y@I=Xe@~eX"R9O|mnu҈.Ms"WHĪm:nk7(|RnپvB%nDs9X1)H=V -[N/yif0\{2dж -TLȩoК~ۍoZD<䀖o+`\p<7.ܸ`2tJkOf? -~7,G^qگwև*PuQh"H|ޤk(_[;Xl12!L<QJ IXƐXֱ_ɨRP6/SNXҶ-Rj髺@V&LǺRamM˺,(ӡ&l&*G꘦YIhHªEE:/u
!zU֕,I&pYʿtxAAIlotendstream +/Length 2868 +/Filter /FlateDecode +>> +stream +x\oFB(PTk. +Ix_fo|` +;x6vplߓ_QqeOOVSh)@u9·4~u>_!_JqwbRؠf]$ ,P|ݰ}"C7ΓE,4}#:Ö(TSs }J|92-kƎPs +>OPX~d0[/ ++)pcZt,4e[43L$N܇lW`Sl_fh +'a~ +DwhP\~ p/}5B(giI< +8KY?`وOg 3Y5) QoyzتGԏ7Y +#
5-ac`Rt`)XB];U +(4*%ITC"6-ffu<g?
=ۗ>RfwQxf{°ß}߆ +-$<O[(ř. +L),/lW.%fw`#x"̸3u=1\O^d)@~D[[&uf1|¿X@qPQIN=T\Þ3;Ful cmH+.}*JtW +!\8b[2B*lfn'Vc
Cw |82c@[ +[VEq3섇| +$a|xjt]2Kx7n1{>XIt +SOi7X +.*ox;KtPuMb6wЗ` d~j+ASkT]5RSGoZ4BY6w}Ϗ^]v9.}Ԫ^~5<=EBj(nʻ0h1Rs2H{@p֎t<Jߢh>ї;Fdq>[ߝDITF&6]_rfu4H!mH
Ek79i䥫ב5zg +sqx%zZ{\5JZ +չaq[V{I(k~F"y|;ɎI=!X endobj 6135 0 obj << /Type /Page @@ -27553,20 +27338,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6144 0 obj << -/Length 3332 +/Length 3152 /Filter /FlateDecode >> stream -xڥrF]_}2X -E/~P;d'HWײ;vW[(wc4t8'~A&1G8*g -:iQ?w|cdM\[+Yn*>K±5RW3&P|/r0E6fR` k, -8A$` qk4tSlcl]SryJB&F -,iLZ[vs -diEp<?-c(+@@~4vl"QdXYX7Db7R]cS&EjE9#8eLi_^bb`P.0 -=m̗DΩKqU;A>
Y
`gkH #=$ !utsΘ2 ֽރԤL -A>b5K
fqfD_0v&,v# y0*|+RZJY4vtOc}V10g=:m'*[^+kjJ6hm|:2~y}r }26}*j]^GMa۪<5 )IྔxAwn3O}%l?鲠2hHzOJ$w:d./K-%'|0ECb<L]~̸H!5k|'_p@e DZo'.FASzeVU&^6c5f/"ʷIb(NImж,Bk6EWx7͍2Jlvh u:@j!eF_6(°,EfcIPM^Ƴ&Pl4t6fR+_ZEIӤ-Zź2K[s{:-Apk\9a:Jccpm{=d?S}&}3YڅJܱǨf=H܌ñxЪ0eD76GXK#uQaD`\Q$$=Vvi\$$9_J]G:iBIRpEO0AuS^%`Ȫog%!3ƭs?f}`$_>CINmsf!]RDT?Ɖ??播HRB@A)ƑAmLU0#F f/LQc|QpǤAsΒ|ё٫TNi//_h"kH{2ُ4M8F(y݂?pċ35j<1V
*9 -*M*5pY/u-!~Zl.<xRI9E:[~1 - -ݱ`Cbg2{eRP(3rk,Җ55r #$SK{fJs'EoVr5!!]\O +xZYoV~<*7'u2neu2A[`(8H⨿gD%F``r,Wȁ?w'(vm?G3ZBϛ3WF8#e;a]/g_j:v$
.~^vz~<}=DQl|1vot<q(c/n^_slzc.pti$eǣ|>gr~ng*@R/>ˬ}jij.<Q^h{|ǎc54s؍8*;k/jgmwUp"eN
wӬ-\*ċ,NmU;^lKha +e:+ʰ{HIHhFvx$H>pmsm=s(л-HDh~F8֫uMr1Jdmt
r[&9qst\}=6k{9YHŪDliY4pɻQd7㖶aVtYQ.cy`l;bVZ7\,` +/TƱo˔RϖDJ, 9^K%WTmDxǍ87]qEjAY/:7,Rl5Kn})lۍW+Wԫ2rԬ֤T?CyVSY+;_i"6h}Yn*Bݿ'%9
|p:{qi +>)S=C8ҬwxA3Zm$`0#a,r8{&-I5IE˼i 7UB%t<!G\aQn"+h6gHµݼ:G\vpmGx` &Im#M|Gg=ox|#1'l{vanh +CAɻEIj6xTpbxFwǕ l]A킾
p[Co&[1s_%kMS~p
2*%aVR4ZÌ\?<v:y¼ڐA +RFwV ++)lt9l2Z.ـ^0tta̯lIX H|;ABc*q` 9tG Uw;?~e%[ +P_W|@AD)$0EbE(ȋh-e#%еLvkк![콾0{P̅#U}{ +y'0ZTDE5j +%##9S{?xs~-cp +%%.q`3[/yM$qZHp$ +RBR% ;PKɾ-2pgK.Be^RLJ!,۶5qƲA2{dza"XOi%+u*?+:tWtfE}#{.<Esk$98_k)R6|XeR:\Z*m<Rվx73!3o!(JF,|V4߱B;_UM0;7i+(eXfQD0qiG:|4na#{g?SRV%ZC>Zro\1G9f=nHFa\U +%V)Jm1;p{ eI/i@bAjy>6840ɣE?X6ؗz/ѽ]6=Tq@Y"uKs;3.wx,IMDh#|Y̤zu~K[K\Zc(LقucAA J!=+f~ϢD%s#_#~dm#|4wF"8?@aky**cu:te@Zd?H} > ADHy⒬ud-;m!54$7<
MGv).sJT+^. |3T^qr0tC?Z_.U916k|dp8S;Rd-1r?*+3Oi~37g<^kߢZsWEȵ -W/|@ endobj 6143 0 obj << /Type /Page @@ -27595,21 +27383,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6150 0 obj << -/Length 1583 +/Length 1551 /Filter /FlateDecode >> stream -xڥWYoF~ׯK -7\ -4q&($HI)CR_9viVaqvfY',ʽ4BeBo;ogR$={hO"so+oY~_{X^|J)?bi濾KWY_`$(x^^ĥ@s .ohݨ,Ѵ/Bc|Bwq($lf`fv=m{csU&L=v'Q.tT%"cE_uwU7(_gkx/izD9QIjNT߯a+og -撄i4n@1m"ϪGgoA"Bf)Y4}I#qmUa(K
ib7@|y-:K1m1zmuQaX]UwCfXـ=( -'f%=2zE[$(i[wPQ/Vt5Shzsb2z@MGrDx5 -`K"#/Sӌwi攽GG*wxAbɘp0Zx~',NeD0+)ƀ:4qy)vx;s3Gb`){n]
*$.vpߢZJXqx4lR0C5[ -CԡEksä,U džFd'ƫjX -m.tzuEY[BH -y"+ӮX\}k)$F+[:n`Ɇ>R/lHr.60Jh8]N+"Nc -pҲ!.t
<-k*I\E8dyG -[!G/,L7Q}=0S<<#Vrru3gAXHH +xڥWY6~K +Jt^I'r5CӕN XaPx˿J\9GJ殷U$ªrgWgw{,ۢOzh9.oأ
c>5nm؈Q(>7vfx
8{<0PT0&1"?!)0=!&BRq +["Xrk㢔n4x<F%[Lr2lie7Any!M+yIk4O" +eÀuvwgw8J +gϾ۩^5 +. +vJ
RF{3oendstream endobj 6149 0 obj << /Type /Page @@ -27627,22 +27411,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6155 0 obj << -/Length 3086 +/Length 2907 /Filter /FlateDecode >> stream -xڭɒ6_#Ue |'q3TIl-L_?o IT5"oԋ"UhEiel_-J͕]% -m:#wR+c5¼~(TIb7w#etHroA*27+$mї|LwU?ta?n~VUy7aljAA<
_f$RhL\Q"
DUreuQ쐔xyeA{,`PoxiWAK<uu ϼX5v7eZ;ODP -$XÝ}\J~9| - -C|HwTIGQEaʱk<uzh;G`r%GwBA|F)V#p9KCյ-a%$VXըu߲6CP@G]{ -[8y@%cjQ}е#@ZWo3Wm9VPBC6V6F7T,s>IքmxÂ!D<`)s,:!w[6eA9]Ͱ:F(}7:^'5Ȋf
RAF3h|A8īd3CxxYG6T{VIʲibIUDpU*QQj䭾|/<4VifQ=5$=(@쇥yC&|XƱԃ).7CΓY\ePhIODhP4EkrT%9P6ʟ["d -IN*.4Xyn{&'h^/@Xƻ3C1gPa$E -**2BGL+P&b8t(i6B -z
C"}1La KXw./MOX`0A8,!?@4~&fpCVOE 8saX@ϼ"=wٟWX;U]}_~eqwVw79VڠQ$\mpe%ezd\I~;Gl%3-9jPQnWH!DUo)l%TK*ǻBpOcX9؆Tʹ6J')j=x+gSDJg,(d Sۃ`R|ѣK`'Q^zk;^HL1^O0" -._7GՒ,g.}<$R9S3 K -fjl^ґ'|'EҒrlߋy-^nb{wrvYB=**)ysy f@5.RPk!(ॖIBq;Ah -<+ h˔HЁ D -sPEor&F%C"3Qxza;endstream +xڵZ[F~_G +knݚ7(,IHeRyH5 +Y$y.=9ݒlkj) +tLob?ffl_-tZ(~E4\U J`TT/V*M..ߪ`?I!6y*8KW+$uSMmy}iܛW~ +]Qzz9OK55/u5~W5uxtL1ڕr[/Um_T0ɼqRj#Kx}#
8uKȣܗ5fנ] +([a"?,H^Q@EC?j|D}z~E' +QUr>eΕ5:#Io#nfoV X~Q{{k;Jo}^/ ;jGSSA0E?_#7 +2:2i +mTB'`O^@״=GpyD \^!KGlH-3I(r}YAB3ɫi`gNO`y-]쿗;i +V]Φ͓IB:DGJ<W'FfdOZGMaUoNy?,@vڭ +W(|]d(FNߧ90}*$KK-WФﳔ1
D_KAeM0u$!rxo:?pHf{s"FSyLcu +L"iV`Hy
ywA}IJp>8Pv"){KJ .x
Fo$ +7ɱ%?;ind3лKIlW#ڼ{4qe
9Y*OچK$zI'3imkBaRm_5tp_žGw%NLU6o%U$hbq5sݲ|۲fKP%ڈJ^ +HNZ+yNZ(*NM|_;Ռ&endstream endobj 6154 0 obj << /Type /Page @@ -27680,17 +27465,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6161 0 obj << -/Length 3645 +/Length 3378 /Filter /FlateDecode >> stream -xڭZo6_a*YY''N)./ mj%UJ7_v{9P܃< ]OD~3zyb%$Qp<7't?_8o~Yt}ѡ{ĹH=}{k|G9.Vʹ'z|y.t|^BVk"#>\Jne)Sϳ_~Xg3<{톁/ٿ-+y.~↉?&I)Pq蹡>@W6]sjz9HՖHMTzwJ;x6uY@gp_I~aCr7^Үgf际f6t#C~<yP/YJ=ؙ >dJ7a
w/k=]/kZ-ȞnvF.nװ[/ᳺnP#;|:K~F\h;;p4ru]OZH[}>?66}C[;$o9!zʺW.FQC
O%u\:p4[l6_x̰ -a2H?]}XX2MVv6\7Ѡ'zeIFwnQ7kaSz9& tUL[^W-`wIش2=V^=U(J]}ƈ0D(#=rt~;+X8$;*M]B LIj/h"(q#Is' -/F[zk(À(_WƛxʊZE㿰EN
=ͣ d1ГlMDڍx23$~Z->c&
"8P!D74Z-tR;# -\1[ERt/nyq2hdͦ( [~uGk+c/ -^m6}fi؎'"u]h\?τ?6?,-uU3qCѝ@1MnFCrI?́}ˤ6- U>jA>mq\ڧkLvnC}r^!9tk1pczjs8o?zF|DeH[|X6-M/ruq;@|̓ՐJ{=#[N{LSs}@5QbPR=8xΊm]GH9]|1IRfQK.z25\X άMDyD'7c0]n*Ce(BfC:xiI*0s[ޤS<r# -!IWIBA6*eR2 K}YatAPB]a[7I)<V9ECh("
3) -?㻹kbkT0k_gƯr=¯\yܭjr#dk!_[=F_am_C鶙Y҃XAxC<Ln{ +xZ[o6~0,ONnSlo mj$V#J=7RH6I7!!y.9u?u8QN|w@ߏBzyutc+MꚆ\8~:zdv=q\$s[_]>Q9~P(F9P@^?q>^՛Wwh{䷫^_MnidG<W=W(ZˣZ*@BF{nTTr*o+`5Go[>TRGu%ˇ{QzI
|gۺ,SA=<؏7 + t6hq~a͋5`5S8$^&WOeEUoYŞ[f>-Tӝ=K癬<۷Jk2oYrx~2H68삻}qy$4WI> #WG|$!qrHKLyNO
4haˮmjh|9.ȱ~uW6yCGRv5ܭ7{Lʚ+Ф^ +тZM
)f %&G+UMe#NGc$J٫`G- +}ڻlHsa\5.'>m━,Nh)!(42(gw|J5G4=! +Uf +PESx|N&P?aOF=$[Ɇ1i'0yE*dǽkNcKkp[wrMߍAgHUx@ŧ%Ld f +vȺlbɠԒps1C<8V^Ѝ<)`7a
ۨM BO>6\x
ls<=<)n +#U +R 4-ƚA} ++iqqbLx횁gbr6Vvaӧ~N;*S4hrblj8۔,w<VxLNӯ+n$v8`|"֘ӵP9^ؤF`I ztj=Pwؕ
(U'2SDp xx{ʄ0|8k>NlOxo\:XDI)(qrk_~zg +ٲW2sRVU(~wOjNep>sj +wM{ ɕ?dVC5z$O~uEefW2]Nڄ:':r`c}ʡ7Ѯ>F5dO$Ǹe[?ud*4O?qn fZendstream endobj 6160 0 obj << /Type /Page @@ -27719,22 +27508,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6167 0 obj << -/Length 3589 +/Length 3429 /Filter /FlateDecode >> stream -xڥZے6}ЛE~ک];k+OIHTx}^$oՖCh
&r=.f;y#,ۻ8\zb{lj0Rw秷~>|\RNUl_y/n}w~Ƨ.nOpH>¯mO -ڒx/w[ LQ~[ayJ7g\wJOwmpoR6nQm#k@A/s#/}zwXh㴰aR%NqW-θj=t'CC^cGo/~T<y?<?SoT4|=40{yBiAsJֺqRZ>?dAnk$Z6OHC!8;^J|byRJ?vF&~n*c/v={H97W3^oRt*uP1qhx@%Ra50 -p\&uu~gu%!8_(°օ۪mG&*ekbA:bys?/pxEtM2Iӳs5PּF8 u`2é`Egf}Οc\aܦ1q5 BE(nR 3pauYemuFc8qyC=?mh^ysMiI|[g#2eZe?q7)A9>s.sĎ -cBVQ$>Z'Wc6<^/kԥ>K|\_px6;4"#l0\8Ҋmյyty ] -1SKVX6ҧ9_iJC?uoSƆ}>p79%d;_=41+kD6/Ԫ=?#R-1%}{&gFA1U%yxDQ -(w2{xk"Df8 -aaCKK:D- -+0x
v -w?1W<|y@#GĠ'"%+v4C -6AfU~ܤX,ґtĻ|phn(
&9%al堵N - f$=0d2cq}u{B*ڧ<c}&ªԛ).T 0X\c
a*ކVD#UVM곇Δ/juy-6 )j-&T(½D9qEܢZ7kC7]C(9yFJ1,""*/J=J`wiNv5x&ZMvC9YlEaߥT>WyIxGŬYte#?pTf.8`=Xq=!
|@&Vhe%Op3@?V݅o97Ǻy*8DYQh[&L^4gKl;e#H3*A 2teh'LS`NUo,I˚/yi=>1d&`Z!Ԁ̉u6JMLZ54B*Ɩu4B?@ -Ec{> Whv!J9T@jqbU7J⾫?cARcz?>2܁1j:zx軜7D& YN;As"SWIPv|.dlcTcTĪ``P{=|`O#I=U9@RߗFL{1#t}dZe*iOt0I~ҹu*HWOVl 0p/7J=Q⊚xr㏐o&iLu/5zվO+Ӧz
Tx3
]$Qznzh#2? +xZ[~_7d;uc+OI*Do3V-07zz_ltnz~e +]/f*Wf^iȮvwDz$:
֗/>ܭ}{| +;o +ɏ7tgtFʍB%Ǜ7p_Y~8XmihGZy_o(uz{Љ"Q聻jn_庯NfGGKdί^c}?i۪u|,aMU#^K^Az6>(
^jǖ&h?#
ŷn.sVv#i|^.2
5gv +|(jL( +!KRs4r,tY*1|JЖ_ph5<6Ùo9$~4Ƕ{8~\0 ęf(SnԈd[ʋMPJDO,>m$) i8-E:NR +ykmŞȴFiXC:̤d7-5C/a,ąPK
``dz!8W;)Ɍ8悇*;9} +{qcOl(*@Z58. !' ӅD`b8DS.wKz3fL.-Ne-z?3lOR=-t2-r-CG po +:L^%rn0}m5FBaI[/d>ϻ(4h +c+|9Ec99"CpW2坝/(ESь /2u3}ʭwƴp\w`g8tR?r 0PD<S?
PZaT:uA5S^~6 :e$q[7u$<
f*?sjNxέɻ^T6B-D[y~4 +]?K-=cTFlkE#M*4}|kTDdBUl ـ8K@Kig9]ԮIHEԏ0h &ȾiB BSYI&QxQ|[RrE +mc vhN]-*`:400KX톿:O䅢|L͑gy?嘯l`>\=*J8 +jWHDC${)?a.)Qy}7]A wFDQ{Y1-! +VXJsqrYk3WM%7?ɫ @~?m)endstream endobj 6166 0 obj << /Type /Page @@ -27764,26 +27555,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6173 0 obj << -/Length 4515 -/Filter /FlateDecode ->> -stream -xڭ[Yܶ~_oVyh -$IO?_6Z@%&w [뻻83w8u<ʃ¾HꞆ_t_o;OelvKM"QCp?)3՚IbOL.`Tr%QDNe\_ۘXmiw;t>oG(oRz[iphiabDFm#ǡ"-DV@ Mb*hY۶
]{;|:SP7vP`K}ĕeA
̖X>緩A
M:?5*7+kjXF$q*
vb Sԟ㲓&Ҟa-wYiڎ?,%Zt,~@iXzyAV¾>؉fgYX~H - -;@Pז4}/Z" 3OvձIT;-դ
80MLQ@z!WЁApJB8:7/t$jZ.`Bi=Xdk\&eLYG1v=S -YZkZ̑v
[@:Uv'dܗ@7&x`v*=SY6x7D[2Ml;2.i
~!.Wt
?<6VP2=?9z
˴+ܿ0Vpi -ycmEq-
l-YbIh__TiRXG&/l%P$~/'iH|b6p#|<bVwK,r/>!WJ-rME<P
4.ARlrm;NY2\]lwNESpTG,8Kd]j]u֝k4).soywn/N(|>ߪ;kQz%.j^&ğ23XݡI.>=q]dѡˬ@@XvԸ -̖nmƶecHZNot&XSˇ1CglTF &+6ng,O]܊Bw'|8fJ>Tg#vo`slQFLTN`]F9q.L21{Jg'nEB]X$f-ë;9ZO/:C| wT [[)gF`'c?Jc {3MVLR1}(3Z.ƫjAv=*BJP'jU~1fcim<b{/*VG;_~wwtrASx`y65wT)5\9Ѥ;w,#Qp1 -\hg"vա>|_[p#Σ<6->3+*C،v;;!B*] Ø mBS1LOH#"18 MI0__ MXq6@?%/z@Do6<V{Xps[$ -7+ -eF?)DͳPuZ[u+#aҫhi]z -4crHs_N!ڌ=: -H|f[uRklI]dYdjƝ571EE-=[8$X%uqE:[)^ <4g$W)]f(@g>F-XgӒ(Ng< ,K@TC~nH"eaSHmFZ+֙*@oV#yQDW`ҒȤR -B2J&^Qe\nz
-,kqZ+E(:-B9)]fPjXcnVT|YR41ф 'CiS9`*¥eaì -{B2{^߳PJD`X.-7ݹB\X4< -<:OECV#u&e&H33eYy:=N*Ͷ>|Y.ue0D!i -S@|g1pr`Q +/Length 4036 +/Filter /FlateDecode +>> +stream +x[Y6~_1oҲDQ}p'vuI) nM`4cϿߺHQYl %Hu|UԄ:B?ʲ*>@WP>^=*aA~#g/߾fEbfM_&7
?fz?z/ʼ_ݾ^T["FuիF:W?\a'\~g9<>]8c{}տ,ܧyԊ06з?˴JHݍJwrѡ~ lieo
ǒ){mqgz4VZK;^5<QvUIAczm#TPv$-"+ hni[
][o~ ?J/⤃>T
3q|ʺ +T'Y@uCD)@6#(](c{V
U4UYPf6 +win =.9.:i"h{J|5woBj;~WT5ϧ%Z\SuT,5bڟ}f +sQg{v_|8;&sRB-' r
MӾ?xr=p'
:]9ݣ[i =J +;@Rxfj/j<SNETZ5o+edUDJ%Gs+͆_3C8:G:Nz.`2+`c;LcEu+Bcc3@W}&ֈNrĂPV vEZ{n!xp]tayN.ӁNW>~|#_U2|IW-ib/%)ypxFvGfȊ/-H{R0KwgY;+* +GiaMb ȵP/?P4VIߌ_Rdq)m$K@]nGdMxl;Y7~:vUA^;y!0e$@oFj_tYy_(ʗQGJ6Ax<w2yR8HIH {wpV}<z+g!J"lQ'ԥac`/Ɏ|HC).OѠ~pP^:8 +lBisgeKme@k2 +wFCϳpduF02Yÿ0ᮭ2[7<D6ݔp-9X(4cbW9Q3 0ʡ̏A_YbAƈ v, }:%WBߕhPOZxֈ&aFc2>I+M
-"])4K +}J7N[UxYHu# +NY"o'$_AĴd'y@RZ@EЕ`Ǔp;1TS>F˧I#3HЀ b0gjӿ&=aan쵮</dHMi)x_bk8;"$dmsBRUt SizkȸaAib5(e$pGn30͆~ծ|(X6!!{k:NE&A<Ù@W&8`ݲݦ{4|NW7w^˿̮mDEX]/F=~DE[仁ۊCQ5.7(G$R;.ۡxjm%Ljsׂ73t}-A(<B,TܙQ+JHf$}CU.:7Bƫ${,ՊtIGRhB% 1"_i3@\\ǽt2+RXplQ]/C!92z}WxXu+ێeRzI%mmk@'Wa$!a5N@FñT_暔B+?q!i@ˏR|.bsUp5msL0 +sjS1>P>{j7*F6ŪL{,zĸYRSLpjhɪ +Ys2JN$UkaRPY^MR=weH;]wT +8p?yRNҶ_e5JRvP-8ϕ2*K&Rɼp62Y h\I сKsk-:٢먭ӦL>\[ç{y!lo4uל㿗gnQr>h5I|BMe`!
Mx\U;0qeV9EJ%STtdn)1Lr&,q;2`N]5e`hT(D+ZH`2ّ1 ?dn0<.lѧ\Zo:XaqES?8:V"Q}sߋm~%Z5Ygp'qo5d +D&l#Eq +xkkR?Nƪ/nG g.g/A·kzNY(ߎ}LL'&;we^+
*5ƩM5?P%g
BA +v!~68\b"6gvG2YTrS(īX8D +:@ykM,VwNR|N Hqć2x8I&`J-R +Lh,$؏buɵiF"_럌`rڇ o~n̍&U~BHgxۀ𩬋[I*g4d=hC+*AW'w:\ka endobj 6172 0 obj << /Type /Page @@ -27800,21 +27593,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6177 0 obj << -/Length 4278 -/Filter /FlateDecode ->> -stream -x[Ys~RU xnjf7d1dBKĘ$(*C" 48>h -<o~b?VkjUyĥ߽~W}X ^FxLnfޏxvuOd?yoGnq?|nao_
ۏ#-ͧڮ.Vs̏3}L*vI48hW0˽摟pV%#mX`u_7HS#aZ]O.
3UsG(nZCtBҖ*y'^QpXM= -͏we_ݔJv,3_hg$tuОNf-"zYq Me/z!1; lJG~ޖ+h?.РmK^zf=z} @E][LY -Gž9XPL{w\Cš:V]=z`i+Su?܉оY<T<++=CI(y<q-<hX*S\밂^-"OHP4о)7'pʛS)CKk\,{Q'נbƵn0tߖ,$W9=+gVbU3g͗!Y4l\#Ok3_EnL1e$.DFf81[9@10@RQ]*@[7۞ -~LEk
"D,{D2t\KOϺ
0MuNѦaUHPCY@5cFf"*$5C"UC_fФ -WY:"mCgغ^zW'3k7hX(iX &h]X]!Oh(aH|~Qr9|"b6/[g*R5=j0Wdzwbr\32:G:cIn;t^GbK//H&eD>M1f'WYn*Bh4f1]2%`r>)̳5C/~G֦L0(^
ӏ_Д|^8r -\(~J:|M ip)h -p1<ЩCӗw'3? #7Q=:~/DJP&Zj.j༷T6!);^e4|y1 -9,yG[6XD'xI"`n&NƆנ jWTGAQLeB5a5{4sg2\l̕˘/(d`D!Ղ( -|D!LxIk~?DBs%)F<'\z07IC*'1 0>tv.W='j"@NY -<?'+98 +/Length 3904 +/Filter /FlateDecode +>> +stream +xkoF,\ZCmk\C.%LIyr)>Es(}kgF2?u'aY8/Wr=_(.M v}s}\(,zC ^r2@'bey"7˟^/T-|TfT;(\Jo~~-\<?_y}/qkykoK4m~x!\I^Da\PBUabb7.f>sɣfeynVT2REn;PqQMy#5<`%ncG +2kXDvjo0m/ ]5;O$
[ng8*eW}ځ +TO̜LDVS߀t$4ၧbW͙3s M`_'*2.(JTDPRɟB&!~R +A9lZDWqج4-^v'çRDS07*N˗:-@٦>lIռmT}p/Ke +¦rs|a\,G0KTΒiB"Fh%#cq۽3wI8k)Uv 竁[H=UVZ
ʧ;|xJ+:u/'lmv\l&HKbd#۹WblUHq|lؚ5Ϩ4p+,3h1s+HGb'=g.wߵӋ51)noW.'0&ao-\"lF2p}0\vg4q¦|ۭ{4<RXAپxkec:m6/=A74U)%[L/ +]F>7\(\A.++yQ?koqyT;j& *z(9XL=Y?|MD#) +')X'`r}<B=<uoF|8`qD# +; 3]u<W4/Av,P +UbIcŎ)XWStYfZe*$iNL<o +A_fZxnmYxӧ4퉫Z^#*ZwݳJ<^qɢo.
֎+փSE +؍Rr؊kx$R3/Q/%e0`<K|RЋU՜U +9~z{y։`K];H8EJ7ڦj#<OYMU|Vy
M_xX<?ٸ_NO +HN]呝tqF*HpEaESqKm1^9]I#X>FE[Y7{ +ˢ/Jaۧ(,(jh؟S=A,h04i0
fch4Jȋ
jQ=j ƣ"G}30ɵ/:Y@13B# ++JJOƊ6PEN۷}^8Pl+MENXȮgxw<=V +!zZ~&Ϙ <ϙ +kOaQ6|/Ni: +;L?K +떿fP`?r>H1 +g<o}:v0t\+Ia[qn*9v䅇88Q0W鶽-&43z%dgDŽ5ObUҘi=Ǔ4u,ii5&[5>
?8
u @bʋe͈݆~dwU,<nڗ1[S{GN{@3mYyK[cD*.>%Mz$ZñeKFybr큫ӈIb
ena\@ԥ|L0_s}rɟ0;*Sgp?*L|@VQ;K @-7&`9):'s2gwV"I.U!xL[pBđ}NrIC2k(zbK[I"u0 F#V@̊y 9f"^T[͇-"T1dg?P'q#3M鉷ӽendstream endobj 6176 0 obj << /Type /Page @@ -27831,21 +27633,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6181 0 obj << -/Length 2259 +/Length 2199 /Filter /FlateDecode >> stream -xڥXmo8_a`Q-imh7xq %:Wy!9ӽ=E9><3x#&r=OH2&iyMa_gȞl zqvnL^<Y(7Pr7^,?MgRJWts3 --L8X|?oYjG_?.+T aⷳE(cޛd<Wdm0\nWҼggUX0YcVR2rU$$LB &\du-WZowv6bc͝]ϼ-2i7I[n&<ht+u|pl4(Ge5$1h5.jmd4;I:C+V -##l|"#d0?16tb@փz9ĎMAҟ=6 ņ%<aJiè(V] -Mt$JZMcMv瑸U3bQWIbϯSs>g , ȹ>ЧѡQDIx rGg+c(\'%ue(%WljMm((h@pUBnH̏L
t8ɢ-7v`|C~~PcN< qVbp%cOFq$x@J> -7šP+? B3ԏRe#:йݷh$"4|AHh\]sw?Ɍvc.x -M*v۔Łޮ`CikHϊLB s!4Rj10_niSc'" |I+-[gviMjs~A]@U?m7KQ1t#6Ƀ?f]WǗ>r>zY]2 -D0A+Dv/@m0N/_2=yQ\CZ - xcb·_1Ĭ3G'phF?̱-{*pØCW7WfF'b+`r"~ -5Q兽[aFg}!4#{[nKIFoTU]7?Mjlь*Ȁ -(Te$xRC QPDx[SS{ߏ>qMkD-=0˗\MokuȗWz, " ->Vƚ!̻v2,լkGڮ1kp͊|xSM"H㎪łoGendstream +xڥXo8^aX+")Y9 m.n>A*Kt,TWz<(Eoo}yfh1qpVA0g+Ùpp\2z}4+,ٳ,pL}}}w3[\Xw0X~?7oz&75Zarܵ݅B5]?8nۅc0`"')sgw;]#Ƙam;*Dz?Å\J/V8ujlؔMXq!kah$+Fy,u Ysܤ<cMf(LUUЛ
L-h5rm6ڨ^8gҷ"nT{-+ީq(f]X +ԡNBpZ +Z{ҳUQZiCFcev]2uuz<~kurGIĄBd׳%<:7Y]<-tk'AWt<XDXWeΣhtUFW`BS.^M_Ss"\뻻gsS#C;zV B:Ł7L{N ++#5D`x +*K(څ2t$t52FnEEA8ǴFB@#J(CT2fI˚,%ga@A$t_7:MYid~'G+|2Z.O@2zIq8Xs, w +>B)ۗ9R7%'vr H +( aoG9
hWn1S4/֊ZXھE-K/]&C_!VXV@qde"ZFjdNNQ74<qV, Sj"(3)mtU$mL┮ר`Kq!j͚7&?y#T<K
}vaF$Sm{[2Ƃq\Rvս +l;zk|qejjLw"YH+٫u:
ElW-FsfOp5]GiځNh`٣o//PH +9s?F+I%<sN2P
endstream endobj 6180 0 obj << /Type /Page @@ -27880,18 +27680,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6189 0 obj << -/Length 2296 +/Length 2180 /Filter /FlateDecode >> stream -xY[o~Pˣ:mVڢĵEUff)Qs|PA^ffgX@&(LlU^Y\߆jlqLi9[dzpaq˵/f~އXy7mk}_ -~4Pwv͵nZnjA+~} LP쿮~=ep&xv8W 7Jʎ]5%-ccy&j\0,Ӂ"=mU>5'>nK]Jț>/qaohI!X$iꬫ>Q]_ylɛfgi^Aak2oinAcVڴGpWiAUi>gfmfɟcxz"a{ʪi#͔m4cP?ժ=ژ"Bx-$5v -z3>A5ijom˗k<ܵП9|nyJmϬzmlmkXV=iij-ҕi+0jl{7r DO*8&d4IT>,)NaSP`!vH04dE_Fg(F9}+w'+c/Cex{Zƞ;S,58Xh]ǫf meڸeM(^I:]ͭN$nڿ&"?>iiVƗfIJxDp:b"Nɯ}
4juӠNг+/[GP@K8l -' -_e`Z&UoHfv`)@tޯѮbibdWjLܡp -;0Oc;ڷj;SZ&w /@s@Ö~1C1=_@zM'=l!FկaNk,EK˸P[ٹǻ4}ƸN'kl1vWR7Jh:+%]x.bv|!֏\v![6ԉOE9{Nlǡ&2\N`< -BH]=ڤX1z2`(yqsG=}%'C2~_<Jv2a}I7AOKt!SCtT -UgLJ?p~E^H&_Utp,MT,xB)cy?Ν_P^endstream +xYK6W*jM"DZ'L*̦=$mF= +7BY*>K!BexK"Oq0L +Jp$ +6C'A;i9GOyCNJҚTs3?xEn:^ŕ]3@و=0|Bq̑ +)_Wz d$R[1+b6qN9; +!9c\/|믮0ܭilqhaKPµƈ`+.&u_ggmS
:LpE +˜stbM endobj 6188 0 obj << /Type /Page @@ -27908,23 +27707,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6193 0 obj << -/Length 3626 +/Length 3475 /Filter /FlateDecode >> stream -xڥZIϯ-d -U9+<-h+;L[P5qʞC84U"UB.RӀ^˖jS8 vmzʥu{3TLKl7{G>V=pmdM\ZqD
]{%L~_1v:pɪV5v48o~0f:x3g5Q]yWv ZhqJ+ -NjV;^Ϧ*eMTjN
(^b$<T].j㈂[(߫eku=<V-7UP -YyEJy8ZOT&~&F?X]ƞ]˛,v:Z;"4r=t-m?Q-Ʀ3A+ǚE:c~fwÚc!rPs"0Y!NZF[nuNt 5Aiz]"1 -rX{
W(%gIuj@ƈ݁u_0e}b@O|g
n>`GBxѳ8L)gQ0Cc{)fE>DwҠ=I> -,7g;puC^vaЗ]zD\{H:!ܣ -JGOmDv{:w;qr;GdE<P!H<1ل|쇮ҙ'$< xh;YNAPTc.!pYֵ{ yŃ)}4^ma;nb^;.\`D*bB+'oh-~\nLE@Oq!f NO A}k,JD1vm;vg{X_dE~y< -o+_M[pr;F#8bp|'l(>'c'5h,+ 0x3BcOA
M߯$gy< ܈\Q[!_4a Bq\/{9(Bjl:rė;a- -q~{;{6>Ppuhؑ>{Ɗd|A
nnC5⟸+0`[k-SG`0VW,. $ssRQJkJ'ƖF#EyHE*]VWcAК{7;F-z'][]YUyF5҄ӑzb#],pTˁŜ4('PGrLPtcxF]gf(00hS|p1pᠹA)(N70M53emUX=*5O0cY`!L0FSh%CA^r71)~6~ScNBd=MQoFfN)Fejb'
ξ^A)-ͳ5kHkX]?)֣Bw<XʞfULfrFl] νB6tЙ"( -6RUiT6m%_OxK$Jx8op<0s\K/?0:XKdEd -9 Mal1׆_7z|kDRҩ(yNÜqgJIݱuX˜N&C?wS[Z|.<|= -!ERv<ɳхu#?vvSՔKMDV"/3#aEn5)~!3@$&ciYx?r;O,e\3, -@;=¬&V5eBG5}Id/ŗ~=ʕS~_q7\n(g*|oQG^3qendstream +xڽZ[~_JE^[a}IvS?$A1ک)R&]o}m5)Xr9`_bW"Oebw{*"$Ʈ%"[)~^͛RjjU-q7`k|:X@a/?n0[~+ƥ640͏Wo6S#/JϿn<[<@<_Xyq^]\ӭ}тgcPPegwTu-L[PMxyԇ5u
TuS~K<UNKveיK>QwC N㹅]E5e{V{shu7i7*ν8Ofy~E,>]'A_ylT}i/17 i=\9sOnex~犻Ge:0=
i1K^ۃ&~d3bj,A"P]U
Cu`YÀ>C{ʜS^)z܂҆SD ǩ6ݡh{˷=3r\͜ +q<6HD +ZŢ@hbc\L$ƻ9 +T,O 1Vh_zEpLEh 6B#5AcZoKauH@;!O6-lŏ}D8씅#[P1(Fe$Q&$TsAKƼhs1s`)y(Y"9F'bp"_CsF^hvvjs +n+
q3,kA +Xz_Jta +\$/h펼н2:5,"4 +sBb|CH]Z̐VnJ!碀V,v"Aa/&҉ku#PXwsDQ0o"1HH -|8FBˋ99x$eぉNpnT-2B#dHuf9Y;x"#|p!5y{
vYcϛ:2 ČB<:0yi1hf}RP6mɧ8!ؗc3}r1eǝLvh(YVZ|7rW\\̮':fT,[ޤ.cErֱ:Cc;nޗ23肝3܌)`+l!Za;gۺud;Bn\y{I04<_}L^6BS߄{`%@bzǻdw7l)@ +B~!KuS-)'bXq-;"d
kY^oa +'L.b=Ԥ ` oQ%$[L,S\,p
ZBS` +?L~"q|zAͿeNYE3'c<>bN<EYsYGsldhK)KGaqk2!Ŗ1h]mۉY[U>Y,O".I/C,<.֑̈́'\*H|ZO*L/A$fendstream endobj 6192 0 obj << /Type /Page @@ -27967,27 +27764,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6201 0 obj << -/Length 3747 -/Filter /FlateDecode ->> -stream -x[Ks6W*1$<dwXS٪$Z%%R!q -fNyϔ+XkinW{:U'wP(k9*X`YczbOlS*-4;DÄ>#!o r2MAS XF -X5I]˸lَp4t+}DAz$C+IbEvc6Km8f15hE}j{fhꛂP.v=ˬfIÈ!xbXW"rԢu2_"#dֲt9>(
Ow2֖R"rEȶ0/pA0`h5T=̅jvsXUYiS`{P1~iYQ0-b݉<<hGu?Іqz b\MaܨЍ"=4n Ԅ^ZD2<cdVwKإ6mãmzM)<܅w_,Ď`k.yU䥪=[ǚ^sB2vzt -ǂVZp[i]J䎸Wۊ<l[Zk -3,2+x[G{5@襄oP|~Mp-m-C5G -ª[v}ZHZ\0J)ws,?W6gx -"?Ha_lPR QKkl=@#a -!׀&Wz7YaͻWEO~<㧞2b,KYU-oI@U?j,sw>RKe<r
Rr9LWV#d -!#W!pQr=9Cl;G ]a%ܗv:7<m6v[6*u"&̣.O2\L{jX/>lB23=07X1&#tA00=Gs@=k6;czPsę/֜ r5zǃF'>$%P"7
{'iRV_ܵ: -Ϫ$jjR -v6-)rf5E_! GaƜ H+Lcu3EowN.dýK% 6wOtMk"HU/"p<])V3!A$O$>$H,c.lҶ˼ZXŜ3GM E -K~Ŵ)ze^dPIa|1[ 0G/h/NȜӶ4":B'}3}@URTU:r~z#^|*H^ؤǡ\S:6>X¶s^x}}1/`DN"}ROig:E]QiZO -Oj5vhDp2J -ϸa)鐆Xg -5(ԣEG9O9,6ϑ>?Tk!n&_),0ڐ9W7ĺ)=7SSA݄D'|9}eCi=/#Ylq\!J߬Ka|ywBtIT?U/z?qw~+# nu7» FaT/~j. -M{!t -*Ofsr" NɝZmendstream +/Length 3267 +/Filter /FlateDecode +>> +stream +x[s6_KN=8Mޥf>"%qL*IEqo +'FA`(dfapʴ>:57R(h8UȢ|O a&ɱh Mˍ7yVY2HB
Z4bfszrLJe3]egӘy_0'X?8 KٯNԜJptBʶhMd<
ΛU:
,KH3s5uNqY`ws^^| )7CfE, +ZCۍ˳Y +u)wHjK:ʧƅd}h*N-(%LF!5bjNM2iZVol[3~/ܱ֜%tOrdy:5VP2k9-M7"?Z"Ҋ
EgI +㠌~<7b)@o8sÂA? 64DS6lJSB.7@%FEZs>XKX
ARNUzQdO
)kۆ
PBB&+7jmNlP6l7pSN"Q~"eS{`es[2BUa-1Xc6m +B9t71x}-&Xez[m)g(mVNM:|5S4!ˮ=a4MRٷ_Q^s`)z)=u֘dqPn}TyolaLqPP[wxW%'lfƪ;>5fDwj@dPmU
9WXt)71|4=BصKu~ށ;ʎ.Ipk6A1?Ѻend"c7\6܀VkK?[L!\o[i79YmMyIѥAK[<r͔94s{`
pDC02MzT"CPNdư{;+RKsE7Qu2 +P4dPՀuHЋ!B:uR^c5aP6' +/\iDq<k:Ħ`сRv4먴bFTR:~8 +[粗di)oMUnGQzYS<37h) 6!l~mLy)ww1MN8QOoKntd5gуw8n|]AQIPW9̾.2_u)OɈTg a$<vjel-X!mȑq38J$.N8m=;> -L!4{Trf5Z^tufc̊xI`*kJ 'WXjЋ8ƣ}W`Y G_M +uolY=R=\ɏ&sOLQE(tMvv:@D._>>3~aY(=@P[3/,Ȉ_kø2s@%h4Q{{4^ +j]~fϸ2^;<g.5aትD?|u?rE?u>3DwY<]2{w?Ŵ O{02!o endobj 6200 0 obj << /Type /Page @@ -28017,16 +27808,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6208 0 obj << -/Length 2299 -/Filter /FlateDecode ->> -stream -xڵYo۶@qqmbDRv֡mO(bF<=俿Aʲ#鲢hM;dą?r$Q4Igd +?ICg@f~v.&Ow;>|=/~ZO/fNFӏț^\웋˙_#0˟b/߿ŵd5'f=21+tM0v-|O=+^&kJfLRi+|#;WI 7lex|(*6/L9*fhj
84Jh&DcZ()"pd
%fR`̰;e.^g[&pWjd <Rñ48RF[~<E{d/9ʗ,bq -$5/yPbVjUz4:'cg{n,nYuEFDU8e/]XFyQNu쩺2VIBԵ0}u ٬1o!j
˻d[E$&E$IC1p4HЏsb
N9XUݛ*၇?dP-W8=Z>9- -Nޛ4;_~Xsp/$Kv1[V3FH~,S胰/'IW&RNeWe"OaxZXe-˷lqBjW2d.T\Q%E
y٠bwP3<Pњh/*3`6R5Q(5i^[{;4%|B {))aIC31D˔-&ۉ -K6ЉT~YQV\J'߈貼4]'L?=h53l6y;,Mz'dfmtv܉4*!n$S0h:{Pm[¬bnč}rp`,~DmU/ƈ^%]jCMb~SVEm/Rd}ӕÑ}iZuekyVVjvHIz_h:kf%!NՖσnmup]^7
eY"QpAuwk`|GCpApGrA$0P=e4e*'<&'q{㠧S=OA/>zj -[㘗3`6q+=ˌ"\l~HZ[<E{N=eX."~0xhHr{7-vwrp5oBhmqiTD>ڕch/6O9$E@}ŏn^p, |a·[K_ E-\iw̮YB%~`k<H
lvrv -myG˼|4E3>xGHI$/vЦMu}0WA?
o&߿c7֥i-풝jgVoz^Wxb+<ÔߩW1ںB-C^u=d{ZDdJ %,V?`_endstream +/Length 2148 +/Filter /FlateDecode +>> +stream +xڽYYo~ׯ\T1>(Xyj&)5Kde([In +
Ma9#w>?ל10X=6)bVoXeʵJyq%SORԺZENWa%++K8Q/ǷOh7+N7 gNQz H{"}֧O}*=n8Ak2eh%lW0NyORn0YQAv AUU;[>kflb)iUP +ikBv*3.Ox
"RS~_E 4p#,(^j
nyhVG.aIkX)2ghfh2 +epَJ#|9}?ڷ>A9<x(b:}U]r|nPU:U- +-mqmy%Z]SP
םDxO*l6j;5&"Y; +TZLp֤ +kRHOJceKRI2p># +ցc}@@o` +,@/MP' 7e}6%"jJ%5X[\_v5ɯe[O=a*T?JI%[RioTY:Rhtv98j +QH^Qp8-v + +qщلfެdg{esT'#ۛ|b_.9<RHMYmaMjKT+
c}њ<uZeGB9}BcBn%|R>̮
K`}vӛN^E]BeMd[r[Vy}&"{m=ľ8Ulʊj
n :Rm_9 iI$j"qy5-y.io)cS!Qϸ3Z~M4g{i@E'ᠿZf9hv-{{ +O@XrE{BY[苺*4:m/sOSW? +W,Њ4[3܀`."&J*{Mִ]i1&IWz:;s!~t;탔c HgA_̼@?Xn)=2S 5n5J=o9诈^i +[u$!au٪Q%4)Vvs]˗<@`R+7٦O]=wr~MxGY+}4-:4 endobj 6207 0 obj << /Type /Page @@ -28074,17 +27874,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6217 0 obj << -/Length 1634 +/Length 1547 /Filter /FlateDecode >> stream -xڭXYo8~0P,*+Ft,7M6SdIp%9nΐ,ےSԓ(7
=''r>x)orG!t}1.̮WLsn0ILu=1G_nLj5ޚ5n1/?ϯ^i<KV|4MOॏn|jO#&[hۄt6駓ɿ*='zPZ gt&JûL2IJM]iiJ#$(o|Mǐǁr*,LN
%i"ϦN -D|,e槃ɨ -zc̨l
&p>lSM-R7y,$Py?3k,`tT63* MA-$Sخ.qӪhS":NG[I(j0OwASi-Vsm!WI. -]`D8RTPszn$F!wNǸtct6 C:@! -{Ix:r=B*Ը||ȮU[G-Q @P` Tϫʅo?7 Eӽ~urIАLk*HU~1 }ǫ:v0SA$>GA:<0/aZXi18KjXuZMP9l6팘M)wa?i`2; - Jx'%gd-#]AߋEoi.ո5wܪ`HVCWh$C-Lwwq|I#[4t??D/E -JM>'{EE
%Ӳ]vBa)p1om/tHME<9>%9Ɍ>u9j`Qvy"MnO.lT+$A[hE2/b'SD^2 dXUhes)+O]yOq걪Rjl/-)v7
*6駺 N<2ac>WrH#-^endstream +xڽXY6~0P+%ȃ4nS,dIH:;3Kc8-%r&\wkYcS/Wc9,o84l\No>#!a+f5nMWzKIp94k|0}ssT5%afH29/0H,&<wŸ
ӁT))~2jsrWu$cH<[u%yAl(& gJz{Zf!2d
6sSpB-pgZ\.*A43jy.l9m(bICb84@zFS
_7EY?5mǘ/&3*++?I@-OZ*pT +RaRqU+BG}S"QX1I)9z$OhЯw@Sj
+C.1\htM?ߨ(rF<CR/C5ݑ#HZy-.&(?/)rp5|֖۸j7/BJ:z%HXr2#άw~o+һ}#<;;^+w(82_qWxe>˓|g/X[DxJzo'AΪw-mb.<$P^*|\K?7J7et= +bt;$w"@_h +a~y:s"ۗ
5%4r-E|GNZlLIܡv!F0K99`CwnaK';8}i 'tڃtѺ tk l$X04pr:2l)q3{#iy2r
))~`J endobj 6216 0 obj << /Type /Page @@ -28125,13 +27923,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6225 0 obj << -/Length 1180 +/Length 1146 /Filter /FlateDecode >> stream -xڥVo8~_ae6nV,ɲ![lW\i:vf;
)dCQH2"V,K5gRkXN"Np:@2L3ޏb^6}ʮajScv/gW*!oAȾXkvg
Uf}~r"Q>IĤq8^N nbvybΡfJS:s$^"~v TB]m]u[Maڗźt/퇼xf}K}ٽTEGr Q^[I -e"K~J 8|#]H?q6}[A -vwy=܃pw_n8w!7XہvCHwʦY5 {$JFW@8Vͫ-PCW!(s`cLn\UQMaGVP\^^-Fl ߸Z.*BHb>ԣ%n\ʸQW{wbpmTMQw\E@11&^b$pTa$v G_3
GF0*w +xڽVKoFWD.en i3 +lc)K(Py7R9~1:u6)V< #T]fu:JTN$lqy7]}|Dĸ<,^y}{ʽE_l<~]}nޠn22<>z*;EkLn.T~"N*M$Bmvyu^g A-1Aeە6UWݴ}YljM~ȋ'ѷ*]?+?XZdW4 #S"P ̡n qKnMeu6}[,ݢ{qPCW~~wjtЦ܁S(oK0BatʶY@ +#aWWMs˶cL6Q#iX,RAac=`cvpD>nk=܈L`M@,w0t52<PE)|4x&mr(p'FLjK4ȥED f^fiqBFeŭ#P#[Μz!iu endobj 6224 0 obj << /Type /Page @@ -28148,22 +27946,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6230 0 obj << -/Length 2408 +/Length 2301 /Filter /FlateDecode >> stream -xYKo8W20VK"qYxN"rb+[XrO}U]a *dty B{i*˼"_FFkOt]<P'e4#\./>^IEqKrhW?Nܘ_"ʧlEW4$?xUnf*_[xT係ϝglg/!0^n#s6.$Lёo42^:dJYME*('ŠZkҶmo ._n^8˫_ibǓk -,Z,ʶMMHÈA ḿWݵf3Wbj,&l_U/K;#t}f̈́<nOjmFəB+Mf6 -&l[n`yb
lAI -ؘ:%ޘSԖHdvF?"<g2VurK4p3[io~4öܱv[pkLD#zk_.@JtDy.!$^^+G1gQ!#3wZ͵JVs4$ȱ9N$9rB)f˸ nUuJ;ؽ?@>ϕȌh1f|X"cCzeehbl& r:NF'}Vs8Q~
'3 Ґڈ| WA;".?-N;N':ʿn*Ygjnl[hkt_"Nqhҡ'ўJ=|rͪPr"/6 -5eWH^Fιp^D*Dya7+xlރNjհLVU;1B1#`?\:C5B -B{sӾ sSTjǑ炏hJ8`m9&\I|\tkny=!xRJ10A
V22.G(d]琁Ym_Hf>4QHZ|x?\W,T.=˰'2IQ|hM\=5^َ}mhj8g]]ERTH}-%ֻ`(O %!jX;\БÕVUY:rvWV -q\(#s3< -th -s8 U[u|-N$o~8F0Qx5u^m+9+YUԦ;. -WxjV_E}NFM"e6ƒ5z0vTX%xMw"r\E?^D*z/=tA -SvfŧmhcXb -pbp//b.$j/O>;w{u:TM*HSD`S*è,0yޮ'uendstream +xYKo8W20VKMgA;afBd)#ɝUl+e +RjVywF=p6_?, +]4ّ'FWdXhטZ,擁.Ol"ĮG 'c4^Ny?z}U3ڱ~$xjF/kr!V_6Z~s`Mf<fϦGFAlsWóΫq/(x%SadXHUu'bS՜vYYf/O2r.ZEő%2&ۓ]b'30iZBk]3H{7&%ē~Qp{{1LYwaArK4p晭;m`̏s$N"k(Jh:T:av9[=K7Q.#?'$@&XbeUa-4`alA*Ѭ0GXJ֠JVWId<#a~ˏ(E*(4Y+4%#@mD;J =Ku7YP)icebK;VYznkR{[<GĿTɐc{}Yƒn# /4`UR!ݷeLb%FsUAdP ! ++MsieiꍃGW\QtMM+l|u{d%9ᘅp[M׃_#a$˸h0/^$Zch%L> +|ejH)`xfkb'ъ0κBЋNjwE&Q>w8\aԀ7fuQtb^N.\/DRb*[ +Q.nN#ow,УK&l)C5qF.;8Z P*=MEWWa옋X#`Wlt}Bę@* +qph$ޏH4[YRrAEp8vEx'ZO$no<ԧ#(]x5uޖƕT*f]uxPe)J4|)@D\O KרbaxJ()n9!%SO ' Sp`V3y +D(5L3%fRy)'1d0IVg+(/lgAJib'(r$Jx$v҇0 +^~g3kyP[1Zͷb"hH endobj 6229 0 obj << /Type /Page @@ -28199,23 +27994,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6236 0 obj << -/Length 3283 +/Length 3170 /Filter /FlateDecode >> stream -xڥZs6_Q31C|ON\n%T_ -(0-^*aػϻwF?Dpn0f⭊6[vw>}y7]!+D -[늬3:?)/jFY+Y+h9bјĆvWO/aWɐWٓdeWh]ݼ2S|AI[7O@- -x
5Ѡpʶ}A-5#ƕl 7S#2Y=ղɷS[WSoiUVVuM~|tJާv:tPN{Qڪ3` 5 ss㕬HL6+Dv*dCˁfPZM]EδLu\U;솱1aed<Yy Xr֕hS0j|mbT* -'Io
y̭HyvR*73y52SU|{O2w} -mi.D,ً>'[Jv`LrӲAL{w˷ )9g&9/贜;rP<oT~$g7)bIV'
K;ϝyYOMY{3 -d=`qYUB[nFȋsK
hVt">Xyfad -o -yb8%o2E&^{axd!![%Nf~ -+^iskD Y+फ1ݱ
9~mlAz\*^ -Z0$.@&[P; -BvFvރXJhj0O! (JC w@/M})dUݎKʴ/ע,mL]S5ZuGɌI4E"![1D;]iYas-9tRôbI@ή#1'aS})4 _pXr ⨏:B[?E#2d+ٖuf#U.V!ۋ?YD,$M[BJ2=@NJoxᓆ}5";#R R .dFy6e|37=b0Sk(L^φA{7,#~b*m!5Pi_0Щ}$&4&X!UᗫLn2%M6"A>T -`dwC6[7XCڇh=l훕
'Jc8(RKQc,VG<a#dx,ٺ0鬐a͝О[=3#"ђɪLP\7=M*L:J5ؖGBi|@#uU3+ueic+R]qئO=Pr6g['[@2̂rA`^۸z}49VvDK<#=&:,S?}?˒~O<GaIWu +xZs8_3*ԇsOimwIs{}PlT6ዔlK31B P$jF~$UNr{L0L G01~G8zqLTσdH,oޛwәc:KԻY}7U43\匿0> -p/>!?=/__LXzv1of|kTϳ&+ïg+_홉-ٿ3~k3"_d?MFiɧ3Uz{7y=?Ը/X.ܾq8LUfN##F+DRN\νJ8*#n;.+ghLv6Sh9m:ԮPj,d?`Lo;ƶ
Tmwt(%CgC`ˮh]<3}|A, +..F + +BLU!>#ۄ5Y_CLJ!y,<&dG~N!_x >k8P!m+`_t!;0S#o}ozƤS4\mȪH0A
Xꙓ;[Ez4D t]fWX|pdG2HѐJ~kcyLFC8
d1sʻ
䱈|j7_|6U>IMךfbr3~d@혜]%IF'1F'aΉG5խq?mt<Mic䙲 9/+l
E% +;x@EI2+7phUS6<Bj*ԂrbPష"'!+5LsK\ul#WDx;N~pu^8UBI6V^SxVh% I@f+-ik퀸PPRD{eU˱5UnLW3î|>*yTf8F 4LF
a4S8gqG& gqR->wv0[#("BnBj +tM."^܉FR|hMEd?BoQ T4L/k4y}oo[LޜQqcҍS#'uȢ!%-`
wěw}]Ջ/#*H+.9-U@xP&00e;"eV@/V[HBjQ9oΕj3hɅ'n=~*/l\`RٟLʿ臝Avsw@ +3|5"Sl9Mft%rlN^M-s|L7{ټ?;2`PuՎ <Ux9ȈSVj +#_2u].3^HرD4%X *sNhqH94Ր3 ~7C+"`K|sHв0Z:b(=9Pʻ@:fqy]pPy!kE^Z2W:B"@d)_>;9Og̖5IP58"K +=c8@k9e@&8" |-*ί + +&;>}-I,$QcNnqpQX{-, aE$Q`eliAgW1'aSݕ}}Qp\2MqgދC5^# /91Q +JlFY4::M<zc{r} 9< +bG3T0٦^_uLke~D!,-;
Rjҡt&:h)T`g}"uCdO"5ok)f$¡ÏxVUendstream endobj 6235 0 obj << /Type /Page @@ -28244,24 +28039,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6242 0 obj << -/Length 2106 +/Length 1973 /Filter /FlateDecode >> stream -xڥX[s~ׯPU^P7'l*Iƀ,(O߸IHNUjt|};w;hpf V>\X -rzvʟ9|hjNabXAhݯXEf??BHO~t7?ޯ;;k
{_<8sl#;˻Xlk_w>4kwMUhP@lsvlz7߫!+A6ܤM|-fΑ̕k*?pj~nT9/5į&'oٗ?^Y/n ؠ/#otˈ5{e$Yَxrf$CLo -'ׂx6 -txLMܦ9}4%>W־B$:e -{L@8LKهn3
=I<}AKƜ
?́JPcLS&96~(PH N7eNzur)mR D87 Ð,FR\a0e@B6Yn</U -J۵>ࡺkGR[g+כV! -V$FCY0T4,=ҷ -"]6f;rg2 mb[;# -JGJ4VT_
l/ހg05-&a#X=U*vje2O)TC@Z<AjI7T\qS2MdZX0^=MT]Uq;&d*(,iȤbŧ.Tr}1ptп8ˁ28WJ ->GWʅV19"̶.ap\v}HSZG+E +t] -LLے+1`^Z1Oå2.j3(%YT>"2݇WPr)j?C5E5lvLbR[AU{z2HMEAHC>P+ϗ!Z9Qxe2gn<7"x?/5ME84XJW&Ct
b0(!f W
MG"H`:!;Fa?jp {«YFYݎQ<\CDP,U^FBPVPϓkpR2ɽ7!B@_fw}l#57J6/I@QA:qqS84Y1U2vN@|p]l/PCͨBixIY
V"B??Ǵ0(ɓ]0tf[4kꠋL/$@{KfB)mCE3_*$9/M -* -г\.v$$ÒX@w3)
87ȿn]synP0\o4A>[!q (}iه)KهM65:`'9
\ٚ\扄)gR$_*ɸdn0iw'gcր#$~,n?HЖ`$m2zǿ@tz:;zo.sќۼI4!iHjK)]$+7}{|Y<Tj:\tFu'mE&/ybv̊ޚ<^>&T; -`l|{GߖΧ9.Bvl/VڻJ+;Tt!מg{nk*ةOgl
3endstream +xrF]_iYIi㸱:yHdQ#P +gGy9&+ռ. +%-}F'ZIأ='fO:pd)cmg`n0M1@PD
} >@!Y|xH>cTj~֙ )W&m1q.3=\Z+`{P95%?VrJRV?;Sh/\1،>'2"<"\nA5P4pɠBNM;:0r,T{nO.
JucrJ.2)XhȤa`K>:ã-oK.Q1お/1iR)ϺUwzVJhv+1]G4Sѵ;!ثhƫV%1A2ʡUǒ)6{ N@s'KcEƬL~D(鱔fvNMqYo1hsFM;@~?)Grգi2(t惤4aP=U4{Z))`ifn}An`T
iR%FF0yJɜ-N2UL!lI&<4tz:2 *۶[e)egPǃ]F%HޤGLtyޮ7u5\#5g7Jt7B67Zn +zOU&+jJ<i QnNJ3Ù>6pY: (wlP x3]-ԇ=ߢXM*Y7s+uh6|`*DdRTDJkㆶV߯;ڎJ/}Th{+`N;wo^,eexTiSʑD:`Ing*aiDŽ$Fy'y)3ΐYLJF +Poic u6ku]lF/~"{$nRE&yG4
bƒMZ^IMĶEDBK➄JORLlĬy͊úȚK's3kHڄ<.詽9nDϧj(۾EuVӒ6v3Eڀs4Ś[:Ѻ*2 +Aj?M]3.Tc?ó*f ̡W+wsendstream endobj 6241 0 obj << /Type /Page @@ -28296,28 +28083,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6249 0 obj << -/Length 3257 -/Filter /FlateDecode ->> -stream -xڥnF_!e)`Dll - ,vT`5s|EEۤ`|#[?,BiI g!v"i!6W -ʹ@ttwUW93&lgbcul]bB:@;,uUtJ;Tg,\et',$e-"xje<R"{CKxl=!k"dwbl>o0C,h۫z|ʈ,%ו![-Qg$9ժإ,gHD&ʜ -+F4XJx6/hH^U[Tdυ]ƌD7$9oڢx=@/)Ğ{AE|O;0$C{WaG,]Sc82+v=>skHva;l>'QiUV[3,l$T;|ib]-C?^2ꎝV']JnFݞ:΄6)g;ZvF*^`]u~3<Go -a|gtk%dCs!()hs`BJ98tlM_-w.' -L(+D8Trb줂LbalDG5&
Vl6yNqPDP|&VNtUw\h9to@*9:K+\[ -#4iu!G60Ԓ1ޚE0++Gk$/噈 -:"iٸVs"CqpG/T65:N!np`x;uǃi - :q㱈ia`׃wrhp tf/>s%C -bC;lН$Ρ"kqR~A0~8~"5P#H -P̉+*eqA -YiVcR' -d63@֗'ՀY'^C!揪HكNB -cԹǴL-Orv^2QѾ2iGY4 -ΐȬMX('00{ӳ L@RB}Pf0.b -SciWڃxaO5)ƩRL/Rd:IjҎr2,m9Uf/Q`KW47jyJg`8VvI>meP
өy8*w<f(Dd&`+^av:6%JX[IsËP<w|]#H]H sv"jnoX+
xn2QgԊU-G~ -@*7}۸RZ8pp`?bɄ,0#pܻء".DFTs
RM1M)HWB}bŴMbN%ķ*܀EA g?FsH" ->M? '8Yi~:Z@;9 qTʟab?^'0&_D*f xAR5;}J@#^1b&-rc+Kp^2U̍g( !Vt3<sYJrp;endstream +/Length 3232 +/Filter /FlateDecode +>> +stream +xڥnF|ͥ52nQ/c+!Ɂi&VmE
XŪWK== =rIڦ̚akLpjqv&eFV4Y"q:s]p|s:И-ox9
]c1a'}}:,w + l)z[gTS|EYּč`~#77~WY5%8"BnOfBF&ED!S}ClD%ﺰUc&'*_YӲUt1C?clSB@:@l}EtȈHTrn\e4,$-"r^)Wb|N}z@qpZH>`SVMq0,c|7..<^[b{YhLҽyFS],G}v,KD5cYuEľO^ ƛW9sC1#Q4
IN:+pLDŽuXėeS:+co#e~L/ AI:#FH9\m/}Ȑ|Ap.^*>ًJ+5aG('qfͳv}H`Ԫ;~\FP..ğ;O7ȝmr~i?< 7ϸK+5'cnj3s@Iz[(a : +2B>dհXcpȔW|BA+}5 b-<Li<Mx FCEɻ[-Djm/S|yttƟgefj~Fq*;bŻ Y㟣;&8!F&-+CVf]a6Jj([k"uBSd4r B.xE!8gIҧ_D"O.~gK5sߴ¡_H2ReӆЫ! +MX +7桭%hKT}䦬F`Oy2TY]ejcB2! + lĜZ_sΪk O +
A8`spoC=~ ~>NPsM3,2bMb0f 4{DP9%l.6a#i+EOA(\F +@!x(7͜6긚l䝠d4'pt`ALlk]R}UwC7JlhdN@ +cfJkN5Dc XNUvlHsZPDE5ܓ]>@L~`ڡ=姟ww?X֏p^_ ؇I^}Q{(G`p#on"S&^m(!DӔ}ᔒc
-.nz|?9B u.՜H +[+ + MEaE.;+|pM˴^`_Mh*Ey.©?%9nIvwŕQ؎V;n8<5ϹtNB=ABC~+ endobj 6248 0 obj << /Type /Page @@ -28340,20 +28120,31 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6254 0 obj << -/Length 3659 -/Filter /FlateDecode ->> -stream -xڥks~vBGYQmJLN'" -y;?It{nǞNFqx>_\4L0tĝL4sf7w߹d3ݼc;~n~8 2^ -SG1֦&ў`vco^}R
o->Z-u`3' -Fue]\Q
E-pŚ83x% fUiUvF4XZpbБO7GU0(e_ -- iYPpHw<CR5iiD檕Ys!oY4_JmY,z/h42hyyqUS3oX6SͲ*7T97/-J -a.<a[V"Z{j[khG'ݪ'*e?fxTlV[9(%(7i#
<vbE3)lpR6gǪ%^~A%s -n>3j!~u7&h7Oݖ傻S\JȂ#)jgv;q:t$`?D= 5$OT4'Kw؛zҔuǯg\p_<xt].;ٍDFRو -SUⱾ.zy,5;8zx')_ -6T9{֒*u{)@[< Ouc6Z-gBE]
N: -"`D"-Binw{*E{"x2X?fa߿ ,O!45/(0Lտ7<b+endstream +/Length 3621 +/Filter /FlateDecode +>> +stream +xڵkoB#( +8>7]줶R܇DK<KBRq;]$*(yPȃ?Ů40F͙7Z3_0QzISofgD#ss/exwqvy3a;iLgoǾss>Bg6~W^adΝ +-̍X t/`P(sh]/5ˮhV.**~SWL4u~$O/t,cZ> Or8x[i +&l#NOf= $P;5k#h}zXCG.jE)X-cdY^tϞ!-=WC8iFB`á +MS綸UMY.JWKF!Y4_KmO|AͰ2=2cyyeS1/XlbQoY^c,D=ό6-vF!ƕ9z@9Sx|gx +uFYH.2dUJ\YAr4(]z"ɖ5a8fv%IMىngp*#uZha?rZUm +Wqa90XajaMF\
@[F5<Q./di61b$e6ڶD)$ENE_e+IWOpq +1J!ڀfvoo(H8 +!O5.A
SSW9h+@L +ֲ~CaOX4H4Ǜj;0' +h:lq$"j2d
f>b}/V|Ð=[4OQ2&*~A9w"`CΑ +̐BgwƤ#
8`D1(O "/]&%O<aD] +<7ϹI<jj:J;h$7(umйtύM1J.~O37`igpIP +"\gRsی/lno67 +o*ubvH4!R4¹ +ٷA}$i^_Y%`^ԻuY@44n[}=)v0 +^29]V$dÃ%.Pi
[mTQsyeQg5Ì,()P0rL55.()`e9ˇ+`D}]$AX@Hٞ2-xAk;սi?qg\Qx_1~?v\&uj{aZ:}^+\Frq8k[LUN`E,O
dc8MO{GҺ*Le|lAYfY|UsF*~^6=g<(gyىDtLH1
p<4a^nz
odn&?DrUngos͏3~%T:IC?2ڣ*+Jc0!vιx3{_'GTqJ1!/Sw`>C,Ј6zʈVN:1a'(!3 +C:mAn#ӡ~YBh~(Qx4\IR'l4E}nWlι~g<*M^lBO^G*lX^J
v!I +6@),Q̺$5#JBSݘSOpݼn: +"`D"-BlwTots7_( +/ endobj 6253 0 obj << /Type /Page @@ -28382,17 +28173,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6260 0 obj << -/Length 1746 +/Length 1739 /Filter /FlateDecode >> stream -xڥXmo:ί@åR+L$Ҏݖj2fqR8ĐlմU1_kkfi|ixGGu\as;ߜڗGivs9?'k?N~{>dfi2?OtO㟦s֚.F̿4s٠|C G?n3}i?4wv>o|6fTٷ^3u>}~@^wyun/i}w^
`3>(Xg1}k0k/p|8kq=z&f)aؑvMt<a|f<y0BT/(^,{z%pl%>U ,r[WmH̱`#ZCkKۭ[؆&)F8BقԻH@p뤥a -S`{0~
j3Q
oyV=%U0~#;D\};V:jˇwt"(lGfyJgKc&>|q\ǐoaM_r蟎4q1L݂pOGZ/u=N6",Cؐ=f(NMԹ.{ -;F債V%Jh|/Dijm]W3,8@δؠZ$тKPF -7z`#k⤥%we{ Y ~l)-8 Kbg
DZ_ -|boe25%O -'8~Z -DC!{"`Iu-`YFt̉^eRG\Jn}ݷ_귮uͭvwz;~t=Em +xڥXmo:ί@åRɒ&I--LvueV⤔qb;ĐlմN1_kk~3\7|jx+?]n.:wМ-.[a6z<>pN;^=FNgɧ4>'z1Aٓ|u5û?/l_'p_ی`_-]Fnߴ1mefɿ|3twAN{#89tϻnםr|?dhXȃ +Wk̒x7Ŋ4s?&[OED)oJvi<>J8~PDQ^zCQ#XL,,4]N)Q]1Xcԯ֛44c/F,p_ +A1JlHmb$#
H4NZ + +[-3#JThX ϟf<Ebqh;F8+}g5[[C [ȸ#a_(طÉzZbesUqNSW\$ XX,lx_̄_7A<<>_߽5"c](ACѝ#.GƓ ӓhrK{~2VЉqĄ%EL7':7e ;#tHB 40\ݩAU*CgтBAu38(\Jw!@)MΊ!m\mjy(60^v +r f/$LJx42Jj7
'gWE=5a@v *I:U*x9/iبk [Gʄ媼d2j241fPB0RoiѝVU8PC&xݫn/g+,H[#4APu<5K9RZ92*)C"ׄ!*/UD}\u(wRҲZWF?=Tej]B&U5 +im0nb\Zg6ͅykOս|zabf[@kK֩Tؔ.T#"13y)J,3!R+&S**ܬJs"EthoMRJ=@Ǒm\Rb k$`0ء#Vx +gMSʩM[#Qg5բ endobj 6259 0 obj << /Type /Page @@ -28409,25 +28201,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6265 0 obj << -/Length 2628 +/Length 2568 /Filter /FlateDecode >> stream -xڥY[sH~ -.-Sv&8kȺ&S[IɿsMj*}w}:.:Q3<'r{v`Å'}!\/.9PuF3_ -|Gǫ^8|uzQНOӌ]Ϗ21~T<]}9b<-7B]Yp^N0:/0v U _jODN - -#yQ#4>ጔA{} cF@RRϺ@JCP82N(ð:zWu<6rX-J7v4x{=0az5C};|3/^πnH%n7yY?ˬ$YӛMIvx?PT;xvYoj2Ϫ8Ja%;Lr2LT;!' L<1F:cϮi;a~8r/_'c'"BK mV4ꪻ|;n(hxQS9lT~/+8IE&ke6+m0 Mna#wqQ8 $ٓ!(\ˍh#Ͽw^QUjae#_7i&&Y^4]acoHn8[5X6B;IDzNJFO GW:T
B+<m'1vZnD5+ -#|Xz\cQáA]9pIpŇx{T -l hg<|L`rH^tkqy'>}u-'PIUCɠvpbI<U**%M< -e'rďA0A&goBP<L=~5qp8+Zd]+J
fe6|kO8vWU+@*Sm=a]0egcx XRSI%dO%EEu7 -_FBS)u`.uE\V. -ٗx8P -Eۛ-Ly`cKm#j3P -H:9yNRgۄ٤B岏H<Ms+,xBhIy7i*0e,_#ixIpDQ~*G(!E9lɧ9e1?|gcd82{KPp#uE%
=GkF+JŃBLhw+#b.#cꩮdDztڲe\g7tɆֆ|˸ -u-18śa0 -+&b}߫].rjeps<Lr1]PWtEٍuMB~roIƄx+i*SI)01O#N+L|ĥ9,"dO *㖊.xr'±yF-e1jfj*byQ9F2ǚ&pKm8y)+ٱBHL(qT690/}X_ڸ$<xUb5ӶM,
oG܉ -8@92t~˩чZ/KhǍy./?n &3H܌+&P52/$Ggm>"( W=5])
9T8
j/r 5OSW:^?~<|
(5_n;g N_, +xڥkoF|&|rK:R(@I+TINk13^9ŁŮ⸷X_8Xy +m'pjvq﹎8Io"w݇lt(,/(d6zwa?Vl<yO?غdԳ{D}}`h:x51b4o~P?/~-\8J3&Io}|%_-^{Il'NzqPA=XW;mS:)7<Pۛۻ1mмՓx@Kpv#4'uR/y몬hEXV,RwJ +O3OyUߌ'n>_틫|oExقDznˬz̊rMBsgGL哀[OfSkӁ{ ^EfE-`YWV1L2Q)k +;QBbOH3:C>FJgSL!1I'/!{_e&bNΞio[YٞHlESy_tD'QWYJCo)tk+26:͑6ϏtOgI@V<\BXuxkGzrm*qFi&YgEފɞ<כͽbqhCf@ؤ(.qO
"M˗c*ӭ
YI
l}>?$]ˋl/R$-uy FخuAmh +x8ևOkMg؍~O K= v5<#`)kzը]Z +R6S3eƳx
=s=jL~ +_dt6>~`nJ>w]lq }%:}jb/D`eW{ +2ǰn2,JҺp7U/Bp30 +A&_Bt_щ)A7?jS?j֏-K +&o"[ +7斻s;rKS,K]DtzE!~1|BhRCMB.d>|jhRֽ@v.o'_ɏ{
s_R#KF:.r\|Hɰ3m0#"A_3+>x:\\(FG4l(OkR9oh+xIqO㒋D31ɉ?37xy`.aZya&@ƶ>,mu=S/O{&@&17?8jF_ӌ*l$w51/0qqҖ +|j?0cZ-4_M̌@L?&{i㸗ȽZҮZĆeW![slr.?%ҟK:, LF>ĻnJ:g]h7
jKs[.i Kfw1U;*q +M8C1!?Fx˳1H|YR(11,rL0٬wSjAvƥ\ʦǶjO9DKch!rXa!i +-k5kGtAX۞o>
.'{fb?wp$~lj#~MY77u\*/<hMy0S/|jIf﮸% +)_ endobj 6264 0 obj << /Type /Page @@ -28452,32 +28244,31 @@ endobj /D [6264 0 R /XYZ 85.039 364.031 null] >> endobj 2354 0 obj << -/D [6264 0 R /XYZ 85.039 229.148 null] +/D [6264 0 R /XYZ 85.039 240.576 null] >> endobj 6269 0 obj << -/D [6264 0 R /XYZ 85.039 205.83 null] +/D [6264 0 R /XYZ 85.039 219.38 null] >> endobj 6263 0 obj << /Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R >> /ProcSet [ /PDF /Text ] >> endobj 6272 0 obj << -/Length 2697 +/Length 2425 /Filter /FlateDecode >> stream -xڥZ[s6~e!^3q'ui>mq,*Is/)NI -cM^7!# ֫yPlD#gIdMVji}VfXlU0ۑҟ- HJXwm禍pz5NɈȪyOk~o8@;g -<A1~n9l]vsadHwLе\C߱>#oA`,65 vJYsV| -4hNDZ#>0s8uhƭC;y;<DI9UXem钉T8塑*ɖ2K!FWom3TLA_yJuHQ&'o--,-j^.yQ124_((Y4t抦sXr2Nos8'bL< -!&{ #oA8 -qp/~ԍڊ3p&!Cm~`08 JAJ8D,av"%}s|4\nϤLЉr=Yz" z\37iBM{nW$P4F_ʏuA>lD0IMN暆9Tw|f*WSz*a.?>C0 4Ŧ
EUľ==e"SEАhRCp=y:o7nϫLܿX!L#D}wϽ`_N!a G8n8"gF<0Ǻx@ '}a`AӲ4@φdюB?XvhƣhՔDb.IƩ5i&t=s@F-vJq ϋts,4\7ZPtl6w3Zs* -9Wmx0(.Ya\V84
"eĶwDR䀜䘔Ʒ224(f3)erujlӔ:i^mbGcC -DD DDŽphC#oLWifx}1 7%kW -g<Iа<x:ꈸZc:~!k| u_nb?kHE6m'^.5`|HgC3CiL@Ciɡ2DhpSPT$-ʱ; S4iL3%=ʨA0y7ʕ\ˌ6^Qנ2Pɻ:d. -xz͕Ī:)҄xrcETT2d7:3 T֖AncWs\&(+ - ->T^͓;8e)3M#!U]X!okP֛OgGTDZ(Wq>`]/g# c?DhGz$JS1Ѵw5X +xY[s~ׯ`RpFMGeG%9S=yHHn @r3mI=8D$FdQ8;pd3l'q}McN<ҒgOә뺖,#b~aȵgx.]Nud])_Uuu|xyg{_cq4yc8ھJ??:; a9D14:p<|[z]-wΟ ++5ޒ֏i=l,uNfTF|*SDγWڊ_:AY!\J}d 5 e5
OWf=R6?0Zqi
szAi6
PN +2mMV݇YÈ| :ERD{A6Y +^!95#"뾮yVQ<ũo dxҦ˫e|E*HSv깣bRgc#9A`Q + +w=uQrRthOTkկuͼFh!71p::Mrn-*$A2hIlLVTطSh$%!0Fߒܹ_MC˧EvEZ
T +`yvE!Q茮rFzzЋb5ݝT%%d6ѷk+orU7&ͧr`ɫތZ + +.IEH]XA*,5U.e/~z +iQ@:,3ۥuШT؋(17!0qy.{Mꮤ4~ !kYpjNa`RuM +2}u6)Pm'8w1qmuMQ1pBb#p=|][&<1jw\Q%.~qWú^1,ǾL=S< 1{FuB,90ˉqWGwH:1+wUľǬ^:k^?Ӹb..]rT14.@#&i::)zKԮ^
fk^wdWhRCgPZn7u%4VfXXHEzʙ)TXԦʏĞ`@wٺࢬlT噒ך"LRu cW9%T1r9mݵ;FB2c7V
9/.0'LKA1}Z%a@덤
'0gl endobj 6271 0 obj << /Type /Page @@ -28518,13 +28309,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6280 0 obj << -/Length 927 +/Length 923 /Filter /FlateDecode >> stream -xڥV[S:~<S%:12%1=?Z%uzNIZ}7?&!*uDr$|ViQ=+OE?yBC5;>}.Dž+XqϏey9>$+F^Xg8$lfUU4]3.w6R4s}+݀,P+;rΗivP%<LaT8RSơ&B,Ϧe1*'@ -ʳ/WcpS¤h]߬}hz1:2/F$0!Y1_&
+=HtLF*]6g?z(?7b
]?Hؼ鏲ɔ`EljhżZZCA,WB\بbT .k*c.UL_)\F \R
<%x{*UG&%H(Q -N c|UXu!Y7;X=S-\
$ZtN_-=CaXkYjP"%LIX6_0_ccҜ(İ-Ѭ]Ţ\+ ~耏o0[whjOU,s"{# .Z騄Q*;}@,wPDBf[xh)H?? D_5.Q&U~KW?kPZIr
QkCML`2ve[Q.k,PU̫9c!vvjsXa9B+֍ٍ0AKKfnWdjQYٷv4@ ¤kdt"lyûC+t0x :}`!endstream +xڥVmO8_tڱ:@w!M +k1BM2sp*DS-l@~UXyD;X=Q6Op\ s1
{l\CA;,- }<x 8+ ֭gEN5y2,+4 +Śuؔu~ڇC!5v=:#&_[@>e4T4XǐrBFFt(xYXzD +؎P'!A"h,ѰH4kd/:q'XX$EG*NA⬧|sPj@s=H3YuK1(eSn/+~ endobj 6279 0 obj << /Type /Page @@ -28541,24 +28333,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6284 0 obj << -/Length 3210 +/Length 3107 /Filter /FlateDecode >> stream -xڅZ[6~ϯ[EH$ubQEMm)ZBdi q﹑ly -IRZ{{s_^}62MD{KOnc:x+@ld~팭y%ǁ%m[v݅`{d -KώPZo"<j,d]mvpHq<thll;pؐ0KLJ.cpHI؋bǙ$C||:-[&m[pN:2;J?lI;%1
}H߁
lJugHHE$Pqeu?#) -zgJ!?9v_7@nޣ)5шq'gfQ_uG\nT*
Hx -b\*Qȷq<>zr?04+(X$Uyڸ]ON8ݮ3ٹg{x,,N$PIY! J<jqǺu;2dwj^&_6HoGJ<ŀ5`{{i(6߁4,c7kBsvB&Wv)]8rD)D~}܇fƔq16!R '9&dlRl =2SBf'L<P'0 "e"\5!SħuGnJ;wLeb{7 ]BF(&-*3⼶F#Y -ړ(Il #! tRϗ!Bm|\.&txŔ-;h$KpBI2NJVaZpLd}bK IB&nm;C$N<}Ў -Cht{ jYtЏ - >P2v$B~>2m{i$TяƹJ4ףE"ܸEB׀އ;{.:6g[5r:3v.HN/qJВ
%ޮ`))Aeţ[tc60yΧap -[1IW1 -4ģ;U?'|,B -Y}I煄rQDIDVxwB_#=a$(0+!7yliƚBBe34IP S9=CȆsj˭pBX -oxe&JֳGvekЋkx?g5ikGZQ*Q[uȂ0/TQp,`g=@i`RIQ"6
38,t/8 %=/T,S/m{N^G:w9)cJpazDapb#wcu}gLz>R(b](M/m&n<t
<_xݠAp1% uH/._3Bŋp!<sfSnw -utF-ܞ|W:UNȤϋgc9Hgn/Dĥ"^}0b#$^ݱ.F~!dn[1SNش -j/FZ&2J}D>endstream +xڵZ[6~ϯʋX#-EM6-))ZBdi q﹑lyb +f\iwY>0.0 !S$<u0M}+g!H2I%sDNDdDvUo[b#ukl:T
2˞%zm5[ݞH +R02cGīf
)}",
hvf\mvpHq<V%thllZp<ؐ2A:(vI2Ď˧a4UkZVzb#M)/|<y CZl`]@{>C@*2 "7Gc
= HTX[W5dϡ}Z砺=ByxkUtBSʙYq_W9:f_`jk$0+[5BX3IQ7<>;r?04+(X> +0[dmM204tJA +*ĭdnWl{HܚzК~"< sz_ <LeA?*l }i1u&#RcؑH|@e`ۤ@ ̃#ID֡E"ABWf;k.:6Ssfuf8=XM/pS)x"gW0ƗT˔v0щŋJ]a5݀\c]`/!{_PRMJ*n'$G:N=w)KaI {vm/5èl8Uik@} +VFq"JrߣW/\2 +^ +)b.bx:w +&Taq
ѬqlNu1d*W?\+J:Xhi*iLAI+xccP8B<,U&CJ/^zV+ůe#뙃urimo98:1Ykz٘UcH=RT\:adAʕHJ8-X40)0k|"cja7WR37L*6tl6'%cAu.RȱD: J2];T\[' +d[nlJ[9@wNs*L^W?KKjIxv#RW>^}tBhqJR}}>ý9w~8ߢ|M
loУE
{>%Pu#lE7)Y!.#+̪"\RhRPdqr?qdAEV+YӶxB(m.ԗ:CRQ Ѕ +,|͢ 4pDv+#4sLQO\:~k߹kO|w`aiøȗf<TGI1!z@DG״7Q,ǧ+ pCx$F45yzTlK&eZrxZ0f,IƂO,%8=i\}gЛQ2)ƅoD/| +ROu[;ۀy), N +o%ٕ>.ຐ]hbg3
dlzYӲ endobj 6283 0 obj << /Type /Page @@ -28606,22 +28397,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6292 0 obj << -/Length 2415 +/Length 2229 /Filter /FlateDecode >> stream -xڥY[o6~ϯfD^T(L'Im -,Cyx".AWƃ0tya3)lMbwh~|8}p؍-Jf_wWBghad}z|j(~ܲ!1J7w0
o\G`c<~ղ5pBO
l:Q7p"'(o=O9RxC5!"Jת7Wha~9@a~"|/̳YSO^h- -fjhGuĕ '<S$<6Q`\ȋl4YGM@"p{σ(ŤﯴwVq+Jb+~4@,PCREJX
lv$@iMˡ
f^.t%Ð$Y[I$jt9ֵg@zhi&`f+p<1E
"g5xoZMɊL2CE)Z7RkKLBGUI"N)0oҺY%~d:nUDPDz^sGh0̻e&'/̒3}7i8q=a<B=__CONjءiwt #D@Ba9tSޕK~+shZT!ZR3?喦/J8Bz叔ӄr\cQ=0)#)h%peXL[
f0WzBu/"vI)@{)60ό2sPńr"
Jy6q -SIM &cgLw"Le'"AO8I#t
-~cJah;5v西 &ZR2CkJHQSHD?!$7^N_T3up15:R+6n1 -b@bGF2g0``ĝ3W#v~=XmRacܐޫ3N)/ÑEAdKrSzJz7t`"ŲkqJz OiKsS8{< ,MҴ..`Pҟp:ϲjiC,Mky@}+Aѵ>ސTqbkE:Ō<_Yb4iawA^VfzNaJ4x#$Sä5лv7@돂;DÃI4΅iLr(o' -:Ԯv0_py%>IEI(\cԋ~
mNMS#Nu:m9vEB'/Z/\O*O"ٌUZy./d9/`%sKVaƞAPS뎕x( -6]Y K}8Ǵtmf
O<jIbO]P -|=lD=Ɛe -8Z+n#8v@y#}Gxͷw$ 0jL/?]K~umCUM#
tuLᑡ7] -HG/aaNaR[3I$^ -U9T -#W10ܪL![,O!K+ͻC߅,=9B)>c;?ƻ<EӬލFIeR=e3-F6W/#<+/zN$rHHElqC };D='g\:^!?KԗN$O]P[~PVP?vbFendstream +xYmo6_|XѢ(e|غnk7xw.p-jdɕ8o^(YM~i"pᐖC0Q0Pa8F~H=o}o(9p$5yfzad+,7#;BOW_5-t./崳 Wo_8BEpmG(VB{V +yCc))Wm0x4hu{E5_#XemҾpϒ/YDEVj +ܗp{>rk@г +#Һydf0+NgQV:/F6LZ$foܙ';K&<C.L%'x\$Mh0;,
XF(+a;&QbF`DJW`j,vYRS6~'p(&|ꤪ7q 3Z7Cjb8Beݕh/8C4Ld]}ktpY`DcA*/R;1q/zFf͎A'[Guz
0f! ^
`M!)4_RknX9$XW)fu +hx<|dhmJv`/t2`O +VƣSl1U^܊ˤ)ԽȾfpt1p.?{GPRmVFFrg
gEF.42PL*V/8T eXͦKLSE/v_&K%Cjnm*4@LqE*;ϔt«|X342=7e#2Vdv̟y4T+{iNM\ +fm) Ę(H57V|Hc(z8M:hO(о^;Jtp=za_1[tyuJR{YkN[}}ukªzB..l_&["Kuߢ!u"Ǽ=y&fǸ,IP!\ endobj 6291 0 obj << /Type /Page @@ -28663,15 +28449,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6300 0 obj << -/Length 881 +/Length 838 /Filter /FlateDecode >> stream -x}Un0+tm"=R-@tZT-5"ˍm`7ǂ<(,gTyP
,}ykr좏eB2y\?81MSc -ƃT -6/4$&>ddHyTn*,8euOz_W_>ҮrZTAyfN.;ggs˂|
#FQ_E,1YqqVjfYfʯz#^dyN*ՍNzOɦ؏CYڡևdli guc -+m]cJu`֍HuXG_,DR@$( {G|Vg/0 -yF86To+$ӛ-S}rFk +xڵVn@+X2x~REj*Hf1!v1{aLdUeasYlF4,Ii:w,~8yi(k><<94nijk<W'Ṣ($>`dUqPt<}Z$
vBT2A3M{e +a2#_9#uouXʲʦVEs%$xJ + ++]}J5`֕HuXGHªԚ2 : n$8=nedBzL?
h{Y8Ӌ-S^mlzkb%+0}Yaj:yd
!lyxhvy{m~>vhѺ}^ܖBLyI0~1!ѪZYQ)UϐIj=HY$`pОY=ƀ#L;gk}ktT=Qk{VɶVFw#
tKXNp(SfPSMpdF6^h:\dgƑ,B9Xj#=f9i҇UgObj;)[)Q8Gs`-{:8i}9^ +.Qm]Y]6
l]|رK_ɽ [m79pRװįYӴ>a^^ok"b~Te)2+R.Gنendstream endobj 6299 0 obj << /Type /Page @@ -28706,12 +28492,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6307 0 obj << -/Length 410 +/Length 387 /Filter /FlateDecode >> stream -x}RMo0W(̉lmw.
;SKQߏvْGH5h -A<6Z<rfakZ_Vkr1,f̧fhpDpт%+i"{UsPBo%"-gߏiƓ||n^e.jxQ! OpγS˝ච>l߲)u״w03=5DM +xڅSN0+|1N#H8mDIԺH=c'H2oY,Ok +iqC.7>%QnNʴ~xendstream endobj 6306 0 obj << /Type /Page @@ -28740,13 +28526,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6312 0 obj << -/Length 243 +/Length 228 /Filter /FlateDecode >> stream -xuAK1+rlMtҫ x,1ux/KB` -*~t&Sn:ZY%gwĊ5$'4Y.:EHKa -*{L9.| e[ +xmPN0!&pV$@ !1P݊r1*'GpTTfbVY!Ju@fI(uNOJJӳ~0z4d,o
'cQyw] sn2[8Y +\endstream endobj 6311 0 obj << /Type /Page @@ -28766,18 +28551,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6316 0 obj << -/Length 1661 +/Length 1503 /Filter /FlateDecode >> stream -xڥXY6~УDx(Ї*hl$%-pHIJJE,E|^hԋdx"[ %Jxd1pA$XQ{FIQz"dQ$ǹ`/JSRyw'_lh?-oaP 0,@F#>dG_ -efΙdNuX![qN+@]fUR -5qTAiH>œJbFO>͓iBv;f|hQڊybh?k1+Q${n6FYq!ڪv<b[s,i@~,Ӊesc]U&b+? -;zPo+<dq? -!ľ}2͍;]'ԹT^5ɵi
wZ~˭Zmg"3-0,&*?<lL)2L5*6*/ -?:+~SwOjg2ӽJP$$a{?$2] Yc
{nx5Tri;9v;C<Ef -NU8UfBk߉՛J Qa&5hCצmmh:Y߷mLonL~yɵ ܫK[$"|l^ߓ= rJ}kg0m)x\xY9Z50FC,ԽD4\M Eį'iIٍPVpxX-ͦ0uoLr+
-(TD=j? d#d^g% 8ѯqsAR-5m8e+cRo/&<f|~Cn SR{BS.>} 24.0OS︐Pz:,>,+p84mbdJy64C\*ú5]%"ᔙڪ5X9}endstream +xXIo8W(5+nZtӤAۃ,jKQHYv8s||VO#ǧf̦IʙLiD%pGdZ)X,,RHHt&"Kz"bq,Ky]~
dQ%.` yeg2NEliuoanIfí&~ +|&E,BI'c!;$=`.OX&\T
VYz2 +ZjUyg,ԢG`G6Oʠه3v\"Ej^.*$I/f[Cu"&O!%6/VUM,y݆" 쵗wkb912kV)ᜋ+Z5FկYuG[%e`pP$hڎrC;*iφc[H@;EV>WЭHaj +~Gh$c<A&Y,c:_iQ<D5Q?S_)r# +cF5^M-jo]`qMgͮ[7$${08Xp! Y4̫cȗᵷ7[c#*o{܆G.Ֆ"'-Hi9ޔ㱢RЌ5hymoi.|ni];<Ȓ +M +
pP8#FF3UQsCdU?uOm(C:hnX{H,F-nυ +O;>E +c*/D<>9|ȃ<' +9 +u}.CN{H^WUI~6ͬUYZE#ox]MKQ_R`~?O,I̝qcN1Lʶڙ4v6 J endobj 6315 0 obj << /Type /Page @@ -28829,25 +28617,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6325 0 obj << -/Length 2776 -/Filter /FlateDecode ->> -stream -xڥYKo8me`EJnbilag-ۚȒ!OHIid H_UjeIlPgls|0 -01&nvadiRBmϟhGanTjҕ 6"IfbخBi/TG}2qOvV WQJ[.4S|I3-<*LXK%3AX:S9Ppp2'y7<"0]ۢ`8EN["= E.[w
I+iF4hPzіN -
"QH(&Xϑg<72 "МYYʀC$ ,qEeVV;ÎkwW*[%WLNF1U; - -`+Koof0tN,;[!Oe':6oxC~mѝ-]W-ၻC91ܩQb1wdi_@U+@3$= -x4` cAVG[x$'r|
`5K$.Mh2yYgrq&8r&~xD0]l -͇A?q_zТNdR":ٰcz/LóLS!Ǥ*Lu4>p"m*aQin3 -B>Of^&b:xZnn@
ܩ\{ -&8C5qZNQ{[-"a0`Wp#!v{3:${:mk.HW71E[t) -+Zgy|ƶ=Y:$rd&@j>(4rPL{lȃ-$+j}@+183
q0yS&epny3XA@@I[5A(Sc\c_'~^VvE.`(pw$aQd6e#=Z0yV= -[L0Cp(-*ssօ{l/3]1pEĠ{]7|-yum{zxݭB*Ȝ`ja=n[_"xA |'ޕ
ic -tkIT\@W>jLθF!]mƥ%* -&YeOJPi_!ѫ0?%d@
VNfJv]\'Y.W$!1*ں^PjKRpʖ7Dz*?1W"up7?`UTj5mNʕDW \f>Sd+%.>r˻Xl94Њ<LM -B},:lWvR49=|vvԇW!'_o﹁O6h,&cw&̋ƏԐ Ԙ0T<wE!]E1Nc*y\ZP*Ww&GVfR*#Zs!T}-m}̹-{]U7d6J tAʦeyClk^pv_g\DKk ǖ4c_eiYܗ>9LhHI` -G<LʹURt`ׅ#6J 4| +/Length 2578 +/Filter /FlateDecode +>> +stream +xZIFWm( bȪ"E%cÃHaCI($՝y[q@W۾^M +i?2&nv+?0K4j᫅+/Tp?jG=y,]^Wco7^SqOv`K>3ms_C7]
LĉR='atf9d[8+6k +(y|B(u{DOd~BMWV +FȜ[T6i-.z3K턦(xib]d*uhp
6#od=I0 m&"&D vCGޡ@s@W&YX +J\ +g^(lYecqC/ +eLVo{>SYh T#t8A8da~~O0h?HeR| +HmG3D6Y ]4-myu6/&fc)݇GĊwOW8s`A +Z{MVqh@X"80#m]$ר0i|vJAr>K9CV6!Mϻ`w`|(.1FPYpamR±ػO +K'1mN8 ukASA L*^,Gը!ŸюMTLY(Hs[40qlb4K-0 +&D*i:8/8̕Q~Nn2J$:dxXYe1?>|}f\"ca6i"CL|HPoyhS@Ägs:/<_MD?w]1$e=TGFSA[8M +=ߎ/h29<FDIF/G%eB>Op +rT2Ekjjގ^ivj{C|njmu\i['fS>K{Z_)f!P'9Jub?&S>L>G|%N>(7%^8e=6h&" +4Gn@?1{vvu9XjQTc<4%"fqz_F'}܈endstream endobj 6324 0 obj << /Type /Page @@ -28882,30 +28669,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6331 0 obj << -/Length 3618 -/Filter /FlateDecode ->> -stream -xڥrF2&[v[v쵔!aH$ -SoS+3p@
ܹWyTx+E;NG -x|^68fחG,@~˱BhR'~gdQLHG#h%Ŀm{p
~??ߡ'bgHg$]5L y -D6jUA1xBVP rZxn-a?tt۞jWU(e'ŲpOC#4DE7f%HCkj9 -![I -nG#CqI6iz;*ݏpIC~N??9-"p,Z9A"Ёùx,P;}?0Dmz1#@~4͙kr־)mz=jWSM;G[DXx5hw?ѩ
Gxx+0._Q7x^Y-LT#jʔXϓb X>)2%[̹4rJ3&KK3*jL2{9v3 ~VA -ht -V=nУ4hTGh_X=.qj,s1q<̟FB2oWTHMذ-!jgN?8qSaH(lS$嵎:d ;YҨ,,ՠ`uD$@ZWN60NYشh -!։qׇӞu[?kj0"o,S$vG iyCt̓vj0y&A@SvQ6HNgO1[}()#tI: -:qF֊t XF9'4 -_ --ΈH$68phbCܜ3yPqlԲȪ7&m>j^@|`$ҵ+hY,ZJHa'Fа3R0y%(L =A?P1kZňֳH9oP>G,K*ٷYGY$O1,4v/-/(lpSPym>d:(Ⱦ&pZ:CN)0UdfR --lIN@(&8)RjB
m;ۨ6io#".mGFaaq-_9¨8U-"dǀj -|aAr -~j2y(,>4a%7PJI])nK J=^M3Z\{AdWM%jͧ֕:&[M㞯dOUIg -_Ҿ5pij}V2%\
tJa7ŷ!}cSõ$r?- -;{+;e*_I59eզ#Wz
^^Ga-/o;H"Jª -&*ɃZK4TK!BUƢ+]H8jIYTr=TѓzTRqbe*I(t$XQde -\3QMkgqފT;4Rv
ɂ'X8'|.+6ؔ+p-˦
OqaEuI(k_R8JfWט|jnXhգ3vdqx2BuoOTz|R)'u -S0]Qi!Hv#|endstream +/Length 3456 +/Filter /FlateDecode +>> +stream +xZY6~_GbxyYoybgRyH +cNxR7|Z|߷|^8Oķ}~ZzrZ|>=>]L<HU`by"Ʊ4Y<ócinз_5UyIV96Ws\i~ˣ^b-@#֡mKLx:~LB +{^E4[&nWS,i>ER'1y{b%\V7C'%[W ,%<3
4ܽN`Nk'n3m!7]ߏg4\Dk:7R~xۣfz>![lh%KC;eDZ͢;=VsDqciei=4=]:~W}6ug/X Qd[x-~6,ٶ
WNn#<љճZԌ<$9q{6uSvQ9AK]|^?3XǯLN%+:B$^U6:P}*M=5w`EgbqC14fG6mq +RFotX5 ~qothpG +q4Wl4BB3#^T1a +Ke4w|_:Kx4L./EO4Q>h05ڪMߴQtiv3Ȼ?~/H k< bu`()wkHk Gջ{i+e|əq_uT6*FNai~G/c"5D$>2#<xp`ܟj$!s)`&5j763?K͇[Ȼd@6e ʸAңD7 +|6p:| +(SPvZx6^v=E;Q@Gj^ @CTsqh%ĩav&cAϧСI_U^n4=͚,Kz&2$(2J
[wд(xel*dEie9zߑ=;*flU`&):KQ +~LK_jFLWa:3}P>ބB 0*np`Wnn/:}2#q#8Nfxx,#DwaL{HXFX#Ȑp@s[
nQ0(kvl>5kkާKDx!@tBkxW|.ob&L\N5m$icƨb$(uHE.;g2迥HŴ +s]D@7M%Kiā+])n .=\3guHH\ՆwtL7Zw<#y$Y[1CDG$\.ǨLj;Xy5Ǣ_[4GWp-p@vը
ӫ6}.cAu^!+mȕvȓ0}aRr1=C=`0x[8{{L~ݏoa8|PV\;0QI\n&Fj!P!|y#g}1t)#^Kb22KJ}M;x:>;6BL: %PLp3YA<6PUrP@5p3p\NڪP<pW3|(e)2^L@Rom+1OM:szx` 沶o*]RD[,Ou
ICjDN^ُ j +!EU;W}ɥh#:X-W^Yu=ԷIa0pN~+L%bTu|*MHfbWGtZj1a{a/щ +ayF{L,9n/%JmGǍ/ɗq!rGI2G73@Rr?>d[#G_;
Yo'4mOӟ %4#?|fB'G
X[{V("˽NDtORC'"~}k"Hx[kh +c*
J2YsR#g\сTlv]) GdC.c +k* +F%}ڸ^tfw!C+"gT/EȺǷD4RhfK){^k%ͱ"L\*Cc\C7>cM.u 9So'W}<endstream endobj 6330 0 obj << /Type /Page @@ -28934,23 +28716,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6337 0 obj << -/Length 3679 +/Length 3622 /Filter /FlateDecode >> stream -xڥ]o8=ؗZDI-m6iqq8b)6/;_([pcH{g,ϖY,wWl3BXyz>gaA>[=$~٪{/J)O|\f<>~z=ϔGK3j;_`[l3]^(?V\[ -n.vv:ߒ[{JdJBe&>J5a
3^ܶ)NWrC"'H߁m߸kؗ諮5Ayb[=Yak_XEX\mbM:mEV!"Ac*q^˗di;6R: -4$,
eùM!DAH$Y0(t-EHfGGE@S3Q|{k9N{"X_.:W8#J#-_ka!f -b#jPHV+(Pu
n3F@$gn2i}-7eCThIWC/Adүsq.Ӭ-[;rl_"SsGYءB o)ze4H*xBtPd$<0]V]P ) -RVF+%e|+|8ƀ
i(w%J EM5ݓS -Q8R9;^#6Oڒp0H 7V,ŢEfeX4a>%Qfl~&O}g@&EcM[Cre/9~]AnHŠ`o?A1+BxNp'rW1i!̊E6$cD^mlRWE+?[@\-;Dnc4tmTYSaJ)S!ŮDVrFDzΔ@Hd-0AaِL+g9u.I*Xx#Uo\&u"I`Y.E:~,Z=MMTde⧙aɁ2Je0U4# -B_!glH?ҥw&U<;Khh
0V4%!=@zD#~r#pgD )|B_t>ڬ -I,.9Ga\mE> 灢 " -9X&xjS)^שͰ`+ إ9Q6J -r6Zڥ(˦ n*Z33މ68Lʄ: u⸲R6n_ջ)X]p,*ݲ> b-[F@F8Iӟ1#`rB~Dpէ>2sĹ'q`~/G4k`9Gm@>)qRa/_35kRLbЎMRKfzO]rcT"I cZwNN.o\AOԇ4gD(Ek#!< -\!4Ho)߂?!--NdpJ d`"ϷjS*>rk/m -apzm6tT-`MuOQX/0 DIUA{<KYV5qYbv?mt5Dnjg:2xX'yi!90kaRœ|R-~~x;0o0~ޱ_چ -c7x
Bfm[K?~v`.GQQ8*'`ؓ.Wy·0`%WFcm}:nXv`qrFݻUPwU7~ZM/6\^(x烍Ti&Ti6ti:5 eEePa`ùWR)ȮL:QR5N|2Dјꦚ
>
6_f9g[+lR!nM*M4B."$w|C"ļ3?tr8|<Cq0"'g.&ѩJ9Y+b&BU\qu .66n,,8a,=Zи80a5<?1HַTEeCk2aW[\aM&Q<K@ėm}>g/C[T{P{dd7w=U~ +xڭr8Pe! "<73ښ-֔!);@Pڔģ4
+q2TY#VW%UqB.j@bjZ/4HX96zNnQw'o0i_VD<40P͑Gp2gnӵ:ArF@*¥:|u;
lIZ*~hkp.*W@ ܶW"Fz.u5)Xɾâ$C`;FίZ^IjRwܲ|>'`LN/2cG.C#2AFNUgIqL&dh3[e|$\?P-j-v S+Ql$ygY;|]֏E8$bVCgj#`9TxTyx1g-h}B!D bh7-9[%!gDL$4PVlRH;_3T3>8mKt 7$!rt +w'O~Y +~Di<xk
><`=lvc(tpAڝX ܞhG.h:iPL-`_^I{2X/b{!'SkzZz5PM[lnzHz뉡l33#
+`%SwmVW'u-
ێܩXUAlD
+9b +<tqqUȍ^& ,=v* +QQFnb@rìg*TAB轕1#dI8NF1`C0w)gRBdQ8AAmp-lakTN@0z~9;Î͓`$!&M/Kh#-i!ıCao#8?eػdpzmT.(l9pЀd&XAbAa\YwEoK_zЬ4R1h)4OP̊g!9P6S /ljUAZbh|-/F'A`D2Uъ"P<Wˎn6-==rdT+|Tnf+k=Dr +V-bar*XKBN˲ybvSne2?̢`YNO-`qILNT> +fC:.5߁XНbΉd~A
S!4LD%W4wFR(ց$ڊE(Mn&˒#xT%O\WĶ!`8@}((P#6E[pClBS +PDڔrgs8vHv)ήG9A:}&z͜٨Oneil]㋲mS0}[-Ġ%J ڨm "mސ9ƒ~t%+0Yk&:TȄv)_|56qmUuC +|lⶌ;%/;%Aqf,@*~qN#. q %<j{{IK|CPפ8<
mZ3O}:}Sa*7-EV +Jкo,{0g+UY<pv.GYeɋUmּab29ihFXȆINR_6LS?/Ǝ%6T8ξ[m0x27'^ endobj 6336 0 obj << /Type /Page @@ -28985,20 +28766,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6345 0 obj << -/Length 3267 +/Length 2575 /Filter /FlateDecode >> stream -x]o6="P@jH8ǭ(m[IԳԖ73RmZlP83yX,,Lb}?̇3n dz&<fE\uK</vd*$giՄG>^Lr/oiljȢɔG =opDz7z}1 -z+QHk"H]4 jw r)nAדnŶ,Z<zf[HɌL ڼk -],%Hw9U++2phI6 -u)`$20` -b4*FhTE8b>UK&#|(LIBg)͊vP+RHV6t~- -d/P@A
2Jy4*h([@{y::C]Sjk\Y(ksf@wSoE,-"J`m^&Y&Y&;<L<QiDJVĕ L+ei1@ deieie
X -/B,,lT֥)Gux
D V$#)04j !@8N9>L]a\x[i|E11=А`Cw+ZWU>2AtVXJd=PH[@<
<u}MF-Z%jQ;V@emCu,d0hTŶA-gtֆ56`EK`I&MQ_N+跭ו5k:@n'o&3<~L;\N9/DFњlVGWIp$OUW|<mDmڈL -H0M4ncޔC<t`M "ltҗIj}Y]i&NV@@.~)ٻCԎ`Jܕ:;v_hM}XvUaiJj3hӁFX b =uY nF>@MeoY5|،~[[e+hҀoRkY;#:}4ۗw]TY;@1&ArW0m4I}F%J^bTF%yr͊bsLʘh,v::Vc,N -w+[RN=Sp -mF?B-2Q̏ CO<JJok:f6:=v[nM=>ԹLWZDHC^5j@JEnĦ>=К~o'ך8jMȏip_)U4-र鵾Ac=<՛Ccӗl 8}P^X&גd=ƳiWKjs_TwwB9^G'j/S&KPJDW3%^S$'~@B&nQGmü7FI_DkZѧˮmWw#)]ԥIhfJS8LgZ]wLmlA3r糙یuK!?OVd#WčgNz|
fK辙HbQ|% +xYoݿB}@!("(<-DV!Quo1r'Fr\H82F;Z̻W#qS/g/HNƣ--~^fؖRZR8c;#k2ջHZ<kϝ +۾5-yP/yśYJw@"\;ZMpG]Gh}+(_~~1Ws +#5۬EĞZㅎJXXRq7. + "^(Ɇ[
4ZS9UZžÇT}>ȳy6|.B8!"t-MMt:~_a~^a.D3e]v7iK*)o5wq TEi=1ׁ1݊!(˱[y<0ɴf +U{zAwC57z#c78A?&9yuʍ4om8rs?G2B;Ǚh4%ynPSva88z=|薵r +ݠ&E'Fax{nq'"u7IE#,piY +יM0י$˖+d^6jӲ&7\LedM +JXy{e=`W;Ȗ#d@9z +ߑ_:S_&T2DxO8*NsKȳ%FnqJk +CryHj=;xmrnSG^%}تn9)5?V3ECB==z-zu +߅FvSb> endobj 6344 0 obj << /Type /Page @@ -29096,17 +28878,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6373 0 obj << -/Length 2568 +/Length 2203 /Filter /FlateDecode >> stream -xڭZ[o۸~ϯUQn}9HnOMӸ؇#ɶKJrXS`H3\I-g;<Z!y.Yla+MѼ[_ؑ-֛g/?|]8grudǯː[jׯK7>ڝ_/Wj֟ݻWoW֭L eb}_"rlgxvlm{-+&)<^01slx9p/Ar4iwQO
]ũ<Wp"VTh5;M)ʾDg$`Xlbuĵ3"<)szŦX8T@@A_+0E};oOØks.ױ&A54U@
m?[NF;ra3~~CE2o`D~kdp*nd5jiMg1q|;W0`^܆&1w|5KL9+Z6Dh}vCh)'*Nן>I1?E=EفEGt -M64P7 Eo1;{5TZzP[L27y
&fb (3_yde%.AWW63hEZjG̠Sh2&=0Ouq3`2@[r0 -,.}b:ϷX̡WFy9X?X6KiF9DO6hJ'r,T,F$jSʌopU:@@]wJ&\ -UߗPsSr'c`\tk&MGXMi%R8?NjK52=n2s 0qSP&0&*ysoC~vƽ{e\6TǺӤa3뭗Фsɭo.E`NktEX՜\ԔZLX훆aeA</Y&.TVs:f}!v1Q8];Lz杵A snplfgef|" ->{V!}nәq Yd4AK -+˕9*K2|D[CV>2r/sх!cփj&dd!ߗ Z~HkGhwm>^<|uU(*C{į78gzEo'c3h(+w!o6:^p47L<
&a& lL.!A%pu9x1턶뉟
OO0313Ͱ2w,(R*+gyڻgvʥ>lZzUm(m(.w\kG7u : -vl7JZ5op2P!θs1e$?f>endstream +xZYoH~#+/d=l`f6ْǐTI]dZo?o8 I&YyNV0+܉p(ĩ7W?GbNꦓŒ,߬>.}AXL8N۩gݼ4&?Mغ[&-g |k|i훙0Q/cջpD ^;A_\'H<J@7W.2lN;p$VРX]}Z~~Z˞Xq\o-8TXZ/\OavsÑg=TYT->,c*Crz,Q[Ke{jpQQ%y}lqMbzU^||xPo<>3M6Y3E(+HjV-u";~j(g_ȓ|(IVEM!4bd1f>$j-2P]uW9lI!Am|zQ+;Y +9i 'EX0WbȨ4$șB>sd04-'D-j ~ 4Kn@Y"IxI> +d FWwM ^%Nz?(C'ɁDJL'b +
1c_7^lYK}1a 0ݶc
]K4qxq3[ zV~|]Ec@wLpo@nAjݑ5T.QvGJ|@AG) Xz,y֜+^rٗ)p$<f_a*FK;VbWiC1F0T YC%h4n`BCX~
UZ5e&! !KB6$5dð3Si'y('6_ǃn*ȵdC#eU@dʄR_YT%@ZRqV`OP;~ endobj 6372 0 obj << /Type /Page @@ -29135,14 +28914,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6380 0 obj << -/Length 1050 +/Length 1040 /Filter /FlateDecode >> stream -xڭV[s6~m@ -UB)!(:k(~`EE)n=h9JXaV,֗~֗dk]h-YW!!8,+xRzeX0YVp9 Kg>{y&S檷YBiP#W[]sZqZDi2U˺6ص_Rf8 -SZTRuي2:/2JubתH5LQscNJ"(U.fNJbxm͞h!χ?_nV]3ٞLpwf%L\`QUKܞ{Lyw5uZ|JJR
61dmSsaa-'kepY˾:ڠPC7~l`TI5˷dMg}g4ٻ$pJfGoo+O1C[+\L\WF}_*2EO[Ɨ -ؖ=?JV +xڭVK6Wp[j`Ǝg&1SIf2Ղ"#Àq|M_dl,Է-8 +LCd_o{[C3ur2iU[IR˪6ح_Q%8 +SRTRUي2ngX*Rs*D9g0~];-*1D;)E3v{S'}A- ,ZLpv]OKrr1`UK=&ɅoMVA-EGQF|Xݤkֈ#%eV2϶9EаQv
Mq6ì_]mQ|,!qk +?0T[*8yLԞe2vJZ
3㯝Cg4ٻ%$ +fGooO1c[K_u3?o^21M[ʷ +]im1ƶdǨS9c^vK] /endstream endobj 6379 0 obj << /Type /Page @@ -29159,24 +28940,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6384 0 obj << -/Length 2619 -/Filter /FlateDecode ->> -stream -xڥYK
0ՒJϽbw]$`s۲Iׇɒ@4bU,ϲ_lktR?xW02nX\U^=V&[f]~?XY&\<o8&p(,p>reYy_`|^)˯Ͽ t3/f~7uٔK.ʶQ&;m_GU8(H=Gߣͳ㦤(Cw#f#@XF;:smAWnc6;XK{ڱjdGF/`.aSTVt%t$8ϮUkpFSfN`mA✦1Ɋqn -3: -ʡ#7W t8@`O -a9ˮz}de{[imW25ʡ CU%ldP6RD3w SYPWrG 0y?
_F4AD -קAB25lr
XK{s덬]JY,[ ]*@Đco*@QXq[I@5GTaJhBT$q)rbLjsM.N" I#/aes܌>*pS գQCY]쐑upBas~"MS4j`'$,Hre'䢉pGTez<oBz*7* I&?FB²K#[|}Ff)B.@ 'R]<1eMl>R[98[ñ0 ~.Iq¹BJAϓSy -\g -D3b!u/VS|<.d :>=W1BD<N\4B
E%ދ+%;pmv+ن%~(o9(1$cŕkgի{Y&Z;Uۏ]l -'\s(#I A_1E
37cO0nx3H"u/Iq:5Z:\ėw'5Aa -+H$Z67Ȝat1-m
'֙ѵ]SevCi6?|-6~ Itq"s,[&*u\=<=sd<mw0GlRK.++l
)?&f -ȏg$yBmIlvC_T)f 7,33YX<[/~iIŅw5c,<[`uTPOK`Gjc=uI[[PqJMqsmHfc2-A11O0NSl&1V IXKv]q9sIF&zvk8meT{rlAX!bw#S6[Z^\ŭ*0kTZXP`U'LqBF],sQȀ)o4HIU*nX]+x߄i
ӈ23~`z;İ -K43-ugo_wGdY$:'Ά}w 6n
,HH -":a6|_q{Jw2߾mۥrxAG= <oeѭj2#>1J&렛ChUoE9bs]J - rׇ=[ܓtC&̍)dCֿP^ :_h -endstream +/Length 2543 +/Filter /FlateDecode +>> +stream +xڥَ}@^(`aym
{I`zZCJbF#}jfb`GUuuRI#יi<?(#Ea;k{0AvAe>AyxN{q͎ 7WjEyGYuklL58+vu+b1˦\):3m#Dnc=`8~J:TWR|W;d]'2M +R3&AྫྷJ +UBL6Pt<F*H4^qW鎽r` +t]%3xQe.xs:FBZl +K.A):
ӓ䜜W!Ț} +`yxoF,B"/U<a|0s?QV2Xni<~,ӿŒ?zA +[8*.Psd܀{n:VHgQD6@nOVI*vX73i~̘4EphtyykЧ+t\EuepiQEq&l%p$E3BJ@KY+uZR#ѩ`u -kg pl +,ѮcȦ.K++X[F:GO +/!q#bi=ID=/1$@¢@,ð$"b0J9M}qjP"G3<j
<VTtZmojpK8O^eDZF8Bʈc#O/%oI"9RlGHC( +ho
f0'Me3~FUSʜ&SbKM䐟~} +LIZR>FQA64D)y9:uEvhvvzX6 d,B1OJ&J:xqyY3q +DN0[Gc?au?zJГn=Gye{r8gF4ǡIys偣Ho&^uNy5TR#$OERLTja7$jxKғy4pxVco!qm +6b啱OA|1&*uٮHCŁk*K5e-L8>|{4m. +0
r<P"V0Y>\)pkW
̛Mk@R__aNwhOmQ2@Y;B5/vQ-MI݈fGĩ:禨$GjHpsu|(m!qCPs~,^X/w^#LRp-%+Eb(iCҊ JioK88ioI04`0{'
+|> +.yq9wKϼX 29%Ɓڋmca6m{G(x Q>iϦy?ߖ{}dY=#J[MEU# [$rj۞Id~-)Oi%/vX`v{;ڋE©|7H_*_jfendstream endobj 6383 0 obj << /Type /Page @@ -29212,20 +28995,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6390 0 obj << -/Length 2748 -/Filter /FlateDecode ->> -stream -xڭYmo8_a`?Qk^^^bɶ[Jr]pTdYqrHŗp8yf8#QW%(Bh>sGL!thLtE&O @g.>N/o<1DQs7R:X9Sw.T\%tp{\' -ɦ7f?߇/_.yZIA/(z -ģ]!az}Luv{#^5@"ձTQ'( -\>i$'YUlBybʭoTOys"[%7Z7?fIKn!'ϕX9"NlyVf^oW߭E{^e>3Y62#++e_yMWEcYuWzWl].f]o<`<;fPC|mΐMq.\+fCҳtQ:CC|XnВo꼾/'ҋ:O --YU~p}^夫u>pguI(M#"{:|7Ghȱ8)9z7ό -DڛɘqcR&ls>x2t)/n+f(G\2jJÙyhԼXӆgpo Rhg3y,ҡ4KO2ꢜcZ/7A$mASTjg)t]5K6$7YpMzmwjtG}Vi6l6|FE![2COE=˕U" ͟YCfnWc:#ΐ"6&,ۺ(iJ0bϭ
ݓ<S !Z/9ڏE;zsx,n$k~f -xxRXGalx1"SK4s<Gۖƺ5zh33SOPOAjPQ$ֆѶZV6vxyߊ|-ߙUvmZ"l59SXtתuIf=z\ΤK
7:2-C4Og -0
5x
ߣMKGl=Z:٣+7`˚` ɳ|:HYMNXOj,VfCU=<7}@N4XύtUOۧna?.D%/幸E<nl`N&Qaaf(Fmp
;ya Tߨ -$'T`y'm*|R$D -sO팱[w7niWTj+q{Nh4?B"vDxqNh'5vj;Yuv8Eܲ=5cd7/جPw&Owj/?j09ޔ[=iE&.zFF!ac^XG`:UUr|c$2GbTiz=G@ERD +/Length 2633 +/Filter /FlateDecode +>> +stream +xڭYmo8_a`?Qk^mm7v/uBd[,z%q~B*m p8<3b+IGd9s'+yu&4;7pПId2_<`ŻԖRZsvl*۩ºҚߚ>R]yq÷}틗os5o
`9
4o翞]{۾Gw~=sē=]G$ds |^5"wǍ-]'NW2OS;+˛E]lBUydv{1V]z*ܥܼqmsJ٧-G͠:%1rD2pV1BUb'7y9+wfK<' {UBgتZ$ƾhCqgUsoqW}v
hSXr*hLD )F-S{F^ti<اŀsNWUyՆI4eiVQ:cRc|FnБ+(TOLLM~?z9*+̏pZC'}CNj$GDBun@c;R0/ԋO_ +ص +w,"ܻ4#͡aBbz6XBrS P![:COEUL' ͟9Bf)gHE?ӓ]ST+n4h%;6oHcɄwhZN{z1px,nf~f +xxRGaly1"S*4ij<v@Qںh33S(Hͧ@õvF pv()rkh[o +֎ +J˒9ϘC2s[n¬mXKĚa2d +܂`bZw.|cڌ8˙}ࡱFQu#90j(H +#trgVhmՎ VzQuAװٚ"B +_P*:#y| 6 :$b@ +$!tp~~9p8Iç聣EEy#o3+Ƃď/p=;5q(߀7K!:8 9"c>ُQ~G'^ Wl-Pީ+y`. +^zZ3Rz..=0Hov ɆPhZI_RRLz9PCqPZNe3щ707*,d;0MJl8UвU^s4k~WVwyM:WQJmKbj.KEq: +.m8b 9*N5vX/ȋLMOhA#^ȉ_>ÏʫR%oyhd +n&ţg|8,>Ol3=^.iMb߫^jWMSe'7 +\nfAeBzMFo:FL-ηiwU,mP\pmүN,/ۑ?v U!(Ы=(j43J#yU٣ +6GaS?M@[I
~5N .{ׯ7u5IEx]bu!bٚtXkr`RV:ϣta0Advzz{}v=̦Ⱦȉ|Jp^iW`nm|s_\WrgA_7g\33rqkyѝufrJc:L~M҅~z* e8 endobj 6389 0 obj << /Type /Page @@ -29267,22 +29055,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6400 0 obj << -/Length 3389 +/Length 3204 /Filter /FlateDecode >> stream -xڭrF``Uc^x&N!"!eP@H~5 @nJ83nH"f#͒T&MgU4{`,e1yzClg* -(-:3[n_|q0FE ->ϕR<5cw<G_\3;_`|?!#0N[ -M0B+xM謑yu_Qfgkwc02cհ9R:4J.` -X\,7<;NOdȘfȂܨ (qǦJp^ӫ3DX] 9Ǔf\'3ucxZpu
?U1ZsG4[<G:
VO9L:P4(7P(f~6=Oy(xWiy@'+D0(Cr.gЊE$hB(5aNaNx+:rG]U=LZ<MM){)V -u/bF
&"B,G
q?y1>G'"e|ի~ -'bzjyGIvQtLQ˄w`k"z90.]O&IBp=vEp< -aK(H8ڣ8z`F]W7{\,$(*sg[2e11=8igov6"]f#Bm2s#N">}`=0IkBG[O,Rb'bK|F#67ҢX%e7.ebt͎F?D_G $:ɶ-8':iO503NaǾ6͓j5$\yz)dmYi8zsCA¨PBDAkJzkcFTQFF -*2EFLi0c_gK^1$Ce0-g`Y(9ʥ3[a{8LF={uQt7i:("K[j&|1%}55SwNBzdH0/ֻO2%Wxg]`y1fPav*Nj2s#}Ґe&6SVo<
k 9G\Ν\J/bE%to<OOg;Ib
vu=}H]oevh51y_lz.#lH #>BE.nY<ĜMᔆ7FTԿ/K$>׀RX$/4MB
/*s')۴T,~p|.=Ʀ'c*+:_r-+zz -yGԎ7:r)!?| -6a`I$hn{%&?ZQ4>PGlt.Y|ejkUԁeQ;4!ɞ"Mb! -;>4+|=Hj&ǹV Yn@*1r'gIO
-W'XS/O +xZIsFWr*
4dٱJ) "Q +I:njS0b*^67<D3a
rbYWNNYh1v*3!n"(H±$ +GBLwjUs9Yj/rd]-/kotGayar<2m&>sP =oCZ |lW57t˶<B$!sЊ^Te&$<}NfJVtdC]=tj1u\6vSiXa%l178qy"#jGhW3^KW{k`ZTڰ!QYQG-5ؾ,y;]}?ˍK./9|zRM[mU:t +B6[O?
^I/<x5/iF#,VO'ٻ?rkSf[,u=6zb9жcܓ"3mJNX`vvy)W<t k-6g~&WValˋBz +ot`)b'.㖘Ң߹-e|jEkT#J[#;wKыXqs kͳg{8a4w(?WhiLBY^w>4t/rPt;g?po Znb#nDeYR(xitH@dz Hz#+~""l-gώ#0j +a!OW
@Na8q拴pz$!FXgŏ$*?J#ХC8%>WREp@H ͍00=lfsL)Z56=K#$.NfkQ0$Y%6w(i+0BeGqb_o0!+(zBXF'I%dKGѡNęxVWԒ<3@]ǜ2o+Db#DԬf#\$2v5sP@.4&v! +v[a~)CT +BR_!:fHȗRrNd}rJ%]̇)1v(CD;>$'*P#|I,[ hcJfh3JD"actEqNF
&=MLPѶYHcv +2`'C/.\+mVIz,B.R
l`j-D2sO{;MN` +kZ &$FM?O,휱vDϑGtϰo 2vIJ}XsR;Ҍ-V+)!oBUDtr@%}ŭ%0=4bϨ]꾞`d0n,a~ RqfA"yZ>xz +0JXmuPy2Ɯ}fg,l(3endstream endobj 6399 0 obj << /Type /Page @@ -29325,28 +29112,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6409 0 obj << -/Length 3335 -/Filter /FlateDecode ->> -stream -xڥZY6~_1T% -],?A;L@? -ǻx.Utg)*3o06~5*?"ԯR7J'QGAH -*AQx -z̀J(Tca)ln%':Ϩ33>%;Pd9vplV:;On0=ve$ĭ{sq0.
}nEJ'I(_`8PAw
y%hYd&'d~ -}:>9 ϒDdh65xîRW\۞$h3HZnk&$vanQBV9ya%H7F5SXG"a?Thz]6Sa-Xl!dY -`Choӕt)O8W֖@Yaay/7wq^LvbW66iZ{TM$N'L,N1E.x)2#RJ4TW*$"R`Ć
&NMl7`x`A너 4tc<FffN|Dg5Il5Kfvk>ntZloi͡YN10PԛH}yi@#"h#!svH}rOk'2]w&L^y~4~Dp'p(AWp<`hWlb0t-X!.~i$[Ŷ_iɭ-z+5/~8AldKBK(D7Oհ9 -- -c|s94xO5}%)5r*IXBiM7TC-;Wc{aU?BőIJG_aѤ۩ʝG.G -)Xʿ.PDslUqVNNeɭ= -|}>LEV{,ѩ+
qpfӮcpwt=KAHʮXc'놡Gpk,|Ahӵ+H~ЉC.ǿt(EQ<Ga!7q87>yLWˡMo9|! -M[9:C,QB9xl\Y^!ʕ#Q$1@H۸"yr?>rrXf[ɁGK+уJ`/>M;F~u5-LlH -Hީ6Λ V6jo
7"@wJ5ȁ+N79[Ob`iЁ *ûv/NHa-^v% -u:s95
(v= -)qr-^.yFO -fp츉K -pn?i$%6VN9g"12`zć ~%ˇf&tЙ)(40G*DZvE0P'+.5.>tX}-B=dn-ݾz9o :.C&KE(
?J|w?]n2MuhI09\7i{[̻VvJ߮:4˞O#&L^;Ҁ@c\ߜ8Bf9X$lSD˧)tULgj55Y9( Vϩ8 2N'И{bH<b>jr5:_!ԉT>^.&oǨ*r+gգl:?k)[Oc?>6pp8BE~ՀIwۭZj8E^IKf݉m6.Xh -fa'2_Nc[1Ͷ&'qH^e'/R;m0sz3~Yy:gLG<!lendstream +/Length 3231 +/Filter /FlateDecode +>> +stream +xڽZK#X%"l9˲V0K`I@@ʯOf0X+T%{{m"
#]Eꢸo-&mFY]onMQXF3
y~ w?Z@p"_*nU߾:{A-~V8;3a1NGYÇV>|;: LB]'(Ga\$ah77wp_r˳.hmG2,UziCkKKM}16Aqe4j݄fYp_cuk +gNU;T^~V +?XIZG +fpf>rw$prrG~$#8M<1V'\jںCx%,{@_ \s~ (GXH%XY&M +iq}$ +T-Fi'T!F\
QBuZ:bU> k~jƝLIk'BTMÂ`ϒnSh4 UfiWsD
Ph38.W"m&QvK3ZQ䕕"h8+.!u3Kƌ{LU&EzrpȖPl!<5-
t(+1qDŝ,9p5O8XDž4iZG0 )fiLfDJIxE@Er Q +v˽܀5 D?X t?{bsjQB:Ϭf)8]Gj+0^c:,ˢk.BT.ʘ +<62+Mw.vXk'R +2}h$_0B|;H3'!-&D9l!\622d6Ttn4OM8>fWgXUG=T|!sY2^
VO%"+ㇹLZDEg1.9w?sirXfCºak3I-Z +$\ee8Ȅo>1a\2G?^dnᤅ6kvś/xׂKaD11Pa%iؘ=䥄n/22@&OEΩ$<{(`}1J)AIY&ʭhC8wAěs鏖`w2fbigK*A"mf*۽BV2W5a(5M;['reEV܊ BxJlj H?)͊ [-`XpfX(=w1= Ծk%(̊ڰC/ucCg;hQ$nٯ%QO@6߰966yEg,e<~"I{y߳=w3e_d -?uY|ϰdOt_t<(0(M>!Fgendstream endobj 6408 0 obj << /Type /Page @@ -29393,12 +29172,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6418 0 obj << -/Length 232 +/Length 220 /Filter /FlateDecode >> stream -xu;O1)"Ə8$@h`xe%NDC{JsH}@5rّT@SRՄ8/kM.#,8.)h? B\
~uMPjFfQiPI~F{h3
hvJ8̖Z-^VnKSE
ۄ+(M<Z&Xr -vN▜Ӎ߸\eendstream +xmN1EIcqbHDE +˂,Of1p{|umr9@6WUۀnە,s +WP-AМ&
' ]®=h{WFۇȥkgZ'<JfxmG "{/e8krv۵9J v8м#CK]&HdqcV&endstream endobj 6417 0 obj << /Type /Page @@ -29418,24 +29198,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6422 0 obj << -/Length 2419 +/Length 2363 /Filter /FlateDecode >> stream -xڥko/h} .zjzh 9W%yZ/Bы4RIMŦ -Jո -]rGX%:Sia}u &TqlBk68sYXo?֪*`P,W6Nۼ^nA8< -e/Wop9{zp2Vļ{hfʻvpx;Cl]#.nk[llKLW8:ZPea6ä*Ic -nPI!/a?U<jwq xϸ=Q+X*Pmч_Q[ẊbFe '};`?C&&!5"?z</M9y &0GNyezAB.Xj甆y)疂[I;7rX9ڦR#jz{:>Ylxu F~5F.=2ɕCUϼDRC[k -Ss-Sˊ -J!Kސ7/- ct`%**leO " -Ө +c=3myo+#t`kv[ЩMB4IQ5[PA *1&.}Yb4F ^^VB/G'y7]`@.o7Wn/z$kp-ꮭ62CNHK,urlώF3>QPSF8IqmGɮ-;ݜ2:é1
BϵP|4U&EKrP)IdznzEP8SW *ȹTi@4^}lr -IQ BB]^Uvi'_ -v.٭(; @Ip-e{l|Z~&>Y%[5`7o?Ż?5ߑ~WY#w;ĕ$N\jԅ%G_ew|(W<n1H̤ -j?"hSWIDuJS>2XZ/xtr<bJB -l$n?5+\Q*G@ZJܴҥҽwI)tT['eK@M
YgࣸZ}-@&S̍J6h.%$(6H&2G} "1K+>0B}DB]A({ -@0TtvA-?\G -h;4o&/ɬ&@?V]b&RS][d
T8'N'XPAxx{qPJ
~ՉQkF=PYܧXj"bM +xڥY[o6~ϯ02P3"k>Ltb:;xwQLAX.$O&Je-D!yxng>Y*ߦ8&l]Gy{# + +ςaQ+o!%}Tȕ
^xsiYENMyh#kiՆ +S<{&OE
G9)>9oIJ! @nyd;{k Cl6hM}'бyx2gA
q"Ё|Kpdp'䪡WR<sSCMM$a3GQ=I;x?\y +BA\Բ>;|ȲdmڲSyvjDfPRXv}ǠïdPm'c.ۦY0+osn
ďٔ|XS g>N[KӉ.K +T4@Q?ʜ'FTy)bIm=lxkJw"^ jҹyMA8MF4&PC +9ĘT>+bpF: ,^V^4(@=!!|5N{ȞyC0"n<
M9Ɉ4Z^+u$ǘrl1oHޮ;Qphˌb{2ùbIŘNjǚZ]*'T6_8F -=T{8͍WqVa(ɯm4vqѨ1+g;'Ȇ'f99OEclVR&p+K|{5*K-`߳|ا߿[_1{]g߉wcKng%ߒh?x_K>X]Qen`Hh?I<ij.Q1.-ѺQ[F)h(:OxcH Jh*#6Z*rݢd$s\rZ+f/Ev֤@<Ժxj"|C &]HG2Kq&zgR #سq<`\F!Þ7;H`nF8Xύ'J'/-8*11}}"YCHuSUy
?}^6k_-ʼp}e23b`9%o,֘ɟm |+&ghJ鬺a4~ys:8Man9Y%T6E!Rk +vUYi&7TD*^4f4IZIqnЀDQ(*kJ.G5^ +K c
~rqBYʌu5`wڻG|'5ȉGu#$O~Z?\ +-!LWXw@*$\ +0DJdZ%*5&j#M;&t2аTʛ{$CT/M0C/)_%B5TO\P͉_WAb==ZL6n25''ȞuWD_zO +|yCp`A_s[eLBKsZN$Q"a4Y$ +".:pˇI3S.ʏr{ʣ8ix8-Py1)*U+&vo(Ke4xWgհNaq>ar2endstream endobj 6421 0 obj << /Type /Page @@ -29474,21 +29252,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6429 0 obj << -/Length 3440 -/Filter /FlateDecode ->> -stream -xڭr8_JUM -^}W̄W4>=ީU(RĆ
ͣ(
~Rи_f"g=LmU˜,CjÃ儮աƅ{i'[l1q{(q?@f_w(M$̀x6/{Z"LlaYǓg/JIlFip=dtBM -οdն8
dHCz2`ae|'\'q`h2W(%#c9{ۂ[D!uoynIy2dC#e[mlXW(;;zYpm^d1E3 '?wB[GFʜ>@Dq=O,Iat
iXe6\OΙn,;n۲7Hl@@WT`"-r}hm̷M[y=rJ8E̊l)s̫mS<}Am$X!WvK;2@048F:;tOUcL2 RdU -2Bgiѕ*Gy\ pЉn=RĈz+^nJdF01 -'(0j
\wʖoN ZpѲ,4dXrs38#C Y_&fe
G RQ (°NUc$!.$.MI40@B?#ޖp&P:͂*ME}LfqȍQ`Xeq IU'J_ގAMgn7`LwKLr@ -=Hl4$f*N)R HU1q`?ϪKF//7=+ҼC@aĩT;1*
!'(uJcQsKz%hM8$呺`%nyꐔIb-$i+
BH.76thHfVRLh=[Pht+g\ї\C.l\$7q|ݥGZ#N̐/l -)Y*žrt}(IT>,&%);hT֏/_8
.:/0$l22.f0Tf7bip3d*H GZBK'͇o[
XdLTђC I&h] -әޏw1Բń?4$E$Vێڎv -r[S?w$jd5 -\Mb$FI=Gq"]0T:M]5az>JخB-%vPRA|G^G=EA)?÷#+kng -̀af.k3lwZ;aŠHB,sZyd|&|EG#:bbq&uv'Öds+N_B5Sw,+/b,Y~K9@d+#]r(92SxbKE[v
&M1ܛ(9O~qNu6( -"hfWendstream +/Length 3306 +/Filter /FlateDecode +>> +stream +xZK۸ϯP +p۵&%P +`7)I_dזwlH-꽰pI!J/`:P^)6ahк!yXi&Z9\bo,;inL
2
fq(-G|yl]to彫'<شI,@&D\ +*#sxc5֞+{ģ.dΣ>;\5lnQhb&e<̔2L6, ㇺ*<7@hqps*ȃ^}9(>e)jD +c##J +?H?f.zbI㒡1 +Zp6'<m#(oƛyb8
91^c7sΑ0ަ"7rp}\OH"Ra7S]·ZG
Y&s9\' +ȃJ+ZۖFMOY(_N:12pNcELߓ5拒FюmY/m:d +"64B<ߚӾۆ)+~]QW]z1Oer8&ۓ)V؆Fb)_;ק#LPao + @&C}HH&E@K2zLiY31d3w7!ԆX0m\sL|z^Ul:[N\88mc0XW{JhdʩA^6+Iğ\bW/E.CR]&#Z0h~dgSl<*P0w) +u-Wct$BTlU5\)τ0E17D8ĚNpX~R*t\ ;MrgχDPozhVLF)TRqyY]ڀn=?G>T{#j=T +턷ۭ֖D&fh6v`{{gt>a~;z|ٲAnݝ,{2kω6rs]ۗKAn43CD:Ag!SBt3>i$U%CQ;Ѩ[8
|&ihm(`OLYvisqXA ߒ=~ڪlʢe?Rj[K7rc}{IzqKHINB`JMݸavo"~ï㏏NIKu`=7O +ߥ7c<aH<~<;xB٨f +Olxt\ʢ{-'6WK0&`Cc&`]h@ \/Q校(r<#2FSj>0t9ąVa[lA/^V,GG>B #ϷCQhgQzzƝ`W!S."[ ++5za\|0WjbyN慄
$8P`6:r"||0XedGfplj±Oz\t"MUR'P=6Epty])a#4SWY
DLgW.;~*?SUTݽ@ +4z$cB=rg~
C~$$zew%m"09s4_&Pu}\6%~wv@-wt iNNm!xZ'I@orKvJma)-`0w_izl8H2\Q.On5|t'֤<+dendstream endobj 6428 0 obj << /Type /Page @@ -29521,20 +29304,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6437 0 obj << -/Length 3553 -/Filter /FlateDecode ->> -stream -xڭr]_1Τ<qpUc9fWI5CiX2ɱ4> -+faǺXڛARyKa$,ID.eκ+7whq%e{谧[ ]ms@vWm7 -ڵZ8tﰣ{$ikk5r3v%4:TC]xDSKd=fjK7NCGaWlo#+.$lu0OKHeǸۢ[*z0:~J:(.X7FL
DF3"XD'Q+;q疮{NTIt_G=-,5.[ì-QW1D!l
܊Nf/NU3 -\k@uF2( -Kxٕܠ8E09CmW=(# ZXb6p -d/M΄bNzꬕe0taq
tA:sٯK*L&d. taNLjՓ0aKƪ5Ub☶e8"banNRm0FX j6mwNX?cNӒ: -|j0vxκ|${>k37$>: o\;p`1l5RUv#<Õٰ1?gMb~\gUaK,D)LREi"ẽd3r!d\kCY83ek QN:>LHb`Or63DyR;Ep-%wTIkD|8}wdO+QӣTGFY~a rn` <Me"JGI.Po')RBO'LZBZOe#6X'wl{{hܖ
`rp.lYLN9cckpl,Lc/C|c3*tluǯ5j&}U2.8Wߪ|ÁQmmg<*/>"֑V| qiu3YzLp!
`Pr{=Vd*)X?V.I4k20&dӸA\=S4_tQ{Ɯ4*TJYz(
}j_U4cUa+@EbS-Q+{CcXQo \0¦<1ňGySkq>=n0c4> -Ѷ)رϩvmS7!ӫBDI ȁ)b -v-^ߠ{1>"-gu/m|9'VjgěrH`Up=#8wD|݇++T맞 -عmY=)[1.ox-N-OϴmU~|NpIV7~hhR
[@2O8Hp,Bgjdv.,g4|&b/8OőT~w{ZE@T))Fe`)Geendstream +/Length 3464 +/Filter /FlateDecode +>> +stream +xڭr6_H[M}ILfcVy%b"<$[} +,X+KLQItM#-C +~e0"LO(%Wб;wtwr[ +=`S|;eU!ܒV5
.GsW+d4kOMp͑ .E*3t'u٣e %c{Ӕ(]Woqt$[t{mXlV-1NO%M "Ft<ϫrК vNd2p״huE2Lg۲~[hzņQ[*oxGW{@ +uA|;V +t^v%bZ3)]:T_C%es
B#1Zó+YiyWmM +a;0> +^2Am`Ζ(YqTlR= +`(
&؋>'Y' M䰾\G^LDəqlxY4J8ؓTQ9RC>JѱeSٱ^D6A$srBTg.(ceS8(kϥ>cc[Gj4`&'۵wdd
kq%S6*y<oyK8mGY16b*IuWQ\l:;H..iN UŸ,ΞLǩ
aԛn9(]>ް.tywskto-_|tXt[Md}A`ݸ p6l;AkCmxznPq!J>H{>%H + I]$\ݮD=Q"p^BkDBNiȋju;
Tj@Ə{r6CǼ:WR{*1¢%fؾ"?0 +UdE }:2n4qm3%TލD
Ѹ$VQ Oǡ1qE:ՐgL0M|ыrEl$TMcCPLS20sŵg^ +bw8N-?B`^6ͨ7B\GqbW +q[imdpI97~f0JahTG4
O2`&Y%2_fx>+VpxLdxvo7_vtFq #?eҲ +endstream endobj 6436 0 obj << /Type /Page @@ -29558,31 +29345,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6443 0 obj << -/Length 3989 -/Filter /FlateDecode ->> -stream -xڥk -"J$ -%ٴIwn"-ٖ#{yQlY8,LCp8oY -:J}5_ī>Oܿq^5ʆ ehg>n-!\ɂ7-'#;MYOeuF*9>K*sG\ieb%57CoXq&Gq=5QN6 ae#(Aǫ
jGl<g{n#sGe#EYU'oVj߅vԀt2|譿 -:Pjf4vՆ:\q͉x$es@sUubpxrfb5U;&jRwj8@~nCޖD -ciE@FxGmg|AQlY+ -CϤgPjTuy(, xM;>FƏ'u9ε©@ -\Xh52CQ&k4GU7#LJ,p$z_pwdnTѱC'BY<$_Yb<^_@zGp -Wl7
:V~`88μHBc|(6d5;n#.dz\AVB "1BxA9|A_L0 -ȃi[;G -xsƕa2ӰժG"ko8Rp`+HZ>UI%شj}Th(Pl@bF廏K t!!dbكhV"(1_ѳBB[$:IbYC(va3裲vC2tw[02o?baw?p_(Ȏ'Ď.`D(>7$sxQ^kob -ou.ڗK -aᗃPW,yjS);x@oQ$095?l]!~H[< j1T:ӝ\tHc+ې-r̾CH+K&8 0XP=t(4/?L -ap_v&_@v89j_=?.ln=Ǹ#ZEAWʼ\Tۀ*4'U"K$ -젟a,?#J'\ 8٧7!>5gBL3&]Q!}]3XYw,f0u x8茓BNi}](j$-|ͳ@[p"P5|OؖcL'۬ -N˚ -s;bhWoNd$^p,)8+"@ͮC۠S4Td8IV+*Q9 -)@^['@K06C_O0t:*r[:|j30w.ӱƜe.ő{,A[>/JW.ƅ#[ormŎXw7{8@3E1{{UѲ<ŸnQ4%.T@GO#Hܴ -UjO]ieRh8/Trjas\C?G[s}7⣭7ٰφښoЕ.Iz'0W -G\.\h{}6b%a49)ՃcQ62*'f>H2BO,SLƊBz3Qbi+1D|9s7%e巘/GTh32Aw}GZ`÷0'Z)]?,Il6VnĕX]&x}j**-e%a -qf\|jtZ=#~o0*RW%S_?rPyendstream +/Length 3729 +/Filter /FlateDecode +>> +stream +xZY~_!2<@xk{(HIHLR36@jvW_u|UjO͒L:$Wl-_^)f^.nL~ŚHޫ>{xv~mqx^s\y}3@_ͯbbַY`¾ +|&G(JʆQθޮ|C~)e|X4T8?BD65a~mm[P0Vȴj97sx]5ֱWݟ\-zhemq)g o=:Bvn6P:*,$мYJCq-q*WYJJ\T +ifŞPC.9۠Lz 1O^xRe;nū77o#>?s+Z'jƝhu\U^ҎW^ | +7قUƟP\Xe +C}4z:C0`Q⑻HA~ٱVע,] +IboW6- +gf҉ߞnl +#?֡tlPdĵʇ9Ʀ<f8~2F_갞˦G"#)#K&*%X;PvC]pH@_hn{sD3]b:oH
GR0:&0]CE!Av#^nN$n, +F9D#O
ϛi)iay0>umr|+!oN82_CBP?:{
[j-EtduFQ?Ks#-= 奡3CCu(:bX !Ktݱi(aXL +8gCr
J<>VhYKy? +בCD\ކRA4m}ZQꦿIppx >/Fݞx7Œ!Uw}G='}(G(CVG^6y#QG3\m)6a鱂:8VC?N.sҡrS{KOsP0iW +̩D~89 %ϳЎnLh "^墤ط\dbNw)$n?ȡ(HGypH9ƥB/iGA0 urw)dgLoT{z FDVi\D`Eo{_"A1Ѝ*CH/%5pjKtE@YȈ=V`X*7-ꚺ*,u0NR <v?M C+JyJGn=jwPwM9W/soͩ>{)T9\h1IգzՇ(ھ + 4JW`8-/w{ӂ_W!;;'zoߨtϬnēGSUxj9R] +% üR(DF.dL9R;@{wlιUnN]I:-Ĺ{ +.rs㷛k`Behx)0ؖN<6x3#DgP?aendstream endobj 6442 0 obj << /Type /Page @@ -29636,19 +29417,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6460 0 obj << -/Length 3438 +/Length 3332 /Filter /FlateDecode >> stream -xڭZmo_!Q@ro"z^ib4(h5EHʎ}m+3CE"OH,Wz-0%+!Yy4?\]|cj* -X\L$Ij[Zցreyp{T?Ş\\/_9A`Z\{?_D.=P\|ۊ̂W)<Lr}J<.*YdI&!/o@,qtGl+lN?yP˸I
(\oxF\zoe=nRRb@AxY`W~ GW`Y)<-ȷyX4!qnLlj7(6F
zJ_@DQ0_/(!. -'`-S+>!D>|B|fOaG6ш>Q)?#$q%'.y< Lqnq;
ݱW3oEepoI'zIihp\a96 -6Wb6꓃1y3 -
@(Τ6^ZY;y4Z(Ԛr8m~f$sĉ=ؙAvlDHxO+RA:Gͨc2á7t{)TgDSpCzi#mcrVlՆ\"eak Tq L|u0w8c;N[YǛM8^P۾D(e/GM]"臎[\×
~x.eݩ3`hɣCk\W:!:=l"D+"<a=ܹS -<SσThbQP2}>OPIakjM4L uӱg=xkdd۞[M^6E-!CSM?RQpN]BgMB\<Xȳ%R# * {ť?xQ=j9(D^-1W,5KKOΖsܷNOTXLvx^8>ѣF]68g{G*=RL.:N0Q -: ԂL,2j(%T
cُH:S#GtDDSY~ة-m)Gt=)"ذ/{JbʭGOtէhVϾ*q;)zȞ ycOO~5<(u|GS{znj= -Q -g+.%@k0QƋ-JC`zC6F5S)+҄~I5$;Fx~FM_cpL⤻`4(dToa.ҾXߕ}HEV}!}X[zi+t _#"1ơ8Osw]^']̯zɖ/u(%QSҶi6&S~ij'f'Ey`mI3&#+xݰ"IA\E{XIԆ5z'7be^E3hY\BAc0Ɵ?/(x_fxheD6BWQ1: AEa8kmv4v~=kVg/b^/XQ~"N
v +xڵZoF_!\!ͥۦ%^hxHKKʢ33Z-"S< #],\:E%3 4AwW~"*W74j[~Xցreyp[Tw߽ƞofRϿ\"jOo&LhRqbtЎBUIt-?.L3^5# +h+yn*ϲaAwζB9un$Aـxm5e]+0&z&\3,ΰF8r`EvmONw?JW-xn\iBiCl Ll{`Z}_dQeEt . +/[r(!^7{EvDg=_Gnƨ;7>V"!!1:#Sz"n[;CɄ*u;GxXmcHCm9āYGr ۭ{ҹiYk.MVnw-ܹ2EvC7Hn㉗/t_qu7@g\:
kkaGh+A3/NLDǒAGw.Dnt=ƠM &tV$8mtGn>tFΈIdu8[W7H'^Tw?z;H#wK|
u\E{ڃ"۰2q>;k7pvR9
;uP<^Ma_qWí^L-k4Mͮ"ӽUJvq˝1D;!5S{i+g3חWP9ݜs1GkHHHذln6aS8i8AӸF$9aA
0ָuxM^cx9gXc2P]g +T>;M.o gy=#E=^"9q2_DSTLƪvR3#BK{p U-gvtb"{.d^kvMб;FvM8,91eFk8gIaqر.ufC[4,g_eu f'>%1J^W +FpndD<+0xo`şqRW2AF4Hi9m:~S띬oۓxD%vPgo&x7 GUN/XcsٻNDqU7_ ̂LtM(@s2ϧ1\@$H/\KC}8ݘl@Gi㜋)$P4;5rޡ<}jU]'$\le<uWJ㦤& +
tim/Xj3:.Ky{WDqhTv~,|9CwZ@ PzR~dx) 4.E5_g%L=~ȗ=% +_7S4b~zֽ7:rL +iA|dl#ϴ WrwX':IY\zl`
@(ǁF|$ endobj 6459 0 obj << /Type /Page @@ -29688,33 +29468,36 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6469 0 obj << -/Length 2909 -/Filter /FlateDecode ->> -stream -xڍێ۸=_#Fuݷd[lδAl˶]\$h=7R-{$!yJ-S,/L:U䏯`D(pe$(ő;V})yC,Ox- -}EG~*M[K}v\$vRޖ'CЯLfE.x -#?:ԁwkP
D|ّ,'I.O# - -%|({WGW@{
0fw^S4mr`nǰ - -g&+Itd ~!9\R5~_u{!5bX
|itXcmŜlb
pbr` -l4c; OPWE",la-Њx+uG>7Վ^‶-'(茵\gjt -D /O$'AM$9-2nDЄ~${.mp'akԑ;b6(o0u5]/As%kS2sƨZu6/-wY<8 Ă; -C
)-3w" -Hsu3 =e3ֱ7/3`6xO7<YX~TL&x -o}Αt9@);!~z_' -2z -,Gۈ5ÈR1yIh:К⋄roӵ5ͤ-`sj[֥M{c|r-Q3"]P -\rn++T" -79ŮnSOPc*W(> tĥja/ c.!|y(W4x`; -;cIx$HdUuW|H!^džk.x4-΄C&ųpfb*lf -p]NqB -%fWCKR]Os&SbRecщ٥`M0{.\o2 -@ff~x||yyRԽ-'?^f^ڂrs:)>uy12+ڭCGI -_Rµ -r@h#0LB<;@OEaS~Pb@+튍+]%] B -oOC; ;yw-LkG.
s/DPyqHL(T&gR.~)zvL,)I8~pkL3r(#a4/B84)è˳1!WpZwPӻɓJ9pGy`!cU7&я5l8pDoTSHw`7['0yS:uQ)
J +/Length 2824 +/Filter /FlateDecode +>> +stream +xڭێ۸=_1Fb(oI&Yl;nٖm5A﹑mbsHVw,ߥuݭ7 ?Qڏs'D%0Txx)O}bOGlǁ-^:I͕! +uCE+_w3:4$L`)La:gY$cx x"k #;Yfg L_l:>l +O+D0 +[#:
/{p3<Tko[eJ'Lxց4 rwH3᱆F~緌T~T(9q6E˽G{km0 Ou}g&1cK6)6 +g$3*I<d`!Z9\R'v[u[!:5bX
|EtXa(yUSg19)>8tq*2au{p>^i +6HDՑ'eby
7,Gà0Zn{'
y!=ȍm].,Q\j-(yQ /O Q%AM$92nDЄ'.mp'a[ԑwj2nmTQކa"k^!:.`eQյb#:jZ2yrRA/7jS-s +D.Ňfpg0nUL$p +AE\(jz(Y;b:]qL@8xXuND:WWC +[ڽǂ[b2Qo>eP$QIHtk+v'WXunQ:,kctnW\J֏XE]s>WSp:1 ;(;u;FRZ챬0@S(].{ZH8"[D͋/0"M e_' +6 ,Gۈ5ÈR1y;N'xS|{3V]ZKYM5.>X1LL_ϋe]ʹGjj(S0[<#:ĀrTpOUN J!+`C0^R=M1b4CMNI-G\v ́P:~#|5Y-SI$=&oG,SNQqko/eW_1z$TLV'KAdAo5sR9 !-YU]U%RȅA=#3(΄ +[\Kw;.[{:&p/!z +|Gr.טbB.c]r%Jc!B)-u VcUꙔ$kg%:O'
rd^)r{6"=W{фD*T2:qXV +T6 x(˕ʋ'C698qRIf4pH!,%~})/?C%|d,W5K}xG[e
<ozl,eMwsb|zAѴ$IC
j/NŊ@li{Ҧi +=UjN!VP~Fg#1D?<<<??saj\d$( +Ю(c7=R1*Z;X +kxUSIQK&T4c[ȹog;4z` +ʦvTҮ*b=YYOt*!.9]ȴ?sZC 4>W +i06}xe'p>YI +t +9&.R:Ɇh +8+ϣ[Q egco"=T
w.ѕ1OE2eE6=Џ5>7t-UmQ05
FDO3z5a"#kxq]c`KL0'6#*I@~6Sv_ +V]j"i +]E^ŖVd
H5`XFORp}ꭌ;R
HljWK T8PʇVkEWA]: +\n6P +YP{/Tg=ιS賎|"O +C7endstream endobj 6468 0 obj << /Type /Page @@ -29762,29 +29545,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6477 0 obj << -/Length 3882 +/Length 3469 /Filter /FlateDecode >> stream -x]oFݿ/E"w4ɥ'HmQ}-Z&B*IɿZrIQPr;=kҁ8/bnw\na+KY0߯/^؉\u7??_~\,=ϳ<^,(]]ľͻ<w~Xp]Z-\k}\z/%<ݬxnin$ϋp.7/KGxvlw@ſڥxοx)`*se8v!v"*M~Wuy]Kcͯ߭7i`dY}y V^dÌA-Tu'X܆HT综H+*4l{"WEPɪ_پƉ*`d_8+fͮf|7~]ĞU1/ -~kن_&6/v(H@KFHj鉭GGJE\uve}TZ -L}+L!DSD3ġR
` q
8o-&Q!lAx5 -wMDݚ47*rXeGڔBhmaQY@lҦsUlQخ Fp~7AN\ z^ 4wJ9lϏamV.<Ǫ [`Y)U酲J#.7UjF=P}V)[xfU%2V\X]?*s~nڳ}"y$osV+:-̄N2̜JN`9@6UVdw, -DȺ -ߨ
|/Zz8J8;qZ38#%<9p ߝ5h4)C|7A2ЦiiIt6 F>PЦv"rwh-9!=_ȄIXW0N -(~a2~P"{"kMϾ,z=
s!)fjoDM)Vkd;O%vu=Oi*!s|+#/vcX.$f9C.J>oIdRy=;9ċ- -*jChob? -O;gc
G'ZŵO-tc1+\;g|@31kĬ|c1*U`˛I
22Qimc>,Ag;FKXM_B*@vȱ$Ir -IUH!
p^B~a -М -O!*<7Waɺnn(FǬnZ&&$=⤷i5IoLWt[`%]m.%WT۫o^TgC59jߍ$"0*؛v*M)_Z_\kΖ僿}M,nK?xء̶p՜s* -`zc*CG&g9 ߨXE=ȗUrÃKr*P|xTt='v'-3NR8q
$tNw]V!~پ -tN`NsوB.:kAGm֔Vm.%.xV -$yИGS:+
ŔD'5\qJ4֟#b=9:f8XQb56ZǜS%&@-u2G5vc3XW֟N -yaj]C*&1cJyfMWaj+ |64)T?͘@/
i$6 -A-c`N -'cMZ4J\aA*SJt3m-Lp@eLqH-kyڎJ-x7-e^l ei45&I*[H9.(rFvWuyv
YlgroMˉBm)E40Z>,o,_aX[dbiߛV\{3'Od%;7::+n΄c芧Z5+|n4ϘfuQ] ,5~1WD9~)~F ~>k{8 ->₩`/5㝀L&Ws}6G6} |Z{.I(THڔY{A&3Mp9(zL_{J[=]Yeg!
!@ @s0Pߨ)@+)7^?'6k))|p[_=,a=JcI?<
gn[O7/P77qbZ]-8ē_#@5<1-x01ڲc3}I#H]^yؿ ->.qF/6g*.Yi`61!12ѝر
]mք|vb4"Rr76۸0(QՁQ`9?a +x[YsF~ׯK`ʄ0ʛ^g-k2I<@H4 +pN~;a?xn&*MO7':PRN'TM 6̵~&P?eOar-Fڹ,Wq-W^oyvYW2 +.NQt8iŪm[lz&/l>bm-lFuNeUL]\5Q)%Ny͋iim5%$-6[%ƃ-
+٭lU$/ \).DmmHXqieNVrJLRwأP` qD\vPGd$*ҵbJZGqV3rH*5-%F-iFEsS",AqN_iS!ա<$M-xQs4D,lxNq?q8 J1إ*hvNǒ]S~F1 +j!7S>\EEzƜ0HتGlʖ;d-۠l BꪐYۋOe+dJ9KHaXo..߽yFk((qckڧ-v&'-OT +EFΒ`qz"J1KIF +mknL~_h)7XpZT-Tv pmg瓩 +G#)(UR1nx vڲh8P98G?a;ڙ>y^ +sPR6&28 +N867NOhw/&NO:9Y)>w5&F>wض$q7ES03JaR?M;^Bmfq +JX4(p[P|vS, +y{Nxtz423VWNU6j!@U$6}ϥ$Q8dpjdhsjP6{Z39Z4OmϸeIi-]jȝ +UrDKHg
Fx˫`,y%{.䵲+M^Ym +(%ق!Hj.4YM Oel=N_wn tٮ`W:ȺnEkNv`zC!U}$Ձ!loo@ endobj 6476 0 obj << /Type /Page @@ -29844,14 +29621,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6488 0 obj << -/Length 2519 +/Length 2327 /Filter /FlateDecode >> stream -xڥYY6~_}2 X)M<P$q"do_(<l<@7אOMRQ6IRGi:Ylof>( l@?c=QauDo۟n("OgIz_n?MSz_?MRn?Şm&WhΔ=>OxC/s/
ȗG0Y~ (K'O|7:~ys~+^5v?:0FiGi -Hp&MKTKTaI<qDx*9=Td9C&9g790M#yWKnlizGz{vE]ܢy~y*^Yw-S+ZykOwRa( -
kMgazK[e,q<'(#z`rQowe9iO|ɭMgZzԭt7xn[rV'хۖN#=0Ab_`'g^dj,:vE]x
S]w/½k1@ -ezroE -::Lendstream +xYIs6WhNMMEl\t:ՋT* c. +I
8KS2<<<fYALQ͊*m`͕` q'z?ݚHV?x/{iȋ?_i]~7ϴox+n~|7WJynʻ~{ڻާyzbPz;۫wI|Olg*<=@;U+G~#WWWjX0QgD?%]cYx)ϻyy#.ԞiVܨQm~fő{vx퇲mx9rXvҮnU3Eo+|]=eX`hS|FQn +So 8κx"ro:G^l&E[*rTfŭZޫyi{nDC]q6EKHᶧ
!\Ez~QUz옪U?W{%Y
ֺc +|G'WʫI6
G92/ہ)L4Nħy9e3\zL;XVDsX秙saN`)Ki_}Jwr +gӣ(p
EPmgGʧ!!FjbZiL,#>9e:Z7RCCU:7n-`"/N$U'>6<KұpûZ1Dss> +
_S4eՆQaB_SU9Ǐ;z)@r."~'. deDh_˴Cٕ@P)B endobj 6487 0 obj << /Type /Page @@ -29887,26 +29666,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6495 0 obj << -/Length 2917 -/Filter /FlateDecode ->> -stream -xڍk -s"Z#[nG>r ۲FwvSdyU -7,o,Um͇`s>cZxesgvwI:];viJ_`~ihJoTowqxlCnw*-뷻+Xmqt$>h2l<[$|lvUޥ?IRxjxQ2F?}G8cյ`0ބ(4%:Q#9 -ۯ[>4~s NŷxZ
[pl``&x-`E㡳XIV)CS$"poL|)Ed"!K^xQ_*+ȓ"4lUZkQngP$ -_pW y/js(ߤ&!C
pPFiWu'em/0Ѽ=_/pcBJgFeE&jfWqEyJ0iEF7B -?&]b{W`|qK?^(Һsrh4Fƒpژ -n}5Htmh#3o+`+VrTCo#J^ۍ<`?P!A-H@c9J7I+_Q;cVBcI&;8U0GجJ0BT8sG8jU-&c$ -e/8n|3_];ػўgȌ#;+M$eQkg\mQ52a=lT0 {QNn0x "+8@$#tg6(;K-Lv߂8`ˉ -3J28>ݍ3{Ve/G석)fPѐ|e+ѽ<OI {;c56͎_LYN$@isTT̎AjvDzypbK'rDbk@AovMȕu1^n5=uւ%B(V!G$rƤa)FK -L`
83
]!JG~H2!S9'2~ןy$Gڏ#5'gYhD+=qͬabjHjŔ}Qs_-]ZYe:J|"%YW9Ͽoqv -Ę";(mβta'c
2x{,MbC@{w -Ó bR -&&+sCTxλE1]f%DY'hN`(~0$Ha$KY?jcGIz>y"
Nkr04$p[gZs`UfP9Lr0nn\ -M"O%Ҽd pB6Iljo0
IErY:\Pq T'%6Wf WBu@ΤtPb.*^Uܙ\ -w*(N(&FDq!{Wl@(*g4Àױ'(L@iYG\5TW آ5Skj}QAGiܙz:=* c5Ha*ˇ3U(YQ}vi#"œLV2~I@^ -9;
SZYSv eâen~qͥ|qϪ,3Yߧur(L8녲$ȗJ#Y|!Tp3mȈYjo,Sӯ +/Length 2797 +/Filter /FlateDecode +>> +stream +xڵَ}@X%QԱ@`,6<ȶl+Ð|}")r!hEbn#U>Exv@>#*i +BYFiaueD><9(2'̧?Z(yiVq0߸Zǁi` Y|<dZzl30 +p8Va9q48F2қq wi[7ĤtW[W|J0\Pryj5/1 +-/4wޜp|I,ɅDfa9rqyhLȴ30`tDvLko@z@x?>n}ó3#L=1T٭qp>v!2/2{D+S[W3g5]~.iL#lLP!=a"13XV05E +ʔ%QK!U#E
OcZrLET$ +1wV@8hnFډgÞp"WxgfCF`Յ]]DLJ~gv5r-(N
&VP8HIWUq~>{4膱Ƀl8KH@0V-/V7l߄`o5+#{0eHz +L"x6lR q['`6<dC+)nǚvV`E5[ahZkˠm&#. kӊiD55L8/
]0g;˾:1dj
$x_~ TKvF(U@nEi}z5B@.õ#ndGÙ "@筋y{cGM`k#$h+0A.0c(x`.֣ 3#Us-rё|+4OI,w:d56͎B9tyN$@RTT́QZᙧt|8{"ۍwn8Er"3,1B +%WL*~6u(i)X!VfAJ< |fQKEјSmp<zTI?."E>"K߭-u⛵e"g6zZ.}~?ˏ_97]c +x1wUAr\+gż(lKnpf +Pel[V[SF=ݯ\ܣ3[Pڹֈbp<ƥǏJv:kRߌ8J"'8\kd9G/u{ךw"OLyPSHNI!q]$] endobj 6494 0 obj << /Type /Page @@ -29967,23 +29740,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6505 0 obj << -/Length 3381 -/Filter /FlateDecode ->> -stream -xڥZY~_1X,lyۍw1fg#R3)v}fS(vWWUQ,0O~{0] !84D~~։(_WۻO7a[o4[}VeE&X=|I><Q;q}\x{aݟ{L`k/BwwK\to-43/s P^4؏訯kΑ3vtoa(W;8st -.iCGV)lD:1PAg]H뺮[\,3ltձC%6 -4'Xo~y戇r;v`@%F$E^jKL;Mci~{f)A[\P5@E{t.hpOzE|mcD&B&c$nz~cK/Q8E<p(qҝ>,ю -sgT -/w`%"x?h6HͲh_=Uh[
;jQXO>9U#{'5LP7=;ˠQM)3/Mˮ߶ >$` --HEeHD
Q XIT~<<Ci
1ާ`x%TF-?U-+v -nk~վAk̊PʖK[Jǿ6â|FiQ\"yXEf>]n\GkOY;\D:dԦI
acA6rCٱ=3O`TQX+oJzbVn2#{cA+HMFcc3p pb\C7E҄Tݕ{I_OE3٪@41/9x>yбA+yjImHs(9?P嫇f(F#Gu诺3ʛL4!Pa"Kj[:YJ&$A-xӻs×/Ah|1KSL -T.Ř0ݸsmv膟5rqHN/g2ZNZ56@qz
%fчβ*m㰗e'Ez-Yt}l'<^ѳ1!T 2Lʞ(ƃ~=#6>pj?aOqro,:LNxq}ȝq!^lW%aA)h$TE@`Q,dٹE -g5wN_Qx8f]J lWk0D/V d pJ -'APdz'G'yi}g ߚNfX4e/1{ݕRZ2˛)/oFhΜc]{:AɷmA1?>:1m{UY`uWr;^;U<xTST+5C.hBu QҺx.'H)YD;(r ?89F~zs#Yt49\"0 $宪~ ^dtCfۡp^4)(2?G6:eJrt -?LmT7 #pmgbY$K-ϒ&n뱰QpbZpɦy`:I,1.l~Uwyc)AP{.S)Rdy5EY U6ݮ.9LC
dńjn#R^]*rhngWt::B::8,%rQeks"@9O -Tt[p.!aNТ -^9يR(fXp d, ^4gN(}"2tflnwAK^ 4VT +/Length 3327 +/Filter /FlateDecode +>> +stream +xڵZo" +
\tHRv9M>0l+KHQh +,`Qpuބ3vLoa(W;8atG +戭.iCG7uwБƞp $IW +:=ӘG_7ug?|`3५% +!B$s5 +x5Whx(c
<8DQbJXy-^3L6=Qgrmۦ lqC +C&Y6+*mka#_Wm#jīvǓlpȞITͫf2DS +|ӛˮ߶ w +}IOZT5EvʐfiNЁg ̣/oP
H}Mk>:I]H%onM3bx\ղbWnۮG_vmWDY\ڊof/0Epk3,'%tmOCPy\~W.LaO#˵']I"AW +ϼ+"c/:~[Ɍ܍LhYHpV+U[48AX
Dg-Bpzw(b6eKZ5V7%1?K1x}ɱǣk)a iKB`Gy#I."txHP +!=)Z&-@@F'(ɒy`}?@ȃ9Pœ'G/?i}gߚLvX4e/1{gݕRZ2 (М9CmkǺ!H0;oDb8sg#|tb +P`:aOA+_#dXr{3EHh3!P|/Lp*SyDlU4r!ؖ+6Myxl
!l/k0+ +9Yv;vkcoRTTU-FD/ Q0^w~ޑ4^>Kcw!;9\g +cU0'(ͯ*!%Cp!L[vi,W +8ǝJYJS +(u r{!3_{;B}9p^->y +KGdn#>،Wi"p)?Ѷļ]Ap-oC0NH>B-K2ObR9W;^jK݊Ԗ3.xmDq?L +3ӗ>+C"1]!K] iHAH%|Z++?*1P0R\5昙iwnc`sXI)6JQZcnkc)#:{ǷN%mG`sVg@RZHib*ɭv8ҝ+˦ǯVSi3\8pqQ'1@y>7~,Sfot! <uS:;u%8mp?]|趲(dK윆+*Agcנ^ k$w?RXmq̿j endobj 6504 0 obj << /Type /Page @@ -30018,13 +29797,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6513 0 obj << -/Length 221 +/Length 210 /Filter /FlateDecode >> stream -xu=O1sCclj3 Lb@ -qա,?vITK(f6r5ّUPsbjCD͌uy. KU@968 -1JLJ~sLfVd*,
-Ovs8x$~RE_f\u¨Gw3!,a6 N_OM`9
X&endstream +xm=O1sĉ3R""Āh*`w|N}^)? +RC11oW;& +hJ_:Դ8̠dȪuk%݄CS/?Ar7?X3'`$pp~z~ ^b2zȴ i &m%A-RUendstream endobj 6512 0 obj << /Type /Page @@ -30044,20 +29823,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6517 0 obj << -/Length 3034 +/Length 2803 /Filter /FlateDecode >> stream -xڕZKW|Xb1tDS+]Is -y~|xsQQdۅR7J/ߞ*ji\(Jy#/Ry<:d(
|E*\OB0$"[&ƫN{z9J5fGS^CNu6 BʫsR? -w¾; Ў$J;R]RuX{ĒAKgL -| {~CuOuK|"0<+`)IYA`qGڻu&䔰) TCN6'x*?0J:nkfM&|6ޱx5.Gh6`%]m&N{^e%mh`PL>`!( I -g%q+Wq;`p@W.PN) -u=kZItr)hʒf펉ՖyEk6H\Mk0 -r/'Iy p2qm{Y##CT&qa`v5#m$w넯)8B7JYj[F߀ˑT^e;kĢ)6`Xo+{ڳKpuŗŗM(i,V^r02UNVm%|7@ҕ{r<7P8a̭Ù
{KbEHny2JZF4w(8R96bF}~ @N6a"ِ37"wzuON]K`fƜk1i_!&c1N@ߨl<ّ|5O<"4È=0IJ;>ߺ($l5]!ϸY[!$r}i9_ZA@֘xj>xe<rWqye9&6]NR+SٍN?zEuM_`s?b<TC@w hvTu4-+$*$`LM)W*z'>y@AyYN";J~<}<PIvq쓇vϕp]#pc -:ʀXEz:x,T&";Ez494=MWK$iNġ_+J)5\'K$+5@+Np)9[987Y+;Hs=/Ajr -#H`&2($]a1=V)}[<ˠk.<`P5#{e2vV~ٸVIz}SjHHkY ';v3% -mn%l/w/*3@__rqBUo
1]T/dhn:Ήi7M
C67eendstream +xڽZKsWb*˧xػ[Vʒ +JU>4*6e*0~<}xwa=?VJ +֡ב:W2:nˁsSI5imn@CA٠d}i?Le&A7nmSj=a] tX(~l6_jYaC
_ڎ-)3#A&dfaa8'{;(`El7bU!_+X~ٚ]Z^U_<>v?
i?# +@O*%_d_7mrLQE^U1(ko˓`6. Na7;j;A'o`߃(x6ž묯gP'[ &cW6zhn%LbZC.qg{xx +MxMIrU\KuQbϼ_[/*=McٹL"/\ ɛ5oPbHgە/>jhZ$ {P~\eQLOW_vdN0O{wm?ϳ|~Fӕ3wwL +knX1,a1r?c0.1$1)´,D.#Avqd(ahґKA[=8q5gnPul +l7J2pBL
hل![9lC<ȅN1"y'm(r?ˉ>,$}W~~6VK U5$tR=SpQi0JkAO}h eduf;6qgd3x_Ft;"|qtubn(@[|B^sٵ͉hOvmKyq9[-Vz!y +.}OłNԨklM=f &Zbyʸy0ǜ3#ISvZq|%3y +Rݾ8Q~NXP0`xK0HDž%/Q)jMJa*AjaY^Zdy'ŀhչP~!<>LbW.Hrn +%V8_X; |xb@0a݂p!X,<~`?ڙ&q}OE]>LU~˯Y%#I)s0?Y^G=-?$;KJ66'k ~3o;s@ EC&}eN]\8@V)4~tTY^fyS]:4ޯ
TǗey6?XwQq*dx cJ?gٰ,9o2j{(J=nR>+j7J"RU6~.|O\^khT$M]9:J'lsWW qs!,b3#'(ruÝ-oWiÒK(OR&WlI'xowsD`?Al_2ss?&Z$S#qymA0RH.P(o!U
oZZifӰ#é^UcB)k(DM_
k?emו|r^*by0Eǁ_MgnC9td(h3IQͽa{eF
Rx@)L<Y&MoK3F endobj 6516 0 obj << /Type /Page @@ -30159,22 +29938,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6536 0 obj << -/Length 3098 +/Length 2923 /Filter /FlateDecode >> stream -xڭZێF}BKƉvvx3!G$'oj%Q`waKuuuu]N5O<O|ffd&+yw+LIf͛Ǜ$'ˁOFq8y\|00q4͜?LIFo~w>s? i)~Wo 0&\7$G777Y\4Uc
Rje(nsc/5ǖf v("&r燑vB'gn?vS:tЙt;ŎiexoiA|u}i:OKu奾Ӡ?e y-,"(U+XTfEtt#9;oJ#jyEȘ̻9lʅd]QJfFDKÞϽ(/*tGey[kmҗ 'q$>P)R.ts,fRN9*+l%ߓS_K>R'[ݒ隒io>=CdBDG6.]6Z4!y3l x˟.j;Y~v+ûȷm9Y#$>Ee%d{/xgP"VBö -v,2^&6qNL!Za}2. EL$YLdշp60Ot 3~͝ipn}F|N[uD&0b"R,Ci4p4`'v^K=F^OL=i7FI25JzDG |uv^`43bh%ȈdYSÙųM!ldiwSR<%3ݾ5q;
_"DSVY6?l0X`7&x}#7LS7%ObJfɟ'ߐxVe kxAfaIY,S5-<i8(p}e 1\Jk0⥽Ek@
E=yH@'@*93fw[, -FLamwFcl&ɞPҰ<ƂvP -^
_o@z<MŻroٶCKEhaQiA!O_*=>HiB)Su+gs)H_<E3bL禉0#X )6&=Lx -NQ`qAgfđ/Ri/1%dSjӝOc -"S,`w-q V&R8`,ra8C%noYe#Oi3i<0KaTK54܀J8;)Hq! {Cxʐ"^(2J7ҿHC"yBlNXDnB+3dR~-{B%.ed\B2hFt| o Mcg(4@ϩD֊< -\W1dffىB2n%r?1zYc]!$8FQy]K2L H8AHwv#eDem[7R@25)5NQ^rZ<5,ҩ2(W@u5:P\5O0*Zh:՚v?D`(]-jn -dXt)0ggPgIPNEZ)%Cun+k42CG&y4HƋ\5 -+MjJƥy2h(NE">MCa<V\~@`wL -k -wq&_ Բ -S'k;l;i+mRqV0ZY
/.u=>R%hK1}E)KssJ_
ݷ#~s#<jIe#;[I4[B&֦1NSh_"Hq9Ibvǭ"_o!C!YrP>,yw.ofnKBs;endstream +xڵZێF}BKƉc;A#QaITHcNU5ْ8 a/u9U??bIneʛh͕$r$ԫh{n%/~qy{OYNYfA,?7?~;Zw?v{kYFI]7o}aM~OWQqjsuwEY5rY$nR#,h
CGW(e,c78tM|ӭK4Bg^oә;bse /"- u +fusK}A:#ʺZX%DPܯVf#p7%#jyEȘ̻9lʅd +]QJfFb5T={Q +ů^Un\lyhtՊ]H_Hpb7u8d
I8$Hy ͱԔrQYi){:jԻŰ:\z`Qcff_)nIatMɴ7d%2gCDG:.]6R4!y3lpR?[o.(C[Vw#_&FHNƇUj<z~㝡@he *ذHf/[TƠ:;<2G[jskeˌ<0dcg%Qfz!/߶o/ +S0Am?('
c Cb\+4A;fGAc+~jAcq1Gx:C4VMq<av/DWacl4/T# @`>99ܐf@I @˶bP*"D0|[hT鍩ݴG5ԸFۏh2pK|7N/䥳rq$u$$k^YAK)h!4j_04ȬB\)VU*-$괝r`k3^iL!L؍$HҩވL1oY2eY_ׇ#{qY<Ń$ A0$ubW/8nC+C.<{qw?8́ 0܄l iL\Ҟ%"[yGVΐW)>RqxwX͋9yX&<ը$ennB,/onE7lglֺn`ٮ'OH}VmݔҪvKq8I^1=Bs#/uޯh~ .ui+~STE=@58z0*ZG:՚k?'(]-jn.BdWIUHhdi)r8 +:VcrZDIj2WHo\ҋV|ezGˣAg%*FtOoKb7(/ ?u0|6G?LCP<V&75Ы]#1B&QQ*oT3Q"X +La1f "V5aPtjyjJ%xL( ;S6hjlVm +0K4\<ozk0(ΪRӴ}bNbCdvp"n=&щ +fq誩D1ajgOZNW \H]IDܨZfVdAKkv[urX:ݫ9ekOv +}}`: KR߫;<RcQal51+ya-ueٓCY& ] 7@^;M-כ+ŝzV:`iŋ'kH`9g +U=#د=H_oy0y߉axPS8NJ/!֚;;<=\5Akʔ@e"?n?Jw~)X/1?]v,Knd{vSBw=@nG-ldc+eR{ڤ5b&b`_SձYmFX,SITEfj3,%:E2f_էendstream endobj 6535 0 obj << /Type /Page @@ -30240,18 +30018,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6549 0 obj << -/Length 2316 +/Length 2150 /Filter /FlateDecode >> stream -xڽYBM>"%E2@?}NωsχAHI(R!)_a$q>fwgf;OCvt4Be0o3g͔P,d٣y8{ʛ+ǎhmGǗ+{к_/}7oz%ݼy~ǖ84B.~3OfpmV0}iw[7UcB:P_Jնy;x$vU͗oU
^Hd?۔ſԻsݧ ΗBThDkzTV+46e>-`'+tk'SoK>॔g7R\T:O<ϳqlc2 .c0djZhI:.TOOY.Rm4nD ^&^*KII"=B5_.'ޢ@yA(8z,ON`{Y@OYYF -OFlFH7NM<5'Z*YYF&\gŘ/A6' -.͎l" 6@#̀PD =>j4P+F]1!5v15yLs歘K/JO:%l
(~h(V5<#Yl
}8 -a%9n -Mc!G3
Q]?bP"K1'/`*:IXᣢ`@>@#Wy^fOd -*;Thdruot6Dk gP9_L縰Ǵ1KQXt4W|bF;gp?`ReSeB;UI{4>=?CܙfuO+缋bâ4f'tSu'Zo @GwlB7SlM}qU,&e[ҭ"eap
Q*yjW>Mna/̠J.71E4('O`'RFFf$V779=\U -wr&ؿ><>~ezH-:>M8 ߘRSߙɠf"ա] -q
OD]LN`o)wQxb!:sumW^(g~`9\endstream +xYBM>"">gE%$B||ÉSp<~r(OȵUMׇ3&P8SvN=_N}cN<]nd~oy|0+,g0Y=_ܿy;sW_r͛7L^.{}_(<?8f*gh;J.<OyՈls
lsQB`DȪ,ϑg_y/j!DuYq}q{4ߝΏt:깋Ŵ+gsjxES4m[]"q;YzMr(MV.WPxrиU|߷81B?1'k2\e-<R__CGb?gHt҈(uE$UII"=B5_.Ӛ'ޠ@yA(8z,)kTY^V6,#.ũ"eH +fg~ +
INs̍+O5]
]xrwat/mw3/<kWd +*q3Zp<ȬV5W2(%000Q!:JN8rEr sS+gv~]5iMJ(^¡Xΐ35P/"vේq&\l3m%iO ҬN=/a\EAv`x +s[DkǨ +6Rœ6κ̝-ۚ1* +xDx."GlZPq%tPGۃTe3x\I +"5be/B`VSd[{7"Pox.4ry=~ [9y@}Ҫo`W88d +|<;._ߢg6#yR1+w(brŅ}!sͰ/N6R/JY9Iq9'P }g+[49>#־1Yr/XXS^nGpzbGy%AYҭ< +\πC"RwFH6`?2hE$3ZRQHʸJ]s/ϚQQz;GQaK;`</q3gH;@dcM#.{ +jATR@ϴtv;\c+`lSq2''%/m|gD
,{G16_QN-r*P^0#B4Q2ϗ`Ə >hS-ޙmfb ӻ(GfD*nNPn'P,#~SF`ԬUxM0?\>endstream endobj 6548 0 obj << /Type /Page @@ -30286,19 +30067,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6556 0 obj << -/Length 2557 +/Length 2444 /Filter /FlateDecode >> stream -xڭY[oF~>-F/6EdE(H:$6$eK[Ϲo,?=K -M6KRLVE8]hY%ɚo.vCj3ufv-W<_c"I(
~ѫO:|_W?^K3o5PEL*
5]|p:ƴ_Й"w^0V66`"uf-I@f>0h$7:Hu
my$QW0N&*<"\F£XiS4{8 j%<m3_ &]4kZ!4C0K\QhZޚw]Eidr4Mŝ
@Z(vw,4j;#v:8mdZ~/8FM sBL? $ؾk5^]p{3yv:RREV͡Vx%
]9J3RU@&!BfSQhX]l(M}팅c
X\A|De=('X0Gݲ
6-HظFrwsT}qDDpN( VITEZ+kV -b0,fH&кG6`|Z˱#\Cم%;9b]P -];2 Rwy35#m|-!Au47xDs\ZC(pk](r{!]C~DM;H=\)o1Pe9l
*q`XH,~ t_dKȑsu+nh)x5ұM(#c- -2Ǒ׀eo9JhoOv-/w;n~cz뇹nWl~'-iug)ǎ?\ǜU&zjGmi?P֫i9C@kfZe(1-4UiM4eAR6DJŘiY;1Gvil#8JT@0FE"#2HeQDL21)c%OYx,lbza0Qq2pak8<I/}i,3f&Gh`yY(.&3K8*̅b'aBR_l sv
@(A=v~YZj1{G+pskyw72@phyygÞʺ&`$᱓
A3NDuO&t6
ڥ_ev|h!pDIA, n!:?=:P8OKw)`$kd#(wa.AXȷ>$J"/T&[;x'kz!%JNΪ%RvaB윯|4]qN۲ѡI -@FˡF(lM#kXvyu/zUk9 [OTgl}Psxmp[-=ȳ*FK!APk6GC_
k[^%% @!Hأ/<|tcqI.OI8<?d;Jo_e:anUSI#- P -09eEY}*$U&uT`πRQ -~}wtw\82͵f4alku|(BSJż$*7*V)b+4]b<UIEn*姧\n+5$MXD |);S!P |͐e:
-y̿Gա~ a05lfBM=3rE=}*endstream +xYIsFWpNքM4ܜؙ(؞HUTD"J eЂO)){}!"u*4"I2iTfseE*N}{}>,;Zr-W\c*I(
~O:|W~/\O.]Yec~p~ClQ]XgF]V~Jg*ܚ(QQb`0AYel<pwgϗ&ھo8 }دn-4 +2YyJ"d(rq4P~]&hpS2J#-W:ypf
M 7I'-og,\dּ6/N#;m*h +B9$x?{Ffc>NbMLkh)aNG7yͣ˙Q^or8BEe][i/=QIvd{+G~BR +{ݤB4DډSQhXl(M}팅c
X\Az"P9O:ae3"`ZEeɇqmSbFDpQ@4~n7lÌ +6br0|oT$AsoiM#;Ov0
ֆv
p*`7tځ%RruU{*ktN%ʀ4Tȍ}[䭬Ao[[l Y8tʢ#z{"F!g[lA^rHyK?K:5T?rmC'BX=ClD(=Aʑ1lק%5'W~[:iuis@z7=d%,-YpȨXx;h3Dq/;dj|䁇pVg{7xjڂ[?,s8,!!.{rsw,tjǁ^=ruY|U'@bpO4%A=Rb]ײwB<1FA^kL@,T $S=6pd)"UAbI4#w
GFt*->. +mq
/+x +س-IyوP +/)Wz*k6 #yߗ u{,
^4VFu*3V=N +D/QT5cG\e endobj 6555 0 obj << /Type /Page @@ -30328,16 +30109,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6562 0 obj << -/Length 2051 +/Length 1970 /Filter /FlateDecode >> stream -xڥXY~@*V!f#/)y-["Eؕr\Ēp -[e*nBLQi\IexIy2Eq%s@G$0XLqnl7JSW8Oڇ`9 -F,ap4<F;\Hn#tTqDf6Yegh`%:v̺yϣE9ܪ8R;Be -|x}c9f?RXkdkލB\KCD@&?D$|!2Q|!C-|Fc0XccPи!NQr/\^-?AKŭ1].a -fCƣ`y$V΄Ym,"kW& -4y k_3@hWW7cy8QMHrޞG$e"{`^vlBfIUh+-PX*җ !;Sendstream +xڥXo6B~V(zܗ6vSt{_Wh[u+ɛyP;JZ4!9 O8:q"|$ζ\V[8"K_o#OYz{KOJ_zqo-w~R7?_Z~z=S$g}|&=_S.V)56O8~&~ԩh:ZchS +I"xCR$2z0J*vL:@@]釼$H?c>$F_2]uuj3uU
|bZS3Ӌ@n|!n}ڊscuOc2Tڳ +cP< Ɨ$I>>ɏ=hzg۱΄(rK6HL_'ZaPj$5.'Ջ"#}a<q4P=ўxX0jhFO<&vf2Q "p +ߔWM]Yô +x4 + øM5?Ee!Γ/@]! F# +ڇ{B0ցY.BT@f)9%дDž瘬d
Ii'|^3 =(a4L#a5n$eDMGj7)nt t D:Zښ̺Av"[UL(;1>2N(k[hy7 э-76M4]1; + .HbM^ÌS۬zkUkʍarJ7uOuBp/Bu&WwsP;8WnsB%ԙ
.݁/"B?]=ٗ+{5#ǜIنPs.}33S|bV-HEUc^h*ROـ4Tz!ʺdYƁ`"apg #%s+S^x*p)#'nbtOJ0@gJl|qřjiag:܅K;뾈/MAJSn'd +fMy,v~jG>}:Δ`{ok}WlȚǓ@({K얼`Ň%9Wy3uJ|.N_Oc!QD@:9+zE?iVkl%uXnZ(x:7W] 0c,EJanVuy̹5FƓL['bg/5Z[6e +=SRf[#y=60oB¾媰lc +*"_F<^endstream endobj 6561 0 obj << /Type /Page @@ -30367,29 +30152,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6569 0 obj << -/Length 2878 -/Filter /FlateDecode ->> -stream -xڭYoFݿB@BÙԍEd6h,(PI*}kHJ<ls|3ݗjgE+bS]y켹R
|3+ -,T_!̿^B{nvvҋ0]c"w -4iO/WIR9%s_~xSXM`+,&^rU2]Z-uJGyI~\:\Ưv,@^{-zVI-|k0;|UEy!;iYJ
>Z!h',u|A>J0" -P0FYSF1H^ؑ!0*gi -$!׆k}qicϋV m|_:H֘*zP}Ճ%ͩ`"1`9t<I-+xnS[!$M(ZlQ)$Vt،qK Ҍx `2='tM໑ >ʀh/".Ƌ{JEue eV^]{2 -'h v/"rˌpͼyu !jzP$nsB -ov˱zHZKdaz@X}a۬ܤqM.;6ziocCPNm91Š/x%I9Q'^[c&(NUk+\ -) -y&JB#Q=X6)Gէ)<%ϑt79n=d6lj -x*[.!cEEE%Ի:%`?lٵ*6
5uY3 oلwH1 A:?!כ5+cmGdZr0s,[6olofcs[HFNʙtZ8˺;7mѻ_\z(ӵx,qK -3 - -a;X$Tڹ?#Ы މooQVcCR=A(E"t,ߠqvd
3C]ߴ"~lAB-Cq6 -lz3/mv3>OGp~Wʍ]#~w{
hO=sjxQF'ғr.EInLlF>9>5mBvCIb[_ -3Χgεmgԉđ@G"rwkpK|ҲMv<B[nI)+Pf&GKc74t:IUzoF¸N&!M5GgS2c,Gޞ_4 ZyIǐ2G{Խ:2 -|k5QDQ!w~H)
,(u0nJċ=tV%y
)|/l2MX"͛)x1EeQTWLPO<M[HȚi
aJZ=Gr]ύ9cP֢1"brGP{"'hs-k2(5I& -x<&ɕh<8j06ni\qbyL7GZmt'? ̖)0\̋~V91D~j|ڴv6,wMyzQvQ8k7y93TK[v3/o[ \/\ݕ4xnO - -u]* 7:).\ry
n +/Length 2762 +/Filter /FlateDecode +>> +stream +xڵ]6}>D%R_wOll&
.hdKȒ+|QmmK, 6,N|ed]V^^aCBkX\E(m) VAlfTƿYU0|{;7/|/[s߫O?7{#%E:L +/+YU+
^CNp2/a%xu3a'C +e(hvG/ddMoKf) -ec/E)DiGުCv>xF
-q U=ʦUClkʊFcA$ +CիfW?Ezl3"||W>9j6eԉS?E+oa4lq뽻'WA I@zB1e+j8GB +ZbD<r,Ja&MYu)5,F.sYcoZU0h6AC^߹c0F$ +yB48e
yA/9$\ )sZY-6a#R3a-WC~x@g!yᣞv`4TDFտdef*> +皹-کwADXp''J!21)EHreLFb(MRJԂܡz +sJW<uOt*<(/d&(ft
[ gpp.($~{,qA 4u~ AQ x@ǡvQ Hv䋹"9.GPX +.5s
4BYRP'^UL*3d!9:4"V!<4lS#
&` 82#`r0o$zIջj`qkaw0yW-CrAxJ]Qƌpd**Es%iʙ9*}=#oyDIz5JVZW2OpY6BH* CHx
U#-,C|*g8$1 +69,!SO+U% +|ky@G_|F<
npʏ:C ;ێ3^ȃ@5ոq#M9 Q{#:`uqvԗtt0!K?&:d81&b,*l䤸&>n!/H{C^D +?.c1$ZI3>[`t@\^~d8?3;T=4;sf^HYEC*KIV0Y@+\kbY"u[!s!NU$j@7S[ITná$ÌLvDH)e<]I :~0Gݽ*'-o +')QeGj3fjQ[nʟH=A)})-\a1&8&r+~'GWrP +Oʽ~kn±P_vendstream endobj 6568 0 obj << /Type /Page @@ -30437,17 +30217,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6577 0 obj << -/Length 1158 +/Length 1138 /Filter /FlateDecode >> stream -xڵWo6~_!$y!ERYEvZEAKE\In~R$[*C}wd8GNDȉ7@DŽX
ߪMOGSg|v).q{urv3M98`N>; {7N# o&p$y>yٚ22]Cr!c)xHxuLjc=?O)9OrlD9mtr.9v%rH.Nrŋ8
lkvw,RD=ErJDq^6p<pFYWj
ƧL} -lw%L -D^{:v0i1TXEM$Z:(b} -E'05tiQ] 7kj}nm¢֪.ܚ}yM(۶h͔G#4 -Z,{[BA\Ҭ]7onp2OBr\iO
cDhUѱh,ۢ2
~!ƿ\N|;&*ÍoĠnQohĩQ$]*w]Ϯ.M-TfC@gx -ʶqO -GWDDH07_GG2Du %!oDc@G{&omiG[B?}*gc`?߀!ba^>Ù@2+w +xڵWo8~߿%y +C0q,VZe~t|).wqzu|~5_|>/.|XH _g?c'of8rAƈıS3jnwoŬ1çFFQz(pe_=pcrZA%)<? y/9Sm-q<\zy$]&')0nuUkqhHN^赉;)8n5{SE5Q;HlknHɌ Vd(1$ hd"dmS4u8'[|&Z$}0Zhd<8ϩ<#u|뿕P$MZ NRTvG,s#M}<ӄ
E֘ZvnKP4xVzpzo7L(k! +9s*;^&T*dPAl*H5*T'QGza["#(鄱[N!ؘӢ,KVW2nn5mMXh*j~`+mf|[2u3WJ%m^Yj5w4f]y-5u<1~Pΰ-+
GL{}[/'{3lRGǢ"4G]1fs5;Dwcu_zC< Nց}wf+]eX/nmf6;<VPM]5hE8_.\L=aZ (C x1 PԽ'4єkFʷrQZ @{: +6;`RY"fg&^[?a[Md2HHe,kM";H{B9b- DFUɽ),[YfG(JoPHBDD0Esy<#C*P-b^endstream endobj 6576 0 obj << /Type /Page @@ -30470,16 +30247,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6582 0 obj << -/Length 2076 +/Length 2005 /Filter /FlateDecode >> stream -xڥXYD~\9t9 -ٖmUdi#kH>TAmj>>r.O(:'tׇ`4!G4/oùA&r;0ꇻ7I$>,E%{埋w7Kwcdx٧bDt~$lfpe̫WNJ9` J2i($A$BRq/;/^~:{aRo3U/,7<]|POY~_0 -ɫ3%)-`X4Ll V9m,s(K`Fo]e/]X@~mA5{S 20;+ry'մHݼAi-فnB3/$lZtgYq0x\Hfk2DBy={zeO8ުmPiҢbXm( 궅cjw% "άK/ Ǟ8ZGp";.(JEUjL1m0ѷOltFZnxg [:h(ksym_v* H9qi|&PP:)OHhq,Lq!E wvx1%9wC -#e"Zm)vm1۽ -cFeC̜ۂ=
Apm[HDM]+lsrhi>|孾}Us}f祜?6dzo{^$7nxomN<7&tml]^7Lg7f4;}X{mP%A:8ص.';BD6m9~dȊUe&ce`(dx==܂esNsB;VDx)Ȥq%08w"ܷՇ^/̄Of$l KugL@AkGm7Lv=C͜<ᾋ2^}s`
Ց:NR&GXl*6d=J1?qi=:WJߐ_NH:H@\0G~g!uqqE$wǹjh'~EƕHG`Zz/)"J*/;,Tˌ.G#R)}ݶhC=J"e
ﶪ
#$$;C뙴4sx6B1ڠ]ߖMmXmͤW;_{P,9o}1ff{bSwEɪ^-lƯ]t5Vê̓_j&l1?+#5.); -wf,άp,댗jp-_\RɵX%97T9 ce;:C9{d"ܱmʭi~k{BN:ESgNU~16<pK.V0MUh#3e*Zq."P祱a"#mEJJZY80KyWJyendstream +xڽXYoF~ׯ#=xZI*"%QatHʊ}إJs99Vj,OPHD $f$+q,BF!n"x$XL8N~0I7W/]O|.Do2Y ۑ&M;Kta`ݎ~^0Sg +oHWHgICo>mAG9-GměeL-=Ogp,OtB])GݭsV;yr3y, v-&'!QڲeZ[}FKIB;([
Qnh<]>o`iܡf+@fDSoU4<Mv4MHx ⑄u㓎@;'KU,VuWdHjofo Y)l20xқ55cp0MY8t@˅e=a[6陱m7<9kHBȮг!f݀]rNw@9ꇉ*/sViz!`LC#f聽`I:8csxE4+]'ѫt,$:N0]?"2ѹ +ֹ +-(T,އoG<8^!魉ܖD-CrL` +E_g}/DQ,yÀ endobj 6581 0 obj << /Type /Page @@ -30526,19 +30302,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6590 0 obj << -/Length 3165 -/Filter /FlateDecode ->> -stream -xڝYo=B)`Es/Eƭ1bznQ5EjIjNE -ESɈD[>$vC=_ra1.i89p-*n.n4us'iH= Mႅy#fqjᅵɈ_ίneԫ/凨#
XMY]z(t(NZӔމy?UJ9?C" >TSA|_MBD˂_.xT7ṭ)*xl+G)Frf{2%H6kФ<n^y;gj
> -#w4^ -D5Wd]٨7CfVԤ(Mֵ0}%Vnʮ>U͆c~ȵ ;/lX
gpNRw5obom,K!r:/E' -!mK*tKK<R${ QM7%7cQō|=sS=EH,nMŸe^W7a-Rs!Q3
@ҧ*:_và>A%%9U͠adRQ'bEXQK}qg%T3Oa|HuzdaɢڗqGЗ*AiicyĉGUg#Νd;l83M]/%sČB!^S|C58xA2
tZ<NC7[D;RM%L PSl5D2c7C7=MTr -EniwUu-eRn& -]{M5&l+u7qjY*SXjǤQȶ4r% -h4sʭ*x7+-bsvɹ1c;܊L`/>? ߳!2j5eǰ~hh -xBܽ|{xAH㡘?Fendstream +/Length 2975 +/Filter /FlateDecode +>> +stream +xڵ]o~SKKsϩ;qvM(ZbL +Iג:OšY+7t;[o`0pCa|`qlWttǏ\? +ƾv0=3s'0tsjIr]f5p3+'-rdefyS*dxH&n⫎D)N$>,.'4k%U9c5HK3$n=j,q4ঌ0~i +Uu9*tc9\'GHV[50\2w8+Ł^YI!7g#?q^wO78^:~MY5/K#7<˨S_2=rC2u$+ȏ#FJ){ +mapEKQ#,5h%s75` !OxfZp5/8앉RAC'⛮DtHFک;/ux3ҊzG9E_=x +49`jrqfl\X5
i +'UQttcNKEZXd6mF4}py6d^rJwC_˗73m˼,rWp䥻lWŞzcj%ZtzW_OT\]KB7'E;MZ&:"M j.iajx#2%:yUb Xl(<=~)yĭfڭ2K[qfTfop"!T3*7XMw5;RrSEdkqJ?^a?
tp +1b|Z%p4e2,pzR0}JOAS2HFjacVaˮO&P^sQ +| bp(smȉ^\M'|P + / +X)CW +u/mns.x]MJ߭ѩ_L[>*r',]]N$vJ'ym#O_=JrwO.*;s{0=%wvoL`1<-H +.1'\ +=Q9< +> +V9~d?h>p3hy9]o._QåOt<]sa~[p'a}rB$ MIH3 q֎Z^9hqNLL:=aE0 +Gd!]ڦ}8>˴LB0\z;uz7àK7^8@0N BOT_@R3Tcrbf¨/_S!^ܯKdk2kу'~nj:~ʳM.l!_+{ĕfM@
endobj 6589 0 obj << /Type /Page @@ -30616,25 +30400,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6603 0 obj << -/Length 3455 -/Filter /FlateDecode ->> -stream -xڭZo8"NjZ$\8i^osr,y%n~ ew;gÙP./\:3fv&
ԐL{4g\"v凋TkHLa9\|zwÞsq`枇/~˛dzy+TD{?Bڮ0>iѲ9WRLe,b6R H -f}$Zwzd%097}PN@@;Ƶa C͕Jyf{-p|ã~s}˲(ESa$؎ -kQDhr2jŅY /,`|_!BpОm-i5NXz.1(/ty4F% -1a)y>+|FJKgŴG$yMcg[SDYt+s"A\on%s -aY"icjN7Ax:#o/kV.6Z#2eQjJ6HQFDr(ZC xNo $ȵp\iiK@bxu|'W}Dhnh}[v#i/GXaHW8fQG)-v~5`elʙե#ewDrt1Bi>L,8t4,K4_^4Hjv*vis"Q2#^"!'
B\x0<m_' & -_jsґw Y`fۇND"Ɇ"TZ"X쇞RK=푏Ġ=cjA,6iB =Z(b,*xO$r -.JXzhoKsLrNݽ~5yamZ*>54ʜY70`Ys=(0S[3:c65Ze:sCϯb¶j$fbCFcVƙ/ia,,$Cb:{ J%@Ç -Ci(k4@HXطJj-gOʂ]=24s[aT[$6nDUc:6H"Q}2⩨s3Q ( -dݫC JNG&nmio˄/`}B>IͿNy^~p}Sp?z= ydY9Pߐtwhn\gӈ?|n]cj/L79\ͮ?bXrھvwk_(VUemN&(ٟ6X^UBIT[#]yawɡkʭڼp<[QQFk(a(]G/kg1.oقr8kn]U//kçFwM0
AKû$f,DQF <v&U&SٵImkIe$/'Ch'Q.wm2'4hѥ|m:
&gc2{talm-VAzR5Sŝ٠Mw၄+_86)|xw.ӕc,h,Ft|`c`cgM[NyB{A"Ю+>S)cV,L)CúB#R+ƤvG>Bh -}u%QX4֦*_~Ƹw5ګ -BSKdUcJDwZxͦ|;/zN]rk>sA -;"ZaITc2$oern~EF?Z?_\^Ÿ'
08fxJ%}㞕
lELj8
'{H0YGsH-Rr -' -mw1F̵&./%xANjis!^ʹwX1?鵫FC^<_[#M N*%vut
ՄY<okrq!鷙 -0lؾysoߘk4A`|5>f$ؕCi%a.G?kiWx1zOՆOCG_)\|GPc&:endstream +/Length 3291 +/Filter /FlateDecode +>> +stream +xڵn_R@4"9 +n:ki@̆"Y~{e$Zna@ss[I +S?I0'R+̉#Lũ3Ld%ga:R2әrj_c\.>5<K^_W.Wfp<_IH~0ڦpp\)\G~~{ sW̬P;KXpÎ%6Y0Y\ ?35THG7nT0d)rnsq*-#+tMB@ʖǮʢH7 +5@|;Y(qXG)fnڦpC(?4tfph@ڶm쀄RԐ&Tu>gSFVӆW<{ퟧ:ڤ5maǼ*bj&ZuG2ңu=f +M9R6u=#>ONħ;ܸ*Ł
p^(yH)ؖxm7e^s4`-y>+f_[p?fM9^?IƮ!Z Is~@6$1n +?(yNl{]@;
C +;FnʠJQmWE1ɵE&&BHyd}cp,"f,(!}IT;Q
+&qHI2rHtL|B65iD=]9Li +bK3\|K=}bPL-IӷH;D.۷5x̨9GySA.:FR"$"w˄[```kE
LvӪ%qDjO +4/{jB-LYE/e}j ֲ_13ǁ0X{ƹMDG[]і<|PJްQۤ-."o +OVhdh,J +Xn° RCkxΧ&D3xqbW +(0|dh0;]mLɫ:Wb0(4iT*Ηxߒ.&+Hn:$4шBPWp'h!W]Ck4<gnA]+-G#FJdXG)f1z>WrL&*BV:zN%=BXWKMi4b N*uNap%ՖdXc1Wy2hه;?1lȔMŗ p +WGt<pBKx@!q_*6UxQէTpo!^"Ǯ>^v:NO*
d^U;WSm)_^b|aTѫKTY,T3Rt{L'n56ԅٚ$C~
VagF\z$FkYu=j25,k3`#ߤKc07\<g@'ZpmkShAҁhPq'>T`"G'vd96խ_<t-#.t췩y }*@WӢw*2P^'Sxkt Κ%FF~d7ٶB-ƶƬ[Ҷ͠MRe0+Uf{AnAy%QbПHXL),ﵦO@Ρ%?vw$M2=s\l%GH;J(GrB1+NetTy +%N*GaBQ'L/ xSdObgdFP!mZe^ݣ!⯃?}"Dpf`?rʪQq>*x۾GuiXy:ÊHWBӠ\*$zJ>iTk +}Oa.))?HtFTOxFUyOנhk9u'<([e1Aׅt>JBٽ2dԣög3×th4^c:\`@to!+g$-TYBmcM֪=:fMv|l{2#j%IKA6ȊPv* +ҬMѾW<m\e|%ңkdK=EEmri weaMu]tg'eXO&*D
Oq +ђ^@-Z =S %_9|` endobj 6602 0 obj << /Type /Page @@ -30700,21 +30487,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6615 0 obj << -/Length 3336 +/Length 3159 /Filter /FlateDecode >> stream -xڥZYs6~PUC -fQu&^i~-.Y/]l7e
@\aʯ"4ާ9ϯG[_\/dvCd'9˥f
Ҽg2e0K)ɔNA*Zs͒,fۃagMpόU.i{^O1Ûbt$9_rOUƏW褛7v".{wHV ms9!)ٲP0>R ʖt2Q֒N*Dge>l -FyFo+<H=q>KԈo"XϏ JDqCs b7'`ȑ0MZ_QtU9OPL0]IdeԋKoS'up
bMg嬷^J;/AOkQ7& M;^j>Qj6.?
AY$W܅nS^EWF?^\_ݜ½~B5+z)6?0 -u|ͭl:tNK@u_ظC@h[{]gsҵ!nr -'SM;J - -NC'Ǵ$"!ue^xǯBBCQ$ HދhfM,T\&ё⎾a*/5;$\fÃ6,^n$Ln opN\ncEN!ۻ 0F@5C~ -Fݻƒ0ZL?R3IX/kN`bbL -@5R+Z,QΕ7o E"j.9H -MJ[ژ -6*҉)xC"C̷NBu`k*oC4p*r&zA<Ύ"U̇Ԁ,-b[I^J[nl\138DL}Anj(e@g4*:Q,8qq$n;빡)+ فC zu39!pKu!eطNٹEC]+7o)6D!ܠ"-+;d]e < O>;426QPFiQnRLpX;Cj +xZIsW6TU`ab'lyRIXDƞ +45%y$jxvp +aMz<p M~S V]1kDXHTeS d-(30` %$@Zب +}G< +5>,Џ̾X[Jz,AJ'{ |r0<.=r@#mmm2p_[R&BQQ\H)2V%wJxpwXL(r6gtn'F_ŮWuGʑJy[-+ep*o^)85̔|?dggVo_v$7*.5ÙNoǫ)0rҙF)tۏҽ8ǐ2AH,0LRX .Ɔ $V_ʸJ1CYu091~BeͻN +LE
g 7@a+h'Iņ_')cإ80p]W(a8:+L&ڑxNՄFQ&ND]g
G
_&0 8 ʚe/se-ǡV ;P88u:`'+Ymڀ}#k"!/8P*melI\k,5*oŦmm,`/9+AŮ,(B<S~bJܺbO&3]9 ّM/ 4y)pXiR\IyP5Nn7|RD2E@~Й+TdS$c~c~LQ&cx$*HܪsɜJ1|F{~N#ypq<0nWD\>SmLCqp45bl[֚<늖Lmtz_ +0<3U\"4<.m^d*a@SxJG\]Ϧ +{`̖(tI6@H>L:K>*a>`kHF۶ +[H[y0i04PpJBJXie_aGaʔ51MxLX&J_)CiO +x1K[l^٨9̄DA+Tc52UNXYq,sЈ5!E$(MqvN-P4rbjxh^*17Q碱!Wb=l|Ϙ/7g.?M_IFoE|0Jѕ۬v{s:U)b1^x=EޢnSt$oIJ-=Q<+v}s`۳[]
cE(|]Sw8],wQzU;~^coW՜?2}agivp'/!^ /S9Ҟ4$Bxf3#p 4J4-xm~Q^-<5f)i%ޘb6:'|ұ%BR~ o8^)^J[_ 舺ʎ3@(t:dE1kW6X: endobj 6614 0 obj << /Type /Page @@ -30768,29 +30554,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6626 0 obj << -/Length 2862 -/Filter /FlateDecode ->> -stream -xڥko8{~_Nj[i^MVfs%J~[p8[fLH $QAN=Y?/`e6yx.'FLg@'RaL/OY^,IRnjo.z7q-|bï~YM.~xpL、9W=Y\hd ZX\ -Ww9RNx)3̏^RlTNH>E -_Ɵ$VIJ P
'w(V'^ k@tf< -/,xמD:]OoG'ֶ< ;>*|oX44Z! Эg&1*HUٕ-[}`#>Jv9`)hg[rb^* -㴖i~`M3Pa<8 -ޘ"0>ʢ<7cZYrY7A:ǯ"yP4!ei7y% WP[*GFLִB%@]}|C:m ),@mMla
5˛vlWzQ*x]2`n@C36t hێwS0 -sCصs*6lOeUhw8b5]3ڲGÓDAaxY #`ETE -]br: -'=˪[:ql;Q-UN9u<*b`i,!exܮv -QZgXFBo0:gLK\C`S| H$}e f-Fqg#2вժ3^>#CTf}eV| -/6D"0єVQ89VK_Q\tqȽmUc@W m{%z%KH>\cMY]CY_D'9f^?ϭmײ#QUb9yz[%3 -q<`q˜T{b0,
ל5{37oLP"шv;`͠obշߖێ><>5Љ$24Ɯrڌ *{ -V۰9]sƋň -}}UUGm'Q?7;J*D 6?6=yu=f\D0$}?CƃZ -cnT`AFȝ6i_̲TS7X -<WCNTHHO56@JQaֲm4)ccDӻiZbWiOrwK}F(`RQkA#C4aTf=OD'*siJ;[A$'LdY0hL"L-0:\{5J04T&<ÜuG<\< -@ -l@t}<BK -IZ}x9ׯv]{{Oƍnoh.Vv*y-
3rUAqj,p[״/Qi6>/܍IT}=~~u}|{=T* %:v7|sQ됿VlFr:*PSr:r -Vcqk7L+qf!E֫WN(5=+8$/#Wt$}?al>!}+чcĦU}ݥNÃC?S&AwmQ^ɹUqN~4ܷ#l
O48f7{endstream +/Length 2764 +/Filter /FlateDecode +>> +stream +xڵ]oFݿBK) Z/<8ӨW;nC<-H~}KJ];3;;;r'I(mId=ӓ5`~>sBO| +N{߀0OBn +`cnrdmix?K5/TX]Qx+J0t +rޝKVVewS_|l%:4<t.![MB +(vRF|aNNH6W3)>!FP<%ߠU'|=ٖm)G<!|gq
psr2QVp1!sBNVB +&R13׃l7QϯMRuno\N0I |#no{aVV@W6gL,:⣵yA7sQ4Wgg'gl(t.M!fN)'2)yėmSM.(xQ]ZDuomj?֝D,=0Q畐0}9U+OI\tώ`"| ڒ9|:Iv|쿸0C95Z8">?x̋3s)7vcd +e2%2wyќȞyq5b0-
qրpIƚȮm/ ͫݰ&]dV_L\T,Z}]<.HBoL1ecr nANSqRدtf+VÑ Ý9͖Spb40$5 x¢u!3eQ¨@cx[bpp0\$pvwL!kI>9$!l@6*7; +]k5øPCbBw#lvQ jY+7T-`bū}*o$;Nɇ!8=F2J(C8>^&9PyE˯Si+m +mW.咲MʶGp{ endobj 6625 0 obj << /Type /Page @@ -30839,24 +30615,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6635 0 obj << -/Length 2878 +/Length 2795 /Filter /FlateDecode >> stream -xڝr]_Gʄ1ce'RIÈID$@j>}
rUJU==}OwS"S< #]̲\:gM4Χ%&ab/l."daEP0n~YigRqU<Kmf_]EDUhfVA*X78n^0/ -ԛo?|xj" -Hp4[:ԙ~4̀c3F/pQqQȏ)`5FbATQ1!,ˈ-I=g,UEVqNŵgW3Ía;]ew0O=ad`Hwf,/<ĶkKUm,:Th,|
iݴ{7 -n3m&n# Ӗ퐣^%A(N6"xȄm6-\@ (p_z$(wD THI8f8gEoHeWYd<ItN"OHEY)H5v법NPNX{|[Y]<wغA3s}%j0^OѪ?ñ \n6i?cqނX
F#eŕT;F3U5{$QTdW= !cy6ο,ɉSI(qpv[Q5Ӡ3I2>" -ٶ{
j0Ere-wP
wF`<b|T:ҁޏ[=;^SSy8!8H]ҸL -^`W;bz'wq7$#NIf8rX`n!|GadY -!<;BTB&}%xm]G -c5O>
㶻/lGgL/c:U9/iq#τ5> $Tq4KqL6\(4ʊLV&Y4lvSČ
wF#^5: -$PwV/H9E5owU3E%[8XZMg!oQC"*M
``LAigNYp+PC,;`uoYXeG!Y唿 .cP 0-/=%/R@AҮKΡTΚ*Vd8Sb%|h+۪s:U+j< r[*lɮǴұ4~ҲgdhZdɒvUw9'<X)맏n`rb4,2ds҅ -UZ(Z`U#T<{\/tsfR`qZ}'*>͚Χ+: VldBmvd0}$E{^d˗3dڡtߓަ>\ZB̽, Ƙ6D9h4ޅ9BZE;Q(%dL!bgٓd7wU-GL]=`G=1"(DP/153B F~#(䥖\clLh]^b8ϵc$5PY~ԫ$
5<LS/epF\y[o5<m$C >{CAUELDOq,U|t$]70{t~-p8gRCDmy!
jFqn&g|.NpU`CcQQ(ì:MkEV
(u~)?t9iN4m[.ɒ`.%
n_XnQOINtzRAzX5.ډ1`h͌-! s~xh(E>;8 -UQ7q-F_ -!;0;u+icS(:22Eh}=:d# -oVTfmZ]8Tod$Hfߕ$*]Mj)$%!%9piQH^{fRǂm"+/aGm -9F0J5"-?K
*Ov+Wi`WJH(&Dj?'`K7{? TOJ -doeO~0^||Ù@Tom&o6d +xڽ˒_GJ0 +䤲2yIa[c"fk3$P czlƷPy!$yr>@࿑?jJwCoi1Y^g"cy&
+f391>1y6ͼԹ` #XbecRdw2y6B"L[\ݶl--{IT:w9(#5rRS"k>4\mȹ(Qb +Sy9 rHZ*lHǴ1ĥeΐfã}ɒ9+ʮg¹79;CI'7(+fًTWP +':Tu\5|y _-~HJ)8c4O!~f_ogr +5w*3'dJ @]517au)X=SۅlՕtXa.xk0Rj!kRÍ^jV +(XN:'F&]G,t-4ur0mTI"RAj$tͮzɢ83TYRt3xsz\d[z
ȣaF@&ź5"m+Dupo>l`Z_05N
ĕ$Y邦m=p2Yr̵ϩu*r5^I+5j5QvK|}~ٻjZWE? +b!B04u>]GYzq+ۻb'ϪdxIaF.g䫋"rLju~}]H +r4S0%٥,XɴAG-mI5`K\ёGEq|M( +8SJ!C +Jy_& +! +ᧂmFi[Ro"!`ſB35b? .:I-/9xԝh++ƔWCt\@j繜CNϝ +0hGL$6 dP!ۍOFҧ3!Lta5nZT4Gzap[^ĦrߞaWy >;;cG}&Oa 8YṔ۷b2E:S&~>Z/A@%exc$R8՜LmT9qtb#㜒rRT3]]Xqkiߝ|4 +FALC!,8[c"z6lz5`2#dED+p9h^:k|ݽQk"/\%T_ Q/ #gVHendstream endobj 6634 0 obj << /Type /Page @@ -30897,21 +30672,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6642 0 obj << -/Length 2794 -/Filter /FlateDecode ->> -stream -xZI6mŐrSN&qwjj*-%tHݚ_?oHJ|T*-,[:\_b?P*B_ej[=x -FH6wwUy}b_jo}xiQJy*כ4ͼu-kW:ʼ_>}߯70ƫ~>|qsd篻V;`Wyzv0]?~xNxյ*L]^?'#GQJM8zEdU\f/8v0d#^KhÃNL^2iHH 'B[D64]YYoPMd`s_Q,\KOlr8U44G*jlR7 -ނ +v@,lx#80ᾳۛxl8FZ"s\\H@O0 -/83Ցg5a2ڙ[q.t.T:UP
Lύlj%2.c -ǴB:s ;%|ώĻj -r^b<*Dd[xBU -ZVcULȚtdo}\ -Ŏd*:Z5~vE_BVJjGYbjK76līY lH;0:qF*bX%1}8 Ɛ<'HsddNF(3>*^l݅f1|4v5yG)ʐRg'VJۘʺAlc Rڧ1".sk<V(8UNRHw`q@WL[|WzľĽx*%= -kW2,GG&;qH(J 8d@ cuD;kU<&p
3:H<Mk§䣐߬SVc}^K:XK,).NjȜ!:qΔ3 -2a}a:1=][H/b<ӭZFX)~wrr`q-anMuX%X@yk)!RF@L -&v,a4J<J4L/rLp-6^-Kw r/Buܘ`_\yjQj0YWayz&DB,*(K*D&Af9R?ߏ1!FV)UAzO]&ܷRzBmR_BW9ƾϊH!Rf,~˦!<0{k^L6͙8"gYm5-5JZeMM[p,7K3?MW8(f9\0_endstream +/Length 2694 +/Filter /FlateDecode +>> +stream +xZKsW-X0%9rE#ҕJ>w]ͯOf +[*` qշ?m~wo?-WJ)Orwonw(~>~\WxnrJ:QxW,6 Wl|Q_XV\]^sz\rWIX2ngn{+*R]x\ꩄ?͖qH2~R{ea +߂P`=0DJEް+xRh +T +@+iuA~v:JNZ +r^b<*L[xBU1%4fD( +vgI![3Xz~iSU-{-AÑB-o\yz\D+|fvp|? f\VR?JYN9͂$RS, qzPCSTb<*pGNm#4\%lΙiMmOLK\S4}m] +VNFjr6)fUɛȪ^:LG%9$MW7,`cDxa5#.?q
?.'IԐy |Wq@[C,' &H8M5{*@c<cRcw<"ഋTN8wj<N|
vm3/ + BY.HX^&JleuɲkleUζ=OH^vC0q{`Ӏ +GGjr:8ɚSf]o "%GfJ֡t8+(Ӎ9tFē }#,r'߹lJ,z6- + fr0ۘ."{) +k+Fep^Yu+npsyۿV8_Sb˔ +Og H`л41mX<v܍
<®+!aFe4&(4dۣEti
DI/v.i^0$I1/W"0:_0@k8*Km"=֫lW1VùMїۦR,7<Ybf!\9W6S|ۈ(:#Hp*U%gAW2J$31 \9`imOИ":%ƻvz˹"mp#Yϧqzkse##KۘFxcE<QeEc]8)uVxG1Qq886ȹ!e+P07n4Yjxb !Hb@6&n]/ՑA;;WdZDqrIMީo荢vDprHX^-a1l%\<q6^8}>8
5_3 c2$v SH}ǴFD-S3w@ޙ18iJ\9܄9e3Rr9aڳAiEiju.*]k'ܱd:jd˅
,NpLYWJK+pcQcrRNrֻY?VcDY̭uٻ tUY=QoqNE.CER #jUa +}l3oW6S,@HGX] Oj2<=#3
x7vFhK`EI'h.Ew Rr/Jl3cպ-μ::8 +y)tJT!r%?֪ endobj 6641 0 obj << /Type /Page @@ -30958,22 +30737,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6651 0 obj << -/Length 2647 +/Length 2566 /Filter /FlateDecode >> stream -xڥYKs8WhNf" -Z`˲nz>se~QsK(.Ey6~FDow -,l&h -ް켏&$c= mgj?88U2p -99S;c%i$WM{WZ4c+K3]
1L7?QW -<=Kc]"
*d[ e3 -3ұkZI{9'(OZ@wED\3CAlڂ{5M}l9XYQw@ B3o˽t0ۑˇZJ{gW?M6ceQ|go {-aVz -%j{C=<GV7K -W1.A7TYjZ9+,CyQ(a-Y
sOc6Lc_'ɳLosÆI -MpGp2vB p}<4zܼ¯ģv -h5Ǽ@/GD4$P9]xUvN"pf_ʬ*P0!-9 -\e 㖵5? GQ܌5}K|].x˜Sk{ҝFHbEK 50'!rUG6T=cɍ]C5H<>OG |b6IS־V©ylodR?JStendstream +xڵYKs8WhNf" =lٞTb'<[ H
IY(ʒԔDƣX
<S$t=D:I7A剒 p(ĦQ0PzO:>߿֎N(nOg(P{w~''l@Z__]_v7(pH|
N<W`eUi:Xv@K8;ҍmlrd{T~x~>L;{: +5K9뒬M'qj3Ķ5vUR̨xY$p.d<tIWBWUrbKa9i
W)y)y7ճn/_;^͐Usfo~gA|}|~D
0RWCjY9~as1]8Wq5|b@p'SK(rkiM9!ꩶ@.5H~u_ѲYdR`Q) +;-[cf,3 +D~rvIFM ǐ
.}71&߹8hxBƾ:Ls:j``jkk&uCGB%9M |2Hv> +(QH1u֬{
X@m0%*9ﯽ`?s2k;{?hmr +hKYzG}k1a,h/{̚+d
3FhL"+l9˰Vb, +òZלyEW٠vV|%#! +݀]a dD g +6{e̹@ B\ +. .+>dKQ\Xu40mVNmN2qJ $f(i_6v_wjjqxO/~NtOl̦I9=J8%Zw9r~)(';z7-j0u\s~Q?rQ_'FǮJ=1^#WG/2fendstream endobj 6650 0 obj << /Type /Page @@ -31016,14 +30792,11 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6659 0 obj << -/Length 411 +/Length 389 /Filter /FlateDecode >> stream -x}R=s0+8P6Ivj$GؒϑIJiA< -_ G ~So0#$(BX5]da -|Tˮ>L -eӽM,A%ux_?'xD}e%Xv?i2c&#LKuՉeh3v".Sb{;V"sfc{'@&ce}A;p?7 4/R^45k$<KXu?endstream +xڅSMS0+rL$@rժ3rSXhallH".J֒&dY$6xGo(.tz RR ܉qE7J%x endobj 6658 0 obj << /Type /Page @@ -31052,30 +30825,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6664 0 obj << -/Length 2760 -/Filter /FlateDecode ->> -stream -xڵZ[oH~ϯhRC]}%NN&&n6t<_ԥtj-ZE8>wnu(H]d$<_%<}AH!bƊD^89Ⴂ̫\d_|]PlrA?#A22.F[4ڔ2*4*͡]n>xss|}SA,b O$dR(6Lzl@Y k"n<ʻ=!ڛ=(XJX'<Qq:`izJł&$Or
.T-3P?P!s<+WCT<'2RCTZe]Ar)Y:NQi_0b4jGitj]Uw -Wi(+"5*?QTmPݑ2.$Pqi1][Č&:k{BTD -uekO -Ϲ|l -ueb -FLؔuba疝D4` -uel -1ϯ/CK"N -e;z=W<H -+ N<Zn(vgJ -j ]oџLvxn[9e7H pjiA=HR -P=h<tkɈ -uk[PzZ|3f5龬8
m̤1{k#4xǝNO\C@d
Ld -uECg*V`Й\]$RjF; f,- -֢[sFc[u]Y^Q&k`>!D[M8搝<$<0sB!{]s?@5 Rf;A 57w:$u
dU+0 ݴv,0>fid?-(vbf\::Щ4Sv9S@[G`EF҂OU^ 8~'MҳfX{D`bek#H^@$,9rm)ǶlpХ;T)Icǃ}F,P-CԧpRP:a p+%~L HuemO -5#T~PBIvVrW.wNo zɘьs}[BQ -5#T~PiKwfyfZ^qpӘB:-8q*+p3\PB!c{oۍXMx V+BL' -?k\ߗnDe'NfNSB3- -Yy-Lba0b#i~,fc][ky÷E
)=Jl8Vwovb31s%$47,Д8@ t1*o QљzSԺ0zt{*Uzws4uhY
-ܸUb)6e
G+?s%[P48CPm -ά?;-U[ckSÁ`^(yfa`"hdPڽ[{ꉵO[XhwW_u^= +/Length 2108 +/Filter /FlateDecode +>> +stream +xZ]o8}02戤(J2hIw2-`gd[ڒWX +DIs%+'؈@'Kx2 &KF!H }mT" 7?_`Ezr@-B)1wkƟJoUTGֻ定gOo>=
; +xqW{gRn6eXW.ՙo7U9о]·K5Yv^횼x¹*Rn䙯b {{YΠY=^0Q'"D%j}^ŒAkVM73H/Q>=`Ђ[4/ӴKny}=v
C!t$!t͏]gh0E_]XaU~_#^M[B?/ LlЯuV +_+WC0hzG6:|A,wЋ*{d>5f~~%`xڵhBߗ1+m|Xzw.+w3n-!'qKgX?_?w.ƞtdU/DEmPQiWe7iAG8j7;XOh4NRGpP߱UaWaS.T!?/K\jU X0[mg+KnNyq&N)J(L!CqrH^:dM5$%=$7˔|dӧ(HzOxiS.qۿabƹYURZXzOhRģ(w }U˾Zr>.)lw 鳛EU4Y{~J"-2Rt`($f<'TNP&\շ oLe+HzT`Xjè1TYjQ6($7U^3a6acN_dv<,;CuMkmQ$r_fe:֥~Oso`:TR"xkU +x>\{o"+f/yUF;[tOrA^PDI2d}ycV'l9>fߣفAM*t4R|+CnҊ&Su1Qm"dSO%B2z4*s|հV>'alS(V:s +_DK>ԟ@h[8bfӄHˬMYvLz'obLg'/QW/ޕx^/-.[
4GƩF0bˇf~Yp@JbC~Ph?p(YP-@Y^)SYbIn)Aw#Y{F>Mp7n-?`_1.8;7]9xp=-Y{Z_[m9qݨ|iLӼo+q$#{1μptulw!x& endobj 6663 0 obj << /Type /Page @@ -31290,12 +31049,12 @@ endobj /Filter /FlateDecode >> stream -xRkTT#PALyĒaP /%ށ3w0S@DP4 E:X(: hJQJAueUzϟs$3 -1A8.ȤCD"6f`%e:
"ŰLn,@O^=2uͻalg&8d+
.<"r88 -:ٍNw'q@ -x3zGŻC˗GutG$i --^^<nw8%@h\9_6cZP?Gk6?u%Pїtf't;mt̾c~n?ިV;rOuT_O~\Q5< -ZO[ecqgwmOWcfQScKxMdLCIWpC1],zE.J2xt+Aʔqb?OaN`F'endstream +xRkTT#PALyĒaP^ށ3w0S@DP4 E:X(: hJQJAueUzϟs$3 +1A8.ȤCD"6f`%e:
"ŰLn,@O^=2uͻalg&8d+
.<"r88 +b>~T@[7u;
ZȲɿ +hLA$M̑t*[:[z[j&I=Sz+C_}bPq1([+
nN~b=k>O M.K1}͛{z6ykXq$bkڶpjvyTfھ;Mz%Y[HjRiL־XZ</[^댴6^QnQSMZc#^4Qj//mxt^4jtۜB1-y#C~5mZ:BOjexK:]eΝ6rf1M +?oTaZzkɯ'?rtF՝ȏYntv~DiVD/ΖS_OArDሆ+*j;Ԩ|R`&0|sQ5UU?4E
ƇӝMzjgP645=i[v&3U*/>g6Kdsz}1]&o6K_,:X-$x;<5r;#駬pUd/A3m9̩֑;*->rr0 +ZO[ecqgwmOWcfQScKxMdLCIWpC1],zE.J2xt+Aʔqb?OaN`F'<endstream endobj 5447 0 obj << /Type /Font @@ -31304,14 +31063,14 @@ endobj /FirstChar 60 /LastChar 62 /Widths 6698 0 R -/BaseFont /BGBJGH+CMMIB10 +/BaseFont /ALBQED+CMMIB10 /FontDescriptor 5445 0 R >> endobj 5445 0 obj << /Ascent 694 /CapHeight 686 /Descent -194 -/FontName /BGBJGH+CMMIB10 +/FontName /ALBQED+CMMIB10 /ItalicAngle -14 /StemV 113 /XHeight 444 @@ -31331,18 +31090,16 @@ endobj /Length1 800 /Length2 1394 /Length3 532 -/Length 1980 +/Length 1979 /Filter /FlateDecode >> stream -xR{<TNRKe\=;1ccF;F"b5feHWaWrMtSH"6#\B..iy_wg~$&6<l'쀡b.Q2VCbC 14lt"-&@10]96!B(pāp`3E`l|9!Xa@p -3 |ɟ<"B`!mVxΚCBeڠ|P DD<7D
_0۬NΞΫf9KA*v):;[UHMP4~mf=x_9BHB^1@4
(p$הbb#0T`*0ʇ3J[W_)4[w"M,`b
Pɠ{vAR,Y&'gHKxҁq-c?PHf]d[m5RdMΡF%ER5~~/Dѡ]Z&hFU=K]$ -}>0\UCft#wOڹ^4wYLO)#`tGDhA=vWŪÖLKʭ6s^s^[
]8|;@f!Ex G-rv .ƕ՞)WUgQGR`Vϟ~՛jS\!M3d{ߒi,;td ySn@"n& -=KtmQGN[rL;hU -̌j/oT@x#PU0.h]8 6%UY)R͟%}Y cۗ>ߨsSVY!l*v`]G55z}lZ~>(8Y3QI{H]入H~hm~Ж[Vk7XNwoܷo,j/unN<mXee^he[뛓T-8xV -_ES5PMS;~;ri7q*8[H%KKX}-#h<afd7&R#zJ?6rHj^X=R"}5+cXWǞy]cۄjڕygdEuu70GۿޠIw_ߊF6WXd]M\R1!xckh䃒ג~Xs:tqB+Qy1rOHFu:5|+!bɨ2 &AJaQwo68:@w2T~<д0d/~KW8`e<_~XWOoQ3/Mt7='#]7,]JO97#$k/v\.?'ٌ
W=$R}}wI$Owz_O -M)Pe1Qс}
^kW?N[A{-PvMJnY
:5qT6Yx7ə&|m\ڀIaO7h`֦<s7j®gG#['كA![7)o ɜܾtJr#kTq,IܣoO?:o fNp.]q= -WP֖J `8;ſ3Sn4'ǫ7P}4괍0xS~RV2MBʪvŬG:BwX/EiB/?!ÐP@`? +xR{<TN()\ڳs31fC.mDQfc13.CHؕ%#n +BF%ʑJ.mVavgiy_wg~$fv<l섡b3nQ2^CbC 14",t"=&107mbpXp!A8B|"XBv|>̞,Q0B +pS7ip<K +iNVU{
^2j=ӳiT2xϚr5=Fb<[P³Ӛ~OdUj{unC@~Z͒紜<՛+ē2~M(z瘁j^~l6wkFXFya#i!kNp%u
5w}*|p\fT3#{s9J.ݝ;v'_niרMߌZ| +3}sUt~MhK勨Užԕ]/4S¶'=VM/v9]]3' +SVyMџ%Uɔ823y)7V2 {ڍ^%߾zpbh\՟N<gZ-]ẕuqBmiRӚ8Jm*{\5>Yh\9`WVo+w/־rcz-(:V Ei{v=6jf(y1ߟuL 3Wt6_ݮH7cStu'&1lACPA)p'߷WqKZ פSNeՄZi^[BIU^@nk<~&fCF#OXJ{,+m=_a]e[=Od9&i?L0iZ|pzswagW goI{FsV/v*^DYsF&ae쌠Nȏ-;܋lT[GYP>&5훟Heʙ!M{jvc|KVTZ;٪Az]rX ?|aH(!aendstream endobj 5171 0 obj << /Type /Font @@ -31351,14 +31108,14 @@ endobj /FirstChar 40 /LastChar 97 /Widths 6700 0 R -/BaseFont /GJKXIK+CMR9 +/BaseFont /XJFPME+CMR9 /FontDescriptor 5169 0 R >> endobj 5169 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /GJKXIK+CMR9 +/FontName /XJFPME+CMR9 /ItalicAngle 0 /StemV 74 /XHeight 431 @@ -31378,31 +31135,30 @@ endobj /Length1 966 /Length2 3059 /Length3 532 -/Length 3719 -/Filter /FlateDecode ->> -stream -xw<H]2"9̈=2C89䠌P{"")dDTd;~|^uߟ -Hp\13 -v'IUE{ ґ!RhD -ĹrJ -' - -X"s:oK~x-?bC^Dݳnս.kaZG#Cs(0ԍҵIN>m,&|XezUyR̊#/=XeC2μ6y[9; Ӷ*]u=,#w{$bu1l(o]Sj\C
yƷmݟ+Ҙ"FKj$}Zx0KΩ{j'<{C[W0hϒFn^כk -KlgwVyަ.FlޭҬWCxA#:sA0i{n79<WD)uugߐgɃU:D?=1&_zQg[JQ4n\Q+
?7&eW"7<蹭vG162&Ȓ <@*ZwI3ugta'rxR۵\퍧IB\K$%M:>p4W+}7, B!R
!e}&ZȰGRY3/uv12
uתDw+ z"OQfluͦqij7rX -7!HMx'M:6z -OkqW|L|(;`e5..lFVB&Rн!>fUS",9}X>} IЇVu{jj>;YXm'zQt_#0)Ҋ$6[vr&;<2לL"MD7U3}?'O7RXQ$C5Ğ+ -6) -[Qwt]A٤L -NֈRI|kVmtLo-X;45]G4wN.`jB܉%lx)1Kǐ[g-?51Og^OT]Dz_N92\!6Kޑ]%1:іQD0M5LB472/t=a>P%uaOc8'*Z*>zMe#/P$]On)o<ּ=vYKs\w*cׄD$mo2[6"hg*7bGW\uq|.=ނy2aA=1h
eܦN*R̻1 3C[YA:J6v;x]4fK -cgUrCD[BaJ7PLwY
?W2/Wgi\гq$>)_<[8~ck,ߖV3ڮuɰ:ZRƀ)- -"ܫK^7>c+LpOL -xr1o#w -K>$+-7c`HOWW_o77b,'4Hѐx%eʤx~dʀVVHwEYՊ+vMJM< Us4kVMFdk2XQiz8..@{LnHfrh}Ly\5{vu5~dg1S{ΤaH ˃~kGAZ'eQH
VGqYcI1SyG!y=Y5|VP-%=n#Kшx{+/|M+Qh8ش]b -׳
O*<i#%U]U/: -73,WMuߞ --:.]^|yE -pBl4@cBendstream +/Length 3717 +/Filter /FlateDecode +>> +stream +xy<T[dMԑ%YȾ/YCۘf33d,$ZDT4Y"E5{Td_ﯞ~>_9uݟs]-%ne#»
8<Wt͍mm0 +ts'2?D6M` H#A41G FD4 +(I\n Ò1 + ,$)@fRYDq +Br@-4'.nX ?jXC/ K&9&:3G@o߫dDj0h@)$HwLFqкTDXN\B8-`?i]"3iBv!((( +ɴ֙++cJ* +@I +_f.8I-1CP,&lmP0U?<Ӕ?Nl<sRfépuϔi9?/aF2k:,
KKE
Is(7.hrcYA΅rrq[c`dY\&{*owG~t b6SnT3h˵NkTzK'c#ޑ`x;s[웰9#)%ɵ2oC`E+FE5}jӨj%kgJ)2
V5 +}{xs{4|}U1lmc3j\c
Es]*SY"G< +*(ޕj$~Z?Sk1f+:{#;lW=(pϲfNҺ~Jː,g[w)'r-`v=7K2ӂj^lEct^Xe1F
d0NWT^wjㅌ5>S8\[.r#3\c%$\}60%!&ONw*9
Ҽº\̷+F"; kc`+7j[փ,Lă:u<T3flvxڦ`2FY^!kDv/k +0EyeؙaY*0F?ɜ}鰡j2#nV">=P'*27vm5ƤpHyv5Vȡ|2_c7LbΊ@
lT? X^:L):ӏ6;GK/a72EHB47*8F.rn9֯Rs:M_=4Y7%,n`$su°? +n *gc[W͌ӣݭmts'%H95}DL:^!6ԣzV32 +/_|ꌭ*acVg+'?mj`rX2ݻ3,V%=~, +#!\ZpVFMKN.O{%˲IR'Z=d.ukEѱ/UE]8VWdb ]- +ݻIɚ^?_Pm6fPc5ft@.g|է-g w.Jhm"4e"^<{Y:%Qz-38OlZƄ4x3Jk縚(k#IՕT,?=^g9W;]Z(75 +_=<3 o7r1K]Vˮԋ9kREAdۭؐe?TAGa5H3^GyEԕc≒ sY{;"j$r{[=FAj'tɣqᏁW^,1Zvaq-c_%®gʞ{2G}~P"[^9gM}<s?`̱pR=m[,xV>9}wvȽ\uQ.K$acX5Ó>Tu>GJa*=z;x^KWP64 3Yoag?]o' +*~~枢VG-&!QAKфΆٯ1Zd!=4*bk%VIufzaoyf|d9aWV^fʟY;e=$[2P7*8)Ds?7? +ŢK_sJ#ZO>"wJ iWJGQ.B*72|BYNo4RnohFR +DeXf82|M ?juHVp +>_D$ Xѓ_s|endstream endobj 5128 0 obj << /Type /Font @@ -31411,14 +31167,14 @@ endobj /FirstChar 46 /LastChar 116 /Widths 6702 0 R -/BaseFont /JOTPRW+CMITT10 +/BaseFont /DJAIEU+CMITT10 /FontDescriptor 5126 0 R >> endobj 5126 0 obj << /Ascent 611 /CapHeight 611 /Descent -222 -/FontName /JOTPRW+CMITT10 +/FontName /DJAIEU+CMITT10 /ItalicAngle -14 /StemV 69 /XHeight 431 @@ -31438,20 +31194,19 @@ endobj /Length1 779 /Length2 1014 /Length3 532 -/Length 1585 +/Length 1584 /Filter /FlateDecode >> stream -x{XLiki0y%
CJͥ4SS)mMsޙN9ΜQ
)%\JXPrkشq.n5VYTiO_9}s˶uCE-ώ<܃g2l)=t<|0|lA$HTK+"pCq'b!c R7Kv(RJ1y< -@39L - -X
P4#B - P0HT7J0|G(KB(H?$4~s'/xSb2[cUxJ$HŘ!|B7
w[j3t -Gĥ$wE##aP}ezf&ەZ|+gRTJy݂1,}XGo}eTe'p,-֜+^`l-L0<HC<O(+=dh[ÿ?5<QzInu7nvF7qmMq&[.]sk|hiW8w5~W]~ӷSE~/aQz#}d.L//sWu`\iT_vjN]%)/vZӖtͻiUY`q(< -?dV/VA~Rs`q]8u#>B=EȐg>?XƘ|3^";^7d -f,:t2u3}BFnj}jJeN,qOOĹ*(d{z/LYrV~ic7LhIP -<(g[f -lt/ȺKޙq`X5so錬c91O l|6+Ws
Ԛs+jJel+DbÎFǾ*>Iw<|.m+*`rV/b=Y!a_=&+>ff]\`u[}_|S$]i5!/{73+dʞ]eygD?֧goPx CVi:"+;ߛI~b|F[͟LD<kpEҼ]i),jFף\DNYN֍D{ovtN]|=--S77$k`0oh g E^\endstream +xiTWǡBԸXPBE<@K
00ɠ=*" +R n9.w1-*J`UjxO=*(!bS< +YdH(PP
B>K +TBBJ +8U +}z
Kv0X
ēC#ZLjA~Tó~츊LV-C;Mo6v[s^ܿ1>89lZgʼ-2GWϩs^stvpo_v>ػ^Lwqx<w錋mGիw +ʢa\~aH_^9ʮETc{qE~/l^yv¦fHd!Cf`h9Y1^#A?d +b5$:p<mspڴlyΑqcBw+ l{T"zΦN^t^ys <nb 3'&Bh0fZ{Xf{tק_4u'XT$m,ȮzS"|HX]mkWX\t;Ĥ#Sgnƅs*cW̹ᶵp<шD)xi7lcMBңlRxN]ʑ˪aJVb;INuBVJ+hծ U(VK7=sn_[ʫ?xN +hy ݩ!e9FF_;&Y%wR2otuД`b̪Y14ȄYlĿ19 KXbplKɄGU۪\~PT
ײh7;z_džh4cE_kwLYXn{)ZRt6y0oh ŠL` ~U\endstream endobj 4586 0 obj << /Type /Font @@ -31460,14 +31215,14 @@ endobj /FirstChar 110 /LastChar 110 /Widths 6704 0 R -/BaseFont /WWMNAR+CMBSY10 +/BaseFont /PJDRZZ+CMBSY10 /FontDescriptor 4584 0 R >> endobj 4584 0 obj << /Ascent 750 /CapHeight 686 /Descent -194 -/FontName /WWMNAR+CMBSY10 +/FontName /PJDRZZ+CMBSY10 /ItalicAngle -14 /StemV 85 /XHeight 444 @@ -31483,30 +31238,33 @@ endobj /Length1 1354 /Length2 5076 /Length3 532 -/Length 5901 -/Filter /FlateDecode ->> -stream -xg<[%F(eA0wNa(=轛! ZD -N$Q"wxxΧ;|yu]Zk
eWE!B !) P$RCRK$% -^@a8DJDTJ*|=h M+aEuhG+n; -ܟU}%q
׆.A`Oq\E7I -AJwc ˧&}rZ!˂qe -uLd˜ -9S[ކp5⡒ta&Kdڲ*=y?"]agM>8x}"qZ7`^e~Hb"!#q3ȷgܹ`{];5êx<!Ӓ!LwgOG̶4CkzS%~ug/0-,խn"5=vn5gi]qf"r㫐C}?.ރ4M3Y`Lۃ[7 -a.Q?R nh|:GRU>6PmiYM~b[^Pȕ佐/knT -?zhΚP|.wQg'z6~Mgsy%X0 -Muol|g[YC>|-.EV&o_Uql|NIkYLv#tY'NfZGAA#θ!sR^t4Gs3J Y}ؾv:e1n.rq</*Ku}{:}|e?{9VwOk%cC\Eu>KLo|{g0F]u+ae[_\xn3KEv+<On_cw:S+衢|hmYHXJ!Ҏ/L(?r^e]|F|~sGxκxhOyc30#EJ❔cB"oC2</CcL˚j].7[Fx$U<-M7AϓC(McV
Άt.jN):6:?~
#a~Լ -a^M -ĪO}-D3KCFcRv -J -]Ϊ+Wr'c@# -]cF]u[X
4X+V3Bo8~)v8|(E -H#'Lj@-5U#!aaN9Gh;#bWQay>
j -&I~DdV9Fqzi@USGaN1۠:eSEFN.3##>o|[~yXv5O& -6$ђ!ڶ7fy%Fىobo\ bP-)ɴ --n: -=̠>6ȇ1Zd*rZ}cWf%Ƭ˺Hezez!ۄn/*:~I{fٮa6_:{7#+9WMq.>3ϵgs+钙J"\\ Mpe^Dd3bT,SÜ\ErdV -W&u@\endstream +/Length 5900 +/Filter /FlateDecode +>> +stream +xW\Sۺ) @BEz( KGzDA(" +D ҫHGzSRn>go9>twe9spP6p/*j + +90U<u.L['FNCxsT
uF#@~A*o8Lu +@ @D6"npu%o;o'!p&PR#D<Y៚ʒmHQY_tQAYى1?ENSOcВ=K^%zޝ)YfZkb²NA}sd0tEAVhu6dSEM>{|!i,+Yҧe~: +;wlfzKhF݁r8x;||MCB˳lLf9 +W,ܠMdefhCǎ_)U=dٟ$|OBN(mA8:uui˯-2},xl73hyOSVˬ9g."Sy[dV6W"#ޮƔj{+H
BC>_W\~P*ŗ야H zynj6bf`L(OSniԚv
^ӊş)LOM9|fϘL^_E9Jmb
Đ^K
\!thdWinJv%wHaeS il({XZ_M>I}>@g.^I36{n?3QC?PtV}R꩕f#GGioم+ +9&/_ =u[+yT
ϊTlᡙ~V.(wFXqr-F@(<T֚C-QXB,6 + 4D&N;AkDEG;̰&;=*o [ ~jd<.'琰h +Qr[ZO8W=WR A=pTWGk`?,e +$DϹ",<T}y 3AB1d"}-MK)6rv.\e[{N|nmSh֪;_rF` +hu[fɇD^2ƹF7U:m̮{5ZH*)Ko^&)SD.Ι +sn%d4QxI<ey[$9~iytanZșBċc|Q
|=9^jyd&O6T|#J3Ŏ'NA׃`d i@x`%#4@|J2F0 kIٯZrTK~愗x.>bA*b,r +b[Rm +}Wg*$Q%(.Rz'9:@.9)G;{IDNF +Ed+sB!OTHb:مwOgw]@P5EL771AN^Lox<~H{#Xe\ARisQT0&7].6$a9b{O-s0M364h N'O%k~^^qS(]d 3DfG+k@QU1DsqH\MEoClT0ˑRo|@>qx{rc|-/_.P{y1IY@]ٸoɔ߉ڮGm@kVcQͻT5]%{ +d r^f7NѦR&7IP.JWvEMt1D&;j^3$4/QTjRyH202 +nh6UGث~ˈg@l<xbBFyCqE8<?m8CNytc2Apǣsu{Ws2I~[[tnITBC}*LnA +fߎ߳=5(Im,VWeEUE,\gQPh-pſ +sj$R/ J6pp/.$2OWCXj@'ᄆ+$giN]sr)=xWA^;WD +>._!X#dt縈N~E2S,moBq%tyK7EneM=:5(XUmyX8iCMSOrt7uWy9Ѹ^bĕqt)wjtif'D1Pc؝\>{S +(㋵r:yec͌}BkXP +f endobj 3992 0 obj << /Type /Font @@ -31515,14 +31273,14 @@ endobj /FirstChar 12 /LastChar 123 /Widths 6705 0 R -/BaseFont /YTUKRU+CMSSI10 +/BaseFont /GEHPXX+CMSSI10 /FontDescriptor 3990 0 R >> endobj 3990 0 obj << /Ascent 694 /CapHeight 694 /Descent -194 -/FontName /YTUKRU+CMSSI10 +/FontName /GEHPXX+CMSSI10 /ItalicAngle -12 /StemV 80 /XHeight 444 @@ -31542,7 +31300,7 @@ endobj /Filter /FlateDecode >> stream -xUX\˶=5XC7 Hpw@4;-8 +xUX\˶=5XC7 Hpw@4;-8 wt{1CbxM7s :-" |fn[ @@ -31582,7 +31340,7 @@ k9?7`~Ѽ!>ݴQ(ICD/OI[&fsV[i*2&fl&5kk</$ ӴRι\o&I_2P9=O 6>B|`]3Ⴔ+&ɧ$yF
)#QWʪ?ٴ$JcG1-O6H:9'}yU>+9h|3SD!`!~٥4uLa랺iBPd{ژ7ߘF[uQ80d^u|{GLd8=P5ըbuhPu`~XYD2T't+ﲅ0W$FbNUx)@{S'6F܍?6KȄY{TWIor>$&Y!=j_D!1ڏpt$$g>=qR9[X+Q
']Z':ff˱BBsIZWЧBnRՍǐ$rZy7mE#0*\.iF##i~]ĎԜ1'jW}d}7}·՝7Veo6%Z̺?pƛ1eOȏ/hk`ghwqVp{X6g{1 J\&<?]q!ᏑF|q>kI<9(fNVxbˀNJ?<>FvmBE ٟ5 rx&&#:",\MOk"fhϒʚ'm}YыZ\ܠ$!ޤͪPxDC[)r9Q,Z`-,:LΉ?)I~H0Q*^?.΅hP?C[<ǖi*<fwbm"N&orkW̜RzAwج>e]`9Sz,[\̳\xK>`["1~ ȰGu30[#M!|(6ЙE4ַ->5
OLWoҰ'aiZq>gE~giGg|\ 3u/4?kbF_6I}{`hMnܗR=zCRqQ#%IY։9`Kj-4t"R<UT5Ϗ ֿL#p^NNRWaͭ}@!7OWHd*ڞ|Z=>JZf-we9{XxύK8Mڅs(Z}r.Y_[fcZ0E:Hمort}0^{ }DЪ~.&gdN$3`hI el~L_3md
cx3_<G<t@ڲ,pnWFgē% B-qqE1mHe& Kvݱځ2tvP`XᏘ-!ַ<K~E/},TUy7.Bb?bVHMCQ,Gg[
4bBb)鰦kƈ8(x*-@c/JЋmnk"_a,rYMB3i-$]eZt>TtP@PP|iOU4qY!"RKDa˥d7K:&Ci(U&^5MPaDͧS&*ԉII=m&[i!bl/wn& AZZrUOX9R&$w] mQI~$j?Na8kn"*r٠d -
m!Oh_ +
m!Oh_ endobj 3969 0 obj << /Type /Font @@ -31591,14 +31349,14 @@ endobj /FirstChar 11 /LastChar 123 /Widths 6706 0 R -/BaseFont /RLWAMR+CMSS10 +/BaseFont /KISPVY+CMSS10 /FontDescriptor 3967 0 R >> endobj 3967 0 obj << /Ascent 694 /CapHeight 694 /Descent -194 -/FontName /RLWAMR+CMSS10 +/FontName /KISPVY+CMSS10 /ItalicAngle 0 /StemV 78 /XHeight 444 @@ -31618,48 +31376,45 @@ endobj /Length1 1393 /Length2 8137 /Length3 532 -/Length 8965 -/Filter /FlateDecode ->> -stream -xeX)ZZR,R @ܽK)Rܽ{owg?yϜΙPBP['VA -=v;MY88 -v!hlPX-0/.lm{K -Y8J[MU,L#8%`GMA3gTdanuN9~3CnD߿>W5)[ -*&hsP@˔R$Gю4!5W3`s \K2c -6SqolA0rQNL
szmvɷN]:9#=^XXDO5NFӪ[?A ӯ^?-N[` D(!̦9~5Q#QY=UVȷ9YQ)|5M8{Zs\НpZT(IEAUx(5zb/)M%+7Y̋Za?(i -iFJrt>pl3ݣGz:R3d#5%g$cneRtJUa9:C= -8e6,^vP$sz҅b;#;c!_^<nM!/";E#882B`&Zkoe]l9gb'jx!fȸq噓..9\oد$$rt}$"njڷ^@|%He3r%y -Pgl
a>#.Ή}$37 7Il혚QWn*<*aLz+8oei5Yz 3 -a?Ȓdj}jڶ9:}e\YUhC]Bp$5ͩYPv \mł%jBSY0-*/#Z>kB8lRk -Ŭ{QdzUDc%hiZXiɓKG0eD-[ -YwҹR|3l}Sk| -?b; FҒe
t,u"g":]'rnEWNi[~>5ユ d]_~^VE}\נEMj^KB#pGP_B/c#q5f|:꽧3ӴD)(I"+2QI/x˂3ŏ,/5B5u++(u -2d>\KxaRJ#,62gcR|2>xDnf.h6[Z&QvGfE'h\("yvЛr3y
ՓD'Ys|H!p5Ov,v E:qO͎1Ua"xgXF|eJnKHpGƼ EŖq}b )YˇdJGH7T3MnyLRApXҏOnOlx)At"oxq>Drh5IяfO45
n2>mނڿ|(+#Xj˾Ѻe{QHE/Ay 9.[xOo2_8b&M;nʉ:}BP0?D(uxh:fykߘdCAj&lYG---mq
m.ZHqae׃{¬ ,eHڻpUM-biXʟd l
E/C;j^,Ѷmd"1院RJE[kܿkЙ>yj/:*S'#a]JK^"t-wmr -q_v PhᨴQ
Z6̽ʙѻKWNduX:]NO"I~&ǜQV^7f -f{U|ij p82]AgmE<a{d^TlE)Tuo 39Cy[f7!GT/&L2z+:t=6?RzKڬon0ɷ -! <AN'4HZi;KCңC07:T%[FT >K7}ōv*B< -44hvZ=0`ke-pK~peә10i %HAuqԊv|b,4}O*j{qpX#v vHj> x(VZ
q,Mr𠍆
M!Wԯ&t -0>oW -q -$227<a {&?rW*zUPr|Zp.\Jaidx\lh}az8\n+[ljfIW.ک'`ݥ
q1j*{X_`C}Y?Tq^+QG͟+t7ihd1"6%!,5i&&IJε~}y=F$N| $B34Wh x:2P -gZxeFuSXAyۆ2ed`xS%F}q0cEY]-1
&a9Ѻtkr -C{ 5
;&Z_:W66.KU*Urxz9UE@WhczuQIKF}Ps'wxcTR!RD:Tƃ{$ayx@ -l-`$nt+AډnYiT4l[#{Loymbp{7|h9/&Ù@Zibzpr- -l}÷,$KhdmDY`hUX(;Uck`ZTGYsQ\4Ⲽ.bʦ -Ah{!8X'jUUq*_KR}cNE'pVE|>'=.(w~YE`ZطQ{nN]W1pMIo߉n;`zg/V/VkeS/,U_*8WJ5%\sx0#V|x꤈ί
'$zE
G(}a<qwA^WjaM15@7d-lv&sj<i<ƆkNOѐT7hOxQl@ #MpK{*#KN\xPzD5E&T) C8P -/LF9%+7[DV9F@f*]fwӜyu) -Baj"Nțus'k D')3v7CaB{3#jN -*iT(6#}T2g2pSE_rAL?qI_,w)R0@S}~X@B2Rz˷B%&ٞFEC6 -'Z[ [p+$ <b(UAoM!}Ybdr99s+̛ᄡFș9q`.gsCxl"EeI~b|Ck Wv3m/Ҷ.??ߏ
Cz-dGc#_#Z;Hጲ< ud.}#?hwRؒwJ/'/df2e*~rYة&,N̟ίG6S1!eP2cʷu8DžKVDc -:|f;@N,RE}*& -'dI䅬 -ҹ_!;"zE<;Kd~&*Q9!x֡5gB=0JR -A0yن@+74o(++_]uߤ~s9WZnpv Gͯ[TوK`u^Sm1G_ fY,_e[*_/X\ -Ehrω9دcS54
EX|LNO_%V5?+uݴs\3vUBTW -SIg_ڨʣrg!3sPa> ~d'US<98=bkF]P8\K뒦!rL[^fK/^~U2*Y*rRψU")rrd#AgȘtk$2]>Rxzh11sD)䬡,O,%kӉ1; d= OŭPJemZD Z"Bw*n%Z//,*rEM*U4֧8n,霡|ˡ -4wYh)]?Iʠk7Ѫb$~d3&;k#%G$}VY#Ih?Mbrue}dV8l0P/ڻ-> ExL^ϴQ4 D+Nq+#6tinRej3^:Egv}]HT,s.x+b6E3t;.:35y8_{^)N>9OSsWGPm䒇IʑJÄP(ζ;Df~XZza -wZEl*87,[+v(Nݲ~O,`b
98Am@Vh/dendstream +/Length 8964 +/Filter /FlateDecode +>> +stream +xeX)ZZxZ,]JqݵýݟO3gsf&4j,&P#4ƑC +56;ĭ +WC`{& +;HM +v +?omL7*&Xۑo-7&Xu;! 0 ?fa4#잱0
Ӱav Li8>90+?f¬\~#'YӑzLX8y;Ӱ1sIxaD6[^b{`+mqj,`\T-;Q@Z0X*z&jƾa\L~ka^tPfAT/C-p;&CNʉ>@v7uf"Ŗmպs;R>W0oK)&Ih[{1G2\b +p?'+q:26 gG+5n&Ο>d'#Jl_J?,;JfMCFSAM&"fJ6-'n[RDLbhh݄^1o}F}WRG=r:иlmn8\sk~O]wˋ9]vM>__<nN!+$;E#40<L`&Jsoy]t9g-TNNP1CҍQ3'p]r9__AI$lF1D"EϏwo10}?2(<SxFz6J iO>u{0Iݞ2!n?8!mch،_cqdhTx +0{/C=TG Ccwt
ʟn_'0dIv2Bez?b5n[q{-WT'o-NIu#pV"T@MQd*-QSXB|8nA{MGj\j
Q.1;KEdGYT +1`:ٖ.ѵYkܐD#R/W,N,/s Ha9Z`JM4MLBA}{ȳ\wۯrnh 1-pwtcNN'8xM>XS7!5MIbB]1t<GMcL/Xt))1}mAHKƇC;tӾԩm8wùz~U2IuIw%bCJ}Aɺژ~Ë3FnMJ|Um]>F
%cQ)WZiL%$vT<38{DJr{l'E/
zN?ȬOS~{OFPYYA%S!/zd* ;b1l>z.{4@HI$/Na&&ă?2"5]);fFbCYɱͲ"FXGߔQTBͪ,d= :ʚFph'6bN\ƈ{:ovd0-.:jFC1z-*Qzt<^7&=Ex>gX7}E +ae"~|r0`~b{M
/NU-1<4z^icM5[PO߾~bKirw7\u=#6|.YTGK.|˻5A1kQs flrK3qʩdSN5!LxcFaU+5=]CB7%ek4=d\JO~kajN+zkImi絘EgΫA3oY.3ߓBR߅I<hjkOzYr&0fS]2mF:."As.C .\xf
ɓ;MТ]U]V若EKMMQrǡ&,(> _ XIbcƲ|Dq+"g$R/Z)쟢)D2yoL#zXrrc=Г%,}Xe>&r3J.O_VK:#Y:5i}DNkG +XTputGY{-Vgp̹fxa`U5N>?a- +gݏѵ'M]'PGl&r#3&eS<ywO*{[HI[Y(R]DSGa3nѷ/|.oAvJ1f8&i}$"<䦊<9~?1$UF:B_NˡXbb^9R%ټ9P<uNpEِ^2-${!m
nTVxвUM+$̊\/`JCA(Tl#SƸuA \mkƽb!rgv3<Ҕӧ|cG۳-y]dUuo֏Hd?j]Gl!}oZjWvLCJߡ +(_/Dx=Kr +30:$=|GB4;Ŭ
4hٟAV$yOYMĞwP1jgᐥVѿ\콭+,kK,v% aUl3ՇKL263}jR9.pބb38M7L#?!.H
{ﺻݐ(cu,\&=hrGcSEt;T}FTiQ/C7)ph*gբOu)$_)ty^mg/p%:+ߟ̤MM~u7w$ѽ_2V
Y8 .jd 'ui6 +c?ؽݞTM| +#7%Īv˵yY4U) ~
i8ő_ahU2JKW6/tca/Ofݫe8&9A ,;Zςrm.j1[?Ş%?5Z.tXPh*PRGJrc
rW47%M|%E+W7']9tnHqΆ'#P^c
yέA:ƇօUl`讕kZ$}NDED +qY^apc1yJ +d?(L +f}af-]k57&ͫR*(ٻHծ? +GTwR +'3'[]6/?T+&zXM6&[$֚Em.U@ /#_W&+IrTVm&T}Js0U'n
@e.q?KQX:^Ė>Ʈo7<jEhk}) ;?IITOUL%WmGj~91n
+F~fa߬1~=Z<MblZ:őd1>軣e0dlihu]EQh|~o|%!\cTq?e}VB;^B7jV^YbQłN.CnÂ]NL5&]^\Bx%SrCeD/N5%+7[D^9FbO
f*]fuќyu9Bij"Fțy}+kD'.5r3Ca\k##rN:qD(&=
CT;2>g"pC=Ãf^ᓞXR(uAzP4// +90سv<։H}|ɥҡY4G^LkτMDtvŐEao;Q_2@GST8*??OD⫪Ѐ`)-G5R7MX_BSQ)ŜxTb̵[,TŜiO煝t,iNli~v< +@,jƎ1D
)PU9._b}
o97]TMFQf+t/G&۷Xثho{jl; + H hچlFT{ח#fEŚliQSo.1?#?ګC@'uAS|X>|qDǺ涰K2)D\CjLn~ԅD͌^mP~`k<\3TY%{9+sJc%x<a4B)ɺ-mY<*9eXR _O?[ԫu}fлh1ꇚgGY|{i\hqFTRØWzG71?&˫K\:.(*c&"5.q) S'{ +ʤӆH.$U@CS.;{V'(|ht<2AvbKtzǏ&'=ƱK.9zbm+_Pt)\I!d{X]h,-!Svã=$8ۃ5ЗNњ9ϹDz:ͽyhr}='))YvАd_34|Fl5ZYM˼Gi~mi]3UsoC\Գr"qQlu'-N6;"3:veoPBy@o|UJ`Ӯi6Mع /PA×/o$">,cA`[Ohb8,OE^7w.N]tmҐIm +v-wb{>+I}lA3å`r
K~@Veem/8hpAxzyy2B~!˪k6E ]fޡz{Yj7UwPs>u+u2[jyzMN۲53e4`sp#e@R*M؇݇p9 +ҹ_;51vS"҅<;!KQ;Pv{#^q%k6+N*{`pdPa
L<QV4$NyV8ܿPvI!6 Ocʷb]o +{CfsO1{zq0wɧn'|i/Zg1<=l)co|xn#`q(ʣ='dcOPWޓC6a%: +TL4>%9ٷlzq̖Pwzwn3͘QDL@VU3幤`,G̀3ŶsuxԜ".vsx- +/MEs<8I~e*i?b3c!KYN$ܽis/R:wRFH&KB&%M:+vŢVkvҒ!\6沢F-%ui"ʝ2\e]vNXjK̦⭟ԍ4l"LW8w6Bp-)0m{/=yUޗTʊVY|Ah?tټeH6#?<@Ƥ[tpyO*})Wov +CkR?.!'UR +dǒP:3ONi'~naѕ [,^զ[D3ݦf)#ulw#ު#"naŇ"EHW%Jf1{nj{{vK +Q
=۫f_ߔE<
`sxqb$%i=Qk1#`tNC|sZ!wfwx.YrGcBcq9HrXR{U,\+hWgt +k -C6[+aCEه8}PbEckOP +?23iͶ(|2߆,kr+7X4-9yA?d[3tendstream endobj 3966 0 obj << /Type /Font @@ -31668,14 +31423,14 @@ endobj /FirstChar 52 /LastChar 121 /Widths 6708 0 R -/BaseFont /KSCKLQ+CMCSC10 +/BaseFont /IDXUGX+CMCSC10 /FontDescriptor 3964 0 R >> endobj 3964 0 obj << /Ascent 514 /CapHeight 683 /Descent 0 -/FontName /KSCKLQ+CMCSC10 +/FontName /IDXUGX+CMCSC10 /ItalicAngle 0 /StemV 72 /XHeight 431 @@ -31701,7 +31456,7 @@ endobj stream xڬeX\ͶpC x-8];k܂kp]wsv>?z̪9jV(Hlb6 JI -@/Mj +@/Mj Q]?`e-oeMş HJO
hjk b!VH
hg' sƳiCb{mPz^],ǝxqET @@ -31764,7 +31519,7 @@ SVF)eْǤ0:۟Tt["t&o79Q^jqVxɄ$MhLH "kN}zZ7UΠ&Mc|dž=G#[ƘSTD0
olo,Xxv>>jze8Mj929g~YUMEЙKr)Q~˗B|?H^J.:tǠvע~7<ٷ 3u:]fޜzKDF3m}n?(#;-84y$Fq7^#2<eR½濎/vv=;rq|I{,.~'.tnZ/h~>vf$&E|w0q??fP6A,5`b`UO@^2y$0Z!
@Z6%lT3Y8ݯ]srcs$j:zCzs
G4c*Ɗr^E&O,~G6$1
[kK$] K6?R_
cCVzgNSſz&l~me.G߳=Fi]dUIhy|hhٟh=Ё$c{ޮN7$]ryRzFreH,)6d9i{sȚ̲@Zύq(I?P)ER{ET@tZ~8yRZuAp-317HWVr[QGh{jg$o1iqi0m3e#C,XEt^_8% dwL<!xw8b[߱I+a{£r!1G[t84"ΘmIxŸ@ܶ9PJr,R!@YQl'^c<Glw[+_gJgTk)|yhAyBM_ð$bUW?Ep>gV4^1R1h; zk~IifdaڪR>BޓRP뉼67 X_;No -x Bek\JwP9m_'V݁FyN&R;p{\?r94֗Ґ|3 +x Bek\JwP9m_'V݁FyN&R;p{\?r94֗Ґ|3 endobj 3242 0 obj << /Type /Font @@ -31773,14 +31528,14 @@ endobj /FirstChar 11 /LastChar 123 /Widths 6710 0 R -/BaseFont /CETICX+CMTI10 +/BaseFont /FXDGPM+CMTI10 /FontDescriptor 3240 0 R >> endobj 3240 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /CETICX+CMTI10 +/FontName /FXDGPM+CMTI10 /ItalicAngle -14 /StemV 68 /XHeight 431 @@ -31800,39 +31555,45 @@ endobj /Filter /FlateDecode >> stream -xU\ڲq -]gX0`x5wf -^"g-|&X3$L`Ǒ}&a v;3 L0ug+?L]SW}&34 2gk=L]`:S}&6r².ϗ$)i `儍'_{ -M;; -NZAp23EzihWHcS&?RrP4Y',3?MȘzbv`h0߃k@|H{օ\W@zT>?xol}3͜v;(]1k-nPξ~xaՋ?=+mrgE=,6082mt[g閑fF/RslXZYWK-j${ -Ooݴk=S
c]]6C*>;T,,(Lo59})gG<$.:Ȭ>(I5zoF)@5Bkn>6^X:J;/qAp.|kӎpp{l_{z'ܮ7DO|䚪&Lߧd^ɹȯ7,pjJ*4
nBx@/!V{CivҺ}9V!79*_2ڳ
f/a[!|}Ћ)^v'*md) -JǴ"d+j0If"w7L67YArxYp8Uh,\J?}/f1mhaFjt@_[Yce2?dϽ[&yYoOE(^p}Y)ڻbIbIn~
puĩn"<N,V8GkH(((}P֎%d'S Iqf!'#(c=6D]T|CLJe|3<̀?G;I4-6H@
4_YM4飮qݑ-տLI(w:Q|W -U<"UD#ZvoZj#-x`Qk|o>b:Lڌ<y˳~+r.']t䆊~F(xóV|}#'tR@Qg#nJ_#V0jkMK%]6!5*QNk'wvC0* -u%9z6q^˴˯.OX$16L
oL|!8uc.T+{
MOhOe=KB6,%Fӏ1ACCGxQݥXZn8Y#N?L˒i{J@XDT>Amxye?"2\$'
e(!zkQ`
:=uV́*Zs~A(Ã1 މzPs ->d^D WS
b7w -#`)ТK-\hg}hI.$H1#'uJX^y
d{ViQѣz6UҸ-?R|.JB<0uPQQ75IZp1JPgN,uftqV8Bx䁄n٪z
MKy"*NmQ[2qn9+N>,SSQ|$RY82~]_(EkwMݗ-ACnMfV.p/93f`"5u@OmH&VwpGhɸbZ<ydBd$/#Y0w8筁//e.ؒzfʼd$EsDJ~I/٪X\dƃӦ(f*o*(w.T3nb[Fܬ6]6#{k*ZuAT_}ݙ:tR^ӫWׂT44X8R\Sճt!/ܶſ>JBی<.kf&>QXG,+,4Zux`\W&ȏ^N}EM ƾn pz}!QWH{6gW[wNjF3wKt*vaUW-Vp^o+)O;e,Jw9bNޓ"nxϏ=Tc1%; Qv|U$pK m: -*4p~x`)L'zS(J$cZ={U9۽ ]`Y7! f#6Y"R0v3+dp xIas\]3;<84`bCF)xRP5] `R<%6}>H`er=ˡ"E.hZ$ޗP M08| -˙%E)gaGPOIY -1l -t8 -MgA"fY{+IckG·TtVRb{wJ%᧧ӯ.h@)Cc8҈6%coGZ/SRhyu=q8CXv߸.Y3DJ -U0LĽϮx5K-`a'eҫf(\QZkSVA2`&/ΰ<TYvHۣO:fE@r -B. -v-ih}r#27gG+,#OZ&>qQsdv*Mp0kH}Y_^>5aNL&z+fFhQaUu4%30*}!ȉƒ1G{#%21^'bZ-LC56|tCTy5}3{Z\ssÏإ -/:^R_pϻ\Y"v$_D7 -eºByCb2m]M&>בhOɑqܻnWw"IN}bٕqn}sTPqya-ƂbrolA0T Q )O{}]
Ox6?*vH7? _í`X)0c6C<==`Cp˔1n5&A<~,j/% -Tk1S|Oxց3WTW%y3XA&t6r`/қ ڊ( %lc1,CG,TQWk\DZ% X}DkCpV+[|)x]F CjZ>wܚ^Ei\L]'1h:wxCԧ]M,Z'6p'yiMa5R0~?e7B:2R_!HT-j-Ar(㆟CPZ|MJNLq
>2D-[OD&2ΨC͗0:}o4bӱf)=i_mUq%p)l^('VMVϛ|bcD;[*{0Ma M9;B/E㾬*xܴfOT6Eu0uT܃xd 6L^.k)Rio:ȢXv!"Qlt~gZդ>U/.Ng_N{cܮq-@t^6w-<&<47ttYƖUsWdWRKDfѯ0RU|ECC?I¯Hu9t:!BuAp=#DxrSu0)kbvKx -K
JṫKb<YlU8aNTy8 fnG9H5C8 @ߙ,rJy@\ͻvb՛P_!,ZxmV8<,ax>.s袾ھ[)'pi̦L)Vnxuc8]Ffq2'q2TK(<PlQX$\:b+OҹT`ȻѵT$(MNS@p? -kbwLrg|SvGMn*3.8HN
[E'nkՕצ'/Vԧצir -FYYx_D3Lo D|Ŋ3>H_)90h`ƐXԪMc0W|7~ݢMT)1dFk:'Zk{Pxvpf"'1~/ --̙-.lZ-#n9ЕO^TvAz!|}*S]CB37bBhVHӘl5~ -1dtπ&Gt=1yBQJY<P}]ө\YAkSڙElǁKv37+: =ǥ[\XS+"V9L|2l*" - -RhW]e`;c.V#7vEgƎ<m {QXj?1p^.PӉPb^Ô¯ɚEeܒw<OrRaiQm&ʛ:N|-j )b]-a$?06@vq!kʖefD&bo[є6]i_x+J\fh+JOB/:`{+kf)X!#j{|2ʢNEfO"'4RS&j}R;yhg?~vbr[6"JMyEq&ɺ#@ bcQ|pWyFɊ6Or#lA/աXC;De
xH8Fx$~n%$K3cý|>I5,#Bcaf|fq":-6N#}E8 V3sEDӲϸ}<a,)δlRW$wv)w>'m-覫IR:p`gc}O-z}4q*yA)?kW`MⲴxdլ%L"¡L_- -~DɅǸ~t;9֍_mPM)Js1; U]i~2 3{7y(Vmfa
u("V= lC -`u 6!# -S}"$'BsrXDh0Mj۔tt((pq\ʴدu>噲s7(
uoc|槤h -}9)Az>ee173}i\ 4$m&Gc.pI{-`.DD*sZWo
.6kclĒ.S4Ob`rE6>k5g)͈Od,Ybi[\Dzi^cbIrc/bCC(}sUц#Hir/2y`b<ql̛p -
P:I>6p3Y{!OIErGXNSu6;E٣jgPBU9/99^teJQKekѫ58Z:>ywzgkO}Ver{>.r_IW?gCZ79oϜCs齓H8=RưmPvWXFQH_spIYݛk9/ߏ"\oڌ6okĜ\''d*Mh5qyg=W({sʙ=vuğ̂Hٙ;@c+?&]rkPIOo[~nDM{N%
+ɮi[nKSvc~L
7ܵlOL7Pfٔ,d1|ZDJ +xU\ڲq +}9n9 +k_*#E[ LbgI`7#L= o v +g+<L]`JSW~&ʿL0=gi<eSz&3u L0ul<
;e]?&/IRÛ N.X}B-(,/
(vv>fNN``Wlk0l0go&l9L'dFgѮt!U! M09~5/H +hnNYg[ +Qnb2XZ}BKÌH{V,cD*!Φ<3zXlapdP-&1Π-#'/̌"J_ܥ~9үD[3H +|4l18;uv2|2_ +{l%. +Ygxv>hr[lb= +V[xD6,F<2?FZ4
U_z|uygTW\N
=Q<gFOXlFܔF?ha֢& JmBhk +U@(>KNʛ`.>U +QBעtz^U$`ڵ!Q`-cnl|>6An>m;~)s/tP}xU)Dm㠷ԡ2ޓDQQoC\&CUќ%E9|y}ʡ50V]P/ˑ[3+7QNF&SU8Kpc%rɓ*UЗi3.{aލ-Ĭ2ěsv03f|M^0nu-y=#Tp+)J *T -6#;(S1}j7#!=$FS +EZD0Ѱ6]R}?IDבb&FNF7[4ҭ Ң@Gmq[~ĥm\xka) +^ojc(xGbէϜ+XdcpD)! ݲUIBCD@U*/ڢd2I/%>rj WTzo/}P;YՙH:^]p.eQ '" +yɸIؕ^Uc+k(0MQTKęUP.] +.ٱ9fĶlYmmF#TlTY-8l#3u餼W;;L-h|ipxDgB/_m}'ys? xl]L0A}, ܱ8 \X܍WXh8!LPcs}#%(mCJ$ m$R,f(E3TL9p+êrPm7]EG[VR&w46/X }s%2sfŜ~߽'E{~bJvNA 7%H,t|u~6뤈k='Ӿr^aMizHf9's'8yn
h!pyK+Z
{*WtIKL=eEΕ3?iVZ +i,êW<5$nt>E+Z<Uh0j0d9SNINPHpǴz(r{ܳ2FoBBFlJ%'IDѯ`4툩g"gG13WȢ74q_4x)̹d/f2vNyph8ڍR+j +Q&<B7;BT?a?:g~dU|Ƶ8}4CًVTo|; ?zF!Wcu4mP9<߽.iL4۩J3-߂nv9W-Ps{}@]Xaý`VYuA[&8\'}"Y~;a-< qS߉eTj0eX5lI*l[e]ٳ!l2c7b03p +w`~vy@lwG{ mpA^3(`VjѼ3g:@b@R'elz'Rw]4D.=29!̲5>WƓS7DnCυo&@cJLǻOO_
\S +p~ǥmr)J2Ǻߎ^槤.{~F= qTq]5jgxa6י{']j[>1O +VWuxQ`֦eM_ayz{婲~e㗱G +KP/˧uX_sҊXQLsi8s84q_2ɷ "kCT%
df|[t#jTjR7^\'`n'8y\㐅xEH~)y
{h\nٯ2bF +k;=(nx?WXSG.YM|`)f2e0Ua'|kMV̌ТhK8!gʏa7UC%cP00("F,EJ+0eb](OĴZ)+jpmb,#`kfU#ա+TW7ɱKw;^puҿD pwt?DHпn(+55Xv9>+6BZ!Qֶ@Ku0j<šabN4ׯ鿮̢\G:(}9bA5$Q+)3uVu!1 +χ#ўI#iw;~iI=<ܮ%XGE*j7=je :+-RHsȡZ,2^W`SAꁣ\A+S^al&l~xUj2$ oh~@[R`B"mLw3yzzB=)cgґ/jz_#L>xX^K1Jg%ϝpͩb9gZ5>/<Jf$ 8*Y[ 4Ks-MlB1\5*^ԥ7AQAJW)]/bdYX2j>iJ +M5"ha׀3Vh>RN@z}5ӸN +F9OmN +ҚtTk9aho ?n+~!'nJ1;tlud;L˵6ӯB|l[ [ +P +I
?>&蕜X
|d#V[8*Mfe(ҝQ퇚/aY%bu*U#ߖhŜ+cOjSD{tJRټPN7}u6ƈvU`A(w382sv^}YUp9i!;m#̞lda머dl>˻ $\8R>.78uEngC:D2+(
/44II}_\KhED65]ⲯ[с $%l:[9xM6ypAi^-n]$dz- %Xɢ'hvͪ_a69kVwݫ(~R_52s&8Qu06Cp8{F2v)(UaTSx++"5ܡz{:q"DҷoU%,.Z8Rq,|Xw +p"s&ykp@Z3Yf}ѹw%Jy7;WCXvZۨbq?/xXFè>}\h-E}}RN@s'M_S|x +dž5p>(7:dN6d
$|Qxآ4=HtW42 sB-wkѩ,KIP*2^WL.FOC|8|IZGq7;fy*_;!ҼW?RNc`=4b٠-z 6G۾JG.GodYC~&g7_7NbT<l[6-սa>b^.#5/ѡ nxƘTe15̀ z*!Ve_/wjǾ٘Nv+G4G84,E/~ӯ'u6yTeMatU_Js}>T<koX?Fپ4=IWV]ʡN-nFT6g\p;O-;8+M+N^4HOM_/:u==:z6j f,/Mg|Rsa! U)"0a̯n"E!RbȌtNn27EN.b4^j!Z3[\ٴZ>Gܢ
rƯ+(E/<ѕB%J U>fn6&YY֑1jx!FTTt.#0~s\(hQ˨
|[6dc^1]$pGzWb/nQ4ڥelQMo>'ंϧrL_Y($C8iʤ.Yzp0ْVdnNacȾ M{Bc!y*SSܳצ3؎fnVt\#{KVD#*/rT
.d=#"~UDE:5ѮлX0vD<]íDGZo%ΞBy=Ozأ6~ c\ļU)_35;"˸%Byb{< Ң!Mf7=2ul& +eZ.7%@ +IRamj=BrK4-{JQMt)lӾuW8Wԝ}_HunWSᛱBG1==nZ
d9EVDNhL<osHvZ~*rmD%c 0IwMuG]9m#04~-J[ƢFï*Cm$G^"^.CWvr^qPӉI8J/I!gpX{3:`}\͓j}m)YF2qǂ̲~:E +*!9uZ?pqmoaѝTGp +g抈4e'qx? YRi٤InᆱzS|NZMWbu"1v?N[B3hU>dc?!R~$L3eitɪY][KE9CZqJwrg۠S`+>+cJw2
~?21egn P.F꼙QE{@#ِ +ն)o"%,oPP㢹?XZi_
y|3<3ejoPߒ:OIPgs6;uuSȇH|ʞbn6;g +\䈋l>}<G& +)j=SXֳη?Ҷ>$. nŒ.CH_ĆP"ZM
3Gl-
_d'x`&7 +kI%_ph:pFGK4x>2~0Ol`f9ہl0#endstream endobj 3112 0 obj << /Type /Font @@ -31841,14 +31602,14 @@ endobj /FirstChar 36 /LastChar 116 /Widths 6711 0 R -/BaseFont /WISZIO+CMSL10 +/BaseFont /PHNWOU+CMSL10 /FontDescriptor 3110 0 R >> endobj 3110 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /WISZIO+CMSL10 +/FontName /PHNWOU+CMSL10 /ItalicAngle -9 /StemV 79 /XHeight 431 @@ -31864,17 +31625,19 @@ endobj /Length1 793 /Length2 1151 /Length3 532 -/Length 1729 +/Length 1728 /Filter /FlateDecode >> stream -xRiTS2j=,i!DE(rKr/^n ),bKFQQ**u@%VHX>R*Nuu|[?g;{;.ga|c$bC" I!.\. XDD -=*< -0K}JG4JpH4 -
cl88%jRhҐ)J(tpQaa|T2\bd!?S1gLDzesES´fL(x|O F
A&PF -dV7>/pzU
:S*\%^y=,>q167~=eDK#GpP,W-u-Z_b`<NO1ڸ6i%;g>MxBzCe^܇\/L. -WH_H6O~Yc2#tfh\c:oL{%za%GRxכt6چU3LMAAUKf=]|zϵF -:~=!S&We2JؕXn[|%Ӆ-ap;KuWClЖhhLGXҺ1;/eD~o\*)ymU7nY'rhT6XYlI&(SNܲjXVpb:kn~;7xYuyQ}~sw]\&CE$=!Y~ +xRiTS2j=,y11 +Q7^@R*ʲ.EEXWCVE]ҟzog|g"dmC0`p!J%6 l6Fa9`h#xUZ5z6_8"G}"
# +9 +rBk +0z&`LbR8 +lS$A࿃!mT&gǔL: EBVRXk0LjoȚ^<DVk&O9\30Mq GScw0h5ӳBF"4U
gd :@ +(x +Qhҿ)ȵb_;#(OT#&MH`3lI$SҴfbTA +<o qB@6 ( endobj 2898 0 obj << /Type /Font @@ -31883,14 +31646,14 @@ endobj /FirstChar 60 /LastChar 62 /Widths 6712 0 R -/BaseFont /SVNYNC+CMMI10 +/BaseFont /QDQOEA+CMMI10 /FontDescriptor 2896 0 R >> endobj 2896 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /SVNYNC+CMMI10 +/FontName /QDQOEA+CMMI10 /ItalicAngle -14 /StemV 72 /XHeight 431 @@ -31910,12 +31673,15 @@ endobj /Length1 842 /Length2 1048 /Length3 532 -/Length 1656 +/Length 1655 /Filter /FlateDecode >> stream -xRkXgu*5*G1$3Rp1rĔZvH&a dI-T*DxDĥrYƻ\e(]s>3yw3}Y"C tٰ'`lb (Bb'=<`U -q q9L5)2(2W8!uJ9_Z,U*C՜|J?#*L TIZU`Bt\0*ô]!(17P
̆6ӡ2FJQjyePD|S`8K'|
TS)1SD}{e~apy +xRkXgu*XE@hPB bm-;$0`2 +lL +6?:0l\"]$@?kJI@Ă "R.ǥ +~6-jx찅
SHgSLIeE=25Y4ۺ{y,C/k&sGٌo7_`Zbmwi9ۓhokU^KWͦIN!yZe1ٟdC4پE+6&'ȱ3^\3v-), 6tֹ|{ݡ[]bD89t}&M\+[B>JcFfN캯}j\P\y*&1eWHs :.ziɆ-{yǾ
T&B/a6D0Dӷ|W4;#fZ}zAr흥q))r'\*v!/#t>Ycrzt-|'{;Ff\ywC2,H]gvUK'u7MG.WxpkV1smkv+NHuN|n0~<Ukq-7Dd?zcI_UB]QuYVt|FݘU\7l4
M3PP6UqA7lUwi]{ t__M/LOq`ԋr-By(+*550cXkq-ҽ\j +1~|zig{_nur~| j(ձf//ӲIOu(bMtѩ>s"! U$T:Ovendstream endobj 2895 0 obj << /Type /Font @@ -31924,14 +31690,14 @@ endobj /FirstChar 15 /LastChar 110 /Widths 6714 0 R -/BaseFont /MHCEBZ+CMSY10 +/BaseFont /CZKQJI+CMSY10 /FontDescriptor 2893 0 R >> endobj 2893 0 obj << /Ascent 750 /CapHeight 683 /Descent -194 -/FontName /MHCEBZ+CMSY10 +/FontName /CZKQJI+CMSY10 /ItalicAngle -14 /StemV 85 /XHeight 431 @@ -31953,7 +31719,7 @@ endobj stream xUX̶k 0ss -+Z$N oj ajlPu0z1 ++Z$N oj ajlPu0z1
]K #NZO(/.QNoFmZW^{'s73eڅ?O`WI7~ ԒȴUd%QAKw*`_@KNZkrT @@ -32008,7 +31774,8 @@ zu;{-mh\jH3G7}V4EK*%|gP fo=cP\IUs#
':aSmU=&0SkQ72m>KzNيNK`Y+cg9bã[ss&U~1X!k(g|oǎPY+~vG"⧡m6:Lau ]]5`.AcP[\G>\vT-QwCg+b8x^ﹳkc[I0k}7s"׆X) ^y $Y[NPy5"K3d?,j1DR jSALjAjdUMIZgn[(@8DQvT*,e(O`)GKAT9pAw&
Pms^׃q|JY2:(ԧ wH1g9ЫH~$rQ+=:ߞYҢ~k{-'gLq[:բ~%"a(s$uD2 ]gcR?Prdo7GiԔ|zU3ڭ'p$ -0K.KlH;\Fix1XRw44Sp*O~ĝ*LosuIIs)ܦuT^d׳6Q]ElYQ"3` +0K.KlH;\Fix1XRw44Sp*O~ĝ*LosuIIs)ܦuT^d׳6Q]ElYQ"3` +Kendstream endobj 2890 0 obj << /Type /Font @@ -32017,14 +31784,14 @@ endobj /FirstChar 12 /LastChar 124 /Widths 6715 0 R -/BaseFont /BCXZJZ+CMBX10 +/BaseFont /DFZSQU+CMBX10 /FontDescriptor 2888 0 R >> endobj 2888 0 obj << /Ascent 694 /CapHeight 686 /Descent -194 -/FontName /BCXZJZ+CMBX10 +/FontName /DFZSQU+CMBX10 /ItalicAngle 0 /StemV 114 /XHeight 444 @@ -32048,7 +31815,7 @@ endobj /Filter /FlateDecode >> stream -xS|ohϤm463m7llۍnضw>ڿ`^\92P֙ "`f`bF 'q:[ي:y +xS|ohϤm463m7llۍnضw>ڿ`^\92P֙ "`f`bF 'q:[ي:y `5[hbd'`u1gl9 ?ljl@w1Ҽ1oeJShXt94
Ys|}l'bb<uw(n/N_&/R]
=[5<INPۛ~ݞ+̬%jd])Rj6fspj[|`%QBKu(g[sCK6kBre g@ twB F.fSf]Xµh)too5pS)Xr7Ty'Dz|ٳ|-) ˏආr~ҐZyd%J0Tw!H3-b:"<lVFdv;p9ٖD<~(<|C!*Fe3tN[A##٘^|'";8:.厥Ykuu^ay. ?P @@ -32105,7 +31872,7 @@ T4Y=nV.+pwҠ89COb#.c7(@D%:ʯ_BvZupH%٢*b Ex"Qu2s4ݥģUM#vދgX5 yq s^zs3Q9$Ҥl[
5VTDeIqkj;";e]T>[d)QWxlGo"/0XxoZnv2 - + endobj 2880 0 obj << /Type /Font @@ -32114,14 +31881,14 @@ endobj /FirstChar 33 /LastChar 126 /Widths 6717 0 R -/BaseFont /CTPYGV+CMTT10 +/BaseFont /VMHYIJ+CMTT10 /FontDescriptor 2878 0 R >> endobj 2878 0 obj << /Ascent 611 /CapHeight 611 /Descent -222 -/FontName /CTPYGV+CMTT10 +/FontName /VMHYIJ+CMTT10 /ItalicAngle 0 /StemV 69 /XHeight 431 @@ -32141,7 +31908,7 @@ endobj /Filter /FlateDecode >> stream -xڬeT]Mpk;%w
n]tI7`0\UUk} 'VR6s0H8ػ330ʫ031301:]Ō]<D,D +xڬeT]Mpk;%w
n]tI7`0\UUk} 'VR6s0H8ػ330ʫ031301:]Ō]<D,D ̞bK5Nsrsp3NhfgO9Y s19 ܌?p $:""b &KM$0MR$22".r". (!!!h!h!.&Ʀ6 @@ -32206,7 +31973,7 @@ kֈFW*@+]{=h{; JsS=Xe(
4@%lsK8K%aq R-+[~[ٗ]` 7b!]w`LߐJc6?@BŔxc!gY8?ڈ.0f(%#.(8[YcM:
?G4SuZԪ!?@k}w0̲>N]|3rxg/BleOk\g,UiQXBbGH!A}z|טd]Nլqz͢W ->X` N[5|1^˿|ǠחPפV;_k, wȓOOyU+#S۲'ڻ:\v@uFS26u`}D$*{6rOdeRוlEUm2güu5]L1Ż:/bJ$z=kY>Li6[Gzm}ȽVwgI$MbHYTd+^DXQ_Wuv4&"BҨo\2!a_f}8c,-X&ė&"CUqV{1'!rUw3І`6X] 2- +>X` N[5|1^˿|ǠחPפV;_k, wȓOOyU+#S۲'ڻ:\v@uFS26u`}D$*{6rOdeRוlEUm2güu5]L1Ż:/bJ$z=kY>Li6[Gzm}ȽVwgI$MbHYTd+^DXQ_Wuv4&"BҨo\2!a_f}8c,-X&ė&"CUqV{1'!rUw3І`6X] 2- endobj 2876 0 obj << /Type /Font @@ -32215,14 +31982,14 @@ endobj /FirstChar 11 /LastChar 126 /Widths 6718 0 R -/BaseFont /AQQDUI+CMR10 +/BaseFont /VXQJPH+CMR10 /FontDescriptor 2874 0 R >> endobj 2874 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /AQQDUI+CMR10 +/FontName /VXQJPH+CMR10 /ItalicAngle 0 /StemV 69 /XHeight 431 @@ -32235,25 +32002,26 @@ endobj [583 556 556 833 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 278 500 833 500 833 778 278 389 389 500 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 778 750 708 722 764 681 653 785 750 361 514 778 625 917 750 778 681 778 736 556 722 750 750 1028 750 750 611 278 0 278 500 0 278 500 556 444 556 444 306 500 556 278 306 528 278 833 556 500 556 528 392 394 389 556 528 722 528 528 444 500 1000 0 500 ] endobj 2867 0 obj << -/Length1 899 -/Length2 2415 +/Length1 916 +/Length2 2588 /Length3 532 -/Length 3046 +/Length 3227 /Filter /FlateDecode >> stream -xSWXSk\R(Ԑ QBIQ HBPTzS PDA""MEuqi9嬵^ -K< 58[5 -H0AS@= - -PT8D>u",Ws`<ېVF) &bAW1G6kjAAqlv8 -Fw$`
.(c*?f(~3.pAa08Gyr,S8BK@HPfpp,!Pi83 -S Ҳ hmڽ^U^F?;מouRZ1μDqaWGGU63ΧKU#-lɂ
+YU/-ۈ{G^+NOߤH$\W0]!\yµWc)o&S -4U-Jx4EN.Y+}p,>y-@.
&Yh*ccԀwbW }.\H͠wί<ַWc=X]VD^Vg7M6^?u!C<OB*bS"sWGnKߌ{p[qfa-"{<;Dvh}>vخ-4s4=nQԎ*N_lɖ
f@+D˷_llF͈<xTCy`2Y.6+ra:Uݜeq7Ǐ -j*o+/)[Dc=y0(^;`ce]Rw*-9k>)a[*@8#1xNv^ю|3%sAv"Vh&Uf{5@sHˮ73u|]J|j߲z -xdKEFR.-v
}RnYk4UoQ#cf@cL>)"'>MBHv5z}GVMfm
33g樵"Nol.Wmy?%sf[A٧l $G_P.MkkkZ\G3WRZ6>I{c,VLݘrϻ(Ra틃+GNIVT.%6<k+5~nW\B}TȈ<?%N.=oDwmnͥ':BNZ[+C+l4&xJȻZS%Ts\+jE \hfsӴ/g>Ds9l֭vHh97,~RE\ -˫¼M=q=<LiF$mc-G>1;n^:Pc[嚋DJݛUA.ێYP!as=O6EC-66=7IrK)ux0'vђg˓^-%EБ>h{xTJer&Fץw6!=Kړx´nVԝ#ynj ЋOڡ̛
rwAU'T0jn"rŇMH%ZpG~gGT$|!v|kWR1Ŋ6:'dIf?H'E+=um{-$<mGiQUw֍!,ڙ.Hʏ3G: -<v6$.]g?j/|&~x"?J^.x+llT7bC3bM&ܸm{س(YݶHnv~1CiFٗǟ&!MV;hy4͖ ڞ1̎XXi:);W-A♡0/ gW-&i2mʯx, <&Qh?LBendstream +xRy< 9!K]ccdϱ!13cc˾f/H"{Y!eeNFٳrĝӹ?~>=~',mN.!O>4=3k +T55pI@I!b]1d@FOH
+ca:xW@QX!DYbHFHWģ~AffM
kœ/P<r"a1}:Dp +Bat!^x$/\@ +fx~<L?g D/TQA" +e@N +pJJC]PCUgzy߀B4THo"ē^ih,} "9FH_nքP31>J0l|r(U"#Kn~8'.3MwWt!p%+!}xs_+liF +]யX3ZLw8>_ȳѿ0:yOUs֯j8ۈ +)<^E*S<)ILSAnl'>ywl6>ğ=Ōx0*b1ԸںݝlE>tЙdc7BU9ACaM} ҤC3pg>kf76_a,SxO.c5jlAbԚDoUG̤ 8Ӎy S[SNGK3nU@/%-Tugyb84^d9p0PTy8OG^1hmwՈ?RPk&谟O-:۫ +h +xZ~.XJv8g 6HeR]Dj|crԶ_:{k?t)Rq͆v`OrfOˍ^-sH6"ՠl=tK܁ͥA?&r-m>+~{Cfщvorؼ+u$xH
;}Rs|ڍ%HwtuVM۵heJryVPY=7*,y +yn=p3FtN);>Zce/0sŲmڸqWZ/T+"y1Z3tbHӭ+cCM;f|j>4Yg-ʁz/u,gvo*:W2?k{xHLo"VQVY3X^K-X~ur#@~+Otn0Hfˬޡ#&;<"#ݘ(>Sݱ|et
Lu>W6n:5^rA5wX=/H,W[xQno
R;?L_}LyBͰ~}M)R/}PNj9H04|'E9?VqZ^iy. Y(tUPn˫㹅ǟFqi\<OCmRS5^O&IB^gt䌡rYD^۸c]6<=~YV1ѦdO.&QuRL:kF2Uq[G
.!UqAm.w>ˍ>@*FY~y_y1\NGQd89LZOGcUZ`p,;w
cTcHYٽifNCQ"CF9Lͩca\(,y
w,%\o#n+v j8x8G2L
llmm.WgeKh<ii^̎2DgՇ$kBusL"ѧ.5KmCbzj1LZ3-Y8<&nh]2_\dob'T!porw#y8*\X*p[`-"eV72`+0{>_^SՐ7(GU@͑*9RY'+ԗ +>|I;wX>z$iv0HI\Nk4ןff>$";H% Ck?rwCqne|,ļ-˛8,詭C]$s,f<9|:RfubsZaT`5.W$cF6,WY{zh+1w7?ht,}g@NT#Hz59:9VǶ.zխՔ`L~'4p"{xR<֨g$lc\TI앃ηf'<U~6|_̥&ԐwT~3G0{%!K}CiCQ|~C
ymδH.&da#z3.k;+b.;<Q<X`E1`ocͨ,S7!KsnJ< d^qo;A#Wf!Fleoc"R-D?&Fh|^59l:Mh8ΗhnAX)oB3A*>P^{3u}C4d 껹.Ϛ)[l{Lh&Ρ#!v@apC endobj 2868 0 obj << /Type /Font @@ -32262,24 +32030,24 @@ endobj /FirstChar 48 /LastChar 121 /Widths 6719 0 R -/BaseFont /YAJWSM+CMR12 +/BaseFont /MPMHLE+CMR12 /FontDescriptor 2866 0 R >> endobj 2866 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /YAJWSM+CMR12 +/FontName /MPMHLE+CMR12 /ItalicAngle 0 /StemV 65 /XHeight 431 /FontBBox [-34 -251 988 750] /Flags 4 -/CharSet (/zero/one/two/three/J/l/s/t/u/y) +/CharSet (/zero/one/two/three/five/J/h/l/t/u/y) /FontFile 2867 0 R >> endobj 6719 0 obj -[490 490 490 490 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 503 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 272 0 0 0 0 0 0 386 381 544 0 0 0 517 ] +[490 490 490 490 0 490 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 503 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 544 0 0 0 272 0 0 0 0 0 0 0 381 544 0 0 0 517 ] endobj 2864 0 obj << /Length1 2124 @@ -32289,67 +32057,67 @@ endobj /Filter /FlateDecode >> stream -xUX\Ͷw
XpwܝwwoY<<w19j̆DA^T֙ ,,`f`v45tي:r. -#@%LO'@hlh5t0alh
P3:{0 -jB^]V0:x{#J75 )9 -B#+AcYڼ -MDZ#>d}焊)Z0%t&^2c" &uns=%]dU2G̜?"J_}6RLf$nĎ>-b.M["rEfBΥ=1Z{! w{gUٖdcoEb.bn璂+&) - -FiBPٔX[tVSPVfC-(GG\Dj3ܸzcQf04_P~?'gQ@9:j8 lPe
(Q%$}{lwY\Hfe,
ya4{2)_*Q1:GxSŏ0 #b%4eC%?*w qa!1~*yQg,|ErCvuW%5hxxxZ3Os*{;{xK4[k[%LX~~ϿR~h2~ǭlJHUAaqҨsj@>k)gsi/錥FQNDNx6ѯ$4:=<dFGX -HzzDNLJܓ}_BZr3Qg+5`z@x,9:w ]1z|~{ -3BoDQg* Ld"qkv宄j?ٺG 9n4Kh /ND41C=8qRIԄ2+t8,zԩ+[@3!w";et!4y8pbK1Fap+\1ki贆`8A|^A6Q^oz"GHΫK鳵~a
u+-v&&D8nJ%V:>hFNP0Fr~_~k!0'(%FO[~!?Kzh^0#Up/J pW!N -/gW]!;pRO -.Jgb4med;ȥ.ǽQDN;OCĖD%\qWL ?y^V%pnoKaj:
;U-xkTNd:B{VݒXaNv&dZѥP+(z~nO{qgf"mm̈*R - _ԟ~Bs_OqQ+%Њ
q8gbW6mL j=%V=9!AlN:#.J=TAP$jr?OrMHo]qk}lxmkRā@u٧MզAQ%)ruJaDžjsL`?ǥi&"xԘs`e1k
6kJ{'ڡ:zth=;o̜RF,ӕHA=6{>?nY[RTKҞ0AUy8ݘ[7]g3ɱX/WL}Q\Ai?2GQF
aM9imN~=aNP÷kT*qT7 -|Nsh|TSصnQO"p]Ut_ȻjyS3.U՞'-,9'\]V`TRkS0WR(y.%N~k;+*Fa~D.%wiTTi*sB0y /9\'gJ/Z -A}9Iֺ53mmf0,?%r;Kn9}wm2-D7H2!ɳz~<a\{LIBJ2V4 T/WLo
t|6M&&qX&7HSL/
ͭ8_"f}TK[Ss9av#Qf!ɿ;A (*Wb}gڇF(ǣ)$#)<ZSe"8xRUZ+%oD@UXI;$<ő(*B-n5`DC50i1Yo|`+b'^+R%Vʏc0CX襽;6\0UyQ+tQm6QqDz0^vkm- -%VjfYۙͯTpJg~ni -E8ߋh1R>.'*8F* 50Us?|`\L(I_UvՑcuO6sgS)=71z˙ʔ8GEڋiI/DLsGbT{Q=X)ėvȎg"QlcP:0þ^>T>%] 9atv7ckC)/4GZ<l'.i3Mm5@KU(m7Y[bQ6j«Cfoz:)lI"ЍmD2!L -hMAo~^bh,vME{kɧ43W\l)Z֣kb= -kd%>9Z',ýZx̆ޣ1L![
zzm
[>RC&')ʈ0+h5rʳ(̏ih&{Y?hҤ}a0Ffs칾kLJf*pȍX/Phdt,LN`A6R~:P߁eh8M/tSA1VʵDEF&xAͦiR-QσVͷ4xVl|dl$
]Eqd8&U9K>$
H']:-%iKhd>._{BkB -ac?2lT '*Lqߌ<Xp/ tu0HQۉYG -o6EbI;-mP+W*:1qTN,-6]Ű/ʱ%<R?.6}Ty"zp/<l&eU=Ükbi -BU+'AC*`۰~1]7kF!FYkr)uݳ<JBh 8hfc+ -PG - -ts=K2"d:0BV?i
iJ9nrǑ,.ckrXԇ5X[)FVej~b"kMvΰ@5LMA&% Ug%u¦gkV"/$EuZ/%ۘȹVz{-rH ], -1#Da3s]9%irV/p36$6Mck.AW*?aI-zh+g+OCGrڜ'd貃źD03WOĢBBk6M4շEѣ7O}tצW4Cl":Of=lO3xϋzpEϑE^كn4G/38,&Z.&҉_$x1pyU?fnI>o!jG+UxqiԂXGuiguZZ;Lnk!b[ѓ -h0?~:}!(cb(NDPrv7.{ΐ7ALaV<u*r}N*%Gi
-|倄MEQ+O";Ao<Mx -P#t?CTtMo{Y [O¬Ɔ ^H RP\[{^ Bݾ*ꅙ}?|`pRy^Ӿ!3dbEh/r7ph*(g"16_Pb^ -ʹD,,3meP67rIfv1D$4 )<]l62U!W!$G?)=Tl*df:hƪb3 k>!N.ϱF'/Ng5g P#6 -U23k^88JfNK^IOa`+s@?ksj1.s|F~#0*H:ydʙXq4c>}e5[e'fڲ(4z[ -~s<^]J\,5˦iBCwu;)_p`Buo -Qpid#[^րJ%_a)I@-9H7){(NԆQF;iե4%ԈY!Kx
'鬠K?j\]\(>2S.B6yA֘+ %KSchBpt*|ؘE&f>BnB௴p("mHg8;N]VOx|=;a5h>l֮ׄw=Q-N̈ieȌfnDxc,*dT<̵@-m<VzrEg~s];ɋk=p弄
ۭnY0/EHYcȦ -'E -66fOrm?z]l-Lf¤u38NJ&żN۩UV_1
4Ch1Ŝlܛy]a.pGC`"`lyX)N0 xyF}[o:35݃Q1w8\5P;Fyz֦eN*t>=x!n}}{B,ʋCN5YGd;c6Kg'8jz*DMķ -ad{!^e|Z>4)dym'Y`-C0V5<}kݒn@h4a -?XG-m[N{m<o@W`R1vЉYcqZxSQ
E>d=xIpIzH/El4[L8'LQ߆Ȯn%W6.ApzeK;Z`Ż?St`ĥכ -4{8M-\,P*nu|OohD,<J -ޭ Tzt PwG_6TT׃r_nf|7kKvyk1b2̏l0. eP{/]WىC۵Au Y6Djr +xUX\Ͷw
XpݽqwܝwwoY<<w19j̆DA^(fgL
UV`f030SP;
-lE +ttI@ +(g2C.bm-gh]+sl] +/FqMMEY.+Z:x{;@ok:Q[c;[Ц` +gPI8à)M-@' h4ogdR+7Y +MDZ#>d} + +-Ңt)&^2c" &uns=%]dU2G̜?"J_}6RLf$7bGO +ptn1^z֦VR"e!RWKнtȽvDlK17"W1[sIݕbsY4U(JYcpll +Uh룣~?"bn\mrg/(`3(m5EK6cDC,ʵmClI[]*qK0h*}&MLx +c8tBqLT#>aDqĖơlAe.:.:$&18Ox!/*`WT?-?dGkQGxUQ2Q5;4s[<)H@3U/-q4e9(U뇖/(w@D ++FS˕Y0N)>LxIg,O~0r"58wӭϵ~%`!;7> +JWD|ϸ<Nֳ}#rbR䞌sՒ:0]y í; +AwbUL}9U4 +فzRpP:cic7,'A.Uw1>"r:y|"d$0,i+WDͯZdj@w"/s_~]:Siީj\hF^K7t"'7בVǰSꖬP
w3a%;4ג.=(\As~ +ދK>3lkcFVя-N2'@4LZ
EȐb!hO2j0E7!.sȽ^wG csI͡,YWWMn@HIyY귩/4GQa؏u+\pX{s+vencbQ,Q47
g[tvQ> +"/Py|hEzڄ[쳭
ec\l_S]\/,ϔ2&>o6
*HkWvr槆Y?.Lj HWaJfY?.M 68[XclpyjwN{ðIa[#l<]cs78%E$ hT%a3ٍuӵ{;;?ݮrɄާxsZ(Ӣu(ʨ3>4i/@ +??FU+KE;:/H2
<*s,ҙur¯%`a)ZܗDlKZ3f:BhS|-^ ѝهxW/-`!ANՓ.@íu cJT▱N0lNyPOagibUmr'Gu* &eUQmhny`)7룺U_j=ؚ { +VW77N ɌDQ<C>4Bq8M!a<u?8GXN2*q\>bZ.il}#zϴPa)EC2ؙs +TbqS9/fnjj쑭&:tkwY\v$HF$c2ɤvVu.vbGTw<V0A|J3U} Vyze=Z ݣ+L9ZBuia;l8=*St_r*ՠ'ְ#:n2zcx8& +['ר<옆f7mq́V-M*<qkvcnlvJ?Ƥd@(mDnb~9.BT%;/ܧc)grr5dȵ:[ׁL,CkI'nzǦ+UUW%*^7j47 h6#H$;G=S[7HDUv|Z!ku^4&v5<đWTdDb/M_7#Z#K8wtd-ΰO +~4 + 5^5uF!҉Re)w8 +q UiY[TsfM7eeb*iw wg\Ƶ-^ +wrdD=7Sx\79=7$p6r8;\K;=2GnG0&q8Avb֑|MXΣpKE۸=J=N$BE\2UF_#KMW1rl !.TďK
}s,U'bK4O>+JYyC0gŚX@9`
QRЅ*uÝc-5=2%jyL+esGM8-=MkM$I:GB%.Sk kjhnmXdpS5{#,5 d:YVFVz + +OFXR=Yn6 F2*`=?ߓ"x$踐*IQ`(zfJԔ5]M@pɬQio6yOzzs$vg~#5EQL֟KӉtb)D%{ a\}[R`ϫ۷0rfJ#^Fepk QݤyZ/`YV/$0&Z} i1V$8|)̎}<EkyN_v-0^a b "F9=gț gWJ+_Eaj>'Ғ|
>r@BĨ'Ո7&`<|`A![Zkཬ-'aVcFEry/)D@H-νin_R L
>>0ly^Ӿ!3dbEh/r7ph*(g"16_Pb^ +ʹD,,3meP67rIyl3
0c+$HiJ;+o^s_wqT\ч쒌NSeh +e/wOԋkrnxd8m(<&X8՜@y4`}AN +c Dx<^3QzkXMЭYDfL+??;ķC^=,TL"ok6iG{0#Wsgy枑~C:/r
`DJ\!y6]rC2?~Lȃ˨[\K_`4K8ʩ#]D,-4\ԕOPY~<Sd@ +ȋ8H)X<VM~^bʛ]LjeGa\U3VupM$3h,|j]ˤOe}Q=GirCy2!ijMӄ p%!vR ߨb.T*D5{åly[F+-H$"yߤ읪8AF6z5O.(F|6 +Yk5=8Mg_ +!VB2G镙<vyMҷ٨82
\$,YBC3̞~[mP&Ƽ-'$6797U9rzu$GD)oG:qҶz{X9 #Aa?&v G4LجMfoq"]_UfF]N.sFf5us&XScaW!=$aUjI'o㉴*;Dv/:++o7N^\y+%onet_ʇy(:%DJ4ED6U8.R?m崑>1{Zk;d˝8n +8+Tx;VlVY~P6xdxѺdsqo2mvq8
Ii2xB`)bz8#{$㉮ +NO:oԴ<ՌԈ0Dpqö|@ͧђZ9A]Go wv[#&_(/I:-vgvHuk ^fں,J//Rnkx<8Y.F6 ߖ>Ɨ+D-=;sxg
l&j3κG`0r79S=.+X:NLs!x_ NZ[kM/FGuKNOd[+`NۣSmM; ?FzNjCfaZ"[(N|+87<?>ӂěj(a$#<HNMDz)e#֧㘞G +r0YTf/T]hD,<J +ޭ Tzt PwG_6TT׃r_nf|7kKvyk1b2̎l0. eP{/]WىC۵Au Y6Djr {YCRUR؝|(Cj` ?4MRŇnyN;y\R/9^j4-Op0=VMK8YJ`cx(+:5{X*g1F߄fF~]P*r.t -ˉx -?lu<=İ -T/7r6$K!u'Z|_>KRdؚ~ -gܸu|a7p]~1H8.PwhËxp~XmJWNCMyeyd,JI,4{Lqxp?vxx -.<RFZ|ي -r>]1 -Znt5D'>灾Teni3p.ijRri*MxsPn11VF-vְEdז&nkW+F#YyU~r6[5 sb{v/f(ɁRI0*wKcnO$QetL-&jXnM}<ǿnc.)͎!G8l^nn;zugmzk`0Z$e"Ү4jwv)]8Fkǁzw6کS l~%`a9tM[;zYQFլ+T;ތnju91{34UD) nc7Voܧ:H6Z8㧗$jNW5h|MS9> -ag-#+?SEfg]e< -^}쵾BC@%eHL^$qħ*L10.
+eRs9Q^P%(y0pL̚8!v&Ljڧ$jekz8,@w1R#iC|wFqvB650[mD7?2߯"} ue'b2_eݑѲ'╟= -]ǷV
.%0;_6)w 4:zB!Ӊ/} -SHc.|#9a0p=JH
J}IW"u\5{yd
,oO(;Hb^OCl* -yԭ**zX!
&IXc2LS~_\yjt7K\&fJd[>ƘoСQL3qKI͞|bme]B/v͜蒂Uk3Pk
CJnESdWOfC{90&+ؔ?ӥ`Oے6l3jĄmuN^bB"ڄт -yAVJs\ywԬZ8<%lVHLoƘ&<8fiէ\m, -&\S(rcIN4"l=t?ZS -6LK7sfaH֝YTJ59aCA7,PX0&M0?ߏoH!]<^'y`Ur
RxEIS7a^$P(mYKi0O }S#Tupn@TK8nʠPՓq;9%(I4Eie9* b
R4&A_{~u|{0w+*vn] H܉ 0G`pw>)!sYxp o#zqϩpÿM3ftiMÜ)Ol`f0$6d*`LbXyuhZTlj[
f)1tWRՖ4ws-8n(GO>0$Z+B7y춐Ca^vԱVR:|dH{<_I~E؍ݳme+,OJٖ6qU@rPhɹ J-Se$^N9>.Y⮻)]eAd&sC@GxW0;iu]IC<Hliۆcg3{-zo(Fn~fAҟ*hkm-WcG>Zn͊|x¿_WSҰc+ZFf3$?,oME.$g(U_\Y&!RT -
n
lVqMK=nD ^c߹v/~`w'cJk! dfh=N{\1h2S2.ɾ&:3Dژ3F!QԤyG)$yw+KDWE -]WH -pG
B -S9LL-8 d`YOZaR#ZVoʔSLW3yϵ"Mk3?Ĺ%Aδ0tXSmӨ,[nU58\o-j2jZhB9n&{IWSO\[^>y)*yqŎx6RHmwbB[SHjfQtG*bxIJݘBW?h.To7xmD`,6!Ί^yFl(LW0 Y5;J\êo3s-
WLKs -L$#']98f4d#:.uXߠiCdԮ-DC-\c/_tҽxZe& dE;vYLU|Ptr8kUҒ*~ayu5@X3:9ׯ-_\`*ԇGex7:h~{,JVKZ'0
]F@32 چx MqsQ|Ҋs:!O15:@藵i?Q2L%{29xfP]Cһ6u]U0v|5sW,d8R?{iA#t#ȁyg|uw"<+pɊS :".|x=Pc|7~6Gq[IM.hI -cБiJyϋngLX%kRC$1A!y21b@Xslv(Q +ˉx +&||B
TF63^jGbFGx(Mڇ+2:a|iˣ-7߄yQf-92<{ķfIB{G +V
eեC9]š'Pͣߔ[DGa\o >Dhȫ<i8#m4.i!>I?UQܶX[\Fװ"ٟ8<_ŊD[4,\mysbӤZO60-U},.\&ZP5jlb+jwO,(^E +yyjas>OICfCFn +tH<v d~r~U6>p9+9ncz!VG)vHje\a:(ݠI}3zM"cY _Ni#Y ++[P"?~? V9DY">BZqpmYC<X2{CsT_Uύ,=l*n'+|۔ccΏ܈fl(ň,rKTU!V)F+?khyO!KR2S<E>QPɰ)qMQh !q!r2RėoH*%N^[z_HqVلtk9RJ3}(VsQ\AGAkwr!`X&O{JQt<']`tb!%^ip#6c<I!FNQÆ`3)Y8U/|K>gI"_w[3ҏW~Y?/\@>eʠNmxΏ>Mis)>oyI8I9?s4ǎ3D&*$5$BVzHHj7+,N7~0X; 'zX{.6!OꞿM1ʢyJċeZ`T^?q.σ`<<M^j +ag-#+?SEfg]e< +Zކ;h2(34KˢTQ"6B̈́e7
OڛLi[yᆌEWYW}tiT)U7<TIv9&%a%YjΔb;0*r%.;cIY'. _~qф);TMDR5lM<|Q?;o(gH{A +H +-?d酑^r⢧B9L!krV6r3^ICHHM gUc r*Z]R)L%;]jصfli
tCfɛBUJUm?OLH(SجiֶG#0#X;OuD q5/!3 +SHc.|#9a0p=JMI
J}IW"u\5{yd
,oO(;HbVOCl* +yԭ**zX!
&IXc2L9}?a<`5ΌwknPgM`.`trW3v%\vmY-acL7PqM)&~㸥I$fOJ>.`fNtIX +U*Bk
CJnESdWOfC{90&+TٟReAmI65b6TNޜ:' +X!ZcmhAtv<eikJs\ywԬZ8<%lVHLoƘ&<8
'!FVr,1g5%Yԣ~b@fMy [fp{GTu'tcdIcn8?v0,05IJix71V +;O"U0frlrD)LrdaO͏wjMidvu{/o榡VߞUe|}%< lu|{ `؝:-Pܿ}7]1.3vNCYYH(]*'>E,ލ%9WX$~;qίcujo :57at + xɟx恭FWVR)؏6 K%MބypCM8mgd/,%@& +L\dZP՝U:0YɁpݔA.'vrJQx{E>&IMH5Kԛh}gpx'F +ޭڹOvaO?'`"p'J& +#vd`wU&INPib}g/ˬO
)*yO+&7n +?R1Tkwccd;WRMo0黓1%tε23h}'=r i&pIl4f)U@^}Ld_S}B9mL|(cjҼ#<;N+"L.+$Qo]!LL-8 d¦k5-G㷵)20@LWSyϵ"Mk3?Ĺ%Aδ0tXSmӨ[nU58\oj2jZhB9n&{IWSO\[^>y)*yqŎx6RHmwbB[SHjfQtG*bxIJݘBW?h.To7xmD`,6!Ί^yFl(LW0 Y5;J\êo3s-
WLK3 +L$#']98f4d#:.uXߠiCLdԮDC\c/_tҽxZe& dE;vYπ*yW(`i:uQjٵ*iIxAn]Ѱ}W|a\TDі/.0FPãmq7:hv{,JVKZ'0
]F@32 چx MqsQ|Ҋs:!O15:@藵i?Q2L%{29xP]Cһ6u]U0v|5sWd8R?{iA#t#ȁyg|uw@pMiyV +S͝$(kWBqP=%BSl'7-Q1A<JiY~uY{{qzlr@Gc9q҂<?'0:::Z&Zendstream endobj 2865 0 obj << /Type /Font @@ -32358,14 +32126,14 @@ endobj /FirstChar 11 /LastChar 123 /Widths 6720 0 R -/BaseFont /TPEVBU+CMSSBX10 +/BaseFont /GYYQTM+CMSSBX10 /FontDescriptor 2863 0 R >> endobj 2863 0 obj << /Ascent 694 /CapHeight 694 /Descent -194 -/FontName /TPEVBU+CMSSBX10 +/FontName /GYYQTM+CMSSBX10 /ItalicAngle 0 /StemV 136 /XHeight 458 @@ -38024,7 +37792,7 @@ endobj /Count -3 >> endobj 6736 0 obj << -/Names [(AccessControls) 2959 0 R (AdvancedNetworkManagement) 3024 0 R (Appendixes) 6519 0 R (Backup) 3030 0 R (CUPS-printing) 3021 0 R (ClientConfig) 2955 0 R (DNSDHCP) 3065 0 R (Doc-Start) 2862 0 R (FastStart) 2949 0 R (Further-Resources) 3066 0 R (InterdomainTrusts) 3018 0 R (IntroSMB) 2947 0 R (Item.1) 3946 0 R (Item.10) 4079 0 R (Item.100) 5705 0 R (Item.101) 5706 0 R (Item.102) 5707 0 R (Item.103) 5708 0 R (Item.104) 5709 0 R (Item.105) 5710 0 R (Item.106) 5711 0 R (Item.107) 5712 0 R (Item.108) 5713 0 R (Item.109) 5978 0 R (Item.11) 4080 0 R (Item.110) 5979 0 R (Item.111) 5980 0 R (Item.112) 5981 0 R (Item.113) 5992 0 R (Item.114) 5993 0 R (Item.115) 5994 0 R (Item.116) 5995 0 R (Item.117) 5996 0 R (Item.118) 5997 0 R (Item.119) 6002 0 R (Item.12) 4157 0 R (Item.120) 6003 0 R (Item.121) 6004 0 R (Item.122) 6028 0 R (Item.123) 6033 0 R (Item.124) 6034 0 R (Item.125) 6035 0 R (Item.126) 6036 0 R (Item.127) 6037 0 R (Item.128) 6038 0 R (Item.129) 6046 0 R (Item.13) 4158 0 R (Item.130) 6047 0 R (Item.131) 6048 0 R (Item.132) 6049 0 R (Item.133) 6050 0 R (Item.134) 6051 0 R (Item.135) 6052 0 R (Item.136) 6053 0 R (Item.137) 6054 0 R (Item.138) 6055 0 R (Item.139) 6064 0 R (Item.14) 4159 0 R (Item.140) 6065 0 R (Item.141) 6066 0 R (Item.142) 6067 0 R (Item.143) 6068 0 R (Item.144) 6069 0 R (Item.145) 6070 0 R (Item.146) 6071 0 R (Item.147) 6072 0 R (Item.148) 6073 0 R (Item.149) 6074 0 R (Item.15) 4160 0 R (Item.150) 6075 0 R (Item.151) 6076 0 R (Item.152) 6077 0 R (Item.153) 6078 0 R (Item.154) 6079 0 R (Item.155) 6080 0 R (Item.156) 6088 0 R (Item.157) 6089 0 R (Item.158) 6090 0 R (Item.159) 6091 0 R (Item.16) 4161 0 R (Item.160) 6092 0 R (Item.161) 6093 0 R (Item.162) 6094 0 R (Item.163) 6117 0 R (Item.164) 6118 0 R (Item.165) 6119 0 R (Item.166) 6120 0 R (Item.167) 6348 0 R (Item.168) 6349 0 R (Item.169) 6350 0 R (Item.17) 4162 0 R (Item.170) 6351 0 R (Item.171) 6352 0 R (Item.172) 6353 0 R (Item.173) 6354 0 R (Item.174) 6355 0 R (Item.175) 6356 0 R (Item.176) 6357 0 R (Item.177) 6358 0 R (Item.178) 6359 0 R (Item.179) 6360 0 R (Item.18) 4242 0 R (Item.180) 6361 0 R (Item.181) 6362 0 R (Item.182) 6363 0 R (Item.183) 6364 0 R (Item.184) 6365 0 R (Item.185) 6366 0 R (Item.186) 6393 0 R (Item.187) 6394 0 R (Item.188) 6395 0 R (Item.189) 6396 0 R (Item.19) 4243 0 R (Item.190) 6432 0 R (Item.191) 6433 0 R (Item.192) 6434 0 R (Item.193) 6439 0 R (Item.194) 6440 0 R (Item.195) 6445 0 R (Item.196) 6446 0 R (Item.197) 6447 0 R (Item.198) 6448 0 R (Item.199) 6449 0 R (Item.2) 3947 0 R (Item.20) 4245 0 R (Item.200) 6450 0 R (Item.201) 6451 0 R (Item.202) 6452 0 R (Item.203) 6453 0 R (Item.204) 6454 0 R (Item.205) 6455 0 R (Item.206) 6456 0 R (Item.207) 6462 0 R (Item.208) 6463 0 R (Item.209) 6464 0 R (Item.21) 4246 0 R (Item.210) 6531 0 R (Item.211) 6532 0 R (Item.212) 6533 0 R (Item.213) 6538 0 R (Item.214) 6539 0 R (Item.22) 4284 0 R (Item.23) 4285 0 R (Item.24) 4286 0 R (Item.25) 4287 0 R (Item.26) 4288 0 R (Item.27) 4289 0 R (Item.28) 4314 0 R (Item.29) 4315 0 R (Item.3) 3962 0 R (Item.30) 4316 0 R (Item.31) 4317 0 R (Item.32) 4380 0 R (Item.33) 4381 0 R (Item.34) 4382 0 R (Item.35) 4548 0 R (Item.36) 4549 0 R (Item.37) 4550 0 R (Item.38) 4627 0 R (Item.39) 4628 0 R (Item.4) 3963 0 R (Item.40) 4634 0 R (Item.41) 4635 0 R (Item.42) 4636 0 R (Item.43) 4670 0 R (Item.44) 4671 0 R (Item.45) 4676 0 R (Item.46) 4677 0 R (Item.47) 4678 0 R (Item.48) 4679 0 R (Item.49) 4847 0 R (Item.5) 4074 0 R (Item.50) 4848 0 R (Item.51) 4849 0 R (Item.52) 4850 0 R (Item.53) 4851 0 R (Item.54) 4852 0 R (Item.55) 4853 0 R (Item.56) 4957 0 R (Item.57) 4958 0 R (Item.58) 4959 0 R (Item.59) 4960 0 R (Item.6) 4075 0 R (Item.60) 5023 0 R (Item.61) 5024 0 R (Item.62) 5025 0 R (Item.63) 5026 0 R (Item.64) 5027 0 R (Item.65) 5028 0 R (Item.66) 5029 0 R (Item.67) 5030 0 R (Item.68) 5031 0 R (Item.69) 5032 0 R (Item.7) 4076 0 R (Item.70) 5033 0 R (Item.71) 5034 0 R (Item.72) 5035 0 R (Item.73) 5036 0 R (Item.74) 5037 0 R (Item.75) 5084 0 R (Item.76) 5085 0 R (Item.77) 5086 0 R (Item.78) 5393 0 R (Item.79) 5394 0 R (Item.8) 4077 0 R (Item.80) 5395 0 R (Item.81) 5396 0 R (Item.82) 5414 0 R (Item.83) 5415 0 R (Item.84) 5416 0 R (Item.85) 5417 0 R (Item.86) 5418 0 R (Item.87) 5424 0 R (Item.88) 5425 0 R (Item.89) 5426 0 R (Item.9) 4078 0 R (Item.90) 5440 0 R (Item.91) 5441 0 R (Item.92) 5442 0 R (Item.93) 5443 0 R (Item.94) 5699 0 R (Item.95) 5700 0 R (Item.96) 5701 0 R (Item.97) 5702 0 R (Item.98) 5703 0 R (Item.99) 5704 0 R (NT4Migration) 3033 0 R (NetworkBrowsing) 2956 0 R (Other-Clients) 3063 0 R (PolicyMgmt) 3025 0 R (Portability) 3062 0 R (ProfileMgmt) 3026 0 R (SWAT) 3034 0 R (SambaHA) 3031 0 R (ServerType) 2950 0 R (StandAloneServer) 2954 0 R (VFS) 3022 0 R (XMLpassdb) 4427 0 R (ads-create-machine-account) 4212 0 R (ads-member) 3985 0 R (ads-test-server) 4214 0 R (ads-test-smbclient) 4215 0 R (browse-force-master) 4308 0 R (bugreport) 3060 0 R (chapter*.1) 3071 0 R (chapter.1) 10 0 R (chapter.10) 458 0 R (chapter.11) 582 0 R (chapter.12) 722 0 R (chapter.13) 762 0 R (chapter.14) 870 0 R (chapter.15) 966 0 R (chapter.16) 1022 0 R (chapter.17) 1066 0 R (chapter.18) 1078 0 R (chapter.19) 1326 0 R (chapter.2) 38 0 R (chapter.20) 1870 0 R (chapter.21) 1922 0 R (chapter.22) 2026 0 R (chapter.23) 2058 0 R (chapter.24) 2118 0 R (chapter.25) 2234 0 R (chapter.26) 2302 0 R (chapter.27) 2374 0 R (chapter.28) 2398 0 R (chapter.29) 2410 0 R (chapter.3) 90 0 R (chapter.30) 2422 0 R (chapter.31) 2438 0 R (chapter.32) 2486 0 R (chapter.33) 2538 0 R (chapter.34) 2558 0 R (chapter.35) 2582 0 R (chapter.36) 2614 0 R (chapter.37) 2678 0 R (chapter.38) 2718 0 R (chapter.39) 2786 0 R (chapter.4) 102 0 R (chapter.40) 2834 0 R (chapter.41) 2842 0 R (chapter.5) 182 0 R (chapter.6) 262 0 R (chapter.7) 322 0 R (chapter.8) 418 0 R (chapter.9) 446 0 R (compiling) 3061 0 R (diagnosis) 3035 0 R (domain-member) 2953 0 R (domain-member-server) 4175 0 R (example.12.3.1) 4558 0 R (example.13.2.1) 4599 0 R (figure.19.1) 5172 0 R (figure.19.10) 5742 0 R (figure.19.11) 5750 0 R (figure.19.12) 5759 0 R (figure.19.13) 5767 0 R (figure.19.14) 5775 0 R (figure.19.15) 5782 0 R (figure.19.2) 5182 0 R (figure.19.3) 5192 0 R (figure.19.4) 5236 0 R (figure.19.5) 5246 0 R (figure.19.6) 5256 0 R (figure.19.7) 5266 0 R (figure.19.8) 5726 0 R (figure.19.9) 5734 0 R (groupmapping) 2958 0 R (id2807070) 3863 0 R (id2807281) 3864 0 R (id2807435) 3870 0 R (id2807504) 3877 0 R (id2807592) 3880 0 R (id2807665) 3887 0 R (id2808200) 3927 0 R (id2808325) 3892 0 R (id2808366) 3895 0 R (id2808403) 3896 0 R (id2808498) 3898 0 R (id2808553) 3903 0 R (id2808597) 3906 0 R (id2808647) 3907 0 R (id2808748) 3908 0 R (id2808811) 3909 0 R (id2808845) 3916 0 R (id2808858) 3917 0 R (id2809073) 3922 0 R (id2810224) 3938 0 R (id2810319) 3939 0 R (id2810403) 3944 0 R (id2810518) 3945 0 R (id2810612) 3952 0 R (id2810652) 3953 0 R (id2810731) 3954 0 R (id2810773) 3955 0 R (id2810795) 3956 0 R (id2811025) 3972 0 R (id2811055) 3980 0 R (id2811112) 3983 0 R (id2811268) 3993 0 R (id2811336) 3994 0 R (id2811513) 3999 0 R (id2811541) 4000 0 R (id2811574) 4005 0 R (id2811602) 4006 0 R (id2811636) 4008 0 R (id2813443) 4013 0 R (id2813747) 4026 0 R (id2813762) 4027 0 R (id2813974) 4033 0 R (id2814294) 4049 0 R (id2814593) 4059 0 R (id2814615) 4060 0 R (id2814630) 4061 0 R (id2814663) 4062 0 R (id2814683) 4067 0 R (id2814718) 4068 0 R (id2814956) 4081 0 R (id2815064) 4086 0 R (id2815072) 4087 0 R (id2815110) 4088 0 R (id2815159) 4089 0 R (id2815230) 4094 0 R (id2815293) 4095 0 R (id2815320) 4096 0 R (id2817486) 4102 0 R (id2817659) 4108 0 R (id2817687) 4109 0 R (id2817836) 4114 0 R (id2817908) 4116 0 R (id2817929) 4117 0 R (id2817955) 4123 0 R (id2818000) 4124 0 R (id2818102) 4125 0 R (id2818163) 4130 0 R (id2818177) 4131 0 R (id2818208) 4132 0 R (id2818241) 4133 0 R (id2818285) 4138 0 R (id2819355) 4143 0 R (id2819470) 4144 0 R (id2819646) 4149 0 R (id2819898) 4156 0 R (id2820094) 4168 0 R (id2820157) 4170 0 R (id2820170) 4171 0 R (id2820236) 4172 0 R (id2820277) 4173 0 R (id2820359) 4181 0 R (id2820370) 4182 0 R (id2820741) 4193 0 R (id2820883) 4202 0 R (id2820966) 4203 0 R (id2821176) 4213 0 R (id2821329) 4220 0 R (id2821351) 4221 0 R (id2821376) 4222 0 R (id2821408) 4223 0 R (id2823423) 4256 0 R (id2823762) 4233 0 R (id2823959) 4234 0 R (id2824031) 4239 0 R (id2824046) 4240 0 R (id2824096) 4241 0 R (id2824309) 4251 0 R (id2825015) 4267 0 R (id2825095) 4272 0 R (id2825205) 4277 0 R (id2825221) 4278 0 R (id2825384) 4279 0 R (id2825515) 4290 0 R (id2825651) 4291 0 R (id2825777) 4296 0 R (id2825999) 4301 0 R (id2826268) 4313 0 R (id2826424) 4318 0 R (id2826442) 4319 0 R (id2826470) 4320 0 R (id2826580) 4325 0 R (id2826640) 4326 0 R (id2826799) 4332 0 R (id2826998) 4337 0 R (id2827023) 4338 0 R (id2827107) 4339 0 R (id2827121) 4344 0 R (id2827188) 4345 0 R (id2827325) 4351 0 R (id2827372) 4352 0 R (id2827479) 4357 0 R (id2827558) 4358 0 R (id2827608) 4363 0 R (id2827725) 4368 0 R (id2827840) 4370 0 R (id2827939) 4376 0 R (id2828039) 4378 0 R (id2828178) 4387 0 R (id2828193) 4388 0 R (id2828222) 4389 0 R (id2831766) 4395 0 R (id2832094) 4400 0 R (id2832158) 4405 0 R (id2832321) 4410 0 R (id2832376) 4411 0 R (id2832412) 4412 0 R (id2832467) 4417 0 R (id2832499) 4418 0 R (id2832764) 4419 0 R (id2832916) 4425 0 R (id2832952) 4432 0 R (id2832992) 4433 0 R (id2833098) 4435 0 R (id2833126) 4436 0 R (id2833278) 4448 0 R (id2833304) 4450 0 R (id2833411) 4456 0 R (id2833599) 4461 0 R (id2833728) 4466 0 R (id2833926) 4481 0 R (id2833962) 4487 0 R (id2834099) 4489 0 R (id2834117) 4523 0 R (id2834466) 4495 0 R (id2834528) 4496 0 R (id2834642) 4502 0 R (id2834662) 4503 0 R (id2834726) 4504 0 R (id2834803) 4530 0 R (id2834928) 4536 0 R (id2835308) 4509 0 R (id2835338) 4510 0 R (id2835447) 4511 0 R (id2835454) 4512 0 R (id2835469) 4513 0 R (id2835530) 4518 0 R (id2841728) 4573 0 R (id2841765) 4578 0 R (id2841784) 4579 0 R (id2842040) 4587 0 R (id2842061) 4588 0 R (id2842136) 4590 0 R (id2842274) 4600 0 R (id2842352) 4601 0 R (id2842907) 4542 0 R (id2843008) 4543 0 R (id2843199) 4551 0 R (id2843264) 4556 0 R (id2843278) 4557 0 R (id2843301) 4559 0 R (id2843346) 4560 0 R (id2843438) 4565 0 R (id2843454) 4566 0 R (id2843515) 4567 0 R (id2843532) 4602 0 R (id2843592) 4608 0 R (id2843803) 4603 0 R (id2843824) 4617 0 R (id2844048) 4610 0 R (id2844072) 4624 0 R (id2844264) 4611 0 R (id2844336) 4619 0 R (id2844350) 4626 0 R (id2844432) 4629 0 R (id2844635) 4637 0 R (id2844643) 4638 0 R (id2844681) 4643 0 R (id2844760) 4644 0 R (id2844882) 4645 0 R (id2844974) 4650 0 R (id2845065) 4651 0 R (id2845110) 4652 0 R (id2845262) 4657 0 R (id2845592) 4667 0 R (id2845668) 4668 0 R (id2845682) 4669 0 R (id2846062) 4684 0 R (id2849674) 4689 0 R (id2849729) 4690 0 R (id2849861) 4695 0 R (id2850152) 4705 0 R (id2850177) 4706 0 R (id2850206) 4707 0 R (id2850232) 4708 0 R (id2850266) 4709 0 R (id2850287) 4714 0 R (id2850328) 4715 0 R (id2850406) 4716 0 R (id2850449) 4717 0 R (id2850507) 4722 0 R (id2850616) 4727 0 R (id2850630) 4728 0 R (id2850693) 4729 0 R (id2850877) 4734 0 R (id2851107) 4744 0 R (id2851134) 4745 0 R (id2851214) 4750 0 R (id2851244) 4751 0 R (id2851318) 4756 0 R (id2851348) 4757 0 R (id2853401) 4769 0 R (id2853434) 4770 0 R (id2853508) 4771 0 R (id2853528) 4772 0 R (id2853598) 4777 0 R (id2853650) 4778 0 R (id2853702) 4779 0 R (id2853758) 4784 0 R (id2853820) 4785 0 R (id2853860) 4791 0 R (id2853885) 4793 0 R (id2853903) 4794 0 R (id2853928) 4795 0 R (id2854737) 4826 0 R (id2854834) 4800 0 R (id2854863) 4801 0 R (id2854947) 4806 0 R (id2854959) 4807 0 R (id2855044) 4808 0 R (id2855080) 4809 0 R (id2855108) 4810 0 R (id2855248) 4815 0 R (id2855381) 4820 0 R (id2855395) 4821 0 R (id2855980) 4840 0 R (id2856048) 4841 0 R (id2856085) 4846 0 R (id2856156) 4854 0 R (id2856389) 4835 0 R (id2857074) 4855 0 R (id2857404) 4860 0 R (id2857512) 4861 0 R (id2857605) 4866 0 R (id2857674) 4867 0 R (id2857763) 4872 0 R (id2858070) 4883 0 R (id2858173) 4896 0 R (id2858187) 4897 0 R (id2858569) 4902 0 R (id2858898) 4907 0 R (id2859119) 4908 0 R (id2859169) 4914 0 R (id2859220) 4915 0 R (id2859695) 4920 0 R (id2859974) 4925 0 R (id2860139) 4928 0 R (id2860291) 4933 0 R (id2860404) 4934 0 R (id2860475) 4939 0 R (id2860706) 4944 0 R (id2860866) 4950 0 R (id2860961) 4951 0 R (id2861145) 4956 0 R (id2861254) 4961 0 R (id2861582) 4970 0 R (id2861734) 4971 0 R (id2861970) 4976 0 R (id2862131) 4981 0 R (id2862231) 4987 0 R (id2862399) 4992 0 R (id2862603) 4993 0 R (id2862714) 4998 0 R (id2862866) 5003 0 R (id2862886) 5004 0 R (id2863084) 5009 0 R (id2863374) 5014 0 R (id2863469) 5015 0 R (id2863610) 5021 0 R (id2863644) 5022 0 R (id2864080) 5042 0 R (id2864383) 5051 0 R (id2864626) 5052 0 R (id2864725) 5057 0 R (id2865070) 5071 0 R (id2865141) 5072 0 R (id2865163) 5073 0 R (id2865209) 5076 0 R (id2865250) 5081 0 R (id2865269) 5082 0 R (id2865293) 5083 0 R (id2865446) 5091 0 R (id2865775) 5097 0 R (id2865820) 5098 0 R (id2865990) 5104 0 R (id2866004) 5105 0 R (id2866017) 5106 0 R (id2866050) 5107 0 R (id2875244) 5113 0 R (id2875251) 5114 0 R (id2875304) 5116 0 R (id2875358) 5118 0 R (id2875438) 5125 0 R (id2875581) 5129 0 R (id2875663) 5134 0 R (id2875781) 5139 0 R (id2875802) 5140 0 R (id2875828) 5141 0 R (id2875865) 5146 0 R (id2875924) 5147 0 R (id2876084) 5152 0 R (id2876178) 5153 0 R (id2876253) 5160 0 R (id2876298) 5161 0 R (id2876363) 5167 0 R (id2876398) 5162 0 R (id2876486) 5179 0 R (id2876534) 5180 0 R (id2876584) 5189 0 R (id2876614) 5190 0 R (id2876696) 5198 0 R (id2876766) 5203 0 R (id2876856) 5206 0 R (id2876878) 5207 0 R (id2877018) 5216 0 R (id2877205) 5221 0 R (id2877322) 5226 0 R (id2877492) 5227 0 R (id2877542) 5234 0 R (id2877578) 5237 0 R (id2877607) 5244 0 R (id2877680) 5247 0 R (id2877710) 5254 0 R (id2877763) 5264 0 R (id2877837) 5267 0 R (id2877857) 5724 0 R (id2877893) 5268 0 R (id2877942) 5732 0 R (id2877977) 5275 0 R (id2878289) 5280 0 R (id2878402) 5285 0 R (id2878417) 5286 0 R (id2878470) 5287 0 R (id2878524) 5288 0 R (id2878740) 5298 0 R (id2878968) 5299 0 R (id2879019) 5740 0 R (id2879124) 5307 0 R (id2879355) 5312 0 R (id2879483) 5324 0 R (id2879559) 5327 0 R (id2879574) 5328 0 R (id2879613) 5329 0 R (id2879649) 5748 0 R (id2879685) 5336 0 R (id2879707) 5757 0 R (id2879747) 5337 0 R (id2879768) 5338 0 R (id2879897) 5765 0 R (id2879932) 5339 0 R (id2880008) 5344 0 R (id2880063) 5346 0 R (id2880104) 5347 0 R (id2880170) 5352 0 R (id2880187) 5353 0 R (id2880221) 5354 0 R (id2880243) 5355 0 R (id2880269) 5356 0 R (id2880323) 5362 0 R (id2880342) 5363 0 R (id2880433) 5364 0 R (id2880480) 5369 0 R (id2880678) 5376 0 R (id2880736) 5381 0 R (id2880768) 5382 0 R (id2880818) 5388 0 R (id2881040) 5397 0 R (id2881221) 5403 0 R (id2881323) 5408 0 R (id2881549) 5413 0 R (id2881644) 5423 0 R (id2881731) 5427 0 R (id2881766) 5428 0 R (id2881784) 5773 0 R (id2881819) 5433 0 R (id2881931) 5434 0 R (id2882066) 5439 0 R (id2882181) 5444 0 R (id2882294) 5453 0 R (id2882383) 5454 0 R (id2882473) 5459 0 R (id2882635) 5464 0 R (id2882652) 5465 0 R (id2882683) 5466 0 R (id2882745) 5467 0 R (id2882784) 5472 0 R (id2882835) 5473 0 R (id2882873) 5478 0 R (id2882928) 5479 0 R (id2882962) 5480 0 R (id2882995) 5485 0 R (id2883045) 5486 0 R (id2883124) 5492 0 R (id2883189) 5493 0 R (id2883222) 5494 0 R (id2883249) 5499 0 R (id2883267) 5500 0 R (id2883288) 5501 0 R (id2883388) 5506 0 R (id2883491) 5507 0 R (id2883562) 5508 0 R (id2883624) 5509 0 R (id2883682) 5514 0 R (id2883749) 5515 0 R (id2883857) 5523 0 R (id2883912) 5527 0 R (id2883936) 5528 0 R (id2883982) 5535 0 R (id2884048) 5536 0 R (id2884183) 5553 0 R (id2884269) 5559 0 R (id2884351) 5567 0 R (id2884420) 5572 0 R (id2884486) 5575 0 R (id2884947) 5613 0 R (id2884978) 5618 0 R (id2885010) 5619 0 R (id2885051) 5621 0 R (id2885123) 5622 0 R (id2885224) 5627 0 R (id2885295) 5628 0 R (id2885344) 5634 0 R (id2885358) 5635 0 R (id2885552) 5640 0 R (id2885598) 5641 0 R (id2885680) 5642 0 R (id2885741) 5647 0 R (id2885759) 5648 0 R (id2885776) 5649 0 R (id2885811) 5650 0 R (id2885824) 5651 0 R (id2885836) 5652 0 R (id2885850) 5657 0 R (id2885858) 5658 0 R (id2886072) 5663 0 R (id2886378) 5689 0 R (id2887500) 5719 0 R (id2887511) 5780 0 R (id2899670) 5788 0 R (id2899688) 5789 0 R (id2899780) 5794 0 R (id2899786) 5795 0 R (id2899825) 5796 0 R (id2899866) 5797 0 R (id2899948) 5799 0 R (id2899967) 5800 0 R (id2900105) 5806 0 R (id2900149) 5807 0 R (id2900171) 5808 0 R (id2900226) 5811 0 R (id2900257) 5813 0 R (id2901154) 5818 0 R (id2901183) 5819 0 R (id2901255) 5820 0 R (id2901315) 5825 0 R (id2901346) 5826 0 R (id2901373) 5827 0 R (id2901408) 5832 0 R (id2901431) 5833 0 R (id2901567) 5834 0 R (id2901639) 5839 0 R (id2901673) 5840 0 R (id2901701) 5841 0 R (id2901730) 5843 0 R (id2901805) 5848 0 R (id2901898) 5850 0 R (id2901960) 5851 0 R (id2902072) 5857 0 R (id2902280) 5858 0 R (id2902359) 5866 0 R (id2902476) 5867 0 R (id2902530) 5868 0 R (id2902771) 5873 0 R (id2902779) 5875 0 R (id2902941) 5885 0 R (id2903059) 5893 0 R (id2903096) 5894 0 R (id2903202) 5896 0 R (id2903426) 5903 0 R (id2903517) 5912 0 R (id2903536) 5913 0 R (id2905838) 5958 0 R (id2905893) 5959 0 R (id2906029) 5918 0 R (id2906218) 5919 0 R (id2906317) 5924 0 R (id2906335) 5925 0 R (id2906546) 5937 0 R (id2906742) 5951 0 R (id2906776) 5953 0 R (id2907676) 5965 0 R (id2907771) 5966 0 R (id2907880) 5971 0 R (id2907904) 5972 0 R (id2908004) 5973 0 R (id2908156) 5982 0 R (id2908257) 5988 0 R (id2908277) 5989 0 R (id2908298) 5990 0 R (id2908342) 5991 0 R (id2908489) 6005 0 R (id2908503) 6006 0 R (id2909710) 6011 0 R (id2909744) 6012 0 R (id2909785) 6013 0 R (id2909798) 6014 0 R (id2909891) 6019 0 R (id2910000) 6020 0 R (id2910039) 6021 0 R (id2910190) 6026 0 R (id2910198) 6027 0 R (id2910692) 6044 0 R (id2910850) 6045 0 R (id2911361) 6081 0 R (id2911426) 6086 0 R (id2911443) 6087 0 R (id2911612) 6095 0 R (id2911634) 6100 0 R (id2911650) 6101 0 R (id2911691) 6102 0 R (id2911749) 6103 0 R (id2911795) 6108 0 R (id2911815) 6109 0 R (id2911913) 6110 0 R (id2911963) 6111 0 R (id2912313) 6125 0 R (id2912457) 6127 0 R (id2912517) 6129 0 R (id2912712) 6138 0 R (id2913021) 6140 0 R (id2913034) 6141 0 R (id2913097) 6146 0 R (id2913318) 6147 0 R (id2917263) 6158 0 R (id2917531) 6163 0 R (id2917548) 6164 0 R (id2917605) 6169 0 R (id2918219) 6183 0 R (id2918250) 6184 0 R (id2918276) 6185 0 R (id2918521) 6195 0 R (id2918579) 6198 0 R (id2918662) 6203 0 R (id2918695) 6204 0 R (id2918895) 6213 0 R (id2918928) 6214 0 R (id2918963) 6219 0 R (id2918995) 6220 0 R (id2919029) 6221 0 R (id2919043) 6222 0 R (id2921165) 6232 0 R (id2921190) 6233 0 R (id2921235) 6238 0 R (id2921291) 6239 0 R (id2921415) 6244 0 R (id2921460) 6245 0 R (id2921502) 6246 0 R (id2921590) 6251 0 R (id2921738) 6256 0 R (id2921783) 6257 0 R (id2922026) 6267 0 R (id2922059) 6268 0 R (id2922084) 6269 0 R (id2922154) 6274 0 R (id2922170) 6275 0 R (id2922202) 6276 0 R (id2922254) 6277 0 R (id2922798) 6327 0 R (id2922827) 6328 0 R (id2922992) 6302 0 R (id2923017) 6303 0 R (id2923143) 6319 0 R (id2923168) 6321 0 R (id2923372) 6286 0 R (id2923574) 6287 0 R (id2923644) 6289 0 R (id2923744) 6294 0 R (id2923789) 6295 0 R (id2924342) 6333 0 R (id2924395) 6334 0 R (id2924456) 6339 0 R (id2924514) 6340 0 R (id2924559) 6309 0 R (id2924779) 6322 0 R (id2925388) 6386 0 R (id2925422) 6387 0 R (id2925477) 6341 0 R (id2925503) 6347 0 R (id2925840) 6367 0 R (id2925858) 6368 0 R (id2925922) 6370 0 R (id2925995) 6375 0 R (id2926164) 6377 0 R (id2927531) 6425 0 R (id2927781) 6392 0 R (id2927895) 6402 0 R (id2927959) 6404 0 R (id2928064) 6405 0 R (id2928128) 6411 0 R (id2928193) 6412 0 R (id2928241) 6413 0 R (id2928293) 6414 0 R (id2928316) 6415 0 R (id2929391) 6426 0 R (id2929568) 6431 0 R (id2930743) 6465 0 R (id2932367) 6471 0 R (id2932509) 6474 0 R (id2932793) 6479 0 R (id2932838) 6483 0 R (id2932990) 6490 0 R (id2933605) 6521 0 R (id2933612) 6522 0 R (id2933642) 6525 0 R (id2933658) 6526 0 R (id2933729) 6497 0 R (id2933951) 6500 0 R (id2933988) 6502 0 R (id2934130) 6507 0 R (id2934238) 6508 0 R (id2934285) 6509 0 R (id2934938) 6571 0 R (id2934971) 6528 0 R (id2935161) 6540 0 R (id2935210) 6545 0 R (id2935346) 6546 0 R (id2935483) 6551 0 R (id2935563) 6552 0 R (id2935596) 6553 0 R (id2935648) 6558 0 R (id2935740) 6559 0 R (id2935944) 6564 0 R (id2936039) 6565 0 R (id2937123) 6592 0 R (id2937469) 6572 0 R (id2937499) 6574 0 R (id2937670) 6579 0 R (id2937714) 6584 0 R (id2937721) 6585 0 R (id2937746) 6586 0 R (id2937754) 6587 0 R (id2938476) 6598 0 R (id2938483) 6599 0 R (id2938562) 6605 0 R (id2938624) 6609 0 R (id2938720) 6610 0 R (id2938728) 6611 0 R (id2938817) 6612 0 R (id2938848) 6617 0 R (id2938893) 6618 0 R (id2938924) 6620 0 R (id2938941) 6621 0 R (id2938988) 6622 0 R (id2939061) 6628 0 R (id2939085) 6629 0 R (id2939196) 6631 0 R (id2940065) 6661 0 R (id2940225) 6666 0 R (id2940228) 6637 0 R (id2940272) 6638 0 R (id2940347) 6639 0 R (id2940391) 6644 0 R (id2940444) 6645 0 R (id2940467) 6646 0 R (id2940524) 6647 0 R (id2940566) 6648 0 R (id2940587) 6653 0 R (id2940612) 6655 0 R (id2940646) 6656 0 R (id2941876) 6691 0 R (id2941944) 6695 0 R (install) 2948 0 R (integrate-ms-networks) 3028 0 R (introduction) 3862 0 R (locking) 2960 0 R (migration) 6318 0 R (msdfs) 3019 0 R (optional) 4266 0 R (page.1) 2861 0 R (page.10) 3267 0 R (page.100) 4455 0 R (page.101) 4460 0 R (page.102) 4465 0 R (page.103) 4480 0 R (page.104) 4486 0 R (page.105) 4494 0 R (page.106) 4500 0 R (page.107) 4508 0 R (page.108) 4517 0 R (page.109) 4522 0 R (page.11) 3320 0 R (page.110) 4529 0 R (page.111) 4535 0 R (page.112) 4541 0 R (page.113) 4547 0 R (page.114) 4555 0 R (page.115) 4564 0 R (page.116) 4572 0 R (page.117) 4577 0 R (page.118) 4583 0 R (page.119) 4594 0 R (page.12) 3370 0 R (page.120) 4598 0 R (page.121) 4607 0 R (page.122) 4616 0 R (page.123) 4623 0 R (page.124) 4633 0 R (page.125) 4642 0 R (page.126) 4649 0 R (page.127) 4656 0 R (page.128) 4666 0 R (page.129) 4675 0 R (page.13) 3423 0 R (page.130) 4683 0 R (page.131) 4688 0 R (page.132) 4694 0 R (page.133) 4699 0 R (page.134) 4704 0 R (page.135) 4713 0 R (page.136) 4721 0 R (page.137) 4726 0 R (page.138) 4733 0 R (page.139) 4738 0 R (page.14) 3475 0 R (page.140) 4743 0 R (page.141) 4749 0 R (page.142) 4755 0 R (page.143) 4768 0 R (page.144) 4776 0 R (page.145) 4783 0 R (page.146) 4790 0 R (page.147) 4799 0 R (page.148) 4805 0 R (page.149) 4814 0 R (page.15) 3527 0 R (page.150) 4819 0 R (page.151) 4825 0 R (page.152) 4834 0 R (page.153) 4839 0 R (page.154) 4845 0 R (page.155) 4859 0 R (page.156) 4865 0 R (page.157) 4871 0 R (page.158) 4877 0 R (page.159) 4882 0 R (page.16) 3573 0 R (page.160) 4887 0 R (page.161) 4895 0 R (page.162) 4901 0 R (page.163) 4906 0 R (page.164) 4913 0 R (page.165) 4919 0 R (page.166) 4924 0 R (page.167) 4932 0 R (page.168) 4938 0 R (page.169) 4943 0 R (page.17) 3626 0 R (page.170) 4949 0 R (page.171) 4955 0 R (page.172) 4965 0 R (page.173) 4969 0 R (page.174) 4975 0 R (page.175) 4980 0 R (page.176) 4986 0 R (page.177) 4991 0 R (page.178) 4997 0 R (page.179) 5002 0 R (page.18) 3678 0 R (page.180) 5008 0 R (page.181) 5013 0 R (page.182) 5020 0 R (page.183) 5041 0 R (page.184) 5046 0 R (page.185) 5050 0 R (page.186) 5056 0 R (page.187) 5061 0 R (page.188) 5066 0 R (page.189) 5070 0 R (page.19) 3729 0 R (page.190) 5080 0 R (page.191) 5090 0 R (page.192) 5096 0 R (page.193) 5102 0 R (page.194) 5112 0 R (page.195) 5122 0 R (page.196) 5133 0 R (page.197) 5138 0 R (page.198) 5145 0 R (page.199) 5151 0 R (page.2) 2873 0 R (page.20) 3774 0 R (page.200) 5159 0 R (page.201) 5166 0 R (page.202) 5178 0 R (page.203) 5188 0 R (page.204) 5197 0 R (page.205) 5202 0 R (page.206) 5212 0 R (page.207) 5220 0 R (page.208) 5225 0 R (page.209) 5233 0 R (page.21) 3822 0 R (page.210) 5243 0 R (page.211) 5253 0 R (page.212) 5263 0 R (page.213) 5274 0 R (page.214) 5279 0 R (page.215) 5284 0 R (page.216) 5292 0 R (page.217) 5297 0 R (page.218) 5304 0 R (page.219) 5311 0 R (page.22) 3857 0 R (page.220) 5323 0 R (page.221) 5335 0 R (page.222) 5343 0 R (page.223) 5351 0 R (page.224) 5361 0 R (page.225) 5368 0 R (page.226) 5375 0 R (page.227) 5380 0 R (page.228) 5387 0 R (page.229) 5392 0 R (page.23) 3861 0 R (page.230) 5402 0 R (page.231) 5407 0 R (page.232) 5412 0 R (page.233) 5422 0 R (page.234) 5432 0 R (page.235) 5438 0 R (page.236) 5452 0 R (page.237) 5458 0 R (page.238) 5463 0 R (page.239) 5471 0 R (page.24) 3868 0 R (page.240) 5477 0 R (page.241) 5484 0 R (page.242) 5491 0 R (page.243) 5498 0 R (page.244) 5505 0 R (page.245) 5513 0 R (page.246) 5520 0 R (page.247) 5534 0 R (page.248) 5552 0 R (page.249) 5566 0 R (page.25) 3874 0 R (page.250) 5580 0 R (page.251) 5607 0 R (page.252) 5617 0 R (page.253) 5626 0 R (page.254) 5633 0 R (page.255) 5639 0 R (page.256) 5646 0 R (page.257) 5656 0 R (page.258) 5662 0 R (page.259) 5667 0 R (page.26) 3885 0 R (page.260) 5672 0 R (page.261) 5676 0 R (page.262) 5680 0 R (page.263) 5684 0 R (page.264) 5688 0 R (page.265) 5693 0 R (page.266) 5698 0 R (page.267) 5718 0 R (page.268) 5723 0 R (page.269) 5731 0 R (page.27) 3891 0 R (page.270) 5739 0 R (page.271) 5747 0 R (page.272) 5756 0 R (page.273) 5764 0 R (page.274) 5772 0 R (page.275) 5779 0 R (page.276) 5787 0 R (page.277) 5793 0 R (page.278) 5805 0 R (page.279) 5817 0 R (page.28) 3902 0 R (page.280) 5824 0 R (page.281) 5831 0 R (page.282) 5838 0 R (page.283) 5847 0 R (page.284) 5856 0 R (page.285) 5862 0 R (page.286) 5872 0 R (page.287) 5879 0 R (page.288) 5883 0 R (page.289) 5891 0 R (page.29) 3915 0 R (page.290) 5901 0 R (page.291) 5907 0 R (page.292) 5911 0 R (page.293) 5917 0 R (page.294) 5929 0 R (page.295) 5936 0 R (page.296) 5943 0 R (page.297) 5947 0 R (page.298) 5957 0 R (page.299) 5963 0 R (page.3) 2887 0 R (page.30) 3921 0 R (page.300) 5970 0 R (page.301) 5977 0 R (page.302) 5987 0 R (page.303) 6001 0 R (page.304) 6010 0 R (page.305) 6018 0 R (page.306) 6025 0 R (page.307) 6032 0 R (page.308) 6043 0 R (page.309) 6059 0 R (page.31) 3926 0 R (page.310) 6063 0 R (page.311) 6085 0 R (page.312) 6099 0 R (page.313) 6107 0 R (page.314) 6116 0 R (page.315) 6124 0 R (page.316) 6133 0 R (page.317) 6137 0 R (page.318) 6145 0 R (page.319) 6151 0 R (page.32) 3932 0 R (page.320) 6156 0 R (page.321) 6162 0 R (page.322) 6168 0 R (page.323) 6174 0 R (page.324) 6178 0 R (page.325) 6182 0 R (page.326) 6190 0 R (page.327) 6194 0 R (page.328) 6202 0 R (page.329) 6209 0 R (page.33) 3936 0 R (page.330) 6218 0 R (page.331) 6226 0 R (page.332) 6231 0 R (page.333) 6237 0 R (page.334) 6243 0 R (page.335) 6250 0 R (page.336) 6255 0 R (page.337) 6261 0 R (page.338) 6266 0 R (page.339) 6273 0 R (page.34) 3943 0 R (page.340) 6281 0 R (page.341) 6285 0 R (page.342) 6293 0 R (page.343) 6301 0 R (page.344) 6308 0 R (page.345) 6313 0 R (page.346) 6317 0 R (page.347) 6326 0 R (page.348) 6332 0 R (page.349) 6338 0 R (page.35) 3951 0 R (page.350) 6346 0 R (page.351) 6374 0 R (page.352) 6381 0 R (page.353) 6385 0 R (page.354) 6391 0 R (page.355) 6401 0 R (page.356) 6410 0 R (page.357) 6419 0 R (page.358) 6423 0 R (page.359) 6430 0 R (page.36) 3961 0 R (page.360) 6438 0 R (page.361) 6444 0 R (page.362) 6461 0 R (page.363) 6470 0 R (page.364) 6478 0 R (page.365) 6489 0 R (page.366) 6496 0 R (page.367) 6506 0 R (page.368) 6514 0 R (page.369) 6518 0 R (page.37) 3979 0 R (page.370) 6537 0 R (page.371) 6550 0 R (page.372) 6557 0 R (page.373) 6563 0 R (page.374) 6570 0 R (page.375) 6578 0 R (page.376) 6583 0 R (page.377) 6591 0 R (page.378) 6604 0 R (page.379) 6616 0 R (page.38) 3989 0 R (page.380) 6627 0 R (page.381) 6636 0 R (page.382) 6643 0 R (page.383) 6652 0 R (page.384) 6660 0 R (page.385) 6665 0 R (page.39) 3998 0 R (page.4) 2965 0 R (page.40) 4004 0 R (page.41) 4012 0 R (page.42) 4017 0 R (page.43) 4024 0 R (page.44) 4032 0 R (page.45) 4037 0 R (page.46) 4045 0 R (page.47) 4053 0 R (page.48) 4057 0 R (page.49) 4066 0 R (page.5) 3040 0 R (page.50) 4073 0 R (page.51) 4085 0 R (page.52) 4093 0 R (page.53) 4100 0 R (page.54) 4107 0 R (page.55) 4113 0 R (page.56) 4122 0 R (page.57) 4129 0 R (page.58) 4137 0 R (page.59) 4142 0 R (page.6) 3070 0 R (page.60) 4148 0 R (page.61) 4154 0 R (page.62) 4167 0 R (page.63) 4179 0 R (page.64) 4191 0 R (page.65) 4199 0 R (page.66) 4207 0 R (page.67) 4219 0 R (page.68) 4228 0 R (page.69) 4232 0 R (page.7) 3109 0 R (page.70) 4238 0 R (page.71) 4250 0 R (page.72) 4255 0 R (page.73) 4260 0 R (page.74) 4265 0 R (page.75) 4271 0 R (page.76) 4276 0 R (page.77) 4283 0 R (page.78) 4295 0 R (page.79) 4300 0 R (page.8) 3162 0 R (page.80) 4306 0 R (page.81) 4312 0 R (page.82) 4324 0 R (page.83) 4331 0 R (page.84) 4336 0 R (page.85) 4343 0 R (page.86) 4350 0 R (page.87) 4356 0 R (page.88) 4362 0 R (page.89) 4367 0 R (page.9) 3212 0 R (page.90) 4375 0 R (page.91) 4386 0 R (page.92) 4394 0 R (page.93) 4399 0 R (page.94) 4404 0 R (page.95) 4409 0 R (page.96) 4416 0 R (page.97) 4423 0 R (page.98) 4431 0 R (page.99) 4440 0 R (pam) 3027 0 R (part.1) 6 0 R (part.2) 98 0 R (part.3) 454 0 R (part.4) 2418 0 R (part.5) 2534 0 R (part.6) 2610 0 R (passdb) 2957 0 R (printing) 3020 0 R (problems) 3036 0 R (samba-bdc) 2952 0 R (samba-pdc) 2951 0 R (section*.2) 5874 0 R (section*.3) 5884 0 R (section*.4) 5892 0 R (section*.5) 5895 0 R (section*.6) 5902 0 R (section.1.1) 14 0 R (section.1.2) 18 0 R (section.1.3) 22 0 R (section.1.4) 26 0 R (section.1.5) 30 0 R (section.1.6) 34 0 R (section.10.1) 462 0 R (section.10.2) 466 0 R (section.10.3) 470 0 R (section.10.4) 486 0 R (section.10.5) 522 0 R (section.10.6) 538 0 R (section.10.7) 550 0 R (section.10.8) 570 0 R (section.11.1) 586 0 R (section.11.2) 590 0 R (section.11.3) 610 0 R (section.11.4) 622 0 R (section.11.5) 706 0 R (section.12.1) 726 0 R (section.12.2) 730 0 R (section.12.3) 738 0 R (section.12.4) 750 0 R (section.13.1) 766 0 R (section.13.2) 770 0 R (section.13.3) 786 0 R (section.13.4) 802 0 R (section.13.5) 818 0 R (section.13.6) 858 0 R (section.14.1) 874 0 R (section.14.2) 878 0 R (section.14.3) 922 0 R (section.14.4) 938 0 R (section.14.5) 950 0 R (section.14.6) 954 0 R (section.14.7) 962 0 R (section.15.1) 970 0 R (section.15.2) 974 0 R (section.15.3) 978 0 R (section.15.4) 1006 0 R (section.15.5) 1010 0 R (section.16.1) 1026 0 R (section.16.2) 1030 0 R (section.16.3) 1034 0 R (section.16.4) 1046 0 R (section.16.5) 1058 0 R (section.17.1) 1070 0 R (section.17.2) 1074 0 R (section.18.1) 1082 0 R (section.18.10) 1278 0 R (section.18.11) 1298 0 R (section.18.12) 1302 0 R (section.18.13) 1306 0 R (section.18.14) 1310 0 R (section.18.15) 1314 0 R (section.18.2) 1086 0 R (section.18.3) 1110 0 R (section.18.4) 1122 0 R (section.18.5) 1126 0 R (section.18.6) 1154 0 R (section.18.7) 1178 0 R (section.18.8) 1226 0 R (section.18.9) 1246 0 R (section.19.1) 1330 0 R (section.19.10) 1558 0 R (section.19.11) 1626 0 R (section.19.12) 1714 0 R (section.19.13) 1734 0 R (section.19.14) 1778 0 R (section.19.15) 1810 0 R (section.19.16) 1814 0 R (section.19.17) 1830 0 R (section.19.18) 1834 0 R (section.19.19) 1850 0 R (section.19.2) 1342 0 R (section.19.3) 1358 0 R (section.19.4) 1382 0 R (section.19.5) 1418 0 R (section.19.6) 1498 0 R (section.19.7) 1514 0 R (section.19.8) 1526 0 R (section.19.9) 1538 0 R (section.2.1) 42 0 R (section.2.2) 46 0 R (section.2.3) 62 0 R (section.2.4) 66 0 R (section.2.5) 70 0 R (section.2.6) 74 0 R (section.2.7) 78 0 R (section.20.1) 1874 0 R (section.20.2) 1878 0 R (section.20.3) 1882 0 R (section.20.4) 1906 0 R (section.20.5) 1918 0 R (section.21.1) 1926 0 R (section.21.2) 1930 0 R (section.21.3) 1934 0 R (section.21.4) 1942 0 R (section.21.5) 1970 0 R (section.21.6) 2018 0 R (section.21.7) 2022 0 R (section.22.1) 2030 0 R (section.22.2) 2034 0 R (section.22.3) 2038 0 R (section.22.4) 2046 0 R (section.22.5) 2054 0 R (section.23.1) 2062 0 R (section.23.2) 2066 0 R (section.23.3) 2090 0 R (section.23.4) 2106 0 R (section.23.5) 2110 0 R (section.24.1) 2122 0 R (section.24.2) 2126 0 R (section.24.3) 2190 0 R (section.24.4) 2194 0 R (section.24.5) 2198 0 R (section.24.6) 2218 0 R (section.25.1) 2238 0 R (section.25.2) 2242 0 R (section.25.3) 2294 0 R (section.26.1) 2306 0 R (section.26.2) 2310 0 R (section.26.3) 2314 0 R (section.26.4) 2334 0 R (section.26.5) 2358 0 R (section.27.1) 2378 0 R (section.27.2) 2382 0 R (section.27.3) 2386 0 R (section.27.4) 2390 0 R (section.27.5) 2394 0 R (section.28.1) 2402 0 R (section.28.2) 2406 0 R (section.29.1) 2414 0 R (section.3.1) 94 0 R (section.30.1) 2426 0 R (section.30.2) 2430 0 R (section.30.3) 2434 0 R (section.31.1) 2442 0 R (section.31.2) 2474 0 R (section.32.1) 2490 0 R (section.33.1) 2542 0 R (section.33.2) 2546 0 R (section.33.3) 2550 0 R (section.33.4) 2554 0 R (section.34.1) 2562 0 R (section.34.2) 2566 0 R (section.34.3) 2570 0 R (section.34.4) 2574 0 R (section.34.5) 2578 0 R (section.35.1) 2586 0 R (section.35.2) 2590 0 R (section.35.3) 2594 0 R (section.35.4) 2598 0 R (section.35.5) 2602 0 R (section.35.6) 2606 0 R (section.36.1) 2618 0 R (section.36.2) 2638 0 R (section.36.3) 2642 0 R (section.36.4) 2646 0 R (section.36.5) 2662 0 R (section.36.6) 2674 0 R (section.37.1) 2682 0 R (section.37.2) 2686 0 R (section.37.3) 2690 0 R (section.37.4) 2694 0 R (section.37.5) 2698 0 R (section.37.6) 2706 0 R (section.38.1) 2722 0 R (section.38.2) 2726 0 R (section.38.3) 2742 0 R (section.38.4) 2770 0 R (section.38.5) 2778 0 R (section.38.6) 2782 0 R (section.39.1) 2790 0 R (section.39.10) 2826 0 R (section.39.11) 2830 0 R (section.39.2) 2794 0 R (section.39.3) 2798 0 R (section.39.4) 2802 0 R (section.39.5) 2806 0 R (section.39.6) 2810 0 R (section.39.7) 2814 0 R (section.39.8) 2818 0 R (section.39.9) 2822 0 R (section.4.1) 106 0 R (section.4.2) 110 0 R (section.4.3) 114 0 R (section.4.4) 158 0 R (section.4.5) 162 0 R (section.40.1) 2838 0 R (section.41.1) 2846 0 R (section.41.2) 2850 0 R (section.41.3) 2854 0 R (section.5.1) 186 0 R (section.5.2) 190 0 R (section.5.3) 202 0 R (section.5.4) 206 0 R (section.5.5) 210 0 R (section.5.6) 234 0 R (section.6.1) 266 0 R (section.6.2) 270 0 R (section.6.3) 294 0 R (section.6.4) 302 0 R (section.7.1) 326 0 R (section.7.2) 330 0 R (section.7.3) 362 0 R (section.7.4) 374 0 R (section.7.5) 406 0 R (section.8.1) 422 0 R (section.8.2) 426 0 R (section.8.3) 430 0 R (section.8.4) 442 0 R (section.9.1) 450 0 R (securing-samba) 2961 0 R (speed) 3064 0 R (subfigure.19.1.1) 5168 0 R (subfigure.19.10.1) 5741 0 R (subfigure.19.11.1) 5749 0 R (subfigure.19.12.1) 5758 0 R (subfigure.19.13.1) 5766 0 R (subfigure.19.14.1) 5774 0 R (subfigure.19.15.1) 5781 0 R (subfigure.19.2.1) 5181 0 R (subfigure.19.3.1) 5191 0 R (subfigure.19.4.1) 5235 0 R (subfigure.19.5.1) 5245 0 R (subfigure.19.6.1) 5255 0 R (subfigure.19.7.1) 5265 0 R (subfigure.19.8.1) 5725 0 R (subfigure.19.9.1) 5733 0 R (subsection.10.3.1) 474 0 R (subsection.10.3.2) 478 0 R (subsection.10.3.3) 482 0 R (subsection.10.4.1) 490 0 R (subsection.10.4.2) 494 0 R (subsection.10.4.3) 498 0 R (subsection.10.4.4) 502 0 R (subsection.10.4.5) 506 0 R (subsection.10.4.6) 510 0 R (subsection.10.4.7) 514 0 R (subsection.10.4.8) 518 0 R (subsection.10.5.1) 526 0 R (subsection.10.5.2) 530 0 R (subsection.10.5.3) 534 0 R (subsection.10.6.1) 542 0 R (subsection.10.6.2) 546 0 R (subsection.10.7.1) 554 0 R (subsection.10.7.2) 558 0 R (subsection.10.7.3) 562 0 R (subsection.10.8.1) 574 0 R (subsection.10.8.2) 578 0 R (subsection.11.2.1) 594 0 R (subsection.11.2.2) 606 0 R (subsection.11.3.1) 614 0 R (subsection.11.3.2) 618 0 R (subsection.11.4.1) 626 0 R (subsection.11.4.2) 630 0 R (subsection.11.4.3) 634 0 R (subsection.11.4.4) 638 0 R (subsection.11.4.5) 682 0 R (subsection.11.4.6) 702 0 R (subsection.11.5.1) 710 0 R (subsection.11.5.2) 714 0 R (subsection.11.5.3) 718 0 R (subsection.12.2.1) 734 0 R (subsection.12.3.1) 742 0 R (subsection.12.3.2) 746 0 R (subsection.12.4.1) 754 0 R (subsection.12.4.2) 758 0 R (subsection.13.2.1) 774 0 R (subsection.13.2.2) 778 0 R (subsection.13.2.3) 782 0 R (subsection.13.3.1) 790 0 R (subsection.13.3.2) 794 0 R (subsection.13.3.3) 798 0 R (subsection.13.4.1) 806 0 R (subsection.13.5.1) 822 0 R (subsection.13.5.2) 826 0 R (subsection.13.5.3) 830 0 R (subsection.13.5.4) 834 0 R (subsection.13.5.5) 846 0 R (subsection.13.5.6) 850 0 R (subsection.13.5.7) 854 0 R (subsection.13.6.1) 862 0 R (subsection.13.6.2) 866 0 R (subsection.14.2.1) 882 0 R (subsection.14.3.1) 926 0 R (subsection.14.4.1) 942 0 R (subsection.14.4.2) 946 0 R (subsection.14.6.1) 958 0 R (subsection.15.3.1) 982 0 R (subsection.15.3.2) 986 0 R (subsection.15.3.3) 990 0 R (subsection.15.3.4) 994 0 R (subsection.15.3.5) 998 0 R (subsection.15.3.6) 1002 0 R (subsection.15.5.1) 1014 0 R (subsection.15.5.2) 1018 0 R (subsection.16.3.1) 1038 0 R (subsection.16.3.2) 1042 0 R (subsection.16.4.1) 1050 0 R (subsection.16.4.2) 1054 0 R (subsection.16.5.1) 1062 0 R (subsection.18.10.1) 1282 0 R (subsection.18.10.2) 1286 0 R (subsection.18.10.3) 1290 0 R (subsection.18.10.4) 1294 0 R (subsection.18.15.1) 1318 0 R (subsection.18.15.2) 1322 0 R (subsection.18.2.1) 1090 0 R (subsection.18.2.2) 1094 0 R (subsection.18.2.3) 1098 0 R (subsection.18.2.4) 1102 0 R (subsection.18.2.5) 1106 0 R (subsection.18.3.1) 1114 0 R (subsection.18.3.2) 1118 0 R (subsection.18.5.1) 1130 0 R (subsection.18.5.2) 1134 0 R (subsection.18.5.3) 1138 0 R (subsection.18.5.4) 1142 0 R (subsection.18.5.5) 1146 0 R (subsection.18.5.6) 1150 0 R (subsection.18.6.1) 1158 0 R (subsection.18.6.2) 1162 0 R (subsection.18.6.3) 1166 0 R (subsection.18.6.4) 1170 0 R (subsection.18.6.5) 1174 0 R (subsection.18.7.1) 1182 0 R (subsection.18.7.2) 1186 0 R (subsection.18.8.1) 1230 0 R (subsection.18.8.2) 1234 0 R (subsection.18.8.3) 1238 0 R (subsection.18.8.4) 1242 0 R (subsection.18.9.1) 1250 0 R (subsection.18.9.2) 1254 0 R (subsection.18.9.3) 1258 0 R (subsection.18.9.4) 1262 0 R (subsection.18.9.5) 1266 0 R (subsection.18.9.6) 1270 0 R (subsection.18.9.7) 1274 0 R (subsection.19.1.1) 1334 0 R (subsection.19.1.2) 1338 0 R (subsection.19.10.1) 1562 0 R (subsection.19.10.10) 1598 0 R (subsection.19.10.11) 1602 0 R (subsection.19.10.12) 1606 0 R (subsection.19.10.13) 1610 0 R (subsection.19.10.14) 1614 0 R (subsection.19.10.15) 1618 0 R (subsection.19.10.16) 1622 0 R (subsection.19.10.2) 1566 0 R (subsection.19.10.3) 1570 0 R (subsection.19.10.4) 1574 0 R (subsection.19.10.5) 1578 0 R (subsection.19.10.6) 1582 0 R (subsection.19.10.7) 1586 0 R (subsection.19.10.8) 1590 0 R (subsection.19.10.9) 1594 0 R (subsection.19.11.1) 1630 0 R (subsection.19.11.2) 1634 0 R (subsection.19.11.3) 1638 0 R (subsection.19.11.4) 1642 0 R (subsection.19.11.5) 1646 0 R (subsection.19.11.6) 1710 0 R (subsection.19.12.1) 1718 0 R (subsection.19.12.2) 1722 0 R (subsection.19.12.3) 1726 0 R (subsection.19.12.4) 1730 0 R (subsection.19.13.1) 1738 0 R (subsection.19.13.2) 1774 0 R (subsection.19.14.1) 1782 0 R (subsection.19.14.2) 1786 0 R (subsection.19.14.3) 1790 0 R (subsection.19.14.4) 1794 0 R (subsection.19.14.5) 1798 0 R (subsection.19.14.6) 1802 0 R (subsection.19.14.7) 1806 0 R (subsection.19.16.1) 1818 0 R (subsection.19.16.2) 1822 0 R (subsection.19.16.3) 1826 0 R (subsection.19.18.1) 1838 0 R (subsection.19.18.2) 1842 0 R (subsection.19.18.3) 1846 0 R (subsection.19.19.1) 1854 0 R (subsection.19.19.2) 1858 0 R (subsection.19.19.3) 1862 0 R (subsection.19.19.4) 1866 0 R (subsection.19.2.1) 1346 0 R (subsection.19.2.2) 1350 0 R (subsection.19.2.3) 1354 0 R (subsection.19.3.1) 1362 0 R (subsection.19.3.2) 1366 0 R (subsection.19.3.3) 1370 0 R (subsection.19.3.4) 1374 0 R (subsection.19.3.5) 1378 0 R (subsection.19.4.1) 1386 0 R (subsection.19.4.2) 1390 0 R (subsection.19.4.3) 1394 0 R (subsection.19.4.4) 1398 0 R (subsection.19.4.5) 1402 0 R (subsection.19.4.6) 1406 0 R (subsection.19.4.7) 1410 0 R (subsection.19.4.8) 1414 0 R (subsection.19.5.1) 1422 0 R (subsection.19.5.10) 1458 0 R (subsection.19.5.11) 1462 0 R (subsection.19.5.12) 1466 0 R (subsection.19.5.13) 1470 0 R (subsection.19.5.14) 1474 0 R (subsection.19.5.15) 1478 0 R (subsection.19.5.16) 1482 0 R (subsection.19.5.17) 1486 0 R (subsection.19.5.18) 1490 0 R (subsection.19.5.19) 1494 0 R (subsection.19.5.2) 1426 0 R (subsection.19.5.3) 1430 0 R (subsection.19.5.4) 1434 0 R (subsection.19.5.5) 1438 0 R (subsection.19.5.6) 1442 0 R (subsection.19.5.7) 1446 0 R (subsection.19.5.8) 1450 0 R (subsection.19.5.9) 1454 0 R (subsection.19.6.1) 1502 0 R (subsection.19.6.2) 1506 0 R (subsection.19.6.3) 1510 0 R (subsection.19.7.1) 1518 0 R (subsection.19.7.2) 1522 0 R (subsection.19.8.1) 1530 0 R (subsection.19.8.2) 1534 0 R (subsection.19.9.1) 1542 0 R (subsection.19.9.2) 1546 0 R (subsection.19.9.3) 1550 0 R (subsection.19.9.4) 1554 0 R (subsection.2.2.1) 50 0 R (subsection.2.2.2) 58 0 R (subsection.2.7.1) 82 0 R (subsection.2.7.2) 86 0 R (subsection.20.3.1) 1886 0 R (subsection.20.3.2) 1890 0 R (subsection.20.3.3) 1894 0 R (subsection.20.3.4) 1898 0 R (subsection.20.3.5) 1902 0 R (subsection.20.4.1) 1910 0 R (subsection.20.4.2) 1914 0 R (subsection.21.3.1) 1938 0 R (subsection.21.4.1) 1946 0 R (subsection.21.4.2) 1950 0 R (subsection.21.4.3) 1954 0 R (subsection.21.4.4) 1958 0 R (subsection.21.4.5) 1962 0 R (subsection.21.4.6) 1966 0 R (subsection.21.5.1) 1974 0 R (subsection.21.5.2) 1978 0 R (subsection.21.5.3) 1982 0 R (subsection.22.3.1) 2042 0 R (subsection.22.4.1) 2050 0 R (subsection.23.2.1) 2070 0 R (subsection.23.2.2) 2074 0 R (subsection.23.2.3) 2082 0 R (subsection.23.3.1) 2094 0 R (subsection.23.3.2) 2098 0 R (subsection.23.3.3) 2102 0 R (subsection.23.5.1) 2114 0 R (subsection.24.2.1) 2130 0 R (subsection.24.2.2) 2150 0 R (subsection.24.2.3) 2166 0 R (subsection.24.2.4) 2170 0 R (subsection.24.5.1) 2202 0 R (subsection.24.5.2) 2210 0 R (subsection.24.5.3) 2214 0 R (subsection.24.6.1) 2222 0 R (subsection.24.6.2) 2226 0 R (subsection.24.6.3) 2230 0 R (subsection.25.2.1) 2246 0 R (subsection.25.2.2) 2254 0 R (subsection.25.2.3) 2266 0 R (subsection.25.2.4) 2270 0 R (subsection.25.2.5) 2274 0 R (subsection.25.3.1) 2298 0 R (subsection.26.3.1) 2318 0 R (subsection.26.3.2) 2322 0 R (subsection.26.3.3) 2326 0 R (subsection.26.3.4) 2330 0 R (subsection.26.4.1) 2338 0 R (subsection.26.4.2) 2342 0 R (subsection.26.4.3) 2346 0 R (subsection.26.4.4) 2350 0 R (subsection.26.4.5) 2354 0 R (subsection.26.5.1) 2362 0 R (subsection.26.5.2) 2366 0 R (subsection.26.5.3) 2370 0 R (subsection.31.1.1) 2446 0 R (subsection.31.1.2) 2470 0 R (subsection.31.2.1) 2478 0 R (subsection.31.2.2) 2482 0 R (subsection.32.1.1) 2494 0 R (subsection.32.1.10) 2530 0 R (subsection.32.1.2) 2498 0 R (subsection.32.1.3) 2502 0 R (subsection.32.1.4) 2506 0 R (subsection.32.1.5) 2510 0 R (subsection.32.1.6) 2514 0 R (subsection.32.1.7) 2518 0 R (subsection.32.1.8) 2522 0 R (subsection.32.1.9) 2526 0 R (subsection.36.1.1) 2622 0 R (subsection.36.1.2) 2626 0 R (subsection.36.4.1) 2650 0 R (subsection.36.5.1) 2666 0 R (subsection.36.5.2) 2670 0 R (subsection.37.5.1) 2702 0 R (subsection.37.6.1) 2710 0 R (subsection.37.6.2) 2714 0 R (subsection.38.2.1) 2730 0 R (subsection.38.2.2) 2734 0 R (subsection.38.2.3) 2738 0 R (subsection.38.3.1) 2746 0 R (subsection.38.3.2) 2750 0 R (subsection.38.3.3) 2754 0 R (subsection.38.3.4) 2758 0 R (subsection.38.3.5) 2762 0 R (subsection.38.3.6) 2766 0 R (subsection.38.4.1) 2774 0 R (subsection.4.3.1) 118 0 R (subsection.4.3.2) 126 0 R (subsection.4.3.3) 134 0 R (subsection.4.3.4) 142 0 R (subsection.4.3.5) 150 0 R (subsection.4.5.1) 166 0 R (subsection.4.5.2) 170 0 R (subsection.4.5.3) 174 0 R (subsection.4.5.4) 178 0 R (subsection.5.2.1) 194 0 R (subsection.5.2.2) 198 0 R (subsection.5.5.1) 214 0 R (subsection.5.5.2) 230 0 R (subsection.5.6.1) 238 0 R (subsection.5.6.2) 242 0 R (subsection.5.6.3) 246 0 R (subsection.5.6.4) 250 0 R (subsection.5.6.5) 254 0 R (subsection.5.6.6) 258 0 R (subsection.6.2.1) 274 0 R (subsection.6.2.2) 282 0 R (subsection.6.2.3) 286 0 R (subsection.6.2.4) 290 0 R (subsection.6.3.1) 298 0 R (subsection.6.4.1) 306 0 R (subsection.6.4.2) 310 0 R (subsection.6.4.3) 314 0 R (subsection.6.4.4) 318 0 R (subsection.7.2.1) 334 0 R (subsection.7.2.2) 338 0 R (subsection.7.2.3) 342 0 R (subsection.7.2.4) 346 0 R (subsection.7.3.1) 366 0 R (subsection.7.3.2) 370 0 R (subsection.7.4.1) 378 0 R (subsection.7.4.2) 382 0 R (subsection.7.4.3) 386 0 R (subsection.7.4.4) 394 0 R (subsection.7.4.5) 398 0 R (subsection.7.4.6) 402 0 R (subsection.7.5.1) 410 0 R (subsection.7.5.2) 414 0 R (subsection.8.3.1) 434 0 R (subsection.8.3.2) 438 0 R (subsubsection.10.7.3.1) 566 0 R (subsubsection.11.2.1.1) 598 0 R (subsubsection.11.2.1.2) 602 0 R (subsubsection.11.4.4.1) 642 0 R (subsubsection.11.4.4.10) 678 0 R (subsubsection.11.4.4.2) 646 0 R (subsubsection.11.4.4.3) 650 0 R (subsubsection.11.4.4.4) 654 0 R (subsubsection.11.4.4.5) 658 0 R (subsubsection.11.4.4.6) 662 0 R (subsubsection.11.4.4.7) 666 0 R (subsubsection.11.4.4.8) 670 0 R (subsubsection.11.4.4.9) 674 0 R (subsubsection.11.4.5.1) 686 0 R (subsubsection.11.4.5.2) 690 0 R (subsubsection.11.4.5.3) 694 0 R (subsubsection.11.4.5.4) 698 0 R (subsubsection.13.4.1.1) 810 0 R (subsubsection.13.4.1.2) 814 0 R (subsubsection.13.5.4.1) 838 0 R (subsubsection.13.5.4.2) 842 0 R (subsubsection.14.2.1.1) 886 0 R (subsubsection.14.2.1.2) 890 0 R (subsubsection.14.2.1.3) 894 0 R (subsubsection.14.2.1.4) 898 0 R (subsubsection.14.2.1.5) 902 0 R (subsubsection.14.2.1.6) 906 0 R (subsubsection.14.2.1.7) 910 0 R (subsubsection.14.2.1.8) 914 0 R (subsubsection.14.2.1.9) 918 0 R (subsubsection.14.3.1.1) 930 0 R (subsubsection.14.3.1.2) 934 0 R (subsubsection.18.7.2.1) 1190 0 R (subsubsection.18.7.2.2) 1194 0 R (subsubsection.18.7.2.3) 1198 0 R (subsubsection.18.7.2.4) 1202 0 R (subsubsection.18.7.2.5) 1206 0 R (subsubsection.18.7.2.6) 1210 0 R (subsubsection.18.7.2.7) 1214 0 R (subsubsection.18.7.2.8) 1218 0 R (subsubsection.18.7.2.9) 1222 0 R (subsubsection.19.11.5.1) 1650 0 R (subsubsection.19.11.5.10) 1686 0 R (subsubsection.19.11.5.11) 1690 0 R (subsubsection.19.11.5.12) 1694 0 R (subsubsection.19.11.5.13) 1698 0 R (subsubsection.19.11.5.14) 1702 0 R (subsubsection.19.11.5.15) 1706 0 R (subsubsection.19.11.5.2) 1654 0 R (subsubsection.19.11.5.3) 1658 0 R (subsubsection.19.11.5.4) 1662 0 R (subsubsection.19.11.5.5) 1666 0 R (subsubsection.19.11.5.6) 1670 0 R (subsubsection.19.11.5.7) 1674 0 R (subsubsection.19.11.5.8) 1678 0 R (subsubsection.19.11.5.9) 1682 0 R (subsubsection.19.13.1.1) 1742 0 R (subsubsection.19.13.1.2) 1746 0 R (subsubsection.19.13.1.3) 1750 0 R (subsubsection.19.13.1.4) 1754 0 R (subsubsection.19.13.1.5) 1758 0 R (subsubsection.19.13.1.6) 1762 0 R (subsubsection.19.13.1.7) 1766 0 R (subsubsection.19.13.1.8) 1770 0 R (subsubsection.2.2.1.1) 54 0 R (subsubsection.21.5.3.1) 1986 0 R (subsubsection.21.5.3.2) 1990 0 R (subsubsection.21.5.3.3) 1994 0 R (subsubsection.21.5.3.4) 1998 0 R (subsubsection.21.5.3.5) 2002 0 R (subsubsection.21.5.3.6) 2006 0 R (subsubsection.21.5.3.7) 2010 0 R (subsubsection.21.5.3.8) 2014 0 R (subsubsection.23.2.2.1) 2078 0 R (subsubsection.23.2.3.1) 2086 0 R (subsubsection.24.2.1.1) 2134 0 R (subsubsection.24.2.1.2) 2138 0 R (subsubsection.24.2.1.3) 2142 0 R (subsubsection.24.2.1.4) 2146 0 R (subsubsection.24.2.2.1) 2154 0 R (subsubsection.24.2.2.2) 2158 0 R (subsubsection.24.2.2.3) 2162 0 R (subsubsection.24.2.4.1) 2174 0 R (subsubsection.24.2.4.2) 2178 0 R (subsubsection.24.2.4.3) 2182 0 R (subsubsection.24.2.4.4) 2186 0 R (subsubsection.24.5.1.1) 2206 0 R (subsubsection.25.2.1.1) 2250 0 R (subsubsection.25.2.2.1) 2258 0 R (subsubsection.25.2.2.2) 2262 0 R (subsubsection.25.2.5.1) 2278 0 R (subsubsection.25.2.5.2) 2282 0 R (subsubsection.25.2.5.3) 2286 0 R (subsubsection.25.2.5.4) 2290 0 R (subsubsection.31.1.1.1) 2450 0 R (subsubsection.31.1.1.2) 2454 0 R (subsubsection.31.1.1.3) 2458 0 R (subsubsection.31.1.1.4) 2462 0 R (subsubsection.31.1.1.5) 2466 0 R (subsubsection.36.1.2.1) 2630 0 R (subsubsection.36.1.2.2) 2634 0 R (subsubsection.36.4.1.1) 2654 0 R (subsubsection.36.4.1.2) 2658 0 R (subsubsection.4.3.1.1) 122 0 R (subsubsection.4.3.2.1) 130 0 R (subsubsection.4.3.3.1) 138 0 R (subsubsection.4.3.4.1) 146 0 R (subsubsection.4.3.5.1) 154 0 R (subsubsection.5.5.1.1) 218 0 R (subsubsection.5.5.1.2) 222 0 R (subsubsection.5.5.1.3) 226 0 R (subsubsection.6.2.1.1) 278 0 R (subsubsection.7.2.4.1) 350 0 R (subsubsection.7.2.4.2) 354 0 R (subsubsection.7.2.4.3) 358 0 R (subsubsection.7.4.3.1) 390 0 R (table.10.1) 4369 0 R (table.10.2) 4371 0 R (table.10.3) 4377 0 R (table.10.4) 4379 0 R (table.11.1) 4524 0 R (table.11.2) 4531 0 R (table.11.3) 4537 0 R (table.13.1) 4589 0 R (table.13.2) 4609 0 R (table.13.3) 4618 0 R (table.13.4) 4625 0 R (table.20.1) 5798 0 R (table.24.1) 6126 0 R (table.24.2) 6128 0 R (table.24.3) 6139 0 R (table.25.1) 6205 0 R (table.31.1) 6369 0 R (table.31.2) 6376 0 R (table.7.1) 4183 0 R (troubleshooting) 6424 0 R (type) 3937 0 R (unicode) 3029 0 R (upgrading-to-3.0) 3032 0 R (winbind) 3023 0 R (winbind-solaris9) 5887 0 R] +/Names [(AccessControls) 2959 0 R (AdvancedNetworkManagement) 3024 0 R (Appendixes) 6519 0 R (Backup) 3030 0 R (CUPS-printing) 3021 0 R (ClientConfig) 2955 0 R (DNSDHCP) 3065 0 R (Doc-Start) 2862 0 R (FastStart) 2949 0 R (Further-Resources) 3066 0 R (InterdomainTrusts) 3018 0 R (IntroSMB) 2947 0 R (Item.1) 3946 0 R (Item.10) 4079 0 R (Item.100) 5705 0 R (Item.101) 5706 0 R (Item.102) 5707 0 R (Item.103) 5708 0 R (Item.104) 5709 0 R (Item.105) 5710 0 R (Item.106) 5711 0 R (Item.107) 5712 0 R (Item.108) 5713 0 R (Item.109) 5978 0 R (Item.11) 4080 0 R (Item.110) 5979 0 R (Item.111) 5980 0 R (Item.112) 5981 0 R (Item.113) 5992 0 R (Item.114) 5993 0 R (Item.115) 5994 0 R (Item.116) 5995 0 R (Item.117) 5996 0 R (Item.118) 5997 0 R (Item.119) 6002 0 R (Item.12) 4157 0 R (Item.120) 6003 0 R (Item.121) 6004 0 R (Item.122) 6028 0 R (Item.123) 6033 0 R (Item.124) 6034 0 R (Item.125) 6035 0 R (Item.126) 6036 0 R (Item.127) 6037 0 R (Item.128) 6038 0 R (Item.129) 6046 0 R (Item.13) 4158 0 R (Item.130) 6047 0 R (Item.131) 6048 0 R (Item.132) 6049 0 R (Item.133) 6050 0 R (Item.134) 6051 0 R (Item.135) 6052 0 R (Item.136) 6053 0 R (Item.137) 6054 0 R (Item.138) 6055 0 R (Item.139) 6064 0 R (Item.14) 4159 0 R (Item.140) 6065 0 R (Item.141) 6066 0 R (Item.142) 6067 0 R (Item.143) 6068 0 R (Item.144) 6069 0 R (Item.145) 6070 0 R (Item.146) 6071 0 R (Item.147) 6072 0 R (Item.148) 6073 0 R (Item.149) 6074 0 R (Item.15) 4160 0 R (Item.150) 6075 0 R (Item.151) 6076 0 R (Item.152) 6077 0 R (Item.153) 6078 0 R (Item.154) 6079 0 R (Item.155) 6080 0 R (Item.156) 6088 0 R (Item.157) 6089 0 R (Item.158) 6090 0 R (Item.159) 6091 0 R (Item.16) 4161 0 R (Item.160) 6092 0 R (Item.161) 6093 0 R (Item.162) 6094 0 R (Item.163) 6117 0 R (Item.164) 6118 0 R (Item.165) 6119 0 R (Item.166) 6120 0 R (Item.167) 6348 0 R (Item.168) 6349 0 R (Item.169) 6350 0 R (Item.17) 4162 0 R (Item.170) 6351 0 R (Item.171) 6352 0 R (Item.172) 6353 0 R (Item.173) 6354 0 R (Item.174) 6355 0 R (Item.175) 6356 0 R (Item.176) 6357 0 R (Item.177) 6358 0 R (Item.178) 6359 0 R (Item.179) 6360 0 R (Item.18) 4242 0 R (Item.180) 6361 0 R (Item.181) 6362 0 R (Item.182) 6363 0 R (Item.183) 6364 0 R (Item.184) 6365 0 R (Item.185) 6366 0 R (Item.186) 6393 0 R (Item.187) 6394 0 R (Item.188) 6395 0 R (Item.189) 6396 0 R (Item.19) 4243 0 R (Item.190) 6432 0 R (Item.191) 6433 0 R (Item.192) 6434 0 R (Item.193) 6439 0 R (Item.194) 6440 0 R (Item.195) 6445 0 R (Item.196) 6446 0 R (Item.197) 6447 0 R (Item.198) 6448 0 R (Item.199) 6449 0 R (Item.2) 3947 0 R (Item.20) 4245 0 R (Item.200) 6450 0 R (Item.201) 6451 0 R (Item.202) 6452 0 R (Item.203) 6453 0 R (Item.204) 6454 0 R (Item.205) 6455 0 R (Item.206) 6456 0 R (Item.207) 6462 0 R (Item.208) 6463 0 R (Item.209) 6464 0 R (Item.21) 4246 0 R (Item.210) 6531 0 R (Item.211) 6532 0 R (Item.212) 6533 0 R (Item.213) 6538 0 R (Item.214) 6539 0 R (Item.22) 4284 0 R (Item.23) 4285 0 R (Item.24) 4286 0 R (Item.25) 4287 0 R (Item.26) 4288 0 R (Item.27) 4289 0 R (Item.28) 4314 0 R (Item.29) 4315 0 R (Item.3) 3962 0 R (Item.30) 4316 0 R (Item.31) 4317 0 R (Item.32) 4380 0 R (Item.33) 4381 0 R (Item.34) 4382 0 R (Item.35) 4548 0 R (Item.36) 4549 0 R (Item.37) 4550 0 R (Item.38) 4627 0 R (Item.39) 4628 0 R (Item.4) 3963 0 R (Item.40) 4634 0 R (Item.41) 4635 0 R (Item.42) 4636 0 R (Item.43) 4670 0 R (Item.44) 4671 0 R (Item.45) 4676 0 R (Item.46) 4677 0 R (Item.47) 4678 0 R (Item.48) 4679 0 R (Item.49) 4847 0 R (Item.5) 4074 0 R (Item.50) 4848 0 R (Item.51) 4849 0 R (Item.52) 4850 0 R (Item.53) 4851 0 R (Item.54) 4852 0 R (Item.55) 4853 0 R (Item.56) 4957 0 R (Item.57) 4958 0 R (Item.58) 4959 0 R (Item.59) 4960 0 R (Item.6) 4075 0 R (Item.60) 5023 0 R (Item.61) 5024 0 R (Item.62) 5025 0 R (Item.63) 5026 0 R (Item.64) 5027 0 R (Item.65) 5028 0 R (Item.66) 5029 0 R (Item.67) 5030 0 R (Item.68) 5031 0 R (Item.69) 5032 0 R (Item.7) 4076 0 R (Item.70) 5033 0 R (Item.71) 5034 0 R (Item.72) 5035 0 R (Item.73) 5036 0 R (Item.74) 5037 0 R (Item.75) 5084 0 R (Item.76) 5085 0 R (Item.77) 5086 0 R (Item.78) 5393 0 R (Item.79) 5394 0 R (Item.8) 4077 0 R (Item.80) 5395 0 R (Item.81) 5396 0 R (Item.82) 5414 0 R (Item.83) 5415 0 R (Item.84) 5416 0 R (Item.85) 5417 0 R (Item.86) 5418 0 R (Item.87) 5424 0 R (Item.88) 5425 0 R (Item.89) 5426 0 R (Item.9) 4078 0 R (Item.90) 5440 0 R (Item.91) 5441 0 R (Item.92) 5442 0 R (Item.93) 5443 0 R (Item.94) 5699 0 R (Item.95) 5700 0 R (Item.96) 5701 0 R (Item.97) 5702 0 R (Item.98) 5703 0 R (Item.99) 5704 0 R (NT4Migration) 3033 0 R (NetworkBrowsing) 2956 0 R (Other-Clients) 3063 0 R (PolicyMgmt) 3025 0 R (Portability) 3062 0 R (ProfileMgmt) 3026 0 R (SWAT) 3034 0 R (SambaHA) 3031 0 R (ServerType) 2950 0 R (StandAloneServer) 2954 0 R (VFS) 3022 0 R (XMLpassdb) 4427 0 R (ads-create-machine-account) 4212 0 R (ads-member) 3985 0 R (ads-test-server) 4214 0 R (ads-test-smbclient) 4215 0 R (browse-force-master) 4308 0 R (bugreport) 3060 0 R (chapter*.1) 3071 0 R (chapter.1) 10 0 R (chapter.10) 458 0 R (chapter.11) 582 0 R (chapter.12) 722 0 R (chapter.13) 762 0 R (chapter.14) 870 0 R (chapter.15) 966 0 R (chapter.16) 1022 0 R (chapter.17) 1066 0 R (chapter.18) 1078 0 R (chapter.19) 1326 0 R (chapter.2) 38 0 R (chapter.20) 1870 0 R (chapter.21) 1922 0 R (chapter.22) 2026 0 R (chapter.23) 2058 0 R (chapter.24) 2118 0 R (chapter.25) 2234 0 R (chapter.26) 2302 0 R (chapter.27) 2374 0 R (chapter.28) 2398 0 R (chapter.29) 2410 0 R (chapter.3) 90 0 R (chapter.30) 2422 0 R (chapter.31) 2438 0 R (chapter.32) 2486 0 R (chapter.33) 2538 0 R (chapter.34) 2558 0 R (chapter.35) 2582 0 R (chapter.36) 2614 0 R (chapter.37) 2678 0 R (chapter.38) 2718 0 R (chapter.39) 2786 0 R (chapter.4) 102 0 R (chapter.40) 2834 0 R (chapter.41) 2842 0 R (chapter.5) 182 0 R (chapter.6) 262 0 R (chapter.7) 322 0 R (chapter.8) 418 0 R (chapter.9) 446 0 R (compiling) 3061 0 R (diagnosis) 3035 0 R (domain-member) 2953 0 R (domain-member-server) 4175 0 R (example.12.3.1) 4558 0 R (example.13.2.1) 4599 0 R (figure.19.1) 5172 0 R (figure.19.10) 5742 0 R (figure.19.11) 5750 0 R (figure.19.12) 5759 0 R (figure.19.13) 5767 0 R (figure.19.14) 5775 0 R (figure.19.15) 5782 0 R (figure.19.2) 5182 0 R (figure.19.3) 5192 0 R (figure.19.4) 5236 0 R (figure.19.5) 5246 0 R (figure.19.6) 5256 0 R (figure.19.7) 5266 0 R (figure.19.8) 5726 0 R (figure.19.9) 5734 0 R (groupmapping) 2958 0 R (id2805466) 3870 0 R (id2805534) 3877 0 R (id2805621) 3880 0 R (id2805695) 3887 0 R (id2805770) 3907 0 R (id2805872) 3908 0 R (id2805933) 3909 0 R (id2805962) 3916 0 R (id2805975) 3917 0 R (id2806076) 3896 0 R (id2806167) 3898 0 R (id2806220) 3903 0 R (id2806264) 3906 0 R (id2806461) 3892 0 R (id2806503) 3895 0 R (id2806689) 3863 0 R (id2806743) 3864 0 R (id2807354) 3922 0 R (id2807478) 3945 0 R (id2807572) 3952 0 R (id2807611) 3953 0 R (id2807691) 3954 0 R (id2807803) 3927 0 R (id2808680) 3955 0 R (id2808702) 3956 0 R (id2808922) 3972 0 R (id2808952) 3980 0 R (id2809005) 3983 0 R (id2809163) 3993 0 R (id2809231) 3994 0 R (id2809408) 3999 0 R (id2809436) 4000 0 R (id2809468) 4005 0 R (id2809497) 4006 0 R (id2810876) 3938 0 R (id2810967) 3939 0 R (id2811049) 3944 0 R (id2811409) 4008 0 R (id2811638) 4026 0 R (id2811653) 4027 0 R (id2811853) 4033 0 R (id2812167) 4049 0 R (id2812463) 4059 0 R (id2812486) 4060 0 R (id2812501) 4061 0 R (id2812534) 4062 0 R (id2812553) 4067 0 R (id2812588) 4068 0 R (id2814040) 4013 0 R (id2815227) 4081 0 R (id2815332) 4086 0 R (id2815339) 4087 0 R (id2815377) 4088 0 R (id2815427) 4089 0 R (id2815498) 4094 0 R (id2815561) 4095 0 R (id2815588) 4096 0 R (id2815715) 4114 0 R (id2815785) 4116 0 R (id2815806) 4117 0 R (id2815829) 4123 0 R (id2815855) 4124 0 R (id2815956) 4125 0 R (id2816006) 4130 0 R (id2816020) 4131 0 R (id2816052) 4132 0 R (id2816085) 4133 0 R (id2816130) 4138 0 R (id2816226) 4144 0 R (id2816386) 4149 0 R (id2816655) 4143 0 R (id2817633) 4102 0 R (id2817797) 4108 0 R (id2817825) 4109 0 R (id2818170) 4156 0 R (id2818367) 4168 0 R (id2818422) 4170 0 R (id2818435) 4171 0 R (id2818503) 4172 0 R (id2818544) 4173 0 R (id2818619) 4181 0 R (id2818629) 4182 0 R (id2821295) 4193 0 R (id2821434) 4202 0 R (id2821517) 4203 0 R (id2821714) 4213 0 R (id2821865) 4220 0 R (id2821887) 4221 0 R (id2821914) 4222 0 R (id2821946) 4223 0 R (id2822096) 4240 0 R (id2822144) 4241 0 R (id2822356) 4251 0 R (id2822409) 4290 0 R (id2822542) 4291 0 R (id2822668) 4296 0 R (id2822724) 4256 0 R (id2823077) 4267 0 R (id2823156) 4272 0 R (id2823388) 4233 0 R (id2823426) 4234 0 R (id2823494) 4239 0 R (id2824054) 4301 0 R (id2824319) 4313 0 R (id2824475) 4318 0 R (id2824493) 4319 0 R (id2827261) 4277 0 R (id2827277) 4278 0 R (id2827439) 4279 0 R (id2827994) 4320 0 R (id2828102) 4325 0 R (id2828163) 4326 0 R (id2828322) 4332 0 R (id2828516) 4337 0 R (id2828542) 4338 0 R (id2828626) 4339 0 R (id2828639) 4344 0 R (id2828706) 4345 0 R (id2828844) 4351 0 R (id2828890) 4352 0 R (id2828997) 4357 0 R (id2829077) 4358 0 R (id2829126) 4363 0 R (id2829241) 4368 0 R (id2829351) 4370 0 R (id2829450) 4376 0 R (id2829550) 4378 0 R (id2829692) 4387 0 R (id2829707) 4388 0 R (id2829736) 4389 0 R (id2830003) 4400 0 R (id2830066) 4405 0 R (id2830219) 4410 0 R (id2830273) 4411 0 R (id2830310) 4412 0 R (id2830366) 4417 0 R (id2830397) 4418 0 R (id2830663) 4419 0 R (id2830797) 4425 0 R (id2830832) 4432 0 R (id2830872) 4433 0 R (id2833113) 4395 0 R (id2835315) 4435 0 R (id2835343) 4436 0 R (id2835492) 4448 0 R (id2835517) 4450 0 R (id2835626) 4456 0 R (id2835814) 4461 0 R (id2835943) 4466 0 R (id2836121) 4481 0 R (id2836158) 4487 0 R (id2836293) 4489 0 R (id2836309) 4523 0 R (id2836656) 4495 0 R (id2836718) 4496 0 R (id2836831) 4502 0 R (id2836852) 4503 0 R (id2836916) 4504 0 R (id2836992) 4530 0 R (id2837117) 4536 0 R (id2837498) 4509 0 R (id2837529) 4510 0 R (id2837637) 4511 0 R (id2837644) 4512 0 R (id2837659) 4513 0 R (id2837719) 4518 0 R (id2837891) 4542 0 R (id2837992) 4543 0 R (id2838180) 4551 0 R (id2838246) 4556 0 R (id2838260) 4557 0 R (id2838282) 4559 0 R (id2838327) 4560 0 R (id2838401) 4565 0 R (id2838417) 4566 0 R (id2838477) 4567 0 R (id2838722) 4587 0 R (id2838740) 4588 0 R (id2838818) 4590 0 R (id2839145) 4600 0 R (id2839224) 4601 0 R (id2839252) 4602 0 R (id2839310) 4608 0 R (id2839524) 4603 0 R (id2839543) 4617 0 R (id2839770) 4610 0 R (id2839791) 4624 0 R (id2841663) 4573 0 R (id2841788) 4578 0 R (id2841806) 4579 0 R (id2844354) 4611 0 R (id2844426) 4619 0 R (id2844439) 4626 0 R (id2844522) 4629 0 R (id2844725) 4637 0 R (id2844733) 4638 0 R (id2844771) 4643 0 R (id2844850) 4644 0 R (id2844972) 4645 0 R (id2845063) 4650 0 R (id2845155) 4651 0 R (id2845200) 4652 0 R (id2845352) 4657 0 R (id2845682) 4667 0 R (id2845757) 4668 0 R (id2845771) 4669 0 R (id2846150) 4684 0 R (id2846491) 4705 0 R (id2846516) 4706 0 R (id2846545) 4707 0 R (id2846571) 4708 0 R (id2846604) 4709 0 R (id2846626) 4714 0 R (id2846653) 4715 0 R (id2846730) 4716 0 R (id2846773) 4717 0 R (id2846832) 4722 0 R (id2846941) 4727 0 R (id2846954) 4728 0 R (id2847016) 4729 0 R (id2847200) 4734 0 R (id2848271) 4689 0 R (id2848326) 4690 0 R (id2848457) 4695 0 R (id2849637) 4744 0 R (id2849664) 4745 0 R (id2849743) 4750 0 R (id2849774) 4751 0 R (id2849847) 4756 0 R (id2849877) 4757 0 R (id2849995) 4771 0 R (id2850013) 4772 0 R (id2850082) 4777 0 R (id2850133) 4778 0 R (id2850183) 4779 0 R (id2850240) 4784 0 R (id2850305) 4785 0 R (id2850344) 4791 0 R (id2850367) 4793 0 R (id2850386) 4794 0 R (id2850411) 4795 0 R (id2850597) 4820 0 R (id2850612) 4821 0 R (id2850710) 4826 0 R (id2850929) 4800 0 R (id2850957) 4801 0 R (id2851041) 4806 0 R (id2851053) 4807 0 R (id2851302) 4769 0 R (id2851335) 4770 0 R (id2852120) 4835 0 R (id2852282) 4860 0 R (id2852390) 4861 0 R (id2852483) 4866 0 R (id2853028) 4808 0 R (id2853065) 4809 0 R (id2853092) 4810 0 R (id2853219) 4815 0 R (id2853641) 4840 0 R (id2853706) 4841 0 R (id2853742) 4846 0 R (id2853812) 4854 0 R (id2854489) 4867 0 R (id2854572) 4872 0 R (id2854879) 4883 0 R (id2854971) 4896 0 R (id2854984) 4897 0 R (id2856922) 4855 0 R (id2864445) 4902 0 R (id2864774) 4907 0 R (id2864994) 4908 0 R (id2865046) 4914 0 R (id2865094) 4915 0 R (id2865571) 4920 0 R (id2865848) 4925 0 R (id2866003) 4928 0 R (id2866154) 4933 0 R (id2866267) 4934 0 R (id2866338) 4939 0 R (id2866558) 4944 0 R (id2866720) 4950 0 R (id2866814) 4951 0 R (id2866998) 4956 0 R (id2867106) 4961 0 R (id2867434) 4970 0 R (id2867587) 4971 0 R (id2867790) 4976 0 R (id2867906) 4981 0 R (id2868005) 4987 0 R (id2868129) 4992 0 R (id2868333) 4993 0 R (id2868444) 4998 0 R (id2868596) 5003 0 R (id2868617) 5004 0 R (id2868814) 5009 0 R (id2869104) 5014 0 R (id2869199) 5015 0 R (id2869341) 5021 0 R (id2869374) 5022 0 R (id2869808) 5042 0 R (id2870110) 5051 0 R (id2870354) 5052 0 R (id2870452) 5057 0 R (id2870723) 5071 0 R (id2870793) 5072 0 R (id2870816) 5073 0 R (id2870861) 5076 0 R (id2870902) 5081 0 R (id2870921) 5082 0 R (id2870946) 5083 0 R (id2871098) 5091 0 R (id2871427) 5097 0 R (id2871472) 5098 0 R (id2871641) 5104 0 R (id2871655) 5105 0 R (id2871668) 5106 0 R (id2871702) 5107 0 R (id2871820) 5129 0 R (id2871881) 5134 0 R (id2871980) 5139 0 R (id2871999) 5140 0 R (id2872026) 5141 0 R (id2872063) 5146 0 R (id2872121) 5147 0 R (id2872282) 5152 0 R (id2872376) 5153 0 R (id2872451) 5160 0 R (id2872495) 5161 0 R (id2872560) 5167 0 R (id2872594) 5162 0 R (id2872665) 5179 0 R (id2872712) 5180 0 R (id2872762) 5189 0 R (id2872792) 5190 0 R (id2872858) 5198 0 R (id2878722) 5113 0 R (id2878729) 5114 0 R (id2878777) 5116 0 R (id2878829) 5118 0 R (id2878908) 5125 0 R (id2885674) 5203 0 R (id2885764) 5206 0 R (id2885786) 5207 0 R (id2885924) 5216 0 R (id2886112) 5221 0 R (id2886228) 5226 0 R (id2886398) 5227 0 R (id2886448) 5234 0 R (id2886482) 5237 0 R (id2886513) 5244 0 R (id2886585) 5247 0 R (id2886615) 5254 0 R (id2886667) 5264 0 R (id2886741) 5267 0 R (id2886762) 5724 0 R (id2886796) 5268 0 R (id2886847) 5732 0 R (id2886881) 5275 0 R (id2887195) 5280 0 R (id2887298) 5285 0 R (id2887313) 5286 0 R (id2887366) 5287 0 R (id2887421) 5288 0 R (id2887636) 5298 0 R (id2887863) 5299 0 R (id2887914) 5740 0 R (id2888020) 5307 0 R (id2888249) 5312 0 R (id2888374) 5324 0 R (id2888436) 5327 0 R (id2888452) 5328 0 R (id2888491) 5329 0 R (id2888516) 5748 0 R (id2888550) 5336 0 R (id2888572) 5757 0 R (id2888613) 5337 0 R (id2888634) 5338 0 R (id2888760) 5765 0 R (id2888794) 5339 0 R (id2888872) 5344 0 R (id2888927) 5346 0 R (id2888968) 5347 0 R (id2889034) 5352 0 R (id2889051) 5353 0 R (id2889085) 5354 0 R (id2889106) 5355 0 R (id2889133) 5356 0 R (id2889167) 5362 0 R (id2889186) 5363 0 R (id2889278) 5364 0 R (id2889324) 5369 0 R (id2889521) 5376 0 R (id2889579) 5381 0 R (id2889612) 5382 0 R (id2889662) 5388 0 R (id2889883) 5397 0 R (id2890064) 5403 0 R (id2890165) 5408 0 R (id2890308) 5413 0 R (id2890402) 5423 0 R (id2890490) 5427 0 R (id2890524) 5428 0 R (id2890541) 5773 0 R (id2890575) 5433 0 R (id2890690) 5434 0 R (id2890824) 5439 0 R (id2890939) 5444 0 R (id2891051) 5453 0 R (id2891130) 5454 0 R (id2891220) 5459 0 R (id2891382) 5464 0 R (id2891399) 5465 0 R (id2891429) 5466 0 R (id2891492) 5467 0 R (id2891530) 5472 0 R (id2891582) 5473 0 R (id2891619) 5478 0 R (id2891674) 5479 0 R (id2891707) 5480 0 R (id2891740) 5485 0 R (id2891791) 5486 0 R (id2891847) 5492 0 R (id2891908) 5493 0 R (id2891939) 5494 0 R (id2891964) 5499 0 R (id2891982) 5500 0 R (id2892002) 5501 0 R (id2892104) 5506 0 R (id2892207) 5507 0 R (id2892278) 5508 0 R (id2892340) 5509 0 R (id2892398) 5514 0 R (id2892460) 5515 0 R (id2892566) 5523 0 R (id2892621) 5527 0 R (id2892646) 5528 0 R (id2892691) 5535 0 R (id2892758) 5536 0 R (id2892890) 5553 0 R (id2892978) 5559 0 R (id2893056) 5567 0 R (id2893129) 5572 0 R (id2893194) 5575 0 R (id2893652) 5613 0 R (id2893683) 5618 0 R (id2893714) 5619 0 R (id2893755) 5621 0 R (id2893827) 5622 0 R (id2893929) 5627 0 R (id2894000) 5628 0 R (id2894048) 5634 0 R (id2894063) 5635 0 R (id2894257) 5640 0 R (id2894302) 5641 0 R (id2894384) 5642 0 R (id2894445) 5647 0 R (id2894463) 5648 0 R (id2894481) 5649 0 R (id2894516) 5650 0 R (id2894528) 5651 0 R (id2894541) 5652 0 R (id2894555) 5657 0 R (id2894562) 5658 0 R (id2894756) 5663 0 R (id2895010) 5689 0 R (id2896116) 5719 0 R (id2896127) 5780 0 R (id2896229) 5794 0 R (id2896236) 5795 0 R (id2896275) 5796 0 R (id2896314) 5797 0 R (id2896396) 5799 0 R (id2896416) 5800 0 R (id2896554) 5806 0 R (id2896600) 5807 0 R (id2896622) 5808 0 R (id2896677) 5811 0 R (id2896706) 5813 0 R (id2896747) 5834 0 R (id2896818) 5839 0 R (id2896853) 5840 0 R (id2896881) 5841 0 R (id2896909) 5843 0 R (id2896984) 5848 0 R (id2897201) 5818 0 R (id2897229) 5819 0 R (id2897535) 5788 0 R (id2897553) 5789 0 R (id2898260) 5850 0 R (id2898322) 5851 0 R (id2898434) 5857 0 R (id2898641) 5858 0 R (id2898713) 5866 0 R (id2898826) 5867 0 R (id2899263) 5820 0 R (id2899322) 5825 0 R (id2899353) 5826 0 R (id2899381) 5827 0 R (id2899414) 5832 0 R (id2899437) 5833 0 R (id2901722) 5868 0 R (id2901963) 5873 0 R (id2901970) 5875 0 R (id2902116) 5885 0 R (id2902204) 5893 0 R (id2902241) 5894 0 R (id2902347) 5896 0 R (id2902570) 5903 0 R (id2902662) 5912 0 R (id2902681) 5913 0 R (id2902769) 5924 0 R (id2902785) 5925 0 R (id2902985) 5937 0 R (id2903180) 5951 0 R (id2903212) 5953 0 R (id2903321) 5966 0 R (id2903430) 5971 0 R (id2903454) 5972 0 R (id2903555) 5973 0 R (id2903610) 5958 0 R (id2903662) 5959 0 R (id2903773) 5965 0 R (id2904055) 5918 0 R (id2904086) 5919 0 R (id2904897) 5982 0 R (id2904998) 5988 0 R (id2905018) 5989 0 R (id2905039) 5990 0 R (id2905084) 5991 0 R (id2905230) 6005 0 R (id2905244) 6006 0 R (id2905347) 6011 0 R (id2905381) 6012 0 R (id2905421) 6013 0 R (id2905434) 6014 0 R (id2905524) 6019 0 R (id2906992) 6044 0 R (id2907150) 6045 0 R (id2910597) 6020 0 R (id2910633) 6021 0 R (id2910783) 6026 0 R (id2910790) 6027 0 R (id2911720) 6081 0 R (id2911784) 6086 0 R (id2911801) 6087 0 R (id2911965) 6095 0 R (id2911986) 6100 0 R (id2912003) 6101 0 R (id2912044) 6102 0 R (id2912102) 6103 0 R (id2912148) 6108 0 R (id2912168) 6109 0 R (id2912265) 6110 0 R (id2912316) 6111 0 R (id2912663) 6125 0 R (id2912808) 6127 0 R (id2912869) 6129 0 R (id2913062) 6138 0 R (id2913374) 6140 0 R (id2913386) 6141 0 R (id2913449) 6146 0 R (id2913668) 6147 0 R (id2913980) 6163 0 R (id2913996) 6164 0 R (id2914052) 6169 0 R (id2914662) 6183 0 R (id2914692) 6184 0 R (id2914719) 6185 0 R (id2915125) 6158 0 R (id2917094) 6195 0 R (id2917151) 6198 0 R (id2917235) 6203 0 R (id2917266) 6204 0 R (id2917467) 6213 0 R (id2917500) 6214 0 R (id2917536) 6219 0 R (id2917567) 6220 0 R (id2917602) 6221 0 R (id2917615) 6222 0 R (id2917754) 6245 0 R (id2917796) 6246 0 R (id2917885) 6251 0 R (id2918010) 6256 0 R (id2918055) 6257 0 R (id2918169) 6267 0 R (id2918201) 6268 0 R (id2918226) 6269 0 R (id2918297) 6274 0 R (id2918312) 6275 0 R (id2918344) 6276 0 R (id2918395) 6277 0 R (id2918550) 6286 0 R (id2918592) 6287 0 R (id2918660) 6289 0 R (id2918761) 6294 0 R (id2918807) 6295 0 R (id2919359) 6232 0 R (id2919384) 6233 0 R (id2919428) 6238 0 R (id2919480) 6239 0 R (id2919604) 6244 0 R (id2920614) 6333 0 R (id2920668) 6334 0 R (id2920729) 6339 0 R (id2920786) 6340 0 R (id2920815) 6341 0 R (id2920840) 6347 0 R (id2921233) 6309 0 R (id2921402) 6302 0 R (id2921422) 6303 0 R (id2921888) 6327 0 R (id2921912) 6328 0 R (id2922568) 6319 0 R (id2922591) 6321 0 R (id2922644) 6322 0 R (id2923057) 6367 0 R (id2923072) 6368 0 R (id2923138) 6370 0 R (id2923209) 6375 0 R (id2923380) 6377 0 R (id2923536) 6387 0 R (id2923686) 6386 0 R (id2924426) 6392 0 R (id2924538) 6402 0 R (id2924602) 6404 0 R (id2924707) 6405 0 R (id2924772) 6411 0 R (id2924837) 6412 0 R (id2924884) 6413 0 R (id2924936) 6414 0 R (id2924959) 6415 0 R (id2925080) 6425 0 R (id2925114) 6426 0 R (id2925287) 6431 0 R (id2928839) 6465 0 R (id2928958) 6474 0 R (id2929241) 6479 0 R (id2929285) 6483 0 R (id2929438) 6490 0 R (id2929553) 6509 0 R (id2929670) 6521 0 R (id2929677) 6522 0 R (id2929706) 6525 0 R (id2929721) 6526 0 R (id2929752) 6528 0 R (id2929943) 6507 0 R (id2930051) 6508 0 R (id2930232) 6471 0 R (id2931174) 6540 0 R (id2931222) 6545 0 R (id2931358) 6546 0 R (id2931495) 6551 0 R (id2931751) 6497 0 R (id2931811) 6500 0 R (id2931847) 6502 0 R (id2932304) 6552 0 R (id2932337) 6553 0 R (id2932390) 6558 0 R (id2932482) 6559 0 R (id2932686) 6564 0 R (id2932780) 6565 0 R (id2934060) 6571 0 R (id2934145) 6572 0 R (id2934173) 6574 0 R (id2934342) 6579 0 R (id2934386) 6584 0 R (id2934393) 6585 0 R (id2934419) 6586 0 R (id2934426) 6587 0 R (id2934515) 6611 0 R (id2934605) 6612 0 R (id2934636) 6617 0 R (id2934681) 6618 0 R (id2934711) 6620 0 R (id2934729) 6621 0 R (id2934775) 6622 0 R (id2934897) 6605 0 R (id2934956) 6609 0 R (id2935054) 6610 0 R (id2935202) 6592 0 R (id2935274) 6598 0 R (id2935281) 6599 0 R (id2935805) 6628 0 R (id2935829) 6629 0 R (id2935939) 6631 0 R (id2935991) 6638 0 R (id2936061) 6639 0 R (id2936105) 6644 0 R (id2936158) 6645 0 R (id2936181) 6646 0 R (id2936237) 6647 0 R (id2936279) 6648 0 R (id2937187) 6653 0 R (id2937210) 6655 0 R (id2937243) 6656 0 R (id2937381) 6666 0 R (id2937764) 6691 0 R (id2937832) 6695 0 R (id2937961) 6661 0 R (id2938151) 6637 0 R (install) 2948 0 R (integrate-ms-networks) 3028 0 R (introduction) 3862 0 R (locking) 2960 0 R (migration) 6318 0 R (msdfs) 3019 0 R (optional) 4266 0 R (page.1) 2861 0 R (page.10) 3267 0 R (page.100) 4455 0 R (page.101) 4460 0 R (page.102) 4465 0 R (page.103) 4480 0 R (page.104) 4486 0 R (page.105) 4494 0 R (page.106) 4500 0 R (page.107) 4508 0 R (page.108) 4517 0 R (page.109) 4522 0 R (page.11) 3320 0 R (page.110) 4529 0 R (page.111) 4535 0 R (page.112) 4541 0 R (page.113) 4547 0 R (page.114) 4555 0 R (page.115) 4564 0 R (page.116) 4572 0 R (page.117) 4577 0 R (page.118) 4583 0 R (page.119) 4594 0 R (page.12) 3370 0 R (page.120) 4598 0 R (page.121) 4607 0 R (page.122) 4616 0 R (page.123) 4623 0 R (page.124) 4633 0 R (page.125) 4642 0 R (page.126) 4649 0 R (page.127) 4656 0 R (page.128) 4666 0 R (page.129) 4675 0 R (page.13) 3423 0 R (page.130) 4683 0 R (page.131) 4688 0 R (page.132) 4694 0 R (page.133) 4699 0 R (page.134) 4704 0 R (page.135) 4713 0 R (page.136) 4721 0 R (page.137) 4726 0 R (page.138) 4733 0 R (page.139) 4738 0 R (page.14) 3475 0 R (page.140) 4743 0 R (page.141) 4749 0 R (page.142) 4755 0 R (page.143) 4768 0 R (page.144) 4776 0 R (page.145) 4783 0 R (page.146) 4790 0 R (page.147) 4799 0 R (page.148) 4805 0 R (page.149) 4814 0 R (page.15) 3527 0 R (page.150) 4819 0 R (page.151) 4825 0 R (page.152) 4834 0 R (page.153) 4839 0 R (page.154) 4845 0 R (page.155) 4859 0 R (page.156) 4865 0 R (page.157) 4871 0 R (page.158) 4877 0 R (page.159) 4882 0 R (page.16) 3573 0 R (page.160) 4887 0 R (page.161) 4895 0 R (page.162) 4901 0 R (page.163) 4906 0 R (page.164) 4913 0 R (page.165) 4919 0 R (page.166) 4924 0 R (page.167) 4932 0 R (page.168) 4938 0 R (page.169) 4943 0 R (page.17) 3626 0 R (page.170) 4949 0 R (page.171) 4955 0 R (page.172) 4965 0 R (page.173) 4969 0 R (page.174) 4975 0 R (page.175) 4980 0 R (page.176) 4986 0 R (page.177) 4991 0 R (page.178) 4997 0 R (page.179) 5002 0 R (page.18) 3678 0 R (page.180) 5008 0 R (page.181) 5013 0 R (page.182) 5020 0 R (page.183) 5041 0 R (page.184) 5046 0 R (page.185) 5050 0 R (page.186) 5056 0 R (page.187) 5061 0 R (page.188) 5066 0 R (page.189) 5070 0 R (page.19) 3729 0 R (page.190) 5080 0 R (page.191) 5090 0 R (page.192) 5096 0 R (page.193) 5102 0 R (page.194) 5112 0 R (page.195) 5122 0 R (page.196) 5133 0 R (page.197) 5138 0 R (page.198) 5145 0 R (page.199) 5151 0 R (page.2) 2873 0 R (page.20) 3774 0 R (page.200) 5159 0 R (page.201) 5166 0 R (page.202) 5178 0 R (page.203) 5188 0 R (page.204) 5197 0 R (page.205) 5202 0 R (page.206) 5212 0 R (page.207) 5220 0 R (page.208) 5225 0 R (page.209) 5233 0 R (page.21) 3822 0 R (page.210) 5243 0 R (page.211) 5253 0 R (page.212) 5263 0 R (page.213) 5274 0 R (page.214) 5279 0 R (page.215) 5284 0 R (page.216) 5292 0 R (page.217) 5297 0 R (page.218) 5304 0 R (page.219) 5311 0 R (page.22) 3857 0 R (page.220) 5323 0 R (page.221) 5335 0 R (page.222) 5343 0 R (page.223) 5351 0 R (page.224) 5361 0 R (page.225) 5368 0 R (page.226) 5375 0 R (page.227) 5380 0 R (page.228) 5387 0 R (page.229) 5392 0 R (page.23) 3861 0 R (page.230) 5402 0 R (page.231) 5407 0 R (page.232) 5412 0 R (page.233) 5422 0 R (page.234) 5432 0 R (page.235) 5438 0 R (page.236) 5452 0 R (page.237) 5458 0 R (page.238) 5463 0 R (page.239) 5471 0 R (page.24) 3868 0 R (page.240) 5477 0 R (page.241) 5484 0 R (page.242) 5491 0 R (page.243) 5498 0 R (page.244) 5505 0 R (page.245) 5513 0 R (page.246) 5520 0 R (page.247) 5534 0 R (page.248) 5552 0 R (page.249) 5566 0 R (page.25) 3874 0 R (page.250) 5580 0 R (page.251) 5607 0 R (page.252) 5617 0 R (page.253) 5626 0 R (page.254) 5633 0 R (page.255) 5639 0 R (page.256) 5646 0 R (page.257) 5656 0 R (page.258) 5662 0 R (page.259) 5667 0 R (page.26) 3885 0 R (page.260) 5672 0 R (page.261) 5676 0 R (page.262) 5680 0 R (page.263) 5684 0 R (page.264) 5688 0 R (page.265) 5693 0 R (page.266) 5698 0 R (page.267) 5718 0 R (page.268) 5723 0 R (page.269) 5731 0 R (page.27) 3891 0 R (page.270) 5739 0 R (page.271) 5747 0 R (page.272) 5756 0 R (page.273) 5764 0 R (page.274) 5772 0 R (page.275) 5779 0 R (page.276) 5787 0 R (page.277) 5793 0 R (page.278) 5805 0 R (page.279) 5817 0 R (page.28) 3902 0 R (page.280) 5824 0 R (page.281) 5831 0 R (page.282) 5838 0 R (page.283) 5847 0 R (page.284) 5856 0 R (page.285) 5862 0 R (page.286) 5872 0 R (page.287) 5879 0 R (page.288) 5883 0 R (page.289) 5891 0 R (page.29) 3915 0 R (page.290) 5901 0 R (page.291) 5907 0 R (page.292) 5911 0 R (page.293) 5917 0 R (page.294) 5929 0 R (page.295) 5936 0 R (page.296) 5943 0 R (page.297) 5947 0 R (page.298) 5957 0 R (page.299) 5963 0 R (page.3) 2887 0 R (page.30) 3921 0 R (page.300) 5970 0 R (page.301) 5977 0 R (page.302) 5987 0 R (page.303) 6001 0 R (page.304) 6010 0 R (page.305) 6018 0 R (page.306) 6025 0 R (page.307) 6032 0 R (page.308) 6043 0 R (page.309) 6059 0 R (page.31) 3926 0 R (page.310) 6063 0 R (page.311) 6085 0 R (page.312) 6099 0 R (page.313) 6107 0 R (page.314) 6116 0 R (page.315) 6124 0 R (page.316) 6133 0 R (page.317) 6137 0 R (page.318) 6145 0 R (page.319) 6151 0 R (page.32) 3932 0 R (page.320) 6156 0 R (page.321) 6162 0 R (page.322) 6168 0 R (page.323) 6174 0 R (page.324) 6178 0 R (page.325) 6182 0 R (page.326) 6190 0 R (page.327) 6194 0 R (page.328) 6202 0 R (page.329) 6209 0 R (page.33) 3936 0 R (page.330) 6218 0 R (page.331) 6226 0 R (page.332) 6231 0 R (page.333) 6237 0 R (page.334) 6243 0 R (page.335) 6250 0 R (page.336) 6255 0 R (page.337) 6261 0 R (page.338) 6266 0 R (page.339) 6273 0 R (page.34) 3943 0 R (page.340) 6281 0 R (page.341) 6285 0 R (page.342) 6293 0 R (page.343) 6301 0 R (page.344) 6308 0 R (page.345) 6313 0 R (page.346) 6317 0 R (page.347) 6326 0 R (page.348) 6332 0 R (page.349) 6338 0 R (page.35) 3951 0 R (page.350) 6346 0 R (page.351) 6374 0 R (page.352) 6381 0 R (page.353) 6385 0 R (page.354) 6391 0 R (page.355) 6401 0 R (page.356) 6410 0 R (page.357) 6419 0 R (page.358) 6423 0 R (page.359) 6430 0 R (page.36) 3961 0 R (page.360) 6438 0 R (page.361) 6444 0 R (page.362) 6461 0 R (page.363) 6470 0 R (page.364) 6478 0 R (page.365) 6489 0 R (page.366) 6496 0 R (page.367) 6506 0 R (page.368) 6514 0 R (page.369) 6518 0 R (page.37) 3979 0 R (page.370) 6537 0 R (page.371) 6550 0 R (page.372) 6557 0 R (page.373) 6563 0 R (page.374) 6570 0 R (page.375) 6578 0 R (page.376) 6583 0 R (page.377) 6591 0 R (page.378) 6604 0 R (page.379) 6616 0 R (page.38) 3989 0 R (page.380) 6627 0 R (page.381) 6636 0 R (page.382) 6643 0 R (page.383) 6652 0 R (page.384) 6660 0 R (page.385) 6665 0 R (page.39) 3998 0 R (page.4) 2965 0 R (page.40) 4004 0 R (page.41) 4012 0 R (page.42) 4017 0 R (page.43) 4024 0 R (page.44) 4032 0 R (page.45) 4037 0 R (page.46) 4045 0 R (page.47) 4053 0 R (page.48) 4057 0 R (page.49) 4066 0 R (page.5) 3040 0 R (page.50) 4073 0 R (page.51) 4085 0 R (page.52) 4093 0 R (page.53) 4100 0 R (page.54) 4107 0 R (page.55) 4113 0 R (page.56) 4122 0 R (page.57) 4129 0 R (page.58) 4137 0 R (page.59) 4142 0 R (page.6) 3070 0 R (page.60) 4148 0 R (page.61) 4154 0 R (page.62) 4167 0 R (page.63) 4179 0 R (page.64) 4191 0 R (page.65) 4199 0 R (page.66) 4207 0 R (page.67) 4219 0 R (page.68) 4228 0 R (page.69) 4232 0 R (page.7) 3109 0 R (page.70) 4238 0 R (page.71) 4250 0 R (page.72) 4255 0 R (page.73) 4260 0 R (page.74) 4265 0 R (page.75) 4271 0 R (page.76) 4276 0 R (page.77) 4283 0 R (page.78) 4295 0 R (page.79) 4300 0 R (page.8) 3162 0 R (page.80) 4306 0 R (page.81) 4312 0 R (page.82) 4324 0 R (page.83) 4331 0 R (page.84) 4336 0 R (page.85) 4343 0 R (page.86) 4350 0 R (page.87) 4356 0 R (page.88) 4362 0 R (page.89) 4367 0 R (page.9) 3212 0 R (page.90) 4375 0 R (page.91) 4386 0 R (page.92) 4394 0 R (page.93) 4399 0 R (page.94) 4404 0 R (page.95) 4409 0 R (page.96) 4416 0 R (page.97) 4423 0 R (page.98) 4431 0 R (page.99) 4440 0 R (pam) 3027 0 R (part.1) 6 0 R (part.2) 98 0 R (part.3) 454 0 R (part.4) 2418 0 R (part.5) 2534 0 R (part.6) 2610 0 R (passdb) 2957 0 R (printing) 3020 0 R (problems) 3036 0 R (samba-bdc) 2952 0 R (samba-pdc) 2951 0 R (section*.2) 5874 0 R (section*.3) 5884 0 R (section*.4) 5892 0 R (section*.5) 5895 0 R (section*.6) 5902 0 R (section.1.1) 14 0 R (section.1.2) 18 0 R (section.1.3) 22 0 R (section.1.4) 26 0 R (section.1.5) 30 0 R (section.1.6) 34 0 R (section.10.1) 462 0 R (section.10.2) 466 0 R (section.10.3) 470 0 R (section.10.4) 486 0 R (section.10.5) 522 0 R (section.10.6) 538 0 R (section.10.7) 550 0 R (section.10.8) 570 0 R (section.11.1) 586 0 R (section.11.2) 590 0 R (section.11.3) 610 0 R (section.11.4) 622 0 R (section.11.5) 706 0 R (section.12.1) 726 0 R (section.12.2) 730 0 R (section.12.3) 738 0 R (section.12.4) 750 0 R (section.13.1) 766 0 R (section.13.2) 770 0 R (section.13.3) 786 0 R (section.13.4) 802 0 R (section.13.5) 818 0 R (section.13.6) 858 0 R (section.14.1) 874 0 R (section.14.2) 878 0 R (section.14.3) 922 0 R (section.14.4) 938 0 R (section.14.5) 950 0 R (section.14.6) 954 0 R (section.14.7) 962 0 R (section.15.1) 970 0 R (section.15.2) 974 0 R (section.15.3) 978 0 R (section.15.4) 1006 0 R (section.15.5) 1010 0 R (section.16.1) 1026 0 R (section.16.2) 1030 0 R (section.16.3) 1034 0 R (section.16.4) 1046 0 R (section.16.5) 1058 0 R (section.17.1) 1070 0 R (section.17.2) 1074 0 R (section.18.1) 1082 0 R (section.18.10) 1278 0 R (section.18.11) 1298 0 R (section.18.12) 1302 0 R (section.18.13) 1306 0 R (section.18.14) 1310 0 R (section.18.15) 1314 0 R (section.18.2) 1086 0 R (section.18.3) 1110 0 R (section.18.4) 1122 0 R (section.18.5) 1126 0 R (section.18.6) 1154 0 R (section.18.7) 1178 0 R (section.18.8) 1226 0 R (section.18.9) 1246 0 R (section.19.1) 1330 0 R (section.19.10) 1558 0 R (section.19.11) 1626 0 R (section.19.12) 1714 0 R (section.19.13) 1734 0 R (section.19.14) 1778 0 R (section.19.15) 1810 0 R (section.19.16) 1814 0 R (section.19.17) 1830 0 R (section.19.18) 1834 0 R (section.19.19) 1850 0 R (section.19.2) 1342 0 R (section.19.3) 1358 0 R (section.19.4) 1382 0 R (section.19.5) 1418 0 R (section.19.6) 1498 0 R (section.19.7) 1514 0 R (section.19.8) 1526 0 R (section.19.9) 1538 0 R (section.2.1) 42 0 R (section.2.2) 46 0 R (section.2.3) 62 0 R (section.2.4) 66 0 R (section.2.5) 70 0 R (section.2.6) 74 0 R (section.2.7) 78 0 R (section.20.1) 1874 0 R (section.20.2) 1878 0 R (section.20.3) 1882 0 R (section.20.4) 1906 0 R (section.20.5) 1918 0 R (section.21.1) 1926 0 R (section.21.2) 1930 0 R (section.21.3) 1934 0 R (section.21.4) 1942 0 R (section.21.5) 1970 0 R (section.21.6) 2018 0 R (section.21.7) 2022 0 R (section.22.1) 2030 0 R (section.22.2) 2034 0 R (section.22.3) 2038 0 R (section.22.4) 2046 0 R (section.22.5) 2054 0 R (section.23.1) 2062 0 R (section.23.2) 2066 0 R (section.23.3) 2090 0 R (section.23.4) 2106 0 R (section.23.5) 2110 0 R (section.24.1) 2122 0 R (section.24.2) 2126 0 R (section.24.3) 2190 0 R (section.24.4) 2194 0 R (section.24.5) 2198 0 R (section.24.6) 2218 0 R (section.25.1) 2238 0 R (section.25.2) 2242 0 R (section.25.3) 2294 0 R (section.26.1) 2306 0 R (section.26.2) 2310 0 R (section.26.3) 2314 0 R (section.26.4) 2334 0 R (section.26.5) 2358 0 R (section.27.1) 2378 0 R (section.27.2) 2382 0 R (section.27.3) 2386 0 R (section.27.4) 2390 0 R (section.27.5) 2394 0 R (section.28.1) 2402 0 R (section.28.2) 2406 0 R (section.29.1) 2414 0 R (section.3.1) 94 0 R (section.30.1) 2426 0 R (section.30.2) 2430 0 R (section.30.3) 2434 0 R (section.31.1) 2442 0 R (section.31.2) 2474 0 R (section.32.1) 2490 0 R (section.33.1) 2542 0 R (section.33.2) 2546 0 R (section.33.3) 2550 0 R (section.33.4) 2554 0 R (section.34.1) 2562 0 R (section.34.2) 2566 0 R (section.34.3) 2570 0 R (section.34.4) 2574 0 R (section.34.5) 2578 0 R (section.35.1) 2586 0 R (section.35.2) 2590 0 R (section.35.3) 2594 0 R (section.35.4) 2598 0 R (section.35.5) 2602 0 R (section.35.6) 2606 0 R (section.36.1) 2618 0 R (section.36.2) 2638 0 R (section.36.3) 2642 0 R (section.36.4) 2646 0 R (section.36.5) 2662 0 R (section.36.6) 2674 0 R (section.37.1) 2682 0 R (section.37.2) 2686 0 R (section.37.3) 2690 0 R (section.37.4) 2694 0 R (section.37.5) 2698 0 R (section.37.6) 2706 0 R (section.38.1) 2722 0 R (section.38.2) 2726 0 R (section.38.3) 2742 0 R (section.38.4) 2770 0 R (section.38.5) 2778 0 R (section.38.6) 2782 0 R (section.39.1) 2790 0 R (section.39.10) 2826 0 R (section.39.11) 2830 0 R (section.39.2) 2794 0 R (section.39.3) 2798 0 R (section.39.4) 2802 0 R (section.39.5) 2806 0 R (section.39.6) 2810 0 R (section.39.7) 2814 0 R (section.39.8) 2818 0 R (section.39.9) 2822 0 R (section.4.1) 106 0 R (section.4.2) 110 0 R (section.4.3) 114 0 R (section.4.4) 158 0 R (section.4.5) 162 0 R (section.40.1) 2838 0 R (section.41.1) 2846 0 R (section.41.2) 2850 0 R (section.41.3) 2854 0 R (section.5.1) 186 0 R (section.5.2) 190 0 R (section.5.3) 202 0 R (section.5.4) 206 0 R (section.5.5) 210 0 R (section.5.6) 234 0 R (section.6.1) 266 0 R (section.6.2) 270 0 R (section.6.3) 294 0 R (section.6.4) 302 0 R (section.7.1) 326 0 R (section.7.2) 330 0 R (section.7.3) 362 0 R (section.7.4) 374 0 R (section.7.5) 406 0 R (section.8.1) 422 0 R (section.8.2) 426 0 R (section.8.3) 430 0 R (section.8.4) 442 0 R (section.9.1) 450 0 R (securing-samba) 2961 0 R (speed) 3064 0 R (subfigure.19.1.1) 5168 0 R (subfigure.19.10.1) 5741 0 R (subfigure.19.11.1) 5749 0 R (subfigure.19.12.1) 5758 0 R (subfigure.19.13.1) 5766 0 R (subfigure.19.14.1) 5774 0 R (subfigure.19.15.1) 5781 0 R (subfigure.19.2.1) 5181 0 R (subfigure.19.3.1) 5191 0 R (subfigure.19.4.1) 5235 0 R (subfigure.19.5.1) 5245 0 R (subfigure.19.6.1) 5255 0 R (subfigure.19.7.1) 5265 0 R (subfigure.19.8.1) 5725 0 R (subfigure.19.9.1) 5733 0 R (subsection.10.3.1) 474 0 R (subsection.10.3.2) 478 0 R (subsection.10.3.3) 482 0 R (subsection.10.4.1) 490 0 R (subsection.10.4.2) 494 0 R (subsection.10.4.3) 498 0 R (subsection.10.4.4) 502 0 R (subsection.10.4.5) 506 0 R (subsection.10.4.6) 510 0 R (subsection.10.4.7) 514 0 R (subsection.10.4.8) 518 0 R (subsection.10.5.1) 526 0 R (subsection.10.5.2) 530 0 R (subsection.10.5.3) 534 0 R (subsection.10.6.1) 542 0 R (subsection.10.6.2) 546 0 R (subsection.10.7.1) 554 0 R (subsection.10.7.2) 558 0 R (subsection.10.7.3) 562 0 R (subsection.10.8.1) 574 0 R (subsection.10.8.2) 578 0 R (subsection.11.2.1) 594 0 R (subsection.11.2.2) 606 0 R (subsection.11.3.1) 614 0 R (subsection.11.3.2) 618 0 R (subsection.11.4.1) 626 0 R (subsection.11.4.2) 630 0 R (subsection.11.4.3) 634 0 R (subsection.11.4.4) 638 0 R (subsection.11.4.5) 682 0 R (subsection.11.4.6) 702 0 R (subsection.11.5.1) 710 0 R (subsection.11.5.2) 714 0 R (subsection.11.5.3) 718 0 R (subsection.12.2.1) 734 0 R (subsection.12.3.1) 742 0 R (subsection.12.3.2) 746 0 R (subsection.12.4.1) 754 0 R (subsection.12.4.2) 758 0 R (subsection.13.2.1) 774 0 R (subsection.13.2.2) 778 0 R (subsection.13.2.3) 782 0 R (subsection.13.3.1) 790 0 R (subsection.13.3.2) 794 0 R (subsection.13.3.3) 798 0 R (subsection.13.4.1) 806 0 R (subsection.13.5.1) 822 0 R (subsection.13.5.2) 826 0 R (subsection.13.5.3) 830 0 R (subsection.13.5.4) 834 0 R (subsection.13.5.5) 846 0 R (subsection.13.5.6) 850 0 R (subsection.13.5.7) 854 0 R (subsection.13.6.1) 862 0 R (subsection.13.6.2) 866 0 R (subsection.14.2.1) 882 0 R (subsection.14.3.1) 926 0 R (subsection.14.4.1) 942 0 R (subsection.14.4.2) 946 0 R (subsection.14.6.1) 958 0 R (subsection.15.3.1) 982 0 R (subsection.15.3.2) 986 0 R (subsection.15.3.3) 990 0 R (subsection.15.3.4) 994 0 R (subsection.15.3.5) 998 0 R (subsection.15.3.6) 1002 0 R (subsection.15.5.1) 1014 0 R (subsection.15.5.2) 1018 0 R (subsection.16.3.1) 1038 0 R (subsection.16.3.2) 1042 0 R (subsection.16.4.1) 1050 0 R (subsection.16.4.2) 1054 0 R (subsection.16.5.1) 1062 0 R (subsection.18.10.1) 1282 0 R (subsection.18.10.2) 1286 0 R (subsection.18.10.3) 1290 0 R (subsection.18.10.4) 1294 0 R (subsection.18.15.1) 1318 0 R (subsection.18.15.2) 1322 0 R (subsection.18.2.1) 1090 0 R (subsection.18.2.2) 1094 0 R (subsection.18.2.3) 1098 0 R (subsection.18.2.4) 1102 0 R (subsection.18.2.5) 1106 0 R (subsection.18.3.1) 1114 0 R (subsection.18.3.2) 1118 0 R (subsection.18.5.1) 1130 0 R (subsection.18.5.2) 1134 0 R (subsection.18.5.3) 1138 0 R (subsection.18.5.4) 1142 0 R (subsection.18.5.5) 1146 0 R (subsection.18.5.6) 1150 0 R (subsection.18.6.1) 1158 0 R (subsection.18.6.2) 1162 0 R (subsection.18.6.3) 1166 0 R (subsection.18.6.4) 1170 0 R (subsection.18.6.5) 1174 0 R (subsection.18.7.1) 1182 0 R (subsection.18.7.2) 1186 0 R (subsection.18.8.1) 1230 0 R (subsection.18.8.2) 1234 0 R (subsection.18.8.3) 1238 0 R (subsection.18.8.4) 1242 0 R (subsection.18.9.1) 1250 0 R (subsection.18.9.2) 1254 0 R (subsection.18.9.3) 1258 0 R (subsection.18.9.4) 1262 0 R (subsection.18.9.5) 1266 0 R (subsection.18.9.6) 1270 0 R (subsection.18.9.7) 1274 0 R (subsection.19.1.1) 1334 0 R (subsection.19.1.2) 1338 0 R (subsection.19.10.1) 1562 0 R (subsection.19.10.10) 1598 0 R (subsection.19.10.11) 1602 0 R (subsection.19.10.12) 1606 0 R (subsection.19.10.13) 1610 0 R (subsection.19.10.14) 1614 0 R (subsection.19.10.15) 1618 0 R (subsection.19.10.16) 1622 0 R (subsection.19.10.2) 1566 0 R (subsection.19.10.3) 1570 0 R (subsection.19.10.4) 1574 0 R (subsection.19.10.5) 1578 0 R (subsection.19.10.6) 1582 0 R (subsection.19.10.7) 1586 0 R (subsection.19.10.8) 1590 0 R (subsection.19.10.9) 1594 0 R (subsection.19.11.1) 1630 0 R (subsection.19.11.2) 1634 0 R (subsection.19.11.3) 1638 0 R (subsection.19.11.4) 1642 0 R (subsection.19.11.5) 1646 0 R (subsection.19.11.6) 1710 0 R (subsection.19.12.1) 1718 0 R (subsection.19.12.2) 1722 0 R (subsection.19.12.3) 1726 0 R (subsection.19.12.4) 1730 0 R (subsection.19.13.1) 1738 0 R (subsection.19.13.2) 1774 0 R (subsection.19.14.1) 1782 0 R (subsection.19.14.2) 1786 0 R (subsection.19.14.3) 1790 0 R (subsection.19.14.4) 1794 0 R (subsection.19.14.5) 1798 0 R (subsection.19.14.6) 1802 0 R (subsection.19.14.7) 1806 0 R (subsection.19.16.1) 1818 0 R (subsection.19.16.2) 1822 0 R (subsection.19.16.3) 1826 0 R (subsection.19.18.1) 1838 0 R (subsection.19.18.2) 1842 0 R (subsection.19.18.3) 1846 0 R (subsection.19.19.1) 1854 0 R (subsection.19.19.2) 1858 0 R (subsection.19.19.3) 1862 0 R (subsection.19.19.4) 1866 0 R (subsection.19.2.1) 1346 0 R (subsection.19.2.2) 1350 0 R (subsection.19.2.3) 1354 0 R (subsection.19.3.1) 1362 0 R (subsection.19.3.2) 1366 0 R (subsection.19.3.3) 1370 0 R (subsection.19.3.4) 1374 0 R (subsection.19.3.5) 1378 0 R (subsection.19.4.1) 1386 0 R (subsection.19.4.2) 1390 0 R (subsection.19.4.3) 1394 0 R (subsection.19.4.4) 1398 0 R (subsection.19.4.5) 1402 0 R (subsection.19.4.6) 1406 0 R (subsection.19.4.7) 1410 0 R (subsection.19.4.8) 1414 0 R (subsection.19.5.1) 1422 0 R (subsection.19.5.10) 1458 0 R (subsection.19.5.11) 1462 0 R (subsection.19.5.12) 1466 0 R (subsection.19.5.13) 1470 0 R (subsection.19.5.14) 1474 0 R (subsection.19.5.15) 1478 0 R (subsection.19.5.16) 1482 0 R (subsection.19.5.17) 1486 0 R (subsection.19.5.18) 1490 0 R (subsection.19.5.19) 1494 0 R (subsection.19.5.2) 1426 0 R (subsection.19.5.3) 1430 0 R (subsection.19.5.4) 1434 0 R (subsection.19.5.5) 1438 0 R (subsection.19.5.6) 1442 0 R (subsection.19.5.7) 1446 0 R (subsection.19.5.8) 1450 0 R (subsection.19.5.9) 1454 0 R (subsection.19.6.1) 1502 0 R (subsection.19.6.2) 1506 0 R (subsection.19.6.3) 1510 0 R (subsection.19.7.1) 1518 0 R (subsection.19.7.2) 1522 0 R (subsection.19.8.1) 1530 0 R (subsection.19.8.2) 1534 0 R (subsection.19.9.1) 1542 0 R (subsection.19.9.2) 1546 0 R (subsection.19.9.3) 1550 0 R (subsection.19.9.4) 1554 0 R (subsection.2.2.1) 50 0 R (subsection.2.2.2) 58 0 R (subsection.2.7.1) 82 0 R (subsection.2.7.2) 86 0 R (subsection.20.3.1) 1886 0 R (subsection.20.3.2) 1890 0 R (subsection.20.3.3) 1894 0 R (subsection.20.3.4) 1898 0 R (subsection.20.3.5) 1902 0 R (subsection.20.4.1) 1910 0 R (subsection.20.4.2) 1914 0 R (subsection.21.3.1) 1938 0 R (subsection.21.4.1) 1946 0 R (subsection.21.4.2) 1950 0 R (subsection.21.4.3) 1954 0 R (subsection.21.4.4) 1958 0 R (subsection.21.4.5) 1962 0 R (subsection.21.4.6) 1966 0 R (subsection.21.5.1) 1974 0 R (subsection.21.5.2) 1978 0 R (subsection.21.5.3) 1982 0 R (subsection.22.3.1) 2042 0 R (subsection.22.4.1) 2050 0 R (subsection.23.2.1) 2070 0 R (subsection.23.2.2) 2074 0 R (subsection.23.2.3) 2082 0 R (subsection.23.3.1) 2094 0 R (subsection.23.3.2) 2098 0 R (subsection.23.3.3) 2102 0 R (subsection.23.5.1) 2114 0 R (subsection.24.2.1) 2130 0 R (subsection.24.2.2) 2150 0 R (subsection.24.2.3) 2166 0 R (subsection.24.2.4) 2170 0 R (subsection.24.5.1) 2202 0 R (subsection.24.5.2) 2210 0 R (subsection.24.5.3) 2214 0 R (subsection.24.6.1) 2222 0 R (subsection.24.6.2) 2226 0 R (subsection.24.6.3) 2230 0 R (subsection.25.2.1) 2246 0 R (subsection.25.2.2) 2254 0 R (subsection.25.2.3) 2266 0 R (subsection.25.2.4) 2270 0 R (subsection.25.2.5) 2274 0 R (subsection.25.3.1) 2298 0 R (subsection.26.3.1) 2318 0 R (subsection.26.3.2) 2322 0 R (subsection.26.3.3) 2326 0 R (subsection.26.3.4) 2330 0 R (subsection.26.4.1) 2338 0 R (subsection.26.4.2) 2342 0 R (subsection.26.4.3) 2346 0 R (subsection.26.4.4) 2350 0 R (subsection.26.4.5) 2354 0 R (subsection.26.5.1) 2362 0 R (subsection.26.5.2) 2366 0 R (subsection.26.5.3) 2370 0 R (subsection.31.1.1) 2446 0 R (subsection.31.1.2) 2470 0 R (subsection.31.2.1) 2478 0 R (subsection.31.2.2) 2482 0 R (subsection.32.1.1) 2494 0 R (subsection.32.1.10) 2530 0 R (subsection.32.1.2) 2498 0 R (subsection.32.1.3) 2502 0 R (subsection.32.1.4) 2506 0 R (subsection.32.1.5) 2510 0 R (subsection.32.1.6) 2514 0 R (subsection.32.1.7) 2518 0 R (subsection.32.1.8) 2522 0 R (subsection.32.1.9) 2526 0 R (subsection.36.1.1) 2622 0 R (subsection.36.1.2) 2626 0 R (subsection.36.4.1) 2650 0 R (subsection.36.5.1) 2666 0 R (subsection.36.5.2) 2670 0 R (subsection.37.5.1) 2702 0 R (subsection.37.6.1) 2710 0 R (subsection.37.6.2) 2714 0 R (subsection.38.2.1) 2730 0 R (subsection.38.2.2) 2734 0 R (subsection.38.2.3) 2738 0 R (subsection.38.3.1) 2746 0 R (subsection.38.3.2) 2750 0 R (subsection.38.3.3) 2754 0 R (subsection.38.3.4) 2758 0 R (subsection.38.3.5) 2762 0 R (subsection.38.3.6) 2766 0 R (subsection.38.4.1) 2774 0 R (subsection.4.3.1) 118 0 R (subsection.4.3.2) 126 0 R (subsection.4.3.3) 134 0 R (subsection.4.3.4) 142 0 R (subsection.4.3.5) 150 0 R (subsection.4.5.1) 166 0 R (subsection.4.5.2) 170 0 R (subsection.4.5.3) 174 0 R (subsection.4.5.4) 178 0 R (subsection.5.2.1) 194 0 R (subsection.5.2.2) 198 0 R (subsection.5.5.1) 214 0 R (subsection.5.5.2) 230 0 R (subsection.5.6.1) 238 0 R (subsection.5.6.2) 242 0 R (subsection.5.6.3) 246 0 R (subsection.5.6.4) 250 0 R (subsection.5.6.5) 254 0 R (subsection.5.6.6) 258 0 R (subsection.6.2.1) 274 0 R (subsection.6.2.2) 282 0 R (subsection.6.2.3) 286 0 R (subsection.6.2.4) 290 0 R (subsection.6.3.1) 298 0 R (subsection.6.4.1) 306 0 R (subsection.6.4.2) 310 0 R (subsection.6.4.3) 314 0 R (subsection.6.4.4) 318 0 R (subsection.7.2.1) 334 0 R (subsection.7.2.2) 338 0 R (subsection.7.2.3) 342 0 R (subsection.7.2.4) 346 0 R (subsection.7.3.1) 366 0 R (subsection.7.3.2) 370 0 R (subsection.7.4.1) 378 0 R (subsection.7.4.2) 382 0 R (subsection.7.4.3) 386 0 R (subsection.7.4.4) 394 0 R (subsection.7.4.5) 398 0 R (subsection.7.4.6) 402 0 R (subsection.7.5.1) 410 0 R (subsection.7.5.2) 414 0 R (subsection.8.3.1) 434 0 R (subsection.8.3.2) 438 0 R (subsubsection.10.7.3.1) 566 0 R (subsubsection.11.2.1.1) 598 0 R (subsubsection.11.2.1.2) 602 0 R (subsubsection.11.4.4.1) 642 0 R (subsubsection.11.4.4.10) 678 0 R (subsubsection.11.4.4.2) 646 0 R (subsubsection.11.4.4.3) 650 0 R (subsubsection.11.4.4.4) 654 0 R (subsubsection.11.4.4.5) 658 0 R (subsubsection.11.4.4.6) 662 0 R (subsubsection.11.4.4.7) 666 0 R (subsubsection.11.4.4.8) 670 0 R (subsubsection.11.4.4.9) 674 0 R (subsubsection.11.4.5.1) 686 0 R (subsubsection.11.4.5.2) 690 0 R (subsubsection.11.4.5.3) 694 0 R (subsubsection.11.4.5.4) 698 0 R (subsubsection.13.4.1.1) 810 0 R (subsubsection.13.4.1.2) 814 0 R (subsubsection.13.5.4.1) 838 0 R (subsubsection.13.5.4.2) 842 0 R (subsubsection.14.2.1.1) 886 0 R (subsubsection.14.2.1.2) 890 0 R (subsubsection.14.2.1.3) 894 0 R (subsubsection.14.2.1.4) 898 0 R (subsubsection.14.2.1.5) 902 0 R (subsubsection.14.2.1.6) 906 0 R (subsubsection.14.2.1.7) 910 0 R (subsubsection.14.2.1.8) 914 0 R (subsubsection.14.2.1.9) 918 0 R (subsubsection.14.3.1.1) 930 0 R (subsubsection.14.3.1.2) 934 0 R (subsubsection.18.7.2.1) 1190 0 R (subsubsection.18.7.2.2) 1194 0 R (subsubsection.18.7.2.3) 1198 0 R (subsubsection.18.7.2.4) 1202 0 R (subsubsection.18.7.2.5) 1206 0 R (subsubsection.18.7.2.6) 1210 0 R (subsubsection.18.7.2.7) 1214 0 R (subsubsection.18.7.2.8) 1218 0 R (subsubsection.18.7.2.9) 1222 0 R (subsubsection.19.11.5.1) 1650 0 R (subsubsection.19.11.5.10) 1686 0 R (subsubsection.19.11.5.11) 1690 0 R (subsubsection.19.11.5.12) 1694 0 R (subsubsection.19.11.5.13) 1698 0 R (subsubsection.19.11.5.14) 1702 0 R (subsubsection.19.11.5.15) 1706 0 R (subsubsection.19.11.5.2) 1654 0 R (subsubsection.19.11.5.3) 1658 0 R (subsubsection.19.11.5.4) 1662 0 R (subsubsection.19.11.5.5) 1666 0 R (subsubsection.19.11.5.6) 1670 0 R (subsubsection.19.11.5.7) 1674 0 R (subsubsection.19.11.5.8) 1678 0 R (subsubsection.19.11.5.9) 1682 0 R (subsubsection.19.13.1.1) 1742 0 R (subsubsection.19.13.1.2) 1746 0 R (subsubsection.19.13.1.3) 1750 0 R (subsubsection.19.13.1.4) 1754 0 R (subsubsection.19.13.1.5) 1758 0 R (subsubsection.19.13.1.6) 1762 0 R (subsubsection.19.13.1.7) 1766 0 R (subsubsection.19.13.1.8) 1770 0 R (subsubsection.2.2.1.1) 54 0 R (subsubsection.21.5.3.1) 1986 0 R (subsubsection.21.5.3.2) 1990 0 R (subsubsection.21.5.3.3) 1994 0 R (subsubsection.21.5.3.4) 1998 0 R (subsubsection.21.5.3.5) 2002 0 R (subsubsection.21.5.3.6) 2006 0 R (subsubsection.21.5.3.7) 2010 0 R (subsubsection.21.5.3.8) 2014 0 R (subsubsection.23.2.2.1) 2078 0 R (subsubsection.23.2.3.1) 2086 0 R (subsubsection.24.2.1.1) 2134 0 R (subsubsection.24.2.1.2) 2138 0 R (subsubsection.24.2.1.3) 2142 0 R (subsubsection.24.2.1.4) 2146 0 R (subsubsection.24.2.2.1) 2154 0 R (subsubsection.24.2.2.2) 2158 0 R (subsubsection.24.2.2.3) 2162 0 R (subsubsection.24.2.4.1) 2174 0 R (subsubsection.24.2.4.2) 2178 0 R (subsubsection.24.2.4.3) 2182 0 R (subsubsection.24.2.4.4) 2186 0 R (subsubsection.24.5.1.1) 2206 0 R (subsubsection.25.2.1.1) 2250 0 R (subsubsection.25.2.2.1) 2258 0 R (subsubsection.25.2.2.2) 2262 0 R (subsubsection.25.2.5.1) 2278 0 R (subsubsection.25.2.5.2) 2282 0 R (subsubsection.25.2.5.3) 2286 0 R (subsubsection.25.2.5.4) 2290 0 R (subsubsection.31.1.1.1) 2450 0 R (subsubsection.31.1.1.2) 2454 0 R (subsubsection.31.1.1.3) 2458 0 R (subsubsection.31.1.1.4) 2462 0 R (subsubsection.31.1.1.5) 2466 0 R (subsubsection.36.1.2.1) 2630 0 R (subsubsection.36.1.2.2) 2634 0 R (subsubsection.36.4.1.1) 2654 0 R (subsubsection.36.4.1.2) 2658 0 R (subsubsection.4.3.1.1) 122 0 R (subsubsection.4.3.2.1) 130 0 R (subsubsection.4.3.3.1) 138 0 R (subsubsection.4.3.4.1) 146 0 R (subsubsection.4.3.5.1) 154 0 R (subsubsection.5.5.1.1) 218 0 R (subsubsection.5.5.1.2) 222 0 R (subsubsection.5.5.1.3) 226 0 R (subsubsection.6.2.1.1) 278 0 R (subsubsection.7.2.4.1) 350 0 R (subsubsection.7.2.4.2) 354 0 R (subsubsection.7.2.4.3) 358 0 R (subsubsection.7.4.3.1) 390 0 R (table.10.1) 4369 0 R (table.10.2) 4371 0 R (table.10.3) 4377 0 R (table.10.4) 4379 0 R (table.11.1) 4524 0 R (table.11.2) 4531 0 R (table.11.3) 4537 0 R (table.13.1) 4589 0 R (table.13.2) 4609 0 R (table.13.3) 4618 0 R (table.13.4) 4625 0 R (table.20.1) 5798 0 R (table.24.1) 6126 0 R (table.24.2) 6128 0 R (table.24.3) 6139 0 R (table.25.1) 6205 0 R (table.31.1) 6369 0 R (table.31.2) 6376 0 R (table.7.1) 4183 0 R (troubleshooting) 6424 0 R (type) 3937 0 R (unicode) 3029 0 R (upgrading-to-3.0) 3032 0 R (winbind) 3023 0 R (winbind-solaris9) 5887 0 R] /Limits [(AccessControls) (winbind-solaris9)] >> endobj 6737 0 obj << @@ -38040,11 +37808,13 @@ endobj /Names 6738 0 R /PageMode /UseOutlines /URI<</Base()>> /ViewerPreferences<<>> /OpenAction 2857 0 R -/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10b) +/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10a) >> endobj 6740 0 obj << -/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10b)/Keywords() -/CreationDate (D:20030701232500) +/Producer (pdfTeX-1.10a) +/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10a)/Keywords() +/Creator (TeX) +/CreationDate (D:20030715231600) >> endobj xref 0 6741 @@ -38054,6741 +37824,6741 @@ xref 0000000004 00000 f 0000000000 00000 f 0000000009 00000 n -0000294422 00000 n -0002263819 00000 n +0000272800 00000 n +0002193172 00000 n 0000000051 00000 n 0000000091 00000 n -0000298358 00000 n -0002263710 00000 n +0000276621 00000 n +0002193063 00000 n 0000000136 00000 n 0000000178 00000 n -0000298482 00000 n -0002263636 00000 n +0000276745 00000 n +0002192989 00000 n 0000000226 00000 n 0000000259 00000 n -0000298604 00000 n -0002263549 00000 n +0000276867 00000 n +0002192902 00000 n 0000000307 00000 n 0000000341 00000 n -0000303319 00000 n -0002263462 00000 n +0000281348 00000 n +0002192815 00000 n 0000000389 00000 n 0000000428 00000 n -0000308603 00000 n -0002263375 00000 n +0000286422 00000 n +0002192728 00000 n 0000000476 00000 n 0000000514 00000 n -0000308727 00000 n -0002263288 00000 n +0000286546 00000 n +0002192641 00000 n 0000000562 00000 n 0000000593 00000 n -0000310915 00000 n -0002263214 00000 n +0000288690 00000 n +0002192567 00000 n 0000000641 00000 n 0000000677 00000 n -0000314590 00000 n -0002263091 00000 n +0000292235 00000 n +0002192444 00000 n 0000000723 00000 n 0000000773 00000 n -0000314714 00000 n -0002263017 00000 n +0000292359 00000 n +0002192370 00000 n 0000000821 00000 n 0000000874 00000 n -0000314837 00000 n -0002262893 00000 n +0000292482 00000 n +0002192246 00000 n 0000000922 00000 n 0000000975 00000 n -0000314961 00000 n -0002262782 00000 n +0000292606 00000 n +0002192135 00000 n 0000001028 00000 n 0000001074 00000 n -0000315085 00000 n -0002262721 00000 n +0000292730 00000 n +0002192074 00000 n 0000001132 00000 n 0000001194 00000 n -0000319356 00000 n -0002262647 00000 n +0000296871 00000 n +0002192000 00000 n 0000001247 00000 n 0000001276 00000 n -0000319480 00000 n -0002262560 00000 n +0000296995 00000 n +0002191913 00000 n 0000001324 00000 n 0000001394 00000 n -0000319603 00000 n -0002262473 00000 n +0000297118 00000 n +0002191826 00000 n 0000001442 00000 n 0000001500 00000 n -0000319727 00000 n -0002262386 00000 n +0000297242 00000 n +0002191739 00000 n 0000001548 00000 n 0000001644 00000 n -0000319851 00000 n -0002262299 00000 n +0000297366 00000 n +0002191652 00000 n 0000001692 00000 n 0000001741 00000 n -0000322705 00000 n -0002262188 00000 n +0000300168 00000 n +0002191541 00000 n 0000001789 00000 n 0000001825 00000 n -0000322829 00000 n -0002262114 00000 n +0000300292 00000 n +0002191467 00000 n 0000001878 00000 n 0000001948 00000 n -0000323996 00000 n -0002262040 00000 n +0000301418 00000 n +0002191393 00000 n 0000002001 00000 n 0000002160 00000 n -0000324896 00000 n -0002261930 00000 n +0000302295 00000 n +0002191283 00000 n 0000002206 00000 n 0000002255 00000 n -0000325020 00000 n -0002261869 00000 n +0000302419 00000 n +0002191222 00000 n 0000002303 00000 n 0000002330 00000 n -0000325751 00000 n -0002261740 00000 n +0000303136 00000 n +0002191093 00000 n 0000002373 00000 n 0000002423 00000 n -0000329370 00000 n -0002261623 00000 n +0000306555 00000 n +0002190976 00000 n 0000002470 00000 n 0000002523 00000 n -0000329495 00000 n -0002261544 00000 n +0000306680 00000 n +0002190897 00000 n 0000002572 00000 n 0000002617 00000 n -0000329620 00000 n -0002261451 00000 n +0000306805 00000 n +0002190804 00000 n 0000002666 00000 n 0000002702 00000 n -0000333853 00000 n -0002261319 00000 n +0000310863 00000 n +0002190672 00000 n 0000002751 00000 n 0000002795 00000 n -0000333977 00000 n -0002261201 00000 n +0000310987 00000 n +0002190554 00000 n 0000002849 00000 n 0000002894 00000 n -0000337565 00000 n -0002261136 00000 n +0000314487 00000 n +0002190489 00000 n 0000002953 00000 n 0000003002 00000 n -0000337690 00000 n -0002261004 00000 n +0000314612 00000 n +0002190357 00000 n 0000003056 00000 n 0000003102 00000 n -0000337815 00000 n -0002260939 00000 n +0000314737 00000 n +0002190292 00000 n 0000003161 00000 n 0000003210 00000 n -0000337940 00000 n -0002260807 00000 n +0000314862 00000 n +0002190160 00000 n 0000003264 00000 n 0000003334 00000 n -0000338065 00000 n -0002260742 00000 n +0000314987 00000 n +0002190095 00000 n 0000003393 00000 n 0000003442 00000 n -0000343638 00000 n -0002260610 00000 n +0000320408 00000 n +0002189963 00000 n 0000003496 00000 n 0000003563 00000 n -0000347436 00000 n -0002260545 00000 n +0000324078 00000 n +0002189898 00000 n 0000003622 00000 n 0000003671 00000 n -0000347561 00000 n -0002260427 00000 n +0000324203 00000 n +0002189780 00000 n 0000003725 00000 n 0000003790 00000 n -0000351297 00000 n -0002260362 00000 n +0000327847 00000 n +0002189715 00000 n 0000003849 00000 n 0000003898 00000 n -0000351422 00000 n -0002260269 00000 n +0000327972 00000 n +0002189622 00000 n 0000003947 00000 n 0000004007 00000 n -0000355368 00000 n -0002260151 00000 n +0000331905 00000 n +0002189504 00000 n 0000004056 00000 n 0000004093 00000 n -0000355493 00000 n -0002260072 00000 n +0000332030 00000 n +0002189425 00000 n 0000004147 00000 n 0000004199 00000 n -0000358128 00000 n -0002259979 00000 n +0000334568 00000 n +0002189332 00000 n 0000004253 00000 n 0000004316 00000 n -0000358252 00000 n -0002259886 00000 n +0000334692 00000 n +0002189239 00000 n 0000004370 00000 n 0000004429 00000 n -0000358377 00000 n -0002259807 00000 n +0000334817 00000 n +0002189160 00000 n 0000004483 00000 n 0000004557 00000 n -0000362152 00000 n -0002259676 00000 n +0000338495 00000 n +0002189029 00000 n 0000004604 00000 n 0000004640 00000 n -0000362277 00000 n -0002259597 00000 n +0000338620 00000 n +0002188950 00000 n 0000004689 00000 n 0000004734 00000 n -0000371231 00000 n -0002259465 00000 n +0000347147 00000 n +0002188818 00000 n 0000004783 00000 n 0000004831 00000 n -0000371356 00000 n -0002259386 00000 n +0000347272 00000 n +0002188739 00000 n 0000004885 00000 n 0000004934 00000 n -0000375833 00000 n -0002259307 00000 n +0000351642 00000 n +0002188660 00000 n 0000004988 00000 n 0000005042 00000 n -0000384401 00000 n -0002259214 00000 n +0000359798 00000 n +0002188567 00000 n 0000005091 00000 n 0000005153 00000 n -0000389029 00000 n -0002259121 00000 n +0000364252 00000 n +0002188474 00000 n 0000005202 00000 n 0000005250 00000 n -0000389152 00000 n -0002258989 00000 n +0000364375 00000 n +0002188342 00000 n 0000005299 00000 n 0000005361 00000 n -0000389277 00000 n -0002258871 00000 n +0000364500 00000 n +0002188224 00000 n 0000005415 00000 n 0000005469 00000 n -0000389402 00000 n -0002258792 00000 n +0000364625 00000 n +0002188145 00000 n 0000005528 00000 n 0000005577 00000 n -0000393046 00000 n -0002258699 00000 n +0000368206 00000 n +0002188052 00000 n 0000005636 00000 n 0000005710 00000 n -0000393171 00000 n -0002258620 00000 n +0000368331 00000 n +0002187973 00000 n 0000005769 00000 n 0000005832 00000 n -0000398292 00000 n -0002258541 00000 n +0000373236 00000 n +0002187894 00000 n 0000005886 00000 n 0000005945 00000 n -0000402204 00000 n -0002258423 00000 n +0000377086 00000 n +0002187776 00000 n 0000005994 00000 n 0000006044 00000 n -0000402328 00000 n -0002258344 00000 n +0000377210 00000 n +0002187697 00000 n 0000006098 00000 n 0000006167 00000 n -0000402453 00000 n -0002258251 00000 n +0000377335 00000 n +0002187604 00000 n 0000006221 00000 n 0000006428 00000 n -0000402578 00000 n -0002258158 00000 n +0000377460 00000 n +0002187511 00000 n 0000006482 00000 n 0000006554 00000 n -0000405160 00000 n -0002258065 00000 n +0000379964 00000 n +0002187418 00000 n 0000006608 00000 n 0000006721 00000 n -0000405285 00000 n -0002257972 00000 n +0000380089 00000 n +0002187325 00000 n 0000006775 00000 n 0000006919 00000 n -0000405410 00000 n -0002257893 00000 n +0000380214 00000 n +0002187246 00000 n 0000006973 00000 n 0000007097 00000 n -0000409591 00000 n -0002257762 00000 n +0000384299 00000 n +0002187115 00000 n 0000007144 00000 n 0000007187 00000 n -0000409716 00000 n -0002257683 00000 n +0000384424 00000 n +0002187036 00000 n 0000007236 00000 n 0000007281 00000 n -0000413782 00000 n -0002257551 00000 n +0000388401 00000 n +0002186904 00000 n 0000007330 00000 n 0000007386 00000 n -0000413907 00000 n -0002257433 00000 n +0000388526 00000 n +0002186786 00000 n 0000007440 00000 n 0000007501 00000 n -0000418168 00000 n -0002257368 00000 n +0000392711 00000 n +0002186721 00000 n 0000007560 00000 n 0000007613 00000 n -0000418293 00000 n -0002257275 00000 n +0000392836 00000 n +0002186628 00000 n 0000007667 00000 n 0000007724 00000 n -0000418418 00000 n -0002257182 00000 n +0000392961 00000 n +0002186535 00000 n 0000007778 00000 n 0000007854 00000 n -0000422406 00000 n -0002257103 00000 n +0000396810 00000 n +0002186456 00000 n 0000007908 00000 n 0000007984 00000 n -0000422531 00000 n -0002256971 00000 n +0000396935 00000 n +0002186324 00000 n 0000008033 00000 n 0000008095 00000 n -0000422656 00000 n -0002256906 00000 n +0000397060 00000 n +0002186259 00000 n 0000008149 00000 n 0000008196 00000 n -0000426529 00000 n -0002256788 00000 n +0000400851 00000 n +0002186141 00000 n 0000008245 00000 n 0000008282 00000 n -0000426654 00000 n -0002256709 00000 n +0000400976 00000 n +0002186062 00000 n 0000008336 00000 n 0000008408 00000 n -0000426778 00000 n -0002256616 00000 n +0000401100 00000 n +0002185969 00000 n 0000008462 00000 n 0000008542 00000 n -0000426903 00000 n -0002256523 00000 n +0000401225 00000 n +0002185876 00000 n 0000008596 00000 n 0000008660 00000 n -0000428427 00000 n -0002256444 00000 n +0000402722 00000 n +0002185797 00000 n 0000008714 00000 n 0000008768 00000 n -0000432001 00000 n -0002256313 00000 n +0000406117 00000 n +0002185666 00000 n 0000008815 00000 n 0000008854 00000 n -0000432126 00000 n -0002256234 00000 n +0000406242 00000 n +0002185587 00000 n 0000008903 00000 n 0000008948 00000 n -0000432251 00000 n -0002256102 00000 n +0000406367 00000 n +0002185455 00000 n 0000008997 00000 n 0000009073 00000 n -0000436687 00000 n -0002256023 00000 n +0000410626 00000 n +0002185376 00000 n 0000009127 00000 n 0000009194 00000 n -0000441726 00000 n -0002255930 00000 n +0000415448 00000 n +0002185283 00000 n 0000009248 00000 n 0000009336 00000 n -0000446282 00000 n -0002255837 00000 n +0000419889 00000 n +0002185190 00000 n 0000009390 00000 n 0000009463 00000 n -0000446407 00000 n -0002255719 00000 n +0000420014 00000 n +0002185072 00000 n 0000009517 00000 n 0000009601 00000 n -0000446532 00000 n -0002255640 00000 n +0000420139 00000 n +0002184993 00000 n 0000009660 00000 n 0000009716 00000 n -0000446657 00000 n -0002255547 00000 n +0000420264 00000 n +0002184900 00000 n 0000009775 00000 n 0000009814 00000 n -0000446782 00000 n -0002255468 00000 n +0000420389 00000 n +0002184821 00000 n 0000009873 00000 n 0000009906 00000 n -0000451374 00000 n -0002255336 00000 n +0000424737 00000 n +0002184689 00000 n 0000009955 00000 n 0000009999 00000 n -0000451499 00000 n -0002255257 00000 n +0000424862 00000 n +0002184610 00000 n 0000010053 00000 n 0000010118 00000 n -0000456336 00000 n -0002255178 00000 n +0000429618 00000 n +0002184531 00000 n 0000010172 00000 n 0000010240 00000 n -0000459404 00000 n -0002255046 00000 n +0000432578 00000 n +0002184399 00000 n 0000010289 00000 n 0000010340 00000 n -0000459529 00000 n -0002254967 00000 n +0000432703 00000 n +0002184320 00000 n 0000010394 00000 n 0000010439 00000 n -0000459654 00000 n -0002254874 00000 n +0000432828 00000 n +0002184227 00000 n 0000010493 00000 n 0000010544 00000 n -0000464042 00000 n -0002254742 00000 n +0000436847 00000 n +0002184095 00000 n 0000010598 00000 n 0000010651 00000 n -0000464167 00000 n -0002254677 00000 n +0000436972 00000 n +0002184030 00000 n 0000010710 00000 n 0000010753 00000 n -0000464292 00000 n -0002254584 00000 n +0000437097 00000 n +0002183937 00000 n 0000010807 00000 n 0000010855 00000 n -0000468254 00000 n -0002254491 00000 n +0000440786 00000 n +0002183844 00000 n 0000010909 00000 n 0000010957 00000 n -0000468379 00000 n -0002254412 00000 n +0000440911 00000 n +0002183765 00000 n 0000011011 00000 n 0000011042 00000 n -0000468504 00000 n -0002254294 00000 n +0000441035 00000 n +0002183647 00000 n 0000011091 00000 n 0000011128 00000 n -0000468629 00000 n -0002254215 00000 n +0000441160 00000 n +0002183568 00000 n 0000011182 00000 n 0000011242 00000 n -0000468753 00000 n -0002254136 00000 n +0000441285 00000 n +0002183489 00000 n 0000011296 00000 n 0000011352 00000 n -0000473590 00000 n -0002254005 00000 n +0000446312 00000 n +0002183358 00000 n 0000011399 00000 n 0000011440 00000 n -0000473715 00000 n -0002253926 00000 n +0000446437 00000 n +0002183279 00000 n 0000011489 00000 n 0000011534 00000 n -0000473840 00000 n -0002253833 00000 n +0000446562 00000 n +0002183186 00000 n 0000011583 00000 n 0000011617 00000 n -0000477269 00000 n -0002253701 00000 n +0000449846 00000 n +0002183054 00000 n 0000011666 00000 n 0000011711 00000 n -0000477394 00000 n -0002253622 00000 n +0000449971 00000 n +0002182975 00000 n 0000011765 00000 n 0000011821 00000 n -0000477518 00000 n -0002253543 00000 n +0000450095 00000 n +0002182896 00000 n 0000011875 00000 n 0000011922 00000 n -0000479796 00000 n -0002253464 00000 n +0000452304 00000 n +0002182817 00000 n 0000011971 00000 n 0000012008 00000 n -0000480771 00000 n -0002253347 00000 n +0000453254 00000 n +0002182700 00000 n 0000012055 00000 n 0000012115 00000 n -0000480896 00000 n -0002253282 00000 n +0000453379 00000 n +0002182635 00000 n 0000012164 00000 n 0000012192 00000 n -0000481624 00000 n -0002253147 00000 n +0000454094 00000 n +0002182500 00000 n 0000012236 00000 n 0000012282 00000 n -0000485104 00000 n -0002253029 00000 n +0000457514 00000 n +0002182382 00000 n 0000012330 00000 n 0000012394 00000 n -0000485229 00000 n -0002252950 00000 n +0000457639 00000 n +0002182303 00000 n 0000012444 00000 n 0000012490 00000 n -0000488090 00000 n -0002252857 00000 n +0000460408 00000 n +0002182210 00000 n 0000012540 00000 n 0000012582 00000 n -0000492290 00000 n -0002252725 00000 n +0000464530 00000 n +0002182078 00000 n 0000012632 00000 n 0000012667 00000 n -0000492415 00000 n -0002252646 00000 n +0000464655 00000 n +0002181999 00000 n 0000012722 00000 n 0000012768 00000 n -0000492538 00000 n -0002252553 00000 n +0000464778 00000 n +0002181906 00000 n 0000012823 00000 n 0000012874 00000 n -0000497088 00000 n -0002252474 00000 n +0000468950 00000 n +0002181827 00000 n 0000012929 00000 n 0000012980 00000 n -0000497212 00000 n -0002252342 00000 n +0000469074 00000 n +0002181695 00000 n 0000013030 00000 n 0000013077 00000 n -0000501595 00000 n -0002252263 00000 n +0000473430 00000 n +0002181616 00000 n 0000013132 00000 n 0000013188 00000 n -0000504535 00000 n -0002252170 00000 n +0000476347 00000 n +0002181523 00000 n 0000013243 00000 n 0000013296 00000 n -0000508324 00000 n -0002252077 00000 n +0000480091 00000 n +0002181430 00000 n 0000013351 00000 n 0000013408 00000 n -0000512065 00000 n -0002251984 00000 n +0000483685 00000 n +0002181337 00000 n 0000013463 00000 n 0000013520 00000 n -0000512442 00000 n -0002251891 00000 n +0000484062 00000 n +0002181244 00000 n 0000013575 00000 n 0000013632 00000 n -0000512566 00000 n -0002251798 00000 n +0000484186 00000 n +0002181151 00000 n 0000013687 00000 n 0000013733 00000 n -0000512691 00000 n -0002251705 00000 n +0000484311 00000 n +0002181058 00000 n 0000013788 00000 n 0000013851 00000 n -0000516723 00000 n -0002251626 00000 n +0000488226 00000 n +0002180979 00000 n 0000013906 00000 n 0000013972 00000 n -0000516847 00000 n -0002251494 00000 n +0000488350 00000 n +0002180847 00000 n 0000014022 00000 n 0000014093 00000 n -0000521532 00000 n -0002251415 00000 n +0000492976 00000 n +0002180768 00000 n 0000014148 00000 n 0000014199 00000 n -0000525010 00000 n -0002251322 00000 n +0000496392 00000 n +0002180675 00000 n 0000014254 00000 n 0000014297 00000 n -0000525133 00000 n -0002251243 00000 n +0000496515 00000 n +0002180596 00000 n 0000014352 00000 n 0000014398 00000 n -0000525258 00000 n -0002251111 00000 n +0000496640 00000 n +0002180464 00000 n 0000014448 00000 n 0000014486 00000 n -0000528959 00000 n -0002251032 00000 n +0000500201 00000 n +0002180385 00000 n 0000014541 00000 n 0000014596 00000 n -0000529084 00000 n -0002250953 00000 n +0000500326 00000 n +0002180306 00000 n 0000014651 00000 n 0000014699 00000 n -0000532489 00000 n -0002250821 00000 n +0000503699 00000 n +0002180174 00000 n 0000014749 00000 n 0000014804 00000 n -0000532613 00000 n -0002250742 00000 n +0000503823 00000 n +0002180095 00000 n 0000014859 00000 n 0000014911 00000 n -0000536851 00000 n -0002250649 00000 n +0000507990 00000 n +0002180002 00000 n 0000014966 00000 n 0000015011 00000 n -0000536976 00000 n -0002250531 00000 n +0000508115 00000 n +0002179884 00000 n 0000015066 00000 n 0000015116 00000 n -0000540837 00000 n -0002250466 00000 n +0000511873 00000 n +0002179819 00000 n 0000015176 00000 n 0000015242 00000 n -0000552546 00000 n -0002250348 00000 n +0000521308 00000 n +0002179701 00000 n 0000015292 00000 n 0000015330 00000 n -0000552671 00000 n -0002250269 00000 n +0000521433 00000 n +0002179622 00000 n 0000015385 00000 n 0000015484 00000 n -0000552795 00000 n -0002250190 00000 n +0000521557 00000 n +0002179543 00000 n 0000015539 00000 n 0000015640 00000 n -0000556406 00000 n -0002250058 00000 n +0000525084 00000 n +0002179411 00000 n 0000015688 00000 n 0000015740 00000 n -0000556531 00000 n -0002249979 00000 n +0000525209 00000 n +0002179332 00000 n 0000015790 00000 n 0000015836 00000 n -0000560960 00000 n -0002249847 00000 n +0000529520 00000 n +0002179200 00000 n 0000015886 00000 n 0000015932 00000 n -0000564967 00000 n -0002249729 00000 n +0000533418 00000 n +0002179082 00000 n 0000015987 00000 n 0000016044 00000 n -0000569068 00000 n -0002249650 00000 n +0000537224 00000 n +0002179003 00000 n 0000016104 00000 n 0000016166 00000 n -0000569193 00000 n -0002249571 00000 n +0000537349 00000 n +0002178924 00000 n 0000016226 00000 n 0000016292 00000 n -0000569318 00000 n -0002249492 00000 n +0000537474 00000 n +0002178845 00000 n 0000016347 00000 n 0000016426 00000 n -0000572796 00000 n -0002249360 00000 n +0000540836 00000 n +0002178713 00000 n 0000016476 00000 n 0000016525 00000 n -0000572921 00000 n -0002249281 00000 n +0000540961 00000 n +0002178634 00000 n 0000016580 00000 n 0000016628 00000 n -0000573046 00000 n -0002249202 00000 n +0000541086 00000 n +0002178555 00000 n 0000016683 00000 n 0000016729 00000 n -0000575869 00000 n -0002249070 00000 n +0000543840 00000 n +0002178423 00000 n 0000016779 00000 n 0000016821 00000 n -0000580268 00000 n -0002248991 00000 n +0000548050 00000 n +0002178344 00000 n 0000016876 00000 n 0000016913 00000 n -0000580393 00000 n -0002248898 00000 n +0000548175 00000 n +0002178251 00000 n 0000016968 00000 n 0000017034 00000 n -0000580518 00000 n -0002248805 00000 n +0000548300 00000 n +0002178158 00000 n 0000017089 00000 n 0000017122 00000 n -0000580642 00000 n -0002248672 00000 n +0000548424 00000 n +0002178025 00000 n 0000017177 00000 n 0000017211 00000 n -0000586482 00000 n -0002248593 00000 n +0000553983 00000 n +0002177946 00000 n 0000017271 00000 n 0000017322 00000 n -0000586607 00000 n -0002248500 00000 n +0000554108 00000 n +0002177853 00000 n 0000017382 00000 n 0000017463 00000 n -0000589758 00000 n -0002248407 00000 n +0000557237 00000 n +0002177760 00000 n 0000017523 00000 n 0000017574 00000 n -0000591589 00000 n -0002248314 00000 n +0000559054 00000 n +0002177667 00000 n 0000017634 00000 n 0000017691 00000 n -0000596265 00000 n -0002248221 00000 n +0000563433 00000 n +0002177574 00000 n 0000017751 00000 n 0000017797 00000 n -0000598797 00000 n -0002248128 00000 n +0000565947 00000 n +0002177481 00000 n 0000017857 00000 n 0000017916 00000 n -0000603112 00000 n -0002248035 00000 n +0000570093 00000 n +0002177388 00000 n 0000017976 00000 n 0000018033 00000 n -0000603237 00000 n -0002247942 00000 n +0000570218 00000 n +0002177295 00000 n 0000018093 00000 n 0000018166 00000 n -0000605221 00000 n -0002247849 00000 n +0000572147 00000 n +0002177202 00000 n 0000018226 00000 n 0000018297 00000 n -0000605346 00000 n -0002247770 00000 n +0000572272 00000 n +0002177123 00000 n 0000018358 00000 n 0000018412 00000 n -0000609512 00000 n -0002247638 00000 n +0000576224 00000 n +0002176991 00000 n 0000018467 00000 n 0000018499 00000 n -0000609636 00000 n -0002247559 00000 n +0000576348 00000 n +0002176912 00000 n 0000018559 00000 n 0000018609 00000 n -0000609760 00000 n -0002247466 00000 n +0000576472 00000 n +0002176819 00000 n 0000018669 00000 n 0000018709 00000 n -0000612768 00000 n -0002247373 00000 n +0000579346 00000 n +0002176726 00000 n 0000018769 00000 n 0000018845 00000 n -0000612893 00000 n -0002247294 00000 n +0000579471 00000 n +0002176647 00000 n 0000018905 00000 n 0000018972 00000 n -0000613018 00000 n -0002247215 00000 n +0000579596 00000 n +0002176568 00000 n 0000019027 00000 n 0000019057 00000 n -0000613143 00000 n -0002247097 00000 n +0000579721 00000 n +0002176450 00000 n 0000019107 00000 n 0000019145 00000 n -0000613268 00000 n -0002247018 00000 n +0000579846 00000 n +0002176371 00000 n 0000019200 00000 n 0000019271 00000 n -0000613393 00000 n -0002246925 00000 n +0000579971 00000 n +0002176278 00000 n 0000019326 00000 n 0000019404 00000 n -0000614646 00000 n -0002246846 00000 n +0000581194 00000 n +0002176199 00000 n 0000019459 00000 n 0000019512 00000 n -0000626517 00000 n -0002246714 00000 n +0000591333 00000 n +0002176067 00000 n 0000019560 00000 n 0000019617 00000 n -0000626642 00000 n -0002246635 00000 n +0000591458 00000 n +0002175988 00000 n 0000019667 00000 n 0000019713 00000 n -0000626767 00000 n -0002246503 00000 n +0000591583 00000 n +0002175856 00000 n 0000019763 00000 n 0000019798 00000 n -0000630257 00000 n -0002246438 00000 n +0000594993 00000 n +0002175791 00000 n 0000019853 00000 n 0000019901 00000 n -0000632490 00000 n -0002246306 00000 n +0000597139 00000 n +0002175659 00000 n 0000019951 00000 n 0000019997 00000 n -0000632615 00000 n -0002246227 00000 n +0000597264 00000 n +0002175580 00000 n 0000020052 00000 n 0000020111 00000 n -0000632867 00000 n -0002246148 00000 n +0000597516 00000 n +0002175501 00000 n 0000020166 00000 n 0000020226 00000 n -0000635391 00000 n -0002246030 00000 n +0000599976 00000 n +0002175383 00000 n 0000020276 00000 n 0000020314 00000 n -0000635516 00000 n -0002245951 00000 n +0000600101 00000 n +0002175304 00000 n 0000020369 00000 n 0000020415 00000 n -0000635640 00000 n -0002245872 00000 n +0000600225 00000 n +0002175225 00000 n 0000020470 00000 n 0000020548 00000 n -0000639278 00000 n -0002245740 00000 n +0000603815 00000 n +0002175093 00000 n 0000020596 00000 n 0000020660 00000 n -0000639403 00000 n -0002245661 00000 n +0000603940 00000 n +0002175014 00000 n 0000020710 00000 n 0000020756 00000 n -0000643795 00000 n -0002245529 00000 n +0000608214 00000 n +0002174882 00000 n 0000020806 00000 n 0000020858 00000 n -0000643920 00000 n -0002245450 00000 n +0000608339 00000 n +0002174803 00000 n 0000020913 00000 n 0000020989 00000 n -0000648549 00000 n -0002245357 00000 n +0000612711 00000 n +0002174710 00000 n 0000021044 00000 n 0000021091 00000 n -0000648801 00000 n -0002245278 00000 n +0000612963 00000 n +0002174631 00000 n 0000021146 00000 n 0000021206 00000 n -0000655110 00000 n -0002245146 00000 n +0000619178 00000 n +0002174499 00000 n 0000021256 00000 n 0000021313 00000 n -0000655235 00000 n -0002245067 00000 n +0000619303 00000 n +0002174420 00000 n 0000021368 00000 n 0000021424 00000 n -0000655360 00000 n -0002244974 00000 n +0000619428 00000 n +0002174327 00000 n 0000021479 00000 n 0000021551 00000 n -0000659177 00000 n -0002244895 00000 n +0000622979 00000 n +0002174248 00000 n 0000021606 00000 n 0000021655 00000 n -0000659301 00000 n -0002244763 00000 n +0000623103 00000 n +0002174116 00000 n 0000021705 00000 n 0000021755 00000 n -0000663208 00000 n -0002244659 00000 n +0000626677 00000 n +0002174012 00000 n 0000021810 00000 n 0000021865 00000 n -0000667274 00000 n -0002244580 00000 n +0000630442 00000 n +0002173933 00000 n 0000021925 00000 n 0000021984 00000 n -0000667525 00000 n -0002244501 00000 n +0000630693 00000 n +0002173854 00000 n 0000022044 00000 n 0000022088 00000 n -0000671349 00000 n -0002244369 00000 n +0000634410 00000 n +0002173722 00000 n 0000022138 00000 n 0000022220 00000 n -0000671474 00000 n -0002244290 00000 n +0000634535 00000 n +0002173643 00000 n 0000022275 00000 n 0000022353 00000 n -0000675803 00000 n -0002244197 00000 n +0000638763 00000 n +0002173550 00000 n 0000022408 00000 n 0000022473 00000 n -0000675928 00000 n -0002244104 00000 n +0000638888 00000 n +0002173457 00000 n 0000022528 00000 n 0000022577 00000 n -0000676052 00000 n -0002243972 00000 n +0000639012 00000 n +0002173325 00000 n 0000022632 00000 n 0000022696 00000 n -0000680405 00000 n -0002243893 00000 n +0000643316 00000 n +0002173246 00000 n 0000022756 00000 n 0000022801 00000 n -0000680530 00000 n -0002243814 00000 n +0000643441 00000 n +0002173167 00000 n 0000022861 00000 n 0000022911 00000 n -0000680654 00000 n -0002243721 00000 n +0000643565 00000 n +0002173074 00000 n 0000022966 00000 n 0000023032 00000 n -0000685675 00000 n -0002243628 00000 n +0000648430 00000 n +0002172981 00000 n 0000023087 00000 n 0000023172 00000 n -0000689491 00000 n -0002243549 00000 n +0000652109 00000 n +0002172902 00000 n 0000023227 00000 n 0000023312 00000 n -0000689616 00000 n -0002243431 00000 n +0000652234 00000 n +0002172784 00000 n 0000023362 00000 n 0000023400 00000 n -0000689741 00000 n -0002243352 00000 n +0000652359 00000 n +0002172705 00000 n 0000023455 00000 n 0000023519 00000 n -0000693651 00000 n -0002243273 00000 n +0000656091 00000 n +0002172626 00000 n 0000023574 00000 n 0000023685 00000 n -0000697225 00000 n -0002243141 00000 n +0000659592 00000 n +0002172494 00000 n 0000023733 00000 n 0000023779 00000 n -0000697350 00000 n -0002243062 00000 n +0000659717 00000 n +0002172415 00000 n 0000023829 00000 n 0000023875 00000 n -0000697475 00000 n -0002242930 00000 n +0000659842 00000 n +0002172283 00000 n 0000023925 00000 n 0000023960 00000 n -0000702287 00000 n -0002242826 00000 n +0000664461 00000 n +0002172179 00000 n 0000024015 00000 n 0000024072 00000 n -0000710410 00000 n -0002242747 00000 n +0000672474 00000 n +0002172100 00000 n 0000024132 00000 n 0000024188 00000 n -0000710535 00000 n -0002242654 00000 n +0000672599 00000 n +0002172007 00000 n 0000024248 00000 n 0000024310 00000 n -0000710659 00000 n -0002242561 00000 n +0000672723 00000 n +0002171914 00000 n 0000024370 00000 n 0000024432 00000 n -0000710784 00000 n -0002242468 00000 n +0000672848 00000 n +0002171821 00000 n 0000024492 00000 n 0000024552 00000 n -0000710909 00000 n -0002242375 00000 n +0000672973 00000 n +0002171728 00000 n 0000024612 00000 n 0000024661 00000 n -0000715004 00000 n -0002242282 00000 n +0000676943 00000 n +0002171635 00000 n 0000024721 00000 n 0000024765 00000 n -0000715129 00000 n -0002242189 00000 n +0000677068 00000 n +0002171542 00000 n 0000024825 00000 n 0000024874 00000 n -0000715253 00000 n -0002242096 00000 n +0000677192 00000 n +0002171449 00000 n 0000024934 00000 n 0000025010 00000 n -0000715377 00000 n -0002242017 00000 n +0000677316 00000 n +0002171370 00000 n 0000025070 00000 n 0000025133 00000 n -0000719861 00000 n -0002241885 00000 n +0000681778 00000 n +0002171238 00000 n 0000025183 00000 n 0000025243 00000 n -0000723028 00000 n -0002241781 00000 n +0000684892 00000 n +0002171134 00000 n 0000025298 00000 n 0000025346 00000 n -0000723153 00000 n -0002241702 00000 n +0000685017 00000 n +0002171055 00000 n 0000025406 00000 n 0000025452 00000 n -0000723277 00000 n -0002241623 00000 n +0000685141 00000 n +0002170976 00000 n 0000025512 00000 n 0000025565 00000 n -0000726618 00000 n -0002241491 00000 n +0000688438 00000 n +0002170844 00000 n 0000025615 00000 n 0000025693 00000 n -0000732106 00000 n -0002241412 00000 n +0000693589 00000 n +0002170765 00000 n 0000025748 00000 n 0000025802 00000 n -0000732231 00000 n -0002241333 00000 n +0000693714 00000 n +0002170686 00000 n 0000025857 00000 n 0000025906 00000 n -0000736071 00000 n -0002241240 00000 n +0000697460 00000 n +0002170593 00000 n 0000025956 00000 n 0000026007 00000 n -0000736195 00000 n -0002241108 00000 n +0000697584 00000 n +0002170461 00000 n 0000026057 00000 n 0000026095 00000 n -0000740647 00000 n -0002241043 00000 n +0000701882 00000 n +0002170396 00000 n 0000026150 00000 n 0000026203 00000 n -0000740772 00000 n -0002240964 00000 n +0000702007 00000 n +0002170317 00000 n 0000026253 00000 n 0000026296 00000 n -0000744256 00000 n -0002240830 00000 n +0000705417 00000 n +0002170183 00000 n 0000026344 00000 n 0000026381 00000 n -0000744381 00000 n -0002240751 00000 n +0000705542 00000 n +0002170104 00000 n 0000026431 00000 n 0000026468 00000 n -0000744506 00000 n -0002240658 00000 n +0000705667 00000 n +0002170011 00000 n 0000026518 00000 n 0000026564 00000 n -0000744631 00000 n -0002240524 00000 n +0000705792 00000 n +0002169877 00000 n 0000026614 00000 n 0000026693 00000 n -0000744756 00000 n -0002240445 00000 n +0000705917 00000 n +0002169798 00000 n 0000026748 00000 n 0000026802 00000 n -0000748116 00000 n -0002240352 00000 n +0000709200 00000 n +0002169705 00000 n 0000026857 00000 n 0000026905 00000 n -0000748241 00000 n -0002240259 00000 n +0000709325 00000 n +0002169612 00000 n 0000026960 00000 n 0000027013 00000 n -0000748366 00000 n -0002240166 00000 n +0000709450 00000 n +0002169519 00000 n 0000027068 00000 n 0000027111 00000 n -0000751161 00000 n -0002240071 00000 n +0000712154 00000 n +0002169424 00000 n 0000027166 00000 n 0000027220 00000 n -0000751285 00000 n -0002239989 00000 n +0000712278 00000 n +0002169342 00000 n 0000027276 00000 n 0000027319 00000 n -0000755169 00000 n -0002239892 00000 n +0000716070 00000 n +0002169245 00000 n 0000027370 00000 n 0000027411 00000 n -0000755295 00000 n -0002239768 00000 n +0000716196 00000 n +0002169121 00000 n 0000027462 00000 n 0000027501 00000 n -0000755421 00000 n -0002239684 00000 n +0000716322 00000 n +0002169037 00000 n 0000027557 00000 n 0000027638 00000 n -0000755547 00000 n -0002239600 00000 n +0000716448 00000 n +0002168953 00000 n 0000027694 00000 n 0000027775 00000 n -0000759264 00000 n -0002239462 00000 n +0000720136 00000 n +0002168815 00000 n 0000027824 00000 n 0000027879 00000 n -0000759390 00000 n -0002239378 00000 n +0000720262 00000 n +0002168731 00000 n 0000027930 00000 n 0000027977 00000 n -0000759515 00000 n -0002239279 00000 n +0000720387 00000 n +0002168632 00000 n 0000028028 00000 n 0000028083 00000 n -0000763467 00000 n -0002239139 00000 n +0000724260 00000 n +0002168492 00000 n 0000028134 00000 n 0000028202 00000 n -0000763591 00000 n -0002239055 00000 n +0000724384 00000 n +0002168408 00000 n 0000028258 00000 n 0000028349 00000 n -0000763717 00000 n -0002238971 00000 n +0000724510 00000 n +0002168324 00000 n 0000028405 00000 n 0000028502 00000 n -0000763842 00000 n -0002238831 00000 n +0000724635 00000 n +0002168184 00000 n 0000028553 00000 n 0000028619 00000 n -0000763968 00000 n -0002238747 00000 n +0000724761 00000 n +0002168100 00000 n 0000028675 00000 n 0000028733 00000 n -0000767929 00000 n -0002238663 00000 n +0000728649 00000 n +0002168016 00000 n 0000028789 00000 n 0000028846 00000 n -0000770347 00000 n -0002238538 00000 n +0000731008 00000 n +0002167891 00000 n 0000028897 00000 n 0000028936 00000 n -0000770473 00000 n -0002238469 00000 n +0000731134 00000 n +0002167822 00000 n 0000028992 00000 n 0000029065 00000 n -0000774183 00000 n -0002238330 00000 n +0000734745 00000 n +0002167683 00000 n 0000029114 00000 n 0000029195 00000 n -0000774309 00000 n -0002238246 00000 n +0000734871 00000 n +0002167599 00000 n 0000029246 00000 n 0000029293 00000 n -0000776289 00000 n -0002238162 00000 n +0000736769 00000 n +0002167515 00000 n 0000029344 00000 n 0000029383 00000 n -0000780062 00000 n -0002238022 00000 n +0000740482 00000 n +0002167375 00000 n 0000029432 00000 n 0000029482 00000 n -0000780188 00000 n -0002237938 00000 n +0000740608 00000 n +0002167291 00000 n 0000029533 00000 n 0000029580 00000 n -0000780314 00000 n -0002237798 00000 n +0000740734 00000 n +0002167151 00000 n 0000029631 00000 n 0000029679 00000 n -0000784146 00000 n -0002237714 00000 n +0000744105 00000 n +0002167067 00000 n 0000029735 00000 n 0000029807 00000 n -0000784712 00000 n -0002237615 00000 n +0000744671 00000 n +0002166968 00000 n 0000029863 00000 n 0000029932 00000 n -0000784838 00000 n -0002237516 00000 n +0000744797 00000 n +0002166869 00000 n 0000029988 00000 n 0000030046 00000 n -0000788481 00000 n -0002237417 00000 n +0000747789 00000 n +0002166770 00000 n 0000030102 00000 n 0000030168 00000 n -0000788606 00000 n -0002237333 00000 n +0000747914 00000 n +0002166686 00000 n 0000030224 00000 n 0000030279 00000 n -0000791918 00000 n -0002237193 00000 n +0000751197 00000 n +0002166546 00000 n 0000030330 00000 n 0000030400 00000 n -0000792044 00000 n -0002237109 00000 n +0000751323 00000 n +0002166462 00000 n 0000030456 00000 n 0000030531 00000 n -0000794414 00000 n -0002237025 00000 n +0000753651 00000 n +0002166378 00000 n 0000030587 00000 n 0000030646 00000 n -0000800151 00000 n -0002236926 00000 n +0000759250 00000 n +0002166279 00000 n 0000030697 00000 n 0000030774 00000 n -0000811177 00000 n -0002236786 00000 n +0000770123 00000 n +0002166139 00000 n 0000030825 00000 n 0000030897 00000 n -0000811303 00000 n -0002236702 00000 n +0000770249 00000 n +0002166055 00000 n 0000030953 00000 n 0000031001 00000 n -0000816263 00000 n -0002236603 00000 n +0000775104 00000 n +0002165956 00000 n 0000031057 00000 n 0000031107 00000 n -0000821145 00000 n -0002236504 00000 n +0000779737 00000 n +0002165857 00000 n 0000031163 00000 n 0000031226 00000 n -0000821271 00000 n -0002236405 00000 n +0000779863 00000 n +0002165758 00000 n 0000031282 00000 n 0000031324 00000 n -0000825810 00000 n -0002236306 00000 n +0000784009 00000 n +0002165659 00000 n 0000031380 00000 n 0000031464 00000 n -0000830167 00000 n -0002236222 00000 n +0000788231 00000 n +0002165575 00000 n 0000031520 00000 n 0000031582 00000 n -0000835221 00000 n -0002236082 00000 n +0000793108 00000 n +0002165435 00000 n 0000031633 00000 n 0000031698 00000 n -0000835347 00000 n -0002235998 00000 n +0000793234 00000 n +0002165351 00000 n 0000031754 00000 n 0000031830 00000 n -0000839626 00000 n -0002235899 00000 n +0000797384 00000 n +0002165252 00000 n 0000031886 00000 n 0000031963 00000 n -0000839751 00000 n -0002235800 00000 n +0000797509 00000 n +0002165153 00000 n 0000032019 00000 n 0000032077 00000 n -0000843594 00000 n -0002235701 00000 n +0000801238 00000 n +0002165054 00000 n 0000032133 00000 n 0000032198 00000 n -0000847128 00000 n -0002235617 00000 n +0000804695 00000 n +0002164970 00000 n 0000032254 00000 n 0000032319 00000 n -0000851850 00000 n -0002235477 00000 n +0000809301 00000 n +0002164830 00000 n 0000032370 00000 n 0000032431 00000 n -0000851976 00000 n -0002235393 00000 n +0000809427 00000 n +0002164746 00000 n 0000032487 00000 n 0000032570 00000 n -0000856634 00000 n -0002235268 00000 n +0000813951 00000 n +0002164621 00000 n 0000032626 00000 n 0000032706 00000 n -0000857011 00000 n -0002235184 00000 n +0000814328 00000 n +0002164537 00000 n 0000032767 00000 n 0000032825 00000 n -0000863560 00000 n -0002235085 00000 n +0000820764 00000 n +0002164438 00000 n 0000032886 00000 n 0000032983 00000 n -0000863686 00000 n -0002234986 00000 n +0000820890 00000 n +0002164339 00000 n 0000033044 00000 n 0000033118 00000 n -0000866461 00000 n -0002234887 00000 n +0000823649 00000 n +0002164240 00000 n 0000033179 00000 n 0000033263 00000 n -0000869178 00000 n -0002234788 00000 n +0000826347 00000 n +0002164141 00000 n 0000033324 00000 n 0000033386 00000 n -0000871959 00000 n -0002234689 00000 n +0000829088 00000 n +0002164042 00000 n 0000033447 00000 n 0000033540 00000 n -0000876366 00000 n -0002234590 00000 n +0000833392 00000 n +0002163943 00000 n 0000033601 00000 n 0000033673 00000 n -0000876492 00000 n -0002234491 00000 n +0000833518 00000 n +0002163844 00000 n 0000033734 00000 n 0000033819 00000 n -0000879013 00000 n -0002234407 00000 n +0000836017 00000 n +0002163760 00000 n 0000033880 00000 n 0000033960 00000 n -0000883361 00000 n -0002234267 00000 n +0000840196 00000 n +0002163620 00000 n 0000034011 00000 n 0000034118 00000 n -0000883487 00000 n -0002234183 00000 n +0000840322 00000 n +0002163536 00000 n 0000034174 00000 n 0000034238 00000 n -0000888348 00000 n -0002234084 00000 n +0000844877 00000 n +0002163437 00000 n 0000034294 00000 n 0000034369 00000 n -0000892647 00000 n -0002233985 00000 n +0000849081 00000 n +0002163338 00000 n 0000034425 00000 n 0000034493 00000 n -0000892773 00000 n -0002233901 00000 n +0000849207 00000 n +0002163254 00000 n 0000034549 00000 n 0000034639 00000 n -0000897559 00000 n -0002233761 00000 n +0000853653 00000 n +0002163114 00000 n 0000034690 00000 n 0000034729 00000 n -0000897685 00000 n -0002233677 00000 n +0000853779 00000 n +0002163030 00000 n 0000034785 00000 n 0000034865 00000 n -0000902206 00000 n -0002233578 00000 n +0000858260 00000 n +0002162931 00000 n 0000034921 00000 n 0000034985 00000 n -0000907515 00000 n -0002233479 00000 n +0000863367 00000 n +0002162832 00000 n 0000035041 00000 n 0000035112 00000 n -0000907641 00000 n -0002233380 00000 n +0000863493 00000 n +0002162733 00000 n 0000035168 00000 n 0000035253 00000 n -0000911900 00000 n -0002233281 00000 n +0000867700 00000 n +0002162634 00000 n 0000035309 00000 n 0000035376 00000 n -0000919443 00000 n -0002233182 00000 n +0000875074 00000 n +0002162535 00000 n 0000035432 00000 n 0000035483 00000 n -0000919569 00000 n -0002233098 00000 n +0000875200 00000 n +0002162451 00000 n 0000035539 00000 n 0000035630 00000 n -0000919695 00000 n -0002232958 00000 n +0000875326 00000 n +0002162311 00000 n 0000035682 00000 n 0000035729 00000 n -0000919821 00000 n -0002232874 00000 n +0000875452 00000 n +0002162227 00000 n 0000035786 00000 n 0000035832 00000 n -0000923822 00000 n -0002232775 00000 n +0000879240 00000 n +0002162128 00000 n 0000035889 00000 n 0000035950 00000 n -0000923948 00000 n -0002232676 00000 n +0000879366 00000 n +0002162029 00000 n 0000036007 00000 n 0000036055 00000 n -0000924074 00000 n -0002232592 00000 n +0000879492 00000 n +0002161945 00000 n 0000036112 00000 n 0000036164 00000 n -0000928870 00000 n -0002232493 00000 n +0000884098 00000 n +0002161846 00000 n 0000036216 00000 n 0000036297 00000 n -0000933248 00000 n -0002232394 00000 n +0000888318 00000 n +0002161747 00000 n 0000036349 00000 n 0000036398 00000 n -0000933374 00000 n -0002232295 00000 n +0000888444 00000 n +0002161648 00000 n 0000036450 00000 n 0000036521 00000 n -0000936499 00000 n -0002232196 00000 n +0000891437 00000 n +0002161549 00000 n 0000036573 00000 n 0000036658 00000 n -0000936625 00000 n -0002232071 00000 n +0000891563 00000 n +0002161424 00000 n 0000036710 00000 n 0000036763 00000 n -0000936751 00000 n -0002231987 00000 n +0000891689 00000 n +0002161340 00000 n 0000036820 00000 n 0000036895 00000 n -0000936877 00000 n -0002231903 00000 n +0000891815 00000 n +0002161256 00000 n 0000036952 00000 n 0000037052 00000 n -0000941301 00000 n -0002231763 00000 n +0000896154 00000 n +0002161116 00000 n 0000037101 00000 n 0000037159 00000 n -0000941427 00000 n -0002231638 00000 n +0000896280 00000 n +0002160991 00000 n 0000037210 00000 n 0000037248 00000 n -0000941553 00000 n -0002231554 00000 n +0000896406 00000 n +0002160907 00000 n 0000037304 00000 n 0000037353 00000 n -0000941679 00000 n -0002231470 00000 n +0000896532 00000 n +0002160823 00000 n 0000037409 00000 n 0000037445 00000 n -0000941804 00000 n -0002231330 00000 n +0000896657 00000 n +0002160683 00000 n 0000037496 00000 n 0000037557 00000 n -0000945844 00000 n -0002231246 00000 n +0000900609 00000 n +0002160599 00000 n 0000037613 00000 n 0000037672 00000 n -0000945970 00000 n -0002231147 00000 n +0000900735 00000 n +0002160500 00000 n 0000037728 00000 n 0000037789 00000 n -0000948433 00000 n -0002231063 00000 n +0000903178 00000 n +0002160416 00000 n 0000037845 00000 n 0000037912 00000 n -0000952054 00000 n -0002230923 00000 n +0000906749 00000 n +0002160276 00000 n 0000037963 00000 n 0000038011 00000 n -0000952180 00000 n -0002230839 00000 n +0000906875 00000 n +0002160192 00000 n 0000038067 00000 n 0000038139 00000 n -0000952306 00000 n -0002230740 00000 n +0000907001 00000 n +0002160093 00000 n 0000038195 00000 n 0000038322 00000 n -0000955803 00000 n -0002230641 00000 n +0000910364 00000 n +0002159994 00000 n 0000038378 00000 n 0000038452 00000 n -0000955928 00000 n -0002230542 00000 n +0000910489 00000 n +0002159895 00000 n 0000038508 00000 n 0000038598 00000 n -0000960370 00000 n -0002230458 00000 n +0000914725 00000 n +0002159811 00000 n 0000038654 00000 n 0000038737 00000 n -0000960496 00000 n -0002230318 00000 n +0000914851 00000 n +0002159671 00000 n 0000038788 00000 n 0000038905 00000 n -0000964847 00000 n -0002230234 00000 n +0000919138 00000 n +0002159587 00000 n 0000038961 00000 n 0000039025 00000 n -0000964973 00000 n -0002230135 00000 n +0000919264 00000 n +0002159488 00000 n 0000039081 00000 n 0000039137 00000 n -0000965099 00000 n -0002230036 00000 n +0000919390 00000 n +0002159389 00000 n 0000039193 00000 n 0000039261 00000 n -0000998311 00000 n -0002229937 00000 n +0000952468 00000 n +0002159290 00000 n 0000039317 00000 n 0000039371 00000 n -0001012636 00000 n -0002229838 00000 n +0000966731 00000 n +0002159191 00000 n 0000039427 00000 n 0000039514 00000 n -0001016878 00000 n -0002229739 00000 n +0000970922 00000 n +0002159092 00000 n 0000039570 00000 n 0000039650 00000 n -0001021018 00000 n -0002229640 00000 n +0000974921 00000 n +0002158993 00000 n 0000039706 00000 n 0000039780 00000 n -0001021144 00000 n -0002229556 00000 n +0000975047 00000 n +0002158909 00000 n 0000039836 00000 n 0000039911 00000 n -0001021270 00000 n -0002229415 00000 n +0000975173 00000 n +0002158768 00000 n 0000039962 00000 n 0000040019 00000 n -0001026242 00000 n -0002229331 00000 n +0000980028 00000 n +0002158684 00000 n 0000040075 00000 n 0000040130 00000 n -0001029369 00000 n -0002229232 00000 n +0000983097 00000 n +0002158585 00000 n 0000040186 00000 n 0000040240 00000 n -0001032576 00000 n -0002229133 00000 n +0000986118 00000 n +0002158486 00000 n 0000040296 00000 n 0000040343 00000 n -0001032702 00000 n -0002229034 00000 n +0000986244 00000 n +0002158387 00000 n 0000040399 00000 n 0000040437 00000 n -0001052711 00000 n -0002228935 00000 n +0001006193 00000 n +0002158288 00000 n 0000040493 00000 n 0000040527 00000 n -0001077201 00000 n -0002228836 00000 n +0001030552 00000 n +0002158189 00000 n 0000040583 00000 n 0000040621 00000 n -0001133098 00000 n -0002228737 00000 n +0001086326 00000 n +0002158090 00000 n 0000040677 00000 n 0000040732 00000 n -0001133224 00000 n -0002228638 00000 n +0001086452 00000 n +0002157991 00000 n 0000040788 00000 n 0000040844 00000 n -0001138202 00000 n -0002228539 00000 n +0001091098 00000 n +0002157892 00000 n 0000040900 00000 n 0000040941 00000 n -0001141848 00000 n -0002228440 00000 n +0001094730 00000 n +0002157793 00000 n 0000040998 00000 n 0000041083 00000 n -0001145596 00000 n -0002228341 00000 n +0001098388 00000 n +0002157694 00000 n 0000041140 00000 n 0000041189 00000 n -0001145722 00000 n -0002228242 00000 n +0001098514 00000 n +0002157595 00000 n 0000041246 00000 n 0000041285 00000 n -0001145848 00000 n -0002228143 00000 n +0001098640 00000 n +0002157496 00000 n 0000041342 00000 n 0000041385 00000 n -0001145973 00000 n -0002228044 00000 n +0001098765 00000 n +0002157397 00000 n 0000041442 00000 n 0000041506 00000 n -0001153147 00000 n -0002227945 00000 n +0001105575 00000 n +0002157298 00000 n 0000041563 00000 n 0000041652 00000 n -0001153272 00000 n -0002227846 00000 n +0001105700 00000 n +0002157199 00000 n 0000041709 00000 n 0000041805 00000 n -0001157962 00000 n -0002227747 00000 n +0001110226 00000 n +0002157100 00000 n 0000041862 00000 n 0000041920 00000 n -0001163425 00000 n -0002227648 00000 n +0001115371 00000 n +0002157001 00000 n 0000041977 00000 n 0000042036 00000 n -0001167682 00000 n -0002227564 00000 n +0001119469 00000 n +0002156917 00000 n 0000042093 00000 n 0000042153 00000 n -0001167808 00000 n -0002227424 00000 n +0001119595 00000 n +0002156777 00000 n 0000042204 00000 n 0000042265 00000 n -0001167934 00000 n -0002227340 00000 n +0001119721 00000 n +0002156693 00000 n 0000042321 00000 n 0000042391 00000 n -0001168059 00000 n -0002227241 00000 n +0001119846 00000 n +0002156594 00000 n 0000042447 00000 n 0000042505 00000 n -0001172193 00000 n -0002227157 00000 n +0001123852 00000 n +0002156510 00000 n 0000042561 00000 n 0000042619 00000 n -0001172318 00000 n -0002227017 00000 n +0001123977 00000 n +0002156370 00000 n 0000042670 00000 n 0000042760 00000 n -0001172444 00000 n -0002226933 00000 n +0001124103 00000 n +0002156286 00000 n 0000042816 00000 n 0000042893 00000 n -0001172570 00000 n -0002226849 00000 n +0001124229 00000 n +0002156202 00000 n 0000042949 00000 n 0000043026 00000 n -0001177101 00000 n -0002226709 00000 n +0001128650 00000 n +0002156062 00000 n 0000043077 00000 n 0000043197 00000 n -0001177227 00000 n -0002226625 00000 n +0001128776 00000 n +0002155978 00000 n 0000043253 00000 n 0000043313 00000 n -0001177353 00000 n -0002226541 00000 n +0001128902 00000 n +0002155894 00000 n 0000043369 00000 n 0000043432 00000 n -0001181511 00000 n -0002226401 00000 n +0001132929 00000 n +0002155754 00000 n 0000043483 00000 n 0000043557 00000 n -0001181637 00000 n -0002226317 00000 n +0001133055 00000 n +0002155670 00000 n 0000043613 00000 n 0000043701 00000 n -0001181763 00000 n -0002226218 00000 n +0001133181 00000 n +0002155571 00000 n 0000043757 00000 n 0000043821 00000 n -0001181888 00000 n -0002226119 00000 n +0001133306 00000 n +0002155472 00000 n 0000043877 00000 n 0000043929 00000 n -0001182013 00000 n -0002226035 00000 n +0001133431 00000 n +0002155388 00000 n 0000043985 00000 n 0000044077 00000 n -0001185726 00000 n -0002225894 00000 n +0001137021 00000 n +0002155247 00000 n 0000044129 00000 n 0000044191 00000 n -0001185852 00000 n -0002225810 00000 n +0001137147 00000 n +0002155163 00000 n 0000044248 00000 n 0000044308 00000 n -0001185978 00000 n -0002225711 00000 n +0001137273 00000 n +0002155064 00000 n 0000044365 00000 n 0000044430 00000 n -0001188573 00000 n -0002225612 00000 n +0001139823 00000 n +0002154965 00000 n 0000044487 00000 n 0000044567 00000 n -0001191233 00000 n -0002225513 00000 n +0001142436 00000 n +0002154866 00000 n 0000044624 00000 n 0000044689 00000 n -0001194835 00000 n -0002225414 00000 n +0001145955 00000 n +0002154767 00000 n 0000044746 00000 n 0000044807 00000 n -0001194961 00000 n -0002225315 00000 n +0001146081 00000 n +0002154668 00000 n 0000044864 00000 n 0000044953 00000 n -0001197095 00000 n -0002225216 00000 n +0001148166 00000 n +0002154569 00000 n 0000045010 00000 n 0000045063 00000 n -0001201576 00000 n -0002225117 00000 n +0001152471 00000 n +0002154470 00000 n 0000045120 00000 n 0000045262 00000 n -0001205835 00000 n -0002225018 00000 n +0001156584 00000 n +0002154371 00000 n 0000045319 00000 n 0000045379 00000 n -0001208307 00000 n -0002224919 00000 n +0001159008 00000 n +0002154272 00000 n 0000045437 00000 n 0000045503 00000 n -0001211407 00000 n -0002224820 00000 n +0001161945 00000 n +0002154173 00000 n 0000045561 00000 n 0000045615 00000 n -0001214986 00000 n -0002224721 00000 n +0001165382 00000 n +0002154074 00000 n 0000045673 00000 n 0000045755 00000 n -0001215301 00000 n -0002224622 00000 n +0001165697 00000 n +0002153975 00000 n 0000045813 00000 n 0000045870 00000 n -0001215426 00000 n -0002224523 00000 n +0001165822 00000 n +0002153876 00000 n 0000045928 00000 n 0000045978 00000 n -0001219703 00000 n -0002224424 00000 n +0001169885 00000 n +0002153777 00000 n 0000046036 00000 n 0000046110 00000 n -0001219829 00000 n -0002224340 00000 n +0001170011 00000 n +0002153693 00000 n 0000046168 00000 n 0000046256 00000 n -0001223758 00000 n -0002224200 00000 n +0001173751 00000 n +0002153553 00000 n 0000046308 00000 n 0000046398 00000 n -0001224135 00000 n -0002224116 00000 n +0001174128 00000 n +0002153469 00000 n 0000046455 00000 n 0000046517 00000 n -0001227869 00000 n -0002224017 00000 n +0001177828 00000 n +0002153370 00000 n 0000046574 00000 n 0000046639 00000 n -0001227995 00000 n -0002223918 00000 n +0001177954 00000 n +0002153271 00000 n 0000046696 00000 n 0000046771 00000 n -0001231484 00000 n -0002223819 00000 n +0001181296 00000 n +0002153172 00000 n 0000046828 00000 n 0000046912 00000 n -0001234547 00000 n -0002223678 00000 n +0001184300 00000 n +0002153031 00000 n 0000046969 00000 n 0000047055 00000 n -0001234673 00000 n -0002223594 00000 n +0001184426 00000 n +0002152947 00000 n 0000047117 00000 n 0000047187 00000 n -0001234798 00000 n -0002223495 00000 n +0001184551 00000 n +0002152848 00000 n 0000047249 00000 n 0000047349 00000 n -0001234924 00000 n -0002223396 00000 n +0001184677 00000 n +0002152749 00000 n 0000047411 00000 n 0000047512 00000 n -0001237477 00000 n -0002223297 00000 n +0001187194 00000 n +0002152650 00000 n 0000047574 00000 n 0000047672 00000 n -0001237603 00000 n -0002223198 00000 n +0001187320 00000 n +0002152551 00000 n 0000047734 00000 n 0000047814 00000 n -0001240068 00000 n -0002223099 00000 n +0001189728 00000 n +0002152452 00000 n 0000047876 00000 n 0000047971 00000 n -0001240194 00000 n -0002223000 00000 n +0001189854 00000 n +0002152353 00000 n 0000048033 00000 n 0000048115 00000 n -0001240320 00000 n -0002222901 00000 n +0001189980 00000 n +0002152254 00000 n 0000048177 00000 n 0000048275 00000 n -0001242399 00000 n -0002222802 00000 n +0001192019 00000 n +0002152155 00000 n 0000048337 00000 n 0000048448 00000 n -0001242525 00000 n -0002222703 00000 n +0001192145 00000 n +0002152056 00000 n 0000048511 00000 n 0000048615 00000 n -0001245472 00000 n -0002222604 00000 n +0001195038 00000 n +0002151957 00000 n 0000048678 00000 n 0000048782 00000 n -0001245598 00000 n -0002222505 00000 n +0001195164 00000 n +0002151858 00000 n 0000048845 00000 n 0000048942 00000 n -0001245722 00000 n -0002222406 00000 n +0001195288 00000 n +0002151759 00000 n 0000049005 00000 n 0000049084 00000 n -0001248358 00000 n -0002222307 00000 n +0001197869 00000 n +0002151660 00000 n 0000049147 00000 n 0000049231 00000 n -0001248482 00000 n -0002222223 00000 n +0001197993 00000 n +0002151576 00000 n 0000049294 00000 n 0000049392 00000 n -0001248608 00000 n -0002222139 00000 n +0001198119 00000 n +0002151492 00000 n 0000049449 00000 n 0000049503 00000 n -0001252383 00000 n -0002221999 00000 n +0001201827 00000 n +0002151352 00000 n 0000049555 00000 n 0000049606 00000 n -0001252509 00000 n -0002221915 00000 n +0001201953 00000 n +0002151268 00000 n 0000049663 00000 n 0000049714 00000 n -0001252635 00000 n -0002221816 00000 n +0001202079 00000 n +0002151169 00000 n 0000049771 00000 n 0000049813 00000 n -0001252761 00000 n -0002221717 00000 n +0001202205 00000 n +0002151070 00000 n 0000049870 00000 n 0000049917 00000 n -0001255816 00000 n -0002221633 00000 n +0001205203 00000 n +0002150986 00000 n 0000049974 00000 n 0000050018 00000 n -0001255942 00000 n -0002221493 00000 n +0001205329 00000 n +0002150846 00000 n 0000050070 00000 n 0000050138 00000 n -0001261775 00000 n -0002221368 00000 n +0001210971 00000 n +0002150721 00000 n 0000050195 00000 n 0000050259 00000 n -0001261901 00000 n -0002221284 00000 n +0001211097 00000 n +0002150637 00000 n 0000050321 00000 n 0000050374 00000 n -0001262027 00000 n -0002221185 00000 n +0001211223 00000 n +0002150538 00000 n 0000050436 00000 n 0000050506 00000 n -0001269044 00000 n -0002221086 00000 n +0001217924 00000 n +0002150439 00000 n 0000050568 00000 n 0000050622 00000 n -0001269170 00000 n -0002220987 00000 n +0001218050 00000 n +0002150340 00000 n 0000050684 00000 n 0000050761 00000 n -0001275539 00000 n -0002220888 00000 n +0001224248 00000 n +0002150241 00000 n 0000050823 00000 n 0000050896 00000 n -0001275665 00000 n -0002220789 00000 n +0001224374 00000 n +0002150142 00000 n 0000050958 00000 n 0000051015 00000 n -0001281729 00000 n -0002220690 00000 n +0001230228 00000 n +0002150043 00000 n 0000051077 00000 n 0000051185 00000 n -0001281855 00000 n -0002220606 00000 n +0001230354 00000 n +0002149959 00000 n 0000051247 00000 n 0000051310 00000 n -0001281980 00000 n -0002220522 00000 n +0001230479 00000 n +0002149875 00000 n 0000051367 00000 n 0000051451 00000 n -0001297295 00000 n -0002220382 00000 n +0001244853 00000 n +0002149735 00000 n 0000051503 00000 n 0000051555 00000 n -0001301420 00000 n -0002220298 00000 n +0001248710 00000 n +0002149651 00000 n 0000051612 00000 n 0000051658 00000 n -0001301546 00000 n -0002220199 00000 n +0001248836 00000 n +0002149552 00000 n 0000051715 00000 n 0000051776 00000 n -0001301672 00000 n -0002220100 00000 n +0001248962 00000 n +0002149453 00000 n 0000051833 00000 n 0000051915 00000 n -0001301798 00000 n -0002220001 00000 n +0001249088 00000 n +0002149354 00000 n 0000051972 00000 n 0000052028 00000 n -0001305441 00000 n -0002219902 00000 n +0001252304 00000 n +0002149255 00000 n 0000052085 00000 n 0000052135 00000 n -0001305566 00000 n -0002219803 00000 n +0001252429 00000 n +0002149156 00000 n 0000052192 00000 n 0000052240 00000 n -0001308927 00000 n -0002219719 00000 n +0001255755 00000 n +0002149072 00000 n 0000052297 00000 n 0000052348 00000 n -0001309053 00000 n -0002219620 00000 n +0001255881 00000 n +0002148973 00000 n 0000052400 00000 n 0000052446 00000 n -0001313270 00000 n -0002219480 00000 n +0001259919 00000 n +0002148833 00000 n 0000052498 00000 n 0000052574 00000 n -0001313396 00000 n -0002219396 00000 n +0001260045 00000 n +0002148749 00000 n 0000052631 00000 n 0000052697 00000 n -0001313522 00000 n -0002219297 00000 n +0001260171 00000 n +0002148650 00000 n 0000052754 00000 n 0000052797 00000 n -0001316015 00000 n -0002219213 00000 n +0001262533 00000 n +0002148566 00000 n 0000052854 00000 n 0000052903 00000 n -0001316141 00000 n -0002219114 00000 n +0001262659 00000 n +0002148467 00000 n 0000052955 00000 n 0000053020 00000 n -0001316266 00000 n -0002218974 00000 n +0001262784 00000 n +0002148327 00000 n 0000053072 00000 n 0000053122 00000 n -0001316392 00000 n -0002218890 00000 n +0001262910 00000 n +0002148243 00000 n 0000053179 00000 n 0000053235 00000 n -0001316517 00000 n -0002218791 00000 n +0001263035 00000 n +0002148144 00000 n 0000053292 00000 n 0000053340 00000 n -0001316643 00000 n -0002218707 00000 n +0001263161 00000 n +0002148060 00000 n 0000053397 00000 n 0000053444 00000 n -0001319801 00000 n -0002218582 00000 n +0001266285 00000 n +0002147935 00000 n 0000053496 00000 n 0000053531 00000 n -0001319927 00000 n -0002218498 00000 n +0001266411 00000 n +0002147851 00000 n 0000053588 00000 n 0000053664 00000 n -0001322582 00000 n -0002218399 00000 n +0001269044 00000 n +0002147752 00000 n 0000053721 00000 n 0000053776 00000 n -0001333246 00000 n -0002218300 00000 n +0001279525 00000 n +0002147653 00000 n 0000053833 00000 n 0000053928 00000 n -0001348424 00000 n -0002218216 00000 n +0001294070 00000 n +0002147569 00000 n 0000053985 00000 n 0000054056 00000 n -0001626808 00000 n -0002218077 00000 n +0001572054 00000 n +0002147430 00000 n 0000054105 00000 n 0000054150 00000 n -0001626934 00000 n -0002217993 00000 n +0001572180 00000 n +0002147346 00000 n 0000054201 00000 n 0000054248 00000 n -0001627060 00000 n -0002217894 00000 n +0001572306 00000 n +0002147247 00000 n 0000054299 00000 n 0000054335 00000 n -0001630319 00000 n -0002217754 00000 n +0001575130 00000 n +0002147107 00000 n 0000054386 00000 n 0000054428 00000 n -0001630445 00000 n -0002217670 00000 n +0001575256 00000 n +0002147023 00000 n 0000054484 00000 n 0000054517 00000 n -0001630571 00000 n -0002217571 00000 n +0001575382 00000 n +0002146924 00000 n 0000054573 00000 n 0000054614 00000 n -0001630823 00000 n -0002217472 00000 n +0001575634 00000 n +0002146825 00000 n 0000054670 00000 n 0000054711 00000 n -0001630949 00000 n -0002217373 00000 n +0001575760 00000 n +0002146726 00000 n 0000054767 00000 n 0000054802 00000 n -0001634755 00000 n -0002217289 00000 n +0001579377 00000 n +0002146642 00000 n 0000054858 00000 n 0000054894 00000 n -0001634881 00000 n -0002217149 00000 n +0001579503 00000 n +0002146502 00000 n 0000054945 00000 n 0000055002 00000 n -0001635007 00000 n -0002217065 00000 n +0001579629 00000 n +0002146418 00000 n 0000055058 00000 n 0000055096 00000 n -0001635133 00000 n -0002216981 00000 n +0001579755 00000 n +0002146334 00000 n 0000055152 00000 n 0000055185 00000 n -0001635259 00000 n -0002216897 00000 n +0001579881 00000 n +0002146250 00000 n 0000055236 00000 n 0000055275 00000 n -0001638656 00000 n -0002216758 00000 n +0001583155 00000 n +0002146111 00000 n 0000055324 00000 n 0000055386 00000 n -0001638780 00000 n -0002216674 00000 n +0001583279 00000 n +0002146027 00000 n 0000055437 00000 n 0000055484 00000 n -0001638904 00000 n -0002216575 00000 n +0001583403 00000 n +0002145928 00000 n 0000055535 00000 n 0000055573 00000 n -0001639030 00000 n -0002216435 00000 n +0001583529 00000 n +0002145788 00000 n 0000055624 00000 n 0000055671 00000 n -0001643004 00000 n -0002216366 00000 n +0001587462 00000 n +0002145719 00000 n 0000055727 00000 n 0000055766 00000 n -0001643130 00000 n -0002216226 00000 n +0001587588 00000 n +0002145579 00000 n 0000055817 00000 n 0000055860 00000 n -0001643256 00000 n -0002216142 00000 n +0001587714 00000 n +0002145495 00000 n 0000055916 00000 n 0000055976 00000 n -0001647425 00000 n -0002216043 00000 n +0001591784 00000 n +0002145396 00000 n 0000056032 00000 n 0000056095 00000 n -0001647551 00000 n -0002215944 00000 n +0001591910 00000 n +0002145297 00000 n 0000056151 00000 n 0000056198 00000 n -0001647677 00000 n -0002215845 00000 n +0001592036 00000 n +0002145198 00000 n 0000056254 00000 n 0000056314 00000 n -0001651985 00000 n -0002215746 00000 n +0001596256 00000 n +0002145099 00000 n 0000056370 00000 n 0000056426 00000 n -0001652111 00000 n -0002215662 00000 n +0001596382 00000 n +0002145015 00000 n 0000056482 00000 n 0000056524 00000 n -0001652237 00000 n -0002215522 00000 n +0001596508 00000 n +0002144875 00000 n 0000056575 00000 n 0000056631 00000 n -0001652363 00000 n -0002215438 00000 n +0001596634 00000 n +0002144791 00000 n 0000056687 00000 n 0000056727 00000 n -0001656845 00000 n -0002215339 00000 n +0001601035 00000 n +0002144692 00000 n 0000056783 00000 n 0000056823 00000 n -0001656971 00000 n -0002215214 00000 n +0001601161 00000 n +0002144567 00000 n 0000056879 00000 n 0000056925 00000 n -0001657095 00000 n -0002215130 00000 n +0001601285 00000 n +0002144483 00000 n 0000056986 00000 n 0000057043 00000 n -0001659917 00000 n -0002215031 00000 n +0001604017 00000 n +0002144384 00000 n 0000057104 00000 n 0000057204 00000 n -0001660043 00000 n -0002214932 00000 n +0001604143 00000 n +0002144285 00000 n 0000057265 00000 n 0000057313 00000 n -0001664210 00000 n -0002214833 00000 n +0001608218 00000 n +0002144186 00000 n 0000057374 00000 n 0000057422 00000 n -0001664336 00000 n -0002214734 00000 n +0001608344 00000 n +0002144087 00000 n 0000057483 00000 n 0000057552 00000 n -0001664461 00000 n -0002214635 00000 n +0001608469 00000 n +0002143988 00000 n 0000057613 00000 n 0000057684 00000 n -0001667267 00000 n -0002214536 00000 n +0001611241 00000 n +0002143889 00000 n 0000057745 00000 n 0000057805 00000 n -0001673992 00000 n -0002214452 00000 n +0001617830 00000 n +0002143805 00000 n 0000057866 00000 n 0000057921 00000 n -0001680814 00000 n -0002214353 00000 n +0001624489 00000 n +0002143706 00000 n 0000057972 00000 n 0000058008 00000 n -0001680939 00000 n -0002214269 00000 n +0001624614 00000 n +0002143622 00000 n 0000058059 00000 n 0000058098 00000 n -0001685044 00000 n -0002214130 00000 n +0001628554 00000 n +0002143483 00000 n 0000058147 00000 n 0000058198 00000 n -0001685170 00000 n -0002214046 00000 n +0001628680 00000 n +0002143399 00000 n 0000058249 00000 n 0000058296 00000 n -0001685296 00000 n -0002213947 00000 n +0001628806 00000 n +0002143300 00000 n 0000058347 00000 n 0000058401 00000 n -0001685421 00000 n -0002213807 00000 n +0001628931 00000 n +0002143160 00000 n 0000058452 00000 n 0000058503 00000 n -0001685547 00000 n -0002213738 00000 n +0001629057 00000 n +0002143091 00000 n 0000058559 00000 n 0000058624 00000 n -0001693534 00000 n -0002213598 00000 n +0001636765 00000 n +0002142951 00000 n 0000058675 00000 n 0000058727 00000 n -0001697773 00000 n -0002213529 00000 n +0001640892 00000 n +0002142882 00000 n 0000058783 00000 n 0000058852 00000 n -0001697899 00000 n -0002213445 00000 n +0001641018 00000 n +0002142798 00000 n 0000058903 00000 n 0000058942 00000 n -0001701745 00000 n -0002213306 00000 n +0001644811 00000 n +0002142659 00000 n 0000058991 00000 n 0000059042 00000 n -0001701871 00000 n -0002213222 00000 n +0001644937 00000 n +0002142575 00000 n 0000059093 00000 n 0000059140 00000 n -0001701996 00000 n -0002213082 00000 n +0001645062 00000 n +0002142435 00000 n 0000059191 00000 n 0000059254 00000 n -0001707068 00000 n -0002212998 00000 n +0001650080 00000 n +0002142351 00000 n 0000059310 00000 n 0000059360 00000 n -0001707194 00000 n -0002212858 00000 n +0001650206 00000 n +0002142211 00000 n 0000059416 00000 n 0000059474 00000 n -0001711687 00000 n -0002212789 00000 n +0001654651 00000 n +0002142142 00000 n 0000059535 00000 n 0000059582 00000 n -0001711813 00000 n -0002212664 00000 n +0001654777 00000 n +0002142017 00000 n 0000059638 00000 n 0000059708 00000 n -0001711939 00000 n -0002212595 00000 n +0001654903 00000 n +0002141948 00000 n 0000059769 00000 n 0000059836 00000 n -0001716601 00000 n -0002212455 00000 n +0001659422 00000 n +0002141808 00000 n 0000059887 00000 n 0000059943 00000 n -0001720434 00000 n -0002212371 00000 n +0001662932 00000 n +0002141724 00000 n 0000059999 00000 n 0000060048 00000 n -0001720560 00000 n -0002212272 00000 n +0001663058 00000 n +0002141625 00000 n 0000060104 00000 n 0000060148 00000 n -0001720686 00000 n -0002212188 00000 n +0001663184 00000 n +0002141541 00000 n 0000060204 00000 n 0000060241 00000 n -0001720812 00000 n -0002212089 00000 n +0001663310 00000 n +0002141442 00000 n 0000060292 00000 n 0000060362 00000 n -0001723889 00000 n -0002211964 00000 n +0001666284 00000 n +0002141317 00000 n 0000060413 00000 n 0000060452 00000 n -0001724015 00000 n -0002211895 00000 n +0001666410 00000 n +0002141248 00000 n 0000060508 00000 n 0000060556 00000 n -0001726903 00000 n -0002211756 00000 n +0001669208 00000 n +0002141109 00000 n 0000060605 00000 n 0000060655 00000 n -0001727029 00000 n -0002211672 00000 n +0001669334 00000 n +0002141025 00000 n 0000060706 00000 n 0000060753 00000 n -0001727155 00000 n -0002211532 00000 n +0001669460 00000 n +0002140885 00000 n 0000060804 00000 n 0000060846 00000 n -0001727281 00000 n -0002211407 00000 n +0001669586 00000 n +0002140760 00000 n 0000060902 00000 n 0000060970 00000 n -0001727407 00000 n -0002211323 00000 n +0001669712 00000 n +0002140676 00000 n 0000061031 00000 n 0000061083 00000 n -0001730819 00000 n -0002211224 00000 n +0001673019 00000 n +0002140577 00000 n 0000061144 00000 n 0000061203 00000 n -0001730945 00000 n -0002211125 00000 n +0001673145 00000 n +0002140478 00000 n 0000061264 00000 n 0000061350 00000 n -0001731071 00000 n -0002211041 00000 n +0001673271 00000 n +0002140394 00000 n 0000061411 00000 n 0000061474 00000 n -0001734842 00000 n -0002210901 00000 n +0001676917 00000 n +0002140254 00000 n 0000061530 00000 n 0000061606 00000 n -0001734968 00000 n -0002210817 00000 n +0001677043 00000 n +0002140170 00000 n 0000061667 00000 n 0000061726 00000 n -0001744319 00000 n -0002210718 00000 n +0001685965 00000 n +0002140071 00000 n 0000061787 00000 n 0000061840 00000 n -0001744445 00000 n -0002210634 00000 n +0001686091 00000 n +0002139987 00000 n 0000061901 00000 n 0000061959 00000 n -0001750614 00000 n -0002210535 00000 n +0001691807 00000 n +0002139888 00000 n 0000062015 00000 n 0000062103 00000 n -0001754443 00000 n -0002210410 00000 n +0001695416 00000 n +0002139763 00000 n 0000062159 00000 n 0000062242 00000 n -0001754569 00000 n -0002210326 00000 n +0001695542 00000 n +0002139679 00000 n 0000062303 00000 n 0000062369 00000 n -0001755135 00000 n -0002210227 00000 n +0001696108 00000 n +0002139580 00000 n 0000062430 00000 n 0000062474 00000 n -0001758967 00000 n -0002210128 00000 n +0001699839 00000 n +0002139481 00000 n 0000062535 00000 n 0000062577 00000 n -0001759093 00000 n -0002210044 00000 n +0001699965 00000 n +0002139397 00000 n 0000062638 00000 n 0000062675 00000 n -0001759219 00000 n -0002209945 00000 n +0001700091 00000 n +0002139298 00000 n 0000062726 00000 n 0000062770 00000 n -0001759345 00000 n -0002209846 00000 n +0001700217 00000 n +0002139199 00000 n 0000062821 00000 n 0000062879 00000 n -0001763429 00000 n -0002209706 00000 n +0001704172 00000 n +0002139059 00000 n 0000062930 00000 n 0000062989 00000 n -0001763555 00000 n -0002209581 00000 n +0001704298 00000 n +0002138934 00000 n 0000063045 00000 n 0000063089 00000 n -0001763681 00000 n -0002209512 00000 n +0001704424 00000 n +0002138865 00000 n 0000063150 00000 n 0000063229 00000 n -0001763807 00000 n -0002209413 00000 n +0001704550 00000 n +0002138766 00000 n 0000063285 00000 n 0000063339 00000 n -0001772341 00000 n -0002209329 00000 n +0001712341 00000 n +0002138682 00000 n 0000063395 00000 n 0000063441 00000 n -0001780665 00000 n -0002209204 00000 n +0001719911 00000 n +0002138557 00000 n 0000063492 00000 n 0000063531 00000 n -0001780791 00000 n -0002209120 00000 n +0001720037 00000 n +0002138473 00000 n 0000063587 00000 n 0000063696 00000 n -0001784674 00000 n -0002209021 00000 n +0001723740 00000 n +0002138374 00000 n 0000063752 00000 n 0000063808 00000 n -0001784800 00000 n -0002208937 00000 n +0001723866 00000 n +0002138290 00000 n 0000063864 00000 n 0000063920 00000 n -0001790575 00000 n -0002208798 00000 n +0001729430 00000 n +0002138151 00000 n 0000063969 00000 n 0000064029 00000 n -0001790701 00000 n -0002208714 00000 n +0001729556 00000 n +0002138067 00000 n 0000064080 00000 n 0000064127 00000 n -0001794912 00000 n -0002208574 00000 n +0001733500 00000 n +0002137927 00000 n 0000064178 00000 n 0000064224 00000 n -0001795037 00000 n -0002208449 00000 n +0001733625 00000 n +0002137802 00000 n 0000064280 00000 n 0000064332 00000 n -0001799359 00000 n -0002208380 00000 n +0001737787 00000 n +0002137733 00000 n 0000064393 00000 n 0000064452 00000 n -0001811756 00000 n -0002208240 00000 n +0001749271 00000 n +0002137593 00000 n 0000064508 00000 n 0000064565 00000 n -0001811880 00000 n -0002208156 00000 n +0001749395 00000 n +0002137509 00000 n 0000064626 00000 n 0000064682 00000 n -0001812006 00000 n -0002208072 00000 n +0001749521 00000 n +0002137425 00000 n 0000064743 00000 n 0000064804 00000 n -0001819237 00000 n -0002207973 00000 n +0001756485 00000 n +0002137326 00000 n 0000064860 00000 n 0000064914 00000 n -0001819363 00000 n -0002207874 00000 n +0001756611 00000 n +0002137227 00000 n 0000064970 00000 n 0000065042 00000 n -0001823690 00000 n -0002207749 00000 n +0001760458 00000 n +0002137102 00000 n 0000065098 00000 n 0000065174 00000 n -0001827255 00000 n -0002207665 00000 n +0001763872 00000 n +0002137018 00000 n 0000065235 00000 n 0000065303 00000 n -0001827381 00000 n -0002207566 00000 n +0001763998 00000 n +0002136919 00000 n 0000065364 00000 n 0000065426 00000 n -0001829523 00000 n -0002207467 00000 n +0001766053 00000 n +0002136820 00000 n 0000065487 00000 n 0000065546 00000 n -0001829649 00000 n -0002207383 00000 n +0001766179 00000 n +0002136736 00000 n 0000065607 00000 n 0000065680 00000 n -0001829775 00000 n -0002207258 00000 n +0001766305 00000 n +0002136611 00000 n 0000065731 00000 n 0000065770 00000 n -0001829900 00000 n -0002207189 00000 n +0001766430 00000 n +0002136542 00000 n 0000065826 00000 n 0000065876 00000 n -0001834366 00000 n -0002207050 00000 n +0001770755 00000 n +0002136403 00000 n 0000065925 00000 n 0000065991 00000 n -0001834491 00000 n -0002206966 00000 n +0001770880 00000 n +0002136319 00000 n 0000066042 00000 n 0000066089 00000 n -0001834616 00000 n -0002206867 00000 n +0001771005 00000 n +0002136220 00000 n 0000066140 00000 n 0000066188 00000 n -0001838437 00000 n -0002206727 00000 n +0001774713 00000 n +0002136080 00000 n 0000066239 00000 n 0000066307 00000 n -0001838563 00000 n -0002206643 00000 n +0001774839 00000 n +0002135996 00000 n 0000066363 00000 n 0000066401 00000 n -0001841192 00000 n -0002206544 00000 n +0001777335 00000 n +0002135897 00000 n 0000066457 00000 n 0000066501 00000 n -0001841318 00000 n -0002206445 00000 n +0001777461 00000 n +0002135798 00000 n 0000066557 00000 n 0000066599 00000 n -0001841442 00000 n -0002206361 00000 n +0001777585 00000 n +0002135714 00000 n 0000066655 00000 n 0000066701 00000 n -0001845221 00000 n -0002206221 00000 n +0001781339 00000 n +0002135574 00000 n 0000066752 00000 n 0000066830 00000 n -0001849389 00000 n -0002206137 00000 n +0001785469 00000 n +0002135490 00000 n 0000066886 00000 n 0000066936 00000 n -0001849514 00000 n -0002206038 00000 n +0001785594 00000 n +0002135391 00000 n 0000066992 00000 n 0000067036 00000 n -0001854808 00000 n -0002205939 00000 n +0001790821 00000 n +0002135292 00000 n 0000067092 00000 n 0000067130 00000 n -0001854933 00000 n -0002205840 00000 n +0001790946 00000 n +0002135193 00000 n 0000067186 00000 n 0000067224 00000 n -0001855058 00000 n -0002205756 00000 n +0001791071 00000 n +0002135109 00000 n 0000067280 00000 n 0000067319 00000 n -0001858277 00000 n -0002205631 00000 n +0001794018 00000 n +0002134984 00000 n 0000067370 00000 n 0000067409 00000 n -0001858403 00000 n -0002205547 00000 n +0001794144 00000 n +0002134900 00000 n 0000067465 00000 n 0000067521 00000 n -0001858529 00000 n -0002205448 00000 n +0001794270 00000 n +0002134801 00000 n 0000067577 00000 n 0000067634 00000 n -0001858655 00000 n -0002205364 00000 n +0001794396 00000 n +0002134717 00000 n 0000067690 00000 n 0000067750 00000 n -0001863877 00000 n -0002205225 00000 n +0001799511 00000 n +0002134578 00000 n 0000067799 00000 n 0000067839 00000 n -0001864003 00000 n -0002205141 00000 n +0001799637 00000 n +0002134494 00000 n 0000067890 00000 n 0000067937 00000 n -0001864129 00000 n -0002205042 00000 n +0001799763 00000 n +0002134395 00000 n 0000067988 00000 n 0000068044 00000 n -0001864255 00000 n -0002204943 00000 n +0001799889 00000 n +0002134296 00000 n 0000068095 00000 n 0000068139 00000 n -0001867639 00000 n -0002204844 00000 n +0001803087 00000 n +0002134197 00000 n 0000068190 00000 n 0000068241 00000 n -0001867765 00000 n -0002204760 00000 n +0001803213 00000 n +0002134113 00000 n 0000068292 00000 n 0000068335 00000 n -0001869182 00000 n -0002204621 00000 n +0001804587 00000 n +0002133974 00000 n 0000068384 00000 n 0000068431 00000 n -0001869308 00000 n -0002204537 00000 n +0001804713 00000 n +0002133890 00000 n 0000068482 00000 n 0000068512 00000 n -0001869434 00000 n -0002204453 00000 n +0001804839 00000 n +0002133806 00000 n 0000068563 00000 n 0000068610 00000 n -0001870325 00000 n -0002204329 00000 n +0001805707 00000 n +0002133682 00000 n 0000068659 00000 n 0000068708 00000 n -0001870451 00000 n -0002204260 00000 n +0001805833 00000 n +0002133613 00000 n 0000068759 00000 n 0000068789 00000 n -0001871175 00000 n -0002204121 00000 n +0001806542 00000 n +0002133474 00000 n 0000068834 00000 n 0000068880 00000 n -0001873487 00000 n -0002203996 00000 n +0001808696 00000 n +0002133349 00000 n 0000068929 00000 n 0000068992 00000 n -0001873613 00000 n -0002203912 00000 n +0001808822 00000 n +0002133265 00000 n 0000069043 00000 n 0000069077 00000 n -0001873739 00000 n -0002203813 00000 n +0001808948 00000 n +0002133166 00000 n 0000069128 00000 n 0000069184 00000 n -0001873865 00000 n -0002203729 00000 n +0001809074 00000 n +0002133082 00000 n 0000069235 00000 n 0000069277 00000 n -0001877135 00000 n -0002203589 00000 n +0001812146 00000 n +0002132942 00000 n 0000069326 00000 n 0000069387 00000 n -0001877261 00000 n -0002203464 00000 n +0001812272 00000 n +0002132817 00000 n 0000069438 00000 n 0000069492 00000 n -0001877387 00000 n -0002203339 00000 n +0001812398 00000 n +0002132692 00000 n 0000069548 00000 n 0000069586 00000 n -0001881500 00000 n -0002203255 00000 n +0001816349 00000 n +0002132608 00000 n 0000069647 00000 n 0000069690 00000 n -0001881626 00000 n -0002203156 00000 n +0001816475 00000 n +0002132509 00000 n 0000069751 00000 n 0000069814 00000 n -0001885799 00000 n -0002203057 00000 n +0001820591 00000 n +0002132410 00000 n 0000069875 00000 n 0000069918 00000 n -0001885925 00000 n -0002202958 00000 n +0001820717 00000 n +0002132311 00000 n 0000069979 00000 n 0000070035 00000 n -0001886051 00000 n -0002202874 00000 n +0001820843 00000 n +0002132227 00000 n 0000070096 00000 n 0000070149 00000 n -0001889855 00000 n -0002202790 00000 n +0001823955 00000 n +0002132143 00000 n 0000070205 00000 n 0000070259 00000 n -0001891177 00000 n -0002202665 00000 n +0001825277 00000 n +0002132018 00000 n 0000070310 00000 n 0000070353 00000 n -0001891430 00000 n -0002202581 00000 n +0001825530 00000 n +0002131934 00000 n 0000070409 00000 n 0000070457 00000 n -0001894676 00000 n -0002202497 00000 n +0001828411 00000 n +0002131850 00000 n 0000070513 00000 n 0000070569 00000 n -0001899251 00000 n -0002202372 00000 n +0001832900 00000 n +0002131725 00000 n 0000070618 00000 n 0000070682 00000 n -0001899377 00000 n -0002202261 00000 n +0001833026 00000 n +0002131614 00000 n 0000070733 00000 n 0000070780 00000 n -0001899502 00000 n -0002202177 00000 n +0001833151 00000 n +0002131530 00000 n 0000070836 00000 n 0000070885 00000 n -0001903003 00000 n -0002202078 00000 n +0001836537 00000 n +0002131431 00000 n 0000070941 00000 n 0000070994 00000 n -0001907374 00000 n -0002201979 00000 n +0001840723 00000 n +0002131332 00000 n 0000071050 00000 n 0000071096 00000 n -0001907500 00000 n -0002201880 00000 n +0001840849 00000 n +0002131233 00000 n 0000071152 00000 n 0000071195 00000 n -0001907626 00000 n -0002201781 00000 n +0001840975 00000 n +0002131134 00000 n 0000071251 00000 n 0000071293 00000 n -0001911597 00000 n -0002201682 00000 n +0001844842 00000 n +0002131035 00000 n 0000071349 00000 n 0000071394 00000 n -0001911723 00000 n -0002201583 00000 n +0001844968 00000 n +0002130936 00000 n 0000071450 00000 n 0000071493 00000 n -0001911849 00000 n -0002201484 00000 n +0001845094 00000 n +0002130837 00000 n 0000071549 00000 n 0000071592 00000 n -0001911975 00000 n -0002201385 00000 n +0001845220 00000 n +0002130738 00000 n 0000071648 00000 n 0000071689 00000 n -0001912101 00000 n -0002201301 00000 n +0001845346 00000 n +0002130654 00000 n 0000071746 00000 n 0000071799 00000 n -0001912856 00000 n -0002201161 00000 n +0001846089 00000 n +0002130514 00000 n 0000071844 00000 n 0000071882 00000 n -0001915755 00000 n -0002201036 00000 n +0001848932 00000 n +0002130389 00000 n 0000071931 00000 n 0000071974 00000 n -0001915881 00000 n -0002200952 00000 n +0001849058 00000 n +0002130305 00000 n 0000072025 00000 n 0000072063 00000 n -0001916007 00000 n -0002200853 00000 n +0001849184 00000 n +0002130206 00000 n 0000072114 00000 n 0000072151 00000 n -0001920013 00000 n -0002200754 00000 n +0001853056 00000 n +0002130107 00000 n 0000072202 00000 n 0000072237 00000 n -0001933950 00000 n -0002200670 00000 n +0001866538 00000 n +0002130023 00000 n 0000072288 00000 n 0000072336 00000 n -0001937777 00000 n -0002200530 00000 n +0001870280 00000 n +0002129883 00000 n 0000072385 00000 n 0000072445 00000 n -0001937903 00000 n -0002200446 00000 n +0001870406 00000 n +0002129799 00000 n 0000072496 00000 n 0000072539 00000 n -0001938029 00000 n -0002200347 00000 n +0001870532 00000 n +0002129700 00000 n 0000072590 00000 n 0000072685 00000 n -0001943371 00000 n -0002200248 00000 n +0001875461 00000 n +0002129601 00000 n 0000072736 00000 n 0000072773 00000 n -0001943497 00000 n -0002200149 00000 n +0001875587 00000 n +0002129502 00000 n 0000072824 00000 n 0000072885 00000 n -0001946951 00000 n -0002200065 00000 n +0001878849 00000 n +0002129418 00000 n 0000072936 00000 n 0000072994 00000 n -0001950944 00000 n -0002199940 00000 n +0001882722 00000 n +0002129293 00000 n 0000073043 00000 n 0000073081 00000 n -0001951070 00000 n -0002199856 00000 n +0001882848 00000 n +0002129209 00000 n 0000073132 00000 n 0000073170 00000 n -0001951196 00000 n -0002199757 00000 n +0001882974 00000 n +0002129110 00000 n 0000073221 00000 n 0000073259 00000 n -0001951322 00000 n -0002199658 00000 n +0001883100 00000 n +0002129011 00000 n 0000073310 00000 n 0000073348 00000 n -0001955198 00000 n -0002199559 00000 n +0001886922 00000 n +0002128912 00000 n 0000073399 00000 n 0000073440 00000 n -0001955323 00000 n -0002199460 00000 n +0001887047 00000 n +0002128813 00000 n 0000073491 00000 n 0000073547 00000 n -0001955449 00000 n -0002199376 00000 n +0001887173 00000 n +0002128729 00000 n 0000073598 00000 n 0000073631 00000 n -0001956193 00000 n -0002199251 00000 n +0001887906 00000 n +0002128604 00000 n 0000073676 00000 n 0000073710 00000 n -0001960819 00000 n -0002199126 00000 n +0001892301 00000 n +0002128479 00000 n 0000073759 00000 n 0000073803 00000 n -0001960945 00000 n -0002199001 00000 n +0001892427 00000 n +0002128354 00000 n 0000073854 00000 n 0000073912 00000 n -0001961071 00000 n -0002198917 00000 n +0001892553 00000 n +0002128270 00000 n 0000073968 00000 n 0000074008 00000 n -0001961197 00000 n -0002198792 00000 n +0001892679 00000 n +0002128145 00000 n 0000074064 00000 n 0000074115 00000 n -0001961323 00000 n -0002198708 00000 n +0001892805 00000 n +0002128061 00000 n 0000074176 00000 n 0000074223 00000 n -0001961449 00000 n -0002198624 00000 n +0001892931 00000 n +0002127977 00000 n 0000074284 00000 n 0000074328 00000 n -0001966144 00000 n -0002198525 00000 n +0001897451 00000 n +0002127878 00000 n 0000074379 00000 n 0000074450 00000 n -0001966270 00000 n -0002198426 00000 n +0001897577 00000 n +0002127779 00000 n 0000074501 00000 n 0000074558 00000 n -0001966396 00000 n -0002198286 00000 n +0001897703 00000 n +0002127639 00000 n 0000074609 00000 n 0000074656 00000 n -0001969220 00000 n -0002198176 00000 n +0001900361 00000 n +0002127529 00000 n 0000074712 00000 n 0000074785 00000 n -0001969346 00000 n -0002198092 00000 n +0001900487 00000 n +0002127445 00000 n 0000074846 00000 n 0000074919 00000 n -0001969472 00000 n -0002198008 00000 n +0001900613 00000 n +0002127361 00000 n 0000074980 00000 n 0000075053 00000 n -0001972552 00000 n -0002197868 00000 n +0001903580 00000 n +0002127221 00000 n 0000075104 00000 n 0000075156 00000 n -0001972678 00000 n -0002197784 00000 n +0001903706 00000 n +0002127137 00000 n 0000075212 00000 n 0000075264 00000 n -0001975295 00000 n -0002197700 00000 n +0001906242 00000 n +0002127053 00000 n 0000075320 00000 n 0000075384 00000 n -0001975420 00000 n -0002197616 00000 n +0001906367 00000 n +0002126969 00000 n 0000075435 00000 n 0000075474 00000 n -0001979080 00000 n -0002197476 00000 n +0001909911 00000 n +0002126829 00000 n 0000075523 00000 n 0000075558 00000 n -0001979206 00000 n -0002197392 00000 n +0001910037 00000 n +0002126745 00000 n 0000075609 00000 n 0000075639 00000 n -0001979332 00000 n -0002197293 00000 n +0001910163 00000 n +0002126646 00000 n 0000075690 00000 n 0000075724 00000 n -0001979458 00000 n -0002197194 00000 n +0001910289 00000 n +0002126547 00000 n 0000075775 00000 n 0000075805 00000 n -0001981111 00000 n -0002197095 00000 n +0001911922 00000 n +0002126448 00000 n 0000075856 00000 n 0000075907 00000 n -0001983696 00000 n -0002196955 00000 n +0001914436 00000 n +0002126308 00000 n 0000075958 00000 n 0000075987 00000 n -0001983822 00000 n -0002196886 00000 n +0001914562 00000 n +0002126239 00000 n 0000076043 00000 n 0000076092 00000 n -0001983948 00000 n -0002196761 00000 n +0001914688 00000 n +0002126114 00000 n 0000076143 00000 n 0000076176 00000 n -0001984073 00000 n -0002196677 00000 n +0001914813 00000 n +0002126030 00000 n 0000076232 00000 n 0000076280 00000 n -0001984199 00000 n -0002196593 00000 n +0001914939 00000 n +0002125946 00000 n 0000076336 00000 n 0000076384 00000 n -0001989046 00000 n -0002196453 00000 n +0001919596 00000 n +0002125806 00000 n 0000076433 00000 n 0000076485 00000 n -0001989172 00000 n -0002196369 00000 n +0001919722 00000 n +0002125722 00000 n 0000076536 00000 n 0000076580 00000 n -0001989298 00000 n -0002196229 00000 n +0001919848 00000 n +0002125582 00000 n 0000076631 00000 n 0000076667 00000 n -0001989424 00000 n -0002196145 00000 n +0001919974 00000 n +0002125498 00000 n 0000076723 00000 n 0000076826 00000 n -0001993992 00000 n -0002196046 00000 n +0001924378 00000 n +0002125399 00000 n 0000076882 00000 n 0000076990 00000 n -0001994118 00000 n -0002195962 00000 n +0001924504 00000 n +0002125315 00000 n 0000077046 00000 n 0000077136 00000 n -0001994244 00000 n -0002195822 00000 n +0001924630 00000 n +0002125175 00000 n 0000077187 00000 n 0000077235 00000 n -0001994370 00000 n -0002195738 00000 n +0001924756 00000 n +0002125091 00000 n 0000077291 00000 n 0000077357 00000 n -0001994496 00000 n -0002195639 00000 n +0001924882 00000 n +0002124992 00000 n 0000077413 00000 n 0000077480 00000 n -0001998545 00000 n -0002195540 00000 n +0001928754 00000 n +0002124893 00000 n 0000077536 00000 n 0000077595 00000 n -0001998671 00000 n -0002195441 00000 n +0001928880 00000 n +0002124794 00000 n 0000077651 00000 n 0000077705 00000 n -0001998797 00000 n -0002195342 00000 n +0001929006 00000 n +0002124695 00000 n 0000077761 00000 n 0000077819 00000 n -0001998922 00000 n -0002195258 00000 n +0001929131 00000 n +0002124611 00000 n 0000077875 00000 n 0000077920 00000 n -0001999048 00000 n -0002195118 00000 n +0001929257 00000 n +0002124471 00000 n 0000077971 00000 n 0000078012 00000 n -0002002854 00000 n -0002195049 00000 n +0001932965 00000 n +0002124402 00000 n 0000078068 00000 n 0000078113 00000 n -0002002980 00000 n -0002194950 00000 n +0001933091 00000 n +0002124303 00000 n 0000078164 00000 n 0000078217 00000 n -0002003105 00000 n -0002194866 00000 n +0001933216 00000 n +0002124219 00000 n 0000078268 00000 n 0000078308 00000 n -0002006605 00000 n -0002194725 00000 n +0001936633 00000 n +0002124078 00000 n 0000078357 00000 n 0000078405 00000 n -0002006731 00000 n -0002194641 00000 n +0001936759 00000 n +0002123994 00000 n 0000078456 00000 n 0000078493 00000 n -0002006857 00000 n -0002194542 00000 n +0001936885 00000 n +0002123895 00000 n 0000078544 00000 n 0000078584 00000 n -0002006983 00000 n -0002194443 00000 n +0001937011 00000 n +0002123796 00000 n 0000078635 00000 n 0000078670 00000 n -0002010270 00000 n -0002194344 00000 n +0001940198 00000 n +0002123697 00000 n 0000078721 00000 n 0000078755 00000 n -0002010396 00000 n -0002194245 00000 n +0001940324 00000 n +0002123598 00000 n 0000078806 00000 n 0000078841 00000 n -0002010521 00000 n -0002194146 00000 n +0001940449 00000 n +0002123499 00000 n 0000078892 00000 n 0000078926 00000 n -0002010647 00000 n -0002194047 00000 n +0001940575 00000 n +0002123400 00000 n 0000078977 00000 n 0000079012 00000 n -0002010773 00000 n -0002193948 00000 n +0001940701 00000 n +0002123301 00000 n 0000079063 00000 n 0000079100 00000 n -0002014107 00000 n -0002193849 00000 n +0001943954 00000 n +0002123202 00000 n 0000079151 00000 n 0000079190 00000 n -0002014233 00000 n -0002193750 00000 n +0001944080 00000 n +0002123103 00000 n 0000079242 00000 n 0000079314 00000 n -0002014359 00000 n -0002193666 00000 n +0001944206 00000 n +0002123019 00000 n 0000079366 00000 n 0000079410 00000 n -0002015279 00000 n -0002193526 00000 n +0001945104 00000 n +0002122879 00000 n 0000079459 00000 n 0000079515 00000 n -0002015405 00000 n -0002193457 00000 n +0001945230 00000 n +0002122810 00000 n 0000079566 00000 n 0000079596 00000 n -0002024181 00000 n -0002193332 00000 n +0001953354 00000 n +0002122685 00000 n 0000079645 00000 n 0000079686 00000 n -0002024307 00000 n -0002193248 00000 n +0001953480 00000 n +0002122601 00000 n 0000079737 00000 n 0000079771 00000 n -0002024433 00000 n -0002193149 00000 n +0001953606 00000 n +0002122502 00000 n 0000079822 00000 n 0000079878 00000 n -0002024559 00000 n -0002193065 00000 n +0001953732 00000 n +0002122418 00000 n 0000079929 00000 n 0000079960 00000 n -0000080328 00000 n -0000080577 00000 n +0000080318 00000 n +0000080567 00000 n 0000080014 00000 n -0000080451 00000 n -0000080514 00000 n -0002182264 00000 n -0002167812 00000 n -0002182096 00000 n -0002167396 00000 n -0002164064 00000 n -0002167231 00000 n -0002183212 00000 n +0000080441 00000 n +0000080504 00000 n +0002111617 00000 n +0002097165 00000 n +0002111449 00000 n +0002096742 00000 n +0002093229 00000 n +0002096577 00000 n +0002112565 00000 n +0000083023 00000 n +0000082109 00000 n +0000080655 00000 n +0000082960 00000 n +0002092184 00000 n +0002073369 00000 n +0002092019 00000 n +0000082280 00000 n +0002072347 00000 n +0002055554 00000 n +0002072181 00000 n +0000082449 00000 n +0000082621 00000 n +0000082789 00000 n +0000094252 00000 n +0000085332 00000 n 0000083111 00000 n -0000082197 00000 n -0000080665 00000 n -0000083048 00000 n -0002163019 00000 n -0002144204 00000 n -0002162854 00000 n -0000082368 00000 n -0002143182 00000 n -0002126389 00000 n -0002143016 00000 n -0000082537 00000 n -0000082709 00000 n -0000082877 00000 n -0000096161 00000 n -0000087241 00000 n -0000083199 00000 n -0000096098 00000 n -0002124428 00000 n -0002108588 00000 n -0002124262 00000 n -0000087826 00000 n -0000088010 00000 n -0002108129 00000 n -0002106186 00000 n -0002107963 00000 n -0002104284 00000 n -0002102269 00000 n -0002104119 00000 n -0000088160 00000 n -0000088332 00000 n -0000088482 00000 n -0000088650 00000 n -0000088821 00000 n -0000088990 00000 n -0000089143 00000 n -0000089312 00000 n -0000089464 00000 n -0000089632 00000 n -0000089804 00000 n -0000089973 00000 n -0000090126 00000 n -0000090295 00000 n -0000090466 00000 n -0000090639 00000 n -0000090792 00000 n -0000090960 00000 n -0000091139 00000 n -0000091296 00000 n -0000091465 00000 n -0000091633 00000 n -0000091804 00000 n -0000091971 00000 n -0000092143 00000 n -0000092303 00000 n -0000092472 00000 n -0000092628 00000 n -0000092797 00000 n -0000092956 00000 n -0000093125 00000 n -0000093275 00000 n -0000093447 00000 n -0000093618 00000 n -0000093787 00000 n -0000093955 00000 n -0000094126 00000 n -0000094282 00000 n -0000094452 00000 n -0000094621 00000 n -0000094779 00000 n -0000094948 00000 n -0000095117 00000 n -0000095267 00000 n -0000095436 00000 n -0000095606 00000 n -0000095773 00000 n -0000095944 00000 n -0000298419 00000 n -0000314651 00000 n -0000324957 00000 n -0000329432 00000 n -0000362214 00000 n -0000409653 00000 n -0000432063 00000 n -0000473652 00000 n -0000480833 00000 n -0000485166 00000 n -0000556468 00000 n -0000626579 00000 n -0000639340 00000 n -0000697287 00000 n -0000744318 00000 n -0000109751 00000 n -0000100544 00000 n -0000096305 00000 n -0000109688 00000 n -0000101147 00000 n -0000101315 00000 n -0000101484 00000 n -0000101645 00000 n -0000101814 00000 n -0000101985 00000 n -0000102134 00000 n -0000102305 00000 n -0000102457 00000 n -0000102630 00000 n -0000102800 00000 n -0000102956 00000 n -0000103129 00000 n -0000103302 00000 n -0000103448 00000 n -0000103620 00000 n -0000103789 00000 n -0000103938 00000 n -0000104113 00000 n -0000104281 00000 n -0000104456 00000 n -0000104628 00000 n -0000104797 00000 n -0000104966 00000 n -0000105135 00000 n -0000105289 00000 n -0000105458 00000 n -0000105612 00000 n -0000105781 00000 n -0000105927 00000 n -0000106096 00000 n -0000106273 00000 n -0000106437 00000 n -0000106605 00000 n -0000106755 00000 n -0000106927 00000 n -0000107100 00000 n -0000107248 00000 n -0000107417 00000 n -0000107568 00000 n -0000107737 00000 n -0000107897 00000 n -0000108069 00000 n -0000108224 00000 n -0000108392 00000 n -0000108540 00000 n -0000108709 00000 n -0000108862 00000 n -0000109030 00000 n -0000109200 00000 n -0000109350 00000 n -0000109519 00000 n -0000759327 00000 n -0000774246 00000 n -0000780125 00000 n -0000941364 00000 n -0001626871 00000 n -0001638719 00000 n -0001685107 00000 n -0001701808 00000 n -0001726966 00000 n -0001790638 00000 n -0001834429 00000 n -0001863940 00000 n -0001869245 00000 n -0001870388 00000 n -0001873550 00000 n -0001877198 00000 n -0001899314 00000 n -0001915818 00000 n -0001937840 00000 n -0000115193 00000 n -0000111685 00000 n -0000109867 00000 n -0000115130 00000 n -0000111991 00000 n -0000112164 00000 n -0000112317 00000 n -0000112489 00000 n -0000112642 00000 n -0000112814 00000 n -0000112969 00000 n -0000113141 00000 n -0000113298 00000 n -0000113467 00000 n -0000113639 00000 n -0000113788 00000 n -0000113965 00000 n -0000114137 00000 n -0000114306 00000 n -0000114456 00000 n -0000114625 00000 n -0000114786 00000 n -0000114958 00000 n -0001951007 00000 n -0001960882 00000 n -0001979143 00000 n -0001989109 00000 n -0002006668 00000 n -0002015342 00000 n -0002024244 00000 n -0000123985 00000 n -0000118106 00000 n -0000115309 00000 n -0000123859 00000 n -0000123922 00000 n -0000118547 00000 n -0000118697 00000 n -0000118850 00000 n -0000119005 00000 n -0000119159 00000 n -0000119314 00000 n -0000119469 00000 n -0000119623 00000 n -0000119777 00000 n -0000119929 00000 n -0000120084 00000 n -0000120239 00000 n -0000120399 00000 n -0000120564 00000 n -0000120724 00000 n -0000120878 00000 n -0000121033 00000 n -0000121188 00000 n -0000121342 00000 n -0000121497 00000 n -0000121657 00000 n -0000121817 00000 n -0000121970 00000 n -0000122125 00000 n -0000122275 00000 n -0000122428 00000 n -0000122583 00000 n -0000122737 00000 n -0000122891 00000 n -0000123051 00000 n -0000123216 00000 n -0000123375 00000 n -0000123538 00000 n -0000123696 00000 n -0000135403 00000 n -0000127658 00000 n -0000124073 00000 n -0000135340 00000 n -0002101661 00000 n -0002091870 00000 n -0002101495 00000 n -0000128198 00000 n -0000128358 00000 n -0000128523 00000 n -0000128683 00000 n -0000128848 00000 n -0000129003 00000 n -0000129158 00000 n -0000129318 00000 n -0000129478 00000 n -0000129637 00000 n -0000129797 00000 n -0000129949 00000 n -0000130104 00000 n -0000130259 00000 n -0000130419 00000 n -0000130579 00000 n -0000130734 00000 n -0000130889 00000 n -0000131044 00000 n -0000131204 00000 n -0000131368 00000 n -0000131533 00000 n -0000131698 00000 n -0000131857 00000 n -0000132011 00000 n -0000132171 00000 n -0000132331 00000 n -0000132491 00000 n -0000132651 00000 n -0000132810 00000 n -0000132970 00000 n -0000133123 00000 n -0000133278 00000 n -0000133433 00000 n -0000133593 00000 n -0000133758 00000 n -0000133918 00000 n -0000134078 00000 n -0000134238 00000 n -0000134392 00000 n -0000134552 00000 n -0000134707 00000 n -0000134866 00000 n -0000135024 00000 n -0000135182 00000 n -0002183337 00000 n -0000146664 00000 n -0000138783 00000 n -0000135505 00000 n -0000146601 00000 n -0000139332 00000 n -0000139485 00000 n -0000139640 00000 n -0000139795 00000 n -0000139955 00000 n -0000140115 00000 n -0000140275 00000 n -0000140434 00000 n -0000140599 00000 n -0000140764 00000 n -0000140928 00000 n -0000141083 00000 n -0000141243 00000 n -0000141403 00000 n -0000141558 00000 n -0000141718 00000 n -0000141878 00000 n -0000142038 00000 n -0000142203 00000 n -0000142362 00000 n -0000142522 00000 n -0000142682 00000 n -0000142837 00000 n +0000094189 00000 n +0002053593 00000 n +0002037753 00000 n +0002053427 00000 n +0000085917 00000 n +0000086101 00000 n +0002037294 00000 n +0002035352 00000 n +0002037128 00000 n +0002033450 00000 n +0002031436 00000 n +0002033285 00000 n +0000086251 00000 n +0000086423 00000 n +0000086573 00000 n +0000086741 00000 n +0000086912 00000 n +0000087081 00000 n +0000087234 00000 n +0000087403 00000 n +0000087555 00000 n +0000087723 00000 n +0000087895 00000 n +0000088064 00000 n +0000088217 00000 n +0000088386 00000 n +0000088557 00000 n +0000088730 00000 n +0000088883 00000 n +0000089051 00000 n +0000089230 00000 n +0000089387 00000 n +0000089556 00000 n +0000089724 00000 n +0000089895 00000 n +0000090062 00000 n +0000090234 00000 n +0000090394 00000 n +0000090563 00000 n +0000090719 00000 n +0000090888 00000 n +0000091047 00000 n +0000091216 00000 n +0000091366 00000 n +0000091538 00000 n +0000091709 00000 n +0000091878 00000 n +0000092046 00000 n +0000092217 00000 n +0000092373 00000 n +0000092543 00000 n +0000092712 00000 n +0000092870 00000 n +0000093039 00000 n +0000093208 00000 n +0000093358 00000 n +0000093527 00000 n +0000093697 00000 n +0000093864 00000 n +0000094035 00000 n +0000276682 00000 n +0000292296 00000 n +0000302356 00000 n +0000306617 00000 n +0000338557 00000 n +0000384361 00000 n +0000406179 00000 n +0000446374 00000 n +0000453316 00000 n +0000457576 00000 n +0000525146 00000 n +0000591395 00000 n +0000603877 00000 n +0000659654 00000 n +0000705479 00000 n +0000105993 00000 n +0000096793 00000 n +0000094396 00000 n +0000105930 00000 n +0000097396 00000 n +0000097564 00000 n +0000097733 00000 n +0000097894 00000 n +0000098063 00000 n +0000098234 00000 n +0000098383 00000 n +0000098554 00000 n +0000098706 00000 n +0000098879 00000 n +0000099049 00000 n +0000099205 00000 n +0000099378 00000 n +0000099551 00000 n +0000099697 00000 n +0000099869 00000 n +0000100038 00000 n +0000100187 00000 n +0000100355 00000 n +0000100523 00000 n +0000100698 00000 n +0000100870 00000 n +0000101039 00000 n +0000101208 00000 n +0000101377 00000 n +0000101531 00000 n +0000101700 00000 n +0000101854 00000 n +0000102023 00000 n +0000102169 00000 n +0000102338 00000 n +0000102515 00000 n +0000102679 00000 n +0000102847 00000 n +0000102997 00000 n +0000103169 00000 n +0000103342 00000 n +0000103490 00000 n +0000103659 00000 n +0000103810 00000 n +0000103979 00000 n +0000104139 00000 n +0000104311 00000 n +0000104466 00000 n +0000104634 00000 n +0000104782 00000 n +0000104951 00000 n +0000105104 00000 n +0000105272 00000 n +0000105442 00000 n +0000105592 00000 n +0000105761 00000 n +0000720199 00000 n +0000734808 00000 n +0000740545 00000 n +0000896217 00000 n +0001572117 00000 n +0001583218 00000 n +0001628617 00000 n +0001644874 00000 n +0001669271 00000 n +0001729493 00000 n +0001770818 00000 n +0001799574 00000 n +0001804650 00000 n +0001805770 00000 n +0001808759 00000 n +0001812209 00000 n +0001832963 00000 n +0001848995 00000 n +0001870343 00000 n +0000110765 00000 n +0000107257 00000 n +0000106109 00000 n +0000110702 00000 n +0000107563 00000 n +0000107736 00000 n +0000107889 00000 n +0000108061 00000 n +0000108214 00000 n +0000108386 00000 n +0000108541 00000 n +0000108713 00000 n +0000108870 00000 n +0000109039 00000 n +0000109211 00000 n +0000109360 00000 n +0000109537 00000 n +0000109709 00000 n +0000109878 00000 n +0000110028 00000 n +0000110197 00000 n +0000110358 00000 n +0000110530 00000 n +0001882785 00000 n +0001892364 00000 n +0001909974 00000 n +0001919659 00000 n +0001936696 00000 n +0001945167 00000 n +0001953417 00000 n +0000118717 00000 n +0000112838 00000 n +0000110881 00000 n +0000118591 00000 n +0000118654 00000 n +0000113279 00000 n +0000113429 00000 n +0000113582 00000 n +0000113737 00000 n +0000113891 00000 n +0000114046 00000 n +0000114201 00000 n +0000114355 00000 n +0000114509 00000 n +0000114661 00000 n +0000114816 00000 n +0000114971 00000 n +0000115131 00000 n +0000115296 00000 n +0000115456 00000 n +0000115610 00000 n +0000115765 00000 n +0000115920 00000 n +0000116074 00000 n +0000116229 00000 n +0000116389 00000 n +0000116549 00000 n +0000116702 00000 n +0000116857 00000 n +0000117007 00000 n +0000117160 00000 n +0000117315 00000 n +0000117469 00000 n +0000117623 00000 n +0000117783 00000 n +0000117948 00000 n +0000118107 00000 n +0000118270 00000 n +0000118428 00000 n +0000129083 00000 n +0000121338 00000 n +0000118805 00000 n +0000129020 00000 n +0002030828 00000 n +0002021037 00000 n +0002030662 00000 n +0000121878 00000 n +0000122038 00000 n +0000122203 00000 n +0000122363 00000 n +0000122528 00000 n +0000122683 00000 n +0000122838 00000 n +0000122998 00000 n +0000123158 00000 n +0000123317 00000 n +0000123477 00000 n +0000123629 00000 n +0000123784 00000 n +0000123939 00000 n +0000124099 00000 n +0000124259 00000 n +0000124414 00000 n +0000124569 00000 n +0000124724 00000 n +0000124884 00000 n +0000125048 00000 n +0000125213 00000 n +0000125378 00000 n +0000125537 00000 n +0000125691 00000 n +0000125851 00000 n +0000126011 00000 n +0000126171 00000 n +0000126331 00000 n +0000126490 00000 n +0000126650 00000 n +0000126803 00000 n +0000126958 00000 n +0000127113 00000 n +0000127273 00000 n +0000127438 00000 n +0000127598 00000 n +0000127758 00000 n +0000127918 00000 n +0000128072 00000 n +0000128232 00000 n +0000128387 00000 n +0000128546 00000 n +0000128704 00000 n +0000128862 00000 n +0002112690 00000 n +0000139261 00000 n +0000131380 00000 n +0000129185 00000 n +0000139198 00000 n +0000131929 00000 n +0000132082 00000 n +0000132237 00000 n +0000132392 00000 n +0000132552 00000 n +0000132712 00000 n +0000132872 00000 n +0000133031 00000 n +0000133196 00000 n +0000133361 00000 n +0000133525 00000 n +0000133680 00000 n +0000133840 00000 n +0000134000 00000 n +0000134155 00000 n +0000134315 00000 n +0000134475 00000 n +0000134635 00000 n +0000134800 00000 n +0000134959 00000 n +0000135119 00000 n +0000135279 00000 n +0000135434 00000 n +0000135593 00000 n +0000135753 00000 n +0000135906 00000 n +0000136061 00000 n +0000136216 00000 n +0000136371 00000 n +0000136531 00000 n +0000136690 00000 n +0000136844 00000 n +0000136997 00000 n +0000137151 00000 n +0000137301 00000 n +0000137455 00000 n +0000137611 00000 n +0000137766 00000 n +0000137922 00000 n +0000138083 00000 n +0000138244 00000 n +0000138405 00000 n +0000138561 00000 n +0000138722 00000 n +0000138881 00000 n +0000139040 00000 n +0000150148 00000 n +0000141785 00000 n +0000139363 00000 n +0000150085 00000 n +0000142352 00000 n +0000142513 00000 n +0000142674 00000 n +0000142835 00000 n 0000142996 00000 n -0000143156 00000 n -0000143309 00000 n -0000143464 00000 n -0000143619 00000 n -0000143774 00000 n -0000143934 00000 n -0000144093 00000 n -0000144247 00000 n -0000144400 00000 n -0000144554 00000 n -0000144704 00000 n -0000144858 00000 n -0000145014 00000 n -0000145169 00000 n -0000145325 00000 n -0000145486 00000 n -0000145647 00000 n -0000145808 00000 n -0000145964 00000 n -0000146125 00000 n -0000146284 00000 n -0000146443 00000 n -0000158665 00000 n -0000150302 00000 n -0000146766 00000 n -0000158602 00000 n -0000150869 00000 n -0000151030 00000 n -0000151191 00000 n -0000151352 00000 n -0000151513 00000 n -0000151669 00000 n -0000151830 00000 n -0000151991 00000 n -0000152152 00000 n -0000152307 00000 n -0000152468 00000 n -0000152629 00000 n -0000152784 00000 n -0000152945 00000 n -0000153106 00000 n -0000153267 00000 n -0000153433 00000 n -0000153589 00000 n -0000153750 00000 n -0000153910 00000 n -0000154064 00000 n -0000154219 00000 n -0000154374 00000 n -0000154535 00000 n -0000154701 00000 n -0000154867 00000 n -0000155028 00000 n -0002090933 00000 n -0002071722 00000 n -0002090767 00000 n -0000155184 00000 n -0000155345 00000 n -0000155506 00000 n -0000155661 00000 n -0000155821 00000 n -0000155982 00000 n -0000156143 00000 n -0000156303 00000 n -0000156469 00000 n -0000156635 00000 n -0000156800 00000 n -0000156965 00000 n -0000157130 00000 n -0000157295 00000 n -0000157460 00000 n -0000157623 00000 n -0000157788 00000 n -0000157954 00000 n -0000158113 00000 n -0000158276 00000 n -0000158439 00000 n -0000170752 00000 n -0000162339 00000 n -0000158781 00000 n -0000170689 00000 n -0000162915 00000 n -0000163080 00000 n -0000163240 00000 n -0000163395 00000 n -0000163555 00000 n -0000163715 00000 n -0000163875 00000 n -0000164029 00000 n -0000164183 00000 n -0000164338 00000 n -0000164498 00000 n -0000164652 00000 n -0000164812 00000 n -0000164972 00000 n -0000165127 00000 n -0000165287 00000 n -0000165447 00000 n -0000165601 00000 n -0000165756 00000 n -0000165910 00000 n -0000166070 00000 n -0000166230 00000 n -0000166388 00000 n -0000166542 00000 n -0000166702 00000 n -0000166862 00000 n -0000167022 00000 n -0000167177 00000 n -0000167337 00000 n -0000167502 00000 n -0000167667 00000 n -0000167821 00000 n -0000167980 00000 n -0000168140 00000 n -0000168300 00000 n -0000168459 00000 n -0000168624 00000 n -0000168789 00000 n -0000168949 00000 n -0000169109 00000 n -0000169269 00000 n -0000169424 00000 n -0000169584 00000 n -0000169743 00000 n -0000169897 00000 n -0000170051 00000 n -0000170205 00000 n -0000170363 00000 n -0000170526 00000 n -0000182099 00000 n -0000174195 00000 n -0000170868 00000 n -0000182036 00000 n -0000174744 00000 n -0000174909 00000 n -0000175074 00000 n -0000175239 00000 n -0000175404 00000 n -0000175569 00000 n -0000175734 00000 n -0000175899 00000 n -0000176054 00000 n -0000176213 00000 n -0000176378 00000 n -0000176543 00000 n -0000176697 00000 n -0000176857 00000 n -0000177017 00000 n -0000177172 00000 n -0000177327 00000 n -0000177487 00000 n -0000177642 00000 n -0000177796 00000 n -0000177950 00000 n -0000178105 00000 n -0000178260 00000 n -0000178419 00000 n -0000178578 00000 n -0000178738 00000 n -0000178898 00000 n -0000179058 00000 n -0000179218 00000 n -0000179373 00000 n -0000179528 00000 n -0000179688 00000 n -0000179847 00000 n -0000180001 00000 n -0000180156 00000 n -0000180310 00000 n -0000180465 00000 n -0000180625 00000 n -0000180785 00000 n -0000180940 00000 n -0000181100 00000 n -0000181260 00000 n -0000181415 00000 n -0000181574 00000 n -0000181728 00000 n -0000181882 00000 n -0000194674 00000 n -0000186216 00000 n -0000182201 00000 n -0000194611 00000 n -0000186792 00000 n -0000186946 00000 n -0000187101 00000 n -0000187256 00000 n -0000187416 00000 n -0000187576 00000 n -0000187736 00000 n -0000187896 00000 n -0000188056 00000 n -0000188210 00000 n -0000188370 00000 n -0000188530 00000 n -0000188684 00000 n -0000188839 00000 n -0000188999 00000 n -0000189159 00000 n -0000189319 00000 n -0000189479 00000 n -0000189639 00000 n -0000189799 00000 n -0000189954 00000 n -0000190113 00000 n -0000190273 00000 n -0000190433 00000 n -0000190593 00000 n -0000190752 00000 n -0000190907 00000 n -0000191067 00000 n -0000191227 00000 n -0000191392 00000 n -0000191557 00000 n -0000191722 00000 n -0000191887 00000 n -0000192051 00000 n -0000192216 00000 n -0000192380 00000 n -0000192545 00000 n -0000192710 00000 n -0000192865 00000 n -0000193025 00000 n +0000143152 00000 n +0000143313 00000 n +0000143474 00000 n +0000143635 00000 n +0000143790 00000 n +0000143951 00000 n +0000144112 00000 n +0000144267 00000 n +0000144428 00000 n +0000144589 00000 n +0000144750 00000 n +0000144916 00000 n +0000145072 00000 n +0000145233 00000 n +0000145393 00000 n +0000145547 00000 n +0000145702 00000 n +0000145857 00000 n +0000146018 00000 n +0000146184 00000 n +0000146350 00000 n +0000146511 00000 n +0002020100 00000 n +0002000889 00000 n +0002019934 00000 n +0000146667 00000 n +0000146828 00000 n +0000146989 00000 n +0000147144 00000 n +0000147304 00000 n +0000147465 00000 n +0000147626 00000 n +0000147786 00000 n +0000147952 00000 n +0000148118 00000 n +0000148283 00000 n +0000148448 00000 n +0000148613 00000 n +0000148778 00000 n +0000148943 00000 n +0000149106 00000 n +0000149271 00000 n +0000149437 00000 n +0000149596 00000 n +0000149759 00000 n +0000149922 00000 n +0000161064 00000 n +0000152651 00000 n +0000150264 00000 n +0000161001 00000 n +0000153227 00000 n +0000153392 00000 n +0000153552 00000 n +0000153707 00000 n +0000153867 00000 n +0000154027 00000 n +0000154187 00000 n +0000154341 00000 n +0000154495 00000 n +0000154650 00000 n +0000154810 00000 n +0000154964 00000 n +0000155124 00000 n +0000155284 00000 n +0000155439 00000 n +0000155599 00000 n +0000155759 00000 n +0000155913 00000 n +0000156068 00000 n +0000156222 00000 n +0000156382 00000 n +0000156542 00000 n +0000156700 00000 n +0000156854 00000 n +0000157014 00000 n +0000157174 00000 n +0000157334 00000 n +0000157489 00000 n +0000157649 00000 n +0000157814 00000 n +0000157979 00000 n +0000158133 00000 n +0000158292 00000 n +0000158452 00000 n +0000158612 00000 n +0000158771 00000 n +0000158936 00000 n +0000159101 00000 n +0000159261 00000 n +0000159421 00000 n +0000159581 00000 n +0000159736 00000 n +0000159896 00000 n +0000160055 00000 n +0000160209 00000 n +0000160363 00000 n +0000160517 00000 n +0000160675 00000 n +0000160838 00000 n +0000171313 00000 n +0000163409 00000 n +0000161180 00000 n +0000171250 00000 n +0000163958 00000 n +0000164123 00000 n +0000164288 00000 n +0000164453 00000 n +0000164618 00000 n +0000164783 00000 n +0000164948 00000 n +0000165113 00000 n +0000165268 00000 n +0000165427 00000 n +0000165592 00000 n +0000165757 00000 n +0000165911 00000 n +0000166071 00000 n +0000166231 00000 n +0000166386 00000 n +0000166541 00000 n +0000166701 00000 n +0000166856 00000 n +0000167010 00000 n +0000167164 00000 n +0000167319 00000 n +0000167474 00000 n +0000167633 00000 n +0000167792 00000 n +0000167952 00000 n +0000168112 00000 n +0000168272 00000 n +0000168432 00000 n +0000168587 00000 n +0000168742 00000 n +0000168902 00000 n +0000169061 00000 n +0000169215 00000 n +0000169370 00000 n +0000169524 00000 n +0000169679 00000 n +0000169839 00000 n +0000169999 00000 n +0000170154 00000 n +0000170314 00000 n +0000170474 00000 n +0000170629 00000 n +0000170788 00000 n +0000170942 00000 n +0000171096 00000 n +0000182689 00000 n +0000174231 00000 n +0000171415 00000 n +0000182626 00000 n +0000174807 00000 n +0000174961 00000 n +0000175116 00000 n +0000175271 00000 n +0000175431 00000 n +0000175591 00000 n +0000175751 00000 n +0000175911 00000 n +0000176071 00000 n +0000176225 00000 n +0000176385 00000 n +0000176545 00000 n +0000176699 00000 n +0000176854 00000 n +0000177014 00000 n +0000177174 00000 n +0000177334 00000 n +0000177494 00000 n +0000177654 00000 n +0000177814 00000 n +0000177969 00000 n +0000178128 00000 n +0000178288 00000 n +0000178448 00000 n +0000178608 00000 n +0000178767 00000 n +0000178922 00000 n +0000179082 00000 n +0000179242 00000 n +0000179407 00000 n +0000179572 00000 n +0000179737 00000 n +0000179902 00000 n +0000180066 00000 n +0000180231 00000 n +0000180395 00000 n +0000180560 00000 n +0000180725 00000 n +0000180880 00000 n +0000181040 00000 n +0000181200 00000 n +0000181360 00000 n +0000181520 00000 n +0000181674 00000 n +0000181834 00000 n +0000181994 00000 n +0000182153 00000 n +0000182310 00000 n +0000182468 00000 n +0000193565 00000 n +0000185489 00000 n +0000182805 00000 n +0000193502 00000 n +0000186047 00000 n +0000186207 00000 n +0000186363 00000 n +0000186524 00000 n +0000186685 00000 n +0000186846 00000 n +0000187007 00000 n +0000187163 00000 n +0000187318 00000 n +0000187474 00000 n +0000187630 00000 n +0000187785 00000 n +0000187946 00000 n +0000188107 00000 n +0000188261 00000 n +0000188416 00000 n +0000188576 00000 n +0000188736 00000 n +0000188890 00000 n +0000189050 00000 n +0000189210 00000 n +0000189369 00000 n +0000189523 00000 n +0000189683 00000 n +0000189843 00000 n +0000190003 00000 n +0000190163 00000 n +0000190323 00000 n +0000190477 00000 n +0000190636 00000 n +0000190796 00000 n +0000190956 00000 n +0000191115 00000 n +0000191275 00000 n +0000191435 00000 n +0000191595 00000 n +0000191755 00000 n +0000191910 00000 n +0000192070 00000 n +0000192230 00000 n +0000192390 00000 n +0000192548 00000 n +0000192708 00000 n +0000192868 00000 n +0000193027 00000 n 0000193185 00000 n -0000193345 00000 n -0000193505 00000 n -0000193659 00000 n -0000193819 00000 n -0000193979 00000 n -0000194138 00000 n -0000194295 00000 n -0000194453 00000 n -0000206694 00000 n -0000198618 00000 n -0000194790 00000 n -0000206631 00000 n -0000199176 00000 n -0000199336 00000 n -0000199492 00000 n -0000199653 00000 n -0000199814 00000 n -0000199975 00000 n -0000200136 00000 n -0000200292 00000 n -0000200447 00000 n -0000200603 00000 n -0000200759 00000 n -0000200914 00000 n -0000201075 00000 n -0000201236 00000 n -0000201390 00000 n -0000201545 00000 n -0000201705 00000 n -0000201865 00000 n -0000202019 00000 n -0000202179 00000 n -0000202339 00000 n -0000202498 00000 n -0000202652 00000 n -0000202812 00000 n -0000202972 00000 n -0000203132 00000 n -0000203292 00000 n -0000203452 00000 n -0000203606 00000 n -0000203765 00000 n -0000203925 00000 n -0000204085 00000 n -0000204244 00000 n -0000204404 00000 n -0000204564 00000 n -0000204724 00000 n -0000204884 00000 n -0000205039 00000 n -0000205199 00000 n -0000205359 00000 n -0000205519 00000 n -0000205677 00000 n -0000205837 00000 n -0000205997 00000 n -0000206156 00000 n -0000206314 00000 n -0000206472 00000 n -0002183462 00000 n -0000219115 00000 n -0000210805 00000 n -0000206810 00000 n -0000219052 00000 n -0000211372 00000 n -0000211533 00000 n -0000211694 00000 n -0000211855 00000 n -0000212016 00000 n -0000212177 00000 n -0000212338 00000 n -0000212499 00000 n -0000212659 00000 n -0000212820 00000 n -0000212975 00000 n -0000213134 00000 n -0000213294 00000 n -0000213454 00000 n -0000213609 00000 n -0000213769 00000 n -0000213929 00000 n -0000214084 00000 n -0000214244 00000 n -0000214403 00000 n -0000214558 00000 n -0000214718 00000 n -0000214878 00000 n -0000215037 00000 n -0000215197 00000 n -0000215353 00000 n -0000215514 00000 n -0000215675 00000 n -0000215836 00000 n -0000215997 00000 n -0000216158 00000 n -0000216318 00000 n -0000216479 00000 n -0000216639 00000 n -0000216800 00000 n -0000216962 00000 n -0000217124 00000 n -0000217286 00000 n -0000217448 00000 n -0000217610 00000 n -0000217772 00000 n -0000217934 00000 n -0000218089 00000 n -0000218250 00000 n -0000218411 00000 n -0000218571 00000 n -0000218729 00000 n -0000218888 00000 n -0000230412 00000 n -0000222999 00000 n -0000219217 00000 n -0000230349 00000 n -0000223512 00000 n -0000223678 00000 n -0000223844 00000 n -0000224010 00000 n -0000224176 00000 n -0000224341 00000 n -0000224507 00000 n -0000224672 00000 n -0000224838 00000 n -0000225005 00000 n -0000225172 00000 n -0000225338 00000 n -0000225505 00000 n -0000225671 00000 n -0000225838 00000 n -0000225999 00000 n -0000226154 00000 n -0000226315 00000 n -0000226476 00000 n -0000226637 00000 n -0000226798 00000 n -0000226954 00000 n -0000227115 00000 n -0000227281 00000 n -0000227447 00000 n -0000227612 00000 n -0000227778 00000 n -0000227944 00000 n -0000228109 00000 n -0000228275 00000 n -0000228441 00000 n -0000228602 00000 n -0000228758 00000 n -0000228919 00000 n -0000229080 00000 n -0000229241 00000 n -0000229401 00000 n -0000229562 00000 n -0000229723 00000 n -0000229883 00000 n -0000230036 00000 n -0000230190 00000 n -0000242428 00000 n -0000233991 00000 n -0000230514 00000 n -0000242365 00000 n -0000234567 00000 n -0000234728 00000 n -0000234889 00000 n -0000235045 00000 n -0000235201 00000 n -0000235362 00000 n -0000235523 00000 n -0000235684 00000 n -0000235840 00000 n -0000236000 00000 n -0000236161 00000 n -0000236321 00000 n -0000236482 00000 n -0000236636 00000 n -0000236791 00000 n -0000236946 00000 n -0000237101 00000 n -0000237261 00000 n -0000237421 00000 n -0000237580 00000 n -0000237740 00000 n -0000237900 00000 n -0000238054 00000 n -0000238213 00000 n -0000238373 00000 n -0000238528 00000 n -0000238682 00000 n -0000238837 00000 n -0000238992 00000 n -0000239147 00000 n -0000239306 00000 n -0000239460 00000 n -0000239620 00000 n -0000239780 00000 n -0000239939 00000 n -0000240099 00000 n -0000240259 00000 n -0000240419 00000 n -0000240574 00000 n -0000240734 00000 n -0000240894 00000 n -0000241054 00000 n -0000241219 00000 n -0000241384 00000 n -0000241549 00000 n -0000241713 00000 n -0000241876 00000 n -0000242039 00000 n -0000242202 00000 n -0000254036 00000 n -0000245776 00000 n -0000242544 00000 n -0000253973 00000 n -0000246343 00000 n -0000246498 00000 n -0000246653 00000 n -0000246807 00000 n -0000246962 00000 n -0000247117 00000 n -0000247272 00000 n -0000247432 00000 n -0000247586 00000 n -0000247746 00000 n -0000247901 00000 n -0000248055 00000 n -0000248210 00000 n -0000248365 00000 n -0000248525 00000 n -0000248685 00000 n -0000248850 00000 n -0000249010 00000 n -0000249175 00000 n -0000249329 00000 n -0000249489 00000 n -0000249649 00000 n -0000249807 00000 n -0000249961 00000 n -0000250116 00000 n -0000250276 00000 n -0000250430 00000 n -0000250585 00000 n -0000250740 00000 n -0000250900 00000 n -0000251064 00000 n -0000251229 00000 n -0000251394 00000 n -0000251557 00000 n -0000251717 00000 n -0000251882 00000 n -0000252047 00000 n -0000252212 00000 n -0000252372 00000 n -0000252532 00000 n -0000252697 00000 n -0000252861 00000 n -0000253026 00000 n -0000253191 00000 n -0000253345 00000 n -0000253499 00000 n -0000253652 00000 n -0000253810 00000 n -0000265598 00000 n -0000257522 00000 n -0000254138 00000 n -0000265535 00000 n -0000258080 00000 n -0000258240 00000 n -0000258400 00000 n -0000258555 00000 n -0000258715 00000 n -0000258875 00000 n -0000259035 00000 n -0000259189 00000 n -0000259344 00000 n -0000259499 00000 n -0000259658 00000 n -0000259823 00000 n -0000259983 00000 n -0000260148 00000 n -0000260313 00000 n -0000260473 00000 n -0000260633 00000 n -0000260793 00000 n -0000260958 00000 n -0000261122 00000 n -0000261287 00000 n -0000261452 00000 n -0000261606 00000 n -0000261765 00000 n -0000261918 00000 n -0000262073 00000 n -0000262228 00000 n -0000262383 00000 n -0000262543 00000 n -0000262703 00000 n -0000262862 00000 n -0000263021 00000 n -0000263176 00000 n -0000263336 00000 n -0000263495 00000 n -0000263655 00000 n -0000263815 00000 n -0000263975 00000 n -0000264130 00000 n -0000264290 00000 n -0000264450 00000 n -0000264610 00000 n -0000264764 00000 n -0000264919 00000 n -0000265074 00000 n -0000265228 00000 n -0000265382 00000 n -0000275327 00000 n -0000268468 00000 n -0000265700 00000 n -0000275264 00000 n -0000268963 00000 n -0000269117 00000 n -0000269272 00000 n -0000269427 00000 n -0000269581 00000 n -0000269736 00000 n -0000269886 00000 n -0000270040 00000 n -0000270195 00000 n -0000270350 00000 n -0000270505 00000 n -0000270659 00000 n -0000270814 00000 n -0000270974 00000 n -0000271138 00000 n -0000271303 00000 n -0000271468 00000 n -0000271633 00000 n -0000271798 00000 n -0000271958 00000 n -0000272113 00000 n -0000272273 00000 n -0000272433 00000 n -0000272587 00000 n -0000272742 00000 n -0000272901 00000 n -0000273061 00000 n -0000273221 00000 n -0000273381 00000 n -0000273541 00000 n -0000273701 00000 n -0000273861 00000 n -0000274021 00000 n -0000274181 00000 n -0000274341 00000 n -0000274491 00000 n -0000274645 00000 n -0000274800 00000 n -0000274954 00000 n -0000275109 00000 n -0002183587 00000 n -0000286081 00000 n -0000278600 00000 n -0000275429 00000 n -0000286018 00000 n -0000279131 00000 n -0000279285 00000 n -0000279440 00000 n -0000279595 00000 n -0000279750 00000 n -0000279905 00000 n -0000280060 00000 n -0000280214 00000 n -0000280369 00000 n -0000280524 00000 n -0000280678 00000 n -0000280833 00000 n -0000280988 00000 n -0000281143 00000 n -0000281293 00000 n -0000281447 00000 n -0000281602 00000 n -0000281762 00000 n -0000281922 00000 n -0000282087 00000 n -0000282252 00000 n -0000282407 00000 n -0000282562 00000 n -0000282716 00000 n -0000282876 00000 n -0000283041 00000 n -0000283205 00000 n -0000283359 00000 n -0000283519 00000 n -0000283679 00000 n -0000283834 00000 n -0000283988 00000 n -0000284143 00000 n -0000284298 00000 n -0000284452 00000 n -0000284607 00000 n -0000284762 00000 n -0000284922 00000 n -0000285076 00000 n -0000285236 00000 n -0000285396 00000 n -0000285550 00000 n -0000285705 00000 n -0000285860 00000 n -0000293812 00000 n -0000288492 00000 n -0000286183 00000 n -0000293749 00000 n -0000288906 00000 n -0000289066 00000 n -0000289226 00000 n -0000289381 00000 n -0000289541 00000 n -0000289701 00000 n -0000289861 00000 n -0000290021 00000 n -0000290180 00000 n -0000290340 00000 n -0000290495 00000 n -0000290654 00000 n -0000290809 00000 n -0000290964 00000 n -0000291118 00000 n -0000291273 00000 n -0000291428 00000 n -0000291583 00000 n -0000291738 00000 n -0000291892 00000 n -0000292047 00000 n -0000292202 00000 n -0000292356 00000 n -0000292510 00000 n -0000292666 00000 n -0000292822 00000 n -0000292976 00000 n -0000293131 00000 n -0000293285 00000 n -0000293439 00000 n -0000293594 00000 n -0000294482 00000 n -0000294236 00000 n -0000293914 00000 n -0000294359 00000 n -0000298727 00000 n -0000298109 00000 n -0000294570 00000 n -0000298232 00000 n -0000298295 00000 n -0000298541 00000 n -0000298665 00000 n -0000303442 00000 n -0000302943 00000 n -0000298843 00000 n -0000303256 00000 n -0000303087 00000 n -0000303379 00000 n -0000308850 00000 n -0000307610 00000 n -0000303558 00000 n -0000308540 00000 n -0000307781 00000 n -0000307952 00000 n -0000308664 00000 n -0000308124 00000 n -0000308332 00000 n -0000308787 00000 n -0002183712 00000 n -0000311039 00000 n -0000310521 00000 n -0000308966 00000 n -0000310852 00000 n -0000310665 00000 n -0000310976 00000 n -0000315209 00000 n -0000313888 00000 n -0000311141 00000 n -0000314527 00000 n -0000314775 00000 n -0000314050 00000 n -0000314216 00000 n -0000314898 00000 n -0000315022 00000 n -0000314369 00000 n -0000315146 00000 n -0000319974 00000 n -0000318479 00000 n -0000315311 00000 n -0000319293 00000 n -0000319417 00000 n -0000318650 00000 n -0000318820 00000 n -0000319540 00000 n -0000319664 00000 n -0000319788 00000 n -0000319911 00000 n -0000318990 00000 n -0000319142 00000 n -0000322952 00000 n -0000322519 00000 n -0000320132 00000 n -0000322642 00000 n -0000322766 00000 n -0000322889 00000 n -0000324120 00000 n -0000323810 00000 n -0000323082 00000 n -0000323933 00000 n -0000324057 00000 n -0000325144 00000 n -0000324710 00000 n -0000324222 00000 n -0000324833 00000 n -0000325081 00000 n -0002183837 00000 n -0000325812 00000 n -0000325565 00000 n -0000325232 00000 n -0000325688 00000 n -0000329744 00000 n -0000329121 00000 n -0000325900 00000 n -0000329244 00000 n -0000329307 00000 n -0000329557 00000 n -0000329682 00000 n -0000334228 00000 n -0000333667 00000 n -0000329846 00000 n -0000333790 00000 n -0000333914 00000 n -0000334039 00000 n -0000334102 00000 n -0000334165 00000 n -0000338189 00000 n -0000337379 00000 n -0000334358 00000 n -0000337502 00000 n -0000337627 00000 n -0000337752 00000 n -0000337877 00000 n -0000338002 00000 n -0000338127 00000 n -0000341613 00000 n -0000343762 00000 n -0000341460 00000 n -0000338319 00000 n -0000343449 00000 n -0000343512 00000 n -0000343575 00000 n -0002070233 00000 n -0002060979 00000 n -0002070066 00000 n -0002059022 00000 n -0002047684 00000 n -0002058856 00000 n -0000343143 00000 n -0000343293 00000 n -0000343699 00000 n -0000342972 00000 n -0000343030 00000 n -0000343120 00000 n -0000347686 00000 n -0000346911 00000 n -0000343935 00000 n -0000347373 00000 n -0000347498 00000 n -0000347064 00000 n -0000347220 00000 n -0000347623 00000 n -0002183962 00000 n -0000459466 00000 n -0000351547 00000 n -0000351111 00000 n -0000347816 00000 n -0000351234 00000 n -0002047036 00000 n -0002040846 00000 n -0002046869 00000 n -0000351359 00000 n -0000351484 00000 n -0000355616 00000 n -0000355182 00000 n -0000351762 00000 n -0000355305 00000 n -0000355430 00000 n -0000355555 00000 n -0000358502 00000 n -0000357764 00000 n -0000355746 00000 n -0000358065 00000 n -0000358190 00000 n -0000358314 00000 n -0000357908 00000 n -0000358439 00000 n -0000362402 00000 n -0000361966 00000 n -0000358632 00000 n -0000362089 00000 n -0000362339 00000 n -0000366995 00000 n -0000366301 00000 n -0000362518 00000 n -0000366932 00000 n -0000366463 00000 n -0000366620 00000 n -0000366776 00000 n -0000371481 00000 n -0000370874 00000 n -0000367168 00000 n -0000371168 00000 n -0000371018 00000 n -0000371293 00000 n -0000371418 00000 n -0002184087 00000 n -0000375958 00000 n -0000375647 00000 n -0000371682 00000 n -0000375770 00000 n -0000375895 00000 n -0000380394 00000 n -0000379524 00000 n -0000376088 00000 n -0000380331 00000 n -0000379695 00000 n -0000379852 00000 n -0000380009 00000 n -0000380167 00000 n -0000384525 00000 n -0000383712 00000 n -0000380553 00000 n -0000384338 00000 n -0000383874 00000 n -0000384029 00000 n -0000384184 00000 n -0000384462 00000 n -0000385792 00000 n -0000385606 00000 n -0000384726 00000 n -0000385729 00000 n -0000389527 00000 n -0000388673 00000 n -0000385894 00000 n -0000388966 00000 n -0000388817 00000 n -0000389091 00000 n -0000389214 00000 n -0000389339 00000 n -0000389464 00000 n -0000393296 00000 n -0000392860 00000 n -0000389728 00000 n -0000392983 00000 n -0000393108 00000 n -0000393233 00000 n -0002184212 00000 n -0000398417 00000 n -0000397665 00000 n -0000393469 00000 n -0000397788 00000 n -0000397851 00000 n -0000397914 00000 n -0000397977 00000 n -0000398040 00000 n -0000398103 00000 n -0000398166 00000 n -0000398229 00000 n -0000398354 00000 n -0000402703 00000 n -0000402018 00000 n -0000398575 00000 n -0000402141 00000 n -0000402265 00000 n -0000402390 00000 n -0000402515 00000 n -0000402640 00000 n -0000405535 00000 n -0000404974 00000 n -0000402833 00000 n -0000405097 00000 n -0000405222 00000 n -0000405347 00000 n -0000405472 00000 n -0000409841 00000 n -0000409054 00000 n -0000405651 00000 n -0000409528 00000 n -0000409207 00000 n -0000409778 00000 n -0000409360 00000 n -0000414030 00000 n -0000413596 00000 n -0000409957 00000 n -0000413719 00000 n -0000413844 00000 n -0000413967 00000 n -0000418542 00000 n -0000417808 00000 n -0000414160 00000 n -0000418105 00000 n -0000418230 00000 n -0000417952 00000 n -0000418355 00000 n -0000418480 00000 n -0002184337 00000 n -0000422780 00000 n -0000422220 00000 n -0000418700 00000 n -0000422343 00000 n -0000422468 00000 n -0000422593 00000 n -0000422718 00000 n -0000427028 00000 n -0000426343 00000 n -0000422924 00000 n -0000426466 00000 n -0000426591 00000 n -0000426716 00000 n -0000426840 00000 n -0000426965 00000 n -0000428552 00000 n -0000428241 00000 n -0000427172 00000 n -0000428364 00000 n -0000428489 00000 n -0000432375 00000 n -0000431815 00000 n -0000428668 00000 n -0000431938 00000 n -0000432188 00000 n -0000432313 00000 n -0000436811 00000 n -0000436501 00000 n -0000432505 00000 n -0000436624 00000 n -0000436748 00000 n -0000440680 00000 n -0000442228 00000 n -0000440536 00000 n -0000436969 00000 n -0000441663 00000 n -0000441493 00000 n -0000441788 00000 n -0000441851 00000 n -0000441914 00000 n -0000441977 00000 n -0000442040 00000 n -0000442103 00000 n -0000442166 00000 n -0002184462 00000 n -0000446906 00000 n -0000445720 00000 n -0000442415 00000 n -0000446219 00000 n -0000446344 00000 n -0000445873 00000 n -0000446469 00000 n -0000446594 00000 n -0000446719 00000 n -0000446844 00000 n -0000446059 00000 n -0000451436 00000 n -0000451751 00000 n -0000450256 00000 n -0000447036 00000 n -0000451311 00000 n -0000450436 00000 n -0000451561 00000 n -0000451624 00000 n -0000451687 00000 n -0000450589 00000 n -0000450766 00000 n -0000450944 00000 n -0000451129 00000 n -0000456461 00000 n -0000455607 00000 n -0000451895 00000 n -0000456273 00000 n -0000455769 00000 n -0000456398 00000 n -0000455932 00000 n -0000456122 00000 n -0000459779 00000 n -0000458801 00000 n -0000456591 00000 n -0000459341 00000 n -0000458954 00000 n -0000459128 00000 n -0000459591 00000 n -0000459716 00000 n -0000464417 00000 n -0000463158 00000 n -0000459966 00000 n -0000463979 00000 n -0000463329 00000 n -0000463490 00000 n -0000463652 00000 n -0000463822 00000 n -0000464104 00000 n -0000464229 00000 n -0000464354 00000 n -0000468316 00000 n -0000468878 00000 n -0000468068 00000 n -0000464604 00000 n -0000468191 00000 n -0000468441 00000 n -0000468566 00000 n -0000468691 00000 n -0000468815 00000 n -0002184587 00000 n -0000470109 00000 n -0000469923 00000 n -0000469022 00000 n -0000470046 00000 n -0000473965 00000 n -0000473404 00000 n -0000470253 00000 n -0000473527 00000 n -0000473777 00000 n -0000473902 00000 n -0000477895 00000 n -0000476906 00000 n -0000474081 00000 n -0000477206 00000 n -0000477331 00000 n -0000477455 00000 n -0000477580 00000 n -0000477643 00000 n -0000477706 00000 n -0000477050 00000 n -0000477769 00000 n -0000477832 00000 n -0000479921 00000 n -0000479610 00000 n -0000478025 00000 n -0000479733 00000 n -0000479858 00000 n -0000481021 00000 n -0000480585 00000 n -0000480065 00000 n -0000480708 00000 n -0000480958 00000 n -0000481686 00000 n -0000481438 00000 n -0000481109 00000 n -0000481561 00000 n -0002184712 00000 n -0000485354 00000 n -0000484855 00000 n -0000481774 00000 n -0000484978 00000 n -0000485041 00000 n -0000485291 00000 n -0000488215 00000 n -0000487904 00000 n -0000485513 00000 n -0000488027 00000 n -0000488152 00000 n -0000492662 00000 n -0000492104 00000 n -0000488331 00000 n -0000492227 00000 n -0000492352 00000 n -0000492477 00000 n -0000492600 00000 n -0000497337 00000 n -0000496525 00000 n -0000492792 00000 n -0000496648 00000 n -0000496711 00000 n -0000496774 00000 n -0000496837 00000 n -0000496899 00000 n -0000496962 00000 n -0000497025 00000 n -0000497150 00000 n -0000497274 00000 n -0000501720 00000 n -0000501409 00000 n -0000497495 00000 n -0000501532 00000 n -0000501657 00000 n -0000504659 00000 n -0000504349 00000 n -0000501850 00000 n -0000504472 00000 n -0000504596 00000 n -0002184837 00000 n -0000508449 00000 n -0000507954 00000 n -0000504803 00000 n -0000508261 00000 n -0000508098 00000 n -0000508386 00000 n -0000512816 00000 n -0000511879 00000 n -0000508565 00000 n -0000512002 00000 n -0000512127 00000 n -0000512190 00000 n -0000512253 00000 n -0000512316 00000 n -0000512379 00000 n -0000512504 00000 n -0000512628 00000 n -0000512753 00000 n -0000516971 00000 n -0000516537 00000 n -0000512960 00000 n -0000516660 00000 n -0000516785 00000 n -0000516909 00000 n -0000520654 00000 n -0000521657 00000 n -0000520531 00000 n -0000517101 00000 n -0000521469 00000 n -0000521594 00000 n -0000525382 00000 n -0000524824 00000 n -0000521844 00000 n -0000524947 00000 n -0000525072 00000 n -0000525195 00000 n -0000525320 00000 n -0000529209 00000 n -0000528773 00000 n -0000525512 00000 n -0000528896 00000 n -0000529021 00000 n -0000529146 00000 n -0002184962 00000 n -0000532738 00000 n -0000532303 00000 n -0000529396 00000 n -0000532426 00000 n -0000532550 00000 n -0000532675 00000 n -0000537101 00000 n -0000536665 00000 n -0000532854 00000 n -0000536788 00000 n -0000536913 00000 n +0000193343 00000 n +0002112815 00000 n +0000204804 00000 n +0000196494 00000 n +0000193681 00000 n +0000204741 00000 n +0000197061 00000 n +0000197222 00000 n +0000197383 00000 n +0000197544 00000 n +0000197705 00000 n +0000197866 00000 n +0000198027 00000 n +0000198188 00000 n +0000198348 00000 n +0000198509 00000 n +0000198664 00000 n +0000198823 00000 n +0000198983 00000 n +0000199143 00000 n +0000199298 00000 n +0000199458 00000 n +0000199618 00000 n +0000199773 00000 n +0000199933 00000 n +0000200092 00000 n +0000200247 00000 n +0000200407 00000 n +0000200567 00000 n +0000200726 00000 n +0000200886 00000 n +0000201042 00000 n +0000201203 00000 n +0000201364 00000 n +0000201525 00000 n +0000201686 00000 n +0000201847 00000 n +0000202007 00000 n +0000202168 00000 n +0000202328 00000 n +0000202489 00000 n +0000202651 00000 n +0000202813 00000 n +0000202975 00000 n +0000203137 00000 n +0000203299 00000 n +0000203461 00000 n +0000203623 00000 n +0000203778 00000 n +0000203939 00000 n +0000204100 00000 n +0000204260 00000 n +0000204418 00000 n +0000204577 00000 n +0000215006 00000 n +0000207593 00000 n +0000204906 00000 n +0000214943 00000 n +0000208106 00000 n +0000208272 00000 n +0000208438 00000 n +0000208604 00000 n +0000208770 00000 n +0000208935 00000 n +0000209101 00000 n +0000209266 00000 n +0000209432 00000 n +0000209599 00000 n +0000209766 00000 n +0000209932 00000 n +0000210099 00000 n +0000210265 00000 n +0000210432 00000 n +0000210593 00000 n +0000210748 00000 n +0000210909 00000 n +0000211070 00000 n +0000211231 00000 n +0000211392 00000 n +0000211548 00000 n +0000211709 00000 n +0000211875 00000 n +0000212041 00000 n +0000212206 00000 n +0000212372 00000 n +0000212538 00000 n +0000212703 00000 n +0000212869 00000 n +0000213035 00000 n +0000213196 00000 n +0000213352 00000 n +0000213513 00000 n +0000213674 00000 n +0000213835 00000 n +0000213995 00000 n +0000214156 00000 n +0000214317 00000 n +0000214477 00000 n +0000214630 00000 n +0000214784 00000 n +0000225860 00000 n +0000217423 00000 n +0000215108 00000 n +0000225797 00000 n +0000217999 00000 n +0000218160 00000 n +0000218321 00000 n +0000218477 00000 n +0000218633 00000 n +0000218794 00000 n +0000218955 00000 n +0000219116 00000 n +0000219272 00000 n +0000219432 00000 n +0000219593 00000 n +0000219753 00000 n +0000219914 00000 n +0000220068 00000 n +0000220223 00000 n +0000220378 00000 n +0000220533 00000 n +0000220693 00000 n +0000220853 00000 n +0000221012 00000 n +0000221172 00000 n +0000221332 00000 n +0000221486 00000 n +0000221645 00000 n +0000221805 00000 n +0000221960 00000 n +0000222114 00000 n +0000222269 00000 n +0000222424 00000 n +0000222579 00000 n +0000222738 00000 n +0000222892 00000 n +0000223052 00000 n +0000223212 00000 n +0000223371 00000 n +0000223531 00000 n +0000223691 00000 n +0000223851 00000 n +0000224006 00000 n +0000224166 00000 n +0000224326 00000 n +0000224486 00000 n +0000224651 00000 n +0000224816 00000 n +0000224981 00000 n +0000225145 00000 n +0000225308 00000 n +0000225471 00000 n +0000225634 00000 n +0000236332 00000 n +0000228072 00000 n +0000225976 00000 n +0000236269 00000 n +0000228639 00000 n +0000228794 00000 n +0000228949 00000 n +0000229103 00000 n +0000229258 00000 n +0000229413 00000 n +0000229568 00000 n +0000229728 00000 n +0000229882 00000 n +0000230042 00000 n +0000230197 00000 n +0000230351 00000 n +0000230506 00000 n +0000230661 00000 n +0000230821 00000 n +0000230981 00000 n +0000231146 00000 n +0000231306 00000 n +0000231471 00000 n +0000231625 00000 n +0000231785 00000 n +0000231945 00000 n +0000232103 00000 n +0000232257 00000 n +0000232412 00000 n +0000232572 00000 n +0000232726 00000 n +0000232881 00000 n +0000233036 00000 n +0000233196 00000 n +0000233360 00000 n +0000233525 00000 n +0000233690 00000 n +0000233853 00000 n +0000234013 00000 n +0000234178 00000 n +0000234343 00000 n +0000234508 00000 n +0000234668 00000 n +0000234828 00000 n +0000234993 00000 n +0000235157 00000 n +0000235322 00000 n +0000235487 00000 n +0000235641 00000 n +0000235795 00000 n +0000235948 00000 n +0000236106 00000 n +0000246751 00000 n +0000238675 00000 n +0000236434 00000 n +0000246688 00000 n +0000239233 00000 n +0000239393 00000 n +0000239553 00000 n +0000239708 00000 n +0000239868 00000 n +0000240028 00000 n +0000240188 00000 n +0000240342 00000 n +0000240497 00000 n +0000240652 00000 n +0000240811 00000 n +0000240976 00000 n +0000241136 00000 n +0000241301 00000 n +0000241466 00000 n +0000241626 00000 n +0000241786 00000 n +0000241946 00000 n +0000242111 00000 n +0000242275 00000 n +0000242440 00000 n +0000242605 00000 n +0000242759 00000 n +0000242918 00000 n +0000243071 00000 n +0000243226 00000 n +0000243381 00000 n +0000243536 00000 n +0000243696 00000 n +0000243856 00000 n +0000244015 00000 n +0000244174 00000 n +0000244329 00000 n +0000244489 00000 n +0000244648 00000 n +0000244808 00000 n +0000244968 00000 n +0000245128 00000 n +0000245283 00000 n +0000245443 00000 n +0000245603 00000 n +0000245763 00000 n +0000245917 00000 n +0000246072 00000 n +0000246227 00000 n +0000246381 00000 n +0000246535 00000 n +0000255499 00000 n +0000248640 00000 n +0000246853 00000 n +0000255436 00000 n +0000249135 00000 n +0000249289 00000 n +0000249444 00000 n +0000249599 00000 n +0000249753 00000 n +0000249908 00000 n +0000250058 00000 n +0000250212 00000 n +0000250367 00000 n +0000250522 00000 n +0000250677 00000 n +0000250831 00000 n +0000250986 00000 n +0000251146 00000 n +0000251310 00000 n +0000251475 00000 n +0000251640 00000 n +0000251805 00000 n +0000251970 00000 n +0000252130 00000 n +0000252285 00000 n +0000252445 00000 n +0000252605 00000 n +0000252759 00000 n +0000252914 00000 n +0000253073 00000 n +0000253233 00000 n +0000253393 00000 n +0000253553 00000 n +0000253713 00000 n +0000253873 00000 n +0000254033 00000 n +0000254193 00000 n +0000254353 00000 n +0000254513 00000 n +0000254663 00000 n +0000254817 00000 n +0000254972 00000 n +0000255126 00000 n +0000255281 00000 n +0002112940 00000 n +0000265212 00000 n +0000257731 00000 n +0000255601 00000 n +0000265149 00000 n +0000258262 00000 n +0000258416 00000 n +0000258571 00000 n +0000258726 00000 n +0000258881 00000 n +0000259036 00000 n +0000259191 00000 n +0000259345 00000 n +0000259500 00000 n +0000259655 00000 n +0000259809 00000 n +0000259964 00000 n +0000260119 00000 n +0000260274 00000 n +0000260424 00000 n +0000260578 00000 n +0000260733 00000 n +0000260893 00000 n +0000261053 00000 n +0000261218 00000 n +0000261383 00000 n +0000261538 00000 n +0000261693 00000 n +0000261847 00000 n +0000262007 00000 n +0000262172 00000 n +0000262336 00000 n +0000262490 00000 n +0000262650 00000 n +0000262810 00000 n +0000262965 00000 n +0000263119 00000 n +0000263274 00000 n +0000263429 00000 n +0000263583 00000 n +0000263738 00000 n +0000263893 00000 n +0000264053 00000 n +0000264207 00000 n +0000264367 00000 n +0000264527 00000 n +0000264681 00000 n +0000264836 00000 n +0000264991 00000 n +0000272205 00000 n +0000266885 00000 n +0000265314 00000 n +0000272142 00000 n +0000267299 00000 n +0000267459 00000 n +0000267619 00000 n +0000267774 00000 n +0000267934 00000 n +0000268094 00000 n +0000268254 00000 n +0000268414 00000 n +0000268573 00000 n +0000268733 00000 n +0000268888 00000 n +0000269047 00000 n +0000269202 00000 n +0000269357 00000 n +0000269511 00000 n +0000269666 00000 n +0000269821 00000 n +0000269976 00000 n +0000270131 00000 n +0000270285 00000 n +0000270440 00000 n +0000270595 00000 n +0000270749 00000 n +0000270903 00000 n +0000271059 00000 n +0000271215 00000 n +0000271369 00000 n +0000271524 00000 n +0000271678 00000 n +0000271832 00000 n +0000271987 00000 n +0000272860 00000 n +0000272614 00000 n +0000272307 00000 n +0000272737 00000 n +0000276990 00000 n +0000276372 00000 n +0000272948 00000 n +0000276495 00000 n +0000276558 00000 n +0000276804 00000 n +0000276928 00000 n +0000281471 00000 n +0000280972 00000 n +0000277106 00000 n +0000281285 00000 n +0000281116 00000 n +0000281408 00000 n +0000286669 00000 n +0000285429 00000 n +0000281587 00000 n +0000286359 00000 n +0000285600 00000 n +0000285771 00000 n +0000286483 00000 n +0000285943 00000 n +0000286151 00000 n +0000286606 00000 n +0002113065 00000 n +0000288814 00000 n +0000288296 00000 n +0000286785 00000 n +0000288627 00000 n +0000288440 00000 n +0000288751 00000 n +0000292854 00000 n +0000291533 00000 n +0000288916 00000 n +0000292172 00000 n +0000292420 00000 n +0000291695 00000 n +0000291861 00000 n +0000292543 00000 n +0000292667 00000 n +0000292014 00000 n +0000292791 00000 n +0000297489 00000 n +0000295994 00000 n +0000292956 00000 n +0000296808 00000 n +0000296932 00000 n +0000296165 00000 n +0000296335 00000 n +0000297055 00000 n +0000297179 00000 n +0000297303 00000 n +0000297426 00000 n +0000296505 00000 n +0000296657 00000 n +0000300415 00000 n +0000299982 00000 n +0000297647 00000 n +0000300105 00000 n +0000300229 00000 n +0000300352 00000 n +0000301542 00000 n +0000301232 00000 n +0000300545 00000 n +0000301355 00000 n +0000301479 00000 n +0000302543 00000 n +0000302109 00000 n +0000301644 00000 n +0000302232 00000 n +0000302480 00000 n +0002113190 00000 n +0000303197 00000 n +0000302950 00000 n +0000302631 00000 n +0000303073 00000 n +0000306929 00000 n +0000306306 00000 n +0000303285 00000 n +0000306429 00000 n +0000306492 00000 n +0000306742 00000 n +0000306867 00000 n +0000311238 00000 n +0000310677 00000 n +0000307031 00000 n +0000310800 00000 n +0000310924 00000 n +0000311049 00000 n +0000311112 00000 n +0000311175 00000 n +0000315111 00000 n +0000314301 00000 n +0000311368 00000 n +0000314424 00000 n +0000314549 00000 n +0000314674 00000 n +0000314799 00000 n +0000314924 00000 n +0000315049 00000 n +0000318383 00000 n +0000320532 00000 n +0000318230 00000 n +0000315241 00000 n +0000320219 00000 n +0000320282 00000 n +0000320345 00000 n +0001999400 00000 n +0001990147 00000 n +0001999233 00000 n +0001988190 00000 n +0001976852 00000 n +0001988024 00000 n +0000319913 00000 n +0000320063 00000 n +0000320469 00000 n +0000319742 00000 n +0000319800 00000 n +0000319890 00000 n +0000324328 00000 n +0000323553 00000 n +0000320705 00000 n +0000324015 00000 n +0000324140 00000 n +0000323706 00000 n +0000323862 00000 n +0000324265 00000 n +0002113315 00000 n +0000432640 00000 n +0000328097 00000 n +0000327661 00000 n +0000324458 00000 n +0000327784 00000 n +0001976204 00000 n +0001970015 00000 n +0001976037 00000 n +0000327909 00000 n +0000328034 00000 n +0000332153 00000 n +0000331719 00000 n +0000328312 00000 n +0000331842 00000 n +0000331967 00000 n +0000332092 00000 n +0000334942 00000 n +0000334204 00000 n +0000332283 00000 n +0000334505 00000 n +0000334630 00000 n +0000334754 00000 n +0000334348 00000 n +0000334879 00000 n +0000338745 00000 n +0000338309 00000 n +0000335072 00000 n +0000338432 00000 n +0000338682 00000 n +0000343115 00000 n +0000342421 00000 n +0000338861 00000 n +0000343052 00000 n +0000342583 00000 n +0000342740 00000 n +0000342896 00000 n +0000347397 00000 n +0000346790 00000 n +0000343288 00000 n +0000347084 00000 n +0000346934 00000 n +0000347209 00000 n +0000347334 00000 n +0002113440 00000 n +0000351767 00000 n +0000351456 00000 n +0000347598 00000 n +0000351579 00000 n +0000351704 00000 n +0000355956 00000 n +0000355086 00000 n +0000351897 00000 n +0000355893 00000 n +0000355257 00000 n +0000355414 00000 n +0000355571 00000 n +0000355729 00000 n +0000359922 00000 n +0000359109 00000 n +0000356115 00000 n +0000359735 00000 n +0000359271 00000 n +0000359426 00000 n +0000359581 00000 n +0000359859 00000 n +0000361170 00000 n +0000360984 00000 n +0000360123 00000 n +0000361107 00000 n +0000364750 00000 n +0000363896 00000 n +0000361272 00000 n +0000364189 00000 n +0000364040 00000 n +0000364314 00000 n +0000364437 00000 n +0000364562 00000 n +0000364687 00000 n +0000368456 00000 n +0000368020 00000 n +0000364951 00000 n +0000368143 00000 n +0000368268 00000 n +0000368393 00000 n +0002113565 00000 n +0000373361 00000 n +0000372609 00000 n +0000368629 00000 n +0000372732 00000 n +0000372795 00000 n +0000372858 00000 n +0000372921 00000 n +0000372984 00000 n +0000373047 00000 n +0000373110 00000 n +0000373173 00000 n +0000373298 00000 n +0000377585 00000 n +0000376900 00000 n +0000373519 00000 n +0000377023 00000 n +0000377147 00000 n +0000377272 00000 n +0000377397 00000 n +0000377522 00000 n +0000380339 00000 n +0000379778 00000 n +0000377715 00000 n +0000379901 00000 n +0000380026 00000 n +0000380151 00000 n +0000380276 00000 n +0000384549 00000 n +0000383762 00000 n +0000380455 00000 n +0000384236 00000 n +0000383915 00000 n +0000384486 00000 n +0000384068 00000 n +0000388649 00000 n +0000388215 00000 n +0000384665 00000 n +0000388338 00000 n +0000388463 00000 n +0000388586 00000 n +0000393085 00000 n +0000392351 00000 n +0000388779 00000 n +0000392648 00000 n +0000392773 00000 n +0000392495 00000 n +0000392898 00000 n +0000393023 00000 n +0002113690 00000 n +0000397184 00000 n +0000396624 00000 n +0000393243 00000 n +0000396747 00000 n +0000396872 00000 n +0000396997 00000 n +0000397122 00000 n +0000401350 00000 n +0000400665 00000 n +0000397328 00000 n +0000400788 00000 n +0000400913 00000 n +0000401038 00000 n +0000401162 00000 n +0000401287 00000 n +0000402847 00000 n +0000402536 00000 n +0000401494 00000 n +0000402659 00000 n +0000402784 00000 n +0000406491 00000 n +0000405931 00000 n +0000402963 00000 n +0000406054 00000 n +0000406304 00000 n +0000406429 00000 n +0000410750 00000 n +0000410440 00000 n +0000406621 00000 n +0000410563 00000 n +0000410687 00000 n +0000414402 00000 n +0000415950 00000 n +0000414258 00000 n +0000410908 00000 n +0000415385 00000 n +0000415215 00000 n +0000415510 00000 n +0000415573 00000 n +0000415636 00000 n +0000415699 00000 n +0000415762 00000 n +0000415825 00000 n +0000415888 00000 n +0002113815 00000 n +0000420513 00000 n +0000419327 00000 n +0000416137 00000 n +0000419826 00000 n +0000419951 00000 n +0000419480 00000 n +0000420076 00000 n +0000420201 00000 n +0000420326 00000 n +0000420451 00000 n +0000419666 00000 n +0000424799 00000 n +0000425114 00000 n +0000423619 00000 n +0000420643 00000 n +0000424674 00000 n +0000423799 00000 n +0000424924 00000 n +0000424987 00000 n +0000425050 00000 n +0000423952 00000 n +0000424129 00000 n +0000424307 00000 n +0000424492 00000 n +0000429743 00000 n +0000428889 00000 n +0000425258 00000 n +0000429555 00000 n +0000429051 00000 n +0000429680 00000 n +0000429214 00000 n +0000429404 00000 n +0000432953 00000 n +0000431975 00000 n +0000429873 00000 n +0000432515 00000 n +0000432128 00000 n +0000432302 00000 n +0000432765 00000 n +0000432890 00000 n +0000437221 00000 n +0000435969 00000 n +0000433140 00000 n +0000436784 00000 n +0000436140 00000 n +0000436301 00000 n +0000436461 00000 n +0000436629 00000 n +0000436909 00000 n +0000437034 00000 n +0000437159 00000 n +0000440848 00000 n +0000441410 00000 n +0000440600 00000 n +0000437394 00000 n +0000440723 00000 n +0000440972 00000 n +0000441097 00000 n +0000441222 00000 n +0000441347 00000 n +0002113940 00000 n +0000442884 00000 n +0000442698 00000 n +0000441554 00000 n +0000442821 00000 n +0000446687 00000 n +0000446126 00000 n +0000443028 00000 n +0000446249 00000 n +0000446499 00000 n +0000446624 00000 n +0000450472 00000 n +0000449483 00000 n +0000446803 00000 n +0000449783 00000 n +0000449908 00000 n +0000450032 00000 n +0000450157 00000 n +0000450220 00000 n +0000450283 00000 n +0000449627 00000 n +0000450346 00000 n +0000450409 00000 n +0000452429 00000 n +0000452118 00000 n +0000450602 00000 n +0000452241 00000 n +0000452366 00000 n +0000453504 00000 n +0000453068 00000 n +0000452573 00000 n +0000453191 00000 n +0000453441 00000 n +0000454156 00000 n +0000453908 00000 n +0000453592 00000 n +0000454031 00000 n +0002114065 00000 n +0000457764 00000 n +0000457265 00000 n +0000454244 00000 n +0000457388 00000 n +0000457451 00000 n +0000457701 00000 n +0000460533 00000 n +0000460222 00000 n +0000457923 00000 n +0000460345 00000 n +0000460470 00000 n +0000464902 00000 n +0000464344 00000 n +0000460649 00000 n +0000464467 00000 n +0000464592 00000 n +0000464717 00000 n +0000464840 00000 n +0000469199 00000 n +0000468387 00000 n +0000465032 00000 n +0000468510 00000 n +0000468573 00000 n +0000468636 00000 n +0000468699 00000 n +0000468761 00000 n +0000468824 00000 n +0000468887 00000 n +0000469012 00000 n +0000469136 00000 n +0000473555 00000 n +0000473244 00000 n +0000469357 00000 n +0000473367 00000 n +0000473492 00000 n +0000476471 00000 n +0000476161 00000 n +0000473685 00000 n +0000476284 00000 n +0000476408 00000 n +0002114190 00000 n +0000480216 00000 n +0000479721 00000 n +0000476615 00000 n +0000480028 00000 n +0000479865 00000 n +0000480153 00000 n +0000484436 00000 n +0000483499 00000 n +0000480332 00000 n +0000483622 00000 n +0000483747 00000 n +0000483810 00000 n +0000483873 00000 n +0000483936 00000 n +0000483999 00000 n +0000484124 00000 n +0000484248 00000 n +0000484373 00000 n +0000488474 00000 n +0000488040 00000 n +0000484580 00000 n +0000488163 00000 n +0000488288 00000 n +0000488412 00000 n +0000492098 00000 n +0000493101 00000 n +0000491975 00000 n +0000488604 00000 n +0000492913 00000 n +0000493038 00000 n +0000496764 00000 n +0000496206 00000 n +0000493288 00000 n +0000496329 00000 n +0000496454 00000 n +0000496577 00000 n +0000496702 00000 n +0000500451 00000 n +0000500015 00000 n +0000496894 00000 n +0000500138 00000 n +0000500263 00000 n +0000500388 00000 n +0002114315 00000 n +0000503948 00000 n +0000503513 00000 n +0000500638 00000 n +0000503636 00000 n +0000503760 00000 n +0000503885 00000 n +0000508240 00000 n +0000507804 00000 n +0000504064 00000 n +0000507927 00000 n +0000508052 00000 n +0000508177 00000 n +0000511997 00000 n +0000511687 00000 n +0000508441 00000 n +0000511810 00000 n +0000511935 00000 n +0000515863 00000 n +0000515423 00000 n +0000512113 00000 n +0000515546 00000 n +0000515609 00000 n +0000515672 00000 n +0000515736 00000 n +0000515799 00000 n +0000519128 00000 n +0000518500 00000 n +0000515979 00000 n +0000518623 00000 n +0000518686 00000 n +0000518749 00000 n +0000518812 00000 n +0000518875 00000 n +0000518939 00000 n +0000519002 00000 n +0000519065 00000 n +0000521682 00000 n +0000521122 00000 n +0000519230 00000 n +0000521245 00000 n +0000521370 00000 n +0000521494 00000 n +0000521619 00000 n +0002114440 00000 n +0000525334 00000 n +0000524898 00000 n +0000521798 00000 n +0000525021 00000 n +0000525271 00000 n +0000529644 00000 n +0000529334 00000 n +0000525507 00000 n +0000529457 00000 n +0000529582 00000 n +0000533543 00000 n +0000533232 00000 n +0000529802 00000 n +0000533355 00000 n +0000533480 00000 n +0000537599 00000 n 0000537038 00000 n -0000540961 00000 n -0000540651 00000 n -0000537302 00000 n -0000540774 00000 n -0000540899 00000 n -0000545726 00000 n -0000545286 00000 n -0000541077 00000 n -0000545409 00000 n -0000545472 00000 n -0000545535 00000 n -0000545599 00000 n -0000545662 00000 n -0000550307 00000 n -0000549679 00000 n -0000545842 00000 n -0000549802 00000 n -0000549865 00000 n -0000549928 00000 n -0000549991 00000 n -0000550054 00000 n -0000550118 00000 n -0000550181 00000 n -0000550244 00000 n -0000552920 00000 n -0000552360 00000 n -0000550409 00000 n -0000552483 00000 n -0000552608 00000 n -0000552732 00000 n -0000552857 00000 n -0002185087 00000 n -0000556656 00000 n -0000556220 00000 n -0000553036 00000 n -0000556343 00000 n -0000556593 00000 n -0000561084 00000 n -0000560774 00000 n -0000556829 00000 n -0000560897 00000 n -0000561022 00000 n -0000565092 00000 n -0000564781 00000 n -0000561242 00000 n -0000564904 00000 n -0000565029 00000 n -0000569443 00000 n -0000568882 00000 n -0000565265 00000 n -0000569005 00000 n -0000569130 00000 n -0000569255 00000 n -0000569380 00000 n -0000573170 00000 n -0000572610 00000 n -0000569587 00000 n -0000572733 00000 n -0000572858 00000 n -0000572983 00000 n -0000573108 00000 n -0000575994 00000 n -0000575510 00000 n -0000573314 00000 n -0000575806 00000 n -0000575654 00000 n -0000575931 00000 n -0002185212 00000 n -0000613080 00000 n -0000580766 00000 n -0000579876 00000 n -0000576124 00000 n -0000580205 00000 n -0000580330 00000 n -0000580455 00000 n -0000580020 00000 n -0000580580 00000 n -0000580703 00000 n -0000586732 00000 n -0000584620 00000 n -0000580910 00000 n -0000586419 00000 n -0000584836 00000 n -0000585005 00000 n -0000585174 00000 n -0000585368 00000 n -0000585540 00000 n -0000585725 00000 n -0000585927 00000 n -0000586544 00000 n -0000586097 00000 n -0000586669 00000 n -0000586250 00000 n -0000589882 00000 n -0000589572 00000 n -0000586919 00000 n -0000589695 00000 n -0000589819 00000 n -0000591713 00000 n -0000591403 00000 n -0000589998 00000 n -0000591526 00000 n -0000591651 00000 n -0000596390 00000 n -0000594161 00000 n -0000591829 00000 n -0000596202 00000 n -0000596327 00000 n -0000594386 00000 n -0000594569 00000 n -0000594745 00000 n -0000594926 00000 n -0000595106 00000 n -0000595286 00000 n -0000595472 00000 n -0000595656 00000 n -0000595837 00000 n -0000596020 00000 n -0000598922 00000 n -0000598611 00000 n -0000596591 00000 n -0000598734 00000 n -0000598859 00000 n -0002185337 00000 n -0000603362 00000 n -0000602594 00000 n -0000599038 00000 n -0000603049 00000 n -0000603174 00000 n -0000602747 00000 n -0000603299 00000 n -0000602896 00000 n -0000605471 00000 n -0000605035 00000 n -0000603506 00000 n -0000605158 00000 n -0000605283 00000 n -0000605408 00000 n -0000609885 00000 n -0000609123 00000 n -0000605587 00000 n -0000609449 00000 n -0000609267 00000 n -0000609574 00000 n -0000609698 00000 n -0000609822 00000 n -0000613518 00000 n -0000612582 00000 n -0000610058 00000 n -0000612705 00000 n -0000612830 00000 n -0000612955 00000 n -0000613205 00000 n -0000613330 00000 n -0000613455 00000 n -0000614771 00000 n -0000614460 00000 n -0000613662 00000 n -0000614583 00000 n -0000614708 00000 n -0000618607 00000 n -0000618294 00000 n -0000614887 00000 n -0000618417 00000 n -0000618480 00000 n -0000618543 00000 n -0002185462 00000 n -0000620088 00000 n -0000619776 00000 n -0000618737 00000 n -0000619899 00000 n -0000619962 00000 n -0000620024 00000 n -0000623280 00000 n -0000622967 00000 n -0000620190 00000 n -0000623090 00000 n -0000623153 00000 n -0000623216 00000 n -0000626892 00000 n -0000626331 00000 n -0000623382 00000 n -0000626454 00000 n -0000626704 00000 n -0000626829 00000 n -0000630382 00000 n -0000629883 00000 n -0000627065 00000 n -0000630006 00000 n -0000630069 00000 n -0000630132 00000 n -0000630194 00000 n -0000630319 00000 n -0000632990 00000 n -0000632304 00000 n -0000630512 00000 n -0000632427 00000 n -0000632552 00000 n -0000632677 00000 n -0000632740 00000 n -0000632804 00000 n -0000632929 00000 n -0000635764 00000 n -0000635205 00000 n -0000633120 00000 n -0000635328 00000 n -0000635453 00000 n -0000635577 00000 n -0000635701 00000 n -0002185587 00000 n -0000639528 00000 n -0000639092 00000 n -0000635894 00000 n -0000639215 00000 n -0000639465 00000 n -0000644045 00000 n -0000643609 00000 n -0000639658 00000 n -0000643732 00000 n -0000643857 00000 n -0000643982 00000 n -0000648925 00000 n -0000648363 00000 n -0000644203 00000 n -0000648486 00000 n -0002040610 00000 n -0002038736 00000 n -0002040442 00000 n -0000648611 00000 n -0000648674 00000 n -0000648737 00000 n -0000648862 00000 n -0000651116 00000 n -0000650930 00000 n -0000649083 00000 n -0000651053 00000 n -0000655484 00000 n -0000654798 00000 n -0000651218 00000 n -0000654921 00000 n -0000654984 00000 n -0000655047 00000 n -0000655172 00000 n -0000655297 00000 n -0000655422 00000 n -0000659425 00000 n -0000658865 00000 n -0000655600 00000 n -0000658988 00000 n -0000659051 00000 n -0000659114 00000 n -0000659238 00000 n -0000659362 00000 n -0002185712 00000 n -0000663332 00000 n -0000662896 00000 n -0000659555 00000 n -0000663019 00000 n -0000663082 00000 n -0000663145 00000 n -0000663270 00000 n -0000667647 00000 n -0000666962 00000 n -0000663462 00000 n -0000667085 00000 n -0000667148 00000 n -0000667211 00000 n -0000667336 00000 n -0000667399 00000 n -0000667462 00000 n -0000667586 00000 n -0000671599 00000 n -0000670974 00000 n -0000667777 00000 n -0000671097 00000 n -0000671160 00000 n -0000671223 00000 n -0000671286 00000 n -0000671411 00000 n -0000671536 00000 n -0000676176 00000 n -0000675617 00000 n -0000671814 00000 n -0000675740 00000 n -0000675865 00000 n -0000675990 00000 n -0000676114 00000 n -0000680778 00000 n -0000680219 00000 n -0000676391 00000 n -0000680342 00000 n -0000680467 00000 n -0000680591 00000 n -0000680715 00000 n -0000685799 00000 n -0000684707 00000 n -0000680908 00000 n -0000685612 00000 n -0000685737 00000 n -0000684878 00000 n -0000685060 00000 n -0000685240 00000 n -0000685427 00000 n -0002185837 00000 n -0000689992 00000 n -0000689305 00000 n -0000685943 00000 n -0000689428 00000 n -0000689553 00000 n -0000689678 00000 n -0000689803 00000 n -0000689866 00000 n -0000689929 00000 n -0000692080 00000 n -0000691643 00000 n -0000690122 00000 n -0000691766 00000 n -0000691829 00000 n -0000691891 00000 n -0000691954 00000 n -0000692017 00000 n -0000693774 00000 n -0000693465 00000 n -0000692239 00000 n -0000693588 00000 n -0000693712 00000 n -0000697600 00000 n -0000697039 00000 n -0000693975 00000 n -0000697162 00000 n -0000697412 00000 n -0000697537 00000 n -0000702412 00000 n -0000702101 00000 n -0000697759 00000 n -0000702224 00000 n -0000702349 00000 n -0000706762 00000 n -0000706576 00000 n -0000702556 00000 n -0000706699 00000 n -0002185962 00000 n -0000711034 00000 n -0000710224 00000 n -0000706864 00000 n -0000710347 00000 n -0000710472 00000 n -0000710596 00000 n -0000710721 00000 n -0000710846 00000 n -0000710971 00000 n -0000715502 00000 n -0000714818 00000 n -0000711136 00000 n -0000714941 00000 n -0000715066 00000 n -0000715191 00000 n -0000715315 00000 n -0000715439 00000 n -0000719985 00000 n -0000719675 00000 n -0000715632 00000 n -0000719798 00000 n -0000719923 00000 n -0000723402 00000 n -0000722842 00000 n -0000720101 00000 n -0000722965 00000 n -0000723090 00000 n -0000723215 00000 n -0000723339 00000 n -0000726743 00000 n -0000726432 00000 n -0000723518 00000 n -0000726555 00000 n -0000726680 00000 n -0000729114 00000 n -0000728928 00000 n -0000726873 00000 n -0000729051 00000 n -0002186087 00000 n -0000732356 00000 n -0000731920 00000 n -0000729273 00000 n -0000732043 00000 n -0000732168 00000 n -0000732293 00000 n -0000736320 00000 n -0000735885 00000 n -0000732486 00000 n -0000736008 00000 n -0000736132 00000 n -0000736257 00000 n -0000740895 00000 n -0000738904 00000 n -0000736450 00000 n -0000740584 00000 n -0000740709 00000 n -0000740832 00000 n -0000739102 00000 n -0000739313 00000 n -0000739525 00000 n -0000739737 00000 n -0000739949 00000 n -0000740161 00000 n -0000740372 00000 n -0000744880 00000 n -0000744070 00000 n -0000741025 00000 n -0000744193 00000 n -0000744443 00000 n -0000744568 00000 n -0000744693 00000 n -0000744818 00000 n -0000748491 00000 n -0000747930 00000 n -0000744982 00000 n -0000748053 00000 n -0000748178 00000 n -0000748303 00000 n -0000748428 00000 n -0000751410 00000 n -0000750975 00000 n -0000748621 00000 n -0000751098 00000 n -0000751223 00000 n -0000751348 00000 n -0002186212 00000 n -0000755673 00000 n -0000754793 00000 n -0000751526 00000 n -0000755106 00000 n -0000755232 00000 n -0000754937 00000 n -0000755358 00000 n -0000755484 00000 n -0000755610 00000 n -0000759641 00000 n -0000759078 00000 n -0000755789 00000 n -0000759201 00000 n -0000759452 00000 n -0000759578 00000 n -0000764092 00000 n -0000763281 00000 n -0000759743 00000 n -0000763404 00000 n -0000763530 00000 n -0000763654 00000 n -0000763779 00000 n -0000763905 00000 n -0000764030 00000 n -0000768054 00000 n -0000767743 00000 n -0000764194 00000 n -0000767866 00000 n -0000767991 00000 n -0000770599 00000 n -0000770161 00000 n -0000768170 00000 n -0000770284 00000 n -0000770410 00000 n -0000770536 00000 n -0000774435 00000 n -0000773364 00000 n -0000770772 00000 n -0000774120 00000 n -0000774372 00000 n -0000773526 00000 n -0000773762 00000 n -0000773941 00000 n -0002186337 00000 n -0000776415 00000 n -0000776103 00000 n -0000774565 00000 n -0000776226 00000 n -0000776352 00000 n -0000780440 00000 n -0000779876 00000 n -0000776531 00000 n -0000779999 00000 n -0000780251 00000 n -0000780377 00000 n -0000784964 00000 n -0000783960 00000 n -0000780585 00000 n -0000784083 00000 n -0000784209 00000 n -0000784272 00000 n -0000784335 00000 n -0000784398 00000 n -0000784461 00000 n -0000784524 00000 n -0000784587 00000 n -0000784650 00000 n -0000784775 00000 n -0000784901 00000 n -0000788732 00000 n -0000788295 00000 n -0000785179 00000 n -0000788418 00000 n -0000788543 00000 n -0000788669 00000 n -0000792169 00000 n -0000791732 00000 n -0000788904 00000 n -0000791855 00000 n -0000791981 00000 n -0000792106 00000 n -0000794539 00000 n -0000794228 00000 n -0000792299 00000 n -0000794351 00000 n -0000794477 00000 n -0002186462 00000 n -0000797301 00000 n -0000797115 00000 n -0000794726 00000 n -0000797238 00000 n -0000802523 00000 n -0000800277 00000 n -0000799965 00000 n -0000797445 00000 n -0000800088 00000 n -0000800214 00000 n -0000806000 00000 n -0000802400 00000 n -0000800421 00000 n -0000805937 00000 n -0000805766 00000 n -0000805824 00000 n -0000805914 00000 n -0000810301 00000 n -0000811429 00000 n -0000810178 00000 n -0000806187 00000 n -0000811114 00000 n -0000811240 00000 n -0000811366 00000 n -0000816388 00000 n -0000816077 00000 n -0000811630 00000 n -0000816200 00000 n -0000816326 00000 n -0000821396 00000 n -0000820959 00000 n -0000816532 00000 n -0000821082 00000 n -0000821208 00000 n -0000821334 00000 n -0002186587 00000 n -0000825999 00000 n -0000825624 00000 n -0000821512 00000 n -0000825747 00000 n -0000825873 00000 n -0000825936 00000 n -0000830293 00000 n -0000829981 00000 n -0000826143 00000 n -0000830104 00000 n -0000830230 00000 n -0000835473 00000 n -0000834650 00000 n -0000830437 00000 n -0000835158 00000 n -0000835284 00000 n -0000834803 00000 n -0000834983 00000 n -0000835410 00000 n -0000839877 00000 n -0000839440 00000 n -0000835617 00000 n -0000839563 00000 n -0000839689 00000 n -0000839814 00000 n -0000843720 00000 n -0000843408 00000 n -0000840035 00000 n -0000843531 00000 n -0000843657 00000 n -0000847254 00000 n -0000846942 00000 n -0000843921 00000 n -0000847065 00000 n -0000847191 00000 n -0002186712 00000 n -0000852101 00000 n -0000851664 00000 n -0000847455 00000 n -0000851787 00000 n -0000851913 00000 n -0000852039 00000 n -0000857137 00000 n -0000856448 00000 n -0000852259 00000 n -0000856571 00000 n -0000856697 00000 n -0000856760 00000 n -0000856823 00000 n -0000856886 00000 n -0000856948 00000 n -0000857074 00000 n -0000859887 00000 n -0000859701 00000 n -0000857295 00000 n -0000859824 00000 n -0000863812 00000 n -0000863374 00000 n -0000860074 00000 n -0000863497 00000 n -0000863623 00000 n -0000863749 00000 n -0000866587 00000 n -0000866275 00000 n -0000863970 00000 n -0000866398 00000 n -0000866524 00000 n -0000869304 00000 n -0000868992 00000 n -0000866731 00000 n -0000869115 00000 n -0000869241 00000 n -0002186837 00000 n -0000872085 00000 n -0000871773 00000 n -0000869448 00000 n -0000871896 00000 n -0000872022 00000 n -0000876618 00000 n -0000876180 00000 n -0000872215 00000 n -0000876303 00000 n -0000876429 00000 n -0000876555 00000 n -0000879139 00000 n -0000878827 00000 n -0000876776 00000 n -0000878950 00000 n -0000879076 00000 n -0000883613 00000 n -0000883175 00000 n -0000879283 00000 n -0000883298 00000 n -0000883424 00000 n -0000883550 00000 n -0000888474 00000 n -0000888162 00000 n -0000883814 00000 n -0000888285 00000 n -0000888411 00000 n -0000892899 00000 n -0000892461 00000 n -0000888618 00000 n -0000892584 00000 n -0000892710 00000 n -0000892836 00000 n -0002186962 00000 n -0000898753 00000 n -0000897373 00000 n -0000893029 00000 n -0000897496 00000 n -0000897622 00000 n -0000897748 00000 n -0000897811 00000 n -0000897874 00000 n -0000897935 00000 n -0000897997 00000 n -0000898060 00000 n -0000898123 00000 n -0000898186 00000 n -0000898249 00000 n -0000898312 00000 n -0000898375 00000 n -0000898438 00000 n -0000898501 00000 n -0000898564 00000 n -0000898627 00000 n -0000898690 00000 n -0000902332 00000 n -0000902020 00000 n -0000898883 00000 n -0000902143 00000 n -0000902269 00000 n -0000903628 00000 n -0000903442 00000 n -0000902533 00000 n -0000903565 00000 n -0000907766 00000 n -0000907329 00000 n -0000903744 00000 n -0000907452 00000 n -0000907578 00000 n -0000907704 00000 n -0000912026 00000 n -0000911714 00000 n -0000907981 00000 n -0000911837 00000 n -0000911963 00000 n -0000913407 00000 n -0000913221 00000 n -0000912198 00000 n -0000913344 00000 n -0002187087 00000 n -0000915093 00000 n -0000914907 00000 n -0000913509 00000 n -0000915030 00000 n -0000919946 00000 n -0000918865 00000 n -0000915195 00000 n -0000919380 00000 n -0000919506 00000 n -0000919632 00000 n -0000919758 00000 n -0000919018 00000 n -0000919199 00000 n -0000919884 00000 n -0000924388 00000 n -0000923636 00000 n -0000920090 00000 n -0000923759 00000 n -0000923885 00000 n -0000924011 00000 n -0000924137 00000 n -0000924199 00000 n -0000924262 00000 n -0000924325 00000 n -0000928996 00000 n -0000928452 00000 n -0000924532 00000 n -0000928807 00000 n -0000928933 00000 n -0000928596 00000 n -0000933499 00000 n -0000933062 00000 n -0000929154 00000 n -0000933185 00000 n -0000933311 00000 n -0000933436 00000 n -0000937002 00000 n -0000936111 00000 n -0000933657 00000 n -0000936436 00000 n -0000936255 00000 n -0000936562 00000 n -0000936688 00000 n -0000936814 00000 n -0000936939 00000 n -0002187212 00000 n -0000941929 00000 n -0000940744 00000 n -0000937160 00000 n -0000941238 00000 n -0000941490 00000 n -0000941616 00000 n -0000940897 00000 n -0000941742 00000 n -0000941065 00000 n -0000941866 00000 n -0000946096 00000 n -0000945253 00000 n -0000942045 00000 n -0000945781 00000 n -0000945406 00000 n -0000945593 00000 n -0000945907 00000 n -0002036645 00000 n -0002032638 00000 n -0002036478 00000 n -0000946033 00000 n -0000948559 00000 n -0000948247 00000 n -0000946325 00000 n -0000948370 00000 n -0000948496 00000 n -0000952432 00000 n -0000951868 00000 n -0000948675 00000 n -0000951991 00000 n -0000952117 00000 n -0000952243 00000 n -0000952369 00000 n -0000956054 00000 n -0000955617 00000 n -0000952562 00000 n -0000955740 00000 n -0000955865 00000 n -0000955991 00000 n -0000960622 00000 n -0000960184 00000 n -0000956269 00000 n -0000960307 00000 n -0000960433 00000 n -0000960559 00000 n -0002187337 00000 n -0000967989 00000 n -0000965225 00000 n -0000964661 00000 n -0000960766 00000 n -0000964784 00000 n -0000964910 00000 n -0000965036 00000 n -0000965162 00000 n -0000984281 00000 n -0000967866 00000 n -0000965412 00000 n -0000984028 00000 n -0000984091 00000 n -0000984154 00000 n -0002031255 00000 n -0002028991 00000 n -0002031092 00000 n -0000984217 00000 n -0000983840 00000 n -0000986873 00000 n -0000998627 00000 n -0000986750 00000 n -0000984456 00000 n -0000998248 00000 n -0000998374 00000 n -0000998437 00000 n -0000998500 00000 n -0000998563 00000 n -0000998063 00000 n -0001000452 00000 n -0001012951 00000 n -0001000329 00000 n -0000998858 00000 n -0001012573 00000 n -0001012698 00000 n -0001012761 00000 n -0001012824 00000 n -0001012887 00000 n -0001012387 00000 n -0001017004 00000 n -0001016692 00000 n -0001013140 00000 n -0001016815 00000 n -0001016941 00000 n -0001021395 00000 n -0001020442 00000 n -0001017191 00000 n -0001020955 00000 n -0001021081 00000 n -0001020595 00000 n -0001020775 00000 n -0001021207 00000 n -0001021333 00000 n -0002187462 00000 n -0001026368 00000 n -0001025480 00000 n -0001021624 00000 n -0001026179 00000 n -0001025642 00000 n -0001025824 00000 n -0001026001 00000 n -0001026305 00000 n -0001029495 00000 n -0001029183 00000 n -0001026540 00000 n -0001029306 00000 n -0001029432 00000 n -0001032827 00000 n -0001032390 00000 n -0001029710 00000 n -0001032513 00000 n -0001032639 00000 n -0001032765 00000 n -0001034926 00000 n -0001054724 00000 n -0001052836 00000 n -0001034803 00000 n -0001033028 00000 n -0001052459 00000 n -0001052522 00000 n -0001052585 00000 n -0001052648 00000 n -0001052774 00000 n -0001052273 00000 n -0001079461 00000 n -0001077326 00000 n -0001054601 00000 n -0001053025 00000 n -0001076948 00000 n -0001077011 00000 n -0001077074 00000 n -0001077137 00000 n -0001077264 00000 n -0001076760 00000 n -0001108502 00000 n -0001106336 00000 n -0001079338 00000 n -0001077544 00000 n -0001106083 00000 n -0001106146 00000 n -0001106209 00000 n -0001106272 00000 n -0002187587 00000 n -0001105895 00000 n -0001349411 00000 n -0001133349 00000 n -0001108379 00000 n -0001106512 00000 n -0001132845 00000 n -0001132908 00000 n -0001132971 00000 n -0001133034 00000 n -0001133161 00000 n -0001133287 00000 n -0001132657 00000 n -0001387184 00000 n -0001138328 00000 n -0001138016 00000 n -0001133525 00000 n -0001138139 00000 n -0001138265 00000 n -0001141974 00000 n -0001141662 00000 n -0001138472 00000 n -0001141785 00000 n -0001141911 00000 n -0001146099 00000 n -0001145410 00000 n -0001142104 00000 n -0001145533 00000 n -0001145659 00000 n -0001145785 00000 n -0001145911 00000 n -0001146036 00000 n -0001149199 00000 n -0001149013 00000 n -0001146300 00000 n -0001149136 00000 n -0001413617 00000 n -0001153398 00000 n -0001152961 00000 n -0001149414 00000 n -0001153084 00000 n -0001153210 00000 n -0001153335 00000 n -0002187712 00000 n -0001158088 00000 n -0001157380 00000 n -0001153528 00000 n -0001157899 00000 n -0001157533 00000 n -0001157716 00000 n -0001158025 00000 n -0001163551 00000 n -0001162065 00000 n -0001158232 00000 n -0001163362 00000 n -0001163488 00000 n -0001162254 00000 n -0001162435 00000 n -0001162618 00000 n -0001162793 00000 n -0001163004 00000 n -0001163185 00000 n -0001453313 00000 n -0001168185 00000 n -0001167043 00000 n -0001163695 00000 n -0001167619 00000 n -0001167745 00000 n -0001167196 00000 n -0001167408 00000 n -0001167871 00000 n -0001167997 00000 n -0001168122 00000 n -0001476940 00000 n -0001502068 00000 n -0001172696 00000 n -0001172007 00000 n -0001168386 00000 n -0001172130 00000 n -0001172255 00000 n -0001172381 00000 n -0001172507 00000 n -0001172633 00000 n -0001177479 00000 n -0001176715 00000 n -0001172840 00000 n -0001177038 00000 n -0001177164 00000 n -0001176859 00000 n -0001177290 00000 n -0001177416 00000 n -0001182138 00000 n -0001181325 00000 n -0001177637 00000 n -0001181448 00000 n -0001181574 00000 n -0001181700 00000 n -0001181825 00000 n -0001181951 00000 n -0001182076 00000 n -0002187837 00000 n -0001186104 00000 n -0001185540 00000 n -0001182254 00000 n -0001185663 00000 n -0001185789 00000 n -0001185915 00000 n -0001186041 00000 n -0001188699 00000 n -0001187995 00000 n -0001186248 00000 n -0001188510 00000 n -0001188636 00000 n -0001188148 00000 n -0001188328 00000 n -0001191357 00000 n -0001191047 00000 n -0001188829 00000 n -0001191170 00000 n -0001191296 00000 n -0001195087 00000 n -0001194444 00000 n -0001191544 00000 n -0001194772 00000 n -0001194898 00000 n -0001195024 00000 n -0001194588 00000 n -0001197221 00000 n -0001196909 00000 n -0001195274 00000 n -0001197032 00000 n -0001197158 00000 n -0001201702 00000 n -0001201134 00000 n -0001197436 00000 n -0001201257 00000 n -0001201320 00000 n -0001201384 00000 n -0001201448 00000 n -0001201512 00000 n -0001201639 00000 n -0002187962 00000 n -0001205961 00000 n -0001205649 00000 n -0001201931 00000 n -0001205772 00000 n -0001205898 00000 n -0001208433 00000 n -0001208121 00000 n -0001206119 00000 n -0001208244 00000 n -0001208370 00000 n -0001211846 00000 n -0001211221 00000 n -0001208620 00000 n -0001211344 00000 n -0001211469 00000 n -0001211531 00000 n -0001211594 00000 n -0001211657 00000 n -0001211720 00000 n -0001211783 00000 n -0001215551 00000 n -0001214800 00000 n -0001211962 00000 n -0001214923 00000 n -0001215049 00000 n -0001215112 00000 n -0001215175 00000 n -0001215238 00000 n -0001215364 00000 n -0001215489 00000 n -0001219955 00000 n -0001219517 00000 n -0001215738 00000 n -0001219640 00000 n -0001219766 00000 n -0001219892 00000 n -0001224261 00000 n -0001223572 00000 n -0001220156 00000 n -0001223695 00000 n -0001223821 00000 n -0001223884 00000 n -0001223947 00000 n -0001224009 00000 n -0001224072 00000 n -0001224198 00000 n -0002027798 00000 n -0002025797 00000 n -0002027632 00000 n -0002188087 00000 n -0001228120 00000 n -0001227683 00000 n -0001224433 00000 n -0001227806 00000 n -0001227932 00000 n -0001228057 00000 n -0001231610 00000 n -0001231298 00000 n -0001228306 00000 n -0001231421 00000 n -0001231547 00000 n -0001235050 00000 n -0001234361 00000 n -0001231782 00000 n -0001234484 00000 n -0001234610 00000 n -0001234736 00000 n -0001234861 00000 n -0001234987 00000 n -0001237729 00000 n -0001237291 00000 n -0001235194 00000 n -0001237414 00000 n -0001237540 00000 n -0001237666 00000 n -0001240446 00000 n -0001239882 00000 n -0001237873 00000 n -0001240005 00000 n -0001240131 00000 n -0001240257 00000 n -0001240383 00000 n -0001242651 00000 n -0001242213 00000 n -0001240562 00000 n -0001242336 00000 n -0001242462 00000 n -0001242588 00000 n -0002188212 00000 n -0001245846 00000 n -0001245286 00000 n -0001242781 00000 n -0001245409 00000 n -0001245535 00000 n -0001245660 00000 n -0001245784 00000 n -0001248734 00000 n -0001248172 00000 n -0001246004 00000 n -0001248295 00000 n -0001248421 00000 n -0001248545 00000 n -0001248671 00000 n -0001252887 00000 n -0001252197 00000 n -0001248878 00000 n -0001252320 00000 n -0001252446 00000 n -0001252572 00000 n -0001252698 00000 n -0001252824 00000 n -0001256068 00000 n -0001255417 00000 n -0001253031 00000 n -0001255753 00000 n -0001255879 00000 n -0001256005 00000 n -0001255561 00000 n -0001262153 00000 n -0001260159 00000 n -0001256184 00000 n -0001261712 00000 n -0001260357 00000 n -0001260550 00000 n -0001261838 00000 n -0001260743 00000 n -0001260949 00000 n -0001261139 00000 n -0001261964 00000 n -0001262090 00000 n -0001261332 00000 n -0001261517 00000 n -0001269296 00000 n -0001266640 00000 n -0001262340 00000 n +0000533716 00000 n +0000537161 00000 n +0000537286 00000 n +0000537411 00000 n +0000537536 00000 n +0000541210 00000 n +0000540650 00000 n +0000537743 00000 n +0000540773 00000 n +0000540898 00000 n +0000541023 00000 n +0000541148 00000 n +0000543965 00000 n +0000543481 00000 n +0000541354 00000 n +0000543777 00000 n +0000543625 00000 n +0000543902 00000 n +0002114565 00000 n +0000579658 00000 n +0000548548 00000 n +0000547658 00000 n +0000544095 00000 n +0000547987 00000 n +0000548112 00000 n +0000548237 00000 n +0000547802 00000 n +0000548362 00000 n +0000548485 00000 n +0000554233 00000 n +0000552121 00000 n +0000548692 00000 n +0000553920 00000 n +0000552337 00000 n +0000552506 00000 n +0000552675 00000 n +0000552869 00000 n +0000553041 00000 n +0000553226 00000 n +0000553428 00000 n +0000554045 00000 n +0000553598 00000 n +0000554170 00000 n +0000553751 00000 n +0000557361 00000 n +0000557051 00000 n +0000554420 00000 n +0000557174 00000 n +0000557298 00000 n +0000559178 00000 n +0000558868 00000 n +0000557477 00000 n +0000558991 00000 n +0000559116 00000 n +0000563558 00000 n +0000561329 00000 n +0000559294 00000 n +0000563370 00000 n +0000563495 00000 n +0000561554 00000 n +0000561737 00000 n +0000561913 00000 n +0000562094 00000 n +0000562274 00000 n +0000562454 00000 n +0000562640 00000 n +0000562824 00000 n +0000563005 00000 n +0000563188 00000 n +0000566072 00000 n +0000565761 00000 n +0000563759 00000 n +0000565884 00000 n +0000566009 00000 n +0002114690 00000 n +0000570343 00000 n +0000569575 00000 n +0000566188 00000 n +0000570030 00000 n +0000570155 00000 n +0000569728 00000 n +0000570280 00000 n +0000569877 00000 n +0000572397 00000 n +0000571961 00000 n +0000570487 00000 n +0000572084 00000 n +0000572209 00000 n +0000572334 00000 n +0000576597 00000 n +0000575835 00000 n +0000572513 00000 n +0000576161 00000 n +0000575979 00000 n +0000576286 00000 n +0000576410 00000 n +0000576534 00000 n +0000580096 00000 n +0000579160 00000 n +0000576770 00000 n +0000579283 00000 n +0000579408 00000 n +0000579533 00000 n +0000579783 00000 n +0000579908 00000 n +0000580033 00000 n +0000581319 00000 n +0000581008 00000 n +0000580240 00000 n +0000581131 00000 n +0000581256 00000 n +0000584734 00000 n +0000584421 00000 n +0000581435 00000 n +0000584544 00000 n +0000584607 00000 n +0000584670 00000 n +0002114815 00000 n +0000586017 00000 n +0000585705 00000 n +0000584864 00000 n +0000585828 00000 n +0000585891 00000 n +0000585953 00000 n +0000588173 00000 n +0000587860 00000 n +0000586119 00000 n +0000587983 00000 n +0000588046 00000 n +0000588109 00000 n +0000591708 00000 n +0000591147 00000 n +0000588275 00000 n +0000591270 00000 n +0000591520 00000 n +0000591645 00000 n +0000595118 00000 n +0000594619 00000 n +0000591881 00000 n +0000594742 00000 n +0000594805 00000 n +0000594868 00000 n +0000594930 00000 n +0000595055 00000 n +0000597639 00000 n +0000596953 00000 n +0000595248 00000 n +0000597076 00000 n +0000597201 00000 n +0000597326 00000 n +0000597389 00000 n +0000597453 00000 n +0000597578 00000 n +0000600349 00000 n +0000599790 00000 n +0000597769 00000 n +0000599913 00000 n +0000600038 00000 n +0000600162 00000 n +0000600286 00000 n +0002114940 00000 n +0000604065 00000 n +0000603629 00000 n +0000600479 00000 n +0000603752 00000 n +0000604002 00000 n +0000608464 00000 n +0000608028 00000 n +0000604195 00000 n +0000608151 00000 n +0000608276 00000 n +0000608401 00000 n +0000613087 00000 n +0000612525 00000 n +0000608622 00000 n +0000612648 00000 n +0001969779 00000 n +0001967906 00000 n +0001969611 00000 n +0000612773 00000 n +0000612836 00000 n +0000612899 00000 n +0000613024 00000 n +0000615260 00000 n +0000615074 00000 n +0000613245 00000 n +0000615197 00000 n +0000619552 00000 n +0000618866 00000 n +0000615362 00000 n +0000618989 00000 n +0000619052 00000 n +0000619115 00000 n +0000619240 00000 n +0000619365 00000 n +0000619490 00000 n +0000623227 00000 n +0000622667 00000 n +0000619668 00000 n +0000622790 00000 n +0000622853 00000 n +0000622916 00000 n +0000623040 00000 n +0000623164 00000 n +0002115065 00000 n +0000626801 00000 n +0000626365 00000 n +0000623357 00000 n +0000626488 00000 n +0000626551 00000 n +0000626614 00000 n +0000626739 00000 n +0000630815 00000 n +0000630130 00000 n +0000626931 00000 n +0000630253 00000 n +0000630316 00000 n +0000630379 00000 n +0000630504 00000 n +0000630567 00000 n +0000630630 00000 n +0000630754 00000 n +0000634660 00000 n +0000634035 00000 n +0000630945 00000 n +0000634158 00000 n +0000634221 00000 n +0000634284 00000 n +0000634347 00000 n +0000634472 00000 n +0000634597 00000 n +0000639136 00000 n +0000638577 00000 n +0000634875 00000 n +0000638700 00000 n +0000638825 00000 n +0000638950 00000 n +0000639074 00000 n +0000643689 00000 n +0000643130 00000 n +0000639351 00000 n +0000643253 00000 n +0000643378 00000 n +0000643502 00000 n +0000643626 00000 n +0000648554 00000 n +0000647462 00000 n +0000643819 00000 n +0000648367 00000 n +0000648492 00000 n +0000647633 00000 n +0000647815 00000 n +0000647995 00000 n +0000648182 00000 n +0002115190 00000 n +0000652610 00000 n +0000651923 00000 n +0000648698 00000 n +0000652046 00000 n +0000652171 00000 n +0000652296 00000 n +0000652421 00000 n +0000652484 00000 n +0000652547 00000 n +0000654569 00000 n +0000654132 00000 n +0000652740 00000 n +0000654255 00000 n +0000654318 00000 n +0000654380 00000 n +0000654443 00000 n +0000654506 00000 n +0000656214 00000 n +0000655905 00000 n +0000654728 00000 n +0000656028 00000 n +0000656152 00000 n +0000659967 00000 n +0000659406 00000 n +0000656415 00000 n +0000659529 00000 n +0000659779 00000 n +0000659904 00000 n +0000664586 00000 n +0000664275 00000 n +0000660126 00000 n +0000664398 00000 n +0000664523 00000 n +0000668926 00000 n +0000668740 00000 n +0000664730 00000 n +0000668863 00000 n +0002115315 00000 n +0000673098 00000 n +0000672288 00000 n +0000669028 00000 n +0000672411 00000 n +0000672536 00000 n +0000672660 00000 n +0000672785 00000 n +0000672910 00000 n +0000673035 00000 n +0000677441 00000 n +0000676757 00000 n +0000673200 00000 n +0000676880 00000 n +0000677005 00000 n +0000677130 00000 n +0000677254 00000 n +0000677378 00000 n +0000681902 00000 n +0000681592 00000 n +0000677571 00000 n +0000681715 00000 n +0000681840 00000 n +0000685266 00000 n +0000684706 00000 n +0000682018 00000 n +0000684829 00000 n +0000684954 00000 n +0000685079 00000 n +0000685203 00000 n +0000688563 00000 n +0000688252 00000 n +0000685382 00000 n +0000688375 00000 n +0000688500 00000 n +0000690856 00000 n +0000690670 00000 n +0000688693 00000 n +0000690793 00000 n +0002115440 00000 n +0000693839 00000 n +0000693403 00000 n +0000691015 00000 n +0000693526 00000 n +0000693651 00000 n +0000693776 00000 n +0000697709 00000 n +0000697274 00000 n +0000693969 00000 n +0000697397 00000 n +0000697521 00000 n +0000697646 00000 n +0000702130 00000 n +0000700139 00000 n +0000697839 00000 n +0000701819 00000 n +0000701944 00000 n +0000702067 00000 n +0000700337 00000 n +0000700548 00000 n +0000700760 00000 n +0000700972 00000 n +0000701184 00000 n +0000701396 00000 n +0000701607 00000 n +0000706041 00000 n +0000705231 00000 n +0000702260 00000 n +0000705354 00000 n +0000705604 00000 n +0000705729 00000 n +0000705854 00000 n +0000705979 00000 n +0000709575 00000 n +0000709014 00000 n +0000706143 00000 n +0000709137 00000 n +0000709262 00000 n +0000709387 00000 n +0000709512 00000 n +0000712403 00000 n +0000711968 00000 n +0000709705 00000 n +0000712091 00000 n +0000712216 00000 n +0000712341 00000 n +0002115565 00000 n +0000716574 00000 n +0000715694 00000 n +0000712519 00000 n +0000716007 00000 n +0000716133 00000 n +0000715838 00000 n +0000716259 00000 n +0000716385 00000 n +0000716511 00000 n +0000720513 00000 n +0000719950 00000 n +0000716690 00000 n +0000720073 00000 n +0000720324 00000 n +0000720450 00000 n +0000724885 00000 n +0000724074 00000 n +0000720615 00000 n +0000724197 00000 n +0000724323 00000 n +0000724447 00000 n +0000724572 00000 n +0000724698 00000 n +0000724823 00000 n +0000728774 00000 n +0000728463 00000 n +0000724987 00000 n +0000728586 00000 n +0000728711 00000 n +0000731260 00000 n +0000730822 00000 n +0000728890 00000 n +0000730945 00000 n +0000731071 00000 n +0000731197 00000 n +0000734997 00000 n +0000733926 00000 n +0000731433 00000 n +0000734682 00000 n +0000734934 00000 n +0000734088 00000 n +0000734324 00000 n +0000734503 00000 n +0002115690 00000 n +0000736895 00000 n +0000736583 00000 n +0000735127 00000 n +0000736706 00000 n +0000736832 00000 n +0000740860 00000 n +0000740296 00000 n +0000737011 00000 n +0000740419 00000 n +0000740671 00000 n +0000740797 00000 n +0000744923 00000 n +0000743919 00000 n +0000741005 00000 n +0000744042 00000 n +0000744168 00000 n +0000744231 00000 n +0000744294 00000 n +0000744357 00000 n +0000744420 00000 n +0000744483 00000 n +0000744546 00000 n +0000744609 00000 n +0000744734 00000 n +0000744860 00000 n +0000748040 00000 n +0000747603 00000 n +0000745138 00000 n +0000747726 00000 n +0000747851 00000 n +0000747977 00000 n +0000751448 00000 n +0000751011 00000 n +0000748212 00000 n +0000751134 00000 n +0000751260 00000 n +0000751385 00000 n +0000753776 00000 n +0000753465 00000 n +0000751578 00000 n +0000753588 00000 n +0000753714 00000 n +0002115815 00000 n +0000756458 00000 n +0000756272 00000 n +0000753963 00000 n +0000756395 00000 n +0000761581 00000 n +0000759376 00000 n +0000759064 00000 n +0000756602 00000 n +0000759187 00000 n +0000759313 00000 n +0000765058 00000 n +0000761458 00000 n +0000759520 00000 n +0000764995 00000 n +0000764824 00000 n +0000764882 00000 n +0000764972 00000 n +0000769247 00000 n +0000770375 00000 n +0000769124 00000 n +0000765245 00000 n +0000770060 00000 n +0000770186 00000 n +0000770312 00000 n +0000775229 00000 n +0000774918 00000 n +0000770576 00000 n +0000775041 00000 n +0000775167 00000 n +0000779988 00000 n +0000779551 00000 n +0000775373 00000 n +0000779674 00000 n +0000779800 00000 n +0000779926 00000 n +0002115940 00000 n +0000784198 00000 n +0000783823 00000 n +0000780104 00000 n +0000783946 00000 n +0000784072 00000 n +0000784135 00000 n +0000788357 00000 n +0000788045 00000 n +0000784342 00000 n +0000788168 00000 n +0000788294 00000 n +0000793360 00000 n +0000792537 00000 n +0000788501 00000 n +0000793045 00000 n +0000793171 00000 n +0000792690 00000 n +0000792870 00000 n +0000793297 00000 n +0000797635 00000 n +0000797198 00000 n +0000793504 00000 n +0000797321 00000 n +0000797447 00000 n +0000797572 00000 n +0000801364 00000 n +0000801052 00000 n +0000797793 00000 n +0000801175 00000 n +0000801301 00000 n +0000804821 00000 n +0000804509 00000 n +0000801565 00000 n +0000804632 00000 n +0000804758 00000 n +0002116065 00000 n +0000809552 00000 n +0000809115 00000 n +0000805022 00000 n +0000809238 00000 n +0000809364 00000 n +0000809490 00000 n +0000814454 00000 n +0000813765 00000 n +0000809710 00000 n +0000813888 00000 n +0000814014 00000 n +0000814077 00000 n +0000814140 00000 n +0000814203 00000 n +0000814265 00000 n +0000814391 00000 n +0000817169 00000 n +0000816983 00000 n +0000814612 00000 n +0000817106 00000 n +0000821016 00000 n +0000820578 00000 n +0000817356 00000 n +0000820701 00000 n +0000820827 00000 n +0000820953 00000 n +0000823775 00000 n +0000823463 00000 n +0000821174 00000 n +0000823586 00000 n +0000823712 00000 n +0000826473 00000 n +0000826161 00000 n +0000823919 00000 n +0000826284 00000 n +0000826410 00000 n +0002116190 00000 n +0000829214 00000 n +0000828902 00000 n +0000826617 00000 n +0000829025 00000 n +0000829151 00000 n +0000833644 00000 n +0000833206 00000 n +0000829344 00000 n +0000833329 00000 n +0000833455 00000 n +0000833581 00000 n +0000836143 00000 n +0000835831 00000 n +0000833802 00000 n +0000835954 00000 n +0000836080 00000 n +0000840448 00000 n +0000840010 00000 n +0000836287 00000 n +0000840133 00000 n +0000840259 00000 n +0000840385 00000 n +0000845003 00000 n +0000844691 00000 n +0000840649 00000 n +0000844814 00000 n +0000844940 00000 n +0000849333 00000 n +0000848895 00000 n +0000845147 00000 n +0000849018 00000 n +0000849144 00000 n +0000849270 00000 n +0002116315 00000 n +0000854847 00000 n +0000853467 00000 n +0000849463 00000 n +0000853590 00000 n +0000853716 00000 n +0000853842 00000 n +0000853905 00000 n +0000853968 00000 n +0000854029 00000 n +0000854091 00000 n +0000854154 00000 n +0000854217 00000 n +0000854280 00000 n +0000854343 00000 n +0000854406 00000 n +0000854469 00000 n +0000854532 00000 n +0000854595 00000 n +0000854658 00000 n +0000854721 00000 n +0000854784 00000 n +0000858386 00000 n +0000858074 00000 n +0000854977 00000 n +0000858197 00000 n +0000858323 00000 n +0000859671 00000 n +0000859485 00000 n +0000858587 00000 n +0000859608 00000 n +0000863618 00000 n +0000863181 00000 n +0000859787 00000 n +0000863304 00000 n +0000863430 00000 n +0000863556 00000 n +0000867826 00000 n +0000867514 00000 n +0000863833 00000 n +0000867637 00000 n +0000867763 00000 n +0000869197 00000 n +0000869011 00000 n +0000867998 00000 n +0000869134 00000 n +0002116440 00000 n +0000870871 00000 n +0000870685 00000 n +0000869299 00000 n +0000870808 00000 n +0000875577 00000 n +0000874496 00000 n +0000870973 00000 n +0000875011 00000 n +0000875137 00000 n +0000875263 00000 n +0000875389 00000 n +0000874649 00000 n +0000874830 00000 n +0000875515 00000 n +0000879806 00000 n +0000879054 00000 n +0000875721 00000 n +0000879177 00000 n +0000879303 00000 n +0000879429 00000 n +0000879555 00000 n +0000879617 00000 n +0000879680 00000 n +0000879743 00000 n +0000884224 00000 n +0000883680 00000 n +0000879950 00000 n +0000884035 00000 n +0000884161 00000 n +0000883824 00000 n +0000888569 00000 n +0000888132 00000 n +0000884382 00000 n +0000888255 00000 n +0000888381 00000 n +0000888506 00000 n +0000891940 00000 n +0000891049 00000 n +0000888727 00000 n +0000891374 00000 n +0000891193 00000 n +0000891500 00000 n +0000891626 00000 n +0000891752 00000 n +0000891877 00000 n +0002116565 00000 n +0000896782 00000 n +0000895597 00000 n +0000892098 00000 n +0000896091 00000 n +0000896343 00000 n +0000896469 00000 n +0000895750 00000 n +0000896595 00000 n +0000895918 00000 n +0000896719 00000 n +0000900861 00000 n +0000900018 00000 n +0000896898 00000 n +0000900546 00000 n +0000900171 00000 n +0000900358 00000 n +0000900672 00000 n +0001965815 00000 n +0001961810 00000 n +0001965648 00000 n +0000900798 00000 n +0000903304 00000 n +0000902992 00000 n +0000901090 00000 n +0000903115 00000 n +0000903241 00000 n +0000907127 00000 n +0000906563 00000 n +0000903420 00000 n +0000906686 00000 n +0000906812 00000 n +0000906938 00000 n +0000907064 00000 n +0000910615 00000 n +0000910178 00000 n +0000907257 00000 n +0000910301 00000 n +0000910426 00000 n +0000910552 00000 n +0000914977 00000 n +0000914539 00000 n +0000910830 00000 n +0000914662 00000 n +0000914788 00000 n +0000914914 00000 n +0002116690 00000 n +0000922240 00000 n +0000919516 00000 n +0000918952 00000 n +0000915121 00000 n +0000919075 00000 n +0000919201 00000 n +0000919327 00000 n +0000919453 00000 n +0000938532 00000 n +0000922117 00000 n +0000919703 00000 n +0000938279 00000 n +0000938342 00000 n +0000938405 00000 n +0001960427 00000 n +0001958164 00000 n +0001960264 00000 n +0000938468 00000 n +0000938091 00000 n +0000941030 00000 n +0000952784 00000 n +0000940907 00000 n +0000938707 00000 n +0000952405 00000 n +0000952531 00000 n +0000952594 00000 n +0000952657 00000 n +0000952720 00000 n +0000952220 00000 n +0000954547 00000 n +0000967046 00000 n +0000954424 00000 n +0000953015 00000 n +0000966668 00000 n +0000966793 00000 n +0000966856 00000 n +0000966919 00000 n +0000966982 00000 n +0000966482 00000 n +0000971048 00000 n +0000970736 00000 n +0000967235 00000 n +0000970859 00000 n +0000970985 00000 n +0000975298 00000 n +0000974345 00000 n +0000971235 00000 n +0000974858 00000 n +0000974984 00000 n +0000974498 00000 n +0000974678 00000 n +0000975110 00000 n +0000975236 00000 n +0002116815 00000 n +0000980154 00000 n +0000979266 00000 n +0000975527 00000 n +0000979965 00000 n +0000979428 00000 n +0000979610 00000 n +0000979787 00000 n +0000980091 00000 n +0000983223 00000 n +0000982911 00000 n +0000980326 00000 n +0000983034 00000 n +0000983160 00000 n +0000986369 00000 n +0000985932 00000 n +0000983438 00000 n +0000986055 00000 n +0000986181 00000 n +0000986307 00000 n +0000988408 00000 n +0001008075 00000 n +0001006318 00000 n +0000988285 00000 n +0000986570 00000 n +0001005941 00000 n +0001006004 00000 n +0001006067 00000 n +0001006130 00000 n +0001006256 00000 n +0001005755 00000 n +0001032758 00000 n +0001030677 00000 n +0001007952 00000 n +0001006507 00000 n +0001030299 00000 n +0001030362 00000 n +0001030425 00000 n +0001030488 00000 n +0001030615 00000 n +0001030111 00000 n +0001061730 00000 n +0001059633 00000 n +0001032635 00000 n +0001030895 00000 n +0001059380 00000 n +0001059443 00000 n +0001059506 00000 n +0001059569 00000 n +0002116940 00000 n +0001059192 00000 n +0001295014 00000 n +0001086577 00000 n +0001061607 00000 n +0001059809 00000 n +0001086073 00000 n +0001086136 00000 n +0001086199 00000 n +0001086262 00000 n +0001086389 00000 n +0001086515 00000 n +0001085885 00000 n +0001332745 00000 n +0001091224 00000 n +0001090912 00000 n +0001086753 00000 n +0001091035 00000 n +0001091161 00000 n +0001094856 00000 n +0001094544 00000 n +0001091368 00000 n +0001094667 00000 n +0001094793 00000 n +0001098891 00000 n +0001098202 00000 n +0001094986 00000 n +0001098325 00000 n +0001098451 00000 n +0001098577 00000 n +0001098703 00000 n +0001098828 00000 n +0001101915 00000 n +0001101729 00000 n +0001099092 00000 n +0001101852 00000 n +0001359132 00000 n +0001105826 00000 n +0001105389 00000 n +0001102130 00000 n +0001105512 00000 n +0001105638 00000 n +0001105763 00000 n +0002117065 00000 n +0001110352 00000 n +0001109644 00000 n +0001105956 00000 n +0001110163 00000 n +0001109797 00000 n +0001109980 00000 n +0001110289 00000 n +0001115497 00000 n +0001114011 00000 n +0001110496 00000 n +0001115308 00000 n +0001115434 00000 n +0001114200 00000 n +0001114381 00000 n +0001114564 00000 n +0001114739 00000 n +0001114950 00000 n +0001115131 00000 n +0001398788 00000 n +0001119972 00000 n +0001118830 00000 n +0001115641 00000 n +0001119406 00000 n +0001119532 00000 n +0001118983 00000 n +0001119195 00000 n +0001119658 00000 n +0001119784 00000 n +0001119909 00000 n +0001422372 00000 n +0001447456 00000 n +0001124355 00000 n +0001123666 00000 n +0001120173 00000 n +0001123789 00000 n +0001123914 00000 n +0001124040 00000 n +0001124166 00000 n +0001124292 00000 n +0001129028 00000 n +0001128264 00000 n +0001124499 00000 n +0001128587 00000 n +0001128713 00000 n +0001128408 00000 n +0001128839 00000 n +0001128965 00000 n +0001133556 00000 n +0001132743 00000 n +0001129186 00000 n +0001132866 00000 n +0001132992 00000 n +0001133118 00000 n +0001133243 00000 n +0001133369 00000 n +0001133494 00000 n +0002117190 00000 n +0001137399 00000 n +0001136835 00000 n +0001133672 00000 n +0001136958 00000 n +0001137084 00000 n +0001137210 00000 n +0001137336 00000 n +0001139949 00000 n +0001139245 00000 n +0001137543 00000 n +0001139760 00000 n +0001139886 00000 n +0001139398 00000 n +0001139578 00000 n +0001142560 00000 n +0001142250 00000 n +0001140079 00000 n +0001142373 00000 n +0001142499 00000 n +0001146207 00000 n +0001145564 00000 n +0001142747 00000 n +0001145892 00000 n +0001146018 00000 n +0001146144 00000 n +0001145708 00000 n +0001148292 00000 n +0001147980 00000 n +0001146394 00000 n +0001148103 00000 n +0001148229 00000 n +0001152597 00000 n +0001152029 00000 n +0001148507 00000 n +0001152152 00000 n +0001152215 00000 n +0001152279 00000 n +0001152343 00000 n +0001152407 00000 n +0001152534 00000 n +0002117315 00000 n +0001156710 00000 n +0001156398 00000 n +0001152826 00000 n +0001156521 00000 n +0001156647 00000 n +0001159134 00000 n +0001158822 00000 n +0001156868 00000 n +0001158945 00000 n +0001159071 00000 n +0001162384 00000 n +0001161759 00000 n +0001159321 00000 n +0001161882 00000 n +0001162007 00000 n +0001162069 00000 n +0001162132 00000 n +0001162195 00000 n +0001162258 00000 n +0001162321 00000 n +0001165947 00000 n +0001165196 00000 n +0001162500 00000 n +0001165319 00000 n +0001165445 00000 n +0001165508 00000 n +0001165571 00000 n +0001165634 00000 n +0001165760 00000 n +0001165885 00000 n +0001170137 00000 n +0001169699 00000 n +0001166134 00000 n +0001169822 00000 n +0001169948 00000 n +0001170074 00000 n +0001174254 00000 n +0001173565 00000 n +0001170338 00000 n +0001173688 00000 n +0001173814 00000 n +0001173877 00000 n +0001173940 00000 n +0001174002 00000 n +0001174065 00000 n +0001174191 00000 n +0001956971 00000 n +0001954970 00000 n +0001956805 00000 n +0002117440 00000 n +0001178079 00000 n +0001177642 00000 n +0001174426 00000 n +0001177765 00000 n +0001177891 00000 n +0001178016 00000 n +0001181422 00000 n +0001181110 00000 n +0001178265 00000 n +0001181233 00000 n +0001181359 00000 n +0001184803 00000 n +0001184114 00000 n +0001181594 00000 n +0001184237 00000 n +0001184363 00000 n +0001184489 00000 n +0001184614 00000 n +0001184740 00000 n +0001187446 00000 n +0001187008 00000 n +0001184947 00000 n +0001187131 00000 n +0001187257 00000 n +0001187383 00000 n +0001190106 00000 n +0001189542 00000 n +0001187590 00000 n +0001189665 00000 n +0001189791 00000 n +0001189917 00000 n +0001190043 00000 n +0001192271 00000 n +0001191833 00000 n +0001190222 00000 n +0001191956 00000 n +0001192082 00000 n +0001192208 00000 n +0002117565 00000 n +0001195412 00000 n +0001194852 00000 n +0001192401 00000 n +0001194975 00000 n +0001195101 00000 n +0001195226 00000 n +0001195350 00000 n +0001198245 00000 n +0001197683 00000 n +0001195570 00000 n +0001197806 00000 n +0001197932 00000 n +0001198056 00000 n +0001198182 00000 n +0001202331 00000 n +0001201641 00000 n +0001198389 00000 n +0001201764 00000 n +0001201890 00000 n +0001202016 00000 n +0001202142 00000 n +0001202268 00000 n +0001205455 00000 n +0001204804 00000 n +0001202475 00000 n +0001205140 00000 n +0001205266 00000 n +0001205392 00000 n +0001204948 00000 n +0001211349 00000 n +0001209355 00000 n +0001205571 00000 n +0001210908 00000 n +0001209553 00000 n +0001209746 00000 n +0001211034 00000 n +0001209939 00000 n +0001210145 00000 n +0001210335 00000 n +0001211160 00000 n +0001211286 00000 n +0001210528 00000 n +0001210713 00000 n +0001218176 00000 n +0001215520 00000 n +0001211536 00000 n +0001217861 00000 n +0001217987 00000 n +0001218113 00000 n +0001215754 00000 n +0001215972 00000 n +0001216189 00000 n +0001216406 00000 n +0001216587 00000 n +0001216764 00000 n +0001216931 00000 n +0001217110 00000 n +0001217286 00000 n +0001217471 00000 n +0001217641 00000 n +0002117690 00000 n +0001224500 00000 n +0001222188 00000 n +0001218306 00000 n +0001224185 00000 n +0001224311 00000 n +0001222395 00000 n +0001222627 00000 n +0001222859 00000 n +0001223091 00000 n +0001223360 00000 n +0001224437 00000 n +0001223629 00000 n +0001223839 00000 n +0001224011 00000 n +0001230605 00000 n +0001228579 00000 n +0001224616 00000 n +0001230165 00000 n +0001230291 00000 n +0001228777 00000 n +0001228992 00000 n +0001229181 00000 n +0001229365 00000 n +0001230416 00000 n +0001229599 00000 n +0001229795 00000 n +0001230542 00000 n +0001229973 00000 n +0001239808 00000 n +0001234577 00000 n +0001230806 00000 n +0001239745 00000 n +0001234919 00000 n +0001235125 00000 n +0001235331 00000 n +0001235551 00000 n +0001235771 00000 n +0001235977 00000 n +0001236183 00000 n +0001236372 00000 n +0001236562 00000 n +0001236752 00000 n +0001236941 00000 n +0001237131 00000 n +0001237321 00000 n +0001237511 00000 n +0001237704 00000 n +0001237896 00000 n +0001238135 00000 n +0001238375 00000 n +0001238615 00000 n +0001238853 00000 n +0001239093 00000 n +0001239333 00000 n +0001239539 00000 n +0001244979 00000 n +0001243456 00000 n +0001239938 00000 n +0001244790 00000 n +0001243636 00000 n +0001243866 00000 n +0001244097 00000 n +0001244328 00000 n +0001244559 00000 n +0001244916 00000 n +0001249214 00000 n +0001248309 00000 n +0001245137 00000 n +0001248647 00000 n +0001248773 00000 n +0001248899 00000 n +0001248453 00000 n +0001249025 00000 n +0001249151 00000 n +0001252555 00000 n +0001252118 00000 n +0001249358 00000 n +0001252241 00000 n +0001252367 00000 n +0001252492 00000 n +0002117815 00000 n +0001256007 00000 n +0001255569 00000 n +0001252699 00000 n +0001255692 00000 n +0001255818 00000 n +0001255944 00000 n +0001260297 00000 n +0001259733 00000 n +0001256137 00000 n +0001259856 00000 n +0001259982 00000 n +0001260108 00000 n +0001260234 00000 n +0001263285 00000 n +0001262347 00000 n +0001260441 00000 n +0001262470 00000 n +0001262596 00000 n +0001262722 00000 n +0001262847 00000 n +0001262973 00000 n +0001263098 00000 n +0001263224 00000 n +0001266537 00000 n +0001266099 00000 n +0001263458 00000 n +0001266222 00000 n +0001266348 00000 n +0001266474 00000 n +0001269170 00000 n +0001268858 00000 n +0001266681 00000 n 0001268981 00000 n 0001269107 00000 n -0001269233 00000 n -0001266874 00000 n -0001267092 00000 n -0001267309 00000 n -0001267526 00000 n -0001267707 00000 n -0001267884 00000 n -0001268051 00000 n -0001268230 00000 n -0001268406 00000 n -0001268591 00000 n -0001268761 00000 n -0002188337 00000 n -0001275791 00000 n -0001273479 00000 n -0001269426 00000 n -0001275476 00000 n -0001275602 00000 n -0001273686 00000 n -0001273918 00000 n -0001274150 00000 n -0001274382 00000 n -0001274651 00000 n -0001275728 00000 n -0001274920 00000 n -0001275130 00000 n -0001275302 00000 n -0001282106 00000 n -0001280080 00000 n -0001275907 00000 n -0001281666 00000 n -0001281792 00000 n -0001280278 00000 n -0001280493 00000 n -0001280682 00000 n -0001280866 00000 n -0001281917 00000 n -0001281100 00000 n -0001281296 00000 n -0001282043 00000 n -0001281474 00000 n -0001291972 00000 n -0001286741 00000 n -0001282307 00000 n -0001291909 00000 n -0001287083 00000 n -0001287289 00000 n -0001287495 00000 n -0001287715 00000 n -0001287935 00000 n -0001288141 00000 n -0001288347 00000 n -0001288536 00000 n -0001288726 00000 n -0001288916 00000 n -0001289105 00000 n -0001289295 00000 n -0001289485 00000 n -0001289675 00000 n +0001270528 00000 n +0001270342 00000 n +0001269314 00000 n +0001270465 00000 n +0002117940 00000 n +0001271926 00000 n +0001271740 00000 n +0001270630 00000 n +0001271863 00000 n +0001273187 00000 n +0001273001 00000 n +0001272028 00000 n +0001273124 00000 n +0001274355 00000 n +0001274169 00000 n +0001273289 00000 n +0001274292 00000 n +0001275925 00000 n +0001275739 00000 n +0001274457 00000 n +0001275862 00000 n +0001279650 00000 n +0001279339 00000 n +0001276027 00000 n +0001279462 00000 n +0001279587 00000 n +0001284687 00000 n +0001284501 00000 n +0001279822 00000 n +0001284624 00000 n +0002118065 00000 n +0001290372 00000 n +0001289242 00000 n +0001284873 00000 n +0001289365 00000 n +0001289428 00000 n +0001289491 00000 n +0001289554 00000 n +0001289616 00000 n +0001289679 00000 n +0001289742 00000 n +0001289805 00000 n 0001289868 00000 n -0001290060 00000 n -0001290299 00000 n -0001290539 00000 n -0001290779 00000 n -0001291017 00000 n -0001291257 00000 n -0001291497 00000 n -0001291703 00000 n -0001297421 00000 n -0001295898 00000 n -0001292102 00000 n -0001297232 00000 n -0001296078 00000 n -0001296308 00000 n -0001296539 00000 n -0001296770 00000 n -0001297001 00000 n -0001297358 00000 n -0001301924 00000 n -0001301019 00000 n -0001297579 00000 n -0001301357 00000 n -0001301483 00000 n -0001301609 00000 n -0001301163 00000 n -0001301735 00000 n -0001301861 00000 n -0001305692 00000 n -0001305255 00000 n -0001302068 00000 n -0001305378 00000 n -0001305504 00000 n -0001305629 00000 n -0002188462 00000 n -0001309179 00000 n -0001308741 00000 n -0001305836 00000 n -0001308864 00000 n -0001308990 00000 n -0001309116 00000 n -0001313648 00000 n -0001313084 00000 n -0001309309 00000 n -0001313207 00000 n -0001313333 00000 n -0001313459 00000 n -0001313585 00000 n -0001316767 00000 n -0001315829 00000 n -0001313792 00000 n -0001315952 00000 n -0001316078 00000 n -0001316204 00000 n -0001316329 00000 n -0001316455 00000 n -0001316580 00000 n -0001316706 00000 n -0001320053 00000 n -0001319615 00000 n -0001316940 00000 n -0001319738 00000 n -0001319864 00000 n -0001319990 00000 n -0001322708 00000 n -0001322396 00000 n -0001320197 00000 n -0001322519 00000 n -0001322645 00000 n -0001324077 00000 n -0001323891 00000 n -0001322852 00000 n -0001324014 00000 n -0002188587 00000 n -0001325485 00000 n -0001325299 00000 n -0001324179 00000 n -0001325422 00000 n -0001326757 00000 n -0001326571 00000 n -0001325587 00000 n -0001326694 00000 n -0001327934 00000 n -0001327748 00000 n -0001326859 00000 n -0001327871 00000 n -0001329514 00000 n -0001329328 00000 n -0001328036 00000 n -0001329451 00000 n -0001333371 00000 n -0001333060 00000 n -0001329616 00000 n -0001333183 00000 n -0001333308 00000 n -0001338528 00000 n -0001338342 00000 n -0001333543 00000 n -0001338465 00000 n -0002188712 00000 n -0001344656 00000 n -0001343526 00000 n -0001338714 00000 n -0001343649 00000 n -0001343712 00000 n -0001343775 00000 n -0001343838 00000 n -0001343900 00000 n -0001343963 00000 n -0001344026 00000 n -0001344089 00000 n -0001344152 00000 n -0001344215 00000 n -0001344278 00000 n -0001344341 00000 n -0001344404 00000 n -0001344467 00000 n -0001344530 00000 n -0001344593 00000 n -0001528554 00000 n -0001348550 00000 n -0001348238 00000 n -0001344800 00000 n -0001348361 00000 n -0001348487 00000 n -0001386303 00000 n -0001349288 00000 n -0001348694 00000 n -0001386051 00000 n -0001386114 00000 n -0001386177 00000 n -0001386240 00000 n -0001385863 00000 n -0001412727 00000 n -0001387061 00000 n -0001386465 00000 n -0001412475 00000 n -0001412538 00000 n -0001412601 00000 n -0001412664 00000 n -0001412287 00000 n -0001452437 00000 n -0001413494 00000 n -0001412889 00000 n -0001452185 00000 n -0001452248 00000 n -0001452311 00000 n -0001452374 00000 n -0001451997 00000 n -0001476063 00000 n -0001453190 00000 n -0001452599 00000 n -0001475810 00000 n -0001475873 00000 n -0001475936 00000 n -0001475999 00000 n -0002188837 00000 n -0001475624 00000 n -0001501188 00000 n -0001476817 00000 n -0001476225 00000 n -0001500935 00000 n -0001500998 00000 n -0001501061 00000 n -0001501124 00000 n -0001500747 00000 n -0001526580 00000 n -0001501945 00000 n -0001501350 00000 n -0001526328 00000 n -0001526391 00000 n -0001526454 00000 n -0001526517 00000 n -0001526140 00000 n -0001527694 00000 n -0001527319 00000 n -0001526742 00000 n -0001527442 00000 n -0001527505 00000 n -0001527568 00000 n -0001527631 00000 n -0001624535 00000 n -0001528431 00000 n -0001527855 00000 n -0001624281 00000 n -0001624344 00000 n -0001624407 00000 n -0001624470 00000 n -0001624093 00000 n -0001627185 00000 n -0001626622 00000 n -0001624697 00000 n -0001626745 00000 n -0001626997 00000 n -0001627122 00000 n -0001631075 00000 n -0001630133 00000 n -0001627315 00000 n -0001630256 00000 n -0001630382 00000 n -0001630508 00000 n -0001630633 00000 n -0001630696 00000 n -0001630759 00000 n -0001630886 00000 n -0001631012 00000 n -0002188962 00000 n -0001635385 00000 n -0001633966 00000 n -0001631219 00000 n -0001634692 00000 n -0001634818 00000 n -0001634944 00000 n -0001635070 00000 n -0001634128 00000 n -0001634334 00000 n -0001635196 00000 n -0001634514 00000 n -0001635322 00000 n -0001639156 00000 n -0001638470 00000 n -0001635501 00000 n -0001638593 00000 n -0001638841 00000 n -0001638967 00000 n -0001639093 00000 n -0001643382 00000 n -0001642818 00000 n -0001639272 00000 n -0001642941 00000 n -0001643067 00000 n -0001643193 00000 n -0001643319 00000 n -0001647802 00000 n -0001647239 00000 n -0001643512 00000 n -0001647362 00000 n -0001647488 00000 n -0001647614 00000 n -0001647740 00000 n -0001652488 00000 n -0001651599 00000 n -0001647918 00000 n -0001651922 00000 n -0001652048 00000 n -0001652174 00000 n -0001652300 00000 n -0001651743 00000 n -0001652426 00000 n -0001657219 00000 n -0001656472 00000 n -0001652604 00000 n -0001656782 00000 n -0001656908 00000 n -0001656616 00000 n -0001657034 00000 n -0001657158 00000 n -0002189087 00000 n -0001660169 00000 n -0001659731 00000 n -0001657377 00000 n -0001659854 00000 n -0001659980 00000 n -0001660106 00000 n -0001664587 00000 n -0001663271 00000 n -0001660299 00000 n -0001664147 00000 n -0001663433 00000 n -0001663672 00000 n -0001663911 00000 n -0001664273 00000 n -0001664399 00000 n -0001664524 00000 n -0001667519 00000 n -0001667081 00000 n -0001664703 00000 n -0001667204 00000 n -0001667330 00000 n -0001667393 00000 n -0001667456 00000 n -0001668828 00000 n -0001668642 00000 n -0001667635 00000 n -0001668765 00000 n -0001670833 00000 n -0001670340 00000 n -0001668930 00000 n -0001670644 00000 n -0001670707 00000 n -0001670770 00000 n -0001670484 00000 n -0001984262 00000 n -0001674244 00000 n -0001673680 00000 n -0001670949 00000 n -0001673803 00000 n -0001673866 00000 n -0001673929 00000 n -0001674055 00000 n -0001674118 00000 n -0001674181 00000 n -0002189212 00000 n -0001676961 00000 n -0001676649 00000 n -0001674360 00000 n -0001676772 00000 n -0001676835 00000 n -0001676898 00000 n -0001678146 00000 n -0001677960 00000 n -0001677091 00000 n -0001678083 00000 n -0001681064 00000 n -0001680628 00000 n -0001678248 00000 n -0001680751 00000 n -0001680876 00000 n -0001681001 00000 n -0001685673 00000 n -0001684010 00000 n -0001681194 00000 n -0001684981 00000 n -0001685233 00000 n -0001685359 00000 n -0001684181 00000 n -0001684379 00000 n -0001684578 00000 n -0001684780 00000 n -0001685484 00000 n -0001685610 00000 n -0001690183 00000 n -0001689423 00000 n -0001685789 00000 n -0001690120 00000 n -0001689585 00000 n -0001689759 00000 n -0001689933 00000 n -0001693660 00000 n -0001693158 00000 n -0001690299 00000 n -0001693471 00000 n -0001693597 00000 n -0001693302 00000 n -0002189337 00000 n -0001695178 00000 n -0001694992 00000 n -0001693790 00000 n -0001695115 00000 n -0001698024 00000 n -0001696760 00000 n -0001695280 00000 n -0001697710 00000 n -0001696931 00000 n -0001697122 00000 n -0001697291 00000 n -0001697836 00000 n -0001697500 00000 n -0001697962 00000 n -0001702121 00000 n -0001701559 00000 n -0001698140 00000 n -0001701682 00000 n -0001701934 00000 n -0001702059 00000 n -0001707320 00000 n -0001706629 00000 n -0001702265 00000 n -0001707005 00000 n -0001706773 00000 n -0001707131 00000 n -0001707257 00000 n -0001712064 00000 n -0001711501 00000 n -0001707478 00000 n -0001711624 00000 n -0001711750 00000 n -0001711876 00000 n -0001712002 00000 n -0001716727 00000 n -0001716163 00000 n -0001712208 00000 n -0001716286 00000 n -0001716349 00000 n -0001716412 00000 n -0001716475 00000 n -0001716538 00000 n -0001716664 00000 n -0002189462 00000 n -0001721315 00000 n -0001720248 00000 n -0001716914 00000 n -0001720371 00000 n -0001720497 00000 n -0001720623 00000 n -0001720749 00000 n -0001720875 00000 n -0001720937 00000 n -0001721000 00000 n -0001721063 00000 n -0001721126 00000 n -0001721189 00000 n -0001721252 00000 n -0001724137 00000 n -0001723515 00000 n -0001721431 00000 n -0001723638 00000 n -0001723701 00000 n -0001723764 00000 n -0001723827 00000 n -0001723952 00000 n -0001724074 00000 n -0001727533 00000 n -0001726717 00000 n -0001724267 00000 n -0001726840 00000 n -0001727092 00000 n -0001727218 00000 n -0001727344 00000 n -0001727470 00000 n -0001731197 00000 n -0001730633 00000 n -0001727692 00000 n -0001730756 00000 n -0001730882 00000 n -0001731008 00000 n -0001731134 00000 n -0001735156 00000 n -0001734656 00000 n -0001731398 00000 n -0001734779 00000 n -0001734905 00000 n -0001735031 00000 n -0001735094 00000 n -0001740227 00000 n -0001739664 00000 n -0001735357 00000 n -0001739787 00000 n -0001739850 00000 n -0001739913 00000 n -0001739976 00000 n -0001740039 00000 n -0001740102 00000 n -0001740164 00000 n -0002189587 00000 n -0001745201 00000 n -0001744133 00000 n -0001740385 00000 n -0001744256 00000 n -0001744382 00000 n -0001744508 00000 n -0001744571 00000 n -0001744634 00000 n -0001744697 00000 n -0001744760 00000 n -0001744823 00000 n -0001744886 00000 n -0001744949 00000 n -0001745012 00000 n -0001745075 00000 n -0001745138 00000 n -0001746258 00000 n -0001746072 00000 n -0001745416 00000 n -0001746195 00000 n -0001750739 00000 n -0001749345 00000 n -0001746403 00000 n -0001749468 00000 n -0001749531 00000 n -0001749595 00000 n -0001749658 00000 n -0001749722 00000 n -0001749786 00000 n -0001749850 00000 n -0001749914 00000 n -0001749978 00000 n -0001750042 00000 n -0001750105 00000 n -0001750169 00000 n -0001750233 00000 n -0001750295 00000 n -0001750359 00000 n -0001750423 00000 n -0001750486 00000 n -0001750550 00000 n -0001750677 00000 n -0001755261 00000 n -0001754257 00000 n -0001750926 00000 n -0001754380 00000 n -0001754506 00000 n -0001754631 00000 n -0001754694 00000 n -0001754757 00000 n -0001754820 00000 n -0001754883 00000 n -0001754946 00000 n -0001755009 00000 n -0001755072 00000 n -0001755198 00000 n -0001759471 00000 n -0001758781 00000 n -0001755448 00000 n -0001758904 00000 n -0001759030 00000 n -0001759156 00000 n -0001759282 00000 n -0001759408 00000 n -0001763932 00000 n -0001763243 00000 n -0001759672 00000 n -0001763366 00000 n -0001763492 00000 n -0001763618 00000 n -0001763744 00000 n -0001763870 00000 n -0002189712 00000 n -0001768634 00000 n -0001768196 00000 n -0001764147 00000 n -0001768319 00000 n -0001768382 00000 n -0001768445 00000 n -0001768508 00000 n -0001768571 00000 n -0001772467 00000 n -0001771905 00000 n -0001768764 00000 n -0001772028 00000 n -0001772091 00000 n -0001772154 00000 n -0001772214 00000 n -0001772277 00000 n -0001772404 00000 n -0001776630 00000 n -0001776444 00000 n -0001772668 00000 n -0001776567 00000 n -0001780917 00000 n -0001780356 00000 n -0001776803 00000 n -0001780479 00000 n -0001780542 00000 n -0001780605 00000 n -0001780728 00000 n -0001780854 00000 n -0001784925 00000 n -0001784488 00000 n -0001781075 00000 n -0001784611 00000 n -0001784737 00000 n -0001784862 00000 n -0001786877 00000 n -0001786691 00000 n -0001785027 00000 n -0001786814 00000 n -0002189837 00000 n -0001790827 00000 n -0001790217 00000 n -0001787050 00000 n -0001790512 00000 n -0001790361 00000 n -0001790764 00000 n -0001795163 00000 n -0001794726 00000 n -0001791000 00000 n -0001794849 00000 n -0001794974 00000 n -0001795100 00000 n -0001799485 00000 n -0001798963 00000 n -0001795293 00000 n -0001799296 00000 n -0001799422 00000 n -0001799107 00000 n -0001804411 00000 n -0001804225 00000 n -0001799629 00000 n -0001804348 00000 n -0001809086 00000 n -0001808900 00000 n -0001804541 00000 n -0001809023 00000 n -0001812131 00000 n -0001811570 00000 n -0001809230 00000 n -0001811693 00000 n -0001811818 00000 n -0001811943 00000 n -0001812069 00000 n -0002189962 00000 n -0001814824 00000 n -0001814638 00000 n -0001812261 00000 n -0001814761 00000 n -0001819489 00000 n -0001818647 00000 n -0001814940 00000 n -0001819174 00000 n -0001819300 00000 n -0001818800 00000 n -0001818988 00000 n -0001819426 00000 n -0001823943 00000 n -0001823504 00000 n -0001819676 00000 n -0001823627 00000 n -0001823753 00000 n -0001823816 00000 n -0001823879 00000 n -0001827506 00000 n -0001826510 00000 n -0001824130 00000 n -0001827192 00000 n -0001826672 00000 n -0001826848 00000 n -0001827019 00000 n -0001827318 00000 n -0001827443 00000 n -0001830026 00000 n -0001829337 00000 n -0001827622 00000 n -0001829460 00000 n -0001829586 00000 n -0001829712 00000 n -0001829838 00000 n -0001829963 00000 n -0001831589 00000 n -0001831403 00000 n -0001830142 00000 n -0001831526 00000 n -0002190087 00000 n -0001834742 00000 n -0001834180 00000 n -0001831691 00000 n -0001834303 00000 n -0001834554 00000 n -0001834679 00000 n -0001838689 00000 n -0001838251 00000 n -0001834887 00000 n -0001838374 00000 n -0001838500 00000 n -0001838626 00000 n -0001841567 00000 n -0001841006 00000 n -0001838819 00000 n -0001841129 00000 n -0001841255 00000 n -0001841380 00000 n -0001841504 00000 n -0001845347 00000 n -0001845035 00000 n -0001841697 00000 n -0001845158 00000 n -0001845284 00000 n -0001849640 00000 n -0001849203 00000 n -0001845463 00000 n -0001849326 00000 n -0001849451 00000 n -0001849577 00000 n -0001851811 00000 n -0001851625 00000 n -0001849798 00000 n -0001851748 00000 n -0002190212 00000 n -0001855183 00000 n -0001854622 00000 n -0001851913 00000 n -0001854745 00000 n -0001854871 00000 n -0001854995 00000 n -0001855121 00000 n -0001858781 00000 n -0001858091 00000 n -0001855313 00000 n -0001858214 00000 n -0001858340 00000 n -0001858466 00000 n -0001858592 00000 n -0001858718 00000 n -0001860105 00000 n -0001859919 00000 n -0001858911 00000 n -0001860042 00000 n -0001864379 00000 n -0001863498 00000 n -0001860207 00000 n -0001863814 00000 n -0001864066 00000 n -0001864192 00000 n -0001863642 00000 n -0001864318 00000 n -0001867890 00000 n -0001867005 00000 n -0001864509 00000 n -0001867576 00000 n -0001867702 00000 n -0001867827 00000 n -0001867158 00000 n -0001867367 00000 n -0001869560 00000 n -0001868996 00000 n -0001868034 00000 n -0001869119 00000 n -0001869371 00000 n -0001869497 00000 n -0002190337 00000 n -0001870577 00000 n -0001870139 00000 n -0001869648 00000 n -0001870262 00000 n -0001870514 00000 n -0001871237 00000 n -0001870989 00000 n -0001870665 00000 n -0001871112 00000 n -0001873990 00000 n -0001873067 00000 n -0001871325 00000 n -0001873361 00000 n -0001873424 00000 n -0001873676 00000 n -0001873211 00000 n -0001873802 00000 n -0001873928 00000 n -0001877513 00000 n -0001876949 00000 n -0001874092 00000 n -0001877072 00000 n -0001877324 00000 n -0001877450 00000 n -0001881751 00000 n -0001881314 00000 n -0001877615 00000 n -0001881437 00000 n -0001881563 00000 n -0001881689 00000 n -0001886177 00000 n -0001885613 00000 n -0001881853 00000 n -0001885736 00000 n -0001885862 00000 n -0001885988 00000 n -0001886114 00000 n -0002190462 00000 n -0001891556 00000 n -0001889669 00000 n -0001886321 00000 n -0001889792 00000 n -0001889918 00000 n -0001889981 00000 n -0001890044 00000 n -0001890107 00000 n -0001890170 00000 n -0001890233 00000 n -0001890296 00000 n -0001890359 00000 n -0001890422 00000 n -0001890485 00000 n -0001890547 00000 n -0001890610 00000 n -0001890673 00000 n -0001890736 00000 n -0001890799 00000 n -0001890862 00000 n -0001890925 00000 n -0001890988 00000 n -0001891051 00000 n -0001891114 00000 n -0001891240 00000 n -0001891303 00000 n -0001891366 00000 n -0001891493 00000 n -0001894802 00000 n -0001894363 00000 n -0001891714 00000 n -0001894486 00000 n -0001894549 00000 n -0001894612 00000 n -0001894739 00000 n -0001896263 00000 n -0001896077 00000 n -0001894946 00000 n -0001896200 00000 n -0001899628 00000 n -0001899065 00000 n -0001896365 00000 n -0001899188 00000 n -0001899439 00000 n -0001899565 00000 n -0001903381 00000 n -0001902630 00000 n -0001899801 00000 n -0001902940 00000 n -0001903066 00000 n -0001903129 00000 n -0001903192 00000 n -0001903255 00000 n -0001903318 00000 n -0001902774 00000 n -0001907752 00000 n -0001906995 00000 n -0001903525 00000 n -0001907311 00000 n -0001907437 00000 n -0001907139 00000 n -0001907563 00000 n -0001907689 00000 n -0002190587 00000 n -0001912227 00000 n -0001911411 00000 n -0001907995 00000 n -0001911534 00000 n -0001911660 00000 n -0001911786 00000 n -0001911912 00000 n -0001912038 00000 n +0001289931 00000 n +0001289994 00000 n +0001290057 00000 n +0001290120 00000 n +0001290183 00000 n +0001290246 00000 n +0001290309 00000 n +0001473858 00000 n +0001294196 00000 n +0001293884 00000 n +0001290516 00000 n +0001294007 00000 n +0001294133 00000 n +0001331906 00000 n +0001294891 00000 n +0001294340 00000 n +0001331654 00000 n +0001331717 00000 n +0001331780 00000 n +0001331843 00000 n +0001331466 00000 n +0001358288 00000 n +0001332622 00000 n +0001332068 00000 n +0001358036 00000 n +0001358099 00000 n +0001358162 00000 n +0001358225 00000 n +0001357848 00000 n +0001397952 00000 n +0001359009 00000 n +0001358450 00000 n +0001397700 00000 n +0001397763 00000 n +0001397826 00000 n +0001397889 00000 n +0001397512 00000 n +0001421538 00000 n +0001398665 00000 n +0001398114 00000 n +0001421285 00000 n +0001421348 00000 n +0001421411 00000 n +0001421474 00000 n +0002118190 00000 n +0001421099 00000 n +0001446620 00000 n +0001422249 00000 n +0001421700 00000 n +0001446367 00000 n +0001446430 00000 n +0001446493 00000 n +0001446556 00000 n +0001446179 00000 n +0001471968 00000 n +0001447333 00000 n +0001446782 00000 n +0001471716 00000 n +0001471779 00000 n +0001471842 00000 n +0001471905 00000 n +0001471528 00000 n +0001473042 00000 n +0001472667 00000 n +0001472130 00000 n +0001472790 00000 n +0001472853 00000 n +0001472916 00000 n +0001472979 00000 n +0001569839 00000 n +0001473735 00000 n +0001473203 00000 n +0001569585 00000 n +0001569648 00000 n +0001569711 00000 n +0001569774 00000 n +0001569397 00000 n +0001572431 00000 n +0001571868 00000 n +0001570001 00000 n +0001571991 00000 n +0001572243 00000 n +0001572368 00000 n +0001575886 00000 n +0001574944 00000 n +0001572561 00000 n +0001575067 00000 n +0001575193 00000 n +0001575319 00000 n +0001575444 00000 n +0001575507 00000 n +0001575570 00000 n +0001575697 00000 n +0001575823 00000 n +0002118315 00000 n +0001580007 00000 n +0001578588 00000 n +0001576030 00000 n +0001579314 00000 n +0001579440 00000 n +0001579566 00000 n +0001579692 00000 n +0001578750 00000 n +0001578956 00000 n +0001579818 00000 n +0001579136 00000 n +0001579944 00000 n +0001583655 00000 n +0001582969 00000 n +0001580123 00000 n +0001583092 00000 n +0001583340 00000 n +0001583466 00000 n +0001583592 00000 n +0001587840 00000 n +0001587276 00000 n +0001583771 00000 n +0001587399 00000 n +0001587525 00000 n +0001587651 00000 n +0001587777 00000 n +0001592161 00000 n +0001591598 00000 n +0001587970 00000 n +0001591721 00000 n +0001591847 00000 n +0001591973 00000 n +0001592099 00000 n +0001596759 00000 n +0001595870 00000 n +0001592277 00000 n +0001596193 00000 n +0001596319 00000 n +0001596445 00000 n +0001596571 00000 n +0001596014 00000 n +0001596697 00000 n +0001601409 00000 n +0001600662 00000 n +0001596875 00000 n +0001600972 00000 n +0001601098 00000 n +0001600806 00000 n +0001601224 00000 n +0001601348 00000 n +0002118440 00000 n +0001604269 00000 n +0001603831 00000 n +0001601567 00000 n +0001603954 00000 n +0001604080 00000 n +0001604206 00000 n +0001608595 00000 n +0001607279 00000 n +0001604399 00000 n +0001608155 00000 n +0001607441 00000 n +0001607680 00000 n +0001607919 00000 n +0001608281 00000 n +0001608407 00000 n +0001608532 00000 n +0001611493 00000 n +0001611055 00000 n +0001608711 00000 n +0001611178 00000 n +0001611304 00000 n +0001611367 00000 n +0001611430 00000 n +0001612794 00000 n +0001612608 00000 n +0001611609 00000 n +0001612731 00000 n +0001614753 00000 n +0001614260 00000 n +0001612896 00000 n +0001614564 00000 n +0001614627 00000 n +0001614690 00000 n +0001614404 00000 n +0001915002 00000 n +0001618082 00000 n +0001617518 00000 n +0001614869 00000 n +0001617641 00000 n +0001617704 00000 n +0001617767 00000 n +0001617893 00000 n +0001617956 00000 n +0001618019 00000 n +0002118565 00000 n +0001620756 00000 n +0001620444 00000 n +0001618198 00000 n +0001620567 00000 n +0001620630 00000 n +0001620693 00000 n +0001621933 00000 n +0001621747 00000 n +0001620886 00000 n +0001621870 00000 n +0001624739 00000 n +0001624303 00000 n +0001622035 00000 n +0001624426 00000 n +0001624551 00000 n +0001624676 00000 n +0001629183 00000 n +0001627520 00000 n +0001624869 00000 n +0001628491 00000 n +0001628743 00000 n +0001628869 00000 n +0001627691 00000 n +0001627889 00000 n +0001628088 00000 n +0001628290 00000 n +0001628994 00000 n +0001629120 00000 n +0001633621 00000 n +0001632861 00000 n +0001629299 00000 n +0001633558 00000 n +0001633023 00000 n +0001633197 00000 n +0001633371 00000 n +0001636891 00000 n +0001636389 00000 n +0001633737 00000 n +0001636702 00000 n +0001636828 00000 n +0001636533 00000 n +0002118690 00000 n +0001638400 00000 n +0001638214 00000 n +0001637021 00000 n +0001638337 00000 n +0001641143 00000 n +0001639879 00000 n +0001638502 00000 n +0001640829 00000 n +0001640050 00000 n +0001640241 00000 n +0001640410 00000 n +0001640955 00000 n +0001640619 00000 n +0001641081 00000 n +0001645187 00000 n +0001644625 00000 n +0001641259 00000 n +0001644748 00000 n +0001645000 00000 n +0001645125 00000 n +0001650332 00000 n +0001649641 00000 n +0001645331 00000 n +0001650017 00000 n +0001649785 00000 n +0001650143 00000 n +0001650269 00000 n +0001655028 00000 n +0001654465 00000 n +0001650490 00000 n +0001654588 00000 n +0001654714 00000 n +0001654840 00000 n +0001654966 00000 n +0001659548 00000 n +0001658984 00000 n +0001655172 00000 n +0001659107 00000 n +0001659170 00000 n +0001659233 00000 n +0001659296 00000 n +0001659359 00000 n +0001659485 00000 n +0002118815 00000 n +0001663813 00000 n +0001662746 00000 n +0001659735 00000 n +0001662869 00000 n +0001662995 00000 n +0001663121 00000 n +0001663247 00000 n +0001663373 00000 n +0001663435 00000 n +0001663498 00000 n +0001663561 00000 n +0001663624 00000 n +0001663687 00000 n +0001663750 00000 n +0001666532 00000 n +0001665910 00000 n +0001663929 00000 n +0001666033 00000 n +0001666096 00000 n +0001666159 00000 n +0001666222 00000 n +0001666347 00000 n +0001666469 00000 n +0001669838 00000 n +0001669022 00000 n +0001666662 00000 n +0001669145 00000 n +0001669397 00000 n +0001669523 00000 n +0001669649 00000 n +0001669775 00000 n +0001673397 00000 n +0001672833 00000 n +0001669997 00000 n +0001672956 00000 n +0001673082 00000 n +0001673208 00000 n +0001673334 00000 n +0001677231 00000 n +0001676731 00000 n +0001673598 00000 n +0001676854 00000 n +0001676980 00000 n +0001677106 00000 n +0001677169 00000 n +0001682160 00000 n +0001681597 00000 n +0001677432 00000 n +0001681720 00000 n +0001681783 00000 n +0001681846 00000 n +0001681909 00000 n +0001681972 00000 n +0001682035 00000 n +0001682097 00000 n +0002118940 00000 n +0001686847 00000 n +0001685779 00000 n +0001682318 00000 n +0001685902 00000 n +0001686028 00000 n +0001686154 00000 n +0001686217 00000 n +0001686280 00000 n +0001686343 00000 n +0001686406 00000 n +0001686469 00000 n +0001686532 00000 n +0001686595 00000 n +0001686658 00000 n +0001686721 00000 n +0001686784 00000 n +0001687869 00000 n +0001687683 00000 n +0001687062 00000 n +0001687806 00000 n +0001691932 00000 n +0001690538 00000 n +0001688014 00000 n +0001690661 00000 n +0001690724 00000 n +0001690788 00000 n +0001690851 00000 n +0001690915 00000 n +0001690979 00000 n +0001691043 00000 n +0001691107 00000 n +0001691171 00000 n +0001691235 00000 n +0001691298 00000 n +0001691362 00000 n +0001691426 00000 n +0001691488 00000 n +0001691552 00000 n +0001691616 00000 n +0001691679 00000 n +0001691743 00000 n +0001691870 00000 n +0001696234 00000 n +0001695230 00000 n +0001692119 00000 n +0001695353 00000 n +0001695479 00000 n +0001695604 00000 n +0001695667 00000 n +0001695730 00000 n +0001695793 00000 n +0001695856 00000 n +0001695919 00000 n +0001695982 00000 n +0001696045 00000 n +0001696171 00000 n +0001700343 00000 n +0001699653 00000 n +0001696421 00000 n +0001699776 00000 n +0001699902 00000 n +0001700028 00000 n +0001700154 00000 n +0001700280 00000 n +0001704675 00000 n +0001703986 00000 n +0001700544 00000 n +0001704109 00000 n +0001704235 00000 n +0001704361 00000 n +0001704487 00000 n +0001704613 00000 n +0002119065 00000 n +0001709188 00000 n +0001708750 00000 n +0001704890 00000 n +0001708873 00000 n +0001708936 00000 n +0001708999 00000 n +0001709062 00000 n +0001709125 00000 n +0001712467 00000 n +0001711905 00000 n +0001709318 00000 n +0001712028 00000 n +0001712091 00000 n +0001712154 00000 n +0001712214 00000 n +0001712277 00000 n +0001712404 00000 n +0001716480 00000 n +0001716294 00000 n +0001712668 00000 n +0001716417 00000 n +0001720163 00000 n +0001719602 00000 n +0001716653 00000 n +0001719725 00000 n +0001719788 00000 n +0001719851 00000 n +0001719974 00000 n +0001720100 00000 n +0001723991 00000 n +0001723554 00000 n +0001720321 00000 n +0001723677 00000 n +0001723803 00000 n +0001723928 00000 n +0001725911 00000 n +0001725725 00000 n +0001724093 00000 n +0001725848 00000 n +0002119190 00000 n +0001729682 00000 n +0001729072 00000 n +0001726084 00000 n +0001729367 00000 n +0001729216 00000 n +0001729619 00000 n +0001733751 00000 n +0001733314 00000 n +0001729855 00000 n +0001733437 00000 n +0001733562 00000 n +0001733688 00000 n +0001737913 00000 n +0001737391 00000 n +0001733881 00000 n +0001737724 00000 n +0001737850 00000 n +0001737535 00000 n +0001742360 00000 n +0001742174 00000 n +0001738057 00000 n +0001742297 00000 n +0001746661 00000 n +0001746475 00000 n +0001742490 00000 n +0001746598 00000 n +0001749646 00000 n +0001749085 00000 n +0001746805 00000 n +0001749208 00000 n +0001749333 00000 n +0001749458 00000 n +0001749584 00000 n +0002119315 00000 n +0001752223 00000 n +0001752037 00000 n +0001749776 00000 n +0001752160 00000 n +0001756737 00000 n +0001755895 00000 n +0001752339 00000 n +0001756422 00000 n +0001756548 00000 n +0001756048 00000 n +0001756236 00000 n +0001756674 00000 n +0001760711 00000 n +0001760272 00000 n +0001756924 00000 n +0001760395 00000 n +0001760521 00000 n +0001760584 00000 n +0001760647 00000 n +0001764123 00000 n +0001763127 00000 n +0001760898 00000 n +0001763809 00000 n +0001763289 00000 n +0001763465 00000 n +0001763636 00000 n +0001763935 00000 n +0001764060 00000 n +0001766556 00000 n +0001765867 00000 n +0001764239 00000 n +0001765990 00000 n +0001766116 00000 n +0001766242 00000 n +0001766368 00000 n +0001766493 00000 n +0001768085 00000 n +0001767899 00000 n +0001766672 00000 n +0001768022 00000 n +0002119440 00000 n +0001771131 00000 n +0001770569 00000 n +0001768187 00000 n +0001770692 00000 n +0001770943 00000 n +0001771068 00000 n +0001774965 00000 n +0001774527 00000 n +0001771276 00000 n +0001774650 00000 n +0001774776 00000 n +0001774902 00000 n +0001777710 00000 n +0001777149 00000 n +0001775095 00000 n +0001777272 00000 n +0001777398 00000 n +0001777523 00000 n +0001777647 00000 n +0001781465 00000 n +0001781153 00000 n +0001777840 00000 n +0001781276 00000 n +0001781402 00000 n +0001785720 00000 n +0001785283 00000 n +0001781581 00000 n +0001785406 00000 n +0001785531 00000 n +0001785657 00000 n +0001787884 00000 n +0001787698 00000 n +0001785878 00000 n +0001787821 00000 n +0002119565 00000 n +0001791196 00000 n +0001790635 00000 n +0001787986 00000 n +0001790758 00000 n +0001790884 00000 n +0001791008 00000 n +0001791134 00000 n +0001794522 00000 n +0001793832 00000 n +0001791326 00000 n +0001793955 00000 n +0001794081 00000 n +0001794207 00000 n +0001794333 00000 n +0001794459 00000 n +0001795842 00000 n +0001795656 00000 n +0001794652 00000 n +0001795779 00000 n +0001800013 00000 n +0001799132 00000 n +0001795944 00000 n +0001799448 00000 n +0001799700 00000 n +0001799826 00000 n +0001799276 00000 n +0001799952 00000 n +0001803338 00000 n +0001802453 00000 n +0001800143 00000 n +0001803024 00000 n +0001803150 00000 n +0001803275 00000 n +0001802606 00000 n +0001802815 00000 n +0001804965 00000 n +0001804401 00000 n +0001803482 00000 n +0001804524 00000 n +0001804776 00000 n +0001804902 00000 n +0002119690 00000 n +0001805959 00000 n +0001805521 00000 n +0001805053 00000 n +0001805644 00000 n +0001805896 00000 n +0001806604 00000 n +0001806356 00000 n +0001806047 00000 n +0001806479 00000 n +0001809199 00000 n +0001808276 00000 n +0001806692 00000 n +0001808570 00000 n +0001808633 00000 n +0001808885 00000 n +0001808420 00000 n +0001809011 00000 n +0001809137 00000 n +0001812524 00000 n +0001811960 00000 n +0001809301 00000 n +0001812083 00000 n +0001812335 00000 n +0001812461 00000 n +0001816600 00000 n +0001816163 00000 n +0001812626 00000 n +0001816286 00000 n +0001816412 00000 n +0001816538 00000 n +0001820969 00000 n +0001820405 00000 n +0001816702 00000 n +0001820528 00000 n +0001820654 00000 n +0001820780 00000 n +0001820906 00000 n +0002119815 00000 n +0001825656 00000 n +0001823769 00000 n +0001821113 00000 n +0001823892 00000 n +0001824018 00000 n +0001824081 00000 n +0001824144 00000 n +0001824207 00000 n +0001824270 00000 n +0001824333 00000 n +0001824396 00000 n +0001824459 00000 n +0001824522 00000 n +0001824585 00000 n +0001824647 00000 n +0001824710 00000 n +0001824773 00000 n +0001824836 00000 n +0001824899 00000 n +0001824962 00000 n +0001825025 00000 n +0001825088 00000 n +0001825151 00000 n +0001825214 00000 n +0001825340 00000 n +0001825403 00000 n +0001825466 00000 n +0001825593 00000 n +0001828537 00000 n +0001828098 00000 n +0001825814 00000 n +0001828221 00000 n +0001828284 00000 n +0001828347 00000 n +0001828474 00000 n +0001829988 00000 n +0001829802 00000 n +0001828681 00000 n +0001829925 00000 n +0001833277 00000 n +0001832714 00000 n +0001830090 00000 n +0001832837 00000 n +0001833088 00000 n +0001833214 00000 n +0001836915 00000 n +0001836164 00000 n +0001833450 00000 n +0001836474 00000 n +0001836600 00000 n +0001836663 00000 n +0001836726 00000 n +0001836789 00000 n +0001836852 00000 n +0001836308 00000 n +0001841101 00000 n +0001840344 00000 n +0001837059 00000 n +0001840660 00000 n +0001840786 00000 n +0001840488 00000 n +0001840912 00000 n +0001841038 00000 n +0002119940 00000 n +0001845472 00000 n +0001844656 00000 n +0001841344 00000 n +0001844779 00000 n +0001844905 00000 n +0001845031 00000 n +0001845157 00000 n +0001845283 00000 n +0001845409 00000 n +0001846151 00000 n +0001845903 00000 n +0001845602 00000 n +0001846026 00000 n +0001849310 00000 n +0001848683 00000 n +0001846239 00000 n +0001848806 00000 n +0001848869 00000 n +0001849121 00000 n +0001849247 00000 n +0001853371 00000 n +0001852870 00000 n +0001849483 00000 n +0001852993 00000 n +0001853119 00000 n +0001853182 00000 n +0001853245 00000 n +0001853308 00000 n +0001857415 00000 n +0001857103 00000 n +0001853558 00000 n +0001857226 00000 n +0001857289 00000 n +0001857352 00000 n +0001862365 00000 n +0001861426 00000 n +0001857616 00000 n +0001861549 00000 n +0001861612 00000 n +0001861675 00000 n +0001861738 00000 n +0001861800 00000 n +0001861863 00000 n +0001861926 00000 n +0001861989 00000 n +0001862052 00000 n +0001862115 00000 n +0001862178 00000 n +0001862241 00000 n +0001862303 00000 n +0002120065 00000 n +0001866664 00000 n +0001865993 00000 n +0001862580 00000 n +0001866287 00000 n +0001866350 00000 n +0001866413 00000 n +0001866475 00000 n +0001866601 00000 n +0001866137 00000 n +0001870656 00000 n +0001869727 00000 n +0001866822 00000 n +0001870217 00000 n +0001870469 00000 n +0001869880 00000 n +0001870048 00000 n +0001870594 00000 n +0001875712 00000 n +0001874308 00000 n +0001870758 00000 n +0001875398 00000 n +0001875524 00000 n +0001874488 00000 n +0001874679 00000 n +0001874870 00000 n +0001875649 00000 n +0001875060 00000 n +0001875225 00000 n +0001878975 00000 n +0001878264 00000 n +0001875856 00000 n +0001878786 00000 n +0001878912 00000 n +0001878417 00000 n +0001878588 00000 n +0001883226 00000 n +0001881997 00000 n +0001879119 00000 n +0001882659 00000 n +0001882911 00000 n +0001882159 00000 n +0001882335 00000 n +0001883037 00000 n +0001882506 00000 n +0001883163 00000 n +0001887299 00000 n +0001886736 00000 n +0001883328 00000 n +0001886859 00000 n +0001886984 00000 n +0001887110 00000 n +0001887236 00000 n +0002120190 00000 n +0001887968 00000 n +0001887720 00000 n +0001887429 00000 n +0001887843 00000 n +0001893244 00000 n +0001890940 00000 n +0001888056 00000 n +0001892175 00000 n +0001892238 00000 n +0001891129 00000 n +0001892490 00000 n +0001892616 00000 n +0001891295 00000 n +0001891474 00000 n +0001892742 00000 n +0001892868 00000 n +0001891654 00000 n +0001892994 00000 n +0001891833 00000 n +0001892004 00000 n +0001893057 00000 n +0001893120 00000 n +0001893182 00000 n +0001897828 00000 n +0001896364 00000 n +0001893360 00000 n +0001897262 00000 n +0001897325 00000 n +0001897388 00000 n +0001897514 00000 n +0001896535 00000 n +0001896720 00000 n +0001896907 00000 n +0001897095 00000 n +0001897640 00000 n +0001897766 00000 n +0001900739 00000 n +0001900175 00000 n +0001897944 00000 n +0001900298 00000 n +0001900424 00000 n +0001900550 00000 n +0001900676 00000 n +0001903832 00000 n +0001903394 00000 n +0001900869 00000 n +0001903517 00000 n +0001903643 00000 n +0001903769 00000 n +0001906493 00000 n +0001906056 00000 n +0001904005 00000 n +0001906179 00000 n +0001906304 00000 n +0001906430 00000 n +0002120315 00000 n +0001910415 00000 n +0001909537 00000 n +0001906694 00000 n +0001909848 00000 n +0001910100 00000 n +0001910226 00000 n +0001909681 00000 n +0001910352 00000 n +0001912048 00000 n +0001911736 00000 n +0001910517 00000 n +0001911859 00000 n +0001911985 00000 n +0001915065 00000 n +0001914250 00000 n 0001912164 00000 n -0001912918 00000 n -0001912670 00000 n -0001912357 00000 n -0001912793 00000 n -0001916133 00000 n -0001915506 00000 n -0001913006 00000 n -0001915629 00000 n -0001915692 00000 n -0001915944 00000 n -0001916070 00000 n -0001920328 00000 n -0001919827 00000 n -0001916306 00000 n -0001919950 00000 n -0001920076 00000 n -0001920139 00000 n +0001914373 00000 n +0001914499 00000 n +0001914625 00000 n +0001914750 00000 n +0001914876 00000 n +0001920100 00000 n +0001918223 00000 n +0001915167 00000 n +0001919533 00000 n +0001919785 00000 n +0001918412 00000 n +0001918584 00000 n +0001918774 00000 n +0001918959 00000 n +0001919151 00000 n +0001919911 00000 n +0001920037 00000 n +0001919338 00000 n +0001925008 00000 n +0001923574 00000 n 0001920202 00000 n -0001920265 00000 n -0001924461 00000 n -0001924149 00000 n -0001920515 00000 n -0001924272 00000 n -0001924335 00000 n -0001924398 00000 n -0001929671 00000 n -0001928732 00000 n -0001924662 00000 n -0001928855 00000 n -0001928918 00000 n -0001928981 00000 n -0001929044 00000 n -0001929106 00000 n -0001929169 00000 n -0001929232 00000 n -0001929295 00000 n -0001929358 00000 n -0001929421 00000 n -0001929484 00000 n -0001929547 00000 n -0001929609 00000 n -0002190712 00000 n -0001934076 00000 n -0001933405 00000 n -0001929886 00000 n -0001933699 00000 n -0001933762 00000 n -0001933825 00000 n -0001933887 00000 n -0001934013 00000 n -0001933549 00000 n -0001938153 00000 n -0001937224 00000 n -0001934234 00000 n -0001937714 00000 n -0001937966 00000 n -0001937377 00000 n -0001937545 00000 n -0001938091 00000 n -0001943622 00000 n -0001942218 00000 n -0001938255 00000 n -0001943308 00000 n -0001943434 00000 n -0001942398 00000 n -0001942589 00000 n -0001942780 00000 n -0001943559 00000 n -0001942970 00000 n -0001943135 00000 n -0001947077 00000 n -0001946366 00000 n -0001943766 00000 n -0001946888 00000 n -0001947014 00000 n -0001946519 00000 n -0001946690 00000 n -0001951448 00000 n -0001950219 00000 n -0001947221 00000 n -0001950881 00000 n -0001951133 00000 n -0001950381 00000 n -0001950557 00000 n -0001951259 00000 n -0001950728 00000 n -0001951385 00000 n -0001955575 00000 n -0001955012 00000 n -0001951550 00000 n -0001955135 00000 n -0001955260 00000 n -0001955386 00000 n -0001955512 00000 n -0002190837 00000 n -0001956255 00000 n -0001956007 00000 n -0001955705 00000 n -0001956130 00000 n -0001961762 00000 n -0001959458 00000 n -0001956343 00000 n -0001960693 00000 n -0001960756 00000 n -0001959647 00000 n -0001961008 00000 n -0001961134 00000 n -0001959813 00000 n -0001959992 00000 n -0001961260 00000 n -0001961386 00000 n -0001960172 00000 n -0001961512 00000 n -0001960351 00000 n -0001960522 00000 n -0001961575 00000 n -0001961638 00000 n -0001961700 00000 n -0001966521 00000 n -0001965057 00000 n -0001961878 00000 n -0001965955 00000 n -0001966018 00000 n -0001966081 00000 n -0001966207 00000 n -0001965228 00000 n -0001965413 00000 n -0001965600 00000 n -0001965788 00000 n -0001966333 00000 n -0001966459 00000 n -0001969598 00000 n -0001969034 00000 n -0001966637 00000 n -0001969157 00000 n -0001969283 00000 n -0001969409 00000 n -0001969535 00000 n -0001972804 00000 n -0001972366 00000 n -0001969728 00000 n -0001972489 00000 n -0001972615 00000 n -0001972741 00000 n -0001975546 00000 n -0001975109 00000 n -0001972977 00000 n -0001975232 00000 n -0001975357 00000 n -0001975483 00000 n -0002190962 00000 n -0001979584 00000 n -0001978706 00000 n -0001975747 00000 n -0001979017 00000 n -0001979269 00000 n -0001979395 00000 n -0001978850 00000 n -0001979521 00000 n -0001981237 00000 n -0001980925 00000 n -0001979686 00000 n -0001981048 00000 n -0001981174 00000 n -0001984325 00000 n -0001983510 00000 n -0001981353 00000 n -0001983633 00000 n -0001983759 00000 n -0001983885 00000 n -0001984010 00000 n -0001984136 00000 n -0001989550 00000 n -0001987673 00000 n -0001984427 00000 n -0001988983 00000 n -0001989235 00000 n -0001987862 00000 n -0001988034 00000 n -0001988224 00000 n -0001988409 00000 n -0001988601 00000 n -0001989361 00000 n -0001989487 00000 n -0001988788 00000 n -0001994622 00000 n -0001993188 00000 n -0001989652 00000 n -0001993929 00000 n -0001994055 00000 n -0001993350 00000 n -0001993548 00000 n -0001993740 00000 n -0001994181 00000 n -0001994307 00000 n -0001994433 00000 n -0001994559 00000 n -0001999174 00000 n -0001998169 00000 n -0001994752 00000 n -0001998482 00000 n -0001998608 00000 n -0001998734 00000 n -0001998313 00000 n -0001998859 00000 n -0001998985 00000 n -0001999111 00000 n -0002191087 00000 n -0002003231 00000 n -0002002261 00000 n -0001999318 00000 n -0002002791 00000 n -0002002917 00000 n -0002003042 00000 n -0002002414 00000 n -0002003168 00000 n -0002002582 00000 n -0002007107 00000 n -0002006419 00000 n -0002003460 00000 n -0002006542 00000 n -0002006794 00000 n -0002006920 00000 n -0002007046 00000 n -0002010899 00000 n -0002010084 00000 n -0002007209 00000 n -0002010207 00000 n -0002010333 00000 n -0002010458 00000 n -0002010584 00000 n -0002010710 00000 n -0002010836 00000 n -0002014485 00000 n -0002013743 00000 n -0002011015 00000 n -0002014044 00000 n -0002014170 00000 n -0002013887 00000 n -0002014296 00000 n -0002014422 00000 n -0002015531 00000 n -0002015093 00000 n -0002014601 00000 n -0002015216 00000 n -0002015468 00000 n -0002024685 00000 n -0002018460 00000 n -0002015619 00000 n -0002024118 00000 n -0002024370 00000 n -0002018838 00000 n -0002019025 00000 n -0002019216 00000 n -0002019386 00000 n -0002019585 00000 n -0002019780 00000 n -0002019969 00000 n -0002020161 00000 n -0002020356 00000 n -0002020541 00000 n -0002020734 00000 n -0002020929 00000 n -0002021128 00000 n -0002021327 00000 n -0002021511 00000 n -0002021720 00000 n -0002021913 00000 n -0002022106 00000 n -0002022301 00000 n -0002022490 00000 n -0002022699 00000 n -0002022891 00000 n -0002023066 00000 n -0002023276 00000 n -0002024496 00000 n -0002023486 00000 n -0002023696 00000 n -0002023907 00000 n -0002024622 00000 n -0002191212 00000 n -0002024801 00000 n -0002028013 00000 n -0002028044 00000 n -0002031474 00000 n -0002031617 00000 n -0002036881 00000 n -0002037072 00000 n -0002040821 00000 n -0002047363 00000 n -0002059554 00000 n -0002059969 00000 n -0002070523 00000 n -0002070773 00000 n -0002091459 00000 n -0002101999 00000 n -0002104497 00000 n -0002104528 00000 n -0002108367 00000 n -0002124960 00000 n -0002125370 00000 n -0002143807 00000 n -0002163621 00000 n -0002167623 00000 n -0002182794 00000 n -0002191292 00000 n -0002191418 00000 n -0002191544 00000 n -0002191670 00000 n -0002191796 00000 n -0002191922 00000 n -0002192048 00000 n -0002192174 00000 n -0002192300 00000 n -0002192426 00000 n -0002192552 00000 n -0002192669 00000 n -0002192796 00000 n -0002192914 00000 n -0002192988 00000 n -0002263929 00000 n -0002312718 00000 n -0002312759 00000 n -0002312799 00000 n -0002313031 00000 n +0001924315 00000 n +0001924441 00000 n +0001923736 00000 n +0001923934 00000 n +0001924126 00000 n +0001924567 00000 n +0001924693 00000 n +0001924819 00000 n +0001924945 00000 n +0001929383 00000 n +0001928378 00000 n +0001925138 00000 n +0001928691 00000 n +0001928817 00000 n +0001928943 00000 n +0001928522 00000 n +0001929068 00000 n +0001929194 00000 n +0001929320 00000 n +0002120440 00000 n +0001933342 00000 n +0001932372 00000 n +0001929527 00000 n +0001932902 00000 n +0001933028 00000 n +0001933153 00000 n +0001932525 00000 n +0001933279 00000 n +0001932693 00000 n +0001937135 00000 n +0001936447 00000 n +0001933571 00000 n +0001936570 00000 n +0001936822 00000 n +0001936948 00000 n +0001937074 00000 n +0001940827 00000 n +0001940012 00000 n +0001937237 00000 n +0001940135 00000 n +0001940261 00000 n +0001940386 00000 n +0001940512 00000 n +0001940638 00000 n +0001940764 00000 n +0001944332 00000 n +0001943590 00000 n +0001940943 00000 n +0001943891 00000 n +0001944017 00000 n +0001943734 00000 n +0001944143 00000 n +0001944269 00000 n +0001945356 00000 n +0001944918 00000 n +0001944448 00000 n +0001945041 00000 n +0001945293 00000 n +0001953858 00000 n +0001947633 00000 n +0001945444 00000 n +0001953291 00000 n +0001953543 00000 n +0001948011 00000 n +0001948198 00000 n +0001948389 00000 n +0001948559 00000 n +0001948758 00000 n +0001948953 00000 n +0001949142 00000 n +0001949334 00000 n +0001949529 00000 n +0001949714 00000 n +0001949907 00000 n +0001950102 00000 n +0001950301 00000 n +0001950500 00000 n +0001950684 00000 n +0001950893 00000 n +0001951086 00000 n +0001951279 00000 n +0001951474 00000 n +0001951663 00000 n +0001951872 00000 n +0001952064 00000 n +0001952239 00000 n +0001952449 00000 n +0001953669 00000 n +0001952659 00000 n +0001952869 00000 n +0001953080 00000 n +0001953795 00000 n +0002120565 00000 n +0001953974 00000 n +0001957186 00000 n +0001957217 00000 n +0001960646 00000 n +0001960789 00000 n +0001966051 00000 n +0001966242 00000 n +0001969990 00000 n +0001976531 00000 n +0001988722 00000 n +0001989137 00000 n +0001999690 00000 n +0001999940 00000 n +0002020626 00000 n +0002031166 00000 n +0002033663 00000 n +0002033694 00000 n +0002037532 00000 n +0002054125 00000 n +0002054535 00000 n +0002072972 00000 n +0002092786 00000 n +0002096974 00000 n +0002112147 00000 n +0002120645 00000 n +0002120771 00000 n +0002120897 00000 n +0002121023 00000 n +0002121149 00000 n +0002121275 00000 n +0002121401 00000 n +0002121527 00000 n +0002121653 00000 n +0002121779 00000 n +0002121905 00000 n +0002122022 00000 n +0002122149 00000 n +0002122267 00000 n +0002122341 00000 n +0002193282 00000 n +0002242071 00000 n +0002242112 00000 n +0002242152 00000 n +0002242384 00000 n trailer << /Size 6741 @@ -44796,5 +44566,5 @@ trailer /Info 6740 0 R >> startxref -2313187 +2242580 %%EOF diff --git a/docs/docbook/configure b/docs/docbook/configure index 303ea97f57..1fbfb02115 100755 --- a/docs/docbook/configure +++ b/docs/docbook/configure @@ -1,26 +1,287 @@ #! /bin/sh - # Guess values for system-dependent variables and create Makefiles. -# Generated automatically using autoconf version 2.13 -# Copyright (C) 1992, 93, 94, 95, 96 Free Software Foundation, Inc. +# Generated by GNU Autoconf 2.57. # +# Copyright 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001, 2002 +# Free Software Foundation, Inc. # This configure script is free software; the Free Software Foundation # gives unlimited permission to copy, distribute and modify it. +## --------------------- ## +## M4sh Initialization. ## +## --------------------- ## + +# Be Bourne compatible +if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then + emulate sh + NULLCMD=: + # Zsh 3.x and 4.x performs word splitting on ${1+"$@"}, which + # is contrary to our usage. Disable this feature. + alias -g '${1+"$@"}'='"$@"' +elif test -n "${BASH_VERSION+set}" && (set -o posix) >/dev/null 2>&1; then + set -o posix +fi + +# Support unset when possible. +if (FOO=FOO; unset FOO) >/dev/null 2>&1; then + as_unset=unset +else + as_unset=false +fi + + +# Work around bugs in pre-3.0 UWIN ksh. +$as_unset ENV MAIL MAILPATH +PS1='$ ' +PS2='> ' +PS4='+ ' + +# NLS nuisances. +for as_var in \ + LANG LANGUAGE LC_ADDRESS LC_ALL LC_COLLATE LC_CTYPE LC_IDENTIFICATION \ + LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER \ + LC_TELEPHONE LC_TIME +do + if (set +x; test -n "`(eval $as_var=C; export $as_var) 2>&1`"); then + eval $as_var=C; export $as_var + else + $as_unset $as_var + fi +done + +# Required to use basename. +if expr a : '\(a\)' >/dev/null 2>&1; then + as_expr=expr +else + as_expr=false +fi + +if (basename /) >/dev/null 2>&1 && test "X`basename / 2>&1`" = "X/"; then + as_basename=basename +else + as_basename=false +fi + + +# Name of the executable. +as_me=`$as_basename "$0" || +$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ + X"$0" : 'X\(//\)$' \| \ + X"$0" : 'X\(/\)$' \| \ + . : '\(.\)' 2>/dev/null || +echo X/"$0" | + sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/; q; } + /^X\/\(\/\/\)$/{ s//\1/; q; } + /^X\/\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` + + +# PATH needs CR, and LINENO needs CR and PATH. +# Avoid depending upon Character Ranges. +as_cr_letters='abcdefghijklmnopqrstuvwxyz' +as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' +as_cr_Letters=$as_cr_letters$as_cr_LETTERS +as_cr_digits='0123456789' +as_cr_alnum=$as_cr_Letters$as_cr_digits + +# The user is always right. +if test "${PATH_SEPARATOR+set}" != set; then + echo "#! /bin/sh" >conf$$.sh + echo "exit 0" >>conf$$.sh + chmod +x conf$$.sh + if (PATH="/nonexistent;."; conf$$.sh) >/dev/null 2>&1; then + PATH_SEPARATOR=';' + else + PATH_SEPARATOR=: + fi + rm -f conf$$.sh +fi + + + as_lineno_1=$LINENO + as_lineno_2=$LINENO + as_lineno_3=`(expr $as_lineno_1 + 1) 2>/dev/null` + test "x$as_lineno_1" != "x$as_lineno_2" && + test "x$as_lineno_3" = "x$as_lineno_2" || { + # Find who we are. Look in the path if we contain no path at all + # relative or not. + case $0 in + *[\\/]* ) as_myself=$0 ;; + *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break +done + + ;; + esac + # We did not find ourselves, most probably we were run as `sh COMMAND' + # in which case we are not to be found in the path. + if test "x$as_myself" = x; then + as_myself=$0 + fi + if test ! -f "$as_myself"; then + { echo "$as_me: error: cannot find myself; rerun with an absolute path" >&2 + { (exit 1); exit 1; }; } + fi + case $CONFIG_SHELL in + '') + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for as_base in sh bash ksh sh5; do + case $as_dir in + /*) + if ("$as_dir/$as_base" -c ' + as_lineno_1=$LINENO + as_lineno_2=$LINENO + as_lineno_3=`(expr $as_lineno_1 + 1) 2>/dev/null` + test "x$as_lineno_1" != "x$as_lineno_2" && + test "x$as_lineno_3" = "x$as_lineno_2" ') 2>/dev/null; then + $as_unset BASH_ENV || test "${BASH_ENV+set}" != set || { BASH_ENV=; export BASH_ENV; } + $as_unset ENV || test "${ENV+set}" != set || { ENV=; export ENV; } + CONFIG_SHELL=$as_dir/$as_base + export CONFIG_SHELL + exec "$CONFIG_SHELL" "$0" ${1+"$@"} + fi;; + esac + done +done +;; + esac + + # Create $as_me.lineno as a copy of $as_myself, but with $LINENO + # uniformly replaced by the line number. The first 'sed' inserts a + # line-number line before each line; the second 'sed' does the real + # work. The second script uses 'N' to pair each line-number line + # with the numbered line, and appends trailing '-' during + # substitution so that $LINENO is not a special case at line end. + # (Raja R Harinath suggested sed '=', and Paul Eggert wrote the + # second 'sed' script. Blame Lee E. McMahon for sed's syntax. :-) + sed '=' <$as_myself | + sed ' + N + s,$,-, + : loop + s,^\(['$as_cr_digits']*\)\(.*\)[$]LINENO\([^'$as_cr_alnum'_]\),\1\2\1\3, + t loop + s,-$,, + s,^['$as_cr_digits']*\n,, + ' >$as_me.lineno && + chmod +x $as_me.lineno || + { echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2 + { (exit 1); exit 1; }; } + + # Don't try to exec as it changes $[0], causing all sort of problems + # (the dirname of $[0] is not the place where we might find the + # original and so on. Autoconf is especially sensible to this). + . ./$as_me.lineno + # Exit status is that of the last command. + exit +} + + +case `echo "testing\c"; echo 1,2,3`,`echo -n testing; echo 1,2,3` in + *c*,-n*) ECHO_N= ECHO_C=' +' ECHO_T=' ' ;; + *c*,* ) ECHO_N=-n ECHO_C= ECHO_T= ;; + *) ECHO_N= ECHO_C='\c' ECHO_T= ;; +esac + +if expr a : '\(a\)' >/dev/null 2>&1; then + as_expr=expr +else + as_expr=false +fi + +rm -f conf$$ conf$$.exe conf$$.file +echo >conf$$.file +if ln -s conf$$.file conf$$ 2>/dev/null; then + # We could just check for DJGPP; but this test a) works b) is more generic + # and c) will remain valid once DJGPP supports symlinks (DJGPP 2.04). + if test -f conf$$.exe; then + # Don't use ln at all; we don't have any links + as_ln_s='cp -p' + else + as_ln_s='ln -s' + fi +elif ln conf$$.file conf$$ 2>/dev/null; then + as_ln_s=ln +else + as_ln_s='cp -p' +fi +rm -f conf$$ conf$$.exe conf$$.file + +if mkdir -p . 2>/dev/null; then + as_mkdir_p=: +else + as_mkdir_p=false +fi + +as_executable_p="test -f" + +# Sed expression to map a string onto a valid CPP name. +as_tr_cpp="sed y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g" + +# Sed expression to map a string onto a valid variable name. +as_tr_sh="sed y%*+%pp%;s%[^_$as_cr_alnum]%_%g" + -# Defaults: -ac_help= +# IFS +# We need space, tab and new line, in precisely that order. +as_nl=' +' +IFS=" $as_nl" + +# CDPATH. +$as_unset CDPATH + + +# Name of the host. +# hostname on some systems (SVR3.2, Linux) returns a bogus exit status, +# so uname gets run too. +ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q` + +exec 6>&1 + +# +# Initializations. +# ac_default_prefix=/usr/local -# Any additions from configure.in: +ac_config_libobj_dir=. +cross_compiling=no +subdirs= +MFLAGS= +MAKEFLAGS= +SHELL=${CONFIG_SHELL-/bin/sh} + +# Maximum number of lines to put in a shell here document. +# This variable seems obsolete. It should probably be removed, and +# only ac_max_sed_lines should be used. +: ${ac_max_here_lines=38} + +# Identity of this package. +PACKAGE_NAME= +PACKAGE_TARNAME= +PACKAGE_VERSION= +PACKAGE_STRING= +PACKAGE_BUGREPORT= + +ac_unique_file="global.ent" +ac_subst_vars='SHELL PATH_SEPARATOR PACKAGE_NAME PACKAGE_TARNAME PACKAGE_VERSION PACKAGE_STRING PACKAGE_BUGREPORT exec_prefix prefix program_transform_name bindir sbindir libexecdir datadir sysconfdir sharedstatedir localstatedir libdir includedir oldincludedir infodir mandir build_alias host_alias target_alias DEFS ECHO_C ECHO_N ECHO_T LIBS XSLTPROC PDFLATEX XMLTO LATEX DVIPS PNGTOPNM PNMTOPS DOC_BUILD_DATE LIBOBJS LTLIBOBJS' +ac_subst_files='' # Initialize some variables set by options. +ac_init_help= +ac_init_version=false # The variables have the same names as the options, with # dashes changed to underlines. -build=NONE -cache_file=./config.cache +cache_file=/dev/null exec_prefix=NONE -host=NONE no_create= -nonopt=NONE no_recursion= prefix=NONE program_prefix=NONE @@ -29,10 +290,15 @@ program_transform_name=s,x,x, silent= site= srcdir= -target=NONE verbose= x_includes=NONE x_libraries=NONE + +# Installation directory options. +# These are left unexpanded so users can "make install exec_prefix=/foo" +# and all the variables that are supposed to be based on exec_prefix +# by default will actually change. +# Use braces instead of parens because sh, perl, etc. also accept them. bindir='${exec_prefix}/bin' sbindir='${exec_prefix}/sbin' libexecdir='${exec_prefix}/libexec' @@ -46,17 +312,9 @@ oldincludedir='/usr/include' infodir='${prefix}/info' mandir='${prefix}/man' -# Initialize some other variables. -subdirs= -MFLAGS= MAKEFLAGS= -SHELL=${CONFIG_SHELL-/bin/sh} -# Maximum number of lines to put in a shell here document. -ac_max_here_lines=12 - ac_prev= for ac_option do - # If the previous option needs an argument, assign it. if test -n "$ac_prev"; then eval "$ac_prev=\$ac_option" @@ -64,59 +322,59 @@ do continue fi - case "$ac_option" in - -*=*) ac_optarg=`echo "$ac_option" | sed 's/[-_a-zA-Z0-9]*=//'` ;; - *) ac_optarg= ;; - esac + ac_optarg=`expr "x$ac_option" : 'x[^=]*=\(.*\)'` # Accept the important Cygnus configure options, so we can diagnose typos. - case "$ac_option" in + case $ac_option in -bindir | --bindir | --bindi | --bind | --bin | --bi) ac_prev=bindir ;; -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*) - bindir="$ac_optarg" ;; + bindir=$ac_optarg ;; -build | --build | --buil | --bui | --bu) - ac_prev=build ;; + ac_prev=build_alias ;; -build=* | --build=* | --buil=* | --bui=* | --bu=*) - build="$ac_optarg" ;; + build_alias=$ac_optarg ;; -cache-file | --cache-file | --cache-fil | --cache-fi \ | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c) ac_prev=cache_file ;; -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \ | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*) - cache_file="$ac_optarg" ;; + cache_file=$ac_optarg ;; + + --config-cache | -C) + cache_file=config.cache ;; -datadir | --datadir | --datadi | --datad | --data | --dat | --da) ac_prev=datadir ;; -datadir=* | --datadir=* | --datadi=* | --datad=* | --data=* | --dat=* \ | --da=*) - datadir="$ac_optarg" ;; + datadir=$ac_optarg ;; -disable-* | --disable-*) - ac_feature=`echo $ac_option|sed -e 's/-*disable-//'` + ac_feature=`expr "x$ac_option" : 'x-*disable-\(.*\)'` # Reject names that are not valid shell variable names. - if test -n "`echo $ac_feature| sed 's/[-a-zA-Z0-9_]//g'`"; then - { echo "configure: error: $ac_feature: invalid feature name" 1>&2; exit 1; } - fi - ac_feature=`echo $ac_feature| sed 's/-/_/g'` - eval "enable_${ac_feature}=no" ;; + expr "x$ac_feature" : ".*[^-_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid feature name: $ac_feature" >&2 + { (exit 1); exit 1; }; } + ac_feature=`echo $ac_feature | sed 's/-/_/g'` + eval "enable_$ac_feature=no" ;; -enable-* | --enable-*) - ac_feature=`echo $ac_option|sed -e 's/-*enable-//' -e 's/=.*//'` + ac_feature=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'` # Reject names that are not valid shell variable names. - if test -n "`echo $ac_feature| sed 's/[-_a-zA-Z0-9]//g'`"; then - { echo "configure: error: $ac_feature: invalid feature name" 1>&2; exit 1; } - fi - ac_feature=`echo $ac_feature| sed 's/-/_/g'` - case "$ac_option" in - *=*) ;; + expr "x$ac_feature" : ".*[^-_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid feature name: $ac_feature" >&2 + { (exit 1); exit 1; }; } + ac_feature=`echo $ac_feature | sed 's/-/_/g'` + case $ac_option in + *=*) ac_optarg=`echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"`;; *) ac_optarg=yes ;; esac - eval "enable_${ac_feature}='$ac_optarg'" ;; + eval "enable_$ac_feature='$ac_optarg'" ;; -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \ | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \ @@ -125,95 +383,47 @@ do -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \ | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \ | --exec=* | --exe=* | --ex=*) - exec_prefix="$ac_optarg" ;; + exec_prefix=$ac_optarg ;; -gas | --gas | --ga | --g) # Obsolete; use --with-gas. with_gas=yes ;; - -help | --help | --hel | --he) - # Omit some internal or obsolete options to make the list less imposing. - # This message is too long to be a string in the A/UX 3.1 sh. - cat << EOF -Usage: configure [options] [host] -Options: [defaults in brackets after descriptions] -Configuration: - --cache-file=FILE cache test results in FILE - --help print this message - --no-create do not create output files - --quiet, --silent do not print \`checking...' messages - --version print the version of autoconf that created configure -Directory and file names: - --prefix=PREFIX install architecture-independent files in PREFIX - [$ac_default_prefix] - --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX - [same as prefix] - --bindir=DIR user executables in DIR [EPREFIX/bin] - --sbindir=DIR system admin executables in DIR [EPREFIX/sbin] - --libexecdir=DIR program executables in DIR [EPREFIX/libexec] - --datadir=DIR read-only architecture-independent data in DIR - [PREFIX/share] - --sysconfdir=DIR read-only single-machine data in DIR [PREFIX/etc] - --sharedstatedir=DIR modifiable architecture-independent data in DIR - [PREFIX/com] - --localstatedir=DIR modifiable single-machine data in DIR [PREFIX/var] - --libdir=DIR object code libraries in DIR [EPREFIX/lib] - --includedir=DIR C header files in DIR [PREFIX/include] - --oldincludedir=DIR C header files for non-gcc in DIR [/usr/include] - --infodir=DIR info documentation in DIR [PREFIX/info] - --mandir=DIR man documentation in DIR [PREFIX/man] - --srcdir=DIR find the sources in DIR [configure dir or ..] - --program-prefix=PREFIX prepend PREFIX to installed program names - --program-suffix=SUFFIX append SUFFIX to installed program names - --program-transform-name=PROGRAM - run sed PROGRAM on installed program names -EOF - cat << EOF -Host type: - --build=BUILD configure for building on BUILD [BUILD=HOST] - --host=HOST configure for HOST [guessed] - --target=TARGET configure for TARGET [TARGET=HOST] -Features and packages: - --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no) - --enable-FEATURE[=ARG] include FEATURE [ARG=yes] - --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] - --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) - --x-includes=DIR X include files are in DIR - --x-libraries=DIR X library files are in DIR -EOF - if test -n "$ac_help"; then - echo "--enable and --with options recognized:$ac_help" - fi - exit 0 ;; + -help | --help | --hel | --he | -h) + ac_init_help=long ;; + -help=r* | --help=r* | --hel=r* | --he=r* | -hr*) + ac_init_help=recursive ;; + -help=s* | --help=s* | --hel=s* | --he=s* | -hs*) + ac_init_help=short ;; -host | --host | --hos | --ho) - ac_prev=host ;; + ac_prev=host_alias ;; -host=* | --host=* | --hos=* | --ho=*) - host="$ac_optarg" ;; + host_alias=$ac_optarg ;; -includedir | --includedir | --includedi | --included | --include \ | --includ | --inclu | --incl | --inc) ac_prev=includedir ;; -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \ | --includ=* | --inclu=* | --incl=* | --inc=*) - includedir="$ac_optarg" ;; + includedir=$ac_optarg ;; -infodir | --infodir | --infodi | --infod | --info | --inf) ac_prev=infodir ;; -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*) - infodir="$ac_optarg" ;; + infodir=$ac_optarg ;; -libdir | --libdir | --libdi | --libd) ac_prev=libdir ;; -libdir=* | --libdir=* | --libdi=* | --libd=*) - libdir="$ac_optarg" ;; + libdir=$ac_optarg ;; -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \ | --libexe | --libex | --libe) ac_prev=libexecdir ;; -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \ | --libexe=* | --libex=* | --libe=*) - libexecdir="$ac_optarg" ;; + libexecdir=$ac_optarg ;; -localstatedir | --localstatedir | --localstatedi | --localstated \ | --localstate | --localstat | --localsta | --localst \ @@ -222,19 +432,19 @@ EOF -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \ | --localstate=* | --localstat=* | --localsta=* | --localst=* \ | --locals=* | --local=* | --loca=* | --loc=* | --lo=*) - localstatedir="$ac_optarg" ;; + localstatedir=$ac_optarg ;; -mandir | --mandir | --mandi | --mand | --man | --ma | --m) ac_prev=mandir ;; -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*) - mandir="$ac_optarg" ;; + mandir=$ac_optarg ;; -nfp | --nfp | --nf) # Obsolete; use --without-fp. with_fp=no ;; -no-create | --no-create | --no-creat | --no-crea | --no-cre \ - | --no-cr | --no-c) + | --no-cr | --no-c | -n) no_create=yes ;; -no-recursion | --no-recursion | --no-recursio | --no-recursi \ @@ -248,26 +458,26 @@ EOF -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \ | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \ | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*) - oldincludedir="$ac_optarg" ;; + oldincludedir=$ac_optarg ;; -prefix | --prefix | --prefi | --pref | --pre | --pr | --p) ac_prev=prefix ;; -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*) - prefix="$ac_optarg" ;; + prefix=$ac_optarg ;; -program-prefix | --program-prefix | --program-prefi | --program-pref \ | --program-pre | --program-pr | --program-p) ac_prev=program_prefix ;; -program-prefix=* | --program-prefix=* | --program-prefi=* \ | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*) - program_prefix="$ac_optarg" ;; + program_prefix=$ac_optarg ;; -program-suffix | --program-suffix | --program-suffi | --program-suff \ | --program-suf | --program-su | --program-s) ac_prev=program_suffix ;; -program-suffix=* | --program-suffix=* | --program-suffi=* \ | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*) - program_suffix="$ac_optarg" ;; + program_suffix=$ac_optarg ;; -program-transform-name | --program-transform-name \ | --program-transform-nam | --program-transform-na \ @@ -284,7 +494,7 @@ EOF | --program-transfo=* | --program-transf=* \ | --program-trans=* | --program-tran=* \ | --progr-tra=* | --program-tr=* | --program-t=*) - program_transform_name="$ac_optarg" ;; + program_transform_name=$ac_optarg ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil) @@ -294,7 +504,7 @@ EOF ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ | --sbi=* | --sb=*) - sbindir="$ac_optarg" ;; + sbindir=$ac_optarg ;; -sharedstatedir | --sharedstatedir | --sharedstatedi \ | --sharedstated | --sharedstate | --sharedstat | --sharedsta \ @@ -305,58 +515,57 @@ EOF | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \ | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \ | --sha=* | --sh=*) - sharedstatedir="$ac_optarg" ;; + sharedstatedir=$ac_optarg ;; -site | --site | --sit) ac_prev=site ;; -site=* | --site=* | --sit=*) - site="$ac_optarg" ;; + site=$ac_optarg ;; -srcdir | --srcdir | --srcdi | --srcd | --src | --sr) ac_prev=srcdir ;; -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*) - srcdir="$ac_optarg" ;; + srcdir=$ac_optarg ;; -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \ | --syscon | --sysco | --sysc | --sys | --sy) ac_prev=sysconfdir ;; -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \ | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*) - sysconfdir="$ac_optarg" ;; + sysconfdir=$ac_optarg ;; -target | --target | --targe | --targ | --tar | --ta | --t) - ac_prev=target ;; + ac_prev=target_alias ;; -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*) - target="$ac_optarg" ;; + target_alias=$ac_optarg ;; -v | -verbose | --verbose | --verbos | --verbo | --verb) verbose=yes ;; - -version | --version | --versio | --versi | --vers) - echo "configure generated by autoconf version 2.13" - exit 0 ;; + -version | --version | --versio | --versi | --vers | -V) + ac_init_version=: ;; -with-* | --with-*) - ac_package=`echo $ac_option|sed -e 's/-*with-//' -e 's/=.*//'` + ac_package=`expr "x$ac_option" : 'x-*with-\([^=]*\)'` # Reject names that are not valid shell variable names. - if test -n "`echo $ac_package| sed 's/[-_a-zA-Z0-9]//g'`"; then - { echo "configure: error: $ac_package: invalid package name" 1>&2; exit 1; } - fi + expr "x$ac_package" : ".*[^-_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid package name: $ac_package" >&2 + { (exit 1); exit 1; }; } ac_package=`echo $ac_package| sed 's/-/_/g'` - case "$ac_option" in - *=*) ;; + case $ac_option in + *=*) ac_optarg=`echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"`;; *) ac_optarg=yes ;; esac - eval "with_${ac_package}='$ac_optarg'" ;; + eval "with_$ac_package='$ac_optarg'" ;; -without-* | --without-*) - ac_package=`echo $ac_option|sed -e 's/-*without-//'` + ac_package=`expr "x$ac_option" : 'x-*without-\(.*\)'` # Reject names that are not valid shell variable names. - if test -n "`echo $ac_package| sed 's/[-a-zA-Z0-9_]//g'`"; then - { echo "configure: error: $ac_package: invalid package name" 1>&2; exit 1; } - fi - ac_package=`echo $ac_package| sed 's/-/_/g'` - eval "with_${ac_package}=no" ;; + expr "x$ac_package" : ".*[^-_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid package name: $ac_package" >&2 + { (exit 1); exit 1; }; } + ac_package=`echo $ac_package | sed 's/-/_/g'` + eval "with_$ac_package=no" ;; --x) # Obsolete; use --with-x. @@ -367,99 +576,110 @@ EOF ac_prev=x_includes ;; -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \ | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*) - x_includes="$ac_optarg" ;; + x_includes=$ac_optarg ;; -x-libraries | --x-libraries | --x-librarie | --x-librari \ | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l) ac_prev=x_libraries ;; -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \ | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*) - x_libraries="$ac_optarg" ;; + x_libraries=$ac_optarg ;; - -*) { echo "configure: error: $ac_option: invalid option; use --help to show usage" 1>&2; exit 1; } + -*) { echo "$as_me: error: unrecognized option: $ac_option +Try \`$0 --help' for more information." >&2 + { (exit 1); exit 1; }; } ;; + *=*) + ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='` + # Reject names that are not valid shell variable names. + expr "x$ac_envvar" : ".*[^_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid variable name: $ac_envvar" >&2 + { (exit 1); exit 1; }; } + ac_optarg=`echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` + eval "$ac_envvar='$ac_optarg'" + export $ac_envvar ;; + *) - if test -n "`echo $ac_option| sed 's/[-a-z0-9.]//g'`"; then - echo "configure: warning: $ac_option: invalid host type" 1>&2 - fi - if test "x$nonopt" != xNONE; then - { echo "configure: error: can only configure for one host and one target at a time" 1>&2; exit 1; } - fi - nonopt="$ac_option" + # FIXME: should be removed in autoconf 3.0. + echo "$as_me: WARNING: you should use --build, --host, --target" >&2 + expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null && + echo "$as_me: WARNING: invalid host type: $ac_option" >&2 + : ${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option} ;; esac done if test -n "$ac_prev"; then - { echo "configure: error: missing argument to --`echo $ac_prev | sed 's/_/-/g'`" 1>&2; exit 1; } -fi - -trap 'rm -fr conftest* confdefs* core core.* *.core $ac_clean_files; exit 1' 1 2 15 - -# File descriptor usage: -# 0 standard input -# 1 file creation -# 2 errors and warnings -# 3 some systems may open it to /dev/tty -# 4 used on the Kubota Titan -# 6 checking for... messages and results -# 5 compiler messages saved in config.log -if test "$silent" = yes; then - exec 6>/dev/null -else - exec 6>&1 + ac_option=--`echo $ac_prev | sed 's/_/-/g'` + { echo "$as_me: error: missing argument to $ac_option" >&2 + { (exit 1); exit 1; }; } fi -exec 5>./config.log -echo "\ -This file contains any messages produced by compilers while -running configure, to aid debugging if configure makes a mistake. -" 1>&5 +# Be sure to have absolute paths. +for ac_var in exec_prefix prefix +do + eval ac_val=$`echo $ac_var` + case $ac_val in + [\\/$]* | ?:[\\/]* | NONE | '' ) ;; + *) { echo "$as_me: error: expected an absolute directory name for --$ac_var: $ac_val" >&2 + { (exit 1); exit 1; }; };; + esac +done -# Strip out --no-create and --no-recursion so they do not pile up. -# Also quote any args containing shell metacharacters. -ac_configure_args= -for ac_arg +# Be sure to have absolute paths. +for ac_var in bindir sbindir libexecdir datadir sysconfdir sharedstatedir \ + localstatedir libdir includedir oldincludedir infodir mandir do - case "$ac_arg" in - -no-create | --no-create | --no-creat | --no-crea | --no-cre \ - | --no-cr | --no-c) ;; - -no-recursion | --no-recursion | --no-recursio | --no-recursi \ - | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r) ;; - *" "*|*" "*|*[\[\]\~\#\$\^\&\*\(\)\{\}\\\|\;\<\>\?]*) - ac_configure_args="$ac_configure_args '$ac_arg'" ;; - *) ac_configure_args="$ac_configure_args $ac_arg" ;; + eval ac_val=$`echo $ac_var` + case $ac_val in + [\\/$]* | ?:[\\/]* ) ;; + *) { echo "$as_me: error: expected an absolute directory name for --$ac_var: $ac_val" >&2 + { (exit 1); exit 1; }; };; esac done -# NLS nuisances. -# Only set these to C if already set. These must not be set unconditionally -# because not all systems understand e.g. LANG=C (notably SCO). -# Fixing LC_MESSAGES prevents Solaris sh from translating var values in `set'! -# Non-C LC_CTYPE values break the ctype check. -if test "${LANG+set}" = set; then LANG=C; export LANG; fi -if test "${LC_ALL+set}" = set; then LC_ALL=C; export LC_ALL; fi -if test "${LC_MESSAGES+set}" = set; then LC_MESSAGES=C; export LC_MESSAGES; fi -if test "${LC_CTYPE+set}" = set; then LC_CTYPE=C; export LC_CTYPE; fi +# There might be people who depend on the old broken behavior: `$host' +# used to hold the argument of --host etc. +# FIXME: To remove some day. +build=$build_alias +host=$host_alias +target=$target_alias + +# FIXME: To remove some day. +if test "x$host_alias" != x; then + if test "x$build_alias" = x; then + cross_compiling=maybe + echo "$as_me: WARNING: If you wanted to set the --build type, don't use --host. + If a cross compiler is detected then cross compile mode will be used." >&2 + elif test "x$build_alias" != "x$host_alias"; then + cross_compiling=yes + fi +fi -# confdefs.h avoids OS command line length limits that DEFS can exceed. -rm -rf conftest* confdefs.h -# AIX cpp loses on an empty file, so make sure it contains at least a newline. -echo > confdefs.h +ac_tool_prefix= +test -n "$host_alias" && ac_tool_prefix=$host_alias- + +test "$silent" = yes && exec 6>/dev/null -# A filename unique to this package, relative to the directory that -# configure is in, which we can look for to find out if srcdir is correct. -ac_unique_file=global.ent # Find the source files, if location was not specified. if test -z "$srcdir"; then ac_srcdir_defaulted=yes # Try the directory containing this script, then its parent. - ac_prog=$0 - ac_confdir=`echo $ac_prog|sed 's%/[^/][^/]*$%%'` - test "x$ac_confdir" = "x$ac_prog" && ac_confdir=. + ac_confdir=`(dirname "$0") 2>/dev/null || +$as_expr X"$0" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ + X"$0" : 'X\(//\)[^/]' \| \ + X"$0" : 'X\(//\)$' \| \ + X"$0" : 'X\(/\)' \| \ + . : '\(.\)' 2>/dev/null || +echo X"$0" | + sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/; q; } + /^X\(\/\/\)[^/].*/{ s//\1/; q; } + /^X\(\/\/\)$/{ s//\1/; q; } + /^X\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` srcdir=$ac_confdir if test ! -r $srcdir/$ac_unique_file; then srcdir=.. @@ -469,13 +689,390 @@ else fi if test ! -r $srcdir/$ac_unique_file; then if test "$ac_srcdir_defaulted" = yes; then - { echo "configure: error: can not find sources in $ac_confdir or .." 1>&2; exit 1; } + { echo "$as_me: error: cannot find sources ($ac_unique_file) in $ac_confdir or .." >&2 + { (exit 1); exit 1; }; } else - { echo "configure: error: can not find sources in $srcdir" 1>&2; exit 1; } + { echo "$as_me: error: cannot find sources ($ac_unique_file) in $srcdir" >&2 + { (exit 1); exit 1; }; } fi fi -srcdir=`echo "${srcdir}" | sed 's%\([^/]\)/*$%\1%'` +(cd $srcdir && test -r ./$ac_unique_file) 2>/dev/null || + { echo "$as_me: error: sources are in $srcdir, but \`cd $srcdir' does not work" >&2 + { (exit 1); exit 1; }; } +srcdir=`echo "$srcdir" | sed 's%\([^\\/]\)[\\/]*$%\1%'` +ac_env_build_alias_set=${build_alias+set} +ac_env_build_alias_value=$build_alias +ac_cv_env_build_alias_set=${build_alias+set} +ac_cv_env_build_alias_value=$build_alias +ac_env_host_alias_set=${host_alias+set} +ac_env_host_alias_value=$host_alias +ac_cv_env_host_alias_set=${host_alias+set} +ac_cv_env_host_alias_value=$host_alias +ac_env_target_alias_set=${target_alias+set} +ac_env_target_alias_value=$target_alias +ac_cv_env_target_alias_set=${target_alias+set} +ac_cv_env_target_alias_value=$target_alias + +# +# Report the --help message. +# +if test "$ac_init_help" = "long"; then + # Omit some internal or obsolete options to make the list less imposing. + # This message is too long to be a string in the A/UX 3.1 sh. + cat <<_ACEOF +\`configure' configures this package to adapt to many kinds of systems. + +Usage: $0 [OPTION]... [VAR=VALUE]... + +To assign environment variables (e.g., CC, CFLAGS...), specify them as +VAR=VALUE. See below for descriptions of some of the useful variables. + +Defaults for the options are specified in brackets. + +Configuration: + -h, --help display this help and exit + --help=short display options specific to this package + --help=recursive display the short help of all the included packages + -V, --version display version information and exit + -q, --quiet, --silent do not print \`checking...' messages + --cache-file=FILE cache test results in FILE [disabled] + -C, --config-cache alias for \`--cache-file=config.cache' + -n, --no-create do not create output files + --srcdir=DIR find the sources in DIR [configure dir or \`..'] + +_ACEOF + + cat <<_ACEOF +Installation directories: + --prefix=PREFIX install architecture-independent files in PREFIX + [$ac_default_prefix] + --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX + [PREFIX] + +By default, \`make install' will install all the files in +\`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc. You can specify +an installation prefix other than \`$ac_default_prefix' using \`--prefix', +for instance \`--prefix=\$HOME'. + +For better control, use the options below. + +Fine tuning of the installation directories: + --bindir=DIR user executables [EPREFIX/bin] + --sbindir=DIR system admin executables [EPREFIX/sbin] + --libexecdir=DIR program executables [EPREFIX/libexec] + --datadir=DIR read-only architecture-independent data [PREFIX/share] + --sysconfdir=DIR read-only single-machine data [PREFIX/etc] + --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com] + --localstatedir=DIR modifiable single-machine data [PREFIX/var] + --libdir=DIR object code libraries [EPREFIX/lib] + --includedir=DIR C header files [PREFIX/include] + --oldincludedir=DIR C header files for non-gcc [/usr/include] + --infodir=DIR info documentation [PREFIX/info] + --mandir=DIR man documentation [PREFIX/man] +_ACEOF + + cat <<\_ACEOF +_ACEOF +fi + +if test -n "$ac_init_help"; then + + cat <<\_ACEOF + +_ACEOF +fi + +if test "$ac_init_help" = "recursive"; then + # If there are subdirs, report their specific --help. + ac_popdir=`pwd` + for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue + test -d $ac_dir || continue + ac_builddir=. + +if test "$ac_dir" != .; then + ac_dir_suffix=/`echo "$ac_dir" | sed 's,^\.[\\/],,'` + # A "../" for each directory in $ac_dir_suffix. + ac_top_builddir=`echo "$ac_dir_suffix" | sed 's,/[^\\/]*,../,g'` +else + ac_dir_suffix= ac_top_builddir= +fi + +case $srcdir in + .) # No --srcdir option. We are building in place. + ac_srcdir=. + if test -z "$ac_top_builddir"; then + ac_top_srcdir=. + else + ac_top_srcdir=`echo $ac_top_builddir | sed 's,/$,,'` + fi ;; + [\\/]* | ?:[\\/]* ) # Absolute path. + ac_srcdir=$srcdir$ac_dir_suffix; + ac_top_srcdir=$srcdir ;; + *) # Relative path. + ac_srcdir=$ac_top_builddir$srcdir$ac_dir_suffix + ac_top_srcdir=$ac_top_builddir$srcdir ;; +esac +# Don't blindly perform a `cd "$ac_dir"/$ac_foo && pwd` since $ac_foo can be +# absolute. +ac_abs_builddir=`cd "$ac_dir" && cd $ac_builddir && pwd` +ac_abs_top_builddir=`cd "$ac_dir" && cd ${ac_top_builddir}. && pwd` +ac_abs_srcdir=`cd "$ac_dir" && cd $ac_srcdir && pwd` +ac_abs_top_srcdir=`cd "$ac_dir" && cd $ac_top_srcdir && pwd` + + cd $ac_dir + # Check for guested configure; otherwise get Cygnus style configure. + if test -f $ac_srcdir/configure.gnu; then + echo + $SHELL $ac_srcdir/configure.gnu --help=recursive + elif test -f $ac_srcdir/configure; then + echo + $SHELL $ac_srcdir/configure --help=recursive + elif test -f $ac_srcdir/configure.ac || + test -f $ac_srcdir/configure.in; then + echo + $ac_configure --help + else + echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2 + fi + cd $ac_popdir + done +fi + +test -n "$ac_init_help" && exit 0 +if $ac_init_version; then + cat <<\_ACEOF + +Copyright 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001, 2002 +Free Software Foundation, Inc. +This configure script is free software; the Free Software Foundation +gives unlimited permission to copy, distribute and modify it. +_ACEOF + exit 0 +fi +exec 5>config.log +cat >&5 <<_ACEOF +This file contains any messages produced by compilers while +running configure, to aid debugging if configure makes a mistake. + +It was created by $as_me, which was +generated by GNU Autoconf 2.57. Invocation command line was + + $ $0 $@ + +_ACEOF +{ +cat <<_ASUNAME +## --------- ## +## Platform. ## +## --------- ## + +hostname = `(hostname || uname -n) 2>/dev/null | sed 1q` +uname -m = `(uname -m) 2>/dev/null || echo unknown` +uname -r = `(uname -r) 2>/dev/null || echo unknown` +uname -s = `(uname -s) 2>/dev/null || echo unknown` +uname -v = `(uname -v) 2>/dev/null || echo unknown` + +/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown` +/bin/uname -X = `(/bin/uname -X) 2>/dev/null || echo unknown` + +/bin/arch = `(/bin/arch) 2>/dev/null || echo unknown` +/usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null || echo unknown` +/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown` +hostinfo = `(hostinfo) 2>/dev/null || echo unknown` +/bin/machine = `(/bin/machine) 2>/dev/null || echo unknown` +/usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null || echo unknown` +/bin/universe = `(/bin/universe) 2>/dev/null || echo unknown` + +_ASUNAME + +as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + echo "PATH: $as_dir" +done + +} >&5 + +cat >&5 <<_ACEOF + + +## ----------- ## +## Core tests. ## +## ----------- ## + +_ACEOF + +# Keep a trace of the command line. +# Strip out --no-create and --no-recursion so they do not pile up. +# Strip out --silent because we don't want to record it for future runs. +# Also quote any args containing shell meta-characters. +# Make two passes to allow for proper duplicate-argument suppression. +ac_configure_args= +ac_configure_args0= +ac_configure_args1= +ac_sep= +ac_must_keep_next=false +for ac_pass in 1 2 +do + for ac_arg + do + case $ac_arg in + -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;; + -q | -quiet | --quiet | --quie | --qui | --qu | --q \ + | -silent | --silent | --silen | --sile | --sil) + continue ;; + *" "*|*" "*|*[\[\]\~\#\$\^\&\*\(\)\{\}\\\|\;\<\>\?\"\']*) + ac_arg=`echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;; + esac + case $ac_pass in + 1) ac_configure_args0="$ac_configure_args0 '$ac_arg'" ;; + 2) + ac_configure_args1="$ac_configure_args1 '$ac_arg'" + if test $ac_must_keep_next = true; then + ac_must_keep_next=false # Got value, back to normal. + else + case $ac_arg in + *=* | --config-cache | -C | -disable-* | --disable-* \ + | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \ + | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \ + | -with-* | --with-* | -without-* | --without-* | --x) + case "$ac_configure_args0 " in + "$ac_configure_args1"*" '$ac_arg' "* ) continue ;; + esac + ;; + -* ) ac_must_keep_next=true ;; + esac + fi + ac_configure_args="$ac_configure_args$ac_sep'$ac_arg'" + # Get rid of the leading space. + ac_sep=" " + ;; + esac + done +done +$as_unset ac_configure_args0 || test "${ac_configure_args0+set}" != set || { ac_configure_args0=; export ac_configure_args0; } +$as_unset ac_configure_args1 || test "${ac_configure_args1+set}" != set || { ac_configure_args1=; export ac_configure_args1; } + +# When interrupted or exit'd, cleanup temporary files, and complete +# config.log. We remove comments because anyway the quotes in there +# would cause problems or look ugly. +# WARNING: Be sure not to use single quotes in there, as some shells, +# such as our DU 5.0 friend, will then `close' the trap. +trap 'exit_status=$? + # Save into config.log some information that might help in debugging. + { + echo + + cat <<\_ASBOX +## ---------------- ## +## Cache variables. ## +## ---------------- ## +_ASBOX + echo + # The following way of writing the cache mishandles newlines in values, +{ + (set) 2>&1 | + case `(ac_space='"'"' '"'"'; set | grep ac_space) 2>&1` in + *ac_space=\ *) + sed -n \ + "s/'"'"'/'"'"'\\\\'"'"''"'"'/g; + s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='"'"'\\2'"'"'/p" + ;; + *) + sed -n \ + "s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1=\\2/p" + ;; + esac; +} + echo + + cat <<\_ASBOX +## ----------------- ## +## Output variables. ## +## ----------------- ## +_ASBOX + echo + for ac_var in $ac_subst_vars + do + eval ac_val=$`echo $ac_var` + echo "$ac_var='"'"'$ac_val'"'"'" + done | sort + echo + + if test -n "$ac_subst_files"; then + cat <<\_ASBOX +## ------------- ## +## Output files. ## +## ------------- ## +_ASBOX + echo + for ac_var in $ac_subst_files + do + eval ac_val=$`echo $ac_var` + echo "$ac_var='"'"'$ac_val'"'"'" + done | sort + echo + fi + + if test -s confdefs.h; then + cat <<\_ASBOX +## ----------- ## +## confdefs.h. ## +## ----------- ## +_ASBOX + echo + sed "/^$/d" confdefs.h | sort + echo + fi + test "$ac_signal" != 0 && + echo "$as_me: caught signal $ac_signal" + echo "$as_me: exit $exit_status" + } >&5 + rm -f core core.* *.core && + rm -rf conftest* confdefs* conf$$* $ac_clean_files && + exit $exit_status + ' 0 +for ac_signal in 1 2 13 15; do + trap 'ac_signal='$ac_signal'; { (exit 1); exit 1; }' $ac_signal +done +ac_signal=0 + +# confdefs.h avoids OS command line length limits that DEFS can exceed. +rm -rf conftest* confdefs.h +# AIX cpp loses on an empty file, so make sure it contains at least a newline. +echo >confdefs.h + +# Predefined preprocessor variables. + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_NAME "$PACKAGE_NAME" +_ACEOF + + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_TARNAME "$PACKAGE_TARNAME" +_ACEOF + + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_VERSION "$PACKAGE_VERSION" +_ACEOF + + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_STRING "$PACKAGE_STRING" +_ACEOF + + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT" +_ACEOF + + +# Let the site file select an alternate cache file if it wants to. # Prefer explicitly selected file to automatically selected ones. if test -z "$CONFIG_SITE"; then if test "x$prefix" != xNONE; then @@ -486,554 +1083,1265 @@ if test -z "$CONFIG_SITE"; then fi for ac_site_file in $CONFIG_SITE; do if test -r "$ac_site_file"; then - echo "loading site script $ac_site_file" + { echo "$as_me:$LINENO: loading site script $ac_site_file" >&5 +echo "$as_me: loading site script $ac_site_file" >&6;} + sed 's/^/| /' "$ac_site_file" >&5 . "$ac_site_file" fi done if test -r "$cache_file"; then - echo "loading cache $cache_file" - . $cache_file + # Some versions of bash will fail to source /dev/null (special + # files actually), so we avoid doing that. + if test -f "$cache_file"; then + { echo "$as_me:$LINENO: loading cache $cache_file" >&5 +echo "$as_me: loading cache $cache_file" >&6;} + case $cache_file in + [\\/]* | ?:[\\/]* ) . $cache_file;; + *) . ./$cache_file;; + esac + fi else - echo "creating cache $cache_file" - > $cache_file + { echo "$as_me:$LINENO: creating cache $cache_file" >&5 +echo "$as_me: creating cache $cache_file" >&6;} + >$cache_file fi -ac_ext=c -# CFLAGS is not in ac_cpp because -g, -O, etc. are not valid cpp options. -ac_cpp='$CPP $CPPFLAGS' -ac_compile='${CC-cc} -c $CFLAGS $CPPFLAGS conftest.$ac_ext 1>&5' -ac_link='${CC-cc} -o conftest${ac_exeext} $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS 1>&5' -cross_compiling=$ac_cv_prog_cc_cross - -ac_exeext= -ac_objext=o -if (echo "testing\c"; echo 1,2,3) | grep c >/dev/null; then - # Stardent Vistra SVR4 grep lacks -e, says ghazi@caip.rutgers.edu. - if (echo -n testing; echo 1,2,3) | sed s/-n/xn/ | grep xn >/dev/null; then - ac_n= ac_c=' -' ac_t=' ' - else - ac_n=-n ac_c= ac_t= +# Check that the precious variables saved in the cache have kept the same +# value. +ac_cache_corrupted=false +for ac_var in `(set) 2>&1 | + sed -n 's/^ac_env_\([a-zA-Z_0-9]*\)_set=.*/\1/p'`; do + eval ac_old_set=\$ac_cv_env_${ac_var}_set + eval ac_new_set=\$ac_env_${ac_var}_set + eval ac_old_val="\$ac_cv_env_${ac_var}_value" + eval ac_new_val="\$ac_env_${ac_var}_value" + case $ac_old_set,$ac_new_set in + set,) + { echo "$as_me:$LINENO: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5 +echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;} + ac_cache_corrupted=: ;; + ,set) + { echo "$as_me:$LINENO: error: \`$ac_var' was not set in the previous run" >&5 +echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;} + ac_cache_corrupted=: ;; + ,);; + *) + if test "x$ac_old_val" != "x$ac_new_val"; then + { echo "$as_me:$LINENO: error: \`$ac_var' has changed since the previous run:" >&5 +echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;} + { echo "$as_me:$LINENO: former value: $ac_old_val" >&5 +echo "$as_me: former value: $ac_old_val" >&2;} + { echo "$as_me:$LINENO: current value: $ac_new_val" >&5 +echo "$as_me: current value: $ac_new_val" >&2;} + ac_cache_corrupted=: + fi;; + esac + # Pass precious variables to config.status. + if test "$ac_new_set" = set; then + case $ac_new_val in + *" "*|*" "*|*[\[\]\~\#\$\^\&\*\(\)\{\}\\\|\;\<\>\?\"\']*) + ac_arg=$ac_var=`echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;; + *) ac_arg=$ac_var=$ac_new_val ;; + esac + case " $ac_configure_args " in + *" '$ac_arg' "*) ;; # Avoid dups. Use of quotes ensures accuracy. + *) ac_configure_args="$ac_configure_args '$ac_arg'" ;; + esac fi -else - ac_n= ac_c='\c' ac_t= +done +if $ac_cache_corrupted; then + { echo "$as_me:$LINENO: error: changes in the environment can compromise the build" >&5 +echo "$as_me: error: changes in the environment can compromise the build" >&2;} + { { echo "$as_me:$LINENO: error: run \`make distclean' and/or \`rm $cache_file' and start over" >&5 +echo "$as_me: error: run \`make distclean' and/or \`rm $cache_file' and start over" >&2;} + { (exit 1); exit 1; }; } fi +ac_ext=c +ac_cpp='$CPP $CPPFLAGS' +ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' +ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' +ac_compiler_gnu=$ac_cv_c_compiler_gnu + + + + + + + + + + + + + + + + + + # Extract the first word of "xsltproc", so it can be a program name with args. set dummy xsltproc; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:529: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_XSLTPROC'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_XSLTPROC+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$XSLTPROC" in - /*) + case $XSLTPROC in + [\\/]* | ?:[\\/]*) ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_XSLTPROC="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_XSLTPROC="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -XSLTPROC="$ac_cv_path_XSLTPROC" +XSLTPROC=$ac_cv_path_XSLTPROC + if test -n "$XSLTPROC"; then - echo "$ac_t""$XSLTPROC" 1>&6 + echo "$as_me:$LINENO: result: $XSLTPROC" >&5 +echo "${ECHO_T}$XSLTPROC" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi if test "x$XSLTPROC" = x; then - { echo "configure: error: "xsltproc is required"" 1>&2; exit 1; } + { { echo "$as_me:$LINENO: error: \"xsltproc is required\"" >&5 +echo "$as_me: error: \"xsltproc is required\"" >&2;} + { (exit 1); exit 1; }; } fi # Extract the first word of "pdflatex", so it can be a program name with args. set dummy pdflatex; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:567: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_PDFLATEX'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_PDFLATEX+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$PDFLATEX" in - /*) + case $PDFLATEX in + [\\/]* | ?:[\\/]*) ac_cv_path_PDFLATEX="$PDFLATEX" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_PDFLATEX="$PDFLATEX" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_PDFLATEX="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_PDFLATEX="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -PDFLATEX="$ac_cv_path_PDFLATEX" +PDFLATEX=$ac_cv_path_PDFLATEX + if test -n "$PDFLATEX"; then - echo "$ac_t""$PDFLATEX" 1>&6 + echo "$as_me:$LINENO: result: $PDFLATEX" >&5 +echo "${ECHO_T}$PDFLATEX" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi if test "x$PDFLATEX" = x; then - { echo "configure: error: "pdflatex is required"" 1>&2; exit 1; } + { { echo "$as_me:$LINENO: error: \"pdflatex is required\"" >&5 +echo "$as_me: error: \"pdflatex is required\"" >&2;} + { (exit 1); exit 1; }; } fi # Extract the first word of "xmlto", so it can be a program name with args. set dummy xmlto; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:606: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_XMLTO'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_XMLTO+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$XMLTO" in - /*) + case $XMLTO in + [\\/]* | ?:[\\/]*) ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_XMLTO="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_XMLTO="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -XMLTO="$ac_cv_path_XMLTO" +XMLTO=$ac_cv_path_XMLTO + if test -n "$XMLTO"; then - echo "$ac_t""$XMLTO" 1>&6 + echo "$as_me:$LINENO: result: $XMLTO" >&5 +echo "${ECHO_T}$XMLTO" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi # Extract the first word of "latex", so it can be a program name with args. set dummy latex; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:641: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_LATEX'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_LATEX+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$LATEX" in - /*) + case $LATEX in + [\\/]* | ?:[\\/]*) ac_cv_path_LATEX="$LATEX" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_LATEX="$LATEX" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_LATEX="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_LATEX="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -LATEX="$ac_cv_path_LATEX" +LATEX=$ac_cv_path_LATEX + if test -n "$LATEX"; then - echo "$ac_t""$LATEX" 1>&6 + echo "$as_me:$LINENO: result: $LATEX" >&5 +echo "${ECHO_T}$LATEX" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi # Extract the first word of "dvips", so it can be a program name with args. set dummy dvips; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:676: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_DVIPS'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_DVIPS+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$DVIPS" in - /*) + case $DVIPS in + [\\/]* | ?:[\\/]*) ac_cv_path_DVIPS="$DVIPS" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_DVIPS="$DVIPS" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_DVIPS="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_DVIPS="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -DVIPS="$ac_cv_path_DVIPS" +DVIPS=$ac_cv_path_DVIPS + if test -n "$DVIPS"; then - echo "$ac_t""$DVIPS" 1>&6 + echo "$as_me:$LINENO: result: $DVIPS" >&5 +echo "${ECHO_T}$DVIPS" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi # Extract the first word of "pngtopnm", so it can be a program name with args. set dummy pngtopnm; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:711: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_PNGTOPNM'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_PNGTOPNM+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$PNGTOPNM" in - /*) + case $PNGTOPNM in + [\\/]* | ?:[\\/]*) ac_cv_path_PNGTOPNM="$PNGTOPNM" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_PNGTOPNM="$PNGTOPNM" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_PNGTOPNM="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_PNGTOPNM="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -PNGTOPNM="$ac_cv_path_PNGTOPNM" +PNGTOPNM=$ac_cv_path_PNGTOPNM + if test -n "$PNGTOPNM"; then - echo "$ac_t""$PNGTOPNM" 1>&6 + echo "$as_me:$LINENO: result: $PNGTOPNM" >&5 +echo "${ECHO_T}$PNGTOPNM" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi # Extract the first word of "pnmtops", so it can be a program name with args. set dummy pnmtops; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:746: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_PNMTOPS'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_PNMTOPS+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$PNMTOPS" in - /*) + case $PNMTOPS in + [\\/]* | ?:[\\/]*) ac_cv_path_PNMTOPS="$PNMTOPS" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_PNMTOPS="$PNMTOPS" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_PNMTOPS="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_PNMTOPS="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -PNMTOPS="$ac_cv_path_PNMTOPS" +PNMTOPS=$ac_cv_path_PNMTOPS + if test -n "$PNMTOPS"; then - echo "$ac_t""$PNMTOPS" 1>&6 + echo "$as_me:$LINENO: result: $PNMTOPS" >&5 +echo "${ECHO_T}$PNMTOPS" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi DOC_BUILD_DATE=`date '+%d-%m-%Y'` -trap '' 1 2 15 -cat > confcache <<\EOF + ac_config_files="$ac_config_files Makefile" +cat >confcache <<\_ACEOF # This file is a shell script that caches the results of configure # tests run on this system so they can be shared between configure -# scripts and configure runs. It is not useful on other systems. -# If it contains results you don't want to keep, you may remove or edit it. +# scripts and configure runs, see configure's option --config-cache. +# It is not useful on other systems. If it contains results you don't +# want to keep, you may remove or edit it. # -# By default, configure uses ./config.cache as the cache file, -# creating it if it does not exist already. You can give configure -# the --cache-file=FILE option to use a different cache file; that is -# what configure does when it calls configure scripts in -# subdirectories, so they share the cache. -# Giving --cache-file=/dev/null disables caching, for debugging configure. -# config.status only pays attention to the cache file if you give it the -# --recheck option to rerun configure. +# config.status only pays attention to the cache file if you give it +# the --recheck option to rerun configure. # -EOF +# `ac_cv_env_foo' variables (set or unset) will be overridden when +# loading this file, other *unset* `ac_cv_foo' will be assigned the +# following values. + +_ACEOF + # The following way of writing the cache mishandles newlines in values, # but we know of no workaround that is simple, portable, and efficient. # So, don't put newlines in cache variables' values. # Ultrix sh set writes to stderr and can't be redirected directly, # and sets the high bit in the cache file unless we assign to the vars. -(set) 2>&1 | - case `(ac_space=' '; set | grep ac_space) 2>&1` in - *ac_space=\ *) - # `set' does not quote correctly, so add quotes (double-quote substitution - # turns \\\\ into \\, and sed turns \\ into \). - sed -n \ - -e "s/'/'\\\\''/g" \ - -e "s/^\\([a-zA-Z0-9_]*_cv_[a-zA-Z0-9_]*\\)=\\(.*\\)/\\1=\${\\1='\\2'}/p" - ;; - *) - # `set' quotes correctly as required by POSIX, so do not add quotes. - sed -n -e 's/^\([a-zA-Z0-9_]*_cv_[a-zA-Z0-9_]*\)=\(.*\)/\1=${\1=\2}/p' - ;; - esac >> confcache -if cmp -s $cache_file confcache; then - : -else +{ + (set) 2>&1 | + case `(ac_space=' '; set | grep ac_space) 2>&1` in + *ac_space=\ *) + # `set' does not quote correctly, so add quotes (double-quote + # substitution turns \\\\ into \\, and sed turns \\ into \). + sed -n \ + "s/'/'\\\\''/g; + s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" + ;; + *) + # `set' quotes correctly as required by POSIX, so do not add quotes. + sed -n \ + "s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1=\\2/p" + ;; + esac; +} | + sed ' + t clear + : clear + s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/ + t end + /^ac_cv_env/!s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/ + : end' >>confcache +if diff $cache_file confcache >/dev/null 2>&1; then :; else if test -w $cache_file; then - echo "updating cache $cache_file" - cat confcache > $cache_file + test "x$cache_file" != "x/dev/null" && echo "updating cache $cache_file" + cat confcache >$cache_file else echo "not updating unwritable cache $cache_file" fi fi rm -f confcache -trap 'rm -fr conftest* confdefs* core core.* *.core $ac_clean_files; exit 1' 1 2 15 - test "x$prefix" = xNONE && prefix=$ac_default_prefix # Let make expand exec_prefix. test "x$exec_prefix" = xNONE && exec_prefix='${prefix}' -# Any assignment to VPATH causes Sun make to only execute -# the first set of double-colon rules, so remove it if not needed. -# If there is a colon in the path, we need to keep it. +# VPATH may cause trouble with some makes, so we remove $(srcdir), +# ${srcdir} and @srcdir@ from VPATH if srcdir is ".", strip leading and +# trailing colons and then remove the whole line if VPATH becomes empty +# (actually we leave an empty line to preserve line numbers). if test "x$srcdir" = x.; then - ac_vpsub='/^[ ]*VPATH[ ]*=[^:]*$/d' + ac_vpsub='/^[ ]*VPATH[ ]*=/{ +s/:*\$(srcdir):*/:/; +s/:*\${srcdir}:*/:/; +s/:*@srcdir@:*/:/; +s/^\([^=]*=[ ]*\):*/\1/; +s/:*$//; +s/^[^=]*=[ ]*$//; +}' fi -trap 'rm -f $CONFIG_STATUS conftest*; exit 1' 1 2 15 - # Transform confdefs.h into DEFS. # Protect against shell expansion while executing Makefile rules. # Protect against Makefile macro expansion. -cat > conftest.defs <<\EOF -s%#define \([A-Za-z_][A-Za-z0-9_]*\) *\(.*\)%-D\1=\2%g -s%[ `~#$^&*(){}\\|;'"<>?]%\\&%g -s%\[%\\&%g -s%\]%\\&%g -s%\$%$$%g -EOF -DEFS=`sed -f conftest.defs confdefs.h | tr '\012' ' '` -rm -f conftest.defs - - -# Without the "./", some shells look in PATH for config.status. -: ${CONFIG_STATUS=./config.status} +# +# If the first sed substitution is executed (which looks for macros that +# take arguments), then we branch to the quote section. Otherwise, +# look for a macro that doesn't take arguments. +cat >confdef2opt.sed <<\_ACEOF +t clear +: clear +s,^[ ]*#[ ]*define[ ][ ]*\([^ (][^ (]*([^)]*)\)[ ]*\(.*\),-D\1=\2,g +t quote +s,^[ ]*#[ ]*define[ ][ ]*\([^ ][^ ]*\)[ ]*\(.*\),-D\1=\2,g +t quote +d +: quote +s,[ `~#$^&*(){}\\|;'"<>?],\\&,g +s,\[,\\&,g +s,\],\\&,g +s,\$,$$,g +p +_ACEOF +# We use echo to avoid assuming a particular line-breaking character. +# The extra dot is to prevent the shell from consuming trailing +# line-breaks from the sub-command output. A line-break within +# single-quotes doesn't work because, if this script is created in a +# platform that uses two characters for line-breaks (e.g., DOS), tr +# would break. +ac_LF_and_DOT=`echo; echo .` +DEFS=`sed -n -f confdef2opt.sed confdefs.h | tr "$ac_LF_and_DOT" ' .'` +rm -f confdef2opt.sed + + +ac_libobjs= +ac_ltlibobjs= +for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue + # 1. Remove the extension, and $U if already installed. + ac_i=`echo "$ac_i" | + sed 's/\$U\././;s/\.o$//;s/\.obj$//'` + # 2. Add them. + ac_libobjs="$ac_libobjs $ac_i\$U.$ac_objext" + ac_ltlibobjs="$ac_ltlibobjs $ac_i"'$U.lo' +done +LIBOBJS=$ac_libobjs -echo creating $CONFIG_STATUS -rm -f $CONFIG_STATUS -cat > $CONFIG_STATUS <<EOF -#! /bin/sh -# Generated automatically by configure. +LTLIBOBJS=$ac_ltlibobjs + + + +: ${CONFIG_STATUS=./config.status} +ac_clean_files_save=$ac_clean_files +ac_clean_files="$ac_clean_files $CONFIG_STATUS" +{ echo "$as_me:$LINENO: creating $CONFIG_STATUS" >&5 +echo "$as_me: creating $CONFIG_STATUS" >&6;} +cat >$CONFIG_STATUS <<_ACEOF +#! $SHELL +# Generated by $as_me. # Run this file to recreate the current configuration. -# This directory was configured as follows, -# on host `(hostname || uname -n) 2>/dev/null | sed 1q`: -# -# $0 $ac_configure_args -# # Compiler output produced by configure, useful for debugging -# configure, is in ./config.log if it exists. +# configure, is in config.log if it exists. + +debug=false +ac_cs_recheck=false +ac_cs_silent=false +SHELL=\${CONFIG_SHELL-$SHELL} +_ACEOF + +cat >>$CONFIG_STATUS <<\_ACEOF +## --------------------- ## +## M4sh Initialization. ## +## --------------------- ## + +# Be Bourne compatible +if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then + emulate sh + NULLCMD=: + # Zsh 3.x and 4.x performs word splitting on ${1+"$@"}, which + # is contrary to our usage. Disable this feature. + alias -g '${1+"$@"}'='"$@"' +elif test -n "${BASH_VERSION+set}" && (set -o posix) >/dev/null 2>&1; then + set -o posix +fi -ac_cs_usage="Usage: $CONFIG_STATUS [--recheck] [--version] [--help]" -for ac_option +# Support unset when possible. +if (FOO=FOO; unset FOO) >/dev/null 2>&1; then + as_unset=unset +else + as_unset=false +fi + + +# Work around bugs in pre-3.0 UWIN ksh. +$as_unset ENV MAIL MAILPATH +PS1='$ ' +PS2='> ' +PS4='+ ' + +# NLS nuisances. +for as_var in \ + LANG LANGUAGE LC_ADDRESS LC_ALL LC_COLLATE LC_CTYPE LC_IDENTIFICATION \ + LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER \ + LC_TELEPHONE LC_TIME do - case "\$ac_option" in - -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) - echo "running \${CONFIG_SHELL-/bin/sh} $0 $ac_configure_args --no-create --no-recursion" - exec \${CONFIG_SHELL-/bin/sh} $0 $ac_configure_args --no-create --no-recursion ;; - -version | --version | --versio | --versi | --vers | --ver | --ve | --v) - echo "$CONFIG_STATUS generated by autoconf version 2.13" - exit 0 ;; - -help | --help | --hel | --he | --h) - echo "\$ac_cs_usage"; exit 0 ;; - *) echo "\$ac_cs_usage"; exit 1 ;; - esac + if (set +x; test -n "`(eval $as_var=C; export $as_var) 2>&1`"); then + eval $as_var=C; export $as_var + else + $as_unset $as_var + fi done -ac_given_srcdir=$srcdir +# Required to use basename. +if expr a : '\(a\)' >/dev/null 2>&1; then + as_expr=expr +else + as_expr=false +fi -trap 'rm -fr `echo "Makefile " | sed "s/:[^ ]*//g"` conftest*; exit 1' 1 2 15 -EOF -cat >> $CONFIG_STATUS <<EOF +if (basename /) >/dev/null 2>&1 && test "X`basename / 2>&1`" = "X/"; then + as_basename=basename +else + as_basename=false +fi -# Protect against being on the right side of a sed subst in config.status. -sed 's/%@/@@/; s/@%/@@/; s/%g\$/@g/; /@g\$/s/[\\\\&%]/\\\\&/g; - s/@@/%@/; s/@@/@%/; s/@g\$/%g/' > conftest.subs <<\\CEOF -$ac_vpsub -$extrasub -s%@SHELL@%$SHELL%g -s%@CFLAGS@%$CFLAGS%g -s%@CPPFLAGS@%$CPPFLAGS%g -s%@CXXFLAGS@%$CXXFLAGS%g -s%@FFLAGS@%$FFLAGS%g -s%@DEFS@%$DEFS%g -s%@LDFLAGS@%$LDFLAGS%g -s%@LIBS@%$LIBS%g -s%@exec_prefix@%$exec_prefix%g -s%@prefix@%$prefix%g -s%@program_transform_name@%$program_transform_name%g -s%@bindir@%$bindir%g -s%@sbindir@%$sbindir%g -s%@libexecdir@%$libexecdir%g -s%@datadir@%$datadir%g -s%@sysconfdir@%$sysconfdir%g -s%@sharedstatedir@%$sharedstatedir%g -s%@localstatedir@%$localstatedir%g -s%@libdir@%$libdir%g -s%@includedir@%$includedir%g -s%@oldincludedir@%$oldincludedir%g -s%@infodir@%$infodir%g -s%@mandir@%$mandir%g -s%@XSLTPROC@%$XSLTPROC%g -s%@PDFLATEX@%$PDFLATEX%g -s%@XMLTO@%$XMLTO%g -s%@LATEX@%$LATEX%g -s%@DVIPS@%$DVIPS%g -s%@PNGTOPNM@%$PNGTOPNM%g -s%@PNMTOPS@%$PNMTOPS%g -s%@DOC_BUILD_DATE@%$DOC_BUILD_DATE%g -CEOF -EOF - -cat >> $CONFIG_STATUS <<\EOF - -# Split the substitutions into bite-sized pieces for seds with -# small command number limits, like on Digital OSF/1 and HP-UX. -ac_max_sed_cmds=90 # Maximum number of lines to put in a sed script. -ac_file=1 # Number of current file. -ac_beg=1 # First line for current file. -ac_end=$ac_max_sed_cmds # Line after last line for current file. -ac_more_lines=: -ac_sed_cmds="" -while $ac_more_lines; do - if test $ac_beg -gt 1; then - sed "1,${ac_beg}d; ${ac_end}q" conftest.subs > conftest.s$ac_file +# Name of the executable. +as_me=`$as_basename "$0" || +$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ + X"$0" : 'X\(//\)$' \| \ + X"$0" : 'X\(/\)$' \| \ + . : '\(.\)' 2>/dev/null || +echo X/"$0" | + sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/; q; } + /^X\/\(\/\/\)$/{ s//\1/; q; } + /^X\/\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` + + +# PATH needs CR, and LINENO needs CR and PATH. +# Avoid depending upon Character Ranges. +as_cr_letters='abcdefghijklmnopqrstuvwxyz' +as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' +as_cr_Letters=$as_cr_letters$as_cr_LETTERS +as_cr_digits='0123456789' +as_cr_alnum=$as_cr_Letters$as_cr_digits + +# The user is always right. +if test "${PATH_SEPARATOR+set}" != set; then + echo "#! /bin/sh" >conf$$.sh + echo "exit 0" >>conf$$.sh + chmod +x conf$$.sh + if (PATH="/nonexistent;."; conf$$.sh) >/dev/null 2>&1; then + PATH_SEPARATOR=';' else - sed "${ac_end}q" conftest.subs > conftest.s$ac_file + PATH_SEPARATOR=: fi - if test ! -s conftest.s$ac_file; then - ac_more_lines=false - rm -f conftest.s$ac_file + rm -f conf$$.sh +fi + + + as_lineno_1=$LINENO + as_lineno_2=$LINENO + as_lineno_3=`(expr $as_lineno_1 + 1) 2>/dev/null` + test "x$as_lineno_1" != "x$as_lineno_2" && + test "x$as_lineno_3" = "x$as_lineno_2" || { + # Find who we are. Look in the path if we contain no path at all + # relative or not. + case $0 in + *[\\/]* ) as_myself=$0 ;; + *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break +done + + ;; + esac + # We did not find ourselves, most probably we were run as `sh COMMAND' + # in which case we are not to be found in the path. + if test "x$as_myself" = x; then + as_myself=$0 + fi + if test ! -f "$as_myself"; then + { { echo "$as_me:$LINENO: error: cannot find myself; rerun with an absolute path" >&5 +echo "$as_me: error: cannot find myself; rerun with an absolute path" >&2;} + { (exit 1); exit 1; }; } + fi + case $CONFIG_SHELL in + '') + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for as_base in sh bash ksh sh5; do + case $as_dir in + /*) + if ("$as_dir/$as_base" -c ' + as_lineno_1=$LINENO + as_lineno_2=$LINENO + as_lineno_3=`(expr $as_lineno_1 + 1) 2>/dev/null` + test "x$as_lineno_1" != "x$as_lineno_2" && + test "x$as_lineno_3" = "x$as_lineno_2" ') 2>/dev/null; then + $as_unset BASH_ENV || test "${BASH_ENV+set}" != set || { BASH_ENV=; export BASH_ENV; } + $as_unset ENV || test "${ENV+set}" != set || { ENV=; export ENV; } + CONFIG_SHELL=$as_dir/$as_base + export CONFIG_SHELL + exec "$CONFIG_SHELL" "$0" ${1+"$@"} + fi;; + esac + done +done +;; + esac + + # Create $as_me.lineno as a copy of $as_myself, but with $LINENO + # uniformly replaced by the line number. The first 'sed' inserts a + # line-number line before each line; the second 'sed' does the real + # work. The second script uses 'N' to pair each line-number line + # with the numbered line, and appends trailing '-' during + # substitution so that $LINENO is not a special case at line end. + # (Raja R Harinath suggested sed '=', and Paul Eggert wrote the + # second 'sed' script. Blame Lee E. McMahon for sed's syntax. :-) + sed '=' <$as_myself | + sed ' + N + s,$,-, + : loop + s,^\(['$as_cr_digits']*\)\(.*\)[$]LINENO\([^'$as_cr_alnum'_]\),\1\2\1\3, + t loop + s,-$,, + s,^['$as_cr_digits']*\n,, + ' >$as_me.lineno && + chmod +x $as_me.lineno || + { { echo "$as_me:$LINENO: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&5 +echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2;} + { (exit 1); exit 1; }; } + + # Don't try to exec as it changes $[0], causing all sort of problems + # (the dirname of $[0] is not the place where we might find the + # original and so on. Autoconf is especially sensible to this). + . ./$as_me.lineno + # Exit status is that of the last command. + exit +} + + +case `echo "testing\c"; echo 1,2,3`,`echo -n testing; echo 1,2,3` in + *c*,-n*) ECHO_N= ECHO_C=' +' ECHO_T=' ' ;; + *c*,* ) ECHO_N=-n ECHO_C= ECHO_T= ;; + *) ECHO_N= ECHO_C='\c' ECHO_T= ;; +esac + +if expr a : '\(a\)' >/dev/null 2>&1; then + as_expr=expr +else + as_expr=false +fi + +rm -f conf$$ conf$$.exe conf$$.file +echo >conf$$.file +if ln -s conf$$.file conf$$ 2>/dev/null; then + # We could just check for DJGPP; but this test a) works b) is more generic + # and c) will remain valid once DJGPP supports symlinks (DJGPP 2.04). + if test -f conf$$.exe; then + # Don't use ln at all; we don't have any links + as_ln_s='cp -p' else - if test -z "$ac_sed_cmds"; then - ac_sed_cmds="sed -f conftest.s$ac_file" - else - ac_sed_cmds="$ac_sed_cmds | sed -f conftest.s$ac_file" - fi - ac_file=`expr $ac_file + 1` - ac_beg=$ac_end - ac_end=`expr $ac_end + $ac_max_sed_cmds` + as_ln_s='ln -s' fi +elif ln conf$$.file conf$$ 2>/dev/null; then + as_ln_s=ln +else + as_ln_s='cp -p' +fi +rm -f conf$$ conf$$.exe conf$$.file + +if mkdir -p . 2>/dev/null; then + as_mkdir_p=: +else + as_mkdir_p=false +fi + +as_executable_p="test -f" + +# Sed expression to map a string onto a valid CPP name. +as_tr_cpp="sed y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g" + +# Sed expression to map a string onto a valid variable name. +as_tr_sh="sed y%*+%pp%;s%[^_$as_cr_alnum]%_%g" + + +# IFS +# We need space, tab and new line, in precisely that order. +as_nl=' +' +IFS=" $as_nl" + +# CDPATH. +$as_unset CDPATH + +exec 6>&1 + +# Open the log real soon, to keep \$[0] and so on meaningful, and to +# report actual input values of CONFIG_FILES etc. instead of their +# values after options handling. Logging --version etc. is OK. +exec 5>>config.log +{ + echo + sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX +## Running $as_me. ## +_ASBOX +} >&5 +cat >&5 <<_CSEOF + +This file was extended by $as_me, which was +generated by GNU Autoconf 2.57. Invocation command line was + + CONFIG_FILES = $CONFIG_FILES + CONFIG_HEADERS = $CONFIG_HEADERS + CONFIG_LINKS = $CONFIG_LINKS + CONFIG_COMMANDS = $CONFIG_COMMANDS + $ $0 $@ + +_CSEOF +echo "on `(hostname || uname -n) 2>/dev/null | sed 1q`" >&5 +echo >&5 +_ACEOF + +# Files that config.status was made for. +if test -n "$ac_config_files"; then + echo "config_files=\"$ac_config_files\"" >>$CONFIG_STATUS +fi + +if test -n "$ac_config_headers"; then + echo "config_headers=\"$ac_config_headers\"" >>$CONFIG_STATUS +fi + +if test -n "$ac_config_links"; then + echo "config_links=\"$ac_config_links\"" >>$CONFIG_STATUS +fi + +if test -n "$ac_config_commands"; then + echo "config_commands=\"$ac_config_commands\"" >>$CONFIG_STATUS +fi + +cat >>$CONFIG_STATUS <<\_ACEOF + +ac_cs_usage="\ +\`$as_me' instantiates files from templates according to the +current configuration. + +Usage: $0 [OPTIONS] [FILE]... + + -h, --help print this help, then exit + -V, --version print version number, then exit + -q, --quiet do not print progress messages + -d, --debug don't remove temporary files + --recheck update $as_me by reconfiguring in the same conditions + --file=FILE[:TEMPLATE] + instantiate the configuration file FILE + +Configuration files: +$config_files + +Report bugs to <bug-autoconf@gnu.org>." +_ACEOF + +cat >>$CONFIG_STATUS <<_ACEOF +ac_cs_version="\\ +config.status +configured by $0, generated by GNU Autoconf 2.57, + with options \\"`echo "$ac_configure_args" | sed 's/[\\""\`\$]/\\\\&/g'`\\" + +Copyright 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001 +Free Software Foundation, Inc. +This config.status script is free software; the Free Software Foundation +gives unlimited permission to copy, distribute and modify it." +srcdir=$srcdir +_ACEOF + +cat >>$CONFIG_STATUS <<\_ACEOF +# If no file are specified by the user, then we need to provide default +# value. By we need to know if files were specified by the user. +ac_need_defaults=: +while test $# != 0 +do + case $1 in + --*=*) + ac_option=`expr "x$1" : 'x\([^=]*\)='` + ac_optarg=`expr "x$1" : 'x[^=]*=\(.*\)'` + ac_shift=: + ;; + -*) + ac_option=$1 + ac_optarg=$2 + ac_shift=shift + ;; + *) # This is not an option, so the user has probably given explicit + # arguments. + ac_option=$1 + ac_need_defaults=false;; + esac + + case $ac_option in + # Handling of the options. +_ACEOF +cat >>$CONFIG_STATUS <<\_ACEOF + -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) + ac_cs_recheck=: ;; + --version | --vers* | -V ) + echo "$ac_cs_version"; exit 0 ;; + --he | --h) + # Conflict between --help and --header + { { echo "$as_me:$LINENO: error: ambiguous option: $1 +Try \`$0 --help' for more information." >&5 +echo "$as_me: error: ambiguous option: $1 +Try \`$0 --help' for more information." >&2;} + { (exit 1); exit 1; }; };; + --help | --hel | -h ) + echo "$ac_cs_usage"; exit 0 ;; + --debug | --d* | -d ) + debug=: ;; + --file | --fil | --fi | --f ) + $ac_shift + CONFIG_FILES="$CONFIG_FILES $ac_optarg" + ac_need_defaults=false;; + --header | --heade | --head | --hea ) + $ac_shift + CONFIG_HEADERS="$CONFIG_HEADERS $ac_optarg" + ac_need_defaults=false;; + -q | -quiet | --quiet | --quie | --qui | --qu | --q \ + | -silent | --silent | --silen | --sile | --sil | --si | --s) + ac_cs_silent=: ;; + + # This is an error. + -*) { { echo "$as_me:$LINENO: error: unrecognized option: $1 +Try \`$0 --help' for more information." >&5 +echo "$as_me: error: unrecognized option: $1 +Try \`$0 --help' for more information." >&2;} + { (exit 1); exit 1; }; } ;; + + *) ac_config_targets="$ac_config_targets $1" ;; + + esac + shift done -if test -z "$ac_sed_cmds"; then - ac_sed_cmds=cat + +ac_configure_extra_args= + +if $ac_cs_silent; then + exec 6>/dev/null + ac_configure_extra_args="$ac_configure_extra_args --silent" fi -EOF -cat >> $CONFIG_STATUS <<EOF +_ACEOF +cat >>$CONFIG_STATUS <<_ACEOF +if \$ac_cs_recheck; then + echo "running $SHELL $0 " $ac_configure_args \$ac_configure_extra_args " --no-create --no-recursion" >&6 + exec $SHELL $0 $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion +fi -CONFIG_FILES=\${CONFIG_FILES-"Makefile "} -EOF -cat >> $CONFIG_STATUS <<\EOF -for ac_file in .. $CONFIG_FILES; do if test "x$ac_file" != x..; then - # Support "outfile[:infile[:infile...]]", defaulting infile="outfile.in". - case "$ac_file" in - *:*) ac_file_in=`echo "$ac_file"|sed 's%[^:]*:%%'` - ac_file=`echo "$ac_file"|sed 's%:.*%%'` ;; - *) ac_file_in="${ac_file}.in" ;; +_ACEOF + + + + + +cat >>$CONFIG_STATUS <<\_ACEOF +for ac_config_target in $ac_config_targets +do + case "$ac_config_target" in + # Handling of arguments. + "Makefile" ) CONFIG_FILES="$CONFIG_FILES Makefile" ;; + *) { { echo "$as_me:$LINENO: error: invalid argument: $ac_config_target" >&5 +echo "$as_me: error: invalid argument: $ac_config_target" >&2;} + { (exit 1); exit 1; }; };; esac +done - # Adjust a relative srcdir, top_srcdir, and INSTALL for subdirectories. +# If the user did not use the arguments to specify the items to instantiate, +# then the envvar interface is used. Set only those that are not. +# We use the long form for the default assignment because of an extremely +# bizarre bug on SunOS 4.1.3. +if $ac_need_defaults; then + test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files +fi - # Remove last slash and all that follows it. Not all systems have dirname. - ac_dir=`echo $ac_file|sed 's%/[^/][^/]*$%%'` - if test "$ac_dir" != "$ac_file" && test "$ac_dir" != .; then - # The file is in a subdirectory. - test ! -d "$ac_dir" && mkdir "$ac_dir" - ac_dir_suffix="/`echo $ac_dir|sed 's%^\./%%'`" - # A "../" for each directory in $ac_dir_suffix. - ac_dots=`echo $ac_dir_suffix|sed 's%/[^/]*%../%g'` - else - ac_dir_suffix= ac_dots= +# Have a temporary directory for convenience. Make it in the build tree +# simply because there is no reason to put it here, and in addition, +# creating and moving files from /tmp can sometimes cause problems. +# Create a temporary directory, and hook for its removal unless debugging. +$debug || +{ + trap 'exit_status=$?; rm -rf $tmp && exit $exit_status' 0 + trap '{ (exit 1); exit 1; }' 1 2 13 15 +} + +# Create a (secure) tmp directory for tmp files. + +{ + tmp=`(umask 077 && mktemp -d -q "./confstatXXXXXX") 2>/dev/null` && + test -n "$tmp" && test -d "$tmp" +} || +{ + tmp=./confstat$$-$RANDOM + (umask 077 && mkdir $tmp) +} || +{ + echo "$me: cannot create a temporary directory in ." >&2 + { (exit 1); exit 1; } +} + +_ACEOF + +cat >>$CONFIG_STATUS <<_ACEOF + +# +# CONFIG_FILES section. +# + +# No need to generate the scripts if there are no CONFIG_FILES. +# This happens for instance when ./config.status config.h +if test -n "\$CONFIG_FILES"; then + # Protect against being on the right side of a sed subst in config.status. + sed 's/,@/@@/; s/@,/@@/; s/,;t t\$/@;t t/; /@;t t\$/s/[\\\\&,]/\\\\&/g; + s/@@/,@/; s/@@/@,/; s/@;t t\$/,;t t/' >\$tmp/subs.sed <<\\CEOF +s,@SHELL@,$SHELL,;t t +s,@PATH_SEPARATOR@,$PATH_SEPARATOR,;t t +s,@PACKAGE_NAME@,$PACKAGE_NAME,;t t +s,@PACKAGE_TARNAME@,$PACKAGE_TARNAME,;t t +s,@PACKAGE_VERSION@,$PACKAGE_VERSION,;t t +s,@PACKAGE_STRING@,$PACKAGE_STRING,;t t +s,@PACKAGE_BUGREPORT@,$PACKAGE_BUGREPORT,;t t +s,@exec_prefix@,$exec_prefix,;t t +s,@prefix@,$prefix,;t t +s,@program_transform_name@,$program_transform_name,;t t +s,@bindir@,$bindir,;t t +s,@sbindir@,$sbindir,;t t +s,@libexecdir@,$libexecdir,;t t +s,@datadir@,$datadir,;t t +s,@sysconfdir@,$sysconfdir,;t t +s,@sharedstatedir@,$sharedstatedir,;t t +s,@localstatedir@,$localstatedir,;t t +s,@libdir@,$libdir,;t t +s,@includedir@,$includedir,;t t +s,@oldincludedir@,$oldincludedir,;t t +s,@infodir@,$infodir,;t t +s,@mandir@,$mandir,;t t +s,@build_alias@,$build_alias,;t t +s,@host_alias@,$host_alias,;t t +s,@target_alias@,$target_alias,;t t +s,@DEFS@,$DEFS,;t t +s,@ECHO_C@,$ECHO_C,;t t +s,@ECHO_N@,$ECHO_N,;t t +s,@ECHO_T@,$ECHO_T,;t t +s,@LIBS@,$LIBS,;t t +s,@XSLTPROC@,$XSLTPROC,;t t +s,@PDFLATEX@,$PDFLATEX,;t t +s,@XMLTO@,$XMLTO,;t t +s,@LATEX@,$LATEX,;t t +s,@DVIPS@,$DVIPS,;t t +s,@PNGTOPNM@,$PNGTOPNM,;t t +s,@PNMTOPS@,$PNMTOPS,;t t +s,@DOC_BUILD_DATE@,$DOC_BUILD_DATE,;t t +s,@LIBOBJS@,$LIBOBJS,;t t +s,@LTLIBOBJS@,$LTLIBOBJS,;t t +CEOF + +_ACEOF + + cat >>$CONFIG_STATUS <<\_ACEOF + # Split the substitutions into bite-sized pieces for seds with + # small command number limits, like on Digital OSF/1 and HP-UX. + ac_max_sed_lines=48 + ac_sed_frag=1 # Number of current file. + ac_beg=1 # First line for current file. + ac_end=$ac_max_sed_lines # Line after last line for current file. + ac_more_lines=: + ac_sed_cmds= + while $ac_more_lines; do + if test $ac_beg -gt 1; then + sed "1,${ac_beg}d; ${ac_end}q" $tmp/subs.sed >$tmp/subs.frag + else + sed "${ac_end}q" $tmp/subs.sed >$tmp/subs.frag + fi + if test ! -s $tmp/subs.frag; then + ac_more_lines=false + else + # The purpose of the label and of the branching condition is to + # speed up the sed processing (if there are no `@' at all, there + # is no need to browse any of the substitutions). + # These are the two extra sed commands mentioned above. + (echo ':t + /@[a-zA-Z_][a-zA-Z_0-9]*@/!b' && cat $tmp/subs.frag) >$tmp/subs-$ac_sed_frag.sed + if test -z "$ac_sed_cmds"; then + ac_sed_cmds="sed -f $tmp/subs-$ac_sed_frag.sed" + else + ac_sed_cmds="$ac_sed_cmds | sed -f $tmp/subs-$ac_sed_frag.sed" + fi + ac_sed_frag=`expr $ac_sed_frag + 1` + ac_beg=$ac_end + ac_end=`expr $ac_end + $ac_max_sed_lines` + fi + done + if test -z "$ac_sed_cmds"; then + ac_sed_cmds=cat fi +fi # test -n "$CONFIG_FILES" - case "$ac_given_srcdir" in - .) srcdir=. - if test -z "$ac_dots"; then top_srcdir=. - else top_srcdir=`echo $ac_dots|sed 's%/$%%'`; fi ;; - /*) srcdir="$ac_given_srcdir$ac_dir_suffix"; top_srcdir="$ac_given_srcdir" ;; - *) # Relative path. - srcdir="$ac_dots$ac_given_srcdir$ac_dir_suffix" - top_srcdir="$ac_dots$ac_given_srcdir" ;; +_ACEOF +cat >>$CONFIG_STATUS <<\_ACEOF +for ac_file in : $CONFIG_FILES; do test "x$ac_file" = x: && continue + # Support "outfile[:infile[:infile...]]", defaulting infile="outfile.in". + case $ac_file in + - | *:- | *:-:* ) # input from stdin + cat >$tmp/stdin + ac_file_in=`echo "$ac_file" | sed 's,[^:]*:,,'` + ac_file=`echo "$ac_file" | sed 's,:.*,,'` ;; + *:* ) ac_file_in=`echo "$ac_file" | sed 's,[^:]*:,,'` + ac_file=`echo "$ac_file" | sed 's,:.*,,'` ;; + * ) ac_file_in=$ac_file.in ;; esac + # Compute @srcdir@, @top_srcdir@, and @INSTALL@ for subdirectories. + ac_dir=`(dirname "$ac_file") 2>/dev/null || +$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ + X"$ac_file" : 'X\(//\)[^/]' \| \ + X"$ac_file" : 'X\(//\)$' \| \ + X"$ac_file" : 'X\(/\)' \| \ + . : '\(.\)' 2>/dev/null || +echo X"$ac_file" | + sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/; q; } + /^X\(\/\/\)[^/].*/{ s//\1/; q; } + /^X\(\/\/\)$/{ s//\1/; q; } + /^X\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` + { if $as_mkdir_p; then + mkdir -p "$ac_dir" + else + as_dir="$ac_dir" + as_dirs= + while test ! -d "$as_dir"; do + as_dirs="$as_dir $as_dirs" + as_dir=`(dirname "$as_dir") 2>/dev/null || +$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ + X"$as_dir" : 'X\(//\)[^/]' \| \ + X"$as_dir" : 'X\(//\)$' \| \ + X"$as_dir" : 'X\(/\)' \| \ + . : '\(.\)' 2>/dev/null || +echo X"$as_dir" | + sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/; q; } + /^X\(\/\/\)[^/].*/{ s//\1/; q; } + /^X\(\/\/\)$/{ s//\1/; q; } + /^X\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` + done + test ! -n "$as_dirs" || mkdir $as_dirs + fi || { { echo "$as_me:$LINENO: error: cannot create directory \"$ac_dir\"" >&5 +echo "$as_me: error: cannot create directory \"$ac_dir\"" >&2;} + { (exit 1); exit 1; }; }; } + + ac_builddir=. + +if test "$ac_dir" != .; then + ac_dir_suffix=/`echo "$ac_dir" | sed 's,^\.[\\/],,'` + # A "../" for each directory in $ac_dir_suffix. + ac_top_builddir=`echo "$ac_dir_suffix" | sed 's,/[^\\/]*,../,g'` +else + ac_dir_suffix= ac_top_builddir= +fi + +case $srcdir in + .) # No --srcdir option. We are building in place. + ac_srcdir=. + if test -z "$ac_top_builddir"; then + ac_top_srcdir=. + else + ac_top_srcdir=`echo $ac_top_builddir | sed 's,/$,,'` + fi ;; + [\\/]* | ?:[\\/]* ) # Absolute path. + ac_srcdir=$srcdir$ac_dir_suffix; + ac_top_srcdir=$srcdir ;; + *) # Relative path. + ac_srcdir=$ac_top_builddir$srcdir$ac_dir_suffix + ac_top_srcdir=$ac_top_builddir$srcdir ;; +esac +# Don't blindly perform a `cd "$ac_dir"/$ac_foo && pwd` since $ac_foo can be +# absolute. +ac_abs_builddir=`cd "$ac_dir" && cd $ac_builddir && pwd` +ac_abs_top_builddir=`cd "$ac_dir" && cd ${ac_top_builddir}. && pwd` +ac_abs_srcdir=`cd "$ac_dir" && cd $ac_srcdir && pwd` +ac_abs_top_srcdir=`cd "$ac_dir" && cd $ac_top_srcdir && pwd` - echo creating "$ac_file" - rm -f "$ac_file" - configure_input="Generated automatically from `echo $ac_file_in|sed 's%.*/%%'` by configure." - case "$ac_file" in - *Makefile*) ac_comsub="1i\\ -# $configure_input" ;; - *) ac_comsub= ;; - esac - ac_file_inputs=`echo $ac_file_in|sed -e "s%^%$ac_given_srcdir/%" -e "s%:% $ac_given_srcdir/%g"` - sed -e "$ac_comsub -s%@configure_input@%$configure_input%g -s%@srcdir@%$srcdir%g -s%@top_srcdir@%$top_srcdir%g -" $ac_file_inputs | (eval "$ac_sed_cmds") > $ac_file -fi; done -rm -f conftest.s* -EOF -cat >> $CONFIG_STATUS <<EOF + if test x"$ac_file" != x-; then + { echo "$as_me:$LINENO: creating $ac_file" >&5 +echo "$as_me: creating $ac_file" >&6;} + rm -f "$ac_file" + fi + # Let's still pretend it is `configure' which instantiates (i.e., don't + # use $as_me), people would be surprised to read: + # /* config.h. Generated by config.status. */ + if test x"$ac_file" = x-; then + configure_input= + else + configure_input="$ac_file. " + fi + configure_input=$configure_input"Generated from `echo $ac_file_in | + sed 's,.*/,,'` by configure." + + # First look for the input files in the build tree, otherwise in the + # src tree. + ac_file_inputs=`IFS=: + for f in $ac_file_in; do + case $f in + -) echo $tmp/stdin ;; + [\\/$]*) + # Absolute (can't be DOS-style, as IFS=:) + test -f "$f" || { { echo "$as_me:$LINENO: error: cannot find input file: $f" >&5 +echo "$as_me: error: cannot find input file: $f" >&2;} + { (exit 1); exit 1; }; } + echo $f;; + *) # Relative + if test -f "$f"; then + # Build tree + echo $f + elif test -f "$srcdir/$f"; then + # Source tree + echo $srcdir/$f + else + # /dev/null tree + { { echo "$as_me:$LINENO: error: cannot find input file: $f" >&5 +echo "$as_me: error: cannot find input file: $f" >&2;} + { (exit 1); exit 1; }; } + fi;; + esac + done` || { (exit 1); exit 1; } +_ACEOF +cat >>$CONFIG_STATUS <<_ACEOF + sed "$ac_vpsub +$extrasub +_ACEOF +cat >>$CONFIG_STATUS <<\_ACEOF +:t +/@[a-zA-Z_][a-zA-Z_0-9]*@/!b +s,@configure_input@,$configure_input,;t t +s,@srcdir@,$ac_srcdir,;t t +s,@abs_srcdir@,$ac_abs_srcdir,;t t +s,@top_srcdir@,$ac_top_srcdir,;t t +s,@abs_top_srcdir@,$ac_abs_top_srcdir,;t t +s,@builddir@,$ac_builddir,;t t +s,@abs_builddir@,$ac_abs_builddir,;t t +s,@top_builddir@,$ac_top_builddir,;t t +s,@abs_top_builddir@,$ac_abs_top_builddir,;t t +" $ac_file_inputs | (eval "$ac_sed_cmds") >$tmp/out + rm -f $tmp/stdin + if test x"$ac_file" != x-; then + mv $tmp/out $ac_file + else + cat $tmp/out + rm -f $tmp/out + fi + +done +_ACEOF -EOF -cat >> $CONFIG_STATUS <<\EOF +cat >>$CONFIG_STATUS <<\_ACEOF -exit 0 -EOF +{ (exit 0); exit 0; } +_ACEOF chmod +x $CONFIG_STATUS -rm -fr confdefs* $ac_clean_files -test "$no_create" = yes || ${CONFIG_SHELL-/bin/sh} $CONFIG_STATUS || exit 1 +ac_clean_files=$ac_clean_files_save + + +# configure is writing to config.log, and then calls config.status. +# config.status does its own redirection, appending to config.log. +# Unfortunately, on DOS this fails, as config.log is still kept open +# by configure, so config.status won't be able to write to it; its +# output is simply discarded. So we exec the FD to /dev/null, +# effectively closing config.log, so it can be properly (re)opened and +# appended to by config.status. When coming back to configure, we +# need to make the FD available again. +if test "$no_create" != yes; then + ac_cs_success=: + ac_config_status_args= + test "$silent" = yes && + ac_config_status_args="$ac_config_status_args --quiet" + exec 5>/dev/null + $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false + exec 5>>config.log + # Use ||, not &&, to avoid exiting from the if with $? = 1, which + # would make configure fail if this is the last instruction. + $ac_cs_success || { (exit 1); exit 1; } +fi diff --git a/docs/faq/FAQ-ClientApp.html b/docs/faq/FAQ-ClientApp.html index 6e37fbcba5..351e88acfa 100644 --- a/docs/faq/FAQ-ClientApp.html +++ b/docs/faq/FAQ-ClientApp.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter3.Specific client application problems</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-Install.html" title="Chapter2.Compiling and installing Samba on a Unix host"><link rel="next" href="FAQ-errors.html" title="Chapter4.Common errors"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter3.Specific client application problems</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-Install.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-errors.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-ClientApp"></a>Chapter3.Specific client application problems</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-ClientApp.html#id2815105">MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"</a></dt><dt><a href="FAQ-ClientApp.html#id2815137">How to use a Samba share as an administrative share for MS Office, etc.</a></dt><dt><a href="FAQ-ClientApp.html#id2882001">Microsoft Access database opening errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2815105"></a>MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter3.Specific client application problems</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-Install.html" title="Chapter2.Compiling and installing Samba on a Unix host"><link rel="next" href="FAQ-errors.html" title="Chapter4.Common errors"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter3.Specific client application problems</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-Install.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-errors.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-ClientApp"></a>Chapter3.Specific client application problems</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-ClientApp.html#id2816576">MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"</a></dt><dt><a href="FAQ-ClientApp.html#id2815108">How to use a Samba share as an administrative share for MS Office, etc.</a></dt><dt><a href="FAQ-ClientApp.html#id2816253">Microsoft Access database opening errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816576"></a>MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"</h2></div></div><div></div></div><p> When installing MS Office on a Samba drive for which you have admin user permissions, ie. admin users = username, you will find the setup program unable to complete the installation. @@ -10,7 +11,7 @@ rdonly by trying to open it for writing. Admin users can always open a file for writing, as they run as root. You just have to install as a non-admin user and then use "chown -R" to fix the owner. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2815137"></a>How to use a Samba share as an administrative share for MS Office, etc.</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2815108"></a>How to use a Samba share as an administrative share for MS Office, etc.</h2></div></div><div></div></div><p> Microsoft Office products can be installed as an administrative installation from which the application can either be run off the administratively installed product that resides on a shared resource, or from which that product can be @@ -45,7 +46,7 @@ set the following parameters on the share containing it: public = yes </pre></li><li><p>Now you are ready to run the setup program from the Microsoft Windows workstation as follows: <b class="command">\\"Server_Name"\MSOP95\msoffice\setup</b> -</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2882001"></a>Microsoft Access database opening errors</h2></div></div><div></div></div><p> +</p></li></ul></div></div><div xmlns:ns3="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816253"></a>Microsoft Access database opening errors</h2></div></div><div></div></div><p> Here are some notes on running MS-Access on a Samba drive from <a href="stefank@esi.com.au" target="_top">Stefan Kjellberg</a> -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Opening a database in 'exclusive' mode does NOT work. Samba ignores r/w/share modes on file open.</td></tr><tr><td>Make sure that you open the database as 'shared' and to 'lock modified records'</td></tr><tr><td>Of course locking must be enabled for the particular share (smb.conf)</td></tr></table><p> -</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="FAQ-Install.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-faq.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="FAQ-errors.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter2.Compiling and installing Samba on a Unix host</td><td width="20%" align="center"><a accesskey="h" href="samba-faq.html">Home</a></td><td width="40%" align="right" valign="top">Chapter4.Common errors</td></tr></table></div></body></html> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Opening a database in 'exclusive' mode does NOT work. Samba ignores r/w/share modes on file open.</td></tr><tr><td>Make sure that you open the database as 'shared' and to 'lock modified records'</td></tr><tr><td>Of course locking must be enabled for the particular share (smb.conf)</td></tr></table><ns3:p> +</ns3:p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="FAQ-Install.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-faq.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="FAQ-errors.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter2.Compiling and installing Samba on a Unix host</td><td width="20%" align="center"><a accesskey="h" href="samba-faq.html">Home</a></td><td width="40%" align="right" valign="top">Chapter4.Common errors</td></tr></table></div></body></html> diff --git a/docs/faq/FAQ-Install.html b/docs/faq/FAQ-Install.html index 0bb21ed543..94a80b3953 100644 --- a/docs/faq/FAQ-Install.html +++ b/docs/faq/FAQ-Install.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter2.Compiling and installing Samba on a Unix host</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-general.html" title="Chapter1.General Information"><link rel="next" href="FAQ-ClientApp.html" title="Chapter3.Specific client application problems"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter2.Compiling and installing Samba on a Unix host</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-general.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-ClientApp.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-Install"></a>Chapter2.Compiling and installing Samba on a Unix host</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-Install.html#id2816137">My client reports "cannot locate specified share name" or similar</a></dt><dt><a href="FAQ-Install.html#id2816189">Why are my file's timestamps off by an hour, or by a few hours?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816137"></a>My client reports "cannot locate specified share name" or similar</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter2.Compiling and installing Samba on a Unix host</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-general.html" title="Chapter1.General Information"><link rel="next" href="FAQ-ClientApp.html" title="Chapter3.Specific client application problems"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter2.Compiling and installing Samba on a Unix host</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-general.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-ClientApp.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-Install"></a>Chapter2.Compiling and installing Samba on a Unix host</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-Install.html#id2816194">My client reports "cannot locate specified share name" or similar</a></dt><dt><a href="FAQ-Install.html#id2816881">Why are my file's timestamps off by an hour, or by a few hours?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816194"></a>My client reports "cannot locate specified share name" or similar</h2></div></div><div></div></div><p> This message indicates that your client CAN locate the specified server, which is a good start, but that it cannot find a service of the name you gave. @@ -7,7 +8,7 @@ The first step is to check the exact name of the service you are trying to connect to (consult your system administrator). Assuming it exists and you specified it correctly (read your client's docs on how to specify a service name correctly), read on: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Many clients cannot accept or use service names longer than eight characters.</td></tr><tr><td>Many clients cannot accept or use service names containing spaces.</td></tr><tr><td>Some servers (not Samba though) are case sensitive with service names.</td></tr><tr><td>Some clients force service names into upper case.</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816189"></a>Why are my file's timestamps off by an hour, or by a few hours?</h2></div></div><div></div></div><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Many clients cannot accept or use service names longer than eight characters.</td></tr><tr><td>Many clients cannot accept or use service names containing spaces.</td></tr><tr><td>Some servers (not Samba though) are case sensitive with service names.</td></tr><tr><td>Some clients force service names into upper case.</td></tr></table></div><div xmlns:ns2="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816881"></a>Why are my file's timestamps off by an hour, or by a few hours?</h2></div></div><div></div></div><p> This is from Paul Eggert eggert@twinsun.com. </p><p> Most likely it's a problem with your time zone settings. @@ -15,12 +16,12 @@ Most likely it's a problem with your time zone settings. Internally, Samba maintains time in traditional Unix format, namely, the number of seconds since 1970-01-01 00:00:00 Universal Time (or ``GMT''), not counting leap seconds. -</p><p> +</p><ns2:p> On the server side, Samba uses the Unix TZ variable to convert internal timestamps to and from local time. So on the server side, there are two things to get right. -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>The Unix system clock must have the correct Universal time. Use the shell command "sh -c 'TZ=UTC0 date'" to check this.</td></tr><tr><td>The TZ environment variable must be set on the server before Samba is invoked. The details of this depend on the server OS, but typically you must edit a file whose name is /etc/TIMEZONE or /etc/default/init, or run the command `zic -l'.</td></tr></table><p> -</p><p>TZ must have the correct value.</p><p> +</ns2:p><table class="simplelist" border="0" summary="Simple list"><tr><td>The Unix system clock must have the correct Universal time. Use the shell command "sh -c 'TZ=UTC0 date'" to check this.</td></tr><tr><td>The TZ environment variable must be set on the server before Samba is invoked. The details of this depend on the server OS, but typically you must edit a file whose name is /etc/TIMEZONE or /etc/default/init, or run the command `zic -l'.</td></tr></table><ns2:p> +</ns2:p><p>TZ must have the correct value.</p><p> If possible, use geographical time zone settings (e.g. TZ='America/Los_Angeles' or perhaps TZ=':US/Pacific'). These are supported by most @@ -29,16 +30,16 @@ more accurate for historical timestamps. If your operating system has out-of-date tables, you should be able to update them from the public domain time zone tables at <a href="ftp://elsie.nci.nih.gov/pub/" target="_top">ftp://elsie.nci.nih.gov/pub/</a>. -</p><p>If your system does not support geographical timezone +</p><ns2:p>If your system does not support geographical timezone settings, you must use a Posix-style TZ strings, e.g. TZ='PST8PDT,M4.1.0/2,M10.5.0/2' for US Pacific time. Posix TZ strings can take the following form (with optional items in brackets): -</p><pre class="programlisting"> +</ns2:p><pre class="programlisting"> StdOffset[Dst[Offset],Date/Time,Date/Time] -</pre><p> +</pre><ns2:p> where: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>`Std' is the standard time designation (e.g. `PST').</td></tr><tr><td>`Offset' is the number of hours behind UTC (e.g. `8'). +</ns2:p><table class="simplelist" border="0" summary="Simple list"><tr><td>`Std' is the standard time designation (e.g. `PST').</td></tr><tr><td>`Offset' is the number of hours behind UTC (e.g. `8'). Prepend a `-' if you are ahead of UTC, and append `:30' if you are at a half-hour offset. Omit all the remaining items if you do not use @@ -52,8 +53,8 @@ time starts and ends. The format for a date is of the nth week of the mth month, where week 5 means the last such day in the month. The format for a time is [h]h[:mm[:ss]], using a 24-hour clock. -</td></tr></table><p> -</p><p> +</td></tr></table><ns2:p> +</ns2:p><p> Other Posix string formats are allowed but you don't want to know about them.</p><p> On the client side, you must make sure that your client's clock and diff --git a/docs/faq/FAQ-errors.html b/docs/faq/FAQ-errors.html index f0c4b9aa0c..5f9a5f54b4 100644 --- a/docs/faq/FAQ-errors.html +++ b/docs/faq/FAQ-errors.html @@ -1,9 +1,10 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter4.Common errors</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-ClientApp.html" title="Chapter3.Specific client application problems"><link rel="next" href="FAQ-features.html" title="Chapter5.Features"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter4.Common errors</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-ClientApp.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-features.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-errors"></a>Chapter4.Common errors</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-errors.html#id2816075">Not listening for calling name</a></dt><dt><a href="FAQ-errors.html#id2815985">System Error 1240</a></dt><dt><a href="FAQ-errors.html#id2816025">smbclient ignores -N !</a></dt><dt><a href="FAQ-errors.html#id2814553">The data on the CD-Drive I've shared seems to be corrupted!</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816075"></a>Not listening for calling name</h2></div></div><div></div></div><p> -</p><pre class="programlisting"> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter4.Common errors</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-ClientApp.html" title="Chapter3.Specific client application problems"><link rel="next" href="FAQ-features.html" title="Chapter5.Features"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter4.Common errors</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-ClientApp.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-features.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-errors"></a>Chapter4.Common errors</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-errors.html#id2815002">Not listening for calling name</a></dt><dt><a href="FAQ-errors.html#id2816347">System Error 1240</a></dt><dt><a href="FAQ-errors.html#id2816385">smbclient ignores -N !</a></dt><dt><a href="FAQ-errors.html#id2816438">The data on the CD-Drive I've shared seems to be corrupted!</a></dt></dl></div><div xmlns:ns4="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2815002"></a>Not listening for calling name</h2></div></div><div></div></div><ns4:p> +</ns4:p><pre class="programlisting"> Session request failed (131,129) with myname=HOBBES destname=CALVIN Not listening for calling name -</pre><p> -</p><p> +</pre><ns4:p> +</ns4:p><p> If you get this when talking to a Samba box then it means that your global "hosts allow" or "hosts deny" settings are causing the Samba server to refuse the connection. @@ -14,17 +15,17 @@ global section of smb.conf. It can also be a problem with reverse DNS lookups not functioning correctly, leading to the remote host identity not being able to be confirmed, but that is less likely. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2815985"></a>System Error 1240</h2></div></div><div></div></div><p> +</p></div><div xmlns:ns5="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816347"></a>System Error 1240</h2></div></div><div></div></div><p> System error 1240 means that the client is refusing to talk to a non-encrypting server. Microsoft changed WinNT in service pack 3 to refuse to connect to servers that do not support SMB password encryption. -</p><p>There are two main solutions: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>enable SMB password encryption in Samba. See the encryption part of +</p><ns5:p>There are two main solutions: +</ns5:p><table class="simplelist" border="0" summary="Simple list"><tr><td>enable SMB password encryption in Samba. See the encryption part of the samba HOWTO Collection</td></tr><tr><td>disable this behaviour in NT. See the section about Windows NT in the chapter "Portability" of the samba HOWTO collection -</td></tr></table><p> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816025"></a>smbclient ignores -N !</h2></div></div><div></div></div><p> +</td></tr></table><ns5:p> +</ns5:p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816385"></a>smbclient ignores -N !</h2></div></div><div></div></div><p> “<span class="quote">When getting the list of shares available on a host using the command <b class="command">smbclient -N -L</b> the program always prompts for the password if the server is a Samba server. @@ -42,7 +43,7 @@ This will set both the username and password to null, which is an anonymous login for SMB. Using -N would only set the password to null, and this is not accepted as an anonymous login for most SMB servers. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2814553"></a>The data on the CD-Drive I've shared seems to be corrupted!</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816438"></a>The data on the CD-Drive I've shared seems to be corrupted!</h2></div></div><div></div></div><p> Some OSes (notably Linux) default to auto detection of file type on cdroms and do cr/lf translation. This is a very bad idea when use with Samba. It causes all sorts of stuff ups. diff --git a/docs/faq/FAQ-features.html b/docs/faq/FAQ-features.html index 75faf8d9bc..29e2b1d2a3 100644 --- a/docs/faq/FAQ-features.html +++ b/docs/faq/FAQ-features.html @@ -1,21 +1,22 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter5.Features</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-errors.html" title="Chapter4.Common errors"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter5.Features</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-errors.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-features"></a>Chapter5.Features</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-features.html#id2814838">How can I use samba as a fax server?</a></dt><dd><dl><dt><a href="FAQ-features.html#id2814785">Tools for printing faxes</a></dt><dt><a href="FAQ-features.html#id2882696">Making the fax-server</a></dt><dt><a href="FAQ-features.html#id2882789">Installing the client drivers</a></dt><dt><a href="FAQ-features.html#id2882874">Example smb.conf</a></dt></dl></dd><dt><a href="FAQ-features.html#id2882898">Samba doesn't work well together with DHCP!</a></dt><dt><a href="FAQ-features.html#id2883025">How can I assign NetBIOS names to clients with DHCP?</a></dt><dt><a href="FAQ-features.html#id2883072">How do I convert between unix and dos text formats?</a></dt><dt><a href="FAQ-features.html#id2883101">Does samba have wins replication support?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2814838"></a>How can I use samba as a fax server?</h2></div></div><div></div></div><p>Contributor: <a href="mailto:zuber@berlin.snafu.de" target="_top">Gerhard Zuber</a></p><p>Requirements: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>UNIX box (Linux preferred) with SAMBA and a faxmodem</td></tr><tr><td>ghostscript package</td></tr><tr><td>mgetty+sendfax package</td></tr><tr><td>pbm package (portable bitmap tools)</td></tr></table><p> -</p><p>First, install and configure the required packages. Be sure to read the mgetty+sendfax -manual carefully.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2814785"></a>Tools for printing faxes</h3></div></div><div></div></div><p>Your incomed faxes are in: +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter5.Features</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-errors.html" title="Chapter4.Common errors"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter5.Features</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-errors.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-features"></a>Chapter5.Features</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-features.html#id2816464">How can I use samba as a fax server?</a></dt><dd><dl><dt><a href="FAQ-features.html#id2814278">Tools for printing faxes</a></dt><dt><a href="FAQ-features.html#id2814327">Making the fax-server</a></dt><dt><a href="FAQ-features.html#id2814420">Installing the client drivers</a></dt><dt><a href="FAQ-features.html#id2814505">Example smb.conf</a></dt></dl></dd><dt><a href="FAQ-features.html#id2814704">Samba doesn't work well together with DHCP!</a></dt><dt><a href="FAQ-features.html#id2814830">How can I assign NetBIOS names to clients with DHCP?</a></dt><dt><a href="FAQ-features.html#id2814877">How do I convert between unix and dos text formats?</a></dt><dt><a href="FAQ-features.html#id2814906">Does samba have wins replication support?</a></dt></dl></div><div xmlns:ns6="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816464"></a>How can I use samba as a fax server?</h2></div></div><div></div></div><p>Contributor: <a href="mailto:zuber@berlin.snafu.de" target="_top">Gerhard Zuber</a></p><ns6:p>Requirements: +</ns6:p><table class="simplelist" border="0" summary="Simple list"><tr><td>UNIX box (Linux preferred) with SAMBA and a faxmodem</td></tr><tr><td>ghostscript package</td></tr><tr><td>mgetty+sendfax package</td></tr><tr><td>pbm package (portable bitmap tools)</td></tr></table><ns6:p> +</ns6:p><p>First, install and configure the required packages. Be sure to read the mgetty+sendfax +manual carefully.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2814278"></a>Tools for printing faxes</h3></div></div><div></div></div><p>Your incomed faxes are in: <tt class="filename">/var/spool/fax/incoming</tt>. Print it with:</p><pre class="programlisting"> for i in * do g3cat $i | g3tolj | lpr -P hp done -</pre><p> -</p><p> +</pre><ns6:p> +</ns6:p><p> g3cat is in the tools-section, g3tolj is in the contrib-section for printing to HP lasers. </p><p> If you want to produce files for displaying and printing with Windows, use some tools from the pbm-package like the following command: <b class="command">g3cat $i | g3topbm - | ppmtopcx - >$i.pcx</b> and view it with your favourite Windows tool (maybe paintbrush) -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882696"></a>Making the fax-server</h3></div></div><div></div></div><p>fetch the file <tt class="filename">mgetty+sendfax/frontends/winword/faxfilter</tt> and place it in <tt class="filename">/usr/local/etc/mgetty+sendfax/</tt>(replace /usr/local/ with whatever place you installed mgetty+sendfax)</p><p>prepare your faxspool file as mentioned in this file +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2814327"></a>Making the fax-server</h3></div></div><div></div></div><p>fetch the file <tt class="filename">mgetty+sendfax/frontends/winword/faxfilter</tt> and place it in <tt class="filename">/usr/local/etc/mgetty+sendfax/</tt>(replace /usr/local/ with whatever place you installed mgetty+sendfax)</p><p>prepare your faxspool file as mentioned in this file edit fax/faxspool.in and reinstall or change the final /usr/local/bin/faxspool too. </p><pre class="programlisting"> @@ -24,16 +25,16 @@ if [ "$user" = "root" -o "$user" = "fax" </pre><p>find the first line and change it to the second.</p><p> make sure you have pbmtext (from the pbm-package). This is needed for creating the small header line on each page. -</p><p>Prepare your faxheader <tt class="filename">/usr/local/etc/mgetty+sendfax/faxheader</tt></p><p> +</p><p>Prepare your faxheader <tt class="filename">/usr/local/etc/mgetty+sendfax/faxheader</tt></p><ns6:p> Edit your /etc/printcap file: -</p><pre class="programlisting"> +</ns6:p><pre class="programlisting"> # FAX lp3|fax:\ :lp=/dev/null:\ :sd=/usr/spool/lp3:\ :if=/usr/local/etc/mgetty+sendfax/faxfilter:sh:sf:mx#0:\ :lf=/usr/spool/lp3/fax-log: -</pre><p>Now, edit your <tt class="filename">smb.conf</tt> so you have a smb based printer named "fax"</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882789"></a>Installing the client drivers</h3></div></div><div></div></div><p> +</pre><p>Now, edit your <tt class="filename">smb.conf</tt> so you have a smb based printer named "fax"</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2814420"></a>Installing the client drivers</h3></div></div><div></div></div><p> Now you have a printer called "fax" which can be used via TCP/IP-printing (lpd-system) or via SAMBA (windows printing). </p><p> @@ -54,17 +55,17 @@ your address, your phone/fax-number. </p><p> It carries also the recipient, his address and his *** fax number ***. Now here is the trick: -</p><p> +</p><ns6:p> Use the text: -</p><pre class="programlisting"> +</ns6:p><pre class="programlisting"> Fax-Nr: 123456789 -</pre><p> +</pre><ns6:p> as the recipients fax-number. Make sure this text does not occur in regular text ! Make sure this text is not broken by formatting information, e.g. format it as a single entity. (Windows Write and Win95 Wordpad are functional, maybe newer versions of Winword are breaking formatting information). -</p><p> +</ns6:p><p> The trick is that postscript output is human readable and the faxfilter program scans the text for this pattern and uses the found number as the fax-destination-number. @@ -72,7 +73,7 @@ uses the found number as the fax-destination-number. Now print your fax through the fax-printer and it will be queued for later transmission. Use faxrunq for sending the queue out. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882874"></a>Example smb.conf</h3></div></div><div></div></div><pre class="programlisting"> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2814505"></a>Example smb.conf</h3></div></div><div></div></div><pre class="programlisting"> [global] printcap name = /etc/printcap print command = /usr/bin/lpr -r -P %p %s @@ -88,7 +89,7 @@ queue out. create mode = 0700 browseable = yes guest ok = no -</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2882898"></a>Samba doesn't work well together with DHCP!</h2></div></div><div></div></div><p> +</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2814704"></a>Samba doesn't work well together with DHCP!</h2></div></div><div></div></div><p> We wish to help those folks who wish to use the ISC DHCP Server and provide sample configuration settings. Most operating systems today come ship with the ISC DHCP Server. ISC DHCP is available from: @@ -148,7 +149,7 @@ Server provides only a sub-set of rfc1533 functionality this is hardly an issue in those sites that already have a large investment and commitment to Unix systems and technologies. The current state of the art of the DHCP Server specification in covered in rfc2132. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883025"></a>How can I assign NetBIOS names to clients with DHCP?</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2814830"></a>How can I assign NetBIOS names to clients with DHCP?</h2></div></div><div></div></div><p> SMB network clients need to be configured so that all standard TCP/IP name to address resolution works correctly. Once this has been achieved the SMB environment provides additional tools and services that act as helper agents in @@ -163,13 +164,13 @@ This can be done, but needs a few NT registry hacks and you need to be able to speak UNICODE, which is of course no problem for a True Wizzard(tm) :) Instructions on how to do this (including a small util for less capable Wizzards) can be found at -</p><p><a href="http://www.unixtools.org/~nneul/sw/nt/dhcp-netbios-hostname.html" target="_top">http://www.unixtools.org/~nneul/sw/nt/dhcp-netbios-hostname.html</a></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883072"></a>How do I convert between unix and dos text formats?</h2></div></div><div></div></div><p> +</p><p><a href="http://www.unixtools.org/~nneul/sw/nt/dhcp-netbios-hostname.html" target="_top">http://www.unixtools.org/~nneul/sw/nt/dhcp-netbios-hostname.html</a></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2814877"></a>How do I convert between unix and dos text formats?</h2></div></div><div></div></div><p> Jim barry has written an <a href="ftp://samba.org/pub/samba/contributed/fixcrlf.zip" target="_top"> excellent drag-and-drop cr/lf converter for windows</a>. Just drag your file onto the icon and it converts the file. </p><p> The utilities unix2dos and dos2unix(in the mtools package) should do the job under unix. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883101"></a>Does samba have wins replication support?</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2814906"></a>Does samba have wins replication support?</h2></div></div><div></div></div><p> At the time of writing there is currently being worked on a wins replication implementation(wrepld). </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="FAQ-errors.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-faq.html">Up</a></td><td width="40%" align="right"></td></tr><tr><td width="40%" align="left" valign="top">Chapter4.Common errors</td><td width="20%" align="center"><a accesskey="h" href="samba-faq.html">Home</a></td><td width="40%" align="right" valign="top"></td></tr></table></div></body></html> diff --git a/docs/faq/FAQ-general.html b/docs/faq/FAQ-general.html index 4019fb52c6..a0b477eabb 100644 --- a/docs/faq/FAQ-general.html +++ b/docs/faq/FAQ-general.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter1.General Information</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="samba-faq.html" title="Samba FAQ"><link rel="next" href="FAQ-Install.html" title="Chapter2.Compiling and installing Samba on a Unix host"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter1.General Information</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-faq.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-Install.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-general"></a>Chapter1.General Information</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-general.html#id2868051">What do the version numbers mean?</a></dt><dt><a href="FAQ-general.html#id2867958">What platforms are supported?</a></dt><dt><a href="FAQ-general.html#id2816450">How do I subscribe to the Samba Mailing Lists?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868051"></a>What do the version numbers mean?</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter1.General Information</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="samba-faq.html" title="Samba FAQ"><link rel="next" href="FAQ-Install.html" title="Chapter2.Compiling and installing Samba on a Unix host"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter1.General Information</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-faq.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-Install.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FAQ-general"></a>Chapter1.General Information</h2></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-general.html#id2815526">What do the version numbers mean?</a></dt><dt><a href="FAQ-general.html#id2815894">What platforms are supported?</a></dt><dt><a href="FAQ-general.html#id2816167">How do I subscribe to the Samba Mailing Lists?</a></dt></dl></div><div xmlns:ns1="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2815526"></a>What do the version numbers mean?</h2></div></div><div></div></div><p> It is not recommended that you run a version of Samba with the word "alpha" in its name unless you know what you are doing and are willing to do some debugging. Many, many people just get the latest @@ -7,9 +8,9 @@ all means take the plunge and help with the testing and development - but don't install it on your departmental server. Samba is typically very stable and safe, and this is mostly due to the policy of many public releases. -</p><p> +</p><ns1:p> How the scheme works: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>When major changes are made the version number is increased. For +</ns1:p><table class="simplelist" border="0" summary="Simple list"><tr><td>When major changes are made the version number is increased. For example, the transition from 1.9.15 to 1.9.16. However, this version number will not appear immediately and people should continue to use 1.9.15 for production systems (see next point.)</td></tr><tr><td>Just after major changes are made the software is considered @@ -19,11 +20,11 @@ doing. The "alpha" in the filename will hopefully scare off those who are just looking for the latest version to install.</td></tr><tr><td>When the release manager, currently Jerry, thinks that the alphas have stabilised to the point where he would recommend new users install it, he renames it to the same version number without the alpha, for example 1.9.16.</td></tr><tr><td>Inevitably bugs are found in the "stable" releases and minor patch -levels are released which give us the pXX series, for example 1.9.16p2.</td></tr></table><p> -</p><p> +levels are released which give us the pXX series, for example 1.9.16p2.</td></tr></table><ns1:p> +</ns1:p><ns1:p> So the progression goes: -</p><pre class="programlisting"> +</ns1:p><pre class="programlisting"> 1.9.15p7 (production) 1.9.15p8 (production) 1.9.16alpha1 (test sites only) @@ -31,17 +32,17 @@ So the progression goes: 1.9.16alpha20 (test sites only) 1.9.16 (production) 1.9.16p1 (production) -</pre><p> -</p><p> +</pre><ns1:p> +</ns1:p><p> The above system means that whenever someone looks at the samba ftp site they will be able to grab the highest numbered release without an alpha in the name and be sure of getting the current recommended version. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867958"></a>What platforms are supported?</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2815894"></a>What platforms are supported?</h2></div></div><div></div></div><p> Many different platforms have run Samba successfully. The platforms most widely used and thus best tested are Linux and SunOS.</p><p> At time of writing, there is support (or has been support for in earlier versions): -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>A/UX 3.0</td></tr><tr><td>AIX</td></tr><tr><td>Altos Series 386/1000</td></tr><tr><td>Amiga</td></tr><tr><td>Apollo Domain/OS sr10.3</td></tr><tr><td>BSDI </td></tr><tr><td>B.O.S. (Bull Operating System)</td></tr><tr><td>Cray, Unicos 8.0</td></tr><tr><td>Convex</td></tr><tr><td>DGUX. </td></tr><tr><td>DNIX.</td></tr><tr><td>FreeBSD</td></tr><tr><td>HP-UX</td></tr><tr><td>Intergraph. </td></tr><tr><td>Linux with/without shadow passwords and quota</td></tr><tr><td>LYNX 2.3.0</td></tr><tr><td>MachTen (a unix like system for Macintoshes)</td></tr><tr><td>Motorola 88xxx/9xx range of machines</td></tr><tr><td>NetBSD</td></tr><tr><td>NEXTSTEP Release 2.X, 3.0 and greater (including OPENSTEP for Mach).</td></tr><tr><td>OS/2 using EMX 0.9b</td></tr><tr><td>OSF1</td></tr><tr><td>QNX 4.22</td></tr><tr><td>RiscIX. </td></tr><tr><td>RISCOs 5.0B</td></tr><tr><td>SEQUENT. </td></tr><tr><td>SCO (including: 3.2v2, European dist., OpenServer 5)</td></tr><tr><td>SGI.</td></tr><tr><td>SMP_DC.OSx v1.1-94c079 on Pyramid S series</td></tr><tr><td>SONY NEWS, NEWS-OS (4.2.x and 6.1.x)</td></tr><tr><td>SUNOS 4</td></tr><tr><td>SUNOS 5.2, 5.3, and 5.4 (Solaris 2.2, 2.3, and '2.4 and later')</td></tr><tr><td>Sunsoft ISC SVR3V4</td></tr><tr><td>SVR4</td></tr><tr><td>System V with some berkely extensions (Motorola 88k R32V3.2).</td></tr><tr><td>ULTRIX.</td></tr><tr><td>UNIXWARE</td></tr><tr><td>UXP/DS</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816450"></a>How do I subscribe to the Samba Mailing Lists?</h2></div></div><div></div></div><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td>A/UX 3.0</td></tr><tr><td>AIX</td></tr><tr><td>Altos Series 386/1000</td></tr><tr><td>Amiga</td></tr><tr><td>Apollo Domain/OS sr10.3</td></tr><tr><td>BSDI </td></tr><tr><td>B.O.S. (Bull Operating System)</td></tr><tr><td>Cray, Unicos 8.0</td></tr><tr><td>Convex</td></tr><tr><td>DGUX. </td></tr><tr><td>DNIX.</td></tr><tr><td>FreeBSD</td></tr><tr><td>HP-UX</td></tr><tr><td>Intergraph. </td></tr><tr><td>Linux with/without shadow passwords and quota</td></tr><tr><td>LYNX 2.3.0</td></tr><tr><td>MachTen (a unix like system for Macintoshes)</td></tr><tr><td>Motorola 88xxx/9xx range of machines</td></tr><tr><td>NetBSD</td></tr><tr><td>NEXTSTEP Release 2.X, 3.0 and greater (including OPENSTEP for Mach).</td></tr><tr><td>OS/2 using EMX 0.9b</td></tr><tr><td>OSF1</td></tr><tr><td>QNX 4.22</td></tr><tr><td>RiscIX. </td></tr><tr><td>RISCOs 5.0B</td></tr><tr><td>SEQUENT. </td></tr><tr><td>SCO (including: 3.2v2, European dist., OpenServer 5)</td></tr><tr><td>SGI.</td></tr><tr><td>SMP_DC.OSx v1.1-94c079 on Pyramid S series</td></tr><tr><td>SONY NEWS, NEWS-OS (4.2.x and 6.1.x)</td></tr><tr><td>SUNOS 4</td></tr><tr><td>SUNOS 5.2, 5.3, and 5.4 (Solaris 2.2, 2.3, and '2.4 and later')</td></tr><tr><td>Sunsoft ISC SVR3V4</td></tr><tr><td>SVR4</td></tr><tr><td>System V with some berkely extensions (Motorola 88k R32V3.2).</td></tr><tr><td>ULTRIX.</td></tr><tr><td>UNIXWARE</td></tr><tr><td>UXP/DS</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2816167"></a>How do I subscribe to the Samba Mailing Lists?</h2></div></div><div></div></div><p> Look at <a href="http://samba.org/samba/archives.html" target="_top">the samba mailing list page</a> </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="samba-faq.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-faq.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="FAQ-Install.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Samba FAQ</td><td width="20%" align="center"><a accesskey="h" href="samba-faq.html">Home</a></td><td width="40%" align="right" valign="top">Chapter2.Compiling and installing Samba on a Unix host</td></tr></table></div></body></html> diff --git a/docs/faq/samba-faq.html b/docs/faq/samba-faq.html index 368b4b6e41..df6205c138 100644 --- a/docs/faq/samba-faq.html +++ b/docs/faq/samba-faq.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Samba FAQ</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="next" href="FAQ-general.html" title="Chapter1.General Information"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Samba FAQ</th></tr><tr><td width="20%" align="left"></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-general.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-FAQ"></a>Samba FAQ</h1></div><div><div class="author"><h3 class="author"><span class="surname">Samba Team</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div><hr></div><div class="dedication" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2881182"></a>Dedication</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Samba FAQ</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="next" href="FAQ-general.html" title="Chapter1.General Information"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Samba FAQ</th></tr><tr><td width="20%" align="left"></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-general.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-FAQ"></a>Samba FAQ</h1></div><div><div class="author"><h3 class="author"><span class="surname">Samba Team</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div><hr></div><div class="dedication" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2881437"></a>Dedication</h2></div></div><div></div></div><p> This is the Frequently Asked Questions (FAQ) document for Samba, the free and very popular SMB server product. An SMB server allows file and printer connections from clients such as Windows, @@ -7,4 +8,4 @@ corrections to the samba documentation mailinglist at <a href="mailto:samba-doc@samba.org" target="_top">samba-doc@samba.org</a>. This FAQ was based on the old Samba FAQ by Dan Shearer and Paul Blackman, and the old samba text documents which were mostly written by John Terpstra. -</p></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="FAQ-general.html">General Information</a></dt><dd><dl><dt><a href="FAQ-general.html#id2868051">What do the version numbers mean?</a></dt><dt><a href="FAQ-general.html#id2867958">What platforms are supported?</a></dt><dt><a href="FAQ-general.html#id2816450">How do I subscribe to the Samba Mailing Lists?</a></dt></dl></dd><dt>2. <a href="FAQ-Install.html">Compiling and installing Samba on a Unix host</a></dt><dd><dl><dt><a href="FAQ-Install.html#id2816137">My client reports "cannot locate specified share name" or similar</a></dt><dt><a href="FAQ-Install.html#id2816189">Why are my file's timestamps off by an hour, or by a few hours?</a></dt></dl></dd><dt>3. <a href="FAQ-ClientApp.html">Specific client application problems</a></dt><dd><dl><dt><a href="FAQ-ClientApp.html#id2815105">MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"</a></dt><dt><a href="FAQ-ClientApp.html#id2815137">How to use a Samba share as an administrative share for MS Office, etc.</a></dt><dt><a href="FAQ-ClientApp.html#id2882001">Microsoft Access database opening errors</a></dt></dl></dd><dt>4. <a href="FAQ-errors.html">Common errors</a></dt><dd><dl><dt><a href="FAQ-errors.html#id2816075">Not listening for calling name</a></dt><dt><a href="FAQ-errors.html#id2815985">System Error 1240</a></dt><dt><a href="FAQ-errors.html#id2816025">smbclient ignores -N !</a></dt><dt><a href="FAQ-errors.html#id2814553">The data on the CD-Drive I've shared seems to be corrupted!</a></dt></dl></dd><dt>5. <a href="FAQ-features.html">Features</a></dt><dd><dl><dt><a href="FAQ-features.html#id2814838">How can I use samba as a fax server?</a></dt><dd><dl><dt><a href="FAQ-features.html#id2814785">Tools for printing faxes</a></dt><dt><a href="FAQ-features.html#id2882696">Making the fax-server</a></dt><dt><a href="FAQ-features.html#id2882789">Installing the client drivers</a></dt><dt><a href="FAQ-features.html#id2882874">Example smb.conf</a></dt></dl></dd><dt><a href="FAQ-features.html#id2882898">Samba doesn't work well together with DHCP!</a></dt><dt><a href="FAQ-features.html#id2883025">How can I assign NetBIOS names to clients with DHCP?</a></dt><dt><a href="FAQ-features.html#id2883072">How do I convert between unix and dos text formats?</a></dt><dt><a href="FAQ-features.html#id2883101">Does samba have wins replication support?</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"></td><td width="20%" align="center"></td><td width="40%" align="right"><a accesskey="n" href="FAQ-general.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"></td><td width="20%" align="center"></td><td width="40%" align="right" valign="top">Chapter1.General Information</td></tr></table></div></body></html> +</p></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="FAQ-general.html">General Information</a></dt><dd><dl><dt><a href="FAQ-general.html#id2815526">What do the version numbers mean?</a></dt><dt><a href="FAQ-general.html#id2815894">What platforms are supported?</a></dt><dt><a href="FAQ-general.html#id2816167">How do I subscribe to the Samba Mailing Lists?</a></dt></dl></dd><dt>2. <a href="FAQ-Install.html">Compiling and installing Samba on a Unix host</a></dt><dd><dl><dt><a href="FAQ-Install.html#id2816194">My client reports "cannot locate specified share name" or similar</a></dt><dt><a href="FAQ-Install.html#id2816881">Why are my file's timestamps off by an hour, or by a few hours?</a></dt></dl></dd><dt>3. <a href="FAQ-ClientApp.html">Specific client application problems</a></dt><dd><dl><dt><a href="FAQ-ClientApp.html#id2816576">MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"</a></dt><dt><a href="FAQ-ClientApp.html#id2815108">How to use a Samba share as an administrative share for MS Office, etc.</a></dt><dt><a href="FAQ-ClientApp.html#id2816253">Microsoft Access database opening errors</a></dt></dl></dd><dt>4. <a href="FAQ-errors.html">Common errors</a></dt><dd><dl><dt><a href="FAQ-errors.html#id2815002">Not listening for calling name</a></dt><dt><a href="FAQ-errors.html#id2816347">System Error 1240</a></dt><dt><a href="FAQ-errors.html#id2816385">smbclient ignores -N !</a></dt><dt><a href="FAQ-errors.html#id2816438">The data on the CD-Drive I've shared seems to be corrupted!</a></dt></dl></dd><dt>5. <a href="FAQ-features.html">Features</a></dt><dd><dl><dt><a href="FAQ-features.html#id2816464">How can I use samba as a fax server?</a></dt><dd><dl><dt><a href="FAQ-features.html#id2814278">Tools for printing faxes</a></dt><dt><a href="FAQ-features.html#id2814327">Making the fax-server</a></dt><dt><a href="FAQ-features.html#id2814420">Installing the client drivers</a></dt><dt><a href="FAQ-features.html#id2814505">Example smb.conf</a></dt></dl></dd><dt><a href="FAQ-features.html#id2814704">Samba doesn't work well together with DHCP!</a></dt><dt><a href="FAQ-features.html#id2814830">How can I assign NetBIOS names to clients with DHCP?</a></dt><dt><a href="FAQ-features.html#id2814877">How do I convert between unix and dos text formats?</a></dt><dt><a href="FAQ-features.html#id2814906">Does samba have wins replication support?</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"></td><td width="20%" align="center"></td><td width="40%" align="right"><a accesskey="n" href="FAQ-general.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"></td><td width="20%" align="center"></td><td width="40%" align="right" valign="top">Chapter1.General Information</td></tr></table></div></body></html> diff --git a/docs/htmldocs/AccessControls.html b/docs/htmldocs/AccessControls.html index 044d347107..3b89cb22d0 100644 --- a/docs/htmldocs/AccessControls.html +++ b/docs/htmldocs/AccessControls.html @@ -1,6 +1,7 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter13.File, Directory and Share Access Controls</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups"><link rel="next" href="locking.html" title="Chapter14.File and Record Locking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter13.File, Directory and Share Access Controls</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="groupmapping.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="locking.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AccessControls"></a>Chapter13.File, Directory and Share Access Controls</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 10, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="AccessControls.html#id2920271">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2920308">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920326">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="AccessControls.html#id2920583">Managing Directories</a></dt><dt><a href="AccessControls.html#id2920678">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2920894">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2922074">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2922346">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2922591">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2922807">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2922879">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2923178">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2923186">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2923224">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2923303">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2923425">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2923653">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2923805">Interaction with the standard Samba create mask - parameters</a></dt><dt><a href="AccessControls.html#id2924134">Interaction with the standard Samba file attribute - mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2924210">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2924224">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2924604">I have set force user and Samba still makes root the owner of all the files +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter13.File, Directory and Share Access Controls</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups"><link rel="next" href="locking.html" title="Chapter14.File and Record Locking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter13.File, Directory and Share Access Controls</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="groupmapping.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="locking.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AccessControls"></a>Chapter13.File, Directory and Share Access Controls</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 10, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="AccessControls.html#id2920239">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2920364">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920382">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="AccessControls.html#id2917299">Managing Directories</a></dt><dt><a href="AccessControls.html#id2917394">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2917800">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2917828">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2918100">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2918346">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2922930">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2923002">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2923301">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2923309">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2923347">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2923426">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2923548">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2923776">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2923928">Interaction with the standard Samba create mask + parameters</a></dt><dt><a href="AccessControls.html#id2924258">Interaction with the standard Samba file attribute + mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2924333">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2924347">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2924726">I have set force user and Samba still makes root the owner of all the files I touch!</a></dt></dl></dd></dl></div><p> Advanced MS Windows users are frequently perplexed when file, directory and share manipulation of resources shared via Samba do not behave in the manner they might expect. MS Windows network @@ -32,7 +33,7 @@ that are quite different. It was never the intent to make Unix/Linux like MS Win the purpose was an is to provide a sufficient level of exchange of data between the two environments. What is available today extends well beyond early plans and expectations, yet the gap continues to shrink. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920271"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920239"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba offers a lot of flexibility in file system access management. These are the key access control facilities present in Samba today: </p><div class="itemizedlist"><p class="title"><b>Samba Access Control Facilities</b></p><ul type="disc"><li><p> @@ -72,12 +73,12 @@ shrink. this also. Sadly, few Linux platforms ship today with native ACLs and Extended Attributes enabled. This chapter has pertinent information for users of platforms that support them. - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920308"></a>File System Access Controls</h2></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920364"></a>File System Access Controls</h2></div></div><div></div></div><p> Perhaps the most important recognition to be made is the simple fact that MS Windows NT4 / 200x / XP implement a totally divergent file system technology from what is provided in the Unix operating system environment. Firstly we should consider what the most significant differences are, then we shall look at how Samba helps to bridge the differences. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920326"></a>MS Windows NTFS Comparison with Unix File Systems</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920382"></a>MS Windows NTFS Comparison with Unix File Systems</h3></div></div><div></div></div><p> Samba operates on top of the Unix file system. This means it is subject to Unix file system conventions and permissions. It also means that if the MS Windows networking environment requires file system behaviour that differs from unix file system behaviour then somehow Samba is responsible for emulating @@ -141,19 +142,19 @@ at how Samba helps to bridge the differences. There are many other subtle differences that may cause the MS Windows administrator some temporary discomfort in the process of becoming familiar with Unix/Linux. These are best left for a text that is dedicated to the purpose of Unix/Linux training/education. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920583"></a>Managing Directories</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns30="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917299"></a>Managing Directories</h3></div></div><div></div></div><ns30:p> There are three basic operations for managing directories, <b class="command">create, delete, rename</b>. - </p><div class="table"><a name="id2920603"></a><p class="title"><b>Table13.1.Managing directories with unix and windows</b></p><table summary="Managing directories with unix and windows" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="center">Action</th><th align="center">MS Windows Command</th><th align="center">Unix Command</th></tr></thead><tbody><tr><td align="center">create</td><td align="center">md folder</td><td align="center">mkdir folder</td></tr><tr><td align="center">delete</td><td align="center">rd folder</td><td align="center">rmdir folder</td></tr><tr><td align="center">rename</td><td align="center">rename oldname newname</td><td align="center">mv oldname newname</td></tr></tbody></table></div><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920678"></a>File and Directory Access Control</h3></div></div><div></div></div><p> + </ns30:p><div class="table"><a name="id2917317"></a><p class="title"><b>Table13.1.Managing directories with unix and windows</b></p><table summary="Managing directories with unix and windows" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="center">Action</th><th align="center">MS Windows Command</th><th align="center">Unix Command</th></tr></thead><tbody><tr><td align="center">create</td><td align="center">md folder</td><td align="center">mkdir folder</td></tr><tr><td align="center">delete</td><td align="center">rd folder</td><td align="center">rmdir folder</td></tr><tr><td align="center">rename</td><td align="center">rename oldname newname</td><td align="center">mv oldname newname</td></tr></tbody></table></div><ns30:p> + </ns30:p></div><div xmlns:ns31="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917394"></a>File and Directory Access Control</h3></div></div><div></div></div><p> The network administrator is strongly advised to read foundational training manuals and reference materials regarding file and directory permissions maintenance. Much can be achieved with the basic Unix permissions without having to resort to more complex facilities like POSIX Access Control Lists (ACLs) or Extended Attributes (EAs). - </p><p> + </p><ns31:p> Unix/Linux file and directory access permissions involves setting three (3) primary sets of data and one (1) control set. A Unix file listing looks as follows:- - </p><pre class="screen"> + </ns31:p><pre class="screen"> <tt class="prompt">jht@frodo:~/stuff> </tt><b class="userinput"><tt>ls -la</tt></b> total 632 drwxr-xr-x 13 jht users 816 2003-05-12 22:56 . @@ -176,13 +177,13 @@ at how Samba helps to bridge the differences. -rw-rw-rw- 1 jht users 41105 2003-05-12 22:32 mydata06.lst -rwxrwxrwx 1 jht users 19312 2003-05-12 22:32 mydata07.lst <tt class="prompt">jht@frodo:~/stuff></tt> - </pre><p> - </p><p> + </pre><ns31:p> + </ns31:p><p> The columns above represent (from left to right): permissions, no blocks used, owner, group, size (bytes), access date, access time, file name. - </p><p> + </p><ns31:p> The permissions field is made up of: - </p><pre class="programlisting"> + </ns31:p><pre class="programlisting"> <i><span class="comment"> JRV: Put this into a diagram of some sort</span></i> [ type ] [ users ] [ group ] [ others ] [File, Directory Permissions] [ d | l ] [ r w x ] [ r w x ] [ r w x ] @@ -198,17 +199,17 @@ at how Samba helps to bridge the differences. | | |-----------------------------> Can Read, Read files | |-----------------------------------> Is a symbolic Link |---------------------------------------> Is a directory - </pre><p> - </p><p> + </pre><ns31:p> + </ns31:p><ns31:p> Any bit flag may be unset. An unset bit flag is the equivalent of 'Can NOT' and is represented as a '-' character. - </p><div class="example"><a name="id2920816"></a><p class="title"><b>Example13.1.Example File</b></p><pre class="programlisting"> + </ns31:p><div class="example"><a name="id2917721"></a><p class="title"><b>Example13.1.Example File</b></p><pre class="programlisting"> -rwxr-x--- Means: The owner (user) can read, write, execute the group can read and execute everyone else can NOT do anything with it - </pre></div><p> + </pre></div><ns31:p> - </p><p> + </ns31:p><p> Additional possibilities in the [type] field are: c = character device, b = block device, p = pipe device, s = Unix Domain Socket. </p><p> The letters `rwxXst' set permissions for the user, group and others as: read (r), write (w), execute (or access for directories) (x), @@ -228,10 +229,10 @@ at how Samba helps to bridge the differences. the (x) execute flags are not set files can not be listed (seen) in the directory by anyone. The group can read files in the directory but can NOT create new files. NOTE: If files in the directory are set to be readable and writable for the group, then group members will be able to write to (or delete) them. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920894"></a>Share Definition Access Controls</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2917800"></a>Share Definition Access Controls</h2></div></div><div></div></div><p> The following parameters in the <tt class="filename">smb.conf</tt> file sections that define a share control or affect access controls. Before using any of the following options please refer to the man page for <tt class="filename">smb.conf</tt>. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922074"></a>User and Group Based Controls</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917828"></a>User and Group Based Controls</h3></div></div><div></div></div><p> User and group based controls can prove very useful. In some situations it is distinctly desirable to affect all file system operations as if a single user is doing this, the use of the <i class="parameter"><tt>force user</tt></i> and <i class="parameter"><tt>force group</tt></i> behaviour will achieve this. In other situations it may be necessary to affect a @@ -243,7 +244,7 @@ Before using any of the following options please refer to the man page for <tt c controlling access. Remember, that when you leave the scene someone else will need to provide assistance and if that person finds too great a mess, or if they do not understand what you have done then there is risk of Samba being removed and an alternative solution being adopted. - </p><div class="table"><a name="id2922134"></a><p class="title"><b>Table13.2.User and Group Based Controls</b></p><table summary="User and Group Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>admin users</td><td><p> + </p><div class="table"><a name="id2917887"></a><p class="title"><b>Table13.2.User and Group Based Controls</b></p><table summary="User and Group Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>admin users</td><td><p> List of users who will be granted administrative privileges on the share. They will do all file operations as the super-user (root). Any user in this list will be able to do anything they like on the share, @@ -270,12 +271,12 @@ Before using any of the following options please refer to the man page for <tt c List of users that should be allowed to login to this service. </p></td></tr><tr><td>write list</td><td><p> List of users that are given read-write access to a service. - </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922346"></a>File and Directory Permissions Based Controls</h3></div></div><div></div></div><p> + </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918100"></a>File and Directory Permissions Based Controls</h3></div></div><div></div></div><p> The following file and directory permission based controls, if misused, can result in considerable difficulty to diagnose the cause of mis-configuration. Use them sparingly and carefully. By gradually introducing each one by one undesirable side-effects may be detected. In the event of a problem, always comment all of them out and then gradually re-introduce them in a controlled fashion. - </p><div class="table"><a name="id2922367"></a><p class="title"><b>Table13.3.File and Directory Permission Based Controls</b></p><table summary="File and Directory Permission Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>create mask</td><td><p> + </p><div class="table"><a name="id2918120"></a><p class="title"><b>Table13.3.File and Directory Permission Based Controls</b></p><table summary="File and Directory Permission Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>create mask</td><td><p> Refer to the <tt class="filename">smb.conf</tt> man page. </p></td></tr><tr><td>directory mask</td><td><p> The octal modes used when converting DOS modes to UNIX modes when creating UNIX directories. @@ -298,10 +299,10 @@ Before using any of the following options please refer to the man page for <tt c This parameter controls whether smbd will attempt to map UNIX permissions into Windows NT access control lists. </p></td></tr><tr><td>security mask</td><td><p> Controls UNIX permission bits modified when a Windows NT client is manipulating the UNIX permissions on a file. - </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922591"></a>Miscellaneous Controls</h3></div></div><div></div></div><p> + </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918346"></a>Miscellaneous Controls</h3></div></div><div></div></div><p> The following are documented because of the prevalence of administrators creating inadvertant barriers to file access by not understanding the full implications of <tt class="filename">smb.conf</tt> file settings. - </p><div class="table"><a name="id2922614"></a><p class="title"><b>Table13.4.Other Controls</b></p><table summary="Other Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>case sensitive, default case, short preserve case</td><td><p> + </p><div class="table"><a name="id2918367"></a><p class="title"><b>Table13.4.Other Controls</b></p><table summary="Other Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>case sensitive, default case, short preserve case</td><td><p> This means that all file name lookup will be done in a case sensitive manner. Files will be created with the precise filename Samba received from the MS Windows client. </p></td></tr><tr><td>csc policy</td><td><p> @@ -322,7 +323,7 @@ Before using any of the following options please refer to the man page for <tt c If this parameter is yes, then users of a service may not create or modify files in the service's directory. </p></td></tr><tr><td>veto files</td><td><p> List of files and directories that are neither visible nor accessible. - </p></td></tr></tbody></table></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2922807"></a>Access Controls on Shares</h2></div></div><div></div></div><p> + </p></td></tr></tbody></table></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2922930"></a>Access Controls on Shares</h2></div></div><div></div></div><p> This section deals with how to configure Samba per share access control restrictions. By default, Samba sets no restrictions on the share itself. Restrictions on the share itself can be set on MS Windows NT4/200x/XP shares. This can be a very effective way to limit who can @@ -339,9 +340,9 @@ Before using any of the following options please refer to the man page for <tt c for Samba's tdb files is under <tt class="filename">/usr/local/samba/var</tt>. If the <tt class="filename">tdbdump</tt> utility has been compiled and installed on your system, then you can examine the contents of this file by: <b class="userinput"><tt>tdbdump share_info.tdb</tt></b>. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922879"></a>Share Permissions Management</h3></div></div><div></div></div><p> + </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923002"></a>Share Permissions Management</h3></div></div><div></div></div><p> The best tool for the task is platform dependant. Choose the best tool for your environment. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2922892"></a>Windows NT4 Workstation/Server</h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923015"></a>Windows NT4 Workstation/Server</h4></div></div><div></div></div><p> The tool you need to use to manage share permissions on a Samba server is the NT Server Manager. Server Manager is shipped with Windows NT4 Server products but not with Windows NT4 Workstation. You can obtain the NT Server Manager for MS Windows NT4 Workstation from Microsoft - see details below. @@ -351,7 +352,7 @@ Before using any of the following options please refer to the man page for <tt c </p></li><li><p> Now click on the share that you wish to manage, then click on the <span class="guilabel">Properties</span> tab, next click on the <span class="guilabel">Permissions</span> tab. Now you can add or change access control settings as you wish. - </p></li></ol></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2922975"></a>Windows 200x/XP</h4></div></div><div></div></div><p> + </p></li></ol></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923098"></a>Windows 200x/XP</h4></div></div><div></div></div><p> On <span class="application">MS Windows NT4/200x/XP</span> system access control lists on the share itself are set using native tools, usually from filemanager. For example, in Windows 200x: right click on the shared folder, then select <span class="guimenuitem">Sharing</span>, then click on <span class="guilabel">Permissions</span>. The default @@ -380,7 +381,7 @@ Before using any of the following options please refer to the man page for <tt c then effectively no user will be able to access the share. This is a result of what is known as ACL precedence. ie: Everyone with <span class="emphasis"><em>no access</em></span> means that MaryK who is part of the group <tt class="constant">Everyone</tt> will have no access even if this user is given explicit full control access. - </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923178"></a>MS Windows Access Control Lists and Unix Interoperability</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923186"></a>Managing UNIX permissions Using NT Security Dialogs</h3></div></div><div></div></div><p>Windows NT clients can use their native security settings + </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923301"></a>MS Windows Access Control Lists and Unix Interoperability</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923309"></a>Managing UNIX permissions Using NT Security Dialogs</h3></div></div><div></div></div><p>Windows NT clients can use their native security settings dialog box to view and modify the underlying UNIX permissions.</p><p>Note that this ability is careful not to compromise the security of the UNIX host Samba is running on, and still obeys all the file permission rules that a Samba @@ -391,7 +392,7 @@ Before using any of the following options please refer to the man page for <tt c the identity of the Windows user as it is presented by Samba at the point of file access. This can best be determined from the Samba log files. - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923224"></a>Viewing File Security on a Samba Share</h3></div></div><div></div></div><p>From an NT4/2000/XP client, single-click with the right + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923347"></a>Viewing File Security on a Samba Share</h3></div></div><div></div></div><p>From an NT4/2000/XP client, single-click with the right mouse button on any file or directory in a Samba mounted drive letter or UNC path. When the menu pops-up, click on the <span class="guilabel">Properties</span> entry at the bottom of @@ -407,7 +408,7 @@ Before using any of the following options please refer to the man page for <tt c user is logged on as the NT Administrator. This dialog is non-functional with a Samba share at this time, as the only useful button, the <span class="guibutton">Add</span> button will not currently - allow a list of users to be seen.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923303"></a>Viewing file ownership</h3></div></div><div></div></div><p>Clicking on the <span class="guibutton">Ownership</span> button + allow a list of users to be seen.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923426"></a>Viewing file ownership</h3></div></div><div></div></div><p>Clicking on the <span class="guibutton">Ownership</span> button brings up a dialog box telling you who owns the given file. The owner name will be of the form :</p><p><b class="command">"SERVER\user (Long name)"</b></p><p>Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of the Samba server, <i class="replaceable"><tt>user</tt></i> is the user name of @@ -430,7 +431,7 @@ Before using any of the following options please refer to the man page for <tt c files on both a local NTFS filesystem or remote mounted NTFS or Samba drive. This is available as part of the <span class="application">Seclib </span> NT security library written by Jeremy Allison of - the Samba Team, available from the main Samba ftp site.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923425"></a>Viewing File or Directory Permissions</h3></div></div><div></div></div><p>The third button is the <span class="guibutton">Permissions</span> + the Samba Team, available from the main Samba ftp site.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923548"></a>Viewing File or Directory Permissions</h3></div></div><div></div></div><p>The third button is the <span class="guibutton">Permissions</span> button. Clicking on this brings up a dialog box that shows both the permissions and the UNIX owner of the file or directory. The owner is displayed in the form :</p><p><b class="command">"<i class="replaceable"><tt>SERVER</tt></i>\ @@ -444,7 +445,7 @@ Before using any of the following options please refer to the man page for <tt c be shown as the NT user <tt class="constant">"Everyone"</tt> and the permissions will be shown as NT "Full Control".</p><p>The permissions field is displayed differently for files and directories, so I'll describe the way file permissions - are displayed first.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923516"></a>File Permissions</h4></div></div><div></div></div><p>The standard UNIX user/group/world triplet and + are displayed first.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923639"></a>File Permissions</h4></div></div><div></div></div><p>The standard UNIX user/group/world triplet and the corresponding "read", "write", "execute" permissions triplets are mapped by Samba into a three element NT ACL with the 'r', 'w', and 'x' bits mapped into the corresponding @@ -466,7 +467,7 @@ Before using any of the following options please refer to the man page for <tt c no permissions as having the NT <b class="command">"O"</b> bit set. This was chosen of course to make it look like a zero, meaning zero permissions. More details on the decision behind this will - be given below.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923608"></a>Directory Permissions</h4></div></div><div></div></div><p>Directories on an NT NTFS file system have two + be given below.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923731"></a>Directory Permissions</h4></div></div><div></div></div><p>Directories on an NT NTFS file system have two different sets of permissions. The first set of permissions is the ACL set on the directory itself, this is usually displayed in the first set of parentheses in the normal <tt class="constant">"RW"</tt> @@ -477,7 +478,7 @@ Before using any of the following options please refer to the man page for <tt c inherited</tt> permissions that any file created within this directory would inherit.</p><p>Samba synthesises these inherited permissions for NT by returning as an NT ACL the UNIX permission mode that a new file - created by Samba on this share would receive.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923653"></a>Modifying file or directory permissions</h3></div></div><div></div></div><p>Modifying file and directory permissions is as simple + created by Samba on this share would receive.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923776"></a>Modifying file or directory permissions</h3></div></div><div></div></div><p>Modifying file and directory permissions is as simple as changing the displayed permissions in the dialog box, and clicking the <span class="guibutton">OK</span> button. However, there are limitations that a user needs to be aware of, and also interactions @@ -511,14 +512,14 @@ Before using any of the following options please refer to the man page for <tt c component and click the <span class="guibutton">Remove</span> button, or set the component to only have the special <tt class="constant">Take Ownership</tt> permission (displayed as <b class="command">"O" - </b>) highlighted.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923805"></a>Interaction with the standard Samba create mask - parameters</h3></div></div><div></div></div><p>There are four parameters + </b>) highlighted.</p></div><div xmlns:ns32="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923928"></a>Interaction with the standard Samba create mask + parameters</h3></div></div><div></div></div><ns32:p>There are four parameters to control interaction with the standard Samba create mask parameters. These are : - </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode</tt></i></td></tr></table><p> + </ns32:p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode</tt></i></td></tr></table><ns32:p> - </p><p>Once a user clicks <span class="guibutton">OK</span> to apply the + </ns32:p><p>Once a user clicks <span class="guibutton">OK</span> to apply the permissions Samba maps the given permissions into a user/group/world r/w/x triplet set, and then will check the changed permissions for a file against the bits set in the <a href="smb.conf.5.html#SECURITYMASK" target="_top"> @@ -558,7 +559,7 @@ Before using any of the following options please refer to the man page for <tt c in modifying the permission bits on their files and directories and doesn't force any particular bits to be set 'on', then set the following parameters in the <tt class="filename">smb.conf</tt> file in that share specific section : - </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode = 0</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode = 0</tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924134"></a>Interaction with the standard Samba file attribute + </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode = 0</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode = 0</tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924258"></a>Interaction with the standard Samba file attribute mapping</h3></div></div><div></div></div><p>Samba maps some of the DOS attribute bits (such as "read only") into the UNIX permissions of a file. This means there can be a conflict between the permission bits set via the security @@ -575,10 +576,10 @@ Before using any of the following options please refer to the man page for <tt c permissions and clicking <span class="guibutton">OK</span> to get back to the attributes dialog you should always hit <span class="guibutton">Cancel</span> rather than <span class="guibutton">OK</span> to ensure that your changes - are not overridden.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2924210"></a>Common Errors</h2></div></div><div></div></div><p> + are not overridden.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2924333"></a>Common Errors</h2></div></div><div></div></div><p> File, Directory and Share access problems are very common on the mailing list. The following are examples taken from the mailing list in recent times. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924224"></a>Users can not write to a public share</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924347"></a>Users can not write to a public share</h3></div></div><div></div></div><p> “<span class="quote"> We are facing some troubles with file / directory permissions. I can log on the domain as admin user(root), and there's a public share, on which everyone needs to have permission to create / modify files, but only @@ -589,71 +590,71 @@ are examples taken from the mailing list in recent times. There are many ways to solve this problem, here are a few hints: </p><div class="procedure"><p class="title"><b>Procedure13.3.Example Solution:</b></p><ol type="1"><li><p> Go to the top of the directory that is shared - </p></li><li><p> + </p></li><li xmlns:ns33=""><ns33:p> Set the ownership to what ever public owner and group you want - </p><pre class="programlisting"> + </ns33:p><pre class="programlisting"> find 'directory_name' -type d -exec chown user.group {}\; find 'directory_name' -type d -exec chmod 6775 'directory_name' find 'directory_name' -type f -exec chmod 0775 {} \; find 'directory_name' -type f -exec chown user.group {}\; - </pre><p> - </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> + </pre><ns33:p> + </ns33:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The above will set the 'sticky bit' on all directories. Read your Unix/Linux man page on what that does. It causes the OS to assign to all files created in the directories the ownership of the directory. - </p></div></li><li><p> + </p></div></li><li xmlns:ns34=""><ns34:p> Directory is: <i class="replaceable"><tt>/foodbar</tt></i> - </p><pre class="screen"> + </ns34:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>chown jack.engr /foodbar</tt></b> - </pre><p> - </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - </p><p>This is the same as doing:</p><p> - </p><pre class="screen"> + </pre><ns34:p> + </ns34:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns34:p> + </ns34:p><p>This is the same as doing:</p><ns34:p> + </ns34:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>chown jack /foodbar</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>chgrp engr /foodbar</tt></b> - </pre><p> - </p></div></li><li><p>Now do: + </pre><ns34:p> + </ns34:p></div></li><li xmlns:ns35=""><ns35:p>Now do: - </p><pre class="screen"> + </ns35:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>chmod 6775 /foodbar</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>ls -al /foodbar/..</tt></b> - </pre><p> + </pre><ns35:p> - </p><p>You should see: - </p><pre class="screen"> + </ns35:p><ns35:p>You should see: + </ns35:p><pre class="screen"> drwsrwsr-x 2 jack engr 48 2003-02-04 09:55 foodbar - </pre><p> - </p></li><li><p>Now do: - </p><pre class="screen"> + </pre><ns35:p> + </ns35:p></li><li xmlns:ns36=""><ns36:p>Now do: + </ns36:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>su - jill</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>cd /foodbar</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>touch Afile</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>ls -al</tt></b> - </pre><p> - </p><p> + </pre><ns36:p> + </ns36:p><ns36:p> You should see that the file <tt class="filename">Afile</tt> created by Jill will have ownership and permissions of Jack, as follows: - </p><pre class="screen"> + </ns36:p><pre class="screen"> -rw-r--r-- 1 jack engr 0 2003-02-04 09:57 Afile - </pre><p> - </p></li><li><p> + </pre><ns36:p> + </ns36:p></li><li xmlns:ns37=""><ns37:p> Now in your <tt class="filename">smb.conf</tt> for the share add: - </p><pre class="programlisting"> + </ns37:p><pre class="programlisting"> force create mode = 0775 force directory mode = 6775 - </pre><p> - </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> + </pre><ns37:p> + </ns37:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The above are only needed <span class="emphasis"><em>if</em></span> your users are <span class="emphasis"><em>not</em></span> members of the group you have used. ie: Within the OS do not have write permission on the directory. - </p></div><p> + </p></div><ns37:p> An alternative is to set in the <tt class="filename">smb.conf</tt> entry for the share: - </p><pre class="programlisting"> + </ns37:p><pre class="programlisting"> force user = jack force group = engr - </pre><p> - </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924604"></a>I have set force user and Samba still makes <span class="emphasis"><em>root</em></span> the owner of all the files + </pre><ns37:p> + </ns37:p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924726"></a>I have set force user and Samba still makes <span class="emphasis"><em>root</em></span> the owner of all the files I touch!</h3></div></div><div></div></div><p> When you have a user in 'admin users', Samba will always do file operations for this user as <span class="emphasis"><em>root</em></span>, even if <i class="parameter"><tt>force user</tt></i> has been set. diff --git a/docs/htmldocs/AdvancedNetworkManagement.html b/docs/htmldocs/AdvancedNetworkManagement.html index 296c684e24..7cddecd38c 100644 --- a/docs/htmldocs/AdvancedNetworkManagement.html +++ b/docs/htmldocs/AdvancedNetworkManagement.html @@ -1,8 +1,9 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter22.Advanced Network Management</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind"><link rel="next" href="PolicyMgmt.html" title="Chapter23.System and Account Policies"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter22.Advanced Network Management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="winbind.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="PolicyMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AdvancedNetworkManagement"></a>Chapter22.Advanced Network Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="AdvancedNetworkManagement.html#id2984570">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2984759">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2984858">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2984876">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2985087">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2985283">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2985316">Common Errors</a></dt></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter22.Advanced Network Management</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind"><link rel="next" href="PolicyMgmt.html" title="Chapter23.System and Account Policies"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter22.Advanced Network Management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="winbind.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="PolicyMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AdvancedNetworkManagement"></a>Chapter22.Advanced Network Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="AdvancedNetworkManagement.html#id2982630">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2982661">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2981342">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981359">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981560">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981755">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981788">Common Errors</a></dt></dl></div><p> This section documents peripheral issues that are of great importance to network administrators who want to improve network resource access control, to automate the user environment, and to make their lives a little easier. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984570"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982630"></a>Features and Benefits</h2></div></div><div></div></div><p> Often the difference between a working network environment and a well appreciated one can best be measured by the <span class="emphasis"><em>little things</em></span> that makes everything work more harmoniously. A key part of every network environment solution is the ability to remotely @@ -12,7 +13,7 @@ network operations. </p><p> This chapter presents information on each of these area. They are placed here, and not in other chapters, for ease of reference. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984759"></a>Remote Server Administration</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982661"></a>Remote Server Administration</h2></div></div><div></div></div><p> <span class="emphasis"><em>How do I get 'User Manager' and 'Server Manager'?</em></span> </p><p> Since I don't need to buy an <span class="application">NT4 Server</span>, how do I get the 'User Manager for Domains', @@ -26,17 +27,17 @@ Click here to download the archived file <a href="ftp://ftp.microsoft.com/Softli The <span class="application">Windows NT 4.0</span> version of the 'User Manager for Domains' and 'Server Manager' are available from Microsoft via ftp from <a href="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE" target="_top">ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE</a> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984858"></a>Remote Desktop Management</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981342"></a>Remote Desktop Management</h2></div></div><div></div></div><p> There are a number of possible remote desktop management solutions that range from free through costly. Do not let that put you off. Sometimes the most costly solutions is the most cost effective. In any case, you will need to draw your own conclusions as to which is the best tool in your network environment. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2984876"></a>Remote Management from NoMachines.Com</h3></div></div><div></div></div><p> +</p><div xmlns:ns78="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2981359"></a>Remote Management from NoMachines.Com</h3></div></div><div></div></div><p> The following information was posted to the Samba mailing list at Apr 3 23:33:50 GMT 2003. It is presented in slightly edited form (with author details omitted for privacy reasons). The entire answer is reproduced below with some comments removed. - </p><p> -</p><pre class="screen"> + </p><ns78:p> +</ns78:p><pre class="screen"> > I have a wonderful linux/samba server running as PDC for a network. > Now I would like to add remote desktop capabilities so that > users outside could login to the system and get their desktop up from @@ -48,8 +49,8 @@ is the best tool in your network environment. > even if the computer is in a domain? > > Any ideas/experience would be appreciated :) -</pre><p> -</p><p> +</pre><ns78:p> +</ns78:p><p> Answer provided: Check out the new offer from NoMachine, "NX" software: <a href="http://www.nomachine.com/" target="_top">http://www.nomachine.com/</a>. </p><p> @@ -119,7 +120,7 @@ is the best tool in your network environment. NoMachine are encouraging and offering help to OSS/Free Software implementations for such a frontend too, even if it means competition to them (they have written to this effect even to the LTSP, KDE and GNOME developer mailing lists) - </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2985087"></a>Network Logon Script Magic</h2></div></div><div></div></div><p> + </p></li></ul></div></div></div><div xmlns:ns79="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981560"></a>Network Logon Script Magic</h2></div></div><div></div></div><p> This section needs work. Volunteer contributions most welcome. Please send your patches or updates to <a href="mailto:jht@samba.org" target="_top">John Terpstra</a>. </p><p> @@ -131,10 +132,10 @@ See <tt class="filename">examples</tt> directory <tt class="filename">genlogon</ <tt class="filename">ntlogon</tt> subdirectories. </p><p> The following listings are from the genlogon directory. -</p><p> +</p><ns79:p> This is the <tt class="filename">genlogon.pl</tt> file: -</p><pre class="programlisting"> +</ns79:p><pre class="programlisting"> #!/usr/bin/perl # # genlogon.pl @@ -206,18 +207,18 @@ This is the <tt class="filename">genlogon.pl</tt> file: # All done! Close the output file. close LOGON; -</pre><p> -</p><p> +</pre><ns79:p> +</ns79:p><p> Those wishing to use more elaborate or capable logon processing system should check out the following sites: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="http://www.craigelachie.org/rhacer/ntlogon" target="_top">http://www.craigelachie.org/rhacer/ntlogon</a></td></tr><tr><td><a href="http://www.kixtart.org" target="_top">http://www.kixtart.org</a></td></tr><tr><td><a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.asp?scid=kb;en-us;189105</a></td></tr></table><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985283"></a>Adding printers without user intervention</h3></div></div><div></div></div><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="http://www.craigelachie.org/rhacer/ntlogon" target="_top">http://www.craigelachie.org/rhacer/ntlogon</a></td></tr><tr><td><a href="http://www.kixtart.org" target="_top">http://www.kixtart.org</a></td></tr><tr><td><a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.asp?scid=kb;en-us;189105</a></td></tr></table><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2981755"></a>Adding printers without user intervention</h3></div></div><div></div></div><ns79:p> Printers may be added automatically during logon script processing through the use of: -</p><pre class="programlisting"> +</ns79:p><pre class="programlisting"> rundll32 printui.dll,PrintUIEntry /? -</pre><p> +</pre><ns79:p> See the documentation in the <a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">Microsoft knowledgebase article no: 189105</a>. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2985316"></a>Common Errors</h2></div></div><div></div></div><p> +</ns79:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981788"></a>Common Errors</h2></div></div><div></div></div><p> The information provided in this chapter has been reproduced from postings on the samba@samba.org mailing list. No implied endorsement or recommendation is offered. Administrators should conduct their own evaluation of alternatives and are encouraged to draw their own conclusions. diff --git a/docs/htmldocs/Appendixes.html b/docs/htmldocs/Appendixes.html index 854437acde..ab96964c13 100644 --- a/docs/htmldocs/Appendixes.html +++ b/docs/htmldocs/Appendixes.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartVI.Appendixes</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="bugreport.html" title="Chapter35.Reporting Bugs"><link rel="next" href="compiling.html" title="Chapter36.How to compile SAMBA"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartVI.Appendixes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="bugreport.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="compiling.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Appendixes"></a>Appendixes</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>36. <a href="compiling.html">How to compile SAMBA</a></dt><dd><dl><dt><a href="compiling.html#id3012145">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id3012152">Introduction</a></dt><dt><a href="compiling.html#id3012182">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id3013701">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id3013750">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id3013886">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id3014023">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id3014188">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id3014280">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id3014484">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="compiling.html#id3014579">Common Errors</a></dt></dl></dd><dt>37. <a href="Portability.html">Portability</a></dt><dd><dl><dt><a href="Portability.html#id3013478">HPUX</a></dt><dt><a href="Portability.html#id3016009">SCO Unix</a></dt><dt><a href="Portability.html#id3016039">DNIX</a></dt><dt><a href="Portability.html#id3016210">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id3016254">AIX</a></dt><dd><dl><dt><a href="Portability.html#id3016261">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id3016287">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id3016294">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="Other-Clients.html">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="Other-Clients.html#id3015663">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3017016">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017023">How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3017102">How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3017164">How do I get printer driver download working - for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017260">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017268">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3017357">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3017388">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3017433">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3017464">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3017481">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017528">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017601">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017625">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3017736">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="speed.html">Samba Performance Tuning</a></dt><dd><dl><dt><a href="speed.html#id3018768">Comparisons</a></dt><dt><a href="speed.html#id3018812">Socket options</a></dt><dt><a href="speed.html#id3018887">Read size</a></dt><dt><a href="speed.html#id3018931">Max xmit</a></dt><dt><a href="speed.html#id3018984">Log level</a></dt><dt><a href="speed.html#id3019007">Read raw</a></dt><dt><a href="speed.html#id3019064">Write raw</a></dt><dt><a href="speed.html#id3019106">Slow Logins</a></dt><dt><a href="speed.html#id3019127">Client tuning</a></dt><dt><a href="speed.html#id3019154">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id3019185">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="DNSDHCP.html">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="DNSDHCP.html#id3018605">Note</a></dt></dl></dd><dt>41. <a href="Further-Resources.html">Further Resources</a></dt><dd><dl><dt><a href="Further-Resources.html#id3018765">Websites</a></dt><dt><a href="Further-Resources.html#id3020416">Related updates from Microsoft</a></dt><dt><a href="Further-Resources.html#id3020431">Books</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="bugreport.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="compiling.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter35.Reporting Bugs</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter36.How to compile SAMBA</td></tr></table></div></body></html> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartVI.Appendixes</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="bugreport.html" title="Chapter35.Reporting Bugs"><link rel="next" href="compiling.html" title="Chapter36.How to compile SAMBA"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartVI.Appendixes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="bugreport.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="compiling.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Appendixes"></a>Appendixes</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>36. <a href="compiling.html">How to compile SAMBA</a></dt><dd><dl><dt><a href="compiling.html#id3008244">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id3008251">Introduction</a></dt><dt><a href="compiling.html#id3008280">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id3009749">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id3009796">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id3009932">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id3010069">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id3010964">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id3011056">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id3011260">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="compiling.html#id3011355">Common Errors</a></dt></dl></dd><dt>37. <a href="Portability.html">Portability</a></dt><dd><dl><dt><a href="Portability.html#id3012634">HPUX</a></dt><dt><a href="Portability.html#id3012719">SCO Unix</a></dt><dt><a href="Portability.html#id3012747">DNIX</a></dt><dt><a href="Portability.html#id3012917">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id3012960">AIX</a></dt><dd><dl><dt><a href="Portability.html#id3012967">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id3012993">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id3013000">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="Other-Clients.html">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013776">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3013848">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013855">How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3013471">How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3013530">How do I get printer driver download working + for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013628">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013090">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3013179">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3013210">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3013255">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3013285">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3013303">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013349">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3014379">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3014403">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3014514">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="speed.html">Samba Performance Tuning</a></dt><dd><dl><dt><a href="speed.html#id3016725">Comparisons</a></dt><dt><a href="speed.html#id3014565">Socket options</a></dt><dt><a href="speed.html#id3014636">Read size</a></dt><dt><a href="speed.html#id3014680">Max xmit</a></dt><dt><a href="speed.html#id3014732">Log level</a></dt><dt><a href="speed.html#id3014755">Read raw</a></dt><dt><a href="speed.html#id3014811">Write raw</a></dt><dt><a href="speed.html#id3014853">Slow Logins</a></dt><dt><a href="speed.html#id3015761">Client tuning</a></dt><dt><a href="speed.html#id3015784">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id3015817">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="DNSDHCP.html">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="DNSDHCP.html#id3016535">Note</a></dt></dl></dd><dt>41. <a href="Further-Resources.html">Further Resources</a></dt><dd><dl><dt><a href="Further-Resources.html#id3015954">Websites</a></dt><dt><a href="Further-Resources.html#id3016336">Related updates from Microsoft</a></dt><dt><a href="Further-Resources.html#id3016404">Books</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="bugreport.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="compiling.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter35.Reporting Bugs</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter36.How to compile SAMBA</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Backup.html b/docs/htmldocs/Backup.html index 9fac452023..392e14c645 100644 --- a/docs/htmldocs/Backup.html +++ b/docs/htmldocs/Backup.html @@ -1,9 +1,10 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter28.Samba Backup Techniques</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="unicode.html" title="Chapter27.Unicode/Charsets"><link rel="next" href="SambaHA.html" title="Chapter29.High Availability Options"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter28.Samba Backup Techniques</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="unicode.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="SambaHA.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Backup"></a>Chapter28.Samba Backup Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Backup.html#id3001533">Note</a></dt><dt><a href="Backup.html#id3001557">Features and Benefits</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001533"></a>Note</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter28.Samba Backup Techniques</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="unicode.html" title="Chapter27.Unicode/Charsets"><link rel="next" href="SambaHA.html" title="Chapter29.High Availability Options"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter28.Samba Backup Techniques</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="unicode.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="SambaHA.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Backup"></a>Chapter28.Samba Backup Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Backup.html#id2999976">Note</a></dt><dt><a href="Backup.html#id2999997">Features and Benefits</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999976"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. If you have something to contribute for this section please email it to <a href="">jht@samba.org</a>/ -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001557"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999997"></a>Features and Benefits</h2></div></div><div></div></div><p> We need feedback from people who are backing up samba servers. We would like to know what software tools you are using to backup your samba server/s. diff --git a/docs/htmldocs/CUPS-printing.html b/docs/htmldocs/CUPS-printing.html index 46ca8e15f7..dff70b1726 100644 --- a/docs/htmldocs/CUPS-printing.html +++ b/docs/htmldocs/CUPS-printing.html @@ -1,21 +1,22 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter19.CUPS Printing Support in Samba 3.0</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="printing.html" title="Chapter18.Classical Printing Support"><link rel="next" href="VFS.html" title="Chapter20.Stackable VFS modules"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter19.CUPS Printing Support in Samba 3.0</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="printing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="VFS.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="CUPS-printing"></a>Chapter19.CUPS Printing Support in Samba 3.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email"><<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Ciprian</span> <span class="surname">Vizitiu</span></h3><span class="contrib">drawings</span><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:CVizitiu@gbif.org">CVizitiu@gbif.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> (3 June 2003) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="CUPS-printing.html#id2953785">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2953792">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2953845">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2953900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2953979">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2954122">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2954205">More complex smb.conf Settings for -CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2954322">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2954343">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="CUPS-printing.html#id2954370">CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2954406">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2954465">Explicitly enable "raw" printing for -application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2954626">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2954719">Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2954794">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="CUPS-printing.html#id2954839">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2954940">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#id2955028">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2955125">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2955238">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2955308">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2955397">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2955420">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2955560">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2955747">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2955864">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2956034">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2956120">pstops</a></dt><dt><a href="CUPS-printing.html#id2956222">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2956377">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2956434">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2956519">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2956831">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2956944">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2956960">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2957012">"Raw" printing</a></dt><dt><a href="CUPS-printing.html#id2957066">"application/octet-stream" printing</a></dt><dt><a href="CUPS-printing.html#id2957282">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2957510">Difference between cupsomatic/foomatic-rip and -native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2957666">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2957897">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2958024">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958100">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958116">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2958155">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2958227">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958289">Network Printing (Windows clients -- UNIX/Samba Print -Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958310">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2958474">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958550">Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958605">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2958646">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958712">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958729">Printer Drivers running in "Kernel Mode" cause many -Problems</a></dt><dt><a href="CUPS-printing.html#id2958763">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2958784">CUPS: a "Magical Stone"?</a></dt><dt><a href="CUPS-printing.html#id2958811">PostScript Drivers with no major problems -- even in Kernel -Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958865"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958884">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2958976">Prepare your smb.conf for -cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2959022">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2959220">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2959278">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2959310">ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2959360">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2959582">What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="CUPS-printing.html#id2959764">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2959865">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2960092">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2960186">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="CUPS-printing.html#id2960273">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2960308">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2960361">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2960474">Avoiding critical PostScript Driver Settings on the -Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2960608">Installing PostScript Driver Files manually (using -rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2960723">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2960836">Understanding the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2960925">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2961015">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2961177">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="CUPS-printing.html#id2961830">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2961930">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2962033">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2962103">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2962165">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2962224">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2962290">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2962398">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2963027">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2963488">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2963519">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2963551">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2963592">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2963663">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2963765">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2963836">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2963884">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2963899">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2964092">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964138">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2964221">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2964281">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964299">When not to use Samba to print to -CUPS</a></dt><dt><a href="CUPS-printing.html#id2964316">In Case of Trouble.....</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964352">Where to find Documentation</a></dt><dt><a href="CUPS-printing.html#id2964364">How to ask for Help</a></dt><dt><a href="CUPS-printing.html#id2964377">Where to find Help</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964391">Appendix</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964398">Printing from CUPS to Windows attached -Printers</a></dt><dt><a href="CUPS-printing.html#id2964612">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2964919">Trouble Shooting Guidelines to fix typical Samba printing -Problems</a></dt><dt><a href="CUPS-printing.html#id2966041">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953785"></a>Introduction</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953792"></a>Features and Benefits</h3></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter19.CUPS Printing Support in Samba 3.0</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="printing.html" title="Chapter18.Classical Printing Support"><link rel="next" href="VFS.html" title="Chapter20.Stackable VFS modules"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter19.CUPS Printing Support in Samba 3.0</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="printing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="VFS.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="CUPS-printing"></a>Chapter19.CUPS Printing Support in Samba 3.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email"><<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Ciprian</span> <span class="surname">Vizitiu</span></h3><span class="contrib">drawings</span><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:CVizitiu@gbif.org">CVizitiu@gbif.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> (3 June 2003) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="CUPS-printing.html#id2957297">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957304">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2957352">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2957404">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957483">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2950396">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2957550">More complex smb.conf Settings for +CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950555">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2950575">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="CUPS-printing.html#id2950602">CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950639">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950697">Explicitly enable "raw" printing for +application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2950858">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950951">Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2951026">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="CUPS-printing.html#id2951071">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2951170">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#id2951241">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2951338">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2951433">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2964250">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2964339">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964362">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964500">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2964688">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2964804">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2964973">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2965058">pstops</a></dt><dt><a href="CUPS-printing.html#id2965161">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2965317">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2965372">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2965457">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2965771">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2965874">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2965889">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2965942">"Raw" printing</a></dt><dt><a href="CUPS-printing.html#id2965996">"application/octet-stream" printing</a></dt><dt><a href="CUPS-printing.html#id2966212">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2966439">Difference between cupsomatic/foomatic-rip and +native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2966596">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2966825">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2966950">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967012">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967028">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2967067">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2967126">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967189">Network Printing (Windows clients -- UNIX/Samba Print +Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967210">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2967370">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967448">Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967503">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2967544">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967609">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967626">Printer Drivers running in "Kernel Mode" cause many +Problems</a></dt><dt><a href="CUPS-printing.html#id2967661">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2967682">CUPS: a "Magical Stone"?</a></dt><dt><a href="CUPS-printing.html#id2967709">PostScript Drivers with no major problems -- even in Kernel +Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967743"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967762">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2967853">Prepare your smb.conf for +cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2967900">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2968097">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968155">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968188">ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2968238">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2968459">What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="CUPS-printing.html#id2968640">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2968741">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2968884">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2968978">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="CUPS-printing.html#id2969065">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2969100">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2969151">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2969266">Avoiding critical PostScript Driver Settings on the +Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2969400">Installing PostScript Driver Files manually (using +rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2969515">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969627">Understanding the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969706">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2969796">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2969958">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="CUPS-printing.html#id2970578">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2970680">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2970783">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2970853">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2970915">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2970974">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2971036">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2971142">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2971770">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972228">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972259">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2972290">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2972331">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2972403">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2972504">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2972576">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2972624">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972639">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2972832">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972878">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2972960">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2973021">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973039">When not to use Samba to print to +CUPS</a></dt><dt><a href="CUPS-printing.html#id2973056">In Case of Trouble.....</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973091">Where to find Documentation</a></dt><dt><a href="CUPS-printing.html#id2973104">How to ask for Help</a></dt><dt><a href="CUPS-printing.html#id2973117">Where to find Help</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973131">Appendix</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973138">Printing from CUPS to Windows attached +Printers</a></dt><dt><a href="CUPS-printing.html#id2973332">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2973586">Trouble Shooting Guidelines to fix typical Samba printing +Problems</a></dt><dt><a href="CUPS-printing.html#id2974692">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957297"></a>Introduction</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957304"></a>Features and Benefits</h3></div></div><div></div></div><p> The Common Unix Print System (<a href="http://www.cups.org/" target="_top">CUPS</a>) has become very popular. All big Linux distributions now ship it as their default printing system. But to many it is still a very mystical tool. Normally it @@ -40,7 +41,7 @@ Problems</a></dt><dt><a href="CUPS-printing.html#id2966041">An Overview of the C contained. But lets start with the most basic things first. Maybe this is all you need for now. Then you can skip most of the other paragraphs. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953845"></a>Overview</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957352"></a>Overview</h3></div></div><div></div></div><p> CUPS is more than just a print spooling system. It is a complete printer management system that complies with the new IPP (<span class="emphasis"><em>Internet Printing Protocol</em></span>). IPP is an industry @@ -60,7 +61,7 @@ Problems</a></dt><dt><a href="CUPS-printing.html#id2966041">An Overview of the C argue that CUPS is better! In any case, let us now move on to explore how one may configure CUPS for interfacing with MS Windows print clients via Samba. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953900"></a>Basic Configuration of CUPS support</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957404"></a>Basic Configuration of CUPS support</h2></div></div><div></div></div><p> Printing with CUPS in the most basic <tt class="filename">smb.conf</tt> setup in Samba 3.0 (as was true for 2.2.x) only needs two settings: <i class="parameter"><tt>printing = cups</tt></i> and <i class="parameter"><tt>printcap @@ -76,7 +77,7 @@ Problems</a></dt><dt><a href="CUPS-printing.html#id2966041">An Overview of the C details see <b class="command">man cupsd.conf</b> and other CUPS-related documentation, like the wealth of documents on your CUPS server itself: <a href="http://localhost:631/documentation.html" target="_top">http://localhost:631/documentation.html</a>. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953979"></a>Linking of smbd with libcups.so</h3></div></div><div></div></div><p> + </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957483"></a>Linking of smbd with libcups.so</h3></div></div><div></div></div><p> Samba has a very special relationship to CUPS. The reason is: Samba can be compiled with CUPS library support. Most recent installations have this support enabled, and per default CUPS linking is compiled @@ -113,7 +114,7 @@ Problems</a></dt><dt><a href="CUPS-printing.html#id2966041">An Overview of the C <i class="parameter"><tt>print command</tt></i>; other commands are <i class="parameter"><tt>lppause command, lpresume command, lpq command, lprm command, queuepause command </tt></i> and <i class="parameter"><tt>queue resume - command</tt></i>).</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954122"></a>Simple <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p> + command</tt></i>).</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950396"></a>Simple <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p> To summarize, here is the simplest printing-related setup for <tt class="filename">smb.conf</tt> to enable basic CUPS support: </p><pre class="screen"> @@ -148,7 +149,7 @@ Problems</a></dt><dt><a href="CUPS-printing.html#id2966041">An Overview of the C printer is not a PostScript device, the print data stream is "binary", sensible only for the target printer. Read on to learn which problem this may cause and how to avoid it. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954205"></a>More complex <tt class="filename">smb.conf</tt> Settings for + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957550"></a>More complex <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p> Here is a slightly more complex printing-related setup for <tt class="filename">smb.conf</tt>. It enables general CUPS printing @@ -199,13 +200,13 @@ allowing access from three hosts. To prevent CUPS kicking in and taking over the print jobs for that share, we need to set <i class="parameter"><tt>printing = sysv</tt></i> and <i class="parameter"><tt>printcap = lpstat</tt></i>. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2954322"></a>Advanced Configuration</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950555"></a>Advanced Configuration</h2></div></div><div></div></div><p> Before we dive into all the configuration options, let's clarify a few points. <span class="emphasis"><em>Network printing needs to be organized and setup correctly</em></span>. Often this is not done correctly. Legacy systems or small LANs in business environments often lack a clear design and good housekeeping. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954343"></a>Central spooling vs. "Peer-to-Peer" printing</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950575"></a>Central spooling vs. "Peer-to-Peer" printing</h3></div></div><div></div></div><p> Many small office or home networks, as well as badly organized larger environments, allow each client a direct access to available network printers. Generally, this is a bad idea. It often blocks one client's @@ -217,7 +218,7 @@ is the usage of a "print server": it routes all jobs through one central system, which responds immediately, takes jobs from multiple concurrent clients at the same time and in turn transfers them to the printer(s) in the correct order. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954370"></a>CUPS/Samba as a "spooling-only" Print Server; "raw" printing +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950602"></a>CUPS/Samba as a "spooling-only" Print Server; "raw" printing with Vendor Drivers on Windows Clients</h3></div></div><div></div></div><p> Most traditionally configured Unix print servers acting on behalf of Samba's Windows clients represented a really simple setup. Their only @@ -236,7 +237,7 @@ sent in a format that is suitable for direct delivery to the printer. Clients need to run the vendor-provided drivers to do this. In this case CUPS will NOT do any print file format conversion work. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954406"></a>Driver Installation Methods on Windows Clients</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950639"></a>Driver Installation Methods on Windows Clients</h3></div></div><div></div></div><p> The printer drivers on the Windows clients may be installed in two functionally different ways: </p><div class="itemizedlist"><ul type="disc"><li><p>manually install the drivers locally on each client, @@ -249,7 +250,7 @@ first time they access the printer; with this method NT/2K/XP clients use the <span class="emphasis"><em>SPOOLSS/MS-RPC</em></span> type printing calls.</p></li></ul></div><p> The second method is recommended for use over the first. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954465"></a>Explicitly enable "raw" printing for +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950697"></a>Explicitly enable "raw" printing for <span class="emphasis"><em>application/octet-stream</em></span>!</h3></div></div><div></div></div><p> If you use the first option (drivers are installed on the client side), there is one setting to take care of: CUPS needs to be told @@ -298,7 +299,7 @@ This is all you need to know to get the CUPS/Samba combo printing locally installed. If you are not interested in background information about more advanced CUPS/Samba printing, simply skip the remaining sections of this chapter. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954626"></a>Three familiar Methods for driver upload plus a new one</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950858"></a>Three familiar Methods for driver upload plus a new one</h3></div></div><div></div></div><p> If you want to use the MS-RPC type printing, you must upload the drivers onto the Samba server first (<i class="parameter"><tt>[print$]</tt></i> share). For a discussion on how to deposit printer drivers on the @@ -320,7 +321,7 @@ utility.</p></li></ul></div><p> cupsaddsmb is discussed in much detail further below. But we will first explore the CUPS filtering system and compare the Windows and UNIX printing architectures. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2954719"></a>Using CUPS/Samba in an advanced Way -- intelligent printing +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950951"></a>Using CUPS/Samba in an advanced Way -- intelligent printing with PostScript Driver Download</h2></div></div><div></div></div><p> Still reading on? Good. Let's go into more detail then. We now know how to set up a "dump" printserver, that is, a server which is spooling @@ -345,7 +346,7 @@ how CUPS works and how you can enable its features. What follows is the comparison of some fundamental concepts for Windows and Unix printing; then is the time for a description of the CUPS filtering system, how it works and how you can tweak it. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954794"></a>GDI on Windows -- PostScript on Unix</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951026"></a>GDI on Windows -- PostScript on Unix</h3></div></div><div></div></div><p> Network printing is one of the most complicated and error-prone day-to-day tasks any user or an administrator may encounter. This is true for all OS platforms. And there are reasons for this. @@ -361,7 +362,7 @@ into semi-official "standards", by being the most widely used PDLs many manufacturers who "roll their own" (their reasons may be unacceptable license fees for using printer-embedded PostScript interpreters, etc.). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954839"></a>Windows Drivers, GDI and EMF</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns52="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951071"></a>Windows Drivers, GDI and EMF</h3></div></div><div></div></div><p> In Windows OS, the format conversion job is done by the printer drivers. On MS Windows OS platforms all application programmers have at their disposal a built-in API, the GDI (<span class="emphasis"><em>Graphical Device @@ -383,10 +384,10 @@ put paper and screen output on a common foundation for their (BSD-Unix-based, did you know??) Mac OS X and Darwin Operating Systems.Their <span class="emphasis"><em>Core Graphic Engine</em></span> uses a <span class="emphasis"><em>PDF</em></span> derivate for all display work. -</p></div><p> +</p></div><ns52:p> -</p><div class="figure"><a name="id2954904"></a><p class="title"><b>Figure19.1.Windows Printing to a local Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="Windows Printing to a local Printer"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954940"></a>Unix Printfile Conversion and GUI Basics</h3></div></div><div></div></div><p> +</ns52:p><div class="figure"><a name="id2951136"></a><p class="title"><b>Figure19.1.Windows Printing to a local Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="Windows Printing to a local Printer"></div></div><ns52:p> +</ns52:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951170"></a>Unix Printfile Conversion and GUI Basics</h3></div></div><div></div></div><p> In Unix and Linux, there is no comparable layer built into the OS kernel(s) or the X (screen display) server. Every application is responsible for itself to create its print output. Fortunately, most @@ -422,7 +423,7 @@ form and you will be reading its PostScript code, the language instructions which need to be interpreted by a rasterizer. Rasterizers produce pixel images, which may be displayed on screen by a viewer program or on paper by a printer. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955028"></a>PostScript and Ghostscript</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns53="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951241"></a>PostScript and Ghostscript</h3></div></div><div></div></div><p> So, Unix is lacking a common ground for printing on paper and displaying on screen. Despite this unfavorable legacy for Unix, basic printing is fairly easy: if you have PostScript printers at your @@ -441,9 +442,9 @@ options a printer supports: duplexing, stapling, punching... Therefore Unix users for a long time couldn't choose many of the supported device and job options, unlike Windows or Apple users. But now there is CUPS.... ;-) -</p></div><p> -</p><div class="figure"><a name="id2955075"></a><p class="title"><b>Figure19.2.Printing to a Postscript Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/2small.png" alt="Printing to a Postscript Printer"></div></div><p> -</p><p> +</p></div><ns53:p> +</ns53:p><div class="figure"><a name="id2951288"></a><p class="title"><b>Figure19.2.Printing to a Postscript Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/2small.png" alt="Printing to a Postscript Printer"></div></div><ns53:p> +</ns53:p><p> However, there are other types of printers out there. These don't know how to print PostScript. They use their own <span class="emphasis"><em>Page Description Language</em></span> (PDL, often proprietary). To print to them is much @@ -451,7 +452,7 @@ more demanding. Since your Unix applications mostly produce PostScript, and since these devices don't understand PostScript, you need to convert the printfiles to a format suitable for your printer on the host, before you can send it away. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955125"></a>Ghostscript -- the Software RIP for non-PostScript Printers</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns54="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951338"></a>Ghostscript -- the Software RIP for non-PostScript Printers</h3></div></div><div></div></div><p> Here is where <span class="emphasis"><em>Ghostscript</em></span> kicks in. Ghostscript is the traditional (and quite powerful) PostScript interpreter used on Unix platforms. It is a RIP in software, capable to do a @@ -459,9 +460,9 @@ Unix platforms. It is a RIP in software, capable to do a spectrum of hardware devices as well as software file formats. Ghostscript technology and drivers is what enables PostScript printing to non-PostScript hardware. -</p><p> -</p><div class="figure"><a name="id2955155"></a><p class="title"><b>Figure19.3.Ghostscript as a RIP for non-postscript printers</b></p><div class="mediaobject"><img src="projdoc/imagefiles/3small.png" alt="Ghostscript as a RIP for non-postscript printers"></div></div><p> -</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> +</p><ns54:p> +</ns54:p><div class="figure"><a name="id2951368"></a><p class="title"><b>Figure19.3.Ghostscript as a RIP for non-postscript printers</b></p><div class="mediaobject"><img src="projdoc/imagefiles/3small.png" alt="Ghostscript as a RIP for non-postscript printers"></div></div><ns54:p> +</ns54:p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> Use the "gs -h" command to check for all built-in "devices" of your Ghostscript version. If you specify e.g. a parameter of <i class="parameter"><tt>-sDEVICE=png256</tt></i> on your Ghostscript command @@ -478,7 +479,7 @@ enhancement over GNU Ghostscript, with lots of bug-fixes, additional devices and improvements. It is jointly maintained by developers from CUPS, Gimp-Print, MandrakeSoft, SuSE, RedHat and Debian. It includes the "cups" device (essential to print to non-PS printers from CUPS). -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955238"></a>PostScript Printer Description (PPD) Specification</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951433"></a>PostScript Printer Description (PPD) Specification</h3></div></div><div></div></div><p> While PostScript in essence is a <span class="emphasis"><em>Page Description Language</em></span> (PDL) to represent the page layout in a <span class="emphasis"><em>device independent</em></span> way, real world print jobs are @@ -509,7 +510,7 @@ for achieving a certain print job output (e.g. duplexed, stapled and punched) on a specific target machine, may not print as expected, or may not be printable at all on other models; it also may not be fit for further processing by software (e.g. by a PDF distilling program). -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955308"></a>CUPS can use all Windows-formatted Vendor PPDs</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964250"></a>CUPS can use all Windows-formatted Vendor PPDs</h3></div></div><div></div></div><p> CUPS can handle all spec-compliant PPDs as supplied by the manufacturers for their PostScript models. Even if a Unix/Linux-illiterate vendor might not have mentioned our favorite @@ -536,7 +537,7 @@ your LAN has the PostScript driver installed, just use access the Windows directory where all printer driver files are stored. First look in the <tt class="filename">W32X86/2</tt> subdir for the PPD you are seeking. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955397"></a>CUPS also uses PPDs for non-PostScript Printers</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964339"></a>CUPS also uses PPDs for non-PostScript Printers</h3></div></div><div></div></div><p> CUPS also uses specially crafted PPDs to handle non-PostScript printers. These PPDs are usually not available from the vendors (and no, you can't just take the PPD of a Postscript printer with the same @@ -544,7 +545,7 @@ model name and hope it works for the non-PostScript version too). To understand how these PPDs work for non-PS printers we first need to dive deeply into the CUPS filtering and file format conversion architecture. Stay tuned. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955420"></a>The CUPS Filtering Architecture</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964362"></a>The CUPS Filtering Architecture</h2></div></div><div></div></div><p> The core of the CUPS filtering system is based on <span class="emphasis"><em>Ghostscript</em></span>. In addition to Ghostscript, CUPS uses some other filters of its own. You (or your OS vendor) may have @@ -586,7 +587,7 @@ others. However, even for Foomatic/cupsomatic usage, best results and broadest printer model support is provided by ESP Ghostscript (more about cupsomatic/Foomatic, particularly the new version called now <span class="emphasis"><em>foomatic-rip</em></span>, follows below). -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955560"></a>MIME types and CUPS Filters</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964500"></a>MIME types and CUPS Filters</h3></div></div><div></div></div><p> CUPS reads the file <tt class="filename">/etc/cups/mime.types</tt> (and all other files carrying a <tt class="filename">*.types</tt> suffix in the same directory) upon startup. These files contain the MIME @@ -639,7 +640,7 @@ CUPS can handle ASCII text, HP-GL, PDF, PostScript, DVI and a lot of image formats (GIF. PNG, TIFF, JPEG, Photo-CD, SUN-Raster, PNM, PBM, SGI-RGB and some more) and their associated MIME types with its filters. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955747"></a>MIME type Conversion Rules</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964688"></a>MIME type Conversion Rules</h3></div></div><div></div></div><p> CUPS reads the file <tt class="filename">/etc/cups/mime.convs</tt> (and all other files named with a <tt class="filename">*.convs</tt> suffix in the same directory) upon startup. These files contain @@ -680,7 +681,7 @@ The last two examples name the <span class="emphasis"><em>texttops</em></span> f to work on "text/plain" as well as on "application/x-shell". (Hint: this differentiation is needed for the syntax highlighting feature of "texttops"). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955864"></a>Filter Requirements</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964804"></a>Filter Requirements</h3></div></div><div></div></div><p> There are many more combinations named in mime.convs. However, you are not limited to use the ones pre-defined there. You can plug in any filter you like into the CUPS framework. It must meet, or must be made @@ -701,7 +702,7 @@ attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The string fr attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The job options</p></dd><dt><span class="term">Printer</span></dt><dd><p>(Optionally) The print request file (if missing, filters expected data fed through <tt class="filename">stdin</tt>). In most cases it is very easy to write a simple wrapper script around existing -filters to make them work with CUPS.</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956034"></a>Prefilters</h3></div></div><div></div></div><p> +filters to make them work with CUPS.</p></dd></dl></div></div></div><div xmlns:ns55="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964973"></a>Prefilters</h3></div></div><div></div></div><p> As was said, PostScript is the central file format to any Unix based printing system. From PostScript, CUPS generates raster data to feed non-PostScript printers. @@ -718,18 +719,18 @@ the <span class="emphasis"><em>imagetops</em></span> filter. Its outcome is alwa MIME type <span class="emphasis"><em>application/vnd.cups-postscript</em></span> (<span class="emphasis"><em>not</em></span> application/postscript), meaning it has the print options already embedded into the file. -</p><p> -</p><div class="figure"><a name="id2956084"></a><p class="title"><b>Figure19.4.Prefiltering in CUPS to form Postscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/4small.png" alt="Prefiltering in CUPS to form Postscript"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956120"></a>pstops</h3></div></div><div></div></div><p> +</p><ns55:p> +</ns55:p><div class="figure"><a name="id2965024"></a><p class="title"><b>Figure19.4.Prefiltering in CUPS to form Postscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/4small.png" alt="Prefiltering in CUPS to form Postscript"></div></div><ns55:p> +</ns55:p></div><div xmlns:ns56="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965058"></a>pstops</h3></div></div><div></div></div><p> <span class="emphasis"><em>pstops</em></span>is the filter to convert <span class="emphasis"><em>application/postscript</em></span> to <span class="emphasis"><em>application/vnd.cups-postscript</em></span>. It was said above that this filter inserts all device-specific print options (commands to the printer to ask for the duplexing of output, or stapling an punching it, etc.) into the PostScript file. -</p><p> -</p><div class="figure"><a name="id2956149"></a><p class="title"><b>Figure19.5.Adding Device-specific Print Options</b></p><div class="mediaobject"><img src="projdoc/imagefiles/5small.png" alt="Adding Device-specific Print Options"></div></div><p> -</p><p> +</p><ns56:p> +</ns56:p><div class="figure"><a name="id2965089"></a><p class="title"><b>Figure19.5.Adding Device-specific Print Options</b></p><div class="mediaobject"><img src="projdoc/imagefiles/5small.png" alt="Adding Device-specific Print Options"></div></div><ns56:p> +</ns56:p><p> This is not all: other tasks performed by it are: </p><div class="itemizedlist"><ul type="disc"><li><p> selecting the range of pages to be printed (if you choose to @@ -740,7 +741,7 @@ putting 2 or more logical pages on one sheet of paper (the so-called "number-up" function) </p></li><li><p>counting the pages of the job to insert the accounting information into the <tt class="filename">/var/log/cups/page_log</tt> -</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956222"></a>pstoraster</h3></div></div><div></div></div><p> +</p></li></ul></div></div><div xmlns:ns57="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965161"></a>pstoraster</h3></div></div><div></div></div><p> <span class="emphasis"><em>pstoraster</em></span> is at the core of the CUPS filtering system. It is responsible for the first stage of the rasterization process. Its input is of MIME type application/vnd.cups-postscript; @@ -748,9 +749,9 @@ its output is application/vnd.cups-raster. This output format is not yet meant to be printable. Its aim is to serve as a general purpose input format for more specialized <span class="emphasis"><em>raster drivers</em></span>, that are able to generate device-specific printer data. -</p><p> -</p><div class="figure"><a name="id2956251"></a><p class="title"><b>Figure19.6.Postscript to intermediate Raster format</b></p><div class="mediaobject"><img src="projdoc/imagefiles/6small.png" alt="Postscript to intermediate Raster format"></div></div><p> -</p><p> +</p><ns57:p> +</ns57:p><div class="figure"><a name="id2965191"></a><p class="title"><b>Figure19.6.Postscript to intermediate Raster format</b></p><div class="mediaobject"><img src="projdoc/imagefiles/6small.png" alt="Postscript to intermediate Raster format"></div></div><ns57:p> +</ns57:p><p> CUPS raster is a generic raster format with powerful features. It is able to include per-page information, color profiles and more to be used by the following downstream raster drivers. Its MIME type is @@ -761,9 +762,9 @@ printer models, should they choose to do so. CUPS always takes care for the first stage of rasterization so these vendors don't need to care about Ghostscript complications (in fact, there is currently more than one vendor financing the development of CUPS raster drivers). -</p><p> -</p><div class="figure"><a name="id2956304"></a><p class="title"><b>Figure19.7.CUPS-raster production using Ghostscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/7small.png" alt="CUPS-raster production using Ghostscript"></div></div><p> -</p><p> +</p><ns57:p> +</ns57:p><div class="figure"><a name="id2965243"></a><p class="title"><b>Figure19.7.CUPS-raster production using Ghostscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/7small.png" alt="CUPS-raster production using Ghostscript"></div></div><ns57:p> +</ns57:p><p> CUPS versions before version 1.1.15 were shipping a binary (or source code) standalone filter, named "pstoraster". pstoraster was derived from GNU Ghostscript 5.50, and could be installed besides and in @@ -776,16 +777,16 @@ integrated back into Ghostscript (now based on GNU Ghostscript version parameter. If your Ghostscript doesn't show a success on asking for <b class="command">gs -h |grep cups</b>, you might not be able to print. Update your Ghostscript then! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956377"></a>imagetops and imagetoraster</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns58="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965317"></a>imagetops and imagetoraster</h3></div></div><div></div></div><p> Above in the section about prefilters, we mentioned the prefilter that generates PostScript from image formats. The imagetoraster filter is used to convert directly from image to raster, without the intermediate PostScript stage. It is used more often than the above mentioned prefilters. Here is a summarizing flowchart of image file filtering: -</p><p> -</p><div class="figure"><a name="id2956398"></a><p class="title"><b>Figure19.8.Image format to CUPS-raster format conversion</b></p><div class="mediaobject"><img src="projdoc/imagefiles/8small.png" alt="Image format to CUPS-raster format conversion"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956434"></a>rasterto [printers specific]</h3></div></div><div></div></div><p> +</p><ns58:p> +</ns58:p><div class="figure"><a name="id2965338"></a><p class="title"><b>Figure19.8.Image format to CUPS-raster format conversion</b></p><div class="mediaobject"><img src="projdoc/imagefiles/8small.png" alt="Image format to CUPS-raster format conversion"></div></div><ns58:p> +</ns58:p></div><div xmlns:ns59="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965372"></a>rasterto [printers specific]</h3></div></div><div></div></div><p> CUPS ships with quite some different raster drivers processing CUPS raster. On my system I find in /usr/lib/cups/filter/ these: <i class="parameter"><tt>rastertoalps, rastertobj, rastertoepson, rastertoescp, @@ -797,9 +798,9 @@ than this; some of these are installed by commercial add-ons to CUPS <i class="parameter"><tt>rastertoprinter</tt></i>) by 3rd party driver development projects (such as Gimp-Print) wanting to cooperate as closely as possible with CUPS. -</p><p> -</p><div class="figure"><a name="id2956484"></a><p class="title"><b>Figure19.9.Raster to Printer Specific formats</b></p><div class="mediaobject"><img src="projdoc/imagefiles/9small.png" alt="Raster to Printer Specific formats"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956519"></a>CUPS Backends</h3></div></div><div></div></div><p> +</p><ns59:p> +</ns59:p><div class="figure"><a name="id2965423"></a><p class="title"><b>Figure19.9.Raster to Printer Specific formats</b></p><div class="mediaobject"><img src="projdoc/imagefiles/9small.png" alt="Raster to Printer Specific formats"></div></div><ns59:p> +</ns59:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965457"></a>CUPS Backends</h3></div></div><div></div></div><p> The last part of any CUPS filtering chain is a "backend". Backends are special programs that send the print-ready file to the final device. There is a separate backend program for any transfer @@ -886,7 +887,7 @@ all available backends: lpinfo -v -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956831"></a>cupsomatic/Foomatic -- how do they fit into the Picture?</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965771"></a>cupsomatic/Foomatic -- how do they fit into the Picture?</h3></div></div><div></div></div><p> "cupsomatic" filters may be the most widely used on CUPS installations. You must be clear about the fact that these were not developed by the CUPS people. They are a "Third Party" add-on to @@ -936,11 +937,11 @@ print-options from page to page, in the middle of a job. And the best thing is: the new foomatic-rip now works seamlessly with all legacy spoolers too (like LPRng, BSD-LPD, PDQ, PPR etc.), providing for them access to use PPDs for their printing! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956944"></a>The Complete Picture</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965874"></a>The Complete Picture</h3></div></div><div></div></div><p> If you want to see an overview over all the filters and how they relate to each other, the complete picture of the puzzle is at the end of this document. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956960"></a><tt class="filename">mime.convs</tt></h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965889"></a><tt class="filename">mime.convs</tt></h3></div></div><div></div></div><p> CUPS auto-constructs all possible filtering chain paths for any given MIME type, and every printer installed. But how does it decide in favor or against a specific alternative? (There may often be cases, @@ -957,7 +958,7 @@ cost. This is a very efficient way to limit the load of any CUPS server by setting an appropriate "FilterLimit" value. A FilterLimit of 200 allows roughly 1 job at a time, while a FilterLimit of 1000 allows approximately 5 jobs maximum at a time. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957012"></a>"Raw" printing</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965942"></a>"Raw" printing</h3></div></div><div></div></div><p> You can tell CUPS to print (nearly) any file "raw". "Raw" means it will not be filtered. CUPS will send the file to the printer "as is" without bothering if the printer is able to digest it. Users need to @@ -980,7 +981,7 @@ CUPS will automatically treat each job sent to a queue as a "raw" one, if it can't find a PPD associated with the queue. However, CUPS will only send known MIME types (as defined in its own mime.types file) and refuse others. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957066"></a>"application/octet-stream" printing</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965996"></a>"application/octet-stream" printing</h3></div></div><div></div></div><p> Any MIME type with no rule in the <tt class="filename">/etc/cups/mime.types</tt> file is regarded as unknown or <span class="emphasis"><em>application/octet-stream</em></span> and will not be @@ -1038,7 +1039,7 @@ be one that is known to CUPS and an allowed one. The file recognizes MIME types. The file <tt class="filename">/etc/cups/mime.convs</tt> decides which file conversion filter(s) may be applied to which MIME types. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957282"></a>PostScript Printer Descriptions (PPDs) for non-PS Printers</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966212"></a>PostScript Printer Descriptions (PPDs) for non-PS Printers</h3></div></div><div></div></div><p> Originally PPDs were meant to be used for PostScript printers only. Here, they help to send device-specific commands and settings to the RIP which processes the jobfile. CUPS has extended this @@ -1083,7 +1084,7 @@ specific model supports): </p></dd><dt><span class="term">stphoto2.ppd</span></dt><dd><p>newer Epson Stylus Photo printers </p></dd><dt><span class="term">laserjet.ppd</span></dt><dd><p>all PCL printers. Further below is a discussion of several other driver/PPD-packages suitable fur use with CUPS. -</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957510"></a>Difference between <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> and +</p></dd></dl></div></div><div xmlns:ns60="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966439"></a>Difference between <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> and <span class="emphasis"><em>native CUPS</em></span> printing</h3></div></div><div></div></div><p> Native CUPS rasterization works in two steps. </p><div class="itemizedlist"><ul type="disc"><li><p> @@ -1096,9 +1097,9 @@ quality filters for this step, some are Free Software, some are Shareware/Non-Free, some are proprietary.</p></li></ul></div><p> Often this produces better quality (and has several more advantages) than other methods. -</p><p> -</p><div class="figure"><a name="id2957561"></a><p class="title"><b>Figure19.10.cupsomatic/foomatic processing versus Native CUPS</b></p><div class="mediaobject"><img src="projdoc/imagefiles/10small.png" alt="cupsomatic/foomatic processing versus Native CUPS"></div></div><p> -</p><p> +</p><ns60:p> +</ns60:p><div class="figure"><a name="id2966490"></a><p class="title"><b>Figure19.10.cupsomatic/foomatic processing versus Native CUPS</b></p><div class="mediaobject"><img src="projdoc/imagefiles/10small.png" alt="cupsomatic/foomatic processing versus Native CUPS"></div></div><ns60:p> +</ns60:p><p> One other method is the <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> way. Note that cupsomatic is <span class="emphasis"><em>not</em></span> made by the CUPS developers. It is an independent contribution to printing development, @@ -1132,7 +1133,7 @@ installation: Therefore the printfile bypasses the "pstoraster" filter cupsomatic hands the rendered file directly to the CUPS backend. The flowchart above illustrates the difference between native CUPS rendering and the Foomatic/cupsomatic method. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957666"></a>Examples for filtering Chains</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966596"></a>Examples for filtering Chains</h3></div></div><div></div></div><p> Here are a few examples of commonly occurring filtering chains to illustrate the workings of CUPS. </p><p> @@ -1182,7 +1183,7 @@ which transfers the job to the printers.</p></li></ul></div><p> The resulting filter chain therefore is: </p><pre class="screen"> pdftops --> pstops --> pstoraster --> rastertoepson --> usb -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957897"></a>Sources of CUPS drivers / PPDs</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966825"></a>Sources of CUPS drivers / PPDs</h3></div></div><div></div></div><p> On the internet you can find now many thousand CUPS-PPD files (with their companion filters), in many national languages, supporting more than 1000 non-PostScript models. @@ -1217,7 +1218,7 @@ HPIJS).</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-r The cupsomatic/Foomatic trick from Linuxprinting.org works differently from the other drivers. This is explained elsewhere in this document. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958024"></a>Printing with Interface Scripts</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966950"></a>Printing with Interface Scripts</h3></div></div><div></div></div><p> CUPS also supports the usage of "interface scripts" as known from System V AT&T printing systems. These are often used for PCL printers, from applications that generate PCL print jobs. Interface @@ -1239,12 +1240,12 @@ with CUPS they provide the most easy way to plug in your own custom-written filtering script or program into one specific print queue (some information about the traditional usage of interface scripts is to be found at <a href="http://playground.sun.com/printing/documentation/interface.html" target="_top">http://playground.sun.com/printing/documentation/interface.html</a>). -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958100"></a>Network printing (purely Windows)</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967012"></a>Network printing (purely Windows)</h2></div></div><div></div></div><p> Network printing covers a lot of ground. To understand what exactly goes on with Samba when it is printing on behalf of its Windows clients, let's first look at a "purely Windows" setup: Windows clients with a Windows NT print server. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958116"></a>From Windows Clients to an NT Print Server</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967028"></a>From Windows Clients to an NT Print Server</h3></div></div><div></div></div><p> Windows clients printing to an NT-based print server have two options. They may </p><div class="itemizedlist"><ul type="disc"><li><p>execute the driver locally and render the GDI output @@ -1253,7 +1254,7 @@ or</p></li><li><p>send the GDI output (EMF) to the server, where the driver is executed to render the printer specific output.</p></li></ul></div><p> Both print paths are shown in the flowcharts below. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958155"></a>Driver Execution on the Client</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns61="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967067"></a>Driver Execution on the Client</h3></div></div><div></div></div><p> In the first case the print server must spool the file as "raw", meaning it shouldn't touch the jobfile and try to convert it in any way. This is what traditional Unix-based print server can do too; and @@ -1263,9 +1264,9 @@ advantage of this setup is that this "spooling-only" print server may be used even if no driver(s) for Unix are available it is sufficient to have the Windows client drivers available and installed on the clients. -</p><p> -</p><div class="figure"><a name="id2958191"></a><p class="title"><b>Figure19.11.Print Driver execution on the Client</b></p><div class="mediaobject"><img src="projdoc/imagefiles/11small.png" alt="Print Driver execution on the Client"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958227"></a>Driver Execution on the Server</h3></div></div><div></div></div><p> +</p><ns61:p> +</ns61:p><div class="figure"><a name="id2967092"></a><p class="title"><b>Figure19.11.Print Driver execution on the Client</b></p><div class="mediaobject"><img src="projdoc/imagefiles/11small.png" alt="Print Driver execution on the Client"></div></div><ns61:p> +</ns61:p></div><div xmlns:ns62="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967126"></a>Driver Execution on the Server</h3></div></div><div></div></div><p> The other path executes the printer driver on the server. The clients transfers print files in EMF format to the server. The server uses the PostScript, PCL, ESC/P or other driver to convert the EMF file into @@ -1273,18 +1274,18 @@ the printer-specific language. It is not possible for Unix to do the same. Currently there is no program or method to convert a Windows client's GDI output on a Unix server into something a printer could understand. -</p><p> -</p><div class="figure"><a name="id2958249"></a><p class="title"><b>Figure19.12.Print Driver execution on the Server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/12small.png" alt="Print Driver execution on the Server"></div></div><p> -</p><p> +</p><ns62:p> +</ns62:p><div class="figure"><a name="id2967148"></a><p class="title"><b>Figure19.12.Print Driver execution on the Server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/12small.png" alt="Print Driver execution on the Server"></div></div><ns62:p> +</ns62:p><p> However, there is something similar possible with CUPS. Read on... -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958289"></a>Network Printing (Windows clients -- UNIX/Samba Print +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967189"></a>Network Printing (Windows clients -- UNIX/Samba Print Servers)</h2></div></div><div></div></div><p> Since UNIX print servers <span class="emphasis"><em>cannot</em></span> execute the Win32 program code on their platform, the picture is somewhat different. However, this doesn't limit your options all that much. In the contrary, you may have a way here to implement printing features which are not possible otherwise. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958310"></a>From Windows Clients to a CUPS/Samba Print Server</h3></div></div><div></div></div><p> +</p><div xmlns:ns63="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967210"></a>From Windows Clients to a CUPS/Samba Print Server</h3></div></div><div></div></div><p> Here is a simple recipe showing how you can take advantage of CUPS powerful features for the benefit of your Windows network printing clients: @@ -1311,9 +1312,9 @@ other print commands are set up, then printing will use the option automatically passing through (if you want your own defined print commands to work with a Samba that has CUPS support compiled in, simply use <i class="parameter"><tt>printing = sysv</tt></i>). -</p><p> -</p><div class="figure"><a name="id2958439"></a><p class="title"><b>Figure19.13.Printing via CUPS/samba server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/13small.png" alt="Printing via CUPS/samba server"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958474"></a>Samba receiving Jobfiles and passing them to CUPS</h3></div></div><div></div></div><p> +</p><ns63:p> +</ns63:p><div class="figure"><a name="id2967336"></a><p class="title"><b>Figure19.13.Printing via CUPS/samba server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/13small.png" alt="Printing via CUPS/samba server"></div></div><ns63:p> +</ns63:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967370"></a>Samba receiving Jobfiles and passing them to CUPS</h3></div></div><div></div></div><p> Samba <span class="emphasis"><em>must</em></span> use its own spool directory (it is set by a line similar to <i class="parameter"><tt>path = /var/spool/samba</tt></i>, in the <i class="parameter"><tt>[printers]</tt></i> or @@ -1331,7 +1332,7 @@ A Windows user authenticates only to Samba (by whatever means is configured). If Samba runs on the same host as CUPS, you only need to allow "localhost" to print. If they run on different machines, you need to make sure the Samba host gets access to printing on CUPS. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958550"></a>Network PostScript RIP: CUPS Filters on Server -- clients use +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967448"></a>Network PostScript RIP: CUPS Filters on Server -- clients use PostScript Driver with CUPS-PPDs</h2></div></div><div></div></div><p> PPDs can control all print device options. They are usually provided by the manufacturer; if you own a PostScript printer, that is. PPD @@ -1351,7 +1352,7 @@ or see if you have lphelp on your system). There are also some different GUI frontends on Linux/UNIX, which can present PPD options to users. PPD options are normally meant to be evaluated by the PostScript RIP on the real PostScript printer. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958605"></a>PPDs for non-PS Printers on UNIX</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967503"></a>PPDs for non-PS Printers on UNIX</h3></div></div><div></div></div><p> CUPS doesn't limit itself to "real" PostScript printers in its usage of PPDs. The CUPS developers have extended the scope of the PPD concept, to also describe available device and driver options for @@ -1368,7 +1369,7 @@ the supplied PostScript. Thus CUPS lets all its printers appear as PostScript devices to its clients, because it can act as a PostScript RIP for those printers, processing the received PostScript code into a proper raster print format. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958646"></a>PPDs for non-PS Printers on Windows</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967544"></a>PPDs for non-PS Printers on Windows</h3></div></div><div></div></div><p> CUPS-PPDs can also be used on Windows-Clients, on top of a "core" PostScript driver (now recommended is the "CUPS PostScript Driver for WindowsNT/2K/XP"; you can also use the Adobe one, with @@ -1384,13 +1385,13 @@ which always remain unfiltered per definition;</p></li><li><p>enable clients to driver, even for many different target printers.</p></li></ul></div><p> Using CUPS PPDs on Windows clients enables these to control all print job settings just as a UNIX client can do too. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958712"></a>Windows Terminal Servers (WTS) as CUPS Clients</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967609"></a>Windows Terminal Servers (WTS) as CUPS Clients</h2></div></div><div></div></div><p> This setup may be of special interest to people experiencing major problems in WTS environments. WTS need often a multitude of non-PostScript drivers installed to run their clients' variety of different printer models. This often imposes the price of much increased instability. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958729"></a>Printer Drivers running in "Kernel Mode" cause many +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967626"></a>Printer Drivers running in "Kernel Mode" cause many Problems</h3></div></div><div></div></div><p> The reason is that in Win NT printer drivers run in "Kernel Mode", this introduces a high risk for the stability of the system @@ -1407,7 +1408,7 @@ might be because there have so far only been 2 different PostScript drivers the ones from Adobe and the one from Microsoft. Both are very well tested and are as stable as you ever can imagine on Windows. The CUPS driver is derived from the Microsoft one. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958763"></a>Workarounds impose Heavy Limitations</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967661"></a>Workarounds impose Heavy Limitations</h3></div></div><div></div></div><p> In many cases, in an attempt to work around this problem, site administrators have resorted to restrict the allowed drivers installed on their WTS to one generic PCL- and one PostScript driver. This @@ -1415,7 +1416,7 @@ however restricts the clients in the amount of printer options available for them; often they can't get out more than simplex prints from one standard paper tray, while their devices could do much better, if driven by a different driver! ) -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958784"></a>CUPS: a "Magical Stone"?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967682"></a>CUPS: a "Magical Stone"?</h3></div></div><div></div></div><p> Using a PostScript driver, enabled with a CUPS-PPD, seems to be a very elegant way to overcome all these shortcomings. There are, depending on the version of Windows OS you use, up to 3 different PostScript @@ -1427,7 +1428,7 @@ is a certain price for this too: a CUPS server acting as a PostScript RIP for its clients requires more CPU and RAM than when just acting as a "raw spooling" device. Plus, this setup is not yet widely tested, although the first feedbacks look very promising. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958811"></a>PostScript Drivers with no major problems -- even in Kernel +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967709"></a>PostScript Drivers with no major problems -- even in Kernel Mode</h3></div></div><div></div></div><p> More recent printer drivers on W2K and XP don't run in Kernel mode (unlike Win NT) any more. However, both operating systems can still @@ -1444,14 +1445,14 @@ development efforts. This is what the CUPS people have done. The license doesn't allow them to publish the whole of the source code. However, they have released the "diff" under the GPL, and if you are owner of an "MS DDK for Win NT", you can check the driver yourself. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958865"></a> Setting up CUPS for driver Download</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967743"></a> Setting up CUPS for driver Download</h2></div></div><div></div></div><p> As we have said before: all previously known methods to prepare client printer drivers on the Samba server for download and "Point'n'Print" convenience of Windows workstations are working with CUPS too. These methods were described in the previous chapter. In reality, this is a pure Samba business, and only relates to the Samba/Win client relationship. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958884"></a><span class="emphasis"><em>cupsaddsmb</em></span>: the unknown Utility</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967762"></a><span class="emphasis"><em>cupsaddsmb</em></span>: the unknown Utility</h3></div></div><div></div></div><p> The cupsaddsmb utility (shipped with all current CUPS versions) is an alternative method to transfer printer drivers into the Samba <i class="parameter"><tt>[print$]</tt></i> share. Remember, this share is where @@ -1476,7 +1477,7 @@ job-billing)</p></li></ul></div><p> However, currently only Windows NT, 2000, and XP are supported by the CUPS drivers. You will need to get the respective part of Adobe driver too if you need to support Windows 95, 98, and ME clients. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958976"></a>Prepare your <tt class="filename">smb.conf</tt> for +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967853"></a>Prepare your <tt class="filename">smb.conf</tt> for cupsaddsmb</h3></div></div><div></div></div><p> Prior to running cupsaddsmb, you need the following settings in <tt class="filename">smb.conf</tt>: @@ -1505,7 +1506,7 @@ Prior to running cupsaddsmb, you need the following settings in read only = yes write list = root -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959022"></a>CUPS Package of "PostScript Driver for WinNT/2k/XP"</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967900"></a>CUPS Package of "PostScript Driver for WinNT/2k/XP"</h3></div></div><div></div></div><p> CUPS users may get the exactly same packages from<a href="http://www.cups.org/software.html" target="_top"><span class="emphasis"><em>http://www.cups.org/software.html</em></span></a>. It is a separate package from the CUPS base software files, tagged as <span class="emphasis"><em>CUPS 1.1.x Windows NT/2k/XP Printer Driver for SAMBA @@ -1576,7 +1577,7 @@ Studio 6. Driver developers are not allowed to distribute the whole of the source code as Free Software. However, CUPS developers released the "diff" in source code under the GPL, so anybody with a license of Visual Studio and a DDK will be able to compile for him/herself. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959220"></a>Recognize the different Driver Files</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968097"></a>Recognize the different Driver Files</h3></div></div><div></div></div><p> The CUPS drivers don't support the "older" Windows 95/98/ME, but only the Windows NT/2000/XP client: </p><pre class="screen"> @@ -1611,7 +1612,7 @@ support of WinNT/2k/XP are present in , the Adobe ones will be ignored and the CUPS ones will be used. If you prefer -- for whatever reason -- to use Adobe-only drivers, move away the 3 CUPS driver files. The Win95/98/ME clients use the Adobe drivers in any case. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959278"></a>Acquiring the Adobe Driver Files</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968155"></a>Acquiring the Adobe Driver Files</h3></div></div><div></div></div><p> Acquiring the Adobe driver files seems to be unexpectedly difficult for many users. They are not available on the Adobe website as single files and the self-extracting and/or self-installing Windows-exe is @@ -1624,7 +1625,7 @@ Generic PostScript printer. After this, the client's where you can get them with smbclient from the CUPS host. A more detailed description about this is in the next (the CUPS printing) chapter. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959310"></a>ESP Print Pro Package of "PostScript Driver for +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968188"></a>ESP Print Pro Package of "PostScript Driver for WinNT/2k/XP"</h3></div></div><div></div></div><p> Users of the ESP Print Pro software are able to install their "Samba Drivers" package for this purpose with no problem. Retrieve the driver @@ -1640,7 +1641,7 @@ driver files; i.e. mainly setup the <i class="parameter"><tt>[print$]</tt></i> share, etc. The ESP Print Pro package includes the CUPS driver files as well as a (licensed) set of Adobe drivers for the Windows 95/98/ME client family. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959360"></a>Caveats to be considered</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968238"></a>Caveats to be considered</h3></div></div><div></div></div><p> Once you have run the install script (and possibly manually moved the <tt class="filename">cups.hlp</tt> file to <tt class="filename">/usr/share/cups/drivers/</tt>), the driver is @@ -1660,8 +1661,8 @@ working in an environment where everything is configured for Once the driver files are in the <i class="parameter"><tt>[print$]</tt></i> share and are initialized, they are ready to be downloaded and installed by the Win NT/2k/XP clients. -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> -</p><div class="orderedlist"><ol type="1"><li><p> +</p><div xmlns:ns64="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns64:p> +</ns64:p><div class="orderedlist"><ol type="1"><li><p> Win 9x/ME clients won't work with the CUPS PostScript driver. For these you'd still need to use the <tt class="filename">ADOBE*.*</tt> drivers as previously. @@ -1696,8 +1697,8 @@ as described elsewhere in the "Samba HOWTO Collection": either change a driver for an existing printer by running the "Printer Properties" dialog, or use <b class="command">rpcclient</b> with the <b class="command">setdriver</b> sub-command. -</p></li></ol></div><p> -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959582"></a>What are the Benefits of using the "CUPS PostScript Driver for +</p></li></ol></div><ns64:p> +</ns64:p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968459"></a>What are the Benefits of using the "CUPS PostScript Driver for Windows NT/2k/XP" as compared to the Adobe Driver?</h3></div></div><div></div></div><p> You are interested in a comparison between the CUPS and the Adobe PostScript drivers? For our purposes these are the most important @@ -1743,7 +1744,7 @@ not disturb any other applications as they will regard it as a comment and simply ignore it).</p></li><li><p>the CUPS PostScript driver will be the heart of the fully fledged CUPS IPP client for Windows NT/2K/XP to be released soon (probably alongside the first Beta release for CUPS -1.2).</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959764"></a>Run "cupsaddsmb" (quiet Mode)</h3></div></div><div></div></div><p> +1.2).</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968640"></a>Run "cupsaddsmb" (quiet Mode)</h3></div></div><div></div></div><p> The cupsaddsmb command copies the needed files into your <i class="parameter"><tt>[print$]</tt></i> share. Additionally, the PPD associated with this printer is copied from @@ -1773,7 +1774,7 @@ To share <span class="emphasis"><em>all</em></span> printers and drivers, use th <i class="parameter"><tt>-a</tt></i> parameter instead of a printer name. Since cupsaddsmb "exports" the printer drivers to Samba, it should be obvious that it only works for queues with a CUPS driver associated. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959865"></a>Run "cupsaddsmb" with verbose Output</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968741"></a>Run "cupsaddsmb" with verbose Output</h3></div></div><div></div></div><p> Probably you want to see what's going on. Use the <i class="parameter"><tt>-v</tt></i> parameter to get a more verbose output. The output below was edited for better readability: all "\" at the end of @@ -1858,7 +1859,7 @@ you'll discover error messages like NT_STATUS_OBJECT_NAME_COLLISION in between. They occur, because the directories WIN40 and W32X86 already existed in the <i class="parameter"><tt>[print$]</tt></i> driver download share (from a previous driver installation). They are harmless here. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960092"></a>Understanding cupsaddsmb</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968884"></a>Understanding cupsaddsmb</h3></div></div><div></div></div><p> What has happened? What did cupsaddsmb do? There are five stages of the procedure </p><div class="orderedlist"><ol type="1"><li><p>call the CUPS server via IPP and request the @@ -1881,7 +1882,7 @@ same host): # cupsaddsmb -H sambaserver -h cupsserver -v printername -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960186"></a>How to recognize if cupsaddsm completed successfully</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968978"></a>How to recognize if cupsaddsm completed successfully</h3></div></div><div></div></div><p> You <span class="emphasis"><em>must</em></span> always check if the utility completed successfully in all fields. You need as a minimum these 3 messages amongst the output: @@ -1902,7 +1903,7 @@ It is impossible to see any diagnostic output if you don't run cupsaddsmb in verbose mode. Therefore we strongly recommend to not use the default quiet mode. It will hide any problems from you which might occur. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960273"></a>cupsaddsmb with a Samba PDC</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969065"></a>cupsaddsmb with a Samba PDC</h3></div></div><div></div></div><p> You can't get the standard cupsaddsmb command to run on a Samba PDC? You are asked for the password credential all over again and again and the command just will not take off at all? Try one of these @@ -1916,13 +1917,13 @@ variations: </pre><p> (Note the two backslashes: the first one is required to "escape" the second one). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960308"></a>cupsaddsmb Flowchart</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns65="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969100"></a>cupsaddsmb Flowchart</h3></div></div><div></div></div><p> Here is a chart about the procedures, commandflows and dataflows of the "cupaddsmb" command. Note again: cupsaddsmb is not intended to, and does not work with, "raw" queues! -</p><p> -</p><div class="figure"><a name="id2960326"></a><p class="title"><b>Figure19.14.cupsaddsmb flowchart</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="cupsaddsmb flowchart"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960361"></a>Installing the PostScript Driver on a Client</h3></div></div><div></div></div><p> +</p><ns65:p> +</ns65:p><div class="figure"><a name="id2969117"></a><p class="title"><b>Figure19.14.cupsaddsmb flowchart</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="cupsaddsmb flowchart"></div></div><ns65:p> +</ns65:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969151"></a>Installing the PostScript Driver on a Client</h3></div></div><div></div></div><p> After cupsaddsmb completed, your driver is prepared for the clients to use. Here are the steps you must perform to download and install it via "Point'n'Print". From a Windows client, browse to the CUPS/Samba @@ -1958,7 +1959,7 @@ functions. (Note that user "ntadmin" needs to be a valid Samba user with the required privileges to access the printershare) This would set up the printer connection in the traditional <span class="emphasis"><em>LanMan</em></span> way (not using MS-RPC). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960474"></a>Avoiding critical PostScript Driver Settings on the +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969266"></a>Avoiding critical PostScript Driver Settings on the Client</h3></div></div><div></div></div><p> Soooo: printing works, but there are still problems. Most jobs print well, some don't print at all. Some jobs have problems with fonts, @@ -1984,7 +1985,7 @@ get a printout at all) (Adobe)</p></li><li><p>Sometimes you can choose <span cla Level</em></span>: in case of problems try <span class="emphasis"><em>2</em></span> instead of <span class="emphasis"><em>3</em></span> (the latest ESP Ghostscript package handles Level 3 PostScript very well) (Adobe).</p></li><li><p>Say <span class="emphasis"><em>Yes</em></span> to <span class="emphasis"><em>PostScript -Error Handler</em></span> (Adobe)</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960608"></a>Installing PostScript Driver Files manually (using +Error Handler</em></span> (Adobe)</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2969400"></a>Installing PostScript Driver Files manually (using rpcclient)</h2></div></div><div></div></div><p> Of course you can run all the commands which are embedded into the cupsaddsmb convenience utility yourself, one by one, and hereby upload @@ -2005,7 +2006,7 @@ the MS-RPC protocol. You can use it to query (and command) a Win NT (or 2K/XP) PC too. MS-RPC is used by Windows clients, amongst other things, to benefit from the "Point'n'Print" features. Samba can now mimic this too. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960723"></a>A Check of the rpcclient man Page</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969515"></a>A Check of the rpcclient man Page</h3></div></div><div></div></div><p> First let's have a little check of the rpcclient man page. Here are two relevant passages: </p><p> @@ -2038,7 +2039,7 @@ printer driver associated with an installed printer. The printer driver must already be correctly installed on the print server. </p><p> See also the enumprinters and enumdrivers commands for obtaining a list of installed printers and drivers. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960836"></a>Understanding the rpcclient man Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969627"></a>Understanding the rpcclient man Page</h3></div></div><div></div></div><p> The <span class="emphasis"><em>exact</em></span> format isn't made too clear by the man page, since you have to deal with some parameters containing spaces. Here is a better description for it. We have line-broken the @@ -2074,7 +2075,7 @@ box now, and access it from a UNIX workstation. We will query it with <b class="command">rpcclient</b> to see what it tells us and try to understand the man page more clearly which we've read just now. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960925"></a>Producing an Example by querying a Windows Box</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969706"></a>Producing an Example by querying a Windows Box</h3></div></div><div></div></div><p> We could run <b class="command">rpcclient</b> with a <b class="command">getdriver</b> or a <b class="command">getprinter</b> subcommand (in level 3 verbosity) against it. Just sit down at UNIX or @@ -2119,7 +2120,7 @@ Some printer drivers list additional files under the label <span class="emphasis"><em>ListOfFiles,Comma-separated</em></span>. For the CUPS PostScript drivers we don't need any (nor would we for the Adobe PostScript driver): therefore the field will get a "NULL" entry. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961015"></a>What is required for adddriver and setdriver to succeed</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969796"></a>What is required for adddriver and setdriver to succeed</h3></div></div><div></div></div><p> From the manpage (and from the quoted output of <span class="emphasis"><em>cupsaddsmb</em></span>, above) it becomes clear that you need to have certain conditions in order to make the manual uploading @@ -2150,12 +2151,12 @@ rpcclient. A long-standing bug prevented a proper update of the printer list until every smbd process had received a SIGHUP or was restarted. Remember this in case you've created the CUPS printer just shortly ago and encounter problems: try restarting -Samba.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961177"></a>Manual Commandline Driver Installation in 15 little Steps</h3></div></div><div></div></div><p> +Samba.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969958"></a>Manual Commandline Driver Installation in 15 little Steps</h3></div></div><div></div></div><p> We are going to install a printer driver now by manually executing all required commands. As this may seem a rather complicated process at first, we go through the procedure step by step, explaining every single action item as it comes up. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961194"></a>First Step: Install the Printer on CUPS</h4></div></div><div></div></div><pre class="screen"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2969975"></a>First Step: Install the Printer on CUPS</h4></div></div><div></div></div><pre class="screen"> # lpadmin -p mysmbtstprn -v socket://10.160.51.131:9100 -E -P /home/kurt/canonIR85.ppd @@ -2164,7 +2165,7 @@ This installs printer with the name <span class="emphasis"><em>mysmbtstprn</em>< to the CUPS system. The printer is accessed via a socket (a.k.a. JetDirect or Direct TCP/IP) connection. You need to be root for this step -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961224"></a>Second Step (optional): Check if the Printer is recognized by +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970005"></a>Second Step (optional): Check if the Printer is recognized by Samba</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep -C2 mysmbtstprn @@ -2185,7 +2186,7 @@ already. You need to know root's Samba password (as set by the following steps. Alternatively you can authenticate as one of the users from the "write list" as defined in <tt class="filename">smb.conf</tt> for <i class="parameter"><tt>[print$]</tt></i>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961288"></a>Third Step (optional): Check if Samba knows a Driver for the +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970068"></a>Third Step (optional): Check if Samba knows a Driver for the Printer</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver @@ -2211,7 +2212,7 @@ This step was done for the purpose of demonstrating this condition. An attempt to connect to the printer at this stage will prompt the message along the lines: "The server has not the required printer driver installed". -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961326"></a>Fourth Step: Put all required Driver Files into Samba's +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970106"></a>Fourth Step: Put all required Driver Files into Samba's [print$]</h4></div></div><div></div></div><pre class="screen"> # smbclient //localhost/print\$ -U 'root%xxxx' \ @@ -2230,7 +2231,7 @@ present in the <i class="parameter"><tt>[print$]</tt></i> share. However, client would still not be able to install them, because Samba does not yet treat them as driver files. A client asking for the driver would still be presented with a "not installed here" message. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961377"></a>Fifth Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen"> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970157"></a>Fifth Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen"> # ls -l /etc/samba/drivers/W32X86/ total 669 @@ -2244,7 +2245,7 @@ be presented with a "not installed here" message. </pre><p> The driver files now are in the W32X86 architecture "root" of <i class="parameter"><tt>[print$]</tt></i>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961415"></a>Sixth Step: Tell Samba that these are +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970195"></a>Sixth Step: Tell Samba that these are <span class="emphasis"><em>Driver</em></span> Files (<b class="command">adddriver</b>)</h4></div></div><div></div></div><pre class="screen"> @@ -2265,7 +2266,7 @@ driver. It is normally a good idea to use the same name as is used for the printername; however, in big installations you may use this driver for a number of printers which have obviously different names. So the name of the driver is not fixed. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961469"></a>Seventh Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen"> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970250"></a>Seventh Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen"> # ls -l /etc/samba/drivers/W32X86/ total 1 @@ -2284,7 +2285,7 @@ name of the driver is not fixed. </pre><p> Notice how step 6 did also move the driver files to the appropriate subdirectory. Compare with the situation after step 5. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961503"></a>Eighth Step (optional): Verify if Samba now recognizes the +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970283"></a>Eighth Step (optional): Verify if Samba now recognizes the Driver</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'enumdrivers 3' localhost | grep -B2 -A5 mydrivername @@ -2301,7 +2302,7 @@ Driver</h4></div></div><div></div></div><pre class="screen"> </pre><p> Remember, this command greps for the name you did choose for the driver in step Six. This command must succeed before you can proceed. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961536"></a>Ninth Step: Tell Samba which Printer should use these Driver +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970316"></a>Ninth Step: Tell Samba which Printer should use these Driver Files (<b class="command">setdriver</b>)</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'setdriver mysmbtstprn mydrivername' localhost @@ -2315,7 +2316,7 @@ driver. You don't need to repeat all the previous steps for the setdriver command to succeed. The only pre-conditions are: <b class="command">enumdrivers</b> must find the driver and <b class="command">enumprinters</b> must find the printer. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961586"></a>Tenth Step (optional): Verify if Samba has this Association +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970366"></a>Tenth Step (optional): Verify if Samba has this Association recognized</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver @@ -2357,7 +2358,7 @@ Compare these results with the ones from steps 2 and 3. Note that every single of these commands show the driver is installed. Even the <b class="command">enumprinters</b> command now lists the driver on the "description" line. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961666"></a>Eleventh Step (optional): Tickle the Driver into a correct +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970422"></a>Eleventh Step (optional): Tickle the Driver into a correct Device Mode</h4></div></div><div></div></div><p> You certainly know how to install the driver on the client. In case you are not particularly familiar with Windows, here is a short @@ -2382,7 +2383,7 @@ into the "DOS box" (type root's smbpassword when prompted): Change any printer setting once (like <span class="emphasis"><em>"portrait" --> "landscape"</em></span>), click "Apply"; change the setting back. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961731"></a>Twelfth Step: Install the Printer on a Client +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970484"></a>Twelfth Step: Install the Printer on a Client ("Point'n'Print")</h4></div></div><div></div></div><pre class="screen"> C:\> rundll32 printui.dll,PrintUIEntry /in /n "\\sambacupsserver\mysmbtstprn" @@ -2390,24 +2391,24 @@ back. </pre><p> If it doesn't work it could be a permission problem with the <i class="parameter"><tt>[print$]</tt></i> share. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961764"></a>Thirteenth Step (optional): Print a Test Page</h4></div></div><div></div></div><pre class="screen"> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970515"></a>Thirteenth Step (optional): Print a Test Page</h4></div></div><div></div></div><pre class="screen"> C:\> rundll32 printui.dll,PrintUIEntry /p /n "\\sambacupsserver\mysmbtstprn" </pre><p> Then hit [TAB] 5 times, [ENTER] twice, [TAB] once and [ENTER] again and march to the printer. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961790"></a>Fourteenth Step (recommended): Study the Test Page</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970540"></a>Fourteenth Step (recommended): Study the Test Page</h4></div></div><div></div></div><p> Hmmm.... just kidding! By now you know everything about printer installations and you don't need to read a word. Just put it in a frame and bolt it to the wall with the heading "MY FIRST RPCCLIENT-INSTALLED PRINTER" - why not just throw it away! -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961808"></a>Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970558"></a>Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your Success</h4></div></div><div></div></div><pre class="screen"> # echo "Cheeeeerioooooo! Success..." >> /var/log/samba/log.smbd -</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961830"></a>Troubleshooting revisited</h3></div></div><div></div></div><p> +</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970578"></a>Troubleshooting revisited</h3></div></div><div></div></div><p> The setdriver command will fail, if in Samba's mind the queue is not already there. You had promising messages about the: </p><pre class="screen"> @@ -2450,7 +2451,7 @@ An alternative command could be this: </pre><p> BTW, you can use these commands, plus a few more, of course, to install drivers on remote Windows NT print servers too! -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961930"></a>The printing <tt class="filename">*.tdb</tt> Files</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2970680"></a>The printing <tt class="filename">*.tdb</tt> Files</h2></div></div><div></div></div><p> Some mystery is associated with the series of files with a tdb-suffix appearing in every Samba installation. They are <tt class="filename">connections.tdb</tt>, @@ -2465,7 +2466,7 @@ tdb-suffix appearing in every Samba installation. They are <tt class="filename">ntprinters.tdb</tt>, <tt class="filename">sessionid.tdb</tt> and <tt class="filename">secrets.tdb</tt>. What is their purpose? -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962033"></a>Trivial DataBase Files</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970783"></a>Trivial DataBase Files</h3></div></div><div></div></div><p> A Windows NT (Print) Server keeps track of all information needed to serve its duty toward its clients by storing entries in the Windows "Registry". Client queries are answered by reading from the registry, @@ -2478,7 +2479,7 @@ or <tt class="filename">/var/lock/samba/</tt> . The printing related files are <tt class="filename">ntprinters.tdb</tt>, <tt class="filename">printing.tdb</tt>,<tt class="filename">ntforms.tdb</tt> and <tt class="filename">ntdrivers.tdb</tt>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962103"></a>Binary Format</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970853"></a>Binary Format</h3></div></div><div></div></div><p> <tt class="filename">*.tdb</tt> files are not human readable. They are written in a binary format. "Why not ASCII?", you may ask. "After all, ASCII configuration files are a good and proofed tradition on UNIX." @@ -2491,7 +2492,7 @@ same time</em></span>. The file format of Samba's <tt class="filename">*.tdb</tt> files allows for this provision. Many smbd processes may write to the same <tt class="filename">*.tdb</tt> file at the same time. This wouldn't be possible with pure ASCII files. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962165"></a>Losing <tt class="filename">*.tdb</tt> Files</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970915"></a>Losing <tt class="filename">*.tdb</tt> Files</h3></div></div><div></div></div><p> It is very important that all <tt class="filename">*.tdb</tt> files remain consistent over all write and read accesses. However, it may happen that these files <span class="emphasis"><em>do</em></span> get corrupted. (A @@ -2501,7 +2502,7 @@ etc.). In cases of trouble, a deletion of the old printing-related <tt class="filename">*.tdb</tt> files may be the only option. You need to re-create all print related setup after that. Or you have made a backup of the <tt class="filename">*.tdb</tt> files in time. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962224"></a>Using <span class="emphasis"><em>tdbbackup</em></span></h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970974"></a>Using <span class="emphasis"><em>tdbbackup</em></span></h3></div></div><div></div></div><p> Samba ships with a little utility which helps the root user of your system to back up your <tt class="filename">*.tdb</tt> files. If you run it with no argument, it prints a little usage message: @@ -2531,7 +2532,7 @@ Here is how I backed up my printing.tdb file: -rw------- 1 root root 40960 May 2 03:44 printing.tdb -rw------- 1 root root 40960 May 2 03:44 printing.tdb.bak -</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962290"></a>CUPS Print Drivers from Linuxprinting.org</h2></div></div><div></div></div><p> +</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2971036"></a>CUPS Print Drivers from Linuxprinting.org</h2></div></div><div></div></div><p> CUPS ships with good support for HP LaserJet type printers. You can install the generic driver as follows: </p><pre class="screen"> @@ -2565,7 +2566,7 @@ not work with PPDs generated for the old cupsomatic. The new-style PPDs are 100% compliant to the Adobe PPD specification. They are intended to be used by Samba and the cupsaddsmb utility also, to provide the driver files for the Windows clients also! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962398"></a>foomatic-rip and Foomatic explained</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2971142"></a>foomatic-rip and Foomatic explained</h3></div></div><div></div></div><p> Nowadays most Linux distros rely on the utilities of Linuxprinting.org to create their printing related software (which, BTW, works on all UNIXes and on Mac OS X or Darwin too). It is not known as well as it @@ -2582,7 +2583,7 @@ its <a href="http://www.linuxprinting.org/foomatic.html" target="_top">Foomatic< database. Currently there are <a href="http://www.linuxprinting.org/driver_list.cgi" target="_top">245 drivers</a> in the database: many drivers support various models, and many models may be driven by different drivers; it's your choice! -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962453"></a>690 "perfect" Printers</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971197"></a>690 "perfect" Printers</h4></div></div><div></div></div><p> At present there are 690 devices dubbed as working "perfectly", 181 "mostly", 96 "partially" and 46 are "Paperweights". Keeping in mind that most of these are non-PostScript models (PostScript printers are @@ -2593,7 +2594,7 @@ doesn't also scan and copy and fax under GNU/Linux: then this is a truly astonishing achievement. Three years ago the number was not more than 500, and Linux or UNIX "printing" at the time wasn't anywhere near the quality it is today! -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962477"></a>How the "Printing HOWTO" started it all</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971222"></a>How the "Printing HOWTO" started it all</h4></div></div><div></div></div><p> A few years ago <a href="http://www2.picante.com:81/~gtaylor/" target="_top">Grant Taylor</a> started it all. The roots of today's Linuxprinting.org are in the first <a href="http://www.linuxprinting.org/foomatic2.9/howto/" target="_top">Linux Printing @@ -2607,7 +2608,7 @@ hardware and driver zoo that made up Linux printing of the time. This database became the core component of today's Foomatic collection of tools and data. In the meantime it has moved to an XML representation of the data. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962522"></a>Foomatic's strange Name</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971267"></a>Foomatic's strange Name</h4></div></div><div></div></div><p> "Why the funny name?", you ask. When it really took off, around spring 2000, CUPS was far less popular than today, and most systems used LPD, LPRng or even PDQ to print. CUPS shipped with a few generic "drivers" @@ -2630,7 +2631,7 @@ developments available for CUPS;</p></li><li><p>It made available a lot of addit to CUPS users (because often the "traditional" Ghostscript way of printing was the only one available);</p></li><li><p>It gave all the advanced CUPS options (web interface, GUI driver configurations) to users wanting (or needing) to use -Ghostscript filters.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962589"></a>cupsomatic, pdqomatic, lpdomatic, directomatic</h4></div></div><div></div></div><p> +Ghostscript filters.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971334"></a>cupsomatic, pdqomatic, lpdomatic, directomatic</h4></div></div><div></div></div><p> CUPS worked through a quickly-hacked up filter script named <a href="http://www.linuxprinting.org/download.cgi?filename=cupsomatic&show=0" target="_top">cupsomatic</a>. cupsomatic ran the printfile through Ghostscript, constructing automatically the rather complicated command line needed. It just @@ -2664,7 +2665,7 @@ Foomatic up to versions 2.0.x required (ugly) Perl data structures attached the Linuxprinting.org PPDs for CUPS. It had a different "*omatic" script for every spooler, as well as different printer configuration files.. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962725"></a>7.13.1.5.The <span class="emphasis"><em>Grand Unification</em></span> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971466"></a>7.13.1.5.The <span class="emphasis"><em>Grand Unification</em></span> achieved...</h4></div></div><div></div></div><p> This all has changed in Foomatic versions 2.9 (Beta) and released as "stable" 3.0. This has now achieved the convergence of all *omatic @@ -2700,7 +2701,7 @@ sizes for many printers; and it will support printing on media drawn from different paper trays within the same job (in both cases: even where there is no support for this from Windows-based vendor printer drivers). -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962810"></a>Driver Development outside</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971554"></a>Driver Development outside</h4></div></div><div></div></div><p> Most driver development itself does not happen within Linuxprinting.org. Drivers are written by independent maintainers. Linuxprinting.org just pools all the information, and stores it in its @@ -2723,7 +2724,7 @@ effort, started by Michael Sweet (also lead developer for CUPS), now directed by Robert Krawitz, which has achieved an amazing level of photo print quality (many Epson users swear that its quality is better than the vendor drivers provided by Epson for the Microsoft -platforms). This currently supports 522 models.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962892"></a>Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and +platforms). This currently supports 522 models.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971632"></a>Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and commercial Unix</h4></div></div><div></div></div><p> Linuxprinting.org today is the one-stop "shop" to download printer drivers. Look for printer information and <a href="http://www.linuxprinting.org//kpfeifle/LinuxKongress2002/Tutorial/" target="_top">tutorials</a> @@ -2744,7 +2745,7 @@ of the Foomatic project. Till Kamppeter from MandrakeSoft is doing an excellent job in his spare time to maintain Linuxprinting.org and Foomatic. So if you use it often, please send him a note showing your appreciation. -</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962963"></a>Foomatic Database generated PPDs</h4></div></div><div></div></div><p> +</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971705"></a>Foomatic Database generated PPDs</h4></div></div><div></div></div><p> The Foomatic database is an amazing piece of ingenuity in itself. Not only does it keep the printer and driver information, but it is organized in a way that it can generate "PPD" files "on the fly" from @@ -2769,7 +2770,7 @@ GUI tools (like KDE's marvellous <a href="http://printing.kde.org/overview/kprin or the GNOME <a href="http://gtklp.sourceforge.net/" target="_top">"gtklp"</a>, "xpp" and the CUPS web interface) read the PPD too and use this information to present the available settings to the user as an intuitive menu selection. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963027"></a>foomatic-rip and Foomatic-PPD Download and Installation</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2971770"></a>foomatic-rip and Foomatic-PPD Download and Installation</h3></div></div><div></div></div><p> Here are the steps to install a foomatic-rip driven "LaserJet 4 Plus" compatible printer in CUPS (note that recent distributions of SuSE, UnitedLinux and Mandrake may ship with a complete package of @@ -2868,7 +2869,7 @@ the driver/model) contain support for a certain "device", representing the selected "driver" for your model (as shown by "gs -h")</p></li><li><p>foomatic-rip needs a new version of PPDs (PPD versions produced for cupsomatic don't work with -foomatic-rip).</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963488"></a>Page Accounting with CUPS</h2></div></div><div></div></div><p> +foomatic-rip).</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972228"></a>Page Accounting with CUPS</h2></div></div><div></div></div><p> Often there are questions regarding "print quotas" wherein Samba users (that is, Windows clients) should not be able to print beyond a certain amount of pages or data volume per day, week or month. This @@ -2881,7 +2882,7 @@ Of course one could "hack" things with one's own scripts. But then there is CUPS. CUPS supports "quotas" which can be based on sizes of jobs or on the number of pages or both, and are spanning any time period you want. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963519"></a>Setting up Quotas</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972259"></a>Setting up Quotas</h3></div></div><div></div></div><p> This is an example command how root would set a print quota in CUPS, assuming an existing printer named "quotaprinter": </p><pre class="screen"> @@ -2892,7 +2893,7 @@ assuming an existing printer named "quotaprinter": This would limit every single user to print 100 pages or 1024 KB of data (whichever comes first) within the last 604,800 seconds ( = 1 week). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963551"></a>Correct and incorrect Accounting</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972290"></a>Correct and incorrect Accounting</h3></div></div><div></div></div><p> For CUPS to count correctly, the printfile needs to pass the CUPS "pstops" filter, otherwise it uses a "dummy" count of "1". Some printfiles don't pass it (eg: image files) but then those are mostly 1 @@ -2907,7 +2908,7 @@ printer is a non-PostScript model, you need to let CUPS do the job to convert the file to a print-ready format for the target printer. This will be working for currently about 1,000 different printer models, see <a href="http://www.linuxprinting.org/printer_list.cgi" target="_top">http://www.linuxprinting.org/printer_list.cgi</a>). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963592"></a>Adobe and CUPS PostScript Drivers for Windows Clients</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972331"></a>Adobe and CUPS PostScript Drivers for Windows Clients</h3></div></div><div></div></div><p> Before CUPS-1.1.16 your only option was to use the Adobe PostScript Driver on the Windows clients. The output of this driver was not always passed through the "pstops" filter on the CUPS/Samba side, and @@ -2927,7 +2928,7 @@ printfile</p></li></ul></div><p> You can read more about the setup of this combination in the manpage for "cupsaddsmb" (which is only present with CUPS installed, and only current from CUPS 1.1.16). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963663"></a>The page_log File Syntax</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972403"></a>The page_log File Syntax</h3></div></div><div></div></div><p> These are the items CUPS logs in the "page_log" for every single <span class="emphasis"><em>page</em></span> of a job: </p><div class="itemizedlist"><ul type="disc"><li><p>Printer name</p></li><li><p>User name</p></li><li><p>Job ID</p></li><li><p>Time of printing</p></li><li><p>the page number</p></li><li><p>the number of copies</p></li><li><p>a billing information string @@ -2949,7 +2950,7 @@ This was job ID "401", printed on "infotec_IS2027" by user & from IP address 10.160.50.13. The next job had ID "402", was sent by user "boss" from IP address 10.160.51.33,printed from one page 440 copies and is set to be billed to "finance-dep". -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963765"></a>Possible Shortcomings</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972504"></a>Possible Shortcomings</h3></div></div><div></div></div><p> What flaws or shortcomings are there with this quota system? </p><div class="itemizedlist"><ul type="disc"><li><p>the ones named above (wrongly logged job in case of printer hardware failure, etc.)</p></li><li><p>in reality, CUPS counts the job pages that are being @@ -2963,7 +2964,7 @@ groups</p></li><li><p>no means to read out the current balance or the "used-up" number of current quota</p></li><li><p>a user having used up 99 sheets of 100 quota will still be able to send and print a 1,000 sheet job</p></li><li><p>a user being denied a job because of a filled-up quota doesn't get a meaningful error message from CUPS other than -"client-error-not-possible".</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963836"></a>Future Developments</h3></div></div><div></div></div><p> +"client-error-not-possible".</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972576"></a>Future Developments</h3></div></div><div></div></div><p> This is the best system currently available, and there are huge improvements under development for CUPS 1.2: </p><div class="itemizedlist"><ul type="disc"><li><p>page counting will go into the "backends" (these talk @@ -2971,9 +2972,9 @@ directly to the printer and will increase the count in sync with the actual printing process: thus a jam at the 5th sheet will lead to a stop in the counting)</p></li><li><p>quotas will be handled more flexibly</p></li><li><p>probably there will be support for users to inquire their "accounts" in advance</p></li><li><p>probably there will be support for some other tools -around this topic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963884"></a>Other Accounting Tools</h3></div></div><div></div></div><p> +around this topic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972624"></a>Other Accounting Tools</h3></div></div><div></div></div><p> PrintAnalyzer, pyKota, printbill, LogReport. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963899"></a>Additional Material</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972639"></a>Additional Material</h2></div></div><div></div></div><p> A printer queue with <span class="emphasis"><em>no</em></span> PPD associated to it is a "raw" printer and all files will go directly there as received by the spooler. The exceptions are file types "application/octet-stream" @@ -3051,7 +3052,7 @@ the jobs of hundreds of users on some big machine, where no user is allowed to have direct access (such as when the operators often need to load the proper paper type before running the 10,000 page job requested by marketing for the mailing, etc.). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964092"></a>Auto-Deletion or Preservation of CUPS Spool Files</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972832"></a>Auto-Deletion or Preservation of CUPS Spool Files</h2></div></div><div></div></div><p> Samba print files pass through two "spool" directories. One is the incoming directory managed by Samba, (set in the <span class="emphasis"><em>path = /var/spool/samba</em></span> directive in the @@ -3060,7 +3061,7 @@ incoming directory managed by Samba, (set in the <span class="emphasis"><em>path your UNIX print subsystem. For CUPS it is normally <tt class="filename">/var/spool/cups/</tt>, as set by the cupsd.conf directive <tt class="filename">RequestRoot /var/spool/cups</tt>. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964138"></a>CUPS Configuration Settings explained</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972878"></a>CUPS Configuration Settings explained</h3></div></div><div></div></div><p> Some important parameter settings in the CUPS configuration file <tt class="filename">cupsd.conf</tt> are: </p><div class="variablelist"><dl><dt><span class="term">PreserveJobHistory Yes</span></dt><dd><p> @@ -3084,7 +3085,7 @@ maximum to 0 disables this functionality. The default setting is </p></dd></dl></div><p> (There are also additional settings for "MaxJobsPerUser" and "MaxJobsPerPrinter"...) -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964221"></a>Pre-conditions</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972960"></a>Pre-conditions</h3></div></div><div></div></div><p> For everything to work as announced, you need to have three things: </p><div class="itemizedlist"><ul type="disc"><li><p>a Samba-smbd which is compiled against "libcups" (Check @@ -3095,15 +3096,15 @@ In this case all other manually set printing-related commands (like "print command", "lpq command", "lprm command", "lppause command" or "lpresume command") are ignored and they should normally have no influence what-so-ever on your printing. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964281"></a>Manual Configuration</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973021"></a>Manual Configuration</h3></div></div><div></div></div><p> If you want to do things manually, replace the "printing = cups" by "printing = bsd". Then your manually set commands may work (haven't tested this), and a "print command = lp -d %P %s; rm %s" may do what you need. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964299"></a>When <span class="emphasis"><em>not</em></span> to use Samba to print to +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973039"></a>When <span class="emphasis"><em>not</em></span> to use Samba to print to CUPS</h2></div></div><div></div></div><p> [TO BE DONE] -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964316"></a>In Case of Trouble.....</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973056"></a>In Case of Trouble.....</h2></div></div><div></div></div><p> If you have more problems, post the output of these commands to the CUPS or Samba mailing lists (choose the one which seems more relevant to your problem): @@ -3119,13 +3120,13 @@ compact way. Don't forget to name the CUPS and Samba versions you are using! This saves bandwidth and makes for easier readability for experts (and you are expecting experts to read them, right? ;-) -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964352"></a>Where to find Documentation</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973091"></a>Where to find Documentation</h3></div></div><div></div></div><p> [TO BE DONE] -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964364"></a>How to ask for Help</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973104"></a>How to ask for Help</h3></div></div><div></div></div><p> [TO BE DONE] -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964377"></a>Where to find Help</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973117"></a>Where to find Help</h3></div></div><div></div></div><p> [TO BE DONE] -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964391"></a>Appendix</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964398"></a>Printing <span class="emphasis"><em>from</em></span> CUPS to Windows attached +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973131"></a>Appendix</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973138"></a>Printing <span class="emphasis"><em>from</em></span> CUPS to Windows attached Printers</h3></div></div><div></div></div><p> From time to time the question arises, how you can print <span class="emphasis"><em>to</em></span> a Windows attached printer @@ -3213,7 +3214,7 @@ doesn't require a password! Printing will only work if you have a working netbios name resolution up and running. Note that this is a feature of CUPS and you don't necessarily need to have smbd running (but who wants that? :-). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964612"></a>More CUPS filtering Chains</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973332"></a>More CUPS filtering Chains</h3></div></div><div></div></div><p> The following diagrams reveal how CUPS handles print jobs. </p><pre class="screen"> ######################################################################### @@ -3504,7 +3505,7 @@ The following diagrams reveal how CUPS handles print jobs. # CUPS and ESP PrintPro plug-in where rastertosomething is noted. # ########################################################################## -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964919"></a>Trouble Shooting Guidelines to fix typical Samba printing +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973586"></a>Trouble Shooting Guidelines to fix typical Samba printing Problems</h3></div></div><div></div></div><p> This is a short description of how to debug printing problems with Samba. This describes how to debug problems with printing from @@ -3617,35 +3618,35 @@ three dialogs <span class="emphasis"><em>look</em></span> the same. Only one of <span class="emphasis"><em>does</em></span> what you intend. You need to be Administrator or Print Administrator to do this for all users. Here is how I do in on XP: -</p><div class="orderedlist"><ol type="A"><li><p>The first "wrong" way: +</p><div class="orderedlist"><ol type="A"><li xmlns:ns66=""><ns66:p>The first "wrong" way: -</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span> +</ns66:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span> folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and select in context menu <span class="emphasis"><em>Printing Preferences...</em></span></p></li><li><p>Look at this dialog closely and remember what it looks -like.</p></li></ol></div><p> -</p></li><li><p>The second "wrong" way: +like.</p></li></ol></div><ns66:p> +</ns66:p></li><li xmlns:ns67=""><ns67:p>The second "wrong" way: -</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span> +</ns67:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span> folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and select in the context menu <span class="emphasis"><em>Properties</em></span></p></li><li><p>Click on the <span class="emphasis"><em>General</em></span> tab</p></li><li><p>Click on the button <span class="emphasis"><em>Printing Preferences...</em></span></p></li><li><p>A new dialog opens. Keep this dialog open and go back -to the parent dialog.</p></li></ol></div><p> -</p></li><li><p>The third, the "correct" way: (should you do +to the parent dialog.</p></li></ol></div><ns67:p> +</ns67:p></li><li xmlns:ns68=""><ns68:p>The third, the "correct" way: (should you do this from the beginning, just carry out steps 1. and 2. from second "way" above) -</p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="emphasis"><em>Advanced</em></span> +</ns68:p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="emphasis"><em>Advanced</em></span> tab. (Hmmm... if everything is "Grayed Out", then you are not logged in as a user with enough privileges).</p></li><li><p>Click on the <span class="emphasis"><em>Printing Defaults...</em></span> button.</p></li><li><p>On any of the two new tabs, click on the <span class="emphasis"><em>Advanced...</em></span> button.</p></li><li><p>A new dialog opens. Compare this one to the other, -identical looking one from "B.5" or A.3".</p></li></ol></div><p> -</p></li></ol></div><p> +identical looking one from "B.5" or A.3".</p></li></ol></div><ns68:p> +</ns68:p></li></ol></div><p> Do you see any difference? I don't either... However, only the last one, which you arrived at with steps "C.1.-6." will save any settings permanently and be the defaults for new users. If you want all clients @@ -3728,6 +3729,6 @@ Windows box with a shared PostScript printer: <b class="command">smbclient <tt class="filename">W32X86/2</tt> subdir to <b class="command">mget ADOBE*</b> and other files or to <tt class="filename">WIN40/0</tt> to do the same. -- Another option is to download the <tt class="filename">*.exe</tt> packaged -files from the Adobe website.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966041"></a>An Overview of the CUPS Printing Processes</h3></div></div><div></div></div><p> -</p><div class="figure"><a name="id2966052"></a><p class="title"><b>Figure19.15.CUPS Printing Overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/a_small.png" alt="CUPS Printing Overview"></div></div><p> -</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="printing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="VFS.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter18.Classical Printing Support</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter20.Stackable VFS modules</td></tr></table></div></body></html> +files from the Adobe website.</p></dd></dl></div></div><div xmlns:ns69="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974692"></a>An Overview of the CUPS Printing Processes</h3></div></div><div></div></div><ns69:p> +</ns69:p><div class="figure"><a name="id2974702"></a><p class="title"><b>Figure19.15.CUPS Printing Overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/a_small.png" alt="CUPS Printing Overview"></div></div><ns69:p> +</ns69:p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="printing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="VFS.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter18.Classical Printing Support</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter20.Stackable VFS modules</td></tr></table></div></body></html> diff --git a/docs/htmldocs/ClientConfig.html b/docs/htmldocs/ClientConfig.html index 395be92345..2f7002efbf 100644 --- a/docs/htmldocs/ClientConfig.html +++ b/docs/htmldocs/ClientConfig.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter9.MS Windows Network Configuration Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers"><link rel="next" href="optional.html" title="PartIII.Advanced Configuration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter9.MS Windows Network Configuration Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="StandAloneServer.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="optional.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ClientConfig"></a>Chapter9.MS Windows Network Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ClientConfig.html#id2901966">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901966"></a>Note</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter9.MS Windows Network Configuration Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers"><link rel="next" href="optional.html" title="PartIII.Advanced Configuration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter9.MS Windows Network Configuration Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="StandAloneServer.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="optional.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ClientConfig"></a>Chapter9.MS Windows Network Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ClientConfig.html#id2901302">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901302"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="StandAloneServer.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="optional.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter8.Stand-Alone Servers</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">PartIII.Advanced Configuration</td></tr></table></div></body></html> diff --git a/docs/htmldocs/DNSDHCP.html b/docs/htmldocs/DNSDHCP.html index dadf6b989a..7e09c78215 100644 --- a/docs/htmldocs/DNSDHCP.html +++ b/docs/htmldocs/DNSDHCP.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter40.DNS and DHCP Configuration Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="speed.html" title="Chapter39.Samba Performance Tuning"><link rel="next" href="Further-Resources.html" title="Chapter41.Further Resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter40.DNS and DHCP Configuration Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="speed.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Further-Resources.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="DNSDHCP"></a>Chapter40.DNS and DHCP Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="DNSDHCP.html#id3018605">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3018605"></a>Note</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter40.DNS and DHCP Configuration Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="speed.html" title="Chapter39.Samba Performance Tuning"><link rel="next" href="Further-Resources.html" title="Chapter41.Further Resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter40.DNS and DHCP Configuration Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="speed.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Further-Resources.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="DNSDHCP"></a>Chapter40.DNS and DHCP Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="DNSDHCP.html#id3016535">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016535"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="speed.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Further-Resources.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter39.Samba Performance Tuning</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter41.Further Resources</td></tr></table></div></body></html> diff --git a/docs/htmldocs/FastStart.html b/docs/htmldocs/FastStart.html index dbb85dea6e..2d474566c5 100644 --- a/docs/htmldocs/FastStart.html +++ b/docs/htmldocs/FastStart.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter3.Fast Start for the Impatient</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="install.html" title="Chapter2.How to Install and Test SAMBA"><link rel="next" href="type.html" title="PartII.Server Configuration Basics"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter3.Fast Start for the Impatient</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="install.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="type.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FastStart"></a>Chapter3.Fast Start for the Impatient</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FastStart.html#id2886744">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886744"></a>Note</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter3.Fast Start for the Impatient</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="install.html" title="Chapter2.How to Install and Test SAMBA"><link rel="next" href="type.html" title="PartII.Server Configuration Basics"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter3.Fast Start for the Impatient</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="install.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="type.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FastStart"></a>Chapter3.Fast Start for the Impatient</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FastStart.html#id2886380">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886380"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="install.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="type.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter2.How to Install and Test SAMBA</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">PartII.Server Configuration Basics</td></tr></table></div></body></html> diff --git a/docs/htmldocs/Further-Resources.html b/docs/htmldocs/Further-Resources.html index 8030190ed4..ba734c1e13 100644 --- a/docs/htmldocs/Further-Resources.html +++ b/docs/htmldocs/Further-Resources.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter41.Further Resources</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide"><link rel="next" href="ix01.html" title="Index"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter41.Further Resources</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="DNSDHCP.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="ix01.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Further-Resources"></a>Chapter41.Further Resources</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email"><<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>></tt></p></div></div></div></div><div><p class="pubdate">May 1, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Further-Resources.html#id3018765">Websites</a></dt><dt><a href="Further-Resources.html#id3020416">Related updates from Microsoft</a></dt><dt><a href="Further-Resources.html#id3020431">Books</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3018765"></a>Websites</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter41.Further Resources</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide"><link rel="next" href="ix01.html" title="Index"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter41.Further Resources</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="DNSDHCP.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="ix01.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Further-Resources"></a>Chapter41.Further Resources</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email"><<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>></tt></p></div></div></div></div><div><p class="pubdate">May 1, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Further-Resources.html#id3015954">Websites</a></dt><dt><a href="Further-Resources.html#id3016336">Related updates from Microsoft</a></dt><dt><a href="Further-Resources.html#id3016404">Books</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015954"></a>Websites</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> <a href="http://hr.uoregon.edu/davidrl/cifs.txt" target="_top"> <span class="emphasis"><em>CIFS: Common Insecurities Fail Scrutiny</em></span> by "Hobbit"</a> </p></li><li><p> @@ -85,7 +86,7 @@ <span class="emphasis"><em>WFWG: Password Caching and How It Affects LAN Manager Security</em></span> at Microsoft Knowledge Base </a> - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3020416"></a>Related updates from Microsoft</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016336"></a>Related updates from Microsoft</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> <a href="http://support.microsoft.com/support/kb/articles/q92/5/88.asp" target="_top"> <span class="emphasis"><em>Enhanced Encryption for Windows 95 Password Cache</em></span> </a> @@ -97,4 +98,4 @@ <a href="http://support.microsoft.com/support/kb/articles/q136/4/18.asp" target="_top"> <span class="emphasis"><em>Windows for Workgroups Sharing Updates</em></span> </a> - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3020431"></a>Books</h2></div></div><div></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="DNSDHCP.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ix01.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter40.DNS and DHCP Configuration Guide</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Index</td></tr></table></div></body></html> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016404"></a>Books</h2></div></div><div></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="DNSDHCP.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ix01.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter40.DNS and DHCP Configuration Guide</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Index</td></tr></table></div></body></html> diff --git a/docs/htmldocs/InterdomainTrusts.html b/docs/htmldocs/InterdomainTrusts.html index 8938b84c42..44d925ced5 100644 --- a/docs/htmldocs/InterdomainTrusts.html +++ b/docs/htmldocs/InterdomainTrusts.html @@ -1,10 +1,11 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter16.Interdomain Trust Relationships</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="securing-samba.html" title="Chapter15.Securing Samba"><link rel="next" href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter16.Interdomain Trust Relationships</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="securing-samba.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="msdfs.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="InterdomainTrusts"></a>Chapter16.Interdomain Trust Relationships</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Rafal</span> <span class="surname">Szczesniak</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:mimir@samba.org">mimir@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="InterdomainTrusts.html#id2933376">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2933404">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2933488">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933501">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="InterdomainTrusts.html#id2933586">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2933622">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933649">Samba-3 as the Trusting Domain</a></dt><dt><a href="InterdomainTrusts.html#id2933790">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2933922">Common Errors</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933937">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter16.Interdomain Trust Relationships</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="securing-samba.html" title="Chapter15.Securing Samba"><link rel="next" href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter16.Interdomain Trust Relationships</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="securing-samba.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="msdfs.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="InterdomainTrusts"></a>Chapter16.Interdomain Trust Relationships</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Rafal</span> <span class="surname">Szczesniak</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:mimir@samba.org">mimir@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="InterdomainTrusts.html#id2929505">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2929534">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2929617">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929629">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="InterdomainTrusts.html#id2931604">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2931642">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2931669">Samba-3 as the Trusting Domain</a></dt><dt><a href="InterdomainTrusts.html#id2931795">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2929173">Common Errors</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929188">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></div><p> Samba-3 supports NT4 style domain trust relationships. This is feature that many sites will want to use if they migrate to Samba-3 from and NT4 style domain and do NOT want to adopt Active Directory or an LDAP based authentication back end. This section explains some background information regarding trust relationships and how to create them. It is now possible for Samba-3 to NT4 trust (and vice versa), as well as Samba3 to Samba3 trusts. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933376"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929505"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba-3 can participate in Samba-to-Samba as well as in Samba-to-MS Windows NT4 style trust relationships. This imparts to Samba similar scalability as is possible with MS Windows NT4. @@ -14,7 +15,7 @@ database such as LDAP, and given it's ability to run in Primary as well as Backu modes, the administrator would be well advised to consider alternatives to the use of Interdomain trusts simply because by the very nature of how this works it is fragile. That was, after all, a key reason for the development and adoption of Microsoft Active Directory. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933404"></a>Trust Relationship Background</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929534"></a>Trust Relationship Background</h2></div></div><div></div></div><p> MS Windows NT3.x/4.0 type security domains employ a non-hierarchical security structure. The limitations of this architecture as it affects the scalability of MS Windows networking in large organisations is well known. Additionally, the flat-name space that results from @@ -49,9 +50,9 @@ domains above, with Windows 2000 and ADS the RED and BLUE domains CAN trust each an inherent feature of ADS domains. Samba-3 implements MS Windows NT4 style Interdomain trusts and interoperates with MS Windows 200x ADS security domains in similar manner to MS Windows NT4 style domains. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933488"></a>Native MS Windows NT4 Trusts Configuration</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929617"></a>Native MS Windows NT4 Trusts Configuration</h2></div></div><div></div></div><p> There are two steps to creating an interdomain trust relationship. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933501"></a>NT4 as the Trusting Domain (ie. creating the trusted account)</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929629"></a>NT4 as the Trusting Domain (ie. creating the trusted account)</h3></div></div><div></div></div><p> For MS Windows NT4, all domain trust relationships are configured using the <span class="application">Domain User Manager</span>. To affect a two way trust relationship it is necessary for each domain administrator to make available (for use by an external domain) it's @@ -63,14 +64,14 @@ button will open a panel in which needs to be entered the remote domain that wil user rights to your domain. In addition it is necessary to enter a password that is specific to this trust relationship. The password needs to be typed twice (for standard confirmation). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933586"></a>NT4 as the Trusted Domain (ie. creating trusted account's password)</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931604"></a>NT4 as the Trusted Domain (ie. creating trusted account's password)</h3></div></div><div></div></div><p> A trust relationship will work only when the other (trusting) domain makes the appropriate connections with the trusted domain. To consummate the trust relationship the administrator will launch the Domain User Manager, from the menu select Policies, then select Trust Relationships, then click on the <span class="guibutton">Add</span> button that is next to the box that is labelled <span class="guilabel">Trusted Domains</span>. A panel will open in which must be entered the name of the remote domain as well as the password assigned to that trust. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933622"></a>Configuring Samba NT-style Domain Trusts</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931642"></a>Configuring Samba NT-style Domain Trusts</h2></div></div><div></div></div><p> This description is meant to be a fairly short introduction about how to set up a Samba server so that it could participate in interdomain trust relationships. Trust relationship support in Samba is in its early stage, so lot of things don't work yet. @@ -79,25 +80,25 @@ Each of the procedures described below is treated as they were performed with Wi one end. The remote end could just as well be another Samba-3 domain. It can be clearly seen, after reading this document, that combining Samba-specific parts of what's written below leads to trust between domains in purely Samba environment. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933649"></a>Samba-3 as the Trusting Domain</h3></div></div><div></div></div><p> +</p><div xmlns:ns44="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931669"></a>Samba-3 as the Trusting Domain</h3></div></div><div></div></div><p> In order to set the Samba PDC to be the trusted party of the relationship first you need to create special account for the domain that will be the trusting party. To do that, you can use the 'smbpasswd' utility. Creating the trusted domain account is very similar to creating a trusted machine account. Suppose, your domain is called SAMBA, and the remote domain is called RUMBA. The first step will be to issue this command from your favourite shell: -</p><p> -</p><pre class="screen"> +</p><ns44:p> +</ns44:p><pre class="screen"> <tt class="prompt">root# </tt> <b class="userinput"><tt>smbpasswd -a -i rumba</tt></b> New SMB password: XXXXXXXX Retype SMB password: XXXXXXXX Added user rumba$ -</pre><p> +</pre><ns44:p> where <tt class="option">-a</tt> means to add a new account into the passdb database and <tt class="option">-i</tt> means: ''create this account with the InterDomain trust flag'' -</p><p> +</ns44:p><p> The account name will be 'rumba$' (the name of the remote domain) </p><p> After issuing this command you'll be asked to enter the password for @@ -117,7 +118,7 @@ your domain name, and the password used at the time of account creation. Press OK and, if everything went without incident, you will see <tt class="computeroutput">Trusted domain relationship successfully established</tt> message. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933790"></a>Samba-3 as the Trusted Domain</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931795"></a>Samba-3 as the Trusted Domain</h3></div></div><div></div></div><p> This time activities are somewhat reversed. Again, we'll assume that your domain controlled by the Samba PDC is called SAMBA and NT-controlled domain is called RUMBA. </p><p> @@ -148,11 +149,11 @@ Congratulations! Your trust relationship has just been established. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> Note that you have to run this command as root because you must have write access to the <tt class="filename">secrets.tdb</tt> file. -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933922"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929173"></a>Common Errors</h2></div></div><div></div></div><p> Interdomain trust relationships should NOT be attempted on networks that are unstable or that suffer regular outages. Network stability and integrity are key concerns with distributed trusted domains. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933937"></a>Tell me about Trust Relationships using Samba</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929188"></a>Tell me about Trust Relationships using Samba</h3></div></div><div></div></div><p> Like many, I administer multiple LANs connected together using NT trust relationships. This was implemented about 4 years ago. I now have the occasion to consider performing this same task again, but this time, I diff --git a/docs/htmldocs/IntroSMB.html b/docs/htmldocs/IntroSMB.html index f9c2539112..6d267d5b72 100644 --- a/docs/htmldocs/IntroSMB.html +++ b/docs/htmldocs/IntroSMB.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter1.Introduction to Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="introduction.html" title="PartI.General Installation"><link rel="next" href="install.html" title="Chapter2.How to Install and Test SAMBA"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter1.Introduction to Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="introduction.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="install.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="IntroSMB"></a>Chapter1.Introduction to Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email"><<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>></tt></p></div></div></div></div><div><p class="pubdate">April 14, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="IntroSMB.html#id2885613">Background</a></dt><dt><a href="IntroSMB.html#id2885824">Terminology</a></dt><dt><a href="IntroSMB.html#id2885978">Related Projects</a></dt><dt><a href="IntroSMB.html#id2886047">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2886135">Epilogue</a></dt><dt><a href="IntroSMB.html#id2886209">Miscellaneous</a></dt></dl></div><p>“<span class="quote"> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter1.Introduction to Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="introduction.html" title="PartI.General Installation"><link rel="next" href="install.html" title="Chapter2.How to Install and Test SAMBA"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter1.Introduction to Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="introduction.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="install.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="IntroSMB"></a>Chapter1.Introduction to Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email"><<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>></tt></p></div></div></div></div><div><p class="pubdate">April 14, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="IntroSMB.html#id2885266">Background</a></dt><dt><a href="IntroSMB.html#id2885320">Terminology</a></dt><dt><a href="IntroSMB.html#id2884044">Related Projects</a></dt><dt><a href="IntroSMB.html#id2884112">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2884199">Epilogue</a></dt><dt><a href="IntroSMB.html#id2884272">Miscellaneous</a></dt></dl></div><p>“<span class="quote"> "If you understand what you're doing, you're not learning anything." -- Anonymous </span>”</p><p> @@ -7,7 +8,7 @@ transport protocol. In fact, it can support any SMB/CIFS-enabled client. One of strengths is that you can use it to blend your mix of Windows and Linux machines together without requiring a separate Windows NT/2000/2003 Server. Samba is actively being developed by a global team of about 30 active programmers and was originally developed by Andrew Tridgell. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885613"></a>Background</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885266"></a>Background</h2></div></div><div></div></div><p> Once long ago, there was a buzzword referred to as DCE/RPC. This stood for Distributed Computing Environment/Remote Procedure Calls and conceptually was a good idea. It was originally developed by Apollo/HP as NCA 1.0 (Network Computing Architecture) and only @@ -33,7 +34,7 @@ been dutifully waded through during the information-gathering stages of this pro are *still* many missing pieces... While often tedious, at least the way has been generously littered with occurrences of clapping hand to forehead and muttering 'crikey, what are they thinking? -</em></span></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885824"></a>Terminology</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> +</em></span></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885320"></a>Terminology</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> SMB: Acronym for "Server Message Block". This is Microsoft's file and printer sharing protocol. </p></li><li><p> CIFS: Acronym for "Common Internet File System". Around 1996, Microsoft apparently @@ -83,7 +84,7 @@ thinking? W3K: Acronym for Windows 2003 Server </p></li></ul></div><p>If you plan on getting help, make sure to subscribe to the Samba Mailing List (available at <a href="http://www.samba.org/" target="_top">http://www.samba.org</a>). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885978"></a>Related Projects</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884044"></a>Related Projects</h2></div></div><div></div></div><p> There are currently two network filesystem client projects for Linux that are directly related to Samba: SMBFS and CIFS VFS. These are both available in the Linux kernel itself. </p><div class="itemizedlist"><ul type="disc"><li><p> @@ -105,7 +106,7 @@ nothing to do with acting as a file and print server for SMB/CIFS clients. There are other Open Source CIFS client implementations, such as the <a href="http://jcifs.samba.org/" target="_top">jCIFS project</a> which provides an SMB client toolkit written in Java. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886047"></a>SMB Methodology</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884112"></a>SMB Methodology</h2></div></div><div></div></div><p> Traditionally, SMB uses UDP port 137 (NetBIOS name service, or netbios-ns), UDP port 138 (NetBIOS datagram service, or netbios-dgm), and TCP port 139 (NetBIOS session service, or netbios-ssn). Anyone looking at their network with a good @@ -137,7 +138,7 @@ up a single file. In general, SMB sessions are established in the following orde A good way to examine this process in depth is to try out <a href="http://www.securityfriday.com/ToolDownload/SWB/swb_doc.html" target="_top">SecurityFriday's SWB program</a>. It allows you to walk through the establishment of a SMB/CIFS session step by step. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886135"></a>Epilogue</h2></div></div><div></div></div><p>“<span class="quote"> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884199"></a>Epilogue</h2></div></div><div></div></div><p>“<span class="quote"> What's fundamentally wrong is that nobody ever had any taste when they did it. Microsoft has been very much into making the user interface look good, but internally it's just a complete mess. And even people who program for Microsoft @@ -166,7 +167,7 @@ not the completely clueless user who probably sits there shivering thinking That's what's really irritating to me." </span>”</p><p>-- <a href="http://hr.uoregon.edu/davidrl/boot.txt" target="_top">Linus Torvalds, from an interview with BOOT Magazine, Sept 1998</a> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886209"></a>Miscellaneous</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884272"></a>Miscellaneous</h2></div></div><div></div></div><p> This chapter is Copyright 2003 David Lechnyr (david at lechnyr dot com). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free diff --git a/docs/htmldocs/NT4Migration.html b/docs/htmldocs/NT4Migration.html index 72c6269f0e..0d7dbce2ed 100644 --- a/docs/htmldocs/NT4Migration.html +++ b/docs/htmldocs/NT4Migration.html @@ -1,7 +1,8 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter31.Migration from NT4 PDC to Samba-3 PDC</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0"><link rel="next" href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter31.Migration from NT4 PDC to Samba-3 PDC</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="upgrading-to-3.0.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="SWAT.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NT4Migration"></a>Chapter31.Migration from NT4 PDC to Samba-3 PDC</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="NT4Migration.html#id3001339">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001368">Objectives</a></dt><dt><a href="NT4Migration.html#id3004043">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id3004381">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id3004462">Planning for Success</a></dt><dt><a href="NT4Migration.html#id3004704">Samba Implementation Choices</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter31.Migration from NT4 PDC to Samba-3 PDC</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0"><link rel="next" href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter31.Migration from NT4 PDC to Samba-3 PDC</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="upgrading-to-3.0.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="SWAT.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NT4Migration"></a>Chapter31.Migration from NT4 PDC to Samba-3 PDC</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="NT4Migration.html#id3000463">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id3000487">Objectives</a></dt><dt><a href="NT4Migration.html#id2999415">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id3001632">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001713">Planning for Success</a></dt><dt><a href="NT4Migration.html#id3001954">Samba Implementation Choices</a></dt></dl></dd></dl></div><p> This is a rough guide to assist those wishing to migrate from NT4 domain control to Samba-3 based domain control. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001339"></a>Planning and Getting Started</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3000463"></a>Planning and Getting Started</h2></div></div><div></div></div><p> In the IT world there is often a saying that all problems are encountered because of poor planning. The corollary to this saying is that not all problems can be anticipated and planned for. Then again, good planning will anticipate most show stopper type situations. @@ -9,7 +10,7 @@ and planned for. Then again, good planning will anticipate most show stopper typ Those wishing to migrate from MS Windows NT4 domain control to a Samba-3 domain control environment would do well to develop a detailed migration plan. So here are a few pointers to help migration get under way. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3001368"></a>Objectives</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000487"></a>Objectives</h3></div></div><div></div></div><p> The key objective for most organisations will be to make the migration from MS Windows NT4 to Samba-3 domain control as painless as possible. One of the challenges you may experience in your migration process may well be one of convincing management that the new environment @@ -36,7 +37,7 @@ Before migrating a network from MS Windows NT4 to Samba-3 it is vital that all n considered. Users should be educated about changes they may experience so that the change will be a welcome one and not become an obstacle to the work they need to do. The following are some of the factors that will go into a successful migration: -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3002882"></a>Domain Layout</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999189"></a>Domain Layout</h4></div></div><div></div></div><p> Samba-3 can be configured as a domain controller, a back-up domain controller (probably best called a secondary controller), a domain member, or as a stand-alone server. The Windows network security domain context should be sized and scoped before implementation. Particular attention needs to be @@ -57,7 +58,7 @@ designed to serve multiple routed network segments may result in severe performa response time (eg: ping timing) between the remote segment and the PDC is more than 100 ms. In situations where the delay is too long it is highly recommended to locate a backup controller (BDC) to serve as the local authentication and access control server. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3002935"></a>Server Share and Directory Layout</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999243"></a>Server Share and Directory Layout</h4></div></div><div></div></div><p> There are few cardinal rules to effective network design that can be broken with impunity. The most important rule of effective network management is that simplicity is king in every well controlled network. Every part of the infrastructure must be managed, the more complex @@ -82,7 +83,7 @@ complex mess that has been inherited. Remember, apparent job security through co and implementation may ultimately cause loss of operations and downtime to users as the new administrator learns to untangle your web. Keep access controls simple and effective and make sure that users will never be interrupted by the stupidity of complexity. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3002997"></a>Logon Scripts</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999304"></a>Logon Scripts</h4></div></div><div></div></div><p> Please refer to the section of this document on Advanced Network Administration for information regarding the network logon script options for Samba-3. Logon scripts can help to ensure that all users gain share and printer connections they need. @@ -96,20 +97,20 @@ Some sites prefer to use a tool such as <b class="command">kixstart</b> to estab user environment. In any case you may wish to do a google search for logon script process controls. In particular, you may wish to explore the use of the Microsoft knowledgebase article KB189105 that deals with how to add printers without user intervention via the logon script process. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3003055"></a>Profile Migration/Creation</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999361"></a>Profile Migration/Creation</h4></div></div><div></div></div><p> User and Group Profiles may be migrated using the tools described in the section titled Desktop Profile Management. </p><p> Profiles may also be managed using the Samba-3 tool <b class="command">profiles</b>. This tool allows the MS Windows NT style security identifiers (SIDs) that are stored inside the profile NTuser.DAT file to be changed to the SID of the Samba-3 domain. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3004018"></a>User and Group Accounts</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999390"></a>User and Group Accounts</h4></div></div><div></div></div><p> It is possible to migrate all account settings from an MS Windows NT4 domain to Samba-3. Before attempting to migrate user and group accounts it is STRONGLY advised to create in Samba-3 the groups that are present on the MS Windows NT4 domain <span class="emphasis"><em>AND</em></span> to connect these to suitable Unix/Linux groups. Following this simple advice will mean that all user and group attributes should migrate painlessly. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3004043"></a>Steps In Migration Process</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999415"></a>Steps In Migration Process</h3></div></div><div></div></div><p> The approximate migration process is described below. </p><div class="itemizedlist"><ul type="disc"><li><p> You will have an NT4 PDC that has the users, groups, policies and profiles to be migrated @@ -118,11 +119,11 @@ Samba-3 set up as a DC with netlogon share, profile share, etc. </p></li></ul></div><div class="procedure"><p class="title"><b>Procedure31.1.The Account Migration Process</b></p><ol type="1"><li><p>Create a BDC account for the samba server using NT Server Manager</p><ol type="a"><li><p>Samba must NOT be running</p></li></ol></li><li><p><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>NT4PDC</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p><ol type="a"><li><p>lsaquery</p></li><li><p>Note the SID returned</p></li></ol></li><li><p><b class="userinput"><tt>net getsid -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p><ol type="a"><li><p>Note the SID</p></li></ol></li><li><p><b class="userinput"><tt>net getlocalsid</tt></b></p><ol type="a"><li><p>Note the SID, now check that all three SIDS reported are the same!</p></li></ol></li><li><p><b class="userinput"><tt>net rpc join -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -L</tt></b></p><ol type="a"><li><p>Note - did the users migrate?</p></li></ol></li><li><p><b class="userinput"><tt>initGrps.sh <i class="replaceable"><tt>DOMNAME</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net groupmap list</tt></b></p><ol type="a"><li><p>Now check that all groups are recognised</p></li></ol></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -Lv</tt></b></p><ol type="a"><li><p>Note - check that all group membership has been migrated</p></li></ol></li></ol></div><p> Now it is time to migrate all the profiles, then migrate all policy files. More later. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3004381"></a>Migration Options</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001632"></a>Migration Options</h2></div></div><div></div></div><p> Based on feedback from many sites as well as from actual installation and maintenance experience sites that wish to migrate from MS Windows NT4 Domain Control to a Samba based solution fit into three basic categories. -</p><div class="table"><a name="id3004398"></a><p class="title"><b>Table31.1.The 3 Major Site Types</b></p><table summary="The 3 Major Site Types" border="1"><colgroup><col><col></colgroup><thead><tr><th>Number of Users</th><th>Description</th></tr></thead><tbody><tr><td>< 50</td><td><p>Want simple conversion with NO pain</p></td></tr><tr><td>50 - 250</td><td><p>Want new features, can manage some in-house complexity</p></td></tr><tr><td>> 250</td><td><p>Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas</p></td></tr></tbody></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3004462"></a>Planning for Success</h3></div></div><div></div></div><p> +</p><div class="table"><a name="id3001647"></a><p class="title"><b>Table31.1.The 3 Major Site Types</b></p><table summary="The 3 Major Site Types" border="1"><colgroup><col><col></colgroup><thead><tr><th>Number of Users</th><th>Description</th></tr></thead><tbody><tr><td>< 50</td><td><p>Want simple conversion with NO pain</p></td></tr><tr><td>50 - 250</td><td><p>Want new features, can manage some in-house complexity</p></td></tr><tr><td>> 250</td><td><p>Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas</p></td></tr></tbody></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3001713"></a>Planning for Success</h3></div></div><div></div></div><p> There are three basic choices for sites that intend to migrate from MS Windows NT4 to Samba-3. </p><div class="itemizedlist"><ul type="disc"><li><p> @@ -141,7 +142,7 @@ No matter what choice you make, the following rules will minimise down-stream pr Test ALL assumptions </p></li><li><p> Test full roll-out program, including workstation deployment - </p></li></ul></div><div class="table"><a name="id3004535"></a><p class="title"><b>Table31.2.Nature of the Conversion Choices</b></p><table summary="Nature of the Conversion Choices" border="1"><colgroup><col><col><col></colgroup><thead><tr><th>Simple</th><th>Upgraded</th><th>Redesign</th></tr></thead><tbody><tr><td><p>Make use of minimal OS specific features</p></td><td><p>Translate NT4 features to new host OS features</p></td><td><p>Decide:</p></td></tr><tr><td><p>Suck all accounts from NT4 into Samba-3</p></td><td><p>Copy and improve:</p></td><td><p>Authentication Regime (database location and access)</p></td></tr><tr><td><p>Make least number of operational changes</p></td><td><p>Make progressive improvements</p></td><td><p>Desktop Management Methods</p></td></tr><tr><td><p>Take least amount of time to migrate</p></td><td><p>Minimise user impact</p></td><td><p>Better Control of Desktops / Users</p></td></tr><tr><td><p>Live versus Isolated Conversion</p></td><td><p>Maximise functionality</p></td><td><p>Identify Needs for: Manageability, Scalability, Security, Availability</p></td></tr><tr><td><p>Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)</p></td><td><p>Take advantage of lower maintenance opportunity</p></td><td><p></p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3004704"></a>Samba Implementation Choices</h3></div></div><div></div></div><pre class="programlisting"> + </p></li></ul></div><div class="table"><a name="id3001783"></a><p class="title"><b>Table31.2.Nature of the Conversion Choices</b></p><table summary="Nature of the Conversion Choices" border="1"><colgroup><col><col><col></colgroup><thead><tr><th>Simple</th><th>Upgraded</th><th>Redesign</th></tr></thead><tbody><tr><td><p>Make use of minimal OS specific features</p></td><td><p>Translate NT4 features to new host OS features</p></td><td><p>Decide:</p></td></tr><tr><td><p>Suck all accounts from NT4 into Samba-3</p></td><td><p>Copy and improve:</p></td><td><p>Authentication Regime (database location and access)</p></td></tr><tr><td><p>Make least number of operational changes</p></td><td><p>Make progressive improvements</p></td><td><p>Desktop Management Methods</p></td></tr><tr><td><p>Take least amount of time to migrate</p></td><td><p>Minimise user impact</p></td><td><p>Better Control of Desktops / Users</p></td></tr><tr><td><p>Live versus Isolated Conversion</p></td><td><p>Maximise functionality</p></td><td><p>Identify Needs for: Manageability, Scalability, Security, Availability</p></td></tr><tr><td><p>Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)</p></td><td><p>Take advantage of lower maintenance opportunity</p></td><td><p></p></td></tr></tbody></table></div></div><div xmlns:ns95="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3001954"></a>Samba Implementation Choices</h3></div></div><div></div></div><pre class="programlisting"> Authentication database back end Winbind (external Samba or NT4/200x server) Can use pam_mkhomedir.so to auto-create home dirs @@ -198,5 +199,5 @@ Migration Tools Authentication New SAM back end (smbpasswd, tdbsam, ldapsam, mysqlsam) -</pre><p> -</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="upgrading-to-3.0.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="migration.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="SWAT.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter32.SWAT - The Samba Web Administration Tool</td></tr></table></div></body></html> +</pre><ns95:p> +</ns95:p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="upgrading-to-3.0.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="migration.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="SWAT.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter32.SWAT - The Samba Web Administration Tool</td></tr></table></div></body></html> diff --git a/docs/htmldocs/NetworkBrowsing.html b/docs/htmldocs/NetworkBrowsing.html index eb4d9858ca..34d48cacc3 100644 --- a/docs/htmldocs/NetworkBrowsing.html +++ b/docs/htmldocs/NetworkBrowsing.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter10.Samba / MS Windows Network Browsing Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="optional.html" title="PartIII.Advanced Configuration"><link rel="next" href="passdb.html" title="Chapter11.Account Information Databases"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter10.Samba / MS Windows Network Browsing Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="optional.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="passdb.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NetworkBrowsing"></a>Chapter10.Samba / MS Windows Network Browsing Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">July 5, 1998</p></div><div><p class="pubdate">Updated: April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="NetworkBrowsing.html#id2903558">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2903637">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2903747">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2903764">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2903926">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2904058">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2904194">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2904320">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2904541">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2904811">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2904967">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2904984">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2905013">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2905122">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905183">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905341">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2905540">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2905565">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905650">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905663">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2905730">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905867">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905914">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2906021">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2906100">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2906720">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2906735">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2906764">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter10.Samba / MS Windows Network Browsing Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="optional.html" title="PartIII.Advanced Configuration"><link rel="next" href="passdb.html" title="Chapter11.Account Information Databases"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter10.Samba / MS Windows Network Browsing Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="optional.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="passdb.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NetworkBrowsing"></a>Chapter10.Samba / MS Windows Network Browsing Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">July 5, 1998</p></div><div><p class="pubdate">Updated: April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="NetworkBrowsing.html#id2901654">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2901733">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2905839">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905855">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2906017">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2900986">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2901119">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2901245">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2902631">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2902896">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2903052">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2903070">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2906571">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2906680">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2906741">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2906900">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2907094">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2907119">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907203">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907217">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2907283">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907421">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907468">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2907575">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2907654">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2908270">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2908285">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2908313">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></div><p> This document contains detailed information as well as a fast track guide to implementing browsing across subnets and / or across workgroups (or domains). WINS is the best tool for resolution of NetBIOS names to IP addresses. WINS is @@ -9,7 +10,7 @@ over TCP/IP. Samba-3 and later also supports this mode of operation. When the use of NetBIOS over TCP/IP has been disabled then the primary means for resolution of MS Windows machine names is via DNS and Active Directory. The following information assumes that your site is running NetBIOS over TCP/IP. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903558"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901654"></a>Features and Benefits</h2></div></div><div></div></div><p> Someone once referred to the past in terms of: <span class="emphasis"><em>They were the worst of times, they were the best of times. The more we look back, them more we long for what was and hope it never returns!</em></span>. @@ -42,7 +43,7 @@ support for NetBIOS, in which case WINS is of no relevance. Samba-3 supports thi </p><p> For those networks on which NetBIOS has been disabled (ie: WINS is NOT required) the use of DNS is necessary for host name resolution. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903637"></a>What is Browsing?</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901733"></a>What is Browsing?</h2></div></div><div></div></div><p> To most people browsing means that they can see the MS Windows and Samba servers in the Network Neighborhood, and when the computer icon for a particular server is clicked, it opens up and shows the shares and printers available on the target server. @@ -80,12 +81,12 @@ called <tt class="filename">nmbd</tt>. The configuration parameters involved in For Samba, the WINS Server and WINS Support are mutually exclusive options. Those marked with an '*' are the only options that commonly MAY need to be modified. Even if not one of these parameters is set <tt class="filename">nmbd</tt> will still do it's job. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903747"></a>Discussion</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905839"></a>Discussion</h2></div></div><div></div></div><p> Firstly, all MS Windows networking uses SMB (Server Message Block) based messaging. SMB messaging may be implemented with or without NetBIOS. MS Windows 200x supports NetBIOS over TCP/IP for backwards compatibility. Microsoft is intent on phasing out NetBIOS support. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903764"></a>NetBIOS over TCP/IP</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905855"></a>NetBIOS over TCP/IP</h3></div></div><div></div></div><p> Samba implements NetBIOS, as does MS Windows NT / 200x / XP, by encapsulating it over TCP/IP. MS Windows products can do likewise. NetBIOS based networking uses broadcast messaging to affect browse list management. When running NetBIOS over TCP/IP, this uses UDP based messaging. @@ -129,7 +130,7 @@ Lastly, take note that browse lists are a collection of unreliable broadcast messages that are repeated at intervals of not more than 15 minutes. This means that it will take time to establish a browse list and it can take up to 45 minutes to stabilise, particularly across network segments. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903926"></a>TCP/IP - without NetBIOS</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906017"></a>TCP/IP - without NetBIOS</h3></div></div><div></div></div><p> All TCP/IP using systems use various forms of host name resolution. The primary methods for TCP/IP hostname resolutions involves either a static file (<tt class="filename">/etc/hosts </tt>) or DNS (the Domain Name System). DNS is the technology that makes @@ -165,7 +166,7 @@ consequently network services will be severely impaired. The use of Dynamic DNS is highly recommended with Active Directory, in which case the use of BIND9 is preferred for it's ability to adequately support the SRV (service) records that are needed for Active Directory. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904058"></a>DNS and Active Directory</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900986"></a>DNS and Active Directory</h3></div></div><div></div></div><p> Occasionally we hear from Unix network administrators who want to use a Unix based Dynamic DNS server in place of the Microsoft DNS server. While this might be desirable to some, the MS Windows 200x DNS server is auto-configured to work with Active Directory. It is possible @@ -187,7 +188,7 @@ The following are some of the default service records that Active Directory requ </p></li><li><p>_ldap._tcp.<span class="emphasis"><em>Site</em></span>.gc.ms-dcs.<span class="emphasis"><em>DomainTree</em></span></p><p> Used by MS Windows clients to locate site configuration dependent Global Catalog server. - </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2904194"></a>How Browsing Functions</h2></div></div><div></div></div><p> + </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901119"></a>How Browsing Functions</h2></div></div><div></div></div><p> MS Windows machines register their NetBIOS names (ie: the machine name for each service type in operation) on start up. The exact method by which this name registration @@ -242,7 +243,7 @@ words, for cross subnet browsing to function correctly it is essential that a name to address resolution mechanism be provided. This mechanism could be via DNS, <tt class="filename">/etc/hosts</tt>, and so on. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904320"></a>Setting up WORKGROUP Browsing</h3></div></div><div></div></div><p> +</p><div xmlns:ns14="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2901245"></a>Setting up WORKGROUP Browsing</h3></div></div><div></div></div><p> To set up cross subnet browsing on a network containing machines in up to be in a WORKGROUP, not an NT Domain you need to set up one Samba server to be the Domain Master Browser (note that this is *NOT* @@ -260,22 +261,22 @@ Samba server, and there must only be one domain master browser per workgroup name. To set up a Samba server as a domain master browser, set the following option in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns14:p> +</ns14:p><pre class="programlisting"> domain master = yes -</pre><p> -</p><p> +</pre><ns14:p> +</ns14:p><p> The domain master browser should also preferrably be the local master browser for its own subnet. In order to achieve this set the following options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns14:p> +</ns14:p><pre class="programlisting"> domain master = yes local master = yes preferred master = yes os level = 65 -</pre><p> -</p><p> +</pre><ns14:p> +</ns14:p><p> The domain master browser may be the same machine as the WINS server, if you require. </p><p> @@ -287,14 +288,14 @@ tend to get rebooted more often, so it's not such a good idea to use these). To make a Samba server a local master browser set the following options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns14:p> +</ns14:p><pre class="programlisting"> domain master = no local master = yes preferred master = yes os level = 65 -</pre><p> -</p><p> +</pre><ns14:p> +</ns14:p><p> Do not do this for more than one Samba server on each subnet, or they will war with each other over which is to be the local master browser. @@ -309,14 +310,14 @@ be the local master browser then you can disable Samba from becoming a local master browser by setting the following options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns14:p> +</ns14:p><pre class="programlisting"> domain master = no local master = no preferred master = no os level = 0 -</pre><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904541"></a>Setting up DOMAIN Browsing</h3></div></div><div></div></div><p> +</pre><ns14:p> +</ns14:p></div><div xmlns:ns15="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902631"></a>Setting up DOMAIN Browsing</h3></div></div><div></div></div><p> If you are adding Samba servers to a Windows NT Domain then you must not set up a Samba server as a domain master browser. By default, a Windows NT Primary Domain Controller for a domain @@ -330,14 +331,14 @@ you may set up Samba servers as local master browsers as described. To make a Samba server a local master browser set the following options in the <b class="command">[global]</b> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns15:p> +</ns15:p><pre class="programlisting"> domain master = no local master = yes preferred master = yes os level = 65 -</pre><p> -</p><p> +</pre><ns15:p> +</ns15:p><p> If you wish to have a Samba server fight the election with machines on the same subnet you may set the <i class="parameter"><tt>os level</tt></i> parameter to lower levels. By doing this you can tune the order of machines that @@ -352,14 +353,14 @@ you can disable Samba from taking part in browser elections and ever becoming a local master browser by setting following options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns15:p> +</ns15:p><pre class="programlisting"> domain master = no local master = no preferred master = no os level = 0 -</pre><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="browse-force-master"></a>Forcing Samba to be the master</h3></div></div><div></div></div><p> +</pre><ns15:p> +</ns15:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="browse-force-master"></a>Forcing Samba to be the master</h3></div></div><div></div></div><p> Who becomes the <i class="parameter"><tt>master browser</tt></i> is determined by an election process using broadcasts. Each election packet contains a number of parameters which determine what precedence (bias) a host should have in the @@ -396,7 +397,7 @@ attempt to become the domain master browser every 5 minutes. They will find that another Samba server is already the domain master browser and will fail. This provides automatic redundancy, should the current domain master browser fail. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904811"></a>Making Samba the domain master</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902896"></a>Making Samba the domain master</h3></div></div><div></div></div><p> The domain master is responsible for collating the browse lists of multiple subnets so that browsing can occur between subnets. You can make Samba act as the domain master by setting <i class="parameter"><tt>domain master = yes</tt></i> @@ -438,30 +439,30 @@ If, however, both Samba and your clients are using a WINS server, then: resolve the NetBIOS name of that host. as long as that host has registered its NetBIOS name with the same WINS server, the user will be able to see that host. - </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904967"></a>Note about broadcast addresses</h3></div></div><div></div></div><p> + </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903052"></a>Note about broadcast addresses</h3></div></div><div></div></div><p> If your network uses a "0" based broadcast address (for example if it ends in a 0) then you will strike problems. Windows for Workgroups does not seem to support a 0's broadcast and you will probably find that browsing and name lookups won't work. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904984"></a>Multiple interfaces</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903070"></a>Multiple interfaces</h3></div></div><div></div></div><p> Samba now supports machines with multiple network interfaces. If you have multiple interfaces then you will need to use the <b class="command">interfaces</b> option in <tt class="filename">smb.conf</tt> to configure them. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905013"></a>Use of the Remote Announce parameter</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns16="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906571"></a>Use of the Remote Announce parameter</h3></div></div><div></div></div><ns16:p> The <i class="parameter"><tt>remote announce</tt></i> parameter of <tt class="filename">smb.conf</tt> can be used to forcibly ensure that all the NetBIOS names on a network get announced to a remote network. The syntax of the <i class="parameter"><tt>remote announce</tt></i> parameter is: -</p><pre class="programlisting"> +</ns16:p><pre class="programlisting"> remote announce = a.b.c.d [e.f.g.h] ... -</pre><p> +</pre><ns16:p> <span class="emphasis"><em>or</em></span> -</p><pre class="programlisting"> +</ns16:p><pre class="programlisting"> remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ... -</pre><p> +</pre><ns16:p> where: -</p><div class="variablelist"><dl><dt><span class="term"><i class="replaceable"><tt>a.b.c.d</tt></i> and +</ns16:p><div class="variablelist"><dl><dt><span class="term"><i class="replaceable"><tt>a.b.c.d</tt></i> and <i class="replaceable"><tt>e.f.g.h</tt></i></span></dt><dd><p>is either the LMB (Local Master Browser) IP address or the broadcast address of the remote network. ie: the LMB is at 192.168.1.10, or the address @@ -477,23 +478,23 @@ workgroup name of the remote network then our NetBIOS machine names will end up looking like they belong to that workgroup, this may cause name resolution problems and should be avoided. -</p></dd></dl></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905122"></a>Use of the Remote Browse Sync parameter</h3></div></div><div></div></div><p> +</p></dd></dl></div><ns16:p> +</ns16:p></div><div xmlns:ns17="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906680"></a>Use of the Remote Browse Sync parameter</h3></div></div><div></div></div><p> The <i class="parameter"><tt>remote browse sync</tt></i> parameter of <tt class="filename">smb.conf</tt> is used to announce to another LMB that it must synchronise its NetBIOS name list with our Samba LMB. It works ONLY if the Samba server that has this option is simultaneously the LMB on its network segment. -</p><p> +</p><ns17:p> The syntax of the <i class="parameter"><tt>remote browse sync</tt></i> parameter is: -</p><pre class="programlisting"> +</ns17:p><pre class="programlisting"> remote browse sync = <i class="replaceable"><tt>a.b.c.d</tt></i> -</pre><p> +</pre><ns17:p> where <i class="replaceable"><tt>a.b.c.d</tt></i> is either the IP address of the remote LMB or else is the network broadcast address of the remote segment. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905183"></a>WINS - The Windows Internetworking Name Server</h2></div></div><div></div></div><p> +</ns17:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906741"></a>WINS - The Windows Internetworking Name Server</h2></div></div><div></div></div><p> Use of WINS (either Samba WINS <span class="emphasis"><em>or</em></span> MS Windows NT Server WINS) is highly recommended. Every NetBIOS machine registers its name together with a name_type value for each of several types of service it has available. @@ -544,16 +545,16 @@ Never use both <i class="parameter"><tt>wins support = yes</tt></i> together with <i class="parameter"><tt>wins server = a.b.c.d</tt></i> particularly not using it's own IP address. Specifying both will cause <span class="application">nmbd</span> to refuse to start! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905341"></a>Setting up a WINS server</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns18="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906900"></a>Setting up a WINS server</h3></div></div><div></div></div><p> Either a Samba machine or a Windows NT Server machine may be set up as a WINS server. To set a Samba machine to be a WINS server you must add the following option to the <tt class="filename">smb.conf</tt> file on the selected machine : in the <i class="parameter"><tt>[globals]</tt></i> section add the line -</p><p> -</p><pre class="programlisting"> +</p><ns18:p> +</ns18:p><pre class="programlisting"> wins support = yes -</pre><p> -</p><p> +</pre><ns18:p> +</ns18:p><p> Versions of Samba prior to 1.9.17 had this parameter default to yes. If you have any older versions of Samba on your network it is strongly suggested you upgrade to a recent version, or at the very @@ -585,11 +586,11 @@ the <span class="guilabel">Control Panel->Network->Protocols->TCP->W in Windows 95 or Windows NT. To tell a Samba server the IP address of the WINS server add the following line to the <i class="parameter"><tt>[global]</tt></i> section of all <tt class="filename">smb.conf</tt> files : -</p><p> -</p><pre class="programlisting"> +</p><ns18:p> +</ns18:p><pre class="programlisting"> wins server = <name or IP address> -</pre><p> -</p><p> +</pre><ns18:p> +</ns18:p><p> where <name or IP address> is either the DNS name of the WINS server machine or its IP address. </p><p> @@ -604,45 +605,45 @@ The first details setting up cross subnet browsing on a network containing Windows 95, Samba and Windows NT machines that are not configured as part of a Windows NT Domain. The second details setting up cross subnet browsing on networks that contain NT Domains. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905540"></a>WINS Replication</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907094"></a>WINS Replication</h3></div></div><div></div></div><p> Samba-3 permits WINS replication through the use of the <tt class="filename">wrepld</tt> utility. This tool is not currently capable of being used as it is still in active development. As soon as this tool becomes moderately functional we will prepare man pages and enhance this section of the documentation to provide usage and technical details. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905565"></a>Static WINS Entries</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns19="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907119"></a>Static WINS Entries</h3></div></div><div></div></div><p> Adding static entries to your Samba-3 WINS server is actually fairly easy. All you have to do is add a line to <tt class="filename">wins.dat</tt>, typically located in <tt class="filename">/usr/local/samba/var/locks</tt>. -</p><p> +</p><ns19:p> Entries in <tt class="filename">wins.dat</tt> take the form of -</p><pre class="programlisting"> +</ns19:p><pre class="programlisting"> "NAME#TYPE" TTL ADDRESS+ FLAGS -</pre><p> +</pre><ns19:p> where NAME is the NetBIOS name, TYPE is the NetBIOS type, TTL is the time-to-live as an absolute time in seconds, ADDRESS+ is one or more addresses corresponding to the registration and FLAGS are the NetBIOS flags for the registration. -</p><p> +</ns19:p><ns19:p> A typical dynamic entry looks like: -</p><pre class="programlisting"> +</ns19:p><pre class="programlisting"> "MADMAN#03" 1055298378 192.168.1.2 66R -</pre><p> +</pre><ns19:p> To make it static, all that has to be done is set the TTL to 0: -</p><pre class="programlisting"> +</ns19:p><pre class="programlisting"> "MADMAN#03" 0 192.168.1.2 66R -</pre><p> -</p><p> +</pre><ns19:p> +</ns19:p><p> Though this method works with early Samba-3 versions, there's a possibility that it may change in future versions if WINS replication is added. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905650"></a>Helpful Hints</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907203"></a>Helpful Hints</h2></div></div><div></div></div><p> The following hints should be carefully considered as they are stumbling points for many new network administrators. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905663"></a>Windows Networking Protocols</h3></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907217"></a>Windows Networking Protocols</h3></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> Do NOT use more than one (1) protocol on MS Windows machines </p></div><p> A very common cause of browsing problems results from installing more than @@ -672,32 +673,32 @@ differently from MS Windows NT4. Generally, where a server does NOT support the newer or extended protocol, these will fall back to the NT4 protocols. </em></span></p><p> The safest rule of all to follow it this - USE ONLY ONE PROTOCOL! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905730"></a>Name Resolution Order</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns20="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907283"></a>Name Resolution Order</h3></div></div><div></div></div><p> Resolution of NetBIOS names to IP addresses can take place using a number of methods. The only ones that can provide NetBIOS name_type information are: </p><table class="simplelist" border="0" summary="Simple list"><tr><td>WINS: the best tool!</td></tr><tr><td>LMHOSTS: is static and hard to maintain.</td></tr><tr><td>Broadcast: uses UDP and can not resolve names across remote segments.</td></tr></table><p> Alternative means of name resolution includes: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td><tt class="filename">/etc/hosts</tt>: is static, hard to maintain, and lacks name_type info</td></tr><tr><td>DNS: is a good choice but lacks essential name_type info.</td></tr></table><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td><tt class="filename">/etc/hosts</tt>: is static, hard to maintain, and lacks name_type info</td></tr><tr><td>DNS: is a good choice but lacks essential name_type info.</td></tr></table><ns20:p> Many sites want to restrict DNS lookups and want to avoid broadcast name resolution traffic. The <i class="parameter"><tt>name resolve order</tt></i> parameter is of great help here. The syntax of the <i class="parameter"><tt>name resolve order</tt></i> parameter is: -</p><pre class="programlisting"> +</ns20:p><pre class="programlisting"> name resolve order = wins lmhosts bcast host -</pre><p> +</pre><ns20:p> <span class="emphasis"><em>or</em></span> -</p><pre class="programlisting"> +</ns20:p><pre class="programlisting"> name resolve order = wins lmhosts (eliminates bcast and host) -</pre><p> +</pre><ns20:p> The default is: -</p><pre class="programlisting"> +</ns20:p><pre class="programlisting"> name resolve order = host lmhost wins bcast -</pre><p> +</pre><ns20:p> where "host" refers the the native methods used by the Unix system to implement the gethostbyname() function call. This is normally controlled by <tt class="filename">/etc/host.conf</tt>, <tt class="filename">/etc/nsswitch.conf</tt> and <tt class="filename">/etc/resolv.conf</tt>. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905867"></a>Technical Overview of browsing</h2></div></div><div></div></div><p> +</ns20:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907421"></a>Technical Overview of browsing</h2></div></div><div></div></div><p> SMB networking provides a mechanism by which clients can access a list of machines in a network, a so-called <i class="parameter"><tt>browse list</tt></i>. This list contains machines that are ready to offer file and/or print services @@ -717,7 +718,7 @@ Where NetBIOS over TCP/IP is enabled use of a WINS server is highly recommended to aid the resolution of NetBIOS (SMB) names to IP addresses. WINS allows remote segment clients to obtain NetBIOS name_type information that can NOT be provided by any other means of name resolution. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905914"></a>Browsing support in Samba</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907468"></a>Browsing support in Samba</h3></div></div><div></div></div><p> Samba facilitates browsing. The browsing is supported by <span class="application">nmbd</span> and is also controlled by options in the <tt class="filename">smb.conf</tt> file. Samba can act as a local browse master for a workgroup and the ability @@ -752,7 +753,7 @@ browsing on another subnet. It is recommended that this option is only used for 'unusual' purposes: announcements over the internet, for example. See <i class="parameter"><tt>remote announce</tt></i> in the <tt class="filename">smb.conf</tt> man page. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906021"></a>Problem resolution</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907575"></a>Problem resolution</h3></div></div><div></div></div><p> If something doesn't work then hopefully the log.nmbd file will help you track down the problem. Try a debug level of 2 or 3 for finding problems. Also note that the current browse list usually gets stored @@ -777,7 +778,7 @@ server resources. The other big problem people have is that their broadcast address, netmask or IP address is wrong (specified with the "interfaces" option in <tt class="filename">smb.conf</tt>) -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906100"></a>Browsing across subnets</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907654"></a>Browsing across subnets</h3></div></div><div></div></div><p> Since the release of Samba 1.9.17(alpha1), Samba has supported the replication of browse lists across subnet boundaries. This section describes how to set this feature up in different settings. @@ -798,16 +799,16 @@ be they Windows 95, Windows NT, or Samba servers must have the IP address of a WINS server given to them by a DHCP server, or by manual configuration (for Win95 and WinNT, this is in the TCP/IP Properties, under Network settings) for Samba this is in the <tt class="filename">smb.conf</tt> file. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906150"></a>How does cross subnet browsing work ?</h4></div></div><div></div></div><p> +</p><div xmlns:ns21="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907703"></a>How does cross subnet browsing work ?</h4></div></div><div></div></div><p> Cross subnet browsing is a complicated dance, containing multiple moving parts. It has taken Microsoft several years to get the code that achieves this correct, and Samba lags behind in some areas. Samba is capable of cross subnet browsing when configured correctly. </p><p> Consider a network set up as follows : -</p><p> +</p><ns21:p> -</p><pre class="programlisting"> +</ns21:p><pre class="programlisting"> (DMB) N1_A N1_B N1_C N1_D N1_E | | | | | @@ -822,8 +823,8 @@ Consider a network set up as follows : | | | | | | | | N2_A N2_B N2_C N2_D N3_A N3_B N3_C N3_D (WINS) -</pre><p> -</p><p> +</pre><ns21:p> +</ns21:p><p> Consisting of 3 subnets (1, 2, 3) connected by two routers (R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume @@ -864,9 +865,9 @@ called 'non-authoritative'. At this point the browse lists look as follows (these are the machines you would see in your network neighborhood if you looked in it on a particular network right now). -</p><p> -</p><div class="table"><a name="id2906267"></a><p class="title"><b>Table10.1.Browse subnet example 1</b></p><table summary="Browse subnet example 1" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><p> -</p><p> +</p><ns21:p> +</ns21:p><div class="table"><a name="id2907818"></a><p class="title"><b>Table10.1.Browse subnet example 1</b></p><table summary="Browse subnet example 1" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><ns21:p> +</ns21:p><p> Note that at this point all the subnets are separate, no machine is seen across any of the subnets. </p><p> @@ -886,11 +887,11 @@ names it knows about. Once the domain master browser receives the MasterAnnouncement packet it schedules a synchronization request to the sender of that packet. After both synchronizations are done the browse lists look like : -</p><p> -</p><div class="table"><a name="id2906382"></a><p class="title"><b>Table10.2.Browse subnet example 2</b></p><table summary="Browse subnet example 2" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><p> +</p><ns21:p> +</ns21:p><div class="table"><a name="id2907928"></a><p class="title"><b>Table10.2.Browse subnet example 2</b></p><table summary="Browse subnet example 2" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><ns21:p> Servers with a (*) after them are non-authoritative names. -</p><p> +</ns21:p><p> At this point users looking in their network neighborhood on subnets 1 or 2 will see all the servers on both, users on subnet 3 will still only see the servers on their own subnet. @@ -901,11 +902,11 @@ synchronizes browse lists with the domain master browser (N1_A) it gets both the server entries on subnet 1, and those on subnet 2. After N3_D has synchronized with N1_C and vica-versa the browse lists look like. -</p><p> -</p><div class="table"><a name="id2906481"></a><p class="title"><b>Table10.3.Browse subnet example 3</b></p><table summary="Browse subnet example 3" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><p> +</p><ns21:p> +</ns21:p><div class="table"><a name="id2908028"></a><p class="title"><b>Table10.3.Browse subnet example 3</b></p><table summary="Browse subnet example 3" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><ns21:p> Servers with a (*) after them are non-authoritative names. -</p><p> +</ns21:p><p> At this point users looking in their network neighborhood on subnets 1 or 3 will see all the servers on all subnets, users on subnet 2 will still only see the servers on subnets 1 and 2, but not 3. @@ -914,11 +915,11 @@ Finally, the local master browser for subnet 2 (N2_B) will sync again with the domain master browser (N1_C) and will receive the missing server entries. Finally - and as a steady state (if no machines are removed or shut off) the browse lists will look like : -</p><p> -</p><div class="table"><a name="id2906581"></a><p class="title"><b>Table10.4.Browse subnet example 4</b></p><table summary="Browse subnet example 4" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><p> +</p><ns21:p> +</ns21:p><div class="table"><a name="id2908128"></a><p class="title"><b>Table10.4.Browse subnet example 4</b></p><table summary="Browse subnet example 4" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><ns21:p> Servers with a (*) after them are non-authoritative names. -</p><p> +</ns21:p><p> Synchronizations between the domain master browser and local master browsers will continue to occur, but this should be a steady state situation. @@ -936,11 +937,11 @@ If either router R1 or R2 fails the following will occur: be able to access servers on its local subnet, by using subnet-isolated broadcast NetBIOS name resolution. The effects are similar to that of losing access to a DNS server. - </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906720"></a>Common Errors</h2></div></div><div></div></div><p> + </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908270"></a>Common Errors</h2></div></div><div></div></div><p> Many questions are asked on the mailing lists regarding browsing. The majority of browsing problems originate out of incorrect configuration of NetBIOS name resolution. Some are of particular note. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906735"></a>How can one flush the Samba NetBIOS name cache without restarting Samba?</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908285"></a>How can one flush the Samba NetBIOS name cache without restarting Samba?</h3></div></div><div></div></div><p> Samba's nmbd process controls all browse list handling. Under normal circumstances it is safe to restart nmbd. This will effectively flush the Samba NetBIOS name cache and cause it to be rebuilt. Note that this does NOT make certain that a rogue machine name will not re-appear @@ -950,7 +951,7 @@ want to clear a rogue machine from the list then every machine on the network wi shut down and restarted at after all machines are down. Failing a complete restart, the only other thing you can do is wait until the entry times out and is then flushed from the list. This may take a long time on some networks (months). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906764"></a>My client reports "This server is not configured to list shared resources"</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908313"></a>My client reports "This server is not configured to list shared resources"</h3></div></div><div></div></div><p> Your guest account is probably invalid for some reason. Samba uses the guest account for browsing in smbd. Check that your guest account is valid. diff --git a/docs/htmldocs/Other-Clients.html b/docs/htmldocs/Other-Clients.html index a5e7740cf0..b9d0387393 100644 --- a/docs/htmldocs/Other-Clients.html +++ b/docs/htmldocs/Other-Clients.html @@ -1,7 +1,8 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter38.Samba and other CIFS clients</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Portability.html" title="Chapter37.Portability"><link rel="next" href="speed.html" title="Chapter39.Samba Performance Tuning"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter38.Samba and other CIFS clients</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Portability.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="speed.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter38.Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email"><<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Other-Clients.html#id3015663">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3017016">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017023">How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3017102">How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3017164">How do I get printer driver download working - for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017260">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017268">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3017357">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3017388">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3017433">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3017464">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3017481">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017528">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017601">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017625">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3017736">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015663"></a>Macintosh clients?</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter38.Samba and other CIFS clients</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Portability.html" title="Chapter37.Portability"><link rel="next" href="speed.html" title="Chapter39.Samba Performance Tuning"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter38.Samba and other CIFS clients</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Portability.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="speed.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter38.Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email"><<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Other-Clients.html#id3013776">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3013848">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013855">How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3013471">How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3013530">How do I get printer driver download working + for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013628">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013090">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3013179">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3013210">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3013255">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3013285">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3013303">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013349">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3014379">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3014403">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3014514">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013776"></a>Macintosh clients?</h2></div></div><div></div></div><p> Yes. <a href="http://www.thursby.com/" target="_top">Thursby</a> now has a CIFS Client / Server called <a href="http://www.thursby.com/products/dave.html" target="_top">DAVE</a> </p><p> They test it against Windows 95, Windows NT and samba for @@ -21,7 +22,7 @@ What Samba offers MS Windows users, these packages offer to Macs. For more info on these packages, Samba, and Linux (and other UNIX-based systems) see <a href="http://www.eats.com/linux_mac_win.html" target="_top">http://www.eats.com/linux_mac_win.html</a> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3017016"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017023"></a>How can I configure OS/2 Warp Connect or +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013848"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013855"></a>How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?</h3></div></div><div></div></div><p>A more complete answer to this question can be found on <a href="http://carol.wins.uva.nl/~leeuw/samba/warp.html" target="_top"> http://carol.wins.uva.nl/~leeuw/samba/warp.html</a>.</p><p>Basically, you need three components:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>The File and Print Client ('IBM Peer')</td></tr><tr><td>TCP/IP ('Internet support') </td></tr><tr><td>The "NetBIOS over TCP/IP" driver ('TCPBEUI')</td></tr></table><p>Installing the first two together with the base operating @@ -39,7 +40,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see to the "Names List", or specify a WINS server ('NetBIOS Nameserver' in IBM and RFC terminology). For Warp Connect you may need to download an update for 'IBM Peer' to bring it on - the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017102"></a>How can I configure OS/2 Warp 3 (not Connect), + the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013471"></a>How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?</h3></div></div><div></div></div><p>You can use the free Microsoft LAN Manager 2.2c Client for OS/2 from <a href="ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/" target="_top"> @@ -57,7 +58,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see or NS2000 driver from <a href="ftp://ftp.cdrom.com/pub/os2/network/ndis/" target="_top"> ftp://ftp.cdrom.com/pub/os2/network/ndis/</a> instead. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017164"></a>How do I get printer driver download working + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013530"></a>How do I get printer driver download working for OS/2 clients?</h3></div></div><div></div></div><p>First, create a share called <i class="parameter"><tt>[PRINTDRV]</tt></i> that is world-readable. Copy your OS/2 driver files there. Note that the .EA_ files must still be separate, so you will need @@ -74,7 +75,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see you the driver is not available. On the second attempt, it will work. This is fixed simply by adding the device name to the mapping, after which it will work on the first attempt. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3017260"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017268"></a>Use latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013628"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013090"></a>Use latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows for Workgroups. </p><p>The early TCP/IP stacks had lots of bugs.</p><p> Microsoft has released an incremental upgrade to their TCP/IP 32-Bit @@ -89,7 +90,7 @@ fixed. New files include <tt class="filename">WINSOCK.DLL</tt>, <tt class="filename">TRACERT.EXE</tt>, <tt class="filename">NETSTAT.EXE</tt>, and <tt class="filename">NBTSTAT.EXE</tt>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017357"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013179"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p> WfWg does a lousy job with passwords. I find that if I change my password on either the unix box or the PC the safest thing to do is to delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password. @@ -98,7 +99,7 @@ If you don't do this you may find that WfWg remembers and uses the old password, even if you told it a new one. </p><p> Often WfWg will totally ignore a password you give it in a dialog box. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017388"></a>Configure WfW password handling</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013210"></a>Configure WfW password handling</h3></div></div><div></div></div><p> There is a program call admincfg.exe on the last disk (disk 8) of the WFW 3.11 disk set. To install it type <b class="userinput"><tt>EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE</tt></b>. @@ -106,11 +107,11 @@ Then add an icon for it via the <span class="application">Program Manager</span> <span class="guimenu">New</span> Menu. This program allows you to control how WFW handles passwords. ie disable Password Caching etc for use with <i class="parameter"><tt>security = user</tt></i> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017433"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <a href="smb.conf.5.html" target="_top">smb.conf(5)</a> information on <i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017464"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013255"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <a href="smb.conf.5.html" target="_top">smb.conf(5)</a> information on <i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013285"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find that you have to use TCP/IP as the default protocol under WfWg. For some reason if you leave NetBEUI as the default it may break the print queue reporting on some systems. -It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017481"></a>Speed improvement</h3></div></div><div></div></div><p> +It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013303"></a>Speed improvement</h3></div></div><div></div></div><p> Note that some people have found that setting <i class="parameter"><tt>DefaultRcvWindow</tt></i> in the <i class="parameter"><tt>[MSTCP]</tt></i> section of the <tt class="filename">SYSTEM.INI</tt> file under WfWg to 3072 gives a @@ -121,7 +122,7 @@ performance with a large value (16384 or larger). Other people have reported that anything over 3072 slows things down enormously. One person even reported a speed drop of a factor of 30 when he went from 3072 to 8192. I don't know why. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3017528"></a>Windows '95/'98</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013349"></a>Windows '95/'98</h2></div></div><div></div></div><p> When using Windows 95 OEM SR2 the following updates are recommended where Samba is being used. Please NOTE that the above change will affect you once these updates have been installed. @@ -135,11 +136,11 @@ install the <b class="command">OLEUPD.EXE</b> fix. This fix may stop your machine from hanging for an extended period when exiting Outlook and you may also notice a significant speedup when accessing network neighborhood services. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3017601"></a>Speed improvement</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3014379"></a>Speed improvement</h3></div></div><div></div></div><p> Configure the win95 TCPIP registry settings to give better performance. I use a program called <b class="command">MTUSPEED.exe</b> which I got off the net. There are various other utilities of this type freely available. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3017625"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014403"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p> There are several annoyances with Windows 2000 SP2. One of which only appears when using a Samba server to host user profiles to Windows 2000 SP2 clients in a Windows domain. This assumes @@ -180,7 +181,7 @@ the Win2k client a response to the QuerySecurityDescriptor trans2 call which causes the client to set a default ACL for the profile. This default ACL includes </p><p><span class="emphasis"><em>DOMAIN\user "Full Control"</em></span>></p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This bug does not occur when using winbind to -create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3017736"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows +create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014514"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows NT 3.1 workstations, read <a href="http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q103765" target="_top">this Microsoft Knowledge Base article</a>. </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Portability.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="speed.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter37.Portability</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter39.Samba Performance Tuning</td></tr></table></div></body></html> diff --git a/docs/htmldocs/PolicyMgmt.html b/docs/htmldocs/PolicyMgmt.html index 775cd6cc16..3b3e2b3d1a 100644 --- a/docs/htmldocs/PolicyMgmt.html +++ b/docs/htmldocs/PolicyMgmt.html @@ -1,10 +1,11 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter23.System and Account Policies</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management"><link rel="next" href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter23.System and Account Policies</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AdvancedNetworkManagement.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="ProfileMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter23.System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="PolicyMgmt.html#id2984380">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2984435">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2986217">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2986312">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2986445">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2986697">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2986798">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2986819">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2986839">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2986883">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2987030">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2987044">Policy Does Not Work</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter23.System and Account Policies</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management"><link rel="next" href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter23.System and Account Policies</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AdvancedNetworkManagement.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="ProfileMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter23.System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="PolicyMgmt.html#id2982185">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2982237">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2982348">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2981896">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2982030">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983472">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983573">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2983593">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2983614">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983658">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2983805">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983819">Policy Does Not Work</a></dt></dl></dd></dl></div><p> This chapter summarises the current state of knowledge derived from personal practice and knowledge from samba mailing list subscribers. Before reproduction of posted information effort has been made to validate the information provided. Where additional information was uncovered through this validation it is provided also. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984380"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982185"></a>Features and Benefits</h2></div></div><div></div></div><p> When MS Windows NT3.5 was introduced the hot new topic was the ability to implement Group Policies for users and group. Then along came MS Windows NT4 and a few sites started to adopt this capability. How do we know that? By way of the number of "booboos" @@ -25,7 +26,7 @@ network client workstations. </p><p> A tool new to Samba-3 may become an important part of the future Samba Administrators' arsenal. The <b class="command">editreg</b> tool is described in this document. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984435"></a>Creating and Managing System Policies</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982237"></a>Creating and Managing System Policies</h2></div></div><div></div></div><p> Under MS Windows platforms, particularly those following the release of MS Windows NT4 and MS Windows 95) it is possible to create a type of file that would be placed in the NETLOGON share of a domain controller. As the client logs onto the network @@ -60,7 +61,7 @@ be read and understood. Try searching on the Microsoft web site for "Group </p><p> What follows is a very brief discussion with some helpful notes. The information provided here is incomplete - you are warned. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986217"></a>Windows 9x/Me Policies</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982348"></a>Windows 9x/Me Policies</h3></div></div><div></div></div><p> You need the Win98 Group Policy Editor to set Group Profiles up under Windows 9x/Me. It can be found on the Original full product Win98 installation CD under <tt class="filename">tools/reskit/netadmin/poledit</tt>. Install this using the @@ -86,7 +87,7 @@ here is incomplete - you are warned. <tt class="filename">grouppol.inf</tt>. Log off and on again a couple of times and see if Win98 picks up group policies. Unfortunately this needs to be done on every Win9x/Me machine that uses group policies. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986312"></a>Windows NT4 Style Policy Files</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2981896"></a>Windows NT4 Style Policy Files</h3></div></div><div></div></div><p> To create or edit <tt class="filename">ntconfig.pol</tt> you must use the NT Server Policy Editor, <b class="command">poledit.exe</b> which is included with NT4 Server but <span class="emphasis"><em>not NT Workstation</em></span>. There is a Policy Editor on a NT4 @@ -107,14 +108,14 @@ here is incomplete - you are warned. be extracted as well. It is also possible to downloaded the policy template files for Office97 and get a copy of the policy editor. Another possible location is with the Zero Administration Kit available for download from Microsoft. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2986421"></a>Registry Spoiling</h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2982006"></a>Registry Spoiling</h4></div></div><div></div></div><p> With NT4 style registry based policy changes, a large number of settings are not automatically reversed as the user logs off. Since the settings that were in the NTConfig.POL file were applied to the client machine registry and that apply to the hive key HKEY_LOCAL_MACHINE are permanent until explicitly reversed. This is known as tattooing. It can have serious consequences down-stream and the administrator must be extremely careful not to lock out the ability to manage the machine at a later date. - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986445"></a>MS Windows 200x / XP Professional Policies</h3></div></div><div></div></div><p> + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982030"></a>MS Windows 200x / XP Professional Policies</h3></div></div><div></div></div><p> Windows NT4 System policies allows setting of registry parameters specific to users, groups and computers (client workstations) that are members of the NT4 style domain. Such policy file will work with MS Windows 2000 / XP clients also. @@ -151,7 +152,7 @@ here is incomplete - you are warned. to any number of concurrently applicable (and applied) policy sets (GPOs). Active Directory allows the administrator to also set filters over the policy settings. No such equivalent capability exists with NT4 style policy files. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2986546"></a>Administration of Win2K / XP Policies</h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2982130"></a>Administration of Win2K / XP Policies</h4></div></div><div></div></div><p> Instead of using the tool called <span class="application">The System Policy Editor</span>, commonly called Poledit (from the executable name <b class="command">poledit.exe</b>), <span class="acronym">GPOs</span> are created and managed using a <span class="application">Microsoft Management Console</span> <span class="acronym">(MMC)</span> snap-in as follows:</p><div class="procedure"><ol type="1"><li><p> @@ -177,7 +178,7 @@ here is incomplete - you are warned. The MS Windows 2000 Resource Kit contains a tool called gpolmig.exe. This tool can be used to migrate an NT4 NTConfig.POL file into a Windows 200x style GPO. Be VERY careful how you use this powerful tool. Please refer to the resource kit manuals for specific usage information. - </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986697"></a>Managing Account/User Policies</h2></div></div><div></div></div><p> + </p></div></div></div></div><div xmlns:ns80="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983472"></a>Managing Account/User Policies</h2></div></div><div></div></div><p> Policies can define a specific user's settings or the settings for a group of users. The resulting policy file contains the registry settings for all users, groups, and computers that will be using the policy file. Separate policy files for each user, group, or computer are not not necessary. @@ -202,42 +203,42 @@ In addition to user access controls that may be imposed or applied via system an in a manner that works in conjunction with user profiles, the user management environment under MS Windows NT4/200x/XP allows per domain as well as per user account restrictions to be applied. Common restrictions that are frequently used includes: -</p><p> -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Logon Hours</td></tr><tr><td>Password Aging</td></tr><tr><td>Permitted Logon from certain machines only</td></tr><tr><td>Account type (Local or Global)</td></tr><tr><td>User Rights</td></tr></table><p> -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986798"></a>Samba Editreg Toolset</h3></div></div><div></div></div><p> +</p><ns80:p> +</ns80:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Logon Hours</td></tr><tr><td>Password Aging</td></tr><tr><td>Permitted Logon from certain machines only</td></tr><tr><td>Account type (Local or Global)</td></tr><tr><td>User Rights</td></tr></table><ns80:p> +</ns80:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983573"></a>Samba Editreg Toolset</h3></div></div><div></div></div><p> Describe in detail the benefits of <b class="command">editreg</b> and how to use it. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986819"></a>Windows NT4/200x</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983593"></a>Windows NT4/200x</h3></div></div><div></div></div><p> The tools that may be used to configure these types of controls from the MS Windows environment are: The NT4 User Manager for domains, the NT4 System and Group Policy Editor, the registry editor (regedt32.exe). Under MS Windows 200x/XP this is done using the Microsoft Management Console (MMC) with appropriate "snap-ins", the registry editor, and potentially also the NT4 System and Group Policy Editor. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986839"></a>Samba PDC</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983614"></a>Samba PDC</h3></div></div><div></div></div><p> With a Samba Domain Controller, the new tools for managing of user account and policy information includes: <b class="command">smbpasswd</b>, <b class="command">pdbedit</b>, <b class="command">net</b>, <b class="command">rpcclient</b>. The administrator should read the man pages for these tools and become familiar with their use. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986883"></a>System Startup and Logon Processing Overview</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983658"></a>System Startup and Logon Processing Overview</h2></div></div><div></div></div><p> The following attempts to document the order of processing of system and user policies following a system reboot and as part of the user logon: </p><div class="orderedlist"><ol type="1"><li><p> Network starts, then Remote Procedure Call System Service (RPCSS) and Multiple Universal Naming Convention Provider (MUP) start - </p></li><li><p> + </p></li><li xmlns:ns81=""><ns81:p> Where Active Directory is involved, an ordered list of Group Policy Objects (GPOs) is downloaded and applied. The list may include GPOs that: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Apply to the location of machines in a Directory</td></tr><tr><td>Apply only when settings have changed</td></tr><tr><td>Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.</td></tr></table><p> +</ns81:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Apply to the location of machines in a Directory</td></tr><tr><td>Apply only when settings have changed</td></tr><tr><td>Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.</td></tr></table><ns81:p> No desktop user interface is presented until the above have been processed. - </p></li><li><p> + </ns81:p></li><li><p> Execution of start-up scripts (hidden and synchronous by default). </p></li><li><p> A keyboard action to affect start of logon (Ctrl-Alt-Del). </p></li><li><p> User credentials are validated, User profile is loaded (depends on policy settings). - </p></li><li><p> + </p></li><li xmlns:ns82=""><ns82:p> An ordered list of User GPOs is obtained. The list contents depends on what is configured in respect of: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Is user a domain member, thus subject to particular policies</td></tr><tr><td>Loopback enablement, and the state of the loopback policy (Merge or Replace)</td></tr><tr><td>Location of the Active Directory itself</td></tr><tr><td>Has the list of GPOs changed. No processing is needed if not changed.</td></tr></table><p> - </p></li><li><p> +</ns82:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Is user a domain member, thus subject to particular policies</td></tr><tr><td>Loopback enablement, and the state of the loopback policy (Merge or Replace)</td></tr><tr><td>Location of the Active Directory itself</td></tr><tr><td>Has the list of GPOs changed. No processing is needed if not changed.</td></tr></table><ns82:p> + </ns82:p></li><li><p> User Policies are applied from Active Directory. Note: There are several types. </p></li><li><p> Logon scripts are run. New to Win2K and Active Directory, logon scripts may be obtained based on Group @@ -246,10 +247,10 @@ reboot and as part of the user logon: </p></li><li><p> The User Interface as determined from the GPOs is presented. Note: In a Samba domain (like and NT4 Domain) machine (system) policies are applied at start-up, User policies are applied at logon. - </p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2987030"></a>Common Errors</h2></div></div><div></div></div><p> + </p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983805"></a>Common Errors</h2></div></div><div></div></div><p> Policy related problems can be very difficult to diagnose and even more difficult to rectify. The following collection demonstrates only basic issues. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2987044"></a>Policy Does Not Work</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983819"></a>Policy Does Not Work</h3></div></div><div></div></div><p> Question: We have created the <tt class="filename">config.pol</tt> file and put it in the <span class="emphasis"><em>NETLOGON</em></span> share. It has made no difference to our Win XP Pro machines, they just don't see it. IT worked fine with Win 98 but does not work any longer since we upgraded to Win XP Pro. Any hints? diff --git a/docs/htmldocs/Portability.html b/docs/htmldocs/Portability.html index bb2c20ac9f..f40d0dcd11 100644 --- a/docs/htmldocs/Portability.html +++ b/docs/htmldocs/Portability.html @@ -1,6 +1,7 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter37.Portability</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="compiling.html" title="Chapter36.How to compile SAMBA"><link rel="next" href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter37.Portability</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="compiling.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Other-Clients.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Portability"></a>Chapter37.Portability</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Portability.html#id3013478">HPUX</a></dt><dt><a href="Portability.html#id3016009">SCO Unix</a></dt><dt><a href="Portability.html#id3016039">DNIX</a></dt><dt><a href="Portability.html#id3016210">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id3016254">AIX</a></dt><dd><dl><dt><a href="Portability.html#id3016261">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id3016287">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id3016294">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></div><p>Samba works on a wide range of platforms but the interface all the +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter37.Portability</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="compiling.html" title="Chapter36.How to compile SAMBA"><link rel="next" href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter37.Portability</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="compiling.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Other-Clients.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Portability"></a>Chapter37.Portability</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Portability.html#id3012634">HPUX</a></dt><dt><a href="Portability.html#id3012719">SCO Unix</a></dt><dt><a href="Portability.html#id3012747">DNIX</a></dt><dt><a href="Portability.html#id3012917">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id3012960">AIX</a></dt><dd><dl><dt><a href="Portability.html#id3012967">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id3012993">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id3013000">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></div><p>Samba works on a wide range of platforms but the interface all the platforms provide is not always compatible. This chapter contains -platform-specific information about compiling and using samba.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013478"></a>HPUX</h2></div></div><div></div></div><p> +platform-specific information about compiling and using samba.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012634"></a>HPUX</h2></div></div><div></div></div><p> HP's implementation of supplementary groups is, er, non-standard (for hysterical reasons). There are two group files, <tt class="filename">/etc/group</tt> and <tt class="filename">/etc/logingroup</tt>; the system maps UIDs to numbers using the former, but @@ -20,7 +21,7 @@ allowed range. On HPUX you must use gcc or the HP ANSI compiler. The free compiler that comes with HP-UX is not ANSI compliant and cannot compile Samba. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016009"></a>SCO Unix</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012719"></a>SCO Unix</h2></div></div><div></div></div><p> If you run an old version of SCO Unix then you may need to get important TCP/IP patches for Samba to work correctly. Without the patch, you may encounter corrupt data transfers using samba. @@ -28,7 +29,7 @@ encounter corrupt data transfers using samba. The patch you need is UOD385 Connection Drivers SLS. It is available from SCO (<a href="ftp://ftp.sco.com/" target="_top">ftp.sco.com</a>, directory SLS, files uod385a.Z and uod385a.ltr.Z). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016039"></a>DNIX</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012747"></a>DNIX</h2></div></div><div></div></div><p> DNIX has a problem with seteuid() and setegid(). These routines are needed for Samba to work correctly, but they were left out of the DNIX C library for some reason. @@ -87,13 +88,13 @@ LIBSM = setegid.o seteuid.o -ln You should then remove the line: </p><pre class="programlisting"> #define NO_EID -</pre><p>from the DNIX section of <tt class="filename">includes.h</tt></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016210"></a>RedHat Linux Rembrandt-II</h2></div></div><div></div></div><p> +</pre><p>from the DNIX section of <tt class="filename">includes.h</tt></p></div><div xmlns:ns102="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012917"></a>RedHat Linux Rembrandt-II</h2></div></div><div></div></div><ns102:p> By default RedHat Rembrandt-II during installation adds an entry to <tt class="filename">/etc/hosts</tt> as follows: -</p><pre class="programlisting"> +</ns102:p><pre class="programlisting"> 127.0.0.1 loopback "hostname"."domainname" -</pre><p> -</p><p> +</pre><ns102:p> +</ns102:p><p> This causes Samba to loop back onto the loopback interface. The result is that Samba fails to communicate correctly with the world and therefor may fail to correctly negotiate who @@ -101,10 +102,10 @@ is the master browse list holder and who is the master browser. </p><p> Corrective Action: Delete the entry after the word loopback in the line starting 127.0.0.1 -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016254"></a>AIX</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3016261"></a>Sequential Read Ahead</h3></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012960"></a>AIX</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3012967"></a>Sequential Read Ahead</h3></div></div><div></div></div><p> Disabling Sequential Read Ahead using <b class="userinput"><tt>vmtune -r 0</tt></b> improves Samba performance significantly. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016287"></a>Solaris</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3016294"></a>Locking improvements</h3></div></div><div></div></div><p>Some people have been experiencing problems with F_SETLKW64/fcntl +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012993"></a>Solaris</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013000"></a>Locking improvements</h3></div></div><div></div></div><p>Some people have been experiencing problems with F_SETLKW64/fcntl when running Samba on Solaris. The built in file locking mechanism was not scalable. Performance would degrade to the point where processes would get into loops of trying to lock a file. It would try a lock, then fail, diff --git a/docs/htmldocs/ProfileMgmt.html b/docs/htmldocs/ProfileMgmt.html index 0b9a40df62..0a2f609bd6 100644 --- a/docs/htmldocs/ProfileMgmt.html +++ b/docs/htmldocs/ProfileMgmt.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter24.Desktop Profile Management</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="PolicyMgmt.html" title="Chapter23.System and Account Policies"><link rel="next" href="pam.html" title="Chapter25.PAM based Distributed Authentication"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter24.Desktop Profile Management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="PolicyMgmt.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="pam.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ProfileMgmt"></a>Chapter24.Desktop Profile Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ProfileMgmt.html#id2988251">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2988285">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2988326">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2988731">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2989902">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2989967">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2990232">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2990290">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2990336">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2990356">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2990504">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2991058">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2991562">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2991575">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="ProfileMgmt.html#id2991638">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2991859">Changing the default profile</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2988251"></a>Features and Benefits</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter24.Desktop Profile Management</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="PolicyMgmt.html" title="Chapter23.System and Account Policies"><link rel="next" href="pam.html" title="Chapter25.PAM based Distributed Authentication"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter24.Desktop Profile Management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="PolicyMgmt.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="pam.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ProfileMgmt"></a>Chapter24.Desktop Profile Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ProfileMgmt.html#id2983922">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2983955">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2983996">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2989358">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2990295">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2990360">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2990620">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2990678">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2990723">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2990743">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2990891">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2991445">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2991949">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2991962">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="ProfileMgmt.html#id2992025">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2992243">Changing the default profile</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983922"></a>Features and Benefits</h2></div></div><div></div></div><p> Roaming Profiles are feared by some, hated by a few, loved by many, and a Godsend for some administrators. </p><p> @@ -11,7 +12,7 @@ problem to others. In particular, users of mobile computing tools, where often t be a sustained network connection, are often better served by purely Local Profiles. This chapter provides information to help the Samba administrator to deal with those situations also. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2988285"></a>Roaming Profiles</h2></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983955"></a>Roaming Profiles</h2></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> Roaming profiles support is different for Win9x / Me and Windows NT4/200x. </p></div><p> Before discussing how to configure roaming profiles, it is useful to see how @@ -24,23 +25,23 @@ profiles are restricted to being stored in the user's home directory. </p><p> Windows NT4/200x clients send a NetSAMLogon RPC request, which contains many fields, including a separate field for the location of the user's profiles. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2988326"></a>Samba Configuration for Profile Handling</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983996"></a>Samba Configuration for Profile Handling</h3></div></div><div></div></div><p> This section documents how to configure Samba for MS Windows client profile support. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2988340"></a>NT4/200x User Profiles</h4></div></div><div></div></div><p> +</p><div xmlns:ns83="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2984009"></a>NT4/200x User Profiles</h4></div></div><div></div></div><p> To support Windows NT4/200x clients, in the [global] section of smb.conf set the following (for example): -</p><p> -</p><pre class="programlisting"> +</p><ns83:p> +</ns83:p><pre class="programlisting"> logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath -</pre><p> +</pre><ns83:p> This is typically implemented like: -</p><pre class="programlisting"> +</ns83:p><pre class="programlisting"> logon path = \\%L\Profiles\%u -</pre><p> +</pre><ns83:p> where %L translates to the name of the Samba server and %u translates to the user name -</p><p> +</ns83:p><p> The default for this option is <tt class="filename">\\%N\%U\profile</tt>, namely <tt class="filename">\\sambaserver\username\profile</tt>. The <tt class="filename">\\N%\%U</tt> service is created automatically by the [homes] service. If you are using @@ -51,7 +52,7 @@ semantics of %L and %N, as well as %U and %u. MS Windows NT/2K clients at times do not disconnect a connection to a server between logons. It is recommended to NOT use the <i class="parameter"><tt>homes</tt></i> meta-service name as part of the profile share path. -</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2988432"></a>Windows 9x / Me User Profiles</h4></div></div><div></div></div><p> +</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2984098"></a>Windows 9x / Me User Profiles</h4></div></div><div></div></div><p> To support Windows 9x / Me clients, you must use the <i class="parameter"><tt>logon home</tt></i> parameter. Samba has now been fixed so that <b class="userinput"><tt>net use /home</tt></b> now works as well, and it, too, relies on the <b class="command">logon home</b> parameter. @@ -69,28 +70,28 @@ Not only that, but <b class="userinput"><tt>net use /home</tt></b> will also wor Windows 9x / Me. It removes any directory stuff off the end of the home directory area and only uses the server and share portion. That is, it looks like you specified <tt class="filename">\\%L\%U</tt> for <i class="parameter"><tt>logon home</tt></i>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2988541"></a>Mixed Windows 9x / Me and Windows NT4/200x User Profiles</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989173"></a>Mixed Windows 9x / Me and Windows NT4/200x User Profiles</h4></div></div><div></div></div><p> You can support profiles for both Win9X and WinNT clients by setting both the <i class="parameter"><tt>logon home</tt></i> and <i class="parameter"><tt>logon path</tt></i> parameters. For example: </p><pre class="programlisting"> logon home = \\%L\%u\.profiles logon path = \\%L\profiles\%u -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2988580"></a>Disabling Roaming Profile Support</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989209"></a>Disabling Roaming Profile Support</h4></div></div><div></div></div><p> A question often asked is “<span class="quote">How may I enforce use of local profiles?</span>” or “<span class="quote">How do I disable Roaming Profiles?</span>” </p><p> There are three ways of doing this: -</p><div class="variablelist"><dl><dt><span class="term">In <tt class="filename">smb.conf</tt></span></dt><dd><p> +</p><div class="variablelist"><dl><dt><span class="term">In <tt class="filename">smb.conf</tt></span></dt><dd xmlns:ns84=""><ns84:p> Affect the following settings and ALL clients will be forced to use a local profile: - </p><pre class="programlisting"> + </ns84:p><pre class="programlisting"> logon home = logon path = - </pre><p> - </p></dd><dt><span class="term">MS Windows Registry:</span></dt><dd><p> + </pre><ns84:p> + </ns84:p></dd><dt><span class="term">MS Windows Registry:</span></dt><dd xmlns:ns85=""><ns85:p> By using the Microsoft Management Console gpedit.msc to instruct your MS Windows XP machine to use only a local profile. This of course modifies registry settings. The full path to the option is: - </p><pre class="programlisting"> + </ns85:p><pre class="programlisting"> Local Computer Policy\ Computer Configuration\ Administrative Templates\ @@ -99,8 +100,8 @@ There are three ways of doing this: Disable: Only Allow Local User Profiles Disable: Prevent Roaming Profile Change from Propagating to the Server - </pre><p> - </p></dd><dt><span class="term">Change of Profile Type:</span></dt><dd><p> + </pre><ns85:p> + </ns85:p></dd><dt><span class="term">Change of Profile Type:</span></dt><dd><p> From the start menu right click on the My Computer icon, select <span class="guimenuitem">Properties</span>, click on the <span class="guilabel">User Profiles</span> tab, select the profile you wish to change from Roaming type to Local, click <span class="guibutton">Change Type</span>. @@ -112,7 +113,7 @@ profiles. The specifics of how to convert a local profile to a roaming profile, or a roaming profile to a local one vary according to the version of MS Windows you are running. Consult the Microsoft MS Windows Resource Kit for your version of Windows for specific information. -</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2988731"></a>Windows Client Profile Configuration Information</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2988739"></a>Windows 9x / Me Profile Setup</h4></div></div><div></div></div><p> +</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989358"></a>Windows Client Profile Configuration Information</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989366"></a>Windows 9x / Me Profile Setup</h4></div></div><div></div></div><p> When a user first logs in on Windows 9X, the file user.DAT is created, as are folders <tt class="filename">Start Menu</tt>, <tt class="filename">Desktop</tt>, <tt class="filename">Programs</tt> and <tt class="filename">Nethood</tt>. @@ -218,7 +219,7 @@ If you have access to an Windows NT4/200x server, then first set up roaming prof and / or netlogons on the Windows NT4/200x server. Make a packet trace, or examine the example packet traces provided with Windows NT4/200x server, and see what the differences are with the equivalent samba trace. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989233"></a>Windows NT4 Workstation</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2985567"></a>Windows NT4 Workstation</h4></div></div><div></div></div><p> When a user first logs in to a Windows NT Workstation, the profile NTuser.DAT is created. The profile location can be now specified through the <i class="parameter"><tt>logon path</tt></i> parameter. @@ -247,7 +248,7 @@ turns a profile into a mandatory one. </p><p> The case of the profile is significant. The file must be called <tt class="filename">NTuser.DAT</tt> or, for a mandatory profile, <tt class="filename">NTuser.MAN</tt>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989391"></a>Windows 2000/XP Professional</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2985724"></a>Windows 2000/XP Professional</h4></div></div><div></div></div><p> You must first convert the profile from a local profile to a domain profile on the MS Windows workstation as follows: </p><div class="procedure"><ol type="1"><li><p> @@ -297,7 +298,7 @@ On the XP workstation log in with an Administrator account. </p></li><li><p>Click: <span class="guimenu">Start</span>, <span class="guimenuitem">Run</span></p></li><li><p>Type: <b class="userinput"><tt>mmc</tt></b></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>A Microsoft Management Console should appear.</p></li><li><p>Click: <span class="guimenu">File</span>, <span class="guimenuitem">Add/Remove Snap-in...</span>, <span class="guimenuitem">Add</span></p></li><li><p>Double-Click: <span class="guiicon">Group Policy</span></p></li><li><p>Click: <span class="guibutton">Finish</span>, <span class="guibutton">Close</span></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>In the "Console Root" window:</p></li><li><p>Expand: <span class="guiicon">Local Computer Policy</span>, <span class="guiicon">Computer Configuration</span>, <span class="guiicon">Administrative Templates</span>, <span class="guiicon">System</span>, <span class="guiicon">User Profiles</span></p></li><li><p>Double-Click: <span class="guilabel">Do not check for user ownership of Roaming Profile Folders</span></p></li><li><p>Select: <span class="guilabel">Enabled</span></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>Close the whole console. You do not need to save the settings (this refers to the console settings rather than the policies you have - changed).</p></li><li><p>Reboot</p></li></ol></div></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989902"></a>Sharing Profiles between W9x/Me and NT4/200x/XP workstations</h3></div></div><div></div></div><p> + changed).</p></li><li><p>Reboot</p></li></ol></div></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990295"></a>Sharing Profiles between W9x/Me and NT4/200x/XP workstations</h3></div></div><div></div></div><p> Sharing of desktop profiles between Windows versions is NOT recommended. Desktop profiles are an evolving phenomenon and profiles for later versions of MS Windows clients add features that may interfere with earlier versions @@ -314,12 +315,12 @@ that need to be common are <i class="parameter"><tt>logon path</tt></i> and </p><p> If you have this set up correctly, you will find separate <tt class="filename">user.DAT</tt> and <tt class="filename">NTuser.DAT</tt> files in the same profile directory. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989967"></a>Profile Migration from Windows NT4/200x Server to Samba</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990360"></a>Profile Migration from Windows NT4/200x Server to Samba</h3></div></div><div></div></div><p> There is nothing to stop you specifying any path that you like for the location of users' profiles. Therefore, you could specify that the profile be stored on a samba server, or any other SMB server, as long as that SMB server supports encrypted passwords. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989984"></a>Windows NT4 Profile Management Tools</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990377"></a>Windows NT4 Profile Management Tools</h4></div></div><div></div></div><p> Unfortunately, the Resource Kit information is specific to the version of MS Windows NT4/200x. The correct resource kit is required for each platform. </p><p> @@ -336,17 +337,17 @@ domain is not a member of a trust relationship with your NT4 PDC.</p></div></li> <tt class="filename">c:\temp\foobar</tt></p></li><li><p>Click on the button <span class="guibutton">Change</span> in the <span class="guilabel">Permitted to use</span> box.</p></li><li><p>Click on the group 'Everyone' and then click <span class="guibutton">OK</span>. This closes the 'choose user' box.</p></li><li><p>Now click <span class="guibutton">OK</span>.</p></li></ol></div><p> Follow the above for every profile you need to migrate. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990153"></a>Side bar Notes</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990540"></a>Side bar Notes</h4></div></div><div></div></div><p> You should obtain the SID of your NT4 domain. You can use smbpasswd to do this. Read the man page.</p><p> With Samba-3.0.0 alpha code you can import all you NT4 domain accounts using the net samsync method. This way you can retain your profile settings as well as all your users. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990175"></a>moveuser.exe</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990562"></a>moveuser.exe</h4></div></div><div></div></div><p> The W2K professional resource kit has moveuser.exe. moveuser.exe changes the security of a profile from one user to another. This allows the account domain to change, and/or the user name to change. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990191"></a>Get SID</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990578"></a>Get SID</h4></div></div><div></div></div><p> You can identify the SID by using GetSID.exe from the Windows NT Server 4.0 Resource Kit. </p><p> @@ -359,7 +360,7 @@ users who have logged on to this computer. (To find the profile information for the user whose locally cached profile you want to move, find the SID for the user with the GetSID.exe utility.) Inside of the appropriate user's subkey, you will see a string value named ProfileImagePath. -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990232"></a>Mandatory profiles</h2></div></div><div></div></div><p> +</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990620"></a>Mandatory profiles</h2></div></div><div></div></div><p> A Mandatory Profile is a profile that the user does NOT have the ability to overwrite. During the user's session it may be possible to change the desktop environment, but as the user logs out all changes made will be lost. If it is desired to NOT allow the @@ -375,7 +376,7 @@ file in the copied profile and rename it to NTUser.MAN. </p><p> For MS Windows 9x / Me it is the <tt class="filename">User.DAT</tt> file that must be renamed to <tt class="filename">User.MAN</tt> to affect a mandatory profile. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990290"></a>Creating/Managing Group Profiles</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990678"></a>Creating/Managing Group Profiles</h2></div></div><div></div></div><p> Most organisations are arranged into departments. There is a nice benefit in this fact since usually most users in a department will require the same desktop applications and the same desktop layout. MS Windows NT4/200x/XP will allow the @@ -390,14 +391,14 @@ the now modified profile. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> Be careful with group profiles, if the user who is a member of a group also has a personal profile, then the result will be a fusion (merge) of the two. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990336"></a>Default Profile for Windows Users</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990723"></a>Default Profile for Windows Users</h2></div></div><div></div></div><p> MS Windows 9x / Me and NT4/200x/XP will use a default profile for any user for whom a profile does not already exist. Armed with a knowledge of where the default profile is located on the Windows workstation, and knowing which registry keys affect the path from which the default profile is created, it is possible to modify the default profile to one that has been optimised for the site. This has significant administrative advantages. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990356"></a>MS Windows 9x/Me</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990743"></a>MS Windows 9x/Me</h3></div></div><div></div></div><p> To enable default per use profiles in Windows 9x / Me you can either use the <span class="application">Windows 98 System Policy Editor</span> or change the registry directly. </p><p> @@ -409,7 +410,7 @@ select <span class="guilabel">User Profiles</span>, click on the enable box. Do To modify the registry directly, launch the <span class="application">Registry Editor</span> (<b class="command">regedit.exe</b>), select the hive <tt class="filename">HKEY_LOCAL_MACHINE\Network\Logon</tt>. Now add a DWORD type key with the name "User Profiles", to enable user profiles set the value to 1, to disable user profiles set it to 0. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990454"></a>How User Profiles Are Handled in Windows 9x / Me?</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990841"></a>How User Profiles Are Handled in Windows 9x / Me?</h4></div></div><div></div></div><p> When a user logs on to a Windows 9x / Me machine, the local profile path, <tt class="filename">HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProfileList</tt>, is checked for an existing entry for that user: @@ -425,7 +426,7 @@ If a User Profile is not found in either location, the Default User Profile from machine is used and is copied to a newly created folder for the logged on user. At log off, any changes that the user made are written to the user's local profile. If the user has a roaming profile, the changes are written to the user's profile on the server. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990504"></a>MS Windows NT4 Workstation</h3></div></div><div></div></div><p> +</p></div></div><div xmlns:ns86="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990891"></a>MS Windows NT4 Workstation</h3></div></div><div></div></div><p> On MS Windows NT4 the default user profile is obtained from the location <tt class="filename">%SystemRoot%\Profiles</tt> which in a default installation will translate to <tt class="filename">C:\WinNT\Profiles</tt>. Under this directory on a clean install there will be @@ -466,15 +467,15 @@ the following steps are followed in respect of profile handling: MS Windows NT4 profiles may be <span class="emphasis"><em>Local</em></span> or <span class="emphasis"><em>Roaming</em></span>. A Local profile will stored in the <tt class="filename">%SystemRoot%\Profiles\%USERNAME%</tt> location. A roaming profile will also remain stored in the same way, unless the following registry key is created: -</p><p> -</p><pre class="programlisting"> +</p><ns86:p> +</ns86:p><pre class="programlisting"> HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\ "DeleteRoamingCache"=dword:00000001 -</pre><p> +</pre><ns86:p> In which case, the local copy (in <tt class="filename">%SystemRoot%\Profiles\%USERNAME%</tt>) will be deleted on logout. -</p><p> +</ns86:p><p> Under MS Windows NT4 default locations for common resources (like <tt class="filename">My Documents</tt> may be redirected to a network share by modifying the following registry keys. These changes may be affected via use of the System Policy Editor (to do so may require that you create your owns template extension @@ -487,17 +488,17 @@ are controlled by entries on Windows NT4 is: <tt class="filename">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\</tt> </p><p> The above hive key contains a list of automatically managed folders. The default entries are: -</p><p> -</p><div class="table"><a name="id2990854"></a><p class="title"><b>Table24.1.User Shell Folder registry keys default values</b></p><table summary="User Shell Folder registry keys default values" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu </td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr></tbody></table></div><p> -</p><p> +</p><ns86:p> +</ns86:p><div class="table"><a name="id2991239"></a><p class="title"><b>Table24.1.User Shell Folder registry keys default values</b></p><table summary="User Shell Folder registry keys default values" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu </td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr></tbody></table></div><ns86:p> +</ns86:p><p> The registry key that contains the location of the default profile settings is: </p><p> <tt class="filename">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders</tt> -</p><p> +</p><ns86:p> The default entries are: -</p><div class="table"><a name="id2990998"></a><p class="title"><b>Table24.2.Defaults of profile settings registry keys</b></p><table summary="Defaults of profile settings registry keys" border="1"><colgroup><col><col></colgroup><tbody><tr><td>Common Desktop</td><td>%SystemRoot%\Profiles\All Users\Desktop</td></tr><tr><td>Common Programs</td><td>%SystemRoot%\Profiles\All Users\Programs</td></tr><tr><td>Common Start Menu</td><td>%SystemRoot%\Profiles\All Users\Start Menu</td></tr><tr><td>Common Startup</td><td>%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup</td></tr></tbody></table></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2991058"></a>MS Windows 200x/XP</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</ns86:p><div class="table"><a name="id2991383"></a><p class="title"><b>Table24.2.Defaults of profile settings registry keys</b></p><table summary="Defaults of profile settings registry keys" border="1"><colgroup><col><col></colgroup><tbody><tr><td>Common Desktop</td><td>%SystemRoot%\Profiles\All Users\Desktop</td></tr><tr><td>Common Programs</td><td>%SystemRoot%\Profiles\All Users\Programs</td></tr><tr><td>Common Start Menu</td><td>%SystemRoot%\Profiles\All Users\Start Menu</td></tr><tr><td>Common Startup</td><td>%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup</td></tr></tbody></table></div><ns86:p> +</ns86:p></div><div xmlns:ns87="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2991445"></a>MS Windows 200x/XP</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> MS Windows XP Home Edition does use default per user profiles, but can not participate in domain security, can not log onto an NT/ADS style domain, and thus can obtain the profile only from itself. While there are benefits in doing this the beauty of those MS Windows @@ -545,9 +546,9 @@ are controlled by entries on Windows 200x/XP is: <tt class="filename">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\</tt> </p><p> The above hive key contains a list of automatically managed folders. The default entries are: -</p><p> -</p><div class="table"><a name="id2991253"></a><p class="title"><b>Table24.3.Defaults of default user profile paths registry keys</b></p><table summary="Defaults of default user profile paths registry keys" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Cache</td><td>%USERPROFILE%\Local Settings\Temporary Internet Files</td></tr><tr><td>Cookies</td><td>%USERPROFILE%\Cookies</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>History</td><td>%USERPROFILE%\Local Settings\History</td></tr><tr><td>Local AppData</td><td>%USERPROFILE%\Local Settings\Application Data</td></tr><tr><td>Local Settings</td><td>%USERPROFILE%\Local Settings</td></tr><tr><td>My Pictures</td><td>%USERPROFILE%\My Documents\My Pictures</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>Personal</td><td>%USERPROFILE%\My Documents</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu</td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr><tr><td>Templates</td><td>%USERPROFILE%\Templates</td></tr></tbody></table></div><p> -</p><p> +</p><ns87:p> +</ns87:p><div class="table"><a name="id2991638"></a><p class="title"><b>Table24.3.Defaults of default user profile paths registry keys</b></p><table summary="Defaults of default user profile paths registry keys" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Cache</td><td>%USERPROFILE%\Local Settings\Temporary Internet Files</td></tr><tr><td>Cookies</td><td>%USERPROFILE%\Cookies</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>History</td><td>%USERPROFILE%\Local Settings\History</td></tr><tr><td>Local AppData</td><td>%USERPROFILE%\Local Settings\Application Data</td></tr><tr><td>Local Settings</td><td>%USERPROFILE%\Local Settings</td></tr><tr><td>My Pictures</td><td>%USERPROFILE%\My Documents\My Pictures</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>Personal</td><td>%USERPROFILE%\My Documents</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu</td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr><tr><td>Templates</td><td>%USERPROFILE%\Templates</td></tr></tbody></table></div><ns87:p> +</ns87:p><p> There is also an entry called "Default" that has no value set. The default entry is of type <tt class="constant">REG_SZ</tt>, all the others are of type <tt class="constant">REG_EXPAND_SZ</tt>. </p><p> @@ -571,9 +572,9 @@ MS Windows 200x/XP profiles may be <span class="emphasis"><em>Local</em></span> A roaming profile will be cached locally unless the following registry key is created: </p><p><tt class="filename">HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\"DeleteRoamingCache"=dword:00000001</tt></p><p> In which case, the local cache copy will be deleted on logout. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991562"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991949"></a>Common Errors</h2></div></div><div></div></div><p> The following are some typical errors/problems/questions that have been asked. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2991575"></a>How does one set up roaming profiles for just one (or a few) user/s or group/s?</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2991962"></a>How does one set up roaming profiles for just one (or a few) user/s or group/s?</h3></div></div><div></div></div><p> With samba-2.2.x the choice you have is to enable or disable roaming profiles support. It is a global only setting. The default is to have roaming profiles and the default path will locate them in the user's home @@ -591,25 +592,25 @@ using the Domain User Manager (as with MS Windows NT4/ Win 2Kx). </p><p> In any case, you can configure only one profile per user. That profile can be either: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>A profile unique to that user</td></tr><tr><td>A mandatory profile (one the user can not change)</td></tr><tr><td>A group profile (really should be mandatory ie:unchangable)</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2991638"></a>Can NOT use Roaming Profiles</h3></div></div><div></div></div><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td>A profile unique to that user</td></tr><tr><td>A mandatory profile (one the user can not change)</td></tr><tr><td>A group profile (really should be mandatory ie:unchangable)</td></tr></table></div><div xmlns:ns89="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992025"></a>Can NOT use Roaming Profiles</h3></div></div><div></div></div><p> “<span class="quote"> I dont want Roaming profile to be implemented, I just want to give users local profiles only. ... Please help me I am totally lost with this error from past two days I tried everything and googled around quite a bit but of no help. Please help me. -</span>”</p><p> +</span>”</p><ns89:p> Your choices are: -</p><div class="variablelist"><dl><dt><span class="term">Local profiles</span></dt><dd><p> +</ns89:p><div class="variablelist"><dl><dt><span class="term">Local profiles</span></dt><dd><p> I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out - </p></dd><dt><span class="term">Roaming profiles</span></dt><dd><p> - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>can use auto-delete on logout option</td></tr><tr><td>requires a registry key change on workstation</td></tr></table><p> + </p></dd><dt><span class="term">Roaming profiles</span></dt><dd xmlns:ns88=""><ns88:p> + </ns88:p><table class="simplelist" border="0" summary="Simple list"><tr><td>can use auto-delete on logout option</td></tr><tr><td>requires a registry key change on workstation</td></tr></table><ns88:p> Your choices are: - </p><div class="variablelist"><dl><dt><span class="term">Personal Roaming profiles</span></dt><dd><p> + </ns88:p><div class="variablelist"><dl><dt><span class="term">Personal Roaming profiles</span></dt><dd><p> - should be preserved on a central server - workstations 'cache' (store) a local copy - used in case the profile can not be downloaded @@ -617,10 +618,10 @@ Your choices are: </p></dd><dt><span class="term">Group profiles</span></dt><dd><p>- loaded from a central place</p></dd><dt><span class="term">Mandatory profiles</span></dt><dd><p> - can be personal or group - can NOT be changed (except by an administrator - </p></dd></dl></div><p> - </p></dd></dl></div><p> + </p></dd></dl></div><ns88:p> + </ns88:p></dd></dl></div><ns89:p> -</p><p> +</ns89:p><p> A WinNT4/2K/XP profile can vary in size from 130KB to off the scale. Outlook PST files are most often part of the profile and can be many GB in size. On average (in a well controlled environment) roaming profile size of @@ -635,19 +636,19 @@ a problem free site. </p><p> Microsoft's answer to the PST problem is to store all email in an MS Exchange Server back-end. But this is another story ...! -</p><p> +</p><ns89:p> So, having LOCAL profiles means: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>If lots of users user each machine - lot's of local disk storage needed for local profiles</td></tr><tr><td>Every workstation the user logs into has it's own profile - can be very different from machine to machine</td></tr></table><p> +</ns89:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If lots of users user each machine - lot's of local disk storage needed for local profiles</td></tr><tr><td>Every workstation the user logs into has it's own profile - can be very different from machine to machine</td></tr></table><ns89:p> On the other hand, having roaming profiles means: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>The network administrator can control EVERY aspect of user profiles</td></tr><tr><td>With the use of mandatory profiles - a drastic reduction in network management overheads</td></tr><tr><td>User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably</td></tr></table><p> +</ns89:p><table class="simplelist" border="0" summary="Simple list"><tr><td>The network administrator can control EVERY aspect of user profiles</td></tr><tr><td>With the use of mandatory profiles - a drastic reduction in network management overheads</td></tr><tr><td>User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably</td></tr></table><ns89:p> -</p><p> +</ns89:p><p> I have managed and installed MANY NT/2K networks and have NEVER found one where users who move from machine to machine are happy with local profiles. In the long run local profiles bite them. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2991859"></a>Changing the default profile</h3></div></div><div></div></div><p>“<span class="quote"> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992243"></a>Changing the default profile</h3></div></div><div></div></div><p>“<span class="quote"> When the client tries to logon to the PDC it looks for a profile to download where do I put this default profile. </span>”</p><p> diff --git a/docs/htmldocs/SWAT.html b/docs/htmldocs/SWAT.html index b4067d75d8..f7605ceb4d 100644 --- a/docs/htmldocs/SWAT.html +++ b/docs/htmldocs/SWAT.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter32.SWAT - The Samba Web Administration Tool</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC"><link rel="next" href="troubleshooting.html" title="PartV.Troubleshooting"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter32.SWAT - The Samba Web Administration Tool</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="NT4Migration.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="troubleshooting.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SWAT"></a>Chapter32.SWAT - The Samba Web Administration Tool</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="SWAT.html#id3003929">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id3003963">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id3006322">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id3006435">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id3006499">Global Settings</a></dt><dt><a href="SWAT.html#id3006604">Share Settings</a></dt><dt><a href="SWAT.html#id3006669">Printers Settings</a></dt><dt><a href="SWAT.html#id3006733">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id3006781">The Status Page</a></dt><dt><a href="SWAT.html#id3006833">The View Page</a></dt><dt><a href="SWAT.html#id3006856">The Password Change Page</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter32.SWAT - The Samba Web Administration Tool</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC"><link rel="next" href="troubleshooting.html" title="PartV.Troubleshooting"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter32.SWAT - The Samba Web Administration Tool</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="NT4Migration.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="troubleshooting.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SWAT"></a>Chapter32.SWAT - The Samba Web Administration Tool</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="SWAT.html#id3002261">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id3002111">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id3003000">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id3003113">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id3003176">Global Settings</a></dt><dt><a href="SWAT.html#id3003282">Share Settings</a></dt><dt><a href="SWAT.html#id3003346">Printers Settings</a></dt><dt><a href="SWAT.html#id3003411">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id3003459">The Status Page</a></dt><dt><a href="SWAT.html#id3003511">The View Page</a></dt><dt><a href="SWAT.html#id3003534">The Password Change Page</a></dt></dl></dd></dl></div><p> There are many and varied opinions regarding the usefulness or otherwise of SWAT. No matter how hard one tries to produce the perfect configuration tool it remains an object of personal taste. SWAT is a tool that will allow web based configuration @@ -6,7 +7,7 @@ of samba. It has a wizard that may help to get samba configured quickly, it has sensitive help on each smb.conf parameter, it provides for monitoring of current state of connection information, and it allows network wide MS Windows network password management. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003929"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3002261"></a>Features and Benefits</h2></div></div><div></div></div><p> There are network administrators who believe that it is a good idea to write systems documentation inside configuration files, for them SWAT will aways be a nasty tool. SWAT does not store the configuration file in any intermediate form, rather, it stores only the @@ -18,7 +19,7 @@ internal ordering. So before using SWAT please be warned - SWAT will completely replace your smb.conf with a fully optimised file that has been stripped of all comments you might have placed there and only non-default settings will be written to the file. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003963"></a>Enabling SWAT for use</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns96="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3002111"></a>Enabling SWAT for use</h3></div></div><div></div></div><p> SWAT should be installed to run via the network super daemon. Depending on which system your Unix/Linux system has you will have either an <b class="command">inetd</b> or <b class="command">xinetd</b> based system. @@ -34,8 +35,8 @@ The control entry for the older style file might be: swat stream tcp nowait.400 root /usr/sbin/swat swat </pre><p> A control file for the newer style xinetd could be: -</p><p> -</p><pre class="programlisting"> +</p><ns96:p> +</ns96:p><pre class="programlisting"> # default: off # description: SWAT is the Samba Web Admin Tool. Use swat \ # to configure your Samba server. To use SWAT, \ @@ -51,9 +52,9 @@ A control file for the newer style xinetd could be: log_on_failure += USERID disable = yes } -</pre><p> +</pre><ns96:p> -</p><p> +</ns96:p><p> Both the above examples assume that the <b class="command">swat</b> binary has been located in the <tt class="filename">/usr/sbin</tt> directory. In addition to the above SWAT will use a directory access point from which it will load it's help files @@ -72,32 +73,32 @@ So long as you log onto SWAT as the user <span class="emphasis"><em>root</em></s full change and commit ability. The buttons that will be exposed includes: <span class="guibutton">HOME</span>, <span class="guibutton">GLOBALS</span>, <span class="guibutton">SHARES</span>, <span class="guibutton">PRINTERS</span>, <span class="guibutton">WIZARD</span>, <span class="guibutton">STATUS</span>, <span class="guibutton">VIEW</span>, <span class="guibutton">PASSWORD</span>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006322"></a>Securing SWAT through SSL</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003000"></a>Securing SWAT through SSL</h3></div></div><div></div></div><p> Lots of people have asked about how to setup SWAT with SSL to allow for secure remote administration of Samba. Here is a method that works, courtesy of Markus Krieger </p><p> Modifications to the swat setup are as following: </p><div class="procedure"><ol type="1"><li><p> install OpenSSL - </p></li><li><p> + </p></li><li xmlns:ns97=""><ns97:p> generate certificate and private key - </p><pre class="screen"> + </ns97:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>/usr/bin/openssl req -new -x509 -days 365 -nodes -config \ /usr/share/doc/packages/stunnel/stunnel.cnf \ -out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem</tt></b> </pre></li><li><p> remove swat-entry from [x]inetd - </p></li><li><p> + </p></li><li xmlns:ns98=""><ns98:p> start stunnel - </p><pre class="screen"> + </ns98:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>stunnel -p /etc/stunnel/stunnel.pem -d 901 \ -l /usr/local/samba/bin/swat swat </tt></b> </pre></li></ol></div><p> afterwords simply contact to swat by using the URL <a href="https://myhost:901" target="_top">https://myhost:901</a>, accept the certificate and the SSL connection is up. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006435"></a>The SWAT Home Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003113"></a>The SWAT Home Page</h3></div></div><div></div></div><p> The SWAT title page provides access to the latest Samba documentation. The manual page for each samba component is accessible from this page as are the Samba-HOWTO-Collection (this document) as well as the O'Reilly book "Using Samba". @@ -113,7 +114,7 @@ as it runs SWAT without authentication and with full administrative ability. ie: changes to smb.conf as well as general operation with root privileges. The option that creates this ability is the <tt class="option">-a</tt> flag to swat. <span class="emphasis"><em>Do not use this in any production environment.</em></span> -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006499"></a>Global Settings</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003176"></a>Global Settings</h3></div></div><div></div></div><p> The Globals button will expose a page that allows configuration of the global parameters in smb.conf. There are three levels of exposure of the parameters: </p><div class="itemizedlist"><ul type="disc"><li><p> @@ -135,7 +136,7 @@ your changes will be immediately lost. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> SWAT has context sensitive help. To find out what each parameter is for simply click the <span class="guibutton">Help</span> link to the left of the configuration parameter. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006604"></a>Share Settings</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003282"></a>Share Settings</h3></div></div><div></div></div><p> To affect a currently configured share, simply click on the pull down button between the <span class="guibutton">Choose Share</span> and the <span class="guibutton">Delete Share</span> buttons, select the share you wish to operate on, then to edit the settings click on the @@ -145,7 +146,7 @@ select the share you wish to operate on, then to edit the settings click on the To create a new share, next to the button labelled <span class="guibutton">Create Share</span> enter into the text field the name of the share to be created, then click on the <span class="guibutton">Create Share</span> button. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006669"></a>Printers Settings</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003346"></a>Printers Settings</h3></div></div><div></div></div><p> To affect a currently configured printer, simply click on the pull down button between the <span class="guibutton">Choose Printer</span> and the <span class="guibutton">Delete Printer</span> buttons, select the printer you wish to operate on, then to edit the settings click on the @@ -155,7 +156,7 @@ select the printer you wish to operate on, then to edit the settings click on th To create a new printer, next to the button labelled <span class="guibutton">Create Printer</span> enter into the text field the name of the share to be created, then click on the <span class="guibutton">Create Printer</span> button. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006733"></a>The SWAT Wizard</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003411"></a>The SWAT Wizard</h3></div></div><div></div></div><p> The purpose if the SWAT Wizard is to help the Microsoft knowledgeable network administrator to configure Samba with a minimum of effort. </p><p> @@ -171,7 +172,7 @@ Finally, there are a limited set of options that will determine what type of ser will be configured for, whether it will be a WINS server, participate as a WINS client, or operate with no WINS support. By clicking on one button you can elect to expose (or not) user home directories. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006781"></a>The Status Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003459"></a>The Status Page</h3></div></div><div></div></div><p> The status page serves a limited purpose. Firstly, it allows control of the samba daemons. The key daemons that create the samba server environment are: <span class="application">smbd</span>, <span class="application">nmbd</span>, <span class="application">winbindd</span>. </p><p> @@ -182,11 +183,11 @@ conditions with minimal effort. </p><p> Lastly, the Status page may be used to terminate specific smbd client connections in order to free files that may be locked. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006833"></a>The View Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003511"></a>The View Page</h3></div></div><div></div></div><p> This page allows the administrator to view the optimised <tt class="filename">smb.conf</tt> file and, if you are particularly masochistic, will permit you also to see all possible global configuration parameters and their settings. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3006856"></a>The Password Change Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003534"></a>The Password Change Page</h3></div></div><div></div></div><p> The Password Change page is a popular tool. This tool allows the creation, deletion, deactivation and reactivation of MS Windows networking users on the local machine. Alternatively, you can use this tool to change a local password for a user account. diff --git a/docs/htmldocs/Samba-Developers-Guide.html b/docs/htmldocs/Samba-Developers-Guide.html index 603c87d574..2edd2b5042 100644 --- a/docs/htmldocs/Samba-Developers-Guide.html +++ b/docs/htmldocs/Samba-Developers-Guide.html @@ -12,10 +12,10 @@ Please send updates to Jelmer Vernooij. This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt -"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-Developers-Guide"></a>SAMBA Developers Guide</h1></div><div><div class="author"><h3 class="author"><span class="surname">SAMBA Team</span></h3></div></div><div><div class="legalnotice"><p><b>Attributions.</b> - </p><div class="variablelist"><dl><dt><span class="term"><a href="#netbios" title="Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes">Definition of NetBIOS Protocol and Name Resolution Modes</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Luke Leighton</p></li></ul></div></dd><dt><span class="term"><a href="#architecture" title="Chapter2.Samba Architecture">Samba Architecture</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Dan Shearer</p></li></ul></div></dd><dt><span class="term"><a href="#debug" title="Chapter3.The samba DEBUG system">The samba DEBUG system</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Chris Hertel</p></li></ul></div></dd><dt><span class="term"><a href="#CodingSuggestions" title="Chapter4.Coding Suggestions">Coding Suggestions</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Steve French</p></li><li><p>Simo Sorce</p></li><li><p>Andrew Bartlett</p></li><li><p>Tim Potter</p></li><li><p>Martin Pool</p></li></ul></div></dd><dt><span class="term"><a href="#internals" title="Chapter5.Samba Internals">Samba Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>David Chappell <<a href="mailto:David.Chappell@mail.trincoll.edu" target="_top">David.Chappell@mail.trincoll.edu</a>></p></li></ul></div></dd><dt><span class="term"><a href="#parsing" title="Chapter6.The smb.conf file">The smb.conf file</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Chris Hertel</p></li></ul></div></dd><dt><span class="term"><a href="#unix-smb" title="Chapter7.NetBIOS in a Unix World">NetBIOS in a Unix World</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell</p></li></ul></div></dd><dt><span class="term"><a href="#tracing" title="Chapter8.Tracing samba system calls">Tracing samba system calls</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell</p></li></ul></div></dd><dt><span class="term"><a href="#windows-debug" title="Chapter9.Finding useful information on windows">Finding useful information on windows</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#ntdomain" title="Chapter10.NT Domain RPC's">NT Domain RPC's</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Luke Leighton <<a href="mailto:lkcl@switchboard.net" target="_top">lkcl@switchboard.net</a>></p></li><li><p>Paul Ashton <<a href="mailto:paul@argo.demon.co.uk" target="_top">paul@argo.demon.co.uk</a>></p></li><li><p>Duncan Stansfield <<a href="mailto:duncans@sco.com" target="_top">duncans@sco.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="#printing" title="Chapter11.Samba Printing Internals">Samba Printing Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter</p></li></ul></div></dd><dt><span class="term"><a href="#wins" title="Chapter12.Samba WINS Internals">Samba WINS Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter</p></li></ul></div></dd><dt><span class="term"><a href="#sam" title="Chapter13.The Upcoming SAM System">The Upcoming SAM System</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Bartlett</p></li></ul></div></dd><dt><span class="term"><a href="#pwencrypt" title="Chapter14.LanMan and NT Password Encryption">LanMan and NT Password Encryption</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison <<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#modules" title="Chapter15.Modules">Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#rpc-plugin" title="Chapter16.RPC Pluggable Modules">RPC Pluggable Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Anthony Liguori <<a href="mailto:aliguor@us.ibm.com" target="_top">aliguor@us.ibm.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#vfs" title="Chapter17.VFS Modules">VFS Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Alexander Bokovoy <<a href="mailto:ab@samba.org" target="_top">ab@samba.org</a>></p></li><li><p>Stefan Metzmacher <<a href="mailto:metze@metzemix.de" target="_top">metze@metzemix.de</a>></p></li></ul></div></dd><dt><span class="term"><a href="#Packaging" title="Chapter18.Notes to packagers">Notes to packagers</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij</p></li></ul></div></dd><dt><span class="term"><a href="#contributing" title="Chapter19.Contributing code">Contributing code</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd></dl></div><p> +"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-Developers-Guide"></a>SAMBA Developers Guide</h1></div><div><div class="author"><h3 class="author"><span class="surname">SAMBA Team</span></h3></div></div><div><div xmlns:ns1="" class="legalnotice"><ns1:p><b>Attributions.</b> + </ns1:p><div class="variablelist"><dl><dt><span class="term"><a href="#netbios" title="Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes">Definition of NetBIOS Protocol and Name Resolution Modes</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Luke Leighton</p></li></ul></div></dd><dt><span class="term"><a href="#architecture" title="Chapter2.Samba Architecture">Samba Architecture</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Dan Shearer</p></li></ul></div></dd><dt><span class="term"><a href="#debug" title="Chapter3.The samba DEBUG system">The samba DEBUG system</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Chris Hertel</p></li></ul></div></dd><dt><span class="term"><a href="#CodingSuggestions" title="Chapter4.Coding Suggestions">Coding Suggestions</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Steve French</p></li><li><p>Simo Sorce</p></li><li><p>Andrew Bartlett</p></li><li><p>Tim Potter</p></li><li><p>Martin Pool</p></li></ul></div></dd><dt><span class="term"><a href="#internals" title="Chapter5.Samba Internals">Samba Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>David Chappell <<a href="mailto:David.Chappell@mail.trincoll.edu" target="_top">David.Chappell@mail.trincoll.edu</a>></p></li></ul></div></dd><dt><span class="term"><a href="#parsing" title="Chapter6.The smb.conf file">The smb.conf file</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Chris Hertel</p></li></ul></div></dd><dt><span class="term"><a href="#unix-smb" title="Chapter7.NetBIOS in a Unix World">NetBIOS in a Unix World</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell</p></li></ul></div></dd><dt><span class="term"><a href="#tracing" title="Chapter8.Tracing samba system calls">Tracing samba system calls</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell</p></li></ul></div></dd><dt><span class="term"><a href="#windows-debug" title="Chapter9.Finding useful information on windows">Finding useful information on windows</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#ntdomain" title="Chapter10.NT Domain RPC's">NT Domain RPC's</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Luke Leighton <<a href="mailto:lkcl@switchboard.net" target="_top">lkcl@switchboard.net</a>></p></li><li><p>Paul Ashton <<a href="mailto:paul@argo.demon.co.uk" target="_top">paul@argo.demon.co.uk</a>></p></li><li><p>Duncan Stansfield <<a href="mailto:duncans@sco.com" target="_top">duncans@sco.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="#printing" title="Chapter11.Samba Printing Internals">Samba Printing Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter</p></li></ul></div></dd><dt><span class="term"><a href="#wins" title="Chapter12.Samba WINS Internals">Samba WINS Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter</p></li></ul></div></dd><dt><span class="term"><a href="#sam" title="Chapter13.The Upcoming SAM System">The Upcoming SAM System</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Bartlett</p></li></ul></div></dd><dt><span class="term"><a href="#pwencrypt" title="Chapter14.LanMan and NT Password Encryption">LanMan and NT Password Encryption</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison <<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#modules" title="Chapter15.Modules">Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#rpc-plugin" title="Chapter16.RPC Pluggable Modules">RPC Pluggable Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Anthony Liguori <<a href="mailto:aliguor@us.ibm.com" target="_top">aliguor@us.ibm.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#vfs" title="Chapter17.VFS Modules">VFS Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Alexander Bokovoy <<a href="mailto:ab@samba.org" target="_top">ab@samba.org</a>></p></li><li><p>Stefan Metzmacher <<a href="mailto:metze@metzemix.de" target="_top">metze@metzemix.de</a>></p></li></ul></div></dd><dt><span class="term"><a href="#Packaging" title="Chapter18.Notes to packagers">Notes to packagers</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij</p></li></ul></div></dd><dt><span class="term"><a href="#contributing" title="Chapter19.Contributing code">Contributing code</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd></dl></div><ns1:p> - </p></div></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> + </ns1:p></div></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> <span class="emphasis"><em>Last Update</em></span> : Fri Jun 6 00:45:54 CEST 2003 </p><p> This book is a collection of documents that might be useful for @@ -29,15 +29,15 @@ Please send updates to <a href="mailto:jelmer@samba.org" target="_top">Jelmer Ve This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at <a href="http://www.fsf.org/licenses/gpl.txt" target="_top">http://www.fsf.org/licenses/gpl.txt</a> -</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="#netbios">Definition of NetBIOS Protocol and Name Resolution Modes</a></dt><dd><dl><dt><a href="#id2800515">NETBIOS</a></dt><dt><a href="#id2800602">BROADCAST NetBIOS</a></dt><dt><a href="#id2800633">NBNS NetBIOS</a></dt></dl></dd><dt>2. <a href="#architecture">Samba Architecture</a></dt><dd><dl><dt><a href="#id2797071">Introduction</a></dt><dt><a href="#id2797281">Multithreading and Samba</a></dt><dt><a href="#id2797319">Threading smbd</a></dt><dt><a href="#id2797394">Threading nmbd</a></dt><dt><a href="#id2797461">nbmd Design</a></dt></dl></dd><dt>3. <a href="#debug">The samba DEBUG system</a></dt><dd><dl><dt><a href="#id2796882">New Output Syntax</a></dt><dt><a href="#id2797018">The DEBUG() Macro</a></dt><dt><a href="#id2867347">The DEBUGADD() Macro</a></dt><dt><a href="#id2867392">The DEBUGLVL() Macro</a></dt><dt><a href="#id2867497">New Functions</a></dt><dd><dl><dt><a href="#id2867504">dbgtext()</a></dt><dt><a href="#id2867524">dbghdr()</a></dt><dt><a href="#id2867547">format_debug_text()</a></dt></dl></dd></dl></dd><dt>4. <a href="#CodingSuggestions">Coding Suggestions</a></dt><dt>5. <a href="#internals">Samba Internals</a></dt><dd><dl><dt><a href="#id2866920">Character Handling</a></dt><dt><a href="#id2866946">The new functions</a></dt><dt><a href="#id2868198">Macros in byteorder.h</a></dt><dd><dl><dt><a href="#id2869122">CVAL(buf,pos)</a></dt><dt><a href="#id2869136">PVAL(buf,pos)</a></dt><dt><a href="#id2869150">SCVAL(buf,pos,val)</a></dt><dt><a href="#id2869163">SVAL(buf,pos)</a></dt><dt><a href="#id2869179">IVAL(buf,pos)</a></dt><dt><a href="#id2869193">SVALS(buf,pos)</a></dt><dt><a href="#id2869208">IVALS(buf,pos)</a></dt><dt><a href="#id2869222">SSVAL(buf,pos,val)</a></dt><dt><a href="#id2869236">SIVAL(buf,pos,val)</a></dt><dt><a href="#id2869251">SSVALS(buf,pos,val)</a></dt><dt><a href="#id2869265">SIVALS(buf,pos,val)</a></dt><dt><a href="#id2869280">RSVAL(buf,pos)</a></dt><dt><a href="#id2869294">RIVAL(buf,pos)</a></dt><dt><a href="#id2869308">RSSVAL(buf,pos,val)</a></dt><dt><a href="#id2869323">RSIVAL(buf,pos,val)</a></dt></dl></dd><dt><a href="#id2869339">LAN Manager Samba API</a></dt><dd><dl><dt><a href="#id2869375">Parameters</a></dt><dt><a href="#id2869526">Return value</a></dt></dl></dd><dt><a href="#id2869611">Code character table</a></dt></dl></dd><dt>6. <a href="#parsing">The smb.conf file</a></dt><dd><dl><dt><a href="#id2868950">Lexical Analysis</a></dt><dd><dl><dt><a href="#id2869043">Handling of Whitespace</a></dt><dt><a href="#id2869099">Handling of Line Continuation</a></dt><dt><a href="#id2870758">Line Continuation Quirks</a></dt></dl></dd><dt><a href="#id2870856">Syntax</a></dt><dd><dl><dt><a href="#id2870928">About params.c</a></dt></dl></dd></dl></dd><dt>7. <a href="#unix-smb">NetBIOS in a Unix World</a></dt><dd><dl><dt><a href="#id2870375">Introduction</a></dt><dt><a href="#id2870400">Usernames</a></dt><dt><a href="#id2870628">File Ownership</a></dt><dt><a href="#id2870665">Passwords</a></dt><dt><a href="#id2870702">Locking</a></dt><dt><a href="#id2871641">Deny Modes</a></dt><dt><a href="#id2871672">Trapdoor UIDs</a></dt><dt><a href="#id2871697">Port numbers</a></dt><dt><a href="#id2871742">Protocol Complexity</a></dt></dl></dd><dt>8. <a href="#tracing">Tracing samba system calls</a></dt><dt>9. <a href="#windows-debug">Finding useful information on windows</a></dt><dd><dl><dt><a href="#id2871397">Netlogon debugging output</a></dt></dl></dd><dt>10. <a href="#ntdomain">NT Domain RPC's</a></dt><dd><dl><dt><a href="#id2872364">Introduction</a></dt><dd><dl><dt><a href="#id2873295">Sources</a></dt><dt><a href="#id2873330">Credits</a></dt></dl></dd><dt><a href="#id2873367">Notes and Structures</a></dt><dd><dl><dt><a href="#id2873375">Notes</a></dt><dt><a href="#id2873451">Enumerations</a></dt><dt><a href="#id2873665">Structures</a></dt></dl></dd><dt><a href="#id2876614">MSRPC over Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2876627">MSRPC Pipes</a></dt><dt><a href="#id2876729">Header</a></dt><dt><a href="#id2877600">Tail</a></dt><dt><a href="#id2877647">RPC Bind / Bind Ack</a></dt><dt><a href="#id2877826">NTLSA Transact Named Pipe</a></dt><dt><a href="#id2877991">LSA Open Policy</a></dt><dt><a href="#id2878118">LSA Query Info Policy</a></dt><dt><a href="#id2878223">LSA Enumerate Trusted Domains</a></dt><dt><a href="#id2878315">LSA Open Secret</a></dt><dt><a href="#id2878424">LSA Close</a></dt><dt><a href="#id2878490">LSA Lookup SIDS</a></dt><dt><a href="#id2878700">LSA Lookup Names</a></dt></dl></dd><dt><a href="#id2878926">NETLOGON rpc Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2879087">LSA Request Challenge</a></dt><dt><a href="#id2879222">LSA Authenticate 2</a></dt><dt><a href="#id2879369">LSA Server Password Set</a></dt><dt><a href="#id2879484">LSA SAM Logon</a></dt><dt><a href="#id2879598">LSA SAM Logoff</a></dt></dl></dd><dt><a href="#id2879689">\\MAILSLOT\NET\NTLOGON</a></dt><dd><dl><dt><a href="#id2879701">Query for PDC</a></dt><dt><a href="#id2879969">SAM Logon</a></dt></dl></dd><dt><a href="#id2880294">SRVSVC Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2880339">Net Share Enum</a></dt><dt><a href="#id2880558">Net Server Get Info</a></dt></dl></dd><dt><a href="#id2880674">Cryptographic side of NT Domain Authentication</a></dt><dd><dl><dt><a href="#id2880682">Definitions</a></dt><dt><a href="#id2880845">Protocol</a></dt><dt><a href="#id2880942">Comments</a></dt></dl></dd><dt><a href="#id2880991">SIDs and RIDs</a></dt><dd><dl><dt><a href="#id2881031">Well-known SIDs</a></dt><dt><a href="#id2881346">Well-known RIDS</a></dt></dl></dd></dl></dd><dt>11. <a href="#printing">Samba Printing Internals</a></dt><dd><dl><dt><a href="#id2890028">Abstract</a></dt><dt><a href="#id2890044"> +</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="#netbios">Definition of NetBIOS Protocol and Name Resolution Modes</a></dt><dd><dl><dt><a href="#id2800411">NETBIOS</a></dt><dt><a href="#id2800495">BROADCAST NetBIOS</a></dt><dt><a href="#id2800526">NBNS NetBIOS</a></dt></dl></dd><dt>2. <a href="#architecture">Samba Architecture</a></dt><dd><dl><dt><a href="#id2800303">Introduction</a></dt><dt><a href="#id2800352">Multithreading and Samba</a></dt><dt><a href="#id2800390">Threading smbd</a></dt><dt><a href="#id2799517">Threading nmbd</a></dt><dt><a href="#id2799568">nbmd Design</a></dt></dl></dd><dt>3. <a href="#debug">The samba DEBUG system</a></dt><dd><dl><dt><a href="#id2799634">New Output Syntax</a></dt><dt><a href="#id2799757">The DEBUG() Macro</a></dt><dt><a href="#id2799887">The DEBUGADD() Macro</a></dt><dt><a href="#id2799932">The DEBUGLVL() Macro</a></dt><dt><a href="#id2865890">New Functions</a></dt><dd><dl><dt><a href="#id2865897">dbgtext()</a></dt><dt><a href="#id2865916">dbghdr()</a></dt><dt><a href="#id2865940">format_debug_text()</a></dt></dl></dd></dl></dd><dt>4. <a href="#CodingSuggestions">Coding Suggestions</a></dt><dt>5. <a href="#internals">Samba Internals</a></dt><dd><dl><dt><a href="#id2867480">Character Handling</a></dt><dt><a href="#id2867505">The new functions</a></dt><dt><a href="#id2866270">Macros in byteorder.h</a></dt><dd><dl><dt><a href="#id2866283">CVAL(buf,pos)</a></dt><dt><a href="#id2866297">PVAL(buf,pos)</a></dt><dt><a href="#id2866311">SCVAL(buf,pos,val)</a></dt><dt><a href="#id2866324">SVAL(buf,pos)</a></dt><dt><a href="#id2866337">IVAL(buf,pos)</a></dt><dt><a href="#id2866351">SVALS(buf,pos)</a></dt><dt><a href="#id2866365">IVALS(buf,pos)</a></dt><dt><a href="#id2866380">SSVAL(buf,pos,val)</a></dt><dt><a href="#id2866394">SIVAL(buf,pos,val)</a></dt><dt><a href="#id2866408">SSVALS(buf,pos,val)</a></dt><dt><a href="#id2866423">SIVALS(buf,pos,val)</a></dt><dt><a href="#id2866437">RSVAL(buf,pos)</a></dt><dt><a href="#id2867143">RIVAL(buf,pos)</a></dt><dt><a href="#id2867158">RSSVAL(buf,pos,val)</a></dt><dt><a href="#id2867173">RSIVAL(buf,pos,val)</a></dt></dl></dd><dt><a href="#id2867189">LAN Manager Samba API</a></dt><dd><dl><dt><a href="#id2867223">Parameters</a></dt><dt><a href="#id2867374">Return value</a></dt></dl></dd><dt><a href="#id2868058">Code character table</a></dt></dl></dd><dt>6. <a href="#parsing">The smb.conf file</a></dt><dd><dl><dt><a href="#id2868180">Lexical Analysis</a></dt><dd><dl><dt><a href="#id2868265">Handling of Whitespace</a></dt><dt><a href="#id2868320">Handling of Line Continuation</a></dt><dt><a href="#id2868382">Line Continuation Quirks</a></dt></dl></dd><dt><a href="#id2868479">Syntax</a></dt><dd><dl><dt><a href="#id2869330">About params.c</a></dt></dl></dd></dl></dd><dt>7. <a href="#unix-smb">NetBIOS in a Unix World</a></dt><dd><dl><dt><a href="#id2870008">Introduction</a></dt><dt><a href="#id2870030">Usernames</a></dt><dt><a href="#id2870095">File Ownership</a></dt><dt><a href="#id2870131">Passwords</a></dt><dt><a href="#id2869394">Locking</a></dt><dt><a href="#id2869456">Deny Modes</a></dt><dt><a href="#id2869487">Trapdoor UIDs</a></dt><dt><a href="#id2869512">Port numbers</a></dt><dt><a href="#id2869557">Protocol Complexity</a></dt></dl></dd><dt>8. <a href="#tracing">Tracing samba system calls</a></dt><dt>9. <a href="#windows-debug">Finding useful information on windows</a></dt><dd><dl><dt><a href="#id2871834">Netlogon debugging output</a></dt></dl></dd><dt>10. <a href="#ntdomain">NT Domain RPC's</a></dt><dd><dl><dt><a href="#id2870569">Introduction</a></dt><dd><dl><dt><a href="#id2870767">Sources</a></dt><dt><a href="#id2870802">Credits</a></dt></dl></dd><dt><a href="#id2871390">Notes and Structures</a></dt><dd><dl><dt><a href="#id2871397">Notes</a></dt><dt><a href="#id2871472">Enumerations</a></dt><dt><a href="#id2871684">Structures</a></dt></dl></dd><dt><a href="#id2883414">MSRPC over Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2883427">MSRPC Pipes</a></dt><dt><a href="#id2883528">Header</a></dt><dt><a href="#id2884399">Tail</a></dt><dt><a href="#id2884445">RPC Bind / Bind Ack</a></dt><dt><a href="#id2884625">NTLSA Transact Named Pipe</a></dt><dt><a href="#id2884790">LSA Open Policy</a></dt><dt><a href="#id2884916">LSA Query Info Policy</a></dt><dt><a href="#id2885022">LSA Enumerate Trusted Domains</a></dt><dt><a href="#id2885113">LSA Open Secret</a></dt><dt><a href="#id2885223">LSA Close</a></dt><dt><a href="#id2885289">LSA Lookup SIDS</a></dt><dt><a href="#id2885498">LSA Lookup Names</a></dt></dl></dd><dt><a href="#id2885724">NETLOGON rpc Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2885885">LSA Request Challenge</a></dt><dt><a href="#id2886019">LSA Authenticate 2</a></dt><dt><a href="#id2886166">LSA Server Password Set</a></dt><dt><a href="#id2886282">LSA SAM Logon</a></dt><dt><a href="#id2886384">LSA SAM Logoff</a></dt></dl></dd><dt><a href="#id2886476">\\MAILSLOT\NET\NTLOGON</a></dt><dd><dl><dt><a href="#id2886493">Query for PDC</a></dt><dt><a href="#id2886755">SAM Logon</a></dt></dl></dd><dt><a href="#id2887080">SRVSVC Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2887125">Net Share Enum</a></dt><dt><a href="#id2887345">Net Server Get Info</a></dt></dl></dd><dt><a href="#id2887461">Cryptographic side of NT Domain Authentication</a></dt><dd><dl><dt><a href="#id2887469">Definitions</a></dt><dt><a href="#id2887631">Protocol</a></dt><dt><a href="#id2887711">Comments</a></dt></dl></dd><dt><a href="#id2887760">SIDs and RIDs</a></dt><dd><dl><dt><a href="#id2887800">Well-known SIDs</a></dt><dt><a href="#id2888114">Well-known RIDS</a></dt></dl></dd></dl></dd><dt>11. <a href="#printing">Samba Printing Internals</a></dt><dd><dl><dt><a href="#id2889659">Abstract</a></dt><dt><a href="#id2889674"> Printing Interface to Various Back ends -</a></dt><dt><a href="#id2890298"> +</a></dt><dt><a href="#id2889766"> Print Queue TDB's -</a></dt><dt><a href="#id2890507"> +</a></dt><dt><a href="#id2888559"> ChangeID and Client Caching of Printer Information -</a></dt><dt><a href="#id2890520"> +</a></dt><dt><a href="#id2888572"> Windows NT/2K Printer Change Notify -</a></dt></dl></dd><dt>12. <a href="#wins">Samba WINS Internals</a></dt><dd><dl><dt><a href="#id2889988">WINS Failover</a></dt></dl></dd><dt>13. <a href="#sam">The Upcoming SAM System</a></dt><dd><dl><dt><a href="#id2889789">Security in the 'new SAM'</a></dt><dt><a href="#id2891316">Standalone from UNIX</a></dt><dt><a href="#id2891349">Handles and Races in the new SAM</a></dt><dt><a href="#id2891418">Layers</a></dt><dd><dl><dt><a href="#id2891425">Application</a></dt><dt><a href="#id2891441">SAM Interface</a></dt><dt><a href="#id2891468">SAM Modules</a></dt></dl></dd><dt><a href="#id2891490">SAM Modules</a></dt><dd><dl><dt><a href="#id2891497">Special Module: sam_passdb</a></dt><dt><a href="#id2891516">sam_ads</a></dt></dl></dd><dt><a href="#id2891555">Memory Management</a></dt><dt><a href="#id2891645">Testing</a></dt></dl></dd><dt>14. <a href="#pwencrypt">LanMan and NT Password Encryption</a></dt><dd><dl><dt><a href="#id2892285">Introduction</a></dt><dt><a href="#id2892310">How does it work?</a></dt><dt><a href="#id2891197">The smbpasswd file</a></dt></dl></dd><dt>15. <a href="#modules">Modules</a></dt><dd><dl><dt><a href="#id2892236">Advantages</a></dt><dt><a href="#id2893136">Loading modules</a></dt><dd><dl><dt><a href="#id2893169">Static modules</a></dt><dt><a href="#id2894111">Shared modules</a></dt></dl></dd><dt><a href="#id2894139">Writing modules</a></dt><dd><dl><dt><a href="#id2894200">Static/Shared selection in configure.in</a></dt></dl></dd></dl></dd><dt>16. <a href="#rpc-plugin">RPC Pluggable Modules</a></dt><dd><dl><dt><a href="#id2892904">About</a></dt><dt><a href="#id2892923">General Overview</a></dt></dl></dd><dt>17. <a href="#vfs">VFS Modules</a></dt><dd><dl><dt><a href="#id2895215">The Samba (Posix) VFS layer</a></dt><dd><dl><dt><a href="#id2895223">The general interface</a></dt><dt><a href="#id2895338">Possible VFS operation layers</a></dt></dl></dd><dt><a href="#id2895409">The Interaction between the Samba VFS subsystem and the modules</a></dt><dd><dl><dt><a href="#id2895418">Initialization and registration</a></dt><dt><a href="#id2895609">How the Modules handle per connection data</a></dt></dl></dd><dt><a href="#id2895852">Upgrading to the New VFS Interface</a></dt><dd><dl><dt><a href="#id2895860">Upgrading from 2.2.* and 3.0aplha modules</a></dt></dl></dd><dt><a href="#id2896401">Some Notes</a></dt><dd><dl><dt><a href="#id2896408">Implement TRANSPARENT functions</a></dt><dt><a href="#id2896432">Implement OPAQUE functions</a></dt></dl></dd></dl></dd><dt>18. <a href="#Packaging">Notes to packagers</a></dt><dd><dl><dt><a href="#id2895009">Versioning</a></dt><dt><a href="#id2895042">Modules</a></dt></dl></dd><dt>19. <a href="#contributing">Contributing code</a></dt></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="netbios"></a>Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Luke</span> <span class="surname">Leighton</span></h3></div></div><div><p class="pubdate">12 June 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2800515">NETBIOS</a></dt><dt><a href="#id2800602">BROADCAST NetBIOS</a></dt><dt><a href="#id2800633">NBNS NetBIOS</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800515"></a>NETBIOS</h2></div></div><div></div></div><p> +</a></dt></dl></dd><dt>12. <a href="#wins">Samba WINS Internals</a></dt><dd><dl><dt><a href="#id2889228">WINS Failover</a></dt></dl></dd><dt>13. <a href="#sam">The Upcoming SAM System</a></dt><dd><dl><dt><a href="#id2888904">Security in the 'new SAM'</a></dt><dt><a href="#id2889032">Standalone from UNIX</a></dt><dt><a href="#id2889059">Handles and Races in the new SAM</a></dt><dt><a href="#id2889127">Layers</a></dt><dd><dl><dt><a href="#id2889134">Application</a></dt><dt><a href="#id2889150">SAM Interface</a></dt><dt><a href="#id2889176">SAM Modules</a></dt></dl></dd><dt><a href="#id2889198">SAM Modules</a></dt><dd><dl><dt><a href="#id2889205">Special Module: sam_passdb</a></dt><dt><a href="#id2890449">sam_ads</a></dt></dl></dd><dt><a href="#id2890478">Memory Management</a></dt><dt><a href="#id2890565">Testing</a></dt></dl></dd><dt>14. <a href="#pwencrypt">LanMan and NT Password Encryption</a></dt><dd><dl><dt><a href="#id2891295">Introduction</a></dt><dt><a href="#id2891319">How does it work?</a></dt><dt><a href="#id2891414">The smbpasswd file</a></dt></dl></dd><dt>15. <a href="#modules">Modules</a></dt><dd><dl><dt><a href="#id2893198">Advantages</a></dt><dt><a href="#id2893242">Loading modules</a></dt><dd><dl><dt><a href="#id2893272">Static modules</a></dt><dt><a href="#id2893313">Shared modules</a></dt></dl></dd><dt><a href="#id2893342">Writing modules</a></dt><dd><dl><dt><a href="#id2893402">Static/Shared selection in configure.in</a></dt></dl></dd></dl></dd><dt>16. <a href="#rpc-plugin">RPC Pluggable Modules</a></dt><dd><dl><dt><a href="#id2893560">About</a></dt><dt><a href="#id2893579">General Overview</a></dt></dl></dd><dt>17. <a href="#vfs">VFS Modules</a></dt><dd><dl><dt><a href="#id2895821">The Samba (Posix) VFS layer</a></dt><dd><dl><dt><a href="#id2895828">The general interface</a></dt><dt><a href="#id2895928">Possible VFS operation layers</a></dt></dl></dd><dt><a href="#id2895992">The Interaction between the Samba VFS subsystem and the modules</a></dt><dd><dl><dt><a href="#id2896000">Initialization and registration</a></dt><dt><a href="#id2892061">How the Modules handle per connection data</a></dt></dl></dd><dt><a href="#id2892280">Upgrading to the New VFS Interface</a></dt><dd><dl><dt><a href="#id2893883">Upgrading from 2.2.* and 3.0aplha modules</a></dt></dl></dd><dt><a href="#id2894294">Some Notes</a></dt><dd><dl><dt><a href="#id2894300">Implement TRANSPARENT functions</a></dt><dt><a href="#id2894324">Implement OPAQUE functions</a></dt></dl></dd></dl></dd><dt>18. <a href="#Packaging">Notes to packagers</a></dt><dd><dl><dt><a href="#id2894389">Versioning</a></dt><dt><a href="#id2894418">Modules</a></dt></dl></dd><dt>19. <a href="#contributing">Contributing code</a></dt></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="netbios"></a>Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Luke</span> <span class="surname">Leighton</span></h3></div></div><div><p class="pubdate">12 June 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2800411">NETBIOS</a></dt><dt><a href="#id2800495">BROADCAST NetBIOS</a></dt><dt><a href="#id2800526">NBNS NetBIOS</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800411"></a>NETBIOS</h2></div></div><div></div></div><p> NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX. Samba only uses NetBIOS over TCP/IP. For details on the TCP/IP NetBIOS Session Service NetBIOS Datagram Service, and NetBIOS Names, see @@ -78,7 +78,7 @@ NetBIOS names are either UNIQUE or GROUP. Only one application can claim a UNIQUE NetBIOS name on a network. </p><p> There are two kinds of NetBIOS Name resolution: Broadcast and Point-to-Point. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800602"></a>BROADCAST NetBIOS</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800495"></a>BROADCAST NetBIOS</h2></div></div><div></div></div><p> Clients can claim names, and therefore offer services on successfully claimed names, on their broadcast-isolated subnet. One way to get NetBIOS services (such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and @@ -90,7 +90,7 @@ find that some of your hosts spend 95 percent of their time dealing with broadcast traffic. [If you have IPX/SPX on your LAN or WAN, you will find that this is already happening: a packet analyzer will show, roughly every twelve minutes, great swathes of broadcast traffic!]. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800633"></a>NBNS NetBIOS</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800526"></a>NBNS NetBIOS</h2></div></div><div></div></div><p> rfc1001.txt describes, amongst other things, the implementation and use of, a 'NetBIOS Name Service'. NT/AS offers 'Windows Internet Name Service' which is fully rfc1001/2 compliant, but has had to take specific action @@ -131,7 +131,7 @@ WINS Clients therefore claim names from the WINS server. If the WINS server allows them to register a name, the client's NetBIOS session service can then offer services on this name. Other WINS clients will then contact the WINS server to resolve a NetBIOS name. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="architecture"></a>Chapter2.Samba Architecture</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Dan</span> <span class="surname">Shearer</span></h3></div></div><div><p class="pubdate"> November 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2797071">Introduction</a></dt><dt><a href="#id2797281">Multithreading and Samba</a></dt><dt><a href="#id2797319">Threading smbd</a></dt><dt><a href="#id2797394">Threading nmbd</a></dt><dt><a href="#id2797461">nbmd Design</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797071"></a>Introduction</h2></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="architecture"></a>Chapter2.Samba Architecture</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Dan</span> <span class="surname">Shearer</span></h3></div></div><div><p class="pubdate"> November 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2800303">Introduction</a></dt><dt><a href="#id2800352">Multithreading and Samba</a></dt><dt><a href="#id2800390">Threading smbd</a></dt><dt><a href="#id2799517">Threading nmbd</a></dt><dt><a href="#id2799568">nbmd Design</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800303"></a>Introduction</h2></div></div><div></div></div><p> This document gives a general overview of how Samba works internally. The Samba Team has tried to come up with a model which is the best possible compromise between elegance, portability, security @@ -142,7 +142,7 @@ It also tries to answer some of the frequently asked questions such as: </p><div class="orderedlist"><ol type="1"><li><p> Is Samba secure when running on Unix? The xyz platform? What about the root priveliges issue? -</p></li><li><p>Pros and cons of multithreading in various parts of Samba</p></li><li><p>Why not have a separate process for name resolution, WINS, and browsing?</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797281"></a>Multithreading and Samba</h2></div></div><div></div></div><p> +</p></li><li><p>Pros and cons of multithreading in various parts of Samba</p></li><li><p>Why not have a separate process for name resolution, WINS, and browsing?</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800352"></a>Multithreading and Samba</h2></div></div><div></div></div><p> People sometimes tout threads as a uniformly good thing. They are very nice in their place but are quite inappropriate for smbd. nmbd is another matter, and multi-threading it would be very nice. @@ -159,7 +159,7 @@ smbd multi-threaded. Multi-threading would actually make Samba much slower, less scalable, less portable and much less robust. The fact that we use a separate process for each connection is one of Samba's biggest advantages. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797319"></a>Threading smbd</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800390"></a>Threading smbd</h2></div></div><div></div></div><p> A few problems that would arise from a threaded smbd are: </p><div class="orderedlist"><ol type="1"><li><p> It's not only to create threads instead of processes, but you @@ -184,7 +184,7 @@ A few problems that would arise from a threaded smbd are: </p></li><li><p> we couldn't use the system locking calls as the locking context of fcntl() is a process, not a thread. -</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797394"></a>Threading nmbd</h2></div></div><div></div></div><p> +</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799517"></a>Threading nmbd</h2></div></div><div></div></div><p> This would be ideal, but gets sunk by portability requirements. </p><p> Andrew tried to write a test threads library for nmbd that used only @@ -211,7 +211,7 @@ packet that arrives. Having a pool of processes is possible but is nasty to program cleanly due to the enormous amount of shared data (in complex structures) between the processes. We can't rely on each platform having a shared memory system. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797461"></a>nbmd Design</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799568"></a>nbmd Design</h2></div></div><div></div></div><p> Originally Andrew used recursion to simulate a multi-threaded environment, which use the stack enormously and made for really confusing debugging sessions. Luke Leighton rewrote it to use a @@ -232,7 +232,7 @@ keeps the idea of a distinct packet. See "struct packet_struct" in nameserv.h. It has all the detail but none of the on-the-wire mess. This makes it ideal for using in disk or memory-based databases for browsing and WINS support. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="debug"></a>Chapter3.The samba DEBUG system</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Chris</span> <span class="surname">Hertel</span></h3></div></div><div><p class="pubdate">July 1998</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2796882">New Output Syntax</a></dt><dt><a href="#id2797018">The DEBUG() Macro</a></dt><dt><a href="#id2867347">The DEBUGADD() Macro</a></dt><dt><a href="#id2867392">The DEBUGLVL() Macro</a></dt><dt><a href="#id2867497">New Functions</a></dt><dd><dl><dt><a href="#id2867504">dbgtext()</a></dt><dt><a href="#id2867524">dbghdr()</a></dt><dt><a href="#id2867547">format_debug_text()</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2796882"></a>New Output Syntax</h2></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="debug"></a>Chapter3.The samba DEBUG system</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Chris</span> <span class="surname">Hertel</span></h3></div></div><div><p class="pubdate">July 1998</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2799634">New Output Syntax</a></dt><dt><a href="#id2799757">The DEBUG() Macro</a></dt><dt><a href="#id2799887">The DEBUGADD() Macro</a></dt><dt><a href="#id2799932">The DEBUGLVL() Macro</a></dt><dt><a href="#id2865890">New Functions</a></dt><dd><dl><dt><a href="#id2865897">dbgtext()</a></dt><dt><a href="#id2865916">dbghdr()</a></dt><dt><a href="#id2865940">format_debug_text()</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799634"></a>New Output Syntax</h2></div></div><div></div></div><p> The syntax of a debugging log file is represented as: </p><pre class="programlisting"> >debugfile< :== { >debugmsg< } @@ -285,7 +285,7 @@ by a newline. Note that in the above example the function names are not listed on the header line. That's because the example above was generated on an SGI Indy, and the SGI compiler doesn't support the __FUNCTION__ macro. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797018"></a>The DEBUG() Macro</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799757"></a>The DEBUG() Macro</h2></div></div><div></div></div><p> Use of the DEBUG() macro is unchanged. DEBUG() takes two parameters. The first is the message level, the second is the body of a function call to the Debug1() function. @@ -336,7 +336,7 @@ would look like this: [1998/07/30 16:00:51, 0] file.c:function(261) . </pre><p>Which isn't much use. The format buffer kludge fixes this problem. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867347"></a>The DEBUGADD() Macro</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799887"></a>The DEBUGADD() Macro</h2></div></div><div></div></div><p> In addition to the kludgey solution to the broken line problem described above, there is a clean solution. The DEBUGADD() macro never generates a header. It will append new text to the current debug @@ -350,7 +350,7 @@ DEBUGADD() macro is the same as that of the DEBUG() macro. This is the first line. This is the second line. This is the third line. -</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867392"></a>The DEBUGLVL() Macro</h2></div></div><div></div></div><p> +</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799932"></a>The DEBUGLVL() Macro</h2></div></div><div></div></div><p> One of the problems with the DEBUG() macro was that DEBUG() lines tended to get a bit long. Consider this example from nmbd_sendannounce.c: @@ -385,7 +385,7 @@ within the DEBUGLVL() block. </p></li><li><p> Processing that is only relevant to debug output can be contained within the DEBUGLVL() block. -</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867497"></a>New Functions</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867504"></a>dbgtext()</h3></div></div><div></div></div><p> +</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2865890"></a>New Functions</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2865897"></a>dbgtext()</h3></div></div><div></div></div><p> This function prints debug message text to the debug file (and possibly to syslog) via the format buffer. The function uses a variable argument list just like printf() or Debug1(). The @@ -394,7 +394,7 @@ and then passed to format_debug_text(). If you use DEBUGLVL() you will probably print the body of the message using dbgtext(). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867524"></a>dbghdr()</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2865916"></a>dbghdr()</h3></div></div><div></div></div><p> This is the function that writes a debug message header. Headers are not processed via the format buffer. Also note that if the format buffer is not empty, a call to dbghdr() will not @@ -402,7 +402,7 @@ produce any output. See the comments in dbghdr() for more info. </p><p> It is not likely that this function will be called directly. It is used by DEBUG() and DEBUGADD(). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867547"></a>format_debug_text()</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2865940"></a>format_debug_text()</h3></div></div><div></div></div><p> This is a static function in debug.c. It stores the output text for the body of the message in a buffer until it encounters a newline. When the newline character is found, the buffer is @@ -553,7 +553,7 @@ The suggestions above are simply that, suggestions, but the information may help in reducing the routine rework done on new code. The preceeding list is expected to change routinely as new support routines and macros are added. -</p></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="internals"></a>Chapter5.Samba Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Chappell</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:David.Chappell@mail.trincoll.edu">David.Chappell@mail.trincoll.edu</a>></tt></p></div></div></div></div><div><p class="pubdate">8 May 1996</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2866920">Character Handling</a></dt><dt><a href="#id2866946">The new functions</a></dt><dt><a href="#id2868198">Macros in byteorder.h</a></dt><dd><dl><dt><a href="#id2869122">CVAL(buf,pos)</a></dt><dt><a href="#id2869136">PVAL(buf,pos)</a></dt><dt><a href="#id2869150">SCVAL(buf,pos,val)</a></dt><dt><a href="#id2869163">SVAL(buf,pos)</a></dt><dt><a href="#id2869179">IVAL(buf,pos)</a></dt><dt><a href="#id2869193">SVALS(buf,pos)</a></dt><dt><a href="#id2869208">IVALS(buf,pos)</a></dt><dt><a href="#id2869222">SSVAL(buf,pos,val)</a></dt><dt><a href="#id2869236">SIVAL(buf,pos,val)</a></dt><dt><a href="#id2869251">SSVALS(buf,pos,val)</a></dt><dt><a href="#id2869265">SIVALS(buf,pos,val)</a></dt><dt><a href="#id2869280">RSVAL(buf,pos)</a></dt><dt><a href="#id2869294">RIVAL(buf,pos)</a></dt><dt><a href="#id2869308">RSSVAL(buf,pos,val)</a></dt><dt><a href="#id2869323">RSIVAL(buf,pos,val)</a></dt></dl></dd><dt><a href="#id2869339">LAN Manager Samba API</a></dt><dd><dl><dt><a href="#id2869375">Parameters</a></dt><dt><a href="#id2869526">Return value</a></dt></dl></dd><dt><a href="#id2869611">Code character table</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866920"></a>Character Handling</h2></div></div><div></div></div><p> +</p></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="internals"></a>Chapter5.Samba Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Chappell</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:David.Chappell@mail.trincoll.edu">David.Chappell@mail.trincoll.edu</a>></tt></p></div></div></div></div><div><p class="pubdate">8 May 1996</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867480">Character Handling</a></dt><dt><a href="#id2867505">The new functions</a></dt><dt><a href="#id2866270">Macros in byteorder.h</a></dt><dd><dl><dt><a href="#id2866283">CVAL(buf,pos)</a></dt><dt><a href="#id2866297">PVAL(buf,pos)</a></dt><dt><a href="#id2866311">SCVAL(buf,pos,val)</a></dt><dt><a href="#id2866324">SVAL(buf,pos)</a></dt><dt><a href="#id2866337">IVAL(buf,pos)</a></dt><dt><a href="#id2866351">SVALS(buf,pos)</a></dt><dt><a href="#id2866365">IVALS(buf,pos)</a></dt><dt><a href="#id2866380">SSVAL(buf,pos,val)</a></dt><dt><a href="#id2866394">SIVAL(buf,pos,val)</a></dt><dt><a href="#id2866408">SSVALS(buf,pos,val)</a></dt><dt><a href="#id2866423">SIVALS(buf,pos,val)</a></dt><dt><a href="#id2866437">RSVAL(buf,pos)</a></dt><dt><a href="#id2867143">RIVAL(buf,pos)</a></dt><dt><a href="#id2867158">RSSVAL(buf,pos,val)</a></dt><dt><a href="#id2867173">RSIVAL(buf,pos,val)</a></dt></dl></dd><dt><a href="#id2867189">LAN Manager Samba API</a></dt><dd><dl><dt><a href="#id2867223">Parameters</a></dt><dt><a href="#id2867374">Return value</a></dt></dl></dd><dt><a href="#id2868058">Code character table</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867480"></a>Character Handling</h2></div></div><div></div></div><p> This section describes character set handling in Samba, as implemented in Samba 3.0 and above </p><p> @@ -563,7 +563,7 @@ strings to/from DOS codepages. The problem is that there was no way of telling if a particular char* is in dos codepage or unix codepage. This led to a nightmare of code that tried to cope with particular cases without handlingt the general case. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866946"></a>The new functions</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867505"></a>The new functions</h2></div></div><div></div></div><p> The new system works like this: </p><div class="orderedlist"><ol type="1"><li><p> all char* strings inside Samba are "unix" strings. These are @@ -625,41 +625,41 @@ The new system works like this: parameters is gone. </p></li><li><p> all vfs functions take unix strings. Don't convert when passing to them -</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868198"></a>Macros in byteorder.h</h2></div></div><div></div></div><p> +</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866270"></a>Macros in byteorder.h</h2></div></div><div></div></div><p> This section describes the macros defined in byteorder.h. These macros are used extensively in the Samba code. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869122"></a>CVAL(buf,pos)</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866283"></a>CVAL(buf,pos)</h3></div></div><div></div></div><p> returns the byte at offset pos within buffer buf as an unsigned character. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869136"></a>PVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of CVAL(buf,pos) cast to type unsigned integer.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869150"></a>SCVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the byte at offset pos within buffer buf to value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869163"></a>SVAL(buf,pos)</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866297"></a>PVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of CVAL(buf,pos) cast to type unsigned integer.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866311"></a>SCVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the byte at offset pos within buffer buf to value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866324"></a>SVAL(buf,pos)</h3></div></div><div></div></div><p> returns the value of the unsigned short (16 bit) little-endian integer at offset pos within buffer buf. An integer of this type is sometimes refered to as "USHORT". -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869179"></a>IVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned 32 bit little-endian integer at offset -pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869193"></a>SVALS(buf,pos)</h3></div></div><div></div></div><p>returns the value of the signed short (16 bit) little-endian integer at -offset pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869208"></a>IVALS(buf,pos)</h3></div></div><div></div></div><p>returns the value of the signed 32 bit little-endian integer at offset pos -within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869222"></a>SSVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the unsigned short (16 bit) little-endian integer at offset pos within -buffer buf to value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869236"></a>SIVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the unsigned 32 bit little-endian integer at offset pos within buffer -buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869251"></a>SSVALS(buf,pos,val)</h3></div></div><div></div></div><p>sets the short (16 bit) signed little-endian integer at offset pos within -buffer buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869265"></a>SIVALS(buf,pos,val)</h3></div></div><div></div></div><p>sets the signed 32 bit little-endian integer at offset pos withing buffer -buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869280"></a>RSVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned short (16 bit) big-endian integer at -offset pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869294"></a>RIVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned 32 bit big-endian integer at offset -pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869308"></a>RSSVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the value of the unsigned short (16 bit) big-endian integer at +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866337"></a>IVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned 32 bit little-endian integer at offset +pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866351"></a>SVALS(buf,pos)</h3></div></div><div></div></div><p>returns the value of the signed short (16 bit) little-endian integer at +offset pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866365"></a>IVALS(buf,pos)</h3></div></div><div></div></div><p>returns the value of the signed 32 bit little-endian integer at offset pos +within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866380"></a>SSVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the unsigned short (16 bit) little-endian integer at offset pos within +buffer buf to value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866394"></a>SIVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the unsigned 32 bit little-endian integer at offset pos within buffer +buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866408"></a>SSVALS(buf,pos,val)</h3></div></div><div></div></div><p>sets the short (16 bit) signed little-endian integer at offset pos within +buffer buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866423"></a>SIVALS(buf,pos,val)</h3></div></div><div></div></div><p>sets the signed 32 bit little-endian integer at offset pos withing buffer +buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866437"></a>RSVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned short (16 bit) big-endian integer at +offset pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867143"></a>RIVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned 32 bit big-endian integer at offset +pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867158"></a>RSSVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the value of the unsigned short (16 bit) big-endian integer at offset pos within buffer buf to value val. -refered to as "USHORT".</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869323"></a>RSIVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the value of the unsigned 32 bit big-endian integer at offset -pos within buffer buf to value val.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869339"></a>LAN Manager Samba API</h2></div></div><div></div></div><p> +refered to as "USHORT".</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867173"></a>RSIVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the value of the unsigned 32 bit big-endian integer at offset +pos within buffer buf to value val.</p></div></div><div xmlns:ns2="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867189"></a>LAN Manager Samba API</h2></div></div><div></div></div><p> This section describes the functions need to make a LAN Manager RPC call. This information had been obtained by examining the Samba code and the LAN Manager 2.0 API documentation. It should not be considered entirely reliable. -</p><p> -</p><pre class="programlisting"> +</p><ns2:p> +</ns2:p><pre class="programlisting"> call_api(int prcnt, int drcnt, int mprcnt, int mdrcnt, char *param, char *data, char **rparam, char **rdata); -</pre><p> -</p><p> +</pre><ns2:p> +</ns2:p><p> This function is defined in client.c. It uses an SMB transaction to call a remote api. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869375"></a>Parameters</h3></div></div><div></div></div><p>The parameters are as follows:</p><div class="orderedlist"><ol type="1"><li><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867223"></a>Parameters</h3></div></div><div></div></div><p>The parameters are as follows:</p><div class="orderedlist"><ol type="1"><li><p> prcnt: the number of bytes of parameters begin sent. </p></li><li><p> drcnt: the number of bytes of data begin sent. @@ -704,7 +704,7 @@ substructures apply, this string is of zero length. </p></li></ol></div><p> The code in client.c always calls call_api() with no data. It is unclear when a non-zero length data buffer would be sent. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869526"></a>Return value</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867374"></a>Return value</h3></div></div><div></div></div><p> The returned parameters (pointed to by rparam), in their order of appearance are:</p><div class="orderedlist"><ol type="1"><li><p> An unsigned 16 bit integer which contains the API function's return code. @@ -735,7 +735,7 @@ fix_char_ptr() in client.c can be used for this purpose. The third parameter (which may be read as "SVAL(rparam,4)") has something to do with indicating the amount of data returned or possibly the amount of data which can be returned if enough buffer space is allowed. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869611"></a>Code character table</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868058"></a>Code character table</h2></div></div><div></div></div><p> Certain data structures are described by means of ASCIIz strings containing code characters. These are the code characters: </p><div class="orderedlist"><ol type="1"><li><p> @@ -758,7 +758,7 @@ r pointer to returned data buffer??? L length in bytes of returned data buffer??? </p></li><li><p> h number of bytes of information available??? -</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="parsing"></a>Chapter6.The smb.conf file</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Chris</span> <span class="surname">Hertel</span></h3></div></div><div><p class="pubdate">November 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2868950">Lexical Analysis</a></dt><dd><dl><dt><a href="#id2869043">Handling of Whitespace</a></dt><dt><a href="#id2869099">Handling of Line Continuation</a></dt><dt><a href="#id2870758">Line Continuation Quirks</a></dt></dl></dd><dt><a href="#id2870856">Syntax</a></dt><dd><dl><dt><a href="#id2870928">About params.c</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868950"></a>Lexical Analysis</h2></div></div><div></div></div><p> +</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="parsing"></a>Chapter6.The smb.conf file</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Chris</span> <span class="surname">Hertel</span></h3></div></div><div><p class="pubdate">November 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2868180">Lexical Analysis</a></dt><dd><dl><dt><a href="#id2868265">Handling of Whitespace</a></dt><dt><a href="#id2868320">Handling of Line Continuation</a></dt><dt><a href="#id2868382">Line Continuation Quirks</a></dt></dl></dd><dt><a href="#id2868479">Syntax</a></dt><dd><dl><dt><a href="#id2869330">About params.c</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868180"></a>Lexical Analysis</h2></div></div><div></div></div><p> Basically, the file is processed on a line by line basis. There are four types of lines that are recognized by the lexical analyzer (params.c): @@ -785,7 +785,7 @@ ignores them. The latter two line types are scanned for These are the only tokens passed to the parameter loader (loadparm.c). Parameter names and values are divided from one another by an equal sign: '='. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869043"></a>Handling of Whitespace</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868265"></a>Handling of Whitespace</h3></div></div><div></div></div><p> Whitespace is defined as all characters recognized by the isspace() function (see ctype(3C)) except for the newline character ('\n') The newline is excluded because it identifies the end of the line. @@ -800,7 +800,7 @@ the exception of carriage return characters ('\r'), all of which are removed. </p></li><li><p> Leading and trailing whitespace is removed from names and values. -</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869099"></a>Handling of Line Continuation</h3></div></div><div></div></div><p> +</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868320"></a>Handling of Line Continuation</h3></div></div><div></div></div><p> Long section header and parameter lines may be extended across multiple lines by use of the backslash character ('\\'). Line continuation is ignored for blank and comment lines. @@ -823,7 +823,7 @@ line, plus the four preceeding the word 'with' in the second line. Line continuation characters are ignored on blank lines and at the end of comments. They are *only* recognized within section and parameter lines. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870758"></a>Line Continuation Quirks</h3></div></div><div></div></div><p>Note the following example:</p><pre class="programlisting"> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868382"></a>Line Continuation Quirks</h3></div></div><div></div></div><p>Note the following example:</p><pre class="programlisting"> param name = parameter value string \ \ with line continuation. @@ -847,7 +847,7 @@ terminating character, and the rest of the line is ignored. The lines </pre><p>are read as</p><pre class="programlisting"> [section name] param name = value -</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870856"></a>Syntax</h2></div></div><div></div></div><p>The syntax of the smb.conf file is as follows:</p><pre class="programlisting"> +</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868479"></a>Syntax</h2></div></div><div></div></div><p>The syntax of the smb.conf file is as follows:</p><pre class="programlisting"> <file> :== { <section> } EOF <section> :== <section header> { <parameter line> } <section header> :== '[' NAME ']' @@ -866,12 +866,12 @@ terminating character, and the rest of the line is ignored. The lines A parameter line is divided into a NAME and a VALUE. The *first* equal sign on the line separates the NAME from the VALUE. The VALUE is terminated by a newline character (NL = '\n'). -</p></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870928"></a>About params.c</h3></div></div><div></div></div><p> +</p></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869330"></a>About params.c</h3></div></div><div></div></div><p> The parsing of the config file is a bit unusual if you are used to lex, yacc, bison, etc. Both lexical analysis (scanning) and parsing are performed by params.c. Values are loaded via callbacks to loadparm.c. -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unix-smb"></a>Chapter7.NetBIOS in a Unix World</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3></div></div><div><p class="pubdate">April 1995</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2870375">Introduction</a></dt><dt><a href="#id2870400">Usernames</a></dt><dt><a href="#id2870628">File Ownership</a></dt><dt><a href="#id2870665">Passwords</a></dt><dt><a href="#id2870702">Locking</a></dt><dt><a href="#id2871641">Deny Modes</a></dt><dt><a href="#id2871672">Trapdoor UIDs</a></dt><dt><a href="#id2871697">Port numbers</a></dt><dt><a href="#id2871742">Protocol Complexity</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870375"></a>Introduction</h2></div></div><div></div></div><p> +</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unix-smb"></a>Chapter7.NetBIOS in a Unix World</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3></div></div><div><p class="pubdate">April 1995</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2870008">Introduction</a></dt><dt><a href="#id2870030">Usernames</a></dt><dt><a href="#id2870095">File Ownership</a></dt><dt><a href="#id2870131">Passwords</a></dt><dt><a href="#id2869394">Locking</a></dt><dt><a href="#id2869456">Deny Modes</a></dt><dt><a href="#id2869487">Trapdoor UIDs</a></dt><dt><a href="#id2869512">Port numbers</a></dt><dt><a href="#id2869557">Protocol Complexity</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870008"></a>Introduction</h2></div></div><div></div></div><p> This is a short document that describes some of the issues that confront a SMB implementation on unix, and how Samba copes with them. They may help people who are looking at unix<->PC @@ -879,7 +879,7 @@ interoperability. </p><p> It was written to help out a person who was writing a paper on unix to PC connectivity. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870400"></a>Usernames</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870030"></a>Usernames</h2></div></div><div></div></div><p> The SMB protocol has only a loose username concept. Early SMB protocols (such as CORE and COREPLUS) have no username concept at all. Even in later protocols clients often attempt operations @@ -916,7 +916,7 @@ in the vast majority of cases. The methods include username maps, the service%user syntax, the saving of session setup usernames for later validation and the derivation of the username from the service name (either directly or via the user= option). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870628"></a>File Ownership</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870095"></a>File Ownership</h2></div></div><div></div></div><p> The commonly used SMB protocols have no way of saying "you can't do that because you don't own the file". They have, in fact, no concept of file ownership at all. @@ -934,7 +934,7 @@ file time comparisons right. There are several possible solutions to this problem, including username mapping, and forcing a specific username for particular shares. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870665"></a>Passwords</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870131"></a>Passwords</h2></div></div><div></div></div><p> Many SMB clients uppercase passwords before sending them. I have no idea why they do this. Interestingly WfWg uppercases the password only if the server is running a protocol greater than COREPLUS, so @@ -956,7 +956,7 @@ This means that it is *VERY* important to ensure that the Samba smbpasswd file containing these password hashes is only readable by the root user. See the documentation ENCRYPTION.txt for more details. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870702"></a>Locking</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869394"></a>Locking</h2></div></div><div></div></div><p> Since samba 2.2, samba supports other types of locking as well. This section is outdated. </p><p> @@ -987,7 +987,7 @@ asking the server to notify it if anyone else tries to do something on the same file, at which time the client will say if it is willing to give up its lock. Unix has no simple way of implementing opportunistic locking, and currently Samba has no support for it. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871641"></a>Deny Modes</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869456"></a>Deny Modes</h2></div></div><div></div></div><p> When a SMB client opens a file it asks for a particular "deny mode" to be placed on the file. These modes (DENY_NONE, DENY_READ, DENY_WRITE, DENY_ALL, DENY_FCB and DENY_DOS) specify what actions should be @@ -1001,7 +1001,7 @@ directory or a shared memory implementation. The lock file method is clumsy and consumes processing and file resources, the shared memory implementation is vastly prefered and is turned on by default for those systems that support it. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871672"></a>Trapdoor UIDs</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869487"></a>Trapdoor UIDs</h2></div></div><div></div></div><p> A SMB session can run with several uids on the one socket. This happens when a user connects to two shares with different usernames. To cope with this the unix server needs to switch uids @@ -1011,7 +1011,7 @@ a single uid. </p><p> Note that you can also get the "trapdoor uid" message for other reasons. Please see the FAQ for details. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871697"></a>Port numbers</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869512"></a>Port numbers</h2></div></div><div></div></div><p> There is a convention that clients on sockets use high "unprivilaged" port numbers (>1000) and connect to servers on low "privilaged" port numbers. This is enforced in Unix as non-root users can't open a @@ -1034,7 +1034,7 @@ to any of these OSes unless they are running as root. The answer comes back, but it goes to port 137 which the unix user can't listen on. Interestingly WinNT3.1 got this right - it sends node status responses back to the source port in the request. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871742"></a>Protocol Complexity</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869557"></a>Protocol Complexity</h2></div></div><div></div></div><p> There are many "protocol levels" in the SMB protocol. It seems that each time new functionality was added to a Microsoft operating system, they added the equivalent functions in a new protocol level of the SMB @@ -1148,7 +1148,7 @@ causes printing to fail with Samba: The process is trying to first open <tt class="filename">/dev/null</tt> read-write then read-only. Both fail. This means <tt class="filename">/dev/null</tt> has incorrect permissions. -</p></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="windows-debug"></a>Chapter9.Finding useful information on windows</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2871397">Netlogon debugging output</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871397"></a>Netlogon debugging output</h2></div></div><div></div></div><div class="procedure"><ol type="1"><li><p>stop netlogon service on PDC</p></li><li><p>rename original netlogon.dll to netlogon.dll.original</p></li><li><p>copy checked version of netlogon.dll to system32 directory</p></li><li><p>set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\DBFlag to 0x20000004</p></li><li><p>start netlogon service on PDC</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ntdomain"></a>Chapter10.NT Domain RPC's</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Luke</span> <span class="surname">Leighton</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:lkcl@switchboard.net">lkcl@switchboard.net</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Ashton</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:paul@argo.demon.co.uk">paul@argo.demon.co.uk</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Duncan</span> <span class="surname">Stansfield</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:duncans@sco.com">duncans@sco.com</a>></tt></p></div></div></div></div><div><p class="pubdate">01 November 97(version 0.0.24)</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2872364">Introduction</a></dt><dd><dl><dt><a href="#id2873295">Sources</a></dt><dt><a href="#id2873330">Credits</a></dt></dl></dd><dt><a href="#id2873367">Notes and Structures</a></dt><dd><dl><dt><a href="#id2873375">Notes</a></dt><dt><a href="#id2873451">Enumerations</a></dt><dt><a href="#id2873665">Structures</a></dt></dl></dd><dt><a href="#id2876614">MSRPC over Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2876627">MSRPC Pipes</a></dt><dt><a href="#id2876729">Header</a></dt><dt><a href="#id2877600">Tail</a></dt><dt><a href="#id2877647">RPC Bind / Bind Ack</a></dt><dt><a href="#id2877826">NTLSA Transact Named Pipe</a></dt><dt><a href="#id2877991">LSA Open Policy</a></dt><dt><a href="#id2878118">LSA Query Info Policy</a></dt><dt><a href="#id2878223">LSA Enumerate Trusted Domains</a></dt><dt><a href="#id2878315">LSA Open Secret</a></dt><dt><a href="#id2878424">LSA Close</a></dt><dt><a href="#id2878490">LSA Lookup SIDS</a></dt><dt><a href="#id2878700">LSA Lookup Names</a></dt></dl></dd><dt><a href="#id2878926">NETLOGON rpc Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2879087">LSA Request Challenge</a></dt><dt><a href="#id2879222">LSA Authenticate 2</a></dt><dt><a href="#id2879369">LSA Server Password Set</a></dt><dt><a href="#id2879484">LSA SAM Logon</a></dt><dt><a href="#id2879598">LSA SAM Logoff</a></dt></dl></dd><dt><a href="#id2879689">\\MAILSLOT\NET\NTLOGON</a></dt><dd><dl><dt><a href="#id2879701">Query for PDC</a></dt><dt><a href="#id2879969">SAM Logon</a></dt></dl></dd><dt><a href="#id2880294">SRVSVC Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2880339">Net Share Enum</a></dt><dt><a href="#id2880558">Net Server Get Info</a></dt></dl></dd><dt><a href="#id2880674">Cryptographic side of NT Domain Authentication</a></dt><dd><dl><dt><a href="#id2880682">Definitions</a></dt><dt><a href="#id2880845">Protocol</a></dt><dt><a href="#id2880942">Comments</a></dt></dl></dd><dt><a href="#id2880991">SIDs and RIDs</a></dt><dd><dl><dt><a href="#id2881031">Well-known SIDs</a></dt><dt><a href="#id2881346">Well-known RIDS</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872364"></a>Introduction</h2></div></div><div></div></div><p> +</p></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="windows-debug"></a>Chapter9.Finding useful information on windows</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2871834">Netlogon debugging output</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871834"></a>Netlogon debugging output</h2></div></div><div></div></div><div class="procedure"><ol type="1"><li><p>stop netlogon service on PDC</p></li><li><p>rename original netlogon.dll to netlogon.dll.original</p></li><li><p>copy checked version of netlogon.dll to system32 directory</p></li><li><p>set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\DBFlag to 0x20000004</p></li><li><p>start netlogon service on PDC</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ntdomain"></a>Chapter10.NT Domain RPC's</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Luke</span> <span class="surname">Leighton</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:lkcl@switchboard.net">lkcl@switchboard.net</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Ashton</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:paul@argo.demon.co.uk">paul@argo.demon.co.uk</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Duncan</span> <span class="surname">Stansfield</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:duncans@sco.com">duncans@sco.com</a>></tt></p></div></div></div></div><div><p class="pubdate">01 November 97(version 0.0.24)</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2870569">Introduction</a></dt><dd><dl><dt><a href="#id2870767">Sources</a></dt><dt><a href="#id2870802">Credits</a></dt></dl></dd><dt><a href="#id2871390">Notes and Structures</a></dt><dd><dl><dt><a href="#id2871397">Notes</a></dt><dt><a href="#id2871472">Enumerations</a></dt><dt><a href="#id2871684">Structures</a></dt></dl></dd><dt><a href="#id2883414">MSRPC over Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2883427">MSRPC Pipes</a></dt><dt><a href="#id2883528">Header</a></dt><dt><a href="#id2884399">Tail</a></dt><dt><a href="#id2884445">RPC Bind / Bind Ack</a></dt><dt><a href="#id2884625">NTLSA Transact Named Pipe</a></dt><dt><a href="#id2884790">LSA Open Policy</a></dt><dt><a href="#id2884916">LSA Query Info Policy</a></dt><dt><a href="#id2885022">LSA Enumerate Trusted Domains</a></dt><dt><a href="#id2885113">LSA Open Secret</a></dt><dt><a href="#id2885223">LSA Close</a></dt><dt><a href="#id2885289">LSA Lookup SIDS</a></dt><dt><a href="#id2885498">LSA Lookup Names</a></dt></dl></dd><dt><a href="#id2885724">NETLOGON rpc Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2885885">LSA Request Challenge</a></dt><dt><a href="#id2886019">LSA Authenticate 2</a></dt><dt><a href="#id2886166">LSA Server Password Set</a></dt><dt><a href="#id2886282">LSA SAM Logon</a></dt><dt><a href="#id2886384">LSA SAM Logoff</a></dt></dl></dd><dt><a href="#id2886476">\\MAILSLOT\NET\NTLOGON</a></dt><dd><dl><dt><a href="#id2886493">Query for PDC</a></dt><dt><a href="#id2886755">SAM Logon</a></dt></dl></dd><dt><a href="#id2887080">SRVSVC Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2887125">Net Share Enum</a></dt><dt><a href="#id2887345">Net Server Get Info</a></dt></dl></dd><dt><a href="#id2887461">Cryptographic side of NT Domain Authentication</a></dt><dd><dl><dt><a href="#id2887469">Definitions</a></dt><dt><a href="#id2887631">Protocol</a></dt><dt><a href="#id2887711">Comments</a></dt></dl></dd><dt><a href="#id2887760">SIDs and RIDs</a></dt><dd><dl><dt><a href="#id2887800">Well-known SIDs</a></dt><dt><a href="#id2888114">Well-known RIDS</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870569"></a>Introduction</h2></div></div><div></div></div><p> This document contains information to provide an NT workstation with login services, without the need for an NT server. It is the sgml version of <a href="http://mailhost.cb1.com/~lkcl/cifsntdomain.txt" target="_top">http://mailhost.cb1.com/~lkcl/cifsntdomain.txt</a>, controlled by Luke. </p><p> @@ -1194,7 +1194,7 @@ Failure to return this error code will make the workstation report that it is already a member of the domain.</p></li><li><p>the cryptographic side of the NetrServerPasswordSet command, which would allow the workstation to change its password. This password is used to generate the long-term session key. [It is possible to reject this -command, and keep the default workstation password].</p></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873295"></a>Sources</h3></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td>cket Traces from Netmonitor (Service Pack 1 and above)</td></tr><tr><td>ul Ashton and Luke Leighton's other "NT Domain" doc.</td></tr><tr><td>FS documentation - cifs6.txt</td></tr><tr><td>FS documentation - cifsrap2.txt</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873330"></a>Credits</h3></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td>Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.</td></tr><tr><td>Duncan Stansfield: low-level analysis of MSRPC Pipes.</td></tr><tr><td>Linus Nordberg: producing c-code from Paul's crypto spec.</td></tr><tr><td>Windows Sourcer development team</td></tr></table></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2873367"></a>Notes and Structures</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873375"></a>Notes</h3></div></div><div></div></div><div class="orderedlist"><ol type="1"><li><p> +command, and keep the default workstation password].</p></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870767"></a>Sources</h3></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td>cket Traces from Netmonitor (Service Pack 1 and above)</td></tr><tr><td>ul Ashton and Luke Leighton's other "NT Domain" doc.</td></tr><tr><td>FS documentation - cifs6.txt</td></tr><tr><td>FS documentation - cifsrap2.txt</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870802"></a>Credits</h3></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td>Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.</td></tr><tr><td>Duncan Stansfield: low-level analysis of MSRPC Pipes.</td></tr><tr><td>Linus Nordberg: producing c-code from Paul's crypto spec.</td></tr><tr><td>Windows Sourcer development team</td></tr></table></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871390"></a>Notes and Structures</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871397"></a>Notes</h3></div></div><div></div></div><div class="orderedlist"><ol type="1"><li><p> In the SMB Transact pipes, some "Structures", described here, appear to be 4-byte aligned with the SMB header, at their start. Exactly which "Structures" need aligning is not precisely known or documented. @@ -1222,15 +1222,15 @@ into or taken out of the SMB data stream. if the count is non-zero, then the pointer is also non-zero. immediately following the pointer is the count again, followed by an array of container sub-structures. the count appears a third time after the last sub-structure. -</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873451"></a>Enumerations</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873459"></a>MSRPC Header type</h4></div></div><div></div></div><p>command number in the msrpc packet header</p><div class="variablelist"><dl><dt><span class="term">MSRPC_Request:</span></dt><dd><p>0x00</p></dd><dt><span class="term">MSRPC_Response:</span></dt><dd><p>0x02</p></dd><dt><span class="term">MSRPC_Bind:</span></dt><dd><p>0x0B</p></dd><dt><span class="term">MSRPC_BindAck:</span></dt><dd><p>0x0C</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873534"></a>MSRPC Packet info</h4></div></div><div></div></div><p>The meaning of these flags is undocumented</p><div class="variablelist"><dl><dt><span class="term">FirstFrag:</span></dt><dd><p>0x01 </p></dd><dt><span class="term">LastFrag:</span></dt><dd><p>0x02 </p></dd><dt><span class="term">NotaFrag:</span></dt><dd><p>0x04 </p></dd><dt><span class="term">RecRespond:</span></dt><dd><p>0x08 </p></dd><dt><span class="term">NoMultiplex:</span></dt><dd><p>0x10 </p></dd><dt><span class="term">NotForIdemp:</span></dt><dd><p>0x20 </p></dd><dt><span class="term">NotforBcast:</span></dt><dd><p>0x40 </p></dd><dt><span class="term">NoUuid:</span></dt><dd><p>0x80 </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873665"></a>Structures</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873672"></a>VOID *</h4></div></div><div></div></div><p>sizeof VOID* is 32 bits.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873683"></a>char</h4></div></div><div></div></div><p>sizeof char is 8 bits.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873695"></a>UTIME</h4></div></div><div></div></div><p>UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873708"></a>NTTIME</h4></div></div><div></div></div><p>NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873720"></a>DOM_SID (domain SID structure)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>num of sub-authorities in domain SID</p></dd><dt><span class="term">UINT8</span></dt><dd><p>SID revision number</p></dd><dt><span class="term">UINT8</span></dt><dd><p>num of sub-authorities in domain SID</p></dd><dt><span class="term">UINT8[6]</span></dt><dd><p>6 bytes for domain SID - Identifier Authority.</p></dd><dt><span class="term">UINT16[n_subauths]</span></dt><dd><p>domain SID sub-authorities</p></dd></dl></div><p><span class="emphasis"><em>Note: the domain SID is documented elsewhere.</em></span> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873813"></a>STR (string)</h4></div></div><div></div></div><p>STR (string) is a char[] : a null-terminated string of ascii characters.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873827"></a>UNIHDR (unicode string header) </h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16</span></dt><dd><p>max length of unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - undocumented.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873883"></a>UNIHDR2 (unicode string header plus buffer pointer)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNIHDR</span></dt><dd><p>unicode string header</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873925"></a>UNISTR (unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16[]</span></dt><dd><p>null-terminated string of unicode characters.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873953"></a>NAME (length-indicated unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16[]</span></dt><dd><p>null-terminated string of unicode characters.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873995"></a>UNISTR2 (aligned unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with the start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>max length of unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16[]</span></dt><dd><p>string of uncode characters</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874081"></a>OBJ_ATTR (object attributes)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0x18 - length (in bytes) including the length field.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - root directory (pointer)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - object name (pointer)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - attributes (undocumented)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - security descriptior (pointer)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - security quality of service</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874174"></a>POL_HND (LSA policy handle)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[20]</span></dt><dd><p>policy handle</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874201"></a>DOM_SID2 (domain SID structure, SIDS stored in unicode)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>5 - SID type</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UNIHDR2</span></dt><dd><p>domain SID unicode string header</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain SID unicode string</p></dd></dl></div><p><span class="emphasis"><em>Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.</em></span></p><p><span class="emphasis"><em>Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.</em></span></p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874288"></a>DOM_RID (domain RID structure)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>5 - well-known SID. 1 - user SID (see ShowACLs)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>5 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>domain RID </p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - domain index out of above reference domains</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874358"></a>LOG_INFO (server, account, client structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><p><span class="emphasis"><em>Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.</em></span></p><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>account name unicode string</p></dd><dt><span class="term">UINT16</span></dt><dd><p>sec_chan - security channel type</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client machine unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874457"></a>CLNT_SRV (server, client names structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client machine unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874535"></a>CREDS (credentials + time stamp)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>credentials</p></dd><dt><span class="term">UTIME</span></dt><dd><p>time stamp</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874576"></a>CLNT_INFO2 (server, client structure, client credentials)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to - maintain an authenticated request/response trail.</em></span></p><div class="variablelist"><dl><dt><span class="term">CLNT_SRV</span></dt><dd><p>client and server names</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>???? padding, for 4-byte alignment with SMB header.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to client credentials.</p></dd><dt><span class="term">CREDS</span></dt><dd><p>client-calculated credentials + client time</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874658"></a>CLNT_INFO (server, account, client structure, client credentials)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.</em></span></p><div class="variablelist"><dl><dt><span class="term">LOG_INFO</span></dt><dd><p>logon account info</p></dd><dt><span class="term">CREDS</span></dt><dd><p>client-calculated credentials + client time</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874711"></a>ID_INFO_1 (id info structure, auth level 1)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>ptr_id_info_1</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>domain name unicode header</p></dd><dt><span class="term">UINT32</span></dt><dd><p>param control</p></dd><dt><span class="term">UINT64</span></dt><dd><p>logon ID</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>user name unicode header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>workgroup name unicode header</p></dd><dt><span class="term">char[16]</span></dt><dd><p>arc4 LM OWF Password</p></dd><dt><span class="term">char[16]</span></dt><dd><p>arc4 NT OWF Password</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>domain name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>user name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>workstation name unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874881"></a>SAM_INFO (sam logon/logoff id info structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.</em></span></p><div class="variablelist"><dl><dt><span class="term">CLNT_INFO2</span></dt><dd><p>client identification/authentication info</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to return credentials.</p></dd><dt><span class="term">CRED</span></dt><dd><p>return credentials - ignored.</p></dd><dt><span class="term">UINT16</span></dt><dd><p>logon level</p></dd><dt><span class="term">UINT16</span></dt><dd><p>switch value</p></dd></dl></div><pre class="programlisting"> +</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871472"></a>Enumerations</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871479"></a>MSRPC Header type</h4></div></div><div></div></div><p>command number in the msrpc packet header</p><div class="variablelist"><dl><dt><span class="term">MSRPC_Request:</span></dt><dd><p>0x00</p></dd><dt><span class="term">MSRPC_Response:</span></dt><dd><p>0x02</p></dd><dt><span class="term">MSRPC_Bind:</span></dt><dd><p>0x0B</p></dd><dt><span class="term">MSRPC_BindAck:</span></dt><dd><p>0x0C</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871553"></a>MSRPC Packet info</h4></div></div><div></div></div><p>The meaning of these flags is undocumented</p><div class="variablelist"><dl><dt><span class="term">FirstFrag:</span></dt><dd><p>0x01 </p></dd><dt><span class="term">LastFrag:</span></dt><dd><p>0x02 </p></dd><dt><span class="term">NotaFrag:</span></dt><dd><p>0x04 </p></dd><dt><span class="term">RecRespond:</span></dt><dd><p>0x08 </p></dd><dt><span class="term">NoMultiplex:</span></dt><dd><p>0x10 </p></dd><dt><span class="term">NotForIdemp:</span></dt><dd><p>0x20 </p></dd><dt><span class="term">NotforBcast:</span></dt><dd><p>0x40 </p></dd><dt><span class="term">NoUuid:</span></dt><dd><p>0x80 </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871684"></a>Structures</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871691"></a>VOID *</h4></div></div><div></div></div><p>sizeof VOID* is 32 bits.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871702"></a>char</h4></div></div><div></div></div><p>sizeof char is 8 bits.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871714"></a>UTIME</h4></div></div><div></div></div><p>UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871727"></a>NTTIME</h4></div></div><div></div></div><p>NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871739"></a>DOM_SID (domain SID structure)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>num of sub-authorities in domain SID</p></dd><dt><span class="term">UINT8</span></dt><dd><p>SID revision number</p></dd><dt><span class="term">UINT8</span></dt><dd><p>num of sub-authorities in domain SID</p></dd><dt><span class="term">UINT8[6]</span></dt><dd><p>6 bytes for domain SID - Identifier Authority.</p></dd><dt><span class="term">UINT16[n_subauths]</span></dt><dd><p>domain SID sub-authorities</p></dd></dl></div><p><span class="emphasis"><em>Note: the domain SID is documented elsewhere.</em></span> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872096"></a>STR (string)</h4></div></div><div></div></div><p>STR (string) is a char[] : a null-terminated string of ascii characters.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872110"></a>UNIHDR (unicode string header) </h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16</span></dt><dd><p>max length of unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - undocumented.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872166"></a>UNIHDR2 (unicode string header plus buffer pointer)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNIHDR</span></dt><dd><p>unicode string header</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872208"></a>UNISTR (unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16[]</span></dt><dd><p>null-terminated string of unicode characters.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872236"></a>NAME (length-indicated unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16[]</span></dt><dd><p>null-terminated string of unicode characters.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872278"></a>UNISTR2 (aligned unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with the start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>max length of unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16[]</span></dt><dd><p>string of uncode characters</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872364"></a>OBJ_ATTR (object attributes)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0x18 - length (in bytes) including the length field.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - root directory (pointer)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - object name (pointer)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - attributes (undocumented)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - security descriptior (pointer)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - security quality of service</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872457"></a>POL_HND (LSA policy handle)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[20]</span></dt><dd><p>policy handle</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872484"></a>DOM_SID2 (domain SID structure, SIDS stored in unicode)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>5 - SID type</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UNIHDR2</span></dt><dd><p>domain SID unicode string header</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain SID unicode string</p></dd></dl></div><p><span class="emphasis"><em>Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.</em></span></p><p><span class="emphasis"><em>Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.</em></span></p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872571"></a>DOM_RID (domain RID structure)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>5 - well-known SID. 1 - user SID (see ShowACLs)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>5 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>domain RID </p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - domain index out of above reference domains</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872640"></a>LOG_INFO (server, account, client structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><p><span class="emphasis"><em>Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.</em></span></p><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>account name unicode string</p></dd><dt><span class="term">UINT16</span></dt><dd><p>sec_chan - security channel type</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client machine unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881257"></a>CLNT_SRV (server, client names structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client machine unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881334"></a>CREDS (credentials + time stamp)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>credentials</p></dd><dt><span class="term">UTIME</span></dt><dd><p>time stamp</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881375"></a>CLNT_INFO2 (server, client structure, client credentials)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to + maintain an authenticated request/response trail.</em></span></p><div class="variablelist"><dl><dt><span class="term">CLNT_SRV</span></dt><dd><p>client and server names</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>???? padding, for 4-byte alignment with SMB header.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to client credentials.</p></dd><dt><span class="term">CREDS</span></dt><dd><p>client-calculated credentials + client time</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881457"></a>CLNT_INFO (server, account, client structure, client credentials)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.</em></span></p><div class="variablelist"><dl><dt><span class="term">LOG_INFO</span></dt><dd><p>logon account info</p></dd><dt><span class="term">CREDS</span></dt><dd><p>client-calculated credentials + client time</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881510"></a>ID_INFO_1 (id info structure, auth level 1)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>ptr_id_info_1</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>domain name unicode header</p></dd><dt><span class="term">UINT32</span></dt><dd><p>param control</p></dd><dt><span class="term">UINT64</span></dt><dd><p>logon ID</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>user name unicode header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>workgroup name unicode header</p></dd><dt><span class="term">char[16]</span></dt><dd><p>arc4 LM OWF Password</p></dd><dt><span class="term">char[16]</span></dt><dd><p>arc4 NT OWF Password</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>domain name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>user name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>workstation name unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881680"></a>SAM_INFO (sam logon/logoff id info structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.</em></span></p><div class="variablelist"><dl><dt><span class="term">CLNT_INFO2</span></dt><dd><p>client identification/authentication info</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to return credentials.</p></dd><dt><span class="term">CRED</span></dt><dd><p>return credentials - ignored.</p></dd><dt><span class="term">UINT16</span></dt><dd><p>logon level</p></dd><dt><span class="term">UINT16</span></dt><dd><p>switch value</p></dd></dl></div><pre class="programlisting"> switch (switch_value) case 1: { ID_INFO_1 id_info_1; } -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874984"></a>GID (group id info)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>group id</p></dd><dt><span class="term">UINT32</span></dt><dd><p>user attributes (only used by NT 3.1 and 3.51)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875023"></a>DOM_REF (domain reference info)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num referenced domains?</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>32 - max number of entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - num referenced domains?</p></dd><dt><span class="term">UNIHDR2</span></dt><dd><p>domain name unicode string header</p></dd><dt><span class="term">UNIHDR2[num_ref_doms-1]</span></dt><dd><p>referenced domain unicode string headers</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name unicode string</p></dd><dt><span class="term">DOM_SID[num_ref_doms]</span></dt><dd><p>referenced domain SIDs</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875166"></a>DOM_INFO (domain info, levels 3 and 5 are the same))</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8[]</span></dt><dd><p>??? padding to get 4-byte alignment with start of SMB header</p></dd><dt><span class="term">UINT16</span></dt><dd><p>domain name string length * 2</p></dd><dt><span class="term">UINT16</span></dt><dd><p>domain name string length * 2</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name string buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID string buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>domain name (unicode string)</p></dd><dt><span class="term">DOM_SID</span></dt><dd><p>domain SID</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875279"></a>USER_INFO (user logon info)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: it would be nice to know what the 16 byte user session key is for.</em></span></p><div class="variablelist"><dl><dt><span class="term">NTTIME</span></dt><dd><p>logon time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>logoff time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>kickoff time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password last set time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password can change time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password must change time</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>username unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>user's full name unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon script unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>profile path unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>home directory unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>home directory drive unicode string header</p></dd><dt><span class="term">UINT16</span></dt><dd><p>logon count</p></dd><dt><span class="term">UINT16</span></dt><dd><p>bad password count</p></dd><dt><span class="term">UINT32</span></dt><dd><p>User ID</p></dd><dt><span class="term">UINT32</span></dt><dd><p>Group ID</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num groups</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer to groups.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>user flags</p></dd><dt><span class="term">char[16]</span></dt><dd><p>user session key</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon server unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon domain unicode string header</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented logon domain id pointer</p></dd><dt><span class="term">char[40]</span></dt><dd><p>40 undocumented padding bytes. future expansion?</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - num_other_sids?</p></dd><dt><span class="term">VOID*</span></dt><dd><p>NULL - undocumented pointer to other domain SIDs.</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>username unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>user's full name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon script unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>profile path unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>home directory unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>home directory drive unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num groups</p></dd><dt><span class="term">GID[num_groups]</span></dt><dd><p>group info</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon domain unicode string</p></dd><dt><span class="term">DOM_SID</span></dt><dd><p>domain SID</p></dd><dt><span class="term">DOM_SID[num_sids]</span></dt><dd><p>other domain SIDs?</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875843"></a>SH_INFO_1_PTR (pointers to level 1 share info strings)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: see cifsrap2.txt section5, page 10.</em></span></p><table class="simplelist" border="0" summary="Simple list"><tr><td>0 for shi1_type indicates a Disk.</td></tr><tr><td>1 for shi1_type indicates a Print Queue.</td></tr><tr><td>2 for shi1_type indicates a Device.</td></tr><tr><td>3 for shi1_type indicates an IPC pipe.</td></tr><tr><td>0x8000 0000 (top bit set in shi1_type) indicates a hidden share.</td></tr></table><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>shi1_netname - pointer to net name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>shi1_type - type of share. 0 - undocumented.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>shi1_remark - pointer to comment.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875937"></a>SH_INFO_1_STR (level 1 share info strings)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNISTR2</span></dt><dd><p>shi1_netname - unicode string of net name</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>shi1_remark - unicode string of comment.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875980"></a>SHARE_INFO_1_CTR</h4></div></div><div></div></div><p>share container with 0 entries:</p><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - Buffer</p></dd></dl></div><p>share container with > 0 entries:</p><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>non-zero - Buffer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">SH_INFO_1_PTR[EntriesRead]</span></dt><dd><p>share entry pointers</p></dd><dt><span class="term">SH_INFO_1_STR[EntriesRead]</span></dt><dd><p>share entry strings</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - padding</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876149"></a>SERVER_INFO_101</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1. </em></span></p><div class="variablelist"><dl><dt><span class="term">SV_TYPE_WORKSTATION</span></dt><dd><p>0x00000001 All workstations</p></dd><dt><span class="term">SV_TYPE_SERVER</span></dt><dd><p>0x00000002 All servers</p></dd><dt><span class="term">SV_TYPE_SQLSERVER</span></dt><dd><p>0x00000004 Any server running with SQL server</p></dd><dt><span class="term">SV_TYPE_DOMAIN_CTRL</span></dt><dd><p>0x00000008 Primary domain controller</p></dd><dt><span class="term">SV_TYPE_DOMAIN_BAKCTRL</span></dt><dd><p>0x00000010 Backup domain controller</p></dd><dt><span class="term">SV_TYPE_TIME_SOURCE</span></dt><dd><p>0x00000020 Server running the timesource service</p></dd><dt><span class="term">SV_TYPE_AFP</span></dt><dd><p>0x00000040 Apple File Protocol servers</p></dd><dt><span class="term">SV_TYPE_NOVELL</span></dt><dd><p>0x00000080 Novell servers</p></dd><dt><span class="term">SV_TYPE_DOMAIN_MEMBER</span></dt><dd><p>0x00000100 Domain Member</p></dd><dt><span class="term">SV_TYPE_PRINTQ_SERVER</span></dt><dd><p>0x00000200 Server sharing print queue</p></dd><dt><span class="term">SV_TYPE_DIALIN_SERVER</span></dt><dd><p>0x00000400 Server running dialin service.</p></dd><dt><span class="term">SV_TYPE_XENIX_SERVER</span></dt><dd><p>0x00000800 Xenix server</p></dd><dt><span class="term">SV_TYPE_NT</span></dt><dd><p>0x00001000 NT server</p></dd><dt><span class="term">SV_TYPE_WFW</span></dt><dd><p>0x00002000 Server running Windows for </p></dd><dt><span class="term">SV_TYPE_SERVER_NT</span></dt><dd><p>0x00008000 Windows NT non DC server</p></dd><dt><span class="term">SV_TYPE_POTENTIAL_BROWSER</span></dt><dd><p>0x00010000 Server that can run the browser service</p></dd><dt><span class="term">SV_TYPE_BACKUP_BROWSER</span></dt><dd><p>0x00020000 Backup browser server</p></dd><dt><span class="term">SV_TYPE_MASTER_BROWSER</span></dt><dd><p>0x00040000 Master browser server</p></dd><dt><span class="term">SV_TYPE_DOMAIN_MASTER</span></dt><dd><p>0x00080000 Domain Master Browser server</p></dd><dt><span class="term">SV_TYPE_LOCAL_LIST_ONLY</span></dt><dd><p>0x40000000 Enumerate only entries marked "local"</p></dd><dt><span class="term">SV_TYPE_DOMAIN_ENUM</span></dt><dd><p>0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.</p></dd></dl></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>500 - platform_id</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>5 - major version</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - minor version</p></dd><dt><span class="term">UINT32</span></dt><dd><p>type (SV_TYPE_... bit field)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to comment</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>sv101_name - unicode string of server name</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>sv_101_comment - unicode string of server comment.</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with start of the SMB header.</p></dd></dl></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876614"></a>MSRPC over Transact Named Pipe</h2></div></div><div></div></div><p>For details on the SMB Transact Named Pipe, see cifs6.txt</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876627"></a>MSRPC Pipes</h3></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881784"></a>GID (group id info)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>group id</p></dd><dt><span class="term">UINT32</span></dt><dd><p>user attributes (only used by NT 3.1 and 3.51)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881822"></a>DOM_REF (domain reference info)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num referenced domains?</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>32 - max number of entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - num referenced domains?</p></dd><dt><span class="term">UNIHDR2</span></dt><dd><p>domain name unicode string header</p></dd><dt><span class="term">UNIHDR2[num_ref_doms-1]</span></dt><dd><p>referenced domain unicode string headers</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name unicode string</p></dd><dt><span class="term">DOM_SID[num_ref_doms]</span></dt><dd><p>referenced domain SIDs</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881966"></a>DOM_INFO (domain info, levels 3 and 5 are the same))</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8[]</span></dt><dd><p>??? padding to get 4-byte alignment with start of SMB header</p></dd><dt><span class="term">UINT16</span></dt><dd><p>domain name string length * 2</p></dd><dt><span class="term">UINT16</span></dt><dd><p>domain name string length * 2</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name string buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID string buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>domain name (unicode string)</p></dd><dt><span class="term">DOM_SID</span></dt><dd><p>domain SID</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882079"></a>USER_INFO (user logon info)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: it would be nice to know what the 16 byte user session key is for.</em></span></p><div class="variablelist"><dl><dt><span class="term">NTTIME</span></dt><dd><p>logon time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>logoff time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>kickoff time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password last set time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password can change time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password must change time</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>username unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>user's full name unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon script unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>profile path unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>home directory unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>home directory drive unicode string header</p></dd><dt><span class="term">UINT16</span></dt><dd><p>logon count</p></dd><dt><span class="term">UINT16</span></dt><dd><p>bad password count</p></dd><dt><span class="term">UINT32</span></dt><dd><p>User ID</p></dd><dt><span class="term">UINT32</span></dt><dd><p>Group ID</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num groups</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer to groups.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>user flags</p></dd><dt><span class="term">char[16]</span></dt><dd><p>user session key</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon server unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon domain unicode string header</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented logon domain id pointer</p></dd><dt><span class="term">char[40]</span></dt><dd><p>40 undocumented padding bytes. future expansion?</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - num_other_sids?</p></dd><dt><span class="term">VOID*</span></dt><dd><p>NULL - undocumented pointer to other domain SIDs.</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>username unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>user's full name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon script unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>profile path unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>home directory unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>home directory drive unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num groups</p></dd><dt><span class="term">GID[num_groups]</span></dt><dd><p>group info</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon domain unicode string</p></dd><dt><span class="term">DOM_SID</span></dt><dd><p>domain SID</p></dd><dt><span class="term">DOM_SID[num_sids]</span></dt><dd><p>other domain SIDs?</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882642"></a>SH_INFO_1_PTR (pointers to level 1 share info strings)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: see cifsrap2.txt section5, page 10.</em></span></p><table class="simplelist" border="0" summary="Simple list"><tr><td>0 for shi1_type indicates a Disk.</td></tr><tr><td>1 for shi1_type indicates a Print Queue.</td></tr><tr><td>2 for shi1_type indicates a Device.</td></tr><tr><td>3 for shi1_type indicates an IPC pipe.</td></tr><tr><td>0x8000 0000 (top bit set in shi1_type) indicates a hidden share.</td></tr></table><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>shi1_netname - pointer to net name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>shi1_type - type of share. 0 - undocumented.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>shi1_remark - pointer to comment.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882736"></a>SH_INFO_1_STR (level 1 share info strings)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNISTR2</span></dt><dd><p>shi1_netname - unicode string of net name</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>shi1_remark - unicode string of comment.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882779"></a>SHARE_INFO_1_CTR</h4></div></div><div></div></div><p>share container with 0 entries:</p><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - Buffer</p></dd></dl></div><p>share container with > 0 entries:</p><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>non-zero - Buffer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">SH_INFO_1_PTR[EntriesRead]</span></dt><dd><p>share entry pointers</p></dd><dt><span class="term">SH_INFO_1_STR[EntriesRead]</span></dt><dd><p>share entry strings</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - padding</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882948"></a>SERVER_INFO_101</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1. </em></span></p><div class="variablelist"><dl><dt><span class="term">SV_TYPE_WORKSTATION</span></dt><dd><p>0x00000001 All workstations</p></dd><dt><span class="term">SV_TYPE_SERVER</span></dt><dd><p>0x00000002 All servers</p></dd><dt><span class="term">SV_TYPE_SQLSERVER</span></dt><dd><p>0x00000004 Any server running with SQL server</p></dd><dt><span class="term">SV_TYPE_DOMAIN_CTRL</span></dt><dd><p>0x00000008 Primary domain controller</p></dd><dt><span class="term">SV_TYPE_DOMAIN_BAKCTRL</span></dt><dd><p>0x00000010 Backup domain controller</p></dd><dt><span class="term">SV_TYPE_TIME_SOURCE</span></dt><dd><p>0x00000020 Server running the timesource service</p></dd><dt><span class="term">SV_TYPE_AFP</span></dt><dd><p>0x00000040 Apple File Protocol servers</p></dd><dt><span class="term">SV_TYPE_NOVELL</span></dt><dd><p>0x00000080 Novell servers</p></dd><dt><span class="term">SV_TYPE_DOMAIN_MEMBER</span></dt><dd><p>0x00000100 Domain Member</p></dd><dt><span class="term">SV_TYPE_PRINTQ_SERVER</span></dt><dd><p>0x00000200 Server sharing print queue</p></dd><dt><span class="term">SV_TYPE_DIALIN_SERVER</span></dt><dd><p>0x00000400 Server running dialin service.</p></dd><dt><span class="term">SV_TYPE_XENIX_SERVER</span></dt><dd><p>0x00000800 Xenix server</p></dd><dt><span class="term">SV_TYPE_NT</span></dt><dd><p>0x00001000 NT server</p></dd><dt><span class="term">SV_TYPE_WFW</span></dt><dd><p>0x00002000 Server running Windows for </p></dd><dt><span class="term">SV_TYPE_SERVER_NT</span></dt><dd><p>0x00008000 Windows NT non DC server</p></dd><dt><span class="term">SV_TYPE_POTENTIAL_BROWSER</span></dt><dd><p>0x00010000 Server that can run the browser service</p></dd><dt><span class="term">SV_TYPE_BACKUP_BROWSER</span></dt><dd><p>0x00020000 Backup browser server</p></dd><dt><span class="term">SV_TYPE_MASTER_BROWSER</span></dt><dd><p>0x00040000 Master browser server</p></dd><dt><span class="term">SV_TYPE_DOMAIN_MASTER</span></dt><dd><p>0x00080000 Domain Master Browser server</p></dd><dt><span class="term">SV_TYPE_LOCAL_LIST_ONLY</span></dt><dd><p>0x40000000 Enumerate only entries marked "local"</p></dd><dt><span class="term">SV_TYPE_DOMAIN_ENUM</span></dt><dd><p>0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.</p></dd></dl></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>500 - platform_id</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>5 - major version</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - minor version</p></dd><dt><span class="term">UINT32</span></dt><dd><p>type (SV_TYPE_... bit field)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to comment</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>sv101_name - unicode string of server name</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>sv_101_comment - unicode string of server comment.</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with start of the SMB header.</p></dd></dl></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883414"></a>MSRPC over Transact Named Pipe</h2></div></div><div></div></div><p>For details on the SMB Transact Named Pipe, see cifs6.txt</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883427"></a>MSRPC Pipes</h3></div></div><div></div></div><p> The MSRPC is conducted over an SMB Transact Pipe with a name of <tt class="filename">\PIPE\</tt>. You must first obtain a 16 bit file handle, by sending a SMBopenX with the pipe name <tt class="filename">\PIPE\srvsvc</tt> for @@ -1271,11 +1271,11 @@ listed below:</p><pre class="programlisting"> initial SMBopenX request: RPC API command 0x26 params: "\\PIPE\\lsarpc" 0x65 0x63; 0x72 0x70; 0x44 0x65; "\\PIPE\\srvsvc" 0x73 0x76; 0x4E 0x00; 0x5C 0x43; -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876729"></a>Header</h3></div></div><div></div></div><p>[section to be rewritten, following receipt of work by Duncan Stansfield]</p><p>Interesting note: if you set packed data representation to 0x0100 0000 -then all 4-byte and 2-byte word ordering is turned around!</p><p>The start of each of the NTLSA and NETLOGON named pipes begins with:</p><div class="segmentedlist"><p><b>offset: </b>00</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>5 - RPC major version</p><p><b>offset: </b>01</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>0 - RPC minor version</p><p><b>offset: </b>02</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>2 - RPC response packet</p><p><b>offset: </b>03</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>3 - (FirstFrag bit-wise or with LastFrag)</p><p><b>offset: </b>04</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>0x1000 0000 - packed data representation</p><p><b>offset: </b>08</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>fragment length - data size (bytes) inc header and tail.</p><p><b>offset: </b>0A</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>0 - authentication length </p><p><b>offset: </b>0C</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>call identifier. matches 12th UINT32 of incoming RPC data.</p><p><b>offset: </b>10</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>allocation hint - data size (bytes) minus header and tail.</p><p><b>offset: </b>14</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>0 - presentation context identifier</p><p><b>offset: </b>16</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>0 - cancel count</p><p><b>offset: </b>17</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>in replies: 0 - reserved; in requests: opnum - see #defines.</p><p><b>offset: </b>18</p><p><b>Variable type: </b>......</p><p><b>Variable data: </b>start of data (goes on for allocation_hint bytes)</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876919"></a>RPC_Packet for request, response, bind and bind acknowledgement</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8 versionmaj</span></dt><dd><p>reply same as request (0x05)</p></dd><dt><span class="term">UINT8 versionmin</span></dt><dd><p>reply same as request (0x00)</p></dd><dt><span class="term">UINT8 type</span></dt><dd><p>one of the MSRPC_Type enums</p></dd><dt><span class="term">UINT8 flags</span></dt><dd><p>reply same as request (0x00 for Bind, 0x03 for Request)</p></dd><dt><span class="term">UINT32 representation</span></dt><dd><p>reply same as request (0x00000010)</p></dd><dt><span class="term">UINT16 fraglength</span></dt><dd><p>the length of the data section of the SMB trans packet</p></dd><dt><span class="term">UINT16 authlength</span></dt><dd><p></p></dd><dt><span class="term">UINT32 callid</span></dt><dd><p>call identifier. (e.g. 0x00149594)</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p>the remainder of the packet depending on the "type"</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2877052"></a>Interface identification</h4></div></div><div></div></div><p>the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc</p><pre class="programlisting"> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883528"></a>Header</h3></div></div><div></div></div><p>[section to be rewritten, following receipt of work by Duncan Stansfield]</p><p>Interesting note: if you set packed data representation to 0x0100 0000 +then all 4-byte and 2-byte word ordering is turned around!</p><p>The start of each of the NTLSA and NETLOGON named pipes begins with:</p><div class="segmentedlist"><p><b>offset: </b>00</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>5 - RPC major version</p><p><b>offset: </b>01</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>0 - RPC minor version</p><p><b>offset: </b>02</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>2 - RPC response packet</p><p><b>offset: </b>03</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>3 - (FirstFrag bit-wise or with LastFrag)</p><p><b>offset: </b>04</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>0x1000 0000 - packed data representation</p><p><b>offset: </b>08</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>fragment length - data size (bytes) inc header and tail.</p><p><b>offset: </b>0A</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>0 - authentication length </p><p><b>offset: </b>0C</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>call identifier. matches 12th UINT32 of incoming RPC data.</p><p><b>offset: </b>10</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>allocation hint - data size (bytes) minus header and tail.</p><p><b>offset: </b>14</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>0 - presentation context identifier</p><p><b>offset: </b>16</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>0 - cancel count</p><p><b>offset: </b>17</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>in replies: 0 - reserved; in requests: opnum - see #defines.</p><p><b>offset: </b>18</p><p><b>Variable type: </b>......</p><p><b>Variable data: </b>start of data (goes on for allocation_hint bytes)</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883718"></a>RPC_Packet for request, response, bind and bind acknowledgement</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8 versionmaj</span></dt><dd><p>reply same as request (0x05)</p></dd><dt><span class="term">UINT8 versionmin</span></dt><dd><p>reply same as request (0x00)</p></dd><dt><span class="term">UINT8 type</span></dt><dd><p>one of the MSRPC_Type enums</p></dd><dt><span class="term">UINT8 flags</span></dt><dd><p>reply same as request (0x00 for Bind, 0x03 for Request)</p></dd><dt><span class="term">UINT32 representation</span></dt><dd><p>reply same as request (0x00000010)</p></dd><dt><span class="term">UINT16 fraglength</span></dt><dd><p>the length of the data section of the SMB trans packet</p></dd><dt><span class="term">UINT16 authlength</span></dt><dd><p></p></dd><dt><span class="term">UINT32 callid</span></dt><dd><p>call identifier. (e.g. 0x00149594)</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p>the remainder of the packet depending on the "type"</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883852"></a>Interface identification</h4></div></div><div></div></div><p>the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc</p><pre class="programlisting"> abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003) transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002) -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2877078"></a>RPC_Iface RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8 byte[16]</span></dt><dd><p>16 bytes of number</p></dd><dt><span class="term">UINT32 version</span></dt><dd><p>the interface number</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2877117"></a>RPC_ReqBind RW</h4></div></div><div></div></div><p>the remainder of the packet after the header if "type" was Bind in the response header, "type" should be BindAck</p><div class="variablelist"><dl><dt><span class="term">UINT16 maxtsize</span></dt><dd><p>maximum transmission fragment size (0x1630)</p></dd><dt><span class="term">UINT16 maxrsize</span></dt><dd><p>max receive fragment size (0x1630)</p></dd><dt><span class="term">UINT32 assocgid</span></dt><dd><p>associated group id (0x0)</p></dd><dt><span class="term">UINT32 numelements</span></dt><dd><p>the number of elements (0x1)</p></dd><dt><span class="term">UINT16 contextid</span></dt><dd><p>presentation context identifier (0x0)</p></dd><dt><span class="term">UINT8 numsyntaxes</span></dt><dd><p>the number of syntaxes (has always been 1?)(0x1)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">* abstractint USE RPC_Iface</span></dt><dd><p>num and vers. of interface client is using</p></dd><dt><span class="term">* transferint USE RPC_Iface</span></dt><dd><p>num and vers. of interface to use for replies</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2877258"></a>RPC_Address RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16 length</span></dt><dd><p>length of the string including null terminator</p></dd><dt><span class="term">* port USE string</span></dt><dd><p>the string above in single byte, null terminated form</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2877298"></a>RPC_ResBind RW</h4></div></div><div></div></div><p>the response to place after the header in the reply packet</p><div class="variablelist"><dl><dt><span class="term">UINT16 maxtsize</span></dt><dd><p>same as request</p></dd><dt><span class="term">UINT16 maxrsize</span></dt><dd><p>same as request</p></dd><dt><span class="term">UINT32 assocgid</span></dt><dd><p>zero</p></dd><dt><span class="term">* secondaddr USE RPC_Address</span></dt><dd><p>the address string, as described earlier</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">UINT8 numresults</span></dt><dd><p>the number of results (0x01)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">UINT16 result</span></dt><dd><p>result (0x00 = accept)</p></dd><dt><span class="term">UINT16 reason</span></dt><dd><p>reason (0x00 = no reason specified)</p></dd><dt><span class="term">* transfersyntax USE RPC_Iface</span></dt><dd><p>the transfer syntax from the request</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2877448"></a>RPC_ReqNorm RW</h4></div></div><div></div></div><p>the remainder of the packet after the header for every other other request</p><div class="variablelist"><dl><dt><span class="term">UINT32 allochint</span></dt><dd><p>the size of the stub data in bytes</p></dd><dt><span class="term">UINT16 prescontext</span></dt><dd><p>presentation context identifier (0x0)</p></dd><dt><span class="term">UINT16 opnum</span></dt><dd><p>operation number (0x15)</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p>a packet dependent on the pipe name (probably the interface) and the op number)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2877519"></a>RPC_ResNorm RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32 allochint</span></dt><dd><p># size of the stub data in bytes</p></dd><dt><span class="term">UINT16 prescontext</span></dt><dd><p># presentation context identifier (same as request)</p></dd><dt><span class="term">UINT8 cancelcount</span></dt><dd><p># cancel count? (0x0)</p></dd><dt><span class="term">UINT8 reserved</span></dt><dd><p># 0 - one byte padding</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p># the remainder of the reply</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877600"></a>Tail</h3></div></div><div></div></div><p>The end of each of the NTLSA and NETLOGON named pipes ends with:</p><div class="variablelist"><dl><dt><span class="term">......</span></dt><dd><p>end of data</p></dd><dt><span class="term">UINT32</span></dt><dd><p>return code</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877647"></a>RPC Bind / Bind Ack</h3></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883877"></a>RPC_Iface RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8 byte[16]</span></dt><dd><p>16 bytes of number</p></dd><dt><span class="term">UINT32 version</span></dt><dd><p>the interface number</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883916"></a>RPC_ReqBind RW</h4></div></div><div></div></div><p>the remainder of the packet after the header if "type" was Bind in the response header, "type" should be BindAck</p><div class="variablelist"><dl><dt><span class="term">UINT16 maxtsize</span></dt><dd><p>maximum transmission fragment size (0x1630)</p></dd><dt><span class="term">UINT16 maxrsize</span></dt><dd><p>max receive fragment size (0x1630)</p></dd><dt><span class="term">UINT32 assocgid</span></dt><dd><p>associated group id (0x0)</p></dd><dt><span class="term">UINT32 numelements</span></dt><dd><p>the number of elements (0x1)</p></dd><dt><span class="term">UINT16 contextid</span></dt><dd><p>presentation context identifier (0x0)</p></dd><dt><span class="term">UINT8 numsyntaxes</span></dt><dd><p>the number of syntaxes (has always been 1?)(0x1)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">* abstractint USE RPC_Iface</span></dt><dd><p>num and vers. of interface client is using</p></dd><dt><span class="term">* transferint USE RPC_Iface</span></dt><dd><p>num and vers. of interface to use for replies</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884057"></a>RPC_Address RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16 length</span></dt><dd><p>length of the string including null terminator</p></dd><dt><span class="term">* port USE string</span></dt><dd><p>the string above in single byte, null terminated form</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884097"></a>RPC_ResBind RW</h4></div></div><div></div></div><p>the response to place after the header in the reply packet</p><div class="variablelist"><dl><dt><span class="term">UINT16 maxtsize</span></dt><dd><p>same as request</p></dd><dt><span class="term">UINT16 maxrsize</span></dt><dd><p>same as request</p></dd><dt><span class="term">UINT32 assocgid</span></dt><dd><p>zero</p></dd><dt><span class="term">* secondaddr USE RPC_Address</span></dt><dd><p>the address string, as described earlier</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">UINT8 numresults</span></dt><dd><p>the number of results (0x01)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">UINT16 result</span></dt><dd><p>result (0x00 = accept)</p></dd><dt><span class="term">UINT16 reason</span></dt><dd><p>reason (0x00 = no reason specified)</p></dd><dt><span class="term">* transfersyntax USE RPC_Iface</span></dt><dd><p>the transfer syntax from the request</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884247"></a>RPC_ReqNorm RW</h4></div></div><div></div></div><p>the remainder of the packet after the header for every other other request</p><div class="variablelist"><dl><dt><span class="term">UINT32 allochint</span></dt><dd><p>the size of the stub data in bytes</p></dd><dt><span class="term">UINT16 prescontext</span></dt><dd><p>presentation context identifier (0x0)</p></dd><dt><span class="term">UINT16 opnum</span></dt><dd><p>operation number (0x15)</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p>a packet dependent on the pipe name (probably the interface) and the op number)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884319"></a>RPC_ResNorm RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32 allochint</span></dt><dd><p># size of the stub data in bytes</p></dd><dt><span class="term">UINT16 prescontext</span></dt><dd><p># presentation context identifier (same as request)</p></dd><dt><span class="term">UINT8 cancelcount</span></dt><dd><p># cancel count? (0x0)</p></dd><dt><span class="term">UINT8 reserved</span></dt><dd><p># 0 - one byte padding</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p># the remainder of the reply</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884399"></a>Tail</h3></div></div><div></div></div><p>The end of each of the NTLSA and NETLOGON named pipes ends with:</p><div class="variablelist"><dl><dt><span class="term">......</span></dt><dd><p>end of data</p></dd><dt><span class="term">UINT32</span></dt><dd><p>return code</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884445"></a>RPC Bind / Bind Ack</h3></div></div><div></div></div><p> RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc) with a "transfer syntax" (see RPC_Iface structure). The purpose for doing this is unknown. @@ -1283,7 +1283,7 @@ this is unknown. returned by the SMBopenX Transact response.</em></span></p><p><span class="emphasis"><em>Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the same in the response as the same members in the RPC_ReqBind. The RPC_ResBind member transfersyntax is the same in the response as the</em></span></p><p><span class="emphasis"><em>Note: The RPC_ResBind response member secondaddr contains the name of what is presumed to be the service behind the RPC pipe. The - mapping identified so far is:</em></span></p><div class="variablelist"><dl><dt><span class="term">initial SMBopenX request:</span></dt><dd><p>RPC_ResBind response:</p></dd><dt><span class="term">"\\PIPE\\srvsvc"</span></dt><dd><p>"\\PIPE\\ntsvcs"</p></dd><dt><span class="term">"\\PIPE\\samr"</span></dt><dd><p>"\\PIPE\\lsass"</p></dd><dt><span class="term">"\\PIPE\\lsarpc"</span></dt><dd><p>"\\PIPE\\lsass"</p></dd><dt><span class="term">"\\PIPE\\wkssvc"</span></dt><dd><p>"\\PIPE\\wksvcs"</p></dd><dt><span class="term">"\\PIPE\\NETLOGON"</span></dt><dd><p>"\\PIPE\\NETLOGON"</p></dd></dl></div><p><span class="emphasis"><em>Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.</em></span></p><p>Request:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>RPC_Packet</td></tr><tr><td>RPC_ReqBind</td></tr></table><p>Response:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>RPC_Packet</td></tr><tr><td>RPC_ResBind</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877826"></a>NTLSA Transact Named Pipe</h3></div></div><div></div></div><p>The sequence of actions taken on this pipe are:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.</td></tr><tr><td>Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle.</td></tr><tr><td>Using the file handle, send a Set Named Pipe Handle state to 0x4300.</td></tr><tr><td>Send an LSA Open Policy request. Store the Policy Handle.</td></tr><tr><td>Using the Policy Handle, send LSA Query Info Policy requests, etc.</td></tr><tr><td>Using the Policy Handle, send an LSA Close.</td></tr><tr><td>Close the IPC$ share.</td></tr></table><p>Defines for this pipe, identifying the query are:</p><div class="variablelist"><dl><dt><span class="term">LSA Open Policy:</span></dt><dd><p>0x2c</p></dd><dt><span class="term">LSA Query Info Policy:</span></dt><dd><p>0x07</p></dd><dt><span class="term">LSA Enumerate Trusted Domains:</span></dt><dd><p>0x0d</p></dd><dt><span class="term">LSA Open Secret:</span></dt><dd><p>0xff</p></dd><dt><span class="term">LSA Lookup SIDs:</span></dt><dd><p>0xfe</p></dd><dt><span class="term">LSA Lookup Names:</span></dt><dd><p>0xfd</p></dd><dt><span class="term">LSA Close:</span></dt><dd><p>0x00</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877991"></a>LSA Open Policy</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: The policy handle can be anything you like.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878004"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>server name - unicode string starting with two '\'s</p></dd><dt><span class="term">OBJ_ATTR</span></dt><dd><p>object attributes</p></dd><dt><span class="term">UINT32</span></dt><dd><p>1 - desired access</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878075"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">return</span></dt><dd><p>0 - indicates success</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878118"></a>LSA Query Info Policy</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: The info class in response must be the same as that in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878132"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT16</span></dt><dd><p>info class (also a policy handle?)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878170"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT16</span></dt><dd><p>info class (same as info class in request).</p></dd></dl></div><pre class="programlisting"> + mapping identified so far is:</em></span></p><div class="variablelist"><dl><dt><span class="term">initial SMBopenX request:</span></dt><dd><p>RPC_ResBind response:</p></dd><dt><span class="term">"\\PIPE\\srvsvc"</span></dt><dd><p>"\\PIPE\\ntsvcs"</p></dd><dt><span class="term">"\\PIPE\\samr"</span></dt><dd><p>"\\PIPE\\lsass"</p></dd><dt><span class="term">"\\PIPE\\lsarpc"</span></dt><dd><p>"\\PIPE\\lsass"</p></dd><dt><span class="term">"\\PIPE\\wkssvc"</span></dt><dd><p>"\\PIPE\\wksvcs"</p></dd><dt><span class="term">"\\PIPE\\NETLOGON"</span></dt><dd><p>"\\PIPE\\NETLOGON"</p></dd></dl></div><p><span class="emphasis"><em>Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.</em></span></p><p>Request:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>RPC_Packet</td></tr><tr><td>RPC_ReqBind</td></tr></table><p>Response:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>RPC_Packet</td></tr><tr><td>RPC_ResBind</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884625"></a>NTLSA Transact Named Pipe</h3></div></div><div></div></div><p>The sequence of actions taken on this pipe are:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.</td></tr><tr><td>Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle.</td></tr><tr><td>Using the file handle, send a Set Named Pipe Handle state to 0x4300.</td></tr><tr><td>Send an LSA Open Policy request. Store the Policy Handle.</td></tr><tr><td>Using the Policy Handle, send LSA Query Info Policy requests, etc.</td></tr><tr><td>Using the Policy Handle, send an LSA Close.</td></tr><tr><td>Close the IPC$ share.</td></tr></table><p>Defines for this pipe, identifying the query are:</p><div class="variablelist"><dl><dt><span class="term">LSA Open Policy:</span></dt><dd><p>0x2c</p></dd><dt><span class="term">LSA Query Info Policy:</span></dt><dd><p>0x07</p></dd><dt><span class="term">LSA Enumerate Trusted Domains:</span></dt><dd><p>0x0d</p></dd><dt><span class="term">LSA Open Secret:</span></dt><dd><p>0xff</p></dd><dt><span class="term">LSA Lookup SIDs:</span></dt><dd><p>0xfe</p></dd><dt><span class="term">LSA Lookup Names:</span></dt><dd><p>0xfd</p></dd><dt><span class="term">LSA Close:</span></dt><dd><p>0x00</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884790"></a>LSA Open Policy</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: The policy handle can be anything you like.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884803"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>server name - unicode string starting with two '\'s</p></dd><dt><span class="term">OBJ_ATTR</span></dt><dd><p>object attributes</p></dd><dt><span class="term">UINT32</span></dt><dd><p>1 - desired access</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884873"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">return</span></dt><dd><p>0 - indicates success</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884916"></a>LSA Query Info Policy</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: The info class in response must be the same as that in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884930"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT16</span></dt><dd><p>info class (also a policy handle?)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884968"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT16</span></dt><dd><p>info class (same as info class in request).</p></dd></dl></div><pre class="programlisting"> switch (info class) case 3: case 5: @@ -1292,11 +1292,11 @@ DOM_INFO domain info, levels 3 and 5 (are the same). } return 0 - indicates success -</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878223"></a>LSA Enumerate Trusted Domains</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878230"></a>Request</h4></div></div><div></div></div><p>no extra data</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878243"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - enumeration context</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - entries read</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - trust information</p></dd><dt><span class="term">return</span></dt><dd><p>0x8000 001a - "no trusted domains" success code</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878315"></a>LSA Open Secret</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878322"></a>Request</h4></div></div><div></div></div><p>no extra data</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878334"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd></dl></div><p>return 0x0C00 0034 - "no such secret" success code</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878424"></a>LSA Close</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878432"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>policy handle to be closed</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878459"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>0s - closed policy handle (all zeros)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878490"></a>LSA Lookup SIDS</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: num_entries in response must be same as num_entries in request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878504"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer</p></dd><dt><span class="term">VOID*[num_entries] undocumented domain SID pointers to be looked up. -</span></dt><dd><p>DOM_SID[num_entries] domain SIDs to be looked up.</p></dd><dt><span class="term">char[16]</span></dt><dd><p>completely undocumented 16 bytes.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878604"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">DOM_REF</span></dt><dd><p>domain reference response</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">DOM_SID2[num_entries]</span></dt><dd><p>domain SIDs (from Request, listed above).</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878700"></a>LSA Lookup Names</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: num_entries in response must be same as num_entries in request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878714"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer</p></dd><dt><span class="term">NAME[num_entries]</span></dt><dd><p>names to be looked up.</p></dd><dt><span class="term">char[]</span></dt><dd><p>undocumented bytes - falsely translated SID structure?</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878828"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">DOM_REF</span></dt><dd><p>domain reference response</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">DOM_RID[num_entries]</span></dt><dd><p>domain SIDs (from Request, listed above).</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd></dl></div><p>return 0 - indicates success</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878926"></a>NETLOGON rpc Transact Named Pipe</h2></div></div><div></div></div><p>The sequence of actions taken on this pipe are:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.</td></tr><tr><td>en an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle.</td></tr><tr><td>ing the file handle, send a Set Named Pipe Handle state to 0x4300.</td></tr><tr><td>eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.</td></tr><tr><td>lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.</td></tr><tr><td>lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.</td></tr><tr><td>lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.</td></tr><tr><td>lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.</td></tr><tr><td>ose the IPC$ share.</td></tr></table><p>Defines for this pipe, identifying the query are</p><div class="variablelist"><dl><dt><span class="term">LSA Request Challenge:</span></dt><dd><p>0x04</p></dd><dt><span class="term">LSA Server Password Set:</span></dt><dd><p>0x06</p></dd><dt><span class="term">LSA SAM Logon:</span></dt><dd><p>0x02</p></dd><dt><span class="term">LSA SAM Logoff:</span></dt><dd><p>0x03</p></dd><dt><span class="term">LSA Auth 2:</span></dt><dd><p>0x0f</p></dd><dt><span class="term">LSA Logon Control:</span></dt><dd><p>0x0e</p></dd></dl></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879087"></a>LSA Request Challenge</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><p><span class="emphasis"><em>Note: logon client is the machine, not the user.</em></span></p><p><span class="emphasis"><em>Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879119"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client unicode string</p></dd><dt><span class="term">char[8]</span></dt><dd><p>client challenge</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879189"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>server challenge</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879222"></a>LSA Authenticate 2</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</em></span></p><p><span class="emphasis"><em>Note: neg_flags in the response is the same as that in the request.</em></span></p><p><span class="emphasis"><em>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879252"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">LOG_INFO</span></dt><dd><p>client identification info</p></dd><dt><span class="term">char[8]</span></dt><dd><p>client-calculated credentials</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 4-byte align with start of SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>neg_flags - negotiated flags (usual value is 0x0000 01ff)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879321"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>server credentials.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>neg_flags - same as neg_flags in request.</p></dd></dl></div><p>return 0 - indicates success. failure value unknown.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879369"></a>LSA Server Password Set</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: the new password is suspected to be a DES encryption using the old password to generate the key.</em></span></p><p><span class="emphasis"><em>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</em></span></p><p><span class="emphasis"><em>Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.</em></span></p><p><span class="emphasis"><em>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879408"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">CLNT_INFO</span></dt><dd><p>client identification/authentication info</p></dd><dt><span class="term">char[]</span></dt><dd><p>new password - undocumented.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879450"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><p>return 0 - indicates success; 0xC000 006a indicates failure</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879484"></a>LSA SAM Logon</h3></div></div><div></div></div><p><span class="emphasis"><em> +</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885022"></a>LSA Enumerate Trusted Domains</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885029"></a>Request</h4></div></div><div></div></div><p>no extra data</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885042"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - enumeration context</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - entries read</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - trust information</p></dd><dt><span class="term">return</span></dt><dd><p>0x8000 001a - "no trusted domains" success code</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885113"></a>LSA Open Secret</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885120"></a>Request</h4></div></div><div></div></div><p>no extra data</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885133"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd></dl></div><p>return 0x0C00 0034 - "no such secret" success code</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885223"></a>LSA Close</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885230"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>policy handle to be closed</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885257"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>0s - closed policy handle (all zeros)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885289"></a>LSA Lookup SIDS</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: num_entries in response must be same as num_entries in request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885302"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer</p></dd><dt><span class="term">VOID*[num_entries] undocumented domain SID pointers to be looked up. +</span></dt><dd><p>DOM_SID[num_entries] domain SIDs to be looked up.</p></dd><dt><span class="term">char[16]</span></dt><dd><p>completely undocumented 16 bytes.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885402"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">DOM_REF</span></dt><dd><p>domain reference response</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">DOM_SID2[num_entries]</span></dt><dd><p>domain SIDs (from Request, listed above).</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885498"></a>LSA Lookup Names</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: num_entries in response must be same as num_entries in request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885512"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer</p></dd><dt><span class="term">NAME[num_entries]</span></dt><dd><p>names to be looked up.</p></dd><dt><span class="term">char[]</span></dt><dd><p>undocumented bytes - falsely translated SID structure?</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885626"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">DOM_REF</span></dt><dd><p>domain reference response</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">DOM_RID[num_entries]</span></dt><dd><p>domain SIDs (from Request, listed above).</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd></dl></div><p>return 0 - indicates success</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885724"></a>NETLOGON rpc Transact Named Pipe</h2></div></div><div></div></div><p>The sequence of actions taken on this pipe are:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.</td></tr><tr><td>en an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle.</td></tr><tr><td>ing the file handle, send a Set Named Pipe Handle state to 0x4300.</td></tr><tr><td>eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.</td></tr><tr><td>lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.</td></tr><tr><td>lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.</td></tr><tr><td>lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.</td></tr><tr><td>lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.</td></tr><tr><td>ose the IPC$ share.</td></tr></table><p>Defines for this pipe, identifying the query are</p><div class="variablelist"><dl><dt><span class="term">LSA Request Challenge:</span></dt><dd><p>0x04</p></dd><dt><span class="term">LSA Server Password Set:</span></dt><dd><p>0x06</p></dd><dt><span class="term">LSA SAM Logon:</span></dt><dd><p>0x02</p></dd><dt><span class="term">LSA SAM Logoff:</span></dt><dd><p>0x03</p></dd><dt><span class="term">LSA Auth 2:</span></dt><dd><p>0x0f</p></dd><dt><span class="term">LSA Logon Control:</span></dt><dd><p>0x0e</p></dd></dl></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885885"></a>LSA Request Challenge</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><p><span class="emphasis"><em>Note: logon client is the machine, not the user.</em></span></p><p><span class="emphasis"><em>Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885917"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client unicode string</p></dd><dt><span class="term">char[8]</span></dt><dd><p>client challenge</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885986"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>server challenge</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886019"></a>LSA Authenticate 2</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</em></span></p><p><span class="emphasis"><em>Note: neg_flags in the response is the same as that in the request.</em></span></p><p><span class="emphasis"><em>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886050"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">LOG_INFO</span></dt><dd><p>client identification info</p></dd><dt><span class="term">char[8]</span></dt><dd><p>client-calculated credentials</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 4-byte align with start of SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>neg_flags - negotiated flags (usual value is 0x0000 01ff)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886118"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>server credentials.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>neg_flags - same as neg_flags in request.</p></dd></dl></div><p>return 0 - indicates success. failure value unknown.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886166"></a>LSA Server Password Set</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: the new password is suspected to be a DES encryption using the old password to generate the key.</em></span></p><p><span class="emphasis"><em>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</em></span></p><p><span class="emphasis"><em>Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.</em></span></p><p><span class="emphasis"><em>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886206"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">CLNT_INFO</span></dt><dd><p>client identification/authentication info</p></dd><dt><span class="term">char[]</span></dt><dd><p>new password - undocumented.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886247"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><p>return 0 - indicates success; 0xC000 006a indicates failure</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886282"></a>LSA SAM Logon</h3></div></div><div></div></div><p><span class="emphasis"><em> Note: valid_user is True iff the username and password hash are valid for the requested domain. -</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879498"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">SAM_INFO</span></dt><dd><p>sam_id structure</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879526"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><pre class="programlisting"> +</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886296"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">SAM_INFO</span></dt><dd><p>sam_id structure</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886323"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><pre class="programlisting"> if (valid_user) { UINT16 3 - switch value indicating USER_INFO structure. @@ -1316,16 +1316,16 @@ else return 0xC000 0064 - NT_STATUS_NO_SUCH_USER. } -</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879598"></a>LSA SAM Logoff</h3></div></div><div></div></div><p><span class="emphasis"><em> +</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886384"></a>LSA SAM Logoff</h3></div></div><div></div></div><p><span class="emphasis"><em> Note: presumably, the SAM_INFO structure is validated, and a (currently undocumented) error code returned if the Logoff is invalid. -</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879612"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">SAM_INFO</span></dt><dd><p>sam_id structure</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879639"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><p>return 0 - indicates success. undocumented failure indication.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879689"></a>\\MAILSLOT\NET\NTLOGON</h2></div></div><div></div></div><p><span class="emphasis"><em> +</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886400"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">SAM_INFO</span></dt><dd><p>sam_id structure</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886426"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><p>return 0 - indicates success. undocumented failure indication.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886476"></a>\\MAILSLOT\NET\NTLOGON</h2></div></div><div></div></div><p><span class="emphasis"><em> Note: mailslots will contain a response mailslot, to which the response should be sent. the target NetBIOS name is REQUEST_NAME<20>, where REQUEST_NAME is the name of the machine that sent the request. -</em></span></p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879701"></a>Query for PDC</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879721"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0007 - Query for PDC</p></dd><dt><span class="term">STR</span></dt><dd><p>machine name</p></dd><dt><span class="term">STR</span></dt><dd><p>response mailslot</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 2-byte align with start of mailslot.</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879848"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x000A - Respose to Query for PDC</p></dd><dt><span class="term">STR</span></dt><dd><p>machine name (in uppercase)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 2-byte align with start of mailslot.</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion (same as received in request)</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken (same as received in request)</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token (same as received in request)</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879969"></a>SAM Logon</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: machine name in response is preceded by two '\' characters.</em></span></p><p><span class="emphasis"><em>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</em></span></p><p><span class="emphasis"><em>Note: user name in the response is presumably the same as that in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879997"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0012 - SAM Logon</p></dd><dt><span class="term">UINT16</span></dt><dd><p>request count</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>user name</p></dd><dt><span class="term">STR</span></dt><dd><p>response mailslot</p></dd><dt><span class="term">UINT32</span></dt><dd><p>alloweable account</p></dd><dt><span class="term">UINT32</span></dt><dd><p>domain SID size</p></dd><dt><span class="term">char[sid_size]</span></dt><dd><p>domain SID, of sid_size bytes.</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>???? padding to 4? 2? -byte align with start of mailslot.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2880180"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0013 - Response to SAM Logon</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>user name - workstation trust account</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name </p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880294"></a>SRVSVC Transact Named Pipe</h2></div></div><div></div></div><p>Defines for this pipe, identifying the query are:</p><div class="variablelist"><dl><dt><span class="term">Net Share Enum</span></dt><dd><p>0x0f</p></dd><dt><span class="term">Net Server Get Info</span></dt><dd><p>0x15</p></dd></dl></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880339"></a>Net Share Enum</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: share level and switch value in the response are presumably the same as those in the request.</em></span></p><p><span class="emphasis"><em>Note: cifsrap2.txt (section 5) may be of limited assistance here.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2880360"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>pointer (to server name?)</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>server name</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with the start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>share level</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch value</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SHARE_INFO_1_CTR</p></dd><dt><span class="term">SHARE_INFO_1_CTR</span></dt><dd><p>share info with 0 entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>preferred maximum length (0xffff ffff)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2880485"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>share level</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch value</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SHARE_INFO_1_CTR</p></dd><dt><span class="term">SHARE_INFO_1_CTR</span></dt><dd><p>share info (only added if share info ptr is non-zero)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880558"></a>Net Server Get Info</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: level is the same value as in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2880572"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNISTR2</span></dt><dd><p>server name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch level</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2880613"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>switch level</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SERVER_INFO_101</p></dd><dt><span class="term">SERVER_INFO_101</span></dt><dd><p>server info (only added if server info ptr is non-zero)</p></dd></dl></div><p>return 0 - indicates success</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880674"></a>Cryptographic side of NT Domain Authentication</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880682"></a>Definitions</h3></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Add(A1,A2)</span></dt><dd><p>Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2</p></dd><dt><span class="term">E(K,D)</span></dt><dd><p>DES ECB encryption of 8 byte data D using 7 byte key K</p></dd><dt><span class="term">lmowf()</span></dt><dd><p>Lan man hash</p></dd><dt><span class="term">ntowf()</span></dt><dd><p>NT hash</p></dd><dt><span class="term">PW</span></dt><dd><p>md4(machine_password) == md4(lsadump $machine.acc) == +</em></span></p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886493"></a>Query for PDC</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886507"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0007 - Query for PDC</p></dd><dt><span class="term">STR</span></dt><dd><p>machine name</p></dd><dt><span class="term">STR</span></dt><dd><p>response mailslot</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 2-byte align with start of mailslot.</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886634"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x000A - Respose to Query for PDC</p></dd><dt><span class="term">STR</span></dt><dd><p>machine name (in uppercase)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 2-byte align with start of mailslot.</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion (same as received in request)</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken (same as received in request)</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token (same as received in request)</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886755"></a>SAM Logon</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: machine name in response is preceded by two '\' characters.</em></span></p><p><span class="emphasis"><em>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</em></span></p><p><span class="emphasis"><em>Note: user name in the response is presumably the same as that in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886782"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0012 - SAM Logon</p></dd><dt><span class="term">UINT16</span></dt><dd><p>request count</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>user name</p></dd><dt><span class="term">STR</span></dt><dd><p>response mailslot</p></dd><dt><span class="term">UINT32</span></dt><dd><p>alloweable account</p></dd><dt><span class="term">UINT32</span></dt><dd><p>domain SID size</p></dd><dt><span class="term">char[sid_size]</span></dt><dd><p>domain SID, of sid_size bytes.</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>???? padding to 4? 2? -byte align with start of mailslot.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886966"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0013 - Response to SAM Logon</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>user name - workstation trust account</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name </p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887080"></a>SRVSVC Transact Named Pipe</h2></div></div><div></div></div><p>Defines for this pipe, identifying the query are:</p><div class="variablelist"><dl><dt><span class="term">Net Share Enum</span></dt><dd><p>0x0f</p></dd><dt><span class="term">Net Server Get Info</span></dt><dd><p>0x15</p></dd></dl></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887125"></a>Net Share Enum</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: share level and switch value in the response are presumably the same as those in the request.</em></span></p><p><span class="emphasis"><em>Note: cifsrap2.txt (section 5) may be of limited assistance here.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887146"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>pointer (to server name?)</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>server name</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with the start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>share level</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch value</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SHARE_INFO_1_CTR</p></dd><dt><span class="term">SHARE_INFO_1_CTR</span></dt><dd><p>share info with 0 entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>preferred maximum length (0xffff ffff)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887271"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>share level</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch value</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SHARE_INFO_1_CTR</p></dd><dt><span class="term">SHARE_INFO_1_CTR</span></dt><dd><p>share info (only added if share info ptr is non-zero)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887345"></a>Net Server Get Info</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: level is the same value as in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887358"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNISTR2</span></dt><dd><p>server name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch level</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887399"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>switch level</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SERVER_INFO_101</p></dd><dt><span class="term">SERVER_INFO_101</span></dt><dd><p>server info (only added if server info ptr is non-zero)</p></dd></dl></div><p>return 0 - indicates success</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887461"></a>Cryptographic side of NT Domain Authentication</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887469"></a>Definitions</h3></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Add(A1,A2)</span></dt><dd><p>Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2</p></dd><dt><span class="term">E(K,D)</span></dt><dd><p>DES ECB encryption of 8 byte data D using 7 byte key K</p></dd><dt><span class="term">lmowf()</span></dt><dd><p>Lan man hash</p></dd><dt><span class="term">ntowf()</span></dt><dd><p>NT hash</p></dd><dt><span class="term">PW</span></dt><dd><p>md4(machine_password) == md4(lsadump $machine.acc) == pwdump(machine$) (initially) == md4(lmowf(unicode(machine))) -</p></dd><dt><span class="term">ARC4(K,Lk,D,Ld)</span></dt><dd><p>ARC4 encryption of data D of length Ld with key K of length Lk</p></dd><dt><span class="term">v[m..n(,l)]</span></dt><dd><p>subset of v from bytes m to n, optionally padded with zeroes to length l</p></dd><dt><span class="term">Cred(K,D)</span></dt><dd><p>E(K[7..7,7],E(K[0..6],D)) computes a credential</p></dd><dt><span class="term">Time()</span></dt><dd><p>4 byte current time</p></dd><dt><span class="term">Cc,Cs</span></dt><dd><p>8 byte client and server challenges Rc,Rs: 8 byte client and server credentials</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880845"></a>Protocol</h3></div></div><div></div></div><pre class="programlisting"> +</p></dd><dt><span class="term">ARC4(K,Lk,D,Ld)</span></dt><dd><p>ARC4 encryption of data D of length Ld with key K of length Lk</p></dd><dt><span class="term">v[m..n(,l)]</span></dt><dd><p>subset of v from bytes m to n, optionally padded with zeroes to length l</p></dd><dt><span class="term">Cred(K,D)</span></dt><dd><p>E(K[7..7,7],E(K[0..6],D)) computes a credential</p></dd><dt><span class="term">Time()</span></dt><dd><p>4 byte current time</p></dd><dt><span class="term">Cc,Cs</span></dt><dd><p>8 byte client and server challenges Rc,Rs: 8 byte client and server credentials</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887631"></a>Protocol</h3></div></div><div></div></div><pre class="programlisting"> C->S ReqChal,Cc S->C Cs </pre><pre class="programlisting"> @@ -1361,7 +1361,7 @@ S: Ts = Time() S->C Cred(Ks,Cred(Ks,Rc+Tc+1)),userinfo(logon script,UID,SIDs,etc) C: assert(Rs == Cred(Ks,Cred(Rc+Tc+1)) C: Rc = Cred(Ks,Rc+Tc+1) -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880942"></a>Comments</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887711"></a>Comments</h3></div></div><div></div></div><p> On first joining the domain the session key could be computed by anyone listening in on the network as the machine password has a well known value. Until the machine is rebooted it will use this session @@ -1382,30 +1382,30 @@ returned by the server. The password OWFs should NOT be sent over the network reversibly encrypted. They should be sent using ARC4(Ks,md4(owf)) with the server computing the same function using the owf values in the SAM. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880991"></a>SIDs and RIDs</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887760"></a>SIDs and RIDs</h2></div></div><div></div></div><p> SIDs and RIDs are well documented elsewhere. </p><p> A SID is an NT Security ID (see DOM_SID structure). They are of the form: </p><table class="simplelist" border="0" summary="Simple list"><tr><td>revision-NN-SubAuth1-SubAuth2-SubAuth3... </td></tr><tr><td>revision-0xNNNNNNNNNNNN-SubAuth1-SubAuth2-SubAuth3...</td></tr></table><p> currently, the SID revision is 1. The Sub-Authorities are known as Relative IDs (RIDs). -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881031"></a>Well-known SIDs</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881038"></a>Universal well-known SIDs</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Null SID</span></dt><dd><p>S-1-0-0</p></dd><dt><span class="term">World</span></dt><dd><p>S-1-1-0</p></dd><dt><span class="term">Local</span></dt><dd><p>S-1-2-0</p></dd><dt><span class="term">Creator Owner ID</span></dt><dd><p>S-1-3-0</p></dd><dt><span class="term">Creator Group ID</span></dt><dd><p>S-1-3-1</p></dd><dt><span class="term">Creator Owner Server ID</span></dt><dd><p>S-1-3-2</p></dd><dt><span class="term">Creator Group Server ID</span></dt><dd><p>S-1-3-3</p></dd><dt><span class="term">(Non-unique IDs)</span></dt><dd><p>S-1-4</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881165"></a>NT well-known SIDs</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">NT Authority</span></dt><dd><p>S-1-5</p></dd><dt><span class="term">Dialup</span></dt><dd><p>S-1-5-1</p></dd><dt><span class="term">Network</span></dt><dd><p>S-1-5-2</p></dd><dt><span class="term">Batch</span></dt><dd><p>S-1-5-3</p></dd><dt><span class="term">Interactive</span></dt><dd><p>S-1-5-4</p></dd><dt><span class="term">Service</span></dt><dd><p>S-1-5-6</p></dd><dt><span class="term">AnonymousLogon(aka null logon session)</span></dt><dd><p>S-1-5-7</p></dd><dt><span class="term">Proxy</span></dt><dd><p>S-1-5-8</p></dd><dt><span class="term">ServerLogon(aka domain controller account)</span></dt><dd><p>S-1-5-8</p></dd><dt><span class="term">(Logon IDs)</span></dt><dd><p>S-1-5-5-X-Y</p></dd><dt><span class="term">(NT non-unique IDs)</span></dt><dd><p>S-1-5-0x15-...</p></dd><dt><span class="term">(Built-in domain)</span></dt><dd><p>s-1-5-0x20</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881346"></a>Well-known RIDS</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887800"></a>Well-known SIDs</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887807"></a>Universal well-known SIDs</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Null SID</span></dt><dd><p>S-1-0-0</p></dd><dt><span class="term">World</span></dt><dd><p>S-1-1-0</p></dd><dt><span class="term">Local</span></dt><dd><p>S-1-2-0</p></dd><dt><span class="term">Creator Owner ID</span></dt><dd><p>S-1-3-0</p></dd><dt><span class="term">Creator Group ID</span></dt><dd><p>S-1-3-1</p></dd><dt><span class="term">Creator Owner Server ID</span></dt><dd><p>S-1-3-2</p></dd><dt><span class="term">Creator Group Server ID</span></dt><dd><p>S-1-3-3</p></dd><dt><span class="term">(Non-unique IDs)</span></dt><dd><p>S-1-4</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887933"></a>NT well-known SIDs</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">NT Authority</span></dt><dd><p>S-1-5</p></dd><dt><span class="term">Dialup</span></dt><dd><p>S-1-5-1</p></dd><dt><span class="term">Network</span></dt><dd><p>S-1-5-2</p></dd><dt><span class="term">Batch</span></dt><dd><p>S-1-5-3</p></dd><dt><span class="term">Interactive</span></dt><dd><p>S-1-5-4</p></dd><dt><span class="term">Service</span></dt><dd><p>S-1-5-6</p></dd><dt><span class="term">AnonymousLogon(aka null logon session)</span></dt><dd><p>S-1-5-7</p></dd><dt><span class="term">Proxy</span></dt><dd><p>S-1-5-8</p></dd><dt><span class="term">ServerLogon(aka domain controller account)</span></dt><dd><p>S-1-5-8</p></dd><dt><span class="term">(Logon IDs)</span></dt><dd><p>S-1-5-5-X-Y</p></dd><dt><span class="term">(NT non-unique IDs)</span></dt><dd><p>S-1-5-0x15-...</p></dd><dt><span class="term">(Built-in domain)</span></dt><dd><p>s-1-5-0x20</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888114"></a>Well-known RIDS</h3></div></div><div></div></div><p> A RID is a sub-authority value, as part of either a SID, or in the case of Group RIDs, part of the DOM_GID structure, in the USER_INFO_1 structure, in the LSA SAM Logon response. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881360"></a>Well-known RID users</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b>DOMAIN_USER_RID_ADMIN</p><p><b>????: </b>0x0000</p><p><b>RID: </b>01F4</p><p><b>Groupname: </b>DOMAIN_USER_RID_GUEST</p><p><b>????: </b>0x0000</p><p><b>RID: </b>01F5</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881409"></a>Well-known RID groups</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b> DOMAIN_GROUP_RID_ADMINS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0200</p><p><b>Groupname: </b> DOMAIN_GROUP_RID_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0201</p><p><b>Groupname: </b> DOMAIN_GROUP_RID_GUESTS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0202</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881468"></a>Well-known RID aliases</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b> DOMAIN_ALIAS_RID_ADMINS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0220</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0221</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_GUESTS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0222</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_POWER_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0223</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_ACCOUNT_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0224</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_SYSTEM_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0225</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_PRINT_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0226</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_BACKUP_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0227</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_REPLICATOR</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0228</p></div></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter11.Samba Printing Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2890028">Abstract</a></dt><dt><a href="#id2890044"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888129"></a>Well-known RID users</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b>DOMAIN_USER_RID_ADMIN</p><p><b>????: </b>0x0000</p><p><b>RID: </b>01F4</p><p><b>Groupname: </b>DOMAIN_USER_RID_GUEST</p><p><b>????: </b>0x0000</p><p><b>RID: </b>01F5</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888177"></a>Well-known RID groups</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b> DOMAIN_GROUP_RID_ADMINS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0200</p><p><b>Groupname: </b> DOMAIN_GROUP_RID_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0201</p><p><b>Groupname: </b> DOMAIN_GROUP_RID_GUESTS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0202</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888237"></a>Well-known RID aliases</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b> DOMAIN_ALIAS_RID_ADMINS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0220</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0221</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_GUESTS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0222</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_POWER_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0223</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_ACCOUNT_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0224</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_SYSTEM_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0225</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_PRINT_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0226</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_BACKUP_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0227</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_REPLICATOR</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0228</p></div></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter11.Samba Printing Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2889659">Abstract</a></dt><dt><a href="#id2889674"> Printing Interface to Various Back ends -</a></dt><dt><a href="#id2890298"> +</a></dt><dt><a href="#id2889766"> Print Queue TDB's -</a></dt><dt><a href="#id2890507"> +</a></dt><dt><a href="#id2888559"> ChangeID and Client Caching of Printer Information -</a></dt><dt><a href="#id2890520"> +</a></dt><dt><a href="#id2888572"> Windows NT/2K Printer Change Notify -</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890028"></a>Abstract</h2></div></div><div></div></div><p> +</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889659"></a>Abstract</h2></div></div><div></div></div><p> The purpose of this document is to provide some insight into Samba's printing functionality and also to describe the semantics of certain features of Windows client printing. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890044"></a> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889674"></a> Printing Interface to Various Back ends </h2></div></div><div></div></div><p> Samba uses a table of function pointers to seven functions. The @@ -1416,7 +1416,7 @@ Currently there are only two printing back end implementations defined. </p><div class="itemizedlist"><ul type="disc"><li><p>a generic set of functions for working with standard UNIX printing subsystems</p></li><li><p>a set of CUPS specific functions (this is only enabled if - the CUPS libraries were located at compile time).</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890298"></a> + the CUPS libraries were located at compile time).</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889766"></a> Print Queue TDB's </h2></div></div><div></div></div><p> Samba provides periodic caching of the output from the "lpq command" @@ -1505,11 +1505,11 @@ and the job has the printer's device mode associated with it by default. Only non-default Device Mode are stored with print jobs in the print queue TDB. Otherwise, the Device Mode is obtained from the printer object when the client issues a GetJob(level == 2) request. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890507"></a> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888559"></a> ChangeID and Client Caching of Printer Information </h2></div></div><div></div></div><p> [To be filled in later] -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890520"></a> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888572"></a> Windows NT/2K Printer Change Notify </h2></div></div><div></div></div><p> When working with Windows NT+ clients, it is possible for a @@ -1607,7 +1607,7 @@ handle for notification. Samba currently uses the snum of the printer for this which can break if the list of services has been modified since the notification handle was registered.</p></li><li><p>The size is either (a) the string length in UNICODE for strings, (b) the size in bytes of the security descriptor, or (c) 0 for -data values.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="wins"></a>Chapter12.Samba WINS Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2889988">WINS Failover</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889988"></a>WINS Failover</h2></div></div><div></div></div><p> +data values.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="wins"></a>Chapter12.Samba WINS Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2889228">WINS Failover</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889228"></a>WINS Failover</h2></div></div><div></div></div><p> The current Samba codebase possesses the capability to use groups of WINS servers that share a common namespace for NetBIOS name registration and resolution. The formal parameter syntax is @@ -1649,7 +1649,7 @@ If a timeout occurs when querying a specific WINS server, that server is marked prevent further timeouts and the next server in the WINS group is contacted. Once marked as dead, Samba will not attempt to contact that server for name registration/resolution queries for a period of 10 minutes. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sam"></a>Chapter13.The Upcoming SAM System</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Bartlett</span></h3></div></div><div><p class="pubdate">1 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2889789">Security in the 'new SAM'</a></dt><dt><a href="#id2891316">Standalone from UNIX</a></dt><dt><a href="#id2891349">Handles and Races in the new SAM</a></dt><dt><a href="#id2891418">Layers</a></dt><dd><dl><dt><a href="#id2891425">Application</a></dt><dt><a href="#id2891441">SAM Interface</a></dt><dt><a href="#id2891468">SAM Modules</a></dt></dl></dd><dt><a href="#id2891490">SAM Modules</a></dt><dd><dl><dt><a href="#id2891497">Special Module: sam_passdb</a></dt><dt><a href="#id2891516">sam_ads</a></dt></dl></dd><dt><a href="#id2891555">Memory Management</a></dt><dt><a href="#id2891645">Testing</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889789"></a>Security in the 'new SAM'</h2></div></div><div></div></div><p>One of the biggest problems with passdb is it's implementation of +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sam"></a>Chapter13.The Upcoming SAM System</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Bartlett</span></h3></div></div><div><p class="pubdate">1 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2888904">Security in the 'new SAM'</a></dt><dt><a href="#id2889032">Standalone from UNIX</a></dt><dt><a href="#id2889059">Handles and Races in the new SAM</a></dt><dt><a href="#id2889127">Layers</a></dt><dd><dl><dt><a href="#id2889134">Application</a></dt><dt><a href="#id2889150">SAM Interface</a></dt><dt><a href="#id2889176">SAM Modules</a></dt></dl></dd><dt><a href="#id2889198">SAM Modules</a></dt><dd><dl><dt><a href="#id2889205">Special Module: sam_passdb</a></dt><dt><a href="#id2890449">sam_ads</a></dt></dl></dd><dt><a href="#id2890478">Memory Management</a></dt><dt><a href="#id2890565">Testing</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888904"></a>Security in the 'new SAM'</h2></div></div><div></div></div><p>One of the biggest problems with passdb is it's implementation of 'security'. Access control is on a 'are you root at the moment' basis, and it has no concept of NT ACLs. Things like ldapsam had to add 'magic' 'are you root' checks.</p><p>We took this very seriously when we started work, and the new structure @@ -1709,7 +1709,7 @@ actual data store (like the LDAP server). </p><p> Finally, we have generic get_sec_desc() and set_sec_desc() routines to allow external ACL manipulation. These do lookups based on SID. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891316"></a>Standalone from UNIX</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889032"></a>Standalone from UNIX</h2></div></div><div></div></div><p> One of the primary tenants of the 'new SAM' is that it would not attempt to deal with 'what unix id for that'. This would be left to the 'SMS' (Sid Mapping System') or SID farm, and probably administered via @@ -1719,7 +1719,7 @@ Accounts not preexisting in unix would be served up via winbind. </p><p> This is an *optional* part, and my preferred end-game. We have a fare way to go before things like winbind up to it however. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891349"></a>Handles and Races in the new SAM</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889059"></a>Handles and Races in the new SAM</h2></div></div><div></div></div><p> One of the things that the 'new SAM' work has tried to face is both compatibility with existing code, and a closer alignment to the SAMR interface. I consider SAMR to be a 'primary customer' to the this work, @@ -1744,11 +1744,11 @@ have *really* changed. 'conflicting' updates: Currently we don't deal with this (in passdb or the new sam stuff), but the design is sufficiently flexible to 'deny' a second update. I don't foresee locking records however. -</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891418"></a>Layers</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891425"></a>Application</h3></div></div><div></div></div><p> +</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889127"></a>Layers</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889134"></a>Application</h3></div></div><div></div></div><p> This is where smbd, samtest and whatever end-user replacement we have for pdbedit sits. They use only the SAM interface, and do not get 'special knowledge' of what is below them. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891441"></a>SAM Interface</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889150"></a>SAM Interface</h3></div></div><div></div></div><p> This level 'owns' the various handle structures, the get/set routines on those structures and provides the public interface. The application layer may initialize a 'context' to be passed to all interface routines, @@ -1759,7 +1759,7 @@ abstraction to the modules below, and arrange for their initial loading. </p><p> We could possibly add ACL checking at this layer, to avoid discrepancies in implementation modules. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891468"></a>SAM Modules</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889176"></a>SAM Modules</h3></div></div><div></div></div><p> These do not communicate with the application directly, only by setting values in the handles, and receiving requests from the interface. These modules are responsible for translating values from the handle's @@ -1767,13 +1767,13 @@ modules are responsible for translating values from the handle's to 'know' things like it's own domain SID, domain name, and any other state attached to the SAM. Simpler modules may call back to some helper routine. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891490"></a>SAM Modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891497"></a>Special Module: sam_passdb</h3></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889198"></a>SAM Modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889205"></a>Special Module: sam_passdb</h3></div></div><div></div></div><p> In order for there to be a smooth transition, kai is writing a module that reads existing passdb backends, and translates them into SAM replies. (Also pulling data from the account policy DB etc). We also intend to write a module that does the reverse - gives the SAM a passdb interface. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891516"></a>sam_ads</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890449"></a>sam_ads</h3></div></div><div></div></div><p> This is the first of the SAM modules to be committed to the tree - mainly because I needed to coordinate work with metze (who authored most of it). This module aims to use Samba's libads code to provide an @@ -1785,7 +1785,7 @@ the construction of an Samba AD DC. </p><p> We also intend to construct a Samba 2.2/3.0 compatible ldap module, again using libads code. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891555"></a>Memory Management</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890478"></a>Memory Management</h2></div></div><div></div></div><p> The 'new SAM' development effort also concerned itself with getting a sane implementation of memory management. It was decided that we would be (as much as possible) talloc based, using an 'internal talloc @@ -1814,7 +1814,7 @@ NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID NTSTATUS sam_enum_accounts(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const DOM_SID *domainsid, uint16 acct_ctrl, int32 *account_count, SAM_ACCOUNT_ENUM **accounts) -</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891645"></a>Testing</h2></div></div><div></div></div><p> +</pre></div><div xmlns:ns3="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890565"></a>Testing</h2></div></div><div></div></div><p> Testing is vital in any piece of software, and Samba is certainly no exception. In designing this new subsystem, we have taken care to ensure it is easily tested, independent of outside protocols. @@ -1831,25 +1831,25 @@ already proved vital in testing. I expect SAM module authors will find it particularly valuable. </p><p>Example useage:</p><p><tt class="prompt">$</tt> <b class="command">bin/samtest</b></p><pre class="programlisting"> > context ads:ldap://192.168.1.96 -</pre><p> +</pre><ns3:p> (this loads a new context, using the new ADS module. The parameter is the 'location' of the ldap server) -</p><pre class="programlisting"> +</ns3:p><pre class="programlisting"> > lookup_name DOMAIN abartlet -</pre><p> +</pre><ns3:p> (returns a sid). -</p><p> +</ns3:p><p> Because the 'new SAM' is NT ACL based, there will be a command to specify an arbitrary NT ACL, but for now it uses 'system' by default. </p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pwencrypt"></a>Chapter14.LanMan and NT Password Encryption</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><br> <tt class="email"><<a href="mailto:samba@samba.org">samba@samba.org</a>></tt><br> - </p></div></div></div></div><div><p class="pubdate">19 Apr 1999</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2892285">Introduction</a></dt><dt><a href="#id2892310">How does it work?</a></dt><dt><a href="#id2891197">The smbpasswd file</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892285"></a>Introduction</h2></div></div><div></div></div><p>With the development of LanManager and Windows NT + </p></div></div></div></div><div><p class="pubdate">19 Apr 1999</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2891295">Introduction</a></dt><dt><a href="#id2891319">How does it work?</a></dt><dt><a href="#id2891414">The smbpasswd file</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891295"></a>Introduction</h2></div></div><div></div></div><p>With the development of LanManager and Windows NT compatible password encryption for Samba, it is now able to validate user connections in exactly the same way as a LanManager or Windows NT server.</p><p>This document describes how the SMB password encryption algorithm works and what issues there are in choosing whether you want to use it. You should read it carefully, especially - the part about security and the "PROS and CONS" section.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892310"></a>How does it work?</h2></div></div><div></div></div><p>LanManager encryption is somewhat similar to UNIX + the part about security and the "PROS and CONS" section.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891319"></a>How does it work?</h2></div></div><div></div></div><p>LanManager encryption is somewhat similar to UNIX password encryption. The server uses a file containing a hashed value of a user's password. This is created by taking the user's plaintext password, capitalising it, and either @@ -1886,7 +1886,7 @@ specify an arbitrary NT ACL, but for now it uses 'system' by default. know the correct password and is denied access.</p><p>Note that the Samba server never knows or stores the cleartext of the user's password - just the 16 byte hashed values derived from it. Also note that the cleartext password or 16 byte hashed values - are never transmitted over the network - thus increasing security.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891197"></a>The smbpasswd file</h2></div></div><div></div></div><a name="SMBPASSWDFILEFORMAT"></a><p>In order for Samba to participate in the above protocol + are never transmitted over the network - thus increasing security.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891414"></a>The smbpasswd file</h2></div></div><div></div></div><a name="SMBPASSWDFILEFORMAT"></a><p>In order for Samba to participate in the above protocol it must be able to look up the 16 byte hashed values given a user name. Unfortunately, as the UNIX password value is also a one way hash function (ie. it is impossible to retrieve the cleartext of the user's @@ -1943,10 +1943,10 @@ bob:100:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX: to enable this on your server.</p><p><span class="emphasis"><em>Note : </em></span>This file should be protected very carefully. Anyone with access to this file can (with enough knowledge of the protocols) gain access to your SMB server. The file is thus more - sensitive than a normal unix <tt class="filename">/etc/passwd</tt> file.</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="modules"></a>Chapter15.Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> 19 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2892236">Advantages</a></dt><dt><a href="#id2893136">Loading modules</a></dt><dd><dl><dt><a href="#id2893169">Static modules</a></dt><dt><a href="#id2894111">Shared modules</a></dt></dl></dd><dt><a href="#id2894139">Writing modules</a></dt><dd><dl><dt><a href="#id2894200">Static/Shared selection in configure.in</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892236"></a>Advantages</h2></div></div><div></div></div><p> + sensitive than a normal unix <tt class="filename">/etc/passwd</tt> file.</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="modules"></a>Chapter15.Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> 19 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2893198">Advantages</a></dt><dt><a href="#id2893242">Loading modules</a></dt><dd><dl><dt><a href="#id2893272">Static modules</a></dt><dt><a href="#id2893313">Shared modules</a></dt></dl></dd><dt><a href="#id2893342">Writing modules</a></dt><dd><dl><dt><a href="#id2893402">Static/Shared selection in configure.in</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893198"></a>Advantages</h2></div></div><div></div></div><p> The new modules system has the following advantages: </p><table class="simplelist" border="0" summary="Simple list"><tr><td>Transparent loading of static and shared modules (no need -for a subsystem to know about modules)</td></tr><tr><td>Simple selection between shared and static modules at configure time</td></tr><tr><td>"preload modules" option for increasing performance for stable modules</td></tr><tr><td>No nasty #define stuff anymore</td></tr><tr><td>All backends are available as plugin now (including pdb_ldap and pdb_tdb)</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893136"></a>Loading modules</h2></div></div><div></div></div><p> +for a subsystem to know about modules)</td></tr><tr><td>Simple selection between shared and static modules at configure time</td></tr><tr><td>"preload modules" option for increasing performance for stable modules</td></tr><tr><td>No nasty #define stuff anymore</td></tr><tr><td>All backends are available as plugin now (including pdb_ldap and pdb_tdb)</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893242"></a>Loading modules</h2></div></div><div></div></div><p> Some subsystems in samba use different backends. These backends can be either statically linked in to samba or available as a plugin. A subsystem should have a function that allows a module to register itself. For example, @@ -1956,7 +1956,7 @@ NTSTATUS smb_register_passdb(int version, const char *name, pdb_init_function in </pre><p> This function will be called by the initialisation function of the module to register itself. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893169"></a>Static modules</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893272"></a>Static modules</h3></div></div><div></div></div><p> The modules system compiles a list of initialisation functions for the static modules of each subsystem. This is a define. For example, it is here currently (from <tt class="filename">include/config.h</tt>): @@ -1966,7 +1966,7 @@ it is here currently (from <tt class="filename">include/config.h</tt>): </pre><p> These functions should be called before the subsystem is used. That should be done when the subsystem is initialised or first used. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894111"></a>Shared modules</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893313"></a>Shared modules</h3></div></div><div></div></div><p> If a subsystem needs a certain backend, it should check if it has already been registered. If the backend hasn't been registered already, the subsystem should call smb_probe_module(char *subsystem, char *backend). @@ -1976,7 +1976,7 @@ is a slash, smb_probe_module() tries to load the module from the absolute path specified in 'backend'. </p><p>After smb_probe_module() has been executed, the subsystem should check again if the module has been registered. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894139"></a>Writing modules</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893342"></a>Writing modules</h2></div></div><div></div></div><p> Each module has an initialisation function. For modules that are included with samba this name is '<i class="replaceable"><tt>subsystem</tt></i>_<i class="replaceable"><tt>backend</tt></i>_init'. For external modules (that will never be built-in, but only available as a module) this name is always 'init_module'. (In the case of modules included with samba, the configure system will add a #define subsystem_backend_init() init_module()). The prototype for these functions is: @@ -1991,7 +1991,7 @@ smb_register_passdb(PASSDB_INTERFACE_VERSION, "ldapsam", pdb_init_ldap smb_register_passdb(PASSDB_INTERFACE_VERSION, "ldapsam_nua", pdb_init_ldapsam_nua); return NT_STATUS_OK; } -</pre><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894200"></a>Static/Shared selection in configure.in</h3></div></div><div></div></div><p> +</pre><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893402"></a>Static/Shared selection in configure.in</h3></div></div><div></div></div><p> Some macros in configure.in generate the various defines and substs that are necessary for the system to work correct. All modules that should be built by default have to be added to the variable 'default_modules'. @@ -2010,13 +2010,13 @@ be replaced with the names of the plugins to build. </p><p>You must make sure all .c files that contain defines that can be changed by ./configure are rebuilded in the 'modules_clean' make target. Practically, this means all c files that contain <b class="command">static_init_subsystem;</b> calls need to be rebuilded. -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="rpc-plugin"></a>Chapter16.RPC Pluggable Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Anthony</span> <span class="surname">Liguori</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email"><<a href="mailto:aliguor@us.ibm.com">aliguor@us.ibm.com</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">January 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2892904">About</a></dt><dt><a href="#id2892923">General Overview</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892904"></a>About</h2></div></div><div></div></div><p> +</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="rpc-plugin"></a>Chapter16.RPC Pluggable Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Anthony</span> <span class="surname">Liguori</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email"><<a href="mailto:aliguor@us.ibm.com">aliguor@us.ibm.com</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">January 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2893560">About</a></dt><dt><a href="#id2893579">General Overview</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893560"></a>About</h2></div></div><div></div></div><p> This document describes how to make use the new RPC Pluggable Modules features of Samba 3.0. This architecture was added to increase the maintainability of Samba allowing RPC Pipes to be worked on separately from the main CVS branch. The RPM architecture will also allow third-party vendors to add functionality to Samba through plug-ins. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892923"></a>General Overview</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893579"></a>General Overview</h2></div></div><div></div></div><p> When an RPC call is sent to smbd, smbd tries to load a shared library by the name <tt class="filename">librpc_<pipename>.so</tt> to handle the call if it doesn't know how to handle the call internally. For instance, LSA calls @@ -2033,7 +2033,7 @@ NTSTATUS rpc_pipe_register_commands(int version, const char *clnt, const char *s argument.</p></dd><dt><span class="term">clnt</span></dt><dd><p>the Client name of the named pipe</p></dd><dt><span class="term">srv</span></dt><dd><p>the Server name of the named pipe</p></dd><dt><span class="term">cmds</span></dt><dd><p>a list of api_structs that map RPC ordinal numbers to function calls</p></dd><dt><span class="term">size</span></dt><dd><p>the number of api_structs contained in cmds</p></dd></dl></div><p> See rpc_server/srv_reg.c and rpc_server/srv_reg_nt.c for a small example of how to use this library. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="vfs"></a>Chapter17.VFS Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:ab@samba.org">ab@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:metze@metzemix.de">metze@metzemix.de</a>></tt></p></div></div></div></div><div><p class="pubdate"> 27 May 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2895215">The Samba (Posix) VFS layer</a></dt><dd><dl><dt><a href="#id2895223">The general interface</a></dt><dt><a href="#id2895338">Possible VFS operation layers</a></dt></dl></dd><dt><a href="#id2895409">The Interaction between the Samba VFS subsystem and the modules</a></dt><dd><dl><dt><a href="#id2895418">Initialization and registration</a></dt><dt><a href="#id2895609">How the Modules handle per connection data</a></dt></dl></dd><dt><a href="#id2895852">Upgrading to the New VFS Interface</a></dt><dd><dl><dt><a href="#id2895860">Upgrading from 2.2.* and 3.0aplha modules</a></dt></dl></dd><dt><a href="#id2896401">Some Notes</a></dt><dd><dl><dt><a href="#id2896408">Implement TRANSPARENT functions</a></dt><dt><a href="#id2896432">Implement OPAQUE functions</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895215"></a>The Samba (Posix) VFS layer</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895223"></a>The general interface</h3></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="vfs"></a>Chapter17.VFS Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:ab@samba.org">ab@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:metze@metzemix.de">metze@metzemix.de</a>></tt></p></div></div></div></div><div><p class="pubdate"> 27 May 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2895821">The Samba (Posix) VFS layer</a></dt><dd><dl><dt><a href="#id2895828">The general interface</a></dt><dt><a href="#id2895928">Possible VFS operation layers</a></dt></dl></dd><dt><a href="#id2895992">The Interaction between the Samba VFS subsystem and the modules</a></dt><dd><dl><dt><a href="#id2896000">Initialization and registration</a></dt><dt><a href="#id2892061">How the Modules handle per connection data</a></dt></dl></dd><dt><a href="#id2892280">Upgrading to the New VFS Interface</a></dt><dd><dl><dt><a href="#id2893883">Upgrading from 2.2.* and 3.0aplha modules</a></dt></dl></dd><dt><a href="#id2894294">Some Notes</a></dt><dd><dl><dt><a href="#id2894300">Implement TRANSPARENT functions</a></dt><dt><a href="#id2894324">Implement OPAQUE functions</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895821"></a>The Samba (Posix) VFS layer</h2></div></div><div></div></div><div xmlns:ns4="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895828"></a>The general interface</h3></div></div><div></div></div><p> Each VFS operation has a vfs_op_type, a function pointer and a handle pointer in the struct vfs_ops and tree macros to make it easier to call the operations. (Take a look at <tt class="filename">include/vfs.h</tt> and <tt class="filename">include/vfs_macros.h</tt>.) @@ -2056,7 +2056,7 @@ typedef enum _vfs_op_type { SMB_VFS_OP_LAST } vfs_op_type; -</pre><p>This struct contains the function and handle pointers for all operations.</p><pre class="programlisting"> +</pre><ns4:p>This struct contains the function and handle pointers for all operations.</ns4:p><pre class="programlisting"> struct vfs_ops { struct vfs_fn_pointers { ... @@ -2098,10 +2098,10 @@ struct vfs_ops { ... } handles; }; -</pre><p> +</pre><ns4:p> This macros SHOULD be used to call any vfs operation. DO NOT ACCESS conn->vfs.ops.* directly !!! -</p><pre class="programlisting"> +</ns4:p><pre class="programlisting"> ... /* File operations */ @@ -2129,7 +2129,7 @@ DO NOT ACCESS conn->vfs.ops.* directly !!! (tofd), (fsp), (fromfd), (header), (offset), (count))) ... -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895338"></a>Possible VFS operation layers</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895928"></a>Possible VFS operation layers</h3></div></div><div></div></div><p> These values are used by the VFS subsystem when building the conn->vfs and conn->vfs_opaque structs for a connection with multiple VFS modules. Internally, Samba differentiates only opaque and transparent layers at this process. @@ -2158,19 +2158,19 @@ typedef enum _vfs_op_layer { SMB_VFS_LAYER_SCANNER /* - Checks data and possibly initiates additional */ /* file activity like logging to files _inside_ samba VFS */ } vfs_op_layer; -</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895409"></a>The Interaction between the Samba VFS subsystem and the modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895418"></a>Initialization and registration</h3></div></div><div></div></div><p> +</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895992"></a>The Interaction between the Samba VFS subsystem and the modules</h2></div></div><div></div></div><div xmlns:ns5="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896000"></a>Initialization and registration</h3></div></div><div></div></div><ns5:p> As each Samba module a VFS module should have a -</p><pre class="programlisting">NTSTATUS vfs_example_init(void);</pre><p> function if it's staticly linked to samba or -</p><pre class="programlisting">NTSTATUS init_module(void);</pre><p> function if it's a shared module. -</p><p> +</ns5:p><pre class="programlisting">NTSTATUS vfs_example_init(void);</pre><ns5:p> function if it's staticly linked to samba or +</ns5:p><pre class="programlisting">NTSTATUS init_module(void);</pre><ns5:p> function if it's a shared module. +</ns5:p><p> This should be the only non static function inside the module. Global variables should also be static! -</p><p> +</p><ns5:p> The module should register its functions via the -</p><pre class="programlisting"> +</ns5:p><pre class="programlisting"> NTSTATUS smb_register_vfs(int version, const char *name, vfs_op_tuple *vfs_op_tuples); -</pre><p> function. -</p><div class="variablelist"><dl><dt><span class="term">version</span></dt><dd><p>should be filled with SMB_VFS_INTERFACE_VERSION</p></dd><dt><span class="term">name</span></dt><dd><p>this is the name witch can be listed in the +</pre><ns5:p> function. +</ns5:p><div class="variablelist"><dl><dt><span class="term">version</span></dt><dd><p>should be filled with SMB_VFS_INTERFACE_VERSION</p></dd><dt><span class="term">name</span></dt><dd><p>this is the name witch can be listed in the <b class="command">vfs objects</b> parameter to use this module.</p></dd><dt><span class="term">vfs_op_tuples</span></dt><dd><p> this is an array of vfs_op_tuple's. (vfs_op_tuples is descripted in details below.) @@ -2198,7 +2198,7 @@ NTSTATUS init_module(void) { return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, "example", example_op_tuples); } -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895609"></a>How the Modules handle per connection data</h3></div></div><div></div></div><p>Each VFS function has as first parameter a pointer to the modules vfs_handle_struct. +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892061"></a>How the Modules handle per connection data</h3></div></div><div></div></div><p>Each VFS function has as first parameter a pointer to the modules vfs_handle_struct. </p><pre class="programlisting"> typedef struct vfs_handle_struct { struct vfs_handle_struct *next, *prev; @@ -2299,7 +2299,7 @@ you can set this function pointer to NULL.</p></dd></dl></div><p>Some useful MAC (handle)->vfs_next.handles.sendfile,\ (tofd), (fsp), (fromfd), (header), (offset), (count))) ... -</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895852"></a>Upgrading to the New VFS Interface</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895860"></a>Upgrading from 2.2.* and 3.0aplha modules</h3></div></div><div></div></div><div class="orderedlist"><ol type="1"><li><p> +</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892280"></a>Upgrading to the New VFS Interface</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893883"></a>Upgrading from 2.2.* and 3.0aplha modules</h3></div></div><div></div></div><div class="orderedlist"><ol type="1"><li><p> Add "vfs_handle_struct *handle, " as first parameter to all vfs operation functions. e.g. example_connect(connection_struct *conn, const char *service, const char *user); -> example_connect(vfs_handle_struct *handle, connection_struct *conn, const char *service, const char *user); @@ -2315,12 +2315,12 @@ e.g. smb_vfs_next_connect(conn, service, user); Add "handle, " as first parameter to all SMB_VFS_NEXT_*() calls. e.g. SMB_VFS_NEXT_CONNECT(conn, service, user); -> SMB_VFS_NEXT_CONNECT(handle, conn, service, user); -</p></li><li><p> +</p></li><li xmlns:ns6=""><ns6:p> (Only for 2.2.* modules) Convert the old struct vfs_ops example_ops to a vfs_op_tuple example_op_tuples[] array. e.g. -</p><pre class="programlisting"> +</ns6:p><pre class="programlisting"> struct vfs_ops example_ops = { /* Disk operations */ example_connect, /* connect */ @@ -2390,9 +2390,9 @@ struct vfs_ops example_ops = { NULL, /* sys_acl_free_acl */ NULL /* sys_acl_free_qualifier */ }; -</pre><p> +</pre><ns6:p> -> -</p><pre class="programlisting"> +</ns6:p><pre class="programlisting"> static vfs_op_tuple example_op_tuples[] = { {SMB_VFS_OP(example_connect), SMB_VFS_OP_CONNECT, SMB_VFS_LAYER_TRANSPARENT}, {SMB_VFS_OP(example_disconnect), SMB_VFS_OP_DISCONNECT, SMB_VFS_LAYER_TRANSPARENT}, @@ -2403,42 +2403,42 @@ static vfs_op_tuple example_op_tuples[] = { {SMB_VFS_OP(NULL), SMB_VFS_OP_NOOP, SMB_VFS_LAYER_NOOP} }; -</pre><p> -</p></li><li><p> +</pre><ns6:p> +</ns6:p></li><li><p> Move the example_op_tuples[] array to the end of the file. -</p></li><li><p> +</p></li><li xmlns:ns7=""><ns7:p> Add the init_module() function at the end of the file. e.g. -</p><pre class="programlisting"> +</ns7:p><pre class="programlisting"> NTSTATUS init_module(void) { return smb_register_vfs(SMB_VFS_INTERFACE_VERSION,"example",example_op_tuples); } -</pre><p> -</p></li><li><p> +</pre><ns7:p> +</ns7:p></li><li xmlns:ns8=""><ns8:p> Check if your vfs_init() function does more then just prepare the vfs_ops structs or remember the struct smb_vfs_handle_struct. -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT you can remove the vfs_init() function.</td></tr><tr><td>If YES decide if you want to move the code to the example_connect() operation or to the init_module(). And then remove vfs_init(). - e.g. a debug class registration should go into init_module() and the allocation of private data should go to example_connect().</td></tr></table><p> -</p></li><li><p> +</ns8:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT you can remove the vfs_init() function.</td></tr><tr><td>If YES decide if you want to move the code to the example_connect() operation or to the init_module(). And then remove vfs_init(). + e.g. a debug class registration should go into init_module() and the allocation of private data should go to example_connect().</td></tr></table><ns8:p> +</ns8:p></li><li xmlns:ns9=""><ns9:p> (Only for 3.0alpha* modules) Check if your vfs_done() function contains needed code. -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT you can remove the vfs_done() function.</td></tr><tr><td>If YES decide if you can move the code to the example_disconnect() operation. Otherwise register a SMB_EXIT_EVENT with smb_register_exit_event(); (Described in the <a href="#modules" title="Chapter15.Modules">modules section</a>) And then remove vfs_done(). e.g. the freeing of private data should go to example_disconnect(). -</td></tr></table><p> -</p></li><li><p> +</ns9:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT you can remove the vfs_done() function.</td></tr><tr><td>If YES decide if you can move the code to the example_disconnect() operation. Otherwise register a SMB_EXIT_EVENT with smb_register_exit_event(); (Described in the <a href="#modules" title="Chapter15.Modules">modules section</a>) And then remove vfs_done(). e.g. the freeing of private data should go to example_disconnect(). +</td></tr></table><ns9:p> +</ns9:p></li><li xmlns:ns10=""><ns10:p> Check if you have any global variables left. Decide if it wouldn't be better to have this data on a connection basis. -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT leave them as they are. (e.g. this could be the variable for the private debug class.)</td></tr><tr><td>If YES pack all this data into a struct. You can use handle->data to point to such a struct on a per connection basis.</td></tr></table><p> +</ns10:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT leave them as they are. (e.g. this could be the variable for the private debug class.)</td></tr><tr><td>If YES pack all this data into a struct. You can use handle->data to point to such a struct on a per connection basis.</td></tr></table><ns10:p> e.g. if you have such a struct: -</p><pre class="programlisting"> +</ns10:p><pre class="programlisting"> struct example_privates { char *some_string; int db_connection; }; -</pre><p> +</pre><ns10:p> first way of doing it: -</p><pre class="programlisting"> +</ns10:p><pre class="programlisting"> static int example_connect(vfs_handle_struct *handle, connection_struct *conn, const char *service, const char* user) @@ -2485,9 +2485,9 @@ static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd) return SMB_VFS_NEXT_CLOSE(handle, fsp, fd); } -</pre><p> +</pre><ns10:p> second way of doing it: -</p><pre class="programlisting"> +</ns10:p><pre class="programlisting"> static void free_example_privates(void **datap) { struct example_privates *data = (struct example_privates *)*datap; @@ -2495,7 +2495,7 @@ static void free_example_privates(void **datap) SAFE_FREE(data->some_string); SAFE_FREE(data); - datap = NULL; + *datap = NULL; return; } @@ -2514,7 +2514,7 @@ static int example_connect(vfs_handle_struct *handle, } /* init out private data */ - data->some_string = strdup(conn->mem_ctx,"test"); + data->some_string = strdup("test"); if (!data->some_string) { DEBUG(0,("strdup() failed\n")); return -1; @@ -2526,7 +2526,7 @@ static int example_connect(vfs_handle_struct *handle, * we need to specify a free_function because we used malloc() and strdup(). * (return -1 if something failed.) */ - SMB_VFS_HANDLE_SET_DATA(handle, data, NULL, struct example_privates, return -1); + SMB_VFS_HANDLE_SET_DATA(handle, data, free_example_privates, struct example_privates, return -1); return SMB_VFS_NEXT_CONNECT(handle,conn,service,user); } @@ -2545,8 +2545,8 @@ static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd) return SMB_VFS_NEXT_CLOSE(handle, fsp, fd); } -</pre><p> -</p></li><li><p> +</pre><ns10:p> +</ns10:p></li><li><p> To make it easy to build 3rd party modules it would be usefull to provide configure.in, (configure), install.sh and Makefile.in with the module. (Take a look at the example in <tt class="filename">examples/VFS</tt>.) @@ -2559,21 +2559,21 @@ give you more warnings. The idea is that you can extend this <tt class="filename">configure.in</tt> and <tt class="filename">Makefile.in</tt> scripts for your module. -</p></li><li><p> +</p></li><li xmlns:ns11=""><ns11:p> Compiling & Testing... -</p><table class="simplelist" border="0" summary="Simple list"><tr><td><b class="userinput"><tt>./configure <tt class="option">--enable-developer</tt></tt></b> ...</td></tr><tr><td><b class="userinput"><tt>make</tt></b></td></tr><tr><td>Try to fix all compiler warnings</td></tr><tr><td><b class="userinput"><tt>make</tt></b></td></tr><tr><td>Testing, Testing, Testing ...</td></tr></table><p> -</p></li></ol></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896401"></a>Some Notes</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896408"></a>Implement TRANSPARENT functions</h3></div></div><div></div></div><p> +</ns11:p><table class="simplelist" border="0" summary="Simple list"><tr><td><b class="userinput"><tt>./configure <tt class="option">--enable-developer</tt></tt></b> ...</td></tr><tr><td><b class="userinput"><tt>make</tt></b></td></tr><tr><td>Try to fix all compiler warnings</td></tr><tr><td><b class="userinput"><tt>make</tt></b></td></tr><tr><td>Testing, Testing, Testing ...</td></tr></table><ns11:p> +</ns11:p></li></ol></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894294"></a>Some Notes</h2></div></div><div></div></div><div xmlns:ns12="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894300"></a>Implement TRANSPARENT functions</h3></div></div><div></div></div><ns12:p> Avoid writing functions like this: -</p><pre class="programlisting"> +</ns12:p><pre class="programlisting"> static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd) { return SMB_VFS_NEXT_CLOSE(handle, fsp, fd); } -</pre><p> +</pre><ns12:p> Overload only the functions you really need to! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896432"></a>Implement OPAQUE functions</h3></div></div><div></div></div><p> +</ns12:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894324"></a>Implement OPAQUE functions</h3></div></div><div></div></div><p> If you want to just implement a better version of a default samba opaque function (e.g. like a disk_free() function for a special filesystem) @@ -2593,12 +2593,12 @@ static int example_rename(vfs_handle_struct *handle, connection_struct *conn, errno = ENOSYS; return -1; } -</pre></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Packaging"></a>Chapter18.Notes to packagers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2895009">Versioning</a></dt><dt><a href="#id2895042">Modules</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895009"></a>Versioning</h2></div></div><div></div></div><p>Please, please update the version number in +</pre></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Packaging"></a>Chapter18.Notes to packagers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2894389">Versioning</a></dt><dt><a href="#id2894418">Modules</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894389"></a>Versioning</h2></div></div><div></div></div><p>Please, please update the version number in <tt class="filename">source/include/version.h</tt> to include the versioning of your package. This makes it easier to distinguish standard samba builds from custom-build samba builds (distributions often patch packages). For example, a good version would be: </p><pre class="programlisting"> Version 2.999+3.0.alpha21-5 for Debian -</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895042"></a>Modules</h2></div></div><div></div></div><p>Samba now has support for building parts of samba as plugins. This +</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894418"></a>Modules</h2></div></div><div></div></div><p>Samba now has support for building parts of samba as plugins. This makes it possible to, for example, put ldap or mysql support in a seperate package, thus making it possible to have a normal samba package not depending on ldap or mysql. To build as much parts of samba @@ -2621,8 +2621,8 @@ as a plugin, run: </p><pre class="programlisting"> e.g. files generated by <b class="userinput"><tt>diff -u</tt></b>. </p><p>If you are modifying a copy of samba you retrieved from CVS, you can easily generate a diff file of these changes by running - <b class="userinput"><tt>cvs diff -u</tt></b>.</p></dd><dt><span class="term">Points of attention when modifying samba source code</span></dt><dd><p> - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>Don't simply copy code from other places and modify it until it + <b class="userinput"><tt>cvs diff -u</tt></b>.</p></dd><dt><span class="term">Points of attention when modifying samba source code</span></dt><dd xmlns:ns13=""><ns13:p> + </ns13:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Don't simply copy code from other places and modify it until it works. Code needs to be clean and logical. Duplicate code is to be avoided.</td></tr><tr><td>Test your patch. It might take a while before one of us looks at your patch so it will take longer before your patch when your patch @@ -2630,8 +2630,8 @@ as a plugin, run: </p><pre class="programlisting"> it harder to read, understand and test the patch. You might also risk not getting a good patch committed because you mixed it with one that had issues. </td></tr><tr><td>Make sure your patch complies to the samba coding style as - suggested in the coding-suggestions chapter. </td></tr></table><p> - </p></dd><dt><span class="term">Sending in bugfixes</span></dt><dd><p>Bugfixes to bugs in samba should be submitted to samba's + suggested in the coding-suggestions chapter. </td></tr></table><ns13:p> + </ns13:p></dd><dt><span class="term">Sending in bugfixes</span></dt><dd><p>Bugfixes to bugs in samba should be submitted to samba's <a href="https://bugzilla.samba.org/" target="_top">bugzilla system</a>, along with a description of the bug. </p></dd><dt><span class="term">Sending in feature patches</span></dt><dd><p>Send feature patches along with a description of what the diff --git a/docs/htmldocs/Samba-HOWTO-Collection.html b/docs/htmldocs/Samba-HOWTO-Collection.html index 27faf25f17..44d9954758 100644 --- a/docs/htmldocs/Samba-HOWTO-Collection.html +++ b/docs/htmldocs/Samba-HOWTO-Collection.html @@ -16,14 +16,14 @@ insignificant number of ideas for inclusion (if not content itself) has been obt from a number of Unofficial HOWTOs - to each such author a big "Thank-you" is also offered. Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and application knowledge that is most to be desired by many Samba users and administrators. -"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-HOWTO-Collection"></a>SAMBA Project Documentation</h1></div><div><div class="authorgroup"><h4 class="editedby">Edited by</h4><h3 class="editor"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><h3 class="editor"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><h3 class="editor"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3></div></div><div><div class="legalnotice"><p> +"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-HOWTO-Collection"></a>SAMBA Project Documentation</h1></div><div><div class="authorgroup"><h4 class="editedby">Edited by</h4><h3 class="editor"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><h3 class="editor"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><h3 class="editor"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3></div></div><div><div xmlns:ns1="" class="legalnotice"><p> This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at <a href="http://www.fsf.org/licenses/gpl.txt" target="_top">http://www.fsf.org/licenses/gpl.txt</a> -</p><p><b>Attributions.</b> - </p><div class="variablelist"><dl><dt><span class="term"><a href="#IntroSMB" title="Chapter1.Introduction to Samba">Introduction to Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>David Lechnyr <<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="#install" title="Chapter2.How to Install and Test SAMBA">How to Install and Test SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Karl Auer</p></li></ul></div></dd><dt><span class="term"><a href="#FastStart" title="Chapter3.Fast Start for the Impatient">Fast Start for the Impatient</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#ServerType" title="Chapter4.Server Types and Security Modes">Server Types and Security Modes</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>David Bannon <<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#samba-bdc" title="Chapter6.Backup Domain Control">Backup Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Volker Lendecke <<a href="mailto:Volker.Lendecke@SerNet.DE" target="_top">Volker.Lendecke@SerNet.DE</a>></p></li></ul></div></dd><dt><span class="term"><a href="#domain-member" title="Chapter7.Domain Membership">Domain Membership</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#StandAloneServer" title="Chapter8.Stand-Alone Servers">Stand-Alone Servers</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#ClientConfig" title="Chapter9.MS Windows Network Configuration Guide">MS Windows Network Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#NetworkBrowsing" title="Chapter10.Samba / MS Windows Network Browsing Guide">Samba / MS Windows Network Browsing Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#passdb" title="Chapter11.Account Information Databases">Account Information Databases</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Olivier (lem) Lemaire <<a href="mailto:olem@IDEALX.org" target="_top">olem@IDEALX.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#groupmapping" title="Chapter12.Mapping MS Windows and Unix Groups">Mapping MS Windows and Unix Groups</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jean Franois Micouleau</p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#AccessControls" title="Chapter13.File, Directory and Share Access Controls">File, Directory and Share Access Controls</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#locking" title="Chapter14.File and Record Locking">File and Record Locking</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Eric Roseme <<a href="mailto:eric.roseme@hp.com" target="_top">eric.roseme@hp.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="#securing-samba" title="Chapter15.Securing Samba">Securing Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#InterdomainTrusts" title="Chapter16.Interdomain Trust Relationships">Interdomain Trust Relationships</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Rafal Szczesniak <<a href="mailto:mimir@samba.org" target="_top">mimir@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#msdfs" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba">Hosting a Microsoft Distributed File System tree on Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Shirish Kalele <<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#printing" title="Chapter18.Classical Printing Support">Classical Printing Support</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle <<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#CUPS-printing" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing Support in Samba 3.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle <<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>></p></li><li><p>Ciprian Vizitiu <<a href="mailto:CVizitiu@gbif.org" target="_top">CVizitiu@gbif.org</a>> (drawings) </p></li></ul></div></dd><dt><span class="term"><a href="#VFS" title="Chapter20.Stackable VFS modules">Stackable VFS modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Tim Potter</p></li><li><p>Simo Sorce (original vfs_skel README) </p></li><li><p>Alexander Bokovoy (original vfs_netatalk docs) </p></li><li><p>Stefan Metzmacher (Update for multiple modules) </p></li></ul></div></dd><dt><span class="term"><a href="#winbind" title="Chapter21.Integrated Logon Support using Winbind">Integrated Logon Support using Winbind</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Tim Potter <<a href="mailto:tpot@linuxcare.com.au" target="_top">tpot@linuxcare.com.au</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Naag Mummaneni <<a href="mailto:getnag@rediffmail.com" target="_top">getnag@rediffmail.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#AdvancedNetworkManagement" title="Chapter22.Advanced Network Management">Advanced Network Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#PolicyMgmt" title="Chapter23.System and Account Policies">System and Account Policies</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#ProfileMgmt" title="Chapter24.Desktop Profile Management">Desktop Profile Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#pam" title="Chapter25.PAM based Distributed Authentication">PAM based Distributed Authentication</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Stephen Langasek <<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>></p></li></ul></div></dd><dt><span class="term"><a href="#integrate-ms-networks" title="Chapter26.Integrating MS Windows networks with Samba">Integrating MS Windows networks with Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#unicode" title="Chapter27.Unicode/Charsets">Unicode/Charsets</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>TAKAHASHI Motonobu <<a href="mailto:monyo@home.monyo.com" target="_top">monyo@home.monyo.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="#Backup" title="Chapter28.Samba Backup Techniques">Samba Backup Techniques</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#SambaHA" title="Chapter29.High Availability Options">High Availability Options</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#upgrading-to-3.0" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0">Upgrading from Samba-2.x to Samba-3.0.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#NT4Migration" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC">Migration from NT4 PDC to Samba-3 PDC</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#SWAT" title="Chapter32.SWAT - The Samba Web Administration Tool">SWAT - The Samba Web Administration Tool</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#diagnosis" title="Chapter33.The Samba checklist">The Samba checklist</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#problems" title="Chapter34.Analysing and solving samba problems">Analysing and solving samba problems</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>David Bannon <<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#bugreport" title="Chapter35.Reporting Bugs">Reporting Bugs</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p> Someone; Tridge or Karl Auer perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="#compiling" title="Chapter36.How to compile SAMBA">How to compile SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p> Someone; Jerry perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="#Portability" title="Chapter37.Portability">Portability</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#Other-Clients" title="Chapter38.Samba and other CIFS clients">Samba and other CIFS clients</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jim McDonough <<a href="mailto:jmcd@us.ibm.com" target="_top">jmcd@us.ibm.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#speed" title="Chapter39.Samba Performance Tuning">Samba Performance Tuning</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Paul Cochrane <<a href="mailto:paulc@dth.scot.nhs.uk" target="_top">paulc@dth.scot.nhs.uk</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#DNSDHCP" title="Chapter40.DNS and DHCP Configuration Guide">DNS and DHCP Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#Further-Resources" title="Chapter41.Further Resources">Further Resources</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>David Lechnyr <<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>></p></li></ul></div></dd></dl></div><p> +</p><ns1:p><b>Attributions.</b> + </ns1:p><div class="variablelist"><dl><dt><span class="term"><a href="#IntroSMB" title="Chapter1.Introduction to Samba">Introduction to Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>David Lechnyr <<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="#install" title="Chapter2.How to Install and Test SAMBA">How to Install and Test SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Karl Auer</p></li></ul></div></dd><dt><span class="term"><a href="#FastStart" title="Chapter3.Fast Start for the Impatient">Fast Start for the Impatient</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#ServerType" title="Chapter4.Server Types and Security Modes">Server Types and Security Modes</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>David Bannon <<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#samba-bdc" title="Chapter6.Backup Domain Control">Backup Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Volker Lendecke <<a href="mailto:Volker.Lendecke@SerNet.DE" target="_top">Volker.Lendecke@SerNet.DE</a>></p></li></ul></div></dd><dt><span class="term"><a href="#domain-member" title="Chapter7.Domain Membership">Domain Membership</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#StandAloneServer" title="Chapter8.Stand-Alone Servers">Stand-Alone Servers</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#ClientConfig" title="Chapter9.MS Windows Network Configuration Guide">MS Windows Network Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#NetworkBrowsing" title="Chapter10.Samba / MS Windows Network Browsing Guide">Samba / MS Windows Network Browsing Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#passdb" title="Chapter11.Account Information Databases">Account Information Databases</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Olivier (lem) Lemaire <<a href="mailto:olem@IDEALX.org" target="_top">olem@IDEALX.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#groupmapping" title="Chapter12.Mapping MS Windows and Unix Groups">Mapping MS Windows and Unix Groups</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jean Franois Micouleau</p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#AccessControls" title="Chapter13.File, Directory and Share Access Controls">File, Directory and Share Access Controls</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#locking" title="Chapter14.File and Record Locking">File and Record Locking</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Eric Roseme <<a href="mailto:eric.roseme@hp.com" target="_top">eric.roseme@hp.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="#securing-samba" title="Chapter15.Securing Samba">Securing Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#InterdomainTrusts" title="Chapter16.Interdomain Trust Relationships">Interdomain Trust Relationships</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Rafal Szczesniak <<a href="mailto:mimir@samba.org" target="_top">mimir@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#msdfs" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba">Hosting a Microsoft Distributed File System tree on Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Shirish Kalele <<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#printing" title="Chapter18.Classical Printing Support">Classical Printing Support</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle <<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#CUPS-printing" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing Support in Samba 3.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle <<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>></p></li><li><p>Ciprian Vizitiu <<a href="mailto:CVizitiu@gbif.org" target="_top">CVizitiu@gbif.org</a>> (drawings) </p></li></ul></div></dd><dt><span class="term"><a href="#VFS" title="Chapter20.Stackable VFS modules">Stackable VFS modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Tim Potter</p></li><li><p>Simo Sorce (original vfs_skel README) </p></li><li><p>Alexander Bokovoy (original vfs_netatalk docs) </p></li><li><p>Stefan Metzmacher (Update for multiple modules) </p></li></ul></div></dd><dt><span class="term"><a href="#winbind" title="Chapter21.Integrated Logon Support using Winbind">Integrated Logon Support using Winbind</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Tim Potter <<a href="mailto:tpot@samba.org" target="_top">tpot@samba.org</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Naag Mummaneni <<a href="mailto:getnag@rediffmail.com" target="_top">getnag@rediffmail.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#AdvancedNetworkManagement" title="Chapter22.Advanced Network Management">Advanced Network Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#PolicyMgmt" title="Chapter23.System and Account Policies">System and Account Policies</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#ProfileMgmt" title="Chapter24.Desktop Profile Management">Desktop Profile Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#pam" title="Chapter25.PAM based Distributed Authentication">PAM based Distributed Authentication</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Stephen Langasek <<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>></p></li></ul></div></dd><dt><span class="term"><a href="#integrate-ms-networks" title="Chapter26.Integrating MS Windows networks with Samba">Integrating MS Windows networks with Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#unicode" title="Chapter27.Unicode/Charsets">Unicode/Charsets</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>TAKAHASHI Motonobu <<a href="mailto:monyo@home.monyo.com" target="_top">monyo@home.monyo.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="#Backup" title="Chapter28.Samba Backup Techniques">Samba Backup Techniques</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#SambaHA" title="Chapter29.High Availability Options">High Availability Options</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#upgrading-to-3.0" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0">Upgrading from Samba-2.x to Samba-3.0.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#NT4Migration" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC">Migration from NT4 PDC to Samba-3 PDC</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#SWAT" title="Chapter32.SWAT - The Samba Web Administration Tool">SWAT - The Samba Web Administration Tool</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#diagnosis" title="Chapter33.The Samba checklist">The Samba checklist</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#problems" title="Chapter34.Analysing and solving samba problems">Analysing and solving samba problems</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>David Bannon <<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#bugreport" title="Chapter35.Reporting Bugs">Reporting Bugs</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p> Someone; Tridge or Karl Auer perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="#compiling" title="Chapter36.How to compile SAMBA">How to compile SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p> Someone; Jerry perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="#Portability" title="Chapter37.Portability">Portability</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#Other-Clients" title="Chapter38.Samba and other CIFS clients">Samba and other CIFS clients</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jim McDonough <<a href="mailto:jmcd@us.ibm.com" target="_top">jmcd@us.ibm.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#speed" title="Chapter39.Samba Performance Tuning">Samba Performance Tuning</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Paul Cochrane <<a href="mailto:paulc@dth.scot.nhs.uk" target="_top">paulc@dth.scot.nhs.uk</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#DNSDHCP" title="Chapter40.DNS and DHCP Configuration Guide">DNS and DHCP Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="#Further-Resources" title="Chapter41.Further Resources">Further Resources</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>David Lechnyr <<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>></p></li></ul></div></dd></dl></div><ns1:p> - </p></div></div><div><p class="pubdate">Monday April 21, 2003</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> + </ns1:p></div></div><div><p class="pubdate">Monday April 21, 2003</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> This book is a collection of HOWTOs added to Samba documentation over the years. Samba is always under development, and so is its' documentation. This release of the documentation represents a major revision or layout as well as contents. @@ -41,43 +41,43 @@ insignificant number of ideas for inclusion (if not content itself) has been obt from a number of Unofficial HOWTOs - to each such author a big "Thank-you" is also offered. Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and application knowledge that is most to be desired by many Samba users and administrators. -</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>I. <a href="#introduction">General Installation</a></dt><dd><dl><dt>1. <a href="#IntroSMB">Introduction to Samba</a></dt><dd><dl><dt><a href="#id2868116">Background</a></dt><dt><a href="#id2868327">Terminology</a></dt><dt><a href="#id2868481">Related Projects</a></dt><dt><a href="#id2868550">SMB Methodology</a></dt><dt><a href="#id2868638">Epilogue</a></dt><dt><a href="#id2868711">Miscellaneous</a></dt></dl></dd><dt>2. <a href="#install">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="#id2869372">Obtaining and installing samba</a></dt><dt><a href="#id2869412">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2869449">Example Configuration</a></dt><dt><a href="#id2869599">SWAT</a></dt></dl></dd><dt><a href="#id2869643">Try listing the shares available on your - server</a></dt><dt><a href="#id2869694">Try connecting with the unix client</a></dt><dt><a href="#id2869795">Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client</a></dt><dt><a href="#id2869858">What If Things Don't Work?</a></dt><dt><a href="#id2869892">Common Errors</a></dt><dd><dl><dt><a href="#id2869904">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2870119">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="#FastStart">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="#id2869247">Note</a></dt></dl></dd></dl></dd><dt>II. <a href="#type">Server Configuration Basics</a></dt><dd><dl><dt>4. <a href="#ServerType">Server Types and Security Modes</a></dt><dd><dl><dt><a href="#id2871270">Features and Benefits</a></dt><dt><a href="#id2871366">Server Types</a></dt><dt><a href="#id2871450">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2871565">User Level Security</a></dt><dt><a href="#id2871698">Share Level Security</a></dt><dt><a href="#id2871820">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2872071">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2872158">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2872383">Seamless Windows Network Integration</a></dt><dt><a href="#id2872559">Common Errors</a></dt><dd><dl><dt><a href="#id2872587">What makes Samba a SERVER?</a></dt><dt><a href="#id2872620">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2872649">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872682">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="#samba-pdc">Domain Control</a></dt><dd><dl><dt><a href="#id2874489">Features and Benefits</a></dt><dt><a href="#id2874793">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2874809">Domain Controller Types</a></dt><dt><a href="#id2875020">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2875340">Domain Control - Example Configuration</a></dt><dt><a href="#id2875639">Samba ADS Domain Control</a></dt><dt><a href="#id2875661">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2875676">Domain Network Logon Service</a></dt><dt><a href="#id2876003">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876111">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876118">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876157">I get told "You already have a connection to the Domain...." +</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>I. <a href="#introduction">General Installation</a></dt><dd><dl><dt>1. <a href="#IntroSMB">Introduction to Samba</a></dt><dd><dl><dt><a href="#id2867763">Background</a></dt><dt><a href="#id2867816">Terminology</a></dt><dt><a href="#id2866541">Related Projects</a></dt><dt><a href="#id2866610">SMB Methodology</a></dt><dt><a href="#id2866696">Epilogue</a></dt><dt><a href="#id2866770">Miscellaneous</a></dt></dl></dd><dt>2. <a href="#install">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="#id2867536">Obtaining and installing samba</a></dt><dt><a href="#id2867578">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2867152">Example Configuration</a></dt><dt><a href="#id2867295">SWAT</a></dt></dl></dd><dt><a href="#id2867340">Try listing the shares available on your + server</a></dt><dt><a href="#id2866845">Try connecting with the unix client</a></dt><dt><a href="#id2866947">Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client</a></dt><dt><a href="#id2867008">What If Things Don't Work?</a></dt><dt><a href="#id2867038">Common Errors</a></dt><dd><dl><dt><a href="#id2867051">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2868426">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="#FastStart">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="#id2868875">Note</a></dt></dl></dd></dl></dd><dt>II. <a href="#type">Server Configuration Basics</a></dt><dd><dl><dt>4. <a href="#ServerType">Server Types and Security Modes</a></dt><dd><dl><dt><a href="#id2871949">Features and Benefits</a></dt><dt><a href="#id2872041">Server Types</a></dt><dt><a href="#id2872122">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2868550">User Level Security</a></dt><dt><a href="#id2868682">Share Level Security</a></dt><dt><a href="#id2869754">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2869996">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2870079">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2870304">Seamless Windows Network Integration</a></dt><dt><a href="#id2870481">Common Errors</a></dt><dd><dl><dt><a href="#id2870509">What makes Samba a SERVER?</a></dt><dt><a href="#id2870542">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2870571">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872482">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="#samba-pdc">Domain Control</a></dt><dd><dl><dt><a href="#id2875113">Features and Benefits</a></dt><dt><a href="#id2872711">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2872727">Domain Controller Types</a></dt><dt><a href="#id2872926">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2873240">Domain Control - Example Configuration</a></dt><dt><a href="#id2873537">Samba ADS Domain Control</a></dt><dt><a href="#id2873559">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2873574">Domain Network Logon Service</a></dt><dt><a href="#id2876300">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876404">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876412">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876450">I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.</a></dt><dt><a href="#id2876206">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876277">The machine trust account for this computer either does not -exist or is not accessible.</a></dt><dt><a href="#id2876340">When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.</a></dt><dt><a href="#id2876367">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></dd><dt>6. <a href="#samba-bdc">Backup Domain Control</a></dt><dd><dl><dt><a href="#id2878532">Features And Benefits</a></dt><dt><a href="#id2878705">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878734">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2878954">Active Directory Domain Control</a></dt><dt><a href="#id2878975">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2879001">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2879047">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2879149">Example Configuration</a></dt></dl></dd><dt><a href="#id2879210">Common Errors</a></dt><dd><dl><dt><a href="#id2879224">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2879254">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2879287">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2879332">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="#domain-member">Domain Membership</a></dt><dd><dl><dt><a href="#id2880401">Features and Benefits</a></dt><dt><a href="#id2880516">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2880692">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2880944">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2881141">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="#id2881203">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2881406">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2881788">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2881929">Setup your smb.conf</a></dt><dt><a href="#id2882013">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882376">Notes</a></dt></dl></dd><dt><a href="#id2882398">Common Errors</a></dt><dd><dl><dt><a href="#id2882423">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2882455">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="#StandAloneServer">Stand-Alone Servers</a></dt><dd><dl><dt><a href="#id2884809">Features and Benefits</a></dt><dt><a href="#id2885005">Background</a></dt><dt><a href="#id2885077">Example Configuration</a></dt><dd><dl><dt><a href="#id2885092">Reference Documentation Server</a></dt><dt><a href="#id2885142">Central Print Serving</a></dt></dl></dd><dt><a href="#id2885356">Common Errors</a></dt></dl></dd><dt>9. <a href="#ClientConfig">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="#id2884469">Note</a></dt></dl></dd></dl></dd><dt>III. <a href="#optional">Advanced Configuration</a></dt><dd><dl><dt>10. <a href="#NetworkBrowsing">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="#id2886062">Features and Benefits</a></dt><dt><a href="#id2886141">What is Browsing?</a></dt><dt><a href="#id2886251">Discussion</a></dt><dd><dl><dt><a href="#id2886267">NetBIOS over TCP/IP</a></dt><dt><a href="#id2886430">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2886562">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2886698">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2886824">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2887045">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2887315">Making Samba the domain master</a></dt><dt><a href="#id2887471">Note about broadcast addresses</a></dt><dt><a href="#id2887488">Multiple interfaces</a></dt><dt><a href="#id2887517">Use of the Remote Announce parameter</a></dt><dt><a href="#id2887626">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2887687">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2887846">Setting up a WINS server</a></dt><dt><a href="#id2888045">WINS Replication</a></dt><dt><a href="#id2888070">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2888154">Helpful Hints</a></dt><dd><dl><dt><a href="#id2888167">Windows Networking Protocols</a></dt><dt><a href="#id2888234">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2888372">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2888419">Browsing support in Samba</a></dt><dt><a href="#id2888526">Problem resolution</a></dt><dt><a href="#id2888605">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2889225">Common Errors</a></dt><dd><dl><dt><a href="#id2889240">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2889269">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></dd><dt>11. <a href="#passdb">Account Information Databases</a></dt><dd><dl><dt><a href="#id2892812">Features and Benefits</a></dt><dt><a href="#id2893140">Technical Information</a></dt><dd><dl><dt><a href="#id2893204">Important Notes About Security</a></dt><dt><a href="#id2893458">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2893513">Account Management Tools</a></dt><dd><dl><dt><a href="#id2893545">The smbpasswd Command</a></dt><dt><a href="#id2893811">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2893963">Password Backends</a></dt><dd><dl><dt><a href="#id2893999">Plain Text</a></dt><dt><a href="#id2894038">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2894145">tdbsam</a></dt><dt><a href="#id2894173">ldapsam</a></dt><dt><a href="#id2895689">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2896493">Common Errors</a></dt><dd><dl><dt><a href="#id2896501">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2896516">Users are being added to the wrong backend database</a></dt><dt><a href="#id2896576">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="#groupmapping">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="#id2903953">Features and Benefits</a></dt><dt><a href="#id2904055">Discussion</a></dt><dd><dl><dt><a href="#id2904246">Example Configuration</a></dt></dl></dd><dt><a href="#id2904310">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2904325">Sample smb.conf add group script</a></dt><dt><a href="#id2904393">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2904485">Common Errors</a></dt><dd><dl><dt><a href="#id2904501">Adding Groups Fails</a></dt><dt><a href="#id2904562">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="#id2902775">Features and Benefits</a></dt><dt><a href="#id2902812">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902830">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2903087">Managing Directories</a></dt><dt><a href="#id2903183">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2903398">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2904578">User and Group Based Controls</a></dt><dt><a href="#id2904850">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2905095">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905311">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905383">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905682">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905690">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905728">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905807">Viewing file ownership</a></dt><dt><a href="#id2905929">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906157">Modifying file or directory permissions</a></dt><dt><a href="#id2906309">Interaction with the standard Samba create mask - parameters</a></dt><dt><a href="#id2906639">Interaction with the standard Samba file attribute - mapping</a></dt></dl></dd><dt><a href="#id2906714">Common Errors</a></dt><dd><dl><dt><a href="#id2906729">Users can not write to a public share</a></dt><dt><a href="#id2907109">I have set force user and Samba still makes root the owner of all the files - I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="#locking">File and Record Locking</a></dt><dd><dl><dt><a href="#id2910721">Features and Benefits</a></dt><dt><a href="#id2910776">Discussion</a></dt><dd><dl><dt><a href="#id2910908">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2911554">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2911664">Example Configuration</a></dt></dl></dd><dt><a href="#id2911924">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2912154">Workstation Service Entries</a></dt><dt><a href="#id2912180">Server Service Entries</a></dt></dl></dd><dt><a href="#id2912260">Persistent Data Corruption</a></dt><dt><a href="#id2912291">Common Errors</a></dt><dd><dl><dt><a href="#id2912365">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2912394">Additional Reading</a></dt></dl></dd><dt>15. <a href="#securing-samba">Securing Samba</a></dt><dd><dl><dt><a href="#id2914448">Introduction</a></dt><dt><a href="#id2914481">Features and Benefits</a></dt><dt><a href="#id2914555">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2914574">Using host based protection</a></dt><dt><a href="#id2914645">User based protection</a></dt><dt><a href="#id2914697">Using interface protection</a></dt><dt><a href="#id2914749">Using a firewall</a></dt><dt><a href="#id2914805">Using a IPC$ share deny</a></dt><dt><a href="#id2914866">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2914907">Upgrading Samba</a></dt><dt><a href="#id2914932">Common Errors</a></dt><dd><dl><dt><a href="#id2914949">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2914974">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="#id2915881">Features and Benefits</a></dt><dt><a href="#id2915909">Trust Relationship Background</a></dt><dt><a href="#id2915993">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2916006">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2916091">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2916127">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2916155">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2916295">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2916428">Common Errors</a></dt><dd><dl><dt><a href="#id2916443">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="#msdfs">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="#id2915783">Features and Benefits</a></dt><dt><a href="#id2917436">Common Errors</a></dt></dl></dd><dt>18. <a href="#printing">Classical Printing Support</a></dt><dd><dl><dt><a href="#id2917027">Features and Benefits</a></dt><dt><a href="#id2917095">Technical Introduction</a></dt><dd><dl><dt><a href="#id2917133">What happens if you send a Job from a Client</a></dt><dt><a href="#id2917203">Printing Related Configuration Parameters</a></dt><dt><a href="#id2918120">Parameters Recommended for Use</a></dt><dt><a href="#id2918450">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2918559">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2918652">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2918721">Verification of "Settings in Use" with testparm</a></dt><dt><a href="#id2918810">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2919116">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2919220">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2919234">The [global] Section</a></dt><dt><a href="#id2919616">The [printers] Section</a></dt><dt><a href="#id2919945">Any [my_printer_name] Section</a></dt><dt><a href="#id2920166">Print Commands</a></dt><dt><a href="#id2920216">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2920741">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2921021">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2921186">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2921338">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2921450">Creating the [print$] Share</a></dt><dt><a href="#id2921521">Parameters in the [print$] Section</a></dt><dt><a href="#id2921752">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2921913">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2922008">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2922192">Setting Drivers for existing Printers with -rpcclient</a></dt></dl></dd><dt><a href="#id2923912">"The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)</a></dt><dd><dl><dt><a href="#id2923933">The first Client Driver Installation</a></dt><dt><a href="#id2924131">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2924420">Further Client Driver Install Procedures</a></dt><dt><a href="#id2924516">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="#id2924657">Other Gotchas</a></dt><dd><dl><dt><a href="#id2924690">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2925127">Supporting large Numbers of Printers</a></dt><dt><a href="#id2925430">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2925673">Weird Error Message Cannot connect under a -different Name</a></dt><dt><a href="#id2925771">Be careful when assembling Driver Files</a></dt><dt><a href="#id2926117">Samba and Printer Ports</a></dt><dt><a href="#id2926188">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2926210">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2926256">What is Imprints?</a></dt><dt><a href="#id2926297">Creating Printer Driver Packages</a></dt><dt><a href="#id2926316">The Imprints Server</a></dt><dt><a href="#id2926340">The Installation Client</a></dt></dl></dd><dt><a href="#id2926492">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2926822">The addprinter command</a></dt><dt><a href="#id2926867">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="#id2927036">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2927051">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2927064">I give my root password but I don't get access</a></dt><dt><a href="#id2927097">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="#CUPS-printing">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="#id2936290">Introduction</a></dt><dd><dl><dt><a href="#id2936298">Features and Benefits</a></dt><dt><a href="#id2936350">Overview</a></dt></dl></dd><dt><a href="#id2936405">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2936484">Linking of smbd with libcups.so</a></dt><dt><a href="#id2936628">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2936710">More complex smb.conf Settings for -CUPS</a></dt></dl></dd><dt><a href="#id2936828">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2936848">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="#id2936875">CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2936912">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2936970">Explicitly enable "raw" printing for -application/octet-stream!</a></dt><dt><a href="#id2937131">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2937224">Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2937300">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2937344">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2937445">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2937533">PostScript and Ghostscript</a></dt><dt><a href="#id2937630">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2937742">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2937813">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2937902">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2937925">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2938065">MIME types and CUPS Filters</a></dt><dt><a href="#id2938252">MIME type Conversion Rules</a></dt><dt><a href="#id2938369">Filter Requirements</a></dt><dt><a href="#id2938539">Prefilters</a></dt><dt><a href="#id2938624">pstops</a></dt><dt><a href="#id2938727">pstoraster</a></dt><dt><a href="#id2938883">imagetops and imagetoraster</a></dt><dt><a href="#id2938940">rasterto [printers specific]</a></dt><dt><a href="#id2939024">CUPS Backends</a></dt><dt><a href="#id2939336">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2939448">The Complete Picture</a></dt><dt><a href="#id2939464">mime.convs</a></dt><dt><a href="#id2939517">"Raw" printing</a></dt><dt><a href="#id2939571">"application/octet-stream" printing</a></dt><dt><a href="#id2939786">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2940015">Difference between cupsomatic/foomatic-rip and -native CUPS printing</a></dt><dt><a href="#id2940170">Examples for filtering Chains</a></dt><dt><a href="#id2940401">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2940530">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2940605">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2940620">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2940659">Driver Execution on the Client</a></dt><dt><a href="#id2940731">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2940794">Network Printing (Windows clients -- UNIX/Samba Print -Servers)</a></dt><dd><dl><dt><a href="#id2940814">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2940978">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2941054">Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2941110">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2941150">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2941216">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2941233">Printer Drivers running in "Kernel Mode" cause many -Problems</a></dt><dt><a href="#id2941268">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2941289">CUPS: a "Magical Stone"?</a></dt><dt><a href="#id2941316">PostScript Drivers with no major problems -- even in Kernel -Mode</a></dt></dl></dd><dt><a href="#id2941369"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2941388">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2941480">Prepare your smb.conf for -cupsaddsmb</a></dt><dt><a href="#id2941526">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="#id2941724">Recognize the different Driver Files</a></dt><dt><a href="#id2941782">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2941814">ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"</a></dt><dt><a href="#id2941864">Caveats to be considered</a></dt><dt><a href="#id2942086">What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="#id2942268">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="#id2942369">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="#id2942596">Understanding cupsaddsmb</a></dt><dt><a href="#id2942690">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2942777">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2942812">cupsaddsmb Flowchart</a></dt><dt><a href="#id2942865">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2942978">Avoiding critical PostScript Driver Settings on the -Client</a></dt></dl></dd><dt><a href="#id2943112">Installing PostScript Driver Files manually (using -rpcclient)</a></dt><dd><dl><dt><a href="#id2943227">A Check of the rpcclient man Page</a></dt><dt><a href="#id2943340">Understanding the rpcclient man Page</a></dt><dt><a href="#id2943429">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2943519">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2943682">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2944334">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2944435">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2944537">Trivial DataBase Files</a></dt><dt><a href="#id2944608">Binary Format</a></dt><dt><a href="#id2944670">Losing *.tdb Files</a></dt><dt><a href="#id2944728">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2944795">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2944903">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2945532">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2945993">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2946024">Setting up Quotas</a></dt><dt><a href="#id2946056">Correct and incorrect Accounting</a></dt><dt><a href="#id2946097">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2946169">The page_log File Syntax</a></dt><dt><a href="#id2946270">Possible Shortcomings</a></dt><dt><a href="#id2946341">Future Developments</a></dt><dt><a href="#id2946390">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2946404">Additional Material</a></dt><dt><a href="#id2946598">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2946644">CUPS Configuration Settings explained</a></dt><dt><a href="#id2946726">Pre-conditions</a></dt><dt><a href="#id2946787">Manual Configuration</a></dt></dl></dd><dt><a href="#id2946805">When not to use Samba to print to -CUPS</a></dt><dt><a href="#id2946822">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2946857">Where to find Documentation</a></dt><dt><a href="#id2946870">How to ask for Help</a></dt><dt><a href="#id2946883">Where to find Help</a></dt></dl></dd><dt><a href="#id2946896">Appendix</a></dt><dd><dl><dt><a href="#id2946904">Printing from CUPS to Windows attached -Printers</a></dt><dt><a href="#id2947118">More CUPS filtering Chains</a></dt><dt><a href="#id2947424">Trouble Shooting Guidelines to fix typical Samba printing -Problems</a></dt><dt><a href="#id2948546">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="#VFS">Stackable VFS modules</a></dt><dd><dl><dt><a href="#id2960717">Features and Benefits</a></dt><dt><a href="#id2960735">Discussion</a></dt><dt><a href="#id2960826">Included modules</a></dt><dd><dl><dt><a href="#id2960833">audit</a></dt><dt><a href="#id2960871">extd_audit</a></dt><dt><a href="#id2960995">fake_perms</a></dt><dt><a href="#id2961013">recycle</a></dt><dt><a href="#id2961151">netatalk</a></dt></dl></dd><dt><a href="#id2961195">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2961218">DatabaseFS</a></dt><dt><a href="#id2961273">vscan</a></dt></dl></dd><dt><a href="#id2961303">Common Errors</a></dt></dl></dd><dt>21. <a href="#winbind">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="#id2962201">Features and Benefits</a></dt><dt><a href="#id2962229">Introduction</a></dt><dt><a href="#id2962301">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2962361">Target Uses</a></dt></dl></dd><dt><a href="#id2962392">How Winbind Works</a></dt><dd><dl><dt><a href="#id2962420">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2962454">Microsoft Active Directory Services</a></dt><dt><a href="#id2962477">Name Service Switch</a></dt><dt><a href="#id2962613">Pluggable Authentication Modules</a></dt><dt><a href="#id2962685">User and Group ID Allocation</a></dt><dt><a href="#id2962720">Result Caching</a></dt></dl></dd><dt><a href="#id2962747">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2962776">Introduction</a></dt><dt><a href="#id2962851">Requirements</a></dt><dt><a href="#id2962944">Testing Things Out</a></dt></dl></dd><dt><a href="#id2964563">Conclusion</a></dt><dt><a href="#id2964582">Common Errors</a></dt></dl></dd><dt>22. <a href="#AdvancedNetworkManagement">Advanced Network Management</a></dt><dd><dl><dt><a href="#id2967075">Features and Benefits</a></dt><dt><a href="#id2967264">Remote Server Administration</a></dt><dt><a href="#id2967363">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2967381">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2967592">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2967788">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2967822">Common Errors</a></dt></dl></dd><dt>23. <a href="#PolicyMgmt">System and Account Policies</a></dt><dd><dl><dt><a href="#id2966885">Features and Benefits</a></dt><dt><a href="#id2966939">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2968722">Windows 9x/Me Policies</a></dt><dt><a href="#id2968817">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2968950">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2969202">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2969303">Samba Editreg Toolset</a></dt><dt><a href="#id2969324">Windows NT4/200x</a></dt><dt><a href="#id2969344">Samba PDC</a></dt></dl></dd><dt><a href="#id2969388">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2969535">Common Errors</a></dt><dd><dl><dt><a href="#id2969549">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="#ProfileMgmt">Desktop Profile Management</a></dt><dd><dl><dt><a href="#id2970756">Features and Benefits</a></dt><dt><a href="#id2970790">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2970831">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971236">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972407">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972472">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2972737">Mandatory profiles</a></dt><dt><a href="#id2972795">Creating/Managing Group Profiles</a></dt><dt><a href="#id2972841">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2972861">MS Windows 9x/Me</a></dt><dt><a href="#id2973009">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973563">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974067">Common Errors</a></dt><dd><dl><dt><a href="#id2974080">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974143">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974365">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="#pam">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="#id2978309">Features and Benefits</a></dt><dt><a href="#id2978577">Technical Discussion</a></dt><dd><dl><dt><a href="#id2978595">PAM Configuration Syntax</a></dt><dt><a href="#id2979265">Example System Configurations</a></dt><dt><a href="#id2979567">smb.conf PAM Configuration</a></dt><dt><a href="#id2979625">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2979709">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2980075">Common Errors</a></dt><dd><dl><dt><a href="#id2980089">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="#id2982211">Features and Benefits</a></dt><dt><a href="#id2982236">Background Information</a></dt><dt><a href="#id2982281">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2982337">/etc/hosts</a></dt><dt><a href="#id2982462">/etc/resolv.conf</a></dt><dt><a href="#id2982506">/etc/host.conf</a></dt><dt><a href="#id2982548">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2982637">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2982784">The NetBIOS Name Cache</a></dt><dt><a href="#id2982829">The LMHOSTS file</a></dt><dt><a href="#id2983073">HOSTS file</a></dt><dt><a href="#id2983105">DNS Lookup</a></dt><dt><a href="#id2983130">WINS Lookup</a></dt></dl></dd><dt><a href="#id2983200">Common Errors</a></dt><dd><dl><dt><a href="#id2983216">My Boomerang Won't Come Back</a></dt><dt><a href="#id2983248">Very Slow Network Connections</a></dt><dt><a href="#id2983300">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="#unicode">Unicode/Charsets</a></dt><dd><dl><dt><a href="#id2984418">Features and Benefits</a></dt><dt><a href="#id2984620">What are charsets and unicode?</a></dt><dt><a href="#id2984690">Samba and charsets</a></dt><dt><a href="#id2984790">Conversion from old names</a></dt><dt><a href="#id2984835">Japanese charsets</a></dt></dl></dd><dt>28. <a href="#Backup">Samba Backup Techniques</a></dt><dd><dl><dt><a href="#id2984038">Note</a></dt><dt><a href="#id2984063">Features and Benefits</a></dt></dl></dd><dt>29. <a href="#SambaHA">High Availability Options</a></dt><dd><dl><dt><a href="#id2985605">Note</a></dt></dl></dd></dl></dd><dt>IV. <a href="#migration">Migration and Updating</a></dt><dd><dl><dt>30. <a href="#upgrading-to-3.0">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="#id2984190">Charsets</a></dt><dt><a href="#id2984215">Obsolete configuration options</a></dt><dt><a href="#id2985825">Password Backend</a></dt></dl></dd><dt>31. <a href="#NT4Migration">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="#id2983845">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2983873">Objectives</a></dt><dt><a href="#id2986549">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2986887">Migration Options</a></dt><dd><dl><dt><a href="#id2986968">Planning for Success</a></dt><dt><a href="#id2987210">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="#SWAT">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="#id2986434">Features and Benefits</a></dt><dd><dl><dt><a href="#id2986468">Enabling SWAT for use</a></dt><dt><a href="#id2988827">Securing SWAT through SSL</a></dt><dt><a href="#id2988941">The SWAT Home Page</a></dt><dt><a href="#id2989005">Global Settings</a></dt><dt><a href="#id2989110">Share Settings</a></dt><dt><a href="#id2989175">Printers Settings</a></dt><dt><a href="#id2989239">The SWAT Wizard</a></dt><dt><a href="#id2989287">The Status Page</a></dt><dt><a href="#id2989339">The View Page</a></dt><dt><a href="#id2989362">The Password Change Page</a></dt></dl></dd></dl></dd></dl></dd><dt>V. <a href="#troubleshooting">Troubleshooting</a></dt><dd><dl><dt>33. <a href="#diagnosis">The Samba checklist</a></dt><dd><dl><dt><a href="#id2988578">Introduction</a></dt><dt><a href="#id2990437">Assumptions</a></dt><dt><a href="#id2990614">The tests</a></dt><dt><a href="#id2991790">Still having troubles?</a></dt></dl></dd><dt>34. <a href="#problems">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="#id2993414">Diagnostics tools</a></dt><dt><a href="#id2993555">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2993839">Useful URLs</a></dt><dt><a href="#id2993884">Getting help from the mailing lists</a></dt><dt><a href="#id2994036">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="#bugreport">Reporting Bugs</a></dt><dd><dl><dt><a href="#id2994775">Introduction</a></dt><dt><a href="#id2994997">General info</a></dt><dt><a href="#id2995034">Debug levels</a></dt><dt><a href="#id2995176">Internal errors</a></dt><dt><a href="#id2995284">Attaching to a running process</a></dt><dt><a href="#id2995331">Patches</a></dt></dl></dd></dl></dd><dt>VI. <a href="#Appendixes">Appendixes</a></dt><dd><dl><dt>36. <a href="#compiling">How to compile SAMBA</a></dt><dd><dl><dt><a href="#id2994651">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2994658">Introduction</a></dt><dt><a href="#id2994688">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2996207">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2996256">Verifying Samba's PGP signature</a></dt><dt><a href="#id2996392">Building the Binaries</a></dt><dd><dl><dt><a href="#id2996529">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2996694">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2996786">Starting from inetd.conf</a></dt><dt><a href="#id2996990">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2997085">Common Errors</a></dt></dl></dd><dt>37. <a href="#Portability">Portability</a></dt><dd><dl><dt><a href="#id2995985">HPUX</a></dt><dt><a href="#id2998515">SCO Unix</a></dt><dt><a href="#id2998546">DNIX</a></dt><dt><a href="#id2998716">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2998760">AIX</a></dt><dd><dl><dt><a href="#id2998767">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2998793">Solaris</a></dt><dd><dl><dt><a href="#id2998800">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="#Other-Clients">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="#id2998169">Macintosh clients?</a></dt><dt><a href="#id2999522">OS2 Client</a></dt><dd><dl><dt><a href="#id2999529">How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2999608">How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2999670">How do I get printer driver download working - for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2999766">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2999774">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2999864">Delete .pwl files after password change</a></dt><dt><a href="#id2999894">Configure WfW password handling</a></dt><dt><a href="#id2999940">Case handling of passwords</a></dt><dt><a href="#id2999970">Use TCP/IP as default protocol</a></dt><dt><a href="#id2999988">Speed improvement</a></dt></dl></dd><dt><a href="#id3000034">Windows '95/'98</a></dt><dd><dl><dt><a href="#id3000107">Speed improvement</a></dt></dl></dd><dt><a href="#id3000131">Windows 2000 Service Pack 2</a></dt><dt><a href="#id3000242">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="#speed">Samba Performance Tuning</a></dt><dd><dl><dt><a href="#id3001274">Comparisons</a></dt><dt><a href="#id3001319">Socket options</a></dt><dt><a href="#id3001394">Read size</a></dt><dt><a href="#id3001437">Max xmit</a></dt><dt><a href="#id3001490">Log level</a></dt><dt><a href="#id3001513">Read raw</a></dt><dt><a href="#id3001570">Write raw</a></dt><dt><a href="#id3001612">Slow Logins</a></dt><dt><a href="#id3001633">Client tuning</a></dt><dt><a href="#id3001658">Samba performance problem due changing kernel</a></dt><dt><a href="#id3001692">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="#DNSDHCP">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="#id3001112">Note</a></dt></dl></dd><dt>41. <a href="#Further-Resources">Further Resources</a></dt><dd><dl><dt><a href="#id3001272">Websites</a></dt><dt><a href="#id3002922">Related updates from Microsoft</a></dt><dt><a href="#id3002990">Books</a></dt></dl></dd></dl></dd><dt><a href="#id3001039">Index</a></dt></dl></div><div class="list-of-figures"><p><b>List of Figures</b></p><dl><dt>19.1. <a href="#id2937409">Windows Printing to a local Printer</a></dt><dt>19.2. <a href="#id2937580">Printing to a Postscript Printer</a></dt><dt>19.3. <a href="#id2937660">Ghostscript as a RIP for non-postscript printers</a></dt><dt>19.4. <a href="#id2938589">Prefiltering in CUPS to form Postscript</a></dt><dt>19.5. <a href="#id2938654">Adding Device-specific Print Options</a></dt><dt>19.6. <a href="#id2938756">Postscript to intermediate Raster format</a></dt><dt>19.7. <a href="#id2938809">CUPS-raster production using Ghostscript</a></dt><dt>19.8. <a href="#id2938904">Image format to CUPS-raster format conversion</a></dt><dt>19.9. <a href="#id2938988">Raster to Printer Specific formats</a></dt><dt>19.10. <a href="#id2940065">cupsomatic/foomatic processing versus Native CUPS</a></dt><dt>19.11. <a href="#id2940695">Print Driver execution on the Client</a></dt><dt>19.12. <a href="#id2940753">Print Driver execution on the Server</a></dt><dt>19.13. <a href="#id2940943">Printing via CUPS/samba server</a></dt><dt>19.14. <a href="#id2942830">cupsaddsmb flowchart</a></dt><dt>19.15. <a href="#id2948557">CUPS Printing Overview</a></dt></dl></div><div class="list-of-tables"><p><b>List of Tables</b></p><dl><dt>7.1. <a href="#id2881417">Assumptions</a></dt><dt>10.1. <a href="#id2888772">Browse subnet example 1</a></dt><dt>10.2. <a href="#id2888886">Browse subnet example 2</a></dt><dt>10.3. <a href="#id2888985">Browse subnet example 3</a></dt><dt>10.4. <a href="#id2889086">Browse subnet example 4</a></dt><dt>11.1. <a href="#id2895163">Attributes in the sambaSamAccount objectclass (LDAP)</a></dt><dt>11.2. <a href="#id2895850">Basic smb.conf options for MySQL passdb backend</a></dt><dt>11.3. <a href="#id2895975">MySQL field names for MySQL passdb backend</a></dt><dt>13.1. <a href="#id2903107">Managing directories with unix and windows</a></dt><dt>13.2. <a href="#id2904638">User and Group Based Controls</a></dt><dt>13.3. <a href="#id2904871">File and Directory Permission Based Controls</a></dt><dt>13.4. <a href="#id2905118">Other Controls</a></dt><dt>20.1. <a href="#id2960912">Extended Auditing Log Information</a></dt><dt>24.1. <a href="#id2973359">User Shell Folder registry keys default values</a></dt><dt>24.2. <a href="#id2973503">Defaults of profile settings registry keys</a></dt><dt>24.3. <a href="#id2973759">Defaults of default user profile paths registry keys</a></dt><dt>25.1. <a href="#id2979741">Options recognized by pam_smbpass</a></dt><dt>31.1. <a href="#id2986904">The 3 Major Site Types</a></dt><dt>31.2. <a href="#id2987041">Nature of the Conversion Choices</a></dt></dl></div><div class="list-of-examples"><p><b>List of Examples</b></p><dl><dt>12.1. <a href="#id2904348">smbgrpadd.sh</a></dt><dt>13.1. <a href="#id2903320">Example File</a></dt></dl></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>General Installation</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2866833"></a>Preparing Samba for Configuration</h1></div></div><div></div></div><p>This section of the Samba-HOWTO-Collection contains general info on how to install samba +existing set.." when creating a machine trust account.</a></dt><dt><a href="#id2876500">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876570">The machine trust account for this computer either does not +exist or is not accessible.</a></dt><dt><a href="#id2876634">When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.</a></dt><dt><a href="#id2876660">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></dd><dt>6. <a href="#samba-bdc">Backup Domain Control</a></dt><dd><dl><dt><a href="#id2878706">Features And Benefits</a></dt><dt><a href="#id2878870">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878898">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2876857">Active Directory Domain Control</a></dt><dt><a href="#id2876879">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2876902">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2876928">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2877029">Example Configuration</a></dt></dl></dd><dt><a href="#id2877079">Common Errors</a></dt><dd><dl><dt><a href="#id2877093">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2877125">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2877158">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2877202">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="#domain-member">Domain Membership</a></dt><dd><dl><dt><a href="#id2877728">Features and Benefits</a></dt><dt><a href="#id2877298">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2877460">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879244">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2879440">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879495">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2879692">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2882368">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2882506">Setup your smb.conf</a></dt><dt><a href="#id2882590">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882938">Notes</a></dt></dl></dd><dt><a href="#id2882960">Common Errors</a></dt><dd><dl><dt><a href="#id2882986">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2883018">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="#StandAloneServer">Stand-Alone Servers</a></dt><dd><dl><dt><a href="#id2884461">Features and Benefits</a></dt><dt><a href="#id2884499">Background</a></dt><dt><a href="#id2884567">Example Configuration</a></dt><dd><dl><dt><a href="#id2883169">Reference Documentation Server</a></dt><dt><a href="#id2883216">Central Print Serving</a></dt></dl></dd><dt><a href="#id2883429">Common Errors</a></dt></dl></dd><dt>9. <a href="#ClientConfig">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="#id2883797">Note</a></dt></dl></dd></dl></dd><dt>III. <a href="#optional">Advanced Configuration</a></dt><dd><dl><dt>10. <a href="#NetworkBrowsing">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="#id2884150">Features and Benefits</a></dt><dt><a href="#id2884229">What is Browsing?</a></dt><dt><a href="#id2888334">Discussion</a></dt><dd><dl><dt><a href="#id2888350">NetBIOS over TCP/IP</a></dt><dt><a href="#id2888512">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2883481">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2883615">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2883741">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2885127">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2885392">Making Samba the domain master</a></dt><dt><a href="#id2885548">Note about broadcast addresses</a></dt><dt><a href="#id2885566">Multiple interfaces</a></dt><dt><a href="#id2889067">Use of the Remote Announce parameter</a></dt><dt><a href="#id2889176">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2889237">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2889395">Setting up a WINS server</a></dt><dt><a href="#id2889590">WINS Replication</a></dt><dt><a href="#id2889615">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2889699">Helpful Hints</a></dt><dd><dl><dt><a href="#id2889712">Windows Networking Protocols</a></dt><dt><a href="#id2889779">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2889917">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2889964">Browsing support in Samba</a></dt><dt><a href="#id2890071">Problem resolution</a></dt><dt><a href="#id2890150">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2890765">Common Errors</a></dt><dd><dl><dt><a href="#id2890780">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2890809">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></dd><dt>11. <a href="#passdb">Account Information Databases</a></dt><dd><dl><dt><a href="#id2894185">Features and Benefits</a></dt><dt><a href="#id2891076">Technical Information</a></dt><dd><dl><dt><a href="#id2891140">Important Notes About Security</a></dt><dt><a href="#id2891384">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2891439">Account Management Tools</a></dt><dd><dl><dt><a href="#id2891471">The smbpasswd Command</a></dt><dt><a href="#id2891736">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2891870">Password Backends</a></dt><dd><dl><dt><a href="#id2891906">Plain Text</a></dt><dt><a href="#id2891946">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2896387">tdbsam</a></dt><dt><a href="#id2896415">ldapsam</a></dt><dt><a href="#id2897903">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2898709">Common Errors</a></dt><dd><dl><dt><a href="#id2898716">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2898731">Users are being added to the wrong backend database</a></dt><dt><a href="#id2898791">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="#groupmapping">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="#id2898963">Features and Benefits</a></dt><dt><a href="#id2899064">Discussion</a></dt><dd><dl><dt><a href="#id2899252">Example Configuration</a></dt></dl></dd><dt><a href="#id2899318">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2899332">Sample smb.conf add group script</a></dt><dt><a href="#id2899399">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2899473">Common Errors</a></dt><dd><dl><dt><a href="#id2899489">Adding Groups Fails</a></dt><dt><a href="#id2899549">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="#id2902735">Features and Benefits</a></dt><dt><a href="#id2902861">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902879">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2899794">Managing Directories</a></dt><dt><a href="#id2899890">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2900296">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2900324">User and Group Based Controls</a></dt><dt><a href="#id2900596">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2900842">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905426">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905498">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905797">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905805">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905843">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905922">Viewing file ownership</a></dt><dt><a href="#id2906044">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906272">Modifying file or directory permissions</a></dt><dt><a href="#id2906424">Interaction with the standard Samba create mask + parameters</a></dt><dt><a href="#id2906754">Interaction with the standard Samba file attribute + mapping</a></dt></dl></dd><dt><a href="#id2906829">Common Errors</a></dt><dd><dl><dt><a href="#id2906843">Users can not write to a public share</a></dt><dt><a href="#id2907222">I have set force user and Samba still makes root the owner of all the files + I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="#locking">File and Record Locking</a></dt><dd><dl><dt><a href="#id2909343">Features and Benefits</a></dt><dt><a href="#id2909398">Discussion</a></dt><dd><dl><dt><a href="#id2909529">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2907904">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2908013">Example Configuration</a></dt></dl></dd><dt><a href="#id2908272">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2910709">Workstation Service Entries</a></dt><dt><a href="#id2910736">Server Service Entries</a></dt></dl></dd><dt><a href="#id2910816">Persistent Data Corruption</a></dt><dt><a href="#id2910846">Common Errors</a></dt><dd><dl><dt><a href="#id2910919">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2910950">Additional Reading</a></dt></dl></dd><dt>15. <a href="#securing-samba">Securing Samba</a></dt><dd><dl><dt><a href="#id2912374">Introduction</a></dt><dt><a href="#id2912407">Features and Benefits</a></dt><dt><a href="#id2911067">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2911085">Using host based protection</a></dt><dt><a href="#id2911154">User based protection</a></dt><dt><a href="#id2911205">Using interface protection</a></dt><dt><a href="#id2911256">Using a firewall</a></dt><dt><a href="#id2911312">Using a IPC$ share deny</a></dt><dt><a href="#id2911377">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2911416">Upgrading Samba</a></dt><dt><a href="#id2911439">Common Errors</a></dt><dd><dl><dt><a href="#id2911458">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2911483">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="#id2912001">Features and Benefits</a></dt><dt><a href="#id2912030">Trust Relationship Background</a></dt><dt><a href="#id2912113">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2912125">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2914100">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2914137">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2914164">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2914290">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2911669">Common Errors</a></dt><dd><dl><dt><a href="#id2911684">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="#msdfs">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="#id2911782">Features and Benefits</a></dt><dt><a href="#id2913192">Common Errors</a></dt></dl></dd><dt>18. <a href="#printing">Classical Printing Support</a></dt><dd><dl><dt><a href="#id2914714">Features and Benefits</a></dt><dt><a href="#id2914778">Technical Introduction</a></dt><dd><dl><dt><a href="#id2914814">What happens if you send a Job from a Client</a></dt><dt><a href="#id2914884">Printing Related Configuration Parameters</a></dt><dt><a href="#id2917993">Parameters Recommended for Use</a></dt><dt><a href="#id2913353">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2913461">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2913555">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2915561">Verification of "Settings in Use" with testparm</a></dt><dt><a href="#id2915643">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2915950">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2916042">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2916055">The [global] Section</a></dt><dt><a href="#id2925516">The [printers] Section</a></dt><dt><a href="#id2925845">Any [my_printer_name] Section</a></dt><dt><a href="#id2926066">Print Commands</a></dt><dt><a href="#id2926117">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2926642">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2926920">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2927074">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2927225">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2927338">Creating the [print$] Share</a></dt><dt><a href="#id2927409">Parameters in the [print$] Section</a></dt><dt><a href="#id2927630">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2927791">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2927885">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2928069">Setting Drivers for existing Printers with +rpcclient</a></dt></dl></dd><dt><a href="#id2929667">"The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)</a></dt><dd><dl><dt><a href="#id2929688">The first Client Driver Installation</a></dt><dt><a href="#id2929885">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2930175">Further Client Driver Install Procedures</a></dt><dt><a href="#id2930270">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="#id2930412">Other Gotchas</a></dt><dd><dl><dt><a href="#id2930445">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2930879">Supporting large Numbers of Printers</a></dt><dt><a href="#id2931181">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2931425">Weird Error Message Cannot connect under a +different Name</a></dt><dt><a href="#id2931523">Be careful when assembling Driver Files</a></dt><dt><a href="#id2931794">Samba and Printer Ports</a></dt><dt><a href="#id2931864">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2931887">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2931932">What is Imprints?</a></dt><dt><a href="#id2931973">Creating Printer Driver Packages</a></dt><dt><a href="#id2931992">The Imprints Server</a></dt><dt><a href="#id2932017">The Installation Client</a></dt></dl></dd><dt><a href="#id2932169">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2932498">The addprinter command</a></dt><dt><a href="#id2932543">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="#id2932712">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2932726">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2932739">I give my root password but I don't get access</a></dt><dt><a href="#id2932773">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="#CUPS-printing">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="#id2939792">Introduction</a></dt><dd><dl><dt><a href="#id2939799">Features and Benefits</a></dt><dt><a href="#id2939849">Overview</a></dt></dl></dd><dt><a href="#id2939900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2939980">Linking of smbd with libcups.so</a></dt><dt><a href="#id2932886">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2932950">More complex smb.conf Settings for +CUPS</a></dt></dl></dd><dt><a href="#id2933049">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2933069">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="#id2933096">CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2933133">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2933191">Explicitly enable "raw" printing for +application/octet-stream!</a></dt><dt><a href="#id2933352">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2933445">Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2933520">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2933565">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2933663">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2933735">PostScript and Ghostscript</a></dt><dt><a href="#id2933832">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2933927">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2946744">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2946833">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2946856">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2946994">MIME types and CUPS Filters</a></dt><dt><a href="#id2947182">MIME type Conversion Rules</a></dt><dt><a href="#id2947298">Filter Requirements</a></dt><dt><a href="#id2947467">Prefilters</a></dt><dt><a href="#id2947552">pstops</a></dt><dt><a href="#id2947655">pstoraster</a></dt><dt><a href="#id2947811">imagetops and imagetoraster</a></dt><dt><a href="#id2947866">rasterto [printers specific]</a></dt><dt><a href="#id2947951">CUPS Backends</a></dt><dt><a href="#id2948265">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2948368">The Complete Picture</a></dt><dt><a href="#id2948383">mime.convs</a></dt><dt><a href="#id2948436">"Raw" printing</a></dt><dt><a href="#id2948490">"application/octet-stream" printing</a></dt><dt><a href="#id2948706">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2948933">Difference between cupsomatic/foomatic-rip and +native CUPS printing</a></dt><dt><a href="#id2949090">Examples for filtering Chains</a></dt><dt><a href="#id2949319">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2949444">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2949506">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2949522">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2949561">Driver Execution on the Client</a></dt><dt><a href="#id2949620">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2949683">Network Printing (Windows clients -- UNIX/Samba Print +Servers)</a></dt><dd><dl><dt><a href="#id2949704">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2949864">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2949942">Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2949997">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2950038">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2950103">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2950120">Printer Drivers running in "Kernel Mode" cause many +Problems</a></dt><dt><a href="#id2950155">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2950176">CUPS: a "Magical Stone"?</a></dt><dt><a href="#id2950203">PostScript Drivers with no major problems -- even in Kernel +Mode</a></dt></dl></dd><dt><a href="#id2950237"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2950256">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2950347">Prepare your smb.conf for +cupsaddsmb</a></dt><dt><a href="#id2950394">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="#id2950591">Recognize the different Driver Files</a></dt><dt><a href="#id2950649">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2950682">ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"</a></dt><dt><a href="#id2950732">Caveats to be considered</a></dt><dt><a href="#id2950953">What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="#id2951134">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="#id2951235">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="#id2951378">Understanding cupsaddsmb</a></dt><dt><a href="#id2951472">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2951559">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2951594">cupsaddsmb Flowchart</a></dt><dt><a href="#id2951645">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2951760">Avoiding critical PostScript Driver Settings on the +Client</a></dt></dl></dd><dt><a href="#id2951894">Installing PostScript Driver Files manually (using +rpcclient)</a></dt><dd><dl><dt><a href="#id2952009">A Check of the rpcclient man Page</a></dt><dt><a href="#id2952121">Understanding the rpcclient man Page</a></dt><dt><a href="#id2952200">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2952290">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2952452">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2953072">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2953174">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2953277">Trivial DataBase Files</a></dt><dt><a href="#id2953347">Binary Format</a></dt><dt><a href="#id2953409">Losing *.tdb Files</a></dt><dt><a href="#id2953468">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2953530">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2953636">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2954264">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2954722">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2954753">Setting up Quotas</a></dt><dt><a href="#id2954784">Correct and incorrect Accounting</a></dt><dt><a href="#id2954825">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2954897">The page_log File Syntax</a></dt><dt><a href="#id2954998">Possible Shortcomings</a></dt><dt><a href="#id2955070">Future Developments</a></dt><dt><a href="#id2955118">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2955133">Additional Material</a></dt><dt><a href="#id2955326">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2955372">CUPS Configuration Settings explained</a></dt><dt><a href="#id2955454">Pre-conditions</a></dt><dt><a href="#id2955515">Manual Configuration</a></dt></dl></dd><dt><a href="#id2955533">When not to use Samba to print to +CUPS</a></dt><dt><a href="#id2955550">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2955585">Where to find Documentation</a></dt><dt><a href="#id2955598">How to ask for Help</a></dt><dt><a href="#id2955611">Where to find Help</a></dt></dl></dd><dt><a href="#id2955625">Appendix</a></dt><dd><dl><dt><a href="#id2955632">Printing from CUPS to Windows attached +Printers</a></dt><dt><a href="#id2955826">More CUPS filtering Chains</a></dt><dt><a href="#id2956080">Trouble Shooting Guidelines to fix typical Samba printing +Problems</a></dt><dt><a href="#id2957186">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="#VFS">Stackable VFS modules</a></dt><dd><dl><dt><a href="#id2958605">Features and Benefits</a></dt><dt><a href="#id2958623">Discussion</a></dt><dt><a href="#id2957300">Included modules</a></dt><dd><dl><dt><a href="#id2957307">audit</a></dt><dt><a href="#id2957345">extd_audit</a></dt><dt><a href="#id2957466">fake_perms</a></dt><dt><a href="#id2957486">recycle</a></dt><dt><a href="#id2957625">netatalk</a></dt></dl></dd><dt><a href="#id2957671">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2957693">DatabaseFS</a></dt><dt><a href="#id2957748">vscan</a></dt></dl></dd><dt><a href="#id2957777">Common Errors</a></dt></dl></dd><dt>21. <a href="#winbind">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="#id2958272">Features and Benefits</a></dt><dt><a href="#id2958300">Introduction</a></dt><dt><a href="#id2960332">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2960392">Target Uses</a></dt></dl></dd><dt><a href="#id2960423">How Winbind Works</a></dt><dd><dl><dt><a href="#id2960451">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2960484">Microsoft Active Directory Services</a></dt><dt><a href="#id2960506">Name Service Switch</a></dt><dt><a href="#id2957818">Pluggable Authentication Modules</a></dt><dt><a href="#id2957889">User and Group ID Allocation</a></dt><dt><a href="#id2957924">Result Caching</a></dt></dl></dd><dt><a href="#id2957952">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2957980">Introduction</a></dt><dt><a href="#id2958055">Requirements</a></dt><dt><a href="#id2959330">Testing Things Out</a></dt></dl></dd><dt><a href="#id2963732">Conclusion</a></dt><dt><a href="#id2963750">Common Errors</a></dt></dl></dd><dt>22. <a href="#AdvancedNetworkManagement">Advanced Network Management</a></dt><dd><dl><dt><a href="#id2965123">Features and Benefits</a></dt><dt><a href="#id2965154">Remote Server Administration</a></dt><dt><a href="#id2963838">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2963854">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2964055">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2964250">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2964283">Common Errors</a></dt></dl></dd><dt>23. <a href="#PolicyMgmt">System and Account Policies</a></dt><dd><dl><dt><a href="#id2964680">Features and Benefits</a></dt><dt><a href="#id2964732">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2964843">Windows 9x/Me Policies</a></dt><dt><a href="#id2964391">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2964524">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2965966">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2966066">Samba Editreg Toolset</a></dt><dt><a href="#id2966087">Windows NT4/200x</a></dt><dt><a href="#id2966107">Samba PDC</a></dt></dl></dd><dt><a href="#id2966152">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2966299">Common Errors</a></dt><dd><dl><dt><a href="#id2966313">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="#ProfileMgmt">Desktop Profile Management</a></dt><dd><dl><dt><a href="#id2966416">Features and Benefits</a></dt><dt><a href="#id2966449">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2966490">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971852">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972789">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972854">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2973114">Mandatory profiles</a></dt><dt><a href="#id2973172">Creating/Managing Group Profiles</a></dt><dt><a href="#id2973217">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2973237">MS Windows 9x/Me</a></dt><dt><a href="#id2973385">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973939">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974443">Common Errors</a></dt><dd><dl><dt><a href="#id2974456">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974519">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974737">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="#pam">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="#id2976194">Features and Benefits</a></dt><dt><a href="#id2975049">Technical Discussion</a></dt><dd><dl><dt><a href="#id2975066">PAM Configuration Syntax</a></dt><dt><a href="#id2975731">Example System Configurations</a></dt><dt><a href="#id2978164">smb.conf PAM Configuration</a></dt><dt><a href="#id2978221">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2978305">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2978671">Common Errors</a></dt><dd><dl><dt><a href="#id2978685">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="#id2980428">Features and Benefits</a></dt><dt><a href="#id2980452">Background Information</a></dt><dt><a href="#id2980497">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2980549">/etc/hosts</a></dt><dt><a href="#id2980673">/etc/resolv.conf</a></dt><dt><a href="#id2978824">/etc/host.conf</a></dt><dt><a href="#id2978866">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2978954">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2979079">The NetBIOS Name Cache</a></dt><dt><a href="#id2979124">The LMHOSTS file</a></dt><dt><a href="#id2979238">HOSTS file</a></dt><dt><a href="#id2979270">DNS Lookup</a></dt><dt><a href="#id2979295">WINS Lookup</a></dt></dl></dd><dt><a href="#id2979366">Common Errors</a></dt><dd><dl><dt><a href="#id2979382">My Boomerang Won't Come Back</a></dt><dt><a href="#id2979413">Very Slow Network Connections</a></dt><dt><a href="#id2979464">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="#unicode">Unicode/Charsets</a></dt><dd><dl><dt><a href="#id2979620">Features and Benefits</a></dt><dt><a href="#id2979662">What are charsets and unicode?</a></dt><dt><a href="#id2979730">Samba and charsets</a></dt><dt><a href="#id2979831">Conversion from old names</a></dt><dt><a href="#id2979876">Japanese charsets</a></dt></dl></dd><dt>28. <a href="#Backup">Samba Backup Techniques</a></dt><dd><dl><dt><a href="#id2982471">Note</a></dt><dt><a href="#id2982492">Features and Benefits</a></dt></dl></dd><dt>29. <a href="#SambaHA">High Availability Options</a></dt><dd><dl><dt><a href="#id2982302">Note</a></dt></dl></dd></dl></dd><dt>IV. <a href="#migration">Migration and Updating</a></dt><dd><dl><dt>30. <a href="#upgrading-to-3.0">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="#id2983637">Charsets</a></dt><dt><a href="#id2983660">Obsolete configuration options</a></dt><dt><a href="#id2983713">Password Backend</a></dt></dl></dd><dt>31. <a href="#NT4Migration">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="#id2982957">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2982981">Objectives</a></dt><dt><a href="#id2981910">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2984126">Migration Options</a></dt><dd><dl><dt><a href="#id2984207">Planning for Success</a></dt><dt><a href="#id2984449">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="#SWAT">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="#id2984755">Features and Benefits</a></dt><dd><dl><dt><a href="#id2984605">Enabling SWAT for use</a></dt><dt><a href="#id2985495">Securing SWAT through SSL</a></dt><dt><a href="#id2985607">The SWAT Home Page</a></dt><dt><a href="#id2985671">Global Settings</a></dt><dt><a href="#id2985776">Share Settings</a></dt><dt><a href="#id2985841">Printers Settings</a></dt><dt><a href="#id2985906">The SWAT Wizard</a></dt><dt><a href="#id2985953">The Status Page</a></dt><dt><a href="#id2986005">The View Page</a></dt><dt><a href="#id2986028">The Password Change Page</a></dt></dl></dd></dl></dd></dl></dd><dt>V. <a href="#troubleshooting">Troubleshooting</a></dt><dd><dl><dt>33. <a href="#diagnosis">The Samba checklist</a></dt><dd><dl><dt><a href="#id2986149">Introduction</a></dt><dt><a href="#id2986183">Assumptions</a></dt><dt><a href="#id2986356">The tests</a></dt><dt><a href="#id2989908">Still having troubles?</a></dt></dl></dd><dt>34. <a href="#problems">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="#id2991300">Diagnostics tools</a></dt><dt><a href="#id2990026">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2990310">Useful URLs</a></dt><dt><a href="#id2990353">Getting help from the mailing lists</a></dt><dt><a href="#id2990506">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="#bugreport">Reporting Bugs</a></dt><dd><dl><dt><a href="#id2992820">Introduction</a></dt><dt><a href="#id2992880">General info</a></dt><dt><a href="#id2992915">Debug levels</a></dt><dt><a href="#id2991012">Internal errors</a></dt><dt><a href="#id2991120">Attaching to a running process</a></dt><dt><a href="#id2990621">Patches</a></dt></dl></dd></dl></dd><dt>VI. <a href="#Appendixes">Appendixes</a></dt><dd><dl><dt>36. <a href="#compiling">How to compile SAMBA</a></dt><dd><dl><dt><a href="#id2990738">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2990746">Introduction</a></dt><dt><a href="#id2990775">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2992243">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2992291">Verifying Samba's PGP signature</a></dt><dt><a href="#id2992426">Building the Binaries</a></dt><dd><dl><dt><a href="#id2992564">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2993459">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2993550">Starting from inetd.conf</a></dt><dt><a href="#id2993754">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2993849">Common Errors</a></dt></dl></dd><dt>37. <a href="#Portability">Portability</a></dt><dd><dl><dt><a href="#id2995128">HPUX</a></dt><dt><a href="#id2995213">SCO Unix</a></dt><dt><a href="#id2995241">DNIX</a></dt><dt><a href="#id2995411">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2995454">AIX</a></dt><dd><dl><dt><a href="#id2995461">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2995487">Solaris</a></dt><dd><dl><dt><a href="#id2995494">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="#Other-Clients">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="#id2996271">Macintosh clients?</a></dt><dt><a href="#id2996343">OS2 Client</a></dt><dd><dl><dt><a href="#id2996350">How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2995965">How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2996025">How do I get printer driver download working + for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2996122">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2995584">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2995674">Delete .pwl files after password change</a></dt><dt><a href="#id2995704">Configure WfW password handling</a></dt><dt><a href="#id2995750">Case handling of passwords</a></dt><dt><a href="#id2995780">Use TCP/IP as default protocol</a></dt><dt><a href="#id2995797">Speed improvement</a></dt></dl></dd><dt><a href="#id2995844">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2996873">Speed improvement</a></dt></dl></dd><dt><a href="#id2996898">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2997008">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="#speed">Samba Performance Tuning</a></dt><dd><dl><dt><a href="#id2999219">Comparisons</a></dt><dt><a href="#id2997059">Socket options</a></dt><dt><a href="#id2997130">Read size</a></dt><dt><a href="#id2997174">Max xmit</a></dt><dt><a href="#id2997227">Log level</a></dt><dt><a href="#id2997250">Read raw</a></dt><dt><a href="#id2997306">Write raw</a></dt><dt><a href="#id2997348">Slow Logins</a></dt><dt><a href="#id2998255">Client tuning</a></dt><dt><a href="#id2998279">Samba performance problem due changing kernel</a></dt><dt><a href="#id2998311">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="#DNSDHCP">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="#id2999030">Note</a></dt></dl></dd><dt>41. <a href="#Further-Resources">Further Resources</a></dt><dd><dl><dt><a href="#id2998449">Websites</a></dt><dt><a href="#id2998831">Related updates from Microsoft</a></dt><dt><a href="#id2998898">Books</a></dt></dl></dd></dl></dd><dt><a href="#id2998910">Index</a></dt></dl></div><div class="list-of-figures"><p><b>List of Figures</b></p><dl><dt>19.1. <a href="#id2933630">Windows Printing to a local Printer</a></dt><dt>19.2. <a href="#id2933781">Printing to a Postscript Printer</a></dt><dt>19.3. <a href="#id2933861">Ghostscript as a RIP for non-postscript printers</a></dt><dt>19.4. <a href="#id2947518">Prefiltering in CUPS to form Postscript</a></dt><dt>19.5. <a href="#id2947583">Adding Device-specific Print Options</a></dt><dt>19.6. <a href="#id2947685">Postscript to intermediate Raster format</a></dt><dt>19.7. <a href="#id2947737">CUPS-raster production using Ghostscript</a></dt><dt>19.8. <a href="#id2947832">Image format to CUPS-raster format conversion</a></dt><dt>19.9. <a href="#id2947917">Raster to Printer Specific formats</a></dt><dt>19.10. <a href="#id2948984">cupsomatic/foomatic processing versus Native CUPS</a></dt><dt>19.11. <a href="#id2949586">Print Driver execution on the Client</a></dt><dt>19.12. <a href="#id2949642">Print Driver execution on the Server</a></dt><dt>19.13. <a href="#id2949830">Printing via CUPS/samba server</a></dt><dt>19.14. <a href="#id2951611">cupsaddsmb flowchart</a></dt><dt>19.15. <a href="#id2957196">CUPS Printing Overview</a></dt></dl></div><div class="list-of-tables"><p><b>List of Tables</b></p><dl><dt>7.1. <a href="#id2879702">Assumptions</a></dt><dt>10.1. <a href="#id2890314">Browse subnet example 1</a></dt><dt>10.2. <a href="#id2890424">Browse subnet example 2</a></dt><dt>10.3. <a href="#id2890523">Browse subnet example 3</a></dt><dt>10.4. <a href="#id2890624">Browse subnet example 4</a></dt><dt>11.1. <a href="#id2897381">Attributes in the sambaSamAccount objectclass (LDAP)</a></dt><dt>11.2. <a href="#id2898064">Basic smb.conf options for MySQL passdb backend</a></dt><dt>11.3. <a href="#id2898189">MySQL field names for MySQL passdb backend</a></dt><dt>13.1. <a href="#id2899812">Managing directories with unix and windows</a></dt><dt>13.2. <a href="#id2900382">User and Group Based Controls</a></dt><dt>13.3. <a href="#id2900615">File and Directory Permission Based Controls</a></dt><dt>13.4. <a href="#id2900863">Other Controls</a></dt><dt>20.1. <a href="#id2957384">Extended Auditing Log Information</a></dt><dt>24.1. <a href="#id2973733">User Shell Folder registry keys default values</a></dt><dt>24.2. <a href="#id2973877">Defaults of profile settings registry keys</a></dt><dt>24.3. <a href="#id2974132">Defaults of default user profile paths registry keys</a></dt><dt>25.1. <a href="#id2978335">Options recognized by pam_smbpass</a></dt><dt>31.1. <a href="#id2984141">The 3 Major Site Types</a></dt><dt>31.2. <a href="#id2984278">Nature of the Conversion Choices</a></dt></dl></div><div class="list-of-examples"><p><b>List of Examples</b></p><dl><dt>12.1. <a href="#id2899354">smbgrpadd.sh</a></dt><dt>13.1. <a href="#id2900217">Example File</a></dt></dl></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>General Installation</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2866423"></a>Preparing Samba for Configuration</h1></div></div><div></div></div><p>This section of the Samba-HOWTO-Collection contains general info on how to install samba and how to configure the parts of samba you will most likely need. -PLEASE read this.</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="#IntroSMB">Introduction to Samba</a></dt><dd><dl><dt><a href="#id2868116">Background</a></dt><dt><a href="#id2868327">Terminology</a></dt><dt><a href="#id2868481">Related Projects</a></dt><dt><a href="#id2868550">SMB Methodology</a></dt><dt><a href="#id2868638">Epilogue</a></dt><dt><a href="#id2868711">Miscellaneous</a></dt></dl></dd><dt>2. <a href="#install">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="#id2869372">Obtaining and installing samba</a></dt><dt><a href="#id2869412">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2869449">Example Configuration</a></dt><dt><a href="#id2869599">SWAT</a></dt></dl></dd><dt><a href="#id2869643">Try listing the shares available on your - server</a></dt><dt><a href="#id2869694">Try connecting with the unix client</a></dt><dt><a href="#id2869795">Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client</a></dt><dt><a href="#id2869858">What If Things Don't Work?</a></dt><dt><a href="#id2869892">Common Errors</a></dt><dd><dl><dt><a href="#id2869904">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2870119">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="#FastStart">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="#id2869247">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="IntroSMB"></a>Chapter1.Introduction to Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email"><<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>></tt></p></div></div></div></div><div><p class="pubdate">April 14, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2868116">Background</a></dt><dt><a href="#id2868327">Terminology</a></dt><dt><a href="#id2868481">Related Projects</a></dt><dt><a href="#id2868550">SMB Methodology</a></dt><dt><a href="#id2868638">Epilogue</a></dt><dt><a href="#id2868711">Miscellaneous</a></dt></dl></div><p>“<span class="quote"> +PLEASE read this.</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="#IntroSMB">Introduction to Samba</a></dt><dd><dl><dt><a href="#id2867763">Background</a></dt><dt><a href="#id2867816">Terminology</a></dt><dt><a href="#id2866541">Related Projects</a></dt><dt><a href="#id2866610">SMB Methodology</a></dt><dt><a href="#id2866696">Epilogue</a></dt><dt><a href="#id2866770">Miscellaneous</a></dt></dl></dd><dt>2. <a href="#install">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="#id2867536">Obtaining and installing samba</a></dt><dt><a href="#id2867578">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2867152">Example Configuration</a></dt><dt><a href="#id2867295">SWAT</a></dt></dl></dd><dt><a href="#id2867340">Try listing the shares available on your + server</a></dt><dt><a href="#id2866845">Try connecting with the unix client</a></dt><dt><a href="#id2866947">Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client</a></dt><dt><a href="#id2867008">What If Things Don't Work?</a></dt><dt><a href="#id2867038">Common Errors</a></dt><dd><dl><dt><a href="#id2867051">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2868426">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="#FastStart">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="#id2868875">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="IntroSMB"></a>Chapter1.Introduction to Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email"><<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>></tt></p></div></div></div></div><div><p class="pubdate">April 14, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867763">Background</a></dt><dt><a href="#id2867816">Terminology</a></dt><dt><a href="#id2866541">Related Projects</a></dt><dt><a href="#id2866610">SMB Methodology</a></dt><dt><a href="#id2866696">Epilogue</a></dt><dt><a href="#id2866770">Miscellaneous</a></dt></dl></div><p>“<span class="quote"> "If you understand what you're doing, you're not learning anything." -- Anonymous </span>”</p><p> @@ -86,7 +86,7 @@ transport protocol. In fact, it can support any SMB/CIFS-enabled client. One of strengths is that you can use it to blend your mix of Windows and Linux machines together without requiring a separate Windows NT/2000/2003 Server. Samba is actively being developed by a global team of about 30 active programmers and was originally developed by Andrew Tridgell. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868116"></a>Background</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867763"></a>Background</h2></div></div><div></div></div><p> Once long ago, there was a buzzword referred to as DCE/RPC. This stood for Distributed Computing Environment/Remote Procedure Calls and conceptually was a good idea. It was originally developed by Apollo/HP as NCA 1.0 (Network Computing Architecture) and only @@ -112,7 +112,7 @@ been dutifully waded through during the information-gathering stages of this pro are *still* many missing pieces... While often tedious, at least the way has been generously littered with occurrences of clapping hand to forehead and muttering 'crikey, what are they thinking? -</em></span></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868327"></a>Terminology</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> +</em></span></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867816"></a>Terminology</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> SMB: Acronym for "Server Message Block". This is Microsoft's file and printer sharing protocol. </p></li><li><p> CIFS: Acronym for "Common Internet File System". Around 1996, Microsoft apparently @@ -162,7 +162,7 @@ thinking? W3K: Acronym for Windows 2003 Server </p></li></ul></div><p>If you plan on getting help, make sure to subscribe to the Samba Mailing List (available at <a href="http://www.samba.org/" target="_top">http://www.samba.org</a>). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868481"></a>Related Projects</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866541"></a>Related Projects</h2></div></div><div></div></div><p> There are currently two network filesystem client projects for Linux that are directly related to Samba: SMBFS and CIFS VFS. These are both available in the Linux kernel itself. </p><div class="itemizedlist"><ul type="disc"><li><p> @@ -184,7 +184,7 @@ nothing to do with acting as a file and print server for SMB/CIFS clients. There are other Open Source CIFS client implementations, such as the <a href="http://jcifs.samba.org/" target="_top">jCIFS project</a> which provides an SMB client toolkit written in Java. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868550"></a>SMB Methodology</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866610"></a>SMB Methodology</h2></div></div><div></div></div><p> Traditionally, SMB uses UDP port 137 (NetBIOS name service, or netbios-ns), UDP port 138 (NetBIOS datagram service, or netbios-dgm), and TCP port 139 (NetBIOS session service, or netbios-ssn). Anyone looking at their network with a good @@ -216,7 +216,7 @@ up a single file. In general, SMB sessions are established in the following orde A good way to examine this process in depth is to try out <a href="http://www.securityfriday.com/ToolDownload/SWB/swb_doc.html" target="_top">SecurityFriday's SWB program</a>. It allows you to walk through the establishment of a SMB/CIFS session step by step. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868638"></a>Epilogue</h2></div></div><div></div></div><p>“<span class="quote"> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866696"></a>Epilogue</h2></div></div><div></div></div><p>“<span class="quote"> What's fundamentally wrong is that nobody ever had any taste when they did it. Microsoft has been very much into making the user interface look good, but internally it's just a complete mess. And even people who program for Microsoft @@ -245,14 +245,14 @@ not the completely clueless user who probably sits there shivering thinking That's what's really irritating to me." </span>”</p><p>-- <a href="http://hr.uoregon.edu/davidrl/boot.txt" target="_top">Linus Torvalds, from an interview with BOOT Magazine, Sept 1998</a> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868711"></a>Miscellaneous</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866770"></a>Miscellaneous</h2></div></div><div></div></div><p> This chapter is Copyright 2003 David Lechnyr (david at lechnyr dot com). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation. A copy of the license is available at http://www.gnu.org/licenses/fdl.txt. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="install"></a>Chapter2.How to Install and Test SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Karl</span> <span class="surname">Auer</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2869372">Obtaining and installing samba</a></dt><dt><a href="#id2869412">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2869449">Example Configuration</a></dt><dt><a href="#id2869599">SWAT</a></dt></dl></dd><dt><a href="#id2869643">Try listing the shares available on your - server</a></dt><dt><a href="#id2869694">Try connecting with the unix client</a></dt><dt><a href="#id2869795">Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client</a></dt><dt><a href="#id2869858">What If Things Don't Work?</a></dt><dt><a href="#id2869892">Common Errors</a></dt><dd><dl><dt><a href="#id2869904">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2870119">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869372"></a>Obtaining and installing samba</h2></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="install"></a>Chapter2.How to Install and Test SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Karl</span> <span class="surname">Auer</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867536">Obtaining and installing samba</a></dt><dt><a href="#id2867578">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2867152">Example Configuration</a></dt><dt><a href="#id2867295">SWAT</a></dt></dl></dd><dt><a href="#id2867340">Try listing the shares available on your + server</a></dt><dt><a href="#id2866845">Try connecting with the unix client</a></dt><dt><a href="#id2866947">Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client</a></dt><dt><a href="#id2867008">What If Things Don't Work?</a></dt><dt><a href="#id2867038">Common Errors</a></dt><dd><dl><dt><a href="#id2867051">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2868426">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867536"></a>Obtaining and installing samba</h2></div></div><div></div></div><p> Binary packages of samba are included in almost any Linux or Unix distribution. There are also some packages available at <a href="http://samba.org/" target="_top">the samba homepage</a>. @@ -260,29 +260,29 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li <a href="#compiling" title="Chapter36.How to compile SAMBA">appropriate appendix chapter</a>.</p><p>If you have already installed samba, or if your operating system was pre-installed with samba, then you may not need to bother with this chapter. On the other hand, you may want to read this chapter anyhow - for information about updating samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869412"></a>Configuring samba (smb.conf)</h2></div></div><div></div></div><p> + for information about updating samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867578"></a>Configuring samba (smb.conf)</h2></div></div><div></div></div><p> Samba's configuration is stored in the <tt class="filename">smb.conf</tt> file, that usually resides in <tt class="filename">/etc/samba/smb.conf</tt> or <tt class="filename">/usr/local/samba/lib/smb.conf</tt>. You can either edit this file yourself or do it using one of the many graphical tools that are available, such as the web-based interface swat, that is included with samba. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869449"></a>Example Configuration</h3></div></div><div></div></div><p> + </p><div xmlns:ns2="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867152"></a>Example Configuration</h3></div></div><div></div></div><p> There are sample configuration files in the examples subdirectory in the distribution. I suggest you read them carefully so you can see how the options go together in practice. See the man page for all the options. </p><p> The simplest useful configuration file would be something like this: - </p><p> - </p><pre class="programlisting"> + </p><ns2:p> + </ns2:p><pre class="programlisting"> [global] workgroup = MYGROUP [homes] guest ok = no read only = no - </pre><p> - </p><p> + </pre><ns2:p> + </ns2:p><p> This will allow connections by anyone with an account on the server, using either their login name or "<i class="parameter"><tt>homes</tt></i>" as the service name. (Note that the workgroup that Samba must also be set.) @@ -294,7 +294,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li For more information about security settings for the <i class="parameter"><tt>[homes]</tt></i> share please refer to the chapter <a href="#securing-samba" title="Chapter15.Securing Samba">Securing Samba</a>. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869544"></a>Test your config file with <b class="command">testparm</b></h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2867242"></a>Test your config file with <b class="command">testparm</b></h4></div></div><div></div></div><p> It's important that you test the validity of your <tt class="filename">smb.conf</tt> file using the <span class="application">testparm</span> program. If testparm runs OK then it will list the loaded services. If not it will give an error message. @@ -302,7 +302,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li Make sure it runs OK and that the services look reasonable before proceeding. </p><p> Always run testparm again when you change <tt class="filename">smb.conf</tt>! - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869599"></a>SWAT</h3></div></div><div></div></div><p> + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867295"></a>SWAT</h3></div></div><div></div></div><p> SWAT is a web-based interface that helps you configure samba. SWAT might not be available in the samba package on your platform, but in a separate package. Please read the swat manpage @@ -318,7 +318,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li machine but connecting from a remote machine leaves your connection open to password sniffing as passwords will be sent in the clear over the wire. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869643"></a>Try listing the shares available on your + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867340"></a>Try listing the shares available on your server</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L <i class="replaceable"><tt>yourhostname</tt></i></tt></b></p><p>You should get back a list of shares available on your server. If you don't then something is incorrectly setup. @@ -328,7 +328,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li See the <b class="command">smbclient</b> man page for details. (you can force it to list the shares without a password by adding the option -U% to the command line. This will not work - with non-Samba servers)</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869694"></a>Try connecting with the unix client</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient <i class="replaceable"><tt> + with non-Samba servers)</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866845"></a>Try connecting with the unix client</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient <i class="replaceable"><tt> //yourhostname/aservice</tt></i></tt></b></p><p>Typically the <i class="replaceable"><tt>yourhostname</tt></i> would be the name of the host where you installed <span class="application">smbd</span>. The <i class="replaceable"><tt>aservice</tt></i> is @@ -337,18 +337,18 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li section in <tt class="filename">smb.conf</tt>.</p><p>For example if your unix host is <i class="replaceable"><tt>bambi</tt></i> and your login name is <i class="replaceable"><tt>fred</tt></i> you would type:</p><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient //<i class="replaceable"><tt>bambi</tt></i>/<i class="replaceable"><tt>fred</tt></i> - </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869795"></a>Try connecting from a DOS, WfWg, Win9x, WinNT, + </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866947"></a>Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client</h2></div></div><div></div></div><p>Try mounting disks. eg:</p><p><tt class="prompt">C:\WINDOWS\> </tt><b class="userinput"><tt>net use d: \\servername\service </tt></b></p><p>Try printing. eg:</p><p><tt class="prompt">C:\WINDOWS\> </tt><b class="userinput"><tt>net use lpt1: \\servername\spoolservice</tt></b></p><p><tt class="prompt">C:\WINDOWS\> </tt><b class="userinput"><tt>print filename - </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869858"></a>What If Things Don't Work?</h2></div></div><div></div></div><p>Then you might read the file chapter + </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867008"></a>What If Things Don't Work?</h2></div></div><div></div></div><p>Then you might read the file chapter <a href="#diagnosis" title="Chapter33.The Samba checklist">Diagnosis</a> and the FAQ. If you are still stuck then try to follow the <a href="#problems" title="Chapter34.Analysing and solving samba problems">Analysing and Solving Problems chapter</a> Samba has been successfully installed at thousands of sites worldwide, - so maybe someone else has hit your problem and has overcome it. </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869892"></a>Common Errors</h2></div></div><div></div></div><p> + so maybe someone else has hit your problem and has overcome it. </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867038"></a>Common Errors</h2></div></div><div></div></div><p> The following questions and issues get raised on the samba mailing list over and over again. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869904"></a>Why are so many smbd processes eating memory?</h3></div></div><div></div></div><p> +</p><div xmlns:ns3="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867051"></a>Why are so many smbd processes eating memory?</h3></div></div><div></div></div><p> “<span class="quote"> Site that is running Samba on an AIX box. They are sharing out about 2 terabytes using samba. Samba was installed using smitty and the binaries. We seem to be experiencing a memory problem @@ -360,8 +360,8 @@ processes of smbd running: Is samba suppose to start this many different smbd processes? Or does it run as one smbd process? Also is it normal for it to be taking up this much memory? </span>” -</p><p> -</p><pre class="screen"> +</p><ns3:p> +</ns3:p><pre class="screen"> Inuse * 4096 = amount of memory being used by this process Pid Command Inuse Pin Pgsp Virtual 64-bit Mthrd @@ -388,8 +388,8 @@ Inuse * 4096 = amount of memory being used by this process 19110 smbd 8404 1906 181 4862 N N Total memory used: 841,592,832 bytes -</pre><p> -</p><p> +</pre><ns3:p> +</ns3:p><p> Samba consists on three core programs: <span class="application">nmbd</span>, <span class="application">smbd</span>, <span class="application">winbindd</span>. <span class="application">nmbd</span> is the name server message daemon, <span class="application">smbd</span> is the server message daemon, <span class="application">winbindd</span> is the daemon that @@ -404,18 +404,18 @@ connection made. That is why you are seeing so many of them, one (1) per client </p><p> <span class="application">winbindd</span> will run as one or two daemons, depending on whether or not it is being run in "split mode" (in which case there will be two instances). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870119"></a>I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</h3></div></div><div></div></div><p>Your loopback device isn't working correctly. Make sure it's running. </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FastStart"></a>Chapter3.Fast Start for the Impatient</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2869247">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869247"></a>Note</h2></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868426"></a>I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</h3></div></div><div></div></div><p>Your loopback device isn't working correctly. Make sure it's running. </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FastStart"></a>Chapter3.Fast Start for the Impatient</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2868875">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868875"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. -</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="type"></a>Server Configuration Basics</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2869315"></a>First Steps in Server Configuration</h1></div></div><div></div></div><p> +</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="type"></a>Server Configuration Basics</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2868902"></a>First Steps in Server Configuration</h1></div></div><div></div></div><p> Samba can operate in various modes within SMB networks. This HOWTO section contains information on configuring samba to function as the type of server your network requires. Please read this section carefully. -</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>4. <a href="#ServerType">Server Types and Security Modes</a></dt><dd><dl><dt><a href="#id2871270">Features and Benefits</a></dt><dt><a href="#id2871366">Server Types</a></dt><dt><a href="#id2871450">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2871565">User Level Security</a></dt><dt><a href="#id2871698">Share Level Security</a></dt><dt><a href="#id2871820">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2872071">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2872158">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2872383">Seamless Windows Network Integration</a></dt><dt><a href="#id2872559">Common Errors</a></dt><dd><dl><dt><a href="#id2872587">What makes Samba a SERVER?</a></dt><dt><a href="#id2872620">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2872649">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872682">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="#samba-pdc">Domain Control</a></dt><dd><dl><dt><a href="#id2874489">Features and Benefits</a></dt><dt><a href="#id2874793">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2874809">Domain Controller Types</a></dt><dt><a href="#id2875020">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2875340">Domain Control - Example Configuration</a></dt><dt><a href="#id2875639">Samba ADS Domain Control</a></dt><dt><a href="#id2875661">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2875676">Domain Network Logon Service</a></dt><dt><a href="#id2876003">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876111">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876118">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876157">I get told "You already have a connection to the Domain...." +</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>4. <a href="#ServerType">Server Types and Security Modes</a></dt><dd><dl><dt><a href="#id2871949">Features and Benefits</a></dt><dt><a href="#id2872041">Server Types</a></dt><dt><a href="#id2872122">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2868550">User Level Security</a></dt><dt><a href="#id2868682">Share Level Security</a></dt><dt><a href="#id2869754">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2869996">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2870079">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2870304">Seamless Windows Network Integration</a></dt><dt><a href="#id2870481">Common Errors</a></dt><dd><dl><dt><a href="#id2870509">What makes Samba a SERVER?</a></dt><dt><a href="#id2870542">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2870571">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872482">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="#samba-pdc">Domain Control</a></dt><dd><dl><dt><a href="#id2875113">Features and Benefits</a></dt><dt><a href="#id2872711">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2872727">Domain Controller Types</a></dt><dt><a href="#id2872926">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2873240">Domain Control - Example Configuration</a></dt><dt><a href="#id2873537">Samba ADS Domain Control</a></dt><dt><a href="#id2873559">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2873574">Domain Network Logon Service</a></dt><dt><a href="#id2876300">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876404">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876412">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876450">I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.</a></dt><dt><a href="#id2876206">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876277">The machine trust account for this computer either does not -exist or is not accessible.</a></dt><dt><a href="#id2876340">When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.</a></dt><dt><a href="#id2876367">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></dd><dt>6. <a href="#samba-bdc">Backup Domain Control</a></dt><dd><dl><dt><a href="#id2878532">Features And Benefits</a></dt><dt><a href="#id2878705">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878734">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2878954">Active Directory Domain Control</a></dt><dt><a href="#id2878975">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2879001">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2879047">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2879149">Example Configuration</a></dt></dl></dd><dt><a href="#id2879210">Common Errors</a></dt><dd><dl><dt><a href="#id2879224">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2879254">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2879287">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2879332">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="#domain-member">Domain Membership</a></dt><dd><dl><dt><a href="#id2880401">Features and Benefits</a></dt><dt><a href="#id2880516">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2880692">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2880944">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2881141">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="#id2881203">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2881406">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2881788">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2881929">Setup your smb.conf</a></dt><dt><a href="#id2882013">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882376">Notes</a></dt></dl></dd><dt><a href="#id2882398">Common Errors</a></dt><dd><dl><dt><a href="#id2882423">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2882455">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="#StandAloneServer">Stand-Alone Servers</a></dt><dd><dl><dt><a href="#id2884809">Features and Benefits</a></dt><dt><a href="#id2885005">Background</a></dt><dt><a href="#id2885077">Example Configuration</a></dt><dd><dl><dt><a href="#id2885092">Reference Documentation Server</a></dt><dt><a href="#id2885142">Central Print Serving</a></dt></dl></dd><dt><a href="#id2885356">Common Errors</a></dt></dl></dd><dt>9. <a href="#ClientConfig">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="#id2884469">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ServerType"></a>Chapter4.Server Types and Security Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2871270">Features and Benefits</a></dt><dt><a href="#id2871366">Server Types</a></dt><dt><a href="#id2871450">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2871565">User Level Security</a></dt><dt><a href="#id2871698">Share Level Security</a></dt><dt><a href="#id2871820">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2872071">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2872158">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2872383">Seamless Windows Network Integration</a></dt><dt><a href="#id2872559">Common Errors</a></dt><dd><dl><dt><a href="#id2872587">What makes Samba a SERVER?</a></dt><dt><a href="#id2872620">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2872649">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872682">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></div><p> +existing set.." when creating a machine trust account.</a></dt><dt><a href="#id2876500">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876570">The machine trust account for this computer either does not +exist or is not accessible.</a></dt><dt><a href="#id2876634">When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.</a></dt><dt><a href="#id2876660">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></dd><dt>6. <a href="#samba-bdc">Backup Domain Control</a></dt><dd><dl><dt><a href="#id2878706">Features And Benefits</a></dt><dt><a href="#id2878870">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878898">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2876857">Active Directory Domain Control</a></dt><dt><a href="#id2876879">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2876902">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2876928">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2877029">Example Configuration</a></dt></dl></dd><dt><a href="#id2877079">Common Errors</a></dt><dd><dl><dt><a href="#id2877093">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2877125">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2877158">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2877202">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="#domain-member">Domain Membership</a></dt><dd><dl><dt><a href="#id2877728">Features and Benefits</a></dt><dt><a href="#id2877298">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2877460">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879244">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2879440">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879495">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2879692">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2882368">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2882506">Setup your smb.conf</a></dt><dt><a href="#id2882590">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882938">Notes</a></dt></dl></dd><dt><a href="#id2882960">Common Errors</a></dt><dd><dl><dt><a href="#id2882986">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2883018">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="#StandAloneServer">Stand-Alone Servers</a></dt><dd><dl><dt><a href="#id2884461">Features and Benefits</a></dt><dt><a href="#id2884499">Background</a></dt><dt><a href="#id2884567">Example Configuration</a></dt><dd><dl><dt><a href="#id2883169">Reference Documentation Server</a></dt><dt><a href="#id2883216">Central Print Serving</a></dt></dl></dd><dt><a href="#id2883429">Common Errors</a></dt></dl></dd><dt>9. <a href="#ClientConfig">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="#id2883797">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ServerType"></a>Chapter4.Server Types and Security Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2871949">Features and Benefits</a></dt><dt><a href="#id2872041">Server Types</a></dt><dt><a href="#id2872122">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2868550">User Level Security</a></dt><dt><a href="#id2868682">Share Level Security</a></dt><dt><a href="#id2869754">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2869996">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2870079">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2870304">Seamless Windows Network Integration</a></dt><dt><a href="#id2870481">Common Errors</a></dt><dd><dl><dt><a href="#id2870509">What makes Samba a SERVER?</a></dt><dt><a href="#id2870542">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2870571">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872482">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></div><p> This chapter provides information regarding the types of server that Samba may be configured to be. A Microsoft network administrator who wishes to migrate to or to use Samba will want to know what, within a Samba context, terms familiar to MS Windows @@ -428,7 +428,7 @@ and how these relate to MS Windows servers and clients. Firstly we should recognise the question so often asked, "Why would I want to use Samba?" So, in those chapters where the answer may be important you will see a section that highlights features and benefits. These may be for or against Samba. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871270"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871949"></a>Features and Benefits</h2></div></div><div></div></div><p> Two men were walking down a dusty road, when one suddenly kicked up a small red stone. It hurt his toe and lodged in his sandal. He took the stone out and cursed it with a passion and fury fitting his anguish. The other looked at the stone and said, that is a garnet - I @@ -464,13 +464,13 @@ So now, what are the benefits of features mentioned in this chapter? greater flexibility than MS Windows NT4 and in many cases a significantly higher utility than Active Directory domains with MS Windows 200x. - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871366"></a>Server Types</h2></div></div><div></div></div><p>Administrators of Microsoft networks often refer to three + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872041"></a>Server Types</h2></div></div><div></div></div><p>Administrators of Microsoft networks often refer to three different type of servers:</p><div class="itemizedlist"><ul type="disc"><li><p>Domain Controller</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Primary Domain Controller</td></tr><tr><td>Backup Domain Controller</td></tr><tr><td>ADS Domain Controller</td></tr></table></li><li><p>Domain Member Server</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Active Directory Member Server</td></tr><tr><td>NT4 Style Domain Member Server</td></tr></table></li><li><p>Stand Alone Server</p></li></ul></div><p> The chapters covering Domain Control, Backup Domain Control and Domain Membership provide pertinent information regarding Samba-3 configuration for each of these server roles. The reader is strongly encouraged to become intimately familiar with the information presented. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871450"></a>Samba Security Modes</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872122"></a>Samba Security Modes</h2></div></div><div></div></div><p> In this section the function and purpose of Samba's <i class="parameter"><tt>security</tt></i> modes are described. An accurate understanding of how Samba implements each security mode as well as how to configure MS Windows clients for each mode will significantly @@ -494,7 +494,7 @@ the way the client then tries to authenticate itself. It does not directly affec but it fits in with the client/server approach of SMB. In SMB everything is initiated and controlled by the client, and the server can only tell the client what is available and whether an action is allowed. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871565"></a>User Level Security</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868550"></a>User Level Security</h3></div></div><div></div></div><p> We will describe <i class="parameter"><tt>user level</tt></i> security first, as it's simpler. In <span class="emphasis"><em>user level</em></span> security, the client will send a <span class="emphasis"><em>session setup</em></span> command directly after the protocol negotiation. @@ -512,13 +512,13 @@ It is also possible for a client to send multiple <span class="emphasis"><em>ses requests. When the server responds, it gives the client a <span class="emphasis"><em>uid</em></span> to use as an authentication tag for that username/password. The client can maintain multiple authentication contexts in this way (WinDD is an example of an application that does this). -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871659"></a>Example Configuration</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868643"></a>Example Configuration</h4></div></div><div></div></div><p> The <tt class="filename">smb.conf</tt> parameter that sets <span class="emphasis"><em>User Level Security</em></span> is: </p><pre class="programlisting"> security = user </pre><p> This is the default setting since samba-2.2.x. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871698"></a>Share Level Security</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868682"></a>Share Level Security</h3></div></div><div></div></div><p> Ok, now for share level security. In share level security, the client authenticates itself separately for each share. It will send a password along with each <span class="emphasis"><em>tree connection</em></span> (share mount). It does not explicitly send a @@ -541,18 +541,18 @@ of the share they try to connect to (useful for home directories) and any users listed in the <i class="parameter"><tt>user =</tt></i> <tt class="filename">smb.conf</tt> line. The password is then checked in turn against these <span class="emphasis"><em>possible usernames</em></span>. If a match is found then the client is authenticated as that user. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871778"></a>Example Configuration</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868762"></a>Example Configuration</h4></div></div><div></div></div><p> The <tt class="filename">smb.conf</tt> parameter that sets <span class="emphasis"><em>Share Level Security</em></span> is: </p><pre class="programlisting"> security = share </pre><p> Please note that there are reports that recent MS Windows clients do not like to work with share mode security servers. You are strongly discouraged from using share level security. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871820"></a>Domain Security Mode (User Level Security)</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869754"></a>Domain Security Mode (User Level Security)</h3></div></div><div></div></div><p> When Samba is operating in <i class="parameter"><tt>security = domain</tt></i> mode, the Samba server has a domain security trust account (a machine account) and will cause all authentication requests to be passed through to the domain controllers. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871842"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869776"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em> Samba as a Domain Member Server </em></span></p><p> This method involves addition of the following parameters in the <tt class="filename">smb.conf</tt> file: @@ -564,24 +564,24 @@ In order for this method to work, the Samba server needs to join the MS Windows security domain. This is done as follows: </p><div class="procedure"><ol type="1"><li><p>On the MS Windows NT domain controller, using the Server Manager, add a machine account for the Samba server. - </p></li><li><p>Next, on the Unix/Linux system execute:</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j DOMAIN_NAME -r PDC_NAME</tt></b> (samba-2.x)</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>net join -U administrator%password</tt></b> (samba-3)</p></li></ol></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> + </p></li><li><p>Next, on the Unix/Linux system execute:</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j DOMAIN_NAME -r PDC_NAME</tt></b> (samba-2.x)</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>net join -U administrator%password</tt></b> (samba-3)</p></li></ol></div><div xmlns:ns4="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns4:p> As of Samba-2.2.4 the Samba 2.2.x series can auto-join a Windows NT4 style Domain just by executing: -</p><pre class="screen"> +</ns4:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j <i class="replaceable"><tt>DOMAIN_NAME</tt></i> -r <i class="replaceable"><tt>PDC_NAME</tt></i> -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b> -</pre><p> +</pre><ns4:p> As of Samba-3 the same can be done by executing: -</p><pre class="screen"> +</ns4:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net join -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b> -</pre><p> +</pre><ns4:p> It is not necessary with Samba-3 to specify the <i class="replaceable"><tt>DOMAIN_NAME</tt></i> or the <i class="replaceable"><tt>PDC_NAME</tt></i> as it figures this out from the <tt class="filename">smb.conf</tt> file settings. -</p></div><p> +</ns4:p></div><p> Use of this mode of authentication does require there to be a standard Unix account -for each user in order to assign a uid once the account has been authenticated by +for each user in order to assign a UID once the account has been authenticated by the remote Windows DC. This account can be blocked to prevent logons by clients other than -MS Windows through things such as setting an invalid shell in the +MS Windows through means such as setting an invalid shell in the <tt class="filename">/etc/passwd</tt> entry. </p><p> An alternative to assigning UIDs to Windows users on a Samba member server is @@ -590,7 +590,7 @@ in this HOWTO collection. </p><p> For more information of being a domain member, see the <a href="#domain-member" title="Chapter7.Domain Membership">Domain Member</a> section of this Howto. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872071"></a>ADS Security Mode (User Level Security)</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869996"></a>ADS Security Mode (User Level Security)</h3></div></div><div></div></div><p> Both Samba 2.2 and 3.0 can join an Active Directory domain. This is possible even if the domain is run in native mode. Active Directory in native mode perfectly allows NT4-style domain members, contrary to @@ -604,7 +604,7 @@ authentication protocols. All your machines are running Windows 2000 and above and all use full Kerberos. In this case Samba as a NT4-style domain would still require NT-compatible authentication data. Samba in AD-member mode can accept Kerberos. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872101"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870026"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting"> realm = your.kerberos.REALM security = ADS </pre><p> @@ -614,7 +614,7 @@ AD-member mode can accept Kerberos. </pre><p> Please refer to the <a href="#domain-member" title="Chapter7.Domain Membership">Domain Membership</a> and <a href="#ads-member" title="Samba ADS Domain Membership">Active Directory Membership</a> sections for more information regarding this configuration option. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872158"></a>Server Security (User Level Security)</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870079"></a>Server Security (User Level Security)</h3></div></div><div></div></div><p> Server security mode is a left over from the time when Samba was not capable of acting as a domain member server. It is highly recommended NOT to use this feature. Server security mode has many draw backs. The draw backs include: @@ -646,7 +646,7 @@ lookups because the choice of the target authentication server is arbitrary and be determined from a domain name. In essence, a Samba server that is in <span class="emphasis"><em>server security mode</em></span> is operating in what used to be known as workgroup mode. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872314"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870236"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em> Using MS Windows NT as an authentication server </em></span></p><p> This method involves the additions of the following parameters in the <tt class="filename">smb.conf</tt> file: @@ -655,8 +655,8 @@ This method involves the additions of the following parameters in the <tt class= security = server password server = "NetBIOS_name_of_a_DC" </pre><p> -There are two ways of identifying whether or not a username and password pair was valid -or not. One uses the reply information provided as part of the authentication messaging +There are two ways of identifying whether or not a username and password pair was valid. +One uses the reply information provided as part of the authentication messaging process, the other uses just an error code. </p><p> The down-side of this mode of configuration is the fact that for security reasons Samba @@ -667,7 +667,7 @@ certain number of failed authentication attempts this will result in user lockou </p><p> Use of this mode of authentication does require there to be a standard Unix account for the user, though this account can be blocked to prevent logons by non-SMB/CIFS clients. -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872383"></a>Seamless Windows Network Integration</h2></div></div><div></div></div><p> +</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870304"></a>Seamless Windows Network Integration</h2></div></div><div></div></div><p> MS Windows clients may use encrypted passwords as part of a challenge/response authentication model (a.k.a. NTLMv1 and NTLMv2) or alone, or clear text strings for simple password based authentication. It should be realized that with the SMB protocol, @@ -710,23 +710,23 @@ when using clear text authentication. </pre><p> By default Samba will lower case the username before attempting to lookup the user in the database of local system accounts. Because UNIX usernames conventionally -only contain lower case character, the <i class="parameter"><tt>username level</tt></i> parameter +only contain lower-case characters, the <i class="parameter"><tt>username level</tt></i> parameter is rarely needed. </p><p> -However, passwords on UNIX systems often make use of mixed case characters. +However, passwords on UNIX systems often make use of mixed-case characters. This means that in order for a user on a Windows 9x client to connect to a Samba server using clear text authentication, the <i class="parameter"><tt>password level</tt></i> -must be set to the maximum number of upper case letter which <span class="emphasis"><em>could</em></span> -appear is a password. Note that the server OS uses the traditional DES version +must be set to the maximum number of upper case letters which <span class="emphasis"><em>could</em></span> +appear in a password. Note that the server OS uses the traditional DES version of crypt(), a <i class="parameter"><tt>password level</tt></i> of 8 will result in case insensitive passwords as seen from Windows users. This will also result in longer login times as Samba has to compute the permutations of the password string and try them one by one until a match is located (or all combinations fail). </p><p> -The best option to adopt is to enable support for encrypted passwords where ever +The best option to adopt is to enable support for encrypted passwords wherever Samba is used. Most attempts to apply the registry change to re-enable plain text passwords will eventually lead to user complaints and unhappiness. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872559"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870481"></a>Common Errors</h2></div></div><div></div></div><p> We all make mistakes. It is Ok to make mistakes, so long as they are made in the right places and at the right time. A mistake that causes lost productivity is seldom tolerated. A mistake made in a developmental test lab is expected. @@ -736,19 +736,19 @@ on the Samba mailing lists. Many of these are avoidable by doing you homework be a Samba implementation. Some are the result of misunderstanding of the English language. The English language has many turns of phrase that are potentially vague and may be highly confusing to those for whom English is not their native tongue. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872587"></a>What makes Samba a SERVER?</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870509"></a>What makes Samba a SERVER?</h3></div></div><div></div></div><p> To some the nature of the Samba <span class="emphasis"><em>security</em></span> mode is very obvious, but entirely wrong all the same. It is assumed that <i class="parameter"><tt>security = server</tt></i> means that Samba will act as a server. Not so! See above - this setting means that Samba will <span class="emphasis"><em>try</em></span> to use another SMB server as its source of user authentication alone. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872620"></a>What makes Samba a Domain Controller?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870542"></a>What makes Samba a Domain Controller?</h3></div></div><div></div></div><p> The <tt class="filename">smb.conf</tt> parameter <i class="parameter"><tt>security = domain</tt></i> does NOT really make Samba behave as a Domain Controller! This setting means we want Samba to be a domain member! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872649"></a>What makes Samba a Domain Member?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870571"></a>What makes Samba a Domain Member?</h3></div></div><div></div></div><p> Guess! So many others do. But whatever you do, do NOT think that <i class="parameter"><tt>security = user</tt></i> makes Samba act as a domain member. Read the manufacturers manual before the warranty expires! See the <a href="#domain-member" title="Chapter7.Domain Membership">Domain Member</a> section of this Howto for more information. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872682"></a>Constantly Losing Connections to Password Server</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872482"></a>Constantly Losing Connections to Password Server</h3></div></div><div></div></div><p> Why does server_validate() simply give up rather than re-establishing its connection to the password server? Though I am not fluent in the SMB protocol, perhaps the cluster server process passes along to its client workstation the session key it receives from the password @@ -757,11 +757,11 @@ connection, whose session key would be different. So server_validate() must giv </p><p> Indeed. That's why security = server is at best a nasty hack. Please use security = domain. <i class="parameter"><tt>security = server</tt></i> mode is also known as pass-through authentication. -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-pdc"></a>Chapter5.Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2874489">Features and Benefits</a></dt><dt><a href="#id2874793">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2874809">Domain Controller Types</a></dt><dt><a href="#id2875020">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2875340">Domain Control - Example Configuration</a></dt><dt><a href="#id2875639">Samba ADS Domain Control</a></dt><dt><a href="#id2875661">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2875676">Domain Network Logon Service</a></dt><dt><a href="#id2876003">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876111">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876118">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876157">I get told "You already have a connection to the Domain...." +</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-pdc"></a>Chapter5.Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2875113">Features and Benefits</a></dt><dt><a href="#id2872711">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2872727">Domain Controller Types</a></dt><dt><a href="#id2872926">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2873240">Domain Control - Example Configuration</a></dt><dt><a href="#id2873537">Samba ADS Domain Control</a></dt><dt><a href="#id2873559">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2873574">Domain Network Logon Service</a></dt><dt><a href="#id2876300">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876404">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876412">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876450">I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.</a></dt><dt><a href="#id2876206">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876277">The machine trust account for this computer either does not -exist or is not accessible.</a></dt><dt><a href="#id2876340">When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.</a></dt><dt><a href="#id2876367">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></div><p><b><span class="emphasis"><em>The Essence of Learning:</em></span></b> +existing set.." when creating a machine trust account.</a></dt><dt><a href="#id2876500">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876570">The machine trust account for this computer either does not +exist or is not accessible.</a></dt><dt><a href="#id2876634">When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.</a></dt><dt><a href="#id2876660">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></div><p><b><span class="emphasis"><em>The Essence of Learning:</em></span></b> There are many who approach MS Windows networking with incredible misconceptions. That's OK, because it gives the rest of us plenty of opportunity to be of assistance. Those who really want help would be well advised to become familiar with information @@ -791,7 +791,7 @@ burden on an organisation. Where is the right place to make mistakes? Only out of harm's way! If you are going to make mistakes, then please do this on a test network, away from users and in such a way as to not inflict pain on others. Do your learning on a test network. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2874489"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875113"></a>Features and Benefits</h2></div></div><div></div></div><p> <span class="emphasis"><em>What is the key benefit of Microsoft Domain security?</em></span> </p><p> In a word, <span class="emphasis"><em>Single Sign On</em></span>, or SSO for short. To many, this is the holy @@ -889,11 +889,11 @@ per user settings for many parameters, over-riding global settings given in the Thus, with samba-3 it is possible to have a default system configuration for profiles, and on a per user basis to over-ride this for those users who should not be subject to the default configuration. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2874793"></a>Basics of Domain Control</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872711"></a>Basics of Domain Control</h2></div></div><div></div></div><p> Over the years, public perceptions of what Domain Control really is has taken on an almost mystical nature. Before we branch into a brief overview of Domain Control, there are three basic types of domain controllers: -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874809"></a>Domain Controller Types</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872727"></a>Domain Controller Types</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div><p> The <span class="emphasis"><em>Primary Domain Controller</em></span> or PDC plays an important role in the MS Windows NT4 and Windows 200x Domain Control architecture, but not in the manner that so many expect. There is folk lore that dictates that because of it's role in the MS Windows @@ -945,7 +945,7 @@ At this time any appearance that Samba-3 is capable of acting as an This functionality should not be used until the Samba-Team offers formal support for it. At such a time, the documentation will be revised to duly reflect all configuration and management requirements. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875020"></a>Preparing for Domain Control</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872926"></a>Preparing for Domain Control</h3></div></div><div></div></div><p> There are two ways that MS Windows machines may interact with each other, with other servers, and with Domain Controllers: Either as <span class="emphasis"><em>Stand-Alone</em></span> systems, more commonly called <span class="emphasis"><em>Workgroup</em></span> members, or as full participants in a security system, @@ -1006,7 +1006,7 @@ domain/workgroup. Local master browsers in the same domain/workgroup on broadcas then ask for a complete copy of the browse list for the whole wide area network. Browser clients will then contact their local master browser, and will receive the domain-wide browse list, instead of just the list for their broadcast-isolated subnet. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875340"></a>Domain Control - Example Configuration</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2873240"></a>Domain Control - Example Configuration</h2></div></div><div></div></div><p> The first step in creating a working Samba PDC is to understand the parameters necessary in <tt class="filename">smb.conf</tt>. Here we attempt to explain the parameters that are covered in the <tt class="filename">smb.conf</tt> man page. @@ -1060,20 +1060,20 @@ Here is an example <tt class="filename">smb.conf</tt> for acting as a PDC: <a href="smb.conf.5.html#READONLY" target="_top">read only</a> = no <a href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> = 0600 <a href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a> = 0700 -</pre><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><div xmlns:ns5="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns5:p> The above parameters make for a full set of parameters that may define the server's mode of operation. The following parameters are the essentials alone: -</p><pre class="programlisting"> +</ns5:p><pre class="programlisting"> workgroup = NARNIA domain logons = Yes domain master = Yes security = User -</pre><p> +</pre><ns5:p> The additional parameters shown in the longer listing above just makes for a more complete environment. -</p></div><p> +</ns5:p></div><p> There are a couple of points to emphasize in the above configuration. </p><div class="itemizedlist"><ul type="disc"><li><p> Encrypted passwords must be enabled. For more details on how @@ -1086,22 +1086,22 @@ There are a couple of points to emphasize in the above configuration. client to locate the server as a DC. Please refer to the various Network Browsing documentation included with this distribution for details. - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875639"></a>Samba ADS Domain Control</h2></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2873537"></a>Samba ADS Domain Control</h2></div></div><div></div></div><p> Samba-3 is not and can not act as an Active Directory Server. It can not truly function as an Active Directory Primary Domain Controller. The protocols for some of the functionality the Active Directory Domain Controllers is have been partially implemented on an experimental only basis. Please do NOT expect Samba-3 to support these protocols - nor should you depend on any such functionality either now or in the future. The Samba-Team may well remove such experimental features or may change their behaviour. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875661"></a>Domain and Network Logon Configuration</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2873559"></a>Domain and Network Logon Configuration</h2></div></div><div></div></div><p> The subject of Network or Domain Logons is discussed here because it rightly forms an integral part of the essential functionality that is provided by a Domain Controller. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875676"></a>Domain Network Logon Service</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873574"></a>Domain Network Logon Service</h3></div></div><div></div></div><p> All Domain Controllers must run the netlogon service (<span class="emphasis"><em>domain logons</em></span> in Samba). One Domain Controller must be configured with <i class="parameter"><tt>domain master = Yes</tt></i> (the Primary Domain Controller); on ALL Backup Domain Controllers <i class="parameter"><tt>domain master = No</tt></i> must be set. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875709"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873607"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting"> [global] domain logons = Yes domain master = (Yes on PDC, No on BDCs) @@ -1111,7 +1111,7 @@ must be set. path = /var/lib/samba/netlogon guest ok = Yes browseable = No -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875729"></a>The Special Case of MS Windows XP Home Edition</h4></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873626"></a>The Special Case of MS Windows XP Home Edition</h4></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> MS Windows XP Home Edition does not have the ability to join any type of Domain security facility. Unlike, MS Windows 9x / Me, MS Windows XP Home Edition also completely lacks the ability to log onto a network. @@ -1123,7 +1123,7 @@ MS Windows XP Professional. </p><p> Now that this has been said, please do NOT ask the mailing list, or email any of the Samba-Team members with your questions asking how to make this work. It can't be done. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875765"></a>The Special Case of Windows 9x / Me</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873661"></a>The Special Case of Windows 9x / Me</h4></div></div><div></div></div><p> A domain and a workgroup are exactly the same thing in terms of network browsing. The difference is that a distributable authentication database is associated with a domain, for secure login access to a @@ -1203,7 +1203,7 @@ The main difference between a PDC and a Windows 9x logon server configuration is </p></li></ul></div><p> A Samba PDC will act as a Windows 9x logon server; after all, it does provide the network logon services that MS Windows 9x / Me expect to find. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876003"></a>Security Mode and Master Browsers</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876300"></a>Security Mode and Master Browsers</h3></div></div><div></div></div><p> There are a few comments to make in order to tie up some loose ends. There has been much debate over the issue of whether or not it is ok to configure Samba as a Domain Controller in security @@ -1237,7 +1237,7 @@ Configuring a Samba box as a DC for a domain that already by definition has a PDC is asking for trouble. Therefore, you should always configure the Samba DC to be the DMB for its domain and set <i class="parameter"><tt>security = user</tt></i>. This is the only officially supported mode of operation. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876111"></a>Common Problems and Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876118"></a>I cannot include a '$' in a machine name</h3></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876404"></a>Common Problems and Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876412"></a>I cannot include a '$' in a machine name</h3></div></div><div></div></div><p> A 'machine account', (typically) stored in <tt class="filename">/etc/passwd</tt>, takes the form of the machine name with a '$' appended. FreeBSD (and other BSD systems?) won't create a user with a '$' in their name. @@ -1245,7 +1245,7 @@ systems?) won't create a user with a '$' in their name. The problem is only in the program used to make the entry. Once made, it works perfectly. Create a user without the '$'. Then use <b class="command">vipw</b> to edit the entry, adding the '$'. Or create the whole entry with vipw if you like; make sure you use a unique User ID! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876157"></a>I get told "You already have a connection to the Domain...." +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876450"></a>I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an existing set.." when creating a machine trust account.</h3></div></div><div></div></div><p> This happens if you try to create a machine trust account from the @@ -1259,7 +1259,7 @@ Further, if the machine is already a 'member of a workgroup' that is the same name as the domain you are joining (bad idea) you will get this message. Change the workgroup name to something else, it does not matter what, reboot, and try again. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876206"></a>The system can not log you on (C000019B)....</h3></div></div><div></div></div><p>I joined the domain successfully but after upgrading +</p></div><div xmlns:ns6="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876500"></a>The system can not log you on (C000019B)....</h3></div></div><div></div></div><p>I joined the domain successfully but after upgrading to a newer version of the Samba code I get the message, <span class="errorname">The system can not log you on (C000019B), Please try again or consult your system administrator</span> when attempting to logon. @@ -1270,14 +1270,14 @@ the domain name and/or the server name (NetBIOS name) is changed. The only way to correct the problem is to restore the original domain SID or remove the domain client from the domain and rejoin. The domain SID may be reset using either the net or rpcclient utilities. -</p><p> +</p><ns6:p> The reset or change the domain SID you can use the net command as follows: -</p><pre class="screen"> +</ns6:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net getlocalsid 'OLDNAME'</tt></b> <tt class="prompt">root# </tt><b class="userinput"><tt>net setlocalsid 'SID'</tt></b> -</pre><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876277"></a>The machine trust account for this computer either does not +</pre><ns6:p> +</ns6:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876570"></a>The machine trust account for this computer either does not exist or is not accessible.</h3></div></div><div></div></div><p> When I try to join the domain I get the message <span class="errorname">The machine account for this computer either does not exist or is not accessible</span>. What's @@ -1300,17 +1300,17 @@ Some people have also reported that inconsistent subnet masks between the Samba server and the NT client can cause this problem. Make sure that these are consistent for both client and server. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876340"></a>When I attempt to login to a Samba Domain from a NT4/W2K workstation, +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876634"></a>When I attempt to login to a Samba Domain from a NT4/W2K workstation, I get a message about my account being disabled.</h3></div></div><div></div></div><p> Enable the user accounts with <b class="userinput"><tt>smbpasswd -e <i class="replaceable"><tt>username</tt></i> </tt></b>, this is normally done as an account is created. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876367"></a>Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876660"></a>Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</h3></div></div><div></div></div><p> A domain controller has to announce on the network who it is. This usually takes a while. - </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-bdc"></a>Chapter6.Backup Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Volker</span> <span class="surname">Lendecke</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:Volker.Lendecke@SerNet.DE">Volker.Lendecke@SerNet.DE</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2878532">Features And Benefits</a></dt><dt><a href="#id2878705">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878734">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2878954">Active Directory Domain Control</a></dt><dt><a href="#id2878975">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2879001">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2879047">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2879149">Example Configuration</a></dt></dl></dd><dt><a href="#id2879210">Common Errors</a></dt><dd><dl><dt><a href="#id2879224">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2879254">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2879287">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2879332">Can I do this all with LDAP?</a></dt></dl></dd></dl></div><p> + </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-bdc"></a>Chapter6.Backup Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Volker</span> <span class="surname">Lendecke</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:Volker.Lendecke@SerNet.DE">Volker.Lendecke@SerNet.DE</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2878706">Features And Benefits</a></dt><dt><a href="#id2878870">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878898">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2876857">Active Directory Domain Control</a></dt><dt><a href="#id2876879">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2876902">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2876928">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2877029">Example Configuration</a></dt></dl></dd><dt><a href="#id2877079">Common Errors</a></dt><dd><dl><dt><a href="#id2877093">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2877125">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2877158">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2877202">Can I do this all with LDAP?</a></dt></dl></dd></dl></div><p> Before you continue reading in this section, please make sure that you are comfortable with configuring a Samba Domain Controller as described in the <a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control</a> chapter. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878532"></a>Features And Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878706"></a>Features And Benefits</h2></div></div><div></div></div><p> This is one of the most difficult chapters to summarise. It does not matter what we say here for someone will still draw conclusions and / or approach the Samba-Team with expectations that are either not yet capable of being delivered, or that can be achieved far more @@ -1371,7 +1371,7 @@ lets consider each possible option and look at the pro's and con's for each theo Arguments Against: All machine trust accounts and user accounts will be locally maintained. Domain users will NOT be able to roam from office to office. This is a broken and flawed solution. Do NOT do this. - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878705"></a>Essential Background Information</h2></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878870"></a>Essential Background Information</h2></div></div><div></div></div><p> A Domain Controller is a machine that is able to answer logon requests from network workstations. Microsoft LanManager and IBM LanServer were two early products that provided this capability. The technology has become known as the LanMan Netlogon service. @@ -1381,7 +1381,7 @@ and with it a new form of the network logon service that has extended functional This service became known as the NT NetLogon Service. The nature of this service has changed with the evolution of MS Windows NT and today provides a very complex array of services that are implemented over a complex spectrum of technologies. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878734"></a>MS Windows NT4 Style Domain Control</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878898"></a>MS Windows NT4 Style Domain Control</h3></div></div><div></div></div><p> Whenever a user logs into a Windows NT4 / 200x / XP Professional Workstation, the workstation connects to a Domain Controller (authentication server) to validate the username and password that the user entered are valid. If the information entered @@ -1439,7 +1439,7 @@ one of the BDCs can be promoted to a PDC. If this happens while the original PDC line then it is automatically demoted to a BDC. This is an important aspect of Domain Controller management. The tool that is used to affect a promotion or a demotion is the Server Manager for Domains. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2878883"></a>Example PDC Configuration</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876788"></a>Example PDC Configuration</h4></div></div><div></div></div><p> Since version 2.2 Samba officially supports domain logons for all current Windows Clients, including Windows NT4, 2003 and XP Professional. For samba to be enabled as a PDC some parameters in the <i class="parameter"><tt>[global]</tt></i>-section of the <tt class="filename">smb.conf</tt> have to be set: @@ -1451,20 +1451,20 @@ parameters in the <i class="parameter"><tt>[global]</tt></i>-section of the <tt Several other things like a <i class="parameter"><tt>[homes]</tt></i> and a <i class="parameter"><tt>[netlogon]</tt></i> share also need to be set along with settings for the profile path, the users home drive, etc.. This will not be covered in this chapter, for more information please refer to the chapter on <a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control</a>. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878954"></a>Active Directory Domain Control</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876857"></a>Active Directory Domain Control</h3></div></div><div></div></div><p> As of the release of MS Windows 2000 and Active Directory, this information is now stored in a directory that can be replicated and for which partial or full administrative control can be delegated. Samba-3 is NOT able to be a Domain Controller within an Active Directory tree, and it can not be an Active Directory server. This means that Samba-3 also can NOT act as a Backup Domain Controller to an Active Directory Domain Controller. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878975"></a>What qualifies a Domain Controller on the network?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876879"></a>What qualifies a Domain Controller on the network?</h3></div></div><div></div></div><p> Every machine that is a Domain Controller for the domain SAMBA has to register the NetBIOS group name SAMBA<#1c> with the WINS server and/or by broadcast on the local network. The PDC also registers the unique NetBIOS name SAMBA<#1b> with the WINS server. The name type <#1b> name is normally reserved for the Domain Master Browser, a role that has nothing to do with anything related to authentication, but the Microsoft Domain implementation requires the domain master browser to be on the same machine as the PDC. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879001"></a>How does a Workstation find its domain controller?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876902"></a>How does a Workstation find its domain controller?</h3></div></div><div></div></div><p> An MS Windows NT4 / 200x / XP Professional workstation in the domain SAMBA that wants a local user to be authenticated has to find the domain controller for SAMBA. It does this by doing a NetBIOS name query for the group name SAMBA<#1c>. It assumes that each @@ -1472,7 +1472,7 @@ of the machines it gets back from the queries is a domain controller and can ans requests. To not open security holes both the workstation and the selected domain controller authenticate each other. After that the workstation sends the user's credentials (name and password) to the local Domain Controller, for validation. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879047"></a>Backup Domain Controller Configuration</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876928"></a>Backup Domain Controller Configuration</h2></div></div><div></div></div><p> Several things have to be done: </p><div class="itemizedlist"><ul type="disc"><li><p> The domain SID has to be the same on the PDC and the BDC. This used to @@ -1507,7 +1507,7 @@ Several things have to be done: BDC. This can be done manually whenever login scripts are changed, or it can be done automatically together with the smbpasswd synchronization. - </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879149"></a>Example Configuration</h3></div></div><div></div></div><p> + </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877029"></a>Example Configuration</h3></div></div><div></div></div><p> Finally, the BDC has to be found by the workstations. This can be done by setting: </p><pre class="programlisting"> workgroup = SAMBA @@ -1520,10 +1520,10 @@ problem as the name SAMBA<#1c> is a NetBIOS group name that is meant to be registered by more than one machine. The parameter 'domain master = no' forces the BDC not to register SAMBA<#1b> which as a unique NetBIOS name is reserved for the Primary Domain Controller. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879210"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877079"></a>Common Errors</h2></div></div><div></div></div><p> As this is a rather new area for Samba there are not many examples that we may refer to. Keep watching for updates to this section. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879224"></a>Machine Accounts keep expiring, what can I do?</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877093"></a>Machine Accounts keep expiring, what can I do?</h3></div></div><div></div></div><p> This problem will occur when occur when the passdb (SAM) files are copied from a central server but the local Backup Domain Controllers. Local machine trust account password updates are not copied back to the central server. The newer machine account password is then over @@ -1534,7 +1534,7 @@ to proceed and the account expiry error will be reported. </p><p> The solution: use a more robust passdb backend, such as the ldapsam backend, setting up an slave LDAP server for each BDC, and a master LDAP server for the PDC. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879254"></a>Can Samba be a Backup Domain Controller to an NT4 PDC?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877125"></a>Can Samba be a Backup Domain Controller to an NT4 PDC?</h3></div></div><div></div></div><p> With version 2.2, no. The native NT4 SAM replication protocols have not yet been fully implemented. The Samba Team is working on understanding and implementing the protocols, but this work has not been finished for version 2.2. @@ -1545,7 +1545,7 @@ mechanism has progressed, and some form of NT4 BDC support is expected soon. Can I get the benefits of a BDC with Samba? Yes. The main reason for implementing a BDC is availability. If the PDC is a Samba machine, a second Samba machine can be set up to service logon requests whenever the PDC is down. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879287"></a>How do I replicate the smbpasswd file?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877158"></a>How do I replicate the smbpasswd file?</h3></div></div><div></div></div><p> Replication of the smbpasswd file is sensitive. It has to be done whenever changes to the SAM are made. Every user's password change is done in the smbpasswd file and has to be replicated to the BDC. So replicating the smbpasswd file very often is necessary. @@ -1559,12 +1559,12 @@ to type a password. As said a few times before, use of this method is broken and flawed. Machine trust accounts will go out of sync, resulting in a very broken domain. This method is <span class="emphasis"><em>not</em></span> recommended. Try using LDAP instead. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879332"></a>Can I do this all with LDAP?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877202"></a>Can I do this all with LDAP?</h3></div></div><div></div></div><p> The simple answer is YES. Samba's pdb_ldap code supports binding to a replica LDAP server, and will also follow referrals and rebind to the master if it ever needs to make a modification to the database. (Normally BDCs are read only, so this will not occur often). -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="domain-member"></a>Chapter7.Domain Membership</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2880401">Features and Benefits</a></dt><dt><a href="#id2880516">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2880692">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2880944">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2881141">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="#id2881203">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2881406">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2881788">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2881929">Setup your smb.conf</a></dt><dt><a href="#id2882013">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882376">Notes</a></dt></dl></dd><dt><a href="#id2882398">Common Errors</a></dt><dd><dl><dt><a href="#id2882423">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2882455">Adding Machine to Domain Fails</a></dt></dl></dd></dl></div><p> +</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="domain-member"></a>Chapter7.Domain Membership</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2877728">Features and Benefits</a></dt><dt><a href="#id2877298">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2877460">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879244">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2879440">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879495">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2879692">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2882368">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2882506">Setup your smb.conf</a></dt><dt><a href="#id2882590">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882938">Notes</a></dt></dl></dd><dt><a href="#id2882960">Common Errors</a></dt><dd><dl><dt><a href="#id2882986">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2883018">Adding Machine to Domain Fails</a></dt></dl></dd></dl></div><p> Domain Membership is a subject of vital concern, Samba must be able to participate as a member server in a Microsoft Domain security context, and Samba must be capable of providing Domain machine member trust accounts, @@ -1577,7 +1577,7 @@ within the current MS Windows networking world and particularly in the Unix/Linux networking and administration world, a considerable level of mis-information, incorrect understanding, and a lack of knowledge. Hopefully this chapter will fill the voids. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880401"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877728"></a>Features and Benefits</h2></div></div><div></div></div><p> MS Windows workstations and servers that want to participate in domain security need to be made Domain members. Participating in Domain security is often called @@ -1614,7 +1614,7 @@ Domain membership has many advantages: client or server, other than the central Domain database (either NT4/Samba SAM style Domain, NT4 Domain that is back ended with an LDAP directory, or via an Active Directory infrastructure) - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880516"></a>MS Windows Workstation/Server Machine Trust Accounts</h2></div></div><div></div></div><p> + </p></li></ul></div></div><div xmlns:ns7="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877298"></a>MS Windows Workstation/Server Machine Trust Accounts</h2></div></div><div></div></div><p> A machine trust account is an account that is used to authenticate a client machine (rather than a user) to the Domain Controller server. In Windows terminology, @@ -1633,11 +1633,11 @@ shared secret with the domain controller. A Windows NT4 PDC stores each machine trust account in the Windows Registry. The introduction of MS Windows 2000 saw the introduction of Active Directory, the new repository for machine trust accounts. -</p><p> +</p><ns7:p> A Samba PDC, however, stores each machine trust account in two parts, as follows: -</p><div class="itemizedlist"><ul type="disc"><li><p> +</ns7:p><div class="itemizedlist"><ul type="disc"><li><p> A Domain Security Account (stored in the <i class="parameter"><tt>passdb backend</tt></i> that has been configured in the <tt class="filename">smb.conf</tt> file. The precise nature of the account information that is @@ -1657,8 +1657,8 @@ as follows: <tt class="filename">/etc/passwd</tt>. Work is in progress to allow a simplified mode of operation that does not require Unix user accounts, but this may not be a feature of the early releases of Samba-3. - </p></li></ul></div><p> -</p><p> + </p></li></ul></div><ns7:p> +</ns7:p><p> There are three ways to create machine trust accounts: </p><div class="itemizedlist"><ul type="disc"><li><p> Manual creation from the Unix/Linux command line. Here, both the Samba and @@ -1673,7 +1673,7 @@ There are three ways to create machine trust accounts: created by Samba at the time the client is joined to the domain. (For security, this is the recommended method.) The corresponding Unix account may be created automatically or manually. - </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880692"></a>Manual Creation of Machine Trust Accounts</h3></div></div><div></div></div><p> + </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877460"></a>Manual Creation of Machine Trust Accounts</h3></div></div><div></div></div><p> The first step in manually creating a machine trust account is to manually create the corresponding Unix account in <tt class="filename">/etc/passwd</tt>. This can be done using <b class="command">vipw</b> or another 'add user' command @@ -1705,11 +1705,11 @@ Now that the corresponding Unix account has been created, the next step is to cr the Samba account for the client containing the well-known initial machine trust account password. This can be done using the <a href="smbpasswd.8.html" target="_top"><b class="command">smbpasswd(8)</b></a> command as shown here: -</p><p> -</p><pre class="screen"> +</p><ns7:p> +</ns7:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -a -m <i class="replaceable"><tt>machine_name</tt></i></tt></b> -</pre><p> -</p><p> +</pre><ns7:p> +</ns7:p><p> where <i class="replaceable"><tt>machine_name</tt></i> is the machine's NetBIOS name. The RID of the new machine account is generated from the UID of the corresponding Unix account. @@ -1722,7 +1722,7 @@ the corresponding Unix account. your domain using a machine with the same NetBIOS name. A PDC inherently trusts members of the domain and will serve out a large degree of user information to such clients. You have been warned! - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880944"></a>Using NT4 Server Manager to Add Machine Accounts to the Domain</h3></div></div><div></div></div><p> + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879244"></a>Using NT4 Server Manager to Add Machine Accounts to the Domain</h3></div></div><div></div></div><p> If the machine from which you are trying to manage the domain is an <span class="application">MS Windows NT4 workstation</span> then the tool of choice is the package called <b class="command">SRVTOOLS.EXE</b>. @@ -1753,7 +1753,7 @@ Launch the <b class="command">srvmgr.exe</b> (Server Manager for Domains) and fo <span class="guilabel">Add NT Workstation of Server</span>, then enter the machine name in the field provided, then click the <span class="guibutton">Add</span> button. - </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881141"></a>"On-the-Fly" Creation of Machine Trust Accounts</h3></div></div><div></div></div><p> + </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879440"></a>"On-the-Fly" Creation of Machine Trust Accounts</h3></div></div><div></div></div><p> The second (and recommended) way of creating machine trust accounts is simply to allow the Samba server to create them as needed when the client is joined to the domain. @@ -1768,10 +1768,10 @@ Below is an example for a RedHat Linux system. [global] # <...remainder of parameters...> add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881203"></a>Making an MS Windows Workstation or Server a Domain Member</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879495"></a>Making an MS Windows Workstation or Server a Domain Member</h3></div></div><div></div></div><p> The procedure for making an MS Windows workstation of server a member of the domain varies with the version of Windows: -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881216"></a>Windows 200x XP Professional</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879508"></a>Windows 200x XP Professional</h4></div></div><div></div></div><p> When the user elects to make the client a domain member, Windows 200x prompts for an account and password that has privileges to create machine accounts in the domain. A Samba administrative account (i.e., a Samba account that has root privileges on the @@ -1791,7 +1791,7 @@ with the version of Windows: encryption key for setting the password of the machine trust account. The machine trust account will be created on-the-fly, or updated if it already exists. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881283"></a>Windows NT4</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879576"></a>Windows NT4</h4></div></div><div></div></div><p> If the machine trust account was created manually, on the Identification Changes menu enter the domain name, but do not check the box <span class="guilabel">Create a Computer Account in the Domain</span>. @@ -1804,7 +1804,7 @@ with the version of Windows: Domain</span>. In this case, joining the domain proceeds as above for Windows 2000 (i.e., you must supply a Samba administrative account when prompted). - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881324"></a>Samba</h4></div></div><div></div></div><p>Joining a Samba client to a domain is documented in + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879617"></a>Samba</h4></div></div><div></div></div><p>Joining a Samba client to a domain is documented in the <a href="#domain-member-server" title="Domain Member Server">Domain Member Server</a> section of this chapter chapter. </p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="domain-member-server"></a>Domain Member Server</h2></div></div><div></div></div><p> This mode of server operation involves the Samba machine being made a member @@ -1826,28 +1826,28 @@ for more information regarding how to create a domain machine account for a domain member server as well as for information regarding how to enable the Samba domain member machine to join the domain and to be fully trusted by it. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881406"></a>Joining an NT4 type Domain with Samba-3</h3></div></div><div></div></div><p> - </p><div class="table"><a name="id2881417"></a><p class="title"><b>Table7.1.Assumptions</b></p><table summary="Assumptions" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">NetBIOS name:</td><td align="left">SERV1</td></tr><tr><td align="left">Win2K/NT domain name:</td><td align="left">DOM</td></tr><tr><td align="left">Domain's PDC NetBIOS name:</td><td align="left">DOMPDC</td></tr><tr><td align="left">Domain's BDC NetBIOS names:</td><td align="left">DOMBDC1 and DOMBDC2</td></tr></tbody></table></div><p> -</p><p> +</p><div xmlns:ns8="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879692"></a>Joining an NT4 type Domain with Samba-3</h3></div></div><div></div></div><ns8:p> + </ns8:p><div class="table"><a name="id2879702"></a><p class="title"><b>Table7.1.Assumptions</b></p><table summary="Assumptions" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">NetBIOS name:</td><td align="left">SERV1</td></tr><tr><td align="left">Win2K/NT domain name:</td><td align="left">DOM</td></tr><tr><td align="left">Domain's PDC NetBIOS name:</td><td align="left">DOMPDC</td></tr><tr><td align="left">Domain's BDC NetBIOS names:</td><td align="left">DOMBDC1 and DOMBDC2</td></tr></tbody></table></div><ns8:p> +</ns8:p><p> First, you must edit your <tt class="filename">smb.conf</tt> file to tell Samba it should now use domain security. </p><p> Change (or add) your <a href="smb.conf.5.html#SECURITY" target="_top"> <i class="parameter"><tt>security</tt></i></a> line in the [global] section of your <tt class="filename">smb.conf</tt> to read: -</p><p> -</p><pre class="programlisting"> +</p><ns8:p> +</ns8:p><pre class="programlisting"> security = domain -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> Next change the <a href="smb.conf.5.html#WORKGROUP" target="_top"><i class="parameter"><tt> workgroup</tt></i></a> line in the <i class="parameter"><tt>[global]</tt></i> section to read: -</p><p> -</p><pre class="programlisting"> +</p><ns8:p> +</ns8:p><pre class="programlisting"> workgroup = DOM -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> as this is the name of the domain we are joining. </p><p> You must also have the parameter <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top"> @@ -1857,11 +1857,11 @@ You must also have the parameter <a href="smb.conf.5.html#ENCRYPTPASSWORDS" targ Finally, add (or modify) a <a href="smb.conf.5.html#PASSWORDSERVER" target="_top"> <i class="parameter"><tt>password server</tt></i></a> line in the [global] section to read: -</p><p> -</p><pre class="programlisting"> +</p><ns8:p> +</ns8:p><pre class="programlisting"> password server = DOMPDC DOMBDC1 DOMBDC2 -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> These are the primary and backup domain controllers Samba will attempt to contact in order to authenticate users. Samba will try to contact each of these servers in order, so you may want to @@ -1871,21 +1871,21 @@ among domain controllers. Alternatively, if you want smbd to automatically determine the list of Domain controllers to use for authentication, you may set this line to be: -</p><p> -</p><pre class="programlisting"> +</p><ns8:p> +</ns8:p><pre class="programlisting"> password server = * -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> This method allows Samba to use exactly the same mechanism that NT does. This method either broadcasts or uses a WINS database in order to find domain controllers to authenticate against. </p><p> In order to actually join the domain, you must run this command: -</p><p> -</p><pre class="screen"> +</p><ns8:p> +</ns8:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net join -S DOMPDC -U<i class="replaceable"><tt>Administrator%password</tt></i></tt></b> -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> If the <tt class="option">-S DOMPDC</tt> argument is not given then the domain name will be obtained from <tt class="filename">smb.conf</tt>. </p><p> @@ -1920,7 +1920,7 @@ as a shadow password file. </p><p> Finally, restart your Samba daemons and get ready for clients to begin using domain security! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881788"></a>Why is this better than security = server?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882368"></a>Why is this better than security = server?</h3></div></div><div></div></div><p> Currently, domain security in Samba doesn't free you from having to create local Unix users to represent the users attaching to your server. This means that if domain user <tt class="constant">DOM\fred @@ -1964,27 +1964,30 @@ the NIS/NT Samba</a>. </p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ads-member"></a>Samba ADS Domain Membership</h2></div></div><div></div></div><p> This is a rough guide to setting up Samba 3.0 with Kerberos authentication against a Windows2000 KDC. A familiarity with Kerberos is assumed. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881929"></a>Setup your <tt class="filename">smb.conf</tt></h3></div></div><div></div></div><p> +</p><div xmlns:ns9="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882506"></a>Setup your <tt class="filename">smb.conf</tt></h3></div></div><div></div></div><p> You must use at least the following 3 options in <tt class="filename">smb.conf</tt>: </p><pre class="programlisting"> realm = your.kerberos.REALM security = ADS encrypt passwords = yes -</pre><p> +</pre><ns9:p> In case samba can't figure out your ads server using your realm name, use the <i class="parameter"><tt>ads server</tt></i> option in <tt class="filename">smb.conf</tt>: -</p><pre class="programlisting"> +</ns9:p><pre class="programlisting"> ads server = your.kerberos.server -</pre><p> -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><ns9:p> +</ns9:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> You do <span class="emphasis"><em>not</em></span> need a smbpasswd file, and older clients will be authenticated as if <i class="parameter"><tt>security = domain</tt></i>, although it won't do any harm and allows you to have local users not in the domain. It is expected that the above required options will change soon when active directory integration will get better. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882013"></a>Setup your <tt class="filename">/etc/krb5.conf</tt></h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882590"></a>Setup your <tt class="filename">/etc/krb5.conf</tt></h3></div></div><div></div></div><p> The minimal configuration for <tt class="filename">krb5.conf</tt> is: </p><pre class="programlisting"> + [libdefaults] + default_realm = YOUR.KERBEROS.REALM + [realms] YOUR.KERBEROS.REALM = { kdc = your.kerberos.server @@ -2017,20 +2020,20 @@ straight to <a href="#ads-test-smbclient" title="Testing with smbclient">Test wi <a href="#ads-create-machine-account" title="Create the computer account">Creating a computer account</a> and <a href="#ads-test-server" title="Test your server setup">testing your servers</a> is only needed if you want Kerberos support for <span class="application">smbd</span> and <span class="application">winbindd</span>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-create-machine-account"></a>Create the computer account</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns10="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-create-machine-account"></a>Create the computer account</h3></div></div><div></div></div><ns10:p> As a user that has write permission on the Samba private directory (usually root) run: -</p><pre class="programlisting"> +</ns10:p><pre class="programlisting"> <tt class="prompt">root# </tt><b class="userinput"><tt>net join -U Administrator%password</tt></b> -</pre><p> -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882222"></a>Possible errors</h4></div></div><div></div></div><p> -</p><div class="variablelist"><dl><dt><span class="term"><span class="errorname">ADS support not compiled in</span></span></dt><dd><p>Samba must be reconfigured (remove config.cache) and recompiled +</pre><ns10:p> +</ns10:p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882787"></a>Possible errors</h4></div></div><div></div></div><ns10:p> +</ns10:p><div class="variablelist"><dl><dt><span class="term"><span class="errorname">ADS support not compiled in</span></span></dt><dd><p>Samba must be reconfigured (remove config.cache) and recompiled (make clean all install) after the Kerberos libs and headers are installed. </p></dd><dt><span class="term"><span class="errorname">net join prompts for user name</span></span></dt><dd><p>You need to login to the domain using <b class="userinput"><tt>kinit <i class="replaceable"><tt>USERNAME</tt></i>@<i class="replaceable"><tt>REALM</tt></i></tt></b>. <i class="replaceable"><tt>USERNAME</tt></i> must be a user who has rights to add a machine - to the domain. </p></dd></dl></div><p> -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-server"></a>Test your server setup</h3></div></div><div></div></div><p> + to the domain. </p></dd></dl></div><ns10:p> +</ns10:p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-server"></a>Test your server setup</h3></div></div><div></div></div><p> If the join was successful, you will see a new computer account with the NetBIOS name of your Samba server in Active Directory (in the "Computers" folder under Users and Computers. @@ -2043,13 +2046,13 @@ server? Does it have an encoding type of DES-CBC-MD5 ? On your Samba server try to login to a Win2000 server or your Samba server using <span class="application">smbclient</span> and Kerberos. Use <span class="application">smbclient</span> as usual, but specify the <i class="parameter"><tt>-k</tt></i> option to choose Kerberos authentication. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882376"></a>Notes</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882938"></a>Notes</h3></div></div><div></div></div><p> You must change administrator password at least once after DC install, to create the right encoding types </p><p> W2k doesn't seem to create the _kerberos._udp and _ldap._tcp in their defaults DNS setup. Maybe fixed in service packs? -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2882398"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2882960"></a>Common Errors</h2></div></div><div></div></div><p> In the process of adding / deleting / re-adding domain member machine accounts there are many traps for the unwary player and there are many “<span class="quote">little</span>” things that can go wrong. It is particularly interesting how often subscribers on the samba mailing list have concluded @@ -2057,7 +2060,7 @@ after repeated failed attempts to add a machine account that it is necessary to MS Windows on t he machine. In truth, it is seldom necessary to reinstall because of this type of problem. The real solution is often very simple, and with understanding of how MS Windows networking functions. easily overcome. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882423"></a>Can Not Add Machine Back to Domain</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882986"></a>Can Not Add Machine Back to Domain</h3></div></div><div></div></div><p> <span class="emphasis"><em>Problem:</em></span> A Windows workstation was reinstalled. The original domain machine account was deleted and added immediately. The workstation will not join the domain if I use the same machine name. Attempts to add the machine fail with a message that the machine already @@ -2066,7 +2069,7 @@ exists on the network - I know it doesn't. Why is this failing? The original name is still in the NetBIOS name cache and must expire after machine account deletion BEFORE adding that same name as a domain member again. The best advice is to delete the old account and then to add the machine with a new name. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882455"></a>Adding Machine to Domain Fails</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883018"></a>Adding Machine to Domain Fails</h3></div></div><div></div></div><p> Adding a Windows 200x or XP Professional machine to the Samba PDC Domain fails with a message that, <span class="errorname">The machine could not be added at this time, there is a network problem. Please try again later.</span> Why? @@ -2091,12 +2094,12 @@ Possible causes include: then make sure that the machine name you are trying to add can be added using this tool. <b class="command">Useradd</b> on some systems will not allow any upper case characters nor will it allow spaces in the name. - </p></li></ul></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="StandAloneServer"></a>Chapter8.Stand-Alone Servers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2884809">Features and Benefits</a></dt><dt><a href="#id2885005">Background</a></dt><dt><a href="#id2885077">Example Configuration</a></dt><dd><dl><dt><a href="#id2885092">Reference Documentation Server</a></dt><dt><a href="#id2885142">Central Print Serving</a></dt></dl></dd><dt><a href="#id2885356">Common Errors</a></dt></dl></div><p> + </p></li></ul></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="StandAloneServer"></a>Chapter8.Stand-Alone Servers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2884461">Features and Benefits</a></dt><dt><a href="#id2884499">Background</a></dt><dt><a href="#id2884567">Example Configuration</a></dt><dd><dl><dt><a href="#id2883169">Reference Documentation Server</a></dt><dt><a href="#id2883216">Central Print Serving</a></dt></dl></dd><dt><a href="#id2883429">Common Errors</a></dt></dl></div><p> Stand-Alone servers are independent of Domain Controllers on the network. They are NOT domain members and function more like workgroup servers. In many cases a stand-alone server is configured with a minimum of security control with the intent that all data served will be readily accessible to all users. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884809"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884461"></a>Features and Benefits</h2></div></div><div></div></div><p> Stand-Alone servers can be as secure or as insecure as needs dictate. They can have simple or complex configurations. Above all, despite the hoopla about Domain security they remain a very common installation. @@ -2113,7 +2116,7 @@ that are queued off a single central server. Everyone needs to be able to print to the printers, there is no need to affect any access controls and no files will be served from the print server. Again a share mode stand-alone server makes a great solution. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885005"></a>Background</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884499"></a>Background</h2></div></div><div></div></div><p> The term <span class="emphasis"><em>stand-alone server</em></span> means that the server will provide local authentication and access control for all resources that are available from it. In general this means that there will be a @@ -2142,11 +2145,11 @@ This means that the Samba server may use the local Unix/Linux system password da local smbpasswd file, or may use an LDAP back end, or even via PAM and Winbind another CIFS/SMB server for authentication. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885077"></a>Example Configuration</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884567"></a>Example Configuration</h2></div></div><div></div></div><p> The following examples are designed to inspire simplicity. It is too easy to attempt a high level of creativity and to introduce too much complexity in server and network design. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885092"></a>Reference Documentation Server</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883169"></a>Reference Documentation Server</h3></div></div><div></div></div><p> Configuration of a read-only data server that EVERYONE can access is very simple. Here is the smb.conf file that will do this. Assume that all the reference documents are stored in the directory /export, that the documents are owned by a user other than @@ -2171,7 +2174,7 @@ of the local workgroup so that the machine will appear in with systems users are with. The only password backend required is the "guest" backend so as to allow default unprivileged account names to be used. Given that there is a WINS server on this network we do use it. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885142"></a>Central Print Serving</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns13="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883216"></a>Central Print Serving</h3></div></div><div></div></div><p> Configuration of a simple print server is very simple if you have all the right tools on your system. </p><div class="orderedlist"><p class="title"><b> Assumptions:</b></p><ol type="1"><li><p> @@ -2191,27 +2194,27 @@ In this example our print server will spool all incoming print jobs to <tt class="filename">/var/spool/samba</tt> until the job is ready to be submitted by Samba to the CUPS print processor. Since all incoming connections will be as the anonymous (guest) user, two things will be required: -</p><div class="itemizedlist"><p class="title"><b>Enabling Anonymous Printing</b></p><ul type="disc"><li><p> +</p><div class="itemizedlist"><p class="title"><b>Enabling Anonymous Printing</b></p><ul type="disc"><li xmlns:ns11=""><ns11:p> The Unix/Linux system must have a <b class="command">guest</b> account. The default for this is usually the account <b class="command">nobody</b>. To find the correct name to use for your version of Samba do the following: - </p><pre class="screen"> + </ns11:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>testparm -s -v | grep "guest account"</tt></b> - </pre><p> + </pre><ns11:p> Then make sure that this account exists in your system password database (<tt class="filename">/etc/passwd</tt>). - </p></li><li><p> + </ns11:p></li><li xmlns:ns12=""><ns12:p> The directory into which Samba will spool the file must have write access for the guest account. The following commands will ensure that this directory is available for use: - </p><pre class="screen"> + </ns12:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>mkdir /var/spool/samba</tt></b> <tt class="prompt">root# </tt><b class="userinput"><tt>chown nobody.nobody /var/spool/samba</tt></b> <tt class="prompt">root# </tt><b class="userinput"><tt>chmod a+rwt /var/spool/samba</tt></b> - </pre><p> - </p></li></ul></div><p> -</p><pre class="programlisting"> + </pre><ns12:p> + </ns12:p></li></ul></div><ns13:p> +</ns13:p><pre class="programlisting"> # Global parameters [global] workgroup = MYGROUP @@ -2229,39 +2232,39 @@ the anonymous (guest) user, two things will be required: printing = cups use client driver = Yes browseable = No -</pre><p> -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885356"></a>Common Errors</h2></div></div><div></div></div><p> +</pre><ns13:p> +</ns13:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883429"></a>Common Errors</h2></div></div><div></div></div><p> The greatest mistake so often made is to make a network configuration too complex. It pays to use the simplest solution that will meet the needs of the moment. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ClientConfig"></a>Chapter9.MS Windows Network Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2884469">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884469"></a>Note</h2></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ClientConfig"></a>Chapter9.MS Windows Network Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2883797">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883797"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. -</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="optional"></a>Advanced Configuration</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2884234"></a>Valuable Nuts and Bolts Information</h1></div></div><div></div></div><p> +</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="optional"></a>Advanced Configuration</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2883825"></a>Valuable Nuts and Bolts Information</h1></div></div><div></div></div><p> Samba has several features that you might want or might not want to use. The chapters in this part each cover specific Samba features. -</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>10. <a href="#NetworkBrowsing">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="#id2886062">Features and Benefits</a></dt><dt><a href="#id2886141">What is Browsing?</a></dt><dt><a href="#id2886251">Discussion</a></dt><dd><dl><dt><a href="#id2886267">NetBIOS over TCP/IP</a></dt><dt><a href="#id2886430">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2886562">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2886698">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2886824">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2887045">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2887315">Making Samba the domain master</a></dt><dt><a href="#id2887471">Note about broadcast addresses</a></dt><dt><a href="#id2887488">Multiple interfaces</a></dt><dt><a href="#id2887517">Use of the Remote Announce parameter</a></dt><dt><a href="#id2887626">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2887687">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2887846">Setting up a WINS server</a></dt><dt><a href="#id2888045">WINS Replication</a></dt><dt><a href="#id2888070">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2888154">Helpful Hints</a></dt><dd><dl><dt><a href="#id2888167">Windows Networking Protocols</a></dt><dt><a href="#id2888234">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2888372">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2888419">Browsing support in Samba</a></dt><dt><a href="#id2888526">Problem resolution</a></dt><dt><a href="#id2888605">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2889225">Common Errors</a></dt><dd><dl><dt><a href="#id2889240">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2889269">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></dd><dt>11. <a href="#passdb">Account Information Databases</a></dt><dd><dl><dt><a href="#id2892812">Features and Benefits</a></dt><dt><a href="#id2893140">Technical Information</a></dt><dd><dl><dt><a href="#id2893204">Important Notes About Security</a></dt><dt><a href="#id2893458">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2893513">Account Management Tools</a></dt><dd><dl><dt><a href="#id2893545">The smbpasswd Command</a></dt><dt><a href="#id2893811">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2893963">Password Backends</a></dt><dd><dl><dt><a href="#id2893999">Plain Text</a></dt><dt><a href="#id2894038">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2894145">tdbsam</a></dt><dt><a href="#id2894173">ldapsam</a></dt><dt><a href="#id2895689">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2896493">Common Errors</a></dt><dd><dl><dt><a href="#id2896501">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2896516">Users are being added to the wrong backend database</a></dt><dt><a href="#id2896576">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="#groupmapping">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="#id2903953">Features and Benefits</a></dt><dt><a href="#id2904055">Discussion</a></dt><dd><dl><dt><a href="#id2904246">Example Configuration</a></dt></dl></dd><dt><a href="#id2904310">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2904325">Sample smb.conf add group script</a></dt><dt><a href="#id2904393">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2904485">Common Errors</a></dt><dd><dl><dt><a href="#id2904501">Adding Groups Fails</a></dt><dt><a href="#id2904562">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="#id2902775">Features and Benefits</a></dt><dt><a href="#id2902812">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902830">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2903087">Managing Directories</a></dt><dt><a href="#id2903183">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2903398">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2904578">User and Group Based Controls</a></dt><dt><a href="#id2904850">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2905095">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905311">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905383">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905682">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905690">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905728">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905807">Viewing file ownership</a></dt><dt><a href="#id2905929">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906157">Modifying file or directory permissions</a></dt><dt><a href="#id2906309">Interaction with the standard Samba create mask - parameters</a></dt><dt><a href="#id2906639">Interaction with the standard Samba file attribute - mapping</a></dt></dl></dd><dt><a href="#id2906714">Common Errors</a></dt><dd><dl><dt><a href="#id2906729">Users can not write to a public share</a></dt><dt><a href="#id2907109">I have set force user and Samba still makes root the owner of all the files - I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="#locking">File and Record Locking</a></dt><dd><dl><dt><a href="#id2910721">Features and Benefits</a></dt><dt><a href="#id2910776">Discussion</a></dt><dd><dl><dt><a href="#id2910908">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2911554">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2911664">Example Configuration</a></dt></dl></dd><dt><a href="#id2911924">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2912154">Workstation Service Entries</a></dt><dt><a href="#id2912180">Server Service Entries</a></dt></dl></dd><dt><a href="#id2912260">Persistent Data Corruption</a></dt><dt><a href="#id2912291">Common Errors</a></dt><dd><dl><dt><a href="#id2912365">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2912394">Additional Reading</a></dt></dl></dd><dt>15. <a href="#securing-samba">Securing Samba</a></dt><dd><dl><dt><a href="#id2914448">Introduction</a></dt><dt><a href="#id2914481">Features and Benefits</a></dt><dt><a href="#id2914555">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2914574">Using host based protection</a></dt><dt><a href="#id2914645">User based protection</a></dt><dt><a href="#id2914697">Using interface protection</a></dt><dt><a href="#id2914749">Using a firewall</a></dt><dt><a href="#id2914805">Using a IPC$ share deny</a></dt><dt><a href="#id2914866">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2914907">Upgrading Samba</a></dt><dt><a href="#id2914932">Common Errors</a></dt><dd><dl><dt><a href="#id2914949">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2914974">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="#id2915881">Features and Benefits</a></dt><dt><a href="#id2915909">Trust Relationship Background</a></dt><dt><a href="#id2915993">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2916006">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2916091">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2916127">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2916155">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2916295">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2916428">Common Errors</a></dt><dd><dl><dt><a href="#id2916443">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="#msdfs">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="#id2915783">Features and Benefits</a></dt><dt><a href="#id2917436">Common Errors</a></dt></dl></dd><dt>18. <a href="#printing">Classical Printing Support</a></dt><dd><dl><dt><a href="#id2917027">Features and Benefits</a></dt><dt><a href="#id2917095">Technical Introduction</a></dt><dd><dl><dt><a href="#id2917133">What happens if you send a Job from a Client</a></dt><dt><a href="#id2917203">Printing Related Configuration Parameters</a></dt><dt><a href="#id2918120">Parameters Recommended for Use</a></dt><dt><a href="#id2918450">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2918559">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2918652">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2918721">Verification of "Settings in Use" with testparm</a></dt><dt><a href="#id2918810">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2919116">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2919220">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2919234">The [global] Section</a></dt><dt><a href="#id2919616">The [printers] Section</a></dt><dt><a href="#id2919945">Any [my_printer_name] Section</a></dt><dt><a href="#id2920166">Print Commands</a></dt><dt><a href="#id2920216">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2920741">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2921021">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2921186">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2921338">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2921450">Creating the [print$] Share</a></dt><dt><a href="#id2921521">Parameters in the [print$] Section</a></dt><dt><a href="#id2921752">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2921913">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2922008">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2922192">Setting Drivers for existing Printers with -rpcclient</a></dt></dl></dd><dt><a href="#id2923912">"The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)</a></dt><dd><dl><dt><a href="#id2923933">The first Client Driver Installation</a></dt><dt><a href="#id2924131">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2924420">Further Client Driver Install Procedures</a></dt><dt><a href="#id2924516">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="#id2924657">Other Gotchas</a></dt><dd><dl><dt><a href="#id2924690">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2925127">Supporting large Numbers of Printers</a></dt><dt><a href="#id2925430">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2925673">Weird Error Message Cannot connect under a -different Name</a></dt><dt><a href="#id2925771">Be careful when assembling Driver Files</a></dt><dt><a href="#id2926117">Samba and Printer Ports</a></dt><dt><a href="#id2926188">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2926210">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2926256">What is Imprints?</a></dt><dt><a href="#id2926297">Creating Printer Driver Packages</a></dt><dt><a href="#id2926316">The Imprints Server</a></dt><dt><a href="#id2926340">The Installation Client</a></dt></dl></dd><dt><a href="#id2926492">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2926822">The addprinter command</a></dt><dt><a href="#id2926867">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="#id2927036">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2927051">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2927064">I give my root password but I don't get access</a></dt><dt><a href="#id2927097">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="#CUPS-printing">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="#id2936290">Introduction</a></dt><dd><dl><dt><a href="#id2936298">Features and Benefits</a></dt><dt><a href="#id2936350">Overview</a></dt></dl></dd><dt><a href="#id2936405">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2936484">Linking of smbd with libcups.so</a></dt><dt><a href="#id2936628">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2936710">More complex smb.conf Settings for -CUPS</a></dt></dl></dd><dt><a href="#id2936828">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2936848">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="#id2936875">CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2936912">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2936970">Explicitly enable "raw" printing for -application/octet-stream!</a></dt><dt><a href="#id2937131">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2937224">Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2937300">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2937344">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2937445">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2937533">PostScript and Ghostscript</a></dt><dt><a href="#id2937630">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2937742">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2937813">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2937902">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2937925">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2938065">MIME types and CUPS Filters</a></dt><dt><a href="#id2938252">MIME type Conversion Rules</a></dt><dt><a href="#id2938369">Filter Requirements</a></dt><dt><a href="#id2938539">Prefilters</a></dt><dt><a href="#id2938624">pstops</a></dt><dt><a href="#id2938727">pstoraster</a></dt><dt><a href="#id2938883">imagetops and imagetoraster</a></dt><dt><a href="#id2938940">rasterto [printers specific]</a></dt><dt><a href="#id2939024">CUPS Backends</a></dt><dt><a href="#id2939336">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2939448">The Complete Picture</a></dt><dt><a href="#id2939464">mime.convs</a></dt><dt><a href="#id2939517">"Raw" printing</a></dt><dt><a href="#id2939571">"application/octet-stream" printing</a></dt><dt><a href="#id2939786">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2940015">Difference between cupsomatic/foomatic-rip and -native CUPS printing</a></dt><dt><a href="#id2940170">Examples for filtering Chains</a></dt><dt><a href="#id2940401">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2940530">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2940605">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2940620">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2940659">Driver Execution on the Client</a></dt><dt><a href="#id2940731">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2940794">Network Printing (Windows clients -- UNIX/Samba Print -Servers)</a></dt><dd><dl><dt><a href="#id2940814">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2940978">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2941054">Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2941110">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2941150">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2941216">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2941233">Printer Drivers running in "Kernel Mode" cause many -Problems</a></dt><dt><a href="#id2941268">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2941289">CUPS: a "Magical Stone"?</a></dt><dt><a href="#id2941316">PostScript Drivers with no major problems -- even in Kernel -Mode</a></dt></dl></dd><dt><a href="#id2941369"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2941388">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2941480">Prepare your smb.conf for -cupsaddsmb</a></dt><dt><a href="#id2941526">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="#id2941724">Recognize the different Driver Files</a></dt><dt><a href="#id2941782">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2941814">ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"</a></dt><dt><a href="#id2941864">Caveats to be considered</a></dt><dt><a href="#id2942086">What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="#id2942268">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="#id2942369">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="#id2942596">Understanding cupsaddsmb</a></dt><dt><a href="#id2942690">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2942777">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2942812">cupsaddsmb Flowchart</a></dt><dt><a href="#id2942865">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2942978">Avoiding critical PostScript Driver Settings on the -Client</a></dt></dl></dd><dt><a href="#id2943112">Installing PostScript Driver Files manually (using -rpcclient)</a></dt><dd><dl><dt><a href="#id2943227">A Check of the rpcclient man Page</a></dt><dt><a href="#id2943340">Understanding the rpcclient man Page</a></dt><dt><a href="#id2943429">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2943519">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2943682">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2944334">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2944435">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2944537">Trivial DataBase Files</a></dt><dt><a href="#id2944608">Binary Format</a></dt><dt><a href="#id2944670">Losing *.tdb Files</a></dt><dt><a href="#id2944728">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2944795">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2944903">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2945532">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2945993">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2946024">Setting up Quotas</a></dt><dt><a href="#id2946056">Correct and incorrect Accounting</a></dt><dt><a href="#id2946097">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2946169">The page_log File Syntax</a></dt><dt><a href="#id2946270">Possible Shortcomings</a></dt><dt><a href="#id2946341">Future Developments</a></dt><dt><a href="#id2946390">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2946404">Additional Material</a></dt><dt><a href="#id2946598">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2946644">CUPS Configuration Settings explained</a></dt><dt><a href="#id2946726">Pre-conditions</a></dt><dt><a href="#id2946787">Manual Configuration</a></dt></dl></dd><dt><a href="#id2946805">When not to use Samba to print to -CUPS</a></dt><dt><a href="#id2946822">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2946857">Where to find Documentation</a></dt><dt><a href="#id2946870">How to ask for Help</a></dt><dt><a href="#id2946883">Where to find Help</a></dt></dl></dd><dt><a href="#id2946896">Appendix</a></dt><dd><dl><dt><a href="#id2946904">Printing from CUPS to Windows attached -Printers</a></dt><dt><a href="#id2947118">More CUPS filtering Chains</a></dt><dt><a href="#id2947424">Trouble Shooting Guidelines to fix typical Samba printing -Problems</a></dt><dt><a href="#id2948546">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="#VFS">Stackable VFS modules</a></dt><dd><dl><dt><a href="#id2960717">Features and Benefits</a></dt><dt><a href="#id2960735">Discussion</a></dt><dt><a href="#id2960826">Included modules</a></dt><dd><dl><dt><a href="#id2960833">audit</a></dt><dt><a href="#id2960871">extd_audit</a></dt><dt><a href="#id2960995">fake_perms</a></dt><dt><a href="#id2961013">recycle</a></dt><dt><a href="#id2961151">netatalk</a></dt></dl></dd><dt><a href="#id2961195">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2961218">DatabaseFS</a></dt><dt><a href="#id2961273">vscan</a></dt></dl></dd><dt><a href="#id2961303">Common Errors</a></dt></dl></dd><dt>21. <a href="#winbind">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="#id2962201">Features and Benefits</a></dt><dt><a href="#id2962229">Introduction</a></dt><dt><a href="#id2962301">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2962361">Target Uses</a></dt></dl></dd><dt><a href="#id2962392">How Winbind Works</a></dt><dd><dl><dt><a href="#id2962420">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2962454">Microsoft Active Directory Services</a></dt><dt><a href="#id2962477">Name Service Switch</a></dt><dt><a href="#id2962613">Pluggable Authentication Modules</a></dt><dt><a href="#id2962685">User and Group ID Allocation</a></dt><dt><a href="#id2962720">Result Caching</a></dt></dl></dd><dt><a href="#id2962747">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2962776">Introduction</a></dt><dt><a href="#id2962851">Requirements</a></dt><dt><a href="#id2962944">Testing Things Out</a></dt></dl></dd><dt><a href="#id2964563">Conclusion</a></dt><dt><a href="#id2964582">Common Errors</a></dt></dl></dd><dt>22. <a href="#AdvancedNetworkManagement">Advanced Network Management</a></dt><dd><dl><dt><a href="#id2967075">Features and Benefits</a></dt><dt><a href="#id2967264">Remote Server Administration</a></dt><dt><a href="#id2967363">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2967381">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2967592">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2967788">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2967822">Common Errors</a></dt></dl></dd><dt>23. <a href="#PolicyMgmt">System and Account Policies</a></dt><dd><dl><dt><a href="#id2966885">Features and Benefits</a></dt><dt><a href="#id2966939">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2968722">Windows 9x/Me Policies</a></dt><dt><a href="#id2968817">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2968950">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2969202">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2969303">Samba Editreg Toolset</a></dt><dt><a href="#id2969324">Windows NT4/200x</a></dt><dt><a href="#id2969344">Samba PDC</a></dt></dl></dd><dt><a href="#id2969388">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2969535">Common Errors</a></dt><dd><dl><dt><a href="#id2969549">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="#ProfileMgmt">Desktop Profile Management</a></dt><dd><dl><dt><a href="#id2970756">Features and Benefits</a></dt><dt><a href="#id2970790">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2970831">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971236">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972407">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972472">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2972737">Mandatory profiles</a></dt><dt><a href="#id2972795">Creating/Managing Group Profiles</a></dt><dt><a href="#id2972841">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2972861">MS Windows 9x/Me</a></dt><dt><a href="#id2973009">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973563">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974067">Common Errors</a></dt><dd><dl><dt><a href="#id2974080">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974143">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974365">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="#pam">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="#id2978309">Features and Benefits</a></dt><dt><a href="#id2978577">Technical Discussion</a></dt><dd><dl><dt><a href="#id2978595">PAM Configuration Syntax</a></dt><dt><a href="#id2979265">Example System Configurations</a></dt><dt><a href="#id2979567">smb.conf PAM Configuration</a></dt><dt><a href="#id2979625">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2979709">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2980075">Common Errors</a></dt><dd><dl><dt><a href="#id2980089">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="#id2982211">Features and Benefits</a></dt><dt><a href="#id2982236">Background Information</a></dt><dt><a href="#id2982281">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2982337">/etc/hosts</a></dt><dt><a href="#id2982462">/etc/resolv.conf</a></dt><dt><a href="#id2982506">/etc/host.conf</a></dt><dt><a href="#id2982548">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2982637">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2982784">The NetBIOS Name Cache</a></dt><dt><a href="#id2982829">The LMHOSTS file</a></dt><dt><a href="#id2983073">HOSTS file</a></dt><dt><a href="#id2983105">DNS Lookup</a></dt><dt><a href="#id2983130">WINS Lookup</a></dt></dl></dd><dt><a href="#id2983200">Common Errors</a></dt><dd><dl><dt><a href="#id2983216">My Boomerang Won't Come Back</a></dt><dt><a href="#id2983248">Very Slow Network Connections</a></dt><dt><a href="#id2983300">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="#unicode">Unicode/Charsets</a></dt><dd><dl><dt><a href="#id2984418">Features and Benefits</a></dt><dt><a href="#id2984620">What are charsets and unicode?</a></dt><dt><a href="#id2984690">Samba and charsets</a></dt><dt><a href="#id2984790">Conversion from old names</a></dt><dt><a href="#id2984835">Japanese charsets</a></dt></dl></dd><dt>28. <a href="#Backup">Samba Backup Techniques</a></dt><dd><dl><dt><a href="#id2984038">Note</a></dt><dt><a href="#id2984063">Features and Benefits</a></dt></dl></dd><dt>29. <a href="#SambaHA">High Availability Options</a></dt><dd><dl><dt><a href="#id2985605">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NetworkBrowsing"></a>Chapter10.Samba / MS Windows Network Browsing Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">July 5, 1998</p></div><div><p class="pubdate">Updated: April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2886062">Features and Benefits</a></dt><dt><a href="#id2886141">What is Browsing?</a></dt><dt><a href="#id2886251">Discussion</a></dt><dd><dl><dt><a href="#id2886267">NetBIOS over TCP/IP</a></dt><dt><a href="#id2886430">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2886562">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2886698">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2886824">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2887045">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2887315">Making Samba the domain master</a></dt><dt><a href="#id2887471">Note about broadcast addresses</a></dt><dt><a href="#id2887488">Multiple interfaces</a></dt><dt><a href="#id2887517">Use of the Remote Announce parameter</a></dt><dt><a href="#id2887626">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2887687">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2887846">Setting up a WINS server</a></dt><dt><a href="#id2888045">WINS Replication</a></dt><dt><a href="#id2888070">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2888154">Helpful Hints</a></dt><dd><dl><dt><a href="#id2888167">Windows Networking Protocols</a></dt><dt><a href="#id2888234">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2888372">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2888419">Browsing support in Samba</a></dt><dt><a href="#id2888526">Problem resolution</a></dt><dt><a href="#id2888605">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2889225">Common Errors</a></dt><dd><dl><dt><a href="#id2889240">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2889269">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></div><p> +</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>10. <a href="#NetworkBrowsing">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="#id2884150">Features and Benefits</a></dt><dt><a href="#id2884229">What is Browsing?</a></dt><dt><a href="#id2888334">Discussion</a></dt><dd><dl><dt><a href="#id2888350">NetBIOS over TCP/IP</a></dt><dt><a href="#id2888512">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2883481">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2883615">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2883741">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2885127">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2885392">Making Samba the domain master</a></dt><dt><a href="#id2885548">Note about broadcast addresses</a></dt><dt><a href="#id2885566">Multiple interfaces</a></dt><dt><a href="#id2889067">Use of the Remote Announce parameter</a></dt><dt><a href="#id2889176">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2889237">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2889395">Setting up a WINS server</a></dt><dt><a href="#id2889590">WINS Replication</a></dt><dt><a href="#id2889615">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2889699">Helpful Hints</a></dt><dd><dl><dt><a href="#id2889712">Windows Networking Protocols</a></dt><dt><a href="#id2889779">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2889917">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2889964">Browsing support in Samba</a></dt><dt><a href="#id2890071">Problem resolution</a></dt><dt><a href="#id2890150">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2890765">Common Errors</a></dt><dd><dl><dt><a href="#id2890780">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2890809">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></dd><dt>11. <a href="#passdb">Account Information Databases</a></dt><dd><dl><dt><a href="#id2894185">Features and Benefits</a></dt><dt><a href="#id2891076">Technical Information</a></dt><dd><dl><dt><a href="#id2891140">Important Notes About Security</a></dt><dt><a href="#id2891384">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2891439">Account Management Tools</a></dt><dd><dl><dt><a href="#id2891471">The smbpasswd Command</a></dt><dt><a href="#id2891736">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2891870">Password Backends</a></dt><dd><dl><dt><a href="#id2891906">Plain Text</a></dt><dt><a href="#id2891946">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2896387">tdbsam</a></dt><dt><a href="#id2896415">ldapsam</a></dt><dt><a href="#id2897903">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2898709">Common Errors</a></dt><dd><dl><dt><a href="#id2898716">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2898731">Users are being added to the wrong backend database</a></dt><dt><a href="#id2898791">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="#groupmapping">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="#id2898963">Features and Benefits</a></dt><dt><a href="#id2899064">Discussion</a></dt><dd><dl><dt><a href="#id2899252">Example Configuration</a></dt></dl></dd><dt><a href="#id2899318">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2899332">Sample smb.conf add group script</a></dt><dt><a href="#id2899399">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2899473">Common Errors</a></dt><dd><dl><dt><a href="#id2899489">Adding Groups Fails</a></dt><dt><a href="#id2899549">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="#id2902735">Features and Benefits</a></dt><dt><a href="#id2902861">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902879">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2899794">Managing Directories</a></dt><dt><a href="#id2899890">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2900296">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2900324">User and Group Based Controls</a></dt><dt><a href="#id2900596">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2900842">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905426">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905498">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905797">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905805">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905843">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905922">Viewing file ownership</a></dt><dt><a href="#id2906044">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906272">Modifying file or directory permissions</a></dt><dt><a href="#id2906424">Interaction with the standard Samba create mask + parameters</a></dt><dt><a href="#id2906754">Interaction with the standard Samba file attribute + mapping</a></dt></dl></dd><dt><a href="#id2906829">Common Errors</a></dt><dd><dl><dt><a href="#id2906843">Users can not write to a public share</a></dt><dt><a href="#id2907222">I have set force user and Samba still makes root the owner of all the files + I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="#locking">File and Record Locking</a></dt><dd><dl><dt><a href="#id2909343">Features and Benefits</a></dt><dt><a href="#id2909398">Discussion</a></dt><dd><dl><dt><a href="#id2909529">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2907904">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2908013">Example Configuration</a></dt></dl></dd><dt><a href="#id2908272">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2910709">Workstation Service Entries</a></dt><dt><a href="#id2910736">Server Service Entries</a></dt></dl></dd><dt><a href="#id2910816">Persistent Data Corruption</a></dt><dt><a href="#id2910846">Common Errors</a></dt><dd><dl><dt><a href="#id2910919">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2910950">Additional Reading</a></dt></dl></dd><dt>15. <a href="#securing-samba">Securing Samba</a></dt><dd><dl><dt><a href="#id2912374">Introduction</a></dt><dt><a href="#id2912407">Features and Benefits</a></dt><dt><a href="#id2911067">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2911085">Using host based protection</a></dt><dt><a href="#id2911154">User based protection</a></dt><dt><a href="#id2911205">Using interface protection</a></dt><dt><a href="#id2911256">Using a firewall</a></dt><dt><a href="#id2911312">Using a IPC$ share deny</a></dt><dt><a href="#id2911377">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2911416">Upgrading Samba</a></dt><dt><a href="#id2911439">Common Errors</a></dt><dd><dl><dt><a href="#id2911458">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2911483">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="#id2912001">Features and Benefits</a></dt><dt><a href="#id2912030">Trust Relationship Background</a></dt><dt><a href="#id2912113">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2912125">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2914100">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2914137">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2914164">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2914290">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2911669">Common Errors</a></dt><dd><dl><dt><a href="#id2911684">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="#msdfs">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="#id2911782">Features and Benefits</a></dt><dt><a href="#id2913192">Common Errors</a></dt></dl></dd><dt>18. <a href="#printing">Classical Printing Support</a></dt><dd><dl><dt><a href="#id2914714">Features and Benefits</a></dt><dt><a href="#id2914778">Technical Introduction</a></dt><dd><dl><dt><a href="#id2914814">What happens if you send a Job from a Client</a></dt><dt><a href="#id2914884">Printing Related Configuration Parameters</a></dt><dt><a href="#id2917993">Parameters Recommended for Use</a></dt><dt><a href="#id2913353">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2913461">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2913555">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2915561">Verification of "Settings in Use" with testparm</a></dt><dt><a href="#id2915643">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2915950">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2916042">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2916055">The [global] Section</a></dt><dt><a href="#id2925516">The [printers] Section</a></dt><dt><a href="#id2925845">Any [my_printer_name] Section</a></dt><dt><a href="#id2926066">Print Commands</a></dt><dt><a href="#id2926117">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2926642">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2926920">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2927074">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2927225">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2927338">Creating the [print$] Share</a></dt><dt><a href="#id2927409">Parameters in the [print$] Section</a></dt><dt><a href="#id2927630">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2927791">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2927885">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2928069">Setting Drivers for existing Printers with +rpcclient</a></dt></dl></dd><dt><a href="#id2929667">"The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)</a></dt><dd><dl><dt><a href="#id2929688">The first Client Driver Installation</a></dt><dt><a href="#id2929885">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2930175">Further Client Driver Install Procedures</a></dt><dt><a href="#id2930270">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="#id2930412">Other Gotchas</a></dt><dd><dl><dt><a href="#id2930445">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2930879">Supporting large Numbers of Printers</a></dt><dt><a href="#id2931181">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2931425">Weird Error Message Cannot connect under a +different Name</a></dt><dt><a href="#id2931523">Be careful when assembling Driver Files</a></dt><dt><a href="#id2931794">Samba and Printer Ports</a></dt><dt><a href="#id2931864">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2931887">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2931932">What is Imprints?</a></dt><dt><a href="#id2931973">Creating Printer Driver Packages</a></dt><dt><a href="#id2931992">The Imprints Server</a></dt><dt><a href="#id2932017">The Installation Client</a></dt></dl></dd><dt><a href="#id2932169">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2932498">The addprinter command</a></dt><dt><a href="#id2932543">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="#id2932712">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2932726">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2932739">I give my root password but I don't get access</a></dt><dt><a href="#id2932773">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="#CUPS-printing">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="#id2939792">Introduction</a></dt><dd><dl><dt><a href="#id2939799">Features and Benefits</a></dt><dt><a href="#id2939849">Overview</a></dt></dl></dd><dt><a href="#id2939900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2939980">Linking of smbd with libcups.so</a></dt><dt><a href="#id2932886">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2932950">More complex smb.conf Settings for +CUPS</a></dt></dl></dd><dt><a href="#id2933049">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2933069">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="#id2933096">CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2933133">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2933191">Explicitly enable "raw" printing for +application/octet-stream!</a></dt><dt><a href="#id2933352">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2933445">Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2933520">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2933565">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2933663">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2933735">PostScript and Ghostscript</a></dt><dt><a href="#id2933832">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2933927">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2946744">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2946833">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2946856">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2946994">MIME types and CUPS Filters</a></dt><dt><a href="#id2947182">MIME type Conversion Rules</a></dt><dt><a href="#id2947298">Filter Requirements</a></dt><dt><a href="#id2947467">Prefilters</a></dt><dt><a href="#id2947552">pstops</a></dt><dt><a href="#id2947655">pstoraster</a></dt><dt><a href="#id2947811">imagetops and imagetoraster</a></dt><dt><a href="#id2947866">rasterto [printers specific]</a></dt><dt><a href="#id2947951">CUPS Backends</a></dt><dt><a href="#id2948265">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2948368">The Complete Picture</a></dt><dt><a href="#id2948383">mime.convs</a></dt><dt><a href="#id2948436">"Raw" printing</a></dt><dt><a href="#id2948490">"application/octet-stream" printing</a></dt><dt><a href="#id2948706">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2948933">Difference between cupsomatic/foomatic-rip and +native CUPS printing</a></dt><dt><a href="#id2949090">Examples for filtering Chains</a></dt><dt><a href="#id2949319">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2949444">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2949506">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2949522">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2949561">Driver Execution on the Client</a></dt><dt><a href="#id2949620">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2949683">Network Printing (Windows clients -- UNIX/Samba Print +Servers)</a></dt><dd><dl><dt><a href="#id2949704">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2949864">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2949942">Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2949997">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2950038">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2950103">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2950120">Printer Drivers running in "Kernel Mode" cause many +Problems</a></dt><dt><a href="#id2950155">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2950176">CUPS: a "Magical Stone"?</a></dt><dt><a href="#id2950203">PostScript Drivers with no major problems -- even in Kernel +Mode</a></dt></dl></dd><dt><a href="#id2950237"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2950256">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2950347">Prepare your smb.conf for +cupsaddsmb</a></dt><dt><a href="#id2950394">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="#id2950591">Recognize the different Driver Files</a></dt><dt><a href="#id2950649">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2950682">ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"</a></dt><dt><a href="#id2950732">Caveats to be considered</a></dt><dt><a href="#id2950953">What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="#id2951134">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="#id2951235">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="#id2951378">Understanding cupsaddsmb</a></dt><dt><a href="#id2951472">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2951559">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2951594">cupsaddsmb Flowchart</a></dt><dt><a href="#id2951645">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2951760">Avoiding critical PostScript Driver Settings on the +Client</a></dt></dl></dd><dt><a href="#id2951894">Installing PostScript Driver Files manually (using +rpcclient)</a></dt><dd><dl><dt><a href="#id2952009">A Check of the rpcclient man Page</a></dt><dt><a href="#id2952121">Understanding the rpcclient man Page</a></dt><dt><a href="#id2952200">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2952290">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2952452">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2953072">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2953174">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2953277">Trivial DataBase Files</a></dt><dt><a href="#id2953347">Binary Format</a></dt><dt><a href="#id2953409">Losing *.tdb Files</a></dt><dt><a href="#id2953468">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2953530">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2953636">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2954264">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2954722">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2954753">Setting up Quotas</a></dt><dt><a href="#id2954784">Correct and incorrect Accounting</a></dt><dt><a href="#id2954825">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2954897">The page_log File Syntax</a></dt><dt><a href="#id2954998">Possible Shortcomings</a></dt><dt><a href="#id2955070">Future Developments</a></dt><dt><a href="#id2955118">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2955133">Additional Material</a></dt><dt><a href="#id2955326">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2955372">CUPS Configuration Settings explained</a></dt><dt><a href="#id2955454">Pre-conditions</a></dt><dt><a href="#id2955515">Manual Configuration</a></dt></dl></dd><dt><a href="#id2955533">When not to use Samba to print to +CUPS</a></dt><dt><a href="#id2955550">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2955585">Where to find Documentation</a></dt><dt><a href="#id2955598">How to ask for Help</a></dt><dt><a href="#id2955611">Where to find Help</a></dt></dl></dd><dt><a href="#id2955625">Appendix</a></dt><dd><dl><dt><a href="#id2955632">Printing from CUPS to Windows attached +Printers</a></dt><dt><a href="#id2955826">More CUPS filtering Chains</a></dt><dt><a href="#id2956080">Trouble Shooting Guidelines to fix typical Samba printing +Problems</a></dt><dt><a href="#id2957186">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="#VFS">Stackable VFS modules</a></dt><dd><dl><dt><a href="#id2958605">Features and Benefits</a></dt><dt><a href="#id2958623">Discussion</a></dt><dt><a href="#id2957300">Included modules</a></dt><dd><dl><dt><a href="#id2957307">audit</a></dt><dt><a href="#id2957345">extd_audit</a></dt><dt><a href="#id2957466">fake_perms</a></dt><dt><a href="#id2957486">recycle</a></dt><dt><a href="#id2957625">netatalk</a></dt></dl></dd><dt><a href="#id2957671">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2957693">DatabaseFS</a></dt><dt><a href="#id2957748">vscan</a></dt></dl></dd><dt><a href="#id2957777">Common Errors</a></dt></dl></dd><dt>21. <a href="#winbind">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="#id2958272">Features and Benefits</a></dt><dt><a href="#id2958300">Introduction</a></dt><dt><a href="#id2960332">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2960392">Target Uses</a></dt></dl></dd><dt><a href="#id2960423">How Winbind Works</a></dt><dd><dl><dt><a href="#id2960451">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2960484">Microsoft Active Directory Services</a></dt><dt><a href="#id2960506">Name Service Switch</a></dt><dt><a href="#id2957818">Pluggable Authentication Modules</a></dt><dt><a href="#id2957889">User and Group ID Allocation</a></dt><dt><a href="#id2957924">Result Caching</a></dt></dl></dd><dt><a href="#id2957952">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2957980">Introduction</a></dt><dt><a href="#id2958055">Requirements</a></dt><dt><a href="#id2959330">Testing Things Out</a></dt></dl></dd><dt><a href="#id2963732">Conclusion</a></dt><dt><a href="#id2963750">Common Errors</a></dt></dl></dd><dt>22. <a href="#AdvancedNetworkManagement">Advanced Network Management</a></dt><dd><dl><dt><a href="#id2965123">Features and Benefits</a></dt><dt><a href="#id2965154">Remote Server Administration</a></dt><dt><a href="#id2963838">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2963854">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2964055">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2964250">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2964283">Common Errors</a></dt></dl></dd><dt>23. <a href="#PolicyMgmt">System and Account Policies</a></dt><dd><dl><dt><a href="#id2964680">Features and Benefits</a></dt><dt><a href="#id2964732">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2964843">Windows 9x/Me Policies</a></dt><dt><a href="#id2964391">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2964524">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2965966">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2966066">Samba Editreg Toolset</a></dt><dt><a href="#id2966087">Windows NT4/200x</a></dt><dt><a href="#id2966107">Samba PDC</a></dt></dl></dd><dt><a href="#id2966152">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2966299">Common Errors</a></dt><dd><dl><dt><a href="#id2966313">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="#ProfileMgmt">Desktop Profile Management</a></dt><dd><dl><dt><a href="#id2966416">Features and Benefits</a></dt><dt><a href="#id2966449">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2966490">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971852">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972789">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972854">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2973114">Mandatory profiles</a></dt><dt><a href="#id2973172">Creating/Managing Group Profiles</a></dt><dt><a href="#id2973217">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2973237">MS Windows 9x/Me</a></dt><dt><a href="#id2973385">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973939">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974443">Common Errors</a></dt><dd><dl><dt><a href="#id2974456">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974519">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974737">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="#pam">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="#id2976194">Features and Benefits</a></dt><dt><a href="#id2975049">Technical Discussion</a></dt><dd><dl><dt><a href="#id2975066">PAM Configuration Syntax</a></dt><dt><a href="#id2975731">Example System Configurations</a></dt><dt><a href="#id2978164">smb.conf PAM Configuration</a></dt><dt><a href="#id2978221">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2978305">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2978671">Common Errors</a></dt><dd><dl><dt><a href="#id2978685">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="#id2980428">Features and Benefits</a></dt><dt><a href="#id2980452">Background Information</a></dt><dt><a href="#id2980497">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2980549">/etc/hosts</a></dt><dt><a href="#id2980673">/etc/resolv.conf</a></dt><dt><a href="#id2978824">/etc/host.conf</a></dt><dt><a href="#id2978866">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2978954">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2979079">The NetBIOS Name Cache</a></dt><dt><a href="#id2979124">The LMHOSTS file</a></dt><dt><a href="#id2979238">HOSTS file</a></dt><dt><a href="#id2979270">DNS Lookup</a></dt><dt><a href="#id2979295">WINS Lookup</a></dt></dl></dd><dt><a href="#id2979366">Common Errors</a></dt><dd><dl><dt><a href="#id2979382">My Boomerang Won't Come Back</a></dt><dt><a href="#id2979413">Very Slow Network Connections</a></dt><dt><a href="#id2979464">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="#unicode">Unicode/Charsets</a></dt><dd><dl><dt><a href="#id2979620">Features and Benefits</a></dt><dt><a href="#id2979662">What are charsets and unicode?</a></dt><dt><a href="#id2979730">Samba and charsets</a></dt><dt><a href="#id2979831">Conversion from old names</a></dt><dt><a href="#id2979876">Japanese charsets</a></dt></dl></dd><dt>28. <a href="#Backup">Samba Backup Techniques</a></dt><dd><dl><dt><a href="#id2982471">Note</a></dt><dt><a href="#id2982492">Features and Benefits</a></dt></dl></dd><dt>29. <a href="#SambaHA">High Availability Options</a></dt><dd><dl><dt><a href="#id2982302">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NetworkBrowsing"></a>Chapter10.Samba / MS Windows Network Browsing Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">July 5, 1998</p></div><div><p class="pubdate">Updated: April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2884150">Features and Benefits</a></dt><dt><a href="#id2884229">What is Browsing?</a></dt><dt><a href="#id2888334">Discussion</a></dt><dd><dl><dt><a href="#id2888350">NetBIOS over TCP/IP</a></dt><dt><a href="#id2888512">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2883481">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2883615">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2883741">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2885127">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2885392">Making Samba the domain master</a></dt><dt><a href="#id2885548">Note about broadcast addresses</a></dt><dt><a href="#id2885566">Multiple interfaces</a></dt><dt><a href="#id2889067">Use of the Remote Announce parameter</a></dt><dt><a href="#id2889176">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2889237">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2889395">Setting up a WINS server</a></dt><dt><a href="#id2889590">WINS Replication</a></dt><dt><a href="#id2889615">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2889699">Helpful Hints</a></dt><dd><dl><dt><a href="#id2889712">Windows Networking Protocols</a></dt><dt><a href="#id2889779">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2889917">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2889964">Browsing support in Samba</a></dt><dt><a href="#id2890071">Problem resolution</a></dt><dt><a href="#id2890150">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2890765">Common Errors</a></dt><dd><dl><dt><a href="#id2890780">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2890809">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></div><p> This document contains detailed information as well as a fast track guide to implementing browsing across subnets and / or across workgroups (or domains). WINS is the best tool for resolution of NetBIOS names to IP addresses. WINS is @@ -2272,7 +2275,7 @@ over TCP/IP. Samba-3 and later also supports this mode of operation. When the use of NetBIOS over TCP/IP has been disabled then the primary means for resolution of MS Windows machine names is via DNS and Active Directory. The following information assumes that your site is running NetBIOS over TCP/IP. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886062"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884150"></a>Features and Benefits</h2></div></div><div></div></div><p> Someone once referred to the past in terms of: <span class="emphasis"><em>They were the worst of times, they were the best of times. The more we look back, them more we long for what was and hope it never returns!</em></span>. @@ -2305,7 +2308,7 @@ support for NetBIOS, in which case WINS is of no relevance. Samba-3 supports thi </p><p> For those networks on which NetBIOS has been disabled (ie: WINS is NOT required) the use of DNS is necessary for host name resolution. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886141"></a>What is Browsing?</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884229"></a>What is Browsing?</h2></div></div><div></div></div><p> To most people browsing means that they can see the MS Windows and Samba servers in the Network Neighborhood, and when the computer icon for a particular server is clicked, it opens up and shows the shares and printers available on the target server. @@ -2343,12 +2346,12 @@ called <tt class="filename">nmbd</tt>. The configuration parameters involved in For Samba, the WINS Server and WINS Support are mutually exclusive options. Those marked with an '*' are the only options that commonly MAY need to be modified. Even if not one of these parameters is set <tt class="filename">nmbd</tt> will still do it's job. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886251"></a>Discussion</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888334"></a>Discussion</h2></div></div><div></div></div><p> Firstly, all MS Windows networking uses SMB (Server Message Block) based messaging. SMB messaging may be implemented with or without NetBIOS. MS Windows 200x supports NetBIOS over TCP/IP for backwards compatibility. Microsoft is intent on phasing out NetBIOS support. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886267"></a>NetBIOS over TCP/IP</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888350"></a>NetBIOS over TCP/IP</h3></div></div><div></div></div><p> Samba implements NetBIOS, as does MS Windows NT / 200x / XP, by encapsulating it over TCP/IP. MS Windows products can do likewise. NetBIOS based networking uses broadcast messaging to affect browse list management. When running NetBIOS over TCP/IP, this uses UDP based messaging. @@ -2392,7 +2395,7 @@ Lastly, take note that browse lists are a collection of unreliable broadcast messages that are repeated at intervals of not more than 15 minutes. This means that it will take time to establish a browse list and it can take up to 45 minutes to stabilise, particularly across network segments. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886430"></a>TCP/IP - without NetBIOS</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888512"></a>TCP/IP - without NetBIOS</h3></div></div><div></div></div><p> All TCP/IP using systems use various forms of host name resolution. The primary methods for TCP/IP hostname resolutions involves either a static file (<tt class="filename">/etc/hosts </tt>) or DNS (the Domain Name System). DNS is the technology that makes @@ -2428,7 +2431,7 @@ consequently network services will be severely impaired. The use of Dynamic DNS is highly recommended with Active Directory, in which case the use of BIND9 is preferred for it's ability to adequately support the SRV (service) records that are needed for Active Directory. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886562"></a>DNS and Active Directory</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883481"></a>DNS and Active Directory</h3></div></div><div></div></div><p> Occasionally we hear from Unix network administrators who want to use a Unix based Dynamic DNS server in place of the Microsoft DNS server. While this might be desirable to some, the MS Windows 200x DNS server is auto-configured to work with Active Directory. It is possible @@ -2450,7 +2453,7 @@ The following are some of the default service records that Active Directory requ </p></li><li><p>_ldap._tcp.<span class="emphasis"><em>Site</em></span>.gc.ms-dcs.<span class="emphasis"><em>DomainTree</em></span></p><p> Used by MS Windows clients to locate site configuration dependent Global Catalog server. - </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886698"></a>How Browsing Functions</h2></div></div><div></div></div><p> + </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883615"></a>How Browsing Functions</h2></div></div><div></div></div><p> MS Windows machines register their NetBIOS names (ie: the machine name for each service type in operation) on start up. The exact method by which this name registration @@ -2505,7 +2508,7 @@ words, for cross subnet browsing to function correctly it is essential that a name to address resolution mechanism be provided. This mechanism could be via DNS, <tt class="filename">/etc/hosts</tt>, and so on. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886824"></a>Setting up WORKGROUP Browsing</h3></div></div><div></div></div><p> +</p><div xmlns:ns14="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883741"></a>Setting up WORKGROUP Browsing</h3></div></div><div></div></div><p> To set up cross subnet browsing on a network containing machines in up to be in a WORKGROUP, not an NT Domain you need to set up one Samba server to be the Domain Master Browser (note that this is *NOT* @@ -2523,22 +2526,22 @@ Samba server, and there must only be one domain master browser per workgroup name. To set up a Samba server as a domain master browser, set the following option in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns14:p> +</ns14:p><pre class="programlisting"> domain master = yes -</pre><p> -</p><p> +</pre><ns14:p> +</ns14:p><p> The domain master browser should also preferrably be the local master browser for its own subnet. In order to achieve this set the following options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns14:p> +</ns14:p><pre class="programlisting"> domain master = yes local master = yes preferred master = yes os level = 65 -</pre><p> -</p><p> +</pre><ns14:p> +</ns14:p><p> The domain master browser may be the same machine as the WINS server, if you require. </p><p> @@ -2550,14 +2553,14 @@ tend to get rebooted more often, so it's not such a good idea to use these). To make a Samba server a local master browser set the following options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns14:p> +</ns14:p><pre class="programlisting"> domain master = no local master = yes preferred master = yes os level = 65 -</pre><p> -</p><p> +</pre><ns14:p> +</ns14:p><p> Do not do this for more than one Samba server on each subnet, or they will war with each other over which is to be the local master browser. @@ -2572,14 +2575,14 @@ be the local master browser then you can disable Samba from becoming a local master browser by setting the following options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns14:p> +</ns14:p><pre class="programlisting"> domain master = no local master = no preferred master = no os level = 0 -</pre><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887045"></a>Setting up DOMAIN Browsing</h3></div></div><div></div></div><p> +</pre><ns14:p> +</ns14:p></div><div xmlns:ns15="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885127"></a>Setting up DOMAIN Browsing</h3></div></div><div></div></div><p> If you are adding Samba servers to a Windows NT Domain then you must not set up a Samba server as a domain master browser. By default, a Windows NT Primary Domain Controller for a domain @@ -2593,14 +2596,14 @@ you may set up Samba servers as local master browsers as described. To make a Samba server a local master browser set the following options in the <b class="command">[global]</b> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns15:p> +</ns15:p><pre class="programlisting"> domain master = no local master = yes preferred master = yes os level = 65 -</pre><p> -</p><p> +</pre><ns15:p> +</ns15:p><p> If you wish to have a Samba server fight the election with machines on the same subnet you may set the <i class="parameter"><tt>os level</tt></i> parameter to lower levels. By doing this you can tune the order of machines that @@ -2615,14 +2618,14 @@ you can disable Samba from taking part in browser elections and ever becoming a local master browser by setting following options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file : -</p><p> -</p><pre class="programlisting"> +</p><ns15:p> +</ns15:p><pre class="programlisting"> domain master = no local master = no preferred master = no os level = 0 -</pre><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="browse-force-master"></a>Forcing Samba to be the master</h3></div></div><div></div></div><p> +</pre><ns15:p> +</ns15:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="browse-force-master"></a>Forcing Samba to be the master</h3></div></div><div></div></div><p> Who becomes the <i class="parameter"><tt>master browser</tt></i> is determined by an election process using broadcasts. Each election packet contains a number of parameters which determine what precedence (bias) a host should have in the @@ -2659,7 +2662,7 @@ attempt to become the domain master browser every 5 minutes. They will find that another Samba server is already the domain master browser and will fail. This provides automatic redundancy, should the current domain master browser fail. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887315"></a>Making Samba the domain master</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885392"></a>Making Samba the domain master</h3></div></div><div></div></div><p> The domain master is responsible for collating the browse lists of multiple subnets so that browsing can occur between subnets. You can make Samba act as the domain master by setting <i class="parameter"><tt>domain master = yes</tt></i> @@ -2701,30 +2704,30 @@ If, however, both Samba and your clients are using a WINS server, then: resolve the NetBIOS name of that host. as long as that host has registered its NetBIOS name with the same WINS server, the user will be able to see that host. - </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887471"></a>Note about broadcast addresses</h3></div></div><div></div></div><p> + </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885548"></a>Note about broadcast addresses</h3></div></div><div></div></div><p> If your network uses a "0" based broadcast address (for example if it ends in a 0) then you will strike problems. Windows for Workgroups does not seem to support a 0's broadcast and you will probably find that browsing and name lookups won't work. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887488"></a>Multiple interfaces</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885566"></a>Multiple interfaces</h3></div></div><div></div></div><p> Samba now supports machines with multiple network interfaces. If you have multiple interfaces then you will need to use the <b class="command">interfaces</b> option in <tt class="filename">smb.conf</tt> to configure them. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887517"></a>Use of the Remote Announce parameter</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns16="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889067"></a>Use of the Remote Announce parameter</h3></div></div><div></div></div><ns16:p> The <i class="parameter"><tt>remote announce</tt></i> parameter of <tt class="filename">smb.conf</tt> can be used to forcibly ensure that all the NetBIOS names on a network get announced to a remote network. The syntax of the <i class="parameter"><tt>remote announce</tt></i> parameter is: -</p><pre class="programlisting"> +</ns16:p><pre class="programlisting"> remote announce = a.b.c.d [e.f.g.h] ... -</pre><p> +</pre><ns16:p> <span class="emphasis"><em>or</em></span> -</p><pre class="programlisting"> +</ns16:p><pre class="programlisting"> remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ... -</pre><p> +</pre><ns16:p> where: -</p><div class="variablelist"><dl><dt><span class="term"><i class="replaceable"><tt>a.b.c.d</tt></i> and +</ns16:p><div class="variablelist"><dl><dt><span class="term"><i class="replaceable"><tt>a.b.c.d</tt></i> and <i class="replaceable"><tt>e.f.g.h</tt></i></span></dt><dd><p>is either the LMB (Local Master Browser) IP address or the broadcast address of the remote network. ie: the LMB is at 192.168.1.10, or the address @@ -2740,23 +2743,23 @@ workgroup name of the remote network then our NetBIOS machine names will end up looking like they belong to that workgroup, this may cause name resolution problems and should be avoided. -</p></dd></dl></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887626"></a>Use of the Remote Browse Sync parameter</h3></div></div><div></div></div><p> +</p></dd></dl></div><ns16:p> +</ns16:p></div><div xmlns:ns17="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889176"></a>Use of the Remote Browse Sync parameter</h3></div></div><div></div></div><p> The <i class="parameter"><tt>remote browse sync</tt></i> parameter of <tt class="filename">smb.conf</tt> is used to announce to another LMB that it must synchronise its NetBIOS name list with our Samba LMB. It works ONLY if the Samba server that has this option is simultaneously the LMB on its network segment. -</p><p> +</p><ns17:p> The syntax of the <i class="parameter"><tt>remote browse sync</tt></i> parameter is: -</p><pre class="programlisting"> +</ns17:p><pre class="programlisting"> remote browse sync = <i class="replaceable"><tt>a.b.c.d</tt></i> -</pre><p> +</pre><ns17:p> where <i class="replaceable"><tt>a.b.c.d</tt></i> is either the IP address of the remote LMB or else is the network broadcast address of the remote segment. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887687"></a>WINS - The Windows Internetworking Name Server</h2></div></div><div></div></div><p> +</ns17:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889237"></a>WINS - The Windows Internetworking Name Server</h2></div></div><div></div></div><p> Use of WINS (either Samba WINS <span class="emphasis"><em>or</em></span> MS Windows NT Server WINS) is highly recommended. Every NetBIOS machine registers its name together with a name_type value for each of several types of service it has available. @@ -2807,16 +2810,16 @@ Never use both <i class="parameter"><tt>wins support = yes</tt></i> together with <i class="parameter"><tt>wins server = a.b.c.d</tt></i> particularly not using it's own IP address. Specifying both will cause <span class="application">nmbd</span> to refuse to start! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887846"></a>Setting up a WINS server</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns18="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889395"></a>Setting up a WINS server</h3></div></div><div></div></div><p> Either a Samba machine or a Windows NT Server machine may be set up as a WINS server. To set a Samba machine to be a WINS server you must add the following option to the <tt class="filename">smb.conf</tt> file on the selected machine : in the <i class="parameter"><tt>[globals]</tt></i> section add the line -</p><p> -</p><pre class="programlisting"> +</p><ns18:p> +</ns18:p><pre class="programlisting"> wins support = yes -</pre><p> -</p><p> +</pre><ns18:p> +</ns18:p><p> Versions of Samba prior to 1.9.17 had this parameter default to yes. If you have any older versions of Samba on your network it is strongly suggested you upgrade to a recent version, or at the very @@ -2848,11 +2851,11 @@ the <span class="guilabel">Control Panel->Network->Protocols->TCP->W in Windows 95 or Windows NT. To tell a Samba server the IP address of the WINS server add the following line to the <i class="parameter"><tt>[global]</tt></i> section of all <tt class="filename">smb.conf</tt> files : -</p><p> -</p><pre class="programlisting"> +</p><ns18:p> +</ns18:p><pre class="programlisting"> wins server = <name or IP address> -</pre><p> -</p><p> +</pre><ns18:p> +</ns18:p><p> where <name or IP address> is either the DNS name of the WINS server machine or its IP address. </p><p> @@ -2867,45 +2870,45 @@ The first details setting up cross subnet browsing on a network containing Windows 95, Samba and Windows NT machines that are not configured as part of a Windows NT Domain. The second details setting up cross subnet browsing on networks that contain NT Domains. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888045"></a>WINS Replication</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889590"></a>WINS Replication</h3></div></div><div></div></div><p> Samba-3 permits WINS replication through the use of the <tt class="filename">wrepld</tt> utility. This tool is not currently capable of being used as it is still in active development. As soon as this tool becomes moderately functional we will prepare man pages and enhance this section of the documentation to provide usage and technical details. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888070"></a>Static WINS Entries</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns19="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889615"></a>Static WINS Entries</h3></div></div><div></div></div><p> Adding static entries to your Samba-3 WINS server is actually fairly easy. All you have to do is add a line to <tt class="filename">wins.dat</tt>, typically located in <tt class="filename">/usr/local/samba/var/locks</tt>. -</p><p> +</p><ns19:p> Entries in <tt class="filename">wins.dat</tt> take the form of -</p><pre class="programlisting"> +</ns19:p><pre class="programlisting"> "NAME#TYPE" TTL ADDRESS+ FLAGS -</pre><p> +</pre><ns19:p> where NAME is the NetBIOS name, TYPE is the NetBIOS type, TTL is the time-to-live as an absolute time in seconds, ADDRESS+ is one or more addresses corresponding to the registration and FLAGS are the NetBIOS flags for the registration. -</p><p> +</ns19:p><ns19:p> A typical dynamic entry looks like: -</p><pre class="programlisting"> +</ns19:p><pre class="programlisting"> "MADMAN#03" 1055298378 192.168.1.2 66R -</pre><p> +</pre><ns19:p> To make it static, all that has to be done is set the TTL to 0: -</p><pre class="programlisting"> +</ns19:p><pre class="programlisting"> "MADMAN#03" 0 192.168.1.2 66R -</pre><p> -</p><p> +</pre><ns19:p> +</ns19:p><p> Though this method works with early Samba-3 versions, there's a possibility that it may change in future versions if WINS replication is added. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888154"></a>Helpful Hints</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889699"></a>Helpful Hints</h2></div></div><div></div></div><p> The following hints should be carefully considered as they are stumbling points for many new network administrators. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888167"></a>Windows Networking Protocols</h3></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889712"></a>Windows Networking Protocols</h3></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> Do NOT use more than one (1) protocol on MS Windows machines </p></div><p> A very common cause of browsing problems results from installing more than @@ -2935,32 +2938,32 @@ differently from MS Windows NT4. Generally, where a server does NOT support the newer or extended protocol, these will fall back to the NT4 protocols. </em></span></p><p> The safest rule of all to follow it this - USE ONLY ONE PROTOCOL! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888234"></a>Name Resolution Order</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns20="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889779"></a>Name Resolution Order</h3></div></div><div></div></div><p> Resolution of NetBIOS names to IP addresses can take place using a number of methods. The only ones that can provide NetBIOS name_type information are: </p><table class="simplelist" border="0" summary="Simple list"><tr><td>WINS: the best tool!</td></tr><tr><td>LMHOSTS: is static and hard to maintain.</td></tr><tr><td>Broadcast: uses UDP and can not resolve names across remote segments.</td></tr></table><p> Alternative means of name resolution includes: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td><tt class="filename">/etc/hosts</tt>: is static, hard to maintain, and lacks name_type info</td></tr><tr><td>DNS: is a good choice but lacks essential name_type info.</td></tr></table><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td><tt class="filename">/etc/hosts</tt>: is static, hard to maintain, and lacks name_type info</td></tr><tr><td>DNS: is a good choice but lacks essential name_type info.</td></tr></table><ns20:p> Many sites want to restrict DNS lookups and want to avoid broadcast name resolution traffic. The <i class="parameter"><tt>name resolve order</tt></i> parameter is of great help here. The syntax of the <i class="parameter"><tt>name resolve order</tt></i> parameter is: -</p><pre class="programlisting"> +</ns20:p><pre class="programlisting"> name resolve order = wins lmhosts bcast host -</pre><p> +</pre><ns20:p> <span class="emphasis"><em>or</em></span> -</p><pre class="programlisting"> +</ns20:p><pre class="programlisting"> name resolve order = wins lmhosts (eliminates bcast and host) -</pre><p> +</pre><ns20:p> The default is: -</p><pre class="programlisting"> +</ns20:p><pre class="programlisting"> name resolve order = host lmhost wins bcast -</pre><p> +</pre><ns20:p> where "host" refers the the native methods used by the Unix system to implement the gethostbyname() function call. This is normally controlled by <tt class="filename">/etc/host.conf</tt>, <tt class="filename">/etc/nsswitch.conf</tt> and <tt class="filename">/etc/resolv.conf</tt>. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888372"></a>Technical Overview of browsing</h2></div></div><div></div></div><p> +</ns20:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889917"></a>Technical Overview of browsing</h2></div></div><div></div></div><p> SMB networking provides a mechanism by which clients can access a list of machines in a network, a so-called <i class="parameter"><tt>browse list</tt></i>. This list contains machines that are ready to offer file and/or print services @@ -2980,7 +2983,7 @@ Where NetBIOS over TCP/IP is enabled use of a WINS server is highly recommended to aid the resolution of NetBIOS (SMB) names to IP addresses. WINS allows remote segment clients to obtain NetBIOS name_type information that can NOT be provided by any other means of name resolution. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888419"></a>Browsing support in Samba</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889964"></a>Browsing support in Samba</h3></div></div><div></div></div><p> Samba facilitates browsing. The browsing is supported by <span class="application">nmbd</span> and is also controlled by options in the <tt class="filename">smb.conf</tt> file. Samba can act as a local browse master for a workgroup and the ability @@ -3015,7 +3018,7 @@ browsing on another subnet. It is recommended that this option is only used for 'unusual' purposes: announcements over the internet, for example. See <i class="parameter"><tt>remote announce</tt></i> in the <tt class="filename">smb.conf</tt> man page. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888526"></a>Problem resolution</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890071"></a>Problem resolution</h3></div></div><div></div></div><p> If something doesn't work then hopefully the log.nmbd file will help you track down the problem. Try a debug level of 2 or 3 for finding problems. Also note that the current browse list usually gets stored @@ -3040,7 +3043,7 @@ server resources. The other big problem people have is that their broadcast address, netmask or IP address is wrong (specified with the "interfaces" option in <tt class="filename">smb.conf</tt>) -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888605"></a>Browsing across subnets</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890150"></a>Browsing across subnets</h3></div></div><div></div></div><p> Since the release of Samba 1.9.17(alpha1), Samba has supported the replication of browse lists across subnet boundaries. This section describes how to set this feature up in different settings. @@ -3061,16 +3064,16 @@ be they Windows 95, Windows NT, or Samba servers must have the IP address of a WINS server given to them by a DHCP server, or by manual configuration (for Win95 and WinNT, this is in the TCP/IP Properties, under Network settings) for Samba this is in the <tt class="filename">smb.conf</tt> file. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888654"></a>How does cross subnet browsing work ?</h4></div></div><div></div></div><p> +</p><div xmlns:ns21="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2890199"></a>How does cross subnet browsing work ?</h4></div></div><div></div></div><p> Cross subnet browsing is a complicated dance, containing multiple moving parts. It has taken Microsoft several years to get the code that achieves this correct, and Samba lags behind in some areas. Samba is capable of cross subnet browsing when configured correctly. </p><p> Consider a network set up as follows : -</p><p> +</p><ns21:p> -</p><pre class="programlisting"> +</ns21:p><pre class="programlisting"> (DMB) N1_A N1_B N1_C N1_D N1_E | | | | | @@ -3085,8 +3088,8 @@ Consider a network set up as follows : | | | | | | | | N2_A N2_B N2_C N2_D N3_A N3_B N3_C N3_D (WINS) -</pre><p> -</p><p> +</pre><ns21:p> +</ns21:p><p> Consisting of 3 subnets (1, 2, 3) connected by two routers (R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume @@ -3127,9 +3130,9 @@ called 'non-authoritative'. At this point the browse lists look as follows (these are the machines you would see in your network neighborhood if you looked in it on a particular network right now). -</p><p> -</p><div class="table"><a name="id2888772"></a><p class="title"><b>Table10.1.Browse subnet example 1</b></p><table summary="Browse subnet example 1" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><p> -</p><p> +</p><ns21:p> +</ns21:p><div class="table"><a name="id2890314"></a><p class="title"><b>Table10.1.Browse subnet example 1</b></p><table summary="Browse subnet example 1" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><ns21:p> +</ns21:p><p> Note that at this point all the subnets are separate, no machine is seen across any of the subnets. </p><p> @@ -3149,11 +3152,11 @@ names it knows about. Once the domain master browser receives the MasterAnnouncement packet it schedules a synchronization request to the sender of that packet. After both synchronizations are done the browse lists look like : -</p><p> -</p><div class="table"><a name="id2888886"></a><p class="title"><b>Table10.2.Browse subnet example 2</b></p><table summary="Browse subnet example 2" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><p> +</p><ns21:p> +</ns21:p><div class="table"><a name="id2890424"></a><p class="title"><b>Table10.2.Browse subnet example 2</b></p><table summary="Browse subnet example 2" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><ns21:p> Servers with a (*) after them are non-authoritative names. -</p><p> +</ns21:p><p> At this point users looking in their network neighborhood on subnets 1 or 2 will see all the servers on both, users on subnet 3 will still only see the servers on their own subnet. @@ -3164,11 +3167,11 @@ synchronizes browse lists with the domain master browser (N1_A) it gets both the server entries on subnet 1, and those on subnet 2. After N3_D has synchronized with N1_C and vica-versa the browse lists look like. -</p><p> -</p><div class="table"><a name="id2888985"></a><p class="title"><b>Table10.3.Browse subnet example 3</b></p><table summary="Browse subnet example 3" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><p> +</p><ns21:p> +</ns21:p><div class="table"><a name="id2890523"></a><p class="title"><b>Table10.3.Browse subnet example 3</b></p><table summary="Browse subnet example 3" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><ns21:p> Servers with a (*) after them are non-authoritative names. -</p><p> +</ns21:p><p> At this point users looking in their network neighborhood on subnets 1 or 3 will see all the servers on all subnets, users on subnet 2 will still only see the servers on subnets 1 and 2, but not 3. @@ -3177,11 +3180,11 @@ Finally, the local master browser for subnet 2 (N2_B) will sync again with the domain master browser (N1_C) and will receive the missing server entries. Finally - and as a steady state (if no machines are removed or shut off) the browse lists will look like : -</p><p> -</p><div class="table"><a name="id2889086"></a><p class="title"><b>Table10.4.Browse subnet example 4</b></p><table summary="Browse subnet example 4" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><p> +</p><ns21:p> +</ns21:p><div class="table"><a name="id2890624"></a><p class="title"><b>Table10.4.Browse subnet example 4</b></p><table summary="Browse subnet example 4" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><ns21:p> Servers with a (*) after them are non-authoritative names. -</p><p> +</ns21:p><p> Synchronizations between the domain master browser and local master browsers will continue to occur, but this should be a steady state situation. @@ -3199,11 +3202,11 @@ If either router R1 or R2 fails the following will occur: be able to access servers on its local subnet, by using subnet-isolated broadcast NetBIOS name resolution. The effects are similar to that of losing access to a DNS server. - </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889225"></a>Common Errors</h2></div></div><div></div></div><p> + </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890765"></a>Common Errors</h2></div></div><div></div></div><p> Many questions are asked on the mailing lists regarding browsing. The majority of browsing problems originate out of incorrect configuration of NetBIOS name resolution. Some are of particular note. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889240"></a>How can one flush the Samba NetBIOS name cache without restarting Samba?</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890780"></a>How can one flush the Samba NetBIOS name cache without restarting Samba?</h3></div></div><div></div></div><p> Samba's nmbd process controls all browse list handling. Under normal circumstances it is safe to restart nmbd. This will effectively flush the Samba NetBIOS name cache and cause it to be rebuilt. Note that this does NOT make certain that a rogue machine name will not re-appear @@ -3213,11 +3216,11 @@ want to clear a rogue machine from the list then every machine on the network wi shut down and restarted at after all machines are down. Failing a complete restart, the only other thing you can do is wait until the entry times out and is then flushed from the list. This may take a long time on some networks (months). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889269"></a>My client reports "This server is not configured to list shared resources"</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890809"></a>My client reports "This server is not configured to list shared resources"</h3></div></div><div></div></div><p> Your guest account is probably invalid for some reason. Samba uses the guest account for browsing in smbd. Check that your guest account is valid. -</p><p>See also <i class="parameter"><tt>guest account</tt></i> in the <tt class="filename">smb.conf</tt> man page.</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="passdb"></a>Chapter11.Account Information Databases</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Olivier (lem)</span> <span class="surname">Lemaire</span></h3><div class="affiliation"><span class="orgname">IDEALX<br></span><div class="address"><p><tt class="email"><<a href="mailto:olem@IDEALX.org">olem@IDEALX.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 24, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2892812">Features and Benefits</a></dt><dt><a href="#id2893140">Technical Information</a></dt><dd><dl><dt><a href="#id2893204">Important Notes About Security</a></dt><dt><a href="#id2893458">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2893513">Account Management Tools</a></dt><dd><dl><dt><a href="#id2893545">The smbpasswd Command</a></dt><dt><a href="#id2893811">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2893963">Password Backends</a></dt><dd><dl><dt><a href="#id2893999">Plain Text</a></dt><dt><a href="#id2894038">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2894145">tdbsam</a></dt><dt><a href="#id2894173">ldapsam</a></dt><dt><a href="#id2895689">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2896493">Common Errors</a></dt><dd><dl><dt><a href="#id2896501">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2896516">Users are being added to the wrong backend database</a></dt><dt><a href="#id2896576">auth methods does not work</a></dt></dl></dd></dl></div><p> +</p><p>See also <i class="parameter"><tt>guest account</tt></i> in the <tt class="filename">smb.conf</tt> man page.</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="passdb"></a>Chapter11.Account Information Databases</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Olivier (lem)</span> <span class="surname">Lemaire</span></h3><div class="affiliation"><span class="orgname">IDEALX<br></span><div class="address"><p><tt class="email"><<a href="mailto:olem@IDEALX.org">olem@IDEALX.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 24, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2894185">Features and Benefits</a></dt><dt><a href="#id2891076">Technical Information</a></dt><dd><dl><dt><a href="#id2891140">Important Notes About Security</a></dt><dt><a href="#id2891384">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2891439">Account Management Tools</a></dt><dd><dl><dt><a href="#id2891471">The smbpasswd Command</a></dt><dt><a href="#id2891736">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2891870">Password Backends</a></dt><dd><dl><dt><a href="#id2891906">Plain Text</a></dt><dt><a href="#id2891946">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2896387">tdbsam</a></dt><dt><a href="#id2896415">ldapsam</a></dt><dt><a href="#id2897903">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2898709">Common Errors</a></dt><dd><dl><dt><a href="#id2898716">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2898731">Users are being added to the wrong backend database</a></dt><dt><a href="#id2898791">auth methods does not work</a></dt></dl></dd></dl></div><p> Samba-3 implements a new capability to work concurrently with multiple account backends. The possible new combinations of password backends allows Samba-3 a degree of flexibility and scalability that previously could be achieved only with MS Windows Active Directory. @@ -3235,7 +3238,7 @@ deliver this functionality until a better method of recognising NT Group SIDs fr SIDs could be found. This feature may thus return during the life cycle for the Samba-3 series. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> Samba-3.0.0 does NOT support Non-Unix Account (NUA) operation. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892812"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894185"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba-3 provides for complete backwards compatibility with Samba-2.2.x functionality as follows: </p><div class="variablelist"><p class="title"><b>Backwards Compatibility Backends</b></p><dl><dt><span class="term">Plain Text:</span></dt><dd><p> @@ -3312,7 +3315,7 @@ Samba-3 introduces the following new password backend capabilities: </p></dd><dt><span class="term">nisplussam:</span></dt><dd><p> The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with Sun NIS+ servers. - </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893140"></a>Technical Information</h2></div></div><div></div></div><p> + </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891076"></a>Technical Information</h2></div></div><div></div></div><p> Old windows clients send plain text passwords over the wire. Samba can check these passwords by crypting them and comparing them to the hash stored in the unix user database. </p><p> @@ -3330,7 +3333,7 @@ Samba-3 introduces the following new password backend capabilities: information using a <i class="parameter"><tt>passdb backend</tt></i>. Commonly available backends are LDAP, plain text file, MySQL and nisplus. For more information, see the man page for <tt class="filename">smb.conf</tt> regarding the <i class="parameter"><tt>passdb backend</tt></i> parameter. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893204"></a>Important Notes About Security</h3></div></div><div></div></div><p> + </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891140"></a>Important Notes About Security</h3></div></div><div></div></div><p> The unix and SMB password encryption techniques seem similar on the surface. This similarity is, however, only skin deep. The unix scheme typically sends clear text passwords over the network when logging in. This is bad. The SMB encryption scheme @@ -3372,7 +3375,7 @@ Samba-3 introduces the following new password backend capabilities: (broken) only the cached (encrypted) password will be sent to the resource server to affect a auto-reconnect. If the resource server does not support encrypted passwords the auto-reconnect will fail. <span class="emphasis"><em>USE OF ENCRYPTED PASSWORDS IS STRONGLY ADVISED.</em></span> - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2893368"></a>Advantages of Encrypted Passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not passed across + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891293"></a>Advantages of Encrypted Passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not passed across the network. Someone using a network sniffer cannot just record passwords going to the SMB server.</p></li><li><p>Plain text passwords are not stored anywhere in memory or on disk.</p></li><li><p>WinNT doesn't like talking to a server @@ -3383,11 +3386,11 @@ Samba-3 introduces the following new password backend capabilities: only things you can do to stop this is to use SMB encryption. </p></li><li><p>Encrypted password support allows automatic share (resource) reconnects.</p></li><li><p>Encrypted passwords are essential for PDC/BDC - operation.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2893422"></a>Advantages of non-encrypted passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not kept + operation.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891347"></a>Advantages of non-encrypted passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not kept on disk, and are NOT cached in memory. </p></li><li><p>Uses same password file as other unix services such as login and ftp</p></li><li><p>Use of other services (such as telnet and ftp) which send plain text passwords over the net, so sending them for SMB - isn't such a big deal.</p></li></ul></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893458"></a>Mapping User Identifiers between MS Windows and Unix</h3></div></div><div></div></div><p> + isn't such a big deal.</p></li></ul></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891384"></a>Mapping User Identifiers between MS Windows and Unix</h3></div></div><div></div></div><p> Every operation in Unix/Linux requires a user identifier (UID), just as in MS Windows NT4 / 200x this requires a Security Identifier (SID). Samba provides two means for mapping an MS Windows user to a Unix/Linux UID. @@ -3402,13 +3405,13 @@ Samba-3 introduces the following new password backend capabilities: <span class="emphasis"><em>idmap uid, idmap gid</em></span> parameters in <tt class="filename">smb.conf</tt>. Please refer to the man page for information about these parameters. These parameters are essential when mapping users from a remote SAM server. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893513"></a>Account Management Tools</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891439"></a>Account Management Tools</h2></div></div><div></div></div><p> Samba-3 provides two (2) tools for management of User and machine accounts. These tools are called <b class="command">smbpasswd</b> and <b class="command">pdbedit</b>. A third tool is under development but is NOT expected to ship in time for Samba-3.0.0. The new tool will be a TCL/TK GUI tool that looks much like the MS Windows NT4 Domain User Manager - hopefully this will be announced in time for the Samba-3.0.1 release. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893545"></a>The <span class="emphasis"><em>smbpasswd</em></span> Command</h3></div></div><div></div></div><p> +</p><div xmlns:ns22="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891471"></a>The <span class="emphasis"><em>smbpasswd</em></span> Command</h3></div></div><div></div></div><p> The smbpasswd utility is a utility similar to the <b class="command">passwd</b> or <b class="command">yppasswd</b> programs. It maintains the two 32 byte password fields in the passdb backend. @@ -3424,18 +3427,18 @@ be announced in time for the Samba-3.0.1 release. <b class="command">smbpasswd</b> can be used to: </p><table class="simplelist" border="0" summary="Simple list"><tr><td><span class="emphasis"><em>add</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>delete</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>enable</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>disable</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>set to NULL</em></span> user passwords</td></tr><tr><td><span class="emphasis"><em>manage interdomain trust accounts</em></span></td></tr></table><p> To run smbpasswd as a normal user just type: - </p><p> - </p><pre class="screen"> + </p><ns22:p> + </ns22:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>smbpasswd</tt></b> <tt class="prompt">Old SMB password: </tt><b class="userinput"><tt><i class="replaceable"><tt>secret</tt></i></tt></b> - </pre><p> + </pre><ns22:p> For <i class="replaceable"><tt>secret</tt></i> type old value here - or hit return if there was no old password - </p><pre class="screen"> + </ns22:p><pre class="screen"> <tt class="prompt">New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b> <tt class="prompt">Repeat New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b> - </pre><p> - </p><p> + </pre><ns22:p> + </ns22:p><p> If the old value does not match the current value stored for that user, or the two new values do not match each other, then the password will not be changed. </p><p> @@ -3454,7 +3457,7 @@ be announced in time for the Samba-3.0.1 release. </p><p> For more details on using <b class="command">smbpasswd</b> refer to the man page (the definitive reference). - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893811"></a>The <span class="emphasis"><em>pdbedit</em></span> Command</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891736"></a>The <span class="emphasis"><em>pdbedit</em></span> Command</h3></div></div><div></div></div><p> <b class="command">pdbedit</b> is a tool that can be used only by root. It is used to manage the passdb backend. <b class="command">pdbedit</b> can be used to: </p><table class="simplelist" border="0" summary="Simple list"><tr><td>add, remove or modify user accounts</td></tr><tr><td>listing user accounts</td></tr><tr><td>migrate user accounts</td></tr></table><p> @@ -3490,27 +3493,27 @@ be announced in time for the Samba-3.0.1 release. Password last set: Sat, 14 Dec 2002 14:37:03 GMT Password can change: Sat, 14 Dec 2002 14:37:03 GMT Password must change: Mon, 18 Jan 2038 20:14:07 GMT - </pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893963"></a>Password Backends</h2></div></div><div></div></div><p> + </pre></div></div><div xmlns:ns23="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891870"></a>Password Backends</h2></div></div><div></div></div><p> Samba-3 offers the greatest flexibility in backend account database design of any SMB/CIFS server technology available today. The flexibility is immediately obvious as one begins to explore this capability. </p><p> It is possible to specify not only multiple different password backends, but even multiple backends of the same type. For example, to use two different tdbsam databases: -</p><p> -</p><pre class="programlisting"> +</p><ns23:p> +</ns23:p><pre class="programlisting"> [globals] passdb backend = tdbsam:/etc/samba/passdb.tdb, \ tdbsam:/etc/samba/old-passdb.tdb, guest -</pre><p> -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893999"></a>Plain Text</h3></div></div><div></div></div><p> +</pre><ns23:p> +</ns23:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891906"></a>Plain Text</h3></div></div><div></div></div><p> Older versions of Samba retrieved user information from the unix user database and eventually some other fields from the file <tt class="filename">/etc/samba/smbpasswd</tt> or <tt class="filename">/etc/smbpasswd</tt>. When password encryption is disabled, no SMB specific data is stored at all. Instead all operations are conducted via the way that the Samba host OS will access its <tt class="filename">/etc/passwd</tt> database. eg: On Linux systems that is done via PAM. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894038"></a>smbpasswd - Encrypted Password Database</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891946"></a>smbpasswd - Encrypted Password Database</h3></div></div><div></div></div><p> Traditionally, when configuring <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = yes</a> in Samba's <tt class="filename">smb.conf</tt> file, user account information such as username, LM/NT password hashes, password change times, and account @@ -3541,7 +3544,7 @@ backends of the same type. For example, to use two different tdbsam databases: Samba-3 provides an enhanced set of passdb backends that overcome the deficiencies of the smbpasswd plain text database. These are tdbsam, ldapsam, and xmlsam. Of these ldapsam will be of most interest to large corporate or enterprise sites. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894145"></a>tdbsam</h3></div></div><div></div></div><p>Samba can store user and machine account data in a "TDB" (Trivial Database). + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896387"></a>tdbsam</h3></div></div><div></div></div><p>Samba can store user and machine account data in a "TDB" (Trivial Database). Using this backend doesn't require any additional configuration. This backend is recommended for new installations that do not require LDAP. </p><p> @@ -3549,7 +3552,7 @@ backends of the same type. For example, to use two different tdbsam databases: that have 250 or more users. Additionally, tdbsam is not capable of scaling for use in sites that require PDB/BDC implementations that requires replication of the account database. Clearly, for reason of scalability, the use of ldapsam should be encouraged. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894173"></a>ldapsam</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896415"></a>ldapsam</h3></div></div><div></div></div><p> There are a few points to stress that the ldapsam does not provide. The LDAP support referred to in the this documentation does not include: </p><div class="itemizedlist"><ul type="disc"><li><p>A means of retrieving user account information from @@ -3577,16 +3580,16 @@ backends of the same type. For example, to use two different tdbsam databases: </p><div class="itemizedlist"><ul type="disc"><li><p>The <a href="http://www.unav.es/cti/ldap-smb/ldap-smb-3-howto.html" target="_top">Samba-PDC-LDAP-HOWTO</a> maintained by Ignacio Coupeau.</p></li><li><p>The NT migration scripts from <a href="http://samba.idealx.org/" target="_top">IDEALX</a> that are geared to manage users and group in such a Samba-LDAP Domain Controller configuration. - </p></li></ul></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2894325"></a>Supported LDAP Servers</h4></div></div><div></div></div><p> + </p></li></ul></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896564"></a>Supported LDAP Servers</h4></div></div><div></div></div><p> The LDAP ldapsam code has been developed and tested using the OpenLDAP 2.0 and 2.1 server and client libraries. The same code should work with Netscape's Directory Server and client SDK. However, there are bound to be compile errors and bugs. These should not be hard to fix. Please submit fixes via <a href="#bugreport" title="Chapter35.Reporting Bugs">Bug reporting facility</a>. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2894351"></a>Schema and Relationship to the RFC 2307 posixAccount</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896589"></a>Schema and Relationship to the RFC 2307 posixAccount</h4></div></div><div></div></div><p> Samba 3.0 includes the necessary schema file for OpenLDAP 2.0 in <tt class="filename">examples/LDAP/samba.schema</tt>. The sambaSamAccount objectclass is given here: - </p><p> -</p><pre class="programlisting"> + </p><ns23:p> +</ns23:p><pre class="programlisting"> objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY DESC 'Samba Auxiliary Account' MUST ( uid $ rid ) @@ -3594,8 +3597,8 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $ displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $ description $ userWorkstations $ primaryGroupID $ domain )) -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> The <tt class="filename">samba.schema</tt> file has been formatted for OpenLDAP 2.0/2.1. The OID's are owned by the Samba Team and as such is legal to be openly published. If you translate the schema to be used with Netscape DS, please @@ -3617,23 +3620,23 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY and functioning correctly. This division of information makes it possible to store all Samba account information in LDAP, but still maintain UNIX account information in NIS while the network is transitioning to a full LDAP infrastructure. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2894458"></a>OpenLDAP configuration</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896698"></a>OpenLDAP configuration</h4></div></div><div></div></div><p> To include support for the sambaSamAccount object in an OpenLDAP directory server, first copy the samba.schema file to slapd's configuration directory. The samba.schema file can be found in the directory <tt class="filename">examples/LDAP</tt> in the samba source distribution. - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>cp samba.schema /etc/openldap/schema/</tt></b> -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> Next, include the <tt class="filename">samba.schema</tt> file in <tt class="filename">slapd.conf</tt>. The sambaSamAccount object contains two attributes which depend upon other schema files. The 'uid' attribute is defined in <tt class="filename">cosine.schema</tt> and the 'displayName' attribute is defined in the <tt class="filename">inetorgperson.schema</tt> file. Both of these must be included before the <tt class="filename">samba.schema</tt> file. - </p><p> -</p><pre class="programlisting"> + </p><ns23:p> +</ns23:p><pre class="programlisting"> ## /etc/openldap/slapd.conf ## schema files (core.schema is required by default) @@ -3645,13 +3648,13 @@ include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/samba.schema include /etc/openldap/schema/nis.schema .... -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> It is recommended that you maintain some indices on some of the most useful attributes, like in the following example, to speed up searches made on sambaSamAccount objectclasses (and possibly posixAccount and posixGroup as well). - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> # Indices to maintain ## required by OpenLDAP index objectclass eq @@ -3673,25 +3676,25 @@ index sambaSID eq index sambaPrimaryGroupSID eq index sambaDomainName eq index default sub -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> Create the new index by executing: - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> ./sbin/slapindex -f slapd.conf -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> Remember to restart slapd after making these changes: - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>/etc/init.d/slapd restart</tt></b> -</pre><p> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2894646"></a>Initialise the LDAP database</h4></div></div><div></div></div><p> +</pre><ns23:p> +</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896886"></a>Initialise the LDAP database</h4></div></div><div></div></div><p> Before you can add accounts to the LDAP database you must create the account containers that they will be stored in. The following LDIF file should be modified to match your needs (ie: Your DNS entries, etc.). - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> # Organization for Samba Base dn: dc=plainjoe,dc=org objectclass: dcObject @@ -3719,26 +3722,26 @@ objectclass: top objectclass: organizationalRole objectclass: simpleSecurityObject userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> The userPassword shown above should be generated using <b class="command">slappasswd</b>. </p><p> The following command will then load the contents of the LDIF file into the LDAP database. - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>slapadd -v -l initldap.dif</tt></b> -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> Do not forget to secure your LDAP server with an adequate access control list, as well as an admin password. - </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> + </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns23:p> Before Samba can access the LDAP server you need to store the LDAP admin password into the Samba-3 <tt class="filename">secrets.tdb</tt> database by: - </p><pre class="screen"> + </ns23:p><pre class="screen"> <tt class="prompt">root# </tt> <b class="userinput"><tt>smbpasswd -w <i class="replaceable"><tt>secret</tt></i></tt></b> - </pre><p> - </p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2894774"></a>Configuring Samba</h4></div></div><div></div></div><p> + </pre><ns23:p> + </ns23:p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897015"></a>Configuring Samba</h4></div></div><div></div></div><p> The following parameters are available in smb.conf only if your version of samba was built with LDAP support. Samba automatically builds with LDAP support if the LDAP libraries are found. @@ -3746,8 +3749,8 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz These are described in the <tt class="filename">smb.conf</tt> man page and so will not be repeated here. However, a sample smb.conf file for use with an LDAP directory could appear as - </p><p> -</p><pre class="programlisting"> + </p><ns23:p> +</ns23:p><pre class="programlisting"> ## /usr/local/samba/lib/smb.conf [global] security = user @@ -3789,8 +3792,8 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz # generally the default ldap search filter is ok # ldap filter = "(&(uid=%u)(objectclass=sambaSamAccount))" -</pre><p> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2894972"></a>Accounts and Groups management</h4></div></div><div></div></div><p> +</pre><ns23:p> +</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897193"></a>Accounts and Groups management</h4></div></div><div></div></div><p> As users accounts are managed through the sambaSamAccount objectclass, you should modify your existing administration tools to deal with sambaSamAccount attributes. </p><p> @@ -3806,7 +3809,7 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz groups. This means that Samba makes use of the posixGroup objectclass. For now, there is no NT-like group system management (global and local groups). - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2895009"></a>Security and sambaSamAccount</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897230"></a>Security and sambaSamAccount</h4></div></div><div></div></div><p> There are two important points to remember when discussing the security of sambaSamAccount entries in the directory. </p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>Never</em></span> retrieve the lmPassword or @@ -3832,17 +3835,17 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz The second security precaution is to prevent non-administrative users from harvesting password hashes from the directory. This can be done using the following ACL in <tt class="filename">slapd.conf</tt>: - </p><p> -</p><pre class="programlisting"> + </p><ns23:p> +</ns23:p><pre class="programlisting"> ## allow the "ldap admin dn" access, but deny everyone else access to attrs=lmPassword,ntPassword by dn="cn=Samba Admin,ou=people,dc=plainjoe,dc=org" write by * none -</pre><p> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2895146"></a>LDAP special attributes for sambaSamAccounts</h4></div></div><div></div></div><p> +</pre><ns23:p> +</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897365"></a>LDAP special attributes for sambaSamAccounts</h4></div></div><div></div></div><p> The sambaSamAccount objectclass is composed of the following attributes: - </p><p> - </p><div class="table"><a name="id2895163"></a><p class="title"><b>Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)</b></p><table summary="Attributes in the sambaSamAccount objectclass (LDAP)" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left"><tt class="constant">lmPassword</tt></td><td align="left">the LANMAN password 16-byte hash stored as a character + </p><ns23:p> + </ns23:p><div class="table"><a name="id2897381"></a><p class="title"><b>Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)</b></p><table summary="Attributes in the sambaSamAccount objectclass (LDAP)" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left"><tt class="constant">lmPassword</tt></td><td align="left">the LANMAN password 16-byte hash stored as a character representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">ntPassword</tt></td><td align="left">the NT password hash 16-byte stored as a character representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">pwdLastSet</tt></td><td align="left">The integer time in seconds since 1970 when the <tt class="constant">lmPassword</tt> and <tt class="constant">ntPassword</tt> attributes were last set. @@ -3865,8 +3868,8 @@ access to attrs=lmPassword,ntPassword </td></tr><tr><td align="left"><tt class="constant">userWorkstation</tt></td><td align="left">character string value currently unused. </td></tr><tr><td align="left"><tt class="constant">rid</tt></td><td align="left">the integer representation of the user's relative identifier (RID).</td></tr><tr><td align="left"><tt class="constant">primaryGroupID</tt></td><td align="left">the relative identifier (RID) of the primary group - of the user.</td></tr><tr><td align="left"><tt class="constant">domain</tt></td><td align="left">domain the user is part of.</td></tr></tbody></table></div><p> - </p><p> + of the user.</td></tr><tr><td align="left"><tt class="constant">domain</tt></td><td align="left">domain the user is part of.</td></tr></tbody></table></div><ns23:p> + </ns23:p><p> The majority of these parameters are only used when Samba is acting as a PDC of a domain (refer to the <a href="#samba-pdc" title="Chapter5.Domain Control">Samba as a primary domain controller</a> chapter for details on how to configure Samba as a Primary Domain Controller). The following four attributes @@ -3882,10 +3885,10 @@ access to attrs=lmPassword,ntPassword of the <i class="parameter"><tt>logon home</tt></i> parameter is used in its place. Samba will only write the attribute value to the directory entry if the value is something other than the default (e.g. <tt class="filename">\\MOBY\becky</tt>). - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2895512"></a>Example LDIF Entries for a sambaSamAccount</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897728"></a>Example LDIF Entries for a sambaSamAccount</h4></div></div><div></div></div><p> The following is a working LDIF with the inclusion of the posixAccount objectclass: - </p><p> - </p><pre class="programlisting"> + </p><ns23:p> + </ns23:p><pre class="programlisting"> dn: uid=guest2, ou=people,dc=plainjoe,dc=org ntPassword: 878D8014606CDA29677A44EFA1353FC7 pwdMustChange: 2147483647 @@ -3900,12 +3903,12 @@ access to attrs=lmPassword,ntPassword logoffTime: 2147483647 rid: 19006 pwdCanChange: 0 - </pre><p> - </p><p> + </pre><ns23:p> + </ns23:p><p> The following is an LDIF entry for using both the sambaSamAccount and posixAccount objectclasses: - </p><p> - </p><pre class="programlisting"> + </p><ns23:p> + </ns23:p><pre class="programlisting"> dn: uid=gcarter, ou=people,dc=plainjoe,dc=org logonTime: 0 displayName: Gerald Carter @@ -3928,53 +3931,53 @@ access to attrs=lmPassword,ntPassword pwdCanChange: 0 pwdMustChange: 2147483647 ntPassword: 878D8014606CDA29677A44EFA1353FC7 -</pre><p> - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2895574"></a>Password synchronisation</h4></div></div><div></div></div><p> +</pre><ns23:p> + </ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897790"></a>Password synchronisation</h4></div></div><div></div></div><p> Since version 3.0 samba can update the non-samba (LDAP) password stored with an account. When using pam_ldap, this allows changing both unix and windows passwords at once. </p><p>The <i class="parameter"><tt>ldap passwd sync</tt></i> options can have the following values:</p><div class="variablelist"><dl><dt><span class="term">yes</span></dt><dd><p>When the user changes his password, update <tt class="constant">ntPassword</tt>, <tt class="constant">lmPassword</tt> and the <tt class="constant">password</tt> fields.</p></dd><dt><span class="term">no</span></dt><dd><p>Only update <tt class="constant">ntPassword</tt> and <tt class="constant">lmPassword</tt>.</p></dd><dt><span class="term">only</span></dt><dd><p>Only update the LDAP password and let the LDAP server worry about the other fields. This option is only available when the LDAP server supports LDAP_EXOP_X_MODIFY_PASSWD. </p></dd></dl></div><p>More information can be found in the <a href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">smb.conf</a> manpage. - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895689"></a>MySQL</h3></div></div><div></div></div><p> + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897903"></a>MySQL</h3></div></div><div></div></div><p> Every so often someone will come along with a great new idea. Storing of user accounts in an SQL backend is one of them. Those who want to do this are in the best position to know what the specific benefits are to them. This may sound like a cop-out, but in truth we can not attempt to document every nitty little detail why certain things of marginal utility to the bulk of Samba users might make sense to the rest. In any case, the following instructions should help the determined SQL user to implement a working system. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2895709"></a>Creating the database</h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897924"></a>Creating the database</h4></div></div><div></div></div><ns23:p> You either can set up your own table and specify the field names to pdb_mysql (see below for the column names) or use the default table. The file <tt class="filename">examples/pdb/mysql/mysql.dump</tt> contains the correct queries to create the required tables. Use the command : - </p><pre class="screen"><tt class="prompt">$ </tt><b class="userinput"><tt>mysql -u<i class="replaceable"><tt>username</tt></i> -h<i class="replaceable"><tt>hostname</tt></i> -p<i class="replaceable"><tt>password</tt></i> \ -<i class="replaceable"><tt>databasename</tt></i> < <tt class="filename">/path/to/samba/examples/pdb/mysql/mysql.dump</tt></tt></b></pre><p> - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2895772"></a>Configuring</h4></div></div><div></div></div><p>This plugin lacks some good documentation, but here is some short info:</p><p>Add a the following to the <i class="parameter"><tt>passdb backend</tt></i> variable in your <tt class="filename">smb.conf</tt>: - </p><pre class="programlisting"> + </ns23:p><pre class="screen"><tt class="prompt">$ </tt><b class="userinput"><tt>mysql -u<i class="replaceable"><tt>username</tt></i> -h<i class="replaceable"><tt>hostname</tt></i> -p<i class="replaceable"><tt>password</tt></i> \ +<i class="replaceable"><tt>databasename</tt></i> < <tt class="filename">/path/to/samba/examples/pdb/mysql/mysql.dump</tt></tt></b></pre><ns23:p> + </ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897988"></a>Configuring</h4></div></div><div></div></div><p>This plugin lacks some good documentation, but here is some short info:</p><ns23:p>Add a the following to the <i class="parameter"><tt>passdb backend</tt></i> variable in your <tt class="filename">smb.conf</tt>: + </ns23:p><pre class="programlisting"> passdb backend = [other-plugins] mysql:identifier [other-plugins] - </pre><p> - </p><p>The identifier can be any string you like, as long as it doesn't collide with + </pre><ns23:p> + </ns23:p><p>The identifier can be any string you like, as long as it doesn't collide with the identifiers of other plugins or other instances of pdb_mysql. If you specify multiple pdb_mysql.so entries in <i class="parameter"><tt>passdb backend</tt></i>, you also need to use different identifiers! </p><p> Additional options can be given through the <tt class="filename">smb.conf</tt> file in the <i class="parameter"><tt>[global]</tt></i> section. - </p><p> - </p><div class="table"><a name="id2895850"></a><p class="title"><b>Table11.2.Basic smb.conf options for MySQL passdb backend</b></p><table summary="Basic smb.conf options for MySQL passdb backend" border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:mysql host</td><td align="left">host name, defaults to 'localhost'</td></tr><tr><td align="left">identifier:mysql password</td><td align="left"></td></tr><tr><td align="left">identifier:mysql user</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql database</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql port</td><td align="left">defaults to 3306</td></tr><tr><td align="left">identifier:table</td><td align="left">Name of the table containing users</td></tr></tbody></table></div><p> - </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> + </p><ns23:p> + </ns23:p><div class="table"><a name="id2898064"></a><p class="title"><b>Table11.2.Basic smb.conf options for MySQL passdb backend</b></p><table summary="Basic smb.conf options for MySQL passdb backend" border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:mysql host</td><td align="left">host name, defaults to 'localhost'</td></tr><tr><td align="left">identifier:mysql password</td><td align="left"></td></tr><tr><td align="left">identifier:mysql user</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql database</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql port</td><td align="left">defaults to 3306</td></tr><tr><td align="left">identifier:table</td><td align="left">Name of the table containing users</td></tr></tbody></table></div><ns23:p> + </ns23:p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> Since the password for the MySQL user is stored in the <tt class="filename">smb.conf</tt> file, you should make the the <tt class="filename">smb.conf</tt> file readable only to the user that runs Samba This is considered a security bug and will be fixed soon. - </p></div><p>Names of the columns in this table (I've added column types those columns should have first):</p><p> - </p><div class="table"><a name="id2895975"></a><p class="title"><b>Table11.3.MySQL field names for MySQL passdb backend</b></p><table summary="MySQL field names for MySQL passdb backend" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Type</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:logon time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:logoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:kickoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass last set time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass can change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass must change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:username column</td><td align="left">varchar(255)</td><td align="left">unix username</td></tr><tr><td align="left">identifier:domain column</td><td align="left">varchar(255)</td><td align="left">NT domain user is part of</td></tr><tr><td align="left">identifier:nt username column</td><td align="left">varchar(255)</td><td align="left">NT username</td></tr><tr><td align="left">identifier:fullname column</td><td align="left">varchar(255)</td><td align="left">Full name of user</td></tr><tr><td align="left">identifier:home dir column</td><td align="left">varchar(255)</td><td align="left">Unix homedir path</td></tr><tr><td align="left">identifier:dir drive column</td><td align="left">varchar(2)</td><td align="left">Directory drive path (eg: 'H:')</td></tr><tr><td align="left">identifier:logon script column</td><td align="left">varchar(255)</td><td align="left">Batch file to run on client side when logging on</td></tr><tr><td align="left">identifier:profile path column</td><td align="left">varchar(255)</td><td align="left">Path of profile</td></tr><tr><td align="left">identifier:acct desc column</td><td align="left">varchar(255)</td><td align="left">Some ASCII NT user data</td></tr><tr><td align="left">identifier:workstations column</td><td align="left">varchar(255)</td><td align="left">Workstations user can logon to (or NULL for all)</td></tr><tr><td align="left">identifier:unknown string column</td><td align="left">varchar(255)</td><td align="left">unknown string</td></tr><tr><td align="left">identifier:munged dial column</td><td align="left">varchar(255)</td><td align="left">?</td></tr><tr><td align="left">identifier:user sid column</td><td align="left">varchar(255)</td><td align="left">NT user SID</td></tr><tr><td align="left">identifier:group sid column</td><td align="left">varchar(255)</td><td align="left">NT group ID</td></tr><tr><td align="left">identifier:lanman pass column</td><td align="left">varchar(255)</td><td align="left">encrypted lanman password</td></tr><tr><td align="left">identifier:nt pass column</td><td align="left">varchar(255)</td><td align="left">encrypted nt passwd</td></tr><tr><td align="left">identifier:plain pass column</td><td align="left">varchar(255)</td><td align="left">plaintext password</td></tr><tr><td align="left">identifier:acct control column</td><td align="left">int(9)</td><td align="left">nt user data</td></tr><tr><td align="left">identifier:unknown 3 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:logon divs column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:hours len column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:unknown 5 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:unknown 6 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr></tbody></table></div><p> - </p><p> + </p></div><p>Names of the columns in this table (I've added column types those columns should have first):</p><ns23:p> + </ns23:p><div class="table"><a name="id2898189"></a><p class="title"><b>Table11.3.MySQL field names for MySQL passdb backend</b></p><table summary="MySQL field names for MySQL passdb backend" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Type</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:logon time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:logoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:kickoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass last set time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass can change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass must change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:username column</td><td align="left">varchar(255)</td><td align="left">unix username</td></tr><tr><td align="left">identifier:domain column</td><td align="left">varchar(255)</td><td align="left">NT domain user is part of</td></tr><tr><td align="left">identifier:nt username column</td><td align="left">varchar(255)</td><td align="left">NT username</td></tr><tr><td align="left">identifier:fullname column</td><td align="left">varchar(255)</td><td align="left">Full name of user</td></tr><tr><td align="left">identifier:home dir column</td><td align="left">varchar(255)</td><td align="left">Unix homedir path</td></tr><tr><td align="left">identifier:dir drive column</td><td align="left">varchar(2)</td><td align="left">Directory drive path (eg: 'H:')</td></tr><tr><td align="left">identifier:logon script column</td><td align="left">varchar(255)</td><td align="left">Batch file to run on client side when logging on</td></tr><tr><td align="left">identifier:profile path column</td><td align="left">varchar(255)</td><td align="left">Path of profile</td></tr><tr><td align="left">identifier:acct desc column</td><td align="left">varchar(255)</td><td align="left">Some ASCII NT user data</td></tr><tr><td align="left">identifier:workstations column</td><td align="left">varchar(255)</td><td align="left">Workstations user can logon to (or NULL for all)</td></tr><tr><td align="left">identifier:unknown string column</td><td align="left">varchar(255)</td><td align="left">unknown string</td></tr><tr><td align="left">identifier:munged dial column</td><td align="left">varchar(255)</td><td align="left">?</td></tr><tr><td align="left">identifier:user sid column</td><td align="left">varchar(255)</td><td align="left">NT user SID</td></tr><tr><td align="left">identifier:group sid column</td><td align="left">varchar(255)</td><td align="left">NT group ID</td></tr><tr><td align="left">identifier:lanman pass column</td><td align="left">varchar(255)</td><td align="left">encrypted lanman password</td></tr><tr><td align="left">identifier:nt pass column</td><td align="left">varchar(255)</td><td align="left">encrypted nt passwd</td></tr><tr><td align="left">identifier:plain pass column</td><td align="left">varchar(255)</td><td align="left">plaintext password</td></tr><tr><td align="left">identifier:acct control column</td><td align="left">int(9)</td><td align="left">nt user data</td></tr><tr><td align="left">identifier:unknown 3 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:logon divs column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:hours len column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:unknown 5 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:unknown 6 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr></tbody></table></div><ns23:p> + </ns23:p><p> Eventually, you can put a colon (:) after the name of each column, which should specify the column to update when updating the table. You can also specify nothing behind the colon - then the data from the field will not be updated. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896354"></a>Using plaintext passwords or encrypted password</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2898570"></a>Using plaintext passwords or encrypted password</h4></div></div><div></div></div><p> I strongly discourage the use of plaintext passwords, however, you can use them: </p><p> If you would like to use plaintext passwords, set @@ -3984,7 +3987,7 @@ access to attrs=lmPassword,ntPassword </p><p> If you use encrypted passwords, set the 'identifier:plain pass column' to 'NULL' (without the quotes). This is the default. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896385"></a>Getting non-column data from the table</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2898601"></a>Getting non-column data from the table</h4></div></div><div></div></div><p> It is possible to have not all data in the database and making some 'constant'. </p><p> For example, you can set 'identifier:fullname column' to : @@ -3999,36 +4002,36 @@ access to attrs=lmPassword,ntPassword </p><p> To import data, use: <tt class="prompt">$ </tt> <b class="userinput"><tt>pdbedit -i xml:filename</tt></b> - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896493"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896501"></a>Users can not logon - Users not in Samba SAM</h3></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2898709"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898716"></a>Users can not logon - Users not in Samba SAM</h3></div></div><div></div></div><p> People forget to put their users in their backend and then complain Samba won't authorize them. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896516"></a>Users are being added to the wrong backend database</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns24="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898731"></a>Users are being added to the wrong backend database</h3></div></div><div></div></div><p> A few complaints have been received from users that just moved to Samba-3. The following <tt class="filename">smb.conf</tt> file entries were causing problems, new accounts were being added to the old smbpasswd file, not to the tdbsam passdb.tdb file: - </p><p> - </p><pre class="programlisting"> + </p><ns24:p> + </ns24:p><pre class="programlisting"> [globals] ... passdb backend = smbpasswd, tdbsam, guest ... - </pre><p> - </p><p> + </pre><ns24:p> + </ns24:p><p> Samba will add new accounts to the first entry in the <span class="emphasis"><em>passdb backend</em></span> parameter entry. If you want to update to the tdbsam, then change the entry to: - </p><p> - </p><pre class="programlisting"> + </p><ns24:p> + </ns24:p><pre class="programlisting"> [globals] ... passdb backend = tdbsam, smbpasswd, guest ... - </pre><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896576"></a>auth methods does not work</h3></div></div><div></div></div><p> + </pre><ns24:p> + </ns24:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898791"></a>auth methods does not work</h3></div></div><div></div></div><p> If you explicitly set an 'auth methods' parameter, guest must be specified as the first entry on the line. Eg: <i class="parameter"><tt>auth methods = guest sam</tt></i>. </p><p> This is the exact opposite of the requirement for the <i class="parameter"><tt>passdb backed</tt></i> option, where it must be the <span class="emphasis"><em>LAST</em></span> parameter on the line. - </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="groupmapping"></a>Chapter12.Mapping MS Windows and Unix Groups</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Franois</span> <span class="surname">Micouleau</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2903953">Features and Benefits</a></dt><dt><a href="#id2904055">Discussion</a></dt><dd><dl><dt><a href="#id2904246">Example Configuration</a></dt></dl></dd><dt><a href="#id2904310">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2904325">Sample smb.conf add group script</a></dt><dt><a href="#id2904393">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2904485">Common Errors</a></dt><dd><dl><dt><a href="#id2904501">Adding Groups Fails</a></dt><dt><a href="#id2904562">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></div><p> + </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="groupmapping"></a>Chapter12.Mapping MS Windows and Unix Groups</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Franois</span> <span class="surname">Micouleau</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2898963">Features and Benefits</a></dt><dt><a href="#id2899064">Discussion</a></dt><dd><dl><dt><a href="#id2899252">Example Configuration</a></dt></dl></dd><dt><a href="#id2899318">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2899332">Sample smb.conf add group script</a></dt><dt><a href="#id2899399">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2899473">Common Errors</a></dt><dd><dl><dt><a href="#id2899489">Adding Groups Fails</a></dt><dt><a href="#id2899549">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></div><p> Starting with Samba-3, new group mapping functionality is available to create associations between Windows group SIDs and UNIX groups. The <i class="parameter"><tt>groupmap</tt></i> subcommand included with the <span class="application">net</span> tool can be used to manage these associations. @@ -4038,7 +4041,7 @@ access to attrs=lmPassword,ntPassword be specified in <tt class="filename">smb.conf</tt>. This parameter was used to give the listed users membership in the <tt class="constant">Domain Admins</tt> Windows group which gave local admin rights on their workstations (in default configurations). - </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903953"></a>Features and Benefits</h2></div></div><div></div></div><p> + </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2898963"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba allows the administrator to create MS Windows NT4 / 200x group accounts and to arbitrarily associate them with Unix/Linux group accounts. </p><p> @@ -4061,7 +4064,7 @@ access to attrs=lmPassword,ntPassword Another work-around is to manually create a Unix/Linux group, then manually create the MS Windows NT4 / 200x group on the Samba server and then use the <b class="command">net groupmap</b> tool to connect the two to each other. - </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2904055"></a>Discussion</h2></div></div><div></div></div><p> + </p></div><div xmlns:ns27="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899064"></a>Discussion</h2></div></div><div></div></div><p> When installing <span class="application">MS Windows NT4 / 200x</span> on a computer, the installation program creates default users and groups, notably the <tt class="constant">Administrators</tt> group, and gives that group privileges necessary privileges to perform essential system tasks. @@ -4080,19 +4083,19 @@ access to attrs=lmPassword,ntPassword The following steps describe how to make Samba PDC users members of the 'Domain Admins' group? </p><div class="orderedlist"><ol type="1"><li><p> create a unix group (usually in <tt class="filename">/etc/group</tt>), let's call it domadm - </p></li><li><p>add to this group the users that must be Administrators. For example + </p></li><li xmlns:ns25=""><p>add to this group the users that must be Administrators. For example if you want joe, john and mary, your entry in <tt class="filename">/etc/group</tt> will look like: </p><pre class="programlisting"> domadm:x:502:joe,john,mary - </pre><p> - </p></li><li><p> + </pre><ns25:p> + </ns25:p></li><li xmlns:ns26=""><p> Map this domadm group to the "Domain Admins" group by running the command: - </p><p> - </p><pre class="screen"> + </p><ns26:p> + </ns26:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add ntgroup="Domain Admins" unixgroup=domadm</tt></b> - </pre><p> - </p><p> + </pre><ns26:p> + </ns26:p><p> The quotes around "Domain Admins" are necessary due to the space in the group name. Also make sure to leave no whitespace surrounding the equal character (=). </p></li></ol></div><p> @@ -4102,36 +4105,36 @@ access to attrs=lmPassword,ntPassword making any UNIX group a Windows domain group. For example, if you wanted to include a UNIX group (e.g. acct) in a ACL on a local file or printer on a domain member machine, you would flag that group as a domain group by running the following on the Samba PDC: - </p><p> - </p><pre class="screen"> + </p><ns27:p> + </ns27:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add rid=1000 ntgroup="Accounting" unixgroup=acct</tt></b> - </pre><p> - </p><p> + </pre><ns27:p> + </ns27:p><p> Be aware that the RID parameter is a unsigned 32 bit integer that should normally start at 1000. However, this rid must not overlap with any RID assigned to a user. Verifying this is done differently depending on on the passdb backend you are using. Future versions of the tools may perform the verification automatically, but for now the burden is on you. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904246"></a>Example Configuration</h3></div></div><div></div></div><p> + </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899252"></a>Example Configuration</h3></div></div><div></div></div><p> You can list the various groups in the mapping database by executing <b class="command">net groupmap list</b>. Here is an example: - </p><p> - </p><pre class="screen"> + </p><ns27:p> + </ns27:p><pre class="screen"> <tt class="prompt">root# </tt> <b class="userinput"><tt>net groupmap list</tt></b> System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -> sysadmin Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -> domadmin Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -> domuser Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -> domguest - </pre><p> - </p><p> + </pre><ns27:p> + </ns27:p><p> For complete details on <b class="command">net groupmap</b>, refer to the net(8) man page. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2904310"></a>Configuration Scripts</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899318"></a>Configuration Scripts</h2></div></div><div></div></div><p> Everyone needs tools. Some of us like to create our own, others prefer to use canned tools (ie: prepared by someone else for general use). - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904325"></a>Sample <tt class="filename">smb.conf</tt> add group script</h3></div></div><div></div></div><p> + </p><div xmlns:ns28="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899332"></a>Sample <tt class="filename">smb.conf</tt> add group script</h3></div></div><div></div></div><p> A script to great complying group names for use by the Samba group interfaces: - </p><p> -</p><div class="example"><a name="id2904348"></a><p class="title"><b>Example12.1.smbgrpadd.sh</b></p><pre class="programlisting"> + </p><ns28:p> +</ns28:p><div class="example"><a name="id2899354"></a><p class="title"><b>Example12.1.smbgrpadd.sh</b></p><pre class="programlisting"> #!/bin/bash @@ -4147,17 +4150,17 @@ cat /etc/group.bak | sed s/smbtmpgrp00/$1/g > /etc/group # Now return the GID as would normally happen. echo $thegid exit 0 -</pre></div><p> -</p><p> +</pre></div><ns28:p> +</ns28:p><ns28:p> The <tt class="filename">smb.conf</tt> entry for the above script would look like: - </p><pre class="programlisting"> + </ns28:p><pre class="programlisting"> add group script = /path_to_tool/smbgrpadd.sh %g - </pre><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904393"></a>Script to configure Group Mapping</h3></div></div><div></div></div><p> + </pre><ns28:p> + </ns28:p></div><div xmlns:ns29="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899399"></a>Script to configure Group Mapping</h3></div></div><div></div></div><p> In our example we have created a Unix/Linux group called <i class="parameter"><tt>ntadmin</tt></i>. Our script will create the additional groups <i class="parameter"><tt>Engineers, Marketoids, Gnomes</tt></i>: - </p><p> -</p><pre class="programlisting"> + </p><ns29:p> +</ns29:p><pre class="programlisting"> #!/bin/bash net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmin @@ -4180,16 +4183,16 @@ net groupmap modify ntgroup="Power Users" unixgroup=sys #net groupmap add ntgroup="Engineers" unixgroup=Engineers type=d #net groupmap add ntgroup="Marketoids" unixgroup=Marketoids type=d #net groupmap add ntgroup="Gnomes" unixgroup=Gnomes type=d -</pre><p> -</p><p> +</pre><ns29:p> +</ns29:p><p> Of course it is expected that the administrator will modify this to suit local needs. For information regarding the use of the <b class="command">net groupmap</b> tool please refer to the man page. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2904485"></a>Common Errors</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899473"></a>Common Errors</h2></div></div><div></div></div><p> At this time there are many little surprises for the unwary administrator. In a real sense it is imperative that every step of automated control scripts must be carefully tested manually before putting them into active service. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904501"></a>Adding Groups Fails</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899489"></a>Adding Groups Fails</h3></div></div><div></div></div><p> This is a common problem when the <b class="command">groupadd</b> is called directly by the Samba interface script for the <i class="parameter"><tt>add group script</tt></i> in the <tt class="filename">smb.conf</tt> file. @@ -4203,11 +4206,11 @@ manually before putting them into active service. third option is to manually create a Unix/Linux group account that can substitute for the MS Windows group name, then use the procedure listed above to map that group to the MS Windows group. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904562"></a>Adding MS Windows Groups to MS Windows Groups Fails</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899549"></a>Adding MS Windows Groups to MS Windows Groups Fails</h3></div></div><div></div></div><p> Samba-3 does NOT support nested groups from the MS Windows control environment. - </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AccessControls"></a>Chapter13.File, Directory and Share Access Controls</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 10, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2902775">Features and Benefits</a></dt><dt><a href="#id2902812">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902830">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2903087">Managing Directories</a></dt><dt><a href="#id2903183">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2903398">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2904578">User and Group Based Controls</a></dt><dt><a href="#id2904850">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2905095">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905311">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905383">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905682">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905690">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905728">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905807">Viewing file ownership</a></dt><dt><a href="#id2905929">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906157">Modifying file or directory permissions</a></dt><dt><a href="#id2906309">Interaction with the standard Samba create mask - parameters</a></dt><dt><a href="#id2906639">Interaction with the standard Samba file attribute - mapping</a></dt></dl></dd><dt><a href="#id2906714">Common Errors</a></dt><dd><dl><dt><a href="#id2906729">Users can not write to a public share</a></dt><dt><a href="#id2907109">I have set force user and Samba still makes root the owner of all the files + </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AccessControls"></a>Chapter13.File, Directory and Share Access Controls</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 10, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2902735">Features and Benefits</a></dt><dt><a href="#id2902861">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902879">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2899794">Managing Directories</a></dt><dt><a href="#id2899890">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2900296">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2900324">User and Group Based Controls</a></dt><dt><a href="#id2900596">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2900842">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905426">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905498">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905797">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905805">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905843">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905922">Viewing file ownership</a></dt><dt><a href="#id2906044">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906272">Modifying file or directory permissions</a></dt><dt><a href="#id2906424">Interaction with the standard Samba create mask + parameters</a></dt><dt><a href="#id2906754">Interaction with the standard Samba file attribute + mapping</a></dt></dl></dd><dt><a href="#id2906829">Common Errors</a></dt><dd><dl><dt><a href="#id2906843">Users can not write to a public share</a></dt><dt><a href="#id2907222">I have set force user and Samba still makes root the owner of all the files I touch!</a></dt></dl></dd></dl></div><p> Advanced MS Windows users are frequently perplexed when file, directory and share manipulation of resources shared via Samba do not behave in the manner they might expect. MS Windows network @@ -4239,7 +4242,7 @@ that are quite different. It was never the intent to make Unix/Linux like MS Win the purpose was an is to provide a sufficient level of exchange of data between the two environments. What is available today extends well beyond early plans and expectations, yet the gap continues to shrink. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902775"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902735"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba offers a lot of flexibility in file system access management. These are the key access control facilities present in Samba today: </p><div class="itemizedlist"><p class="title"><b>Samba Access Control Facilities</b></p><ul type="disc"><li><p> @@ -4279,12 +4282,12 @@ shrink. this also. Sadly, few Linux platforms ship today with native ACLs and Extended Attributes enabled. This chapter has pertinent information for users of platforms that support them. - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902812"></a>File System Access Controls</h2></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902861"></a>File System Access Controls</h2></div></div><div></div></div><p> Perhaps the most important recognition to be made is the simple fact that MS Windows NT4 / 200x / XP implement a totally divergent file system technology from what is provided in the Unix operating system environment. Firstly we should consider what the most significant differences are, then we shall look at how Samba helps to bridge the differences. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902830"></a>MS Windows NTFS Comparison with Unix File Systems</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902879"></a>MS Windows NTFS Comparison with Unix File Systems</h3></div></div><div></div></div><p> Samba operates on top of the Unix file system. This means it is subject to Unix file system conventions and permissions. It also means that if the MS Windows networking environment requires file system behaviour that differs from unix file system behaviour then somehow Samba is responsible for emulating @@ -4348,19 +4351,19 @@ at how Samba helps to bridge the differences. There are many other subtle differences that may cause the MS Windows administrator some temporary discomfort in the process of becoming familiar with Unix/Linux. These are best left for a text that is dedicated to the purpose of Unix/Linux training/education. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903087"></a>Managing Directories</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns30="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899794"></a>Managing Directories</h3></div></div><div></div></div><ns30:p> There are three basic operations for managing directories, <b class="command">create, delete, rename</b>. - </p><div class="table"><a name="id2903107"></a><p class="title"><b>Table13.1.Managing directories with unix and windows</b></p><table summary="Managing directories with unix and windows" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="center">Action</th><th align="center">MS Windows Command</th><th align="center">Unix Command</th></tr></thead><tbody><tr><td align="center">create</td><td align="center">md folder</td><td align="center">mkdir folder</td></tr><tr><td align="center">delete</td><td align="center">rd folder</td><td align="center">rmdir folder</td></tr><tr><td align="center">rename</td><td align="center">rename oldname newname</td><td align="center">mv oldname newname</td></tr></tbody></table></div><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903183"></a>File and Directory Access Control</h3></div></div><div></div></div><p> + </ns30:p><div class="table"><a name="id2899812"></a><p class="title"><b>Table13.1.Managing directories with unix and windows</b></p><table summary="Managing directories with unix and windows" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="center">Action</th><th align="center">MS Windows Command</th><th align="center">Unix Command</th></tr></thead><tbody><tr><td align="center">create</td><td align="center">md folder</td><td align="center">mkdir folder</td></tr><tr><td align="center">delete</td><td align="center">rd folder</td><td align="center">rmdir folder</td></tr><tr><td align="center">rename</td><td align="center">rename oldname newname</td><td align="center">mv oldname newname</td></tr></tbody></table></div><ns30:p> + </ns30:p></div><div xmlns:ns31="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899890"></a>File and Directory Access Control</h3></div></div><div></div></div><p> The network administrator is strongly advised to read foundational training manuals and reference materials regarding file and directory permissions maintenance. Much can be achieved with the basic Unix permissions without having to resort to more complex facilities like POSIX Access Control Lists (ACLs) or Extended Attributes (EAs). - </p><p> + </p><ns31:p> Unix/Linux file and directory access permissions involves setting three (3) primary sets of data and one (1) control set. A Unix file listing looks as follows:- - </p><pre class="screen"> + </ns31:p><pre class="screen"> <tt class="prompt">jht@frodo:~/stuff> </tt><b class="userinput"><tt>ls -la</tt></b> total 632 drwxr-xr-x 13 jht users 816 2003-05-12 22:56 . @@ -4383,13 +4386,13 @@ at how Samba helps to bridge the differences. -rw-rw-rw- 1 jht users 41105 2003-05-12 22:32 mydata06.lst -rwxrwxrwx 1 jht users 19312 2003-05-12 22:32 mydata07.lst <tt class="prompt">jht@frodo:~/stuff></tt> - </pre><p> - </p><p> + </pre><ns31:p> + </ns31:p><p> The columns above represent (from left to right): permissions, no blocks used, owner, group, size (bytes), access date, access time, file name. - </p><p> + </p><ns31:p> The permissions field is made up of: - </p><pre class="programlisting"> + </ns31:p><pre class="programlisting"> <i><span class="comment"> JRV: Put this into a diagram of some sort</span></i> [ type ] [ users ] [ group ] [ others ] [File, Directory Permissions] [ d | l ] [ r w x ] [ r w x ] [ r w x ] @@ -4405,17 +4408,17 @@ at how Samba helps to bridge the differences. | | |-----------------------------> Can Read, Read files | |-----------------------------------> Is a symbolic Link |---------------------------------------> Is a directory - </pre><p> - </p><p> + </pre><ns31:p> + </ns31:p><ns31:p> Any bit flag may be unset. An unset bit flag is the equivalent of 'Can NOT' and is represented as a '-' character. - </p><div class="example"><a name="id2903320"></a><p class="title"><b>Example13.1.Example File</b></p><pre class="programlisting"> + </ns31:p><div class="example"><a name="id2900217"></a><p class="title"><b>Example13.1.Example File</b></p><pre class="programlisting"> -rwxr-x--- Means: The owner (user) can read, write, execute the group can read and execute everyone else can NOT do anything with it - </pre></div><p> + </pre></div><ns31:p> - </p><p> + </ns31:p><p> Additional possibilities in the [type] field are: c = character device, b = block device, p = pipe device, s = Unix Domain Socket. </p><p> The letters `rwxXst' set permissions for the user, group and others as: read (r), write (w), execute (or access for directories) (x), @@ -4435,10 +4438,10 @@ at how Samba helps to bridge the differences. the (x) execute flags are not set files can not be listed (seen) in the directory by anyone. The group can read files in the directory but can NOT create new files. NOTE: If files in the directory are set to be readable and writable for the group, then group members will be able to write to (or delete) them. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903398"></a>Share Definition Access Controls</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2900296"></a>Share Definition Access Controls</h2></div></div><div></div></div><p> The following parameters in the <tt class="filename">smb.conf</tt> file sections that define a share control or affect access controls. Before using any of the following options please refer to the man page for <tt class="filename">smb.conf</tt>. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904578"></a>User and Group Based Controls</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900324"></a>User and Group Based Controls</h3></div></div><div></div></div><p> User and group based controls can prove very useful. In some situations it is distinctly desirable to affect all file system operations as if a single user is doing this, the use of the <i class="parameter"><tt>force user</tt></i> and <i class="parameter"><tt>force group</tt></i> behaviour will achieve this. In other situations it may be necessary to affect a @@ -4450,7 +4453,7 @@ Before using any of the following options please refer to the man page for <tt c controlling access. Remember, that when you leave the scene someone else will need to provide assistance and if that person finds too great a mess, or if they do not understand what you have done then there is risk of Samba being removed and an alternative solution being adopted. - </p><div class="table"><a name="id2904638"></a><p class="title"><b>Table13.2.User and Group Based Controls</b></p><table summary="User and Group Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>admin users</td><td><p> + </p><div class="table"><a name="id2900382"></a><p class="title"><b>Table13.2.User and Group Based Controls</b></p><table summary="User and Group Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>admin users</td><td><p> List of users who will be granted administrative privileges on the share. They will do all file operations as the super-user (root). Any user in this list will be able to do anything they like on the share, @@ -4477,12 +4480,12 @@ Before using any of the following options please refer to the man page for <tt c List of users that should be allowed to login to this service. </p></td></tr><tr><td>write list</td><td><p> List of users that are given read-write access to a service. - </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904850"></a>File and Directory Permissions Based Controls</h3></div></div><div></div></div><p> + </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900596"></a>File and Directory Permissions Based Controls</h3></div></div><div></div></div><p> The following file and directory permission based controls, if misused, can result in considerable difficulty to diagnose the cause of mis-configuration. Use them sparingly and carefully. By gradually introducing each one by one undesirable side-effects may be detected. In the event of a problem, always comment all of them out and then gradually re-introduce them in a controlled fashion. - </p><div class="table"><a name="id2904871"></a><p class="title"><b>Table13.3.File and Directory Permission Based Controls</b></p><table summary="File and Directory Permission Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>create mask</td><td><p> + </p><div class="table"><a name="id2900615"></a><p class="title"><b>Table13.3.File and Directory Permission Based Controls</b></p><table summary="File and Directory Permission Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>create mask</td><td><p> Refer to the <tt class="filename">smb.conf</tt> man page. </p></td></tr><tr><td>directory mask</td><td><p> The octal modes used when converting DOS modes to UNIX modes when creating UNIX directories. @@ -4505,10 +4508,10 @@ Before using any of the following options please refer to the man page for <tt c This parameter controls whether smbd will attempt to map UNIX permissions into Windows NT access control lists. </p></td></tr><tr><td>security mask</td><td><p> Controls UNIX permission bits modified when a Windows NT client is manipulating the UNIX permissions on a file. - </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905095"></a>Miscellaneous Controls</h3></div></div><div></div></div><p> + </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900842"></a>Miscellaneous Controls</h3></div></div><div></div></div><p> The following are documented because of the prevalence of administrators creating inadvertant barriers to file access by not understanding the full implications of <tt class="filename">smb.conf</tt> file settings. - </p><div class="table"><a name="id2905118"></a><p class="title"><b>Table13.4.Other Controls</b></p><table summary="Other Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>case sensitive, default case, short preserve case</td><td><p> + </p><div class="table"><a name="id2900863"></a><p class="title"><b>Table13.4.Other Controls</b></p><table summary="Other Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>case sensitive, default case, short preserve case</td><td><p> This means that all file name lookup will be done in a case sensitive manner. Files will be created with the precise filename Samba received from the MS Windows client. </p></td></tr><tr><td>csc policy</td><td><p> @@ -4529,7 +4532,7 @@ Before using any of the following options please refer to the man page for <tt c If this parameter is yes, then users of a service may not create or modify files in the service's directory. </p></td></tr><tr><td>veto files</td><td><p> List of files and directories that are neither visible nor accessible. - </p></td></tr></tbody></table></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905311"></a>Access Controls on Shares</h2></div></div><div></div></div><p> + </p></td></tr></tbody></table></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905426"></a>Access Controls on Shares</h2></div></div><div></div></div><p> This section deals with how to configure Samba per share access control restrictions. By default, Samba sets no restrictions on the share itself. Restrictions on the share itself can be set on MS Windows NT4/200x/XP shares. This can be a very effective way to limit who can @@ -4546,9 +4549,9 @@ Before using any of the following options please refer to the man page for <tt c for Samba's tdb files is under <tt class="filename">/usr/local/samba/var</tt>. If the <tt class="filename">tdbdump</tt> utility has been compiled and installed on your system, then you can examine the contents of this file by: <b class="userinput"><tt>tdbdump share_info.tdb</tt></b>. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905383"></a>Share Permissions Management</h3></div></div><div></div></div><p> + </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905498"></a>Share Permissions Management</h3></div></div><div></div></div><p> The best tool for the task is platform dependant. Choose the best tool for your environment. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2905397"></a>Windows NT4 Workstation/Server</h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2905511"></a>Windows NT4 Workstation/Server</h4></div></div><div></div></div><p> The tool you need to use to manage share permissions on a Samba server is the NT Server Manager. Server Manager is shipped with Windows NT4 Server products but not with Windows NT4 Workstation. You can obtain the NT Server Manager for MS Windows NT4 Workstation from Microsoft - see details below. @@ -4558,7 +4561,7 @@ Before using any of the following options please refer to the man page for <tt c </p></li><li><p> Now click on the share that you wish to manage, then click on the <span class="guilabel">Properties</span> tab, next click on the <span class="guilabel">Permissions</span> tab. Now you can add or change access control settings as you wish. - </p></li></ol></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2905479"></a>Windows 200x/XP</h4></div></div><div></div></div><p> + </p></li></ol></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2905594"></a>Windows 200x/XP</h4></div></div><div></div></div><p> On <span class="application">MS Windows NT4/200x/XP</span> system access control lists on the share itself are set using native tools, usually from filemanager. For example, in Windows 200x: right click on the shared folder, then select <span class="guimenuitem">Sharing</span>, then click on <span class="guilabel">Permissions</span>. The default @@ -4587,7 +4590,7 @@ Before using any of the following options please refer to the man page for <tt c then effectively no user will be able to access the share. This is a result of what is known as ACL precedence. ie: Everyone with <span class="emphasis"><em>no access</em></span> means that MaryK who is part of the group <tt class="constant">Everyone</tt> will have no access even if this user is given explicit full control access. - </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905682"></a>MS Windows Access Control Lists and Unix Interoperability</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905690"></a>Managing UNIX permissions Using NT Security Dialogs</h3></div></div><div></div></div><p>Windows NT clients can use their native security settings + </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905797"></a>MS Windows Access Control Lists and Unix Interoperability</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905805"></a>Managing UNIX permissions Using NT Security Dialogs</h3></div></div><div></div></div><p>Windows NT clients can use their native security settings dialog box to view and modify the underlying UNIX permissions.</p><p>Note that this ability is careful not to compromise the security of the UNIX host Samba is running on, and still obeys all the file permission rules that a Samba @@ -4598,7 +4601,7 @@ Before using any of the following options please refer to the man page for <tt c the identity of the Windows user as it is presented by Samba at the point of file access. This can best be determined from the Samba log files. - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905728"></a>Viewing File Security on a Samba Share</h3></div></div><div></div></div><p>From an NT4/2000/XP client, single-click with the right + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905843"></a>Viewing File Security on a Samba Share</h3></div></div><div></div></div><p>From an NT4/2000/XP client, single-click with the right mouse button on any file or directory in a Samba mounted drive letter or UNC path. When the menu pops-up, click on the <span class="guilabel">Properties</span> entry at the bottom of @@ -4614,7 +4617,7 @@ Before using any of the following options please refer to the man page for <tt c user is logged on as the NT Administrator. This dialog is non-functional with a Samba share at this time, as the only useful button, the <span class="guibutton">Add</span> button will not currently - allow a list of users to be seen.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905807"></a>Viewing file ownership</h3></div></div><div></div></div><p>Clicking on the <span class="guibutton">Ownership</span> button + allow a list of users to be seen.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905922"></a>Viewing file ownership</h3></div></div><div></div></div><p>Clicking on the <span class="guibutton">Ownership</span> button brings up a dialog box telling you who owns the given file. The owner name will be of the form :</p><p><b class="command">"SERVER\user (Long name)"</b></p><p>Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of the Samba server, <i class="replaceable"><tt>user</tt></i> is the user name of @@ -4637,7 +4640,7 @@ Before using any of the following options please refer to the man page for <tt c files on both a local NTFS filesystem or remote mounted NTFS or Samba drive. This is available as part of the <span class="application">Seclib </span> NT security library written by Jeremy Allison of - the Samba Team, available from the main Samba ftp site.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905929"></a>Viewing File or Directory Permissions</h3></div></div><div></div></div><p>The third button is the <span class="guibutton">Permissions</span> + the Samba Team, available from the main Samba ftp site.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906044"></a>Viewing File or Directory Permissions</h3></div></div><div></div></div><p>The third button is the <span class="guibutton">Permissions</span> button. Clicking on this brings up a dialog box that shows both the permissions and the UNIX owner of the file or directory. The owner is displayed in the form :</p><p><b class="command">"<i class="replaceable"><tt>SERVER</tt></i>\ @@ -4651,7 +4654,7 @@ Before using any of the following options please refer to the man page for <tt c be shown as the NT user <tt class="constant">"Everyone"</tt> and the permissions will be shown as NT "Full Control".</p><p>The permissions field is displayed differently for files and directories, so I'll describe the way file permissions - are displayed first.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906021"></a>File Permissions</h4></div></div><div></div></div><p>The standard UNIX user/group/world triplet and + are displayed first.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906135"></a>File Permissions</h4></div></div><div></div></div><p>The standard UNIX user/group/world triplet and the corresponding "read", "write", "execute" permissions triplets are mapped by Samba into a three element NT ACL with the 'r', 'w', and 'x' bits mapped into the corresponding @@ -4673,7 +4676,7 @@ Before using any of the following options please refer to the man page for <tt c no permissions as having the NT <b class="command">"O"</b> bit set. This was chosen of course to make it look like a zero, meaning zero permissions. More details on the decision behind this will - be given below.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906112"></a>Directory Permissions</h4></div></div><div></div></div><p>Directories on an NT NTFS file system have two + be given below.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906227"></a>Directory Permissions</h4></div></div><div></div></div><p>Directories on an NT NTFS file system have two different sets of permissions. The first set of permissions is the ACL set on the directory itself, this is usually displayed in the first set of parentheses in the normal <tt class="constant">"RW"</tt> @@ -4684,7 +4687,7 @@ Before using any of the following options please refer to the man page for <tt c inherited</tt> permissions that any file created within this directory would inherit.</p><p>Samba synthesises these inherited permissions for NT by returning as an NT ACL the UNIX permission mode that a new file - created by Samba on this share would receive.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906157"></a>Modifying file or directory permissions</h3></div></div><div></div></div><p>Modifying file and directory permissions is as simple + created by Samba on this share would receive.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906272"></a>Modifying file or directory permissions</h3></div></div><div></div></div><p>Modifying file and directory permissions is as simple as changing the displayed permissions in the dialog box, and clicking the <span class="guibutton">OK</span> button. However, there are limitations that a user needs to be aware of, and also interactions @@ -4718,14 +4721,14 @@ Before using any of the following options please refer to the man page for <tt c component and click the <span class="guibutton">Remove</span> button, or set the component to only have the special <tt class="constant">Take Ownership</tt> permission (displayed as <b class="command">"O" - </b>) highlighted.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906309"></a>Interaction with the standard Samba create mask - parameters</h3></div></div><div></div></div><p>There are four parameters + </b>) highlighted.</p></div><div xmlns:ns32="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906424"></a>Interaction with the standard Samba create mask + parameters</h3></div></div><div></div></div><ns32:p>There are four parameters to control interaction with the standard Samba create mask parameters. These are : - </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode</tt></i></td></tr></table><p> + </ns32:p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode</tt></i></td></tr></table><ns32:p> - </p><p>Once a user clicks <span class="guibutton">OK</span> to apply the + </ns32:p><p>Once a user clicks <span class="guibutton">OK</span> to apply the permissions Samba maps the given permissions into a user/group/world r/w/x triplet set, and then will check the changed permissions for a file against the bits set in the <a href="smb.conf.5.html#SECURITYMASK" target="_top"> @@ -4765,7 +4768,7 @@ Before using any of the following options please refer to the man page for <tt c in modifying the permission bits on their files and directories and doesn't force any particular bits to be set 'on', then set the following parameters in the <tt class="filename">smb.conf</tt> file in that share specific section : - </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode = 0</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode = 0</tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906639"></a>Interaction with the standard Samba file attribute + </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode = 0</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode = 0</tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906754"></a>Interaction with the standard Samba file attribute mapping</h3></div></div><div></div></div><p>Samba maps some of the DOS attribute bits (such as "read only") into the UNIX permissions of a file. This means there can be a conflict between the permission bits set via the security @@ -4782,10 +4785,10 @@ Before using any of the following options please refer to the man page for <tt c permissions and clicking <span class="guibutton">OK</span> to get back to the attributes dialog you should always hit <span class="guibutton">Cancel</span> rather than <span class="guibutton">OK</span> to ensure that your changes - are not overridden.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906714"></a>Common Errors</h2></div></div><div></div></div><p> + are not overridden.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906829"></a>Common Errors</h2></div></div><div></div></div><p> File, Directory and Share access problems are very common on the mailing list. The following are examples taken from the mailing list in recent times. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906729"></a>Users can not write to a public share</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906843"></a>Users can not write to a public share</h3></div></div><div></div></div><p> “<span class="quote"> We are facing some troubles with file / directory permissions. I can log on the domain as admin user(root), and there's a public share, on which everyone needs to have permission to create / modify files, but only @@ -4796,78 +4799,78 @@ are examples taken from the mailing list in recent times. There are many ways to solve this problem, here are a few hints: </p><div class="procedure"><p class="title"><b>Procedure13.3.Example Solution:</b></p><ol type="1"><li><p> Go to the top of the directory that is shared - </p></li><li><p> + </p></li><li xmlns:ns33=""><ns33:p> Set the ownership to what ever public owner and group you want - </p><pre class="programlisting"> + </ns33:p><pre class="programlisting"> find 'directory_name' -type d -exec chown user.group {}\; find 'directory_name' -type d -exec chmod 6775 'directory_name' find 'directory_name' -type f -exec chmod 0775 {} \; find 'directory_name' -type f -exec chown user.group {}\; - </pre><p> - </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> + </pre><ns33:p> + </ns33:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The above will set the 'sticky bit' on all directories. Read your Unix/Linux man page on what that does. It causes the OS to assign to all files created in the directories the ownership of the directory. - </p></div></li><li><p> + </p></div></li><li xmlns:ns34=""><ns34:p> Directory is: <i class="replaceable"><tt>/foodbar</tt></i> - </p><pre class="screen"> + </ns34:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>chown jack.engr /foodbar</tt></b> - </pre><p> - </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> - </p><p>This is the same as doing:</p><p> - </p><pre class="screen"> + </pre><ns34:p> + </ns34:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns34:p> + </ns34:p><p>This is the same as doing:</p><ns34:p> + </ns34:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>chown jack /foodbar</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>chgrp engr /foodbar</tt></b> - </pre><p> - </p></div></li><li><p>Now do: + </pre><ns34:p> + </ns34:p></div></li><li xmlns:ns35=""><ns35:p>Now do: - </p><pre class="screen"> + </ns35:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>chmod 6775 /foodbar</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>ls -al /foodbar/..</tt></b> - </pre><p> + </pre><ns35:p> - </p><p>You should see: - </p><pre class="screen"> + </ns35:p><ns35:p>You should see: + </ns35:p><pre class="screen"> drwsrwsr-x 2 jack engr 48 2003-02-04 09:55 foodbar - </pre><p> - </p></li><li><p>Now do: - </p><pre class="screen"> + </pre><ns35:p> + </ns35:p></li><li xmlns:ns36=""><ns36:p>Now do: + </ns36:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>su - jill</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>cd /foodbar</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>touch Afile</tt></b> <tt class="prompt">$ </tt><b class="userinput"><tt>ls -al</tt></b> - </pre><p> - </p><p> + </pre><ns36:p> + </ns36:p><ns36:p> You should see that the file <tt class="filename">Afile</tt> created by Jill will have ownership and permissions of Jack, as follows: - </p><pre class="screen"> + </ns36:p><pre class="screen"> -rw-r--r-- 1 jack engr 0 2003-02-04 09:57 Afile - </pre><p> - </p></li><li><p> + </pre><ns36:p> + </ns36:p></li><li xmlns:ns37=""><ns37:p> Now in your <tt class="filename">smb.conf</tt> for the share add: - </p><pre class="programlisting"> + </ns37:p><pre class="programlisting"> force create mode = 0775 force directory mode = 6775 - </pre><p> - </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> + </pre><ns37:p> + </ns37:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The above are only needed <span class="emphasis"><em>if</em></span> your users are <span class="emphasis"><em>not</em></span> members of the group you have used. ie: Within the OS do not have write permission on the directory. - </p></div><p> + </p></div><ns37:p> An alternative is to set in the <tt class="filename">smb.conf</tt> entry for the share: - </p><pre class="programlisting"> + </ns37:p><pre class="programlisting"> force user = jack force group = engr - </pre><p> - </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907109"></a>I have set force user and Samba still makes <span class="emphasis"><em>root</em></span> the owner of all the files + </pre><ns37:p> + </ns37:p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907222"></a>I have set force user and Samba still makes <span class="emphasis"><em>root</em></span> the owner of all the files I touch!</h3></div></div><div></div></div><p> When you have a user in 'admin users', Samba will always do file operations for this user as <span class="emphasis"><em>root</em></span>, even if <i class="parameter"><tt>force user</tt></i> has been set. - </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="locking"></a>Chapter14.File and Record Locking</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Eric</span> <span class="surname">Roseme</span></h3><div class="affiliation"><span class="orgname">HP Oplocks Usage Recommendations Whitepaper<br></span><div class="address"><p><tt class="email"><<a href="mailto:eric.roseme@hp.com">eric.roseme@hp.com</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2910721">Features and Benefits</a></dt><dt><a href="#id2910776">Discussion</a></dt><dd><dl><dt><a href="#id2910908">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2911554">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2911664">Example Configuration</a></dt></dl></dd><dt><a href="#id2911924">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2912154">Workstation Service Entries</a></dt><dt><a href="#id2912180">Server Service Entries</a></dt></dl></dd><dt><a href="#id2912260">Persistent Data Corruption</a></dt><dt><a href="#id2912291">Common Errors</a></dt><dd><dl><dt><a href="#id2912365">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2912394">Additional Reading</a></dt></dl></div><p> + </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="locking"></a>Chapter14.File and Record Locking</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Eric</span> <span class="surname">Roseme</span></h3><div class="affiliation"><span class="orgname">HP Oplocks Usage Recommendations Whitepaper<br></span><div class="address"><p><tt class="email"><<a href="mailto:eric.roseme@hp.com">eric.roseme@hp.com</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2909343">Features and Benefits</a></dt><dt><a href="#id2909398">Discussion</a></dt><dd><dl><dt><a href="#id2909529">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2907904">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2908013">Example Configuration</a></dt></dl></dd><dt><a href="#id2908272">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2910709">Workstation Service Entries</a></dt><dt><a href="#id2910736">Server Service Entries</a></dt></dl></dd><dt><a href="#id2910816">Persistent Data Corruption</a></dt><dt><a href="#id2910846">Common Errors</a></dt><dd><dl><dt><a href="#id2910919">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2910950">Additional Reading</a></dt></dl></div><p> One area which causes trouble for many network administrators is locking. The extent of the problem is readily evident from searches over the internet. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910721"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2909343"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba provides all the same locking semantics that MS Windows clients expect and that MS Windows NT4 / 200x servers provide also. </p><p> @@ -4889,13 +4892,13 @@ settings on the MS Windows client. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> Sometimes it is necessary to disable locking control settings BOTH on the Samba server as well as on each MS Windows client! -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910776"></a>Discussion</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2909398"></a>Discussion</h2></div></div><div></div></div><p> There are two types of locking which need to be performed by a SMB server. The first is <span class="emphasis"><em>record locking</em></span> which allows a client to lock a range of bytes in a open file. The second is the <span class="emphasis"><em>deny modes</em></span> that are specified when a file is open. </p><p> -Record locking semantics under Unix is very different from record locking under +Record locking semantics under Unix are very different from record locking under Windows. Versions of Samba before 2.2 have tried to use the native fcntl() unix system call to implement proper record locking between different Samba clients. This can not be fully correct due to several reasons. The simplest is the fact @@ -4917,7 +4920,7 @@ important to them. By default Samba only makes locking calls when explicitly ask to by a client, but if you set <i class="parameter"><tt>strict locking = yes</tt></i> then it will make lock checking calls on every read and write. </p><p> -You can also disable by range locking completely using <i class="parameter"><tt>locking = no</tt></i>. +You can also disable byte range locking completely using <i class="parameter"><tt>locking = no</tt></i>. This is useful for those shares that don't support locking or don't need it (such as cdroms). In this case Samba fakes the return codes of locking calls to tell clients that everything is OK. @@ -4928,7 +4931,7 @@ access should be allowed simultaneously with its open. A client may ask for <tt class="constant">DENY_NONE</tt>, <tt class="constant">DENY_READ</tt>, <tt class="constant">DENY_WRITE</tt> or <tt class="constant">DENY_ALL</tt>. There are also special compatibility modes called <tt class="constant">DENY_FCB</tt> and <tt class="constant">DENY_DOS</tt>. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910908"></a>Opportunistic Locking Overview</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909529"></a>Opportunistic Locking Overview</h3></div></div><div></div></div><p> Opportunistic locking (Oplocks) is invoked by the Windows file system (as opposed to an API) via registry entries (on the server AND client) for the purpose of enhancing network performance when accessing a file @@ -5051,7 +5054,7 @@ In mission critical high availability environments, careful attention should be given to opportunistic locking. Ideally, comprehensive testing should be done with all affected applications with oplocks enabled and disabled. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911199"></a>Exclusively Accessed Shares</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907563"></a>Exclusively Accessed Shares</h4></div></div><div></div></div><p> Opportunistic locking is most effective when it is confined to shares that are exclusively accessed by a single user, or by only one user at a time. Because the true value of opportunistic locking is the local @@ -5060,7 +5063,7 @@ mechanism will cause a delay. </p><p> Home directories are the most obvious examples of where the performance benefit of opportunistic locking can be safely realized. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911224"></a>Multiple-Accessed Shares or Files</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907588"></a>Multiple-Accessed Shares or Files</h4></div></div><div></div></div><p> As each additional user accesses a file in a share with opportunistic locking enabled, the potential for delays and resulting perceived poor performance increases. When multiple users are accessing a file on a @@ -5072,7 +5075,7 @@ of the caching user. As each additional client attempts to access a file with oplocks set, the potential performance improvement is negated and eventually results in a performance bottleneck. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911253"></a>Unix or NFS Client Accessed Files</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907617"></a>Unix or NFS Client Accessed Files</h4></div></div><div></div></div><p> Local Unix and NFS clients access files without a mandatory file locking mechanism. Thus, these client platforms are incapable of initiating an oplock break request from the server to a Windows client @@ -5082,7 +5085,7 @@ exposes the file to likely data corruption. </p><p> If files are shared between Windows clients, and either local Unix or NFS users, then turn opportunistic locking off. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911279"></a>Slow and/or Unreliable Networks</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907643"></a>Slow and/or Unreliable Networks</h4></div></div><div></div></div><p> The biggest potential performance improvement for opportunistic locking occurs when the client-side caching of reads and writes delivers the most differential over sending those reads and writes over the wire. @@ -5097,7 +5100,7 @@ the most advantageous scenario to utilize opportunistic locking. If the network is slow, unreliable, or a WAN, then do not configure opportunistic locking if there is any chance of multiple users regularly opening the same file. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911312"></a>Multi-User Databases</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907676"></a>Multi-User Databases</h4></div></div><div></div></div><p> Multi-user databases clearly pose a risk due to their very nature - they are typically heavily accessed by numerous users at random intervals. Placing a multi-user database on a share with opportunistic @@ -5105,7 +5108,7 @@ locking enabled will likely result in a locking management bottleneck on the Samba server. Whether the database application is developed in-house or a commercially available product, ensure that the share has opportunistic locking disabled. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911334"></a>PDM Data Shares</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907698"></a>PDM Data Shares</h4></div></div><div></div></div><p> Process Data Management (PDM) applications such as IMAN, Enovia, and Clearcase, are increasing in usage with Windows client platforms, and therefore SMB data stores. PDM applications manage multi-user @@ -5118,7 +5121,7 @@ application and PDM server to negotiate and maintain. It is appropriate to eliminate the client OS from any caching tasks, and the server from any oplock management, by disabling opportunistic locking on the share. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911375"></a>Beware of Force User</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907725"></a>Beware of Force User</h4></div></div><div></div></div><p> Samba includes an <tt class="filename">smb.conf</tt> parameter called <i class="parameter"><tt>force user</tt></i> that changes the user accessing a share from the incoming user to whatever user is defined by the smb.conf variable. If opportunistic locking is enabled @@ -5136,7 +5139,7 @@ Avoid the combination of the following: Slow or unreliable networks </p></li><li><p> Opportunistic Locking Enabled - </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911453"></a>Advanced Samba Opportunistic Locking Parameters</h4></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907802"></a>Advanced Samba Opportunistic Locking Parameters</h4></div></div><div></div></div><p> Samba provides opportunistic locking parameters that allow the administrator to adjust various properties of the oplock mechanism to account for timing and usage levels. These parameters provide good @@ -5150,7 +5153,7 @@ are required, then the better option is to simply turn oplocks off. The samba SWAT help text for both parameters reads "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." This is good advice. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911496"></a>Mission Critical High Availability</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907845"></a>Mission Critical High Availability</h4></div></div><div></div></div><p> In mission critical high availability environments, data integrity is often a priority. Complex and expensive configurations are implemented to ensure that if a client loses connectivity with a file server, a @@ -5180,7 +5183,7 @@ In mission critical high availability environments, careful attention should be given to opportunistic locking. Ideally, comprehensive testing should be done with all affected applications with oplocks enabled and disabled. -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911554"></a>Samba Opportunistic Locking Control</h2></div></div><div></div></div><p> +</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907904"></a>Samba Opportunistic Locking Control</h2></div></div><div></div></div><p> Opportunistic Locking is a unique Windows file locking feature. It is not really file locking, but is included in most discussions of Windows file locking, so is considered a defacto locking feature. @@ -5230,29 +5233,29 @@ of your client sending oplock breaks and will instead want to disable oplocks fo </p><p> Another factor to consider is the perceived performance of file access. If oplocks provide no measurable speed benefit on your network, it might not be worth the hassle of dealing with them. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911664"></a>Example Configuration</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908013"></a>Example Configuration</h3></div></div><div></div></div><p> In the following we examine two distinct aspects of Samba locking controls. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911677"></a>Disabling Oplocks</h4></div></div><div></div></div><p> +</p><div xmlns:ns38="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2908026"></a>Disabling Oplocks</h4></div></div><div></div></div><p> You can disable oplocks on a per-share basis with the following: -</p><p> -</p><pre class="programlisting"> +</p><ns38:p> +</ns38:p><pre class="programlisting"> [acctdata] oplocks = False level2 oplocks = False -</pre><p> -</p><p> +</pre><ns38:p> +</ns38:p><p> The default oplock type is Level1. Level2 Oplocks are enabled on a per-share basis in the <tt class="filename">smb.conf</tt> file. </p><p> Alternately, you could disable oplocks on a per-file basis within the share: -</p><p> -</p><pre class="programlisting"> +</p><ns38:p> +</ns38:p><pre class="programlisting"> veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/ -</pre><p> -</p><p> +</pre><ns38:p> +</ns38:p><p> If you are experiencing problems with oplocks as apparent from Samba's log entries, you may want to play it safe and disable oplocks and level2 oplocks. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911740"></a>Disabling Kernel OpLocks</h4></div></div><div></div></div><p> +</p></div><div xmlns:ns39="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2908088"></a>Disabling Kernel OpLocks</h4></div></div><div></div></div><p> Kernel OpLocks is an <tt class="filename">smb.conf</tt> parameter that notifies Samba (if the UNIX kernel has the capability to send a Windows client an oplock break) when a UNIX process is attempting to open the file that is @@ -5264,13 +5267,13 @@ to the risk of data corruption. If the UNIX kernel has the ability to send an oplock break, then the kernel oplocks parameter enables Samba to send the oplock break. Kernel oplocks are enabled on a per-server basis in the <tt class="filename">smb.conf</tt> file. -</p><p> -</p><pre class="programlisting"> +</p><ns39:p> +</ns39:p><pre class="programlisting"> [global] kernel oplocks = yes -</pre><p> +</pre><ns39:p> The default is "no". -</p><p> +</ns39:p><p> Veto OpLocks is an <tt class="filename">smb.conf</tt> parameter that identifies specific files for which Oplocks are disabled. When a Windows client opens a file that has been configured for veto oplocks, the client will not be granted @@ -5282,26 +5285,26 @@ allow Windows clients to utilize the performance benefit of file caching without the risk of data corruption. Veto Oplocks can be enabled on a per-share basis, or globally for the entire server, in the <tt class="filename">smb.conf</tt> file: -</p><p> -</p><pre class="programlisting"><font color="red"><title>Example Veto OpLock Settings</title></font> +</p><ns39:p> +</ns39:p><pre class="programlisting"><font color="red"><title>Example Veto OpLock Settings</title></font> [global] veto oplock files = /filename.htm/*.txt/ [share_name] veto oplock files = /*.exe/filename.ext/ -</pre><p> -</p><p> +</pre><ns39:p> +</ns39:p><p> <span class="emphasis"><em>Oplock break wait time</em></span> is an <tt class="filename">smb.conf</tt> parameter that adjusts the time interval for Samba to reply to an oplock break request. Samba recommends "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." Oplock Break Wait Time can only be configured globally in the <tt class="filename">smb.conf</tt> file: -</p><p> -</p><pre class="programlisting"> +</p><ns39:p> +</ns39:p><pre class="programlisting"> [global] oplock break wait time = 0 (default) -</pre><p> -</p><p> +</pre><ns39:p> +</ns39:p><p> <span class="emphasis"><em>Oplock break contention limit</em></span> is an <tt class="filename">smb.conf</tt> parameter that limits the response of the Samba server to grant an oplock if the configured number of contending clients reaches the limit specified by the @@ -5309,15 +5312,15 @@ parameter. Samba recommends "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." Oplock Break Contention Limit can be enable on a per-share basis, or globally for the entire server, in the <tt class="filename">smb.conf</tt> file: -</p><p> -</p><pre class="programlisting"> +</p><ns39:p> +</ns39:p><pre class="programlisting"> [global] oplock break contention limit = 2 (default) [share_name] oplock break contention limit = 2 (default) -</pre><p> -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911924"></a>MS Windows Opportunistic Locking and Caching Controls</h2></div></div><div></div></div><p> +</pre><ns39:p> +</ns39:p></div></div></div><div xmlns:ns40="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908272"></a>MS Windows Opportunistic Locking and Caching Controls</h2></div></div><div></div></div><p> There is a known issue when running applications (like Norton Anti-Virus) on a Windows 2000/ XP workstation computer that can affect any application attempting to access shared database files across a network. This is a result of a default setting configured in the Windows 2000/XP @@ -5354,20 +5357,20 @@ Windows 2000 will still respect the EnableOplocks registry value used to disable in earlier versions of Windows. </p></div><p> You can also deny the granting of opportunistic locks by changing the following registry entries: -</p><p> -</p><pre class="programlisting"> +</p><ns40:p> +</ns40:p><pre class="programlisting"> HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\MRXSmb\Parameters\ OplocksDisabled REG_DWORD 0 or 1 Default: 0 (not disabled) -</pre><p> -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><ns40:p> +</ns40:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The OplocksDisabled registry value configures Windows clients to either request or not request opportunistic locks on a remote file. To disable oplocks, the value of OplocksDisabled must be set to 1. -</p></div><p> -</p><pre class="programlisting"> +</p></div><ns40:p> +</ns40:p><pre class="programlisting"> HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanServer\Parameters @@ -5376,8 +5379,8 @@ request opportunistic locks on a remote file. To disable oplocks, the value of EnableOpLockForceClose REG_DWORD 0 or 1 Default: 0 (Disabled by Default) -</pre><p> -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><ns40:p> +</ns40:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The EnableOplocks value configures Windows-based servers (including Workstations sharing files) to allow or deny opportunistic locks on local files. </p></div><p> @@ -5409,7 +5412,7 @@ An illustration of how level II oplocks work: station holds any oplock on the file. Because the workstations can have no cached writes or locks at this point, they need not respond to the break-to-none advisory; all they need do is invalidate locally cashed read-ahead data. - </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912154"></a>Workstation Service Entries</h3></div></div><div></div></div><pre class="programlisting"> + </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910709"></a>Workstation Service Entries</h3></div></div><div></div></div><pre class="programlisting"> \HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanWorkstation\Parameters @@ -5418,7 +5421,7 @@ An illustration of how level II oplocks work: </pre><p> Indicates whether the redirector should use opportunistic-locking (oplock) performance enhancement. This parameter should be disabled only to isolate problems. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912180"></a>Server Service Entries</h3></div></div><div></div></div><pre class="programlisting"> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910736"></a>Server Service Entries</h3></div></div><div></div></div><pre class="programlisting"> \HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanServer\Parameters @@ -5447,7 +5450,7 @@ the server disables raw I/O and opportunistic locking for this connection. Specifies the time that the server waits for a client to respond to an oplock break request. Smaller values can allow detection of crashed clients more quickly but can potentially cause loss of cached data. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912260"></a>Persistent Data Corruption</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910816"></a>Persistent Data Corruption</h2></div></div><div></div></div><p> If you have applied all of the settings discussed in this paper but data corruption problems and other symptoms persist, here are some additional things to check out: </p><p> @@ -5458,7 +5461,7 @@ rebuild the data files in question. This involves creating a new data file with same definition as the file to be rebuilt and transferring the data from the old file to the new one. There are several known methods for doing this that can be found in our Knowledge Base. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912291"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910846"></a>Common Errors</h2></div></div><div></div></div><p> In some sites locking problems surface as soon as a server is installed, in other sites locking problems may not surface for a long time. Almost without exception, when a locking problem does surface it will cause embarrassment and potential data corruption. @@ -5488,18 +5491,18 @@ so far: report on https://bugzilla.samba.org without delay. Make sure that you give as much information as you possibly can to help isolate the cause and to allow reproduction of the problem (an essential step in problem isolation and correction). - </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912365"></a>locking.tdb error messages</h3></div></div><div></div></div><p> - </p><pre class="screen"> + </p></li></ul></div><div xmlns:ns41="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910919"></a>locking.tdb error messages</h3></div></div><div></div></div><ns41:p> + </ns41:p><pre class="screen"> > We are seeing lots of errors in the samba logs like: > > tdb(/usr/local/samba_2.2.7/var/locks/locking.tdb): rec_read bad magic > 0x4d6f4b61 at offset=36116 > > What do these mean? - </pre><p> - </p><p> + </pre><ns41:p> + </ns41:p><p> Corrupted tdb. Stop all instances of smbd, delete locking.tdb, restart smbd. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912394"></a>Additional Reading</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910950"></a>Additional Reading</h2></div></div><div></div></div><p> You may want to check for an updated version of this white paper on our Web site from time to time. Many of our white papers are updated as information changes. For those papers, the Last Edited date is always at the top of the paper. @@ -5519,7 +5522,7 @@ Microsoft Corporation, April 2001, <a href="http://support.microsoft.com/default </p><p> Microsoft Knowledge Base Article Q129202 "PC Ext: Explanation of Opportunistic Locking on Windows NT", Microsoft Corporation, April 1995, <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202</a>. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="securing-samba"></a>Chapter15.Securing Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 26, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2914448">Introduction</a></dt><dt><a href="#id2914481">Features and Benefits</a></dt><dt><a href="#id2914555">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2914574">Using host based protection</a></dt><dt><a href="#id2914645">User based protection</a></dt><dt><a href="#id2914697">Using interface protection</a></dt><dt><a href="#id2914749">Using a firewall</a></dt><dt><a href="#id2914805">Using a IPC$ share deny</a></dt><dt><a href="#id2914866">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2914907">Upgrading Samba</a></dt><dt><a href="#id2914932">Common Errors</a></dt><dd><dl><dt><a href="#id2914949">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2914974">Why can users access home directories of other users?</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914448"></a>Introduction</h2></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="securing-samba"></a>Chapter15.Securing Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 26, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2912374">Introduction</a></dt><dt><a href="#id2912407">Features and Benefits</a></dt><dt><a href="#id2911067">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2911085">Using host based protection</a></dt><dt><a href="#id2911154">User based protection</a></dt><dt><a href="#id2911205">Using interface protection</a></dt><dt><a href="#id2911256">Using a firewall</a></dt><dt><a href="#id2911312">Using a IPC$ share deny</a></dt><dt><a href="#id2911377">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2911416">Upgrading Samba</a></dt><dt><a href="#id2911439">Common Errors</a></dt><dd><dl><dt><a href="#id2911458">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2911483">Why can users access home directories of other users?</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912374"></a>Introduction</h2></div></div><div></div></div><p> This note was attached to the Samba 2.2.8 release notes as it contained an important security fix. The information contained here applies to Samba installations in general. @@ -5531,7 +5534,7 @@ on it!" Security concerns are just like that: You need to know a little about the subject to appreciate how obvious most of it really is. The challenge for most of us is to discover that first morsel of knowledge with which we may unlock the secrets of the masters. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914481"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912407"></a>Features and Benefits</h2></div></div><div></div></div><p> There are three level at which security principals must be observed in order to render a site at least moderately secure. These are: the perimeter firewall, the configuration of the host server that is running Samba, and Samba itself. @@ -5550,13 +5553,13 @@ TCP/IP connections. Another method by which Samba may be secured is by way of setting Access Control Entries in an Access Control List on the shares themselves. This is discussed in the chapter on File, Directory and Share Access Control. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914555"></a>Technical Discussion of Protective Measures and Issues</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911067"></a>Technical Discussion of Protective Measures and Issues</h2></div></div><div></div></div><p> The key challenge of security is the fact that protective measures suffice at best only to close the door on known exploits and breach techniques. Never assume that because you have followed these few measures that the Samba server is now an impenetrable fortress! Given the history of information systems so far, it is only a matter of time before someone will find yet another vulnerability. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914574"></a>Using host based protection</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911085"></a>Using host based protection</h3></div></div><div></div></div><p> In many installations of Samba the greatest threat comes for outside your immediate network. By default Samba will accept connections from any host, which means that if you run an insecure version of Samba on @@ -5576,7 +5579,7 @@ before someone will find yet another vulnerability. 192.168.3. All other connections will be refused as soon as the client sends its first packet. The refusal will be marked as a <span class="errorname">not listening on called name</span> error. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914645"></a>User based protection</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911154"></a>User based protection</h3></div></div><div></div></div><p> If you want to restrict access to your server to valid users only then the following method may be of use. In the <tt class="filename">smb.conf</tt> <i class="parameter"><tt>[globals]</tt></i> section put: </p><pre class="programlisting"> @@ -5584,7 +5587,7 @@ before someone will find yet another vulnerability. </pre><p> What this does is, it restricts all server access to either the user <span class="emphasis"><em>jacko</em></span> or to members of the system group <span class="emphasis"><em>smbusers</em></span>. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914697"></a>Using interface protection</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911205"></a>Using interface protection</h3></div></div><div></div></div><p> By default Samba will accept connections on any network interface that it finds on your system. That means if you have a ISDN line or a PPP connection to the Internet then Samba will accept connections on those @@ -5606,7 +5609,7 @@ before someone will find yet another vulnerability. connection refused reply. In that case no Samba code is run at all as the operating system has been told not to pass connections from that interface to any samba process. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914749"></a>Using a firewall</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911256"></a>Using a firewall</h3></div></div><div></div></div><p> Many people use a firewall to deny access to services that they don't want exposed outside their network. This can be a very good idea, although I would recommend using it in conjunction with the above @@ -5619,7 +5622,7 @@ before someone will find yet another vulnerability. The last one is important as many older firewall setups may not be aware of it, given that this port was only added to the protocol in recent years. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914805"></a>Using a IPC$ share deny</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911312"></a>Using a IPC$ share deny</h3></div></div><div></div></div><p> If the above methods are not suitable, then you could also place a more specific deny on the IPC$ share that is used in the recently discovered security hole. This allows you to offer access to other @@ -5646,10 +5649,10 @@ before someone will find yet another vulnerability. </p><p> This is not recommended unless you cannot use one of the other methods listed above for some reason. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914866"></a>NTLMv2 Security</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns42="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911377"></a>NTLMv2 Security</h3></div></div><div></div></div><p> To configure NTLMv2 authentication the following registry keys are worth knowing about: - </p><p> - </p><pre class="screen"> + </p><ns42:p> + </ns42:p><pre class="screen"> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "lmcompatibilitylevel"=dword:00000003 @@ -5663,25 +5666,25 @@ before someone will find yet another vulnerability. 0x80000 - NTLMv2 session security. If either NtlmMinClientSec or NtlmMinServerSec is set to 0x80000, the connection will fail if NTLMv2 session security is not negotiated. - </pre><p> - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914907"></a>Upgrading Samba</h2></div></div><div></div></div><p> + </pre><ns42:p> + </ns42:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911416"></a>Upgrading Samba</h2></div></div><div></div></div><p> Please check regularly on <a href="http://www.samba.org/" target="_top">http://www.samba.org/</a> for updates and important announcements. Occasionally security releases are made and it is highly recommended to upgrade Samba when a security vulnerability is discovered. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914932"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911439"></a>Common Errors</h2></div></div><div></div></div><p> If all of samba and host platform configuration were really as intuitive as one might like then this section would not be necessary. Security issues are often vexing for a support person to resolve, not because of the complexity of the problem, but for reason that most administrators who post what turns out to be a security problem request are totally convinced that the problem is with Samba. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914949"></a>Smbclient works on localhost, but the network is dead</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911458"></a>Smbclient works on localhost, but the network is dead</h3></div></div><div></div></div><p> This is a very common problem. Red Hat Linux (as do others) will install a default firewall. With the default firewall in place only traffic on the loopback adapter (IP address 127.0.0.1) will be allowed through the firewall. </p><p> The solution is either to remove the firewall (stop it) or to modify the firewall script to allow SMB networking traffic through. See section above in this chapter. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914974"></a>Why can users access home directories of other users?</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns43="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911483"></a>Why can users access home directories of other users?</h3></div></div><div></div></div><p> “<span class="quote"> We are unable to keep individual users from mapping to any other user's home directory once they have supplied a valid password! They only need @@ -5712,25 +5715,25 @@ out to be a security problem request are totally convinced that the problem is w Samba does allow the setup you require when you have set the <i class="parameter"><tt>only user = yes</tt></i> option on the share, is that you have not set the valid users list for the share. - </p><p> + </p><ns43:p> Note that only user works in conjunction with the users= list, so to get the behavior you require, add the line : - </p><pre class="programlisting"> + </ns43:p><pre class="programlisting"> users = %S - </pre><p> + </pre><ns43:p> this is equivalent to: - </p><pre class="programlisting"> + </ns43:p><pre class="programlisting"> valid users = %S - </pre><p> + </pre><ns43:p> to the definition of the <i class="parameter"><tt>[homes]</tt></i> share, as recommended in the <tt class="filename">smb.conf</tt> man page. - </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="InterdomainTrusts"></a>Chapter16.Interdomain Trust Relationships</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Rafal</span> <span class="surname">Szczesniak</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:mimir@samba.org">mimir@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2915881">Features and Benefits</a></dt><dt><a href="#id2915909">Trust Relationship Background</a></dt><dt><a href="#id2915993">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2916006">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2916091">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2916127">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2916155">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2916295">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2916428">Common Errors</a></dt><dd><dl><dt><a href="#id2916443">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></div><p> + </ns43:p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="InterdomainTrusts"></a>Chapter16.Interdomain Trust Relationships</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Rafal</span> <span class="surname">Szczesniak</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:mimir@samba.org">mimir@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2912001">Features and Benefits</a></dt><dt><a href="#id2912030">Trust Relationship Background</a></dt><dt><a href="#id2912113">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2912125">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2914100">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2914137">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2914164">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2914290">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2911669">Common Errors</a></dt><dd><dl><dt><a href="#id2911684">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></div><p> Samba-3 supports NT4 style domain trust relationships. This is feature that many sites will want to use if they migrate to Samba-3 from and NT4 style domain and do NOT want to adopt Active Directory or an LDAP based authentication back end. This section explains some background information regarding trust relationships and how to create them. It is now possible for Samba-3 to NT4 trust (and vice versa), as well as Samba3 to Samba3 trusts. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2915881"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912001"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba-3 can participate in Samba-to-Samba as well as in Samba-to-MS Windows NT4 style trust relationships. This imparts to Samba similar scalability as is possible with MS Windows NT4. @@ -5740,7 +5743,7 @@ database such as LDAP, and given it's ability to run in Primary as well as Backu modes, the administrator would be well advised to consider alternatives to the use of Interdomain trusts simply because by the very nature of how this works it is fragile. That was, after all, a key reason for the development and adoption of Microsoft Active Directory. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2915909"></a>Trust Relationship Background</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912030"></a>Trust Relationship Background</h2></div></div><div></div></div><p> MS Windows NT3.x/4.0 type security domains employ a non-hierarchical security structure. The limitations of this architecture as it affects the scalability of MS Windows networking in large organisations is well known. Additionally, the flat-name space that results from @@ -5775,9 +5778,9 @@ domains above, with Windows 2000 and ADS the RED and BLUE domains CAN trust each an inherent feature of ADS domains. Samba-3 implements MS Windows NT4 style Interdomain trusts and interoperates with MS Windows 200x ADS security domains in similar manner to MS Windows NT4 style domains. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2915993"></a>Native MS Windows NT4 Trusts Configuration</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912113"></a>Native MS Windows NT4 Trusts Configuration</h2></div></div><div></div></div><p> There are two steps to creating an interdomain trust relationship. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916006"></a>NT4 as the Trusting Domain (ie. creating the trusted account)</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912125"></a>NT4 as the Trusting Domain (ie. creating the trusted account)</h3></div></div><div></div></div><p> For MS Windows NT4, all domain trust relationships are configured using the <span class="application">Domain User Manager</span>. To affect a two way trust relationship it is necessary for each domain administrator to make available (for use by an external domain) it's @@ -5789,14 +5792,14 @@ button will open a panel in which needs to be entered the remote domain that wil user rights to your domain. In addition it is necessary to enter a password that is specific to this trust relationship. The password needs to be typed twice (for standard confirmation). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916091"></a>NT4 as the Trusted Domain (ie. creating trusted account's password)</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914100"></a>NT4 as the Trusted Domain (ie. creating trusted account's password)</h3></div></div><div></div></div><p> A trust relationship will work only when the other (trusting) domain makes the appropriate connections with the trusted domain. To consummate the trust relationship the administrator will launch the Domain User Manager, from the menu select Policies, then select Trust Relationships, then click on the <span class="guibutton">Add</span> button that is next to the box that is labelled <span class="guilabel">Trusted Domains</span>. A panel will open in which must be entered the name of the remote domain as well as the password assigned to that trust. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916127"></a>Configuring Samba NT-style Domain Trusts</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914137"></a>Configuring Samba NT-style Domain Trusts</h2></div></div><div></div></div><p> This description is meant to be a fairly short introduction about how to set up a Samba server so that it could participate in interdomain trust relationships. Trust relationship support in Samba is in its early stage, so lot of things don't work yet. @@ -5805,25 +5808,25 @@ Each of the procedures described below is treated as they were performed with Wi one end. The remote end could just as well be another Samba-3 domain. It can be clearly seen, after reading this document, that combining Samba-specific parts of what's written below leads to trust between domains in purely Samba environment. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916155"></a>Samba-3 as the Trusting Domain</h3></div></div><div></div></div><p> +</p><div xmlns:ns44="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914164"></a>Samba-3 as the Trusting Domain</h3></div></div><div></div></div><p> In order to set the Samba PDC to be the trusted party of the relationship first you need to create special account for the domain that will be the trusting party. To do that, you can use the 'smbpasswd' utility. Creating the trusted domain account is very similar to creating a trusted machine account. Suppose, your domain is called SAMBA, and the remote domain is called RUMBA. The first step will be to issue this command from your favourite shell: -</p><p> -</p><pre class="screen"> +</p><ns44:p> +</ns44:p><pre class="screen"> <tt class="prompt">root# </tt> <b class="userinput"><tt>smbpasswd -a -i rumba</tt></b> New SMB password: XXXXXXXX Retype SMB password: XXXXXXXX Added user rumba$ -</pre><p> +</pre><ns44:p> where <tt class="option">-a</tt> means to add a new account into the passdb database and <tt class="option">-i</tt> means: ''create this account with the InterDomain trust flag'' -</p><p> +</ns44:p><p> The account name will be 'rumba$' (the name of the remote domain) </p><p> After issuing this command you'll be asked to enter the password for @@ -5843,7 +5846,7 @@ your domain name, and the password used at the time of account creation. Press OK and, if everything went without incident, you will see <tt class="computeroutput">Trusted domain relationship successfully established</tt> message. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916295"></a>Samba-3 as the Trusted Domain</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914290"></a>Samba-3 as the Trusted Domain</h3></div></div><div></div></div><p> This time activities are somewhat reversed. Again, we'll assume that your domain controlled by the Samba PDC is called SAMBA and NT-controlled domain is called RUMBA. </p><p> @@ -5874,11 +5877,11 @@ Congratulations! Your trust relationship has just been established. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> Note that you have to run this command as root because you must have write access to the <tt class="filename">secrets.tdb</tt> file. -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916428"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911669"></a>Common Errors</h2></div></div><div></div></div><p> Interdomain trust relationships should NOT be attempted on networks that are unstable or that suffer regular outages. Network stability and integrity are key concerns with distributed trusted domains. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916443"></a>Tell me about Trust Relationships using Samba</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911684"></a>Tell me about Trust Relationships using Samba</h3></div></div><div></div></div><p> Like many, I administer multiple LANs connected together using NT trust relationships. This was implemented about 4 years ago. I now have the occasion to consider performing this same task again, but this time, I @@ -5900,7 +5903,7 @@ distributed trusted domains. details. </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="msdfs"></a>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Shirish</span> <span class="surname">Kalele</span></h3><div class="affiliation"><span class="orgname">Samba Team & Veritas Software<br></span><div class="address"><p><br> <tt class="email"><<a href="mailto:samba@samba.org">samba@samba.org</a>></tt><br> - </p></div></div></div></div><div><p class="pubdate">12 Jul 2000</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2915783">Features and Benefits</a></dt><dt><a href="#id2917436">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2915783"></a>Features and Benefits</h2></div></div><div></div></div><p> + </p></div></div></div></div><div><p class="pubdate">12 Jul 2000</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2911782">Features and Benefits</a></dt><dt><a href="#id2913192">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911782"></a>Features and Benefits</h2></div></div><div></div></div><p> The Distributed File System (or DFS) provides a means of separating the logical view of files and directories that users see from the actual physical locations of these resources on the network. It allows for higher availability, smoother @@ -5952,17 +5955,17 @@ distributed trusted domains. network shares you want, and start Samba.</p><p>Users on DFS-aware clients can now browse the DFS tree on the Samba server at \\samba\dfs. Accessing links linka or linkb (which appear as directories to the client) - takes users directly to the appropriate shares on the network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2917436"></a>Common Errors</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Windows clients need to be rebooted + takes users directly to the appropriate shares on the network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2913192"></a>Common Errors</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Windows clients need to be rebooted if a previously mounted non-dfs share is made a dfs root or vice versa. A better way is to introduce a new share and make it the dfs root.</p></li><li><p>Currently there's a restriction that msdfs symlink names should all be lowercase.</p></li><li><p>For security purposes, the directory acting as the root of the DFS tree should have ownership and permissions set so that only designated users can - modify the symbolic links in the directory.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter18.Classical Printing Support</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email"><<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 32, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2917027">Features and Benefits</a></dt><dt><a href="#id2917095">Technical Introduction</a></dt><dd><dl><dt><a href="#id2917133">What happens if you send a Job from a Client</a></dt><dt><a href="#id2917203">Printing Related Configuration Parameters</a></dt><dt><a href="#id2918120">Parameters Recommended for Use</a></dt><dt><a href="#id2918450">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2918559">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2918652">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2918721">Verification of "Settings in Use" with testparm</a></dt><dt><a href="#id2918810">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2919116">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2919220">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2919234">The [global] Section</a></dt><dt><a href="#id2919616">The [printers] Section</a></dt><dt><a href="#id2919945">Any [my_printer_name] Section</a></dt><dt><a href="#id2920166">Print Commands</a></dt><dt><a href="#id2920216">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2920741">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2921021">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2921186">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2921338">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2921450">Creating the [print$] Share</a></dt><dt><a href="#id2921521">Parameters in the [print$] Section</a></dt><dt><a href="#id2921752">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2921913">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2922008">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2922192">Setting Drivers for existing Printers with -rpcclient</a></dt></dl></dd><dt><a href="#id2923912">"The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)</a></dt><dd><dl><dt><a href="#id2923933">The first Client Driver Installation</a></dt><dt><a href="#id2924131">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2924420">Further Client Driver Install Procedures</a></dt><dt><a href="#id2924516">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="#id2924657">Other Gotchas</a></dt><dd><dl><dt><a href="#id2924690">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2925127">Supporting large Numbers of Printers</a></dt><dt><a href="#id2925430">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2925673">Weird Error Message Cannot connect under a -different Name</a></dt><dt><a href="#id2925771">Be careful when assembling Driver Files</a></dt><dt><a href="#id2926117">Samba and Printer Ports</a></dt><dt><a href="#id2926188">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2926210">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2926256">What is Imprints?</a></dt><dt><a href="#id2926297">Creating Printer Driver Packages</a></dt><dt><a href="#id2926316">The Imprints Server</a></dt><dt><a href="#id2926340">The Installation Client</a></dt></dl></dd><dt><a href="#id2926492">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2926822">The addprinter command</a></dt><dt><a href="#id2926867">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="#id2927036">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2927051">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2927064">I give my root password but I don't get access</a></dt><dt><a href="#id2927097">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2917027"></a>Features and Benefits</h2></div></div><div></div></div><p> + modify the symbolic links in the directory.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter18.Classical Printing Support</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email"><<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 32, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2914714">Features and Benefits</a></dt><dt><a href="#id2914778">Technical Introduction</a></dt><dd><dl><dt><a href="#id2914814">What happens if you send a Job from a Client</a></dt><dt><a href="#id2914884">Printing Related Configuration Parameters</a></dt><dt><a href="#id2917993">Parameters Recommended for Use</a></dt><dt><a href="#id2913353">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2913461">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2913555">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2915561">Verification of "Settings in Use" with testparm</a></dt><dt><a href="#id2915643">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2915950">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2916042">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2916055">The [global] Section</a></dt><dt><a href="#id2925516">The [printers] Section</a></dt><dt><a href="#id2925845">Any [my_printer_name] Section</a></dt><dt><a href="#id2926066">Print Commands</a></dt><dt><a href="#id2926117">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2926642">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2926920">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2927074">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2927225">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2927338">Creating the [print$] Share</a></dt><dt><a href="#id2927409">Parameters in the [print$] Section</a></dt><dt><a href="#id2927630">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2927791">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2927885">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2928069">Setting Drivers for existing Printers with +rpcclient</a></dt></dl></dd><dt><a href="#id2929667">"The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)</a></dt><dd><dl><dt><a href="#id2929688">The first Client Driver Installation</a></dt><dt><a href="#id2929885">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2930175">Further Client Driver Install Procedures</a></dt><dt><a href="#id2930270">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="#id2930412">Other Gotchas</a></dt><dd><dl><dt><a href="#id2930445">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2930879">Supporting large Numbers of Printers</a></dt><dt><a href="#id2931181">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2931425">Weird Error Message Cannot connect under a +different Name</a></dt><dt><a href="#id2931523">Be careful when assembling Driver Files</a></dt><dt><a href="#id2931794">Samba and Printer Ports</a></dt><dt><a href="#id2931864">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2931887">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2931932">What is Imprints?</a></dt><dt><a href="#id2931973">Creating Printer Driver Packages</a></dt><dt><a href="#id2931992">The Imprints Server</a></dt><dt><a href="#id2932017">The Installation Client</a></dt></dl></dd><dt><a href="#id2932169">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2932498">The addprinter command</a></dt><dt><a href="#id2932543">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="#id2932712">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2932726">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2932739">I give my root password but I don't get access</a></dt><dt><a href="#id2932773">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914714"></a>Features and Benefits</h2></div></div><div></div></div><p> Printing is often a mission-critical service for the users. Samba can provide this service reliably and seamlessly for a client network consisting of Windows workstations. @@ -5998,7 +6001,7 @@ Professional clients. Where this document describes the responses to commands given, bear in mind that Windows 2000 clients are very similar, but may differ in details. Windows NT is somewhat different again. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2917095"></a>Technical Introduction</h2></div></div><div></div></div><p> +</p></div></div><div xmlns:ns45="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914778"></a>Technical Introduction</h2></div></div><div></div></div><ns45:p> Samba's printing support always relies on the installed print subsystem of the Unix OS it runs on. Samba is a "middleman". It takes printfiles from Windows (or other SMB) clients and passes them to the @@ -6013,10 +6016,10 @@ the next chapter covers in great detail the more modern <span class="emphasis"><em>Common UNIX Printing System</em></span> (CUPS). -</p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>CUPS users, be warned: don't just jump on to the next +</ns45:p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>CUPS users, be warned: don't just jump on to the next chapter. You might miss important information contained only -here!</p></div><p> -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917133"></a>What happens if you send a Job from a Client</h3></div></div><div></div></div><p> +here!</p></div><ns45:p> +</ns45:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914814"></a>What happens if you send a Job from a Client</h3></div></div><div></div></div><p> To successfully print a job from a Windows client via a Samba print server to a UNIX printer, there are 6 (potentially 7) stages: @@ -6024,7 +6027,7 @@ stages: into Samba's spooling area</p></li><li><p>Windows closes the connection again</p></li><li><p>Samba invokes the print command to hand the file over to the UNIX print subsystem's spooling area</p></li><li><p>The Unix print subsystem processes the print job</p></li><li><p>The printfile may need to be explicitly deleted -from the Samba spooling area.</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917203"></a>Printing Related Configuration Parameters</h3></div></div><div></div></div><p> +from the Samba spooling area.</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914884"></a>Printing Related Configuration Parameters</h3></div></div><div></div></div><p> There are a number of configuration parameters in controlling Samba's printing behaviour. Please also refer to the man page for smb.conf to @@ -6038,20 +6041,20 @@ behaviour of all individual or service level shares (provided those don't have a different setting defined for the same parameter, thus overriding the global default).</p></dd><dt><span class="term">Global Parameters</span></dt><dd><p>These <span class="emphasis"><em>may not</em></span> go into individual shares. If they go in by error, the "testparm" utility can discover -this (if you run it) and tell you so.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918120"></a>Parameters Recommended for Use</h3></div></div><div></div></div><p>The following <tt class="filename">smb.conf</tt> parameters directly +this (if you run it) and tell you so.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917993"></a>Parameters Recommended for Use</h3></div></div><div></div></div><p>The following <tt class="filename">smb.conf</tt> parameters directly related to printing are used in Samba-3. See also the <tt class="filename">smb.conf</tt> man page for detailed explanations: -</p><p><b>List of printing related parameters in Samba-3.</b> -</p><div class="itemizedlist"><p class="title"><b>Global level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>addprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>deleteprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>enumports command (G)</tt></i></p></li><li><p><i class="parameter"><tt>load printers (G)</tt></i></p></li><li><p><i class="parameter"><tt>lpq cache time (G)</tt></i></p></li><li><p><i class="parameter"><tt>os2 driver map (G)</tt></i></p></li><li><p><i class="parameter"><tt>printcap name (G), printcap (G)</tt></i></p></li><li><p><i class="parameter"><tt>show add printer wizard (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (G)</tt></i></p></li></ul></div><p> +</p><ns45:p><b>List of printing related parameters in Samba-3.</b> +</ns45:p><div class="itemizedlist"><p class="title"><b>Global level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>addprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>deleteprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>enumports command (G)</tt></i></p></li><li><p><i class="parameter"><tt>load printers (G)</tt></i></p></li><li><p><i class="parameter"><tt>lpq cache time (G)</tt></i></p></li><li><p><i class="parameter"><tt>os2 driver map (G)</tt></i></p></li><li><p><i class="parameter"><tt>printcap name (G), printcap (G)</tt></i></p></li><li><p><i class="parameter"><tt>show add printer wizard (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (G)</tt></i></p></li></ul></div><ns45:p> -</p><div class="itemizedlist"><p class="title"><b>Service level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>hosts allow (S)</tt></i></p></li><li><p><i class="parameter"><tt>hosts deny (S)</tt></i></p></li><li><p><i class="parameter"><tt>lppause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpq command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lprm command (S)</tt></i></p></li><li><p><i class="parameter"><tt>max print jobs (S)</tt></i></p></li><li><p><i class="parameter"><tt>min print space (S)</tt></i></p></li><li><p><i class="parameter"><tt>print command (S)</tt></i></p></li><li><p><i class="parameter"><tt>printable (S), print ok (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer name (S), printer (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer admin (S)</tt></i></p></li><li><p><i class="parameter"><tt>printing = [cups|bsd|lprng...] (S)</tt></i></p></li><li><p><i class="parameter"><tt>queuepause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>queueresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (S)</tt></i></p></li></ul></div><p> -</p><p> +</ns45:p><div class="itemizedlist"><p class="title"><b>Service level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>hosts allow (S)</tt></i></p></li><li><p><i class="parameter"><tt>hosts deny (S)</tt></i></p></li><li><p><i class="parameter"><tt>lppause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpq command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lprm command (S)</tt></i></p></li><li><p><i class="parameter"><tt>max print jobs (S)</tt></i></p></li><li><p><i class="parameter"><tt>min print space (S)</tt></i></p></li><li><p><i class="parameter"><tt>print command (S)</tt></i></p></li><li><p><i class="parameter"><tt>printable (S), print ok (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer name (S), printer (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer admin (S)</tt></i></p></li><li><p><i class="parameter"><tt>printing = [cups|bsd|lprng...] (S)</tt></i></p></li><li><p><i class="parameter"><tt>queuepause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>queueresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (S)</tt></i></p></li></ul></div><ns45:p> +</ns45:p><p> Samba's printing support implements the Microsoft Remote Procedure Calls (MS-RPC) methods for printing. These are used by Windows NT (and later) print servers. The old "LanMan" protocol is still supported as a fallback resort, and for older clients to use. More details will follow further beneath. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918450"></a>Parameters for Backwards Compatibility</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913353"></a>Parameters for Backwards Compatibility</h3></div></div><div></div></div><p> Two new parameters that were added in Samba 2.2.2, are still present in Samba-3.0. Both of these options are described in the <tt class="filename">smb.conf</tt> man page and are disabled by @@ -6061,19 +6064,19 @@ provided for better support of Samba 2.0.x backwards capability. It will disable Samba's support for MS-RPC printing and yield identical printing behaviour to Samba 2.0.x.</p></dd><dt><span class="term"><i class="parameter"><tt>use client driver (G)</tt></i></span></dt><dd><p> was provided for using local printer drivers on Windows NT/2000 clients. It does -not apply to Windows 95/98/ME clients.</p></dd></dl></div><p><b>Parameters "for backward compatibility only", use with caution.</b> -</p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (S)</tt></i></p></li></ul></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918559"></a>Parameters no longer in use</h3></div></div><div></div></div><p> +not apply to Windows 95/98/ME clients.</p></dd></dl></div><ns45:p><b>Parameters "for backward compatibility only", use with caution.</b> +</ns45:p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (S)</tt></i></p></li></ul></div><ns45:p> +</ns45:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913461"></a>Parameters no longer in use</h3></div></div><div></div></div><p> Samba users upgrading from 2.2.x to 3.0 need to be aware that some previously available settings are no longer supported (as was announced some time ago). Here is a list of them: -</p><p><b>"old" parameters, removed in Samba-3.</b> +</p><ns45:p><b>"old" parameters, removed in Samba-3.</b> The following <tt class="filename">smb.conf</tt> parameters have been deprecated already in Samba 2.2 and are now completely removed from Samba-3. You cannot use them in new 3.0 installations: -</p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>printer driver file (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>postscript (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver location (S)</tt></i></p></li></ul></div><p> -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2918652"></a>A simple Configuration to Print with Samba-3</h2></div></div><div></div></div><p> +</ns45:p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>printer driver file (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>postscript (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver location (S)</tt></i></p></li></ul></div><ns45:p> +</ns45:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2913555"></a>A simple Configuration to Print with Samba-3</h2></div></div><div></div></div><p> Here is a very simple example configuration for print related settings in the file. If you compare it with your own system's , you probably find some @@ -6108,7 +6111,7 @@ reminder: It even tolerates some spelling errors (like "browsable" instead of "browseable"). Most spelling is case-insensitive. Also, you can use "Yes|No" or "True|False" for boolean settings. Lists of names may be separated by commas, spaces or tabs. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918721"></a>Verification of "Settings in Use" with <b class="command">testparm</b></h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915561"></a>Verification of "Settings in Use" with <b class="command">testparm</b></h3></div></div><div></div></div><p> To see all (or at least most) printing related settings in Samba, including the implicitly used ones, try the command outlined below (hit "ENTER" twice!). It greps for all occurrences of "lp", "print", @@ -6162,7 +6165,7 @@ be important in your future dealings with Samba.</em></span> </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> testparm in Samba-3.0 behaves differently from 2.2.x: used without the "-v" switch it only shows you the settings actually written into ! To see the complete -configuration used, add the "-v" parameter to testparm.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918810"></a>A little Experiment to warn you</h3></div></div><div></div></div><p> +configuration used, add the "-v" parameter to testparm.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915643"></a>A little Experiment to warn you</h3></div></div><div></div></div><p> Should you need to troubleshoot at any stage, please always come back to this point first and verify if "testparm" shows the parameters you expect! To give you an example from personal experience as a warning, @@ -6271,7 +6274,7 @@ printing = lprng #This defines LPRng as the printing system" will regard the whole of the string after the "=" sign as the value you want to define. And this is an invalid value that will be ignored, and a default value used instead.] -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2919116"></a>Extended Sample Configuration to Print with Samba-3</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2915950"></a>Extended Sample Configuration to Print with Samba-3</h2></div></div><div></div></div><p> Here we show a more verbose example configuration for print related settings in an . Below is a discussion and explanation of the various parameters. We chose to use BSD-style @@ -6329,9 +6332,9 @@ default, because these have been compiled in. To see all settings, let root use the <b class="command">testparm</b> utility. <b class="command">testparm</b> also gives warnings if you have mis-configured certain things.. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2919220"></a>Detailed Explanation of the Example's Settings</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916042"></a>Detailed Explanation of the Example's Settings</h2></div></div><div></div></div><p> Following is a discussion of the settings from above shown example. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919234"></a>The [global] Section</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916055"></a>The [global] Section</h3></div></div><div></div></div><p> The <i class="parameter"><tt>[global]</tt></i> section is one of 4 special sections (along with [<i class="parameter"><tt>[homes]</tt></i>, <i class="parameter"><tt>[printers]</tt></i> and @@ -6405,7 +6408,7 @@ It must <span class="emphasis"><em>not</em></span> be enabled on print shares (with a <tt class="constant">yes</tt> or <tt class="constant">true</tt> setting) which have valid drivers installed on the Samba server! For more detailed explanations see the man page of <tt class="filename">smb.conf</tt>. -</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919616"></a>The [printers] Section</h3></div></div><div></div></div><p> +</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925516"></a>The [printers] Section</h3></div></div><div></div></div><p> This is the second special section. If a section with this name appears in the <tt class="filename">smb.conf</tt>, users are able to connect to any printer specified in the Samba host's printcap file, @@ -6465,7 +6468,7 @@ write to the directory (if user privileges allow the connection), but only via print spooling operations. "Normal" write operations are not allowed. </p></dd><dt><span class="term"><i class="parameter"><tt>writeable = no</tt></i></span></dt><dd><p> synonym for <i class="parameter"><tt>read only = yes</tt></i> -</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919945"></a>Any [my_printer_name] Section</h3></div></div><div></div></div><p> +</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925845"></a>Any [my_printer_name] Section</h3></div></div><div></div></div><p> If a section appears in the , which is tagged as <i class="parameter"><tt>printable = yes</tt></i>, Samba presents it as a printer share to its clients. Note, that Win95/98/ME clients may @@ -6500,7 +6503,7 @@ belong to the "allowed subnets"). As you can see, you could name IP addresses as well as NetBIOS hostnames here. </p></dd><dt><span class="term"><i class="parameter"><tt>guest ok = no</tt></i></span></dt><dd><p>this printer is not open for the guest account! -</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920166"></a>Print Commands</h3></div></div><div></div></div><p> +</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926066"></a>Print Commands</h3></div></div><div></div></div><p> In each section defining a printer (or in the <i class="parameter"><tt>[printers]</tt></i> section), a <i class="parameter"><tt>print command</tt></i> parameter may be defined. It sets a command to @@ -6518,7 +6521,7 @@ your own print commands (or even develop print command shell scripts), make sure you pay attention to the need to remove the files from the Samba spool directory. Otherwise your hard disk may soon suffer from shortage of free space. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920216"></a>Default Print Commands for various Unix Print Subsystems</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926117"></a>Default Print Commands for various Unix Print Subsystems</h3></div></div><div></div></div><p> You learned earlier on, that Samba in most cases uses its built-in settings for many parameters if it can not find an explicitly stated one in its configuration file. The same is true for the @@ -6558,7 +6561,7 @@ check which command takes effect. Then check that this command is adequate and actually works for your installed print subsystem. It is always a good idea to explicitly set up your configuration files the way you want them to work and not rely on any built-in defaults. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920741"></a>Setting up your own Print Commands</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926642"></a>Setting up your own Print Commands</h3></div></div><div></div></div><p> After a print job has finished spooling to a service, the <i class="parameter"><tt>print command</tt></i> will be used by Samba via a <span class="emphasis"><em>system()</em></span> call to process the spool file. Usually @@ -6628,7 +6631,7 @@ for the <i class="parameter"><tt>print command</tt></i> parameter varies dependi the <i class="parameter"><tt>printing</tt></i> parameter. Another example is: </p><pre class="programlisting"> print command = /usr/local/samba/bin/myprintscript %p %s -</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921021"></a>Innovations in Samba Printing since 2.2</h2></div></div><div></div></div><p> +</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926920"></a>Innovations in Samba Printing since 2.2</h2></div></div><div></div></div><p> Before version 2.2.0, Samba's print server support for Windows clients was limited to the level of <span class="emphasis"><em>LanMan</em></span> printing calls. This is the same protocol level as Windows 9x PCs offer when @@ -6669,7 +6672,7 @@ default permissions assigned by Windows NT to a printer gives the "Print" permissions to the well-known <span class="emphasis"><em>Everyone</em></span> group. (The older clients of type Win9x can only print to "shared" printers). -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921186"></a>Client Drivers on Samba Server for <span class="emphasis"><em>Point'n'Print</em></span></h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927074"></a>Client Drivers on Samba Server for <span class="emphasis"><em>Point'n'Print</em></span></h3></div></div><div></div></div><p> There is still confusion about what all this means: <span class="emphasis"><em>Is it or is it not a requirement for printer drivers to be installed on a Samba host in order to support printing from Windows clients?</em></span> The @@ -6707,7 +6710,7 @@ by Samba. The clients use these drivers to generate print files in the format the printer (or the Unix print system) requires. Print files received by Samba are handed over to the Unix printing system, which is responsible for all further processing, if needed. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921338"></a>The [printer$] Section is removed from Samba-3</h3></div></div><div></div></div><p><b> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927225"></a>The [printer$] Section is removed from Samba-3</h3></div></div><div></div></div><p><b> <i class="parameter"><tt>[print$]</tt></i> vs. <i class="parameter"><tt>[printer$]</tt></i> .</b> Versions of Samba prior to 2.2 made it possible to use a share @@ -6733,7 +6736,7 @@ access (in the context of its ACLs) in order to support printer driver down- and uploads. Don't fear -- this does not mean Windows 9x clients are thrown aside now. They can use Samba's <i class="parameter"><tt>[print$]</tt></i> share support just fine. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921450"></a>Creating the [print$] Share</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927338"></a>Creating the [print$] Share</h3></div></div><div></div></div><p> In order to support the up- and downloading of printer driver files, you must first configure a file share named <i class="parameter"><tt>[print$]</tt></i>. The "public" name of this share is @@ -6767,7 +6770,7 @@ with appropriate values for your site): </pre><p> Of course, you also need to ensure that the directory named by the <i class="parameter"><tt>path</tt></i> parameter exists on the Unix file system. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921521"></a>Parameters in the [print$] Section</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927409"></a>Parameters in the [print$] Section</h3></div></div><div></div></div><p> <i class="parameter"><tt>[print$]</tt></i> is a special section in . It contains settings relevant to potential printer driver download and local installation by clients. @@ -6812,7 +6815,7 @@ sure these accounts can copy files to the share. If this is a non-root account, then the account should also be mentioned in the global <i class="parameter"><tt>printer admin </tt></i> parameter. See the man page for more information on -configuring file shares. </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921752"></a>Subdirectory Structure in [print$]</h3></div></div><div></div></div><p> +configuring file shares. </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927630"></a>Subdirectory Structure in [print$]</h3></div></div><div></div></div><p> In order for a Windows NT print server to support the downloading of driver files by multiple client architectures, you must create several subdirectories within the <i class="parameter"><tt>[print$]</tt></i> service @@ -6851,7 +6854,7 @@ client workstation. Open <span class="guiicon">Network Neighbourhood</span> or Once you have located the server, navigate to its <span class="guiicon">Printers and Faxes</span> folder. You should see an initial listing of printers that matches the printer shares defined on your Samba host. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921913"></a>Installing Drivers into [print$]</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2927791"></a>Installing Drivers into [print$]</h2></div></div><div></div></div><p> You have successfully created the <i class="parameter"><tt>[print$]</tt></i> share in ? And Samba has re-read its configuration? Good. But you are not yet ready to take off. The @@ -6869,7 +6872,7 @@ Properties</em></span> and <span class="emphasis"><em>Add Printer Wizard</em></s from any Windows NT/2k/XP client workstation.</p></li></ul></div><p> The latter option is probably the easier one (even if the only entrance to this realm seems a little bit weird at first). -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922008"></a>Setting Drivers for existing Printers with a Client GUI</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927885"></a>Setting Drivers for existing Printers with a Client GUI</h3></div></div><div></div></div><p> The initial listing of printers in the Samba host's <span class="guiicon">Printers</span> folder accessed from a client's Explorer will have no real printer driver assigned to them. By default, in @@ -6915,7 +6918,7 @@ Assuming you have connected with an administrative (or root) account you will also be able to modify other printer properties such as ACLs and default device settings using this dialog. For the default device settings, please consider the advice given further below. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922192"></a>Setting Drivers for existing Printers with +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928069"></a>Setting Drivers for existing Printers with <b class="command">rpcclient</b></h3></div></div><div></div></div><p> The second way to install printer drivers into <i class="parameter"><tt>[print$]</tt></i> and set them up in a valid way can be @@ -6930,7 +6933,7 @@ time with the <b class="command">setdriver</b> subcommand.</p></li></ol></div><p> We will provide detailed hints for each of these steps in the next few paragraphs. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2922300"></a>Identifying the Driver Files</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928178"></a>Identifying the Driver Files</h4></div></div><div></div></div><p> To find out about the driver files, you have two options: you could investigate the driver CD which comes with your printer. Study the <tt class="filename">*.inf</tt> file on the CD, if it is contained. This @@ -7033,7 +7036,7 @@ Windows 2000 changed this. While it still can use the Kernel Mode drivers (if this is enabled by the Admin), its native mode for printer drivers is User Mode execution. This requires drivers designed for this. These type of drivers install into the "3" subdirectory. -</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2922629"></a>Collecting the Driver Files from a Windows Host's +</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928506"></a>Collecting the Driver Files from a Windows Host's [print$] Share</h4></div></div><div></div></div><p> Now we need to collect all the driver files we identified. in our previous step. Where do we get them from? Well, why not retrieve them @@ -7069,7 +7072,7 @@ files for these architectures are in the WIN40/0/ subdir. Once we are complete, we can run <b class="command">smbclient ... put</b> to store the collected files on the Samba server's <i class="parameter"><tt>[print$]</tt></i> share. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2922781"></a>Depositing the Driver Files into [print$]</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928658"></a>Depositing the Driver Files into [print$]</h4></div></div><div></div></div><p> So, now we are going to put the driver files into the <i class="parameter"><tt>[print$]</tt></i> share. Remember, the UNIX path to this share has been defined previously in your @@ -7130,7 +7133,7 @@ re-location will automatically be done by the don't forget to also put the files for the Win95/98/ME architecture into the <tt class="filename">WIN40/</tt> subdirectory should you need them). -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923017"></a>Check if the Driver Files are there (with smbclient)</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928861"></a>Check if the Driver Files are there (with smbclient)</h4></div></div><div></div></div><p> For now we verify that our files are there. This can be done with <b class="command">smbclient</b> too (but of course you can log in via SSH also and do this through a standard UNIX shell access too): @@ -7183,7 +7186,7 @@ Point'n'Print. The reason is: Samba doesn't know yet that these files are something special, namely <span class="emphasis"><em>printer driver files</em></span> and it doesn't know yet to which print queue(s) these driver files belong. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923178"></a>Running <b class="command">rpcclient</b> with +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928977"></a>Running <b class="command">rpcclient</b> with <b class="command">adddriver</b></h4></div></div><div></div></div><p> So, next you must tell Samba about the special category of the files you just uploaded into the <i class="parameter"><tt>[print$]</tt></i> share. This @@ -7218,7 +7221,7 @@ files successfully, but render the driver unworkable. So take care! Hints about the syntax of the adddriver command are in the man page. The CUPS printing chapter of this HOWTO collection provides a more detailed description, if you should need it. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923278"></a>Check how Driver Files have been moved after +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929076"></a>Check how Driver Files have been moved after <b class="command">adddriver</b> finished</h4></div></div><div></div></div><p> One indication for Samba's recognition of the files as driver files is the <tt class="computeroutput">successfully installed</tt> message. @@ -7266,7 +7269,7 @@ subdirectory. You can check this again with </pre><p> Another verification is that the timestamp of the printing TDB files is now updated (and possibly their filesize has increased). -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923446"></a>Check if the Driver is recognized by Samba</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929200"></a>Check if the Driver is recognized by Samba</h4></div></div><div></div></div><p> Now the driver should be registered with Samba. We can easily verify this, and will do so in a moment. However, this driver is <span class="emphasis"><em>not yet</em></span> associated with a particular @@ -7310,7 +7313,7 @@ time. Our new driver only shows up for <span class="application">Windows NT 4.0 or 2000</span>. To have it present for <span class="application">Windows 95, 98 and ME</span> you'll have to repeat the whole procedure with the WIN40 architecture and subdirectory. -</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923650"></a>A side note: you are not bound to specific driver names</h4></div></div><div></div></div><p> +</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929404"></a>A side note: you are not bound to specific driver names</h4></div></div><div></div></div><p> You can name the driver as you like. If you repeat the <b class="command">adddriver</b> step, with the same files as before, but with a different driver name, it will work the same: @@ -7344,7 +7347,7 @@ repeatedly. Each run "consumes" the files you had put into the respective subdirectories. So you <span class="emphasis"><em>must</em></span> precede an <b class="command">smbclient ... put</b> command before each <b class="command">rpcclient ... adddriver</b>" command. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923761"></a>La Grande Finale: Running <b class="command">rpcclient</b> with +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929515"></a>La Grande Finale: Running <b class="command">rpcclient</b> with <b class="command">setdriver</b></h4></div></div><div></div></div><p> Samba still needs to know <span class="emphasis"><em>which</em></span> printer's driver this is. It needs to create a mapping of the driver to a printer, and @@ -7374,13 +7377,13 @@ known to Samba already. A bug in 2.2.x prevented Samba from recognizing freshly installed printers. You had to restart Samba, or at least send a HUP signal to all running smbd processes to work around this: -<b class="userinput"><tt>kill -HUP `pidof smbd`</tt></b>. </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923912"></a>"The Proof of the Pudding lies in the Eating" (Client Driver Install +<b class="userinput"><tt>kill -HUP `pidof smbd`</tt></b>. </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929667"></a>"The Proof of the Pudding lies in the Eating" (Client Driver Install Procedure)</h2></div></div><div></div></div><p> A famous philosopher said once: “<span class="quote">The Proof of the Pudding lies in the Eating</span>”. The proof for our setup lies in the printing. So let's install the printer driver onto the client PCs. This is not as straightforward as it may seem. Read on. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923933"></a>The first Client Driver Installation</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929688"></a>The first Client Driver Installation</h3></div></div><div></div></div><p> Especially important is the installation onto the first client PC (for each architectural platform separately). Once this is done correctly, all further clients are easy to setup and shouldn't need further @@ -7423,7 +7426,7 @@ Data" set is still incomplete. </p><p> You must now make sure that a valid "Device Mode" is set for the driver. Don't fear -- we will explain now what that means. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924131"></a>IMPORTANT! Setting Device Modes on new Printers</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929885"></a>IMPORTANT! Setting Device Modes on new Printers</h3></div></div><div></div></div><p> In order for a printer to be truly usable by a Windows NT/2K/XP client, it must possess: </p><div class="itemizedlist"><ul type="disc"><li><p>a valid <span class="emphasis"><em>Device Mode</em></span> generated by @@ -7495,7 +7498,7 @@ properties. Others may crash the client's spooler service. So use this parameter with caution. It is always better to have the client generate a valid device mode for the printer and store it on the server for you. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924420"></a>Further Client Driver Install Procedures</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930175"></a>Further Client Driver Install Procedures</h3></div></div><div></div></div><p> Every further driver may be done by any user, along the lines described above: Browse network, open printers folder on Samba server, right-click printer and choose <span class="guimenuitem">Connect...</span>. Once @@ -7515,7 +7518,7 @@ rundll32 shell32.dll,Control_RunDLL MAIN.CPL @2 You can enter the commands either inside a <span class="guilabel">DOS box</span> window or in the <span class="guimenuitem">Run command...</span> field from the <span class="guimenu">Start</span> menu. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924516"></a>Always make first Client Connection as root or "printer admin"</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930270"></a>Always make first Client Connection as root or "printer admin"</h3></div></div><div></div></div><p> After you installed the driver on the Samba server (in its <i class="parameter"><tt>[print$]</tt></i> share, you should always make sure that your first client installation completes correctly. Make it a habit for @@ -7547,7 +7550,7 @@ the same way (called <span class="emphasis"><em>Point'n'Print</em></span>) will have the same defaults set for them. If you miss this step you'll get a lot of helpdesk calls from your users. But maybe you like to talk to people.... ;-) -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2924657"></a>Other Gotchas</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930412"></a>Other Gotchas</h2></div></div><div></div></div><p> Your driver is installed. It is ready for <span class="emphasis"><em>Point'n'Print</em></span> installation by the clients now. You <span class="emphasis"><em>may</em></span> have tried to download and use it @@ -7557,7 +7560,7 @@ example, suppose you didn't manage to "set the defaults" on the printer, as advised in the preceding paragraphs? And your users complain about various issues (such as “<span class="quote">We need to set the paper size for each job from Letter to A4 and it won't store it!</span>”) -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924690"></a>Setting Default Print Options for the Client Drivers</h3></div></div><div></div></div><p> +</p><div xmlns:ns49="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930445"></a>Setting Default Print Options for the Client Drivers</h3></div></div><div></div></div><p> The last sentence might be viewed with mixed feelings by some users and admins. They have struggled for hours and hours and couldn't arrive at a point were their settings seemed to be saved. It is not their @@ -7567,7 +7570,7 @@ up when you right-click the printer name and select looking dialogs, each claiming that they help you to set printer options, in three different ways. Here is the definite answer to the "Samba Default Driver Setting FAQ": -</p><p><b>“<span class="quote">I can't set and save default print options +</p><ns49:p><b>“<span class="quote">I can't set and save default print options for all users on Win2K/XP! Why not?</span>”</b> How are you doing it? I bet the wrong way.... (it is not very easy to find out, though). There are 3 different ways to bring you to @@ -7578,34 +7581,34 @@ dialogs <span class="emphasis"><em>look</em></span> the same. Only one of them Administrator to do this for all users. Here is how I reproduce it in on XP Professional: -</p><div class="orderedlist"><ol type="A"><li><p>The first "wrong" way: +</ns49:p><div class="orderedlist"><ol type="A"><li xmlns:ns46=""><ns46:p>The first "wrong" way: -</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guiicon">Printers</span> +</ns46:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guiicon">Printers</span> folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and select in context menu <span class="guimenu">Printing Preferences...</span></p></li><li><p>Look at this dialog closely and remember what it looks -like.</p></li></ol></div><p> -</p></li><li><p>The second "wrong" way: +like.</p></li></ol></div><ns46:p> +</ns46:p></li><li xmlns:ns47=""><ns47:p>The second "wrong" way: -</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guimenu">Printers</span> +</ns47:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guimenu">Printers</span> folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and select in the context menu <span class="guimenuitem">Properties</span></p></li><li><p>Click on the <span class="guilabel">General</span> tab</p></li><li><p>Click on the button <span class="guibutton">Printing Preferences...</span></p></li><li><p>A new dialog opens. Keep this dialog open and go back -to the parent dialog.</p></li></ol></div><p> -</p></li><li><p>The third, the "correct" way: (should you do +to the parent dialog.</p></li></ol></div><ns47:p> +</ns47:p></li><li xmlns:ns48=""><ns48:p>The third, the "correct" way: (should you do this from the beginning, just carry out steps 1. and 2. from second "way" above) -</p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="guilabel">Advanced</span> +</ns48:p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="guilabel">Advanced</span> tab. (Hmmm... if everything is "Grayed Out", then you are not logged in as a user with enough privileges).</p></li><li><p>Click on the <span class="guibutton">Printing Defaults...</span> button.</p></li><li><p>On any of the two new tabs, click on the <span class="guilabel">Advanced...</span> button.</p></li><li><p>A new dialog opens. Compare this one to the other, -identical looking one from "B.5" or A.3".</p></li></ol></div><p> -</p></li></ol></div><p> +identical looking one from "B.5" or A.3".</p></li></ol></div><ns48:p> +</ns48:p></li></ol></div><ns49:p> Do you see any difference in the two settings dialogs? I don't either. However, only the last one, which you arrived at with steps @@ -7632,7 +7635,7 @@ try the same way with Win2k or WinXP. You wouldn't dream that there is now a different "clicking path" to arrive at an identically looking, but functionally different dialog to set defaults for all users! -</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>Try (on Win2000 and WinXP) to run this command (as a user +</ns49:p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>Try (on Win2000 and WinXP) to run this command (as a user with the right privileges): </p><p><b class="userinput"><tt> rundll32 printui.dll,PrintUIEntry /p /t3 /n\\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printersharename</tt></i> @@ -7646,7 +7649,7 @@ to see the tab with the <span class="guilabel">Printing Preferences...</span> button (the one which doesn't set system-wide defaults). You can start the commands from inside a DOS box" or from the <span class="guimenu">Start</span> -- <span class="guimenuitem">Run...</span> menu. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925127"></a>Supporting large Numbers of Printers</h3></div></div><div></div></div><p> +</p></div></div><div xmlns:ns50="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930879"></a>Supporting large Numbers of Printers</h3></div></div><div></div></div><p> One issue that has arisen during the recent development phase of Samba is the need to support driver downloads for 100's of printers. Using Windows NT APW here is somewhat awkward (to say the least). If you @@ -7683,9 +7686,9 @@ following is an example of how this could be accomplished: Driver Name: [myphantasydrivername] [....] -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b> cmd = enumprinters flags:[0x800000] @@ -7693,15 +7696,15 @@ following is an example of how this could be accomplished: description:[\\SAMBA-CUPS\dm9110,,110ppm HiVolume DANKA Stuttgart] comment:[110 ppm HiVolume DANKA Stuttgart] [....] -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'setdriver <i class="replaceable"><tt>dm9110</tt></i> "<i class="replaceable"><tt>Heidelberg Digimaster 9110 (PS)</tt></i>"'</tt></b> cmd = setdriver dm9110 Heidelberg Digimaster 9110 (PPD) Successfully set dm9110 to driver Heidelberg Digimaster 9110 (PS). -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b> cmd = enumprinters flags:[0x800000] @@ -7709,15 +7712,15 @@ following is an example of how this could be accomplished: description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),110ppm HiVolume DANKA Stuttgart] comment:[110ppm HiVolume DANKA Stuttgart] [....] -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'setdriver <i class="replaceable"><tt>dm9110</tt></i> <i class="replaceable"><tt>myphantasydrivername</tt></i>'</tt></b> cmd = setdriver dm9110 myphantasydrivername Successfully set dm9110 to myphantasydrivername. -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b> cmd = enumprinters flags:[0x800000] @@ -7733,7 +7736,7 @@ commas in the "description" field). After the <b class="command">setdriver</b> command succeeded, all is well. (The CUPS Printing chapter has more info about the installation of printer drivers with the help of <b class="command">rpcclient</b>). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925430"></a>Adding new Printers with the Windows NT APW</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931181"></a>Adding new Printers with the Windows NT APW</h3></div></div><div></div></div><p> By default, Samba exhibits all printer shares defined in <tt class="filename">smb.conf</tt> in the <span class="guiicon">Printers...</span> folder. Also located in this folder @@ -7779,7 +7782,7 @@ user, not necessarily a root account. A <i class="parameter"><tt>map to guest = user</tt></i> may have connected you unwittingly under the wrong privilege; you should check it by using the <b class="command">smbstatus</b> command. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925673"></a>Weird Error Message <span class="errorname">Cannot connect under a +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931425"></a>Weird Error Message <span class="errorname">Cannot connect under a different Name</span></h3></div></div><div></div></div><p> Once you are connected with the wrong credentials, there is no means to reverse the situation other than to close all Explorer windows, and @@ -7809,7 +7812,7 @@ message. You close all Explorer Windows and start it again. You try to connect - and this times it works! Windows seems to cache connection info somewhere and doesn't keep it up to date (if you are unlucky you might need to reboot to get rid of the error message). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925771"></a>Be careful when assembling Driver Files</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931523"></a>Be careful when assembling Driver Files</h3></div></div><div></div></div><p> You need to be very careful when you take notes about the files and belonging to a particular driver. Don't confuse the files for driver version "0" (for Win95/98/ME, going into @@ -7950,7 +7953,7 @@ In my example were even more differences than shown here. Conclusion: you must be very careful to select the correct driver files for each driver version. Don't rely on the names alone. Don't interchange files belonging to different driver versions. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926117"></a>Samba and Printer Ports</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931794"></a>Samba and Printer Ports</h3></div></div><div></div></div><p> Windows NT/2000 print servers associate a port with each printer. These normally take the form of <tt class="filename">LPT1:</tt>, <tt class="filename">COM1:</tt>, <tt class="filename">FILE:</tt>, etc. Samba @@ -7971,14 +7974,14 @@ another (“<span class="quote">My users and my Boss should not know that th working with Samba</span>”), possesses a <i class="parameter"><tt>enumports command</tt></i> which can be used to define an external program that generates a listing of ports on a system. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926188"></a>Avoiding the most common Misconfigurations of the Client Driver</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931864"></a>Avoiding the most common Misconfigurations of the Client Driver</h3></div></div><div></div></div><p> So - printing works, but there are still problems. Most jobs print well, some don't print at all. Some jobs have problems with fonts, which don't look good at all. Some jobs print fast, and some are dead-slow. We can't cover it all; but we want to encourage you to read the little paragraph about "Avoiding the wrong PostScript Driver Settings" in the CUPS Printing part of this document. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926210"></a>The Imprints Toolset</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931887"></a>The Imprints Toolset</h2></div></div><div></div></div><p> The Imprints tool set provides a UNIX equivalent of the Windows NT Add Printer Wizard. For complete information, please refer to the Imprints web site @@ -7995,20 +7998,20 @@ coordinate your efforts on the samba-technical mailing list. The toolset is still in usable form; but only for a series of older printer models, where there are prepared packages to use. Packages for more up to date print devices are needed if Imprints should have a -future.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926256"></a>What is Imprints?</h3></div></div><div></div></div><p> +future.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931932"></a>What is Imprints?</h3></div></div><div></div></div><p> Imprints is a collection of tools for supporting these goals: </p><div class="itemizedlist"><ul type="disc"><li><p>Providing a central repository information regarding Windows NT and 95/98 printer driver packages</p></li><li><p>Providing the tools necessary for creating the Imprints printer driver packages.</p></li><li><p>Providing an installation client which will obtain printer drivers from a central internet (or intranet) Imprints Server repository and install them on remote Samba and Windows NT4 print -servers.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926297"></a>Creating Printer Driver Packages</h3></div></div><div></div></div><p> +servers.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931973"></a>Creating Printer Driver Packages</h3></div></div><div></div></div><p> The process of creating printer driver packages is beyond the scope of this document (refer to Imprints.txt also included with the Samba distribution for more information). In short, an Imprints driver package is a gzipped tarball containing the driver files, related INF files, and a control file needed by the installation client. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926316"></a>The Imprints Server</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931992"></a>The Imprints Server</h3></div></div><div></div></div><p> The Imprints server is really a database server that may be queried via standard HTTP mechanisms. Each printer entry in the database has an associated URL for the actual downloading of the package. Each @@ -8016,7 +8019,7 @@ package is digitally signed via GnuPG which can be used to verify that package downloaded is actually the one referred in the Imprints database. It is strongly recommended that this security check <span class="emphasis"><em>not</em></span> be disabled. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926340"></a>The Installation Client</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932017"></a>The Installation Client</h3></div></div><div></div></div><p> More information regarding the Imprints installation client is available in the <tt class="filename">Imprints-Client-HOWTO.ps</tt> file included with the imprints source package. @@ -8031,10 +8034,10 @@ remote Samba and Windows NT print servers. </p><p> The basic installation process is in four steps and perl code is wrapped around smbclient and rpcclient -</p><div class="itemizedlist"><ul type="disc"><li><p> +</p><div class="itemizedlist"><ul type="disc"><li xmlns:ns51=""><ns51:p> foreach (supported architecture for a given driver) - </p><div class="orderedlist"><ol type="1"><li><p>rpcclient: Get the appropriate upload directory on the remote server</p></li><li><p>smbclient: Upload the driver files</p></li><li><p>rpcclient: Issues an AddPrinterDriver() MS-RPC</p></li></ol></div><p> - </p></li><li><p>rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer</p></li></ul></div><p> + </ns51:p><div class="orderedlist"><ol type="1"><li><p>rpcclient: Get the appropriate upload directory on the remote server</p></li><li><p>smbclient: Upload the driver files</p></li><li><p>rpcclient: Issues an AddPrinterDriver() MS-RPC</p></li></ol></div><ns51:p> + </ns51:p></li><li><p>rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer</p></li></ul></div><p> One of the problems encountered when implementing the Imprints tool set was the name space issues between various supported client architectures. For example, Windows NT includes a driver named "Apple @@ -8057,7 +8060,7 @@ if is has not already been installed? The way of sidestepping this limitation is to require that all Imprints printer driver packages include both the Intel Windows NT and 95/98 printer drivers and that NT driver is installed first. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926492"></a>Add Network Printers at Logon without User Interaction</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932169"></a>Add Network Printers at Logon without User Interaction</h2></div></div><div></div></div><p> The following MS Knowledge Base article may be of some help if you need to handle Windows 2000 clients: <span class="emphasis"><em>How to Add Printers with No User Interaction in Windows 2000.</em></span> ( <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;189105</a> @@ -8132,7 +8135,7 @@ at logon time will not really be noticeable. Printers can be centrally added, changed, and deleted at will on the server with no user intervention required on the clients (you just need to keep the logon scripts up to date). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926822"></a>The <b class="command">addprinter</b> command</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932498"></a>The <b class="command">addprinter</b> command</h2></div></div><div></div></div><p> The <b class="command">addprinter</b> command can be configured to be a shell script or program executed by Samba. It is triggered by running the APW from a client against the Samba print server. The APW asks the @@ -8144,7 +8147,7 @@ on legacy systems, or execute the <b class="command">lpadmin</b> command on more modern systems) and create the associated share in , then the APW will in effect really create a new printer on Samba and the UNIX print subsystem! -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926867"></a>Migration of "Classical" printing to Samba-3</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932543"></a>Migration of "Classical" printing to Samba-3</h2></div></div><div></div></div><p> The basic "NT-style" printer driver management has not changed considerably in 3.0 over the 2.2.x releases (apart from many small improvements). Here migration should be quite easy, especially if you @@ -8181,12 +8184,12 @@ rpcclient. See the Imprints installation client at: <a href="http://imprints.sourceforge.net/" target="_top"><span class="emphasis"><em>http://imprints.sourceforge.net/</em></span></a> </p><p> for an example. See also the discussion of rpcclient usage in the -"CUPS Printing" section.</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2927036"></a>Publishing Printer Information in Active Directory or LDAP</h2></div></div><div></div></div><p> +"CUPS Printing" section.</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932712"></a>Publishing Printer Information in Active Directory or LDAP</h2></div></div><div></div></div><p> We will publish an update to this section shortly. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2927051"></a>Common Errors and Problems</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932726"></a>Common Errors and Problems</h2></div></div><div></div></div><p> Here are a few typical errors and problems people have encountered. You can avoid them. Read on. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927064"></a>I give my root password but I don't get access</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932739"></a>I give my root password but I don't get access</h3></div></div><div></div></div><p> Don't confuse the root password which is valid for the Unix system (and in most cases stored in the form of a one-way hash in a file named <tt class="filename">/etc/shadow</tt>) with the password used to @@ -8194,28 +8197,28 @@ authenticate against Samba!. Samba doesn't know the UNIX password; for root to access Samba resources via Samba-type access, a Samba account for root must be created first. This is often done with the <b class="command">smbpasswd</b> command. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927097"></a>My printjobs get spooled into the spooling directory, but then get lost</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932773"></a>My printjobs get spooled into the spooling directory, but then get lost</h3></div></div><div></div></div><p> Don't use the existing Unix print system spool directory for the Samba spool directory. It may seem convenient and a saving of space, but it only leads to problems. The two <span class="emphasis"><em>must</em></span> be separate. -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="CUPS-printing"></a>Chapter19.CUPS Printing Support in Samba 3.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email"><<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Ciprian</span> <span class="surname">Vizitiu</span></h3><span class="contrib">drawings</span><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:CVizitiu@gbif.org">CVizitiu@gbif.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> (3 June 2003) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2936290">Introduction</a></dt><dd><dl><dt><a href="#id2936298">Features and Benefits</a></dt><dt><a href="#id2936350">Overview</a></dt></dl></dd><dt><a href="#id2936405">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2936484">Linking of smbd with libcups.so</a></dt><dt><a href="#id2936628">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2936710">More complex smb.conf Settings for -CUPS</a></dt></dl></dd><dt><a href="#id2936828">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2936848">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="#id2936875">CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2936912">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2936970">Explicitly enable "raw" printing for -application/octet-stream!</a></dt><dt><a href="#id2937131">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2937224">Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2937300">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2937344">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2937445">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2937533">PostScript and Ghostscript</a></dt><dt><a href="#id2937630">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2937742">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2937813">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2937902">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2937925">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2938065">MIME types and CUPS Filters</a></dt><dt><a href="#id2938252">MIME type Conversion Rules</a></dt><dt><a href="#id2938369">Filter Requirements</a></dt><dt><a href="#id2938539">Prefilters</a></dt><dt><a href="#id2938624">pstops</a></dt><dt><a href="#id2938727">pstoraster</a></dt><dt><a href="#id2938883">imagetops and imagetoraster</a></dt><dt><a href="#id2938940">rasterto [printers specific]</a></dt><dt><a href="#id2939024">CUPS Backends</a></dt><dt><a href="#id2939336">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2939448">The Complete Picture</a></dt><dt><a href="#id2939464">mime.convs</a></dt><dt><a href="#id2939517">"Raw" printing</a></dt><dt><a href="#id2939571">"application/octet-stream" printing</a></dt><dt><a href="#id2939786">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2940015">Difference between cupsomatic/foomatic-rip and -native CUPS printing</a></dt><dt><a href="#id2940170">Examples for filtering Chains</a></dt><dt><a href="#id2940401">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2940530">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2940605">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2940620">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2940659">Driver Execution on the Client</a></dt><dt><a href="#id2940731">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2940794">Network Printing (Windows clients -- UNIX/Samba Print -Servers)</a></dt><dd><dl><dt><a href="#id2940814">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2940978">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2941054">Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2941110">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2941150">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2941216">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2941233">Printer Drivers running in "Kernel Mode" cause many -Problems</a></dt><dt><a href="#id2941268">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2941289">CUPS: a "Magical Stone"?</a></dt><dt><a href="#id2941316">PostScript Drivers with no major problems -- even in Kernel -Mode</a></dt></dl></dd><dt><a href="#id2941369"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2941388">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2941480">Prepare your smb.conf for -cupsaddsmb</a></dt><dt><a href="#id2941526">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="#id2941724">Recognize the different Driver Files</a></dt><dt><a href="#id2941782">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2941814">ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"</a></dt><dt><a href="#id2941864">Caveats to be considered</a></dt><dt><a href="#id2942086">What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="#id2942268">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="#id2942369">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="#id2942596">Understanding cupsaddsmb</a></dt><dt><a href="#id2942690">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2942777">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2942812">cupsaddsmb Flowchart</a></dt><dt><a href="#id2942865">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2942978">Avoiding critical PostScript Driver Settings on the -Client</a></dt></dl></dd><dt><a href="#id2943112">Installing PostScript Driver Files manually (using -rpcclient)</a></dt><dd><dl><dt><a href="#id2943227">A Check of the rpcclient man Page</a></dt><dt><a href="#id2943340">Understanding the rpcclient man Page</a></dt><dt><a href="#id2943429">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2943519">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2943682">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2944334">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2944435">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2944537">Trivial DataBase Files</a></dt><dt><a href="#id2944608">Binary Format</a></dt><dt><a href="#id2944670">Losing *.tdb Files</a></dt><dt><a href="#id2944728">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2944795">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2944903">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2945532">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2945993">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2946024">Setting up Quotas</a></dt><dt><a href="#id2946056">Correct and incorrect Accounting</a></dt><dt><a href="#id2946097">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2946169">The page_log File Syntax</a></dt><dt><a href="#id2946270">Possible Shortcomings</a></dt><dt><a href="#id2946341">Future Developments</a></dt><dt><a href="#id2946390">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2946404">Additional Material</a></dt><dt><a href="#id2946598">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2946644">CUPS Configuration Settings explained</a></dt><dt><a href="#id2946726">Pre-conditions</a></dt><dt><a href="#id2946787">Manual Configuration</a></dt></dl></dd><dt><a href="#id2946805">When not to use Samba to print to -CUPS</a></dt><dt><a href="#id2946822">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2946857">Where to find Documentation</a></dt><dt><a href="#id2946870">How to ask for Help</a></dt><dt><a href="#id2946883">Where to find Help</a></dt></dl></dd><dt><a href="#id2946896">Appendix</a></dt><dd><dl><dt><a href="#id2946904">Printing from CUPS to Windows attached -Printers</a></dt><dt><a href="#id2947118">More CUPS filtering Chains</a></dt><dt><a href="#id2947424">Trouble Shooting Guidelines to fix typical Samba printing -Problems</a></dt><dt><a href="#id2948546">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936290"></a>Introduction</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936298"></a>Features and Benefits</h3></div></div><div></div></div><p> +</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="CUPS-printing"></a>Chapter19.CUPS Printing Support in Samba 3.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email"><<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Ciprian</span> <span class="surname">Vizitiu</span></h3><span class="contrib">drawings</span><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:CVizitiu@gbif.org">CVizitiu@gbif.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> (3 June 2003) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2939792">Introduction</a></dt><dd><dl><dt><a href="#id2939799">Features and Benefits</a></dt><dt><a href="#id2939849">Overview</a></dt></dl></dd><dt><a href="#id2939900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2939980">Linking of smbd with libcups.so</a></dt><dt><a href="#id2932886">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2932950">More complex smb.conf Settings for +CUPS</a></dt></dl></dd><dt><a href="#id2933049">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2933069">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="#id2933096">CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2933133">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2933191">Explicitly enable "raw" printing for +application/octet-stream!</a></dt><dt><a href="#id2933352">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2933445">Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2933520">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2933565">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2933663">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2933735">PostScript and Ghostscript</a></dt><dt><a href="#id2933832">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2933927">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2946744">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2946833">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2946856">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2946994">MIME types and CUPS Filters</a></dt><dt><a href="#id2947182">MIME type Conversion Rules</a></dt><dt><a href="#id2947298">Filter Requirements</a></dt><dt><a href="#id2947467">Prefilters</a></dt><dt><a href="#id2947552">pstops</a></dt><dt><a href="#id2947655">pstoraster</a></dt><dt><a href="#id2947811">imagetops and imagetoraster</a></dt><dt><a href="#id2947866">rasterto [printers specific]</a></dt><dt><a href="#id2947951">CUPS Backends</a></dt><dt><a href="#id2948265">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2948368">The Complete Picture</a></dt><dt><a href="#id2948383">mime.convs</a></dt><dt><a href="#id2948436">"Raw" printing</a></dt><dt><a href="#id2948490">"application/octet-stream" printing</a></dt><dt><a href="#id2948706">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2948933">Difference between cupsomatic/foomatic-rip and +native CUPS printing</a></dt><dt><a href="#id2949090">Examples for filtering Chains</a></dt><dt><a href="#id2949319">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2949444">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2949506">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2949522">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2949561">Driver Execution on the Client</a></dt><dt><a href="#id2949620">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2949683">Network Printing (Windows clients -- UNIX/Samba Print +Servers)</a></dt><dd><dl><dt><a href="#id2949704">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2949864">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2949942">Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2949997">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2950038">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2950103">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2950120">Printer Drivers running in "Kernel Mode" cause many +Problems</a></dt><dt><a href="#id2950155">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2950176">CUPS: a "Magical Stone"?</a></dt><dt><a href="#id2950203">PostScript Drivers with no major problems -- even in Kernel +Mode</a></dt></dl></dd><dt><a href="#id2950237"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2950256">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2950347">Prepare your smb.conf for +cupsaddsmb</a></dt><dt><a href="#id2950394">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="#id2950591">Recognize the different Driver Files</a></dt><dt><a href="#id2950649">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2950682">ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"</a></dt><dt><a href="#id2950732">Caveats to be considered</a></dt><dt><a href="#id2950953">What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="#id2951134">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="#id2951235">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="#id2951378">Understanding cupsaddsmb</a></dt><dt><a href="#id2951472">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2951559">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2951594">cupsaddsmb Flowchart</a></dt><dt><a href="#id2951645">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2951760">Avoiding critical PostScript Driver Settings on the +Client</a></dt></dl></dd><dt><a href="#id2951894">Installing PostScript Driver Files manually (using +rpcclient)</a></dt><dd><dl><dt><a href="#id2952009">A Check of the rpcclient man Page</a></dt><dt><a href="#id2952121">Understanding the rpcclient man Page</a></dt><dt><a href="#id2952200">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2952290">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2952452">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2953072">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2953174">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2953277">Trivial DataBase Files</a></dt><dt><a href="#id2953347">Binary Format</a></dt><dt><a href="#id2953409">Losing *.tdb Files</a></dt><dt><a href="#id2953468">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2953530">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2953636">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2954264">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2954722">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2954753">Setting up Quotas</a></dt><dt><a href="#id2954784">Correct and incorrect Accounting</a></dt><dt><a href="#id2954825">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2954897">The page_log File Syntax</a></dt><dt><a href="#id2954998">Possible Shortcomings</a></dt><dt><a href="#id2955070">Future Developments</a></dt><dt><a href="#id2955118">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2955133">Additional Material</a></dt><dt><a href="#id2955326">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2955372">CUPS Configuration Settings explained</a></dt><dt><a href="#id2955454">Pre-conditions</a></dt><dt><a href="#id2955515">Manual Configuration</a></dt></dl></dd><dt><a href="#id2955533">When not to use Samba to print to +CUPS</a></dt><dt><a href="#id2955550">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2955585">Where to find Documentation</a></dt><dt><a href="#id2955598">How to ask for Help</a></dt><dt><a href="#id2955611">Where to find Help</a></dt></dl></dd><dt><a href="#id2955625">Appendix</a></dt><dd><dl><dt><a href="#id2955632">Printing from CUPS to Windows attached +Printers</a></dt><dt><a href="#id2955826">More CUPS filtering Chains</a></dt><dt><a href="#id2956080">Trouble Shooting Guidelines to fix typical Samba printing +Problems</a></dt><dt><a href="#id2957186">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2939792"></a>Introduction</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939799"></a>Features and Benefits</h3></div></div><div></div></div><p> The Common Unix Print System (<a href="http://www.cups.org/" target="_top">CUPS</a>) has become very popular. All big Linux distributions now ship it as their default printing system. But to many it is still a very mystical tool. Normally it @@ -8240,7 +8243,7 @@ Problems</a></dt><dt><a href="#id2948546">An Overview of the CUPS Printing Proce contained. But lets start with the most basic things first. Maybe this is all you need for now. Then you can skip most of the other paragraphs. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936350"></a>Overview</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939849"></a>Overview</h3></div></div><div></div></div><p> CUPS is more than just a print spooling system. It is a complete printer management system that complies with the new IPP (<span class="emphasis"><em>Internet Printing Protocol</em></span>). IPP is an industry @@ -8260,7 +8263,7 @@ Problems</a></dt><dt><a href="#id2948546">An Overview of the CUPS Printing Proce argue that CUPS is better! In any case, let us now move on to explore how one may configure CUPS for interfacing with MS Windows print clients via Samba. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936405"></a>Basic Configuration of CUPS support</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2939900"></a>Basic Configuration of CUPS support</h2></div></div><div></div></div><p> Printing with CUPS in the most basic <tt class="filename">smb.conf</tt> setup in Samba 3.0 (as was true for 2.2.x) only needs two settings: <i class="parameter"><tt>printing = cups</tt></i> and <i class="parameter"><tt>printcap @@ -8276,7 +8279,7 @@ Problems</a></dt><dt><a href="#id2948546">An Overview of the CUPS Printing Proce details see <b class="command">man cupsd.conf</b> and other CUPS-related documentation, like the wealth of documents on your CUPS server itself: <a href="http://localhost:631/documentation.html" target="_top">http://localhost:631/documentation.html</a>. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936484"></a>Linking of smbd with libcups.so</h3></div></div><div></div></div><p> + </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939980"></a>Linking of smbd with libcups.so</h3></div></div><div></div></div><p> Samba has a very special relationship to CUPS. The reason is: Samba can be compiled with CUPS library support. Most recent installations have this support enabled, and per default CUPS linking is compiled @@ -8313,7 +8316,7 @@ Problems</a></dt><dt><a href="#id2948546">An Overview of the CUPS Printing Proce <i class="parameter"><tt>print command</tt></i>; other commands are <i class="parameter"><tt>lppause command, lpresume command, lpq command, lprm command, queuepause command </tt></i> and <i class="parameter"><tt>queue resume - command</tt></i>).</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936628"></a>Simple <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p> + command</tt></i>).</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932886"></a>Simple <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p> To summarize, here is the simplest printing-related setup for <tt class="filename">smb.conf</tt> to enable basic CUPS support: </p><pre class="screen"> @@ -8348,7 +8351,7 @@ Problems</a></dt><dt><a href="#id2948546">An Overview of the CUPS Printing Proce printer is not a PostScript device, the print data stream is "binary", sensible only for the target printer. Read on to learn which problem this may cause and how to avoid it. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936710"></a>More complex <tt class="filename">smb.conf</tt> Settings for + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932950"></a>More complex <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p> Here is a slightly more complex printing-related setup for <tt class="filename">smb.conf</tt>. It enables general CUPS printing @@ -8399,13 +8402,13 @@ allowing access from three hosts. To prevent CUPS kicking in and taking over the print jobs for that share, we need to set <i class="parameter"><tt>printing = sysv</tt></i> and <i class="parameter"><tt>printcap = lpstat</tt></i>. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936828"></a>Advanced Configuration</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933049"></a>Advanced Configuration</h2></div></div><div></div></div><p> Before we dive into all the configuration options, let's clarify a few points. <span class="emphasis"><em>Network printing needs to be organized and setup correctly</em></span>. Often this is not done correctly. Legacy systems or small LANs in business environments often lack a clear design and good housekeeping. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936848"></a>Central spooling vs. "Peer-to-Peer" printing</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933069"></a>Central spooling vs. "Peer-to-Peer" printing</h3></div></div><div></div></div><p> Many small office or home networks, as well as badly organized larger environments, allow each client a direct access to available network printers. Generally, this is a bad idea. It often blocks one client's @@ -8417,7 +8420,7 @@ is the usage of a "print server": it routes all jobs through one central system, which responds immediately, takes jobs from multiple concurrent clients at the same time and in turn transfers them to the printer(s) in the correct order. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936875"></a>CUPS/Samba as a "spooling-only" Print Server; "raw" printing +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933096"></a>CUPS/Samba as a "spooling-only" Print Server; "raw" printing with Vendor Drivers on Windows Clients</h3></div></div><div></div></div><p> Most traditionally configured Unix print servers acting on behalf of Samba's Windows clients represented a really simple setup. Their only @@ -8436,7 +8439,7 @@ sent in a format that is suitable for direct delivery to the printer. Clients need to run the vendor-provided drivers to do this. In this case CUPS will NOT do any print file format conversion work. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936912"></a>Driver Installation Methods on Windows Clients</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933133"></a>Driver Installation Methods on Windows Clients</h3></div></div><div></div></div><p> The printer drivers on the Windows clients may be installed in two functionally different ways: </p><div class="itemizedlist"><ul type="disc"><li><p>manually install the drivers locally on each client, @@ -8449,7 +8452,7 @@ first time they access the printer; with this method NT/2K/XP clients use the <span class="emphasis"><em>SPOOLSS/MS-RPC</em></span> type printing calls.</p></li></ul></div><p> The second method is recommended for use over the first. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936970"></a>Explicitly enable "raw" printing for +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933191"></a>Explicitly enable "raw" printing for <span class="emphasis"><em>application/octet-stream</em></span>!</h3></div></div><div></div></div><p> If you use the first option (drivers are installed on the client side), there is one setting to take care of: CUPS needs to be told @@ -8498,7 +8501,7 @@ This is all you need to know to get the CUPS/Samba combo printing locally installed. If you are not interested in background information about more advanced CUPS/Samba printing, simply skip the remaining sections of this chapter. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937131"></a>Three familiar Methods for driver upload plus a new one</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933352"></a>Three familiar Methods for driver upload plus a new one</h3></div></div><div></div></div><p> If you want to use the MS-RPC type printing, you must upload the drivers onto the Samba server first (<i class="parameter"><tt>[print$]</tt></i> share). For a discussion on how to deposit printer drivers on the @@ -8520,7 +8523,7 @@ utility.</p></li></ul></div><p> cupsaddsmb is discussed in much detail further below. But we will first explore the CUPS filtering system and compare the Windows and UNIX printing architectures. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2937224"></a>Using CUPS/Samba in an advanced Way -- intelligent printing +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933445"></a>Using CUPS/Samba in an advanced Way -- intelligent printing with PostScript Driver Download</h2></div></div><div></div></div><p> Still reading on? Good. Let's go into more detail then. We now know how to set up a "dump" printserver, that is, a server which is spooling @@ -8545,7 +8548,7 @@ how CUPS works and how you can enable its features. What follows is the comparison of some fundamental concepts for Windows and Unix printing; then is the time for a description of the CUPS filtering system, how it works and how you can tweak it. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937300"></a>GDI on Windows -- PostScript on Unix</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933520"></a>GDI on Windows -- PostScript on Unix</h3></div></div><div></div></div><p> Network printing is one of the most complicated and error-prone day-to-day tasks any user or an administrator may encounter. This is true for all OS platforms. And there are reasons for this. @@ -8561,7 +8564,7 @@ into semi-official "standards", by being the most widely used PDLs many manufacturers who "roll their own" (their reasons may be unacceptable license fees for using printer-embedded PostScript interpreters, etc.). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937344"></a>Windows Drivers, GDI and EMF</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns52="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933565"></a>Windows Drivers, GDI and EMF</h3></div></div><div></div></div><p> In Windows OS, the format conversion job is done by the printer drivers. On MS Windows OS platforms all application programmers have at their disposal a built-in API, the GDI (<span class="emphasis"><em>Graphical Device @@ -8583,10 +8586,10 @@ put paper and screen output on a common foundation for their (BSD-Unix-based, did you know??) Mac OS X and Darwin Operating Systems.Their <span class="emphasis"><em>Core Graphic Engine</em></span> uses a <span class="emphasis"><em>PDF</em></span> derivate for all display work. -</p></div><p> +</p></div><ns52:p> -</p><div class="figure"><a name="id2937409"></a><p class="title"><b>Figure19.1.Windows Printing to a local Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="Windows Printing to a local Printer"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937445"></a>Unix Printfile Conversion and GUI Basics</h3></div></div><div></div></div><p> +</ns52:p><div class="figure"><a name="id2933630"></a><p class="title"><b>Figure19.1.Windows Printing to a local Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="Windows Printing to a local Printer"></div></div><ns52:p> +</ns52:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933663"></a>Unix Printfile Conversion and GUI Basics</h3></div></div><div></div></div><p> In Unix and Linux, there is no comparable layer built into the OS kernel(s) or the X (screen display) server. Every application is responsible for itself to create its print output. Fortunately, most @@ -8622,7 +8625,7 @@ form and you will be reading its PostScript code, the language instructions which need to be interpreted by a rasterizer. Rasterizers produce pixel images, which may be displayed on screen by a viewer program or on paper by a printer. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937533"></a>PostScript and Ghostscript</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns53="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933735"></a>PostScript and Ghostscript</h3></div></div><div></div></div><p> So, Unix is lacking a common ground for printing on paper and displaying on screen. Despite this unfavorable legacy for Unix, basic printing is fairly easy: if you have PostScript printers at your @@ -8641,9 +8644,9 @@ options a printer supports: duplexing, stapling, punching... Therefore Unix users for a long time couldn't choose many of the supported device and job options, unlike Windows or Apple users. But now there is CUPS.... ;-) -</p></div><p> -</p><div class="figure"><a name="id2937580"></a><p class="title"><b>Figure19.2.Printing to a Postscript Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/2small.png" alt="Printing to a Postscript Printer"></div></div><p> -</p><p> +</p></div><ns53:p> +</ns53:p><div class="figure"><a name="id2933781"></a><p class="title"><b>Figure19.2.Printing to a Postscript Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/2small.png" alt="Printing to a Postscript Printer"></div></div><ns53:p> +</ns53:p><p> However, there are other types of printers out there. These don't know how to print PostScript. They use their own <span class="emphasis"><em>Page Description Language</em></span> (PDL, often proprietary). To print to them is much @@ -8651,7 +8654,7 @@ more demanding. Since your Unix applications mostly produce PostScript, and since these devices don't understand PostScript, you need to convert the printfiles to a format suitable for your printer on the host, before you can send it away. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937630"></a>Ghostscript -- the Software RIP for non-PostScript Printers</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns54="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933832"></a>Ghostscript -- the Software RIP for non-PostScript Printers</h3></div></div><div></div></div><p> Here is where <span class="emphasis"><em>Ghostscript</em></span> kicks in. Ghostscript is the traditional (and quite powerful) PostScript interpreter used on Unix platforms. It is a RIP in software, capable to do a @@ -8659,9 +8662,9 @@ Unix platforms. It is a RIP in software, capable to do a spectrum of hardware devices as well as software file formats. Ghostscript technology and drivers is what enables PostScript printing to non-PostScript hardware. -</p><p> -</p><div class="figure"><a name="id2937660"></a><p class="title"><b>Figure19.3.Ghostscript as a RIP for non-postscript printers</b></p><div class="mediaobject"><img src="projdoc/imagefiles/3small.png" alt="Ghostscript as a RIP for non-postscript printers"></div></div><p> -</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> +</p><ns54:p> +</ns54:p><div class="figure"><a name="id2933861"></a><p class="title"><b>Figure19.3.Ghostscript as a RIP for non-postscript printers</b></p><div class="mediaobject"><img src="projdoc/imagefiles/3small.png" alt="Ghostscript as a RIP for non-postscript printers"></div></div><ns54:p> +</ns54:p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> Use the "gs -h" command to check for all built-in "devices" of your Ghostscript version. If you specify e.g. a parameter of <i class="parameter"><tt>-sDEVICE=png256</tt></i> on your Ghostscript command @@ -8678,7 +8681,7 @@ enhancement over GNU Ghostscript, with lots of bug-fixes, additional devices and improvements. It is jointly maintained by developers from CUPS, Gimp-Print, MandrakeSoft, SuSE, RedHat and Debian. It includes the "cups" device (essential to print to non-PS printers from CUPS). -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937742"></a>PostScript Printer Description (PPD) Specification</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933927"></a>PostScript Printer Description (PPD) Specification</h3></div></div><div></div></div><p> While PostScript in essence is a <span class="emphasis"><em>Page Description Language</em></span> (PDL) to represent the page layout in a <span class="emphasis"><em>device independent</em></span> way, real world print jobs are @@ -8709,7 +8712,7 @@ for achieving a certain print job output (e.g. duplexed, stapled and punched) on a specific target machine, may not print as expected, or may not be printable at all on other models; it also may not be fit for further processing by software (e.g. by a PDF distilling program). -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937813"></a>CUPS can use all Windows-formatted Vendor PPDs</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946744"></a>CUPS can use all Windows-formatted Vendor PPDs</h3></div></div><div></div></div><p> CUPS can handle all spec-compliant PPDs as supplied by the manufacturers for their PostScript models. Even if a Unix/Linux-illiterate vendor might not have mentioned our favorite @@ -8736,7 +8739,7 @@ your LAN has the PostScript driver installed, just use access the Windows directory where all printer driver files are stored. First look in the <tt class="filename">W32X86/2</tt> subdir for the PPD you are seeking. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937902"></a>CUPS also uses PPDs for non-PostScript Printers</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946833"></a>CUPS also uses PPDs for non-PostScript Printers</h3></div></div><div></div></div><p> CUPS also uses specially crafted PPDs to handle non-PostScript printers. These PPDs are usually not available from the vendors (and no, you can't just take the PPD of a Postscript printer with the same @@ -8744,7 +8747,7 @@ model name and hope it works for the non-PostScript version too). To understand how these PPDs work for non-PS printers we first need to dive deeply into the CUPS filtering and file format conversion architecture. Stay tuned. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2937925"></a>The CUPS Filtering Architecture</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946856"></a>The CUPS Filtering Architecture</h2></div></div><div></div></div><p> The core of the CUPS filtering system is based on <span class="emphasis"><em>Ghostscript</em></span>. In addition to Ghostscript, CUPS uses some other filters of its own. You (or your OS vendor) may have @@ -8786,7 +8789,7 @@ others. However, even for Foomatic/cupsomatic usage, best results and broadest printer model support is provided by ESP Ghostscript (more about cupsomatic/Foomatic, particularly the new version called now <span class="emphasis"><em>foomatic-rip</em></span>, follows below). -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938065"></a>MIME types and CUPS Filters</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946994"></a>MIME types and CUPS Filters</h3></div></div><div></div></div><p> CUPS reads the file <tt class="filename">/etc/cups/mime.types</tt> (and all other files carrying a <tt class="filename">*.types</tt> suffix in the same directory) upon startup. These files contain the MIME @@ -8839,7 +8842,7 @@ CUPS can handle ASCII text, HP-GL, PDF, PostScript, DVI and a lot of image formats (GIF. PNG, TIFF, JPEG, Photo-CD, SUN-Raster, PNM, PBM, SGI-RGB and some more) and their associated MIME types with its filters. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938252"></a>MIME type Conversion Rules</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947182"></a>MIME type Conversion Rules</h3></div></div><div></div></div><p> CUPS reads the file <tt class="filename">/etc/cups/mime.convs</tt> (and all other files named with a <tt class="filename">*.convs</tt> suffix in the same directory) upon startup. These files contain @@ -8880,7 +8883,7 @@ The last two examples name the <span class="emphasis"><em>texttops</em></span> f to work on "text/plain" as well as on "application/x-shell". (Hint: this differentiation is needed for the syntax highlighting feature of "texttops"). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938369"></a>Filter Requirements</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947298"></a>Filter Requirements</h3></div></div><div></div></div><p> There are many more combinations named in mime.convs. However, you are not limited to use the ones pre-defined there. You can plug in any filter you like into the CUPS framework. It must meet, or must be made @@ -8901,7 +8904,7 @@ attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The string fr attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The job options</p></dd><dt><span class="term">Printer</span></dt><dd><p>(Optionally) The print request file (if missing, filters expected data fed through <tt class="filename">stdin</tt>). In most cases it is very easy to write a simple wrapper script around existing -filters to make them work with CUPS.</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938539"></a>Prefilters</h3></div></div><div></div></div><p> +filters to make them work with CUPS.</p></dd></dl></div></div></div><div xmlns:ns55="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947467"></a>Prefilters</h3></div></div><div></div></div><p> As was said, PostScript is the central file format to any Unix based printing system. From PostScript, CUPS generates raster data to feed non-PostScript printers. @@ -8918,18 +8921,18 @@ the <span class="emphasis"><em>imagetops</em></span> filter. Its outcome is alwa MIME type <span class="emphasis"><em>application/vnd.cups-postscript</em></span> (<span class="emphasis"><em>not</em></span> application/postscript), meaning it has the print options already embedded into the file. -</p><p> -</p><div class="figure"><a name="id2938589"></a><p class="title"><b>Figure19.4.Prefiltering in CUPS to form Postscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/4small.png" alt="Prefiltering in CUPS to form Postscript"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938624"></a>pstops</h3></div></div><div></div></div><p> +</p><ns55:p> +</ns55:p><div class="figure"><a name="id2947518"></a><p class="title"><b>Figure19.4.Prefiltering in CUPS to form Postscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/4small.png" alt="Prefiltering in CUPS to form Postscript"></div></div><ns55:p> +</ns55:p></div><div xmlns:ns56="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947552"></a>pstops</h3></div></div><div></div></div><p> <span class="emphasis"><em>pstops</em></span>is the filter to convert <span class="emphasis"><em>application/postscript</em></span> to <span class="emphasis"><em>application/vnd.cups-postscript</em></span>. It was said above that this filter inserts all device-specific print options (commands to the printer to ask for the duplexing of output, or stapling an punching it, etc.) into the PostScript file. -</p><p> -</p><div class="figure"><a name="id2938654"></a><p class="title"><b>Figure19.5.Adding Device-specific Print Options</b></p><div class="mediaobject"><img src="projdoc/imagefiles/5small.png" alt="Adding Device-specific Print Options"></div></div><p> -</p><p> +</p><ns56:p> +</ns56:p><div class="figure"><a name="id2947583"></a><p class="title"><b>Figure19.5.Adding Device-specific Print Options</b></p><div class="mediaobject"><img src="projdoc/imagefiles/5small.png" alt="Adding Device-specific Print Options"></div></div><ns56:p> +</ns56:p><p> This is not all: other tasks performed by it are: </p><div class="itemizedlist"><ul type="disc"><li><p> selecting the range of pages to be printed (if you choose to @@ -8940,7 +8943,7 @@ putting 2 or more logical pages on one sheet of paper (the so-called "number-up" function) </p></li><li><p>counting the pages of the job to insert the accounting information into the <tt class="filename">/var/log/cups/page_log</tt> -</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938727"></a>pstoraster</h3></div></div><div></div></div><p> +</p></li></ul></div></div><div xmlns:ns57="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947655"></a>pstoraster</h3></div></div><div></div></div><p> <span class="emphasis"><em>pstoraster</em></span> is at the core of the CUPS filtering system. It is responsible for the first stage of the rasterization process. Its input is of MIME type application/vnd.cups-postscript; @@ -8948,9 +8951,9 @@ its output is application/vnd.cups-raster. This output format is not yet meant to be printable. Its aim is to serve as a general purpose input format for more specialized <span class="emphasis"><em>raster drivers</em></span>, that are able to generate device-specific printer data. -</p><p> -</p><div class="figure"><a name="id2938756"></a><p class="title"><b>Figure19.6.Postscript to intermediate Raster format</b></p><div class="mediaobject"><img src="projdoc/imagefiles/6small.png" alt="Postscript to intermediate Raster format"></div></div><p> -</p><p> +</p><ns57:p> +</ns57:p><div class="figure"><a name="id2947685"></a><p class="title"><b>Figure19.6.Postscript to intermediate Raster format</b></p><div class="mediaobject"><img src="projdoc/imagefiles/6small.png" alt="Postscript to intermediate Raster format"></div></div><ns57:p> +</ns57:p><p> CUPS raster is a generic raster format with powerful features. It is able to include per-page information, color profiles and more to be used by the following downstream raster drivers. Its MIME type is @@ -8961,9 +8964,9 @@ printer models, should they choose to do so. CUPS always takes care for the first stage of rasterization so these vendors don't need to care about Ghostscript complications (in fact, there is currently more than one vendor financing the development of CUPS raster drivers). -</p><p> -</p><div class="figure"><a name="id2938809"></a><p class="title"><b>Figure19.7.CUPS-raster production using Ghostscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/7small.png" alt="CUPS-raster production using Ghostscript"></div></div><p> -</p><p> +</p><ns57:p> +</ns57:p><div class="figure"><a name="id2947737"></a><p class="title"><b>Figure19.7.CUPS-raster production using Ghostscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/7small.png" alt="CUPS-raster production using Ghostscript"></div></div><ns57:p> +</ns57:p><p> CUPS versions before version 1.1.15 were shipping a binary (or source code) standalone filter, named "pstoraster". pstoraster was derived from GNU Ghostscript 5.50, and could be installed besides and in @@ -8976,16 +8979,16 @@ integrated back into Ghostscript (now based on GNU Ghostscript version parameter. If your Ghostscript doesn't show a success on asking for <b class="command">gs -h |grep cups</b>, you might not be able to print. Update your Ghostscript then! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938883"></a>imagetops and imagetoraster</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns58="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947811"></a>imagetops and imagetoraster</h3></div></div><div></div></div><p> Above in the section about prefilters, we mentioned the prefilter that generates PostScript from image formats. The imagetoraster filter is used to convert directly from image to raster, without the intermediate PostScript stage. It is used more often than the above mentioned prefilters. Here is a summarizing flowchart of image file filtering: -</p><p> -</p><div class="figure"><a name="id2938904"></a><p class="title"><b>Figure19.8.Image format to CUPS-raster format conversion</b></p><div class="mediaobject"><img src="projdoc/imagefiles/8small.png" alt="Image format to CUPS-raster format conversion"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938940"></a>rasterto [printers specific]</h3></div></div><div></div></div><p> +</p><ns58:p> +</ns58:p><div class="figure"><a name="id2947832"></a><p class="title"><b>Figure19.8.Image format to CUPS-raster format conversion</b></p><div class="mediaobject"><img src="projdoc/imagefiles/8small.png" alt="Image format to CUPS-raster format conversion"></div></div><ns58:p> +</ns58:p></div><div xmlns:ns59="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947866"></a>rasterto [printers specific]</h3></div></div><div></div></div><p> CUPS ships with quite some different raster drivers processing CUPS raster. On my system I find in /usr/lib/cups/filter/ these: <i class="parameter"><tt>rastertoalps, rastertobj, rastertoepson, rastertoescp, @@ -8997,9 +9000,9 @@ than this; some of these are installed by commercial add-ons to CUPS <i class="parameter"><tt>rastertoprinter</tt></i>) by 3rd party driver development projects (such as Gimp-Print) wanting to cooperate as closely as possible with CUPS. -</p><p> -</p><div class="figure"><a name="id2938988"></a><p class="title"><b>Figure19.9.Raster to Printer Specific formats</b></p><div class="mediaobject"><img src="projdoc/imagefiles/9small.png" alt="Raster to Printer Specific formats"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939024"></a>CUPS Backends</h3></div></div><div></div></div><p> +</p><ns59:p> +</ns59:p><div class="figure"><a name="id2947917"></a><p class="title"><b>Figure19.9.Raster to Printer Specific formats</b></p><div class="mediaobject"><img src="projdoc/imagefiles/9small.png" alt="Raster to Printer Specific formats"></div></div><ns59:p> +</ns59:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947951"></a>CUPS Backends</h3></div></div><div></div></div><p> The last part of any CUPS filtering chain is a "backend". Backends are special programs that send the print-ready file to the final device. There is a separate backend program for any transfer @@ -9086,7 +9089,7 @@ all available backends: lpinfo -v -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939336"></a>cupsomatic/Foomatic -- how do they fit into the Picture?</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948265"></a>cupsomatic/Foomatic -- how do they fit into the Picture?</h3></div></div><div></div></div><p> "cupsomatic" filters may be the most widely used on CUPS installations. You must be clear about the fact that these were not developed by the CUPS people. They are a "Third Party" add-on to @@ -9136,11 +9139,11 @@ print-options from page to page, in the middle of a job. And the best thing is: the new foomatic-rip now works seamlessly with all legacy spoolers too (like LPRng, BSD-LPD, PDQ, PPR etc.), providing for them access to use PPDs for their printing! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939448"></a>The Complete Picture</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948368"></a>The Complete Picture</h3></div></div><div></div></div><p> If you want to see an overview over all the filters and how they relate to each other, the complete picture of the puzzle is at the end of this document. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939464"></a><tt class="filename">mime.convs</tt></h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948383"></a><tt class="filename">mime.convs</tt></h3></div></div><div></div></div><p> CUPS auto-constructs all possible filtering chain paths for any given MIME type, and every printer installed. But how does it decide in favor or against a specific alternative? (There may often be cases, @@ -9157,7 +9160,7 @@ cost. This is a very efficient way to limit the load of any CUPS server by setting an appropriate "FilterLimit" value. A FilterLimit of 200 allows roughly 1 job at a time, while a FilterLimit of 1000 allows approximately 5 jobs maximum at a time. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939517"></a>"Raw" printing</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948436"></a>"Raw" printing</h3></div></div><div></div></div><p> You can tell CUPS to print (nearly) any file "raw". "Raw" means it will not be filtered. CUPS will send the file to the printer "as is" without bothering if the printer is able to digest it. Users need to @@ -9180,7 +9183,7 @@ CUPS will automatically treat each job sent to a queue as a "raw" one, if it can't find a PPD associated with the queue. However, CUPS will only send known MIME types (as defined in its own mime.types file) and refuse others. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939571"></a>"application/octet-stream" printing</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948490"></a>"application/octet-stream" printing</h3></div></div><div></div></div><p> Any MIME type with no rule in the <tt class="filename">/etc/cups/mime.types</tt> file is regarded as unknown or <span class="emphasis"><em>application/octet-stream</em></span> and will not be @@ -9238,7 +9241,7 @@ be one that is known to CUPS and an allowed one. The file recognizes MIME types. The file <tt class="filename">/etc/cups/mime.convs</tt> decides which file conversion filter(s) may be applied to which MIME types. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939786"></a>PostScript Printer Descriptions (PPDs) for non-PS Printers</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948706"></a>PostScript Printer Descriptions (PPDs) for non-PS Printers</h3></div></div><div></div></div><p> Originally PPDs were meant to be used for PostScript printers only. Here, they help to send device-specific commands and settings to the RIP which processes the jobfile. CUPS has extended this @@ -9283,7 +9286,7 @@ specific model supports): </p></dd><dt><span class="term">stphoto2.ppd</span></dt><dd><p>newer Epson Stylus Photo printers </p></dd><dt><span class="term">laserjet.ppd</span></dt><dd><p>all PCL printers. Further below is a discussion of several other driver/PPD-packages suitable fur use with CUPS. -</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940015"></a>Difference between <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> and +</p></dd></dl></div></div><div xmlns:ns60="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948933"></a>Difference between <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> and <span class="emphasis"><em>native CUPS</em></span> printing</h3></div></div><div></div></div><p> Native CUPS rasterization works in two steps. </p><div class="itemizedlist"><ul type="disc"><li><p> @@ -9296,9 +9299,9 @@ quality filters for this step, some are Free Software, some are Shareware/Non-Free, some are proprietary.</p></li></ul></div><p> Often this produces better quality (and has several more advantages) than other methods. -</p><p> -</p><div class="figure"><a name="id2940065"></a><p class="title"><b>Figure19.10.cupsomatic/foomatic processing versus Native CUPS</b></p><div class="mediaobject"><img src="projdoc/imagefiles/10small.png" alt="cupsomatic/foomatic processing versus Native CUPS"></div></div><p> -</p><p> +</p><ns60:p> +</ns60:p><div class="figure"><a name="id2948984"></a><p class="title"><b>Figure19.10.cupsomatic/foomatic processing versus Native CUPS</b></p><div class="mediaobject"><img src="projdoc/imagefiles/10small.png" alt="cupsomatic/foomatic processing versus Native CUPS"></div></div><ns60:p> +</ns60:p><p> One other method is the <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> way. Note that cupsomatic is <span class="emphasis"><em>not</em></span> made by the CUPS developers. It is an independent contribution to printing development, @@ -9332,7 +9335,7 @@ installation: Therefore the printfile bypasses the "pstoraster" filter cupsomatic hands the rendered file directly to the CUPS backend. The flowchart above illustrates the difference between native CUPS rendering and the Foomatic/cupsomatic method. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940170"></a>Examples for filtering Chains</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949090"></a>Examples for filtering Chains</h3></div></div><div></div></div><p> Here are a few examples of commonly occurring filtering chains to illustrate the workings of CUPS. </p><p> @@ -9382,7 +9385,7 @@ which transfers the job to the printers.</p></li></ul></div><p> The resulting filter chain therefore is: </p><pre class="screen"> pdftops --> pstops --> pstoraster --> rastertoepson --> usb -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940401"></a>Sources of CUPS drivers / PPDs</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949319"></a>Sources of CUPS drivers / PPDs</h3></div></div><div></div></div><p> On the internet you can find now many thousand CUPS-PPD files (with their companion filters), in many national languages, supporting more than 1000 non-PostScript models. @@ -9417,7 +9420,7 @@ HPIJS).</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-r The cupsomatic/Foomatic trick from Linuxprinting.org works differently from the other drivers. This is explained elsewhere in this document. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940530"></a>Printing with Interface Scripts</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949444"></a>Printing with Interface Scripts</h3></div></div><div></div></div><p> CUPS also supports the usage of "interface scripts" as known from System V AT&T printing systems. These are often used for PCL printers, from applications that generate PCL print jobs. Interface @@ -9439,12 +9442,12 @@ with CUPS they provide the most easy way to plug in your own custom-written filtering script or program into one specific print queue (some information about the traditional usage of interface scripts is to be found at <a href="http://playground.sun.com/printing/documentation/interface.html" target="_top">http://playground.sun.com/printing/documentation/interface.html</a>). -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940605"></a>Network printing (purely Windows)</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949506"></a>Network printing (purely Windows)</h2></div></div><div></div></div><p> Network printing covers a lot of ground. To understand what exactly goes on with Samba when it is printing on behalf of its Windows clients, let's first look at a "purely Windows" setup: Windows clients with a Windows NT print server. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940620"></a>From Windows Clients to an NT Print Server</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949522"></a>From Windows Clients to an NT Print Server</h3></div></div><div></div></div><p> Windows clients printing to an NT-based print server have two options. They may </p><div class="itemizedlist"><ul type="disc"><li><p>execute the driver locally and render the GDI output @@ -9453,7 +9456,7 @@ or</p></li><li><p>send the GDI output (EMF) to the server, where the driver is executed to render the printer specific output.</p></li></ul></div><p> Both print paths are shown in the flowcharts below. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940659"></a>Driver Execution on the Client</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns61="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949561"></a>Driver Execution on the Client</h3></div></div><div></div></div><p> In the first case the print server must spool the file as "raw", meaning it shouldn't touch the jobfile and try to convert it in any way. This is what traditional Unix-based print server can do too; and @@ -9463,9 +9466,9 @@ advantage of this setup is that this "spooling-only" print server may be used even if no driver(s) for Unix are available it is sufficient to have the Windows client drivers available and installed on the clients. -</p><p> -</p><div class="figure"><a name="id2940695"></a><p class="title"><b>Figure19.11.Print Driver execution on the Client</b></p><div class="mediaobject"><img src="projdoc/imagefiles/11small.png" alt="Print Driver execution on the Client"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940731"></a>Driver Execution on the Server</h3></div></div><div></div></div><p> +</p><ns61:p> +</ns61:p><div class="figure"><a name="id2949586"></a><p class="title"><b>Figure19.11.Print Driver execution on the Client</b></p><div class="mediaobject"><img src="projdoc/imagefiles/11small.png" alt="Print Driver execution on the Client"></div></div><ns61:p> +</ns61:p></div><div xmlns:ns62="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949620"></a>Driver Execution on the Server</h3></div></div><div></div></div><p> The other path executes the printer driver on the server. The clients transfers print files in EMF format to the server. The server uses the PostScript, PCL, ESC/P or other driver to convert the EMF file into @@ -9473,18 +9476,18 @@ the printer-specific language. It is not possible for Unix to do the same. Currently there is no program or method to convert a Windows client's GDI output on a Unix server into something a printer could understand. -</p><p> -</p><div class="figure"><a name="id2940753"></a><p class="title"><b>Figure19.12.Print Driver execution on the Server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/12small.png" alt="Print Driver execution on the Server"></div></div><p> -</p><p> +</p><ns62:p> +</ns62:p><div class="figure"><a name="id2949642"></a><p class="title"><b>Figure19.12.Print Driver execution on the Server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/12small.png" alt="Print Driver execution on the Server"></div></div><ns62:p> +</ns62:p><p> However, there is something similar possible with CUPS. Read on... -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940794"></a>Network Printing (Windows clients -- UNIX/Samba Print +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949683"></a>Network Printing (Windows clients -- UNIX/Samba Print Servers)</h2></div></div><div></div></div><p> Since UNIX print servers <span class="emphasis"><em>cannot</em></span> execute the Win32 program code on their platform, the picture is somewhat different. However, this doesn't limit your options all that much. In the contrary, you may have a way here to implement printing features which are not possible otherwise. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940814"></a>From Windows Clients to a CUPS/Samba Print Server</h3></div></div><div></div></div><p> +</p><div xmlns:ns63="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949704"></a>From Windows Clients to a CUPS/Samba Print Server</h3></div></div><div></div></div><p> Here is a simple recipe showing how you can take advantage of CUPS powerful features for the benefit of your Windows network printing clients: @@ -9511,9 +9514,9 @@ other print commands are set up, then printing will use the option automatically passing through (if you want your own defined print commands to work with a Samba that has CUPS support compiled in, simply use <i class="parameter"><tt>printing = sysv</tt></i>). -</p><p> -</p><div class="figure"><a name="id2940943"></a><p class="title"><b>Figure19.13.Printing via CUPS/samba server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/13small.png" alt="Printing via CUPS/samba server"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940978"></a>Samba receiving Jobfiles and passing them to CUPS</h3></div></div><div></div></div><p> +</p><ns63:p> +</ns63:p><div class="figure"><a name="id2949830"></a><p class="title"><b>Figure19.13.Printing via CUPS/samba server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/13small.png" alt="Printing via CUPS/samba server"></div></div><ns63:p> +</ns63:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949864"></a>Samba receiving Jobfiles and passing them to CUPS</h3></div></div><div></div></div><p> Samba <span class="emphasis"><em>must</em></span> use its own spool directory (it is set by a line similar to <i class="parameter"><tt>path = /var/spool/samba</tt></i>, in the <i class="parameter"><tt>[printers]</tt></i> or @@ -9531,7 +9534,7 @@ A Windows user authenticates only to Samba (by whatever means is configured). If Samba runs on the same host as CUPS, you only need to allow "localhost" to print. If they run on different machines, you need to make sure the Samba host gets access to printing on CUPS. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941054"></a>Network PostScript RIP: CUPS Filters on Server -- clients use +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949942"></a>Network PostScript RIP: CUPS Filters on Server -- clients use PostScript Driver with CUPS-PPDs</h2></div></div><div></div></div><p> PPDs can control all print device options. They are usually provided by the manufacturer; if you own a PostScript printer, that is. PPD @@ -9551,7 +9554,7 @@ or see if you have lphelp on your system). There are also some different GUI frontends on Linux/UNIX, which can present PPD options to users. PPD options are normally meant to be evaluated by the PostScript RIP on the real PostScript printer. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941110"></a>PPDs for non-PS Printers on UNIX</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949997"></a>PPDs for non-PS Printers on UNIX</h3></div></div><div></div></div><p> CUPS doesn't limit itself to "real" PostScript printers in its usage of PPDs. The CUPS developers have extended the scope of the PPD concept, to also describe available device and driver options for @@ -9568,7 +9571,7 @@ the supplied PostScript. Thus CUPS lets all its printers appear as PostScript devices to its clients, because it can act as a PostScript RIP for those printers, processing the received PostScript code into a proper raster print format. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941150"></a>PPDs for non-PS Printers on Windows</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950038"></a>PPDs for non-PS Printers on Windows</h3></div></div><div></div></div><p> CUPS-PPDs can also be used on Windows-Clients, on top of a "core" PostScript driver (now recommended is the "CUPS PostScript Driver for WindowsNT/2K/XP"; you can also use the Adobe one, with @@ -9584,13 +9587,13 @@ which always remain unfiltered per definition;</p></li><li><p>enable clients to driver, even for many different target printers.</p></li></ul></div><p> Using CUPS PPDs on Windows clients enables these to control all print job settings just as a UNIX client can do too. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941216"></a>Windows Terminal Servers (WTS) as CUPS Clients</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950103"></a>Windows Terminal Servers (WTS) as CUPS Clients</h2></div></div><div></div></div><p> This setup may be of special interest to people experiencing major problems in WTS environments. WTS need often a multitude of non-PostScript drivers installed to run their clients' variety of different printer models. This often imposes the price of much increased instability. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941233"></a>Printer Drivers running in "Kernel Mode" cause many +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950120"></a>Printer Drivers running in "Kernel Mode" cause many Problems</h3></div></div><div></div></div><p> The reason is that in Win NT printer drivers run in "Kernel Mode", this introduces a high risk for the stability of the system @@ -9607,7 +9610,7 @@ might be because there have so far only been 2 different PostScript drivers the ones from Adobe and the one from Microsoft. Both are very well tested and are as stable as you ever can imagine on Windows. The CUPS driver is derived from the Microsoft one. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941268"></a>Workarounds impose Heavy Limitations</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950155"></a>Workarounds impose Heavy Limitations</h3></div></div><div></div></div><p> In many cases, in an attempt to work around this problem, site administrators have resorted to restrict the allowed drivers installed on their WTS to one generic PCL- and one PostScript driver. This @@ -9615,7 +9618,7 @@ however restricts the clients in the amount of printer options available for them; often they can't get out more than simplex prints from one standard paper tray, while their devices could do much better, if driven by a different driver! ) -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941289"></a>CUPS: a "Magical Stone"?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950176"></a>CUPS: a "Magical Stone"?</h3></div></div><div></div></div><p> Using a PostScript driver, enabled with a CUPS-PPD, seems to be a very elegant way to overcome all these shortcomings. There are, depending on the version of Windows OS you use, up to 3 different PostScript @@ -9627,7 +9630,7 @@ is a certain price for this too: a CUPS server acting as a PostScript RIP for its clients requires more CPU and RAM than when just acting as a "raw spooling" device. Plus, this setup is not yet widely tested, although the first feedbacks look very promising. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941316"></a>PostScript Drivers with no major problems -- even in Kernel +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950203"></a>PostScript Drivers with no major problems -- even in Kernel Mode</h3></div></div><div></div></div><p> More recent printer drivers on W2K and XP don't run in Kernel mode (unlike Win NT) any more. However, both operating systems can still @@ -9644,14 +9647,14 @@ development efforts. This is what the CUPS people have done. The license doesn't allow them to publish the whole of the source code. However, they have released the "diff" under the GPL, and if you are owner of an "MS DDK for Win NT", you can check the driver yourself. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941369"></a> Setting up CUPS for driver Download</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950237"></a> Setting up CUPS for driver Download</h2></div></div><div></div></div><p> As we have said before: all previously known methods to prepare client printer drivers on the Samba server for download and "Point'n'Print" convenience of Windows workstations are working with CUPS too. These methods were described in the previous chapter. In reality, this is a pure Samba business, and only relates to the Samba/Win client relationship. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941388"></a><span class="emphasis"><em>cupsaddsmb</em></span>: the unknown Utility</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950256"></a><span class="emphasis"><em>cupsaddsmb</em></span>: the unknown Utility</h3></div></div><div></div></div><p> The cupsaddsmb utility (shipped with all current CUPS versions) is an alternative method to transfer printer drivers into the Samba <i class="parameter"><tt>[print$]</tt></i> share. Remember, this share is where @@ -9676,7 +9679,7 @@ job-billing)</p></li></ul></div><p> However, currently only Windows NT, 2000, and XP are supported by the CUPS drivers. You will need to get the respective part of Adobe driver too if you need to support Windows 95, 98, and ME clients. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941480"></a>Prepare your <tt class="filename">smb.conf</tt> for +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950347"></a>Prepare your <tt class="filename">smb.conf</tt> for cupsaddsmb</h3></div></div><div></div></div><p> Prior to running cupsaddsmb, you need the following settings in <tt class="filename">smb.conf</tt>: @@ -9705,7 +9708,7 @@ Prior to running cupsaddsmb, you need the following settings in read only = yes write list = root -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941526"></a>CUPS Package of "PostScript Driver for WinNT/2k/XP"</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950394"></a>CUPS Package of "PostScript Driver for WinNT/2k/XP"</h3></div></div><div></div></div><p> CUPS users may get the exactly same packages from<a href="http://www.cups.org/software.html" target="_top"><span class="emphasis"><em>http://www.cups.org/software.html</em></span></a>. It is a separate package from the CUPS base software files, tagged as <span class="emphasis"><em>CUPS 1.1.x Windows NT/2k/XP Printer Driver for SAMBA @@ -9776,7 +9779,7 @@ Studio 6. Driver developers are not allowed to distribute the whole of the source code as Free Software. However, CUPS developers released the "diff" in source code under the GPL, so anybody with a license of Visual Studio and a DDK will be able to compile for him/herself. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941724"></a>Recognize the different Driver Files</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950591"></a>Recognize the different Driver Files</h3></div></div><div></div></div><p> The CUPS drivers don't support the "older" Windows 95/98/ME, but only the Windows NT/2000/XP client: </p><pre class="screen"> @@ -9811,7 +9814,7 @@ support of WinNT/2k/XP are present in , the Adobe ones will be ignored and the CUPS ones will be used. If you prefer -- for whatever reason -- to use Adobe-only drivers, move away the 3 CUPS driver files. The Win95/98/ME clients use the Adobe drivers in any case. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941782"></a>Acquiring the Adobe Driver Files</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950649"></a>Acquiring the Adobe Driver Files</h3></div></div><div></div></div><p> Acquiring the Adobe driver files seems to be unexpectedly difficult for many users. They are not available on the Adobe website as single files and the self-extracting and/or self-installing Windows-exe is @@ -9824,7 +9827,7 @@ Generic PostScript printer. After this, the client's where you can get them with smbclient from the CUPS host. A more detailed description about this is in the next (the CUPS printing) chapter. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941814"></a>ESP Print Pro Package of "PostScript Driver for +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950682"></a>ESP Print Pro Package of "PostScript Driver for WinNT/2k/XP"</h3></div></div><div></div></div><p> Users of the ESP Print Pro software are able to install their "Samba Drivers" package for this purpose with no problem. Retrieve the driver @@ -9840,7 +9843,7 @@ driver files; i.e. mainly setup the <i class="parameter"><tt>[print$]</tt></i> share, etc. The ESP Print Pro package includes the CUPS driver files as well as a (licensed) set of Adobe drivers for the Windows 95/98/ME client family. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941864"></a>Caveats to be considered</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950732"></a>Caveats to be considered</h3></div></div><div></div></div><p> Once you have run the install script (and possibly manually moved the <tt class="filename">cups.hlp</tt> file to <tt class="filename">/usr/share/cups/drivers/</tt>), the driver is @@ -9860,8 +9863,8 @@ working in an environment where everything is configured for Once the driver files are in the <i class="parameter"><tt>[print$]</tt></i> share and are initialized, they are ready to be downloaded and installed by the Win NT/2k/XP clients. -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> -</p><div class="orderedlist"><ol type="1"><li><p> +</p><div xmlns:ns64="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns64:p> +</ns64:p><div class="orderedlist"><ol type="1"><li><p> Win 9x/ME clients won't work with the CUPS PostScript driver. For these you'd still need to use the <tt class="filename">ADOBE*.*</tt> drivers as previously. @@ -9896,8 +9899,8 @@ as described elsewhere in the "Samba HOWTO Collection": either change a driver for an existing printer by running the "Printer Properties" dialog, or use <b class="command">rpcclient</b> with the <b class="command">setdriver</b> sub-command. -</p></li></ol></div><p> -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942086"></a>What are the Benefits of using the "CUPS PostScript Driver for +</p></li></ol></div><ns64:p> +</ns64:p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950953"></a>What are the Benefits of using the "CUPS PostScript Driver for Windows NT/2k/XP" as compared to the Adobe Driver?</h3></div></div><div></div></div><p> You are interested in a comparison between the CUPS and the Adobe PostScript drivers? For our purposes these are the most important @@ -9943,7 +9946,7 @@ not disturb any other applications as they will regard it as a comment and simply ignore it).</p></li><li><p>the CUPS PostScript driver will be the heart of the fully fledged CUPS IPP client for Windows NT/2K/XP to be released soon (probably alongside the first Beta release for CUPS -1.2).</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942268"></a>Run "cupsaddsmb" (quiet Mode)</h3></div></div><div></div></div><p> +1.2).</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951134"></a>Run "cupsaddsmb" (quiet Mode)</h3></div></div><div></div></div><p> The cupsaddsmb command copies the needed files into your <i class="parameter"><tt>[print$]</tt></i> share. Additionally, the PPD associated with this printer is copied from @@ -9973,7 +9976,7 @@ To share <span class="emphasis"><em>all</em></span> printers and drivers, use th <i class="parameter"><tt>-a</tt></i> parameter instead of a printer name. Since cupsaddsmb "exports" the printer drivers to Samba, it should be obvious that it only works for queues with a CUPS driver associated. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942369"></a>Run "cupsaddsmb" with verbose Output</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951235"></a>Run "cupsaddsmb" with verbose Output</h3></div></div><div></div></div><p> Probably you want to see what's going on. Use the <i class="parameter"><tt>-v</tt></i> parameter to get a more verbose output. The output below was edited for better readability: all "\" at the end of @@ -10058,7 +10061,7 @@ you'll discover error messages like NT_STATUS_OBJECT_NAME_COLLISION in between. They occur, because the directories WIN40 and W32X86 already existed in the <i class="parameter"><tt>[print$]</tt></i> driver download share (from a previous driver installation). They are harmless here. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942596"></a>Understanding cupsaddsmb</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951378"></a>Understanding cupsaddsmb</h3></div></div><div></div></div><p> What has happened? What did cupsaddsmb do? There are five stages of the procedure </p><div class="orderedlist"><ol type="1"><li><p>call the CUPS server via IPP and request the @@ -10081,7 +10084,7 @@ same host): # cupsaddsmb -H sambaserver -h cupsserver -v printername -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942690"></a>How to recognize if cupsaddsm completed successfully</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951472"></a>How to recognize if cupsaddsm completed successfully</h3></div></div><div></div></div><p> You <span class="emphasis"><em>must</em></span> always check if the utility completed successfully in all fields. You need as a minimum these 3 messages amongst the output: @@ -10102,7 +10105,7 @@ It is impossible to see any diagnostic output if you don't run cupsaddsmb in verbose mode. Therefore we strongly recommend to not use the default quiet mode. It will hide any problems from you which might occur. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942777"></a>cupsaddsmb with a Samba PDC</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951559"></a>cupsaddsmb with a Samba PDC</h3></div></div><div></div></div><p> You can't get the standard cupsaddsmb command to run on a Samba PDC? You are asked for the password credential all over again and again and the command just will not take off at all? Try one of these @@ -10116,13 +10119,13 @@ variations: </pre><p> (Note the two backslashes: the first one is required to "escape" the second one). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942812"></a>cupsaddsmb Flowchart</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns65="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951594"></a>cupsaddsmb Flowchart</h3></div></div><div></div></div><p> Here is a chart about the procedures, commandflows and dataflows of the "cupaddsmb" command. Note again: cupsaddsmb is not intended to, and does not work with, "raw" queues! -</p><p> -</p><div class="figure"><a name="id2942830"></a><p class="title"><b>Figure19.14.cupsaddsmb flowchart</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="cupsaddsmb flowchart"></div></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942865"></a>Installing the PostScript Driver on a Client</h3></div></div><div></div></div><p> +</p><ns65:p> +</ns65:p><div class="figure"><a name="id2951611"></a><p class="title"><b>Figure19.14.cupsaddsmb flowchart</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="cupsaddsmb flowchart"></div></div><ns65:p> +</ns65:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951645"></a>Installing the PostScript Driver on a Client</h3></div></div><div></div></div><p> After cupsaddsmb completed, your driver is prepared for the clients to use. Here are the steps you must perform to download and install it via "Point'n'Print". From a Windows client, browse to the CUPS/Samba @@ -10158,7 +10161,7 @@ functions. (Note that user "ntadmin" needs to be a valid Samba user with the required privileges to access the printershare) This would set up the printer connection in the traditional <span class="emphasis"><em>LanMan</em></span> way (not using MS-RPC). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942978"></a>Avoiding critical PostScript Driver Settings on the +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951760"></a>Avoiding critical PostScript Driver Settings on the Client</h3></div></div><div></div></div><p> Soooo: printing works, but there are still problems. Most jobs print well, some don't print at all. Some jobs have problems with fonts, @@ -10184,7 +10187,7 @@ get a printout at all) (Adobe)</p></li><li><p>Sometimes you can choose <span cla Level</em></span>: in case of problems try <span class="emphasis"><em>2</em></span> instead of <span class="emphasis"><em>3</em></span> (the latest ESP Ghostscript package handles Level 3 PostScript very well) (Adobe).</p></li><li><p>Say <span class="emphasis"><em>Yes</em></span> to <span class="emphasis"><em>PostScript -Error Handler</em></span> (Adobe)</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943112"></a>Installing PostScript Driver Files manually (using +Error Handler</em></span> (Adobe)</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2951894"></a>Installing PostScript Driver Files manually (using rpcclient)</h2></div></div><div></div></div><p> Of course you can run all the commands which are embedded into the cupsaddsmb convenience utility yourself, one by one, and hereby upload @@ -10205,7 +10208,7 @@ the MS-RPC protocol. You can use it to query (and command) a Win NT (or 2K/XP) PC too. MS-RPC is used by Windows clients, amongst other things, to benefit from the "Point'n'Print" features. Samba can now mimic this too. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943227"></a>A Check of the rpcclient man Page</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952009"></a>A Check of the rpcclient man Page</h3></div></div><div></div></div><p> First let's have a little check of the rpcclient man page. Here are two relevant passages: </p><p> @@ -10238,7 +10241,7 @@ printer driver associated with an installed printer. The printer driver must already be correctly installed on the print server. </p><p> See also the enumprinters and enumdrivers commands for obtaining a list of installed printers and drivers. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943340"></a>Understanding the rpcclient man Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952121"></a>Understanding the rpcclient man Page</h3></div></div><div></div></div><p> The <span class="emphasis"><em>exact</em></span> format isn't made too clear by the man page, since you have to deal with some parameters containing spaces. Here is a better description for it. We have line-broken the @@ -10274,7 +10277,7 @@ box now, and access it from a UNIX workstation. We will query it with <b class="command">rpcclient</b> to see what it tells us and try to understand the man page more clearly which we've read just now. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943429"></a>Producing an Example by querying a Windows Box</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952200"></a>Producing an Example by querying a Windows Box</h3></div></div><div></div></div><p> We could run <b class="command">rpcclient</b> with a <b class="command">getdriver</b> or a <b class="command">getprinter</b> subcommand (in level 3 verbosity) against it. Just sit down at UNIX or @@ -10319,7 +10322,7 @@ Some printer drivers list additional files under the label <span class="emphasis"><em>ListOfFiles,Comma-separated</em></span>. For the CUPS PostScript drivers we don't need any (nor would we for the Adobe PostScript driver): therefore the field will get a "NULL" entry. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943519"></a>What is required for adddriver and setdriver to succeed</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952290"></a>What is required for adddriver and setdriver to succeed</h3></div></div><div></div></div><p> From the manpage (and from the quoted output of <span class="emphasis"><em>cupsaddsmb</em></span>, above) it becomes clear that you need to have certain conditions in order to make the manual uploading @@ -10350,12 +10353,12 @@ rpcclient. A long-standing bug prevented a proper update of the printer list until every smbd process had received a SIGHUP or was restarted. Remember this in case you've created the CUPS printer just shortly ago and encounter problems: try restarting -Samba.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943682"></a>Manual Commandline Driver Installation in 15 little Steps</h3></div></div><div></div></div><p> +Samba.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952452"></a>Manual Commandline Driver Installation in 15 little Steps</h3></div></div><div></div></div><p> We are going to install a printer driver now by manually executing all required commands. As this may seem a rather complicated process at first, we go through the procedure step by step, explaining every single action item as it comes up. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943698"></a>First Step: Install the Printer on CUPS</h4></div></div><div></div></div><pre class="screen"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952469"></a>First Step: Install the Printer on CUPS</h4></div></div><div></div></div><pre class="screen"> # lpadmin -p mysmbtstprn -v socket://10.160.51.131:9100 -E -P /home/kurt/canonIR85.ppd @@ -10364,7 +10367,7 @@ This installs printer with the name <span class="emphasis"><em>mysmbtstprn</em>< to the CUPS system. The printer is accessed via a socket (a.k.a. JetDirect or Direct TCP/IP) connection. You need to be root for this step -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943729"></a>Second Step (optional): Check if the Printer is recognized by +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952499"></a>Second Step (optional): Check if the Printer is recognized by Samba</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep -C2 mysmbtstprn @@ -10385,7 +10388,7 @@ already. You need to know root's Samba password (as set by the following steps. Alternatively you can authenticate as one of the users from the "write list" as defined in <tt class="filename">smb.conf</tt> for <i class="parameter"><tt>[print$]</tt></i>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943792"></a>Third Step (optional): Check if Samba knows a Driver for the +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952562"></a>Third Step (optional): Check if Samba knows a Driver for the Printer</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver @@ -10411,7 +10414,7 @@ This step was done for the purpose of demonstrating this condition. An attempt to connect to the printer at this stage will prompt the message along the lines: "The server has not the required printer driver installed". -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943830"></a>Fourth Step: Put all required Driver Files into Samba's +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952600"></a>Fourth Step: Put all required Driver Files into Samba's [print$]</h4></div></div><div></div></div><pre class="screen"> # smbclient //localhost/print\$ -U 'root%xxxx' \ @@ -10430,7 +10433,7 @@ present in the <i class="parameter"><tt>[print$]</tt></i> share. However, client would still not be able to install them, because Samba does not yet treat them as driver files. A client asking for the driver would still be presented with a "not installed here" message. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943881"></a>Fifth Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen"> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952651"></a>Fifth Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen"> # ls -l /etc/samba/drivers/W32X86/ total 669 @@ -10444,7 +10447,7 @@ be presented with a "not installed here" message. </pre><p> The driver files now are in the W32X86 architecture "root" of <i class="parameter"><tt>[print$]</tt></i>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943920"></a>Sixth Step: Tell Samba that these are +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952689"></a>Sixth Step: Tell Samba that these are <span class="emphasis"><em>Driver</em></span> Files (<b class="command">adddriver</b>)</h4></div></div><div></div></div><pre class="screen"> @@ -10465,7 +10468,7 @@ driver. It is normally a good idea to use the same name as is used for the printername; however, in big installations you may use this driver for a number of printers which have obviously different names. So the name of the driver is not fixed. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943974"></a>Seventh Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen"> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952744"></a>Seventh Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen"> # ls -l /etc/samba/drivers/W32X86/ total 1 @@ -10484,7 +10487,7 @@ name of the driver is not fixed. </pre><p> Notice how step 6 did also move the driver files to the appropriate subdirectory. Compare with the situation after step 5. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944008"></a>Eighth Step (optional): Verify if Samba now recognizes the +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952777"></a>Eighth Step (optional): Verify if Samba now recognizes the Driver</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'enumdrivers 3' localhost | grep -B2 -A5 mydrivername @@ -10501,7 +10504,7 @@ Driver</h4></div></div><div></div></div><pre class="screen"> </pre><p> Remember, this command greps for the name you did choose for the driver in step Six. This command must succeed before you can proceed. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944041"></a>Ninth Step: Tell Samba which Printer should use these Driver +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952810"></a>Ninth Step: Tell Samba which Printer should use these Driver Files (<b class="command">setdriver</b>)</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'setdriver mysmbtstprn mydrivername' localhost @@ -10515,7 +10518,7 @@ driver. You don't need to repeat all the previous steps for the setdriver command to succeed. The only pre-conditions are: <b class="command">enumdrivers</b> must find the driver and <b class="command">enumprinters</b> must find the printer. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944091"></a>Tenth Step (optional): Verify if Samba has this Association +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952860"></a>Tenth Step (optional): Verify if Samba has this Association recognized</h4></div></div><div></div></div><pre class="screen"> # rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver @@ -10557,7 +10560,7 @@ Compare these results with the ones from steps 2 and 3. Note that every single of these commands show the driver is installed. Even the <b class="command">enumprinters</b> command now lists the driver on the "description" line. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944171"></a>Eleventh Step (optional): Tickle the Driver into a correct +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952916"></a>Eleventh Step (optional): Tickle the Driver into a correct Device Mode</h4></div></div><div></div></div><p> You certainly know how to install the driver on the client. In case you are not particularly familiar with Windows, here is a short @@ -10582,7 +10585,7 @@ into the "DOS box" (type root's smbpassword when prompted): Change any printer setting once (like <span class="emphasis"><em>"portrait" --> "landscape"</em></span>), click "Apply"; change the setting back. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944235"></a>Twelfth Step: Install the Printer on a Client +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952978"></a>Twelfth Step: Install the Printer on a Client ("Point'n'Print")</h4></div></div><div></div></div><pre class="screen"> C:\> rundll32 printui.dll,PrintUIEntry /in /n "\\sambacupsserver\mysmbtstprn" @@ -10590,24 +10593,24 @@ back. </pre><p> If it doesn't work it could be a permission problem with the <i class="parameter"><tt>[print$]</tt></i> share. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944268"></a>Thirteenth Step (optional): Print a Test Page</h4></div></div><div></div></div><pre class="screen"> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953009"></a>Thirteenth Step (optional): Print a Test Page</h4></div></div><div></div></div><pre class="screen"> C:\> rundll32 printui.dll,PrintUIEntry /p /n "\\sambacupsserver\mysmbtstprn" </pre><p> Then hit [TAB] 5 times, [ENTER] twice, [TAB] once and [ENTER] again and march to the printer. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944295"></a>Fourteenth Step (recommended): Study the Test Page</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953034"></a>Fourteenth Step (recommended): Study the Test Page</h4></div></div><div></div></div><p> Hmmm.... just kidding! By now you know everything about printer installations and you don't need to read a word. Just put it in a frame and bolt it to the wall with the heading "MY FIRST RPCCLIENT-INSTALLED PRINTER" - why not just throw it away! -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944313"></a>Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953052"></a>Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your Success</h4></div></div><div></div></div><pre class="screen"> # echo "Cheeeeerioooooo! Success..." >> /var/log/samba/log.smbd -</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944334"></a>Troubleshooting revisited</h3></div></div><div></div></div><p> +</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953072"></a>Troubleshooting revisited</h3></div></div><div></div></div><p> The setdriver command will fail, if in Samba's mind the queue is not already there. You had promising messages about the: </p><pre class="screen"> @@ -10650,7 +10653,7 @@ An alternative command could be this: </pre><p> BTW, you can use these commands, plus a few more, of course, to install drivers on remote Windows NT print servers too! -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944435"></a>The printing <tt class="filename">*.tdb</tt> Files</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953174"></a>The printing <tt class="filename">*.tdb</tt> Files</h2></div></div><div></div></div><p> Some mystery is associated with the series of files with a tdb-suffix appearing in every Samba installation. They are <tt class="filename">connections.tdb</tt>, @@ -10665,7 +10668,7 @@ tdb-suffix appearing in every Samba installation. They are <tt class="filename">ntprinters.tdb</tt>, <tt class="filename">sessionid.tdb</tt> and <tt class="filename">secrets.tdb</tt>. What is their purpose? -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944537"></a>Trivial DataBase Files</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953277"></a>Trivial DataBase Files</h3></div></div><div></div></div><p> A Windows NT (Print) Server keeps track of all information needed to serve its duty toward its clients by storing entries in the Windows "Registry". Client queries are answered by reading from the registry, @@ -10678,7 +10681,7 @@ or <tt class="filename">/var/lock/samba/</tt> . The printing related files are <tt class="filename">ntprinters.tdb</tt>, <tt class="filename">printing.tdb</tt>,<tt class="filename">ntforms.tdb</tt> and <tt class="filename">ntdrivers.tdb</tt>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944608"></a>Binary Format</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953347"></a>Binary Format</h3></div></div><div></div></div><p> <tt class="filename">*.tdb</tt> files are not human readable. They are written in a binary format. "Why not ASCII?", you may ask. "After all, ASCII configuration files are a good and proofed tradition on UNIX." @@ -10691,7 +10694,7 @@ same time</em></span>. The file format of Samba's <tt class="filename">*.tdb</tt> files allows for this provision. Many smbd processes may write to the same <tt class="filename">*.tdb</tt> file at the same time. This wouldn't be possible with pure ASCII files. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944670"></a>Losing <tt class="filename">*.tdb</tt> Files</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953409"></a>Losing <tt class="filename">*.tdb</tt> Files</h3></div></div><div></div></div><p> It is very important that all <tt class="filename">*.tdb</tt> files remain consistent over all write and read accesses. However, it may happen that these files <span class="emphasis"><em>do</em></span> get corrupted. (A @@ -10701,7 +10704,7 @@ etc.). In cases of trouble, a deletion of the old printing-related <tt class="filename">*.tdb</tt> files may be the only option. You need to re-create all print related setup after that. Or you have made a backup of the <tt class="filename">*.tdb</tt> files in time. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944728"></a>Using <span class="emphasis"><em>tdbbackup</em></span></h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953468"></a>Using <span class="emphasis"><em>tdbbackup</em></span></h3></div></div><div></div></div><p> Samba ships with a little utility which helps the root user of your system to back up your <tt class="filename">*.tdb</tt> files. If you run it with no argument, it prints a little usage message: @@ -10731,7 +10734,7 @@ Here is how I backed up my printing.tdb file: -rw------- 1 root root 40960 May 2 03:44 printing.tdb -rw------- 1 root root 40960 May 2 03:44 printing.tdb.bak -</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944795"></a>CUPS Print Drivers from Linuxprinting.org</h2></div></div><div></div></div><p> +</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953530"></a>CUPS Print Drivers from Linuxprinting.org</h2></div></div><div></div></div><p> CUPS ships with good support for HP LaserJet type printers. You can install the generic driver as follows: </p><pre class="screen"> @@ -10765,7 +10768,7 @@ not work with PPDs generated for the old cupsomatic. The new-style PPDs are 100% compliant to the Adobe PPD specification. They are intended to be used by Samba and the cupsaddsmb utility also, to provide the driver files for the Windows clients also! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944903"></a>foomatic-rip and Foomatic explained</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953636"></a>foomatic-rip and Foomatic explained</h3></div></div><div></div></div><p> Nowadays most Linux distros rely on the utilities of Linuxprinting.org to create their printing related software (which, BTW, works on all UNIXes and on Mac OS X or Darwin too). It is not known as well as it @@ -10782,7 +10785,7 @@ its <a href="http://www.linuxprinting.org/foomatic.html" target="_top">Foomatic< database. Currently there are <a href="http://www.linuxprinting.org/driver_list.cgi" target="_top">245 drivers</a> in the database: many drivers support various models, and many models may be driven by different drivers; it's your choice! -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944958"></a>690 "perfect" Printers</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953691"></a>690 "perfect" Printers</h4></div></div><div></div></div><p> At present there are 690 devices dubbed as working "perfectly", 181 "mostly", 96 "partially" and 46 are "Paperweights". Keeping in mind that most of these are non-PostScript models (PostScript printers are @@ -10793,7 +10796,7 @@ doesn't also scan and copy and fax under GNU/Linux: then this is a truly astonishing achievement. Three years ago the number was not more than 500, and Linux or UNIX "printing" at the time wasn't anywhere near the quality it is today! -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944982"></a>How the "Printing HOWTO" started it all</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953716"></a>How the "Printing HOWTO" started it all</h4></div></div><div></div></div><p> A few years ago <a href="http://www2.picante.com:81/~gtaylor/" target="_top">Grant Taylor</a> started it all. The roots of today's Linuxprinting.org are in the first <a href="http://www.linuxprinting.org/foomatic2.9/howto/" target="_top">Linux Printing @@ -10807,7 +10810,7 @@ hardware and driver zoo that made up Linux printing of the time. This database became the core component of today's Foomatic collection of tools and data. In the meantime it has moved to an XML representation of the data. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945028"></a>Foomatic's strange Name</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953761"></a>Foomatic's strange Name</h4></div></div><div></div></div><p> "Why the funny name?", you ask. When it really took off, around spring 2000, CUPS was far less popular than today, and most systems used LPD, LPRng or even PDQ to print. CUPS shipped with a few generic "drivers" @@ -10830,7 +10833,7 @@ developments available for CUPS;</p></li><li><p>It made available a lot of addit to CUPS users (because often the "traditional" Ghostscript way of printing was the only one available);</p></li><li><p>It gave all the advanced CUPS options (web interface, GUI driver configurations) to users wanting (or needing) to use -Ghostscript filters.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945095"></a>cupsomatic, pdqomatic, lpdomatic, directomatic</h4></div></div><div></div></div><p> +Ghostscript filters.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953828"></a>cupsomatic, pdqomatic, lpdomatic, directomatic</h4></div></div><div></div></div><p> CUPS worked through a quickly-hacked up filter script named <a href="http://www.linuxprinting.org/download.cgi?filename=cupsomatic&show=0" target="_top">cupsomatic</a>. cupsomatic ran the printfile through Ghostscript, constructing automatically the rather complicated command line needed. It just @@ -10864,7 +10867,7 @@ Foomatic up to versions 2.0.x required (ugly) Perl data structures attached the Linuxprinting.org PPDs for CUPS. It had a different "*omatic" script for every spooler, as well as different printer configuration files.. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945229"></a>7.13.1.5.The <span class="emphasis"><em>Grand Unification</em></span> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953960"></a>7.13.1.5.The <span class="emphasis"><em>Grand Unification</em></span> achieved...</h4></div></div><div></div></div><p> This all has changed in Foomatic versions 2.9 (Beta) and released as "stable" 3.0. This has now achieved the convergence of all *omatic @@ -10900,7 +10903,7 @@ sizes for many printers; and it will support printing on media drawn from different paper trays within the same job (in both cases: even where there is no support for this from Windows-based vendor printer drivers). -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945316"></a>Driver Development outside</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2954048"></a>Driver Development outside</h4></div></div><div></div></div><p> Most driver development itself does not happen within Linuxprinting.org. Drivers are written by independent maintainers. Linuxprinting.org just pools all the information, and stores it in its @@ -10923,7 +10926,7 @@ effort, started by Michael Sweet (also lead developer for CUPS), now directed by Robert Krawitz, which has achieved an amazing level of photo print quality (many Epson users swear that its quality is better than the vendor drivers provided by Epson for the Microsoft -platforms). This currently supports 522 models.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945397"></a>Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and +platforms). This currently supports 522 models.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2954126"></a>Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and commercial Unix</h4></div></div><div></div></div><p> Linuxprinting.org today is the one-stop "shop" to download printer drivers. Look for printer information and <a href="http://www.linuxprinting.org//kpfeifle/LinuxKongress2002/Tutorial/" target="_top">tutorials</a> @@ -10944,7 +10947,7 @@ of the Foomatic project. Till Kamppeter from MandrakeSoft is doing an excellent job in his spare time to maintain Linuxprinting.org and Foomatic. So if you use it often, please send him a note showing your appreciation. -</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945467"></a>Foomatic Database generated PPDs</h4></div></div><div></div></div><p> +</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2954199"></a>Foomatic Database generated PPDs</h4></div></div><div></div></div><p> The Foomatic database is an amazing piece of ingenuity in itself. Not only does it keep the printer and driver information, but it is organized in a way that it can generate "PPD" files "on the fly" from @@ -10969,7 +10972,7 @@ GUI tools (like KDE's marvellous <a href="http://printing.kde.org/overview/kprin or the GNOME <a href="http://gtklp.sourceforge.net/" target="_top">"gtklp"</a>, "xpp" and the CUPS web interface) read the PPD too and use this information to present the available settings to the user as an intuitive menu selection. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945532"></a>foomatic-rip and Foomatic-PPD Download and Installation</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954264"></a>foomatic-rip and Foomatic-PPD Download and Installation</h3></div></div><div></div></div><p> Here are the steps to install a foomatic-rip driven "LaserJet 4 Plus" compatible printer in CUPS (note that recent distributions of SuSE, UnitedLinux and Mandrake may ship with a complete package of @@ -11068,7 +11071,7 @@ the driver/model) contain support for a certain "device", representing the selected "driver" for your model (as shown by "gs -h")</p></li><li><p>foomatic-rip needs a new version of PPDs (PPD versions produced for cupsomatic don't work with -foomatic-rip).</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945993"></a>Page Accounting with CUPS</h2></div></div><div></div></div><p> +foomatic-rip).</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2954722"></a>Page Accounting with CUPS</h2></div></div><div></div></div><p> Often there are questions regarding "print quotas" wherein Samba users (that is, Windows clients) should not be able to print beyond a certain amount of pages or data volume per day, week or month. This @@ -11081,7 +11084,7 @@ Of course one could "hack" things with one's own scripts. But then there is CUPS. CUPS supports "quotas" which can be based on sizes of jobs or on the number of pages or both, and are spanning any time period you want. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946024"></a>Setting up Quotas</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954753"></a>Setting up Quotas</h3></div></div><div></div></div><p> This is an example command how root would set a print quota in CUPS, assuming an existing printer named "quotaprinter": </p><pre class="screen"> @@ -11092,7 +11095,7 @@ assuming an existing printer named "quotaprinter": This would limit every single user to print 100 pages or 1024 KB of data (whichever comes first) within the last 604,800 seconds ( = 1 week). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946056"></a>Correct and incorrect Accounting</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954784"></a>Correct and incorrect Accounting</h3></div></div><div></div></div><p> For CUPS to count correctly, the printfile needs to pass the CUPS "pstops" filter, otherwise it uses a "dummy" count of "1". Some printfiles don't pass it (eg: image files) but then those are mostly 1 @@ -11107,7 +11110,7 @@ printer is a non-PostScript model, you need to let CUPS do the job to convert the file to a print-ready format for the target printer. This will be working for currently about 1,000 different printer models, see <a href="http://www.linuxprinting.org/printer_list.cgi" target="_top">http://www.linuxprinting.org/printer_list.cgi</a>). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946097"></a>Adobe and CUPS PostScript Drivers for Windows Clients</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954825"></a>Adobe and CUPS PostScript Drivers for Windows Clients</h3></div></div><div></div></div><p> Before CUPS-1.1.16 your only option was to use the Adobe PostScript Driver on the Windows clients. The output of this driver was not always passed through the "pstops" filter on the CUPS/Samba side, and @@ -11127,7 +11130,7 @@ printfile</p></li></ul></div><p> You can read more about the setup of this combination in the manpage for "cupsaddsmb" (which is only present with CUPS installed, and only current from CUPS 1.1.16). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946169"></a>The page_log File Syntax</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954897"></a>The page_log File Syntax</h3></div></div><div></div></div><p> These are the items CUPS logs in the "page_log" for every single <span class="emphasis"><em>page</em></span> of a job: </p><div class="itemizedlist"><ul type="disc"><li><p>Printer name</p></li><li><p>User name</p></li><li><p>Job ID</p></li><li><p>Time of printing</p></li><li><p>the page number</p></li><li><p>the number of copies</p></li><li><p>a billing information string @@ -11149,7 +11152,7 @@ This was job ID "401", printed on "infotec_IS2027" by user & from IP address 10.160.50.13. The next job had ID "402", was sent by user "boss" from IP address 10.160.51.33,printed from one page 440 copies and is set to be billed to "finance-dep". -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946270"></a>Possible Shortcomings</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954998"></a>Possible Shortcomings</h3></div></div><div></div></div><p> What flaws or shortcomings are there with this quota system? </p><div class="itemizedlist"><ul type="disc"><li><p>the ones named above (wrongly logged job in case of printer hardware failure, etc.)</p></li><li><p>in reality, CUPS counts the job pages that are being @@ -11163,7 +11166,7 @@ groups</p></li><li><p>no means to read out the current balance or the "used-up" number of current quota</p></li><li><p>a user having used up 99 sheets of 100 quota will still be able to send and print a 1,000 sheet job</p></li><li><p>a user being denied a job because of a filled-up quota doesn't get a meaningful error message from CUPS other than -"client-error-not-possible".</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946341"></a>Future Developments</h3></div></div><div></div></div><p> +"client-error-not-possible".</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955070"></a>Future Developments</h3></div></div><div></div></div><p> This is the best system currently available, and there are huge improvements under development for CUPS 1.2: </p><div class="itemizedlist"><ul type="disc"><li><p>page counting will go into the "backends" (these talk @@ -11171,9 +11174,9 @@ directly to the printer and will increase the count in sync with the actual printing process: thus a jam at the 5th sheet will lead to a stop in the counting)</p></li><li><p>quotas will be handled more flexibly</p></li><li><p>probably there will be support for users to inquire their "accounts" in advance</p></li><li><p>probably there will be support for some other tools -around this topic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946390"></a>Other Accounting Tools</h3></div></div><div></div></div><p> +around this topic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955118"></a>Other Accounting Tools</h3></div></div><div></div></div><p> PrintAnalyzer, pyKota, printbill, LogReport. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946404"></a>Additional Material</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955133"></a>Additional Material</h2></div></div><div></div></div><p> A printer queue with <span class="emphasis"><em>no</em></span> PPD associated to it is a "raw" printer and all files will go directly there as received by the spooler. The exceptions are file types "application/octet-stream" @@ -11251,7 +11254,7 @@ the jobs of hundreds of users on some big machine, where no user is allowed to have direct access (such as when the operators often need to load the proper paper type before running the 10,000 page job requested by marketing for the mailing, etc.). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946598"></a>Auto-Deletion or Preservation of CUPS Spool Files</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955326"></a>Auto-Deletion or Preservation of CUPS Spool Files</h2></div></div><div></div></div><p> Samba print files pass through two "spool" directories. One is the incoming directory managed by Samba, (set in the <span class="emphasis"><em>path = /var/spool/samba</em></span> directive in the @@ -11260,7 +11263,7 @@ incoming directory managed by Samba, (set in the <span class="emphasis"><em>path your UNIX print subsystem. For CUPS it is normally <tt class="filename">/var/spool/cups/</tt>, as set by the cupsd.conf directive <tt class="filename">RequestRoot /var/spool/cups</tt>. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946644"></a>CUPS Configuration Settings explained</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955372"></a>CUPS Configuration Settings explained</h3></div></div><div></div></div><p> Some important parameter settings in the CUPS configuration file <tt class="filename">cupsd.conf</tt> are: </p><div class="variablelist"><dl><dt><span class="term">PreserveJobHistory Yes</span></dt><dd><p> @@ -11284,7 +11287,7 @@ maximum to 0 disables this functionality. The default setting is </p></dd></dl></div><p> (There are also additional settings for "MaxJobsPerUser" and "MaxJobsPerPrinter"...) -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946726"></a>Pre-conditions</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955454"></a>Pre-conditions</h3></div></div><div></div></div><p> For everything to work as announced, you need to have three things: </p><div class="itemizedlist"><ul type="disc"><li><p>a Samba-smbd which is compiled against "libcups" (Check @@ -11295,15 +11298,15 @@ In this case all other manually set printing-related commands (like "print command", "lpq command", "lprm command", "lppause command" or "lpresume command") are ignored and they should normally have no influence what-so-ever on your printing. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946787"></a>Manual Configuration</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955515"></a>Manual Configuration</h3></div></div><div></div></div><p> If you want to do things manually, replace the "printing = cups" by "printing = bsd". Then your manually set commands may work (haven't tested this), and a "print command = lp -d %P %s; rm %s" may do what you need. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946805"></a>When <span class="emphasis"><em>not</em></span> to use Samba to print to +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955533"></a>When <span class="emphasis"><em>not</em></span> to use Samba to print to CUPS</h2></div></div><div></div></div><p> [TO BE DONE] -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946822"></a>In Case of Trouble.....</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955550"></a>In Case of Trouble.....</h2></div></div><div></div></div><p> If you have more problems, post the output of these commands to the CUPS or Samba mailing lists (choose the one which seems more relevant to your problem): @@ -11319,13 +11322,13 @@ compact way. Don't forget to name the CUPS and Samba versions you are using! This saves bandwidth and makes for easier readability for experts (and you are expecting experts to read them, right? ;-) -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946857"></a>Where to find Documentation</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955585"></a>Where to find Documentation</h3></div></div><div></div></div><p> [TO BE DONE] -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946870"></a>How to ask for Help</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955598"></a>How to ask for Help</h3></div></div><div></div></div><p> [TO BE DONE] -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946883"></a>Where to find Help</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955611"></a>Where to find Help</h3></div></div><div></div></div><p> [TO BE DONE] -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946896"></a>Appendix</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946904"></a>Printing <span class="emphasis"><em>from</em></span> CUPS to Windows attached +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955625"></a>Appendix</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955632"></a>Printing <span class="emphasis"><em>from</em></span> CUPS to Windows attached Printers</h3></div></div><div></div></div><p> From time to time the question arises, how you can print <span class="emphasis"><em>to</em></span> a Windows attached printer @@ -11413,7 +11416,7 @@ doesn't require a password! Printing will only work if you have a working netbios name resolution up and running. Note that this is a feature of CUPS and you don't necessarily need to have smbd running (but who wants that? :-). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947118"></a>More CUPS filtering Chains</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955826"></a>More CUPS filtering Chains</h3></div></div><div></div></div><p> The following diagrams reveal how CUPS handles print jobs. </p><pre class="screen"> ######################################################################### @@ -11704,7 +11707,7 @@ The following diagrams reveal how CUPS handles print jobs. # CUPS and ESP PrintPro plug-in where rastertosomething is noted. # ########################################################################## -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947424"></a>Trouble Shooting Guidelines to fix typical Samba printing +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956080"></a>Trouble Shooting Guidelines to fix typical Samba printing Problems</h3></div></div><div></div></div><p> This is a short description of how to debug printing problems with Samba. This describes how to debug problems with printing from @@ -11817,35 +11820,35 @@ three dialogs <span class="emphasis"><em>look</em></span> the same. Only one of <span class="emphasis"><em>does</em></span> what you intend. You need to be Administrator or Print Administrator to do this for all users. Here is how I do in on XP: -</p><div class="orderedlist"><ol type="A"><li><p>The first "wrong" way: +</p><div class="orderedlist"><ol type="A"><li xmlns:ns66=""><ns66:p>The first "wrong" way: -</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span> +</ns66:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span> folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and select in context menu <span class="emphasis"><em>Printing Preferences...</em></span></p></li><li><p>Look at this dialog closely and remember what it looks -like.</p></li></ol></div><p> -</p></li><li><p>The second "wrong" way: +like.</p></li></ol></div><ns66:p> +</ns66:p></li><li xmlns:ns67=""><ns67:p>The second "wrong" way: -</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span> +</ns67:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span> folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and select in the context menu <span class="emphasis"><em>Properties</em></span></p></li><li><p>Click on the <span class="emphasis"><em>General</em></span> tab</p></li><li><p>Click on the button <span class="emphasis"><em>Printing Preferences...</em></span></p></li><li><p>A new dialog opens. Keep this dialog open and go back -to the parent dialog.</p></li></ol></div><p> -</p></li><li><p>The third, the "correct" way: (should you do +to the parent dialog.</p></li></ol></div><ns67:p> +</ns67:p></li><li xmlns:ns68=""><ns68:p>The third, the "correct" way: (should you do this from the beginning, just carry out steps 1. and 2. from second "way" above) -</p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="emphasis"><em>Advanced</em></span> +</ns68:p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="emphasis"><em>Advanced</em></span> tab. (Hmmm... if everything is "Grayed Out", then you are not logged in as a user with enough privileges).</p></li><li><p>Click on the <span class="emphasis"><em>Printing Defaults...</em></span> button.</p></li><li><p>On any of the two new tabs, click on the <span class="emphasis"><em>Advanced...</em></span> button.</p></li><li><p>A new dialog opens. Compare this one to the other, -identical looking one from "B.5" or A.3".</p></li></ol></div><p> -</p></li></ol></div><p> +identical looking one from "B.5" or A.3".</p></li></ol></div><ns68:p> +</ns68:p></li></ol></div><p> Do you see any difference? I don't either... However, only the last one, which you arrived at with steps "C.1.-6." will save any settings permanently and be the defaults for new users. If you want all clients @@ -11928,43 +11931,43 @@ Windows box with a shared PostScript printer: <b class="command">smbclient <tt class="filename">W32X86/2</tt> subdir to <b class="command">mget ADOBE*</b> and other files or to <tt class="filename">WIN40/0</tt> to do the same. -- Another option is to download the <tt class="filename">*.exe</tt> packaged -files from the Adobe website.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948546"></a>An Overview of the CUPS Printing Processes</h3></div></div><div></div></div><p> -</p><div class="figure"><a name="id2948557"></a><p class="title"><b>Figure19.15.CUPS Printing Overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/a_small.png" alt="CUPS Printing Overview"></div></div><p> -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="VFS"></a>Chapter20.Stackable VFS modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Simo</span> <span class="surname">Sorce</span></h3><span class="contrib">original vfs_skel README</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><span class="contrib">original vfs_netatalk docs</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><span class="contrib">Update for multiple modules</span></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2960717">Features and Benefits</a></dt><dt><a href="#id2960735">Discussion</a></dt><dt><a href="#id2960826">Included modules</a></dt><dd><dl><dt><a href="#id2960833">audit</a></dt><dt><a href="#id2960871">extd_audit</a></dt><dt><a href="#id2960995">fake_perms</a></dt><dt><a href="#id2961013">recycle</a></dt><dt><a href="#id2961151">netatalk</a></dt></dl></dd><dt><a href="#id2961195">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2961218">DatabaseFS</a></dt><dt><a href="#id2961273">vscan</a></dt></dl></dd><dt><a href="#id2961303">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960717"></a>Features and Benefits</h2></div></div><div></div></div><p> +files from the Adobe website.</p></dd></dl></div></div><div xmlns:ns69="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957186"></a>An Overview of the CUPS Printing Processes</h3></div></div><div></div></div><ns69:p> +</ns69:p><div class="figure"><a name="id2957196"></a><p class="title"><b>Figure19.15.CUPS Printing Overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/a_small.png" alt="CUPS Printing Overview"></div></div><ns69:p> +</ns69:p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="VFS"></a>Chapter20.Stackable VFS modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Simo</span> <span class="surname">Sorce</span></h3><span class="contrib">original vfs_skel README</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><span class="contrib">original vfs_netatalk docs</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><span class="contrib">Update for multiple modules</span></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2958605">Features and Benefits</a></dt><dt><a href="#id2958623">Discussion</a></dt><dt><a href="#id2957300">Included modules</a></dt><dd><dl><dt><a href="#id2957307">audit</a></dt><dt><a href="#id2957345">extd_audit</a></dt><dt><a href="#id2957466">fake_perms</a></dt><dt><a href="#id2957486">recycle</a></dt><dt><a href="#id2957625">netatalk</a></dt></dl></dd><dt><a href="#id2957671">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2957693">DatabaseFS</a></dt><dt><a href="#id2957748">vscan</a></dt></dl></dd><dt><a href="#id2957777">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958605"></a>Features and Benefits</h2></div></div><div></div></div><p> Since Samba-3, there is support for stackable VFS(Virtual File System) modules. Samba passes each request to access the unix file system thru the loaded VFS modules. This chapter covers all the modules that come with the samba source and references to some external modules. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960735"></a>Discussion</h2></div></div><div></div></div><p> +</p></div><div xmlns:ns70="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958623"></a>Discussion</h2></div></div><div></div></div><p> If not supplied with your platform distribution binary Samba package you may have problems to compile these modules, as shared libraries are compiled and linked in different ways on different systems. They currently have been tested against GNU/Linux and IRIX. -</p><p> +</p><ns70:p> To use the VFS modules, create a share similar to the one below. The important parameter is the <b class="command">vfs objects</b> parameter where you can list one or more VFS modules by name. For example, to log all access to files and put deleted files in a recycle bin: -</p><pre class="programlisting"> +</ns70:p><pre class="programlisting"> [audit] comment = Audited /data directory path = /data vfs objects = audit recycle writeable = yes browseable = yes -</pre><p> -</p><p> +</pre><ns70:p> +</ns70:p><p> The modules are used in the order in which they are specified. </p><p> Samba will attempt to load modules from the <span class="emphasis"><em>lib</em></span> directory in the root directory of the samba installation (usually <tt class="filename">/usr/lib/samba/vfs</tt> or <tt class="filename">/usr/local/samba/lib/vfs </tt>). -</p><p> +</p><ns70:p> Some modules can be used twice for the same share. This can be done using a configuration similar to the one below. -</p><pre class="programlisting"> +</ns70:p><pre class="programlisting"> [test] comment = VFS TEST path = /data @@ -11974,12 +11977,12 @@ This can be done using a configuration similar to the one below. example1: parameter = 1 example: parameter = 5 test: parameter = 7 -</pre><p> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960826"></a>Included modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960833"></a>audit</h3></div></div><div></div></div><p> +</pre><ns70:p> +</ns70:p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957300"></a>Included modules</h2></div></div><div></div></div><div xmlns:ns71="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957307"></a>audit</h3></div></div><div></div></div><ns71:p> A simple module to audit file access to the syslog facility. The following operations are logged: - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>share</td></tr><tr><td>connect/disconnect</td></tr><tr><td>directory opens/create/remove</td></tr><tr><td>file open/close/rename/unlink/chmod</td></tr></table><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960871"></a>extd_audit</h3></div></div><div></div></div><p> + </ns71:p><table class="simplelist" border="0" summary="Simple list"><tr><td>share</td></tr><tr><td>connect/disconnect</td></tr><tr><td>directory opens/create/remove</td></tr><tr><td>file open/close/rename/unlink/chmod</td></tr></table><ns71:p> + </ns71:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957345"></a>extd_audit</h3></div></div><div></div></div><p> This module is identical with the <span class="emphasis"><em>audit</em></span> module above except that it sends audit logs to both syslog as well as the smbd log file/s. The loglevel for this module is set in the smb.conf file. @@ -11987,23 +11990,23 @@ This can be done using a configuration similar to the one below. The logging information that will be written to the smbd log file is controlled by the <i class="parameter"><tt>log level</tt></i> parameter in <tt class="filename">smb.conf</tt>. The following information will be recorded: - </p><div class="table"><a name="id2960912"></a><p class="title"><b>Table20.1.Extended Auditing Log Information</b></p><table summary="Extended Auditing Log Information" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Log Level</th><th align="center">Log Details - File and Directory Operations</th></tr></thead><tbody><tr><td align="center">0</td><td align="left">Creation / Deletion</td></tr><tr><td align="center">1</td><td align="left">Create / Delete / Rename / Permission Changes</td></tr><tr><td align="center">2</td><td align="left">Create / Delete / Rename / Perm Change / Open / Close</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960995"></a>fake_perms</h3></div></div><div></div></div><p> + </p><div class="table"><a name="id2957384"></a><p class="title"><b>Table20.1.Extended Auditing Log Information</b></p><table summary="Extended Auditing Log Information" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Log Level</th><th align="center">Log Details - File and Directory Operations</th></tr></thead><tbody><tr><td align="center">0</td><td align="left">Creation / Deletion</td></tr><tr><td align="center">1</td><td align="left">Create / Delete / Rename / Permission Changes</td></tr><tr><td align="center">2</td><td align="left">Create / Delete / Rename / Perm Change / Open / Close</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957466"></a>fake_perms</h3></div></div><div></div></div><p> This module was created to allow Roaming Profile files and directories to be set (on the Samba server under Unix) as read only. This module will if installed on the Profiles share will report to the client that the Profile files and directories are writable. This satisfies the client even though the files will never be overwritten as the client logs out or shuts down. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961013"></a>recycle</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns72="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957486"></a>recycle</h3></div></div><div></div></div><p> A recycle-bin like module. When used any unlink call will be intercepted and files moved to the recycle directory instead of being deleted. - </p><p>Supported options: - </p><div class="variablelist"><dl><dt><span class="term">recycle:repository</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:keeptree</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:versions</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:touch</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:maxsize</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude_dir</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:noversions</span></dt><dd><p>FIXME</p></dd></dl></div><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961151"></a>netatalk</h3></div></div><div></div></div><p> + </p><ns72:p>Supported options: + </ns72:p><div class="variablelist"><dl><dt><span class="term">recycle:repository</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:keeptree</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:versions</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:touch</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:maxsize</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude_dir</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:noversions</span></dt><dd><p>FIXME</p></dd></dl></div><ns72:p> + </ns72:p></div><div xmlns:ns73="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957625"></a>netatalk</h3></div></div><div></div></div><p> A netatalk module, that will ease co-existence of samba and netatalk file sharing services. - </p><p>Advantages compared to the old netatalk module: - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>it doesn't care about creating of .AppleDouble forks, just keeps them in sync</td></tr><tr><td>if a share in <tt class="filename">smb.conf</tt> doesn't contain .AppleDouble item in hide or veto list, it will be added automatically</td></tr></table><p> - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961195"></a>VFS modules available elsewhere</h2></div></div><div></div></div><p> + </p><ns73:p>Advantages compared to the old netatalk module: + </ns73:p><table class="simplelist" border="0" summary="Simple list"><tr><td>it doesn't care about creating of .AppleDouble forks, just keeps them in sync</td></tr><tr><td>if a share in <tt class="filename">smb.conf</tt> doesn't contain .AppleDouble item in hide or veto list, it will be added automatically</td></tr></table><ns73:p> + </ns73:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957671"></a>VFS modules available elsewhere</h2></div></div><div></div></div><p> This section contains a listing of various other VFS modules that have been posted but don't currently reside in the Samba CVS tree for one reason or another (e.g. it is easy for the maintainer @@ -12011,7 +12014,7 @@ to have his or her own CVS tree). </p><p> No statements about the stability or functionality of any module should be implied due to its presence here. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961218"></a>DatabaseFS</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957693"></a>DatabaseFS</h3></div></div><div></div></div><p> URL: <a href="http://www.css.tayloru.edu/~elorimer/databasefs/index.php" target="_top">http://www.css.tayloru.edu/~elorimer/databasefs/index.php</a> </p><p>By <a href="mailto:elorimer@css.tayloru.edu" target="_top">Eric Lorimer</a>.</p><p> I have created a VFS module which implements a fairly complete read-only @@ -12026,15 +12029,15 @@ should be implied due to its presence here. Any feedback would be appreciated: comments, suggestions, patches, etc... If nothing else, hopefully it might prove useful for someone else who wishes to create a virtual filesystem. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961273"></a>vscan</h3></div></div><div></div></div><p>URL: <a href="http://www.openantivirus.org/" target="_top">http://www.openantivirus.org/</a></p><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957748"></a>vscan</h3></div></div><div></div></div><p>URL: <a href="http://www.openantivirus.org/" target="_top">http://www.openantivirus.org/</a></p><p> samba-vscan is a proof-of-concept module for Samba, which uses the VFS (virtual file system) features of Samba 2.2.x/3.0 alphaX. Of course, Samba has to be compiled with VFS support. samba-vscan supports various virus scanners and is maintained by Rainer Link. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961303"></a>Common Errors</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957777"></a>Common Errors</h2></div></div><div></div></div><p> There must be some gotchas we should record here! Jelmer??? -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="winbind"></a>Chapter21.Integrated Logon Support using Winbind</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tpot@linuxcare.com.au">tpot@linuxcare.com.au</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Naag</span> <span class="surname">Mummaneni</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:getnag@rediffmail.com">getnag@rediffmail.com</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div><p class="pubdate">27 June 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2962201">Features and Benefits</a></dt><dt><a href="#id2962229">Introduction</a></dt><dt><a href="#id2962301">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2962361">Target Uses</a></dt></dl></dd><dt><a href="#id2962392">How Winbind Works</a></dt><dd><dl><dt><a href="#id2962420">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2962454">Microsoft Active Directory Services</a></dt><dt><a href="#id2962477">Name Service Switch</a></dt><dt><a href="#id2962613">Pluggable Authentication Modules</a></dt><dt><a href="#id2962685">User and Group ID Allocation</a></dt><dt><a href="#id2962720">Result Caching</a></dt></dl></dd><dt><a href="#id2962747">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2962776">Introduction</a></dt><dt><a href="#id2962851">Requirements</a></dt><dt><a href="#id2962944">Testing Things Out</a></dt></dl></dd><dt><a href="#id2964563">Conclusion</a></dt><dt><a href="#id2964582">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962201"></a>Features and Benefits</h2></div></div><div></div></div><p>Integration of UNIX and Microsoft Windows NT through +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="winbind"></a>Chapter21.Integrated Logon Support using Winbind</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tpot@samba.org">tpot@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Naag</span> <span class="surname">Mummaneni</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:getnag@rediffmail.com">getnag@rediffmail.com</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div><p class="pubdate">27 June 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2958272">Features and Benefits</a></dt><dt><a href="#id2958300">Introduction</a></dt><dt><a href="#id2960332">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2960392">Target Uses</a></dt></dl></dd><dt><a href="#id2960423">How Winbind Works</a></dt><dd><dl><dt><a href="#id2960451">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2960484">Microsoft Active Directory Services</a></dt><dt><a href="#id2960506">Name Service Switch</a></dt><dt><a href="#id2957818">Pluggable Authentication Modules</a></dt><dt><a href="#id2957889">User and Group ID Allocation</a></dt><dt><a href="#id2957924">Result Caching</a></dt></dl></dd><dt><a href="#id2957952">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2957980">Introduction</a></dt><dt><a href="#id2958055">Requirements</a></dt><dt><a href="#id2959330">Testing Things Out</a></dt></dl></dd><dt><a href="#id2963732">Conclusion</a></dt><dt><a href="#id2963750">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958272"></a>Features and Benefits</h2></div></div><div></div></div><p>Integration of UNIX and Microsoft Windows NT through a unified logon has been considered a "holy grail" in heterogeneous computing environments for a long time. We present <span class="emphasis"><em>winbind</em></span>, a component of the Samba suite @@ -12044,7 +12047,7 @@ There must be some gotchas we should record here! Jelmer??? Service Switch to allow Windows NT domain users to appear and operate as UNIX users on a UNIX machine. This paper describes the winbind system, explaining the functionality it provides, how it is configured, - and how it works internally.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962229"></a>Introduction</h2></div></div><div></div></div><p>It is well known that UNIX and Microsoft Windows NT have + and how it works internally.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958300"></a>Introduction</h2></div></div><div></div></div><p>It is well known that UNIX and Microsoft Windows NT have different models for representing user and group information and use different technologies for implementing them. This fact has made it difficult to integrate the two systems in a satisfactory @@ -12065,7 +12068,7 @@ There must be some gotchas we should record here! Jelmer??? tasks for the system administrator when maintaining users and groups on either system. The winbind system provides a simple and elegant solution to all three components of the unified logon - problem.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962301"></a>What Winbind Provides</h2></div></div><div></div></div><p>Winbind unifies UNIX and Windows NT account management by + problem.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960332"></a>What Winbind Provides</h2></div></div><div></div></div><p>Winbind unifies UNIX and Windows NT account management by allowing a UNIX box to become a full member of a NT domain. Once this is done the UNIX box will see NT users and groups as if they were native UNIX users and groups, allowing the NT domain @@ -12089,7 +12092,7 @@ There must be some gotchas we should record here! Jelmer??? to provide authentication via a NT domain to any PAM enabled applications. This capability solves the problem of synchronizing passwords between systems since all passwords are stored in a single - location (on the domain controller).</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962361"></a>Target Uses</h3></div></div><div></div></div><p>Winbind is targeted at organizations that have an + location (on the domain controller).</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960392"></a>Target Uses</h3></div></div><div></div></div><p>Winbind is targeted at organizations that have an existing NT based domain infrastructure into which they wish to put UNIX workstations or servers. Winbind will allow these organizations to deploy UNIX workstations without having to @@ -12099,12 +12102,12 @@ There must be some gotchas we should record here! Jelmer??? be used is as a central part of UNIX based appliances. Appliances that provide file and print services to Microsoft based networks will be able to use Winbind to provide seamless integration of - the appliance into the domain.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962392"></a>How Winbind Works</h2></div></div><div></div></div><p>The winbind system is designed around a client/server + the appliance into the domain.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960423"></a>How Winbind Works</h2></div></div><div></div></div><p>The winbind system is designed around a client/server architecture. A long running <b class="command">winbindd</b> daemon listens on a UNIX domain socket waiting for requests to arrive. These requests are generated by the NSS and PAM clients and processed sequentially.</p><p>The technologies used to implement winbind are described - in detail below.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962420"></a>Microsoft Remote Procedure Calls</h3></div></div><div></div></div><p>Over the last few years, efforts have been underway + in detail below.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960451"></a>Microsoft Remote Procedure Calls</h3></div></div><div></div></div><p>Over the last few years, efforts have been underway by various Samba Team members to decode various aspects of the Microsoft Remote Procedure Call (MSRPC) system. This system is used for most network related operations between @@ -12117,7 +12120,7 @@ There must be some gotchas we should record here! Jelmer??? users or groups. Other MSRPC calls can be used to authenticate NT domain users and to change user passwords. By directly querying a Windows PDC for user and group information, winbind maps the - NT account information onto UNIX user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962454"></a>Microsoft Active Directory Services</h3></div></div><div></div></div><p> + NT account information onto UNIX user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960484"></a>Microsoft Active Directory Services</h3></div></div><div></div></div><p> Since late 2001, Samba has gained the ability to interact with Microsoft Windows 2000 using its 'Native Mode' protocols, rather than the NT4 RPC services. @@ -12126,7 +12129,7 @@ There must be some gotchas we should record here! Jelmer??? same way as a Win2k client would, and in so doing provide a much more efficient and effective winbind implementation. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962477"></a>Name Service Switch</h3></div></div><div></div></div><p>The Name Service Switch, or NSS, is a feature that is + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960506"></a>Name Service Switch</h3></div></div><div></div></div><p>The Name Service Switch, or NSS, is a feature that is present in many UNIX operating systems. It allows system information such as hostnames, mail aliases and user information to be resolved from different sources. For example, a standalone @@ -12163,7 +12166,7 @@ passwd: files example is to put <tt class="filename">libnss_winbind.so</tt> in <tt class="filename">/lib/</tt> then add "winbind" into <tt class="filename">/etc/nsswitch.conf</tt> at the appropriate place. The C library will then call Winbind to - resolve user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962613"></a>Pluggable Authentication Modules</h3></div></div><div></div></div><p>Pluggable Authentication Modules, also known as PAM, + resolve user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957818"></a>Pluggable Authentication Modules</h3></div></div><div></div></div><p>Pluggable Authentication Modules, also known as PAM, is a system for abstracting authentication and authorization technologies. With a PAM module it is possible to specify different authentication methods for different system applications without @@ -12188,7 +12191,7 @@ passwd: files example is copied to <tt class="filename">/lib/security/</tt> and the PAM control files for relevant services are updated to allow authentication via winbind. See the PAM documentation - for more details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962685"></a>User and Group ID Allocation</h3></div></div><div></div></div><p>When a user or group is created under Windows NT + for more details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957889"></a>User and Group ID Allocation</h3></div></div><div></div></div><p>When a user or group is created under Windows NT is it allocated a numerical relative identifier (RID). This is slightly different to UNIX which has a range of numbers that are used to identify users, and the same range in which to identify @@ -12201,7 +12204,7 @@ passwd: files example time, winbind will have mapped all Windows NT users and groups to UNIX user ids and group ids.</p><p>The results of this mapping are stored persistently in an ID mapping database held in a tdb database). This ensures that - RIDs are mapped to UNIX IDs in a consistent way.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962720"></a>Result Caching</h3></div></div><div></div></div><p>An active system can generate a lot of user and group + RIDs are mapped to UNIX IDs in a consistent way.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957924"></a>Result Caching</h3></div></div><div></div></div><p>An active system can generate a lot of user and group name lookups. To reduce the network cost of these lookups winbind uses a caching scheme based on the SAM sequence number supplied by NT domain controllers. User or group information returned @@ -12212,14 +12215,14 @@ passwd: files example the PDC and compared against the sequence number of the cached entry. If the sequence numbers do not match, then the cached information is discarded and up to date information is requested directly - from the PDC.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962747"></a>Installation and Configuration</h2></div></div><div></div></div><p> + from the PDC.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957952"></a>Installation and Configuration</h2></div></div><div></div></div><p> Many thanks to John Trostel <a href="mailto:jtrostel@snapserver.com" target="_top">jtrostel@snapserver.com</a> for providing the HOWTO for this section. </p><p> This HOWTO describes how to get winbind services up and running to control access and authenticate users on your Linux box using the winbind services which come with SAMBA 3.0. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962776"></a>Introduction</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957980"></a>Introduction</h3></div></div><div></div></div><p> This section describes the procedures used to get winbind up and running on a RedHat 7.1 system. Winbind is capable of providing access and authentication control for Windows Domain users through an NT @@ -12244,7 +12247,7 @@ somewhat to fit the way your distribution works. SAMBA server, this HOWTO is for you. That said, I am no NT or PAM expert, so you may find a better or easier way to accomplish these tasks. - </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962851"></a>Requirements</h3></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958055"></a>Requirements</h3></div></div><div></div></div><p> If you have a Samba configuration file that you are currently using... <span class="emphasis"><em>BACK IT UP!</em></span> If your system already uses PAM, <span class="emphasis"><em>back up the <tt class="filename">/etc/pam.d</tt> directory @@ -12271,7 +12274,7 @@ winbind modules, you should have at least the pam libraries resident on your system. For recent RedHat systems (7.1, for instance), that means <tt class="filename">pam-0.74-22</tt>. For best results, it is helpful to also install the development packages in <tt class="filename">pam-devel-0.74-22</tt>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962944"></a>Testing Things Out</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959330"></a>Testing Things Out</h3></div></div><div></div></div><p> Before starting, it is probably best to kill off all the SAMBA related daemons running on your server. Kill off all <span class="application">smbd</span>, <span class="application">nmbd</span>, and <span class="application">winbindd</span> processes that may @@ -12282,7 +12285,7 @@ services, several pam libraries, and the <tt class="filename">/usr/doc</tt> and <tt class="filename">/usr/man</tt> entries for pam. Winbind built better in SAMBA if the pam-devel package was also installed. This package includes the header files needed to compile pam-aware applications. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963006"></a>Configure and compile SAMBA</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959391"></a>Configure and compile SAMBA</h4></div></div><div></div></div><p> The configuration and compilation of SAMBA is pretty straightforward. The first three steps may not be necessary depending upon whether or not you have previously built the Samba binaries. @@ -12297,15 +12300,15 @@ whether or not you have previously built the Samba binaries. This will, by default, install SAMBA in <tt class="filename">/usr/local/samba</tt>. See the main SAMBA documentation if you want to install SAMBA somewhere else. It will also build the winbindd executable and libraries. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963118"></a>Configure <tt class="filename">nsswitch.conf</tt> and the +</p></div><div xmlns:ns74="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959503"></a>Configure <tt class="filename">nsswitch.conf</tt> and the winbind libraries on Linux and Solaris</h4></div></div><div></div></div><p> The libraries needed to run the <span class="application">winbindd</span> daemon through nsswitch need to be copied to their proper locations, so -</p><p> -</p><pre class="screen"> +</p><ns74:p> +</ns74:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>cp ../samba/source/nsswitch/libnss_winbind.so /lib</tt></b> -</pre><p> -</p><p> +</pre><ns74:p> +</ns74:p><p> I also found it necessary to make the following symbolic link: </p><p> <tt class="prompt">root# </tt> <b class="userinput"><tt>ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2</tt></b> @@ -12332,7 +12335,7 @@ is faster (and you don't need to reboot) if you do it manually: </p><p> This makes <tt class="filename">libnss_winbind</tt> available to winbindd and echos back a check to you. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963326"></a>NSS Winbind on AIX</h4></div></div><div></div></div><p>(This section is only for those running AIX)</p><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959711"></a>NSS Winbind on AIX</h4></div></div><div></div></div><p>(This section is only for those running AIX)</p><p> The winbind AIX identification module gets built as libnss_winbind.so in the nsswitch directory of the samba source. This file can be copied to /usr/lib/security, and the AIX naming convention would indicate that it @@ -12352,7 +12355,7 @@ Programming Concepts for AIX": <a href="http://publibn.boulder.ibm.com/doc_ Chapter 18. Loadable Authentication Module Programming Interface</a> and more information on administering the modules at <a href="http://publibn.boulder.ibm.com/doc_link/en_US/a_doc_lib/aixbman/baseadmn/iandaadmin.htm" target="_top"> "System Management Guide: Operating System and Devices"</a>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963405"></a>Configure smb.conf</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959782"></a>Configure smb.conf</h4></div></div><div></div></div><p> Several parameters are needed in the smb.conf file to control the behavior of <span class="application">winbindd</span>. Configure <tt class="filename">smb.conf</tt> These are described in more detail in @@ -12374,7 +12377,7 @@ include the following entries in the [global] section: # give winbind users a real shell (only needed if they have telnet access) <a href="winbindd.8.html#TEMPLATEHOMEDIR" target="_top">template homedir</a> = /home/winnt/%D/%U <a href="winbindd.8.html#TEMPLATESHELL" target="_top">template shell</a> = /bin/bash -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963522"></a>Join the SAMBA server to the PDC domain</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959896"></a>Join the SAMBA server to the PDC domain</h4></div></div><div></div></div><p> Enter the following command to make the SAMBA server join the PDC domain, where <i class="replaceable"><tt>DOMAIN</tt></i> is the name of your Windows domain and <i class="replaceable"><tt>Administrator</tt></i> is @@ -12385,7 +12388,7 @@ a domain user who has administrative privileges in the domain. The proper response to the command should be: "Joined the domain <i class="replaceable"><tt>DOMAIN</tt></i>" where <i class="replaceable"><tt>DOMAIN</tt></i> is your DOMAIN name. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963576"></a>Start up the winbindd daemon and test it!</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962791"></a>Start up the winbindd daemon and test it!</h4></div></div><div></div></div><p> Eventually, you will want to modify your smb startup script to automatically invoke the winbindd daemon when the other parts of SAMBA start, but it is possible to test out just the winbind @@ -12457,7 +12460,7 @@ directories and default shells. The same thing can be done for groups with the command </p><p> <tt class="prompt">root# </tt><b class="userinput"><tt>getent group</tt></b> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963817"></a>Fix the init.d startup scripts</h4></div></div><div></div></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963825"></a>Linux</h5></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963032"></a>Fix the init.d startup scripts</h4></div></div><div></div></div><div xmlns:ns75="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963039"></a>Linux</h5></div></div><div></div></div><p> The <span class="application">winbindd</span> daemon needs to start up after the <span class="application">smbd</span> and <span class="application">nmbd</span> daemons are running. To accomplish this task, you need to modify the startup scripts of your system. @@ -12488,18 +12491,18 @@ start() { touch /var/lock/subsys/smb || RETVAL=1 return $RETVAL } -</pre><p>If you would like to run winbindd in dual daemon mode, replace +</pre><ns75:p>If you would like to run winbindd in dual daemon mode, replace the line -</p><pre class="programlisting"> +</ns75:p><pre class="programlisting"> daemon /usr/local/samba/bin/winbindd -</pre><p> +</pre><ns75:p> in the example above with: -</p><pre class="programlisting"> +</ns75:p><pre class="programlisting"> daemon /usr/local/samba/bin/winbindd -B -</pre><p>. -</p><p> +</pre><ns75:p>. +</ns75:p><p> The 'stop' function has a corresponding entry to shut down the services and looks like this: </p><pre class="programlisting"> @@ -12523,7 +12526,7 @@ stop() { echo "" return $RETVAL } -</pre></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963987"></a>Solaris</h5></div></div><div></div></div><p>Winbind doesn't work on Solaris 9, see the <a href="#winbind-solaris9" title="Winbind on Solaris 9">Portability</a> chapter for details.</p><p>On Solaris, you need to modify the +</pre></div><div xmlns:ns76="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963185"></a>Solaris</h5></div></div><div></div></div><p>Winbind doesn't work on Solaris 9, see the <a href="#winbind-solaris9" title="Winbind on Solaris 9">Portability</a> chapter for details.</p><p>On Solaris, you need to modify the <tt class="filename">/etc/init.d/samba.server</tt> startup script. It usually only starts smbd and nmbd but should now start winbindd too. If you have samba installed in <tt class="filename">/usr/local/samba/bin</tt>, @@ -12575,22 +12578,22 @@ the file could contains something like this: echo "Usage: /etc/init.d/samba.server { start | stop }" ;; esac -</pre><p> +</pre><ns76:p> Again, if you would like to run samba in dual daemon mode, replace -</p><pre class="programlisting"> +</ns76:p><pre class="programlisting"> /usr/local/samba/bin/winbindd -</pre><p> +</pre><ns76:p> in the script above with: -</p><pre class="programlisting"> +</ns76:p><pre class="programlisting"> /usr/local/samba/bin/winbindd -B -</pre><p> -</p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2964105"></a>Restarting</h5></div></div><div></div></div><p> +</pre><ns76:p> +</ns76:p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963273"></a>Restarting</h5></div></div><div></div></div><p> If you restart the <span class="application">smbd</span>, <span class="application">nmbd</span>, and <span class="application">winbindd</span> daemons at this point, you should be able to connect to the samba server as a domain member just as if you were a local user. -</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2964142"></a>Configure Winbind and PAM</h4></div></div><div></div></div><p> +</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963310"></a>Configure Winbind and PAM</h4></div></div><div></div></div><p> If you have made it this far, you know that winbindd and samba are working together. If you want to use winbind to provide authentication for other services, keep reading. The pam configuration files need to be altered in @@ -12610,7 +12613,7 @@ your other pam security modules. On my RedHat system, this was the modules reside in <tt class="filename">/usr/lib/security</tt>. </p><p> <tt class="prompt">root# </tt><b class="userinput"><tt>cp ../samba/source/nsswitch/pam_winbind.so /lib/security</tt></b> -</p><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2964248"></a>Linux/FreeBSD-specific PAM configuration</h5></div></div><div></div></div><p> +</p><div xmlns:ns77="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963416"></a>Linux/FreeBSD-specific PAM configuration</h5></div></div><div></div></div><p> The <tt class="filename">/etc/pam.d/samba</tt> file does not need to be changed. I just left this file as it was: </p><pre class="programlisting"> @@ -12666,14 +12669,14 @@ same way. It now looks like this: password required /lib/security/pam_stack.so service=system-auth session required /lib/security/pam_stack.so service=system-auth session optional /lib/security/pam_console.so -</pre><p> -In this case, I added the </p><pre class="programlisting">auth sufficient /lib/security/pam_winbind.so</pre><p> -lines as before, but also added the </p><pre class="programlisting">required pam_securetty.so</pre><p> +</pre><ns77:p> +In this case, I added the </ns77:p><pre class="programlisting">auth sufficient /lib/security/pam_winbind.so</pre><ns77:p> +lines as before, but also added the </ns77:p><pre class="programlisting">required pam_securetty.so</pre><ns77:p> above it, to disallow root logins over the network. I also added a <b class="command">sufficient /lib/security/pam_unix.so use_first_pass</b> line after the <b class="command">winbind.so</b> line to get rid of annoying double prompts for passwords. -</p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2964472"></a>Solaris-specific configuration</h5></div></div><div></div></div><p> +</ns77:p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963640"></a>Solaris-specific configuration</h5></div></div><div></div></div><p> The /etc/pam.conf needs to be changed. I changed this file so that my Domain users can logon both locally as well as telnet.The following are the changes that I made.You can customize the pam.conf file as per your requirements,but @@ -12745,12 +12748,12 @@ annoying double prompts for passwords. </p><p> Now restart your Samba and try connecting through your application that you configured in the pam.conf. -</p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964563"></a>Conclusion</h2></div></div><div></div></div><p>The winbind system, through the use of the Name Service +</p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963732"></a>Conclusion</h2></div></div><div></div></div><p>The winbind system, through the use of the Name Service Switch, Pluggable Authentication Modules, and appropriate Microsoft RPC calls have allowed us to provide seamless integration of Microsoft Windows NT domain users on a UNIX system. The result is a great reduction in the administrative - cost of running a mixed UNIX and NT network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964582"></a>Common Errors</h2></div></div><div></div></div><p>Winbind has a number of limitations in its current + cost of running a mixed UNIX and NT network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963750"></a>Common Errors</h2></div></div><div></div></div><p>Winbind has a number of limitations in its current released version that we hope to overcome in future releases:</p><div class="itemizedlist"><ul type="disc"><li><p>Winbind is currently only available for the Linux, Solaris and IRIX operating systems, although ports to other operating @@ -12765,11 +12768,11 @@ configured in the pam.conf. containing this information is corrupted or destroyed.</p></li><li><p>Currently the winbind PAM module does not take into account possible workstation and logon time restrictions that may be been set for Windows NT users, this is - instead up to the PDC to enforce.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AdvancedNetworkManagement"></a>Chapter22.Advanced Network Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2967075">Features and Benefits</a></dt><dt><a href="#id2967264">Remote Server Administration</a></dt><dt><a href="#id2967363">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2967381">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2967592">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2967788">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2967822">Common Errors</a></dt></dl></div><p> + instead up to the PDC to enforce.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AdvancedNetworkManagement"></a>Chapter22.Advanced Network Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2965123">Features and Benefits</a></dt><dt><a href="#id2965154">Remote Server Administration</a></dt><dt><a href="#id2963838">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2963854">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2964055">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2964250">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2964283">Common Errors</a></dt></dl></div><p> This section documents peripheral issues that are of great importance to network administrators who want to improve network resource access control, to automate the user environment, and to make their lives a little easier. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967075"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2965123"></a>Features and Benefits</h2></div></div><div></div></div><p> Often the difference between a working network environment and a well appreciated one can best be measured by the <span class="emphasis"><em>little things</em></span> that makes everything work more harmoniously. A key part of every network environment solution is the ability to remotely @@ -12779,7 +12782,7 @@ network operations. </p><p> This chapter presents information on each of these area. They are placed here, and not in other chapters, for ease of reference. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967264"></a>Remote Server Administration</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2965154"></a>Remote Server Administration</h2></div></div><div></div></div><p> <span class="emphasis"><em>How do I get 'User Manager' and 'Server Manager'?</em></span> </p><p> Since I don't need to buy an <span class="application">NT4 Server</span>, how do I get the 'User Manager for Domains', @@ -12793,17 +12796,17 @@ Click here to download the archived file <a href="ftp://ftp.microsoft.com/Softli The <span class="application">Windows NT 4.0</span> version of the 'User Manager for Domains' and 'Server Manager' are available from Microsoft via ftp from <a href="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE" target="_top">ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE</a> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967363"></a>Remote Desktop Management</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963838"></a>Remote Desktop Management</h2></div></div><div></div></div><p> There are a number of possible remote desktop management solutions that range from free through costly. Do not let that put you off. Sometimes the most costly solutions is the most cost effective. In any case, you will need to draw your own conclusions as to which is the best tool in your network environment. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967381"></a>Remote Management from NoMachines.Com</h3></div></div><div></div></div><p> +</p><div xmlns:ns78="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963854"></a>Remote Management from NoMachines.Com</h3></div></div><div></div></div><p> The following information was posted to the Samba mailing list at Apr 3 23:33:50 GMT 2003. It is presented in slightly edited form (with author details omitted for privacy reasons). The entire answer is reproduced below with some comments removed. - </p><p> -</p><pre class="screen"> + </p><ns78:p> +</ns78:p><pre class="screen"> > I have a wonderful linux/samba server running as PDC for a network. > Now I would like to add remote desktop capabilities so that > users outside could login to the system and get their desktop up from @@ -12815,8 +12818,8 @@ is the best tool in your network environment. > even if the computer is in a domain? > > Any ideas/experience would be appreciated :) -</pre><p> -</p><p> +</pre><ns78:p> +</ns78:p><p> Answer provided: Check out the new offer from NoMachine, "NX" software: <a href="http://www.nomachine.com/" target="_top">http://www.nomachine.com/</a>. </p><p> @@ -12886,7 +12889,7 @@ is the best tool in your network environment. NoMachine are encouraging and offering help to OSS/Free Software implementations for such a frontend too, even if it means competition to them (they have written to this effect even to the LTSP, KDE and GNOME developer mailing lists) - </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967592"></a>Network Logon Script Magic</h2></div></div><div></div></div><p> + </p></li></ul></div></div></div><div xmlns:ns79="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964055"></a>Network Logon Script Magic</h2></div></div><div></div></div><p> This section needs work. Volunteer contributions most welcome. Please send your patches or updates to <a href="mailto:jht@samba.org" target="_top">John Terpstra</a>. </p><p> @@ -12898,10 +12901,10 @@ See <tt class="filename">examples</tt> directory <tt class="filename">genlogon</ <tt class="filename">ntlogon</tt> subdirectories. </p><p> The following listings are from the genlogon directory. -</p><p> +</p><ns79:p> This is the <tt class="filename">genlogon.pl</tt> file: -</p><pre class="programlisting"> +</ns79:p><pre class="programlisting"> #!/usr/bin/perl # # genlogon.pl @@ -12973,28 +12976,28 @@ This is the <tt class="filename">genlogon.pl</tt> file: # All done! Close the output file. close LOGON; -</pre><p> -</p><p> +</pre><ns79:p> +</ns79:p><p> Those wishing to use more elaborate or capable logon processing system should check out the following sites: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="http://www.craigelachie.org/rhacer/ntlogon" target="_top">http://www.craigelachie.org/rhacer/ntlogon</a></td></tr><tr><td><a href="http://www.kixtart.org" target="_top">http://www.kixtart.org</a></td></tr><tr><td><a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.asp?scid=kb;en-us;189105</a></td></tr></table><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967788"></a>Adding printers without user intervention</h3></div></div><div></div></div><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="http://www.craigelachie.org/rhacer/ntlogon" target="_top">http://www.craigelachie.org/rhacer/ntlogon</a></td></tr><tr><td><a href="http://www.kixtart.org" target="_top">http://www.kixtart.org</a></td></tr><tr><td><a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.asp?scid=kb;en-us;189105</a></td></tr></table><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964250"></a>Adding printers without user intervention</h3></div></div><div></div></div><ns79:p> Printers may be added automatically during logon script processing through the use of: -</p><pre class="programlisting"> +</ns79:p><pre class="programlisting"> rundll32 printui.dll,PrintUIEntry /? -</pre><p> +</pre><ns79:p> See the documentation in the <a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">Microsoft knowledgebase article no: 189105</a>. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967822"></a>Common Errors</h2></div></div><div></div></div><p> +</ns79:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964283"></a>Common Errors</h2></div></div><div></div></div><p> The information provided in this chapter has been reproduced from postings on the samba@samba.org mailing list. No implied endorsement or recommendation is offered. Administrators should conduct their own evaluation of alternatives and are encouraged to draw their own conclusions. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter23.System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2966885">Features and Benefits</a></dt><dt><a href="#id2966939">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2968722">Windows 9x/Me Policies</a></dt><dt><a href="#id2968817">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2968950">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2969202">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2969303">Samba Editreg Toolset</a></dt><dt><a href="#id2969324">Windows NT4/200x</a></dt><dt><a href="#id2969344">Samba PDC</a></dt></dl></dd><dt><a href="#id2969388">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2969535">Common Errors</a></dt><dd><dl><dt><a href="#id2969549">Policy Does Not Work</a></dt></dl></dd></dl></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter23.System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2964680">Features and Benefits</a></dt><dt><a href="#id2964732">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2964843">Windows 9x/Me Policies</a></dt><dt><a href="#id2964391">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2964524">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2965966">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2966066">Samba Editreg Toolset</a></dt><dt><a href="#id2966087">Windows NT4/200x</a></dt><dt><a href="#id2966107">Samba PDC</a></dt></dl></dd><dt><a href="#id2966152">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2966299">Common Errors</a></dt><dd><dl><dt><a href="#id2966313">Policy Does Not Work</a></dt></dl></dd></dl></div><p> This chapter summarises the current state of knowledge derived from personal practice and knowledge from samba mailing list subscribers. Before reproduction of posted information effort has been made to validate the information provided. Where additional information was uncovered through this validation it is provided also. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966885"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964680"></a>Features and Benefits</h2></div></div><div></div></div><p> When MS Windows NT3.5 was introduced the hot new topic was the ability to implement Group Policies for users and group. Then along came MS Windows NT4 and a few sites started to adopt this capability. How do we know that? By way of the number of "booboos" @@ -13015,7 +13018,7 @@ network client workstations. </p><p> A tool new to Samba-3 may become an important part of the future Samba Administrators' arsenal. The <b class="command">editreg</b> tool is described in this document. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966939"></a>Creating and Managing System Policies</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964732"></a>Creating and Managing System Policies</h2></div></div><div></div></div><p> Under MS Windows platforms, particularly those following the release of MS Windows NT4 and MS Windows 95) it is possible to create a type of file that would be placed in the NETLOGON share of a domain controller. As the client logs onto the network @@ -13050,7 +13053,7 @@ be read and understood. Try searching on the Microsoft web site for "Group </p><p> What follows is a very brief discussion with some helpful notes. The information provided here is incomplete - you are warned. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968722"></a>Windows 9x/Me Policies</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964843"></a>Windows 9x/Me Policies</h3></div></div><div></div></div><p> You need the Win98 Group Policy Editor to set Group Profiles up under Windows 9x/Me. It can be found on the Original full product Win98 installation CD under <tt class="filename">tools/reskit/netadmin/poledit</tt>. Install this using the @@ -13076,7 +13079,7 @@ here is incomplete - you are warned. <tt class="filename">grouppol.inf</tt>. Log off and on again a couple of times and see if Win98 picks up group policies. Unfortunately this needs to be done on every Win9x/Me machine that uses group policies. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968817"></a>Windows NT4 Style Policy Files</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964391"></a>Windows NT4 Style Policy Files</h3></div></div><div></div></div><p> To create or edit <tt class="filename">ntconfig.pol</tt> you must use the NT Server Policy Editor, <b class="command">poledit.exe</b> which is included with NT4 Server but <span class="emphasis"><em>not NT Workstation</em></span>. There is a Policy Editor on a NT4 @@ -13097,14 +13100,14 @@ here is incomplete - you are warned. be extracted as well. It is also possible to downloaded the policy template files for Office97 and get a copy of the policy editor. Another possible location is with the Zero Administration Kit available for download from Microsoft. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2968926"></a>Registry Spoiling</h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2964500"></a>Registry Spoiling</h4></div></div><div></div></div><p> With NT4 style registry based policy changes, a large number of settings are not automatically reversed as the user logs off. Since the settings that were in the NTConfig.POL file were applied to the client machine registry and that apply to the hive key HKEY_LOCAL_MACHINE are permanent until explicitly reversed. This is known as tattooing. It can have serious consequences down-stream and the administrator must be extremely careful not to lock out the ability to manage the machine at a later date. - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968950"></a>MS Windows 200x / XP Professional Policies</h3></div></div><div></div></div><p> + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964524"></a>MS Windows 200x / XP Professional Policies</h3></div></div><div></div></div><p> Windows NT4 System policies allows setting of registry parameters specific to users, groups and computers (client workstations) that are members of the NT4 style domain. Such policy file will work with MS Windows 2000 / XP clients also. @@ -13141,7 +13144,7 @@ here is incomplete - you are warned. to any number of concurrently applicable (and applied) policy sets (GPOs). Active Directory allows the administrator to also set filters over the policy settings. No such equivalent capability exists with NT4 style policy files. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2969051"></a>Administration of Win2K / XP Policies</h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2964625"></a>Administration of Win2K / XP Policies</h4></div></div><div></div></div><p> Instead of using the tool called <span class="application">The System Policy Editor</span>, commonly called Poledit (from the executable name <b class="command">poledit.exe</b>), <span class="acronym">GPOs</span> are created and managed using a <span class="application">Microsoft Management Console</span> <span class="acronym">(MMC)</span> snap-in as follows:</p><div class="procedure"><ol type="1"><li><p> @@ -13167,7 +13170,7 @@ here is incomplete - you are warned. The MS Windows 2000 Resource Kit contains a tool called gpolmig.exe. This tool can be used to migrate an NT4 NTConfig.POL file into a Windows 200x style GPO. Be VERY careful how you use this powerful tool. Please refer to the resource kit manuals for specific usage information. - </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2969202"></a>Managing Account/User Policies</h2></div></div><div></div></div><p> + </p></div></div></div></div><div xmlns:ns80="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2965966"></a>Managing Account/User Policies</h2></div></div><div></div></div><p> Policies can define a specific user's settings or the settings for a group of users. The resulting policy file contains the registry settings for all users, groups, and computers that will be using the policy file. Separate policy files for each user, group, or computer are not not necessary. @@ -13192,42 +13195,42 @@ In addition to user access controls that may be imposed or applied via system an in a manner that works in conjunction with user profiles, the user management environment under MS Windows NT4/200x/XP allows per domain as well as per user account restrictions to be applied. Common restrictions that are frequently used includes: -</p><p> -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Logon Hours</td></tr><tr><td>Password Aging</td></tr><tr><td>Permitted Logon from certain machines only</td></tr><tr><td>Account type (Local or Global)</td></tr><tr><td>User Rights</td></tr></table><p> -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969303"></a>Samba Editreg Toolset</h3></div></div><div></div></div><p> +</p><ns80:p> +</ns80:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Logon Hours</td></tr><tr><td>Password Aging</td></tr><tr><td>Permitted Logon from certain machines only</td></tr><tr><td>Account type (Local or Global)</td></tr><tr><td>User Rights</td></tr></table><ns80:p> +</ns80:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966066"></a>Samba Editreg Toolset</h3></div></div><div></div></div><p> Describe in detail the benefits of <b class="command">editreg</b> and how to use it. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969324"></a>Windows NT4/200x</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966087"></a>Windows NT4/200x</h3></div></div><div></div></div><p> The tools that may be used to configure these types of controls from the MS Windows environment are: The NT4 User Manager for domains, the NT4 System and Group Policy Editor, the registry editor (regedt32.exe). Under MS Windows 200x/XP this is done using the Microsoft Management Console (MMC) with appropriate "snap-ins", the registry editor, and potentially also the NT4 System and Group Policy Editor. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969344"></a>Samba PDC</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966107"></a>Samba PDC</h3></div></div><div></div></div><p> With a Samba Domain Controller, the new tools for managing of user account and policy information includes: <b class="command">smbpasswd</b>, <b class="command">pdbedit</b>, <b class="command">net</b>, <b class="command">rpcclient</b>. The administrator should read the man pages for these tools and become familiar with their use. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2969388"></a>System Startup and Logon Processing Overview</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966152"></a>System Startup and Logon Processing Overview</h2></div></div><div></div></div><p> The following attempts to document the order of processing of system and user policies following a system reboot and as part of the user logon: </p><div class="orderedlist"><ol type="1"><li><p> Network starts, then Remote Procedure Call System Service (RPCSS) and Multiple Universal Naming Convention Provider (MUP) start - </p></li><li><p> + </p></li><li xmlns:ns81=""><ns81:p> Where Active Directory is involved, an ordered list of Group Policy Objects (GPOs) is downloaded and applied. The list may include GPOs that: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Apply to the location of machines in a Directory</td></tr><tr><td>Apply only when settings have changed</td></tr><tr><td>Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.</td></tr></table><p> +</ns81:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Apply to the location of machines in a Directory</td></tr><tr><td>Apply only when settings have changed</td></tr><tr><td>Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.</td></tr></table><ns81:p> No desktop user interface is presented until the above have been processed. - </p></li><li><p> + </ns81:p></li><li><p> Execution of start-up scripts (hidden and synchronous by default). </p></li><li><p> A keyboard action to affect start of logon (Ctrl-Alt-Del). </p></li><li><p> User credentials are validated, User profile is loaded (depends on policy settings). - </p></li><li><p> + </p></li><li xmlns:ns82=""><ns82:p> An ordered list of User GPOs is obtained. The list contents depends on what is configured in respect of: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Is user a domain member, thus subject to particular policies</td></tr><tr><td>Loopback enablement, and the state of the loopback policy (Merge or Replace)</td></tr><tr><td>Location of the Active Directory itself</td></tr><tr><td>Has the list of GPOs changed. No processing is needed if not changed.</td></tr></table><p> - </p></li><li><p> +</ns82:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Is user a domain member, thus subject to particular policies</td></tr><tr><td>Loopback enablement, and the state of the loopback policy (Merge or Replace)</td></tr><tr><td>Location of the Active Directory itself</td></tr><tr><td>Has the list of GPOs changed. No processing is needed if not changed.</td></tr></table><ns82:p> + </ns82:p></li><li><p> User Policies are applied from Active Directory. Note: There are several types. </p></li><li><p> Logon scripts are run. New to Win2K and Active Directory, logon scripts may be obtained based on Group @@ -13236,10 +13239,10 @@ reboot and as part of the user logon: </p></li><li><p> The User Interface as determined from the GPOs is presented. Note: In a Samba domain (like and NT4 Domain) machine (system) policies are applied at start-up, User policies are applied at logon. - </p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2969535"></a>Common Errors</h2></div></div><div></div></div><p> + </p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966299"></a>Common Errors</h2></div></div><div></div></div><p> Policy related problems can be very difficult to diagnose and even more difficult to rectify. The following collection demonstrates only basic issues. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969549"></a>Policy Does Not Work</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966313"></a>Policy Does Not Work</h3></div></div><div></div></div><p> Question: We have created the <tt class="filename">config.pol</tt> file and put it in the <span class="emphasis"><em>NETLOGON</em></span> share. It has made no difference to our Win XP Pro machines, they just don't see it. IT worked fine with Win 98 but does not work any longer since we upgraded to Win XP Pro. Any hints? @@ -13247,7 +13250,7 @@ work any longer since we upgraded to Win XP Pro. Any hints? <span class="emphasis"><em>ANSWER:</em></span> Policy files are NOT portable between Windows 9x / Me and MS Windows NT4 / 200x / XP based platforms. You need to use the NT4 Group Policy Editor to create a file called <tt class="filename">NTConfig.POL</tt> so that it is in the correct format for your MS Windows XP Pro clients. -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ProfileMgmt"></a>Chapter24.Desktop Profile Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2970756">Features and Benefits</a></dt><dt><a href="#id2970790">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2970831">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971236">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972407">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972472">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2972737">Mandatory profiles</a></dt><dt><a href="#id2972795">Creating/Managing Group Profiles</a></dt><dt><a href="#id2972841">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2972861">MS Windows 9x/Me</a></dt><dt><a href="#id2973009">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973563">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974067">Common Errors</a></dt><dd><dl><dt><a href="#id2974080">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974143">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974365">Changing the default profile</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2970756"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ProfileMgmt"></a>Chapter24.Desktop Profile Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2966416">Features and Benefits</a></dt><dt><a href="#id2966449">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2966490">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971852">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972789">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972854">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2973114">Mandatory profiles</a></dt><dt><a href="#id2973172">Creating/Managing Group Profiles</a></dt><dt><a href="#id2973217">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2973237">MS Windows 9x/Me</a></dt><dt><a href="#id2973385">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973939">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974443">Common Errors</a></dt><dd><dl><dt><a href="#id2974456">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974519">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974737">Changing the default profile</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966416"></a>Features and Benefits</h2></div></div><div></div></div><p> Roaming Profiles are feared by some, hated by a few, loved by many, and a Godsend for some administrators. </p><p> @@ -13260,7 +13263,7 @@ problem to others. In particular, users of mobile computing tools, where often t be a sustained network connection, are often better served by purely Local Profiles. This chapter provides information to help the Samba administrator to deal with those situations also. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2970790"></a>Roaming Profiles</h2></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966449"></a>Roaming Profiles</h2></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> Roaming profiles support is different for Win9x / Me and Windows NT4/200x. </p></div><p> Before discussing how to configure roaming profiles, it is useful to see how @@ -13273,23 +13276,23 @@ profiles are restricted to being stored in the user's home directory. </p><p> Windows NT4/200x clients send a NetSAMLogon RPC request, which contains many fields, including a separate field for the location of the user's profiles. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970831"></a>Samba Configuration for Profile Handling</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966490"></a>Samba Configuration for Profile Handling</h3></div></div><div></div></div><p> This section documents how to configure Samba for MS Windows client profile support. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970844"></a>NT4/200x User Profiles</h4></div></div><div></div></div><p> +</p><div xmlns:ns83="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2966503"></a>NT4/200x User Profiles</h4></div></div><div></div></div><p> To support Windows NT4/200x clients, in the [global] section of smb.conf set the following (for example): -</p><p> -</p><pre class="programlisting"> +</p><ns83:p> +</ns83:p><pre class="programlisting"> logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath -</pre><p> +</pre><ns83:p> This is typically implemented like: -</p><pre class="programlisting"> +</ns83:p><pre class="programlisting"> logon path = \\%L\Profiles\%u -</pre><p> +</pre><ns83:p> where %L translates to the name of the Samba server and %u translates to the user name -</p><p> +</ns83:p><p> The default for this option is <tt class="filename">\\%N\%U\profile</tt>, namely <tt class="filename">\\sambaserver\username\profile</tt>. The <tt class="filename">\\N%\%U</tt> service is created automatically by the [homes] service. If you are using @@ -13300,7 +13303,7 @@ semantics of %L and %N, as well as %U and %u. MS Windows NT/2K clients at times do not disconnect a connection to a server between logons. It is recommended to NOT use the <i class="parameter"><tt>homes</tt></i> meta-service name as part of the profile share path. -</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970937"></a>Windows 9x / Me User Profiles</h4></div></div><div></div></div><p> +</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2966592"></a>Windows 9x / Me User Profiles</h4></div></div><div></div></div><p> To support Windows 9x / Me clients, you must use the <i class="parameter"><tt>logon home</tt></i> parameter. Samba has now been fixed so that <b class="userinput"><tt>net use /home</tt></b> now works as well, and it, too, relies on the <b class="command">logon home</b> parameter. @@ -13318,28 +13321,28 @@ Not only that, but <b class="userinput"><tt>net use /home</tt></b> will also wor Windows 9x / Me. It removes any directory stuff off the end of the home directory area and only uses the server and share portion. That is, it looks like you specified <tt class="filename">\\%L\%U</tt> for <i class="parameter"><tt>logon home</tt></i>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971046"></a>Mixed Windows 9x / Me and Windows NT4/200x User Profiles</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971667"></a>Mixed Windows 9x / Me and Windows NT4/200x User Profiles</h4></div></div><div></div></div><p> You can support profiles for both Win9X and WinNT clients by setting both the <i class="parameter"><tt>logon home</tt></i> and <i class="parameter"><tt>logon path</tt></i> parameters. For example: </p><pre class="programlisting"> logon home = \\%L\%u\.profiles logon path = \\%L\profiles\%u -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971085"></a>Disabling Roaming Profile Support</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971703"></a>Disabling Roaming Profile Support</h4></div></div><div></div></div><p> A question often asked is “<span class="quote">How may I enforce use of local profiles?</span>” or “<span class="quote">How do I disable Roaming Profiles?</span>” </p><p> There are three ways of doing this: -</p><div class="variablelist"><dl><dt><span class="term">In <tt class="filename">smb.conf</tt></span></dt><dd><p> +</p><div class="variablelist"><dl><dt><span class="term">In <tt class="filename">smb.conf</tt></span></dt><dd xmlns:ns84=""><ns84:p> Affect the following settings and ALL clients will be forced to use a local profile: - </p><pre class="programlisting"> + </ns84:p><pre class="programlisting"> logon home = logon path = - </pre><p> - </p></dd><dt><span class="term">MS Windows Registry:</span></dt><dd><p> + </pre><ns84:p> + </ns84:p></dd><dt><span class="term">MS Windows Registry:</span></dt><dd xmlns:ns85=""><ns85:p> By using the Microsoft Management Console gpedit.msc to instruct your MS Windows XP machine to use only a local profile. This of course modifies registry settings. The full path to the option is: - </p><pre class="programlisting"> + </ns85:p><pre class="programlisting"> Local Computer Policy\ Computer Configuration\ Administrative Templates\ @@ -13348,8 +13351,8 @@ There are three ways of doing this: Disable: Only Allow Local User Profiles Disable: Prevent Roaming Profile Change from Propagating to the Server - </pre><p> - </p></dd><dt><span class="term">Change of Profile Type:</span></dt><dd><p> + </pre><ns85:p> + </ns85:p></dd><dt><span class="term">Change of Profile Type:</span></dt><dd><p> From the start menu right click on the My Computer icon, select <span class="guimenuitem">Properties</span>, click on the <span class="guilabel">User Profiles</span> tab, select the profile you wish to change from Roaming type to Local, click <span class="guibutton">Change Type</span>. @@ -13361,7 +13364,7 @@ profiles. The specifics of how to convert a local profile to a roaming profile, or a roaming profile to a local one vary according to the version of MS Windows you are running. Consult the Microsoft MS Windows Resource Kit for your version of Windows for specific information. -</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2971236"></a>Windows Client Profile Configuration Information</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971244"></a>Windows 9x / Me Profile Setup</h4></div></div><div></div></div><p> +</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2971852"></a>Windows Client Profile Configuration Information</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971860"></a>Windows 9x / Me Profile Setup</h4></div></div><div></div></div><p> When a user first logs in on Windows 9X, the file user.DAT is created, as are folders <tt class="filename">Start Menu</tt>, <tt class="filename">Desktop</tt>, <tt class="filename">Programs</tt> and <tt class="filename">Nethood</tt>. @@ -13467,7 +13470,7 @@ If you have access to an Windows NT4/200x server, then first set up roaming prof and / or netlogons on the Windows NT4/200x server. Make a packet trace, or examine the example packet traces provided with Windows NT4/200x server, and see what the differences are with the equivalent samba trace. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971738"></a>Windows NT4 Workstation</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2968061"></a>Windows NT4 Workstation</h4></div></div><div></div></div><p> When a user first logs in to a Windows NT Workstation, the profile NTuser.DAT is created. The profile location can be now specified through the <i class="parameter"><tt>logon path</tt></i> parameter. @@ -13496,7 +13499,7 @@ turns a profile into a mandatory one. </p><p> The case of the profile is significant. The file must be called <tt class="filename">NTuser.DAT</tt> or, for a mandatory profile, <tt class="filename">NTuser.MAN</tt>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971896"></a>Windows 2000/XP Professional</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2968219"></a>Windows 2000/XP Professional</h4></div></div><div></div></div><p> You must first convert the profile from a local profile to a domain profile on the MS Windows workstation as follows: </p><div class="procedure"><ol type="1"><li><p> @@ -13546,7 +13549,7 @@ On the XP workstation log in with an Administrator account. </p></li><li><p>Click: <span class="guimenu">Start</span>, <span class="guimenuitem">Run</span></p></li><li><p>Type: <b class="userinput"><tt>mmc</tt></b></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>A Microsoft Management Console should appear.</p></li><li><p>Click: <span class="guimenu">File</span>, <span class="guimenuitem">Add/Remove Snap-in...</span>, <span class="guimenuitem">Add</span></p></li><li><p>Double-Click: <span class="guiicon">Group Policy</span></p></li><li><p>Click: <span class="guibutton">Finish</span>, <span class="guibutton">Close</span></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>In the "Console Root" window:</p></li><li><p>Expand: <span class="guiicon">Local Computer Policy</span>, <span class="guiicon">Computer Configuration</span>, <span class="guiicon">Administrative Templates</span>, <span class="guiicon">System</span>, <span class="guiicon">User Profiles</span></p></li><li><p>Double-Click: <span class="guilabel">Do not check for user ownership of Roaming Profile Folders</span></p></li><li><p>Select: <span class="guilabel">Enabled</span></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>Close the whole console. You do not need to save the settings (this refers to the console settings rather than the policies you have - changed).</p></li><li><p>Reboot</p></li></ol></div></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972407"></a>Sharing Profiles between W9x/Me and NT4/200x/XP workstations</h3></div></div><div></div></div><p> + changed).</p></li><li><p>Reboot</p></li></ol></div></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972789"></a>Sharing Profiles between W9x/Me and NT4/200x/XP workstations</h3></div></div><div></div></div><p> Sharing of desktop profiles between Windows versions is NOT recommended. Desktop profiles are an evolving phenomenon and profiles for later versions of MS Windows clients add features that may interfere with earlier versions @@ -13563,12 +13566,12 @@ that need to be common are <i class="parameter"><tt>logon path</tt></i> and </p><p> If you have this set up correctly, you will find separate <tt class="filename">user.DAT</tt> and <tt class="filename">NTuser.DAT</tt> files in the same profile directory. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972472"></a>Profile Migration from Windows NT4/200x Server to Samba</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972854"></a>Profile Migration from Windows NT4/200x Server to Samba</h3></div></div><div></div></div><p> There is nothing to stop you specifying any path that you like for the location of users' profiles. Therefore, you could specify that the profile be stored on a samba server, or any other SMB server, as long as that SMB server supports encrypted passwords. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2972489"></a>Windows NT4 Profile Management Tools</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2972871"></a>Windows NT4 Profile Management Tools</h4></div></div><div></div></div><p> Unfortunately, the Resource Kit information is specific to the version of MS Windows NT4/200x. The correct resource kit is required for each platform. </p><p> @@ -13585,17 +13588,17 @@ domain is not a member of a trust relationship with your NT4 PDC.</p></div></li> <tt class="filename">c:\temp\foobar</tt></p></li><li><p>Click on the button <span class="guibutton">Change</span> in the <span class="guilabel">Permitted to use</span> box.</p></li><li><p>Click on the group 'Everyone' and then click <span class="guibutton">OK</span>. This closes the 'choose user' box.</p></li><li><p>Now click <span class="guibutton">OK</span>.</p></li></ol></div><p> Follow the above for every profile you need to migrate. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2972658"></a>Side bar Notes</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2973034"></a>Side bar Notes</h4></div></div><div></div></div><p> You should obtain the SID of your NT4 domain. You can use smbpasswd to do this. Read the man page.</p><p> With Samba-3.0.0 alpha code you can import all you NT4 domain accounts using the net samsync method. This way you can retain your profile settings as well as all your users. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2972680"></a>moveuser.exe</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2973056"></a>moveuser.exe</h4></div></div><div></div></div><p> The W2K professional resource kit has moveuser.exe. moveuser.exe changes the security of a profile from one user to another. This allows the account domain to change, and/or the user name to change. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2972696"></a>Get SID</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2973072"></a>Get SID</h4></div></div><div></div></div><p> You can identify the SID by using GetSID.exe from the Windows NT Server 4.0 Resource Kit. </p><p> @@ -13608,7 +13611,7 @@ users who have logged on to this computer. (To find the profile information for the user whose locally cached profile you want to move, find the SID for the user with the GetSID.exe utility.) Inside of the appropriate user's subkey, you will see a string value named ProfileImagePath. -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972737"></a>Mandatory profiles</h2></div></div><div></div></div><p> +</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973114"></a>Mandatory profiles</h2></div></div><div></div></div><p> A Mandatory Profile is a profile that the user does NOT have the ability to overwrite. During the user's session it may be possible to change the desktop environment, but as the user logs out all changes made will be lost. If it is desired to NOT allow the @@ -13624,7 +13627,7 @@ file in the copied profile and rename it to NTUser.MAN. </p><p> For MS Windows 9x / Me it is the <tt class="filename">User.DAT</tt> file that must be renamed to <tt class="filename">User.MAN</tt> to affect a mandatory profile. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972795"></a>Creating/Managing Group Profiles</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973172"></a>Creating/Managing Group Profiles</h2></div></div><div></div></div><p> Most organisations are arranged into departments. There is a nice benefit in this fact since usually most users in a department will require the same desktop applications and the same desktop layout. MS Windows NT4/200x/XP will allow the @@ -13639,14 +13642,14 @@ the now modified profile. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> Be careful with group profiles, if the user who is a member of a group also has a personal profile, then the result will be a fusion (merge) of the two. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972841"></a>Default Profile for Windows Users</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973217"></a>Default Profile for Windows Users</h2></div></div><div></div></div><p> MS Windows 9x / Me and NT4/200x/XP will use a default profile for any user for whom a profile does not already exist. Armed with a knowledge of where the default profile is located on the Windows workstation, and knowing which registry keys affect the path from which the default profile is created, it is possible to modify the default profile to one that has been optimised for the site. This has significant administrative advantages. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972861"></a>MS Windows 9x/Me</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973237"></a>MS Windows 9x/Me</h3></div></div><div></div></div><p> To enable default per use profiles in Windows 9x / Me you can either use the <span class="application">Windows 98 System Policy Editor</span> or change the registry directly. </p><p> @@ -13658,7 +13661,7 @@ select <span class="guilabel">User Profiles</span>, click on the enable box. Do To modify the registry directly, launch the <span class="application">Registry Editor</span> (<b class="command">regedit.exe</b>), select the hive <tt class="filename">HKEY_LOCAL_MACHINE\Network\Logon</tt>. Now add a DWORD type key with the name "User Profiles", to enable user profiles set the value to 1, to disable user profiles set it to 0. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2972959"></a>How User Profiles Are Handled in Windows 9x / Me?</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2973335"></a>How User Profiles Are Handled in Windows 9x / Me?</h4></div></div><div></div></div><p> When a user logs on to a Windows 9x / Me machine, the local profile path, <tt class="filename">HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProfileList</tt>, is checked for an existing entry for that user: @@ -13674,7 +13677,7 @@ If a User Profile is not found in either location, the Default User Profile from machine is used and is copied to a newly created folder for the logged on user. At log off, any changes that the user made are written to the user's local profile. If the user has a roaming profile, the changes are written to the user's profile on the server. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973009"></a>MS Windows NT4 Workstation</h3></div></div><div></div></div><p> +</p></div></div><div xmlns:ns86="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973385"></a>MS Windows NT4 Workstation</h3></div></div><div></div></div><p> On MS Windows NT4 the default user profile is obtained from the location <tt class="filename">%SystemRoot%\Profiles</tt> which in a default installation will translate to <tt class="filename">C:\WinNT\Profiles</tt>. Under this directory on a clean install there will be @@ -13715,15 +13718,15 @@ the following steps are followed in respect of profile handling: MS Windows NT4 profiles may be <span class="emphasis"><em>Local</em></span> or <span class="emphasis"><em>Roaming</em></span>. A Local profile will stored in the <tt class="filename">%SystemRoot%\Profiles\%USERNAME%</tt> location. A roaming profile will also remain stored in the same way, unless the following registry key is created: -</p><p> -</p><pre class="programlisting"> +</p><ns86:p> +</ns86:p><pre class="programlisting"> HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\ "DeleteRoamingCache"=dword:00000001 -</pre><p> +</pre><ns86:p> In which case, the local copy (in <tt class="filename">%SystemRoot%\Profiles\%USERNAME%</tt>) will be deleted on logout. -</p><p> +</ns86:p><p> Under MS Windows NT4 default locations for common resources (like <tt class="filename">My Documents</tt> may be redirected to a network share by modifying the following registry keys. These changes may be affected via use of the System Policy Editor (to do so may require that you create your owns template extension @@ -13736,17 +13739,17 @@ are controlled by entries on Windows NT4 is: <tt class="filename">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\</tt> </p><p> The above hive key contains a list of automatically managed folders. The default entries are: -</p><p> -</p><div class="table"><a name="id2973359"></a><p class="title"><b>Table24.1.User Shell Folder registry keys default values</b></p><table summary="User Shell Folder registry keys default values" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu </td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr></tbody></table></div><p> -</p><p> +</p><ns86:p> +</ns86:p><div class="table"><a name="id2973733"></a><p class="title"><b>Table24.1.User Shell Folder registry keys default values</b></p><table summary="User Shell Folder registry keys default values" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu </td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr></tbody></table></div><ns86:p> +</ns86:p><p> The registry key that contains the location of the default profile settings is: </p><p> <tt class="filename">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders</tt> -</p><p> +</p><ns86:p> The default entries are: -</p><div class="table"><a name="id2973503"></a><p class="title"><b>Table24.2.Defaults of profile settings registry keys</b></p><table summary="Defaults of profile settings registry keys" border="1"><colgroup><col><col></colgroup><tbody><tr><td>Common Desktop</td><td>%SystemRoot%\Profiles\All Users\Desktop</td></tr><tr><td>Common Programs</td><td>%SystemRoot%\Profiles\All Users\Programs</td></tr><tr><td>Common Start Menu</td><td>%SystemRoot%\Profiles\All Users\Start Menu</td></tr><tr><td>Common Startup</td><td>%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup</td></tr></tbody></table></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973563"></a>MS Windows 200x/XP</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</ns86:p><div class="table"><a name="id2973877"></a><p class="title"><b>Table24.2.Defaults of profile settings registry keys</b></p><table summary="Defaults of profile settings registry keys" border="1"><colgroup><col><col></colgroup><tbody><tr><td>Common Desktop</td><td>%SystemRoot%\Profiles\All Users\Desktop</td></tr><tr><td>Common Programs</td><td>%SystemRoot%\Profiles\All Users\Programs</td></tr><tr><td>Common Start Menu</td><td>%SystemRoot%\Profiles\All Users\Start Menu</td></tr><tr><td>Common Startup</td><td>%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup</td></tr></tbody></table></div><ns86:p> +</ns86:p></div><div xmlns:ns87="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973939"></a>MS Windows 200x/XP</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> MS Windows XP Home Edition does use default per user profiles, but can not participate in domain security, can not log onto an NT/ADS style domain, and thus can obtain the profile only from itself. While there are benefits in doing this the beauty of those MS Windows @@ -13794,9 +13797,9 @@ are controlled by entries on Windows 200x/XP is: <tt class="filename">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\</tt> </p><p> The above hive key contains a list of automatically managed folders. The default entries are: -</p><p> -</p><div class="table"><a name="id2973759"></a><p class="title"><b>Table24.3.Defaults of default user profile paths registry keys</b></p><table summary="Defaults of default user profile paths registry keys" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Cache</td><td>%USERPROFILE%\Local Settings\Temporary Internet Files</td></tr><tr><td>Cookies</td><td>%USERPROFILE%\Cookies</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>History</td><td>%USERPROFILE%\Local Settings\History</td></tr><tr><td>Local AppData</td><td>%USERPROFILE%\Local Settings\Application Data</td></tr><tr><td>Local Settings</td><td>%USERPROFILE%\Local Settings</td></tr><tr><td>My Pictures</td><td>%USERPROFILE%\My Documents\My Pictures</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>Personal</td><td>%USERPROFILE%\My Documents</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu</td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr><tr><td>Templates</td><td>%USERPROFILE%\Templates</td></tr></tbody></table></div><p> -</p><p> +</p><ns87:p> +</ns87:p><div class="table"><a name="id2974132"></a><p class="title"><b>Table24.3.Defaults of default user profile paths registry keys</b></p><table summary="Defaults of default user profile paths registry keys" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Cache</td><td>%USERPROFILE%\Local Settings\Temporary Internet Files</td></tr><tr><td>Cookies</td><td>%USERPROFILE%\Cookies</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>History</td><td>%USERPROFILE%\Local Settings\History</td></tr><tr><td>Local AppData</td><td>%USERPROFILE%\Local Settings\Application Data</td></tr><tr><td>Local Settings</td><td>%USERPROFILE%\Local Settings</td></tr><tr><td>My Pictures</td><td>%USERPROFILE%\My Documents\My Pictures</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>Personal</td><td>%USERPROFILE%\My Documents</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu</td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr><tr><td>Templates</td><td>%USERPROFILE%\Templates</td></tr></tbody></table></div><ns87:p> +</ns87:p><p> There is also an entry called "Default" that has no value set. The default entry is of type <tt class="constant">REG_SZ</tt>, all the others are of type <tt class="constant">REG_EXPAND_SZ</tt>. </p><p> @@ -13820,9 +13823,9 @@ MS Windows 200x/XP profiles may be <span class="emphasis"><em>Local</em></span> A roaming profile will be cached locally unless the following registry key is created: </p><p><tt class="filename">HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\"DeleteRoamingCache"=dword:00000001</tt></p><p> In which case, the local cache copy will be deleted on logout. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2974067"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2974443"></a>Common Errors</h2></div></div><div></div></div><p> The following are some typical errors/problems/questions that have been asked. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974080"></a>How does one set up roaming profiles for just one (or a few) user/s or group/s?</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974456"></a>How does one set up roaming profiles for just one (or a few) user/s or group/s?</h3></div></div><div></div></div><p> With samba-2.2.x the choice you have is to enable or disable roaming profiles support. It is a global only setting. The default is to have roaming profiles and the default path will locate them in the user's home @@ -13840,25 +13843,25 @@ using the Domain User Manager (as with MS Windows NT4/ Win 2Kx). </p><p> In any case, you can configure only one profile per user. That profile can be either: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>A profile unique to that user</td></tr><tr><td>A mandatory profile (one the user can not change)</td></tr><tr><td>A group profile (really should be mandatory ie:unchangable)</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974143"></a>Can NOT use Roaming Profiles</h3></div></div><div></div></div><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td>A profile unique to that user</td></tr><tr><td>A mandatory profile (one the user can not change)</td></tr><tr><td>A group profile (really should be mandatory ie:unchangable)</td></tr></table></div><div xmlns:ns89="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974519"></a>Can NOT use Roaming Profiles</h3></div></div><div></div></div><p> “<span class="quote"> I dont want Roaming profile to be implemented, I just want to give users local profiles only. ... Please help me I am totally lost with this error from past two days I tried everything and googled around quite a bit but of no help. Please help me. -</span>”</p><p> +</span>”</p><ns89:p> Your choices are: -</p><div class="variablelist"><dl><dt><span class="term">Local profiles</span></dt><dd><p> +</ns89:p><div class="variablelist"><dl><dt><span class="term">Local profiles</span></dt><dd><p> I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out - </p></dd><dt><span class="term">Roaming profiles</span></dt><dd><p> - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>can use auto-delete on logout option</td></tr><tr><td>requires a registry key change on workstation</td></tr></table><p> + </p></dd><dt><span class="term">Roaming profiles</span></dt><dd xmlns:ns88=""><ns88:p> + </ns88:p><table class="simplelist" border="0" summary="Simple list"><tr><td>can use auto-delete on logout option</td></tr><tr><td>requires a registry key change on workstation</td></tr></table><ns88:p> Your choices are: - </p><div class="variablelist"><dl><dt><span class="term">Personal Roaming profiles</span></dt><dd><p> + </ns88:p><div class="variablelist"><dl><dt><span class="term">Personal Roaming profiles</span></dt><dd><p> - should be preserved on a central server - workstations 'cache' (store) a local copy - used in case the profile can not be downloaded @@ -13866,10 +13869,10 @@ Your choices are: </p></dd><dt><span class="term">Group profiles</span></dt><dd><p>- loaded from a central place</p></dd><dt><span class="term">Mandatory profiles</span></dt><dd><p> - can be personal or group - can NOT be changed (except by an administrator - </p></dd></dl></div><p> - </p></dd></dl></div><p> + </p></dd></dl></div><ns88:p> + </ns88:p></dd></dl></div><ns89:p> -</p><p> +</ns89:p><p> A WinNT4/2K/XP profile can vary in size from 130KB to off the scale. Outlook PST files are most often part of the profile and can be many GB in size. On average (in a well controlled environment) roaming profile size of @@ -13884,19 +13887,19 @@ a problem free site. </p><p> Microsoft's answer to the PST problem is to store all email in an MS Exchange Server back-end. But this is another story ...! -</p><p> +</p><ns89:p> So, having LOCAL profiles means: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>If lots of users user each machine - lot's of local disk storage needed for local profiles</td></tr><tr><td>Every workstation the user logs into has it's own profile - can be very different from machine to machine</td></tr></table><p> +</ns89:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If lots of users user each machine - lot's of local disk storage needed for local profiles</td></tr><tr><td>Every workstation the user logs into has it's own profile - can be very different from machine to machine</td></tr></table><ns89:p> On the other hand, having roaming profiles means: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>The network administrator can control EVERY aspect of user profiles</td></tr><tr><td>With the use of mandatory profiles - a drastic reduction in network management overheads</td></tr><tr><td>User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably</td></tr></table><p> +</ns89:p><table class="simplelist" border="0" summary="Simple list"><tr><td>The network administrator can control EVERY aspect of user profiles</td></tr><tr><td>With the use of mandatory profiles - a drastic reduction in network management overheads</td></tr><tr><td>User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably</td></tr></table><ns89:p> -</p><p> +</ns89:p><p> I have managed and installed MANY NT/2K networks and have NEVER found one where users who move from machine to machine are happy with local profiles. In the long run local profiles bite them. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974365"></a>Changing the default profile</h3></div></div><div></div></div><p>“<span class="quote"> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974737"></a>Changing the default profile</h3></div></div><div></div></div><p>“<span class="quote"> When the client tries to logon to the PDC it looks for a profile to download where do I put this default profile. </span>”</p><p> @@ -13926,7 +13929,7 @@ Secondly, for roaming profiles you need: logon drive = H: (Z: is the default) Plus you need a PROFILES share that is world writable. -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pam"></a>Chapter25.PAM based Distributed Authentication</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>></tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2978309">Features and Benefits</a></dt><dt><a href="#id2978577">Technical Discussion</a></dt><dd><dl><dt><a href="#id2978595">PAM Configuration Syntax</a></dt><dt><a href="#id2979265">Example System Configurations</a></dt><dt><a href="#id2979567">smb.conf PAM Configuration</a></dt><dt><a href="#id2979625">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2979709">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2980075">Common Errors</a></dt><dd><dl><dt><a href="#id2980089">pam_winbind problem</a></dt></dl></dd></dl></div><p> +</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pam"></a>Chapter25.PAM based Distributed Authentication</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>></tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2976194">Features and Benefits</a></dt><dt><a href="#id2975049">Technical Discussion</a></dt><dd><dl><dt><a href="#id2975066">PAM Configuration Syntax</a></dt><dt><a href="#id2975731">Example System Configurations</a></dt><dt><a href="#id2978164">smb.conf PAM Configuration</a></dt><dt><a href="#id2978221">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2978305">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2978671">Common Errors</a></dt><dd><dl><dt><a href="#id2978685">pam_winbind problem</a></dt></dl></dd></dl></div><p> This chapter you should help you to deploy winbind based authentication on any PAM enabled Unix/Linux system. Winbind can be used to enable user level application access authentication from any MS Windows NT Domain, MS Windows 200x Active Directory based domain, or any Samba @@ -13937,7 +13940,7 @@ In addition to knowing how to configure winbind into PAM, you will learn generic possibilities and in particular how to deploy tools like pam_smbpass.so to your advantage. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The use of Winbind require more than PAM configuration alone. Please refer to <a href="#winbind" title="Chapter21.Integrated Logon Support using Winbind">the Winbind chapter</a>. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978309"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2976194"></a>Features and Benefits</h2></div></div><div></div></div><p> A number of Unix systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux, now utilize the Pluggable Authentication Modules (PAM) facility to provide all authentication, authorization and resource control services. Prior to the introduction of PAM, a decision @@ -13995,12 +13998,12 @@ of distributed samba domain controllers that can provide wide are network bandwi efficient authentication services for PAM capable systems. In effect, this allows the deployment of centrally managed and maintained distributed authentication from a single user account database. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978577"></a>Technical Discussion</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975049"></a>Technical Discussion</h2></div></div><div></div></div><p> PAM is designed to provide the system administrator with a great deal of flexibility in configuration of the privilege granting applications of their system. The local configuration of system security controlled by PAM is contained in one of two places: either the single system file, /etc/pam.conf; or the /etc/pam.d/ directory. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978595"></a>PAM Configuration Syntax</h3></div></div><div></div></div><p> +</p><div xmlns:ns90="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975066"></a>PAM Configuration Syntax</h3></div></div><div></div></div><p> In this section we discuss the correct syntax of and generic options respected by entries to these files. PAM specific tokens in the configuration file are case insensitive. The module paths, however, are case sensitive since they indicate a file's name and reflect the case dependence of typical file-systems. @@ -14014,22 +14017,22 @@ If the PAM authentication module (loadable link library file) is located in the default location then it is not necessary to specify the path. In the case of Linux, the default location is <tt class="filename">/lib/security</tt>. If the module is located outside the default then the path must be specified as: -</p><p> -</p><pre class="screen"> +</p><ns90:p> +</ns90:p><pre class="screen"> auth required /other_path/pam_strange_module.so -</pre><p> -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978651"></a>Anatomy of <tt class="filename">/etc/pam.d</tt> Entries</h4></div></div><div></div></div><p> +</pre><ns90:p> +</ns90:p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2975122"></a>Anatomy of <tt class="filename">/etc/pam.d</tt> Entries</h4></div></div><div></div></div><p> The remaining information in this subsection was taken from the documentation of the Linux-PAM project. For more information on PAM, see <a href="http://ftp.kernel.org/pub/linux/libs/pam/" target="_top"> http://ftp.kernel.org/pub/linux/libs/pam</a> The Official Linux-PAM home page. </p><p> A general configuration line of the /etc/pam.conf file has the following form: -</p><p> -</p><pre class="screen"> +</p><ns90:p> +</ns90:p><pre class="screen"> service-name module-type control-flag module-path args -</pre><p> -</p><p> +</pre><ns90:p> +</ns90:p><p> Below, we explain the meaning of each of these tokens. The second (and more recently adopted) way of configuring Linux-PAM is via the contents of the <tt class="filename">/etc/pam.d/</tt> directory. Once we have explained the meaning of the above tokens, we will describe this method. @@ -14146,8 +14149,8 @@ Once we have explained the meaning of the above tokens, we will describe this me </p></li></ul></div><p> Each of the four keywords: required; requisite; sufficient; and optional, have an equivalent expression in terms of the [...] syntax. They are as follows: - </p><p> - </p><div class="itemizedlist"><ul type="disc"><li><p> + </p><ns90:p> + </ns90:p><div class="itemizedlist"><ul type="disc"><li><p> required is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=bad] </p></li><li><p> requisite is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=die] @@ -14155,8 +14158,8 @@ Once we have explained the meaning of the above tokens, we will describe this me sufficient is equivalent to [success=done new_authtok_reqd=done default=ignore] </p></li><li><p> optional is equivalent to [success=ok new_authtok_reqd=ok default=ignore] - </p></li></ul></div><p> - </p><p> + </p></li></ul></div><ns90:p> + </ns90:p><p> Just to get a feel for the power of this new syntax, here is a taste of what you can do with it. With Linux-PAM-0.63, the notion of client plug-in agents was introduced. This is something that makes it possible for PAM to support machine-machine authentication using the transport protocol inherent to the client/server application. With the @@ -14188,13 +14191,13 @@ squid auth required pam_mysql.so user=passwd_query passwd=mada \ Any line in (one of) the configuration file(s), that is not formatted correctly, will generally tend (erring on the side of caution) to make the authentication process fail. A corresponding error is written to the system log files with a call to syslog(3). - </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979265"></a>Example System Configurations</h3></div></div><div></div></div><p> + </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975731"></a>Example System Configurations</h3></div></div><div></div></div><p> The following is an example <tt class="filename">/etc/pam.d/login</tt> configuration file. This example had all options been uncommented is probably not usable as it stacks many conditions before allowing successful completion of the login process. Essentially all conditions can be disabled by commenting them out except the calls to <tt class="filename">pam_pwdb.so</tt>. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2979296"></a>PAM: original login config</h4></div></div><div></div></div><pre class="screen"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2975762"></a>PAM: original login config</h4></div></div><div></div></div><pre class="screen"> #%PAM-1.0 # The PAM configuration file for the `login' service # @@ -14209,10 +14212,10 @@ session required pam_pwdb.so # session optional pam_lastlog.so # password required pam_cracklib.so retry=3 password required pam_pwdb.so shadow md5 -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2979322"></a>PAM: login using pam_smbpass</h4></div></div><div></div></div><p> +</pre></div><div xmlns:ns91="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2975789"></a>PAM: login using pam_smbpass</h4></div></div><div></div></div><p> PAM allows use of replaceable modules. Those available on a sample system include: -</p><p><tt class="prompt">$</tt><b class="userinput"><tt>/bin/ls /lib/security</tt></b> -</p><pre class="screen"> +</p><ns91:p><tt class="prompt">$</tt><b class="userinput"><tt>/bin/ls /lib/security</tt></b> +</ns91:p><pre class="screen"> pam_access.so pam_ftp.so pam_limits.so pam_ncp_auth.so pam_rhosts_auth.so pam_stress.so pam_cracklib.so pam_group.so pam_listfile.so @@ -14288,7 +14291,7 @@ authentication to be configured in a single central file. The on the basis that it allows for easier administration. As with all issues in life though, every decision makes trade-offs, so you may want examine the PAM documentation for further helpful information. -</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979567"></a>smb.conf PAM Configuration</h3></div></div><div></div></div><p> +</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978164"></a>smb.conf PAM Configuration</h3></div></div><div></div></div><p> There is an option in smb.conf called <a href="smb.conf.5.html#OBEYPAMRESTRICTIONS" target="_top">obey pam restrictions</a>. The following is from the on-line help for this option in SWAT; </p><p> @@ -14303,7 +14306,7 @@ ignores PAM for authentication in the case of The reason is that PAM modules cannot support the challenge/response authentication mechanism needed in the presence of SMB password encryption. -</p><p>Default: <i class="parameter"><tt>obey pam restrictions = no</tt></i></p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979625"></a>Remote CIFS Authentication using winbindd.so</h3></div></div><div></div></div><p> +</p><p>Default: <i class="parameter"><tt>obey pam restrictions = no</tt></i></p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978221"></a>Remote CIFS Authentication using winbindd.so</h3></div></div><div></div></div><p> All operating systems depend on the provision of users credentials acceptable to the platform. Unix requires the provision of a user identifier (UID) as well as a group identifier (GID). These are both simple integer type numbers that are obtained from a password backend such @@ -14329,7 +14332,7 @@ Microsoft Active Directory Service (ADS) in so far as reduction of wide area net The rid to unix id database is the only location where the user and group mappings are stored by winbindd. If this file is deleted or corrupted, there is no way for winbindd to determine which user and group ids correspond to Windows NT user and group rids. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979709"></a>Password Synchronization using pam_smbpass.so</h3></div></div><div></div></div><p> +</p></div></div><div xmlns:ns92="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978305"></a>Password Synchronization using pam_smbpass.so</h3></div></div><div></div></div><p> pam_smbpass is a PAM module which can be used on conforming systems to keep the smbpasswd (Samba password) database in sync with the unix password file. PAM (Pluggable Authentication Modules) is an API supported @@ -14340,21 +14343,21 @@ This module authenticates a local smbpasswd user database. If you require support for authenticating against a remote SMB server, or if you're concerned about the presence of suid root binaries on your system, it is recommended that you use pam_winbind instead. -</p><p> +</p><ns92:p> Options recognized by this module are as follows: -</p><div class="table"><a name="id2979741"></a><p class="title"><b>Table25.1.Options recognized by pam_smbpass</b></p><table summary="Options recognized by pam_smbpass" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">debug</td><td align="left">log more debugging info</td></tr><tr><td align="left">audit</td><td align="left">like debug, but also logs unknown usernames</td></tr><tr><td align="left">use_first_pass</td><td align="left">don't prompt the user for passwords; take them from PAM_ items instead</td></tr><tr><td align="left">try_first_pass</td><td align="left">try to get the password from a previous PAM module, fall back to prompting the user</td></tr><tr><td align="left">use_authtok</td><td align="left">like try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)</td></tr><tr><td align="left">not_set_pass</td><td align="left">don't make passwords used by this module available to other modules.</td></tr><tr><td align="left">nodelay</td><td align="left">don't insert ~1 second delays on authentication failure.</td></tr><tr><td align="left">nullok</td><td align="left">null passwords are allowed.</td></tr><tr><td align="left">nonull</td><td align="left">null passwords are not allowed. Used to override the Samba configuration.</td></tr><tr><td align="left">migrate</td><td align="left">only meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.</td></tr><tr><td align="left">smbconf=<i class="replaceable"><tt>file</tt></i></td><td align="left">specify an alternate path to the <tt class="filename">smb.conf</tt> file.</td></tr></tbody></table></div><p> -</p><p> +</ns92:p><div class="table"><a name="id2978335"></a><p class="title"><b>Table25.1.Options recognized by pam_smbpass</b></p><table summary="Options recognized by pam_smbpass" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">debug</td><td align="left">log more debugging info</td></tr><tr><td align="left">audit</td><td align="left">like debug, but also logs unknown usernames</td></tr><tr><td align="left">use_first_pass</td><td align="left">don't prompt the user for passwords; take them from PAM_ items instead</td></tr><tr><td align="left">try_first_pass</td><td align="left">try to get the password from a previous PAM module, fall back to prompting the user</td></tr><tr><td align="left">use_authtok</td><td align="left">like try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)</td></tr><tr><td align="left">not_set_pass</td><td align="left">don't make passwords used by this module available to other modules.</td></tr><tr><td align="left">nodelay</td><td align="left">don't insert ~1 second delays on authentication failure.</td></tr><tr><td align="left">nullok</td><td align="left">null passwords are allowed.</td></tr><tr><td align="left">nonull</td><td align="left">null passwords are not allowed. Used to override the Samba configuration.</td></tr><tr><td align="left">migrate</td><td align="left">only meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.</td></tr><tr><td align="left">smbconf=<i class="replaceable"><tt>file</tt></i></td><td align="left">specify an alternate path to the <tt class="filename">smb.conf</tt> file.</td></tr></tbody></table></div><ns92:p> +</ns92:p><ns92:p> Thanks go to the following people: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="mailto:morgan@transmeta.com" target="_top">Andrew Morgan</a>, for providing the Linux-PAM +</ns92:p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="mailto:morgan@transmeta.com" target="_top">Andrew Morgan</a>, for providing the Linux-PAM framework, without which none of this would have happened</td></tr><tr><td><a href="gafton@redhat.com" target="_top">Christian Gafton</a> and Andrew Morgan again, for the pam_pwdb module upon which pam_smbpass was originally based</td></tr><tr><td><a href="lkcl@switchboard.net" target="_top">Luke Leighton</a> for being receptive to the idea, and for the occasional good-natured complaint about the project's status - that keep me working on it :)</td></tr></table><p>. -</p><p> + that keep me working on it :)</td></tr></table><ns92:p>. +</ns92:p><p> The following are examples of the use of pam_smbpass.so in the format of Linux <tt class="filename">/etc/pam.d/</tt> files structure. Those wishing to implement this tool on other platforms will need to adapt this appropriately. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2979941"></a>Password Synchronisation Configuration</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978537"></a>Password Synchronisation Configuration</h4></div></div><div></div></div><p> A sample PAM configuration that shows the use of pam_smbpass to make sure private/smbpasswd is kept in sync when /etc/passwd (/etc/shadow) is changed. Useful when an expired password might be changed by an @@ -14370,7 +14373,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so nullok use_authtok try_first_pass session required pam_unix.so -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2979974"></a>Password Migration Configuration</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978569"></a>Password Migration Configuration</h4></div></div><div></div></div><p> A sample PAM configuration that shows the use of pam_smbpass to migrate from plaintext to encrypted passwords for Samba. Unlike other methods, this can be used for users who have never connected to Samba shares: @@ -14389,7 +14392,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password optional pam_smbpass.so nullok use_authtok try_first_pass session required pam_unix.so -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980009"></a>Mature Password Configuration</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978605"></a>Mature Password Configuration</h4></div></div><div></div></div><p> A sample PAM configuration for a 'mature' smbpasswd installation. private/smbpasswd is fully populated, and we consider it an error if the smbpasswd doesn't exist or doesn't match the Unix password. @@ -14404,7 +14407,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so use_authtok use_first_pass session required pam_unix.so -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980041"></a>Kerberos Password Integration Configuration</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978637"></a>Kerberos Password Integration Configuration</h4></div></div><div></div></div><p> A sample PAM configuration that shows pam_smbpass used together with pam_krb5. This could be useful on a Samba PDC that is also a member of a Kerberos realm. @@ -14420,13 +14423,13 @@ password requisite pam_cracklib.so retry=3 password optional pam_smbpass.so nullok use_authtok try_first_pass password required pam_krb5.so use_authtok try_first_pass session required pam_krb5.so -</pre></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2980075"></a>Common Errors</h2></div></div><div></div></div><p> +</pre></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978671"></a>Common Errors</h2></div></div><div></div></div><p> PAM can be a very fickle and sensitive to configuration glitches. Here we look at a few cases from the Samba mailing list. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980089"></a>pam_winbind problem</h3></div></div><div></div></div><p> +</p><div xmlns:ns93="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978685"></a>pam_winbind problem</h3></div></div><div></div></div><p> I have the following PAM configuration: - </p><p> -</p><pre class="screen"> + </p><ns93:p> +</ns93:p><pre class="screen"> auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass nullok @@ -14435,8 +14438,8 @@ auth required /lib/security/pam_nologin.so account required /lib/security/pam_stack.so service=system-auth account required /lib/security/pam_winbind.so password required /lib/security/pam_stack.so service=system-auth -</pre><p> -</p><p> +</pre><ns93:p> +</ns93:p><p> When I open a new console with [ctrl][alt][F1], then I cant log in with my user "pitie". I've tried with user "scienceu+pitie" also. </p><p> @@ -14447,7 +14450,7 @@ password required /lib/security/pam_stack.so service=system-auth <tt class="filename">/etc/pam.d/system-auth</tt> and copy only what you need from it into your <tt class="filename">/etc/pam.d/login</tt> file. Alternatively, if you want all services to use winbind, you can put the winbind-specific stuff in <tt class="filename">/etc/pam.d/system-auth</tt>. - </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="integrate-ms-networks"></a>Chapter26.Integrating MS Windows networks with Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> (Jan 01 2001) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2982211">Features and Benefits</a></dt><dt><a href="#id2982236">Background Information</a></dt><dt><a href="#id2982281">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2982337">/etc/hosts</a></dt><dt><a href="#id2982462">/etc/resolv.conf</a></dt><dt><a href="#id2982506">/etc/host.conf</a></dt><dt><a href="#id2982548">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2982637">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2982784">The NetBIOS Name Cache</a></dt><dt><a href="#id2982829">The LMHOSTS file</a></dt><dt><a href="#id2983073">HOSTS file</a></dt><dt><a href="#id2983105">DNS Lookup</a></dt><dt><a href="#id2983130">WINS Lookup</a></dt></dl></dd><dt><a href="#id2983200">Common Errors</a></dt><dd><dl><dt><a href="#id2983216">My Boomerang Won't Come Back</a></dt><dt><a href="#id2983248">Very Slow Network Connections</a></dt><dt><a href="#id2983300">Samba server name change problem</a></dt></dl></dd></dl></div><p> + </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="integrate-ms-networks"></a>Chapter26.Integrating MS Windows networks with Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> (Jan 01 2001) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2980428">Features and Benefits</a></dt><dt><a href="#id2980452">Background Information</a></dt><dt><a href="#id2980497">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2980549">/etc/hosts</a></dt><dt><a href="#id2980673">/etc/resolv.conf</a></dt><dt><a href="#id2978824">/etc/host.conf</a></dt><dt><a href="#id2978866">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2978954">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2979079">The NetBIOS Name Cache</a></dt><dt><a href="#id2979124">The LMHOSTS file</a></dt><dt><a href="#id2979238">HOSTS file</a></dt><dt><a href="#id2979270">DNS Lookup</a></dt><dt><a href="#id2979295">WINS Lookup</a></dt></dl></dd><dt><a href="#id2979366">Common Errors</a></dt><dd><dl><dt><a href="#id2979382">My Boomerang Won't Come Back</a></dt><dt><a href="#id2979413">Very Slow Network Connections</a></dt><dt><a href="#id2979464">Samba server name change problem</a></dt></dl></dd></dl></div><p> This section deals with NetBIOS over TCP/IP name to IP address resolution. If your MS Windows clients are NOT configured to use NetBIOS over TCP/IP then this section does not apply to your installation. If your installation involves use of @@ -14458,7 +14461,7 @@ NetBIOS over TCP/IP then this section may help you to resolve networking problem to NOT run NetBEUI at all. Note also that there is NO such thing as NetBEUI over TCP/IP - the existence of such a protocol is a complete and utter mis-apprehension. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982211"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2980428"></a>Features and Benefits</h2></div></div><div></div></div><p> Many MS Windows network administrators have never been exposed to basic TCP/IP networking as it is implemented in a Unix/Linux operating system. Likewise, many Unix and Linux administrators have not been exposed to the intricacies of MS Windows TCP/IP based @@ -14466,7 +14469,7 @@ networking (and may have no desire to be either). </p><p> This chapter gives a short introduction to the basics of how a name can be resolved to it's IP address for each operating system environment. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982236"></a>Background Information</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2980452"></a>Background Information</h2></div></div><div></div></div><p> Since the introduction of MS Windows 2000 it is possible to run MS Windows networking without the use of NetBIOS over TCP/IP. NetBIOS over TCP/IP uses UDP port 137 for NetBIOS name resolution and uses TCP port 139 for NetBIOS session services. When NetBIOS over @@ -14482,10 +14485,10 @@ disable NetBIOS over TCP/IP today use MS Active Directory Service (ADS). ADS req Dynamic DNS with Service Resource Records (SRV RR) and with Incremental Zone Transfers (IXFR). Use of DHCP with ADS is recommended as a further means of maintaining central control over client workstation network configuration. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982281"></a>Name Resolution in a pure Unix/Linux world</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2980497"></a>Name Resolution in a pure Unix/Linux world</h2></div></div><div></div></div><p> The key configuration files covered in this section are: -</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt></p></li><li><p><tt class="filename">/etc/resolv.conf</tt></p></li><li><p><tt class="filename">/etc/host.conf</tt></p></li><li><p><tt class="filename">/etc/nsswitch.conf</tt></p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982337"></a><tt class="filename">/etc/hosts</tt></h3></div></div><div></div></div><p> -Contains a static list of IP Addresses and names. +</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt></p></li><li><p><tt class="filename">/etc/resolv.conf</tt></p></li><li><p><tt class="filename">/etc/host.conf</tt></p></li><li><p><tt class="filename">/etc/nsswitch.conf</tt></p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980549"></a><tt class="filename">/etc/hosts</tt></h3></div></div><div></div></div><p> +Contains a static list of IP addresses and names. eg: </p><pre class="screen"> 127.0.0.1 localhost localhost.localdomain @@ -14497,7 +14500,7 @@ IP addresses. </p><p> Network packets that are sent over the physical network transport layer communicate not via IP addresses but rather using the Media -Access Control address, or MAC address. IP Addresses are currently +Access Control address, or MAC address. IP addresses are currently 32 bits in length and are typically presented as four (4) decimal numbers that are separated by a dot (or period). eg: 168.192.1.1. </p><p> @@ -14541,7 +14544,7 @@ primary names by which they are known within the local machine. This file helps to prime the pump so that a basic level of name resolution can exist before any other method of name resolution becomes available. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982462"></a><tt class="filename">/etc/resolv.conf</tt></h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980673"></a><tt class="filename">/etc/resolv.conf</tt></h3></div></div><div></div></div><p> This file tells the name resolution libraries: </p><div class="itemizedlist"><ul type="disc"><li><p>The name of the domain to which the machine belongs @@ -14551,7 +14554,7 @@ This file tells the name resolution libraries: </p></li><li><p>The name or IP address of available Domain Name Servers that may be asked to perform name to address translation lookups - </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982506"></a><tt class="filename">/etc/host.conf</tt></h3></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978824"></a><tt class="filename">/etc/host.conf</tt></h3></div></div><div></div></div><p> <tt class="filename">/etc/host.conf</tt> is the primary means by which the setting in /etc/resolv.conf may be affected. It is a critical configuration file. This file controls the order by @@ -14562,7 +14565,7 @@ which name resolution may proceed. The typical structure is: </pre><p> then both addresses should be returned. Please refer to the man page for host.conf for further details. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982548"></a><tt class="filename">/etc/nsswitch.conf</tt></h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978866"></a><tt class="filename">/etc/nsswitch.conf</tt></h3></div></div><div></div></div><p> This file controls the actual name resolution targets. The file typically has resolver object specifications as follows: </p><pre class="screen"> @@ -14598,22 +14601,22 @@ Starting with version 2.2.0 samba has Linux support for extensions to the name service switch infrastructure so that linux clients will be able to obtain resolution of MS Windows NetBIOS names to IP Addresses. To gain this functionality Samba needs to be compiled -with appropriate arguments to the make command (ie: <b class="userinput"><tt>make +with appropriate arguments to the make command (i.e.: <b class="userinput"><tt>make nsswitch/libnss_wins.so</tt></b>). The resulting library should then be installed in the <tt class="filename">/lib</tt> directory and the "wins" parameter needs to be added to the "hosts:" line in the <tt class="filename">/etc/nsswitch.conf</tt> file. At this point it -will be possible to ping any MS Windows machine by it's NetBIOS +will be possible to ping any MS Windows machine by its NetBIOS machine name, so long as that machine is within the workgroup to which both the samba machine and the MS Windows machine belong. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982637"></a>Name resolution as used within MS Windows networking</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978954"></a>Name resolution as used within MS Windows networking</h2></div></div><div></div></div><p> MS Windows networking is predicated about the name each machine is given. This name is known variously (and inconsistently) as the "computer name", "machine name", "networking name", "netbios name", -"SMB name". All terms mean the same thing with the exception of +or "SMB name". All terms mean the same thing with the exception of "netbios name" which can apply also to the name of the workgroup or the domain name. The terms "workgroup" and "domain" are really just a -simply name with which the machine is associated. All NetBIOS names +simple name with which the machine is associated. All NetBIOS names are exactly 16 characters in length. The 16th character is reserved. It is used to store a one byte value that indicates service level information for the NetBIOS name that is registered. A NetBIOS machine @@ -14648,8 +14651,8 @@ wants to locate a domain logon server. It finds this service and the IP address of a server that provides it by performing a lookup (via a NetBIOS broadcast) for enumeration of all machines that have registered the name type *<1c>. A logon request is then sent to each -IP address that is returned in the enumerated list of IP addresses. Which -ever machine first replies then ends up providing the logon services. +IP address that is returned in the enumerated list of IP addresses. +Whichever machine first replies then ends up providing the logon services. </p><p> The name "workgroup" or "domain" really can be confusing since these have the added significance of indicating what is the security @@ -14677,7 +14680,7 @@ NBT or NetBT, the NetBIOS over TCP/IP. MS Windows machines use a complex array of name resolution mechanisms. Since we are primarily concerned with TCP/IP this demonstration is limited to this area. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982784"></a>The NetBIOS Name Cache</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979079"></a>The NetBIOS Name Cache</h3></div></div><div></div></div><p> All MS Windows machines employ an in memory buffer in which is stored the NetBIOS names and IP addresses for all external machines that that machine has communicated with over the @@ -14695,7 +14698,7 @@ frustrating for users - but it is a characteristic of the protocol. The MS Windows utility that allows examination of the NetBIOS name cache is called "nbtstat". The Samba equivalent of this is called <b class="command">nmblookup</b>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982829"></a>The LMHOSTS file</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979124"></a>The LMHOSTS file</h3></div></div><div></div></div><p> This file is usually located in MS Windows NT 4.0 or 2000 in <tt class="filename">C:\WINNT\SYSTEM32\DRIVERS\ETC</tt> and contains the IP Address and the machine name in matched pairs. The @@ -14780,25 +14783,25 @@ It typically looks like: # so keeping the number of comments to a minimum will improve performance. # Therefore it is not advisable to simply add lmhosts file entries onto the # end of this file. -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983073"></a>HOSTS file</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979238"></a>HOSTS file</h3></div></div><div></div></div><p> This file is usually located in MS Windows NT 4.0 or 2000 in <tt class="filename">C:\WINNT\SYSTEM32\DRIVERS\ETC</tt> and contains the IP Address and the IP hostname in matched pairs. It can be used by the name resolution infrastructure in MS Windows, depending on how the TCP/IP environment is configured. This file is in every way the equivalent of the Unix/Linux <tt class="filename">/etc/hosts</tt> file. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983105"></a>DNS Lookup</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979270"></a>DNS Lookup</h3></div></div><div></div></div><p> This capability is configured in the TCP/IP setup area in the network -configuration facility. If enabled an elaborate name resolution sequence -is followed the precise nature of which is dependant on what the NetBIOS -Node Type parameter is configured to. A Node Type of 0 means use -NetBIOS broadcast (over UDP broadcast) is first used if the name +configuration facility. If enabled, an elaborate name resolution sequence +is followed the precise nature of which is dependant on how the NetBIOS +Node Type parameter is configured. A Node Type of 0 means that +NetBIOS broadcast (over UDP broadcast) is used if the name that is the subject of a name lookup is not found in the NetBIOS name cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast lookup is used. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983130"></a>WINS Lookup</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979295"></a>WINS Lookup</h3></div></div><div></div></div><p> A WINS (Windows Internet Name Server) service is the equivalent of the rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores the names and IP addresses that are registered by a Windows client @@ -14817,11 +14820,11 @@ needed in the <tt class="filename">smb.conf</tt> file: </pre><p> where <i class="replaceable"><tt>xxx.xxx.xxx.xxx</tt></i> is the IP address of the WINS server. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983200"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979366"></a>Common Errors</h2></div></div><div></div></div><p> TCP/IP network configuration problems find every network administrator sooner or later. The cause can be anything from keyboard mishaps, forgetfulness, simple mistakes, and carelessness. Of course, no one is every deliberately careless! -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983216"></a>My Boomerang Won't Come Back</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979382"></a>My Boomerang Won't Come Back</h3></div></div><div></div></div><p> Well, the real complaint said, "I can ping my samba server from Windows, but I can not ping my Windows machine from the samba server." </p><p> @@ -14831,9 +14834,9 @@ carelessness. Of course, no one is every deliberately careless! </p><p> Due to inconsistent netmasks, the Windows machine was on network 192.168.1.0/24, while the Samba server was on network 192.168.1.128/25 - logically a different network. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983248"></a>Very Slow Network Connections</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979413"></a>Very Slow Network Connections</h3></div></div><div></div></div><p> A common causes of slow network response includes: - </p><div class="itemizedlist"><ul type="disc"><li><p>Client is configured to use DNS and DNS server is down</p></li><li><p>Client is configured to use remote DNS server, but remote connection is down</p></li><li><p>Client is configured to use a WINS server, but there is no WINS server</p></li><li><p>Client is NOT configured to use a WINS server, but there is a WINS server</p></li><li><p>Firewall is filtering our DNS or WINS traffic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983300"></a>Samba server name change problem</h3></div></div><div></div></div><p> + </p><div class="itemizedlist"><ul type="disc"><li><p>Client is configured to use DNS and DNS server is down</p></li><li><p>Client is configured to use remote DNS server, but remote connection is down</p></li><li><p>Client is configured to use a WINS server, but there is no WINS server</p></li><li><p>Client is NOT configured to use a WINS server, but there is a WINS server</p></li><li><p>Firewall is filtering our DNS or WINS traffic</p></li></ul></div></div><div xmlns:ns94="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979464"></a>Samba server name change problem</h3></div></div><div></div></div><p> The name of the samba server was changed, samba was restarted, samba server can not be pinged by new name from MS Windows NT4 Workstation, but it does still respond to ping using the old name. Why? @@ -14842,8 +14845,8 @@ carelessness. Of course, no one is every deliberately careless! </p><div class="itemizedlist"><ul type="disc"><li><p>WINS is NOT in use, only broadcast based name resolution is used</p></li><li><p>The samba server was renamed and restarted within the last 10-15 minutes</p></li><li><p>The old samba server name is still in the NetBIOS name cache on the MS Windows NT4 Workstation</p></li></ul></div><p> To find what names are present in the NetBIOS name cache on the MS Windows NT4 machine, open a cmd shell, then: - </p><p> - </p><pre class="screen"> + </p><ns94:p> + </ns94:p><pre class="screen"> C:\temp\>nbtstat -n NetBIOS Local Name Table @@ -14867,13 +14870,13 @@ carelessness. Of course, no one is every deliberately careless! FRODO <20> UNIQUE 192.168.1.1 240 C:\Temp\> - </pre><p> - </p><p> + </pre><ns94:p> + </ns94:p><p> In the above example, FRODO is the Samba server and SLACK is the MS Windows NT4 Workstation. - The first listing shows the contents of the Local Name Table (ie: Identity information on + The first listing shows the contents of the Local Name Table (i.e.: Identity information on the MS Windows workstation), the second shows the NetBIOS name in the NetBIOS name cache. The name cache contains the remote machines known to this workstation. - </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unicode"></a>Chapter27.Unicode/Charsets</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">TAKAHASHI</span> <span class="surname">Motonobu</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:monyo@home.monyo.com">monyo@home.monyo.com</a>></tt></p></div></div></div></div><div><p class="pubdate">25 March 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2984418">Features and Benefits</a></dt><dt><a href="#id2984620">What are charsets and unicode?</a></dt><dt><a href="#id2984690">Samba and charsets</a></dt><dt><a href="#id2984790">Conversion from old names</a></dt><dt><a href="#id2984835">Japanese charsets</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984418"></a>Features and Benefits</h2></div></div><div></div></div><p> + </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unicode"></a>Chapter27.Unicode/Charsets</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">TAKAHASHI</span> <span class="surname">Motonobu</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:monyo@home.monyo.com">monyo@home.monyo.com</a>></tt></p></div></div></div></div><div><p class="pubdate">25 March 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2979620">Features and Benefits</a></dt><dt><a href="#id2979662">What are charsets and unicode?</a></dt><dt><a href="#id2979730">Samba and charsets</a></dt><dt><a href="#id2979831">Conversion from old names</a></dt><dt><a href="#id2979876">Japanese charsets</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979620"></a>Features and Benefits</h2></div></div><div></div></div><p> Every industry eventually matures. One of the great areas of maturation is in the focus that has been given over the past decade to make it possible for anyone anywhere to use a computer. It has not always been that way, in fact, not so long @@ -14888,7 +14891,7 @@ special mention. For more information about Openi18n please refer to: Samba-2.x supported a single locale through a mechanism called <span class="emphasis"><em>codepages</em></span>. Samba-3 is destined to become a truly trans-global file and printer sharing platform. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984620"></a>What are charsets and unicode?</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979662"></a>What are charsets and unicode?</h2></div></div><div></div></div><p> Computers communicate in numbers. In texts, each number will be translated to a corresponding letter. The meaning that will be assigned to a certain number depends on the <span class="emphasis"><em>character set(charset) @@ -14915,7 +14918,7 @@ communicating. negotiating the charset to be used in the smb protocol. Thus, you have to make sure you are using the same charset when talking to an old client. Newer clients (Windows NT, 2K, XP) talk unicode over the wire. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984690"></a>Samba and charsets</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979730"></a>Samba and charsets</h2></div></div><div></div></div><p> As of samba 3.0, samba can (and will) talk unicode over the wire. Internally, samba knows of three kinds of character sets: </p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>unix charset</tt></i></span></dt><dd><p> @@ -14929,14 +14932,14 @@ samba knows of three kinds of character sets: The default depends on the charsets you have installed on your system. Run <b class="command">testparm -v | grep "dos charset"</b> to see what the default is on your system. - </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984790"></a>Conversion from old names</h2></div></div><div></div></div><p>Because previous samba versions did not do any charset conversion, + </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979831"></a>Conversion from old names</h2></div></div><div></div></div><p>Because previous samba versions did not do any charset conversion, characters in filenames are usually not correct in the unix charset but only for the local charset used by the DOS/Windows clients.</p><p>The following script from Steve Langasek converts all filenames from CP850 to the iso8859-15 charset.</p><p> <tt class="prompt">#</tt><b class="userinput"><tt>find <i class="replaceable"><tt>/path/to/share</tt></i> -type f -exec bash -c 'CP="{}"; ISO=`echo -n "$CP" | iconv -f cp850 \ -t iso8859-15`; if [ "$CP" != "$ISO" ]; then mv "$CP" "$ISO"; fi' \; </tt></b> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984835"></a>Japanese charsets</h2></div></div><div></div></div><p>Samba doesn't work correctly with Japanese charsets yet. Here are +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979876"></a>Japanese charsets</h2></div></div><div></div></div><p>Samba doesn't work correctly with Japanese charsets yet. Here are points of attention when setting it up:</p><div class="itemizedlist"><ul type="disc"><li><p>You should set <i class="parameter"><tt>mangling method = hash</tt></i></p></li><li><p>There are various iconv() implementations around and not all of them work equally well. glibc2's iconv() has a critical problem @@ -14946,28 +14949,28 @@ Shift_JIS, SJIS...</p></li><li><p>Currently only <i class="parameter"><tt>unix c will work (but still has some problems...) because of iconv() issues. <i class="parameter"><tt>unix charset = EUC-JP</tt></i> doesn't work well because of iconv() issues.</p></li><li><p>Currently Samba 3.0 does not support <i class="parameter"><tt>unix charset -= UTF8-MAC/CAP/HEX/JIS*</tt></i></p></li></ul></div><p>More information (in Japanese) is available at: <a href="http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html" target="_top">http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html</a>.</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Backup"></a>Chapter28.Samba Backup Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2984038">Note</a></dt><dt><a href="#id2984063">Features and Benefits</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984038"></a>Note</h2></div></div><div></div></div><p> += UTF8-MAC/CAP/HEX/JIS*</tt></i></p></li></ul></div><p>More information (in Japanese) is available at: <a href="http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html" target="_top">http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html</a>.</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Backup"></a>Chapter28.Samba Backup Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2982471">Note</a></dt><dt><a href="#id2982492">Features and Benefits</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982471"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. If you have something to contribute for this section please email it to <a href="#">jht@samba.org</a>/ -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984063"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982492"></a>Features and Benefits</h2></div></div><div></div></div><p> We need feedback from people who are backing up samba servers. We would like to know what software tools you are using to backup your samba server/s. </p><p> In particular, if you have any success and / or failure stories you could share with other users this would be appreciated. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SambaHA"></a>Chapter29.High Availability Options</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2985605">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2985605"></a>Note</h2></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SambaHA"></a>Chapter29.High Availability Options</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2982302">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982302"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. -</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="migration"></a>Migration and Updating</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>30. <a href="#upgrading-to-3.0">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="#id2984190">Charsets</a></dt><dt><a href="#id2984215">Obsolete configuration options</a></dt><dt><a href="#id2985825">Password Backend</a></dt></dl></dd><dt>31. <a href="#NT4Migration">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="#id2983845">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2983873">Objectives</a></dt><dt><a href="#id2986549">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2986887">Migration Options</a></dt><dd><dl><dt><a href="#id2986968">Planning for Success</a></dt><dt><a href="#id2987210">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="#SWAT">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="#id2986434">Features and Benefits</a></dt><dd><dl><dt><a href="#id2986468">Enabling SWAT for use</a></dt><dt><a href="#id2988827">Securing SWAT through SSL</a></dt><dt><a href="#id2988941">The SWAT Home Page</a></dt><dt><a href="#id2989005">Global Settings</a></dt><dt><a href="#id2989110">Share Settings</a></dt><dt><a href="#id2989175">Printers Settings</a></dt><dt><a href="#id2989239">The SWAT Wizard</a></dt><dt><a href="#id2989287">The Status Page</a></dt><dt><a href="#id2989339">The View Page</a></dt><dt><a href="#id2989362">The Password Change Page</a></dt></dl></dd></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="upgrading-to-3.0"></a>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">25 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2984190">Charsets</a></dt><dt><a href="#id2984215">Obsolete configuration options</a></dt><dt><a href="#id2985825">Password Backend</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984190"></a>Charsets</h2></div></div><div></div></div><p>You might experience problems with special characters +</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="migration"></a>Migration and Updating</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>30. <a href="#upgrading-to-3.0">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="#id2983637">Charsets</a></dt><dt><a href="#id2983660">Obsolete configuration options</a></dt><dt><a href="#id2983713">Password Backend</a></dt></dl></dd><dt>31. <a href="#NT4Migration">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="#id2982957">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2982981">Objectives</a></dt><dt><a href="#id2981910">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2984126">Migration Options</a></dt><dd><dl><dt><a href="#id2984207">Planning for Success</a></dt><dt><a href="#id2984449">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="#SWAT">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="#id2984755">Features and Benefits</a></dt><dd><dl><dt><a href="#id2984605">Enabling SWAT for use</a></dt><dt><a href="#id2985495">Securing SWAT through SSL</a></dt><dt><a href="#id2985607">The SWAT Home Page</a></dt><dt><a href="#id2985671">Global Settings</a></dt><dt><a href="#id2985776">Share Settings</a></dt><dt><a href="#id2985841">Printers Settings</a></dt><dt><a href="#id2985906">The SWAT Wizard</a></dt><dt><a href="#id2985953">The Status Page</a></dt><dt><a href="#id2986005">The View Page</a></dt><dt><a href="#id2986028">The Password Change Page</a></dt></dl></dd></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="upgrading-to-3.0"></a>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">25 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2983637">Charsets</a></dt><dt><a href="#id2983660">Obsolete configuration options</a></dt><dt><a href="#id2983713">Password Backend</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983637"></a>Charsets</h2></div></div><div></div></div><p>You might experience problems with special characters when communicating with old DOS clients. Codepage support has changed in samba 3.0. Read the chapter <a href="#unicode" title="Chapter27.Unicode/Charsets">Unicode support</a> for details. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984215"></a>Obsolete configuration options</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983660"></a>Obsolete configuration options</h2></div></div><div></div></div><p> In 3.0, the following configuration options have been removed. -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>printer driver (replaced by new driver procedures) </td></tr><tr><td>printer driver file (replaced by new driver procedures)</td></tr><tr><td>printer driver location (replaced by new driver procedures)</td></tr><tr><td>use rhosts</td></tr><tr><td>postscript</td></tr><tr><td>client code page (replaced by dos charset)</td></tr><tr><td>vfs path</td></tr><tr><td>vfs options</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2985825"></a>Password Backend</h2></div></div><div></div></div><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td>printer driver (replaced by new driver procedures) </td></tr><tr><td>printer driver file (replaced by new driver procedures)</td></tr><tr><td>printer driver location (replaced by new driver procedures)</td></tr><tr><td>use rhosts</td></tr><tr><td>postscript</td></tr><tr><td>client code page (replaced by dos charset)</td></tr><tr><td>vfs path</td></tr><tr><td>vfs options</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983713"></a>Password Backend</h2></div></div><div></div></div><p> Effective with the release of samba-3 it is now imperative that the password backend be correctly defined in smb.conf. </p><p> @@ -14979,10 +14982,10 @@ Those migrating from samba-2.x with encrypted password support should add to smb </p><p> LDAP using Samba-2.x systems can continue to operate with the following entry <span class="emphasis"><em>passdb backend = ldapsam_compat, guest</em></span>. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NT4Migration"></a>Chapter31.Migration from NT4 PDC to Samba-3 PDC</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2983845">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2983873">Objectives</a></dt><dt><a href="#id2986549">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2986887">Migration Options</a></dt><dd><dl><dt><a href="#id2986968">Planning for Success</a></dt><dt><a href="#id2987210">Samba Implementation Choices</a></dt></dl></dd></dl></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NT4Migration"></a>Chapter31.Migration from NT4 PDC to Samba-3 PDC</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2982957">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2982981">Objectives</a></dt><dt><a href="#id2981910">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2984126">Migration Options</a></dt><dd><dl><dt><a href="#id2984207">Planning for Success</a></dt><dt><a href="#id2984449">Samba Implementation Choices</a></dt></dl></dd></dl></div><p> This is a rough guide to assist those wishing to migrate from NT4 domain control to Samba-3 based domain control. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983845"></a>Planning and Getting Started</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982957"></a>Planning and Getting Started</h2></div></div><div></div></div><p> In the IT world there is often a saying that all problems are encountered because of poor planning. The corollary to this saying is that not all problems can be anticipated and planned for. Then again, good planning will anticipate most show stopper type situations. @@ -14990,7 +14993,7 @@ and planned for. Then again, good planning will anticipate most show stopper typ Those wishing to migrate from MS Windows NT4 domain control to a Samba-3 domain control environment would do well to develop a detailed migration plan. So here are a few pointers to help migration get under way. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983873"></a>Objectives</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982981"></a>Objectives</h3></div></div><div></div></div><p> The key objective for most organisations will be to make the migration from MS Windows NT4 to Samba-3 domain control as painless as possible. One of the challenges you may experience in your migration process may well be one of convincing management that the new environment @@ -15017,7 +15020,7 @@ Before migrating a network from MS Windows NT4 to Samba-3 it is vital that all n considered. Users should be educated about changes they may experience so that the change will be a welcome one and not become an obstacle to the work they need to do. The following are some of the factors that will go into a successful migration: -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2985388"></a>Domain Layout</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981684"></a>Domain Layout</h4></div></div><div></div></div><p> Samba-3 can be configured as a domain controller, a back-up domain controller (probably best called a secondary controller), a domain member, or as a stand-alone server. The Windows network security domain context should be sized and scoped before implementation. Particular attention needs to be @@ -15038,7 +15041,7 @@ designed to serve multiple routed network segments may result in severe performa response time (eg: ping timing) between the remote segment and the PDC is more than 100 ms. In situations where the delay is too long it is highly recommended to locate a backup controller (BDC) to serve as the local authentication and access control server. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2985441"></a>Server Share and Directory Layout</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981737"></a>Server Share and Directory Layout</h4></div></div><div></div></div><p> There are few cardinal rules to effective network design that can be broken with impunity. The most important rule of effective network management is that simplicity is king in every well controlled network. Every part of the infrastructure must be managed, the more complex @@ -15063,7 +15066,7 @@ complex mess that has been inherited. Remember, apparent job security through co and implementation may ultimately cause loss of operations and downtime to users as the new administrator learns to untangle your web. Keep access controls simple and effective and make sure that users will never be interrupted by the stupidity of complexity. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2985503"></a>Logon Scripts</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981799"></a>Logon Scripts</h4></div></div><div></div></div><p> Please refer to the section of this document on Advanced Network Administration for information regarding the network logon script options for Samba-3. Logon scripts can help to ensure that all users gain share and printer connections they need. @@ -15077,20 +15080,20 @@ Some sites prefer to use a tool such as <b class="command">kixstart</b> to estab user environment. In any case you may wish to do a google search for logon script process controls. In particular, you may wish to explore the use of the Microsoft knowledgebase article KB189105 that deals with how to add printers without user intervention via the logon script process. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2985560"></a>Profile Migration/Creation</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981856"></a>Profile Migration/Creation</h4></div></div><div></div></div><p> User and Group Profiles may be migrated using the tools described in the section titled Desktop Profile Management. </p><p> Profiles may also be managed using the Samba-3 tool <b class="command">profiles</b>. This tool allows the MS Windows NT style security identifiers (SIDs) that are stored inside the profile NTuser.DAT file to be changed to the SID of the Samba-3 domain. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2986523"></a>User and Group Accounts</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981885"></a>User and Group Accounts</h4></div></div><div></div></div><p> It is possible to migrate all account settings from an MS Windows NT4 domain to Samba-3. Before attempting to migrate user and group accounts it is STRONGLY advised to create in Samba-3 the groups that are present on the MS Windows NT4 domain <span class="emphasis"><em>AND</em></span> to connect these to suitable Unix/Linux groups. Following this simple advice will mean that all user and group attributes should migrate painlessly. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986549"></a>Steps In Migration Process</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2981910"></a>Steps In Migration Process</h3></div></div><div></div></div><p> The approximate migration process is described below. </p><div class="itemizedlist"><ul type="disc"><li><p> You will have an NT4 PDC that has the users, groups, policies and profiles to be migrated @@ -15099,11 +15102,11 @@ Samba-3 set up as a DC with netlogon share, profile share, etc. </p></li></ul></div><div class="procedure"><p class="title"><b>Procedure31.1.The Account Migration Process</b></p><ol type="1"><li><p>Create a BDC account for the samba server using NT Server Manager</p><ol type="a"><li><p>Samba must NOT be running</p></li></ol></li><li><p><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>NT4PDC</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p><ol type="a"><li><p>lsaquery</p></li><li><p>Note the SID returned</p></li></ol></li><li><p><b class="userinput"><tt>net getsid -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p><ol type="a"><li><p>Note the SID</p></li></ol></li><li><p><b class="userinput"><tt>net getlocalsid</tt></b></p><ol type="a"><li><p>Note the SID, now check that all three SIDS reported are the same!</p></li></ol></li><li><p><b class="userinput"><tt>net rpc join -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -L</tt></b></p><ol type="a"><li><p>Note - did the users migrate?</p></li></ol></li><li><p><b class="userinput"><tt>initGrps.sh <i class="replaceable"><tt>DOMNAME</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net groupmap list</tt></b></p><ol type="a"><li><p>Now check that all groups are recognised</p></li></ol></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -Lv</tt></b></p><ol type="a"><li><p>Note - check that all group membership has been migrated</p></li></ol></li></ol></div><p> Now it is time to migrate all the profiles, then migrate all policy files. More later. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986887"></a>Migration Options</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984126"></a>Migration Options</h2></div></div><div></div></div><p> Based on feedback from many sites as well as from actual installation and maintenance experience sites that wish to migrate from MS Windows NT4 Domain Control to a Samba based solution fit into three basic categories. -</p><div class="table"><a name="id2986904"></a><p class="title"><b>Table31.1.The 3 Major Site Types</b></p><table summary="The 3 Major Site Types" border="1"><colgroup><col><col></colgroup><thead><tr><th>Number of Users</th><th>Description</th></tr></thead><tbody><tr><td>< 50</td><td><p>Want simple conversion with NO pain</p></td></tr><tr><td>50 - 250</td><td><p>Want new features, can manage some in-house complexity</p></td></tr><tr><td>> 250</td><td><p>Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas</p></td></tr></tbody></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986968"></a>Planning for Success</h3></div></div><div></div></div><p> +</p><div class="table"><a name="id2984141"></a><p class="title"><b>Table31.1.The 3 Major Site Types</b></p><table summary="The 3 Major Site Types" border="1"><colgroup><col><col></colgroup><thead><tr><th>Number of Users</th><th>Description</th></tr></thead><tbody><tr><td>< 50</td><td><p>Want simple conversion with NO pain</p></td></tr><tr><td>50 - 250</td><td><p>Want new features, can manage some in-house complexity</p></td></tr><tr><td>> 250</td><td><p>Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas</p></td></tr></tbody></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2984207"></a>Planning for Success</h3></div></div><div></div></div><p> There are three basic choices for sites that intend to migrate from MS Windows NT4 to Samba-3. </p><div class="itemizedlist"><ul type="disc"><li><p> @@ -15122,7 +15125,7 @@ No matter what choice you make, the following rules will minimise down-stream pr Test ALL assumptions </p></li><li><p> Test full roll-out program, including workstation deployment - </p></li></ul></div><div class="table"><a name="id2987041"></a><p class="title"><b>Table31.2.Nature of the Conversion Choices</b></p><table summary="Nature of the Conversion Choices" border="1"><colgroup><col><col><col></colgroup><thead><tr><th>Simple</th><th>Upgraded</th><th>Redesign</th></tr></thead><tbody><tr><td><p>Make use of minimal OS specific features</p></td><td><p>Translate NT4 features to new host OS features</p></td><td><p>Decide:</p></td></tr><tr><td><p>Suck all accounts from NT4 into Samba-3</p></td><td><p>Copy and improve:</p></td><td><p>Authentication Regime (database location and access)</p></td></tr><tr><td><p>Make least number of operational changes</p></td><td><p>Make progressive improvements</p></td><td><p>Desktop Management Methods</p></td></tr><tr><td><p>Take least amount of time to migrate</p></td><td><p>Minimise user impact</p></td><td><p>Better Control of Desktops / Users</p></td></tr><tr><td><p>Live versus Isolated Conversion</p></td><td><p>Maximise functionality</p></td><td><p>Identify Needs for: Manageability, Scalability, Security, Availability</p></td></tr><tr><td><p>Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)</p></td><td><p>Take advantage of lower maintenance opportunity</p></td><td><p></p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2987210"></a>Samba Implementation Choices</h3></div></div><div></div></div><pre class="programlisting"> + </p></li></ul></div><div class="table"><a name="id2984278"></a><p class="title"><b>Table31.2.Nature of the Conversion Choices</b></p><table summary="Nature of the Conversion Choices" border="1"><colgroup><col><col><col></colgroup><thead><tr><th>Simple</th><th>Upgraded</th><th>Redesign</th></tr></thead><tbody><tr><td><p>Make use of minimal OS specific features</p></td><td><p>Translate NT4 features to new host OS features</p></td><td><p>Decide:</p></td></tr><tr><td><p>Suck all accounts from NT4 into Samba-3</p></td><td><p>Copy and improve:</p></td><td><p>Authentication Regime (database location and access)</p></td></tr><tr><td><p>Make least number of operational changes</p></td><td><p>Make progressive improvements</p></td><td><p>Desktop Management Methods</p></td></tr><tr><td><p>Take least amount of time to migrate</p></td><td><p>Minimise user impact</p></td><td><p>Better Control of Desktops / Users</p></td></tr><tr><td><p>Live versus Isolated Conversion</p></td><td><p>Maximise functionality</p></td><td><p>Identify Needs for: Manageability, Scalability, Security, Availability</p></td></tr><tr><td><p>Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)</p></td><td><p>Take advantage of lower maintenance opportunity</p></td><td><p></p></td></tr></tbody></table></div></div><div xmlns:ns95="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2984449"></a>Samba Implementation Choices</h3></div></div><div></div></div><pre class="programlisting"> Authentication database back end Winbind (external Samba or NT4/200x server) Can use pam_mkhomedir.so to auto-create home dirs @@ -15179,8 +15182,8 @@ Migration Tools Authentication New SAM back end (smbpasswd, tdbsam, ldapsam, mysqlsam) -</pre><p> -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SWAT"></a>Chapter32.SWAT - The Samba Web Administration Tool</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2986434">Features and Benefits</a></dt><dd><dl><dt><a href="#id2986468">Enabling SWAT for use</a></dt><dt><a href="#id2988827">Securing SWAT through SSL</a></dt><dt><a href="#id2988941">The SWAT Home Page</a></dt><dt><a href="#id2989005">Global Settings</a></dt><dt><a href="#id2989110">Share Settings</a></dt><dt><a href="#id2989175">Printers Settings</a></dt><dt><a href="#id2989239">The SWAT Wizard</a></dt><dt><a href="#id2989287">The Status Page</a></dt><dt><a href="#id2989339">The View Page</a></dt><dt><a href="#id2989362">The Password Change Page</a></dt></dl></dd></dl></div><p> +</pre><ns95:p> +</ns95:p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SWAT"></a>Chapter32.SWAT - The Samba Web Administration Tool</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2984755">Features and Benefits</a></dt><dd><dl><dt><a href="#id2984605">Enabling SWAT for use</a></dt><dt><a href="#id2985495">Securing SWAT through SSL</a></dt><dt><a href="#id2985607">The SWAT Home Page</a></dt><dt><a href="#id2985671">Global Settings</a></dt><dt><a href="#id2985776">Share Settings</a></dt><dt><a href="#id2985841">Printers Settings</a></dt><dt><a href="#id2985906">The SWAT Wizard</a></dt><dt><a href="#id2985953">The Status Page</a></dt><dt><a href="#id2986005">The View Page</a></dt><dt><a href="#id2986028">The Password Change Page</a></dt></dl></dd></dl></div><p> There are many and varied opinions regarding the usefulness or otherwise of SWAT. No matter how hard one tries to produce the perfect configuration tool it remains an object of personal taste. SWAT is a tool that will allow web based configuration @@ -15188,7 +15191,7 @@ of samba. It has a wizard that may help to get samba configured quickly, it has sensitive help on each smb.conf parameter, it provides for monitoring of current state of connection information, and it allows network wide MS Windows network password management. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986434"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984755"></a>Features and Benefits</h2></div></div><div></div></div><p> There are network administrators who believe that it is a good idea to write systems documentation inside configuration files, for them SWAT will aways be a nasty tool. SWAT does not store the configuration file in any intermediate form, rather, it stores only the @@ -15200,7 +15203,7 @@ internal ordering. So before using SWAT please be warned - SWAT will completely replace your smb.conf with a fully optimised file that has been stripped of all comments you might have placed there and only non-default settings will be written to the file. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986468"></a>Enabling SWAT for use</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns96="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2984605"></a>Enabling SWAT for use</h3></div></div><div></div></div><p> SWAT should be installed to run via the network super daemon. Depending on which system your Unix/Linux system has you will have either an <b class="command">inetd</b> or <b class="command">xinetd</b> based system. @@ -15216,8 +15219,8 @@ The control entry for the older style file might be: swat stream tcp nowait.400 root /usr/sbin/swat swat </pre><p> A control file for the newer style xinetd could be: -</p><p> -</p><pre class="programlisting"> +</p><ns96:p> +</ns96:p><pre class="programlisting"> # default: off # description: SWAT is the Samba Web Admin Tool. Use swat \ # to configure your Samba server. To use SWAT, \ @@ -15233,9 +15236,9 @@ A control file for the newer style xinetd could be: log_on_failure += USERID disable = yes } -</pre><p> +</pre><ns96:p> -</p><p> +</ns96:p><p> Both the above examples assume that the <b class="command">swat</b> binary has been located in the <tt class="filename">/usr/sbin</tt> directory. In addition to the above SWAT will use a directory access point from which it will load it's help files @@ -15254,32 +15257,32 @@ So long as you log onto SWAT as the user <span class="emphasis"><em>root</em></s full change and commit ability. The buttons that will be exposed includes: <span class="guibutton">HOME</span>, <span class="guibutton">GLOBALS</span>, <span class="guibutton">SHARES</span>, <span class="guibutton">PRINTERS</span>, <span class="guibutton">WIZARD</span>, <span class="guibutton">STATUS</span>, <span class="guibutton">VIEW</span>, <span class="guibutton">PASSWORD</span>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2988827"></a>Securing SWAT through SSL</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985495"></a>Securing SWAT through SSL</h3></div></div><div></div></div><p> Lots of people have asked about how to setup SWAT with SSL to allow for secure remote administration of Samba. Here is a method that works, courtesy of Markus Krieger </p><p> Modifications to the swat setup are as following: </p><div class="procedure"><ol type="1"><li><p> install OpenSSL - </p></li><li><p> + </p></li><li xmlns:ns97=""><ns97:p> generate certificate and private key - </p><pre class="screen"> + </ns97:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>/usr/bin/openssl req -new -x509 -days 365 -nodes -config \ /usr/share/doc/packages/stunnel/stunnel.cnf \ -out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem</tt></b> </pre></li><li><p> remove swat-entry from [x]inetd - </p></li><li><p> + </p></li><li xmlns:ns98=""><ns98:p> start stunnel - </p><pre class="screen"> + </ns98:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>stunnel -p /etc/stunnel/stunnel.pem -d 901 \ -l /usr/local/samba/bin/swat swat </tt></b> </pre></li></ol></div><p> afterwords simply contact to swat by using the URL <a href="https://myhost:901" target="_top">https://myhost:901</a>, accept the certificate and the SSL connection is up. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2988941"></a>The SWAT Home Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985607"></a>The SWAT Home Page</h3></div></div><div></div></div><p> The SWAT title page provides access to the latest Samba documentation. The manual page for each samba component is accessible from this page as are the Samba-HOWTO-Collection (this document) as well as the O'Reilly book "Using Samba". @@ -15295,7 +15298,7 @@ as it runs SWAT without authentication and with full administrative ability. ie: changes to smb.conf as well as general operation with root privileges. The option that creates this ability is the <tt class="option">-a</tt> flag to swat. <span class="emphasis"><em>Do not use this in any production environment.</em></span> -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989005"></a>Global Settings</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985671"></a>Global Settings</h3></div></div><div></div></div><p> The Globals button will expose a page that allows configuration of the global parameters in smb.conf. There are three levels of exposure of the parameters: </p><div class="itemizedlist"><ul type="disc"><li><p> @@ -15317,7 +15320,7 @@ your changes will be immediately lost. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> SWAT has context sensitive help. To find out what each parameter is for simply click the <span class="guibutton">Help</span> link to the left of the configuration parameter. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989110"></a>Share Settings</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985776"></a>Share Settings</h3></div></div><div></div></div><p> To affect a currently configured share, simply click on the pull down button between the <span class="guibutton">Choose Share</span> and the <span class="guibutton">Delete Share</span> buttons, select the share you wish to operate on, then to edit the settings click on the @@ -15327,7 +15330,7 @@ select the share you wish to operate on, then to edit the settings click on the To create a new share, next to the button labelled <span class="guibutton">Create Share</span> enter into the text field the name of the share to be created, then click on the <span class="guibutton">Create Share</span> button. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989175"></a>Printers Settings</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985841"></a>Printers Settings</h3></div></div><div></div></div><p> To affect a currently configured printer, simply click on the pull down button between the <span class="guibutton">Choose Printer</span> and the <span class="guibutton">Delete Printer</span> buttons, select the printer you wish to operate on, then to edit the settings click on the @@ -15337,7 +15340,7 @@ select the printer you wish to operate on, then to edit the settings click on th To create a new printer, next to the button labelled <span class="guibutton">Create Printer</span> enter into the text field the name of the share to be created, then click on the <span class="guibutton">Create Printer</span> button. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989239"></a>The SWAT Wizard</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985906"></a>The SWAT Wizard</h3></div></div><div></div></div><p> The purpose if the SWAT Wizard is to help the Microsoft knowledgeable network administrator to configure Samba with a minimum of effort. </p><p> @@ -15353,7 +15356,7 @@ Finally, there are a limited set of options that will determine what type of ser will be configured for, whether it will be a WINS server, participate as a WINS client, or operate with no WINS support. By clicking on one button you can elect to expose (or not) user home directories. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989287"></a>The Status Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985953"></a>The Status Page</h3></div></div><div></div></div><p> The status page serves a limited purpose. Firstly, it allows control of the samba daemons. The key daemons that create the samba server environment are: <span class="application">smbd</span>, <span class="application">nmbd</span>, <span class="application">winbindd</span>. </p><p> @@ -15364,11 +15367,11 @@ conditions with minimal effort. </p><p> Lastly, the Status page may be used to terminate specific smbd client connections in order to free files that may be locked. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989339"></a>The View Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986005"></a>The View Page</h3></div></div><div></div></div><p> This page allows the administrator to view the optimised <tt class="filename">smb.conf</tt> file and, if you are particularly masochistic, will permit you also to see all possible global configuration parameters and their settings. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989362"></a>The Password Change Page</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986028"></a>The Password Change Page</h3></div></div><div></div></div><p> The Password Change page is a popular tool. This tool allows the creation, deletion, deactivation and reactivation of MS Windows networking users on the local machine. Alternatively, you can use this tool to change a local password for a user account. @@ -15379,7 +15382,7 @@ required. </p><p> One popular use for this tool is to change user passwords across a range of remote MS Windows servers. -</p></div></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="troubleshooting"></a>Troubleshooting</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>33. <a href="#diagnosis">The Samba checklist</a></dt><dd><dl><dt><a href="#id2988578">Introduction</a></dt><dt><a href="#id2990437">Assumptions</a></dt><dt><a href="#id2990614">The tests</a></dt><dt><a href="#id2991790">Still having troubles?</a></dt></dl></dd><dt>34. <a href="#problems">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="#id2993414">Diagnostics tools</a></dt><dt><a href="#id2993555">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2993839">Useful URLs</a></dt><dt><a href="#id2993884">Getting help from the mailing lists</a></dt><dt><a href="#id2994036">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="#bugreport">Reporting Bugs</a></dt><dd><dl><dt><a href="#id2994775">Introduction</a></dt><dt><a href="#id2994997">General info</a></dt><dt><a href="#id2995034">Debug levels</a></dt><dt><a href="#id2995176">Internal errors</a></dt><dt><a href="#id2995284">Attaching to a running process</a></dt><dt><a href="#id2995331">Patches</a></dt></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="diagnosis"></a>Chapter33.The Samba checklist</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">Wed Jan 15</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2988578">Introduction</a></dt><dt><a href="#id2990437">Assumptions</a></dt><dt><a href="#id2990614">The tests</a></dt><dt><a href="#id2991790">Still having troubles?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2988578"></a>Introduction</h2></div></div><div></div></div><p> +</p></div></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="troubleshooting"></a>Troubleshooting</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>33. <a href="#diagnosis">The Samba checklist</a></dt><dd><dl><dt><a href="#id2986149">Introduction</a></dt><dt><a href="#id2986183">Assumptions</a></dt><dt><a href="#id2986356">The tests</a></dt><dt><a href="#id2989908">Still having troubles?</a></dt></dl></dd><dt>34. <a href="#problems">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="#id2991300">Diagnostics tools</a></dt><dt><a href="#id2990026">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2990310">Useful URLs</a></dt><dt><a href="#id2990353">Getting help from the mailing lists</a></dt><dt><a href="#id2990506">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="#bugreport">Reporting Bugs</a></dt><dd><dl><dt><a href="#id2992820">Introduction</a></dt><dt><a href="#id2992880">General info</a></dt><dt><a href="#id2992915">Debug levels</a></dt><dt><a href="#id2991012">Internal errors</a></dt><dt><a href="#id2991120">Attaching to a running process</a></dt><dt><a href="#id2990621">Patches</a></dt></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="diagnosis"></a>Chapter33.The Samba checklist</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">Wed Jan 15</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2986149">Introduction</a></dt><dt><a href="#id2986183">Assumptions</a></dt><dt><a href="#id2986356">The tests</a></dt><dt><a href="#id2989908">Still having troubles?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986149"></a>Introduction</h2></div></div><div></div></div><p> This file contains a list of tests you can perform to validate your Samba server. It also tells you what the likely cause of the problem is if it fails any one of these steps. If it passes all these tests @@ -15394,7 +15397,7 @@ to solve a problem. If you send one of the samba mailing lists an email saying "it doesn't work" and you have not followed this test procedure then you should not be surprised if your email is ignored. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990437"></a>Assumptions</h2></div></div><div></div></div><p> +</p></div><div xmlns:ns99="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986183"></a>Assumptions</h2></div></div><div></div></div><p> In all of the tests it is assumed you have a Samba server called BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP. </p><p> @@ -15411,8 +15414,8 @@ following to <tt class="filename">smb.conf</tt>: path = /tmp read only = yes -</pre><p> -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><ns99:p> +</ns99:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> These tests assume version 3.0 or later of the samba suite. Some commands shown did not exist in earlier versions. </p></div><p> @@ -15435,7 +15438,7 @@ depending on how or if you specified logging in your <tt class="filename">smb.co </p><p> If you make changes to your <tt class="filename">smb.conf</tt> file while going through these test, don't forget to restart <span class="application">smbd</span> and <span class="application">nmbd</span>. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990614"></a>The tests</h2></div></div><div></div></div><div class="procedure"><p class="title"><b>Procedure33.1.Diagnosing your samba server</b></p><ol type="1"><li><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986356"></a>The tests</h2></div></div><div></div></div><div class="procedure"><p class="title"><b>Procedure33.1.Diagnosing your samba server</b></p><ol type="1"><li><p> In the directory in which you store your <tt class="filename">smb.conf</tt> file, run the command <b class="userinput"><tt>testparm smb.conf</tt></b>. If it reports any errors then your <tt class="filename">smb.conf</tt> configuration file is faulty. @@ -15678,13 +15681,13 @@ capability and is in user level security mode. In this case either set <i class="parameter"><tt>password server = Windows_NT_Machine</tt></i> in your <tt class="filename">smb.conf</tt> file, or make sure <i class="parameter"><tt>encrypted passwords</tt></i> is set to "yes". -</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991790"></a>Still having troubles?</h2></div></div><div></div></div><p>Read the chapter on +</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2989908"></a>Still having troubles?</h2></div></div><div></div></div><p>Read the chapter on <a href="#problems" title="Chapter34.Analysing and solving samba problems">Analysing and Solving Problems</a>. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="problems"></a>Chapter34.Analysing and solving samba problems</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">8 Apr 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2993414">Diagnostics tools</a></dt><dt><a href="#id2993555">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2993839">Useful URLs</a></dt><dt><a href="#id2993884">Getting help from the mailing lists</a></dt><dt><a href="#id2994036">How to get off the mailing lists</a></dt></dl></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="problems"></a>Chapter34.Analysing and solving samba problems</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">8 Apr 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2991300">Diagnostics tools</a></dt><dt><a href="#id2990026">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2990310">Useful URLs</a></dt><dt><a href="#id2990353">Getting help from the mailing lists</a></dt><dt><a href="#id2990506">How to get off the mailing lists</a></dt></dl></div><p> There are many sources of information available in the form of mailing lists, RFC's and documentation. The docs that come with the samba distribution contain very good explanations of -general SMB topics such as browsing.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993414"></a>Diagnostics tools</h2></div></div><div></div></div><p> +general SMB topics such as browsing.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991300"></a>Diagnostics tools</h2></div></div><div></div></div><p> One of the best diagnostic tools for debugging problems is Samba itself. You can use the <tt class="option">-d option</tt> for both <span class="application">smbd</span> and <span class="application">nmbd</span> to specify what <i class="parameter"><tt>debug level</tt></i> at which to run. See the man pages on smbd, nmbd and @@ -15723,7 +15726,7 @@ The version on the NT Server install CD will only allow monitoring of network traffic directed to the local NT box and broadcasts on the local subnet. Be aware that Ethereal can read and write netmon formatted files. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993555"></a>Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990026"></a>Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</h2></div></div><div></div></div><p> Installing netmon on an NT workstation requires a couple of steps. The following are for installing Netmon V4.00.349, which comes with Microsoft Windows NT Server 4.0, on Microsoft Windows NT @@ -15762,11 +15765,11 @@ from the Windows 9x CD (<tt class="filename">\admin\nettools\netmon</tt>). Ther file located with the netmon driver files on the CD if you need information on how to do this. Copy the files from a working Netmon installation. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993839"></a>Useful URLs</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>See how Scott Merrill simulates a BDC behavior at +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990310"></a>Useful URLs</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>See how Scott Merrill simulates a BDC behavior at <a href="http://www.skippy.net/linux/smb-howto.html" target="_top"> http://www.skippy.net/linux/smb-howto.html</a>. </p></li><li><p>FTP site for older SMB specs: <a href="ftp://ftp.microsoft.com/developr/drg/CIFS/" target="_top"> - ftp://ftp.microsoft.com/developr/drg/CIFS/</a></p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993884"></a>Getting help from the mailing lists</h2></div></div><div></div></div><p> + ftp://ftp.microsoft.com/developr/drg/CIFS/</a></p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990353"></a>Getting help from the mailing lists</h2></div></div><div></div></div><p> There are a number of Samba related mailing lists. Go to <a href="http://samba.org" target="_top">http://samba.org</a>, click on your nearest mirror and then click on <b class="command">Support</b> and then click on <b class="command"> Samba related mailing lists</b>. @@ -15800,7 +15803,7 @@ error messages.</p></li><li><p>(Possibly) If you have a complete netmon trace ( the pipe to the error ) you can send the *.CAP file as well.</p></li><li><p>Please think carefully before attaching a document to an email. Consider pasting the relevant parts into the body of the message. The samba mailing lists go to a huge number of people, do they all need a copy of your -smb.conf in their attach directory?</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2994036"></a>How to get off the mailing lists</h2></div></div><div></div></div><p>To have your name removed from a samba mailing list, go to the +smb.conf in their attach directory?</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990506"></a>How to get off the mailing lists</h2></div></div><div></div></div><p>To have your name removed from a samba mailing list, go to the same place you went to to get on it. Go to <a href="http://lists.samba.org/" target="_top">http://lists.samba.org</a>, click on your nearest mirror and then click on <b class="command">Support</b> and then click on <b class="command"> Samba related mailing lists</b>. Or perhaps see @@ -15808,7 +15811,7 @@ then click on <b class="command"> Samba related mailing lists</b>. Or perhaps se </p><p> Please don't post messages to the list asking to be removed, you will just be referred to the above address (unless that process failed in some way...) -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="bugreport"></a>Chapter35.Reporting Bugs</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Tridge or Karl Auer perhaps?</span></h3></div></div><div><p class="pubdate"> 27 June 1997 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2994775">Introduction</a></dt><dt><a href="#id2994997">General info</a></dt><dt><a href="#id2995034">Debug levels</a></dt><dt><a href="#id2995176">Internal errors</a></dt><dt><a href="#id2995284">Attaching to a running process</a></dt><dt><a href="#id2995331">Patches</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2994775"></a>Introduction</h2></div></div><div></div></div><p>Please report bugs using +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="bugreport"></a>Chapter35.Reporting Bugs</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Tridge or Karl Auer perhaps?</span></h3></div></div><div><p class="pubdate"> 27 June 1997 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2992820">Introduction</a></dt><dt><a href="#id2992880">General info</a></dt><dt><a href="#id2992915">Debug levels</a></dt><dt><a href="#id2991012">Internal errors</a></dt><dt><a href="#id2991120">Attaching to a running process</a></dt><dt><a href="#id2990621">Patches</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992820"></a>Introduction</h2></div></div><div></div></div><p>Please report bugs using <a href="https://bugzilla.samba.org/" target="_top">bugzilla</a>.</p><p> Please take the time to read this file before you submit a bug report. Also, please see if it has changed between releases, as we @@ -15830,7 +15833,7 @@ that list that may be able to help you. You may also like to look though the recent mailing list archives, which are conveniently accessible on the Samba web pages at <a href="http://samba.org/samba/" target="_top">http://samba.org/samba/</a>. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2994997"></a>General info</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992880"></a>General info</h2></div></div><div></div></div><p> Before submitting a bug report check your config for silly errors. Look in your log files for obvious messages that tell you that you've misconfigured something and run testparm to test your config @@ -15842,7 +15845,7 @@ This is very important. If you include part of a log file with your bug report then be sure to annotate it with exactly what you were doing on the client at the time, and exactly what the results were. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995034"></a>Debug levels</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992915"></a>Debug levels</h2></div></div><div></div></div><p> If the bug has anything to do with Samba behaving incorrectly as a server (like refusing to open a file) then the log files will probably be very useful. Depending on the problem a log level of between 3 and @@ -15877,7 +15880,7 @@ debugging operations you may not need a setting higher than <tt class="constant">3</tt>. Nearly all bugs can be tracked at a setting of <tt class="constant">10</tt>, but be prepared for a VERY large volume of log data. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995176"></a>Internal errors</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991012"></a>Internal errors</h2></div></div><div></div></div><p> If you get a <span class="errorname">INTERNAL ERROR</span> message in your log files it means that Samba got an unexpected signal while running. It is probably a segmentation fault and almost certainly means a bug in Samba (unless @@ -15910,7 +15913,7 @@ disassemble the routine that called it) and try to work out exactly where the problem is by looking at the surrounding code. Even if you don't know assembly, including this info in the bug report can be useful. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995284"></a>Attaching to a running process</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991120"></a>Attaching to a running process</h2></div></div><div></div></div><p> Unfortunately some unixes (in particular some recent linux kernels) refuse to dump a core file if the task has changed uid (which smbd does often). To debug with this sort of system you could try to attach @@ -15920,20 +15923,20 @@ to the running process using Then use <b class="command">c</b> to continue and try to cause the core dump using the client. The debugger should catch the fault and tell you where it occurred. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995331"></a>Patches</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990621"></a>Patches</h2></div></div><div></div></div><p> The best sort of bug report is one that includes a fix! If you send us patches please use <b class="userinput"><tt>diff -u</tt></b> format if your version of diff supports it, otherwise use <b class="userinput"><tt>diff -c4</tt></b>. Make sure you do the diff against a clean version of the source and let me know exactly what version you used. -</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Appendixes"></a>Appendixes</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>36. <a href="#compiling">How to compile SAMBA</a></dt><dd><dl><dt><a href="#id2994651">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2994658">Introduction</a></dt><dt><a href="#id2994688">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2996207">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2996256">Verifying Samba's PGP signature</a></dt><dt><a href="#id2996392">Building the Binaries</a></dt><dd><dl><dt><a href="#id2996529">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2996694">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2996786">Starting from inetd.conf</a></dt><dt><a href="#id2996990">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2997085">Common Errors</a></dt></dl></dd><dt>37. <a href="#Portability">Portability</a></dt><dd><dl><dt><a href="#id2995985">HPUX</a></dt><dt><a href="#id2998515">SCO Unix</a></dt><dt><a href="#id2998546">DNIX</a></dt><dt><a href="#id2998716">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2998760">AIX</a></dt><dd><dl><dt><a href="#id2998767">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2998793">Solaris</a></dt><dd><dl><dt><a href="#id2998800">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="#Other-Clients">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="#id2998169">Macintosh clients?</a></dt><dt><a href="#id2999522">OS2 Client</a></dt><dd><dl><dt><a href="#id2999529">How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2999608">How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2999670">How do I get printer driver download working - for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2999766">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2999774">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2999864">Delete .pwl files after password change</a></dt><dt><a href="#id2999894">Configure WfW password handling</a></dt><dt><a href="#id2999940">Case handling of passwords</a></dt><dt><a href="#id2999970">Use TCP/IP as default protocol</a></dt><dt><a href="#id2999988">Speed improvement</a></dt></dl></dd><dt><a href="#id3000034">Windows '95/'98</a></dt><dd><dl><dt><a href="#id3000107">Speed improvement</a></dt></dl></dd><dt><a href="#id3000131">Windows 2000 Service Pack 2</a></dt><dt><a href="#id3000242">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="#speed">Samba Performance Tuning</a></dt><dd><dl><dt><a href="#id3001274">Comparisons</a></dt><dt><a href="#id3001319">Socket options</a></dt><dt><a href="#id3001394">Read size</a></dt><dt><a href="#id3001437">Max xmit</a></dt><dt><a href="#id3001490">Log level</a></dt><dt><a href="#id3001513">Read raw</a></dt><dt><a href="#id3001570">Write raw</a></dt><dt><a href="#id3001612">Slow Logins</a></dt><dt><a href="#id3001633">Client tuning</a></dt><dt><a href="#id3001658">Samba performance problem due changing kernel</a></dt><dt><a href="#id3001692">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="#DNSDHCP">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="#id3001112">Note</a></dt></dl></dd><dt>41. <a href="#Further-Resources">Further Resources</a></dt><dd><dl><dt><a href="#id3001272">Websites</a></dt><dt><a href="#id3002922">Related updates from Microsoft</a></dt><dt><a href="#id3002990">Books</a></dt></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="compiling"></a>Chapter36.How to compile SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Jerry perhaps?</span></h3></div></div><div><p class="pubdate"> 22 May 2001 </p></div><div><p class="pubdate"> 18 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2994651">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2994658">Introduction</a></dt><dt><a href="#id2994688">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2996207">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2996256">Verifying Samba's PGP signature</a></dt><dt><a href="#id2996392">Building the Binaries</a></dt><dd><dl><dt><a href="#id2996529">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2996694">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2996786">Starting from inetd.conf</a></dt><dt><a href="#id2996990">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2997085">Common Errors</a></dt></dl></div><p> +</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Appendixes"></a>Appendixes</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>36. <a href="#compiling">How to compile SAMBA</a></dt><dd><dl><dt><a href="#id2990738">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2990746">Introduction</a></dt><dt><a href="#id2990775">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2992243">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2992291">Verifying Samba's PGP signature</a></dt><dt><a href="#id2992426">Building the Binaries</a></dt><dd><dl><dt><a href="#id2992564">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2993459">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2993550">Starting from inetd.conf</a></dt><dt><a href="#id2993754">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2993849">Common Errors</a></dt></dl></dd><dt>37. <a href="#Portability">Portability</a></dt><dd><dl><dt><a href="#id2995128">HPUX</a></dt><dt><a href="#id2995213">SCO Unix</a></dt><dt><a href="#id2995241">DNIX</a></dt><dt><a href="#id2995411">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2995454">AIX</a></dt><dd><dl><dt><a href="#id2995461">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2995487">Solaris</a></dt><dd><dl><dt><a href="#id2995494">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="#Other-Clients">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="#id2996271">Macintosh clients?</a></dt><dt><a href="#id2996343">OS2 Client</a></dt><dd><dl><dt><a href="#id2996350">How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2995965">How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2996025">How do I get printer driver download working + for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2996122">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2995584">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2995674">Delete .pwl files after password change</a></dt><dt><a href="#id2995704">Configure WfW password handling</a></dt><dt><a href="#id2995750">Case handling of passwords</a></dt><dt><a href="#id2995780">Use TCP/IP as default protocol</a></dt><dt><a href="#id2995797">Speed improvement</a></dt></dl></dd><dt><a href="#id2995844">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2996873">Speed improvement</a></dt></dl></dd><dt><a href="#id2996898">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2997008">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="#speed">Samba Performance Tuning</a></dt><dd><dl><dt><a href="#id2999219">Comparisons</a></dt><dt><a href="#id2997059">Socket options</a></dt><dt><a href="#id2997130">Read size</a></dt><dt><a href="#id2997174">Max xmit</a></dt><dt><a href="#id2997227">Log level</a></dt><dt><a href="#id2997250">Read raw</a></dt><dt><a href="#id2997306">Write raw</a></dt><dt><a href="#id2997348">Slow Logins</a></dt><dt><a href="#id2998255">Client tuning</a></dt><dt><a href="#id2998279">Samba performance problem due changing kernel</a></dt><dt><a href="#id2998311">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="#DNSDHCP">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="#id2999030">Note</a></dt></dl></dd><dt>41. <a href="#Further-Resources">Further Resources</a></dt><dd><dl><dt><a href="#id2998449">Websites</a></dt><dt><a href="#id2998831">Related updates from Microsoft</a></dt><dt><a href="#id2998898">Books</a></dt></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="compiling"></a>Chapter36.How to compile SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Jerry perhaps?</span></h3></div></div><div><p class="pubdate"> 22 May 2001 </p></div><div><p class="pubdate"> 18 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2990738">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2990746">Introduction</a></dt><dt><a href="#id2990775">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2992243">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2992291">Verifying Samba's PGP signature</a></dt><dt><a href="#id2992426">Building the Binaries</a></dt><dd><dl><dt><a href="#id2992564">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2993459">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2993550">Starting from inetd.conf</a></dt><dt><a href="#id2993754">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2993849">Common Errors</a></dt></dl></div><p> You can obtain the samba source from the <a href="http://samba.org/" target="_top">samba website</a>. To obtain a development version, you can download samba from CVS or using rsync. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2994651"></a>Access Samba source code via CVS</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2994658"></a>Introduction</h3></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990738"></a>Access Samba source code via CVS</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990746"></a>Introduction</h3></div></div><div></div></div><p> Samba is developed in an open environment. Developers use CVS (Concurrent Versioning System) to "checkin" (also known as "commit") new source code. Samba's various CVS branches can @@ -15942,12 +15945,12 @@ detailed in this chapter. </p><p> This chapter is a modified version of the instructions found at <a href="http://samba.org/samba/cvs.html" target="_top">http://samba.org/samba/cvs.html</a> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2994688"></a>CVS Access to samba.org</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990775"></a>CVS Access to samba.org</h3></div></div><div></div></div><p> The machine samba.org runs a publicly accessible CVS repository for access to the source code of several packages, including samba, rsync, distcc, ccache and jitterbug. There are two main ways of accessing the CVS server on this host. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2994705"></a>Access via CVSweb</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990790"></a>Access via CVSweb</h4></div></div><div></div></div><p> You can access the source code via your favourite WWW browser. This allows you to access the contents of individual files in the repository and also to look at the revision @@ -15955,7 +15958,7 @@ history and commit logs of individual files. You can also ask for a diff listing between any two versions on the repository. </p><p> Use the URL : <a href="http://samba.org/cgi-bin/cvsweb" target="_top">http://samba.org/cgi-bin/cvsweb</a> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996017"></a>Access via cvs</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990820"></a>Access via cvs</h4></div></div><div></div></div><p> You can also access the source code via a normal cvs client. This gives you much more control over what you can do with the repository and allows you to checkout whole source trees @@ -16005,7 +16008,7 @@ on this system just substitute the correct package name the following command from within the samba directory: </p><p> <b class="userinput"><tt>cvs update -d -P</tt></b> - </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996207"></a>Accessing the samba sources via rsync and ftp</h2></div></div><div></div></div><p> + </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992243"></a>Accessing the samba sources via rsync and ftp</h2></div></div><div></div></div><p> pserver.samba.org also exports unpacked copies of most parts of the CVS tree at <a href="ftp://pserver.samba.org/pub/unpacked" target="_top">ftp://pserver.samba.org/pub/unpacked</a> and also via anonymous rsync at <a href="rsync://pserver.samba.org/ftp/unpacked/" target="_top">rsync://pserver.samba.org/ftp/unpacked/</a>. I recommend using rsync rather than ftp. @@ -16014,7 +16017,7 @@ on this system just substitute the correct package name The disadvantage of the unpacked trees is that they do not support automatic merging of local changes like CVS does. rsync access is most convenient for an initial install. - </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996256"></a>Verifying Samba's PGP signature</h2></div></div><div></div></div><p> + </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992291"></a>Verifying Samba's PGP signature</h2></div></div><div></div></div><p> In these days of insecurity, it's strongly recommended that you verify the PGP signature for any source file before installing it. Even if you're not downloading from a mirror site, verifying PGP signatures should be a @@ -16041,7 +16044,7 @@ then all is well. The warnings about trust relationships can be ignored. An example of what you would not want to see would be: </p><tt class="computeroutput"> gpg: BAD signature from "Samba Distribution Verification Key" -</tt></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996392"></a>Building the Binaries</h2></div></div><div></div></div><p>To do this, first run the program <b class="userinput"><tt>./configure +</tt></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992426"></a>Building the Binaries</h2></div></div><div></div></div><p>To do this, first run the program <b class="userinput"><tt>./configure </tt></b> in the source directory. This should automatically configure Samba for your operating system. If you have unusual needs then you may wish to run</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>./configure --help @@ -16054,7 +16057,7 @@ example of what you would not want to see would be: of Samba you might like to know that the old versions of the binaries will be renamed with a ".old" extension. You can go back to the previous version with</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make revert - </tt></b></p><p>if you find this version a disaster!</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996529"></a>Compiling samba with Active Directory support</h3></div></div><div></div></div><p>In order to compile samba with ADS support, you need to have installed + </tt></b></p><p>if you find this version a disaster!</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992564"></a>Compiling samba with Active Directory support</h3></div></div><div></div></div><p>In order to compile samba with ADS support, you need to have installed on your system:</p><div class="itemizedlist"><ul type="disc"><li><p>the MIT kerberos development libraries (either install from the sources or use a package). The Heimdal libraries will not work.</p></li><li><p>the OpenLDAP development libraries.</p></li></ul></div><p>If your kerberos libraries are in a non-standard location then @@ -16066,12 +16069,12 @@ example of what you would not want to see would be: #define HAVE_LDAP 1 </pre><p>If it doesn't then configure did not find your krb5 libraries or your ldap libraries. Look in <tt class="filename">config.log</tt> to figure - out why and fix it.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996610"></a>Installing the required packages for Debian</h4></div></div><div></div></div><p>On Debian you need to install the following packages:</p><p> - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>libkrb5-dev</td></tr><tr><td>krb5-user</td></tr></table><p> - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996642"></a>Installing the required packages for RedHat</h4></div></div><div></div></div><p>On RedHat this means you should have at least: </p><p> - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>krb5-workstation (for kinit)</td></tr><tr><td>krb5-libs (for linking with)</td></tr><tr><td>krb5-devel (because you are compiling from source)</td></tr></table><p> - </p><p>in addition to the standard development environment.</p><p>Note that these are not standard on a RedHat install, and you may need - to get them off CD2.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996694"></a>Starting the <span class="application">smbd</span> and <span class="application">nmbd</span></h2></div></div><div></div></div><p>You must choose to start <span class="application">smbd</span> and <span class="application">nmbd</span> either + out why and fix it.</p><div xmlns:ns100="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2993373"></a>Installing the required packages for Debian</h4></div></div><div></div></div><p>On Debian you need to install the following packages:</p><ns100:p> + </ns100:p><table class="simplelist" border="0" summary="Simple list"><tr><td>libkrb5-dev</td></tr><tr><td>krb5-user</td></tr></table><ns100:p> + </ns100:p></div><div xmlns:ns101="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2993406"></a>Installing the required packages for RedHat</h4></div></div><div></div></div><p>On RedHat this means you should have at least: </p><ns101:p> + </ns101:p><table class="simplelist" border="0" summary="Simple list"><tr><td>krb5-workstation (for kinit)</td></tr><tr><td>krb5-libs (for linking with)</td></tr><tr><td>krb5-devel (because you are compiling from source)</td></tr></table><ns101:p> + </ns101:p><p>in addition to the standard development environment.</p><p>Note that these are not standard on a RedHat install, and you may need + to get them off CD2.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993459"></a>Starting the <span class="application">smbd</span> and <span class="application">nmbd</span></h2></div></div><div></div></div><p>You must choose to start <span class="application">smbd</span> and <span class="application">nmbd</span> either as daemons or from <span class="application">inetd</span>. Don't try to do both! Either you can put them in <tt class="filename"> inetd.conf</tt> and have them started on demand @@ -16083,7 +16086,7 @@ example of what you would not want to see would be: Samba. In many cases you must be root.</p><p>The main advantage of starting <span class="application">smbd</span> and <span class="application">nmbd</span> using the recommended daemon method is that they will respond slightly more quickly to an initial connection - request.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996786"></a>Starting from inetd.conf</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>The following will be different if + request.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2993550"></a>Starting from inetd.conf</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>The following will be different if you use NIS, NIS+ or LDAP to distribute services maps.</p></div><p>Look at your <tt class="filename">/etc/services</tt>. What is defined at port 139/tcp. If nothing is defined then add a line like this:</p><pre class="programlisting">netbios-ssn 139/tcp</pre><p>similarly for 137/udp you should have an entry like:</p><pre class="programlisting">netbios-ns 137/udp</pre><p>Next edit your <tt class="filename">/etc/inetd.conf</tt> @@ -16109,7 +16112,7 @@ example of what you would not want to see would be: arguments, or you should use a script, and start the script from <b class="command">inetd</b>.</p></div><p>Restart <span class="application">inetd</span>, perhaps just send it a HUP. If you have installed an earlier version of <span class="application">nmbd</span> then - you may need to kill <span class="application">nmbd</span> as well.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996990"></a>Alternative: starting it as a daemon</h3></div></div><div></div></div><p>To start the server as a daemon you should create + you may need to kill <span class="application">nmbd</span> as well.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2993754"></a>Alternative: starting it as a daemon</h3></div></div><div></div></div><p>To start the server as a daemon you should create a script something like this one, perhaps calling it <tt class="filename">startsmb</tt>.</p><pre class="programlisting"> #!/bin/sh @@ -16121,7 +16124,7 @@ example of what you would not want to see would be: </p><p>To kill it send a kill signal to the processes <span class="application">nmbd</span> and <span class="application">smbd</span>.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>If you use the SVR4 style init system then you may like to look at the <tt class="filename">examples/svr4-startup</tt> - script to make Samba fit into that system.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997085"></a>Common Errors</h2></div></div><div></div></div><p>“<span class="quote"> + script to make Samba fit into that system.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993849"></a>Common Errors</h2></div></div><div></div></div><p>“<span class="quote"> I'm using gcc 3 and I've compiled Samba-3 from the CVS and the binaries are very large files (40 Mb and 20 Mb). I've the same result with <tt class="option">--enable-shared</tt> ? @@ -16129,9 +16132,9 @@ binaries are very large files (40 Mb and 20 Mb). I've the same result with </p><p> The dwarf format used by GCC 3 for storing debugging symbols is very inefficient. Strip the binaries, don't compile with -g or compile with -gstabs. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Portability"></a>Chapter37.Portability</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2995985">HPUX</a></dt><dt><a href="#id2998515">SCO Unix</a></dt><dt><a href="#id2998546">DNIX</a></dt><dt><a href="#id2998716">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2998760">AIX</a></dt><dd><dl><dt><a href="#id2998767">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2998793">Solaris</a></dt><dd><dl><dt><a href="#id2998800">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></div><p>Samba works on a wide range of platforms but the interface all the +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Portability"></a>Chapter37.Portability</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2995128">HPUX</a></dt><dt><a href="#id2995213">SCO Unix</a></dt><dt><a href="#id2995241">DNIX</a></dt><dt><a href="#id2995411">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2995454">AIX</a></dt><dd><dl><dt><a href="#id2995461">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2995487">Solaris</a></dt><dd><dl><dt><a href="#id2995494">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></div><p>Samba works on a wide range of platforms but the interface all the platforms provide is not always compatible. This chapter contains -platform-specific information about compiling and using samba.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995985"></a>HPUX</h2></div></div><div></div></div><p> +platform-specific information about compiling and using samba.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995128"></a>HPUX</h2></div></div><div></div></div><p> HP's implementation of supplementary groups is, er, non-standard (for hysterical reasons). There are two group files, <tt class="filename">/etc/group</tt> and <tt class="filename">/etc/logingroup</tt>; the system maps UIDs to numbers using the former, but @@ -16151,7 +16154,7 @@ allowed range. On HPUX you must use gcc or the HP ANSI compiler. The free compiler that comes with HP-UX is not ANSI compliant and cannot compile Samba. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998515"></a>SCO Unix</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995213"></a>SCO Unix</h2></div></div><div></div></div><p> If you run an old version of SCO Unix then you may need to get important TCP/IP patches for Samba to work correctly. Without the patch, you may encounter corrupt data transfers using samba. @@ -16159,7 +16162,7 @@ encounter corrupt data transfers using samba. The patch you need is UOD385 Connection Drivers SLS. It is available from SCO (<a href="ftp://ftp.sco.com/" target="_top">ftp.sco.com</a>, directory SLS, files uod385a.Z and uod385a.ltr.Z). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998546"></a>DNIX</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995241"></a>DNIX</h2></div></div><div></div></div><p> DNIX has a problem with seteuid() and setegid(). These routines are needed for Samba to work correctly, but they were left out of the DNIX C library for some reason. @@ -16218,13 +16221,13 @@ LIBSM = setegid.o seteuid.o -ln You should then remove the line: </p><pre class="programlisting"> #define NO_EID -</pre><p>from the DNIX section of <tt class="filename">includes.h</tt></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998716"></a>RedHat Linux Rembrandt-II</h2></div></div><div></div></div><p> +</pre><p>from the DNIX section of <tt class="filename">includes.h</tt></p></div><div xmlns:ns102="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995411"></a>RedHat Linux Rembrandt-II</h2></div></div><div></div></div><ns102:p> By default RedHat Rembrandt-II during installation adds an entry to <tt class="filename">/etc/hosts</tt> as follows: -</p><pre class="programlisting"> +</ns102:p><pre class="programlisting"> 127.0.0.1 loopback "hostname"."domainname" -</pre><p> -</p><p> +</pre><ns102:p> +</ns102:p><p> This causes Samba to loop back onto the loopback interface. The result is that Samba fails to communicate correctly with the world and therefor may fail to correctly negotiate who @@ -16232,10 +16235,10 @@ is the master browse list holder and who is the master browser. </p><p> Corrective Action: Delete the entry after the word loopback in the line starting 127.0.0.1 -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998760"></a>AIX</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2998767"></a>Sequential Read Ahead</h3></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995454"></a>AIX</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995461"></a>Sequential Read Ahead</h3></div></div><div></div></div><p> Disabling Sequential Read Ahead using <b class="userinput"><tt>vmtune -r 0</tt></b> improves Samba performance significantly. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998793"></a>Solaris</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2998800"></a>Locking improvements</h3></div></div><div></div></div><p>Some people have been experiencing problems with F_SETLKW64/fcntl +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995487"></a>Solaris</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995494"></a>Locking improvements</h3></div></div><div></div></div><p>Some people have been experiencing problems with F_SETLKW64/fcntl when running Samba on Solaris. The built in file locking mechanism was not scalable. Performance would degrade to the point where processes would get into loops of trying to lock a file. It would try a lock, then fail, @@ -16256,10 +16259,10 @@ and rebuild samba. Nsswitch on Solaris 9 refuses to use the winbind nss module. This behavior is fixed by Sun in patch 113476-05 which as of March 2003 is not in any roll-up packages. -</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter38.Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email"><<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2998169">Macintosh clients?</a></dt><dt><a href="#id2999522">OS2 Client</a></dt><dd><dl><dt><a href="#id2999529">How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2999608">How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2999670">How do I get printer driver download working - for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2999766">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2999774">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2999864">Delete .pwl files after password change</a></dt><dt><a href="#id2999894">Configure WfW password handling</a></dt><dt><a href="#id2999940">Case handling of passwords</a></dt><dt><a href="#id2999970">Use TCP/IP as default protocol</a></dt><dt><a href="#id2999988">Speed improvement</a></dt></dl></dd><dt><a href="#id3000034">Windows '95/'98</a></dt><dd><dl><dt><a href="#id3000107">Speed improvement</a></dt></dl></dd><dt><a href="#id3000131">Windows 2000 Service Pack 2</a></dt><dt><a href="#id3000242">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998169"></a>Macintosh clients?</h2></div></div><div></div></div><p> +</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter38.Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email"><<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2996271">Macintosh clients?</a></dt><dt><a href="#id2996343">OS2 Client</a></dt><dd><dl><dt><a href="#id2996350">How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2995965">How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2996025">How do I get printer driver download working + for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2996122">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2995584">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2995674">Delete .pwl files after password change</a></dt><dt><a href="#id2995704">Configure WfW password handling</a></dt><dt><a href="#id2995750">Case handling of passwords</a></dt><dt><a href="#id2995780">Use TCP/IP as default protocol</a></dt><dt><a href="#id2995797">Speed improvement</a></dt></dl></dd><dt><a href="#id2995844">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2996873">Speed improvement</a></dt></dl></dd><dt><a href="#id2996898">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2997008">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996271"></a>Macintosh clients?</h2></div></div><div></div></div><p> Yes. <a href="http://www.thursby.com/" target="_top">Thursby</a> now has a CIFS Client / Server called <a href="http://www.thursby.com/products/dave.html" target="_top">DAVE</a> </p><p> They test it against Windows 95, Windows NT and samba for @@ -16279,7 +16282,7 @@ What Samba offers MS Windows users, these packages offer to Macs. For more info on these packages, Samba, and Linux (and other UNIX-based systems) see <a href="http://www.eats.com/linux_mac_win.html" target="_top">http://www.eats.com/linux_mac_win.html</a> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999522"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999529"></a>How can I configure OS/2 Warp Connect or +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996343"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996350"></a>How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?</h3></div></div><div></div></div><p>A more complete answer to this question can be found on <a href="http://carol.wins.uva.nl/~leeuw/samba/warp.html" target="_top"> http://carol.wins.uva.nl/~leeuw/samba/warp.html</a>.</p><p>Basically, you need three components:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>The File and Print Client ('IBM Peer')</td></tr><tr><td>TCP/IP ('Internet support') </td></tr><tr><td>The "NetBIOS over TCP/IP" driver ('TCPBEUI')</td></tr></table><p>Installing the first two together with the base operating @@ -16297,7 +16300,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see to the "Names List", or specify a WINS server ('NetBIOS Nameserver' in IBM and RFC terminology). For Warp Connect you may need to download an update for 'IBM Peer' to bring it on - the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999608"></a>How can I configure OS/2 Warp 3 (not Connect), + the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995965"></a>How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?</h3></div></div><div></div></div><p>You can use the free Microsoft LAN Manager 2.2c Client for OS/2 from <a href="ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/" target="_top"> @@ -16315,7 +16318,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see or NS2000 driver from <a href="ftp://ftp.cdrom.com/pub/os2/network/ndis/" target="_top"> ftp://ftp.cdrom.com/pub/os2/network/ndis/</a> instead. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999670"></a>How do I get printer driver download working + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996025"></a>How do I get printer driver download working for OS/2 clients?</h3></div></div><div></div></div><p>First, create a share called <i class="parameter"><tt>[PRINTDRV]</tt></i> that is world-readable. Copy your OS/2 driver files there. Note that the .EA_ files must still be separate, so you will need @@ -16332,7 +16335,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see you the driver is not available. On the second attempt, it will work. This is fixed simply by adding the device name to the mapping, after which it will work on the first attempt. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999766"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999774"></a>Use latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996122"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995584"></a>Use latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows for Workgroups. </p><p>The early TCP/IP stacks had lots of bugs.</p><p> Microsoft has released an incremental upgrade to their TCP/IP 32-Bit @@ -16347,7 +16350,7 @@ fixed. New files include <tt class="filename">WINSOCK.DLL</tt>, <tt class="filename">TRACERT.EXE</tt>, <tt class="filename">NETSTAT.EXE</tt>, and <tt class="filename">NBTSTAT.EXE</tt>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999864"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995674"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p> WfWg does a lousy job with passwords. I find that if I change my password on either the unix box or the PC the safest thing to do is to delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password. @@ -16356,7 +16359,7 @@ If you don't do this you may find that WfWg remembers and uses the old password, even if you told it a new one. </p><p> Often WfWg will totally ignore a password you give it in a dialog box. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999894"></a>Configure WfW password handling</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995704"></a>Configure WfW password handling</h3></div></div><div></div></div><p> There is a program call admincfg.exe on the last disk (disk 8) of the WFW 3.11 disk set. To install it type <b class="userinput"><tt>EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE</tt></b>. @@ -16364,11 +16367,11 @@ Then add an icon for it via the <span class="application">Program Manager</span> <span class="guimenu">New</span> Menu. This program allows you to control how WFW handles passwords. ie disable Password Caching etc for use with <i class="parameter"><tt>security = user</tt></i> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999940"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <a href="smb.conf.5.html" target="_top">smb.conf(5)</a> information on <i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999970"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995750"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <a href="smb.conf.5.html" target="_top">smb.conf(5)</a> information on <i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995780"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find that you have to use TCP/IP as the default protocol under WfWg. For some reason if you leave NetBEUI as the default it may break the print queue reporting on some systems. -It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999988"></a>Speed improvement</h3></div></div><div></div></div><p> +It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995797"></a>Speed improvement</h3></div></div><div></div></div><p> Note that some people have found that setting <i class="parameter"><tt>DefaultRcvWindow</tt></i> in the <i class="parameter"><tt>[MSTCP]</tt></i> section of the <tt class="filename">SYSTEM.INI</tt> file under WfWg to 3072 gives a @@ -16379,7 +16382,7 @@ performance with a large value (16384 or larger). Other people have reported that anything over 3072 slows things down enormously. One person even reported a speed drop of a factor of 30 when he went from 3072 to 8192. I don't know why. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3000034"></a>Windows '95/'98</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995844"></a>Windows '95/'98</h2></div></div><div></div></div><p> When using Windows 95 OEM SR2 the following updates are recommended where Samba is being used. Please NOTE that the above change will affect you once these updates have been installed. @@ -16393,11 +16396,11 @@ install the <b class="command">OLEUPD.EXE</b> fix. This fix may stop your machine from hanging for an extended period when exiting Outlook and you may also notice a significant speedup when accessing network neighborhood services. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000107"></a>Speed improvement</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996873"></a>Speed improvement</h3></div></div><div></div></div><p> Configure the win95 TCPIP registry settings to give better performance. I use a program called <b class="command">MTUSPEED.exe</b> which I got off the net. There are various other utilities of this type freely available. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3000131"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996898"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p> There are several annoyances with Windows 2000 SP2. One of which only appears when using a Samba server to host user profiles to Windows 2000 SP2 clients in a Windows domain. This assumes @@ -16438,10 +16441,10 @@ the Win2k client a response to the QuerySecurityDescriptor trans2 call which causes the client to set a default ACL for the profile. This default ACL includes </p><p><span class="emphasis"><em>DOMAIN\user "Full Control"</em></span>></p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This bug does not occur when using winbind to -create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3000242"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows +create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997008"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows NT 3.1 workstations, read <a href="http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q103765" target="_top">this Microsoft Knowledge Base article</a>. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="speed"></a>Chapter39.Samba Performance Tuning</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Cochrane</span></h3><div class="affiliation"><span class="orgname">Dundee Limb Fitting Centre<br></span><div class="address"><p><tt class="email"><<a href="mailto:paulc@dth.scot.nhs.uk">paulc@dth.scot.nhs.uk</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id3001274">Comparisons</a></dt><dt><a href="#id3001319">Socket options</a></dt><dt><a href="#id3001394">Read size</a></dt><dt><a href="#id3001437">Max xmit</a></dt><dt><a href="#id3001490">Log level</a></dt><dt><a href="#id3001513">Read raw</a></dt><dt><a href="#id3001570">Write raw</a></dt><dt><a href="#id3001612">Slow Logins</a></dt><dt><a href="#id3001633">Client tuning</a></dt><dt><a href="#id3001658">Samba performance problem due changing kernel</a></dt><dt><a href="#id3001692">Corrupt tdb Files</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001274"></a>Comparisons</h2></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="speed"></a>Chapter39.Samba Performance Tuning</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Cochrane</span></h3><div class="affiliation"><span class="orgname">Dundee Limb Fitting Centre<br></span><div class="address"><p><tt class="email"><<a href="mailto:paulc@dth.scot.nhs.uk">paulc@dth.scot.nhs.uk</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2999219">Comparisons</a></dt><dt><a href="#id2997059">Socket options</a></dt><dt><a href="#id2997130">Read size</a></dt><dt><a href="#id2997174">Max xmit</a></dt><dt><a href="#id2997227">Log level</a></dt><dt><a href="#id2997250">Read raw</a></dt><dt><a href="#id2997306">Write raw</a></dt><dt><a href="#id2997348">Slow Logins</a></dt><dt><a href="#id2998255">Client tuning</a></dt><dt><a href="#id2998279">Samba performance problem due changing kernel</a></dt><dt><a href="#id2998311">Corrupt tdb Files</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999219"></a>Comparisons</h2></div></div><div></div></div><p> The Samba server uses TCP to talk to the client. Thus if you are trying to see if it performs well you should really compare it to programs that use the same protocol. The most readily available @@ -16463,7 +16466,7 @@ suspect the biggest factor is not Samba vs some other system but the hardware and drivers used on the various systems. Given similar hardware Samba should certainly be competitive in speed with other systems. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001319"></a>Socket options</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997059"></a>Socket options</h2></div></div><div></div></div><p> There are a number of socket options that can greatly affect the performance of a TCP based server like Samba. </p><p> @@ -16482,7 +16485,7 @@ biggest single difference for most networks. Many people report that adding <i class="parameter"><tt>socket options = TCP_NODELAY</tt></i> doubles the read performance of a Samba drive. The best explanation I have seen for this is that the Microsoft TCP/IP stack is slow in sending tcp ACKs. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001394"></a>Read size</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997130"></a>Read size</h2></div></div><div></div></div><p> The option <i class="parameter"><tt>read size</tt></i> affects the overlap of disk reads/writes with network reads/writes. If the amount of data being transferred in several of the SMB commands (currently SMBwrite, SMBwriteX and @@ -16499,7 +16502,7 @@ The default value is 16384, but very little experimentation has been done yet to determine the optimal value, and it is likely that the best value will vary greatly between systems anyway. A value over 65536 is pointless and will cause you to allocate memory unnecessarily. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001437"></a>Max xmit</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997174"></a>Max xmit</h2></div></div><div></div></div><p> At startup the client and server negotiate a <i class="parameter"><tt>maximum transmit</tt></i> size, which limits the size of nearly all SMB commands. You can set the maximum size that Samba will negotiate using the <i class="parameter"><tt>max xmit = </tt></i> option @@ -16513,12 +16516,12 @@ clients may perform better with a smaller transmit unit. Trying values of less than 2048 is likely to cause severe problems. </p><p> In most cases the default is the best option. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001490"></a>Log level</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997227"></a>Log level</h2></div></div><div></div></div><p> If you set the log level (also known as <i class="parameter"><tt>debug level</tt></i>) higher than 2 then you may suffer a large drop in performance. This is because the server flushes the log file after each operation, which can be very expensive. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001513"></a>Read raw</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997250"></a>Read raw</h2></div></div><div></div></div><p> The <i class="parameter"><tt>read raw</tt></i> operation is designed to be an optimised, low-latency file read operation. A server may choose to not support it, however. and Samba makes support for <i class="parameter"><tt>read raw</tt></i> optional, with it @@ -16531,7 +16534,7 @@ read operations. So you might like to try <i class="parameter"><tt>read raw = no</tt></i> and see what happens on your network. It might lower, raise or not affect your performance. Only testing can really tell. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001570"></a>Write raw</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997306"></a>Write raw</h2></div></div><div></div></div><p> The <i class="parameter"><tt>write raw</tt></i> operation is designed to be an optimised, low-latency file write operation. A server may choose to not support it, however. and Samba makes support for <i class="parameter"><tt>write raw</tt></i> optional, with it @@ -16539,15 +16542,15 @@ being enabled by default. </p><p> Some machines may find <i class="parameter"><tt>write raw</tt></i> slower than normal write, in which case you may wish to change this option. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001612"></a>Slow Logins</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997348"></a>Slow Logins</h2></div></div><div></div></div><p> Slow logins are almost always due to the password checking time. Using the lowest practical <i class="parameter"><tt>password level</tt></i> will improve things. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001633"></a>Client tuning</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998255"></a>Client tuning</h2></div></div><div></div></div><p> Often a speed problem can be traced to the client. The client (for example Windows for Workgroups) can often be tuned for better TCP performance. Check the sections on the various clients in <a href="#Other-Clients" title="Chapter38.Samba and other CIFS clients">Samba and Other Clients</a>. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001658"></a>Samba performance problem due changing kernel</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998279"></a>Samba performance problem due changing kernel</h2></div></div><div></div></div><p> Hi everyone. I am running Gentoo on my server and samba 2.2.8a. Recently I changed kernel version from linux-2.4.19-gentoo-r10 to linux-2.4.20-wolk4.0s. And now I have performance issue with samba. Ok @@ -16562,7 +16565,7 @@ Grab mii-tool and check the duplex settings on the NIC. My guess is that it is a link layer issue, not an application layer problem. Also run ifconfig and verify that the framing error, collisions, etc... look normal for ethernet. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001692"></a>Corrupt tdb Files</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998311"></a>Corrupt tdb Files</h2></div></div><div></div></div><p> Well today it happened, Our first major problem using samba. Our samba PDC server has been hosting 3 TB of data to our 500+ users [Windows NT/XP] for the last 3 years using samba, no problem. @@ -16580,10 +16583,10 @@ Q2) What I also would like to mention is that the service latency seems a lot lower then before the locks cleanup, any ideas on keeping it top notch? </p><p> A2) Yes! Same answer as for Q1! -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="DNSDHCP"></a>Chapter40.DNS and DHCP Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id3001112">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001112"></a>Note</h2></div></div><div></div></div><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="DNSDHCP"></a>Chapter40.DNS and DHCP Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2999030">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999030"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. -</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Further-Resources"></a>Chapter41.Further Resources</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email"><<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>></tt></p></div></div></div></div><div><p class="pubdate">May 1, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id3001272">Websites</a></dt><dt><a href="#id3002922">Related updates from Microsoft</a></dt><dt><a href="#id3002990">Books</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001272"></a>Websites</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> +</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Further-Resources"></a>Chapter41.Further Resources</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email"><<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>></tt></p></div></div></div></div><div><p class="pubdate">May 1, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2998449">Websites</a></dt><dt><a href="#id2998831">Related updates from Microsoft</a></dt><dt><a href="#id2998898">Books</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998449"></a>Websites</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> <a href="http://hr.uoregon.edu/davidrl/cifs.txt" target="_top"> <span class="emphasis"><em>CIFS: Common Insecurities Fail Scrutiny</em></span> by "Hobbit"</a> </p></li><li><p> @@ -16670,7 +16673,7 @@ It is planned for the published release of this document. <span class="emphasis"><em>WFWG: Password Caching and How It Affects LAN Manager Security</em></span> at Microsoft Knowledge Base </a> - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3002922"></a>Related updates from Microsoft</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998831"></a>Related updates from Microsoft</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p> <a href="http://support.microsoft.com/support/kb/articles/q92/5/88.asp" target="_top"> <span class="emphasis"><em>Enhanced Encryption for Windows 95 Password Cache</em></span> </a> @@ -16682,4 +16685,4 @@ It is planned for the published release of this document. <a href="http://support.microsoft.com/support/kb/articles/q136/4/18.asp" target="_top"> <span class="emphasis"><em>Windows for Workgroups Sharing Updates</em></span> </a> - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3002990"></a>Books</h2></div></div><div></div></div></div></div></div><div class="index"><div class="titlepage"><div><div><h2 class="title"><a name="id3001039"></a>Index</h2></div></div><div></div></div><div class="index"></div></div></div></body></html> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998898"></a>Books</h2></div></div><div></div></div></div></div></div><div class="index"><div class="titlepage"><div><div><h2 class="title"><a name="id2998910"></a>Index</h2></div></div><div></div></div><div class="index"></div></div></div></body></html> diff --git a/docs/htmldocs/SambaHA.html b/docs/htmldocs/SambaHA.html index ba82f6ad0f..d8614deeb7 100644 --- a/docs/htmldocs/SambaHA.html +++ b/docs/htmldocs/SambaHA.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter29.High Availability Options</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="Backup.html" title="Chapter28.Samba Backup Techniques"><link rel="next" href="migration.html" title="PartIV.Migration and Updating"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter29.High Availability Options</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Backup.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="migration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SambaHA"></a>Chapter29.High Availability Options</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="SambaHA.html#id3003099">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003099"></a>Note</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter29.High Availability Options</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="Backup.html" title="Chapter28.Samba Backup Techniques"><link rel="next" href="migration.html" title="PartIV.Migration and Updating"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter29.High Availability Options</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Backup.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="migration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SambaHA"></a>Chapter29.High Availability Options</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="SambaHA.html#id2999808">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999808"></a>Note</h2></div></div><div></div></div><p> This chapter did not make it into this release. It is planned for the published release of this document. </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Backup.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="migration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter28.Samba Backup Techniques</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">PartIV.Migration and Updating</td></tr></table></div></body></html> diff --git a/docs/htmldocs/ServerType.html b/docs/htmldocs/ServerType.html index 01f03662ae..e624c5ee27 100644 --- a/docs/htmldocs/ServerType.html +++ b/docs/htmldocs/ServerType.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter4.Server Types and Security Modes</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="type.html" title="PartII.Server Configuration Basics"><link rel="next" href="samba-pdc.html" title="Chapter5.Domain Control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter4.Server Types and Security Modes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="type.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="samba-pdc.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ServerType"></a>Chapter4.Server Types and Security Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ServerType.html#id2888767">Features and Benefits</a></dt><dt><a href="ServerType.html#id2888862">Server Types</a></dt><dt><a href="ServerType.html#id2888947">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2889062">User Level Security</a></dt><dt><a href="ServerType.html#id2889195">Share Level Security</a></dt><dt><a href="ServerType.html#id2889317">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2889568">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2889655">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2889880">Seamless Windows Network Integration</a></dt><dt><a href="ServerType.html#id2890056">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2890084">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2890117">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2890146">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2890179">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter4.Server Types and Security Modes</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="type.html" title="PartII.Server Configuration Basics"><link rel="next" href="samba-pdc.html" title="Chapter5.Domain Control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter4.Server Types and Security Modes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="type.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="samba-pdc.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ServerType"></a>Chapter4.Server Types and Security Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ServerType.html#id2889453">Features and Benefits</a></dt><dt><a href="ServerType.html#id2889545">Server Types</a></dt><dt><a href="ServerType.html#id2889626">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2886055">User Level Security</a></dt><dt><a href="ServerType.html#id2886188">Share Level Security</a></dt><dt><a href="ServerType.html#id2887258">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887500">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887583">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2887808">Seamless Windows Network Integration</a></dt><dt><a href="ServerType.html#id2887985">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2888013">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2888046">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2888075">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2889987">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></div><p> This chapter provides information regarding the types of server that Samba may be configured to be. A Microsoft network administrator who wishes to migrate to or to use Samba will want to know what, within a Samba context, terms familiar to MS Windows @@ -11,7 +12,7 @@ and how these relate to MS Windows servers and clients. Firstly we should recognise the question so often asked, "Why would I want to use Samba?" So, in those chapters where the answer may be important you will see a section that highlights features and benefits. These may be for or against Samba. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888767"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889453"></a>Features and Benefits</h2></div></div><div></div></div><p> Two men were walking down a dusty road, when one suddenly kicked up a small red stone. It hurt his toe and lodged in his sandal. He took the stone out and cursed it with a passion and fury fitting his anguish. The other looked at the stone and said, that is a garnet - I @@ -47,13 +48,13 @@ So now, what are the benefits of features mentioned in this chapter? greater flexibility than MS Windows NT4 and in many cases a significantly higher utility than Active Directory domains with MS Windows 200x. - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888862"></a>Server Types</h2></div></div><div></div></div><p>Administrators of Microsoft networks often refer to three + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889545"></a>Server Types</h2></div></div><div></div></div><p>Administrators of Microsoft networks often refer to three different type of servers:</p><div class="itemizedlist"><ul type="disc"><li><p>Domain Controller</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Primary Domain Controller</td></tr><tr><td>Backup Domain Controller</td></tr><tr><td>ADS Domain Controller</td></tr></table></li><li><p>Domain Member Server</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Active Directory Member Server</td></tr><tr><td>NT4 Style Domain Member Server</td></tr></table></li><li><p>Stand Alone Server</p></li></ul></div><p> The chapters covering Domain Control, Backup Domain Control and Domain Membership provide pertinent information regarding Samba-3 configuration for each of these server roles. The reader is strongly encouraged to become intimately familiar with the information presented. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888947"></a>Samba Security Modes</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889626"></a>Samba Security Modes</h2></div></div><div></div></div><p> In this section the function and purpose of Samba's <i class="parameter"><tt>security</tt></i> modes are described. An accurate understanding of how Samba implements each security mode as well as how to configure MS Windows clients for each mode will significantly @@ -77,7 +78,7 @@ the way the client then tries to authenticate itself. It does not directly affec but it fits in with the client/server approach of SMB. In SMB everything is initiated and controlled by the client, and the server can only tell the client what is available and whether an action is allowed. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889062"></a>User Level Security</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886055"></a>User Level Security</h3></div></div><div></div></div><p> We will describe <i class="parameter"><tt>user level</tt></i> security first, as it's simpler. In <span class="emphasis"><em>user level</em></span> security, the client will send a <span class="emphasis"><em>session setup</em></span> command directly after the protocol negotiation. @@ -95,13 +96,13 @@ It is also possible for a client to send multiple <span class="emphasis"><em>ses requests. When the server responds, it gives the client a <span class="emphasis"><em>uid</em></span> to use as an authentication tag for that username/password. The client can maintain multiple authentication contexts in this way (WinDD is an example of an application that does this). -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2889156"></a>Example Configuration</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886149"></a>Example Configuration</h4></div></div><div></div></div><p> The <tt class="filename">smb.conf</tt> parameter that sets <span class="emphasis"><em>User Level Security</em></span> is: </p><pre class="programlisting"> security = user </pre><p> This is the default setting since samba-2.2.x. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889195"></a>Share Level Security</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886188"></a>Share Level Security</h3></div></div><div></div></div><p> Ok, now for share level security. In share level security, the client authenticates itself separately for each share. It will send a password along with each <span class="emphasis"><em>tree connection</em></span> (share mount). It does not explicitly send a @@ -124,18 +125,18 @@ of the share they try to connect to (useful for home directories) and any users listed in the <i class="parameter"><tt>user =</tt></i> <tt class="filename">smb.conf</tt> line. The password is then checked in turn against these <span class="emphasis"><em>possible usernames</em></span>. If a match is found then the client is authenticated as that user. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2889275"></a>Example Configuration</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886268"></a>Example Configuration</h4></div></div><div></div></div><p> The <tt class="filename">smb.conf</tt> parameter that sets <span class="emphasis"><em>Share Level Security</em></span> is: </p><pre class="programlisting"> security = share </pre><p> Please note that there are reports that recent MS Windows clients do not like to work with share mode security servers. You are strongly discouraged from using share level security. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889317"></a>Domain Security Mode (User Level Security)</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887258"></a>Domain Security Mode (User Level Security)</h3></div></div><div></div></div><p> When Samba is operating in <i class="parameter"><tt>security = domain</tt></i> mode, the Samba server has a domain security trust account (a machine account) and will cause all authentication requests to be passed through to the domain controllers. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2889339"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887280"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em> Samba as a Domain Member Server </em></span></p><p> This method involves addition of the following parameters in the <tt class="filename">smb.conf</tt> file: @@ -147,24 +148,24 @@ In order for this method to work, the Samba server needs to join the MS Windows security domain. This is done as follows: </p><div class="procedure"><ol type="1"><li><p>On the MS Windows NT domain controller, using the Server Manager, add a machine account for the Samba server. - </p></li><li><p>Next, on the Unix/Linux system execute:</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j DOMAIN_NAME -r PDC_NAME</tt></b> (samba-2.x)</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>net join -U administrator%password</tt></b> (samba-3)</p></li></ol></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> + </p></li><li><p>Next, on the Unix/Linux system execute:</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j DOMAIN_NAME -r PDC_NAME</tt></b> (samba-2.x)</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>net join -U administrator%password</tt></b> (samba-3)</p></li></ol></div><div xmlns:ns4="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns4:p> As of Samba-2.2.4 the Samba 2.2.x series can auto-join a Windows NT4 style Domain just by executing: -</p><pre class="screen"> +</ns4:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j <i class="replaceable"><tt>DOMAIN_NAME</tt></i> -r <i class="replaceable"><tt>PDC_NAME</tt></i> -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b> -</pre><p> +</pre><ns4:p> As of Samba-3 the same can be done by executing: -</p><pre class="screen"> +</ns4:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net join -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b> -</pre><p> +</pre><ns4:p> It is not necessary with Samba-3 to specify the <i class="replaceable"><tt>DOMAIN_NAME</tt></i> or the <i class="replaceable"><tt>PDC_NAME</tt></i> as it figures this out from the <tt class="filename">smb.conf</tt> file settings. -</p></div><p> +</ns4:p></div><p> Use of this mode of authentication does require there to be a standard Unix account -for each user in order to assign a uid once the account has been authenticated by +for each user in order to assign a UID once the account has been authenticated by the remote Windows DC. This account can be blocked to prevent logons by clients other than -MS Windows through things such as setting an invalid shell in the +MS Windows through means such as setting an invalid shell in the <tt class="filename">/etc/passwd</tt> entry. </p><p> An alternative to assigning UIDs to Windows users on a Samba member server is @@ -173,7 +174,7 @@ in this HOWTO collection. </p><p> For more information of being a domain member, see the <a href="domain-member.html" title="Chapter7.Domain Membership">Domain Member</a> section of this Howto. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889568"></a>ADS Security Mode (User Level Security)</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887500"></a>ADS Security Mode (User Level Security)</h3></div></div><div></div></div><p> Both Samba 2.2 and 3.0 can join an Active Directory domain. This is possible even if the domain is run in native mode. Active Directory in native mode perfectly allows NT4-style domain members, contrary to @@ -187,7 +188,7 @@ authentication protocols. All your machines are running Windows 2000 and above and all use full Kerberos. In this case Samba as a NT4-style domain would still require NT-compatible authentication data. Samba in AD-member mode can accept Kerberos. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2889598"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887530"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting"> realm = your.kerberos.REALM security = ADS </pre><p> @@ -197,7 +198,7 @@ AD-member mode can accept Kerberos. </pre><p> Please refer to the <a href="domain-member.html" title="Chapter7.Domain Membership">Domain Membership</a> and <a href="domain-member.html#ads-member" title="Samba ADS Domain Membership">Active Directory Membership</a> sections for more information regarding this configuration option. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889655"></a>Server Security (User Level Security)</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887583"></a>Server Security (User Level Security)</h3></div></div><div></div></div><p> Server security mode is a left over from the time when Samba was not capable of acting as a domain member server. It is highly recommended NOT to use this feature. Server security mode has many draw backs. The draw backs include: @@ -229,7 +230,7 @@ lookups because the choice of the target authentication server is arbitrary and be determined from a domain name. In essence, a Samba server that is in <span class="emphasis"><em>server security mode</em></span> is operating in what used to be known as workgroup mode. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2889811"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887740"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em> Using MS Windows NT as an authentication server </em></span></p><p> This method involves the additions of the following parameters in the <tt class="filename">smb.conf</tt> file: @@ -238,8 +239,8 @@ This method involves the additions of the following parameters in the <tt class= security = server password server = "NetBIOS_name_of_a_DC" </pre><p> -There are two ways of identifying whether or not a username and password pair was valid -or not. One uses the reply information provided as part of the authentication messaging +There are two ways of identifying whether or not a username and password pair was valid. +One uses the reply information provided as part of the authentication messaging process, the other uses just an error code. </p><p> The down-side of this mode of configuration is the fact that for security reasons Samba @@ -250,7 +251,7 @@ certain number of failed authentication attempts this will result in user lockou </p><p> Use of this mode of authentication does require there to be a standard Unix account for the user, though this account can be blocked to prevent logons by non-SMB/CIFS clients. -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889880"></a>Seamless Windows Network Integration</h2></div></div><div></div></div><p> +</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887808"></a>Seamless Windows Network Integration</h2></div></div><div></div></div><p> MS Windows clients may use encrypted passwords as part of a challenge/response authentication model (a.k.a. NTLMv1 and NTLMv2) or alone, or clear text strings for simple password based authentication. It should be realized that with the SMB protocol, @@ -293,23 +294,23 @@ when using clear text authentication. </pre><p> By default Samba will lower case the username before attempting to lookup the user in the database of local system accounts. Because UNIX usernames conventionally -only contain lower case character, the <i class="parameter"><tt>username level</tt></i> parameter +only contain lower-case characters, the <i class="parameter"><tt>username level</tt></i> parameter is rarely needed. </p><p> -However, passwords on UNIX systems often make use of mixed case characters. +However, passwords on UNIX systems often make use of mixed-case characters. This means that in order for a user on a Windows 9x client to connect to a Samba server using clear text authentication, the <i class="parameter"><tt>password level</tt></i> -must be set to the maximum number of upper case letter which <span class="emphasis"><em>could</em></span> -appear is a password. Note that the server OS uses the traditional DES version +must be set to the maximum number of upper case letters which <span class="emphasis"><em>could</em></span> +appear in a password. Note that the server OS uses the traditional DES version of crypt(), a <i class="parameter"><tt>password level</tt></i> of 8 will result in case insensitive passwords as seen from Windows users. This will also result in longer login times as Samba has to compute the permutations of the password string and try them one by one until a match is located (or all combinations fail). </p><p> -The best option to adopt is to enable support for encrypted passwords where ever +The best option to adopt is to enable support for encrypted passwords wherever Samba is used. Most attempts to apply the registry change to re-enable plain text passwords will eventually lead to user complaints and unhappiness. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890056"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887985"></a>Common Errors</h2></div></div><div></div></div><p> We all make mistakes. It is Ok to make mistakes, so long as they are made in the right places and at the right time. A mistake that causes lost productivity is seldom tolerated. A mistake made in a developmental test lab is expected. @@ -319,19 +320,19 @@ on the Samba mailing lists. Many of these are avoidable by doing you homework be a Samba implementation. Some are the result of misunderstanding of the English language. The English language has many turns of phrase that are potentially vague and may be highly confusing to those for whom English is not their native tongue. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890084"></a>What makes Samba a SERVER?</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888013"></a>What makes Samba a SERVER?</h3></div></div><div></div></div><p> To some the nature of the Samba <span class="emphasis"><em>security</em></span> mode is very obvious, but entirely wrong all the same. It is assumed that <i class="parameter"><tt>security = server</tt></i> means that Samba will act as a server. Not so! See above - this setting means that Samba will <span class="emphasis"><em>try</em></span> to use another SMB server as its source of user authentication alone. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890117"></a>What makes Samba a Domain Controller?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888046"></a>What makes Samba a Domain Controller?</h3></div></div><div></div></div><p> The <tt class="filename">smb.conf</tt> parameter <i class="parameter"><tt>security = domain</tt></i> does NOT really make Samba behave as a Domain Controller! This setting means we want Samba to be a domain member! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890146"></a>What makes Samba a Domain Member?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888075"></a>What makes Samba a Domain Member?</h3></div></div><div></div></div><p> Guess! So many others do. But whatever you do, do NOT think that <i class="parameter"><tt>security = user</tt></i> makes Samba act as a domain member. Read the manufacturers manual before the warranty expires! See the <a href="domain-member.html" title="Chapter7.Domain Membership">Domain Member</a> section of this Howto for more information. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890179"></a>Constantly Losing Connections to Password Server</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889987"></a>Constantly Losing Connections to Password Server</h3></div></div><div></div></div><p> Why does server_validate() simply give up rather than re-establishing its connection to the password server? Though I am not fluent in the SMB protocol, perhaps the cluster server process passes along to its client workstation the session key it receives from the password diff --git a/docs/htmldocs/StandAloneServer.html b/docs/htmldocs/StandAloneServer.html index a3bdf439af..272df7a27b 100644 --- a/docs/htmldocs/StandAloneServer.html +++ b/docs/htmldocs/StandAloneServer.html @@ -1,9 +1,10 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter8.Stand-Alone Servers</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="domain-member.html" title="Chapter7.Domain Membership"><link rel="next" href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter8.Stand-Alone Servers</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="domain-member.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="ClientConfig.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="StandAloneServer"></a>Chapter8.Stand-Alone Servers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="StandAloneServer.html#id2902304">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2902501">Background</a></dt><dt><a href="StandAloneServer.html#id2902573">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2902588">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#id2902638">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2902852">Common Errors</a></dt></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter8.Stand-Alone Servers</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="domain-member.html" title="Chapter7.Domain Membership"><link rel="next" href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter8.Stand-Alone Servers</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="domain-member.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="ClientConfig.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="StandAloneServer"></a>Chapter8.Stand-Alone Servers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="StandAloneServer.html#id2901965">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2902003">Background</a></dt><dt><a href="StandAloneServer.html#id2902071">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2900673">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#id2900721">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2900933">Common Errors</a></dt></dl></div><p> Stand-Alone servers are independent of Domain Controllers on the network. They are NOT domain members and function more like workgroup servers. In many cases a stand-alone server is configured with a minimum of security control with the intent that all data served will be readily accessible to all users. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902304"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901965"></a>Features and Benefits</h2></div></div><div></div></div><p> Stand-Alone servers can be as secure or as insecure as needs dictate. They can have simple or complex configurations. Above all, despite the hoopla about Domain security they remain a very common installation. @@ -20,7 +21,7 @@ that are queued off a single central server. Everyone needs to be able to print to the printers, there is no need to affect any access controls and no files will be served from the print server. Again a share mode stand-alone server makes a great solution. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902501"></a>Background</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902003"></a>Background</h2></div></div><div></div></div><p> The term <span class="emphasis"><em>stand-alone server</em></span> means that the server will provide local authentication and access control for all resources that are available from it. In general this means that there will be a @@ -49,11 +50,11 @@ This means that the Samba server may use the local Unix/Linux system password da local smbpasswd file, or may use an LDAP back end, or even via PAM and Winbind another CIFS/SMB server for authentication. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902573"></a>Example Configuration</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902071"></a>Example Configuration</h2></div></div><div></div></div><p> The following examples are designed to inspire simplicity. It is too easy to attempt a high level of creativity and to introduce too much complexity in server and network design. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902588"></a>Reference Documentation Server</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900673"></a>Reference Documentation Server</h3></div></div><div></div></div><p> Configuration of a read-only data server that EVERYONE can access is very simple. Here is the smb.conf file that will do this. Assume that all the reference documents are stored in the directory /export, that the documents are owned by a user other than @@ -78,7 +79,7 @@ of the local workgroup so that the machine will appear in with systems users are with. The only password backend required is the "guest" backend so as to allow default unprivileged account names to be used. Given that there is a WINS server on this network we do use it. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902638"></a>Central Print Serving</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns13="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900721"></a>Central Print Serving</h3></div></div><div></div></div><p> Configuration of a simple print server is very simple if you have all the right tools on your system. </p><div class="orderedlist"><p class="title"><b> Assumptions:</b></p><ol type="1"><li><p> @@ -98,27 +99,27 @@ In this example our print server will spool all incoming print jobs to <tt class="filename">/var/spool/samba</tt> until the job is ready to be submitted by Samba to the CUPS print processor. Since all incoming connections will be as the anonymous (guest) user, two things will be required: -</p><div class="itemizedlist"><p class="title"><b>Enabling Anonymous Printing</b></p><ul type="disc"><li><p> +</p><div class="itemizedlist"><p class="title"><b>Enabling Anonymous Printing</b></p><ul type="disc"><li xmlns:ns11=""><ns11:p> The Unix/Linux system must have a <b class="command">guest</b> account. The default for this is usually the account <b class="command">nobody</b>. To find the correct name to use for your version of Samba do the following: - </p><pre class="screen"> + </ns11:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>testparm -s -v | grep "guest account"</tt></b> - </pre><p> + </pre><ns11:p> Then make sure that this account exists in your system password database (<tt class="filename">/etc/passwd</tt>). - </p></li><li><p> + </ns11:p></li><li xmlns:ns12=""><ns12:p> The directory into which Samba will spool the file must have write access for the guest account. The following commands will ensure that this directory is available for use: - </p><pre class="screen"> + </ns12:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>mkdir /var/spool/samba</tt></b> <tt class="prompt">root# </tt><b class="userinput"><tt>chown nobody.nobody /var/spool/samba</tt></b> <tt class="prompt">root# </tt><b class="userinput"><tt>chmod a+rwt /var/spool/samba</tt></b> - </pre><p> - </p></li></ul></div><p> -</p><pre class="programlisting"> + </pre><ns12:p> + </ns12:p></li></ul></div><ns13:p> +</ns13:p><pre class="programlisting"> # Global parameters [global] workgroup = MYGROUP @@ -136,8 +137,8 @@ the anonymous (guest) user, two things will be required: printing = cups use client driver = Yes browseable = No -</pre><p> -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902852"></a>Common Errors</h2></div></div><div></div></div><p> +</pre><ns13:p> +</ns13:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2900933"></a>Common Errors</h2></div></div><div></div></div><p> The greatest mistake so often made is to make a network configuration too complex. It pays to use the simplest solution that will meet the needs of the moment. </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="domain-member.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ClientConfig.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter7.Domain Membership</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter9.MS Windows Network Configuration Guide</td></tr></table></div></body></html> diff --git a/docs/htmldocs/VFS.html b/docs/htmldocs/VFS.html index 6b520d792a..0b22d2e1fb 100644 --- a/docs/htmldocs/VFS.html +++ b/docs/htmldocs/VFS.html @@ -1,38 +1,39 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter20.Stackable VFS modules</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0"><link rel="next" href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter20.Stackable VFS modules</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="CUPS-printing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="winbind.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="VFS"></a>Chapter20.Stackable VFS modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Simo</span> <span class="surname">Sorce</span></h3><span class="contrib">original vfs_skel README</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><span class="contrib">original vfs_netatalk docs</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><span class="contrib">Update for multiple modules</span></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="VFS.html#id2978211">Features and Benefits</a></dt><dt><a href="VFS.html#id2978229">Discussion</a></dt><dt><a href="VFS.html#id2978320">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2978327">audit</a></dt><dt><a href="VFS.html#id2978365">extd_audit</a></dt><dt><a href="VFS.html#id2978489">fake_perms</a></dt><dt><a href="VFS.html#id2978508">recycle</a></dt><dt><a href="VFS.html#id2978645">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2978690">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2978712">DatabaseFS</a></dt><dt><a href="VFS.html#id2978768">vscan</a></dt></dl></dd><dt><a href="VFS.html#id2978797">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978211"></a>Features and Benefits</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter20.Stackable VFS modules</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0"><link rel="next" href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter20.Stackable VFS modules</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="CUPS-printing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="winbind.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="VFS"></a>Chapter20.Stackable VFS modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Simo</span> <span class="surname">Sorce</span></h3><span class="contrib">original vfs_skel README</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><span class="contrib">original vfs_netatalk docs</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><span class="contrib">Update for multiple modules</span></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="VFS.html#id2976111">Features and Benefits</a></dt><dt><a href="VFS.html#id2976129">Discussion</a></dt><dt><a href="VFS.html#id2974805">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2974812">audit</a></dt><dt><a href="VFS.html#id2974851">extd_audit</a></dt><dt><a href="VFS.html#id2974972">fake_perms</a></dt><dt><a href="VFS.html#id2974992">recycle</a></dt><dt><a href="VFS.html#id2975130">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2975176">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2975198">DatabaseFS</a></dt><dt><a href="VFS.html#id2975253">vscan</a></dt></dl></dd><dt><a href="VFS.html#id2975282">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2976111"></a>Features and Benefits</h2></div></div><div></div></div><p> Since Samba-3, there is support for stackable VFS(Virtual File System) modules. Samba passes each request to access the unix file system thru the loaded VFS modules. This chapter covers all the modules that come with the samba source and references to some external modules. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978229"></a>Discussion</h2></div></div><div></div></div><p> +</p></div><div xmlns:ns70="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2976129"></a>Discussion</h2></div></div><div></div></div><p> If not supplied with your platform distribution binary Samba package you may have problems to compile these modules, as shared libraries are compiled and linked in different ways on different systems. They currently have been tested against GNU/Linux and IRIX. -</p><p> +</p><ns70:p> To use the VFS modules, create a share similar to the one below. The important parameter is the <b class="command">vfs objects</b> parameter where you can list one or more VFS modules by name. For example, to log all access to files and put deleted files in a recycle bin: -</p><pre class="programlisting"> +</ns70:p><pre class="programlisting"> [audit] comment = Audited /data directory path = /data vfs objects = audit recycle writeable = yes browseable = yes -</pre><p> -</p><p> +</pre><ns70:p> +</ns70:p><p> The modules are used in the order in which they are specified. </p><p> Samba will attempt to load modules from the <span class="emphasis"><em>lib</em></span> directory in the root directory of the samba installation (usually <tt class="filename">/usr/lib/samba/vfs</tt> or <tt class="filename">/usr/local/samba/lib/vfs </tt>). -</p><p> +</p><ns70:p> Some modules can be used twice for the same share. This can be done using a configuration similar to the one below. -</p><pre class="programlisting"> +</ns70:p><pre class="programlisting"> [test] comment = VFS TEST path = /data @@ -42,12 +43,12 @@ This can be done using a configuration similar to the one below. example1: parameter = 1 example: parameter = 5 test: parameter = 7 -</pre><p> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978320"></a>Included modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978327"></a>audit</h3></div></div><div></div></div><p> +</pre><ns70:p> +</ns70:p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2974805"></a>Included modules</h2></div></div><div></div></div><div xmlns:ns71="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974812"></a>audit</h3></div></div><div></div></div><ns71:p> A simple module to audit file access to the syslog facility. The following operations are logged: - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>share</td></tr><tr><td>connect/disconnect</td></tr><tr><td>directory opens/create/remove</td></tr><tr><td>file open/close/rename/unlink/chmod</td></tr></table><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978365"></a>extd_audit</h3></div></div><div></div></div><p> + </ns71:p><table class="simplelist" border="0" summary="Simple list"><tr><td>share</td></tr><tr><td>connect/disconnect</td></tr><tr><td>directory opens/create/remove</td></tr><tr><td>file open/close/rename/unlink/chmod</td></tr></table><ns71:p> + </ns71:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974851"></a>extd_audit</h3></div></div><div></div></div><p> This module is identical with the <span class="emphasis"><em>audit</em></span> module above except that it sends audit logs to both syslog as well as the smbd log file/s. The loglevel for this module is set in the smb.conf file. @@ -55,23 +56,23 @@ This can be done using a configuration similar to the one below. The logging information that will be written to the smbd log file is controlled by the <i class="parameter"><tt>log level</tt></i> parameter in <tt class="filename">smb.conf</tt>. The following information will be recorded: - </p><div class="table"><a name="id2978406"></a><p class="title"><b>Table20.1.Extended Auditing Log Information</b></p><table summary="Extended Auditing Log Information" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Log Level</th><th align="center">Log Details - File and Directory Operations</th></tr></thead><tbody><tr><td align="center">0</td><td align="left">Creation / Deletion</td></tr><tr><td align="center">1</td><td align="left">Create / Delete / Rename / Permission Changes</td></tr><tr><td align="center">2</td><td align="left">Create / Delete / Rename / Perm Change / Open / Close</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978489"></a>fake_perms</h3></div></div><div></div></div><p> + </p><div class="table"><a name="id2974890"></a><p class="title"><b>Table20.1.Extended Auditing Log Information</b></p><table summary="Extended Auditing Log Information" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Log Level</th><th align="center">Log Details - File and Directory Operations</th></tr></thead><tbody><tr><td align="center">0</td><td align="left">Creation / Deletion</td></tr><tr><td align="center">1</td><td align="left">Create / Delete / Rename / Permission Changes</td></tr><tr><td align="center">2</td><td align="left">Create / Delete / Rename / Perm Change / Open / Close</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974972"></a>fake_perms</h3></div></div><div></div></div><p> This module was created to allow Roaming Profile files and directories to be set (on the Samba server under Unix) as read only. This module will if installed on the Profiles share will report to the client that the Profile files and directories are writable. This satisfies the client even though the files will never be overwritten as the client logs out or shuts down. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978508"></a>recycle</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns72="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974992"></a>recycle</h3></div></div><div></div></div><p> A recycle-bin like module. When used any unlink call will be intercepted and files moved to the recycle directory instead of being deleted. - </p><p>Supported options: - </p><div class="variablelist"><dl><dt><span class="term">recycle:repository</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:keeptree</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:versions</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:touch</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:maxsize</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude_dir</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:noversions</span></dt><dd><p>FIXME</p></dd></dl></div><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978645"></a>netatalk</h3></div></div><div></div></div><p> + </p><ns72:p>Supported options: + </ns72:p><div class="variablelist"><dl><dt><span class="term">recycle:repository</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:keeptree</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:versions</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:touch</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:maxsize</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude_dir</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:noversions</span></dt><dd><p>FIXME</p></dd></dl></div><ns72:p> + </ns72:p></div><div xmlns:ns73="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975130"></a>netatalk</h3></div></div><div></div></div><p> A netatalk module, that will ease co-existence of samba and netatalk file sharing services. - </p><p>Advantages compared to the old netatalk module: - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>it doesn't care about creating of .AppleDouble forks, just keeps them in sync</td></tr><tr><td>if a share in <tt class="filename">smb.conf</tt> doesn't contain .AppleDouble item in hide or veto list, it will be added automatically</td></tr></table><p> - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978690"></a>VFS modules available elsewhere</h2></div></div><div></div></div><p> + </p><ns73:p>Advantages compared to the old netatalk module: + </ns73:p><table class="simplelist" border="0" summary="Simple list"><tr><td>it doesn't care about creating of .AppleDouble forks, just keeps them in sync</td></tr><tr><td>if a share in <tt class="filename">smb.conf</tt> doesn't contain .AppleDouble item in hide or veto list, it will be added automatically</td></tr></table><ns73:p> + </ns73:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975176"></a>VFS modules available elsewhere</h2></div></div><div></div></div><p> This section contains a listing of various other VFS modules that have been posted but don't currently reside in the Samba CVS tree for one reason or another (e.g. it is easy for the maintainer @@ -79,7 +80,7 @@ to have his or her own CVS tree). </p><p> No statements about the stability or functionality of any module should be implied due to its presence here. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978712"></a>DatabaseFS</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975198"></a>DatabaseFS</h3></div></div><div></div></div><p> URL: <a href="http://www.css.tayloru.edu/~elorimer/databasefs/index.php" target="_top">http://www.css.tayloru.edu/~elorimer/databasefs/index.php</a> </p><p>By <a href="mailto:elorimer@css.tayloru.edu" target="_top">Eric Lorimer</a>.</p><p> I have created a VFS module which implements a fairly complete read-only @@ -94,12 +95,12 @@ should be implied due to its presence here. Any feedback would be appreciated: comments, suggestions, patches, etc... If nothing else, hopefully it might prove useful for someone else who wishes to create a virtual filesystem. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978768"></a>vscan</h3></div></div><div></div></div><p>URL: <a href="http://www.openantivirus.org/" target="_top">http://www.openantivirus.org/</a></p><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975253"></a>vscan</h3></div></div><div></div></div><p>URL: <a href="http://www.openantivirus.org/" target="_top">http://www.openantivirus.org/</a></p><p> samba-vscan is a proof-of-concept module for Samba, which uses the VFS (virtual file system) features of Samba 2.2.x/3.0 alphaX. Of course, Samba has to be compiled with VFS support. samba-vscan supports various virus scanners and is maintained by Rainer Link. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978797"></a>Common Errors</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975282"></a>Common Errors</h2></div></div><div></div></div><p> There must be some gotchas we should record here! Jelmer??? </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="CUPS-printing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="winbind.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter19.CUPS Printing Support in Samba 3.0</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter21.Integrated Logon Support using Winbind</td></tr></table></div></body></html> diff --git a/docs/htmldocs/bugreport.html b/docs/htmldocs/bugreport.html index 9ae4797d31..e8d7a8ccd3 100644 --- a/docs/htmldocs/bugreport.html +++ b/docs/htmldocs/bugreport.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter35.Reporting Bugs</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="problems.html" title="Chapter34.Analysing and solving samba problems"><link rel="next" href="Appendixes.html" title="PartVI.Appendixes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter35.Reporting Bugs</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="problems.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="Appendixes.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="bugreport"></a>Chapter35.Reporting Bugs</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Tridge or Karl Auer perhaps?</span></h3></div></div><div><p class="pubdate"> 27 June 1997 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="bugreport.html#id3012269">Introduction</a></dt><dt><a href="bugreport.html#id3012491">General info</a></dt><dt><a href="bugreport.html#id3012528">Debug levels</a></dt><dt><a href="bugreport.html#id3012670">Internal errors</a></dt><dt><a href="bugreport.html#id3012778">Attaching to a running process</a></dt><dt><a href="bugreport.html#id3012825">Patches</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012269"></a>Introduction</h2></div></div><div></div></div><p>Please report bugs using +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter35.Reporting Bugs</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="problems.html" title="Chapter34.Analysing and solving samba problems"><link rel="next" href="Appendixes.html" title="PartVI.Appendixes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter35.Reporting Bugs</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="problems.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="Appendixes.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="bugreport"></a>Chapter35.Reporting Bugs</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Tridge or Karl Auer perhaps?</span></h3></div></div><div><p class="pubdate"> 27 June 1997 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="bugreport.html#id3010326">Introduction</a></dt><dt><a href="bugreport.html#id3010385">General info</a></dt><dt><a href="bugreport.html#id3010421">Debug levels</a></dt><dt><a href="bugreport.html#id3008517">Internal errors</a></dt><dt><a href="bugreport.html#id3008625">Attaching to a running process</a></dt><dt><a href="bugreport.html#id3008127">Patches</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010326"></a>Introduction</h2></div></div><div></div></div><p>Please report bugs using <a href="https://bugzilla.samba.org/" target="_top">bugzilla</a>.</p><p> Please take the time to read this file before you submit a bug report. Also, please see if it has changed between releases, as we @@ -20,7 +21,7 @@ that list that may be able to help you. You may also like to look though the recent mailing list archives, which are conveniently accessible on the Samba web pages at <a href="http://samba.org/samba/" target="_top">http://samba.org/samba/</a>. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012491"></a>General info</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010385"></a>General info</h2></div></div><div></div></div><p> Before submitting a bug report check your config for silly errors. Look in your log files for obvious messages that tell you that you've misconfigured something and run testparm to test your config @@ -32,7 +33,7 @@ This is very important. If you include part of a log file with your bug report then be sure to annotate it with exactly what you were doing on the client at the time, and exactly what the results were. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012528"></a>Debug levels</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010421"></a>Debug levels</h2></div></div><div></div></div><p> If the bug has anything to do with Samba behaving incorrectly as a server (like refusing to open a file) then the log files will probably be very useful. Depending on the problem a log level of between 3 and @@ -67,7 +68,7 @@ debugging operations you may not need a setting higher than <tt class="constant">3</tt>. Nearly all bugs can be tracked at a setting of <tt class="constant">10</tt>, but be prepared for a VERY large volume of log data. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012670"></a>Internal errors</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008517"></a>Internal errors</h2></div></div><div></div></div><p> If you get a <span class="errorname">INTERNAL ERROR</span> message in your log files it means that Samba got an unexpected signal while running. It is probably a segmentation fault and almost certainly means a bug in Samba (unless @@ -100,7 +101,7 @@ disassemble the routine that called it) and try to work out exactly where the problem is by looking at the surrounding code. Even if you don't know assembly, including this info in the bug report can be useful. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012778"></a>Attaching to a running process</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008625"></a>Attaching to a running process</h2></div></div><div></div></div><p> Unfortunately some unixes (in particular some recent linux kernels) refuse to dump a core file if the task has changed uid (which smbd does often). To debug with this sort of system you could try to attach @@ -110,7 +111,7 @@ to the running process using Then use <b class="command">c</b> to continue and try to cause the core dump using the client. The debugger should catch the fault and tell you where it occurred. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012825"></a>Patches</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008127"></a>Patches</h2></div></div><div></div></div><p> The best sort of bug report is one that includes a fix! If you send us patches please use <b class="userinput"><tt>diff -u</tt></b> format if your version of diff supports it, otherwise use <b class="userinput"><tt>diff -c4</tt></b>. Make sure diff --git a/docs/htmldocs/compiling.html b/docs/htmldocs/compiling.html index d8b85602d9..836fb50bb8 100644 --- a/docs/htmldocs/compiling.html +++ b/docs/htmldocs/compiling.html @@ -1,8 +1,9 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter36.How to compile SAMBA</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Appendixes.html" title="PartVI.Appendixes"><link rel="next" href="Portability.html" title="Chapter37.Portability"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter36.How to compile SAMBA</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Appendixes.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Portability.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="compiling"></a>Chapter36.How to compile SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Jerry perhaps?</span></h3></div></div><div><p class="pubdate"> 22 May 2001 </p></div><div><p class="pubdate"> 18 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="compiling.html#id3012145">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id3012152">Introduction</a></dt><dt><a href="compiling.html#id3012182">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id3013701">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id3013750">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id3013886">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id3014023">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id3014188">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id3014280">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id3014484">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="compiling.html#id3014579">Common Errors</a></dt></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter36.How to compile SAMBA</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Appendixes.html" title="PartVI.Appendixes"><link rel="next" href="Portability.html" title="Chapter37.Portability"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter36.How to compile SAMBA</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Appendixes.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Portability.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="compiling"></a>Chapter36.How to compile SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Jerry perhaps?</span></h3></div></div><div><p class="pubdate"> 22 May 2001 </p></div><div><p class="pubdate"> 18 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="compiling.html#id3008244">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id3008251">Introduction</a></dt><dt><a href="compiling.html#id3008280">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id3009749">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id3009796">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id3009932">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id3010069">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id3010964">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id3011056">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id3011260">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="compiling.html#id3011355">Common Errors</a></dt></dl></div><p> You can obtain the samba source from the <a href="http://samba.org/" target="_top">samba website</a>. To obtain a development version, you can download samba from CVS or using rsync. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012145"></a>Access Samba source code via CVS</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3012152"></a>Introduction</h3></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008244"></a>Access Samba source code via CVS</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3008251"></a>Introduction</h3></div></div><div></div></div><p> Samba is developed in an open environment. Developers use CVS (Concurrent Versioning System) to "checkin" (also known as "commit") new source code. Samba's various CVS branches can @@ -11,12 +12,12 @@ detailed in this chapter. </p><p> This chapter is a modified version of the instructions found at <a href="http://samba.org/samba/cvs.html" target="_top">http://samba.org/samba/cvs.html</a> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3012182"></a>CVS Access to samba.org</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3008280"></a>CVS Access to samba.org</h3></div></div><div></div></div><p> The machine samba.org runs a publicly accessible CVS repository for access to the source code of several packages, including samba, rsync, distcc, ccache and jitterbug. There are two main ways of accessing the CVS server on this host. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3012198"></a>Access via CVSweb</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3008295"></a>Access via CVSweb</h4></div></div><div></div></div><p> You can access the source code via your favourite WWW browser. This allows you to access the contents of individual files in the repository and also to look at the revision @@ -24,7 +25,7 @@ history and commit logs of individual files. You can also ask for a diff listing between any two versions on the repository. </p><p> Use the URL : <a href="http://samba.org/cgi-bin/cvsweb" target="_top">http://samba.org/cgi-bin/cvsweb</a> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3013511"></a>Access via cvs</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3008326"></a>Access via cvs</h4></div></div><div></div></div><p> You can also access the source code via a normal cvs client. This gives you much more control over what you can do with the repository and allows you to checkout whole source trees @@ -74,7 +75,7 @@ on this system just substitute the correct package name the following command from within the samba directory: </p><p> <b class="userinput"><tt>cvs update -d -P</tt></b> - </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013701"></a>Accessing the samba sources via rsync and ftp</h2></div></div><div></div></div><p> + </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3009749"></a>Accessing the samba sources via rsync and ftp</h2></div></div><div></div></div><p> pserver.samba.org also exports unpacked copies of most parts of the CVS tree at <a href="ftp://pserver.samba.org/pub/unpacked" target="_top">ftp://pserver.samba.org/pub/unpacked</a> and also via anonymous rsync at <a href="rsync://pserver.samba.org/ftp/unpacked/" target="_top">rsync://pserver.samba.org/ftp/unpacked/</a>. I recommend using rsync rather than ftp. @@ -83,7 +84,7 @@ on this system just substitute the correct package name The disadvantage of the unpacked trees is that they do not support automatic merging of local changes like CVS does. rsync access is most convenient for an initial install. - </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013750"></a>Verifying Samba's PGP signature</h2></div></div><div></div></div><p> + </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3009796"></a>Verifying Samba's PGP signature</h2></div></div><div></div></div><p> In these days of insecurity, it's strongly recommended that you verify the PGP signature for any source file before installing it. Even if you're not downloading from a mirror site, verifying PGP signatures should be a @@ -110,7 +111,7 @@ then all is well. The warnings about trust relationships can be ignored. An example of what you would not want to see would be: </p><tt class="computeroutput"> gpg: BAD signature from "Samba Distribution Verification Key" -</tt></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013886"></a>Building the Binaries</h2></div></div><div></div></div><p>To do this, first run the program <b class="userinput"><tt>./configure +</tt></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3009932"></a>Building the Binaries</h2></div></div><div></div></div><p>To do this, first run the program <b class="userinput"><tt>./configure </tt></b> in the source directory. This should automatically configure Samba for your operating system. If you have unusual needs then you may wish to run</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>./configure --help @@ -123,7 +124,7 @@ example of what you would not want to see would be: of Samba you might like to know that the old versions of the binaries will be renamed with a ".old" extension. You can go back to the previous version with</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make revert - </tt></b></p><p>if you find this version a disaster!</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3014023"></a>Compiling samba with Active Directory support</h3></div></div><div></div></div><p>In order to compile samba with ADS support, you need to have installed + </tt></b></p><p>if you find this version a disaster!</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3010069"></a>Compiling samba with Active Directory support</h3></div></div><div></div></div><p>In order to compile samba with ADS support, you need to have installed on your system:</p><div class="itemizedlist"><ul type="disc"><li><p>the MIT kerberos development libraries (either install from the sources or use a package). The Heimdal libraries will not work.</p></li><li><p>the OpenLDAP development libraries.</p></li></ul></div><p>If your kerberos libraries are in a non-standard location then @@ -135,12 +136,12 @@ example of what you would not want to see would be: #define HAVE_LDAP 1 </pre><p>If it doesn't then configure did not find your krb5 libraries or your ldap libraries. Look in <tt class="filename">config.log</tt> to figure - out why and fix it.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3014104"></a>Installing the required packages for Debian</h4></div></div><div></div></div><p>On Debian you need to install the following packages:</p><p> - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>libkrb5-dev</td></tr><tr><td>krb5-user</td></tr></table><p> - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3014136"></a>Installing the required packages for RedHat</h4></div></div><div></div></div><p>On RedHat this means you should have at least: </p><p> - </p><table class="simplelist" border="0" summary="Simple list"><tr><td>krb5-workstation (for kinit)</td></tr><tr><td>krb5-libs (for linking with)</td></tr><tr><td>krb5-devel (because you are compiling from source)</td></tr></table><p> - </p><p>in addition to the standard development environment.</p><p>Note that these are not standard on a RedHat install, and you may need - to get them off CD2.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014188"></a>Starting the <span class="application">smbd</span> and <span class="application">nmbd</span></h2></div></div><div></div></div><p>You must choose to start <span class="application">smbd</span> and <span class="application">nmbd</span> either + out why and fix it.</p><div xmlns:ns100="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3010878"></a>Installing the required packages for Debian</h4></div></div><div></div></div><p>On Debian you need to install the following packages:</p><ns100:p> + </ns100:p><table class="simplelist" border="0" summary="Simple list"><tr><td>libkrb5-dev</td></tr><tr><td>krb5-user</td></tr></table><ns100:p> + </ns100:p></div><div xmlns:ns101="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3010912"></a>Installing the required packages for RedHat</h4></div></div><div></div></div><p>On RedHat this means you should have at least: </p><ns101:p> + </ns101:p><table class="simplelist" border="0" summary="Simple list"><tr><td>krb5-workstation (for kinit)</td></tr><tr><td>krb5-libs (for linking with)</td></tr><tr><td>krb5-devel (because you are compiling from source)</td></tr></table><ns101:p> + </ns101:p><p>in addition to the standard development environment.</p><p>Note that these are not standard on a RedHat install, and you may need + to get them off CD2.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010964"></a>Starting the <span class="application">smbd</span> and <span class="application">nmbd</span></h2></div></div><div></div></div><p>You must choose to start <span class="application">smbd</span> and <span class="application">nmbd</span> either as daemons or from <span class="application">inetd</span>. Don't try to do both! Either you can put them in <tt class="filename"> inetd.conf</tt> and have them started on demand @@ -152,7 +153,7 @@ example of what you would not want to see would be: Samba. In many cases you must be root.</p><p>The main advantage of starting <span class="application">smbd</span> and <span class="application">nmbd</span> using the recommended daemon method is that they will respond slightly more quickly to an initial connection - request.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3014280"></a>Starting from inetd.conf</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>The following will be different if + request.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3011056"></a>Starting from inetd.conf</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>The following will be different if you use NIS, NIS+ or LDAP to distribute services maps.</p></div><p>Look at your <tt class="filename">/etc/services</tt>. What is defined at port 139/tcp. If nothing is defined then add a line like this:</p><pre class="programlisting">netbios-ssn 139/tcp</pre><p>similarly for 137/udp you should have an entry like:</p><pre class="programlisting">netbios-ns 137/udp</pre><p>Next edit your <tt class="filename">/etc/inetd.conf</tt> @@ -178,7 +179,7 @@ example of what you would not want to see would be: arguments, or you should use a script, and start the script from <b class="command">inetd</b>.</p></div><p>Restart <span class="application">inetd</span>, perhaps just send it a HUP. If you have installed an earlier version of <span class="application">nmbd</span> then - you may need to kill <span class="application">nmbd</span> as well.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3014484"></a>Alternative: starting it as a daemon</h3></div></div><div></div></div><p>To start the server as a daemon you should create + you may need to kill <span class="application">nmbd</span> as well.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3011260"></a>Alternative: starting it as a daemon</h3></div></div><div></div></div><p>To start the server as a daemon you should create a script something like this one, perhaps calling it <tt class="filename">startsmb</tt>.</p><pre class="programlisting"> #!/bin/sh @@ -190,7 +191,7 @@ example of what you would not want to see would be: </p><p>To kill it send a kill signal to the processes <span class="application">nmbd</span> and <span class="application">smbd</span>.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>If you use the SVR4 style init system then you may like to look at the <tt class="filename">examples/svr4-startup</tt> - script to make Samba fit into that system.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014579"></a>Common Errors</h2></div></div><div></div></div><p>“<span class="quote"> + script to make Samba fit into that system.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3011355"></a>Common Errors</h2></div></div><div></div></div><p>“<span class="quote"> I'm using gcc 3 and I've compiled Samba-3 from the CVS and the binaries are very large files (40 Mb and 20 Mb). I've the same result with <tt class="option">--enable-shared</tt> ? diff --git a/docs/htmldocs/diagnosis.html b/docs/htmldocs/diagnosis.html index ff3099ac72..473f5e6985 100644 --- a/docs/htmldocs/diagnosis.html +++ b/docs/htmldocs/diagnosis.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter33.The Samba checklist</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="next" href="problems.html" title="Chapter34.Analysing and solving samba problems"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter33.The Samba checklist</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="troubleshooting.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="problems.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="diagnosis"></a>Chapter33.The Samba checklist</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">Wed Jan 15</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="diagnosis.html#id3006072">Introduction</a></dt><dt><a href="diagnosis.html#id3007931">Assumptions</a></dt><dt><a href="diagnosis.html#id3008108">The tests</a></dt><dt><a href="diagnosis.html#id3009283">Still having troubles?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3006072"></a>Introduction</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter33.The Samba checklist</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="next" href="problems.html" title="Chapter34.Analysing and solving samba problems"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter33.The Samba checklist</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="troubleshooting.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="problems.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="diagnosis"></a>Chapter33.The Samba checklist</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">Wed Jan 15</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="diagnosis.html#id3003655">Introduction</a></dt><dt><a href="diagnosis.html#id3003689">Assumptions</a></dt><dt><a href="diagnosis.html#id3003861">The tests</a></dt><dt><a href="diagnosis.html#id3007413">Still having troubles?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003655"></a>Introduction</h2></div></div><div></div></div><p> This file contains a list of tests you can perform to validate your Samba server. It also tells you what the likely cause of the problem is if it fails any one of these steps. If it passes all these tests @@ -13,7 +14,7 @@ to solve a problem. If you send one of the samba mailing lists an email saying "it doesn't work" and you have not followed this test procedure then you should not be surprised if your email is ignored. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007931"></a>Assumptions</h2></div></div><div></div></div><p> +</p></div><div xmlns:ns99="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003689"></a>Assumptions</h2></div></div><div></div></div><p> In all of the tests it is assumed you have a Samba server called BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP. </p><p> @@ -30,8 +31,8 @@ following to <tt class="filename">smb.conf</tt>: path = /tmp read only = yes -</pre><p> -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><ns99:p> +</ns99:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> These tests assume version 3.0 or later of the samba suite. Some commands shown did not exist in earlier versions. </p></div><p> @@ -54,7 +55,7 @@ depending on how or if you specified logging in your <tt class="filename">smb.co </p><p> If you make changes to your <tt class="filename">smb.conf</tt> file while going through these test, don't forget to restart <span class="application">smbd</span> and <span class="application">nmbd</span>. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008108"></a>The tests</h2></div></div><div></div></div><div class="procedure"><p class="title"><b>Procedure33.1.Diagnosing your samba server</b></p><ol type="1"><li><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003861"></a>The tests</h2></div></div><div></div></div><div class="procedure"><p class="title"><b>Procedure33.1.Diagnosing your samba server</b></p><ol type="1"><li><p> In the directory in which you store your <tt class="filename">smb.conf</tt> file, run the command <b class="userinput"><tt>testparm smb.conf</tt></b>. If it reports any errors then your <tt class="filename">smb.conf</tt> configuration file is faulty. @@ -297,6 +298,6 @@ capability and is in user level security mode. In this case either set <i class="parameter"><tt>password server = Windows_NT_Machine</tt></i> in your <tt class="filename">smb.conf</tt> file, or make sure <i class="parameter"><tt>encrypted passwords</tt></i> is set to "yes". -</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3009283"></a>Still having troubles?</h2></div></div><div></div></div><p>Read the chapter on +</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007413"></a>Still having troubles?</h2></div></div><div></div></div><p>Read the chapter on <a href="problems.html" title="Chapter34.Analysing and solving samba problems">Analysing and Solving Problems</a>. </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="troubleshooting.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="troubleshooting.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="problems.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartV.Troubleshooting</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter34.Analysing and solving samba problems</td></tr></table></div></body></html> diff --git a/docs/htmldocs/domain-member.html b/docs/htmldocs/domain-member.html index 59040dfebc..19f8fd8677 100644 --- a/docs/htmldocs/domain-member.html +++ b/docs/htmldocs/domain-member.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter7.Domain Membership</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="samba-bdc.html" title="Chapter6.Backup Domain Control"><link rel="next" href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter7.Domain Membership</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-bdc.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="StandAloneServer.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="domain-member"></a>Chapter7.Domain Membership</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="domain-member.html#id2897897">Features and Benefits</a></dt><dt><a href="domain-member.html#id2898012">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2898188">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2898440">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2898636">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2898699">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2898901">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2899283">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2899424">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2899508">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2899872">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2899892">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2899919">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2899951">Adding Machine to Domain Fails</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter7.Domain Membership</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="samba-bdc.html" title="Chapter6.Backup Domain Control"><link rel="next" href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter7.Domain Membership</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-bdc.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="StandAloneServer.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="domain-member"></a>Chapter7.Domain Membership</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="domain-member.html#id2895232">Features and Benefits</a></dt><dt><a href="domain-member.html#id2894803">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2894963">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2896748">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2896944">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2897000">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2897196">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2899872">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2900011">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2900094">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2900442">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2900464">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2900491">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2900523">Adding Machine to Domain Fails</a></dt></dl></dd></dl></div><p> Domain Membership is a subject of vital concern, Samba must be able to participate as a member server in a Microsoft Domain security context, and Samba must be capable of providing Domain machine member trust accounts, @@ -11,7 +12,7 @@ within the current MS Windows networking world and particularly in the Unix/Linux networking and administration world, a considerable level of mis-information, incorrect understanding, and a lack of knowledge. Hopefully this chapter will fill the voids. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2897897"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895232"></a>Features and Benefits</h2></div></div><div></div></div><p> MS Windows workstations and servers that want to participate in domain security need to be made Domain members. Participating in Domain security is often called @@ -48,7 +49,7 @@ Domain membership has many advantages: client or server, other than the central Domain database (either NT4/Samba SAM style Domain, NT4 Domain that is back ended with an LDAP directory, or via an Active Directory infrastructure) - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2898012"></a>MS Windows Workstation/Server Machine Trust Accounts</h2></div></div><div></div></div><p> + </p></li></ul></div></div><div xmlns:ns7="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894803"></a>MS Windows Workstation/Server Machine Trust Accounts</h2></div></div><div></div></div><p> A machine trust account is an account that is used to authenticate a client machine (rather than a user) to the Domain Controller server. In Windows terminology, @@ -67,11 +68,11 @@ shared secret with the domain controller. A Windows NT4 PDC stores each machine trust account in the Windows Registry. The introduction of MS Windows 2000 saw the introduction of Active Directory, the new repository for machine trust accounts. -</p><p> +</p><ns7:p> A Samba PDC, however, stores each machine trust account in two parts, as follows: -</p><div class="itemizedlist"><ul type="disc"><li><p> +</ns7:p><div class="itemizedlist"><ul type="disc"><li><p> A Domain Security Account (stored in the <i class="parameter"><tt>passdb backend</tt></i> that has been configured in the <tt class="filename">smb.conf</tt> file. The precise nature of the account information that is @@ -91,8 +92,8 @@ as follows: <tt class="filename">/etc/passwd</tt>. Work is in progress to allow a simplified mode of operation that does not require Unix user accounts, but this may not be a feature of the early releases of Samba-3. - </p></li></ul></div><p> -</p><p> + </p></li></ul></div><ns7:p> +</ns7:p><p> There are three ways to create machine trust accounts: </p><div class="itemizedlist"><ul type="disc"><li><p> Manual creation from the Unix/Linux command line. Here, both the Samba and @@ -107,7 +108,7 @@ There are three ways to create machine trust accounts: created by Samba at the time the client is joined to the domain. (For security, this is the recommended method.) The corresponding Unix account may be created automatically or manually. - </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898188"></a>Manual Creation of Machine Trust Accounts</h3></div></div><div></div></div><p> + </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894963"></a>Manual Creation of Machine Trust Accounts</h3></div></div><div></div></div><p> The first step in manually creating a machine trust account is to manually create the corresponding Unix account in <tt class="filename">/etc/passwd</tt>. This can be done using <b class="command">vipw</b> or another 'add user' command @@ -139,11 +140,11 @@ Now that the corresponding Unix account has been created, the next step is to cr the Samba account for the client containing the well-known initial machine trust account password. This can be done using the <a href="smbpasswd.8.html" target="_top"><b class="command">smbpasswd(8)</b></a> command as shown here: -</p><p> -</p><pre class="screen"> +</p><ns7:p> +</ns7:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -a -m <i class="replaceable"><tt>machine_name</tt></i></tt></b> -</pre><p> -</p><p> +</pre><ns7:p> +</ns7:p><p> where <i class="replaceable"><tt>machine_name</tt></i> is the machine's NetBIOS name. The RID of the new machine account is generated from the UID of the corresponding Unix account. @@ -156,7 +157,7 @@ the corresponding Unix account. your domain using a machine with the same NetBIOS name. A PDC inherently trusts members of the domain and will serve out a large degree of user information to such clients. You have been warned! - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898440"></a>Using NT4 Server Manager to Add Machine Accounts to the Domain</h3></div></div><div></div></div><p> + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896748"></a>Using NT4 Server Manager to Add Machine Accounts to the Domain</h3></div></div><div></div></div><p> If the machine from which you are trying to manage the domain is an <span class="application">MS Windows NT4 workstation</span> then the tool of choice is the package called <b class="command">SRVTOOLS.EXE</b>. @@ -187,7 +188,7 @@ Launch the <b class="command">srvmgr.exe</b> (Server Manager for Domains) and fo <span class="guilabel">Add NT Workstation of Server</span>, then enter the machine name in the field provided, then click the <span class="guibutton">Add</span> button. - </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898636"></a>"On-the-Fly" Creation of Machine Trust Accounts</h3></div></div><div></div></div><p> + </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896944"></a>"On-the-Fly" Creation of Machine Trust Accounts</h3></div></div><div></div></div><p> The second (and recommended) way of creating machine trust accounts is simply to allow the Samba server to create them as needed when the client is joined to the domain. @@ -202,10 +203,10 @@ Below is an example for a RedHat Linux system. [global] # <...remainder of parameters...> add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898699"></a>Making an MS Windows Workstation or Server a Domain Member</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897000"></a>Making an MS Windows Workstation or Server a Domain Member</h3></div></div><div></div></div><p> The procedure for making an MS Windows workstation of server a member of the domain varies with the version of Windows: -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2898711"></a>Windows 200x XP Professional</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897012"></a>Windows 200x XP Professional</h4></div></div><div></div></div><p> When the user elects to make the client a domain member, Windows 200x prompts for an account and password that has privileges to create machine accounts in the domain. A Samba administrative account (i.e., a Samba account that has root privileges on the @@ -225,7 +226,7 @@ with the version of Windows: encryption key for setting the password of the machine trust account. The machine trust account will be created on-the-fly, or updated if it already exists. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2898779"></a>Windows NT4</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897081"></a>Windows NT4</h4></div></div><div></div></div><p> If the machine trust account was created manually, on the Identification Changes menu enter the domain name, but do not check the box <span class="guilabel">Create a Computer Account in the Domain</span>. @@ -238,7 +239,7 @@ with the version of Windows: Domain</span>. In this case, joining the domain proceeds as above for Windows 2000 (i.e., you must supply a Samba administrative account when prompted). - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2898820"></a>Samba</h4></div></div><div></div></div><p>Joining a Samba client to a domain is documented in + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897121"></a>Samba</h4></div></div><div></div></div><p>Joining a Samba client to a domain is documented in the <a href="domain-member.html#domain-member-server" title="Domain Member Server">Domain Member Server</a> section of this chapter chapter. </p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="domain-member-server"></a>Domain Member Server</h2></div></div><div></div></div><p> This mode of server operation involves the Samba machine being made a member @@ -260,28 +261,28 @@ for more information regarding how to create a domain machine account for a domain member server as well as for information regarding how to enable the Samba domain member machine to join the domain and to be fully trusted by it. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898901"></a>Joining an NT4 type Domain with Samba-3</h3></div></div><div></div></div><p> - </p><div class="table"><a name="id2898912"></a><p class="title"><b>Table7.1.Assumptions</b></p><table summary="Assumptions" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">NetBIOS name:</td><td align="left">SERV1</td></tr><tr><td align="left">Win2K/NT domain name:</td><td align="left">DOM</td></tr><tr><td align="left">Domain's PDC NetBIOS name:</td><td align="left">DOMPDC</td></tr><tr><td align="left">Domain's BDC NetBIOS names:</td><td align="left">DOMBDC1 and DOMBDC2</td></tr></tbody></table></div><p> -</p><p> +</p><div xmlns:ns8="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897196"></a>Joining an NT4 type Domain with Samba-3</h3></div></div><div></div></div><ns8:p> + </ns8:p><div class="table"><a name="id2897206"></a><p class="title"><b>Table7.1.Assumptions</b></p><table summary="Assumptions" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">NetBIOS name:</td><td align="left">SERV1</td></tr><tr><td align="left">Win2K/NT domain name:</td><td align="left">DOM</td></tr><tr><td align="left">Domain's PDC NetBIOS name:</td><td align="left">DOMPDC</td></tr><tr><td align="left">Domain's BDC NetBIOS names:</td><td align="left">DOMBDC1 and DOMBDC2</td></tr></tbody></table></div><ns8:p> +</ns8:p><p> First, you must edit your <tt class="filename">smb.conf</tt> file to tell Samba it should now use domain security. </p><p> Change (or add) your <a href="smb.conf.5.html#SECURITY" target="_top"> <i class="parameter"><tt>security</tt></i></a> line in the [global] section of your <tt class="filename">smb.conf</tt> to read: -</p><p> -</p><pre class="programlisting"> +</p><ns8:p> +</ns8:p><pre class="programlisting"> security = domain -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> Next change the <a href="smb.conf.5.html#WORKGROUP" target="_top"><i class="parameter"><tt> workgroup</tt></i></a> line in the <i class="parameter"><tt>[global]</tt></i> section to read: -</p><p> -</p><pre class="programlisting"> +</p><ns8:p> +</ns8:p><pre class="programlisting"> workgroup = DOM -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> as this is the name of the domain we are joining. </p><p> You must also have the parameter <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top"> @@ -291,11 +292,11 @@ You must also have the parameter <a href="smb.conf.5.html#ENCRYPTPASSWORDS" targ Finally, add (or modify) a <a href="smb.conf.5.html#PASSWORDSERVER" target="_top"> <i class="parameter"><tt>password server</tt></i></a> line in the [global] section to read: -</p><p> -</p><pre class="programlisting"> +</p><ns8:p> +</ns8:p><pre class="programlisting"> password server = DOMPDC DOMBDC1 DOMBDC2 -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> These are the primary and backup domain controllers Samba will attempt to contact in order to authenticate users. Samba will try to contact each of these servers in order, so you may want to @@ -305,21 +306,21 @@ among domain controllers. Alternatively, if you want smbd to automatically determine the list of Domain controllers to use for authentication, you may set this line to be: -</p><p> -</p><pre class="programlisting"> +</p><ns8:p> +</ns8:p><pre class="programlisting"> password server = * -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> This method allows Samba to use exactly the same mechanism that NT does. This method either broadcasts or uses a WINS database in order to find domain controllers to authenticate against. </p><p> In order to actually join the domain, you must run this command: -</p><p> -</p><pre class="screen"> +</p><ns8:p> +</ns8:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net join -S DOMPDC -U<i class="replaceable"><tt>Administrator%password</tt></i></tt></b> -</pre><p> -</p><p> +</pre><ns8:p> +</ns8:p><p> If the <tt class="option">-S DOMPDC</tt> argument is not given then the domain name will be obtained from <tt class="filename">smb.conf</tt>. </p><p> @@ -354,7 +355,7 @@ as a shadow password file. </p><p> Finally, restart your Samba daemons and get ready for clients to begin using domain security! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899283"></a>Why is this better than security = server?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899872"></a>Why is this better than security = server?</h3></div></div><div></div></div><p> Currently, domain security in Samba doesn't free you from having to create local Unix users to represent the users attaching to your server. This means that if domain user <tt class="constant">DOM\fred @@ -398,27 +399,30 @@ the NIS/NT Samba</a>. </p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ads-member"></a>Samba ADS Domain Membership</h2></div></div><div></div></div><p> This is a rough guide to setting up Samba 3.0 with Kerberos authentication against a Windows2000 KDC. A familiarity with Kerberos is assumed. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899424"></a>Setup your <tt class="filename">smb.conf</tt></h3></div></div><div></div></div><p> +</p><div xmlns:ns9="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900011"></a>Setup your <tt class="filename">smb.conf</tt></h3></div></div><div></div></div><p> You must use at least the following 3 options in <tt class="filename">smb.conf</tt>: </p><pre class="programlisting"> realm = your.kerberos.REALM security = ADS encrypt passwords = yes -</pre><p> +</pre><ns9:p> In case samba can't figure out your ads server using your realm name, use the <i class="parameter"><tt>ads server</tt></i> option in <tt class="filename">smb.conf</tt>: -</p><pre class="programlisting"> +</ns9:p><pre class="programlisting"> ads server = your.kerberos.server -</pre><p> -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><ns9:p> +</ns9:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> You do <span class="emphasis"><em>not</em></span> need a smbpasswd file, and older clients will be authenticated as if <i class="parameter"><tt>security = domain</tt></i>, although it won't do any harm and allows you to have local users not in the domain. It is expected that the above required options will change soon when active directory integration will get better. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899508"></a>Setup your <tt class="filename">/etc/krb5.conf</tt></h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900094"></a>Setup your <tt class="filename">/etc/krb5.conf</tt></h3></div></div><div></div></div><p> The minimal configuration for <tt class="filename">krb5.conf</tt> is: </p><pre class="programlisting"> + [libdefaults] + default_realm = YOUR.KERBEROS.REALM + [realms] YOUR.KERBEROS.REALM = { kdc = your.kerberos.server @@ -451,20 +455,20 @@ straight to <a href="domain-member.html#ads-test-smbclient" title="Testing with <a href="domain-member.html#ads-create-machine-account" title="Create the computer account">Creating a computer account</a> and <a href="domain-member.html#ads-test-server" title="Test your server setup">testing your servers</a> is only needed if you want Kerberos support for <span class="application">smbd</span> and <span class="application">winbindd</span>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-create-machine-account"></a>Create the computer account</h3></div></div><div></div></div><p> +</p></div><div xmlns:ns10="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-create-machine-account"></a>Create the computer account</h3></div></div><div></div></div><ns10:p> As a user that has write permission on the Samba private directory (usually root) run: -</p><pre class="programlisting"> +</ns10:p><pre class="programlisting"> <tt class="prompt">root# </tt><b class="userinput"><tt>net join -U Administrator%password</tt></b> -</pre><p> -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2899718"></a>Possible errors</h4></div></div><div></div></div><p> -</p><div class="variablelist"><dl><dt><span class="term"><span class="errorname">ADS support not compiled in</span></span></dt><dd><p>Samba must be reconfigured (remove config.cache) and recompiled +</pre><ns10:p> +</ns10:p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2900292"></a>Possible errors</h4></div></div><div></div></div><ns10:p> +</ns10:p><div class="variablelist"><dl><dt><span class="term"><span class="errorname">ADS support not compiled in</span></span></dt><dd><p>Samba must be reconfigured (remove config.cache) and recompiled (make clean all install) after the Kerberos libs and headers are installed. </p></dd><dt><span class="term"><span class="errorname">net join prompts for user name</span></span></dt><dd><p>You need to login to the domain using <b class="userinput"><tt>kinit <i class="replaceable"><tt>USERNAME</tt></i>@<i class="replaceable"><tt>REALM</tt></i></tt></b>. <i class="replaceable"><tt>USERNAME</tt></i> must be a user who has rights to add a machine - to the domain. </p></dd></dl></div><p> -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-server"></a>Test your server setup</h3></div></div><div></div></div><p> + to the domain. </p></dd></dl></div><ns10:p> +</ns10:p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-server"></a>Test your server setup</h3></div></div><div></div></div><p> If the join was successful, you will see a new computer account with the NetBIOS name of your Samba server in Active Directory (in the "Computers" folder under Users and Computers. @@ -477,13 +481,13 @@ server? Does it have an encoding type of DES-CBC-MD5 ? On your Samba server try to login to a Win2000 server or your Samba server using <span class="application">smbclient</span> and Kerberos. Use <span class="application">smbclient</span> as usual, but specify the <i class="parameter"><tt>-k</tt></i> option to choose Kerberos authentication. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899872"></a>Notes</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900442"></a>Notes</h3></div></div><div></div></div><p> You must change administrator password at least once after DC install, to create the right encoding types </p><p> W2k doesn't seem to create the _kerberos._udp and _ldap._tcp in their defaults DNS setup. Maybe fixed in service packs? -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899892"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2900464"></a>Common Errors</h2></div></div><div></div></div><p> In the process of adding / deleting / re-adding domain member machine accounts there are many traps for the unwary player and there are many “<span class="quote">little</span>” things that can go wrong. It is particularly interesting how often subscribers on the samba mailing list have concluded @@ -491,7 +495,7 @@ after repeated failed attempts to add a machine account that it is necessary to MS Windows on t he machine. In truth, it is seldom necessary to reinstall because of this type of problem. The real solution is often very simple, and with understanding of how MS Windows networking functions. easily overcome. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899919"></a>Can Not Add Machine Back to Domain</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900491"></a>Can Not Add Machine Back to Domain</h3></div></div><div></div></div><p> <span class="emphasis"><em>Problem:</em></span> A Windows workstation was reinstalled. The original domain machine account was deleted and added immediately. The workstation will not join the domain if I use the same machine name. Attempts to add the machine fail with a message that the machine already @@ -500,7 +504,7 @@ exists on the network - I know it doesn't. Why is this failing? The original name is still in the NetBIOS name cache and must expire after machine account deletion BEFORE adding that same name as a domain member again. The best advice is to delete the old account and then to add the machine with a new name. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899951"></a>Adding Machine to Domain Fails</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900523"></a>Adding Machine to Domain Fails</h3></div></div><div></div></div><p> Adding a Windows 200x or XP Professional machine to the Samba PDC Domain fails with a message that, <span class="errorname">The machine could not be added at this time, there is a network problem. Please try again later.</span> Why? diff --git a/docs/htmldocs/groupmapping.html b/docs/htmldocs/groupmapping.html index 39fb34ce62..aebddeeb08 100644 --- a/docs/htmldocs/groupmapping.html +++ b/docs/htmldocs/groupmapping.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter12.Mapping MS Windows and Unix Groups</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="passdb.html" title="Chapter11.Account Information Databases"><link rel="next" href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter12.Mapping MS Windows and Unix Groups</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="passdb.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="AccessControls.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="groupmapping"></a>Chapter12.Mapping MS Windows and Unix Groups</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Franois</span> <span class="surname">Micouleau</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="groupmapping.html#id2921449">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2921551">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2921742">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2921806">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2921820">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2921889">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2921981">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2921997">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2922057">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter12.Mapping MS Windows and Unix Groups</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="passdb.html" title="Chapter11.Account Information Databases"><link rel="next" href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter12.Mapping MS Windows and Unix Groups</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="passdb.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="AccessControls.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="groupmapping"></a>Chapter12.Mapping MS Windows and Unix Groups</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Franois</span> <span class="surname">Micouleau</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="groupmapping.html#id2916467">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2916568">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2916756">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2916822">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2916836">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2916903">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2916977">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2916993">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2917053">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></div><p> Starting with Samba-3, new group mapping functionality is available to create associations between Windows group SIDs and UNIX groups. The <i class="parameter"><tt>groupmap</tt></i> subcommand included with the <span class="application">net</span> tool can be used to manage these associations. @@ -8,7 +9,7 @@ be specified in <tt class="filename">smb.conf</tt>. This parameter was used to give the listed users membership in the <tt class="constant">Domain Admins</tt> Windows group which gave local admin rights on their workstations (in default configurations). - </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921449"></a>Features and Benefits</h2></div></div><div></div></div><p> + </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916467"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba allows the administrator to create MS Windows NT4 / 200x group accounts and to arbitrarily associate them with Unix/Linux group accounts. </p><p> @@ -31,7 +32,7 @@ Another work-around is to manually create a Unix/Linux group, then manually create the MS Windows NT4 / 200x group on the Samba server and then use the <b class="command">net groupmap</b> tool to connect the two to each other. - </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921551"></a>Discussion</h2></div></div><div></div></div><p> + </p></div><div xmlns:ns27="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916568"></a>Discussion</h2></div></div><div></div></div><p> When installing <span class="application">MS Windows NT4 / 200x</span> on a computer, the installation program creates default users and groups, notably the <tt class="constant">Administrators</tt> group, and gives that group privileges necessary privileges to perform essential system tasks. @@ -50,19 +51,19 @@ The following steps describe how to make Samba PDC users members of the 'Domain Admins' group? </p><div class="orderedlist"><ol type="1"><li><p> create a unix group (usually in <tt class="filename">/etc/group</tt>), let's call it domadm - </p></li><li><p>add to this group the users that must be Administrators. For example + </p></li><li xmlns:ns25=""><p>add to this group the users that must be Administrators. For example if you want joe, john and mary, your entry in <tt class="filename">/etc/group</tt> will look like: </p><pre class="programlisting"> domadm:x:502:joe,john,mary - </pre><p> - </p></li><li><p> + </pre><ns25:p> + </ns25:p></li><li xmlns:ns26=""><p> Map this domadm group to the "Domain Admins" group by running the command: - </p><p> - </p><pre class="screen"> + </p><ns26:p> + </ns26:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add ntgroup="Domain Admins" unixgroup=domadm</tt></b> - </pre><p> - </p><p> + </pre><ns26:p> + </ns26:p><p> The quotes around "Domain Admins" are necessary due to the space in the group name. Also make sure to leave no whitespace surrounding the equal character (=). </p></li></ol></div><p> @@ -72,36 +73,36 @@ making any UNIX group a Windows domain group. For example, if you wanted to include a UNIX group (e.g. acct) in a ACL on a local file or printer on a domain member machine, you would flag that group as a domain group by running the following on the Samba PDC: - </p><p> - </p><pre class="screen"> + </p><ns27:p> + </ns27:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add rid=1000 ntgroup="Accounting" unixgroup=acct</tt></b> - </pre><p> - </p><p> + </pre><ns27:p> + </ns27:p><p> Be aware that the RID parameter is a unsigned 32 bit integer that should normally start at 1000. However, this rid must not overlap with any RID assigned to a user. Verifying this is done differently depending on on the passdb backend you are using. Future versions of the tools may perform the verification automatically, but for now the burden is on you. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921742"></a>Example Configuration</h3></div></div><div></div></div><p> + </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916756"></a>Example Configuration</h3></div></div><div></div></div><p> You can list the various groups in the mapping database by executing <b class="command">net groupmap list</b>. Here is an example: - </p><p> - </p><pre class="screen"> + </p><ns27:p> + </ns27:p><pre class="screen"> <tt class="prompt">root# </tt> <b class="userinput"><tt>net groupmap list</tt></b> System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -> sysadmin Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -> domadmin Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -> domuser Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -> domguest - </pre><p> - </p><p> + </pre><ns27:p> + </ns27:p><p> For complete details on <b class="command">net groupmap</b>, refer to the net(8) man page. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921806"></a>Configuration Scripts</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916822"></a>Configuration Scripts</h2></div></div><div></div></div><p> Everyone needs tools. Some of us like to create our own, others prefer to use canned tools (ie: prepared by someone else for general use). - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921820"></a>Sample <tt class="filename">smb.conf</tt> add group script</h3></div></div><div></div></div><p> + </p><div xmlns:ns28="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916836"></a>Sample <tt class="filename">smb.conf</tt> add group script</h3></div></div><div></div></div><p> A script to great complying group names for use by the Samba group interfaces: - </p><p> -</p><div class="example"><a name="id2921843"></a><p class="title"><b>Example12.1.smbgrpadd.sh</b></p><pre class="programlisting"> + </p><ns28:p> +</ns28:p><div class="example"><a name="id2916858"></a><p class="title"><b>Example12.1.smbgrpadd.sh</b></p><pre class="programlisting"> #!/bin/bash @@ -117,17 +118,17 @@ cat /etc/group.bak | sed s/smbtmpgrp00/$1/g > /etc/group # Now return the GID as would normally happen. echo $thegid exit 0 -</pre></div><p> -</p><p> +</pre></div><ns28:p> +</ns28:p><ns28:p> The <tt class="filename">smb.conf</tt> entry for the above script would look like: - </p><pre class="programlisting"> + </ns28:p><pre class="programlisting"> add group script = /path_to_tool/smbgrpadd.sh %g - </pre><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921889"></a>Script to configure Group Mapping</h3></div></div><div></div></div><p> + </pre><ns28:p> + </ns28:p></div><div xmlns:ns29="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916903"></a>Script to configure Group Mapping</h3></div></div><div></div></div><p> In our example we have created a Unix/Linux group called <i class="parameter"><tt>ntadmin</tt></i>. Our script will create the additional groups <i class="parameter"><tt>Engineers, Marketoids, Gnomes</tt></i>: - </p><p> -</p><pre class="programlisting"> + </p><ns29:p> +</ns29:p><pre class="programlisting"> #!/bin/bash net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmin @@ -150,16 +151,16 @@ net groupmap modify ntgroup="Power Users" unixgroup=sys #net groupmap add ntgroup="Engineers" unixgroup=Engineers type=d #net groupmap add ntgroup="Marketoids" unixgroup=Marketoids type=d #net groupmap add ntgroup="Gnomes" unixgroup=Gnomes type=d -</pre><p> -</p><p> +</pre><ns29:p> +</ns29:p><p> Of course it is expected that the administrator will modify this to suit local needs. For information regarding the use of the <b class="command">net groupmap</b> tool please refer to the man page. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921981"></a>Common Errors</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916977"></a>Common Errors</h2></div></div><div></div></div><p> At this time there are many little surprises for the unwary administrator. In a real sense it is imperative that every step of automated control scripts must be carefully tested manually before putting them into active service. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921997"></a>Adding Groups Fails</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916993"></a>Adding Groups Fails</h3></div></div><div></div></div><p> This is a common problem when the <b class="command">groupadd</b> is called directly by the Samba interface script for the <i class="parameter"><tt>add group script</tt></i> in the <tt class="filename">smb.conf</tt> file. @@ -173,6 +174,6 @@ manually before putting them into active service. third option is to manually create a Unix/Linux group account that can substitute for the MS Windows group name, then use the procedure listed above to map that group to the MS Windows group. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922057"></a>Adding MS Windows Groups to MS Windows Groups Fails</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917053"></a>Adding MS Windows Groups to MS Windows Groups Fails</h3></div></div><div></div></div><p> Samba-3 does NOT support nested groups from the MS Windows control environment. </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="passdb.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="AccessControls.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter11.Account Information Databases</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter13.File, Directory and Share Access Controls</td></tr></table></div></body></html> diff --git a/docs/htmldocs/index.html b/docs/htmldocs/index.html index f7bc47b7c8..fb21bbe639 100755 --- a/docs/htmldocs/index.html +++ b/docs/htmldocs/index.html @@ -1,3 +1,4 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>SAMBA Project Documentation</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><meta name="description" content=" This book is a collection of HOWTOs added to Samba documentation over the years. Samba is always under development, and so is its' documentation. This release of the @@ -16,14 +17,14 @@ insignificant number of ideas for inclusion (if not content itself) has been obt from a number of Unofficial HOWTOs - to each such author a big "Thank-you" is also offered. Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and application knowledge that is most to be desired by many Samba users and administrators. -"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="next" href="introduction.html" title="PartI.General Installation"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">SAMBA Project Documentation</th></tr><tr><td width="20%" align="left"></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="introduction.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-HOWTO-Collection"></a>SAMBA Project Documentation</h1></div><div><div class="authorgroup"><h4 class="editedby">Edited by</h4><h3 class="editor"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><h3 class="editor"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><h3 class="editor"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3></div></div><div><div class="legalnotice"><p> +"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="next" href="introduction.html" title="PartI.General Installation"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">SAMBA Project Documentation</th></tr><tr><td width="20%" align="left"></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="introduction.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-HOWTO-Collection"></a>SAMBA Project Documentation</h1></div><div><div class="authorgroup"><h4 class="editedby">Edited by</h4><h3 class="editor"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><h3 class="editor"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><h3 class="editor"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3></div></div><div><div xmlns:ns1="" class="legalnotice"><p> This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at <a href="http://www.fsf.org/licenses/gpl.txt" target="_top">http://www.fsf.org/licenses/gpl.txt</a> -</p><p><b>Attributions.</b> - </p><div class="variablelist"><dl><dt><span class="term"><a href="IntroSMB.html" title="Chapter1.Introduction to Samba">Introduction to Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>David Lechnyr <<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="install.html" title="Chapter2.How to Install and Test SAMBA">How to Install and Test SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Karl Auer</p></li></ul></div></dd><dt><span class="term"><a href="FastStart.html" title="Chapter3.Fast Start for the Impatient">Fast Start for the Impatient</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="ServerType.html" title="Chapter4.Server Types and Security Modes">Server Types and Security Modes</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="samba-pdc.html" title="Chapter5.Domain Control">Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>David Bannon <<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="samba-bdc.html" title="Chapter6.Backup Domain Control">Backup Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Volker Lendecke <<a href="mailto:Volker.Lendecke@SerNet.DE" target="_top">Volker.Lendecke@SerNet.DE</a>></p></li></ul></div></dd><dt><span class="term"><a href="domain-member.html" title="Chapter7.Domain Membership">Domain Membership</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers">Stand-Alone Servers</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide">MS Windows Network Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide">Samba / MS Windows Network Browsing Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="passdb.html" title="Chapter11.Account Information Databases">Account Information Databases</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Olivier (lem) Lemaire <<a href="mailto:olem@IDEALX.org" target="_top">olem@IDEALX.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups">Mapping MS Windows and Unix Groups</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jean Franois Micouleau</p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls">File, Directory and Share Access Controls</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="locking.html" title="Chapter14.File and Record Locking">File and Record Locking</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Eric Roseme <<a href="mailto:eric.roseme@hp.com" target="_top">eric.roseme@hp.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="securing-samba.html" title="Chapter15.Securing Samba">Securing Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships">Interdomain Trust Relationships</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Rafal Szczesniak <<a href="mailto:mimir@samba.org" target="_top">mimir@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba">Hosting a Microsoft Distributed File System tree on Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Shirish Kalele <<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="printing.html" title="Chapter18.Classical Printing Support">Classical Printing Support</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle <<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing Support in Samba 3.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle <<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>></p></li><li><p>Ciprian Vizitiu <<a href="mailto:CVizitiu@gbif.org" target="_top">CVizitiu@gbif.org</a>> (drawings) </p></li></ul></div></dd><dt><span class="term"><a href="VFS.html" title="Chapter20.Stackable VFS modules">Stackable VFS modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Tim Potter</p></li><li><p>Simo Sorce (original vfs_skel README) </p></li><li><p>Alexander Bokovoy (original vfs_netatalk docs) </p></li><li><p>Stefan Metzmacher (Update for multiple modules) </p></li></ul></div></dd><dt><span class="term"><a href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind">Integrated Logon Support using Winbind</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Tim Potter <<a href="mailto:tpot@linuxcare.com.au" target="_top">tpot@linuxcare.com.au</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Naag Mummaneni <<a href="mailto:getnag@rediffmail.com" target="_top">getnag@rediffmail.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management">Advanced Network Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="PolicyMgmt.html" title="Chapter23.System and Account Policies">System and Account Policies</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management">Desktop Profile Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="pam.html" title="Chapter25.PAM based Distributed Authentication">PAM based Distributed Authentication</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Stephen Langasek <<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>></p></li></ul></div></dd><dt><span class="term"><a href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba">Integrating MS Windows networks with Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="unicode.html" title="Chapter27.Unicode/Charsets">Unicode/Charsets</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>TAKAHASHI Motonobu <<a href="mailto:monyo@home.monyo.com" target="_top">monyo@home.monyo.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="Backup.html" title="Chapter28.Samba Backup Techniques">Samba Backup Techniques</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="SambaHA.html" title="Chapter29.High Availability Options">High Availability Options</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0">Upgrading from Samba-2.x to Samba-3.0.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC">Migration from NT4 PDC to Samba-3 PDC</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool">SWAT - The Samba Web Administration Tool</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="diagnosis.html" title="Chapter33.The Samba checklist">The Samba checklist</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="problems.html" title="Chapter34.Analysing and solving samba problems">Analysing and solving samba problems</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>David Bannon <<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="bugreport.html" title="Chapter35.Reporting Bugs">Reporting Bugs</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p> Someone; Tridge or Karl Auer perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="compiling.html" title="Chapter36.How to compile SAMBA">How to compile SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p> Someone; Jerry perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="Portability.html" title="Chapter37.Portability">Portability</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients">Samba and other CIFS clients</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jim McDonough <<a href="mailto:jmcd@us.ibm.com" target="_top">jmcd@us.ibm.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="speed.html" title="Chapter39.Samba Performance Tuning">Samba Performance Tuning</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Paul Cochrane <<a href="mailto:paulc@dth.scot.nhs.uk" target="_top">paulc@dth.scot.nhs.uk</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide">DNS and DHCP Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="Further-Resources.html" title="Chapter41.Further Resources">Further Resources</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>David Lechnyr <<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>></p></li></ul></div></dd></dl></div><p> +</p><ns1:p><b>Attributions.</b> + </ns1:p><div class="variablelist"><dl><dt><span class="term"><a href="IntroSMB.html" title="Chapter1.Introduction to Samba">Introduction to Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>David Lechnyr <<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="install.html" title="Chapter2.How to Install and Test SAMBA">How to Install and Test SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Karl Auer</p></li></ul></div></dd><dt><span class="term"><a href="FastStart.html" title="Chapter3.Fast Start for the Impatient">Fast Start for the Impatient</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="ServerType.html" title="Chapter4.Server Types and Security Modes">Server Types and Security Modes</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="samba-pdc.html" title="Chapter5.Domain Control">Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>David Bannon <<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="samba-bdc.html" title="Chapter6.Backup Domain Control">Backup Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Volker Lendecke <<a href="mailto:Volker.Lendecke@SerNet.DE" target="_top">Volker.Lendecke@SerNet.DE</a>></p></li></ul></div></dd><dt><span class="term"><a href="domain-member.html" title="Chapter7.Domain Membership">Domain Membership</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers">Stand-Alone Servers</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide">MS Windows Network Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide">Samba / MS Windows Network Browsing Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="passdb.html" title="Chapter11.Account Information Databases">Account Information Databases</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Olivier (lem) Lemaire <<a href="mailto:olem@IDEALX.org" target="_top">olem@IDEALX.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups">Mapping MS Windows and Unix Groups</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jean Franois Micouleau</p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls">File, Directory and Share Access Controls</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="locking.html" title="Chapter14.File and Record Locking">File and Record Locking</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison <<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Eric Roseme <<a href="mailto:eric.roseme@hp.com" target="_top">eric.roseme@hp.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="securing-samba.html" title="Chapter15.Securing Samba">Securing Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships">Interdomain Trust Relationships</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Rafal Szczesniak <<a href="mailto:mimir@samba.org" target="_top">mimir@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba">Hosting a Microsoft Distributed File System tree on Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Shirish Kalele <<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="printing.html" title="Chapter18.Classical Printing Support">Classical Printing Support</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle <<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>></p></li><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing Support in Samba 3.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle <<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>></p></li><li><p>Ciprian Vizitiu <<a href="mailto:CVizitiu@gbif.org" target="_top">CVizitiu@gbif.org</a>> (drawings) </p></li></ul></div></dd><dt><span class="term"><a href="VFS.html" title="Chapter20.Stackable VFS modules">Stackable VFS modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Tim Potter</p></li><li><p>Simo Sorce (original vfs_skel README) </p></li><li><p>Alexander Bokovoy (original vfs_netatalk docs) </p></li><li><p>Stefan Metzmacher (Update for multiple modules) </p></li></ul></div></dd><dt><span class="term"><a href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind">Integrated Logon Support using Winbind</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Tim Potter <<a href="mailto:tpot@samba.org" target="_top">tpot@samba.org</a>></p></li><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Naag Mummaneni <<a href="mailto:getnag@rediffmail.com" target="_top">getnag@rediffmail.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management">Advanced Network Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="PolicyMgmt.html" title="Chapter23.System and Account Policies">System and Account Policies</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management">Desktop Profile Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="pam.html" title="Chapter25.PAM based Distributed Authentication">PAM based Distributed Authentication</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li><li><p>Stephen Langasek <<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>></p></li></ul></div></dd><dt><span class="term"><a href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba">Integrating MS Windows networks with Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="unicode.html" title="Chapter27.Unicode/Charsets">Unicode/Charsets</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>TAKAHASHI Motonobu <<a href="mailto:monyo@home.monyo.com" target="_top">monyo@home.monyo.com</a>></p></li></ul></div></dd><dt><span class="term"><a href="Backup.html" title="Chapter28.Samba Backup Techniques">Samba Backup Techniques</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="SambaHA.html" title="Chapter29.High Availability Options">High Availability Options</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0">Upgrading from Samba-2.x to Samba-3.0.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC">Migration from NT4 PDC to Samba-3 PDC</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool">SWAT - The Samba Web Administration Tool</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="diagnosis.html" title="Chapter33.The Samba checklist">The Samba checklist</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell <<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="problems.html" title="Chapter34.Analysing and solving samba problems">Analysing and solving samba problems</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter <<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>David Bannon <<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="bugreport.html" title="Chapter35.Reporting Bugs">Reporting Bugs</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p> Someone; Tridge or Karl Auer perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="compiling.html" title="Chapter36.How to compile SAMBA">How to compile SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p> Someone; Jerry perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="Portability.html" title="Chapter37.Portability">Portability</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients">Samba and other CIFS clients</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jim McDonough <<a href="mailto:jmcd@us.ibm.com" target="_top">jmcd@us.ibm.com</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="speed.html" title="Chapter39.Samba Performance Tuning">Samba Performance Tuning</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Paul Cochrane <<a href="mailto:paulc@dth.scot.nhs.uk" target="_top">paulc@dth.scot.nhs.uk</a>></p></li><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide">DNS and DHCP Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra <<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>></p></li></ul></div></dd><dt><span class="term"><a href="Further-Resources.html" title="Chapter41.Further Resources">Further Resources</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij <<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>></p></li><li><p>David Lechnyr <<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>></p></li></ul></div></dd></dl></div><ns1:p> - </p></div></div><div><p class="pubdate">Monday April 21, 2003</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> + </ns1:p></div></div><div><p class="pubdate">Monday April 21, 2003</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> This book is a collection of HOWTOs added to Samba documentation over the years. Samba is always under development, and so is its' documentation. This release of the documentation represents a major revision or layout as well as contents. @@ -41,36 +42,36 @@ insignificant number of ideas for inclusion (if not content itself) has been obt from a number of Unofficial HOWTOs - to each such author a big "Thank-you" is also offered. Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and application knowledge that is most to be desired by many Samba users and administrators. -</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>I. <a href="introduction.html">General Installation</a></dt><dd><dl><dt>1. <a href="IntroSMB.html">Introduction to Samba</a></dt><dd><dl><dt><a href="IntroSMB.html#id2885613">Background</a></dt><dt><a href="IntroSMB.html#id2885824">Terminology</a></dt><dt><a href="IntroSMB.html#id2885978">Related Projects</a></dt><dt><a href="IntroSMB.html#id2886047">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2886135">Epilogue</a></dt><dt><a href="IntroSMB.html#id2886209">Miscellaneous</a></dt></dl></dd><dt>2. <a href="install.html">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="install.html#id2886868">Obtaining and installing samba</a></dt><dt><a href="install.html#id2886909">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2886946">Example Configuration</a></dt><dt><a href="install.html#id2887096">SWAT</a></dt></dl></dd><dt><a href="install.html#id2887140">Try listing the shares available on your - server</a></dt><dt><a href="install.html#id2887191">Try connecting with the unix client</a></dt><dt><a href="install.html#id2887292">Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client</a></dt><dt><a href="install.html#id2887355">What If Things Don't Work?</a></dt><dt><a href="install.html#id2887388">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2887401">Why are so many smbd processes eating memory?</a></dt><dt><a href="install.html#id2887617">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="FastStart.html">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="FastStart.html#id2886744">Note</a></dt></dl></dd></dl></dd><dt>II. <a href="type.html">Server Configuration Basics</a></dt><dd><dl><dt>4. <a href="ServerType.html">Server Types and Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2888767">Features and Benefits</a></dt><dt><a href="ServerType.html#id2888862">Server Types</a></dt><dt><a href="ServerType.html#id2888947">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2889062">User Level Security</a></dt><dt><a href="ServerType.html#id2889195">Share Level Security</a></dt><dt><a href="ServerType.html#id2889317">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2889568">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2889655">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2889880">Seamless Windows Network Integration</a></dt><dt><a href="ServerType.html#id2890056">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2890084">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2890117">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2890146">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2890179">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="samba-pdc.html">Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2891986">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2892290">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2892306">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2892517">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2892837">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2893136">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2893157">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893173">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2893499">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2893607">Common Problems and Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893614">I cannot include a '$' in a machine name</a></dt><dt><a href="samba-pdc.html#id2893653">I get told "You already have a connection to the Domain...." +</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>I. <a href="introduction.html">General Installation</a></dt><dd><dl><dt>1. <a href="IntroSMB.html">Introduction to Samba</a></dt><dd><dl><dt><a href="IntroSMB.html#id2885266">Background</a></dt><dt><a href="IntroSMB.html#id2885320">Terminology</a></dt><dt><a href="IntroSMB.html#id2884044">Related Projects</a></dt><dt><a href="IntroSMB.html#id2884112">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2884199">Epilogue</a></dt><dt><a href="IntroSMB.html#id2884272">Miscellaneous</a></dt></dl></dd><dt>2. <a href="install.html">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="install.html#id2885039">Obtaining and installing samba</a></dt><dt><a href="install.html#id2885081">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2884654">Example Configuration</a></dt><dt><a href="install.html#id2884797">SWAT</a></dt></dl></dd><dt><a href="install.html#id2884842">Try listing the shares available on your + server</a></dt><dt><a href="install.html#id2884347">Try connecting with the unix client</a></dt><dt><a href="install.html#id2884450">Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client</a></dt><dt><a href="install.html#id2884510">What If Things Don't Work?</a></dt><dt><a href="install.html#id2884540">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2884553">Why are so many smbd processes eating memory?</a></dt><dt><a href="install.html#id2885931">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="FastStart.html">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="FastStart.html#id2886380">Note</a></dt></dl></dd></dl></dd><dt>II. <a href="type.html">Server Configuration Basics</a></dt><dd><dl><dt>4. <a href="ServerType.html">Server Types and Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2889453">Features and Benefits</a></dt><dt><a href="ServerType.html#id2889545">Server Types</a></dt><dt><a href="ServerType.html#id2889626">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2886055">User Level Security</a></dt><dt><a href="ServerType.html#id2886188">Share Level Security</a></dt><dt><a href="ServerType.html#id2887258">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887500">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887583">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2887808">Seamless Windows Network Integration</a></dt><dt><a href="ServerType.html#id2887985">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2888013">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2888046">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2888075">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2889987">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="samba-pdc.html">Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2892619">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2890215">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2890230">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2890429">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2890744">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2891040">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2891062">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2891077">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2893804">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2893909">Common Problems and Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893916">I cannot include a '$' in a machine name</a></dt><dt><a href="samba-pdc.html#id2893954">I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.</a></dt><dt><a href="samba-pdc.html#id2893703">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2893773">The machine trust account for this computer either does not -exist or is not accessible.</a></dt><dt><a href="samba-pdc.html#id2893836">When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.</a></dt><dt><a href="samba-pdc.html#id2893863">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></dd><dt>6. <a href="samba-bdc.html">Backup Domain Control</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896028">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2896201">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896230">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2896450">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2896471">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2896497">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2896542">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896645">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2896706">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896719">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2896750">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2896783">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2896828">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="domain-member.html">Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2897897">Features and Benefits</a></dt><dt><a href="domain-member.html#id2898012">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2898188">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2898440">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2898636">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2898699">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2898901">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2899283">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2899424">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2899508">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2899872">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2899892">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2899919">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2899951">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="StandAloneServer.html">Stand-Alone Servers</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2902304">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2902501">Background</a></dt><dt><a href="StandAloneServer.html#id2902573">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2902588">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#id2902638">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2902852">Common Errors</a></dt></dl></dd><dt>9. <a href="ClientConfig.html">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="ClientConfig.html#id2901966">Note</a></dt></dl></dd></dl></dd><dt>III. <a href="optional.html">Advanced Configuration</a></dt><dd><dl><dt>10. <a href="NetworkBrowsing.html">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2903558">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2903637">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2903747">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2903764">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2903926">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2904058">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2904194">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2904320">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2904541">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2904811">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2904967">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2904984">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2905013">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2905122">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905183">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905341">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2905540">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2905565">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905650">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905663">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2905730">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905867">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905914">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2906021">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2906100">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2906720">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2906735">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2906764">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></dd><dt>11. <a href="passdb.html">Account Information Databases</a></dt><dd><dl><dt><a href="passdb.html#id2910308">Features and Benefits</a></dt><dt><a href="passdb.html#id2910636">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2910700">Important Notes About Security</a></dt><dt><a href="passdb.html#id2910954">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="passdb.html#id2911009">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2911041">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2911306">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2911458">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2911494">Plain Text</a></dt><dt><a href="passdb.html#id2911534">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2911641">tdbsam</a></dt><dt><a href="passdb.html#id2911668">ldapsam</a></dt><dt><a href="passdb.html#id2913185">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2913989">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2913997">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="passdb.html#id2914012">Users are being added to the wrong backend database</a></dt><dt><a href="passdb.html#id2914072">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="groupmapping.html">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="groupmapping.html#id2921449">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2921551">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2921742">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2921806">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2921820">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2921889">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2921981">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2921997">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2922057">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920271">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2920308">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920326">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="AccessControls.html#id2920583">Managing Directories</a></dt><dt><a href="AccessControls.html#id2920678">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2920894">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2922074">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2922346">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2922591">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2922807">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2922879">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2923178">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2923186">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2923224">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2923303">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2923425">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2923653">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2923805">Interaction with the standard Samba create mask - parameters</a></dt><dt><a href="AccessControls.html#id2924134">Interaction with the standard Samba file attribute - mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2924210">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2924224">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2924604">I have set force user and Samba still makes root the owner of all the files - I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="locking.html">File and Record Locking</a></dt><dd><dl><dt><a href="locking.html#id2928216">Features and Benefits</a></dt><dt><a href="locking.html#id2928272">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2928403">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2929049">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2929159">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2929419">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2929649">Workstation Service Entries</a></dt><dt><a href="locking.html#id2929676">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2929755">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2929785">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2929859">locking.tdb error messages</a></dt></dl></dd><dt><a href="locking.html#id2929890">Additional Reading</a></dt></dl></dd><dt>15. <a href="securing-samba.html">Securing Samba</a></dt><dd><dl><dt><a href="securing-samba.html#id2931943">Introduction</a></dt><dt><a href="securing-samba.html#id2931976">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2932050">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2932069">Using host based protection</a></dt><dt><a href="securing-samba.html#id2932140">User based protection</a></dt><dt><a href="securing-samba.html#id2932191">Using interface protection</a></dt><dt><a href="securing-samba.html#id2932244">Using a firewall</a></dt><dt><a href="securing-samba.html#id2932300">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2932362">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2932402">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2932426">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2932444">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2932469">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="InterdomainTrusts.html">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933376">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2933404">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2933488">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933501">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="InterdomainTrusts.html#id2933586">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2933622">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933649">Samba-3 as the Trusting Domain</a></dt><dt><a href="InterdomainTrusts.html#id2933790">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2933922">Common Errors</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933937">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="msdfs.html">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="msdfs.html#id2933279">Features and Benefits</a></dt><dt><a href="msdfs.html#id2934931">Common Errors</a></dt></dl></dd><dt>18. <a href="printing.html">Classical Printing Support</a></dt><dd><dl><dt><a href="printing.html#id2934522">Features and Benefits</a></dt><dt><a href="printing.html#id2934590">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2934627">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2934698">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2935615">Parameters Recommended for Use</a></dt><dt><a href="printing.html#id2935946">Parameters for Backwards Compatibility</a></dt><dt><a href="printing.html#id2936054">Parameters no longer in use</a></dt></dl></dd><dt><a href="printing.html#id2936147">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="printing.html#id2936216">Verification of "Settings in Use" with testparm</a></dt><dt><a href="printing.html#id2936305">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2936612">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="printing.html#id2936715">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2936728">The [global] Section</a></dt><dt><a href="printing.html#id2937111">The [printers] Section</a></dt><dt><a href="printing.html#id2937440">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2937660">Print Commands</a></dt><dt><a href="printing.html#id2937711">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="printing.html#id2938236">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2938516">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2938681">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2938833">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="printing.html#id2938945">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2939016">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2939247">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2939408">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2939503">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2939686">Setting Drivers for existing Printers with -rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2941408">"The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)</a></dt><dd><dl><dt><a href="printing.html#id2941428">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2941626">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2941915">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2942010">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="printing.html#id2942152">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2942185">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2942622">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2942924">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2943168">Weird Error Message Cannot connect under a -different Name</a></dt><dt><a href="printing.html#id2943267">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2943612">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2943683">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2943705">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2943751">What is Imprints?</a></dt><dt><a href="printing.html#id2943792">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2943811">The Imprints Server</a></dt><dt><a href="printing.html#id2943835">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2943987">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2944316">The addprinter command</a></dt><dt><a href="printing.html#id2944362">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="printing.html#id2944531">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2944545">Common Errors and Problems</a></dt><dd><dl><dt><a href="printing.html#id2944558">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2944591">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="CUPS-printing.html">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2953785">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2953792">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2953845">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2953900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2953979">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2954122">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2954205">More complex smb.conf Settings for -CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2954322">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2954343">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="CUPS-printing.html#id2954370">CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2954406">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2954465">Explicitly enable "raw" printing for -application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2954626">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2954719">Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2954794">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="CUPS-printing.html#id2954839">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2954940">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#id2955028">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2955125">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2955238">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2955308">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2955397">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2955420">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2955560">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2955747">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2955864">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2956034">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2956120">pstops</a></dt><dt><a href="CUPS-printing.html#id2956222">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2956377">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2956434">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2956519">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2956831">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2956944">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2956960">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2957012">"Raw" printing</a></dt><dt><a href="CUPS-printing.html#id2957066">"application/octet-stream" printing</a></dt><dt><a href="CUPS-printing.html#id2957282">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2957510">Difference between cupsomatic/foomatic-rip and -native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2957666">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2957897">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2958024">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958100">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958116">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2958155">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2958227">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958289">Network Printing (Windows clients -- UNIX/Samba Print -Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958310">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2958474">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958550">Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958605">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2958646">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958712">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958729">Printer Drivers running in "Kernel Mode" cause many -Problems</a></dt><dt><a href="CUPS-printing.html#id2958763">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2958784">CUPS: a "Magical Stone"?</a></dt><dt><a href="CUPS-printing.html#id2958811">PostScript Drivers with no major problems -- even in Kernel -Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958865"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958884">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2958976">Prepare your smb.conf for -cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2959022">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2959220">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2959278">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2959310">ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2959360">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2959582">What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="CUPS-printing.html#id2959764">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2959865">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2960092">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2960186">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="CUPS-printing.html#id2960273">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2960308">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2960361">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2960474">Avoiding critical PostScript Driver Settings on the -Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2960608">Installing PostScript Driver Files manually (using -rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2960723">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2960836">Understanding the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2960925">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2961015">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2961177">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="CUPS-printing.html#id2961830">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2961930">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2962033">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2962103">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2962165">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2962224">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2962290">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2962398">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2963027">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2963488">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2963519">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2963551">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2963592">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2963663">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2963765">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2963836">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2963884">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2963899">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2964092">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964138">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2964221">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2964281">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964299">When not to use Samba to print to -CUPS</a></dt><dt><a href="CUPS-printing.html#id2964316">In Case of Trouble.....</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964352">Where to find Documentation</a></dt><dt><a href="CUPS-printing.html#id2964364">How to ask for Help</a></dt><dt><a href="CUPS-printing.html#id2964377">Where to find Help</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964391">Appendix</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964398">Printing from CUPS to Windows attached -Printers</a></dt><dt><a href="CUPS-printing.html#id2964612">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2964919">Trouble Shooting Guidelines to fix typical Samba printing -Problems</a></dt><dt><a href="CUPS-printing.html#id2966041">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="VFS.html">Stackable VFS modules</a></dt><dd><dl><dt><a href="VFS.html#id2978211">Features and Benefits</a></dt><dt><a href="VFS.html#id2978229">Discussion</a></dt><dt><a href="VFS.html#id2978320">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2978327">audit</a></dt><dt><a href="VFS.html#id2978365">extd_audit</a></dt><dt><a href="VFS.html#id2978489">fake_perms</a></dt><dt><a href="VFS.html#id2978508">recycle</a></dt><dt><a href="VFS.html#id2978645">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2978690">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2978712">DatabaseFS</a></dt><dt><a href="VFS.html#id2978768">vscan</a></dt></dl></dd><dt><a href="VFS.html#id2978797">Common Errors</a></dt></dl></dd><dt>21. <a href="winbind.html">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="winbind.html#id2979695">Features and Benefits</a></dt><dt><a href="winbind.html#id2979724">Introduction</a></dt><dt><a href="winbind.html#id2979795">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2979856">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2979886">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2979914">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2979949">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2979971">Name Service Switch</a></dt><dt><a href="winbind.html#id2980108">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2980179">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2980214">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2980242">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2980271">Introduction</a></dt><dt><a href="winbind.html#id2980346">Requirements</a></dt><dt><a href="winbind.html#id2980438">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2982058">Conclusion</a></dt><dt><a href="winbind.html#id2982077">Common Errors</a></dt></dl></dd><dt>22. <a href="AdvancedNetworkManagement.html">Advanced Network Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2984570">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2984759">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2984858">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2984876">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2985087">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2985283">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2985316">Common Errors</a></dt></dl></dd><dt>23. <a href="PolicyMgmt.html">System and Account Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2984380">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2984435">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2986217">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2986312">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2986445">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2986697">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2986798">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2986819">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2986839">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2986883">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2987030">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2987044">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="ProfileMgmt.html">Desktop Profile Management</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2988251">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2988285">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2988326">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2988731">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2989902">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2989967">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2990232">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2990290">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2990336">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2990356">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2990504">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2991058">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2991562">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2991575">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="ProfileMgmt.html#id2991638">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2991859">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="pam.html">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="pam.html#id2995804">Features and Benefits</a></dt><dt><a href="pam.html#id2996071">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2996089">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2996760">Example System Configurations</a></dt><dt><a href="pam.html#id2997062">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2997119">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2997203">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2997570">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2997583">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="integrate-ms-networks.html">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2999705">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2999730">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2999775">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2999831">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2999956">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id3000000">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id3000042">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id3000130">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id3000278">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id3000323">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id3000567">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id3000600">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id3000624">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id3000695">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id3000711">My Boomerang Won't Come Back</a></dt><dt><a href="integrate-ms-networks.html#id3000742">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id3000794">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="unicode.html">Unicode/Charsets</a></dt><dd><dl><dt><a href="unicode.html#id3001913">Features and Benefits</a></dt><dt><a href="unicode.html#id3002114">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id3002184">Samba and charsets</a></dt><dt><a href="unicode.html#id3002284">Conversion from old names</a></dt><dt><a href="unicode.html#id3002329">Japanese charsets</a></dt></dl></dd><dt>28. <a href="Backup.html">Samba Backup Techniques</a></dt><dd><dl><dt><a href="Backup.html#id3001533">Note</a></dt><dt><a href="Backup.html#id3001557">Features and Benefits</a></dt></dl></dd><dt>29. <a href="SambaHA.html">High Availability Options</a></dt><dd><dl><dt><a href="SambaHA.html#id3003099">Note</a></dt></dl></dd></dl></dd><dt>IV. <a href="migration.html">Migration and Updating</a></dt><dd><dl><dt>30. <a href="upgrading-to-3.0.html">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id3001684">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id3001709">Obsolete configuration options</a></dt><dt><a href="upgrading-to-3.0.html#id3003319">Password Backend</a></dt></dl></dd><dt>31. <a href="NT4Migration.html">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001339">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001368">Objectives</a></dt><dt><a href="NT4Migration.html#id3004043">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id3004381">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id3004462">Planning for Success</a></dt><dt><a href="NT4Migration.html#id3004704">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="SWAT.html">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="SWAT.html#id3003929">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id3003963">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id3006322">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id3006435">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id3006499">Global Settings</a></dt><dt><a href="SWAT.html#id3006604">Share Settings</a></dt><dt><a href="SWAT.html#id3006669">Printers Settings</a></dt><dt><a href="SWAT.html#id3006733">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id3006781">The Status Page</a></dt><dt><a href="SWAT.html#id3006833">The View Page</a></dt><dt><a href="SWAT.html#id3006856">The Password Change Page</a></dt></dl></dd></dl></dd></dl></dd><dt>V. <a href="troubleshooting.html">Troubleshooting</a></dt><dd><dl><dt>33. <a href="diagnosis.html">The Samba checklist</a></dt><dd><dl><dt><a href="diagnosis.html#id3006072">Introduction</a></dt><dt><a href="diagnosis.html#id3007931">Assumptions</a></dt><dt><a href="diagnosis.html#id3008108">The tests</a></dt><dt><a href="diagnosis.html#id3009283">Still having troubles?</a></dt></dl></dd><dt>34. <a href="problems.html">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="problems.html#id3010907">Diagnostics tools</a></dt><dt><a href="problems.html#id3011048">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="problems.html#id3011333">Useful URLs</a></dt><dt><a href="problems.html#id3011378">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id3011530">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="bugreport.html">Reporting Bugs</a></dt><dd><dl><dt><a href="bugreport.html#id3012269">Introduction</a></dt><dt><a href="bugreport.html#id3012491">General info</a></dt><dt><a href="bugreport.html#id3012528">Debug levels</a></dt><dt><a href="bugreport.html#id3012670">Internal errors</a></dt><dt><a href="bugreport.html#id3012778">Attaching to a running process</a></dt><dt><a href="bugreport.html#id3012825">Patches</a></dt></dl></dd></dl></dd><dt>VI. <a href="Appendixes.html">Appendixes</a></dt><dd><dl><dt>36. <a href="compiling.html">How to compile SAMBA</a></dt><dd><dl><dt><a href="compiling.html#id3012145">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id3012152">Introduction</a></dt><dt><a href="compiling.html#id3012182">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id3013701">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id3013750">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id3013886">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id3014023">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id3014188">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id3014280">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id3014484">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="compiling.html#id3014579">Common Errors</a></dt></dl></dd><dt>37. <a href="Portability.html">Portability</a></dt><dd><dl><dt><a href="Portability.html#id3013478">HPUX</a></dt><dt><a href="Portability.html#id3016009">SCO Unix</a></dt><dt><a href="Portability.html#id3016039">DNIX</a></dt><dt><a href="Portability.html#id3016210">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id3016254">AIX</a></dt><dd><dl><dt><a href="Portability.html#id3016261">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id3016287">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id3016294">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="Other-Clients.html">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="Other-Clients.html#id3015663">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3017016">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017023">How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3017102">How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3017164">How do I get printer driver download working - for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017260">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017268">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3017357">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3017388">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3017433">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3017464">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3017481">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017528">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3017601">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3017625">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3017736">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="speed.html">Samba Performance Tuning</a></dt><dd><dl><dt><a href="speed.html#id3018768">Comparisons</a></dt><dt><a href="speed.html#id3018812">Socket options</a></dt><dt><a href="speed.html#id3018887">Read size</a></dt><dt><a href="speed.html#id3018931">Max xmit</a></dt><dt><a href="speed.html#id3018984">Log level</a></dt><dt><a href="speed.html#id3019007">Read raw</a></dt><dt><a href="speed.html#id3019064">Write raw</a></dt><dt><a href="speed.html#id3019106">Slow Logins</a></dt><dt><a href="speed.html#id3019127">Client tuning</a></dt><dt><a href="speed.html#id3019154">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id3019185">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="DNSDHCP.html">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="DNSDHCP.html#id3018605">Note</a></dt></dl></dd><dt>41. <a href="Further-Resources.html">Further Resources</a></dt><dd><dl><dt><a href="Further-Resources.html#id3018765">Websites</a></dt><dt><a href="Further-Resources.html#id3020416">Related updates from Microsoft</a></dt><dt><a href="Further-Resources.html#id3020431">Books</a></dt></dl></dd></dl></dd><dt><a href="ix01.html">Index</a></dt></dl></div><div class="list-of-figures"><p><b>List of Figures</b></p><dl><dt>19.1. <a href="CUPS-printing.html#id2954904">Windows Printing to a local Printer</a></dt><dt>19.2. <a href="CUPS-printing.html#id2955075">Printing to a Postscript Printer</a></dt><dt>19.3. <a href="CUPS-printing.html#id2955155">Ghostscript as a RIP for non-postscript printers</a></dt><dt>19.4. <a href="CUPS-printing.html#id2956084">Prefiltering in CUPS to form Postscript</a></dt><dt>19.5. <a href="CUPS-printing.html#id2956149">Adding Device-specific Print Options</a></dt><dt>19.6. <a href="CUPS-printing.html#id2956251">Postscript to intermediate Raster format</a></dt><dt>19.7. <a href="CUPS-printing.html#id2956304">CUPS-raster production using Ghostscript</a></dt><dt>19.8. <a href="CUPS-printing.html#id2956398">Image format to CUPS-raster format conversion</a></dt><dt>19.9. <a href="CUPS-printing.html#id2956484">Raster to Printer Specific formats</a></dt><dt>19.10. <a href="CUPS-printing.html#id2957561">cupsomatic/foomatic processing versus Native CUPS</a></dt><dt>19.11. <a href="CUPS-printing.html#id2958191">Print Driver execution on the Client</a></dt><dt>19.12. <a href="CUPS-printing.html#id2958249">Print Driver execution on the Server</a></dt><dt>19.13. <a href="CUPS-printing.html#id2958439">Printing via CUPS/samba server</a></dt><dt>19.14. <a href="CUPS-printing.html#id2960326">cupsaddsmb flowchart</a></dt><dt>19.15. <a href="CUPS-printing.html#id2966052">CUPS Printing Overview</a></dt></dl></div><div class="list-of-tables"><p><b>List of Tables</b></p><dl><dt>7.1. <a href="domain-member.html#id2898912">Assumptions</a></dt><dt>10.1. <a href="NetworkBrowsing.html#id2906267">Browse subnet example 1</a></dt><dt>10.2. <a href="NetworkBrowsing.html#id2906382">Browse subnet example 2</a></dt><dt>10.3. <a href="NetworkBrowsing.html#id2906481">Browse subnet example 3</a></dt><dt>10.4. <a href="NetworkBrowsing.html#id2906581">Browse subnet example 4</a></dt><dt>11.1. <a href="passdb.html#id2912659">Attributes in the sambaSamAccount objectclass (LDAP)</a></dt><dt>11.2. <a href="passdb.html#id2913346">Basic smb.conf options for MySQL passdb backend</a></dt><dt>11.3. <a href="passdb.html#id2913471">MySQL field names for MySQL passdb backend</a></dt><dt>13.1. <a href="AccessControls.html#id2920603">Managing directories with unix and windows</a></dt><dt>13.2. <a href="AccessControls.html#id2922134">User and Group Based Controls</a></dt><dt>13.3. <a href="AccessControls.html#id2922367">File and Directory Permission Based Controls</a></dt><dt>13.4. <a href="AccessControls.html#id2922614">Other Controls</a></dt><dt>20.1. <a href="VFS.html#id2978406">Extended Auditing Log Information</a></dt><dt>24.1. <a href="ProfileMgmt.html#id2990854">User Shell Folder registry keys default values</a></dt><dt>24.2. <a href="ProfileMgmt.html#id2990998">Defaults of profile settings registry keys</a></dt><dt>24.3. <a href="ProfileMgmt.html#id2991253">Defaults of default user profile paths registry keys</a></dt><dt>25.1. <a href="pam.html#id2997236">Options recognized by pam_smbpass</a></dt><dt>31.1. <a href="NT4Migration.html#id3004398">The 3 Major Site Types</a></dt><dt>31.2. <a href="NT4Migration.html#id3004535">Nature of the Conversion Choices</a></dt></dl></div><div class="list-of-examples"><p><b>List of Examples</b></p><dl><dt>12.1. <a href="groupmapping.html#id2921843">smbgrpadd.sh</a></dt><dt>13.1. <a href="AccessControls.html#id2920816">Example File</a></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"></td><td width="20%" align="center"></td><td width="40%" align="right"><a accesskey="n" href="introduction.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"></td><td width="20%" align="center"></td><td width="40%" align="right" valign="top">PartI.General Installation</td></tr></table></div></body></html> +existing set.." when creating a machine trust account.</a></dt><dt><a href="samba-pdc.html#id2894004">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2894075">The machine trust account for this computer either does not +exist or is not accessible.</a></dt><dt><a href="samba-pdc.html#id2894138">When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.</a></dt><dt><a href="samba-pdc.html#id2894165">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></dd><dt>6. <a href="samba-bdc.html">Backup Domain Control</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896206">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2896370">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896399">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2894362">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2894383">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2894406">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894432">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894534">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894584">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894597">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2894629">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2894662">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2894707">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="domain-member.html">Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2895232">Features and Benefits</a></dt><dt><a href="domain-member.html#id2894803">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2894963">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2896748">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2896944">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2897000">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2897196">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2899872">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2900011">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2900094">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2900442">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2900464">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2900491">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2900523">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="StandAloneServer.html">Stand-Alone Servers</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2901965">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2902003">Background</a></dt><dt><a href="StandAloneServer.html#id2902071">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2900673">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#id2900721">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2900933">Common Errors</a></dt></dl></dd><dt>9. <a href="ClientConfig.html">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="ClientConfig.html#id2901302">Note</a></dt></dl></dd></dl></dd><dt>III. <a href="optional.html">Advanced Configuration</a></dt><dd><dl><dt>10. <a href="NetworkBrowsing.html">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2901654">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2901733">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2905839">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905855">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2906017">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2900986">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2901119">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2901245">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2902631">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2902896">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2903052">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2903070">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2906571">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2906680">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2906741">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2906900">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2907094">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2907119">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907203">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907217">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2907283">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907421">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907468">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2907575">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2907654">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2908270">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2908285">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2908313">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></dd><dt>11. <a href="passdb.html">Account Information Databases</a></dt><dd><dl><dt><a href="passdb.html#id2911689">Features and Benefits</a></dt><dt><a href="passdb.html#id2908580">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2908644">Important Notes About Security</a></dt><dt><a href="passdb.html#id2908888">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="passdb.html#id2908943">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2908975">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2909240">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2909374">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2909410">Plain Text</a></dt><dt><a href="passdb.html#id2909450">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2913891">tdbsam</a></dt><dt><a href="passdb.html#id2913919">ldapsam</a></dt><dt><a href="passdb.html#id2915407">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2916213">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2916220">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="passdb.html#id2916235">Users are being added to the wrong backend database</a></dt><dt><a href="passdb.html#id2916295">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="groupmapping.html">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="groupmapping.html#id2916467">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2916568">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2916756">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2916822">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2916836">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2916903">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2916977">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2916993">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2917053">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920239">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2920364">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920382">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="AccessControls.html#id2917299">Managing Directories</a></dt><dt><a href="AccessControls.html#id2917394">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2917800">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2917828">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2918100">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2918346">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2922930">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2923002">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2923301">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2923309">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2923347">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2923426">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2923548">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2923776">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2923928">Interaction with the standard Samba create mask + parameters</a></dt><dt><a href="AccessControls.html#id2924258">Interaction with the standard Samba file attribute + mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2924333">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2924347">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2924726">I have set force user and Samba still makes root the owner of all the files + I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="locking.html">File and Record Locking</a></dt><dd><dl><dt><a href="locking.html#id2926847">Features and Benefits</a></dt><dt><a href="locking.html#id2926902">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2927033">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2925408">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2925517">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2925776">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2928213">Workstation Service Entries</a></dt><dt><a href="locking.html#id2928240">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2928320">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2928350">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2928423">locking.tdb error messages</a></dt></dl></dd><dt><a href="locking.html#id2928454">Additional Reading</a></dt></dl></dd><dt>15. <a href="securing-samba.html">Securing Samba</a></dt><dd><dl><dt><a href="securing-samba.html#id2929879">Introduction</a></dt><dt><a href="securing-samba.html#id2929912">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2928572">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2928590">Using host based protection</a></dt><dt><a href="securing-samba.html#id2928659">User based protection</a></dt><dt><a href="securing-samba.html#id2928710">Using interface protection</a></dt><dt><a href="securing-samba.html#id2928760">Using a firewall</a></dt><dt><a href="securing-samba.html#id2928816">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2928881">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2928920">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2928943">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2928962">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2928987">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="InterdomainTrusts.html">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929505">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2929534">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2929617">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929629">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="InterdomainTrusts.html#id2931604">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2931642">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2931669">Samba-3 as the Trusting Domain</a></dt><dt><a href="InterdomainTrusts.html#id2931795">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2929173">Common Errors</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929188">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="msdfs.html">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="msdfs.html#id2929286">Features and Benefits</a></dt><dt><a href="msdfs.html#id2930696">Common Errors</a></dt></dl></dd><dt>18. <a href="printing.html">Classical Printing Support</a></dt><dd><dl><dt><a href="printing.html#id2932219">Features and Benefits</a></dt><dt><a href="printing.html#id2932283">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2932319">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2932389">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2935498">Parameters Recommended for Use</a></dt><dt><a href="printing.html#id2930858">Parameters for Backwards Compatibility</a></dt><dt><a href="printing.html#id2930966">Parameters no longer in use</a></dt></dl></dd><dt><a href="printing.html#id2931059">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="printing.html#id2933066">Verification of "Settings in Use" with testparm</a></dt><dt><a href="printing.html#id2933148">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2933455">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="printing.html#id2933547">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2933560">The [global] Section</a></dt><dt><a href="printing.html#id2943021">The [printers] Section</a></dt><dt><a href="printing.html#id2943350">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2943571">Print Commands</a></dt><dt><a href="printing.html#id2943622">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="printing.html#id2944148">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2944425">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2944579">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2944731">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="printing.html#id2944844">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2944914">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2945135">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2945296">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2945390">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2945574">Setting Drivers for existing Printers with +rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2947172">"The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)</a></dt><dd><dl><dt><a href="printing.html#id2947193">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2947391">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2947680">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2947775">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="printing.html#id2947917">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2947950">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2948384">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2948687">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2948930">Weird Error Message Cannot connect under a +different Name</a></dt><dt><a href="printing.html#id2949028">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2949299">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2949370">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2949392">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2949437">What is Imprints?</a></dt><dt><a href="printing.html#id2949479">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2949498">The Imprints Server</a></dt><dt><a href="printing.html#id2949522">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2949674">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2950004">The addprinter command</a></dt><dt><a href="printing.html#id2950049">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="printing.html#id2950217">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2950232">Common Errors and Problems</a></dt><dd><dl><dt><a href="printing.html#id2950245">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2950278">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="CUPS-printing.html">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957297">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957304">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2957352">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2957404">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957483">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2950396">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2957550">More complex smb.conf Settings for +CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950555">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2950575">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="CUPS-printing.html#id2950602">CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950639">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950697">Explicitly enable "raw" printing for +application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2950858">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950951">Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2951026">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="CUPS-printing.html#id2951071">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2951170">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#id2951241">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2951338">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2951433">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2964250">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2964339">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964362">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964500">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2964688">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2964804">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2964973">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2965058">pstops</a></dt><dt><a href="CUPS-printing.html#id2965161">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2965317">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2965372">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2965457">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2965771">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2965874">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2965889">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2965942">"Raw" printing</a></dt><dt><a href="CUPS-printing.html#id2965996">"application/octet-stream" printing</a></dt><dt><a href="CUPS-printing.html#id2966212">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2966439">Difference between cupsomatic/foomatic-rip and +native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2966596">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2966825">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2966950">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967012">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967028">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2967067">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2967126">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967189">Network Printing (Windows clients -- UNIX/Samba Print +Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967210">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2967370">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967448">Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967503">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2967544">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967609">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967626">Printer Drivers running in "Kernel Mode" cause many +Problems</a></dt><dt><a href="CUPS-printing.html#id2967661">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2967682">CUPS: a "Magical Stone"?</a></dt><dt><a href="CUPS-printing.html#id2967709">PostScript Drivers with no major problems -- even in Kernel +Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967743"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967762">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2967853">Prepare your smb.conf for +cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2967900">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2968097">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968155">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968188">ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2968238">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2968459">What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="CUPS-printing.html#id2968640">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2968741">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2968884">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2968978">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="CUPS-printing.html#id2969065">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2969100">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2969151">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2969266">Avoiding critical PostScript Driver Settings on the +Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2969400">Installing PostScript Driver Files manually (using +rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2969515">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969627">Understanding the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969706">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2969796">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2969958">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="CUPS-printing.html#id2970578">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2970680">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2970783">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2970853">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2970915">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2970974">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2971036">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2971142">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2971770">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972228">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972259">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2972290">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2972331">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2972403">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2972504">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2972576">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2972624">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972639">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2972832">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972878">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2972960">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2973021">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973039">When not to use Samba to print to +CUPS</a></dt><dt><a href="CUPS-printing.html#id2973056">In Case of Trouble.....</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973091">Where to find Documentation</a></dt><dt><a href="CUPS-printing.html#id2973104">How to ask for Help</a></dt><dt><a href="CUPS-printing.html#id2973117">Where to find Help</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973131">Appendix</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973138">Printing from CUPS to Windows attached +Printers</a></dt><dt><a href="CUPS-printing.html#id2973332">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2973586">Trouble Shooting Guidelines to fix typical Samba printing +Problems</a></dt><dt><a href="CUPS-printing.html#id2974692">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="VFS.html">Stackable VFS modules</a></dt><dd><dl><dt><a href="VFS.html#id2976111">Features and Benefits</a></dt><dt><a href="VFS.html#id2976129">Discussion</a></dt><dt><a href="VFS.html#id2974805">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2974812">audit</a></dt><dt><a href="VFS.html#id2974851">extd_audit</a></dt><dt><a href="VFS.html#id2974972">fake_perms</a></dt><dt><a href="VFS.html#id2974992">recycle</a></dt><dt><a href="VFS.html#id2975130">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2975176">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2975198">DatabaseFS</a></dt><dt><a href="VFS.html#id2975253">vscan</a></dt></dl></dd><dt><a href="VFS.html#id2975282">Common Errors</a></dt></dl></dd><dt>21. <a href="winbind.html">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="winbind.html#id2975777">Features and Benefits</a></dt><dt><a href="winbind.html#id2975805">Introduction</a></dt><dt><a href="winbind.html#id2977838">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2977898">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2977929">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2977957">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2977989">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2978012">Name Service Switch</a></dt><dt><a href="winbind.html#id2975323">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2975394">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2975429">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2975457">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2975485">Introduction</a></dt><dt><a href="winbind.html#id2975560">Requirements</a></dt><dt><a href="winbind.html#id2976836">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2981237">Conclusion</a></dt><dt><a href="winbind.html#id2981256">Common Errors</a></dt></dl></dd><dt>22. <a href="AdvancedNetworkManagement.html">Advanced Network Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2982630">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2982661">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2981342">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981359">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981560">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981755">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981788">Common Errors</a></dt></dl></dd><dt>23. <a href="PolicyMgmt.html">System and Account Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2982185">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2982237">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2982348">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2981896">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2982030">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983472">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983573">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2983593">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2983614">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983658">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2983805">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983819">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="ProfileMgmt.html">Desktop Profile Management</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2983922">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2983955">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2983996">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2989358">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2990295">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2990360">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2990620">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2990678">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2990723">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2990743">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2990891">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2991445">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2991949">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2991962">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="ProfileMgmt.html#id2992025">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2992243">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="pam.html">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="pam.html#id2993700">Features and Benefits</a></dt><dt><a href="pam.html#id2992555">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2992572">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2993237">Example System Configurations</a></dt><dt><a href="pam.html#id2995669">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2995726">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2995810">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2996177">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2996190">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="integrate-ms-networks.html">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2997933">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2997958">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2998003">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2998054">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2998179">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996329">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996371">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996460">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996585">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id2996630">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996744">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996776">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id2996801">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996872">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996887">My Boomerang Won't Come Back</a></dt><dt><a href="integrate-ms-networks.html#id2996919">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id2996970">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="unicode.html">Unicode/Charsets</a></dt><dd><dl><dt><a href="unicode.html#id2997125">Features and Benefits</a></dt><dt><a href="unicode.html#id2997167">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id2997235">Samba and charsets</a></dt><dt><a href="unicode.html#id2997336">Conversion from old names</a></dt><dt><a href="unicode.html#id2997382">Japanese charsets</a></dt></dl></dd><dt>28. <a href="Backup.html">Samba Backup Techniques</a></dt><dd><dl><dt><a href="Backup.html#id2999976">Note</a></dt><dt><a href="Backup.html#id2999997">Features and Benefits</a></dt></dl></dd><dt>29. <a href="SambaHA.html">High Availability Options</a></dt><dd><dl><dt><a href="SambaHA.html#id2999808">Note</a></dt></dl></dd></dl></dd><dt>IV. <a href="migration.html">Migration and Updating</a></dt><dd><dl><dt>30. <a href="upgrading-to-3.0.html">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id3001143">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id3001165">Obsolete configuration options</a></dt><dt><a href="upgrading-to-3.0.html#id3001219">Password Backend</a></dt></dl></dd><dt>31. <a href="NT4Migration.html">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="NT4Migration.html#id3000463">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id3000487">Objectives</a></dt><dt><a href="NT4Migration.html#id2999415">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id3001632">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001713">Planning for Success</a></dt><dt><a href="NT4Migration.html#id3001954">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="SWAT.html">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="SWAT.html#id3002261">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id3002111">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id3003000">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id3003113">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id3003176">Global Settings</a></dt><dt><a href="SWAT.html#id3003282">Share Settings</a></dt><dt><a href="SWAT.html#id3003346">Printers Settings</a></dt><dt><a href="SWAT.html#id3003411">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id3003459">The Status Page</a></dt><dt><a href="SWAT.html#id3003511">The View Page</a></dt><dt><a href="SWAT.html#id3003534">The Password Change Page</a></dt></dl></dd></dl></dd></dl></dd><dt>V. <a href="troubleshooting.html">Troubleshooting</a></dt><dd><dl><dt>33. <a href="diagnosis.html">The Samba checklist</a></dt><dd><dl><dt><a href="diagnosis.html#id3003655">Introduction</a></dt><dt><a href="diagnosis.html#id3003689">Assumptions</a></dt><dt><a href="diagnosis.html#id3003861">The tests</a></dt><dt><a href="diagnosis.html#id3007413">Still having troubles?</a></dt></dl></dd><dt>34. <a href="problems.html">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="problems.html#id3008806">Diagnostics tools</a></dt><dt><a href="problems.html#id3007532">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="problems.html#id3007815">Useful URLs</a></dt><dt><a href="problems.html#id3007859">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id3008012">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="bugreport.html">Reporting Bugs</a></dt><dd><dl><dt><a href="bugreport.html#id3010326">Introduction</a></dt><dt><a href="bugreport.html#id3010385">General info</a></dt><dt><a href="bugreport.html#id3010421">Debug levels</a></dt><dt><a href="bugreport.html#id3008517">Internal errors</a></dt><dt><a href="bugreport.html#id3008625">Attaching to a running process</a></dt><dt><a href="bugreport.html#id3008127">Patches</a></dt></dl></dd></dl></dd><dt>VI. <a href="Appendixes.html">Appendixes</a></dt><dd><dl><dt>36. <a href="compiling.html">How to compile SAMBA</a></dt><dd><dl><dt><a href="compiling.html#id3008244">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id3008251">Introduction</a></dt><dt><a href="compiling.html#id3008280">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id3009749">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id3009796">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id3009932">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id3010069">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id3010964">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id3011056">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id3011260">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="compiling.html#id3011355">Common Errors</a></dt></dl></dd><dt>37. <a href="Portability.html">Portability</a></dt><dd><dl><dt><a href="Portability.html#id3012634">HPUX</a></dt><dt><a href="Portability.html#id3012719">SCO Unix</a></dt><dt><a href="Portability.html#id3012747">DNIX</a></dt><dt><a href="Portability.html#id3012917">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id3012960">AIX</a></dt><dd><dl><dt><a href="Portability.html#id3012967">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id3012993">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id3013000">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="Other-Clients.html">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013776">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3013848">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013855">How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3013471">How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3013530">How do I get printer driver download working + for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013628">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013090">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3013179">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3013210">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3013255">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3013285">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3013303">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013349">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3014379">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3014403">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3014514">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="speed.html">Samba Performance Tuning</a></dt><dd><dl><dt><a href="speed.html#id3016725">Comparisons</a></dt><dt><a href="speed.html#id3014565">Socket options</a></dt><dt><a href="speed.html#id3014636">Read size</a></dt><dt><a href="speed.html#id3014680">Max xmit</a></dt><dt><a href="speed.html#id3014732">Log level</a></dt><dt><a href="speed.html#id3014755">Read raw</a></dt><dt><a href="speed.html#id3014811">Write raw</a></dt><dt><a href="speed.html#id3014853">Slow Logins</a></dt><dt><a href="speed.html#id3015761">Client tuning</a></dt><dt><a href="speed.html#id3015784">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id3015817">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="DNSDHCP.html">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="DNSDHCP.html#id3016535">Note</a></dt></dl></dd><dt>41. <a href="Further-Resources.html">Further Resources</a></dt><dd><dl><dt><a href="Further-Resources.html#id3015954">Websites</a></dt><dt><a href="Further-Resources.html#id3016336">Related updates from Microsoft</a></dt><dt><a href="Further-Resources.html#id3016404">Books</a></dt></dl></dd></dl></dd><dt><a href="ix01.html">Index</a></dt></dl></div><div class="list-of-figures"><p><b>List of Figures</b></p><dl><dt>19.1. <a href="CUPS-printing.html#id2951136">Windows Printing to a local Printer</a></dt><dt>19.2. <a href="CUPS-printing.html#id2951288">Printing to a Postscript Printer</a></dt><dt>19.3. <a href="CUPS-printing.html#id2951368">Ghostscript as a RIP for non-postscript printers</a></dt><dt>19.4. <a href="CUPS-printing.html#id2965024">Prefiltering in CUPS to form Postscript</a></dt><dt>19.5. <a href="CUPS-printing.html#id2965089">Adding Device-specific Print Options</a></dt><dt>19.6. <a href="CUPS-printing.html#id2965191">Postscript to intermediate Raster format</a></dt><dt>19.7. <a href="CUPS-printing.html#id2965243">CUPS-raster production using Ghostscript</a></dt><dt>19.8. <a href="CUPS-printing.html#id2965338">Image format to CUPS-raster format conversion</a></dt><dt>19.9. <a href="CUPS-printing.html#id2965423">Raster to Printer Specific formats</a></dt><dt>19.10. <a href="CUPS-printing.html#id2966490">cupsomatic/foomatic processing versus Native CUPS</a></dt><dt>19.11. <a href="CUPS-printing.html#id2967092">Print Driver execution on the Client</a></dt><dt>19.12. <a href="CUPS-printing.html#id2967148">Print Driver execution on the Server</a></dt><dt>19.13. <a href="CUPS-printing.html#id2967336">Printing via CUPS/samba server</a></dt><dt>19.14. <a href="CUPS-printing.html#id2969117">cupsaddsmb flowchart</a></dt><dt>19.15. <a href="CUPS-printing.html#id2974702">CUPS Printing Overview</a></dt></dl></div><div class="list-of-tables"><p><b>List of Tables</b></p><dl><dt>7.1. <a href="domain-member.html#id2897206">Assumptions</a></dt><dt>10.1. <a href="NetworkBrowsing.html#id2907818">Browse subnet example 1</a></dt><dt>10.2. <a href="NetworkBrowsing.html#id2907928">Browse subnet example 2</a></dt><dt>10.3. <a href="NetworkBrowsing.html#id2908028">Browse subnet example 3</a></dt><dt>10.4. <a href="NetworkBrowsing.html#id2908128">Browse subnet example 4</a></dt><dt>11.1. <a href="passdb.html#id2914885">Attributes in the sambaSamAccount objectclass (LDAP)</a></dt><dt>11.2. <a href="passdb.html#id2915568">Basic smb.conf options for MySQL passdb backend</a></dt><dt>11.3. <a href="passdb.html#id2915693">MySQL field names for MySQL passdb backend</a></dt><dt>13.1. <a href="AccessControls.html#id2917317">Managing directories with unix and windows</a></dt><dt>13.2. <a href="AccessControls.html#id2917887">User and Group Based Controls</a></dt><dt>13.3. <a href="AccessControls.html#id2918120">File and Directory Permission Based Controls</a></dt><dt>13.4. <a href="AccessControls.html#id2918367">Other Controls</a></dt><dt>20.1. <a href="VFS.html#id2974890">Extended Auditing Log Information</a></dt><dt>24.1. <a href="ProfileMgmt.html#id2991239">User Shell Folder registry keys default values</a></dt><dt>24.2. <a href="ProfileMgmt.html#id2991383">Defaults of profile settings registry keys</a></dt><dt>24.3. <a href="ProfileMgmt.html#id2991638">Defaults of default user profile paths registry keys</a></dt><dt>25.1. <a href="pam.html#id2995841">Options recognized by pam_smbpass</a></dt><dt>31.1. <a href="NT4Migration.html#id3001647">The 3 Major Site Types</a></dt><dt>31.2. <a href="NT4Migration.html#id3001783">Nature of the Conversion Choices</a></dt></dl></div><div class="list-of-examples"><p><b>List of Examples</b></p><dl><dt>12.1. <a href="groupmapping.html#id2916858">smbgrpadd.sh</a></dt><dt>13.1. <a href="AccessControls.html#id2917721">Example File</a></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"></td><td width="20%" align="center"></td><td width="40%" align="right"><a accesskey="n" href="introduction.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"></td><td width="20%" align="center"></td><td width="40%" align="right" valign="top">PartI.General Installation</td></tr></table></div></body></html> diff --git a/docs/htmldocs/install.html b/docs/htmldocs/install.html index 154b9705e1..d602d123c7 100644 --- a/docs/htmldocs/install.html +++ b/docs/htmldocs/install.html @@ -1,6 +1,7 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter2.How to Install and Test SAMBA</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="IntroSMB.html" title="Chapter1.Introduction to Samba"><link rel="next" href="FastStart.html" title="Chapter3.Fast Start for the Impatient"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter2.How to Install and Test SAMBA</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="IntroSMB.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="FastStart.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="install"></a>Chapter2.How to Install and Test SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Karl</span> <span class="surname">Auer</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="install.html#id2886868">Obtaining and installing samba</a></dt><dt><a href="install.html#id2886909">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2886946">Example Configuration</a></dt><dt><a href="install.html#id2887096">SWAT</a></dt></dl></dd><dt><a href="install.html#id2887140">Try listing the shares available on your - server</a></dt><dt><a href="install.html#id2887191">Try connecting with the unix client</a></dt><dt><a href="install.html#id2887292">Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client</a></dt><dt><a href="install.html#id2887355">What If Things Don't Work?</a></dt><dt><a href="install.html#id2887388">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2887401">Why are so many smbd processes eating memory?</a></dt><dt><a href="install.html#id2887617">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886868"></a>Obtaining and installing samba</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter2.How to Install and Test SAMBA</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="IntroSMB.html" title="Chapter1.Introduction to Samba"><link rel="next" href="FastStart.html" title="Chapter3.Fast Start for the Impatient"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter2.How to Install and Test SAMBA</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="IntroSMB.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="FastStart.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="install"></a>Chapter2.How to Install and Test SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Karl</span> <span class="surname">Auer</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="install.html#id2885039">Obtaining and installing samba</a></dt><dt><a href="install.html#id2885081">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2884654">Example Configuration</a></dt><dt><a href="install.html#id2884797">SWAT</a></dt></dl></dd><dt><a href="install.html#id2884842">Try listing the shares available on your + server</a></dt><dt><a href="install.html#id2884347">Try connecting with the unix client</a></dt><dt><a href="install.html#id2884450">Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client</a></dt><dt><a href="install.html#id2884510">What If Things Don't Work?</a></dt><dt><a href="install.html#id2884540">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2884553">Why are so many smbd processes eating memory?</a></dt><dt><a href="install.html#id2885931">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885039"></a>Obtaining and installing samba</h2></div></div><div></div></div><p> Binary packages of samba are included in almost any Linux or Unix distribution. There are also some packages available at <a href="http://samba.org/" target="_top">the samba homepage</a>. @@ -8,29 +9,29 @@ <a href="compiling.html" title="Chapter36.How to compile SAMBA">appropriate appendix chapter</a>.</p><p>If you have already installed samba, or if your operating system was pre-installed with samba, then you may not need to bother with this chapter. On the other hand, you may want to read this chapter anyhow - for information about updating samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886909"></a>Configuring samba (smb.conf)</h2></div></div><div></div></div><p> + for information about updating samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885081"></a>Configuring samba (smb.conf)</h2></div></div><div></div></div><p> Samba's configuration is stored in the <tt class="filename">smb.conf</tt> file, that usually resides in <tt class="filename">/etc/samba/smb.conf</tt> or <tt class="filename">/usr/local/samba/lib/smb.conf</tt>. You can either edit this file yourself or do it using one of the many graphical tools that are available, such as the web-based interface swat, that is included with samba. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886946"></a>Example Configuration</h3></div></div><div></div></div><p> + </p><div xmlns:ns2="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884654"></a>Example Configuration</h3></div></div><div></div></div><p> There are sample configuration files in the examples subdirectory in the distribution. I suggest you read them carefully so you can see how the options go together in practice. See the man page for all the options. </p><p> The simplest useful configuration file would be something like this: - </p><p> - </p><pre class="programlisting"> + </p><ns2:p> + </ns2:p><pre class="programlisting"> [global] workgroup = MYGROUP [homes] guest ok = no read only = no - </pre><p> - </p><p> + </pre><ns2:p> + </ns2:p><p> This will allow connections by anyone with an account on the server, using either their login name or "<i class="parameter"><tt>homes</tt></i>" as the service name. (Note that the workgroup that Samba must also be set.) @@ -42,7 +43,7 @@ For more information about security settings for the <i class="parameter"><tt>[homes]</tt></i> share please refer to the chapter <a href="securing-samba.html" title="Chapter15.Securing Samba">Securing Samba</a>. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887041"></a>Test your config file with <b class="command">testparm</b></h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884744"></a>Test your config file with <b class="command">testparm</b></h4></div></div><div></div></div><p> It's important that you test the validity of your <tt class="filename">smb.conf</tt> file using the <span class="application">testparm</span> program. If testparm runs OK then it will list the loaded services. If not it will give an error message. @@ -50,7 +51,7 @@ Make sure it runs OK and that the services look reasonable before proceeding. </p><p> Always run testparm again when you change <tt class="filename">smb.conf</tt>! - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887096"></a>SWAT</h3></div></div><div></div></div><p> + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884797"></a>SWAT</h3></div></div><div></div></div><p> SWAT is a web-based interface that helps you configure samba. SWAT might not be available in the samba package on your platform, but in a separate package. Please read the swat manpage @@ -66,7 +67,7 @@ machine but connecting from a remote machine leaves your connection open to password sniffing as passwords will be sent in the clear over the wire. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887140"></a>Try listing the shares available on your + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884842"></a>Try listing the shares available on your server</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L <i class="replaceable"><tt>yourhostname</tt></i></tt></b></p><p>You should get back a list of shares available on your server. If you don't then something is incorrectly setup. @@ -76,7 +77,7 @@ See the <b class="command">smbclient</b> man page for details. (you can force it to list the shares without a password by adding the option -U% to the command line. This will not work - with non-Samba servers)</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887191"></a>Try connecting with the unix client</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient <i class="replaceable"><tt> + with non-Samba servers)</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884347"></a>Try connecting with the unix client</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient <i class="replaceable"><tt> //yourhostname/aservice</tt></i></tt></b></p><p>Typically the <i class="replaceable"><tt>yourhostname</tt></i> would be the name of the host where you installed <span class="application">smbd</span>. The <i class="replaceable"><tt>aservice</tt></i> is @@ -85,18 +86,18 @@ section in <tt class="filename">smb.conf</tt>.</p><p>For example if your unix host is <i class="replaceable"><tt>bambi</tt></i> and your login name is <i class="replaceable"><tt>fred</tt></i> you would type:</p><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient //<i class="replaceable"><tt>bambi</tt></i>/<i class="replaceable"><tt>fred</tt></i> - </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887292"></a>Try connecting from a DOS, WfWg, Win9x, WinNT, + </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884450"></a>Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client</h2></div></div><div></div></div><p>Try mounting disks. eg:</p><p><tt class="prompt">C:\WINDOWS\> </tt><b class="userinput"><tt>net use d: \\servername\service </tt></b></p><p>Try printing. eg:</p><p><tt class="prompt">C:\WINDOWS\> </tt><b class="userinput"><tt>net use lpt1: \\servername\spoolservice</tt></b></p><p><tt class="prompt">C:\WINDOWS\> </tt><b class="userinput"><tt>print filename - </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887355"></a>What If Things Don't Work?</h2></div></div><div></div></div><p>Then you might read the file chapter + </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884510"></a>What If Things Don't Work?</h2></div></div><div></div></div><p>Then you might read the file chapter <a href="diagnosis.html" title="Chapter33.The Samba checklist">Diagnosis</a> and the FAQ. If you are still stuck then try to follow the <a href="problems.html" title="Chapter34.Analysing and solving samba problems">Analysing and Solving Problems chapter</a> Samba has been successfully installed at thousands of sites worldwide, - so maybe someone else has hit your problem and has overcome it. </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887388"></a>Common Errors</h2></div></div><div></div></div><p> + so maybe someone else has hit your problem and has overcome it. </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884540"></a>Common Errors</h2></div></div><div></div></div><p> The following questions and issues get raised on the samba mailing list over and over again. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887401"></a>Why are so many smbd processes eating memory?</h3></div></div><div></div></div><p> +</p><div xmlns:ns3="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884553"></a>Why are so many smbd processes eating memory?</h3></div></div><div></div></div><p> “<span class="quote"> Site that is running Samba on an AIX box. They are sharing out about 2 terabytes using samba. Samba was installed using smitty and the binaries. We seem to be experiencing a memory problem @@ -108,8 +109,8 @@ processes of smbd running: Is samba suppose to start this many different smbd processes? Or does it run as one smbd process? Also is it normal for it to be taking up this much memory? </span>” -</p><p> -</p><pre class="screen"> +</p><ns3:p> +</ns3:p><pre class="screen"> Inuse * 4096 = amount of memory being used by this process Pid Command Inuse Pin Pgsp Virtual 64-bit Mthrd @@ -136,8 +137,8 @@ Inuse * 4096 = amount of memory being used by this process 19110 smbd 8404 1906 181 4862 N N Total memory used: 841,592,832 bytes -</pre><p> -</p><p> +</pre><ns3:p> +</ns3:p><p> Samba consists on three core programs: <span class="application">nmbd</span>, <span class="application">smbd</span>, <span class="application">winbindd</span>. <span class="application">nmbd</span> is the name server message daemon, <span class="application">smbd</span> is the server message daemon, <span class="application">winbindd</span> is the daemon that @@ -152,4 +153,4 @@ connection made. That is why you are seeing so many of them, one (1) per client </p><p> <span class="application">winbindd</span> will run as one or two daemons, depending on whether or not it is being run in "split mode" (in which case there will be two instances). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887617"></a>I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</h3></div></div><div></div></div><p>Your loopback device isn't working correctly. Make sure it's running. </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="IntroSMB.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="FastStart.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter1.Introduction to Samba</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter3.Fast Start for the Impatient</td></tr></table></div></body></html> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885931"></a>I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</h3></div></div><div></div></div><p>Your loopback device isn't working correctly. Make sure it's running. </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="IntroSMB.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="FastStart.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter1.Introduction to Samba</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter3.Fast Start for the Impatient</td></tr></table></div></body></html> diff --git a/docs/htmldocs/integrate-ms-networks.html b/docs/htmldocs/integrate-ms-networks.html index 083aeed9f3..07331fd9d0 100644 --- a/docs/htmldocs/integrate-ms-networks.html +++ b/docs/htmldocs/integrate-ms-networks.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter26.Integrating MS Windows networks with Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="pam.html" title="Chapter25.PAM based Distributed Authentication"><link rel="next" href="unicode.html" title="Chapter27.Unicode/Charsets"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter26.Integrating MS Windows networks with Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pam.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="unicode.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="integrate-ms-networks"></a>Chapter26.Integrating MS Windows networks with Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> (Jan 01 2001) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="integrate-ms-networks.html#id2999705">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2999730">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2999775">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2999831">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2999956">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id3000000">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id3000042">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id3000130">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id3000278">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id3000323">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id3000567">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id3000600">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id3000624">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id3000695">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id3000711">My Boomerang Won't Come Back</a></dt><dt><a href="integrate-ms-networks.html#id3000742">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id3000794">Samba server name change problem</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter26.Integrating MS Windows networks with Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="pam.html" title="Chapter25.PAM based Distributed Authentication"><link rel="next" href="unicode.html" title="Chapter27.Unicode/Charsets"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter26.Integrating MS Windows networks with Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pam.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="unicode.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="integrate-ms-networks"></a>Chapter26.Integrating MS Windows networks with Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate"> (Jan 01 2001) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="integrate-ms-networks.html#id2997933">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2997958">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2998003">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2998054">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2998179">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996329">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996371">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996460">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996585">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id2996630">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996744">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996776">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id2996801">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996872">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996887">My Boomerang Won't Come Back</a></dt><dt><a href="integrate-ms-networks.html#id2996919">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id2996970">Samba server name change problem</a></dt></dl></dd></dl></div><p> This section deals with NetBIOS over TCP/IP name to IP address resolution. If your MS Windows clients are NOT configured to use NetBIOS over TCP/IP then this section does not apply to your installation. If your installation involves use of @@ -9,7 +10,7 @@ NetBIOS over TCP/IP then this section may help you to resolve networking problem to NOT run NetBEUI at all. Note also that there is NO such thing as NetBEUI over TCP/IP - the existence of such a protocol is a complete and utter mis-apprehension. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999705"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997933"></a>Features and Benefits</h2></div></div><div></div></div><p> Many MS Windows network administrators have never been exposed to basic TCP/IP networking as it is implemented in a Unix/Linux operating system. Likewise, many Unix and Linux administrators have not been exposed to the intricacies of MS Windows TCP/IP based @@ -17,7 +18,7 @@ networking (and may have no desire to be either). </p><p> This chapter gives a short introduction to the basics of how a name can be resolved to it's IP address for each operating system environment. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999730"></a>Background Information</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997958"></a>Background Information</h2></div></div><div></div></div><p> Since the introduction of MS Windows 2000 it is possible to run MS Windows networking without the use of NetBIOS over TCP/IP. NetBIOS over TCP/IP uses UDP port 137 for NetBIOS name resolution and uses TCP port 139 for NetBIOS session services. When NetBIOS over @@ -33,10 +34,10 @@ disable NetBIOS over TCP/IP today use MS Active Directory Service (ADS). ADS req Dynamic DNS with Service Resource Records (SRV RR) and with Incremental Zone Transfers (IXFR). Use of DHCP with ADS is recommended as a further means of maintaining central control over client workstation network configuration. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999775"></a>Name Resolution in a pure Unix/Linux world</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998003"></a>Name Resolution in a pure Unix/Linux world</h2></div></div><div></div></div><p> The key configuration files covered in this section are: -</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt></p></li><li><p><tt class="filename">/etc/resolv.conf</tt></p></li><li><p><tt class="filename">/etc/host.conf</tt></p></li><li><p><tt class="filename">/etc/nsswitch.conf</tt></p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999831"></a><tt class="filename">/etc/hosts</tt></h3></div></div><div></div></div><p> -Contains a static list of IP Addresses and names. +</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt></p></li><li><p><tt class="filename">/etc/resolv.conf</tt></p></li><li><p><tt class="filename">/etc/host.conf</tt></p></li><li><p><tt class="filename">/etc/nsswitch.conf</tt></p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2998054"></a><tt class="filename">/etc/hosts</tt></h3></div></div><div></div></div><p> +Contains a static list of IP addresses and names. eg: </p><pre class="screen"> 127.0.0.1 localhost localhost.localdomain @@ -48,7 +49,7 @@ IP addresses. </p><p> Network packets that are sent over the physical network transport layer communicate not via IP addresses but rather using the Media -Access Control address, or MAC address. IP Addresses are currently +Access Control address, or MAC address. IP addresses are currently 32 bits in length and are typically presented as four (4) decimal numbers that are separated by a dot (or period). eg: 168.192.1.1. </p><p> @@ -92,7 +93,7 @@ primary names by which they are known within the local machine. This file helps to prime the pump so that a basic level of name resolution can exist before any other method of name resolution becomes available. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999956"></a><tt class="filename">/etc/resolv.conf</tt></h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2998179"></a><tt class="filename">/etc/resolv.conf</tt></h3></div></div><div></div></div><p> This file tells the name resolution libraries: </p><div class="itemizedlist"><ul type="disc"><li><p>The name of the domain to which the machine belongs @@ -102,7 +103,7 @@ This file tells the name resolution libraries: </p></li><li><p>The name or IP address of available Domain Name Servers that may be asked to perform name to address translation lookups - </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000000"></a><tt class="filename">/etc/host.conf</tt></h3></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996329"></a><tt class="filename">/etc/host.conf</tt></h3></div></div><div></div></div><p> <tt class="filename">/etc/host.conf</tt> is the primary means by which the setting in /etc/resolv.conf may be affected. It is a critical configuration file. This file controls the order by @@ -113,7 +114,7 @@ which name resolution may proceed. The typical structure is: </pre><p> then both addresses should be returned. Please refer to the man page for host.conf for further details. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000042"></a><tt class="filename">/etc/nsswitch.conf</tt></h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996371"></a><tt class="filename">/etc/nsswitch.conf</tt></h3></div></div><div></div></div><p> This file controls the actual name resolution targets. The file typically has resolver object specifications as follows: </p><pre class="screen"> @@ -149,22 +150,22 @@ Starting with version 2.2.0 samba has Linux support for extensions to the name service switch infrastructure so that linux clients will be able to obtain resolution of MS Windows NetBIOS names to IP Addresses. To gain this functionality Samba needs to be compiled -with appropriate arguments to the make command (ie: <b class="userinput"><tt>make +with appropriate arguments to the make command (i.e.: <b class="userinput"><tt>make nsswitch/libnss_wins.so</tt></b>). The resulting library should then be installed in the <tt class="filename">/lib</tt> directory and the "wins" parameter needs to be added to the "hosts:" line in the <tt class="filename">/etc/nsswitch.conf</tt> file. At this point it -will be possible to ping any MS Windows machine by it's NetBIOS +will be possible to ping any MS Windows machine by its NetBIOS machine name, so long as that machine is within the workgroup to which both the samba machine and the MS Windows machine belong. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3000130"></a>Name resolution as used within MS Windows networking</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996460"></a>Name resolution as used within MS Windows networking</h2></div></div><div></div></div><p> MS Windows networking is predicated about the name each machine is given. This name is known variously (and inconsistently) as the "computer name", "machine name", "networking name", "netbios name", -"SMB name". All terms mean the same thing with the exception of +or "SMB name". All terms mean the same thing with the exception of "netbios name" which can apply also to the name of the workgroup or the domain name. The terms "workgroup" and "domain" are really just a -simply name with which the machine is associated. All NetBIOS names +simple name with which the machine is associated. All NetBIOS names are exactly 16 characters in length. The 16th character is reserved. It is used to store a one byte value that indicates service level information for the NetBIOS name that is registered. A NetBIOS machine @@ -199,8 +200,8 @@ wants to locate a domain logon server. It finds this service and the IP address of a server that provides it by performing a lookup (via a NetBIOS broadcast) for enumeration of all machines that have registered the name type *<1c>. A logon request is then sent to each -IP address that is returned in the enumerated list of IP addresses. Which -ever machine first replies then ends up providing the logon services. +IP address that is returned in the enumerated list of IP addresses. +Whichever machine first replies then ends up providing the logon services. </p><p> The name "workgroup" or "domain" really can be confusing since these have the added significance of indicating what is the security @@ -228,7 +229,7 @@ NBT or NetBT, the NetBIOS over TCP/IP. MS Windows machines use a complex array of name resolution mechanisms. Since we are primarily concerned with TCP/IP this demonstration is limited to this area. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000278"></a>The NetBIOS Name Cache</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996585"></a>The NetBIOS Name Cache</h3></div></div><div></div></div><p> All MS Windows machines employ an in memory buffer in which is stored the NetBIOS names and IP addresses for all external machines that that machine has communicated with over the @@ -246,7 +247,7 @@ frustrating for users - but it is a characteristic of the protocol. The MS Windows utility that allows examination of the NetBIOS name cache is called "nbtstat". The Samba equivalent of this is called <b class="command">nmblookup</b>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000323"></a>The LMHOSTS file</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996630"></a>The LMHOSTS file</h3></div></div><div></div></div><p> This file is usually located in MS Windows NT 4.0 or 2000 in <tt class="filename">C:\WINNT\SYSTEM32\DRIVERS\ETC</tt> and contains the IP Address and the machine name in matched pairs. The @@ -331,25 +332,25 @@ It typically looks like: # so keeping the number of comments to a minimum will improve performance. # Therefore it is not advisable to simply add lmhosts file entries onto the # end of this file. -</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000567"></a>HOSTS file</h3></div></div><div></div></div><p> +</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996744"></a>HOSTS file</h3></div></div><div></div></div><p> This file is usually located in MS Windows NT 4.0 or 2000 in <tt class="filename">C:\WINNT\SYSTEM32\DRIVERS\ETC</tt> and contains the IP Address and the IP hostname in matched pairs. It can be used by the name resolution infrastructure in MS Windows, depending on how the TCP/IP environment is configured. This file is in every way the equivalent of the Unix/Linux <tt class="filename">/etc/hosts</tt> file. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000600"></a>DNS Lookup</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996776"></a>DNS Lookup</h3></div></div><div></div></div><p> This capability is configured in the TCP/IP setup area in the network -configuration facility. If enabled an elaborate name resolution sequence -is followed the precise nature of which is dependant on what the NetBIOS -Node Type parameter is configured to. A Node Type of 0 means use -NetBIOS broadcast (over UDP broadcast) is first used if the name +configuration facility. If enabled, an elaborate name resolution sequence +is followed the precise nature of which is dependant on how the NetBIOS +Node Type parameter is configured. A Node Type of 0 means that +NetBIOS broadcast (over UDP broadcast) is used if the name that is the subject of a name lookup is not found in the NetBIOS name cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast lookup is used. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000624"></a>WINS Lookup</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996801"></a>WINS Lookup</h3></div></div><div></div></div><p> A WINS (Windows Internet Name Server) service is the equivalent of the rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores the names and IP addresses that are registered by a Windows client @@ -368,11 +369,11 @@ needed in the <tt class="filename">smb.conf</tt> file: </pre><p> where <i class="replaceable"><tt>xxx.xxx.xxx.xxx</tt></i> is the IP address of the WINS server. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3000695"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996872"></a>Common Errors</h2></div></div><div></div></div><p> TCP/IP network configuration problems find every network administrator sooner or later. The cause can be anything from keyboard mishaps, forgetfulness, simple mistakes, and carelessness. Of course, no one is every deliberately careless! -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000711"></a>My Boomerang Won't Come Back</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996887"></a>My Boomerang Won't Come Back</h3></div></div><div></div></div><p> Well, the real complaint said, "I can ping my samba server from Windows, but I can not ping my Windows machine from the samba server." </p><p> @@ -382,9 +383,9 @@ carelessness. Of course, no one is every deliberately careless! </p><p> Due to inconsistent netmasks, the Windows machine was on network 192.168.1.0/24, while the Samba server was on network 192.168.1.128/25 - logically a different network. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000742"></a>Very Slow Network Connections</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996919"></a>Very Slow Network Connections</h3></div></div><div></div></div><p> A common causes of slow network response includes: - </p><div class="itemizedlist"><ul type="disc"><li><p>Client is configured to use DNS and DNS server is down</p></li><li><p>Client is configured to use remote DNS server, but remote connection is down</p></li><li><p>Client is configured to use a WINS server, but there is no WINS server</p></li><li><p>Client is NOT configured to use a WINS server, but there is a WINS server</p></li><li><p>Firewall is filtering our DNS or WINS traffic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000794"></a>Samba server name change problem</h3></div></div><div></div></div><p> + </p><div class="itemizedlist"><ul type="disc"><li><p>Client is configured to use DNS and DNS server is down</p></li><li><p>Client is configured to use remote DNS server, but remote connection is down</p></li><li><p>Client is configured to use a WINS server, but there is no WINS server</p></li><li><p>Client is NOT configured to use a WINS server, but there is a WINS server</p></li><li><p>Firewall is filtering our DNS or WINS traffic</p></li></ul></div></div><div xmlns:ns94="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996970"></a>Samba server name change problem</h3></div></div><div></div></div><p> The name of the samba server was changed, samba was restarted, samba server can not be pinged by new name from MS Windows NT4 Workstation, but it does still respond to ping using the old name. Why? @@ -393,8 +394,8 @@ carelessness. Of course, no one is every deliberately careless! </p><div class="itemizedlist"><ul type="disc"><li><p>WINS is NOT in use, only broadcast based name resolution is used</p></li><li><p>The samba server was renamed and restarted within the last 10-15 minutes</p></li><li><p>The old samba server name is still in the NetBIOS name cache on the MS Windows NT4 Workstation</p></li></ul></div><p> To find what names are present in the NetBIOS name cache on the MS Windows NT4 machine, open a cmd shell, then: - </p><p> - </p><pre class="screen"> + </p><ns94:p> + </ns94:p><pre class="screen"> C:\temp\>nbtstat -n NetBIOS Local Name Table @@ -418,10 +419,10 @@ carelessness. Of course, no one is every deliberately careless! FRODO <20> UNIQUE 192.168.1.1 240 C:\Temp\> - </pre><p> - </p><p> + </pre><ns94:p> + </ns94:p><p> In the above example, FRODO is the Samba server and SLACK is the MS Windows NT4 Workstation. - The first listing shows the contents of the Local Name Table (ie: Identity information on + The first listing shows the contents of the Local Name Table (i.e.: Identity information on the MS Windows workstation), the second shows the NetBIOS name in the NetBIOS name cache. The name cache contains the remote machines known to this workstation. </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pam.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="unicode.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter25.PAM based Distributed Authentication</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter27.Unicode/Charsets</td></tr></table></div></body></html> diff --git a/docs/htmldocs/introduction.html b/docs/htmldocs/introduction.html index 94419cff04..f2e9d6f63f 100644 --- a/docs/htmldocs/introduction.html +++ b/docs/htmldocs/introduction.html @@ -1,5 +1,6 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartI.General Installation</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="index.html" title="SAMBA Project Documentation"><link rel="next" href="IntroSMB.html" title="Chapter1.Introduction to Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartI.General Installation</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="index.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="IntroSMB.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>General Installation</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2884330"></a>Preparing Samba for Configuration</h1></div></div><div></div></div><p>This section of the Samba-HOWTO-Collection contains general info on how to install samba +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartI.General Installation</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="index.html" title="SAMBA Project Documentation"><link rel="next" href="IntroSMB.html" title="Chapter1.Introduction to Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartI.General Installation</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="index.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="IntroSMB.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>General Installation</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2883926"></a>Preparing Samba for Configuration</h1></div></div><div></div></div><p>This section of the Samba-HOWTO-Collection contains general info on how to install samba and how to configure the parts of samba you will most likely need. -PLEASE read this.</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="IntroSMB.html">Introduction to Samba</a></dt><dd><dl><dt><a href="IntroSMB.html#id2885613">Background</a></dt><dt><a href="IntroSMB.html#id2885824">Terminology</a></dt><dt><a href="IntroSMB.html#id2885978">Related Projects</a></dt><dt><a href="IntroSMB.html#id2886047">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2886135">Epilogue</a></dt><dt><a href="IntroSMB.html#id2886209">Miscellaneous</a></dt></dl></dd><dt>2. <a href="install.html">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="install.html#id2886868">Obtaining and installing samba</a></dt><dt><a href="install.html#id2886909">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2886946">Example Configuration</a></dt><dt><a href="install.html#id2887096">SWAT</a></dt></dl></dd><dt><a href="install.html#id2887140">Try listing the shares available on your - server</a></dt><dt><a href="install.html#id2887191">Try connecting with the unix client</a></dt><dt><a href="install.html#id2887292">Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client</a></dt><dt><a href="install.html#id2887355">What If Things Don't Work?</a></dt><dt><a href="install.html#id2887388">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2887401">Why are so many smbd processes eating memory?</a></dt><dt><a href="install.html#id2887617">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="FastStart.html">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="FastStart.html#id2886744">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="index.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="IntroSMB.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">SAMBA Project Documentation</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter1.Introduction to Samba</td></tr></table></div></body></html> +PLEASE read this.</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="IntroSMB.html">Introduction to Samba</a></dt><dd><dl><dt><a href="IntroSMB.html#id2885266">Background</a></dt><dt><a href="IntroSMB.html#id2885320">Terminology</a></dt><dt><a href="IntroSMB.html#id2884044">Related Projects</a></dt><dt><a href="IntroSMB.html#id2884112">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2884199">Epilogue</a></dt><dt><a href="IntroSMB.html#id2884272">Miscellaneous</a></dt></dl></dd><dt>2. <a href="install.html">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="install.html#id2885039">Obtaining and installing samba</a></dt><dt><a href="install.html#id2885081">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2884654">Example Configuration</a></dt><dt><a href="install.html#id2884797">SWAT</a></dt></dl></dd><dt><a href="install.html#id2884842">Try listing the shares available on your + server</a></dt><dt><a href="install.html#id2884347">Try connecting with the unix client</a></dt><dt><a href="install.html#id2884450">Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client</a></dt><dt><a href="install.html#id2884510">What If Things Don't Work?</a></dt><dt><a href="install.html#id2884540">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2884553">Why are so many smbd processes eating memory?</a></dt><dt><a href="install.html#id2885931">I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="FastStart.html">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="FastStart.html#id2886380">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="index.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="IntroSMB.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">SAMBA Project Documentation</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter1.Introduction to Samba</td></tr></table></div></body></html> diff --git a/docs/htmldocs/ix01.html b/docs/htmldocs/ix01.html index 4f706aed70..6d8bfe0633 100644 --- a/docs/htmldocs/ix01.html +++ b/docs/htmldocs/ix01.html @@ -1 +1,2 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Index</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="Further-Resources.html" title="Chapter41.Further Resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Index</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Further-Resources.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"></td></tr></table><hr></div><div class="index"><div class="titlepage"><div><div><h2 class="title"><a name="id3018533"></a>Index</h2></div></div><div></div></div><div class="index"></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Further-Resources.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"></td></tr><tr><td width="40%" align="left" valign="top">Chapter41.Further Resources</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"></td></tr></table></div></body></html> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Index</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="Further-Resources.html" title="Chapter41.Further Resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Index</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Further-Resources.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"></td></tr></table><hr></div><div class="index"><div class="titlepage"><div><div><h2 class="title"><a name="id3016415"></a>Index</h2></div></div><div></div></div><div class="index"></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Further-Resources.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"></td></tr><tr><td width="40%" align="left" valign="top">Chapter41.Further Resources</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"></td></tr></table></div></body></html> diff --git a/docs/htmldocs/locking.html b/docs/htmldocs/locking.html index a128cac7ce..6214254ce0 100644 --- a/docs/htmldocs/locking.html +++ b/docs/htmldocs/locking.html @@ -1,7 +1,8 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter14.File and Record Locking</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls"><link rel="next" href="securing-samba.html" title="Chapter15.Securing Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter14.File and Record Locking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AccessControls.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="securing-samba.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="locking"></a>Chapter14.File and Record Locking</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Eric</span> <span class="surname">Roseme</span></h3><div class="affiliation"><span class="orgname">HP Oplocks Usage Recommendations Whitepaper<br></span><div class="address"><p><tt class="email"><<a href="mailto:eric.roseme@hp.com">eric.roseme@hp.com</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="locking.html#id2928216">Features and Benefits</a></dt><dt><a href="locking.html#id2928272">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2928403">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2929049">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2929159">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2929419">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2929649">Workstation Service Entries</a></dt><dt><a href="locking.html#id2929676">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2929755">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2929785">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2929859">locking.tdb error messages</a></dt></dl></dd><dt><a href="locking.html#id2929890">Additional Reading</a></dt></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter14.File and Record Locking</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls"><link rel="next" href="securing-samba.html" title="Chapter15.Securing Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter14.File and Record Locking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AccessControls.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="securing-samba.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="locking"></a>Chapter14.File and Record Locking</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Eric</span> <span class="surname">Roseme</span></h3><div class="affiliation"><span class="orgname">HP Oplocks Usage Recommendations Whitepaper<br></span><div class="address"><p><tt class="email"><<a href="mailto:eric.roseme@hp.com">eric.roseme@hp.com</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="locking.html#id2926847">Features and Benefits</a></dt><dt><a href="locking.html#id2926902">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2927033">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2925408">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2925517">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2925776">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2928213">Workstation Service Entries</a></dt><dt><a href="locking.html#id2928240">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2928320">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2928350">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2928423">locking.tdb error messages</a></dt></dl></dd><dt><a href="locking.html#id2928454">Additional Reading</a></dt></dl></div><p> One area which causes trouble for many network administrators is locking. The extent of the problem is readily evident from searches over the internet. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928216"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926847"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba provides all the same locking semantics that MS Windows clients expect and that MS Windows NT4 / 200x servers provide also. </p><p> @@ -23,13 +24,13 @@ settings on the MS Windows client. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> Sometimes it is necessary to disable locking control settings BOTH on the Samba server as well as on each MS Windows client! -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928272"></a>Discussion</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926902"></a>Discussion</h2></div></div><div></div></div><p> There are two types of locking which need to be performed by a SMB server. The first is <span class="emphasis"><em>record locking</em></span> which allows a client to lock a range of bytes in a open file. The second is the <span class="emphasis"><em>deny modes</em></span> that are specified when a file is open. </p><p> -Record locking semantics under Unix is very different from record locking under +Record locking semantics under Unix are very different from record locking under Windows. Versions of Samba before 2.2 have tried to use the native fcntl() unix system call to implement proper record locking between different Samba clients. This can not be fully correct due to several reasons. The simplest is the fact @@ -51,7 +52,7 @@ important to them. By default Samba only makes locking calls when explicitly ask to by a client, but if you set <i class="parameter"><tt>strict locking = yes</tt></i> then it will make lock checking calls on every read and write. </p><p> -You can also disable by range locking completely using <i class="parameter"><tt>locking = no</tt></i>. +You can also disable byte range locking completely using <i class="parameter"><tt>locking = no</tt></i>. This is useful for those shares that don't support locking or don't need it (such as cdroms). In this case Samba fakes the return codes of locking calls to tell clients that everything is OK. @@ -62,7 +63,7 @@ access should be allowed simultaneously with its open. A client may ask for <tt class="constant">DENY_NONE</tt>, <tt class="constant">DENY_READ</tt>, <tt class="constant">DENY_WRITE</tt> or <tt class="constant">DENY_ALL</tt>. There are also special compatibility modes called <tt class="constant">DENY_FCB</tt> and <tt class="constant">DENY_DOS</tt>. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928403"></a>Opportunistic Locking Overview</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927033"></a>Opportunistic Locking Overview</h3></div></div><div></div></div><p> Opportunistic locking (Oplocks) is invoked by the Windows file system (as opposed to an API) via registry entries (on the server AND client) for the purpose of enhancing network performance when accessing a file @@ -185,7 +186,7 @@ In mission critical high availability environments, careful attention should be given to opportunistic locking. Ideally, comprehensive testing should be done with all affected applications with oplocks enabled and disabled. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928695"></a>Exclusively Accessed Shares</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925067"></a>Exclusively Accessed Shares</h4></div></div><div></div></div><p> Opportunistic locking is most effective when it is confined to shares that are exclusively accessed by a single user, or by only one user at a time. Because the true value of opportunistic locking is the local @@ -194,7 +195,7 @@ mechanism will cause a delay. </p><p> Home directories are the most obvious examples of where the performance benefit of opportunistic locking can be safely realized. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928719"></a>Multiple-Accessed Shares or Files</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925092"></a>Multiple-Accessed Shares or Files</h4></div></div><div></div></div><p> As each additional user accesses a file in a share with opportunistic locking enabled, the potential for delays and resulting perceived poor performance increases. When multiple users are accessing a file on a @@ -206,7 +207,7 @@ of the caching user. As each additional client attempts to access a file with oplocks set, the potential performance improvement is negated and eventually results in a performance bottleneck. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928748"></a>Unix or NFS Client Accessed Files</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925121"></a>Unix or NFS Client Accessed Files</h4></div></div><div></div></div><p> Local Unix and NFS clients access files without a mandatory file locking mechanism. Thus, these client platforms are incapable of initiating an oplock break request from the server to a Windows client @@ -216,7 +217,7 @@ exposes the file to likely data corruption. </p><p> If files are shared between Windows clients, and either local Unix or NFS users, then turn opportunistic locking off. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928775"></a>Slow and/or Unreliable Networks</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925147"></a>Slow and/or Unreliable Networks</h4></div></div><div></div></div><p> The biggest potential performance improvement for opportunistic locking occurs when the client-side caching of reads and writes delivers the most differential over sending those reads and writes over the wire. @@ -231,7 +232,7 @@ the most advantageous scenario to utilize opportunistic locking. If the network is slow, unreliable, or a WAN, then do not configure opportunistic locking if there is any chance of multiple users regularly opening the same file. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928808"></a>Multi-User Databases</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925180"></a>Multi-User Databases</h4></div></div><div></div></div><p> Multi-user databases clearly pose a risk due to their very nature - they are typically heavily accessed by numerous users at random intervals. Placing a multi-user database on a share with opportunistic @@ -239,7 +240,7 @@ locking enabled will likely result in a locking management bottleneck on the Samba server. Whether the database application is developed in-house or a commercially available product, ensure that the share has opportunistic locking disabled. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928829"></a>PDM Data Shares</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925202"></a>PDM Data Shares</h4></div></div><div></div></div><p> Process Data Management (PDM) applications such as IMAN, Enovia, and Clearcase, are increasing in usage with Windows client platforms, and therefore SMB data stores. PDM applications manage multi-user @@ -252,7 +253,7 @@ application and PDM server to negotiate and maintain. It is appropriate to eliminate the client OS from any caching tasks, and the server from any oplock management, by disabling opportunistic locking on the share. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928870"></a>Beware of Force User</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925229"></a>Beware of Force User</h4></div></div><div></div></div><p> Samba includes an <tt class="filename">smb.conf</tt> parameter called <i class="parameter"><tt>force user</tt></i> that changes the user accessing a share from the incoming user to whatever user is defined by the smb.conf variable. If opportunistic locking is enabled @@ -270,7 +271,7 @@ Avoid the combination of the following: Slow or unreliable networks </p></li><li><p> Opportunistic Locking Enabled - </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928948"></a>Advanced Samba Opportunistic Locking Parameters</h4></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925306"></a>Advanced Samba Opportunistic Locking Parameters</h4></div></div><div></div></div><p> Samba provides opportunistic locking parameters that allow the administrator to adjust various properties of the oplock mechanism to account for timing and usage levels. These parameters provide good @@ -284,7 +285,7 @@ are required, then the better option is to simply turn oplocks off. The samba SWAT help text for both parameters reads "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." This is good advice. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928991"></a>Mission Critical High Availability</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925349"></a>Mission Critical High Availability</h4></div></div><div></div></div><p> In mission critical high availability environments, data integrity is often a priority. Complex and expensive configurations are implemented to ensure that if a client loses connectivity with a file server, a @@ -314,7 +315,7 @@ In mission critical high availability environments, careful attention should be given to opportunistic locking. Ideally, comprehensive testing should be done with all affected applications with oplocks enabled and disabled. -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929049"></a>Samba Opportunistic Locking Control</h2></div></div><div></div></div><p> +</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2925408"></a>Samba Opportunistic Locking Control</h2></div></div><div></div></div><p> Opportunistic Locking is a unique Windows file locking feature. It is not really file locking, but is included in most discussions of Windows file locking, so is considered a defacto locking feature. @@ -364,29 +365,29 @@ of your client sending oplock breaks and will instead want to disable oplocks fo </p><p> Another factor to consider is the perceived performance of file access. If oplocks provide no measurable speed benefit on your network, it might not be worth the hassle of dealing with them. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929159"></a>Example Configuration</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925517"></a>Example Configuration</h3></div></div><div></div></div><p> In the following we examine two distinct aspects of Samba locking controls. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929172"></a>Disabling Oplocks</h4></div></div><div></div></div><p> +</p><div xmlns:ns38="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925530"></a>Disabling Oplocks</h4></div></div><div></div></div><p> You can disable oplocks on a per-share basis with the following: -</p><p> -</p><pre class="programlisting"> +</p><ns38:p> +</ns38:p><pre class="programlisting"> [acctdata] oplocks = False level2 oplocks = False -</pre><p> -</p><p> +</pre><ns38:p> +</ns38:p><p> The default oplock type is Level1. Level2 Oplocks are enabled on a per-share basis in the <tt class="filename">smb.conf</tt> file. </p><p> Alternately, you could disable oplocks on a per-file basis within the share: -</p><p> -</p><pre class="programlisting"> +</p><ns38:p> +</ns38:p><pre class="programlisting"> veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/ -</pre><p> -</p><p> +</pre><ns38:p> +</ns38:p><p> If you are experiencing problems with oplocks as apparent from Samba's log entries, you may want to play it safe and disable oplocks and level2 oplocks. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929235"></a>Disabling Kernel OpLocks</h4></div></div><div></div></div><p> +</p></div><div xmlns:ns39="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925592"></a>Disabling Kernel OpLocks</h4></div></div><div></div></div><p> Kernel OpLocks is an <tt class="filename">smb.conf</tt> parameter that notifies Samba (if the UNIX kernel has the capability to send a Windows client an oplock break) when a UNIX process is attempting to open the file that is @@ -398,13 +399,13 @@ to the risk of data corruption. If the UNIX kernel has the ability to send an oplock break, then the kernel oplocks parameter enables Samba to send the oplock break. Kernel oplocks are enabled on a per-server basis in the <tt class="filename">smb.conf</tt> file. -</p><p> -</p><pre class="programlisting"> +</p><ns39:p> +</ns39:p><pre class="programlisting"> [global] kernel oplocks = yes -</pre><p> +</pre><ns39:p> The default is "no". -</p><p> +</ns39:p><p> Veto OpLocks is an <tt class="filename">smb.conf</tt> parameter that identifies specific files for which Oplocks are disabled. When a Windows client opens a file that has been configured for veto oplocks, the client will not be granted @@ -416,26 +417,26 @@ allow Windows clients to utilize the performance benefit of file caching without the risk of data corruption. Veto Oplocks can be enabled on a per-share basis, or globally for the entire server, in the <tt class="filename">smb.conf</tt> file: -</p><p> -</p><pre class="programlisting"><font color="red"><title>Example Veto OpLock Settings</title></font> +</p><ns39:p> +</ns39:p><pre class="programlisting"><font color="red"><title>Example Veto OpLock Settings</title></font> [global] veto oplock files = /filename.htm/*.txt/ [share_name] veto oplock files = /*.exe/filename.ext/ -</pre><p> -</p><p> +</pre><ns39:p> +</ns39:p><p> <span class="emphasis"><em>Oplock break wait time</em></span> is an <tt class="filename">smb.conf</tt> parameter that adjusts the time interval for Samba to reply to an oplock break request. Samba recommends "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." Oplock Break Wait Time can only be configured globally in the <tt class="filename">smb.conf</tt> file: -</p><p> -</p><pre class="programlisting"> +</p><ns39:p> +</ns39:p><pre class="programlisting"> [global] oplock break wait time = 0 (default) -</pre><p> -</p><p> +</pre><ns39:p> +</ns39:p><p> <span class="emphasis"><em>Oplock break contention limit</em></span> is an <tt class="filename">smb.conf</tt> parameter that limits the response of the Samba server to grant an oplock if the configured number of contending clients reaches the limit specified by the @@ -443,15 +444,15 @@ parameter. Samba recommends "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." Oplock Break Contention Limit can be enable on a per-share basis, or globally for the entire server, in the <tt class="filename">smb.conf</tt> file: -</p><p> -</p><pre class="programlisting"> +</p><ns39:p> +</ns39:p><pre class="programlisting"> [global] oplock break contention limit = 2 (default) [share_name] oplock break contention limit = 2 (default) -</pre><p> -</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929419"></a>MS Windows Opportunistic Locking and Caching Controls</h2></div></div><div></div></div><p> +</pre><ns39:p> +</ns39:p></div></div></div><div xmlns:ns40="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2925776"></a>MS Windows Opportunistic Locking and Caching Controls</h2></div></div><div></div></div><p> There is a known issue when running applications (like Norton Anti-Virus) on a Windows 2000/ XP workstation computer that can affect any application attempting to access shared database files across a network. This is a result of a default setting configured in the Windows 2000/XP @@ -488,20 +489,20 @@ Windows 2000 will still respect the EnableOplocks registry value used to disable in earlier versions of Windows. </p></div><p> You can also deny the granting of opportunistic locks by changing the following registry entries: -</p><p> -</p><pre class="programlisting"> +</p><ns40:p> +</ns40:p><pre class="programlisting"> HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\MRXSmb\Parameters\ OplocksDisabled REG_DWORD 0 or 1 Default: 0 (not disabled) -</pre><p> -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><ns40:p> +</ns40:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The OplocksDisabled registry value configures Windows clients to either request or not request opportunistic locks on a remote file. To disable oplocks, the value of OplocksDisabled must be set to 1. -</p></div><p> -</p><pre class="programlisting"> +</p></div><ns40:p> +</ns40:p><pre class="programlisting"> HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanServer\Parameters @@ -510,8 +511,8 @@ request opportunistic locks on a remote file. To disable oplocks, the value of EnableOpLockForceClose REG_DWORD 0 or 1 Default: 0 (Disabled by Default) -</pre><p> -</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><ns40:p> +</ns40:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The EnableOplocks value configures Windows-based servers (including Workstations sharing files) to allow or deny opportunistic locks on local files. </p></div><p> @@ -543,7 +544,7 @@ An illustration of how level II oplocks work: station holds any oplock on the file. Because the workstations can have no cached writes or locks at this point, they need not respond to the break-to-none advisory; all they need do is invalidate locally cashed read-ahead data. - </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929649"></a>Workstation Service Entries</h3></div></div><div></div></div><pre class="programlisting"> + </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928213"></a>Workstation Service Entries</h3></div></div><div></div></div><pre class="programlisting"> \HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanWorkstation\Parameters @@ -552,7 +553,7 @@ An illustration of how level II oplocks work: </pre><p> Indicates whether the redirector should use opportunistic-locking (oplock) performance enhancement. This parameter should be disabled only to isolate problems. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929676"></a>Server Service Entries</h3></div></div><div></div></div><pre class="programlisting"> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928240"></a>Server Service Entries</h3></div></div><div></div></div><pre class="programlisting"> \HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanServer\Parameters @@ -581,7 +582,7 @@ the server disables raw I/O and opportunistic locking for this connection. Specifies the time that the server waits for a client to respond to an oplock break request. Smaller values can allow detection of crashed clients more quickly but can potentially cause loss of cached data. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929755"></a>Persistent Data Corruption</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928320"></a>Persistent Data Corruption</h2></div></div><div></div></div><p> If you have applied all of the settings discussed in this paper but data corruption problems and other symptoms persist, here are some additional things to check out: </p><p> @@ -592,7 +593,7 @@ rebuild the data files in question. This involves creating a new data file with same definition as the file to be rebuilt and transferring the data from the old file to the new one. There are several known methods for doing this that can be found in our Knowledge Base. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929785"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928350"></a>Common Errors</h2></div></div><div></div></div><p> In some sites locking problems surface as soon as a server is installed, in other sites locking problems may not surface for a long time. Almost without exception, when a locking problem does surface it will cause embarrassment and potential data corruption. @@ -622,18 +623,18 @@ so far: report on https://bugzilla.samba.org without delay. Make sure that you give as much information as you possibly can to help isolate the cause and to allow reproduction of the problem (an essential step in problem isolation and correction). - </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929859"></a>locking.tdb error messages</h3></div></div><div></div></div><p> - </p><pre class="screen"> + </p></li></ul></div><div xmlns:ns41="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928423"></a>locking.tdb error messages</h3></div></div><div></div></div><ns41:p> + </ns41:p><pre class="screen"> > We are seeing lots of errors in the samba logs like: > > tdb(/usr/local/samba_2.2.7/var/locks/locking.tdb): rec_read bad magic > 0x4d6f4b61 at offset=36116 > > What do these mean? - </pre><p> - </p><p> + </pre><ns41:p> + </ns41:p><p> Corrupted tdb. Stop all instances of smbd, delete locking.tdb, restart smbd. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929890"></a>Additional Reading</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928454"></a>Additional Reading</h2></div></div><div></div></div><p> You may want to check for an updated version of this white paper on our Web site from time to time. Many of our white papers are updated as information changes. For those papers, the Last Edited date is always at the top of the paper. diff --git a/docs/htmldocs/migration.html b/docs/htmldocs/migration.html index b8027a62ea..c099bb5137 100644 --- a/docs/htmldocs/migration.html +++ b/docs/htmldocs/migration.html @@ -1 +1,2 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartIV.Migration and Updating</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="SambaHA.html" title="Chapter29.High Availability Options"><link rel="next" href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartIV.Migration and Updating</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="SambaHA.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="upgrading-to-3.0.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="migration"></a>Migration and Updating</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>30. <a href="upgrading-to-3.0.html">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id3001684">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id3001709">Obsolete configuration options</a></dt><dt><a href="upgrading-to-3.0.html#id3003319">Password Backend</a></dt></dl></dd><dt>31. <a href="NT4Migration.html">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001339">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001368">Objectives</a></dt><dt><a href="NT4Migration.html#id3004043">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id3004381">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id3004462">Planning for Success</a></dt><dt><a href="NT4Migration.html#id3004704">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="SWAT.html">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="SWAT.html#id3003929">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id3003963">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id3006322">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id3006435">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id3006499">Global Settings</a></dt><dt><a href="SWAT.html#id3006604">Share Settings</a></dt><dt><a href="SWAT.html#id3006669">Printers Settings</a></dt><dt><a href="SWAT.html#id3006733">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id3006781">The Status Page</a></dt><dt><a href="SWAT.html#id3006833">The View Page</a></dt><dt><a href="SWAT.html#id3006856">The Password Change Page</a></dt></dl></dd></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="SambaHA.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="upgrading-to-3.0.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter29.High Availability Options</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</td></tr></table></div></body></html> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartIV.Migration and Updating</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="SambaHA.html" title="Chapter29.High Availability Options"><link rel="next" href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartIV.Migration and Updating</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="SambaHA.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="upgrading-to-3.0.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="migration"></a>Migration and Updating</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>30. <a href="upgrading-to-3.0.html">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id3001143">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id3001165">Obsolete configuration options</a></dt><dt><a href="upgrading-to-3.0.html#id3001219">Password Backend</a></dt></dl></dd><dt>31. <a href="NT4Migration.html">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="NT4Migration.html#id3000463">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id3000487">Objectives</a></dt><dt><a href="NT4Migration.html#id2999415">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id3001632">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001713">Planning for Success</a></dt><dt><a href="NT4Migration.html#id3001954">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="SWAT.html">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="SWAT.html#id3002261">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id3002111">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id3003000">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id3003113">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id3003176">Global Settings</a></dt><dt><a href="SWAT.html#id3003282">Share Settings</a></dt><dt><a href="SWAT.html#id3003346">Printers Settings</a></dt><dt><a href="SWAT.html#id3003411">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id3003459">The Status Page</a></dt><dt><a href="SWAT.html#id3003511">The View Page</a></dt><dt><a href="SWAT.html#id3003534">The Password Change Page</a></dt></dl></dd></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="SambaHA.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="upgrading-to-3.0.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter29.High Availability Options</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</td></tr></table></div></body></html> diff --git a/docs/htmldocs/msdfs.html b/docs/htmldocs/msdfs.html index d01b8f4c5d..fc05fee538 100644 --- a/docs/htmldocs/msdfs.html +++ b/docs/htmldocs/msdfs.html @@ -1,6 +1,7 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships"><link rel="next" href="printing.html" title="Chapter18.Classical Printing Support"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter17.Hosting a Microsoft Distributed File System tree on Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="InterdomainTrusts.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="printing.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="msdfs"></a>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Shirish</span> <span class="surname">Kalele</span></h3><div class="affiliation"><span class="orgname">Samba Team & Veritas Software<br></span><div class="address"><p><br> <tt class="email"><<a href="mailto:samba@samba.org">samba@samba.org</a>></tt><br> - </p></div></div></div></div><div><p class="pubdate">12 Jul 2000</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="msdfs.html#id2933279">Features and Benefits</a></dt><dt><a href="msdfs.html#id2934931">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933279"></a>Features and Benefits</h2></div></div><div></div></div><p> + </p></div></div></div></div><div><p class="pubdate">12 Jul 2000</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="msdfs.html#id2929286">Features and Benefits</a></dt><dt><a href="msdfs.html#id2930696">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929286"></a>Features and Benefits</h2></div></div><div></div></div><p> The Distributed File System (or DFS) provides a means of separating the logical view of files and directories that users see from the actual physical locations of these resources on the network. It allows for higher availability, smoother @@ -52,7 +53,7 @@ network shares you want, and start Samba.</p><p>Users on DFS-aware clients can now browse the DFS tree on the Samba server at \\samba\dfs. Accessing links linka or linkb (which appear as directories to the client) - takes users directly to the appropriate shares on the network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2934931"></a>Common Errors</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Windows clients need to be rebooted + takes users directly to the appropriate shares on the network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930696"></a>Common Errors</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Windows clients need to be rebooted if a previously mounted non-dfs share is made a dfs root or vice versa. A better way is to introduce a new share and make it the dfs root.</p></li><li><p>Currently there's a restriction that msdfs diff --git a/docs/htmldocs/net.8.html b/docs/htmldocs/net.8.html index 13e4be81be..dd7c0165ad 100644 --- a/docs/htmldocs/net.8.html +++ b/docs/htmldocs/net.8.html @@ -95,12 +95,12 @@ The type defaults to 0x20 (workstation). </p></div><div class="refsect3" lang="en"><h4>LOOKUP LDAP [<i class="replaceable"><tt>DOMAIN</tt></i></h4><p>Give IP address of LDAP server of specified <i class="replaceable"><tt>DOMAIN</tt></i>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><h4>LOOKUP KDC [<i class="replaceable"><tt>REALM</tt></i>]</h4><p>Give IP address of KDC for the specified <i class="replaceable"><tt>REALM</tt></i>. Defaults to local realm.</p></div><div class="refsect3" lang="en"><h4>LOOKUP DC [<i class="replaceable"><tt>DOMAIN</tt></i>]</h4><p>Give IP's of Domain Controllers for specified <i class="replaceable"><tt> DOMAIN</tt></i>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><h4>LOOKUP MASTER <i class="replaceable"><tt>DOMAIN</tt></i></h4><p>Give IP of master browser for specified <i class="replaceable"><tt>DOMAIN</tt></i> -or workgroup. Defaults to local domain.</p></div></div><div class="refsect2" lang="en"><h3>CACHE</h3><p>Samba uses a general caching interface called 'gencache'. It -can be controlled using 'NET CACHE'.</p><p>All the timeout parameters support the suffixes: +or workgroup. Defaults to local domain.</p></div></div><div xmlns:ns1="" class="refsect2" lang="en"><h3>CACHE</h3><p>Samba uses a general caching interface called 'gencache'. It +can be controlled using 'NET CACHE'.</p><ns1:p>All the timeout parameters support the suffixes: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>s - Seconds</td></tr><tr><td>m - Minutes</td></tr><tr><td>h - Hours</td></tr><tr><td>d - Days</td></tr><tr><td>w - Weeks</td></tr></table><p> +</ns1:p><table class="simplelist" border="0" summary="Simple list"><tr><td>s - Seconds</td></tr><tr><td>m - Minutes</td></tr><tr><td>h - Hours</td></tr><tr><td>d - Days</td></tr><tr><td>w - Weeks</td></tr></table><ns1:p> -</p><div class="refsect3" lang="en"><h4>CACHE ADD <i class="replaceable"><tt>key</tt></i> <i class="replaceable"><tt>data</tt></i> <i class="replaceable"><tt>time-out</tt></i></h4><p>Add specified key+data to the cache with the given timeout.</p></div><div class="refsect3" lang="en"><h4>CACHE DEL <i class="replaceable"><tt>key</tt></i></h4><p>Delete key from the cache.</p></div><div class="refsect3" lang="en"><h4>CACHE SET <i class="replaceable"><tt>key</tt></i> <i class="replaceable"><tt>data</tt></i> <i class="replaceable"><tt>time-out</tt></i></h4><p>Update data of existing cache entry.</p></div><div class="refsect3" lang="en"><h4>CACHE SEARCH <i class="replaceable"><tt>PATTERN</tt></i></h4><p>Search for the specified pattern in the cache data.</p></div><div class="refsect3" lang="en"><h4>CACHE LIST</h4><p> +</ns1:p><div class="refsect3" lang="en"><h4>CACHE ADD <i class="replaceable"><tt>key</tt></i> <i class="replaceable"><tt>data</tt></i> <i class="replaceable"><tt>time-out</tt></i></h4><p>Add specified key+data to the cache with the given timeout.</p></div><div class="refsect3" lang="en"><h4>CACHE DEL <i class="replaceable"><tt>key</tt></i></h4><p>Delete key from the cache.</p></div><div class="refsect3" lang="en"><h4>CACHE SET <i class="replaceable"><tt>key</tt></i> <i class="replaceable"><tt>data</tt></i> <i class="replaceable"><tt>time-out</tt></i></h4><p>Update data of existing cache entry.</p></div><div class="refsect3" lang="en"><h4>CACHE SEARCH <i class="replaceable"><tt>PATTERN</tt></i></h4><p>Search for the specified pattern in the cache data.</p></div><div class="refsect3" lang="en"><h4>CACHE LIST</h4><p> List all current items in the cache. </p></div><div class="refsect3" lang="en"><h4>CACHE FLUSH</h4><p>Remove all the current items from the cache.</p></div></div><div class="refsect2" lang="en"><h3>GETLOCALSID [DOMAIN]</h3><p>Print the SID of the specified domain, or if the parameter is omitted, the SID of the domain the local server is in.</p></div><div class="refsect2" lang="en"><h3>SETLOCALSID S-1-5-21-x-y-z</h3><p>Sets domain sid for the local server to the specified SID.</p></div><div class="refsect2" lang="en"><h3>GROUPMAP</h3><p>Manage the mappings between Windows group SIDs and UNIX groups. diff --git a/docs/htmldocs/optional.html b/docs/htmldocs/optional.html index 1c300521bc..1a6d971f5f 100644 --- a/docs/htmldocs/optional.html +++ b/docs/htmldocs/optional.html @@ -1,26 +1,27 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartIII.Advanced Configuration</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide"><link rel="next" href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartIII.Advanced Configuration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ClientConfig.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="NetworkBrowsing.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="optional"></a>Advanced Configuration</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2901731"></a>Valuable Nuts and Bolts Information</h1></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartIII.Advanced Configuration</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide"><link rel="next" href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartIII.Advanced Configuration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ClientConfig.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="NetworkBrowsing.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="optional"></a>Advanced Configuration</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2901329"></a>Valuable Nuts and Bolts Information</h1></div></div><div></div></div><p> Samba has several features that you might want or might not want to use. The chapters in this part each cover specific Samba features. -</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>10. <a href="NetworkBrowsing.html">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2903558">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2903637">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2903747">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2903764">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2903926">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2904058">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2904194">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2904320">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2904541">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2904811">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2904967">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2904984">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2905013">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2905122">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905183">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905341">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2905540">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2905565">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905650">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905663">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2905730">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2905867">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905914">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2906021">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2906100">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2906720">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2906735">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2906764">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></dd><dt>11. <a href="passdb.html">Account Information Databases</a></dt><dd><dl><dt><a href="passdb.html#id2910308">Features and Benefits</a></dt><dt><a href="passdb.html#id2910636">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2910700">Important Notes About Security</a></dt><dt><a href="passdb.html#id2910954">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="passdb.html#id2911009">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2911041">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2911306">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2911458">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2911494">Plain Text</a></dt><dt><a href="passdb.html#id2911534">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2911641">tdbsam</a></dt><dt><a href="passdb.html#id2911668">ldapsam</a></dt><dt><a href="passdb.html#id2913185">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2913989">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2913997">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="passdb.html#id2914012">Users are being added to the wrong backend database</a></dt><dt><a href="passdb.html#id2914072">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="groupmapping.html">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="groupmapping.html#id2921449">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2921551">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2921742">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2921806">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2921820">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2921889">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2921981">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2921997">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2922057">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920271">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2920308">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920326">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="AccessControls.html#id2920583">Managing Directories</a></dt><dt><a href="AccessControls.html#id2920678">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2920894">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2922074">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2922346">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2922591">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2922807">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2922879">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2923178">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2923186">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2923224">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2923303">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2923425">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2923653">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2923805">Interaction with the standard Samba create mask - parameters</a></dt><dt><a href="AccessControls.html#id2924134">Interaction with the standard Samba file attribute - mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2924210">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2924224">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2924604">I have set force user and Samba still makes root the owner of all the files - I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="locking.html">File and Record Locking</a></dt><dd><dl><dt><a href="locking.html#id2928216">Features and Benefits</a></dt><dt><a href="locking.html#id2928272">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2928403">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2929049">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2929159">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2929419">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2929649">Workstation Service Entries</a></dt><dt><a href="locking.html#id2929676">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2929755">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2929785">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2929859">locking.tdb error messages</a></dt></dl></dd><dt><a href="locking.html#id2929890">Additional Reading</a></dt></dl></dd><dt>15. <a href="securing-samba.html">Securing Samba</a></dt><dd><dl><dt><a href="securing-samba.html#id2931943">Introduction</a></dt><dt><a href="securing-samba.html#id2931976">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2932050">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2932069">Using host based protection</a></dt><dt><a href="securing-samba.html#id2932140">User based protection</a></dt><dt><a href="securing-samba.html#id2932191">Using interface protection</a></dt><dt><a href="securing-samba.html#id2932244">Using a firewall</a></dt><dt><a href="securing-samba.html#id2932300">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2932362">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2932402">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2932426">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2932444">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2932469">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="InterdomainTrusts.html">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933376">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2933404">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2933488">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933501">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="InterdomainTrusts.html#id2933586">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2933622">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933649">Samba-3 as the Trusting Domain</a></dt><dt><a href="InterdomainTrusts.html#id2933790">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2933922">Common Errors</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2933937">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="msdfs.html">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="msdfs.html#id2933279">Features and Benefits</a></dt><dt><a href="msdfs.html#id2934931">Common Errors</a></dt></dl></dd><dt>18. <a href="printing.html">Classical Printing Support</a></dt><dd><dl><dt><a href="printing.html#id2934522">Features and Benefits</a></dt><dt><a href="printing.html#id2934590">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2934627">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2934698">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2935615">Parameters Recommended for Use</a></dt><dt><a href="printing.html#id2935946">Parameters for Backwards Compatibility</a></dt><dt><a href="printing.html#id2936054">Parameters no longer in use</a></dt></dl></dd><dt><a href="printing.html#id2936147">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="printing.html#id2936216">Verification of "Settings in Use" with testparm</a></dt><dt><a href="printing.html#id2936305">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2936612">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="printing.html#id2936715">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2936728">The [global] Section</a></dt><dt><a href="printing.html#id2937111">The [printers] Section</a></dt><dt><a href="printing.html#id2937440">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2937660">Print Commands</a></dt><dt><a href="printing.html#id2937711">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="printing.html#id2938236">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2938516">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2938681">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2938833">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="printing.html#id2938945">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2939016">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2939247">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2939408">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2939503">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2939686">Setting Drivers for existing Printers with -rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2941408">"The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)</a></dt><dd><dl><dt><a href="printing.html#id2941428">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2941626">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2941915">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2942010">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="printing.html#id2942152">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2942185">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2942622">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2942924">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2943168">Weird Error Message Cannot connect under a -different Name</a></dt><dt><a href="printing.html#id2943267">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2943612">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2943683">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2943705">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2943751">What is Imprints?</a></dt><dt><a href="printing.html#id2943792">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2943811">The Imprints Server</a></dt><dt><a href="printing.html#id2943835">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2943987">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2944316">The addprinter command</a></dt><dt><a href="printing.html#id2944362">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="printing.html#id2944531">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2944545">Common Errors and Problems</a></dt><dd><dl><dt><a href="printing.html#id2944558">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2944591">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="CUPS-printing.html">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2953785">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2953792">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2953845">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2953900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2953979">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2954122">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2954205">More complex smb.conf Settings for -CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2954322">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2954343">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="CUPS-printing.html#id2954370">CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2954406">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2954465">Explicitly enable "raw" printing for -application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2954626">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2954719">Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2954794">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="CUPS-printing.html#id2954839">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2954940">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#id2955028">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2955125">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2955238">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2955308">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2955397">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2955420">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2955560">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2955747">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2955864">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2956034">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2956120">pstops</a></dt><dt><a href="CUPS-printing.html#id2956222">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2956377">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2956434">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2956519">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2956831">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2956944">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2956960">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2957012">"Raw" printing</a></dt><dt><a href="CUPS-printing.html#id2957066">"application/octet-stream" printing</a></dt><dt><a href="CUPS-printing.html#id2957282">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2957510">Difference between cupsomatic/foomatic-rip and -native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2957666">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2957897">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2958024">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958100">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958116">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2958155">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2958227">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958289">Network Printing (Windows clients -- UNIX/Samba Print -Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958310">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2958474">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958550">Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958605">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2958646">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958712">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958729">Printer Drivers running in "Kernel Mode" cause many -Problems</a></dt><dt><a href="CUPS-printing.html#id2958763">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2958784">CUPS: a "Magical Stone"?</a></dt><dt><a href="CUPS-printing.html#id2958811">PostScript Drivers with no major problems -- even in Kernel -Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2958865"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2958884">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2958976">Prepare your smb.conf for -cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2959022">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2959220">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2959278">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2959310">ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2959360">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2959582">What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="CUPS-printing.html#id2959764">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2959865">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2960092">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2960186">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="CUPS-printing.html#id2960273">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2960308">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2960361">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2960474">Avoiding critical PostScript Driver Settings on the -Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2960608">Installing PostScript Driver Files manually (using -rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2960723">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2960836">Understanding the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2960925">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2961015">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2961177">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="CUPS-printing.html#id2961830">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2961930">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2962033">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2962103">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2962165">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2962224">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2962290">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2962398">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2963027">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2963488">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2963519">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2963551">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2963592">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2963663">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2963765">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2963836">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2963884">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2963899">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2964092">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964138">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2964221">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2964281">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964299">When not to use Samba to print to -CUPS</a></dt><dt><a href="CUPS-printing.html#id2964316">In Case of Trouble.....</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964352">Where to find Documentation</a></dt><dt><a href="CUPS-printing.html#id2964364">How to ask for Help</a></dt><dt><a href="CUPS-printing.html#id2964377">Where to find Help</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964391">Appendix</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964398">Printing from CUPS to Windows attached -Printers</a></dt><dt><a href="CUPS-printing.html#id2964612">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2964919">Trouble Shooting Guidelines to fix typical Samba printing -Problems</a></dt><dt><a href="CUPS-printing.html#id2966041">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="VFS.html">Stackable VFS modules</a></dt><dd><dl><dt><a href="VFS.html#id2978211">Features and Benefits</a></dt><dt><a href="VFS.html#id2978229">Discussion</a></dt><dt><a href="VFS.html#id2978320">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2978327">audit</a></dt><dt><a href="VFS.html#id2978365">extd_audit</a></dt><dt><a href="VFS.html#id2978489">fake_perms</a></dt><dt><a href="VFS.html#id2978508">recycle</a></dt><dt><a href="VFS.html#id2978645">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2978690">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2978712">DatabaseFS</a></dt><dt><a href="VFS.html#id2978768">vscan</a></dt></dl></dd><dt><a href="VFS.html#id2978797">Common Errors</a></dt></dl></dd><dt>21. <a href="winbind.html">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="winbind.html#id2979695">Features and Benefits</a></dt><dt><a href="winbind.html#id2979724">Introduction</a></dt><dt><a href="winbind.html#id2979795">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2979856">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2979886">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2979914">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2979949">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2979971">Name Service Switch</a></dt><dt><a href="winbind.html#id2980108">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2980179">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2980214">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2980242">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2980271">Introduction</a></dt><dt><a href="winbind.html#id2980346">Requirements</a></dt><dt><a href="winbind.html#id2980438">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2982058">Conclusion</a></dt><dt><a href="winbind.html#id2982077">Common Errors</a></dt></dl></dd><dt>22. <a href="AdvancedNetworkManagement.html">Advanced Network Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2984570">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2984759">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2984858">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2984876">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2985087">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2985283">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2985316">Common Errors</a></dt></dl></dd><dt>23. <a href="PolicyMgmt.html">System and Account Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2984380">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2984435">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2986217">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2986312">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2986445">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2986697">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2986798">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2986819">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2986839">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2986883">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2987030">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2987044">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="ProfileMgmt.html">Desktop Profile Management</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2988251">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2988285">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2988326">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2988731">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2989902">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2989967">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2990232">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2990290">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2990336">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2990356">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2990504">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2991058">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2991562">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2991575">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="ProfileMgmt.html#id2991638">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2991859">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="pam.html">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="pam.html#id2995804">Features and Benefits</a></dt><dt><a href="pam.html#id2996071">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2996089">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2996760">Example System Configurations</a></dt><dt><a href="pam.html#id2997062">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2997119">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2997203">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2997570">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2997583">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="integrate-ms-networks.html">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2999705">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2999730">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2999775">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2999831">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2999956">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id3000000">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id3000042">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id3000130">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id3000278">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id3000323">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id3000567">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id3000600">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id3000624">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id3000695">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id3000711">My Boomerang Won't Come Back</a></dt><dt><a href="integrate-ms-networks.html#id3000742">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id3000794">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="unicode.html">Unicode/Charsets</a></dt><dd><dl><dt><a href="unicode.html#id3001913">Features and Benefits</a></dt><dt><a href="unicode.html#id3002114">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id3002184">Samba and charsets</a></dt><dt><a href="unicode.html#id3002284">Conversion from old names</a></dt><dt><a href="unicode.html#id3002329">Japanese charsets</a></dt></dl></dd><dt>28. <a href="Backup.html">Samba Backup Techniques</a></dt><dd><dl><dt><a href="Backup.html#id3001533">Note</a></dt><dt><a href="Backup.html#id3001557">Features and Benefits</a></dt></dl></dd><dt>29. <a href="SambaHA.html">High Availability Options</a></dt><dd><dl><dt><a href="SambaHA.html#id3003099">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ClientConfig.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="NetworkBrowsing.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter9.MS Windows Network Configuration Guide</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter10.Samba / MS Windows Network Browsing Guide</td></tr></table></div></body></html> +</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>10. <a href="NetworkBrowsing.html">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2901654">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2901733">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2905839">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905855">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2906017">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2900986">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2901119">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2901245">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2902631">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2902896">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2903052">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2903070">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2906571">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2906680">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2906741">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2906900">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2907094">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2907119">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907203">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907217">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2907283">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907421">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907468">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2907575">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2907654">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2908270">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2908285">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2908313">My client reports "This server is not configured to list shared resources"</a></dt></dl></dd></dl></dd><dt>11. <a href="passdb.html">Account Information Databases</a></dt><dd><dl><dt><a href="passdb.html#id2911689">Features and Benefits</a></dt><dt><a href="passdb.html#id2908580">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2908644">Important Notes About Security</a></dt><dt><a href="passdb.html#id2908888">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="passdb.html#id2908943">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2908975">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2909240">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2909374">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2909410">Plain Text</a></dt><dt><a href="passdb.html#id2909450">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2913891">tdbsam</a></dt><dt><a href="passdb.html#id2913919">ldapsam</a></dt><dt><a href="passdb.html#id2915407">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2916213">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2916220">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="passdb.html#id2916235">Users are being added to the wrong backend database</a></dt><dt><a href="passdb.html#id2916295">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="groupmapping.html">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="groupmapping.html#id2916467">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2916568">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2916756">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2916822">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2916836">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2916903">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2916977">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2916993">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2917053">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920239">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2920364">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920382">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="AccessControls.html#id2917299">Managing Directories</a></dt><dt><a href="AccessControls.html#id2917394">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2917800">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2917828">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2918100">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2918346">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2922930">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2923002">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2923301">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2923309">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2923347">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2923426">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2923548">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2923776">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2923928">Interaction with the standard Samba create mask + parameters</a></dt><dt><a href="AccessControls.html#id2924258">Interaction with the standard Samba file attribute + mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2924333">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2924347">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2924726">I have set force user and Samba still makes root the owner of all the files + I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="locking.html">File and Record Locking</a></dt><dd><dl><dt><a href="locking.html#id2926847">Features and Benefits</a></dt><dt><a href="locking.html#id2926902">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2927033">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2925408">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2925517">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2925776">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2928213">Workstation Service Entries</a></dt><dt><a href="locking.html#id2928240">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2928320">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2928350">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2928423">locking.tdb error messages</a></dt></dl></dd><dt><a href="locking.html#id2928454">Additional Reading</a></dt></dl></dd><dt>15. <a href="securing-samba.html">Securing Samba</a></dt><dd><dl><dt><a href="securing-samba.html#id2929879">Introduction</a></dt><dt><a href="securing-samba.html#id2929912">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2928572">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2928590">Using host based protection</a></dt><dt><a href="securing-samba.html#id2928659">User based protection</a></dt><dt><a href="securing-samba.html#id2928710">Using interface protection</a></dt><dt><a href="securing-samba.html#id2928760">Using a firewall</a></dt><dt><a href="securing-samba.html#id2928816">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2928881">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2928920">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2928943">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2928962">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2928987">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="InterdomainTrusts.html">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929505">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2929534">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2929617">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929629">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="InterdomainTrusts.html#id2931604">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2931642">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2931669">Samba-3 as the Trusting Domain</a></dt><dt><a href="InterdomainTrusts.html#id2931795">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2929173">Common Errors</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929188">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="msdfs.html">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="msdfs.html#id2929286">Features and Benefits</a></dt><dt><a href="msdfs.html#id2930696">Common Errors</a></dt></dl></dd><dt>18. <a href="printing.html">Classical Printing Support</a></dt><dd><dl><dt><a href="printing.html#id2932219">Features and Benefits</a></dt><dt><a href="printing.html#id2932283">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2932319">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2932389">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2935498">Parameters Recommended for Use</a></dt><dt><a href="printing.html#id2930858">Parameters for Backwards Compatibility</a></dt><dt><a href="printing.html#id2930966">Parameters no longer in use</a></dt></dl></dd><dt><a href="printing.html#id2931059">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="printing.html#id2933066">Verification of "Settings in Use" with testparm</a></dt><dt><a href="printing.html#id2933148">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2933455">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="printing.html#id2933547">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2933560">The [global] Section</a></dt><dt><a href="printing.html#id2943021">The [printers] Section</a></dt><dt><a href="printing.html#id2943350">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2943571">Print Commands</a></dt><dt><a href="printing.html#id2943622">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="printing.html#id2944148">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2944425">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2944579">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2944731">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="printing.html#id2944844">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2944914">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2945135">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2945296">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2945390">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2945574">Setting Drivers for existing Printers with +rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2947172">"The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)</a></dt><dd><dl><dt><a href="printing.html#id2947193">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2947391">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2947680">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2947775">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="printing.html#id2947917">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2947950">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2948384">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2948687">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2948930">Weird Error Message Cannot connect under a +different Name</a></dt><dt><a href="printing.html#id2949028">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2949299">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2949370">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2949392">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2949437">What is Imprints?</a></dt><dt><a href="printing.html#id2949479">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2949498">The Imprints Server</a></dt><dt><a href="printing.html#id2949522">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2949674">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2950004">The addprinter command</a></dt><dt><a href="printing.html#id2950049">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="printing.html#id2950217">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2950232">Common Errors and Problems</a></dt><dd><dl><dt><a href="printing.html#id2950245">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2950278">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="CUPS-printing.html">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957297">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957304">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2957352">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2957404">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957483">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2950396">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2957550">More complex smb.conf Settings for +CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950555">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2950575">Central spooling vs. "Peer-to-Peer" printing</a></dt><dt><a href="CUPS-printing.html#id2950602">CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950639">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950697">Explicitly enable "raw" printing for +application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2950858">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950951">Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2951026">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="CUPS-printing.html#id2951071">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2951170">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#id2951241">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2951338">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2951433">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2964250">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2964339">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964362">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964500">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2964688">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2964804">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2964973">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2965058">pstops</a></dt><dt><a href="CUPS-printing.html#id2965161">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2965317">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2965372">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2965457">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2965771">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2965874">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2965889">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2965942">"Raw" printing</a></dt><dt><a href="CUPS-printing.html#id2965996">"application/octet-stream" printing</a></dt><dt><a href="CUPS-printing.html#id2966212">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2966439">Difference between cupsomatic/foomatic-rip and +native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2966596">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2966825">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2966950">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967012">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967028">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2967067">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2967126">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967189">Network Printing (Windows clients -- UNIX/Samba Print +Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967210">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2967370">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967448">Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967503">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2967544">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967609">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967626">Printer Drivers running in "Kernel Mode" cause many +Problems</a></dt><dt><a href="CUPS-printing.html#id2967661">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2967682">CUPS: a "Magical Stone"?</a></dt><dt><a href="CUPS-printing.html#id2967709">PostScript Drivers with no major problems -- even in Kernel +Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967743"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967762">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2967853">Prepare your smb.conf for +cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2967900">CUPS Package of "PostScript Driver for WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2968097">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968155">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968188">ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"</a></dt><dt><a href="CUPS-printing.html#id2968238">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2968459">What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?</a></dt><dt><a href="CUPS-printing.html#id2968640">Run "cupsaddsmb" (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2968741">Run "cupsaddsmb" with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2968884">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2968978">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="CUPS-printing.html#id2969065">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2969100">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2969151">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2969266">Avoiding critical PostScript Driver Settings on the +Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2969400">Installing PostScript Driver Files manually (using +rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2969515">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969627">Understanding the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969706">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2969796">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2969958">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="CUPS-printing.html#id2970578">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2970680">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2970783">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2970853">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2970915">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2970974">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2971036">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2971142">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2971770">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972228">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972259">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2972290">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2972331">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2972403">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2972504">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2972576">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2972624">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972639">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2972832">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972878">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2972960">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2973021">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973039">When not to use Samba to print to +CUPS</a></dt><dt><a href="CUPS-printing.html#id2973056">In Case of Trouble.....</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973091">Where to find Documentation</a></dt><dt><a href="CUPS-printing.html#id2973104">How to ask for Help</a></dt><dt><a href="CUPS-printing.html#id2973117">Where to find Help</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973131">Appendix</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973138">Printing from CUPS to Windows attached +Printers</a></dt><dt><a href="CUPS-printing.html#id2973332">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2973586">Trouble Shooting Guidelines to fix typical Samba printing +Problems</a></dt><dt><a href="CUPS-printing.html#id2974692">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="VFS.html">Stackable VFS modules</a></dt><dd><dl><dt><a href="VFS.html#id2976111">Features and Benefits</a></dt><dt><a href="VFS.html#id2976129">Discussion</a></dt><dt><a href="VFS.html#id2974805">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2974812">audit</a></dt><dt><a href="VFS.html#id2974851">extd_audit</a></dt><dt><a href="VFS.html#id2974972">fake_perms</a></dt><dt><a href="VFS.html#id2974992">recycle</a></dt><dt><a href="VFS.html#id2975130">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2975176">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2975198">DatabaseFS</a></dt><dt><a href="VFS.html#id2975253">vscan</a></dt></dl></dd><dt><a href="VFS.html#id2975282">Common Errors</a></dt></dl></dd><dt>21. <a href="winbind.html">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="winbind.html#id2975777">Features and Benefits</a></dt><dt><a href="winbind.html#id2975805">Introduction</a></dt><dt><a href="winbind.html#id2977838">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2977898">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2977929">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2977957">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2977989">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2978012">Name Service Switch</a></dt><dt><a href="winbind.html#id2975323">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2975394">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2975429">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2975457">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2975485">Introduction</a></dt><dt><a href="winbind.html#id2975560">Requirements</a></dt><dt><a href="winbind.html#id2976836">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2981237">Conclusion</a></dt><dt><a href="winbind.html#id2981256">Common Errors</a></dt></dl></dd><dt>22. <a href="AdvancedNetworkManagement.html">Advanced Network Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2982630">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2982661">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2981342">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981359">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981560">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981755">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981788">Common Errors</a></dt></dl></dd><dt>23. <a href="PolicyMgmt.html">System and Account Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2982185">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2982237">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2982348">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2981896">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2982030">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983472">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983573">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2983593">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2983614">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983658">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2983805">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983819">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="ProfileMgmt.html">Desktop Profile Management</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2983922">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2983955">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2983996">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2989358">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2990295">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2990360">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2990620">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2990678">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2990723">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2990743">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2990891">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2991445">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2991949">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2991962">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="ProfileMgmt.html#id2992025">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2992243">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="pam.html">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="pam.html#id2993700">Features and Benefits</a></dt><dt><a href="pam.html#id2992555">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2992572">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2993237">Example System Configurations</a></dt><dt><a href="pam.html#id2995669">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2995726">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2995810">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2996177">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2996190">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="integrate-ms-networks.html">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2997933">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2997958">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2998003">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2998054">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2998179">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996329">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996371">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996460">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996585">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id2996630">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996744">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996776">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id2996801">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996872">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996887">My Boomerang Won't Come Back</a></dt><dt><a href="integrate-ms-networks.html#id2996919">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id2996970">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="unicode.html">Unicode/Charsets</a></dt><dd><dl><dt><a href="unicode.html#id2997125">Features and Benefits</a></dt><dt><a href="unicode.html#id2997167">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id2997235">Samba and charsets</a></dt><dt><a href="unicode.html#id2997336">Conversion from old names</a></dt><dt><a href="unicode.html#id2997382">Japanese charsets</a></dt></dl></dd><dt>28. <a href="Backup.html">Samba Backup Techniques</a></dt><dd><dl><dt><a href="Backup.html#id2999976">Note</a></dt><dt><a href="Backup.html#id2999997">Features and Benefits</a></dt></dl></dd><dt>29. <a href="SambaHA.html">High Availability Options</a></dt><dd><dl><dt><a href="SambaHA.html#id2999808">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ClientConfig.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="NetworkBrowsing.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter9.MS Windows Network Configuration Guide</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter10.Samba / MS Windows Network Browsing Guide</td></tr></table></div></body></html> diff --git a/docs/htmldocs/pam.html b/docs/htmldocs/pam.html index a0221b57e0..b3d0314add 100644 --- a/docs/htmldocs/pam.html +++ b/docs/htmldocs/pam.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter25.PAM based Distributed Authentication</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management"><link rel="next" href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter25.PAM based Distributed Authentication</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ProfileMgmt.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="integrate-ms-networks.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pam"></a>Chapter25.PAM based Distributed Authentication</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>></tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="pam.html#id2995804">Features and Benefits</a></dt><dt><a href="pam.html#id2996071">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2996089">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2996760">Example System Configurations</a></dt><dt><a href="pam.html#id2997062">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2997119">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2997203">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2997570">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2997583">pam_winbind problem</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter25.PAM based Distributed Authentication</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management"><link rel="next" href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter25.PAM based Distributed Authentication</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ProfileMgmt.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="integrate-ms-networks.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pam"></a>Chapter25.PAM based Distributed Authentication</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>></tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="pam.html#id2993700">Features and Benefits</a></dt><dt><a href="pam.html#id2992555">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2992572">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2993237">Example System Configurations</a></dt><dt><a href="pam.html#id2995669">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2995726">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2995810">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2996177">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2996190">pam_winbind problem</a></dt></dl></dd></dl></div><p> This chapter you should help you to deploy winbind based authentication on any PAM enabled Unix/Linux system. Winbind can be used to enable user level application access authentication from any MS Windows NT Domain, MS Windows 200x Active Directory based domain, or any Samba @@ -9,7 +10,7 @@ In addition to knowing how to configure winbind into PAM, you will learn generic possibilities and in particular how to deploy tools like pam_smbpass.so to your advantage. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> The use of Winbind require more than PAM configuration alone. Please refer to <a href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind">the Winbind chapter</a>. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995804"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993700"></a>Features and Benefits</h2></div></div><div></div></div><p> A number of Unix systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux, now utilize the Pluggable Authentication Modules (PAM) facility to provide all authentication, authorization and resource control services. Prior to the introduction of PAM, a decision @@ -67,12 +68,12 @@ of distributed samba domain controllers that can provide wide are network bandwi efficient authentication services for PAM capable systems. In effect, this allows the deployment of centrally managed and maintained distributed authentication from a single user account database. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996071"></a>Technical Discussion</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992555"></a>Technical Discussion</h2></div></div><div></div></div><p> PAM is designed to provide the system administrator with a great deal of flexibility in configuration of the privilege granting applications of their system. The local configuration of system security controlled by PAM is contained in one of two places: either the single system file, /etc/pam.conf; or the /etc/pam.d/ directory. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996089"></a>PAM Configuration Syntax</h3></div></div><div></div></div><p> +</p><div xmlns:ns90="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992572"></a>PAM Configuration Syntax</h3></div></div><div></div></div><p> In this section we discuss the correct syntax of and generic options respected by entries to these files. PAM specific tokens in the configuration file are case insensitive. The module paths, however, are case sensitive since they indicate a file's name and reflect the case dependence of typical file-systems. @@ -86,22 +87,22 @@ If the PAM authentication module (loadable link library file) is located in the default location then it is not necessary to specify the path. In the case of Linux, the default location is <tt class="filename">/lib/security</tt>. If the module is located outside the default then the path must be specified as: -</p><p> -</p><pre class="screen"> +</p><ns90:p> +</ns90:p><pre class="screen"> auth required /other_path/pam_strange_module.so -</pre><p> -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996146"></a>Anatomy of <tt class="filename">/etc/pam.d</tt> Entries</h4></div></div><div></div></div><p> +</pre><ns90:p> +</ns90:p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2992628"></a>Anatomy of <tt class="filename">/etc/pam.d</tt> Entries</h4></div></div><div></div></div><p> The remaining information in this subsection was taken from the documentation of the Linux-PAM project. For more information on PAM, see <a href="http://ftp.kernel.org/pub/linux/libs/pam/" target="_top"> http://ftp.kernel.org/pub/linux/libs/pam</a> The Official Linux-PAM home page. </p><p> A general configuration line of the /etc/pam.conf file has the following form: -</p><p> -</p><pre class="screen"> +</p><ns90:p> +</ns90:p><pre class="screen"> service-name module-type control-flag module-path args -</pre><p> -</p><p> +</pre><ns90:p> +</ns90:p><p> Below, we explain the meaning of each of these tokens. The second (and more recently adopted) way of configuring Linux-PAM is via the contents of the <tt class="filename">/etc/pam.d/</tt> directory. Once we have explained the meaning of the above tokens, we will describe this method. @@ -218,8 +219,8 @@ Once we have explained the meaning of the above tokens, we will describe this me </p></li></ul></div><p> Each of the four keywords: required; requisite; sufficient; and optional, have an equivalent expression in terms of the [...] syntax. They are as follows: - </p><p> - </p><div class="itemizedlist"><ul type="disc"><li><p> + </p><ns90:p> + </ns90:p><div class="itemizedlist"><ul type="disc"><li><p> required is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=bad] </p></li><li><p> requisite is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=die] @@ -227,8 +228,8 @@ Once we have explained the meaning of the above tokens, we will describe this me sufficient is equivalent to [success=done new_authtok_reqd=done default=ignore] </p></li><li><p> optional is equivalent to [success=ok new_authtok_reqd=ok default=ignore] - </p></li></ul></div><p> - </p><p> + </p></li></ul></div><ns90:p> + </ns90:p><p> Just to get a feel for the power of this new syntax, here is a taste of what you can do with it. With Linux-PAM-0.63, the notion of client plug-in agents was introduced. This is something that makes it possible for PAM to support machine-machine authentication using the transport protocol inherent to the client/server application. With the @@ -260,13 +261,13 @@ squid auth required pam_mysql.so user=passwd_query passwd=mada \ Any line in (one of) the configuration file(s), that is not formatted correctly, will generally tend (erring on the side of caution) to make the authentication process fail. A corresponding error is written to the system log files with a call to syslog(3). - </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996760"></a>Example System Configurations</h3></div></div><div></div></div><p> + </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2993237"></a>Example System Configurations</h3></div></div><div></div></div><p> The following is an example <tt class="filename">/etc/pam.d/login</tt> configuration file. This example had all options been uncommented is probably not usable as it stacks many conditions before allowing successful completion of the login process. Essentially all conditions can be disabled by commenting them out except the calls to <tt class="filename">pam_pwdb.so</tt>. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996790"></a>PAM: original login config</h4></div></div><div></div></div><pre class="screen"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2993268"></a>PAM: original login config</h4></div></div><div></div></div><pre class="screen"> #%PAM-1.0 # The PAM configuration file for the `login' service # @@ -281,10 +282,10 @@ session required pam_pwdb.so # session optional pam_lastlog.so # password required pam_cracklib.so retry=3 password required pam_pwdb.so shadow md5 -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996817"></a>PAM: login using pam_smbpass</h4></div></div><div></div></div><p> +</pre></div><div xmlns:ns91="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2993295"></a>PAM: login using pam_smbpass</h4></div></div><div></div></div><p> PAM allows use of replaceable modules. Those available on a sample system include: -</p><p><tt class="prompt">$</tt><b class="userinput"><tt>/bin/ls /lib/security</tt></b> -</p><pre class="screen"> +</p><ns91:p><tt class="prompt">$</tt><b class="userinput"><tt>/bin/ls /lib/security</tt></b> +</ns91:p><pre class="screen"> pam_access.so pam_ftp.so pam_limits.so pam_ncp_auth.so pam_rhosts_auth.so pam_stress.so pam_cracklib.so pam_group.so pam_listfile.so @@ -360,7 +361,7 @@ authentication to be configured in a single central file. The on the basis that it allows for easier administration. As with all issues in life though, every decision makes trade-offs, so you may want examine the PAM documentation for further helpful information. -</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2997062"></a>smb.conf PAM Configuration</h3></div></div><div></div></div><p> +</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995669"></a>smb.conf PAM Configuration</h3></div></div><div></div></div><p> There is an option in smb.conf called <a href="smb.conf.5.html#OBEYPAMRESTRICTIONS" target="_top">obey pam restrictions</a>. The following is from the on-line help for this option in SWAT; </p><p> @@ -375,7 +376,7 @@ ignores PAM for authentication in the case of The reason is that PAM modules cannot support the challenge/response authentication mechanism needed in the presence of SMB password encryption. -</p><p>Default: <i class="parameter"><tt>obey pam restrictions = no</tt></i></p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2997119"></a>Remote CIFS Authentication using winbindd.so</h3></div></div><div></div></div><p> +</p><p>Default: <i class="parameter"><tt>obey pam restrictions = no</tt></i></p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995726"></a>Remote CIFS Authentication using winbindd.so</h3></div></div><div></div></div><p> All operating systems depend on the provision of users credentials acceptable to the platform. Unix requires the provision of a user identifier (UID) as well as a group identifier (GID). These are both simple integer type numbers that are obtained from a password backend such @@ -401,7 +402,7 @@ Microsoft Active Directory Service (ADS) in so far as reduction of wide area net The rid to unix id database is the only location where the user and group mappings are stored by winbindd. If this file is deleted or corrupted, there is no way for winbindd to determine which user and group ids correspond to Windows NT user and group rids. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2997203"></a>Password Synchronization using pam_smbpass.so</h3></div></div><div></div></div><p> +</p></div></div><div xmlns:ns92="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995810"></a>Password Synchronization using pam_smbpass.so</h3></div></div><div></div></div><p> pam_smbpass is a PAM module which can be used on conforming systems to keep the smbpasswd (Samba password) database in sync with the unix password file. PAM (Pluggable Authentication Modules) is an API supported @@ -412,21 +413,21 @@ This module authenticates a local smbpasswd user database. If you require support for authenticating against a remote SMB server, or if you're concerned about the presence of suid root binaries on your system, it is recommended that you use pam_winbind instead. -</p><p> +</p><ns92:p> Options recognized by this module are as follows: -</p><div class="table"><a name="id2997236"></a><p class="title"><b>Table25.1.Options recognized by pam_smbpass</b></p><table summary="Options recognized by pam_smbpass" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">debug</td><td align="left">log more debugging info</td></tr><tr><td align="left">audit</td><td align="left">like debug, but also logs unknown usernames</td></tr><tr><td align="left">use_first_pass</td><td align="left">don't prompt the user for passwords; take them from PAM_ items instead</td></tr><tr><td align="left">try_first_pass</td><td align="left">try to get the password from a previous PAM module, fall back to prompting the user</td></tr><tr><td align="left">use_authtok</td><td align="left">like try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)</td></tr><tr><td align="left">not_set_pass</td><td align="left">don't make passwords used by this module available to other modules.</td></tr><tr><td align="left">nodelay</td><td align="left">don't insert ~1 second delays on authentication failure.</td></tr><tr><td align="left">nullok</td><td align="left">null passwords are allowed.</td></tr><tr><td align="left">nonull</td><td align="left">null passwords are not allowed. Used to override the Samba configuration.</td></tr><tr><td align="left">migrate</td><td align="left">only meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.</td></tr><tr><td align="left">smbconf=<i class="replaceable"><tt>file</tt></i></td><td align="left">specify an alternate path to the <tt class="filename">smb.conf</tt> file.</td></tr></tbody></table></div><p> -</p><p> +</ns92:p><div class="table"><a name="id2995841"></a><p class="title"><b>Table25.1.Options recognized by pam_smbpass</b></p><table summary="Options recognized by pam_smbpass" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">debug</td><td align="left">log more debugging info</td></tr><tr><td align="left">audit</td><td align="left">like debug, but also logs unknown usernames</td></tr><tr><td align="left">use_first_pass</td><td align="left">don't prompt the user for passwords; take them from PAM_ items instead</td></tr><tr><td align="left">try_first_pass</td><td align="left">try to get the password from a previous PAM module, fall back to prompting the user</td></tr><tr><td align="left">use_authtok</td><td align="left">like try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)</td></tr><tr><td align="left">not_set_pass</td><td align="left">don't make passwords used by this module available to other modules.</td></tr><tr><td align="left">nodelay</td><td align="left">don't insert ~1 second delays on authentication failure.</td></tr><tr><td align="left">nullok</td><td align="left">null passwords are allowed.</td></tr><tr><td align="left">nonull</td><td align="left">null passwords are not allowed. Used to override the Samba configuration.</td></tr><tr><td align="left">migrate</td><td align="left">only meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.</td></tr><tr><td align="left">smbconf=<i class="replaceable"><tt>file</tt></i></td><td align="left">specify an alternate path to the <tt class="filename">smb.conf</tt> file.</td></tr></tbody></table></div><ns92:p> +</ns92:p><ns92:p> Thanks go to the following people: -</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="mailto:morgan@transmeta.com" target="_top">Andrew Morgan</a>, for providing the Linux-PAM +</ns92:p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="mailto:morgan@transmeta.com" target="_top">Andrew Morgan</a>, for providing the Linux-PAM framework, without which none of this would have happened</td></tr><tr><td><a href="gafton@redhat.com" target="_top">Christian Gafton</a> and Andrew Morgan again, for the pam_pwdb module upon which pam_smbpass was originally based</td></tr><tr><td><a href="lkcl@switchboard.net" target="_top">Luke Leighton</a> for being receptive to the idea, and for the occasional good-natured complaint about the project's status - that keep me working on it :)</td></tr></table><p>. -</p><p> + that keep me working on it :)</td></tr></table><ns92:p>. +</ns92:p><p> The following are examples of the use of pam_smbpass.so in the format of Linux <tt class="filename">/etc/pam.d/</tt> files structure. Those wishing to implement this tool on other platforms will need to adapt this appropriately. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2997436"></a>Password Synchronisation Configuration</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996042"></a>Password Synchronisation Configuration</h4></div></div><div></div></div><p> A sample PAM configuration that shows the use of pam_smbpass to make sure private/smbpasswd is kept in sync when /etc/passwd (/etc/shadow) is changed. Useful when an expired password might be changed by an @@ -442,7 +443,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so nullok use_authtok try_first_pass session required pam_unix.so -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2997469"></a>Password Migration Configuration</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996075"></a>Password Migration Configuration</h4></div></div><div></div></div><p> A sample PAM configuration that shows the use of pam_smbpass to migrate from plaintext to encrypted passwords for Samba. Unlike other methods, this can be used for users who have never connected to Samba shares: @@ -461,7 +462,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password optional pam_smbpass.so nullok use_authtok try_first_pass session required pam_unix.so -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2997504"></a>Mature Password Configuration</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996110"></a>Mature Password Configuration</h4></div></div><div></div></div><p> A sample PAM configuration for a 'mature' smbpasswd installation. private/smbpasswd is fully populated, and we consider it an error if the smbpasswd doesn't exist or doesn't match the Unix password. @@ -476,7 +477,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so use_authtok use_first_pass session required pam_unix.so -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2997536"></a>Kerberos Password Integration Configuration</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996142"></a>Kerberos Password Integration Configuration</h4></div></div><div></div></div><p> A sample PAM configuration that shows pam_smbpass used together with pam_krb5. This could be useful on a Samba PDC that is also a member of a Kerberos realm. @@ -492,13 +493,13 @@ password requisite pam_cracklib.so retry=3 password optional pam_smbpass.so nullok use_authtok try_first_pass password required pam_krb5.so use_authtok try_first_pass session required pam_krb5.so -</pre></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997570"></a>Common Errors</h2></div></div><div></div></div><p> +</pre></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996177"></a>Common Errors</h2></div></div><div></div></div><p> PAM can be a very fickle and sensitive to configuration glitches. Here we look at a few cases from the Samba mailing list. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2997583"></a>pam_winbind problem</h3></div></div><div></div></div><p> +</p><div xmlns:ns93="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996190"></a>pam_winbind problem</h3></div></div><div></div></div><p> I have the following PAM configuration: - </p><p> -</p><pre class="screen"> + </p><ns93:p> +</ns93:p><pre class="screen"> auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass nullok @@ -507,8 +508,8 @@ auth required /lib/security/pam_nologin.so account required /lib/security/pam_stack.so service=system-auth account required /lib/security/pam_winbind.so password required /lib/security/pam_stack.so service=system-auth -</pre><p> -</p><p> +</pre><ns93:p> +</ns93:p><p> When I open a new console with [ctrl][alt][F1], then I cant log in with my user "pitie". I've tried with user "scienceu+pitie" also. </p><p> diff --git a/docs/htmldocs/passdb.html b/docs/htmldocs/passdb.html index 2c68f50c87..e627eb015f 100644 --- a/docs/htmldocs/passdb.html +++ b/docs/htmldocs/passdb.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter11.Account Information Databases</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide"><link rel="next" href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter11.Account Information Databases</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="NetworkBrowsing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="groupmapping.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="passdb"></a>Chapter11.Account Information Databases</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Olivier (lem)</span> <span class="surname">Lemaire</span></h3><div class="affiliation"><span class="orgname">IDEALX<br></span><div class="address"><p><tt class="email"><<a href="mailto:olem@IDEALX.org">olem@IDEALX.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 24, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="passdb.html#id2910308">Features and Benefits</a></dt><dt><a href="passdb.html#id2910636">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2910700">Important Notes About Security</a></dt><dt><a href="passdb.html#id2910954">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="passdb.html#id2911009">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2911041">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2911306">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2911458">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2911494">Plain Text</a></dt><dt><a href="passdb.html#id2911534">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2911641">tdbsam</a></dt><dt><a href="passdb.html#id2911668">ldapsam</a></dt><dt><a href="passdb.html#id2913185">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2913989">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2913997">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="passdb.html#id2914012">Users are being added to the wrong backend database</a></dt><dt><a href="passdb.html#id2914072">auth methods does not work</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter11.Account Information Databases</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide"><link rel="next" href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter11.Account Information Databases</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="NetworkBrowsing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="groupmapping.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="passdb"></a>Chapter11.Account Information Databases</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jra@samba.org">jra@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Olivier (lem)</span> <span class="surname">Lemaire</span></h3><div class="affiliation"><span class="orgname">IDEALX<br></span><div class="address"><p><tt class="email"><<a href="mailto:olem@IDEALX.org">olem@IDEALX.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 24, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="passdb.html#id2911689">Features and Benefits</a></dt><dt><a href="passdb.html#id2908580">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2908644">Important Notes About Security</a></dt><dt><a href="passdb.html#id2908888">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="passdb.html#id2908943">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2908975">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2909240">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2909374">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2909410">Plain Text</a></dt><dt><a href="passdb.html#id2909450">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2913891">tdbsam</a></dt><dt><a href="passdb.html#id2913919">ldapsam</a></dt><dt><a href="passdb.html#id2915407">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2916213">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2916220">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="passdb.html#id2916235">Users are being added to the wrong backend database</a></dt><dt><a href="passdb.html#id2916295">auth methods does not work</a></dt></dl></dd></dl></div><p> Samba-3 implements a new capability to work concurrently with multiple account backends. The possible new combinations of password backends allows Samba-3 a degree of flexibility and scalability that previously could be achieved only with MS Windows Active Directory. @@ -16,7 +17,7 @@ deliver this functionality until a better method of recognising NT Group SIDs fr SIDs could be found. This feature may thus return during the life cycle for the Samba-3 series. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> Samba-3.0.0 does NOT support Non-Unix Account (NUA) operation. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910308"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911689"></a>Features and Benefits</h2></div></div><div></div></div><p> Samba-3 provides for complete backwards compatibility with Samba-2.2.x functionality as follows: </p><div class="variablelist"><p class="title"><b>Backwards Compatibility Backends</b></p><dl><dt><span class="term">Plain Text:</span></dt><dd><p> @@ -93,7 +94,7 @@ Samba-3 introduces the following new password backend capabilities: </p></dd><dt><span class="term">nisplussam:</span></dt><dd><p> The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with Sun NIS+ servers. - </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910636"></a>Technical Information</h2></div></div><div></div></div><p> + </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908580"></a>Technical Information</h2></div></div><div></div></div><p> Old windows clients send plain text passwords over the wire. Samba can check these passwords by crypting them and comparing them to the hash stored in the unix user database. </p><p> @@ -111,7 +112,7 @@ Samba-3 introduces the following new password backend capabilities: information using a <i class="parameter"><tt>passdb backend</tt></i>. Commonly available backends are LDAP, plain text file, MySQL and nisplus. For more information, see the man page for <tt class="filename">smb.conf</tt> regarding the <i class="parameter"><tt>passdb backend</tt></i> parameter. - </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910700"></a>Important Notes About Security</h3></div></div><div></div></div><p> + </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908644"></a>Important Notes About Security</h3></div></div><div></div></div><p> The unix and SMB password encryption techniques seem similar on the surface. This similarity is, however, only skin deep. The unix scheme typically sends clear text passwords over the network when logging in. This is bad. The SMB encryption scheme @@ -153,7 +154,7 @@ Samba-3 introduces the following new password backend capabilities: (broken) only the cached (encrypted) password will be sent to the resource server to affect a auto-reconnect. If the resource server does not support encrypted passwords the auto-reconnect will fail. <span class="emphasis"><em>USE OF ENCRYPTED PASSWORDS IS STRONGLY ADVISED.</em></span> - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2910863"></a>Advantages of Encrypted Passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not passed across + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2908797"></a>Advantages of Encrypted Passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not passed across the network. Someone using a network sniffer cannot just record passwords going to the SMB server.</p></li><li><p>Plain text passwords are not stored anywhere in memory or on disk.</p></li><li><p>WinNT doesn't like talking to a server @@ -164,11 +165,11 @@ Samba-3 introduces the following new password backend capabilities: only things you can do to stop this is to use SMB encryption. </p></li><li><p>Encrypted password support allows automatic share (resource) reconnects.</p></li><li><p>Encrypted passwords are essential for PDC/BDC - operation.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2910917"></a>Advantages of non-encrypted passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not kept + operation.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2908851"></a>Advantages of non-encrypted passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not kept on disk, and are NOT cached in memory. </p></li><li><p>Uses same password file as other unix services such as login and ftp</p></li><li><p>Use of other services (such as telnet and ftp) which send plain text passwords over the net, so sending them for SMB - isn't such a big deal.</p></li></ul></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910954"></a>Mapping User Identifiers between MS Windows and Unix</h3></div></div><div></div></div><p> + isn't such a big deal.</p></li></ul></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908888"></a>Mapping User Identifiers between MS Windows and Unix</h3></div></div><div></div></div><p> Every operation in Unix/Linux requires a user identifier (UID), just as in MS Windows NT4 / 200x this requires a Security Identifier (SID). Samba provides two means for mapping an MS Windows user to a Unix/Linux UID. @@ -183,13 +184,13 @@ Samba-3 introduces the following new password backend capabilities: <span class="emphasis"><em>idmap uid, idmap gid</em></span> parameters in <tt class="filename">smb.conf</tt>. Please refer to the man page for information about these parameters. These parameters are essential when mapping users from a remote SAM server. - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911009"></a>Account Management Tools</h2></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908943"></a>Account Management Tools</h2></div></div><div></div></div><p> Samba-3 provides two (2) tools for management of User and machine accounts. These tools are called <b class="command">smbpasswd</b> and <b class="command">pdbedit</b>. A third tool is under development but is NOT expected to ship in time for Samba-3.0.0. The new tool will be a TCL/TK GUI tool that looks much like the MS Windows NT4 Domain User Manager - hopefully this will be announced in time for the Samba-3.0.1 release. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911041"></a>The <span class="emphasis"><em>smbpasswd</em></span> Command</h3></div></div><div></div></div><p> +</p><div xmlns:ns22="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908975"></a>The <span class="emphasis"><em>smbpasswd</em></span> Command</h3></div></div><div></div></div><p> The smbpasswd utility is a utility similar to the <b class="command">passwd</b> or <b class="command">yppasswd</b> programs. It maintains the two 32 byte password fields in the passdb backend. @@ -205,18 +206,18 @@ be announced in time for the Samba-3.0.1 release. <b class="command">smbpasswd</b> can be used to: </p><table class="simplelist" border="0" summary="Simple list"><tr><td><span class="emphasis"><em>add</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>delete</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>enable</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>disable</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>set to NULL</em></span> user passwords</td></tr><tr><td><span class="emphasis"><em>manage interdomain trust accounts</em></span></td></tr></table><p> To run smbpasswd as a normal user just type: - </p><p> - </p><pre class="screen"> + </p><ns22:p> + </ns22:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>smbpasswd</tt></b> <tt class="prompt">Old SMB password: </tt><b class="userinput"><tt><i class="replaceable"><tt>secret</tt></i></tt></b> - </pre><p> + </pre><ns22:p> For <i class="replaceable"><tt>secret</tt></i> type old value here - or hit return if there was no old password - </p><pre class="screen"> + </ns22:p><pre class="screen"> <tt class="prompt">New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b> <tt class="prompt">Repeat New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b> - </pre><p> - </p><p> + </pre><ns22:p> + </ns22:p><p> If the old value does not match the current value stored for that user, or the two new values do not match each other, then the password will not be changed. </p><p> @@ -235,7 +236,7 @@ be announced in time for the Samba-3.0.1 release. </p><p> For more details on using <b class="command">smbpasswd</b> refer to the man page (the definitive reference). - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911306"></a>The <span class="emphasis"><em>pdbedit</em></span> Command</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909240"></a>The <span class="emphasis"><em>pdbedit</em></span> Command</h3></div></div><div></div></div><p> <b class="command">pdbedit</b> is a tool that can be used only by root. It is used to manage the passdb backend. <b class="command">pdbedit</b> can be used to: </p><table class="simplelist" border="0" summary="Simple list"><tr><td>add, remove or modify user accounts</td></tr><tr><td>listing user accounts</td></tr><tr><td>migrate user accounts</td></tr></table><p> @@ -271,27 +272,27 @@ be announced in time for the Samba-3.0.1 release. Password last set: Sat, 14 Dec 2002 14:37:03 GMT Password can change: Sat, 14 Dec 2002 14:37:03 GMT Password must change: Mon, 18 Jan 2038 20:14:07 GMT - </pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911458"></a>Password Backends</h2></div></div><div></div></div><p> + </pre></div></div><div xmlns:ns23="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2909374"></a>Password Backends</h2></div></div><div></div></div><p> Samba-3 offers the greatest flexibility in backend account database design of any SMB/CIFS server technology available today. The flexibility is immediately obvious as one begins to explore this capability. </p><p> It is possible to specify not only multiple different password backends, but even multiple backends of the same type. For example, to use two different tdbsam databases: -</p><p> -</p><pre class="programlisting"> +</p><ns23:p> +</ns23:p><pre class="programlisting"> [globals] passdb backend = tdbsam:/etc/samba/passdb.tdb, \ tdbsam:/etc/samba/old-passdb.tdb, guest -</pre><p> -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911494"></a>Plain Text</h3></div></div><div></div></div><p> +</pre><ns23:p> +</ns23:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909410"></a>Plain Text</h3></div></div><div></div></div><p> Older versions of Samba retrieved user information from the unix user database and eventually some other fields from the file <tt class="filename">/etc/samba/smbpasswd</tt> or <tt class="filename">/etc/smbpasswd</tt>. When password encryption is disabled, no SMB specific data is stored at all. Instead all operations are conducted via the way that the Samba host OS will access its <tt class="filename">/etc/passwd</tt> database. eg: On Linux systems that is done via PAM. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911534"></a>smbpasswd - Encrypted Password Database</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909450"></a>smbpasswd - Encrypted Password Database</h3></div></div><div></div></div><p> Traditionally, when configuring <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = yes</a> in Samba's <tt class="filename">smb.conf</tt> file, user account information such as username, LM/NT password hashes, password change times, and account @@ -322,7 +323,7 @@ backends of the same type. For example, to use two different tdbsam databases: Samba-3 provides an enhanced set of passdb backends that overcome the deficiencies of the smbpasswd plain text database. These are tdbsam, ldapsam, and xmlsam. Of these ldapsam will be of most interest to large corporate or enterprise sites. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911641"></a>tdbsam</h3></div></div><div></div></div><p>Samba can store user and machine account data in a "TDB" (Trivial Database). + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913891"></a>tdbsam</h3></div></div><div></div></div><p>Samba can store user and machine account data in a "TDB" (Trivial Database). Using this backend doesn't require any additional configuration. This backend is recommended for new installations that do not require LDAP. </p><p> @@ -330,7 +331,7 @@ backends of the same type. For example, to use two different tdbsam databases: that have 250 or more users. Additionally, tdbsam is not capable of scaling for use in sites that require PDB/BDC implementations that requires replication of the account database. Clearly, for reason of scalability, the use of ldapsam should be encouraged. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911668"></a>ldapsam</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913919"></a>ldapsam</h3></div></div><div></div></div><p> There are a few points to stress that the ldapsam does not provide. The LDAP support referred to in the this documentation does not include: </p><div class="itemizedlist"><ul type="disc"><li><p>A means of retrieving user account information from @@ -358,16 +359,16 @@ backends of the same type. For example, to use two different tdbsam databases: </p><div class="itemizedlist"><ul type="disc"><li><p>The <a href="http://www.unav.es/cti/ldap-smb/ldap-smb-3-howto.html" target="_top">Samba-PDC-LDAP-HOWTO</a> maintained by Ignacio Coupeau.</p></li><li><p>The NT migration scripts from <a href="http://samba.idealx.org/" target="_top">IDEALX</a> that are geared to manage users and group in such a Samba-LDAP Domain Controller configuration. - </p></li></ul></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911821"></a>Supported LDAP Servers</h4></div></div><div></div></div><p> + </p></li></ul></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914068"></a>Supported LDAP Servers</h4></div></div><div></div></div><p> The LDAP ldapsam code has been developed and tested using the OpenLDAP 2.0 and 2.1 server and client libraries. The same code should work with Netscape's Directory Server and client SDK. However, there are bound to be compile errors and bugs. These should not be hard to fix. Please submit fixes via <a href="bugreport.html" title="Chapter35.Reporting Bugs">Bug reporting facility</a>. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911847"></a>Schema and Relationship to the RFC 2307 posixAccount</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914093"></a>Schema and Relationship to the RFC 2307 posixAccount</h4></div></div><div></div></div><p> Samba 3.0 includes the necessary schema file for OpenLDAP 2.0 in <tt class="filename">examples/LDAP/samba.schema</tt>. The sambaSamAccount objectclass is given here: - </p><p> -</p><pre class="programlisting"> + </p><ns23:p> +</ns23:p><pre class="programlisting"> objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY DESC 'Samba Auxiliary Account' MUST ( uid $ rid ) @@ -375,8 +376,8 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $ displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $ description $ userWorkstations $ primaryGroupID $ domain )) -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> The <tt class="filename">samba.schema</tt> file has been formatted for OpenLDAP 2.0/2.1. The OID's are owned by the Samba Team and as such is legal to be openly published. If you translate the schema to be used with Netscape DS, please @@ -398,23 +399,23 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY and functioning correctly. This division of information makes it possible to store all Samba account information in LDAP, but still maintain UNIX account information in NIS while the network is transitioning to a full LDAP infrastructure. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2911953"></a>OpenLDAP configuration</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914202"></a>OpenLDAP configuration</h4></div></div><div></div></div><p> To include support for the sambaSamAccount object in an OpenLDAP directory server, first copy the samba.schema file to slapd's configuration directory. The samba.schema file can be found in the directory <tt class="filename">examples/LDAP</tt> in the samba source distribution. - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>cp samba.schema /etc/openldap/schema/</tt></b> -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> Next, include the <tt class="filename">samba.schema</tt> file in <tt class="filename">slapd.conf</tt>. The sambaSamAccount object contains two attributes which depend upon other schema files. The 'uid' attribute is defined in <tt class="filename">cosine.schema</tt> and the 'displayName' attribute is defined in the <tt class="filename">inetorgperson.schema</tt> file. Both of these must be included before the <tt class="filename">samba.schema</tt> file. - </p><p> -</p><pre class="programlisting"> + </p><ns23:p> +</ns23:p><pre class="programlisting"> ## /etc/openldap/slapd.conf ## schema files (core.schema is required by default) @@ -426,13 +427,13 @@ include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/samba.schema include /etc/openldap/schema/nis.schema .... -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> It is recommended that you maintain some indices on some of the most useful attributes, like in the following example, to speed up searches made on sambaSamAccount objectclasses (and possibly posixAccount and posixGroup as well). - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> # Indices to maintain ## required by OpenLDAP index objectclass eq @@ -454,25 +455,25 @@ index sambaSID eq index sambaPrimaryGroupSID eq index sambaDomainName eq index default sub -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> Create the new index by executing: - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> ./sbin/slapindex -f slapd.conf -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> Remember to restart slapd after making these changes: - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>/etc/init.d/slapd restart</tt></b> -</pre><p> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2912141"></a>Initialise the LDAP database</h4></div></div><div></div></div><p> +</pre><ns23:p> +</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914390"></a>Initialise the LDAP database</h4></div></div><div></div></div><p> Before you can add accounts to the LDAP database you must create the account containers that they will be stored in. The following LDIF file should be modified to match your needs (ie: Your DNS entries, etc.). - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> # Organization for Samba Base dn: dc=plainjoe,dc=org objectclass: dcObject @@ -500,26 +501,26 @@ objectclass: top objectclass: organizationalRole objectclass: simpleSecurityObject userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> The userPassword shown above should be generated using <b class="command">slappasswd</b>. </p><p> The following command will then load the contents of the LDIF file into the LDAP database. - </p><p> -</p><pre class="screen"> + </p><ns23:p> +</ns23:p><pre class="screen"> <tt class="prompt">$ </tt><b class="userinput"><tt>slapadd -v -l initldap.dif</tt></b> -</pre><p> -</p><p> +</pre><ns23:p> +</ns23:p><p> Do not forget to secure your LDAP server with an adequate access control list, as well as an admin password. - </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> + </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns23:p> Before Samba can access the LDAP server you need to store the LDAP admin password into the Samba-3 <tt class="filename">secrets.tdb</tt> database by: - </p><pre class="screen"> + </ns23:p><pre class="screen"> <tt class="prompt">root# </tt> <b class="userinput"><tt>smbpasswd -w <i class="replaceable"><tt>secret</tt></i></tt></b> - </pre><p> - </p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2912270"></a>Configuring Samba</h4></div></div><div></div></div><p> + </pre><ns23:p> + </ns23:p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914519"></a>Configuring Samba</h4></div></div><div></div></div><p> The following parameters are available in smb.conf only if your version of samba was built with LDAP support. Samba automatically builds with LDAP support if the LDAP libraries are found. @@ -527,8 +528,8 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz These are described in the <tt class="filename">smb.conf</tt> man page and so will not be repeated here. However, a sample smb.conf file for use with an LDAP directory could appear as - </p><p> -</p><pre class="programlisting"> + </p><ns23:p> +</ns23:p><pre class="programlisting"> ## /usr/local/samba/lib/smb.conf [global] security = user @@ -570,8 +571,8 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz # generally the default ldap search filter is ok # ldap filter = "(&(uid=%u)(objectclass=sambaSamAccount))" -</pre><p> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2912468"></a>Accounts and Groups management</h4></div></div><div></div></div><p> +</pre><ns23:p> +</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914697"></a>Accounts and Groups management</h4></div></div><div></div></div><p> As users accounts are managed through the sambaSamAccount objectclass, you should modify your existing administration tools to deal with sambaSamAccount attributes. </p><p> @@ -587,7 +588,7 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz groups. This means that Samba makes use of the posixGroup objectclass. For now, there is no NT-like group system management (global and local groups). - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2912505"></a>Security and sambaSamAccount</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914734"></a>Security and sambaSamAccount</h4></div></div><div></div></div><p> There are two important points to remember when discussing the security of sambaSamAccount entries in the directory. </p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>Never</em></span> retrieve the lmPassword or @@ -613,17 +614,17 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz The second security precaution is to prevent non-administrative users from harvesting password hashes from the directory. This can be done using the following ACL in <tt class="filename">slapd.conf</tt>: - </p><p> -</p><pre class="programlisting"> + </p><ns23:p> +</ns23:p><pre class="programlisting"> ## allow the "ldap admin dn" access, but deny everyone else access to attrs=lmPassword,ntPassword by dn="cn=Samba Admin,ou=people,dc=plainjoe,dc=org" write by * none -</pre><p> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2912642"></a>LDAP special attributes for sambaSamAccounts</h4></div></div><div></div></div><p> +</pre><ns23:p> +</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914869"></a>LDAP special attributes for sambaSamAccounts</h4></div></div><div></div></div><p> The sambaSamAccount objectclass is composed of the following attributes: - </p><p> - </p><div class="table"><a name="id2912659"></a><p class="title"><b>Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)</b></p><table summary="Attributes in the sambaSamAccount objectclass (LDAP)" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left"><tt class="constant">lmPassword</tt></td><td align="left">the LANMAN password 16-byte hash stored as a character + </p><ns23:p> + </ns23:p><div class="table"><a name="id2914885"></a><p class="title"><b>Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)</b></p><table summary="Attributes in the sambaSamAccount objectclass (LDAP)" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left"><tt class="constant">lmPassword</tt></td><td align="left">the LANMAN password 16-byte hash stored as a character representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">ntPassword</tt></td><td align="left">the NT password hash 16-byte stored as a character representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">pwdLastSet</tt></td><td align="left">The integer time in seconds since 1970 when the <tt class="constant">lmPassword</tt> and <tt class="constant">ntPassword</tt> attributes were last set. @@ -646,8 +647,8 @@ access to attrs=lmPassword,ntPassword </td></tr><tr><td align="left"><tt class="constant">userWorkstation</tt></td><td align="left">character string value currently unused. </td></tr><tr><td align="left"><tt class="constant">rid</tt></td><td align="left">the integer representation of the user's relative identifier (RID).</td></tr><tr><td align="left"><tt class="constant">primaryGroupID</tt></td><td align="left">the relative identifier (RID) of the primary group - of the user.</td></tr><tr><td align="left"><tt class="constant">domain</tt></td><td align="left">domain the user is part of.</td></tr></tbody></table></div><p> - </p><p> + of the user.</td></tr><tr><td align="left"><tt class="constant">domain</tt></td><td align="left">domain the user is part of.</td></tr></tbody></table></div><ns23:p> + </ns23:p><p> The majority of these parameters are only used when Samba is acting as a PDC of a domain (refer to the <a href="samba-pdc.html" title="Chapter5.Domain Control">Samba as a primary domain controller</a> chapter for details on how to configure Samba as a Primary Domain Controller). The following four attributes @@ -663,10 +664,10 @@ access to attrs=lmPassword,ntPassword of the <i class="parameter"><tt>logon home</tt></i> parameter is used in its place. Samba will only write the attribute value to the directory entry if the value is something other than the default (e.g. <tt class="filename">\\MOBY\becky</tt>). - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2913008"></a>Example LDIF Entries for a sambaSamAccount</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2915232"></a>Example LDIF Entries for a sambaSamAccount</h4></div></div><div></div></div><p> The following is a working LDIF with the inclusion of the posixAccount objectclass: - </p><p> - </p><pre class="programlisting"> + </p><ns23:p> + </ns23:p><pre class="programlisting"> dn: uid=guest2, ou=people,dc=plainjoe,dc=org ntPassword: 878D8014606CDA29677A44EFA1353FC7 pwdMustChange: 2147483647 @@ -681,12 +682,12 @@ access to attrs=lmPassword,ntPassword logoffTime: 2147483647 rid: 19006 pwdCanChange: 0 - </pre><p> - </p><p> + </pre><ns23:p> + </ns23:p><p> The following is an LDIF entry for using both the sambaSamAccount and posixAccount objectclasses: - </p><p> - </p><pre class="programlisting"> + </p><ns23:p> + </ns23:p><pre class="programlisting"> dn: uid=gcarter, ou=people,dc=plainjoe,dc=org logonTime: 0 displayName: Gerald Carter @@ -709,53 +710,53 @@ access to attrs=lmPassword,ntPassword pwdCanChange: 0 pwdMustChange: 2147483647 ntPassword: 878D8014606CDA29677A44EFA1353FC7 -</pre><p> - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2913071"></a>Password synchronisation</h4></div></div><div></div></div><p> +</pre><ns23:p> + </ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2915294"></a>Password synchronisation</h4></div></div><div></div></div><p> Since version 3.0 samba can update the non-samba (LDAP) password stored with an account. When using pam_ldap, this allows changing both unix and windows passwords at once. </p><p>The <i class="parameter"><tt>ldap passwd sync</tt></i> options can have the following values:</p><div class="variablelist"><dl><dt><span class="term">yes</span></dt><dd><p>When the user changes his password, update <tt class="constant">ntPassword</tt>, <tt class="constant">lmPassword</tt> and the <tt class="constant">password</tt> fields.</p></dd><dt><span class="term">no</span></dt><dd><p>Only update <tt class="constant">ntPassword</tt> and <tt class="constant">lmPassword</tt>.</p></dd><dt><span class="term">only</span></dt><dd><p>Only update the LDAP password and let the LDAP server worry about the other fields. This option is only available when the LDAP server supports LDAP_EXOP_X_MODIFY_PASSWD. </p></dd></dl></div><p>More information can be found in the <a href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">smb.conf</a> manpage. - </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913185"></a>MySQL</h3></div></div><div></div></div><p> + </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915407"></a>MySQL</h3></div></div><div></div></div><p> Every so often someone will come along with a great new idea. Storing of user accounts in an SQL backend is one of them. Those who want to do this are in the best position to know what the specific benefits are to them. This may sound like a cop-out, but in truth we can not attempt to document every nitty little detail why certain things of marginal utility to the bulk of Samba users might make sense to the rest. In any case, the following instructions should help the determined SQL user to implement a working system. - </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2913204"></a>Creating the database</h4></div></div><div></div></div><p> + </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2915428"></a>Creating the database</h4></div></div><div></div></div><ns23:p> You either can set up your own table and specify the field names to pdb_mysql (see below for the column names) or use the default table. The file <tt class="filename">examples/pdb/mysql/mysql.dump</tt> contains the correct queries to create the required tables. Use the command : - </p><pre class="screen"><tt class="prompt">$ </tt><b class="userinput"><tt>mysql -u<i class="replaceable"><tt>username</tt></i> -h<i class="replaceable"><tt>hostname</tt></i> -p<i class="replaceable"><tt>password</tt></i> \ -<i class="replaceable"><tt>databasename</tt></i> < <tt class="filename">/path/to/samba/examples/pdb/mysql/mysql.dump</tt></tt></b></pre><p> - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2913268"></a>Configuring</h4></div></div><div></div></div><p>This plugin lacks some good documentation, but here is some short info:</p><p>Add a the following to the <i class="parameter"><tt>passdb backend</tt></i> variable in your <tt class="filename">smb.conf</tt>: - </p><pre class="programlisting"> + </ns23:p><pre class="screen"><tt class="prompt">$ </tt><b class="userinput"><tt>mysql -u<i class="replaceable"><tt>username</tt></i> -h<i class="replaceable"><tt>hostname</tt></i> -p<i class="replaceable"><tt>password</tt></i> \ +<i class="replaceable"><tt>databasename</tt></i> < <tt class="filename">/path/to/samba/examples/pdb/mysql/mysql.dump</tt></tt></b></pre><ns23:p> + </ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2915492"></a>Configuring</h4></div></div><div></div></div><p>This plugin lacks some good documentation, but here is some short info:</p><ns23:p>Add a the following to the <i class="parameter"><tt>passdb backend</tt></i> variable in your <tt class="filename">smb.conf</tt>: + </ns23:p><pre class="programlisting"> passdb backend = [other-plugins] mysql:identifier [other-plugins] - </pre><p> - </p><p>The identifier can be any string you like, as long as it doesn't collide with + </pre><ns23:p> + </ns23:p><p>The identifier can be any string you like, as long as it doesn't collide with the identifiers of other plugins or other instances of pdb_mysql. If you specify multiple pdb_mysql.so entries in <i class="parameter"><tt>passdb backend</tt></i>, you also need to use different identifiers! </p><p> Additional options can be given through the <tt class="filename">smb.conf</tt> file in the <i class="parameter"><tt>[global]</tt></i> section. - </p><p> - </p><div class="table"><a name="id2913346"></a><p class="title"><b>Table11.2.Basic smb.conf options for MySQL passdb backend</b></p><table summary="Basic smb.conf options for MySQL passdb backend" border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:mysql host</td><td align="left">host name, defaults to 'localhost'</td></tr><tr><td align="left">identifier:mysql password</td><td align="left"></td></tr><tr><td align="left">identifier:mysql user</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql database</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql port</td><td align="left">defaults to 3306</td></tr><tr><td align="left">identifier:table</td><td align="left">Name of the table containing users</td></tr></tbody></table></div><p> - </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> + </p><ns23:p> + </ns23:p><div class="table"><a name="id2915568"></a><p class="title"><b>Table11.2.Basic smb.conf options for MySQL passdb backend</b></p><table summary="Basic smb.conf options for MySQL passdb backend" border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:mysql host</td><td align="left">host name, defaults to 'localhost'</td></tr><tr><td align="left">identifier:mysql password</td><td align="left"></td></tr><tr><td align="left">identifier:mysql user</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql database</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql port</td><td align="left">defaults to 3306</td></tr><tr><td align="left">identifier:table</td><td align="left">Name of the table containing users</td></tr></tbody></table></div><ns23:p> + </ns23:p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> Since the password for the MySQL user is stored in the <tt class="filename">smb.conf</tt> file, you should make the the <tt class="filename">smb.conf</tt> file readable only to the user that runs Samba This is considered a security bug and will be fixed soon. - </p></div><p>Names of the columns in this table (I've added column types those columns should have first):</p><p> - </p><div class="table"><a name="id2913471"></a><p class="title"><b>Table11.3.MySQL field names for MySQL passdb backend</b></p><table summary="MySQL field names for MySQL passdb backend" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Type</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:logon time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:logoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:kickoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass last set time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass can change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass must change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:username column</td><td align="left">varchar(255)</td><td align="left">unix username</td></tr><tr><td align="left">identifier:domain column</td><td align="left">varchar(255)</td><td align="left">NT domain user is part of</td></tr><tr><td align="left">identifier:nt username column</td><td align="left">varchar(255)</td><td align="left">NT username</td></tr><tr><td align="left">identifier:fullname column</td><td align="left">varchar(255)</td><td align="left">Full name of user</td></tr><tr><td align="left">identifier:home dir column</td><td align="left">varchar(255)</td><td align="left">Unix homedir path</td></tr><tr><td align="left">identifier:dir drive column</td><td align="left">varchar(2)</td><td align="left">Directory drive path (eg: 'H:')</td></tr><tr><td align="left">identifier:logon script column</td><td align="left">varchar(255)</td><td align="left">Batch file to run on client side when logging on</td></tr><tr><td align="left">identifier:profile path column</td><td align="left">varchar(255)</td><td align="left">Path of profile</td></tr><tr><td align="left">identifier:acct desc column</td><td align="left">varchar(255)</td><td align="left">Some ASCII NT user data</td></tr><tr><td align="left">identifier:workstations column</td><td align="left">varchar(255)</td><td align="left">Workstations user can logon to (or NULL for all)</td></tr><tr><td align="left">identifier:unknown string column</td><td align="left">varchar(255)</td><td align="left">unknown string</td></tr><tr><td align="left">identifier:munged dial column</td><td align="left">varchar(255)</td><td align="left">?</td></tr><tr><td align="left">identifier:user sid column</td><td align="left">varchar(255)</td><td align="left">NT user SID</td></tr><tr><td align="left">identifier:group sid column</td><td align="left">varchar(255)</td><td align="left">NT group ID</td></tr><tr><td align="left">identifier:lanman pass column</td><td align="left">varchar(255)</td><td align="left">encrypted lanman password</td></tr><tr><td align="left">identifier:nt pass column</td><td align="left">varchar(255)</td><td align="left">encrypted nt passwd</td></tr><tr><td align="left">identifier:plain pass column</td><td align="left">varchar(255)</td><td align="left">plaintext password</td></tr><tr><td align="left">identifier:acct control column</td><td align="left">int(9)</td><td align="left">nt user data</td></tr><tr><td align="left">identifier:unknown 3 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:logon divs column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:hours len column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:unknown 5 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:unknown 6 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr></tbody></table></div><p> - </p><p> + </p></div><p>Names of the columns in this table (I've added column types those columns should have first):</p><ns23:p> + </ns23:p><div class="table"><a name="id2915693"></a><p class="title"><b>Table11.3.MySQL field names for MySQL passdb backend</b></p><table summary="MySQL field names for MySQL passdb backend" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Type</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:logon time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:logoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:kickoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass last set time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass can change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass must change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:username column</td><td align="left">varchar(255)</td><td align="left">unix username</td></tr><tr><td align="left">identifier:domain column</td><td align="left">varchar(255)</td><td align="left">NT domain user is part of</td></tr><tr><td align="left">identifier:nt username column</td><td align="left">varchar(255)</td><td align="left">NT username</td></tr><tr><td align="left">identifier:fullname column</td><td align="left">varchar(255)</td><td align="left">Full name of user</td></tr><tr><td align="left">identifier:home dir column</td><td align="left">varchar(255)</td><td align="left">Unix homedir path</td></tr><tr><td align="left">identifier:dir drive column</td><td align="left">varchar(2)</td><td align="left">Directory drive path (eg: 'H:')</td></tr><tr><td align="left">identifier:logon script column</td><td align="left">varchar(255)</td><td align="left">Batch file to run on client side when logging on</td></tr><tr><td align="left">identifier:profile path column</td><td align="left">varchar(255)</td><td align="left">Path of profile</td></tr><tr><td align="left">identifier:acct desc column</td><td align="left">varchar(255)</td><td align="left">Some ASCII NT user data</td></tr><tr><td align="left">identifier:workstations column</td><td align="left">varchar(255)</td><td align="left">Workstations user can logon to (or NULL for all)</td></tr><tr><td align="left">identifier:unknown string column</td><td align="left">varchar(255)</td><td align="left">unknown string</td></tr><tr><td align="left">identifier:munged dial column</td><td align="left">varchar(255)</td><td align="left">?</td></tr><tr><td align="left">identifier:user sid column</td><td align="left">varchar(255)</td><td align="left">NT user SID</td></tr><tr><td align="left">identifier:group sid column</td><td align="left">varchar(255)</td><td align="left">NT group ID</td></tr><tr><td align="left">identifier:lanman pass column</td><td align="left">varchar(255)</td><td align="left">encrypted lanman password</td></tr><tr><td align="left">identifier:nt pass column</td><td align="left">varchar(255)</td><td align="left">encrypted nt passwd</td></tr><tr><td align="left">identifier:plain pass column</td><td align="left">varchar(255)</td><td align="left">plaintext password</td></tr><tr><td align="left">identifier:acct control column</td><td align="left">int(9)</td><td align="left">nt user data</td></tr><tr><td align="left">identifier:unknown 3 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:logon divs column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:hours len column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:unknown 5 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:unknown 6 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr></tbody></table></div><ns23:p> + </ns23:p><p> Eventually, you can put a colon (:) after the name of each column, which should specify the column to update when updating the table. You can also specify nothing behind the colon - then the data from the field will not be updated. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2913850"></a>Using plaintext passwords or encrypted password</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2916074"></a>Using plaintext passwords or encrypted password</h4></div></div><div></div></div><p> I strongly discourage the use of plaintext passwords, however, you can use them: </p><p> If you would like to use plaintext passwords, set @@ -765,7 +766,7 @@ access to attrs=lmPassword,ntPassword </p><p> If you use encrypted passwords, set the 'identifier:plain pass column' to 'NULL' (without the quotes). This is the default. - </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2913881"></a>Getting non-column data from the table</h4></div></div><div></div></div><p> + </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2916105"></a>Getting non-column data from the table</h4></div></div><div></div></div><p> It is possible to have not all data in the database and making some 'constant'. </p><p> For example, you can set 'identifier:fullname column' to : @@ -780,30 +781,30 @@ access to attrs=lmPassword,ntPassword </p><p> To import data, use: <tt class="prompt">$ </tt> <b class="userinput"><tt>pdbedit -i xml:filename</tt></b> - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2913989"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913997"></a>Users can not logon - Users not in Samba SAM</h3></div></div><div></div></div><p> + </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916213"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916220"></a>Users can not logon - Users not in Samba SAM</h3></div></div><div></div></div><p> People forget to put their users in their backend and then complain Samba won't authorize them. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914012"></a>Users are being added to the wrong backend database</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns24="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916235"></a>Users are being added to the wrong backend database</h3></div></div><div></div></div><p> A few complaints have been received from users that just moved to Samba-3. The following <tt class="filename">smb.conf</tt> file entries were causing problems, new accounts were being added to the old smbpasswd file, not to the tdbsam passdb.tdb file: - </p><p> - </p><pre class="programlisting"> + </p><ns24:p> + </ns24:p><pre class="programlisting"> [globals] ... passdb backend = smbpasswd, tdbsam, guest ... - </pre><p> - </p><p> + </pre><ns24:p> + </ns24:p><p> Samba will add new accounts to the first entry in the <span class="emphasis"><em>passdb backend</em></span> parameter entry. If you want to update to the tdbsam, then change the entry to: - </p><p> - </p><pre class="programlisting"> + </p><ns24:p> + </ns24:p><pre class="programlisting"> [globals] ... passdb backend = tdbsam, smbpasswd, guest ... - </pre><p> - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914072"></a>auth methods does not work</h3></div></div><div></div></div><p> + </pre><ns24:p> + </ns24:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916295"></a>auth methods does not work</h3></div></div><div></div></div><p> If you explicitly set an 'auth methods' parameter, guest must be specified as the first entry on the line. Eg: <i class="parameter"><tt>auth methods = guest sam</tt></i>. </p><p> diff --git a/docs/htmldocs/pdbedit.8.html b/docs/htmldocs/pdbedit.8.html index 368a6911b7..54068305a1 100644 --- a/docs/htmldocs/pdbedit.8.html +++ b/docs/htmldocs/pdbedit.8.html @@ -65,14 +65,14 @@ samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:BC281CE3F53B6A5146629CD4751D3490:[UX rid. </p><p>Example: <b class="command">-U S-1-5-21-2447931902-1787058256-3961074038-5004</b></p></dd><dt><span class="term">-c account-control</span></dt><dd><p>This option can be used while adding or modifying a user account. It will specify the users' account control property. Possible flags that can be set are: N, D, H, L, X. - </p><p>Example: <b class="command">-c "[X ]"</b></p></dd><dt><span class="term">-a</span></dt><dd><p>This option is used to add a user into the + </p><p>Example: <b class="command">-c "[X ]"</b></p></dd><dt><span class="term">-a</span></dt><dd xmlns:ns1=""><p>This option is used to add a user into the database. This command needs a user name specified with the -u switch. When adding a new user, pdbedit will also - ask for the password to be used.</p><p>Example: <b class="command">pdbedit -a -u sorce</b> -</p><pre class="programlisting">new password: + ask for the password to be used.</p><ns1:p>Example: <b class="command">pdbedit -a -u sorce</b> +</ns1:p><pre class="programlisting">new password: retype new password -</pre><p> -</p></dd><dt><span class="term">-r</span></dt><dd><p>This option is used to modify an existing user +</pre><ns1:p> +</ns1:p></dd><dt><span class="term">-r</span></dt><dd><p>This option is used to modify an existing user in the database. This command needs a user name specified with the -u switch. Other options can be specified to modify the properties of the specified user. This flag is kept for backwards compatibility, but diff --git a/docs/htmldocs/printing.html b/docs/htmldocs/printing.html index 089bba6e0f..578e078371 100644 --- a/docs/htmldocs/printing.html +++ b/docs/htmldocs/printing.html @@ -1,7 +1,8 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter18.Classical Printing Support</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba"><link rel="next" href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter18.Classical Printing Support</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="msdfs.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="CUPS-printing.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter18.Classical Printing Support</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email"><<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 32, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="printing.html#id2934522">Features and Benefits</a></dt><dt><a href="printing.html#id2934590">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2934627">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2934698">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2935615">Parameters Recommended for Use</a></dt><dt><a href="printing.html#id2935946">Parameters for Backwards Compatibility</a></dt><dt><a href="printing.html#id2936054">Parameters no longer in use</a></dt></dl></dd><dt><a href="printing.html#id2936147">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="printing.html#id2936216">Verification of "Settings in Use" with testparm</a></dt><dt><a href="printing.html#id2936305">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2936612">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="printing.html#id2936715">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2936728">The [global] Section</a></dt><dt><a href="printing.html#id2937111">The [printers] Section</a></dt><dt><a href="printing.html#id2937440">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2937660">Print Commands</a></dt><dt><a href="printing.html#id2937711">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="printing.html#id2938236">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2938516">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2938681">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2938833">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="printing.html#id2938945">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2939016">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2939247">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2939408">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2939503">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2939686">Setting Drivers for existing Printers with -rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2941408">"The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)</a></dt><dd><dl><dt><a href="printing.html#id2941428">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2941626">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2941915">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2942010">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="printing.html#id2942152">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2942185">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2942622">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2942924">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2943168">Weird Error Message Cannot connect under a -different Name</a></dt><dt><a href="printing.html#id2943267">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2943612">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2943683">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2943705">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2943751">What is Imprints?</a></dt><dt><a href="printing.html#id2943792">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2943811">The Imprints Server</a></dt><dt><a href="printing.html#id2943835">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2943987">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2944316">The addprinter command</a></dt><dt><a href="printing.html#id2944362">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="printing.html#id2944531">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2944545">Common Errors and Problems</a></dt><dd><dl><dt><a href="printing.html#id2944558">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2944591">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2934522"></a>Features and Benefits</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter18.Classical Printing Support</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba"><link rel="next" href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter18.Classical Printing Support</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="msdfs.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="CUPS-printing.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter18.Classical Printing Support</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email"><<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 32, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="printing.html#id2932219">Features and Benefits</a></dt><dt><a href="printing.html#id2932283">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2932319">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2932389">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2935498">Parameters Recommended for Use</a></dt><dt><a href="printing.html#id2930858">Parameters for Backwards Compatibility</a></dt><dt><a href="printing.html#id2930966">Parameters no longer in use</a></dt></dl></dd><dt><a href="printing.html#id2931059">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="printing.html#id2933066">Verification of "Settings in Use" with testparm</a></dt><dt><a href="printing.html#id2933148">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2933455">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="printing.html#id2933547">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2933560">The [global] Section</a></dt><dt><a href="printing.html#id2943021">The [printers] Section</a></dt><dt><a href="printing.html#id2943350">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2943571">Print Commands</a></dt><dt><a href="printing.html#id2943622">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="printing.html#id2944148">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2944425">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2944579">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2944731">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="printing.html#id2944844">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2944914">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2945135">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2945296">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2945390">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2945574">Setting Drivers for existing Printers with +rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2947172">"The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)</a></dt><dd><dl><dt><a href="printing.html#id2947193">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2947391">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2947680">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2947775">Always make first Client Connection as root or "printer admin"</a></dt></dl></dd><dt><a href="printing.html#id2947917">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2947950">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2948384">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2948687">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2948930">Weird Error Message Cannot connect under a +different Name</a></dt><dt><a href="printing.html#id2949028">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2949299">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2949370">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2949392">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2949437">What is Imprints?</a></dt><dt><a href="printing.html#id2949479">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2949498">The Imprints Server</a></dt><dt><a href="printing.html#id2949522">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2949674">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2950004">The addprinter command</a></dt><dt><a href="printing.html#id2950049">Migration of "Classical" printing to Samba-3</a></dt><dt><a href="printing.html#id2950217">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2950232">Common Errors and Problems</a></dt><dd><dl><dt><a href="printing.html#id2950245">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2950278">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932219"></a>Features and Benefits</h2></div></div><div></div></div><p> Printing is often a mission-critical service for the users. Samba can provide this service reliably and seamlessly for a client network consisting of Windows workstations. @@ -37,7 +38,7 @@ Professional clients. Where this document describes the responses to commands given, bear in mind that Windows 2000 clients are very similar, but may differ in details. Windows NT is somewhat different again. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2934590"></a>Technical Introduction</h2></div></div><div></div></div><p> +</p></div></div><div xmlns:ns45="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932283"></a>Technical Introduction</h2></div></div><div></div></div><ns45:p> Samba's printing support always relies on the installed print subsystem of the Unix OS it runs on. Samba is a "middleman". It takes printfiles from Windows (or other SMB) clients and passes them to the @@ -52,10 +53,10 @@ the next chapter covers in great detail the more modern <span class="emphasis"><em>Common UNIX Printing System</em></span> (CUPS). -</p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>CUPS users, be warned: don't just jump on to the next +</ns45:p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>CUPS users, be warned: don't just jump on to the next chapter. You might miss important information contained only -here!</p></div><p> -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2934627"></a>What happens if you send a Job from a Client</h3></div></div><div></div></div><p> +here!</p></div><ns45:p> +</ns45:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932319"></a>What happens if you send a Job from a Client</h3></div></div><div></div></div><p> To successfully print a job from a Windows client via a Samba print server to a UNIX printer, there are 6 (potentially 7) stages: @@ -63,7 +64,7 @@ stages: into Samba's spooling area</p></li><li><p>Windows closes the connection again</p></li><li><p>Samba invokes the print command to hand the file over to the UNIX print subsystem's spooling area</p></li><li><p>The Unix print subsystem processes the print job</p></li><li><p>The printfile may need to be explicitly deleted -from the Samba spooling area.</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2934698"></a>Printing Related Configuration Parameters</h3></div></div><div></div></div><p> +from the Samba spooling area.</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932389"></a>Printing Related Configuration Parameters</h3></div></div><div></div></div><p> There are a number of configuration parameters in controlling Samba's printing behaviour. Please also refer to the man page for smb.conf to @@ -77,20 +78,20 @@ behaviour of all individual or service level shares (provided those don't have a different setting defined for the same parameter, thus overriding the global default).</p></dd><dt><span class="term">Global Parameters</span></dt><dd><p>These <span class="emphasis"><em>may not</em></span> go into individual shares. If they go in by error, the "testparm" utility can discover -this (if you run it) and tell you so.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935615"></a>Parameters Recommended for Use</h3></div></div><div></div></div><p>The following <tt class="filename">smb.conf</tt> parameters directly +this (if you run it) and tell you so.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935498"></a>Parameters Recommended for Use</h3></div></div><div></div></div><p>The following <tt class="filename">smb.conf</tt> parameters directly related to printing are used in Samba-3. See also the <tt class="filename">smb.conf</tt> man page for detailed explanations: -</p><p><b>List of printing related parameters in Samba-3.</b> -</p><div class="itemizedlist"><p class="title"><b>Global level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>addprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>deleteprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>enumports command (G)</tt></i></p></li><li><p><i class="parameter"><tt>load printers (G)</tt></i></p></li><li><p><i class="parameter"><tt>lpq cache time (G)</tt></i></p></li><li><p><i class="parameter"><tt>os2 driver map (G)</tt></i></p></li><li><p><i class="parameter"><tt>printcap name (G), printcap (G)</tt></i></p></li><li><p><i class="parameter"><tt>show add printer wizard (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (G)</tt></i></p></li></ul></div><p> +</p><ns45:p><b>List of printing related parameters in Samba-3.</b> +</ns45:p><div class="itemizedlist"><p class="title"><b>Global level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>addprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>deleteprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>enumports command (G)</tt></i></p></li><li><p><i class="parameter"><tt>load printers (G)</tt></i></p></li><li><p><i class="parameter"><tt>lpq cache time (G)</tt></i></p></li><li><p><i class="parameter"><tt>os2 driver map (G)</tt></i></p></li><li><p><i class="parameter"><tt>printcap name (G), printcap (G)</tt></i></p></li><li><p><i class="parameter"><tt>show add printer wizard (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (G)</tt></i></p></li></ul></div><ns45:p> -</p><div class="itemizedlist"><p class="title"><b>Service level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>hosts allow (S)</tt></i></p></li><li><p><i class="parameter"><tt>hosts deny (S)</tt></i></p></li><li><p><i class="parameter"><tt>lppause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpq command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lprm command (S)</tt></i></p></li><li><p><i class="parameter"><tt>max print jobs (S)</tt></i></p></li><li><p><i class="parameter"><tt>min print space (S)</tt></i></p></li><li><p><i class="parameter"><tt>print command (S)</tt></i></p></li><li><p><i class="parameter"><tt>printable (S), print ok (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer name (S), printer (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer admin (S)</tt></i></p></li><li><p><i class="parameter"><tt>printing = [cups|bsd|lprng...] (S)</tt></i></p></li><li><p><i class="parameter"><tt>queuepause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>queueresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (S)</tt></i></p></li></ul></div><p> -</p><p> +</ns45:p><div class="itemizedlist"><p class="title"><b>Service level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>hosts allow (S)</tt></i></p></li><li><p><i class="parameter"><tt>hosts deny (S)</tt></i></p></li><li><p><i class="parameter"><tt>lppause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpq command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lprm command (S)</tt></i></p></li><li><p><i class="parameter"><tt>max print jobs (S)</tt></i></p></li><li><p><i class="parameter"><tt>min print space (S)</tt></i></p></li><li><p><i class="parameter"><tt>print command (S)</tt></i></p></li><li><p><i class="parameter"><tt>printable (S), print ok (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer name (S), printer (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer admin (S)</tt></i></p></li><li><p><i class="parameter"><tt>printing = [cups|bsd|lprng...] (S)</tt></i></p></li><li><p><i class="parameter"><tt>queuepause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>queueresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (S)</tt></i></p></li></ul></div><ns45:p> +</ns45:p><p> Samba's printing support implements the Microsoft Remote Procedure Calls (MS-RPC) methods for printing. These are used by Windows NT (and later) print servers. The old "LanMan" protocol is still supported as a fallback resort, and for older clients to use. More details will follow further beneath. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935946"></a>Parameters for Backwards Compatibility</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930858"></a>Parameters for Backwards Compatibility</h3></div></div><div></div></div><p> Two new parameters that were added in Samba 2.2.2, are still present in Samba-3.0. Both of these options are described in the <tt class="filename">smb.conf</tt> man page and are disabled by @@ -100,19 +101,19 @@ provided for better support of Samba 2.0.x backwards capability. It will disable Samba's support for MS-RPC printing and yield identical printing behaviour to Samba 2.0.x.</p></dd><dt><span class="term"><i class="parameter"><tt>use client driver (G)</tt></i></span></dt><dd><p> was provided for using local printer drivers on Windows NT/2000 clients. It does -not apply to Windows 95/98/ME clients.</p></dd></dl></div><p><b>Parameters "for backward compatibility only", use with caution.</b> -</p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (S)</tt></i></p></li></ul></div><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936054"></a>Parameters no longer in use</h3></div></div><div></div></div><p> +not apply to Windows 95/98/ME clients.</p></dd></dl></div><ns45:p><b>Parameters "for backward compatibility only", use with caution.</b> +</ns45:p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (S)</tt></i></p></li></ul></div><ns45:p> +</ns45:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930966"></a>Parameters no longer in use</h3></div></div><div></div></div><p> Samba users upgrading from 2.2.x to 3.0 need to be aware that some previously available settings are no longer supported (as was announced some time ago). Here is a list of them: -</p><p><b>"old" parameters, removed in Samba-3.</b> +</p><ns45:p><b>"old" parameters, removed in Samba-3.</b> The following <tt class="filename">smb.conf</tt> parameters have been deprecated already in Samba 2.2 and are now completely removed from Samba-3. You cannot use them in new 3.0 installations: -</p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>printer driver file (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>postscript (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver location (S)</tt></i></p></li></ul></div><p> -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936147"></a>A simple Configuration to Print with Samba-3</h2></div></div><div></div></div><p> +</ns45:p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>printer driver file (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>postscript (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver location (S)</tt></i></p></li></ul></div><ns45:p> +</ns45:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931059"></a>A simple Configuration to Print with Samba-3</h2></div></div><div></div></div><p> Here is a very simple example configuration for print related settings in the file. If you compare it with your own system's , you probably find some @@ -147,7 +148,7 @@ reminder: It even tolerates some spelling errors (like "browsable" instead of "browseable"). Most spelling is case-insensitive. Also, you can use "Yes|No" or "True|False" for boolean settings. Lists of names may be separated by commas, spaces or tabs. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936216"></a>Verification of "Settings in Use" with <b class="command">testparm</b></h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933066"></a>Verification of "Settings in Use" with <b class="command">testparm</b></h3></div></div><div></div></div><p> To see all (or at least most) printing related settings in Samba, including the implicitly used ones, try the command outlined below (hit "ENTER" twice!). It greps for all occurrences of "lp", "print", @@ -201,7 +202,7 @@ be important in your future dealings with Samba.</em></span> </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> testparm in Samba-3.0 behaves differently from 2.2.x: used without the "-v" switch it only shows you the settings actually written into ! To see the complete -configuration used, add the "-v" parameter to testparm.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936305"></a>A little Experiment to warn you</h3></div></div><div></div></div><p> +configuration used, add the "-v" parameter to testparm.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933148"></a>A little Experiment to warn you</h3></div></div><div></div></div><p> Should you need to troubleshoot at any stage, please always come back to this point first and verify if "testparm" shows the parameters you expect! To give you an example from personal experience as a warning, @@ -310,7 +311,7 @@ printing = lprng #This defines LPRng as the printing system" will regard the whole of the string after the "=" sign as the value you want to define. And this is an invalid value that will be ignored, and a default value used instead.] -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936612"></a>Extended Sample Configuration to Print with Samba-3</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933455"></a>Extended Sample Configuration to Print with Samba-3</h2></div></div><div></div></div><p> Here we show a more verbose example configuration for print related settings in an . Below is a discussion and explanation of the various parameters. We chose to use BSD-style @@ -368,9 +369,9 @@ default, because these have been compiled in. To see all settings, let root use the <b class="command">testparm</b> utility. <b class="command">testparm</b> also gives warnings if you have mis-configured certain things.. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936715"></a>Detailed Explanation of the Example's Settings</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933547"></a>Detailed Explanation of the Example's Settings</h2></div></div><div></div></div><p> Following is a discussion of the settings from above shown example. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936728"></a>The [global] Section</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933560"></a>The [global] Section</h3></div></div><div></div></div><p> The <i class="parameter"><tt>[global]</tt></i> section is one of 4 special sections (along with [<i class="parameter"><tt>[homes]</tt></i>, <i class="parameter"><tt>[printers]</tt></i> and @@ -444,7 +445,7 @@ It must <span class="emphasis"><em>not</em></span> be enabled on print shares (with a <tt class="constant">yes</tt> or <tt class="constant">true</tt> setting) which have valid drivers installed on the Samba server! For more detailed explanations see the man page of <tt class="filename">smb.conf</tt>. -</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937111"></a>The [printers] Section</h3></div></div><div></div></div><p> +</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943021"></a>The [printers] Section</h3></div></div><div></div></div><p> This is the second special section. If a section with this name appears in the <tt class="filename">smb.conf</tt>, users are able to connect to any printer specified in the Samba host's printcap file, @@ -504,7 +505,7 @@ write to the directory (if user privileges allow the connection), but only via print spooling operations. "Normal" write operations are not allowed. </p></dd><dt><span class="term"><i class="parameter"><tt>writeable = no</tt></i></span></dt><dd><p> synonym for <i class="parameter"><tt>read only = yes</tt></i> -</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937440"></a>Any [my_printer_name] Section</h3></div></div><div></div></div><p> +</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943350"></a>Any [my_printer_name] Section</h3></div></div><div></div></div><p> If a section appears in the , which is tagged as <i class="parameter"><tt>printable = yes</tt></i>, Samba presents it as a printer share to its clients. Note, that Win95/98/ME clients may @@ -539,7 +540,7 @@ belong to the "allowed subnets"). As you can see, you could name IP addresses as well as NetBIOS hostnames here. </p></dd><dt><span class="term"><i class="parameter"><tt>guest ok = no</tt></i></span></dt><dd><p>this printer is not open for the guest account! -</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937660"></a>Print Commands</h3></div></div><div></div></div><p> +</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943571"></a>Print Commands</h3></div></div><div></div></div><p> In each section defining a printer (or in the <i class="parameter"><tt>[printers]</tt></i> section), a <i class="parameter"><tt>print command</tt></i> parameter may be defined. It sets a command to @@ -557,7 +558,7 @@ your own print commands (or even develop print command shell scripts), make sure you pay attention to the need to remove the files from the Samba spool directory. Otherwise your hard disk may soon suffer from shortage of free space. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937711"></a>Default Print Commands for various Unix Print Subsystems</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943622"></a>Default Print Commands for various Unix Print Subsystems</h3></div></div><div></div></div><p> You learned earlier on, that Samba in most cases uses its built-in settings for many parameters if it can not find an explicitly stated one in its configuration file. The same is true for the @@ -597,7 +598,7 @@ check which command takes effect. Then check that this command is adequate and actually works for your installed print subsystem. It is always a good idea to explicitly set up your configuration files the way you want them to work and not rely on any built-in defaults. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938236"></a>Setting up your own Print Commands</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944148"></a>Setting up your own Print Commands</h3></div></div><div></div></div><p> After a print job has finished spooling to a service, the <i class="parameter"><tt>print command</tt></i> will be used by Samba via a <span class="emphasis"><em>system()</em></span> call to process the spool file. Usually @@ -667,7 +668,7 @@ for the <i class="parameter"><tt>print command</tt></i> parameter varies dependi the <i class="parameter"><tt>printing</tt></i> parameter. Another example is: </p><pre class="programlisting"> print command = /usr/local/samba/bin/myprintscript %p %s -</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2938516"></a>Innovations in Samba Printing since 2.2</h2></div></div><div></div></div><p> +</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944425"></a>Innovations in Samba Printing since 2.2</h2></div></div><div></div></div><p> Before version 2.2.0, Samba's print server support for Windows clients was limited to the level of <span class="emphasis"><em>LanMan</em></span> printing calls. This is the same protocol level as Windows 9x PCs offer when @@ -708,7 +709,7 @@ default permissions assigned by Windows NT to a printer gives the "Print" permissions to the well-known <span class="emphasis"><em>Everyone</em></span> group. (The older clients of type Win9x can only print to "shared" printers). -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938681"></a>Client Drivers on Samba Server for <span class="emphasis"><em>Point'n'Print</em></span></h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944579"></a>Client Drivers on Samba Server for <span class="emphasis"><em>Point'n'Print</em></span></h3></div></div><div></div></div><p> There is still confusion about what all this means: <span class="emphasis"><em>Is it or is it not a requirement for printer drivers to be installed on a Samba host in order to support printing from Windows clients?</em></span> The @@ -746,7 +747,7 @@ by Samba. The clients use these drivers to generate print files in the format the printer (or the Unix print system) requires. Print files received by Samba are handed over to the Unix printing system, which is responsible for all further processing, if needed. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938833"></a>The [printer$] Section is removed from Samba-3</h3></div></div><div></div></div><p><b> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944731"></a>The [printer$] Section is removed from Samba-3</h3></div></div><div></div></div><p><b> <i class="parameter"><tt>[print$]</tt></i> vs. <i class="parameter"><tt>[printer$]</tt></i> .</b> Versions of Samba prior to 2.2 made it possible to use a share @@ -772,7 +773,7 @@ access (in the context of its ACLs) in order to support printer driver down- and uploads. Don't fear -- this does not mean Windows 9x clients are thrown aside now. They can use Samba's <i class="parameter"><tt>[print$]</tt></i> share support just fine. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938945"></a>Creating the [print$] Share</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944844"></a>Creating the [print$] Share</h3></div></div><div></div></div><p> In order to support the up- and downloading of printer driver files, you must first configure a file share named <i class="parameter"><tt>[print$]</tt></i>. The "public" name of this share is @@ -806,7 +807,7 @@ with appropriate values for your site): </pre><p> Of course, you also need to ensure that the directory named by the <i class="parameter"><tt>path</tt></i> parameter exists on the Unix file system. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939016"></a>Parameters in the [print$] Section</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944914"></a>Parameters in the [print$] Section</h3></div></div><div></div></div><p> <i class="parameter"><tt>[print$]</tt></i> is a special section in . It contains settings relevant to potential printer driver download and local installation by clients. @@ -851,7 +852,7 @@ sure these accounts can copy files to the share. If this is a non-root account, then the account should also be mentioned in the global <i class="parameter"><tt>printer admin </tt></i> parameter. See the man page for more information on -configuring file shares. </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939247"></a>Subdirectory Structure in [print$]</h3></div></div><div></div></div><p> +configuring file shares. </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945135"></a>Subdirectory Structure in [print$]</h3></div></div><div></div></div><p> In order for a Windows NT print server to support the downloading of driver files by multiple client architectures, you must create several subdirectories within the <i class="parameter"><tt>[print$]</tt></i> service @@ -890,7 +891,7 @@ client workstation. Open <span class="guiicon">Network Neighbourhood</span> or Once you have located the server, navigate to its <span class="guiicon">Printers and Faxes</span> folder. You should see an initial listing of printers that matches the printer shares defined on your Samba host. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2939408"></a>Installing Drivers into [print$]</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945296"></a>Installing Drivers into [print$]</h2></div></div><div></div></div><p> You have successfully created the <i class="parameter"><tt>[print$]</tt></i> share in ? And Samba has re-read its configuration? Good. But you are not yet ready to take off. The @@ -908,7 +909,7 @@ Properties</em></span> and <span class="emphasis"><em>Add Printer Wizard</em></s from any Windows NT/2k/XP client workstation.</p></li></ul></div><p> The latter option is probably the easier one (even if the only entrance to this realm seems a little bit weird at first). -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939503"></a>Setting Drivers for existing Printers with a Client GUI</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945390"></a>Setting Drivers for existing Printers with a Client GUI</h3></div></div><div></div></div><p> The initial listing of printers in the Samba host's <span class="guiicon">Printers</span> folder accessed from a client's Explorer will have no real printer driver assigned to them. By default, in @@ -954,7 +955,7 @@ Assuming you have connected with an administrative (or root) account you will also be able to modify other printer properties such as ACLs and default device settings using this dialog. For the default device settings, please consider the advice given further below. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939686"></a>Setting Drivers for existing Printers with +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945574"></a>Setting Drivers for existing Printers with <b class="command">rpcclient</b></h3></div></div><div></div></div><p> The second way to install printer drivers into <i class="parameter"><tt>[print$]</tt></i> and set them up in a valid way can be @@ -969,7 +970,7 @@ time with the <b class="command">setdriver</b> subcommand.</p></li></ol></div><p> We will provide detailed hints for each of these steps in the next few paragraphs. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2939795"></a>Identifying the Driver Files</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945683"></a>Identifying the Driver Files</h4></div></div><div></div></div><p> To find out about the driver files, you have two options: you could investigate the driver CD which comes with your printer. Study the <tt class="filename">*.inf</tt> file on the CD, if it is contained. This @@ -1072,7 +1073,7 @@ Windows 2000 changed this. While it still can use the Kernel Mode drivers (if this is enabled by the Admin), its native mode for printer drivers is User Mode execution. This requires drivers designed for this. These type of drivers install into the "3" subdirectory. -</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2940123"></a>Collecting the Driver Files from a Windows Host's +</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946011"></a>Collecting the Driver Files from a Windows Host's [print$] Share</h4></div></div><div></div></div><p> Now we need to collect all the driver files we identified. in our previous step. Where do we get them from? Well, why not retrieve them @@ -1108,7 +1109,7 @@ files for these architectures are in the WIN40/0/ subdir. Once we are complete, we can run <b class="command">smbclient ... put</b> to store the collected files on the Samba server's <i class="parameter"><tt>[print$]</tt></i> share. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2940276"></a>Depositing the Driver Files into [print$]</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946163"></a>Depositing the Driver Files into [print$]</h4></div></div><div></div></div><p> So, now we are going to put the driver files into the <i class="parameter"><tt>[print$]</tt></i> share. Remember, the UNIX path to this share has been defined previously in your @@ -1169,7 +1170,7 @@ re-location will automatically be done by the don't forget to also put the files for the Win95/98/ME architecture into the <tt class="filename">WIN40/</tt> subdirectory should you need them). -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2940512"></a>Check if the Driver Files are there (with smbclient)</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946366"></a>Check if the Driver Files are there (with smbclient)</h4></div></div><div></div></div><p> For now we verify that our files are there. This can be done with <b class="command">smbclient</b> too (but of course you can log in via SSH also and do this through a standard UNIX shell access too): @@ -1222,7 +1223,7 @@ Point'n'Print. The reason is: Samba doesn't know yet that these files are something special, namely <span class="emphasis"><em>printer driver files</em></span> and it doesn't know yet to which print queue(s) these driver files belong. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2940672"></a>Running <b class="command">rpcclient</b> with +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946482"></a>Running <b class="command">rpcclient</b> with <b class="command">adddriver</b></h4></div></div><div></div></div><p> So, next you must tell Samba about the special category of the files you just uploaded into the <i class="parameter"><tt>[print$]</tt></i> share. This @@ -1257,7 +1258,7 @@ files successfully, but render the driver unworkable. So take care! Hints about the syntax of the adddriver command are in the man page. The CUPS printing chapter of this HOWTO collection provides a more detailed description, if you should need it. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2940772"></a>Check how Driver Files have been moved after +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946582"></a>Check how Driver Files have been moved after <b class="command">adddriver</b> finished</h4></div></div><div></div></div><p> One indication for Samba's recognition of the files as driver files is the <tt class="computeroutput">successfully installed</tt> message. @@ -1305,7 +1306,7 @@ subdirectory. You can check this again with </pre><p> Another verification is that the timestamp of the printing TDB files is now updated (and possibly their filesize has increased). -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2940941"></a>Check if the Driver is recognized by Samba</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946706"></a>Check if the Driver is recognized by Samba</h4></div></div><div></div></div><p> Now the driver should be registered with Samba. We can easily verify this, and will do so in a moment. However, this driver is <span class="emphasis"><em>not yet</em></span> associated with a particular @@ -1349,7 +1350,7 @@ time. Our new driver only shows up for <span class="application">Windows NT 4.0 or 2000</span>. To have it present for <span class="application">Windows 95, 98 and ME</span> you'll have to repeat the whole procedure with the WIN40 architecture and subdirectory. -</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2941145"></a>A side note: you are not bound to specific driver names</h4></div></div><div></div></div><p> +</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946909"></a>A side note: you are not bound to specific driver names</h4></div></div><div></div></div><p> You can name the driver as you like. If you repeat the <b class="command">adddriver</b> step, with the same files as before, but with a different driver name, it will work the same: @@ -1383,7 +1384,7 @@ repeatedly. Each run "consumes" the files you had put into the respective subdirectories. So you <span class="emphasis"><em>must</em></span> precede an <b class="command">smbclient ... put</b> command before each <b class="command">rpcclient ... adddriver</b>" command. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2941256"></a>La Grande Finale: Running <b class="command">rpcclient</b> with +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2947021"></a>La Grande Finale: Running <b class="command">rpcclient</b> with <b class="command">setdriver</b></h4></div></div><div></div></div><p> Samba still needs to know <span class="emphasis"><em>which</em></span> printer's driver this is. It needs to create a mapping of the driver to a printer, and @@ -1413,13 +1414,13 @@ known to Samba already. A bug in 2.2.x prevented Samba from recognizing freshly installed printers. You had to restart Samba, or at least send a HUP signal to all running smbd processes to work around this: -<b class="userinput"><tt>kill -HUP `pidof smbd`</tt></b>. </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941408"></a>"The Proof of the Pudding lies in the Eating" (Client Driver Install +<b class="userinput"><tt>kill -HUP `pidof smbd`</tt></b>. </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947172"></a>"The Proof of the Pudding lies in the Eating" (Client Driver Install Procedure)</h2></div></div><div></div></div><p> A famous philosopher said once: “<span class="quote">The Proof of the Pudding lies in the Eating</span>”. The proof for our setup lies in the printing. So let's install the printer driver onto the client PCs. This is not as straightforward as it may seem. Read on. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941428"></a>The first Client Driver Installation</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947193"></a>The first Client Driver Installation</h3></div></div><div></div></div><p> Especially important is the installation onto the first client PC (for each architectural platform separately). Once this is done correctly, all further clients are easy to setup and shouldn't need further @@ -1462,7 +1463,7 @@ Data" set is still incomplete. </p><p> You must now make sure that a valid "Device Mode" is set for the driver. Don't fear -- we will explain now what that means. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941626"></a>IMPORTANT! Setting Device Modes on new Printers</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947391"></a>IMPORTANT! Setting Device Modes on new Printers</h3></div></div><div></div></div><p> In order for a printer to be truly usable by a Windows NT/2K/XP client, it must possess: </p><div class="itemizedlist"><ul type="disc"><li><p>a valid <span class="emphasis"><em>Device Mode</em></span> generated by @@ -1534,7 +1535,7 @@ properties. Others may crash the client's spooler service. So use this parameter with caution. It is always better to have the client generate a valid device mode for the printer and store it on the server for you. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941915"></a>Further Client Driver Install Procedures</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947680"></a>Further Client Driver Install Procedures</h3></div></div><div></div></div><p> Every further driver may be done by any user, along the lines described above: Browse network, open printers folder on Samba server, right-click printer and choose <span class="guimenuitem">Connect...</span>. Once @@ -1554,7 +1555,7 @@ rundll32 shell32.dll,Control_RunDLL MAIN.CPL @2 You can enter the commands either inside a <span class="guilabel">DOS box</span> window or in the <span class="guimenuitem">Run command...</span> field from the <span class="guimenu">Start</span> menu. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942010"></a>Always make first Client Connection as root or "printer admin"</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947775"></a>Always make first Client Connection as root or "printer admin"</h3></div></div><div></div></div><p> After you installed the driver on the Samba server (in its <i class="parameter"><tt>[print$]</tt></i> share, you should always make sure that your first client installation completes correctly. Make it a habit for @@ -1586,7 +1587,7 @@ the same way (called <span class="emphasis"><em>Point'n'Print</em></span>) will have the same defaults set for them. If you miss this step you'll get a lot of helpdesk calls from your users. But maybe you like to talk to people.... ;-) -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2942152"></a>Other Gotchas</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947917"></a>Other Gotchas</h2></div></div><div></div></div><p> Your driver is installed. It is ready for <span class="emphasis"><em>Point'n'Print</em></span> installation by the clients now. You <span class="emphasis"><em>may</em></span> have tried to download and use it @@ -1596,7 +1597,7 @@ example, suppose you didn't manage to "set the defaults" on the printer, as advised in the preceding paragraphs? And your users complain about various issues (such as “<span class="quote">We need to set the paper size for each job from Letter to A4 and it won't store it!</span>”) -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942185"></a>Setting Default Print Options for the Client Drivers</h3></div></div><div></div></div><p> +</p><div xmlns:ns49="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947950"></a>Setting Default Print Options for the Client Drivers</h3></div></div><div></div></div><p> The last sentence might be viewed with mixed feelings by some users and admins. They have struggled for hours and hours and couldn't arrive at a point were their settings seemed to be saved. It is not their @@ -1606,7 +1607,7 @@ up when you right-click the printer name and select looking dialogs, each claiming that they help you to set printer options, in three different ways. Here is the definite answer to the "Samba Default Driver Setting FAQ": -</p><p><b>“<span class="quote">I can't set and save default print options +</p><ns49:p><b>“<span class="quote">I can't set and save default print options for all users on Win2K/XP! Why not?</span>”</b> How are you doing it? I bet the wrong way.... (it is not very easy to find out, though). There are 3 different ways to bring you to @@ -1617,34 +1618,34 @@ dialogs <span class="emphasis"><em>look</em></span> the same. Only one of them Administrator to do this for all users. Here is how I reproduce it in on XP Professional: -</p><div class="orderedlist"><ol type="A"><li><p>The first "wrong" way: +</ns49:p><div class="orderedlist"><ol type="A"><li xmlns:ns46=""><ns46:p>The first "wrong" way: -</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guiicon">Printers</span> +</ns46:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guiicon">Printers</span> folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and select in context menu <span class="guimenu">Printing Preferences...</span></p></li><li><p>Look at this dialog closely and remember what it looks -like.</p></li></ol></div><p> -</p></li><li><p>The second "wrong" way: +like.</p></li></ol></div><ns46:p> +</ns46:p></li><li xmlns:ns47=""><ns47:p>The second "wrong" way: -</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guimenu">Printers</span> +</ns47:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guimenu">Printers</span> folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and select in the context menu <span class="guimenuitem">Properties</span></p></li><li><p>Click on the <span class="guilabel">General</span> tab</p></li><li><p>Click on the button <span class="guibutton">Printing Preferences...</span></p></li><li><p>A new dialog opens. Keep this dialog open and go back -to the parent dialog.</p></li></ol></div><p> -</p></li><li><p>The third, the "correct" way: (should you do +to the parent dialog.</p></li></ol></div><ns47:p> +</ns47:p></li><li xmlns:ns48=""><ns48:p>The third, the "correct" way: (should you do this from the beginning, just carry out steps 1. and 2. from second "way" above) -</p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="guilabel">Advanced</span> +</ns48:p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="guilabel">Advanced</span> tab. (Hmmm... if everything is "Grayed Out", then you are not logged in as a user with enough privileges).</p></li><li><p>Click on the <span class="guibutton">Printing Defaults...</span> button.</p></li><li><p>On any of the two new tabs, click on the <span class="guilabel">Advanced...</span> button.</p></li><li><p>A new dialog opens. Compare this one to the other, -identical looking one from "B.5" or A.3".</p></li></ol></div><p> -</p></li></ol></div><p> +identical looking one from "B.5" or A.3".</p></li></ol></div><ns48:p> +</ns48:p></li></ol></div><ns49:p> Do you see any difference in the two settings dialogs? I don't either. However, only the last one, which you arrived at with steps @@ -1671,7 +1672,7 @@ try the same way with Win2k or WinXP. You wouldn't dream that there is now a different "clicking path" to arrive at an identically looking, but functionally different dialog to set defaults for all users! -</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>Try (on Win2000 and WinXP) to run this command (as a user +</ns49:p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>Try (on Win2000 and WinXP) to run this command (as a user with the right privileges): </p><p><b class="userinput"><tt> rundll32 printui.dll,PrintUIEntry /p /t3 /n\\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printersharename</tt></i> @@ -1685,7 +1686,7 @@ to see the tab with the <span class="guilabel">Printing Preferences...</span> button (the one which doesn't set system-wide defaults). You can start the commands from inside a DOS box" or from the <span class="guimenu">Start</span> -- <span class="guimenuitem">Run...</span> menu. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942622"></a>Supporting large Numbers of Printers</h3></div></div><div></div></div><p> +</p></div></div><div xmlns:ns50="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948384"></a>Supporting large Numbers of Printers</h3></div></div><div></div></div><p> One issue that has arisen during the recent development phase of Samba is the need to support driver downloads for 100's of printers. Using Windows NT APW here is somewhat awkward (to say the least). If you @@ -1722,9 +1723,9 @@ following is an example of how this could be accomplished: Driver Name: [myphantasydrivername] [....] -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b> cmd = enumprinters flags:[0x800000] @@ -1732,15 +1733,15 @@ following is an example of how this could be accomplished: description:[\\SAMBA-CUPS\dm9110,,110ppm HiVolume DANKA Stuttgart] comment:[110 ppm HiVolume DANKA Stuttgart] [....] -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'setdriver <i class="replaceable"><tt>dm9110</tt></i> "<i class="replaceable"><tt>Heidelberg Digimaster 9110 (PS)</tt></i>"'</tt></b> cmd = setdriver dm9110 Heidelberg Digimaster 9110 (PPD) Successfully set dm9110 to driver Heidelberg Digimaster 9110 (PS). -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b> cmd = enumprinters flags:[0x800000] @@ -1748,15 +1749,15 @@ following is an example of how this could be accomplished: description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),110ppm HiVolume DANKA Stuttgart] comment:[110ppm HiVolume DANKA Stuttgart] [....] -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'setdriver <i class="replaceable"><tt>dm9110</tt></i> <i class="replaceable"><tt>myphantasydrivername</tt></i>'</tt></b> cmd = setdriver dm9110 myphantasydrivername Successfully set dm9110 to myphantasydrivername. -</pre><p> +</pre><ns50:p> -</p><pre class="screen"> +</ns50:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b> cmd = enumprinters flags:[0x800000] @@ -1772,7 +1773,7 @@ commas in the "description" field). After the <b class="command">setdriver</b> command succeeded, all is well. (The CUPS Printing chapter has more info about the installation of printer drivers with the help of <b class="command">rpcclient</b>). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942924"></a>Adding new Printers with the Windows NT APW</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948687"></a>Adding new Printers with the Windows NT APW</h3></div></div><div></div></div><p> By default, Samba exhibits all printer shares defined in <tt class="filename">smb.conf</tt> in the <span class="guiicon">Printers...</span> folder. Also located in this folder @@ -1818,7 +1819,7 @@ user, not necessarily a root account. A <i class="parameter"><tt>map to guest = user</tt></i> may have connected you unwittingly under the wrong privilege; you should check it by using the <b class="command">smbstatus</b> command. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943168"></a>Weird Error Message <span class="errorname">Cannot connect under a +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948930"></a>Weird Error Message <span class="errorname">Cannot connect under a different Name</span></h3></div></div><div></div></div><p> Once you are connected with the wrong credentials, there is no means to reverse the situation other than to close all Explorer windows, and @@ -1848,7 +1849,7 @@ message. You close all Explorer Windows and start it again. You try to connect - and this times it works! Windows seems to cache connection info somewhere and doesn't keep it up to date (if you are unlucky you might need to reboot to get rid of the error message). -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943267"></a>Be careful when assembling Driver Files</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949028"></a>Be careful when assembling Driver Files</h3></div></div><div></div></div><p> You need to be very careful when you take notes about the files and belonging to a particular driver. Don't confuse the files for driver version "0" (for Win95/98/ME, going into @@ -1989,7 +1990,7 @@ In my example were even more differences than shown here. Conclusion: you must be very careful to select the correct driver files for each driver version. Don't rely on the names alone. Don't interchange files belonging to different driver versions. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943612"></a>Samba and Printer Ports</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949299"></a>Samba and Printer Ports</h3></div></div><div></div></div><p> Windows NT/2000 print servers associate a port with each printer. These normally take the form of <tt class="filename">LPT1:</tt>, <tt class="filename">COM1:</tt>, <tt class="filename">FILE:</tt>, etc. Samba @@ -2010,14 +2011,14 @@ another (“<span class="quote">My users and my Boss should not know that th working with Samba</span>”), possesses a <i class="parameter"><tt>enumports command</tt></i> which can be used to define an external program that generates a listing of ports on a system. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943683"></a>Avoiding the most common Misconfigurations of the Client Driver</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949370"></a>Avoiding the most common Misconfigurations of the Client Driver</h3></div></div><div></div></div><p> So - printing works, but there are still problems. Most jobs print well, some don't print at all. Some jobs have problems with fonts, which don't look good at all. Some jobs print fast, and some are dead-slow. We can't cover it all; but we want to encourage you to read the little paragraph about "Avoiding the wrong PostScript Driver Settings" in the CUPS Printing part of this document. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943705"></a>The Imprints Toolset</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949392"></a>The Imprints Toolset</h2></div></div><div></div></div><p> The Imprints tool set provides a UNIX equivalent of the Windows NT Add Printer Wizard. For complete information, please refer to the Imprints web site @@ -2034,20 +2035,20 @@ coordinate your efforts on the samba-technical mailing list. The toolset is still in usable form; but only for a series of older printer models, where there are prepared packages to use. Packages for more up to date print devices are needed if Imprints should have a -future.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943751"></a>What is Imprints?</h3></div></div><div></div></div><p> +future.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949437"></a>What is Imprints?</h3></div></div><div></div></div><p> Imprints is a collection of tools for supporting these goals: </p><div class="itemizedlist"><ul type="disc"><li><p>Providing a central repository information regarding Windows NT and 95/98 printer driver packages</p></li><li><p>Providing the tools necessary for creating the Imprints printer driver packages.</p></li><li><p>Providing an installation client which will obtain printer drivers from a central internet (or intranet) Imprints Server repository and install them on remote Samba and Windows NT4 print -servers.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943792"></a>Creating Printer Driver Packages</h3></div></div><div></div></div><p> +servers.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949479"></a>Creating Printer Driver Packages</h3></div></div><div></div></div><p> The process of creating printer driver packages is beyond the scope of this document (refer to Imprints.txt also included with the Samba distribution for more information). In short, an Imprints driver package is a gzipped tarball containing the driver files, related INF files, and a control file needed by the installation client. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943811"></a>The Imprints Server</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949498"></a>The Imprints Server</h3></div></div><div></div></div><p> The Imprints server is really a database server that may be queried via standard HTTP mechanisms. Each printer entry in the database has an associated URL for the actual downloading of the package. Each @@ -2055,7 +2056,7 @@ package is digitally signed via GnuPG which can be used to verify that package downloaded is actually the one referred in the Imprints database. It is strongly recommended that this security check <span class="emphasis"><em>not</em></span> be disabled. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943835"></a>The Installation Client</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949522"></a>The Installation Client</h3></div></div><div></div></div><p> More information regarding the Imprints installation client is available in the <tt class="filename">Imprints-Client-HOWTO.ps</tt> file included with the imprints source package. @@ -2070,10 +2071,10 @@ remote Samba and Windows NT print servers. </p><p> The basic installation process is in four steps and perl code is wrapped around smbclient and rpcclient -</p><div class="itemizedlist"><ul type="disc"><li><p> +</p><div class="itemizedlist"><ul type="disc"><li xmlns:ns51=""><ns51:p> foreach (supported architecture for a given driver) - </p><div class="orderedlist"><ol type="1"><li><p>rpcclient: Get the appropriate upload directory on the remote server</p></li><li><p>smbclient: Upload the driver files</p></li><li><p>rpcclient: Issues an AddPrinterDriver() MS-RPC</p></li></ol></div><p> - </p></li><li><p>rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer</p></li></ul></div><p> + </ns51:p><div class="orderedlist"><ol type="1"><li><p>rpcclient: Get the appropriate upload directory on the remote server</p></li><li><p>smbclient: Upload the driver files</p></li><li><p>rpcclient: Issues an AddPrinterDriver() MS-RPC</p></li></ol></div><ns51:p> + </ns51:p></li><li><p>rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer</p></li></ul></div><p> One of the problems encountered when implementing the Imprints tool set was the name space issues between various supported client architectures. For example, Windows NT includes a driver named "Apple @@ -2096,7 +2097,7 @@ if is has not already been installed? The way of sidestepping this limitation is to require that all Imprints printer driver packages include both the Intel Windows NT and 95/98 printer drivers and that NT driver is installed first. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943987"></a>Add Network Printers at Logon without User Interaction</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949674"></a>Add Network Printers at Logon without User Interaction</h2></div></div><div></div></div><p> The following MS Knowledge Base article may be of some help if you need to handle Windows 2000 clients: <span class="emphasis"><em>How to Add Printers with No User Interaction in Windows 2000.</em></span> ( <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;189105</a> @@ -2171,7 +2172,7 @@ at logon time will not really be noticeable. Printers can be centrally added, changed, and deleted at will on the server with no user intervention required on the clients (you just need to keep the logon scripts up to date). -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944316"></a>The <b class="command">addprinter</b> command</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950004"></a>The <b class="command">addprinter</b> command</h2></div></div><div></div></div><p> The <b class="command">addprinter</b> command can be configured to be a shell script or program executed by Samba. It is triggered by running the APW from a client against the Samba print server. The APW asks the @@ -2183,7 +2184,7 @@ on legacy systems, or execute the <b class="command">lpadmin</b> command on more modern systems) and create the associated share in , then the APW will in effect really create a new printer on Samba and the UNIX print subsystem! -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944362"></a>Migration of "Classical" printing to Samba-3</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950049"></a>Migration of "Classical" printing to Samba-3</h2></div></div><div></div></div><p> The basic "NT-style" printer driver management has not changed considerably in 3.0 over the 2.2.x releases (apart from many small improvements). Here migration should be quite easy, especially if you @@ -2220,12 +2221,12 @@ rpcclient. See the Imprints installation client at: <a href="http://imprints.sourceforge.net/" target="_top"><span class="emphasis"><em>http://imprints.sourceforge.net/</em></span></a> </p><p> for an example. See also the discussion of rpcclient usage in the -"CUPS Printing" section.</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944531"></a>Publishing Printer Information in Active Directory or LDAP</h2></div></div><div></div></div><p> +"CUPS Printing" section.</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950217"></a>Publishing Printer Information in Active Directory or LDAP</h2></div></div><div></div></div><p> We will publish an update to this section shortly. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944545"></a>Common Errors and Problems</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950232"></a>Common Errors and Problems</h2></div></div><div></div></div><p> Here are a few typical errors and problems people have encountered. You can avoid them. Read on. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944558"></a>I give my root password but I don't get access</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950245"></a>I give my root password but I don't get access</h3></div></div><div></div></div><p> Don't confuse the root password which is valid for the Unix system (and in most cases stored in the form of a one-way hash in a file named <tt class="filename">/etc/shadow</tt>) with the password used to @@ -2233,7 +2234,7 @@ authenticate against Samba!. Samba doesn't know the UNIX password; for root to access Samba resources via Samba-type access, a Samba account for root must be created first. This is often done with the <b class="command">smbpasswd</b> command. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944591"></a>My printjobs get spooled into the spooling directory, but then get lost</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950278"></a>My printjobs get spooled into the spooling directory, but then get lost</h3></div></div><div></div></div><p> Don't use the existing Unix print system spool directory for the Samba spool directory. It may seem convenient and a saving of space, but it only leads to problems. The two <span class="emphasis"><em>must</em></span> be separate. diff --git a/docs/htmldocs/problems.html b/docs/htmldocs/problems.html index 6628a7d8fe..62e1a3615a 100644 --- a/docs/htmldocs/problems.html +++ b/docs/htmldocs/problems.html @@ -1,8 +1,9 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter34.Analysing and solving samba problems</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="diagnosis.html" title="Chapter33.The Samba checklist"><link rel="next" href="bugreport.html" title="Chapter35.Reporting Bugs"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter34.Analysing and solving samba problems</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="diagnosis.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="bugreport.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="problems"></a>Chapter34.Analysing and solving samba problems</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">8 Apr 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="problems.html#id3010907">Diagnostics tools</a></dt><dt><a href="problems.html#id3011048">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="problems.html#id3011333">Useful URLs</a></dt><dt><a href="problems.html#id3011378">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id3011530">How to get off the mailing lists</a></dt></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter34.Analysing and solving samba problems</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="diagnosis.html" title="Chapter33.The Samba checklist"><link rel="next" href="bugreport.html" title="Chapter35.Reporting Bugs"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter34.Analysing and solving samba problems</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="diagnosis.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="bugreport.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="problems"></a>Chapter34.Analysing and solving samba problems</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">8 Apr 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="problems.html#id3008806">Diagnostics tools</a></dt><dt><a href="problems.html#id3007532">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="problems.html#id3007815">Useful URLs</a></dt><dt><a href="problems.html#id3007859">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id3008012">How to get off the mailing lists</a></dt></dl></div><p> There are many sources of information available in the form of mailing lists, RFC's and documentation. The docs that come with the samba distribution contain very good explanations of -general SMB topics such as browsing.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010907"></a>Diagnostics tools</h2></div></div><div></div></div><p> +general SMB topics such as browsing.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008806"></a>Diagnostics tools</h2></div></div><div></div></div><p> One of the best diagnostic tools for debugging problems is Samba itself. You can use the <tt class="option">-d option</tt> for both <span class="application">smbd</span> and <span class="application">nmbd</span> to specify what <i class="parameter"><tt>debug level</tt></i> at which to run. See the man pages on smbd, nmbd and @@ -41,7 +42,7 @@ The version on the NT Server install CD will only allow monitoring of network traffic directed to the local NT box and broadcasts on the local subnet. Be aware that Ethereal can read and write netmon formatted files. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3011048"></a>Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007532"></a>Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</h2></div></div><div></div></div><p> Installing netmon on an NT workstation requires a couple of steps. The following are for installing Netmon V4.00.349, which comes with Microsoft Windows NT Server 4.0, on Microsoft Windows NT @@ -80,11 +81,11 @@ from the Windows 9x CD (<tt class="filename">\admin\nettools\netmon</tt>). Ther file located with the netmon driver files on the CD if you need information on how to do this. Copy the files from a working Netmon installation. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3011333"></a>Useful URLs</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>See how Scott Merrill simulates a BDC behavior at +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007815"></a>Useful URLs</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>See how Scott Merrill simulates a BDC behavior at <a href="http://www.skippy.net/linux/smb-howto.html" target="_top"> http://www.skippy.net/linux/smb-howto.html</a>. </p></li><li><p>FTP site for older SMB specs: <a href="ftp://ftp.microsoft.com/developr/drg/CIFS/" target="_top"> - ftp://ftp.microsoft.com/developr/drg/CIFS/</a></p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3011378"></a>Getting help from the mailing lists</h2></div></div><div></div></div><p> + ftp://ftp.microsoft.com/developr/drg/CIFS/</a></p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007859"></a>Getting help from the mailing lists</h2></div></div><div></div></div><p> There are a number of Samba related mailing lists. Go to <a href="http://samba.org" target="_top">http://samba.org</a>, click on your nearest mirror and then click on <b class="command">Support</b> and then click on <b class="command"> Samba related mailing lists</b>. @@ -118,7 +119,7 @@ error messages.</p></li><li><p>(Possibly) If you have a complete netmon trace ( the pipe to the error ) you can send the *.CAP file as well.</p></li><li><p>Please think carefully before attaching a document to an email. Consider pasting the relevant parts into the body of the message. The samba mailing lists go to a huge number of people, do they all need a copy of your -smb.conf in their attach directory?</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3011530"></a>How to get off the mailing lists</h2></div></div><div></div></div><p>To have your name removed from a samba mailing list, go to the +smb.conf in their attach directory?</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008012"></a>How to get off the mailing lists</h2></div></div><div></div></div><p>To have your name removed from a samba mailing list, go to the same place you went to to get on it. Go to <a href="http://lists.samba.org/" target="_top">http://lists.samba.org</a>, click on your nearest mirror and then click on <b class="command">Support</b> and then click on <b class="command"> Samba related mailing lists</b>. Or perhaps see diff --git a/docs/htmldocs/samba-bdc.html b/docs/htmldocs/samba-bdc.html index 4c2045642d..b317fe124b 100644 --- a/docs/htmldocs/samba-bdc.html +++ b/docs/htmldocs/samba-bdc.html @@ -1,8 +1,9 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter6.Backup Domain Control</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="samba-pdc.html" title="Chapter5.Domain Control"><link rel="next" href="domain-member.html" title="Chapter7.Domain Membership"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter6.Backup Domain Control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-pdc.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="domain-member.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-bdc"></a>Chapter6.Backup Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Volker</span> <span class="surname">Lendecke</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:Volker.Lendecke@SerNet.DE">Volker.Lendecke@SerNet.DE</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="samba-bdc.html#id2896028">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2896201">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896230">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2896450">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2896471">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2896497">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2896542">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896645">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2896706">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896719">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2896750">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2896783">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2896828">Can I do this all with LDAP?</a></dt></dl></dd></dl></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter6.Backup Domain Control</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="samba-pdc.html" title="Chapter5.Domain Control"><link rel="next" href="domain-member.html" title="Chapter7.Domain Membership"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter6.Backup Domain Control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-pdc.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="domain-member.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-bdc"></a>Chapter6.Backup Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Volker</span> <span class="surname">Lendecke</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:Volker.Lendecke@SerNet.DE">Volker.Lendecke@SerNet.DE</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="samba-bdc.html#id2896206">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2896370">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896399">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2894362">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2894383">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2894406">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894432">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894534">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894584">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894597">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2894629">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2894662">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2894707">Can I do this all with LDAP?</a></dt></dl></dd></dl></div><p> Before you continue reading in this section, please make sure that you are comfortable with configuring a Samba Domain Controller as described in the <a href="samba-pdc.html" title="Chapter5.Domain Control">Domain Control</a> chapter. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896028"></a>Features And Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896206"></a>Features And Benefits</h2></div></div><div></div></div><p> This is one of the most difficult chapters to summarise. It does not matter what we say here for someone will still draw conclusions and / or approach the Samba-Team with expectations that are either not yet capable of being delivered, or that can be achieved far more @@ -63,7 +64,7 @@ lets consider each possible option and look at the pro's and con's for each theo Arguments Against: All machine trust accounts and user accounts will be locally maintained. Domain users will NOT be able to roam from office to office. This is a broken and flawed solution. Do NOT do this. - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896201"></a>Essential Background Information</h2></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896370"></a>Essential Background Information</h2></div></div><div></div></div><p> A Domain Controller is a machine that is able to answer logon requests from network workstations. Microsoft LanManager and IBM LanServer were two early products that provided this capability. The technology has become known as the LanMan Netlogon service. @@ -73,7 +74,7 @@ and with it a new form of the network logon service that has extended functional This service became known as the NT NetLogon Service. The nature of this service has changed with the evolution of MS Windows NT and today provides a very complex array of services that are implemented over a complex spectrum of technologies. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896230"></a>MS Windows NT4 Style Domain Control</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896399"></a>MS Windows NT4 Style Domain Control</h3></div></div><div></div></div><p> Whenever a user logs into a Windows NT4 / 200x / XP Professional Workstation, the workstation connects to a Domain Controller (authentication server) to validate the username and password that the user entered are valid. If the information entered @@ -131,7 +132,7 @@ one of the BDCs can be promoted to a PDC. If this happens while the original PDC line then it is automatically demoted to a BDC. This is an important aspect of Domain Controller management. The tool that is used to affect a promotion or a demotion is the Server Manager for Domains. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896379"></a>Example PDC Configuration</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2894292"></a>Example PDC Configuration</h4></div></div><div></div></div><p> Since version 2.2 Samba officially supports domain logons for all current Windows Clients, including Windows NT4, 2003 and XP Professional. For samba to be enabled as a PDC some parameters in the <i class="parameter"><tt>[global]</tt></i>-section of the <tt class="filename">smb.conf</tt> have to be set: @@ -143,20 +144,20 @@ parameters in the <i class="parameter"><tt>[global]</tt></i>-section of the <tt Several other things like a <i class="parameter"><tt>[homes]</tt></i> and a <i class="parameter"><tt>[netlogon]</tt></i> share also need to be set along with settings for the profile path, the users home drive, etc.. This will not be covered in this chapter, for more information please refer to the chapter on <a href="samba-pdc.html" title="Chapter5.Domain Control">Domain Control</a>. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896450"></a>Active Directory Domain Control</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894362"></a>Active Directory Domain Control</h3></div></div><div></div></div><p> As of the release of MS Windows 2000 and Active Directory, this information is now stored in a directory that can be replicated and for which partial or full administrative control can be delegated. Samba-3 is NOT able to be a Domain Controller within an Active Directory tree, and it can not be an Active Directory server. This means that Samba-3 also can NOT act as a Backup Domain Controller to an Active Directory Domain Controller. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896471"></a>What qualifies a Domain Controller on the network?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894383"></a>What qualifies a Domain Controller on the network?</h3></div></div><div></div></div><p> Every machine that is a Domain Controller for the domain SAMBA has to register the NetBIOS group name SAMBA<#1c> with the WINS server and/or by broadcast on the local network. The PDC also registers the unique NetBIOS name SAMBA<#1b> with the WINS server. The name type <#1b> name is normally reserved for the Domain Master Browser, a role that has nothing to do with anything related to authentication, but the Microsoft Domain implementation requires the domain master browser to be on the same machine as the PDC. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896497"></a>How does a Workstation find its domain controller?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894406"></a>How does a Workstation find its domain controller?</h3></div></div><div></div></div><p> An MS Windows NT4 / 200x / XP Professional workstation in the domain SAMBA that wants a local user to be authenticated has to find the domain controller for SAMBA. It does this by doing a NetBIOS name query for the group name SAMBA<#1c>. It assumes that each @@ -164,7 +165,7 @@ of the machines it gets back from the queries is a domain controller and can ans requests. To not open security holes both the workstation and the selected domain controller authenticate each other. After that the workstation sends the user's credentials (name and password) to the local Domain Controller, for validation. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896542"></a>Backup Domain Controller Configuration</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894432"></a>Backup Domain Controller Configuration</h2></div></div><div></div></div><p> Several things have to be done: </p><div class="itemizedlist"><ul type="disc"><li><p> The domain SID has to be the same on the PDC and the BDC. This used to @@ -199,7 +200,7 @@ Several things have to be done: BDC. This can be done manually whenever login scripts are changed, or it can be done automatically together with the smbpasswd synchronization. - </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896645"></a>Example Configuration</h3></div></div><div></div></div><p> + </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894534"></a>Example Configuration</h3></div></div><div></div></div><p> Finally, the BDC has to be found by the workstations. This can be done by setting: </p><pre class="programlisting"> workgroup = SAMBA @@ -212,10 +213,10 @@ problem as the name SAMBA<#1c> is a NetBIOS group name that is meant to be registered by more than one machine. The parameter 'domain master = no' forces the BDC not to register SAMBA<#1b> which as a unique NetBIOS name is reserved for the Primary Domain Controller. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896706"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894584"></a>Common Errors</h2></div></div><div></div></div><p> As this is a rather new area for Samba there are not many examples that we may refer to. Keep watching for updates to this section. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896719"></a>Machine Accounts keep expiring, what can I do?</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894597"></a>Machine Accounts keep expiring, what can I do?</h3></div></div><div></div></div><p> This problem will occur when occur when the passdb (SAM) files are copied from a central server but the local Backup Domain Controllers. Local machine trust account password updates are not copied back to the central server. The newer machine account password is then over @@ -226,7 +227,7 @@ to proceed and the account expiry error will be reported. </p><p> The solution: use a more robust passdb backend, such as the ldapsam backend, setting up an slave LDAP server for each BDC, and a master LDAP server for the PDC. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896750"></a>Can Samba be a Backup Domain Controller to an NT4 PDC?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894629"></a>Can Samba be a Backup Domain Controller to an NT4 PDC?</h3></div></div><div></div></div><p> With version 2.2, no. The native NT4 SAM replication protocols have not yet been fully implemented. The Samba Team is working on understanding and implementing the protocols, but this work has not been finished for version 2.2. @@ -237,7 +238,7 @@ mechanism has progressed, and some form of NT4 BDC support is expected soon. Can I get the benefits of a BDC with Samba? Yes. The main reason for implementing a BDC is availability. If the PDC is a Samba machine, a second Samba machine can be set up to service logon requests whenever the PDC is down. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896783"></a>How do I replicate the smbpasswd file?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894662"></a>How do I replicate the smbpasswd file?</h3></div></div><div></div></div><p> Replication of the smbpasswd file is sensitive. It has to be done whenever changes to the SAM are made. Every user's password change is done in the smbpasswd file and has to be replicated to the BDC. So replicating the smbpasswd file very often is necessary. @@ -251,7 +252,7 @@ to type a password. As said a few times before, use of this method is broken and flawed. Machine trust accounts will go out of sync, resulting in a very broken domain. This method is <span class="emphasis"><em>not</em></span> recommended. Try using LDAP instead. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896828"></a>Can I do this all with LDAP?</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894707"></a>Can I do this all with LDAP?</h3></div></div><div></div></div><p> The simple answer is YES. Samba's pdb_ldap code supports binding to a replica LDAP server, and will also follow referrals and rebind to the master if it ever needs to make a modification to the database. (Normally BDCs are read only, so diff --git a/docs/htmldocs/samba-pdc.html b/docs/htmldocs/samba-pdc.html index 930315b3f5..aee179737d 100644 --- a/docs/htmldocs/samba-pdc.html +++ b/docs/htmldocs/samba-pdc.html @@ -1,8 +1,9 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter5.Domain Control</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="ServerType.html" title="Chapter4.Server Types and Security Modes"><link rel="next" href="samba-bdc.html" title="Chapter6.Backup Domain Control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter5.Domain Control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ServerType.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="samba-bdc.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-pdc"></a>Chapter5.Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="samba-pdc.html#id2891986">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2892290">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2892306">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2892517">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2892837">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2893136">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2893157">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893173">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2893499">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2893607">Common Problems and Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893614">I cannot include a '$' in a machine name</a></dt><dt><a href="samba-pdc.html#id2893653">I get told "You already have a connection to the Domain...." +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter5.Domain Control</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="ServerType.html" title="Chapter4.Server Types and Security Modes"><link rel="next" href="samba-bdc.html" title="Chapter6.Backup Domain Control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter5.Domain Control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ServerType.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="samba-bdc.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-pdc"></a>Chapter5.Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jerry@samba.org">jerry@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="samba-pdc.html#id2892619">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2890215">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2890230">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2890429">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2890744">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2891040">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2891062">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2891077">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2893804">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2893909">Common Problems and Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893916">I cannot include a '$' in a machine name</a></dt><dt><a href="samba-pdc.html#id2893954">I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.</a></dt><dt><a href="samba-pdc.html#id2893703">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2893773">The machine trust account for this computer either does not -exist or is not accessible.</a></dt><dt><a href="samba-pdc.html#id2893836">When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.</a></dt><dt><a href="samba-pdc.html#id2893863">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></div><p><b><span class="emphasis"><em>The Essence of Learning:</em></span></b> +existing set.." when creating a machine trust account.</a></dt><dt><a href="samba-pdc.html#id2894004">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2894075">The machine trust account for this computer either does not +exist or is not accessible.</a></dt><dt><a href="samba-pdc.html#id2894138">When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.</a></dt><dt><a href="samba-pdc.html#id2894165">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></div><p><b><span class="emphasis"><em>The Essence of Learning:</em></span></b> There are many who approach MS Windows networking with incredible misconceptions. That's OK, because it gives the rest of us plenty of opportunity to be of assistance. Those who really want help would be well advised to become familiar with information @@ -32,7 +33,7 @@ burden on an organisation. Where is the right place to make mistakes? Only out of harm's way! If you are going to make mistakes, then please do this on a test network, away from users and in such a way as to not inflict pain on others. Do your learning on a test network. -</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891986"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892619"></a>Features and Benefits</h2></div></div><div></div></div><p> <span class="emphasis"><em>What is the key benefit of Microsoft Domain security?</em></span> </p><p> In a word, <span class="emphasis"><em>Single Sign On</em></span>, or SSO for short. To many, this is the holy @@ -130,11 +131,11 @@ per user settings for many parameters, over-riding global settings given in the Thus, with samba-3 it is possible to have a default system configuration for profiles, and on a per user basis to over-ride this for those users who should not be subject to the default configuration. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892290"></a>Basics of Domain Control</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890215"></a>Basics of Domain Control</h2></div></div><div></div></div><p> Over the years, public perceptions of what Domain Control really is has taken on an almost mystical nature. Before we branch into a brief overview of Domain Control, there are three basic types of domain controllers: -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892306"></a>Domain Controller Types</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890230"></a>Domain Controller Types</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div><p> The <span class="emphasis"><em>Primary Domain Controller</em></span> or PDC plays an important role in the MS Windows NT4 and Windows 200x Domain Control architecture, but not in the manner that so many expect. There is folk lore that dictates that because of it's role in the MS Windows @@ -186,7 +187,7 @@ At this time any appearance that Samba-3 is capable of acting as an This functionality should not be used until the Samba-Team offers formal support for it. At such a time, the documentation will be revised to duly reflect all configuration and management requirements. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892517"></a>Preparing for Domain Control</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890429"></a>Preparing for Domain Control</h3></div></div><div></div></div><p> There are two ways that MS Windows machines may interact with each other, with other servers, and with Domain Controllers: Either as <span class="emphasis"><em>Stand-Alone</em></span> systems, more commonly called <span class="emphasis"><em>Workgroup</em></span> members, or as full participants in a security system, @@ -247,7 +248,7 @@ domain/workgroup. Local master browsers in the same domain/workgroup on broadcas then ask for a complete copy of the browse list for the whole wide area network. Browser clients will then contact their local master browser, and will receive the domain-wide browse list, instead of just the list for their broadcast-isolated subnet. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892837"></a>Domain Control - Example Configuration</h2></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890744"></a>Domain Control - Example Configuration</h2></div></div><div></div></div><p> The first step in creating a working Samba PDC is to understand the parameters necessary in <tt class="filename">smb.conf</tt>. Here we attempt to explain the parameters that are covered in the <tt class="filename">smb.conf</tt> man page. @@ -301,20 +302,20 @@ Here is an example <tt class="filename">smb.conf</tt> for acting as a PDC: <a href="smb.conf.5.html#READONLY" target="_top">read only</a> = no <a href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> = 0600 <a href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a> = 0700 -</pre><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre><div xmlns:ns5="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns5:p> The above parameters make for a full set of parameters that may define the server's mode of operation. The following parameters are the essentials alone: -</p><pre class="programlisting"> +</ns5:p><pre class="programlisting"> workgroup = NARNIA domain logons = Yes domain master = Yes security = User -</pre><p> +</pre><ns5:p> The additional parameters shown in the longer listing above just makes for a more complete environment. -</p></div><p> +</ns5:p></div><p> There are a couple of points to emphasize in the above configuration. </p><div class="itemizedlist"><ul type="disc"><li><p> Encrypted passwords must be enabled. For more details on how @@ -327,22 +328,22 @@ There are a couple of points to emphasize in the above configuration. client to locate the server as a DC. Please refer to the various Network Browsing documentation included with this distribution for details. - </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893136"></a>Samba ADS Domain Control</h2></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891040"></a>Samba ADS Domain Control</h2></div></div><div></div></div><p> Samba-3 is not and can not act as an Active Directory Server. It can not truly function as an Active Directory Primary Domain Controller. The protocols for some of the functionality the Active Directory Domain Controllers is have been partially implemented on an experimental only basis. Please do NOT expect Samba-3 to support these protocols - nor should you depend on any such functionality either now or in the future. The Samba-Team may well remove such experimental features or may change their behaviour. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893157"></a>Domain and Network Logon Configuration</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891062"></a>Domain and Network Logon Configuration</h2></div></div><div></div></div><p> The subject of Network or Domain Logons is discussed here because it rightly forms an integral part of the essential functionality that is provided by a Domain Controller. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893173"></a>Domain Network Logon Service</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891077"></a>Domain Network Logon Service</h3></div></div><div></div></div><p> All Domain Controllers must run the netlogon service (<span class="emphasis"><em>domain logons</em></span> in Samba). One Domain Controller must be configured with <i class="parameter"><tt>domain master = Yes</tt></i> (the Primary Domain Controller); on ALL Backup Domain Controllers <i class="parameter"><tt>domain master = No</tt></i> must be set. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2893206"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting"> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891110"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting"> [global] domain logons = Yes domain master = (Yes on PDC, No on BDCs) @@ -352,7 +353,7 @@ must be set. path = /var/lib/samba/netlogon guest ok = Yes browseable = No -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2893226"></a>The Special Case of MS Windows XP Home Edition</h4></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891129"></a>The Special Case of MS Windows XP Home Edition</h4></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> MS Windows XP Home Edition does not have the ability to join any type of Domain security facility. Unlike, MS Windows 9x / Me, MS Windows XP Home Edition also completely lacks the ability to log onto a network. @@ -364,7 +365,7 @@ MS Windows XP Professional. </p><p> Now that this has been said, please do NOT ask the mailing list, or email any of the Samba-Team members with your questions asking how to make this work. It can't be done. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2893261"></a>The Special Case of Windows 9x / Me</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891165"></a>The Special Case of Windows 9x / Me</h4></div></div><div></div></div><p> A domain and a workgroup are exactly the same thing in terms of network browsing. The difference is that a distributable authentication database is associated with a domain, for secure login access to a @@ -444,7 +445,7 @@ The main difference between a PDC and a Windows 9x logon server configuration is </p></li></ul></div><p> A Samba PDC will act as a Windows 9x logon server; after all, it does provide the network logon services that MS Windows 9x / Me expect to find. -</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893499"></a>Security Mode and Master Browsers</h3></div></div><div></div></div><p> +</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893804"></a>Security Mode and Master Browsers</h3></div></div><div></div></div><p> There are a few comments to make in order to tie up some loose ends. There has been much debate over the issue of whether or not it is ok to configure Samba as a Domain Controller in security @@ -478,7 +479,7 @@ Configuring a Samba box as a DC for a domain that already by definition has a PDC is asking for trouble. Therefore, you should always configure the Samba DC to be the DMB for its domain and set <i class="parameter"><tt>security = user</tt></i>. This is the only officially supported mode of operation. -</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893607"></a>Common Problems and Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893614"></a>I cannot include a '$' in a machine name</h3></div></div><div></div></div><p> +</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893909"></a>Common Problems and Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893916"></a>I cannot include a '$' in a machine name</h3></div></div><div></div></div><p> A 'machine account', (typically) stored in <tt class="filename">/etc/passwd</tt>, takes the form of the machine name with a '$' appended. FreeBSD (and other BSD systems?) won't create a user with a '$' in their name. @@ -486,7 +487,7 @@ systems?) won't create a user with a '$' in their name. The problem is only in the program used to make the entry. Once made, it works perfectly. Create a user without the '$'. Then use <b class="command">vipw</b> to edit the entry, adding the '$'. Or create the whole entry with vipw if you like; make sure you use a unique User ID! -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893653"></a>I get told "You already have a connection to the Domain...." +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893954"></a>I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an existing set.." when creating a machine trust account.</h3></div></div><div></div></div><p> This happens if you try to create a machine trust account from the @@ -500,7 +501,7 @@ Further, if the machine is already a 'member of a workgroup' that is the same name as the domain you are joining (bad idea) you will get this message. Change the workgroup name to something else, it does not matter what, reboot, and try again. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893703"></a>The system can not log you on (C000019B)....</h3></div></div><div></div></div><p>I joined the domain successfully but after upgrading +</p></div><div xmlns:ns6="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894004"></a>The system can not log you on (C000019B)....</h3></div></div><div></div></div><p>I joined the domain successfully but after upgrading to a newer version of the Samba code I get the message, <span class="errorname">The system can not log you on (C000019B), Please try again or consult your system administrator</span> when attempting to logon. @@ -511,14 +512,14 @@ the domain name and/or the server name (NetBIOS name) is changed. The only way to correct the problem is to restore the original domain SID or remove the domain client from the domain and rejoin. The domain SID may be reset using either the net or rpcclient utilities. -</p><p> +</p><ns6:p> The reset or change the domain SID you can use the net command as follows: -</p><pre class="screen"> +</ns6:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>net getlocalsid 'OLDNAME'</tt></b> <tt class="prompt">root# </tt><b class="userinput"><tt>net setlocalsid 'SID'</tt></b> -</pre><p> -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893773"></a>The machine trust account for this computer either does not +</pre><ns6:p> +</ns6:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894075"></a>The machine trust account for this computer either does not exist or is not accessible.</h3></div></div><div></div></div><p> When I try to join the domain I get the message <span class="errorname">The machine account for this computer either does not exist or is not accessible</span>. What's @@ -541,10 +542,10 @@ Some people have also reported that inconsistent subnet masks between the Samba server and the NT client can cause this problem. Make sure that these are consistent for both client and server. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893836"></a>When I attempt to login to a Samba Domain from a NT4/W2K workstation, +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894138"></a>When I attempt to login to a Samba Domain from a NT4/W2K workstation, I get a message about my account being disabled.</h3></div></div><div></div></div><p> Enable the user accounts with <b class="userinput"><tt>smbpasswd -e <i class="replaceable"><tt>username</tt></i> </tt></b>, this is normally done as an account is created. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893863"></a>Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894165"></a>Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</h3></div></div><div></div></div><p> A domain controller has to announce on the network who it is. This usually takes a while. </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ServerType.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="samba-bdc.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter4.Server Types and Security Modes</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter6.Backup Domain Control</td></tr></table></div></body></html> diff --git a/docs/htmldocs/securing-samba.html b/docs/htmldocs/securing-samba.html index a790816d02..bdbc2ae0b5 100644 --- a/docs/htmldocs/securing-samba.html +++ b/docs/htmldocs/securing-samba.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter15.Securing Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="locking.html" title="Chapter14.File and Record Locking"><link rel="next" href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter15.Securing Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="locking.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="InterdomainTrusts.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="securing-samba"></a>Chapter15.Securing Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 26, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="securing-samba.html#id2931943">Introduction</a></dt><dt><a href="securing-samba.html#id2931976">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2932050">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2932069">Using host based protection</a></dt><dt><a href="securing-samba.html#id2932140">User based protection</a></dt><dt><a href="securing-samba.html#id2932191">Using interface protection</a></dt><dt><a href="securing-samba.html#id2932244">Using a firewall</a></dt><dt><a href="securing-samba.html#id2932300">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2932362">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2932402">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2932426">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2932444">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2932469">Why can users access home directories of other users?</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931943"></a>Introduction</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter15.Securing Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="locking.html" title="Chapter14.File and Record Locking"><link rel="next" href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter15.Securing Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="locking.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="InterdomainTrusts.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="securing-samba"></a>Chapter15.Securing Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">May 26, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="securing-samba.html#id2929879">Introduction</a></dt><dt><a href="securing-samba.html#id2929912">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2928572">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2928590">Using host based protection</a></dt><dt><a href="securing-samba.html#id2928659">User based protection</a></dt><dt><a href="securing-samba.html#id2928710">Using interface protection</a></dt><dt><a href="securing-samba.html#id2928760">Using a firewall</a></dt><dt><a href="securing-samba.html#id2928816">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2928881">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2928920">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2928943">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2928962">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2928987">Why can users access home directories of other users?</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929879"></a>Introduction</h2></div></div><div></div></div><p> This note was attached to the Samba 2.2.8 release notes as it contained an important security fix. The information contained here applies to Samba installations in general. @@ -10,7 +11,7 @@ on it!" Security concerns are just like that: You need to know a little about the subject to appreciate how obvious most of it really is. The challenge for most of us is to discover that first morsel of knowledge with which we may unlock the secrets of the masters. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931976"></a>Features and Benefits</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929912"></a>Features and Benefits</h2></div></div><div></div></div><p> There are three level at which security principals must be observed in order to render a site at least moderately secure. These are: the perimeter firewall, the configuration of the host server that is running Samba, and Samba itself. @@ -29,13 +30,13 @@ TCP/IP connections. Another method by which Samba may be secured is by way of setting Access Control Entries in an Access Control List on the shares themselves. This is discussed in the chapter on File, Directory and Share Access Control. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932050"></a>Technical Discussion of Protective Measures and Issues</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928572"></a>Technical Discussion of Protective Measures and Issues</h2></div></div><div></div></div><p> The key challenge of security is the fact that protective measures suffice at best only to close the door on known exploits and breach techniques. Never assume that because you have followed these few measures that the Samba server is now an impenetrable fortress! Given the history of information systems so far, it is only a matter of time before someone will find yet another vulnerability. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932069"></a>Using host based protection</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928590"></a>Using host based protection</h3></div></div><div></div></div><p> In many installations of Samba the greatest threat comes for outside your immediate network. By default Samba will accept connections from any host, which means that if you run an insecure version of Samba on @@ -55,7 +56,7 @@ before someone will find yet another vulnerability. 192.168.3. All other connections will be refused as soon as the client sends its first packet. The refusal will be marked as a <span class="errorname">not listening on called name</span> error. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932140"></a>User based protection</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928659"></a>User based protection</h3></div></div><div></div></div><p> If you want to restrict access to your server to valid users only then the following method may be of use. In the <tt class="filename">smb.conf</tt> <i class="parameter"><tt>[globals]</tt></i> section put: </p><pre class="programlisting"> @@ -63,7 +64,7 @@ before someone will find yet another vulnerability. </pre><p> What this does is, it restricts all server access to either the user <span class="emphasis"><em>jacko</em></span> or to members of the system group <span class="emphasis"><em>smbusers</em></span>. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932191"></a>Using interface protection</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928710"></a>Using interface protection</h3></div></div><div></div></div><p> By default Samba will accept connections on any network interface that it finds on your system. That means if you have a ISDN line or a PPP connection to the Internet then Samba will accept connections on those @@ -85,7 +86,7 @@ before someone will find yet another vulnerability. connection refused reply. In that case no Samba code is run at all as the operating system has been told not to pass connections from that interface to any samba process. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932244"></a>Using a firewall</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928760"></a>Using a firewall</h3></div></div><div></div></div><p> Many people use a firewall to deny access to services that they don't want exposed outside their network. This can be a very good idea, although I would recommend using it in conjunction with the above @@ -98,7 +99,7 @@ before someone will find yet another vulnerability. The last one is important as many older firewall setups may not be aware of it, given that this port was only added to the protocol in recent years. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932300"></a>Using a IPC$ share deny</h3></div></div><div></div></div><p> + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928816"></a>Using a IPC$ share deny</h3></div></div><div></div></div><p> If the above methods are not suitable, then you could also place a more specific deny on the IPC$ share that is used in the recently discovered security hole. This allows you to offer access to other @@ -125,10 +126,10 @@ before someone will find yet another vulnerability. </p><p> This is not recommended unless you cannot use one of the other methods listed above for some reason. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932362"></a>NTLMv2 Security</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns42="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928881"></a>NTLMv2 Security</h3></div></div><div></div></div><p> To configure NTLMv2 authentication the following registry keys are worth knowing about: - </p><p> - </p><pre class="screen"> + </p><ns42:p> + </ns42:p><pre class="screen"> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "lmcompatibilitylevel"=dword:00000003 @@ -142,25 +143,25 @@ before someone will find yet another vulnerability. 0x80000 - NTLMv2 session security. If either NtlmMinClientSec or NtlmMinServerSec is set to 0x80000, the connection will fail if NTLMv2 session security is not negotiated. - </pre><p> - </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932402"></a>Upgrading Samba</h2></div></div><div></div></div><p> + </pre><ns42:p> + </ns42:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928920"></a>Upgrading Samba</h2></div></div><div></div></div><p> Please check regularly on <a href="http://www.samba.org/" target="_top">http://www.samba.org/</a> for updates and important announcements. Occasionally security releases are made and it is highly recommended to upgrade Samba when a security vulnerability is discovered. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932426"></a>Common Errors</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928943"></a>Common Errors</h2></div></div><div></div></div><p> If all of samba and host platform configuration were really as intuitive as one might like then this section would not be necessary. Security issues are often vexing for a support person to resolve, not because of the complexity of the problem, but for reason that most administrators who post what turns out to be a security problem request are totally convinced that the problem is with Samba. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932444"></a>Smbclient works on localhost, but the network is dead</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928962"></a>Smbclient works on localhost, but the network is dead</h3></div></div><div></div></div><p> This is a very common problem. Red Hat Linux (as do others) will install a default firewall. With the default firewall in place only traffic on the loopback adapter (IP address 127.0.0.1) will be allowed through the firewall. </p><p> The solution is either to remove the firewall (stop it) or to modify the firewall script to allow SMB networking traffic through. See section above in this chapter. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932469"></a>Why can users access home directories of other users?</h3></div></div><div></div></div><p> + </p></div><div xmlns:ns43="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928987"></a>Why can users access home directories of other users?</h3></div></div><div></div></div><p> “<span class="quote"> We are unable to keep individual users from mapping to any other user's home directory once they have supplied a valid password! They only need @@ -191,16 +192,16 @@ out to be a security problem request are totally convinced that the problem is w Samba does allow the setup you require when you have set the <i class="parameter"><tt>only user = yes</tt></i> option on the share, is that you have not set the valid users list for the share. - </p><p> + </p><ns43:p> Note that only user works in conjunction with the users= list, so to get the behavior you require, add the line : - </p><pre class="programlisting"> + </ns43:p><pre class="programlisting"> users = %S - </pre><p> + </pre><ns43:p> this is equivalent to: - </p><pre class="programlisting"> + </ns43:p><pre class="programlisting"> valid users = %S - </pre><p> + </pre><ns43:p> to the definition of the <i class="parameter"><tt>[homes]</tt></i> share, as recommended in the <tt class="filename">smb.conf</tt> man page. - </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="locking.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="InterdomainTrusts.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter14.File and Record Locking</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter16.Interdomain Trust Relationships</td></tr></table></div></body></html> + </ns43:p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="locking.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="InterdomainTrusts.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter14.File and Record Locking</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter16.Interdomain Trust Relationships</td></tr></table></div></body></html> diff --git a/docs/htmldocs/smb.conf.5.html b/docs/htmldocs/smb.conf.5.html index f22afa5884..2b3d51d6f6 100644 --- a/docs/htmldocs/smb.conf.5.html +++ b/docs/htmldocs/smb.conf.5.html @@ -244,8 +244,8 @@ alias|alias|alias|alias... connection is made as the username given in the "guest account =" for the service, irrespective of the supplied password.</p></li></ol></div></div><div class="refsect1" lang="en"><h2>COMPLETE LIST OF GLOBAL PARAMETERS</h2><p>Here is a list of all global parameters. See the section of - each parameter for details. Note that some are synonyms.</p><div class="itemizedlist"><ul type="disc"><li><p><a href="#ABORTSHUTDOWNSCRIPT"><i class="parameter"><tt>abort shutdown script</tt></i></a></p></li><li><p><a href="#ADDGROUPSCRIPT"><i class="parameter"><tt>add group script</tt></i></a></p></li><li><p><a href="#ADDMACHINESCRIPT"><i class="parameter"><tt>add machine script</tt></i></a></p></li><li><p><a href="#ADDPRINTERCOMMAND"><i class="parameter"><tt>addprinter command</tt></i></a></p></li><li><p><a href="#ADDSHARECOMMAND"><i class="parameter"><tt>add share command</tt></i></a></p></li><li><p><a href="#ADDUSERSCRIPT"><i class="parameter"><tt>add user script</tt></i></a></p></li><li><p><a href="#ADDUSERTOGROUPSCRIPT"><i class="parameter"><tt>add user to group script</tt></i></a></p></li><li><p><a href="#ALGORITHMICRIDBASE"><i class="parameter"><tt>algorithmic rid base</tt></i></a></p></li><li><p><a href="#ALLOWTRUSTEDDOMAINS"><i class="parameter"><tt>allow trusted domains</tt></i></a></p></li><li><p><a href="#ANNOUNCEAS"><i class="parameter"><tt>announce as</tt></i></a></p></li><li><p><a href="#ANNOUNCEVERSION"><i class="parameter"><tt>announce version</tt></i></a></p></li><li><p><a href="#AUTHMETHODS"><i class="parameter"><tt>auth methods</tt></i></a></p></li><li><p><a href="#AUTOSERVICES"><i class="parameter"><tt>auto services</tt></i></a></p></li><li><p><a href="#BINDINTERFACESONLY"><i class="parameter"><tt>bind interfaces only</tt></i></a></p></li><li><p><a href="#BROWSELIST"><i class="parameter"><tt>browse list</tt></i></a></p></li><li><p><a href="#CHANGENOTIFYTIMEOUT"><i class="parameter"><tt>change notify timeout</tt></i></a></p></li><li><p><a href="#CHANGESHARECOMMAND"><i class="parameter"><tt>change share command</tt></i></a></p></li><li><p><a href="#CLIENTUSESPNEGO"><i class="parameter"><tt>client use spnego</tt></i></a></p></li><li><p><a href="#CONFIGFILE"><i class="parameter"><tt>config file</tt></i></a></p></li><li><p><a href="#DEADTIME"><i class="parameter"><tt>dead time</tt></i></a></p></li><li><p><a href="#DEBUGHIRESTIMESTAMP"><i class="parameter"><tt>debug hires timestamp</tt></i></a></p></li><li><p><a href="#DEBUGLEVEL"><i class="parameter"><tt>debug level</tt></i></a></p></li><li><p><a href="#DEBUGPID"><i class="parameter"><tt>debug pid</tt></i></a></p></li><li><p><a href="#DEBUGTIMESTAMP"><i class="parameter"><tt>debug timestamp</tt></i></a></p></li><li><p><a href="#DEBUGUID"><i class="parameter"><tt>debug uid</tt></i></a></p></li><li><p><a href="#DEFAULT"><i class="parameter"><tt>default</tt></i></a></p></li><li><p><a href="#DEFAULTSERVICE"><i class="parameter"><tt>default service</tt></i></a></p></li><li><p><a href="#DELETEGROUPSCRIPT"><i class="parameter"><tt>delete group script</tt></i></a></p></li><li><p><a href="#DELETEPRINTERCOMMAND"><i class="parameter"><tt>deleteprinter command</tt></i></a></p></li><li><p><a href="#DELETESHARECOMMAND"><i class="parameter"><tt>delete share command</tt></i></a></p></li><li><p><a href="#DELETEUSERFROMGROUPSCRIPT"><i class="parameter"><tt>delete user from group script</tt></i></a></p></li><li><p><a href="#DELETEUSERSCRIPT"><i class="parameter"><tt>delete user script</tt></i></a></p></li><li><p><a href="#DFREECOMMAND"><i class="parameter"><tt>dfree command</tt></i></a></p></li><li><p><a href="#DISABLENETBIOS"><i class="parameter"><tt>disable netbios</tt></i></a></p></li><li><p><a href="#DISABLESPOOLSS"><i class="parameter"><tt>disable spoolss</tt></i></a></p></li><li><p><a href="#DISPLAYCHARSET"><i class="parameter"><tt>display charset</tt></i></a></p></li><li><p><a href="#DNSPROXY"><i class="parameter"><tt>dns proxy</tt></i></a></p></li><li><p><a href="#DOMAINLOGONS"><i class="parameter"><tt>domain logons</tt></i></a></p></li><li><p><a href="#DOMAINMASTER"><i class="parameter"><tt>domain master</tt></i></a></p></li><li><p><a href="#DOSCHARSET"><i class="parameter"><tt>dos charset</tt></i></a></p></li><li><p><a href="#ENCRYPTPASSWORDS"><i class="parameter"><tt>encrypt passwords</tt></i></a></p></li><li><p><a href="#ENHANCEDBROWSING"><i class="parameter"><tt>enhanced browsing</tt></i></a></p></li><li><p><a href="#ENUMPORTSCOMMAND"><i class="parameter"><tt>enumports command</tt></i></a></p></li><li><p><a href="#GETWDCACHE"><i class="parameter"><tt>getwd cache</tt></i></a></p></li><li><p><a href="#GUESTACCOUNT"><i class="parameter"><tt>guest account</tt></i></a></p></li><li><p><a href="#HIDELOCALUSERS"><i class="parameter"><tt>hide local users</tt></i></a></p></li><li><p><a href="#HOMEDIRMAP"><i class="parameter"><tt>homedir map</tt></i></a></p></li><li><p><a href="#HOSTMSDFS"><i class="parameter"><tt>host msdfs</tt></i></a></p></li><li><p><a href="#HOSTNAMELOOKUPS"><i class="parameter"><tt>hostname lookups</tt></i></a></p></li><li><p><a href="#HOSTSEQUIV"><i class="parameter"><tt>hosts equiv</tt></i></a></p></li><li><p><a href="#IDMAPGID"><i class="parameter"><tt>idmap gid</tt></i></a></p></li><li><p><a href="#IDMAPUID"><i class="parameter"><tt>idmap uid</tt></i></a></p></li><li><p><a href="#INCLUDE"><i class="parameter"><tt>include</tt></i></a></p></li><li><p><a href="#INTERFACES"><i class="parameter"><tt>interfaces</tt></i></a></p></li><li><p><a href="#KEEPALIVE"><i class="parameter"><tt>keepalive</tt></i></a></p></li><li><p><a href="#KERNELOPLOCKS"><i class="parameter"><tt>kernel oplocks</tt></i></a></p></li><li><p><a href="#LANMANAUTH"><i class="parameter"><tt>lanman auth</tt></i></a></p></li><li><p><a href="#LARGEREADWRITE"><i class="parameter"><tt>large readwrite</tt></i></a></p></li><li><p><a href="#LDAPADMINDN"><i class="parameter"><tt>ldap admin dn</tt></i></a></p></li><li><p><a href="#LDAPDELETEDN"><i class="parameter"><tt>ldap delete dn</tt></i></a></p></li><li><p><a href="#LDAPFILTER"><i class="parameter"><tt>ldap filter</tt></i></a></p></li><li><p><a href="#LDAPMACHINESUFFIX"><i class="parameter"><tt>ldap machine suffix</tt></i></a></p></li><li><p><a href="#LDAPPASSWDSYNC"><i class="parameter"><tt>ldap passwd sync</tt></i></a></p></li><li><p><a href="#LDAPPORT"><i class="parameter"><tt>ldap port</tt></i></a></p></li><li><p><a href="#LDAPSERVER"><i class="parameter"><tt>ldap server</tt></i></a></p></li><li><p><a href="#LDAPSSL"><i class="parameter"><tt>ldap ssl</tt></i></a></p></li><li><p><a href="#LDAPSUFFIX"><i class="parameter"><tt>ldap suffix</tt></i></a></p></li><li><p><a href="#LDAPTRUSTIDS"><i class="parameter"><tt>ldap trust ids</tt></i></a></p></li><li><p><a href="#LDAPUSERSUFFIX"><i class="parameter"><tt>ldap user suffix</tt></i></a></p></li><li><p><a href="#LMANNOUNCE"><i class="parameter"><tt>lm announce</tt></i></a></p></li><li><p><a href="#LMINTERVAL"><i class="parameter"><tt>lm interval</tt></i></a></p></li><li><p><a href="#LOADPRINTERS"><i class="parameter"><tt>load printers</tt></i></a></p></li><li><p><a href="#LOCALMASTER"><i class="parameter"><tt>local master</tt></i></a></p></li><li><p><a href="#LOCKDIR"><i class="parameter"><tt>lock dir</tt></i></a></p></li><li><p><a href="#LOCKDIRECTORY"><i class="parameter"><tt>lock directory</tt></i></a></p></li><li><p><a href="#LOCKSPINCOUNT"><i class="parameter"><tt>lock spin count</tt></i></a></p></li><li><p><a href="#LOCKSPINTIME"><i class="parameter"><tt>lock spin time</tt></i></a></p></li><li><p><a href="#LOGFILE"><i class="parameter"><tt>log file</tt></i></a></p></li><li><p><a href="#LOGLEVEL"><i class="parameter"><tt>log level</tt></i></a></p></li><li><p><a href="#LOGONDRIVE"><i class="parameter"><tt>logon drive</tt></i></a></p></li><li><p><a href="#LOGONHOME"><i class="parameter"><tt>logon home</tt></i></a></p></li><li><p><a href="#LOGONPATH"><i class="parameter"><tt>logon path</tt></i></a></p></li><li><p><a href="#LOGONSCRIPT"><i class="parameter"><tt>logon script</tt></i></a></p></li><li><p><a href="#LPQCACHETIME"><i class="parameter"><tt>lpq cache time</tt></i></a></p></li><li><p><a href="#MACHINEPASSWORDTIMEOUT"><i class="parameter"><tt>machine password timeout</tt></i></a></p></li><li><p><a href="#MANGLINGSTACK"><i class="parameter"><tt>mangling stack</tt></i></a></p></li><li><p><a href="#MANGLINGPREFIX"><i class="parameter"><tt>mangling prefix</tt></i></a></p></li><li><p><a href="#MANGLINGMETHOD"><i class="parameter"><tt>mangling method</tt></i></a></p></li><li><p><a href="#MAPTOGUEST"><i class="parameter"><tt>map to guest</tt></i></a></p></li><li><p><a href="#MAXDISKSIZE"><i class="parameter"><tt>max disk size</tt></i></a></p></li><li><p><a href="#MAXLOGSIZE"><i class="parameter"><tt>max log size</tt></i></a></p></li><li><p><a href="#MAXMUX"><i class="parameter"><tt>max mux</tt></i></a></p></li><li><p><a href="#MAXOPENFILES"><i class="parameter"><tt>max open files</tt></i></a></p></li><li><p><a href="#MAXPROTOCOL"><i class="parameter"><tt>max protocol</tt></i></a></p></li><li><p><a href="#MAXSMBDPROCESSES"><i class="parameter"><tt>max smbd processes</tt></i></a></p></li><li><p><a href="#MAXTTL"><i class="parameter"><tt>max ttl</tt></i></a></p></li><li><p><a href="#MAXWINSTTL"><i class="parameter"><tt>max wins ttl</tt></i></a></p></li><li><p><a href="#MAXXMIT"><i class="parameter"><tt>max xmit</tt></i></a></p></li><li><p><a href="#MESSAGECOMMAND"><i class="parameter"><tt>message command</tt></i></a></p></li><li><p><a href="#MINPASSWDLENGTH"><i class="parameter"><tt>min passwd length</tt></i></a></p></li><li><p><a href="#MINPASSWORDLENGTH"><i class="parameter"><tt>min password length</tt></i></a></p></li><li><p><a href="#MINPROTOCOL"><i class="parameter"><tt>min protocol</tt></i></a></p></li><li><p><a href="#MINWINSTTL"><i class="parameter"><tt>min wins ttl</tt></i></a></p></li><li><p><a href="#NAMECACHETIMEOUT"><i class="parameter"><tt>name cache timeout</tt></i></a></p></li><li><p><a href="#NAMERESOLVEORDER"><i class="parameter"><tt>name resolve order</tt></i></a></p></li><li><p><a href="#NETBIOSALIASES"><i class="parameter"><tt>netbios aliases</tt></i></a></p></li><li><p><a href="#NETBIOSNAME"><i class="parameter"><tt>netbios name</tt></i></a></p></li><li><p><a href="#NETBIOSSCOPE"><i class="parameter"><tt>netbios scope</tt></i></a></p></li><li><p><a href="#NISHOMEDIR"><i class="parameter"><tt>nis homedir</tt></i></a></p></li><li><p><a href="#NONUNIXACCOUNTRANGE"><i class="parameter"><tt>non unix account range</tt></i></a></p></li><li><p><a href="#NTLMAUTH"><i class="parameter"><tt>ntlm auth</tt></i></a></p></li><li><p><a href="#NTPIPESUPPORT"><i class="parameter"><tt>nt pipe support</tt></i></a></p></li><li><p><a href="#NTSTATUSSUPPORT"><i class="parameter"><tt>nt status support</tt></i></a></p></li><li><p><a href="#NULLPASSWORDS"><i class="parameter"><tt>null passwords</tt></i></a></p></li><li><p><a href="#OBEYPAMRESTRICTIONS"><i class="parameter"><tt>obey pam restrictions</tt></i></a></p></li><li><p><a href="#OPLOCKBREAKWAITTIME"><i class="parameter"><tt>oplock break wait time</tt></i></a></p></li><li><p><a href="#OS2DRIVERMAP"><i class="parameter"><tt>os2 driver map</tt></i></a></p></li><li><p><a href="#OSLEVEL"><i class="parameter"><tt>os level</tt></i></a></p></li><li><p><a href="#PAMPASSWORDCHANGE"><i class="parameter"><tt>pam password change</tt></i></a></p></li><li><p><a href="#PANICACTION"><i class="parameter"><tt>panic action</tt></i></a></p></li><li><p><a href="#PARANOIDSERVERSECURITY"><i class="parameter"><tt>paranoid server security</tt></i></a></p></li><li><p><a href="#PASSDBBACKEND"><i class="parameter"><tt>passdb backend</tt></i></a></p></li><li><p><a href="#PASSWDCHAT"><i class="parameter"><tt>passwd chat</tt></i></a></p></li><li><p><a href="#PASSWDCHATDEBUG"><i class="parameter"><tt>passwd chat debug</tt></i></a></p></li><li><p><a href="#PASSWDPROGRAM"><i class="parameter"><tt>passwd program</tt></i></a></p></li><li><p><a href="#PASSWORDLEVEL"><i class="parameter"><tt>password level</tt></i></a></p></li><li><p><a href="#PASSWORDSERVER"><i class="parameter"><tt>password server</tt></i></a></p></li><li><p><a href="#PIDDIRECTORY"><i class="parameter"><tt>pid directory</tt></i></a></p></li><li><p><a href="#PREFEREDMASTER"><i class="parameter"><tt>prefered master</tt></i></a></p></li><li><p><a href="#PREFERREDMASTER"><i class="parameter"><tt>preferred master</tt></i></a></p></li><li><p><a href="#PRELOAD"><i class="parameter"><tt>preload</tt></i></a></p></li><li><p><a href="#PRELOADMODULES"><i class="parameter"><tt>preload modules</tt></i></a></p></li><li><p><a href="#PRINTCAP"><i class="parameter"><tt>printcap</tt></i></a></p></li><li><p><a href="#PRIVATEDIR"><i class="parameter"><tt>private dir</tt></i></a></p></li><li><p><a href="#PROTOCOL"><i class="parameter"><tt>protocol</tt></i></a></p></li><li><p><a href="#READBMPX"><i class="parameter"><tt>read bmpx</tt></i></a></p></li><li><p><a href="#READRAW"><i class="parameter"><tt>read raw</tt></i></a></p></li><li><p><a href="#READSIZE"><i class="parameter"><tt>read size</tt></i></a></p></li><li><p><a href="#REALM"><i class="parameter"><tt>realm</tt></i></a></p></li><li><p><a href="#REMOTEANNOUNCE"><i class="parameter"><tt>remote announce</tt></i></a></p></li><li><p><a href="#REMOTEBROWSESYNC"><i class="parameter"><tt>remote browse sync</tt></i></a></p></li><li><p><a href="#RESTRICTANONYMOUS"><i class="parameter"><tt>restrict anonymous</tt></i></a></p></li><li><p><a href="#ROOT"><i class="parameter"><tt>root</tt></i></a></p></li><li><p><a href="#ROOTDIR"><i class="parameter"><tt>root dir</tt></i></a></p></li><li><p><a href="#ROOTDIRECTORY"><i class="parameter"><tt>root directory</tt></i></a></p></li><li><p><a href="#SECURITY"><i class="parameter"><tt>security</tt></i></a></p></li><li><p><a href="#SERVERSCHANNEL"><i class="parameter"><tt>server schannel</tt></i></a></p></li><li><p><a href="#SERVERSTRING"><i class="parameter"><tt>server string</tt></i></a></p></li><li><p><a href="#SETPRIMARYGROUPSCRIPT"><i class="parameter"><tt>set primary group script</tt></i></a></p></li><li><p><a href="#SHOWADDPRINTERWIZARD"><i class="parameter"><tt>show add printer wizard</tt></i></a></p></li><li><p><a href="#SHUTDOWNSCRIPT"><i class="parameter"><tt>shutdown script</tt></i></a></p></li><li><p><a href="#SMBPASSWDFILE"><i class="parameter"><tt>smb passwd file</tt></i></a></p></li><li><p><a href="#SMBPORTS"><i class="parameter"><tt>smb ports</tt></i></a></p></li><li><p><a href="#SOCKETADDRESS"><i class="parameter"><tt>socket address</tt></i></a></p></li><li><p><a href="#SOCKETOPTIONS"><i class="parameter"><tt>socket options</tt></i></a></p></li><li><p><a href="#SOURCEENVIRONMENT"><i class="parameter"><tt>source environment</tt></i></a></p></li><li><p><a href="#STATCACHE"><i class="parameter"><tt>stat cache</tt></i></a></p></li><li><p><a href="#STATCACHESIZE"><i class="parameter"><tt>stat cache size</tt></i></a></p></li><li><p><a href="#STRIPDOT"><i class="parameter"><tt>strip dot</tt></i></a></p></li><li><p><a href="#SYSLOG"><i class="parameter"><tt>syslog</tt></i></a></p></li><li><p><a href="#SYSLOGONLY"><i class="parameter"><tt>syslog only</tt></i></a></p></li><li><p><a href="#TEMPLATEHOMEDIR"><i class="parameter"><tt>template homedir</tt></i></a></p></li><li><p><a href="#TEMPLATESHELL"><i class="parameter"><tt>template shell</tt></i></a></p></li><li><p><a href="#TIMEOFFSET"><i class="parameter"><tt>time offset</tt></i></a></p></li><li><p><a href="#TIMESERVER"><i class="parameter"><tt>time server</tt></i></a></p></li><li><p><a href="#TIMESTAMPLOGS"><i class="parameter"><tt>timestamp logs</tt></i></a></p></li><li><p><a href="#TOTALPRINTJOBS"><i class="parameter"><tt>total print jobs</tt></i></a></p></li><li><p><a href="#UNICODE"><i class="parameter"><tt>unicode</tt></i></a></p></li><li><p><a href="#UNIXCHARSET"><i class="parameter"><tt>unix charset</tt></i></a></p></li><li><p><a href="#UNIXEXTENSIONS"><i class="parameter"><tt>unix extensions</tt></i></a></p></li><li><p><a href="#UNIXPASSWORDSYNC"><i class="parameter"><tt>unix password sync</tt></i></a></p></li><li><p><a href="#UPDATEENCRYPTED"><i class="parameter"><tt>update encrypted</tt></i></a></p></li><li><p><a href="#USEMMAP"><i class="parameter"><tt>use mmap</tt></i></a></p></li><li><p><a href="#USERNAMELEVEL"><i class="parameter"><tt>username level</tt></i></a></p></li><li><p><a href="#USERNAMEMAP"><i class="parameter"><tt>username map</tt></i></a></p></li><li><p><a href="#USESPNEGO"><i class="parameter"><tt>use spnego</tt></i></a></p></li><li><p><a href="#UTMP"><i class="parameter"><tt>utmp</tt></i></a></p></li><li><p><a href="#UTMPDIRECTORY"><i class="parameter"><tt>utmp directory</tt></i></a></p></li><li><p><a href="#WINBINDCACHETIME"><i class="parameter"><tt>winbind cache time</tt></i></a></p></li><li><p><a href="#WINBINDENUMGROUPS"><i class="parameter"><tt>winbind enum groups</tt></i></a></p></li><li><p><a href="#WINBINDENUMUSERS"><i class="parameter"><tt>winbind enum users</tt></i></a></p></li><li><p><a href="#WINBINDGID"><i class="parameter"><tt>winbind gid</tt></i></a></p></li><li><p><a href="#WINBINDSEPARATOR"><i class="parameter"><tt>winbind separator</tt></i></a></p></li><li><p><a href="#WINBINDUID"><i class="parameter"><tt>winbind uid</tt></i></a></p></li><li><p><a href="#WINBINDUSEDDEFAULTDOMAIN"><i class="parameter"><tt>winbind used default domain</tt></i></a></p></li><li><p><a href="#WINSHOOK"><i class="parameter"><tt>wins hook</tt></i></a></p></li><li><p><a href="#WINSPARTNER"><i class="parameter"><tt>wins partner</tt></i></a></p></li><li><p><a href="#WINSPROXY"><i class="parameter"><tt>wins proxy</tt></i></a></p></li><li><p><a href="#WINSSERVER"><i class="parameter"><tt>wins server</tt></i></a></p></li><li><p><a href="#WINSSUPPORT"><i class="parameter"><tt>wins support</tt></i></a></p></li><li><p><a href="#WORKGROUP"><i class="parameter"><tt>workgroup</tt></i></a></p></li><li><p><a href="#WRITERAW"><i class="parameter"><tt>write raw</tt></i></a></p></li><li><p><a href="#WTMPDIRECTORY"><i class="parameter"><tt>wtmp directory</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>COMPLETE LIST OF SERVICE PARAMETERS</h2><p>Here is a list of all service parameters. See the section on - each parameter for details. Note that some are synonyms.</p><div class="itemizedlist"><ul type="disc"><li><p><a href="#ADMINUSERS"><i class="parameter"><tt>admin users</tt></i></a></p></li><li><p><a href="#ALLOWHOSTS"><i class="parameter"><tt>allow hosts</tt></i></a></p></li><li><p><a href="#AVAILABLE"><i class="parameter"><tt>available</tt></i></a></p></li><li><p><a href="#BLOCKINGLOCKS"><i class="parameter"><tt>blocking locks</tt></i></a></p></li><li><p><a href="#BLOCKSIZE"><i class="parameter"><tt>block size</tt></i></a></p></li><li><p><a href="#BROWSABLE"><i class="parameter"><tt>browsable</tt></i></a></p></li><li><p><a href="#BROWSEABLE"><i class="parameter"><tt>browseable</tt></i></a></p></li><li><p><a href="#CASESENSITIVE"><i class="parameter"><tt>case sensitive</tt></i></a></p></li><li><p><a href="#CASESIGNAMES"><i class="parameter"><tt>casesignames</tt></i></a></p></li><li><p><a href="#COMMENT"><i class="parameter"><tt>comment</tt></i></a></p></li><li><p><a href="#COPY"><i class="parameter"><tt>copy</tt></i></a></p></li><li><p><a href="#CREATEMASK"><i class="parameter"><tt>create mask</tt></i></a></p></li><li><p><a href="#CREATEMODE"><i class="parameter"><tt>create mode</tt></i></a></p></li><li><p><a href="#CSCPOLICY"><i class="parameter"><tt>csc policy</tt></i></a></p></li><li><p><a href="#DEFAULTCASE"><i class="parameter"><tt>default case</tt></i></a></p></li><li><p><a href="#DEFAULTDEVMODE"><i class="parameter"><tt>default devmode</tt></i></a></p></li><li><p><a href="#DELETEREADONLY"><i class="parameter"><tt>delete readonly</tt></i></a></p></li><li><p><a href="#DELETEVETOFILES"><i class="parameter"><tt>delete veto files</tt></i></a></p></li><li><p><a href="#DENYHOSTS"><i class="parameter"><tt>deny hosts</tt></i></a></p></li><li><p><a href="#DIRECTORY"><i class="parameter"><tt>directory</tt></i></a></p></li><li><p><a href="#DIRECTORYMASK"><i class="parameter"><tt>directory mask</tt></i></a></p></li><li><p><a href="#DIRECTORYMODE"><i class="parameter"><tt>directory mode</tt></i></a></p></li><li><p><a href="#DIRECTORYSECURITYMASK"><i class="parameter"><tt>directory security mask</tt></i></a></p></li><li><p><a href="#DONTDESCEND"><i class="parameter"><tt>dont descend</tt></i></a></p></li><li><p><a href="#DOSFILEMODE"><i class="parameter"><tt>dos filemode</tt></i></a></p></li><li><p><a href="#DOSFILETIMERESOLUTION"><i class="parameter"><tt>dos filetime resolution</tt></i></a></p></li><li><p><a href="#DOSFILETIMES"><i class="parameter"><tt>dos filetimes</tt></i></a></p></li><li><p><a href="#EXEC"><i class="parameter"><tt>exec</tt></i></a></p></li><li><p><a href="#FAKEDIRECTORYCREATETIMES"><i class="parameter"><tt>fake directory create times</tt></i></a></p></li><li><p><a href="#FAKEOPLOCKS"><i class="parameter"><tt>fake oplocks</tt></i></a></p></li><li><p><a href="#FOLLOWSYMLINKS"><i class="parameter"><tt>follow symlinks</tt></i></a></p></li><li><p><a href="#FORCECREATEMODE"><i class="parameter"><tt>force create mode</tt></i></a></p></li><li><p><a href="#FORCEDIRECTORYMODE"><i class="parameter"><tt>force directory mode</tt></i></a></p></li><li><p><a href="#FORCEDIRECTORYSECURITYMODE"><i class="parameter"><tt>force directory security mode</tt></i></a></p></li><li><p><a href="#FORCEGROUP"><i class="parameter"><tt>force group</tt></i></a></p></li><li><p><a href="#FORCESECURITYMODE"><i class="parameter"><tt>force security mode</tt></i></a></p></li><li><p><a href="#FORCEUSER"><i class="parameter"><tt>force user</tt></i></a></p></li><li><p><a href="#FSTYPE"><i class="parameter"><tt>fstype</tt></i></a></p></li><li><p><a href="#GROUP"><i class="parameter"><tt>group</tt></i></a></p></li><li><p><a href="#GUESTACCOUNT"><i class="parameter"><tt>guest account</tt></i></a></p></li><li><p><a href="#GUESTOK"><i class="parameter"><tt>guest ok</tt></i></a></p></li><li><p><a href="#GUESTONLY"><i class="parameter"><tt>guest only</tt></i></a></p></li><li><p><a href="#HIDEDOTFILES"><i class="parameter"><tt>hide dot files</tt></i></a></p></li><li><p><a href="#HIDEFILES"><i class="parameter"><tt>hide files</tt></i></a></p></li><li><p><a href="#HIDESPECIALFILES"><i class="parameter"><tt>hide special files</tt></i></a></p></li><li><p><a href="#HIDEUNREADABLE"><i class="parameter"><tt>hide unreadable</tt></i></a></p></li><li><p><a href="#HIDEUNWRITEABLEFILES"><i class="parameter"><tt>hide unwriteable files</tt></i></a></p></li><li><p><a href="#HOSTSALLOW"><i class="parameter"><tt>hosts allow</tt></i></a></p></li><li><p><a href="#HOSTSDENY"><i class="parameter"><tt>hosts deny</tt></i></a></p></li><li><p><a href="#INHERITACLS"><i class="parameter"><tt>inherit acls</tt></i></a></p></li><li><p><a href="#INHERITPERMISSIONS"><i class="parameter"><tt>inherit permissions</tt></i></a></p></li><li><p><a href="#INVALIDUSERS"><i class="parameter"><tt>invalid users</tt></i></a></p></li><li><p><a href="#LEVEL2OPLOCKS"><i class="parameter"><tt>level2 oplocks</tt></i></a></p></li><li><p><a href="#LOCKING"><i class="parameter"><tt>locking</tt></i></a></p></li><li><p><a href="#LPPAUSECOMMAND"><i class="parameter"><tt>lppause command</tt></i></a></p></li><li><p><a href="#LPQCOMMAND"><i class="parameter"><tt>lpq command</tt></i></a></p></li><li><p><a href="#LPRESUMECOMMAND"><i class="parameter"><tt>lpresume command</tt></i></a></p></li><li><p><a href="#LPRMCOMMAND"><i class="parameter"><tt>lprm command</tt></i></a></p></li><li><p><a href="#MAGICOUTPUT"><i class="parameter"><tt>magic output</tt></i></a></p></li><li><p><a href="#MAGICSCRIPT"><i class="parameter"><tt>magic script</tt></i></a></p></li><li><p><a href="#MANGLECASE"><i class="parameter"><tt>mangle case</tt></i></a></p></li><li><p><a href="#MANGLEDMAP"><i class="parameter"><tt>mangled map</tt></i></a></p></li><li><p><a href="#MANGLEDNAMES"><i class="parameter"><tt>mangled names</tt></i></a></p></li><li><p><a href="#MANGLINGCHAR"><i class="parameter"><tt>mangling char</tt></i></a></p></li><li><p><a href="#MAPACLINHERIT"><i class="parameter"><tt>map acl inherit</tt></i></a></p></li><li><p><a href="#MAPARCHIVE"><i class="parameter"><tt>map archive</tt></i></a></p></li><li><p><a href="#MAPHIDDEN"><i class="parameter"><tt>map hidden</tt></i></a></p></li><li><p><a href="#MAPSYSTEM"><i class="parameter"><tt>map system</tt></i></a></p></li><li><p><a href="#MAXCONNECTIONS"><i class="parameter"><tt>max connections</tt></i></a></p></li><li><p><a href="#MAXPRINTJOBS"><i class="parameter"><tt>max print jobs</tt></i></a></p></li><li><p><a href="#MAXREPORTEDPRINTJOBS"><i class="parameter"><tt>max reported print jobs</tt></i></a></p></li><li><p><a href="#MINPRINTSPACE"><i class="parameter"><tt>min print space</tt></i></a></p></li><li><p><a href="#MSDFSPROXY"><i class="parameter"><tt>msdfs proxy</tt></i></a></p></li><li><p><a href="#MSDFSROOT"><i class="parameter"><tt>msdfs root</tt></i></a></p></li><li><p><a href="#NTACLSUPPORT"><i class="parameter"><tt>nt acl support</tt></i></a></p></li><li><p><a href="#ONLYGUEST"><i class="parameter"><tt>only guest</tt></i></a></p></li><li><p><a href="#ONLYUSER"><i class="parameter"><tt>only user</tt></i></a></p></li><li><p><a href="#OPLOCKCONTENTIONLIMIT"><i class="parameter"><tt>oplock contention limit</tt></i></a></p></li><li><p><a href="#OPLOCKS"><i class="parameter"><tt>oplocks</tt></i></a></p></li><li><p><a href="#PATH"><i class="parameter"><tt>path</tt></i></a></p></li><li><p><a href="#POSIXLOCKING"><i class="parameter"><tt>posix locking</tt></i></a></p></li><li><p><a href="#POSTEXEC"><i class="parameter"><tt>postexec</tt></i></a></p></li><li><p><a href="#PREEXEC"><i class="parameter"><tt>preexec</tt></i></a></p></li><li><p><a href="#PREEXECCLOSE"><i class="parameter"><tt>preexec close</tt></i></a></p></li><li><p><a href="#PRESERVECASE"><i class="parameter"><tt>preserve case</tt></i></a></p></li><li><p><a href="#PRINTABLE"><i class="parameter"><tt>printable</tt></i></a></p></li><li><p><a href="#PRINTCAPNAME"><i class="parameter"><tt>printcap name</tt></i></a></p></li><li><p><a href="#PRINTCOMMAND"><i class="parameter"><tt>print command</tt></i></a></p></li><li><p><a href="#PRINTER"><i class="parameter"><tt>printer</tt></i></a></p></li><li><p><a href="#PRINTERADMIN"><i class="parameter"><tt>printer admin</tt></i></a></p></li><li><p><a href="#PRINTERNAME"><i class="parameter"><tt>printer name</tt></i></a></p></li><li><p><a href="#PRINTING"><i class="parameter"><tt>printing</tt></i></a></p></li><li><p><a href="#PRINTOK"><i class="parameter"><tt>print ok</tt></i></a></p></li><li><p><a href="#PUBLIC"><i class="parameter"><tt>public</tt></i></a></p></li><li><p><a href="#QUEUEPAUSECOMMAND"><i class="parameter"><tt>queuepause command</tt></i></a></p></li><li><p><a href="#QUEUERESUMECOMMAND"><i class="parameter"><tt>queueresume command</tt></i></a></p></li><li><p><a href="#READLIST"><i class="parameter"><tt>read list</tt></i></a></p></li><li><p><a href="#READONLY"><i class="parameter"><tt>read only</tt></i></a></p></li><li><p><a href="#ROOTPOSTEXEC"><i class="parameter"><tt>root postexec</tt></i></a></p></li><li><p><a href="#ROOTPREEXEC"><i class="parameter"><tt>root preexec</tt></i></a></p></li><li><p><a href="#ROOTPREEXECCLOSE"><i class="parameter"><tt>root preexec close</tt></i></a></p></li><li><p><a href="#SECURITYMASK"><i class="parameter"><tt>security mask</tt></i></a></p></li><li><p><a href="#SETDIRECTORY"><i class="parameter"><tt>set directory</tt></i></a></p></li><li><p><a href="#SHAREMODES"><i class="parameter"><tt>share modes</tt></i></a></p></li><li><p><a href="#SHORTPRESERVECASE"><i class="parameter"><tt>short preserve case</tt></i></a></p></li><li><p><a href="#STRICTALLOCATE"><i class="parameter"><tt>strict allocate</tt></i></a></p></li><li><p><a href="#STRICTLOCKING"><i class="parameter"><tt>strict locking</tt></i></a></p></li><li><p><a href="#STRICTSYNC"><i class="parameter"><tt>strict sync</tt></i></a></p></li><li><p><a href="#SYNCALWAYS"><i class="parameter"><tt>sync always</tt></i></a></p></li><li><p><a href="#USECLIENTDRIVER"><i class="parameter"><tt>use client driver</tt></i></a></p></li><li><p><a href="#USER"><i class="parameter"><tt>user</tt></i></a></p></li><li><p><a href="#USERNAME"><i class="parameter"><tt>username</tt></i></a></p></li><li><p><a href="#USERS"><i class="parameter"><tt>users</tt></i></a></p></li><li><p><a href="#USESENDFILE"><i class="parameter"><tt>use sendfile</tt></i></a></p></li><li><p><a href="#-VALID"><i class="parameter"><tt>-valid</tt></i></a></p></li><li><p><a href="#VALIDUSERS"><i class="parameter"><tt>valid users</tt></i></a></p></li><li><p><a href="#VETOFILES"><i class="parameter"><tt>veto files</tt></i></a></p></li><li><p><a href="#VETOOPLOCKFILES"><i class="parameter"><tt>veto oplock files</tt></i></a></p></li><li><p><a href="#VFSOBJECT"><i class="parameter"><tt>vfs object</tt></i></a></p></li><li><p><a href="#VFSOBJECTS"><i class="parameter"><tt>vfs objects</tt></i></a></p></li><li><p><a href="#VOLUME"><i class="parameter"><tt>volume</tt></i></a></p></li><li><p><a href="#WIDELINKS"><i class="parameter"><tt>wide links</tt></i></a></p></li><li><p><a href="#WRITABLE"><i class="parameter"><tt>writable</tt></i></a></p></li><li><p><a href="#WRITEABLE"><i class="parameter"><tt>writeable</tt></i></a></p></li><li><p><a href="#WRITECACHESIZE"><i class="parameter"><tt>write cache size</tt></i></a></p></li><li><p><a href="#WRITELIST"><i class="parameter"><tt>write list</tt></i></a></p></li><li><p><a href="#WRITEOK"><i class="parameter"><tt>write ok</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>EXPLANATION OF EACH PARAMETER</h2><div class="variablelist"><dl><dt><span class="term"><a name="ABORTSHUTDOWNSCRIPT"></a>abort shutdown script (G)</span></dt><dd><p><span class="emphasis"><em>This parameter only exists in the HEAD cvs branch</em></span> + each parameter for details. Note that some are synonyms.</p><div class="itemizedlist"><ul type="disc"><li><p><a href="#ABORTSHUTDOWNSCRIPT"><i class="parameter"><tt>abort shutdown script</tt></i></a></p></li><li><p><a href="#ADDGROUPSCRIPT"><i class="parameter"><tt>add group script</tt></i></a></p></li><li><p><a href="#ADDMACHINESCRIPT"><i class="parameter"><tt>add machine script</tt></i></a></p></li><li><p><a href="#ADDPRINTERCOMMAND"><i class="parameter"><tt>addprinter command</tt></i></a></p></li><li><p><a href="#ADDSHARECOMMAND"><i class="parameter"><tt>add share command</tt></i></a></p></li><li><p><a href="#ADDUSERSCRIPT"><i class="parameter"><tt>add user script</tt></i></a></p></li><li><p><a href="#ADDUSERTOGROUPSCRIPT"><i class="parameter"><tt>add user to group script</tt></i></a></p></li><li><p><a href="#ALGORITHMICRIDBASE"><i class="parameter"><tt>algorithmic rid base</tt></i></a></p></li><li><p><a href="#ALLOWTRUSTEDDOMAINS"><i class="parameter"><tt>allow trusted domains</tt></i></a></p></li><li><p><a href="#ANNOUNCEAS"><i class="parameter"><tt>announce as</tt></i></a></p></li><li><p><a href="#ANNOUNCEVERSION"><i class="parameter"><tt>announce version</tt></i></a></p></li><li><p><a href="#AUTHMETHODS"><i class="parameter"><tt>auth methods</tt></i></a></p></li><li><p><a href="#AUTOSERVICES"><i class="parameter"><tt>auto services</tt></i></a></p></li><li><p><a href="#BINDINTERFACESONLY"><i class="parameter"><tt>bind interfaces only</tt></i></a></p></li><li><p><a href="#BROWSELIST"><i class="parameter"><tt>browse list</tt></i></a></p></li><li><p><a href="#CHANGENOTIFYTIMEOUT"><i class="parameter"><tt>change notify timeout</tt></i></a></p></li><li><p><a href="#CHANGESHARECOMMAND"><i class="parameter"><tt>change share command</tt></i></a></p></li><li><p><a href="#CLIENTLANMANAUTH"><i class="parameter"><tt>client lanman auth</tt></i></a></p></li><li><p><a href="#CLIENTNTLMV2AUTH"><i class="parameter"><tt>client ntlmv2 auth</tt></i></a></p></li><li><p><a href="#CLIENTUSESPNEGO"><i class="parameter"><tt>client use spnego</tt></i></a></p></li><li><p><a href="#CONFIGFILE"><i class="parameter"><tt>config file</tt></i></a></p></li><li><p><a href="#DEADTIME"><i class="parameter"><tt>dead time</tt></i></a></p></li><li><p><a href="#DEBUGHIRESTIMESTAMP"><i class="parameter"><tt>debug hires timestamp</tt></i></a></p></li><li><p><a href="#DEBUGLEVEL"><i class="parameter"><tt>debuglevel</tt></i></a></p></li><li><p><a href="#DEBUGPID"><i class="parameter"><tt>debug pid</tt></i></a></p></li><li><p><a href="#DEBUGTIMESTAMP"><i class="parameter"><tt>debug timestamp</tt></i></a></p></li><li><p><a href="#DEBUGUID"><i class="parameter"><tt>debug uid</tt></i></a></p></li><li><p><a href="#DEFAULT"><i class="parameter"><tt>default</tt></i></a></p></li><li><p><a href="#DEFAULTSERVICE"><i class="parameter"><tt>default service</tt></i></a></p></li><li><p><a href="#DELETEGROUPSCRIPT"><i class="parameter"><tt>delete group script</tt></i></a></p></li><li><p><a href="#DELETEPRINTERCOMMAND"><i class="parameter"><tt>deleteprinter command</tt></i></a></p></li><li><p><a href="#DELETESHARECOMMAND"><i class="parameter"><tt>delete share command</tt></i></a></p></li><li><p><a href="#DELETEUSERFROMGROUPSCRIPT"><i class="parameter"><tt>delete user from group script</tt></i></a></p></li><li><p><a href="#DELETEUSERSCRIPT"><i class="parameter"><tt>delete user script</tt></i></a></p></li><li><p><a href="#DFREECOMMAND"><i class="parameter"><tt>dfree command</tt></i></a></p></li><li><p><a href="#DISABLENETBIOS"><i class="parameter"><tt>disable netbios</tt></i></a></p></li><li><p><a href="#DISABLESPOOLSS"><i class="parameter"><tt>disable spoolss</tt></i></a></p></li><li><p><a href="#DISPLAYCHARSET"><i class="parameter"><tt>display charset</tt></i></a></p></li><li><p><a href="#DNSPROXY"><i class="parameter"><tt>dns proxy</tt></i></a></p></li><li><p><a href="#DOMAINLOGONS"><i class="parameter"><tt>domain logons</tt></i></a></p></li><li><p><a href="#DOMAINMASTER"><i class="parameter"><tt>domain master</tt></i></a></p></li><li><p><a href="#DOSCHARSET"><i class="parameter"><tt>dos charset</tt></i></a></p></li><li><p><a href="#ENABLERIDALGORITHM"><i class="parameter"><tt>enable rid algorithm</tt></i></a></p></li><li><p><a href="#ENCRYPTPASSWORDS"><i class="parameter"><tt>encrypt passwords</tt></i></a></p></li><li><p><a href="#ENHANCEDBROWSING"><i class="parameter"><tt>enhanced browsing</tt></i></a></p></li><li><p><a href="#ENUMPORTSCOMMAND"><i class="parameter"><tt>enumports command</tt></i></a></p></li><li><p><a href="#GETWDCACHE"><i class="parameter"><tt>getwd cache</tt></i></a></p></li><li><p><a href="#GUESTACCOUNT"><i class="parameter"><tt>guest account</tt></i></a></p></li><li><p><a href="#HIDELOCALUSERS"><i class="parameter"><tt>hide local users</tt></i></a></p></li><li><p><a href="#HOMEDIRMAP"><i class="parameter"><tt>homedir map</tt></i></a></p></li><li><p><a href="#HOSTMSDFS"><i class="parameter"><tt>host msdfs</tt></i></a></p></li><li><p><a href="#HOSTNAMELOOKUPS"><i class="parameter"><tt>hostname lookups</tt></i></a></p></li><li><p><a href="#HOSTSEQUIV"><i class="parameter"><tt>hosts equiv</tt></i></a></p></li><li><p><a href="#IDMAPGID"><i class="parameter"><tt>idmap gid</tt></i></a></p></li><li><p><a href="#IDMAPUID"><i class="parameter"><tt>idmap uid</tt></i></a></p></li><li><p><a href="#INCLUDE"><i class="parameter"><tt>include</tt></i></a></p></li><li><p><a href="#INTERFACES"><i class="parameter"><tt>interfaces</tt></i></a></p></li><li><p><a href="#KEEPALIVE"><i class="parameter"><tt>keepalive</tt></i></a></p></li><li><p><a href="#KERNELOPLOCKS"><i class="parameter"><tt>kernel oplocks</tt></i></a></p></li><li><p><a href="#LANMANAUTH"><i class="parameter"><tt>lanman auth</tt></i></a></p></li><li><p><a href="#LARGEREADWRITE"><i class="parameter"><tt>large readwrite</tt></i></a></p></li><li><p><a href="#LDAPADMINDN"><i class="parameter"><tt>ldap admin dn</tt></i></a></p></li><li><p><a href="#LDAPDELETEDN"><i class="parameter"><tt>ldap delete dn</tt></i></a></p></li><li><p><a href="#LDAPFILTER"><i class="parameter"><tt>ldap filter</tt></i></a></p></li><li><p><a href="#LDAPMACHINESUFFIX"><i class="parameter"><tt>ldap machine suffix</tt></i></a></p></li><li><p><a href="#LDAPPASSWDSYNC"><i class="parameter"><tt>ldap passwd sync</tt></i></a></p></li><li><p><a href="#LDAPPORT"><i class="parameter"><tt>ldap port</tt></i></a></p></li><li><p><a href="#LDAPSERVER"><i class="parameter"><tt>ldap server</tt></i></a></p></li><li><p><a href="#LDAPSSL"><i class="parameter"><tt>ldap ssl</tt></i></a></p></li><li><p><a href="#LDAPSUFFIX"><i class="parameter"><tt>ldap suffix</tt></i></a></p></li><li><p><a href="#LDAPTRUSTIDS"><i class="parameter"><tt>ldap trust ids</tt></i></a></p></li><li><p><a href="#LDAPUSERSUFFIX"><i class="parameter"><tt>ldap user suffix</tt></i></a></p></li><li><p><a href="#LMANNOUNCE"><i class="parameter"><tt>lm announce</tt></i></a></p></li><li><p><a href="#LMINTERVAL"><i class="parameter"><tt>lm interval</tt></i></a></p></li><li><p><a href="#LOADPRINTERS"><i class="parameter"><tt>load printers</tt></i></a></p></li><li><p><a href="#LOCALMASTER"><i class="parameter"><tt>local master</tt></i></a></p></li><li><p><a href="#LOCKDIR"><i class="parameter"><tt>lock dir</tt></i></a></p></li><li><p><a href="#LOCKDIRECTORY"><i class="parameter"><tt>lock directory</tt></i></a></p></li><li><p><a href="#LOCKSPINCOUNT"><i class="parameter"><tt>lock spin count</tt></i></a></p></li><li><p><a href="#LOCKSPINTIME"><i class="parameter"><tt>lock spin time</tt></i></a></p></li><li><p><a href="#LOGFILE"><i class="parameter"><tt>log file</tt></i></a></p></li><li><p><a href="#LOGLEVEL"><i class="parameter"><tt>log level</tt></i></a></p></li><li><p><a href="#LOGONDRIVE"><i class="parameter"><tt>logon drive</tt></i></a></p></li><li><p><a href="#LOGONHOME"><i class="parameter"><tt>logon home</tt></i></a></p></li><li><p><a href="#LOGONPATH"><i class="parameter"><tt>logon path</tt></i></a></p></li><li><p><a href="#LOGONSCRIPT"><i class="parameter"><tt>logon script</tt></i></a></p></li><li><p><a href="#LPQCACHETIME"><i class="parameter"><tt>lpq cache time</tt></i></a></p></li><li><p><a href="#MACHINEPASSWORDTIMEOUT"><i class="parameter"><tt>machine password timeout</tt></i></a></p></li><li><p><a href="#MANGLEDSTACK"><i class="parameter"><tt>mangled stack</tt></i></a></p></li><li><p><a href="#MANGLEPREFIX"><i class="parameter"><tt>mangle prefix</tt></i></a></p></li><li><p><a href="#MANGLINGMETHOD"><i class="parameter"><tt>mangling method</tt></i></a></p></li><li><p><a href="#MAPTOGUEST"><i class="parameter"><tt>map to guest</tt></i></a></p></li><li><p><a href="#MAXDISKSIZE"><i class="parameter"><tt>max disk size</tt></i></a></p></li><li><p><a href="#MAXLOGSIZE"><i class="parameter"><tt>max log size</tt></i></a></p></li><li><p><a href="#MAXMUX"><i class="parameter"><tt>max mux</tt></i></a></p></li><li><p><a href="#MAXOPENFILES"><i class="parameter"><tt>max open files</tt></i></a></p></li><li><p><a href="#MAXPROTOCOL"><i class="parameter"><tt>max protocol</tt></i></a></p></li><li><p><a href="#MAXSMBDPROCESSES"><i class="parameter"><tt>max smbd processes</tt></i></a></p></li><li><p><a href="#MAXTTL"><i class="parameter"><tt>max ttl</tt></i></a></p></li><li><p><a href="#MAXWINSTTL"><i class="parameter"><tt>max wins ttl</tt></i></a></p></li><li><p><a href="#MAXXMIT"><i class="parameter"><tt>max xmit</tt></i></a></p></li><li><p><a href="#MESSAGECOMMAND"><i class="parameter"><tt>message command</tt></i></a></p></li><li><p><a href="#MINPASSWDLENGTH"><i class="parameter"><tt>min passwd length</tt></i></a></p></li><li><p><a href="#MINPASSWORDLENGTH"><i class="parameter"><tt>min password length</tt></i></a></p></li><li><p><a href="#MINPROTOCOL"><i class="parameter"><tt>min protocol</tt></i></a></p></li><li><p><a href="#MINWINSTTL"><i class="parameter"><tt>min wins ttl</tt></i></a></p></li><li><p><a href="#NAMECACHETIMEOUT"><i class="parameter"><tt>name cache timeout</tt></i></a></p></li><li><p><a href="#NAMERESOLVEORDER"><i class="parameter"><tt>name resolve order</tt></i></a></p></li><li><p><a href="#NETBIOSALIASES"><i class="parameter"><tt>netbios aliases</tt></i></a></p></li><li><p><a href="#NETBIOSNAME"><i class="parameter"><tt>netbios name</tt></i></a></p></li><li><p><a href="#NETBIOSSCOPE"><i class="parameter"><tt>netbios scope</tt></i></a></p></li><li><p><a href="#NISHOMEDIR"><i class="parameter"><tt>nis homedir</tt></i></a></p></li><li><p><a href="#NTLMAUTH"><i class="parameter"><tt>ntlm auth</tt></i></a></p></li><li><p><a href="#NTPIPESUPPORT"><i class="parameter"><tt>nt pipe support</tt></i></a></p></li><li><p><a href="#NTSTATUSSUPPORT"><i class="parameter"><tt>nt status support</tt></i></a></p></li><li><p><a href="#NULLPASSWORDS"><i class="parameter"><tt>null passwords</tt></i></a></p></li><li><p><a href="#OBEYPAMRESTRICTIONS"><i class="parameter"><tt>obey pam restrictions</tt></i></a></p></li><li><p><a href="#OPLOCKBREAKWAITTIME"><i class="parameter"><tt>oplock break wait time</tt></i></a></p></li><li><p><a href="#OS2DRIVERMAP"><i class="parameter"><tt>os2 driver map</tt></i></a></p></li><li><p><a href="#OSLEVEL"><i class="parameter"><tt>os level</tt></i></a></p></li><li><p><a href="#PAMPASSWORDCHANGE"><i class="parameter"><tt>pam password change</tt></i></a></p></li><li><p><a href="#PANICACTION"><i class="parameter"><tt>panic action</tt></i></a></p></li><li><p><a href="#PARANOIDSERVERSECURITY"><i class="parameter"><tt>paranoid server security</tt></i></a></p></li><li><p><a href="#PASSDBBACKEND"><i class="parameter"><tt>passdb backend</tt></i></a></p></li><li><p><a href="#PASSWDCHAT"><i class="parameter"><tt>passwd chat</tt></i></a></p></li><li><p><a href="#PASSWDCHATDEBUG"><i class="parameter"><tt>passwd chat debug</tt></i></a></p></li><li><p><a href="#PASSWDPROGRAM"><i class="parameter"><tt>passwd program</tt></i></a></p></li><li><p><a href="#PASSWORDLEVEL"><i class="parameter"><tt>password level</tt></i></a></p></li><li><p><a href="#PASSWORDSERVER"><i class="parameter"><tt>password server</tt></i></a></p></li><li><p><a href="#PIDDIRECTORY"><i class="parameter"><tt>pid directory</tt></i></a></p></li><li><p><a href="#PREFEREDMASTER"><i class="parameter"><tt>prefered master</tt></i></a></p></li><li><p><a href="#PREFERREDMASTER"><i class="parameter"><tt>preferred master</tt></i></a></p></li><li><p><a href="#PRELOAD"><i class="parameter"><tt>preload</tt></i></a></p></li><li><p><a href="#PRELOADMODULES"><i class="parameter"><tt>preload modules</tt></i></a></p></li><li><p><a href="#PRINTCAP"><i class="parameter"><tt>printcap</tt></i></a></p></li><li><p><a href="#PRIVATEDIR"><i class="parameter"><tt>private dir</tt></i></a></p></li><li><p><a href="#PROTOCOL"><i class="parameter"><tt>protocol</tt></i></a></p></li><li><p><a href="#READBMPX"><i class="parameter"><tt>read bmpx</tt></i></a></p></li><li><p><a href="#READRAW"><i class="parameter"><tt>read raw</tt></i></a></p></li><li><p><a href="#READSIZE"><i class="parameter"><tt>read size</tt></i></a></p></li><li><p><a href="#REALM"><i class="parameter"><tt>realm</tt></i></a></p></li><li><p><a href="#REMOTEANNOUNCE"><i class="parameter"><tt>remote announce</tt></i></a></p></li><li><p><a href="#REMOTEBROWSESYNC"><i class="parameter"><tt>remote browse sync</tt></i></a></p></li><li><p><a href="#RESTRICTANONYMOUS"><i class="parameter"><tt>restrict anonymous</tt></i></a></p></li><li><p><a href="#ROOT"><i class="parameter"><tt>root</tt></i></a></p></li><li><p><a href="#ROOTDIR"><i class="parameter"><tt>root dir</tt></i></a></p></li><li><p><a href="#ROOTDIRECTORY"><i class="parameter"><tt>root directory</tt></i></a></p></li><li><p><a href="#SECURITY"><i class="parameter"><tt>security</tt></i></a></p></li><li><p><a href="#SERVERSCHANNEL"><i class="parameter"><tt>server schannel</tt></i></a></p></li><li><p><a href="#SERVERSTRING"><i class="parameter"><tt>server string</tt></i></a></p></li><li><p><a href="#SETPRIMARYGROUPSCRIPT"><i class="parameter"><tt>set primary group script</tt></i></a></p></li><li><p><a href="#SHOWADDPRINTERWIZARD"><i class="parameter"><tt>show add printer wizard</tt></i></a></p></li><li><p><a href="#SHUTDOWNSCRIPT"><i class="parameter"><tt>shutdown script</tt></i></a></p></li><li><p><a href="#SMBPASSWDFILE"><i class="parameter"><tt>smb passwd file</tt></i></a></p></li><li><p><a href="#SMBPORTS"><i class="parameter"><tt>smb ports</tt></i></a></p></li><li><p><a href="#SOCKETADDRESS"><i class="parameter"><tt>socket address</tt></i></a></p></li><li><p><a href="#SOCKETOPTIONS"><i class="parameter"><tt>socket options</tt></i></a></p></li><li><p><a href="#SOURCEENVIRONMENT"><i class="parameter"><tt>source environment</tt></i></a></p></li><li><p><a href="#STATCACHE"><i class="parameter"><tt>stat cache</tt></i></a></p></li><li><p><a href="#STRIPDOT"><i class="parameter"><tt>strip dot</tt></i></a></p></li><li><p><a href="#SYSLOG"><i class="parameter"><tt>syslog</tt></i></a></p></li><li><p><a href="#SYSLOGONLY"><i class="parameter"><tt>syslog only</tt></i></a></p></li><li><p><a href="#TEMPLATEHOMEDIR"><i class="parameter"><tt>template homedir</tt></i></a></p></li><li><p><a href="#TEMPLATEPRIMARYGROUP"><i class="parameter"><tt>template primary group</tt></i></a></p></li><li><p><a href="#TEMPLATESHELL"><i class="parameter"><tt>template shell</tt></i></a></p></li><li><p><a href="#TIMEOFFSET"><i class="parameter"><tt>time offset</tt></i></a></p></li><li><p><a href="#TIMESERVER"><i class="parameter"><tt>time server</tt></i></a></p></li><li><p><a href="#TIMESTAMPLOGS"><i class="parameter"><tt>timestamp logs</tt></i></a></p></li><li><p><a href="#TOTALPRINTJOBS"><i class="parameter"><tt>total print jobs</tt></i></a></p></li><li><p><a href="#UNICODE"><i class="parameter"><tt>unicode</tt></i></a></p></li><li><p><a href="#UNIXCHARSET"><i class="parameter"><tt>unix charset</tt></i></a></p></li><li><p><a href="#UNIXEXTENSIONS"><i class="parameter"><tt>unix extensions</tt></i></a></p></li><li><p><a href="#UNIXPASSWORDSYNC"><i class="parameter"><tt>unix password sync</tt></i></a></p></li><li><p><a href="#UPDATEENCRYPTED"><i class="parameter"><tt>update encrypted</tt></i></a></p></li><li><p><a href="#USEMMAP"><i class="parameter"><tt>use mmap</tt></i></a></p></li><li><p><a href="#USERNAMELEVEL"><i class="parameter"><tt>username level</tt></i></a></p></li><li><p><a href="#USERNAMEMAP"><i class="parameter"><tt>username map</tt></i></a></p></li><li><p><a href="#USESPNEGO"><i class="parameter"><tt>use spnego</tt></i></a></p></li><li><p><a href="#UTMP"><i class="parameter"><tt>utmp</tt></i></a></p></li><li><p><a href="#UTMPDIRECTORY"><i class="parameter"><tt>utmp directory</tt></i></a></p></li><li><p><a href="#WINBINDCACHETIME"><i class="parameter"><tt>winbind cache time</tt></i></a></p></li><li><p><a href="#WINBINDENABLELOCALACCOUNTS"><i class="parameter"><tt>winbind enable local accounts</tt></i></a></p></li><li><p><a href="#WINBINDENUMGROUPS"><i class="parameter"><tt>winbind enum groups</tt></i></a></p></li><li><p><a href="#WINBINDENUMUSERS"><i class="parameter"><tt>winbind enum users</tt></i></a></p></li><li><p><a href="#WINBINDGID"><i class="parameter"><tt>winbind gid</tt></i></a></p></li><li><p><a href="#WINBINDSEPARATOR"><i class="parameter"><tt>winbind separator</tt></i></a></p></li><li><p><a href="#WINBINDTRUSTEDDOMAINSONLY"><i class="parameter"><tt>winbind trusted domains only</tt></i></a></p></li><li><p><a href="#WINBINDUID"><i class="parameter"><tt>winbind uid</tt></i></a></p></li><li><p><a href="#WINBINDUSEDEFAULTDOMAIN"><i class="parameter"><tt>winbind use default domain</tt></i></a></p></li><li><p><a href="#WINSHOOK"><i class="parameter"><tt>wins hook</tt></i></a></p></li><li><p><a href="#WINSPARTNERS"><i class="parameter"><tt>wins partners</tt></i></a></p></li><li><p><a href="#WINSPROXY"><i class="parameter"><tt>wins proxy</tt></i></a></p></li><li><p><a href="#WINSSERVER"><i class="parameter"><tt>wins server</tt></i></a></p></li><li><p><a href="#WINSSUPPORT"><i class="parameter"><tt>wins support</tt></i></a></p></li><li><p><a href="#WORKGROUP"><i class="parameter"><tt>workgroup</tt></i></a></p></li><li><p><a href="#WRITERAW"><i class="parameter"><tt>write raw</tt></i></a></p></li><li><p><a href="#WTMPDIRECTORY"><i class="parameter"><tt>wtmp directory</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>COMPLETE LIST OF SERVICE PARAMETERS</h2><p>Here is a list of all service parameters. See the section on + each parameter for details. Note that some are synonyms.</p><div class="itemizedlist"><ul type="disc"><li><p><a href="#ADMINUSERS"><i class="parameter"><tt>admin users</tt></i></a></p></li><li><p><a href="#ALLOWHOSTS"><i class="parameter"><tt>allow hosts</tt></i></a></p></li><li><p><a href="#AVAILABLE"><i class="parameter"><tt>available</tt></i></a></p></li><li><p><a href="#BLOCKINGLOCKS"><i class="parameter"><tt>blocking locks</tt></i></a></p></li><li><p><a href="#BLOCKSIZE"><i class="parameter"><tt>block size</tt></i></a></p></li><li><p><a href="#BROWSABLE"><i class="parameter"><tt>browsable</tt></i></a></p></li><li><p><a href="#BROWSEABLE"><i class="parameter"><tt>browseable</tt></i></a></p></li><li><p><a href="#CASESENSITIVE"><i class="parameter"><tt>case sensitive</tt></i></a></p></li><li><p><a href="#CASESIGNAMES"><i class="parameter"><tt>casesignames</tt></i></a></p></li><li><p><a href="#COMMENT"><i class="parameter"><tt>comment</tt></i></a></p></li><li><p><a href="#COPY"><i class="parameter"><tt>copy</tt></i></a></p></li><li><p><a href="#CREATEMASK"><i class="parameter"><tt>create mask</tt></i></a></p></li><li><p><a href="#CREATEMODE"><i class="parameter"><tt>create mode</tt></i></a></p></li><li><p><a href="#CSCPOLICY"><i class="parameter"><tt>csc policy</tt></i></a></p></li><li><p><a href="#DEFAULTCASE"><i class="parameter"><tt>default case</tt></i></a></p></li><li><p><a href="#DEFAULTDEVMODE"><i class="parameter"><tt>default devmode</tt></i></a></p></li><li><p><a href="#DELETEREADONLY"><i class="parameter"><tt>delete readonly</tt></i></a></p></li><li><p><a href="#DELETEVETOFILES"><i class="parameter"><tt>delete veto files</tt></i></a></p></li><li><p><a href="#DENYHOSTS"><i class="parameter"><tt>deny hosts</tt></i></a></p></li><li><p><a href="#DIRECTORY"><i class="parameter"><tt>directory</tt></i></a></p></li><li><p><a href="#DIRECTORYMASK"><i class="parameter"><tt>directory mask</tt></i></a></p></li><li><p><a href="#DIRECTORYMODE"><i class="parameter"><tt>directory mode</tt></i></a></p></li><li><p><a href="#DIRECTORYSECURITYMASK"><i class="parameter"><tt>directory security mask</tt></i></a></p></li><li><p><a href="#DONTDESCEND"><i class="parameter"><tt>dont descend</tt></i></a></p></li><li><p><a href="#DOSFILEMODE"><i class="parameter"><tt>dos filemode</tt></i></a></p></li><li><p><a href="#DOSFILETIMERESOLUTION"><i class="parameter"><tt>dos filetime resolution</tt></i></a></p></li><li><p><a href="#DOSFILETIMES"><i class="parameter"><tt>dos filetimes</tt></i></a></p></li><li><p><a href="#EXEC"><i class="parameter"><tt>exec</tt></i></a></p></li><li><p><a href="#FAKEDIRECTORYCREATETIMES"><i class="parameter"><tt>fake directory create times</tt></i></a></p></li><li><p><a href="#FAKEOPLOCKS"><i class="parameter"><tt>fake oplocks</tt></i></a></p></li><li><p><a href="#FOLLOWSYMLINKS"><i class="parameter"><tt>follow symlinks</tt></i></a></p></li><li><p><a href="#FORCECREATEMODE"><i class="parameter"><tt>force create mode</tt></i></a></p></li><li><p><a href="#FORCEDIRECTORYMODE"><i class="parameter"><tt>force directory mode</tt></i></a></p></li><li><p><a href="#FORCEDIRECTORYSECURITYMODE"><i class="parameter"><tt>force directory security mode</tt></i></a></p></li><li><p><a href="#FORCEGROUP"><i class="parameter"><tt>force group</tt></i></a></p></li><li><p><a href="#FORCESECURITYMODE"><i class="parameter"><tt>force security mode</tt></i></a></p></li><li><p><a href="#FORCEUSER"><i class="parameter"><tt>force user</tt></i></a></p></li><li><p><a href="#FSTYPE"><i class="parameter"><tt>fstype</tt></i></a></p></li><li><p><a href="#GROUP"><i class="parameter"><tt>group</tt></i></a></p></li><li><p><a href="#GUESTACCOUNT"><i class="parameter"><tt>guest account</tt></i></a></p></li><li><p><a href="#GUESTOK"><i class="parameter"><tt>guest ok</tt></i></a></p></li><li><p><a href="#GUESTONLY"><i class="parameter"><tt>guest only</tt></i></a></p></li><li><p><a href="#HIDEDOTFILES"><i class="parameter"><tt>hide dot files</tt></i></a></p></li><li><p><a href="#HIDEFILES"><i class="parameter"><tt>hide files</tt></i></a></p></li><li><p><a href="#HIDESPECIALFILES"><i class="parameter"><tt>hide special files</tt></i></a></p></li><li><p><a href="#HIDEUNREADABLE"><i class="parameter"><tt>hide unreadable</tt></i></a></p></li><li><p><a href="#HIDEUNWRITEABLEFILES"><i class="parameter"><tt>hide unwriteable files</tt></i></a></p></li><li><p><a href="#HOSTSALLOW"><i class="parameter"><tt>hosts allow</tt></i></a></p></li><li><p><a href="#HOSTSDENY"><i class="parameter"><tt>hosts deny</tt></i></a></p></li><li><p><a href="#INHERITACLS"><i class="parameter"><tt>inherit acls</tt></i></a></p></li><li><p><a href="#INHERITPERMISSIONS"><i class="parameter"><tt>inherit permissions</tt></i></a></p></li><li><p><a href="#INVALIDUSERS"><i class="parameter"><tt>invalid users</tt></i></a></p></li><li><p><a href="#LEVEL2OPLOCKS"><i class="parameter"><tt>level2 oplocks</tt></i></a></p></li><li><p><a href="#LOCKING"><i class="parameter"><tt>locking</tt></i></a></p></li><li><p><a href="#LPPAUSECOMMAND"><i class="parameter"><tt>lppause command</tt></i></a></p></li><li><p><a href="#LPQCOMMAND"><i class="parameter"><tt>lpq command</tt></i></a></p></li><li><p><a href="#LPRESUMECOMMAND"><i class="parameter"><tt>lpresume command</tt></i></a></p></li><li><p><a href="#LPRMCOMMAND"><i class="parameter"><tt>lprm command</tt></i></a></p></li><li><p><a href="#MAGICOUTPUT"><i class="parameter"><tt>magic output</tt></i></a></p></li><li><p><a href="#MAGICSCRIPT"><i class="parameter"><tt>magic script</tt></i></a></p></li><li><p><a href="#MANGLECASE"><i class="parameter"><tt>mangle case</tt></i></a></p></li><li><p><a href="#MANGLEDMAP"><i class="parameter"><tt>mangled map</tt></i></a></p></li><li><p><a href="#MANGLEDNAMES"><i class="parameter"><tt>mangled names</tt></i></a></p></li><li><p><a href="#MANGLINGCHAR"><i class="parameter"><tt>mangling char</tt></i></a></p></li><li><p><a href="#MAPACLINHERIT"><i class="parameter"><tt>map acl inherit</tt></i></a></p></li><li><p><a href="#MAPARCHIVE"><i class="parameter"><tt>map archive</tt></i></a></p></li><li><p><a href="#MAPHIDDEN"><i class="parameter"><tt>map hidden</tt></i></a></p></li><li><p><a href="#MAPSYSTEM"><i class="parameter"><tt>map system</tt></i></a></p></li><li><p><a href="#MAXCONNECTIONS"><i class="parameter"><tt>max connections</tt></i></a></p></li><li><p><a href="#MAXPRINTJOBS"><i class="parameter"><tt>max print jobs</tt></i></a></p></li><li><p><a href="#MAXREPORTEDPRINTJOBS"><i class="parameter"><tt>max reported print jobs</tt></i></a></p></li><li><p><a href="#MINPRINTSPACE"><i class="parameter"><tt>min print space</tt></i></a></p></li><li><p><a href="#MSDFSPROXY"><i class="parameter"><tt>msdfs proxy</tt></i></a></p></li><li><p><a href="#MSDFSROOT"><i class="parameter"><tt>msdfs root</tt></i></a></p></li><li><p><a href="#NTACLSUPPORT"><i class="parameter"><tt>nt acl support</tt></i></a></p></li><li><p><a href="#ONLYGUEST"><i class="parameter"><tt>only guest</tt></i></a></p></li><li><p><a href="#ONLYUSER"><i class="parameter"><tt>only user</tt></i></a></p></li><li><p><a href="#OPLOCKCONTENTIONLIMIT"><i class="parameter"><tt>oplock contention limit</tt></i></a></p></li><li><p><a href="#OPLOCKS"><i class="parameter"><tt>oplocks</tt></i></a></p></li><li><p><a href="#PATH"><i class="parameter"><tt>path</tt></i></a></p></li><li><p><a href="#POSIXLOCKING"><i class="parameter"><tt>posix locking</tt></i></a></p></li><li><p><a href="#POSTEXEC"><i class="parameter"><tt>postexec</tt></i></a></p></li><li><p><a href="#PREEXEC"><i class="parameter"><tt>preexec</tt></i></a></p></li><li><p><a href="#PREEXECCLOSE"><i class="parameter"><tt>preexec close</tt></i></a></p></li><li><p><a href="#PRESERVECASE"><i class="parameter"><tt>preserve case</tt></i></a></p></li><li><p><a href="#PRINTABLE"><i class="parameter"><tt>printable</tt></i></a></p></li><li><p><a href="#PRINTCAPNAME"><i class="parameter"><tt>printcap name</tt></i></a></p></li><li><p><a href="#PRINTCOMMAND"><i class="parameter"><tt>print command</tt></i></a></p></li><li><p><a href="#PRINTER"><i class="parameter"><tt>printer</tt></i></a></p></li><li><p><a href="#PRINTERADMIN"><i class="parameter"><tt>printer admin</tt></i></a></p></li><li><p><a href="#PRINTERNAME"><i class="parameter"><tt>printer name</tt></i></a></p></li><li><p><a href="#PRINTING"><i class="parameter"><tt>printing</tt></i></a></p></li><li><p><a href="#PRINTOK"><i class="parameter"><tt>print ok</tt></i></a></p></li><li><p><a href="#PROFILEACLS"><i class="parameter"><tt>profile acls</tt></i></a></p></li><li><p><a href="#PUBLIC"><i class="parameter"><tt>public</tt></i></a></p></li><li><p><a href="#QUEUEPAUSECOMMAND"><i class="parameter"><tt>queuepause command</tt></i></a></p></li><li><p><a href="#QUEUERESUMECOMMAND"><i class="parameter"><tt>queueresume command</tt></i></a></p></li><li><p><a href="#READLIST"><i class="parameter"><tt>read list</tt></i></a></p></li><li><p><a href="#READONLY"><i class="parameter"><tt>read only</tt></i></a></p></li><li><p><a href="#ROOTPOSTEXEC"><i class="parameter"><tt>root postexec</tt></i></a></p></li><li><p><a href="#ROOTPREEXEC"><i class="parameter"><tt>root preexec</tt></i></a></p></li><li><p><a href="#ROOTPREEXECCLOSE"><i class="parameter"><tt>root preexec close</tt></i></a></p></li><li><p><a href="#SECURITYMASK"><i class="parameter"><tt>security mask</tt></i></a></p></li><li><p><a href="#SETDIRECTORY"><i class="parameter"><tt>set directory</tt></i></a></p></li><li><p><a href="#SHAREMODES"><i class="parameter"><tt>share modes</tt></i></a></p></li><li><p><a href="#SHORTPRESERVECASE"><i class="parameter"><tt>short preserve case</tt></i></a></p></li><li><p><a href="#STRICTALLOCATE"><i class="parameter"><tt>strict allocate</tt></i></a></p></li><li><p><a href="#STRICTLOCKING"><i class="parameter"><tt>strict locking</tt></i></a></p></li><li><p><a href="#STRICTSYNC"><i class="parameter"><tt>strict sync</tt></i></a></p></li><li><p><a href="#SYNCALWAYS"><i class="parameter"><tt>sync always</tt></i></a></p></li><li><p><a href="#USECLIENTDRIVER"><i class="parameter"><tt>use client driver</tt></i></a></p></li><li><p><a href="#USER"><i class="parameter"><tt>user</tt></i></a></p></li><li><p><a href="#USERNAME"><i class="parameter"><tt>username</tt></i></a></p></li><li><p><a href="#USERS"><i class="parameter"><tt>users</tt></i></a></p></li><li><p><a href="#USESENDFILE"><i class="parameter"><tt>use sendfile</tt></i></a></p></li><li><p><a href="#-VALID"><i class="parameter"><tt>-valid</tt></i></a></p></li><li><p><a href="#VALIDUSERS"><i class="parameter"><tt>valid users</tt></i></a></p></li><li><p><a href="#VETOFILES"><i class="parameter"><tt>veto files</tt></i></a></p></li><li><p><a href="#VETOOPLOCKFILES"><i class="parameter"><tt>veto oplock files</tt></i></a></p></li><li><p><a href="#VFSOBJECT"><i class="parameter"><tt>vfs object</tt></i></a></p></li><li><p><a href="#VFSOBJECTS"><i class="parameter"><tt>vfs objects</tt></i></a></p></li><li><p><a href="#VOLUME"><i class="parameter"><tt>volume</tt></i></a></p></li><li><p><a href="#WIDELINKS"><i class="parameter"><tt>wide links</tt></i></a></p></li><li><p><a href="#WRITABLE"><i class="parameter"><tt>writable</tt></i></a></p></li><li><p><a href="#WRITEABLE"><i class="parameter"><tt>writeable</tt></i></a></p></li><li><p><a href="#WRITECACHESIZE"><i class="parameter"><tt>write cache size</tt></i></a></p></li><li><p><a href="#WRITELIST"><i class="parameter"><tt>write list</tt></i></a></p></li><li><p><a href="#WRITEOK"><i class="parameter"><tt>write ok</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>EXPLANATION OF EACH PARAMETER</h2><div class="variablelist"><dl><dt><span class="term"><a name="ABORTSHUTDOWNSCRIPT"></a>abort shutdown script (G)</span></dt><dd><p><span class="emphasis"><em>This parameter only exists in the HEAD cvs branch</em></span> This a full path name to a script called by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should stop a shutdown procedure issued by the <a href="#SHUTDOWNSCRIPT"> <i class="parameter"><tt>shutdown script</tt></i></a>.</p><p>This command will be run as user.</p><p>Default: <span class="emphasis"><em>None</em></span>.</p><p>Example: <b class="command">abort shutdown script = /sbin/shutdown -c</b></p></dd><dt><span class="term"><a name="ADDGROUPSCRIPT"></a>add group script (G)</span></dt><dd><p>This is the full pathname to a script that will be run @@ -504,12 +504,27 @@ alias|alias|alias|alias... See also <a href="#ADDSHARECOMMAND"><i class="parameter"><tt>add share command</tt></i></a>, <a href="#DELETESHARECOMMAND"><i class="parameter"><tt>delete share command</tt></i></a>. - </p><p>Default: <span class="emphasis"><em>none</em></span></p><p>Example: <b class="command">change share command = /usr/local/bin/addshare</b></p></dd><dt><span class="term"><a name="CLIENTUSESPNEGO"></a>client use spnego (G)</span></dt><dd><p> This variable controls controls whether samba clients will try + </p><p>Default: <span class="emphasis"><em>none</em></span></p><p>Example: <b class="command">change share command = /usr/local/bin/addshare</b></p></dd><dt><span class="term"><a name="CLIENTLANMANAUTH"></a>client lanman auth (G)</span></dt><dd><p>This parameter determines whether or not <a href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client + tools will attempt to authenticate itself to servers using the + weaker LANMAN password hash. If disabled, only server which support NT + password hashes (e.g. Windows NT/2000, Samba, etc... but not + Windows 95/98) will be able to be connected from the Samba client.</p><p>The LANMAN encrypted response is easily broken, due to it's + case-insensitive nature, and the choice of algorithm. Clients + without Windows 95/98 servers are advised to disable + this option. </p><p>Disabling this option will also disable the <b class="command">client plaintext auth</b> option</p><p>Likewise, if the <b class="command">client ntlmv2 + auth</b> parameter is enabled, then only NTLMv2 logins will be + attempted. Not all servers support NTLMv2, and most will require + special configuration to us it.</p><p>Default : <b class="command">client lanman auth = yes</b></p></dd><dt><span class="term"><a name="CLIENTNTLMV2AUTH"></a>client ntlmv2 auth (G)</span></dt><dd><p>This parameter determines whether or not <a href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to + authenticate itself to servers using the NTLMv2 encrypted password + response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more + secure than earlier versions) will be sent. Many servers + (including NT4 < SP4, Win9x and Samba 2.2) are not compatible with + NTLMv2. </p><p>If disabled, an NTLM response (and possibly a LANMAN response) + will be sent by the client, depending on the value of <b class="command">client lanman auth</b>. </p><p>Note that some sites (particularly + those following 'best practice' security polices) only allow NTLMv2 + responses, and not the weaker LM or NTLM.</p><p>Default : <b class="command">client ntlmv2 auth = no</b></p></dd><dt><span class="term"><a name="CLIENTUSESPNEGO"></a>client use spnego (G)</span></dt><dd><p> This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism. - SPNEGO client support with Sign and Seal is currently broken, so - you might want to turn this option off when doing joins to - Windows 2003 domains. </p><p>Default: <span class="emphasis"><em>client use spnego = yes</em></span></p></dd><dt><span class="term"><a name="COMMENT"></a>comment (S)</span></dt><dd><p>This is a text field that is seen next to a share when a client does a queries the server, either via the network neighborhood or via <b class="command">net view</b> to list what shares @@ -569,7 +584,7 @@ alias|alias|alias|alias... boolean parameter adds microsecond resolution to the timestamp message header when turned on.</p><p>Note that the parameter <a href="#DEBUGTIMESTAMP"><i class="parameter"><tt> debug timestamp</tt></i></a> must be on for this to have an - effect.</p><p>Default: <b class="command">debug hires timestamp = no</b></p></dd><dt><span class="term"><a name="DEBUGLEVEL"></a>debug level (G)</span></dt><dd><p>Synonym for <a href="#LOGLEVEL"><i class="parameter"><tt> + effect.</p><p>Default: <b class="command">debug hires timestamp = no</b></p></dd><dt><span class="term"><a name="DEBUGLEVEL"></a>debuglevel (G)</span></dt><dd><p>Synonym for <a href="#LOGLEVEL"><i class="parameter"><tt> log level</tt></i></a>.</p></dd><dt><span class="term"><a name="DEBUGPID"></a>debug pid (G)</span></dt><dd><p>When using only one log file for more then one forked <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which message. This boolean parameter @@ -857,7 +872,14 @@ df $1 | tail -1 | awk '{print $2" "$4}' timestamp on a file if the user <b class="command">smbd</b> is acting on behalf of is not the file owner. Setting this option to <tt class="constant"> yes</tt> allows DOS semantics and <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will change the file - timestamp as DOS requires.</p><p>Default: <b class="command">dos filetimes = no</b></p></dd><dt><span class="term"><a name="ENCRYPTPASSWORDS"></a>encrypt passwords (G)</span></dt><dd><p>This boolean controls whether encrypted passwords + timestamp as DOS requires.</p><p>Default: <b class="command">dos filetimes = no</b></p></dd><dt><span class="term"><a name="ENABLERIDALGORITHM"></a>enable rid algorithm (G)</span></dt><dd><p>This option is used to control whether or not smbd in Samba 3.0 should fallback + to the algorithm used by Samba 2.2 to generate user and group RIDs. The longterm + development goal is to remove the algorithmic mappings of RIDs altogether, but + this has proved to be difficult. This parameter is mainly provided so that + developers can turn the algorithm on and off and see what breaks. This parameter + should not be disabled by non-developers because certain features in Samba will fail + to work without it. + </p><p>Default: <b class="command">enable rid algorithm = <yes></b></p></dd><dt><span class="term"><a name="ENCRYPTPASSWORDS"></a>encrypt passwords (G)</span></dt><dd><p>This boolean controls whether encrypted passwords will be negotiated with the client. Note that Windows NT 4.0 SP3 and above and also Windows 98 will by default expect encrypted passwords unless a registry entry is changed. To use encrypted passwords in @@ -1579,7 +1601,7 @@ df $1 | tail -1 | awk '{print $2" "$4}' copied between UNIX directories from Windows/DOS while retaining the long UNIX filename. UNIX files can be renamed to a new extension from Windows/DOS and will retain the same basename. Mangled names - do not change between sessions.</p><p>Default: <b class="command">mangled names = yes</b></p></dd><dt><span class="term"><a name="MANGLINGSTACK"></a>mangling stack (G)</span></dt><dd><p>This parameter controls the number of mangled names + do not change between sessions.</p><p>Default: <b class="command">mangled names = yes</b></p></dd><dt><span class="term"><a name="MANGLEDSTACK"></a>mangled stack (G)</span></dt><dd><p>This parameter controls the number of mangled names that should be cached in the Samba server <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p><p>This stack is a list of recently mangled base names (extensions are only maintained if they are longer than 3 characters or contains upper case characters).</p><p>The larger this value, the more likely it is that mangled @@ -1587,7 +1609,7 @@ df $1 | tail -1 | awk '{print $2" "$4}' However, large stack sizes will slow most directory accesses. Smaller stacks save memory in the server (each stack element costs 256 bytes). </p><p>It is not possible to absolutely guarantee correct long - filenames, so be prepared for some surprises!</p><p>Default: <b class="command">mangled stack = 50</b></p><p>Example: <b class="command">mangled stack = 100</b></p></dd><dt><span class="term"><a name="MANGLINGPREFIX"></a>mangling prefix (G)</span></dt><dd><p> controls the number of prefix + filenames, so be prepared for some surprises!</p><p>Default: <b class="command">mangled stack = 50</b></p><p>Example: <b class="command">mangled stack = 100</b></p></dd><dt><span class="term"><a name="MANGLEPREFIX"></a>mangle prefix (G)</span></dt><dd><p> controls the number of prefix characters from the original name used when generating the mangled names. A larger value will give a weaker hash and therefore more name collisions. The minimum @@ -1842,16 +1864,7 @@ df $1 | tail -1 | awk '{print $2" "$4}' <i class="parameter"><tt>homedir map</tt></i></a> and return the server listed there.</p><p>Note that for this option to work there must be a working NIS system and the Samba server with this option must also - be a logon server.</p><p>Default: <b class="command">nis homedir = no</b></p></dd><dt><span class="term"><a name="NONUNIXACCOUNTRANGE"></a>non unix account range (G)</span></dt><dd><p>The non unix account range parameter specifies - the range of 'user ids' that are allocated by the various 'non unix - account' passdb backends. These backends allow - the storage of passwords for users who don't exist in /etc/passwd. - This is most often used for machine account creation. - This range of ids should have no existing local or NIS users within - it as strange conflicts can occur otherwise.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>These userids never appear on the system and Samba will never - 'become' these users. They are used only to ensure that the algorithmic - RID mapping does not conflict with normal users. - </p></div><p>Default: <b class="command">non unix account range = <empty string></b></p><p>Example: <b class="command">non unix account range = 10000-20000</b></p></dd><dt><span class="term"><a name="NTACLSUPPORT"></a>nt acl support (S)</span></dt><dd><p>This boolean parameter controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map + be a logon server.</p><p>Default: <b class="command">nis homedir = no</b></p></dd><dt><span class="term"><a name="NTACLSUPPORT"></a>nt acl support (S)</span></dt><dd><p>This boolean parameter controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map UNIX permissions into Windows NT access control lists. This parameter was formally a global parameter in releases prior to 2.2.2.</p><p>Default: <b class="command">nt acl support = yes</b></p></dd><dt><span class="term"><a name="NTLMAUTH"></a>ntlm auth (G)</span></dt><dd><p>This parameter determines whether or not <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to @@ -1953,15 +1966,15 @@ df $1 | tail -1 | awk '{print $2" "$4}' to the logs and exit. </p><p>Disabling this option prevents Samba from making this check, which involves deliberatly attempting a - bad logon to the remote server.</p><p>Default: <b class="command">paranoid server security = yes</b></p></dd><dt><span class="term"><a name="PASSDBBACKEND"></a>passdb backend (G)</span></dt><dd><p>This option allows the administrator to chose which backends + bad logon to the remote server.</p><p>Default: <b class="command">paranoid server security = yes</b></p></dd><dt><span class="term"><a name="PASSDBBACKEND"></a>passdb backend (G)</span></dt><dd xmlns:ns1=""><p>This option allows the administrator to chose which backends to retrieve and store passwords with. This allows (for example) both smbpasswd and tdbsam to be used without a recompile. Multiple backends can be specified, separated by spaces. The backends will be searched in the order they are specified. New users are always added to the first backend specified. </p><p>This parameter is in two parts, the backend's name, and a 'location' string that has meaning only to that particular backed. These are separated - by a : character.</p><p>Available backends can include: - </p><div class="itemizedlist"><ul type="disc"><li><p><b class="command">smbpasswd</b> - The default smbpasswd + by a : character.</p><ns1:p>Available backends can include: + </ns1:p><div class="itemizedlist"><ul type="disc"><li><p><b class="command">smbpasswd</b> - The default smbpasswd backend. Takes a path to the smbpasswd file as an optional argument. </p></li><li><p><b class="command">tdbsam</b> - The TDB based password storage backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb @@ -1982,8 +1995,8 @@ df $1 | tail -1 | awk '{print $2" "$4}' Very simple backend that only provides one user: the guest user. Only maps the NT guest user to the <i class="parameter"><tt>guest account</tt></i>. Required in pretty much all situations. - </p></li></ul></div><p> - </p><p>Default: <b class="command">passdb backend = smbpasswd</b></p><p>Example: <b class="command">passdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd guest</b></p><p>Example: <b class="command">passdb backend = ldapsam:ldaps://ldap.example.com guest</b></p><p>Example: <b class="command">passdb backend = mysql:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb guest</b></p></dd><dt><span class="term"><a name="PASSWDCHAT"></a>passwd chat (G)</span></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> + </p></li></ul></div><ns1:p> + </ns1:p><p>Default: <b class="command">passdb backend = smbpasswd</b></p><p>Example: <b class="command">passdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd guest</b></p><p>Example: <b class="command">passdb backend = ldapsam:ldaps://ldap.example.com guest</b></p><p>Example: <b class="command">passdb backend = mysql:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb guest</b></p></dd><dt><span class="term"><a name="PASSWDCHAT"></a>passwd chat (G)</span></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> conversation that takes places between <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing program to change the user's password. The string describes a sequence of response-receive pairs that <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> uses to determine what to send to the @@ -2272,7 +2285,29 @@ print5|My Printer 5 <i class="parameter"><tt>printable</tt></i></a>.</p></dd><dt><span class="term"><a name="PRIVATEDIR"></a>private dir (G)</span></dt><dd><p>This parameters defines the directory smbd will use for storing such files as <tt class="filename">smbpasswd</tt> and <tt class="filename">secrets.tdb</tt>. - </p><p>Default :<b class="command">private dir = ${prefix}/private</b></p></dd><dt><span class="term"><a name="PROTOCOL"></a>protocol (G)</span></dt><dd><p>Synonym for <a href="#MAXPROTOCOL"> + </p><p>Default :<b class="command">private dir = ${prefix}/private</b></p></dd><dt><span class="term"><a name="PROFILEACLS"></a>profile acls (S)</span></dt><dd><p>This boolean parameter controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> + This boolean parameter was added to fix the problems that people have been + having with storing user profiles on Samba shares from Windows 2000 or + Windows XP clients. New versions of Windows 2000 or Windows XP service + packs do security ACL checking on the owner and ability to write of the + profile directory stored on a local workstation when copied from a Samba + share. When not in domain mode with winbindd then the security info copied + onto the local workstation has no meaning to the logged in user (SID) on + that workstation so the profile storing fails. Adding this parameter + onto a share used for profile storage changes two things about the + returned Windows ACL. Firstly it changes the owner and group owner + of all reported files and directories to be BUILTIN\\Administrators, + BUILTIN\\Users respectively (SIDs S-1-5-32-544, S-1-5-32-545). Secondly + it adds an ACE entry of "Full Control" to the SID BUILTIN\\Users to + every returned ACL. This will allow any Windows 2000 or XP workstation + user to access the profile. Note that if you have multiple users logging + on to a workstation then in order to prevent them from being able to access + each others profiles you must remove the "Bypass traverse checking" advanced + user right. This will prevent access to other users profile directories as + the top level profile directory (named after the user) is created by the + workstation profile code and has an ACL restricting entry to the directory + tree to the owning user. + </p><p>Default: <b class="command">profile acls = no</b></p></dd><dt><span class="term"><a name="PROTOCOL"></a>protocol (G)</span></dt><dd><p>Synonym for <a href="#MAXPROTOCOL"> <i class="parameter"><tt>max protocol</tt></i></a>.</p></dd><dt><span class="term"><a name="PUBLIC"></a>public (S)</span></dt><dd><p>Synonym for <a href="#GUESTOK"><i class="parameter"><tt>guest ok</tt></i></a>.</p></dd><dt><span class="term"><a name="QUEUEPAUSECOMMAND"></a>queuepause command (S)</span></dt><dd><p>This parameter specifies the command to be executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes @@ -2536,7 +2571,7 @@ print5|My Printer 5 does not support them. However note that if encrypted passwords have been negotiated then Samba cannot revert back to checking the UNIX password file, it must have a valid <tt class="filename">smbpasswd</tt> file to check - users against. See the chapter about the User Database in the Samba HOWTO Collection for details on how to set this up.</p><p><span class="emphasis"><em>Note</em></span> this mode of operation has + users against. See the chapter about the User Database in the Samba HOWTO Collection for details on how to set this up.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This mode of operation has significant pitfalls, due to the fact that is activly initiates a man-in-the-middle attack on the remote SMB server. In particular, this mode of operation can cause significant resource consuption on @@ -2544,11 +2579,11 @@ print5|My Printer 5 of the user's session. Furthermore, if this connection is lost, there is no way to reestablish it, and futher authenticaions to the Samba server may fail. (From a single client, till it disconnects). - </p><p><span class="emphasis"><em>Note</em></span> that from the client's point of + </p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>From the client's point of view <b class="command">security = server</b> is the same as <b class="command">security = user</b>. It only affects how the server deals with the authentication, it does - not in any way affect what the client sees.</p><p><span class="emphasis"><em>Note</em></span> that the name of the resource being + not in any way affect what the client sees.</p></div><p><span class="emphasis"><em>Note</em></span> that the name of the resource being requested is <span class="emphasis"><em>not</em></span> sent to the server until after the server has successfully authenticated the client. This is why guest shares don't work in user level security without allowing @@ -2558,6 +2593,13 @@ print5|My Printer 5 </a> parameter for details on doing this.</p><p>See also the section <a href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION"> NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a href="#PASSWORDSERVER"><i class="parameter"><tt>password server</tt></i></a> parameter and the <a href="#ENCRYPTPASSWORDS"> + <i class="parameter"><tt>encrypted passwords</tt></i></a> parameter.</p><p><a name="SECURITYEQUALSADS"></a><span class="emphasis"><em>SECURITY = ADS</em></span></p><p>In this mode, Samba will act as a domain member in an ADS realm. To operate + in this mode, the machine running Samba will need to have Kerberos installed + and configured and Samba will need to be joined to the ADS realm using the + net utility. </p><p>Note that this mode does NOT make Samba operate as a Active Directory Domain + Controller. </p><p>Read the chapter about Domain Membership in the HOWTO for details.</p><p>See also the <a href="#"><i class="parameter"><tt>ads server + </tt></i></a> parameter, the <a href="#REALM"><i class="parameter"><tt>realm + </tt></i></a> paramter and the <a href="#ENCRYPTPASSWORDS"> <i class="parameter"><tt>encrypted passwords</tt></i></a> parameter.</p><p>Default: <b class="command">security = USER</b></p><p>Example: <b class="command">security = DOMAIN</b></p></dd><dt><span class="term"><a name="SECURITYMASK"></a>security mask (S)</span></dt><dd><p>This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating the UNIX permission on a file using the native NT security @@ -2640,7 +2682,7 @@ print5|My Printer 5 administrative privilege on an individual printer.</p><p>See also <a href="#ADDPRINTERCOMMAND"><i class="parameter"><tt>addprinter command</tt></i></a>, <a href="#DELETEPRINTERCOMMAND"> <i class="parameter"><tt>deleteprinter command</tt></i></a>, <a href="#PRINTERADMIN"> - <i class="parameter"><tt>printer admin</tt></i></a></p><p>Default :<b class="command">show add printer wizard = yes</b></p></dd><dt><span class="term"><a name="SHUTDOWNSCRIPT"></a>shutdown script (G)</span></dt><dd><p><span class="emphasis"><em>This parameter only exists in the HEAD cvs branch</em></span> + <i class="parameter"><tt>printer admin</tt></i></a></p><p>Default :<b class="command">show add printer wizard = yes</b></p></dd><dt><span class="term"><a name="SHUTDOWNSCRIPT"></a>shutdown script (G)</span></dt><dd xmlns:ns2=""><p><span class="emphasis"><em>This parameter only exists in the HEAD cvs branch</em></span> This a full path name to a script called by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should start a shutdown procedure.</p><p>This command will be run as the user connected to the server.</p><p>%m %t %r %f parameters are expanded:</p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>%m</tt></i> will be substituted with the shutdown message sent to the server.</p></li><li><p><i class="parameter"><tt>%t</tt></i> will be substituted with the number of seconds to wait before effectively starting the @@ -2648,8 +2690,8 @@ print5|My Printer 5 switch <span class="emphasis"><em>-r</em></span>. It means reboot after shutdown for NT.</p></li><li><p><i class="parameter"><tt>%f</tt></i> will be substituted with the switch <span class="emphasis"><em>-f</em></span>. It means force the shutdown - even if applications do not respond for NT.</p></li></ul></div><p>Default: <span class="emphasis"><em>None</em></span>.</p><p>Example: <b class="command">abort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f</b></p><p>Shutdown script example: -</p><pre class="programlisting"> + even if applications do not respond for NT.</p></li></ul></div><p>Default: <span class="emphasis"><em>None</em></span>.</p><p>Example: <b class="command">abort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f</b></p><ns2:p>Shutdown script example: +</ns2:p><pre class="programlisting"> #!/bin/bash $time=0 @@ -2657,9 +2699,9 @@ let "time/60" let "time++" /sbin/shutdown $3 $4 +$time $1 & -</pre><p> +</pre><ns2:p> Shutdown does not return so we need to launch it in background. -</p><p>See also <a href="#ABORTSHUTDOWNSCRIPT"> +</ns2:p><p>See also <a href="#ABORTSHUTDOWNSCRIPT"> <i class="parameter"><tt>abort shutdown script</tt></i></a>.</p></dd><dt><span class="term"><a name="SMBPASSWDFILE"></a>smb passwd file (G)</span></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By default the path to the smbpasswd file is compiled into Samba.</p><p>Default: <b class="command">smb passwd file = ${prefix}/private/smbpasswd</b></p><p>Example: <b class="command">smb passwd file = /etc/samba/smbpasswd</b></p></dd><dt><span class="term"><a name="SMBPORTS"></a>smb ports (G)</span></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <b class="command">smb ports = 445 139</b></p></dd><dt><span class="term"><a name="SOCKETADDRESS"></a>socket address (G)</span></dt><dd><p>This option allows you to control what address Samba will listen for connections on. This is used to @@ -2696,9 +2738,7 @@ Shutdown does not return so we need to launch it in background. be formatted as the output of the standard Unix <b class="command">env(1)</b> command. This is of the form:</p><p>Example environment entry:</p><p><b class="command">SAMBA_NETBIOS_NAME = myhostname</b></p><p>Default: <span class="emphasis"><em>No default value</em></span></p><p>Examples: <b class="command">source environment = |/etc/smb.conf.sh</b></p><p>Example: <b class="command">source environment = /usr/local/smb_env_vars</b></p></dd><dt><span class="term"><a name="STATCACHE"></a>stat cache (G)</span></dt><dd><p>This parameter determines if <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to speed up case insensitive name mappings. You should never need - to change this parameter.</p><p>Default: <b class="command">stat cache = yes</b></p></dd><dt><span class="term"><a name="STATCACHESIZE"></a>stat cache size (G)</span></dt><dd><p>This parameter determines the number of - entries in the <i class="parameter"><tt>stat cache</tt></i>. You should - never need to change this parameter.</p><p>Default: <b class="command">stat cache size = 50</b></p></dd><dt><span class="term"><a name="STRICTALLOCATE"></a>strict allocate (S)</span></dt><dd><p>This is a boolean that controls the handling of + to change this parameter.</p><p>Default: <b class="command">stat cache = yes</b></p></dd><dt><span class="term"><a name="STRICTALLOCATE"></a>strict allocate (S)</span></dt><dd><p>This is a boolean that controls the handling of disk space allocation in the server. When this is set to <tt class="constant">yes</tt> the server will change from UNIX behaviour of not committing real disk storage blocks when a file is extended to the Windows behaviour @@ -2755,7 +2795,10 @@ Shutdown does not return so we need to launch it in background. string <i class="parameter"><tt>%D</tt></i> is present it is substituted with the user's Windows NT domain name. If the string <i class="parameter"><tt>%U</tt></i> is present it - is substituted with the user's Windows NT user name.</p><p>Default: <b class="command">template homedir = /home/%D/%U</b></p></dd><dt><span class="term"><a name="TEMPLATESHELL"></a>template shell (G)</span></dt><dd><p>When filling out the user information for a Windows NT + is substituted with the user's Windows NT user name.</p><p>Default: <b class="command">template homedir = /home/%D/%U</b></p></dd><dt><span class="term"><a name="TEMPLATEPRIMARYGROUP"></a>template primary group (G)</span></dt><dd><p>This option defines the default primary group for + each user created by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>'s local account management + functions (similar to the 'add user script'). + </p><p>Default: <b class="command">template primary group = nobody</b></p></dd><dt><span class="term"><a name="TEMPLATESHELL"></a>template shell (G)</span></dt><dd><p>When filling out the user information for a Windows NT user, the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this parameter to fill in the login shell for that user.</p><p>Default: <b class="command">template shell = /bin/false</b></p></dd><dt><span class="term"><a name="TIMEOFFSET"></a>time offset (G)</span></dt><dd><p>This parameter is a setting in minutes to add to the normal GMT to local time conversion. This is useful if @@ -2974,7 +3017,7 @@ guest = * users</tt></i> list then access is denied for that user.</p><p>The current servicename is substituted for <i class="parameter"><tt>%S </tt></i>. This is useful in the [homes] section.</p><p>See also <a href="#INVALIDUSERS"><i class="parameter"><tt>invalid users </tt></i></a></p><p>Default: <span class="emphasis"><em>No valid users list (anyone can login) - </em></span></p><p>Example: <b class="command">valid users = greg, @pcusers</b></p></dd><dt><span class="term"><a name="VETOFILES"></a>veto files (S)</span></dt><dd><p>This is a list of files and directories that + </em></span></p><p>Example: <b class="command">valid users = greg, @pcusers</b></p></dd><dt><span class="term"><a name="VETOFILES"></a>veto files (S)</span></dt><dd xmlns:ns3=""><p>This is a list of files and directories that are neither visible nor accessible. Each entry in the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' can be used to specify multiple files @@ -2992,8 +3035,8 @@ guest = * for a match as they are scanned.</p><p>See also <a href="#HIDEFILES"><i class="parameter"><tt>hide files </tt></i></a> and <a href="#CASESENSITIVE"><i class="parameter"><tt> case sensitive</tt></i></a>.</p><p>Default: <span class="emphasis"><em>No files or directories are vetoed. - </em></span></p><p>Examples: -</p><pre class="programlisting"> + </em></span></p><ns3:p>Examples: +</ns3:p><pre class="programlisting"> ; Veto any files containing the word Security, ; any ending in .tmp, and any directory containing the ; word root. @@ -3032,7 +3075,13 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/ that Samba has to do in order to perform the link checks.</p><p>Default: <b class="command">wide links = yes</b></p></dd><dt><span class="term"><a name="WINBINDCACHETIME"></a>winbind cache time (G)</span></dt><dd><p>This parameter specifies the number of seconds the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache user and group information before querying a Windows NT server - again.</p><p>Default: <b class="command">winbind cache type = 15</b></p></dd><dt><span class="term"><a name="WINBINDENUMGROUPS"></a>winbind enum groups (G)</span></dt><dd><p>On large installations using <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress + again.</p><p>Default: <b class="command">winbind cache type = 15</b></p></dd><dt><span class="term"><a name="WINBINDENABLELOCALACCOUNTS"></a>winbind enable local accounts (G)</span></dt><dd><p>This parameter controls whether or not winbindd + will act as a stand in replacement for the various account + management hooks in smb.conf (e.g. 'add user script'). + If enabled, winbindd will support the creation of local + users and groups as another source of UNIX account information + available via getpwnam() or getgrgid(), etc... + </p><p>Default: <b class="command">winbind enable local accounts = yes</b></p></dd><dt><span class="term"><a name="WINBINDENUMGROUPS"></a>winbind enum groups (G)</span></dt><dd><p>On large installations using <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress the enumeration of groups through the <b class="command">setgrent()</b>, <b class="command">getgrent()</b> and <b class="command">endgrent()</b> group of system calls. If @@ -3060,10 +3109,16 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/ and <tt class="filename">nss_winbind.so</tt> modules for UNIX services. </p><p>Please note that setting this parameter to + causes problems with group membership at least on glibc systems, as the character + - is used as a special character for NIS in /etc/group.</p><p>Default: <b class="command">winbind separator = '\'</b></p><p>Example: <b class="command">winbind separator = +</b></p></dd><dt><span class="term"><a name="WINBINDUID"></a>winbind uid (G)</span></dt><dd><p>This parameter is now an alias for <b class="command">idmap uid</b></p><p>The winbind gid parameter specifies the range of user ids that are allocated by the + is used as a special character for NIS in /etc/group.</p><p>Default: <b class="command">winbind separator = '\'</b></p><p>Example: <b class="command">winbind separator = +</b></p></dd><dt><span class="term"><a name="WINBINDTRUSTEDDOMAINSONLY"></a>winbind trusted domains only (G)</span></dt><dd><p>This parameter is designed to allow Samba servers that + are members of a Samba controlled domain to use UNIX accounts + distributed vi NIS, rsync, or LDAP as the uid's for winbindd users + in the hosts primary domain. Therefore, the user 'SAMBA\user1' would + be mapped to the account 'user1' in /etc/passwd instead of allocating + a new uid for him or her. + </p><p>Default: <b class="command">winbind trusted domains only = <no></b></p></dd><dt><span class="term"><a name="WINBINDUID"></a>winbind uid (G)</span></dt><dd><p>This parameter is now an alias for <b class="command">idmap uid</b></p><p>The winbind gid parameter specifies the range of user ids that are allocated by the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon. This range of ids should have no existing local or NIS users within it as strange - conflicts can occur otherwise.</p><p>Default: <b class="command">winbind uid = <empty string></b></p><p>Example: <b class="command">winbind uid = 10000-20000</b></p></dd><dt><span class="term"><a name="WINBINDUSEDDEFAULTDOMAIN"></a>winbind used default domain (G)</span></dt><dd><p>This parameter specifies whether the + conflicts can occur otherwise.</p><p>Default: <b class="command">winbind uid = <empty string></b></p><p>Example: <b class="command">winbind uid = 10000-20000</b></p></dd><dt><span class="term"><a name="WINBINDUSEDEFAULTDOMAIN"></a>winbind use default domain (G)</span></dt><dd><p>This parameter specifies whether the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users without domain component in their username. Users without a domain component are treated as is part of the winbindd server's own @@ -3090,7 +3145,7 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/ addresses currently registered for that name. If this list is empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update program <b class="command">nsupdate</b> is provided in the examples - directory of the Samba source code. </p></dd><dt><span class="term"><a name="WINSPARTNER"></a>wins partner (G)</span></dt><dd><p>A space separated list of partners' IP addresses for + directory of the Samba source code. </p></dd><dt><span class="term"><a name="WINSPARTNERS"></a>wins partners (G)</span></dt><dd><p>A space separated list of partners' IP addresses for WINS replication. WINS partners are always defined as push/pull partners as defining only one way WINS replication is unreliable. WINS replication is currently experimental and unreliable between diff --git a/docs/htmldocs/smbcontrol.1.html b/docs/htmldocs/smbcontrol.1.html index 21344b9ade..553a9e9163 100644 --- a/docs/htmldocs/smbcontrol.1.html +++ b/docs/htmldocs/smbcontrol.1.html @@ -58,7 +58,9 @@ compile time.</p></dd><dt><span class="term">-i</span></dt><dd><p>Run interactiv talloc(pool) memory usage by the specified daemon/process. Available for both smbd and nmbd.</p></dd><dt><span class="term">drvupgrade</span></dt><dd><p>Force clients of printers using specified driver to update their local version of the driver. Can only be - sent to smbd.</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>VERSION</h2><p>This man page is correct for version 3.0 of + sent to smbd.</p></dd><dt><span class="term">reload-config</span></dt><dd><p>Force daemon to reload smb.conf configuration file. Can be sent + to <tt class="constant">smbd</tt>, <tt class="constant">nmbd</tt>, or <tt class="constant">winbindd</tt>. + </p></dd></dl></div></div><div class="refsect1" lang="en"><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><h2>SEE ALSO</h2><p><a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> and <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p></div><div class="refsect1" lang="en"><h2>AUTHOR</h2><p>The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff --git a/docs/htmldocs/smbmount.8.html b/docs/htmldocs/smbmount.8.html index 233dee51d7..eff8fea825 100644 --- a/docs/htmldocs/smbmount.8.html +++ b/docs/htmldocs/smbmount.8.html @@ -29,9 +29,9 @@ on the command line. However, the same password defined in the PASSWD environment variable or a credentials file (see below) will be read correctly. - </p></dd><dt><span class="term">credentials=<filename></span></dt><dd><p>specifies a file that contains a username and/or password. + </p></dd><dt><span class="term">credentials=<filename></span></dt><dd xmlns:ns1=""><ns1:p>specifies a file that contains a username and/or password. The format of the file is: -</p><pre class="programlisting"> +</ns1:p><pre class="programlisting"> username = <value> password = <value> </pre><p>This is preferred over having passwords in plaintext in a diff --git a/docs/htmldocs/smbsh.1.html b/docs/htmldocs/smbsh.1.html index 935576af6b..4ef2244bb7 100644 --- a/docs/htmldocs/smbsh.1.html +++ b/docs/htmldocs/smbsh.1.html @@ -74,11 +74,11 @@ this parameter or any entry in the <i class="parameter"><tt>name resolve order will be attempted in this order. </p></dd><dt><span class="term">-L libdir</span></dt><dd><p>This parameter specifies the location of the shared libraries used by <b class="command">smbsh</b>. The default value is specified at compile time. - </p></dd></dl></div></div><div class="refsect1" lang="en"><h2>EXAMPLES</h2><p>To use the <b class="command">smbsh</b> command, execute <b class="command"> + </p></dd></dl></div></div><div xmlns:ns1="" class="refsect1" lang="en"><h2>EXAMPLES</h2><ns1:p>To use the <b class="command">smbsh</b> command, execute <b class="command"> smbsh</b> from the prompt and enter the username and password that authenticates you to the machine running the Windows NT operating system. -</p><pre class="programlisting"> +</ns1:p><pre class="programlisting"> <tt class="prompt">system% </tt><b class="userinput"><tt>smbsh</tt></b> <tt class="prompt">Username: </tt><b class="userinput"><tt>user</tt></b> <tt class="prompt">Password: </tt><b class="userinput"><tt>XXXXXXX</tt></b> diff --git a/docs/htmldocs/speed.html b/docs/htmldocs/speed.html index 626d5e0193..0033a05211 100644 --- a/docs/htmldocs/speed.html +++ b/docs/htmldocs/speed.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter39.Samba Performance Tuning</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients"><link rel="next" href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter39.Samba Performance Tuning</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Other-Clients.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="DNSDHCP.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="speed"></a>Chapter39.Samba Performance Tuning</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Cochrane</span></h3><div class="affiliation"><span class="orgname">Dundee Limb Fitting Centre<br></span><div class="address"><p><tt class="email"><<a href="mailto:paulc@dth.scot.nhs.uk">paulc@dth.scot.nhs.uk</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="speed.html#id3018768">Comparisons</a></dt><dt><a href="speed.html#id3018812">Socket options</a></dt><dt><a href="speed.html#id3018887">Read size</a></dt><dt><a href="speed.html#id3018931">Max xmit</a></dt><dt><a href="speed.html#id3018984">Log level</a></dt><dt><a href="speed.html#id3019007">Read raw</a></dt><dt><a href="speed.html#id3019064">Write raw</a></dt><dt><a href="speed.html#id3019106">Slow Logins</a></dt><dt><a href="speed.html#id3019127">Client tuning</a></dt><dt><a href="speed.html#id3019154">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id3019185">Corrupt tdb Files</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3018768"></a>Comparisons</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter39.Samba Performance Tuning</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients"><link rel="next" href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter39.Samba Performance Tuning</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Other-Clients.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="DNSDHCP.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="speed"></a>Chapter39.Samba Performance Tuning</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Cochrane</span></h3><div class="affiliation"><span class="orgname">Dundee Limb Fitting Centre<br></span><div class="address"><p><tt class="email"><<a href="mailto:paulc@dth.scot.nhs.uk">paulc@dth.scot.nhs.uk</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="speed.html#id3016725">Comparisons</a></dt><dt><a href="speed.html#id3014565">Socket options</a></dt><dt><a href="speed.html#id3014636">Read size</a></dt><dt><a href="speed.html#id3014680">Max xmit</a></dt><dt><a href="speed.html#id3014732">Log level</a></dt><dt><a href="speed.html#id3014755">Read raw</a></dt><dt><a href="speed.html#id3014811">Write raw</a></dt><dt><a href="speed.html#id3014853">Slow Logins</a></dt><dt><a href="speed.html#id3015761">Client tuning</a></dt><dt><a href="speed.html#id3015784">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id3015817">Corrupt tdb Files</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016725"></a>Comparisons</h2></div></div><div></div></div><p> The Samba server uses TCP to talk to the client. Thus if you are trying to see if it performs well you should really compare it to programs that use the same protocol. The most readily available @@ -20,7 +21,7 @@ suspect the biggest factor is not Samba vs some other system but the hardware and drivers used on the various systems. Given similar hardware Samba should certainly be competitive in speed with other systems. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3018812"></a>Socket options</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014565"></a>Socket options</h2></div></div><div></div></div><p> There are a number of socket options that can greatly affect the performance of a TCP based server like Samba. </p><p> @@ -39,7 +40,7 @@ biggest single difference for most networks. Many people report that adding <i class="parameter"><tt>socket options = TCP_NODELAY</tt></i> doubles the read performance of a Samba drive. The best explanation I have seen for this is that the Microsoft TCP/IP stack is slow in sending tcp ACKs. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3018887"></a>Read size</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014636"></a>Read size</h2></div></div><div></div></div><p> The option <i class="parameter"><tt>read size</tt></i> affects the overlap of disk reads/writes with network reads/writes. If the amount of data being transferred in several of the SMB commands (currently SMBwrite, SMBwriteX and @@ -56,7 +57,7 @@ The default value is 16384, but very little experimentation has been done yet to determine the optimal value, and it is likely that the best value will vary greatly between systems anyway. A value over 65536 is pointless and will cause you to allocate memory unnecessarily. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3018931"></a>Max xmit</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014680"></a>Max xmit</h2></div></div><div></div></div><p> At startup the client and server negotiate a <i class="parameter"><tt>maximum transmit</tt></i> size, which limits the size of nearly all SMB commands. You can set the maximum size that Samba will negotiate using the <i class="parameter"><tt>max xmit = </tt></i> option @@ -70,12 +71,12 @@ clients may perform better with a smaller transmit unit. Trying values of less than 2048 is likely to cause severe problems. </p><p> In most cases the default is the best option. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3018984"></a>Log level</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014732"></a>Log level</h2></div></div><div></div></div><p> If you set the log level (also known as <i class="parameter"><tt>debug level</tt></i>) higher than 2 then you may suffer a large drop in performance. This is because the server flushes the log file after each operation, which can be very expensive. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3019007"></a>Read raw</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014755"></a>Read raw</h2></div></div><div></div></div><p> The <i class="parameter"><tt>read raw</tt></i> operation is designed to be an optimised, low-latency file read operation. A server may choose to not support it, however. and Samba makes support for <i class="parameter"><tt>read raw</tt></i> optional, with it @@ -88,7 +89,7 @@ read operations. So you might like to try <i class="parameter"><tt>read raw = no</tt></i> and see what happens on your network. It might lower, raise or not affect your performance. Only testing can really tell. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3019064"></a>Write raw</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014811"></a>Write raw</h2></div></div><div></div></div><p> The <i class="parameter"><tt>write raw</tt></i> operation is designed to be an optimised, low-latency file write operation. A server may choose to not support it, however. and Samba makes support for <i class="parameter"><tt>write raw</tt></i> optional, with it @@ -96,15 +97,15 @@ being enabled by default. </p><p> Some machines may find <i class="parameter"><tt>write raw</tt></i> slower than normal write, in which case you may wish to change this option. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3019106"></a>Slow Logins</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014853"></a>Slow Logins</h2></div></div><div></div></div><p> Slow logins are almost always due to the password checking time. Using the lowest practical <i class="parameter"><tt>password level</tt></i> will improve things. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3019127"></a>Client tuning</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015761"></a>Client tuning</h2></div></div><div></div></div><p> Often a speed problem can be traced to the client. The client (for example Windows for Workgroups) can often be tuned for better TCP performance. Check the sections on the various clients in <a href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients">Samba and Other Clients</a>. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3019154"></a>Samba performance problem due changing kernel</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015784"></a>Samba performance problem due changing kernel</h2></div></div><div></div></div><p> Hi everyone. I am running Gentoo on my server and samba 2.2.8a. Recently I changed kernel version from linux-2.4.19-gentoo-r10 to linux-2.4.20-wolk4.0s. And now I have performance issue with samba. Ok @@ -119,7 +120,7 @@ Grab mii-tool and check the duplex settings on the NIC. My guess is that it is a link layer issue, not an application layer problem. Also run ifconfig and verify that the framing error, collisions, etc... look normal for ethernet. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3019185"></a>Corrupt tdb Files</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015817"></a>Corrupt tdb Files</h2></div></div><div></div></div><p> Well today it happened, Our first major problem using samba. Our samba PDC server has been hosting 3 TB of data to our 500+ users [Windows NT/XP] for the last 3 years using samba, no problem. diff --git a/docs/htmldocs/troubleshooting.html b/docs/htmldocs/troubleshooting.html index 582beeb6b0..b43083fdd1 100644 --- a/docs/htmldocs/troubleshooting.html +++ b/docs/htmldocs/troubleshooting.html @@ -1 +1,2 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartV.Troubleshooting</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool"><link rel="next" href="diagnosis.html" title="Chapter33.The Samba checklist"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartV.Troubleshooting</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="SWAT.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="diagnosis.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="troubleshooting"></a>Troubleshooting</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>33. <a href="diagnosis.html">The Samba checklist</a></dt><dd><dl><dt><a href="diagnosis.html#id3006072">Introduction</a></dt><dt><a href="diagnosis.html#id3007931">Assumptions</a></dt><dt><a href="diagnosis.html#id3008108">The tests</a></dt><dt><a href="diagnosis.html#id3009283">Still having troubles?</a></dt></dl></dd><dt>34. <a href="problems.html">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="problems.html#id3010907">Diagnostics tools</a></dt><dt><a href="problems.html#id3011048">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="problems.html#id3011333">Useful URLs</a></dt><dt><a href="problems.html#id3011378">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id3011530">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="bugreport.html">Reporting Bugs</a></dt><dd><dl><dt><a href="bugreport.html#id3012269">Introduction</a></dt><dt><a href="bugreport.html#id3012491">General info</a></dt><dt><a href="bugreport.html#id3012528">Debug levels</a></dt><dt><a href="bugreport.html#id3012670">Internal errors</a></dt><dt><a href="bugreport.html#id3012778">Attaching to a running process</a></dt><dt><a href="bugreport.html#id3012825">Patches</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="SWAT.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="diagnosis.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter32.SWAT - The Samba Web Administration Tool</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter33.The Samba checklist</td></tr></table></div></body></html> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartV.Troubleshooting</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool"><link rel="next" href="diagnosis.html" title="Chapter33.The Samba checklist"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartV.Troubleshooting</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="SWAT.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="diagnosis.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="troubleshooting"></a>Troubleshooting</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>33. <a href="diagnosis.html">The Samba checklist</a></dt><dd><dl><dt><a href="diagnosis.html#id3003655">Introduction</a></dt><dt><a href="diagnosis.html#id3003689">Assumptions</a></dt><dt><a href="diagnosis.html#id3003861">The tests</a></dt><dt><a href="diagnosis.html#id3007413">Still having troubles?</a></dt></dl></dd><dt>34. <a href="problems.html">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="problems.html#id3008806">Diagnostics tools</a></dt><dt><a href="problems.html#id3007532">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="problems.html#id3007815">Useful URLs</a></dt><dt><a href="problems.html#id3007859">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id3008012">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="bugreport.html">Reporting Bugs</a></dt><dd><dl><dt><a href="bugreport.html#id3010326">Introduction</a></dt><dt><a href="bugreport.html#id3010385">General info</a></dt><dt><a href="bugreport.html#id3010421">Debug levels</a></dt><dt><a href="bugreport.html#id3008517">Internal errors</a></dt><dt><a href="bugreport.html#id3008625">Attaching to a running process</a></dt><dt><a href="bugreport.html#id3008127">Patches</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="SWAT.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="diagnosis.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter32.SWAT - The Samba Web Administration Tool</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter33.The Samba checklist</td></tr></table></div></body></html> diff --git a/docs/htmldocs/type.html b/docs/htmldocs/type.html index 209c177a0b..cc0a2583e5 100644 --- a/docs/htmldocs/type.html +++ b/docs/htmldocs/type.html @@ -1,9 +1,10 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartII.Server Configuration Basics</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="FastStart.html" title="Chapter3.Fast Start for the Impatient"><link rel="next" href="ServerType.html" title="Chapter4.Server Types and Security Modes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartII.Server Configuration Basics</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FastStart.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="ServerType.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="type"></a>Server Configuration Basics</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2886812"></a>First Steps in Server Configuration</h1></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartII.Server Configuration Basics</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="FastStart.html" title="Chapter3.Fast Start for the Impatient"><link rel="next" href="ServerType.html" title="Chapter4.Server Types and Security Modes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartII.Server Configuration Basics</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FastStart.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="ServerType.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="type"></a>Server Configuration Basics</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2886408"></a>First Steps in Server Configuration</h1></div></div><div></div></div><p> Samba can operate in various modes within SMB networks. This HOWTO section contains information on configuring samba to function as the type of server your network requires. Please read this section carefully. -</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>4. <a href="ServerType.html">Server Types and Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2888767">Features and Benefits</a></dt><dt><a href="ServerType.html#id2888862">Server Types</a></dt><dt><a href="ServerType.html#id2888947">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2889062">User Level Security</a></dt><dt><a href="ServerType.html#id2889195">Share Level Security</a></dt><dt><a href="ServerType.html#id2889317">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2889568">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2889655">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2889880">Seamless Windows Network Integration</a></dt><dt><a href="ServerType.html#id2890056">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2890084">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2890117">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2890146">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2890179">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="samba-pdc.html">Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2891986">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2892290">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2892306">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2892517">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2892837">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2893136">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2893157">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893173">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2893499">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2893607">Common Problems and Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893614">I cannot include a '$' in a machine name</a></dt><dt><a href="samba-pdc.html#id2893653">I get told "You already have a connection to the Domain...." +</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>4. <a href="ServerType.html">Server Types and Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2889453">Features and Benefits</a></dt><dt><a href="ServerType.html#id2889545">Server Types</a></dt><dt><a href="ServerType.html#id2889626">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2886055">User Level Security</a></dt><dt><a href="ServerType.html#id2886188">Share Level Security</a></dt><dt><a href="ServerType.html#id2887258">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887500">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887583">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2887808">Seamless Windows Network Integration</a></dt><dt><a href="ServerType.html#id2887985">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2888013">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2888046">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2888075">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2889987">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="samba-pdc.html">Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2892619">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2890215">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2890230">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2890429">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2890744">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2891040">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2891062">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2891077">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2893804">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2893909">Common Problems and Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893916">I cannot include a '$' in a machine name</a></dt><dt><a href="samba-pdc.html#id2893954">I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.</a></dt><dt><a href="samba-pdc.html#id2893703">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2893773">The machine trust account for this computer either does not -exist or is not accessible.</a></dt><dt><a href="samba-pdc.html#id2893836">When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.</a></dt><dt><a href="samba-pdc.html#id2893863">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></dd><dt>6. <a href="samba-bdc.html">Backup Domain Control</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896028">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2896201">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896230">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2896450">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2896471">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2896497">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2896542">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896645">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2896706">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896719">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2896750">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2896783">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2896828">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="domain-member.html">Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2897897">Features and Benefits</a></dt><dt><a href="domain-member.html#id2898012">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2898188">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2898440">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2898636">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2898699">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2898901">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2899283">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2899424">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2899508">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2899872">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2899892">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2899919">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2899951">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="StandAloneServer.html">Stand-Alone Servers</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2902304">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2902501">Background</a></dt><dt><a href="StandAloneServer.html#id2902573">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2902588">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#id2902638">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2902852">Common Errors</a></dt></dl></dd><dt>9. <a href="ClientConfig.html">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="ClientConfig.html#id2901966">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="FastStart.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ServerType.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter3.Fast Start for the Impatient</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter4.Server Types and Security Modes</td></tr></table></div></body></html> +existing set.." when creating a machine trust account.</a></dt><dt><a href="samba-pdc.html#id2894004">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2894075">The machine trust account for this computer either does not +exist or is not accessible.</a></dt><dt><a href="samba-pdc.html#id2894138">When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.</a></dt><dt><a href="samba-pdc.html#id2894165">Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"</a></dt></dl></dd></dl></dd><dt>6. <a href="samba-bdc.html">Backup Domain Control</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896206">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2896370">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896399">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2894362">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2894383">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2894406">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894432">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894534">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894584">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894597">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2894629">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2894662">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2894707">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="domain-member.html">Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2895232">Features and Benefits</a></dt><dt><a href="domain-member.html#id2894803">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2894963">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2896748">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2896944">"On-the-Fly" Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2897000">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2897196">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2899872">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2900011">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2900094">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2900442">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2900464">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2900491">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2900523">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="StandAloneServer.html">Stand-Alone Servers</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2901965">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2902003">Background</a></dt><dt><a href="StandAloneServer.html#id2902071">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2900673">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#id2900721">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2900933">Common Errors</a></dt></dl></dd><dt>9. <a href="ClientConfig.html">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="ClientConfig.html#id2901302">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="FastStart.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ServerType.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter3.Fast Start for the Impatient</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter4.Server Types and Security Modes</td></tr></table></div></body></html> diff --git a/docs/htmldocs/unicode.html b/docs/htmldocs/unicode.html index a971602e81..58adb5c993 100644 --- a/docs/htmldocs/unicode.html +++ b/docs/htmldocs/unicode.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter27.Unicode/Charsets</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba"><link rel="next" href="Backup.html" title="Chapter28.Samba Backup Techniques"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter27.Unicode/Charsets</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="integrate-ms-networks.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="Backup.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unicode"></a>Chapter27.Unicode/Charsets</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">TAKAHASHI</span> <span class="surname">Motonobu</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:monyo@home.monyo.com">monyo@home.monyo.com</a>></tt></p></div></div></div></div><div><p class="pubdate">25 March 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="unicode.html#id3001913">Features and Benefits</a></dt><dt><a href="unicode.html#id3002114">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id3002184">Samba and charsets</a></dt><dt><a href="unicode.html#id3002284">Conversion from old names</a></dt><dt><a href="unicode.html#id3002329">Japanese charsets</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001913"></a>Features and Benefits</h2></div></div><div></div></div><p> +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter27.Unicode/Charsets</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba"><link rel="next" href="Backup.html" title="Chapter28.Samba Backup Techniques"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter27.Unicode/Charsets</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="integrate-ms-networks.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="Backup.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unicode"></a>Chapter27.Unicode/Charsets</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">TAKAHASHI</span> <span class="surname">Motonobu</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:monyo@home.monyo.com">monyo@home.monyo.com</a>></tt></p></div></div></div></div><div><p class="pubdate">25 March 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="unicode.html#id2997125">Features and Benefits</a></dt><dt><a href="unicode.html#id2997167">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id2997235">Samba and charsets</a></dt><dt><a href="unicode.html#id2997336">Conversion from old names</a></dt><dt><a href="unicode.html#id2997382">Japanese charsets</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997125"></a>Features and Benefits</h2></div></div><div></div></div><p> Every industry eventually matures. One of the great areas of maturation is in the focus that has been given over the past decade to make it possible for anyone anywhere to use a computer. It has not always been that way, in fact, not so long @@ -13,7 +14,7 @@ special mention. For more information about Openi18n please refer to: Samba-2.x supported a single locale through a mechanism called <span class="emphasis"><em>codepages</em></span>. Samba-3 is destined to become a truly trans-global file and printer sharing platform. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3002114"></a>What are charsets and unicode?</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997167"></a>What are charsets and unicode?</h2></div></div><div></div></div><p> Computers communicate in numbers. In texts, each number will be translated to a corresponding letter. The meaning that will be assigned to a certain number depends on the <span class="emphasis"><em>character set(charset) @@ -40,7 +41,7 @@ communicating. negotiating the charset to be used in the smb protocol. Thus, you have to make sure you are using the same charset when talking to an old client. Newer clients (Windows NT, 2K, XP) talk unicode over the wire. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3002184"></a>Samba and charsets</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997235"></a>Samba and charsets</h2></div></div><div></div></div><p> As of samba 3.0, samba can (and will) talk unicode over the wire. Internally, samba knows of three kinds of character sets: </p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>unix charset</tt></i></span></dt><dd><p> @@ -54,14 +55,14 @@ samba knows of three kinds of character sets: The default depends on the charsets you have installed on your system. Run <b class="command">testparm -v | grep "dos charset"</b> to see what the default is on your system. - </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3002284"></a>Conversion from old names</h2></div></div><div></div></div><p>Because previous samba versions did not do any charset conversion, + </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997336"></a>Conversion from old names</h2></div></div><div></div></div><p>Because previous samba versions did not do any charset conversion, characters in filenames are usually not correct in the unix charset but only for the local charset used by the DOS/Windows clients.</p><p>The following script from Steve Langasek converts all filenames from CP850 to the iso8859-15 charset.</p><p> <tt class="prompt">#</tt><b class="userinput"><tt>find <i class="replaceable"><tt>/path/to/share</tt></i> -type f -exec bash -c 'CP="{}"; ISO=`echo -n "$CP" | iconv -f cp850 \ -t iso8859-15`; if [ "$CP" != "$ISO" ]; then mv "$CP" "$ISO"; fi' \; </tt></b> -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3002329"></a>Japanese charsets</h2></div></div><div></div></div><p>Samba doesn't work correctly with Japanese charsets yet. Here are +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997382"></a>Japanese charsets</h2></div></div><div></div></div><p>Samba doesn't work correctly with Japanese charsets yet. Here are points of attention when setting it up:</p><div class="itemizedlist"><ul type="disc"><li><p>You should set <i class="parameter"><tt>mangling method = hash</tt></i></p></li><li><p>There are various iconv() implementations around and not all of them work equally well. glibc2's iconv() has a critical problem diff --git a/docs/htmldocs/upgrading-to-3.0.html b/docs/htmldocs/upgrading-to-3.0.html index ac559fa129..16272d0cd4 100644 --- a/docs/htmldocs/upgrading-to-3.0.html +++ b/docs/htmldocs/upgrading-to-3.0.html @@ -1,10 +1,11 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="migration.html" title="PartIV.Migration and Updating"><link rel="next" href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="migration.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="NT4Migration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="upgrading-to-3.0"></a>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">25 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="upgrading-to-3.0.html#id3001684">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id3001709">Obsolete configuration options</a></dt><dt><a href="upgrading-to-3.0.html#id3003319">Password Backend</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001684"></a>Charsets</h2></div></div><div></div></div><p>You might experience problems with special characters +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="migration.html" title="PartIV.Migration and Updating"><link rel="next" href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="migration.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="NT4Migration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="upgrading-to-3.0"></a>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div></div><div><p class="pubdate">25 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="upgrading-to-3.0.html#id3001143">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id3001165">Obsolete configuration options</a></dt><dt><a href="upgrading-to-3.0.html#id3001219">Password Backend</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001143"></a>Charsets</h2></div></div><div></div></div><p>You might experience problems with special characters when communicating with old DOS clients. Codepage support has changed in samba 3.0. Read the chapter <a href="unicode.html" title="Chapter27.Unicode/Charsets">Unicode support</a> for details. -</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001709"></a>Obsolete configuration options</h2></div></div><div></div></div><p> +</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001165"></a>Obsolete configuration options</h2></div></div><div></div></div><p> In 3.0, the following configuration options have been removed. -</p><table class="simplelist" border="0" summary="Simple list"><tr><td>printer driver (replaced by new driver procedures) </td></tr><tr><td>printer driver file (replaced by new driver procedures)</td></tr><tr><td>printer driver location (replaced by new driver procedures)</td></tr><tr><td>use rhosts</td></tr><tr><td>postscript</td></tr><tr><td>client code page (replaced by dos charset)</td></tr><tr><td>vfs path</td></tr><tr><td>vfs options</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003319"></a>Password Backend</h2></div></div><div></div></div><p> +</p><table class="simplelist" border="0" summary="Simple list"><tr><td>printer driver (replaced by new driver procedures) </td></tr><tr><td>printer driver file (replaced by new driver procedures)</td></tr><tr><td>printer driver location (replaced by new driver procedures)</td></tr><tr><td>use rhosts</td></tr><tr><td>postscript</td></tr><tr><td>client code page (replaced by dos charset)</td></tr><tr><td>vfs path</td></tr><tr><td>vfs options</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001219"></a>Password Backend</h2></div></div><div></div></div><p> Effective with the release of samba-3 it is now imperative that the password backend be correctly defined in smb.conf. </p><p> diff --git a/docs/htmldocs/winbind.html b/docs/htmldocs/winbind.html index 567e882367..b289f5141e 100644 --- a/docs/htmldocs/winbind.html +++ b/docs/htmldocs/winbind.html @@ -1,4 +1,5 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter21.Integrated Logon Support using Winbind</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="VFS.html" title="Chapter20.Stackable VFS modules"><link rel="next" href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter21.Integrated Logon Support using Winbind</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="VFS.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="AdvancedNetworkManagement.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="winbind"></a>Chapter21.Integrated Logon Support using Winbind</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tpot@linuxcare.com.au">tpot@linuxcare.com.au</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Naag</span> <span class="surname">Mummaneni</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:getnag@rediffmail.com">getnag@rediffmail.com</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div><p class="pubdate">27 June 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="winbind.html#id2979695">Features and Benefits</a></dt><dt><a href="winbind.html#id2979724">Introduction</a></dt><dt><a href="winbind.html#id2979795">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2979856">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2979886">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2979914">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2979949">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2979971">Name Service Switch</a></dt><dt><a href="winbind.html#id2980108">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2980179">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2980214">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2980242">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2980271">Introduction</a></dt><dt><a href="winbind.html#id2980346">Requirements</a></dt><dt><a href="winbind.html#id2980438">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2982058">Conclusion</a></dt><dt><a href="winbind.html#id2982077">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979695"></a>Features and Benefits</h2></div></div><div></div></div><p>Integration of UNIX and Microsoft Windows NT through +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter21.Integrated Logon Support using Winbind</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="VFS.html" title="Chapter20.Stackable VFS modules"><link rel="next" href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter21.Integrated Logon Support using Winbind</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="VFS.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="AdvancedNetworkManagement.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="winbind"></a>Chapter21.Integrated Logon Support using Winbind</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tpot@samba.org">tpot@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:tridge@samba.org">tridge@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Naag</span> <span class="surname">Mummaneni</span></h3><div class="affiliation"><div class="address"><p><tt class="email"><<a href="mailto:getnag@rediffmail.com">getnag@rediffmail.com</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>></tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email"><<a href="mailto:jht@samba.org">jht@samba.org</a>></tt></p></div></div></div></div></div><div><p class="pubdate">27 June 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="winbind.html#id2975777">Features and Benefits</a></dt><dt><a href="winbind.html#id2975805">Introduction</a></dt><dt><a href="winbind.html#id2977838">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2977898">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2977929">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2977957">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2977989">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2978012">Name Service Switch</a></dt><dt><a href="winbind.html#id2975323">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2975394">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2975429">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2975457">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2975485">Introduction</a></dt><dt><a href="winbind.html#id2975560">Requirements</a></dt><dt><a href="winbind.html#id2976836">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2981237">Conclusion</a></dt><dt><a href="winbind.html#id2981256">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975777"></a>Features and Benefits</h2></div></div><div></div></div><p>Integration of UNIX and Microsoft Windows NT through a unified logon has been considered a "holy grail" in heterogeneous computing environments for a long time. We present <span class="emphasis"><em>winbind</em></span>, a component of the Samba suite @@ -8,7 +9,7 @@ Service Switch to allow Windows NT domain users to appear and operate as UNIX users on a UNIX machine. This paper describes the winbind system, explaining the functionality it provides, how it is configured, - and how it works internally.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979724"></a>Introduction</h2></div></div><div></div></div><p>It is well known that UNIX and Microsoft Windows NT have + and how it works internally.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975805"></a>Introduction</h2></div></div><div></div></div><p>It is well known that UNIX and Microsoft Windows NT have different models for representing user and group information and use different technologies for implementing them. This fact has made it difficult to integrate the two systems in a satisfactory @@ -29,7 +30,7 @@ tasks for the system administrator when maintaining users and groups on either system. The winbind system provides a simple and elegant solution to all three components of the unified logon - problem.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979795"></a>What Winbind Provides</h2></div></div><div></div></div><p>Winbind unifies UNIX and Windows NT account management by + problem.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2977838"></a>What Winbind Provides</h2></div></div><div></div></div><p>Winbind unifies UNIX and Windows NT account management by allowing a UNIX box to become a full member of a NT domain. Once this is done the UNIX box will see NT users and groups as if they were native UNIX users and groups, allowing the NT domain @@ -53,7 +54,7 @@ to provide authentication via a NT domain to any PAM enabled applications. This capability solves the problem of synchronizing passwords between systems since all passwords are stored in a single - location (on the domain controller).</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979856"></a>Target Uses</h3></div></div><div></div></div><p>Winbind is targeted at organizations that have an + location (on the domain controller).</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2977898"></a>Target Uses</h3></div></div><div></div></div><p>Winbind is targeted at organizations that have an existing NT based domain infrastructure into which they wish to put UNIX workstations or servers. Winbind will allow these organizations to deploy UNIX workstations without having to @@ -63,12 +64,12 @@ be used is as a central part of UNIX based appliances. Appliances that provide file and print services to Microsoft based networks will be able to use Winbind to provide seamless integration of - the appliance into the domain.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979886"></a>How Winbind Works</h2></div></div><div></div></div><p>The winbind system is designed around a client/server + the appliance into the domain.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2977929"></a>How Winbind Works</h2></div></div><div></div></div><p>The winbind system is designed around a client/server architecture. A long running <b class="command">winbindd</b> daemon listens on a UNIX domain socket waiting for requests to arrive. These requests are generated by the NSS and PAM clients and processed sequentially.</p><p>The technologies used to implement winbind are described - in detail below.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979914"></a>Microsoft Remote Procedure Calls</h3></div></div><div></div></div><p>Over the last few years, efforts have been underway + in detail below.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2977957"></a>Microsoft Remote Procedure Calls</h3></div></div><div></div></div><p>Over the last few years, efforts have been underway by various Samba Team members to decode various aspects of the Microsoft Remote Procedure Call (MSRPC) system. This system is used for most network related operations between @@ -81,7 +82,7 @@ users or groups. Other MSRPC calls can be used to authenticate NT domain users and to change user passwords. By directly querying a Windows PDC for user and group information, winbind maps the - NT account information onto UNIX user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979949"></a>Microsoft Active Directory Services</h3></div></div><div></div></div><p> + NT account information onto UNIX user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2977989"></a>Microsoft Active Directory Services</h3></div></div><div></div></div><p> Since late 2001, Samba has gained the ability to interact with Microsoft Windows 2000 using its 'Native Mode' protocols, rather than the NT4 RPC services. @@ -90,7 +91,7 @@ same way as a Win2k client would, and in so doing provide a much more efficient and effective winbind implementation. - </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979971"></a>Name Service Switch</h3></div></div><div></div></div><p>The Name Service Switch, or NSS, is a feature that is + </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978012"></a>Name Service Switch</h3></div></div><div></div></div><p>The Name Service Switch, or NSS, is a feature that is present in many UNIX operating systems. It allows system information such as hostnames, mail aliases and user information to be resolved from different sources. For example, a standalone @@ -127,7 +128,7 @@ passwd: files example is to put <tt class="filename">libnss_winbind.so</tt> in <tt class="filename">/lib/</tt> then add "winbind" into <tt class="filename">/etc/nsswitch.conf</tt> at the appropriate place. The C library will then call Winbind to - resolve user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980108"></a>Pluggable Authentication Modules</h3></div></div><div></div></div><p>Pluggable Authentication Modules, also known as PAM, + resolve user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975323"></a>Pluggable Authentication Modules</h3></div></div><div></div></div><p>Pluggable Authentication Modules, also known as PAM, is a system for abstracting authentication and authorization technologies. With a PAM module it is possible to specify different authentication methods for different system applications without @@ -152,7 +153,7 @@ passwd: files example is copied to <tt class="filename">/lib/security/</tt> and the PAM control files for relevant services are updated to allow authentication via winbind. See the PAM documentation - for more details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980179"></a>User and Group ID Allocation</h3></div></div><div></div></div><p>When a user or group is created under Windows NT + for more details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975394"></a>User and Group ID Allocation</h3></div></div><div></div></div><p>When a user or group is created under Windows NT is it allocated a numerical relative identifier (RID). This is slightly different to UNIX which has a range of numbers that are used to identify users, and the same range in which to identify @@ -165,7 +166,7 @@ passwd: files example time, winbind will have mapped all Windows NT users and groups to UNIX user ids and group ids.</p><p>The results of this mapping are stored persistently in an ID mapping database held in a tdb database). This ensures that - RIDs are mapped to UNIX IDs in a consistent way.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980214"></a>Result Caching</h3></div></div><div></div></div><p>An active system can generate a lot of user and group + RIDs are mapped to UNIX IDs in a consistent way.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975429"></a>Result Caching</h3></div></div><div></div></div><p>An active system can generate a lot of user and group name lookups. To reduce the network cost of these lookups winbind uses a caching scheme based on the SAM sequence number supplied by NT domain controllers. User or group information returned @@ -176,14 +177,14 @@ passwd: files example the PDC and compared against the sequence number of the cached entry. If the sequence numbers do not match, then the cached information is discarded and up to date information is requested directly - from the PDC.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2980242"></a>Installation and Configuration</h2></div></div><div></div></div><p> + from the PDC.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975457"></a>Installation and Configuration</h2></div></div><div></div></div><p> Many thanks to John Trostel <a href="mailto:jtrostel@snapserver.com" target="_top">jtrostel@snapserver.com</a> for providing the HOWTO for this section. </p><p> This HOWTO describes how to get winbind services up and running to control access and authenticate users on your Linux box using the winbind services which come with SAMBA 3.0. -</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980271"></a>Introduction</h3></div></div><div></div></div><p> +</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975485"></a>Introduction</h3></div></div><div></div></div><p> This section describes the procedures used to get winbind up and running on a RedHat 7.1 system. Winbind is capable of providing access and authentication control for Windows Domain users through an NT @@ -208,7 +209,7 @@ somewhat to fit the way your distribution works. SAMBA server, this HOWTO is for you. That said, I am no NT or PAM expert, so you may find a better or easier way to accomplish these tasks. - </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980346"></a>Requirements</h3></div></div><div></div></div><p> + </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975560"></a>Requirements</h3></div></div><div></div></div><p> If you have a Samba configuration file that you are currently using... <span class="emphasis"><em>BACK IT UP!</em></span> If your system already uses PAM, <span class="emphasis"><em>back up the <tt class="filename">/etc/pam.d</tt> directory @@ -235,7 +236,7 @@ winbind modules, you should have at least the pam libraries resident on your system. For recent RedHat systems (7.1, for instance), that means <tt class="filename">pam-0.74-22</tt>. For best results, it is helpful to also install the development packages in <tt class="filename">pam-devel-0.74-22</tt>. -</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980438"></a>Testing Things Out</h3></div></div><div></div></div><p> +</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2976836"></a>Testing Things Out</h3></div></div><div></div></div><p> Before starting, it is probably best to kill off all the SAMBA related daemons running on your server. Kill off all <span class="application">smbd</span>, <span class="application">nmbd</span>, and <span class="application">winbindd</span> processes that may @@ -246,7 +247,7 @@ services, several pam libraries, and the <tt class="filename">/usr/doc</tt> and <tt class="filename">/usr/man</tt> entries for pam. Winbind built better in SAMBA if the pam-devel package was also installed. This package includes the header files needed to compile pam-aware applications. -</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980500"></a>Configure and compile SAMBA</h4></div></div><div></div></div><p> +</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2976898"></a>Configure and compile SAMBA</h4></div></div><div></div></div><p> The configuration and compilation of SAMBA is pretty straightforward. The first three steps may not be necessary depending upon whether or not you have previously built the Samba binaries. @@ -261,15 +262,15 @@ whether or not you have previously built the Samba binaries. This will, by default, install SAMBA in <tt class="filename">/usr/local/samba</tt>. See the main SAMBA documentation if you want to install SAMBA somewhere else. It will also build the winbindd executable and libraries. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980613"></a>Configure <tt class="filename">nsswitch.conf</tt> and the +</p></div><div xmlns:ns74="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2977010"></a>Configure <tt class="filename">nsswitch.conf</tt> and the winbind libraries on Linux and Solaris</h4></div></div><div></div></div><p> The libraries needed to run the <span class="application">winbindd</span> daemon through nsswitch need to be copied to their proper locations, so -</p><p> -</p><pre class="screen"> +</p><ns74:p> +</ns74:p><pre class="screen"> <tt class="prompt">root# </tt><b class="userinput"><tt>cp ../samba/source/nsswitch/libnss_winbind.so /lib</tt></b> -</pre><p> -</p><p> +</pre><ns74:p> +</ns74:p><p> I also found it necessary to make the following symbolic link: </p><p> <tt class="prompt">root# </tt> <b class="userinput"><tt>ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2</tt></b> @@ -296,7 +297,7 @@ is faster (and you don't need to reboot) if you do it manually: </p><p> This makes <tt class="filename">libnss_winbind</tt> available to winbindd and echos back a check to you. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980820"></a>NSS Winbind on AIX</h4></div></div><div></div></div><p>(This section is only for those running AIX)</p><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2977217"></a>NSS Winbind on AIX</h4></div></div><div></div></div><p>(This section is only for those running AIX)</p><p> The winbind AIX identification module gets built as libnss_winbind.so in the nsswitch directory of the samba source. This file can be copied to /usr/lib/security, and the AIX naming convention would indicate that it @@ -316,7 +317,7 @@ Programming Concepts for AIX": <a href="http://publibn.boulder.ibm.com/doc_ Chapter 18. Loadable Authentication Module Programming Interface</a> and more information on administering the modules at <a href="http://publibn.boulder.ibm.com/doc_link/en_US/a_doc_lib/aixbman/baseadmn/iandaadmin.htm" target="_top"> "System Management Guide: Operating System and Devices"</a>. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980900"></a>Configure smb.conf</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2977288"></a>Configure smb.conf</h4></div></div><div></div></div><p> Several parameters are needed in the smb.conf file to control the behavior of <span class="application">winbindd</span>. Configure <tt class="filename">smb.conf</tt> These are described in more detail in @@ -338,7 +339,7 @@ include the following entries in the [global] section: # give winbind users a real shell (only needed if they have telnet access) <a href="winbindd.8.html#TEMPLATEHOMEDIR" target="_top">template homedir</a> = /home/winnt/%D/%U <a href="winbindd.8.html#TEMPLATESHELL" target="_top">template shell</a> = /bin/bash -</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981017"></a>Join the SAMBA server to the PDC domain</h4></div></div><div></div></div><p> +</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2977402"></a>Join the SAMBA server to the PDC domain</h4></div></div><div></div></div><p> Enter the following command to make the SAMBA server join the PDC domain, where <i class="replaceable"><tt>DOMAIN</tt></i> is the name of your Windows domain and <i class="replaceable"><tt>Administrator</tt></i> is @@ -349,7 +350,7 @@ a domain user who has administrative privileges in the domain. The proper response to the command should be: "Joined the domain <i class="replaceable"><tt>DOMAIN</tt></i>" where <i class="replaceable"><tt>DOMAIN</tt></i> is your DOMAIN name. -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981071"></a>Start up the winbindd daemon and test it!</h4></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980297"></a>Start up the winbindd daemon and test it!</h4></div></div><div></div></div><p> Eventually, you will want to modify your smb startup script to automatically invoke the winbindd daemon when the other parts of SAMBA start, but it is possible to test out just the winbind @@ -421,7 +422,7 @@ directories and default shells. The same thing can be done for groups with the command </p><p> <tt class="prompt">root# </tt><b class="userinput"><tt>getent group</tt></b> -</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981312"></a>Fix the init.d startup scripts</h4></div></div><div></div></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2981320"></a>Linux</h5></div></div><div></div></div><p> +</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980538"></a>Fix the init.d startup scripts</h4></div></div><div></div></div><div xmlns:ns75="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2980545"></a>Linux</h5></div></div><div></div></div><p> The <span class="application">winbindd</span> daemon needs to start up after the <span class="application">smbd</span> and <span class="application">nmbd</span> daemons are running. To accomplish this task, you need to modify the startup scripts of your system. @@ -452,18 +453,18 @@ start() { touch /var/lock/subsys/smb || RETVAL=1 return $RETVAL } -</pre><p>If you would like to run winbindd in dual daemon mode, replace +</pre><ns75:p>If you would like to run winbindd in dual daemon mode, replace the line -</p><pre class="programlisting"> +</ns75:p><pre class="programlisting"> daemon /usr/local/samba/bin/winbindd -</pre><p> +</pre><ns75:p> in the example above with: -</p><pre class="programlisting"> +</ns75:p><pre class="programlisting"> daemon /usr/local/samba/bin/winbindd -B -</pre><p>. -</p><p> +</pre><ns75:p>. +</ns75:p><p> The 'stop' function has a corresponding entry to shut down the services and looks like this: </p><pre class="programlisting"> @@ -487,7 +488,7 @@ stop() { echo "" return $RETVAL } -</pre></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2981482"></a>Solaris</h5></div></div><div></div></div><p>Winbind doesn't work on Solaris 9, see the <a href="Portability.html#winbind-solaris9" title="Winbind on Solaris 9">Portability</a> chapter for details.</p><p>On Solaris, you need to modify the +</pre></div><div xmlns:ns76="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2980690"></a>Solaris</h5></div></div><div></div></div><p>Winbind doesn't work on Solaris 9, see the <a href="Portability.html#winbind-solaris9" title="Winbind on Solaris 9">Portability</a> chapter for details.</p><p>On Solaris, you need to modify the <tt class="filename">/etc/init.d/samba.server</tt> startup script. It usually only starts smbd and nmbd but should now start winbindd too. If you have samba installed in <tt class="filename">/usr/local/samba/bin</tt>, @@ -539,22 +540,22 @@ the file could contains something like this: echo "Usage: /etc/init.d/samba.server { start | stop }" ;; esac -</pre><p> +</pre><ns76:p> Again, if you would like to run samba in dual daemon mode, replace -</p><pre class="programlisting"> +</ns76:p><pre class="programlisting"> /usr/local/samba/bin/winbindd -</pre><p> +</pre><ns76:p> in the script above with: -</p><pre class="programlisting"> +</ns76:p><pre class="programlisting"> /usr/local/samba/bin/winbindd -B -</pre><p> -</p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2981600"></a>Restarting</h5></div></div><div></div></div><p> +</pre><ns76:p> +</ns76:p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2980779"></a>Restarting</h5></div></div><div></div></div><p> If you restart the <span class="application">smbd</span>, <span class="application">nmbd</span>, and <span class="application">winbindd</span> daemons at this point, you should be able to connect to the samba server as a domain member just as if you were a local user. -</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981637"></a>Configure Winbind and PAM</h4></div></div><div></div></div><p> +</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980816"></a>Configure Winbind and PAM</h4></div></div><div></div></div><p> If you have made it this far, you know that winbindd and samba are working together. If you want to use winbind to provide authentication for other services, keep reading. The pam configuration files need to be altered in @@ -574,7 +575,7 @@ your other pam security modules. On my RedHat system, this was the modules reside in <tt class="filename">/usr/lib/security</tt>. </p><p> <tt class="prompt">root# </tt><b class="userinput"><tt>cp ../samba/source/nsswitch/pam_winbind.so /lib/security</tt></b> -</p><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2981743"></a>Linux/FreeBSD-specific PAM configuration</h5></div></div><div></div></div><p> +</p><div xmlns:ns77="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2980922"></a>Linux/FreeBSD-specific PAM configuration</h5></div></div><div></div></div><p> The <tt class="filename">/etc/pam.d/samba</tt> file does not need to be changed. I just left this file as it was: </p><pre class="programlisting"> @@ -630,14 +631,14 @@ same way. It now looks like this: password required /lib/security/pam_stack.so service=system-auth session required /lib/security/pam_stack.so service=system-auth session optional /lib/security/pam_console.so -</pre><p> -In this case, I added the </p><pre class="programlisting">auth sufficient /lib/security/pam_winbind.so</pre><p> -lines as before, but also added the </p><pre class="programlisting">required pam_securetty.so</pre><p> +</pre><ns77:p> +In this case, I added the </ns77:p><pre class="programlisting">auth sufficient /lib/security/pam_winbind.so</pre><ns77:p> +lines as before, but also added the </ns77:p><pre class="programlisting">required pam_securetty.so</pre><ns77:p> above it, to disallow root logins over the network. I also added a <b class="command">sufficient /lib/security/pam_unix.so use_first_pass</b> line after the <b class="command">winbind.so</b> line to get rid of annoying double prompts for passwords. -</p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2981966"></a>Solaris-specific configuration</h5></div></div><div></div></div><p> +</ns77:p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2981145"></a>Solaris-specific configuration</h5></div></div><div></div></div><p> The /etc/pam.conf needs to be changed. I changed this file so that my Domain users can logon both locally as well as telnet.The following are the changes that I made.You can customize the pam.conf file as per your requirements,but @@ -709,12 +710,12 @@ annoying double prompts for passwords. </p><p> Now restart your Samba and try connecting through your application that you configured in the pam.conf. -</p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982058"></a>Conclusion</h2></div></div><div></div></div><p>The winbind system, through the use of the Name Service +</p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981237"></a>Conclusion</h2></div></div><div></div></div><p>The winbind system, through the use of the Name Service Switch, Pluggable Authentication Modules, and appropriate Microsoft RPC calls have allowed us to provide seamless integration of Microsoft Windows NT domain users on a UNIX system. The result is a great reduction in the administrative - cost of running a mixed UNIX and NT network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982077"></a>Common Errors</h2></div></div><div></div></div><p>Winbind has a number of limitations in its current + cost of running a mixed UNIX and NT network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981256"></a>Common Errors</h2></div></div><div></div></div><p>Winbind has a number of limitations in its current released version that we hope to overcome in future releases:</p><div class="itemizedlist"><ul type="disc"><li><p>Winbind is currently only available for the Linux, Solaris and IRIX operating systems, although ports to other operating diff --git a/docs/htmldocs/winbindd.8.html b/docs/htmldocs/winbindd.8.html index c1a64d6a00..10759df47e 100644 --- a/docs/htmldocs/winbindd.8.html +++ b/docs/htmldocs/winbindd.8.html @@ -1,5 +1,5 @@ <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>winbindd</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="winbindd.8"></a><div class="titlepage"><div></div><div></div></div><div class="refnamediv"><h2>Name</h2><p>winbindd — Name Service Switch daemon for resolving names - from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">winbindd</tt> [-F] [-S] [-i] [-B] [-d <debug level>] [-s <smb config file>] [-n]</p></div></div><div class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This program is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p><b class="command">winbindd</b> is a daemon that provides + from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">winbindd</tt> [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]</p></div></div><div xmlns:ns1="" class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This program is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p><b class="command">winbindd</b> is a daemon that provides a service for the Name Service Switch capability that is present in most modern C libraries. The Name Service Switch allows user and system information to be obtained from different databases @@ -26,12 +26,12 @@ the <tt class="filename">passwd(5)</tt> file and used by <b class="command">getpwent(3)</b> functions. </p></dd><dt><span class="term">group</span></dt><dd><p>Group information traditionally stored in the <tt class="filename">group(5)</tt> file and used by - <b class="command">getgrent(3)</b> functions. </p></dd></dl></div><p>For example, the following simple configuration in the + <b class="command">getgrent(3)</b> functions. </p></dd></dl></div><ns1:p>For example, the following simple configuration in the <tt class="filename">/etc/nsswitch.conf</tt> file can be used to initially resolve user and group information from <tt class="filename">/etc/passwd </tt> and <tt class="filename">/etc/group</tt> and then from the Windows NT server. -</p><pre class="programlisting"> +</ns1:p><pre class="programlisting"> passwd: files winbind group: files winbind </pre><p>The following simple configuration in the @@ -88,11 +88,10 @@ never removed by the client. slower. The results will however be more accurate, since results from the cache might not be up-to-date. This might also temporarily hang winbindd if the DC doesn't respond. - </p></dd><dt><span class="term">-B</span></dt><dd><p>Dual daemon mode. This means winbindd will run - as 2 threads. The first will answer all requests from the cache, - thus making responses to clients faster. The other will - update the cache for the query that the first has just responded. - Advantage of this is that responses stay accurate and are faster. + </p></dd><dt><span class="term">-Y</span></dt><dd><p>Single daemon mode. This means winbindd will run + as a single process (the mode of operation in Samba 2.2). Winbindd's + default behavior is to launch a child process that is responsible for + updating expired cache entries. </p></dd></dl></div></div><div class="refsect1" lang="en"><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned a relative id (rid) which is unique for the domain when the user or group is created. To convert the Windows NT user or group @@ -119,16 +118,16 @@ never removed by the client. <i class="parameter"><tt>winbind enum groups</tt></i></a></p></li><li><p><a href="smb.conf.5.html#TEMPLATEHOMEDIR" target="_top"> <i class="parameter"><tt>template homedir</tt></i></a></p></li><li><p><a href="smb.conf.5.html#TEMPLATESHELL" target="_top"> <i class="parameter"><tt>template shell</tt></i></a></p></li><li><p><a href="smb.conf.5.html#WINBINDUSEDEFAULTDOMAIN" target="_top"> - <i class="parameter"><tt>winbind use default domain</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>EXAMPLE SETUP</h2><p>To setup winbindd for user and group lookups plus + <i class="parameter"><tt>winbind use default domain</tt></i></a></p></li></ul></div></div><div xmlns:ns2="" class="refsect1" lang="en"><h2>EXAMPLE SETUP</h2><p>To setup winbindd for user and group lookups plus authentication from a domain controller use something like the - following setup. This was tested on a RedHat 6.2 Linux box. </p><p>In <tt class="filename">/etc/nsswitch.conf</tt> put the + following setup. This was tested on a RedHat 6.2 Linux box. </p><ns2:p>In <tt class="filename">/etc/nsswitch.conf</tt> put the following: -</p><pre class="programlisting"> +</ns2:p><pre class="programlisting"> passwd: files winbind group: files winbind -</pre><p>In <tt class="filename">/etc/pam.d/*</tt> replace the <i class="parameter"><tt> +</pre><ns2:p>In <tt class="filename">/etc/pam.d/*</tt> replace the <i class="parameter"><tt> auth</tt></i> lines with something like this: -</p><pre class="programlisting"> +</ns2:p><pre class="programlisting"> auth required /lib/security/pam_securetty.so auth required /lib/security/pam_nologin.so auth sufficient /lib/security/pam_winbind.so @@ -144,9 +143,9 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok made from <tt class="filename">/lib/libnss_winbind.so</tt> to <tt class="filename">/lib/libnss_winbind.so.2</tt>. If you are using an older version of glibc then the target of the link should be - <tt class="filename">/lib/libnss_winbind.so.1</tt>.</p><p>Finally, setup a <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> containing directives like the + <tt class="filename">/lib/libnss_winbind.so.1</tt>.</p><ns2:p>Finally, setup a <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> containing directives like the following: -</p><pre class="programlisting"> +</ns2:p><pre class="programlisting"> [global] winbind separator = + winbind cache time = 10 diff --git a/docs/manpages/smb.conf.5 b/docs/manpages/smb.conf.5 index 3e0bc555ea..ec77102365 100644 --- a/docs/manpages/smb.conf.5 +++ b/docs/manpages/smb.conf.5 @@ -500,6 +500,14 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu +\fIclient lanman auth\fR + +.TP +\(bu +\fIclient ntlmv2 auth\fR + +.TP +\(bu \fIclient use spnego\fR .TP @@ -516,7 +524,7 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu -\fIdebug level\fR +\fIdebuglevel\fR .TP \(bu @@ -592,6 +600,10 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu +\fIenable rid algorithm\fR + +.TP +\(bu \fIencrypt passwords\fR .TP @@ -772,11 +784,11 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu -\fImangling stack\fR +\fImangled stack\fR .TP \(bu -\fImangling prefix\fR +\fImangle prefix\fR .TP \(bu @@ -868,10 +880,6 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu -\fInon unix account range\fR - -.TP -\(bu \fIntlm auth\fR .TP @@ -1060,10 +1068,6 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu -\fIstat cache size\fR - -.TP -\(bu \fIstrip dot\fR .TP @@ -1080,6 +1084,10 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu +\fItemplate primary group\fR + +.TP +\(bu \fItemplate shell\fR .TP @@ -1148,6 +1156,10 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu +\fIwinbind enable local accounts\fR + +.TP +\(bu \fIwinbind enum groups\fR .TP @@ -1164,11 +1176,15 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu +\fIwinbind trusted domains only\fR + +.TP +\(bu \fIwinbind uid\fR .TP \(bu -\fIwinbind used default domain\fR +\fIwinbind use default domain\fR .TP \(bu @@ -1176,7 +1192,7 @@ Here is a list of all global parameters\&. See the section of each parameter for .TP \(bu -\fIwins partner\fR +\fIwins partners\fR .TP \(bu @@ -1583,6 +1599,10 @@ Here is a list of all service parameters\&. See the section on each parameter fo .TP \(bu +\fIprofile acls\fR + +.TP +\(bu \fIpublic\fR .TP @@ -2084,8 +2104,42 @@ Example: \fBchange share command = /usr/local/bin/addshare\fR .TP +client lanman auth (G) +This parameter determines whether or not \fBsmbclient\fR(8) and other samba client tools will attempt to authenticate itself to servers using the weaker LANMAN password hash\&. If disabled, only server which support NT password hashes (e\&.g\&. Windows NT/2000, Samba, etc\&.\&.\&. but not Windows 95/98) will be able to be connected from the Samba client\&. + + +The LANMAN encrypted response is easily broken, due to it's case-insensitive nature, and the choice of algorithm\&. Clients without Windows 95/98 servers are advised to disable this option\&. + + +Disabling this option will also disable the \fBclient plaintext auth\fR option + + +Likewise, if the \fBclient ntlmv2 auth\fR parameter is enabled, then only NTLMv2 logins will be attempted\&. Not all servers support NTLMv2, and most will require special configuration to us it\&. + + +Default : \fBclient lanman auth = yes\fR + + +.TP +client ntlmv2 auth (G) +This parameter determines whether or not \fBsmbclient\fR(8) will attempt to authenticate itself to servers using the NTLMv2 encrypted password response\&. + + +If enabled, only an NTLMv2 and LMv2 response (both much more secure than earlier versions) will be sent\&. Many servers (including NT4 < SP4, Win9x and Samba 2\&.2) are not compatible with NTLMv2\&. + + +If disabled, an NTLM response (and possibly a LANMAN response) will be sent by the client, depending on the value of \fBclient lanman auth\fR\&. + + +Note that some sites (particularly those following 'best practice' security polices) only allow NTLMv2 responses, and not the weaker LM or NTLM\&. + + +Default : \fBclient ntlmv2 auth = no\fR + + +.TP client use spnego (G) -This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism\&. SPNEGO client support with Sign and Seal is currently broken, so you might want to turn this option off when doing joins to Windows 2003 domains\&. +This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism\&. Default: \fBclient use spnego = yes\fR @@ -2222,7 +2276,7 @@ Default: \fBdebug hires timestamp = no\fR .TP -debug level (G) +debuglevel (G) Synonym for \fI log level\fR\&. @@ -2661,6 +2715,14 @@ Default: \fBdos filetimes = no\fR .TP +enable rid algorithm (G) +This option is used to control whether or not smbd in Samba 3\&.0 should fallback to the algorithm used by Samba 2\&.2 to generate user and group RIDs\&. The longterm development goal is to remove the algorithmic mappings of RIDs altogether, but this has proved to be difficult\&. This parameter is mainly provided so that developers can turn the algorithm on and off and see what breaks\&. This parameter should not be disabled by non-developers because certain features in Samba will fail to work without it\&. + + +Default: \fBenable rid algorithm = <yes>\fR + + +.TP encrypt passwords (G) This boolean controls whether encrypted passwords will be negotiated with the client\&. Note that Windows NT 4\&.0 SP3 and above and also Windows 98 will by default expect encrypted passwords unless a registry entry is changed\&. To use encrypted passwords in Samba see the chapter "User Database" in the Samba HOWTO Collection\&. @@ -3947,7 +4009,7 @@ Default: \fBmangled names = yes\fR .TP -mangling stack (G) +mangled stack (G) This parameter controls the number of mangled names that should be cached in the Samba server \fBsmbd\fR(8)\&. @@ -3967,7 +4029,7 @@ Example: \fBmangled stack = 100\fR .TP -mangling prefix (G) +mangle prefix (G) controls the number of prefix characters from the original name used when generating the mangled names\&. A larger value will give a weaker hash and therefore more name collisions\&. The minimum value is 1 and the maximum value is 6\&. @@ -4452,19 +4514,6 @@ Default: \fBnis homedir = no\fR .TP -non unix account range (G) -The non unix account range parameter specifies the range of 'user ids' that are allocated by the various 'non unix account' passdb backends\&. These backends allow the storage of passwords for users who don't exist in /etc/passwd\&. This is most often used for machine account creation\&. This range of ids should have no existing local or NIS users within it as strange conflicts can occur otherwise\&. - - -These userids never appear on the system and Samba will never 'become' these users\&. They are used only to ensure that the algorithmic RID mapping does not conflict with normal users\&. - -Default: \fBnon unix account range = <empty string>\fR - - -Example: \fBnon unix account range = 10000-20000\fR - - -.TP nt acl support (S) This boolean parameter controls whether \fBsmbd\fR(8) will attempt to map UNIX permissions into Windows NT access control lists\&. This parameter was formally a global parameter in releases prior to 2\&.2\&.2\&. @@ -5145,6 +5194,14 @@ Default :\fBprivate dir = ${prefix}/private\fR .TP +profile acls (S) +This boolean parameter controls whether \fBsmbd\fR(8) This boolean parameter was added to fix the problems that people have been having with storing user profiles on Samba shares from Windows 2000 or Windows XP clients\&. New versions of Windows 2000 or Windows XP service packs do security ACL checking on the owner and ability to write of the profile directory stored on a local workstation when copied from a Samba share\&. When not in domain mode with winbindd then the security info copied onto the local workstation has no meaning to the logged in user (SID) on that workstation so the profile storing fails\&. Adding this parameter onto a share used for profile storage changes two things about the returned Windows ACL\&. Firstly it changes the owner and group owner of all reported files and directories to be BUILTIN\\\\Administrators, BUILTIN\\\\Users respectively (SIDs S-1-5-32-544, S-1-5-32-545)\&. Secondly it adds an ACE entry of "Full Control" to the SID BUILTIN\\\\Users to every returned ACL\&. This will allow any Windows 2000 or XP workstation user to access the profile\&. Note that if you have multiple users logging on to a workstation then in order to prevent them from being able to access each others profiles you must remove the "Bypass traverse checking" advanced user right\&. This will prevent access to other users profile directories as the top level profile directory (named after the user) is created by the workstation profile code and has an ACL restricting entry to the directory tree to the owning user\&. + + +Default: \fBprofile acls = no\fR + + +.TP protocol (G) Synonym for \fImax protocol\fR\&. @@ -5510,11 +5567,9 @@ See also the \fIpassword server\fR parameter and the \fIencrypted passwords\fR p In this mode Samba will try to validate the username/password by passing it to another SMB server, such as an NT box\&. If this fails it will revert to \fBsecurity = user\fR\&. It expects the \fIencrypted passwords\fR parameter to be set to \fByes\fR, unless the remote server does not support them\&. However note that if encrypted passwords have been negotiated then Samba cannot revert back to checking the UNIX password file, it must have a valid \fIsmbpasswd\fR file to check users against\&. See the chapter about the User Database in the Samba HOWTO Collection for details on how to set this up\&. -\fBNote\fR this mode of operation has significant pitfalls, due to the fact that is activly initiates a man-in-the-middle attack on the remote SMB server\&. In particular, this mode of operation can cause significant resource consuption on the PDC, as it must maintain an active connection for the duration of the user's session\&. Furthermore, if this connection is lost, there is no way to reestablish it, and futher authenticaions to the Samba server may fail\&. (From a single client, till it disconnects)\&. - - -\fBNote\fR that from the client's point of view \fBsecurity = server\fR is the same as \fBsecurity = user\fR\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&. +This mode of operation has significant pitfalls, due to the fact that is activly initiates a man-in-the-middle attack on the remote SMB server\&. In particular, this mode of operation can cause significant resource consuption on the PDC, as it must maintain an active connection for the duration of the user's session\&. Furthermore, if this connection is lost, there is no way to reestablish it, and futher authenticaions to the Samba server may fail\&. (From a single client, till it disconnects)\&. +From the client's point of view \fBsecurity = server\fR is the same as \fBsecurity = user\fR\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&. \fBNote\fR that the name of the resource being requested is \fBnot\fR sent to the server until after the server has successfully authenticated the client\&. This is why guest shares don't work in user level security without allowing the server to automatically map unknown users into the \fIguest account\fR\&. See the \fImap to guest\fR parameter for details on doing this\&. @@ -5525,6 +5580,21 @@ See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION\&. See also the \fIpassword server\fR parameter and the \fIencrypted passwords\fR parameter\&. +\fBSECURITY = ADS\fR + + +In this mode, Samba will act as a domain member in an ADS realm\&. To operate in this mode, the machine running Samba will need to have Kerberos installed and configured and Samba will need to be joined to the ADS realm using the net utility\&. + + +Note that this mode does NOT make Samba operate as a Active Directory Domain Controller\&. + + +Read the chapter about Domain Membership in the HOWTO for details\&. + + +See also the \fIads server \fR parameter, the \fIrealm \fR paramter and the \fIencrypted passwords\fR parameter\&. + + Default: \fBsecurity = USER\fR @@ -5836,14 +5906,6 @@ Default: \fBstat cache = yes\fR .TP -stat cache size (G) -This parameter determines the number of entries in the \fIstat cache\fR\&. You should never need to change this parameter\&. - - -Default: \fBstat cache size = 50\fR - - -.TP strict allocate (S) This is a boolean that controls the handling of disk space allocation in the server\&. When this is set to \fByes\fR the server will change from UNIX behaviour of not committing real disk storage blocks when a file is extended to the Windows behaviour of actually forcing the disk system to allocate real storage blocks when a file is created or extended to be a given size\&. In UNIX terminology this means that Samba will stop creating sparse files\&. This can be slow on some systems\&. @@ -5929,6 +5991,14 @@ Default: \fBtemplate homedir = /home/%D/%U\fR .TP +template primary group (G) +This option defines the default primary group for each user created by \fBwinbindd\fR(8)'s local account management functions (similar to the 'add user script')\&. + + +Default: \fBtemplate primary group = nobody\fR + + +.TP template shell (G) When filling out the user information for a Windows NT user, the \fBwinbindd\fR(8) daemon uses this parameter to fill in the login shell for that user\&. @@ -6343,6 +6413,14 @@ Default: \fBwinbind cache type = 15\fR .TP +winbind enable local accounts (G) +This parameter controls whether or not winbindd will act as a stand in replacement for the various account management hooks in smb\&.conf (e\&.g\&. 'add user script')\&. If enabled, winbindd will support the creation of local users and groups as another source of UNIX account information available via getpwnam() or getgrgid(), etc\&.\&.\&. + + +Default: \fBwinbind enable local accounts = yes\fR + + +.TP winbind enum groups (G) On large installations using \fBwinbindd\fR(8) it may be necessary to suppress the enumeration of groups through the \fBsetgrent()\fR, \fBgetgrent()\fR and \fBendgrent()\fR group of system calls\&. If the \fIwinbind enum groups\fR parameter is \fBno\fR, calls to the \fBgetgrent()\fR system call will not return any data\&. @@ -6393,6 +6471,14 @@ Example: \fBwinbind separator = +\fR .TP +winbind trusted domains only (G) +This parameter is designed to allow Samba servers that are members of a Samba controlled domain to use UNIX accounts distributed vi NIS, rsync, or LDAP as the uid's for winbindd users in the hosts primary domain\&. Therefore, the user 'SAMBA\\user1' would be mapped to the account 'user1' in /etc/passwd instead of allocating a new uid for him or her\&. + + +Default: \fBwinbind trusted domains only = <no>\fR + + +.TP winbind uid (G) This parameter is now an alias for \fBidmap uid\fR @@ -6407,7 +6493,7 @@ Example: \fBwinbind uid = 10000-20000\fR .TP -winbind used default domain (G) +winbind use default domain (G) This parameter specifies whether the \fBwinbindd\fR(8) daemon should operate on users without domain component in their username\&. Users without a domain component are treated as is part of the winbindd server's own domain\&. While this does not benifit Windows users, it makes SSH, FTP and e-mail function in a way much closer to the way they would in a native unix system\&. @@ -6442,7 +6528,7 @@ An example script that calls the BIND dynamic DNS update program \fBnsupdate\fR .TP -wins partner (G) +wins partners (G) A space separated list of partners' IP addresses for WINS replication\&. WINS partners are always defined as push/pull partners as defining only one way WINS replication is unreliable\&. WINS replication is currently experimental and unreliable between samba servers\&. diff --git a/docs/manpages/smbcontrol.1 b/docs/manpages/smbcontrol.1 index 44d419f919..718e7d7b1c 100644 --- a/docs/manpages/smbcontrol.1 +++ b/docs/manpages/smbcontrol.1 @@ -196,6 +196,11 @@ drvupgrade Force clients of printers using specified driver to update their local version of the driver\&. Can only be sent to smbd\&. +.TP +reload-config +Force daemon to reload smb\&.conf configuration file\&. Can be sent to \fBsmbd\fR, \fBnmbd\fR, or \fBwinbindd\fR\&. + + .SH "VERSION" .PP diff --git a/docs/manpages/winbindd.8 b/docs/manpages/winbindd.8 index 31ed3ba332..71322decbe 100644 --- a/docs/manpages/winbindd.8 +++ b/docs/manpages/winbindd.8 @@ -23,7 +23,7 @@ winbindd \- Name Service Switch daemon for resolving names from NT servers .SH "SYNOPSIS" .nf -\fBwinbindd\fR [-F] [-S] [-i] [-B] [-d <debug level>] [-s <smb config file>] [-n] +\fBwinbindd\fR [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n] .fi .SH "DESCRIPTION" @@ -127,8 +127,8 @@ Disable caching\&. This means winbindd will always have to wait for a response f .TP --B -Dual daemon mode\&. This means winbindd will run as 2 threads\&. The first will answer all requests from the cache, thus making responses to clients faster\&. The other will update the cache for the query that the first has just responded\&. Advantage of this is that responses stay accurate and are faster\&. +-Y +Single daemon mode\&. This means winbindd will run as a single process (the mode of operation in Samba 2\&.2)\&. Winbindd's default behavior is to launch a child process that is responsible for updating expired cache entries\&. .SH "NAME AND ID RESOLUTION" |